v0.1.3
Changed
- Bump the
dotenvruntime dependency from 16 to 17 and load it withquiet: true, so it no longer printsinjected env ...into the builder output (dotenv 17 flipped that default to logging on load).
Security
- Override
viteto^8.0.16to close GHSA-fx2h-pf6j-xcff (high) and GHSA-v6wh-96g9-6wx3 (moderate).viteonly reaches this repo transitively through vitest's dev server, so runtime installs of the published package were never affected.
Full Changelog: v0.1.2...v0.1.3