BunProduct update
Bun v1.3.10
Bun v1.3.10 replaces its REPL with a native one written in Zig that starts without downloading any packages, and fixes an HTTP response splitting bug in node:http, a CRLF header injection bug in the S3 client and a path traversal bug in tarball extraction during bun install. The bun build --compile --target=browser option can now emit a single HTML file with every asset inlined, the transpiler fully supports TC39 standard ES decorators, Windows on ARM64 is supported, and Bun.sql refuses null bytes in connection parameters to prevent protocol injection.
Bun's REPL has been completely rewritten in Zig, replacing the previous third-party npm package.
Saved . A shortened excerpt from Product release notes; the original publisher retains authorship.