a secure dotenv–from the creator of `dotenv`
Last release 16 days ago
10 Aug 2026
Ships on a steady schedule
a new release about every 8 days
Nearly every release is documented
notes for 328 of 338 stable releases
Nothing withdrawn
no release was ever pulled
3 years old
338 releases · first in 2023
Release timeline
338 releases since 2023Releases
- 1.20.123 Oct 2024
- 1.20.017 Oct 2024
Release notes2 sources agree
Open source →Changed
- respect
process.env.DOTENV_PRIVATE_KEYand/orprocess.env.DOTENV_PUBLIC_KEYonset(#401) - respect
process.env.DOTENV_PRIVATE_KEYand/orprocess.env.DOTENV_PUBLIC_KEYonencrypt(#411) - respect
process.env.DOTENV_PRIVATE_KEYondecrypt(#412) - change
logger.helpto use brighter blue (#414)
Removed
- remove
main.decrypt,encrypt,set(#410)
- respect
- 1.19.315 Oct 2024
Release notes2 sources agree
Open source →Changed
- 🐞 fix decrypt re-encrypt of values containing backslashes (#406)
- 1.19.214 Oct 2024
- 1.19.113 Oct 2024
Release notes2 sources agree
Open source →Changed
- if
SIGTERMorSIGINTsent, don't bubble wrapped process error (#402)
- if
- 1.19.011 Oct 2024
Release notes2 sources agree
Open source →Added
- support key glob filtering for
encryptanddecrypt. example:dotenvx encrypt -ek "NEXT_PUBLIC_*"(#397)
- support key glob filtering for
- 1.18.111 Oct 2024
Release notes2 sources agree
Open source →Added
- escape user inputted regex groupings like
$1or$2. (#396)
- escape user inputted regex groupings like
- 1.18.011 Oct 2024
Release notes2 sources agree
Open source →Added
setandencryptpreserve leading spaces (#395)
HELLO=worldChanged
- improve escape and quote handling for
set,encrypt, anddecrypt(#395) - 🐞 fix
encrypt, thendecrypt, thenencrypton a json value (#377)
Note: the underlying
replaceengine to support these changes now wraps your values in single quotes. the priorreplaceengine wrapped in double quotes.So where your
.envused to look like this with double quotes:HELLO="encrypted:1234" API_KEY="encrypted:5678"It will now begin looking like this with single quotes:
HELLO='encrypted:1234' API_KEY='encrypted:5678'It's an aesthetic side effect only. Your values will continue to be decrypted and encrypted correctly.
- 1.17.09 Oct 2024
- 1.16.18 Oct 2024
- 1.16.07 Oct 2024
Release notes2 sources agree
Open source → - 1.15.06 Oct 2024
- 1.14.227 Sept 2024
Release notes2 sources agree
Open source →Changed
- swap
process.stdout.writeforconsole.logto patch up npx edge case (#387)
- swap
- 1.14.113 Sept 2024
- 1.14.04 Sept 2024
Release notes2 sources agree
Open source →Added
- add
dotenvx keypaircommand for printing your public/private keypairs (#375)
- add
- 1.13.34 Sept 2024
- 1.13.22 Sept 2024
- 1.13.12 Sept 2024
Release notes2 sources agree
Open source →Added
- expose
loggerandsetLogLeveltolib/main.js-const = { logger, setLogLevel } = require('@dotenvx/dotenvx')(#368)
- expose
- 1.13.02 Sept 2024
- 1.12.131 Aug 2024
Release notes2 sources agree
Open source →Changed
- return without quotations for
dotenvx get --format shell(#366)
- return without quotations for
- 1.12.031 Aug 2024
- 1.11.528 Aug 2024
Release notes2 sources agree
Open source →Changed
- revert
tinyexecforexeca- to support usage in bun
- revert
- 1.11.428 Aug 2024
Release notes2 sources agree
Open source →Changed
- bump
tinyexecand add postrelease-bunx check (#362)
- bump
- 1.11.328 Aug 2024
Release notes2 sources agree
Open source →Changed
- fallback to
process.env.TERMfor color depth where deno and bun do not support it (#360)
- fallback to
- 1.11.227 Aug 2024
Release notes2 sources agree
Open source →Added
- detect encoding when reading
.env*file onrun/get(#359)
- detect encoding when reading
- 1.11.126 Aug 2024
Release notes2 sources agree
Open source →Changed
- support encryption of
export KEYvariables and preserve#!shebangs(#357)
- support encryption of
- 1.11.026 Aug 2024
Release notes2 sources agree
Open source →Added
- add
--exclude-env-file (-ef)toext ls(#356)
Changed
ext precommitignorestests/directory (and similar) (#356)
- add
- 1.10.426 Aug 2024
- 1.10.325 Aug 2024
- 1.10.223 Aug 2024
Release notes2 sources agree
Open source →Changed
- default
configto empty[]array so thatDOTENV_KEY_${environment}looks up correctly (#352)
- default
- 1.10.123 Aug 2024
Release notes2 sources agree
Open source →Changed
- check subfolders on
dotenvx ext precommithook (#350)
- check subfolders on
- 1.10.023 Aug 2024
Release notes2 sources agree
Open source →Removed
- remove
dotenvx ext vault, replace with dotenvx-ext-vault (install there to continue usingext vault) (#351)
- remove
- 1.9.122 Aug 2024
- 1.9.021 Aug 2024
Release notes2 sources agree
Open source →Added
- add
--exclude-key(-ek) option todotenvx encryptanddotenvx decrypt(#344)
Changed
- preserve comments and spacing on first-time generation of .env.example file (#346)
Removed
- removed
winston- logger simplified to useconsole.loggoing forward (#347)
- add
- 1.8.021 Aug 2024
Release notes2 sources agree
Open source →Added
Changed
- use
ansicolors overrgb- for wider terminal coverage (#340) - replace
chalkwithpicocolorsandcolor-name- cutting down on 5 dependencies (#335) - replace
execawithtinyexec- cutting down on 15 dependencies (#328) - optimize
Ls._filepaths(#317)
Removed
- use
- 1.7.09 Aug 2024
Release notes2 sources agree
Open source → - 1.6.59 Aug 2024
Release notes2 sources agree
Open source →Changed
- 🐞 patch
chompfor interpolation. strip ending newline (was stripping first found newline) (#322)
- 🐞 patch
- 1.6.416 Jul 2024
- 1.6.316 Jul 2024
Release notes2 sources agree
Open source →Changed
- adjust
dotenvx proto be dynamic if dotenvx-pro is installed user's machine
- adjust
- 1.6.212 Jul 2024
- 1.6.111 Jul 2024
Release notes2 sources agree
Open source →Added
- add support for
.env1(.env*) file format. (private key expands toDOTENV_PRIVATE_KEY_DEVELOPMENT1) (#312)
- add support for
- 1.6.011 Jul 2024
Release notes2 sources agree
Open source →Added
- add
dotenvx decryptcommand. works inversely todotenvx encrypt. same flags. (#294) - add
--stdoutoption todotenvx decrypt. example:dotenvx decrypt -f .env.production --stdout > somefile.txt(#298) - add
--stdoutoption todotenvx encrypt. example:dotenvx encrypt -f .env.production --stdout > somefile.txt(#298)
Changed
- smarter private key finder. if you rename your file to
secrets.txtit can still decrypt fromDOTENV_PRIVATE_KEYby seeking out the invert of theDOTENV_PUBLIC_KEYinsidesecrets.txt(#302)
Removed
- remove
dotenvx convert- still atdotenvx encrypt - remove
dotenvx vault- still atdotenvx ext vault
- add
- 1.5.01 Jul 2024
Release notes2 sources agree
Open source →Added
- add help text for dashed values on
set. example:dotenvx set KEY -- "- + * ÷"(#293)
Changed
- replace
@inquirer/confirmandora(#285)
Removed
- remove
dotenvx ext hub, replace with dotenvx-ext-hub (install there to continue using hub) (#291)
- add help text for dashed values on
- 1.4.030 Jun 2024
- 1.3.230 Jun 2024
Release notes2 sources agree
Open source →Changed
- 🐞 remove risky
prepareandpostinstallscripts and replace withnpm run patchfor development and binary building (#286)
- 🐞 remove risky
- 1.3.030 Jun 2024
Release notes2 sources agree
Open source →Added
- encrypt specified keys with
--keyoption -dotenvx encrypt -k HELLO(#281)
- encrypt specified keys with
- 1.2.030 Jun 2024
Release notes2 sources agree
Open source →Added
- handle nested
dotenvxinvocations -dotenvx run -- dotenvx run -- env(#279)
Changed
- replace
globwith faster approach (#278)
- handle nested
- 1.1.029 Jun 2024
- 1.0.127 Jun 2024
Release notes2 sources agree
Open source →Changed
- 🐞 fix expansion when preset on
process.envand/or with--overload(#271)
- 🐞 fix expansion when preset on
- 1.0.024 Jun 2024
Release notes2 sources agree
Open source →🎉
dotenvxhas made it to1.0.0. There are BREAKING CHANGES ⚠️ .Added
- added
dotenvx set KEY value --plainto set plain text values - added
dotenvx ext🔌 as a location to place extensions likegititgnore,precommit,ls, and more. better than cluttering up core features likerun,get/set, andencrypt. - added
dotenvx pro🏆 command with coming soon and link to GitHub issue (if you wish to be notified of progress. will provide tooling/features for teams)
Changed
BREAKING ⚠️- turned on encryption by default for
dotenvx set(usedotenvx set KEY value --plainto set plain values) - renamed
dotenvx encrypttodotenvx ext vault encrypt(for managing.env.vaultfiles) - renamed
dotenvx converttodotenvx encrypt - moved
lstodotenvx ext ls - moved
genexampletodotenvx ext genexample - moved
gitignoretodotenvx ext gitignore - moved
prebuildtodotenvx ext prebuild - moved
precommittodotenvx ext precommit - moved
scantodotenvx ext scan - moved
hubtodotenvx ext hub - moved
vaulttodotenvx ext vault - moved
settingstodotenvx ext settings
- turned on encryption by default for
(for many of these moved commands, for example
dotenvx genexample, still work in1.0.0but with a large deprecated notice -DEPRECATION NOTICE: [genexample] has moved to [dotenvx ext genexample]. Please change your muscle memory todotenvx ext genexample, as these deprecated command paths will be removed in a later minor version. importantlydotenvx encryptwas not able to be preserved because as it is now in use for encrypted.envfiles rather than.env.vaultfiles)This is a BIG release that sets the tone for
dotenvx's core offering and features while maintaining room for growth. Thank you everyone for your support and usage ofdotenvx🙏.blog post: "From dotenv to dotenvx: Next Generation Config Management"
- added
- 0.45.018 Jun 2024
Release notes2 sources agree
Open source →Changed
- Rename
dotenvx vault converttodotenvx vault migrate(#251) - Update
install.shregex version check to beshcompatible (not just bash)
- Rename
- 0.44.618 Jun 2024
- 0.44.516 Jun 2024
Release notes2 sources agree
Open source →Changed
- Removed
.githubfolder from published binaries on npm (example: npm code) - Add help message to
install.sh
- Removed
- 0.44.415 Jun 2024
Release notes2 sources agree
Open source →Changed
- Automated deployment of
install.shalong with sanity checks (#250)
- Automated deployment of
- 0.44.315 Jun 2024
Release notes2 sources agree
Open source →Added
- Include
CHANGELOG.mdin npm release - Include
install.shin package release
- Include
- 0.44.214 Jun 2024
Release notes2 sources agree
Open source →Changed
- Fix license in
package.jsonto match project's license BSD-3.
- Fix license in
- 0.44.127 May 2024
Release notes2 sources agree
Open source →Changed
- Respect decryption of zero length strings -
dotenvx set HELLO '' --encrypt(#236)
- Respect decryption of zero length strings -
- 0.44.022 May 2024
Release notes2 sources agree
Open source →Added
- Added
options.debug,options.verbose,options.quiet, andoptions.logLevelto.config()(#233)
- Added
- 0.43.222 May 2024
Release notes2 sources agree
Open source →Changed
- Patch
replacewhen replacing double, single, or backticked quoted at anywhere in the.envfile. (#232)
- Patch
- 0.43.121 May 2024
Release notes2 sources agree
Open source →Changed
- Improved
replacefunction regex - to handle more edge case scenarios with replacing KEY/values (#227)
- Improved