fix(deps): update dependency @dotenvx/dotenvx to v2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@dotenvx/dotenvx	^1.51.1 → ^2.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

dotenvx/dotenvx (@​dotenvx/dotenvx)

v2.34.2

Compare Source

Changed

• Patch: fix atomic edge case of writing .env and .env.keys file (#​1014)

v2.34.1

Compare Source

Changed

• Patch: don't write public key on ctrl+c or prompt failure (#​1009)

v2.34.0

Compare Source

Changed

• Swap internal provider logic for @​dotenvx/providers (#​1008)
• BREAKING: Remove lock commands and support for unlocking. Passwords are too difficult to manage securely. Convenience not worth it for the agentic future we are entering. (#​1008)
• Return provider information with dotenvx keypair command (#​1008)
• Swap armor provider logic to @​dotenvx/providers#armor (#​1009)

v2.33.0

Compare Source

Added

• Add Envfile profiles for selecting .env file combinations with --profile or DOTENV_ENV.
• Automatically redact stdout/stderr from config() when an Envfile is present.

Changed

• Move Envfile processing into @dotenvx/primitives.
• First file wins when combining Envfile rules. run and check validate final values; encryption rules apply to encrypt, set, and protect.

v2.32.4

Compare Source

Changed

• Make Envfile the filename. Final decision. (#​1003)

v2.32.3

Compare Source

Changed

• Make Dotenvspec the filename (#​1002)
• Improve startup time for cli (#​1001)

v2.32.2

Compare Source

Changed

• Improve bundle size (#​1000)

v2.32.1

Compare Source

Changed

• Simplify custody picker to 3 initial options (#​998)

? Choose private key custody …
❯ ⛉ Local
  ⛨ Dotenvx Armor
  ⛊ Password Managers

v2.32.0

Compare Source

Changed

• BREAKING: Envfile renamed to Envspec file (#​996)
• BREAKING: dotenvx init removed. renamed to dotenvx spec. (#​996)

Added

• Envspec rules now guide check, run, encrypt, and protect. (#​996)

v2.31.1

Compare Source

Changed

• armor up should read for os secret store, 1password, and bitwarden (#​992)

v2.31.0

Compare Source

Added

• Add dotenvx feedback command so you (and your coding agent) can give feedback on the cli (#​987)
• Add dotenvx init for generating your Envfile (#​990)

Changed

• Restore ESM named imports such as import { config } from '@dotenvx/dotenvx', broken in 2.30.0 by the withEvents export (#​989).
• BREAKING: dotenvx validate renamed to dotenvx check and works off Envfile only going forward. Support for .env.example dropped. Switch to using an Envfile.

Removed

• BREAKING: dotenvx define removed. Use dotenvx init.

v2.30.0

Compare Source

Added

• Add dotenvx feedback command so you (and your coding agent) can give feedback on the cli (#​987)
• Add dotenvx init for generating your Envfile (#​990)

Changed

• Restore ESM named imports such as import { config } from '@dotenvx/dotenvx', broken in 2.30.0 by the withEvents export (#​989).
• BREAKING: dotenvx validate renamed to dotenvx check and works off Envfile only going forward. Support for .env.example dropped. Switch to using an Envfile.

Removed

• BREAKING: dotenvx define removed. Use dotenvx init.

v2.29.0

Compare Source

Added

• Add dotenvx protect to prevent plaintext .env files from being committed to code on a machine (#​980)

Changed

• Deprecate dotenvx gitignore. Use dotenvx protect.
• Deprecate dotenvx precommit. Use dotenvx protect.
• Deprecate dotenvx prebuild. Use dotenvx protect --docker.

v2.28.2

Compare Source

Changed

• Only owner can write to and read from .env.keys file (#​979)

v2.28.1

Compare Source

Changed

• Send pk via stdin to keychain. was argv. thank you @​kta1kri for the security report. (#​978)
• Move some commands under a hidden menu (#​973)

v2.28.0

Compare Source

Added

• Choose where you custody your keys (#​972)

Your private key
├── ⛉ Local Custody
│   ├── OS (macOS Keychain / Windows Credential Manager / Linux Secret Service)
│   ├── 1Password
│   ├── Bitwarden
│   └── File (.env.keys)
└── ⛊ Managed Custody
    └── ⛨ Armor

v2.27.0

Compare Source

Removed

• BREAKING: Removed run --validate flag and validate command against .env.example file. To be replaced soon with a modern validation scheme.

v2.26.1

Compare Source

Changed

• Add dotenvx 1password up|down|push|pull and dotenvx bitwarden up|down|push|pull (#​969)

v2.26.0

Compare Source

Added

• Add support for storing private key to bitwarden or 1password (#​968)

v2.25.0

Compare Source

Changed

• Store private key to os secret store rather than .env.keys by default (#​967)

v2.24.1

Compare Source

Changed

• Upgraded to latest @​dotenvx/primitives

v2.24.0

Compare Source

Changed

• Do not expand nested commands (#​965)

Removed

• BREAKING: Remove the -p shorthand for --plain; use --plain instead

v2.23.0

Compare Source

Added

• Support comma-separated env file paths with -f and the config({ path }) option. Example: dotenvx run -f .env.local,.env -- node index.js
• Add DOTENV_PATH (or DOTENV_F) to support the same. Example: DOTENV_PATH=.env.local,.env

Changed

• Rename DOTENV_CONFIG_* variables to DOTENV_CONVENTION, DOTENV_IGNORE, and DOTENV_QUIET, while retaining their existing DOTENV_CONFIG_* names as fallbacks

v2.22.0

Compare Source

Added

• Install verified binaries directly from GitHub Releases (#​956)

Changed

• Fall back to ~/.local/bin when /usr/local/bin is not writable (#​955)

v2.21.0

Compare Source

Added

• Add dotenvx enc and dotenvx dec shorthands for encrypt and decrypt (#​943)
• Add convenient dx alias for shorter dx run --, dx enc, etc (#​944)

Changed

• Patch typescript types for path (#​942)

v2.20.1

Compare Source

Changed

• Handle accent marks for ext precommit (#​936)

v2.20.0

Compare Source

Added

• Add dotenvx del command for deleting a key from a .env file (#​939)

Changed

• Exempt .env.vault from precommit/prebuild sealed checks (vault-format ciphertext is already safe to commit)

v2.19.2

Compare Source

see CHANGELOG

v2.19.1

Compare Source

Changed

• User can click enter to open up approval url for convenience (#​934)

v2.19.0

Compare Source

Added

• Add dotenvx armor open to open armored key details in browser (#​930)

v2.18.1

Compare Source

• Patch injected message when preset encrypted: value (#​927)

v2.18.0

Compare Source

Added

• Make authenticated API calls to the Dotenvx Armor API with dotenvx curl. Allows you to control your Dotenvx Armor account directly from your agent inside Codex, Claude, etc. (#​923)

v2.17.4

Compare Source

Changed

• Send device identifier along with curl requests (#​922)

v2.17.3

Compare Source

Changed

• Exempt .env.example in subdirectories from precommit (#​920)

v2.17.2

Compare Source

Added

• Add support for DOTENV_CONFIG_IGNORE global convenience (#​919)

v2.17.1

Compare Source

Changed

• Handle ctrl + c better (#​916)

v2.17.0

Compare Source

Added

• Add support for Bitwarden bw:// secrets in your .env files. (#​915)

v2.16.1

Compare Source

Changed

• Fix: Do not report child error - let child do so. (#​914)

v2.16.0

Compare Source

Added

• Add support for -ek and -ik to dotenvx get (#​913)

v2.15.1

Compare Source

Changed

• Better communicate time waiting on 1password with elapsed time (#​909)

v2.15.0

Compare Source

Added

• Add support for 1Password op:// secrets in your .env files. (#​908)

v2.14.0

Compare Source

Added

• Add dotenvx run --validate for simple env validation against your .env.example (#​906)
• Add dotenvx validate for a pre-check of validation against your .env.example file (#​906)

v2.13.0

Compare Source

Added

• Add get --eval-export flag (#​904)

Changed

• Make get --eval posix safe (#​904)

v2.12.0

Compare Source

Changed

• Small Breaking: Single quoted 'Let\'s go' now correctly escapes to Let's go (#​903)

v2.11.3

Compare Source

Changed

• Improve command substitution for nested commands (#​902)

v2.11.2

Compare Source

Changed

• Bump @​dotenvx/primtivies to support nested node invocations for pkg-ed binary (#​901)

v2.11.1

Compare Source

Changed

• Redact all keys by default - except those ending in _PLAIN (460862)
• Support dotenvx run -- claude and dotenvx run -- codex (#​900)
• Simplify default encrypted .env file to just HELLO="World" (#​899)

v2.11.0

Compare Source

Added

• Add convenience method dotenvx update (#​897)

Changed

• BREAKING: Send informational messages like injected env to stderr instead of stdout. This makes it more reliable to do things like piping output to a file without needing --quiet. (#​898)

v2.10.0

Compare Source

Added

• Add run --redact to keep secrets out of command output. (#​894)

v2.9.0

Compare Source

Changed

• BREAKING: ls from @dotenvx/dotenvx is now async/await. (#​893)

v2.8.0

Compare Source

Added

• Add FILE_NOT_WRITABLE error for user convenience (#​891)
• Support Enclaved Armored Keys (#​892)

v2.7.3

Compare Source

Changed

• Fix: --quiet should not display the spinner and its stderr messages (#​889)

v2.7.2

Compare Source

Added

• Include dotenvx armor status command.

v2.7.1

Compare Source

Changed

• Security Improvement: dotenvx armor login attempts to set the DOTENVX_ARMOR_TOKEN in your native OS secret store going forward. For current Armor users run dotenvx armor logout and then dotenvx armor login to make use of this immediately. (#​886)

v2.7.0

Compare Source

Added

• Added support for --mask on get, run, decrypt (#​885)

v2.6.0

Compare Source

Added

• Support native up|down|pull|push for windows (#​884)

v2.5.0

Compare Source

Added

• Support native up|down|pull|push for windows (#​883)

v2.4.1

Compare Source

Added

• Support config(path:) as a directory like app/web. Useful for monorepos (#​882)

v2.4.0

Compare Source

Added

• Support multiple -fk flags for select commands (#​880)
• Support -f ../.. directories (#​881)

v2.3.4

Compare Source

Removed

• Replace various deps with @dotenvx/tooling (#​879)

v2.3.3

Compare Source

Removed

• Remove dotenv and commander for @dotenvx/tooling (#​878)

v2.3.2

Compare Source

Changed

• Permit empty value for set (#​877)

v2.3.1

Compare Source

Changed

• Fix correct default valuation interpolation for empty strings by upgrading primitives package

v2.3.0

Compare Source

Added

• Add lock up and lock down commands for password protecting private keys (#​875)

Changed

• BREAKING: Rename keychain commands to native to make way for windows and linux. (#​875)

Removed

• BREAKING: Remove --no-ops. Use --no-armor. (#​875)

v2.2.2

Compare Source

Changed

• Move login and logout under armor (#​874)

v2.2.1

Compare Source

Changed

• Move genexample to top level commands (#​873)

v2.2.0

Compare Source

Added

• Use dotenvx keychain up|down to move your private keys to your macOS Keychain (#​872)

v2.1.5

Compare Source

Changed

• precommit and prebuild respect _PLAIN (#​871)

v2.1.4

Compare Source

Added

• Add support for DOTENV_CONFIG_CONVENTION=nextjs (#​869)

v2.1.3

Compare Source

Changed

• Patch edge case when custom unspecified -f and --env flag (#​868)

v2.1.2

Compare Source

Changed

• Support restricted read permissions to .env.keys (#​676, #​867)

v2.1.1

Compare Source

Changed

• Support DOTENV_CONFIG_QUIET=true as synonym for --quiet flag (#​866)

v2.1.0

Compare Source

Added

• Add interactive input mode for set (#​862)
• Support leaving _PLAIN suffixed keys unencrypted during set and encrypt (#​862)

Changed

• Return exit code 1 from get when decryption errors are reported (#​862)

Fixed

• Add Windows PowerShell coverage for npm shim encryption of .env.local files

v2.0.0

Compare Source

Changed

• BREAKING: lib/main#set async only (#​855)
• BREAKING: lib/main#get async only (#​855)
• New keyring support - for local and armor providers and to unlock future providers (#​855)
• Route run, config, and get through shared env and keypair resolvers backed by @dotenvx/primitives (#​855)
• Route set, encrypt, and decrypt through shared transforms that operate on primitive scan, parse, encrypt, and upsert results (#​855)
• Update library parse to use primitive parsing while preserving dotenvx-style encrypted value errors (#​855)

Removed

• BREAKING: Remove the rotate command (it will return in 2.1 or 2.2 soon with a more complete implementation for local and armored keys) (#​855)
• BREAKING: Remove the library doctor, keypair, and genexample exports from lib/main (#​855)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for kongdeveloper ready!

Name	Link
🔨 Latest commit	82dcf38
🔍 Latest deploy log	https://app.netlify.com/projects/kongdeveloper/deploys/6acd00507c3a9638fa87dc71
😎 Deploy Preview	https://deploy-preview-7139--kongdeveloper.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.