@dotenvx/dotenvx

Changed

• build binaries with bytecode option (#477)

Added

• add typescript type definitions for main.parse method (#475)

Added

• add privateKey option to main.parse method (#474)

Added

• for binaries add pre-build step using esbuild (#471)

Removed

• remove types for functions that were removed a while back (2aa660)

Changed

• improve helpful error messaging around decryption failures by specifying specific key and private key name (#463)

Added

• add run --strict flag to exit with code 1 if any errors are encountered - like a missing .env file or decryption failure (#460)
• add get --strict flag to exit with code 1 if any errors are encountered - like a missing .env file or decryption failure (#461)
• add strict option to config() to throw for any errors (#459)

Changed

• log MISSING_ENV_FILE and DECRYPTION_FAILED errors to stderr (prior was stdout as a warning) (#459)

Removed

• remove dotenvx.get() function from lib/main.js. (parse already historically exists for this purpose) (#461)

Changed

• 🐞 do not expand prior literal values (#458)

Changed

• do not expand command substitution (#456)

Changed

• 🐞 fix command substitution for more complex commands (#455)

Changed

• treat pre-existing expandable values as literal in process.env (#450)

Changed

• bump cross-spawn to prevent potential ReDoS CVE-2024-21538 (#449)

Added

• support progressive append/update (#445)

FOO=foo
FOO=${FOO}bar
# foobar

• support alternate value expansion (#445)

<img width="1608" alt="image" src="https://github.com/user-attachments/assets/fdd55a0a-9b36-4cb3-b0c6-6b019441aef4">

Changed

• dotenvx.parse now maps to dotenvx's internal parser. (prior it was mapping to dotenv's)

Removed

• removed dotenvx.configDotenv(). use dotenvx.config() (#445)

Added

• deeper variable expansion support and protection against self-referencing variables 🛡️ (#439)

Changed

• more lenient handling of -- separator and better error messaging when flags are ambiguous (#438)

Changed

• 🐞 patch loading order issue with single quotes (#436)

Added

• add --pattern argument to ext gitignore (dotenvx ext gitignore --pattern .env.keys) (#430)

Changed

• clarify next steps after first time encrypting (#430)

Changed

• for --convention nextjs ignore .env.local for TEST environment (#425)
• for precommit redirect missing dotenvx command using POSIX compliant redirection (#424)
• make parent dotenvx help command less noisy by removing [options]. run dotenvx COMMAND -h to list all available options like always (#429)

Changed

• treat single quotes literally (#423)
• respect user chosen quotes (#423 #377)

🎓 now if you choose to single quote, double quote, no quote, or backtick your value it will be respected - including for encrypted values. this more intuitively handles complex cases like escaped characters, literals, and json.

Changed

• update eciesjs (#421)
• remove default values for ts interface - no longer permitted by latest ts (#419)

Changed

• respect process.env.DOTENV_PRIVATE_KEY and/or process.env.DOTENV_PUBLIC_KEY on set (#401)
• respect process.env.DOTENV_PRIVATE_KEY and/or process.env.DOTENV_PUBLIC_KEY on encrypt (#411)
• respect process.env.DOTENV_PRIVATE_KEY on decrypt (#412)
• change logger.help to use brighter blue (#414)

Removed

• remove main.decrypt,encrypt,set (#410)

Changed

• 🐞 fix decrypt re-encrypt of values containing backslashes (#406)

Changed

• forward additional signals like SIGUSR2 (#403)

Changed

• if SIGTERM or SIGINT sent, don't bubble wrapped process error (#402)

Added

• support key glob filtering for encrypt and decrypt. example: dotenvx encrypt -ek "NEXT_PUBLIC_*" (#397)

Added

• escape user inputted regex groupings like $1 or $2. (#396)

Added

• set and encrypt preserve leading spaces (#395)

     HELLO=world

Changed

• improve escape and quote handling for set, encrypt, and decrypt (#395)
• 🐞 fix encrypt, then decrypt, then encrypt on a json value (#377)

Note: the underlying replace engine to support these changes now wraps your values in single quotes. the prior replace engine wrapped in double quotes.

So where your .env used to look like this with double quotes:

HELLO="encrypted:1234"
API_KEY="encrypted:5678"

It will now begin looking like this with single quotes:

HELLO='encrypted:1234'
API_KEY='encrypted:5678'

It's an aesthetic side effect only. Your values will continue to be decrypted and encrypted correctly.

Added

• add --format=eval option for get (#393)

Changed

• suppress stderr using options.stdio (#391)

Changed

• for dotenvx keypair call out to dotenvx pro keypair if pro installed (#390)

Added

• add --format=shell option for keypair (#389)

Changed

• swap process.stdout.write for console.log to patch up npx edge case (#387)

Changed

• run precommit hook only on staged files (#380)

Added

• add dotenvx keypair command for printing your public/private keypairs (#375)

Changed

• exit code 1 when decrypt fails in any way (#374)

Added

• expose getColor and bold to lib/main.js (#369)

Added

• expose logger and setLogLevel to lib/main.js - const = { logger, setLogLevel } = require('@dotenvx/dotenvx') (#368)

Changed

• move ls to core commands (#367)

Changed

• return without quotations for dotenvx get --format shell (#366)

Added

• add dotenvx get --format shell option (#363)

Changed

• revert tinyexec for execa - to support usage in bun

Changed

• bump tinyexec and add postrelease-bunx check (#362)

Changed

• fallback to process.env.TERM for color depth where deno and bun do not support it (#360)

Added

• detect encoding when reading .env* file on run/get (#359)

Changed

• support encryption of export KEY variables and preserve #!shebangs (#357)

Added

• add --exclude-env-file (-ef) to ext ls (#356)

Changed

• ext precommit ignores tests/ directory (and similar) (#356)

Changed

• fix pro display in help command

Added

• ci: automate publishing to winget (#354)

Changed

• default config to empty [] array so that DOTENV_KEY_${environment} looks up correctly (#352)

Changed

• check subfolders on dotenvx ext precommit hook (#350)

Removed

• remove dotenvx ext vault, replace with dotenvx-ext-vault (install there to continue using ext vault) (#351)

Added

• warn if private key is missing or blank (#349)

Added

• add --exclude-key (-ek) option to dotenvx encrypt and dotenvx decrypt (#344)

Changed

• preserve comments and spacing on first-time generation of .env.example file (#346)

Removed

• removed winston - logger simplified to use console.log going forward (#347)

Added

• warn when decryption fails on run (#339)
• decrypt expanded values as necessary (#336)

Changed

• use ansi colors over rgb - for wider terminal coverage (#340)
• replace chalk with picocolors and color-name - cutting down on 5 dependencies (#335)
• replace execa with tinyexec - cutting down on 15 dependencies (#328)
• optimize Ls._filepaths (#317)

Removed

• remove picocolors and color-name - cutting down on 2 dependencies (#340)
• remove ext hub from extension list (you can still install it as an extension here) (#337)

Removed

• remove ext settings command (and conf along with it) (#323)

Changed

• 🐞 patch chomp for interpolation. strip ending newline (was stripping first found newline) (#322)

Changed

• fix dotenvx help (command was missing)

Changed

• adjust dotenvx pro to be dynamic if dotenvx-pro is installed user's machine

Added

• add more detailed type definitions (#313)