From 3ff6998ba6383ce47260ffcee94d4c6842a8b82a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Nov 2026 12:52:07 +0000
Subject: [PATCH] build(deps): bump @docker/actions-toolkit from 0.107.0 to
 0.109.0

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.107.0 to 0.109.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.107.0...v0.109.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.108.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json |  2 +-
 yarn.lock    | 29 +++++++++++++++++++++++------
 2 files changed, 24 insertions(+), 7 deletions(-)

diff --git a/package.json b/package.json
index f1d190d..6b5eff0 100644
--- a/package.json
+++ b/package.json
@@ -27,7 +27,7 @@
     "@actions/http-client": "^4.0.1",
     "@aws-sdk/client-ecr": "^3.1161.0",
     "@aws-sdk/client-ecr-public": "^3.1161.0",
-    "@docker/actions-toolkit": "^0.107.0",
+    "@docker/actions-toolkit": "^0.109.0",
     "http-proxy-agent": "^9.1.0",
     "https-proxy-agent": "^9.1.0",
     "js-yaml": "^5.5.0",
diff --git a/yarn.lock b/yarn.lock
index 113dbd1..c03ec7c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -662,9 +662,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@docker/actions-toolkit@npm:^0.107.0":
-  version: 0.107.0
-  resolution: "@docker/actions-toolkit@npm:0.107.0"
+"@docker/actions-toolkit@npm:^0.109.0":
+  version: 0.109.0
+  resolution: "@docker/actions-toolkit@npm:0.109.0"
   dependencies:
     "@actions/artifact": "npm:^6.3.1"
     "@actions/cache": "npm:^6.3.0"
@@ -679,15 +679,16 @@ __metadata:
     "@sigstore/verify": "npm:^4.1.2"
     async-retry: "npm:^1.3.3"
     csv-parse: "npm:^7.0.3"
+    csv-stringify: "npm:^6.9.0"
     gunzip-maybe: "npm:^1.4.2"
     handlebars: "npm:^4.7.10"
     he: "npm:^2.0.0"
     js-yaml: "npm:^5.5.0"
     jwt-decode: "npm:^4.0.0"
-    semver: "npm:^7.8.5"
+    semver: "npm:^7.8.6"
     tar-stream: "npm:^3.2.2"
     tmp: "npm:^0.2.7"
-  checksum: 10/bb43d11ece07be4b07613ea3e4a308233a7daa789cb3f54cf3d399f08ae7f1ad9756bb72457ea5e28408b838787fed0221921be4ed9ae135e55608f66b250b4f
+  checksum: 10/55a4c83878e7f729b186542fb84267b3fe667977c2efb9e336b913d9d9e57fa4af2e6642b35a4befeb12a9bfc87ed72c30927483a8b78d77534c9ff2920f3b89
   languageName: node
   linkType: hard
 
@@ -3164,6 +3165,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"csv-stringify@npm:^6.9.0":
+  version: 6.9.0
+  resolution: "csv-stringify@npm:6.9.0"
+  checksum: 10/af8bb8999ee023183fcec2b95693cb7fda90466e1961509936eda55886963e4e01ce9109fce7e22da4c2c42ebdaf8bcddf178974c5508e8e2ea12fe42670e524
+  languageName: node
+  linkType: hard
+
 "debug@npm:4, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.4":
   version: 4.3.4
   resolution: "debug@npm:4.3.4"
@@ -3212,7 +3220,7 @@ __metadata:
     "@actions/http-client": "npm:^4.0.1"
     "@aws-sdk/client-ecr": "npm:^3.1161.0"
     "@aws-sdk/client-ecr-public": "npm:^3.1161.0"
-    "@docker/actions-toolkit": "npm:^0.107.0"
+    "@docker/actions-toolkit": "npm:^0.109.0"
     "@eslint/js": "npm:^9.39.3"
     "@types/js-yaml": "npm:^4.0.9"
     "@types/node": "npm:^24.11.0"
@@ -5743,6 +5751,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"semver@npm:^7.8.6":
+  version: 7.8.6
+  resolution: "semver@npm:7.8.6"
+  bin:
+    semver: bin/semver.js
+  checksum: 10/76fd62a781a9c58464e4d4b1b9c99c404063d8133fff8a0753e66b1bd826bfb720d843664e7ab1268c0fb7134d04df9f3b8788eb2f1000c509648e0eeac03921
+  languageName: node
+  linkType: hard
+
 "shebang-command@npm:^2.0.0":
   version: 2.0.0
   resolution: "shebang-command@npm:2.0.0"