From 493915bc8d489e301e6d9f218b8f8da27e0f5909 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 25 Jan 2022 03:36:36 -0800
Subject: [PATCH] Bump dotenv from 8.2.0 to 14.2.0 in /desktop (#3344)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Summary:
Bumps [dotenv](https://github.com/motdotla/dotenv) from 8.2.0 to 14.2.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.1.1...v14.2.0">14.2.0</a> (2022-01-17)</h2>
<h3>Added</h3>
<ul>
<li>Add <code>dotenv_config_override</code> cli option</li>
<li>Add <code>DOTENV_CONFIG_OVERRIDE</code> command line env option</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.1.0...v14.1.1">14.1.1</a> (2022-01-17)</h2>
<h3>Added</h3>
<ul>
<li>Add React gotcha to FAQ on README</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.0.1...v14.1.0">14.1.0</a> (2022-01-17)</h2>
<h3>Added</h3>
<ul>
<li>Add <code>override</code> option 🎉 (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/595">https://github.com/facebook/flipper/issues/595</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.0.0...v14.0.1">14.0.1</a> (2022-01-16)</h2>
<h3>Added</h3>
<ul>
<li>Log error on failure to load <code>.env</code> file (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/594">https://github.com/facebook/flipper/issues/594</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v13.0.1...v14.0.0">14.0.0</a> (2022-01-16)</h2>
<h3>Added</h3>
<ul>
<li><em>Breaking:</em> Support inline comments for the parser 🎉 (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/568">https://github.com/facebook/flipper/issues/568</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v13.0.0...v13.0.1">13.0.1</a> (2022-01-16)</h2>
<h3>Changed</h3>
<ul>
<li>Hide comments and newlines from debug output (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/404">https://github.com/facebook/flipper/issues/404</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v12.0.4...v13.0.0">13.0.0</a> (2022-01-16)</h2>
<h3>Added</h3>
<ul>
<li><em>Breaking:</em> Add type file for <code>config.js</code> (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/539">https://github.com/facebook/flipper/issues/539</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v12.0.3...v12.0.4">12.0.4</a> (2022-01-16)</h2>
<h3>Changed</h3>
<ul>
<li>README updates</li>
<li>Minor order adjustment to package json format</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/motdotla/dotenv/commit/aeae434e53836d2e46feed2ec13c3b7dddf42086"><code>aeae434</code></a> Version 14.2.0</li>
<li><a href="https://github.com/motdotla/dotenv/commit/78996affefc5ec5627d8797f44969c2bceb4c3ac"><code>78996af</code></a> Add override cli and env options</li>
<li><a href="https://github.com/motdotla/dotenv/commit/18b6e1ccdcac677f61fe7cdf10f8438e72470b37"><code>18b6e1c</code></a> Remove verbose test and move -Rspec option to standard test</li>
<li><a href="https://github.com/motdotla/dotenv/commit/fb38f298b42dd8f991b9ad551235417c59ac9f31"><code>fb38f29</code></a> Version 14.1.1</li>
<li><a href="https://github.com/motdotla/dotenv/commit/f1c38d5a67145ce5a9585b26efb73ea6305d3401"><code>f1c38d5</code></a> Update CHANGELOG</li>
<li><a href="https://github.com/motdotla/dotenv/commit/d1af7f8f2d459d4b510cd5fc4104a4811655fc53"><code>d1af7f8</code></a> Package lock update</li>
<li><a href="https://github.com/motdotla/dotenv/commit/5e922fea74f5a70f2b4505321e3c6d69f13cd238"><code>5e922fe</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/motdotla/dotenv/issues/596">https://github.com/facebook/flipper/issues/596</a> from darkgl0w/bump</li>
<li><a href="https://github.com/motdotla/dotenv/commit/1da837bdf58dbefb9e633184d6f2102cecc905f9"><code>1da837b</code></a> fix (test): no need to pass and call <code>done()</code></li>
<li><a href="https://github.com/motdotla/dotenv/commit/ec4b0fa00673eb177a4eb13bc5643d2a083c9e4d"><code>ec4b0fa</code></a> chore: upgrade package dependencies</li>
<li><a href="https://github.com/motdotla/dotenv/commit/6b0d2eb604f6cd76b55e231df78bc32bda248ec2"><code>6b0d2eb</code></a> Update README</li>
<li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v8.2.0...v14.2.0">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=8.2.0&new-version=14.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

 ---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

Pull Request resolved: https://github.com/facebook/flipper/pull/3344

Reviewed By: aigoncharov

Differential Revision: D33741763

Pulled By: lblasa

fbshipit-source-id: 7188e804d6230ec7504c8ff43a70463c7959d130
---
 desktop/scripts/package.json | 2 +-
 desktop/yarn.lock            | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/desktop/scripts/package.json b/desktop/scripts/package.json
index bc42c1e3e..33ab34a35 100644
--- a/desktop/scripts/package.json
+++ b/desktop/scripts/package.json
@@ -18,7 +18,7 @@
     "app-builder-lib": "22.14.12",
     "chalk": "^4.1.2",
     "detect-port": "^1.1.1",
-    "dotenv": "^8.2.0",
+    "dotenv": "^14.2.0",
     "electron-builder": "22.11.7",
     "express": "^4.17.2",
     "fb-watchman": "^2.0.1",
diff --git a/desktop/yarn.lock b/desktop/yarn.lock
index 95e7218a5..72f2a8a29 100644
--- a/desktop/yarn.lock
+++ b/desktop/yarn.lock
@@ -5261,10 +5261,10 @@ dotenv-expand@^5.1.0:
   resolved "https://registry.yarnpkg.com/dotenv-expand/-/dotenv-expand-5.1.0.tgz#3fbaf020bfd794884072ea26b1e9791d45a629f0"
   integrity sha512-YXQl1DSa4/PQyRfgrv6aoNjhasp/p4qs9FjJ4q4cQk+8m4r6k4ZSiEyytKG8f8W9gi8WsQtIObNmKd+tMzNTmA==
 
-dotenv@^8.2.0:
-  version "8.2.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-8.2.0.tgz#97e619259ada750eea3e4ea3e26bceea5424b16a"
-  integrity sha512-8sJ78ElpbDJBHNeBzUbUVLsqKdccaa/BXF1uPTw3GrvQTBgrQrtObr2mUrE38vzYd8cEv+m/JBfDLioYcfXoaw==
+dotenv@^14.2.0:
+  version "14.2.0"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-14.2.0.tgz#7e77fd5dd6cff5942c4496e1acf2d0f37a9e67aa"
+  integrity sha512-05POuPJyPpO6jqzTNweQFfAyMSD4qa4lvsMOWyTRTdpHKy6nnnN+IYWaXF+lHivhBH/ufDKlR4IWCAN3oPnHuw==
 
 dotenv@^9.0.2:
   version "9.0.2"