Conversation
|
pkg.pr.new packages benchmark commit |
📊 Bundle Size Comparison
👀 Notable resultsStatic test results:No major changes. Dynamic test results:No major changes. 📋 All resultsClick to reveal the results table (344 entries).
If you wish to run a comparison for other, slower bundlers, run the 'Tree-shake test' from the GitHub Actions menu. |
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
Updates the package manager build-script allowlist to permit Bun’s postinstall script to run during installs.
Changes:
- Add
bunto theonlyBuiltDependenciesallowlist inpackage.json.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "onlyBuiltDependencies": [ | ||
| "@rolldown/browser", | ||
| "@tailwindcss/oxide", | ||
| "bun", |
There was a problem hiding this comment.
Adding bun to onlyBuiltDependencies explicitly allows Bun’s install/postinstall scripts to run, which increases supply-chain risk compared to keeping scripts blocked by default. If this is required, consider documenting the reason (e.g., in a nearby comment or project docs) and ensure the bun dependency is tightly version-pinned/locked so the allowed script can’t change unexpectedly between installs.
| "bun", |
No description provided.