@dotenvx/dotenvx

Changed

• Change description of dotenvx-ops to better reflect its tooling as operational primitives on top of dotenvx for production use cases. (#721)

Added

• Add hint on .env.keys for dotenvx armor up. Dotenvx Armor lets you armor your private keys securely with just a single command. It's a convenient alternative to manually copy/pasting them in and out of 1Password. (#718)

Changed

• Switch npm publish to use Dotenvx Ops' new Rotation Tokens (ROTs) (#715)

This will allow us to start dogfooding our own solution for third-party API key rotation. Third-party API key rotation would drastically improve security industry wide. Please get in touch if this is interesting to you.

Added

• Add opsOff type information

Added

• Add config({opsOff: true}) options and --ops-off flag for turning off Dotenvx Ops features. (#680)

Removed

• Remove listed command to radar (now ops) (#678)

Added

• Add optional dotenvx ops command (#677)
• Ops is a coming rename of Radar. Radar will become a feature inside ops.
• With dotenvx ops use dotenvx across your team, infrastructure, agents, and more.

 _______________________________________________________________________
|                                                                       |
|  dotenvx-ops: production grade dotenvx–with operational primitives    |
|                                                                       |
|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
|                                                                       |
|  Learn more at https://dotenvx.com/ops                                |
|_______________________________________________________________________|

Changed

• 🐞 patch bug with variable expansion of single quoted values (#675)

Added

• For precommit and prebuild, ignore .env.x file like we do with .env.vault file. (#666)

Removed

• Remove unnecessary use of eval in proKeypair helper (#654)

Changed

• Include privateKeyName and privateKey on internal processedEnv object (#649)

Changed

• Check radar status before sending (#646)

Changed

• Send beforEnv and afterEnv to Radar if user has installed (#645)

Added

• Include beforeEnv and afterEnv for user debugging (#644)

Changed

• src should be in internal processEnv object (#643)

Changed

• Make Radar call non-blocking (#642)

Changed

• Add resilient handling of any Radar failures (#639)

Changed

• Smarter require of non-installed libs like dotenvx-radar (#638)

Added

• Send to radar#observe if Radar installed by user (#631)

Removed

• Remove cli in package.json (#632)

Added

• Export cli in package.json (#629)

Added

• Add convenience log that radar active 📡 when dotenvx-radar is installed (#625)

Added

• Add optional dotenvx radar command (#624)
• Radar is an early access commercial extension for dotenvx that will auto backup your .env files.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Radar: Env Observability                                     |
|                                                                       |
|  ░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓██████▓▒░░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓███████▓▒░░▒▓████████▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓████████▓▒░▒▓███████▓▒░    |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|  ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░   |
|                                                                       |
|  Observe, version, and back up your environment variables at runtime. |
|                                                                       |
|  Purchase lifetime access at https://dotenvx.com/radar                |
|                                                                       |
| --------------------------------------------------------------------- |
| - thank you for using dotenvx! - @motdotla                            |
|_______________________________________________________________________|

Added

• Add error when hoisting issue experienced around commander.js (#623)

Removed

• Remove git-dotenvx and git dotenvx shorthand (#621)

Changed

• Minor README updates

Changed

• Include setLogName and setLogVersion in config (#613)

Added

• Add logger.setName and logger.setVersion for customization of logger (#612)

Changed

• Clarify license is BSD-3.

Changed

• Patch SetOutput type (#597)

Added

• Add armv7 support (#593)

Removed

• Remove errorv, errornocolor, blank from logger options (#584)

Changed

• Replace instances of console.error with logger.error (#584)

Changed

• Fix --force flag work with ?force=true (2776715)

Added

• Add --force flag to install.sh (0b8d21c)

Added

• Add ability to override the os and arch via install.sh and dotenvx.sh (3ded752)

Added

• Add [directory] argument to precommit and prebuild (#572)

Changed

• Patch ext scan command (#570)

Added

• Smarter ext precommit and ext prebuild – catch duplicate KEYs in the same .env file where one is mistakenly left unencrypted (#567)

Added

• Add version to homebrew formula (#564)

Added

• Add --convention flow option to dotenvx run (#551)

Changed

• Fix typos (#550)

Added

• 🐞 Add config.d.ts file to fix type error when loading dotenvx/dotenvx/config with dynamic import (#547)

Changed

• 🐞 Fix blank line disappearing after encrypting empty value (#542)

Changed

• 🐞 Fix self-referencing expansion when key exists already in process.env (#536)

Added

• Add typescript types for main.get.

Changed

• Support encrypt when mutliline contains windows CRLF (\r\n) (#534)

Note: dotenvx will convert these \r\n newlines to \n. Our recommendation is to stop using CRLF - its origin is from typewriter days. Instead, set your editor or gitattributes to use LF.

Changed

• Command substitution failures no longer halt further processing of keys in a .env file (#533)
• A more helpful error is raised if a command substitution failure occurs (#533)

Added

• add dotenvx rotate command 🎉 (#530)

also: our whitepaper is released as a draft.

Changed

• --strict flag respects (doesn't throw) anything in --ignore flag (#527)

Added

• npx dotenvx precommit support as a convenience (#523)
• main.get method (#524)

The addition of main.get facilitates what we term Decryption at Access, a concept explored in greater detail in our whitepaper.

Added

• main.set method now writes to files (#517)

Added

• support ESM import convenience import '@dotenvx/dotenvx/config' (#508)

Changed

• remove duplicated help messages (#504)

Added

• add encrypted check support for ext prebuild (#501)

Changed

• modify ext precommit to check git modified state as well as git staged state - useful for using dotenvx ext precommit without the --install flag in automated scripts and ci. (#499)

Removed

• remove internal logger methods errorvp, errorvpb, warnv, warnvp, warnvpb, successvp, successvpb, help2 (#501)

Changed

• adjust wingetcreate to use powershell when parsing version

Changed

• use wingetcreate for releasing to WinGet (#498)

Changed

• 🐞 fix encryption of values containing explicit \n newlines (#495)

Added

• expose main.set function (#492)
• add missing types for main.config (#491)

Added

• support complex command substitution combining variable expansion (#490)

Added

• add -fk (--env-keys-file) flag to customize the path to your .env.keys file with run, get, set, encrypt, decrypt, and keypair 🎉 (#486)

This is great for monorepos. Maintain one .env.keys file across all your apps.

$ dotenvx encrypt -fk .env.keys -f apps/backend/.env
$ dotenvx encrypt -fk .env.keys -f apps/frontend/.env

$ tree -a .
├── .env.keys
└── apps
    ├── backend
    │   └── .env
    └── frontend
        └── .env

$ dotenvx get -fk .env.keys -f apps/backend/.env

Added

• add --ignore flag to suppress specified errors. example: dotenvx run --ignore=MISSING_ENV_FILE (#485)