upgrade to latest dependencies (knative#3302)

bumping golang.org/x/sys 15129aa...08e5482:
  > 08e5482 unix: fix out of bounds memory access in tests
  > 4f4f1c6 Revert "cpu: add HPDS, LOR, PAN detection for arm64"
  > ca63116 unix: add IOCTL_MEI_* constants
  > a4199c0 unix: fix definition of Statvfs_t for netbsd-arm.
bumping google.golang.org/genproto/googleapis/rpc c5933d9...ff82c1b:
  > ff82c1b chore(all): update all to 79d6a2a (# 1256)
  > 79d6a2a chore(all): update all (# 1255)
  > 95abcf5 chore(deps): bump golang.org/x/net in /googleapis/bytestream (# 1254)
  > 83f4791 chore(all): update all (# 1253)
  > f26f940 chore(all): update all (# 1249)
  > ab9386a chore(all): auto-regenerate .pb.go files (# 1252)
  > 3a174f9 chore(all): auto-regenerate .pb.go files (# 1248)
  > 88f65dc chore(all): update all (# 1247)
  > 4626949 chore(all): update all (# 1246)
  > 49b9836 chore(deps): bump golang.org/x/net in /googleapis/api (# 1242)
  > 65f7160 chore(all): update all (# 1245)
  > 7c0ddcb chore: update CODEOWNERS (# 1244)
  > 57b25ae chore(all): update all (# 1243)
  > 9219d12 chore(all): update all (# 1241)
  > 9702482 chore(all): update all (# 1238)
  > ef028d9 chore: upgrade to 1.24 (# 1235)
bumping google.golang.org/grpc b9788ef...805b1f8:
  > 805b1f8 Change version to 1.77.0 (# 8677)
  > ea7b66e Cherrypick # 8702 to v1.77.x (# 8709)
  > cadae08 Cherry-pick # 8536 to v1.77.x (# 8691)
  > 4288cfc Cherrypick # 8657 and # 8667 to v1.77.x (# 8690)
  > f959da6 transport: Reduce heap allocations (# 8668)
  > 0d49384 deps: update all dependencies (# 8673)
  > e3e142d pickfirst: Remove old pickfirst (# 8672)
  > 254ab10 documentation: fix typos in benchmark and auth docs (# 8674)
  > 2d56bda mem: Remove Reader interface and export the concrete struct (# 8669)
  > 8ab0c82 mem: Avoid clearing new buffers and clear buffers from simpleBufferPools (# 8670)
  > 7f0fc41 benchmark/client: add context for cancellation (# 8614)
  > 0b57abb xds/googlec2p: support custom bootstrap config per channel. (# 8648)
  > 58d4b2b outlierdetection: add metrics specified in gRFC A91 (# 8644)
  > 2b35fa5 credentials/tls: Revert removal of ALPN flag from # 8660 (# 8664)
  > f448a97 cleanup: replace dial with newclient  (# 8602)
  > 0037c61 credentials/tls: Remove environment variable for disabling ALPN (# 8660)
  > ab1ca08 stats: Re-use objects while calling multiple Handlers (# 8639)
  > b8a0fc9 deps: update dependencies for all modules (# 8653)
  > ae62635 transport: Ensure stream context is cancelled in test (# 8647)
  > 7902ebe xdsclient: move listener resource type implementation to match external xdsclient API (# 8640)
  > f28fbeb delegatingresolver: add default port to addresses (# 8613)
  > 2d92271 stats/opentelemetry: Add support for optional label `grpc.lb.backend_service` in per-call metrics (# 8637)
  > 8110884 xdsclient: fix the flaky ADS stream restart test (# 8631)
  > 74b65af transport: Replace closures with interfaces to avoid heap allocations (# 8630)
  > 0e9ac5d benchmark/benchmain: Enable buffer pooling by default (# 8638)
  > d96be4f experimental/stats: Add up down counter for A94 (# 8581)
  > 04a7af2 client: ignore http status header for gRPC streams (# 8548)
  > 20c9f65 xds: Store WeightedClusters as a slice instead of a map inside the Route (# 8632)
  > 9ff80a7 transport: Increment metrics only when the stream is active (# 8573)
  > c9cca95 clusterimpl: remove unused code in tests (# 8634)
  > b22a27f xds/clusterimpl: Convert existing unit tests to e2e style (3/N) (# 8616)
  > ece7397 transport: Reduce pointer usage in Stream structs (# 8624)
  > 8389ddb xds/clusterimpl: Convert existing unit tests to e2e style (2/N) (# 8576)
  > 5f81358 testing: SPIFFE Bundle Maps - Swap to a real unsupported key type (# 8626)
  > 6325504 client: Add error log for missing health package import during health check (# 8595)
  > 9a1d8d8 pickfirstleaf: fix bug in address de-duplication (# 8611)
  > 8a396e2 examples/health: fix markdown formatting and improve content (# 8625)
  > 1b8b98e xdsclient: fix race in ADS stream flow control causing indefinite blocking (# 8605)
  > d0ebcdf examples: improve interceptor example with better markdown formatting (# 8612)
  > 4e9b800 xds/cdsbalancer: change tests to use xds resolver (# 8579)
  > 1c83e22 xds/e2e: Use `Metadata` field from `BackendOptions` only when it is non-nil (# 8619)
  > 44475a5 xds/resolver: minor cleanup in the config selector implementation (# 8609)
  > 51b15ad pickfirstleaf: Avoid getting stuck in IDLE on connection breakage (# 8615)
  > 2780563 transport: Invoke `net.Conn.SetWriteDeadline` in `http2_client.Close` (# 8534)
  > b4000c8 xds/clusterimpl: Convert existing unit tests to e2e style (1/N) (# 8549)
  > bb71072 pickfirstleaf: Fix shuffling of addresses in resolver updates without endpoints (# 8610)
  > 5228736 xds: Fix log level and message (# 8608)
  > 8e6c228 examples/features/health: Clarify docs for health import (# 8597)
  > 1059e84 xdsclient: improve fallback test involving three servers (# 8604)
  > 8ae3c07 opentelemetry: Remove chatty log in client (# 8606)
  > c4f881c benchmark: Hold read+write lock while updating server state (# 8601)
  > 7235bb7 encoding: Add a test-only function for temporarily registering compressors (# 8587)
  > 5028ef7 xdsclient: fix TestConcurrentReportLoad to not run for 10s (# 8598)
  > 3722890 xdsclient/tests: move fallback tests to separate directory (# 8600)
  > e048bd7 flowcontrol: change variable names for better understanding (# 8578)
  > e350804 benchmark: Avoid spawning a goroutine per unary call (# 8591)
  > 68caa7c vet: add line numbers of offending lines to the output (# 8593)
  > e8ad657 credentials: Remove TODO from public godoc (# 8589)
  > 5ccc418 deps: update dependencies for all modules (# 8588)
  > e63d854 Change version to 1.77.0-dev (# 8586)
  > 0513350 client: minor improvements to log messages (# 8564)
  > ebaf486 credentials: implement file-based JWT Call Credentials (part 1 for A97) (# 8431)
  > ca78c90 xds/resolver_test: fix flaky test ResolverBadServiceUpdate_NACKedWithoutCache (# 8521)
  > 83bead4 internal/buffer: set closed flag when closing channel in the Load method (# 8575)
  > 0f45079 encoding/proto: enable use cached size option (# 8569)
  > 8420f3f transport: avoid slice reallocation during header creation (# 8547)
  > b36320e Revert "stats/opentelemetry: record retry attempts from clientStream (# 8342)" (# 8571)
  > c122250 stats/opentelemetry: record retry attempts from clientStream (# 8342)
  > e60a04b GoogleC2P: remove dependency on metadata server for IPv6 node metadata (# 8550)
  > 3012391 xds: move env var check for HTTP CONNECT metadata parsing to endpoint and locality parsing functions (# 8551)
  > 85c47b3 priority: use new-style atomic APIs (# 8558)
  > 5780703 client: handle 1xx HTTP status HEADERS (# 8518)
  > 6524c7b github,test: fix internal CI build (# 8556)
  > dc80249 transport: allow stream cancellation on the server when blocked on flow control (# 8528)
  > 29ba001 xdsclient: Fix race in SetWatchExpiryTimeoutForTesting (# 8526)
  > 30645d5 xds: add metadata registry (# 8537)
  > fa246ef xds/resolver: change tests to update all resources (# 8539)
  > 3074bcd xdsclient: create LRSClient at time of initialisation (# 8483)
  > 39400b9 client: Roll-forward PR # 8278(with changes): Restore the existing behavior to return io.EOF on repeated RecvMsg() calls for client-streaming RPCs (# 8523)
  > 3c743c9 CONTRIBUTING.md: minor text tweaks for linters (# 8533)
  > b0bc6dc xdsclient: revert # 8369: delay resource cache deletion (# 8527)
  > 01ae4f4 github: add PR template (# 8524)
  > 5ed7cf6 transport: ensure header mutex is held while copying trailers in handler_server (# 8519)
  > fa0d658 deps: bump Go version in Dockerfiles (# 8522)
  > 33ec81b xds: move all functionality from `xds/internal` to `internal/xds` (# 8515)
  > 9ac0ec8 xds/cdsbalancer: increase buffer size of requested resource channel in test  (# 8467)
  > 0ebea3e grpctest: add test coverages of `ExitIdle` (# 8375)
  > e847f29 deps: bump go version to 1.24 (# 8509)
  > 4375c78 xdsclient: add an e2e style test for fallback involving more than 2 servers # 7817 (# 8427)
  > 8292549 xdsclient: schedule serializer callback from the authority instead of from the xdsChannel (# 8498)
  > 18ee309 grpcsync: use context.AfterFunc to close buffer after context canceled in CallbackSerializer (# 8489)
  > 19c720f deps: update github.com/prometheus/client_golang (# 8502)
  > 31dc471 grpclb: simplify stringifying of IPv6 with net.JoinHostPort (# 8503)
  > 57b69b4 xdsclient: modify how the resource watch state is retrieved for testing (# 8499)
  > ab9fb6d deps: update dependencies for all modules (# 8497)
  > 8729c7d Change version to 1.76.0-dev
bumping k8s.io/api e28454b...cf951b1:
  > cf951b1 Update dependencies to v0.34.3 tag

Signed-off-by: Knative Automation <[email protected]>

Author: knative-automation

go.mod

@@ -58,27 +58,27 @@ require (
 	golang.org/x/crypto v0.44.0
 	golang.org/x/mod v0.30.0
 	golang.org/x/net v0.47.0
-	golang.org/x/oauth2 v0.30.0
+	golang.org/x/oauth2 v0.32.0
 	golang.org/x/sync v0.18.0
-	golang.org/x/sys v0.38.0
+	golang.org/x/sys v0.39.0
 	golang.org/x/term v0.37.0
 	gopkg.in/yaml.v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
 	gotest.tools/v3 v3.5.2
-	k8s.io/api v0.34.2
-	k8s.io/apimachinery v0.34.2
-	k8s.io/client-go v0.34.2
+	k8s.io/api v0.34.3
+	k8s.io/apimachinery v0.34.3
+	k8s.io/client-go v0.34.3
 	k8s.io/klog/v2 v2.130.1
 	knative.dev/client/pkg v0.0.0-20251126014234-e6a799d3b455
-	knative.dev/eventing v0.47.1-0.20251210120316-00f881030aaf
+	knative.dev/eventing v0.47.1-0.20251216143128-de3db52821ed
 	knative.dev/hack v0.0.0-20251126013634-1484a9e9b641
-	knative.dev/pkg v0.0.0-20251126013532-e853b1d1d6bb
-	knative.dev/serving v0.47.1-0.20251211192118-6d9d1b67c9f7
+	knative.dev/pkg v0.0.0-20251216153728-9c8140b780d1
+	knative.dev/serving v0.47.1-0.20251216154926-fcb2e4d0f74b
 )
 
 require (
 	cel.dev/expr v0.24.0 // indirect
-	cloud.google.com/go/compute/metadata v0.7.0 // indirect
+	cloud.google.com/go/compute/metadata v0.9.0 // indirect
 	contrib.go.opencensus.io/exporter/ocagent v0.7.1-0.20200907061046-05415f1de66d // indirect
 	contrib.go.opencensus.io/exporter/prometheus v0.4.2 // indirect
 	dario.cat/mergo v1.0.2 // indirect
@@ -179,7 +179,7 @@ require (
 	github.com/gorilla/mux v1.8.1 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3 // indirect
 	github.com/hako/durafmt v0.0.0-20210608085754-5c1018a4e16b // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
@@ -243,8 +243,8 @@ require (
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_golang v1.23.2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.66.1 // indirect
-	github.com/prometheus/procfs v0.17.0 // indirect
+	github.com/prometheus/common v0.67.4 // indirect
+	github.com/prometheus/procfs v0.19.2 // indirect
 	github.com/prometheus/statsd_exporter v0.28.0 // indirect
 	github.com/rickb777/date v1.20.2 // indirect
 	github.com/rickb777/plural v1.4.1 // indirect
@@ -276,34 +276,34 @@ require (
 	github.com/xlab/treeprint v1.2.0 // indirect
 	github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
 	go.opencensus.io v0.24.0 // indirect
-	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.63.0 // indirect
-	go.opentelemetry.io/otel v1.38.0 // indirect
-	go.opentelemetry.io/otel/metric v1.38.0 // indirect
-	go.opentelemetry.io/otel/trace v1.38.0 // indirect
+	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0 // indirect
+	go.opentelemetry.io/otel v1.39.0 // indirect
+	go.opentelemetry.io/otel/metric v1.39.0 // indirect
+	go.opentelemetry.io/otel/trace v1.39.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.1 // indirect
-	go.yaml.in/yaml/v2 v2.4.2 // indirect
+	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 	golang.org/x/time v0.12.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/api v0.233.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20250825161204-c5933d9347a5 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250825161204-c5933d9347a5 // indirect
-	google.golang.org/grpc v1.75.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
+	google.golang.org/grpc v1.77.0 // indirect
 	google.golang.org/protobuf v1.36.10 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
-	k8s.io/apiextensions-apiserver v0.34.2 // indirect
-	k8s.io/apiserver v0.34.2 // indirect
+	k8s.io/apiextensions-apiserver v0.34.3 // indirect
+	k8s.io/apiserver v0.34.3 // indirect
 	k8s.io/cli-runtime v0.34.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect
 	k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 // indirect
-	knative.dev/networking v0.0.0-20251126213812-ebe48fd53262 // indirect
+	knative.dev/networking v0.0.0-20251127155419-5082b02af8c1 // indirect
 	sigs.k8s.io/controller-runtime v0.20.4 // indirect
 	sigs.k8s.io/gateway-api v1.1.0 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect