diff --git a/package.json b/package.json
index d3624487c..a37e92db7 100644
--- a/package.json
+++ b/package.json
@@ -29,7 +29,7 @@
 		"@solidjs/meta": "^0.29.4",
 		"@solidjs/router": "^0.15.4",
 		"@solidjs/start": "^1.3.2",
-		"dotenv": "^17.3.1",
+		"dotenv": "^17.4.2",
 		"glob": "^13.0.6",
 		"gray-matter": "^4.0.3",
 		"postcss": "^8.5.8",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a23a0c06a..c52e98389 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -38,8 +38,8 @@ importers:
         specifier: ^1.3.2
         version: 1.3.2(solid-js@1.9.12)(vinxi@0.5.7(@types/node@25.5.0)(db0@0.3.2)(ioredis@5.6.1)(jiti@1.21.7)(terser@5.42.0)(yaml@2.8.1))(vite@6.3.5(@types/node@25.5.0)(jiti@1.21.7)(terser@5.42.0)(yaml@2.8.1))
       dotenv:
-        specifier: ^17.3.1
-        version: 17.3.1
+        specifier: ^17.4.2
+        version: 17.4.2
       glob:
         specifier: ^13.0.6
         version: 13.0.6
@@ -3846,10 +3846,10 @@ packages:
       }
     engines: { node: ">=12" }
 
-  dotenv@17.3.1:
+  dotenv@17.4.2:
     resolution:
       {
-        integrity: sha512-IO8C/dzEb6O3F9/twg6ZLXz164a2fhTnEWb95H23Dm4OuN+92NmEAlTrupP9VW6Jm3sO26tQlqyvyi4CsnY9GA==,
+        integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==,
       }
     engines: { node: ">=12" }
 
@@ -11453,7 +11453,7 @@ snapshots:
 
   dotenv@16.6.1: {}
 
-  dotenv@17.3.1: {}
+  dotenv@17.4.2: {}
 
   dunder-proto@1.0.1:
     dependencies: