build(deps): bump dorny/paths-filter from 3 to 4

.github/workflows/ci.yml

@@ -22,7 +22,7 @@
         with:
           fetch-depth: 0
 
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@v4
         id: filter
         with:
           list-files: json
@@ -75,7 +75,7 @@
         run: |
           if [ -f "requirements.lock" ]; then
             echo "Checking lockfile consistency..."
             pip install -r requirements.lock --dry-run 2>&1 | grep -i "requirement already satisfied" || true
           fi
 
       - name: Install dependencies
@@ -154,7 +154,7 @@
         if: runner.os == 'Linux'
         run: |
           sudo apt-get update
           sudo apt-get install -y build-essential g++ clang libomp-dev ccache ninja-build
 
       - name: Install macOS Dependencies
         if: runner.os == 'macOS'
@@ -199,7 +199,7 @@
         if: always()
         uses: actions/upload-artifact@v4
         with:
           name: build-${{ matrix.os }}-${{ matrix.cxx || 'msvc' }}-${{ matrix.variant }}
           path: |
             build/
             *.log
@@ -218,13 +218,13 @@
           script: |
             const jobs = [
               { name: 'Python Lint', job: 'python-lint' },
               { name: 'Python Tests (3.9)', job: 'python-tests', matrix: '3.9' },
               { name: 'Python Tests (3.10)', job: 'python-tests', matrix: '3.10' },
               { name: 'Python Tests (3.11)', job: 'python-tests', matrix: '3.11' },
               { name: 'Python Tests (3.12)', job: 'python-tests', matrix: '3.12' },
               { name: 'C++ Build (Ubuntu GCC)', job: 'cpp-build', matrix: 'ubuntu-latest-g++' },
               { name: 'C++ Build (Ubuntu Clang)', job: 'cpp-build', matrix: 'ubuntu-latest-clang++' },
               { name: 'C++ Build (macOS)', job: 'cpp-build', matrix: 'macos-latest' },
               { name: 'C++ Build (Windows)', job: 'cpp-build', matrix: 'windows-latest' },
             ];
 

.github/workflows/pr-check.yml

@@ -1,4 +1,4 @@
 name: PR Checks 
 concurrency:
   group: pr-checks-${{ github.event.issue.number || github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true
@@ -7,7 +7,7 @@
   pull_request:
     types: [opened, synchronize, reopened]
 
 
   issue_comment:
     types: [created]
 
@@ -16,7 +16,7 @@
   pull-requests: write
 
 jobs:
 
   init:
     runs-on: ubuntu-latest
     outputs:
@@ -88,7 +88,7 @@
       - name: Detect changed files
         if: steps.decide.outputs.should_run == 'true'
         id: changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         with:
           list-files: json
           filters: |
@@ -205,7 +205,7 @@
             xargs -a /tmp/py_files.txt bandit -ll || echo "::warning::Bandit found issues (non-blocking)"
           fi
 
 
       - name: Lint Docker (changed files only)
         if: needs.init.outputs.has_docker == 'true'
         run: |
@@ -216,7 +216,7 @@
             done
           fi
 
 
       - name: Lint JS/TS (changed files only)
         if: needs.init.outputs.has_js == 'true'
         run: |
@@ -226,7 +226,7 @@
             xargs -a /tmp/js_files.txt eslint --max-warnings=10 || true
           fi
 
 
       - name: Lint YAML (changed files only)
         if: needs.init.outputs.has_yaml == 'true'
         run: |
@@ -237,7 +237,7 @@
             done
           fi
 
 
       - name: Lint Shell (changed files only)
         if: needs.init.outputs.has_shell == 'true'
         run: |
@@ -247,7 +247,7 @@
             xargs -a /tmp/sh_files.txt shellcheck --severity=warning || true
           fi
 
 
       - name: Lint Markdown (changed files only)
         if: needs.init.outputs.has_md == 'true'
         run: |
@@ -257,7 +257,7 @@
             echo "$FILES" | jq -r '.[]' | xargs markdownlint || true
           fi
 
 
       - name: Lint Rust (changed files only)
         if: needs.init.outputs.has_rust == 'true'
         run: |
@@ -265,7 +265,7 @@
           cargo fmt --check 2>/dev/null || true
           cargo clippy -- -D warnings 2>/dev/null || true
 
 
       - name: Lint Go (changed files only)
         if: needs.init.outputs.has_go == 'true'
         run: |