[main] Upgrade to latest dependencies (#8979)

upgrade to latest dependencies

bumping knative.dev/reconciler-test 158b98a...8cacadc:
  > 8cacadc upgrade to latest dependencies (# 874)
  > b870fd6 upgrade to latest dependencies (# 873)
bumping go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)
bumping go.opentelemetry.io/otel/exporters/otlp/otlptrace a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)
bumping go.yaml.in/yaml/v2 3b57511...43b627a:
  > 43b627a Replace gopkg.in/check.v1 with the standard testing library

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -38,27 +38,27 @@ require (
 	github.com/wavesoftware/go-ensure v1.0.0
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0
 	go.opentelemetry.io/contrib/instrumentation/runtime v0.67.0
-	go.opentelemetry.io/otel v1.42.0
-	go.opentelemetry.io/otel/metric v1.42.0
-	go.opentelemetry.io/otel/sdk v1.42.0
-	go.opentelemetry.io/otel/sdk/metric v1.42.0
-	go.opentelemetry.io/otel/trace v1.42.0
+	go.opentelemetry.io/otel v1.43.0
+	go.opentelemetry.io/otel/metric v1.43.0
+	go.opentelemetry.io/otel/sdk v1.43.0
+	go.opentelemetry.io/otel/sdk/metric v1.43.0
+	go.opentelemetry.io/otel/trace v1.43.0
 	go.uber.org/atomic v1.10.0
 	go.uber.org/multierr v1.11.0
 	go.uber.org/zap v1.27.1
 	golang.org/x/net v0.52.0
 	golang.org/x/sync v0.20.0
-	k8s.io/api v0.35.2
-	k8s.io/apiextensions-apiserver v0.35.2
-	k8s.io/apimachinery v0.35.2
-	k8s.io/apiserver v0.35.2
-	k8s.io/client-go v0.35.2
-	k8s.io/code-generator v0.35.2
+	k8s.io/api v0.35.3
+	k8s.io/apiextensions-apiserver v0.35.3
+	k8s.io/apimachinery v0.35.3
+	k8s.io/apiserver v0.35.3
+	k8s.io/client-go v0.35.3
+	k8s.io/code-generator v0.35.3
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
 	knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad
 	knative.dev/hack/schema v0.0.0-20260318014029-7eede7fdcbad
-	knative.dev/pkg v0.0.0-20260319144801-8c68e18a5cc7
-	knative.dev/reconciler-test v0.0.0-20260318133702-158b98a68b18
+	knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894
+	knative.dev/reconciler-test v0.0.0-20260330022304-8cacadc6e997
 	sigs.k8s.io/randfill v1.0.0
 	sigs.k8s.io/yaml v1.6.0
 )
@@ -111,24 +111,24 @@ require (
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/common v0.67.5 // indirect
 	github.com/prometheus/otlptranslator v1.0.0 // indirect
-	github.com/prometheus/procfs v0.19.2 // indirect
+	github.com/prometheus/procfs v0.20.1 // indirect
 	github.com/rickb777/plural v1.2.1 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/spf13/cobra v1.10.0 // indirect
 	github.com/spf13/pflag v1.0.10 // indirect
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.42.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.42.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.42.0 // indirect
-	go.opentelemetry.io/otel/exporters/prometheus v0.64.0 // indirect
-	go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.42.0 // indirect
-	go.opentelemetry.io/proto/otlp v1.9.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 // indirect
+	go.opentelemetry.io/otel/exporters/prometheus v0.65.0 // indirect
+	go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.43.0 // indirect
+	go.opentelemetry.io/proto/otlp v1.10.0 // indirect
 	go.uber.org/automaxprocs v1.6.0 // indirect
-	go.yaml.in/yaml/v2 v2.4.3 // indirect
+	go.yaml.in/yaml/v2 v2.4.4 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/mod v0.34.0 // indirect
@@ -139,9 +139,9 @@ require (
 	golang.org/x/time v0.12.0 // indirect
 	golang.org/x/tools v0.43.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260209200024-4cfbd4190f57 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260209200024-4cfbd4190f57 // indirect
-	google.golang.org/grpc v1.79.3 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect
+	google.golang.org/grpc v1.80.0 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect