chore(deps): update npm (runtime) (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dotenv	17.4.2 → 18.0.2
uuid	13.0.2 → 14.0.2

---

Release Notes

motdotla/dotenv (dotenv)

v18.0.2

Compare Source

• Patch additional edge cases for the fast parser (#​1056)

v18.0.1

Compare Source

Changed

• Handle file urls in config logging (#​1054)

v18.0.0

Compare Source

Added

• NEW: Dotenv now has a CLI. (#​1022)

$ dotenv run -- node index.js
◇ injected env (2) from .env
Hello Dotenv

• NEW: Dotenv now has a fast parser thanks to @​homanp of superagent.sh. Pass config({ fast: true }), flag --fast, or set DOTENV_FAST=true to opt-in to ~2x faster character-scanner parser. (#​1010)

$ dotenv run --fast -- node index.js
◇ injected env (2) from .env
Hello Dotenv

Changed

• Injecting message sent to stderr rather than stdout and tips removed (#​1037)

Removed

• Remove tips (#​1031)
• Remove skill files (#​1032)
• Remove Spanish README (#​1034)
• Remove .env.vault support (#​1033)
• Remove preloading. Instead use cli dotenv run -- your-command (#​1035)

uuidjs/uuid (uuid)

v14.0.2

Compare Source

Bug Fixes

• v1: carry nsecs overflow into the timestamp's high bits (#​972) (6adcc1d)
• v1: set the multicast bit on v1Bytes's own randomly-generated node (#​973) (b1da338)
• v7: align default seq formula in v7Bytes with updateV7State (#​965) (a67db57)

v14.0.1

Compare Source

Bug Fixes

• add types condition to node export for moduleResolution bundler (#​961) (27ffae5)

v14.0.0

Compare Source

Security

• Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

• crypto is now expected to be globally defined (requires node@​20+) (#​935)
• drop node@​18 support (#​934)
• upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

---

Configuration

📅 Schedule: (in timezone Europe/Madrid)

• Branch creation
  • "after 16:00 and before 22:00 on wednesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.