Repository navigation
Bump dotenv from 17.3.1 to 17.4.1 - #203
Conversation
Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.3.1 to 17.4.1. - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.3.1...v17.4.1) --- updated-dependencies: - dependency-name: dotenv dependency-version: 17.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
✅ Deploy Preview for servicestart ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Greptile SummaryThis PR bumps Confidence Score: 5/5This PR is safe to merge — it is a routine minor dependency bump with no API or behavioral changes. All changes are in package manifest and lockfile only. The dotenv 17.3.1 → 17.4.1 changelog contains only cosmetic log text changes and added skill files. Transitive updates (next patch, azure packages) are automatically resolved by pnpm and carry no breaking changes. No custom rules are applicable to dependency-only PRs. No files require special attention.
|
| Filename | Overview |
|---|---|
| package.json | Single version bump of dotenv from ^17.3.1 to ^17.4.1; no other direct dependency changes. |
| pnpm-lock.yaml | Lockfile updated to resolve dotenv@17.4.1 and transitive bumps (next 16.2.2→16.2.3, azure packages, typespec); all changes are consistent with the package.json update. |
Flowchart
%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[dependabot bump dotenv 17.3.1 to 17.4.1] --> B[package.json updated]
B --> C[pnpm lockfile resolved]
C --> D[dotenv 17.4.1]
C --> E[next 16.2.2 to 16.2.3 transitive]
C --> F[azure and typespec packages bumped transitive]
Reviews (1): Last reviewed commit: "Bump dotenv from 17.3.1 to 17.4.1" | Re-trigger Greptile
This branch was previously deployed
1 participant
Bumps dotenv from 17.3.1 to 17.4.1.
Changelog
Sourced from dotenv's changelog.
Commits
48aa21617.4.1e4282b0changelog 🪵c540e75Merge pull request #1006 from motdotla/skills-update5626f9bdotenvx skill2411f2aupdate dotenvx skill1e08a70simplify dotenv skill747f417Merge pull request #1005 from motdotla/injected271df30changelog 🪵3f01a8binjectingtoinjectedccc50d5updateDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)