Skip to content

Bump bun to 1.3.13 for macOS 26 AMFI compatibility#74

Merged
travis-hoover-glean merged 1 commit intomainfrom
bump-bun-1.3.13
Apr 29, 2026
Merged

Bump bun to 1.3.13 for macOS 26 AMFI compatibility#74
travis-hoover-glean merged 1 commit intomainfrom
bump-bun-1.3.13

Conversation

@travis-hoover-glean
Copy link
Copy Markdown
Contributor

Summary

  • Bun 1.3.12's --compile output is unsigned, and macOS 26 AMFI kills unsigned executables on launch (exit 137), so glean-mdm binaries built from build.sh won't run locally on Apple Silicon.
  • Bun 1.3.13 ad-hoc signs compiled binaries (Signature=adhoc, flags=0x20002(adhoc,linker-signed)), which satisfies AMFI.

Test plan

  • Rebuild with bun 1.3.13: ./build.sh
  • Verify ad-hoc signature: codesign -dv dist/glean-mdm-darwin-arm64
  • Verify it runs: ./dist/glean-mdm-darwin-arm64 --versionv1.0.0

Bun 1.3.12's `--compile` output is completely unsigned, which macOS 26
rejects via AMFI ("Attempt to execute completely unsigned code (must be
at least ad-hoc signed)"), killing the resulting `glean-mdm` binaries
with SIGKILL on launch. Bun 1.3.13 ad-hoc signs compiled binaries
(`flags=adhoc,linker-signed`), which satisfies AMFI and lets the
binaries run locally on Apple Silicon again.
@travis-hoover-glean travis-hoover-glean requested a review from a team as a code owner April 29, 2026 06:08
@travis-hoover-glean travis-hoover-glean merged commit a188ea3 into main Apr 29, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant