Update dependency dotenv to v18

| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | dotenv  | 17.4.2 | 18.0.7 |


## [v18.0.7](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1807-2026-10-09)

##### Changed

- Treat undefined settings like `quiet: true` as null rather than falsey ([#1070](motdotla/dotenv#1070))
- CLI should honor `DOTENV_QUIET` setting in `.env` file ([#1071](motdotla/dotenv#1071))


## [v18.0.6](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06)

##### Changed

- Use smarter `parseBoolean` not Boolean() to fix override ([#1069](motdotla/dotenv#1069))


## [v18.0.5](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30)

##### Changed

- Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068))
- Improve performance for large .env files ([#1066](motdotla/dotenv#1066))


## [v18.0.4](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25)

##### Changed

- `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063))


## [v18.0.3](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22)

##### Changed

- Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059))


## [v18.0.2](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21)

##### Changed

- Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056))


## [v18.0.1](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18)

##### Changed

- Handle file urls in config logging ([#1054](motdotla/dotenv#1054))


## [v18.0.0](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17)

##### Added

- NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022))

```sh
$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

- NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010))

```sh
$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv
```

[faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html)

##### Changed

- Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037))

##### Removed

- Remove tips ([#1031](motdotla/dotenv#1031))
- Remove skill files ([#1032](motdotla/dotenv#1032))
- Remove Spanish README ([#1034](motdotla/dotenv#1034))
- Remove .env.vault support ([#1033](motdotla/dotenv#1033))
- Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035))

Author: renovate[bot]

package.json

@@ -28,7 +28,7 @@
     "@typescript-eslint/eslint-plugin": "8.69.0",
     "@typescript-eslint/parser": "8.69.0",
     "@vitejs/plugin-react": "6.1.1",
-    "dotenv": "17.4.2",
+    "dotenv": "18.0.7",
     "eslint": "8.57.1",
     "eslint-config-airbnb": "19.0.4",
     "eslint-config-prettier": "10.1.8",