@dotenvx/dotenvx 2.17.0 → 2.17.2

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.17.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.17.2...main)
+
+## [2.17.2](https://github.com/dotenvx/dotenvx/compare/v2.17.1...v2.17.2) (2026-07-22)
+
+### Added
+
+* Add support for `DOTENV_CONFIG_IGNORE` global convenience ([#919](https://github.com/dotenvx/dotenvx/pull/919))
+
+## [2.17.1](https://github.com/dotenvx/dotenvx/compare/v2.17.0...v2.17.1) (2026-07-21)
+
+### Changed
+
+* Handle `ctrl + c` better ([#916](https://github.com/dotenvx/dotenvx/pull/916))
 
 ## [2.17.0](https://github.com/dotenvx/dotenvx/compare/v2.16.1...v2.17.0) (2026-07-21)
 

package/README.md

@@ -167,7 +167,7 @@ Hello World
 see [1Password guide](https://dotenvx.com/docs/secrets-in-1password)
 
 </details>
-<details><summary>Bitwarden 🔑</summary><br>
+<details><summary>Bitwarden 🛡️</summary><br>
 
 Run with secrets resolved directly from Bitwarden Password Manager.
 
@@ -1586,6 +1586,11 @@ $ dotenvx run -f .env.missing --ignore=MISSING_ENV_FILE -- node index.js
 ...
 ```
 
+You can also set `DOTENV_CONFIG_IGNORE="MISSING_ENV_FILE"`. It is parsed as a comma-separated list.
+
+```sh
+$ DOTENV_CONFIG_IGNORE="MISSING_ENV_FILE,OTHER_ERROR_CODE" dotenvx run -f .env.missing -- node index.js
+```
 </details>
 <details><summary>`run --convention=nextjs`</summary><br>
 
@@ -3039,6 +3044,8 @@ X.X.X
 
 </details>
 
+&nbsp;
+
 ### Library 📦
 
 Use dotenvx directly in code.
@@ -3491,6 +3498,29 @@ Set `mask: 0` to fully mask values.
 
 &nbsp;
 
+### Settings ⚙️
+
+There are global settings available that can be configured as environment variables.
+
+<details><summary>Environment variables</summary><br>
+
+```ini
+# dotenvx native settings
+DOTENV_CONFIG_CONVENTION= # set to a default convention like 'nextjs' or 'flow'
+DOTENV_CONFIG_IGNORE= # MISSING_ENV_FILE,OTHER
+DOTENV_CONFIG_QUIET= # set to "true" to default to --quiet
+DOTENVX_NO_ARMOR= # set to "true" to turn off Armor support
+DOTENVX_NO_1PASSWORD= # set to "true" to turn off 1Password support
+DOTENVX_NO_BITWARDEN= # set to "true" to turn off Bitwarden support
+
+# other machine settings respected by dotenvx
+BW_SESSION= # set to bitwarden session token to bypass password prompt
+```
+
+</details>
+
+&nbsp;
+
 ## Armor ⛨
 
 [![dotenvx-armor](https://dotenvx.com/dotenvx-armor-banner.png?v2)](https://dotenvx.com/armor)
@@ -3513,6 +3543,7 @@ Set `mask: 0` to fully mask values.
 * [Claude](https://dotenvx.com/docs/secrets-in-claude)
 * [Codex](https://dotenvx.com/docs/secrets-in-codex)
 * [1Password](https://dotenvx.com/docs/secrets-in-1password)
+* [Bitwarden](https://dotenvx.com/docs/secrets-in-bitwarden)
 * [Node.js](https://dotenvx.com/docs/secrets-in-nodejs)
 * [Next.js](https://dotenvx.com/docs/secrets-in-nextjs)
 * [Express](https://dotenvx.com/docs/secrets-in-express)

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.17.0",
+  "version": "2.17.2",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",
@@ -53,7 +53,7 @@
   "funding": "https://dotenvx.com",
   "dependencies": {
     "@dotenvx/primitives": "^2.1.0",
-    "@dotenvx/tooling": "^1.0.2",
+    "@dotenvx/tooling": "^1.0.3",
     "yocto-spinner": "^1.2.1"
   },
   "devDependencies": {

package/src/cli/actions/get.js

@@ -6,13 +6,14 @@ const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
 const getResolver = require('./../../lib/resolvers/get')
 const normalizeDotenvConfigConvention = require('../../lib/helpers/normalizeDotenvConfigConvention')
+const normalizeDotenvConfigIgnore = require('../../lib/helpers/normalizeDotenvConfigIgnore')
 const buildCommandEnvs = require('../../lib/helpers/buildCommandEnvs')
 const resolveEnvKeysFile = require('../../lib/helpers/resolveEnvKeysFile')
 const mask = require('../../lib/helpers/mask')
 const filterKeys = require('../../lib/helpers/filterKeys')
 
 async function get (key) {
-  const options = normalizeDotenvConfigConvention(this.opts())
+  const options = normalizeDotenvConfigIgnore(normalizeDotenvConfigConvention(this.opts()))
   const spinnerOptions = typeof this.optsWithGlobals === 'function' ? this.optsWithGlobals() : options
   const spinner = await createSpinner({ ...spinnerOptions, ...options, text: 'decrypting' })
 
@@ -120,6 +121,10 @@ async function get (key) {
     }
   } catch (error) {
     if (spinner) spinner.stop()
+    if (error.code === 'PROMPT_CANCELLED') {
+      process.exit(130)
+      return
+    }
     catchAndLog(error)
     process.exit(1)
   }

package/src/cli/actions/run.js

@@ -8,6 +8,7 @@ const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
 const normalizeDotenvConfigQuiet = require('../../lib/helpers/normalizeDotenvConfigQuiet')
 const normalizeDotenvConfigConvention = require('../../lib/helpers/normalizeDotenvConfigConvention')
+const normalizeDotenvConfigIgnore = require('../../lib/helpers/normalizeDotenvConfigIgnore')
 const buildCommandEnvs = require('../../lib/helpers/buildCommandEnvs')
 const resolveEnvKeysFile = require('../../lib/helpers/resolveEnvKeysFile')
 const mask = require('../../lib/helpers/mask')
@@ -53,7 +54,7 @@ function uniqueInjectedKeys (processedEnvs) {
 }
 
 async function run () {
-  const options = normalizeDotenvConfigConvention(normalizeDotenvConfigQuiet(this.opts()))
+  const options = normalizeDotenvConfigIgnore(normalizeDotenvConfigConvention(normalizeDotenvConfigQuiet(this.opts())))
   const spinnerOptions = typeof this.optsWithGlobals === 'function' ? this.optsWithGlobals() : options
   const maskEnabled = options.mask !== undefined
   const redactEnabled = options.redact === true
@@ -210,6 +211,10 @@ async function run () {
     logger.success(`⟐ ${msg}`)
   } catch (error) {
     if (spinner) spinner.stop()
+    if (error.code === 'PROMPT_CANCELLED') {
+      process.exit(130)
+      return
+    }
     catchAndLog(error)
     process.exit(1)
   }

package/src/cli/actions/validate.js

@@ -6,6 +6,7 @@ const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
 const normalizeDotenvConfigQuiet = require('../../lib/helpers/normalizeDotenvConfigQuiet')
 const normalizeDotenvConfigConvention = require('../../lib/helpers/normalizeDotenvConfigConvention')
+const normalizeDotenvConfigIgnore = require('../../lib/helpers/normalizeDotenvConfigIgnore')
 const buildCommandEnvs = require('../../lib/helpers/buildCommandEnvs')
 const resolveEnvKeysFile = require('../../lib/helpers/resolveEnvKeysFile')
 const validateEnvExample = require('../../lib/helpers/validateEnvExample')
@@ -13,7 +14,7 @@ const validateEnvExample = require('../../lib/helpers/validateEnvExample')
 const { determine } = require('./../../lib/helpers/envResolution')
 
 async function validate () {
-  const options = normalizeDotenvConfigConvention(normalizeDotenvConfigQuiet(this.opts()))
+  const options = normalizeDotenvConfigIgnore(normalizeDotenvConfigConvention(normalizeDotenvConfigQuiet(this.opts())))
   const spinnerOptions = typeof this.optsWithGlobals === 'function' ? this.optsWithGlobals() : options
   const spinner = await createSpinner({ ...spinnerOptions, ...options, text: 'validating' })
   const ignore = options.ignore || []

package/src/lib/helpers/normalizeDotenvConfigConvention.js

@@ -1,4 +1,6 @@
-function normalizeDotenvConfigConvention (options) {
+function normalizeDotenvConfigConvention (
+  /** @type {import('../main').DotenvConfigOptions} */ options
+) {
   if (!options.convention && process.env.DOTENV_CONFIG_CONVENTION) {
     options.convention = process.env.DOTENV_CONFIG_CONVENTION
   }

package/src/lib/helpers/normalizeDotenvConfigIgnore.js

@@ -0,0 +1,17 @@
+function normalizeDotenvConfigIgnore (
+  /** @type {import('../main').DotenvConfigOptions} */ options
+) {
+  const configIgnore = (process.env.DOTENV_CONFIG_IGNORE || '')
+    .split(',')
+    .map(code => code.trim())
+    .filter(Boolean)
+
+  if (configIgnore.length < 1) return options
+
+  return {
+    ...options,
+    ignore: [...(options.ignore || []), ...configIgnore]
+  }
+}
+
+module.exports = normalizeDotenvConfigIgnore

package/src/lib/helpers/normalizeDotenvConfigQuiet.js

@@ -1,4 +1,6 @@
-function normalizeDotenvConfigQuiet (options) {
+function normalizeDotenvConfigQuiet (
+  /** @type {import('../main').DotenvConfigOptions} */ options
+) {
   if (process.env.DOTENV_CONFIG_QUIET === 'true') {
     options.quiet = true
   }

package/src/lib/helpers/resolveBitwardenPassword.js

@@ -117,6 +117,7 @@ async function resolveBitwardenPassword (parsed, options = {}) {
         })
         parsed[key] = secretValue(stdout)
       } catch (error) {
+        if (error && error.code === 'PROMPT_CANCELLED') throw error
         errors.push(resolutionError(key, error))
         unresolved.push(key)
       }

package/src/lib/main.js

@@ -26,6 +26,7 @@ const decryptKeyValue = require('./helpers/cryptography/decryptKeyValue')
 const Errors = require('./helpers/errors')
 const normalizeDotenvConfigQuiet = require('./helpers/normalizeDotenvConfigQuiet')
 const normalizeDotenvConfigConvention = require('./helpers/normalizeDotenvConfigConvention')
+const normalizeDotenvConfigIgnore = require('./helpers/normalizeDotenvConfigIgnore')
 const mask = require('./helpers/mask')
 const maskProcessedEnvs = require('./helpers/maskProcessedEnvs')
 
@@ -43,6 +44,7 @@ function uniqueInjectedKeys (processedEnvs) {
 const config = function (options = {}) {
   options = normalizeDotenvConfigQuiet(options)
   options = normalizeDotenvConfigConvention(options)
+  options = normalizeDotenvConfigIgnore(options)
 
   // allow user to set processEnv to write to
   let processEnv = process.env
@@ -318,6 +320,7 @@ const set = async function (key, value, options = {}) {
 /* @type {import('./main').get} */
 const get = async function (key, options = {}) {
   options = normalizeDotenvConfigConvention(options)
+  options = normalizeDotenvConfigIgnore(options)
 
   const envs = buildEnvs(options)
   const noArmor = resolveNoArmor(options)

package/src/lib/resolvers/envs.js

@@ -118,6 +118,7 @@ async function injectEnv ({ env, overload, processEnv, envKeysFilepath, provider
 
     inject(processEnv, row.parsed)
   } catch (e) {
+    if (e.code === 'PROMPT_CANCELLED') throw e
     row.errors = [e]
   }
 
@@ -225,6 +226,7 @@ async function injectEnvFile ({ env, overload, processEnv, envKeysFilepath, prov
 
     inject(processEnv, parsed)
   } catch (e) {
+    if (e.code === 'PROMPT_CANCELLED') throw e
     if (e.code === 'ENOENT' || e.code === 'EISDIR') {
       row.errors = [new Errors({ envFilepath: env.value, filepath }).missingEnvFile()]
     } else {
@@ -299,6 +301,8 @@ async function envs (options = {}) {
   const readableFilepaths = new Set()
   const processEnv = options.processEnv || process.env
   const envKeysFilepath = options.envKeysFilepath || options.envKeysFile || null
+  const no1Password = options.no1Password === true || process.env.DOTENVX_NO_1PASSWORD === 'true'
+  const noBitwarden = options.noBitwarden === true || process.env.DOTENVX_NO_BITWARDEN === 'true'
   const provider = await providers(options)
   const decryptor = await decryptors(options)
   for (const env of options.envs || []) {
@@ -311,8 +315,8 @@ async function envs (options = {}) {
         provider,
         decryptor,
         readableFilepaths,
-        no1Password: options.no1Password,
-        noBitwarden: options.noBitwarden,
+        no1Password,
+        noBitwarden,
         onStatus: options.onStatus
       }))
     } else if (env.type === TYPE_ENV) {
@@ -323,8 +327,8 @@ async function envs (options = {}) {
         envKeysFilepath,
         provider,
         decryptor,
-        no1Password: options.no1Password,
-        noBitwarden: options.noBitwarden,
+        no1Password,
+        noBitwarden,
         onStatus: options.onStatus
       }))
     }
@@ -341,6 +345,8 @@ function envsSync (options = {}) {
   const readableFilepaths = new Set()
   const processEnv = options.processEnv || process.env
   const envKeysFilepath = options.envKeysFilepath || options.envKeysFile || null
+  const no1Password = options.no1Password === true || process.env.DOTENVX_NO_1PASSWORD === 'true'
+  const noBitwarden = options.noBitwarden === true || process.env.DOTENVX_NO_BITWARDEN === 'true'
   const provider = providers.sync(options)
   const decryptor = decryptors.sync(options)
 
@@ -354,8 +360,8 @@ function envsSync (options = {}) {
         provider,
         decryptor,
         readableFilepaths,
-        no1Password: options.no1Password,
-        noBitwarden: options.noBitwarden
+        no1Password,
+        noBitwarden
       }))
     } else if (env.type === TYPE_ENV) {
       processedEnvs.push(injectEnvSync({
@@ -365,8 +371,8 @@ function envsSync (options = {}) {
         envKeysFilepath,
         provider,
         decryptor,
-        no1Password: options.no1Password,
-        noBitwarden: options.noBitwarden
+        no1Password,
+        noBitwarden
       }))
     }
   }