Skip to content

Comments

dotenvy is the maintained fork recommended in RUSTSEC-2021-0141#35

Merged
bh2smith merged 1 commit intomainfrom
use-dotenvy
Feb 14, 2026
Merged

dotenvy is the maintained fork recommended in RUSTSEC-2021-0141#35
bh2smith merged 1 commit intomainfrom
use-dotenvy

Conversation

@bh2smith
Copy link
Collaborator

Resolving this warning:


error[unmaintained]: dotenv is Unmaintained
    ┌─ /github/workspace/Cargo.lock:325:1
    │
325 │ dotenv 0.15.0 registry+https://github.com/rust-lang/crates.io-index
    │ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ unmaintained advisory detected
    │
    ├ ID: RUSTSEC-2021-0141
    ├ Advisory: https://rustsec.org/advisories/RUSTSEC-2021-0141
    ├ dotenv by description is meant to be used in development or testing only.

@cursor
Copy link

cursor bot commented Feb 14, 2026

PR Summary

Low Risk
Dependency swap for .env loading with no behavioral changes expected beyond the underlying crate implementation.

Overview
Updates the crate to use dotenvy instead of the unmaintained dotenv dependency, including switching the import in src/client.rs and updating the from_env docs to reference the new crate.

Written by Cursor Bugbot for commit d315f35. Configure here.

@bh2smith bh2smith merged commit bcbf501 into main Feb 14, 2026
2 checks passed
@bh2smith bh2smith deleted the use-dotenvy branch February 14, 2026 07:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant