npm · #3608

@dotenvx/dotenvx

2.21.0dotenvx/dotenvx ↗

a secure dotenv–from the creator of `dotenv`

Last release 16 days ago
10 Aug 2026
Ships on a steady schedule
a new release about every 8 days
Nearly every release is documented
notes for 328 of 338 stable releases
Nothing withdrawn
no release was ever pulled
3 years old
338 releases · first in 2023

Release timeline

338 releases since 2023

202420252026

Releases

2.21.010 Aug 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add dotenvx enc and dotenvx dec shorthands for encrypt and decrypt (#943)
- Add convenient dx alias for shorter dx run --, dx enc, etc (#944)
Changed
- Patch typescript types for path (#942)
Open source →
2.20.17 Aug 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Handle accent marks for ext precommit (#936)
Open source →
2.20.07 Aug 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add dotenvx del command for deleting a key from a .env file (#939)
Changed
- Exempt .env.vault from precommit/prebuild sealed checks (vault-format ciphertext is already safe to commit)
Open source →
2.19.23 Aug 2026
Release notes
see CHANGELOG

Open source →
2.19.129 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- User can click enter to open up approval url for convenience (#934)
Open source →
2.19.027 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add dotenvx armor open to open armored key details in browser (#930)
Open source →
2.18.126 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
- Patch injected message when preset encrypted: value (#927)
Open source →
2.18.025 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Make authenticated API calls to the Dotenvx Armor API with dotenvx curl. Allows you to control your Dotenvx Armor account directly from your agent inside Codex, Claude, etc. (#923)
Open source →
2.17.424 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Send device identifier along with curl requests (#922)
Open source →
2.17.324 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Exempt .env.example in subdirectories from precommit (#920)
Open source →
2.17.222 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add support for DOTENV_CONFIG_IGNORE global convenience (#919)
Open source →
2.17.121 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Handle ctrl + c better (#916)
Open source →
2.17.021 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add support for Bitwarden bw:// secrets in your .env files. (#915)
Open source →
2.16.121 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Fix: Do not report child error - let child do so. (#914)
Open source →
2.16.021 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add support for -ek and -ik to dotenvx get (#913)
Open source →
2.15.120 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Better communicate time waiting on 1password with elapsed time (#909)
Open source →
2.15.020 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add support for 1Password op:// secrets in your .env files. (#908)
Open source →
2.14.016 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add dotenvx run --validate for simple env validation against your .env.example (#906)
- Add dotenvx validate for a pre-check of validation against your .env.example file (#906)
Open source →
2.13.016 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add get --eval-export flag (#904)
Changed
- Make get --eval posix safe (#904)
Open source →
2.12.016 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Small Breaking: Single quoted 'Let\'s go' now correctly escapes to Let's go (#903)
Open source →
2.11.316 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Improve command substitution for nested commands (#902)
Open source →
2.11.216 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Bump @dotenvx/primtivies to support nested node invocations for pkg-ed binary (#901)
Open source →
2.11.116 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Redact all keys by default - except those ending in _PLAIN (460862)
- Support dotenvx run -- claude and dotenvx run -- codex (#900)
- Simplify default encrypted .env file to just HELLO="World" (#899)
Open source →
2.11.015 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add convenience method dotenvx update (#897)
Changed
- BREAKING: Send informational messages like injected env to stderr instead of stdout. This makes it more reliable to do things like piping output to a file without needing --quiet. (#898)
Open source →
2.10.015 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add run --redact to keep secrets out of command output. (#894)
Open source →
2.9.014 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- BREAKING: ls from @dotenvx/dotenvx is now async/await. (#893)
Open source →
2.8.014 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add FILE_NOT_WRITABLE error for user convenience (#891)
- Support Enclaved Armored Keys (#892)
Open source →
2.7.314 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Fix: --quiet should not display the spinner and its stderr messages (#889)
Open source →
2.7.213 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Include dotenvx armor status command.
Open source →
2.7.113 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Security Improvement: dotenvx armor login attempts to set the DOTENVX_ARMOR_TOKEN in your native OS secret store going forward. For current Armor users run dotenvx armor logout and then dotenvx armor login to make use of this immediately. (#886)
Open source →
2.7.013 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Added support for --mask on get, run, decrypt (#885)
Open source →
2.6.011 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Support native up|down|pull|push for windows (#884)
Open source →
2.5.011 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Support native up|down|pull|push for windows (#883)
Open source →
2.4.110 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Support config(path:) as a directory like app/web. Useful for monorepos (#882)
Open source →
2.4.010 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Support multiple -fk flags for select commands (#880)
- Support -f ../.. directories (#881)
Open source →
2.3.49 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Removed
- Replace various deps with @dotenvx/tooling (#879)
Open source →
2.3.39 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Removed
- Remove dotenv and commander for @dotenvx/tooling (#878)
Open source →
2.3.29 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Permit empty value for set (#877)
Open source →
2.3.19 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Fix correct default valuation interpolation for empty strings by upgrading primitives package
Open source →
2.3.09 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add lock up and lock down commands for password protecting private keys (#875)
Changed
- BREAKING: Rename keychain commands to native to make way for windows and linux. (#875)
Removed
- BREAKING: Remove --no-ops. Use --no-armor. (#875)
Open source →
2.2.28 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Move login and logout under armor (#874)
Open source →
2.2.18 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Move genexample to top level commands (#873)
Open source →
2.2.08 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Use dotenvx keychain up|down to move your private keys to your macOS Keychain (#872)
Open source →
2.1.56 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- precommit and prebuild respect _PLAIN (#871)
Open source →
2.1.42 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add support for DOTENV_CONFIG_CONVENTION=nextjs (#869)
Open source →
2.1.32 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Patch edge case when custom unspecified -f and --env flag (#868)
Open source →
2.1.22 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Support restricted read permissions to .env.keys (#676, #867)
Open source →
2.1.12 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Support DOTENV_CONFIG_QUIET=true as synonym for --quiet flag (#866)
Open source →
2.1.02 Jul 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add interactive input mode for set (#862)
- Support leaving _PLAIN suffixed keys unencrypted during set and encrypt (#862)
Changed
- Return exit code 1 from get when decryption errors are reported (#862)
Fixed
- Add Windows PowerShell coverage for npm shim encryption of .env.local files
Open source →
2.0.030 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- BREAKING: lib/main#set async only (#855)
- BREAKING: lib/main#get async only (#855)
- New keyring support - for local and armor providers and to unlock future providers (#855)
- Route run, config, and get through shared env and keypair resolvers backed by @dotenvx/primitives (#855)
- Route set, encrypt, and decrypt through shared transforms that operate on primitive scan, parse, encrypt, and upsert results (#855)
- Update library parse to use primitive parsing while preserving dotenvx-style encrypted value errors (#855)
Removed
- BREAKING: Remove the rotate command (it will return in 2.1 or 2.2 soon with a more complete implementation for local and armored keys) (#855)
- BREAKING: Remove the library doctor, keypair, and genexample exports from lib/main (#855)
Open source →
1.75.120 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Publish as named binaries (#851)
Removed
- Remove references to dotenvx-vlt (now dotenvx-armor) (#849)
Open source →
1.75.020 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Swap in @dotenvx/primitives (#848)
- ext commands become first-class(#847)
Open source →
1.74.319 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Bundle dotenvx with @dotenvx/next-env for user convenience (#845)
Open source →
1.74.219 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Fix provenance for @dotenvx/next-env (#844)
Open source →
1.74.119 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add README for @dotenvx/next-env (#843)
Open source →
1.73.116 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Give update available notification only for armor commands (#840)
Open source →
1.73.016 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Add dotenvx armor commands directly inside dotenvx (#839)
dotenvx remains local-first: armor commands are optional under professional security section
Open source →
1.72.015 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Added
- Move armor login command to first class dotenvx login command. (#836)
- dotenvx remains local-first: login is optional and only needed when you want Armor features like moving keys off-device, team sharing, and audit access.
- Patch 2 high severity dependencies (#837)
Open source →
1.71.311 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- Forward command to Dotenvx Armor Key Guard approvals (#835)
Open source →
1.71.28 Jun 2026
Release notes
see CHANGELOG

Open source →
Release notes2 sources agree
Changed
- touch up get, set, and decrypt when armor installed (#834)
Open source →

@dotenvx/dotenvx

Release timeline

Releases

Added

Changed

Changed

Added

Changed

Changed

Added

Added

Changed

Changed

Added

Changed

Added

Changed

Added

Changed

Added

Added

Added

Changed

Changed

Changed

Changed

Changed

Added

Changed

Added

Changed

Added

Changed

Added

Changed

Added

Added

Added

Added

Added

Removed

Removed

Changed

Changed

Added

Changed

Removed

Changed

Changed

Added

Changed

Added

Changed

Changed

Changed

Added

Changed

Fixed

Changed

Removed

Changed

Removed

Changed

Changed

Changed

Added

Changed

Added

Added

Changed

Changed