This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [dotenv](https://github.com/motdotla/dotenv) | [`^17.4.2` → `^18.0.0`](https://renovatebot.com/diffs/npm/dotenv/17.4.2/18.0.8) | ![age](https://developer.mend.io/api/mc/badges/age/npm/dotenv/18.0.8?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/dotenv/17.4.2/18.0.8?slim=true) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/99) for more information. --- ### Release Notes <details> <summary>motdotla/dotenv (dotenv)</summary> ### [`v18.0.8`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1808-2026-10-14) [Compare Source](motdotla/dotenv@v18.0.7...v18.0.8) ##### Changed - Fast parser should strip appended extra quotes ([#1073](motdotla/dotenv#1073)) - Type detail improvement ([#1074](motdotla/dotenv#1074)) ### [`v18.0.7`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1807-2026-10-09) [Compare Source](motdotla/dotenv@v18.0.6...v18.0.7) ##### Changed - Treat undefined settings like `quiet: true` as null rather than falsey ([#1070](motdotla/dotenv#1070)) - CLI should honor `DOTENV_QUIET` setting in `.env` file ([#1071](motdotla/dotenv#1071)) ### [`v18.0.6`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1806-2026-10-06) [Compare Source](motdotla/dotenv@v18.0.5...v18.0.6) ##### Changed - Use smarter `parseBoolean` not Boolean() to fix override ([#1069](motdotla/dotenv#1069)) ### [`v18.0.5`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1805-2026-09-30) [Compare Source](motdotla/dotenv@v18.0.4...v18.0.5) ##### Changed - Fix missing typescript module declaration ([#1068](motdotla/dotenv#1068)) - Improve performance for large .env files ([#1066](motdotla/dotenv#1066)) ### [`v18.0.4`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1804-2026-09-25) [Compare Source](motdotla/dotenv@v18.0.3...v18.0.4) ##### Changed - `import dotenv/config` should default quiet: true ([#1063](motdotla/dotenv#1063)) ### [`v18.0.3`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1803-2026-09-22) [Compare Source](motdotla/dotenv@v18.0.2...v18.0.3) ##### Changed - Patch `DOTENV_QUIET` setting when inside .env file ([#1059](motdotla/dotenv#1059)) ### [`v18.0.2`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1802-2026-09-21) [Compare Source](motdotla/dotenv@v18.0.1...v18.0.2) ##### Changed - Patch additional edge cases for the fast parser ([#1056](motdotla/dotenv#1056)) ### [`v18.0.1`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1801-2026-09-18) [Compare Source](motdotla/dotenv@v18.0.0...v18.0.1) ##### Changed - Handle file urls in config logging ([#1054](motdotla/dotenv#1054)) ### [`v18.0.0`](https://github.com/motdotla/dotenv/blob/HEAD/CHANGELOG.md#1800-2026-09-17) [Compare Source](motdotla/dotenv@v17.4.2...v18.0.0) ##### Added - NEW: Dotenv now has a CLI. ([#1022](motdotla/dotenv#1022)) ```sh $ dotenv run -- node index.js ◇ injected env (2) from .env Hello Dotenv ``` - NEW: Dotenv now has a fast parser thanks to [@homanp](https://github.com/homanp) of [superagent.sh](https://superagent.sh). Pass `config({ fast: true })`, flag `--fast`, or set `DOTENV_FAST=true` to opt-in to \~2x faster character-scanner parser. ([#1010](motdotla/dotenv#1010)) ```sh $ dotenv run --fast -- node index.js ◇ injected env (2) from .env Hello Dotenv ``` [faster than Node native parseEnv!](https://dotenvx.com/blog/2026/09/28/dotenv-fast.html) ##### Changed - Injecting message sent to stderr rather than stdout and tips removed ([#1037](motdotla/dotenv#1037)) ##### Removed - Remove tips ([#1031](motdotla/dotenv#1031)) - Remove skill files ([#1032](motdotla/dotenv#1032)) - Remove Spanish README ([#1034](motdotla/dotenv#1034)) - Remove .env.vault support ([#1033](motdotla/dotenv#1033)) - Remove preloading. Instead use cli `dotenv run -- your-command` ([#1035](motdotla/dotenv#1035)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 9am on tuesday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://code.futo.org/harbor/harbor/pulls/1849
-Original file line number
+Diff line change
     "body-parser": "^2.3.0",
     "bson": "^7.3.1",
     "cors": "^2.8.6",
 -    "dotenv": "^17.4.2",
 +    "dotenv": "^18.0.0",
     "prom-client": "catalog:",
     "express": "^5.2.1",
     "http-status-codes": "^2.3.0",