@dotenvx/dotenvx 2.3.2 → 2.3.3

package/CHANGELOG.md

@@ -2,7 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.3.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.3.3...main)
+
+## [2.3.3](https://github.com/dotenvx/dotenvx/compare/v2.3.2...v2.3.3) (2026-07-09)
+
+### Removed
+
+* Remove `dotenv` and `commander` for `@dotenvx/tooling` ([#878](https://github.com/dotenvx/dotenvx/pull/878))
 
 ## [2.3.2](https://github.com/dotenvx/dotenvx/compare/v2.3.1...v2.3.2) (2026-07-09)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.3.2",
+  "version": "2.3.3",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",
@@ -44,9 +44,8 @@
   "funding": "https://dotenvx.com",
   "dependencies": {
     "@dotenvx/primitives": "^1.7.2",
-    "commander": "^11.1.0",
+    "@dotenvx/tooling": "^0.2.0",
     "conf": "^10.2.0",
-    "dotenv": "^17.4.2",
     "enquirer": "^2.4.1",
     "env-paths": "^2.2.1",
     "execa": "^5.1.1",

package/src/cli/commands/ext.js

@@ -1,4 +1,4 @@
-const { Command } = require('commander')
+const { Command } = require('@dotenvx/tooling')
 
 const examples = require('./../examples')
 const executeExtension = require('../../lib/helpers/executeExtension')

package/src/cli/dotenvx.js

@@ -1,14 +1,12 @@
 #!/usr/bin/env node
 
 /* c8 ignore start */
-const { Command } = require('commander')
+const { Command } = require('@dotenvx/tooling')
 const program = new Command()
 
-const { setLogLevel, logger } = require('../shared/logger')
+const { setLogLevel } = require('../shared/logger')
 const examples = require('./examples')
 const packageJson = require('./../lib/helpers/packageJson')
-const Errors = require('./../lib/helpers/errors')
-const getCommanderVersion = require('./../lib/helpers/getCommanderVersion')
 const executeDynamic = require('./../lib/helpers/executeDynamic')
 const removeDynamicHelpSection = require('./../lib/helpers/removeDynamicHelpSection')
 const removeOptionsHelpParts = require('./../lib/helpers/removeOptionsHelpParts')
@@ -23,14 +21,6 @@ function collectEnvs (type) {
   }
 }
 
-// surface hoisting problems
-const commanderVersion = getCommanderVersion()
-if (commanderVersion && parseInt(commanderVersion.split('.')[0], 10) >= 12) {
-  const message = `dotenvx depends on commander@11.x.x but you are attempting to hoist commander@${commanderVersion}`
-  const error = new Errors({ message }).dangerousDependencyHoist()
-  logger.error(error.messageWithHelp)
-}
-
 // global log levels
 program
   .usage('run -- yourcommand')

package/src/db/session.js

@@ -1,7 +1,7 @@
 const fs = require('fs')
 const path = require('path')
 const Conf = require('conf')
-const dotenv = require('dotenv')
+const { dotenv } = require('@dotenvx/tooling')
 const envPaths = require('env-paths')
 
 const jsonToEnv = require('./../lib/helpers/jsonToEnv')

package/src/lib/helpers/errors.js

@@ -4,7 +4,6 @@ const ISSUE_BY_CODE = {
   COMMAND_EXITED_WITH_CODE: 'https://github.com/dotenvx/dotenvx/issues/new',
   COMMAND_SUBSTITUTION_FAILED: 'https://github.com/dotenvx/dotenvx/issues/532',
   DECRYPTION_FAILED: 'https://github.com/dotenvx/dotenvx/issues/757',
-  DANGEROUS_DEPENDENCY_HOIST: 'https://github.com/dotenvx/dotenvx/issues/622',
   INVALID_COLOR: 'must be 256 colors',
   INVALID_CONVENTION: 'https://github.com/dotenvx/dotenvx/issues/761',
   INVALID_PASSPHRASE: 'try again with the correct passphrase',
@@ -98,18 +97,6 @@ class Errors {
     return e
   }
 
-  dangerousDependencyHoist () {
-    const code = 'DANGEROUS_DEPENDENCY_HOIST'
-    const message = `[${code}] your environment has hoisted an incompatible version of a dotenvx dependency: ${this.message}`
-    const help = `fix: [${ISSUE_BY_CODE[code]}]`
-
-    const e = new Error(message)
-    e.code = code
-    e.help = help
-    e.messageWithHelp = `${message}. ${help}`
-    return e
-  }
-
   invalidColor () {
     const code = 'INVALID_COLOR'
     const message = `[${code}] Invalid color ${this.color}`

package/src/lib/helpers/getCommanderVersion.js

@@ -1,10 +0,0 @@
-const fs = require('fs')
-const path = require('path')
-
-function getCommanderVersion () {
-  const commanderMain = require.resolve('commander')
-  const pkgPath = path.join(commanderMain, '..', 'package.json')
-  return JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version
-}
-
-module.exports = getCommanderVersion