diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 304cc4b..a470691 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -123,7 +123,7 @@ jobs:
       - name: Upload Coveralls Report
         # Pinned to the SHA the repo's Actions allowlist permits (v2.3.4);
         # bumping requires extending the allowlist.
-        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
         if: ${{ matrix.python.coveralls }}
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index a22438e..da50f7d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -135,7 +135,7 @@ jobs:
       - name: Upload Coveralls Report
         # Pinned to the SHA the repo's Actions allowlist permits (v2.3.4);
         # bumping requires extending the allowlist.
-        uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
+        uses: coverallsapp/github-action@8d6379e14d29928660c4ba802d8e85393440b329 # v2.3.8
         if: ${{ matrix.python.coveralls }}
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}