[PR #453] [MERGED] fix(deps): bump dotenv from 16.4.1 to 16.4.5 in /web #465

New issue

Closed

opened 2026-03-03 16:38:31 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:38:31 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/453
Author: @dependabot[bot]
Created: 6/1/2024
Status: ✅ Merged
Merged: 6/2/2024
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/dotenv-16.4.5

📝 Commits (1)

f068e00 fix(deps): bump dotenv from 16.4.1 to 16.4.5 in /web

📊 Changes

2 files changed (+7 additions, -7 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+6 -6)

📄 Description

Bumps dotenv from 16.4.1 to 16.4.5.

Changelog

Sourced from dotenv's changelog.

16.4.5 (2024-02-19)

Changed

🐞 fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #814

16.4.4 (2024-02-13)

Changed

🐞 Replaced chaining operator ?. with old school && (fixing node 12 failures) #812

16.4.3 (2024-02-12)

Changed

Fixed processing of multiple files in options.path #805

16.4.2 (2024-02-10)

Changed

Changed funding link in package.json to dotenvx.com

Commits

9f3e833 16.4.5
6924177 Merge pull request #814 from motdotla/dont-check-existance
3533420 changelog 🪵
249e5a6 adjust logic to support tests
87fd887 do not check if exists
1146910 rename .env-multiline to .env.multiline
d03e397 16.4.4
3275a0a changelog 🪵
f40a8c3 Merge pull request #812 from motdotla/patch-12
1dc22d3 replace 14 chaining operator
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/453 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/1/2024 **Status:** ✅ Merged **Merged:** 6/2/2024 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/dotenv-16.4.5` --- ### 📝 Commits (1) - [`f068e00`](https://github.com/NdoleStudio/httpsms/commit/f068e00b04698ae1f6202411f831689a179cd568) fix(deps): bump dotenv from 16.4.1 to 16.4.5 in /web ### 📊 Changes **2 files changed** (+7 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+6 -6) </details> ### 📄 Description Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.4.1 to 16.4.5. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.4.4...v16.4.5">16.4.5</a> (2024-02-19)</h2> <h3>Changed</h3> <ul> <li>🐞 fix recent regression when using <code>path</code> option. return to historical behavior: do not attempt to auto find <code>.env</code> if <code>path</code> set. (regression was introduced in <code>16.4.3</code>) <a href="https://redirect.github.com/motdotla/dotenv/pull/814">#814</a></li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.4.3...v16.4.4">16.4.4</a> (2024-02-13)</h2> <h3>Changed</h3> <ul> <li>🐞 Replaced chaining operator <code>?.</code> with old school <code>&&</code> (fixing node 12 failures) <a href="https://redirect.github.com/motdotla/dotenv/pull/812">#812</a></li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.4.2...v16.4.3">16.4.3</a> (2024-02-12)</h2> <h3>Changed</h3> <ul> <li>Fixed processing of multiple files in <code>options.path</code> <a href="https://redirect.github.com/motdotla/dotenv/pull/805">#805</a></li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.4.1...v16.4.2">16.4.2</a> (2024-02-10)</h2> <h3>Changed</h3> <ul> <li>Changed funding link in package.json to <a href="https://dotenvx.com"><code>dotenvx.com</code></a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motdotla/dotenv/commit/9f3e83352ec6ba912161748a2fd15b07829430e2"><code>9f3e833</code></a> 16.4.5</li> <li><a href="https://github.com/motdotla/dotenv/commit/69241772b6f37af8e388f61916334d84ec0deeb7"><code>6924177</code></a> Merge pull request <a href="https://redirect.github.com/motdotla/dotenv/issues/814">#814</a> from motdotla/dont-check-existance</li> <li><a href="https://github.com/motdotla/dotenv/commit/353342048cae3621f8abb3a23e00af880ab2c69f"><code>3533420</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/249e5a64f612d59aaac74f594f951024490d9765"><code>249e5a6</code></a> adjust logic to support tests</li> <li><a href="https://github.com/motdotla/dotenv/commit/87fd887e31b913d334ef820f27737d80b28389ee"><code>87fd887</code></a> do not check if exists</li> <li><a href="https://github.com/motdotla/dotenv/commit/1146910932ed1dd19c2c6506f7fc6373047c1321"><code>1146910</code></a> rename .env-multiline to .env.multiline</li> <li><a href="https://github.com/motdotla/dotenv/commit/d03e39794ac29aa7e7fde20492b0b8c51544d9d7"><code>d03e397</code></a> 16.4.4</li> <li><a href="https://github.com/motdotla/dotenv/commit/3275a0a940a8560bc42e93b5a814cea23b3dae38"><code>3275a0a</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/f40a8c3e3519ba9dca3014ff47541f276f90420a"><code>f40a8c3</code></a> Merge pull request <a href="https://redirect.github.com/motdotla/dotenv/issues/812">#812</a> from motdotla/patch-12</li> <li><a href="https://github.com/motdotla/dotenv/commit/1dc22d312fc641c9384fcec4b8181d089e37de8c"><code>1dc22d3</code></a> replace 14 chaining operator</li> <li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v16.4.1...v16.4.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=16.4.1&new-version=16.4.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>