diff --git a/.github/workflows/publish-upm.yml b/.github/workflows/publish-upm.yml
index 2a55737..8039d01 100644
--- a/.github/workflows/publish-upm.yml
+++ b/.github/workflows/publish-upm.yml
@@ -41,7 +41,7 @@ jobs:
         # PR-only: the output is only consulted for pull_request runs, and paths-filter
         # has no natural diff base on workflow_dispatch.
         if: github.event_name == 'pull_request'
-        uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
+        uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
         with:
           filters: |
             code: