diff --git a/.github/workflows/admin.yml b/.github/workflows/admin.yml
index 64a3e9756a..9057779948 100644
--- a/.github/workflows/admin.yml
+++ b/.github/workflows/admin.yml
@@ -68,7 +68,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
+        uses: codecov/codecov-action@968872560f81e7bdde9272853e65f2507c0eca7c # v5.0.0
         with:
           file: cover.out
           flags: admin
diff --git a/.github/workflows/agent.yml b/.github/workflows/agent.yml
index 86c6c9b537..96ffe254ad 100644
--- a/.github/workflows/agent.yml
+++ b/.github/workflows/agent.yml
@@ -105,7 +105,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
+        uses: codecov/codecov-action@968872560f81e7bdde9272853e65f2507c0eca7c # v5.0.0
         with:
           file: cover.out
           flags: agent
diff --git a/.github/workflows/managed.yml b/.github/workflows/managed.yml
index 2adc61d054..e88cda037e 100644
--- a/.github/workflows/managed.yml
+++ b/.github/workflows/managed.yml
@@ -94,7 +94,7 @@ jobs:
         run: docker exec -i pmm-server make -C managed test-update
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
+        uses: codecov/codecov-action@968872560f81e7bdde9272853e65f2507c0eca7c # v5.0.0
         with:
           file: managed/cover.out
           flags: managed
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 7601e7da84..f926367b9c 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -66,7 +66,7 @@ jobs:
         run: docker exec pmm-update-server make -C /root/go/src/github.com/percona/pmm/update run-race-cover RUN_FLAGS='-debug -check'
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
+        uses: codecov/codecov-action@968872560f81e7bdde9272853e65f2507c0eca7c # v5.0.0
         with:
           file: cover.out
           flags: update
diff --git a/.github/workflows/vmproxy.yml b/.github/workflows/vmproxy.yml
index f6730017f2..ce562d6e3e 100644
--- a/.github/workflows/vmproxy.yml
+++ b/.github/workflows/vmproxy.yml
@@ -70,7 +70,7 @@ jobs:
         run: make test-cover
 
       - name: Upload coverage results
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
+        uses: codecov/codecov-action@968872560f81e7bdde9272853e65f2507c0eca7c # v5.0.0
         with:
           file: cover.out
           flags: vmproxy