diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fa10613e6..d2ed3f3c5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -195,8 +195,8 @@ catalogs:
       specifier: 6.0.1
       version: 6.0.1
     dotenv:
-      specifier: 17.4.2
-      version: 17.4.2
+      specifier: 18.0.6
+      version: 18.0.6
     escape-string-regexp:
       specifier: 5.0.0
       version: 5.0.0
@@ -599,7 +599,7 @@ importers:
         version: 7.0.3
       dotenv:
         specifier: 'catalog:'
-        version: 17.4.2
+        version: 18.0.6
       fs-extra:
         specifier: 'catalog:'
         version: 11.4.1
@@ -906,7 +906,7 @@ importers:
         version: 12.0.0
       dotenv:
         specifier: 'catalog:'
-        version: 17.4.2
+        version: 18.0.6
       sinon:
         specifier: 22.1.0
         version: 22.1.0
@@ -4540,9 +4540,10 @@ packages:
     resolution: {integrity: sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==}
     engines: {node: '>=12'}
 
-  dotenv@17.4.2:
-    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
+  dotenv@18.0.6:
+    resolution: {integrity: sha512-ZMVmohV6CvAJtj++pZNyggluUt6hbRdQAxc2+Z635RL6/AG/ruXv5lHnybUFoxMPL/yrTL/tsF4paZu2l7RA6Q==}
     engines: {node: '>=12'}
+    hasBin: true
 
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
@@ -9777,7 +9778,7 @@ snapshots:
 
   dotenv@16.4.7: {}
 
-  dotenv@17.4.2: {}
+  dotenv@18.0.6: {}
 
   dunder-proto@1.0.1:
     dependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index f74523fd8..27f6969b4 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -21,7 +21,7 @@ catalog:
   "@types/node": "24.19.1"
   "c8": "12.0.0"
   "chalk": "6.0.1"
-  "dotenv": "17.4.2"
+  "dotenv": "18.0.6"
   "escape-string-regexp": "5.0.0"
   "fast-xml-parser": "5.11.2"
   "fs-extra": "11.4.1"