diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 94a5a63..c43f1ad 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -40,6 +40,6 @@ jobs:
       run: |
         uv run --all-groups pytest --cov-config=pyproject.toml --cov=pkg --cov-report xml --cov=src
     - name: Upload coverage
-      uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5
+      uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
       with:
         token: ${{ secrets.CODECOV_TOKEN }}