Measured with real Bun 1.3.10 while building #589: a negated pattern whose last segment carries a wildcard makes Bun install the complement. For example, ["!packages/*"] or ["packages/*", "!packages/*"] installs every workspace outside packages/*. The release-age exclusion audit's resolver treats a negated pattern as contributing no matches, so on these shapes it can only over-report unused-manifest (fail-closed), never accept a pin Bun does not apply.
The fix: mirror Bun's complement behaviour for a negated wildcard pattern, with a real-Bun parity row for each shape above, and keep every existing row green.
Measured with real Bun 1.3.10 while building #589: a negated pattern whose last segment carries a wildcard makes Bun install the complement. For example,
["!packages/*"]or["packages/*", "!packages/*"]installs every workspace outsidepackages/*. The release-age exclusion audit's resolver treats a negated pattern as contributing no matches, so on these shapes it can only over-reportunused-manifest(fail-closed), never accept a pin Bun does not apply.The fix: mirror Bun's complement behaviour for a negated wildcard pattern, with a real-Bun parity row for each shape above, and keep every existing row green.