upgrade to latest dependencies (#979)

bumping google.golang.org/protobuf 3f79c52...0833cf3:
  > 0833cf3 all: release v1.36.8
  > 0af3f0f all: set Go language version to Go 1.23
  > 5ccbdec types: regenerate using latest protobuf v32 release
  > 708d96f all: start v1.36.7-devel
  > 7e776d4 all: release v1.36.7
  > 8e8926e encoding/protowire: micro-optimize SizeVarint (-20% on Intel)
  > 32018e9 internal/impl: remove unnecessary atomic access for non-lazy lists
  > 9c38aec impl: remove unnecessary nil check from presence.Present
  > 41298d3 types/descriptorpb: regenerate using latest protobuf v31 release
  > e5d4468 cmd/protoc-gen-go: centralize presence and lazy logic into filedesc
  > b4a995b internal: move usePresenceForField to internal/filedesc
  > 3a5f1f0 internal/impl: clean up usePresenceForField() (no-op)
  > 58d6425 all: start v1.36.6-devel
bumping google.golang.org/grpc c52d025...b9788ef:
  > b9788ef Change version to 1.75.0 (# 8493)
  > 2bd74b2 credentials: fix behavior of grpc.WithAuthority and credential handshake precedence (# 8488)
  > 9fa3267 xds: remove xds client fallback environment variable (# 8482)
  > 62ec29f grpc: Fix cardinality violations in non-client streaming RPCs. (# 8385)
  > 85240a5 stats: change non-standard units to annotations (# 8481)
  > ac13172 update deps (# 8478)
  > 0a895bc examples/opentelemetry:  use experimental metrics in example (# 8441)
  > 8b61e8f xdsclient: do not process updates from closed server channels (# 8389)
  > 7238ab1 Allow empty nodeID (# 8476)
  > 9186ebd cleanup: use slices.Equal to simplify code (# 8472)
  > 55e8b90 protoc-gen-go-grpc: bump golang.org/x/net (# 8458)
  > e1f69d8 xdsclient: delay resource cache deletion to handle immediate re-subscription of same resource (# 8369)
  > 8adcc94 advancedtls: avoid txt lookups in test and use test logger instead of Printf (# 8469)
  > a5e7cd6 stats: add DelayedPickComplete and follow correct semantics (# 8465)
  > 89d2281 github: run arm64 tests without emulation (# 8463)
  > f69eaf0 testutils/roundrobin: Improve validation of WRR distribution (# 8459)
  > 4af0faa transport: add test case for zero second timeout (# 8452)
  > cc46259 xdsclient: typed config better nil checks (# 8412)
  > c7b188f Retract v1.74.0 and v1.74.1 (# 8456)
  > 0a12fb0 Revert "credentials: allow audience to be configured (# 8421) (# 8442)" (# 8450)
  > 52d9f91 transport: release mutex before returning on expired deadlines in server streams (# 8451)
  > bed551a xds: add a test for deadlocks in nested xDS channels (# 8448)
  > b64eaf8 endpointsharding: shuffle endpoint order before updating children (# 8438)
  > 7208cdc credentials: allow audience to be configured (# 8421) (# 8442)
  > af2600d Move erm-g to Emeritus Maintainer (# 8418)
  > cf1a861 Remove inactive maintainers (# 8416)
  > eb4a783 xds: give up pool lock before closing xdsclient channel (# 8445)
  > 3d0cb79 alts: improve alts handshaker error logs (# 8444)
  > 12f9d9c server: allow 0s grpc-timeout header values, as java is known to be able to send them (# 8439)
  > a809a46 deps: update dependencies for all modules (# 8434)
  > a21e374 xds/cdsbalancer: correctly remove the unwanted cds watchers (# 8428)
  > 64a6b62 grpctest: minor improvements to the test logger implementation (# 8370)
  > aa57e6a xds: cleanup internal testing functions for env vars that have long been removed (# 8413)
  > f9cf0f6 xdsclient: relay marshalled bytes of complete resource proto to decoders (# 8422)
  > 8acde50 dns: add environment variable to disable TXT lookups in DNS resolver (# 8377)
  > de72c21 xds: Avoid error logs when setting fallback bootstrap config (# 8419)
  > bb4b6d5 add grpctester (# 8423)
  > dd718e4 github: delete mergeable configuration (# 8415)
  > bfc1981 github: Restrict repo contents permissions to read-only in pr-validation (# 8414)
  > 6207142 xdsclient: preserve original bytes for decoding when the resource is wrapped (# 8411)
  > a2d6045 Change version to 1.75.0-dev (# 8409)
  > 1787f94 xdsclient: export genericResourceTypeDecoder (# 8406)
  > 15299cc xdsclient: make a function to return the supported resource type implementations (# 8405)
  > 20bd1e7 grpc: revert # 8278: Fix cardinality violations in non-server streaming RPCs (# 8404)
  > bdbe6a2 examples/opentelemetry: demonstrate enabling experimental metrics (# 8388)
  > 0100d21 outlierdetection: cleanup temporary pickfirst health listener attribute (# 8402)
  > bbaca7a stub: Add child balancer in stub.BalancerData (# 8393)
  > e5de1e2 xdsclient_test: Avoid restarting listener in TestServerFailureMetrics_AfterResponseRecv (# 8399)
  > 9c62b1c xds: Fix flaky test HandleListenerUpdate_ErrorUpdate (# 8397)
  > 042139c xds_test: Avoid buffering ack requests in ADS streams (# 8395)
  > 082a927 xds: Roll forward xdsclient migration (# 8391)
  > 5f8fe4f github: Add workflow to replace mergeable (# 8401)
  > 57400b4 roundrobin: Remove unnecessary ExitIdle override (# 8390)
  > a64d933 grpc: Fix cardinality violations in  non-server streaming RPCs (# 8278)
  > d2e8366 xds: revert # 8310: migration of xdsclient to use generic client and dedicated LRS client
  > af0f88e add spiffe config (# 8384)
  > 996aabe xds: migrate internal xdsclient to use generic client and dedicated LRS client (# 8310)
  > ec91b2e xds: Remove temporary environment variable for least request (# 8248)
  > 9319d72 cmd/protoc-gen-go-grpc: use `Error()` since no formatting is performed (# 8378)
  > f6bf86c Add flag guarding SPIFFE Bundle provider (# 8343)
  > 6dfe07c balancer: Make ExitIdle compulsory for Balancers (# 8367)
  > 8d1e6e2 deps: update dependencies for all modules and fix revive findings (# 8372)
  > 9b7bd34 grpc: introduce new Dial and Server Options to set static window size (# 8283)
  > 643bd63 xds/internal: update generic grpctransport codec name to  proto (# 8368)
  > 4275c5b transport: Re-use slice buffer reader for a stream (# 8360)
  > ec4810c grpc: Fix cardinality violations in client streaming and unary RPCs (# 8330)
  > fb223f7 transport: Optimize heap allocations (# 8361)
  > f947a86 balancer/ringhash: Add experimental notice in package comment (# 8364)
  > 05d49d0 [interop client] provide a flag to set google-c2p resolver universe domain (# 8145)
  > 28128e0 xdsclient: Fix flakyness in `TestResourceUpdateMetrics` in the case of repeated NACKs (# 8363)
  > 4cab0e6 balacergroup: cleanup exitIdle() (# 8347)
  > e3ca7f9 xdsclient: fix unexpectedly large LoadReportInterval in initial load report request (# 8348)
  > 443caad delegatingresolver: avoid proxy for resolved addresses in NO_PROXY env (# 8329)
  > 32e57de Rename PSM interop fallback test suite to light (# 8350)
  > 6995ef2 internal/transport: Wait for server goroutines to exit during shutdown in test (# 8306)
  > aaabd60 deps: update dependencies for all modules (# 8331)
  > 0c24af1 balancer/least_request : Fix panic while handling resolver errors (# 8333)
  > f2d3e11 Change version to 1.74.0-dev (# 8324)
  > 1ecde18 xds: generic xds client ads stream tests (# 8307)
  > 5c0d552 removing unused code (# 8316)
bumping k8s.io/apimachinery 173776a...173776a:
bumping github.com/prometheus/client_golang d50be25...e4b2208:
  > e4b2208 Cut v1.23.0 (# 1848)
  > d9492af cut v1.23.0-rc.1 (# 1842)
  > aeae8a0 Cut v1.23.0-rc.0 (# 1837)
  > b157309 Update common Prometheus files (# 1832)
  > a704e28 build(deps): bump the github-actions group with 3 updates (# 1826)
  > c774311 Fix errNotImplemented reference (# 1835)
  > db4db7b Update runtime metrics for Go v1.23 and v1.24 (# 1833)
  > 99d380e Update common Prometheus files (# 1831)
  > f3ef320 Merge pull request # 1828 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.65.0
  > 5f451a4 Merge pull request # 1827 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.65.0
  > 520c91a build(deps): bump github.com/prometheus/common in /exp
  > b0ace3d exp/api: Bubble up status code from writeResponse (# 1823)
  > cb60794 build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0
  > c68532c Update common Prometheus files (# 1821)
  > f802256 Merge pull request # 1817 from prometheus/dependabot/github_actions/github-actions-9e57cb1b1f
  > 1c273ac Merge pull request # 1815 from prometheus/repo_sync
  > 2853758 build(deps): bump the github-actions group with 5 updates
  > 7c924b7 Simplify buf binary install (# 1814)
  > e9d599a Update common Prometheus files
  > 7ed72b7 fix: client prompt return on context cancellation (# 1729)
  > 730147d Cleaup Go modules (# 1813)
  > 90dc0f6 Update supported Go versions (# 1812)
  > d765890 Merge pull request # 1800 from prometheus/dependabot/go_modules/golang.org/x/net-0.38.0
  > d72eeef Merge pull request # 1808 from prometheus/dependabot/go_modules/github.com/prometheus/procfs-0.16.1
  > 19efc48 build(deps): bump golang.org/x/net from 0.35.0 to 0.38.0
  > c247081 Merge pull request # 1805 from prometheus/dependabot/go_modules/github.com/prometheus/client_model-0.6.2
  > 8423214 build(deps): bump github.com/prometheus/procfs from 0.16.0 to 0.16.1
  > 5fedba1 Merge pull request # 1807 from prometheus/dependabot/go_modules/golang.org/x/sys-0.32.0
  > f124486 build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2
  > 6f383da Merge pull request # 1806 from prometheus/dependabot/go_modules/go.uber.org/goleak-1.3.0
  > 2db5bc8 Add exemplars for native histograms (# 1686)
  > ab6f400 build(deps): bump golang.org/x/sys from 0.30.0 to 0.32.0
  > 96a5ad6 test(registry): Add goleak-based goroutine leak detection (# 1797)
  > d8a1805 build(deps): bump go.uber.org/goleak from 1.2.0 to 1.3.0
  > 6f2e765 Merge pull request # 1809 from prometheus/repo_sync
  > 9b83d99 Merge pull request # 1799 from prometheus/dependabot/go_modules/tutorials/whatsup/golang.org/x/net-0.38.0
  > 2f65277 build(deps): bump the github-actions group with 2 updates (# 1804)
  > 1f5710d Update common Prometheus files
  > 34eaefd chore(ci): Fix flaky tests (# 1795)
  > 4131495 build(deps): bump golang.org/x/net in /tutorials/whatsup
  > 72eeefb feat(github-actions): add Go file change detection to golangci-lint workflow (# 1794)
  > f6c417a Add WrapCollectorWith and WrapCollectorWithPrefix (# 1766)
  > 7afba29 Merge branch 'release-1.22'
  > 81df5d1 Update common Prometheus files (# 1791)
  > fa1f7b7 Merge pull request # 1790 from prometheus/dependabot/github_actions/github-actions-ac4e748984
  > 6b5a0b5 Upgrade golangci-lint to v2 (# 1789)
  > aca9263 build(deps): bump the github-actions group across 1 directory with 3 updates
  > 0162a5b Merge pull request # 1786 from prometheus/dependabot/go_modules/github.com/prometheus/procfs-0.16.0
  > af4c77f Merge pull request # 1784 from prometheus/dependabot/go_modules/google.golang.org/protobuf-1.36.6
  > b8f4cc6 build(deps): bump github.com/prometheus/procfs from 0.15.1 to 0.16.0
  > 5aa253c Merge pull request # 1783 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.63.0
  > 2d684c6 build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6
  > b00c53f Merge pull request # 1781 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.63.0
  > 3a56d3e build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0
  > bb5d7a6 Merge pull request # 1782 from prometheus/dependabot/go_modules/exp/google.golang.org/protobuf-1.36.6
  > 5c02216 build(deps): bump github.com/prometheus/common in /exp
  > 2e8fbe6 Update common Prometheus files (# 1779)
  > 0bfbfb7 build(deps): bump google.golang.org/protobuf in /exp
  > a78cf0c Update common Prometheus files (# 1778)
  > adb915c Update common Prometheus files (# 1771)
  > 331dfab Merge pull request # 1776 from prometheus/dependabot/go_modules/tutorials/whatsup/golang.org/x/net-0.36.0
  > 45edd8a Merge pull request # 1770 from prometheus/superq/update_test_url
  > 4d3dcae build(deps): bump golang.org/x/net in /tutorials/whatsup
  > 93a67cb Update example test
bumping golang.org/x/text 8072180...425d715:
  > 425d715 go.mod: update golang.org/x dependencies
  > b6d2645 go.mod: update golang.org/x dependencies
bumping k8s.io/apiextensions-apiserver a0cfc63...f0c80b7:
  > f0c80b7 Update dependencies to v0.33.4 tag
bumping k8s.io/code-generator 2fa273f...6bf3bd8:
  > 6bf3bd8 Update dependencies to v0.33.4 tag

Signed-off-by: Knative Automation <[email protected]>

Author: knative-automation

go.mod

@@ -4,13 +4,13 @@ go 1.24.0
 
 require (
 	go.uber.org/zap v1.27.0
-	k8s.io/api v0.33.1
-	k8s.io/apimachinery v0.33.1
-	k8s.io/client-go v0.33.1
-	k8s.io/code-generator v0.33.1
+	k8s.io/api v0.33.4
+	k8s.io/apimachinery v0.33.4
+	k8s.io/client-go v0.33.4
+	k8s.io/code-generator v0.33.4
 	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff
-	knative.dev/hack v0.0.0-20250708013849-70d4b00da6ba
-	knative.dev/pkg v0.0.0-20250817152444-53ed1d53d232
+	knative.dev/hack v0.0.0-20250819212847-f88b7db09b1c
+	knative.dev/pkg v0.0.0-20250821143151-4ffdcf6b3fa5
 )
 
 require (
@@ -35,6 +35,7 @@ require (
 	github.com/google/gnostic-models v0.6.9 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
+	github.com/grafana/regexp v0.0.0-20240518133315-a468a5bfb3bc // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.1 // indirect
 	github.com/hashicorp/golang-lru v1.0.2 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
@@ -45,10 +46,11 @@ require (
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/prometheus/client_golang v1.22.0 // indirect
+	github.com/prometheus/client_golang v1.23.0 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/common v0.65.0 // indirect
-	github.com/prometheus/procfs v0.16.1 // indirect
+	github.com/prometheus/otlptranslator v0.0.0-20250717125610-8549f4ab4f8f // indirect
+	github.com/prometheus/procfs v0.17.0 // indirect
 	github.com/spf13/pflag v1.0.6 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
@@ -60,7 +62,7 @@ require (
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.37.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.37.0 // indirect
-	go.opentelemetry.io/otel/exporters/prometheus v0.59.0 // indirect
+	go.opentelemetry.io/otel/exporters/prometheus v0.59.1 // indirect
 	go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.37.0 // indirect
 	go.opentelemetry.io/otel/metric v1.37.0 // indirect
 	go.opentelemetry.io/otel/sdk v1.37.0 // indirect
@@ -70,29 +72,30 @@ require (
 	go.uber.org/automaxprocs v1.6.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
-	golang.org/x/mod v0.25.0 // indirect
-	golang.org/x/net v0.41.0 // indirect
+	golang.org/x/mod v0.26.0 // indirect
+	golang.org/x/net v0.43.0 // indirect
 	golang.org/x/oauth2 v0.30.0 // indirect
-	golang.org/x/sync v0.15.0 // indirect
-	golang.org/x/sys v0.33.0 // indirect
-	golang.org/x/term v0.32.0 // indirect
-	golang.org/x/text v0.26.0 // indirect
+	golang.org/x/sync v0.16.0 // indirect
+	golang.org/x/sys v0.35.0 // indirect
+	golang.org/x/term v0.34.0 // indirect
+	golang.org/x/text v0.28.0 // indirect
 	golang.org/x/time v0.10.0 // indirect
-	golang.org/x/tools v0.34.0 // indirect
+	golang.org/x/tools v0.35.0 // indirect
+	golang.org/x/tools/go/expect v0.1.1-deprecated // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20250603155806-513f23925822 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250603155806-513f23925822 // indirect
-	google.golang.org/grpc v1.73.0 // indirect
-	google.golang.org/protobuf v1.36.6 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20250707201910-8d1bb00bc6a7 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c // indirect
+	google.golang.org/grpc v1.75.0 // indirect
+	google.golang.org/protobuf v1.36.8 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiextensions-apiserver v0.33.1 // indirect
+	k8s.io/apiextensions-apiserver v0.33.4 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250207200755-1244d31929d7 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect
-	sigs.k8s.io/yaml v1.5.0 // indirect
+	sigs.k8s.io/yaml v1.6.0 // indirect
 )