upgrade to latest dependencies (#2317)

bumping knative.dev/eventing fd4eb83...69b976f:
  > 69b976f Fix goroutine/memory leak in SubjectAndFiltersPass (# 9151)
bumping knative.dev/serving 516bc43...5806b90:
  > 5806b90 Update net-istio nightly (# 16640)

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -23,11 +23,11 @@ require (
 	k8s.io/client-go v0.35.5
 	k8s.io/code-generator v0.35.5
 	knative.dev/caching v0.0.0-20260602144006-dd092fc806ea
-	knative.dev/eventing v0.49.1-0.20260608101721-fd4eb83e1b8f
+	knative.dev/eventing v0.49.1-0.20260611075324-69b976f7fd56
 	knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b
 	knative.dev/pkg v0.0.0-20260602142205-ac97e43f6622
 	knative.dev/reconciler-test v0.0.0-20260602150814-125bf8d48e1c
-	knative.dev/serving v0.49.1-0.20260604132906-516bc43f3667
+	knative.dev/serving v0.49.1-0.20260611133425-5806b90b4cdb
 	sigs.k8s.io/cluster-inventory-api v0.1.3
 	sigs.k8s.io/controller-tools v0.20.1
 	sigs.k8s.io/yaml v1.6.0

go.sum

@@ -1814,8 +1814,8 @@ k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 h1:AZYQSJemyQB5eRxqcPky+/7EdBj0x
 k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
 knative.dev/caching v0.0.0-20260602144006-dd092fc806ea h1:mEaJOrBttRcfb6pzWBsgVG6K18QbcFfAe0yDKOHsHJ4=
 knative.dev/caching v0.0.0-20260602144006-dd092fc806ea/go.mod h1:CFF4YV9sYdDj7mLkBomZO7/F0cc0WCOTW5Gbd75YiA8=
-knative.dev/eventing v0.49.1-0.20260608101721-fd4eb83e1b8f h1:knNXRMjMEmOcqCDPEQK02FXV+5FT1TaYbaOtshbcYCg=
-knative.dev/eventing v0.49.1-0.20260608101721-fd4eb83e1b8f/go.mod h1:ibEWNiJvssamCNesm0N1BmB5rhWdAyJHYEIcxI+99sQ=
+knative.dev/eventing v0.49.1-0.20260611075324-69b976f7fd56 h1:AHDySG8Wz6mQuiKAXanlYWLjTM8hRU9P8sBPKcHbOso=
+knative.dev/eventing v0.49.1-0.20260611075324-69b976f7fd56/go.mod h1:ibEWNiJvssamCNesm0N1BmB5rhWdAyJHYEIcxI+99sQ=
 knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b h1:MvbV2F2BdI8qKrYYUhDwbUZbX0BAYRSIpXM2TOtTvs0=
 knative.dev/hack v0.0.0-20260428014158-b2a37f1b6e7b/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
 knative.dev/networking v0.0.0-20260602144506-c8765a725c2b h1:SlEkmc5m5EAaXomG82qYifOXC+YpLg+jPS4VcDkIz3c=
@@ -1824,8 +1824,8 @@ knative.dev/pkg v0.0.0-20260602142205-ac97e43f6622 h1:Lf5I3oaFc0bErDP7yUbOxT+6Ga
 knative.dev/pkg v0.0.0-20260602142205-ac97e43f6622/go.mod h1:A6IJjMX0nATYJ4eJAcqXGLiMTg1AXsA9QtPd7nI9Tk0=
 knative.dev/reconciler-test v0.0.0-20260602150814-125bf8d48e1c h1:M8GPqYxAGOLtvqk0fNUjnJp6rzxqpIRCbESh3hfMsVs=
 knative.dev/reconciler-test v0.0.0-20260602150814-125bf8d48e1c/go.mod h1:QBq7VXOkZ5mbuXn7lK2pGCXLGIJsRyh0hSjoF1wd1Ds=
-knative.dev/serving v0.49.1-0.20260604132906-516bc43f3667 h1:s8HO3mubc8wZGAnZ4Dx0fqUUHWM1lpeKVBZ+/F18Hxc=
-knative.dev/serving v0.49.1-0.20260604132906-516bc43f3667/go.mod h1:fHHSUO7OjvmJmDIQ2VBsAHUjN24c75FmW2vudgbMU48=
+knative.dev/serving v0.49.1-0.20260611133425-5806b90b4cdb h1:esY2sCP5HROvOQ3YGFb7fWxrWm8GFjf+TuT24wMSRH8=
+knative.dev/serving v0.49.1-0.20260611133425-5806b90b4cdb/go.mod h1:fHHSUO7OjvmJmDIQ2VBsAHUjN24c75FmW2vudgbMU48=
 nhooyr.io/websocket v1.8.6/go.mod h1:B70DZP8IakI65RVQ51MsWP/8jndNma26DVA/nFSCgW0=
 pgregory.net/rapid v1.1.0 h1:CMa0sjHSru3puNx+J0MIAuiiEV4N0qj8/cMWGBBCsjw=
 pgregory.net/rapid v1.1.0/go.mod h1:PY5XlDGj0+V1FCq0o192FdRhpKHGTRIWBgqjDBTrq04=

vendor/knative.dev/eventing/pkg/auth/event_policy.go

@@ -227,7 +227,9 @@ func SubjectAndFiltersPass(ctx context.Context, sub string, allowedSubsWithFilte
 	for _, swf := range allowedSubsWithFilters {
 		for _, s := range swf.Subjects {
 			if strings.EqualFold(s, sub) || (strings.HasSuffix(s, "*") && strings.HasPrefix(sub, strings.TrimSuffix(s, "*"))) {
-				return subscriptionsapi.CreateSubscriptionsAPIFilters(logger.Desugar(), swf.Filters).Filter(ctx, *event) != eventfilter.FailFilter
+				filter := subscriptionsapi.CreateSubscriptionsAPIFilters(logger.Desugar(), swf.Filters)
+				defer filter.Cleanup()
+				return filter.Filter(ctx, *event) != eventfilter.FailFilter
 			}
 		}
 	}

vendor/modules.txt

@@ -1676,7 +1676,7 @@ k8s.io/utils/trace
 ## explicit; go 1.25.0
 knative.dev/caching/pkg/apis/caching
 knative.dev/caching/pkg/apis/caching/v1alpha1
-# knative.dev/eventing v0.49.1-0.20260608101721-fd4eb83e1b8f
+# knative.dev/eventing v0.49.1-0.20260611075324-69b976f7fd56
 ## explicit; go 1.25.0
 knative.dev/eventing/cmd/heartbeats
 knative.dev/eventing/pkg/apis
@@ -1904,7 +1904,7 @@ knative.dev/reconciler-test/pkg/resources/service
 knative.dev/reconciler-test/pkg/resources/serviceaccount
 knative.dev/reconciler-test/pkg/state
 knative.dev/reconciler-test/resources/certificate
-# knative.dev/serving v0.49.1-0.20260604132906-516bc43f3667
+# knative.dev/serving v0.49.1-0.20260611133425-5806b90b4cdb
 ## explicit; go 1.25.0
 knative.dev/serving/pkg/apis/autoscaling
 knative.dev/serving/pkg/apis/autoscaling/v1alpha1