fix(deps): update dependency @dotenvx/dotenvx to ^0.45.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@dotenvx/dotenvx	^0.14.1 -> ^0.45.0

---

Release Notes

dotenvx/dotenvx (@​dotenvx/dotenvx)

v0.45.0

Compare Source

Changed

• Rename dotenvx vault convert to dotenvx vault migrate (#​251)
• Update install.sh regex version check to be sh compatible (not just bash)

v0.44.6

Compare Source

Added

• Added checksums.txt as part of each release

v0.44.5

Compare Source

Changed

• Removed .github folder from published binaries on npm (example: npm code)
• Add help message to install.sh

v0.44.4

Compare Source

Changed

• Automated deployment of install.sh along with sanity checks (#​250)

v0.44.3

Compare Source

Added

• Include CHANGELOG.md in npm release
• Include install.sh in package release

v0.44.2

Compare Source

Changed

• Fix license in package.json to match project's license BSD-3.

v0.44.1

Compare Source

Changed

• Respect decryption of zero length strings - dotenvx set HELLO '' --encrypt (#​236)

v0.44.0

Compare Source

Added

• Added options.debug, options.verbose, options.quiet, and options.logLevel to .config() (#​233)

v0.43.2

Compare Source

Changed

• Patch replace when replacing double, single, or backticked quoted at anywhere in the .env file. (#​232)

v0.43.1

Compare Source

Changed

• Improved replace function regex - to handle more edge case scenarios with replacing KEY/values (#​227)

v0.43.0

Compare Source

Added

• Support require('@​dotenvx/dotenvx').config() for DOTENV_PRIVATE_KEY decryption (#​225)

v0.42.0

Compare Source

Added

• Added .env.vault deprecated warning when using DOTENV_KEY. Provide instructions to convert to encrypted .env files. (#​224)

v0.41.0

Compare Source

Added

• Added vault convert command to list convert instructions for converting .env.vault to encrypted .env files (#​222)

To convert your .env.vault file to encrypted .env file(s):

  1. Run [dotenvx vault decrypt]
  2. Run [ls -a .env*]

Lastly, convert each .env(.environment) file:

  3. Run [dotenvx convert -f .env.production]

For example:

  $ dotenvx convert -f .env
  $ dotenvx convert -f .env.ci
  $ dotenvx convert -f .env.production

Afterward:

Update production with your new DOTENV_PRIVATE_KEY_PRODUCTION located in .env.keys

Learn more at [https://dotenvx.com/docs/quickstart#add-encryption]

Changed

• Rename encryptme to convert (#​222)

v0.40.0

Compare Source

Added

• Added dotenvx encryptme command to convert an entire .env file to an encrypted .env file. (#​213)

Changed

• Made precommit smart enough to check if a .env* file is encrypted or not. If fully encrypted, then allow precommit check to pass (#​211)

Removed

• Do not warn of missing files for conventions (too noisy) (#​216)

v0.39.0

Compare Source

Added

• Add --convention flag to get

Removed

• Removed help messages like 'in production' and 'in ci'. Too specific and could lead to confusion.

v0.38.0

Compare Source

Changed

• ⚠️ DEPRECATION NOTICE: the following commands are being moved. Please, update any code and muscle memory you have related to these:
  • dotenvx encrypt => dotenvx vault encrypt
  • dotenvx decrypt => dotenvx vault decrypt
  • dotenvx status => dotenvx vault status
• ⚠️ DEPRECATION NOTICE: the beta hub commands are being completely deprecated (they will be fully removed in upcoming 1.0.0 release). We will provide .env.keys tooling at a later time (replacing hub) but in the context of the new --encrypt flag functionality below

Added

• Add encryption to your .env files with a single command. Pass the --encrypt flag. 🎉

$ dotenvx set HELLO World --encrypt
set HELLO with encryption (.env)

A DOTENV_PUBLIC_KEY (encryption key) and a DOTENV_PRIVATE_KEY (decryption key) is generated using the same public-key cryptography as Bitcoin.

Further notes:

• DOTENV_PUBLIC_KEY lives in the .env file. You can safely share this with whomever you wish.
• DOTENV_PRIVATE_KEY lives in your .env.keys file. Share this only with those you trust to decrypt your secrets.
• If using encrypted .env files like this it is safe to commmit them to source code. This makes reviewing PRs that contain secrets much easier.
• Tell your contributors to contribute a secret using the command dotenvx set HELLO world --encrypt.
• Set your DOTENV_PRIVATE_KEY on your server to decrypt these values using dotenvx run -- yourcommand
• You can repeat all this per environment by modifying your set command to dotenvx set HELLO production -f .env.production --encrypt (for example)
• In time we will add better tooling for sharing the private keys living in .env.keys, but until then safely share with team members you trust.
• This mechanism should be particularly useful for open source projects that want to permit secrets contributions without handing out the decryption keys. Now anyone can contribute a secret and only you can decrypt it to see what was changed.
• This solution is brand new, but I intend it to be the future for .env files. It has many benefits over .env.vault files. We will be sunsetting the .env.vault mechanism but its tooling will stay around in dotenvx for at least 1 year to come - under dotenvx vault parent command.
• Be patient as we update our documentation to prioritize this improved encryption format for .env files.

v0.37.1

Compare Source

• warn when running dotenvx status against any untracked (not in .env.vault) files (#​196)

v0.37.0

Compare Source

• add --convention nextjs flag to dotenvx run (#​193)
• improve status error message when decrypt fails or no .env* files (#​192)

v0.36.1

Compare Source

• handle SIGTERM (#​191)

v0.36.0

Compare Source

• add dotenvx status command (#​186)
• add dotenvx decrypt [directory] argument option (#​186)
• add dotenvx decrypt --environment flag option (#​186)
• normalize windows \ paths (#​186)

v0.35.1

Compare Source

Changed

• exit code 1 if get KEY not found/undefined (#​185)

v0.35.0

Compare Source

Added

• added set command, and optionally pass --env-file flag(s) to set usage: dotenvx set HELLO World (#​182)

v0.34.0

Compare Source

Changed

• make hub push more forgiving by permitting full filepath like hub push directory/.env.keys (#​180)
• add note on generated .env.example (#​181)

v0.33.1

Compare Source

Changed

• patch injection around falsy values (#​177)

v0.33.0

Compare Source

Added

• add .env.vault support for .env.something.something (useful for Next.js pattern of .env.development.local) (#​174)

v0.32.0

Compare Source

Changed

• quiet exit code 1 message (#​173)

v0.31.1

Compare Source

Changed

• improve error messages (#​171)

v0.31.0

Compare Source

Added

• add hub logout command (#​170)

v0.30.2

Compare Source

Changed

• small fixes for windows users related to hub open and hub push (#​169)

v0.30.1

Compare Source

Changed

• remove windows warnings related to missing git or git origin (#​166 #​167)

v0.30.0

Compare Source

Added

• dotenvx get --quiet will display the value no matter what (adds a blank0 logger level) (#​161)

Changed

• refactor dotenvx get to use run under the hood

v0.29.2

Compare Source

Changed

• fix broken hub login and hub open (#​160)

v0.29.1

Compare Source

Changed

• patch situation where DOTENV_KEY is present and --env-file flag is set. assume to still look for .env.vault file as first in line (#​157)

v0.29.0

Compare Source

Changed

• respect order for --env-vault-file, --env-file and --env flags (for example: dotenvx run --env "HELLO=one" --env-file=.env will prioritize --env flag. Add --overload here to prioritize --env-file or reverse the order.). you can now mix and match multiple flags in any complex order you wish and dotenvx will respect it. (#​155)

v0.28.0

Compare Source

Added

• add dotenvx settings command to list your current settings. in the future we'll provide ways to modify these settings as dotenvx's functionality grows (#​153)

v0.27.2

Compare Source

Added

• add windows postrelease step to check that dotenvx.exe is functional immediately after release (#​141)

Changed

• replace package-json with undici (#​146)
• prune redundant packages (#​148)
• return current version if remote version fails (#​149)
• switch to our own update notice mechanism (eliminating multiple deps) (#​151)

v0.27.1

Compare Source

Added

• provide .zip download option for windows executable (#​140)

Removed

• remove got from top level deps (#​139)

v0.27.0

Compare Source

Changed

• move update-notifier into lib/helpers for more control over got lib (#​138)
• move clipboardy into lib/helpers for more control and to support commonjs going forward (sindre has dropped support and many mature systems still require commonjs for their infra and have need of dotenvx). (#​137)

v0.26.0

Compare Source

Added

• add hub pull command to pull a repo's .env.keys down. (#​129)

v0.25.1

Compare Source

Changed

• 🐞 patch bug with evaluate commands. do not attempt to evaluate risky preset envs in process.env. evaluate only what's set in a .env* file (#​125)

v0.25.0

Compare Source

Added

• expand hub push with [directory] option. use for monorepos. for example: dotenvx hub push apps/backend (#​121)

v0.24.0

Compare Source

Added

• add command substitution. for example DATABASE_URL="postgres://$(whoami)@​localhost/my_database" (#​113)

v0.23.0

Compare Source

Added

• support personal environment variables. anything after the comment # personal.dotenvx.com will be considered personal and will not be encrypted to .env.vault (#​110)

v0.22.0

Compare Source

Added

• require('@​dotenvx/dotenvx').config() expands/interpolates variables. this matches the behavior of run. (note that this behavior differs from the original require('dotenv').config() (#​107)

v0.21.0

Compare Source

Added

• expose genexample function on lib/main.js for export convenience (#​102)

Changed

• rely on which npm module to find system command path for user inputted command(s) (#​105)

Removed

• remove main.inject function (#​102)

v0.20.2

Compare Source

Added

• added support for --env flag on the .env.vault decryption portion of run (#​101)

v0.20.1

Compare Source

Changed

• use system command path (#​98)

v0.20.0

Compare Source

Changed

• added --env flag. for example, dotenvx --env="HELLO=World" -- yourcommand (#​94)

v0.19.1

Compare Source

Changed

• patched up the precommit command (#​91)

v0.19.0

Compare Source

Added

• added scan command to scan for possible leaked secrets in your code (#​90)

v0.18.0

Compare Source

Added

• added get command, optionally pass --env-file flag(s) to get, optionally pass --overload, and optionally pass --pretty-print. usage: dotenvx get HELLO => World (#​89)

v0.17.1

Compare Source

Changed

• expose main.encrypt and main.ls functions

v0.17.0

Compare Source

Added

• added [directory] argument to encrypt. for example, in your nx repo from root dotenvx encrypt apps/backend will encrypt .env* files in that directory and manage the .env.keys and .env.vault in that directory as well (#​82)

v0.16.1

Compare Source

Changed

• bumped dotenv version to fix encrypt bug

v0.16.0

Compare Source

Added

• added ls command to list all your .env* files (#​80)
• added --env-file option ls (#​82)
• optionally specify --env-vault-file path to .env.vault (defaults to .env.vault) (#​73)

v0.15.4

Compare Source

Changed

• 🐞 patch --overload flag logic (#​66)

v0.15.3

Compare Source

Changed

• 🐞 fix undici readablestream error (#​65)

v0.15.2

Compare Source

Changed

• switch from axios to undici (#​59)
• bump dotenv-expand (#​63)

v0.15.1

Compare Source

Changed

• use improved dotenv expansion (#​62)

v0.15.0

Compare Source

Added

• add expansion (#​60)
• use dotenvx.com (#​56)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.