Alberto Schiabel be8e978c3a fix(toolchain): pin Bun canary for valid macOS signatures (#4315) ...

This PR:
- closes #4284
- makes `mise.toml` the editable source of truth for Bun and pins
`1.4.1-canary.1+d9b769812`, the first Bun build whose compiled macOS
binaries carry strictly valid signatures
- maps that revision to the immutable per-platform `@oven/bun-*` npm
tarballs via mise's `http` backend, so mise extracts the exact
checksum-verified binary with no npm lifecycle, Node dependency, or
postinstall script
- installs Bun through mise in CI and Docker E2E images, removing the
independent `bun-version` input and the `oven-sh/setup-bun` channel
- updates the checksum-verified mise installer to `2026.8.15`, reuses it
in the Docker E2E images, and regenerates `mise.lock` with that release
- teaches the preinstall toolchain check to compare the full Bun
revision (via `Bun.version_with_sha`, in-process) when the pinned
version carries build metadata
- verifies the exact `bun --revision`, a strictly valid Bun-compiled
macOS signature, a Linux container install, the release-workflow
contract, and formatting/linting
EOF -R ComposioHQ/composio

2026-09-03 11:51:22 +02:00

..

cli-release

fix(ci): prevent cache poisoning in CLI releases

2026-08-26 17:21:57 +02:00

check-action-repos.sh

fix(ci): fix github actions commits

2026-01-20 14:34:46 +04:00

check-orphan-ci.sh

ci: add dead-code detection (knip + vulture + orphaned-CI check) (#3787)

2026-07-10 02:17:54 +04:00

install-mise.sh

fix(toolchain): pin Bun canary for valid macOS signatures (#4315)

2026-09-03 11:51:22 +02:00

read-mise-lock-version.sh

fix(docs): correct toolkit versions and enforce production source (#3837)

2026-07-15 17:16:44 +04:00