diff --git a/scripts/package.json b/scripts/package.json
index ed19035b4c3..57ea6cb7a6b 100644
--- a/scripts/package.json
+++ b/scripts/package.json
@@ -35,7 +35,7 @@
     "chalk": "5.4.1",
     "commander": "13.1.0",
     "crc": "4.3.2",
-    "dotenv": "16.4.7",
+    "dotenv": "16.5.0",
     "esbuild": "0.25.2",
     "execa": "9.5.2",
     "express": "5.1.0",
diff --git a/templates/javascript/tests/package.mustache b/templates/javascript/tests/package.mustache
index 899dd69b5a6..b7ab5f8bc36 100644
--- a/templates/javascript/tests/package.mustache
+++ b/templates/javascript/tests/package.mustache
@@ -13,7 +13,7 @@
   },
   "devDependencies": {
     "@types/node": "22.14.0",
-    "dotenv": "16.4.7",
+    "dotenv": "16.5.0",
     "typescript": "5.8.3",
     "vitest": "3.1.1"
   }
diff --git a/yarn.lock b/yarn.lock
index 145c4f9a5c4..dcd346c4cc8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3400,10 +3400,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:16.4.7":
-  version: 16.4.7
-  resolution: "dotenv@npm:16.4.7"
-  checksum: 10/f13bfe97db88f0df4ec505eeffb8925ec51f2d56a3d0b6d916964d8b4af494e6fb1633ba5d09089b552e77ab2a25de58d70259b2c5ed45ec148221835fc99a0c
+"dotenv@npm:16.5.0":
+  version: 16.5.0
+  resolution: "dotenv@npm:16.5.0"
+  checksum: 10/e68a16834f1a41cc2dfb01563bc150668ad675e6cd09191211467b5c0806b6ecd6ec438e021aa8e01cd0e72d2b70ef4302bec7cc0fe15b6955f85230b62dc8a9
   languageName: node
   linkType: hard
 
@@ -7161,7 +7161,7 @@ __metadata:
     chalk: "npm:5.4.1"
     commander: "npm:13.1.0"
     crc: "npm:4.3.2"
-    dotenv: "npm:16.4.7"
+    dotenv: "npm:16.5.0"
     esbuild: "npm:0.25.2"
     execa: "npm:9.5.2"
     express: "npm:5.1.0"