diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8773478..3e22567 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,8 @@ what has already shipped, and for nothing else. See `RELEASING.md`.
 
 ## [Unreleased]
 
+## [2026.47] — 2026-10-17
+
 ### Added
 
 - **The scan judges CVEs against the installed version** (docs/DESIGN.md §5). A scan found the
@@ -183,7 +185,6 @@ what has already shipped, and for nothing else. See `RELEASING.md`.
   pull request with auto-merge; `release.py` pushes nothing, checks that the local main is the
   remote's, and creates the GitHub release on that exact commit (`--target`).
 
-
 ## [2026.46] — 2026-10-10
 
 ### Fixed