diff --git a/.changelog/unreleased/dependencies/2217-codecov-codecov-action-5.md b/.changelog/unreleased/dependencies/2217-codecov-codecov-action-5.md
new file mode 100644
index 000000000..593b7bfd7
--- /dev/null
+++ b/.changelog/unreleased/dependencies/2217-codecov-codecov-action-5.md
@@ -0,0 +1 @@
+* `codecov/codecov-action` bumped to 5 (from 4) [PR 2217](https://github.com/provenance-io/provenance/pull/2217).
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fca6af696..a3fcb99d9 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -167,7 +167,7 @@ jobs:
             echo "Excluding ${filename} from coverage report..."
             sed -i.bak "/$(echo $filename | sed 's/\//\\\//g')/d" coverage.txt
           done
-      - uses: codecov/codecov-action@v4
+      - uses: codecov/codecov-action@v5
         if: needs.setup-tests.outputs.should-run
         with:
           file: ./coverage.txt