diff --git a/apps/api.immich.app/package.json b/apps/api.immich.app/package.json
index 6881d102..f2d19333 100644
--- a/apps/api.immich.app/package.json
+++ b/apps/api.immich.app/package.json
@@ -19,7 +19,7 @@
     "@tailwindcss/vite": "^4.2.2",
     "@types/node": "^24.13.6",
     "@vitest/browser": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.0",
     "globals": "^17.0.0",
     "playwright": "^1.55.1",
     "svelte": "^5.39.5",
diff --git a/apps/awesome.immich.app/package.json b/apps/awesome.immich.app/package.json
index d3be1c89..472cf468 100644
--- a/apps/awesome.immich.app/package.json
+++ b/apps/awesome.immich.app/package.json
@@ -21,7 +21,7 @@
     "@types/node": "^24.13.6",
     "@typescript/native": "npm:typescript@^7.0.2",
     "@vitest/browser": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.0",
     "front-matter": "^4.0.2",
     "globals": "^17.0.0",
     "luxon": "^3.7.2",
diff --git a/apps/buy.immich.app/package.json b/apps/buy.immich.app/package.json
index b37493ab..ca8f986f 100644
--- a/apps/buy.immich.app/package.json
+++ b/apps/buy.immich.app/package.json
@@ -19,7 +19,7 @@
     "@tailwindcss/vite": "^4.2.2",
     "@types/node": "^24.13.6",
     "@vitest/browser": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.0",
     "globals": "^17.0.0",
     "playwright": "^1.55.1",
     "svelte": "^5.39.5",
diff --git a/apps/datasets.immich.app/package.json b/apps/datasets.immich.app/package.json
index 26e78726..02a51532 100644
--- a/apps/datasets.immich.app/package.json
+++ b/apps/datasets.immich.app/package.json
@@ -19,7 +19,7 @@
     "@tailwindcss/vite": "^4.2.2",
     "@types/node": "^24.13.6",
     "@vitest/browser": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.0",
     "globals": "^17.0.0",
     "playwright": "^1.55.1",
     "svelte": "^5.39.5",
diff --git a/apps/get.immich.app/package.json b/apps/get.immich.app/package.json
index a48a53e5..159b33aa 100644
--- a/apps/get.immich.app/package.json
+++ b/apps/get.immich.app/package.json
@@ -19,7 +19,7 @@
     "@tailwindcss/vite": "^4.2.2",
     "@types/node": "^24.13.6",
     "@vitest/browser": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.0",
     "globals": "^17.0.0",
     "playwright": "^1.55.1",
     "svelte": "^5.39.5",
diff --git a/apps/my.immich.app/package.json b/apps/my.immich.app/package.json
index 36c1486a..f3d8ca52 100644
--- a/apps/my.immich.app/package.json
+++ b/apps/my.immich.app/package.json
@@ -19,7 +19,7 @@
     "@tailwindcss/vite": "^4.2.2",
     "@types/node": "^24.13.6",
     "@vitest/browser": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.0",
     "globals": "^17.0.0",
     "playwright": "^1.55.1",
     "svelte": "^5.39.5",
diff --git a/apps/root.immich.app/package.json b/apps/root.immich.app/package.json
index 298ec02c..5fa11cdb 100644
--- a/apps/root.immich.app/package.json
+++ b/apps/root.immich.app/package.json
@@ -25,7 +25,7 @@
     "@types/node": "^24.13.6",
     "@typescript/native": "npm:typescript@^7.0.2",
     "@vitest/browser": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^18.0.0",
     "globals": "^17.0.0",
     "luxon": "^3.7.2",
     "marked": "^18.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1928d861..dc309b55 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -267,8 +267,8 @@ importers:
         specifier: ^4.1.0
         version: 4.1.11(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0))(vitest@4.1.11(@types/node@24.13.6)(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0)))
       dotenv:
-        specifier: ^17.2.3
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.4
       globals:
         specifier: ^17.0.0
         version: 17.12.0
@@ -340,8 +340,8 @@ importers:
         specifier: ^4.1.0
         version: 4.1.11(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0))(vitest@4.1.11(@types/node@24.13.6)(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0)))
       dotenv:
-        specifier: ^17.2.3
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.4
       front-matter:
         specifier: ^4.0.2
         version: 4.0.2
@@ -419,8 +419,8 @@ importers:
         specifier: ^4.1.0
         version: 4.1.11(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0))(vitest@4.1.11(@types/node@24.13.6)(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0)))
       dotenv:
-        specifier: ^17.2.3
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.4
       globals:
         specifier: ^17.0.0
         version: 17.12.0
@@ -498,8 +498,8 @@ importers:
         specifier: ^4.1.0
         version: 4.1.11(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0))(vitest@4.1.11(@types/node@24.13.6)(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0)))
       dotenv:
-        specifier: ^17.2.3
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.4
       globals:
         specifier: ^17.0.0
         version: 17.12.0
@@ -605,8 +605,8 @@ importers:
         specifier: ^4.1.0
         version: 4.1.11(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0))(vitest@4.1.11(@types/node@24.13.6)(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0)))
       dotenv:
-        specifier: ^17.2.3
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.4
       globals:
         specifier: ^17.0.0
         version: 17.12.0
@@ -672,8 +672,8 @@ importers:
         specifier: ^4.1.0
         version: 4.1.11(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0))(vitest@4.1.11(@types/node@24.13.6)(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.0)))
       dotenv:
-        specifier: ^17.2.3
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.4
       globals:
         specifier: ^17.0.0
         version: 17.12.0
@@ -778,8 +778,8 @@ importers:
         specifier: ^4.1.0
         version: 4.1.11(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.1))(vitest@4.1.11(@types/node@24.13.6)(vite@8.3.0(@types/node@24.13.6)(esbuild@0.28.2)(jiti@2.7.0)(tsx@4.23.13)(yaml@2.9.1)))
       dotenv:
-        specifier: ^17.2.3
-        version: 17.4.2
+        specifier: ^18.0.0
+        version: 18.0.4
       globals:
         specifier: ^17.0.0
         version: 17.12.0
@@ -3196,9 +3196,10 @@ packages:
     resolution: {integrity: sha512-avsq/xk4YPIrn0CgleX5bjT9Y8IT1p9PxrNQ++RBQ2WEyFfHCTDsT9kmyxz+H/axnjAwg8wJWEIuPGOUuNupiA==}
     engines: {node: '>= 14.17'}
 
-  dotenv@17.4.2:
-    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
+  dotenv@18.0.4:
+    resolution: {integrity: sha512-jGt9uI5BIxpVO15kvy+iEFqNAwxYClKWnkptLjSNPnFLC003Imd0ofr3aEVsbpHdSBdSsbcApNIlz4nbyGMwdA==}
     engines: {node: '>=12'}
+    hasBin: true
 
   eastasianwidth@0.2.0:
     resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
@@ -6877,7 +6878,7 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  dotenv@17.4.2: {}
+  dotenv@18.0.4: {}
 
   eastasianwidth@0.2.0: {}