upgrade to latest dependencies

bumping knative.dev/pkg 077dcf0...7da1174:
  > 7da1174 upgrade to latest dependencies (# 3281)
  > 2be9d56 Lock before iterating map so that code does not panic on concurrent write (# 3279)
bumping knative.dev/hack af735b2...f2be520:
  > f2be520 [release-1.19] 🐛 Fix knative.dev/toolbox for older versions of Golang (# 444)

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -22,8 +22,8 @@ require (
 	k8s.io/code-generator v0.33.4
 	knative.dev/caching v0.0.0-20250912163221-088caf3d1102
 	knative.dev/eventing v0.46.6
-	knative.dev/hack v0.0.0-20250902154142-af735b2738d6
-	knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8
+	knative.dev/hack v0.0.0-20251016122918-f2be520302e8
+	knative.dev/pkg v0.0.0-20251022154045-7da1174b871b
 	knative.dev/reconciler-test v0.0.0-20250912162922-67ad19295884
 	knative.dev/serving v0.46.6
 	sigs.k8s.io/yaml v1.6.0

go.sum

@@ -1740,12 +1740,12 @@ knative.dev/caching v0.0.0-20250912163221-088caf3d1102 h1:4FTw6bb06qI6e14jEtt2u/
 knative.dev/caching v0.0.0-20250912163221-088caf3d1102/go.mod h1:dpaqsKYjeuBAkTWxVg8oo8ZK6SvPmvl5ri9DxUyQyfg=
 knative.dev/eventing v0.46.6 h1:8htZletYsoC9rXDz4lbtsgGAAPc95CTpcV9jmACyRqA=
 knative.dev/eventing v0.46.6/go.mod h1:dIWODSwvwagsvXxcsBiOtaL3Zr2svaegjpCvW0IfBFk=
-knative.dev/hack v0.0.0-20250902154142-af735b2738d6 h1:JYZgO9bni32T+BB5v6WpeRFm1hjj+EypBLZCk6HZBt0=
-knative.dev/hack v0.0.0-20250902154142-af735b2738d6/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY=
+knative.dev/hack v0.0.0-20251016122918-f2be520302e8 h1:UQGRZ6nsBfzVGmSQYSN2b/aixYy8FJ+fpuI2KJGLBGo=
+knative.dev/hack v0.0.0-20251016122918-f2be520302e8/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY=
 knative.dev/networking v0.0.0-20250902160145-7dad473f6351 h1:Gv/UqbN0AK+ORoT5e2Kg+3+uMW/y9CCdhpXKxYaVV6k=
 knative.dev/networking v0.0.0-20250902160145-7dad473f6351/go.mod h1:P/fAhhVDgmLt1ugFX8vBvdSDiUOw2P4SGcjbzoZ02Xw=
-knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8 h1:n0BMHXIem9MyDkK4vfA4Vzdxaf1e+EeLJ6k+8exCjjI=
-knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8/go.mod h1:a1amDzo4YIUNuGeDgEz/uDHs5MQVYI1DXnRnEpWCAts=
+knative.dev/pkg v0.0.0-20251022154045-7da1174b871b h1:FGFKGId+JPrKdX9PG0tNI4ePWqmEdTNiIOw2zsiPLpo=
+knative.dev/pkg v0.0.0-20251022154045-7da1174b871b/go.mod h1:EagZcIVpB9m/bktnIVJM+MvgyXi9q25a8WpCCWULJUY=
 knative.dev/reconciler-test v0.0.0-20250912162922-67ad19295884 h1:o+aMyv+92MK4B9BeXv3qAsSQRyO1Qx/HxggV+1aWh8Q=
 knative.dev/reconciler-test v0.0.0-20250912162922-67ad19295884/go.mod h1:3BN2+QgyAHpbKEKephULEVNYyUsqx1QK/ALGOZhliTs=
 knative.dev/serving v0.46.6 h1:jmVF560qnepNBG69VEbNRtknGFwZtGEyR1QSlNuoKmk=

vendor/knative.dev/hack/library.sh

@@ -681,7 +681,7 @@ function start_knative_eventing_extension() {
 # Parameters: $1 - tool package for go run.
 #             $2..$n - parameters passed to the tool.
 function go_run() {
-  local package
+  local package gotoolchain
   package="$1"
   if [[ "$package" != *@* ]]; then
     abort 'Package for "go_run" needs to have @version'
@@ -696,6 +696,11 @@ function go_run() {
     GORUN_PATH="$(mktemp -t -d -u gopath.XXXXXXXX)"
   fi
   export GORUN_PATH
+  gotoolchain="$(go env GOTOOLCHAIN)"
+  if [[ "$package" == knative.dev/toolbox/* ]]; then
+    gotoolchain=auto
+  fi
+  GOTOOLCHAIN="${gotoolchain}" \
   GOPATH="${GORUN_PATH}" \
   GOFLAGS='' \
     go run "$package" "$@"

vendor/knative.dev/hack/presubmit-tests.sh

@@ -141,7 +141,7 @@ function __build_test_runner_for_module() {
   # Don't merge these two lines, or return code will always be 0.
   # Get all build tags in go code (ignore /vendor, /hack and /third_party)
   local tags
-  tags="$(go run knative.dev/toolbox/go-ls-tags@latest --joiner=,)"
+  tags="$(go_run knative.dev/toolbox/go-ls-tags@latest --joiner=,)"
   local go_pkg_dirs
   go_pkg_dirs="$(go list -tags "${tags}" ./...)" || return $?
   if [[ -z "${go_pkg_dirs}" ]]; then

vendor/knative.dev/pkg/controller/queue_metrics.go

@@ -121,6 +121,10 @@ func (m *queueMetrics) updateUnfinishedWork() {
 	// doesn't seem to have non-hacky ways to reset the summary metrics.
 	var total float64
 	var oldest float64
+
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
 	for _, t := range m.processingStartTimes {
 		age := m.sinceInSeconds(t)
 		total += age

vendor/modules.txt

@@ -1585,7 +1585,7 @@ knative.dev/eventing/test/upgrade/prober/wathola/fetcher
 knative.dev/eventing/test/upgrade/prober/wathola/forwarder
 knative.dev/eventing/test/upgrade/prober/wathola/receiver
 knative.dev/eventing/test/upgrade/prober/wathola/sender
-# knative.dev/hack v0.0.0-20250902154142-af735b2738d6
+# knative.dev/hack v0.0.0-20251016122918-f2be520302e8
 ## explicit; go 1.21
 knative.dev/hack
 # knative.dev/networking v0.0.0-20250902160145-7dad473f6351
@@ -1605,7 +1605,7 @@ knative.dev/networking/pkg/http/proxy
 knative.dev/networking/pkg/http/stats
 knative.dev/networking/pkg/ingress
 knative.dev/networking/pkg/k8s
-# knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8
+# knative.dev/pkg v0.0.0-20251022154045-7da1174b871b
 ## explicit; go 1.24.0
 knative.dev/pkg/apiextensions/storageversion
 knative.dev/pkg/apiextensions/storageversion/cmd/migrate