diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index ce50b6b..0e454bf 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -85,7 +85,7 @@ jobs:
 
       # only upload coverage on one node version
       - if: matrix.node == 18
-        uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 # pin@3.1.5
+        uses: codecov/codecov-action@968872560f81e7bdde9272853e65f2507c0eca7c # pin@5.0.0
 
   lint:
     needs: build # Require build to complete before running tests