diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a50bd4a0..941a1d26 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -55,7 +55,7 @@ jobs:
       - name: Test (golden-image)
         run: dotnet test --no-build -c Release --filter Category=GoldenImage
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         # Coverage comes from the unit step above. Upload it even if a later
         # test step failed so the report still lands. A Codecov outage must not
         # fail the build, so fail_ci_if_error stays false.
diff --git a/.github/workflows/fork-ci.yml b/.github/workflows/fork-ci.yml
index f2ad0798..ba930b08 100644
--- a/.github/workflows/fork-ci.yml
+++ b/.github/workflows/fork-ci.yml
@@ -76,7 +76,7 @@ jobs:
       - name: Test (golden-image)
         run: dotnet test --no-build -c Release --filter Category=GoldenImage
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         if: always()
         with:
           token: ${{ secrets.CODECOV_TOKEN }}