chore(deps): update dependency python-dotenv to v1.2.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
python-dotenv	==1.1.0 → ==1.2.3

---

Release Notes

theskumar/python-dotenv (python-dotenv)

v1.2.3

Compare Source

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in [#​640]
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in [#​680]
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in [#​606]
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in [#​638]

v1.2.2

Compare Source

Added

• Support for Python 3.14, including the free-threaded (3.14t) build. (#​588)

Changed

• The dotenv run command now forwards flags directly to the specified command by [@​bbc2] in [#​607]
• Improved documentation clarity regarding override behavior and the reference page.
• Updated PyPy support to version 3.11.
• Documentation for FIFO file support.
• Dropped Support for Python 3.9.

Fixed

• Improved set_key and unset_key behavior when interacting with symlinks by [@​bbc2] in [790c5c0]
• Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@​JYOuyang] in [#​590]

Breaking Changes

• dotenv.set_key and dotenv.unset_key used to follow symlinks in some
  situations. This is no longer the case. For that behavior to be restored in
  all cases, follow_symlinks=True should be used.

• In the CLI, set and unset used to follow symlinks in some situations. This
  is no longer the case.

• dotenv.set_key, dotenv.unset_key and the CLI commands set and unset
  used to reset the file mode of the modified .env file to 0o600 in some
  situations. This is no longer the case: The original mode of the file is now
  preserved. Is the file needed to be created or wasn't a regular file, mode
  0o600 is used.

v1.2.1

Compare Source

• Move more config to pyproject.toml, removed setup.cfg
• Add support for reading .env from FIFOs (Unix) by [@​sidharth-sudhir] in [#​586]

v1.2.0

Compare Source

• Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@​EpicWink] in [#​583]
• Add support for Python 3.14 by [@​23f3001135] in [#​579]
• Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@​matthewfranglen] in [#​569]

v1.1.1

Compare Source

Fixed

• CLI: Ensure find_dotenv work reliably on python 3.13 by [@​theskumar] in [#​563]
• CLI: revert the use of execvpe on Windows by [@​wrongontheinternet] in [#​566]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sourcery-ai]

Hi @renovate[bot]! 👋

Your private repo does not have access to Sourcery.

Please upgrade to continue using Sourcery ✨

[guardrails]

⚠️ We detected 1 security issue in this pull request:

Vulnerable Libraries (1)

Severity	Details
Low	pkg:pypi/pygments@2.19.1 (t) upgrade to: 2.20.0

More info on how to fix Vulnerable Libraries in Python.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.