chore(deps): bump the bun group across 1 directory with 14 updates #204

dependabot · 2026-01-12T16:54:24Z

Bumps the bun group with 14 updates in the / directory:

Package	From	To
@elysiajs/bearer	`1.3.0`	`1.4.2`
@elysiajs/jwt	`1.3.1`	`1.4.0`
@sinclair/typebox	`0.34.34`	`0.34.47`
chalk	`5.4.1`	`5.6.2`
drizzle-orm	`0.44.2`	`0.45.1`
elysia	`1.3.5`	`1.4.21`
jose	`6.0.11`	`6.1.3`
postgres	`3.4.7`	`3.4.8`
radashi	`12.6.0`	`12.7.1`
@biomejs/biome	`2.0.6`	`2.3.11`
bun-types	`1.2.18`	`1.3.5`
drizzle-kit	`0.31.4`	`0.31.8`
typescript	`5.8.3`	`5.9.3`
vitepress	`1.6.3`	`1.6.4`

Updates @elysiajs/bearer from 1.3.0 to 1.4.2

Release notes

Sourced from @elysiajs/bearer's releases.

1.4.2

What's Changed

fix: bump min elysia version to 1.4.3 by @DaxServer in elysiajs/elysia-bearer#28

New Contributors

@DaxServer made their first contribution in elysiajs/elysia-bearer#28

Full Changelog: elysiajs/elysia-bearer@1.4.1...1.4.2

1.4.1

What's changed

Bug fix:

Fix issue with multiple bearer tokens in query parameters

Full Changelog: elysiajs/elysia-bearer@1.4.0...1.4.1

1.4.0

What's changed

Improvement:

support Elysia 1.4

Full Changelog: elysiajs/elysia-bearer@1.3.0...1.4.0

Changelog

Sourced from @elysiajs/bearer's changelog.

1.4.2 - 14 Dec 2025

Bug fix:

set min Elysia version to 1.4.3

1.4.1 - 13 Sep 2025

Bug fix:

Fix issue with multiple bearer tokens in query parameters

1.3.0-exp.0 - 23 Apr 2025

Change:

Add support for Elysia 1.3

1.2.0-rc.0 - 23 Dec 2024

Change:

Add support for Elysia 1.2

1.1.2 - 5 Sep 2024

Feature:

add provenance publish

1.1.1 - 16 Jul 2024

Change:

Accept only first bearer query

1.1.0 - 16 Jul 2024

Change:

Add support for Elysia 1.1

1.1.0-rc.0 - 12 Jul 2024

Change:

Add support for Elysia 1.1

1.0.2 - 18 Mar 2024

Change:

Add support for Elysia 1.0

1.0.0 - 16 Mar 2024

Change:

Add support for Elysia 1.0

1.0.0-rc.0 - 1 Mar 2024

Change:

Add support for Elysia 1.0

1.0.0-beta.1 - 17 Feb 2024

... (truncated)

Commits

095638d 🧹 chore: 1.4.2
925976f 🧹 chore: 1.4.3
4942b4c Merge pull request #28 from DaxServer/min-elysia-version
349be42 fix: bump min elysia version to 1.4.3
22625e5 📘 doc: multiple bearer tokens in query parameters
649b104 🧹 chore: bump version
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @elysiajs/bearer since your current version.

Updates @elysiajs/jwt from 1.3.1 to 1.4.0

Release notes

Sourced from @elysiajs/jwt's releases.

1.4.0

What's changed

Improvement:

support Elysia 1.4

Full Changelog: elysiajs/elysia-jwt@1.3.3...1.4.0

1.3.3

What's Changed

Feature:

#110 add optional, typed 'options' argument to jwt.verify() and pass to jose jwtVerify() if present by @jmlow

Bug fix:

#109 type inconsistencies in JWT payload and improve schema-based inference by @kimzuni

#107 correct iat claim handling and expand allowed claim value type by @kimzuni

#105 adjust README in regard to the cookie plugin by @codemusings

New Contributors

@jmlow made their first contribution in elysiajs/elysia-jwt#110

@kimzuni made their first contribution in elysiajs/elysia-jwt#109

@codemusings made their first contribution in elysiajs/elysia-jwt#105

Full Changelog: elysiajs/elysia-jwt@1.3.2...1.3.3

1.3.2

What's Changed

fix: Resolve various issues with payload, schema, and types by @victorfrei in elysiajs/elysia-jwt#104

New Contributors

@victorfrei made their first contribution in elysiajs/elysia-jwt#104

Full Changelog: elysiajs/elysia-jwt@1.3.1...1.3.2

Changelog

Sourced from @elysiajs/jwt's changelog.

1.3.3 - 14 Jul 2025

Feature:

#110 add optional, typed 'options' argument to jwt.verify() and pass to jose jwtVerify() if present

Bug fix:

#109 type inconsistencies in JWT payload and improve schema-based inference

#107 correct iat claim handling and expand allowed claim value type

#105 adjust README in regard to the cookie plugin

1.3.2 - 14 Jul 2025

Bug fix:

#104 Resolve various issues with payload, schema, and types

#101 Closes Config exp not encoded in payload

#23 Closes bug sign args exp type

#98 Closes verify fails when using schema in Elysia JWT plugin

#52 Closes iat Type inconsistency

#36 Closes upgrade dependency "jose" to latest version to fix issues

#19 Closes Header Parameter is stored in the payload instead of header

Commits

c1ef884 🧹 chore: bump version
c6e97f0 📘 doc: typo
ac0313b 🔧 fix: error
964cd55 Merge pull request #108 from kimzuni/fix/nbf-exp-iat-handling
ad918c4 Merge pull request #105 from codemusings/readme-fix-cookie
72dd9a3 Merge branch 'main' into fix/nbf-exp-iat-handling
70590fa Merge pull request #109 from kimzuni/fix/jwt-payload-types
9ac6676 Merge pull request #110 from jmlow/support-options-for-jwt-verify
9078f60 Pull 'await' out of ternary operator
ce5f397 Add typed 'options' argument to jwt.verify(), then pass to jose verifyJwt()
Additional commits viewable in compare view

Updates @sinclair/typebox from 0.34.34 to 0.34.47

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @sinclair/typebox since your current version.

Updates chalk from 5.4.1 to 5.6.2

Release notes

Sourced from chalk's releases.

v5.6.2

Fix vulnerability in 5.6.1, see: chalk/chalk#656

v5.6.0

Make WezTerm terminal use true color a8f5bf7

chalk/chalk@v5.5.0...v5.6.0

v5.5.0

Make Ghostty terminal use true color (#653) 79ee2d3

chalk/chalk@v5.4.1...v5.5.0

Commits

5155778 5.6.2
5c91505 5.6.0
a8f5bf7 Make WezTerm terminal use true color
67db246 5.5.0
79ee2d3 Make Ghostty terminal use true color (#653)
See full diff in compare view

Updates drizzle-orm from 0.44.2 to 0.45.1

Release notes

Sourced from drizzle-orm's releases.

0.45.1

Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

Fixed pg-native Pool detection in node-postgres transactions

Allowed subqueries in select fields

Updated typo algorythm => algorithm

Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)

Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

0.44.7

fix durable sqlite transaction return value #3746 - thanks @joaocstro

0.44.6

feat: add $replicas reference #4874

0.44.5

Fixed invalid usage of .one() in durable-sqlite session

Fixed spread operator related crash in sqlite blob columns

Better browser support for sqlite blob columns

Improved sqlite blob mapping

0.44.4

Fix wrong DrizzleQueryError export. thanks @nathankleyn

0.44.3

Fixed types of $client for clients created by drizzle function
await db.$client.[...]
Added the updated_at column to the neon_auth.users_sync table definition.

Commits

a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
c445637 Merge pull request #5095 from drizzle-team/main-workflows
e7b3aaa Merge branch 'main' into main-workflows
0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
ce88a18 Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows
5c8a4c5 +
73e2ea4 feat: Add release router workflow to manage feature and latest releases
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for drizzle-orm since your current version.

Updates elysia from 1.3.5 to 1.4.21

Release notes

Sourced from elysia's releases.

1.4.21

What's Changed

Improvement:

#1654 encode t.Date() to iso string by @zoriya

#1624 apply macros before merging hooks in group method by @tt-a1i

Bug fix:

call Sucrose GC unref when possible (browser fallback)

add allowUnsafeValidationDetails to Standard Validator

New Contributors

@tt-a1i made their first contribution in elysiajs/elysia#1624

@zoriya made their first contribution in elysiajs/elysia#1654

Full Changelog: elysiajs/elysia@1.4.20...1.4.21

1.4.20

What's Changed

Improvement:

add ModelValidator.schema for accessing raw schema

#1636 add subscriptions to Elysia.ws context

#1638 unref Sucrose gc by @akim-bow

Bug fix:

#1649 add null check for object properties (t.Record) by @aymaneallaoui

#1646 use constant-time comparison for signed cookie verification by @JNX03

#1639 compose: ReferenceError: "_r_r is not defined" when onError returns plain object & mapResponse exists

#1631 update Exact Mirror to 0.2.6

#1630 enforce fetch to return MaybePromise

Bug fix:

Elysia.models broke when referencing non typebox model

New Contributors

@aymaneallaoui made their first contribution in elysiajs/elysia#1649

@JNX03 made their first contribution in elysiajs/elysia#1646

Full Changelog: elysiajs/elysia@1.4.19...1.4.20

1.4.19

What's Changed

Security:

reject invalid cookie signature when using cookie rotation

Improvement

#1609 calling afterResponse with aot: false

#1607, #1606, #1139 data coercion on nested form data by @Teyik0

... (truncated)

Changelog

Sourced from elysia's changelog.

1.4.21 - 4 Jan 2026

Improvement:

#1654 encode t.Date() to iso string

#1624 apply macros before merging hooks in group method

Bug fix:

call Sucrose GC unref when possible (browser fallback)

add allowUnsafeValidationDetails to Standard Validator

1.4.20 - 3 Jan 2026

Improvement:

add ModelValidator.schema for accessing raw schema

#1636 add subscriptions to Elysia.ws context

#1638 unref Sucrose gc

Bug fix:

#1649 add null check for object properties (t.Record)

#1646 use constant-time comparison for signed cookie verification

#1639 compose: ReferenceError: "_r_r is not defined" when onError returns plain object & mapResponse exists

#1631 update Exact Mirror to 0.2.6

#1630 enforce fetch to return MaybePromise

Bug fix:

Elysia.models broke when referencing non typebox model

1.4.19 - 13 Dec 2025

Security:

reject invalid cookie signature when using cookie rotation

Improvement

#1609 calling afterResponse with aot: false

#1607, #1606, #1139 data coercion on nested form data

#1604 save lazy compilation of Elysia.fetch for up to 45x performance improvement

#1588, #1587 add seen weakset during mergeDeep

Bug fix:

#1614 Cloudflare Worker with dynamic path

add set immediate fallback

#1597 safeParse, parse to static type

#1596 handle context pass to function with sub context

#1591, #1590 merge set.headers without duplicating Response

#1546 override group prefix type

#1526 default error handler doesn't work in Cloudflare Workers

handle group with empty prefix in type-level

1.4.18 - 4 Dec 2025

Security:

use JSON.stringify over custom escape implementation

1.4.17 - 2 Dec 2025

... (truncated)

Commits

969fc76 Merge branch 'main' of https://github.com/elysiajs/elysia
d4cde97 📘 doc: document changelog
920c18b Merge pull request #1654 from zoriya/patch-1
949c6cf Merge pull request #1624 from tt-a1i/fix/macro-beforehandle-ordering
a1802bb 🔧 fix: small things and there
27c17f0 Always convert dates to iso string
c163c89 Merge pull request #1637 from elysiajs/next
7555347 Merge pull request #1653 from elysiajs/revert-1634-fix/record-response-valida...
028d1af Revert ":wrench: fix: t.Record validation failure in response schemas"
df9c4cd Merge pull request #1634 from MarcelOlsen/fix/record-response-validation
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for elysia since your current version.

Updates jose from 6.0.11 to 6.1.3

Release notes

Sourced from jose's releases.

v6.1.3

Refactor

avoid export * as for google closure's compiler sake (6303d98), closes #832

v6.1.2

Refactor

fallback to checking instanceof for CryptoKey (901cd90), closes #765 #803 #821 #827 #828

v6.1.1

Documentation

add link to RFC9864 (767edde)

link to ML-DSA for JOSE (ed4252c)

remove mention of Edge Runtime from the readme (94fdde7)

update README.md (25098ef)

Refactor

eliminate named exports in the source code (f6ae30d)

expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)

faster path for symmetric key checks (a44c2ec)

improve en/decoding overheads (daee426)

v6.1.0

Features

support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)

support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

v6.0.13

Refactor

more readability in ecdhes.ts (84da9de)

update asn1.ts helpers (b4f8fb3)

v6.0.12

Documentation

add known caveats to customFetch (02e1f1e)

mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)

update compact setKeyManagementParameters (2f44381)

use GitHub Flavored Markdown for notes and warnings (f6b4ffc)

Refactor

createPublicKey is not a constructor (61ded78)

... (truncated)

Changelog

Sourced from jose's changelog.

6.1.3 (2025-12-02)

Refactor

avoid export * as for google closure's compiler sake (6303d98), closes #832

6.1.2 (2025-11-15)

Refactor

fallback to checking instanceof for CryptoKey (901cd90), closes #765 #803 #821 #827 #828

6.1.1 (2025-11-09)

Documentation

add link to RFC9864 (767edde)

link to ML-DSA for JOSE (ed4252c)

remove mention of Edge Runtime from the readme (94fdde7)

update README.md (25098ef)

Refactor

eliminate named exports in the source code (f6ae30d)

expose setKeyManagementParameters also on a GeneralEncrypt Recipient (16e6b23)

faster path for symmetric key checks (a44c2ec)

improve en/decoding overheads (daee426)

6.1.0 (2025-08-27)

Features

support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)

support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

6.0.13 (2025-08-21)

Refactor

more readability in ecdhes.ts (84da9de)

update asn1.ts helpers (b4f8fb3)

6.0.12 (2025-07-15)

... (truncated)

Commits

ebb8774 chore(release): 6.1.3
6303d98 refactor: avoid export * as for google closure's compiler sake
39c8805 chore: bump packages
cf5726e chore: update error message
0154775 chore: update threat model
d015cdf chore: add a threat model
c5e285e chore: bump packages
d681315 chore: bump packages
4ae1005 chore(deps-dev): bump glob from 11.0.3 to 11.1.0 (#831)
aaedc25 chore(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 (#830)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for jose since your current version.

Updates postgres from 3.4.7 to 3.4.8

Release notes

Sourced from postgres's releases.

v3.4.8

Prevent out of bound errors from commit-time failures de64f7a

fix: use lower max connections in Cloudflare Workers environment 94b7170

Add support for sslnegotiation=direct - fixes #1104 7f80980

omit Sql properties absent from TransactionSql 36a53f6

Someones engines are getting pedantic - fixes #1061 3ffc3c4

Better error if trying to run query during copy 3a43815

Fix PGAPPNAME env access by prioritizing connection.application_name 32feb25

porsager/postgres@v3.4.7...v3.4.8

Commits

5c8135f 3.4.8
ad24665 build
de64f7a Prevent out of bound errors from commit-time failures
94b7170 fix: use lower max connections in Cloudflare Workers environment
7f80980 Add support for sslnegotiation=direct - fixes #1104
36a53f6 omit Sql properties absent from TransactionSql
3ffc3c4 Someones engines are getting pedantic - fixes #1061
3a43815 Better error if trying to run query during copy
32feb25 Fix PGAPPNAME env access by prioritizing connection.application_name
See full diff in compare view

Updates radashi from 12.6.0 to 12.7.1

Release notes

Sourced from radashi's releases.

v12.7.1

Fixed

Ensure DurationParser static properties can be tree-shaked in b9d7529

v12.7.0

New Functions

Add getOrInsert and getOrInsertComputed functions [→ PR #444](radashi-org/radashi#444)

Access or initialize map entries without boilerplate branching. getOrInsert writes the provided value once, while getOrInsertComputed lazily creates an entry only when it is missing.

Works with both Map and WeakMap instances

Returns the stored entry so you can chain additional logic

Avoids unnecessary factory calls when a key already exists
import * as _ from 'radashi'
const counts = new Map<string, number>()
_.getOrInsert(counts, 'clicks', 1) // => 1
_.getOrInsert(counts, 'clicks', 5) // => 1
_.getOrInsertComputed(counts, 'views', () => 10) // => 10
_.getOrInsertComputed(counts, 'views', () => 0) // => 10
Inspired by TC39's upsert proposal.

🔗 Docs: getOrInsert · getOrInsertComputed / Source: getOrInsert.ts · getOrInsertComputed.ts / Tests: getOrInsert.test.ts · getOrInsertComputed.test.ts

Add isArrayEqual function [→ PR #417](radashi-org/radashi#417)

Compare arrays with Object.is precision. isArrayEqual checks length and element identity, correctly handling tricky cases like NaN, sparse arrays, and the +0/-0 distinction.

Uses Object.is so NaN matches itself while +0 and -0 stay distinct

Short-circuits when lengths differ for a fast inequality check

Leaves the original arrays untouched
import * as _ from 'radashi'
_.isArrayEqual([1, 2, 3], [1, 2, 3]) // => true
_.isArrayEqual([0], [-0]) // => false
_.isArrayEqual([Number.NaN], [Number.NaN]) // => true
🔗 Docs / Source / Tests

... (truncated)

Changelog

Sourced from radashi's changelog.

[radashi@12.7.1] - 2025-11-19

Details

Fixed

Ensure DurationParser static properties can be tree-shaked in b9d7529

[radashi@12.7.0] - 2025-10-17

Details

Added

Add identity function in 38e2f37

Add isArrayEqual function in 095f2b0

Add isMapEqual and isSetEqual functions in 0fa566a

Add getOrInsert and getOrInsertComputed in 4675076

(objectify) Add index parameter to getKey and getValue functions in 1506472

Add absoluteJitter and proportionalJitter in ebea7d7

Changed

Preserve tuple type in min/max even with a getter in c72a1c4

Use identity as default getter for sort in df55a6e

[radashi@12.6.2] - 2025-08-20

Details

Fixed

(range) Ensure end parameter works when 0 in 9c8ffa0

[radashi@12.6.1] - 2025-08-09

Details

Fixed

(group) Use Object.create(null) for the returned object in 5db8c37

Commits

478e0cd chore(release): 12.7.1
763e630 chore: update .cliffignore
b9d7529 fix: ensure DurationParser static properties can be tree-shaked (#447)
0154943 chore(scripts): use dist build for tree-shake-check
6207890 chore: add tree-shake-check script
6c8276a Revert "feat!: transpile to Node18 syntax (#448)"
b109d1e feat!: transpile to Node18 syntax (#448)
f0c9c33 chore(docs): remove unnecessary await in example
900f2e8 chore(release): 12.7.0
11d932d chore: prepare release notes
Additional commits viewable in compare view

Updates @biomejs/biome from 2.0.6 to 2.3.11

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.3.11

2.3.11

Patch Changes
#8583 83be210 Thanks @dyc3! - Added the new nursery rule useVueValidTemplateRoot.

This rule validates only root-level \<template> elements in Vue single-file components. If the \<template> has a src attribute, it must be empty. Otherwise, it must contain content.

Invalid examples:
\<template src="./foo.html">content</template>
\<template></template>
Valid examples:
\<template>content</template>
\<template src="./foo.html"></template>
#8586 df8fe06 Thanks @dyc3! - Added a new nursery rule useVueConsistentVBindStyle. Enforces consistent v-bind style (:prop shorthand vs v-bind:prop longhand). Default prefers shorthand; configurable via rule options.
#8587 9a8c98d Thanks @dyc3! - Added the rule useVueVForKey, which enforces that any element using v-for also specifies a key.

Invalid
<li v-for="item in items">{{ item }}</li>
Valid
<li v-for="item in items" :key="item.id">{{ item }}</li>
#8586 df8fe06 Thanks @dyc3! - Added a new nursery rule useVueConsistentVOnStyle. Enforces consistent v-on style (@event shorthand vs v-on:event longhand). Default prefers shorthand; configurable via rule options.

#8583 83be210 Thanks @dyc3! - Added the new nursery rule useVueValidVOnce. Enforces that usages of the v-once directive in Vue.js SFC are valid.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.3.11

Patch Changes
#8583 83be210 Thanks @dyc3! - Added the new nursery rule useVueValidTemplateRoot.

This rule validates only root-level \<template> elements in Vue single-file components. If the \<template> has a src attribute, it must be empty. Otherwise, it must contain content.

Invalid examples:
\<template src="./foo.html">content</template>
\<template></template>
Valid examples:
\<template>content</template>
\<template src="./foo.html"></template>
#8586 df8fe06 Thanks @dyc3! - Added a new nursery rule useVueConsistentVBindStyle. Enforces consistent v-bind style (:prop shorthand vs v-bind:prop longhand). Default prefers shorthand; configurable via rule options.
#8587 9a8c98d Thanks @dyc3! - Added the rule useVueVForKey, which enforces that any element using v-for also specifies a key.

Invalid
<li v-for="item in items">{{ item }}</li>
Valid
<li v-for="item in items" :key="item.id">{{ item }}</li>
#8586 df8fe06 Thanks @dyc3! - Added a new nursery rule useVueConsistentVOnStyle. Enforces consistent v-on style (@event shorthand vs v-on:event longhand). Default prefers shorthand; configurable via rule options.
#8583 83be210 Thanks @dyc3! - Added the new nursery rule useVueValidVOnce. Enforces that usages of the v-once directive in Vue.js SFC are valid.

... (truncated)

Commits

1550e73 ci: release (#8507)
a3a27a7 feat(analyze/html/vue): add useVueVapor rule (#8644)
9a8c98d feat(analyze/html/vue): add useVueVForKey (#8587)
ab9af9a feat: no-jsx-props-bind (#7410)
df8fe06 feat(analyze/html/vue): add v-bind/v-on style rules (#8586)
83be210 feat(analyze/html/vue): add a few more simple vue lint rules (#8583)
a3a1ad2 feat(biome_js_analyze): port noBeforeInteractiveScriptOutsideDocument from ...
9dd9ca7 feat(graphql_analyze): implement useUniqueArgumentNames (#8591)
5e85d43 feat(graphql_analyze): implement useUniqueFieldDefinitionNames (#8598)
a5f59cd feat(graphql_analyze): implement useUniqueInputFieldNames (#8592)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @biomejs/biome since your current version.

Updates bun-types from 1.2.18 to 1.3.5

Release notes

Sourced from bun-types's releases.

Bun v1.3.5

To install Bun v1.3.5
curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun
Windows:
powershell -c "irm bun.sh/install.ps1|iex"
To upgrade to Bun v1.3.5:
bun upgrade
Read Bun v1.3.5's release notes on Bun's blog

Thanks to 10 contributors!

@alii

@cirospaciari

@crishoj

@dylan-conway

@elfayer

@hamidrezahanafi

@jarred-sumner

@kylekz

@robobun

@ryangst

Bun v1.3.4

To install Bun v1.3.4
curl -fsSL https://bun.sh/install | bash
# or you can use npm
# npm install -g bun
Windows:
powershell -c "irm bun.sh/install.ps1|iex"
To upgrade to Bun v1.3.4:
bun upgrade

... (truncated)

Commits

d865ef4 feat: add Bun.Terminal API for pseudo-terminal (PTY) support (#25415)

Bumps the bun group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@elysiajs/bearer](https://github.com/elysiajs/elysia-bearer) | `1.3.0` | `1.4.2` | | [@elysiajs/jwt](https://github.com/elysiajs/elysia-jwt) | `1.3.1` | `1.4.0` | | [@sinclair/typebox](https://github.com/sinclairzx81/typebox-legacy) | `0.34.34` | `0.34.47` | | [chalk](https://github.com/chalk/chalk) | `5.4.1` | `5.6.2` | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.44.2` | `0.45.1` | | [elysia](https://github.com/elysiajs/elysia) | `1.3.5` | `1.4.21` | | [jose](https://github.com/panva/jose) | `6.0.11` | `6.1.3` | | [postgres](https://github.com/porsager/postgres) | `3.4.7` | `3.4.8` | | [radashi](https://github.com/radashi-org/radashi) | `12.6.0` | `12.7.1` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.0.6` | `2.3.11` | | [bun-types](https://github.com/oven-sh/bun/tree/HEAD/packages/bun-types) | `1.2.18` | `1.3.5` | | [drizzle-kit](https://github.com/drizzle-team/drizzle-orm) | `0.31.4` | `0.31.8` | | [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.3` | | [vitepress](https://github.com/vuejs/vitepress) | `1.6.3` | `1.6.4` | Updates `@elysiajs/bearer` from 1.3.0 to 1.4.2 - [Release notes](https://github.com/elysiajs/elysia-bearer/releases) - [Changelog](https://github.com/elysiajs/elysia-bearer/blob/main/CHANGELOG.md) - [Commits](elysiajs/elysia-bearer@1.3.0...1.4.2) Updates `@elysiajs/jwt` from 1.3.1 to 1.4.0 - [Release notes](https://github.com/elysiajs/elysia-jwt/releases) - [Changelog](https://github.com/elysiajs/elysia-jwt/blob/main/CHANGELOG.md) - [Commits](elysiajs/elysia-jwt@1.3.1...1.4.0) Updates `@sinclair/typebox` from 0.34.34 to 0.34.47 - [Commits](https://github.com/sinclairzx81/typebox-legacy/commits/0.34.47) Updates `chalk` from 5.4.1 to 5.6.2 - [Release notes](https://github.com/chalk/chalk/releases) - [Commits](chalk/chalk@v5.4.1...v5.6.2) Updates `drizzle-orm` from 0.44.2 to 0.45.1 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.44.2...0.45.1) Updates `elysia` from 1.3.5 to 1.4.21 - [Release notes](https://github.com/elysiajs/elysia/releases) - [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md) - [Commits](elysiajs/elysia@1.3.5...1.4.21) Updates `jose` from 6.0.11 to 6.1.3 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.0.11...v6.1.3) Updates `postgres` from 3.4.7 to 3.4.8 - [Release notes](https://github.com/porsager/postgres/releases) - [Changelog](https://github.com/porsager/postgres/blob/master/CHANGELOG.md) - [Commits](porsager/postgres@v3.4.7...v3.4.8) Updates `radashi` from 12.6.0 to 12.7.1 - [Release notes](https://github.com/radashi-org/radashi/releases) - [Changelog](https://github.com/radashi-org/radashi/blob/main/CHANGELOG.md) - [Commits](radashi-org/radashi@v12.6.0...v12.7.1) Updates `@biomejs/biome` from 2.0.6 to 2.3.11 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.11/packages/@biomejs/biome) Updates `bun-types` from 1.2.18 to 1.3.5 - [Release notes](https://github.com/oven-sh/bun/releases) - [Commits](https://github.com/oven-sh/bun/commits/bun-v1.3.5/packages/bun-types) Updates `drizzle-kit` from 0.31.4 to 0.31.8 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](https://github.com/drizzle-team/drizzle-orm/compare/drizzle-kit@0.31.4...drizzle-kit@0.31.8) Updates `typescript` from 5.8.3 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.8.3...v5.9.3) Updates `vitepress` from 1.6.3 to 1.6.4 - [Release notes](https://github.com/vuejs/vitepress/releases) - [Changelog](https://github.com/vuejs/vitepress/blob/v1.6.4/CHANGELOG.md) - [Commits](vuejs/vitepress@v1.6.3...v1.6.4) --- updated-dependencies: - dependency-name: "@elysiajs/bearer" dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bun - dependency-name: "@elysiajs/jwt" dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bun - dependency-name: "@sinclair/typebox" dependency-version: 0.34.47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bun - dependency-name: chalk dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bun - dependency-name: drizzle-orm dependency-version: 0.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bun - dependency-name: elysia dependency-version: 1.4.21 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bun - dependency-name: jose dependency-version: 6.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bun - dependency-name: postgres dependency-version: 3.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: bun - dependency-name: radashi dependency-version: 12.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: bun - dependency-name: "@biomejs/biome" dependency-version: 2.3.11 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bun - dependency-name: bun-types dependency-version: 1.3.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bun - dependency-name: drizzle-kit dependency-version: 0.31.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bun - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: bun - dependency-name: vitepress dependency-version: 1.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: bun ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-01-12T16:54:34Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

dependabot bot added dependencies Pull requests that update a dependency file javascript labels Jan 12, 2026

yamcodes merged commit 4ddc037 into main Jan 17, 2026
8 checks passed

yamcodes deleted the dependabot/bun/bun-3b77363224 branch January 17, 2026 13:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the bun group across 1 directory with 14 updates #204

chore(deps): bump the bun group across 1 directory with 14 updates #204

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

coderabbitai bot commented Jan 12, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): bump the bun group across 1 directory with 14 updates #204

chore(deps): bump the bun group across 1 directory with 14 updates #204

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 12, 2026

1.4.2

What's Changed

New Contributors

1.4.1

What's changed

1.4.0

What's changed

1.4.2 - 14 Dec 2025

1.4.1 - 13 Sep 2025

1.3.0-exp.0 - 23 Apr 2025

1.2.0-rc.0 - 23 Dec 2024

1.1.2 - 5 Sep 2024

1.1.1 - 16 Jul 2024

1.1.0 - 16 Jul 2024

1.1.0-rc.0 - 12 Jul 2024

1.0.2 - 18 Mar 2024

1.0.0 - 16 Mar 2024

1.0.0-rc.0 - 1 Mar 2024

1.0.0-beta.1 - 17 Feb 2024

1.4.0

What's changed

1.3.3

What's Changed

New Contributors

1.3.2

What's Changed

New Contributors

1.3.3 - 14 Jul 2025

1.3.2 - 14 Jul 2025

v5.6.2

v5.6.0

v5.5.0

0.45.1

0.45.0

0.44.7

0.44.6

0.44.5

0.44.4

0.44.3

1.4.21

What's Changed

New Contributors

1.4.20

What's Changed

New Contributors

1.4.19

What's Changed

1.4.21 - 4 Jan 2026

1.4.20 - 3 Jan 2026

1.4.19 - 13 Dec 2025

1.4.18 - 4 Dec 2025

1.4.17 - 2 Dec 2025

v6.1.3

Refactor

v6.1.2

Refactor

v6.1.1

Documentation

Refactor

v6.1.0

Features

v6.0.13

Refactor

v6.0.12

Documentation

Refactor

6.1.3 (2025-12-02)

Refactor

6.1.2 (2025-11-15)

Refactor

6.1.1 (2025-11-09)

Documentation

Refactor

6.1.0 (2025-08-27)

Features

Add `getOrInsert` and `getOrInsertComputed` functions [→ PR #444](radashi-org/radashi#444)

Add `isArrayEqual` function [→ PR #417](radashi-org/radashi#417)