Update dependency dotenv-expand to v12

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dotenv-expand	^11.0.7 -> ^12.0.3

---

Release Notes

motdotla/dotenv-expand (dotenv-expand)

v12.0.3

Compare Source

Added

• 🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

v12.0.2

Compare Source

Added

• 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx-expand README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv and dotenv-expand is a great way to get in front of developers and give back to the developer community at the same time.

v12.0.1

Compare Source

Changed

• break logic on runningParsed (#ad887)

v12.0.0

Compare Source

Added

• 🎉 support alternate value expansion (see usage) (#​131)

Changed

• 🎉 Expansion logic rewritten to match dotenvx (#​131)

NOTE: I recommend dotenvx over dotenv-expand when you are ready. I'm putting all my effort there for a unified standard .env implementation that works everywhere and matches bash, docker-compose, and more. In some cases it slightly improves on them - leading to more reliability for your secrets and config.

• ⚠️ BREAKING: do NOT attempt expansion of process.env (#​131)

This has always been dangerous (unexpected side effects) and is now removed. process.env should not hold values you want to expand. If for some reason you need equivalent abilities, use dotenvx. You can ship an encrypted .env file with your code - allowing safe expansion at runtime - rather than relying on trying to expand pre-existing process.env values that could for good reason have a dollar sign in them (example a password).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.