Skip to content

Bump Bun to 1.4.4 and cover the branches its coverage exposes - #411

Merged
haydenbleasel merged 3 commits into
mainfrom
dependabot/bun/bun-types-1.4.4
Nov 2, 2026
Merged

haydenbleasel merged 3 commits into
mainfrom
dependabot/bun/bun-types-1.4.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps bun-types from 1.4.2 to 1.4.4.

Release notes

Sourced from bun-types's releases.

Bun v1.4.4

To install Bun v1.4.4

curl -fsSL https://bun.com/install | bash
# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.com/install.ps1|iex"

To upgrade to Bun v1.4.4:

bun upgrade

Read Bun v1.4.4's release notes on Bun's blog

Thanks to 39 contributors!

... (truncated)

Commits
  • a950fc5 Hardening follow-up: fix regressions from #46021 and more crashes (#46270)
  • 9b4284f Hardening: fix crashes across the runtime, bundler, dev server, shell and CLI...
  • 3880151 Move Crypto, TextDecoder, Bun.FileSystemRouter and three more classes t...
  • 5667cd6 sql: fixes for problems found after the consolidation (#45304) (#45711)
  • d0831bc Check published types against the bindgen schemas, honor memLevel and `stra...
  • 017b243 sql: consolidate the open Bun.sql, bun:sqlite and node:sqlite pull requests (...
  • f0c6cbc WebSocket: real closing handshake, one failure path, ws rewritten on native...
  • 21620e2 Define eighteen Bun.* functions with the bindgen (#45450)
  • e6f65f3 install: fix regressions and older bugs found after the package manager conso...
  • 9510e74 install: consolidate the open package manager pull requests (#44968)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@changeset-bot

changeset-bot Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 6040777

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coderabbitai

coderabbitai Bot commented Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 700c81cb-43ba-4905-8c72-6b0868f2bf1c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@socket-security

socket-security Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedbun-types@​1.4.2 ⏵ 1.4.4100100859870

View full report

@haydenbleasel
haydenbleasel force-pushed the dependabot/bun/bun-types-1.4.4 branch from 5329f69 to 1e753f9 Compare November 2, 2026 03:10
@haydenbleasel haydenbleasel changed the title Bump bun-types from 1.4.2 to 1.4.4 Bump Bun to 1.4.4 Nov 2, 2026
@haydenbleasel

Copy link
Copy Markdown
Owner

Rebuilt to move the whole toolchain to Bun 1.4.4 so bun-types matches the runtime: packageManager, every setup-bun pin in CI (deploy and release read packageManager), bun-types, and CONTRIBUTING's minimum.

Move the whole toolchain together so bun-types matches the Bun that runs
it: packageManager, every setup-bun pin in CI (deploy and release read
packageManager), bun-types, and CONTRIBUTING's minimum. The guides that
record the Bun they were tested on keep their 1.4.2 notes.
Bun 1.4.2 counted an unexecuted `continue`, a ternary's untaken arm on
its own line, and some catch bodies as covered; 1.4.4 reports them, which
left 85 never-run lines across 44 files under the per-file 100% gate.

Add tests that drive each reachable branch through the module's exports.
Remove the ones no input can reach, keeping behavior the same:
- network/external audit checks: `probeAll` returns a result for every
  URL it was given, so the missing-result guards go (SAFETY casts, as the
  redirect loop already does).
- `deployment` and `lastModified` schema errors: each union only raises
  the issues its message already covers, so the callbacks become strings.
- config load: a failed parse always yields a diagnostic, so the
  "Invalid Blume config." fallback goes.
- component override resolution: a folder whose `index` exists already
  passes the `existsSync` check above the index probe.
- runtime navigation: with i18n the graph already holds one tree per
  configured locale, so the empty-tree fallback goes.
- link scanning, api-rail attributes, and package-command rendering:
  the regex groups, parser attribute names, and command tables those
  guards checked are always present.
@haydenbleasel
haydenbleasel force-pushed the dependabot/bun/bun-types-1.4.4 branch from 1e753f9 to 243e49d Compare November 2, 2026 03:42
@haydenbleasel haydenbleasel changed the title Bump Bun to 1.4.4 Bump Bun to 1.4.4 and cover the branches its coverage exposes Nov 2, 2026
@haydenbleasel

Copy link
Copy Markdown
Owner

Bun 1.4.4 reports lines that 1.4.2 counted as covered (an unexecuted continue, a ternary's untaken arm on its own line, some catch bodies), which put 44 files under the 100% per-file gate. The second commit adds tests for the reachable branches and removes the ones no input can reach; see its message for each removal. Full test:coverage passes locally on 1.4.4 (6481 pass, 0 fail).

Its config imports blume/reference, which a fresh bun process on a cold
windows-latest runner takes 12-16s to load on both Bun 1.4.2 and 1.4.4
(probed with a throwaway workflow); the suite's warm caches hid that on
1.4.2. Use the 30s timeout the other CLI-spawning tests already use.
@haydenbleasel
haydenbleasel merged commit 16862e1 into main Nov 2, 2026
15 checks passed
@haydenbleasel
haydenbleasel deleted the dependabot/bun/bun-types-1.4.4 branch November 2, 2026 04:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant