[Snyk] Upgrade dotenv from 16.0.1 to 16.3.1

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade dotenv from 16.0.1 to 16.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 12 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-06-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Undesired Behavior SNYK-JS-STYLEDCOMPONENTS-3149924	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: dotenv

• 16.3.1 - 2023-06-17
  

  16.3.1

• 16.3.0 - 2023-06-16
  

  16.3.0

• 16.2.0 - 2023-06-16
  

  16.2.0

• 16.1.4 - 2023-06-04
  

  16.1.4

• 16.1.3 - 2023-05-31
  

  16.1.3

• 16.1.2 - 2023-05-31
  

  16.1.2

• 16.1.1 - 2023-05-31
  

  v16.1.1

• 16.1.0 - 2023-05-30
  

  Update CHANGELOG and README

• 16.1.0-rc2 - 2023-05-21
  

  Version 16.1.0-rc2

• 16.1.0-rc1 - 2023-04-07
  

  16.1.0-rc1

• 16.0.3 - 2022-09-29
• 16.0.2 - 2022-08-30
• 16.0.1 - 2022-05-10

from dotenv GitHub release notes

Commit messages

Package name: dotenv

• b13ca7b 16.3.1
• 9bcc2e7 Merge pull request repo sync github/docs#756 from motdotla/type-fix
• 80fff4b Add type definition for DOTENV_KEY
• 50163a1 update type file
• 5c7d7f5 Add example demonstrating setting DOTENV_KEY
• 76d3682 16.3.0
• 80219ae Merge pull request repo sync github/docs#754 from motdotla/dotenv-key-option
• dacd450 Add DOTENV_KEY to cli config and environment config options
• f20e646 Add options.DOTENV_KEY
• 5861f6a Add failing test demonstrating need for DOTENV_KEY option
• 4f48954 Update README
• ab578c1 Add example of writing to a custom object rather than process.env
• a0e21a5 16.2.0
• 406f2c3 Merge pull request #753 from motdotla/target
• ea8db8c update README
• 431521d Update CHANGELOG and README
• 96c29b4 Add ability to change the target from process.env to your own object
• 75cee88 Update CHANGELOG
• 0a87d62 Merge pull request The Japanese translation of creating-a-composite-run-steps-action.md is wrong github/docs#751 from Jakousa/patch-1
• ad2f100 fix missing import
• dc1cd6c 16.1.4
• be94778 Update CHANGELOG
• 4443c59 Merge pull request repo sync github/docs#747 from ericcornelissen/patch-1
• f003766 Add .github/ to .npmignore

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: db9639a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR