diff --git a/.github/workflows/test-release-tools.yml b/.github/workflows/test-release-tools.yml
index b5b3dd8ae1e..4f99e5e72db 100644
--- a/.github/workflows/test-release-tools.yml
+++ b/.github/workflows/test-release-tools.yml
@@ -42,7 +42,7 @@ jobs:
         run: vendor/bin/phpunit --testsuite ${{ matrix.suite }} --coverage-text --coverage-clover coverage.xml
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5
         with:
           files: tools/release/coverage.xml
           flags: ${{ matrix.suite }}
diff --git a/.github/workflows/test-updater-script.yml b/.github/workflows/test-updater-script.yml
index ff7ce5f2059..1d4f85f8e6e 100644
--- a/.github/workflows/test-updater-script.yml
+++ b/.github/workflows/test-updater-script.yml
@@ -7,13 +7,7 @@ on:
   push:
     branches:
       - main
-    paths:
-      - '.github/scripts/update-updater-server.sh'
-      - 'tests/updater-script/**'
   pull_request:
-    paths:
-      - '.github/scripts/update-updater-server.sh'
-      - 'tests/updater-script/**'
 
 permissions:
   contents: read