chore(deps): update docker docker tag to v29.9.1

.gitea/workflows/ci.yml

@@ -65,7 +65,7 @@ jobs:
               run: bunx vitest run --coverage --maxWorkers=1 --exclude='src/app/benchmark/**'
             - name: Coverage report
               if: ${{ always() }}
-              uses: https://gitea.com/actions/upload-artifact@v7
+              uses: https://gitea.com/actions/upload-artifact@v3
               with:
                   name: coverage
                   path: coverage/
@@ -99,7 +99,7 @@ jobs:
             - run: npm install --global bun@1.4.2
             - run: bun install --frozen-lockfile
             - run: bun run build -- --configuration production
-            - uses: https://gitea.com/actions/upload-artifact@v7
+            - uses: https://gitea.com/actions/upload-artifact@v3
               with:
                   name: dist
                   path: dist/
@@ -137,7 +137,7 @@ jobs:
               run: trivy fs --db-repository public.ecr.aws/aquasecurity/trivy-db:2 --format sarif --output trivy-results.sarif --skip-dirs node_modules,dist,coverage .
             - name: Security reports
               if: ${{ always() }}
-              uses: https://gitea.com/actions/upload-artifact@v7
+              uses: https://gitea.com/actions/upload-artifact@v3
               with:
                   name: security
                   path: '*-results.sarif'
@@ -153,13 +153,13 @@ jobs:
              (github.event_name == 'pull_request' &&
               github.event.pull_request.head.repo.full_name == github.repository))
         runs-on: ubuntu-latest
-        container: docker:29.8.2
+        container: docker:29.9.1
         concurrency:
             group: image-${{ needs.policy.outputs.tag != '' && 'stable' || needs.policy.outputs.slug }}
             cancel-in-progress: false
         services:
             docker:
-                image: docker:29.8.2-dind
+                image: docker:29.9.1-dind
                 env:
                     DOCKER_TLS_CERTDIR: ''
                 options: >-