From 20f35c275d0dcd91497e3fa0ad92b276f7a2825b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 4 Oct 2026 15:08:02 +0000
Subject: [PATCH] build(deps): bump dotenv from 17.4.2 to 18.0.5

Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.4.2 to 18.0.5.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.5)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/api/package.json |  2 +-
 apps/bot/package.json |  2 +-
 pnpm-lock.yaml        | 15 +++++++++++----
 3 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/apps/api/package.json b/apps/api/package.json
index ff0eac4..e9e13e0 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -64,7 +64,7 @@
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "csrf-csrf": "^4.0.3",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.5",
     "express": "^5.2.1",
     "express-rate-limit": "^8.7.0",
     "google-auth-library": "^10.9.0",
diff --git a/apps/bot/package.json b/apps/bot/package.json
index 42bf3fb..0e55862 100644
--- a/apps/bot/package.json
+++ b/apps/bot/package.json
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "@grammyjs/conversations": "^2.1.0",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.5",
     "grammy": "^1.46.0",
     "ioredis": "5.11.1",
     "pino": "10.3.1"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 186b13a..48a6eb0 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -112,8 +112,8 @@ importers:
         specifier: ^4.0.3
         version: 4.0.3
       dotenv:
-        specifier: ^17.4.2
-        version: 17.4.2
+        specifier: ^18.0.5
+        version: 18.0.5
       express:
         specifier: ^5.2.1
         version: 5.2.1
@@ -230,8 +230,8 @@ importers:
         specifier: ^2.1.0
         version: 2.1.1(grammy@1.46.0)
       dotenv:
-        specifier: ^17.4.2
-        version: 17.4.2
+        specifier: ^18.0.5
+        version: 18.0.5
       grammy:
         specifier: ^1.46.0
         version: 1.46.0
@@ -2957,6 +2957,11 @@ packages:
     resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
     engines: {node: '>=12'}
 
+  dotenv@18.0.5:
+    resolution: {integrity: sha512-aBrGvt6KhjxbEnatqMWOMidftwsrCiCvqh1yNIGB9QyF0J+VcWkKDMsvYOEm7ZS82oiV+BT1sTOtIlAmUlTpwQ==}
+    engines: {node: '>=12'}
+    hasBin: true
+
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
@@ -8158,6 +8163,8 @@ snapshots:
 
   dotenv@17.4.2: {}
 
+  dotenv@18.0.5: {}
+
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2