From 6139593de35185157074c85eed06986e4ba31347 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 27 Sep 2026 10:03:02 +0000
Subject: [PATCH] chore(deps): bump dotenv from 16.6.1 to 18.0.3 in
 /apps/shopify-mcp

Bumps [dotenv](https://github.com/motdotla/dotenv) from 16.6.1 to 18.0.3.
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v16.6.1...v18.0.3)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-version: 18.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 apps/shopify-mcp/package-lock.json | 13 +++++++------
 apps/shopify-mcp/package.json      |  2 +-
 2 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/apps/shopify-mcp/package-lock.json b/apps/shopify-mcp/package-lock.json
index 26fde57..dee0b52 100644
--- a/apps/shopify-mcp/package-lock.json
+++ b/apps/shopify-mcp/package-lock.json
@@ -10,7 +10,7 @@
       "dependencies": {
         "connect-redis": "^7.1.1",
         "cors": "^2.8.5",
-        "dotenv": "^16.4.5",
+        "dotenv": "^18.0.3",
         "express": "^4.20.0",
         "express-session": "^1.18.0",
         "node-fetch": "^3.3.2",
@@ -34,7 +34,6 @@
       "resolved": "https://registry.npmjs.org/@redis/client/-/client-1.6.1.tgz",
       "integrity": "sha512-/KCsg3xSlR+nCK8/8ZYSknYxvXHwubJrU82F3Lm1Fp6789VQ0/3RJKfsmRXjqfaTA++23CvC3hqmqe/2GEt6Kw==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "cluster-key-slot": "1.1.2",
         "generic-pool": "3.9.0",
@@ -361,10 +360,13 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.6.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
-      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "version": "18.0.3",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.3.tgz",
+      "integrity": "sha512-/8CJTyL817qPnfbQrJgOEcrU3fDrJkRIoXBE566wHuvIXKOCHUZhPqGPbCPi9SogjdGnreF0TlvnTgK6J/8zpA==",
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
@@ -497,7 +499,6 @@
       "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.19.0.tgz",
       "integrity": "sha512-0csaMkGq+vaiZTmSMMGkfdCOabYv192VbytFypcvI0MANrp+4i/7yEkJ0sbAEhycQjntaKGzYfjfXQyVb7BHMA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "cookie": "~0.7.2",
         "cookie-signature": "~1.0.7",
diff --git a/apps/shopify-mcp/package.json b/apps/shopify-mcp/package.json
index 09b6e0a..967da5a 100644
--- a/apps/shopify-mcp/package.json
+++ b/apps/shopify-mcp/package.json
@@ -12,7 +12,7 @@
   "dependencies": {
     "express": "^4.20.0",
     "cors": "^2.8.5",
-    "dotenv": "^16.4.5",
+    "dotenv": "^18.0.3",
     "express-session": "^1.18.0",
     "connect-redis": "^7.1.1",
     "redis": "^4.6.14",