@dotenvx/dotenvx 1.48.4 → 1.49.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/CHANGELOG.md +14 -2
  2. package/package.json +2 -2
  3. package/src/lib/helpers/dotenvParse.js +1 -1
  4. package/src/lib/helpers/isFullyEncrypted.js +1 -1
  5. package/src/lib/helpers/parse.js +2 -1
  6. package/src/lib/services/prebuild.js +2 -2
  7. package/src/lib/services/precommit.js +2 -2
package/CHANGELOG.md CHANGED
@@ -2,9 +2,21 @@
2
2
 
3
3
  All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
4
4
 
5
- [Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.48.4...main)
5
+ [Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.49.1...main)
6
6
 
7
- ## [1.48.4](https://github.com/motdotla/dotenv/compare/v1.48.3...v1.48.4) (2025-07-29)
7
+ ## [1.49.1](https://github.com/dotenvx/dotenvx/compare/v1.49.0...v1.49.1) (2025-09-15)
8
+
9
+ ### Changed
10
+
11
+ * 🐞 patch bug with variable expansion of single quoted values ([#675](https://github.com/dotenvx/dotenvx/pull/675))
12
+
13
+ ## [1.49.0](https://github.com/dotenvx/dotenvx/compare/v1.48.4...v1.49.0) (2025-08-18)
14
+
15
+ ### Added
16
+
17
+ * For precommit and prebuild, ignore `.env.x` file like we do with `.env.vault` file. ([#666](https://github.com/dotenvx/dotenvx/pull/666))
18
+
19
+ ## [1.48.4](https://github.com/dotenvx/dotenvx/compare/v1.48.3...v1.48.4) (2025-07-29)
8
20
 
9
21
  ### Removed
10
22
 
package/package.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "1.48.4",
2
+ "version": "1.49.1",
3
3
  "name": "@dotenvx/dotenvx",
4
4
  "description": "a secure dotenv–from the creator of `dotenv`",
5
5
  "author": "@motdotla",
@@ -56,7 +56,7 @@
56
56
  "devDependencies": {
57
57
  "@yao-pkg/pkg": "^5.14.2",
58
58
  "capture-console": "^1.0.2",
59
- "esbuild": "^0.24.0",
59
+ "esbuild": "^0.25.8",
60
60
  "proxyquire": "^2.1.3",
61
61
  "sinon": "^14.0.1",
62
62
  "standard": "^17.1.0",
package/src/lib/helpers/dotenvParse.js CHANGED
@@ -40,7 +40,7 @@ function dotenvParse (src, skipExpandForDoubleQuotes = false, skipConvertingWind
40
40
  //
41
41
  // # .env
42
42
  // HELLO="World"
43
- // HELLO="enrypted:1234"
43
+ // HELLO="encrypted:1234"
44
44
  obj[key] = obj[key] || []
45
45
  obj[key].push(value)
46
46
  } else {
package/src/lib/helpers/isFullyEncrypted.js CHANGED
@@ -10,7 +10,7 @@ function isFullyEncrypted (src) {
10
10
  //
11
11
  // # .env
12
12
  // HELLO="World"
13
- // HELLO="enrypted:1234"
13
+ // HELLO="encrypted:1234"
14
14
  //
15
15
  // key => [value1, ...]
16
16
  for (const value of values) {
package/src/lib/helpers/parse.js CHANGED
@@ -188,7 +188,8 @@ class Parse {
188
188
  }
189
189
 
190
190
  // if the result came from what was a literal value then stop expanding
191
- if (this.literals[key]) {
191
+ // BUT only if the literal value contains expansion patterns (${...} or $VAR)
192
+ if (this.literals[key] && /\$\{[^}]+\}|\$[A-Za-z_][A-Za-z0-9_]*/.test(this.literals[key])) {
192
193
  break
193
194
  }
194
195
 
package/src/lib/services/prebuild.js CHANGED
@@ -41,13 +41,13 @@ class Prebuild {
41
41
 
42
42
  // check if that file is being ignored
43
43
  if (ig.ignores(file)) {
44
- if (file === '.env.example' || file === '.env.vault') {
44
+ if (file === '.env.example' || file === '.env.vault' || file === '.env.x') {
45
45
  const warning = new Error(`[dotenvx@${packageJson.version}][prebuild] ${file} (currently ignored but should not be)`)
46
46
  warning.help = `[dotenvx@${packageJson.version}][prebuild] ⮕ run [dotenvx ext gitignore --pattern !${file}]`
47
47
  warnings.push(warning)
48
48
  }
49
49
  } else {
50
- if (file !== '.env.example' && file !== '.env.vault') {
50
+ if (file !== '.env.example' && file !== '.env.vault' && file !== '.env.x') {
51
51
  const src = fsx.readFileX(file)
52
52
  const encrypted = isFullyEncrypted(src)
53
53
 
package/src/lib/services/precommit.js CHANGED
@@ -57,13 +57,13 @@ class Precommit {
57
57
  if (this._isFileToBeCommitted(file)) {
58
58
  // check if that file is being ignored
59
59
  if (ig.ignores(file)) {
60
- if (file === '.env.example' || file === '.env.vault') {
60
+ if (file === '.env.example' || file === '.env.vault' || file === '.env.x') {
61
61
  const warning = new Error(`[dotenvx@${packageJson.version}][precommit] ${file} (currently ignored but should not be)`)
62
62
  warning.help = `[dotenvx@${packageJson.version}][precommit] ⮕ run [dotenvx ext gitignore --pattern !${file}]`
63
63
  warnings.push(warning)
64
64
  }
65
65
  } else {
66
- if (file !== '.env.example' && file !== '.env.vault') {
66
+ if (file !== '.env.example' && file !== '.env.vault' && file !== '.env.x') {
67
67
  const src = fsx.readFileX(file)
68
68
  const encrypted = isFullyEncrypted(src)
69
69