Skip to content

build(deps): bump dotenv from 17.3.1 to 17.4.2#959

Merged
mergify[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/dotenv-17.4.2
Apr 30, 2026
Merged

build(deps): bump dotenv from 17.3.1 to 17.4.2#959
mergify[bot] merged 1 commit intomasterfrom
dependabot/npm_and_yarn/dotenv-17.4.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps dotenv from 17.3.1 to 17.4.2.

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

  • Improved skill files - tightened up details (#1009)

17.4.1 (2026-04-05)

Changed

  • Change text injecting to injected (#1005)

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 30, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 30, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
github-readme-profile Ready Ready Preview, Comment Apr 30, 2026 5:40pm

@mergify
Copy link
Copy Markdown

mergify Bot commented Apr 30, 2026

Merge Queue Status

  • Entered queue2026-04-30 17:07 UTC · Rule: dep-update
  • 🚫 Left the queue2026-04-30 17:37 UTC · at f5b5ac50540a4f63d0007251dd442e5147581e34

This pull request spent 30 minutes 12 seconds in the queue, with no time running CI.

Reason

The pull request conflicts with pull requests ahead in queue: #954, #957, #955, #956, #960

Hint

There is nothing you can do for now. If the pull request ahead in the queue is merged, this pull request will become conflicting and you'll have to update it.
If the pull request ahead is not merged, you can requeue this pull request with a @mergifyio queue comment.

Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.3.1 to 17.4.2.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.3.1...v17.4.2)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/dotenv-17.4.2 branch from f5b5ac5 to 0d2e7ef Compare April 30, 2026 17:39
@mergify mergify Bot removed the dequeued label Apr 30, 2026
@mergify mergify Bot added the queued label Apr 30, 2026
@mergify
Copy link
Copy Markdown

mergify Bot commented Apr 30, 2026

Merge Queue Status

This pull request spent 31 minutes 29 seconds in the queue, including 5 seconds running CI.

Required conditions to merge

mergify Bot added a commit that referenced this pull request Apr 30, 2026
@mergify mergify Bot merged commit daa63b7 into master Apr 30, 2026
11 checks passed
@mergify mergify Bot deleted the dependabot/npm_and_yarn/dotenv-17.4.2 branch April 30, 2026 18:12
@mergify mergify Bot removed the queued label Apr 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants