diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index ce50b6b..fd368e8 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -85,7 +85,7 @@ jobs:
 
       # only upload coverage on one node version
       - if: matrix.node == 18
-        uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 # pin@3.1.5
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # pin@5.0.7
 
   lint:
     needs: build # Require build to complete before running tests