#3742 chore(deps): bump python-dotenv from 1.2.2 to 1.2.3 in the runtime-dependencies group Pull request opened by dependabot[bot] Bumps the runtime-dependencies group with 1 update: python-dotenv. Updates

python-dotenv

from 1.2.2 to 1.2.3 Release notes Sourced from python-dotenv's releases.

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from

.env

file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [`@​h1whelan`] in #640

•

set_key

now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [`@​dchaudhari7177`] in #680

•

dotenv run

now prints a friendly error instead of a traceback when no command is given by [`@​bbc2`] in #606

• Cache the parsed result for empty

.env

files so repeated `dotenv_values`/`load_dotenv` calls no longer re-read the file by [`@​ReinerBRO`] in #638

Changelog Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from

.env

file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [`@​h1whelan`] in #640

•

set_key

now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [`@​dchaudhari7177`] in #680

•

dotenv run

now prints a friendly error instead of a traceback when no command is given by [`@​bbc2`] in #606

• Cache the parsed result for empty

.env

files so repeated `dotenv_values`/`load_dotenv` calls no longer re-read the file by [`@​ReinerBRO`] in #638

Commits • `49515af` Bump version: 1.2.2 → 1.2.3 • `8ac846f` chore: add release runbook (RELEASING.md) and make release target • `bb31c94` docs: add 1.2.3 release notes (#606, #638, #680) • `f7b18d9` fix: round-trip backslashes through set_key (#680) • `751f8c1` ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro... • `f1937b6` chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t... • `45b9372` chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653) • `72896e9` docs: fix broken mkdocs link in CONTRIBUTING.md (#636) • `72754a1` ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a... • `078325e` ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ... • Additional commits viewable in compare view Dependabot compatibility score Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting

@dependabot rebase

. --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: •

@dependabot rebase

will rebase this PR •

@dependabot recreate

will recreate this PR, overwriting any edits that have been made to it •

@dependabot show <dependency name> ignore conditions

will show all of the ignore conditions of the specified dependency •

@dependabot ignore <dependency name> major version

will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) •

@dependabot ignore <dependency name> minor version

will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) •

@dependabot ignore <dependency name>

will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) •

@dependabot unignore <dependency name>

will remove all of the ignore conditions of the specified dependency •

@dependabot unignore <dependency name> <ignore condition>

will remove the ignore condition of the specified dependency and ignore conditions meltano/sdk