diff --git a/.github/workflows/validate-and-package.yml b/.github/workflows/validate-and-package.yml
index 8c9b892c..d0de273f 100644
--- a/.github/workflows/validate-and-package.yml
+++ b/.github/workflows/validate-and-package.yml
@@ -249,7 +249,7 @@ jobs:
           (github.event_name != 'pull_request' ||
            github.event.pull_request.head.repo.full_name == github.repository) &&
           hashFiles('TestResults/coverage/Cobertura.xml') != ''
-        uses: actions/upload-code-coverage@d8e329117199404bba6fc81efe8093dc7c015e34 # v1.4.2
+        uses: actions/upload-code-coverage@bfa741d815a28cb064a8e3a0837e577457a017d5 # v1.4.3
         with:
           file: TestResults/coverage/Cobertura.xml
           language: C#