Skip to content

chore(deps): Bump dotenv from 18.0.8 to 18.0.9 - #7515

Merged
hivecommons-hive[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dotenv-18.0.9
Oct 26, 2026
Merged

chore(deps): Bump dotenv from 18.0.8 to 18.0.9#7515
hivecommons-hive[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dotenv-18.0.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps dotenv from 18.0.8 to 18.0.9.

Changelog

Sourced from dotenv's changelog.

18.0.9 (2026-10-14)

Changed

  • Permit DOTENV_PATH being empty string with the CLI (#1076)
Commits
  • 8d1ab85 18.0.9
  • 59a40ce changelog
  • 88228bd Merge pull request #1076 from Enesuygurs/fix/cli-empty-dotenv-path
  • bc6ef94 fix(cli): load the default .env when DOTENV_PATH is empty
  • 6d6e6c5 Merge pull request #1075 from kory-kaai/test/fast-parser-branch-coverage
  • 10218f1 test(parse-fast): cover the size-dependent and export-prefix branches
  • See full diff in compare view

@dependabot
dependabot Bot requested a review from clubanderson as a code owner October 26, 2026 21:26
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 26, 2026
@dependabot
dependabot Bot requested a review from KPRoche as a code owner October 26, 2026 21:26
@kubestellar-prow

kubestellar-prow Bot commented Oct 26, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign clubanderson for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubestellar-prow kubestellar-prow Bot added the dco-signoff: yes Indicates the PR's author has signed the DCO. label Oct 26, 2026
@kubestellar-prow kubestellar-prow Bot added needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Oct 26, 2026
@kubestellar-prow

kubestellar-prow Bot commented Oct 26, 2026

Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubestellar member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@hivecommons-hive hivecommons-hive Bot added dco All commits are DCO signed-off role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head labels Oct 26, 2026
@netlify

netlify Bot commented Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for kubestellar-docs ready!

Name Link
🔨 Latest commit 208196f
🔍 Latest deploy log https://app.netlify.com/projects/kubestellar-docs/deploys/6adfc760a276121f1ad371b9
😎 Deploy Preview https://deploy-preview-7515--kubestellar-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dotenv-18.0.9 branch 2 times, most recently from 7f87453 to a8f1ad7 Compare October 26, 2026 21:32
@kubestellar-prow kubestellar-prow Bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Oct 26, 2026
@kubestellar-prow

kubestellar-prow Bot commented Oct 26, 2026

Copy link
Copy Markdown

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@hivecommons-hive hivecommons-hive Bot added stage/070-fixing Hive-authored PR: CI red, changes requested or needs rebase; a hive agent is fixing it and removed stage/050-review-pending Review swarm requested; awaiting a verdict for the current head labels Oct 26, 2026
@dependabot
chore(deps): Bump dotenv from 18.0.8 to 18.0.9
208196f 
Bumps [dotenv](https://github.com/motdotla/dotenv) from 18.0.8 to 18.0.9.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.8...v18.0.9)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dotenv-18.0.9 branch from a8f1ad7 to 208196f Compare October 26, 2026 21:34
@kubestellar-prow kubestellar-prow Bot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Oct 26, 2026
@hivecommons-hive hivecommons-hive Bot added stage/050-review-pending Review swarm requested; awaiting a verdict for the current head and removed stage/070-fixing Hive-authored PR: CI red, changes requested or needs rebase; a hive agent is fixing it labels Oct 26, 2026
@hivecommons-hive

hivecommons-hive Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor
208196f

ℹ️ Sentinel notice — informational; author is trusted (allow-listed bot), merge is not blocked

Hive flagged this PR (author @dependabot[bot], head 208196fc1e79) because it matches behaviors that can override security controls, escalate privileges or damage the codebase. This is a heuristic, not an accusation — a maintainer should confirm the change is intended before it merges.

  • sensitive_path — changes 2 sensitive path(s) (Touches a sensitive path (OWNERS, workflows, policies, hive config, security docs, …))
    • package-lock.json
    • package.json

Hive did not add the sentinel-alert label because this author is trusted. The finding remains recorded for audit and the dashboard Security tab; set sentinel.trusted_authors_block: true to require the blocking label for trusted authors too.

@hivecommons-hive
hivecommons-hive Bot merged commit 5c56816 into main Oct 26, 2026
13 of 14 checks passed
@kubestellar-prow
kubestellar-prow Bot deleted the dependabot/npm_and_yarn/dotenv-18.0.9 branch October 26, 2026 21:38
@hivecommons-hive

hivecommons-hive Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor
Evidence bundle `#7515208196f` sha256:66536269b9523dadf42be3fb54c98b54b0828e322d344f9b606337caf5347a99 — download from the dashboard or `hivectl review evidence #7515`.

@github-actions

github-actions Bot commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Thank you for your contribution! Your PR has been merged.

Check out what's new:

Stay connected: Slack #kubestellar-dev | Multi-Cluster Survey

@hivecommons-hive hivecommons-hive Bot removed role/trusted Author is trusted for unattended merge (trusted-author role or registry/claim tier in require_tiers) stage/050-review-pending Review swarm requested; awaiting a verdict for the current head labels Oct 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@clubanderson clubanderson Awaiting requested review from clubanderson clubanderson is a code owner
@KPRoche KPRoche Awaiting requested review from KPRoche KPRoche is a code owner

Assignees

No one assigned

Labels

copilot dco All commits are DCO signed-off dco-signoff: yes Indicates the PR's author has signed the DCO. dependencies Pull requests that update a dependency file frontend javascript json needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants