ci: pin Bun to 1.3.11 to fix codesign regression

[kjiang-ac]

Summary

Pins Bun to version 1.3.11 in the bun-compile workflow to fix the codesign failure on darwin-arm64 binaries.

Problem

Starting with run #104, the "Sign binary" step consistently fails on darwin-arm64 with:

auggie-darwin-arm64: invalid or unsupported format for signature

The workflow file had not changed — the breakage was caused by Bun v1.3.12 (released April 9, 2026) being picked up automatically by oven-sh/setup-bun@v2. The previous run (#103) succeeded with Bun 1.3.11 just hours earlier.

Bun 1.3.12 includes a large JSC engine upgrade (1,650+ commits) and changes to standalone executable embedding that appear to have regressed the Mach-O layout of bun build --compile --target=bun-darwin-arm64 output, making it unsignable by codesign.

Fix

Pin oven-sh/setup-bun@v2 to bun-version: "1.3.11" so the workflow uses a known-good Bun version.

Verification

Manually triggered the workflow from this branch with version 0.24.0-prerelease.5 (the same version that failed on main) — all jobs passed, including darwin-arm64 codesign and notarization.

[github-actions]

Review completed. No suggestions at this time.

[augment-app-staging]

Code Review Triage 🛡️ · Low Risk

✅ Approved — Low-Risk Change

Justification

This PR adds exactly 2 lines to a CI workflow file (.github/workflows/bun-compile.yml) to pin oven-sh/setup-bun@v2 to bun-version: "1.3.11". No source code, tests, or runtime behavior are affected. The change is a straightforward version pin to work around a known upstream regression in Bun 1.3.12's Mach-O output that broke codesign on darwin-arm64. The author verified the fix by manually triggering the workflow on this branch.

👍 / 👎 Was this triage helpful? React to this comment with your feedback.