diff --git a/default.json b/default.json
index 6feffa9..2a35e28 100644
--- a/default.json
+++ b/default.json
@@ -198,6 +198,14 @@
       ],
       "rangeStrategy": "update-lockfile"
     },
+    {
+      "description": "npm and bun deps are caret ranges, without this in-range releases never reach bun.lock",
+      "matchManagers": [
+        "npm",
+        "bun"
+      ],
+      "rangeStrategy": "update-lockfile"
+    },
     {
       "description": "aiogram/telegram-bot-api is rebuilt daily with the same binary, a digest pin would never age past the release gate",
       "matchPackageNames": [