diff --git a/action.yml b/action.yml
index f0fd69a..0933c7c 100644
--- a/action.yml
+++ b/action.yml
@@ -14,6 +14,6 @@ runs:
   # By digest, pinned at bootstrap and moved by a reviewed commit. A tag here
   # would let whoever can push to `ci` run code in every pipeline in the
   # cluster, holding that pipeline's deploy credential.
-  image: docker://git.512.dev/ci/toolbox@sha256:141d3edc5678826538cf4dea46f1bb5636c962a3147add34c42e2e00d0f879c3
+  image: docker://git.512.dev/ci/toolbox@sha256:9eb9deb76c1c8c01728c5dfe9709ff102eccd5c7d2740b6135854e16483034be
 
   entrypoint: /usr/local/lib/actions/publish-actions.sh