diff --git a/package-lock.json b/package-lock.json
index 6688778..f0de698 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20,7 +20,7 @@
         "@sinonjs/fake-timers": "^14.0.0",
         "ava": "^6.4.0",
         "c8": "^10.1.3",
-        "dotenv": "^16.5.0",
+        "dotenv": "^17.2.0",
         "esbuild": "^0.25.6",
         "execa": "^9.6.0",
         "open-cli": "^8.0.0",
@@ -1623,9 +1623,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.5.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.5.0.tgz",
-      "integrity": "sha512-m/C+AwOAr9/W1UOIZUo232ejMNnJAJtYQjUbHoNTBNTJSvqzzDh7vnrei3o3r3m9blf6ZoDkvcw0VmozNRFJxg==",
+      "version": "17.2.0",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.2.0.tgz",
+      "integrity": "sha512-Q4sgBT60gzd0BB0lSyYD3xM4YxrXA9y4uBDof1JNYGzOXrQdQ6yX+7XIAqoFOGQFOTK1D3Hts5OllpxMDZFONQ==",
       "dev": true,
       "license": "BSD-2-Clause",
       "engines": {
diff --git a/package.json b/package.json
index 5d318ee..133a759 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "@sinonjs/fake-timers": "^14.0.0",
     "ava": "^6.4.0",
     "c8": "^10.1.3",
-    "dotenv": "^16.5.0",
+    "dotenv": "^17.2.0",
     "esbuild": "^0.25.6",
     "execa": "^9.6.0",
     "open-cli": "^8.0.0",