diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 9f25e0e73e..b393d4cba4 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -1,6 +1,6 @@
 {
   "name": "Pascal Editor",
-  "image": "oven/bun:1.3.0",
+  "image": "oven/bun:1.4.4",
   "features": {
     "ghcr.io/devcontainers/features/git:1": {},
     "ghcr.io/devcontainers/features/github-cli:1": {}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 890608eff7..b269e4de9f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,7 +27,7 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.4
 
       - uses: actions/setup-node@v4
         with:
@@ -73,7 +73,7 @@ jobs:
 
       - uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.14
+          bun-version: 1.4.4
 
       # No registry-url here: with it, actions/setup-node writes an .npmrc whose
       # auth token falls back to the placeholder XXXXX-XXXXX-XXXXX-XXXXX, npm
diff --git a/Dockerfile b/Dockerfile
index 661ce8d172..3510327398 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -2,7 +2,7 @@
 
 # Matches `packageManager` in package.json and the version CI installs — a skew
 # here is what makes `--frozen-lockfile` fail inside the image but not locally.
-FROM oven/bun:1.3.14-alpine AS build
+FROM oven/bun:1.4.4-alpine AS build
 WORKDIR /app
 
 # `next build` runs under `node`, and this image's `node` is a shim that re-execs
diff --git a/package.json b/package.json
index c1f63a7e98..5a342a190a 100644
--- a/package.json
+++ b/package.json
@@ -38,7 +38,7 @@
   "engines": {
     "node": ">=22.18"
   },
-  "packageManager": "bun@1.4.2",
+  "packageManager": "bun@1.4.4",
   "overrides": {
     "@types/react": "19.3.0",
     "@types/react-dom": "19.3.0",