Reuse HTTPS proxy CONNECT tunnels (
687700d)
Bun now pools and reuses tunneled HTTPS connections through proxies instead of doing a fresh CONNECT + TLS handshake for every request. That should cut latency and connection churn for sequential proxied requests, and the redirect handling was tightened so tunnels are shut down instead of being reused across redirect targets.
Update the bundled root certificate set (06a11c0)
The bundled NSS trust store was refreshed to 3.121, adding the e-Szigno TLS Root CA 2023 and fixing the leading-space label on OISTE Server Root RSA G1. This keeps Bun aligned with current browser CA trust and reduces the chance of TLS validation mismatches.
