Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: bump dotenv from 16.3.1 to 16.4.5 #469

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore: bump dotenv from 16.3.1 to 16.4.5 #469

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 12, 2024 •
edited
Loading

Bumps dotenv from 16.3.1 to 16.4.5.

Changelog

Sourced from dotenv's changelog.

16.4.5 (2024-02-19)

Changed

  • 🐞 fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #814

16.4.4 (2024-02-13)

Changed

  • 🐞 Replaced chaining operator ?. with old school && (fixing node 12 failures) #812

16.4.3 (2024-02-12)

Changed

  • Fixed processing of multiple files in options.path #805

16.4.2 (2024-02-10)

Changed

16.4.1 (2024-01-24)

  • Patch support for array as path option #797

16.4.0 (2024-01-23)

  • Add error.code to error messages around .env.vault decryption handling #795
  • Add ability to find .env.vault file when filename(s) passed as an array #784

16.3.2 (2024-01-18)

Added

  • Add debug message when no encoding set #735

Changed

  • Fix output typing for populate #792
  • Use subarray instead of slice #793
Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependabot all dependabot related pr's dependencies Pull requests that update a dependency file labels Jul 12, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 12, 2024

The following labels could not be found: vulnerabilites.

@changeset-bot changeset-bot
Copy link

changeset-bot bot commented Jul 12, 2024 •
edited
Loading

⚠️ No Changeset found

Latest commit: 4aac06e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security Socket Security
Copy link

socket-security bot commented Jul 12, 2024 •
edited
Loading

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher

🚮 Removed packages: npm/@openzeppelin/smart-account-signers@1.0.0, npm/lodash@4.17.21, npm/prettier@2.8.8, npm/typescript@4.9.5

View full report↗︎

tirumerla
tirumerla previously approved these changes Jul 12, 2024
View reviewed changes
Copy link
Collaborator

@tirumerla tirumerla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dotenv-16.4.5 branch 2 times, most recently from d5f55bb to e11d1ba Compare July 15, 2024 07:20
@dependabot
plaform-sdk-deps: bump dotenv from 16.3.1 to 16.4.5
4aac06e 
Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.3.1 to 16.4.5.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.3.1...v16.4.5)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dotenv-16.4.5 branch from e11d1ba to 4aac06e Compare July 18, 2024 19:04
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 23, 2024

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@tirumerla
Copy link
Collaborator

@dependabot rebase

@tirumerla tirumerla changed the title plaform-sdk-deps: bump dotenv from 16.3.1 to 16.4.5 chore: plaform-sdk-deps: bump dotenv from 16.3.1 to 16.4.5 Jul 23, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 23, 2024

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

2 similar comments
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 24, 2024

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 2, 2024

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@tirumerla tirumerla changed the title chore: plaform-sdk-deps: bump dotenv from 16.3.1 to 16.4.5 chore: bump dotenv from 16.3.1 to 16.4.5 Sep 17, 2024
@LuisUrrutia
Copy link

@dependabot rebase

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 15, 2024

Dependabot does not support your Node version. Because of this, Dependabot cannot update this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tirumerla tirumerla tirumerla left review comments

@collins-w collins-w Awaiting requested review from collins-w collins-w is a code owner

@CoveMB CoveMB Awaiting requested review from CoveMB CoveMB is a code owner

@dylankilkenny dylankilkenny Awaiting requested review from dylankilkenny dylankilkenny is a code owner

@emnul emnul Awaiting requested review from emnul emnul is a code owner

@MCarlomagno MCarlomagno Awaiting requested review from MCarlomagno MCarlomagno is a code owner

@shahnami shahnami Awaiting requested review from shahnami shahnami is a code owner

@zeljkoX zeljkoX Awaiting requested review from zeljkoX zeljkoX is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees
No one assigned
Labels
dependabot all dependabot related pr's dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@tirumerla @LuisUrrutia