Compare Versions - dotenv
→
17.4.0 (2026-04-01)
Added
- Add
skills/folder with focused agent skills:skills/dotenv/SKILL.md(core usage) andskills/dotenvx/SKILL.md(encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (npx skills add motdotla/dotenv)
Changed
- Tighten up logs:
◇ injecting env (14) from .env(#1003)
17.3.0 (2026-02-12)
Added
- Add a new README section on dotenv’s approach to the agentic future.
Changed
- Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.
17.2.0 (2025-07-09)
Added
- Optionally specify
DOTENV_CONFIG_QUIET=truein your environment or.envfile to quiet the runtime log (#889) - Just like dotenv any
DOTENV_CONFIG_environment variables take precedence over any code set options like({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js
17.1.0 (2025-07-07)
Added
- Add additional security and configuration tips to the runtime log (#884)
- Dim the tips text from the main injection information text
const TIPS = [
'🔐 encrypt with dotenvx: https://dotenvx.com',
'🔐 prevent committing .env to code: https://dotenvx.com/precommit',
'🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
'🛠️ run anywhere with `dotenvx run -- yourcommand`',
'⚙️ specify custom .env file path with { path: \'/custom/path/.env\' }',
'⚙️ enable debug logging with { debug: true }',
'⚙️ override existing env vars with { override: true }',
'⚙️ suppress all logs with { quiet: true }',
'⚙️ write to custom object with { processEnv: myObject }',
'⚙️ load multiple .env files with { path: [\'.env.local\', \'.env\'] }'
]
16.6.1 (2025-06-27)
Changed
- Default
quietto true – hiding the runtime log message (#874) - NOTICE: 17.0.0 will be released with quiet defaulting to false. Use
config({ quiet: true })to suppress. - And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch
require('dotenv').config()forrequire('@dotenvx/dotenvx').config().
16.5.0 (2025-04-07)
Added
- 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.
[!TIP] Become a sponsor
The dotenvx README is viewed thousands of times DAILY on GitHub and NPM. Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.
Changed
- Remove
_logmethod. Use_debug#862
16.1.3 (2023-05-31)
Removed
- Removed
browserkeys forpath,os, andcryptoin package.json. These were set to false incorrectly as of 16.1. Instead, if using dotenv on the front-end make sure to include polyfills forpath,os, andcrypto. node-polyfill-webpack-plugin provides these.
16.1.1 (2023-05-30)
Added
- Added type definition for
decryptfunction
Changed
- Fixed
{crypto: false}inpackageJson.browser
16.1.0 (2023-05-30)
Added
- Add
populateconvenience method #733 - Accept URL as path option #720
- Add dotenv to
npm fundcommand - Spanish language README #698
- Add
.env.vaultsupport. 🎉 (#730)
ℹ️ .env.vault extends the .env file format standard with a localized encrypted vault file. Package it securely with your production code deploys. It's cloud agnostic so that you can deploy your secrets anywhere – without risky third-party integrations. read more
Changed
- Fixed "cannot resolve 'fs'" error on tools like Replit #693
16.0.2 (2022-08-30)
Added
- Export
env-options.jsandcli-options.jsin package.json for use with downstream dotenv-expand module
15.0.0 (2022-01-31)
v15.0.0 is a major new release with some important breaking changes.
Added
- Breaking: Multiline parsing support (just works. no need for the flag.)
Changed
- Breaking:
#marks the beginning of a comment (UNLESS the value is wrapped in quotes. Please update your.envfiles to wrap in quotes any values containing#. For example:SECRET_HASH="something-with-a-#-hash").
..Understandably, (as some teams have noted) this is tedious to do across the entire team. To make it less tedious, we recommend using dotenv cli going forward. It's an optional plugin that will keep your .env files in sync between machines, environments, or team members.
Removed
- Breaking: Remove multiline option (just works out of the box now. no need for the flag.)
14.2.0 (2022-01-17)
Added
- Add
dotenv_config_overridecli option - Add
DOTENV_CONFIG_OVERRIDEcommand line env option
10.0.0 (2021-05-20)
Added
- Add generic support to parse function
- Allow for import "dotenv/config.js"
- Add support to resolve home directory in path via ~
8.3.0 (2021-05-05)
Changed
- Breaking: drop support for Node v8 (mistake to be released as minor bump. later bumped to 9.0.0. see above.)
[7.0.0] - 2019-03-12
Fixed
- Fix removing unbalanced quotes (#376)
Removed
- Removed
loadalias forconfigfor consistency throughout code and documentation.
[6.1.0] - 2018-10-08
Added
debugoption forconfigandparsemethods will turn on logging
[5.0.0] - 2018-01-29
Added
- Testing against Node v8 and v9
- Documentation on trim behavior of values
- Documentation on how to use with
import
Changed
- Breaking: default
pathis nowpath.resolve(process.cwd(), '.env') - Breaking: does not write over keys already in
process.envif the key has a falsy value - using
constandletinstead ofvar
Removed
- Testing against Node v7
[4.0.0] - 2016-12-23
Changed
- Return Object with parsed content or error instead of false (#165).
Removed
verboseoption removed in favor of returning result.
[3.0.0] - 2016-12-20
Added
verboseoption will log any error messages. Off by default.- parses email addresses correctly
- allow importing config method directly in ES6
Changed
- Suppress error messages by default (#154)
- Ignoring more files for NPM to make package download smaller
Fixed
- False positive test due to case-sensitive variable (#124)
Removed
silentoption removed in favor ofverbose
[2.0.0] - 2016-01-20
Added
- CHANGELOG to "make it easier for users and contributors to see precisely what notable changes have been made between each release". Linked to from README
- LICENSE to be more explicit about what was defined in
package.json. Linked to from README - Testing nodejs v4 on travis-ci
- added examples of how to use dotenv in different ways
- return parsed object on success rather than boolean true
Changed
- README has shorter description not referencing ruby gem since we don't have or want feature parity
Removed
- Variable expansion and escaping so environment variables are encouraged to be fully orthogonal
[1.2.0] - 2015-06-20
Added
- Preload hook to require dotenv without including it in your code
Changed
- clarified license to be "BSD-2-Clause" in
package.json
Fixed
- retain spaces in string vars
[1.1.0] - 2015-03-31
Added
- Silent option to silence
console.logwhen.envmissing