Bun support is now limited and deprecated
-
Uh oh!
There was an error while loading. Please reload this page.
- Notifications You must be signed in to change notification settings
- Fork 13.8k
- Star 164k
Description
Due to foreseeable compatibility and security issues, yt-dlp's support for Bun as an ejs-compatible JavaScript runtime is being both limited and deprecated.
As of the next yt-dlp and/or ejs release, only Bun versions 1.2.11 through 1.3.14 will be supported. The rationale for this change is twofold:
-
The minimum required version is being raised from 1.0.31 to 1.2.11 because building the ejs package with a version earlier than 1.2.0 results in the ejs lockfile being ignored, which is a significant security concern for users when considering all of the recent npm supply chain attacks. Additionally, the support floor is being bumped to 1.2.11 instead of 1.2.0 because the ejs test suite cannot be run with versions of Bun earlier than 1.2.11.
-
Bun was recently rewritten in Rust using Claude, and its development seems to have taken a turn towards being fully vibe-coded. This is alarming and disappointing for a number of reasons, and frankly it seems like a future headache that we'd prefer to avoid. We are adding a support ceiling of version 1.3.14, as that is the last release built from the original zig codebase.
Bun support will also be deprecated. This means that while yt-dlp will continue to support this narrower range of Bun versions for as long as they're able to meet the needs of yt-dlp and ejs, we reserve the right to completely drop support for Bun should it at any point become too burdensome to maintain.
See the EJS wiki article for more information about supported JavaScript runtimes, but note that it has not yet been updated to reflect the changes announced in this post.
Reactions are currently unavailablePinned by bashonlyPinned comment optionsBefore commenting, please ask yourself: Do I actually care about using bun with yt-dlp? Or am I here because I followed a link on hackernews and I love posting?
View full commentMetadata
Metadata
Assignees
No one assignedLabels
discussion/announcementejs/jscRelated to the JS Challenge framework and/or EJS libraryRelated to the JS Challenge framework and/or EJS libraryType
No typeFields
Give feedbackNo fields configured for issues without a type.Projects
No projectsMilestone
No milestoneRelationships
None yetDevelopment
No branches or pull requestsIssue actions
Схожі новини
RCB's 255 chase approach against SRH split fans over intent
AI cracks 80-year-old mathematics challenge — researchers are astonished
В Windows Defender нашли два нулевых дня под активными атаками — проверьте версию прямо сейчас