From 4116a15f76813ffc51c6c2221d427b16110c9a6b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 14 Oct 2026 22:38:45 +0000
Subject: [PATCH] deps: update dependency dotenv to v18

---
 package-lock.json         | 11 +++++++----
 packages/app/package.json |  2 +-
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 5f232fb8..e1d0c271 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5691,10 +5691,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.6",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.6.tgz",
+      "integrity": "sha512-ZMVmohV6CvAJtj++pZNyggluUt6hbRdQAxc2+Z635RL6/AG/ruXv5lHnybUFoxMPL/yrTL/tsF4paZu2l7RA6Q==",
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
@@ -11649,7 +11652,7 @@
         "async-didi": "^1.0.0",
         "body-parser": "^2.3.0",
         "compression": "^1.8.1",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.0",
         "express": "^5.2.1",
         "express-session": "^1.19.0",
         "fake-tag": "^5.0.0",
diff --git a/packages/app/package.json b/packages/app/package.json
index 8bca72c6..37042364 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -47,7 +47,7 @@
     "async-didi": "^1.0.0",
     "body-parser": "^2.3.0",
     "compression": "^1.8.1",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.0",
     "express": "^5.2.1",
     "express-session": "^1.19.0",
     "fake-tag": "^5.0.0",