Morph MORPH
SIGN IN SIGN UP
oven-sh / bun UNCLAIMED

Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one

0 0 150 Rust

COMMITS

main
May 29, 2026
R
js_parser: guard stack depth when parsing nested JSX elements (#31537)
robobun committed
ecfdaa6
R
bundler: inline ungate_support into bundle_v2 and lib.rs, delete the file (#31529)
robobun committed
4845d4f
D
yaml: reject tab in s-indent position before structural tokens (DK95/06, Y79Y/005, Y79Y/008 — 402/402) (#31527)
Dylan Conway committed
d4b3a3e
D
bun_core/util: delete unused ArrayLike trait (#31536)
Dylan Conway committed
7688c09
May 28, 2026
J
Hardening: input validation and protocol tightening across 24 subsystems (round 7) (#31495)
Jarred Sumner committed
002dd41
A
node:buffer: default lastIndexOf(value, encoding) to search from the end (#31507)
Alistair Smith committed
843549b
R
js_parser: discard the fake if-block scope for a forward-declared function (#31533)
robobun committed
a740d91
R
css: bound selector expansion through nesting-holding at-rules (#31482)
robobun committed
d632fc5
R
Add runtime-dispatched SIMD xxHash3 via Highway (#31491)
robobun committed
63d5cd4
A
bun:sqlite: decode short non-UTF-8 TEXT leniently instead of dropping the field (#31514)
Alistair Smith committed
29e38e9
R
Lowercase Headers names on iteration with Highway SIMD (#31489)
robobun committed
67d6021
J
ci: build the Windows artifacts by cross-compiling from Linux (#31431)
Jarred Sumner committed
f472981
D
yaml: extract `parse_block_indented` helper; fix anchor/tag on empty node (6KGN/FH7J/H7J7/PW8X) (#31308)
Dylan Conway committed
79a4029
A
sourcemap: fail on a truncated base64 VLQ instead of decoding it as 0 (#31506)
Alistair Smith committed
510b517
R
Route large ANSI escape scans through the dispatched Highway kernel (#31490)
robobun committed
b69085e
S
node-fallbacks: embed browser polyfills zstd-compressed (#31456)
SUZUKI Sosuke committed
3ec6669
J
strings: bind StringJoiner borrowed segments to a lifetime (#31493)
Jarred Sumner committed
f20c8dc
R
Rewrite Bun.escapeHTML using Highway SIMD (#31483)
robobun committed
472a06a
May 27, 2026
A
postgres: emit full leading-zero groups when binary-decoding sub-1e-8 NUMERIC (#31211)
Alistair Smith committed
4ee835b
R
node:fs: move fs.watch's FSWatcher into a lazily loaded internal module (#31428)
robobun committed
b668561
R
node:fs: move watchFile/unwatchFile into a lazily loaded internal module (#31424)
robobun committed
db928c2
A
mysql: decode binary YEAR as a 2-byte number instead of column_length bytes (#31437)
Alistair Smith committed
c89f30d
A
TextDecoder: keep the codec alive across streaming chunks for legacy multi-byte encodings (#31438)
Alistair Smith committed
bb14c4e
J
Hardening: input validation and bounds tightening across 27 subsystems (round 6) (#31417)
Jarred Sumner committed
13bbb38
May 26, 2026
R
Decode Buffer base64/base64url with simdutf's lenient accept-garbage mode (#31423)
robobun committed
2148214
R
Decode Buffer.from(str, 'hex') with Highway SIMD (#31425)
robobun committed
18b7c95
R
Fix out-of-bounds read in JS highlighter on trailing backslash in `${}` (#31435)
robobun committed
99f4679
R
js_parser: restore SIMD block comment skipping via Highway (#31433)
robobun committed
f958cbd
J
build: enable cross-language LTO on linux aarch64-musl (#31432)
Jarred Sumner committed
c78d08f
R
docs: clarify trustedDependencies replaces the default allow list (#31027)
robobun committed
a6a5614