From ea7172659fbb195feac03cfd1f3f53e8d1b48a46 Mon Sep 17 00:00:00 2001
From: h <h@kotikot.com>
Date: Sun, 11 Oct 2026 00:47:30 +0000
Subject: [PATCH] fix: lockfile updates for npm and bun too, caret ranges drift
 the same way as pep621

---
 default.json | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/default.json b/default.json
index 6feffa9..2a35e28 100644
--- a/default.json
+++ b/default.json
@@ -198,6 +198,14 @@
       ],
       "rangeStrategy": "update-lockfile"
     },
+    {
+      "description": "npm and bun deps are caret ranges, without this in-range releases never reach bun.lock",
+      "matchManagers": [
+        "npm",
+        "bun"
+      ],
+      "rangeStrategy": "update-lockfile"
+    },
     {
       "description": "aiogram/telegram-bot-api is rebuilt daily with the same binary, a digest pin would never age past the release gate",
       "matchPackageNames": [