diff --git a/samples/node/saml-sp-login/package.json b/samples/node/saml-sp-login/package.json
index fb2d5ab..e2152ad 100644
--- a/samples/node/saml-sp-login/package.json
+++ b/samples/node/saml-sp-login/package.json
@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@node-saml/passport-saml": "5.1.0",
-    "dotenv": "17.4.2",
+    "dotenv": "18.0.2",
     "express": "5.2.1",
     "express-session": "1.19.0",
     "passport": "0.7.0",
diff --git a/samples/node/saml-sp-login/yarn.lock b/samples/node/saml-sp-login/yarn.lock
index 0bab390..4d783e8 100644
--- a/samples/node/saml-sp-login/yarn.lock
+++ b/samples/node/saml-sp-login/yarn.lock
@@ -15,7 +15,7 @@ __metadata:
     "@types/node": "npm:26.6.2"
     "@types/passport": "npm:1.0.17"
     "@types/supertest": "npm:7.2.1"
-    dotenv: "npm:17.4.2"
+    dotenv: "npm:18.0.2"
     express: "npm:5.2.1"
     express-session: "npm:1.19.0"
     passport: "npm:0.7.0"
@@ -1132,10 +1132,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"dotenv@npm:17.4.2":
-  version: 17.4.2
-  resolution: "dotenv@npm:17.4.2"
-  checksum: 10c0/164f8e77a646c8446867d5b588d26ea6005c8ea7c5eb41cf926f6113d23f2191355f6e0cfd95ea9bab98394a5b0a3f1e51a8399711b666fe55cc7b0bd745f942
+"dotenv@npm:18.0.2":
+  version: 18.0.2
+  resolution: "dotenv@npm:18.0.2"
+  bin:
+    dotenv: dist/index.cjs
+  checksum: 10c0/c16e179205096a7028eea5fba2062dbd25e88d93a0beb66d219507d4585f63ec3f02fda755eee5dca790b7424391a39332830b19983003f0d8d449fbc6845424
   languageName: node
   linkType: hard