Merge pull request #237 from modelstudioai/fix/ad-hoc-sign

fix(release): pin Bun 1.3.14 for release binaries

Author: heimanba

.github/workflows/publish.yml

@@ -80,7 +80,7 @@ jobs:
       # Keep this pin in sync with any local smoke tests of binary-compile.mjs.
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: "1.2.19"
+          bun-version: "1.3.14"
 
       - name: publish-stable
         env:
@@ -155,7 +155,7 @@ jobs:
       # Keep this pin in sync with any local smoke tests of binary-compile.mjs.
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: "1.2.19"
+          bun-version: "1.3.14"
 
       - name: publish-channel
         env:

tools/release/lib/binary-build.mjs

@@ -165,7 +165,7 @@ function compileOne({ bunTarget, os, arch, exe }, version, outdir, entry) {
   }
   if (result.stdout) process.stdout.write(result.stdout);
   if (result.stderr) process.stderr.write(result.stderr);
-  // Bun 1.2.19 writes windows-x64 .exe with mode 000 on Unix hosts (oven-sh/bun#21308).
+  // Bun has written windows-x64 .exe as mode 000 on Unix hosts (oven-sh/bun#21308).
   chmodSync(innerPath, 0o755);
   // Sign after chmod. Bun's linker signature does not match the final Mach-O bytes.
   if (os === "darwin") signDarwinAdhoc(innerPath, { log });

tools/release/lib/binary-compile.mjs

@@ -3,7 +3,7 @@
  *   bun tools/release/lib/binary-compile.mjs --entry <path> --outfile <path> --target <bun-target>
  *
  * Uses `bun build --compile` (CLI). The Bun.build({ compile }) API on ≤1.2.19
- * can exit 0 without writing outfile; CI pins 1.2.19 so we stay on the CLI.
+ * can exit 0 without writing outfile; CI stays on the CLI.
  *
  * Called by binary-build.mjs (Node orchestration stays on Node).
  */