diff --git a/.github/workflows/build-pr.yml b/.github/workflows/build-pr.yml
index cb267925953649f2e2a95a8a886a092c78ad3ada..35e342d18d5cc4023652672f632b5538155b89e6 100644
--- a/.github/workflows/build-pr.yml
+++ b/.github/workflows/build-pr.yml
@@ -50,7 +50,7 @@ jobs:
         run: yarn jest --maxWorkers=2 --ci
 
       - name: Codecov
-        uses: codecov/codecov-action@c585afe366f940d214dc09df2664c06d7fe07052 # renovate: tag=v2.0.1
+        uses: codecov/codecov-action@51d810878be5422784e86451c0e7c14e5860ec47 # renovate: tag=v2.0.2
         if: always()
 
       # build after tests to exclude files
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index f6ef7325d5d457838a33ff0c0306365041c961b2..2990c629e14778331a7a4e5dd7dea0b18fe4577f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -87,7 +87,7 @@ jobs:
         run: yarn jest --maxWorkers=2 --ci --coverage ${{ env.coverage }}
 
       - name: Codecov
-        uses: codecov/codecov-action@c585afe366f940d214dc09df2664c06d7fe07052 # renovate: tag=v2.0.1
+        uses: codecov/codecov-action@51d810878be5422784e86451c0e7c14e5860ec47 # renovate: tag=v2.0.2
         if: always() && env.coverage == 'true'
 
       # build after tests to exclude build files from tests