diff --git a/.github/workflows/agent-tox.yml b/.github/workflows/agent-tox.yml
index c5afdb21d..180db2157 100644
--- a/.github/workflows/agent-tox.yml
+++ b/.github/workflows/agent-tox.yml
@@ -49,7 +49,7 @@ jobs:
       - name: Run unit tests
         run: uvx --with tox-uv tox -e unit
       - name: Upload coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           files: coverage.xml
           flags: agent
diff --git a/.github/workflows/cli-tox.yml b/.github/workflows/cli-tox.yml
index 77d5a8244..8c598222d 100644
--- a/.github/workflows/cli-tox.yml
+++ b/.github/workflows/cli-tox.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Run unit tests
         run: uvx --with tox-uv tox -e unit
       - name: Upload coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           files: coverage.xml
           flags: cli
diff --git a/.github/workflows/device-tox.yml b/.github/workflows/device-tox.yml
index 1a35f5fd7..8ed2712c3 100644
--- a/.github/workflows/device-tox.yml
+++ b/.github/workflows/device-tox.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Run unit tests
         run: uvx --with tox-uv tox -e unit
       - name: Upload coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           files: coverage.xml
           flags: device
diff --git a/.github/workflows/server-tox.yml b/.github/workflows/server-tox.yml
index 0cdf9b9db..3de673ffb 100644
--- a/.github/workflows/server-tox.yml
+++ b/.github/workflows/server-tox.yml
@@ -47,7 +47,7 @@ jobs:
       - name: Run unit tests
         run: uvx --with tox-uv tox -e unit
       - name: Upload coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           files: coverage.xml
           flags: server
@@ -84,7 +84,7 @@ jobs:
       - name: Run charm unit tests
         run: uvx --with tox-uv tox -e unit
       - name: Upload coverage
-        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
         with:
           files: coverage.xml
           flags: server