chore(deps): update dependency @dotenvx/dotenvx to v2 by renovate[bot] · Pull Request #65 · shba007/unstack

renovate · 2026-07-04T04:13:41Z

This PR contains the following updates:

Package	Change	Age	Confidence
@dotenvx/dotenvx	`^1.52.0` → `^2.0.0`

Release Notes

dotenvx/dotenvx (@dotenvx/dotenvx)

`v2.0.0`

Compare Source

Changed

BREAKING: lib/main#set async only (#855)
BREAKING: lib/main#get async only (#855)
New keyring support - for local and armor providers and to unlock future providers (#855)
Route run, config, and get through shared env and keypair resolvers backed by @dotenvx/primitives (#855)
Route set, encrypt, and decrypt through shared transforms that operate on primitive scan, parse, encrypt, and upsert results (#855)
Update library parse to use primitive parsing while preserving dotenvx-style encrypted value errors (#855)

Removed

BREAKING: Remove the rotate command (it will return in 2.1 or 2.2 soon with a more complete implementation for local and armored keys) (#855)
BREAKING: Remove the library doctor, keypair, and genexample exports from lib/main (#855)

`v1.75.1`

Compare Source

Changed

Publish as named binaries (#851)

Removed

Remove references to dotenvx-vlt (now dotenvx-armor) (#849)

`v1.75.0`

Compare Source

Changed

Swap in @dotenvx/primitives (#848)
ext commands become first-class(#847)

`v1.74.3`

Compare Source

Changed

Bundle dotenvx with @dotenvx/next-env for user convenience (#845)

`v1.74.2`

Compare Source

Changed

Fix provenance for @dotenvx/next-env (#844)

`v1.74.1`

Compare Source

Added

Add README for @dotenvx/next-env (#843)

`v1.73.1`

Compare Source

Changed

Give update available notification only for armor commands (#840)

`v1.73.0`

Compare Source

Added

Add dotenvx armor commands directly inside dotenvx (#839)

dotenvx remains local-first: armor commands are optional under professional security section

`v1.72.0`

Compare Source

Added

Move armor login command to first class dotenvx login command. (#836)
dotenvx remains local-first: login is optional and only needed when you want Armor features like moving keys off-device, team sharing, and audit access.
Patch 2 high severity dependencies (#837)

`v1.71.3`

Compare Source

Changed

Forward command to Dotenvx Armor Key Guard approvals (#835)

`v1.71.2`

Compare Source

Changed

touch up get, set, and decrypt when armor installed (#834)

`v1.71.1`

Compare Source

Changed

stderr changed to inherit for dotenvx-armor integration (#833)

`v1.71.0`

Compare Source

Added

Add optional automation --token support for Armor ⛨ users (#831)

`v1.70.0`

Compare Source

Changed

Dotenvx Ops/Vlt is now Dotenvx Armor ⛨ (#830)

`v1.69.2`

Compare Source

Changed

Minor messaging improvements, especially if using armored keys (#825)

`v1.69.1`

Compare Source

Changed

Internally rename ops to vlt (#823)

`v1.69.0`

Compare Source

Changed

Remove fully-deprecated opsOff option in favor of noOps (#822)

`v1.68.1`

Compare Source

Changed

Pass -f to ops (#821)

`v1.68.0`

Compare Source

Changed

Support ignore option on parse (#820)

`v1.67.0`

Compare Source

Added

Add prompt for local storage vs armored storage (#819)

`v1.66.0`

Compare Source

Added

Add dotenvx doctor (#815)

`v1.65.3`

Compare Source

Changed

Improve spinner message blinking with simpler --no-spinner flag passed to ops (#814)

`v1.65.2`

Compare Source

Changed

Improve spinner message coordination between dotenvx and dotenvx-ops (#813)

`v1.65.1`

Compare Source

Changed

Prompts from ops should bubble up (#812)

`v1.65.0`

Compare Source

Added

Add support for replaceing duplicate keys with different values (#806)

`v1.64.0`

Compare Source

Added

Add optional dotenvx armor command.
- armor up armor private key
- armor down dearmor private key
- armor push push armored key (from .env.keys)
- armor pull pull armored key (into .env.keys)

Move private keys off device and under access control with Dotenvx Ops ⛨. Learn more

`v1.63.0`

Compare Source

Added

Add support for encrypted values passed to --env flag (#804)
Add support for --format=colon in order to support cloudflare's wrangler --var flag format (#804)

`v1.62.0`

Compare Source

Added

Add support for config({ envs }). unlocks simpler cloudflare worker integration (#803)

$ dotenvx encrypt -f .env.txt

// src/index.js
import envSrc from '../.env.txt'
import dotenvx from '@&#8203;dotenvx/dotenvx'

const config = dotenvx.config({ envs: [{ type: 'env', value: envSrc, privateKeyName: 'DOTENV_PRIVATE_KEY' }] })
const envx = config.parsed

export default {
  async fetch(request, env, ctx) {
    return new Response(`Hello ${envx.HELLO}`)
  }
}

"scripts": {
  "deploy": "wrangler deploy",
  "dev": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
  "start": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
  "test": "vitest"
},

`v1.61.6`

Compare Source

Changed

Guard against command substitution following encrypted: (#802)

`v1.61.5`

Compare Source

Changed

Support --hostname flag to dotenvx-ops.login (#801)

`v1.61.4`

Compare Source

Changed

Respect SIGINT handler completion (#798)

`v1.61.3`

Compare Source

Changed

Tighten up ext precommit --install message (#797)

`v1.61.2`

Compare Source

Changed

For Ops ⛨ users surface stderr (#796)

`v1.61.1`

Compare Source

Changed

Faster coldstarts! (#781)
Patch dotenvx precommit|prebuild shorthand (#793)

`v1.61.0`

Compare Source

Added

Add login and logout method that proxy to dotenvx-ops login/logout (#780)
Note: dotenvx continues to make zero outgoing HTTP requests and includes no telemetry. Outgoing requests occur only if you explicitly install the dotenvx-ops SDK or CLI.

`v1.60.2`

Compare Source

Changed

Communicate local key and armored key (for Ops stored keys) (#778)

`v1.60.1`

Compare Source

Added

Added missing + key ⛨ for Ops stored keys (#777)

`v1.60.0`

Compare Source

Added

Add spinner with loading messages
- injecting (run)
- encrypting (encrypt, set)
- decrypting (decrypt, get)
- rotating (rotate)
- retrieving (keypair)

`v1.59.1`

Compare Source

Added

add HELLO key to the kit sample to match most of our examples in the README

`v1.59.0`

Compare Source

Changed

encrypt and set now create a .env file if one does not exist (#771)
pass --no-create to prevent file creation

`v1.58.0`

Compare Source

Changed

Changed runtime injection message to format ⟐ injecting env (N) from FILE · dotenvx@VERSION (#770)

`v1.57.5`

Compare Source

Changes

Improve already installed message (#768)

`v1.57.4`

Compare Source

Changes

Use curl example for install dotenvx.com/ops (#767)

`v1.57.3`

Compare Source

Changes

Simplify installed success message (#766)

`v1.57.2`

Compare Source

Changes

Ran npm audit to update package-lock.json (#763)

`v1.57.1`

Compare Source

Changes

improved error logs and compacted most to a single line (#755)
introduced leading log glyphs as a visual status language:
- ⟐ success action (injected)
- ◈ success action (encrypted)
- ◇ success action (set plain value, decrypted)
- ⟳ success action (rotated)
- ○ informational no-op (no changes)
- ▣ success action for generated/updated support files
- ⚠ warning
- ☠ error

`v1.57.0`

Compare Source

Changed

color and formatting changes to outputs (#754)

`v1.56.0`

Compare Source

Changed

ops off flag — now respected by get, keypair, rotate, and encrypt (#750)
--pp alias — added as shorthand for --pretty-print; toward sunsetting -pp (#750)

Removed

Remove support for .env.vault files (#750)

`v1.55.1`

Compare Source

Added

Respect dotenvx-ops status (on|off) (#749)

`v1.55.0`

Compare Source

Added

Add '⛨ ARMORED KEYS: Harden your private keys.' security feature when dotenvx-ops installed (#746)

Removed

Remove ProKeypair logic

`v1.54.1`

Compare Source

Changed

Fix npm publish

`v1.53.0`

Compare Source

Removed

Remove radar. It has been a year since replaced by ops. (#743)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

chore(deps): update dependency @dotenvx/dotenvx to v2

edd28aa

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency @dotenvx/dotenvx to v2#65

chore(deps): update dependency @dotenvx/dotenvx to v2#65
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dotenvx-dotenvx-2.x

renovate Bot commented Jul 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jul 4, 2026

Release Notes

Changed

Removed

Changed

Removed

Changed

Changed

Changed

Added

Changed

Added

Added

Changed

Changed

Changed

Added

Changed

Changed

Changed

Changed

Changed

Changed

Added

Added

Changed

Changed

Changed

Added

Added

Added

Added

Changed

Changed

Changed

Changed

Changed

Changed

Added

Changed

Added

Added

Added

Changed

Changed

Changes

Changes

Changes

Changes

Changes

Changed

Changed

Removed

Added

Added

Removed

Changed

Removed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants