[PR #700] [MERGED] fix(deps): bump dotenv from 16.5.0 to 17.0.0 in /web #705

New issue

Closed

opened 2026-03-03 16:39:42 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:39:42 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/700
Author: @dependabot[bot]
Created: 7/1/2025
Status: ✅ Merged
Merged: 7/1/2025
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/dotenv-17.0.0

📝 Commits (1)

f0ea508 fix(deps): bump dotenv from 16.5.0 to 17.0.0 in /web

📊 Changes

2 files changed (+15 additions, -9 deletions)

View changed files

📝 web/package.json (+1 -1)
📝 web/pnpm-lock.yaml (+14 -8)

📄 Description

Bumps dotenv from 16.5.0 to 17.0.0.

Changelog

Sourced from dotenv's changelog.

17.0.0 (2025-06-27)

Changed

Default quiet to false - informational (file and keys count) runtime log message shows by default (#875)

16.6.1 (2025-06-27)

Changed

Default quiet to true – hiding the runtime log message (#874)

NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.

And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

16.6.0 (2025-06-26)

Added

Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#870)

Use { quiet: true } to suppress

Aligns dotenv more closely with dotenvx.

Commits

f28bfd5 17.0.0
3348b36 changelog 🪵
a814691 Merge pull request #875 from motdotla/quiet-true
e8978b0 mention dotenvx in runtime message to point people to safer .env files
661b247 update README with quiet option
b1d4a78 quiet defaults to false - use quiet: true to suppress info log
6acdb0a changelog 🪵
076ba3b 16.6.1
8867fe0 changelog 🪵
424c32d Merge pull request #874 from motdotla/default-quiet-to-true
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/700 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 7/1/2025 **Status:** ✅ Merged **Merged:** 7/1/2025 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/dotenv-17.0.0` --- ### 📝 Commits (1) - [`f0ea508`](https://github.com/NdoleStudio/httpsms/commit/f0ea508ed6531cec1d30811bd02c62cb4f4a335c) fix(deps): bump dotenv from 16.5.0 to 17.0.0 in /web ### 📊 Changes **2 files changed** (+15 additions, -9 deletions) <details> <summary>View changed files</summary> 📝 `web/package.json` (+1 -1) 📝 `web/pnpm-lock.yaml` (+14 -8) </details> ### 📄 Description Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.5.0 to 17.0.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.6.1...v17.0.0">17.0.0</a> (2025-06-27)</h2> <h3>Changed</h3> <ul> <li>Default <code>quiet</code> to false - informational (file and keys count) runtime log message shows by default (<a href="https://redirect.github.com/motdotla/dotenv/pull/874">#875</a>)</li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.6.0...v16.6.1">16.6.1</a> (2025-06-27)</h2> <h3>Changed</h3> <ul> <li>Default <code>quiet</code> to true – hiding the runtime log message (<a href="https://redirect.github.com/motdotla/dotenv/pull/874">#874</a>)</li> <li>NOTICE: 17.0.0 will be released with quiet defaulting to false. Use <code>config({ quiet: true })</code> to suppress.</li> <li>And check out the new <a href="https://github.com/dotenvx/dotenvx">dotenvx</a>. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch <code>require('dotenv').config()</code> for <code>require('@dotenvx/dotenvx').config()</code>.</li> </ul> <h2><a href="https://github.com/motdotla/dotenv/compare/v16.5.0...v16.6.0">16.6.0</a> (2025-06-26)</h2> <h3>Added</h3> <ul> <li>Default log helpful message <code>[dotenv@16.6.0] injecting env (1) from .env</code> (<a href="https://redirect.github.com/motdotla/dotenv/pull/870">#870</a>)</li> <li>Use <code>{ quiet: true }</code> to suppress</li> <li>Aligns dotenv more closely with <a href="https://github.com/dotenvx/dotenvx">dotenvx</a>.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motdotla/dotenv/commit/f28bfd55817054af9fd5097b19eb4faa2189cb6b"><code>f28bfd5</code></a> 17.0.0</li> <li><a href="https://github.com/motdotla/dotenv/commit/3348b36933022b19f25070acdc126153cd64bae8"><code>3348b36</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/a814691e6e4a7cfe84be731b3e6ad2fa19f24085"><code>a814691</code></a> Merge pull request <a href="https://redirect.github.com/motdotla/dotenv/issues/875">#875</a> from motdotla/quiet-true</li> <li><a href="https://github.com/motdotla/dotenv/commit/e8978b09236ee5aabbc29bfb251c47b904bfc2c1"><code>e8978b0</code></a> mention dotenvx in runtime message to point people to safer .env files</li> <li><a href="https://github.com/motdotla/dotenv/commit/661b247fb94e9027a05ae814eab4409c2e758e8a"><code>661b247</code></a> update README with <code>quiet</code> option</li> <li><a href="https://github.com/motdotla/dotenv/commit/b1d4a78198151ca4ef525b1fb5f77e2636622e5f"><code>b1d4a78</code></a> <code>quiet</code> defaults to false - use <code>quiet: true</code> to suppress info log</li> <li><a href="https://github.com/motdotla/dotenv/commit/6acdb0aec753350b012db2b77bc05696268c5dd2"><code>6acdb0a</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/076ba3b6a225b8cb878c1cd0a222674b6e5ef87d"><code>076ba3b</code></a> 16.6.1</li> <li><a href="https://github.com/motdotla/dotenv/commit/8867fe07944f172f91b36d3e71ff43ad7bddb005"><code>8867fe0</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/424c32deac4078ce034cdf4b328b782bf089d32d"><code>424c32d</code></a> Merge pull request <a href="https://redirect.github.com/motdotla/dotenv/issues/874">#874</a> from motdotla/default-quiet-to-true</li> <li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v16.5.0...v17.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=16.5.0&new-version=17.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>