diff --git a/.github/workflows/testing.yaml b/.github/workflows/testing.yaml
index 5f6b6b1..0a23fee 100644
--- a/.github/workflows/testing.yaml
+++ b/.github/workflows/testing.yaml
@@ -118,7 +118,7 @@ jobs:
         # repo: https://github.com/codecov/codecov-action
         # releases: https://github.com/codecov/codecov-action/tags
         - name: "Upload coverage to Codecov"
-          uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354  # v6.0.0 released on 2026-03-26
+          uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v6.0.0 released on 2026-03-26
           with:
               # Don't fail CI on Codecov upload errors - coverage is informational,
               # and secrets aren't available to Dependabot PRs anyway.