Doble/ShiftSync
2
0
Fork 0
Code Issues Pull requests 11 Projects Releases Packages Wiki Activity Actions

Update dependency dotenv to v17 #37

Open
renovate-bot wants to merge 1 commit from renovate/dotenv-17.x into main
pull from: renovate/dotenv-17.x
merge into: Doble:main
Conversation 1 Commits 1 Files changed 1 +1 -1
renovate-bot commented 2026-03-26 16:01:24 +00:00
Collaborator
Copy link

This PR contains the following updates:

Package Type Update Change
dotenv dependencies major ^16.5.0 → ^17.0.0

Release Notes

motdotla/dotenv (dotenv)

v17.4.2

Compare Source

Changed
  • Improved skill files - tightened up details (#​1009)

v17.4.1

Compare Source

Changed
  • Change text injecting to injected (#​1005)

v17.4.0

Compare Source

Added
  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)
Changed
  • Tighten up logs: ◇ injecting env (14) from .env (#​1003)

v17.3.1

Compare Source

Changed
  • Fix as2 example command in README and update spanish README

v17.3.0

Compare Source

Added
  • Add a new README section on dotenv’s approach to the agentic future.
Changed
  • Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

v17.2.4

Compare Source

Changed
  • Make DotenvPopulateInput accept NodeJS.ProcessEnv type (#​915)
  • Give back to dotenv by checking out my newest project vestauth. It is auth for agents. Thank you for using my software.

v17.2.3

Compare Source

Changed
  • Fixed typescript error definition (#​912)

v17.2.2

Compare Source

Added
  • 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

v17.2.1

Compare Source

Changed
  • Fix clickable tip links by removing parentheses (#​897)

v17.2.0

Compare Source

Added
  • Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#​889)
  • Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})

# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"

// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)

$ node index.js
Hello World

or

$ DOTENV_CONFIG_QUIET=true node index.js

v17.1.0

Compare Source

Added
  • Add additional security and configuration tips to the runtime log (#​884)
  • Dim the tips text from the main injection information text
const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
  '🛠️  run anywhere with `dotenvx run -- yourcommand`',
  '⚙️  specify custom .env file path with { path: \'/custom/path/.env\' }',
  '⚙️  enable debug logging with { debug: true }',
  '⚙️  override existing env vars with { override: true }',
  '⚙️  suppress all logs with { quiet: true }',
  '⚙️  write to custom object with { processEnv: myObject }',
  '⚙️  load multiple .env files with { path: [\'.env.local\', \'.env\'] }'
]

v17.0.1

Compare Source

Changed
  • Patched injected log to count only populated/set keys to process.env (#​879)

v17.0.0

Compare Source

Changed
  • Default quiet to false - informational (file and keys count) runtime log message shows by default (#​875)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [dotenv](https://github.com/motdotla/dotenv) | dependencies | major | [`^16.5.0` → `^17.0.0`](https://renovatebot.com/diffs/npm/dotenv/16.6.1/17.4.2) | --- ### Release Notes <details> <summary>motdotla/dotenv (dotenv)</summary> ### [`v17.4.2`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1742-2026-04-12) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.4.1...v17.4.2) ##### Changed - Improved skill files - tightened up details ([#&#8203;1009](https://github.com/motdotla/dotenv/pull/1009)) ### [`v17.4.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1741-2026-04-05) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.4.0...v17.4.1) ##### Changed - Change text `injecting` to `injected` ([#&#8203;1005](https://github.com/motdotla/dotenv/pull/1005)) ### [`v17.4.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1740-2026-04-01) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.3.1...v17.4.0) ##### Added - Add `skills/` folder with focused agent skills: `skills/dotenv/SKILL.md` (core usage) and `skills/dotenvx/SKILL.md` (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (`npx skills add motdotla/dotenv`) ##### Changed - Tighten up logs: `◇ injecting env (14) from .env` ([#&#8203;1003](https://github.com/motdotla/dotenv/pull/1003)) ### [`v17.3.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1731-2026-02-12) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.3.0...v17.3.1) ##### Changed - Fix as2 example command in README and update spanish README ### [`v17.3.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1730-2026-02-12) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.4...v17.3.0) ##### Added - Add a new README section on dotenv’s approach to the agentic future. ##### Changed - Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details. ### [`v17.2.4`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1724-2026-02-05) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.3...v17.2.4) ##### Changed - Make `DotenvPopulateInput` accept `NodeJS.ProcessEnv` type ([#&#8203;915](https://github.com/motdotla/dotenv/pull/915)) * Give back to dotenv by checking out my newest project [vestauth](https://github.com/vestauth/vestauth). It is auth for agents. Thank you for using my software. ### [`v17.2.3`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1723-2025-09-29) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.2...v17.2.3) ##### Changed - Fixed typescript error definition ([#&#8203;912](https://github.com/motdotla/dotenv/pull/912)) ### [`v17.2.2`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1722-2025-09-02) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.1...v17.2.2) ##### Added - 🙏 A big thank you to new sponsor [Tuple.app](https://tuple.app/dotenv) - *the premier screen sharing app for developers on macOS and Windows.* Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back. ### [`v17.2.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1721-2025-07-24) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.2.0...v17.2.1) ##### Changed - Fix clickable tip links by removing parentheses ([#&#8203;897](https://github.com/motdotla/dotenv/pull/897)) ### [`v17.2.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1720-2025-07-09) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.1.0...v17.2.0) ##### Added - Optionally specify `DOTENV_CONFIG_QUIET=true` in your environment or `.env` file to quiet the runtime log ([#&#8203;889](https://github.com/motdotla/dotenv/pull/889)) - Just like dotenv any `DOTENV_CONFIG_` environment variables take precedence over any code set options like `({quiet: false})` ```ini # .env DOTENV_CONFIG_QUIET=true HELLO="World" ``` ```js // index.js require('dotenv').config() console.log(`Hello ${process.env.HELLO}`) ``` ```sh $ node index.js Hello World or $ DOTENV_CONFIG_QUIET=true node index.js ``` ### [`v17.1.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1710-2025-07-07) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.0.1...v17.1.0) ##### Added - Add additional security and configuration tips to the runtime log ([#&#8203;884](https://github.com/motdotla/dotenv/pull/884)) - Dim the tips text from the main injection information text ```js const TIPS = [ '🔐 encrypt with dotenvx: https://dotenvx.com', '🔐 prevent committing .env to code: https://dotenvx.com/precommit', '🔐 prevent building .env in docker: https://dotenvx.com/prebuild', '🛠️ run anywhere with `dotenvx run -- yourcommand`', '⚙️ specify custom .env file path with { path: \'/custom/path/.env\' }', '⚙️ enable debug logging with { debug: true }', '⚙️ override existing env vars with { override: true }', '⚙️ suppress all logs with { quiet: true }', '⚙️ write to custom object with { processEnv: myObject }', '⚙️ load multiple .env files with { path: [\'.env.local\', \'.env\'] }' ] ``` ### [`v17.0.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1701-2025-07-01) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.0.0...v17.0.1) ##### Changed - Patched injected log to count only populated/set keys to process.env ([#&#8203;879](https://github.com/motdotla/dotenv/pull/879)) ### [`v17.0.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1700-2025-06-27) [Compare Source](https://github.com/motdotla/dotenv/compare/v16.6.1...v17.0.0) ##### Changed - Default `quiet` to false - informational (file and keys count) runtime log message shows by default ([#&#8203;875](https://github.com/motdotla/dotenv/pull/875)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS40IiwidXBkYXRlZEluVmVyIjoiNDMuMTYwLjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Update dependency dotenv to v17
Some checks failed
renovate/artifacts Artifact file update failure
PR Validation / pr-validation (pull_request) Failing after 0s
Details
API Deployment Container / determine-workflow (pull_request) Has been cancelled
Details
API Deployment Container / nonprod-deploy (pull_request) Has been cancelled
Details
API Deployment Container / prod-deploy (pull_request) Has been cancelled
Details
api-deploy-nonprod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
api-deploy-prod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
web-deploy-nonprod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
web-deploy-prod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
1f166a89b9
renovate-bot commented 2026-03-26 16:01:26 +00:00
Author
Collaborator
Copy link

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: api/package-lock.json
undefined
### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: api/package-lock.json ``` undefined ```
Some checks failed
renovate/artifacts Artifact file update failure
PR Validation / pr-validation (pull_request) Failing after 0s
Details
API Deployment Container / determine-workflow (pull_request) Has been cancelled
Details
API Deployment Container / nonprod-deploy (pull_request) Has been cancelled
Details
API Deployment Container / prod-deploy (pull_request) Has been cancelled
Details
api-deploy-nonprod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
api-deploy-prod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
web-deploy-nonprod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
web-deploy-prod.yml / Update dependency dotenv to v17 (pull_request) Failing after 0s
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/dotenv-17.x:renovate/dotenv-17.x
git switch renovate/dotenv-17.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/dotenv-17.x
git switch renovate/dotenv-17.x
git rebase main
git switch main
git merge --ff-only renovate/dotenv-17.x
git switch renovate/dotenv-17.x
git rebase main
git switch main
git merge --no-ff renovate/dotenv-17.x
git switch main
git merge --squash renovate/dotenv-17.x
git switch main
git merge --ff-only renovate/dotenv-17.x
git switch main
git merge renovate/dotenv-17.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bugfix

   
dependencies
Pull requests that update a dependency file

  
documentation

   
feature

   
hotfix

   
invalid name

   
javascript
Pull requests that update javascript code

  
refactor
No labels
bugfix
dependencies
documentation
feature
hotfix
invalid name
javascript
refactor
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Doble/ShiftSync!37
No description provided.