diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 86f39e3b..eced27b1 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -123,7 +123,7 @@ jobs:
           if: ${{ always() }}
 
         - name: Publish coverage results to Codecov
-          uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6
+          uses: codecov/codecov-action@e0b68c6749509c5f83f984dd99a76a1c1a231044 # v4.0.1
           with:
             token: 2168e29b-e40e-4ddf-acc3-00907462e93e # not ideal, but limited risk
             file: coverage-${{ matrix.python-version }}.xml