chore: upgrade bun to 1.4.1

[nicodes]

What changed

• .mise.toml: bun = "1.3" → "1.4.1" — the single place bun's version is pinned for this repo, read by both local setups (mise) and CI (jdx/mise-action).
• bun.lock regenerated with bun 1.4.1.

Notes on the regeneration (verified, deviates from the expected framing):

• A plain bun install with 1.4.1 is a no-op on the existing lockfile — it preserves the old format. The lockfile was therefore deleted and regenerated, which re-resolves ranges: 27 packages moved within their declared semver ranges (patches/minors; largest visible ones: @primer/octicons 19.32.0 → 19.38.0, transitive css-select 5 → 6), plus transitive dedup (369 → 364 packages).
• The regenerated lockfile is lockfileVersion: 2, not v3: that is what bun 1.4.1 writes, verified against tonesplit-web, which is already on bun 1.4.1 with a v2 lockfile. (Every -web sibling still on bun 1.3 has a v1 lockfile.)
• The known Dependabot/bun-1.4.1-lockfile issue does not apply here: this repository's Dependabot covers the github-actions ecosystem only, so Dependabot never touches bun.lock.

Local gates (bun 1.4.1, ~/.local/share/mise/installs/bun/1.4.1/bin/bun)

• bun install --frozen-lockfile (the CI install command): clean no-op against the new lockfile.
• bun run typecheck: 7 files, 0 errors, 0 warnings, 0 hints.
• bun run build: 3 pages built; CI assertions replicated (index/devtools/games pages non-empty; no *.js in dist).

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
aviorstudio-web	Building	Preview	Sep 21, 2026 10:25pm UTC