fix(deps): update dependency dotenv-expand to v12

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
dotenv-expand	10.0.0 -> 12.0.1

---

Release Notes

motdotla/dotenv-expand (dotenv-expand)

v12.0.1

Compare Source

Changed

• break logic on runningParsed (#ad887)

v12.0.0

Compare Source

Added

• 🎉 support alternate value expansion (see usage) (#​131)

Changed

• 🎉 Expansion logic rewritten to match dotenvx (#​131)

NOTE: I recommend dotenvx over dotenv-expand when you are ready. I'm putting all my effort there for a unified standard .env implementation that works everywhere and matches bash, docker-compose, and more. In some cases it slightly improves on them - leading to more reliability for your secrets and config.

• ⚠️ BREAKING: do NOT attempt expansion of process.env (#​131)

This has always been dangerous (unexpected side effects) and is now removed. process.env should not hold values you want to expand. If for some reason you need equivalent abilities, use dotenvx. You can ship an encrypted .env file with your code - allowing safe expansion at runtime - rather than relying on trying to expand pre-existing process.env values that could for good reason have a dollar sign in them (example a password).

v11.0.7

Compare Source

Changed

• 🐞 fix self-expanding undefined variable with default value (#​126)

v11.0.6

Compare Source

Changed

• Fix .nyc_output in .npmignore

v11.0.5

Compare Source

Changed

• 🐞 fix recursive expansion when expansion key is sourced from process.env (#​121)

v11.0.4

Compare Source

Changed

• 🐞 fix recursive expansion when expansion keys in reverse order (#​118)

v11.0.3

Compare Source

Changed

• 🐞 bug fix when processEnv set to process.env rather than empty object (also test fixes which hid the bug) (#​113)

v11.0.2

Compare Source

Changed

• Changed funding link in package.json to dotenvx.com

v11.0.1

Compare Source

Added

• Added funding link in package.json

v11.0.0

Compare Source

Added

• Add typings for import dotenv-expand/config (#​99)
• Support expansion of dot in env variable names like POSTGRESQL.BASE.USER (#​93)
• Add processEnv option (#​105)
• Add support for default format of ${VAR-default} (#​109)

Changed

• Do not expand prior process.env environment variables. NOTE: make sure to see updated README regarding dotenv.config({ processEnv: {} }) (#​104)
• 🐞 handle $var1$var2 (#​103, #​104)
• 🐞 fix fatal recursive error when variable defines value with same variable VAR=$VAR #​98

Removed

• Remove ignoreProcessEnv option (use processEnv option going forward)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.