Skip to content

deps: bump dotenv from 18.0.5 to 18.0.7 - #175

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dotenv-18.0.7
Oct 14, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dotenv-18.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dotenv from 18.0.5 to 18.0.7.

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

  • Use smarter parseBoolean not Boolean() to fix override (#1069)
Commits
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • e411e02 changelog
  • 6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...
  • 9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet
  • c7161c6 fix(cli): honor quiet settings loaded from .env
  • 3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings
  • 5d7cc39 18.0.6
  • 750ba03 changelog
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Dependency updates npm npm package dependency update labels Oct 14, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updateddotenv@​18.0.5 ⏵ 18.0.799 +1100100 +196 +1100

View full report

Bumps [dotenv](https://github.com/motdotla/dotenv) from 18.0.5 to 18.0.7.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.5...v18.0.7)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dotenv-18.0.7 branch from 119f6d7 to 2004e2b Compare October 14, 2026 08:34
@github-actions
github-actions Bot merged commit f3aab29 into main Oct 14, 2026
9 of 10 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dotenv-18.0.7 branch October 14, 2026 08:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates npm npm package dependency update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants