diff --git a/.github/workflows/builder.yml b/.github/workflows/builder.yml
index a09e4723..1fbe0b87 100644
--- a/.github/workflows/builder.yml
+++ b/.github/workflows/builder.yml
@@ -24,7 +24,7 @@ jobs:
       # diffs the full push range (github.event.before..after), so multi-commit
       # pushes can't skip a rebuild. package.json/pnpm-lock.yaml are listed for every
       # service since they all share the root lockfile + pnpm install.
-      - uses: dorny/paths-filter@v4.0.1
+      - uses: dorny/paths-filter@v4.0.2
         id: filter
         with:
           filters: |
diff --git a/.github/workflows/crowdin-upload.yml b/.github/workflows/crowdin-upload.yml
index fb4106b9..ea8c0e8b 100644
--- a/.github/workflows/crowdin-upload.yml
+++ b/.github/workflows/crowdin-upload.yml
@@ -14,7 +14,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v7
 
-      - uses: dorny/paths-filter@v4.0.1
+      - uses: dorny/paths-filter@v4.0.2
         id: filter
         with:
           filters: |