chore: replace .npmrc with pnpm-workspace.yaml

So we can reuse this bot for other utilities

.gitea/workflows/ci.yml

@@ -8,23 +8,32 @@ on:
       - main
 
 jobs:
-  lint:
+  ci:
-    name: Lint and Test
+    name: CI
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout Source Files
         uses: actions/checkout@v4
 
-      - name: Use Node.js v22
+      - name: Use Node.js v24
         uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v2
         with:
           version: 10
 
+      - name: Ensure Dependencies are Pinned
+        uses: naomi-lgbt/dependency-pin-check@main
+        with:
+          language: javascript
+          dev-dependencies: true
+          peer-dependencies: true
+          optional-dependencies: true
+
       - name: Install Dependencies
         run: pnpm install
 

.gitea/workflows/security.yml

@@ -0,0 +1,177 @@
+name: Security Scan and Upload
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+  schedule:
+    - cron: '0 0 * * 1'
+  workflow_dispatch:
+
+jobs:
+  security-audit:
+    name: Security & DefectDojo Upload
+    runs-on: ubuntu-latest
+    continue-on-error: true
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      # --- AUTO-SETUP PROJECT ---
+      - name: Ensure DefectDojo Product Exists
+        env:
+          DD_URL: ${{ secrets.DD_URL }}
+          DD_TOKEN: ${{ secrets.DD_TOKEN }}
+          PRODUCT_NAME: ${{ github.repository }} 
+          PRODUCT_TYPE_ID: 1 
+        run: |
+          sudo apt-get install jq -y > /dev/null
+          
+          echo "Checking connection to $DD_URL..."
+          
+          # Check if product exists - capture HTTP code to debug connection issues
+          RESPONSE=$(curl --write-out "%{http_code}" --silent --output /tmp/response.json \
+            -H "Authorization: Token $DD_TOKEN" \
+            "$DD_URL/api/v2/products/?name=$PRODUCT_NAME")
+          
+          # If response is not 200, print error
+          if [ "$RESPONSE" != "200" ]; then
+            echo "::error::Failed to query DefectDojo. HTTP Code: $RESPONSE"
+            cat /tmp/response.json
+            exit 1
+          fi
+
+          COUNT=$(cat /tmp/response.json | jq -r '.count')
+          
+          if [ "$COUNT" = "0" ]; then
+            echo "Creating product '$PRODUCT_NAME'..."
+            curl -s -X POST "$DD_URL/api/v2/products/" \
+              -H "Authorization: Token $DD_TOKEN" \
+              -H "Content-Type: application/json" \
+              -d '{ "name": "'"$PRODUCT_NAME"'", "description": "Auto-created by Gitea Actions", "prod_type": '$PRODUCT_TYPE_ID' }'
+          else
+            echo "Product '$PRODUCT_NAME' already exists."
+          fi
+
+      # --- 1. TRIVY (Dependencies & Misconfig) ---
+      - name: Install Trivy
+        run: |
+          sudo apt-get install wget apt-transport-https gnupg lsb-release -y
+          wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
+          echo "deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main" | sudo tee -a /etc/apt/sources.list.d/trivy.list
+          sudo apt-get update && sudo apt-get install trivy -y
+
+      - name: Run Trivy (FS Scan)
+        run: |
+          trivy fs . --scanners vuln,misconfig --format json --output trivy-results.json --exit-code 0
+
+      - name: Upload Trivy to DefectDojo
+        env:
+          DD_URL: ${{ secrets.DD_URL }}
+          DD_TOKEN: ${{ secrets.DD_TOKEN }}
+        run: |
+          echo "Uploading Trivy results..."
+          # Generate today's date in YYYY-MM-DD format
+          TODAY=$(date +%Y-%m-%d)
+          
+          HTTP_CODE=$(curl --write-out "%{http_code}" --output response.txt --silent -X POST "$DD_URL/api/v2/import-scan/" \
+            -H "Authorization: Token $DD_TOKEN" \
+            -F "active=true" \
+            -F "verified=true" \
+            -F "scan_type=Trivy Scan" \
+            -F "engagement_name=CI/CD Pipeline" \
+            -F "product_name=${{ github.repository }}" \
+            -F "scan_date=$TODAY" \
+            -F "auto_create_context=true" \
+            -F "file=@trivy-results.json")
+          
+          if [[ "$HTTP_CODE" != "200" && "$HTTP_CODE" != "201" ]]; then
+            echo "::error::Upload Failed with HTTP $HTTP_CODE"
+            echo "--- SERVER RESPONSE ---"
+            cat response.txt
+            echo "-----------------------"
+            exit 1
+          else
+            echo "Upload Success!"
+          fi
+
+      # --- 2. GITLEAKS (Secrets) ---
+      - name: Install Gitleaks
+        run: |
+          wget -qO gitleaks.tar.gz https://github.com/gitleaks/gitleaks/releases/download/v8.18.0/gitleaks_8.18.0_linux_x64.tar.gz
+          tar -xzf gitleaks.tar.gz
+          sudo mv gitleaks /usr/local/bin/ && chmod +x /usr/local/bin/gitleaks
+
+      - name: Run Gitleaks
+        run: gitleaks detect --source . -v --report-path gitleaks-results.json --report-format json --no-git || true
+
+      - name: Upload Gitleaks to DefectDojo
+        env:
+          DD_URL: ${{ secrets.DD_URL }}
+          DD_TOKEN: ${{ secrets.DD_TOKEN }}
+        run: |
+          echo "Uploading Gitleaks results..."  
+          TODAY=$(date +%Y-%m-%d)
+
+          HTTP_CODE=$(curl --write-out "%{http_code}" --output response.txt --silent -X POST "$DD_URL/api/v2/import-scan/" \
+            -H "Authorization: Token $DD_TOKEN" \
+            -F "active=true" \
+            -F "verified=true" \
+            -F "scan_type=Gitleaks Scan" \
+            -F "engagement_name=CI/CD Pipeline" \
+            -F "product_name=${{ github.repository }}" \
+            -F "scan_date=$TODAY" \
+            -F "auto_create_context=true" \
+            -F "file=@gitleaks-results.json")
+
+          if [[ "$HTTP_CODE" != "200" && "$HTTP_CODE" != "201" ]]; then
+             echo "::error::Upload Failed with HTTP $HTTP_CODE"
+             echo "--- SERVER RESPONSE ---"
+             cat response.txt
+             echo "-----------------------"
+             exit 1
+          else
+             echo "Upload Success!"
+          fi
+
+      # --- 3. SEMGREP (SAST) ---
+      - name: Install Semgrep (via pipx)
+        run: |
+          sudo apt-get install pipx -y
+          pipx install semgrep
+          # Add pipx binary path to GITHUB_PATH so next steps can see 'semgrep'
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Run Semgrep
+        run: semgrep scan --config=p/security-audit --config=p/owasp-top-ten --json --output semgrep-results.json . || true
+
+      - name: Upload Semgrep to DefectDojo
+        env:
+          DD_URL: ${{ secrets.DD_URL }}
+          DD_TOKEN: ${{ secrets.DD_TOKEN }}
+        run: |
+          echo "Uploading Semgrep results..."
+          TODAY=$(date +%Y-%m-%d)
+          
+          HTTP_CODE=$(curl --write-out "%{http_code}" --output response.txt --silent -X POST "$DD_URL/api/v2/import-scan/" \
+            -H "Authorization: Token $DD_TOKEN" \
+            -F "active=true" \
+            -F "verified=true" \
+            -F "scan_type=Semgrep JSON Report" \
+            -F "engagement_name=CI/CD Pipeline" \
+            -F "product_name=${{ github.repository }}" \
+            -F "scan_date=$TODAY" \
+            -F "auto_create_context=true" \
+            -F "file=@semgrep-results.json")
+
+          if [[ "$HTTP_CODE" != "200" && "$HTTP_CODE" != "201" ]]; then
+             echo "::error::Upload Failed with HTTP $HTTP_CODE"
+             echo "--- SERVER RESPONSE ---"
+             cat response.txt
+             echo "-----------------------"
+             exit 1
+          else
+             echo "Upload Success!"
+          fi

.gitea/workflows/sonar.yml

@@ -1,34 +0,0 @@
-name: Code Analysis
-on:
-  push:
-    branches:
-      - main
-
-jobs:
-  sonar:
-    name: SonarQube
-
-    steps:
-      - name: Checkout Source Files
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: SonarCube Scan
-        uses: SonarSource/sonarqube-scan-action@v4
-        timeout-minutes: 10
-        env:
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-          SONAR_HOST_URL: "https://quality.nhcarrigan.com"
-        with:
-          args: >
-            -Dsonar.sources=.
-            -Dsonar.projectKey=standup-bot
-
-      - name: SonarQube Quality Gate check
-        uses: sonarsource/sonarqube-quality-gate-action@v1
-        with:
-          pollingTimeoutSec: 600
-        env:
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-          SONAR_HOST_URL: "https://quality.nhcarrigan.com"

README.md

@@ -18,7 +18,7 @@ This page is currently deployed. [View the live website.]
 
 ## Feedback and Bugs
 
-If you have feedback or a bug report, please feel free to open a GitHub issue!
+If you have feedback or a bug report, please [log a ticket on our forum](https://support.nhcarrigan.com).
 
 ## Contributing
 

package.json

@@ -17,14 +17,14 @@
     "@nhcarrigan/eslint-config": "5.2.0",
     "@nhcarrigan/typescript-config": "4.0.0",
     "@types/node": "24.0.6",
-    "@types/node-schedule": "2.1.7",
+    "@types/node-schedule": "2.1.8",
     "@vitest/coverage-istanbul": "3.2.4",
     "eslint": "9.30.0",
-    "typescript": "5.8.3",
+    "typescript": "5.9.3",
     "vitest": "3.2.4"
   },
   "dependencies": {
-    "@nhcarrigan/logger": "1.0.0",
+    "@nhcarrigan/logger": "1.1.1",
     "discord.js": "14.21.0",
     "node-schedule": "2.1.1"
   }

pnpm-lock.yaml

@@ -9,8 +9,8 @@ importers:
   .:
     dependencies:
       '@nhcarrigan/logger':
-        specifier: 1.0.0
+        specifier: 1.1.1
-        version: 1.0.0
+        version: 1.1.1
       discord.js:
         specifier: 14.21.0
         version: 14.21.0
@@ -20,16 +20,16 @@ importers:
     devDependencies:
       '@nhcarrigan/eslint-config':
         specifier: 5.2.0
-        version: 5.2.0(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0)(playwright@1.50.1)(react@19.0.0)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.6))
+        version: 5.2.0(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0)(playwright@1.50.1)(react@19.0.0)(typescript@5.9.3)(vitest@3.2.4(@types/node@24.0.6))
       '@nhcarrigan/typescript-config':
         specifier: 4.0.0
-        version: 4.0.0(typescript@5.8.3)
+        version: 4.0.0(typescript@5.9.3)
       '@types/node':
         specifier: 24.0.6
         version: 24.0.6
       '@types/node-schedule':
-        specifier: 2.1.7
+        specifier: 2.1.8
-        version: 2.1.7
+        version: 2.1.8
       '@vitest/coverage-istanbul':
         specifier: 3.2.4
         version: 3.2.4(vitest@3.2.4(@types/node@24.0.6))
@@ -37,8 +37,8 @@ importers:
         specifier: 9.30.0
         version: 9.30.0
       typescript:
-        specifier: 5.8.3
+        specifier: 5.9.3
-        version: 5.8.3
+        version: 5.9.3
       vitest:
         specifier: 3.2.4
         version: 3.2.4(@types/node@24.0.6)
@@ -415,8 +415,8 @@ packages:
       typescript: '>=5'
       vitest: '>=2'
 
-  '@nhcarrigan/logger@1.0.0':
+  '@nhcarrigan/logger@1.1.1':
-    resolution: {integrity: sha512-2e19Bie+ZKb6yKPKjhawqsENkhHatYkvBAmFZx9eToOXdOca+CYi51tldRMtejg6e0+4hOOf2bo5zdBQKmH0dw==}
+    resolution: {integrity: sha512-P6OEQFHDtf6psybYGljuCxkSW6DLQCsx1aZZ3w4YKBXHBFjDbhuvpM9K1kPhVN48hakitx2WPLEoIFr6YZELYw==}
 
   '@nhcarrigan/typescript-config@4.0.0':
     resolution: {integrity: sha512-969HVha7A/Sg77fuMwOm6p14a+7C5iE6g55OD71srqwKIgksQl+Ex/hAI/pyzTQFDQ/FBJbpnHlR4Ov25QV/rw==}
@@ -478,51 +478,61 @@ packages:
     resolution: {integrity: sha512-A4iphFGNkWRd+5m3VIGuqHnG3MVnqKe7Al57u9mwgbyZ2/xF9Jio72MaY7xxh+Y87VAHmGQr73qoKL9HPbXj1g==}
     cpu: [arm]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm-musleabihf@4.34.8':
     resolution: {integrity: sha512-S0lqKLfTm5u+QTxlFiAnb2J/2dgQqRy/XvziPtDd1rKZFXHTyYLoVL58M/XFwDI01AQCDIevGLbQrMAtdyanpA==}
     cpu: [arm]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-arm64-gnu@4.34.8':
     resolution: {integrity: sha512-jpz9YOuPiSkL4G4pqKrus0pn9aYwpImGkosRKwNi+sJSkz+WU3anZe6hi73StLOQdfXYXC7hUfsQlTnjMd3s1A==}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm64-musl@4.34.8':
     resolution: {integrity: sha512-KdSfaROOUJXgTVxJNAZ3KwkRc5nggDk+06P6lgi1HLv1hskgvxHUKZ4xtwHkVYJ1Rep4GNo+uEfycCRRxht7+Q==}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-loongarch64-gnu@4.34.8':
     resolution: {integrity: sha512-NyF4gcxwkMFRjgXBM6g2lkT58OWztZvw5KkV2K0qqSnUEqCVcqdh2jN4gQrTn/YUpAcNKyFHfoOZEer9nwo6uQ==}
     cpu: [loong64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-powerpc64le-gnu@4.34.8':
     resolution: {integrity: sha512-LMJc999GkhGvktHU85zNTDImZVUCJ1z/MbAJTnviiWmmjyckP5aQsHtcujMjpNdMZPT2rQEDBlJfubhs3jsMfw==}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-riscv64-gnu@4.34.8':
     resolution: {integrity: sha512-xAQCAHPj8nJq1PI3z8CIZzXuXCstquz7cIOL73HHdXiRcKk8Ywwqtx2wrIy23EcTn4aZ2fLJNBB8d0tQENPCmw==}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-s390x-gnu@4.34.8':
     resolution: {integrity: sha512-DdePVk1NDEuc3fOe3dPPTb+rjMtuFw89gw6gVWxQFAuEqqSdDKnrwzZHrUYdac7A7dXl9Q2Vflxpme15gUWQFA==}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-gnu@4.34.8':
     resolution: {integrity: sha512-8y7ED8gjxITUltTUEJLQdgpbPh1sUQ0kMTmufRF/Ns5tI9TNMNlhWtmPKKHCU0SilX+3MJkZ0zERYYGIVBYHIA==}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-musl@4.34.8':
     resolution: {integrity: sha512-SCXcP0ZpGFIe7Ge+McxY5zKxiEI5ra+GT3QRxL0pMMtxPfpyLAKleZODi1zdRHkz5/BhueUrYtYVgubqe9JBNQ==}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-win32-arm64-msvc@4.34.8':
     resolution: {integrity: sha512-YHYsgzZgFJzTRbth4h7Or0m5O74Yda+hLin0irAIobkLQFRQd1qWmnoVfwmKm9TXIZVAD0nZ+GEb2ICicLyCnQ==}
@@ -575,8 +585,8 @@ packages:
   '@types/json5@0.0.29':
     resolution: {integrity: sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==}
 
-  '@types/node-schedule@2.1.7':
+  '@types/node-schedule@2.1.8':
-    resolution: {integrity: sha512-G7Z3R9H7r3TowoH6D2pkzUHPhcJrDF4Jz1JOQ80AX0K2DWTHoN9VC94XzFAPNMdbW9TBzMZ3LjpFi7RYdbxtXA==}
+    resolution: {integrity: sha512-k00g6Yj/oUg/CDC+MeLHUzu0+OFxWbIqrFfDiLi6OPKxTujvpv29mHGM8GtKr7B+9Vv92FcK/8mRqi1DK5f3hA==}
 
   '@types/node@24.0.6':
     resolution: {integrity: sha512-ZOyn+gOs749xU7ovp+Ibj0g1o3dFRqsfPnT22C2t5JzcRvgsEDpGawPbCISGKLudJk9Y0wiu9sYd6kUh0pc9TA==}
@@ -2144,8 +2154,8 @@ packages:
     resolution: {integrity: sha512-3KS2b+kL7fsuk/eJZ7EQdnEmQoaho/r6KUef7hxvltNA5DR8NAUM+8wJMbJyZ4G9/7i3v5zPBIMN5aybAh2/Jg==}
     engines: {node: '>= 0.4'}
 
-  typescript@5.8.3:
+  typescript@5.9.3:
-    resolution: {integrity: sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==}
+    resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
     engines: {node: '>=14.17'}
     hasBin: true
 
@@ -2650,19 +2660,19 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.0
 
-  '@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0)(playwright@1.50.1)(react@19.0.0)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.6))':
+  '@nhcarrigan/eslint-config@5.2.0(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0)(playwright@1.50.1)(react@19.0.0)(typescript@5.9.3)(vitest@3.2.4(@types/node@24.0.6))':
     dependencies:
       '@eslint-community/eslint-plugin-eslint-comments': 4.4.1(eslint@9.30.0)
       '@eslint/compat': 1.2.4(eslint@9.30.0)
       '@eslint/eslintrc': 3.2.0
       '@eslint/js': 9.17.0
-      '@stylistic/eslint-plugin': 2.12.1(eslint@9.30.0)(typescript@5.8.3)
+      '@stylistic/eslint-plugin': 2.12.1(eslint@9.30.0)(typescript@5.9.3)
-      '@typescript-eslint/eslint-plugin': 8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/eslint-plugin': 8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0)(typescript@5.9.3)
-      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.9.3)
-      '@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.6))
+      '@vitest/eslint-plugin': 1.1.24(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0)(typescript@5.9.3)(vitest@3.2.4(@types/node@24.0.6))
       eslint: 9.30.0
-      eslint-plugin-deprecation: 3.0.0(eslint@9.30.0)(typescript@5.8.3)
+      eslint-plugin-deprecation: 3.0.0(eslint@9.30.0)(typescript@5.9.3)
-      eslint-plugin-import: 2.31.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0)
+      eslint-plugin-import: 2.31.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0)
       eslint-plugin-jsdoc: 50.6.1(eslint@9.30.0)
       eslint-plugin-playwright: 2.1.0(eslint@9.30.0)
       eslint-plugin-react: 7.37.3(eslint@9.30.0)
@@ -2671,7 +2681,7 @@ snapshots:
       globals: 15.14.0
       playwright: 1.50.1
       react: 19.0.0
-      typescript: 5.8.3
+      typescript: 5.9.3
       vitest: 3.2.4(@types/node@24.0.6)
     transitivePeerDependencies:
       - '@typescript-eslint/utils'
@@ -2679,11 +2689,11 @@ snapshots:
       - eslint-import-resolver-webpack
       - supports-color
 
-  '@nhcarrigan/logger@1.0.0': {}
+  '@nhcarrigan/logger@1.1.1': {}
 
-  '@nhcarrigan/typescript-config@4.0.0(typescript@5.8.3)':
+  '@nhcarrigan/typescript-config@4.0.0(typescript@5.9.3)':
     dependencies:
-      typescript: 5.8.3
+      typescript: 5.9.3
 
   '@nodelib/fs.scandir@2.1.5':
     dependencies:
@@ -2770,9 +2780,9 @@ snapshots:
 
   '@sapphire/snowflake@3.5.3': {}
 
-  '@stylistic/eslint-plugin@2.12.1(eslint@9.30.0)(typescript@5.8.3)':
+  '@stylistic/eslint-plugin@2.12.1(eslint@9.30.0)(typescript@5.9.3)':
     dependencies:
-      '@typescript-eslint/utils': 8.25.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/utils': 8.25.0(eslint@9.30.0)(typescript@5.9.3)
       eslint: 9.30.0
       eslint-visitor-keys: 4.2.0
       espree: 10.3.0
@@ -2794,7 +2804,7 @@ snapshots:
 
   '@types/json5@0.0.29': {}
 
-  '@types/node-schedule@2.1.7':
+  '@types/node-schedule@2.1.8':
     dependencies:
       '@types/node': 24.0.6
 
@@ -2808,32 +2818,32 @@ snapshots:
     dependencies:
       '@types/node': 24.0.6
 
-  '@typescript-eslint/eslint-plugin@8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0)(typescript@5.8.3)':
+  '@typescript-eslint/eslint-plugin@8.19.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0)(typescript@5.9.3)':
     dependencies:
       '@eslint-community/regexpp': 4.12.1
-      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.9.3)
       '@typescript-eslint/scope-manager': 8.19.0
-      '@typescript-eslint/type-utils': 8.19.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/type-utils': 8.19.0(eslint@9.30.0)(typescript@5.9.3)
-      '@typescript-eslint/utils': 8.19.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/utils': 8.19.0(eslint@9.30.0)(typescript@5.9.3)
       '@typescript-eslint/visitor-keys': 8.19.0
       eslint: 9.30.0
       graphemer: 1.4.0
       ignore: 5.3.2
       natural-compare: 1.4.0
-      ts-api-utils: 1.4.3(typescript@5.8.3)
+      ts-api-utils: 1.4.3(typescript@5.9.3)
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.8.3)':
+  '@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.9.3)':
     dependencies:
       '@typescript-eslint/scope-manager': 8.19.0
       '@typescript-eslint/types': 8.19.0
-      '@typescript-eslint/typescript-estree': 8.19.0(typescript@5.8.3)
+      '@typescript-eslint/typescript-estree': 8.19.0(typescript@5.9.3)
       '@typescript-eslint/visitor-keys': 8.19.0
       debug: 4.4.0
       eslint: 9.30.0
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
@@ -2852,14 +2862,14 @@ snapshots:
       '@typescript-eslint/types': 8.25.0
       '@typescript-eslint/visitor-keys': 8.25.0
 
-  '@typescript-eslint/type-utils@8.19.0(eslint@9.30.0)(typescript@5.8.3)':
+  '@typescript-eslint/type-utils@8.19.0(eslint@9.30.0)(typescript@5.9.3)':
     dependencies:
-      '@typescript-eslint/typescript-estree': 8.19.0(typescript@5.8.3)
+      '@typescript-eslint/typescript-estree': 8.19.0(typescript@5.9.3)
-      '@typescript-eslint/utils': 8.19.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/utils': 8.19.0(eslint@9.30.0)(typescript@5.9.3)
       debug: 4.4.0
       eslint: 9.30.0
-      ts-api-utils: 1.4.3(typescript@5.8.3)
+      ts-api-utils: 1.4.3(typescript@5.9.3)
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
@@ -2869,7 +2879,7 @@ snapshots:
 
   '@typescript-eslint/types@8.25.0': {}
 
-  '@typescript-eslint/typescript-estree@7.18.0(typescript@5.8.3)':
+  '@typescript-eslint/typescript-estree@7.18.0(typescript@5.9.3)':
     dependencies:
       '@typescript-eslint/types': 7.18.0
       '@typescript-eslint/visitor-keys': 7.18.0
@@ -2878,13 +2888,13 @@ snapshots:
       is-glob: 4.0.3
       minimatch: 9.0.5
       semver: 7.7.1
-      ts-api-utils: 1.4.3(typescript@5.8.3)
+      ts-api-utils: 1.4.3(typescript@5.9.3)
     optionalDependencies:
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/typescript-estree@8.19.0(typescript@5.8.3)':
+  '@typescript-eslint/typescript-estree@8.19.0(typescript@5.9.3)':
     dependencies:
       '@typescript-eslint/types': 8.19.0
       '@typescript-eslint/visitor-keys': 8.19.0
@@ -2893,12 +2903,12 @@ snapshots:
       is-glob: 4.0.3
       minimatch: 9.0.5
       semver: 7.7.1
-      ts-api-utils: 1.4.3(typescript@5.8.3)
+      ts-api-utils: 1.4.3(typescript@5.9.3)
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/typescript-estree@8.25.0(typescript@5.8.3)':
+  '@typescript-eslint/typescript-estree@8.25.0(typescript@5.9.3)':
     dependencies:
       '@typescript-eslint/types': 8.25.0
       '@typescript-eslint/visitor-keys': 8.25.0
@@ -2907,41 +2917,41 @@ snapshots:
       is-glob: 4.0.3
       minimatch: 9.0.5
       semver: 7.7.1
-      ts-api-utils: 2.0.1(typescript@5.8.3)
+      ts-api-utils: 2.0.1(typescript@5.9.3)
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/utils@7.18.0(eslint@9.30.0)(typescript@5.8.3)':
+  '@typescript-eslint/utils@7.18.0(eslint@9.30.0)(typescript@5.9.3)':
     dependencies:
       '@eslint-community/eslint-utils': 4.4.1(eslint@9.30.0)
       '@typescript-eslint/scope-manager': 7.18.0
       '@typescript-eslint/types': 7.18.0
-      '@typescript-eslint/typescript-estree': 7.18.0(typescript@5.8.3)
+      '@typescript-eslint/typescript-estree': 7.18.0(typescript@5.9.3)
       eslint: 9.30.0
     transitivePeerDependencies:
       - supports-color
       - typescript
 
-  '@typescript-eslint/utils@8.19.0(eslint@9.30.0)(typescript@5.8.3)':
+  '@typescript-eslint/utils@8.19.0(eslint@9.30.0)(typescript@5.9.3)':
     dependencies:
       '@eslint-community/eslint-utils': 4.4.1(eslint@9.30.0)
       '@typescript-eslint/scope-manager': 8.19.0
       '@typescript-eslint/types': 8.19.0
-      '@typescript-eslint/typescript-estree': 8.19.0(typescript@5.8.3)
+      '@typescript-eslint/typescript-estree': 8.19.0(typescript@5.9.3)
       eslint: 9.30.0
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.8.3)':
+  '@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.9.3)':
     dependencies:
       '@eslint-community/eslint-utils': 4.4.1(eslint@9.30.0)
       '@typescript-eslint/scope-manager': 8.25.0
       '@typescript-eslint/types': 8.25.0
-      '@typescript-eslint/typescript-estree': 8.25.0(typescript@5.8.3)
+      '@typescript-eslint/typescript-estree': 8.25.0(typescript@5.9.3)
       eslint: 9.30.0
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
@@ -2976,12 +2986,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0)(typescript@5.8.3)(vitest@3.2.4(@types/node@24.0.6))':
+  '@vitest/eslint-plugin@1.1.24(@typescript-eslint/utils@8.25.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0)(typescript@5.9.3)(vitest@3.2.4(@types/node@24.0.6))':
     dependencies:
-      '@typescript-eslint/utils': 8.25.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/utils': 8.25.0(eslint@9.30.0)(typescript@5.9.3)
       eslint: 9.30.0
     optionalDependencies:
-      typescript: 5.8.3
+      typescript: 5.9.3
       vitest: 3.2.4(@types/node@24.0.6)
 
   '@vitest/expect@3.2.4':
@@ -3472,27 +3482,27 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  eslint-module-utils@2.12.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.8.3))(eslint-import-resolver-node@0.3.9)(eslint@9.30.0):
+  eslint-module-utils@2.12.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint@9.30.0):
     dependencies:
       debug: 3.2.7
     optionalDependencies:
-      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.9.3)
       eslint: 9.30.0
       eslint-import-resolver-node: 0.3.9
     transitivePeerDependencies:
       - supports-color
 
-  eslint-plugin-deprecation@3.0.0(eslint@9.30.0)(typescript@5.8.3):
+  eslint-plugin-deprecation@3.0.0(eslint@9.30.0)(typescript@5.9.3):
     dependencies:
-      '@typescript-eslint/utils': 7.18.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/utils': 7.18.0(eslint@9.30.0)(typescript@5.9.3)
       eslint: 9.30.0
-      ts-api-utils: 1.4.3(typescript@5.8.3)
+      ts-api-utils: 1.4.3(typescript@5.9.3)
       tslib: 2.8.1
-      typescript: 5.8.3
+      typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  eslint-plugin-import@2.31.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.8.3))(eslint@9.30.0):
+  eslint-plugin-import@2.31.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.9.3))(eslint@9.30.0):
     dependencies:
       '@rtsao/scc': 1.1.0
       array-includes: 3.1.8
@@ -3503,7 +3513,7 @@ snapshots:
       doctrine: 2.1.0
       eslint: 9.30.0
       eslint-import-resolver-node: 0.3.9
-      eslint-module-utils: 2.12.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.8.3))(eslint-import-resolver-node@0.3.9)(eslint@9.30.0)
+      eslint-module-utils: 2.12.0(@typescript-eslint/parser@8.19.0(eslint@9.30.0)(typescript@5.9.3))(eslint-import-resolver-node@0.3.9)(eslint@9.30.0)
       hasown: 2.0.2
       is-core-module: 2.16.1
       is-glob: 4.0.3
@@ -3515,7 +3525,7 @@ snapshots:
       string.prototype.trimend: 1.0.9
       tsconfig-paths: 3.15.0
     optionalDependencies:
-      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.8.3)
+      '@typescript-eslint/parser': 8.19.0(eslint@9.30.0)(typescript@5.9.3)
     transitivePeerDependencies:
       - eslint-import-resolver-typescript
       - eslint-import-resolver-webpack
@@ -4634,13 +4644,13 @@ snapshots:
     dependencies:
       is-number: 7.0.0
 
-  ts-api-utils@1.4.3(typescript@5.8.3):
+  ts-api-utils@1.4.3(typescript@5.9.3):
     dependencies:
-      typescript: 5.8.3
+      typescript: 5.9.3
 
-  ts-api-utils@2.0.1(typescript@5.8.3):
+  ts-api-utils@2.0.1(typescript@5.9.3):
     dependencies:
-      typescript: 5.8.3
+      typescript: 5.9.3
 
   ts-mixer@6.0.4: {}
 
@@ -4696,7 +4706,7 @@ snapshots:
       possible-typed-array-names: 1.1.0
       reflect.getprototypeof: 1.0.10
 
-  typescript@5.8.3: {}
+  typescript@5.9.3: {}
 
   unbox-primitive@1.1.0:
     dependencies:

pnpm-workspace.yaml

@@ -0,0 +1,21 @@
+# Security
+
+# Do not execute any scripts of installed packages (project scripts still run)
+ignoreDepScripts: true
+# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
+enablePrePostScripts: false
+# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
+minimumReleaseAge: 14400
+# Fail if a package's trust level has decreased compared to previous releases
+trustPolicy: no-downgrade
+# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
+trustPolicyIgnoreAfter: 525960
+# Fail if there are missing or invalid peer dependencies
+strictPeerDependencies: true
+# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
+blockExoticSubdeps: true
+
+# Lockfile
+
+# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
+preferFrozenLockfile: false

src/config/channels.ts

@@ -4,112 +4,27 @@
  * @author Naomi Carrigan
  */
 
-/**
+interface Channel {
- * The channels to post standup reminders in.
- */
-export const channels: Array<{
   channelId: string;
   roleId:    string;
   name:      string;
-}> = [
+}
+
+const nhcarriganMentorshipChannels: Array<Channel> = [
   {
-    channelId: "1382093555228606484",
+    channelId: "1400630073010163792",
-    name:      "red-script",
+    name:      "accountability",
-    roleId:    "1382091453987029144",
+    roleId:    "1400588705273745550",
-  },
-  {
-    channelId: "1382093583963656223",
-    name:      "orange-bytes",
-    roleId:    "1382091462707122186",
-  },
-  {
-    channelId: "1382093618017337574",
-    name:      "yellow-packet",
-    roleId:    "1382091466767208538",
-  },
-  {
-    channelId: "1382093654885138439",
-    name:      "green-loop",
-    roleId:    "1382091470877491364",
-  },
-  {
-    channelId: "1382093684925005935",
-    name:      "blue-stack",
-    roleId:    "1382091474560356393",
-  },
-  {
-    channelId: "1382093724200210522",
-    name:      "purple-array",
-    roleId:    "1382091477710012456",
-  },
-  {
-    channelId: "1382093753489162330",
-    name:      "pink-protocol",
-    roleId:    "1382091502255341568",
-  },
-  {
-    channelId: "1382093785973915820",
-    name:      "cyan-branch",
-    roleId:    "1382091520533856337",
-  },
-  {
-    channelId: "1382093811693387867",
-    name:      "teal-cache",
-    roleId:    "1382091525873336400",
-  },
-  {
-    channelId: "1382093843918225520",
-    name:      "mint-syntax",
-    roleId:    "1382091530428219603",
-  },
-  {
-    channelId: "1382093883722174605",
-    name:      "lime-variable",
-    roleId:    "1382091534538641458",
-  },
-  {
-    channelId: "1382093910259798046",
-    name:      "rose-token",
-    roleId:    "1382091538900979762",
-  },
-  {
-    channelId: "1382093973488799886",
-    name:      "lavender-query",
-    roleId:    "1382091542961066014",
-  },
-  {
-    channelId: "1382094002526097489",
-    name:      "indigo-class",
-    roleId:    "1382091547742568559",
-  },
-  {
-    channelId: "1382094051360116837",
-    name:      "golden-index",
-    roleId:    "1382091551982882936",
-  },
-  {
-    channelId: "1382094088739754096",
-    name:      "silver-promise",
-    roleId:    "1382091556613394443",
-  },
-  {
-    channelId: "1382094114467745912",
-    name:      "bronze-thread",
-    roleId:    "1382091560367292536",
-  },
-  {
-    channelId: "1382094146206044181",
-    name:      "maroon-socket",
-    roleId:    "1382091564498681907",
-  },
-  {
-    channelId: "1382094200211771522",
-    name:      "violet-function",
-    roleId:    "1382091568252719205",
-  },
-  {
-    channelId: "1382094311264616670",
-    name:      "grey-database",
-    roleId:    "1382091572602212622",
   },
 ];
+const freeCodeCampHackathonChannels: Array<Channel> = [];
+const dallasSoftwareDevelopersCohortChannels: Array<Channel> = [];
+
+/**
+ * The channels to post standup reminders in.
+ */
+export const channels: Array<Channel> = [
+  ...freeCodeCampHackathonChannels,
+  ...dallasSoftwareDevelopersCohortChannels,
+  ...nhcarriganMentorshipChannels,
+];

src/index.ts

@@ -38,7 +38,8 @@ client.on(Events.ClientReady, () => {
   });
 });
 
-client.on(Events.MessageCreate, (message) => {
+// eslint-disable-next-line @typescript-eslint/no-misused-promises -- sod off this is going away next month.
+client.on(Events.MessageCreate, async(message) => {
   if (!message.channel.isThread() || !message.inGuild()) {
     return;
   }
@@ -54,8 +55,19 @@ client.on(Events.MessageCreate, (message) => {
   if (message.author.bot) {
     return;
   }
+  const threadOwner = await message.channel.fetchOwner();
+  // Check if thread owner is Maribelle (to indicate it is progress thread)
+  if (threadOwner?.id !== "1386862413936328796") {
+    return;
+  }
   if (!activeIds.includes(message.author.id)) {
     activeIds.push(message.author.id);
+    await message.channel.send({
+      allowedMentions: {
+        parse: [],
+      },
+      content: `-# Thank you for your progress update, <@${message.author.id}>! Your participation for today has been recorded.`,
+    });
   }
 });
 

src/modules/standup.ts

@@ -66,17 +66,19 @@ export const standup = async(
     await Promise.all(
       filtered.map(async(channel) => {
         const sent = await channel.
-          send(
+          send({ allowedMentions: {
+            parse: [ "roles" ],
+          },
+          content:
             `Good morning <@&${
               channels.find((c) => {
                 return c.channelId === channel.id;
-              })?.roleId ?? "692816967895220344"
+              })?.roleId ?? channel.guildId
             }> It is time for your daily progress update. Please share the following in this thread:
           
 1️⃣ What did you accomplish yesterday?
 2️⃣ What are you working on today?
-3️⃣ Are there any blockers or issues you need help with?`,
+3️⃣ Are there any blockers or issues you need help with?` }).
-          ).
           catch(() => {
             void logger.log(
               "warn",