diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index fc996ff10..a757b23cb 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -60,7 +60,7 @@ jobs:
       run: ./mvnw -B -q -ff -ntp test
     - name: Publish code coverage
       if: github.event_name != 'pull_request' && matrix.java_version == '8'
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v5
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         file: ./target/site/jacoco/jacoco.xml
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index 6d580da9c..28e71468e 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -14,6 +14,10 @@ Active maintainers:
 === Releases ===
 ------------------------------------------------------------------------
 
+2.18.2 (27-Nov-2024)
+
+No changes since 2.18.1
+
 2.18.1 (28-Oct-2024)
 
 #518: Should not read past end for CBOR string values