chore(deps): Bump the production-dependencies group with 2 updates

[dependabot]

Bumps the production-dependencies group with 2 updates: dotenv and glob.

Updates dotenv from 17.2.4 to 17.3.1

Changelog

Sourced from dotenv's changelog.

17.3.1 (2026-02-12)

Changed

• Fix as2 example command in README and update spanish README

17.3.0 (2026-02-12)

Added

• Add a new README section on dotenv’s approach to the agentic future.

Changed

• Rewrite README to get humans started more quickly with less noise while simultaneously making more accessible for llms and agents to go deeper into details.

Commits

• 7bc16a4 17.3.1
• 27303fd update README-es
• 6379eb2 update README
• b6d7339 fix spelling
• 5febe35 17.3.0
• f61f383 changelog 🪵
• dec94ad update README
• 4856950 update README
• 6351887 update README
• 23bd017 update README
• Additional commits viewable in compare view

Updates glob from 13.0.1 to 13.0.3

Commits

• 782e3a7 13.0.3
• 5cd322e update minimatch
• 053ac96 update deps
• 2135b0c 13.0.2
• 5254494 ship minified by default, update deps
• 0a603fe remove unused tshy config
• See full diff in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[claude]

Claude finished @sjnims's task in 45s —— View job

---

Review Summary

• Run quality checks (typecheck, lint, format, knip)
• Review the diff
• Post summary

---

Verdict: ✅ Looks good

Quality Checks:

Check	Result
npm run typecheck	✅ Pass
npm run lint	✅ Pass
npm run format:check	✅ Pass
npm run knip	✅ Pass

What's Good:

• Both bumps are minor/patch versions with no breaking changes
• dotenv 17.2.4 → 17.3.1: README-only changes, no functional code changes
• glob 13.0.1 → 13.0.3: Internal dependency updates (minimatch 10.1.2 → 10.2.0, ships minified by default) — no API changes
• All quality checks pass cleanly
• Lock file is consistent with package.json specifiers

Suggestions: None — this is a clean dependency bump with no concerns.