🚀 release: v1.1.1

 Merge pull request #102 from wgtechlabs/dev

Author: warengonzaga

.github/workflows/patch-build.yml

@@ -8,7 +8,8 @@ on:
       - 'src/**'
       - 'Dockerfile'
       - 'package.json'
-      - 'yarn.lock'
+      - 'pnpm-lock.yaml'
+      - '.npmrc'
       - '.github/workflows/**'
       - 'docker-compose.yml'
 

.github/workflows/pr-build.yml

@@ -8,7 +8,8 @@ on:
       - 'src/**'
       - 'Dockerfile'
       - 'package.json'
-      - 'yarn.lock'
+      - 'pnpm-lock.yaml'
+      - '.npmrc'
       - '.github/workflows/pr-build.yml'
 
 env:

.github/workflows/security.yml

@@ -8,7 +8,8 @@ on:
       - 'src/**'
       - 'Dockerfile'
       - 'package.json'
-      - 'yarn.lock'
+      - 'pnpm-lock.yaml'
+      - '.npmrc'
       - '.github/workflows/security.yml'
   pull_request:
     branches: [main]

.github/workflows/test.yml

@@ -7,7 +7,8 @@ on:
     paths:
       - 'src/**'
       - 'package.json'
-      - 'yarn.lock'
+      - 'pnpm-lock.yaml'
+      - '.npmrc'
       - 'tsconfig.json'
       - 'vitest.config.ts'
       - '.github/workflows/test.yml'
@@ -16,7 +17,8 @@ on:
     paths:
       - 'src/**'
       - 'package.json'
-      - 'yarn.lock'
+      - 'pnpm-lock.yaml'
+      - '.npmrc'
       - 'tsconfig.json'
       - 'vitest.config.ts'
       - '.github/workflows/test.yml'
@@ -33,26 +35,31 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
-          cache: 'yarn'
+          cache: 'pnpm'
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - name: Run linter
-        run: yarn lint
+        run: pnpm lint
 
       - name: Run type checking
-        run: yarn build
+        run: pnpm build
 
       - name: Run tests (fast feedback)
-        run: yarn test:run
+        run: pnpm test
 
       - name: Run tests with coverage (detailed analysis)
-        run: yarn test:coverage
+        run: pnpm test:coverage
         if: success()
 
       - name: Upload coverage to Codecov

.github/workflows/validate.yml

@@ -21,20 +21,25 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9.15.9
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
-          cache: 'yarn'
+          cache: 'pnpm'
 
       - name: Install dependencies
-        run: yarn install --frozen-lockfile
+        run: pnpm install --frozen-lockfile
 
       - name: Run type checking
-        run: yarn build
+        run: pnpm build
 
       - name: Run linter
-        run: yarn lint
+        run: pnpm lint
 
       - name: Run Trivy security scan
         uses: aquasecurity/[email protected]

.github/workflows/wip-build.yml

@@ -7,7 +7,8 @@ on:
       - 'src/**'
       - 'Dockerfile'
       - 'package.json'
-      - 'yarn.lock'
+      - 'pnpm-lock.yaml'
+      - '.npmrc'
       - '.github/workflows/wip-build.yml'
 
 env:

.gitignore

@@ -75,6 +75,9 @@ dist/
 # Yarn Integrity file
 .yarn-integrity
 
+# pnpm debug logs
+.pnpm-debug.log*
+
 # dotenv environment variable files
 .env
 .env.development.local

.npmrc

@@ -0,0 +1,116 @@
+# =============================================================================
+# PNPM Configuration
+# =============================================================================
+# This configuration file defines pnpm settings for optimal performance,
+# security, and development experience.
+#
+# For more information: https://pnpm.io/npmrc
+# =============================================================================
+
+# Node.js version management
+# Use the Node.js version specified in package.json engines field
+# use-node-version=20.0.0
+
+# Strict peer dependencies
+# Fail installation if peer dependencies are not met
+strict-peer-dependencies=true
+
+# Auto-install peers
+# Disabled to prevent local lockfile mutations and ensure deterministic builds
+auto-install-peers=false
+
+# Shamefully hoist
+# Disabled - use pnpm's default isolated node_modules structure
+shamefully-hoist=false
+
+# Public hoist pattern
+# Hoist only necessary packages to root for compatibility
+public-hoist-pattern[]=*eslint*
+public-hoist-pattern[]=*prettier*
+
+# Node linker
+# Use isolated mode for better dependency management
+node-linker=isolated
+
+# Enable lockfile
+# Always generate and use pnpm-lock.yaml
+lockfile=true
+
+# Package import method
+# Use hardlinks for faster installation and disk efficiency
+package-import-method=auto
+
+# Engine strict
+# Enforce Node.js version from package.json engines field
+engine-strict=true
+
+# Save exact
+# Save exact versions in package.json for predictable builds
+save-exact=true
+
+# Store directory
+# Use default pnpm store location
+# store-dir=~/.pnpm-store
+
+# Verify store integrity
+# Check store integrity before installation
+verify-store-integrity=true
+
+# Prefer frozen lockfile
+# Use frozen lockfile in CI environments
+# frozen-lockfile is set via CLI in CI/CD
+
+# Ignore workspace root check
+# Allow running pnpm in workspace root
+ignore-workspace-root-check=false
+
+# Dedupe peer dependents
+# Deduplicate peer dependents for smaller node_modules
+dedupe-peer-dependents=true
+
+# =============================================================================
+# Security Settings
+# =============================================================================
+
+# Registry
+registry=https://registry.npmjs.org/
+
+# Side effects cache
+# Enable for better performance
+side-effects-cache=true
+
+# Side effects cache readonly
+# Allow writing to cache
+side-effects-cache-readonly=false
+
+# =============================================================================
+# Performance Settings
+# =============================================================================
+
+# Network concurrency
+# Number of concurrent network requests (reduced for CI stability)
+network-concurrency=8
+
+# Fetch retries
+# Number of times to retry failed network requests
+fetch-retries=2
+
+# Fetch retry factor
+# Exponential backoff factor for retries
+fetch-retry-factor=10
+
+# Fetch retry mintimeout
+# Minimum time before first retry
+fetch-retry-mintimeout=10000
+
+# Fetch retry maxtimeout
+# Maximum time before retry
+fetch-retry-maxtimeout=60000
+
+# =============================================================================
+# Development Settings
+# =============================================================================
+
+# Recursive install
+# Enable recursive installation
+recursive-install=true

CONTRIBUTING.md

@@ -26,7 +26,7 @@ To get started with development:
 
 2. **Install dependencies**
    ```bash
-   yarn install
+   pnpm install
    ```
 
 3. **Set up environment variables**
@@ -35,12 +35,12 @@ To get started with development:
 
 4. **Start the bot in development mode**
    ```bash
-   yarn dev
+   pnpm dev
    ```
 
 5. **Deploy commands when needed**
    ```bash
-   yarn deploycommand
+   pnpm deploycommand
    ```
 
 Please refer to the [README](./README.md) for more detailed setup instructions, including Discord application setup and webhook configuration.

Dockerfile

@@ -15,19 +15,21 @@
 
 # syntax=docker/dockerfile:1
 
-# Use Node.js 22.16 LTS Alpine with security patches
-ARG NODE_VERSION=22.16-alpine3.21
+# Use Node.js 24 LTS Alpine with security patches
+ARG NODE_VERSION=24-alpine3.21
 
 # =============================================================================
 # STAGE 1: Base Image
 # =============================================================================
 # Alpine Linux 3.21 base for minimal image size with latest security updates
 FROM node:${NODE_VERSION} AS base
 
-# Install security updates for Alpine packages
+# Install security updates for Alpine packages and enable Corepack for pnpm
 RUN apk update && apk upgrade && \
     apk add --no-cache dumb-init && \
-    rm -rf /var/cache/apk/*
+    rm -rf /var/cache/apk/* && \
+    corepack enable && \
+    corepack prepare [email protected] --activate
 
 # Set working directory for all subsequent stages
 WORKDIR /usr/src/app
@@ -39,11 +41,11 @@ WORKDIR /usr/src/app
 FROM base AS deps
 
 # Copy package management files for dependency installation
-COPY package.json yarn.lock ./
+COPY package.json pnpm-lock.yaml .npmrc ./
 
-# Install only production dependencies
-RUN yarn install --production --frozen-lockfile && \
-    yarn cache clean
+# Install only production dependencies using pnpm
+RUN pnpm install --prod --frozen-lockfile && \
+    pnpm store prune
 
 # =============================================================================
 # STAGE 3: Build Application  
@@ -52,14 +54,14 @@ RUN yarn install --production --frozen-lockfile && \
 FROM base AS build
 
 # Copy package management files
-COPY package.json yarn.lock ./
+COPY package.json pnpm-lock.yaml .npmrc ./
 
 # Install all dependencies (including devDependencies for building)
-RUN yarn install --frozen-lockfile
+RUN pnpm install --frozen-lockfile
 
 # Copy source code and build the application
 COPY . .
-RUN yarn run build
+RUN pnpm run build
 
 # Copy non-TypeScript files that need to be in the final build
 RUN mkdir -p dist/database && cp src/database/schema.sql dist/database/schema.sql