upgrade to latest dependencies

bumping golang.org/x/sys 9e7e939...b6b8557:
  > b6b8557 unix/linux: unify ppc64x syscall wrappers
  > aab6988 unix: add PrctlArg5Ptr
  > cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
  > 782b836 unix/linux: don't warn about closed stderr from child process
  > 61592fb unix: return syscall error in *listxattrNS on BSD
  > c136fda unix/linux/Dockerfile: update to Go 1.26.8
  > f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
  > 67f850b unix: update linux to v7.2
  > eb1f659 unix: add O_EXEC and O_SEARCH on darwin
  > 51bc731 unix: add Mmsghdr for linux
  > c461816 unix: add missing pwritev test case on darwin/arm64
  > 01b9119 cpu: add amd64 v2/v3/v4 feature bits
  > f08cf40 unix: update glibc to 2.44
  > 9343db9 unix: provide linux/sparc64 assembly for syscalls
  > 0b9b89e unix: keep generated types compilable with current cgo
  > 6bf2375 unix: add listns syscall introduced in Linux 6.19
  > 814b087 darwin: expose setpriority PRIO_DARWIN_* constants
  > 4e88cef unix: align the getdents buffer
  > d2b1c5f unix: use the stat64 family and fix Stat_t on linux/sparc64
  > 50dddc2 unix: extend z/OS support
  > 5a37d06 windows: drop arm
  > 613e257 cpu: add riscv64 hwprobe drift test
  > 6f7b10f unix: add MLOCK_ONFAULT constant
  > 663e7c8 cpu: add basic support for GOARCH=sparc64
  > de5f12f cpu: add ppc64le POWER10 detection
  > 80e8acf unix: run go fix
  > 1e3c182 unix: add IPMI interface
  > d429e20 unix: stop generating sparc termbits from the generic header
  > bd3bddf unix: add missing HWTSTAMP_* constants
  > e812f53 windows: add SO_SNDTIMEO constant for socket options
  > f6989c5 unix: align Ifreq so its union accessors cannot fault
  > e8c1c32 all: upgrade go directive to at least 1.26.0 [generated]
  > effdf5d windows: pass rune to %q formatting verb
  > 40db382 unix: add IoctlPidfdInfo
  > 58ae2c7 unix: add pidfd constants and type
  > 48021ce unix/linux/mkall: remove race on stderr buffer
  > 5d66879 internal/cpu: detect RISC-V VLENB when the vector extension is available
  > 8042137 cpu: disable AVX+ on netbsd/amd64
bumping golang.org/x/tools 18332fe...16517d9:
  > 16517d9 go.mod: update golang.org/x dependencies
  > a39b773 gopls/internal/cache: fix shadowing bug
  > 2faede3 gopls/internal/test/marker: reorganize undeclared test files
  > dbca0bb go/ssa: support pointer-typed composite literals in all contexts
  > ec72d2b gopls/internal/cache: pass overlays to go mod commands
  > 2c54968 gopls/internal/golang: MoveDeclaration - fix imports for decls in multiple files
  > 1e27b6e internal/cursorutil: promote from gopls, plus other cleanups
  > 2babe1e gopls/internal/lsprpc: adjust dial retry logic
  > a3af45f internal/refactor/inline: reduce void calls in tail position
  > ac4a446 gopls/internal/filewatcher: disable TestStress/fsnotify on 386
  > 9860b2f gopls/internal/cmd: separate out client and server
  > e056796 go/gcexportdata: remove bundle functionality
  > 1332450 internal/gocommand: kill process group on cancel
  > 8b32320 internal/refactor/inline: use refactor.DeleteSpec for imports
  > 94dda69 internal/refactor/inline: use Cursors
  > de121ee go/analysis/passes/modernize: bloop: delete whole line of removed timer calls
  > 31c5897 gopls/internal/test/integration: faster execution time
  > dab62db gopls/internal/cmd: identify gopls cli in LSP initialize
  > abf1056 gopls/internal/cmd: Add inspect subcommand
  > dbd94db internal/refactor: ignore //line directives in Delete{Decl,Stmt}
  > 1e4b371 gopls/internal/golang: apply doc link boundary rule in comments
  > 9388725 gopls/internal/cmd: start a daemon with -remote=auto
  > fec04d4 go/analysis/passes/modernize: stringscut - delete type of "var i int"
  > 6b6190b internal/refactor/inline: use short binding decls when types are redundant
  > dcf3422 go/analysis/passes/modernize: slicesbackward - skip slice expressions with side effects
  > 89e1a16 go/analysis/passes/modernize: stditerators - skip loops that ignore x.At(i)
  > 3e15c99 gopls/doc: escape analyzer titles in Markdown output
  > 038c3ee gopls/internal: use ImplicitFieldSelections in more places
  > 677a7a8 internal/modindex: fix TestIncrementalNope flakiness
  > 53e9e20 gopls/internal/golang: quick fixes for go1.28 string(int) error
  > debe2f2 go/analysis/passes/stringintconv: make first fix behavior-preserving
  > d9d97d6 gopls/internal/golang: use decl over assignment for undeclared var
  > 5968545 go/analysis/passes/modernize: stringscut - preserve non-ASCII IndexByte
  > 3f3efb7 go/analysis/passes/modernize: document reflecttypefor symbol rule
  > 1695311 gopls/doc/release/v0.24.0.md: prepare and polish
  > 3fdd474 gopls/internal/golang: test Create variable in bad contexts
  > ea2f152 go.mod: update golang.org/x dependencies
  > 00443da go/analysis/passes/printf: pin testdata Go versions
  > 9ba0a15 internal/refactor/inline: check import accessibility before Go version
  > 25196fc cmd/toolstash: check -linkobj files to support early export
  > ead0503 gopls/internal/golang: unexport dragon*Question variables
  > 5693030 gopls/internal/golang: call arguments mistreated in inlineAllCalls
  > 134264d gopls/internal/golang/stubmethods: do not panic when FindByPos fails
  > 01d93d7 gopls/internal/golang: slay the dragon: update questions
  > 405de39 go/callgraph: fix benchmarks to analyze whole program
  > 231a7fa go/ssa, cmd/deadcode: release type information once functions are built
  > c62818b gopls/internal/golang: slay the dragon: demo of interactive refactoring
  > 9844470 Revert "internal/analysis/analyzerutil: distinguish unknown file versions"
  > 2df3101 gopls/doc/feature: update screenshots for implement interface
  > bcaa6a2 go/packages, go/gcexportdata: update importers to handle "i" format
  > d1e7863 gopls/internal/mcp: modernize roots handling and protocol lifecycle
  > a5b69f1 gopls/doc/release: add release for generic interface support
  > 8903d63 gopls/internal/server: support multiple questions for the same id
  > ff5c132 gopls/internal/server: support for dynamic question with better ergonomics
  > 5e43bc6 internal/analysis/analyzerutil: distinguish unknown file versions
  > b95f84c gopls/internal/server: suppress shutdown race when diagnosing orphaned files
  > 01f30ea go/analysis/passes/stringintconv: use Cursor; move logic to intconv
  > 7a35302 go/analysis/passes/modernize: avoid invalid SuggestedFixes
  > 54490ff internal/refactor/inline: trim version suffix for package path
  > d85581a go/analysis/passes/stringintconv: make tests run under go1.28
  > 7f300b1 go/callgraph/rta: iterate type infos from slices, not the type map
  > d83c068 internal/gcimporter: replicate CL 837865 into x/tools
  > 1ca73a2 go/ssa: do not canonicalize the signatures of method wrappers
  > 4eb9670 internal/gcimporter: replicate CL 828988 into x/tools
  > 3090bd5 gopls/internal/golang: Move Declaration - remove decls from source
  > ffc4c93 go/packages: fix Windows response to ad-hoc package file missing
  > d2d3de9 gopls/internal/golang: record implicit deps in the decl graph
  > 87723c8 gopls/internal/golang: refactor moving set computation
  > 750a23e internal/imports: fix scanning of dependencies' module directories
  > 06cad12 go/ssa: avoid allocations on the MethodValue hit path
  > eaa8114 go/ssa: fix mistake in task.wait
  > eaa9e67 gopls/internal/golang: MoveDeclaration - rewrite refs to moving declarations
  > 33e71c6 go/packages: handle import cycles in tests
  > db03754 go/ssa: add a fast path to LookupMethod for existing methods
  > 5feba5a gopls/internal/cache: extend "zero-config" to assembly files
  > 8cab2e3 gopls: update mcp sdk to v1.8.0
  > ea88190 go/ssa: skip Selection.Type in MethodValue for non-generic methods
  > 51597d9 internal/typesinternal: RecvBase, replaces ReceiverNamed
  > 1cea8e0 gopls/internal/golang: MoveDeclaration - add/remove imports
  > 2e77e7d cmd/compilebench: exit nonzero when a benchmark fails
  > a500ad8 internal/astutil: drop Directive in favor of go1.26's ast.Directive
  > 5a44d24 gopls/internal/golang: MoveDeclaration - extract decls to file
  > 22b3402 gopls/internal/golang: move command resolve functions to feature files
  > 435ce0a go/packages, gopls: do not treat non-go files as Go packages
  > ddff1f4 gopls/internal/settings: use protocol.FormFieldKind in setting
  > 339fea7 gopls/internal/golang: move the interactive forms to feature file
  > 66fda59 gopls/internal/protocol/command: add special error for pending answers
  > 362f58b gopls/internal/cache: clear unloadableFiles on workspace reinit
  > d875b9e gopls/internal/analysis: use main.go files consistently
  > e6c5d22 gopls/internal/golang: Move Declaration - check validity of move
  > 0b9bfa9 go/analysis/passes/modernize: slicesbackward - skip loops that ignore i
  > 840625a go/analysis/passes/modernize: slicesbackward - only adopt body-level decls
  > 1bbe060 x/tools: delete obsolete code and dead test
  > 47c0c1f go/packages: recognize all main modules as overlay roots
  > 156c06a go/packages: use path-aware containment in getPkgPath
  > ebaccb3 gopls/internal/vulncheck/scan: pass the pattern after "--"
  > 9e55271 gopls/internal/golang: MoveDeclaration - handle new file
  > fded9cb go: make tests ready for new string(x) rules if x is an integer value
  > 3ae2477 gopls/internal/golang: update document for command resolve
  > 68f9714 gopls/internal/golang: MoveDeclaration - determine coupled symbols
  > b8a78cf gopls/internal/protocol/command: introduce action in command res
  > 7da4a34 gopls/internal/protocol: Add basic resolve_target gopls command
  > fbe42e5 go/ssa: preserve single-case receive assignment order
  > 3ab5f2d gopls/internal/protocol: move answer method to interactive params
  > 3e95368 gopls/internal/golang: support inlay hints for partial type arguments
  > 52dd431 gopls: preserve all missing-module diagnostics
  > 70106a1 gopls/internal/settings: rename completion related client caps
  > b42ff96 gopls/internal/golang/completion: report label details for completion items
  > 6d47dac internal/imports: import "embed" for files with //go:embed directives
  > 2496050 gopls/internal/golang: reject bad syntax in split/join lines
  > 8eb7e9b gopls/internal/golang/completion: report types in unimported completion
  > e75ea80 go/gcexportdata: restrict transitive dependencies
  > e8efd72 gopls: update mvdan/gofumpt dependency
  > 3ae0f64 gopls/internal/golang: MoveDeclaration - build symbol reference graph
  > 19d6802 gopls/internal/golang: Add doc link support for pkg doc comment
  > 31d5b55 gopls/internal/analysis/fillstruct: fix stack overflow
  > 8c35cb6 gopls/internal/golang: Hover: show types matching switch cases
  > 9427efe go/analysis/passes/modernize: merge import blocks
  > 265dd1a go.mod: update golang.org/x dependencies
  > 2af88d6 gopls/internal/cache: handle multiple legacy build constraints in standalone files
  > 9e18529 gopls/internal/test/integration/fake: don't poll after a workspace edit
  > 2543006 go/gcexportdata: update package docs + minor tweaks
  > 7c2cac4 gopls/internal/golang/completion: handle new(expr)
  > 28649ea go/analysis/passes/modernize: elide redundant clone in appendclipped
  > 332fd4c gopls/internal/protocol: trace error messages
  > 4d65dec gopls/internal/cache: tolerate missing nodes in reachability analysis
  > 664b13f internal/refactor/inline: guard against non-ellipsis
  > 567ef61 go/analysis/passes/modernize: testingcontext - skip deferred calls
  > 2b98ca4 gopls/internal/cache/parsego: simplify pos computation in parseStmt
  > a6b840d go/ssa: distinguish goto from continue for range-over-func
  > f938040 go/ssa: canonicalize selection types before the isParameterized check
  > 7940781 gopls/internal/util/typesutil: clarify TypesWithContext
  > dd632b8 go/analysis/unitchecker: remove export data framing
  > 89ed5c3 internal/gcimporter: support V5 unified encoding (method indices)
  > ebbc713 internal/imports: don't let stdlib shadow existing imports
  > 95d04c7 gopls/internal/test/integration: fix TestSimplifyCompositeLitDiagnostic
  > 2be7206 go/analysis/passes/modernize: embedlit - report diagnostic for each unnecessary field type
  > d5766cd gopls/internal/server: add counter for Emacs lsp-mode client
  > ca24818 go/analysis/passes/modernize: slicesbackward - don't use keywords
  > fe441ef go/analysis/unitchecker: export type information
  > ec45d42 go/ast/astutil,internal/imports: simplify updateBasicLitPos
  > 992526c gopls: support assembly References for labels and asm-only symbols
  > bd9e305 go/ssa: propagate receiver instantiation to nested functions
  > fff160b cmd/goimports: use filepath.WalkDir instead of filepath.Walk
  > e37dd98 go/analysis/passes/modernize: support {strings,bytes}.CutLast in stringscut
  > 2e92293 go/callgraph/rta: skip generic methods in addRuntimeType
  > 8471f95 go/analysis/unitchecker: suppress "vet: " error prefix
  > 4fd8718 gopls/internal/util/morestrings: use strings.CutLast instead
  > b3a0e3b gopls/internal: use generic methods in some places
  > ca210e8 gopls/internal: run go fix
  > a06d97c gopls: update to go1.27.0
  > 67d616c go/ssa: Give real types to ssa.RangeIter and ssa.DeferStack
  > eca294d gopls/internal/golang: reject inlining for modified variables
  > 8d57844 internal/modindex: memoize the index parsed by Read
  > e2ef89b go/analysis/passes/fieldalignment: change default threshold to 0
  > d6ea9c7 x/tools: assert that *types.Signature is non-nil
  > f3edfb5 copyright: parse file headers only
  > b73c0de go/analysis/passes/printf: reject %d of pointer or chan
  > 1abeae3 gopls/internal/analysis/ptrtoerror: do not offer a fix for a generic type
  > d40fc7d go/analysis/passes/modernize: embedlit: check index paths
  > c61c622 go/analysis/passes/modernize: ignore comments in embedlit's comma check
  > 9e75161 gopls/go.mod: update staticcheck to 2026.2.1 (v0.8.1)
  > cb89f0c gopls/internal/test/marker: do not use go list ... in module mode
  > a2f4879 go/ssa: Add testing helper for function instructions.
  > eae1b3d gopls/internal/golang: MoveDeclaration - find move target based on cursor
  > a8baf13 gopls/internal/lsprpc: increase timeout in TestClientLoggingV2
  > 85b0fd4 gopls/internal/test/integration: remove CleanModCache.
  > 8f0f8c7 internal/gcimporter: fix panic writing export data
  > ed9ed91 gopls/internal/golang: align move decl form field id
  > 0f93463 go/analysis/passes/unusedresult: don't report calls in b.Loop bodies
  > c62e535 go/analysis/passes/modernize: avoid breaking unkeyed struct literals
  > 892f374 go/analysis/passes/modernize: preserve timer calls on unrelated benchmarks
  > 1d8da57 all: upgrade go directive to at least 1.26.0 [generated]
  > 3adb118 go/analysis/passes/modernize: preserve evaluation effects in slicessort
  > b4f533f gopls/cache/parsego: fix pos computation
  > 327af06 gopls/internal/util/asm: preserve offsets in CRLF files
  > 4cfed61 refactor/satisfy: fix panic on invalid types
  > d68c529 refactor/satisfy: fix crash in rename
  > e19e218 go/analysis/passes/modernize: avoid changing assignment-form slicesbackward loops
  > 8e9d77a go/analysis: avoid panics on multi-valued call arguments
  > 7aff9f3 internal/stdlib: update stdlib index for Go 1.27 Release Candidate 3
  > 3c18a2d internal/imports: read the module index only where it is used
bumping golang.org/x/mod 13be902...b5136e5:
  > b5136e5 sumdb/tlog: use recorded responses in TestCertificateTransparency
  > 1e9a5ae go.mod: update golang.org/x dependencies
  > d0a27b2 modfile: fix Cleanup and DropTool documentation
  > d12008c all: upgrade go directive to at least 1.26.0 [generated]
  > d3398d0 go.mod: update golang.org/x dependencies
  > 57549bf sumdb: ignore unrelated hashes in Lookup
  > 96f62ae sumdb/tlog: fix TileHashReader authentication bypass
bumping knative.dev/pkg c9015f8...59e0d24:
  > 59e0d24 Bump the golang-x group across 1 directory with 2 updates (# 3402)
  > efa6bf3 Parse a float32 at 32 bits so out-of-range input is rejected (# 3401)
  > a9cb74f upgrade to latest dependencies (# 3403)
  > 0795cb8 Fix h2-over-TLS client ALPN regression after network refactor (# 3400)
  > 81e236f Fix h2 ALPN upgrade option (# 3399)
  > 795a0f6 chore: Upgrade k8s.io core libs to 1.36 (0.36.z) (# 3387)
  > d742f3f Update owners files to use SC alias instead of TOC (# 3396)
  > 2f3769f Bump the golang-x group across 1 directory with 3 updates (# 3391)
  > 8c9ee30 Fix non-constant format string error on go 1.26 (# 3392)
  > fb7b4f2 Bump the k8s group with 5 updates (# 3394)
  > 72074e4 Make AsUint64 parse into a uint64 (# 3395)
  > 5dc1978 Bump google.golang.org/grpc from 1.83.0 to 1.83.2 (# 3389)
  > d2a153a Bump the k8s group with 5 updates (# 3386)
bumping k8s.io/api cfdecb5...923f601:
  > 923f601 Update dependencies to v0.36.5 tag
  > 82d8177 Merge pull request # 141226 from liggitt/golang-deps-1-36
  > a3de3f4 Update golang.org/x deps
  > 53c47b9 Merge pull request # 140296 from jpbetz/cherry-pick-smd-306-revert
  > 1831886 Bump sigs.k8s.io/structured-merge-diff/v6 to v6.3.3
  > 879d396 Merge remote-tracking branch 'origin/master' into release-1.36
  > 030d81f Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  > aef6eb6 Add granular authorization for DRA ResourceClaim status updates
  > 91061ea Merge pull request # 136589 from tosi3k/preemption-mode
  > e6b81e2 Add Workload-Aware Preemption fields to Workload and PodGroup APIs
  > f8fce2e Merge pull request # 136989 from nojnhuh/podgroup-resourceclaim
  > b928f5e Workload API: PodGroup ResourceClaims (KEP-5729)
  > 61bd78e Merge pull request # 137190 from everpeace/KEP-5491-alpha
  > 6bf46eb Merge pull request # 137028 from nmn3m/feature/dra-resource-pool-status
  > 95c5538 KEP-5491: change ResourceSliceMaxDevicesWithTaintsOrConsumesCounters to ResourceSliceMaxDevicesWithAdvancedFeatures and add testcases with max devices with list attributes
  > e6cb179  Remove +k8s:validation-gen-nolint from ResourcePoolStatusRequest, regenerate the code
  > ef9bcc2 KEP-5491: generated code for list attribute fields in DeviceAttribute API ("make update"-ed)
  > ea6bbf6 Drop CSR analogy, mark ObjectMeta +required,reduce limits (maxItems=500, maxLength=128) for etcd safety, add Errors printer column
  > 8e0107c KEP-5491: add list attribute fields(BoolValues, IntValues, StringValues, VersionValues) in DeviceAttribute API
  > 195ffe1 Add ResourcePoolStatusRequest API types and generated code
  > 6c9fd9d Merge pull request # 137772 from lalitc375/fix-linter
  > f545dd9 Merge pull request # 137862 from gnufied/pvc-unused-since-condition
  > 6ec1cc4 remove no-lint exemption
  > 50328df Merge pull request # 136725 from pravk03/native-dra-2
  > 40d2eff Update wording for Unused timestamp to indicate lag
  > 589d8e5 Merge pull request # 135118 from johanneswuerbach/scaletozero
  > cd715e3 make update
  > 5ee583e add unused condition to persistent volume claims
  > 1ee4dbf Merge pull request # 137849 from bryantbiggs/deps/update-kube-openapi
  > 093a510 KEP-2021: HPA condition based scaling to zero
  > 4d9239c Introduce API fields
  > e827beb Merge pull request # 137086 from alaypatel07/kep-5304/downward-api
  > f88d902 dependencies: bump kube-openapi to drop ginkgo/gomega indirect deps
  > 913796f Merge pull request # 137795 from ttsuuubasa/dra-binding-conditions-beta
  > a2b0d2e kep-5304: add DeviceMetadata API
  > 629d7f3 Merge pull request # 137831 from BenTheElder/v1.35.0-api-testdata
  > 51abad8 DRA Device Binding Conditions: run make update
  > 570f624 UPDATE_COMPATIBILITY_FIXTURE_DATA=true go test k8s.io/api -count=1
  > bfce754 DRA Device Binding Conditions: graduate to beta
  > 182a6e3 Add v1.35.0 API testdata
  > 3d55c20 Merge pull request # 137836 from BenTheElder/fix-api
  > b46aee3 Merge pull request # 137835 from BenTheElder/suggest-test
  > d210ffe UPDATE_COMPATIBILITY_FIXTURE_DATA=true make test WHAT=k8s.io/api
  > ccc27a3 Merge pull request # 137271 from brejman/tas-constraints
  > afcbb5e suggest running tests after adding testdata *without test caching*
  > 06d1b92 hack/update-codegen.sh
  > 505c536 Merge pull request # 136657 from Jefftree/sharding-test
  > a753659 Add scheduling constraints to v1alpha2 pod group api
  > 38d6485 make VolumeMountStatus.VolumeStatus a pointer to preserve serialization compatibility
  > 914fe1c generated: regenerate proto, openapi, deepcopy, conversion, and testdata
  > 4524ff4 Merge pull request # 137678 from aaron-prindle/flowcontrol-discriminator-and-member-dv-migration
  > a548dc0 Merge pull request # 137454 from haircommander/proc-mount-ga
  > 046f041 feat: add LimitResponse declarative validation discriminator tags
  > 43e4f62 proc mount: drop featuregate note on API
  > 930b374 feat: add PriorityLevelConfigurationSpec declarative validation discriminator tags
  > 369111f Merge pull request # 137298 from dims/dsri/cri-streaming-option-a-hardcut
  > 404992a Merge pull request # 137170 from pohly/dra-device-taints-beta
  > 26e75fb staging/streaming: replace testify with stdlib in tests
  > 1bd5224 Merge pull request # 136792 from rata/userns-goes-ga
  > 1d47de0 DRA device taints: generated files
  > 8216f23 staging: extract CRI streaming modules with client-go compatibility
  > 4d4e1f7 Merge pull request # 136711 from saschagrunert/graduate-image-volume-ga
  > 8ca082a Remove references to UserNamespacesSupport feature gate from core types
  > 2ba92c4 DRA device taints: graduate to beta
  > 7e7aaba Merge pull request # 137343 from gnufied/prevent-podscheduling-optin
  > 4b91355 Graduate ImageVolume to GA
  > 845a10f Merge pull request # 137495 from pohly/klog-update
  > a6dc110 Update comment and regenerate API docs
  > fb0eb59 Create Workload API v1alpha2 (# 136976)
  > 123df31 dependencies: klog v2.140.0
  > e9bcbe7 Expand on the schedulr comment
  > 9f7831c Merge pull request # 135048 from yliaog/beta_promo
  > 0f28e88 Update generated code
  > 82b9cd1 Merge pull request # 137456 from liggitt/go126
  > 93c12a1 codegen
  > 7fb28c3 Add v1beta1 types
  > a3ea236 Bump to go 1.26
  > 6c81f0f promote DRA Extended Resource feature to beta in 1.36
  > af841f1 Update generated fields
  > 09f7080 Merge pull request # 137451 from dims/update-google-protobuf-deadcode-fix
  > 29eae2d Update the types for new preventscheduling field
  > 2f4ee36 Move DRAAdminAccess feature to GA (# 137373)
  > c3fa17c Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
  > d857bb3 Merge pull request # 137349 from Jefftree/fix-model-name-bounding-dirs
  > a8bc06b update kube-openapi
  > 027f12a Merge pull request # 137291 from everettraven/upstream/dv/maxLength-fixup
  > 13e1054 Merge pull request # 135196 from harche/i133202
  > 81d9c53 update-codegen: regenerate generated files
  > 605cb02 Merge pull request # 137167 from pohly/dra-device-taints-update-timestamp
  > db342fb KEP-4680: Add message field support to DRA device health reporting
  > 4f08cf6 apis/resource: migrate maxLength to maxByte tags
  > ffec185 Promote sig-storage feature `MutableCSINodeAllocatableCount` to GA (# 136230)
  > 6c12edc DRA device taints: automatically bump TimeAdded when changing effect
  > 1b4e6c3 Merge pull request # 137230 from lalitc375/support-subresource
  > d93bd39 Merge pull request # 137286 from humblec/update-vendored-dependencies
  > e89faa0 Convert {is,supports}SubResource to modern tag parsing
  > 482bbdf dependencies: bump gomega to v1.39.1 and ginkgo to v2.28.1
  > 068f0e9 Merge pull request # 135775 from bitoku/no-noexec
  > a504b94 Merge pull request # 137120 from lalitc375/lint-shadow
  > 3fed8b5 Update OCI image volume type description to remove "noexec" attribute
  > 54475d0 Merge pull request # 137029 from ermias19/enable-kal-optionalorrequied-admission_
  > aba12d4 validation-gen: Fix all stable api violations by prefixing +k8s:alpha(since:"1.36") and exclude output_tests from linting
  > 6115637 make update swagger
  > 426b1b9 Fix lint errors
  > 29a25a2 admission: mark review fields optional
  > 5bcacde Merge pull request # 136630 from lalitc375/dv-testing-utils
  > 7c9c662 Merge pull request # 136215 from darthsuburbus/dec-validation-ipaddress
  > efd99d2 Fix resource claim DV
  > 026db4d Merge pull request # 136959 from natasha41575/allocated_status_cleanup
  > 5fd4de6 add declarative validation tests for ipaddress
  > 0dc1589 Merge pull request # 136900 from itzPranshul/rbac-optionalorrequired
  > b754dd1 remove the InPlacePodVerticalScalingAllocatedStatus feature gate
  > 1ff8524 add validation fields and generated code for v1 and v1beta1
  > 28495fa Merge pull request # 136822 from itzPranshul/storage-class
  > 061b9ac Update the APIGroup field to be optional
  > 2b63a8a Merge pull request # 135313 from oduludo/enable-commentstart-apiserverinternal
  > 66a57af declarative validation mingration- addressing feedback
  > 971413c KAL:enforce optionalorrequired on rbac API group
  > 2e31577 updated generated code
  > 8524b1a run hack/update-codegen.sh
  > c6166ac commentstart lint fixes for apiserverinternal API group
  > 1fd5bbc migrate StorageClass.VolumeBindingMode to declarative validation
  > ffebe2b Merge pull request # 137084 from liggitt/proto-message
  > a97843a migrate StorageClass.ReclaimPolicy to declarative validation
  > 00610eb Regenerate protobuf
  > 711921f migrate StorageClass.Parameters to declarative validation
  > 0ba3b06 Merge pull request # 136039 from lalitc375/map-graduation
  > f53972c migrate StorageClass.Provisioner to declarative validation
  > a52ec95 put replacement for v1beta1 MutatingAdmssionPolicy
  > ba6b260 promote MutatingAdmissionPolicy to v1: api wiring and validation
  > cf0cf1c promote MutatingAdmissionPolicy to v1: add types and generated code
  > 2d61e94 Merge pull request # 136704 from Ignoramuss/optionalorrequired-authentication
  > f32ed1d Merge pull request # 135715 from darshansreenivas/dtumkur-pr-network-tag-cidr
  > ade7335 api: enable optionalorrequired linter for authentication API
  > c0f96f0 Merge pull request # 136998 from yongruilin/master-vg_hpa-ifenable
  > 846ebc3 network: migrate CIDR validation to DV
  > d24f311 Merge pull request # 135028 from itzPranshul/master-vg-enable-clusterRole
  > f0ac7e3 feat: migrate HorizontalPodAutoscalerSpec.MinReplicas to declarative validation
  > 6ca1472 Merge pull request # 136793 from yongruilin/master_vg-strategy-alpha
  > ec6ac54 rbac:migrate policyRule.verbs to declarative validation
  > e1c8201 Merge pull request # 134675 from JoelSpeed/enable-kal-optionalorrequired-apiserver-internal
  > ab0fa42 opt-in Workload v1alpha1 to explicit declarative enforcement
  > 44213e0 Merge pull request # 136921 from dims/dump-from-utils
  > 620635d Restore omitempty on ServerStorageVersion fields
  > 9572909 Merge pull request # 136729 from ahmedtd/podcert-pkcs10
  > 74979d8 Move dump package from apimachinery to k8s.io/utils
  > f65840d Update generated code
  > a7e57c5 Merge pull request # 135256 from natasha41575/pod-gen-field
  > 9566593 Pod Certificates: make update
  > d5e626e Enable nonpointerstructs alongside optionalorrequired
  > e48d719 remove Pod Generation feature gate from field descriptions
  > 548c1f1 Pod Certificates: Add StubPKCS10Request; migrate in-tree usages to it
  > f0df76c Enforce either optional or required tag on apiserverinternal API group
  > f5f249b Merge pull request # 136826 from alvaroaleman/bumpv0.32
  > e2102f2 Merge pull request # 136787 from ahmedtd/bump-ctb
  > ded52e1 Bump structured merge diff to v6.3.2
  > 2024a96 Merge pull request # 136315 from liyuerich/commentstartauthorization
  > f5af50e Push ClusterTrustBundles v1beta1 deprecation to 1.37
  > 6f99b47 Merge pull request # 136492 from Ignoramuss/optionalorrequired-policy
  > 1f1a941 enable commentstart check on authorization API group
  > e902260 Merge pull request # 136747 from dims/use-k8s-utils-btree
  > a886d63 api: enable optionalorrequired linter for policy API
  > c1509d9 Use btree from k8s.io/utils instead of github.com/google/btree
  > ab936f9 Merge pull request # 136489 from Ignoramuss/optionalorrequired-node
  > 00e794e api: enable optionalorrequired linter for node API
  > fd489ea Merge pull request # 136424 from JoelSpeed/podgroup-union
  > aeae6cd Merge pull request # 134925 from ShaanveerS/shaan/imagepolicy-on-joel
  > 0254fac Mark PodGroupPolicy up with openapi union member tags
  > ae84f4b Merge pull request # 135106 from bkhadars/enable-commentstart1
  > 87bf1ce feat(kal): enforce optional/required on imagepolicy API group
  > 92ef733 Merge pull request # 136582 from yongruilin/master_kubeopenapi-format
  > 13331b9 update generated code
  > 4f80fae Bump k8s.io/kube-openapi to latest
  > 66a6d84 enable commentstart check on admissionregistration API group
  > 35f064c Merge pull request # 136441 from kannon92/remove-alpha-api-dra
  > 6fa1731 Merge pull request # 135763 from darshansreenivas/admissionregistratio_k8s_io_ValidationAction
  > 2d94367 remove alpha comments for GA or beta DRA fields
  > 6d23ae1 feat(admissionregistration): enable declarative validation wiring and require ValidationActions
  > 1315212 feat(storage): enable validation-gen + DV wiring for storage.k8s.io (# 135438)
  > d3211ba Merge pull request # 135761 from darshansreenivas/admissionregistratio_k8s_io_policy_name
  > 4f90c5e Merge pull request # 135470 from Ignoramuss/optionalorrequired-scheduling
  > b82ad2d feat(admissionregistration): wire group for declarative validation and require PolicyName
  > 6ec93a8 Merge pull request # 135322 from carlory/rm-portworx
  > 89c6654 api: fix scheduling API optional/required markers
  > f1f0309 run hack/update-vendor.sh
  > 0fc05d8 Update generated.proto files with +required markers
  > 0c5f872 Merge pull request # 135842 from liyuerich/commentstartauthentication
  > b157025 api: add +required markers to scheduling API
  > 2862105 Merge pull request # 135951 from droach282/cronjob-schedule-dv
  > 54db448 enable commentstart check on authentication API group
  > fc00e63 Merge pull request # 136212 from dims/update-security-deps-jan2026-v2
  > bcf669e Adding declarative validations to CronJob
  > af626db Merge pull request # 135164 from helayoty/helayoty/workload-declarative-validation
  > 35e60c5 Update security and stability dependencies
  > c51ea73 Merge pull request # 136162 from dims/update-security-deps-jan2026
  > 35a0279 Add udpate and immutable tags on Workload API
  > 45ea5c9 Update security-critical authentication and protobuf dependencies
  > 7d0b2d7 Remove descriminated union
  > 43c1617 Merge pull request # 136161 from dims/update-golang-x-deps-jan2026
  > 7559038 Restructure validation tests to check declarative coverage
  > fd1876f HPA: Enable DV support for MaxReplicas (# 135412)
  > 200ba55 Update golang.org/x dependencies to latest versions
  > 98bad63 Add union validation tags
  > acac0b1 Merge pull request # 136079 from lalitc375/for-each
  > 83fccd5 Add +k8s:minimum validation tag
  > fe27bc5 Merge pull request # 135890 from CLBRITTON2/discovery-endpoint-dv
  > 6197359 Migrate ResourceSlice map key validation to declarative validation
  > a316800 Add +k8s:format validation tags
  > fc04303 Add declarative validation tests for EndpointSlice addressType supported values
  > b9e5471 Add +k8s:listType, +k8s:listMapKey, and +k8s:maxItems validation tags
  > f5bf24d Add declarative validation tests for EndpointSlice addressType immutability
  > d937967 Add +k8s:required and +k8s:optional validation tags
  > 6325267 Add declarative validation tests for EndpointSlice addressType required
  > 12502c3 Add maxItems tag to Endpoint.Addresses, update tests
  > cd9ab27 Mark Endpoint.Addresses required, add test cases
  > 82d2200 wire network group for declarative validation and +k8s:required to IngressClassParametersReference.Name and IngressClassParametersReference.Kind (# 134909)
  > 5c36d52 Merge pull request # 136108 from pohly/ginkgo-gomega-update
  > b85c962 Merge pull request # 136111 from aojea/endpointslice_optional
  > 6736b25 dependencies: ginkgo v2.27.4, gomega v1.39.0
  > 1160aaf define endpointslice.endpoints as optional
  > 49b7fdb Merge pull request # 135391 from jpbetz/smd-6_3_1
  > 273786d Merge pull request # 135867 from dims/pin-versions-of-dbus-and-otelgrpc-to-avoid-breakage
  > da994af hack/pin-dependency.sh sigs.k8s.io/structured-merge-diff/v6 v6.3.1
  > ff6ce17 updated to last known good dependencies for otelgrpc and dbus
  > 42a0dbb Merge pull request # 135836 from pohly/ginkgo-gomega-update
  > ab0a763 Merge pull request # 135845 from skitt/drop-armon-circbuf
  > c03f7ee dependencies: ginkgo v2.27.3 + gomega v1.38.3
  > d556a89 Merge pull request # 135046 from darshansreenivas/node-tag-migration-dtumkur
  > 003f74c Replace armon/circbuf with k8s.io/utils/buffer
  > d61fc3e Merge pull request # 135615 from soltysh/drop_autoscaling_v2betaX
  > 062c928 fixed order of tags
  > 50474f4 Merge pull request # 135355 from lalitc375/basic
  > 1076c62 Generated changes
  > 93ee295 adding required and other test cases
  > 56ee7b1 Merge pull request # 135302 from liyuerich/commentstartapidiscovery
  > 52c0ab8 Add k8s:optional on Device.Basic
  > 629a3e0 React to removing autoscaling v2beta1 and v2beta2
  > 492280b DRA: adding tag to node module
  > cc3b8d5 Merge pull request # 132807 from iholder101/feature/ImageVolumeWithDigest
  > 187b623 enable commentstart check on apidiscovery API group
  > d8ea27e Remove autoscaling v2beta1 and v2beta2
  > 382014e Merge pull request # 135536 from dims/bump-x/crypto-to-v0.45.0
  > 3a177c6 Add auto-generated code and boilerplate
  > d6481a9 Add imageRef to testdata
  > 55ae00e Add ImageRef field to VolumeMountStatus
bumping golang.org/x/net acc78e0...c1d31df:
  > c1d31df go.mod: update golang.org/x dependencies
  > 8456a20 quic: properly check for allowed frame types in a packet
  > 18ece0c http2: prevent crash due to HPACK encoder race
  > 2d03f9d http2: avoid 2x refund on stream close with buffered data
  > cc7d34f http2: avoid excessive work on initial window changes
  > 57f4235 http2: apply header limits to Trailer headers too
  > 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  > 2824783 http2: delete malformed framing-related headers
  > b13c0c1 internal/http3: delete HTTP/3 package
  > 520c891 quic: off-path support in loss/congestion/rtt
  > 656874f quic: determine local address for connections
  > a818e16 quic: add a pathAddrs type, holding a local/peer address pair
  > f557b18 internal/http3, internal/httpcommon: move gzip reader implementation
  > 53e34cd http2: drop benchmarks
  > 540d04c go.mod: update golang.org/x dependencies
  > 20eef7f quic: clear fast-path receive buffer on stream reset
  > c23af1b internal/http3: fix compilation error due to missed symbol name update
  > eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  > 12e0501 internal/http3: server header size limits
  > d89285e quic: add Stream.StopSending, and rework stream/application errors
  > d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  > 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  > b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  > 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  > 980ca2d quic: make Endpoint.Close return only when the endpoint is actually closed
  > 5490999 internal/http3: close the request body before RoundTrip returns
  > f3ca034 http2: deprecate Transport and Server
  > a375228 internal/http3: do not abort roundtrip when server closes request stream
  > 679e2db quic: don't exceed anti-amp limit with Initial padding
  > af341ad internal/http3: do not treat 1xx status as the final response status
  > bf48165 internal/http3: wait until clientConn is unregistered when closing it
  > 7f14199 all: use min/max builtins
  > fc715e5 internal/http3: include minor HTTP version in default User-Agent header
  > 37f3d6f all: upgrade go directive to at least 1.26.0 [generated]
  > f6c404b http2/h2c: restore documentation of NewHandler unsafety
  > c354d3f internal/httpcommon: remove Host header from server request
  > 580cba3 http3, internal/httpcommon: improve :authority/host header interactions
  > 21c1020 internal/httpcommon: drop net/http dependency in tests
bumping golang.org/x/text acdba66...ac40b0f:
  > ac40b0f go.mod: update golang.org/x dependencies
  > 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  > d0ecd29 secure/bidirule: lazily precompute ASCII table
  > fafe4a0 go.mod: update golang.org/x dependencies
  > f53c316 unicode/norm: don't truncate runes in the recomposition map key
  > 37867f6 unicode/norm: let any starter block composition in compose
  > 0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
  > bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
  > 4f55186 unicode/norm: simplify short source detection in Form.transform
  > a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
  > cd1cbc9 unicode/bidi: panic rather than log.Panicf
  > a459614 internal/export/idna: fix conformance with optional validation disabled
  > be70a61 internal/export/idna: drop trie field from Profiles
  > 472930d internal/export/idna: make TestTables pass with Go 1.26
  > dac6be3 all: upgrade go directive to at least 1.26.0 [generated]
  > 91daecb encoding/japanese: document that decoding follows RFC 2237, not WHATWG
bumping k8s.io/kube-openapi 589584f...43fb72c:
  > 43fb72c Merge pull request # 579 from bryantbiggs/remove-ginkgo-from-root-module
  > 5b3e3fd Merge pull request # 573 from Jefftree/fix-model-name-bounding-dirs
  > cd58293 Remove ginkgo/gomega dependency from root module
  > a19766b Merge pull request # 570 from yongruilin/number-validation
  > d57e7d7 Add --readonly-pkg flag to skip read-only dependency packages
  > 4e65d59 Merge pull request # 568 from Jefftree/followup-560
  > 1d94e88 feat(validation): enhance numberValidator to enforce numeric formats and add comprehensive tests
  > b6aabc6 Merge pull request # 567 from kubernetes/dependabot/github_actions/actions/checkout-6
  > 2a6f62f Remove IsValidURI
  > 0ac8315 build(deps): bump actions/checkout from 5 to 6
bumping golang.org/x/sync 1eb64d4...36f2d70:
  > 36f2d70 errgroup: modernize the usage of closures in goroutines
  > f75267d semaphore: panic on negative capacity
  > 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
bumping knative.dev/hack b2a37f1...4b87852:
  > 4b87852 fix: set latest release for pre-1.0 tags (# 479)
  > 655a4b1 Update GKE default k8s version (# 480)
  > c7ef19b Update OWNERS to use steering-committee alias instead of TOC (# 477)

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -1,24 +1,24 @@
 module knative.dev/caching
 
-go 1.25.0
+go 1.26.0
 
 require (
 	github.com/google/go-cmp v0.7.0
 	go.uber.org/zap v1.28.0
-	k8s.io/api v0.35.7
-	k8s.io/apimachinery v0.35.7
-	k8s.io/client-go v0.35.7
-	k8s.io/code-generator v0.35.7
-	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
-	knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b
-	knative.dev/pkg v0.0.0-20260820190123-c9015f8bfdea
+	k8s.io/api v0.36.5
+	k8s.io/apimachinery v0.36.5
+	k8s.io/client-go v0.36.5
+	k8s.io/code-generator v0.36.5
+	k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a
+	knative.dev/hack v0.0.0-20261021112836-4b87852b7bf9
+	knative.dev/pkg v0.0.0-20261021162845-59e0d2425bdb
 )
 
 require (
 	github.com/blendle/zapdriver v1.3.1 // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
-	github.com/emicklei/go-restful/v3 v3.12.2 // indirect
+	github.com/emicklei/go-restful/v3 v3.13.0 // indirect
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
 	github.com/go-logr/logr v1.4.4 // indirect
@@ -36,7 +36,7 @@ require (
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
@@ -46,25 +46,25 @@ require (
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
 	go.yaml.in/yaml/v3 v3.0.5 // indirect
-	golang.org/x/mod v0.39.0 // indirect
-	golang.org/x/net v0.58.0 // indirect
+	golang.org/x/mod v0.42.0 // indirect
+	golang.org/x/net v0.61.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
-	golang.org/x/sync v0.22.0 // indirect
-	golang.org/x/sys v0.47.0 // indirect
-	golang.org/x/term v0.45.0 // indirect
-	golang.org/x/text v0.41.0 // indirect
-	golang.org/x/time v0.10.0 // indirect
-	golang.org/x/tools v0.49.0 // indirect
+	golang.org/x/sync v0.24.0 // indirect
+	golang.org/x/sys v0.49.0 // indirect
+	golang.org/x/term v0.47.0 // indirect
+	golang.org/x/text v0.43.0 // indirect
+	golang.org/x/time v0.14.0 // indirect
+	golang.org/x/tools v0.52.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b // indirect
-	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
+	k8s.io/klog/v2 v2.140.0 // indirect
+	k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.3.3 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 )

go.sum

@@ -1,5 +1,3 @@
-github.com/Masterminds/semver/v3 v3.4.0 h1:Zog+i5UMtVoCU8oKka5P7i9q9HgrJeGzI9SA1Xbatp0=
-github.com/Masterminds/semver/v3 v3.4.0/go.mod h1:4V+yj/TJE1HU9XfppCwVMZq3I84lprf4nC11bSS5beM=
 github.com/blendle/zapdriver v1.3.1 h1:C3dydBOWYRiOk+B8X9IVZ5IOe+7cl+tGOexN4QqHfpE=
 github.com/blendle/zapdriver v1.3.1/go.mod h1:mdXfREi6u5MArG4j9fewC+FGnXaBR+T4Ox4J2u4eHCc=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
@@ -8,8 +6,8 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/emicklei/go-restful/v3 v3.12.2 h1:DhwDP0vY3k8ZzE0RunuJy8GhNpPL6zqLkDf9B/a0/xU=
-github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
+github.com/emicklei/go-restful/v3 v3.13.0 h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes=
+github.com/emicklei/go-restful/v3 v3.13.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
 github.com/evanphx/json-patch v5.9.0+incompatible h1:fBXyNpNMuTTDdquAq/uisOr2lShz4oaXpDTX2bLe7ls=
 github.com/evanphx/json-patch v5.9.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
 github.com/evanphx/json-patch/v5 v5.9.11 h1:/8HVnzMq13/3x9TPvjG08wUGqBTmZBsCWzjTM0wiaDU=
@@ -27,15 +25,11 @@ github.com/go-openapi/jsonreference v0.21.0 h1:Rs+Y7hSXT83Jacb7kFyjn4ijOuVGSvOdF
 github.com/go-openapi/jsonreference v0.21.0/go.mod h1:LmZmgsrTkVg9LG4EaHeY8cBDslNPMo06cago5JNLkm4=
 github.com/go-openapi/swag v0.23.0 h1:vsEVJDUo2hPJ2tu0/Xc+4noaxyEffXNIs3cOULZ+GrE=
 github.com/go-openapi/swag v0.23.0/go.mod h1:esZ8ITTYEsH1V2trKHjAN8Ai7xHb8RV+YSZ577vPjgQ=
-github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
-github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
 github.com/google/gnostic-models v0.7.0 h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo=
 github.com/google/gnostic-models v0.7.0/go.mod h1:whL5G0m6dmc5cPxKc5bdKdEN3UjI7OUGxBlw57miDrQ=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
-github.com/google/pprof v0.0.0-20250403155104-27863c87afa6 h1:BHT72Gu3keYf3ZEu2J0b1vyeLSOYI8bm5wbJM/8yDe8=
-github.com/google/pprof v0.0.0-20250403155104-27863c87afa6/go.mod h1:boTsfXsheKC2y+lKOCMpSfarhxDeIzfZG1jqGcPl3cA=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/hashicorp/golang-lru v1.0.2 h1:dV3g9Z/unq5DpblPpw+Oqcv4dU/1omnb4Ok8iPY6p1c=
@@ -60,15 +54,12 @@ github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee h1:W5t00kpgFd
 github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
 github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
-github.com/onsi/ginkgo/v2 v2.27.2 h1:LzwLj0b89qtIy6SSASkzlNvX6WktqurSHwkk2ipF/Ns=
-github.com/onsi/ginkgo/v2 v2.27.2/go.mod h1:ArE1D/XhNXBXCBkKOLkbsb2c81dQHCRcF5zwn/ykDRo=
-github.com/onsi/gomega v1.38.2 h1:eZCjf2xjZAqe+LeWvKb5weQ+NcPwX84kqJ0cZNxok2A=
-github.com/onsi/gomega v1.38.2/go.mod h1:W2MJcYxRGV63b418Ai34Ud0hEdTVXq9NW9+Sx6uXf3k=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
-github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U=
+github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
 github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
@@ -106,24 +97,24 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
 go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
-golang.org/x/mod v0.39.0 h1:UF5zwQdCRRUpHfyPwr7d4UrGiVeldIsogtzWVnczL74=
-golang.org/x/mod v0.39.0/go.mod h1:bvIbwjQ0HUFFf5AKukeeYQG4ZBUG9yxQbR9aEweIwYY=
-golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
+golang.org/x/mod v0.42.0 h1:ICeL3t2L30ljSPHHxDnR4fqVcBt/zR2zJAb9juavmQg=
+golang.org/x/mod v0.42.0/go.mod h1:u5fzIrRInkL8MaO1cbRkUHT64v303YIT5KEqpNr7jRs=
+golang.org/x/net v0.61.0 h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw=
+golang.org/x/net v0.61.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
-golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
-golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
-golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
-golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
-golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0=
-golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w=
-golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
-golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
-golang.org/x/time v0.10.0 h1:3usCWA8tQn0L8+hFJQNgzpWbd89begxN66o1Ojdn5L4=
-golang.org/x/time v0.10.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
-golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
-golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
+golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA=
+golang.org/x/sync v0.24.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
+golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA=
+golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/term v0.47.0 h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM=
+golang.org/x/term v0.47.0/go.mod h1:efAfAuG6RKABvg1ArGebRkvX6LXul14SM67o2e4mUCY=
+golang.org/x/text v0.43.0 h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc=
+golang.org/x/text v0.43.0/go.mod h1:hbSIYA/amXcRXTFSZqh8tWHEoqRvvbKPJ2uz/KU+a+s=
+golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
+golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
+golang.org/x/tools v0.52.0 h1:ryxg4U63oaUYk7uOLTF37n43f4qgtGvqV4Ioit1BaEs=
+golang.org/x/tools v0.52.0/go.mod h1:ItcP5UNaVGG+Yc4eIYmaFLNJ4soEopkx5Y2d4lcEurs=
 golang.org/x/tools/go/expect v0.1.1-deprecated h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM=
 golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM=
@@ -141,31 +132,31 @@ gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
 gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.35.7 h1:qzjBIl6HRlZ4TXvVELrWC50d30RZu/uLJFE9efpLgxk=
-k8s.io/api v0.35.7/go.mod h1:rXqZY94EWBj+9wVgdVOVS46MtnAEF09khzjCR4EOqiE=
-k8s.io/apimachinery v0.35.7 h1:dIMi/gFnUDiASbeBqx1wqLAB8jlNo4kysncMZceV0OM=
-k8s.io/apimachinery v0.35.7/go.mod h1:1I6w9iM6v//hXKgxe1g3ybZgcOaJrcYg9sQGtndFrmc=
-k8s.io/client-go v0.35.7 h1:UWxdVZcqqCdeip50BKoIcoGryX7WfTE1oQQVolP8HJs=
-k8s.io/client-go v0.35.7/go.mod h1:uksk4ZVg/i4PrgsMsludkEe7Cp6v8hJ9wvje+2Ekn+c=
-k8s.io/code-generator v0.35.7 h1:3YzZjRIWhHuGGydD4UxsEMz87C9ztk9jQ2/gLbPkyVc=
-k8s.io/code-generator v0.35.7/go.mod h1:+WAXCNM6AlQLuSsfowMOWGFVlVKmsWO8VULVDFYMaRs=
+k8s.io/api v0.36.5 h1:vtL/ByHmw7suLt+SGVMPZnuj8QdfZ0kN1vvMvHRCY9c=
+k8s.io/api v0.36.5/go.mod h1:erfc3/3d6z30KO2Kf+BmOewE6CajqZTz1Hcd+FQqg60=
+k8s.io/apimachinery v0.36.5 h1:X5Xbg6G4om0ma6LOcGbmUmo+B5Nq7mmIpAWhk+tgCh8=
+k8s.io/apimachinery v0.36.5/go.mod h1:oPTSicSaDHDdoGwOs5DFPo6YS2wdTnzFHIYMEglfJ7I=
+k8s.io/client-go v0.36.5 h1:D79FgevPon0NIBcjUHMy+QnALtihLGTBqOvIGCgoZmw=
+k8s.io/client-go v0.36.5/go.mod h1:JAGQ3N4Z8E3H0W0Nm6NBg1EvB9+/wtEoBPDe8XGkHsI=
+k8s.io/code-generator v0.36.5 h1:fpPI4R6mXMx9kWZnSq7MAlaeKS+T4dga9NYSqVJi3Pg=
+k8s.io/code-generator v0.36.5/go.mod h1:hcPwUWz7zAAEfME+HgcvQePfBZmY/B/NMQUV7Rw3yIk=
 k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b h1:gMplByicHV/TJBizHd9aVEsTYoJBnnUAT5MHlTkbjhQ=
 k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b/go.mod h1:CgujABENc3KuTrcsdpGmrrASjtQsWCT7R99mEV4U/fM=
-k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
-k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
-k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZcmKS3g6CthxToOb37KgwE=
-k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
-k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
-k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b h1:MvbV2F2BdI8qKrYYUhDwbUZbX0BAYRSIpXM2TOtTvs0=
-knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
-knative.dev/pkg v0.0.0-20260820190123-c9015f8bfdea h1:vNg/ixrFn2UMDAh727Ag26G3jZAQGskbn5VOwZvKoOM=
-knative.dev/pkg v0.0.0-20260820190123-c9015f8bfdea/go.mod h1:azi5R3dOIcS9Pp8+QAZR9Yp7e/eoD7rNVFIefkZr8N8=
+k8s.io/klog/v2 v2.140.0 h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=
+k8s.io/klog/v2 v2.140.0/go.mod h1:o+/RWfJ6PwpnFn7OyAG3QnO47BFsymfEfrz6XyYSSp0=
+k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg=
+k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a/go.mod h1:uGBT7iTA6c6MvqUvSXIaYZo9ukscABYi2btjhvgKGZ0=
+k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU=
+k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
+knative.dev/hack v0.0.0-20261021112836-4b87852b7bf9 h1:uaPRs09Sa6A48PBeBEx5YhL3EIYmvKh92r3iJLAgUrM=
+knative.dev/hack v0.0.0-20261021112836-4b87852b7bf9/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
+knative.dev/pkg v0.0.0-20261021162845-59e0d2425bdb h1:5F8oRFLpF1Z3hbZnv0jslVdctQJ9cm5D3z3Yh86h7ic=
+knative.dev/pkg v0.0.0-20261021162845-59e0d2425bdb/go.mod h1:oHEqowlT6mHQMT6+W9xAPwYsBFhyB/LgglypgehpJFY=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
 sigs.k8s.io/randfill v1.0.0/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
-sigs.k8s.io/structured-merge-diff/v6 v6.3.0 h1:jTijUJbW353oVOd9oTlifJqOGEkUw2jB/fXCbTiQEco=
-sigs.k8s.io/structured-merge-diff/v6 v6.3.0/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE=
+sigs.k8s.io/structured-merge-diff/v6 v6.3.3 h1:u08YRbVUi59ri4YD6cg0UqNM4Dimn0sIl+wldcx5PYw=
+sigs.k8s.io/structured-merge-diff/v6 v6.3.3/go.mod h1:M3W8sfWvn2HhQDIbGWj3S099YozAsymCo/wrT5ohRUE=
 sigs.k8s.io/yaml v1.6.0 h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=
 sigs.k8s.io/yaml v1.6.0/go.mod h1:796bPqUfzR/0jLAl6XjHl3Ck7MiyVv8dbTdyT3/pMf4=