Renovate: Update dependency dotenv to v17 #161

Open
renovate wants to merge 1 commit from renovate/dotenv-17.x into main
Collaborator

This PR contains the following updates:

Package Type Update Change
dotenv dependencies major ^16.4.5 -> ^17.0.0

Release Notes

motdotla/dotenv (dotenv)

v17.2.3

Compare Source

Changed
  • Fixed typescript error definition (#​912)

v17.2.2

Compare Source

Added
  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

v17.2.1

Compare Source

Changed
  • Fix clickable tip links by removing parentheses (#​897)

v17.2.0

Compare Source

Added
  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#​889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})

v17.1.0

Compare Source

Added
  • Add additional security and configuration tips to the runtime log (#​884)
  • Dim the tips text from the main injection information text
const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
  '🛠️  run anywhere with `dotenvx run -- yourcommand`',
  '⚙️  specify custom .env file path with { path: \'/custom/path/.env\' }',
  '⚙️  enable debug logging with { debug: true }',
  '⚙️  override existing env vars with { override: true }',
  '⚙️  suppress all logs with { quiet: true }',
  '⚙️  write to custom object with { processEnv: myObject }',
  '⚙️  load multiple .env files with { path: [\'.env.local\', \'.env\'] }'
]

v17.0.1

Compare Source

Changed
  • Patched injected log to count only populated/set keys to process.env (#​879)

v17.0.0

Compare Source

Changed
  • Default quiet to false - informational (file and keys count) runtime log message shows by default (#​875)

v16.6.1

Compare Source

Changed
  • Default quiet to true – hiding the runtime log message (#​874)
  • NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
  • And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@​dotenvx/dotenvx').config().

v16.6.0

Compare Source

Added
  • Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#​870)
  • Use { quiet: true } to suppress
  • Aligns dotenv more closely with dotenvx.

v16.5.0

Compare Source

Added
  • 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed
  • Remove _log method. Use _debug #​862

v16.4.7

Compare Source

Changed
  • Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #​848

v16.4.6

Compare Source

Changed
  • Clean up stale dev dependencies #​847
  • Various README updates clarifying usage and alternative solutions using dotenvx

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [dotenv](https://github.com/motdotla/dotenv) | dependencies | major | [`^16.4.5` -> `^17.0.0`](https://renovatebot.com/diffs/npm/dotenv/16.4.5/17.2.3) | --- ### Release Notes <details> <summary>motdotla/dotenv (dotenv)</summary> ### [`v17.2.3`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1723-2025-09-29) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.2...v17.2.3) ##### Changed - Fixed typescript error definition ([#&#8203;912](https://github.com/motdotla/dotenv/pull/912)) ### [`v17.2.2`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1722-2025-09-02) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.1...v17.2.2) ##### Added - 🙏 A big thank you to new sponsor [Tuple.app](https://tuple.app/dotenv) - *the premier screen sharing app for developers on macOS and Windows.* Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back. ### [`v17.2.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1721-2025-07-24) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.0...v17.2.1) ##### Changed - Fix clickable tip links by removing parentheses ([#&#8203;897](https://github.com/motdotla/dotenv/pull/897)) ### [`v17.2.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1720-2025-07-09) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.1.0...v17.2.0) ##### Added - Optionally specify `DOTENV_CONFIG_QUIET=true` in your environment or `.env` file to quiet the runtime log ([#&#8203;889](https://github.com/motdotla/dotenv/pull/889)) - Just like dotenv any `DOTENV_CONFIG_` environment variables take precedence over any code set options like `({quiet: false})` ```ini ``` ### [`v17.1.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1710-2025-07-07) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.0.1...v17.1.0) ##### Added - Add additional security and configuration tips to the runtime log ([#&#8203;884](https://github.com/motdotla/dotenv/pull/884)) - Dim the tips text from the main injection information text ```js const TIPS = [ '🔐 encrypt with dotenvx: https://dotenvx.com', '🔐 prevent committing .env to code: https://dotenvx.com/precommit', '🔐 prevent building .env in docker: https://dotenvx.com/prebuild', '🛠️ run anywhere with `dotenvx run -- yourcommand`', '⚙️ specify custom .env file path with { path: \'/custom/path/.env\' }', '⚙️ enable debug logging with { debug: true }', '⚙️ override existing env vars with { override: true }', '⚙️ suppress all logs with { quiet: true }', '⚙️ write to custom object with { processEnv: myObject }', '⚙️ load multiple .env files with { path: [\'.env.local\', \'.env\'] }' ] ``` ### [`v17.0.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1701-2025-07-01) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.0.0...v17.0.1) ##### Changed - Patched injected log to count only populated/set keys to process.env ([#&#8203;879](https://github.com/motdotla/dotenv/pull/879)) ### [`v17.0.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1700-2025-06-27) [Compare Source](https://github.com/motdotla/dotenv/compare/v16.6.1...v17.0.0) ##### Changed - Default `quiet` to false - informational (file and keys count) runtime log message shows by default ([#&#8203;875](https://github.com/motdotla/dotenv/pull/875)) ### [`v16.6.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1661-2025-06-27) [Compare Source](https://github.com/motdotla/dotenv/compare/v16.6.0...v16.6.1) ##### Changed - Default `quiet` to true – hiding the runtime log message ([#&#8203;874](https://github.com/motdotla/dotenv/pull/874)) - NOTICE: 17.0.0 will be released with quiet defaulting to false. Use `config({ quiet: true })` to suppress. - And check out the new [dotenvx](https://github.com/dotenvx/dotenvx). As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch `require('dotenv').config()` for `require('@&#8203;dotenvx/dotenvx').config()`. ### [`v16.6.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1660-2025-06-26) [Compare Source](https://github.com/motdotla/dotenv/compare/v16.5.0...v16.6.0) ##### Added - Default log helpful message `[dotenv@16.6.0] injecting env (1) from .env` ([#&#8203;870](https://github.com/motdotla/dotenv/pull/870)) - Use `{ quiet: true }` to suppress - Aligns dotenv more closely with [dotenvx](https://github.com/dotenvx/dotenvx). ### [`v16.5.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1650-2025-04-07) [Compare Source](https://github.com/motdotla/dotenv/compare/v16.4.7...v16.5.0) ##### Added - 🎉 Added new sponsor [Graphite](https://graphite.dev/?utm_source=github\&utm_medium=repo\&utm_campaign=dotenv) - *the AI developer productivity platform helping teams on GitHub ship higher quality software, faster*. > \[!TIP] > **[Become a sponsor](https://github.com/sponsors/motdotla)** > > The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. > Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time. ##### Changed - Remove `_log` method. Use `_debug` [#&#8203;862](https://github.com/motdotla/dotenv/pull/862) ### [`v16.4.7`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1647-2024-12-03) [Compare Source](https://github.com/motdotla/dotenv/compare/v16.4.6...v16.4.7) ##### Changed - Ignore `.tap` folder when publishing. (oops, sorry about that everyone. - [@&#8203;motdotla](https://github.com/motdotla)) [#&#8203;848](https://github.com/motdotla/dotenv/pull/848) ### [`v16.4.6`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1646-2024-12-02) [Compare Source](https://github.com/motdotla/dotenv/compare/v16.4.5...v16.4.6) ##### Changed - Clean up stale dev dependencies [#&#8203;847](https://github.com/motdotla/dotenv/pull/847) - Various README updates clarifying usage and alternative solutions using [dotenvx](https://github.com/dotenvx/dotenvx) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC42Mi4xIiwidXBkYXRlZEluVmVyIjoiNDAuNjIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/dotenv-17.x:renovate/dotenv-17.x
git switch renovate/dotenv-17.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/dotenv-17.x
git switch renovate/dotenv-17.x
git rebase main
git switch main
git merge --ff-only renovate/dotenv-17.x
git switch renovate/dotenv-17.x
git rebase main
git switch main
git merge --no-ff renovate/dotenv-17.x
git switch main
git merge --squash renovate/dotenv-17.x
git switch main
git merge --ff-only renovate/dotenv-17.x
git switch main
git merge renovate/dotenv-17.x
git push origin main
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
NB-Public/rocketchat2matrix!161
No description provided.