chore: upgrade to Bun 1.4.1

[jan-kubica]

Summary\n\n- pin Bun and bun-types to 1.4.1\n- refresh the lockfile and package manifests\n- update the fast-uri security override to a patched release\n- temporarily exempt bun-types from the dependency release-age quarantine

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-09-04T10:11:01.578996Z	26bffad	Manual request
🔒 Security Review	✅ Completed 2026-09-04T10:03:44.740356Z	a788900	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: 677b31d8-8ebb-4c57-8cc9-d9a93272f265

📥 Commits

Reviewing files that changed from the base of the PR and between aa0d462 and a788900.

⛔ Files ignored due to path filters (1)

• bun.lock is excluded by !**/*.lock

📒 Files selected for processing (4)

• .changeset/fresh-buns-wave.md
• bunfig.toml
• package.json
• packages/docx-core/package.json

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout. (1)

• GitHub Check: DOCX kernel (Rust and WebAssembly)

🧰 Additional context used

📓 Path-based instructions (1)

Treat legal data, personal data, and repository secrets as sensitive; keep generated repository artifacts limited to public engineering context.

📄 CodeRabbit inference engine (AGENTS.md)

Files:

• packages/docx-core/package.json
• package.json
• bunfig.toml

🔇 Additional comments (5)

package.json (2)

111-111: LGTM!

---

140-140: LGTM!

packages/docx-core/package.json (1)

59-59: LGTM!

bunfig.toml (1)

27-27: LGTM!

.changeset/fresh-buns-wave.md (1)

1-2: LGTM!

---

📝 Walkthrough

Walkthrough

The PR updates Bun and bun-types from 1.4.0 to 1.4.1, exempts bun-types from the release-age gate until a specified expiry, and adds an empty Changeset document.

Changes

Bun toolchain update

Layer / File(s)	Summary
Update Bun tooling versions package.json, packages/docx-core/package.json	The repository and docx-core use bun-types 1.4.1. The declared package manager is Bun 1.4.1.
Configure release handling bunfig.toml, .changeset/fresh-buns-wave.md	bun-types is excluded from the minimum release-age gate until 2026-09-09T08:36:48.390Z. An empty Changeset document is added.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Merge Risk: ⚪ Minimal · up to a7889

This updates Bun and bun-types to 1.4.1, temporarily permits the fresh bun-types release, and records no package release. The version declarations and release configuration are aligned, with no current merge-blocking risk identified.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely summarises the main change: upgrading Bun to version 1.4.1, including the related bun-types dependency update.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/bun-1.4.1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[jan-kubica]

@codex review\n@codex security review\n\nCC on behalf of jan-kubica