diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 46379f2..31401a3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -73,7 +73,7 @@ jobs:
       # Add CODECOV_TOKEN to repo secrets to enable.
       - name: Upload coverage
         if: matrix.node == '20' # upload once, from Node 20 only
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v4.6.0
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v4.6.0
         continue-on-error: true # don't fail CI if Codecov is unavailable
         with:
           files: ./coverage/lcov.info