diff --git a/package.json b/package.json
index 39a8a8103..86c72bdc1 100644
--- a/package.json
+++ b/package.json
@@ -105,7 +105,7 @@
     "@bufbuild/protoc-gen-es": "2.6.1",
     "@playwright/test": "1.54.1",
     "@squonk/eslint-config": "3.0.0",
-    "dotenv": "16.6.1",
+    "dotenv": "17.2.3",
     "eslint": "9.25.1",
     "husky": "9.1.7",
     "identity-obj-proxy": "3.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8226a1e9b..80a8950a3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -222,8 +222,8 @@ importers:
         specifier: 3.0.0
         version: 3.0.0(@typescript-eslint/eslint-plugin@8.31.0(@typescript-eslint/parser@8.31.0(eslint@9.25.1)(typescript@5.8.3))(eslint@9.25.1)(typescript@5.8.3))
       dotenv:
-        specifier: 16.6.1
-        version: 16.6.1
+        specifier: 17.2.3
+        version: 17.2.3
       eslint:
         specifier: 9.25.1
         version: 9.25.1
@@ -2901,6 +2901,10 @@ packages:
     resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
     engines: {node: '>=12'}
 
+  dotenv@17.2.3:
+    resolution: {integrity: sha512-JVUnt+DUIzu87TABbhPmNfVdBDt18BLOWjMUFJMSi/Qqg7NTYtabbvSNJGOJ7afbRuv9D/lngizHtP7QyLQ+9w==}
+    engines: {node: '>=12'}
+
   draft-js-custom-styles@2.1.1:
     resolution: {integrity: sha512-i/lTBRuiGQxPybMERRgGAzdx3WcJtshqlBnMgdi+YLVXF82K8zqLvvsXRGGR57TbmzfnnoHRZlDyBlkit22e/Q==}
     engines: {node: '>=4.2.4'}
@@ -9073,6 +9077,8 @@ snapshots:
 
   dotenv@16.6.1: {}
 
+  dotenv@17.2.3: {}
+
   draft-js-custom-styles@2.1.1(draft-js@0.11.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0))(immutable@5.1.1):
     dependencies:
       draft-js: 0.11.7(react-dom@19.1.0(react@19.1.0))(react@19.1.0)