将 dotenv 从 16.x 升级到 17.x

根据 TypeScript 类型自动比较 dotenv 16.6.1 与 17.4.2 的公开 API。签名变化表示可能存在不兼容变更，并非确定结论。

概要

已删除的导入路径	0
已删除的导出	0
已修改的签名	1
已删除的类或接口成员	0
已修改的类或接口成员	1
新增弃用	0
要求变化（engines、peer 依赖）	0
新增导出	2

已删除的导出

未发现。

已修改的签名

export	之前	之后
`dotenv · populate`	`(processEnv: DotenvPopulateInput, parsed: DotenvPopulateInput, options?: DotenvConfigOptions \| undefined): void`	`(processEnv: DotenvPopulateInput, parsed: DotenvPopulateInput, options?: DotenvPopulateOptions \| undefined): DotenvPopulateOutput`

已删除的类或接口成员

未发现。

已修改的类或接口成员

member	之前	之后
`DotenvConfigOutput.error`	`Error \| undefined`	`DotenvError \| undefined`

新增弃用

未发现。

要求变化（engines、peer 依赖）

未发现。

新增导出 (2)

import	export	kind
`dotenv`	`DotenvError`	type
`dotenv`	`DotenvPopulateOutput`	interface

这些版本之间的 changelog

软件包作者发布的文本，按原样显示。

17.4.2

### Changed

* Improved skill files - tightened up details ([#1009](https://github.com/motdotla/dotenv/pull/1009))

17.4.1

### Changed

* Change text `injecting` to `injected` ([#1005](https://github.com/motdotla/dotenv/pull/1005))

17.4.0

### Added

* Add `skills/` folder with focused agent skills: `skills/dotenv/SKILL.md` (core usage) and `skills/dotenvx/SKILL.md` (encryption, multiple environments, variable expansion) for AI coding agent discovery via the skills.sh ecosystem (`npx skills add motdotla/dotenv`)

### Changed

* Tighten up logs: `◇ injecting env (14) from .env` ([#1003](https://github.com/motdotla/dotenv/pull/1003))

17.3.1

### Changed

* Fix as2 example command in README and update spanish README

17.3.0

### Added

* Add a new README section on dotenv’s approach to the agentic future.

### Changed

* Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

17.2.4

### Changed

* Make `DotenvPopulateInput` accept `NodeJS.ProcessEnv` type ([#915](https://github.com/motdotla/dotenv/pull/915))
- Give back to dotenv by checking out my newest project [vestauth](https://github.com/vestauth/vestauth). It is auth for agents. Thank you for using my software.

17.2.3

### Changed

* Fixed typescript error definition ([#912](https://github.com/motdotla/dotenv/pull/912))

17.2.2

### Added

- 🙏 A big thank you to new sponsor [Tuple.app](https://tuple.app/dotenv) - *the premier screen sharing app for developers on macOS and Windows.* Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1

### Changed

* Fix clickable tip links by removing parentheses ([#897](https://github.com/motdotla/dotenv/pull/897))

17.2.0

### Added

* Optionally specify `DOTENV_CONFIG_QUIET=true` in your environment or `.env` file to quiet the runtime log ([#889](https://github.com/motdotla/dotenv/pull/889))
* Just like dotenv any `DOTENV_CONFIG_` environment variables take precedence over any code set options like `({quiet: false})`

```ini
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
```
```js
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
```
```sh
$ node index.js
Hello World

or

$ DOTENV_CONFIG_QUIET=true node index.js
```

17.1.0

### Added

* Add additional security and configuration tips to the runtime log ([#884](https://github.com/motdotla/dotenv/pull/884))
* Dim the tips text from the main injection information text

```js
const TIPS = [
  '🔐 encrypt with dotenvx: https://dotenvx.com',
  '🔐 prevent committing .env to code: https://dotenvx.com/precommit',
  '🔐 prevent building .env in docker: https://dotenvx.com/prebuild',
  '🛠️  run anywhere with `dotenvx run -- yourcommand`',
  '⚙️  specify custom .env file path with { path: \'/custom/path/.env\' }',
  '⚙️  enable debug logging with { debug: true }',
  '⚙️  override existing env vars with { override: true }',
  '⚙️  suppress all logs with { quiet: true }',
  '⚙️  write to custom object with { processEnv: myObject }',
  '⚙️  load multiple .env files with { path: [\'.env.local\', \'.env\'] }'
]
```

17.0.1

### Changed

* Patched injected log to count only populated/set keys to process.env ([#879](https://github.com/motdotla/dotenv/pull/879))

17.0.0

### Changed

- Default `quiet` to false - informational (file and keys count) runtime log message shows by default ([#875](https://github.com/motdotla/dotenv/pull/875))

把这些数据交给你的 AI 智能体

Vigia 是免费的 MCP 服务器：你的编程智能体在写代码之前就能检查版本、不兼容变更和安全漏洞。无需注册，无需 API 密钥。

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

添加到 Cursor 添加到 VS Code ★ 在 GitHub 上加星

任何其他 MCP 客户端

{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

智能体技能（SKILL.md）：告诉智能体何时使用 Vigia · 用于拉取请求的 GitHub Action

常见问题

将 dotenv 从 16 升级到 17 有哪些不兼容变更？

在 dotenv 16.6.1 与 17.4.2 之间，Vigia 发现 0 个已删除的导出、1 个已修改的签名，以及 1 个已删除或修改的类或接口成员。

dotenv 17 中弃用了哪些内容？

dotenv 17.4.2 中有 0 个导出或成员新被标记为弃用。

供智能体使用

GET https://vigia.coredls.cloud/v1/packages/npm/dotenv/upgrade?from=16.6.1&to=17.4.2