diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index dc0662a9..cdb56dad 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -84,7 +84,7 @@ jobs:
           uv run python -m coverage xml -i
       - name: 🚀 Upload coverage report
         if: env.HAS_CODECOV_TOKEN == 'true'
-        uses: codecov/codecov-action@3f20e214133d0983f9a10f3d63b0faf9241a3daa # v6.0.0
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
       - name: ℹ️ Skip Codecov upload (missing token)