chore: (dependabot): move back to npm

.github/dependabot.yml

@@ -1,23 +1,23 @@
+# Moving back to npm for package management rather than bun
+# because wow dependabot is so broken for it 😭
+# TODO: Labels on package updates after project restructure
+
 version: 2
 updates:
-  - package-ecosystem: "bun"
+  - package-ecosystem: "npm"
     directory: "/"
     schedule:
       interval: "weekly"
-    assignees:
-      - "GalvinPython"
     target-branch: "dev"
 
-  - package-ecosystem: "bun"
+  - package-ecosystem: "npm"
     directory: "/web"
     schedule:
       interval: "weekly"
-    assignees:
-      - "GalvinPython"
     target-branch: "dev"
-    labels: ["dependencies", "javascript", "component: web"]
 
   - package-ecosystem: "cargo"
     directory: "/api"
     schedule:
-      interval: "weekly"
+      interval: "weekly"
+    target-branch: "dev"

.github/workflows/dependabot_bun.yml

@@ -0,0 +1,44 @@
+name: Update bun.lock
+
+on:
+  pull_request:
+    branches: [main, dev]
+
+permissions:
+  contents: write
+
+jobs:
+  update-bun-lock:
+    name: "Update bun.lock"
+    runs-on: ubuntu-latest
+    if: github.actor == 'dependabot[bot]'
+    steps:
+      - name: Set up Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Install dependencies with Bun
+        run: bun install
+
+      - name: Check for changes
+        id: git_status
+        run: |
+          git add bun.lock
+          if [ -z "$(git status --porcelain)" ]; then
+            echo "No changes to bun.lock"
+            echo "changes_detected=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "Changes detected to bun.lock"
+            echo "changes_detected=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Commit and push changes to bun.lock
+        if: steps.git_status.outputs.changes_detected == 'true'
+        run: |
+          git config --global user.name 'github-actions[bot]'
+          git config --global user.email 'github-actions[bot]@users.noreply.github.com'
+          git commit -m "Update bun.lock (via GitHub Actions)"
+          git pull --rebase origin ${{ github.head_ref }}
+          git push origin ${{ github.head_ref }}