dotenv-vault-rails: Rotate DOTENV_KEY - Changelog
Added support for rotating DOTENV_KEY in dotenv-vault-rails.
Update to 0.10.0 or greater to support key rotation in Ruby and Rails.
Changelog
See what's new!
Smarter Encrypted Builds - Changelog
Now, npx dotenv-vault build regenerates itself only if there are changes.
This increases security and improves DX.
It improves security by minimizing the chance of a nonce collision - which would expose your DOTENV_KEY. (Please note this is still incredibly rare. You would have to rebuild your .env.vault file a few billion times before this might occur. Nonetheless, we prefer to minimize the possibility.)
It improves DX because it follows the principle of least surprise. You will see your .env.vault file change only after you’ve changed your values.
Extended Python Support - Changelog
python-dotenv-vault has extended support for:
- Comma separated DOTENV_KEY capability (for use with key rotation)
- Multiple environment support
These changes put python-dotenv-vault at parity with dotenv-vault-core.
python-dotenv-vault - Changelog
Decryption support for .env.vault files has been added to Python. If you’re using Flask, Django, FastAPI, or plain ol’ Python, you can use Dotenv Vault with it.
Check it out at python-dotenv-vault and tell your Python friends.
Rotate DOTENV_KEY - Changelog
Rotate your DOTENV_KEY with the following command:
$ npx dotenv-vault rotatekey production
Then:
- Update DOTENV_KEY by comma-appending the new value
- Rebuild and deploy your .env.vault file
- Update DOTENV_KEY by removing the old value
See docs for more information. Supported for NodeJS library. Ruby and Python support coming soon.
New Integrations - Changelog
We added a handful of new integrations. What should we add next?
Sign Up Confetti - Changelog
Something fun – confetti when you sign up.
Spam Protection with Turnstile - Changelog
We swapped our honeypot spam protection mechanism for Cloudflare Turnstile. It is more reliable at catching spam and the experience is still good – no annoying captchas identifying traffic signs.
New Docs - Changelog
We have updated our /docs site. It’s built with Jekyll. This way we’ve been able to make it public on GitHub – making it easy to edit.
Integrate Everywhere™ - Changelog
Integrate Everywhere™ is our new approach to integrations. It works everywhere you can deploy your code. No more brittle integrations coordinating API calls. Instead, build and encrypt your local .env.vault file, commit it to code, and deploy. There’s nothing else like it.
$ npx dotenv-vault build
$ git commit -am "Add .env.vault"
$ git push
