@dotenvx/dotenvx 2.17.2 → 2.17.3

package/CHANGELOG.md

@@ -2,7 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.17.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.17.3...main)
+
+## [2.17.3](https://github.com/dotenvx/dotenvx/compare/v2.17.2...v2.17.3) (2026-07-23)
+
+### Changed
+
+* Exempt `.env.example` in subdirectories from precommit ([#920](https://github.com/dotenvx/dotenvx/pull/920))
 
 ## [2.17.2](https://github.com/dotenvx/dotenvx/compare/v2.17.1...v2.17.2) (2026-07-22)
 

package/README.md

@@ -955,24 +955,6 @@ $ dotenvx encrypt --stdout > .env.encrypted
 > If your organization's compliance department requires [NIST approved curves](https://csrc.nist.gov/projects/elliptic-curve-cryptography) or other curves like `curve25519`, please reach out at [security@dotenvx.com](mailto:security@dotenvx.com).
 
 </details>
-<details><summary>agents</summary><br>
-
-After encryption, `DOTENV_PUBLIC_KEY` lives in your encrypted `.env` file. This means agents and automation can keep running `dotenvx set` and `dotenvx encrypt` without reading `.env.keys`.
-
-```sh
-$ chmod a-r .env.keys
-
-$ dotenvx set HELLO World
-◈ encrypted HELLO (.env)
-
-$ dotenvx encrypt
-◈ encrypted (.env)
-```
-
-Keep `.env.keys` unreadable by agents, while still letting them safely update encrypted values.
-
-</details>
-
 &nbsp;
 
 ## Advanced
@@ -2021,8 +2003,6 @@ $ dotenvx set HELLO World
 set HELLO with encryption (.env)
 ```
 
-Works with unreadable `.env.keys` when `.env` already contains `DOTENV_PUBLIC_KEY`.
-
 </details>
 <details><summary>`set KEY value -f`</summary><br>
 
@@ -2134,8 +2114,6 @@ $ dotenvx encrypt
 ⮕  next run [DOTENV_PRIVATE_KEY='122...0b8' dotenvx run -- yourcommand] to test decryption locally
 ```
 
-Works with unreadable `.env.keys` when `.env` already contains `DOTENV_PUBLIC_KEY`.
-
 </details>
 <details><summary>`encrypt -f`</summary><br>
 
@@ -2601,6 +2579,27 @@ Use `-f` and `-fk` to validate a specific env file and keys file. The command ex
 $ dotenvx validate -f .env.production -fk .env.keys
 ```
 
+</details>
+<details><summary>`validate --ignore`</summary><br>
+
+Ignore specific validation error codes.
+
+```sh
+$ dotenvx validate --ignore=MISSING_ENV_EXAMPLE
+```
+
+Ignore multiple error codes by separating them with spaces.
+
+```sh
+$ dotenvx validate --ignore=MISSING_ENV_FILE MISSING_ENV_EXAMPLE
+```
+
+You can also set `DOTENV_CONFIG_IGNORE`. Its value is a comma-separated list.
+
+```sh
+$ DOTENV_CONFIG_IGNORE=MISSING_ENV_FILE,OTHER dotenvx validate
+```
+
 </details>
 <details><summary>`genexample`</summary><br>
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.17.2",
+  "version": "2.17.3",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",

package/src/lib/services/precommit.js

@@ -54,12 +54,13 @@ class Precommit {
         count += 1
 
         const file = path.join(this.directory, _file) // to handle when directory argument passed
+        const filename = path.basename(file) // exemptions match on filename, so they apply at any depth
 
         // check if file is going to be committed
         if (this._isFileToBeCommitted(file)) {
           // check if that file is being ignored
           if (ig.ignores(file)) {
-            if (file === '.env.example' || file === '.env.x') {
+            if (filename === '.env.example' || filename === '.env.x') {
               const warning = new Errors({
                 message: `${file} ignored (should not be)`,
                 help: `fix: [dotenvx gitignore --pattern !${file}]`
@@ -67,7 +68,7 @@ class Precommit {
               warnings.push(warning)
             }
           } else {
-            if (file !== '.env.example' && file !== '.env.x') {
+            if (filename !== '.env.example' && filename !== '.env.x') {
               const src = fsx.readFileXSync(file)
               const encrypted = sealed(src)