diff --git a/.github/workflows/module.build.yml b/.github/workflows/module.build.yml
index 06e4cb66..865e2db7 100644
--- a/.github/workflows/module.build.yml
+++ b/.github/workflows/module.build.yml
@@ -169,7 +169,7 @@ jobs:
         shell: bash
         run: bazel coverage --config=ci ${{ inputs.flags }} "//tools/..." "//tests/..." "//.aspect/..."
       - name: "Report: Coverage"
-        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
         if: inputs.coverage
         continue-on-error: true
         with: