chore(deps): upgrade Bun to 1.4.2

[waleedlatif1]

Summary

• upgrade Bun from 1.4.1 to 1.4.2 across packageManager, package engines, CI setup-bun, the app/realtime/db images, and the Pi sandbox pin
• 1.4.2 fixes a 1.4.1 AsyncLocalStorage regression where a timer created inside store.exit() or a nested store.run() of the same store kept the outer store value alive until it fired. lib/core/network/context.server.ts switches outbound scope with nested run() / exit(), so a long timer set under it could pin the enclosing request context
• also fixes 1.4.1 regressions in bun build var/let renaming and worker_threads 'online' ordering, plus a bun install lockfile hash-mismatch panic
• lockfile unchanged; @types/bun stays at 1.4.1 (types-only, no runtime effect)

Type of Change

• Chore

Testing

• A/B probe, 200 outer stores each holding a 50k-element array, with a 10-minute timer created under a nested run() / exit(), then forced GC: 1.4.1 collected 0/200 (RSS 103 MB), 1.4.2 collected 200/200 (RSS 48 MB)
• re-verified on 1.4.2: node:http res still emits close on client disconnect (so Next request.signal still aborts), and numeric fetch timeout is still ignored as documented in fetch-deadline.ts
• bun install --frozen-lockfile, bunx turbo run type-check (26/26), bun run lint, block registry check, bun run check:audits (51 audits), bun run docs-manifest:check, bun run images:check, bun run test:scripts (179 passed)
• bun run test: 34,280 passed; one test timed out at 10s under full-suite load and passes when rerun alone (vitest runs on Node, not Bun)
• built the realtime and db images on oven/bun:1.4.2-alpine; both report Bun 1.4.2

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Ready	Preview	Sep 26, 2026 2:14am UTC

[cubic-dev-ai]

No issues found across 37 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[High risk] Updates the runtime version across build and deployment.

The PR appears safe to merge; no actionable issue was identified in the version migration.

Summary

This PR updates the repository’s Bun runtime pins from 1.4.1 to 1.4.2 across CI, Docker images, workspace manifests, and Pi sandbox builds. It also updates a comment recording the version used to check fetch timeout behavior.

_{Reviews (1) · Last reviewed commit: "chore(deps): upgrade Bun to 1.4.2"}