[WRONG BRANCH] release: sync preview to main 2.85.0

.github/actions/setup-project-bun/action.yml

@@ -1,8 +1,20 @@
 name: Setup project Bun
 description: >-
-  Install the Bun runtime for a job. Installs the version declared in
-  package.json (dependencies.bun), keeping the runtime SOT in one place so
-  version bumps only touch package.json and bun.lock.
+  Install the package.json Bun pin for a job's role: dependencies.bun for
+  runtime (default), or testRunnerBun for test-runner.
+
+# Runtime 1.4.2 fixes #6684's Windows Bun.fetch stream truncation. The test runner
+# skipped 1.4.2: #4821 reverted #4064 after its multi-file --isolate preload segfault
+# (#6713 run 37631558263: Linux 1/4, macOS 2/2, Windows 9/9). It moved from 1.4.0 to
+# 1.4.3 for oven-sh/bun#44581: 1.4.0's Bun.spawnSync could lose a child's exit after
+# finalizers ran inside an earlier call and spin past its own timeout (#4956).
+# Rejoin only after the upstream runner crash is fixed and a green lane=all
+# dispatch proves the unified version; then delete testRunnerBun and this role input.
+inputs:
+  role:
+    description: Bun role to install (runtime or test-runner).
+    required: false
+    default: runtime
 
 outputs:
   version:
@@ -15,14 +27,28 @@ runs:
     - name: Resolve project Bun version
       id: resolve
       shell: bash
+      env:
+        BUN_ROLE: ${{ inputs.role }}
       run: |
-        version="$(node -p "require('./package.json').dependencies.bun")"
-        if [ -z "$version" ]; then
-          echo "::error::Could not resolve Bun version from package.json"
-          exit 1
-        fi
-        echo "version=$version" >> "$GITHUB_OUTPUT"
-        echo "Using Bun $version from package.json"
+        node <<'NODE'
+        const pkg = require('./package.json');
+        const role = process.env.BUN_ROLE;
+        let key;
+        let version;
+        switch (role) {
+          case 'runtime': key = 'dependencies.bun'; version = pkg.dependencies?.bun; break;
+          case 'test-runner': key = 'testRunnerBun'; version = pkg.testRunnerBun; break;
+          default:
+            console.error(`::error::Unknown Bun role: ${role}`);
+            process.exit(1);
+        }
+        if (typeof version !== 'string' || version !== version.trim() || !/^\d+\.\d+\.\d+$/.test(version)) {
+          console.error(`::error::Missing or invalid package.json ${key} for Bun role ${role}`);
+          process.exit(1);
+        }
+        require('node:fs').appendFileSync(process.env.GITHUB_OUTPUT, `version=${version}\n`);
+        console.log(`Using Bun ${version} from package.json ${key} (${role})`);
+        NODE
 
     - name: Setup Bun
       uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2

.github/workflows/catalog-async-contracts.yml

@@ -0,0 +1,59 @@
+name: Catalog async contracts
+
+on:
+  push:
+    branches: [main, preview]
+    paths:
+      - src/**
+      - scripts/diagnostics/windows-version-control/**
+      - .github/actions/setup-project-bun/**
+      - .github/workflows/catalog-async-contracts.yml
+      - package.json
+      - bun.lock
+  pull_request:
+    paths:
+      - src/**
+      - scripts/diagnostics/windows-version-control/**
+      - .github/actions/setup-project-bun/**
+      - .github/workflows/catalog-async-contracts.yml
+      - package.json
+      - bun.lock
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: catalog-async-contracts-${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.pull_request.number) || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  contracts:
+    name: Catalog async contracts (${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        # Pull requests run the ubuntu leg only; macos and windows run on push
+        # to main/preview and on manual dispatch.
+        os: ${{ fromJSON(github.event_name == 'pull_request' && '["ubuntu-latest"]' || '["ubuntu-latest","macos-latest","windows-latest"]') }}
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+        with:
+          persist-credentials: false
+      - uses: ./.github/actions/setup-project-bun
+        with:
+          role: runtime
+      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master snapshot; the action publishes no release tags, so the toolchain is pinned explicitly
+        with:
+          toolchain: 1.99.0
+          components: rustfmt, clippy
+      - name: Install repository dependencies
+        run: bun install --frozen-lockfile
+      - name: Check formatting
+        run: cargo fmt --manifest-path scripts/diagnostics/windows-version-control/Cargo.toml --check
+      - name: Check Rust contracts
+        run: cargo clippy --locked --manifest-path scripts/diagnostics/windows-version-control/Cargo.toml --all-targets -- -D warnings
+      - name: Run Bun-module contracts through the portable Rust fixture
+        run: cargo test --locked --manifest-path scripts/diagnostics/windows-version-control/Cargo.toml --test async_contracts -- --test-threads=4