🐞 fix recent regression when using path option. return to historical behavior: do not attempt to auto find .env if path set. (regression was introduced in 16.4.3) #814
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the safe-dependencies group with 6 updates:
16.4.1
16.4.5
4.18.2
4.19.2
14.1.0
14.2.1
8.56.0
8.57.0
3.2.4
3.2.5
2.4.10
2.4.14
Updates
dotenv
from 16.4.1 to 16.4.5Changelog
Sourced from dotenv's changelog.
Commits
9f3e833
16.4.56924177
Merge pull request #814 from motdotla/dont-check-existance3533420
changelog 🪵249e5a6
adjust logic to support tests87fd887
do not check if exists1146910
rename .env-multiline to .env.multilined03e397
16.4.43275a0a
changelog 🪵f40a8c3
Merge pull request #812 from motdotla/patch-121dc22d3
replace 14 chaining operatorUpdates
express
from 4.18.2 to 4.19.2Release notes
Sourced from express's releases.
... (truncated)
Changelog
Sourced from express's changelog.
Commits
04bc627
4.19.2da4d763
Improved fix for open redirect allow list bypass4f0f6cc
4.19.1a003cfa
Allow passing non-strings to res.location with new encoding handling checks f...a1fa90f
fixed un-edited version in history.md for 4.19.011f2b1d
build: fix build due to inconsistent supertest behavior in older versions084e365
4.19.00867302
Prevent open redirect allow list bypass due to encodeurl567c9c6
Add note on how to update docs for new release (#5541)69a4cf2
deps: cookie@0.6.0Maintainer changes
This version was pushed to npm by wesleytodd, a new releaser for express since your current version.
Updates
got
from 14.1.0 to 14.2.1Release notes
Sourced from got's releases.
Commits
8da9912
14.2.1c81a611
Fix error handling when UTF8 decoding fails (#2336)897f385
14.2.04cbd01d
Addcause
property with the original error toRequestError
(#2327)Updates
eslint
from 8.56.0 to 8.57.0Release notes
Sourced from eslint's releases.
Changelog
Sourced from eslint's changelog.
... (truncated)
Commits
abea3b6
8.57.01cd3f8c
Build: changelog update for 8.57.01813aec
chore: upgrade@eslint/js
@8
.57.0 (#18143)5c356bb
chore: package.json update for@eslint/js
release84922d0
docs: Show prerelease version in dropdown (#18139)1120b9b
feat: Add loadESLint() API method for v8 (#18098)5b8c363
docs: Switch to Ethical Ads (#18117)2196d97
fix: handle absolute file paths inFlatRuleTester
(#18064)f4a1fe2
test: add more tests for ignoring files and directories (#18068)69dd1d1
fix: Ensure config keys are printed for config errors (#18067)Updates
prettier
from 3.2.4 to 3.2.5Release notes
Sourced from prettier's releases.
Changelog
Sourced from prettier's changelog.
... (truncated)
Commits
7142cf3
Release 3.2.58cbee2e
chore(deps): update glimmer to v0.88.1 (#15991)45baee0
chore(deps): update dependency magic-string to v0.30.6 (#16022)9fb32a1
Minor refactor to property print (#15924)08f1940
Update install script for husky v9 (#16000)6d0b1d2
Update yarn to v4.1.0 (#16021)c8ba8db
chore(deps): update dependency@angular/compiler
to v17.1.2 (#16018)e2250ec
chore(deps): update typescript-eslint to v6.20.0 (#16015)02865f6
chore(deps): update dependency npm-run-all2 to v6.1.2 (#16017)014ee5d
chore(deps): update dependency hermes-parser to v0.19.0 (#16014)Updates
prettier-plugin-packagejson
from 2.4.10 to 2.4.14Release notes
Sourced from prettier-plugin-packagejson's releases.
Commits
499cae4
Merge pull request #156 from matzkoh/renovate/sort-package-json-2.xe2bb083
fix(deps): update dependency sort-package-json to v2.10.024c8758
Merge pull request #155 from matzkoh/renovate/sort-package-json-2.xc4d4366
fix(deps): update dependency sort-package-json to v2.9.0ab3df7c
Merge pull request #154 from matzkoh/renovate/node-20.x11c47ea
chore(deps): update dependency node to v20.12.0b3e96c2
Merge pull request #152 from matzkoh/renovate/lock-file-maintenance130323a
chore(deps): lock file maintenance7da86da
Merge pull request #151 from matzkoh/renovate/lock-file-maintenance479852a
chore(deps): lock file maintenanceDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show