diff --git a/.github/workflows/package.yml b/.github/workflows/package.yml
index a0d3de2..50bbca8 100644
--- a/.github/workflows/package.yml
+++ b/.github/workflows/package.yml
@@ -77,7 +77,7 @@ jobs:
           poetry run pytest --cov=obscure_stats --cov-report term --cov-report xml:coverage.xml
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@84508663e988701840491b86de86b666e8a86bed # v4.3.0
+        uses: codecov/codecov-action@5ecb98a3c6b747ed38dc09f787459979aebb39be # v4.3.1
         if: matrix.python-version == '3.11'
         with:
           flags: smart-tests