From 74bed26cc289f8a6ee8622767846394fd4a1e90f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 24 Sep 2026 02:54:34 +0000
Subject: [PATCH] Bump dotenv from 17.4.2 to 18.0.1

Bumps [dotenv](https://github.com/motdotla/dotenv) from 17.4.2 to 18.0.1.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v17.4.2...v18.0.1)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 18 +++++++++++-------
 package.json      |  2 +-
 2 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e470584..47002c8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "@connectrpc/connect": "^2.1.0",
         "@connectrpc/connect-node": "^2.1.0",
         "@passkit/typescript-grpc-sdk": "https://github.com/PassKit/passkit-typescript-grpc-sdk/archive/a0087bfb62ca1c8e9670359e225386b37b9a4cd7.tar.gz",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.1",
         "minimist": "^1.2.8"
       },
       "devDependencies": {
@@ -496,9 +496,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "version": "18.0.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.1.tgz",
+      "integrity": "sha512-0eR4m4D/jH5eaI3evo2ZqqMii5mrTCR12v12VChdie6O1gPHs7XAjzTep0CWc1Bd+oNx3vVfbi734dK4zghigw==",
+      "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
@@ -830,9 +834,9 @@
       }
     },
     "dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw=="
+      "version": "18.0.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.1.tgz",
+      "integrity": "sha512-0eR4m4D/jH5eaI3evo2ZqqMii5mrTCR12v12VChdie6O1gPHs7XAjzTep0CWc1Bd+oNx3vVfbi734dK4zghigw=="
     },
     "esbuild": {
       "version": "0.28.2",
diff --git a/package.json b/package.json
index 0e442c7..20cd5bb 100644
--- a/package.json
+++ b/package.json
@@ -53,7 +53,7 @@
     "@connectrpc/connect": "^2.1.0",
     "@connectrpc/connect-node": "^2.1.0",
     "@passkit/typescript-grpc-sdk": "https://github.com/PassKit/passkit-typescript-grpc-sdk/archive/a0087bfb62ca1c8e9670359e225386b37b9a4cd7.tar.gz",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.1",
     "minimist": "^1.2.8"
   },
   "devDependencies": {