diff --git a/package-lock.json b/package-lock.json
index cb7ec6d..7ef0b9c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,7 @@
         "@vitest/coverage-v8": "^4.1.0",
         "coffee-fmt": "^0.12.0",
         "coffeescript": "^2.7.0",
-        "dotenv": "^17.3.1",
+        "dotenv": "^17.4.2",
         "execa": "^9.6.1",
         "milkee-plugin-prettier": "^1.0.0",
         "npm-check-updates": "^19.6.6",
@@ -1214,9 +1214,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.3.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.3.1.tgz",
-      "integrity": "sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==",
+      "version": "17.4.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
+      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
       "dev": true,
       "license": "BSD-2-Clause",
       "engines": {
diff --git a/package.json b/package.json
index d4b6233..3a45fdd 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "@vitest/coverage-v8": "^4.1.0",
     "coffee-fmt": "^0.12.0",
     "coffeescript": "^2.7.0",
-    "dotenv": "^17.3.1",
+    "dotenv": "^17.4.2",
     "execa": "^9.6.1",
     "milkee-plugin-prettier": "^1.0.0",
     "npm-check-updates": "^19.6.6",