fix(deps): update dependency dotenv-expand to v13

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
dotenv-expand	^5.1.0 → ^13.0.0

---

Release Notes

motdotla/dotenv-expand (dotenv-expand)

v13.0.0

Compare Source

Changed

• bump dotenv to v17

v12.0.3

Compare Source

Added

• 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

v12.0.2

Compare Source

Added

• 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx-expand README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv and dotenv-expand is a great way to get in front of developers and give back to the developer community at the same time.

v12.0.1

Compare Source

Changed

• break logic on runningParsed (#ad887)

v12.0.0

Compare Source

Added

• 🎉 support alternate value expansion (see usage) (#​131)

Changed

• 🎉 Expansion logic rewritten to match dotenvx (#​131)

NOTE: I recommend dotenvx over dotenv-expand when you are ready. I'm putting all my effort there for a unified standard .env implementation that works everywhere and matches bash, docker-compose, and more. In some cases it slightly improves on them - leading to more reliability for your secrets and config.

• ⚠️ BREAKING: do NOT attempt expansion of process.env (#​131)

This has always been dangerous (unexpected side effects) and is now removed. process.env should not hold values you want to expand. If for some reason you need equivalent abilities, use dotenvx. You can ship an encrypted .env file with your code - allowing safe expansion at runtime - rather than relying on trying to expand pre-existing process.env values that could for good reason have a dollar sign in them (example a password).

v11.0.7

Compare Source

Changed

• 🐞 fix self-expanding undefined variable with default value (#​126)

v11.0.6

Compare Source

Changed

• Fix .nyc_output in .npmignore

v11.0.5

Compare Source

Changed

• 🐞 fix recursive expansion when expansion key is sourced from process.env (#​121)

v11.0.4

Compare Source

Changed

• 🐞 fix recursive expansion when expansion keys in reverse order (#​118)

v11.0.3

Compare Source

Changed

• 🐞 bug fix when processEnv set to process.env rather than empty object (also test fixes which hid the bug) (#​113)

v11.0.2

Compare Source

Changed

• Changed funding link in package.json to dotenvx.com

v11.0.1

Compare Source

Added

• Added funding link in package.json

v11.0.0

Compare Source

Added

• Add typings for import dotenv-expand/config (#​99)
• Support expansion of dot in env variable names like POSTGRESQL.BASE.USER (#​93)
• Add processEnv option (#​105)
• Add support for default format of ${VAR-default} (#​109)

Changed

• Do not expand prior process.env environment variables. NOTE: make sure to see updated README regarding dotenv.config({ processEnv: {} }) (#​104)
• 🐞 handle $var1$var2 (#​103, #​104)
• 🐞 fix fatal recursive error when variable defines value with same variable VAR=$VAR #​98

Removed

• Remove ignoreProcessEnv option (use processEnv option going forward)

v10.0.0

Compare Source

Added

• Support special characters in default expansion (#​74)

v9.0.0

Compare Source

Added

• Proper support for preload and cli args (#​78)

v8.0.3

Compare Source

Changed

• 🐞 Fixed defaults bug (#​71)

v8.0.2

Compare Source

Changed

• 🐞 Fixed preloading bug

v8.0.1

Compare Source

Added

• Added config.js to package.json lookups

v8.0.0

Compare Source

Changed

• Breaking: Bump to v16.0.0 of dotenv

Added

• Preload support 🎉 (#​31)

v7.0.0

Compare Source

Changed

• Breaking: Bump to v15.0.0 of dotenv

v6.0.1

Compare Source

Changed

• Updated README

v6.0.0

Compare Source

Changed

• Breaking Move default export to export of expand function (#​14b1f2)

Added

• Add default expansion 🎉 (#​39)
• Add missing type descriptions

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.