diff --git a/go.mod b/go.mod
index eb497c4996..eed11975ab 100644
--- a/go.mod
+++ b/go.mod
@@ -23,9 +23,9 @@ require (
 	knative.dev/caching v0.0.0-20251021091242-4af6142f26fc
 	knative.dev/eventing v0.46.1-0.20251021203748-4a4a50b0ad9d
 	knative.dev/hack v0.0.0-20251021013703-4fae78067103
-	knative.dev/pkg v0.0.0-20251021084441-487f9df8d315
+	knative.dev/pkg v0.0.0-20251022152246-7bf6febca0b3
 	knative.dev/reconciler-test v0.0.0-20251021102741-1688eb0253ee
-	knative.dev/serving v0.46.1-0.20251022114844-083ce783f9ca
+	knative.dev/serving v0.46.1-0.20251022134647-1d77a471057d
 	sigs.k8s.io/yaml v1.6.0
 )
 
diff --git a/go.sum b/go.sum
index 5ae54540ca..a926abee0c 100644
--- a/go.sum
+++ b/go.sum
@@ -1710,12 +1710,12 @@ knative.dev/hack v0.0.0-20251021013703-4fae78067103 h1:j96YY5CLCTytWZsGVzixVvNas
 knative.dev/hack v0.0.0-20251021013703-4fae78067103/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
 knative.dev/networking v0.0.0-20251015015434-efbbe6c5acf2 h1:j4JzrGGsbnZE7GSwPjNiQTHAhL1TGc55Gsmm6Cm5+Qc=
 knative.dev/networking v0.0.0-20251015015434-efbbe6c5acf2/go.mod h1:Tr5jnlWbjxWIEl2kw31OdC0ISwX2gAs1guepCHDKZ0U=
-knative.dev/pkg v0.0.0-20251021084441-487f9df8d315 h1:VTDdzb0kT5e/AuTu8AYjN+p3xBHXVmgAy1LT/gjYz40=
-knative.dev/pkg v0.0.0-20251021084441-487f9df8d315/go.mod h1:8L1vgh3WoZ4OH9gspPSt3QFcMJsrOUBwOs0FuM5Jne8=
+knative.dev/pkg v0.0.0-20251022152246-7bf6febca0b3 h1:472SARbX5rEir4g3QC/UsKnHNXqdRNbWOe2a4DcJRwk=
+knative.dev/pkg v0.0.0-20251022152246-7bf6febca0b3/go.mod h1:8L1vgh3WoZ4OH9gspPSt3QFcMJsrOUBwOs0FuM5Jne8=
 knative.dev/reconciler-test v0.0.0-20251021102741-1688eb0253ee h1:4DoVKbGJ6Qc0TRZSl5P8eAqH+hxQdAX6MrHCaSHsIQ0=
 knative.dev/reconciler-test v0.0.0-20251021102741-1688eb0253ee/go.mod h1:rRRFIBC58k412rLRYhzOZrxbCU99xUSK9nO82iHuB/Q=
-knative.dev/serving v0.46.1-0.20251022114844-083ce783f9ca h1:NkVfn9e0RK8v7MKYNpVeVCjryU+Hk2FO3IlWXtZdvJU=
-knative.dev/serving v0.46.1-0.20251022114844-083ce783f9ca/go.mod h1:viZqMepeW6UNc/KQvD3iC/lv7fNXjhgqMPMq/9yqyGI=
+knative.dev/serving v0.46.1-0.20251022134647-1d77a471057d h1:iGY1D6iiRP6vD49xgYul9MsXdVuE6Za0K4yRdrj8hjs=
+knative.dev/serving v0.46.1-0.20251022134647-1d77a471057d/go.mod h1:viZqMepeW6UNc/KQvD3iC/lv7fNXjhgqMPMq/9yqyGI=
 nhooyr.io/websocket v1.8.6/go.mod h1:B70DZP8IakI65RVQ51MsWP/8jndNma26DVA/nFSCgW0=
 pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw=
 pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04=
diff --git a/vendor/knative.dev/pkg/controller/queue_metrics.go b/vendor/knative.dev/pkg/controller/queue_metrics.go
index 2e61e330ea..462a0b91ca 100644
--- a/vendor/knative.dev/pkg/controller/queue_metrics.go
+++ b/vendor/knative.dev/pkg/controller/queue_metrics.go
@@ -121,6 +121,10 @@ func (m *queueMetrics) updateUnfinishedWork() {
 	// doesn't seem to have non-hacky ways to reset the summary metrics.
 	var total float64
 	var oldest float64
+
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
 	for _, t := range m.processingStartTimes {
 		age := m.sinceInSeconds(t)
 		total += age
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 2715c06212..a17d38938d 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -1598,7 +1598,7 @@ knative.dev/networking/pkg/http/proxy
 knative.dev/networking/pkg/http/stats
 knative.dev/networking/pkg/ingress
 knative.dev/networking/pkg/k8s
-# knative.dev/pkg v0.0.0-20251021084441-487f9df8d315
+# knative.dev/pkg v0.0.0-20251022152246-7bf6febca0b3
 ## explicit; go 1.24.0
 knative.dev/pkg/apiextensions/storageversion
 knative.dev/pkg/apiextensions/storageversion/cmd/migrate
@@ -1718,7 +1718,7 @@ knative.dev/reconciler-test/pkg/resources/service
 knative.dev/reconciler-test/pkg/resources/serviceaccount
 knative.dev/reconciler-test/pkg/state
 knative.dev/reconciler-test/resources/certificate
-# knative.dev/serving v0.46.1-0.20251022114844-083ce783f9ca
+# knative.dev/serving v0.46.1-0.20251022134647-1d77a471057d
 ## explicit; go 1.24.0
 knative.dev/serving/pkg/apis/autoscaling
 knative.dev/serving/pkg/apis/autoscaling/v1alpha1