diff --git a/CHANGELOG/CHANGELOG-1.x.md b/CHANGELOG/CHANGELOG-1.x.md
index 3953ef1..b9c74af 100644
--- a/CHANGELOG/CHANGELOG-1.x.md
+++ b/CHANGELOG/CHANGELOG-1.x.md
@@ -19,6 +19,19 @@ Date format: `YYYY-MM-DD`
 
 ---
 
+## [1.47.5] - 2026-07-12
+
+### Added
+### Changed
+### Deprecated
+### Removed
+### Fixed
+### Security
+- **debt:** Upgraded to [sixafter/nanoid@v1.64.5](https://github.com/sixafter/nanoid/releases/tag/v1.64.5).
+- **debt:** Upgraded dependencies to their latest stable versions.
+
+---
+
 ## [1.47.4] - 2026-06-29
 
 ### Added
@@ -826,7 +839,8 @@ Date format: `YYYY-MM-DD`
 ### Fixed
 ### Security
 
-[Unreleased]: https://github.com/sixafter/nanoid-cli/compare/v1.47.4...HEAD
+[Unreleased]: https://github.com/sixafter/nanoid-cli/compare/v1.47.5...HEAD
+[1.47.5]: https://github.com/sixafter/nanoid-cli/compare/v1.47.4...v1.47.5
 [1.47.4]: https://github.com/sixafter/nanoid-cli/compare/v1.47.3...v1.47.4
 [1.47.3]: https://github.com/sixafter/nanoid-cli/compare/v1.47.2...v1.47.3
 [1.47.2]: https://github.com/sixafter/nanoid-cli/compare/v1.47.1...v1.47.2
diff --git a/README.md b/README.md
index 64cc671..a79e0de 100644
--- a/README.md
+++ b/README.md
@@ -34,10 +34,10 @@ using the [NanoID](https://github.com/sixafter/nanoid) Go implementation.
 To verify the integrity of the release, you can use Cosign to check the signature and checksums. Follow these steps:
 
 ```sh
-# Fetch the latest release tag from GitHub API (e.g., "v1.47.4")
+# Fetch the latest release tag from GitHub API (e.g., "v1.47.5")
 TAG=$(curl -s https://api.github.com/repos/sixafter/nanoid-cli/releases/latest | jq -r .tag_name)
 
-# Remove leading "v" for filenames (e.g., "v1.47.4" -> "1.47.4")
+# Remove leading "v" for filenames (e.g., "v1.47.5" -> "1.47.5")
 VERSION=${TAG#v}
 
 # ---------------------------------------------------------------------
diff --git a/go.mod b/go.mod
index 229855f..3b6b37d 100644
--- a/go.mod
+++ b/go.mod
@@ -9,7 +9,7 @@ go 1.26
 
 require (
 	github.com/dustin/go-humanize v1.0.1
-	github.com/sixafter/nanoid v1.64.4
+	github.com/sixafter/nanoid v1.64.5
 	github.com/sixafter/semver v1.12.1
 	github.com/spf13/cobra v1.10.2
 	github.com/stretchr/testify v1.11.1
@@ -20,9 +20,9 @@ require (
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/sixafter/aes-ctr-drbg v1.19.2 // indirect
-	github.com/sixafter/prng-chacha v1.16.4 // indirect
+	github.com/sixafter/prng-chacha v1.16.5 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
-	golang.org/x/crypto v0.53.0 // indirect
-	golang.org/x/sys v0.46.0 // indirect
+	golang.org/x/crypto v0.54.0 // indirect
+	golang.org/x/sys v0.47.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
diff --git a/go.sum b/go.sum
index 23f3739..46f23f4 100644
--- a/go.sum
+++ b/go.sum
@@ -12,10 +12,10 @@ github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZN
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/sixafter/aes-ctr-drbg v1.19.2 h1:+Bd1tS9/y/GapqgyyRjmrce6a5wUAQPusJXlAOh44yM=
 github.com/sixafter/aes-ctr-drbg v1.19.2/go.mod h1:iOBiPPkiy5Z5cEWm2yCoqEtnkfafxNTokJLL0zOPZeQ=
-github.com/sixafter/nanoid v1.64.4 h1:P7ZUuKcbmvtJahTOyqe24oiH8IfCLPjr1cfK9CEUlVo=
-github.com/sixafter/nanoid v1.64.4/go.mod h1:jrSzbUU+n8kur6IJx9Nq2uFSATohog6RM12YU258iT4=
-github.com/sixafter/prng-chacha v1.16.4 h1:LXC5WG4CIBGNsG81rQQTfCApMXiKZBBh44CfAQ/jfY0=
-github.com/sixafter/prng-chacha v1.16.4/go.mod h1:02GkgYIs6uzGexyNtleqcNxODa+9MMvz0XAFqnvDHVM=
+github.com/sixafter/nanoid v1.64.5 h1:Aei4SU9i9I35EyJQawo9XYpzYoARGobQRU8EnBf/Pjo=
+github.com/sixafter/nanoid v1.64.5/go.mod h1:+9tqjRHutec4D9mCKGvTaGSAxj1Q+eEHOvfp2WQgWa4=
+github.com/sixafter/prng-chacha v1.16.5 h1:RNPMMVDq6rzBS+wDc9BAkpcKoVRhFGfBIwGRUCo5+Cc=
+github.com/sixafter/prng-chacha v1.16.5/go.mod h1:fY7WtbBwx94oa5qN417ZzCLCozjQ7JDag7dr1f/v2Ss=
 github.com/sixafter/semver v1.12.1 h1:dgA+B5zhJ+xQMuzRtC5lm6fmrZIA+WBVx0p9yvsBFl4=
 github.com/sixafter/semver v1.12.1/go.mod h1:f8opmUKKzjE6lAlQfFRjM1uiVGH6qJ3FF2CafaF+qtQ=
 github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=
@@ -26,12 +26,12 @@ github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3A
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
-golang.org/x/crypto v0.53.0 h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto=
-golang.org/x/crypto v0.53.0/go.mod h1:DNLU434OwVakk9PzuwV8w62mAJpRJL3vsgcfp4Qnsio=
+golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=
+golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk=
 golang.org/x/exp v0.0.0-20260112195511-716be5621a96 h1:Z/6YuSHTLOHfNFdb8zVZomZr7cqNgTJvA8+Qz75D8gU=
 golang.org/x/exp v0.0.0-20260112195511-716be5621a96/go.mod h1:nzimsREAkjBCIEFtHiYkrJyT+2uy9YZJB7H1k68CXZU=
-golang.org/x/sys v0.46.0 h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=
-golang.org/x/sys v0.46.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
+golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
diff --git a/vendor/github.com/sixafter/nanoid/README.md b/vendor/github.com/sixafter/nanoid/README.md
index cb44947..b72c7ba 100644
--- a/vendor/github.com/sixafter/nanoid/README.md
+++ b/vendor/github.com/sixafter/nanoid/README.md
@@ -61,10 +61,10 @@ Please see the [nanoid-cli](https://github.com/sixafter/nanoid-cli) for a comman
 To verify the integrity of the release, follow these steps:
 
 ```sh
-# Fetch the latest release tag from GitHub API (e.g., "v1.64.4")
+# Fetch the latest release tag from GitHub API (e.g., "v1.64.5")
 TAG=$(curl -s https://api.github.com/repos/sixafter/nanoid/releases/latest | jq -r .tag_name)
 
-# Remove leading "v" for filenames (e.g., "v1.64.4" -> "1.64.4")
+# Remove leading "v" for filenames (e.g., "v1.64.5" -> "1.64.5")
 VERSION=${TAG#v}
 
 # ---------------------------------------------------------------------
diff --git a/vendor/github.com/sixafter/prng-chacha/README.md b/vendor/github.com/sixafter/prng-chacha/README.md
index aa074ce..41112b1 100644
--- a/vendor/github.com/sixafter/prng-chacha/README.md
+++ b/vendor/github.com/sixafter/prng-chacha/README.md
@@ -57,10 +57,10 @@ Please see the [godoc](https://pkg.go.dev/github.com/sixafter/prng-chacha) for d
 To verify the integrity of the release tarball, you can use Cosign to check the signature against the public key.
 
 ```sh
-# Fetch the latest release tag from GitHub API (e.g., "v1.16.4")
+# Fetch the latest release tag from GitHub API (e.g., "v1.16.5")
 TAG=$(curl -s https://api.github.com/repos/sixafter/prng-chacha/releases/latest | jq -r .tag_name)
 
-# Remove leading "v" for filenames (e.g., "v1.16.4" -> "1.16.4")
+# Remove leading "v" for filenames (e.g., "v1.16.5" -> "1.16.5")
 VERSION=${TAG#v}
 
 # ---------------------------------------------------------------------
diff --git a/vendor/golang.org/x/sys/cpu/parse.go b/vendor/golang.org/x/sys/cpu/parse.go
index 56a7e1a..12a99af 100644
--- a/vendor/golang.org/x/sys/cpu/parse.go
+++ b/vendor/golang.org/x/sys/cpu/parse.go
@@ -6,38 +6,50 @@ package cpu
 
 import "strconv"
 
-// parseRelease parses a dot-separated version number. It follows the semver
-// syntax, but allows the minor and patch versions to be elided.
+// parseRelease parses a dot-separated version number from the prefix
+// of rel. It returns ok=true only if at least the major and minor
+// components were successfully parsed; the patch component is
+// best-effort. Trailing vendor or build suffixes such as
+// "-generic", "+", "_hi3535", or "-rc1" are ignored.
 //
 // This is a copy of the Go runtime's parseRelease from
-// https://golang.org/cl/209597.
+// https://golang.org/cl/209597, updated in https://golang.org/cl/781800.
 func parseRelease(rel string) (major, minor, patch int, ok bool) {
-	// Strip anything after a dash or plus.
-	for i := range len(rel) {
-		if rel[i] == '-' || rel[i] == '+' {
-			rel = rel[:i]
-			break
+	// next consumes a run of decimal digits from the front of rel,
+	// returning the parsed value. If the digits are followed by a
+	// '.', it is consumed and more is set so the caller knows to
+	// parse another component; otherwise scanning terminates and
+	// the rest of rel is discarded.
+	next := func() (n int, more, ok bool) {
+		i := 0
+		for i < len(rel) && rel[i] >= '0' && rel[i] <= '9' {
+			i++
 		}
-	}
-
-	next := func() (int, bool) {
-		for i := range len(rel) {
-			if rel[i] == '.' {
-				ver, err := strconv.Atoi(rel[:i])
-				rel = rel[i+1:]
-				return ver, err == nil
-			}
+		if i == 0 {
+			return 0, false, false
+		}
+		n, err := strconv.Atoi(rel[:i])
+		if err != nil {
+			return 0, false, false
+		}
+		if i < len(rel) && rel[i] == '.' {
+			rel = rel[i+1:]
+			return n, true, true
 		}
-		ver, err := strconv.Atoi(rel)
 		rel = ""
-		return ver, err == nil
+		return n, false, true
+	}
+
+	var more bool
+	if major, more, ok = next(); !ok || !more {
+		return 0, 0, 0, false
 	}
-	if major, ok = next(); !ok || rel == "" {
-		return
+	if minor, more, ok = next(); !ok {
+		return 0, 0, 0, false
 	}
-	if minor, ok = next(); !ok || rel == "" {
-		return
+	if !more {
+		return major, minor, 0, true
 	}
-	patch, ok = next()
-	return
+	patch, _, _ = next()
+	return major, minor, patch, true
 }
diff --git a/vendor/modules.txt b/vendor/modules.txt
index d718b5b..58327d4 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -13,10 +13,10 @@ github.com/pmezard/go-difflib/difflib
 # github.com/sixafter/aes-ctr-drbg v1.19.2
 ## explicit; go 1.26
 github.com/sixafter/aes-ctr-drbg
-# github.com/sixafter/nanoid v1.64.4
+# github.com/sixafter/nanoid v1.64.5
 ## explicit; go 1.26
 github.com/sixafter/nanoid
-# github.com/sixafter/prng-chacha v1.16.4
+# github.com/sixafter/prng-chacha v1.16.5
 ## explicit; go 1.26
 github.com/sixafter/prng-chacha
 # github.com/sixafter/semver v1.12.1
@@ -32,11 +32,11 @@ github.com/spf13/pflag
 ## explicit; go 1.17
 github.com/stretchr/testify/assert
 github.com/stretchr/testify/assert/yaml
-# golang.org/x/crypto v0.53.0
+# golang.org/x/crypto v0.54.0
 ## explicit; go 1.25.0
 golang.org/x/crypto/chacha20
 golang.org/x/crypto/internal/alias
-# golang.org/x/sys v0.46.0
+# golang.org/x/sys v0.47.0
 ## explicit; go 1.25.0
 golang.org/x/sys/cpu
 # gopkg.in/yaml.v3 v3.0.1