Please support bun.lock

[mecaota]

Tell us more.

Bun recently added support for using a text-based lock file, bun.lock, instead of the binary-based bun.lockb.

Added in Bun v1.1.39.

I'd like to see this supported.

• https://bun.sh/blog/bun-lock-text-lockfile
• https://bun.sh/docs/install/lockfile

[rarkins]

#33189

[RiskyMH]

Oh that above issue is as Bun made a minor change to the structure (dependabot/dependabot-core#6528 (comment)).

The solution is to upgrade to bun >1.2

[mecaota]

I created a reproduction repository. Apparently, the bun.lock was supposed to be updated with the renovate update, but an error occurred because the notation was incorrect (correct lockfileVersion was 0, but renovate created 1). Although it was supported, it still doesn't work properly. Below is a link to the reproduction repository.

repro repository; https://github.com/mecaota/bugged-nextjs
error renovate action: https://github.com/mecaota/bugged-nextjs/actions/runs/13105533295/job/36559699362?pr=15

Run bun install --frozen-lockfile
bun install --frozen-lockfile
shell: /usr/bin/bash -e {0}
bun install v1.1.43 (76800b04)
2 | "lockfileVersion": 1,
^
error: Unknown lockfile version
at bun.lock:2:22
InvalidLockfileVersion: failed to parse lockfile: 'bun.lock'

warn: Ignoring lockfile
error: lockfile had changes, but lockfile is frozen
Error: Process completed with exit code 1.

[RiskyMH]

Please update your bun version so your CI can use the newer bun.lock format: https://github.com/mecaota/bugged-nextjs/blob/main/package.json#L32

Latest is 1.2.2

[rarkins]

Please use the hosted mend app for reproductions to prove it's not a local environment problem

[RiskyMH]

Please use the hosted mend app for reproductions to prove it's not a local environment problem

The problem isn't renovate, but that their CI is using an old bun version where it doesn't support lockfile v1 (since bun v1.2). I don't think its worth renovate installing older bun just for this case to ensure it keeps same v0.

Personally unless there is an issue I recommend just using latest Bun for most cases.

[github-actions[bot]]

Hi there,

Get your discussion fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible.

Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. Discussions without reproductions are less likely to be converted to Issues.

Please follow these steps:

1. Read our guide on creating a minimal reproduction.
2. Go to our minimal reproduction template repository.
3. Select the Use this template button to create a new repository based on the template.
4. Work on the minimal reproduction in your own repository.
5. Fill out the information in your repository's README.md.
6. Add the link to your reproduction to the first post of your Discussion. If you are not the original author, you can post a new comment with the link.

If you need help with running renovate on your minimal reproduction repository, please refer to our Running Renovate guide.
Good luck,

The Renovate team