diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index 475fe3b..16ab3ce 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -128,7 +128,7 @@ jobs:
           retention-days: 30
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
+        uses: codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
         if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }}
         with:
           token: ${{ secrets.CODECOV_TOKEN }}