upgrade to latest dependencies (#791)

bumping go.yaml.in/yaml/v3 c3552c1...e16c7af:
  > e16c7af Remove empty go.sum file
  > 6abcd01 Fix unhandled nil-errors in tests
  > 9481db7 Remove suite_test.go and gopkg.in/check.v1
  > 485f5fc Use standard testing library for limit_test.go
  > 3e00046 Use standard testing library for node_test.go
  > f612058 Use standard testing library for decode_test.go
  > 078f958 Use standard testing library encode_test.go
  > 3847ac0 [v3] backport CodeQL workflow
  > 1666663 Revert incorrect gofmt changes
  > 73290cb Retract v3 tags that cannot be installed
bumping github.com/prometheus/procfs b380dd4...3c943fd:
  > 3c943fd Fix invalid format strings (# 832)
  > 95dd8b8 sysfs: add NVMeSubsystemClass for NVMe-oF subsystem parsing (# 797)
  > 824ed41 feat: support  sysfs.Mdraids with Intel VROC (# 777)
  > 1fbd898 Fix crypto parsing panic (# 830)
  > 68b70b4 mountinfo: read the full file instead of capping at 1 MiB (# 817)
  > 0155712 nvme: Fix namespace parsing (# 821)
  > 5853145 Add support for cpuinfo_avg_freq (# 829)
  > 1244442 Update common Prometheus files (# 828)
  > 1c5657d Update common Prometheus files (# 827)
  > 2c1667a build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 (# 825)
  > e95ebac build(deps): bump golang.org/x/sync from 0.20.0 to 0.21.0 (# 826)
  > 7684231 build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 (# 802)
  > fe02e56 Add support for `/sys/class/mei/mei0` (# 792)
  > 653e173 feat(xfs): add Linux 7.0 XFS statistics fields (# 810)
  > 26fc3ed Update common Prometheus files (# 820)
  > 6a4e4a3 build(deps): bump golang.org/x/sys from 0.42.0 to 0.45.0 (# 818)
  > e0a040f build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (# 819)
  > 63e4d76 fix some fc-hba are missing the statistics/* (# 664)
  > 66a9e6e blockdevice: add SysBlockDeviceRotational for targeted rotational reads (# 824)
  > 1082e3d Update common Prometheus files (# 816)
  > eb15125 Update common Prometheus files
  > f05f8fc Update common Prometheus files (# 813)
  > 4a18b4e Merge pull request # 796 from sradco/add-dmmultipath-sysfs-parsing
  > 506a32c Update common Prometheus files (# 809)
  > 8ab5753 blockdevice: add DMMultipathDevices for DM-multipath sysfs parsing
  > fb3e36a Update common Prometheus files (# 808)
  > 465fd94 Refactor class thermal error handling (# 794)
  > a9a7c56 Update common Prometheus files (# 807)
  > 39a1eee Update common Prometheus files (# 806)
  > c065f63 Update common Prometheus files (# 805)
  > 8b1d4c1 Update common Prometheus files (# 804)
  > 9e34617 Merge pull request # 803 from prometheus/superq/cleanup_circleci
  > 27d86b8 build(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0 (# 801)
  > abf0af3 Cleanup CI
  > 2cd08a8 build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0 (# 800)
  > 6f2b42a Update common Prometheus files (# 798)
  > 10941fa Merge pull request # 790 from prometheus/dependabot/github_actions/actions/setup-go-6.3.0
  > 2fc0fc0 build(deps): bump actions/setup-go from 6.2.0 to 6.3.0
bumping golang.org/x/term 3b43943...9f69229:
  > 9f69229 go.mod: update golang.org/x dependencies
bumping k8s.io/apiextensions-apiserver 020c736...226e148:
  > 226e148 Update dependencies to v0.35.7 tag
  > b00b157 Merge pull request # 140030 from kmala/release-1.35
  > a88ac37 Merge pull request # 139666 from kmala/automated-cherry-pick-of-# 137451-upstream-release-1.35
  > 293632b Fix vet error
  > 5663d3e Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
bumping k8s.io/client-go ad0b54e...d2a9618:
  > d2a9618 Update dependencies to v0.35.7 tag
  > c9748d3 Merge pull request # 140030 from kmala/release-1.35
  > 74724a2 Merge pull request # 139666 from kmala/automated-cherry-pick-of-# 137451-upstream-release-1.35
  > 7b15567 Fix vet error
  > e7f41b7 Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
bumping google.golang.org/protobuf 96a1791...f2248ac:
  > f2248ac reflect/protodesc: add missing IsProto3Optional initialization
  > 86e4605 compiler/protogen: document --go_opt in addition to --go_out
  > 8c4c4ae internal/descfmt: replace uses of MethodByName with direct calls when possible
  > 9b1c943 types: regenerate using latest protobuf v33.3 release
  > 8b39a84 encoding/protojson: fix google.protobuf.Empty serialization
  > 20262ed encoding/prototext: implement recursion limit
  > e9def1a encoding/protodelim: error out when size exceeds math.MaxInt
  > cb6ac5a internal/descfmt: fix dce with Go 1.26 by not calling MethodByName for Methods
  > 232b109 encoding/protojson: reject non-numeric ints/floats
  > 60bc867 compiler/protogen: introduce and expose feature resoluton to protogen
  > f10681a all: start v1.36.11-devel
bumping golang.org/x/crypto 45460e0...cdce021:
  > cdce021 go.mod: update golang.org/x dependencies
  > d9474cc openpgp: make the deprecation message more explicit
  > 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  > 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  > 6435c37 ssh: sanitize client disconnect messages
  > 7d695da ssh/agent: drain channel stderr in agent forwarders
  > 5b7f841 acme/autocert: fix data race in Manager.createCert
  > 0b316e7 argon2: update RFC 9106 parameter recommendations
  > 55aec0a x509roots/fallback: update bundle
  > 5f2de1a internal: remove wycheproof tests
bumping golang.org/x/sync 5071ed6...1eb64d4:
  > 1eb64d4 semaphore: panic on negative weights
bumping golang.org/x/sys d58dcfa...9e7e939:
  > 9e7e939 cpu: handle vendor suffixes in parseRelease
  > f6fb8a1 unix: use epoll_pwait rather than epoll_wait
  > f3eeabf windows: avoid length overflow in NewNTString
  > 3cb6647 unix: update glibc to 2.43
  > c507910 windows: document safe usage of TrusteeValue
bumping golang.org/x/text f4bb632...724af9c:
  > 724af9c go.mod: update golang.org/x dependencies
  > bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  > b326f3d go.mod: update golang.org/x dependencies
  > 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  > 0dc94a2 all: fix some comments
bumping knative.dev/eventing 939bbd6...defbb53:
  > defbb53 [Automated] Update eventing-eventing-integrations nightly (# 9229)
bumping github.com/prometheus/client_golang 8179a56...d6087ee:
  > d6087ee release: cut v1.24.1 (# 2076)
  > 48dd383 Cut v1.24.0 (# 2061)
  > a725305 Cut v1.24.0-rc.0 (# 2058)
  > 77c584f build(deps): update all Go dependencies in all go.mod files (# 2059)
  > 78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather calls (# 1969)
  > 34e9a7f Merge pull request # 2055 from prombot/repo_sync
  > de19217 examples: improve simple main.go example (# 1999)
  > 43749bc Update common Prometheus files
  > 20355eb fix: correct typos in comments and test error messages (# 2049)
  > 4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased drift) (# 2050)
  > b0d896b Replace deprecated model.NameValidationScheme with explicit UTF8Validation (# 2051)
  > e0b7a44 promhttp: don't panic when instrumenting with non-exemplar observers (# 2005)
  > 2c6e6c1 Merge pull request # 2047 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.19.0
  > 0f73d8c Merge pull request # 2048 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.19.0
  > f794d60 build(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0
  > f63424d Merge pull request # 2046 from prometheus/superq/update_dependabot
  > c769884 build(deps): bump github.com/klauspost/compress in /exp
  > 832cec7 chores: remove example Dockerfile and container_description.yaml (# 2044)
  > 2ad3d55 Update dependabot config
  > 7dc915d build(deps): bump the github-actions group across 1 directory with 5 updates (# 2043)
  > cee63a1 Merge pull request # 2042 from prometheus/dependabot/go_modules/tutorials/whatsup/golang.org/x/net-0.55.0
  > 92e7bbd fix(api): fall back to GET on forbidden POSTs (# 2030)
  > 4165860 build(deps): bump golang.org/x/net in /tutorials/whatsup
  > 7d30a88 Update common Prometheus files (# 2041)
  > a2061d5 Merge pull request # 2038 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.18.7
  > a97b0bc Merge pull request # 2035 from prometheus/dependabot/go_modules/github.com/prometheus/procfs-0.21.1
  > 869b52c build(deps): bump github.com/klauspost/compress in /exp
  > e42eb67 Merge pull request # 2036 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.18.7
  > b134d1b build(deps): bump github.com/prometheus/procfs from 0.21.0 to 0.21.1
  > b60fbc2 Merge pull request # 2033 from prometheus/dependabot/go_modules/github.com/prometheus/procfs-0.21.0
  > e6d1b75 build(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7
  > 28914d0 Update common Prometheus files (# 2028)
  > 913041f build(deps): bump github.com/prometheus/procfs from 0.20.1 to 0.21.0
  > 0bc3864 Merge pull request # 2026 from prometheus/dependabot/go_modules/golang.org/x/sys-0.46.0
  > 45d1ee3 Merge pull request # 2027 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.69.0
  > 8976f37 build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0
  > 41943db Merge pull request # 2025 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.69.0
  > bd96974 build(deps): bump github.com/prometheus/common in /exp
  > e34f51c Update common Prometheus files (# 2013)
  > aa7b6f3 build(deps): bump github.com/prometheus/common from 0.68.0 to 0.69.0
  > 7456005 refactor: replace interface{} with any (Go 1.18+) (# 2021)
  > 6601282 Merge pull request # 2012 from immanuwell/fix/unkeyed-samplepair-struct-literals
  > 443f1ce Merge pull request # 2023 from s3onghyun/docs-fix-exemplar-grammar
  > b65f296 fix: use keyed fields in SamplePair struct literals in api_test.go
  > 3537b20 Merge pull request # 2017 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.68.0
  > 17425b5 promhttp: fix grammar in exemplar option doc comments
  > 02eaf49 Merge pull request # 2011 from roidelapluie/roidelapluie/gh-token-migrate
  > c8f27d6 Merge pull request # 2014 from prometheus/dependabot/go_modules/golang.org/x/sys-0.45.0
  > dac39bc build(deps): bump github.com/prometheus/common in /exp
  > d61fb3f docs: fix typos and godoc example indentation in timer.go and wrap.go (# 2009)
  > 0c2bb5d ci: harden actions/checkout with persist-credentials: false
  > 79920b9 Merge pull request # 2016 from prometheus/dependabot/github_actions/github-actions-a7568dddb0
  > 44eaaf8 build(deps): bump golang.org/x/sys from 0.43.0 to 0.45.0
  > c9d5bc4 Merge pull request # 2003 from arpitjain099/ci/add-permissions
  > 6576eae Merge pull request # 2015 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.68.0
  > 55fba5e build(deps): bump the github-actions group with 2 updates
  > e839fba build(deps): bump the github-actions group across 1 directory with 4 updates (# 1994)
  > fdf5437 ci(update-go-versions): declare contents: write + pull-requests: write
  > 7f85956 promhttp: add regression test for concurrent map writes (# 1274) (# 2000)
  > 58820a1 build(deps): bump github.com/prometheus/common
  > 99805a2 Merge pull request # 2001 from prometheus/repo_sync
  > 6dd4625 Merge pull request # 2008 from prombot/repo_sync
  > 0ac87e1 Merge pull request # 1996 from roidelapluie/roidelapluie/remote-write-io-limiter
  > 8255910 Update common Prometheus files
  > 5654a21 Merge pull request # 2010 from ProjectMutilation/fix-handle-leak
  > 951d1bb Update common Prometheus files
  > f695195 Merge pull request # 1995 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.18.6
  > 0b88ca2 exp/api/remote: limit request body size in SnappyDecodeMiddleware
  > 08baa43 fix(registry): prevent file descriptor leak in WriteToTextfile
  > 8d6cc52 Merge pull request # 1992 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.18.6
  > eb21b3a build(deps): bump github.com/klauspost/compress in /exp
  > df048ad Merge pull request # 1993 from prometheus/dependabot/go_modules/golang.org/x/sys-0.43.0
  > b31e5ee build(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6
  > 79042c6 Fix bug unit cpu-seconds not a suffix of metric go_cpu_classes_gc_mark_assist_cpu_seconds (# 1991)
  > 5048e61 build(deps): bump golang.org/x/sys from 0.42.0 to 0.43.0
  > 773db0a Merge pull request # 1988 from prometheus/repo_sync
  > 066715b Merge pull request # 1863 from tie/main
  > 2726199 Update common Prometheus files
  > 9f0fd78 Merge pull request # 1985 from prometheus/repo_sync
  > bef13f1 Merge branch 'main' into main
  > 42dc83b Merge pull request # 1984 from prometheus/repo_sync
  > 613bbf1 Update common Prometheus files
  > 70db6c8 promhttp: implement WithXFromContext in terms of WithXFromRequest
  > 3b25349 Merge pull request # 1966 from Retr0-XD/fix/processcollector-pidfn-1960
  > 75516ac Update common Prometheus files
  > bf37be4 Merge pull request # 1947 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.18.3
  > 71e2e02 Merge pull request # 1968 from kakkoyun/kakkoyun/ci_multios
  > e31ff12 Merge branch 'main' into fix/processcollector-pidfn-1960
  > e330c7f Merge pull request # 1945 from prometheus/dependabot/go_modules/golang.org/x/sys-0.40.0
  > 6e8513a build(deps): bump github.com/klauspost/compress in /exp
  > 5f35560 Merge pull request # 1981 from thegdsks/examples/native-histogram
  > 1f77272 Merge branch 'main' into kakkoyun/ci_multios
  > 419d80d Merge branch 'main' into fix/processcollector-pidfn-1960
  > fd608b1 Merge pull request # 1944 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.18.3
  > 8b1d72f Merge branch 'main' into dependabot/go_modules/golang.org/x/sys-0.40.0
  > 32d05ff Merge pull request # 1980 from prometheus/repo_sync
  > 9442b41 examples: add native histogram usage example
  > 734f49c Update prometheus/process_collector_darwin_test.go
  > d0d5921 prometheus: clarify darwin unsupported pid error reason
  > d8591d0 prometheus: clarify MetricVec delete semantics in godoc (# 1967)
  > 9351edd Merge pull request # 1946 from prometheus/dependabot/github_actions/github-actions-10f98d0e93
  > f323ac8 Merge branch 'main' into dependabot/go_modules/github.com/klauspost/compress-1.18.3
  > 7aa741a build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0
  > 1b72664 feat(collector): add Go 1.26 new runtime metrics (# 1942)
  > c270356 Merge pull request # 1977 from prometheus/repo_sync
  > 9de1176 Update common Prometheus files
  > 4980c0f Merge branch 'main' into kakkoyun/ci_multios
  > 4a736c2 prometheus: honor PidFn on windows and darwin
  > 8f78afd fix: recover from collector panic and return error in Gather (# 1961)
  > 8806ac2 Merge pull request # 1948 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.67.5
  > 6821feb Merge branch 'main' into dependabot/github_actions/github-actions-10f98d0e93
  > 28ecd6b build(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3
  > fb0838f promhttp/zstd: add unit tests for zstd writer registration (# 1929)
  > a498428 Merge pull request # 1978 from prometheus/dependabot/go_modules/tutorials/whatsup/go.opentelemetry.io/otel/sdk-1.43.0
  > 1335b60 Update common Prometheus files
  > 1bbcff3 Merge branch 'main' into kakkoyun/ci_multios
  > b7f72b4 fix: respect context cancellation in httpClient.Do (# 1971)
  > 2163552 Merge pull request # 1965 from prometheus/dependabot/go_modules/tutorials/whatsup/google.golang.org/grpc-1.79.3
  > 8951891 Merge branch 'main' into dependabot/go_modules/exp/github.com/prometheus/common-0.67.5
  > 523aee0 build(deps): bump the github-actions group with 4 updates
  > 9d1490b build(deps): bump the github-actions group with 5 updates (# 1934)
  > 6cc4d42 build(deps): bump go.opentelemetry.io/otel/sdk in /tutorials/whatsup
  > d9092ce ci: add Linux arm64 test runner
  > f23aad5 add optional, explicit OM unit support  (# 1392)
  > da7ec92 Update api/client_test.go
  > 167edc1 Remove Arthur from the list of maintainers (# 1964)
  > b5ce672 build(deps): bump google.golang.org/grpc in /tutorials/whatsup
  > 60754c5 build(deps): bump github.com/prometheus/common in /exp
  > 2cd067e Merge pull request # 1935 from prometheus/dependabot/go_modules/exp/google.golang.org/protobuf-1.36.11
  > 1544594 refactor(test): use filename-based OS constraints for process collector tests
  > af7f59c Merge pull request # 1976 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.18.5
  > 4ad42f2 Merge branch 'main' into fix/context-cancellation-do
  > 6fa6b1b chore(collectors/go): generate the tests after new metric (# 1962)
  > 2e460e1 Merge pull request # 1933 from prometheus/dependabot/go_modules/golang.org/x/sys-0.39.0
  > 0e58833 build(deps): bump google.golang.org/protobuf in /exp
  > f2f578d fix(test): fix uint64 underflow in TestMemStatsEquivalence
  > 55f61a9 Merge pull request # 1974 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.18.5
  > ab17e7a build(deps): bump github.com/klauspost/compress in /exp
  > 9887f55 fix: respect context cancellation in httpClient.Do
  > 48a6770 build(deps): bump the github-actions group with 2 updates (# 1958)
  > f728215 Merge pull request # 1932 from prometheus/dependabot/go_modules/google.golang.org/protobuf-1.36.11
  > 360c42e build(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0
  > c010fd6 ci: unify test workflow across platforms with Go version matrix
  > 64e87af Merge pull request # 1973 from prometheus/dependabot/go_modules/golang.org/x/sys-0.42.0
  > 110d080 build(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5
  > 4b86739 Merge pull request # 1956 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.67.5
  > 7ba246a Ensure remote write v2 headers cannot be returned on v1 requests (# 1927)
  > c89a2b5 build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11
  > e4a9fb5 fix(test): use t.Cleanup for temp file in WriteToTextfile test
  > adead89 build(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0
  > 419fc96 Merge pull request # 1959 from prometheus/dependabot/go_modules/tutorials/whatsup/go.opentelemetry.io/otel/sdk-1.40.0
  > 16e5762 build(deps): bump github.com/prometheus/common from 0.67.4 to 0.67.5
  > 8d46898 Prevent OOM from malformed snappy payloads by validating decoded length (# 1917)
  > d29ea26 fix(test): use [1-9] for start_time_seconds regex on Windows
  > 886616e Merge pull request # 1955 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.18.4
  > 40b45cc build(deps): bump go.opentelemetry.io/otel/sdk in /tutorials/whatsup
  > 572ca3a Allow `/metrics` handler output filtering via `name[]` query param (# 1925)
  > ef80579 fix(test): mock timestamps in histogram exemplar first batch too
  > 7baa439 Merge pull request # 1957 from prometheus/dependabot/go_modules/golang.org/x/sys-0.41.0
  > a699b3c build(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4
  > b3886a6 feat: expose Desc error through public Err() method (# 1902)
  > b8801a7 fix(test): close temp file before WriteToTextfile on Windows
  > 62caa50 Merge pull request # 1954 from prometheus/dependabot/go_modules/github.com/prometheus/procfs-0.20.1
  > 3ba4f6a build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0
  > 54a0d19 Merge pull request # 1950 from manute/main
  > 9050000 build(deps): bump the github-actions group with 4 updates (# 1919)
  > db24503 fix(test): use mock timestamps in histogram exemplar test
  > 12e1f25 build(deps): bump github.com/prometheus/procfs from 0.19.2 to 0.20.1
  > 2f81ba4 chore(lint): style changes for satisfy ci
  > f340171 Merge pull request # 1924 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.18.2
  > e9c7cd9 fix(test): accept zero GC pause increment on Windows
  > d93620f chore(test): synctesting for timer and check panic
  > 2cc6786 Merge pull request # 1923 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.67.4
  > 86da9a2 build(deps): bump github.com/klauspost/compress in /exp
  > 2fca029 ci: add macOS and Windows test runners
  > eab20c4 chore(version): bump go version 1.25
  > 3bdeb68 Merge pull request # 1922 from prometheus/dependabot/go_modules/golang.org/x/sys-0.38.0
  > e4ac2e9 build(deps): bump github.com/prometheus/common in /exp
  > 498a707 Merge pull request # 1921 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.67.4
  > b52eafb build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0
  > 22991df Merge pull request # 1920 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.18.2
  > f8b36bc build(deps): bump github.com/prometheus/common from 0.67.2 to 0.67.4
  > 5d937cd chore(ci): Use stable names for CI steps (# 1914)
  > 7cfbea7 build(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.2
  > c316de0 chore(ci): Add CRLF detection and fix targets to prevent CRLF contamination (# 1898)
  > a5ae203 build(deps): bump the github-actions group with 2 updates (# 1908)
  > b7eec20 Merge pull request # 1910 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.67.2
  > 6a1fbd5 Merge pull request # 1909 from prometheus/dependabot/go_modules/exp/google.golang.org/protobuf-1.36.10
  > 1a6cf45 build(deps): bump github.com/prometheus/common in /exp
  > 8a44ef5 Merge pull request # 1911 from prometheus/dependabot/go_modules/exp/github.com/klauspost/compress-1.18.1
  > 2d8361c build(deps): bump google.golang.org/protobuf in /exp
  > 35511c7 Merge pull request # 1907 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.67.2
  > c164b1f build(deps): bump github.com/klauspost/compress in /exp
  > 11101f9 Merge pull request # 1904 from prometheus/dependabot/go_modules/golang.org/x/sys-0.37.0
  > 851efb7 build(deps): bump github.com/prometheus/common from 0.66.1 to 0.67.2
  > 1179bc1 Merge pull request # 1906 from prometheus/dependabot/go_modules/github.com/klauspost/compress-1.18.1
  > e9ec562 build(deps): bump golang.org/x/sys from 0.35.0 to 0.37.0
  > 25d189d Merge pull request # 1903 from prometheus/dependabot/go_modules/github.com/prometheus/procfs-0.19.2
  > ff1c34b build(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1
  > 23c8ee1 minor refactor of replaceInvalidRune() in bridge.go (# 1897)
  > 212fc83 build(deps): bump github.com/prometheus/procfs from 0.17.0 to 0.19.2
  > fa8da34 feat: add support for `/status/tsdb/blocks` endpoint (# 1896)
  > 9358c16 Clarify exp library stability (# 1894)
  > ddad4f3 Public backoff config to allow usage of WithAPIBackoff (# 1895)
  > 187cb02 Use cloned http.DefaultTransport. issue-1857 (# 1885)
  > 343ae65 fix bug (# 1892)
  > c5900a1 Change RetryCallBack initialized (# 1890)
  > 6886445 bug(remote_write): Fix compression buffer pooling (# 1889)
  > 3d13af1 Add RetryCallBack to remote_api.go  (# 1888)
  > 8b3bc2d Update Go Collector metrics for new Go version (# 1864)
  > c454ad5 Fix typo in remote api err msg (# 1878)
  > 14becd6 build(deps): bump the github-actions group with 4 updates (# 1881)
  > f962e7f Merge pull request # 1883 from prometheus/dependabot/go_modules/exp/github.com/prometheus/common-0.66.1
  > f5ad14f Merge pull request # 1882 from prometheus/dependabot/go_modules/exp/google.golang.org/protobuf-1.36.9
  > 44d7ce5 build(deps): bump github.com/prometheus/common in /exp
  > 245fdbd Merge pull request # 1880 from prometheus/dependabot/go_modules/google.golang.org/protobuf-1.36.9
  > cbecf5e build(deps): bump google.golang.org/protobuf in /exp
  > a974e0d chore: clean up golangci-lint configuration (# 1802)
  > 28a4dfd build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9
  > 54b80c0 Merge pull request # 1871 from prometheus/arve/sync-main
  > cebd7d5 Sync release-1.23 into main (# 1868)
  > 48f1e34 Merge remote-tracking branch 'origin/release-1.23' into arve/sync-main
  > 5860547 build(deps): bump github.com/prometheus/common from 0.65.0 to 0.66.0 (# 1865)
  > 2650293 Merge remote-tracking branch 'origin/release-1.23' into arve/sync-release
  > 84a4734 collectors/version: Allow for custom label (# 1860)
  > 493c96a chore: Drop support for <go-1.22 (# 1862)
  > 3692d7f Merge pull request # 1861 from prometheus/arve/merge-release
  > 2d1f151 Use prometheus/common.expfmt.NewTextParser (# 1859)
  > 14a55d2 Merge remote-tracking branch 'origin/release-1.23' into arve/merge-release
  > 4ae032f Support matchers in rules API (# 1843)
  > 1f3a904 feat(api): add FormatQuery method to Prometheus v1 API (# 1856)
  > 40dd084 feat(api/prometheus): add format_query endpoint for query formatting (# 1846)
  > e77101d remote: simplified Store interface; renamed Handler to WriteHandler; encapsulated write response (# 1855)
  > f48ff67 ✨ (prometheus): refactor LabelNames to return model.LabelNames type for consistency (# 1850)
  > 14ccb93 Merge pull request # 1852 from prometheus/dependabot/github_actions/github-actions-12d2e1d0cf
  > 8a8eff5 Merge release-1.23 into main (# 1851)
  > 1e4db56 build(deps): bump github/codeql-action in the github-actions group
  > a4af5c8 Fix doc typo (# 1849)
  > 83a9730 prometheus/collectors: use godoc link for runtime/metrics supported metrics (# 1844)
  > 8dfb355 Merge pull request # 1838 from prometheus/dependabot/go_modules/golang.org/x/sys-0.34.0
  > 259235d Merge pull request # 1839 from prometheus/dependabot/go_modules/github.com/prometheus/procfs-0.17.0
  > 47e6039 build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0
  > 77fa321 build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0
bumping golang.org/x/net 9e7fdbf...b8f09f6:
  > b8f09f6 go.mod: update golang.org/x dependencies
  > f05f21b idna: reject all-ASCII xn-- labels on all Go versions
  > 0f748cf internal/http3: clean up stream I/O methods usages in tests
  > 0bb961e internal/http3: add net/http.ResponseController support
  > 0ca694d webdav: document Dir's lack of defense against filesystem modification
  > bd5f1dc http2: initialize Transport on NewClientConn
  > 488ff63 bpf: add security considerations to package docs
  > 93d1f25 xsrftoken: avoid token collisions
  > 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
bumping k8s.io/code-generator 725f546...15ce9a0:
  > 15ce9a0 Update dependencies to v0.35.7 tag
  > 5a07931 Merge pull request # 139666 from kmala/automated-cherry-pick-of-# 137451-upstream-release-1.35
  > a3ec929 Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
bumping k8s.io/apiserver 540abe3...8e159d6:
  > 8e159d6 Update dependencies to v0.35.7 tag
  > 9633d58 Merge pull request # 140030 from kmala/release-1.35
  > 1254cd7 Merge pull request # 139666 from kmala/automated-cherry-pick-of-# 137451-upstream-release-1.35
  > 1b141c3 Fix vet error
  > 1ed8098 Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
bumping golang.org/x/tools 3d6f8df...fbf9f2e:
  > fbf9f2e gopls/internal/cmd: add tests of 'gopls help'
  > e891f79 go.mod: update golang.org/x dependencies
  > 0602b30 gopls: revert CLI usability revamp to stabilize release
  > 60c2434 gopls/internal/cmd: fix regression in initialization
  > 29e1583 gopls/internal/mcp: go_diagnostics: use idiomatic iterators
  > 0772d6a go/ssa: add test for fix of golang/go# 73871 in go/types@go1.25
  > 0fdde84 gopls/internal/tool: rename Application to Command and embed in SubCommand
  > bd9e76d go/callgraph/vta: document ssa.InstantiateGenerics requirement
  > d711ac7 go/ssa: remove incorrect hasTypeParams check
  > 439decd gopls/internal/cache/xrefs: avoid materializing Inspector
  > afef5e2 go/analysis/passes/modernize: errorsastype: avoid rewrite for types that don't satisfy error
  > e2268ae gopls/internal/settings: add MoveType setting
  > 180e961 gopls/doc/release: update v0.23.0 release change log
  > ada1820 gopls/doc/release: add deprecated analyzer support for line comment
  > dd4579c gopls/internal/analysis/deprecated: support line comments
  > 3e8d8c4 gopls/internal/golang: MoveType - remove type from current file
  > bfcc32e gopls/internal/cmd: remove obsolete fix and inspect subcommands
  > 6adf51d gopls/internal/golang: MoveType - extract type to new file
  > 216d7a7 internal/stdlib: update stdlib index for Go 1.27 Release Candidate 1
  > d751b22 internal/typesinternal: use TypeString in TypeExpr to format interface, struct
  > 510aad1 internal/refactor/inline: fix panic when inlining type param name clash
  > 03b43f6 gopls/doc: document change signature refactoring
  > 6be0271 go/analysis/passes/modernize: preserve symbols in reflecttypefor
  > 965a458 gopls: promote strict flag ordering in docs and help messages
  > a630ed7 gopls/internal/golang: fix inlay hints for function type params
  > 4c6e3fc gopls: implement simplified CLI flag parsing and dispatching
  > b84e193 x/tools{,gopls}: update x/telemetry
  > d5fa3cd all: apply various code modernizations
  > f2cc89e gopls/internal/golang: assembly: use html/template
  > 33d0e64 gopls/internal/golang: rewrite findDeclInfo using Cursor
  > 07af5cd gopls/internal/golang: InlayHint: add maphash.Hash to ignoredError
  > cb639a5 gopls/internal/golang: Implementations: reject generic methods (local)
  > baafb7b gopls/internal/test/diagnostics: explain mystery
  > 05283a2 gopls/internal/cache/methodsets: fix panic on types with generic methods
  > 59ef372 go/ssa: avoid in-place initialization of CompositeLit
  > 8b05fa1 gopls/internal/golang: handle alias to pointer types in hover
  > e15a659 gopls: decouple remote connection flags
bumping github.com/klauspost/compress 8e79dc4...2602f4a:
  > 2602f4a Update changelog for version 1.19.0
  > 983acec add defensive checks
  > 9960386 zstd: Validate SnappyConverter literal copies (# 1170)
  > e29d4d3 flate: use `Peek` instead of `ReadByte` for the `bufio.Reader` decode path (# 1169)
  > c0bbc84 zstd: bump avo pin, regenerate arm64 asm (# 1167)
  > efdb6ed build(deps): bump the github-actions group with 6 updates (# 1166)
  > f0953f9 flate: fix buffer formatting in tests (# 1165)
  > ab2e3cc zstd: Add arm64 decoder asm (# 1160)
  > bb2723d Merge commit from fork
  > 539243b s2sx: Clean symlink targets (# 1163)
  > bd9228c Apply go fix and check in CI (# 1158)
  > 4cc176c zstd: Add true concurrent stream encoding (# 1136)
  > 4705fcb build(deps): bump the github-actions group with 3 updates (# 1157)
  > e9c2e56 huff0: Allow building table from oversized histogram. (# 1156)
  > ecdb779 huff0: Allow building tables from histogram. (# 1155)
  > 38efa45 zip: add NameDecoder callback for legacy encoding rewrite (# 1150)
  > 5b9abed flate: Add inflate checkpoints (# 1154)
  > dba8e6f gzhttp: match qvalue parameter case-insensitively (RFC 7231) (# 1149)
  > 0434480 snappy/s2: Limit length of varint in `decodedLen` (# 1148)
  > fdcc9b6 zstd: avoid unused BuildDict encoder allocation (# 1147)
  > 28ae503 build(deps): bump the github-actions group with 2 updates (# 1146)
  > ac2f5e8 docs: use unix line-endings for markdown files (# 1144)
  > 620d7b5 s2: Fix amd64 stack frame corruption (# 1145)
  > 1b63f2f build(deps): bump the github-actions group with 2 updates (# 1141)
  > 3d86b89 s2: pool hash tables in Go encode paths to reduce allocations (# 1143)
  > 15967de gzhttp: Canonicalize ETag header (# 1139)
  > c5e0077 zstd: Fix encoder changing dictionary with same ID (# 1135)
  > fd3f23e zstd: Default to full zero frames (# 1134)
  > 8233c58 flate: Clean up histogram order (# 1133)
  > bcf0d12 build(deps): bump the github-actions group with 3 updates (# 1132)
  > cf758fe ci: Upgrade Go versions, clean up (# 1130)
  > 77cc520 Add v1.18.4
  > c03560f zstd: Add ResetWithOptions to encoder/decoder (# 1122)
  > 0874ab8 build(deps): bump the github-actions group with 3 updates (# 1126)
  > 4a36836 doc: Clarify documentation in readme (# 1125)
  > 4309644 zstd: document concurrency option handling in encoder (# 1124)
  > c262ec6 Update README.md
  > 861ca97 Downstream CVE-2025-61728 (# 1123)
  > 03de960 gzhttp: Add zstandard to server handler wrapper (# 1121)
  > bb1ab3b build(deps): bump the github-actions group with 2 updates (# 1120)
  > 986a51e fix(gzhttp): preserve qvalue when extra parameters follow in Accept-Encoding (# 1116)
  > fbe3b12 build(deps): bump the github-actions group with 3 updates (# 1118)
  > daa180d Change log
  > 444d5d9 Fix invalid encoding on level 9 with single value input (# 1115)
  > 503c028 build(deps): bump github/codeql-action in the github-actions group (# 1111)
  > 701ca28 flate: reduce stateless allocations (# 1106)
  > e0b47ff Update changelog
  > d10b525 build(deps): bump the github-actions group with 2 updates (# 1105)
  > 3c0d308 flate: Faster load+st0re (# 1104)
  > 6e2f5d5 flate: Use exact sizes for huffman tables (# 1103)
  > bda824b flate: Add examples (# 1102)
  > f44517c flate: Simplify matchlen (# 1101)
  > 54cb7a5 build(deps): bump the github-actions group with 3 updates (# 1096)
  > c43fcbb Run modernize. Deprecate Go 1.22 (# 1095)
  > 86a9489 gzhttp: remove redundant err check in zstdReader (# 1090)
  > ad4a030 build(deps): bump github/codeql-action in the github-actions group (# 1087)
  > 1a8c0e4 Avoiding extra allocation in Reset (# 1086)
  > d140606 Fix simple encoder src/dst swapped (# 1083)
  > 0792fc5 build(deps): bump github/codeql-action in the github-actions group (# 1082)
  > 0b8a32c Add simple zstd EncodeTo/DecodeTo functions (# 1079)
  > 3fb7836 s2: check for cap, not len of buffer in EncodeBetter/Best (# 1080)
  > 33f59b4 build(deps): bump the github-actions group with 2 updates (# 1077)
  > dee68d8 build(deps): bump github/codeql-action in the github-actions group (# 1075)
  > 8df4d01 build(deps): bump the github-actions group with 3 updates (# 1072)
  > e074e40 typo : s2/index.go (# 1069)
  > 520e81d Add notice to S2 about MinLZ (# 1065)
  > 29a7d27 zstd: Fix incorrect buffer size in dictionary encodes (# 1059)
  > 517288e build(deps): bump the github-actions group with 2 updates (# 1056)
bumping k8s.io/apimachinery 5e12da0...3e341b5:
  > 3e341b5 Merge pull request # 139666 from kmala/automated-cherry-pick-of-# 137451-upstream-release-1.35
  > 539f8c5 Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
bumping k8s.io/api 3f662f3...cfdecb5:
  > cfdecb5 Update dependencies to v0.35.7 tag
  > 42f2945 Merge pull request # 139666 from kmala/automated-cherry-pick-of-# 137451-upstream-release-1.35
  > 9a35aac Update google.golang.org/protobuf to v1.36.12-0.20260120151049-f2248ac996af
bumping github.com/prometheus/common 934ff37...b63d8c0:
  > b63d8c0 build(deps): bump golang.org/x/net (# 947)
  > 4109c3e build(deps): bump the codeql group with 4 updates (# 948)
  > 5270b62 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (# 949)
  > 1167ca3 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (# 950)
  > d28d382 Update common Prometheus files (# 946)
  > f915876 Merge pull request # 924 from roidelapluie/roidelapluie/redirect-header-comment
  > dfbebd0 Merge pull request # 945 from roidelapluie/roidelapluie/changelog-0.70.0
  > f684fc7 config: clarify sensitive redirect headers match net/http
  > 5eff7a8 Merge pull request # 941 from prometheus/dependabot/github_actions/actions/checkout-7.0.0
  > c8a0019 Update CHANGELOG for v0.70.0
  > f84efec Merge pull request # 918 from prometheus/time-split
  > a23c5b3 Merge pull request # 939 from prometheus/dependabot/github_actions/ossf/scorecard-action-2.4.3
  > 755e9d6 build(deps): bump actions/checkout from 3.1.0 to 7.0.0
  > 2269d3d Merge pull request # 922 from roidelapluie/roidelapluie/fix-textparse-empty-braces-panic
  > d6a7988 model: fix Time.UnmarshalJSON for larger negative numbers
  > 9e1eb87 Merge pull request # 942 from prometheus/dependabot/github_actions/actions/upload-artifact-7.0.1
  > c8bf6b8 build(deps): bump ossf/scorecard-action from 2.1.2 to 2.4.3
  > 7b228a8 Merge pull request # 937 from prombot/repo_sync
  > 56fe395 Merge pull request # 921 from roidelapluie/roidelapluie/oauth2-cross-host-check
  > a1600af expfmt: fix nil pointer panic when parsing empty braces "{}"
  > 8b99aea model: remove allocation in Time.UnmarshalJSON
  > ab2736d Merge pull request # 940 from prometheus/dependabot/github_actions/actions/setup-go-6.5.0
  > 6c31239 build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1
  > 2b43149 Merge pull request # 934 from prometheus/superq/tidy
  > 17c3165 Update common Prometheus files
  > 0fcda47 Merge pull request # 920 from roidelapluie/roidelapluie/cross-host-sticky
  > 2b55b3e config: check cross-host redirect before OAuth2 token fetch
  > c7fb7bb Merge pull request # 901 from roidelapluie/roidelapluie/fixredirectauth
  > 98ca625 model: reduce allocations in Time.UnmarshalJSON
  > e596873 Merge pull request # 938 from prometheus/dependabot/github_actions/codeql-ac07fb48a3
  > 556d740 build(deps): bump actions/setup-go from 6.2.0 to 6.5.0
  > a9c9e13 build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 (# 933)
  > 0d94589 Manually go mod tidy
  > 30ba470 Merge pull request # 919 from prometheus/superq/modernize
  > 428856f config: make isCrossHostRedirect sticky across the redirect chain
  > c4a7162 Update common Prometheus files (# 917)
  > 0d8de87 config: strip credentials on cross-host redirects
  > 4cc12e3 model: Add BenchmarkUnmarshalTime
  > 97c066a Add BenchmarkConvertMetricFamily comparing Prometheus text and OpenMetrics 1.0 encoders (# 943)
  > bbe02b9 build(deps): bump the codeql group with 4 updates
  > 6d120ca Merge pull request # 929 from s3onghyun/fix-tlsversion-stringer
  > 56870db Modernize Go
  > 2120573 Update common Prometheus files (# 915)
  > 0dfcdfb Merge pull request # 885 from prometheus/remove-arthur
  > 62e9d0f Merge pull request # 932 from roidelapluie/roidelapluie/route-query
  > 1b2cb09 Update common Prometheus files (# 930)
  > a28b311 config: fix TLSVersion.String() printing pointer address
  > 228386a build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (# 914)
  > 8392757 version: Add a slog helper (# 886)
  > aa19a4c Remove Arthur from maintainers list
  > dc216b8 route: add support for the QUERY HTTP method
  > 43de10c Update common Prometheus files (# 927)
  > b8c88b4 build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 (# 903)
  > f9b9d15 build(deps): bump golang.org/x/net from 0.49.0 to 0.51.0 (# 882)
  > afbd47d Update common Prometheus files (# 881)
  > 541bbcb Merge pull request # 926 from roidelapluie/roidelapluie/changelog
  > 1e0ae83 config: apply DialContextFunc to OAuth2 token-fetch transport (# 911)
  > a902616 Update for Go 1.26 (# 883)
  > e4c38a0 Remove logic adding unit to metrics name (# 877)
  > 436e0fe Update common Prometheus files (# 923)
  > 4ac8712 Update CHANGELOG
  > b51d01b Remove CircleCI (# 910)
  > adea628 Update common Prometheus files (# 880)
  > e3c14a0 Merge pull request # 925 from roidelapluie/roidelapluie/fix-loadhttpconfigfile-dir
  > 0f3c348 Merge pull request # 908 from machine424/ttlsco
  > 28b645d Update common Prometheus files (# 875)
  > a7b791d config: resolve LoadHTTPConfigFile paths relative to the config file
  > ce9215c Move interface assertions to a test file (# 839)
  > 732a9cf fix(http_config): fix client cert rotation when no CA is configured
  > 8f15ba0 build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 (# 878)
  > 1ba5ed7 build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 (# 892)
  > f195342 build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 (# 879)
  > 8f8ada6 build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 (# 891)
  > 5859ca1 Merge pull request # 874 from prometheus/repo_sync
  > 5bf00a4 build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (# 890)
  > 578c750 Update common Prometheus files (# 873)
  > 9d69b10 Update common Prometheus files
  > a4fac5c config: guard against nil oauth2 credential in RoundTrip (# 897)
  > 9e28363 Merge pull request # 898 from alliasgher/fix/NewOAuth2RoundTripper-exported-options
  > 9a26ab2 Update common Prometheus files (# 896)
  > 5fa8f6b config: change NewOAuth2RoundTripper to accept variadic HTTPClientOption
  > f7d77e9 Update common Prometheus files (# 895)
bumping knative.dev/pkg 39ebae2...76601dd:
  > 76601dd Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 (# 3376)
  > 82b6757 upgrade to latest dependencies (# 3378)
  > 1202cec Bump the k8s group with 5 updates (# 3375)
  > c27fe87 Bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 (# 3377)

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -24,14 +24,14 @@ require (
 	go.opentelemetry.io/otel/sdk/metric v1.44.0
 	go.opentelemetry.io/otel/trace v1.44.0
 	go.uber.org/zap v1.28.0
-	k8s.io/api v0.35.6
-	k8s.io/apimachinery v0.35.6
-	k8s.io/client-go v0.35.6
-	k8s.io/code-generator v0.35.6
+	k8s.io/api v0.35.7
+	k8s.io/apimachinery v0.35.7
+	k8s.io/client-go v0.35.7
+	k8s.io/code-generator v0.35.7
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
-	knative.dev/eventing v0.49.1-0.20260723125328-939bbd6c9454
+	knative.dev/eventing v0.49.1-0.20260724130631-defbb5343203
 	knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b
-	knative.dev/pkg v0.0.0-20260622140654-39ebae2ee2dc
+	knative.dev/pkg v0.0.0-20260727095757-76601dd085d0
 	knative.dev/reconciler-test v0.0.0-20260616023650-a4d79b33cda4
 )
 
@@ -67,7 +67,7 @@ require (
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/klauspost/compress v1.18.0 // indirect
+	github.com/klauspost/compress v1.19.1 // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
 	github.com/minio/highwayhash v1.0.3 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
@@ -76,11 +76,11 @@ require (
 	github.com/nats-io/jwt/v2 v2.7.4 // indirect
 	github.com/nats-io/nuid v1.0.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
-	github.com/prometheus/client_golang v1.23.2 // indirect
+	github.com/prometheus/client_golang v1.24.1 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.67.5 // indirect
+	github.com/prometheus/common v0.70.1 // indirect
 	github.com/prometheus/otlptranslator v1.0.0 // indirect
-	github.com/prometheus/procfs v0.20.1 // indirect
+	github.com/prometheus/procfs v0.21.1 // indirect
 	github.com/rickb777/plural v1.2.1 // indirect
 	github.com/robfig/cron/v3 v3.0.1 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
@@ -100,28 +100,28 @@ require (
 	go.uber.org/automaxprocs v1.6.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.53.0 // indirect
+	go.yaml.in/yaml/v3 v3.0.5 // indirect
+	golang.org/x/crypto v0.54.0 // indirect
 	golang.org/x/mod v0.37.0 // indirect
-	golang.org/x/net v0.56.0 // indirect
+	golang.org/x/net v0.57.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
-	golang.org/x/sync v0.21.0 // indirect
-	golang.org/x/sys v0.46.0 // indirect
-	golang.org/x/term v0.44.0 // indirect
-	golang.org/x/text v0.38.0 // indirect
+	golang.org/x/sync v0.22.0 // indirect
+	golang.org/x/sys v0.47.0 // indirect
+	golang.org/x/term v0.45.0 // indirect
+	golang.org/x/text v0.40.0 // indirect
 	golang.org/x/time v0.12.0 // indirect
-	golang.org/x/tools v0.46.0 // indirect
+	golang.org/x/tools v0.47.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa // indirect
 	google.golang.org/grpc v1.82.1 // indirect
-	google.golang.org/protobuf v1.36.11 // indirect
+	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiextensions-apiserver v0.35.6 // indirect
-	k8s.io/apiserver v0.35.6 // indirect
+	k8s.io/apiextensions-apiserver v0.35.7 // indirect
+	k8s.io/apiserver v0.35.7 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect