diff --git a/apps/api/package.json b/apps/api/package.json
index bb60c4a..bd4f4ac 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -27,7 +27,7 @@
     "@sidclaw/shared": "*",
     "bcrypt": "^6.0.0",
     "cookie": "^1.1.1",
-    "dotenv": "^16.6.1",
+    "dotenv": "^17.4.2",
     "fastify": "^5",
     "fastify-plugin": "^5.1.0",
     "ioredis": "^5.11.1",
diff --git a/package-lock.json b/package-lock.json
index da96e07..be26b21 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -32,7 +32,7 @@
         "@sidclaw/shared": "*",
         "bcrypt": "^6.0.0",
         "cookie": "^1.1.1",
-        "dotenv": "^16.6.1",
+        "dotenv": "^17.4.2",
         "fastify": "^5",
         "fastify-plugin": "^5.1.0",
         "ioredis": "^5.11.1",
@@ -9756,19 +9756,6 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
-    "node_modules/c12/node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
-      "devOptional": true,
-      "license": "BSD-2-Clause",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://dotenvx.com"
-      }
-    },
     "node_modules/c12/node_modules/readdirp": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-5.0.0.tgz",
@@ -10022,15 +10009,6 @@
         "cnfast": "bin/cli.js"
       }
     },
-    "node_modules/cnfast": {
-      "version": "0.0.8",
-      "resolved": "https://registry.npmjs.org/cnfast/-/cnfast-0.0.8.tgz",
-      "integrity": "sha512-EjXKMfGfdwtV4AcNSQ6AwQaVzpC1B7IxeiwA3FlhTXz+YFlMKVi4c1JX9tgD2QOlahQXjB8KUXrBaYG+3v871Q==",
-      "license": "MIT",
-      "bin": {
-        "cnfast": "bin/cli.js"
-      }
-    },
     "node_modules/collapse-white-space": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/collapse-white-space/-/collapse-white-space-2.1.0.tgz",
@@ -10701,9 +10679,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "16.6.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
-      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "version": "17.4.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
+      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
       "license": "BSD-2-Clause",
       "engines": {
         "node": ">=12"