upgrade to latest dependencies (#1130)

bumping knative.dev/pkg 396dbaa...cb58ae5:
  > cb58ae5 Bump the otel group with 11 updates (# 3341)
bumping go.opentelemetry.io/otel a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)
bumping google.golang.org/grpc dda86db...397e45e:
  > 397e45e Change version to 1.80.0 (# 8948)
  > 64ebf0a Cherry-pick # 8997 to v1.80.x (# 9027)
  > e45ed24 xds/rbac: add additional handling for addresses with ports (# 8990) (# 9022)
  > c78d26e Cherry-pick # 8957 to v1.80.x (# 9007)
  > bd7cd3c grpc: enforce strict path checking for incoming requests on the server (# 8987)
  > b6597b3 xds/clusterimpl: use xdsConfig for updates and remove redundant fields from LB config (# 8945)
  > 1d4fa8a xds: change cdsbalancer to use update from dependency manager (# 8907)
  > 8f47d36 attributes: Replace internal map with linked list (# 8933)
  > 22e1ee8 xds: add panic recovery in xdsclient resource unmarshalling. (# 8895)
  > 7136e99 credentials/alts: Pool write buffers (# 8919)
  > 46a31de security/advancedtls: fix macOS compatibility in CRL script (# 8932)
  > 38eb2de protoc-gen-go-grpc: remove use_generic_streams_experimental flag (defaults to true) (# 8936)
  > 7bc5785 xds: fix copy-paste bug in WeightExpirationPeriod config (# 8915)
  > d2eab68 balancer/rls: fix goroutine leak in control_channel_test (# 8898)
  > c9d52ee xds/xdsclient: add EDS sum of endpoint weights does not exceed MaxUint32 (# 8899)
  > 4a83bf9 ringhash: enable behaviors of A76 by default (# 8922)
  > ace972d orca: fix goroutine leak in fakeORCAService.StreamCoreMetrics (# 8911)
  > 19e4128 xds: decouple A76 and A86 EDS metadata parsing (# 8875)
  > b6f89f7 mem: Move buffer pool implementations to internal (# 8910)
  > c1a9239 xds/rbac: replace legacy net to netip (# 8908)
  > 3be7e2d mem: Add faster tiered buffer pool (# 8775)
  > 13e2455 correctly check nil stream (# 8905)
  > 944f058 client: process RPC stats/tracing only when a handler is configured (# 8874)
  > 2c113ab advancedtls: re-generate test certs and increase expiry (# 8900)
  > 779b792 xds: refactor server-side HTTP filter processing (# 8878)
  > e08fc36 resolver: Add resolver.EndpointMap.All() to iterate over keys and values (# 8867)
  > d7b3f93 cdsbalancer: Increase timeout for test (# 8889)
  > 7860144 mem: ensure `Reader` buffers are reused on early return (# 8886)
  > 0f69b6e credentials: add end-to-end tests for JWT call credentials behavior (# 8818)
  > 9d8ede9 xds: split service and message codegen import (# 8881)
  > 12fc393 xdsdepmgr: add functionality for cluster subscription (# 8792)
  > 55bfbbb xds/clusterresolver: implement gRFC A61 changes for LOGICAL_DNS clusters (# 8733)
  > 830c909 cmd/protoc-gen-go-grpc: bump -version to 1.6.1 for release (# 8879)
  > b7b1cce examples: Poll for expected server logs in test (# 8871)
  > 2abe1f0 github: Add config for Gemini code assist (# 8873)
  > 46350a7 channelz: Regenerate proto (# 8872)
  > 49e224f xds/googlec2p: Revert PR 8829 that removed `SetFallbackBootstrapConfig` (# 8869)
  > 61d569d *: Implementation of weighted random shuffling (A113) (# 8864)
  > 7985bb4 rls: Fix flaky test TestPickerUpdateOnDataCacheSizeDecrease (# 8856)
  > 3e475d7 xdsclient: add test for custom xDS resource subscription (# 8834)
  > 0dc1bcd client/picker: log loop to V(2) (# 8863)
  > 69b542a credentials/tls: verify overwritten authority against only leaf certificate (# 8831)
  > e6ca417 xds/googlec2p: remove legacy `SetFallbackBootstrapConfig` and fix tests. (# 8829)
  > 6601041 documentation: improve proxy documentation (# 8840)
  > 65b3eeb transport: warn when header list size exceeds 8KB (# 8845)
  > 19ace67 outlierdetection: move ParseConfig test to a test-only package (# 8833)
  > c05cfb3 balancer/rls: Use log *f functions with format args (# 8859)
  > a8d11ce balancer: introduce env flag for case-sensitive registry (# 8837)
  > c7ec4d9 test: use testpb alias in stream_test.go for proto messages. (# 8854)
  > 1c79a7c transport: fix potential race in `TestKeepaliveClientClosesWithActiveStreams`. (# 8827)
  > 7278983 xds: fix typo in log message (# 8843)
  > c2d81b7 deps: update dependencies for all modules (# 8853)
  > 3fb101d hierarchy: Use public API for testing (# 8846)
  > de16514 Change version to 1.80.0-dev (# 8852)
bumping google.golang.org/genproto/googleapis/rpc 4cfbd41...9d38bb4:
  > 9d38bb4 chore(deps): bump google.golang.org/grpc in /googleapis/api (# 1292)
  > 1fecd4d chore(all): update all (major) (# 1288)
  > 3a24fdc chore(all): update all (# 1287)
  > f93e5f3 chore(all): auto-regenerate .pb.go files (# 1291)
  > d5a96ad chore(all): auto-regenerate .pb.go files (# 1290)
  > b2ae96c chore(all): auto-regenerate .pb.go files (# 1289)
  > d00831a chore(all): auto-regenerate .pb.go files (# 1280)
  > e3a33c9 chore(deps): bump google.golang.org/grpc in /googleapis/api/apikeys (# 1282)
  > 81a5c45 chore(deps): bump google.golang.org/grpc (# 1283)
  > cd36c79 chore(deps): bump google.golang.org/grpc (# 1284)
  > beaeedf chore(deps): bump google.golang.org/grpc in /googleapis/api/serviceusage (# 1285)
  > 33aa9e5 chore(deps): bump google.golang.org/grpc in /googleapis/bytestream (# 1281)
  > c567d0d chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 (# 1286)
  > 0b37fe3 chore(all): update all (# 1279)
  > 9f6642b chore(all): update GitHub Artifact Actions (# 1277)
  > e463d84 chore(all): auto-regenerate .pb.go files (# 1278)
  > 84a4fc4 chore(all): update all (# 1276)
  > a57be14 chore(all): auto-regenerate .pb.go files (# 1272)
  > 2f722ef chore(all): update all (# 1275)
  > 42d3e9b chore(all): update all (# 1273)
  > a2cb227 feat: bump min go version to 1.25 (# 1274)
bumping go.yaml.in/yaml/v2 3b57511...43b627a:
  > 43b627a Replace gopkg.in/check.v1 with the standard testing library
bumping go.opentelemetry.io/otel/metric a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)
bumping go.opentelemetry.io/otel/trace a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -10,14 +10,14 @@ require (
 	go.uber.org/zap v1.27.1
 	golang.org/x/sync v0.20.0
 	golang.org/x/time v0.10.0
-	google.golang.org/grpc v1.79.3
+	google.golang.org/grpc v1.80.0
 	k8s.io/api v0.35.3
 	k8s.io/apimachinery v0.35.3
 	k8s.io/client-go v0.35.3
 	k8s.io/code-generator v0.35.3
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
 	knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad
-	knative.dev/pkg v0.0.0-20260329160701-396dbaacd652
+	knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894
 	sigs.k8s.io/yaml v1.6.0
 )
 
@@ -49,11 +49,11 @@ require (
 	github.com/x448/float16 v0.8.4 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect
-	go.opentelemetry.io/otel v1.42.0 // indirect
-	go.opentelemetry.io/otel/metric v1.42.0 // indirect
-	go.opentelemetry.io/otel/trace v1.42.0 // indirect
+	go.opentelemetry.io/otel v1.43.0 // indirect
+	go.opentelemetry.io/otel/metric v1.43.0 // indirect
+	go.opentelemetry.io/otel/trace v1.43.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	go.yaml.in/yaml/v2 v2.4.3 // indirect
+	go.yaml.in/yaml/v2 v2.4.4 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/mod v0.34.0 // indirect
 	golang.org/x/net v0.52.0 // indirect
@@ -63,7 +63,7 @@ require (
 	golang.org/x/text v0.35.0 // indirect
 	golang.org/x/tools v0.43.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260209200024-4cfbd4190f57 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect

go.sum

@@ -99,16 +99,16 @@ go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 h1:OyrsyzuttWTSur2qN/Lm0m2a8yqyIjUVBZcxFPuXq2o=
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0/go.mod h1:C2NGBr+kAB4bk3xtMXfZ94gqFDtg/GkI7e9zqGh5Beg=
-go.opentelemetry.io/otel v1.42.0 h1:lSQGzTgVR3+sgJDAU/7/ZMjN9Z+vUip7leaqBKy4sho=
-go.opentelemetry.io/otel v1.42.0/go.mod h1:lJNsdRMxCUIWuMlVJWzecSMuNjE7dOYyWlqOXWkdqCc=
-go.opentelemetry.io/otel/metric v1.42.0 h1:2jXG+3oZLNXEPfNmnpxKDeZsFI5o4J+nz6xUlaFdF/4=
-go.opentelemetry.io/otel/metric v1.42.0/go.mod h1:RlUN/7vTU7Ao/diDkEpQpnz3/92J9ko05BIwxYa2SSI=
-go.opentelemetry.io/otel/sdk v1.42.0 h1:LyC8+jqk6UJwdrI/8VydAq/hvkFKNHZVIWuslJXYsDo=
-go.opentelemetry.io/otel/sdk v1.42.0/go.mod h1:rGHCAxd9DAph0joO4W6OPwxjNTYWghRWmkHuGbayMts=
-go.opentelemetry.io/otel/sdk/metric v1.42.0 h1:D/1QR46Clz6ajyZ3G8SgNlTJKBdGp84q9RKCAZ3YGuA=
-go.opentelemetry.io/otel/sdk/metric v1.42.0/go.mod h1:Ua6AAlDKdZ7tdvaQKfSmnFTdHx37+J4ba8MwVCYM5hc=
-go.opentelemetry.io/otel/trace v1.42.0 h1:OUCgIPt+mzOnaUTpOQcBiM/PLQ/Op7oq6g4LenLmOYY=
-go.opentelemetry.io/otel/trace v1.42.0/go.mod h1:f3K9S+IFqnumBkKhRJMeaZeNk9epyhnCmQh/EysQCdc=
+go.opentelemetry.io/otel v1.43.0 h1:mYIM03dnh5zfN7HautFE4ieIig9amkNANT+xcVxAj9I=
+go.opentelemetry.io/otel v1.43.0/go.mod h1:JuG+u74mvjvcm8vj8pI5XiHy1zDeoCS2LB1spIq7Ay0=
+go.opentelemetry.io/otel/metric v1.43.0 h1:d7638QeInOnuwOONPp4JAOGfbCEpYb+K6DVWvdxGzgM=
+go.opentelemetry.io/otel/metric v1.43.0/go.mod h1:RDnPtIxvqlgO8GRW18W6Z/4P462ldprJtfxHxyKd2PY=
+go.opentelemetry.io/otel/sdk v1.43.0 h1:pi5mE86i5rTeLXqoF/hhiBtUNcrAGHLKQdhg4h4V9Dg=
+go.opentelemetry.io/otel/sdk v1.43.0/go.mod h1:P+IkVU3iWukmiit/Yf9AWvpyRDlUeBaRg6Y+C58QHzg=
+go.opentelemetry.io/otel/sdk/metric v1.43.0 h1:S88dyqXjJkuBNLeMcVPRFXpRw2fuwdvfCGLEo89fDkw=
+go.opentelemetry.io/otel/sdk/metric v1.43.0/go.mod h1:C/RJtwSEJ5hzTiUz5pXF1kILHStzb9zFlIEe85bhj6A=
+go.opentelemetry.io/otel/trace v1.43.0 h1:BkNrHpup+4k4w+ZZ86CZoHHEkohws8AY+WTX09nk+3A=
+go.opentelemetry.io/otel/trace v1.43.0/go.mod h1:/QJhyVBUUswCphDVxq+8mld+AvhXZLhe+8WVFxiFff0=
 go.uber.org/atomic v1.4.0/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
@@ -118,8 +118,8 @@ go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN8
 go.uber.org/zap v1.10.0/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q=
 go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
 go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
-go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
-go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
+go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
+go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
@@ -171,12 +171,12 @@ golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8T
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0=
 gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
-gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
-gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260209200024-4cfbd4190f57 h1:mWPCjDEyshlQYzBpMNHaEof6UX1PmHcaUODUywQ0uac=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260209200024-4cfbd4190f57/go.mod h1:j9x/tPzZkyxcgEFkiKEEGxfvyumM01BEtsW8xzOahRQ=
-google.golang.org/grpc v1.79.3 h1:sybAEdRIEtvcD68Gx7dmnwjZKlyfuc61Dyo9pGXXkKE=
-google.golang.org/grpc v1.79.3/go.mod h1:KmT0Kjez+0dde/v2j9vzwoAScgEPx/Bw1CYChhHLrHQ=
+gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
+gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 h1:m8qni9SQFH0tJc1X0vmnpw/0t+AImlSvp30sEupozUg=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
+google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
+google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
 google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
 google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -206,8 +206,8 @@ k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzk
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad h1:yH957Dv5HrPgllwTs7e1wvCKcjg/PC0QPQGEWkK7QFw=
 knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
-knative.dev/pkg v0.0.0-20260329160701-396dbaacd652 h1:oqNQsNewkItkKI2LUfQgYGwdZzIxZ73N/L0AMwVBp80=
-knative.dev/pkg v0.0.0-20260329160701-396dbaacd652/go.mod h1:D1bZ7hFnBZaA9Y6I/TCymeaF22z9qkwbhcA1b/1nHeM=
+knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894 h1:Zabll+2HVz/YH9JLIIL/o7FH8tQP7m2neAgUNSJUjGk=
+knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894/go.mod h1:pqHAkUWsa/DsOKJvubQ7JjesfbA+W7ph3nOXt7DCiAw=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=