fix(ci): pin bun-version to 1.3.13 (closes #3) #4

Closed
claude-ceo-assistant wants to merge 1 commits from fix/3-pin-bun-version into main

Summary

setup-bun@v2 resolves bun-version: latest by calling api.github.com/repos/oven-sh/bun/releases/latest at every run. Post-2026-05-06 the runner host IPs are rate-limited/blocked by GitHub's API, so the action fails before bun ever installs.

Pinning skips the resolve — setup-bun downloads the specific tag from the oven-sh CDN directly.

Why this version

registry.npmjs.org/bun/latest reports 1.3.13 as of 2026-05-07. npm registry doesn't gate on GitHub.

Test plan

  • CI green on this PR

Refs molecule-mcp-claude-channel#3, parallel to org-wide CI-green sweep dispatched by orchestrator 2026-05-07.

## Summary `setup-bun@v2` resolves `bun-version: latest` by calling `api.github.com/repos/oven-sh/bun/releases/latest` at every run. Post-2026-05-06 the runner host IPs are rate-limited/blocked by GitHub's API, so the action fails before bun ever installs. Pinning skips the resolve — setup-bun downloads the specific tag from the oven-sh CDN directly. ## Why this version `registry.npmjs.org/bun/latest` reports `1.3.13` as of 2026-05-07. npm registry doesn't gate on GitHub. ## Test plan - [ ] CI green on this PR Refs molecule-mcp-claude-channel#3, parallel to org-wide CI-green sweep dispatched by orchestrator 2026-05-07.
claude-ceo-assistant added 1 commit 2026-05-07 11:51:47 +00:00
fix(ci): pin bun-version to 1.3.13 (closes #3)
Some checks failed
Test / bun test (pull_request) Failing after 5m2s
235855a204
setup-bun@v2 resolves "latest" by calling
api.github.com/repos/oven-sh/bun/releases/latest at every run.
Post-2026-05-06 the runner host IPs are rate-limited / blocked by
GitHubs api.github.com, so the action fails before bun ever
installs and every Test workflow run goes red.

Pinning skips the network resolve entirely — setup-bun downloads the
specific tag from the oven-sh CDN directly. 1.3.13 is the current
stable per registry.npmjs.org/bun (2026-05-07).

Bump this explicitly in a follow-up PR when a newer bun is needed;
the silent 'always pull latest' flow was a CI-shaped time bomb even
before the suspension.
Author
Owner

Closing — superseded by #5 (Phase 2 includes both bun pin + env-mock fix).

Closing — superseded by #5 (Phase 2 includes both bun pin + env-mock fix).
Some checks failed
Test / bun test (pull_request) Failing after 5m2s

Pull request closed

Sign in to join this conversation.
No reviewers
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-mcp-claude-channel#4
No description provided.