diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index f5eaefa..f146b92 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -35,7 +35,7 @@ jobs:
         # turbo remote cache. On a cold cache it does the real build itself.
         run: pnpm test:coverage
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v5
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v5
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with: