diff --git a/package-lock.json b/package-lock.json
index 010444e..e6595e0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,7 +13,7 @@
         "@actions/github": "^5.1.1",
         "@github/dependency-submission-toolkit": "^1.2.10",
         "cross-fetch": "^3.1.5",
-        "dotenv": "^16.0.3",
+        "dotenv": "^16.2.0",
         "fs": "^0.0.1-security",
         "tar": "^6.1.13",
         "yaml": "^2.2.1"
@@ -2050,11 +2050,14 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.0.3",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz",
-      "integrity": "sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ==",
+      "version": "16.2.0",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.2.0.tgz",
+      "integrity": "sha512-jcq2vR1DY1+QA+vH58RIrWLDZOifTGmyQJWzP9arDUbgZcySdzuBb1WvhWZzZtiXgfm+GW2pjBqStqlfpzq7wQ==",
       "engines": {
         "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/motdotla/dotenv?sponsor=1"
       }
     },
     "node_modules/electron-to-chromium": {
@@ -6487,9 +6490,9 @@
       }
     },
     "dotenv": {
-      "version": "16.0.3",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.0.3.tgz",
-      "integrity": "sha512-7GO6HghkA5fYG9TYnNxi14/7K9f5occMlp3zXAuSxn7CKCxt9xbNWG7yF8hTCSUchlfWSe3uLmlPfigevRItzQ=="
+      "version": "16.2.0",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.2.0.tgz",
+      "integrity": "sha512-jcq2vR1DY1+QA+vH58RIrWLDZOifTGmyQJWzP9arDUbgZcySdzuBb1WvhWZzZtiXgfm+GW2pjBqStqlfpzq7wQ=="
     },
     "electron-to-chromium": {
       "version": "1.4.284",
diff --git a/package.json b/package.json
index 6b65081..2325a0e 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
     "@actions/github": "^5.1.1",
     "@github/dependency-submission-toolkit": "^1.2.10",
     "cross-fetch": "^3.1.5",
-    "dotenv": "^16.0.3",
+    "dotenv": "^16.2.0",
     "fs": "^0.0.1-security",
     "tar": "^6.1.13",
     "yaml": "^2.2.1"