diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
index d341de17e..6a9d3b3c8 100644
--- a/.github/workflows/python-package.yml
+++ b/.github/workflows/python-package.yml
@@ -72,7 +72,7 @@ jobs:
       # \todo Should the Codecov web pages show the results of the C++ or Python tests?
       #    - name: Upload coverage to Codecov
       #      if: matrix.os == env.GH_COV_OS && github.actor != env.GH_DEPENDABOT
-      #      uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
+      #      uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
       #      with:
       #        files: ${{ env.OTIO_BUILD_DIR }}/coverage.filtered.info
       #        flags: unittests
@@ -157,7 +157,7 @@ jobs:
         run: make lcov
       - name: Upload coverage to Codecov
         if: matrix.python-version == env.GH_COV_PY && matrix.os == env.GH_COV_OS && github.actor != env.GH_DEPENDABOT
-        uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
         with:
           flags: py-unittests
           name: py-opentimelineio-codecov