diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b65e9abc..a64c24ea 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -88,7 +88,7 @@ jobs:
           CI: true
         run: ./scripts/gha-test.sh
       # Upload coverage report
-      - uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 # v3
+      - uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3
         # do not upload coverage for renovate/ branches
         if: "!contains(github.ref, 'renovate')"
         with: