Add Dependabot or Renovate for automated dependency updates

[sshdopey]

What

No automated dependency update mechanism exists. Vulnerable transitive dependencies accumulate over time. The .github/ directory has no Dependabot or Renovate configuration.

Why

Manual dependency updates are infrequent and easily forgotten. Automated tools ensure security patches are applied promptly.

Scope

• Add dependabot.yml or renovate.json configuration
• Configure for npm/bun dependencies
• Set update schedule (weekly or daily)
• Group minor/patch updates to reduce PR noise

Acceptance Criteria

• Dependabot or Renovate configuration exists
• Monitors package.json dependencies
• Creates PRs for security updates automatically
• Groups minor/patch updates
• Respects bun.lock for reproducibility

Technical Context

• .github/ directory exists but no dependabot.yml
• package.json uses caret ranges for all deps
• bun.lock present for lockfile integrity

[LayanGift]

@LayanGift has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hello Maintainer,
I’m interested in being assigned this issue. I’ll handle the implementation carefully, test the changes, and submit a PR for review.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @LayanGift to this issue.

[drips-wave]

Congratulations, @LayanGift! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @LayanGift: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊