diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5e42465a..15abf468 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,11 +3,11 @@ on: [push, pull_request]
 jobs:
   run:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
       - name: Set up Python 3.10
         uses: actions/setup-python@v4
         with:
@@ -15,10 +15,28 @@ jobs:
       - name: Install dependencies
         run: pip install -r requirements.txt
       - name: Run tests and collect coverage
-        run: pytest --cov app ${{ env.CODECOV_ATS_TESTS }}
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        run: pytest --cov app
+      - name: Upload coverage to Codecov (arg token)
+        uses: codecov/codecov-action@main
+        with:
+          fail_ci_if_error: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          verbose: true
+      - name: Upload coverage to Codecov (env token)
+        uses: codecov/codecov-action@main
         with:
+          fail_ci_if_error: true
           verbose: true
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      - name: Upload coverage to Codecov (no token)
+        uses: codecov/codecov-action@main
+        with:
+          fail_ci_if_error: true
+          verbose: true
+      - name: Upload coverage to Codecov (oidc)
+        uses: codecov/codecov-action@main
+        with:
+          fail_ci_if_error: true
+          use_oidc: true
+          verbose: true
diff --git a/requirements.txt b/requirements.txt
index 718e00d0..f1e325af 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,10 +1,10 @@
-attrs==24.2.0
-coverage==7.6.1
-iniconfig==2.0.0
-packaging==24.1
+attrs==25.3.0
+coverage==7.8.0
+iniconfig==2.1.0
+packaging==24.2
 pluggy==1.5.0
 py==1.11.0
-pyparsing==3.1.4
-pytest==8.3.2
-pytest-cov==5.0.0
-tomli==2.0.1
+pyparsing==3.2.3
+pytest==8.3.5
+pytest-cov==6.1.0
+tomli==2.2.1