ci(bun): fix latest master integration

## Summary

Refresh the root Bun lock after the eslint-plugin-unicorn bump. Classify Bun locks correctly in release changelogs. Narrow GitHub ownership and remove the obsolete consumer-install action.

## Why

The rebased tree failed every frozen install because master advanced a dependency without the PR's new lockfile. Master's release tooling also reintroduced Yarn-only assumptions, while recursive GitHub ownership claimed workflows that already have product owners.

## Test plan

Complete script suite, full repository lint, frozen Bun install, changed-line coverage, generated license check, and shell syntax checks.

Author: BridgeAR

.github/CODEOWNERS

@@ -1,10 +1,10 @@
 # TODO: Restructure the project by product and clean up this file.
 
-# Default recursive ownership. GitHub applies the last matching rule, so the per-product entries
-# further down re-assign the parts of these trees that a product team owns.
+# Shared repository tooling
 /.agents/ @DataDog/lang-platform-js
 /.claude/ @DataDog/lang-platform-js
-/.github/ @DataDog/lang-platform-js
+/.github/actions/ @DataDog/lang-platform-js
+/.github/ISSUE_TEMPLATE/ @DataDog/lang-platform-js
 /.gitlab/ @DataDog/lang-platform-js
 /.husky/ @DataDog/lang-platform-js
 /.vscode/ @DataDog/lang-platform-js
@@ -328,6 +328,8 @@
 # CI
 /.github/actions/upload-coverage-artifact/ @DataDog/ci-app-libraries
 /.github/actions/upload-junit-artifacts/ @DataDog/ci-app-libraries
+/.github/all-green/ @DataDog/lang-platform-js
+/.github/audit-allowlist.json @DataDog/lang-platform-js
 /.github/editorconfig-checker/ @Datadog/lang-platform-js
 /.github/playwright/ @DataDog/ci-app-libraries
 /.github/selenium/ @DataDog/ci-app-libraries

.github/workflows/platform.yml

@@ -60,19 +60,7 @@ jobs:
       - run: mkdir -p /tmp/app
       - run: npm i -g pnpm
         if: matrix.manager.name == 'pnpm'
-      # Wrapped in nick-fields/retry to bound the worst case: on this PR
-      # the bun matrix entry has been stalling indefinitely at `Resolving
-      # dependencies` on the consumer install, matching the symptom in
-      # oven-sh/bun#5831. The four other package managers finish in ~3-5s
-      # against the same dd-trace.tgz, so a 2-minute per-attempt cap is
-      # generous for the happy path and tight enough that a stalled bun
-      # retries quickly instead of holding the job for 6 hours.
-      - uses: nick-fields/retry@ad984534de44a9489a53aefd81eb77f87c70dc60 # v4.0.0
-        with:
-          max_attempts: 3
-          timeout_minutes: 2
-          retry_wait_seconds: 5
-          command: cd /tmp/app && ${{ matrix.manager.install }} /tmp/dd-trace.tgz
+      - run: cd /tmp/app && ${{ matrix.manager.install }} /tmp/dd-trace.tgz
       - run: echo "require('dd-trace').init()" >> /tmp/app/index.js
       - run: node /tmp/app
 

bun.lock

@@ -28,7 +28,7 @@ const INTERNAL_PATH_PATTERNS = [
   /^scripts\//,
   /(^|\/)(?:test|tests|benchmark)(?:\/|$)/,
   /\.(?:spec|test)\.[cm]?[jt]sx?$/,
-  /(^|\/)(?:package-lock\.json|yarn\.lock)$/,
+  /(^|\/)(?:bun\.lock|package-lock\.json)$/,
   /^(?:AGENTS\.md|CONTRIBUTING\.md|eslint\.config\.mjs|tsconfig(?:\.[^.]+)?\.json)$/,
 ]
 // Dependabot tags the commit scope `deps-dev` for development dependencies and

scripts/release/changelog.js

@@ -441,47 +441,47 @@ describe('release changelog', () => {
       {
         sha: 'abc001',
         subject: 'chore(deps): bump form-data from 4.0.5 to 4.0.6 (#8918)',
-        files: ['package.json', 'yarn.lock'],
+        files: ['package.json', 'bun.lock'],
       },
       {
         sha: 'abc002',
         subject: 'chore(deps): bump protobufjs from 8.4.2 to 8.6.0 in /vendor in the ' +
           'vendor-minor-and-patch-dependencies group across 1 directory (#8851)',
-        files: ['vendor/package.json', 'vendor/package-lock.json'],
+        files: ['vendor/package.json', 'vendor/bun.lock'],
       },
       {
         sha: 'abc003',
         subject: 'chore(deps): bump the runtime-minor-and-patch-dependencies group across 1 directory ' +
           'with 3 updates (#8920)',
-        files: ['package.json', 'yarn.lock'],
+        files: ['package.json', 'bun.lock'],
       },
       {
         sha: 'abc004',
         subject: 'chore(deps-dev): bump the dev-minor-and-patch-dependencies group across 1 directory ' +
           'with 4 updates (#8854)',
         contributors: [{ name: '@dependabot', login: 'dependabot' }],
-        files: ['package.json', 'yarn.lock'],
+        files: ['package.json', 'bun.lock'],
       },
       {
         sha: 'abc005',
         subject: 'chore(deps): bump @anthropic-ai/sdk from 0.101.0 to 0.102.0 in ' +
           '/packages/dd-trace/test/plugins/versions in the ai-and-llm group across 1 directory (#8852)',
-        files: ['packages/dd-trace/test/plugins/versions/package.json', 'yarn.lock'],
+        files: ['packages/dd-trace/test/plugins/versions/package.json'],
       },
       {
         sha: 'abc006',
         subject: 'chore(deps): bump the serverless group across 1 directory with 8 updates (#8929)',
-        files: ['integration-tests/serverless/package.json', 'yarn.lock'],
+        files: ['integration-tests/serverless/package.json', 'integration-tests/serverless/package-lock.json'],
       },
       {
         sha: 'abc007',
         subject: 'chore(deps): bump markdown-it from 14.1.1 to 14.2.0 in /docs (#8932)',
-        files: ['docs/package.json', 'yarn.lock'],
+        files: ['docs/package.json', 'docs/bun.lock'],
       },
       {
         sha: 'abc008',
         subject: 'chore(deps): refresh transitive dependencies (#8933)',
-        files: ['yarn.lock'],
+        files: ['bun.lock'],
       },
     ])