[dependabot]

Bumps @dotenvx/dotenvx from 2.32.4 to 2.38.2.

Release notes

Sourced from @​dotenvx/dotenvx's releases.

v2.38.2

see CHANGELOG

v2.38.1

see CHANGELOG

v2.38.0

see CHANGELOG

v2.37.0

see CHANGELOG

v2.36.0

see CHANGELOG

v2.35.0

see CHANGELOG

v2.34.2

see CHANGELOG

v2.34.1

see CHANGELOG

v2.34.0

see CHANGELOG

v2.33.0

see CHANGELOG

Changelog

Sourced from @​dotenvx/dotenvx's changelog.

2.38.2 (2026-10-20)

Changed

• Fix SEA crash (#1031)

2.38.1 (2026-10-19)

Changed

• Surface Armor approval prompts to stderr (#1030)

2.38.0 (2026-10-16)

Added

• Add getSync convenience (#1029)

Changed

• Default to file key storage in non-interactive mode (#1028)

2.37.0 (2026-10-15)

Added

• New: Dotenvx Armor Enclaved Keys - software enclaved on the remote provider like Vercel, GitHub Actions, and more. (#1026)

⛨ Choose key type …
  ⛨ Armored
❯ ◊ Enclaved

2.36.0 (2026-10-14)

Added

• Add dotenvx armor invite command (#1025)

2.35.0 (2026-10-13)

Added

• Add encrypt --with to bring public key. Useful for Dotenvx Armor's new remote enclaved private keys. Encrypt locally but decrypt only on the remote software enclave. Private keys never leave. (#1022)

Changed

• Use atomic file writes in protect (#1019)

... (truncated)

Commits

• c49df7e 2.38.2
• 736ca6f fix SEA crash
• bfd1db2 Merge pull request #1033 from dotenvx/sea-fix
• 0c16529 bump tooling to patch sea fix
• 5ab9bcf 2.38.1
• 9a469f1 changelog
• bb322cc Merge pull request #1030 from dotenvx/patch-encrypt-hanging
• 6af6665 also handle remote decrypt
• b22c816 surface approval requests to stderr
• 5132af9 2.38.0
• Additional commits viewable in compare view

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: df54ce74-3ea4-4211-82df-b47b33e11d00

Commits

Reviewing files that changed from the base of the PR and between be505a9 and ff7dd0e.

Files ignored due to path filters: 1

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

Files selected for processing: 1

• package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 8 remain after this review.

Walkthrough

The @dotenvx/dotenvx development dependency range changes from ^2.32.4 to ^2.38.2.

Changes: dotenvx Dependency Update

Layer / File(s)	Summary
Update dotenvx dependency range package.json	The @dotenvx/dotenvx development dependency range changes to ^2.38.2.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: dahlia

Merge Risk: Minimal · up to ff7dd

This dependency-only update is ready to merge with normal checks.

Architecture risk: Low · up to ff7dd

The change affects 1 system.

Changed systems: package.json

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — package.json (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in package.json: Updated the @dotenvx/dotenvx devDependency range from ^2.32.4 to ^2.38.2.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title names the main change: a Dependabot-style bump of @dotenvx/dotenvx from 2.32.4 to 2.38.2. The raw summary confirms the only file change is the package.json devDependency version range for th…
Description check		The description states that it bumps @dotenvx/dotenvx from 2.32.4 to 2.38.2 and includes the release notes and changelog entries for the versions in that range. This directly relates to the package.js…
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names the main change: a Dependabot-style bump of @dotenvx/dotenvx from 2.32.4 to 2.38.2. The raw summary confirms the only file change is the package.json devDependency version range for this package, so the title matches the changeset.

Full details: Description check

Explanation

The description states that it bumps @dotenvx/dotenvx from 2.32.4 to 2.38.2 and includes the release notes and changelog entries for the versions in that range. This directly relates to the package.json change in the changeset.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}