deps.lock: glab 1.123.0, bun 1.4.3, node 24.22.0, cloudflared 2026.10.1, portless 0.15.8

.claude/rules/apps/apps-ci-and-publishing.md

@@ -43,7 +43,7 @@ them as `$TURBO_ROOT$` inputs on its package's `test` task
 `$TURBO_ROOT$` glob carries the `node_modules`/`.turbo`/`dist`/`dist-bin`
 negations because those globs ignore `.gitignore`.
 
-`setup-bun` is pinned to `1.4.2` in every job. The pin exists because
+`setup-bun` is pinned to `1.4.3` in every job. The pin exists because
 CI byte-compares generated/committed artifacts (deck's
 `core/generated-fresh.test.ts`, tui-kit's codegen gate) against a live
 rebuild, and bun's bundler/minifier output is not stable across bun

.github/workflows/checks.yml

@@ -35,7 +35,7 @@ jobs:
           fetch-depth: 2
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - id: scope
         env:
           EVENT_NAME: ${{ github.event_name }}
@@ -52,7 +52,7 @@ jobs:
           fetch-depth: 0
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
 
       - name: Install dependencies
         run: bun install --frozen-lockfile
@@ -115,7 +115,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - uses: actions/setup-go@v5
         with:
           go-version-file: ui/go.mod
@@ -136,7 +136,7 @@ jobs:
           fetch-depth: 0
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - run: bun install --frozen-lockfile
       - uses: actions/cache@v4
         with:
@@ -176,7 +176,7 @@ jobs:
           fetch-depth: 2
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
 
       - name: Install backup dependencies
         run: brew install age zstd git-lfs
@@ -220,7 +220,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - run: bun install --frozen-lockfile
       - name: Always-run guards
         env:
@@ -273,7 +273,7 @@ jobs:
           fetch-depth: 2
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - run: bun install --frozen-lockfile
       # A PR checkout is the merge commit, so HEAD^1 is the base branch tip,
       # the same base the scope job diffs against.
@@ -339,7 +339,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - name: Build the docs site
         working-directory: website
         run: bun install --frozen-lockfile && bun run build

.github/workflows/e2e.yml

@@ -31,7 +31,7 @@ jobs:
           fetch-depth: 2
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - id: scope
         env:
           EVENT_NAME: ${{ github.event_name }}
@@ -46,7 +46,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
 
       - name: Install dependencies
         run: |
@@ -103,7 +103,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
 
       - uses: actions/setup-go@v5
         with:

.github/workflows/release.yml

@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - run: bun install --frozen-lockfile
       - name: Build the tree rows
         run: bun scripts/build-apps.ts --arch arm64
@@ -83,7 +83,7 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - name: Install dependencies
         run: |
           bun install --frozen-lockfile --ignore-scripts

.github/workflows/timings.yml

@@ -19,7 +19,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.4.2
+          bun-version: 1.4.3
       - name: Install backup dependencies
         run: brew install age zstd git-lfs
       - name: Install dependencies

apps/deck/src/cli/client.test.ts

@@ -87,6 +87,23 @@ test("Bun's own refusal from a closed port is one the wait retries", async () =>
   expect(calls).toBe(2);
 });
 
+test('the ECONNREFUSED code newer bun gives a refusal is retried too', async () => {
+  let calls = 0;
+  const res = await withDeckWait(
+    async () => {
+      if (++calls < 2) {
+        throw Object.assign(new TypeError('Unable to connect'), {
+          code: 'ECONNREFUSED',
+        });
+      }
+      return new Response('{}');
+    },
+    { insideRun: true, waitMs: 1000, sleep: async () => {} }
+  );
+  expect(res.status).toBe(200);
+  expect(calls).toBe(2);
+});
+
 test('inside a deck run, a deck that is restarting is waited for', async () => {
   let calls = 0;
   const res = await withDeckWait(

apps/deck/src/cli/client.ts

@@ -41,8 +41,10 @@ export async function withDeckWait(
       return await attempt();
     } catch (err) {
       const code = (err as { code?: unknown }).code;
+      // bun 1.4.3 renamed fetch's refusal code; deck from source can still run on an older bun.
       const unanswered =
         code === 'ConnectionRefused' ||
+        code === 'ECONNREFUSED' ||
         (code === 'ECONNRESET' && resendAfterReset);
       if (!insideRun || !unanswered || now() >= deadline) throw err;
       await sleep(500);

package.json

@@ -2,7 +2,7 @@
   "name": "repo-tools",
   "private": true,
   "license": "MIT",
-  "packageManager": "bun@1.4.2",
+  "packageManager": "bun@1.4.3",
   "workspaces": {
     "packages": [
       "packages/*",

rt-tray/deps.lock

@@ -37,20 +37,20 @@
       "sha256": "da922c20d1792e5b2cbf375593d7a658acf034c12c84e007e71c76ef959c337e",
       "archive": "zip", "extract": "gh_2.102.0_macOS_arm64/bin/gh", "bundlePath": "Contents/Helpers/gh", "exec": ["Contents/Helpers/gh"],
       "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" },
-    { "name": "glab", "version": "1.121.0", "license": "MIT",
-      "url": "https://gitlab.com/api/v4/projects/gitlab-org%2Fcli/packages/generic/glab/1.121.0/glab_1.121.0_darwin_arm64.tar.gz",
-      "sha256": "b097f05b09614938de267f23465c8215d9ddbebc264232604eee2b63120746e4",
+    { "name": "glab", "version": "1.123.0", "license": "MIT",
+      "url": "https://gitlab.com/api/v4/projects/gitlab-org%2Fcli/packages/generic/glab/1.123.0/glab_1.123.0_darwin_arm64.tar.gz",
+      "sha256": "bf776ea47d3b30410267adab9c870990be274e85f6dccccee4289f5ecf1386df",
       "archive": "tar.gz", "extract": "bin/glab", "bundlePath": "Contents/Helpers/glab", "exec": ["Contents/Helpers/glab"],
       "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" },
-    { "name": "bun", "version": "1.4.2", "license": "MIT",
-      "url": "https://github.com/oven-sh/bun/releases/download/bun-v1.4.2/bun-darwin-aarch64.zip",
-      "sha256": "90987a3a16d7db556d886ac3d551e7b6d3edf0a1cf43acaed622e8676be1d12f",
+    { "name": "bun", "version": "1.4.3", "license": "MIT",
+      "url": "https://github.com/oven-sh/bun/releases/download/bun-v1.4.3/bun-darwin-aarch64.zip",
+      "sha256": "80afd4c069b46a6fa8f3ec520bebc750a7843e4a8d5b9583d29ad436c00a3403",
       "archive": "zip", "extract": "bun-darwin-aarch64/bun", "bundlePath": "Contents/Helpers/bun", "exec": ["Contents/Helpers/bun"],
       "exposeByDefault": false, "entitlements": "jit", "status": "bundled", "kind": "helper" },
-    { "name": "node", "version": "24.21.0", "license": "MIT",
-      "url": "https://nodejs.org/dist/v24.21.0/node-v24.21.0-darwin-arm64.tar.gz",
-      "sha256": "bed7eea5325e1108f32ce5228ddd6a5f0f08a499ee42aa7442aea583702f6057",
-      "archive": "tar.gz", "extract": "node-v24.21.0-darwin-arm64", "bundlePath": "Contents/Helpers/node", "exec": ["Contents/Helpers/node/bin/node"],
+    { "name": "node", "version": "24.22.0", "license": "MIT",
+      "url": "https://nodejs.org/dist/v24.22.0/node-v24.22.0-darwin-arm64.tar.gz",
+      "sha256": "6a9724d9b50a5f22b4816cded441b5a8d9ddae546191a5e5b7efa5a5e2ee26d5",
+      "archive": "tar.gz", "extract": "node-v24.22.0-darwin-arm64", "bundlePath": "Contents/Helpers/node", "exec": ["Contents/Helpers/node/bin/node"],
       "exposeByDefault": false, "entitlements": "jit", "status": "bundled", "kind": "helper" },
     { "name": "fast-browser", "version": "0.1.14", "license": "MIT",
       "url": "https://registry.npmjs.org/@mattstack/fast-browser/-/fast-browser-0.1.14.tgz",
@@ -80,9 +80,9 @@
       "archive": "raw", "extract": "", "bundlePath": "Contents/Helpers/boxscore", "exec": ["Contents/Helpers/boxscore"],
       "exposeByDefault": false, "entitlements": "jit", "status": "bundled", "kind": "helper",
       "serve": { "port": 11005, "args": [] } },
-    { "name": "cloudflared", "version": "2026.10.0", "license": "Apache-2.0",
-      "url": "https://github.com/cloudflare/cloudflared/releases/download/2026.10.0/cloudflared-darwin-arm64.tgz",
-      "sha256": "a2f79ff7b9420aa537d74af239f376da170bbabeb529aec416002adac6a72e70",
+    { "name": "cloudflared", "version": "2026.10.1", "license": "Apache-2.0",
+      "url": "https://github.com/cloudflare/cloudflared/releases/download/2026.10.1/cloudflared-darwin-arm64.tgz",
+      "sha256": "647615df99d49cd179ea5e13ef760b9bbfb33630f6ae62f87e33dfadda60adcc",
       "archive": "tar.gz", "extract": "cloudflared", "bundlePath": "Contents/Helpers/cloudflared",
       "exec": ["Contents/Helpers/cloudflared"],
       "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" },
@@ -91,9 +91,9 @@
       "sha256": "055831648de4cb346382ed1e6950cce9632a6a48cb1a2f4aeb3a28a80eebdd43",
       "archive": "raw", "extract": "", "bundlePath": "Contents/Helpers/logdy", "exec": ["Contents/Helpers/logdy"],
       "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" },
-    { "name": "portless", "version": "0.15.7", "license": "MIT",
-      "url": "https://registry.npmjs.org/portless/-/portless-0.15.7.tgz",
-      "sha256": "8217c7f7576378191c324e6f1a2d39f31a9c787a34ef68372b6e68f956c9a8fc",
+    { "name": "portless", "version": "0.15.8", "license": "MIT",
+      "url": "https://registry.npmjs.org/portless/-/portless-0.15.8.tgz",
+      "sha256": "c165f8577d1d9e57b04a93f2200432ad0a1343a032027a5f38e608a092c0f443",
       "archive": "npm", "extract": "package", "bundlePath": "Contents/Helpers/portless-dist", "exec": ["Contents/Helpers/node/bin/node", "Contents/Helpers/portless-dist/dist/cli.js"],
       "exposeByDefault": false, "entitlements": "none", "status": "bundled", "kind": "helper" },
     { "name": "sparkle", "version": "2.10.0", "license": "MIT",