From f0ba20cd5cd19f9ea7c0f14fc647dffc634376a8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Jun 2023 05:12:07 +0000 Subject: [PATCH 1/2] chore(deps): bump dotenv from 16.1.1 to 16.1.3 Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.1.1 to 16.1.3. - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](https://github.com/motdotla/dotenv/compare/v16.1.1...v16.1.3) --- updated-dependencies: - dependency-name: dotenv dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- sites/backend/package.json | 2 +- yarn.lock | 23 ++++------------------- 2 files changed, 5 insertions(+), 20 deletions(-) diff --git a/sites/backend/package.json b/sites/backend/package.json index 789fbf58484..37989cd71a2 100644 --- a/sites/backend/package.json +++ b/sites/backend/package.json @@ -33,7 +33,7 @@ "bcryptjs": "2.4.3", "cors": "2.8.5", "crypto": "1.0.1", - "dotenv": "16.1.1", + "dotenv": "16.1.3", "express": "4.18.2", "js-yaml": "4.1.0", "lodash.get": "4.4.2", diff --git a/yarn.lock b/yarn.lock index 45f3b1fad2e..efb1bccfb33 100644 --- a/yarn.lock +++ b/yarn.lock @@ -3607,21 +3607,6 @@ get-random-values-esm "^1.0.0" lodash "^4.17.21" -"@sanity/cli@3.11.3": - version "3.11.3" - resolved "https://registry.yarnpkg.com/@sanity/cli/-/cli-3.11.3.tgz#1c6edb7bc9ddb930e406f1bde622baf93494f7e4" - integrity sha512-wKnsOOk40ErAGe1rzxpqk0vGWd3R9hK7z0BxPI04ejzCIK7sAmJnMROuyubSpWuWRzgf1FHdnsEkD8UPBdFYhA== - dependencies: - "@babel/traverse" "^7.19.0" - "@vercel/frameworks" "1.4.2" - "@vercel/fs-detectors" "3.9.2" - chalk "^4.1.2" - esbuild "^0.16.5" - esbuild-register "^3.4.1" - get-it "^8.0.9" - golden-fleece "^1.0.9" - pkg-dir "^5.0.0" - "@sanity/cli@3.11.5": version "3.11.5" resolved "https://registry.yarnpkg.com/@sanity/cli/-/cli-3.11.5.tgz#ee4f4fc4a17e8e348b089481f70f5ca01415739f" @@ -7769,10 +7754,10 @@ dot-prop@^5.1.0, dot-prop@^5.2.0: dependencies: is-obj "^2.0.0" -dotenv@16.1.1: - version "16.1.1" - resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.1.1.tgz#9105a6c486ab66076231fbe7cf4ba77131a61d65" - integrity sha512-UGmzIqXU/4b6Vb3R1Vrfd/4vGgVlB+mO+vEixOdfRhLeppkyW2BMhuK7TL8d0el+q9c4lW9qK2wZYhNLFhXYLA== +dotenv@16.1.3: + version "16.1.3" + resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.1.3.tgz#0c67e90d0ddb48d08c570888f709b41844928210" + integrity sha512-FYssxsmCTtKL72fGBSvb1K9dRz0/VZeWqFme/vSb7r7323x4CRaHu4LvQ5JG3+s6yt2YPbBrkpiEODktfyjI9A== dotenv@~10.0.0: version "10.0.0" From 15fa49b6ff8b2e23f40bc43edc1b953d2949aa84 Mon Sep 17 00:00:00 2001 From: github-actions Date: Fri, 2 Jun 2023 05:14:42 +0000 Subject: [PATCH 2/2] [dependabot skip] chore(deps): bumped dependabot/npm_and_yarn/dotenv-16.1.3 changes in config/dependencies.yaml --- config/dependencies.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/dependencies.yaml b/config/dependencies.yaml index 91879dba8a7..454d75cb134 100644 --- a/config/dependencies.yaml +++ b/config/dependencies.yaml @@ -192,7 +192,7 @@ backend: 'bcryptjs': '2.4.3' 'cors': '2.8.5' 'crypto': '1.0.1' - 'dotenv': '16.1.1' + 'dotenv': '16.1.3' 'express': '4.18.2' 'js-yaml': *jsyaml 'lodash.get': *_get