diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index b3c463f..84db957 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -21,7 +21,7 @@ jobs:
 
       - name: Connect to Tailnet
         if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
-        uses: tailscale/github-action@6cae46e2d796f265265cfcf628b72a32b4d7cade #v3.3.0
+        uses: tailscale/github-action@aa604318b61e5b25107287e0d07db6a08b3e72c0 #v4.0.2
         with:
           args: --accept-dns=true
           oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}