May 31st, 2026 · 1 commits
Bun adds JSC microbenchmark suite
New benchmark generators and snippet tests target async module linking, star re-exports, and several core JS operations.
Read the issue →oven-sh/bun
May 2026
← Recent
May 30th, 2026 · 1 commits
MySQL datetime round-trips go UTC
Bun now decodes MySQL DATETIME/TIMESTAMP as UTC to match how values are written, with matching Postgres timestamp docs and tests.
Read the issue →
May 29th, 2026 · 31 commits
Bun patches YAML, crypto, SQL, and parser bugs
A busy day of bug fixes: YAML conformance, crypto/OpenSSL compatibility, SQL decoding and naming, plus performance and crash hardening.
Read the issue →
May 28th, 2026 · 14 commits
Bun tightens parsing, hashing, and HTTP paths
Major hardening and performance work landed across HTTP, CSS, hashing, YAML, SQLite, and string handling.
Read the issue →
May 27th, 2026 · 6 commits
Bun hardens SQL decoding and TextDecoder
Fixes Postgres NUMERIC and MySQL YEAR binary decoding, preserves streaming legacy TextDecoder state, and trims fs.watch startup cost.
Read the issue →
May 26th, 2026 · 16 commits
SIMD decoding, LTO, and cross-builds land
Bun added SIMD hex/base64 paths, fixed several correctness bugs, and expanded Linux cross-compilation and LTO support.
Read the issue →
May 25th, 2026 · 11 commits
Cross-compiled macOS builds and hardening land
macOS binaries now cross-compile from Linux, while the day also brings performance work, crash fixes, and broad input hardening.
Read the issue →
May 24th, 2026 · 30 commits
Bun hardens against fuzzed crashes
Multiple crash, hang, and OOM fixes landed across the transpiler, CSS, markdown, HTTP/2, crypto, and patching paths.
Read the issue →
May 23rd, 2026 · 27 commits
Bun hardens parsers, CSS, install, and runtime APIs
A security-hardening-style day: crash fixes, parser correctness, a CSRF API extension, install trust checks, and a major ICU runtime feature.
Read the issue →
May 22nd, 2026 · 13 commits
Security, parser, and shell fixes land
Bun tightens VM sandbox isolation, fixes parser panics and YAML/YAML-like edge cases, hardens shell globbing, and upgrades WebKit.
Read the issue →
May 21st, 2026 · 4 commits
Security hardening and crash fixes land
Bun tightened request handling, fixed two rare Linux crash paths, and corrected macOS statfs results.
Read the issue →
May 20th, 2026 · 15 commits
Bun lands parser, YAML, and runtime fixes
Major correctness and perf work: YAML scalar parsing, bundler speed, escape diagnostics, Buffer ASCII parity, and several leak/use-after-free fixes.
Read the issue →
May 19th, 2026 · 53 commits
Bun lands import defer and SQL fix
Stage 3 deferred imports ship, MySQL MEDIUMINT decoding is fixed, and several runtime leaks and perf issues were cleaned up.
Read the issue →
May 18th, 2026 · 11 commits
WebKit upgrade plus parser and runtime fixes
Major WebKit bump landed alongside several crash fixes in the lexer, parser, password hashing, Blob/FileSink, and dev server.
Read the issue →
May 17th, 2026 · 7 commits
Bun gains Miri, fixes install dedupe, and tightens UB
New Miri support and several UB/perf fixes landed, plus install now reuses existing folder/tarball entries instead of duplicating package.json keys.
Read the issue →
May 16th, 2026 · 7 commits
Security hardening and resolver cleanup
A major hardening day: 36 security fixes landed alongside a resolver refactor and a few bug fixes for workers, imports, and TLS reuse.
Read the issue →
May 15th, 2026 · 5 commits
Build, FFI, and parser fixes land
Notable fixes for compiled FFI loading, build option generation, JSON define auto-quoting, plus a major collections refactor and CI format shift.
Read the issue →
May 14th, 2026 · 11 commits
Rust port lands fixes across server, HTTP, and build
Notable Rust-port followups: HTTP keepalive, Bun.serve config rename, Android/Linux cfg fixes, and build pipeline changes.
Read the issue →
May 13th, 2026 · 2 commits
Fetch keepalive now matches Node behavior
Bun adds TCP keepalive for fetch sockets and fixes it to respect `keepalive: false`, with tests covering Node/http interop.
Read the issue →
May 12th, 2026 · 5 commits
HTTP/3 rename lands; WebKit deadlock fixed
Bun.serve’s HTTP/3 options were renamed and docs updated, WebKit was bumped to fix a require(ESM) deadlock, and two import hang regressions were pinned.
Read the issue →
May 11th, 2026 · 4 commits
YAML, HTTP, and fetch safety fixes land
Bun fixes YAML round-tripping, Node HTTP duplex response handling, and unsafe fetch retries on keep-alive resets.
Read the issue →
May 10th, 2026 · 1 commits
Forks blocked from auto-update PRs
Bun’s dependency update workflows now only run in the upstream repo, preventing noisy automation on forks.
Read the issue →
May 9th, 2026 · 1 commits
TLS handshakes now time out cleanly
Bun now arms HTTP idle timers on socket open, preventing stalled TLS handshakes from hanging install and fetch requests forever.
Read the issue →
May 8th, 2026 · 4 commits
Windows CA parity, Android sigactions, and crash fixes
Bun tightened argument validation, fixed Android signal handling, and expanded Windows system CA loading for more Node-compatible TLS behavior.
Read the issue →
May 7th, 2026 · 7 commits
Bun fixes publish metadata, TLS, and signal bugs
Notable fixes landed for npm publish readme fields, macOS CA lookup stalls, Windows signal handling, and several crash/TLA regressions.
Read the issue →
May 6th, 2026 · 3 commits
Bun fixes raw mode, pidfd exits, and DCE output
Windows stdin raw mode now updates correctly, Linux subprocess exits no longer get lost, and bundler DCE drops empty else blocks cleanly.
Read the issue →
May 5th, 2026 · 1 commits
Docs navigation overhauled
README links were reorganized and updated to match Bun’s newer docs structure and endpoints.
Read the issue →
May 4th, 2026 · 16 commits
Bun hardens sockets, resolver, and Windows paths
Security fixes, crash fixes, resolver correctness, and a Windows binary-size optimization landed alongside a major src reorganization.
Read the issue →
May 3rd, 2026 · 46 commits
Security fixes plus Bun.Image lands
A big day of memory-safety fixes, SQL hardening, and a new image pipeline with ICC profile preservation.
Read the issue →
May 2nd, 2026 · 17 commits
Bun tightens safety across core paths
Big fixes landed for macOS orphan tracking, memory-safety bugs, WebSocket upgrades, and more, plus a notable binary size win.
Read the issue →
May 1st, 2026 · 25 commits
Security fixes and runtime lifetimes
Major fixes across shell, timers, SQL, worker cleanup, and TLS, plus a WebKit upgrade and a new no-orphans runtime flag.
Read the issue →