diff --git a/bun.lock b/bun.lock
index 856c6e2f4..ead0d2419 100644
--- a/bun.lock
+++ b/bun.lock
@@ -203,7 +203,7 @@
 
     "@types/body-parser": ["@types/body-parser@1.19.6", "", { "dependencies": { "@types/connect": "*", "@types/node": "*" } }, "sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g=="],
 
-    "@types/bun": ["@types/bun@1.3.6", "", { "dependencies": { "bun-types": "1.3.6" } }, "sha512-uWCv6FO/8LcpREhenN1d1b6fcspAB+cefwD7uti8C8VffIv0Um08TKMn98FynpTiU38+y2dUO55T11NgDt8VAA=="],
+    "@types/bun": ["@types/bun@1.3.13", "", { "dependencies": { "bun-types": "1.3.13" } }, "sha512-9fqXWk5YIHGGnUau9TEi+qdlTYDAnOj+xLCmSTwXfAIqXr2x4tytJb43E9uCvt09zJURKXwAtkoH4nLQfzeTXw=="],
 
     "@types/connect": ["@types/connect@3.4.38", "", { "dependencies": { "@types/node": "*" } }, "sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug=="],
 
@@ -271,7 +271,7 @@
 
     "body-parser": ["body-parser@2.2.2", "", { "dependencies": { "bytes": "^3.1.2", "content-type": "^1.0.5", "debug": "^4.4.3", "http-errors": "^2.0.0", "iconv-lite": "^0.7.0", "on-finished": "^2.4.1", "qs": "^6.14.1", "raw-body": "^3.0.1", "type-is": "^2.0.1" } }, "sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA=="],
 
-    "bun-types": ["bun-types@1.3.6", "", { "dependencies": { "@types/node": "*" } }, "sha512-OlFwHcnNV99r//9v5IIOgQ9Uk37gZqrNMCcqEaExdkVq3Avwqok1bJFmvGMCkCE0FqzdY8VMOZpfpR3lwI+CsQ=="],
+    "bun-types": ["bun-types@1.3.13", "", { "dependencies": { "@types/node": "*" } }, "sha512-QXKeHLlOLqQX9LgYaHJfzdBaV21T63HhFJnvuRCcjZiaUDpbs5ED1MgxbMra71CsryN/1dAoXuJJJwIv/2drVA=="],
 
     "bytes": ["bytes@3.1.2", "", {}, "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg=="],
 
@@ -681,8 +681,6 @@
 
     "@peggyjs/from-mem/semver": ["semver@7.7.4", "", { "bin": { "semver": "bin/semver.js" } }, "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA=="],
 
-    "bun-types/@types/node": ["@types/node@20.19.30", "", { "dependencies": { "undici-types": "~6.21.0" } }, "sha512-WJtwWJu7UdlvzEAUm484QNg5eAoq5QR08KDNx7g45Usrs2NtOPiX8ugDqmKdXkyL03rBqU5dYNYVQetEpBHq2g=="],
-
     "cli-highlight/chalk": ["chalk@4.1.2", "", { "dependencies": { "ansi-styles": "^4.1.0", "supports-color": "^7.1.0" } }, "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA=="],
 
     "cliui/string-width": ["string-width@4.2.3", "", { "dependencies": { "emoji-regex": "^8.0.0", "is-fullwidth-code-point": "^3.0.0", "strip-ansi": "^6.0.1" } }, "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g=="],
diff --git a/package.json b/package.json
index 5516b6785..2d70ed3f2 100644
--- a/package.json
+++ b/package.json
@@ -65,7 +65,7 @@
     "dist/index.d.cts"
   ],
   "license": "FSL-1.1-Apache-2.0",
-  "packageManager": "bun@1.3.11",
+  "packageManager": "bun@1.3.13",
   "patchedDependencies": {
     "@stricli/core@1.2.5": "patches/@stricli%2Fcore@1.2.5.patch",
     "@sentry/node-core@10.50.0": "patches/@sentry%2Fnode-core@10.50.0.patch",
diff --git a/script/build.ts b/script/build.ts
index 8c760e4dc..c320d69dc 100644
--- a/script/build.ts
+++ b/script/build.ts
@@ -326,11 +326,12 @@ async function compileTarget(target: BuildTarget): Promise<boolean> {
       // identifier renaming collision bug (oven-sh/bun#14585).
       minify: { whitespace: true, syntax: true, identifiers: false },
       // NOTE: `bytecode: true` would move JS parse cost from startup to
-      // build time, but as of Bun 1.3.11 it crashes our ESM bundle at
-      // runtime with "Expected CommonJS module to have a function wrapper"
-      // before any of our code runs. Likely related to oven-sh/bun#21097 /
-      // #23490. Revisit once Bun's bytecode path stabilizes for our two-
-      // step esbuild-then-compile pipeline.
+      // build time, but as of Bun 1.3.13 it still crashes our ESM bundle
+      // at runtime with "Expected CommonJS module to have a function
+      // wrapper" before any of our code runs (esbuild emits ESM at line
+      // 126; the bytecode loader mis-caches it as CJS). Tracks
+      // oven-sh/bun#21097 / #23490. Retested on Bun 1.3.13; still broken.
+      // Revisit once Bun's bytecode path supports ESM under compile.
     });
 
     if (!result.success) {
diff --git a/src/lib/constants.ts b/src/lib/constants.ts
index f39647add..21fb32d49 100644
--- a/src/lib/constants.ts
+++ b/src/lib/constants.ts
@@ -105,7 +105,7 @@ export function getCliEnvironment(version: string = CLI_VERSION): string {
  * Generate the User-Agent string for API requests.
  * Format: sentry-cli/<version> (<os>-<arch>) <runtime>/<version>
  *
- * @example "sentry-cli/0.5.0 (linux-x64) bun/1.3.3"
+ * @example "sentry-cli/0.5.0 (linux-x64) bun/1.3.13"
  * @example "sentry-cli/0.5.0 (darwin-arm64) node/22.12.0"
  */
 export function getUserAgent(): string {
diff --git a/test/lib/bench/helpers.test.ts b/test/lib/bench/helpers.test.ts
index 536dc24eb..bed42216c 100644
--- a/test/lib/bench/helpers.test.ts
+++ b/test/lib/bench/helpers.test.ts
@@ -133,7 +133,7 @@ describe("compareReports", () => {
   const baseline: BenchReport = {
     version: 1,
     generatedAt: "2026-01-01T00:00:00.000Z",
-    runtime: { bun: "1.3.11", platform: "linux", arch: "x64", cpus: 8 },
+    runtime: { bun: "1.3.13", platform: "linux", arch: "x64", cpus: 8 },
     entries: [
       {
         fixture: "synthetic/small",