diff --git a/package-lock.json b/package-lock.json
index 77e7c5f3..530bd729 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "bunyan": "^1.8.1",
         "codeowners-utils": "^1.0.2",
         "debug": "^4.4.3",
-        "dotenv": "^18.0.0",
+        "dotenv": "^18.0.3",
         "events-async": "^1.2.1",
         "express": "^5.2.1",
         "glob": "13.0.6"
@@ -1369,9 +1369,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "18.0.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.0.tgz",
-      "integrity": "sha512-16YSUvsKtKbwrTbESvtTSZzzJUug6jdFdqiBFg9Q6Bk1JY9r0hAtrtTiWxdI9YrsgOTmkjZRdgU0n3LnwGpECw==",
+      "version": "18.0.3",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.3.tgz",
+      "integrity": "sha512-/8CJTyL817qPnfbQrJgOEcrU3fDrJkRIoXBE566wHuvIXKOCHUZhPqGPbCPi9SogjdGnreF0TlvnTgK6J/8zpA==",
       "license": "BSD-2-Clause",
       "bin": {
         "dotenv": "dist/index.cjs"
diff --git a/package.json b/package.json
index 1a53848f..d8b97410 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "bunyan": "^1.8.1",
     "codeowners-utils": "^1.0.2",
     "debug": "^4.4.3",
-    "dotenv": "^18.0.0",
+    "dotenv": "^18.0.3",
     "events-async": "^1.2.1",
     "express": "^5.2.1",
     "glob": "13.0.6"