[PR #415] [MERGED] build(deps): bump dotenv from 17.3.1 to 17.4.0 #439

Closed
opened 2026-06-05 17:23:05 -04:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/langchain-ai/deepagentsjs/pull/415
Author: @dependabot[bot]
Created: 4/1/2026
Status: Merged
Merged: 4/2/2026
Merged by: @christian-bromann

Base: mainHead: dependabot/npm_and_yarn/dotenv-17.4.0


📝 Commits (1)

  • b9726a9 build(deps): bump dotenv from 17.3.1 to 17.4.0

📊 Changes

1 file changed (+11 additions, -11 deletions)

View changed files

📝 pnpm-lock.yaml (+11 -11)

📄 Description

Bumps dotenv from 17.3.1 to 17.4.0.

Changelog

Sourced from dotenv's changelog.

17.4.0 (2026-04-01)

Added

  • Add skills/ folder with focused agent skills: skills/dotenv/SKILL.md (core usage) and skills/dotenvx/SKILL.md (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)

Changed

  • Tighten up logs: ◇ injecting env (14) from .env (#1003)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/langchain-ai/deepagentsjs/pull/415 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/1/2026 **Status:** ✅ Merged **Merged:** 4/2/2026 **Merged by:** [@christian-bromann](https://github.com/christian-bromann) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/dotenv-17.4.0` --- ### 📝 Commits (1) - [`b9726a9`](https://github.com/langchain-ai/deepagentsjs/commit/b9726a965afeb7b73631c90c94096dccff2531c4) build(deps): bump dotenv from 17.3.1 to 17.4.0 ### 📊 Changes **1 file changed** (+11 additions, -11 deletions) <details> <summary>View changed files</summary> 📝 `pnpm-lock.yaml` (+11 -11) </details> ### 📄 Description Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.3.1 to 17.4.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/motdotla/dotenv/compare/v17.3.1...v17.4.0">17.4.0</a> (2026-04-01)</h2> <h3>Added</h3> <ul> <li>Add <code>skills/</code> folder with focused agent skills: <code>skills/dotenv/SKILL.md</code> (core usage) and <code>skills/dotenvx/SKILL.md</code> (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (<code>npx skills add motdotla/dotenv</code>)</li> </ul> <h3>Changed</h3> <ul> <li>Tighten up logs: <code>◇ injecting env (14) from .env</code> (<a href="https://redirect.github.com/motdotla/dotenv/pull/1003">#1003</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motdotla/dotenv/commit/a2e31d6d30ec7b9369aef9e5e1588cedf8cced2f"><code>a2e31d6</code></a> 17.4.0</li> <li><a href="https://github.com/motdotla/dotenv/commit/4f041ee8eadc781dbf11ecdd9005e093669fd55f"><code>4f041ee</code></a> changelog 🪵</li> <li><a href="https://github.com/motdotla/dotenv/commit/bab8b983481b1ab4dd127df173d351ef6695d3f1"><code>bab8b98</code></a> README</li> <li><a href="https://github.com/motdotla/dotenv/commit/516d47e30ed801d730f85ee090f09b33b8b78686"><code>516d47e</code></a> update</li> <li><a href="https://github.com/motdotla/dotenv/commit/ce9b98fc93f44df439638152f167a24a672fd262"><code>ce9b98f</code></a> adjust quickstart</li> <li><a href="https://github.com/motdotla/dotenv/commit/d3a9065132bad9833c94dba46d683c84dcb9df1a"><code>d3a9065</code></a> update links</li> <li><a href="https://github.com/motdotla/dotenv/commit/9a3f955cc8809f64c61d0de7266ea380cdc3ac31"><code>9a3f955</code></a> add banner</li> <li><a href="https://github.com/motdotla/dotenv/commit/d35b6a9f019944ef014387f362bd5fe23433d84a"><code>d35b6a9</code></a> clean up</li> <li><a href="https://github.com/motdotla/dotenv/commit/a115e3ab874b31c6f9460a2a8c9336bff30fb62c"><code>a115e3a</code></a> remove version</li> <li><a href="https://github.com/motdotla/dotenv/commit/185e641b8f1d69a6586ef75dd97d980a83b989e5"><code>185e641</code></a> hide as2 for now - very early beta</li> <li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v17.3.1...v17.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=17.3.1&new-version=17.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-06-05 17:23:05 -04:00
yindo closed this issue 2026-06-05 17:23:05 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langchain-ai/deepagentsjs#439