chore(monorepo): update auto-merge non-major dependencies#11
chore(monorepo): update auto-merge non-major dependencies#11renovate[bot] wants to merge 1 commit intomainfrom
Conversation
Branch automerge failureThis PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead. |
68221d7 to
769bd1f
Compare
3be4251 to
96371f2
Compare
b664b6b to
5b4af5f
Compare
|
No dependency changes detected. Learn more about Socket for GitHub. 👍 No dependency changes detected in pull request |
|
| steps: | ||
| - name: Cancel Previous Runs | ||
| uses: styfle/cancel-workflow-action@0.12.1 | ||
| uses: styfle/cancel-workflow-action@0.13.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
|
|
||
| - name: GitGuardian scan | ||
| uses: GitGuardian/ggshield/actions/secret@v1.39.0 | ||
| uses: GitGuardian/ggshield/actions/secret@v1.50.4 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
This PR contains the following updates:
^4.20260508.1→^4.20260510.11.35.0→1.65.0^7.49.2→^7.58.7^22.5.4→^22.7.1^6.5.0→^6.19.3^6.6.0-41.9061db3b0058e3d3731c6fe68a1b77061bed4861→^6.6.0-53.f676762280b54cd07c770017ed3711ddde35f37a^1.10.14→^1.15.33^5.70.0→^5.100.90.72.8→0.73.0v1.39.0→v1.50.4^0.0.11→^0.0.14>=0.7.0→>=0.7.2>=4.4.0→>=4.4.3^0.25.12→^0.28.0>=1.15.9→>=1.16.0>=14.4.5→>=14.6.630.0.5→30.4.230.0.5→30.4.130.0.5→30.4.15.43.6→5.88.1>=14.1.0→>=14.1.1^0.17.2→^0.22.11.7.4→1.8.2^0.2.1→^0.3.024.11.1→24.15.0>=22.21.1→>=22.22.2>=7.0.0→>=7.1.0>=0.1.12→>=0.2.510.26.0→10.33.4>=10.24.0→>=10.33.4>=8.5.1→>=8.5.147.7.1→7.8.0>=1.8.2→>=1.8.31.3.0→1.11.1>=3.27.0→>=3.36.00.12.1→0.13.1^0.21.10→^0.22.0^3.3.1→^3.6.16.5.2→6.6.0Release Notes
cloudflare/workerd (@cloudflare/workers-types)
v4.20260510.1Compare Source
v4.20260509.1Compare Source
dotenvx/dotenvx (@dotenvx/dotenvx)
v1.65.0Compare Source
Added
replaceing duplicate keys with different values (#806)v1.64.0Compare Source
Added
dotenvx armorcommand.armor uparmor private keyarmor downdearmor private keyarmor pushpush armored key (from .env.keys)armor pullpull armored key (into .env.keys)Move private keys off device and under access control with Dotenvx Ops ⛨. Learn more
v1.63.0Compare Source
Added
--envflag (#804)--format=colonin order to support cloudflare's wrangler--varflag format (#804)v1.62.0Compare Source
Added
config({ envs }). unlocks simpler cloudflare worker integration (#803)v1.61.6Compare Source
Changed
encrypted:(#802)v1.61.5Compare Source
Changed
--hostnameflag todotenvx-ops.login(#801)v1.61.4Compare Source
Changed
v1.61.3Compare Source
Changed
ext precommit --installmessage (#797)v1.61.2Compare Source
Changed
v1.61.1Compare Source
dotenvx precommit|prebuildshorthand (#793)v1.61.0Compare Source
Added
loginandlogoutmethod that proxy todotenvx-ops login/logout(#780)v1.60.2Compare Source
Changed
local keyandarmored key(for Ops stored keys) (#778)v1.60.1Compare Source
Added
+ key ⛨for Ops stored keys (#777)v1.60.0Compare Source
Added
injecting(run)encrypting(encrypt,set)decrypting(decrypt,get)rotating(rotate)retrieving(keypair)v1.59.1Compare Source
Added
HELLOkey to the kit sample to match most of our examples in the READMEv1.59.0Compare Source
Changed
encryptandsetnow create a.envfile if one does not exist (#771)--no-createto prevent file creationv1.58.0Compare Source
Changed
⟐ injecting env (N) from FILE · dotenvx@VERSION(#770)v1.57.5Compare Source
Changes
v1.57.4Compare Source
Changes
curlexample for install dotenvx.com/ops (#767)v1.57.3Compare Source
Changes
v1.57.2Compare Source
Changes
npm auditto update package-lock.json (#763)v1.57.1Compare Source
Changes
improved error logs and compacted most to a single line (#755)
introduced leading log glyphs as a visual status language:
◈success action (encrypted)◇success action (set plain value, decrypted)⟳success action (rotated)○informational no-op (no changes)▣success action for generated/updated support files⚠warning☠errorv1.57.0Compare Source
Changed
v1.56.0Compare Source
Changed
ops offflag — now respected byget,keypair,rotate, andencrypt(#750)--ppalias — added as shorthand for--pretty-print; toward sunsetting-pp(#750)Removed
.env.vaultfiles (#750)v1.55.1Compare Source
Added
dotenvx-ops status (on|off)(#749)v1.55.0Compare Source
Added
Removed
ProKeypairlogicv1.54.1Compare Source
Changed
v1.53.0Compare Source
Removed
radar. It has been a year since replaced byops. (#743)v1.52.0Compare Source
Added
main.set(#731)v1.51.4Compare Source
Changed
dotenvx-opsto better reflect its tooling as operational primitives on top of dotenvx for production use cases. (#721)v1.51.3Compare Source
Added
.env.keysfordotenvx ops backup. Dotenvx Ops Backup lets you back up your private keys securely with just a single command. It's a convenient alterantive to manually copy/pasting them in and out of 1Password. (#718)v1.51.2Compare Source
Changed
npm publishto use Dotenvx Ops' new Rotation Tokens (ROTs) (#715)v1.51.1Compare Source
Added
opsOfftype informationv1.51.0Compare Source
Added
config({opsOff: true})options and--ops-offflag for turning off Dotenvx Ops features. (#680)v1.50.1Compare Source
Removed
radar(nowops) (#678)v1.50.0Compare Source
Added
dotenvx opscommand (#677)dotenvx opsuse dotenvx across your team, infrastructure, agents, and more.v1.49.1Compare Source
Changed
v1.49.0Compare Source
Added
.env.xfile like we do with.env.vaultfile. (#666)v1.48.4Compare Source
Removed
evalin proKeypair helper (#654)v1.48.3Compare Source
Changed
privateKeyNameandprivateKeyon internalprocessedEnvobject (#649)v1.48.2Compare Source
Changed
v1.48.1Compare Source
Changed
beforEnvandafterEnvto Radar if user has installed (#645)v1.48.0Compare Source
Added
beforeEnvandafterEnvfor user debugging (#644)v1.47.7Compare Source
Changed
srcshould be in internalprocessEnvobject (#643)v1.47.6Compare Source
Changed
v1.47.5Compare Source
Changed
v1.47.4Compare Source
Changed
dotenvx-radar(#638)v1.47.3Compare Source
Added
radar#observeif Radar installed by user (#631)Removed
cliin package.json (#632)v1.47.2Compare Source
Added
cliin package.json (#629)v1.47.1Compare Source
Added
radar active 📡when dotenvx-radar is installed (#625)v1.47.0Compare Source
Added
dotenvx radarcommand (#624)v1.46.0Compare Source
Added
Removed
git-dotenvxandgit dotenvxshorthand (#621)v1.45.2Compare Source
Changed
v1.45.1Compare Source
Changed
setLogNameandsetLogVersioninconfig(#613)v1.45.0Compare Source
Added
logger.setNameandlogger.setVersionfor customization of logger (#612)v1.44.2Compare Source
Changed
v1.44.1Compare Source
Changed
SetOutputtype (#597)v1.44.0Compare Source
Added
armv7support (#593)v1.43.0Compare Source
Removed
errorv, errornocolor, blankfrom logger options (#584)Changed
console.errorwithlogger.error(#584)v1.42.2Compare Source
Changed
--forceflag work with?force=true(2776715)v1.42.1Compare Source
Added
--forceflag toinstall.sh(0b8d21c)v1.42.0Compare Source
Added
osandarchviainstall.shanddotenvx.sh(3ded752)v1.41.0Compare Source
Added
v1.40.1Compare Source
Changed
ext scancommand (#570)v1.40.0Compare Source
Added
ext precommitandext prebuild– catch duplicate KEYs in the same .env file where one is mistakenly left unencrypted (#567)v1.39.1Compare Source
Added
versionto homebrew formula (#564)v1.39.0Compare Source
Added
--convention flowoption todotenvx run(#551)Changed
v1.38.5Compare Source
Added
config.d.tsfile to fix type error when loadingdotenvx/dotenvx/configwith dynamic import (#547)v1.38.4Compare Source
Changed
v1.38.3Compare Source
Changed
process.env(#536)v1.38.2Compare Source
Added
main.get.v1.38.1Compare Source
Changed
encryptwhen mutliline contains windowsCRLF(\r\n) (#534)Note: dotenvx will convert these
\r\nnewlines to\n. Our recommendation is to stop usingCRLF- its origin is from typewriter days. Instead, set your editor or gitattributes to useLF.v1.38.0Compare Source
Changed
v1.37.0Compare Source
Added
dotenvx rotatecommand 🎉 (#530)also: our whitepaper is released as a draft.
v1.36.0Compare Source
Changed
--strictflag respects (doesn't throw) anything in--ignoreflag (#527)microsoft/rushstack (@microsoft/api-extractor)
v7.58.7Compare Source
Mon, 20 Apr 2026 23:31:13 GMT
Version update only
v7.58.6Compare Source
Mon, 20 Apr 2026 15:15:24 GMT
Patches
v7.58.5Compare Source
Sat, 18 Apr 2026 03:47:10 GMT
Version update only
v7.58.4Compare Source
Sat, 18 Apr 2026 00:15:16 GMT
Patches
v7.58.3Compare Source
Fri, 17 Apr 2026 15:14:57 GMT
Patches
lodash.v7.58.2Compare Source
Thu, 09 Apr 2026 00:15:07 GMT
Version update only
v7.58.1Compare Source
Sat, 04 Apr 2026 00:14:00 GMT
Patches
v7.58.0Compare Source
Wed, 01 Apr 2026 15:13:38 GMT
Minor changes
v7.57.8Compare Source
Tue, 31 Mar 2026 15:14:14 GMT
Version update only
v7.57.7Compare Source
Mon, 09 Mar 2026 15:14:07 GMT
Patches
minimatchversion from10.2.1to10.2.3to address CVE-2026-27903.v7.57.6Compare Source
Wed, 25 Feb 2026 21:39:42 GMT
Patches
@microsoft/tsdoc-configto~0.18.1to mitigate CVE-2025-69873.v7.57.5Compare Source
Wed, 25 Feb 2026 00:34:29 GMT
Version update only
v7.57.4Compare Source
Tue, 24 Feb 2026 01:13:27 GMT
Version update only
v7.57.3Compare Source
Mon, 23 Feb 2026 00:42:21 GMT
Patches
v7.57.2Compare Source
Fri, 20 Feb 2026 16:14:49 GMT
Patches
v7.57.1Compare Source
Fri, 20 Feb 2026 00:15:03 GMT
Patches
"node"condition before"import"in the"exports"map so that Node.js uses the CJS output (which handles extensionless imports), while bundlers still use ESM via"import". Fixes #5644.v7.57.0Compare Source
Thu, 19 Feb 2026 00:04:52 GMT
Minor changes
lib-commonjs, DTS is now underlib-dts, and ESM is now underlib-esm. Imports tolibstill work as before, handled by the"exports"field inpackage.json.v7.56.3Compare Source
Sat, 07 Feb 2026 01:13:26 GMT
Patches
lodashdependency from~4.17.15to~4.17.23.v7.56.2Compare Source
Wed, 04 Feb 2026 20:42:47 GMT
Patches
v7.56.1Compare Source
Wed, 04 Feb 2026 16:13:27 GMT
Version update only
v7.56.0Compare Source
Fri, 30 Jan 2026 01:16:12 GMT
Minor changes
v7.55.5Compare Source
Thu, 08 Jan 2026 01:12:30 GMT
Patches
v7.55.2Compare Source
Sat, 06 Dec 2025 01:12:28 GMT
Version update only
v7.55.1Compare Source
Fri, 21 Nov 2025 16:13:56 GMT
Version update only
v7.55.0Compare Source
Wed, 12 Nov 2025 01:12:56 GMT
Minor changes
@microsoft/tsdocdependency to~0.16.0.@microsoft/tsdoc-configdependency to~0.18.0.v7.54.0[Compare Source](https://redirect.github.com/microsoft/rushstack/compare/@microsoft/api-extractor
Configuration
📅 Schedule: (in timezone America/New_York)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.