upgrade to latest dependencies (#790)

bumping google.golang.org/grpc caf0772...ebd8f06:
  > ebd8f06 Change version to 1.82.1 (# 9238)
  > 4ea465d Cherry-pick commits (# 9236)
  > 9494a2c Change version to 1.82.1-dev (# 9171)
  > bd23985 Change version to 1.82.0 (# 9170)
  > 0f3086d Fix minor issues not covered by PR # 9137 (# 9147)
  > fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (# 9163)
  > 91dd64f transport: surface subsequent data when receiving non-gRPC header (# 8929)
  > adc97de test/kokoro: add config for regional-td test (# 9158)
  > 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (# 9148)
  > b58f32d server: Set a pprof label on new stream goroutines (# 9082)
  > 6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWriter.processData()` (# 9125)
  > bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (# 9137)
  > 429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (# 9074)
  > 761e655 grpc: limit decompression size in legacy gzip Decompressor to prevent OOM (# 9114)
  > 18a8d3d extproc: implement ClientFilter and ClientFilterBuilder interface (# 9086)
  > db35da8 credentials/alts: fix the leaked context and close handshaker properly (# 9091)
  > 6093108 xds/server: Fix memory leak of ServerInterceptor instances during RDS updates (# 9138)
  > 037c6ef extproc: register filter and parse base and override config (# 9073)
  > 4ee6ac4 xds/resolver: support HTTP filters for routes using cluster specifier plugins (# 9100)
  > 39f1653 internal/grpcutil: remove FullMatchWithRegex to prevent data race (# 9134)
  > 1c8e095 transport: change serverHandlerTransport to call Close instead of panic from Drain function (# 9136)
  > 1bb9742 encoding: call Close on decompressor reader if it implements io.Closer (# 9135)
  > f1360fb balancergroup: merge whitebox tests into blackbox test (# 9094)
  > bb023f8 gemini: wrap lines at 80-cols to make linter happy (# 9131)
  > 6602080 experimental/stats: Expose Telemetry Label Callback (# 8877)
  > fd8a106 github: Add styleguide for Gemini Code Assist (# 9124)
  > 7c47d2a test: incoming RPC that contains a path with double leading slashes (# 9120)
  > 1c63fa5 grpc: remove support for env var GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING (# 9112)
  > 959af53 transport: set current timestamp in channelz socket metrics (# 9109)
  > 94b9449 xds/rbac: enforce strict presence-based short-circuit in authenticatedMatcher (# 9111)
  > 89fe783 grpc: Document interactions between static flow control window options (# 9096)
  > 3d0dd1e cmd/protoc-gen-go-grpc: Update to latest version of grpc-go (# 9110)
  > 811290b stats/opentelemetry: restore the changes from # 8342 and fix the flaky test. (# 8923)
  > 679ae4c stats: use correct import for services (# 9107)
  > 850cc54 grpc: Remove ErrRetriesExhausted type in favor of error string (# 9105)
  > 3d82ab3 otel: Segregate client and server RPCInfo used for metrics and traces (# 9081)
  > a481b8f cleanup: removing TODO to improve timeouts encoding. (# 9101)
  > eafb29a Revert "xds/rbac: handle errors returned from matcher evaluation (# 9092)". (# 9099)
  > bdf4571 interop/orcalb: Delegate SubConn management to pick_first (# 8914)
  > fa4c702 xds/rbac: handle errors returned from matcher evaluation (# 9092)
  > 4ac8a45 grpc: use enum instead of integer in return statements in compress() (# 9089)
  > d9d87bd xds/resolver: change int32 to atomic.int32 (# 9080)
  > ac4aa01 cleanup: replace net.IP with netip.Addr in tests (# 9075)
  > 29665f4 transport: Pool read buffers used by the HTTP/2 framer (# 9032)
  > f6304e9 internal/transport: defer calls to mu.Unlock in the stream inbound flow control implementation (# 9077)
  > ab7a2aa clusterimpl: fix test logic waiting for calls to ResolveNow (# 9071)
  > 22adc9e clustermanager: fix test logic waiting for picker during graceful switch (# 9072)
  > 06fc26a xds: support disabling HTTP filters (# 9054)
  > c01f4f1 grpc: deprecate WithSharedWriteBuffer and SharedWriteBuffer (# 9060)
  > 6cd0d0c grpc: add link to CVE in log messages (# 9069)
  > b3f2df4 internal/resolver: improve the docstring of ClientInterceptor.NewStream (# 9070)
  > bac4588 readyreader: add buffered reader (# 9055)
  > 39a15f6 xds: implement cluster metadata parsing for GCP Authentication filter (gRFC A83) (# 9044)
  > e80524d transport: set default header list size to 8KB and guard behind an env variable. (# 9019)
  > 6b32840 deps: update dependencies for all modules (# 9068)
  > c5b160e balancer: enable `GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES` by default (# 9017)
  > 412cfbd Change version to 1.82.0-dev (# 9064)
bumping knative.dev/eventing 9a2ae8b...939bbd6:
  > 939bbd6 build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 (# 9228)
  > 39eb954 build(deps): bump the github-actions group across 1 directory with 4 updates (# 9225)
  > 648661d cleanup: remove vestigial kodata directories (# 9227)
  > 5411419 docs: fix stale contribution and e2e debug instructions (# 9154)
  > 8cf4c4b fix: spread vreplicas across minReplicas pods in scheduler (# 9157)
  > 2996bf9 [main] Upgrade to latest dependencies (# 9156)
bumping knative.dev/reconciler-test 125bf8d...a4d79b3:
  > a4d79b3 upgrade to latest dependencies (# 905)
bumping knative.dev/pkg 6300c57...39ebae2:
  > 39ebae2 Bump actions/checkout from 6 to 7 (# 3371)

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -29,10 +29,10 @@ require (
 	k8s.io/client-go v0.35.6
 	k8s.io/code-generator v0.35.6
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
-	knative.dev/eventing v0.49.1-0.20260615165644-9a2ae8b2b023
+	knative.dev/eventing v0.49.1-0.20260723125328-939bbd6c9454
 	knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b
-	knative.dev/pkg v0.0.0-20260615201544-6300c57a9e78
-	knative.dev/reconciler-test v0.0.0-20260602150814-125bf8d48e1c
+	knative.dev/pkg v0.0.0-20260622140654-39ebae2ee2dc
+	knative.dev/reconciler-test v0.0.0-20260616023650-a4d79b33cda4
 )
 
 require sigs.k8s.io/yaml v1.6.0
@@ -114,7 +114,7 @@ require (
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa // indirect
-	google.golang.org/grpc v1.81.1 // indirect
+	google.golang.org/grpc v1.82.1 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect

go.sum

@@ -1002,8 +1002,8 @@ google.golang.org/grpc v1.39.1/go.mod h1:PImNr+rS9TWYb2O4/emRugxiyHZ5JyHW5F+RPnD
 google.golang.org/grpc v1.40.0/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34=
 google.golang.org/grpc v1.40.1/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34=
 google.golang.org/grpc v1.42.0/go.mod h1:k+4IHHFw41K8+bbowsex27ge2rCb65oeWqe4jJ590SU=
-google.golang.org/grpc v1.81.1 h1:VnnIIZ88UzOOKLukQi+ImGz8O1Wdp8nAGGnvOfEIWQQ=
-google.golang.org/grpc v1.81.1/go.mod h1:xGH9GfzOyMTGIOXBJmXt+BX/V0kcdQbdcuwQ/zNw42I=
+google.golang.org/grpc v1.82.1 h1:NnAxzGRA0677vCa4BUkOAnO5+FfQqVl9iUXeD0IqcGE=
+google.golang.org/grpc v1.82.1/go.mod h1:yzTZ1TB1Z3SG+LIYaI+WiE8D5+PZ3ArnrSp8zF3+/ZA=
 google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
@@ -1074,14 +1074,14 @@ k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 h1:Y3gxNAuB0OBLImH611+UDZ
 k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-knative.dev/eventing v0.49.1-0.20260615165644-9a2ae8b2b023 h1:ummPeOc6N040T4/W0az4eR1fXKv0Vu24m1DVv9jysVw=
-knative.dev/eventing v0.49.1-0.20260615165644-9a2ae8b2b023/go.mod h1:1+9UhTLOb6iFQ63L6rC02wZlYlpB8STI+Z7/aG3vodc=
+knative.dev/eventing v0.49.1-0.20260723125328-939bbd6c9454 h1:kXSYu2S/YUSpFP2yjKX+KpJsZxZRWocMeE0RkjoX1FA=
+knative.dev/eventing v0.49.1-0.20260723125328-939bbd6c9454/go.mod h1:6+xOOrUY2wqD8hyv1gzgONxYlLGquyGvUyu9ONmLkoI=
 knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b h1:MvbV2F2BdI8qKrYYUhDwbUZbX0BAYRSIpXM2TOtTvs0=
 knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
-knative.dev/pkg v0.0.0-20260615201544-6300c57a9e78 h1:l6cYazykii3EtY+DVcQOBMgGQ9WBnhAKeGRSo+15JiI=
-knative.dev/pkg v0.0.0-20260615201544-6300c57a9e78/go.mod h1:Ve19ZYW7DwIfQL4oCT9t9zmPp4egv0KacKVPXUcivDQ=
-knative.dev/reconciler-test v0.0.0-20260602150814-125bf8d48e1c h1:M8GPqYxAGOLtvqk0fNUjnJp6rzxqpIRCbESh3hfMsVs=
-knative.dev/reconciler-test v0.0.0-20260602150814-125bf8d48e1c/go.mod h1:QBq7VXOkZ5mbuXn7lK2pGCXLGIJsRyh0hSjoF1wd1Ds=
+knative.dev/pkg v0.0.0-20260622140654-39ebae2ee2dc h1:i2GrJuRdTFd4sNWocwefVGwuSOkOPjtadEWRTiGsEOY=
+knative.dev/pkg v0.0.0-20260622140654-39ebae2ee2dc/go.mod h1:Ve19ZYW7DwIfQL4oCT9t9zmPp4egv0KacKVPXUcivDQ=
+knative.dev/reconciler-test v0.0.0-20260616023650-a4d79b33cda4 h1:ePcqhYqn7YAcXFV1N7Tjo/4o3JJzL38aCfNbHDQmzHY=
+knative.dev/reconciler-test v0.0.0-20260616023650-a4d79b33cda4/go.mod h1:n9xFTvS9uVHAWlUkbaLP8rgFbfLOnSMIKVadb7GslrQ=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=