diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..ebfc2b23c
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,14 @@
+# Dependabot dependency updates
+# Docs: https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "npm"
+    # Location of package-lock.json
+    directory: "/"
+    # Check daily for updates
+    schedule:
+      interval: "daily"
+    commit-message:
+      # Set commit message prefix
+      prefix: "refactor"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 795226514..a9c586f04 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -84,11 +84,13 @@ jobs:
           path: |
             ~/Library/Developer/Xcode/DerivedData/Parse-*/Logs/Test
             ~/Library/Developer/Xcode/DerivedData/**/Logs/Build
-      - name: Upload Coverage
-        uses: codecov/codecov-action@v3.1.1
+      - name: Upload code coverage
+        uses: codecov/codecov-action@v4
         with:
-          xcode: true
-          xcode_archive_path: ${{ env.TEST_RESULTS }}
+          # Set to `true` once codecov token bug is fixed; https://github.com/parse-community/parse-server/issues/9129
+          fail_ci_if_error: false
+          token: ${{ secrets.CODECOV_TOKEN }}
+          file: ${{ env.TEST_RESULTS }}
   docs:
     runs-on: macos-13
     timeout-minutes: 15