diff --git a/package.json b/package.json
index a57ed0f..e848bfa 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "@google-cloud/spanner": "^8.1.0",
     "@google-cloud/trace-agent": "^8.0.0",
     "@modelcontextprotocol/sdk": "^1.17.0",
-    "dotenv": "^16.4.7",
+    "dotenv": "^17.2.3",
     "google-auth-library": "^10.2.0",
     "googleapis": "^154.1.0",
     "winston": "^3.17.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 95a65c9..a409192 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -33,8 +33,8 @@ importers:
         specifier: ^1.17.0
         version: 1.17.0
       dotenv:
-        specifier: ^16.4.7
-        version: 16.4.7
+        specifier: ^17.2.3
+        version: 17.2.3
       google-auth-library:
         specifier: ^10.2.0
         version: 10.2.0
@@ -1116,8 +1116,8 @@ packages:
     resolution: {integrity: sha512-tE7ztYzXHIeyvc7N+hR3oi7FIbf/NIjVP9hmAt3yMXzrQ072/fpjGLx2GxNxGxUl5V73MEqYzioOMoVhGMJ5cA==}
     engines: {node: '>=10'}
 
-  dotenv@16.4.7:
-    resolution: {integrity: sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==}
+  dotenv@17.2.3:
+    resolution: {integrity: sha512-JVUnt+DUIzu87TABbhPmNfVdBDt18BLOWjMUFJMSi/Qqg7NTYtabbvSNJGOJ7afbRuv9D/lngizHtP7QyLQ+9w==}
     engines: {node: '>=12'}
 
   dunder-proto@1.0.1:
@@ -3578,7 +3578,7 @@ snapshots:
     dependencies:
       is-obj: 2.0.0
 
-  dotenv@16.4.7: {}
+  dotenv@17.2.3: {}
 
   dunder-proto@1.0.1:
     dependencies: