chore: sync upstream oven-sh/bun main (2026-10-16)

.claude/skills/verify/SKILL.md

@@ -44,3 +44,4 @@ For worker/subprocess-shaped changes, spawn a subprocess (still `-e`) so worker
   output against `node`.
 - MessagePort's `.on/.off` are added by requiring `worker_threads` — plain `new MessageChannel()` ports only have `addEventListener` until then.
 - The debug+asan build is 10-100× slower than release; large-allocation stress tests can time out locally while passing in CI.
+- Locally, run only the test files you touched. Leave neighbouring files, whole directories and repeat-for-stability loops to CI.

.gitattributes

@@ -17,10 +17,22 @@
 *.mdc text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
 *.mdx text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
 *.mjs text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
+*.cjs text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
 *.mts text eol=lf whitespace=blank-at-eol,-blank-at-eof,-space-before-tab,tab-in-indent,tabwidth=2
 
 # Patch files are line-ending-sensitive — `git apply` rejects CRLF as corrupt.
 *.patch text eol=lf
+# Every byte of an input of the formatter, and of what is expected for it, is part of the test.
+test/cli/format/own/cases/** -text
+# Compared line by line with what a runner prints, which ends a line with \n on every system.
+test/cli/format/*/expected.txt text eol=lf
+test/cli/lint/conformance/expected*.txt text eol=lf
+# Embedded in the executable, which splits them at \n.
+src/lint/linter/config/presets.txt text eol=lf
+src/lint/linter/deprecated.txt text eol=lf
+src/lint/linter/schema/schemas.txt text eol=lf
+src/lint/oxlint_help.txt text eol=lf
+src/sema/messages.txt text eol=lf
 
 *.lockb binary diff=lockb
 
@@ -57,6 +69,8 @@ test/js/node/test/common linguist-vendored
 
 test/js/bun/css/files linguist-vendored
 
+test/cli/**/bundle.zst binary linguist-vendored linguist-generated
+
 .vscode/*.json linguist-language=JSON-with-Comments
 src/cli/init/tsconfig.default.json linguist-language=JSON-with-Comments
 

.github/workflows/AGENTS.md

@@ -6,7 +6,7 @@ This document provides guidance for maintaining the GitHub Actions workflows in
 
 ### Overview
 
-The `format.yml` workflow runs code formatters (Prettier, clang-format, and `cargo fmt`) on pull requests and pushes to main. It's optimized for speed by running all formatters in parallel. It also regenerates the checked-in `*.generated.rs` string maps (`bun run codegen:string-maps`) before the formatters start: everything the step leaves modified, formatting or codegen, is what the autofix.ci action at the end of the job pushes back to the PR (failing the run when it had anything to push), so nothing that produces fixes may run after it, and nothing that only verifies should run before it.
+The `format.yml` workflow runs code formatters (`bun fmt`, clang-format, and `cargo fmt`) on pull requests and pushes to main. It's optimized for speed by running all formatters in parallel. It also regenerates the checked-in `*.generated.rs` string maps (`bun run codegen:string-maps`) before the formatters start: everything the step leaves modified, formatting or codegen, is what the autofix.ci action at the end of the job pushes back to the PR (failing the run when it had anything to push), so nothing that produces fixes may run after it, and nothing that only verifies should run before it.
 
 ### Key Components
 
@@ -32,7 +32,7 @@ The `format.yml` workflow runs code formatters (Prettier, clang-format, and `car
 
 The workflow runs all three formatters simultaneously:
 
-- Each formatter outputs with a prefix (`[prettier]`, `[clang-format]`, `[rustfmt]`)
+- Each formatter outputs with a prefix (`[bun fmt]`, `[clang-format]`, `[rustfmt]`)
 - Output is streamed in real-time without blocking
 - Uses GitHub Actions groups (`::group::`) for collapsible sections
 

.github/workflows/format.yml

@@ -9,7 +9,8 @@ on:
   pull_request:
   merge_group:
 env:
-  BUN_VERSION: "1.4.2"
+  # `bun lint` and `bun fmt` aren't in a release yet. Pin this to 1.5.0 once it's out.
+  BUN_VERSION: "canary"
   LLVM_VERSION: "23.1.1"
   LLVM_VERSION_MAJOR: "23"
 
@@ -34,6 +35,8 @@ jobs:
         uses: ./.github/actions/setup-bun
         with:
           bun-version: ${{ env.BUN_VERSION }}
+          # The action's default bucket can be many commits behind for canary.
+          download-url: https://github.com/oven-sh/bun/releases/download
       - name: Setup Dependencies
         run: |
           bun install
@@ -54,16 +57,18 @@ jobs:
           # autofix step below to push back to the PR (it also fails the run
           # whenever it has something to push, so staleness stays a red check
           # where it can't push, e.g. the merge queue). Runs before the
-          # formatters start so prettier isn't rewriting a `.string-map.ts`
+          # formatters start so `bun fmt` isn't rewriting a `.string-map.ts`
           # while the generator imports it.
           echo "::group::String maps"
           bun run codegen:string-maps 2>&1 | sed 's/^/[string-maps] /'
           echo "::endgroup::"
 
-          # Start prettier in background with prefixed output
-          echo "::group::Prettier"
-          (bun run prettier 2>&1 | sed 's/^/[prettier] /') &
-          PRETTIER_PID=$!
+          # Start bun fmt in background with prefixed output. What it formats is in bunfig.toml.
+          # The plugin is built into Bun. It's only on here: on save, it would remove an import
+          # that the next edit is about to use.
+          echo "::group::bun fmt"
+          (bun fmt --plugin=prettier-plugin-organize-imports 2>&1 | sed 's/^/[bun fmt] /') &
+          BUN_FMT_PID=$!
 
           # Start clang-format installation and formatting in background with prefixed output
           echo "::group::Clang-format"
@@ -95,8 +100,8 @@ jobs:
           echo "Running formatters in parallel..."
           FAILED=0
 
-          if ! wait $PRETTIER_PID; then
-            echo "::error::Prettier failed"
+          if ! wait $BUN_FMT_PID; then
+            echo "::error::bun fmt failed"
             FAILED=1
           fi
           echo "::endgroup::"

.github/workflows/lint.yml

@@ -8,7 +8,8 @@ on:
   workflow_dispatch:
 
 env:
-  BUN_VERSION: "1.4.2"
+  # `bun lint` and `bun fmt` aren't in a release yet. Pin this to 1.5.0 once it's out.
+  BUN_VERSION: "canary"
 
 jobs:
   lint-js:
@@ -22,11 +23,13 @@ jobs:
         uses: ./.github/actions/setup-bun
         with:
           bun-version: ${{ env.BUN_VERSION }}
+          # The action's default bucket can be many commits behind for canary.
+          download-url: https://github.com/oven-sh/bun/releases/download
       - name: Setup Dependencies
         run: |
           bun install --frozen-lockfile
       - name: Lint
-        run: bun lint
+        run: bun lint --format=github
       - name: Typecheck the build system and the CI scripts
         run: |
           bun x tsc --noEmit -p scripts/build/tsconfig.json

.github/workflows/packages-ci.yml

@@ -39,6 +39,8 @@ jobs:
         uses: ./.github/actions/setup-bun
         with:
           bun-version: ${{ env.BUN_VERSION }}
+          # The action's default bucket can be many commits behind for canary.
+          download-url: https://github.com/oven-sh/bun/releases/download
 
       - name: Install dependencies
         run: |
@@ -47,8 +49,8 @@ jobs:
 
       - name: Lint
         run: |
-          bunx oxlint@0.15 --format github --deny-warnings
-          bunx prettier --config ../../.prettierrc --check .
+          bun lint --format=github --deny-warnings
+          bun fmt --config ../../.prettierrc --check .
         working-directory: ./packages/bun-plugin-svelte
 
       - name: Check types

.prettierignore

@@ -16,6 +16,8 @@ scripts/build/xmac.mjs
 
 # the output codeblocks need to stay minified
 docs/bundler/minifier.mdx
+# Prettier would reformat the code examples, and test/cli/lint/rule-docs.test.ts runs them exactly as written
+docs/lint/rules
 
 # `declare module "*" with { type: "text" }` is TypeScript 7.1 syntax that
 # prettier's parser does not accept yet

.prettierrc

@@ -25,6 +25,14 @@
       "options": {
         "printWidth": 100
       }
+    },
+    {
+      "files": ["src/runtime/cli/init/**"],
+      "options": {
+        "arrowParens": "always",
+        "printWidth": 80,
+        "quoteProps": "as-needed"
+      }
     }
   ]
 }

AGENTS.md

@@ -103,7 +103,7 @@ test("(multi-file test) my feature", async () => {
 - Use `tempDir` from `"harness"` to create a temporary directory. **Do not** use `tmpdirSync` or `fs.mkdtempSync` to create temporary directories.
 - When spawning processes, tests should expect(stdout).toBe(...) BEFORE expect(exitCode).toBe(0). This gives you a more useful error message on test failure.
 - Keep tests fast: budget roughly 1s per test and 10s per file. Debug+ASAN builds run 10-100x slower than release, so a 1s local test can take a minute in CI. Use `test.concurrent` for independent subprocess-spawning tests.
-- Never contact the public internet (registry.npmjs.org, github.com, CDNs). Use `VerdaccioRegistry` from `"harness"` for package installs and a local `Bun.serve({ port: 0 })` for HTTP.
+- Never contact the public internet (registry.npmjs.org, github.com, CDNs). Use `TestRegistry` from `"registry"` (`test/packages/registry`) for package installs and a local `Bun.serve({ port: 0 })` for HTTP.
 - `setDefaultTimeout` is a ceiling, not a target. Leave the default and pass a per-test timeout only for the rare outlier; a 5-minute file default multiplies across retries when one test hangs.
 - Leak tests branch their RSS threshold on `isASAN`/`isDebug` and keep the bound well below what the unfixed leak produces. An un-branched absolute delta flakes under ASAN quarantine and GC jitter.
 - **CRITICAL**: Do not write flaky tests. Do not use `setTimeout` or `await sleep(N)` to wait for a condition; poll with a deadline or `await` the event itself. You are not testing the TIME PASSING, you are testing the CONDITION.

CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- Sync oven-sh/bun through `f2405c382d43b89d91a2e7c90d9c5f53505a1e71`, including native lint/format commands, while reconciling fork TLS, worker, module-resolution, CLI and parser fixes. Pin the qualified WebKit release `f8521bb45429b3e1df6bc6d9b98b8df4376a89c5`.
+
 - Avoid quadratic Worker file-descriptor tracking when many descriptors are open, while preserving automatic cleanup at Worker exit.
 
 - Skip issue finder, issue deduplication, and VS Code publishing workflows that require upstream-only credentials in the fork.
@@ -238,7 +240,6 @@
 
 - Keep ESM namespaces free of inherited `__esModule` markers and preserve the own marker and live exports for `require(esm)`, fixing Vite/tsx namespace interop. Adapts [oven-sh/bun#33894](https://github.com/oven-sh/bun/pull/33894) and [oven-sh/WebKit#279](https://github.com/oven-sh/WebKit/pull/279). Thanks @robobun!
 
-
 - Sync oven-sh/bun through `c7b06d94bac19817ba34b6677bb1099fb4f6d2be`, preserving fork fixes and incorporating TLS handshake shutdown, macOS split-DNS failover, file-body cloning, Buffer write validation, mimalloc 3.5.3 and idle-memory release.
 - Pin immutable [OpenClaw WebKit `42ab38d705`](https://github.com/openclaw/WebKit/releases/tag/autobuild-42ab38d705d4838748ccee77e7deb0e4e35515ee) by archive checksum, together with the required namespace facade integration from #106; retain fail-closed artifact selection.