Skip to content

Bump dotenv from 18.0.5 to 18.0.9 in the production-minor-and-patch group across 1 directory - #8

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-and-patch-54a3974e9c
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-minor-and-patch-54a3974e9c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown

Bumps the production-minor-and-patch group with 1 update in the / directory: dotenv.

Updates dotenv from 18.0.5 to 18.0.9

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

  • Permit DOTENV_PATH being empty string with the CLI (#1076)

18.0.8 (2026-10-14)

Changed

  • Fast parser should strip appended extra quotes (#1073)
  • Type detail improvement (#1074)

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

  • Use smarter parseBoolean not Boolean() to fix override (#1069)
Commits
  • 8d1ab85 18.0.9
  • 59a40ce changelog
  • 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
  • bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
  • 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
  • 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
  • e2fe95e 18.0.8
  • 7aa712a type detail improvement
  • 53405b0 Merge pull request #1074 from himanshu748/codex/fix-dotenv-populate-undefined...
  • 0b4843a changelog
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 12, 2026
@dependabot dependabot Bot changed the title Bump dotenv from 18.0.5 to 18.0.6 in the production-minor-and-patch group Bump dotenv from 18.0.5 to 18.0.8 in the production-minor-and-patch group across 1 directory Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-minor-and-patch-54a3974e9c branch 2 times, most recently from 4424d8a to c5b5053 Compare October 21, 2026 14:57
Bumps the production-minor-and-patch group with 1 update in the / directory: [dotenv](https://github.com/motdotla/dotenv).


Updates `dotenv` from 18.0.5 to 18.0.9
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.5...v18.0.9)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump dotenv from 18.0.5 to 18.0.8 in the production-minor-and-patch group across 1 directory Bump dotenv from 18.0.5 to 18.0.9 in the production-minor-and-patch group across 1 directory Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/production-minor-and-patch-54a3974e9c branch from c5b5053 to 52b1864 Compare October 26, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants