Proxy tunnels get keep-alive pooling
Bun reuses HTTPS proxy CONNECT tunnels, updates root CAs, and fixes a WebView test-load crash on non-macOS CI.
Read the issue →Bun reuses HTTPS proxy CONNECT tunnels, updates root CAs, and fixes a WebView test-load crash on non-macOS CI.
Read the issue →Bun adds async stack traces to more errors, fixes a MySQL memory leak and stdout truncation, and removes the legacy CMake build path.
Read the issue →Bun now enables deferred accept on Linux/FreeBSD listeners to cut an extra event-loop round trip for HTTP/TLS connections.
Read the issue →uWebSockets now batches nested async responses better, and Bun.serve stops leaking when an aborted Promise
March 25th, 2026 · 19 commits
+1
Bun adds Chrome-backed WebView capabilities, upgrades to TypeScript 6, and lands multiple crash, leak, and glob performance fixes.
Read the issue →A small but meaningful day: one performance win plus two correctness fixes for streams and error formatting.
Read the issue →Pipe now catches write errors instead of crashing, and listen/connect reject empty hostname or unix values cleanly.
Read the issue →Bun upgrades its WebKit dependency and adjusts several bindings and test allowances to match the new engine.
Read the issue →Bumped WebKit and shipped two FFI crash fixes plus safer FD validation for huge floats.
Read the issue →Headless browser automation lands, standalone Linux binaries get a new embedding path, and Bun patches two crashers plus a CookieMap bug.
Read the issue →Bun fixed a compile-time CSS/JS crash and a DNS cache bug that could keep stale entries alive indefinitely.
Read the issue →MySQL adapter now negotiates legacy EOF correctly, with fixes for tagged template null bytes and hot-reload test flakiness.
Read the issue →Major new cron API lands, alongside bundler, install, and inspector fixes plus a macOS puppeteer workaround.
Read the issue →Bun adds full documentation for its CSRF token API and surfaces it in the docs nav and API overview.
Read the issue →Test discovery can now skip whole trees, and security scanning moves package data over IPC to avoid arg-length limits.
Read the issue →Node-compatible HTTP/2 settings handling and atomic Postgres prepared-statement execution headline a day of important runtime fixes.
Read the issue →TypeScript-based build replaces CMake, while crypto, HTTP, websocket, watcher, and bundler bugs get targeted fixes.
Read the issue →Bun adds TOML docs and fixes JSONL offsets, stat precision, and WebSocket protocol corruption.
Read the issue →Bun tightened Windows linking, fixed spawnSync and fs flag handling, and added stronger baseline verification plus transpiler cache invalidation.
Read the issue →Bun fixed a signal-listener bug, reverted a Windows exit workaround, and added an automated GitHub Action to suggest related issues on PRs.
Read the issue →A test timeout was relaxed and made more diagnosable, while http.zig got a small compile fix for TLS server_name handling.
Read the issue →Bun fixed a proxy-tunnel SSLConfig race and custom DNS lookup TLS verification, plus a minor comment spelling fix.
Read the issue →Adds dynamic-import gating, fixes stdin/blob sizing and Windows crashes, and prevents SQL parameter overflows from panicking.
Read the issue →A single test-focused fix hardens Puppeteer launch, reload timing, and post-HMR assertions to avoid CI hangs and stale handles.
Read the issue →Switched CMake’s Buildkite artifact discovery from brittle build JSON scraping to `buildkite-agent artifact search`, restoring failing CI link steps.
Read the issue →A single docs-only change reindented and normalized Bun fullstack examples in the bundler guide.
Read the issue →A Windows fs.watch segfault was fixed, alongside CSS parser cleanup for a subtle Zig error-handling leak pattern.
Read the issue →
March 2nd, 2026 · 16 commits
+1
Major fixes for dynamic-import bundling, buffer detachment safety, and several runtime/parser edge cases; plus new markdown metadata.
Read the issue →Several high-impact fixes: TLS cert handling, path overflow hardening, WebSocket handshake validation, zlib bounds checks, and install/CLI correctness.
Read the issue →