[PR #341] [MERGED] fix(deps): bump dotenv from 16.3.1 to 16.4.1 in /web #366

New issue

Closed

opened 2026-03-03 16:38:02 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:38:02 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/341
Author: @dependabot[bot]
Created: 2/1/2024
Status: ✅ Merged
Merged: 2/1/2024
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/dotenv-16.4.1

📝 Commits (1)

daf1905 fix(deps): bump dotenv from 16.3.1 to 16.4.1 in /web

📊 Changes

2 files changed (+7 additions, -7 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+6 -6)

📄 Description

Bumps dotenv from 16.3.1 to 16.4.1.

Changelog

Sourced from dotenv's changelog.

16.4.1 (2024-01-24)

Patch support for array as path option #797

16.4.0 (2024-01-23)

Add error.code to error messages around .env.vault decryption handling #795

Add ability to find .env.vault file when filename(s) passed as an array #784

16.3.2 (2024-01-18)

Added

Add debug message when no encoding set #735

Changed

Fix output typing for populate #792

Use subarray instead of slice #793

Commits

e251ee2 16.4.1
a7fee29 update CHANGELOG 🪵
579d136 update README
7ea2f81 Merge pull request #798 from motdotla/fix-tests
6b829d2 demonstrate currently failing (pending) test. multiple env files should merge
3e2284b largely remove mocking from tests except where useful
2039c4e wip: fix tests
48a6ade Merge pull request #797 from tran-simon/master
cfd735d fix: support array for path option
a44cb3d update README
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/341 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/1/2024 **Status:** ✅ Merged **Merged:** 2/1/2024 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/dotenv-16.4.1` --- ### 📝 Commits (1) - [`daf1905`](https://github.com/NdoleStudio/httpsms/commit/daf19058e8881b12e0149d66959c378c25972b00) fix(deps): bump dotenv from 16.3.1 to 16.4.1 in /web ### 📊 Changes **2 files changed** (+7 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+6 -6) </details> ### 📄 Description Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.3.1 to 16.4.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.4.0...v16.4.1">16.4.1</a> (2024-01-24)</h2> <ul> <li>Patch support for array as <code>path</code> option <a href="https://redirect.github.com/motdotla/dotenv/pull/797">#797</a></li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.3.2...v16.4.0">16.4.0</a> (2024-01-23)</h2> <ul> <li>Add <code>error.code</code> to error messages around <code>.env.vault</code> decryption handling <a href="https://redirect.github.com/motdotla/dotenv/pull/795">#795</a></li> <li>Add ability to find <code>.env.vault</code> file when filename(s) passed as an array <a href="https://redirect.github.com/motdotla/dotenv/pull/784">#784</a></li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.3.1...v16.3.2">16.3.2</a> (2024-01-18)</h2> <h3>Added</h3> <ul> <li>Add debug message when no encoding set <a href="https://redirect.github.com/motdotla/dotenv/pull/735">#735</a></li> </ul> <h3>Changed</h3> <ul> <li>Fix output typing for <code>populate</code> <a href="https://redirect.github.com/motdotla/dotenv/pull/792">#792</a></li> <li>Use subarray instead of slice <a href="https://redirect.github.com/motdotla/dotenv/pull/793">#793</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motdotla/dotenv/commit/e251ee244a77fc8f6100d0efaae87ca561f5e33a"><code>e251ee2</code></a> 16.4.1</li> <li><a href="https://github.com/motdotla/dotenv/commit/a7fee29bd0392fc8da039e809f833e6df0b6fd3c"><code>a7fee29</code></a> update CHANGELOG 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/579d136c2175eaac14a284e58e531e3c2d169b8c"><code>579d136</code></a> update README</li> <li><a href="https://github.com/motdotla/dotenv/commit/7ea2f81a2efc97fee568bb0470a9786638f84b27"><code>7ea2f81</code></a> Merge pull request <a href="https://redirect.github.com/motdotla/dotenv/issues/798">#798</a> from motdotla/fix-tests</li> <li><a href="https://github.com/motdotla/dotenv/commit/6b829d2551c6b90d1d7d67d46471d845083b1fff"><code>6b829d2</code></a> demonstrate currently failing (pending) test. multiple env files should merge</li> <li><a href="https://github.com/motdotla/dotenv/commit/3e2284b89d31648d89c63f696de9c7e6d5438518"><code>3e2284b</code></a> largely remove mocking from tests except where useful</li> <li><a href="https://github.com/motdotla/dotenv/commit/2039c4edc6cc0b29409004e447feca61abf424ac"><code>2039c4e</code></a> wip: fix tests</li> <li><a href="https://github.com/motdotla/dotenv/commit/48a6ade3bf4f1e00f61b74607ee3bc58f7b7064d"><code>48a6ade</code></a> Merge pull request <a href="https://redirect.github.com/motdotla/dotenv/issues/797">#797</a> from tran-simon/master</li> <li><a href="https://github.com/motdotla/dotenv/commit/cfd735d7d00f01e3772a35b541b1b141fd5a5c5c"><code>cfd735d</code></a> fix: support array for path option</li> <li><a href="https://github.com/motdotla/dotenv/commit/a44cb3dd00abdd77f3268be111cf9dd68e9a8e91"><code>a44cb3d</code></a> update README</li> <li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v16.3.1...v16.4.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=16.3.1&new-version=16.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>