diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
index bc0c246..1506dcc 100644
--- a/.github/workflows/_release.yml
+++ b/.github/workflows/_release.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           use-cache: false
       - run: yarn test --coverage
-      - uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
       - name: Update eslint-ci-rules if needed
         if: ${{ contains(github.event.head_commit.message, 'update dependency eslint-config-txo') || contains(github.event.head_commit.message, 'update eslint txo packages') }}
         run: |
diff --git a/.github/workflows/_unit-test.yml b/.github/workflows/_unit-test.yml
index 1a351f4..81e52e4 100644
--- a/.github/workflows/_unit-test.yml
+++ b/.github/workflows/_unit-test.yml
@@ -19,7 +19,7 @@ jobs:
             echo "::set-output name=exists::false"
           fi
       - if: steps.check-dir.outputs.exists == 'true'
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
       - name: Send a Slack message on failure
         if: failure()
         uses: technology-studio/github-workflows/.github/actions/slack-failed-job-message@main