diff --git a/apps/api/package.json b/apps/api/package.json
index ee435f2..187b3a4 100644
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -64,7 +64,7 @@
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "csrf-csrf": "^4.0.3",
-    "dotenv": "^16.6.1",
+    "dotenv": "^17.4.2",
     "express": "^4.19.2",
     "express-rate-limit": "^8.5.1",
     "google-auth-library": "^10.6.2",
diff --git a/apps/bot/package.json b/apps/bot/package.json
index 26808a7..a501ae7 100644
--- a/apps/bot/package.json
+++ b/apps/bot/package.json
@@ -32,7 +32,7 @@
     "check-types": "tsc --noEmit"
   },
   "dependencies": {
-    "dotenv": "^16.6.1",
+    "dotenv": "^17.4.2",
     "grammy": "^1.38.2"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ba85570..01f27ff 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -98,8 +98,8 @@ importers:
         specifier: ^4.0.3
         version: 4.0.3
       dotenv:
-        specifier: ^16.6.1
-        version: 16.6.1
+        specifier: ^17.4.2
+        version: 17.4.2
       express:
         specifier: ^4.19.2
         version: 4.22.2
@@ -210,8 +210,8 @@ importers:
   apps/bot:
     dependencies:
       dotenv:
-        specifier: ^16.6.1
-        version: 16.6.1
+        specifier: ^17.4.2
+        version: 17.4.2
       grammy:
         specifier: ^1.38.2
         version: 1.43.0