diff --git a/package-lock.json b/package-lock.json
index ddf9c5b7..080a960f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3372,15 +3372,18 @@
       }
     },
     "node_modules/@nestjs/config": {
-      "version": "4.0.4",
+      "version": "12.0.0",
+      "resolved": "https://registry.npmjs.org/@nestjs/config/-/config-12.0.0.tgz",
+      "integrity": "sha512-pG5+fFfCo3cdgVkLJLvvhUGfxEjwzv9hIAQ1aJVHvHlHVniDWfwX5pR/utgoAkJzSikv2oTR1BmIF03FXdi42Q==",
       "license": "MIT",
       "dependencies": {
-        "dotenv": "17.4.1",
-        "dotenv-expand": "12.0.3",
-        "lodash": "4.18.1"
+        "@standard-schema/spec": "1.1.0",
+        "dotenv": "17.4.2",
+        "dotenv-expand": "13.0.0",
+        "es-toolkit": "1.51.0"
       },
       "peerDependencies": {
-        "@nestjs/common": "^10.0.0 || ^11.0.0",
+        "@nestjs/common": "^11.0.0 || ^12.0.0",
         "rxjs": "^7.1.0"
       }
     },
@@ -6985,6 +6988,12 @@
         "@sinonjs/commons": "^3.0.1"
       }
     },
+    "node_modules/@standard-schema/spec": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
+      "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
+      "license": "MIT"
+    },
     "node_modules/@tokenizer/inflate": {
       "version": "0.4.1",
       "license": "MIT",
@@ -9511,7 +9520,9 @@
       }
     },
     "node_modules/dotenv": {
-      "version": "17.4.1",
+      "version": "17.4.2",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.2.tgz",
+      "integrity": "sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==",
       "license": "BSD-2-Clause",
       "engines": {
         "node": ">=12"
@@ -9521,21 +9532,13 @@
       }
     },
     "node_modules/dotenv-expand": {
-      "version": "12.0.3",
+      "version": "13.0.0",
+      "resolved": "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-13.0.0.tgz",
+      "integrity": "sha512-aBfBS8eYIeXmpHI9ThIlA7/WLq+SLt18iXUZhb52rW89QLKQFoIpPG1bPeewoPZsTyjSSO3T7234FBVUM1V2rA==",
       "license": "BSD-2-Clause",
       "dependencies": {
-        "dotenv": "^16.4.5"
-      },
-      "engines": {
-        "node": ">=12"
+        "dotenv": "^17.4.2"
       },
-      "funding": {
-        "url": "https://dotenvx.com"
-      }
-    },
-    "node_modules/dotenv-expand/node_modules/dotenv": {
-      "version": "16.6.1",
-      "license": "BSD-2-Clause",
       "engines": {
         "node": ">=12"
       },
@@ -9675,7 +9678,6 @@
       "version": "1.51.0",
       "resolved": "https://registry.npmjs.org/es-toolkit/-/es-toolkit-1.51.0.tgz",
       "integrity": "sha512-zC2lQGkM7QX+Gm6iM3+WIdZJzthsEd14LvRNJneSO2hzyz/zNBENR8+YXWo1cKxgPBtV6ksPYHELbcwBRzmdCw==",
-      "dev": true,
       "license": "MIT",
       "workspaces": [
         "docs",
@@ -15426,7 +15428,7 @@
       "dependencies": {
         "@beyondnet/evolith-agent-runtime": "*",
         "@nestjs/common": "11.2.1",
-        "@nestjs/config": "4.0.4",
+        "@nestjs/config": "^12.0.0",
         "@nestjs/core": "11.2.1",
         "@nestjs/platform-express": "11.1.28",
         "@opentelemetry/api": "^1.9.1",
@@ -15495,7 +15497,7 @@
         "@keyv/redis": "5.1.6",
         "@nestjs/cache-manager": "3.1.3",
         "@nestjs/common": "11.2.1",
-        "@nestjs/config": "4.0.4",
+        "@nestjs/config": "^12.0.0",
         "@nestjs/core": "11.2.1",
         "@nestjs/platform-express": "11.1.28",
         "@nestjs/swagger": "11.4.7",
@@ -15537,7 +15539,7 @@
         "globals": "14.0.0",
         "jest": "30.4.2",
         "prettier": "3.8.4",
-        "source-map-support": "^0.5.21",
+        "source-map-support": "0.5.21",
         "supertest": "7.2.2",
         "ts-jest": "29.4.12",
         "ts-loader": "9.6.2",
diff --git a/src/apps/agent-runtime-api/package.json b/src/apps/agent-runtime-api/package.json
index 295dd1c4..0c55068a 100644
--- a/src/apps/agent-runtime-api/package.json
+++ b/src/apps/agent-runtime-api/package.json
@@ -15,7 +15,7 @@
   "dependencies": {
     "@beyondnet/evolith-agent-runtime": "*",
     "@nestjs/common": "11.2.1",
-    "@nestjs/config": "4.0.4",
+    "@nestjs/config": "12.0.0",
     "@nestjs/core": "11.2.1",
     "@nestjs/platform-express": "11.1.28",
     "@opentelemetry/api": "^1.9.1",
diff --git a/src/apps/core-api/package.json b/src/apps/core-api/package.json
index 00fd1590..47e741fd 100644
--- a/src/apps/core-api/package.json
+++ b/src/apps/core-api/package.json
@@ -26,7 +26,7 @@
     "@keyv/redis": "5.1.6",
     "@nestjs/cache-manager": "3.1.3",
     "@nestjs/common": "11.2.1",
-    "@nestjs/config": "4.0.4",
+    "@nestjs/config": "12.0.0",
     "@nestjs/core": "11.2.1",
     "@nestjs/platform-express": "11.1.28",
     "@nestjs/swagger": "11.4.7",