diff --git a/Cargo.lock b/Cargo.lock
index 1bd3cf2f..0917e30a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -84,7 +84,7 @@ dependencies = [
 
 [[package]]
 name = "ctutils"
-version = "0.4.6"
+version = "0.4.7"
 dependencies = [
  "cmov",
  "proptest",
diff --git a/ctutils/CHANGELOG.md b/ctutils/CHANGELOG.md
index 66955dba..886e0565 100644
--- a/ctutils/CHANGELOG.md
+++ b/ctutils/CHANGELOG.md
@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.4.7 (2026-10-29)
+### Security
+- Thumb-1 (Cortex-M0) and RISCV32 constant-time hardening ([#1580])
+
+[#1580]: https://github.com/RustCrypto/utils/pull/1580
+
 ## 0.4.6 (2026-10-25)
 ### Added
 - `primitives::borrowing_sub_mask_u32`/`_u64` for propagating word-sized
diff --git a/ctutils/Cargo.toml b/ctutils/Cargo.toml
index 61658907..1f4f5ce3 100644
--- a/ctutils/Cargo.toml
+++ b/ctutils/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "ctutils"
-version = "0.4.6"
+version = "0.4.7"
 authors = ["RustCrypto Developers"]
 edition = "2024"
 rust-version = "1.87"
@@ -17,7 +17,7 @@ architecture-specific predication intrinsics. Heavily inspired by the `subtle` c
 """
 
 [dependencies]
-cmov = "0.5.3"
+cmov = "0.5.4"
 
 # optional dependencies
 subtle = { version = "2.6", optional = true, default-features = false }
diff --git a/ctutils/checkct/Cargo.lock b/ctutils/checkct/Cargo.lock
index c1d32636..c5e50e29 100644
--- a/ctutils/checkct/Cargo.lock
+++ b/ctutils/checkct/Cargo.lock
@@ -17,7 +17,7 @@ version = "0.5.4"
 
 [[package]]
 name = "ctutils"
-version = "0.4.6"
+version = "0.4.7"
 dependencies = [
  "cmov",
 ]