diff --git a/.github/workflows/php_no_legacy_tests.yml b/.github/workflows/php_no_legacy_tests.yml
index 16a4e1aa521..671670e3af5 100644
--- a/.github/workflows/php_no_legacy_tests.yml
+++ b/.github/workflows/php_no_legacy_tests.yml
@@ -112,7 +112,7 @@ jobs:
         run: php artisan migrate:rollback
 
       - name: Codecov
-        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
diff --git a/.github/workflows/php_tests.yml b/.github/workflows/php_tests.yml
index c8c529aeb24..b4ca80ea4cb 100644
--- a/.github/workflows/php_tests.yml
+++ b/.github/workflows/php_tests.yml
@@ -108,7 +108,7 @@ jobs:
         run: php artisan migrate:rollback
 
       - name: Codecov
-        uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 # v4.5.0
+        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}