From 63aef57d4931fd9374ac6a99c9f09c3f3958f03a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Jun 2026 10:04:01 -0700 Subject: [PATCH] build(deps): bump dotenv from 17.3.1 to 17.4.2 (#8737) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.3.1 to 17.4.2.
Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

17.4.1 (2026-04-05)

Changed

17.4.0 (2026-04-01)

Added

Changed

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=17.3.1&new-version=17.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- cli/package.json | 2 +- pnpm-lock.yaml | 14 +++++++------- server/package.json | 2 +- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/cli/package.json b/cli/package.json index 256291c2ef..34f4386115 100644 --- a/cli/package.json +++ b/cli/package.json @@ -53,7 +53,7 @@ "@paperclipai/shared": "workspace:*", "@paperclipai/hermes-paperclip-adapter": "workspace:*", "drizzle-orm": "0.45.2", - "dotenv": "^17.0.1", + "dotenv": "^17.4.2", "commander": "^13.1.0", "embedded-postgres": "^18.1.0-beta.16", "picocolors": "^1.1.1" diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index cb36a35404..f4b58f000a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -88,8 +88,8 @@ importers: specifier: ^13.1.0 version: 13.1.0 dotenv: - specifier: ^17.0.1 - version: 17.3.1 + specifier: ^17.4.2 + version: 17.4.2 drizzle-orm: specifier: 0.45.2 version: 0.45.2(@electric-sql/pglite@0.3.15)(kysely@0.29.2)(pg@8.18.0)(postgres@3.4.9)(sqlite3@5.1.7) @@ -753,8 +753,8 @@ importers: specifier: ^3.4.8 version: 3.4.8 dotenv: - specifier: ^17.0.1 - version: 17.3.1 + specifier: ^17.4.2 + version: 17.4.2 drizzle-orm: specifier: ^0.45.2 version: 0.45.2(@electric-sql/pglite@0.3.15)(kysely@0.29.2)(pg@8.18.0)(postgres@3.4.9)(sqlite3@5.1.7) @@ -5685,8 +5685,8 @@ packages: resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==} engines: {node: '>=12'} - dotenv@17.3.1: - resolution: {integrity: sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==} + dotenv@17.4.2: + resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==} engines: {node: '>=12'} downshift@7.6.2: @@ -13009,7 +13009,7 @@ snapshots: dotenv@16.6.1: {} - dotenv@17.3.1: {} + dotenv@17.4.2: {} downshift@7.6.2(react@19.2.7): dependencies: diff --git a/server/package.json b/server/package.json index 188752d9d2..31834cdae1 100644 --- a/server/package.json +++ b/server/package.json @@ -66,7 +66,7 @@ "chokidar": "^4.0.3", "detect-port": "^2.1.0", "dompurify": "^3.4.8", - "dotenv": "^17.0.1", + "dotenv": "^17.4.2", "drizzle-orm": "^0.45.2", "embedded-postgres": "^18.1.0-beta.16", "express": "^5.1.0",