diff --git a/package-lock.json b/package-lock.json
index 121cc40a..08800d3f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9365,9 +9365,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.3.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.3.1.tgz",
-      "integrity": "sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==",
+      "version": "17.4.0",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.0.tgz",
+      "integrity": "sha512-kCKF62fwtzwYm0IGBNjRUjtJgMfGapII+FslMHIjMR5KTnwEmBmWLDRSnc3XSNP8bNy34tekgQyDT0hr7pERRQ==",
       "license": "BSD-2-Clause",
       "engines": {
         "node": ">=12"
@@ -17717,7 +17717,7 @@
         "@clack/prompts": "^1.1.0",
         "commander": "^14.0.3",
         "consola": "^3.4.2",
-        "dotenv": "^17.3.1",
+        "dotenv": "^17.4.0",
         "jiti": "^2.6.1",
         "nypm": "^0.6.5"
       },
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 8b9a75ef..b4597383 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -30,7 +30,7 @@
     "@clack/prompts": "^1.1.0",
     "commander": "^14.0.3",
     "consola": "^3.4.2",
-    "dotenv": "^17.3.1",
+    "dotenv": "^17.4.0",
     "jiti": "^2.6.1",
     "nypm": "^0.6.5"
   },