diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml
index 4e3c2ac..7f2b72b 100644
--- a/.github/workflows/go.yaml
+++ b/.github/workflows/go.yaml
@@ -55,7 +55,7 @@ jobs:
         run: go test -race -v -coverprofile=coverage.out -tags "sqlite_vacuum_full"
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
@@ -111,6 +111,6 @@ jobs:
         shell: msys2 {0}
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}