diff --git a/package-lock.json b/package-lock.json
index d01cbf4f..4e748d63 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "bunyan-middleware": "1.0.2",
         "codeowners-utils": "^1.0.2",
         "debug": "^4.4.1",
-        "dotenv": "^16.5.0",
+        "dotenv": "^17.0.0",
         "events-async": "^1.2.1",
         "express": "^5.1.0",
         "glob": "11.0.3"
@@ -1200,8 +1200,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.5.0",
-      "license": "BSD-2-Clause",
+      "version": "17.0.0",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.0.0.tgz",
+      "integrity": "sha512-A0BJ5lrpJVSfnMMXjmeO0xUnoxqsBHWCoqqTnGwGYVdnctqXXUEhJOO7LxmgxJon9tEZFGpe0xPRX0h2v3AANQ==",
       "engines": {
         "node": ">=12"
       },
diff --git a/package.json b/package.json
index 1e232798..838df5e1 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "bunyan-middleware": "1.0.2",
     "codeowners-utils": "^1.0.2",
     "debug": "^4.4.1",
-    "dotenv": "^16.5.0",
+    "dotenv": "^17.0.0",
     "events-async": "^1.2.1",
     "express": "^5.1.0",
     "glob": "11.0.3"