chore(deps): bump dotenv from 16.x to 17.0.0 (#13228)

dependabot[bot] · caugner · web-flow · commit 958d8f1906f6 · 2025-07-01T09:25:17.000+02:00
* chore(deps): bump dotenv from 16.6.0 to 17.0.0
* chore(deps): bump dotenv from 16.5.0 to 17.0.0 in /cloud-function
* chore(dotenv): set `quiet: true` to maintain previous behavior

---------

Signed-off-by: dependabot[bot] &lt;support@github.com&gt;
Co-authored-by: dependabot[bot] &lt;49699333+dependabot[bot]@users.noreply.github.com&gt;
Co-authored-by: Claas Augner &lt;caugner@mozilla.com&gt;
diff --git a/build/build-options.ts b/build/build-options.ts
@@ -1,5 +1,5 @@
 import * as dotenv from "dotenv";
-dotenv.config();
+dotenv.config({ quiet: true });
 
 import { FLAW_LEVELS, VALID_FLAW_CHECKS } from "../libs/constants/index.js";
 import {
diff --git a/client/config/env.js b/client/config/env.js
@@ -18,6 +18,7 @@ const dotenvFile = ENV_FILE
 
 dotenv.config({
   path: dotenvFile,
+  quiet: true,
 });
 
 // We support resolving modules according to `NODE_PATH`.
diff --git a/cloud-function/package-lock.json b/cloud-function/package-lock.json
diff --git a/cloud-function/package.json b/cloud-function/package.json
@@ -38,7 +38,7 @@
     "@yari-internal/slug-utils": "file:src/internal/slug-utils",
     "accept-language-parser": "^1.5.0",
     "cookie-parser": "^1.4.7",
-    "dotenv": "^16.5.0",
+    "dotenv": "^17.0.0",
     "express": "^4.21.1",
     "http-proxy-middleware": "^3.0.5",
     "sanitize-filename": "^1.6.3"
diff --git a/cloud-function/src/build-canonicals.ts b/cloud-function/src/build-canonicals.ts
@@ -11,6 +11,7 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
 const root = join(__dirname, "..", "..");
 dotenv.config({
   path: join(root, process.env["ENV_FILE"] || ".env"),
+  quiet: true,
 });
 
 async function buildCanonicals() {
diff --git a/cloud-function/src/build-redirects.ts b/cloud-function/src/build-redirects.ts
@@ -11,6 +11,7 @@ const dirname = path.dirname(fileURLToPath(import.meta.url));
 const root = path.join(dirname, "..", "..");
 dotenv.config({
   path: path.join(root, process.env["ENV_FILE"] || ".env"),
+  quiet: true,
 });
 
 function buildRedirectsMap() {
diff --git a/cloud-function/src/env.ts b/cloud-function/src/env.ts
@@ -6,6 +6,7 @@ import { Request } from "express";
 
 dotenv.config({
   path: path.join(cwd(), process.env["ENV_FILE"] || ".env"),
+  quiet: true,
 });
 
 export const LOCAL_CONTENT = "http://localhost:8100/";
diff --git a/libs/env/index.js b/libs/env/index.js
@@ -22,6 +22,7 @@ function parse(value) {
 
 dotenv.config({
   path: path.join(cwd(), process.env.ENV_FILE || ".env"),
+  quiet: true,
 });
 
 // -----
diff --git a/package.json b/package.json
@@ -110,7 +110,7 @@
     "css-tree": "^2.3.1",
     "dayjs": "^1.11.13",
     "dexie": "^4.0.11",
-    "dotenv": "^16.6.0",
+    "dotenv": "^17.0.0",
     "ejs": "^3.1.10",
     "express": "^4.21.2",
     "fdir": "^6.4.6",
diff --git a/yarn.lock b/yarn.lock
@@ -6529,10 +6529,10 @@ dot-prop@^8.0.2:
   dependencies:
     type-fest "^3.8.0"
 
-dotenv@^16.6.0:
-  version "16.6.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.6.0.tgz#b96bd4e7c2043ba5f51cbe1b8f9347850c864850"
-  integrity sha512-Omf1L8paOy2VJhILjyhrhqwLIdstqm1BvcDPKg4NGAlkwEu9ODyrFbvk8UymUOMCT+HXo31jg1lArIrVAAhuGA==
+dotenv@^17.0.0:
+  version "17.0.0"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-17.0.0.tgz#0b0336dc1a4237bcfa772e01d5587e98ebb7e3c2"
+  integrity sha512-A0BJ5lrpJVSfnMMXjmeO0xUnoxqsBHWCoqqTnGwGYVdnctqXXUEhJOO7LxmgxJon9tEZFGpe0xPRX0h2v3AANQ==
 
 download@^6.2.2:
   version "6.2.5"
