ci(dependabot): use Bun package ecosystem

[amondnet]

Summary

• configure Dependabot to use the bun package ecosystem
• update the adjacent comment to describe Bun dependencies
• leave the GitHub Actions update configuration unchanged

This follows up on the dependency update raised in #56: the repository uses bun.lock, which Dependabot supports through the bun ecosystem rather than npm.

Validation

• parsed .github/dependabot.yml with Bun.YAML.parse
• verified the configured ecosystems are github-actions and bun
• ran git diff --check

---

Summary by cubic

Switch Dependabot to the bun ecosystem so updates target bun.lock, and add a 7-day cooldown to pace dependency PRs. Updated the Bun comment; github-actions updates remain unchanged.

^{Written for commit 5487cf6. Summary will update on new commits.}

[gemini-code-assist]

Code Review

This pull request updates the Dependabot configuration in .github/dependabot.yml to track Bun dependencies instead of npm dependencies across the monorepo. There are no review comments, and I have no feedback to provide.

[greptile-apps]

Greptile Summary

Updates Dependabot’s package-manager configuration.

• Switches the root dependency ecosystem from npm to bun.
• Adds a seven-day default cooldown for Bun dependency updates.
• Updates the adjacent comment while leaving GitHub Actions updates unchanged.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
.github/dependabot.yml	Configures Dependabot to process the repository’s Bun dependencies and apply a seven-day update cooldown.

_{Reviews (2): Last reviewed commit: "chore: apply AI code review suggestions" | Re-trigger Greptile}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud