[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
dotenv	^17.0.0 → ^18.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

motdotla/dotenv (dotenv)

v18.0.9

Compare Source

Changed

• Permit DOTENV_PATH being empty string with the CLI (#​1076)

v18.0.8

Compare Source

Changed

• Fast parser should strip appended extra quotes (#​1073)
• Type detail improvement (#​1074)

v18.0.7

Compare Source

Changed

• Treat undefined settings like quiet: true as null rather than falsey (#​1070)
• CLI should honor DOTENV_QUIET setting in .env file (#​1071)

v18.0.6

Compare Source

Changed

• Use smarter parseBoolean not Boolean() to fix override (#​1069)

v18.0.5

Compare Source

Changed

• Fix missing typescript module declaration (#​1068)
• Improve performance for large .env files (#​1066)

v18.0.4

Compare Source

Changed

• import dotenv/config should default quiet: true (#​1063)

v18.0.3

Compare Source

Changed

• Patch DOTENV_QUIET setting when inside .env file (#​1059)

v18.0.2

Compare Source

Changed

• Patch additional edge cases for the fast parser (#​1056)

v18.0.1

Compare Source

Changed

• Handle file urls in config logging (#​1054)

v18.0.0

Compare Source

Added

• NEW: Dotenv now has a CLI. (#​1022)

$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv

• NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#​1010)

$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv

faster than Node native parseEnv!

Changed

• Injecting message sent to stderr rather than stdout and tips removed (#​1037)

Removed

• Remove tips (#​1031)
• Remove skill files (#​1032)
• Remove Spanish README (#​1034)
• Remove .env.vault support (#​1033)
• Remove preloading. Instead use cli dotenv run -- your-command (#​1035)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gemini-code-assist]

Code Review

This pull request updates the dotenv dependency in the Node.js latency comparison benchmark from version ^17.0.0 to ^18.0.0. There are no review comments, and I have no feedback to provide.

[olavloite]

The update is a major version bump (v17.0.0 to v18.0.0) and is listed under dependencies (not devDependencies) in benchmarks/latency-comparison/nodejs/package.json. Additionally, the release notes indicate breaking changes including the removal of preloading and .env.vault support.

[olavloite]

This is a major version update from v17 to v18 for 'dotenv' which is listed under 'dependencies' in the package.json. Major version updates are not approved unless they are exclusively for devDependencies or test/CI-scoped dependencies.

[olavloite]

The PR is a major version update of 'dotenv' from v17 to v18. Although it is located in a benchmark directory, it is listed as a production dependency in package.json rather than a devDependency. Furthermore, the release notes indicate the removal of features like preloading, which is a breaking change.

[olavloite]

The PR is a major version update (v17 to v18) of 'dotenv'. While it is located within a benchmark subdirectory, it is listed under 'dependencies' rather than 'devDependencies'. Additionally, the release notes indicate breaking changes, such as the removal of preloading, which requires manual verification.

[olavloite]

This is a major version update (v17.0.0 to v18.0.0) for 'dotenv' which contains breaking changes (such as the removal of preloading and .env.vault support) as listed in the release notes.

[olavloite]

The PR is a major version update (v17 to v18) and the release notes indicate that features have been removed (e.g., 'Remove preloading' and 'Remove .env.vault support'), which suggests potential breaking changes.

[olavloite]

Major version update for 'dotenv' from ^17.0.0 to ^18.0.0 listed under 'dependencies' in package.json is not allowed for auto-merge.

[olavloite]

Major version updates (v17.0.0 to v18.0.0) for non-dev dependencies in package.json are not allowed for auto-merge.

[olavloite]

Major version update from ^17.0.0 to ^18.0.0 for a dependency listed under 'dependencies' in package.json is not allowed for auto-merge.

[olavloite]

This is a major version update (v17 to v18) for a dependency listed under 'dependencies' rather than 'devDependencies'.

[olavloite]

Major version update from v17.0.0 to v18.0.0 for 'dotenv' listed under dependencies is not allowed.

[olavloite]

Major version update from v17.0.0 to v18.0.0 for a dependency listed under 'dependencies' (not devDependencies or test scope) is not allowed by the auto-merge rules.