c12: Request to pin the dependency dotenv to <17

[isHarryh]

The developer of dotenv adds a feature in dotenv@17 that a advertising message will be printed each time the application starts up, which is confusing for the users. See motdotla/dotenv#876

Can c12 pin dotenv to <17 to avoid this advertising behavior?

[pi0]

I think there an option to opt-out no?

[isHarryh]

Yes, users can manually disable the behavior: DOTENV_CONFIG_QUIET=true, or set an overrides in package.json (for pnpm). But it's inconvenient.

Btw, nestjs/config has already pin the dependency to v16: https://github.com/nestjs/config/blob/22fb2fea1402d167cf2db1858e083c1a7d4199ff/package.json#L21

[pi0]

What about a runtime flag? Since c12 is using it prgramatically we could do it by default

[pi0]

Update: I see there is options.quiet

[pi0]

Also c12 only uses dotenv.parse which does not emits that warn...

[isHarryh]

Sorry, my mistake. I missed a line when reading the output of pnpm why dotenv. The emission is indeed from another package, not c12's fault.

Sorry to disturb you. 🙏 Thank you and the unjs community!