fix(deps): update dependency dotenv to v18 by renovate[bot] · Pull Request #66 · promptfoo/example-app · GitHub
Skip to content

fix(deps): update dependency dotenv to v18 - #66

Merged
mldangelo merged 3 commits into
mainfrom
renovate/dotenv-18.x
Oct 8, 2026
Merged

fix(deps): update dependency dotenv to v18#66
mldangelo merged 3 commits into
mainfrom
renovate/dotenv-18.x

Conversation

@renovate

@renovate renovate Bot commented Sep 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
dotenv ^17.0.0 → ^18.0.0 age confidence

Release Notes

motdotla/dotenv (dotenv)

v18.0.6

Compare Source

Changed
  • Use smarter parseBoolean not Boolean() to fix override (#​1069)

v18.0.5

Compare Source

Changed
  • Fix missing typescript module declaration (#​1068)
  • Improve performance for large .env files (#​1066)

v18.0.4

Compare Source

Changed
  • import dotenv/config should default quiet: true (#​1063)

v18.0.3

Compare Source

Changed
  • Patch DOTENV_QUIET setting when inside .env file (#​1059)

v18.0.2

Compare Source

Changed
  • Patch additional edge cases for the fast parser (#​1056)

v18.0.1

Compare Source

Changed
  • Handle file urls in config logging (#​1054)

v18.0.0

Compare Source

Added
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
  • NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#​1010)
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv

faster than Node native parseEnv!

Changed
  • Injecting message sent to stderr rather than stdout and tips removed (#​1037)
Removed

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/dotenv-18.x branch 4 times, most recently from 2f27a88 to ce31e22 Compare September 25, 2026 19:39
@renovate
renovate Bot force-pushed the renovate/dotenv-18.x branch from ce31e22 to 649ccbd Compare October 1, 2026 13:04
@renovate
renovate Bot force-pushed the renovate/dotenv-18.x branch from 649ccbd to c6179c3 Compare October 7, 2026 02:01
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 7, 2026 •
edited
Loading

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-07T02:04:44.742738Z c6179c3 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@renovate

renovate Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 8, 2026

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 8, 2026

Copy link
Copy Markdown

mldangelo
mldangelo approved these changes Oct 8, 2026
View reviewed changes

@mldangelo mldangelo left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed dotenv 18 against the application direct config() usage and upstream migration notes. Clean install, all 26 application tests/builds, and real .env-driven development startup, health, JWKS, and OAuth passed on Node 20, 22, and 24. Revalidated the combined branch after merging the YAML migration. npm audit is clean, and all eight current PR checks pass.

@mldangelo
mldangelo merged commit 62bcc08 into main Oct 8, 2026
8 checks passed
@mldangelo
mldangelo deleted the renovate/dotenv-18.x branch October 8, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mldangelo mldangelo mldangelo approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mldangelo