diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 04357814..f1730648 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -46,7 +46,7 @@ jobs:
           node-version: ${{ matrix.node }}
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:node
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: node
           files: .coverage/*,packages/*/.coverage/*
@@ -62,7 +62,7 @@ jobs:
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:chrome
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: chrome
           files: .coverage/*,packages/*/.coverage/*
@@ -78,7 +78,7 @@ jobs:
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:chrome-webworker
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: chrome-webworker
           files: .coverage/*,packages/*/.coverage/*
@@ -94,7 +94,7 @@ jobs:
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:firefox
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: firefox
           files: .coverage/*,packages/*/.coverage/*
@@ -110,7 +110,7 @@ jobs:
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:firefox-webworker
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: firefox-webworker
           files: .coverage/*,packages/*/.coverage/*
@@ -126,7 +126,7 @@ jobs:
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:webkit
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: webkit
           files: .coverage/*,packages/*/.coverage/*
@@ -142,7 +142,7 @@ jobs:
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npx xvfb-maybe npm run --if-present test:electron-main
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: electron-main
           files: .coverage/*,packages/*/.coverage/*
@@ -158,7 +158,7 @@ jobs:
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npx xvfb-maybe npm run --if-present test:electron-renderer
-      - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # v5.0.7
+      - uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
         with:
           flags: electron-renderer
           files: .coverage/*,packages/*/.coverage/*
diff --git a/benchmarks/add-dir/package.json b/benchmarks/add-dir/package.json
index f419e237..90615481 100644
--- a/benchmarks/add-dir/package.json
+++ b/benchmarks/add-dir/package.json
@@ -12,7 +12,7 @@
     "doc-check": "aegir doc-check",
     "start": "npm run build && node dist/src/index.js"
   },
-  "dependencies": {
+  "devDependencies": {
     "@helia/unixfs": "^4.0.1",
     "aegir": "^45.0.1",
     "blockstore-core": "^5.0.2",
diff --git a/benchmarks/gc/package.json b/benchmarks/gc/package.json
index f4ba32c9..cfd6bf70 100644
--- a/benchmarks/gc/package.json
+++ b/benchmarks/gc/package.json
@@ -10,7 +10,7 @@
     "doc-check": "aegir doc-check",
     "start": "npm run build && node dist/src/index.js"
   },
-  "dependencies": {
+  "devDependencies": {
     "@ipld/dag-pb": "^4.0.6",
     "aegir": "^45.0.1",
     "blockstore-fs": "^2.0.1",
diff --git a/benchmarks/pinning/package.json b/benchmarks/pinning/package.json
index fcd18a70..93d5f891 100644
--- a/benchmarks/pinning/package.json
+++ b/benchmarks/pinning/package.json
@@ -10,7 +10,7 @@
     "doc-check": "aegir doc-check",
     "start": "npm run build && node dist/src/index.js"
   },
-  "dependencies": {
+  "devDependencies": {
     "@ipld/dag-pb": "^4.0.6",
     "aegir": "^45.0.1",
     "blockstore-fs": "^2.0.1",
diff --git a/benchmarks/transfer/package.json b/benchmarks/transfer/package.json
index e0fbe0be..925d27ab 100644
--- a/benchmarks/transfer/package.json
+++ b/benchmarks/transfer/package.json
@@ -12,7 +12,7 @@
     "doc-check": "aegir doc-check",
     "start": "npm run build && node dist/src/index.js"
   },
-  "dependencies": {
+  "devDependencies": {
     "@chainsafe/libp2p-noise": "^16.0.0",
     "@chainsafe/libp2p-yamux": "^7.0.0",
     "@libp2p/identify": "^3.0.1",
diff --git a/benchmarks/transports/package.json b/benchmarks/transports/package.json
index 60e73d9a..077a1505 100644
--- a/benchmarks/transports/package.json
+++ b/benchmarks/transports/package.json
@@ -11,7 +11,7 @@
     "dep-check": "aegir dep-check -i playwright-test",
     "start": "npm run build && node dist/src/index.js"
   },
-  "dependencies": {
+  "devDependencies": {
     "@chainsafe/libp2p-noise": "^16.0.0",
     "@chainsafe/libp2p-yamux": "^7.0.0",
     "@helia/block-brokers": "^4.0.2",