1.1.0

What's Changed

🛡️ Security

npm audit is resolved for the development tree. The raised packages are reached only through eslint and jest, and none of them ships with this package. eslint and jest were raised first so that what their own dependencies already fix is not overridden; the rest are pinned through overrides: below.

⚒️ New Features

Addition	What it does
env.$$	Reads each environment variable as an array. Values are separated by ,, trimmed, and empty values are dropped. An undefined key gives [] rather than throwing
ValueSeparator	Exported from the entry point, with its type. Create it with ValueSeparator.create({ delimiter }) to separate by a delimiter other than ,

⚙️ Requirements

Requirement	Range	Note
dotenv	^16.6.1	Now a peer dependency and no longer installed with this package. Install it in your own project; a package manager that does not install peers automatically will otherwise leave it missing

🛡️ Supply Chain

allowScripts:

Both entries are new in this version.

package name	install script	note
@parcel/watcher	Off	Lint and tests pass without it
unrs-resolver	Off	Lint and tests pass without it

📦️ Dependencies

dependencies:

package name	old version	new version	semver	note
dotenv	^16.6.1	(kicked)		Moved to peerDependencies:

peerDependencies:

package name	old version	new version	semver	note
dotenv		^16.6.1		Added. Moved from dependencies:

devDependencies:

package name	old version	new version	semver	note
jest	^30.4.2	^30.5.2	Minor	Raised for npm audit
@openreachtech/jest-constructor-spy	^1.1.1	^1.1.2	Patch
eslint	^9.39.2	^9.39.5	Patch	Raised for npm audit

overrides:

All entries are new in this version. old version is what the tree resolved to before them.

package name	old version	new version	semver	note
flatted	3.3.1	^3.4.2	Minor	Raised for npm audit
@humanfs/node	0.16.6	^0.16.8	Patch	Raised for npm audit
brace-expansion@1	1.1.11	^1.1.21	Patch	Scoped to the 1.x line the advisory names
brace-expansion@5	5.0.9	^5.0.12	Patch	Scoped to the 5.x line the advisory names
js-yaml	4.3.0	^4.3.2	Patch	Not scoped to a major. The 3.x line, 3.15.0, whose only caller is @istanbuljs/load-nyc-config, now resolves to 4.x as well, which also drops argparse 1 and sprintf-js, the latter having no patched release

Change Log

Full Changelog: 1.0.6...1.1.0

1.0.6

What's Changed

• 📦️ Update eslint-config version to 4.5.0 by @hieuguyen-ort in #300
• ⚙️ Sync test.yml with npm-boilerplate by @hieuguyen-ort in #302
• 📄 Kick out concerning npmrc from README files by @hieuguyen-ort in #304
• 📦️ Update the package version to 1.0.6 by @hieuguyen-ort in #306
• [patch] release 1.0.6 by @hieuguyen-ort in #309

Full Changelog: 1.0.5...1.0.6

1.0.5

What's Changed

• 📄 Update license to Apache-2.0 by @hieuguyen-ort in #290
• 📦️ Update the package version to 1.0.5 by @hieuguyen-ort in #292
• ⚙️ Sync GitHub workflows by @hieuguyen-ort in #296
• [patch] release 1.0.5 by @hieuguyen-ort in #294

New Contributors

• @hieuguyen-ort made their first contribution in #290

Full Changelog: 1.0.4...1.0.5

1.0.4

What's Changed

• Fix type errors for other repositories
• Update .jsconfig.json
• Add main-guard.yml

Change Log

Full Changelog: 1.0.3...1.0.4

1.0.3

What's Changed

• Add min-release-age to .npmrc
• Change publishing registry to npmjs.com

Change Log

Full Changelog: 1.0.2...1.0.3

1.0.2

What's Changed

Updated

• Update EnvironmentResolver#createProxyEnv() behavior to access undefined property
• Fix scripts/env.mjs to work in application
• Update dependency packages

Full Changelog: 1.0.1...1.0.2