diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index c13950b2f..ecfa9f628 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -16,8 +16,6 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          filter: blob:none
+      - uses: actions/checkout@v5
+        with: { fetch-depth: 0, filter: "blob:none" }
       - uses: codespell-project/actions-codespell@v2
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index fde7261a5..e05ff2cfa 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -12,9 +12,7 @@ jobs:
       id-token: write # to authenticate as Trusted Publisher to pypi.org
     steps:
       - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-          filter: blob:none
+        with: { fetch-depth: 0, filter: "blob:none" }
       - uses: actions/setup-python@v6
         with:
           python-version: "3.x"
diff --git a/.github/workflows/test-cpu.yml b/.github/workflows/test-cpu.yml
index c4885801e..653c87c64 100644
--- a/.github/workflows/test-cpu.yml
+++ b/.github/workflows/test-cpu.yml
@@ -22,9 +22,7 @@ jobs:
       envs: ${{ steps.get-envs.outputs.envs }}
     steps:
       - uses: actions/checkout@v6
-        with:
-          filter: blob:none
-          fetch-depth: 0
+        with: { fetch-depth: 0, filter: "blob:none" }
       - uses: astral-sh/setup-uv@v7
         with:
           enable-cache: false
@@ -54,9 +52,7 @@ jobs:
       IO_MARK: ${{ matrix.io_mark }}
     steps:
       - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-          filter: blob:none
+        with: { fetch-depth: 0, filter: "blob:none" }
 
       - name: Install system dependencies
         run: sudo apt install -y hdf5-tools
@@ -84,7 +80,7 @@ jobs:
         uses: codecov/codecov-action@v5
         with:
           report_type: test_results
-          env_vars: ENV_NAME,IO_MARK
+          flags: ${{ matrix.env.name }},${{ matrix.io_mark }}
           files: test-data/test-results.xml
           use_oidc: true
           fail_ci_if_error: true
@@ -92,7 +88,7 @@ jobs:
       - name: Upload coverage data
         uses: codecov/codecov-action@v5
         with:
-          env_vars: ENV_NAME,IO_MARK
+          flags: ${{ matrix.env.name }},${{ matrix.io_mark }}
           files: test-data/coverage.xml
           use_oidc: true
           fail_ci_if_error: true
@@ -101,9 +97,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
-        with:
-          fetch-depth: 0
-          filter: blob:none
+        with: { fetch-depth: 0, filter: "blob:none" }
 
       - name: Set up Python
         uses: actions/setup-python@v6
diff --git a/.github/workflows/test-gpu.yml b/.github/workflows/test-gpu.yml
index 2aa04a2c9..544a4c8bc 100644
--- a/.github/workflows/test-gpu.yml
+++ b/.github/workflows/test-gpu.yml
@@ -45,9 +45,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@v4 # TODO: upgrade once cirun image supports node 24
-        with:
-          fetch-depth: 0
-          filter: blob:none
+        with: { fetch-depth: 0, filter: "blob:none" }
 
       - name: Nvidia SMI sanity check
         run: nvidia-smi
@@ -88,6 +86,7 @@ jobs:
       - uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
+          flags: hatch-test.stable,gpu
           fail_ci_if_error: true
           files: test-data/coverage.xml