Bug Report: dependabot PRs cannot upload coverage

[dolfinus]

Describe the bug

I have 2 pull requests created by bots:

• pre-commit[bot]: [pre-commit.ci] pre-commit autoupdate MobileTeleSystems/data-rentgen#74
• dependabot[bot]: Bump the python-packages group with 5 updates MobileTeleSystems/data-rentgen#73

First one successfully run tests, collected coverage and pushed it to Codecov:
https://github.com/MobileTeleSystems/data-rentgen/actions/runs/11114600996/job/30881427873#check-step-9

info - 2024-09-30 21:43:54,486 -- ci service found: github-actions
info - 2024-09-30 21:43:54,939 -- Process Commit creating complete

But second one failed, although it used the same workflow with the same settings:
https://github.com/MobileTeleSystems/data-rentgen/actions/runs/11112795107/job/30875736113#check-step-9

info - 2024-09-30 19:27:24,724 -- ci service found: github-actions
Error: Codecov token not found. Please provide Codecov token with -t flag.

CODECOV_TOKEN is passed to CI workflow using Github secrets:
https://github.com/MobileTeleSystems/data-rentgen/blob/1c9c4ba0169e36c596b1a9e645ef506652fd2289/.github/workflows/test.yml#L113-L119

Restarting the failed job manually leads to fixing the upload issue.

What should I setup or change to make dependabot PRs automatically upload coverage reports without any errors?

My other repositories have exactly the same CI workflows, and both pre-commit[bot] and dependabot[bot] don't have any issues:
MobileTeleSystems/syncmaster#91
MobileTeleSystems/syncmaster#93

Additional context

Repo https://github.com/MobileTeleSystems/data-rentgen was private few weeks ago. Since then, I've converted it to public. Dependabot was setup then repo was private. But pre-commit doesn't support private repos at all, so it was set up only after converting repo to public.

Other repositories were always public.