diff --git a/samples/node/login-auth-code/package.json b/samples/node/login-auth-code/package.json
index 67bf2ac..eae6b1c 100644
--- a/samples/node/login-auth-code/package.json
+++ b/samples/node/login-auth-code/package.json
@@ -13,7 +13,7 @@
     "format:check": "prettier --check --ignore-path=../../../.gitignore ."
   },
   "dependencies": {
-    "dotenv": "17.4.2",
+    "dotenv": "18.0.2",
     "express": "5.2.1",
     "express-session": "1.19.0",
     "openid-client": "6.8.8",
diff --git a/samples/node/login-auth-code/yarn.lock b/samples/node/login-auth-code/yarn.lock
index 76317de..c6433df 100644
--- a/samples/node/login-auth-code/yarn.lock
+++ b/samples/node/login-auth-code/yarn.lock
@@ -13,7 +13,7 @@ __metadata:
     "@types/express-session": "npm:1.19.0"
     "@types/node": "npm:26.6.2"
     "@types/supertest": "npm:7.2.1"
-    dotenv: "npm:17.4.2"
+    dotenv: "npm:18.0.2"
     express: "npm:5.2.1"
     express-session: "npm:1.19.0"
     openid-client: "npm:6.8.8"
@@ -977,10 +977,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:17.4.2":
-  version: 17.4.2
-  resolution: "dotenv@npm:17.4.2"
-  checksum: 10c0/164f8e77a646c8446867d5b588d26ea6005c8ea7c5eb41cf926f6113d23f2191355f6e0cfd95ea9bab98394a5b0a3f1e51a8399711b666fe55cc7b0bd745f942
+"dotenv@npm:18.0.2":
+  version: 18.0.2
+  resolution: "dotenv@npm:18.0.2"
+  bin:
+    dotenv: dist/index.cjs
+  checksum: 10c0/c16e179205096a7028eea5fba2062dbd25e88d93a0beb66d219507d4585f63ec3f02fda755eee5dca790b7424391a39332830b19983003f0d8d449fbc6845424
   languageName: node
   linkType: hard