Skip to content

Bump dotenv from 17.4.0 to 17.4.1#25

Merged
jmcte merged 2 commits intomainfrom
dependabot/npm_and_yarn/dotenv-17.4.1
Apr 11, 2026
Merged

Bump dotenv from 17.4.0 to 17.4.1#25
jmcte merged 2 commits intomainfrom
dependabot/npm_and_yarn/dotenv-17.4.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 10, 2026

Bumps dotenv from 17.4.0 to 17.4.1.

Changelog

Sourced from dotenv's changelog.

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 10, 2026
@dependabot dependabot Bot requested a review from jmcte as a code owner April 10, 2026 17:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 10, 2026
@jmcte jmcte enabled auto-merge (squash) April 10, 2026 17:52
jmcte
jmcte previously approved these changes Apr 10, 2026
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.4.0 to 17.4.1.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.4.0...v17.4.1)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/dotenv-17.4.1 branch from 0e981db to 4e6f345 Compare April 10, 2026 17:54
Copy link
Copy Markdown

@ares-omt ares-omt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Patch bump looks safe. I validated the PR head locally with:

  • corepack pnpm install --frozen-lockfile
  • corepack pnpm test
  • corepack pnpm run lint

All checks passed, and the diff is limited to the dotenv version bump plus lockfile refresh. Because this is an outside bot contributor dependency PR, JMCTE approval is still required before merge.

@jmcte jmcte merged commit 6d280f3 into main Apr 11, 2026
8 checks passed
@jmcte jmcte deleted the dependabot/npm_and_yarn/dotenv-17.4.1 branch April 11, 2026 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants