diff --git a/packages/bundler-plugins/package.json b/packages/bundler-plugins/package.json
index 3aecb3224d2d..3426deb6b0de 100644
--- a/packages/bundler-plugins/package.json
+++ b/packages/bundler-plugins/package.json
@@ -116,7 +116,7 @@
   },
   "dependencies": {
     "@sentry/core": "11.10.0",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.9",
     "glob": "^14.0.3",
     "magic-string": "~0.30.8 || ^1.0.0",
     "oxc-parser": "^0.152.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index bd97f8cbdce2..ca68b38a8054 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1153,8 +1153,8 @@ importers:
         specifier: 11.10.0
         version: link:../core
       dotenv:
-        specifier: ^17.4.2
-        version: 17.4.2
+        specifier: ^18.0.9
+        version: 18.0.9
       glob:
         specifier: ^14.0.3
         version: 14.0.3
@@ -11407,6 +11407,11 @@ packages:
     resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
     engines: {node: '>=12'}
 
+  dotenv@18.0.9:
+    resolution: {integrity: sha512-3fVOW4cB02R066PUSwn8O4TJyz9NckQl7F81blIbaq9jKBm2tSmOKky7ZHIXzGvkVPXCSn6jkpziBPZdGFs8Tw==}
+    engines: {node: '>=12'}
+    hasBin: true
+
   dset@3.1.4:
     resolution: {integrity: sha512-2QF/g9/zTaPDc3BjNcVTGoBbXBgYfMTTceLaYcFJ/W9kggFUkhxD/hMEeuLKbugyef9SqAx8cpgwlIP/jinUTA==}
     engines: {node: '>=4'}
@@ -31196,6 +31201,8 @@ snapshots:
 
   dotenv@17.4.2: {}
 
+  dotenv@18.0.9: {}
+
   dset@3.1.4: {}
 
   dunder-proto@1.0.1: