diff --git a/Cargo.lock b/Cargo.lock
index 00c9a6f9d..a52106af9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2883,22 +2883,22 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592"
 dependencies = [
  "cfg-if",
- "js-sys",
  "libc",
  "wasi 0.11.0+wasi-snapshot-preview1",
- "wasm-bindgen",
 ]
 
 [[package]]
 name = "getrandom"
-version = "0.3.3"
+version = "0.3.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "26145e563e54f2cadc477553f1ec5ee650b00862f0a58bcd12cbdc5f0ea2d2f4"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
  "cfg-if",
+ "js-sys",
  "libc",
  "r-efi 5.2.0",
- "wasi 0.14.2+wasi-0.2.4",
+ "wasip2",
+ "wasm-bindgen",
 ]
 
 [[package]]
@@ -3902,7 +3902,7 @@ version = "0.1.33"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "38f262f097c174adebe41eb73d66ae9c06b2844fb0da69969647bbddd9b0538a"
 dependencies = [
- "getrandom 0.3.3",
+ "getrandom 0.3.4",
  "libc",
 ]
 
@@ -4491,11 +4491,11 @@ dependencies = [
 
 [[package]]
 name = "nanoid"
-version = "0.4.0"
+version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ffa00dec017b5b1a8b7cf5e2c008bfda1aa7e0697ac1508b491fdf2622fb4d8"
+checksum = "8628de41fe064cc3f0cf07f3d299ee3e73521adaff72278731d5c8cae3797873"
 dependencies = [
- "rand 0.8.8",
+ "rand 0.9.5",
 ]
 
 [[package]]
@@ -6622,7 +6622,7 @@ version = "0.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38"
 dependencies = [
- "getrandom 0.3.3",
+ "getrandom 0.3.4",
 ]
 
 [[package]]
@@ -8657,7 +8657,7 @@ dependencies = [
  "dirs 6.0.0",
  "dunce",
  "embed_plist",
- "getrandom 0.3.3",
+ "getrandom 0.3.4",
  "glob",
  "gtk",
  "heck 0.5.0",
@@ -10236,12 +10236,12 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
 
 [[package]]
-name = "wasi"
-version = "0.14.2+wasi-0.2.4"
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9683f9a5a998d873c0d21fcbe3c083009670149a8fab228644b8bd36b2c48cb3"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
 dependencies = [
- "wit-bindgen-rt",
+ "wit-bindgen",
 ]
 
 [[package]]
@@ -11158,13 +11158,10 @@ dependencies = [
 ]
 
 [[package]]
-name = "wit-bindgen-rt"
-version = "0.39.0"
+name = "wit-bindgen"
+version = "0.57.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1"
-dependencies = [
- "bitflags 2.11.0",
-]
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
 
 [[package]]
 name = "wl-clipboard-rs"
@@ -11510,7 +11507,7 @@ name = "yaak-database"
 version = "0.1.0"
 dependencies = [
  "chrono",
- "getrandom 0.2.16",
+ "getrandom 0.3.4",
  "include_dir",
  "log 0.4.34",
  "nanoid",
@@ -12258,7 +12255,7 @@ dependencies = [
  "deflate64",
  "flate2",
  "generic-array",
- "getrandom 0.3.3",
+ "getrandom 0.3.4",
  "hmac",
  "indexmap 2.14.2",
  "lzma-rust2",
diff --git a/crates/common/yaak-database/Cargo.toml b/crates/common/yaak-database/Cargo.toml
index 9ccd43387..5fb06e287 100644
--- a/crates/common/yaak-database/Cargo.toml
+++ b/crates/common/yaak-database/Cargo.toml
@@ -8,7 +8,7 @@ publish = false
 chrono = { version = "0.4.38", features = ["serde"] }
 include_dir = "0.7"
 log = { workspace = true }
-nanoid = "0.4.0"
+nanoid = "0.5.0"
 rusqlite = { version = "0.38", features = ["bundled", "chrono"] }
 sea-query-rusqlite = { version = "0.8.0", features = ["with-chrono"] }
 sea-query = { version = "1.0", features = ["with-chrono", "attr"] }
@@ -24,5 +24,5 @@ r2d2_sqlite = { version = "0.32" }
 # nanoid pulls getrandom, which needs to be told how to reach the browser's
 # CSPRNG on wasm32-unknown-unknown. Native targets are unaffected.
 [target.'cfg(target_arch = "wasm32")'.dependencies]
-getrandom = { version = "0.2", features = ["js"] }
+getrandom = { version = "0.3.4", features = ["wasm_js"] }
 uuid = { version = "1", features = ["js"] }
diff --git a/crates/yaak-models/Cargo.toml b/crates/yaak-models/Cargo.toml
index e9cff8cbf..3f2f6a5ce 100644
--- a/crates/yaak-models/Cargo.toml
+++ b/crates/yaak-models/Cargo.toml
@@ -10,7 +10,7 @@ yaak-database = { workspace = true }
 hex = { workspace = true }
 include_dir = "0.7"
 log = { workspace = true }
-nanoid = "0.4.0"
+nanoid = "0.5.0"
 rusqlite = { version = "0.38", features = ["bundled", "chrono"] }
 sea-query = { version = "1.0", features = ["with-chrono", "attr"] }
 sea-query-rusqlite = { version = "0.8.0", features = ["with-chrono"] }