Security incidents across open-source aren't showing signs of slowing down
The Bun team is dedicating a higher % of our time to security work for the foreseeable future
We upgraded our Bun runtime to Bun 1.4 and took Node.js out of the image entirely.
Memory per container dropped 41%, cold starts are 18% faster and the image is 25% smaller.
@jarredsumner and the @bunjavascript team are still cooking.
We published three security advisories for Bun 1.4.3 and earlier: compromised eMudhra certificates, the brotli decoder bug (HTTP2Shell), and the HTTP/3 "Header Accordions" attack.
These are all fixed in Bun 1.4.4. Please upgrade, and rebuild anything made with `bun build --compile`
$ bun upgrade
Around 47k of the formatter's ~100k lines are based on Oxc's formatter (and Biome's, since Oxc's was based on Biome's), and it's tested against Prettier's own test suite. Big thanks to those projects!