From 3deb25fa8ce0753014e26b97bbc594b608f4a1ac Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Wed, 21 Oct 2026 06:06:54 -0700
Subject: Bun 1.3.14 → 1.4.3, from ghcr.io/coinos/bun (oven/bun without the
 emSign ECC Root CA - G3, CVE-2026-111943)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

names, nwcpush, blossom, the vmedia image (and live with it) and the hook's
bun install.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 compose.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'compose.yml')

diff --git a/compose.yml b/compose.yml
index 3cdf4a3..123a02b 100644
--- a/compose.yml
+++ b/compose.yml
@@ -8,7 +8,7 @@
 #   $STATE/live/config.json       $STATE/live/data/       (TURN key; streams and their recordings)
 services:
   names:
-    image: oven/bun:1.3.14
+    image: ghcr.io/coinos/bun:1.4.3
     container_name: names
     working_dir: /app
     command: bun names/server.js
@@ -26,7 +26,7 @@ services:
     restart: unless-stopped
 
   nwcpush:
-    image: oven/bun:1.3.14
+    image: ghcr.io/coinos/bun:1.4.3
     container_name: nwcpush
     working_dir: /app
     command: bun nwcpush/server.js
@@ -42,7 +42,7 @@ services:
     restart: unless-stopped
 
   blossom:
-    image: oven/bun:1.3.14
+    image: ghcr.io/coinos/bun:1.4.3
     container_name: blossom
     working_dir: /app
     command: bun blossom/server.js
-- 
cgit v1.2.3