diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e371e48108..f57f7a6260 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -20,3 +20,6 @@ updates:
     labels:
       - "dependencies"
       - "skip-changelog"
+    ignore:
+      - dependency-name: "codecov/codecov-action"
+        versions: ["4.6.0"]
diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
index 15ae9080b6..559ad7e654 100644
--- a/.github/workflows/tox.yml
+++ b/.github/workflows/tox.yml
@@ -249,7 +249,7 @@ jobs:
           fi
 
       - name: Upload coverage data
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v4.5.0
         with:
           name: ${{ matrix.name }}
           # verbose: true # optional (default = false)