diff --git a/bucket/sops.json b/bucket/sops.json
index 42a5f0af60..36f4b5b3f2 100644
--- a/bucket/sops.json
+++ b/bucket/sops.json
@@ -1,13 +1,13 @@
 {
-    "version": "3.9.3",
+    "version": "3.9.4",
     "description": "Editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault and PGP",
     "homepage": "https://github.com/getsops/sops",
     "license": "MPL-2.0",
     "depends": "gpg",
     "architecture": {
         "64bit": {
-            "url": "https://github.com/getsops/sops/releases/download/v3.9.3/sops-v3.9.3.exe#/sops.exe",
-            "hash": "df9372dd551a872918d70fcc4394e58a498d4f16bae414b1995555059ba8d4f6"
+            "url": "https://github.com/getsops/sops/releases/download/v3.9.4/sops-v3.9.4.exe#/sops.exe",
+            "hash": "bee270926fc55b5b89ed9ce87fb2569a36c74e99d63e6392090b3d0f0c2775eb"
         }
     },
     "bin": "sops.exe",