upgrade to latest dependencies

bumping knative.dev/pkg 077dcf0...7da1174:
  > 7da1174 upgrade to latest dependencies (# 3281)
  > 2be9d56 Lock before iterating map so that code does not panic on concurrent write (# 3279)
bumping knative.dev/networking 3fcdea3...806653e:
  > 806653e upgrade to latest dependencies (# 1094)
bumping knative.dev/hack af735b2...f2be520:
  > f2be520 [release-1.19] 🐛 Fix knative.dev/toolbox for older versions of Golang (# 444)

Signed-off-by: Knative Automation <[email protected]>

Author: knative-automation

go.mod

@@ -12,9 +12,9 @@ require (
 	k8s.io/client-go v0.33.4
 	k8s.io/code-generator v0.33.4
 	k8s.io/utils v0.0.0-20241210054802-24370beab758
-	knative.dev/hack v0.0.0-20250902154142-af735b2738d6
-	knative.dev/networking v0.0.0-20250912164322-3fcdea3327b7
-	knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8
+	knative.dev/hack v0.0.0-20251016122918-f2be520302e8
+	knative.dev/networking v0.0.0-20251022155347-806653eb2af8
+	knative.dev/pkg v0.0.0-20251022154045-7da1174b871b
 	sigs.k8s.io/gateway-api v1.2.1
 	sigs.k8s.io/yaml v1.6.0
 )

go.sum

@@ -257,12 +257,12 @@ k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff h1:/usPimJzUKKu+m+TE36gUy
 k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff/go.mod h1:5jIi+8yX4RIb8wk3XwBo5Pq2ccx4FP10ohkbSKCZoK8=
 k8s.io/utils v0.0.0-20241210054802-24370beab758 h1:sdbE21q2nlQtFh65saZY+rRM6x6aJJI8IUa1AmH/qa0=
 k8s.io/utils v0.0.0-20241210054802-24370beab758/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-knative.dev/hack v0.0.0-20250902154142-af735b2738d6 h1:JYZgO9bni32T+BB5v6WpeRFm1hjj+EypBLZCk6HZBt0=
-knative.dev/hack v0.0.0-20250902154142-af735b2738d6/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY=
-knative.dev/networking v0.0.0-20250912164322-3fcdea3327b7 h1:znAKzAIZRONj/3/sj29h3LymPvXc58nsF6P/8yDqEwc=
-knative.dev/networking v0.0.0-20250912164322-3fcdea3327b7/go.mod h1:+yUXx0sIKx5tzyW10GFcUSTfhuxNJhaGgvpXcv6PeHI=
-knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8 h1:n0BMHXIem9MyDkK4vfA4Vzdxaf1e+EeLJ6k+8exCjjI=
-knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8/go.mod h1:a1amDzo4YIUNuGeDgEz/uDHs5MQVYI1DXnRnEpWCAts=
+knative.dev/hack v0.0.0-20251016122918-f2be520302e8 h1:UQGRZ6nsBfzVGmSQYSN2b/aixYy8FJ+fpuI2KJGLBGo=
+knative.dev/hack v0.0.0-20251016122918-f2be520302e8/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY=
+knative.dev/networking v0.0.0-20251022155347-806653eb2af8 h1:QY/NMmxnLVMeZjUhP+w6DT5+U3+n6PP3jaWFKvUfua0=
+knative.dev/networking v0.0.0-20251022155347-806653eb2af8/go.mod h1:swS9Gds3ynInxzB1p/YLVF1mc5vtruO33qDjax7xyko=
+knative.dev/pkg v0.0.0-20251022154045-7da1174b871b h1:FGFKGId+JPrKdX9PG0tNI4ePWqmEdTNiIOw2zsiPLpo=
+knative.dev/pkg v0.0.0-20251022154045-7da1174b871b/go.mod h1:EagZcIVpB9m/bktnIVJM+MvgyXi9q25a8WpCCWULJUY=
 sigs.k8s.io/gateway-api v1.2.1 h1:fZZ/+RyRb+Y5tGkwxFKuYuSRQHu9dZtbjenblleOLHM=
 sigs.k8s.io/gateway-api v1.2.1/go.mod h1:EpNfEXNjiYfUJypf0eZ0P5iXA9ekSGWaS1WgPaM42X0=
 sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE=

vendor/knative.dev/hack/library.sh

@@ -681,7 +681,7 @@ function start_knative_eventing_extension() {
 # Parameters: $1 - tool package for go run.
 #             $2..$n - parameters passed to the tool.
 function go_run() {
-  local package
+  local package gotoolchain
   package="$1"
   if [[ "$package" != *@* ]]; then
     abort 'Package for "go_run" needs to have @version'
@@ -696,6 +696,11 @@ function go_run() {
     GORUN_PATH="$(mktemp -t -d -u gopath.XXXXXXXX)"
   fi
   export GORUN_PATH
+  gotoolchain="$(go env GOTOOLCHAIN)"
+  if [[ "$package" == knative.dev/toolbox/* ]]; then
+    gotoolchain=auto
+  fi
+  GOTOOLCHAIN="${gotoolchain}" \
   GOPATH="${GORUN_PATH}" \
   GOFLAGS='' \
     go run "$package" "$@"

vendor/knative.dev/hack/presubmit-tests.sh

@@ -141,7 +141,7 @@ function __build_test_runner_for_module() {
   # Don't merge these two lines, or return code will always be 0.
   # Get all build tags in go code (ignore /vendor, /hack and /third_party)
   local tags
-  tags="$(go run knative.dev/toolbox/go-ls-tags@latest --joiner=,)"
+  tags="$(go_run knative.dev/toolbox/go-ls-tags@latest --joiner=,)"
   local go_pkg_dirs
   go_pkg_dirs="$(go list -tags "${tags}" ./...)" || return $?
   if [[ -z "${go_pkg_dirs}" ]]; then

vendor/knative.dev/pkg/controller/queue_metrics.go

@@ -121,6 +121,10 @@ func (m *queueMetrics) updateUnfinishedWork() {
 	// doesn't seem to have non-hacky ways to reset the summary metrics.
 	var total float64
 	var oldest float64
+
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
 	for _, t := range m.processingStartTimes {
 		age := m.sinceInSeconds(t)
 		total += age

vendor/modules.txt

@@ -1011,10 +1011,10 @@ k8s.io/utils/net
 k8s.io/utils/pointer
 k8s.io/utils/ptr
 k8s.io/utils/trace
-# knative.dev/hack v0.0.0-20250902154142-af735b2738d6
+# knative.dev/hack v0.0.0-20251016122918-f2be520302e8
 ## explicit; go 1.21
 knative.dev/hack
-# knative.dev/networking v0.0.0-20250912164322-3fcdea3327b7
+# knative.dev/networking v0.0.0-20251022155347-806653eb2af8
 ## explicit; go 1.24.0
 knative.dev/networking/config
 knative.dev/networking/pkg
@@ -1058,7 +1058,7 @@ knative.dev/networking/test/test_images/runtime/handlers
 knative.dev/networking/test/test_images/timeout
 knative.dev/networking/test/test_images/wsserver
 knative.dev/networking/test/types
-# knative.dev/pkg v0.0.0-20250909011231-077dcf0d00e8
+# knative.dev/pkg v0.0.0-20251022154045-7da1174b871b
 ## explicit; go 1.24.0
 knative.dev/pkg/apis
 knative.dev/pkg/apis/duck