fix: lockfile updates for npm and bun too, caret ranges drift the same way as pep621

default.json

@@ -198,6 +198,14 @@
       ],
       "rangeStrategy": "update-lockfile"
     },
+    {
+      "description": "npm and bun deps are caret ranges, without this in-range releases never reach bun.lock",
+      "matchManagers": [
+        "npm",
+        "bun"
+      ],
+      "rangeStrategy": "update-lockfile"
+    },
     {
       "description": "aiogram/telegram-bot-api is rebuilt daily with the same binary, a digest pin would never age past the release gate",
       "matchPackageNames": [