Skip to content

fix(deps): update dependency @dotenvx/dotenvx to v2 - #7139

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dotenvx-dotenvx-2.x
Open

fix(deps): update dependency @dotenvx/dotenvx to v2#7139
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dotenvx-dotenvx-2.x

Conversation

@renovate

@renovate renovate Bot commented Sep 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@dotenvx/dotenvx ^1.51.1^2.0.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

dotenvx/dotenvx (@​dotenvx/dotenvx)

v2.23.0

Compare Source

Added
  • Support comma-separated env file paths with -f and the config({ path }) option. Example: dotenvx run -f .env.local,.env -- node index.js
  • Add DOTENV_PATH (or DOTENV_F) to support the same. Example: DOTENV_PATH=.env.local,.env
Changed
  • Rename DOTENV_CONFIG_* variables to DOTENV_CONVENTION, DOTENV_IGNORE, and DOTENV_QUIET, while retaining their existing DOTENV_CONFIG_* names as fallbacks

v2.22.0

Compare Source

Added
  • Install verified binaries directly from GitHub Releases (#​956)
Changed
  • Fall back to ~/.local/bin when /usr/local/bin is not writable (#​955)

v2.21.0

Compare Source

Added
  • Add dotenvx enc and dotenvx dec shorthands for encrypt and decrypt (#​943)
  • Add convenient dx alias for shorter dx run --, dx enc, etc (#​944)
Changed
  • Patch typescript types for path (#​942)

v2.20.1

Compare Source

Changed
  • Handle accent marks for ext precommit (#​936)

v2.20.0

Compare Source

Added
  • Add dotenvx del command for deleting a key from a .env file (#​939)
Changed
  • Exempt .env.vault from precommit/prebuild sealed checks (vault-format ciphertext is already safe to commit)

v2.19.2

Compare Source

see CHANGELOG

v2.19.1

Compare Source

Changed
  • User can click enter to open up approval url for convenience (#​934)

v2.19.0

Compare Source

Added
  • Add dotenvx armor open to open armored key details in browser (#​930)

v2.18.1

Compare Source

  • Patch injected message when preset encrypted: value (#​927)

v2.18.0

Compare Source

Added
  • Make authenticated API calls to the Dotenvx Armor API with dotenvx curl. Allows you to control your Dotenvx Armor account directly from your agent inside Codex, Claude, etc. (#​923)

v2.17.4

Compare Source

Changed
  • Send device identifier along with curl requests (#​922)

v2.17.3

Compare Source

Changed
  • Exempt .env.example in subdirectories from precommit (#​920)

v2.17.2

Compare Source

Added
  • Add support for DOTENV_CONFIG_IGNORE global convenience (#​919)

v2.17.1

Compare Source

Changed

v2.17.0

Compare Source

Added
  • Add support for Bitwarden bw:// secrets in your .env files. (#​915)

v2.16.1

Compare Source

Changed
  • Fix: Do not report child error - let child do so. (#​914)

v2.16.0

Compare Source

Added
  • Add support for -ek and -ik to dotenvx get (#​913)

v2.15.1

Compare Source

Changed
  • Better communicate time waiting on 1password with elapsed time (#​909)

v2.15.0

Compare Source

Added
  • Add support for 1Password op:// secrets in your .env files. (#​908)

v2.14.0

Compare Source

Added
  • Add dotenvx run --validate for simple env validation against your .env.example (#​906)
  • Add dotenvx validate for a pre-check of validation against your .env.example file (#​906)

v2.13.0

Compare Source

Added
  • Add get --eval-export flag (#​904)
Changed
  • Make get --eval posix safe (#​904)

v2.12.0

Compare Source

Changed
  • Small Breaking: Single quoted 'Let\'s go' now correctly escapes to Let's go (#​903)

v2.11.3

Compare Source

Changed
  • Improve command substitution for nested commands (#​902)

v2.11.2

Compare Source

Changed

v2.11.1

Compare Source

Changed
  • Redact all keys by default - except those ending in _PLAIN (460862)
  • Support dotenvx run -- claude and dotenvx run -- codex (#​900)
  • Simplify default encrypted .env file to just HELLO="World" (#​899)

v2.11.0

Compare Source

Added
  • Add convenience method dotenvx update (#​897)
Changed
  • BREAKING: Send informational messages like injected env to stderr instead of stdout. This makes it more reliable to do things like piping output to a file without needing --quiet. (#​898)

v2.10.0

Compare Source

Added
  • Add run --redact to keep secrets out of command output. (#​894)

v2.9.0

Compare Source

Changed
  • BREAKING: ls from @dotenvx/dotenvx is now async/await. (#​893)

v2.8.0

Compare Source

Added
  • Add FILE_NOT_WRITABLE error for user convenience (#​891)
  • Support Enclaved Armored Keys (#​892)

v2.7.3

Compare Source

Changed
  • Fix: --quiet should not display the spinner and its stderr messages (#​889)

v2.7.2

Compare Source

Added
  • Include dotenvx armor status command.

v2.7.1

Compare Source

Changed
  • Security Improvement: dotenvx armor login attempts to set the DOTENVX_ARMOR_TOKEN in your native OS secret store going forward. For current Armor users run dotenvx armor logout and then dotenvx armor login to make use of this immediately. (#​886)

v2.7.0

Compare Source

Added
  • Added support for --mask on get, run, decrypt (#​885)

v2.6.0

Compare Source

Added
  • Support native up|down|pull|push for windows (#​884)

v2.5.0

Compare Source

Added
  • Support native up|down|pull|push for windows (#​883)

v2.4.1

Compare Source

Added
  • Support config(path:) as a directory like app/web. Useful for monorepos (#​882)

v2.4.0

Compare Source

Added
  • Support multiple -fk flags for select commands (#​880)
  • Support -f ../.. directories (#​881)

v2.3.4

Compare Source

Removed
  • Replace various deps with @dotenvx/tooling (#​879)

v2.3.3

Compare Source

Removed
  • Remove dotenv and commander for @dotenvx/tooling (#​878)

v2.3.2

Compare Source

Changed
  • Permit empty value for set (#​877)

v2.3.1

Compare Source

Changed
  • Fix correct default valuation interpolation for empty strings by upgrading primitives package

v2.3.0

Compare Source

Added
  • Add lock up and lock down commands for password protecting private keys (#​875)
Changed
  • BREAKING: Rename keychain commands to native to make way for windows and linux. (#​875)
Removed
  • BREAKING: Remove --no-ops. Use --no-armor. (#​875)

v2.2.2

Compare Source

Changed
  • Move login and logout under armor (#​874)

v2.2.1

Compare Source

Changed
  • Move genexample to top level commands (#​873)

v2.2.0

Compare Source

Added
  • Use dotenvx keychain up|down to move your private keys to your macOS Keychain (#​872)

v2.1.5

Compare Source

Changed
  • precommit and prebuild respect _PLAIN (#​871)

v2.1.4

Compare Source

Added
  • Add support for DOTENV_CONFIG_CONVENTION=nextjs (#​869)

v2.1.3

Compare Source

Changed
  • Patch edge case when custom unspecified -f and --env flag (#​868)

v2.1.2

Compare Source

Changed

v2.1.1

Compare Source

Changed
  • Support DOTENV_CONFIG_QUIET=true as synonym for --quiet flag (#​866)

v2.1.0

Compare Source

Added
  • Add interactive input mode for set (#​862)
  • Support leaving _PLAIN suffixed keys unencrypted during set and encrypt (#​862)
Changed
  • Return exit code 1 from get when decryption errors are reported (#​862)
Fixed
  • Add Windows PowerShell coverage for npm shim encryption of .env.local files

v2.0.0

Compare Source

Changed
  • BREAKING: lib/main#set async only (#​855)
  • BREAKING: lib/main#get async only (#​855)
  • New keyring support - for local and armor providers and to unlock future providers (#​855)
  • Route run, config, and get through shared env and keypair resolvers backed by @dotenvx/primitives (#​855)
  • Route set, encrypt, and decrypt through shared transforms that operate on primitive scan, parse, encrypt, and upsert results (#​855)
  • Update library parse to use primitive parsing while preserving dotenvx-style encrypted value errors (#​855)
Removed
  • BREAKING: Remove the rotate command (it will return in 2.1 or 2.2 soon with a more complete implementation for local and armored keys) (#​855)
  • BREAKING: Remove the library doctor, keypair, and genexample exports from lib/main (#​855)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner September 5, 2026 03:08
@renovate renovate Bot added the review:tech label Sep 5, 2026
@netlify

netlify Bot commented Sep 5, 2026

Copy link
Copy Markdown

Deploy Preview for kongdeveloper ready!

Name Link
🔨 Latest commit eb933e3
🔍 Latest deploy log https://app.netlify.com/projects/kongdeveloper/deploys/6aa31d131af589000817329c
😎 Deploy Preview https://deploy-preview-7139--kongdeveloper.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@renovate
renovate Bot force-pushed the renovate/dotenvx-dotenvx-2.x branch 10 times, most recently from fafb74b to 7ee5500 Compare September 8, 2026 16:28
@renovate renovate Bot changed the title fix(deps): update dependency @dotenvx/dotenvx to v2 Update dependency @dotenvx/dotenvx to v2 Sep 8, 2026
@renovate
renovate Bot force-pushed the renovate/dotenvx-dotenvx-2.x branch 10 times, most recently from 4a1583f to 0bf02ab Compare September 9, 2026 15:25
@renovate renovate Bot changed the title Update dependency @dotenvx/dotenvx to v2 fix(deps): update dependency @dotenvx/dotenvx to v2 Sep 9, 2026
@renovate
renovate Bot force-pushed the renovate/dotenvx-dotenvx-2.x branch 5 times, most recently from 86aa671 to e4fe5a6 Compare September 9, 2026 23:10
@renovate
renovate Bot force-pushed the renovate/dotenvx-dotenvx-2.x branch 10 times, most recently from 1c8b0d0 to b25c4c5 Compare September 10, 2026 21:08
@renovate
renovate Bot force-pushed the renovate/dotenvx-dotenvx-2.x branch from b25c4c5 to eb933e3 Compare September 10, 2026 21:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants