Bump dotenv from 16.5.0 to 17.0.1
Closed
Number: #192
Type: Pull Request
State: Closed
Type: Pull Request
State: Closed
Author:
dependabot[bot]
Association: Contributor
Comments: 1
Association: Contributor
Comments: 1
Created:
July 02, 2025 at 06:49 AM UTC
(11 months ago)
(11 months ago)
Updated:
July 08, 2025 at 06:15 AM UTC
(11 months ago)
(11 months ago)
Closed:
July 08, 2025 at 06:15 AM UTC
(11 months ago)
(11 months ago)
Time to Close:
6 days
Labels:
dependencies javascript
dependencies javascript
Description:
Bumps dotenv from 16.5.0 to 17.0.1.
Changelog
Sourced from dotenv's changelog.
17.0.1 (2025-07-01)
Changed
- Patched injected log to count only populated/set keys to process.env (#879)
17.0.0 (2025-06-27)
Changed
- Default
quietto false - informational (file and keys count) runtime log message shows by default (#875)16.6.1 (2025-06-27)
Changed
- Default
quietto true – hiding the runtime log message (#874)- NOTICE: 17.0.0 will be released with quiet defaulting to false. Use
config({ quiet: true })to suppress.- And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch
require('dotenv').config()forrequire('@dotenvx/dotenvx').config().16.6.0 (2025-06-26)
Added
Commits
535465c17.0.10570831changelog 🪵2f323b9Merge pull request #879 from motdotla/smarter-keys-logged2561ad1correctly track which keys were written to process.env3010120remove sponsorsf28bfd517.0.03348b36changelog 🪵a814691Merge pull request #875 from motdotla/quiet-truee8978b0mention dotenvx in runtime message to point people to safer .env files661b247update README withquietoption- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
1
1
Files Changed:
2
2
Additions:
+5
+5
Deletions:
-6
-6
Package Dependencies
Technical Details
| ID: | 2746827 |
| UUID: | 2634472951 |
| Node ID: | PR_kwDOKr18Mc6dBt33 |
| Host: | GitHub |
| Repository: | NHSDigital/Javascript-mesh-client |
| Mergeable: | Yes |
| Merge State: | Clean |