In the next version of Bun
bun test gets improved Vitest compatibility, including: DOM environments, automocking, vi.mock hoisting, and async fake timers
Security incidents across open-source aren't showing signs of slowing down
The Bun team is dedicating a higher % of our time to security work for the foreseeable future
We upgraded our Bun runtime to Bun 1.4 and took Node.js out of the image entirely.
Memory per container dropped 41%, cold starts are 18% faster and the image is 25% smaller.
@jarredsumner and the @bunjavascript team are still cooking.
https://t.co/Y6ZfBEFgDU
We expect to replace more, excluding WebKit/JavaScriptCore, BoringSSL, and lsquic.
There’s still: turbojpeg, libpng, zlib-ng, libdeflate, brotli, zstd, and several more.
Last week, we published 3 security advisories including Brotli, tls certificates, and quic
As future hardening, we will replace most of Bun’s C/C++ dependencies with our own safe Rust implementation.
Starting with libarchive
https://t.co/RvK8vFPUmT