build(deps): bump the major group across 1 directory with 2 updates

[dependabot]

Bumps the major group with 2 updates in the / directory: dotenv and music-metadata.

Updates dotenv from 17.4.2 to 18.0.7

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

• Treat undefined settings like quiet: true as null rather than falsey (#1070)
• CLI should honor DOTENV_QUIET setting in .env file (#1071)

18.0.6 (2026-10-06)

Changed

• Use smarter parseBoolean not Boolean() to fix override (#1069)

18.0.5 (2026-09-30)

Changed

• Fix missing typescript module declaration (#1068)
• Improve performance for large .env files (#1066)

18.0.4 (2026-09-25)

Changed

• import dotenv/config should default quiet: true (#1063)

18.0.3 (2026-09-22)

Changed

• Patch DOTENV_QUIET setting when inside .env file (#1059)

18.0.2 (2026-09-21)

Changed

• Patch additional edge cases for the fast parser (#1056)

18.0.1 (2026-09-18)

Changed

• Handle file urls in config logging (#1054)

18.0.0 (2026-09-17)

Added

• NEW: Dotenv now has a CLI. (#1022)

... (truncated)

Commits

• 2953207 18.0.7
• 9944723 make more readable for undefined -> null
• d455db0 Merge branch 'master' of github.com:motdotla/dotenv
• e411e02 changelog
• 6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...
• 9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet
• c7161c6 fix(cli): honor quiet settings loaded from .env
• 3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings
• 5d7cc39 18.0.6
• 750ba03 changelog
• Additional commits viewable in compare view

Updates music-metadata from 11.16.1 to 12.1.0

Release notes

Sourced from music-metadata's releases.

v12.1.0

Changes

✨ Enhancements

• Improve MP4 chapter sample and Nero chapter parsing @​Borewit (#2795)

🚀 Improvements

• Fix MP4 chapter parsing for seekable media @​Borewit (#2792)
• Improve container-independent track information @​Borewit (#2788)
• Support application/ogg during parser selection @​Borewit (#2786)
• OGG/FLAC: derive duration from last page granule position @​NellowTCS (#2780)

🐛 Bug Fixes

• Fix ASF File Properties flag decoding @​Borewit (#2793)
• Fix/av track detection @​Borewit (#2785)
• fix: decode unknown Ogg granule positions as -1 @​Borewit (#2784)

🛠️ Under the hood

• Refactor MPEG and ADTS frame headers @​Borewit (#2789)

📦 NPM release

NPM release: music-metadata@12.1.0

v12.0.0

⚠️ API Changes

• Update ECMAScript target to ES2023 @​Borewit (#2765)
• Update file-type to v22 and require Node.js 22 @​Borewit (#2728)

🚀 Improvements

• fix: emit metadata events for track numbers and totals @​Borewit (#2753)

🐛 Bug Fixes

• Fix tag grouping for object prototype property names @​Borewit (#2773)
• Fix front cover selection and empty picture lists @​Borewit (#2772)
• Fix missing APEv2 metadata when tokenizer options are omitted @​Borewit (#2771)

📚 Documentation

• docs: update Audio Tag Analyzer link and logo @​Borewit (#2751)

📦 Dependencies

• Update content-type to 3.1.1 @​Borewit (#2761)

... (truncated)

Commits

• 9afd760 12.1.0
• 052a3b8 CI/Release drafter: Correct label
• 2a64b4b Refactor MPEG and ADTS frame headers
• d28d12b test(mp4): cover chapter parsing boundary and recovery cases
• 4fb1f3f Improve MP4 chapter sample and Nero chapter parsing
• 90bfed6 Fix MP4 chapter parsing for seekable media
• 77a03ce Improve container-independent track information
• 9b71259 Fix ASF File Properties flag decoding
• a2d11ec build(deps-dev): bump @​types/node
• fe17fb3 build(deps-dev): bump mocha from 12.0.2 to 12.0.3
• Additional commits viewable in compare view