diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9e11198..4f632f7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,5 +18,7 @@ jobs:
         with:
           persist-credentials: false
       - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+        with:
+          bun-version: 1.4.4
       - run: bun install --frozen-lockfile
       - run: bun run check
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 25b3df3..75fad0b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -38,6 +38,8 @@ jobs:
           [[ "$RELEASE_TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]
           test "$(git rev-parse HEAD)" = "$(git rev-parse --verify "refs/tags/$RELEASE_TAG^{commit}")"
       - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+        with:
+          bun-version: 1.4.4
       - run: bun install --frozen-lockfile
       - run: bun run check
       - name: Match tag to plugin version
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 88116f9..2ceca5a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -5,7 +5,7 @@ contract. It works as a standalone checkout.
 
 ## Local checks
 
-Install Bun 1.4.0 (also pinned in `package.json`), then:
+Install Bun 1.4.4 (also pinned in `package.json`), then:
 
 ```bash
 git clone https://github.com/pascalorg/blaze.git
diff --git a/package.json b/package.json
index 2a593d3..64b0aa4 100644
--- a/package.json
+++ b/package.json
@@ -3,7 +3,7 @@
   "private": true,
   "description": "Blaze install instructions, agent skill, per-tool plugins, and Solution Card schema.",
   "license": "MIT",
-  "packageManager": "bun@1.4.0",
+  "packageManager": "bun@1.4.4",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/pascalorg/blaze.git"