[PR #648] [MERGED] fix(deps): bump dotenv from 16.4.7 to 16.5.0 in /web #655

New issue

Closed

opened 2026-03-03 16:39:28 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:39:28 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/648
Author: @dependabot[bot]
Created: 5/1/2025
Status: ✅ Merged
Merged: 5/1/2025
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/dotenv-16.5.0

📝 Commits (1)

184bbe2 fix(deps): bump dotenv from 16.4.7 to 16.5.0 in /web

📊 Changes

2 files changed (+9 additions, -9 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+8 -8)

📄 Description

Bumps dotenv from 16.4.7 to 16.5.0.

Changelog

Sourced from dotenv's changelog.

16.5.0 (2025-04-07)

Added

🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP] Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

Remove _log method. Use _debug #862

Commits

d39cc9a 16.5.0
2f4e407 Merge pull request #863 from Fdawgs/patch-1
a1eef11 chore(package): add homepage url
fb7e407 README update
bf9113f README update
9326f05 changelog 🪵
2e8da30 changelog 🪵
3257b3a changelog 🪵
c0ca62c changelog 🪵
797c5e9 changelog 🪵
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/648 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/1/2025 **Status:** ✅ Merged **Merged:** 5/1/2025 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/dotenv-16.5.0` --- ### 📝 Commits (1) - [`184bbe2`](https://github.com/NdoleStudio/httpsms/commit/184bbe2bde535ff4ade19a089709e34653968c2c) fix(deps): bump dotenv from 16.4.7 to 16.5.0 in /web ### 📊 Changes **2 files changed** (+9 additions, -9 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+8 -8) </details> ### 📄 Description Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.4.7 to 16.5.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.4.7...v16.5.0">16.5.0</a> (2025-04-07)</h2> <h3>Added</h3> <ul> <li>🎉 Added new sponsor <a href="https://graphite.dev/?utm_source=github&utm_medium=repo&utm_campaign=dotenv">Graphite</a> - <em>the AI developer productivity platform helping teams on GitHub ship higher quality software, faster</em>.</li> </ul> <blockquote> <p>[!TIP] <strong><a href="https://github.com/sponsors/motdotla">Become a sponsor</a></strong></p> <p>The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.</p> </blockquote> <h3>Changed</h3> <ul> <li>Remove <code>_log</code> method. Use <code>_debug</code> <a href="https://redirect.github.com/motdotla/dotenv/pull/862">#862</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motdotla/dotenv/commit/d39cc9a94ef80b534d02401ab99d17463e902385"><code>d39cc9a</code></a> 16.5.0</li> <li><a href="https://github.com/motdotla/dotenv/commit/2f4e407c73e66b822a96b6439b40ea94ced2409f"><code>2f4e407</code></a> Merge pull request <a href="https://redirect.github.com/motdotla/dotenv/issues/863">#863</a> from Fdawgs/patch-1</li> <li><a href="https://github.com/motdotla/dotenv/commit/a1eef11a7064dcdaf56d2bbdca1e58cfdcdcf5a4"><code>a1eef11</code></a> chore(package): add homepage url</li> <li><a href="https://github.com/motdotla/dotenv/commit/fb7e407892824b29817d02bc0ec911d00efe1dc2"><code>fb7e407</code></a> README update</li> <li><a href="https://github.com/motdotla/dotenv/commit/bf9113fad68ba352a02081ac1fada45f9e85e772"><code>bf9113f</code></a> README update</li> <li><a href="https://github.com/motdotla/dotenv/commit/9326f05f95cbac63f88da96a5b02852f789c9380"><code>9326f05</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/2e8da3018af610f18089c9246497b56943cdea6e"><code>2e8da30</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/3257b3adaf4f3a62346ed185869039325aa6e6db"><code>3257b3a</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/c0ca62c841fe36b2de8030d02533a1b80955abe8"><code>c0ca62c</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/797c5e9d6e9359bfae2b26f5c4aca8890531f7dd"><code>797c5e9</code></a> changelog 🪵</li> <li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v16.4.7...v16.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=16.4.7&new-version=16.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>