diff --git a/cmd/dockerflagsgen/go.mod b/cmd/dockerflagsgen/go.mod
index d3e5f3d..8c12a24 100644
--- a/cmd/dockerflagsgen/go.mod
+++ b/cmd/dockerflagsgen/go.mod
@@ -6,7 +6,7 @@ go 1.27.1
 
 require (
 	github.com/bare-devcontainer/decolint v0.0.0-00010101000000-000000000000
-	github.com/docker/cli v29.9.0+incompatible
+	github.com/docker/cli v29.9.1+incompatible
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
 )
diff --git a/cmd/dockerflagsgen/go.sum b/cmd/dockerflagsgen/go.sum
index 5c286ad..779b2c4 100644
--- a/cmd/dockerflagsgen/go.sum
+++ b/cmd/dockerflagsgen/go.sum
@@ -35,8 +35,8 @@ github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5Qvfr
 github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
 github.com/dlclark/regexp2 v1.11.0 h1:G/nrcoOa7ZXlpoa/91N3X7mM3r8eIlMBBJZvsz/mxKI=
 github.com/dlclark/regexp2 v1.11.0/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=
-github.com/docker/cli v29.9.0+incompatible h1:Cw9x50ioSGgGwXJ4eO+hIBry/w3LLbyF8GPAEKz1fnE=
-github.com/docker/cli v29.9.0+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
+github.com/docker/cli v29.9.1+incompatible h1:E4YGy7TMkPk7mFsXTVUyjHxVeJdjTDfIS0X4Q0+ioQ0=
+github.com/docker/cli v29.9.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/cli-docs-tool v0.11.0 h1:7d8QARFb7QEobizqxmEM7fOteZEHwH/zWgHQtHZEcfE=
 github.com/docker/cli-docs-tool v0.11.0/go.mod h1:ma8BKiisUo8D6W05XEYIh3oa1UbgrZhi1nowyKFJa8Q=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
diff --git a/dockerargs/runflags.go b/dockerargs/runflags.go
index 6bfd1b1..8ecaad0 100644
--- a/dockerargs/runflags.go
+++ b/dockerargs/runflags.go
@@ -2,7 +2,7 @@
 
 package dockerargs
 
-// RunFlags is every flag "docker run" registers, as of github.com/docker/cli v29.9.0+incompatible.
+// RunFlags is every flag "docker run" registers, as of github.com/docker/cli v29.9.1+incompatible.
 // It includes the hidden and deprecated ones, which Docker still parses.
 //
 // A flag is identified by its name, never by the spelling an argv uses: "--net" is not the