diff --git a/MODULE.bazel b/MODULE.bazel
index d356326..7e9ed5e 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -1,6 +1,6 @@
 "Bazel module that provides protoc-gen-js."
 
-module(name = "protobuf_javascript", version = "4.0.2-rc7")  # updated by release action
+module(name = "protobuf_javascript", version = "4.0.2")  # updated by release action
 
 bazel_dep(name = "abseil-cpp", version = "20250814.1")
 bazel_dep(name = "protobuf", version = "33.4", repo_name = "com_google_protobuf")
diff --git a/conformance/package.json b/conformance/package.json
index b0cf2bc..d232a67 100644
--- a/conformance/package.json
+++ b/conformance/package.json
@@ -11,7 +11,7 @@
     "LICENSE.md"
   ],
   "dependencies": {
-    "google-protobuf": "file:../google-protobuf-4.0.2-rc7.tgz"
+    "google-protobuf": "file:../google-protobuf-4.0.2.tgz"
   },
   "author": "Google Protocol Buffers Team",
   "license": "BSD-3-Clause"
diff --git a/package.json b/package.json
index 79b96a5..2a4cdfb 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "google-protobuf",
-  "version": "4.0.2-rc7",
+  "version": "4.0.2",
   "description": "Protocol Buffers for JavaScript",
   "main": "google-protobuf.js",
   "files": [
diff --git a/protobuf_javascript_release.bzl b/protobuf_javascript_release.bzl
index 907611d..5a18008 100644
--- a/protobuf_javascript_release.bzl
+++ b/protobuf_javascript_release.bzl
@@ -3,7 +3,7 @@
 load("@bazel_tools//tools/cpp:toolchain_utils.bzl", "find_cpp_toolchain")
 load("@rules_pkg//pkg:providers.bzl", "PackageVariablesInfo")
 
-_PROTOBUF_JAVASCRIPT_VERSION = "4.0.2-rc7"
+_PROTOBUF_JAVASCRIPT_VERSION = "4.0.2"
 
 def _package_naming_impl(ctx):
     values = {}
diff --git a/protoc_plugin/download-protoc-gen-js.js b/protoc_plugin/download-protoc-gen-js.js
index 2bb89cf..786201e 100644
--- a/protoc_plugin/download-protoc-gen-js.js
+++ b/protoc_plugin/download-protoc-gen-js.js
@@ -3,7 +3,8 @@ const os = require('os');
 const path = require('path');
 const AdmZip = require('adm-zip');
 
-const VERSION = '4.0.0';
+const pkg = require('./package.json');
+const VERSION = pkg.version;
 const BIN_DIR = path.join(__dirname, 'bin');
 
 function getZipFilename(currentSystem) {
diff --git a/protoc_plugin/package-lock.json b/protoc_plugin/package-lock.json
index 22d820d..3a59e78 100644
--- a/protoc_plugin/package-lock.json
+++ b/protoc_plugin/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@protocolbuffers/protoc-gen-js",
-  "version": "4.0.0",
+  "version": "4.0.2-rc7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@protocolbuffers/protoc-gen-js",
-      "version": "4.0.0",
+      "version": "4.0.2-rc7",
       "hasInstallScript": true,
       "license": "BSD-3-Clause",
       "dependencies": {
diff --git a/protoc_plugin/package.json b/protoc_plugin/package.json
index 4caa40b..288d69b 100644
--- a/protoc_plugin/package.json
+++ b/protoc_plugin/package.json
@@ -1,6 +1,6 @@
-{
+-{
   "name": "@protocolbuffers/protoc-gen-js",
-  "version": "4.0.2-rc7",
+  "version": "4.0.2",
   "description": "Official standalone distribution of the protoc-gen-js plugin for Protocol Buffers",
   "author": "Google Protocol Buffers Team",
   "license": "BSD-3-Clause",