Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(template): remove dotenv module #544

Merged
merged 3 commits into from Jun 8, 2020
Merged

feat(template): remove dotenv module #544

merged 3 commits into from Jun 8, 2020

Conversation

clarkdo
Copy link
Member

@clarkdo clarkdo commented Jun 8, 2020

As @Atinux has mentioned in discord, we should remove dotenv module from create-nuxt-app now.

@clarkdo clarkdo requested a review from Atinux June 8, 2020 18:44
Copy link
Member

@Atinux Atinux left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let’s merge for Nuxt V2.13

@clarkdo clarkdo merged commit ba93891 into master Jun 8, 2020
@clarkdo clarkdo deleted the feat/remove-dotenv branch June 8, 2020 18:53
@ghost
Copy link

ghost commented Jun 17, 2020

Can we know why?

@Atinux
Copy link
Member

Atinux commented Jun 17, 2020

@web2033 this is related to the fact that Nuxt v2.13 will directly support .env and runtimeConfig, see nuxt/nuxt#7312

Actually @nuxtjs/dotenv actually bring a security vulnerability for people adding secret keys in .env that will be forwarded to the Webpack bundle and then exposed to the end users.

@Atinux
Copy link
Member

Atinux commented Jun 18, 2020

Why we removed the @nuxtjs/dotenv module

@ghost
Copy link

ghost commented Jun 19, 2020

Atinux pushed a commit that referenced this pull request Jun 19, 2020
Atinux added a commit that referenced this pull request Jun 22, 2020
* feat: prepare for Nuxt 2.13

* fix(jest): downgrate vue-jest to v3
pending by vuejs/vue-jest#241

* chore(deps): update all non-major dependencies (#509)

* fix(prettier): add stylelint-config-prettier

* chore(deps): update jest packages (major) (#513)

* chore: add npm registry config

* chore(deps): update all non-major dependencies

* chore(deps): update devdependency @nuxt/typescript-build to v1

* fix(ava): expect vm truthy as vue instance assertion

* chore(deps): update all non-major dependencies

* chore(deps): update all non-major dependencies

* feat(template): remove dotenv module (#544)

* chore: optimize svg & animation (#547)

* feat: add content module (#540)

* chore(deps): update all non-major dependencies

* chore(deps): lock file maintenance (#541)

* v3.0.0

* chore: update snapshots

* chore: update prompts and add TS runtime by default

* chore: fix lint issue

Co-authored-by: Clark Du <clark.duxin@gmail.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Martijn Cuppens <martijn.cuppens@gmail.com>
Co-authored-by: Benjamin Canac <canacb1@gmail.com>
Co-authored-by: Pooya Parsa <pyapar@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants