From b9ea3f3d86e9ef215924e878d298a592fecd6a6d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 5 Nov 2026 13:43:22 +0000
Subject: [PATCH] build(deps): bump @docker/actions-toolkit from 0.107.0 to
 0.109.0

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.107.0 to 0.109.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](https://github.com/docker/actions-toolkit/compare/v0.107.0...v0.109.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-version: 0.108.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json |  2 +-
 yarn.lock    | 29 +++++++++++++++++++++++------
 2 files changed, 24 insertions(+), 7 deletions(-)

diff --git a/package.json b/package.json
index 30ebae4..d7112ba 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,7 @@
   "packageManager": "yarn@4.15.0",
   "dependencies": {
     "@actions/core": "^3.0.1",
-    "@docker/actions-toolkit": "^0.107.0"
+    "@docker/actions-toolkit": "^0.109.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.3",
diff --git a/yarn.lock b/yarn.lock
index a3e209e..42a6b67 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -421,9 +421,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@docker/actions-toolkit@npm:^0.107.0":
-  version: 0.107.0
-  resolution: "@docker/actions-toolkit@npm:0.107.0"
+"@docker/actions-toolkit@npm:^0.109.0":
+  version: 0.109.0
+  resolution: "@docker/actions-toolkit@npm:0.109.0"
   dependencies:
     "@actions/artifact": "npm:^6.3.1"
     "@actions/cache": "npm:^6.3.0"
@@ -438,15 +438,16 @@ __metadata:
     "@sigstore/verify": "npm:^4.1.2"
     async-retry: "npm:^1.3.3"
     csv-parse: "npm:^7.0.3"
+    csv-stringify: "npm:^6.9.0"
     gunzip-maybe: "npm:^1.4.2"
     handlebars: "npm:^4.7.10"
     he: "npm:^2.0.0"
     js-yaml: "npm:^5.5.0"
     jwt-decode: "npm:^4.0.0"
-    semver: "npm:^7.8.5"
+    semver: "npm:^7.8.6"
     tar-stream: "npm:^3.2.2"
     tmp: "npm:^0.2.7"
-  checksum: 10/bb43d11ece07be4b07613ea3e4a308233a7daa789cb3f54cf3d399f08ae7f1ad9756bb72457ea5e28408b838787fed0221921be4ed9ae135e55608f66b250b4f
+  checksum: 10/55a4c83878e7f729b186542fb84267b3fe667977c2efb9e336b913d9d9e57fa4af2e6642b35a4befeb12a9bfc87ed72c30927483a8b78d77534c9ff2920f3b89
   languageName: node
   linkType: hard
 
@@ -2879,6 +2880,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"csv-stringify@npm:^6.9.0":
+  version: 6.9.0
+  resolution: "csv-stringify@npm:6.9.0"
+  checksum: 10/af8bb8999ee023183fcec2b95693cb7fda90466e1961509936eda55886963e4e01ce9109fce7e22da4c2c42ebdaf8bcddf178974c5508e8e2ea12fe42670e524
+  languageName: node
+  linkType: hard
+
 "debug@npm:4, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.3, debug@npm:^4.3.4":
   version: 4.3.4
   resolution: "debug@npm:4.3.4"
@@ -2931,7 +2939,7 @@ __metadata:
   resolution: "docker-setup-docker@workspace:."
   dependencies:
     "@actions/core": "npm:^3.0.1"
-    "@docker/actions-toolkit": "npm:^0.107.0"
+    "@docker/actions-toolkit": "npm:^0.109.0"
     "@eslint/js": "npm:^9.39.3"
     "@types/node": "npm:^24.11.0"
     "@typescript-eslint/eslint-plugin": "npm:^8.56.1"
@@ -5621,6 +5629,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"semver@npm:^7.8.6":
+  version: 7.8.6
+  resolution: "semver@npm:7.8.6"
+  bin:
+    semver: bin/semver.js
+  checksum: 10/76fd62a781a9c58464e4d4b1b9c99c404063d8133fff8a0753e66b1bd826bfb720d843664e7ab1268c0fb7134d04df9f3b8788eb2f1000c509648e0eeac03921
+  languageName: node
+  linkType: hard
+
 "set-blocking@npm:^2.0.0":
   version: 2.0.0
   resolution: "set-blocking@npm:2.0.0"