[PR #447] [MERGED] Replace `dotenv` (unmaintained since 2020) with `dotenvy` (RUSTSEC-2021-0141) #463

New issue

Closed

opened 2026-02-27 20:24:49 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 20:24:49 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/ramsayleung/rspotify/pull/447
Author: @joshuamegnauth54
Created: 11/21/2023
Status: ✅ Merged
Merged: 11/21/2023
Merged by: @ramsayleung

Base: master ← Head: switch-to-dotenvy

📝 Commits (1)

61e3689 Replace dotenv (unmaintained) with dotenvy

📊 Changes

3 files changed (+7 additions, -6 deletions)

View changed files

📝 CHANGELOG.md (+1 -0)
📝 Cargo.toml (+3 -3)
📝 src/lib.rs (+3 -3)

📄 Description

Description

Replace the dotenv crate with dotenvy. dotenvy is a maintained fork recommended by RUSTSEC.

Motivation and Context

dotenv is unmaintained and has not received an update since 2020. dotenvy is the recommended, drop in fork.

Sources:

Dependencies

dotenvy

Type of change

Bug fix (non-breaking change which fixes an issue)

How has this been tested?

I ran the test suite with --features env-file before and after the change. The fork doesn't change the original crate's API beyond replacing dotenv with dotenvy.

Is this change properly documented?

No, but I'll edit the CHANGELOG.md and squash the commits now.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/ramsayleung/rspotify/pull/447 **Author:** [@joshuamegnauth54](https://github.com/joshuamegnauth54) **Created:** 11/21/2023 **Status:** ✅ Merged **Merged:** 11/21/2023 **Merged by:** [@ramsayleung](https://github.com/ramsayleung) **Base:** `master` ← **Head:** `switch-to-dotenvy` --- ### 📝 Commits (1) - [`61e3689`](https://github.com/ramsayleung/rspotify/commit/61e3689d2a46290995a02a13623a376095806e4d) Replace dotenv (unmaintained) with dotenvy ### 📊 Changes **3 files changed** (+7 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `CHANGELOG.md` (+1 -0) 📝 `Cargo.toml` (+3 -3) 📝 `src/lib.rs` (+3 -3) </details> ### 📄 Description ## Description Replace the [dotenv](https://github.com/dotenv-rs/dotenv) crate with [dotenvy](https://github.com/allan2/dotenvy). `dotenvy` is a maintained fork recommended by RUSTSEC. ## Motivation and Context `dotenv` is unmaintained and has not received an update since 2020. `dotenvy` is the recommended, drop in fork. Sources: 1. https://github.com/dotenv-rs/dotenv 2. https://rustsec.org/advisories/RUSTSEC-2021-0141.html ## Dependencies * [dotenvy](https://github.com/allan2/dotenvy) ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) ## How has this been tested? I ran the test suite with `--features env-file` before and after the change. The fork doesn't change the original crate's API beyond replacing `dotenv` with `dotenvy`. ## Is this change properly documented? No, but I'll edit the `CHANGELOG.md` and squash the commits now. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>