upgrade to latest dependencies

bumping google.golang.org/grpc 4103cfc...cdbdb75:
  > cdbdb75 Change version to v1.71.1 (# 8206)
  > 3a93562 Cherry-pick # 8195 into v1.71.x (# 8202)
  > 208e03b Cherry-pick # 8164 # 8166 to v1.71.x (# 8182)
  > 8b7d2fe grpc: fix bug causing an extra Read if a compressed message is the same size as the limit (# 8181)
  > 9c81a91 resolver: Make EndpointMap's Get, Set and Delete operations O(1) (# 8179) (# 8184)
  > 8d46b21 grpc: Add endpoints in resolverWrapper.NewAddress (# 8149) (# 8151)
  > 4775bba Change version to 1.71.1-dev (# 8106)
  > d01db5c Change version to 1.71.0 (# 8105)
  > 012f8bf xds: Enable dualstack flag (# 8134)
  > bf0c885 examples/features/dualstack: Demonstrate Dual Stack functionality (# 8098) (# 8115)
  > 05bdd66 ringhash: Remove TODO comment (# 8096)
  > ddb2484 xds: remove obsolete xDS transport custom dialer option (# 8079)
  > 8528f43 cleanup: replace Dial with NewClient (# 7975)
  > ae2a04f ringhash: Replace DNS resolver before sending xDS Update in test  (# 8091)
  > e55819e lazy: Use channel to wait for resolver error being received in test (# 8088)
  > b524c08 xdsclient: include xds node ID in errors from the WatchResource API (# 8093)
  > 91eb6aa client: improve documentation of target strings (# 8078)
  > 59c84a9 rls: change lossy GetState() and WaitForStateChange() to use grpcsync.PubSub (# 8055)
  > a26ff2a ringhash: Sort endpoints to prevent unnecessary connection attempts (# 8086)
  > fabe274 ringhash:  Delegate subchannel creation to pickfirst (# 8047)
  > 75c51bf interop: Introduce env var for xDS dualstack support and add xDS interop config (# 8081)
  > cf60e5a test: Remove fake petiole in health tests (# 8082)
  > 0003b4f weightedtarget: return erroring picker when no targets are configured (# 8070)
  > 4b5608f xdsclient: invoke connectivity failure callback only after all listed servers have failed (# 8075)
  > ad5cd32 cleanup: Remove test contexts without timeouts (# 8072)
  > e95a4b7 roundrobin: Delegate subchannel creation to pickfirst (# 7966)
  > cbb5c2f advancedtls: update CRL provider certificates (# 8073)
  > c80ea18 interop: Fix logging and totalIterations issues in soak_tests.go (# 8060)
  > e0d191d test/gracefulstop: use stubserver instead of testservice implementation (# 7907)
  > 9afb49d endpointsharding: cast EndpointMap values to *balancerWrapper instead of Balancer (# 8069)
  > 267a09b xds/internal/xdsclient: Add counter metrics for valid and invalid resource updates (# 8038)
  > f227ba9 balancer: Move metrics recorder from BuildOptions to ClientConn (# 8027)
  > 3e27c17 balancer: Enforce embedding requirement for balancer.ClientConn (# 8026)
  > b963f4b deps: bump envoyproxy/go-control-plane/envoy and synchronize go.mods (# 8067)
  > 79b6830 xds: resubmit xds client pool changes from # 7898 along with fix to set fallback bootstrap config from googledirectpath to xdsclient pool (# 8050)
  > 947e2a4 internal/dns: update TestDNSResolver_ExponentialBackoff to not return error before last resolution attempt (# 8061)
  > ee3e8d9 test: modify tests to use stubserver instead of Testservice implementation (# 8022)
  > 990f5e0 endpointsharding, lazy: Remove intermediary gracefulswitch balancers (# 8052)
  > 7dbf12e xds: introduce generic xds clients common configs (# 8024)
  > c524b8b outlierdetection: Support ejection of endpoints  (# 8045)
  > 1318104 Revert "xdsclient: introduce pool to manage multiple xDS clients with same bootstrap content (# 7898)" (# 8058)
  > 39f0e5a vet: make revive check submodules for lint errors (# 8029)
  > e4a0dfd grpcsync : Remove OnceFunc (# 8049)
  > 78eebff stats/opentelemetry: Introduce Tracing API (# 7852)
  > 7e1c9b2 test: modify tests to use stubserver (# 7951)
  > 59411f2 xds: add xDS transport custom dial options support (# 7997)
  > 73e4470 cleanup: fix new vet errors (# 8044)
  > cc637f7 xds: log bootstrap config missing warning from env var only when debugging (# 8039)
  > 3409a56 cleanup: rename fields for clarity (# 8043)
  > b0e2ae9 endpointsharding: Allow children to remain idle if configured (# 8031)
  > 81e4aaf balancer/lazy: Add a lazy balancer (# 8032)
  > e03960d xds: Implement system root certs support (# 8013)
  > cf9e380 picker_wrapper: simplify picker error when timing out waiting for con… (# 8035)
  > 9d4fa67 transport_test: change testgrpc.Emtpy to testpb.Empty (# 8040)
  > 2fd426d transport,grpc: Integrate delegating resolver and introduce dial options for target host resolution (# 7881)
  > 66f6471 *: regenrate pbs (# 8034)
  > 35cec50 grpc: Fix encoded message size reported in error message (# 8033)
  > 2517a46 xdsclient: introduce pool to manage multiple xDS clients with same bootstrap content (# 7898)
  > 897818a interop: improve rpc_soak and channel_soak test to cover concurrency in Go (# 8025)
  > 8cf8fd1 grpc: fix message length checks when compression is enabled and maxReceiveMessageSize is MaxInt (# 7918)
  > 67bee55 server: fix buffer release timing in processUnaryRPC (# 7998)
  > fe04c06 xds: remove unused code in testutils (# 8003)
  > be12ee9 deps: Update go.opentelemetry.io dependencies (# 8020)
  > eb7c484 Revert "interop: improve rpc_soak and channel_soak test to cover concurrency in Go (# 7926)" (# 8019)
  > c26dd46 deps: bump github.com/golang/glog (# 8018)
  > c879198 cleanup: fix comments spacing (# 8015)
  > 89093a3 github: Run deps workflow against PR target branch and improve dir names (# 8010)
  > 9dc22c0 xdsclient: release lock before attempting to close underlying transport (# 8011)
  > eb1adde credentials: Add experimental credentials that don't enforce ALPN (# 7980)
  > 130c1d7 leastrequest: Delegate subchannel creation to pickfirst (# 7969)
  > 74ac821 endpointsharding: Export parsed pickfirst config instead of json string (# 8007)
  > f35fb34 authz: modify the tests to use stubserver instead of testservice implementations (# 7888)
  > aad8a12 clustetresolver: Copy endpoints.Addresses slice from DNS updates to avoid data races (# 7991)
  > f9bc335 deps: update dependencies for all modules (# 7987)
  > 2d4daf3 protoc-gen-go-grpc: Update grpc-go and unskip test (# 7995)
  > 62b4867 clusterresolver: Avoid blocking for subsequent resolver updates in test (# 7937)
  > 9223fd6 deps: bump github.com/envoyproxy/go-control-plane to v0.13.4 (# 7974)
  > d118866 interop: improve rpc_soak and channel_soak test to cover concurrency in Go (# 7926)
  > 6f41085 Change version to 1.71.0-dev (# 7986)
  > 724f450 examples/features/csm_observability: use helloworld client and server instead of echo client and server (# 7945)
  > e8d5feb rbac: add method name to :path in headers (# 7965)
  > e912015 cleanup: Fix usages of non-constant format strings (# 7959)
  > 681334a cleanup: replace dial with newclient (# 7943)
  > 063d352 internal/resolver: introduce a new resolver to handle target URI and proxy address resolution (# 7857)
  > 10c7e13 outlierdetection: Support health listener for ejection updates (# 7908)
  > bce0535 test: Add a test for decompression exceeding max receive message size (# 7938)
  > f32168c envconfig: enable xDS client fallback by default (# 7949)
  > e957825 test: Workaround slow SRV lookups in flaking test (# 7957)
  > e5a4eb0 deps: update crypto dependency to resolve CVE-2024-45337 (# 7956)
  > 56a14ba cleanup: replace dial with newclient (# 7920)
  > b3bdacb test: switching to stubserver in tests instead of testservice (# 7925)
  > e8055ea grpcs: update `WithContextDialer` documentation to include using passthrough resolver (# 7916)
  > d0716f9 examples/features/csm_observability: Make CSM Observability example server listen on an IPV4 address (# 7933)
  > cc161de xds: Add support for multiple addresses per endpoint (# 7858)
  > 3f76275 xdsclient: stop caching xdsChannels for potential reuse, after all references are released (# 7924)
  > 7ee073d experimental/stats: re-add type aliases for migration (# 7929)
  > 38a8b9a health, grpc: Deliver health service updates through the health listener (# 7900)
  > c1b6b37 Update README.md (# 7921)
  > e4d084a examples: replace printf with print for log message in gracefulstop (# 7917)
  > b1f70ce test: replace grpc.Dial with grpc.NewClient
  > 0027558 internal/transport: replace integer status codes with http constants (# 7910)
  > 66ba4b2 examples/features/gracefulstop: add example to demonstrate server graceful stop (# 7865)
  > adad26d test/kokoro: Add psm-fallback build config (# 7899)
  > f53724d serviceconfig: Return errors instead of skipping invalid retry policy config (# 7905)
  > 645aadf deps: update dependencies for all modules (# 7904)
  > d7286fb Change version to 1.70.0-dev (# 7903)
bumping golang.org/x/time 5d9ef58...2c6c5a2:
  > 2c6c5a2 rate: prevent overflows when calculating durationFromTokens
  > 1ce61fe rate: make function comment match function name
  > 3846194 README: don't recommend go get
  > 772484e x/time/rate: correctly handle 0 limits
bumping k8s.io/utils 49e7df5...24370be:
  > 24370be [Fake clock] Make Stop / Reset return false if Timer stopped (# 320)
  > 6fe5fd8 Merge pull request # 319 from dims/add-lock-unlock-in-SetEvictionFunc
  > 3ea5e8c Merge pull request # 318 from dims/add-a-helper-method-to-set-eviction-function-after-construction
  > 7a270de Add lock/unlock in SetEvictionFunc
  > 7edc6f1 Add a helper method to set eviction function after construction
bumping github.com/prometheus/client_golang 05fcde9...48e12a1:
  > 48e12a1 Merge pull request # 1645 from prometheus/cut-1204-pr1424
  > 504ad9b Cut 1.20.5; update comments.
  > 584a7ce Revert "testutil compareMetricFamilies: make less error-prone (# 1424)"
bumping golang.org/x/sync 913fb63...396f3a0:
  > 396f3a0 errgroup: document calling Go before Wait
  > b637f27 errgroup: drop support for Go versions before 1.20
  > 960bf1f all: upgrade go directive to at least 1.23.0 [generated]
  > fe3591b sync/errgroup: improve documentation for semaphore limit behavior
bumping golang.org/x/net 8da7ed1...b8d8877:
  > b8d8877 go.mod: update golang.org/x dependencies
  > e1fcd82 html: properly handle trailing solidus in unquoted attribute value in foreign content
  > ebed060 internal/http3: fix build of tests with GOEXPERIMENT=nosynctest
  > 1f1fa29 publicsuffix: regenerate table
  > 1215081 http2: improve error when server sends HTTP/1
  > 312450e html: ensure <search> tag closes <p> and update tests
  > 09731f9 http2: improve handling of lost PING in Server
  > 55989e2 http2/h2c: use ResponseController for hijacking connections
  > 2914f46 websocket: re-recommend gorilla/websocket
  > 99b3ae0 go.mod: update golang.org/x dependencies
  > 85d1d54 go.mod: update golang.org/x dependencies
  > cde1dda proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts
  > fe7f039 publicsuffix: spruce up code gen and speed up PublicSuffix
  > 459513d internal/http3: move more common stream processing to genericConn
  > aad0180 http2: fix flakiness from t.Log when GOOS=js
  > b73e574 http2: don't log expected errors from writing invalid trailers
  > 5f45c77 internal/http3: make read-data tests usable for server handlers
  > 43c2540 http2, internal/httpcommon: reject userinfo in :authority
  > 1d78a08 http2, internal/httpcommon: factor out server header logic for h2/h3
  > 0d7dc54 quic: add Conn.ConnectionState
  > b4c8655 http2: avoid extended CONNECT hang when connection breaks during startup
  > 163d836 internal/http3: add Server
  > 447f458 context: delete lone example
  > 918d64e context: delete dead code, sync docs with upstream context package
  > 5095d0c all: upgrade go directive to at least 1.23.0 [generated]
  > 8844327 internal/httpcommon: don't depend on net/http
  > cd9d661 route: fix RTM_GET netmask parsing on Darwin
  > df97a48 go.mod: update golang.org/x dependencies
  > 2dab271 route: treat short sockaddr lengths as unspecified
  > b914489 internal/http3: refactor in prep for sharing transport/server code
  > ebd23f8 route: fix parsing network address of length zero
  > 938a9fb internal/http3: add request/response body transfer
  > 145b2d7 internal/http3: add RoundTrip
  > 5bda71a internal/http3: define connection and stream error types
  > 3c1185a internal/http3: return error on mid-frame EOF
  > a6c2c7f http2, internal/httpcommon: factor out common request header logic for h2/h3
  > c72e89d internal/http3: QPACK encoding and decoding
  > 93c1957 internal/http3: add Transport and ClientConn
  > 45432b5 internal/socket, webdav: use testing.T.TempDir
  > 56691ee quic: don't return EOF from ReadByte when we have a byte
  > 7ad0ebf internal/http3: qpack wire primitives
  > f6b2e53 internal/http3: basic stream read/write operations
  > 78717f9 internal/http3: error codes
  > 84b528b internal/http3: new package
  > 445eead http2: encode :protocol pseudo-header before regular headers
  > 5566b43 quic: add the ability to create an endpoint with a fake network
  > 97dd44e http2, internal/gate: move Gate type to an internal package
  > 35e1007 quic, internal/quic/quicwire: split wire encode/decode functions to new package
  > 0a5dcdd http2: disable extended CONNECT by default
  > 03179ce quic: report error string when peer closes connection
  > 4428704 quic: surface connection errors in stream methods
  > dc3b8a8 quic: return error from Stream.Flush
  > 2e60102 quic, internal/testcert: move test cert to internal package
bumping github.com/prometheus/common 0c7b585...280b0e7:
  > 280b0e7 http_config: Allow customizing TLS config and settings. (# 748)
  > aea8919 Update common Prometheus files (# 747)
  > 8d916fa Bump golang.org/x/net from 0.32.0 to 0.33.0 (# 743)
  > fe88605 Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 (# 744)
  > 5d9961d Update common Prometheus files (# 742)
  > 0a89b98 Merge pull request # 740 from dashpole/update_om_links
  > d88ee1f Remove deprecated sigv4 module (# 737)
  > e3926e2 update links to openmetrics to reference the v1.0.0 release
  > c3fdb17 Remove deprecated promlog package (# 738)
  > cf5f48f Change default validation scheme to UTF8Validation (# 724)
  > 7b484e9 Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (# 732)
  > 05e3c40 Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (# 731)
  > a0ef737 Bump golang.org/x/net from 0.30.0 to 0.32.0 (# 736)
  > f99f029 Update common Prometheus files (# 726)
  > b88f24c promslog: always lowercase log level from CLI (# 728)
  > 2c3c048 Bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 (# 730)
  > ec7291f Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in /assets (# 729)
  > 145b50a fix(promslog): always use UTC for time (# 735)
  > 39a62f7 fix: values escaping bugs (# 727)
  > 7ed4523 Allow custom user-agent definition (# 725)
  > e25286d Update common Prometheus files (# 722)
  > b83ece4 Mark promlog deprecated (# 720)
  > 8675cd9 Update common Prometheus files (# 721)
  > c971f56 setup dependabot for `github.com/prometheus/common/assets` (# 719)
  > 34874f2 Bump google.golang.org/protobuf from 1.34.2 to 1.35.1 (# 711)
  > ab95209 chore: use testify instead of testing.Fatal (# 718)
  > 937c5b5 chore: enable perfsprint linter (# 717)
  > 28e4459 Bump golang.org/x/net from 0.29.0 to 0.30.0 (# 712)
  > b424bae Update common Prometheus files (# 714)
  > ee5cc87 Provide a way to get UserAgent (# 716)
  > 6ad2990 Mark sigv4 deprecated (# 715)
  > 653e0fa Update common Prometheus files (# 701)
  > 0d2e2e5 Reload certificates even when no CA is used (# 707)
  > a9d2e3f Merge pull request # 705 from roidelapluie/sourcefile
  > dae848d Update supported Go versions (# 700)
  > fdc50c7 promslog: Only log basename, not full path
  > 63ff77e Bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 (# 698)
  > b7aa68c Bump golang.org/x/net from 0.28.0 to 0.29.0 (# 699)
  > 4e3a6fd feat: add `promslog.NewNopLogger()` convenience func (# 697)
  > d66e745 promslog: use UTC timestamps for go-kit log style (# 696)
  > 14bac55 Merge pull request # 695 from prometheus/repo_sync
  > 40d6251 Merge pull request # 694 from jkroepke/slog/writer
  > 8bc4cd5 Update common Prometheus files
  > fa21dfd Update common Prometheus files (# 692)
  > 5f9af24 slog: expose io.Writer
  > be8a747 fix(utf8): Fix multiple metric name inside braces validation (# 691)
  > bf4843e Merge pull request # 690 from ywwg/owilliams/default-escaping
  > 4f8e8f4 expfmt: Add WithEscapingScheme to help construct Formats (# 688)
  > 01da226 Change the default escape method to UnderscoreEscaping
  > b1880d0 Merge pull request # 687 from roidelapluie/checkheader
  > 06c2425 Bump golang.org/x/net from 0.27.0 to 0.28.0 (# 685)
  > 334963d Change the logic for SetDirectory
  > 4606c0a Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (# 684)
  > d64a747 Remove secret file existence check in Validate for headers
  > d98411b Merge pull request # 683 from tjhop/docs/promslog-README
  > 9bbc9cb Merge pull request # 677 from tjhop/feat/add-promslog-pkg
  > 76549db docs: mention new promslog package in package list in README
  > 6623230 Provide a method for explicitly checking label names for legacy validity. (# 682)
  > 6ea2584 feat: new promslog and promslog/flag packages to wrap log/slog
  > 19d0796 Merge pull request # 681 from prometheus/repo_sync
  > 8968b6c expfmt: Add UTF-8 syntax support in text_parse.go (# 670)
  > 29a2d2c Update common Prometheus files
  > cd4bcc0 Update golangci lint (# 679)
  > 2cac84e Update client_golang (# 676)
  > 79c0459 Merge pull request # 675 from dswarbrick/fix-32bit-overflows
  > 1dade5b sigv4: support nil body (# 673)
  > 008d7b8 Fix overflows of untyped int constants on 32-bit
  > 430dbfe Bump github.com/aws/aws-sdk-go from 1.54.19 to 1.55.5 in /sigv4 (# 671)
  > d235298 Update common Prometheus files (# 674)
  > 3f9e4f8 Merge pull request # 672 from prometheus/repo_sync
  > a3eaa75 Merge pull request # 668 from ywwg/owilliams/param
  > 6eac2f4 Update common Prometheus files
  > 0b924af Bump golang.org/x/net from 0.26.0 to 0.27.0 (# 667)
  > a9acdc7 use basic string in IsValidLegacyMetricName
  > 4cf22c5 Merge pull request # 665 from prometheus/superq/revert_unexport
  > 1d53a04 Update common Prometheus files (# 664)
  > c3e8247 Deprecate format strings
  > 8e3075b Bump github.com/aws/aws-sdk-go from 1.54.7 to 1.54.11 in /sigv4 (# 661)
  > 279f076 Revert "Unexport Format strings"
  > 3e6afe2 remove dependency to github.com/prometheus/client_golang in sigv4
  > 8742f09 Merge pull request # 647 from multani/fix-oauth2-secret-file-refresh
  > 249682f Don't always fetch a OAuth2 token, if the secret from a file didn't change
bumping golang.org/x/term 40b02d6...5d2308b:
  > 5d2308b go.mod: update golang.org/x dependencies
  > e770ddd x/term: disabling auto-completion around GetPassword()
  > 04218fd go.mod: update golang.org/x dependencies
  > 208db03 all: upgrade go directive to at least 1.23.0 [generated]
  > 743b270 go.mod: update golang.org/x dependencies
bumping k8s.io/apiserver 7befe9c...c09fadd:
  > c09fadd Update dependencies to v0.32.1 tag
  > f2c6d90 Merge pull request # 129495 from MadhavJivrajani/132-go124-webhook-regex-ut
  > 3fbb4c3 webhook: alter regex to account for x509sha1 GODEBUG removal
  > 34b7cc9 Merge remote-tracking branch 'origin/master' into release-1.32
  > 5945d46 Drop use of winreadlinkvolume godebug option
  > adee259 Merge remote-tracking branch 'origin/master' into release-1.32
  > fbba927 Merge pull request # 129081 from stlaz/fg_remote_uid
  > b3c0cb6 Merge remote-tracking branch 'origin/master' into release-1.32
  > f76e404 featuregate UID in RequestHeader authenticator
  > bf14697 Revert to go1.22 windows filesystem stdlib behavior
  > 1f546ee Possible fix for alpha CI jobs failing with AllowUnsafeMalformedObjectDeletion switched on
  > 3423727 Merge pull request # 127581 from richabanker/flagz-apiserver
  > b8357e7 Merge pull request # 128618 from knrc/error-check-fix
  > 10dc325 Add flagz implementation and enablement in apiserver
  > 0b01a72 Merge pull request # 127513 from tkashem/delete-undecryptable
  > a69b1ea Fix error check
  > f983148 Merge pull request # 125577 from richabanker/statusz
  > fbb5ab0 handle watch for unsafe delete
  > d520e75 add statusz implementation and enablement in apiserver
  > 8b8b5c0 add access control check for unsafe delete
  > 43b9e23 Merge pull request # 127360 from knight42/feat/split-stdout-stderr-server-side
  > 1f27993 implement unsafe deletion, and wire it
  > 67b987f Merge pull request # 128637 from jpbetz/fix-mutating-admission-defaulting
  > 641a07c feat(apiserver): set stream param in LogLocation
  > 4ce1c97 api: add a new field to meta/v1 DeleteOptions
  > a16a110 Merge pull request # 128166 from yongruilin/test-allow-label
  > 490aa47 Add defaulting to tests
  > 3a2942b Merge pull request # 128593 from jpbetz/bump-cel-123
  > 15884a5 feat: Add function to reset label allow list for apiserver endpoints metrics
  > 6b49c22 Fix defaulting for native types
  > b5e6c92 Merge pull request # 128503 from benluddy/cbor-codecs-featuregate
  > accfd98 Wrap unversioned CEL library initializer calls with guard
  > 0b5852e Wire serving codecs to CBOR feature gate.
  > ba14b9c Add cost testing for two variable comprehensions
  > 88f051a Merge pull request # 128554 from ritazh/webhookmatchcondition-doc-comment
  > 454f4fe hack/pin-dependency.sh github.com/google/cel-go v0.22.0
  > be81d72 Merge pull request # 128501 from benluddy/watch-cbor-seq
  > 882c789 Add webhookmatchcondition doc comment
  > dc2e401 Use application/cbor-seq media type in streaming CBOR responses.
  > e906dc9 Merge pull request # 128266 from AnishShah/resize-subresource
  > cb02f4a support for resize subresource in ResourceQuota admission.
  > 04fa4ad Merge pull request # 128539 from benluddy/cbor-feature-gates
  > 7338177 Merge pull request # 128580 from jpbetz/bump-kube-openapi
  > ca9c3d9 Add CBOR feature gates.
  > 4cb4306 Merge pull request # 128415 from serathius/watchcache-btree-2
  > 5fff35e hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d763339b258e
  > 9829443 Merge pull request # 127134 from jpbetz/mutating-admission
  > e85d45c Use btree for watch cache storage to serve LIST more efficiently
  > 4605e42 Merge pull request # 128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru
  > f7ccc75 Reorganize and expand unit test coverage
  > e3e5839 Merge pull request # 126894 from carlory/ZeroLimitedNominalConcurrencyShares
  > cae3853 Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
  > 9843fd9 Rename dispatcher Run to Start to match naming conventions
  > 6df5cd7 Merge pull request # 128481 from carlory/dependencies-ginkgo-gomega
  > 9b88185 remove general avaliable feature-gate ZeroLimitedNominalConcurrencyShares
  > b738c82 Fix comment in mutating webhook dispatcher
  > 5d1ea16 dependencies: ginkgo v2.21.0, gomega v1.35.1
  > c259217 Improve error messaging for validating admission policy authz
  > 0b45fb4 Merge pull request # 128416 from jpbetz/reset-filter
  > 9da9568 Add jsonpatch.escapeKey CEL function
  > 97c3c25 Merge pull request # 128463 from knrc/fix_vap_elapsed_time_tracking
  > 15adc43 Add ResetFieldsFilterStrategy
  > a5e93cb Add MutatingAdmissionPolicy plugin to admission chain
  > 1ae0417 Merge pull request # 128468 from wojtek-t/fix_miss_events_tests
  > b91c432 Fix elapsed time tracking for validating admission policies
  > 125611e hack/pin-dependency.sh sigs.k8s.io/structured-merge-diff/v4 v4.4.2
  > 0e6467b Add mutation support into CompositedCompiler and reorganize for clarity
  > f189442 Merge pull request # 128454 from jpbetz/fix-emulated-storage-version-encoding-config
  > 0679efd Fix TestCacherDontMissEventsOnReinitialization test
  > 9ead80d Add MutatingAdmissionPolicy API
  > 9270d97 Merge pull request # 128456 from benluddy/nondeterministic-response-encoding
  > 7d5891a Unit test for emulated storage version selection
  > bd808a0 Add feature gate
  > 2e7093f Merge pull request # 128273 from benluddy/cbor-apply
  > 30be0a3 Allow nondeterministic object encoding in HTTP response bodies.
  > f0baf72 Don't pick versions that have a replacement as storage version
  > 8794780 Clean up Object initialization support
  > 28f9eed Merge pull request # 126875 from serathius/watchcache-test-indexers
  > cf0dbba Support application/apply-patch+cbor in patch requests.
  > b09b801 Move caching authorizer to shared location to be used by mutating and validating policy
  > d93c90f Merge pull request # 128274 from eddycharly/fix-cel-type-provider
  > 518e8ed Adding tests for using indexers in tests
  > 918f350 Merge pull request # 126754 from serathius/watchcache-btree
  > 00c7d5a use require
  > 14c29cd Merge pull request # 128013 from seans3/admission-configuration-strict
  > 5913dac Implement btree based storage indexer
  > b432ca9 add test
  > 76c0640 Merge pull request # 128122 from aojea/storage_error
  > 2bfdf1d AdmissionConfiguration now uses strict validation
  > 1522096 fix: cel type provider should return a type type
  > 4bece4d Merge pull request # 128196 from richabanker/move-version
  > 81796a8 use same name for package than the folder
  > fb9f1a8 Merge pull request # 127898 from modulitos/modulitos/fix-metrics-docs
  > 7862882 Merge pull request # 128243 from benluddy/cbor-dynamic-integration
  > 334b2d8 Fix docs for apiserver admission metrics
  > 781f771 Merge pull request # 125258 from serathius/etcd-kubernetes-interface
  > f27bb54 Wire test-only feature gate for CBOR serving.
  > eb7f648 Migrate GetList to Kubernetes client
  > de27d75 Migrate Count to Kubernetes client
  > fd6565d Migrate Delete and GuaranteedUpdate to Kubernetes client
  > fc6b258 Migrate Create to Kubernetes client
  > 187d1ad Migrate Get to Kubernetes client
  > 37f4223 Update recorders to wrap kubernetes.Client
  > b43a246 Add etcd kubernetes interface package to vendor
  > 7dd4904 Merge pull request # 127341 from mjudeikis/mjudeikis/deprecate.ch.fully
  > 9d850af Merge pull request # 127915 from omerap12/apiserver-util-PollUntilContextTimeout
  > 3e52ced fully remove StopCh
  > 54b4c4f Merge pull request # 124945 from hoskeri/remove-unused-field
  > 9652430 Use PollUntilContextTimeout in flowcontrol
  > c6b840a Merge pull request # 126900 from deveshgoyal1000/fix/typo-flowcontrol-request-width
  > b4437b2 Remove unused field from APIGroupVersion
  > d0f54d5 Merge pull request # 128172 from liggitt/3221-ga
  > b2a5ee8 Updated width.go
  > ec228a4 Merge pull request # 128168 from liggitt/4601-beta
  > 08766af KEP-3221: Promote StructuredAuthorizationConfiguration to GA
  > 1ea7bef Merge pull request # 128165 from liggitt/prune-self-require
  > 1e62dc2 KEP-4601: AuthorizeNodeWithSelectors / AuthorizeWithSelectors to beta
  > 6600cfa Merge pull request # 126347 from vinayakankugoyal/kep2862impl
  > d1d8d5e Drop self-referencing replace directives
  > e784492 Merge pull request # 127504 from sttts/sttts-authz-cel-compiler-once
  > 9da53c5 KEP-2862: Fine-grained Kubelet API Authorization
  > b907cca Merge pull request # 128144 from cheftako/updateANP
  > bf20cce apiserver/validation: fix some sets.NewString deprecations
  > 08c8245 Merge pull request # 128120 from aojea/celmetrics
  > 1f585b0 Bump konnectivity-client to v0.30.0
  > 4b46916 apiserver/authconfig: wire CEL compiler through lower layers to allow sharing
  > aeae196 Promote WatchList feature to Beta  (# 128053)
  > 402e1cd use same name as the folder for the package
  > 608821c Merge pull request # 128136 from enj/enj/t/non_global_kms_kdf_via_name
  > c8517e5 Merge pull request # 128076 from AmarNathChary/Removed_Alpha_Beta_Ga
  > 4f8e2cf kmsv2: run KDF tests in parallel
  > 576854d Merge pull request # 128064 from dims/update-to-last-versions-of-some-very-infrequently-updated-repos
  > 54c7d50 removed_comments_from_kube_feature_of_alpha_beta_ga
  > d089101 Merge pull request # 128073 from seans3/tracing-config-strict-validation
  > 3ee34eb Update to last versions of some very infrequently updated repos
  > d52f63d Merge pull request # 127982 from tkashem/refactor-store-decoder
  > e6b7968 TracingConfiguration is now validated strictly
  > 44ff1c1 Merge pull request # 128038 from seans3/resource-quota-config-validation
  > 1488136 refactor: extract decode functions into an interface for etcd3 store
  > 6ad2d93 Merge pull request # 128011 from seans3/egress-selector-configuration-strict
  > 15f8ad5 Enable strict validation for ResourceQuotaConfiguration
  > 285603b EgressSelectorConfiguration now uses strict validation
  > ebe463f Merge pull request # 127998 from skitt/golang-x-oct-2024
  > b9c35c9 Merge pull request # 127985 from dims/update-moby-runc-dependencies-oct-10
  > 042b976 October 2024 golang.org/x bump
  > 33a5883 Update moby/runc dependencies
  > 23e33fe Merge pull request # 127984 from tkashem/refactor-storage-internal-error
  > 26cc277 Merge pull request # 127942 from liggitt/json123
  > 33cfd96 refactor: storage.InternalError should retain the inner error
  > f14df2d Merge pull request # 127777 from tkashem/refactor-delete-option
  > 810761b Update sigs.k8s.io/json to go1.23
  > 664cde1 Merge pull request # 127778 from tkashem/refactor-conditional-delete
  > 3a0975b refactor: add delete options for Delete method in storage interface
  > f28acc6 refactor etcd store conditional delete
  > bd937b2 Merge pull request # 122923 from tkashem/timeout-documenting-test
  > f45e42a Merge pull request # 127302 from cici37/costFG
  > 7b1424d fixup! add test to document behavior of net/http read/write deadline
  > 8602a60 Merge pull request # 127909 from richabanker/mvp-cleanup
  > 0381d1e Promote cost enforcement feature gates to GA
  > 85ab93c add test to document behavior of net/http read/write deadline
  > 50dafb8 reset err in resolveServingLocation() when the req can be served by local apiserver
  > c207000 Merge pull request # 127905 from cici37/revert-127400
  > 7202dc0 Merge pull request # 127902 from p0lyn0mial/upstream-system-authenticated-for-system-apiserver
  > f79926b Revert pr 127400
  > 3257d91 server/config: assing system:apiserver user to system:authenticated group
  > 5bdd80c Merge pull request # 127816 from cici37/updateCEL
  > d30adf3 Merge pull request # 122957 from richabanker/uvip-bugfix
  > be24016 Update cel-go to v0.21.0
  > df45eb6 refactor peerproxy_handler and add unit test
  > 08c52b9 Merge pull request # 127764 from Jefftree/responsewriter-refactor
  > 2861287 Merge pull request # 127718 from richabanker/mvp-cleanup
  > f900b71 Move inmemoryresponsewriter into own package
  > 36e5769 apiserver/handlers/watch: encode initialEventsListBlueprint with watchEncoder (# 127587)
  > 8c1054e use structured logging wherever possible
  > d7cbe7a Merge pull request # 127670 from Jefftree/port-kcm-feature
  > 40680ba Do not mark errorFetchingAddressFromLease, in case when the there's no address being fetched from the lease object
  > b16c96d Merge pull request # 127029 from tkashem/apf-fix-watch-panic-handling
  > 38adb49 Port the rest of unversioned features
  > 60d1ca6 Merge pull request # 127690 from mmorel-35/testifylint/[email protected]/apiserver
  > 4483cc9 apiserver: all bookkeeping must complete before apf handler returns
  > efdbeb5 Merge pull request # 127683 from mmorel-35/testifylint/[email protected]/apiserver
  > e32a42c fix: enable expected-actual rule from testifylint in module `k8s.io/apiserver`
  > a785076 apiserver: fix apf watch test
  > ad232ba Merge pull request # 127671 from mmorel-35/testify/error-contains
  > aaeee2a fix: enable error-nil and nil-compare rules from testifylint in module `k8s.io/apiserver`
  > 42502d2 Merge pull request # 126764 from liggitt/mergo
  > 17d29da fix: use `ErrorContains(t, err` instead of `Contains(t, err.Error()`
  > 163594e Merge pull request # 127536 from mmorel-35/testifylint/[email protected]/apiserver
  > 0298bf9 Update vendor
  > 326460d Merge pull request # 127551 from carlory/fix-trace-context
  > c6ba968 fix: enable contains rule from testifylint in module `k8s.io/apiserver`
  > d9db30e Merge pull request # 127647 from mmorel-35/testifylint/[email protected]/apiserver
  > 1bb7b2e introduce a proper trace context
  > afd0aba Merge pull request # 127012 from Chaunceyctx/new-send-bookmark
  > 33d4365 fix: enable formatter rule from testifylint in module `k8s.io/apiserver`
  > 18cfc4e Merge pull request # 127200 from omerap12/version_fg_apiserver
  > f7eddd4 send bookmark right now after sending all items in watchCache store
  > 8cb411e adds watchListEndpointRestrictions for watchlist requests (# 126996)
  > 6dc6d8d chore: moving apiserver featuregates to versioned
  > 11af6bb Merge pull request # 127093 from jpbetz/retry-generate-name-ga
  > 763c822 Merge pull request # 127500 from p0lyn0mial/upstream-assign-rv-to-watchCacheInterval
  > a84f818 Preserve testing of RetryGenerateName feature disablement
  > c34f5e1 Merge pull request # 127323 from vrutkovs/tracing-cacher-get
  > cdd40a3 pkg/storage/testing/watcher_tests: RunWatchSemantics checks if the storage has been primed with init data
  > 91a4bf2 Promote RetryGenerateName to GA
  > bcc4579 Merge pull request # 127540 from mmorel-35/testifylint/[email protected]/apiserver
  > 7da1f04 tracing: add span for cacher.Get
  > eb3a20a storage/cacher/cache_watcher: processInterval sets RV from the snapshot
  > 1e85cd3 Merge pull request # 127524 from mjudeikis/mjudeikis/extend.group.manager
  > b489c4e fix: enable error-is-as rule from testifylint in module `k8s.io/apiserver`
  > 743b577 storage/cacher/cache_watcher: add RV to watchCacheInterval
  > de96004 Merge pull request # 126799 from kiashok/update-cadvisor-hcsshim
  > b09ab6e Add GroupLister interface to discovery GroupManager
  > 8a3f4fc Merge pull request # 127529 from mmorel-35/testifylint/[email protected]/apiserver
  > d076be3 Update cadvisor and hcsshim versions
  > 9996ba3 fix: enable compares rule from testifylint in module k8s.io/apiserver
  > 4509919 Merge pull request # 126760 from ncdc/ncdc/emeritus
  > 3f8a6ad Merge pull request # 127422 from srivastav-abhishek/go-vet-fix
  > 614f663 Use emeritus_*
  > 7d77d3c Merge pull request # 127493 from p0lyn0mial/upstream-deflake-cacher-dont-accept-requests
  > 17ab6c2 Fix Go vet errors for master golang
  > 1ccea00 Move ncdc to emeritus
  > 1a9bf77 Merge pull request # 127492 from p0lyn0mial/upstream-deflake-consistent-read-fallback
  > 87a5cde storage/cacher/cacher_whitebox_test:deflake TestCacherDontAcceptRequestsStopped when ResilientWatchCacheInitialization is off
  > bafce89 pkg/storage/cacher/cacher_whitebox_test: deflake TestConsistentReadFallback when ResilientWatchCacheInitialization is off
  > f5a73ba Merge pull request # 127244 from Adarsh-verma-14/fix-comment
  > e70087b Merge pull request # 127161 from Jefftree/duplicate-feature-inplacepod
  > 5db4826 fixing inconsistency between the comment and the actual feature gate definition
  > 7e60e39 Merge pull request # 124792 from mjudeikis/mjudeikis/ctx.wiring
  > b93ecaa remove duplicate unused feature InPlacePodVerticalScaling
  > 87a949c Merge pull request # 126977 from aaron-prindle/compat-version-132
  > 07be298 wire in ctx to rbac plugins
  > 71b1c7e Merge pull request # 127400 from sttts/sttts-webhook-cel-compiler
  > fc23f87 chore: bump DefaultKubeBinaryVersion to 1.32, make 1.32 CEL changes, fix int tests to handle 1 version off API deprecation, and fix prerelease-lifecycle-gen for # of APIs
  > b0e4675 Merge pull request # 127279 from serathius/etcd-v3.5.16
  > 9a5bc0a apiserver/admission/webhook: construct static CEL compiler only once
  > ac5c364 Merge pull request # 125186 from liyuerich/newserializer
  > 0b2ba57 Upgrade etcd client to v3.5.16
  > d6db44d Merge pull request # 127314 from xuzhenglun/cohabitating-ut
  > 535f094 drop deprecated json/yaml newSerializers, use json.NewSerializerWithOptions instead
  > 3abc312 add test coverage for cohabitating resources in StroageFactory
  > 6ab385d Merge pull request # 127271 from liggitt/go1.23
  > b95faaa Merge pull request # 127239 from xuzhenglun/cohabitating-resources
  > d3f16fa Pin godebug default to go1.23
  > 438d2ea Merge pull request # 126368 from jpbetz/organize-cel-libraries
  > a096b0d API emulation versioning honors cohabitating resources
  > 9f2124a Update go.mod to go 1.23
  > 14b3ab9 Merge pull request # 127186 from Adarsh-verma-14/remove-duplication
  > 206e39c Test library and type names
  > d3a58dd Merge pull request # 127254 from liggitt/test-filter
  > 8a5b910 add missing comment
  > c90ac47 Move CEL semver library into common libs, fix cost tests to use registered types
  > fbad808 Merge pull request # 127265 from p0lyn0mial/upstream-watchlist-matchsingle-recursive
  > f014f4a Fix unit tests for filtering
  > 6999423 Add equality cost checking
  > 8a764cf cacher: apply key for initial events only if the call is not recursive
  > 7896cd7 add a type for each CEL library, register all types
  > 197cd43 Merge pull request # 125960 from pohly/dep-logging
  > 1d107b2 Merge pull request # 115834 from stlaz/remote-uid
  > d7c9221 dependencies: logr v1.4.2, zap v1.27.0
  > cf15325 delegate authn: don't default the ReqHeaders UID header
  > 60f20c3 client-go: add the UID to the auth-proxy roundtripper
  > b9e6a66 requestheaders: add a "requestheader-uid-headers" flag and wire it up
  > 3da25cf Merge pull request # 127119 from Jefftree/compat-version/cleanup-apiserver-example
  > 90f5efd Merge pull request # 126500 from liangyuanpeng/bump_etcd_3515
  > e778ced Remove example feature gate from pkg/apiserver/kube_features.go
  > 1b4b1fb Merge pull request # 127009 from vinayakankugoyal/kep4633
  > 158efa9 Bump dependency: etcd to 3.5.15.
  > ec5e79c Merge pull request # 127058 from carlory/rm-fgs
  > 491f624 KEP-4633: Graduate to BETA.
  > 6b43222 Merge pull request # 127089 from sanposhiho/revert-126574
  > af2142b Remove GAed feature gates ServerSideApply/ServerSideFieldValidation
  > cfa4430 Revert "apiserver: fix data race in apf tests in server/filters package"
  > 6bd08c5 Revert "apiserver: improve logging for apf tests in server/filters package"
  > bbf2820 Merge pull request # 127010 from aramase/aramase/f/kep_3331_jti
  > 13c06f3 Set credential-id in userinfo.extra for jwt authenticators if jti claim present
  > bb8caf4 Merge pull request # 126574 from tkashem/apf-data-race
  > bd063e0 Merge pull request # 126968 from serathius/watchache-refactor-store
  > 9d542fe apiserver: improve logging for apf tests in server/filters package
  > a8c26a1 Extract watch cache store to separate file and cover with tests
  > 644a251 apiserver: fix data race in apf tests in server/filters package
  > 94a5e3c Refactor WaitUntilFreshAndList to split out filtering to separate function
  > 784a83e Merge pull request # 126957 from dashpole/fix_tracing_leak
  > d9009c5 Merge pull request # 126627 from fusida/fix-reduce-etcd-conn
  > f1fcc94 update-vendor
  > 8beb816 Merge pull request # 125634 from ahmedtd/x509credentialID
  > e312f49 fix short circuit if the compaction request from apiserver is disabled
  > daa75f8 fix memory leak from global MeterProvider
  > 6c201a9 Merge pull request # 126930 from Ruddickmg/patch-1
  > 72a449f Define credential IDs for X.509 certificates
  > 7198d4f Merge pull request # 126787 from Jefftree/update-kube-openapi
  > 9c8c6cc kmsv2: fixed issue with an invalid authority header being sent by the KMSv2 service
  > a78241f Merge pull request # 126359 from jpbetz/quantity-estimated-cost
  > a03dae5 re-vendor k8s.io/kube-openapi
  > 12c4904 Merge pull request # 126295 from sohankunkerkar/denoise-watcher-events
  > 28d9c91 Add basic panicOnUnknown support for kubernetes types
  > 932b258 Merge pull request # 125884 from serathius/benchmark-storage
  > fed8dfe dynamiccertificates: denoise Kubelet logs by skipping removal of non-existent file watchers
  > 65a6ca8 support opaque kinds
  > 586ab58 Merge pull request # 126645 from cici37/cleanupFG
  > de0559e Benchmark storage
  > cbc4886 Fix estimated cost for Kubernetes defined CEL types
  > da8e291 Merge pull request # 126867 from piny940/master
  > e9e2468 Remove FG inspection from VAP plugin
  > 27f5f25 Merge pull request # 126854 from serathius/pagination-tests
  > 2ed104b fix ValidatingAdmissionPolicy's Validate func to return decision with valid Evaluation
  > fac4f5d Remove feature gate ValiatingAdmissionPolicy after stable.
  > a5bbfcd Merge pull request # 126512 from kmala/metrics
  > 132d3e4 Add paging tests
  > 6830df5 Merge pull request # 126305 from richabanker/optimize-tests
  > fcf807e add resource to the transformation metrics
  > 66b4299 Merge pull request # 126774 from aramase/aramase/c/sa_rm_unused_function
  > f434fbf init a common apiserver for TestAuthorizationDecisionCaching testcases
  > 43a5620 cleanup unused fn GetOrCreateServiceAccount in serviceaccount/util
  > 1d26753 split Test_ValidateNamespace_NoParams into successes and failures tests, init a common apiserver for all testcases
  > 5d131b7 Merge pull request # 126523 from enj/enj/i/ssa_authz_create_err
  > 25d7e88 Merge pull request # 126553 from aramase/aramase/c/kep_3331_disallow_k8s_io_prefix
  > cc8ff8f ForbiddenStatusError: make linter happy on error construction
  > 38586e5 Merge pull request # 126685 from enj/enj/i/kms_resouce_logs
  > fed75d5 Disallow k8s.io and kubernetes.io namespaced extra key in structured authn config
  > 757565c SSA: improve create authz error message
  > 11b0e07 Merge pull request # 126698 from enj/enj/i/del_kms_v2_gates
  > cd5bba1 Ensure transformers have access to the resource via request info
  > 272e9eb Remove KMSv2 and KMSv2KDF feature gates
  > b157511 Merge pull request # 126649 from 0x5457/fix-panic
  > 13f78e0 Merge pull request # 126665 from liggitt/version-build-id
  > 27c3ca7 apiserver: declare kubeClient and dynamicClient as interface types to avoid panic
  > be94967 Merge pull request # 126565 from Adarsh-verma-14/remove-duplicate-call
  > 7733123 Restore honoring --version build ID overrides
  > cb239f8 Merge pull request # 126354 from liangyuanpeng/celtest_update
  > 41e1af4 remove duplicate call for ServeMux
  > c84ae4a Merge pull request # 126316 from aramase/aramase/f/kep_3331_tighter_validation
  > 552e7d7 Using NewExpressions for cel lazy test.
  > fb0703a Merge pull request # 126329 from serathius/concurrent-transformation-chan-of-chan
  > febd487 Validate structured authn feature is enabled for discovery url/multiple
  > 3adae5f Make object transformation concurrent to remove watch cache scalability issue for conversion webhook
  > 9aa7a6a Introduce ConcurrentWatchObjectDecode feature gate disabled by default
  > bd44a99 Merge pull request # 126469 from serathius/beta2
  > 1b569bf Merge pull request # 126470 from benluddy/apiservingwithroutine-alpha-disabled
  > c470f38 Move ConsistentListFromCache to Beta default again
  > bebf7ae Merge pull request # 126467 from serathius/fallback
  > 788e7ee Move APIServingWithRoutine to alpha and disabled by default.
  > 6c5ee08 Implement fallback for consistent reads from cache
  > c8097e3 Merge pull request # 124012 from Jefftree/le-controller
bumping github.com/google/gnostic-models 5776925...8182012:
  > 8182012 Merge pull request # 12 from Jefftree/protobuf-bump
  > 1a23962 Merge pull request # 13 from Jefftree/add-protobuf-compilation-script
  > bea6589 recompile protobuf
  > fd6fd48 Merge pull request # 6 from Jefftree/Jefftree-patch-1-2
  > 111f194 Add protobuf compilation script
  > 7a87dbb bump dependencies
  > c7be7c7 Merge pull request # 5 from pkwarren/pkw/add-annotations-proto
  > 9459ad1 Create Makefile
  > f1b8172 Merge pull request # 2 from Jefftree/gh-actions
  > 94610bf Add annotations.proto and generated Go code
  > 2063bfc Merge pull request # 1 from Jefftree/protobuf-deprecate
  > 94e1c83 Add github actions
  > b1903b5 Use google.golang.org/protobuf for the protobuf library
bumping github.com/google/go-containerregistry 1e09daa...c4dd792:
  > c4dd792 bump deps using hack/bump-deps.sh (# 2042)
  > 6bce25e Detect zstd in crane append (# 2023)
  > 06dcd85 mutate: Create a defensive annotations copy (# 2030)
  > a9a53a8 check for 406 status code when handling referrers endpoint response (# 2026)
  > 4630c40 don't pin chainguard-dev/actions  (# 2025)
  > 808e354 bump actions to latest (# 2011)
  > a07d1ca fix: redact.URL uses (*URL).Redacted to omit basic-auth password (# 1947)
  > 00f182b Expose compare package (# 2001)
  > b8e87ed remote/transport: Make bearer transport go-routine-safe (# 1806)
  > c195f15 deps: bump docker dep (# 1991)
  > c3d1dcc Create `remote.Push` (# 1978)
  > d36047a Restore blind-write to remote.Put (# 1970)
  > 9915a85 Referrer API must return correct Content-Type (# 1968)
  > 1b4e407 Add -O shorthand for --omit-digest-tags to crane. (# 1958)
  > 3764db2 Fix windows race condition when writing image with duplicate layers (# 1921)
  > 39d1148 Add Context support to auth methods (# 1949)
  > ff385a9 feat: mutate platform (# 1919)
  > 98dd3e9 Support podman auth file REGISTRY_AUTH_FILE. (# 1914)
  > 051d642 registry: Implement Range requests for blobs (# 1917)
  > 0309184 Add JSON marshalling funcs for Digest. (# 1915)
  > 8b3c303 Bump golang.org/x/ packages (# 1892)
  > afec664 Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain (# 1815)
  > 8dadbe7 Work around docker v25 tarballs (# 1872)
  > a0658aa Always print pushed digest in crane push (# 1860)
  > 55ffb00 fix: goreleaser config (# 1764)
  > 4fdaa32 feat: allow port and disk path to be overriden (# 1848)
  > ceb0580 feat: implement gc command (# 1811)
  > 5a53a12 tag: add command explanation to the long help (# 1843)
  > c722ce9 fix: mimic oci-layout (# 1810)
  > b2485cb Build releases with Go 1.21 (# 1840)
  > dbcd01c Don't wrap DefaultKeychain with refreshes (# 1791)
  > a748190 Set Content-Length for blob uploads (# 1781)
  > 190ad0e Validate index architectures match children (# 1776)
  > a54d642 fix: pin to goreleaser v1.18 to unblock release (# 1763)
  > ea19b57 Return OCI Index content-type for referrers response (# 1762)
  > b850480 Drop localhost to support crane registry serve in a container (# 1746)
  > fe268b7 Don't try cross-origin mounting against dockerhub (# 1743)
  > 2472cbb Let the filesystem handle atomicity (# 1735)
  > db818dc Use RWLock, limit scope of locking, write digest first (# 1734)
  > 44a6e2e Allow concurrent blob Sets, use RWMutex (# 1733)
  > 9010ce1 Correct crane registry help text (# 1732)
  > 03ad2ac add --blobs-to-disk to 'crane registry serve' (# 1731)
  > 4e4b03a Don't load into daemon if the image already exists (# 1724)
  > 6de8d1d Change ErrSchema1 error to dynamic strings. (# 1721)
  > 0a9bb12 crane: Respect cmd.OutOrStdout (# 1728)
  > 145eebe Add missing name option in crane index commands (# 1723)
  > 037ab31 Surface better error messages in crane index (# 1722)
  > 03b8657 fix: add bounds checking to addendum layer mutations to prevent panic (# 1715)
  > c3f8a49 Pass scopes through crane auth token (# 1713)
  > 53fbcf9 Bump codecov/codecov-action from 3.1.3 to 3.1.4 (# 1710)
  > 1d535e2 Add crane auth token (# 1709)
  > 5fe7f2e Limit size of manifest (# 1711)
  > e61c519 retry HTTP 522 errors by default (# 1707)
  > 2015ceb fixed a goroutine leak (# 1705)
  > 0ec36ad Allow crane to export schema 1 images (# 1704)
  > b7ad3f1 bump deps using ./hack/bump-deps.sh (# 1702)
  > dbecb1d Do not reuse pushers for pullers (# 1701)
  > a927d7c Make 403 non-fatal for manifest existence checks (# 1691)
  > 0b12f56 Add ppc64le to all binaries (# 1688)
  > 69d1a19 Add `mutate` `--ports` option to set the exposed ports (# 1677)
  > 691004b bump deps using ./hack/bump-deps.sh (# 1685)
  > 370e8a5 Fix a few lint issues (# 1684)
  > 3120ba5 Keep order of env in crane mutate (# 1683)
  > afd15f1 Add --all-tags flag to crane cp (# 1682)
  > 5438948 add registry.Repo("foo") (# 1671)
  > 43710a9 Retry without mount if auth fails (# 1681)
  > 3228a60 Add ppc64le to .goreleaser.yml (# 1680)
  > d64f9e0 remove time from random.Image history (# 1678)
  > 3706061 allow pkg/v1/random to accept a RNG source (# 1675)
  > b7c6e9d Fall back to puller if reusing pusher fails (# 1676)
  > 005bb71 Add remote.Reuse for Pusher/Puller (# 1672)
  > 58bd35b Bump codecov/codecov-action from 3.1.2 to 3.1.3 (# 1668)
  > ad695c0 Replace deprecated command with environment file (# 1667)
  > 07c767c Add remote.Puller (# 1644)
  > 9f68710 feat(daemon): generate config file from Docker Engine API (# 1130)
  > d1c4e9f verify provenance (# 1611)
  > df518f9 add crane auth logout (# 1589)
  > 52d59d1 feat(remote): make retryStatusCodes configurable (# 1635)
  > df72a9a crane push: print pushed ref@digest to stdout (# 1663)
  > 27a6ad6 Revert "authn: Add NewConfigKeychain to load a config from explicit path (# 1603)" (# 1664)
  > 217318c deprecate estargz (# 1660)
  > 1cb7e13 authn: Add NewConfigKeychain to load a config from explicit path (# 1603)
  > 348cd86 bump deps using ./hack/bump-deps.sh (# 1659)
  > e055961 Bump peter-evans/create-pull-request from 4 to 5 (# 1642)
  > 6f96bba gcrane: Use page size of 10,000 for googley things (# 1645)
  > 375fb61 Bump slsa-framework/slsa-verifier from 2.1.0 to 2.2.0 (# 1649)
  > 07eb440 Bump codecov/codecov-action from 3.1.1 to 3.1.2 (# 1650)
  > 9aa45a1 Change return type of remote.Referrers (# 1652)
  > bc990d6 Fix fetching referrers error handling (# 1648)
  > ed5c185 Retry net.ErrClosed (# 1637)
  > 2435320 Revert "Cleanup: Switch the debug image to `cgr.dev/chainguard/busybox` (# 1638)" (# 1641)
  > 2ccd41c Cleanup: Switch the debug image to `cgr.dev/chainguard/busybox` (# 1638)
  > 6743ec9 Implement remote.Pusher (# 1633)
  > 0962e29 Allow remote config layers to be lazy fetched (# 1634)
  > 4a79e94 Fix race in stream (# 1632)
  > 65e78dc Add partial.Manifests for lazy index access (# 1631)
  > 0577676 crane: ignore buildx attestations in flatten (# 1630)
  > 93be9c4 Don't export whiteouts for single layers (# 1629)
  > d958444 Add remote.Descriptor.Schema1() (# 1626)
  > aee00b1 Fix race in mutate (# 1627)
  > 6ac92e8 Refactor fetcher, writer, and progress (# 1625)
  > 249d7e1 Refresh authn.DefaultKeychain creds every 5 min (# 1624)
  > b8d1c0a Bump slsa-framework/slsa-verifier from 2.0.1 to 2.1.0 (# 1621)
  > ace7be7 update GCR quotas (# 1619)
  > e2620e5 Actually retry retryable status codes (# 1618)
  > 21ac1b2 Adding `mutate` `--workdir` option to set the working directory (# 1615)
  > 54e3f49 Bump actions/stale from 7 to 8 (# 1616)
  > a34235c Support `Warning` header aggregation and reporting in `crane` (# 1604)
  > 46488f7 retry HTTP 499 errors by default (# 1612)
  > 0f2db49 release: use ko 0.13.0 to build images (# 1607)
  > 53189d3 Bump actions/setup-go from 3 to 4 (# 1602)
  > 01bbd53 Update release.yml (# 1601)
  > 4b081f8 Avoid v1.Manifest in crane edit config (# 1583)
  > 1cfe1fc Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (# 1593)
  > e94d408 bump deps using ./hack/bump-deps.sh (# 1592)
  > ff810c1 crane: add serve subcommand (# 1586)
  > 57f010d replace manual slsa-verifier installation with action (# 1585)
  > 6770304 Update descriptor "data" field (when valid) during "crane edit config" (# 1584)
  > 1b8dc2b Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (# 1580)
  > 8ea5e0e crane: support --omit-digest-tags in crane ls (# 1528)
  > 4e95ae2 crane: add --flatten for index append (# 1566)
  > 4a0e0af docs: Update crane installation and verification instructions (# 1567)
  > 3624968 tarball: pass imageToTags (# 1563)
  > 9f42e02 Set mediaType for empty.ImageIndex in RawManifest (# 1562)
  > 2ceebaa Implement crane index subcommand (# 1561)
  > 9cd098e skip tls verification if default transport is used with insecure option (# 1559)
  > eb7d746 authn: also read mount secrets (# 1560)
  > 62f183e Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (# 1556)
  > b3c23b4 Support for OCI 1.1+ referrers via API (# 1546)
  > de35f0f Allow setting Content-Type in crane edit manifest (# 1551)
  > e04520b fix: Fix the crane release url and add more steps (# 1532)
  > 824efc7 fix(mutate): also set timestamps only present in some formats (# 1550)
  > 061ee6b Support for OCI 1.1+ referrers via fallback tag (# 1543)
  > da1008f Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (# 1548)
  > 86be45f Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (# 1547)
  > 9306eba Allow crane edit to generate non-image artifacts (# 1545)
  > 759b19f Support artifactType, for images whose config.mediaType is not a config (# 1541)
  > 11843ba Enforce proper sha256 usage (# 1544)
  > 76bac93 Update release.yml (# 1540)
  > d872232 hash: use generic instantiation (# 1538)
bumping google.golang.org/genproto/googleapis/api 796eee8...e9438ea:
  > e9438ea chore(all): auto-regenerate .pb.go files (# 1187)
  > 7023788 chore(all): auto-regenerate .pb.go files (# 1186)
  > 29210b9 chore(all): update all (# 1185)
  > 65684f5 chore(all): auto-regenerate .pb.go files (# 1184)
  > 138b5a5 chore(all): update all (# 1183)
  > 1a7da9e chore(all): update all (# 1182)
  > 5f5ef82 chore(all): update all (# 1181)
  > 6982302 chore: bump to min Go to 1.22 (# 1180)
  > 26aa7a2 chore(all): update all (# 1178)
  > 3abc09e chore(all): update all (# 1177)
  > 6b3ec00 fix: update golang.org/x/net to v0.33.0 (# 1176)
  > bd15449 chore(all): auto-regenerate .pb.go files (# 1175)
  > 9240e9c chore(all): update all (# 1174)
  > e6fa225 chore(all): update all (# 1173)
  > a4fef06 chore(all): auto-regenerate .pb.go files (# 1172)
  > 19429a9 chore(all): update all (# 1171)
  > e639e21 chore(all): update all (# 1170)
  > 65e8d21 Fix: GitHub workflow script injection (# 1169)
  > e0fbfb7 chore(all): update all (# 1168)
  > dd2ea8e chore(all): update all (# 1166)
  > 324edc3 chore(all): update all (# 1165)
bumping k8s.io/kube-openapi 9e1beec...2c72e55:
  > 2c72e55 Merge pull request # 518 from dims/copy-minimum-we-need-from-asaskevich/govalidator-and-drop-the-dependency
  > 5ad02ce Merge pull request # 519 from jpbetz/ignore-unrecognized
  > f1ff53c Move to internal/third_party directory
  > 9959940 Merge pull request # 517 from huww98/update-protobuf
  > 04b9783 Ignore unknown k8s:validation comments tags
  > b9bcd9e Strip/Freeze code from asaskevich/govalidator and drop dependency
  > 32ad38e Merge pull request # 516 from jpbetz/bump-to-smd-441
  > 36bdabb remove old github.com/golang/protobuf
  > 67ed584 Merge pull request # 511 from aojea/yaml
  > cfcbca7 Bump sigs.k8s.io/structured-merge-diff/v4 to v4.4.2
  > 6a51d42 use our own fork of go-yaml
bumping knative.dev/networking 67d1c27...2cde432:
  > 2cde432 upgrade to latest dependencies (# 1046)
  > e6fc9bb upgrade to latest dependencies (# 1045)
  > a4342aa fix codegen by using newer scripts (# 1042)
  > 5afdd71 upgrade to latest dependencies (# 1044)
  > 4376124 Update community files (# 1043)
  > b235386 Update community files (# 1041)
bumping knative.dev/client-pkg 2a69ed7...754bcd7:
  > 754bcd7 Update community files (# 208)
  > 98dd4c0 Update community files (# 206)
  > b25413c Update community files (# 204)
bumping knative.dev/hack c142b48...c577ed9:
  > c577ed9 Update community files (# 421)
  > 8f599b7 Skip whitespace changes in codegen (# 420)
  > 742e1e5 Deprecate knative.dev/hack/schema (# 418)
  > 306ce74 Update community files (# 414)
  > ce4c934 Bump default GKE version to 1.31 (# 413)
  > 5f7f0f5 Update community files (# 412)
  > b38a2ca Update community files (# 411)
bumping knative.dev/eventing 9cec50f...5f466ad:
  > 5f466ad Compare the entire PodTemplateSpec, instead of just its PodSpec (# 8558)
  > d7a0359 [main] Upgrade to latest dependencies (# 8559)
  > f14c335 [main] Upgrade to latest dependencies (# 8556)
  > 6365d89 Migrate golanglint-ci config to v2 (# 8557)
  > bbc9696 If no subscriber uri is present we return 404, instead of 400 (# 8551)
  > facf1df [Automated] Update eventing-eventing-integrations nightly (# 8550)
  > 9449b64 [Automated] Update eventing-eventing-integrations nightly (# 8546)
  > dd04655 [main] Update community files (# 8545)
  > e531d7d Adding little func that generated the invalid PEM data (# 8543)
  > 8027fd3 Remove unnecessary cert-manager generated code (# 8539)
  > a5858a5 Fix EventTransform with TLS Sink test (# 8537)
  > 897d1d1 [main] Upgrade to latest dependencies (# 8533)
  > 609a064 Prevent knative-nightly integrations image references from being released (# 8521)
  > 8ac630d Use more readable ENV_VAR names for Camel (# 8531)
  > 5daaa6c Allow setting finalizers for EventTransform reconciler (# 8534)
  > 433aa64 [Automated] Update eventing-eventing-integrations nightly (# 8530)
  > 4080fcf Try to bump to latest of CE Conformance (# 8532)
  > c022af7 Fixing the way we render custom camel tags on go structs (# 8528)
  > da4377a Propagate Cert-Manager Certificate status to the one from the IntegrationSink (# 8527)
  > 1fd0d89 [main] Upgrade to latest dependencies (# 8523)
  > d6cc879 Skip EventTransform TLS tests when Istio is enabled (# 8525)
  > 4fd274a Bump cert manager and use their clientset (# 8520)
  > 6ffe7c1 Improve CM Cert reconcile and deletion if feature is turned off (# 8519)
  > ebd149e Add dynamic cert-manager certificates informer (# 8517)
  > 7be5c19 Event Transform JSONata TLS (# 8515)
  > ec8a208 [Automated] Update eventing-eventing-integrations nightly (# 8516)
  > eb3dd80 Enable Cert Manager (# 8509)
  > 615a071 Allow storage-version-migration job to successfully run when optional CRDs are not installed (inmemorychannels, etc) (# 8510)
  > fe83e25 EventTransform: add reconciler unit tests (# 8513)
  > 1e889be SinkBinding: Set specific conditions for reconciler steps (# 8508)
  > 6073039 [main] Upgrade to latest dependencies (# 8512)
  > 3153b47 EventTransform: Inject tracing configurations (# 8479)
  > db0cf43 Update to the correct file (# 8507)
  > adaafa2 [Automated] Update eventing-eventing-integrations nightly (# 8506)
  > 714deeb Update k8s version in e2e tests (# 8503)
  > 54a2402 Fix golangci exclude config (# 8502)
  > 80dd84e Guard reserved access with lock and create vpods in tests (# 8457)
  > 5bcee30 Inject integration images from ConfigMap (# 8500)
  > ae049c8 Jsonata Event transform e2e tests (# 8499)
  > c828898 Generic code for Certificates (# 8489)
  > 351898d fix: verify trigger is not ready before pingsource dependency exists (# 8494)
  > c651616 Add initial iteration of eventing-integration resources (# 8493)
  > 51637df IntegrationSink prefactors (# 8486)
  > c429fc5 Remove unused code (# 8485)
  > 732ec62 Partial implementation of certmanager for integration sink (# 8481)
  > 5998cfe [main] Update community files (# 8480)
  > 9a7c6d5 [main] Upgrade to latest dependencies (# 8468)
  > cee6e8c EventTransform: Support transforming response from Sink (# 8469)
  > 75195a5 EventTransform: Reconcile address and service (# 8458)
  > d9498eb Scheduler: log expected vreplicas by vpod (# 8449)
  > 36d681e chore: Adding missing sinks and sources to schema file (# 8460)
  > 779992f Add EventTransform Jsonata reconciler and CRD (# 8456)
  > 8f990b9 [main] Upgrade to latest dependencies (# 8455)
  > a228d2b Scheduler: Resync reserved periodically to keep state consistent (# 8451)
  > 2c1c7b8 Add EventTransform API types (# 8447)
  > 162575c Not just render oidc env-vars when cfg is on, we need also a present audience to ensure the camel containers work correct (# 8448)
  > 4a6e7d2 [main] Upgrade to latest dependencies (# 8444)
  > 5fb693f [main] Upgrade to latest dependencies (# 8431)
  > 73357a6 Add `sinks.knative.dev` to namespaced ClusterRole (# 8432)
  > d243b91 JobSink with Istio config for Job spec (# 8430)
  > c636346 [main] Update community files (# 8429)
  > cdc6144 Rename `apiextentions` to `apiextensions` (# 8428)
  > 1b3287e [main] Update community files (# 8424)
  > 28c489e Reduce mt-broker-controller memory usage with namespaced endpoint informer (# 8418)
bumping k8s.io/apimachinery a8f449e...59e9003:
  > 59e9003 Merge remote-tracking branch 'origin/master' into release-1.32
  > 639247c Drop use of winreadlinkvolume godebug option
  > 220d7c3 Merge remote-tracking branch 'origin/master' into release-1.32
  > c199d3b Revert to go1.22 windows filesystem stdlib behavior
  > 16af2ff implement unsafe deletion, and wire it
  > 6ff8305 api: run codegen
  > ca9b8b2 api: add a new field to meta/v1 DeleteOptions
  > d941d9f Merge pull request # 128503 from benluddy/cbor-codecs-featuregate
  > 3b4250f Wire serving codecs to CBOR feature gate.
  > daaad09 Merge pull request # 128501 from benluddy/watch-cbor-seq
  > d70754f Merge pull request # 128380 from pohly/log-TODO-logcheck
  > 8019856 Use application/cbor-seq media type in streaming CBOR responses.
  > a447138 Merge pull request # 128553 from thockin/master
  > 230b216 apiserver: avoid TODO in public docs
  > b5e8106 Merge pull request # 128580 from jpbetz/bump-kube-openapi
  > 6a84120 Call-site comments: the "" arg to TooLong is unused
  > fab6771 Merge pull request # 128462 from benluddy/cbor-direct-custom-marshalers
  > dbd5f43 hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d763339b258e
  > 44ca070 Clarify that value arg to field.TooLong is unused
  > 9500acc Merge pull request # 128507 from dims/use-k8s.io/utils/lru-instead-of-github.com/golang/groupcache/lru
  > d695394 Reject custom marshalers from direct CBOR Marshal and Unmarshal.
  > 51cdbeb Kill TooLongMaxLength() in favor of TooLong()
  > cc3132f Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
  > f6d2366 Merge pull request # 128481 from carlory/dependencies-ginkgo-gomega
  > 27a0d27 dependencies: ginkgo v2.21.0, gomega v1.35.1
  > cbe039c Merge pull request # 128416 from jpbetz/reset-filter
  > 53a0379 Add ResetFieldsFilterStrategy
  > b7e0b16 hack/pin-dependency.sh sigs.k8s.io/structured-merge-diff/v4 v4.4.2
  > a25029a Merge pull request # 128456 from benluddy/nondeterministic-response-encoding
  > c56b207 Merge pull request # 128273 from benluddy/cbor-apply
  > 42acd35 Allow nondeterministic object encoding in HTTP response bodies.
  > 769bb80 Support application/apply-patch+cbor in patch requests.
  > 124c262 Merge pull request # 128243 from benluddy/cbor-dynamic-integration
  > 74ceb68 Export meta internal version scheme for testing.
  > 840a63c Add CBOR serializer option to disable JSON transcoding of raw types.
  > 02c4999 Add WithSerializer option to add serializers to CodecFactory.
  > 009e863 Use runtime.SerializerInfo in place of internal "serializerType".
  > cfee475 Merge pull request # 128165 from liggitt/prune-self-require
  > ba08122 Drop self-referencing replace directives
  > 51544a5 Merge pull request # 127862 from dinhxuanvu/cbor-fuzz
  > 8a237ee Merge pull request # 128099 from benluddy/nested-number-as-float64-portability
  > d143167 Add fuzz test for roundtrip unstructured objects to JSON/CBOR
  > 0612f08 Make NestedNumberAsFloat64 accuracy test architecture-neutral.
  > 2b29434 Merge pull request # 125570 from sanchezl/test-additional-types
  > ee6d966 Merge pull request # 127998 from skitt/golang-x-oct-2024
  > 0600781 cover additional types in unstructured roundtrip test
  > 2561a81 Merge pull request # 127985 from dims/update-moby-runc-dependencies-oct-10
  > 68b7185 October 2024 golang.org/x bump
  > ebca147 Update moby/runc dependencies
  > ea28d54 Merge pull request # 127942 from liggitt/json123
  > 9f62123 Update sigs.k8s.io/json to go1.23
  > acfda13 Merge pull request # 127838 from benluddy/unstructured-nested-number-as-float64
  > c463db1 Merge pull request # 127822 from benluddy/json-serializer-roundtrip-float64-no-fraction
  > f0c9bac Add NestedNumberAsFloat64 unstructured field accessor.
  > 999ccb8 Test concrete type changes in unstructured float64 JSON roundtrips.
  > 0db5dbf Merge pull request # 127691 from mmorel-35/testifylint/[email protected]/apimachinery
  > 6240126 fix: enable expected-actual rule from testifylint in module `k8s.io/apimachinery`
  > dc03077 Merge pull request # 125678 from benluddy/cbor-nondeterministic-encode
  > 7f7bf11 Merge pull request # 127319 from p0lyn0mial/upstream-define-initial-events-list-blueprint
  > 2a1df23 Support nondeterministic encode for the CBOR serializer.
  > c98a9e2 Merge pull request # 126760 from ncdc/ncdc/emeritus
  > 79b66fa apimachinery/meta/types.go: define InitialEventsListBlueprintAnnotationKey const
  > f7615f3 Merge pull request # 127366 from thockin/pr-119910-plus-thockin
  > d9292df Use emeritus_*
  > c7c91ed Merge pull request # 127435 from sttts/sttts-getmanagedfields-nocopy
  > d1fb2f4 Make accurate Quantity->float64 be a new method
  > eec4293 Move ncdc to emeritus
  > e60d3a5 unstructured: avoid deepcopying managedFields
  > 6db6128 Improve precision of Quantity.AsApproximateFloat64
  > 0fc0110 Merge pull request # 125186 from liyuerich/newserializer
  > b78556f KEP-4427 : AllowRelaxedDNSSearchValidation (# 127167)
  > 7312749 drop deprecated json/yaml newSerializers, use json.NewSerializerWithOptions instead
  > 4e174c5 Merge pull request # 127271 from liggitt/go1.23
  > 8e938ee Pin godebug default to go1.23
  > f9de914 Update go.mod to go 1.23
  > 2465dc5 Merge pull request # 126787 from Jefftree/update-kube-openapi
  > fbd2664 re-vendor k8s.io/kube-openapi
  > a8a2284 Merge pull request # 126715 from tklauser/use-go-stdlib-slices
  > 7e3bacd Use Go standard library slices package instead of k8s.io/utils/strings/slices
  > 95b7802 Merge pull request # 126231 from seans3/websocket-https-proxy-fix
bump…

Author: knative-automation

go.mod

@@ -1,20 +1,20 @@
 module knative.dev/kn-plugin-source-kafka
 
-go 1.22.7
+go 1.23.0
 
 require (
 	github.com/hashicorp/golang-lru v1.0.2
 	github.com/hashicorp/hcl v1.0.1-vault-5
 	github.com/spf13/cobra v1.8.1
-	github.com/spf13/pflag v1.0.5
+	github.com/spf13/pflag v1.0.6
 	gotest.tools/v3 v3.3.0
-	k8s.io/apimachinery v0.31.4
-	k8s.io/client-go v0.31.4
-	knative.dev/client-pkg v0.0.0-20250123181933-2a69ed741513
-	knative.dev/client/pkg v0.0.0-20250122145611-f73472454667
-	knative.dev/eventing-kafka-broker v0.44.0
-	knative.dev/hack v0.0.0-20250116150306-c142b4835bc5
-	knative.dev/pkg v0.0.0-20250117084104-c43477f0052b
+	k8s.io/apimachinery v0.32.2
+	k8s.io/client-go v0.32.2
+	knative.dev/client-pkg v0.0.0-20250415145413-754bcd7411db
+	knative.dev/client/pkg v0.0.0-20250331014441-80472e33ad21
+	knative.dev/eventing-kafka-broker v0.43.1-0.20250416131413-4b675b7a614b
+	knative.dev/hack v0.0.0-20250331013814-c577ed9f7775
+	knative.dev/pkg v0.0.0-20250415155312-ed3e2158b883
 )
 
 require (
@@ -25,14 +25,15 @@ require (
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blendle/zapdriver v1.3.1 // indirect
 	github.com/census-instrumentation/opencensus-proto v0.4.1 // indirect
+	github.com/cert-manager/cert-manager v1.16.3 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/cloudevents/sdk-go/sql/v2 v2.15.2 // indirect
 	github.com/cloudevents/sdk-go/v2 v2.15.2 // indirect
-	github.com/cpuguy83/go-md2man/v2 v2.0.4 // indirect
+	github.com/cpuguy83/go-md2man/v2 v2.0.6 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
 	github.com/evanphx/json-patch v5.9.0+incompatible // indirect
-	github.com/evanphx/json-patch/v5 v5.9.0 // indirect
+	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/fsnotify/fsnotify v1.7.0 // indirect
 	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
 	github.com/go-errors/errors v1.4.2 // indirect
@@ -46,23 +47,23 @@ require (
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/btree v1.1.2 // indirect
-	github.com/google/gnostic-models v0.6.8 // indirect
-	github.com/google/go-cmp v0.6.0 // indirect
-	github.com/google/go-containerregistry v0.13.0 // indirect
+	github.com/google/gnostic-models v0.6.9 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/google/go-containerregistry v0.20.3 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.21.0 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 // indirect
 	github.com/imdario/mergo v0.3.16 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/kelseyhightower/envconfig v1.4.0 // indirect
-	github.com/klauspost/compress v1.17.9 // indirect
+	github.com/klauspost/compress v1.17.11 // indirect
 	github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de // indirect
 	github.com/magiconair/properties v1.8.7 // indirect
-	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
 	github.com/mitchellh/mapstructure v1.5.0 // indirect
 	github.com/moby/term v0.5.0 // indirect
@@ -75,9 +76,9 @@ require (
 	github.com/pelletier/go-toml/v2 v2.0.9 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/prometheus/client_golang v1.20.4 // indirect
+	github.com/prometheus/client_golang v1.20.5 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
-	github.com/prometheus/common v0.55.0 // indirect
+	github.com/prometheus/common v0.62.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
 	github.com/prometheus/statsd_exporter v0.22.8 // indirect
 	github.com/rickb777/date v1.20.0 // indirect
@@ -95,37 +96,38 @@ require (
 	go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/net v0.34.0 // indirect
-	golang.org/x/oauth2 v0.23.0 // indirect
-	golang.org/x/sync v0.10.0 // indirect
-	golang.org/x/sys v0.29.0 // indirect
-	golang.org/x/term v0.28.0 // indirect
-	golang.org/x/text v0.21.0 // indirect
-	golang.org/x/time v0.6.0 // indirect
-	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/oauth2 v0.26.0 // indirect
+	golang.org/x/sync v0.13.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/term v0.31.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
+	golang.org/x/time v0.10.0 // indirect
+	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/api v0.198.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20241015192408-796eee8c2d53 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect
-	google.golang.org/grpc v1.69.4 // indirect
-	google.golang.org/protobuf v1.36.3 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20250207221924-e9438ea467c6 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250207221924-e9438ea467c6 // indirect
+	google.golang.org/grpc v1.71.1 // indirect
+	google.golang.org/protobuf v1.36.6 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/api v0.31.4 // indirect
-	k8s.io/apiextensions-apiserver v0.31.4 // indirect
-	k8s.io/apiserver v0.31.4 // indirect
+	k8s.io/api v0.32.2 // indirect
+	k8s.io/apiextensions-apiserver v0.32.1 // indirect
+	k8s.io/apiserver v0.32.1 // indirect
 	k8s.io/cli-runtime v0.29.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20240903163716-9e1beecbcb38 // indirect
-	k8s.io/utils v0.0.0-20240921022957-49e7df575cb6 // indirect
-	knative.dev/eventing v0.44.0 // indirect
-	knative.dev/networking v0.0.0-20250117155906-67d1c274ba6a // indirect
-	knative.dev/serving v0.44.0 // indirect
-	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
+	k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7 // indirect
+	k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
+	knative.dev/eventing v0.44.1-0.20250414180812-5f466ad3711a // indirect
+	knative.dev/networking v0.0.0-20250217154350-2cde4327c6c8 // indirect
+	knative.dev/serving v0.44.1-0.20250218114651-582f4539db64 // indirect
+	sigs.k8s.io/gateway-api v1.1.0 // indirect
+	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
 	sigs.k8s.io/kustomize/api v0.13.5-0.20230601165947-6ce0bf390ce3 // indirect
 	sigs.k8s.io/kustomize/kyaml v0.14.3-0.20230601165947-6ce0bf390ce3 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.5.0 // indirect
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )