diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 54d963d1..089cb086 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -25,7 +25,7 @@ jobs:
           fetch-depth: 1
 
       - name: Run Renovate
-        uses: renovatebot/github-action@3633cede7d4d4598438e654eac4a695e46004420 # v46.1.7
+        uses: renovatebot/github-action@b67590ea780158ccd13192c22a3655a5231f869d # v46.1.8
         with:
           configurationFile: .github/renovate.json
           token: ${{ secrets.RENOVATE_TOKEN || secrets.GITHUB_TOKEN }}
diff --git a/package-lock.json b/package-lock.json
index 42fc9929..ba6c0453 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14,7 +14,7 @@
         "@playwright/test": "^1.59.1",
         "@types/eslint-plugin-jsx-a11y": "^6.10.1",
         "@types/node": "^25.5.2",
-        "dotenv": "^17.4.0",
+        "dotenv": "^17.4.1",
         "markdownlint-cli2": "^0.22.0",
         "prettier": "^3.8.1",
         "prettier-plugin-tailwindcss": "^0.7.2",
@@ -1156,9 +1156,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.0",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.0.tgz",
-      "integrity": "sha512-kCKF62fwtzwYm0IGBNjRUjtJgMfGapII+FslMHIjMR5KTnwEmBmWLDRSnc3XSNP8bNy34tekgQyDT0hr7pERRQ==",
+      "version": "17.4.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.1.tgz",
+      "integrity": "sha512-k8DaKGP6r1G30Lx8V4+pCsLzKr8vLmV2paqEj1Y55GdAgJuIqpRp5FfajGF8KtwMxCz9qJc6wUIJnm053d/WCw==",
       "dev": true,
       "license": "BSD-2-Clause",
       "engines": {
diff --git a/package.json b/package.json
index 1679b837..1a48912c 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
     "@bgotink/playwright-coverage": "^0.3.2",
     "@playwright/test": "^1.59.1",
     "@types/node": "^25.5.2",
-    "dotenv": "^17.4.0",
+    "dotenv": "^17.4.1",
     "markdownlint-cli2": "^0.22.0",
     "prettier": "^3.8.1",
     "prettier-plugin-tailwindcss": "^0.7.2",