fix: migrate CI and release workflows fully to bun

- Replace npm ci/install with bun install across all jobs
- Replace npm run with bun run for lint, build, typecheck, format
- Use bun pm pack + npm publish for release (workaround for bun
  not supporting --provenance, per oven-sh/bun#15601)
- Replace node with bun for script execution in smoke tests
- Update paths-filter to watch bun.lock instead of package-lock.json
- Remove npm-specific env vars (NPM_CONFIG_AUDIT, etc.)
- Keep actions/setup-node only where npm registry auth is needed

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: teallarson

.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
               - "src/**"
               - "templates/_shared/**"
               - "package.json"
-              - "package-lock.json"
+              - "bun.lock"
               - "tsconfig.json"
               - "eslint.config.mjs"
               - ".prettierrc"
@@ -48,21 +48,14 @@ jobs:
     runs-on: ubuntu-latest
     needs: changes
     if: ${{ needs.changes.outputs.core == 'true' || needs.changes.outputs.ai_sdk == 'true' || needs.changes.outputs.mastra == 'true' || needs.changes.outputs.langchain == 'true' }}
-    env:
-      NPM_CONFIG_AUDIT: "false"
-      NPM_CONFIG_FUND: "false"
-      NPM_CONFIG_PREFER_OFFLINE: "true"
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-          cache: npm
-      - run: npm ci
-      - run: npm run lint
-      - run: npm run format:check
-      - run: npm run typecheck
-      - run: npm run build
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install
+      - run: bun run lint
+      - run: bun run format:check
+      - run: bun run typecheck
+      - run: bun run build
       - name: Upload built CLI artifact
         uses: actions/upload-artifact@v4
         with:
@@ -90,23 +83,14 @@ jobs:
     needs: [changes, lint-and-build]
     if: ${{ needs.changes.outputs.core == 'true' || (matrix.template == 'ai-sdk' && needs.changes.outputs.ai_sdk == 'true') || (matrix.template == 'mastra' && needs.changes.outputs.mastra == 'true') || (matrix.template == 'langchain' && needs.changes.outputs.langchain == 'true') }}
     env:
-      NPM_CONFIG_AUDIT: "false"
-      NPM_CONFIG_FUND: "false"
-      NPM_CONFIG_PREFER_OFFLINE: "true"
       PIP_DISABLE_PIP_VERSION_CHECK: "1"
     strategy:
       fail-fast: false
       matrix:
         template: [ai-sdk, mastra, langchain]
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
       - uses: oven-sh/setup-bun@v2
-        if: matrix.template != 'langchain'
-        with:
-          bun-version: latest
       - name: Cache bun packages
         if: matrix.template != 'langchain'
         uses: actions/cache@v4
@@ -122,15 +106,15 @@ jobs:
           python-version: "3.12"
           cache: pip
           cache-dependency-path: templates/langchain/requirements.txt
-      - run: npm ci
+      - run: bun install
       - name: Download built CLI artifact
         uses: actions/download-artifact@v4
         with:
           name: cli-dist
           path: dist
 
       - name: Scaffold template
-        run: node dist/index.js ci-test-${{ matrix.template }} --template ${{ matrix.template }}
+        run: bun dist/index.js ci-test-${{ matrix.template }} --template ${{ matrix.template }}
 
       - name: Create .env from example
         working-directory: ci-test-${{ matrix.template }}

.github/workflows/release.yml

@@ -14,9 +14,6 @@ jobs:
     name: Tag & Publish
     runs-on: ubuntu-latest
     environment: npm
-    env:
-      NPM_CONFIG_AUDIT: "false"
-      NPM_CONFIG_FUND: "false"
     steps:
       - uses: actions/checkout@v4
       - uses: oven-sh/setup-bun@v2
@@ -29,7 +26,7 @@ jobs:
       - name: Check if version changed
         id: version
         run: |
-          LOCAL=$(node -p "require('./package.json').version")
+          LOCAL=$(bun -e "console.log(require('./package.json').version)")
           REMOTE=$(npm view @arcadeai/create-agent version 2>/dev/null || echo "0.0.0")
           echo "local=$LOCAL" >> "$GITHUB_OUTPUT"
           if [ "$LOCAL" != "$REMOTE" ]; then
@@ -40,11 +37,13 @@ jobs:
 
       - name: Build
         if: steps.version.outputs.changed == 'true'
-        run: npm run build
+        run: bun run build
 
       - name: Publish to npm
         if: steps.version.outputs.changed == 'true'
-        run: npm publish --access public --provenance
+        run: |
+          TARBALL=$(bun pm pack --quiet)
+          npm publish "$TARBALL" --access public --provenance
 
       - name: Create GitHub Release
         if: steps.version.outputs.changed == 'true'