diff --git a/.github/workflows/build-pr.yml b/.github/workflows/build-pr.yml
index 69c615294e602e6942203fd6164bfc6e4e7b04a4..42f82b83178ea07fcd89e8b01cd00fe62c27a98b 100644
--- a/.github/workflows/build-pr.yml
+++ b/.github/workflows/build-pr.yml
@@ -54,7 +54,7 @@ jobs:
         run: yarn jest --maxWorkers=2 --ci
 
       - name: Codecov
-        uses: codecov/codecov-action@51d810878be5422784e86451c0e7c14e5860ec47 # renovate: tag=v2.0.2
+        uses: codecov/codecov-action@5a8bb4701eca7ba3673f21664b887f652c58d0a3 # renovate: tag=v2.0.3
         if: always()
 
       # build after tests to exclude files
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 43f1c88141de384a414e49c232e56ce2a88a172f..5ce8c1f366c5e175fe9b174d42f6f8526611c0d7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -87,7 +87,7 @@ jobs:
         run: yarn jest --maxWorkers=2 --ci --coverage ${{ env.coverage }}
 
       - name: Codecov
-        uses: codecov/codecov-action@51d810878be5422784e86451c0e7c14e5860ec47 # renovate: tag=v2.0.2
+        uses: codecov/codecov-action@5a8bb4701eca7ba3673f21664b887f652c58d0a3 # renovate: tag=v2.0.3
         if: always() && env.coverage == 'true'
 
       # build after tests to exclude build files from tests