@dotenvx/dotenvx

Changed

• Fix provenance for @dotenvx/next-env (#844)

Added

• Add README for @dotenvx/next-env (#843)

Changed

• Give update available notification only for armor commands (#840)

Added

• Add dotenvx armor commands directly inside dotenvx (#839)

dotenvx remains local-first: armor commands are optional under professional security section

Added

• Move armor login command to first class dotenvx login command. (#836)
• dotenvx remains local-first: login is optional and only needed when you want Armor features like moving keys off-device, team sharing, and audit access.
• Patch 2 high severity dependencies (#837)

Changed

• Forward command to Dotenvx Armor Key Guard approvals (#835)

Changed

• touch up get, set, and decrypt when armor installed (#834)

Changed

• stderr changed to inherit for dotenvx-armor integration (#833)

Added

• Add optional automation --token support for Armor ⛨ users (#831)

Changed

• Dotenvx Ops/Vlt is now Dotenvx Armor ⛨ (#830)

Changed

• Minor messaging improvements, especially if using armored keys (#825)

Changed

• Internally rename ops to vlt (#823)

Changed

• Remove fully-deprecated opsOff option in favor of noOps (#822)

Changed

• Pass -f to ops (#821)

Changed

• Support ignore option on parse (#820)

Added

• Add prompt for local storage vs armored storage (#819)

Added

• Add dotenvx doctor (#815)

Changed

• Improve spinner message blinking with simpler --no-spinner flag passed to ops (#814)

Changed

• Improve spinner message coordination between dotenvx and dotenvx-ops (#813)

Changed

• Prompts from ops should bubble up (#812)

Added

• Add support for replaceing duplicate keys with different values (#806)

Added

• Add optional dotenvx armor command.
  • armor up armor private key
  • armor down dearmor private key
  • armor push push armored key (from .env.keys)
  • armor pull pull armored key (into .env.keys)

Move private keys off device and under access control with Dotenvx Ops ⛨. Learn more

Added

• Add support for encrypted values passed to --env flag (#804)
• Add support for --format=colon in order to support cloudflare's wrangler --var flag format (#804)

Added

• Add support for config({ envs }). unlocks simpler cloudflare worker integration (#803)

$ dotenvx encrypt -f .env.txt

// src/index.js
import envSrc from '../.env.txt'
import dotenvx from '@dotenvx/dotenvx'

const config = dotenvx.config({ envs: [{ type: 'env', value: envSrc, privateKeyName: 'DOTENV_PRIVATE_KEY' }] })
const envx = config.parsed

export default {
  async fetch(request, env, ctx) {
    return new Response(`Hello ${envx.HELLO}`)
  }
}

"scripts": {
  "deploy": "wrangler deploy",
  "dev": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
  "start": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
  "test": "vitest"
},

Changed

• Guard against command substitution following encrypted: (#802)

Changed

• Support --hostname flag to dotenvx-ops.login (#801)

Changed

• Respect SIGINT handler completion (#798)

Changed

• Tighten up ext precommit --install message (#797)

Changed

• For Ops ⛨ users surface stderr (#796)

Changed

• Faster coldstarts! (#781)
• Patch dotenvx precommit|prebuild shorthand (#793)

Added

• Add login and logout method that proxy to dotenvx-ops login/logout (#780)
• Note: dotenvx continues to make zero outgoing HTTP requests and includes no telemetry. Outgoing requests occur only if you explicitly install the dotenvx-ops SDK or CLI.

Changed

• Communicate local key and armored key (for Ops stored keys) (#778)

Added

• Added missing + key ⛨ for Ops stored keys (#777)

Added

• Add spinner with loading messages
  • injecting (run)
  • encrypting (encrypt, set)
  • decrypting (decrypt, get)
  • rotating (rotate)
  • retrieving (keypair)

Added

• add HELLO key to the kit sample to match most of our examples in the README

Changed

• encrypt and set now create a .env file if one does not exist (#771)
• pass --no-create to prevent file creation

Changed

• Changed runtime injection message to format ⟐ injecting env (N) from FILE · dotenvx@VERSION (#770)

Changes

• Improve already installed message (#768)

Changes

• Use curl example for install dotenvx.com/ops (#767)

Changes

• Simplify installed success message (#766)

Changes

• Ran npm audit to update package-lock.json (#763)

Changes

• improved error logs and compacted most to a single line (#755)

• introduced leading log glyphs as a visual status language:

  • ⟐ success action (injected)
  • ◈ success action (encrypted)
  • ◇ success action (set plain value, decrypted)
  • ⟳ success action (rotated)
  • ○ informational no-op (no changes)
  • ▣ success action for generated/updated support files
  • ⚠ warning
  • ☠ error

Changed

• color and formatting changes to outputs (#754)

Changed

• ops off flag — now respected by get, keypair, rotate, and encrypt (#750)
• --pp alias — added as shorthand for --pretty-print; toward sunsetting -pp (#750)

Removed

• Remove support for .env.vault files (#750)

Added

• Respect dotenvx-ops status (on|off) (#749)

Added

• Add '⛨ ARMORED KEYS: Harden your private keys.' security feature when dotenvx-ops installed (#746)

Removed

• Remove ProKeypair logic

Changed

• Fix npm publish

Removed

• Remove radar. It has been a year since replaced by ops. (#743)

Added

• Pass log level options to main.set (#731)

Changed

• Change description of dotenvx-ops to better reflect its tooling as operational primitives on top of dotenvx for production use cases. (#721)

Added

• Add hint on .env.keys for dotenvx armor up. Dotenvx Armor lets you armor your private keys securely with just a single command. It's a convenient alternative to manually copy/pasting them in and out of 1Password. (#718)

Changed

• Switch npm publish to use Dotenvx Ops' new Rotation Tokens (ROTs) (#715)

This will allow us to start dogfooding our own solution for third-party API key rotation. Third-party API key rotation would drastically improve security industry wide. Please get in touch if this is interesting to you.

Added

• Add opsOff type information

Added

• Add config({opsOff: true}) options and --ops-off flag for turning off Dotenvx Ops features. (#680)

Removed

• Remove listed command to radar (now ops) (#678)

Added

• Add optional dotenvx ops command (#677)
• Ops is a coming rename of Radar. Radar will become a feature inside ops.
• With dotenvx ops use dotenvx across your team, infrastructure, agents, and more.

 _______________________________________________________________________
|                                                                       |
|  dotenvx-ops: production grade dotenvx–with operational primitives    |
|                                                                       |
|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
|                                                                       |
|  Learn more at https://dotenvx.com/ops                                |
|_______________________________________________________________________|

Changed

• 🐞 patch bug with variable expansion of single quoted values (#675)

Added

• For precommit and prebuild, ignore .env.x file like we do with .env.vault file. (#666)