Bump dotenv from 8.2.0 to 14.2.0 in /desktop (#3344)

Summary:
Bumps [dotenv](https://github.com/motdotla/dotenv) from 8.2.0 to 14.2.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md">dotenv's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.1.1...v14.2.0">14.2.0</a> (2022-01-17)</h2>
<h3>Added</h3>
<ul>
<li>Add <code>dotenv_config_override</code> cli option</li>
<li>Add <code>DOTENV_CONFIG_OVERRIDE</code> command line env option</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.1.0...v14.1.1">14.1.1</a> (2022-01-17)</h2>
<h3>Added</h3>
<ul>
<li>Add React gotcha to FAQ on README</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.0.1...v14.1.0">14.1.0</a> (2022-01-17)</h2>
<h3>Added</h3>
<ul>
<li>Add <code>override</code> option 🎉 (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/595">https://github.com/facebook/flipper/issues/595</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v14.0.0...v14.0.1">14.0.1</a> (2022-01-16)</h2>
<h3>Added</h3>
<ul>
<li>Log error on failure to load <code>.env</code> file (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/594">https://github.com/facebook/flipper/issues/594</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v13.0.1...v14.0.0">14.0.0</a> (2022-01-16)</h2>
<h3>Added</h3>
<ul>
<li><em>Breaking:</em> Support inline comments for the parser 🎉 (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/568">https://github.com/facebook/flipper/issues/568</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v13.0.0...v13.0.1">13.0.1</a> (2022-01-16)</h2>
<h3>Changed</h3>
<ul>
<li>Hide comments and newlines from debug output (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/404">https://github.com/facebook/flipper/issues/404</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v12.0.4...v13.0.0">13.0.0</a> (2022-01-16)</h2>
<h3>Added</h3>
<ul>
<li><em>Breaking:</em> Add type file for <code>config.js</code> (<a href="https://github-redirect.dependabot.com/motdotla/dotenv/pull/539">https://github.com/facebook/flipper/issues/539</a>)</li>
</ul>
<h2><a href="https://github.com/motdotla/dotenv/compare/v12.0.3...v12.0.4">12.0.4</a> (2022-01-16)</h2>
<h3>Changed</h3>
<ul>
<li>README updates</li>
<li>Minor order adjustment to package json format</li>
</ul>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="aeae434e53"><code>aeae434</code></a> Version 14.2.0</li>
<li><a href="78996affef"><code>78996af</code></a> Add override cli and env options</li>
<li><a href="18b6e1ccdc"><code>18b6e1c</code></a> Remove verbose test and move -Rspec option to standard test</li>
<li><a href="fb38f298b4"><code>fb38f29</code></a> Version 14.1.1</li>
<li><a href="f1c38d5a67"><code>f1c38d5</code></a> Update CHANGELOG</li>
<li><a href="d1af7f8f2d"><code>d1af7f8</code></a> Package lock update</li>
<li><a href="5e922fea74"><code>5e922fe</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/motdotla/dotenv/issues/596">https://github.com/facebook/flipper/issues/596</a> from darkgl0w/bump</li>
<li><a href="1da837bdf5"><code>1da837b</code></a> fix (test): no need to pass and call <code>done()</code></li>
<li><a href="ec4b0fa006"><code>ec4b0fa</code></a> chore: upgrade package dependencies</li>
<li><a href="6b0d2eb604"><code>6b0d2eb</code></a> Update README</li>
<li>Additional commits viewable in <a href="https://github.com/motdotla/dotenv/compare/v8.2.0...v14.2.0">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dotenv&package-manager=npm_and_yarn&previous-version=8.2.0&new-version=14.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

 ---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>

Pull Request resolved: https://github.com/facebook/flipper/pull/3344

Reviewed By: aigoncharov

Differential Revision: D33741763

Pulled By: lblasa

fbshipit-source-id: 7188e804d6230ec7504c8ff43a70463c7959d130

desktop/scripts/package.json

@@ -18,7 +18,7 @@
     "app-builder-lib": "22.14.12",
     "chalk": "^4.1.2",
     "detect-port": "^1.1.1",
-    "dotenv": "^8.2.0",
+    "dotenv": "^14.2.0",
     "electron-builder": "22.11.7",
     "express": "^4.17.2",
     "fb-watchman": "^2.0.1",

desktop/yarn.lock

@@ -5261,10 +5261,10 @@ dotenv-expand@^5.1.0:
   resolved "https://registry.yarnpkg.com/dotenv-expand/-/dotenv-expand-5.1.0.tgz#3fbaf020bfd794884072ea26b1e9791d45a629f0"
   integrity sha512-YXQl1DSa4/PQyRfgrv6aoNjhasp/p4qs9FjJ4q4cQk+8m4r6k4ZSiEyytKG8f8W9gi8WsQtIObNmKd+tMzNTmA==
 
-dotenv@^8.2.0:
+dotenv@^14.2.0:
-  version "8.2.0"
+  version "14.2.0"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-8.2.0.tgz#97e619259ada750eea3e4ea3e26bceea5424b16a"
+  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-14.2.0.tgz#7e77fd5dd6cff5942c4496e1acf2d0f37a9e67aa"
-  integrity sha512-8sJ78ElpbDJBHNeBzUbUVLsqKdccaa/BXF1uPTw3GrvQTBgrQrtObr2mUrE38vzYd8cEv+m/JBfDLioYcfXoaw==
+  integrity sha512-05POuPJyPpO6jqzTNweQFfAyMSD4qa4lvsMOWyTRTdpHKy6nnnN+IYWaXF+lHivhBH/ufDKlR4IWCAN3oPnHuw==
 
 dotenv@^9.0.2:
   version "9.0.2"