diff --git a/package.json b/package.json
index 9c355d3a5..c2514a745 100644
--- a/package.json
+++ b/package.json
@@ -106,7 +106,7 @@
     "@next/bundle-analyzer": "15.0.3",
     "@playwright/test": "1.48.2",
     "@squonk/eslint-config": "2.0.1",
-    "dotenv": "16.4.5",
+    "dotenv": "16.4.7",
     "eslint": "8.57.1",
     "husky": "9.1.6",
     "identity-obj-proxy": "3.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0e13bcaf3..63a1d97ab 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -218,8 +218,8 @@ devDependencies:
     specifier: 2.0.1
     version: 2.0.1(@typescript-eslint/parser@7.6.0)(eslint-plugin-import@2.31.0)(eslint@8.57.1)(typescript@5.6.3)
   dotenv:
-    specifier: 16.4.5
-    version: 16.4.5
+    specifier: 16.4.7
+    version: 16.4.7
   eslint:
     specifier: 8.57.1
     version: 8.57.1
@@ -2576,7 +2576,7 @@ packages:
       '@babel/core': 7.26.0
       '@sentry/babel-plugin-component-annotate': 2.22.6
       '@sentry/cli': 2.39.1
-      dotenv: 16.4.5
+      dotenv: 16.4.7
       find-up: 5.0.0
       glob: 9.3.5
       magic-string: 0.30.8
@@ -4956,8 +4956,8 @@ packages:
       csstype: 3.1.3
     dev: false
 
-  /dotenv@16.4.5:
-    resolution: {integrity: sha512-ZmdL2rui+eB2YwhsWzjInR8LldtZHGDoQ1ugH85ppHKwpUHL7j7rN0Ti9NCnGiQbhaZ11FpR+7ao1dNsmduNUg==}
+  /dotenv@16.4.7:
+    resolution: {integrity: sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==}
     engines: {node: '>=12'}
 
   /draft-js-custom-styles@2.1.1(draft-js@0.11.7)(immutable@3.8.2):