Upgrade Bun to 1.4.4 (Oct 2026 security fixes) #4

Merged

backmeupplz merged 1 commit from bun-1.4.4 into master

2026-10-22 16:58:41 +00:00

backmeupplz commented

2026-10-22 16:46:34 +00:00

(Migrated from github.com)

Bun 1.4.4 ships security fixes for TLS, WebSocket, Bun.serve, Bun.SQL and the package manager (https://bun.com/blog/bun-v1.4.4). Production was on Bun 1.1.43.

Nixpacks gets Bun from nixpkgs, which only has 1.3.13 at our pin, so the setup phase points nixpkgs' bun package at the official 1.4.4 release zip (hash pinned). Remove the override once nixpkgs has bun >= 1.4.4.

Tested locally on Bun 1.4.4: frozen install + the repo's tests/typecheck/build pass.

🤖 Generated with Claude Code

Bun 1.4.4 ships security fixes for TLS, WebSocket, Bun.serve, Bun.SQL and the package manager (https://bun.com/blog/bun-v1.4.4). Production was on Bun 1.1.43. Nixpacks gets Bun from nixpkgs, which only has 1.3.13 at our pin, so the setup phase points nixpkgs' bun package at the official 1.4.4 release zip (hash pinned). Remove the override once nixpkgs has bun >= 1.4.4. Tested locally on Bun 1.4.4: frozen install + the repo's tests/typecheck/build pass. 🤖 Generated with [Claude Code](https://claude.com/claude-code)