Skip to content

Comments

chore(deps): update dependency bun to v1.1.30 [security]#78

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/npm-bun-vulnerability
Open

chore(deps): update dependency bun to v1.1.30 [security]#78
renovate[bot] wants to merge 1 commit intomainfrom
renovate/npm-bun-vulnerability

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jul 24, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
bun (source) 1.1.7 → 1.1.30 age confidence

GitHub Vulnerability Alerts

CVE-2024-21548

Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects.

Release Notes

oven-sh/bun (bun)

v1.1.30: Bun v1.1.30

Compare Source

To install:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.30:

bun upgrade
Read Bun v1.1.30's release notes on Bun's blog
Thanks to 17 contributors!

v1.1.29: Bun v1.1.29

Compare Source

To install:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.29:

bun upgrade
Read Bun v1.1.29's release notes on Bun's blog
Thanks to 3 contributors!

v1.1.28: Bun v1.1.28

Compare Source

To install:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.28:

bun upgrade
Read Bun v1.1.28's release notes on Bun's blog
Thanks to 12 contributors!

v1.1.27: Bun v1.1.27

Compare Source

To install:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.27:

bun upgrade
Read Bun v1.1.27's release notes on Bun's blog
Thanks to 17 contributors!

v1.1.26: Bun v1.1.26

Compare Source

To install:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.26:

bun upgrade
Read Bun v1.1.26's release notes on Bun's blog
Thanks to 3 contributors!

v1.1.25: Bun v1.1.25

Compare Source

To install:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.25:

bun upgrade
Read Bun v1.1.25's release notes on Bun's blog
Thanks to 11 contributors!

v1.1.24: Bun v1.1.24

Compare Source

To install Bun v1.1.24:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.24:

bun upgrade

Bun v1.1.24 fixes a regression introduced in v1.1.23 that caused the net module to throw an error after upgrading from TCP -> TLS.

The tests that would've prevented this regression were being skipped due to a credentials issue after migrating to a new CI provider.

To prevent this regression from recurring, we have ensured tests missing credentials in our CI will always fail.

There are no release notes for this version, please see the release notes for v1.1.23.

Read Bun v1.1.23's release notes on Bun's blog

v1.1.22: Bun v1.1.22

Compare Source

To install Bun v1.1.22:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.22:

bun upgrade
Read Bun v1.1.22's release notes on Bun's blog
Thanks to 11 contributors!
  • @​billywhizz
  • @​cirospaciari
  • @​dariushalipour
  • @​dylan-conway
  • @​Electroid
  • @​guest271314
  • @​huseeiin
  • @​Jarred-Sumner
  • @​m1212e
  • @​nektro
  • @​paperdave
  • @​pythonmcpi

v1.1.21: Bun v1.1.21

Compare Source

To install Bun v1.1.21:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.21:

bun upgrade
Read Bun v1.1.21's release notes on Bun's blog

v1.1.20: Bun v.1.1.20

Compare Source

This release fixes a build issue on macOS in Bun v1.1.19 that caused Node-API symbols to be stripped from the binary There are no release notes; please refer to the Bun v1.1.19 release notes instead.

To install Bun v1.1.20:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.20:

bun upgrade
Read Bun v1.1.19's release notes on Bun's blog

v1.1.19: Bun v1.1.19

Compare Source

To install Bun v1.1.19:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.19:

bun upgrade
Read Bun v1.1.19's release notes on Bun's blog
Thanks to 25 contributors!

v1.1.18: Bun v1.1.18

Compare Source

To install Bun v1.1.18:

curl -fsSL https://bun.sh/install | bash

# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.18:

bun upgrade
Read Bun v1.1.18's release notes on Bun's blog
Thanks to 12 contributors!

v1.1.17: Bun v1.1.17

Compare Source

To install Bun v1.1.17:

curl -fsSL https://bun.sh/install | bash

# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.17:

bun upgrade
Read Bun v1.1.17's release notes on Bun's blog

v1.1.16: Bun v1.1.16

Compare Source

To install Bun v1.1.16:

curl -fsSL https://bun.sh/install | bash

# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.16:

bun upgrade
Read Bun v1.1.16's release notes on Bun's blog
Thanks to 9 contributors!

v1.1.15: Bun v1.1.15

Compare Source

This release enables the bun patch command and fixes an optional dependency regression. Please refer to the Bun v1.1.14 release notes for more information.

To install Bun v1.1.15:

curl -fsSL https://bun.sh/install | bash

# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.15:

bun upgrade
Read Bun v1.1.14's release notes on Bun's blog
Thanks to 2 contributors!

v1.1.14: Bun v1.1.14

Compare Source

To install Bun v1.1.14:

curl -fsSL https://bun.sh/install | bash

# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.14:

bun upgrade
Read Bun v1.1.14's release notes on Bun's blog
Thanks to 10 contributors!

v1.1.13: Bun v1.1.13

Compare Source

To install Bun v1.1.13:

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.13:

bun upgrade
Read Bun v1.1.13's release notes on Bun's blog
Thanks to 11 contributors!

v1.1.12: Bun v1.1.12

Compare Source

This release fixes a regression briefly introduced in bun upgrade on Windows that occurred in Bun v1.1.11. There are no release notes, please take a look at the Bun v1.1.11 release notes instead.

To install Bun v1.1.12:

curl -fsSL https://bun.sh/install | bash

### or you can use npm
### npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.12:

bun upgrade
Read Bun v1.1.11's release notes on Bun's blog

v1.1.11: Bun v1.1.11

Compare Source

To install Bun v1.1.11:

curl -fsSL https://bun.sh/install | bash

### or you can use npm
### npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.11:

bun upgrade
Read Bun v1.1.11's release notes on Bun's blog
Thanks to 16 contributors!

v1.1.10: Bun v1.1.10

Compare Source

To install Bun v1.1.10:

curl -fsSL https://bun.sh/install | bash

### or you can use npm
### npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.10:

bun upgrade
Read Bun v1.1.10's release notes on Bun's blog
Thanks to 9 contributors!

v1.1.9: Bun v1.1.9

Compare Source

To install Bun v1.1.9:

curl -fsSL https://bun.sh/install | bash

### or you can use npm
### npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.9:

bun upgrade
Read Bun v1.1.9's release notes on Bun's blog
Thanks to 16 contributors!

v1.1.8: Bun v1.1.8

Compare Source

To install Bun v1.1.8:

curl -fsSL https://bun.sh/install | bash

### or you can use npm
### npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.1.8:

bun upgrade
Read Bun v1.1.8's release notes on Bun's blog
Thanks to 12 contributors!

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from cungminh2710 as a code owner July 24, 2025 16:30
@renovate renovate bot force-pushed the renovate/npm-bun-vulnerability branch from 34b2f1b to 087da4d Compare September 25, 2025 14:16
@renovate renovate bot force-pushed the renovate/npm-bun-vulnerability branch from 087da4d to 41cc0fa Compare December 31, 2025 13:31
@renovate renovate bot force-pushed the renovate/npm-bun-vulnerability branch from 41cc0fa to 36d3407 Compare January 19, 2026 17:51
@renovate renovate bot force-pushed the renovate/npm-bun-vulnerability branch from 36d3407 to 36a4754 Compare February 12, 2026 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cungminh2710 cungminh2710 Awaiting requested review from cungminh2710 cungminh2710 is a code owner

At least 0 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants