Pull request #20 · stacks/vite-plugin-dotenvx

[!NOTE] This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@dotenvx/dotenvx	`^1.39.1` → `^1.75.1`
@stacksjs/rpx	`^0.10.0` → `^0.11.60`
better-dx	`^0.2.15` → `^0.2.38`
bumpp	`^10.1.0` → `^10.4.1`
changelogen	`^0.6.1` → `^0.6.2`
typescript (source)	`^5.8.3` → `^5.9.3`
vite (source)	`^6.2.5` → `^6.4.5`
vite-plugin-vue-devtools (source)	`^7.7.2` → `^7.7.10`
vitepress (source)	`^1.6.3` → `^1.6.4`

Release Notes

dotenvx/dotenvx (@dotenvx/dotenvx)

`v1.75.1`

Compare Source

Changed

Publish as named binaries (#851)

Removed

Remove references to dotenvx-vlt (now dotenvx-armor) (#849)

`v1.75.0`

Compare Source

Changed

Swap in @dotenvx/primitives (#848)
ext commands become first-class(#847)

`v1.74.3`

Compare Source

Changed

Bundle dotenvx with @dotenvx/next-env for user convenience (#845)

`v1.74.2`

Compare Source

Changed

Fix provenance for @dotenvx/next-env (#844)

`v1.74.1`

Compare Source

Added

Add README for @dotenvx/next-env (#843)

`v1.73.1`

Compare Source

Changed

Give update available notification only for armor commands (#840)

`v1.73.0`

Compare Source

Added

Add dotenvx armor commands directly inside dotenvx (#839)

dotenvx remains local-first: armor commands are optional under professional security section

`v1.72.0`

Compare Source

Added

Move armor login command to first class dotenvx login command. (#836)
dotenvx remains local-first: login is optional and only needed when you want Armor features like moving keys off-device, team sharing, and audit access.
Patch 2 high severity dependencies (#837)

`v1.71.3`

Compare Source

Changed

Forward command to Dotenvx Armor Key Guard approvals (#835)

`v1.71.2`

Compare Source

Changed

touch up get, set, and decrypt when armor installed (#834)

`v1.71.1`

Compare Source

Changed

stderr changed to inherit for dotenvx-armor integration (#833)

`v1.71.0`

Compare Source

Added

Add optional automation --token support for Armor ⛨ users (#831)

`v1.70.0`

Compare Source

Changed

Dotenvx Ops/Vlt is now Dotenvx Armor ⛨ (#830)

`v1.69.2`

Compare Source

Changed

Minor messaging improvements, especially if using armored keys (#825)

`v1.69.1`

Compare Source

Changed

Internally rename ops to vlt (#823)

`v1.69.0`

Compare Source

Changed

Remove fully-deprecated opsOff option in favor of noOps (#822)

`v1.68.1`

Compare Source

Changed

Pass -f to ops (#821)

`v1.68.0`

Compare Source

Changed

Support ignore option on parse (#820)

`v1.67.0`

Compare Source

Added

Add prompt for local storage vs armored storage (#819)

`v1.66.0`

Compare Source

Added

Add dotenvx doctor (#815)

`v1.65.3`

Compare Source

Changed

Improve spinner message blinking with simpler --no-spinner flag passed to ops (#814)

`v1.65.2`

Compare Source

Changed

Improve spinner message coordination between dotenvx and dotenvx-ops (#813)

`v1.65.1`

Compare Source

Changed

Prompts from ops should bubble up (#812)

`v1.65.0`

Compare Source

Added

Add support for replaceing duplicate keys with different values (#806)

`v1.64.0`

Compare Source

Added

Add optional dotenvx armor command.
- armor up armor private key
- armor down dearmor private key
- armor push push armored key (from .env.keys)
- armor pull pull armored key (into .env.keys)

Move private keys off device and under access control with Dotenvx Ops ⛨. Learn more

`v1.63.0`

Compare Source

Added

Add support for encrypted values passed to --env flag (#804)
Add support for --format=colon in order to support cloudflare's wrangler --var flag format (#804)

`v1.62.0`

Compare Source

Added

Add support for config({ envs }). unlocks simpler cloudflare worker integration (#803)

$ dotenvx encrypt -f .env.txt

// src/index.js
import envSrc from '../.env.txt'
import dotenvx from '@dotenvx/dotenvx'

const config = dotenvx.config({ envs: [{ type: 'env', value: envSrc, privateKeyName: 'DOTENV_PRIVATE_KEY' }] })
const envx = config.parsed

export default {
  async fetch(request, env, ctx) {
    return new Response(`Hello ${envx.HELLO}`)
  }
}

"scripts": {
  "deploy": "wrangler deploy",
  "dev": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
  "start": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
  "test": "vitest"
},

`v1.61.6`

Compare Source

Changed

Guard against command substitution following encrypted: (#802)

`v1.61.5`

Compare Source

Changed

Support --hostname flag to dotenvx-ops.login (#801)

`v1.61.4`

Compare Source

Changed

Respect SIGINT handler completion (#798)

`v1.61.3`

Compare Source

Changed

Tighten up ext precommit --install message (#797)

`v1.61.2`

Compare Source

Changed

For Ops ⛨ users surface stderr (#796)

`v1.61.1`

Compare Source

Changed

Faster coldstarts! (#781)
Patch dotenvx precommit|prebuild shorthand (#793)

`v1.61.0`

Compare Source

Added

Add login and logout method that proxy to dotenvx-ops login/logout (#780)
Note: dotenvx continues to make zero outgoing HTTP requests and includes no telemetry. Outgoing requests occur only if you explicitly install the dotenvx-ops SDK or CLI.

`v1.60.2`

Compare Source

Changed

Communicate local key and armored key (for Ops stored keys) (#778)

`v1.60.1`

Compare Source

Added

Added missing + key ⛨ for Ops stored keys (#777)

`v1.60.0`

Compare Source

Added

Add spinner with loading messages
- injecting (run)
- encrypting (encrypt, set)
- decrypting (decrypt, get)
- rotating (rotate)
- retrieving (keypair)

`v1.59.1`

Compare Source

Added

add HELLO key to the kit sample to match most of our examples in the README

`v1.59.0`

Compare Source

Changed

encrypt and set now create a .env file if one does not exist (#771)
pass --no-create to prevent file creation

`v1.58.0`

Compare Source

Changed

Changed runtime injection message to format ⟐ injecting env (N) from FILE · dotenvx@VERSION (#770)

`v1.57.5`

Compare Source

Changes

Improve already installed message (#768)

`v1.57.4`

Compare Source

Changes

Use curl example for install dotenvx.com/ops (#767)

`v1.57.3`

Compare Source

Changes

Simplify installed success message (#766)

`v1.57.2`

Compare Source

Changes

Ran npm audit to update package-lock.json (#763)

`v1.57.1`

Compare Source

Changes

improved error logs and compacted most to a single line (#755)
introduced leading log glyphs as a visual status language:
- ⟐ success action (injected)
- ◈ success action (encrypted)
- ◇ success action (set plain value, decrypted)
- ⟳ success action (rotated)
- ○ informational no-op (no changes)
- ▣ success action for generated/updated support files
- ⚠ warning
- ☠ error

`v1.57.0`

Compare Source

Changed

color and formatting changes to outputs (#754)

`v1.56.0`

Compare Source

Changed

ops off flag — now respected by get, keypair, rotate, and encrypt (#750)
--pp alias — added as shorthand for --pretty-print; toward sunsetting -pp (#750)

Removed

Remove support for .env.vault files (#750)

`v1.55.1`

Compare Source

Added

Respect dotenvx-ops status (on|off) (#749)

`v1.55.0`

Compare Source

Added

Add '⛨ ARMORED KEYS: Harden your private keys.' security feature when dotenvx-ops installed (#746)

Removed

Remove ProKeypair logic

`v1.54.1`

Compare Source

Changed

Fix npm publish

`v1.53.0`

Compare Source

Removed

Remove radar. It has been a year since replaced by ops. (#743)

`v1.52.0`

Compare Source

Added

Pass log level options to main.set (#731)

`v1.51.4`

Compare Source

Changed

Change description of dotenvx-ops to better reflect its tooling as operational primitives on top of dotenvx for production use cases. (#721)

`v1.51.3`

Compare Source

Added

Add hint on .env.keys for dotenvx armor up. Dotenvx Armor lets you armor your private keys securely with just a single command. It's a convenient alternative to manually copy/pasting them in and out of 1Password. (#718)

`v1.51.2`

Compare Source

Changed

Switch npm publish to use Dotenvx Ops' new Rotation Tokens (ROTs) (#715)

This will allow us to start dogfooding our own solution for third-party API key rotation. Third-party API key rotation would drastically improve security industry wide. Please get in touch if this is interesting to you.

`v1.51.1`

Compare Source

Added

Add opsOff type information

`v1.51.0`

Compare Source

Added

Add config({opsOff: true}) options and --ops-off flag for turning off Dotenvx Ops features. (#680)

`v1.50.1`

Compare Source

Removed

Remove listed command to radar (now ops) (#678)

`v1.50.0`

Compare Source

Added

Add optional dotenvx ops command (#677)
Ops is a coming rename of Radar. Radar will become a feature inside ops.
With dotenvx ops use dotenvx across your team, infrastructure, agents, and more.

 _______________________________________________________________________
|                                                                       |
|  dotenvx-ops: production grade dotenvx–with operational primitives    |
|                                                                       |
|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
|                                                                       |
|  Learn more at https://dotenvx.com/ops                                |
|_______________________________________________________________________|

`v1.49.1`

Compare Source

Changed

🐞 patch bug with variable expansion of single quoted values (#675)

`v1.49.0`

Compare Source

Added

For precommit and prebuild, ignore .env.x file like we do with .env.vault file. (#666)

`v1.48.4`

Compare Source

Removed

Remove unnecessary use of eval in proKeypair helper (#654)

`v1.48.3`

Compare Source

Changed

Include privateKeyName and privateKey on internal processedEnv object (#649)

`v1.48.2`

Compare Source

Changed

Check radar status before sending (#646)

`v1.48.1`

Compare Source

Changed

Send beforEnv and afterEnv to Radar if user has installed (#645)

`v1.48.0`

Compare Source

Added

Include beforeEnv and afterEnv for user debugging (#644)

`v1.47.7`

Compare Source

Changed

src should be in internal processEnv object (#643)

`v1.47.6`

Compare Source

Changed

Make Radar call non-blocking (#642)

`v1.47.5`

Compare Source

Changed

Add resilient handling of any Radar failures (#639)

`v1.47.4`

Compare Source

Changed

Smarter require of non-installed libs like dotenvx-radar (#638)

`v1.47.3`

Compare Source

Added

Send to radar#observe if Radar installed by user (#631)

Removed

Remove cli in package.json (#632)

`v1.47.2`

Compare Source

Added

Export cli in package.json (#629)

`v1.47.1`

Compare Source

Added

Add convenience log that radar active 📡 when dotenvx-radar is installed (#625)

`v1.47.0`

Compare Source

Added

Add optional dotenvx radar command (#624)
Radar is an early access commercial extension for dotenvx that will auto backup your .env files.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Radar: Env Observability                                     |
|                                                                       |
|  ░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓███████▓▒░░▒▓████████▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓████████▓▒░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|                                                                       |
|  Observe, version, and back up your environment variables at runtime. |
|                                                                       |
|  Purchase lifetime access at https://dotenvx.com/radar                |
|                                                                       |
| --------------------------------------------------------------------- |
| - thank you for using dotenvx! - @motdotla                            |
|_______________________________________________________________________|

`v1.46.0`

Compare Source

Added

Add error when hoisting issue experienced around commander.js (#623)

Removed

Remove git-dotenvx and git dotenvx shorthand (#621)

`v1.45.2`

Compare Source

Changed

Minor README updates

`v1.45.1`

Compare Source

Changed

Include setLogName and setLogVersion in config (#613)

`v1.45.0`

Compare Source

Added

Add logger.setName and logger.setVersion for customization of logger (#612)

`v1.44.2`

Compare Source

Changed

Clarify license is BSD-3.

`v1.44.1`

Compare Source

Changed

Patch SetOutput type (#597)

`v1.44.0`

Compare Source

Added

Add armv7 support (#593)

`v1.43.0`

Compare Source

Removed

Remove errorv, errornocolor, blank from logger options (#584)

Changed

Replace instances of console.error with logger.error (#584)

`v1.42.2`

Compare Source

Changed

Fix --force flag work with ?force=true (2776715)

`v1.42.1`

Compare Source

Added

Add --force flag to install.sh (0b8d21c)

`v1.42.0`

Compare Source

Added

Add ability to override the os and arch via install.sh and dotenvx.sh (3ded752)

`v1.41.0`

Compare Source

Added

Add [directory] argument to precommit and prebuild (#572)

`v1.40.1`

Compare Source

Changed

Patch ext scan command (#570)

`v1.40.0`

Compare Source

Added

Smarter ext precommit and ext prebuild – catch duplicate KEYs in the same .env file where one is mistakenly left unencrypted (#567)

stacksjs/rpx (@stacksjs/rpx)

stacksjs/better-dx (better-dx)

`v0.2.38`

Compare Source

`v0.2.37`

Compare Source

`v0.2.36`

Compare Source

`v0.2.35`

Compare Source

`v0.2.34`

Compare Source

`v0.2.33`

Compare Source

`v0.2.32`

Compare Source

`v0.2.31`

Compare Source

`v0.2.30`

Compare Source

`v0.2.29`

Compare Source

`v0.2.28`

Compare Source

`v0.2.27`

Compare Source

`v0.2.26`

Compare Source

`v0.2.25`

Compare Source

`v0.2.24`

Compare Source

`v0.2.23`

Compare Source

`v0.2.22`

Compare Source

`v0.2.21`

Compare Source

`v0.2.20`

Compare Source

`v0.2.19`

Compare Source

`v0.2.18`

Compare Source

`v0.2.17`

Compare Source

`v0.2.16`

Compare Source

antfu-collective/bumpp (bumpp)

`v10.4.1`

Compare Source

🚀 Features

Add custom path to config - by @OskarLebuda in #107 <samp>(0f2e4)</samp>

View changes on GitHub

`v10.4.0`

Compare Source

No significant changes

View changes on GitHub

`v10.3.2`

Compare Source

🐞 Bug Fixes

Resolve the options in config file correctly - by @liangmiQwQ in #101 <samp>(f5887)</samp>

View changes on GitHub

[`v10.3.1`](https://redirect.github.com/antfu-collective/bumpp/releases/ta

[!IMPORTANT] ✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.