diff --git a/scripts/package.json b/scripts/package.json
index 555172a805c..567456c486e 100644
--- a/scripts/package.json
+++ b/scripts/package.json
@@ -35,7 +35,7 @@
     "chalk": "5.4.1",
     "commander": "14.0.0",
     "crc": "4.3.2",
-    "dotenv": "16.6.1",
+    "dotenv": "17.0.0",
     "esbuild": "0.25.5",
     "execa": "9.6.0",
     "express": "5.1.0",
diff --git a/templates/javascript/tests/package.mustache b/templates/javascript/tests/package.mustache
index 7854bec2132..547d223d908 100644
--- a/templates/javascript/tests/package.mustache
+++ b/templates/javascript/tests/package.mustache
@@ -13,7 +13,7 @@
   },
   "devDependencies": {
     "@types/node": "22.15.34",
-    "dotenv": "16.6.1",
+    "dotenv": "17.0.0",
     "typescript": "5.8.3",
     "vitest": "3.2.4"
   }
diff --git a/yarn.lock b/yarn.lock
index e304911143b..97fb9923c0c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3661,10 +3661,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:16.6.1":
-  version: 16.6.1
-  resolution: "dotenv@npm:16.6.1"
-  checksum: 10/1d1897144344447ffe62aa1a6d664f4cd2e0784e0aff787eeeec1940ded32f8e4b5b506d665134fc87157baa086fce07ec6383970a2b6d2e7985beaed6a4cc14
+"dotenv@npm:17.0.0":
+  version: 17.0.0
+  resolution: "dotenv@npm:17.0.0"
+  checksum: 10/31ef3618e19d6db7d5be3a8831147f10995b2ab18dce038588050160f780c6e0bdaece3d2b866a0138b860db1eb14f1da9e1fcf0493ee0bb7264664bac075c69
   languageName: node
   linkType: hard
 
@@ -7419,7 +7419,7 @@ __metadata:
     chalk: "npm:5.4.1"
     commander: "npm:14.0.0"
     crc: "npm:4.3.2"
-    dotenv: "npm:16.6.1"
+    dotenv: "npm:17.0.0"
     esbuild: "npm:0.25.5"
     execa: "npm:9.6.0"
     express: "npm:5.1.0"