Skip to content

Bound fast parser comment scans to the current line - #1066

Merged
motdotla merged 2 commits into
motdotla:masterfrom
AyanAta42:master
Sep 30, 2026
Merged

motdotla merged 2 commits into
motdotla:masterfrom
AyanAta42:master

Conversation

@AyanAta42

Copy link
Copy Markdown

Avoid repeated suffix-wide # searches in parseFast by stopping at the current line boundary. Parser fixtures and edge-case comparisons pass, a comment sparse 16,003 assignment benchmark improved by 11.72 times.

@motdotla

Copy link
Copy Markdown
Owner

hmm this is cool but it actually hurts performance for more typical .env file sizes... anyway you could support both? keep the high performance for typical .env files of like 20 records but then still handle this worst case scenario performance.

@AyanAta42

Copy link
Copy Markdown
Author

You're right. I have updated the fast parser to keep the original indexOf path for inputs under 4 KiB and use the bounded scan for larger inputs. In local Node v24 benchmarks, the hybrid was about 1.06× on a 20 record file and 36× on a 16,000 record comment free file. Results are workload and environment dependent. fixture, comment, and multiline output parity checks passed.

@motdotla

Copy link
Copy Markdown
Owner

thanks for adding the small file fallback. appreciate it. merging.

@motdotla
motdotla merged commit 2d640d2 into motdotla:master Sep 30, 2026
8 checks passed
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 2, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.5 |


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 2, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.5 |


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 3, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.5 |


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 4, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.5 |


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 6, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.6 |


## [v18.0.6](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06)

##### Changed

- Use smarter `parseBoolean` not Boolean() to fix override ([#1069](motdotla/dotenv#1069))


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

##### Changed

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

[faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html)

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 6, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.6 |


## [v18.0.6](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06)

##### Changed

- Use smarter `parseBoolean` not Boolean() to fix override ([#1069](motdotla/dotenv#1069))


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

##### Changed

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

[faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html)

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
OIRNOIR pushed a commit to OIRNOIR/YouTube-Helper-Server that referenced this pull request Oct 7, 2026
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [dotenv](https://github.com/motdotla/dotenv) | imports | patch | [`18.0.4` -> `18.0.5`](https://renovatebot.com/diffs/npm/dotenv/18.0.4/18.0.5) | `18.0.6` |

---

### Release Notes

<details>
<summary>motdotla/dotenv (dotenv)</summary>

### [`v18.0.5`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

[Compare Source](motdotla/dotenv@v18.0.4...v18.0.5)

##### Changed

- Fix missing typescript module declaration ([#&#8203;1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#&#8203;1066](motdotla/dotenv#1066))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMiIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Reviewed-on: https://git.oirnoir.dev/OIRNOIR/YouTube-Helper-Server/pulls/52
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 9, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.7 |


## [v18.0.7](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1807-2026-10-09)

##### Changed

- Treat undefined settings like `quiet: true` as null rather than falsey ([#1070](motdotla/dotenv#1070))
- CLI should honor `DOTENV_QUIET` setting in `.env` file ([#1071](motdotla/dotenv#1071))


## [v18.0.6](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06)

##### Changed

- Use smarter `parseBoolean` not Boolean() to fix override ([#1069](motdotla/dotenv#1069))


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

##### Changed

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

[faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html)

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
renovate Bot added a commit to andrei-picus-tink/auto-renovate that referenced this pull request Oct 10, 2026
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.7 |


## [v18.0.7](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1807-2026-10-09)

##### Changed

- Treat undefined settings like `quiet: true` as null rather than falsey ([#1070](motdotla/dotenv#1070))
- CLI should honor `DOTENV_QUIET` setting in `.env` file ([#1071](motdotla/dotenv#1071))


## [v18.0.6](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06)

##### Changed

- Use smarter `parseBoolean` not Boolean() to fix override ([#1069](motdotla/dotenv#1069))


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

##### Changed

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

[faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html)

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))
markharding pushed a commit to futo-org/Harbor that referenced this pull request Oct 23, 2026
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [dotenv](https://github.com/motdotla/dotenv) | [`^17.4.2` → `^18.0.0`](https://renovatebot.com/diffs/npm/dotenv/17.4.2/18.0.8) | ![age](https://developer.mend.io/api/mc/badges/age/npm/dotenv/18.0.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/dotenv/17.4.2/18.0.8?slim=true) |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/99) for more information.

---

### Release Notes

<details>
<summary>motdotla/dotenv (dotenv)</summary>

### [`v18.0.8`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1808-2026-10-14)

[Compare Source](motdotla/dotenv@v18.0.7...v18.0.8)

##### Changed

- Fast parser should strip appended extra quotes ([#&#8203;1073](motdotla/dotenv#1073))
- Type detail improvement ([#&#8203;1074](motdotla/dotenv#1074))

### [`v18.0.7`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1807-2026-10-09)

[Compare Source](motdotla/dotenv@v18.0.6...v18.0.7)

##### Changed

- Treat undefined settings like `quiet: true` as null rather than falsey ([#&#8203;1070](motdotla/dotenv#1070))
- CLI should honor `DOTENV_QUIET` setting in `.env` file ([#&#8203;1071](motdotla/dotenv#1071))

### [`v18.0.6`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06)

[Compare Source](motdotla/dotenv@v18.0.5...v18.0.6)

##### Changed

- Use smarter `parseBoolean` not Boolean() to fix override ([#&#8203;1069](motdotla/dotenv#1069))

### [`v18.0.5`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

[Compare Source](motdotla/dotenv@v18.0.4...v18.0.5)

##### Changed

- Fix missing typescript module declaration ([#&#8203;1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#&#8203;1066](motdotla/dotenv#1066))

### [`v18.0.4`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

[Compare Source](motdotla/dotenv@v18.0.3...v18.0.4)

##### Changed

- `import dotenv/config` should default quiet: true ([#&#8203;1063](motdotla/dotenv#1063))

### [`v18.0.3`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

[Compare Source](motdotla/dotenv@v18.0.2...v18.0.3)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#&#8203;1059](motdotla/dotenv#1059))

### [`v18.0.2`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

[Compare Source](motdotla/dotenv@v18.0.1...v18.0.2)

##### Changed

- Patch additional edge cases for the fast parser ([#&#8203;1056](motdotla/dotenv#1056))

### [`v18.0.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

[Compare Source](motdotla/dotenv@v18.0.0...v18.0.1)

##### Changed

- Handle file urls in config logging ([#&#8203;1054](motdotla/dotenv#1054))

### [`v18.0.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

[Compare Source](motdotla/dotenv@v17.4.2...v18.0.0)

##### Added

- NEW: Dotenv now has a CLI. ([#&#8203;1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@&#8203;homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#&#8203;1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

[faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html)

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#&#8203;1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#&#8203;1031](motdotla/dotenv#1031))
- Remove skill files ([#&#8203;1032](motdotla/dotenv#1032))
- Remove Spanish README ([#&#8203;1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#&#8203;1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#&#8203;1035](motdotla/dotenv#1035))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 9am on tuesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE3NS4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSJdfQ==-->

Reviewed-on: https://code.futo.org/harbor/harbor/pulls/1849
markharding pushed a commit to futo-org/Harbor that referenced this pull request Oct 29, 2026
This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [dotenv](https://github.com/motdotla/dotenv) | [`^17.4.2` → `^18.0.0`](https://renovatebot.com/diffs/npm/dotenv/17.4.2/18.0.8) | ![age](https://developer.mend.io/api/mc/badges/age/npm/dotenv/18.0.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/dotenv/17.4.2/18.0.8?slim=true) |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/99) for more information.

---

### Release Notes

<details>
<summary>motdotla/dotenv (dotenv)</summary>

### [`v18.0.8`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1808-2026-10-14)

[Compare Source](motdotla/dotenv@v18.0.7...v18.0.8)

##### Changed

- Fast parser should strip appended extra quotes ([#&#8203;1073](motdotla/dotenv#1073))
- Type detail improvement ([#&#8203;1074](motdotla/dotenv#1074))

### [`v18.0.7`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1807-2026-10-09)

[Compare Source](motdotla/dotenv@v18.0.6...v18.0.7)

##### Changed

- Treat undefined settings like `quiet: true` as null rather than falsey ([#&#8203;1070](motdotla/dotenv#1070))
- CLI should honor `DOTENV_QUIET` setting in `.env` file ([#&#8203;1071](motdotla/dotenv#1071))

### [`v18.0.6`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06)

[Compare Source](motdotla/dotenv@v18.0.5...v18.0.6)

##### Changed

- Use smarter `parseBoolean` not Boolean() to fix override ([#&#8203;1069](motdotla/dotenv#1069))

### [`v18.0.5`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

[Compare Source](motdotla/dotenv@v18.0.4...v18.0.5)

##### Changed

- Fix missing typescript module declaration ([#&#8203;1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#&#8203;1066](motdotla/dotenv#1066))

### [`v18.0.4`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

[Compare Source](motdotla/dotenv@v18.0.3...v18.0.4)

##### Changed

- `import dotenv/config` should default quiet: true ([#&#8203;1063](motdotla/dotenv#1063))

### [`v18.0.3`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

[Compare Source](motdotla/dotenv@v18.0.2...v18.0.3)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#&#8203;1059](motdotla/dotenv#1059))

### [`v18.0.2`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

[Compare Source](motdotla/dotenv@v18.0.1...v18.0.2)

##### Changed

- Patch additional edge cases for the fast parser ([#&#8203;1056](motdotla/dotenv#1056))

### [`v18.0.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

[Compare Source](motdotla/dotenv@v18.0.0...v18.0.1)

##### Changed

- Handle file urls in config logging ([#&#8203;1054](motdotla/dotenv#1054))

### [`v18.0.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

[Compare Source](motdotla/dotenv@v17.4.2...v18.0.0)

##### Added

- NEW: Dotenv now has a CLI. ([#&#8203;1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@&#8203;homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#&#8203;1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

[faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html)

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#&#8203;1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#&#8203;1031](motdotla/dotenv#1031))
- Remove skill files ([#&#8203;1032](motdotla/dotenv#1032))
- Remove Spanish README ([#&#8203;1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#&#8203;1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#&#8203;1035](motdotla/dotenv#1035))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "before 9am on tuesday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE3NS4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcCIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSJdfQ==-->

Reviewed-on: https://code.futo.org/harbor/harbor/pulls/1849
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants