diff --git a/.git-blame-ignore-revs b/.git-blame-ignore-revs
new file mode 100644
index 00000000..be58e33b
--- /dev/null
+++ b/.git-blame-ignore-revs
@@ -0,0 +1,9 @@
+# Commits for `git blame --ignore-revs-file` / blame.ignoreRevsFile:
+# mechanical churn that would otherwise bury real authorship.
+# Enable locally with:
+#   git config blame.ignoreRevsFile .git-blame-ignore-revs
+
+# Structure-review batch (#150), squash-merged: contains the pure-rename
+# taxonomy moves (patch/vendor -> vendor/, setup/ umbrella, utils dissolve)
+# plus their mechanical import repoints across ~50 files.
+08ea9ba93a7c4c449640b4e39f37915ddfe035b8
diff --git a/tests/docker/Dockerfile.npm b/tests/docker/Dockerfile.npm
index ef2f817c..c65623c0 100644
--- a/tests/docker/Dockerfile.npm
+++ b/tests/docker/Dockerfile.npm
@@ -17,8 +17,16 @@ RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
 
 # Install bun. Default install of latest stable. The script sets
 # BUN_INSTALL=~/.bun by default; we symlink the binary onto PATH so
-# every test can call it directly.
-RUN curl -fsSL https://bun.sh/install | bash \
+# every test can call it directly. Retried: the script downloads the
+# release zip from GitHub with NO retry of its own, and a transient
+# CDN drop ("curl: (56) Connection died") has failed whole CI image
+# builds over a single blip.
+RUN for i in 1 2 3; do \
+      curl -fsSL https://bun.sh/install | bash && break; \
+      [ "$i" = 3 ] && exit 1; \
+      echo "bun install attempt $i failed; retrying in $((i * 10))s"; \
+      sleep $((i * 10)); \
+    done \
  && ln -s /root/.bun/bin/bun /usr/local/bin/bun
 
 # Enable pnpm and yarn via corepack (bundled with Node 20). The