diff --git a/package-lock.json b/package-lock.json
index 93a7536..1136d57 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,6 +7,7 @@
     "": {
       "name": "sidecause",
       "version": "0.1.0",
+      "hasInstallScript": true,
       "dependencies": {
         "@prisma/adapter-pg": "^7.10.0",
         "@prisma/client": "^7.10.0",
@@ -25,7 +26,7 @@
         "@types/pg": "^8.23.1",
         "@types/react": "19.3.0",
         "@vitest/coverage-v8": "^4.1.11",
-        "dotenv": "^17.4.2",
+        "dotenv": "^18.0.7",
         "eslint": "^9.39.5",
         "eslint-config-next": "^16.3.8",
         "eslint-config-prettier": "^10.1.8",
@@ -4734,6 +4735,19 @@
         }
       }
     },
+    "node_modules/c12/node_modules/dotenv": {
+      "version": "17.4.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
+      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
+      "devOptional": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
     "node_modules/call-bind": {
       "version": "1.0.9",
       "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.9.tgz",
@@ -5604,11 +5618,14 @@
       "license": "MIT"
     },
     "node_modules/dotenv": {
-      "version": "17.4.2",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
-      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
-      "devOptional": true,
+      "version": "18.0.7",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-18.0.7.tgz",
+      "integrity": "sha512-QEvMEF8ca3GNZJJnAbOgxpj5ULhBvnMcURp+XKrtvqFNPgjBvYoswQ0Jl2cO7JzCjxZjJhr9ZuIEhlrRxMft/Q==",
+      "dev": true,
       "license": "BSD-2-Clause",
+      "bin": {
+        "dotenv": "dist/index.cjs"
+      },
       "engines": {
         "node": ">=12"
       },
diff --git a/package.json b/package.json
index b0d03c2..9e11806 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,7 @@
     "@types/pg": "^8.23.1",
     "@types/react": "19.3.0",
     "@vitest/coverage-v8": "^4.1.11",
-    "dotenv": "^17.4.2",
+    "dotenv": "^18.0.7",
     "eslint": "^9.39.5",
     "eslint-config-next": "^16.3.8",
     "eslint-config-prettier": "^10.1.8",