diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index fac0280..f87c6ab 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -59,7 +59,8 @@ jobs:
             --cov=demes --cov-report=term-missing --cov-report=xml -v tests
 
       - name: upload coverage report to codecov
-        uses: codecov/codecov-action@v3.1.4
+        uses: codecov/codecov-action@v5
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true
           env_vars: OS,PYTHON