Skip to content

Bump dotenv from 18.0.8 to 18.0.9 - #814

Merged
github-actions[bot] merged 1 commit into
Currentfrom
dependabot/npm_and_yarn/dotenv-18.0.9
Oct 26, 2026
Merged

github-actions[bot] merged 1 commit into
Currentfrom
dependabot/npm_and_yarn/dotenv-18.0.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dotenv from 18.0.8 to 18.0.9.

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

  • Permit DOTENV_PATH being empty string with the CLI (#1076)
Commits
  • 8d1ab85 18.0.9
  • 59a40ce changelog
  • 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
  • bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
  • 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
  • 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 26, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​dotenv@​18.0.8 ⏵ 18.0.99910010095 -1100

View full report

Bumps [dotenv](https://github.com/motdotla/dotenv) from 18.0.8 to 18.0.9.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.8...v18.0.9)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dotenv-18.0.9 branch from 8c3e0e5 to d9aa138 Compare October 26, 2026 01:36
@github-actions
github-actions Bot merged commit a00b151 into Current Oct 26, 2026
4 of 7 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/dotenv-18.0.9 branch October 26, 2026 01:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Development

Successfully merging this pull request may close these issues.

1 participant