What's Changed
🛡️ Security
npm audit is resolved for the development tree. The raised packages are reached only through eslint and jest, and none of them ships with this package. eslint and jest were raised first so that what their own dependencies already fix is not overridden; the rest are pinned through overrides: below.
⚒️ New Features
| Addition |
What it does |
env.$$ |
Reads each environment variable as an array. Values are separated by ,, trimmed, and empty values are dropped. An undefined key gives [] rather than throwing |
ValueSeparator |
Exported from the entry point, with its type. Create it with ValueSeparator.create({ delimiter }) to separate by a delimiter other than , |
⚙️ Requirements
| Requirement |
Range |
Note |
dotenv |
^16.6.1 |
Now a peer dependency and no longer installed with this package. Install it in your own project; a package manager that does not install peers automatically will otherwise leave it missing |
🛡️ Supply Chain
allowScripts:
Both entries are new in this version.
| package name |
install script |
note |
@parcel/watcher |
Off |
Lint and tests pass without it |
unrs-resolver |
Off |
Lint and tests pass without it |
📦️ Dependencies
dependencies:
| package name |
old version |
new version |
semver |
note |
dotenv |
^16.6.1 |
(kicked) |
|
Moved to peerDependencies: |
peerDependencies:
| package name |
old version |
new version |
semver |
note |
dotenv |
|
^16.6.1 |
|
Added. Moved from dependencies: |
devDependencies:
| package name |
old version |
new version |
semver |
note |
jest |
^30.4.2 |
^30.5.2 |
Minor |
Raised for npm audit |
@openreachtech/jest-constructor-spy |
^1.1.1 |
^1.1.2 |
Patch |
|
eslint |
^9.39.2 |
^9.39.5 |
Patch |
Raised for npm audit |
overrides:
All entries are new in this version. old version is what the tree resolved to before them.
| package name |
old version |
new version |
semver |
note |
flatted |
3.3.1 |
^3.4.2 |
Minor |
Raised for npm audit |
@humanfs/node |
0.16.6 |
^0.16.8 |
Patch |
Raised for npm audit |
brace-expansion@1 |
1.1.11 |
^1.1.21 |
Patch |
Scoped to the 1.x line the advisory names |
brace-expansion@5 |
5.0.9 |
^5.0.12 |
Patch |
Scoped to the 5.x line the advisory names |
js-yaml |
4.3.0 |
^4.3.2 |
Patch |
Not scoped to a major. The 3.x line, 3.15.0, whose only caller is @istanbuljs/load-nyc-config, now resolves to 4.x as well, which also drops argparse 1 and sprintf-js, the latter having no patched release |
Change Log
Full Changelog: 1.0.6...1.1.0
