Skip to content

fix(ci): restore Bun workflow startup - #736

Open
hyperpolymath wants to merge 3 commits into
mainfrom
fix/bun-ci-startup
Open

fix(ci): restore Bun workflow startup#736
hyperpolymath wants to merge 3 commits into
mainfrom
fix/bun-ci-startup

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

  • replace setup-bun v2.2.0, whose Node 24 action runtime produced startup_failure before any job was instantiated
  • retain a full-SHA action pin on the Node-20-compatible v2.0.2 release
  • pin the installed Bun runtime independently to 1.3.14

Evidence

This PR must not merge until its own CI workflow instantiates jobs and passes.

@coderabbitai

coderabbitai Bot commented Aug 29, 2026

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 31 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 607845be-0eaa-4b97-8362-18f20f1e1280

📥 Commits

Reviewing files that changed from the base of the PR and between 383772e and f1ea600.

📒 Files selected for processing (1)
  • .github/workflows/ci.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@gitar-bot

gitar-bot Bot commented Aug 29, 2026

Copy link
Copy Markdown

Gitar is working

Gitar

@codacy-production

Copy link
Copy Markdown
Contributor

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@codacy-production codacy-production Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR restores the Bun CI workflow by reverting the setup-bun action to version 2.0.2 (via a secure full-SHA pin), which maintains compatibility with the Node 20 runtime. It also pins the Bun runtime to version 1.3.14 to ensure consistency. Codacy analysis confirms the changes are up to standards with no new quality issues.

Test suggestions

  • Verify CI workflow successfully instantiates and starts jobs without producing a 'startup_failure' error
  • Verify that the 'Run native Bun-ESM tests' step executes successfully using the pinned Bun version

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

@codacy-production codacy-production Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR restores the Bun CI workflow by replacing the setup-bun action with a manual installation and verification script for Bun 1.3.14. This bypasses the Node 24 requirement in newer versions of the action.

While functional, the implementation diverges from the PR description, which stated a 'full-SHA action pin' would be retained; instead, the action was removed entirely. Codacy analysis indicates the changes are up to standards.

About this PR

  • The implementation significantly diverges from the PR description. The documentation suggests pinning the setup-bun action to a specific version, but the code replaces the action entirely with a manual shell script.

Test suggestions

  • Verify Bun archive integrity via sha256sum
  • Confirm Bun version 1.3.14 is correctly installed and executable in PATH

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

Comment thread .github/workflows/ci.yml
node-version: "20"
- name: Set up Bun
uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
# The repository's selected-action path rejects setup-bun before job

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 MEDIUM RISK

The implementation removes the oven-sh/setup-bun action entirely. This contradicts the PR description which states the PR would 'retain a full-SHA action pin' on a compatible release.

Comment thread .github/workflows/ci.yml
Comment on lines +68 to +72
archive="$RUNNER_TEMP/bun-linux-x64.zip"
install_dir="$RUNNER_TEMP/bun-runtime"
curl --fail --location --retry 3 \
--output "$archive" \
"https://github.com/oven-sh/bun/releases/download/bun-v${BUN_VERSION}/bun-linux-x64.zip"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚪ LOW RISK

Suggestion: To keep CI logs clean and the workspace tidy, use the -sS flags with curl to silence the progress bar and store the temporary archive in $RUNNER_TEMP instead of the repository root.

@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant