upgrade to latest dependencies

bumping knative.dev/hack 4fae780...67a5b04:
  > 67a5b04 Update community files (# 454)
  > 91eedd9 Update community files (# 451)
  > 4377a69 bump gotestfmt to newest version (# 447)
bumping k8s.io/api d826fc1...e28454b:
  > e28454b Update dependencies to v0.34.2 tag
  > 133a39c Merge remote-tracking branch 'origin/master' into release-1.34
  > fd087be clarify that staging repos are automatically published
  > ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read-only
  > 5ec86fc link to what a staging repository is
  > 08c5dee docs: clarify that this is a staging repository and not for direct contributions
  > ba64d0b Update prerelease lifecycle to v1.34
  > 25f849c Merge pull request # 132522 from sunya-ch/KEP-5075-PR
  > baa1eb1 KEP-5075: generated codes from make update
  > 740b2c9 KEP-5075: API updates
  > dd1e234 Merge pull request # 130653 from yliaog/master
  > 2af3efe extended resource backed by DRA: codegen
  > 9b05776 extended resource backed by DRA: API types.go
  > a302986 Merge pull request # 130160 from KobayashiD27/dra-device-binding-conditions
  > db5c075 Merge pull request # 133244 from carlory/fix-prerelease-lifecycle
  > 6bd2e2a KEP-5007 DRA Device Binding Conditions: Run make update
  > 7031311 Fix prerelease-lifecycle for volumeattributesclass
  > 4f9fbe2 KEP-5007 DRA Device Binding Conditions: API Update
  > a5cc2d7 Merge pull request # 133195 from nojnhuh/dra-ga-comment
  > 9bc89ec Merge pull request # 131089 from KevinTMtz/pod-level-hugepage-cgroups
  > 011db19 Update DRA Pod spec comments
  > b95b43d Merge pull request # 132942 from thockin/kyaml
  > c3ca7cf Generated files
  > 53dd546 Merge pull request # 132642 from yuanwang04/restart-rules
  > 7e5469c Re-vendor sigs.k8s.io/yaml @ v1.6.0
  > 5dc8ce7 Pod level hugepage cgroup when unset in container
  > ed2eb37 Merge pull request # 131549 from carlory/KEP-3751-GA
  > 289c671 Add container restart rules to API
  > f227971 Merge pull request # 132935 from benluddy/cbor-bump-custom-marshalers
  > 5949eec Promoted API `VolumeAttributesClass` and `VolumeAttributesClassList` to `storage.k8s.io/v1`.
  > 1560b8c Merge pull request # 132706 from pohly/dra-api-v1
  > cb2fa38 Bump to github.com/fxamacker/cbor/v2 v2.9.0.
  > d5d532e DRA API: v1 registration + tests
  > bbb3ed0 DRA API: s/v1beta2/v1/ and generated files
  > 6306295 DRA API: verbatim copy v1beta2 -> v1
  > b87ac72 Merge pull request # 133046 from toVersus/reject-windows-in-api-server
  > 2596a6b Merge pull request # 132558 from HirazawaUi/Implement-4762
  > 1ad4d8e Add PodLevelResources to the Windows OS limitations in the API doc
  > 85cd86b Merge pull request # 132106 from AndrewSirenko/vac-valid
  > 23b77d1 Add the HostnameOverride field to the Pod API
  > c68fbbe KEP-3721: Support for env files (# 132626)
  > e529f6c [KEP-3751] Allow PVC VACName to update to nil or empty when status.currentVAC is nil
  > 9c909b6 Merge pull request # 132429 from torredil/kep4876-beta
  > d0d89ae Merge pull request # 128010 from ahmedtd/pod-certificates-types
  > 2589437 Promote MutableCSINodeAllocatableCount to Beta
  > 8c320c6 Merge pull request # 133013 from aaron-prindle/master-pr-vg-csr-conditions-validation-migration
  > e7f73bf Pod Certificates: make update
  > c28bae7 generate proto
  > 2dbd7ce Pod Certificates: Basic implementation
  > 97c1db7 feat: add CSR status.conditions approved+denied declarative validation tags and associated declarative validation tags to v1 and v1beta1 types.go
  > 33ab3a2 Merge pull request # 133040 from sunnylovestiramisu/fixDescription
  > b3927ff Merge pull request # 132821 from cici37/mapBeta
  > 721f5df Update VolumeAttributesClass API Description
  > b7a83e2 Merge pull request # 133020 from pohly/apimachinery-list-map-keys
  > f35aff4 Auto gen
  > f998078 sigs.k8s.io/structured-merge-diff/v6 v6.3.0
  > 802e084 manual change
  > 7da28ad Merge pull request # 132871 from dims/bump-k8s.io/kube-openapi-to-latest-SHA-f3f2b991d03b
  > 2e37049 Merge pull request # 132656 from liggitt/selector-authz
  > 363f969 Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b)
  > 7cdc4e0 Merge pull request # 131458 from BenTheElder/hostnetwork-docs
  > f845a4d Generated files
  > 839e6c7 Merge pull request # 130230 from carlory/cleanup-CSIDriverRegistry
  > 935aac6 hack/update-codegen.sh
  > a5fc378 KEP-4601: Graduate selector authorization to stable
  > 9ca4bf8 Merge pull request # 132675 from dims/bump-sigs-k8s-io-json-no-code-changes
  > 2c44ab0 make update
  > 238cb24 document hostnetwork <> port implications
  > bfa2516 Merge pull request # 132676 from dims/bump-go.yaml.in/yaml/v3-to-v3.0.4
  > 727758a Bump sigs.k8s.io/json to latest - no code changes
  > d1fff2c clean up CSIDriverRegistry
  > d7b79f4 Bump go.yaml.in/yaml/v3 to v3.0.4
  > 59bc963 Merge pull request # 132654 from Jefftree/b-openapi
  > 732c07a Update vendor
  > ddea6e7 pin kube-openapi to v0.0.0-20250628140032-d90c4fd18f59
  > a8e4c19 Merge pull request # 132231 from czeslavo/fix-outdated-volumes-links
  > b820fad Merge pull request # 132357 from dims/drop-usage-of-forked-copies-of-goyaml.v2-and-goyaml.v3
  > f89da81 Fix outdated links in VolumeSource godocs
  > 2872eaf Merge pull request # 132504 from jpbetz/name-formats
  > d7765d1 switch to latest sigs.k8s.io/yaml v1.5.0 (run update-gofmt.sh as well)
  > 8b23126 Merge pull request # 132173 from dejanzele/feat/promote-job-pod-replacement-policy-ga
  > 005b48b Bump to latest kube-openapi
  > 9c065c5 Merge pull request # 132338 from PatrickLaabs/132274
  > f87f362 KEP-3939: Job Pod Replacement Policy; promote to GA
  > 7b9b86b Adjusting AdminAccess Type for API v1beta1
  > aa83740 adding omitempty tag and opt tag
  > f4a3fcd Merge pull request # 131354 from tomoish/fix-netpol-podselector-doc
  > 7efafe3 Merge pull request # 132269 from dims/update-to-latest-github.qkg1.top/modern-go/reflect2
  > f88c339 Fix NetworkPolicy podSelector comments
  > 7f93891 Merge pull request # 132000 from pohly/dra-api-alpha3-removal
  > 7d9c6ad Update to latest github.com/modern-go/reflect2
  > 2f1ca0f Merge pull request # 132236 from yongruilin/master_vg_ratcheting-default
  > 8075dbc DRA API: remove obsolete types from v1alpha3
  > 3813b50 run update-codegen.sh
  > be9d9f7 Merge pull request # 132054 from HirazawaUi/promote-4369-to-ga
  > f3c48f8 Merge pull request # 132103 from nojnhuh/typed-ring-buffer
  > aad5f3c update all api files
  > c56a10b Merge pull request # 131996 from ritazh/dra-adminaccess-updatelabelkey
  > afb6ec9 Update k8s.io/utils for new generic ring buffer
  > 3277454 DRAAdminAccess: update label key
  > 16b0005 Merge pull request # 131664 from jpbetz/subresources-enable-replicas
  > 90efb83 generate code
  > 241f523 Tag types with +k8s:isSubresource and +k8s:supportsSubresource for scale
  > 1a1da0a Add k8s:minimum validation to Scale.spec.replicas
  > 02d9e8e Enable validation-gen for scale group-versions
  > ffe08c7 Merge pull request # 128419 from liggitt/etcd-3.6
  > 134d870 bump etcd client to 3.6
  > 7f42380 Merge pull request # 131644 from Uladzislau97/taint-time-added
  > 917fec5 Merge pull request # 131318 from aojea/lock_servicecidr
  > 8c93631 Remove misleading comment from NodeTaint TimeAdded field
  > 39d7731 remove networking v1alpha1 and make update
  > f7e72be Merge pull request # 131595 from aojea/utils_fake_clock
  > cbbd23f update k8s.io/utils to bring fakeClock.Waiters()
  > 0484976 Merge pull request # 130989 from liggitt/creationTimestamp-omitzero
  > c5204ea bump cbor to add omitzero support
  > b8910db bump structured-merge-diff to add omitzero support
  > 7fb0838 Merge pull request # 131431 from black-dragon74/apps-v1b2-typo
  > 7421a41 Merge pull request # 131465 from pacoxu/v1.33.0-api-testdata
  > acb312c api: Fix typo in word "immediately"
  > 065d353 remove v1.31.0 api testdata
  > 94f0cf3 Add v1.33.0 API testdata
  > 9aab596 Merge pull request # 131456 from BenTheElder/staging-dep-approvers
  > 17e2a28 enable dep-approvers for staging go.mod/go.sum
  > 22b26cd Merge pull request # 130468 from jingyuanliang/PodAntiAffinity
  > 1ed622c Merge pull request # 131333 from tenzen-y/fix-successpolicy-api-comment
  > 32054dc chore: `make update` for doc changes
  > 4c4912b Merge pull request # 131256 from mimowo/job-improve-backoff-docs
  > f417f6a Job: Fix API comments for SuccessCriteriaMet
  > 4ef3c65 fix: comment on preferred PodAntiAffinity
  > d18a462 Merge pull request # 130995 from xigang/utils
  > c69ecce Improve Job API comment for the backoffLimit
  > a1c00bf Merge pull request # 130994 from BenTheElder/host-network-no-port
  > fb0e019 bump k8s.io/utils
  > e8d4d54 Merge pull request # 131088 from atiratree/rename-terminating-replicas-fg
  > 2d25876 make update
  > e832ef9 remove inaccurate hostNetwork doc comment
bumping golang.org/x/net 2002a06...9a29643:
  > 9a29643 go.mod: update golang.org/x dependencies
  > 07cefd8 context: deprecate
  > 5ac9dac publicsuffix: don't treat ip addresses as domain names
  > d1f64cc quic: use testing/synctest
  > fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
  > f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
  > 89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
  > 8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
  > 027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
  > dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
  > 9be1ff2 all: fix some comments
  > 6e243da quic: update Initial keys when handling Retry
  > 98daa2e quic: send ECN feedback to peers
  > c296faf net/http2: pool transport gzip readers
  > ef82ae8 dns/dnsmessage: return an error for too long SVCParam.Value
  > 3ba82d2 internal/quic/cmd/interop: test ChaCha20 on server
  > bb2055d dns/dnsmessage: add https svcb dns types
  > 63d1a51 http2: Allow reading frame header and body separately
  > 9f2f0b9 http2: avoid data race on DebugGoroutines in TestGoroutineLock
  > e7c005d http2: implement a more efficient writeQueue that avoids unnecessary copies.
  > b93acc2 all: use reflect.TypeFor instead of reflect.TypeOf
bumping k8s.io/code-generator 2a37835...de0a59b:
  > de0a59b Update dependencies to v0.34.2 tag
  > c03f702 Merge remote-tracking branch 'origin/master' into release-1.34
  > 341d4d6 clarify that staging repos are automatically published
  > 5e672d7 add pointer to CONTRIBUTING.md for more details on contributing, clarify read-only
  > 96cba81 link to what a staging repository is
  > 3710adb docs: clarify that this is a staging repository and not for direct contributions
  > 9699fe1 Merge pull request # 132942 from thockin/kyaml
  > fe7d3af Merge pull request # 132935 from benluddy/cbor-bump-custom-marshalers
  > 7adb5d5 Re-vendor sigs.k8s.io/yaml @ v1.6.0
  > ab0f416 Bump to github.com/fxamacker/cbor/v2 v2.9.0.
  > bd6c0b1 Merge pull request # 133112 from yongruilin/master_vg-cleanup
  > 0a3bf7e fix(validation-gen): correct typos in comments and documentation
  > c4b0573 chore(validation-gen): remove TODO regarding ratcheting behavior for slices and maps
  > 9eb9654 Merge pull request # 132378 from bartoszmajsak/gobin-fix
  > 5de635b Merge pull request # 133038 from yongruilin/master_vg-hold-listmap-unique
  > ac4fcb6 codegen tool: resolves GOBIN via `go env`
  > 6d18ab2 chore(validation-gen): hold uniqueness check of listmap
  > 962847a Merge pull request # 133008 from aaron-prindle/master-pr-vg-union-tags-and-item-tag-chaining-support
  > 80736d7 Merge pull request # 133020 from pohly/apimachinery-list-map-keys
  > 197c3fd add item + union and item + zeroroneof output tests
  > 907f0a1 Merge pull request # 131293 from skitt/typo-watchAction
  > 332022e sigs.k8s.io/structured-merge-diff/v6 v6.3.0
  > 44978dd add validate/zeroorone_test.go and add +k8s:zeroOrOneOfMember output tests
  > 9687e92 Merge pull request # 132969 from liggitt/conversion-gen-equality
  > be52b3e Typo fix: watchActcion
  > 4a14064 feat(validation-gen): add +k8s:zeroOrOneOfMember tag validator and associated validate method
  > 73dcfb3 Merge pull request # 132871 from dims/bump-k8s.io/kube-openapi-to-latest-SHA-f3f2b991d03b
  > 26fcc63 Fix conversion-gen caching incorrect memory equality comparisons
  > 12d1d6c add validate/union_test.go and add +k8s:unionMember and +k8s:unionDiscriminator output tests
  > d721023 Merge pull request # 132934 from ylink-lfs/chore/residual_strptr_removal
  > 788f0db Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b)
  > e28b8fe Add conversion-gen memory equality test
  > a73eb91 feat(validation-gen): add +k8s:unionMember and +k8s:unionDiscriminator tag validators and associated validate methods
  > 327c47e chore: residual strPtr utility removal with ptr.To
  > e74fea5 refactor item.go with buildMatchConditions, make itemTagValidator a LateTagValidator
  > b537937 Merge pull request # 132469 from yongruilin/master_vg_ratcheting-list
  > 09965b5 add ParentPath to context, remove Parent from context and plumb changes in validators
  > 21ecbdc chore(validation-gen): reorder imports
  > 1348df1 allow field validators to generate variables
  > a0c3218 run update-codegen
  > 51d981a add +k8s:neq tests
  > e78ab3f feat: add +k8s:neq tag which enforces field is neq to a specified comparable value
  > 8d00f99 feat(validation-gen): add new test cases for item validation
  > dfed150 feat(validation-gen): add k8s:item
  > 22c522e feat: Add validation ratcheting for subfields tag
  > 3cbbf15 feat(validation-gen): add new test cases for validation of slices and maps
  > 0889c7b feat(validation-gen): enhance validation functions for slices and maps
  > 15778ad refactor(validation-gen): streamline type validation logic
  > 4b28aae feat(validation-gen): add FieldValidator
  > c81dd5d Merge pull request # 132823 from yongruilin/master_vg_enum
  > 7891cc1 feat(validation-gen): add k8s:enum validator
  > 99577d5 Merge pull request # 132675 from dims/bump-sigs-k8s-io-json-no-code-changes
  > cace932 Merge pull request # 132677 from dims/update-github.qkg1.top/emicklei/go-restful/v3-to-v3.12.2
  > 1b5210b Bump sigs.k8s.io/json to latest - no code changes
  > 7934b92 Merge pull request # 132676 from dims/bump-go.yaml.in/yaml/v3-to-v3.0.4
  > b1440b6 Update github.com/emicklei/go-restful/v3 to v3.12.2
  > df04996 Bump go.yaml.in/yaml/v3 to v3.0.4
  > 851758d Merge pull request # 132654 from Jefftree/b-openapi
  > 4e15628 Update vendor
  > 5bc4bc4 pin kube-openapi to v0.0.0-20250628140032-d90c4fd18f59
  > b32cd00 Merge pull request # 132584 from alvaroaleman/fix-asfafs
  > fa37f4d Re-generate applyconfigurations
  > 8d6b21f Applyconfig-gen: Only the root type is an applyconfiguration
  > 789f480 Merge pull request # 132521 from gavinkflam/130358-migrate-extract-comment-tags-chunk-2
  > 0512201 Merge pull request # 132357 from dims/drop-usage-of-forked-copies-of-goyaml.v2-and-goyaml.v3
  > e843c1d cleanup: Migrate more usages of deprecated function ExtractCommentTags
  > 08e0763 Merge pull request # 132504 from jpbetz/name-formats
  > e544dec switch to latest sigs.k8s.io/yaml v1.5.0 (run update-gofmt.sh as well)
  > 9d7f7de Bump to latest kube-openapi
  > 59e0378 Drop usage of forked copies of goyaml.v2 and goyaml.v3
  > ded9f55 Merge pull request # 131711 from gavinkflam/130358-migrate-extract-comment-tags
  > 1007f02 Merge pull request # 132194 from alvaroaleman/local0dev
  > 494c27c cleanup: Migrate deprecated function ExtractCommentTags
  > 38d3a22 Re-Generate applyconfigs
  > 11b3675 Update applyconfiguration-gen so acs implement runtime.applyconfiguration
  > c1b16e0 Merge pull request # 132221 from dims/new-cmp-diff-impl
  > 2eb117f Merge pull request # 132257 from p0lyn0mial/upstream-watchlist-typed-client-rm
  > a2f5298 Add a replacement for cmp.Diff using json+go-difflib
  > 0ccc8d6 Merge pull request # 132269 from dims/update-to-latest-github.qkg1.top/modern-go/reflect2
  > 834c529 ./hack/update-internal-modules.sh
  > e2a9df0 Update to latest github.com/modern-go/reflect2
  > c8449ad make update
  > b6288af Merge pull request # 132135 from jpbetz/options-to-slice-master
  > dbb3aad client-gen/code-generator: remove watchList
  > 6dae3d6 Merge pull request # 132236 from yongruilin/master_vg_ratcheting-default
  > 676f045 Change option to a slice
  > a6cccc8 add ratcheting testcase for validateFalse tag
  > aecc195 add ratcheting testcase for minimum tag
  > a8e1aec run update-codegen.sh
  > 73a5aa2 feat: add default ratcheting support
  > 9de4caf feat(validation-gen): Refactor type handling and introduce utility functions
  > 0771441 Merge pull request # 132217 from yongruilin/master_vg_refactor-test
  > 7194028 Merge pull request # 132138 from yongruilin/master_vg_mapofslice
  > a59006b Remove unused Expect methods in testscheme
  > 8b776ba Merge pull request # 132103 from nojnhuh/typed-ring-buffer
  > 4b5dfd6 chore: Add validation error for unsupported map of slices in validation-gen
  > 10c230f Add ExpectMatches to ValidationTester
  > 4cc9f30 Merge pull request # 132130 from jpbetz/codtags-master
  > 35fb260 Update k8s.io/utils for new generic ring buffer
  > 7ebf8c2 Remove unsupported map of slice validation for non-byte elements in validation-gen
  > b7eb961 Add type information to tag Docs() and use it to typecheck tags
  > b24e04f Switch to using named args in output_tests
  > b67d6f7 Use codetags in validation-gen
  > 9dc7577 Merge pull request # 132110 from jpbetz/gengo-bump
  > 3a91e97 Fix field path for embedded fields in root types
  > 277c838 Support embedded fields properly
  > 59e4291 Bump gengo/v2 to latest
  > 6a7575e Merge pull request # 131664 from jpbetz/subresources-enable-replicas
  > 476ad11 generate code
  > 7d13408 Simplify subresource matching
  > da14361 Clarify errors and improve tests
  > a2f22c0 Add output_tests
  > 7dbbf20 Add +k8s:isSubresource and +k8s:supportsSubresource tags
  > be45a21 Enable scale subresource in generated validations
  > ae11bdb Merge pull request # 131628 from skitt/applyconfig-nil
  > 3a6fa0a Merge pull request # 128419 from liggitt/etcd-3.6
  > 3f8aab2 Run codegen
  > 843fe75 bump etcd client to 3.6
  > d00acb3 applyconfig-gen: handle non-pointer embedded members
  > 0469f81 Merge pull request # 131777 from BenTheElder/exit-codes
  > 4816fe8 Add a breaking example for applyconfig-gen
  > 5635b91 verify scripts: preserve exit code
  > bf27779 Merge pull request # 131608 from omerap12/migrate-ExtractCommentTags-conversion
  > 35e45a4 Merge pull request # 131682 from thockin/kk_recursive_bug
  > 87a22ae propogate error
  > a3b258d Fix broken recursion
  > 5e0133d Migrate ExtractCommentTags to ExtractFunctionStyleCommentTags
  > 7681601 Merge pull request # 131616 from jpbetz/typeconverter-cleanup
  > 949efda Merge pull request # 131635 from thockin/kk_cleanup_codegen
  > 85cb090 generate code
  > a6624cb Better logs and debugging
  > c9322d8 Reorganize scheme type converter into apimachinery utils
  > 9e922cc Rename discover() to discoverType()
  > afec841 Reorder and merge blocks handling named types
  > 19c4cc4 hasValidations should return cached values first
  > 6ce150b Fix lint warnings
  > 3cbdaf2 Merge pull request # 131560 from jpbetz/validation-gen-subresource-simplification
  > ca653cc Merge pull request # 131399 from thockin/kk_realType
  > 5edf63c Update codegen
  > ec35be3 Merge pull request # 131477 from pohly/golangci-lint@v2
  > 4d9a301 Retool validator utils realType and unaliasType
  > cac13ed Reenable guard to only validat root and scale subresources until ratcheting merges.
  > 1124c41 Merge pull request # 131595 from aojea/utils_fake_clock
  > 41ef868 chore: bump golangci-lint to v2
  > 29ae2c1 Change v8n context.Type and Parent on typedefs
  > 8676754 Remove unused function
  > 334b456 update k8s.io/utils to bring fakeClock.Waiters()
  > c35f5f4 Disallow pointers as listmap keys
  > cd43ef3 Update codegen
  > 0c4f119 Merge pull request # 130989 from liggitt/creationTimestamp-omitzero
  > a642302 Handle typedef fields in optional validations
  > 15ef381 Add subresource to operation, do not special case subresources in validation-gen
  > e810653 bump cbor to add omitzero support
  > 3931dc3 Fix immutable validation for structs with pointers
  > 7fe8373 bump structured-merge-diff to add omitzero support
  > 84e7e0c Add test cases for immutable to verify pointers
  > 6c44fd7 Merge pull request # 131297 from thockin/kk_one_type_discoverer
  > 83f4444 Add tests for optionalness of typedef fields
  > 8a3b9fd Create a single TypeDiscoverer for all inputs
  > 2989947 Merge pull request # 130995 from xigang/utils
  > 9d701a4 Merge pull request # 130981 from thockin/kk_hack_verify_api_lint
  > c901063 bump k8s.io/utils
  > 2a635fa Merge pull request # 131103 from ahrtr/etcd_sdk_20250328
  > 38c3661 Make validation-gen lint errors easier to read
  > 13b0aa1 bump etcd 3.5.21 sdk
bumping k8s.io/apiserver beb3642...92c4c2c:
  > 92c4c2c Update dependencies to v0.34.2 tag
  > d24fa2b Merge pull request # 134500 from vikasbolla/automated-cherry-pick-of-# 133310-upstream-release-1.34
  > 67ad9b5 authz tests: delay response in context cancelled scenario
  > 3cd3d02 Merge pull request # 133879 from serathius/automated-cherry-pick-of-# 133873-origin-release-1.34
  > cb753d5 Disable estimating resource size for resources with watch cache disabled
  > 72857c3 Merge pull request # 133866 from serathius/automated-cherry-pick-of-# 133817-origin-release-1.34
  > 5e12dff Disable collecting stats for resources not setting prefix to prevent error logs
  > e6849cd Merge remote-tracking branch 'origin/master' into release-1.34
  > ec0177d Fix storage counting all objects instead just objects for resource
  > 04f597a Merge remote-tracking branch 'origin/master' into release-1.34
  > 2fa94a7 clarify that staging repos are automatically published
  > 4421d9e add pointer to CONTRIBUTING.md for more details on contributing, clarify read-only
  > 987834b link to what a staging repository is
  > f77153a docs: clarify that this is a staging repository and not for direct contributions
  > dfa9a8a Merge remote-tracking branch 'origin/master' into release-1.34
  > 26f61c2 Remove DeprecatedVersion for apiserver_storage_objects, adjust help text
  > aced81d Merge remote-tracking branch 'origin/master' into release-1.34
  > df8dfa6 Use Delete() instead of DeleteLabelValues() for etcd metrics
  > 8f1beab fix flake on TestStreamTranslator_WebSocketServerErrors
  > 1c694e9 websocket streamtranslator increament metrics before writing status
  > c8e4cae TestStreamTranslator_BlockRedirects use subtests
  > 7de8f16 Merge pull request # 133226 from ivanvc/bump-etcd-to-3.6.4
  > cdf2b60 Bump etcd sdk to v3.6.4
  > b0d4f2b Merge pull request # 132942 from thockin/kyaml
  > e08cc19 Merge pull request # 132935 from benluddy/cbor-bump-custom-marshalers
  > 4e1a04b Re-vendor sigs.k8s.io/yaml @ v1.6.0
  > 4f01844 Merge pull request # 132837 from JoelSpeed/fix-max-elements-x-int-or-string
  > 4ca799b Bump to github.com/fxamacker/cbor/v2 v2.9.0.
  > 953f6a8 Merge pull request # 133159 from ylink-lfs/chore/ptrto_migration
  > 76004fd Fix IntOrString cost estimation when schema has a MaxLength constraint
  > dae80c2 List available endpoints for kube-apiserver (# 132581)
  > f6d019a chore: ptrTo util removal with ptr.To
  > 26d1b81 Merge pull request # 133146 from liggitt/debug-flake
  > b6a8cfb Merge pull request # 129837 from danwinship/aggregated-apiserver-endpointslices
  > b2f2a14 Add flake debugging for admission test
  > a2aad46 Merge pull request # 128010 from ahmedtd/pod-certificates-types
  > ac3b5ee Port aggregated apiserver discovery to EndpointSlices
  > 8ec4781 Merge pull request # 132340 from dashpole/graduate_tracing
  > 9dbb4ea Pod Certificates: Basic implementation
  > c7df1da Add utilities for getting EndpointSlices for a Service
  > cd0e722 Merge pull request # 132704 from p0lyn0mial/upstream-enable-watchlist
  > 3c805a8 graduate APIServerTracing featuregate to GA
  > 6e2593a Merge pull request # 133053 from serathius/jitter
  > 9f7fe0f kube-apiserver: promote WatchList feature to beta
  > 7140865 promote TracingConfiguration to v1
  > d5a841c Merge pull request # 131700 from cici37/celList
  > 83a4b98 Add jitter to priodically executed process in storage to avoid too concurrent executions
  > 431e468 Merge pull request # 133061 from serathius/apf_list
  > ebe7506 Add support for CEL list library.
  > 2ca4f9c Merge pull request # 133058 from michaelasp/fixpointer
  > 3007d9c Account for caching and maximum object size when estimating LIST request
  > 010ce73 fix: Compare versions instead of pointer comparison
  > 530db0a Merge pull request # 132299 from aramase/aramase/f/authn_config_hash_metric
  > 9955afd Merge pull request # 133034 from serathius/apf_maxseats
  > 31fd0fd Add automatic_reload_last_config_info metric for auth configs
  > 8cb2ab9 Merge pull request # 133010 from cici37/promote-Cel
  > 7cfdd00 Increase maxSeats for List requests
  > f6d9871 Add generic config info custom collector
  > c0b5cc2 Merge pull request # 132965 from serathius/metrics-storage-objects
  > 1855313 Update cel-go to v0.26.0
  > b8b19e9 Merge pull request # 132821 from cici37/mapBeta
  > e1b2eb3 Deprecate apiserver_storage_objects and replace it with apiserver_resource_objects metric using labels consistent with other metrics
  > d70abb8 Merge pull request # 133035 from cici37/test
  > 8c2d6f3 manual change
  > cdcc918 Merge pull request # 133020 from pohly/apimachinery-list-map-keys
  > f4c52e5 Refactor target check
  > ac3910b Promote feature gate
  > f05b685 Merge pull request # 132936 from cici37/mapMetrics
  > 0e7a782 sigs.k8s.io/structured-merge-diff/v6 v6.3.0
  > e18eaa7 Fix the cost issue to match the bug fix for target being nil in CEL side.
  > cb7f413 Merge pull request # 132893 from serathius/resource-size
  > fa2b77c Remove redundant metric field.
  > f6229bc Merge pull request # 132950 from serathius/apf_recursive
  > 478396c Add apiserver_resource_size_estimate_bytes metric
  > a8d5465 Merge pull request # 132833 from saschagrunert/kms-gogo
  > f3eb956 Use object size estimation for non-recursive list
  > 0e62c27 Merge pull request # 132817 from p0lyn0mial/upstream-watchlist-table-none-server-bk
  > ad12519 Convert `k8s.io/kms/apis` from gogo to protoc
  > 97956c8 Merge pull request # 132901 from serathius/watchcache-snapshots-beta
  > deed26f endpoints/handlers/respone: include metadata when IncludeNone and watchlist requested
  > 4b361d9 Graduate ListFromCacheSnapshot to Beta
  > f693068 Merge pull request # 132944 from serathius/watchcache-mark-inconsistent
  > 7c6d88b Merge pull request # 132768 from enj/enj/f/authn_egress
  > d2387bc Inconsistency resets cache snapshots and prevents collection of new ones until cache is marked consistent again
  > 8253534 Merge pull request # 132163 from yue9944882/fix-audit-authn-latency
  > bcfdd8b Add egress selector support to JWT authenticator
  > 38d4655 Merge pull request # 132276 from michaelasp/warningemu
  > a9fe906 add unit-test for ensuring authn latency annotation
  > 09d5e11 Merge pull request # 132871 from dims/bump-k8s.io/kube-openapi-to-latest-SHA-f3f2b991d03b
  > f712448 Add warnings for use of Alpha features with Emulated Version
  > a678f31 fix: record authentication latency before audit filter wraps up
  > 9172f0d Merge pull request # 132513 from xiaoweim/validation-cleanup-invalid
  > 14f046d Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b)
  > c114bd8 Merge pull request # 132656 from liggitt/selector-authz
  > cfc55fd address review comments
  > 94a87ef Merge pull request # 132932 from serathius/apf_use_size
  > c31c675 KEP-4601: Graduate selector authorization to stable
  > 528a50d Cleanup: Remove field name from invalid field detail message
  > dde92be Merge pull request # 132928 from p0lyn0mial/upstream-watchlist-reflector-table-unsupported
  > 0a86ef7 Use object size to estimate list cost assigning 1 sear per 100KB
  > 0351cc3 Merge pull request # 132884 from serathius/watchcache-detect-inconsistency
  > 8a7527b endpoints/handlers/get: remove watchListEndpointRestrictions
  > f0d91f4 Merge pull request # 132645 from serathius/kep-2340-ga
  > d8d8f4a Enable running cache inconsistency detection by default
  > 8c56fb9 Merge pull request # 132920 from ylink-lfs/chore/maxptr_removal
  > b509255 Graduate ConsistentListFromCache to GA
  > 328b3e8 Merge pull request # 127322 from vrutkovs/tracing-set-audit-id
  > f9dc322 chore: maxPtr utility removal with ptr.To
  > 593b1eb Merge pull request # 132915 from serathius/fix-test-progress-notify
  > 2a1e316 tracing: set audit-id on incoming requests
  > b82f4b2 Fix TestProgressNotify for etcd v3.6.2
  > 6b3e0a5 Merge pull request # 132079 from cici37/mapMetrics
  > 5a9f916 Merge pull request # 132876 from serathius/watchcache-compact
  > 62c7310 Add metrics for mutation
  > 6016cdf Merge pull request # 132803 from aramase/aramase/f/token_request_uid_check
  > 19e8aed Compact watch cache based on last observed etcd compaction
  > 6dc2a56 Merge pull request # 132848 from serathius/etcd3-compactor
  > c42cceb Add TokenRequestServiceAccountUIDValidation feature gate with UID validation
  > dda2fcb Expose compaction revision from compactor
  > 34f5472 Add test for compactor
  > 532260d Merge pull request # 132813 from serathius/compact-test
  > 0a000a9 Merge pull request # 132715 from googs1025/fix/flaky_patch
  > 2f077fc Add testing compaction in storage List tests
  > e824ccb Merge pull request # 132788 from ylink-lfs/chore/strptr_removal
  > f482a77 fix: TestPatchResourceTimeout flaky test
  > d7827fc Merge pull request # 132794 from PatrickLaabs/132749-boolptr
  > 8cd1907 chore: remove strPtr usage with ptr.To instead
  > 32cbb81 Merge pull request # 132799 from BenTheElder/etcd-apiserver-panic
  > d972fef chore: replacement of helper functions to ptr packge
  > bf8c1a6 storage/etcd3: add back missing errcheck
  > 5e1c1db Merge pull request # 132752 from PatrickLaabs/132086-apiserver-2
  > 03b538a Merge pull request # 132751 from PatrickLaabs/132086-apiserver-1
  > d0ee71e chore: second depr. pointer pkg replacement for apiserver
  > 9b1ef94 chore: first depr. pointer pkg replacement for apiserver
  > 7364e00 Merge pull request # 132314 from thockin/jp_nicer_api_errors
  > d2a6966 Merge pull request # 131902 from liuxu623/fix-storage-objects-metrics
  > 19608fe WIP: Fix tests
  > ab47d6f remove apiserver_storage_objects metrics after crd deleted
  > c93fe8d Merge pull request # 132675 from dims/bump-sigs-k8s-io-json-no-code-changes
  > 2898f40 Merge pull request # 132677 from dims/update-github.qkg1.top/emicklei/go-restful/v3-to-v3.12.2
  > 6113748 Bump sigs.k8s.io/json to latest - no code changes
  > 3637a3a Merge pull request # 132049 from googs1025/fix/data_race_patch
  > 6bc5ac2 Update github.com/emicklei/go-restful/v3 to v3.12.2
  > 179348d Merge pull request # 132676 from dims/bump-go.yaml.in/yaml/v3-to-v3.0.4
  > c5cc58d fix: data race for patchResource func
  > b6975df Bump go.yaml.in/yaml/v3 to v3.0.4
  > e26c3d7 Merge pull request # 132654 from Jefftree/b-openapi
  > 7710d9f Merge pull request # 132648 from serathius/kep-5116-ga
  > 08b1bbe Update vendor
  > 2c9f20f Graduate streaming list encoding feature gates
  > ff84ca3 pin kube-openapi to v0.0.0-20250628140032-d90c4fd18f59
  > 3565462 Merge pull request # 132472 from xiaoweim/validation-cleanup
  > 09be259 Merge pull request # 132625 from ylink-lfs/chore/rest_delete_utilpointer_removal
  > af5056a Cleanup: Remove redundant detail messages in field.Required
  > ee98ed2 Merge pull request # 128767 from knrc/nested-filterlatency-tracing
  > 6874062 chore: remove utilpointer usage in package staging/src/k8s.io/apiserver/pkg/registry/rest/delete
  > 06b7bf2 Merge pull request # 132438 from dims/golangci-plugin-for-sorting-feature-gates
  > 8cf49c7 Simplify span handling
  > 8c68532 Ensure all the files have the updated sorting
  > 8285a27 Trace across start handler invocations, nesting spans
  > 895f2b3 Merge pull request # 132355 from serathius/apf_estimate_size
  > 2ca55b4 Merge pull request # 132150 from serathius/watchcache-consistent-list
  > 67c4a8a Add benchmark for SizeBasedListCostEstimate feature
  > eaf6e48 Handle consistent LIST in watch cache to avoid incorrect semantics while setting ResourceVersion on options
  > df850b5 Override getKeys when cacher is enabled
  > 07ec5c5 Merge pull request # 132357 from dims/drop-usage-of-forked-copies-of-goyaml.v2-and-goyaml.v3
  > b805c4d Run background cleanup goroutine
  > 662ba26 Merge pull request # 132504 from jpbetz/name-formats
  > 8ee91f3 switch to latest sigs.k8s.io/yaml v1.5.0 (run update-gofmt.sh as well)
  > cf27dab Estimate average size of objects in etcd and plug it into request cost estimator
  > a77ab41 client-go/reflector: stop exposing UseWatchList (# 132453)
  > bab2fbd Bump to latest kube-openapi
  > dd8cd79 Drop usage of forked copies of goyaml.v2 and goyaml.v3
  > 1a56a2f Merge pull request # 132374 from PatrickLaabs/132358
  > 942549e Merge pull request # 132497 from p0lyn0mial/upstream-watchlist-etcd-cacher
  > fdccb8b fixing large resourceversion and limit for storages
  > 3f2a0b7 Merge pull request # 132499 from liggitt/unwanted-json-patch-v5
  > 0d3a31d apiserver/storage/cacher/listwatcher: error when the WatchList FG is disabled
  > 75e6971 Merge pull request # 132470 from michaelasp/fixInvalidObj
  > 3d4aed0 Add json-patch v4 compatibility test
  > 389ff85 Merge pull request # 132479 from p0lyn0mial/upstream-watchlist-cacher-listwatcher
  > a47cc30 fix: Improve error messaging on updating a deleted object
  > 0e36545 apiserver/cacher: properly wire listwatch options to the listwatcher
  > 0dd61ee Merge pull request # 132454 from serathius/watchcache-close
  > baef40d Move UnsafeCorruptObjectDeletion outside of etcd3.New function
  > d16c916 Merge pull request # 129438 from pacoxu/apiserver-probe-etcd
  > 7a9026c Merge pull request # 132253 from serathius/watchcache-fallback-test
  > 9388b76 add seperate health check/probe for multi etcd override servers
  > d76c79a Merge pull request # 132221 from dims/new-cmp-diff-impl
  > 9b695a5 Validate requests sent to etcd in TestList "test List with limit" scenario
  > 2bff744 add etcd server overrides to etcd probe factory for healthz and readyz
  > 3b43a1a Merge pull request # 132244 from hakuna-matatah/1.33-regression-w-test-validation
  > 6db9ead Add a replacement for cmp.Diff using json+go-difflib
  > 8162f5e apiserver/handlers/watch: stop encoding initialEventsListBlueprint (# 132326)
  > 80cef81 Fix -Consistent paginated lists serve from cache
  > deb30e3 Merge pull request # 132177 from pgimalac/apiserver-avoid-template-for-dce
  > 1f47d05 chore(apiserver): avoid using html template which disables dce
  > 081f251 Merge pull request # 132165 from gavinkflam/130690/fix-admission-control-response-codes
  > 89f1e0c Merge pull request # 132269 from dims/update-to-latest-github.qkg1.top/modern-go/reflect2
  > 0e38ecf Expand webhook test to check rejection metrics
  > a2f3ed4 Update to latest github.com/modern-go/reflect2
  > e4c9db3 bug: Fix misleading response codes in admission control metrics
  > 6bf08e1 Merge pull request # 132135 from jpbetz/options-to-slice-master
  > d9e31a7 Merge pull request # 132238 from aramase/aramase/c/cleanup_deprecated_enc_config_metrics
  > 13e6a3c Change option to a slice
  > 65bd2fa Merge pull request # 132239 from dims/update-to-etcd-3.6.1-in-vendor
  > dc0ee6e Remove deprecated encryption config controller metrics
  > f294209 Update to etcd v3.6.1 in vendor/
  > 8aa4209 Merge pull request # 131916 from aramase/aramase/f/authn_config_ga
  > f834375 Update tests for StructuredAuthenticationConfiguration feature gate GA
  > 6b794db Set StructuredAuthenticationConfiguration feature gate to GA in v1.34
  > 8a7311d Merge pull request # 132209 from dims/update-github.qkg1.top/spf13/cobra-v1.9.1eksctl
  > d9b6bd1 Merge pull request # 131654 from vinayakankugoyal/anonGA
  > ed9f8fc update github.com/spf13/cobra v1.9.1
  > f55aaff Merge pull request # 132191 from AwesomePatrol/pass-ctx-to-count
  > eadbc19 KEP-4633: Graduate to Stable.
  > 7cd49ca Add context to Count()
  > 92c5638 Merge pull request # 132103 from nojnhuh/typed-ring-buffer
  > 2c9afbf Merge pull request # 131979 from serathius/watchcache-initialization-ga
  > 053a8b2 Update k8s.io/utils for new generic ring buffer
  > 7d6aa8a Merge pull request # 132082 from aramase/aramase/t/kep_3331_revocation_unit_test
  > 784d289 Gradute ResilientWatchCacheInitialization to GA
  > 02450b6 Merge pull request # 132061 from miltosdoul/fix_typeprovider_datarace
  > 851e917 KEP-3331: Add test to simulate revocation via user validation rule using unique identifier (jti)
  > 99e4fe9 fix: ResolverTypeProvider data race
  > b50caf5 Merge pull request # 131798 from aramase/aramase/f/authn_metrics_beta
  > 73e127f Merge pull request # 131951 from dims/drop-usages-of-deprecated-otelgrpc-methods
  > 2ce736f Promote automatic_reloads of authn config metrics to BETA
  > 255fa69 Merge pull request # 131664 from jpbetz/subresources-enable-replicas
  > b887c9e Drop usages of deprecated otelgrpc methods
  > 4b98f13 Merge pull request # 131768 from aramase/aramase/f/authz_metrics_stable
  > d6a8a1a Clarify errors and improve tests
  > 7937de3 Merge pull request # 131845 from serathius/unify-metrics
  > 12fab5d Promote automatic_reloads of authz config metrics to BETA
  > 2f8595c Clarify group version lookup in validateDeclaratively
  > 08959fe Merge pull request # 131752 from aramase/aramase/f/kep_3331_v1_api
  > a559cb8 Unify references to group resource in metrics
  > 5009571 Add +k8s:isSubresource and +k8s:supportsSubresource tags
  > 2055ba2 Merge pull request # 131838 from dims/bump-google.golang.org/grpc-to-google-v1.72.1
  > 9333a5f Duplicate v1beta1 AuthenticationConfiguration to v1
  > fd89bf8 Add subresource mapping support to ValidateDeclaratively and introduce configs
  > df39bcd Merge pull request # 131704 from karlkfi/karl-watch-subtests
  > 569dd04 Bump google.golang.org/grpc v1.72.1
  > 73a9ddd Merge pull request # 131766 from serathius/flake-TestGetCacheBypass
  > 8096169 test: Use sub-tests in watch tests
  > 062128c Merge pull request # 128419 from liggitt/etcd-3.6
  > 6764e31 Separate getList and watch errors to prevent TestGetCacheBypass flakes
  > 067a213 Set non-experimental WatchProgressNotifyInterval config field
  > 057e0d2 bump etcd client to 3.6
  > e80da78 Merge pull request # 131706 from karlkfi/karl-close-watch-tests
  > 9e1714f Merge pull request # 131725 from dims/avoid-encoding-in-log-response-object-when-we-dont-need-it
  > 32e916b test: Close response body in watch tests
  > bc489d7 Update staging/src/k8s.io/apiserver/pkg/audit/request_log_test.go
  > b45c454 review from tallclair
  > bda7e28 Avoid encoding in LogResponseObject when we are not going to use it
  > 9b509bf Merge pull request # 131694 from dims/eliminate-audit-context-set-event-level
  > 2ffdf90 Merge pull request # 131680 from karlkfi/karl-test-http-context
  > 1ffdd24 Eliminate AuditContext`s SetEventLevel
  > f2b80d7 Merge pull request # 131676 from karlkfi/karl-ioutil
  > 1552f6c test: pass the test context to http requests
  > 2bc5191 Merge pull request # 129472 from dims/api-server-crashes-on-concurrent-map-iteration-and-write
  > 46dd96c refactor: Stop using ioutil in apiserver
  > 1527793 Merge pull request # 131656 from karlkfi/karl-request-methods
  > e6df86e Fix API server crash on concurrent map iteration and write
  > 93c8ec7 Merge pull request # 131616 from jpbetz/typeconverter-cleanup
  > 61451f5 refactor: Add request method constants
  > 007464a Merge pull request # 131575 from ali-a-a/deflake-watch-not-hanging-on-startup-failure
  > 5f14a1e Reorganize scheme type converter into apimachinery utils
  > 9725094 Merge pull request # 131596 from jpbetz/cel-reflect-extra-tests
  > b6cfd80 pkg/storage/cacher/cacher_whitebox_test: deflake TestWatchNotHangingOnStartupFailure when ResilientWatchCacheInitialization is on
  > 724cb01 Merge pull request # 131560 from jpbetz/validation-gen-subresource-simplification
  > 62514be Apply feedback
  > 11e35f7 Merge pull request # 131627 from dims/mutating-webhook-error
  > 0de899d Add subresource to operation, do not special case subresources in validation-gen
  > 7e75755 Expand has() tests for omitempty and omitzero
  > 71463fe Adding test case for the webhook behavior change
  > 0f91510 Treat error decoding a mutating webhook patch as error calling the webhook
  > 23913f0 Merge pull request # 131559 from jpbetz/fix-unstructured-to-val-equality
  > eeced26 Merge pull request # 131595 from aojea/utils_fake_clock
  > c199f9d Fix CEL equality bug for structs will nil field not marked as omitempty
  > d8f5cf7 Merge pull request # 131574 from enj/enj/t/oidc_cel_unescape
  > 73b2a22 update k8s.io/utils to bring fakeClock.Waiters()
  > 3dae57e Merge pull request # 130989 from liggitt/creationTimestamp-omitzero
  > f2b320d jwt: support CEL expressions with escaped names
  > 0d11839 Drop null creationTimestamp from test fixtures
  > b5e431b bump cbor to add omitzero support
  > d22318d bump structured-merge-diff to add omitzero support
  > 8776678 Merge pull request # 131573 from enj/enj/t/oidc_nested_cel
  > cb5a7a8 jwt: add unit tests for using CEL with deeply nested claims
  > a18370f Merge pull request # 131536 from enj/enj/r/oidc_cel_activation
  > de95d35 Merge pull request # 131460 from jpbetz/cel-value-reflect
  > dbbb6a0 jwt: refactor CEL eval to drop unstructured and map[string]any
  > 847f0cb Appease linters
  > f52dfa0 Add lazy reflective CEL object wrapper
  > a50d13f Merge pull request # 131434 from pacoxu/fsnotify
  > 201e774 Merge pull request # 131444 from erdii/update-cel-go
  > f541759 bump fsnotify v1.9.0
  > 3a062dc chore: update github.com/google/cel-go dependency to v0.25.0
  > 4a10644 Merge pull request # 131435 from wojtek-t/fix_watcher
  > fc69168 Fix etcd3 watcher flake
  > 85b0cb4 Merge pull request # 129515 from nojnhuh/typos
  > 42db0bf Merge pull request # 131366 from xigang/resource_encoding
  > a4a6707 Fix comment typos
  > fe06bdc Merge pull request # 131323 from karlkfi/karl-watch-test-move
  > 056896e Fix typo in ResourceEncodingConfig comment
  > cab2303 Merge pull request # 131215 from tosi3k/cleanup-leader-election
  > 4c858d1 chore: move watch handler tests to handlers pkg
  > c160237 Merge pull request # 131162 from wojtek-t/simplify_etcd3_watcher
  > cd728bc Remove FlowSchemas handling non-leases-backed leader election
  > 492c873 Merge pull request # 130995 from xigang/utils
  > 4f42467 Simplify etcd3 watcher
  > 6da3566 Merge pull request # 130994 from BenTheElder/host-network-no-port
  > 8ff7962 bump k8s.io/utils
  > 213eed6 Allow disabling caching for webhook authorizers when using `apiserver.config.k8s.io/v1{alpha1,beta1}.AuthorizationConfiguration` (# 129237)
  > 0710a6f make update
  > 82f6fe3 Merge pull request # 127126 from mengqiy/patch-2
  > 81c5d13 remove inaccurate hostNetwork doc comment
  > 8181c85 Merge pull request # 131359 from deads2k/disable
  > c9834df Add example in etcd override flag help text
  > f5da7d2 Stop exposing list-via-watch from the server
  > 03ddc41 Merge pull request # 131196 from siyuanfoundation/forward-api
  > 2a113db Merge pull request # 131204 from dims/move-to-released-version-of-prometheus/client_golang-v1.22.0-from-rc.0
  > 5a4ec0a bug fix: fix version order in emulation forward compatibility.
bumping k8s.io/client-go eb437e3...54601aa:
  > 54601aa Update dependencies to v0.34.2 tag
  > 1bb1ad2 Merge pull request # 134589 from liggitt/automated-cherry-pick-of-# 134588-upstream-release-1.34
  > 2505205 Remove invalid SAN certificate construction
  > 7ffba0f Merge pull request # 134004 from DerekFrank/automated-cherry-pick-of-# 133573-upstream-release-1.34
  > 145cb8f gofmt and review feedback
  > ddcdc12 fix: Update unit test to catch actual nil Labels case and fix functionality to handle nil Labels
  > 97396af Merge remote-tracking branch 'origin/master' into release-1.34
  > 5f737f3 clarify that staging repos are automatically published
  > 0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read-only
  > c00384c link to what a staging repository is
  > b53b1f8 docs: clarify that this is a staging repository and not for direct contributions
  > 42e6182 KEP-5075: generated codes from make update
  > da11948 Merge pull request # 130653 from yliaog/master
  > 3b7d818 extended resource backed by DRA: codegen
  > bb11581 Merge pull request # 130160 from KobayashiD27/dra-device-binding-conditions
  > 9999d64 KEP-5007 DRA Device Binding Conditions: Run make update
  > f78361a Merge pull request # 132942 from thockin/kyaml
  > 8b03d65 Merge pull request # 132632 from sdowell/gc-rv-race
  > 3877700 Re-vendor sigs.k8s.io/yaml @ v1.6.0
  > bce2be2 Merge pull request # 132642 from yuanwang04/restart-rules
  > 70f53ed Make dynamic and metadata clients plumb DeleteOptions
  > 6314d90 Merge pull request # 131549 from carlory/KEP-3751-GA
  > 3d6860c Add container restart rules to API
  > d4f2d5b Merge pull request # 132935 from benluddy/cbor-bump-custom-marshalers
  > 93aeba0 Promoted API `VolumeAttributesClass` and `VolumeAttributesClassList` to `storage.k8s.io/v1`.
  > f4919f8 Merge pull request # 133171 from p0lyn0mial/upstream-fake-metadata-client-opts-watch
  > 39c7041 Bump to github.com/fxamacker/cbor/v2 v2.9.0.
  > 753cfe1 client-go, kubectl: Replace deprecated ErrWaitTimeout with recommended method (# 132718)
  > fcbe18a client-go/metadata/fake: sets opts.Watch to true
  > 764374b Merge pull request # 132706 from pohly/dra-api-v1
  > 14fa3d1 DRA API: s/v1beta2/v1/ and generated files
  > dce90c4 DRA API: verbatim copy v1beta2 -> v1
  > 5f1f878 Merge pull request # 132558 from HirazawaUi/Implement-4762
  > 8d8a532 Add the HostnameOverride field to the Pod API
  > 06fcc8a Merge pull request # 133124 from p0lyn0mial/upstream-fake-dynamic-client-opts-watch
  > a052c01 KEP-3721: Support for env files (# 132626)
  > aca441f client-go/dynamic/fake: sets opts.Watch true
  > ec5b832 Merge pull request # 128010 from ahmedtd/pod-certificates-types
  > b9f6113 Merge pull request # 133101 from isimluk/cleanup-testfiles
  > 0d5cb31 Pod Certificates: make update
  > 8ff0be5 Merge pull request # 133103 from isimluk/remove-unnecessary-test-harness
  > 2d84553 ci cleanup: make sure to remove test KUBECONFIGs
  > f4943db ci: remove unnecessary test harness
  > 5f8e38e Merge pull request # 133030 from PatrickLaabs/132749-timerptr
  > be36413 Merge pull request # 132821 from cici37/mapBeta
  > d4f7b29 chore: replacing timer ptr with ptr.To
  > fa10fa2 Merge pull request # 132849 from kei01234kei/update_lease_resource_version_before_update_lease
  > 6d6ff9f Auto gen
  > 715e46e Merge pull request # 133020 from pohly/apimachinery-list-map-keys
  > e369509 set the timeout to Get method
  > a21e7a8 Merge pull request # 131293 from skitt/typo-watchAction
  > d1ceeb3 sigs.k8s.io/structured-merge-diff/v6 v6.3.0
  > be4c8bc fix test
  > f78427e Merge pull request # 132871 from dims/bump-k8s.io/kube-openapi-to-latest-SHA-f3f2b991d03b
  > 03fb151 Typo fix: watchActcion
  > 3633ea2 chore
  > 34f52c1 Merge pull request # 131200 from ntnn/kcp3350-client-go
  > f4d2106 Bump k8s.io/kube-openapi to latest SHA (f3f2b991d03b)
  > b62c1cc add test which checks release method calls Get
  > f84a70a Merge pull request # 132928 from p0lyn0mial/upstream-watchlist-reflector-table-unsupported
  > 6116f46 Update docs on shutdown and draining
  > 500bfe0 Prevent the failure of releasing the lock by updating the resource version in case of a resource conflict
  > c1d15a3 reflector: detects unsupported meta.Table gvks for watchlist
  > 3a4ad9c Merge pull request # 132878 from ylink-lfs/chore/int32ptr_removal
  > 81caec8 chore: replace int32Ptr usage with ptr.To
  > 5439ef7 Merge pull request # 132775 from ash2k/use-sets-type
  > 879be62 Merge pull request # 131203 from xuzhenglun/fix-ws-race
  > 76df3eb Use sets.Set instead of a local impl
  > 6c24674 Merge pull request # 132005 from kei01234kei/handle_context_in_processloop
  > 2f01658 make sure all streams are created before starting demux websocket
  > 6601813 Merge pull request # 132699 from PatrickLaabs/132086-csr
  > d9cda88 resolve linter check
  > 7d9d303 Merge pull request # 132698 from PatrickLaabs/132086-reflector
  > 286cc83 chore: depr. pointer pkg replacement for the csr
  > fc748aa Revert "pop respects the context"
  > 735f105 chore: depr. pointer pkg replacement for the reflactor
  > bc19363 Revert "modify tests"
  > 2cfeed6 Merge pull request # 132675 from dims/bump-sigs-k8s-io-json-no-code-changes
  > 00429ab modify tests
  > 783cf83 Merge pull request # 132677 from dims/update-github.qkg1.top/emicklei/go-restful/v3-to-v3.12.2
  > e581373 Bump sigs.k8s.io/json to latest - no code changes
  > d56ed58 pop respects the context
  > 6980728 Fix AuthInfo godoc for Token / TokenFile precedence (# 132659)
  > cb8249f Update github.com/emicklei/go-restful/v3 to v3.12.2
  > 03728c1 handle context in process loop
  > 0746d1b Merge pull request # 132676 from dims/bump-go.yaml.in/yaml/v3-to-v3.0.4
  > cec6959 Bump go.yaml.in/yaml/v3 to v3.0.4
  > b254476 Merge pull request # 132654 from Jefftree/b-openapi
  > 059a564 Update vendor
  > 599cc9f pin kube-openapi to v0.0.0-20250628140032-d90c4fd18f59
  > 5e8db78 Merge pull request # 131799 from DataDog/client-go-reflector-transformer
  > c2ce9a8 Merge pull request # 132584 from alvaroaleman/fix-asfafs
  > 71776a8 [client-go # 1415] Use transformer from provided store within internal stores in reflector to limit memory usage bursts
  > 267615c Merge pull request # 132438 from dims/golangci-plugin-for-sorting-feature-gates
  > 3d73750 Re-generate applyconfigurations
  > 40f8130 Ensure all the files have the updated sorting
  > 9582881 Merge pull request # 132357 from dims/drop-usage-of-forked-copies-of-goyaml.v2-and-goyaml.v3
  > cf3a9d7 Merge pull request # 132504 from jpbetz/name-formats
  > 11885e7 switch to latest sigs.k8s.io/yaml v1.5.0 (run update-gofmt.sh as well)
  > 1785b5a client-go/reflector: stop exposing UseWatchList (# 132453)
  > 6a256de Bump to latest kube-openapi
  > bb73006 Merge pull request # 132255 from likakuli/feat-nothingfastreturn
  > d158bb3  feat: optimize ListAll and ListAllByNamespace to return directly when nothing to select
  > 4157481 Merge pull request # 132194 from alvaroaleman/local0dev
  > 97456ea Re-Generate applyconfigs
  > 212c324 Merge pull request # 132350 from p0lyn0mial/upstream-rm-data-consistency-checker-for-list-requests
  > 1646545 client-go/util/consistencydetector: move IsDataConsistencyDetectionForWatchListEnabled
  > a7dabba client-go/util/consistencydetector: remove CheckListFromCacheDataConsistencyIfRequested
  > 10fe56d Merge pull request # 132221 from dims/new-cmp-diff-impl
  > 62b0aba Merge pull request # 132285 from p0lyn0mial/upstream-watchlist-rest-client-rm
  > f21dd69 Add a replacement for cmp.Diff using json+go-difflib
  > 65a2176 client-go/rest: rm watchlist
  > 03836b3 Merge pull request # 132257 from p0lyn0mial/upstream-watchlist-typed-client-rm
  > 4e82e68 Merge pull request # 132269 from dims/update-to-latest-github.qkg1.top/modern-go/reflect2
  > 3fab936 client-go/gentype: remove watchlist
  > 87b1ff7 Merge pull request # 132000 from pohly/dra-api-alpha3-removal
  > 25fa1fd Update to latest github.com/modern-go/reflect2
  > d33a6ba Merge pull request # 132229 from p0lyn0mial/upstream-watchlist-dynamic-client-rm
  > d267bac DRA API: remove obsolete types from v1alpha3
  > c828854 Merge pull request # 131670 from pohly/client-go-watch-context-comment
  > 6708db9 client-go/dynamic: rm watchlist
  > 9638111 Merge pull request # 132149 from p0lyn0mial/upstream-watchlist-meta-client-rm
  > 4e28a08 client-go: call out WithContext inconsistency
  > ce2092b Merge pull request # 132176 from dims/tolerate-newer-golang/oauth2-version
  > e6fed26 client-go/metadata: rm watchlist
  > f7066ac tolerate newer golang/oauth2 version
  > 12398dd Merge pull request # 132103 from nojnhuh/typed-ring-buffer
  > 7c50024 Merge pull request # 131632 from DerekFrank/custom-lease-metadata
  > e3f8bad Update k8s.io/utils for new generic ring buffer
  > 647bbbe Merge pull request # 132039 from alvaroaleman/fix-w-unstructured
  > 34f791d feat: Allow leases to have custom labels set when a new holder has the lease
  > 81ecec4 FieldManagedObjectTracker: Fix to work with unstructured
  > e9ca982 Merge pull request # 132004 from alvaroaleman/fix-fasf
  > 26cda34 Merge pull request # 132022 from Jefftree/client-go-template
  > a539a79 ManagedFieldsObjectTracker: Reload scheme
  > d90ce65 Update client-go template with backticks
  > 2dd7d94 Update client-go PR template
  > e75871c Merge pull request # 131642 from pohly/e2e-pod-exec-logging
  > 433f206 Merge pull request # 131825 from yanhuan0802/fix-clean-addIndexers-comment
  > 804ee8c client-go remotecommand: avoid "unexpected error" log when there is no error
  > cd9e939 Merge pull request # 131840 from pohly/client-go-workqueue-wording
  > 1150241 cleanup: remove error comment of AddIndexers func
  > e9c99fd Merge pull request # 131741 from soltysh/deprecate_preferences
  > 8f2e17a client-go workqueue: clarify parallel reenqueuing
  > 5334fca Deprecate kubeconfig's preference field in favor of kuberc
  > 025e066 Merge pull request # 128419 from liggitt/etcd-3.6
  > 68b411b bump etcd client to 3.6
  > 1308d7c Merge pull request # 131318 from aojea/lock_servicecidr
  > 996ce6a Merge pull request # 131616 from jpbetz/typeconverter-cleanup
  > 2153502 remove networking v1alpha1 and make update
  > bf3d45b Merge pull request # 129150 from huww98/version-comment
  > eff6626 generate code
  > 2d0ad1a Merge pull request # 131165 from liggitt/e2e-requesturi
  > 4892063 remove out-of-date comments about version
  > 571b9f3 Reorganize scheme type converter into apimachinery utils
  > 7aa362d Merge pull request # 131595 from aojea/utils_fake_clock
  > 25d4fa6 Make Request#RequestURI honor configured context root
  > 568f678 update k8s.io/utils to bring fakeClock.Waiters()
  > a566719 Merge pull request # 130989 from liggitt/creationTimestamp-omitzero
  > 5be379c Drop null creationTimestamp from test fixtures
  > 61eae75 bump cbor to add omitzero support
  > fcc2100 bump structured-merge-diff to add omitzero support
  > 05e0ea6 Merge pull request # 131029 from liggitt/to-unstructured-stdlib
  > ebd18c5 Make ToUnstructured match stdlib omitempty and anonymous behavior
  > 17ad09e Merge pull request # 131321 from karlkfi/karl-very-fast-watch
  > 921628e chore: Add VeryShortWatchError typed error
  > 1601be3 Merge pull request # 131266 from karlkfi/karl-reflector-refactor
  > 45e758d Merge pull request # 131242 from zhifei92/update-mockery-version
  > e9ce1dd fix: Watcher deadlock from Stop not being called
  > 82c2b6c Merge pull request # 131143 from liggitt/cache-test-goroutine-leak
  > 335b05f chore: Upgrade the mockery version to v2.53.3.
  > d01bdb1 Merge pull request # 131111 from novahe/certificate_store
  > a3cad0d Clean up leaked goroutines in cache unit tests
  > 451ac0f Merge pull request # 130995 from xigang/utils
  > 3262fde Certificate store: ensure data is written to disk
  > 18a1faa Merge pull request # 131103 from ahrtr/etcd_sdk_20250328
  > 55aca3c bump k8s.io/utils
  > 983fe07 bump etcd 3.5.21 sdk
bumping knative.dev/reconciler-test 2187daa...4b85657:
  > 4b85657 upgrade to latest dependencies (# 844)
  > c77185e upgrade to latest dependencies (# 842)
  > 1e6de0a Update community files (# 843)
  > a6d728b upgrade to latest dependencies (# 841)
  > 718cf85 Update community files (# 840)
  > 41bbc9a upgrade to latest dependencies (# 836)
bumping github.com/modern-go/reflect2 2b33151...35a7c28:
  > 35a7c28 Merge pull request # 30 from tonistiigi/deadcode-fix
  > 4a6a3c9 fix deadcode disabling in Go

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -24,15 +24,15 @@ require (
 	go.opentelemetry.io/otel/sdk/metric v1.38.0
 	go.opentelemetry.io/otel/trace v1.38.0
 	go.uber.org/zap v1.27.0
-	k8s.io/api v0.33.5
-	k8s.io/apimachinery v0.33.5
-	k8s.io/client-go v0.33.5
-	k8s.io/code-generator v0.33.5
-	k8s.io/utils v0.0.0-20241210054802-24370beab758
-	knative.dev/eventing v0.47.0
-	knative.dev/hack v0.0.0-20251021013703-4fae78067103
-	knative.dev/pkg v0.0.0-20251022152246-7bf6febca0b3
-	knative.dev/reconciler-test v0.0.0-20251023153647-2187daaf5928
+	k8s.io/api v0.34.2
+	k8s.io/apimachinery v0.34.2
+	k8s.io/client-go v0.34.2
+	k8s.io/code-generator v0.34.2
+	k8s.io/utils v0.0.0-20250604170112-4c0f3b243397
+	knative.dev/eventing v0.47.1-0.20251121120517-0effffedd9a9
+	knative.dev/hack v0.0.0-20251117013754-67a5b048bc27
+	knative.dev/pkg v0.0.0-20251124190527-7d24e8d1085f
+	knative.dev/reconciler-test v0.0.0-20251119135518-4b85657eb33d
 )
 
 require (
@@ -48,10 +48,10 @@ require (
 	github.com/cloudevents/sdk-go/sql/v2 v2.15.2 // indirect
 	github.com/coreos/go-oidc/v3 v3.9.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
-	github.com/emicklei/go-restful/v3 v3.12.1 // indirect
+	github.com/emicklei/go-restful/v3 v3.12.2 // indirect
 	github.com/evanphx/json-patch/v5 v5.9.11 // indirect
 	github.com/felixge/httpsnoop v1.0.4 // indirect
-	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
+	github.com/fxamacker/cbor/v2 v2.9.0 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.4 // indirect
 	github.com/go-logr/logr v1.4.3 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
@@ -61,7 +61,7 @@ require (
 	github.com/go-openapi/swag v0.23.0 // indirect
 	github.com/gobuffalo/flect v1.0.3 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/google/gnostic-models v0.6.9 // indirect
+	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/google/go-tpm v0.9.5 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
@@ -70,7 +70,7 @@ require (
 	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/minio/highwayhash v1.0.3 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/nats-io/jwt/v2 v2.7.4 // indirect
 	github.com/nats-io/nuid v1.0.1 // indirect
@@ -99,16 +99,17 @@ require (
 	go.uber.org/automaxprocs v1.6.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
-	golang.org/x/crypto v0.43.0 // indirect
-	golang.org/x/mod v0.29.0 // indirect
-	golang.org/x/net v0.46.0 // indirect
+	go.yaml.in/yaml/v3 v3.0.4 // indirect
+	golang.org/x/crypto v0.44.0 // indirect
+	golang.org/x/mod v0.30.0 // indirect
+	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/oauth2 v0.30.0 // indirect
-	golang.org/x/sync v0.17.0 // indirect
-	golang.org/x/sys v0.37.0 // indirect
-	golang.org/x/term v0.36.0 // indirect
-	golang.org/x/text v0.30.0 // indirect
+	golang.org/x/sync v0.18.0 // indirect
+	golang.org/x/sys v0.38.0 // indirect
+	golang.org/x/term v0.37.0 // indirect
+	golang.org/x/text v0.31.0 // indirect
 	golang.org/x/time v0.12.0 // indirect
-	golang.org/x/tools v0.38.0 // indirect
+	golang.org/x/tools v0.39.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250825161204-c5933d9347a5 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250825161204-c5933d9347a5 // indirect
@@ -118,14 +119,14 @@ require (
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiextensions-apiserver v0.33.5 // indirect
-	k8s.io/apiserver v0.33.5 // indirect
-	k8s.io/gengo/v2 v2.0.0-20250207200755-1244d31929d7 // indirect
+	k8s.io/apiextensions-apiserver v0.34.2 // indirect
+	k8s.io/apiserver v0.34.2 // indirect
+	k8s.io/gengo/v2 v2.0.0-20250604051438-85fd79dbfd9f // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
+	k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b // indirect
 	sigs.k8s.io/gateway-api v1.1.0 // indirect
 	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect
+	sigs.k8s.io/structured-merge-diff/v6 v6.3.0 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect
 )