diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index ced7ba8..707a7dd 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -83,7 +83,7 @@ jobs:
       - name: Run Roave Security Checker
         run: composer update --dry-run roave/security-advisories
 
-      - uses: codecov/codecov-action@v3
+      - uses: codecov/codecov-action@v4
         with:
           token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
           files: ./coverage.xml