Bun v1.0.17

[Jarred-Sumner]

To install Bun v1.0.17:

curl https://bun.sh/install | bash
# or you can use npm
# npm install -g bun

To upgrade to Bun v1.0.17:

bun upgrade

Read Bun v1.0.17's release notes on Bun's blog

Thanks to the 6 contributors who made this release possible:

• @DaleSeo
• @dylan-conway
• @hustLer2k
• @Jarred-Sumner
• @NReilingh
• @paperdave

---

This discussion was created from the release Bun v1.0.17.

[MitchTalmadge]

Incredible!! Thank you everyone for all your hard work!

[ebeloded]

In my project, upgrading to bun 1.0.17 increased the time of bun install in CI from ~7s to ~120s. It appears that the difference is caused by all the scripts that now run on postinstall.

I recognize that running scripts solved a number of issues, but in my case it didn't solve anything, but added a lot of unnecessary overhead.

According to Bun docs:

Unlike other npm clients, Bun does not execute arbitrary lifecycle scripts like postinstall for installed dependencies. Executing arbitrary scripts represents a potential security risk.

My understanding is that since 1.0.17 this is no longer the case.

I want to keep Bun up to date, but how do I revert to the previous behavior? Installing dependencies in 7s felt like magic, but now the magic is gone 😔. I may need to run the scripts for certain dependencies, and specifying those in trustedDependencies doesn't seem like a big deal.

[ebeloded]

There is an issue for this: #7689