upgrade to latest dependencies (#1053)

bumping k8s.io/client-go 4f1f0a2...d43aed2:
  > d43aed2 Update dependencies to v0.35.4 tag
  > 8ebd9bb Merge pull request # 138356 from dims/update-moby-spdystream-v0.5.1-1.35
  > 00b2f2b Update github.com/moby/spdystream from v0.5.0 to v0.5.1
bumping k8s.io/apimachinery 72d71ea...475c941:
  > 475c941 Merge pull request # 138356 from dims/update-moby-spdystream-v0.5.1-1.35
  > 6c08bb5 Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  > 45398ef Merge pull request # 137927 from lalitc375/cherry-pick-137864
  > b414b94 Fix backport differences for 1.35 (remove WithOrigin and MarkAlpha)
  > f933a4d Add slice and map union member support with tests
  > 977ad5b Use IsZero instead of IsNil for union ratcheting check
  > a128230 Fix union validation ratcheting when oldObj is nil
bumping k8s.io/apiextensions-apiserver 073f527...b0e553c:
  > b0e553c Update dependencies to v0.35.4 tag
  > c580382 Merge pull request # 138356 from dims/update-moby-spdystream-v0.5.1-1.35
  > 895a1c1 Merge pull request # 138348 from dashpole/update_prop_35
  > d25970d Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  > eacefa7 update go.opentelemetry.io/otel to v1.41.0
bumping k8s.io/code-generator d656d0d...dbc8933:
  > dbc8933 Update dependencies to v0.35.4 tag
  > cb0dd49 Merge pull request # 138356 from dims/update-moby-spdystream-v0.5.1-1.35
  > b99401c Update github.com/moby/spdystream from v0.5.0 to v0.5.1
  > 52e49d4 Merge pull request # 137927 from lalitc375/cherry-pick-137864
  > 1e02847 Fix backport differences for 1.35 (remove WithOrigin and MarkAlpha)
  > f76e992 Add slice and map union member support with tests
  > a71a093 Add nil OldValue test coverage for union doc_tests
bumping knative.dev/pkg 2b1e898...3cd6d60:
  > 3cd6d60 Bump the k8s group with 5 updates (# 3347)
bumping k8s.io/api 3897036...e8f0e9f:
  > e8f0e9f Update dependencies to v0.35.4 tag
  > 0b2a75e Merge pull request # 138356 from dims/update-moby-spdystream-v0.5.1-1.35
  > e1ef9bc Update github.com/moby/spdystream from v0.5.0 to v0.5.1

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -4,13 +4,13 @@ go 1.25.0
 
 require (
 	go.uber.org/zap v1.27.1
-	k8s.io/api v0.35.3
-	k8s.io/apimachinery v0.35.3
-	k8s.io/client-go v0.35.3
-	k8s.io/code-generator v0.35.3
+	k8s.io/api v0.35.4
+	k8s.io/apimachinery v0.35.4
+	k8s.io/client-go v0.35.4
+	k8s.io/code-generator v0.35.4
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
 	knative.dev/hack v0.0.0-20260416140237-504af4d2178f
-	knative.dev/pkg v0.0.0-20260417155523-2b1e89838597
+	knative.dev/pkg v0.0.0-20260420135127-3cd6d6017a35
 )
 
 require (
@@ -88,7 +88,7 @@ require (
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/apiextensions-apiserver v0.35.3 // indirect
+	k8s.io/apiextensions-apiserver v0.35.4 // indirect
 	k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect

go.sum

@@ -209,16 +209,16 @@ gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.35.3 h1:pA2fiBc6+N9PDf7SAiluKGEBuScsTzd2uYBkA5RzNWQ=
-k8s.io/api v0.35.3/go.mod h1:9Y9tkBcFwKNq2sxwZTQh1Njh9qHl81D0As56tu42GA4=
-k8s.io/apiextensions-apiserver v0.35.3 h1:2fQUhEO7P17sijylbdwt0nBdXP0TvHrHj0KeqHD8FiU=
-k8s.io/apiextensions-apiserver v0.35.3/go.mod h1:tK4Kz58ykRpwAEkXUb634HD1ZAegEElktz/B3jgETd8=
-k8s.io/apimachinery v0.35.3 h1:MeaUwQCV3tjKP4bcwWGgZ/cp/vpsRnQzqO6J6tJyoF8=
-k8s.io/apimachinery v0.35.3/go.mod h1:jQCgFZFR1F4Ik7hvr2g84RTJSZegBc8yHgFWKn//hns=
-k8s.io/client-go v0.35.3 h1:s1lZbpN4uI6IxeTM2cpdtrwHcSOBML1ODNTCCfsP1pg=
-k8s.io/client-go v0.35.3/go.mod h1:RzoXkc0mzpWIDvBrRnD+VlfXP+lRzqQjCmKtiwZ8Q9c=
-k8s.io/code-generator v0.35.3 h1:NDGCLkEm6Ho65wTdSe2EgErmmtsrezOPwwOchlNc6FQ=
-k8s.io/code-generator v0.35.3/go.mod h1:LAVriRGXQusHQ0Ns64SE1ublSswm1KrK7cXn0GuQETg=
+k8s.io/api v0.35.4 h1:P7nFYKl5vo9AGUp1Z+Pmd3p2tA7bX2wbFWCvDeRv988=
+k8s.io/api v0.35.4/go.mod h1:yl4lqySWOgYJJf9RERXKUwE9g2y+CkuwG+xmcOK8wXU=
+k8s.io/apiextensions-apiserver v0.35.4 h1:HeP+Upp7ItdvnyGmub0yoix+2z5+ev4M5cE5TCgtOUU=
+k8s.io/apiextensions-apiserver v0.35.4/go.mod h1:ogQlk+stIE8mnoRthSYCwlOS12fVqgWFiErMwPaXA7c=
+k8s.io/apimachinery v0.35.4 h1:xtdom9RG7e+yDp71uoXoJDWEE2eOiHgeO4GdBzwWpds=
+k8s.io/apimachinery v0.35.4/go.mod h1:NNi1taPOpep0jOj+oRha3mBJPqvi0hGdaV8TCqGQ+cc=
+k8s.io/client-go v0.35.4 h1:DN6fyaGuzK64UvnKO5fOA6ymSjvfGAnCAHAR0C66kD8=
+k8s.io/client-go v0.35.4/go.mod h1:2Pg9WpsS4NeOpoYTfHHfMxBG8zFMSAUi4O/qoiJC3nY=
+k8s.io/code-generator v0.35.4 h1:i0FfiXAeUMBlHarjVk5ZWf6Wjsg3YJpNYmOg0nPk6r4=
+k8s.io/code-generator v0.35.4/go.mod h1:rwLDdemFgPK6dGlLFHPUieyekgAlV1x8IVafjAy/ELA=
 k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b h1:gMplByicHV/TJBizHd9aVEsTYoJBnnUAT5MHlTkbjhQ=
 k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b/go.mod h1:CgujABENc3KuTrcsdpGmrrASjtQsWCT7R99mEV4U/fM=
 k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
@@ -229,8 +229,8 @@ k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzk
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 knative.dev/hack v0.0.0-20260416140237-504af4d2178f h1:YTht2cGdhd++kSrhwcDutWpk1V1bi0vKpAs0h4xIjpw=
 knative.dev/hack v0.0.0-20260416140237-504af4d2178f/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
-knative.dev/pkg v0.0.0-20260417155523-2b1e89838597 h1:OIXI94ynVA/rqqkY5eSo3bTmiwZoerdXd+/T6j8pd5w=
-knative.dev/pkg v0.0.0-20260417155523-2b1e89838597/go.mod h1:lmS5kmp+GkFEbDp0C2k4YtXf+zANoAX4KwHxy2jFzpU=
+knative.dev/pkg v0.0.0-20260420135127-3cd6d6017a35 h1:rTbIPgPE5j8ptHoDXBoiabWJCQeC1F1lPFtlN/wrQek=
+knative.dev/pkg v0.0.0-20260420135127-3cd6d6017a35/go.mod h1:VtAr0jJJtx6qqoVx5eNd8YEnnsfyBE/GXPsTmp4nrtM=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=