From 08e9bf270caa116e9419562b24f9c4aa7c6c498d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 23 Aug 2025 08:04:35 +0000
Subject: [PATCH] fix: upgrade dotenv from 16.4.7 to 16.6.1

Snyk has created this PR to upgrade dotenv from 16.4.7 to 16.6.1.

See this package in yarn:
dotenv

See this project in Snyk:
https://app.snyk.io/org/filoscoder/project/2a77870d-9a58-4598-8b40-39818a41e4c8?utm_source=github&utm_medium=referral&page=upgrade-pr
---
 package.json | 2 +-
 yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index 29b17af..0a6e293 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
     "bcrypt": "^6.0.0",
     "connect-timeout": "^1.9.1",
     "cors": "^2.8.3",
-    "dotenv": "^16.4.7",
+    "dotenv": "^16.6.1",
     "express": "^4.21.2",
     "express-pino-logger": "^7.0.0",
     "express-validator": "^6.14.2",
diff --git a/yarn.lock b/yarn.lock
index d151eab..ce63619 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2655,10 +2655,10 @@ dotenv@*:
   resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.0.2.tgz#0b0f8652c016a3858ef795024508cddc4bffc5bf"
   integrity sha512-JvpYKUmzQhYoIFgK2MOnF3bciIZoItIIoryihy0rIA+H4Jy0FmgyKYAHCTN98P5ybGSJcIFbh6QKeJdtZd1qhA==
 
-dotenv@^16.4.7:
-  version "16.4.7"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.4.7.tgz#0e20c5b82950140aa99be360a8a5f52335f53c26"
-  integrity sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==
+dotenv@^16.6.1:
+  version "16.6.1"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.6.1.tgz#773f0e69527a8315c7285d5ee73c4459d20a8020"
+  integrity sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==
 
 duplexify@^4.1.2:
   version "4.1.2"