From de1f002ebb85523d6ef7f5ad1e6c0d12e4485fcf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 7 Oct 2026 01:28:38 +0000
Subject: [PATCH] chore(deps): bump dotenv from 17.4.2 to 18.0.5

Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.4.2 to 18.0.5.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.5)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend/package.json |  2 +-
 package-lock.json    | 25 ++++++++++++++++++++-----
 package.json         |  2 +-
 3 files changed, 22 insertions(+), 7 deletions(-)

diff --git a/backend/package.json b/backend/package.json
index 05e5e10d..56840880 100644
--- a/backend/package.json
+++ b/backend/package.json
@@ -40,7 +40,7 @@
     "bullmq": "^5.81.2",
     "cheerio": "^1.2.0",
     "cors": "^2.8.6",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.5",
     "drizzle-orm": "^0.45.2",
     "express": "^5.2.1",
     "ioredis": "^5.11.1",
diff --git a/package-lock.json b/package-lock.json
index b6d149cf..ffc18337 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "axios": "^1.17.0",
         "cheerio": "^1.2.0",
         "cors": "^2.8.6",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.5",
         "drizzle-orm": "^0.45.2",
         "express": "^5.2.1",
         "openid-client": "^6.8.4",
@@ -61,7 +61,7 @@
         "bullmq": "^5.81.2",
         "cheerio": "^1.2.0",
         "cors": "^2.8.6",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.5",
         "drizzle-orm": "^0.45.2",
         "express": "^5.2.1",
         "ioredis": "^5.11.1",
@@ -1482,6 +1482,18 @@
         "node": ">=8"
       }
     },
+    "node_modules/@dotenvx/dotenvx/node_modules/dotenv": {
+      "version": "17.4.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
+      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
     "node_modules/@dotenvx/dotenvx/node_modules/execa": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz",
@@ -9028,10 +9040,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.5",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.5.tgz",
+      "integrity": "sha512-aBrGvt6KhjxbEnatqMWOMidftwsrCiCvqh1yNIGB9QyF0J+VcWkKDMsvYOEm7ZS82oiV+BT1sTOtIlAmUlTpwQ==",
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
diff --git a/package.json b/package.json
index f9b80225..6e907e63 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "axios": "^1.17.0",
     "cheerio": "^1.2.0",
     "cors": "^2.8.6",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.5",
     "drizzle-orm": "^0.45.2",
     "express": "^5.2.1",
     "openid-client": "^6.8.4",