Skip to content

fix(deps): bump dotenv from 18.0.5 to 18.0.8 - #267

Merged
jmcte merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dotenv-18.0.7
Oct 23, 2026
Merged

jmcte merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dotenv-18.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dotenv from 18.0.5 to 18.0.8.

Changelog

Sourced from dotenv's changelog.

18.0.8 (2026-10-14)

Changed

  • Fast parser should strip appended extra quotes (#1073)
  • Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

  • Use smarter parseBoolean not Boolean() to fix override (#1069)
Commits
  • e2fe95e 18.0.8
  • 7aa712a type detail improvement
  • 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
  • 0b4843a changelog
  • 55855ab Merge pull request #1073 from xiehuanyi/fix/unicode-unquoting-parity
  • f757811 fix(types): allow undefined values in populate output
  • fde5db2 Keep fast-parser unquoting consistent at Unicode line boundaries
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner October 16, 2026 17:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2026
Bumps [dotenv](https://github.com/motdotla/dotenv) from 18.0.5 to 18.0.8.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.5...v18.0.8)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title fix(deps): bump dotenv from 18.0.5 to 18.0.7 fix(deps): bump dotenv from 18.0.5 to 18.0.8 Oct 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dotenv-18.0.7 branch from 0529ab6 to 858b299 Compare October 23, 2026 12:40
@jmcte
jmcte enabled auto-merge (squash) October 23, 2026 12:47
@jmcte
jmcte merged commit cec8c20 into main Oct 23, 2026
20 checks passed
@jmcte
jmcte deleted the dependabot/npm_and_yarn/dotenv-18.0.7 branch October 23, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant