diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 33eaadb..992c5d3 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -69,7 +69,7 @@ jobs:
       # subsequent PR runs compare against (see codecov.yml).
       - name: Upload coverage to Codecov (JDK 17 only)
         if: success() && matrix.java == '17'
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: build/reports/jacoco/test/jacocoTestReport.xml
diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 4411957..105a9cb 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -58,7 +58,7 @@ jobs:
       # configures `threshold: 5%` so a PR fails the Codecov status check
       # if line coverage drops more than 5 pp vs the base branch.
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: build/reports/jacoco/test/jacocoTestReport.xml