diff --git a/package-lock.json b/package-lock.json
index befbf784aba01..cc11b3a339f38 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -92,7 +92,7 @@
         "@babel/node": "^7.27.1",
         "@babel/plugin-transform-private-methods": "^7.27.1",
         "@babel/preset-typescript": "^7.27.1",
-        "@codecov/webpack-plugin": "^1.9.0",
+        "@codecov/webpack-plugin": "^1.9.1",
         "@cypress/vue2": "^2.1.1",
         "@cypress/webpack-preprocessor": "^6.0.4",
         "@nextcloud/babel-config": "^1.2.0",
@@ -186,16 +186,19 @@
       }
     },
     "node_modules/@actions/github": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.0.tgz",
-      "integrity": "sha512-alScpSVnYmjNEXboZjarjukQEzgCRmjMv6Xj47fsdnqGS73bjJNDpiiXmp8jr0UZLdUB6d9jW63IcmddUP+l0g==",
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.1.tgz",
+      "integrity": "sha512-xbZVcaqD4XnQAe35qSQqskb3SqIAfRyLBrHMd/8TuL7hJSz2QtbDwnNM8zWx4zO5l2fnGtseNE3MbEvD7BxVMw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@actions/http-client": "^2.2.0",
         "@octokit/core": "^5.0.1",
-        "@octokit/plugin-paginate-rest": "^9.0.0",
-        "@octokit/plugin-rest-endpoint-methods": "^10.0.0"
+        "@octokit/plugin-paginate-rest": "^9.2.2",
+        "@octokit/plugin-rest-endpoint-methods": "^10.4.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
+        "undici": "^5.28.5"
       }
     },
     "node_modules/@actions/http-client": {
@@ -2189,9 +2192,9 @@
       }
     },
     "node_modules/@codecov/bundler-plugin-core": {
-      "version": "1.9.0",
-      "resolved": "https://registry.npmjs.org/@codecov/bundler-plugin-core/-/bundler-plugin-core-1.9.0.tgz",
-      "integrity": "sha512-UB0I5haL0gnF4ei46wxNo7ptCHqFAh3PnmcLLeXRb2zV7HeobOF8WRjOW/PwrXAphPS/6bL7PDUmh3ruVObGtg==",
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/@codecov/bundler-plugin-core/-/bundler-plugin-core-1.9.1.tgz",
+      "integrity": "sha512-dt3ic7gMswz4p/qdkYPVJwXlLiLsz55rBBn2I7mr0HTG8pCoLRqnANJIwo5WrqGBZgPyVSMPBqBra6VxLWfDyA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2207,9 +2210,9 @@
       }
     },
     "node_modules/@codecov/bundler-plugin-core/node_modules/semver": {
-      "version": "7.7.1",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.1.tgz",
-      "integrity": "sha512-hlq8tAfn0m/61p4BVRcPzIGr6LKiMwo4VM6dGi6pt4qcRkmNzTcWq6eCEjEh+qXjkMDvPlOFFSGwQjoEa6gyMA==",
+      "version": "7.7.2",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
+      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
       "dev": true,
       "license": "ISC",
       "bin": {
@@ -2220,13 +2223,13 @@
       }
     },
     "node_modules/@codecov/webpack-plugin": {
-      "version": "1.9.0",
-      "resolved": "https://registry.npmjs.org/@codecov/webpack-plugin/-/webpack-plugin-1.9.0.tgz",
-      "integrity": "sha512-A8KcQ8gs/Xge3DFyD95iEh6DVJqjHwR6pwz2q38xvXYwh63d2hv8Wnlyfg9vhvNdbTfCsQlGH22yx1jMgd6syA==",
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/@codecov/webpack-plugin/-/webpack-plugin-1.9.1.tgz",
+      "integrity": "sha512-isyETXPJfhuG+UOteElc1X/IHpBG0dZNAa7loquA9N6lcu4szwNkwHvLdnMJ49kjVwcIpZBjUD2eZPhneBcDYQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@codecov/bundler-plugin-core": "^1.9.0",
+        "@codecov/bundler-plugin-core": "^1.9.1",
         "unplugin": "^1.10.1"
       },
       "engines": {
diff --git a/package.json b/package.json
index 6ac9a710dd02a..c3f7dc948256e 100644
--- a/package.json
+++ b/package.json
@@ -123,7 +123,7 @@
     "@babel/node": "^7.27.1",
     "@babel/plugin-transform-private-methods": "^7.27.1",
     "@babel/preset-typescript": "^7.27.1",
-    "@codecov/webpack-plugin": "^1.9.0",
+    "@codecov/webpack-plugin": "^1.9.1",
     "@cypress/vue2": "^2.1.1",
     "@cypress/webpack-preprocessor": "^6.0.4",
     "@nextcloud/babel-config": "^1.2.0",