diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 86870080..e12a1894 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -101,7 +101,7 @@ jobs:
 
     - name: Upload PostgreSQL coverage
       if: matrix.python-version == '3.14'
-      uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5
+      uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         files: tests/coverage.xml
@@ -173,7 +173,7 @@ jobs:
 
     - name: Upload MariaDB coverage
       if: matrix.python-version == '3.14'
-      uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5
+      uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         files: tests/coverage.xml