diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index e526acc29792876704b3a91c1318959ebf5f9b46..b98e070aa340ed94fb05539c9dec5c1ff593df90 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -73,7 +73,7 @@ jobs:
         run: xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/IntegrationTests.xcresult > fastlane/test_output/integration-cobertura.xml
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
+        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6
         with:
           fail_ci_if_error: true
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/ui_tests.yml b/.github/workflows/ui_tests.yml
index 056c559ff2d07fe0e83f5fdb82d6f3ec8bf8c82e..b1430675c1b51f9e1e507835e9cc91a56a4010e2 100644
--- a/.github/workflows/ui_tests.yml
+++ b/.github/workflows/ui_tests.yml
@@ -59,7 +59,7 @@ jobs:
         run: xcresultparser -q -o cobertura -t ElementX -p $(pwd) fastlane/test_output/UITests.xcresult > fastlane/test_output/ui-cobertura.xml
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
+        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6
         with:
           fail_ci_if_error: true
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/unit_tests.yml b/.github/workflows/unit_tests.yml
index ea03998af93fcd59fa91df79849ae789e7225bbd..198180b91103e540ad7af5d200ad9d2ff5a3ad9f 100644
--- a/.github/workflows/unit_tests.yml
+++ b/.github/workflows/unit_tests.yml
@@ -61,7 +61,7 @@ jobs:
       
       - name: Upload coverage to Codecov
         if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }} # Skip in forks
-        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
+        uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6
         with:
           fail_ci_if_error: true
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/renovate.json b/renovate.json
index ae25c1deb117172a9a4b27e17256933e577fc8d9..db1c22c142c12474a642e5eed22ac3ec336c0836 100644
--- a/renovate.json
+++ b/renovate.json
@@ -19,6 +19,10 @@
     {
       "matchManagers": ["bundler"],
       "groupName" : "Ruby"
+    },
+    {
+      "matchPackageNames": ["codecov/codecov-action"],
+      "allowedVersions": "^3.0.0"
     }
   ]
 }