Updating vendir dependencies

Author: korifi-bot

tests/vendir.lock.yml

@@ -14,10 +14,10 @@ directories:
       url: https://api.github.com/repos/cert-manager/cert-manager/releases/254726664
     path: cert-manager
   - git:
-      commitTitle: 'fix: update release notes based on review feedback'
-      sha: b1f3c43f84370504e218eb5be8a34c81348f866a
+      commitTitle: Add v3.31.1 release notes
+      sha: 7517d28a5fdb00ccf57088353c82862aad43e710
       tags:
-      - v3.31.0
+      - v3.31.1
     path: calico
   - git:
       commitTitle: Update Contour Docker image to v1.33.0....

tests/vendor/calico/operator-crds.yaml

@@ -31421,6 +31421,7 @@ spec:
                     loadBalancer:
                       properties:
                         assignIPs:
+                          default: AllServices
                           type: string
                       type: object
                     namespace:
@@ -31507,6 +31508,7 @@ spec:
                         loadBalancer:
                           properties:
                             assignIPs:
+                              default: AllServices
                               type: string
                           type: object
                         namespace:

tests/vendor/calico/tigera-operator.yaml

@@ -349,10 +349,19 @@ rules:
     resources:
       - mutatingwebhookconfigurations
     verbs:
+      - create
       - delete
       - get
       - list
       - watch
+  - apiGroups:
+      - admissionregistration.k8s.io
+    resources:
+      - mutatingwebhookconfigurations
+    resourceNames:
+      - envoy-gateway-topology-injector.tigera-gateway
+    verbs:
+      - update
   # Needed for operator lock
   - apiGroups:
       - coordination.k8s.io
@@ -458,6 +467,8 @@ rules:
       - tcproutes.gateway.networking.k8s.io
       - tlsroutes.gateway.networking.k8s.io
       - udproutes.gateway.networking.k8s.io
+      - xbackendtrafficpolicies.gateway.networking.x-k8s.io
+      - xlistenersets.gateway.networking.x-k8s.io
       - backends.gateway.envoyproxy.io
       - backendtrafficpolicies.gateway.envoyproxy.io
       - clienttrafficpolicies.gateway.envoyproxy.io
@@ -576,7 +587,7 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: tigera-operator
-          image: quay.io/tigera/operator:v1.40.0
+          image: quay.io/tigera/operator:v1.40.1
           imagePullPolicy: IfNotPresent
           command:
             - operator
@@ -597,7 +608,7 @@ spec:
             - name: OPERATOR_NAME
               value: "tigera-operator"
             - name: TIGERA_OPERATOR_INIT_IMAGE_VERSION
-              value: v1.40.0
+              value: v1.40.1
           envFrom:
             - configMapRef:
                 name: kubernetes-services-endpoint