All issues

Search results

bun audit fix --latest downgrades a package across majors to a *more* vulnerable version (aws-sdk 2.1693.0 -> 1.18.0)

Status: Open.

#39309 In oven-sh/bun;

· alistair-bot opened on Aug 16, 2026

Bun.build({ files }) panics on CSS data URLs at 1024 bytes

Status: Open.

#39252 In oven-sh/bun;

· oddharsh opened on Aug 16, 2026

undici shim: Pool lacks dispatch()/close()/destroy(), breaking miniflare + workerd (wrangler dev, @cloudflare/vite-plugin)

Status: Open.

#39247 In oven-sh/bun;

· furkankinyas opened on Aug 15, 2026

bun dedupe: show one level of dependents under each row

Status: Open.

#39213 In oven-sh/bun;

· alistair-bot opened on Aug 15, 2026

bun dedupe: --check and --dry-run print identical output, and prune has no CI gate at all

Status: Open.

#39212 In oven-sh/bun;

· alistair-bot opened on Aug 15, 2026

feat(pm): support package-name wildcards in bun rm and bun update

Status: Open.

#39194 In oven-sh/bun;

· abdoufma opened on Aug 15, 2026

Android LD_PRELOAD workaround for bun install SIGSYS crashes caused by openat2 and fchmodat2

bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#39060 In oven-sh/bun;

· jjtseng93 opened on Aug 15, 2026

v1.4 AsyncLocalStorage causes incomplete async stack traces node:async_hooks

bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#39007 In oven-sh/bun;

· Shashank-Salian opened on Aug 15, 2026

Output polish: five rough edges in the new package manager commands

Status: Open.

#38925 In oven-sh/bun;

· alistair-bot opened on Aug 15, 2026

Switching from isolated to hoisted linker leaves the whole store behind and bun prune refuses to clean it

Status: Open.

#38912 In oven-sh/bun;

· alistair-bot opened on Aug 15, 2026

bun pm ls counts lockfile entries but labels them node_modules

Status: Open.

#38909 In oven-sh/bun;

· alistair-bot opened on Aug 15, 2026

bun update reports (no changes) while rewriting package.json

Status: Open.

#38908 In oven-sh/bun;

· alistair-bot opened on Aug 15, 2026