From 9570c386272f87221cf2b4e6e1dc8da78bc407ec Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 16 Sep 2025 00:37:51 +0000 Subject: [PATCH] fix: upgrade dotenv from 16.4.5 to 16.6.1 Snyk has created this PR to upgrade dotenv from 16.4.5 to 16.6.1. See this package in npm: dotenv See this project in Snyk: https://app.snyk.io/org/reddotranch/project/84d15f27-d02f-4967-84e1-b8f6e0cc18ce?utm_source=github&utm_medium=referral&page=upgrade-pr --- backend/package-lock.json | 9 +++++---- backend/package.json | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/backend/package-lock.json b/backend/package-lock.json index ead22e4..5fe37a4 100644 --- a/backend/package-lock.json +++ b/backend/package-lock.json @@ -11,7 +11,7 @@ "dependencies": { "cors": "^2.8.5", "csurf": "^1.11.0", - "dotenv": "^16.4.5", + "dotenv": "^16.6.1", "express": "^4.18.3", "helmet": "^7.1.0", "mongoose": "^8.2.0" @@ -896,9 +896,10 @@ } }, "node_modules/dotenv": { - "version": "16.4.5", - "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz", - "integrity": "sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==", + "version": "16.6.1", + "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz", + "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==", + "license": "BSD-2-Clause", "engines": { "node": ">=12" }, diff --git a/backend/package.json b/backend/package.json index c69b4aa..5ba6ddd 100644 --- a/backend/package.json +++ b/backend/package.json @@ -16,7 +16,7 @@ "dependencies": { "cors": "^2.8.5", "csurf": "^1.11.0", - "dotenv": "^16.4.5", + "dotenv": "^16.6.1", "express": "^4.18.3", "helmet": "^7.1.0", "mongoose": "^8.2.0"