Skip to content

build(deps-dev): bump dotenv from 18.0.8 to 18.0.10 in /cornucopia.owasp.org - #3786

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/cornucopia.owasp.org/dotenv-18.0.10
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/cornucopia.owasp.org/dotenv-18.0.10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps dotenv from 18.0.8 to 18.0.10.

Changelog

Sourced from dotenv's changelog.

18.0.10 (2026-11-08)

Changed

  • Fix dotenv.parse in Vite by moving the CLI shebang to a separate entry point (#1082)

18.0.9 (2026-10-14)

Changed

  • Permit DOTENV_PATH being empty string with the CLI (#1076)
Commits
  • 7ed8f36 18.0.10
  • 2c291ba Merge pull request #1082 from motdotla/dotenv-18-fe
  • 9b4bf24 Changelog
  • a3734e8 separate run to its own entry
  • 3d11a6e npm audit fix
  • 32ab610 Merge pull request #1078 from NgoQuocViet2001/fix-cli-ignored-signal-hang
  • 7c67590 fix(cli): exit when the command dies from SIGPIPE
  • c40119a Merge pull request #1077 from renanmpimentel/test/home-path-array
  • 0084cb3 test: cover home expansion in path arrays
  • 513aafd npm audit fix
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dotenv](https://github.com/motdotla/dotenv) from 18.0.8 to 18.0.10.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.8...v18.0.10)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from rewtd and sydseter as code owners November 12, 2026 06:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants