Update dependency dotenv to v18 #1849

Merged

mark merged 1 commit from renovate/dotenv-18.x into develop 2026-10-23 10:29:06 +00:00

Conversation 0 Commits 1 Files changed 2 +7 -10

harbor-bot commented 2026-10-13 00:53:29 +00:00

Owner

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
dotenv	^17.4.2 → ^18.0.0

---

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

motdotla/dotenv (dotenv)

v18.0.8

Compare Source

Changed

• Fast parser should strip appended extra quotes (#​1073)
• Type detail improvement (#​1074)

v18.0.7

Compare Source

Changed

• Treat undefined settings like quiet: true as null rather than falsey (#​1070)
• CLI should honor DOTENV_QUIET setting in .env file (#​1071)

v18.0.6

Compare Source

Changed

• Use smarter parseBoolean not Boolean() to fix override (#​1069)

v18.0.5

Compare Source

Changed

• Fix missing typescript module declaration (#​1068)
• Improve performance for large .env files (#​1066)

v18.0.4

Compare Source

Changed

• import dotenv/config should default quiet: true (#​1063)

v18.0.3

Compare Source

Changed

• Patch DOTENV_QUIET setting when inside .env file (#​1059)

v18.0.2

Compare Source

Changed

• Patch additional edge cases for the fast parser (#​1056)

v18.0.1

Compare Source

Changed

• Handle file urls in config logging (#​1054)

v18.0.0

Compare Source

Added

• NEW: Dotenv now has a CLI. (#​1022)

$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv

• NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#​1010)

$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv

faster than Node native parseEnv!

Changed

• Injecting message sent to stderr rather than stdout and tips removed (#​1037)

Removed

• Remove tips (#​1031)
• Remove skill files (#​1032)
• Remove Spanish README (#​1034)
• Remove .env.vault support (#​1033)
• Remove preloading. Instead use cli dotenv run -- your-command (#​1035)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on tuesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [dotenv](https://github.com/motdotla/dotenv) | [`^17.4.2` → `^18.0.0`](https://renovatebot.com/diffs/npm/dotenv/17.4.2/18.0.8) |  |  | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/99) for more information. --- ### Release Notes <details> <summary>motdotla/dotenv (dotenv)</summary> ### [`v18.0.8`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1808-2026-10-14) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.7...v18.0.8) ##### Changed - Fast parser should strip appended extra quotes ([#&#8203;1073](https://github.com/motdotla/dotenv/pull/1073)) - Type detail improvement ([#&#8203;1074](https://github.com/motdotla/dotenv/pull/1074)) ### [`v18.0.7`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1807-2026-10-09) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.6...v18.0.7) ##### Changed - Treat undefined settings like `quiet: true` as null rather than falsey ([#&#8203;1070](https://github.com/motdotla/dotenv/pull/1070)) - CLI should honor `DOTENV_QUIET` setting in `.env` file ([#&#8203;1071](https://github.com/motdotla/dotenv/pull/1071)) ### [`v18.0.6`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.5...v18.0.6) ##### Changed - Use smarter `parseBoolean` not Boolean() to fix override ([#&#8203;1069](https://github.com/motdotla/dotenv/pull/1069)) ### [`v18.0.5`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.4...v18.0.5) ##### Changed - Fix missing typescript module declaration ([#&#8203;1068](https://github.com/motdotla/dotenv/pull/1068)) - Improve performance for large .env files ([#&#8203;1066](https://github.com/motdotla/dotenv/pull/1066)) ### [`v18.0.4`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.3...v18.0.4) ##### Changed - `import dotenv/config` should default quiet: true ([#&#8203;1063](https://github.com/motdotla/dotenv/pull/1063)) ### [`v18.0.3`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.2...v18.0.3) ##### Changed - Patch `DOTENV_QUIET` setting when inside .env file ([#&#8203;1059](https://github.com/motdotla/dotenv/pull/1059)) ### [`v18.0.2`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.1...v18.0.2) ##### Changed - Patch additional edge cases for the fast parser ([#&#8203;1056](https://github.com/motdotla/dotenv/pull/1056)) ### [`v18.0.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18) [Compare Source](https://github.com/motdotla/dotenv/compare/v18.0.0...v18.0.1) ##### Changed - Handle file urls in config logging ([#&#8203;1054](https://github.com/motdotla/dotenv/pull/1054)) ### [`v18.0.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17) [Compare Source](https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.0) ##### Added - NEW: Dotenv now has a CLI. ([#&#8203;1022](https://github.com/motdotla/dotenv/pull/1022)) ```sh $ dotenv run -- node index.js ◇ injected env (2) from .env Hello Dotenv ``` - NEW: Dotenv now has a fast parser thanks to [@&#8203;homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#&#8203;1010](https://github.com/motdotla/dotenv/pull/1010)) ```sh $ dotenv run --fast -- node index.js ◇ injected env (2) from .env Hello Dotenv ``` [faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html) ##### Changed - Injecting message sent to stderr rather than stdout and tips removed ([#&#8203;1037](https://github.com/motdotla/dotenv/pull/1037)) ##### Removed - Remove tips ([#&#8203;1031](https://github.com/motdotla/dotenv/pull/1031)) - Remove skill files ([#&#8203;1032](https://github.com/motdotla/dotenv/pull/1032)) - Remove Spanish README ([#&#8203;1034](https://github.com/motdotla/dotenv/pull/1034)) - Remove .env.vault support ([#&#8203;1033](https://github.com/motdotla/dotenv/pull/1033)) - Remove preloading. Instead use cli `dotenv run -- your-command` ([#&#8203;1035](https://github.com/motdotla/dotenv/pull/1035)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 9am on tuesday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE3NS4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSJdfQ==-->

harbor-bot added 1 commit 2026-10-13 00:53:29 +00:00

Update dependency dotenv to v18 e90f9a66d6

harbor-bot requested review from Developers 2026-10-13 00:53:29 +00:00

harbor-bot force-pushed renovate/dotenv-18.x from e90f9a66d6 to 23ad29f551 2026-10-13 11:46:45 +00:00 Compare

mark merged commit 8372d15ef0 into develop 2026-10-23 10:29:06 +00:00

mark deleted branch renovate/dotenv-18.x 2026-10-23 10:29:06 +00:00

mark referenced this pull request from a commit 2026-10-23 10:29:06 +00:00

Update dependency dotenv to v18 (#1849)

thomas referenced this pull request from a commit 2026-10-23 10:40:44 +00:00

Merge branch 'develop' into thomas/1882-data

thomas referenced this pull request from a commit 2026-10-23 14:15:38 +00:00

Merge branch 'develop' into thomas/231-valiate-identity

thomas referenced this pull request from a commit 2026-10-23 14:37:25 +00:00

Merge branch 'develop' into thomas/1961-more-metadata-counters

thomas referenced this pull request from a commit 2026-10-23 15:26:13 +00:00

Merge branch 'develop' into thomas/1882-decayed-counts

Sign in to join this conversation.

Reviewers

No reviewers

harbor/Developers

Labels

Clear labels   

Ad-hoc

Issues added after a sprint has started

  

Bug

cannot reproduce

  

Module

Core

Work that touches the shared foundation of the product rather than a single feature area

  

Module

Moderation

Work related to reviewing, filtering, or acting on user-generated content and policy enforcement

  

Module

Notifications

  

Module

Posts

  

Module

Reactions

  

Module

Verifications

  

PR / Build App / Android APK

Builds a staging android apk

  

Platform / Android

  

Platform / Mobile

  

Platform / Services

  

Platform / Web

  

Platform / iOS

  

Priority

1

High priority issue that should be addressed as soon as possible

  

Priority

2

Should be addressed in the few releases

  

Priority

3

We want to address but there are higher priorities

  

Priority

4

This probably won't be addressed anytime soon

  

Retro

Overestimated

The task was simpler or faster than anticipated (e.g., a 5-point issue felt like a 1- or 2-pointer).

  

Retro

Spot-On

The issue took roughly as much effort as the assigned weight suggested.

  

Retro

Underestimated

The task was significantly harder or took longer than the assigned weight (e.g., a 2-point issue behaved like a 5-pointer).

  

Status/Backlog

  

Status

Blocked

Work cannot progress until something outside this issue is resolved

  

Status

In Progress

Work has started and is actively being worked on

  

Status

Review

Implementation is complete and the work is waiting for review

  

Type

Bug

Something is broken or behaving incorrectly compared with expected behaviour

  

Type

Chore

Maintenance and routine work that isn’t a new feature or a bug fix

  

Type

Enhancement

Improvement to existing functionality without introducing an entirely new feature or fixing a defect

  

Type/Epic

A large body of work that groups related issues rather than a single implementable change

  

Type

Feature

New user-facing functionality or a meaningful expansion of existing behaviour

  

Weight

1

Very small effort. A quick, well-understood change that can usually be finished in a short sitting

  

Weight

13

Epic-scale effort. Too large to treat as a normal implementation ticket without breaking it down

  

Weight

2

Small effort. Straightforward work that takes a bit more than a tiny tweak, but is still well understood

  

Weight

3

Medium effort. Meaningful work with a clear goal, but more than a small, contained change

  

Weight

5

Large effort. Significant work with real complexity, coordination, or surface area

  

Weight

8

Extra-large effort. Complex work with significant scope, uncertainty, or coordination

  

ui

No labels

Ad-hoc

Bug

cannot reproduce

Module

Core

Module

Moderation

Module

Notifications

Module

Posts

Module

Reactions

Module

Verifications

PR / Build App / Android APK

Platform / Android

Platform / Mobile

Platform / Services

Platform / Web

Platform / iOS

Priority

1

Priority

2

Priority

3

Priority

4

Retro

Overestimated

Retro

Spot-On

Retro

Underestimated

Status/Backlog

Status

Blocked

Status

In Progress

Status

Review

Type

Bug

Type

Chore

Type

Enhancement

Type/Epic

Type

Feature

Weight

1

Weight

13

Weight

2

Weight

3

Weight

5

Weight

8

ui

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

harbor/harbor!1849

No description provided.