Skip to content

build(deps-dev): bump dotenv-expand from 12.0.3 to 13.0.0 in /services/idp#2710

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/services/idp/dotenv-expand-13.0.0
Open

build(deps-dev): bump dotenv-expand from 12.0.3 to 13.0.0 in /services/idp#2710
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/services/idp/dotenv-expand-13.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps dotenv-expand from 12.0.3 to 13.0.0.

Changelog

Sourced from dotenv-expand's changelog.

13.0.0 (2026-04-17)

Changed

  • bump dotenv to v17
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 4, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented May 4, 2026

Copy link
Copy Markdown

@codacy-production codacy-production Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

The pull request is currently empty and does not contain the modifications to package.json or the lockfile required to perform the dependency upgrade.

Because this is a major version update (v12 to v13) involving an internal upgrade of dotenv to v17, there is a potential for breaking changes in how environment variables are expanded or loaded. The absence of code changes makes the PR unmergable in its current state.

About this PR

  • The PR contains no code changes. Please ensure that the updates to package.json and the lockfile in /services/idp are committed and pushed to the branch.
  • This is a major version bump for dotenv-expand. Documentation for version 13.0.0 and the underlying dotenv v17 should be reviewed to ensure the expansion logic remains compatible with existing service configurations.

Test suggestions

  • Verify that environment variable expansion logic still functions correctly after the major version bump.
  • Confirm that the IDP service starts and initializes successfully with the updated dependency.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that environment variable expansion logic still functions correctly after the major version bump.
2. Confirm that the IDP service starts and initializes successfully with the updated dependency.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

@codacy-production
Copy link
Copy Markdown

codacy-production Bot commented May 12, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@rhafer
Copy link
Copy Markdown
Member

rhafer commented May 12, 2026

@dependabot recreate

Bumps [dotenv-expand](https://github.com/motdotla/dotenv-expand) from 12.0.3 to 13.0.0.
- [Changelog](https://github.com/motdotla/dotenv-expand/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv-expand@v12.0.3...v13.0.0)

---
updated-dependencies:
- dependency-name: dotenv-expand
  dependency-version: 13.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/services/idp/dotenv-expand-13.0.0 branch from 263d5d1 to 455dbf0 Compare May 12, 2026 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant