Alberto Schiabel be8e978c3a fix(toolchain): pin Bun canary for valid macOS signatures (#4315) ...

This PR:
- closes #4284
- makes `mise.toml` the editable source of truth for Bun and pins
`1.4.1-canary.1+d9b769812`, the first Bun build whose compiled macOS
binaries carry strictly valid signatures
- maps that revision to the immutable per-platform `@oven/bun-*` npm
tarballs via mise's `http` backend, so mise extracts the exact
checksum-verified binary with no npm lifecycle, Node dependency, or
postinstall script
- installs Bun through mise in CI and Docker E2E images, removing the
independent `bun-version` input and the `oven-sh/setup-bun` channel
- updates the checksum-verified mise installer to `2026.8.15`, reuses it
in the Docker E2E images, and regenerates `mise.lock` with that release
- teaches the preinstall toolchain check to compare the full Bun
revision (via `Bun.version_with_sha`, in-process) when the pinned
version carries build metadata
- verifies the exact `bun --revision`, a strictly valid Bun-compiled
macOS signature, a Linux container install, the release-workflow
contract, and formatting/linting
EOF -R ComposioHQ/composio

2026-09-03 11:51:22 +02:00

..

setup-node-pnpm-bun

fix(toolchain): pin Bun canary for valid macOS signatures (#4315)

2026-09-03 11:51:22 +02:00

setup-python-uv

chore(deps): refresh SDK, Python, and CI dependencies (#3955)

2026-07-27 17:57:29 +05:30