diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 6cde7164..a2bb8ac0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -66,4 +66,4 @@ jobs:
 
       - name: Upload coverage
         if: matrix.ruby == '3.2' || matrix.ruby == '3.3'
-        uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 # pin@3.1.5
+        uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # pin@5.0.7