diff --git a/.github/workflows/ci_main.yml b/.github/workflows/ci_main.yml
index 3f5a272..ee86189 100644
--- a/.github/workflows/ci_main.yml
+++ b/.github/workflows/ci_main.yml
@@ -297,7 +297,7 @@ jobs:
               run: rm -f ~/.git-credentials
 
             - name: Upload coverage to Codecov
-              uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
+              uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
               with:
                 files: lcov.info
                 fail_ci_if_error: true
diff --git a/.github/workflows/ci_pr.yml b/.github/workflows/ci_pr.yml
index fd2b038..038137a 100644
--- a/.github/workflows/ci_pr.yml
+++ b/.github/workflows/ci_pr.yml
@@ -187,7 +187,7 @@ jobs:
             # the next push to main after merge.
             - name: Upload coverage to Codecov
               if: github.actor != 'dependabot[bot]'
-              uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
+              uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
               with:
                 files: lcov.info
                 fail_ci_if_error: true