diff --git a/.github/workflows/admin.yml b/.github/workflows/admin.yml
index 77c747537d..7ffcbf7c7e 100644
--- a/.github/workflows/admin.yml
+++ b/.github/workflows/admin.yml
@@ -71,7 +71,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
+        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
         with:
           file: cover.out
           flags: admin
diff --git a/.github/workflows/agent.yml b/.github/workflows/agent.yml
index 880e189cb5..6f72946aad 100644
--- a/.github/workflows/agent.yml
+++ b/.github/workflows/agent.yml
@@ -113,7 +113,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
+        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
         with:
           files: cover.out
           flags: agent
diff --git a/.github/workflows/managed.yml b/.github/workflows/managed.yml
index dbda78d10f..9c5e025bac 100644
--- a/.github/workflows/managed.yml
+++ b/.github/workflows/managed.yml
@@ -83,7 +83,7 @@ jobs:
         run: docker exec -i pmm-server make -C managed test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
+        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
         with:
           files: managed/cover.out
           flags: managed
diff --git a/.github/workflows/vmproxy.yml b/.github/workflows/vmproxy.yml
index e5929870dd..e7f05c8483 100644
--- a/.github/workflows/vmproxy.yml
+++ b/.github/workflows/vmproxy.yml
@@ -73,7 +73,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
+        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
         with:
           file: cover.out
           flags: vmproxy