[rqbazan]

Summary

The weekly dependency audit gets its bun from mise, locked like the rest of the repo's tools, instead of from a version written in the script. Only the audit installs it.

+mise.audit.toml   bun = "1.4.3"
+mise.audit.lock
 dependency-audit.yml
-  pnpm dlx bun@1.4.3 audit
+  MISE_ENV=audit, then the locked bun runs the audit

Evidence

• Before: the bun version lives in the workflow script.
  After: bun audit v1.4.3 runs from the locked mise tool on the bun examples, which still use their own bun 1.2.4.

Merge Danger

Door: two-way

Blast Radius: the weekly audit only.

🤖 Generated with Claude Code

https://claude.ai/code/session_017sXwJhk5oRMrzxnA1zWxER

[changeset-bot]

⚠️ No Changeset found

Latest commit: 7059c90

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR