diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 7e458282..1d649a54 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -157,8 +157,8 @@ catalogs:
       specifier: ^1.2.1
       version: 1.2.1
     dotenv:
-      specifier: 16.6.0
-      version: 16.6.0
+      specifier: 17.2.3
+      version: 17.2.3
     fast-equals:
       specifier: 5.2.2
       version: 5.2.2
@@ -475,7 +475,7 @@ importers:
         version: 9.0.2
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       postcss:
         specifier: 'catalog:'
         version: 8.5.3
@@ -656,7 +656,7 @@ importers:
         version: 9.0.2
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       postcss:
         specifier: 'catalog:'
         version: 8.5.3
@@ -702,7 +702,7 @@ importers:
         version: 3.2.0(vitest@3.2.0(@types/node@22.14.1)(happy-dom@17.6.1)(lightningcss@1.29.2))
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       tsup:
         specifier: 'catalog:'
         version: 8.5.0(jiti@2.4.2)(postcss@8.5.3)(typescript@5.8.3)
@@ -748,7 +748,7 @@ importers:
         version: 3.2.0(vitest@3.2.0(@types/node@22.14.1)(happy-dom@17.6.1)(lightningcss@1.29.2))
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       react:
         specifier: 19.1.0
         version: 19.1.0
@@ -785,7 +785,7 @@ importers:
         version: 3.2.0(vitest@3.2.0(@types/node@22.14.1)(happy-dom@17.6.1)(lightningcss@1.29.2))
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       ioredis:
         specifier: 'catalog:'
         version: 5.6.1
@@ -837,7 +837,7 @@ importers:
         version: 3.2.0(vitest@3.2.0(@types/node@22.14.1)(happy-dom@17.6.1)(lightningcss@1.29.2))
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       react:
         specifier: 19.1.0
         version: 19.1.0
@@ -870,7 +870,7 @@ importers:
         version: 3.2.0(vitest@3.2.0(@types/node@22.14.1)(happy-dom@17.6.1)(lightningcss@1.29.2))
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       happy-dom:
         specifier: 'catalog:'
         version: 17.6.1
@@ -913,7 +913,7 @@ importers:
         version: 3.2.0(vitest@3.2.0(@types/node@22.14.1)(happy-dom@17.6.1)(lightningcss@1.29.2))
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       happy-dom:
         specifier: 'catalog:'
         version: 17.6.1
@@ -962,7 +962,7 @@ importers:
         version: 3.2.0(vitest@3.2.0(@types/node@22.14.1)(happy-dom@17.6.1)(lightningcss@1.29.2))
       dotenv:
         specifier: 'catalog:'
-        version: 16.6.0
+        version: 17.2.3
       happy-dom:
         specifier: 'catalog:'
         version: 17.6.1
@@ -3535,8 +3535,8 @@ packages:
   dompurify@3.1.6:
     resolution: {integrity: sha512-cTOAhc36AalkjtBpfG6O8JimdTMWNXjiePT2xQH/ppBGi/4uIpmj8eKyIkMJErXWARyINV/sB38yf8JCLF5pbQ==}
 
-  dotenv@16.6.0:
-    resolution: {integrity: sha512-Omf1L8paOy2VJhILjyhrhqwLIdstqm1BvcDPKg4NGAlkwEu9ODyrFbvk8UymUOMCT+HXo31jg1lArIrVAAhuGA==}
+  dotenv@17.2.3:
+    resolution: {integrity: sha512-JVUnt+DUIzu87TABbhPmNfVdBDt18BLOWjMUFJMSi/Qqg7NTYtabbvSNJGOJ7afbRuv9D/lngizHtP7QyLQ+9w==}
     engines: {node: '>=12'}
 
   eastasianwidth@0.2.0:
@@ -4177,6 +4177,7 @@ packages:
 
   mathjax-full@3.2.2:
     resolution: {integrity: sha512-+LfG9Fik+OuI8SLwsiR02IVdjcnRCy5MufYLi0C3TdMT56L/pjB0alMVGgoWJF8pN9Rc7FESycZB9BMNWIid5w==}
+    deprecated: Version 4 replaces this package with the scoped package @mathjax/src
 
   mdast-util-find-and-replace@3.0.1:
     resolution: {integrity: sha512-SG21kZHGC3XRTSUhtofZkBzZTJNM5ecCi0SK2IMKmSXR8vO3peL+kb1O0z7Zl83jKtutG4k5Wv/W7V3/YHvzPA==}
@@ -4439,6 +4440,7 @@ packages:
   next@15.3.1:
     resolution: {integrity: sha512-8+dDV0xNLOgHlyBxP1GwHGVaNXsmp+2NhZEYrXr24GWLHtt27YrBPbPuHvzlhi7kZNYjeJNR93IF5zfFu5UL0g==}
     engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}
+    deprecated: This version has a security vulnerability. Please upgrade to a patched version. See https://nextjs.org/blog/CVE-2025-66478 for more details.
     hasBin: true
     peerDependencies:
       '@opentelemetry/api': ^1.1.0
@@ -8084,7 +8086,7 @@ snapshots:
 
   dompurify@3.1.6: {}
 
-  dotenv@16.6.0: {}
+  dotenv@17.2.3: {}
 
   eastasianwidth@0.2.0: {}
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 9cd384be..e838d4ec 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -78,7 +78,7 @@ catalog:
   zod: ^3.21.4
   "@supabase/supabase-js": 2.57.4
   "@vercel/analytics": 1.5.0
-  dotenv: 16.6.0
+  dotenv: 17.2.3
   react: 19.1.0
   react-dom: 19.1.0
   turbo: 2.5.0