diff --git a/go.mod b/go.mod
index f5693a3d7a..c626dbbae1 100644
--- a/go.mod
+++ b/go.mod
@@ -18,16 +18,16 @@ require (
 	google.golang.org/api v0.198.0
 	istio.io/api v0.0.0-20231206023236-e7cadb36da57
 	istio.io/client-go v1.18.7
-	k8s.io/api v0.35.3
-	k8s.io/apimachinery v0.35.3
-	k8s.io/client-go v0.35.3
-	k8s.io/code-generator v0.35.3
-	knative.dev/caching v0.0.0-20260415135440-a753404a9071
-	knative.dev/eventing v0.48.1-0.20260415165636-0a7b2da46145
-	knative.dev/hack v0.0.0-20260415233235-54d1312ccc91
-	knative.dev/pkg v0.0.0-20260415140041-388556d5c488
-	knative.dev/reconciler-test v0.0.0-20260415143040-51affdaaa44f
-	knative.dev/serving v0.48.1-0.20260415213836-1017c2be6232
+	k8s.io/api v0.35.4
+	k8s.io/apimachinery v0.35.4
+	k8s.io/client-go v0.35.4
+	k8s.io/code-generator v0.35.4
+	knative.dev/caching v0.0.0-20260422140616-453ad996bbe2
+	knative.dev/eventing v0.48.1-0.20260422192315-152cef39c9ab
+	knative.dev/hack v0.0.0-20260421155212-aeb7b4a9bf96
+	knative.dev/pkg v0.0.0-20260422015212-ec452872dcc1
+	knative.dev/reconciler-test v0.0.0-20260422143017-dd240881af76
+	knative.dev/serving v0.48.1-0.20260422164114-24d95224dd8c
 	sigs.k8s.io/cluster-inventory-api v0.1.0
 	sigs.k8s.io/controller-tools v0.20.1
 	sigs.k8s.io/yaml v1.6.0
@@ -193,13 +193,13 @@ require (
 	gopkg.in/op/go-logging.v1 v1.0.0-20160211212156-b2cb9fa56473 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiextensions-apiserver v0.35.3 // indirect
-	k8s.io/apiserver v0.35.3 // indirect
+	k8s.io/apiextensions-apiserver v0.35.4 // indirect
+	k8s.io/apiserver v0.35.4 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b // indirect
 	k8s.io/klog/v2 v2.140.0 // indirect
 	k8s.io/kube-openapi v0.0.0-20260319004828-5883c5ee87b9 // indirect
 	k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 // indirect
-	knative.dev/networking v0.0.0-20260414015937-f29b24983488 // indirect
+	knative.dev/networking v0.0.0-20260421015711-652da006c95d // indirect
 	sigs.k8s.io/controller-runtime v0.23.3 // indirect
 	sigs.k8s.io/gateway-api v1.1.0 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
diff --git a/go.sum b/go.sum
index f4c755b9bf..7549a320a4 100644
--- a/go.sum
+++ b/go.sum
@@ -1763,30 +1763,30 @@ istio.io/client-go v1.18.7/go.mod h1:MeI/KZUVp3jWyoXGSpFkiLYz012qpbQbjnVuYMcM9k4
 k8s.io/api v0.22.5/go.mod h1:mEhXyLaSD1qTOf40rRiKXkc+2iCem09rWLlFwhCEiAs=
 k8s.io/api v0.27.7/go.mod h1:ZNExI/Lhrs9YrLgVWx6jjHZdoWCTXfBXuFjt1X6olro=
 k8s.io/api v0.27.10/go.mod h1:cDmAF4GtSVRO0+5hOY/Vo3lLCQMOp6FfrXZ94/gQwC0=
-k8s.io/api v0.35.3 h1:pA2fiBc6+N9PDf7SAiluKGEBuScsTzd2uYBkA5RzNWQ=
-k8s.io/api v0.35.3/go.mod h1:9Y9tkBcFwKNq2sxwZTQh1Njh9qHl81D0As56tu42GA4=
+k8s.io/api v0.35.4 h1:P7nFYKl5vo9AGUp1Z+Pmd3p2tA7bX2wbFWCvDeRv988=
+k8s.io/api v0.35.4/go.mod h1:yl4lqySWOgYJJf9RERXKUwE9g2y+CkuwG+xmcOK8wXU=
 k8s.io/apiextensions-apiserver v0.27.7/go.mod h1:x0p+b5a955lfPz9gaDeBy43obM12s+N9dNHK6+dUL+g=
-k8s.io/apiextensions-apiserver v0.35.3 h1:2fQUhEO7P17sijylbdwt0nBdXP0TvHrHj0KeqHD8FiU=
-k8s.io/apiextensions-apiserver v0.35.3/go.mod h1:tK4Kz58ykRpwAEkXUb634HD1ZAegEElktz/B3jgETd8=
+k8s.io/apiextensions-apiserver v0.35.4 h1:HeP+Upp7ItdvnyGmub0yoix+2z5+ev4M5cE5TCgtOUU=
+k8s.io/apiextensions-apiserver v0.35.4/go.mod h1:ogQlk+stIE8mnoRthSYCwlOS12fVqgWFiErMwPaXA7c=
 k8s.io/apimachinery v0.22.5/go.mod h1:xziclGKwuuJ2RM5/rSFQSYAj0zdbci3DH8kj+WvyN0U=
 k8s.io/apimachinery v0.27.7/go.mod h1:jBGQgTjkw99ef6q5hv1YurDd3BqKDk9YRxmX0Ozo0i8=
 k8s.io/apimachinery v0.27.10/go.mod h1:IHu2ovJ60RqxyPSLmTel7KDLdOCRbpOxwtUBmwBnT/E=
-k8s.io/apimachinery v0.35.3 h1:MeaUwQCV3tjKP4bcwWGgZ/cp/vpsRnQzqO6J6tJyoF8=
-k8s.io/apimachinery v0.35.3/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
+k8s.io/apimachinery v0.35.4 h1:xtdom9RG7e+yDp71uoXoJDWEE2eOiHgeO4GdBzwWpds=
+k8s.io/apimachinery v0.35.4/go.mod h1:NNi1taPOpep0jOj+oRha3mBJPqvi0hGdaV8TCqGQ+cc=
 k8s.io/apiserver v0.27.7/go.mod h1:OrLG9RwCOerutAlo8QJW5EHzUG9Dad7k6rgcDUNSO/w=
-k8s.io/apiserver v0.35.3 h1:D2eIcfJ05hEAEewoSDg+05e0aSRwx8Y4Agvd/wiomUI=
-k8s.io/apiserver v0.35.3/go.mod h1:JI0n9bHYzSgIxgIrfe21dbduJ9NHzKJ6RchcsmIKWKY=
+k8s.io/apiserver v0.35.4 h1:vtuFqNFmF9bPRdHDL2lpK6qCTPWDreZJL4LRPwVM6ho=
+k8s.io/apiserver v0.35.4/go.mod h1:JnBcb+J8kFXKpZkgcbcUnPBBHi4qgBii1I7dLxFY/oo=
 k8s.io/client-go v0.22.5/go.mod h1:cs6yf/61q2T1SdQL5Rdcjg9J1ElXSwbjSrW2vFImM4Y=
 k8s.io/client-go v0.27.7/go.mod h1:dZ2kqcalYp5YZ2EV12XIMc77G6PxHWOJp/kclZr4+5Q=
 k8s.io/client-go v0.27.10/go.mod h1:PhrjLdIJNy7L8liOPEzm6wNlMjhIRJeVbfvksTxKNqI=
-k8s.io/client-go v0.35.3 h1:s1lZbpN4uI6IxeTM2cpdtrwHcSOBML1ODNTCCfsP1pg=
-k8s.io/client-go v0.35.3/go.mod h1:RzoXkc0mzpWIDvBrRnD+VlfXP+lRzqQjCmKtiwZ8Q9c=
+k8s.io/client-go v0.35.4 h1:DN6fyaGuzK64UvnKO5fOA6ymSjvfGAnCAHAR0C66kD8=
+k8s.io/client-go v0.35.4/go.mod h1:2Pg9WpsS4NeOpoYTfHHfMxBG8zFMSAUi4O/qoiJC3nY=
 k8s.io/code-generator v0.27.7/go.mod h1:w1YF/xQcTg+d9Ag+04xuRqER+q8rDnJ70ynLql8/RLA=
-k8s.io/code-generator v0.35.3 h1:NDGCLkEm6Ho65wTdSe2EgErmmtsrezOPwwOchlNc6FQ=
-k8s.io/code-generator v0.35.3/go.mod h1:LAVriRGXQusHQ0Ns64SE1ublSswm1KrK7cXn0GuQETg=
+k8s.io/code-generator v0.35.4 h1:i0FfiXAeUMBlHarjVk5ZWf6Wjsg3YJpNYmOg0nPk6r4=
+k8s.io/code-generator v0.35.4/go.mod h1:rwLDdemFgPK6dGlLFHPUieyekgAlV1x8IVafjAy/ELA=
 k8s.io/component-base v0.27.7/go.mod h1:YGjlCVL1oeKvG3HSciyPHFh+LCjIEqsxz4BDR3cfHRs=
-k8s.io/component-base v0.35.3 h1:mbKbzoIMy7JDWS/wqZobYW1JDVRn/RKRaoMQHP9c4P0=
-k8s.io/component-base v0.35.3/go.mod h1:IZ8LEG30kPN4Et5NeC7vjNv5aU73ku5MS15iZyvyMYk=
+k8s.io/component-base v0.35.4 h1:6n1tNJ87johN0Hif0Fs8K2GMthsaUwMqCebUDLYyv7U=
+k8s.io/component-base v0.35.4/go.mod h1:qaDJgz5c1KYKla9occFmlJEfPpkuA55s90G509R+PeY=
 k8s.io/gengo v0.0.0-20200413195148-3a45101e95ac/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=
 k8s.io/gengo v0.0.0-20210813121822-485abfe95c7c/go.mod h1:FiNAH4ZV3gBg2Kwh89tzAEV2be7d5xI0vBa/VySYy3E=
 k8s.io/gengo v0.0.0-20220902162205-c0856e24416d/go.mod h1:FiNAH4ZV3gBg2Kwh89tzAEV2be7d5xI0vBa/VySYy3E=
@@ -1810,20 +1810,20 @@ k8s.io/utils v0.0.0-20210819203725-bdf08cb9a70a/go.mod h1:jPW/WVKK9YHAvNhRxK0md/
 k8s.io/utils v0.0.0-20230209194617-a36077c30491/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU=
 k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
-knative.dev/caching v0.0.0-20260415135440-a753404a9071 h1:LXx4mzoHXGQNEOpnvQeNTj1ovlxH52h0bO+yyYZDfs8=
-knative.dev/caching v0.0.0-20260415135440-a753404a9071/go.mod h1:u09EJpGBc+QnYReyYZjolBqz09LvGmx0tx34zc+J2Hk=
-knative.dev/eventing v0.48.1-0.20260415165636-0a7b2da46145 h1:p6CRV2KuYXk1dW2AWSJ11N4gYJy82Trtpciwj7BZTNg=
-knative.dev/eventing v0.48.1-0.20260415165636-0a7b2da46145/go.mod h1:ykUKyweljeKMmkxcrkMEgl3S6tubLzeF/bPAqeddvl0=
-knative.dev/hack v0.0.0-20260415233235-54d1312ccc91 h1:YkboMEJ48h7DxRQSPe2SePm1yKK0YYgrsQW5Mmc0SEk=
-knative.dev/hack v0.0.0-20260415233235-54d1312ccc91/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
-knative.dev/networking v0.0.0-20260414015937-f29b24983488 h1:OZfg130Kbf1bibhmLITAVdu2S0P2y0utBc74SgakzcQ=
-knative.dev/networking v0.0.0-20260414015937-f29b24983488/go.mod h1:hEhUDqidhueU6J/OXW0K9peQh8wIvFvIWTSHL/611og=
-knative.dev/pkg v0.0.0-20260415140041-388556d5c488 h1:7rmo6AW+6NLaWI+qTWv0ABlXz1bpdpaNnnpSBiuQ3vs=
-knative.dev/pkg v0.0.0-20260415140041-388556d5c488/go.mod h1:LaL/m4gFNTSUOP0DvHNCVcruVTi5Dyzts5/6UlPuTEQ=
-knative.dev/reconciler-test v0.0.0-20260415143040-51affdaaa44f h1:MJOPG/WEhpXks2NHoo+T3a2VkUbXomPv0SxoYvJbJto=
-knative.dev/reconciler-test v0.0.0-20260415143040-51affdaaa44f/go.mod h1:nIg1R8Knqn1ieSCi2h5oye62ZM18vgSEyzca0VMXFFU=
-knative.dev/serving v0.48.1-0.20260415213836-1017c2be6232 h1:X40FtJL9UgCu2olo1Ua35m/STmrWSuaqCgDZH4fNT48=
-knative.dev/serving v0.48.1-0.20260415213836-1017c2be6232/go.mod h1:JAdfGImM+Dv8I9SHjnCH861S9B2l/mxy5wQcduQ90Qo=
+knative.dev/caching v0.0.0-20260422140616-453ad996bbe2 h1:HXtegm/lH8phaAGKTnluecHlc2pAPG/5zqeqXJFdW5c=
+knative.dev/caching v0.0.0-20260422140616-453ad996bbe2/go.mod h1:SeXUtQmuH+GKPo0WdP7mdktlzqHt69kwvMfyi5Ag+0M=
+knative.dev/eventing v0.48.1-0.20260422192315-152cef39c9ab h1:Ng1NpREc4/nV+MNd6KMZROQ6WCcUIN3V0otpi+vs7hc=
+knative.dev/eventing v0.48.1-0.20260422192315-152cef39c9ab/go.mod h1:iUwjMW++UubKma0mohfTVOznDn1x1neSrlqWuWFlYts=
+knative.dev/hack v0.0.0-20260421155212-aeb7b4a9bf96 h1:YrpWTCDRzoGz0Fe7AcLTsBY+D5vx0ijhuxEVl0z3Xyw=
+knative.dev/hack v0.0.0-20260421155212-aeb7b4a9bf96/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
+knative.dev/networking v0.0.0-20260421015711-652da006c95d h1:8IA93AjVzaKFpKM8/U4h5gIJr4SFLsVMSiGYYzk0guY=
+knative.dev/networking v0.0.0-20260421015711-652da006c95d/go.mod h1:iBWx05y07JPjBHvk+KLm4oOhMA6QZ54DeSqp75ln77Y=
+knative.dev/pkg v0.0.0-20260422015212-ec452872dcc1 h1:bO5X2bugzMqoVltm2n16mHpAdpSR0HRWeAKzHUL2Cgk=
+knative.dev/pkg v0.0.0-20260422015212-ec452872dcc1/go.mod h1:EZeB2nBW4QcpZuCPB5a/UnoVIH2N+5z5fwNw1PUeqMg=
+knative.dev/reconciler-test v0.0.0-20260422143017-dd240881af76 h1:QVTtmNPiyT5U01u40tvHlza3v/DxQb3lwvB7QBDllRk=
+knative.dev/reconciler-test v0.0.0-20260422143017-dd240881af76/go.mod h1:96PDjAjfSmnUSvDi4obIlI3CI0v+hQOWlCxQnGogO8g=
+knative.dev/serving v0.48.1-0.20260422164114-24d95224dd8c h1:htwVQm3dnnGqgCT6u8c+m4LgvCDO2H64/9+JGMknsoo=
+knative.dev/serving v0.48.1-0.20260422164114-24d95224dd8c/go.mod h1:EtPhJ3d4b+QDepFEmbct6V5ermpdixDhVYCSx0VJzuk=
 nhooyr.io/websocket v1.8.6/go.mod h1:B70DZP8IakI65RVQ51MsWP/8jndNma26DVA/nFSCgW0=
 pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw=
 pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04=
diff --git a/vendor/k8s.io/apimachinery/pkg/api/validate/union.go b/vendor/k8s.io/apimachinery/pkg/api/validate/union.go
index 03f45f8661..32a2671f8d 100644
--- a/vendor/k8s.io/apimachinery/pkg/api/validate/union.go
+++ b/vendor/k8s.io/apimachinery/pkg/api/validate/union.go
@@ -19,6 +19,7 @@ package validate
 import (
 	"context"
 	"fmt"
+	"reflect"
 	"strings"
 
 	"k8s.io/apimachinery/pkg/api/operation"
@@ -60,6 +61,10 @@ type UnionValidationOptions struct {
 //		)...)
 //		return errs
 //	}
+//
+// Note that T is "any", rather than "comparable", because union-members can be
+// slices, meaning T might be a struct with a slice, meaning it is not
+// comparable.
 func Union[T any](_ context.Context, op operation.Operation, fldPath *field.Path, obj, oldObj T, union *UnionMembership, isSetFns ...ExtractorFn[T, bool]) field.ErrorList {
 	options := UnionValidationOptions{
 		ErrorForEmpty: func(fldPath *field.Path, allFields []string) *field.Error {
@@ -98,6 +103,10 @@ func Union[T any](_ context.Context, op operation.Operation, fldPath *field.Path
 //
 // It is not an error for the discriminatorValue to be unknown.  That must be
 // validated on its own.
+//
+// Note that T is "any", rather than "comparable", because union-members can be
+// slices, meaning T might be a struct with a slice, meaning it is not
+// comparable.
 func DiscriminatedUnion[T any, D ~string](_ context.Context, op operation.Operation, fldPath *field.Path, obj, oldObj T, union *UnionMembership, discriminatorExtractor ExtractorFn[T, D], isSetFns ...ExtractorFn[T, bool]) (errs field.ErrorList) {
 	if len(union.members) != len(isSetFns) {
 		return field.ErrorList{
@@ -106,6 +115,7 @@ func DiscriminatedUnion[T any, D ~string](_ context.Context, op operation.Operat
 					len(isSetFns), len(union.members))),
 		}
 	}
+	hasOldValue := !reflect.ValueOf(oldObj).IsZero() // because T is any, rather than comparable
 	var changed bool
 	discriminatorValue := discriminatorExtractor(obj)
 	if op.Type == operation.Update {
@@ -131,7 +141,7 @@ func DiscriminatedUnion[T any, D ~string](_ context.Context, op operation.Operat
 	}
 	// If the union discriminator and membership is unchanged, we don't need to
 	// re-validate.
-	if op.Type == operation.Update && !changed {
+	if op.Type == operation.Update && hasOldValue && !changed {
 		return nil
 	}
 	return errs
@@ -195,6 +205,7 @@ func unionValidate[T any](op operation.Operation, fldPath *field.Path,
 		}
 	}
 
+	hasOldValue := !reflect.ValueOf(oldObj).IsZero() // because T is any, rather than comparable
 	var specifiedFields []string
 	var changed bool
 	for i, fieldIsSet := range isSetFns {
@@ -209,7 +220,7 @@ func unionValidate[T any](op operation.Operation, fldPath *field.Path,
 	}
 
 	// If the union membership is unchanged, we don't need to re-validate.
-	if op.Type == operation.Update && !changed {
+	if op.Type == operation.Update && hasOldValue && !changed {
 		return nil
 	}
 
diff --git a/vendor/k8s.io/code-generator/cmd/validation-gen/validators/union.go b/vendor/k8s.io/code-generator/cmd/validation-gen/validators/union.go
index 49e7aa5d60..c7da756dbd 100644
--- a/vendor/k8s.io/code-generator/cmd/validation-gen/validators/union.go
+++ b/vendor/k8s.io/code-generator/cmd/validation-gen/validators/union.go
@@ -325,8 +325,10 @@ func createMemberExtractor(ptrType *types.Type, member *types.Member) FunctionLi
 	}
 	nt := util.NativeType(member.Type)
 	switch nt.Kind {
-	case types.Pointer, types.Map, types.Slice:
+	case types.Pointer:
 		extractor.Body = fmt.Sprintf("if obj == nil {return false}; return obj.%s != nil", member.Name)
+	case types.Map, types.Slice:
+		extractor.Body = fmt.Sprintf("if obj == nil {return false}; return len(obj.%s) != 0", member.Name)
 	case types.Builtin:
 		extractor.Body = fmt.Sprintf("if obj == nil {return false}; var z %s; return obj.%s != z", member.Type, member.Name)
 	default:
diff --git a/vendor/knative.dev/eventing/cmd/heartbeats/main.go b/vendor/knative.dev/eventing/cmd/heartbeats/main.go
index ea9fddc21a..4cd277a0a5 100644
--- a/vendor/knative.dev/eventing/cmd/heartbeats/main.go
+++ b/vendor/knative.dev/eventing/cmd/heartbeats/main.go
@@ -124,7 +124,7 @@ func main() {
 		overrides := duckv1.CloudEventOverrides{}
 		err := json.Unmarshal([]byte(env.CEOverrides), &overrides)
 		if err != nil {
-			log.Printf("[ERROR] Unparseable CloudEvents overrides %s: %v", env.CEOverrides, err)
+			log.Printf("[ERROR] Unparsable CloudEvents overrides %s: %v", env.CEOverrides, err)
 			os.Exit(1)
 		}
 		ceOverrides = &overrides
@@ -146,9 +146,9 @@ func main() {
 
 	ctx = observability.WithConfig(ctx, cfg)
 
-	otelResource, err := resource.Default("hearbeat")
+	otelResource, err := resource.Default("heartbeat")
 	if err != nil {
-		log.Printf("failed to correctly initialize otel resource, resouce may be missing some attributes: %s\n", err.Error())
+		log.Printf("failed to correctly initialize otel resource, resource may be missing some attributes: %s\n", err.Error())
 	}
 
 	meterProvider, err := metrics.NewMeterProvider(
diff --git a/vendor/knative.dev/eventing/pkg/apis/duck/v1beta1/delivery_conversion.go b/vendor/knative.dev/eventing/pkg/apis/duck/v1beta1/delivery_conversion.go
index ae6285a8b3..c0bbdfa37d 100644
--- a/vendor/knative.dev/eventing/pkg/apis/duck/v1beta1/delivery_conversion.go
+++ b/vendor/knative.dev/eventing/pkg/apis/duck/v1beta1/delivery_conversion.go
@@ -76,4 +76,4 @@ func (sink *DeliverySpec) ConvertFrom(ctx context.Context, from apis.Convertible
 	}
 }
 
-// DeliveryStatus v1beta1 is not convertable to v1 (Channel ref type vs URL)
+// DeliveryStatus v1beta1 is not convertible to v1 (Channel ref type vs URL)
diff --git a/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/register.go b/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/register.go
index 20d52b0e8d..3f20655b08 100644
--- a/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/register.go
+++ b/vendor/knative.dev/eventing/pkg/apis/eventing/v1alpha1/register.go
@@ -36,7 +36,7 @@ const (
 	RequestReplyBrokerCACertsStatusAnnotationKey = "knative.dev/brokerCACerts"
 
 	// RequestReplyBrokerAudienceStatusAnnotationKey is the RequestReply status
-	// anotation key used to specify the broker's OIDC audience
+	// annotation key used to specify the broker's OIDC audience
 	RequestReplyBrokerAudienceStatusAnnotationKey = "knative.dev/brokerAudience"
 )
 
diff --git a/vendor/knative.dev/eventing/pkg/apis/sinks/register.go b/vendor/knative.dev/eventing/pkg/apis/sinks/register.go
index 1994d57918..7090dcb1ba 100644
--- a/vendor/knative.dev/eventing/pkg/apis/sinks/register.go
+++ b/vendor/knative.dev/eventing/pkg/apis/sinks/register.go
@@ -28,13 +28,13 @@ const (
 )
 
 var (
-	// JobSinkResource respresents a Knative Eventing sink JobSink
+	// JobSinkResource represents a Knative Eventing sink JobSink
 	JobSinkResource = schema.GroupResource{
 		Group:    GroupName,
 		Resource: "jobsinks",
 	}
 
-	// IntegrationSinkResource respresents a Knative Eventing sink IntegrationSink
+	// IntegrationSinkResource represents a Knative Eventing sink IntegrationSink
 	IntegrationSinkResource = schema.GroupResource{
 		Group:    GroupName,
 		Resource: "integrationsinks",
diff --git a/vendor/knative.dev/eventing/pkg/apis/sources/register.go b/vendor/knative.dev/eventing/pkg/apis/sources/register.go
index 9f3966f6fd..63d01690a8 100644
--- a/vendor/knative.dev/eventing/pkg/apis/sources/register.go
+++ b/vendor/knative.dev/eventing/pkg/apis/sources/register.go
@@ -35,30 +35,30 @@ const (
 )
 
 var (
-	// ApiServerSourceResource respresents a Knative Eventing Sources ApiServerSource
+	// ApiServerSourceResource represents a Knative Eventing Sources ApiServerSource
 	//nolint:staticcheck // Not capitalizing "API"
 	ApiServerSourceResource = schema.GroupResource{
 		Group:    GroupName,
 		Resource: "apiserversources",
 	}
-	// PingSourceResource respresents a Knative Eventing Sources PingSource
+	// PingSourceResource represents a Knative Eventing Sources PingSource
 	PingSourceResource = schema.GroupResource{
 		Group:    GroupName,
 		Resource: "pingsources",
 	}
-	// SinkBindingResource respresents a Knative Eventing Sources SinkBinding
+	// SinkBindingResource represents a Knative Eventing Sources SinkBinding
 	SinkBindingResource = schema.GroupResource{
 		Group:    GroupName,
 		Resource: "sinkbindings",
 	}
 
-	// ContainerSourceResource respresents a Knative Eventing Sources ContainerSource
+	// ContainerSourceResource represents a Knative Eventing Sources ContainerSource
 	ContainerSourceResource = schema.GroupResource{
 		Group:    GroupName,
 		Resource: "containersources",
 	}
 
-	// IntegrationSourceResource respresents a Knative Eventing Sources IntegrationSource
+	// IntegrationSourceResource represents a Knative Eventing Sources IntegrationSource
 	IntegrationSourceResource = schema.GroupResource{
 		Group:    GroupName,
 		Resource: "integrationsources",
diff --git a/vendor/knative.dev/eventing/pkg/apis/sources/v1/apiserver_types.go b/vendor/knative.dev/eventing/pkg/apis/sources/v1/apiserver_types.go
index e3d30765e8..7510771f04 100644
--- a/vendor/knative.dev/eventing/pkg/apis/sources/v1/apiserver_types.go
+++ b/vendor/knative.dev/eventing/pkg/apis/sources/v1/apiserver_types.go
@@ -134,7 +134,7 @@ type APIVersionKindSelector struct {
 
 	// LabelSelector filters this source to objects to those resources pass the
 	// label selector.
-	// More info: http://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
+	// More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors
 	// +optional
 	LabelSelector *metav1.LabelSelector `json:"selector,omitempty"`
 }
diff --git a/vendor/knative.dev/eventing/pkg/eventingtls/eventingtls.go b/vendor/knative.dev/eventing/pkg/eventingtls/eventingtls.go
index 93ed18152c..bb7006372e 100644
--- a/vendor/knative.dev/eventing/pkg/eventingtls/eventingtls.go
+++ b/vendor/knative.dev/eventing/pkg/eventingtls/eventingtls.go
@@ -47,8 +47,6 @@ const (
 	TLSKey = "tls.key"
 	// TLSCrt is the key in the TLS secret for the public key of TLS servers
 	TLSCrt = "tls.crt"
-	// DefaultMinTLSVersion is the default minimum TLS version for servers and clients.
-	DefaultMinTLSVersion = tls.VersionTLS12
 	// SecretCACrt is the name of the CA Cert in the secret
 	SecretCACert = "ca.crt"
 	// IMCDispatcherServerTLSSecretName is the name of the tls secret for the imc dispatcher server
@@ -198,19 +196,13 @@ func GetTLSServerConfig(config ServerConfig) (*tls.Config, error) {
 
 // defaultTLSConfigFromEnv loads TLS configuration from environment variables
 // using the shared knative/pkg/tls utility. DefaultConfigFromEnv defaults to
-// TLS 1.3, but eventing historically defaults to TLS 1.2, so we fall back to
-// 1.2 unless TLS_MIN_VERSION is explicitly set.
-// TODO: switch to TLS 1.3 to align with the rest of the system.
+// TLS 1.3.
 func defaultTLSConfigFromEnv() (*tls.Config, error) {
 	cfg, err := pkgtls.DefaultConfigFromEnv("")
 	if err != nil {
 		return nil, fmt.Errorf("failed to load TLS config from env: %w", err)
 	}
 
-	if os.Getenv(pkgtls.MinVersionEnvKey) == "" {
-		cfg.MinVersion = DefaultMinTLSVersion
-	}
-
 	return cfg, nil
 }
 
diff --git a/vendor/knative.dev/eventing/pkg/eventingtls/eventingtlstesting/utils.go b/vendor/knative.dev/eventing/pkg/eventingtls/eventingtlstesting/utils.go
index b90bf848f7..59686af3c6 100644
--- a/vendor/knative.dev/eventing/pkg/eventingtls/eventingtlstesting/utils.go
+++ b/vendor/knative.dev/eventing/pkg/eventingtls/eventingtlstesting/utils.go
@@ -24,7 +24,7 @@ import (
 	cehttp "github.com/cloudevents/sdk-go/v2/protocol/http"
 )
 
-// EventChannelHandler is an http.Handler that covert received requests to cloudevent.Event and then
+// EventChannelHandler is an http.Handler that converts received requests to cloudevent.Event and then
 // send them to the given channel.
 func EventChannelHandler(requestsChan chan<- cloudevents.Event) http.Handler {
 	return http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
diff --git a/vendor/knative.dev/eventing/pkg/observability/key.go b/vendor/knative.dev/eventing/pkg/observability/key.go
index 793c29a741..ad1d00ca6e 100644
--- a/vendor/knative.dev/eventing/pkg/observability/key.go
+++ b/vendor/knative.dev/eventing/pkg/observability/key.go
@@ -30,7 +30,7 @@ var (
 	MessagingSystem              = attributekey.String("messaging.system")
 	MessagingOperationName       = attributekey.String("messaging.operation.name")
 	MessagingDestinationName     = attributekey.String("messaging.destination.name")
-	MessagingDestinationTemplate = attributekey.String("messaging.destination.tempate")
+	MessagingDestinationTemplate = attributekey.String("messaging.destination.template")
 
 	// attributes relating to the source
 	SourceName          = attributekey.String("kn.source.name")
diff --git a/vendor/knative.dev/eventing/pkg/utils/logging.go b/vendor/knative.dev/eventing/pkg/utils/logging.go
new file mode 100644
index 0000000000..06b8f8e9af
--- /dev/null
+++ b/vendor/knative.dev/eventing/pkg/utils/logging.go
@@ -0,0 +1,40 @@
+/*
+Copyright 2019 The Knative Authors
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package utils
+
+import (
+	"context"
+
+	apierrors "k8s.io/apimachinery/pkg/api/errors"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+
+	kubeclient "knative.dev/pkg/client/injection/kube/client"
+	"knative.dev/pkg/logging"
+)
+
+// GetLoggingConfig fetches the logging ConfigMap from the given namespace and
+// parses it into a *logging.Config. If the ConfigMap is not found, it returns
+// the default logging config.
+func GetLoggingConfig(ctx context.Context, namespace, loggingConfigMapName string) (*logging.Config, error) {
+	loggingConfigMap, err := kubeclient.Get(ctx).CoreV1().ConfigMaps(namespace).Get(ctx, loggingConfigMapName, metav1.GetOptions{})
+	if apierrors.IsNotFound(err) {
+		return logging.NewConfigFromMap(nil)
+	} else if err != nil {
+		return nil, err
+	}
+	return logging.NewConfigFromConfigMap(loggingConfigMap)
+}
diff --git a/vendor/knative.dev/eventing/test/lib/logexporter.go b/vendor/knative.dev/eventing/test/lib/logexporter.go
index 5842df1368..05766ccf8c 100644
--- a/vendor/knative.dev/eventing/test/lib/logexporter.go
+++ b/vendor/knative.dev/eventing/test/lib/logexporter.go
@@ -102,7 +102,7 @@ func ExportLogs(systemLogsDir, systemNamespace string) {
 }
 
 // ExportLogStreamOnError starts a log stream from the given namespace
-// for pods specified via podPrefixes. The log strema is stopped and
+// for pods specified via podPrefixes. The log stream is stopped and
 // logs exported upon calling the returned Canceler.
 func ExportLogStreamOnError(t *testing.T, logDir, namespace string, podPrefixes ...string) logstream.Canceler {
 	config, err := pkgtest.Flags.GetRESTConfig()
diff --git a/vendor/knative.dev/eventing/test/lib/test_runner.go b/vendor/knative.dev/eventing/test/lib/test_runner.go
index e11714a939..d5f882d43b 100644
--- a/vendor/knative.dev/eventing/test/lib/test_runner.go
+++ b/vendor/knative.dev/eventing/test/lib/test_runner.go
@@ -161,7 +161,7 @@ func GSetup(t *testing.T, options ...SetupClientOption) *Client {
 		t.Fatal("Couldn't initialize clients:", err)
 	}
 
-	// If namespaces are re-used the pull-secret is supposed to be created in advance.
+	// If namespaces are reused the pull-secret is supposed to be created in advance.
 	if !ReuseNamespace {
 		SetupServiceAccount(t, client)
 		SetupPullSecret(t, client)
@@ -202,7 +202,7 @@ func CreateNamespacedClient(t *testing.T) (*Client, error) {
 			return nil, err
 		}
 		if ReuseNamespace {
-			// Re-using existing namespace, no need to create it.
+			// Reusing existing namespace, no need to create it.
 			// The namespace is supposed to be created in advance.
 			return client, nil
 		} else {
diff --git a/vendor/knative.dev/eventing/test/rekt/features/broker/feature.go b/vendor/knative.dev/eventing/test/rekt/features/broker/feature.go
index 1a952710c3..406cbcac7f 100644
--- a/vendor/knative.dev/eventing/test/rekt/features/broker/feature.go
+++ b/vendor/knative.dev/eventing/test/rekt/features/broker/feature.go
@@ -234,7 +234,7 @@ EventSource ---> Broker ---> Trigger1 -------> Sink1(Transformation)
 	|
 	|-------> Trigger3 -------> Channel --------> Subscription --------> Sink3(Logger2)
 Explanation:
-Trigger1 filters the orignal event and transforms it to a new event,
+Trigger1 filters the original event and transforms it to a new event,
 Trigger2 logs all events,
 Trigger3 filters the transformed event and sends it to Channel.
 */
diff --git a/vendor/knative.dev/eventing/test/rekt/resources/broker/broker.go b/vendor/knative.dev/eventing/test/rekt/resources/broker/broker.go
index 7bd1e4ce34..43578c047b 100644
--- a/vendor/knative.dev/eventing/test/rekt/resources/broker/broker.go
+++ b/vendor/knative.dev/eventing/test/rekt/resources/broker/broker.go
@@ -169,7 +169,7 @@ func IsAddressable(name string, timings ...time.Duration) feature.StepFn {
 	return k8s.IsAddressable(GVR(), name, timings...)
 }
 
-// ValidateAddress validates the address retured by Address
+// ValidateAddress validates the address returned by Address
 func ValidateAddress(name string, validate addressable.ValidateAddressFn, timings ...time.Duration) feature.StepFn {
 	return addressable.ValidateAddress(GVR(), name, validate, timings...)
 }
diff --git a/vendor/knative.dev/eventing/test/rekt/resources/channel_impl/channel_impl.go b/vendor/knative.dev/eventing/test/rekt/resources/channel_impl/channel_impl.go
index 7766cd03f6..24b8babda0 100644
--- a/vendor/knative.dev/eventing/test/rekt/resources/channel_impl/channel_impl.go
+++ b/vendor/knative.dev/eventing/test/rekt/resources/channel_impl/channel_impl.go
@@ -175,7 +175,7 @@ var WithDeadLetterSink = delivery.WithDeadLetterSink
 
 var WithAnnotations = manifest.WithAnnotations
 
-// ValidateAddress validates the address retured by Address
+// ValidateAddress validates the address returned by Address
 func ValidateAddress(name string, validate addressable.ValidateAddressFn, timings ...time.Duration) feature.StepFn {
 	return addressable.ValidateAddress(GVR(), name, validate, timings...)
 }
diff --git a/vendor/knative.dev/eventing/test/upgrade/prober/verify.go b/vendor/knative.dev/eventing/test/upgrade/prober/verify.go
index b935922c32..5b7efceb31 100644
--- a/vendor/knative.dev/eventing/test/upgrade/prober/verify.go
+++ b/vendor/knative.dev/eventing/test/upgrade/prober/verify.go
@@ -312,7 +312,7 @@ func (p *prober) findSucceededPod(job *batchv1.Job) (*corev1.Pod, error) {
 		}
 	}
 	return nil, fmt.Errorf(
-		"could't find succeeded pod for job: %s", job.Name,
+		"couldn't find succeeded pod for job: %s", job.Name,
 	)
 }
 
diff --git a/vendor/knative.dev/hack/library.sh b/vendor/knative.dev/hack/library.sh
index 6eb5667958..d41d8e0185 100644
--- a/vendor/knative.dev/hack/library.sh
+++ b/vendor/knative.dev/hack/library.sh
@@ -35,6 +35,13 @@ if [[ ! -v GOPATH ]]; then
   fi
 fi
 
+# Pinned tool versions
+readonly GUM_VERSION="v0.14.1"
+readonly GOTESTSUM_VERSION="v1.13.0"
+readonly GOTESTFMT_VERSION="v2.5.0"
+readonly TERMINAL_TO_HTML_VERSION="v3.10.0"
+readonly GO_LICENSES_VERSION="v2.0.1"
+
 # Useful environment variables
 [[ -v PROW_JOB_ID ]] && IS_PROW=1 || IS_PROW=0
 readonly IS_PROW
@@ -265,7 +272,7 @@ function gum_banner() {
 
 # Simple info banner for logging purposes.
 function gum_style() {
-  go_run github.com/charmbracelet/gum@v0.14.1 style "$@"
+  go_run "github.com/charmbracelet/gum@${GUM_VERSION}" style "$@"
 }
 
 # Checks whether the given function exists.
@@ -588,7 +595,7 @@ function report_go_test() {
   logfile="${logfile/.xml/.jsonl}"
   echo "Running go test with args: ${go_test_args[*]}"
   local gotest_retcode=0
-  go_run gotest.tools/gotestsum@v1.13.0 \
+  go_run "gotest.tools/gotestsum@${GOTESTSUM_VERSION}" \
     --format "${GO_TEST_VERBOSITY:-testname}" \
     --junitfile "${xml}" \
     --junitfile-testsuite-name relative \
@@ -601,14 +608,14 @@ function report_go_test() {
   echo "Test log (JSONL) written to ${logfile}"
 
   ansilog="${logfile/.jsonl/-ansi.log}"
-  go_run github.com/gotesttools/gotestfmt/v2/cmd/gotestfmt@v2.5.0 \
+  go_run "github.com/gotesttools/gotestfmt/v2/cmd/gotestfmt@${GOTESTFMT_VERSION}" \
     -input "${logfile}" \
     -showteststatus \
     -nofail > "$ansilog"
   echo "Test log (ANSI) written to ${ansilog}"
 
   htmllog="${logfile/.jsonl/.html}"
-  go_run github.com/buildkite/terminal-to-html/v3/cmd/terminal-to-html@v3.10.0 \
+  go_run "github.com/buildkite/terminal-to-html/v3/cmd/terminal-to-html@${TERMINAL_TO_HTML_VERSION}" \
     --preview < "$ansilog" > "$htmllog"
   echo "Test log (HTML) written to ${htmllog}"
 
@@ -831,7 +838,7 @@ function __go_update_deps_for_module() {
     FLOATING_DEPS+=( $(go_run knative.dev/toolbox/buoy@latest float ./go.mod "${buoyArgs[@]}") )
     if [[ ${#FLOATING_DEPS[@]} > 0 ]]; then
       echo "Floating deps to ${FLOATING_DEPS[@]}"
-      go get -d ${FLOATING_DEPS[@]}
+      go get ${FLOATING_DEPS[@]}
     else
       echo "Nothing to upgrade."
     fi
@@ -921,13 +928,14 @@ function run_kntest() {
 }
 
 # Run go-licenses to check for forbidden licenses.
+# Extra flags can be passed via the GO_LICENSES_FLAGS environment variable.
 function check_licenses() {
   # Pin GOTOOLCHAIN to the project's Go version so that go-licenses is
   # compiled with the same toolchain.  GOTOOLCHAIN=auto (the go_run default)
   # may select a different Go, causing isStdLib() path mismatches.
   GOTOOLCHAIN="$(go env GOVERSION)" \
-  go_run github.com/google/go-licenses/v2@v2.0.1 \
-    check "${REPO_ROOT_DIR}/..." || \
+  go_run "github.com/google/go-licenses/v2@${GO_LICENSES_VERSION}" \
+    check ${GO_LICENSES_FLAGS:-} "${REPO_ROOT_DIR}/..." || \
     { echo "--- FAIL: go-licenses failed the license check"; return 1; }
 }
 
diff --git a/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/podscalable_types.go b/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/podscalable_types.go
index b667c7b593..ee48f87635 100644
--- a/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/podscalable_types.go
+++ b/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/podscalable_types.go
@@ -17,7 +17,6 @@ limitations under the License.
 package v1alpha1
 
 import (
-	corev1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/runtime"
 	"knative.dev/pkg/apis"
@@ -43,9 +42,8 @@ type PodScalable struct {
 // PodScalableSpec is the specification for the desired state of a
 // PodScalable (or at least our shared portion).
 type PodScalableSpec struct {
-	Replicas *int32                 `json:"replicas,omitempty"`
-	Selector *metav1.LabelSelector  `json:"selector"`
-	Template corev1.PodTemplateSpec `json:"template"`
+	Replicas *int32                `json:"replicas,omitempty"`
+	Selector *metav1.LabelSelector `json:"selector"`
 }
 
 // PodScalableStatus is the observed state of a PodScalable (or at
@@ -80,19 +78,6 @@ func (t *PodScalable) Populate() {
 				Values:   []string{"baz", "blah"},
 			}},
 		},
-		Template: corev1.PodTemplateSpec{
-			ObjectMeta: metav1.ObjectMeta{
-				Labels: map[string]string{
-					"foo": "bar",
-				},
-			},
-			Spec: corev1.PodSpec{
-				Containers: []corev1.Container{{
-					Name:  "container-name",
-					Image: "container-image:latest",
-				}},
-			},
-		},
 	}
 	t.Status = PodScalableStatus{
 		Replicas: 42,
diff --git a/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/zz_generated.deepcopy.go b/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/zz_generated.deepcopy.go
index 5c328191ba..38ba90053d 100644
--- a/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/zz_generated.deepcopy.go
+++ b/vendor/knative.dev/serving/pkg/apis/autoscaling/v1alpha1/zz_generated.deepcopy.go
@@ -299,7 +299,6 @@ func (in *PodScalableSpec) DeepCopyInto(out *PodScalableSpec) {
 		*out = new(v1.LabelSelector)
 		(*in).DeepCopyInto(*out)
 	}
-	in.Template.DeepCopyInto(&out.Template)
 	return
 }
 
diff --git a/vendor/knative.dev/serving/pkg/apis/config/features.go b/vendor/knative.dev/serving/pkg/apis/config/features.go
index d2d1ab22f7..ed5eb6ea84 100644
--- a/vendor/knative.dev/serving/pkg/apis/config/features.go
+++ b/vendor/knative.dev/serving/pkg/apis/config/features.go
@@ -44,7 +44,7 @@ const (
 
 // service annotations under features.knative.dev/*
 const (
-	// QueueProxyPodInfoFeatureKey gates mouting of podinfo with the value 'enabled'
+	// QueueProxyPodInfoFeatureKey gates mounting of podinfo with the value 'enabled'
 	QueueProxyPodInfoFeatureKey = "features.knative.dev/queueproxy-podinfo"
 
 	// AllowHTTPFullDuplexFeatureKey gates the use of http1 full duplex per workload
diff --git a/vendor/knative.dev/serving/pkg/apis/serving/register.go b/vendor/knative.dev/serving/pkg/apis/serving/register.go
index 7fc51964f1..74f326b774 100644
--- a/vendor/knative.dev/serving/pkg/apis/serving/register.go
+++ b/vendor/knative.dev/serving/pkg/apis/serving/register.go
@@ -114,8 +114,13 @@ const (
 	// last updated the resource.
 	UpdaterAnnotation = GroupName + "/lastModifier"
 
+	// RevisionDeploymentHashLabelKey is the label key used to identify
+	// if a child deployment should be updated
+	RevisionDeploymentHashLabelKey = GroupName + "/deployment-hash"
+
 	// QueueSidecarResourcePercentageAnnotationKey is the percentage of user container resources to be used for queue-proxy
 	// It has to be in [0.1,100]
+	//
 	// Deprecated: Please consider setting resources explicitly for the QP per service, see `QueueSidecarCPUResourceRequestAnnotationKey` for example.
 	QueueSidecarResourcePercentageAnnotationKey = "queue.sidecar." + GroupName + "/resource-percentage"
 
diff --git a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_types.go b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_types.go
index a2a23c9ef7..5b725b1c1d 100644
--- a/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_types.go
+++ b/vendor/knative.dev/serving/pkg/apis/serving/v1/revision_types.go
@@ -145,7 +145,7 @@ type RevisionStatus struct {
 	// The digests are resolved during the creation of Revision.
 	// ContainerStatuses holds the container name and image digests
 	// for both serving and non serving containers.
-	// ref: http://bit.ly/image-digests
+	// ref: https://bit.ly/image-digests
 	// +optional
 	ContainerStatuses []ContainerStatus `json:"containerStatuses,omitempty"`
 
@@ -154,7 +154,7 @@ type RevisionStatus struct {
 	// The digests are resolved during the creation of Revision.
 	// ContainerStatuses holds the container name and image digests
 	// for both serving and non serving containers.
-	// ref: http://bit.ly/image-digests
+	// ref: https://bit.ly/image-digests
 	// +optional
 	InitContainerStatuses []ContainerStatus `json:"initContainerStatuses,omitempty"`
 
diff --git a/vendor/knative.dev/serving/pkg/apis/serving/v1/route_lifecycle.go b/vendor/knative.dev/serving/pkg/apis/serving/v1/route_lifecycle.go
index 13142b871a..e456221b6d 100644
--- a/vendor/knative.dev/serving/pkg/apis/serving/v1/route_lifecycle.go
+++ b/vendor/knative.dev/serving/pkg/apis/serving/v1/route_lifecycle.go
@@ -124,7 +124,7 @@ func (rs *RouteStatus) MarkRevisionTargetTrafficError(reason, msg string) {
 }
 
 // MarkConfigurationNotReady marks the RouteConditionAllTrafficAssigned
-// condition to indiciate the Revision is not yet ready.
+// condition to indicate the Revision is not yet ready.
 func (rs *RouteStatus) MarkConfigurationNotReady(name string) {
 	routeCondSet.Manage(rs).MarkUnknown(RouteConditionAllTrafficAssigned,
 		"RevisionMissing",
@@ -140,7 +140,7 @@ func (rs *RouteStatus) MarkConfigurationFailed(name string) {
 }
 
 // MarkRevisionNotReady marks the RouteConditionAllTrafficAssigned condition to
-// indiciate the Revision is not yet ready.
+// indicate the Revision is not yet ready.
 func (rs *RouteStatus) MarkRevisionNotReady(name string) {
 	routeCondSet.Manage(rs).MarkUnknown(RouteConditionAllTrafficAssigned,
 		"RevisionMissing",
@@ -148,7 +148,7 @@ func (rs *RouteStatus) MarkRevisionNotReady(name string) {
 }
 
 // MarkRevisionFailed marks the RouteConditionAllTrafficAssigned condition to
-// indiciate the Revision has failed.
+// indicate the Revision has failed.
 func (rs *RouteStatus) MarkRevisionFailed(name string) {
 	routeCondSet.Manage(rs).MarkFalse(RouteConditionAllTrafficAssigned,
 		"RevisionMissing",
diff --git a/vendor/knative.dev/serving/test/conformance.go b/vendor/knative.dev/serving/test/conformance.go
index f505de7acd..2b803bb38b 100644
--- a/vendor/knative.dev/serving/test/conformance.go
+++ b/vendor/knative.dev/serving/test/conformance.go
@@ -20,7 +20,7 @@ import (
 	"testing"
 
 	// For our e2e testing, we want this linked first so that our
-	// systen namespace environment variable is defaulted prior to
+	// system namespace environment variable is defaulted prior to
 	// logstream initialization.
 	_ "knative.dev/serving/test/defaultsystem"
 
diff --git a/vendor/knative.dev/serving/test/e2e-tests.sh b/vendor/knative.dev/serving/test/e2e-tests.sh
index 974e40d631..501222c0df 100644
--- a/vendor/knative.dev/serving/test/e2e-tests.sh
+++ b/vendor/knative.dev/serving/test/e2e-tests.sh
@@ -121,7 +121,7 @@ kubectl replace cm "config-gc" -n "${SYSTEM_NAMESPACE}" -f "${TMP_DIR}"/config-g
 # Note that we use a very high -parallel because each ksvc is run as its own
 # sub-test. If this is not larger than the maximum scale tested then the test
 # simply cannot pass.
-# TODO - Renable once we get this reliably passing on GKE 1.21
+# TODO - Re-enable once we get this reliably passing on GKE 1.21
 # go_test_e2e -timeout=20m -parallel=300 ./test/scale "${E2E_TEST_FLAGS[@]}" || failed=1
 
 # Run HPA tests
diff --git a/vendor/knative.dev/serving/test/e2e_flags.go b/vendor/knative.dev/serving/test/e2e_flags.go
index c714dfa3e5..3d0ff1291a 100644
--- a/vendor/knative.dev/serving/test/e2e_flags.go
+++ b/vendor/knative.dev/serving/test/e2e_flags.go
@@ -98,7 +98,7 @@ func initializeServingFlags() *ServingEnvironmentFlags {
 
 	flag.IntVar(&f.ExceedingMemoryLimitSize, "exceeding-memory-limit-size", 500,
 		"Set this flag to the MB of memory consumed by your service in resource limit tests. "+
-			"You service is set with 300 MB memory limit and shoud return a non-200 response when consuming such amount of memory.")
+			"Your service is set with 300 MB memory limit and should return a non-200 response when consuming such amount of memory.")
 
 	flag.StringVar(&f.RequestHeaders, "request-headers", "",
 		"Set this flag to add extra HTTP request headers sent to the testing deployed KServices. "+
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 73274626ee..a5b382d2f5 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -1097,7 +1097,7 @@ istio.io/client-go/pkg/apis/security/v1
 istio.io/client-go/pkg/apis/security/v1beta1
 istio.io/client-go/pkg/apis/telemetry/v1alpha1
 istio.io/client-go/pkg/clientset/versioned/scheme
-# k8s.io/api v0.35.3
+# k8s.io/api v0.35.4
 ## explicit; go 1.25.0
 k8s.io/api/admission/v1
 k8s.io/api/admissionregistration/v1
@@ -1158,7 +1158,7 @@ k8s.io/api/storage/v1
 k8s.io/api/storage/v1alpha1
 k8s.io/api/storage/v1beta1
 k8s.io/api/storagemigration/v1beta1
-# k8s.io/apiextensions-apiserver v0.35.3
+# k8s.io/apiextensions-apiserver v0.35.4
 ## explicit; go 1.25.0
 k8s.io/apiextensions-apiserver/pkg/apis/apiextensions
 k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1
@@ -1176,7 +1176,7 @@ k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/apiextensio
 k8s.io/apiextensions-apiserver/pkg/client/informers/externalversions/internalinterfaces
 k8s.io/apiextensions-apiserver/pkg/client/listers/apiextensions/v1
 k8s.io/apiextensions-apiserver/pkg/client/listers/apiextensions/v1beta1
-# k8s.io/apimachinery v0.35.3
+# k8s.io/apimachinery v0.35.4
 ## explicit; go 1.25.0
 k8s.io/apimachinery/pkg/api/equality
 k8s.io/apimachinery/pkg/api/errors
@@ -1239,10 +1239,10 @@ k8s.io/apimachinery/pkg/version
 k8s.io/apimachinery/pkg/watch
 k8s.io/apimachinery/third_party/forked/golang/json
 k8s.io/apimachinery/third_party/forked/golang/reflect
-# k8s.io/apiserver v0.35.3
+# k8s.io/apiserver v0.35.4
 ## explicit; go 1.25.0
 k8s.io/apiserver/pkg/storage/names
-# k8s.io/client-go v0.35.3
+# k8s.io/client-go v0.35.4
 ## explicit; go 1.25.0
 k8s.io/client-go/applyconfigurations
 k8s.io/client-go/applyconfigurations/admissionregistration/v1
@@ -1579,7 +1579,7 @@ k8s.io/client-go/util/keyutil
 k8s.io/client-go/util/retry
 k8s.io/client-go/util/watchlist
 k8s.io/client-go/util/workqueue
-# k8s.io/code-generator v0.35.3
+# k8s.io/code-generator v0.35.4
 ## explicit; go 1.25.0
 k8s.io/code-generator
 k8s.io/code-generator/cmd/applyconfiguration-gen
@@ -1664,11 +1664,11 @@ k8s.io/utils/net
 k8s.io/utils/pointer
 k8s.io/utils/ptr
 k8s.io/utils/trace
-# knative.dev/caching v0.0.0-20260415135440-a753404a9071
+# knative.dev/caching v0.0.0-20260422140616-453ad996bbe2
 ## explicit; go 1.25.0
 knative.dev/caching/pkg/apis/caching
 knative.dev/caching/pkg/apis/caching/v1alpha1
-# knative.dev/eventing v0.48.1-0.20260415165636-0a7b2da46145
+# knative.dev/eventing v0.48.1-0.20260422192315-152cef39c9ab
 ## explicit; go 1.25.0
 knative.dev/eventing/cmd/heartbeats
 knative.dev/eventing/pkg/apis
@@ -1761,10 +1761,10 @@ knative.dev/eventing/test/upgrade/prober/wathola/fetcher
 knative.dev/eventing/test/upgrade/prober/wathola/forwarder
 knative.dev/eventing/test/upgrade/prober/wathola/receiver
 knative.dev/eventing/test/upgrade/prober/wathola/sender
-# knative.dev/hack v0.0.0-20260415233235-54d1312ccc91
+# knative.dev/hack v0.0.0-20260421155212-aeb7b4a9bf96
 ## explicit; go 1.24
 knative.dev/hack
-# knative.dev/networking v0.0.0-20260414015937-f29b24983488
+# knative.dev/networking v0.0.0-20260421015711-652da006c95d
 ## explicit; go 1.25.0
 knative.dev/networking/pkg/apis/networking
 knative.dev/networking/pkg/apis/networking/v1alpha1
@@ -1775,7 +1775,7 @@ knative.dev/networking/pkg/client/clientset/versioned/typed/networking/v1alpha1
 knative.dev/networking/pkg/config
 knative.dev/networking/pkg/http/header
 knative.dev/networking/pkg/ingress
-# knative.dev/pkg v0.0.0-20260415140041-388556d5c488
+# knative.dev/pkg v0.0.0-20260422015212-ec452872dcc1
 ## explicit; go 1.25.0
 knative.dev/pkg/apiextensions/storageversion
 knative.dev/pkg/apiextensions/storageversion/cmd/migrate
@@ -1867,7 +1867,7 @@ knative.dev/pkg/webhook
 knative.dev/pkg/webhook/certificates
 knative.dev/pkg/webhook/certificates/resources
 knative.dev/pkg/webhook/resourcesemantics/conversion
-# knative.dev/reconciler-test v0.0.0-20260415143040-51affdaaa44f
+# knative.dev/reconciler-test v0.0.0-20260422143017-dd240881af76
 ## explicit; go 1.25.0
 knative.dev/reconciler-test/cmd/eventshub
 knative.dev/reconciler-test/pkg/environment
@@ -1896,7 +1896,7 @@ knative.dev/reconciler-test/pkg/resources/service
 knative.dev/reconciler-test/pkg/resources/serviceaccount
 knative.dev/reconciler-test/pkg/state
 knative.dev/reconciler-test/resources/certificate
-# knative.dev/serving v0.48.1-0.20260415213836-1017c2be6232
+# knative.dev/serving v0.48.1-0.20260422164114-24d95224dd8c
 ## explicit; go 1.25.0
 knative.dev/serving/pkg/apis/autoscaling
 knative.dev/serving/pkg/apis/autoscaling/v1alpha1