diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 7f367d5..585872a 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -111,7 +111,7 @@ jobs:
       # authoritative CI gate. Do not fail CI on SaaS upload/auth problems.
       - name: Upload coverage to CodeCov
         if: ${{ !env.ACT }}
-        uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+        uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           use_oidc: true
           disable_search: true