Merge pull request #119 from usherlabs/chore/pin-bun-version-floor

chore: pin bun to an exact version above the known-bad range

Author: outerlook

.github/workflows/archive-live-smoke.yml

@@ -21,7 +21,13 @@ jobs:
       - name: Install Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.3.12
+          # Pinned, not floating: bun <= 1.3.9 can drop the terminating chunk of
+          # an empty chunked HTTP response, which hangs a ClickHouse read
+          # forever. request_timeout cannot rescue it — the client implements
+          # that with socket.setTimeout, which Bun's node:http client ignores.
+          # Measured at ~1% of query bursts on 1.3.9 and zero on 1.3.12 and
+          # later, so keep this at 1.3.12 or above.
+          bun-version: 1.3.14
 
       - name: Install dependencies
         run: bun install

.github/workflows/ci.yml

@@ -35,7 +35,13 @@ jobs:
       - name: Install Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.3.12
+          # Pinned, not floating: bun <= 1.3.9 can drop the terminating chunk of
+          # an empty chunked HTTP response, which hangs a ClickHouse read
+          # forever. request_timeout cannot rescue it — the client implements
+          # that with socket.setTimeout, which Bun's node:http client ignores.
+          # Measured at ~1% of query bursts on 1.3.9 and zero on 1.3.12 and
+          # later, so keep this at 1.3.12 or above.
+          bun-version: 1.3.14
 
       - name: Install dependencies
         run: bun install

.github/workflows/publish.yml

@@ -35,7 +35,13 @@ jobs:
       - name: Install Bun
         uses: oven-sh/setup-bun@v1
         with:
-          bun-version: 1.3.9
+          # Pinned, not floating: bun <= 1.3.9 can drop the terminating chunk of
+          # an empty chunked HTTP response, which hangs a ClickHouse read
+          # forever. request_timeout cannot rescue it — the client implements
+          # that with socket.setTimeout, which Bun's node:http client ignores.
+          # Measured at ~1% of query bursts on 1.3.9 and zero on 1.3.12 and
+          # later, so keep this at 1.3.12 or above.
+          bun-version: 1.3.14
 
       - name: Setup Node.js for npm publishing
         uses: actions/setup-node@v4

.sandbox/Dockerfile

@@ -1,4 +1,10 @@
-FROM oven/bun:1.3
+# Pinned to an exact patch, not the floating 1.3 tag: bun <= 1.3.9 can drop the
+# terminating chunk of an empty chunked HTTP response, which hangs a ClickHouse
+# read forever. request_timeout cannot rescue it — the client implements that
+# with socket.setTimeout, which Bun's node:http client ignores. Measured at ~1%
+# of query bursts on 1.3.9 and zero on 1.3.12 and later, so keep this at 1.3.12
+# or above.
+FROM oven/bun:1.3.14
 
 WORKDIR /app
 

Dockerfile

@@ -1,4 +1,10 @@
-FROM oven/bun:1.3
+# Pinned to an exact patch, not the floating 1.3 tag: bun <= 1.3.9 can drop the
+# terminating chunk of an empty chunked HTTP response, which hangs a ClickHouse
+# read forever. request_timeout cannot rescue it — the client implements that
+# with socket.setTimeout, which Bun's node:http client ignores. Measured at ~1%
+# of query bursts on 1.3.9 and zero on 1.3.12 and later, so keep this at 1.3.12
+# or above.
+FROM oven/bun:1.3.14
 
 WORKDIR /app
 

docker/clickhouse-research.compose.yml

@@ -20,7 +20,10 @@ services:
   # host `bun install`. For a standalone prod image build
   # services/archive-forwarder/Dockerfile instead (self-contained, no mount).
   archive-forwarder:
-    image: oven/bun:1.2
+    # Same bun floor as the production images: bun <= 1.3.9 can drop the
+    # terminating chunk of an empty chunked HTTP response and hang a ClickHouse
+    # read forever, and this runs the real forwarder against ClickHouse.
+    image: oven/bun:1.3.14
     container_name: cex-broker-archive-forwarder
     working_dir: /app
     command: ["bun", "run", "services/archive-forwarder/index.ts"]

services/archive-forwarder/Dockerfile

@@ -5,7 +5,14 @@
 #
 # Build from the repository ROOT so the schema/ directory is in the build context:
 #   docker build -f services/archive-forwarder/Dockerfile -t cex-broker-archive-forwarder .
-FROM oven/bun:1.3
+# Pinned to an exact patch, not the floating 1.3 tag: bun <= 1.3.9 can drop the
+# terminating chunk of an empty chunked HTTP response, which hangs a ClickHouse
+# read forever. request_timeout cannot rescue it — the client implements that
+# with socket.setTimeout, which Bun's node:http client ignores. This service
+# reads and writes ClickHouse continuously, so it is the most exposed. Measured
+# at ~1% of query bursts on 1.3.9 and zero on 1.3.12 and later, so keep this at
+# 1.3.12 or above.
+FROM oven/bun:1.3.14
 
 WORKDIR /app
 

services/ohlcv-collector/Dockerfile

@@ -9,7 +9,13 @@
 # Set CEX_BROKER_URL=host:port and mount the canonical feed configuration named
 # by CEX_BROKER_MARKET_DATA_COLLECTOR_CONFIG. The legacy OHLCV array variable is
 # retained for compatibility.
-FROM oven/bun:1.3
+# Pinned to an exact patch, not the floating 1.3 tag: bun <= 1.3.9 can drop the
+# terminating chunk of an empty chunked HTTP response, which hangs a ClickHouse
+# read forever. request_timeout cannot rescue it — the client implements that
+# with socket.setTimeout, which Bun's node:http client ignores. Measured at ~1%
+# of query bursts on 1.3.9 and zero on 1.3.12 and later, so keep this at 1.3.12
+# or above.
+FROM oven/bun:1.3.14
 
 WORKDIR /app