diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 6e586b255b..81548ebb8c 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -165,7 +165,7 @@ jobs:
         env:
           HOMEBREW_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: codecov/codecov-action@v1
+      - uses: codecov/codecov-action@e156083f13aff6830c92fc5faa23505779fbf649 # v1.2.1
 
   test-default-formula-linux:
     name: test default formula (Linux)
@@ -261,8 +261,6 @@ jobs:
         run: brew tests --online --coverage
         env:
           HOMEBREW_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # Set variables for coverage reporting.
-          HOMEBREW_CODECOV_TOKEN: 3ea0364c-80ce-47a3-9fba-93a940d4b5d7
           # These cannot be queried at the macOS level on GitHub Actions.
           HOMEBREW_LANGUAGES: en-GB
 
diff --git a/.gitignore b/.gitignore
index 1336c48acd..f89b0e524a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -92,7 +92,6 @@
 **/vendor/bundle/ruby/*/gems/colorize-*/
 **/vendor/bundle/ruby/*/gems/commander-*/
 **/vendor/bundle/ruby/*/gems/connection_pool-*/
-**/vendor/bundle/ruby/*/gems/codecov-*/
 **/vendor/bundle/ruby/*/gems/diff-lcs-*/
 **/vendor/bundle/ruby/*/gems/docile-*/
 **/vendor/bundle/ruby/*/gems/domain_name-*/
diff --git a/Library/Homebrew/sorbet/rbi/gems/codecov@0.4.2.rbi b/Library/Homebrew/sorbet/rbi/gems/codecov@0.4.2.rbi
deleted file mode 100644
index a33dc8c1df..0000000000
--- a/Library/Homebrew/sorbet/rbi/gems/codecov@0.4.2.rbi
+++ /dev/null
@@ -1,8 +0,0 @@
-# DO NOT EDIT MANUALLY
-# This is an autogenerated file for types exported from the `codecov` gem.
-# Please instead update this file by running `tapioca sync`.
-
-# typed: true
-
-# THIS IS AN EMPTY RBI FILE.
-# see https://github.com/Shopify/tapioca/blob/master/README.md#manual-gem-requires
diff --git a/Library/Homebrew/sorbet/rbi/hidden-definitions/hidden.rbi b/Library/Homebrew/sorbet/rbi/hidden-definitions/hidden.rbi
index 0742430cb8..c712de39b0 100644
--- a/Library/Homebrew/sorbet/rbi/hidden-definitions/hidden.rbi
+++ b/Library/Homebrew/sorbet/rbi/hidden-definitions/hidden.rbi
@@ -6105,80 +6105,6 @@ module CodeRay
   def self.scanner(lang, options=T.unsafe(nil), &block); end
 end
 
-module Codecov
-  VERSION = ::T.let(nil, ::T.untyped)
-end
-
-module Codecov::SimpleCov
-end
-
-class Codecov::SimpleCov::Formatter
-  def format(report); end
-  RESULT_FILE_NAME = ::T.let(nil, ::T.untyped)
-end
-
-class Codecov::SimpleCov::Formatter
-end
-
-module Codecov::SimpleCov
-end
-
-class Codecov::Uploader
-  APPVEYOR = ::T.let(nil, ::T.untyped)
-  AZUREPIPELINES = ::T.let(nil, ::T.untyped)
-  BITBUCKET = ::T.let(nil, ::T.untyped)
-  BITRISE = ::T.let(nil, ::T.untyped)
-  BUILDKITE = ::T.let(nil, ::T.untyped)
-  CIRCLE = ::T.let(nil, ::T.untyped)
-  CODEBUILD = ::T.let(nil, ::T.untyped)
-  CODESHIP = ::T.let(nil, ::T.untyped)
-  DRONEIO = ::T.let(nil, ::T.untyped)
-  GITHUB = ::T.let(nil, ::T.untyped)
-  GITLAB = ::T.let(nil, ::T.untyped)
-  HEROKU = ::T.let(nil, ::T.untyped)
-  JENKINS = ::T.let(nil, ::T.untyped)
-  RECOGNIZED_CIS = ::T.let(nil, ::T.untyped)
-  SEMAPHORE = ::T.let(nil, ::T.untyped)
-  SHIPPABLE = ::T.let(nil, ::T.untyped)
-  SOLANO = ::T.let(nil, ::T.untyped)
-  TEAMCITY = ::T.let(nil, ::T.untyped)
-  TRAVIS = ::T.let(nil, ::T.untyped)
-  WERCKER = ::T.let(nil, ::T.untyped)
-end
-
-class Codecov::Uploader
-  def self.black(str); end
-
-  def self.build_params(ci); end
-
-  def self.detect_ci(); end
-
-  def self.display_header(); end
-
-  def self.green(str); end
-
-  def self.gzip_report(report); end
-
-  def self.handle_report_response(report); end
-
-  def self.net_blockers(switch); end
-
-  def self.red(str); end
-
-  def self.retry_request(req, https); end
-
-  def self.upload(report, disable_net_blockers=T.unsafe(nil)); end
-
-  def self.upload_to_codecov(ci, report); end
-
-  def self.upload_to_v2(url, report, query, query_without_token); end
-
-  def self.upload_to_v4(url, report, query, query_without_token); end
-end
-
-module Codecov
-end
-
 class CompilerSelector::Compiler
   def self.[](*_); end
 
@@ -28306,13 +28232,6 @@ end
 module SimpleCov::Formatter
 end
 
-class SimpleCov::Formatter::Codecov
-  def format(result, disable_net_blockers=T.unsafe(nil)); end
-end
-
-class SimpleCov::Formatter::Codecov
-end
-
 class SimpleCov::Formatter::HTMLFormatter
   def branchable_result?(); end
 
diff --git a/docs/Homebrew-and-Python.md b/docs/Homebrew-and-Python.md
index 0ebdde901d..68f030a9d2 100644
--- a/docs/Homebrew-and-Python.md
+++ b/docs/Homebrew-and-Python.md
@@ -13,6 +13,9 @@ Homebrew provided a `python@2` formula until the end of 2019, at which point it
 ## Python 3.x
 Homebrew provides a formula for Python 3.x (`python@3.x`).
 
+**Important**: Python may be upgraded to a newer version at any time. Consider using a version
+manager such as `pyenv` if you require stability of minor or patch versions for virtual environments.
+
 The executables are organised as follows:
 
 * `python3` points to Homebrew's Python 3.x (if installed)