Loading...
Loading...
Maintainers of yt-dlp are restricting and deprecating support for the Bun JavaScript runtime, limiting compatibility to Bun versions 1.2.11–1.3.14. The tighter range addresses security and CI issues—older Bun releases ignore the ejs lockfile and cannot run the ejs test suite—raising supply-chain concerns. The upper bound reflects the last release built on Bun’s original Zig codebase; recent community work to rewrite Bun in Rust and other development changes make future maintenance uncertain. yt-dlp warns it may drop Bun entirely if compatibility costs grow, a shift that will affect projects using the EJS framework until documentation and releases catch up.
Tech teams using yt-dlp or the EJS framework need to know which Bun runtime versions are safe and supported to avoid build, test, or supply-chain breaks. Runtime rewrites and deprecations can force CI, dependency, and documentation changes for downstream projects.
Dossier last updated: 2026-05-23 06:04:03
知名的 youtube 下载器 yt-dlp 宣布，将不支持 Bun 的最新版本， Bun 1.3.15 及更高版本 https://t.co/QdCOlpRUE4 原因竟然是：Bun 团队使用 Claude 基于 Rust 完全 Vibe Coding 了最新版本，变化巨大，用 Rust 代替了 Zig，维护者担心代码质量和长期可靠性。 那个重写的 PR 非常大，+1,009,257 -4,024，新增了 100 万行代码，我感觉这完全是 Bun 加入Anthropic 以后纳的投名状，展示给别人看 Claude 有多厉害。
yt-dlp announced it is limiting and deprecating support for the Bun JavaScript runtime for EJS compatibility, restricting supported Bun versions to 1.2.11 through 1.3.14. The minimum was raised because Bun <1.2.11 can ignore the ejs lockfile and prevents running the ejs test suite, creating security and CI concerns amid recent npm supply-chain attacks. The ceiling corresponds to the last release built with Bun’s original zig codebase; later Bun rewrites in Rust (reportedly influenced by Claude) and a shift to “vibe-coded” development prompted maintainers to treat future Bun changes as a potential maintenance burden. yt-dlp may drop Bun entirely if it becomes untenable. The EJS wiki has not yet been updated.
The yt-dlp project announced it is limiting and deprecating support for the Bun JavaScript runtime due to compatibility and security concerns. Going forward, only Bun versions 1.2.11 through 1.3.14 will be supported because earlier Bun releases ignore the ejs lockfile (a supply-chain security risk) and Bun versions before 1.2.11 cannot run the ejs test suite; 1.3.14 is the last release built with Bun’s original zig codebase. The maintainers warn Bun’s recent rewrite in Rust and other development changes make future maintenance risky and reserve the right to drop Bun support entirely. The change affects yt-dlp and the ejs framework and will be reflected in upcoming releases.
Bun, the JavaScript/TypeScript runtime and tooling project from Oven (oven-sh), is being rewritten from Zig to Rust according to a recent commit and community discussion. The change shifts the codebase language to Rust, aiming to leverage Rust’s ecosystem, safety, and performance characteristics for the runtime, package manager, and tooling. This matters because Bun competes with Node.js, Deno, and V8-based runtimes; a Rust rewrite could improve maintainability, developer hiring, and integration with Rust-native libraries or tooling, while affecting contributors familiar with Zig. The move may influence runtime performance characteristics and the broader JavaScript tooling landscape if it accelerates Bun’s development and adoption.