upgrade to latest dependencies (#1039)

bumping golang.org/x/mod 27761a2...1ac721d:
  > 1ac721d go.mod: update golang.org/x dependencies
  > fb1fac8 all: upgrade go directive to at least 1.25.0 [generated]
bumping golang.org/x/net 60b3f6f...316e20c:
  > 316e20c go.mod: update golang.org/x dependencies
  > 9767a42 internal/http3: add support for plugging into net/http
  > 4a81284 http2: update docs to disrecommend this package
  > dec6603 dns/dnsmessage: reject too large of names early during unpack
  > 8afa12f http2: deprecate write schedulers
  > 38019a2 http2: add missing copyright header to export_test.go
  > 039b87f internal/http3: return error when Write is used after status 304 is set
  > 6267c6c internal/http3: add HTTP 103 Early Hints support to ClientConn
  > 591bdf3 internal/http3: add HTTP 103 Early Hints support to Server
  > 1faa6d8 internal/http3: avoid potential race when aborting RoundTrip
  > 8d297f1 http2: Move most tests from the http2 package to the http2_test package.
  > 3eb9327 http2: do not retry RoundTrip after peer sends a stream protocol error
bumping golang.org/x/tools 009367f...24a8e95:
  > 24a8e95 go.mod: update golang.org/x dependencies
  > 3dd57fb gopls/internal/mcp: refactor unified diff generation
  > fcc014d cmd/digraph: fix package doc
  > 39f0f5c cmd/stress: add -failfast flag
  > 063c264 gopls/test/integration/misc: add diagnostics to flaky test
  > deb6130 gopls/internal/golang: fix hover panic in raw strings with CRLF
  > 5f1186b gopls/internal/analysis/driverutil: remove unnecessary new imports
  > ff45494 go/analysis: expose GoMod etc. to Pass.Module
  > 62daff4 go/analysis/passes/inline: fix panic in inlineAlias with instantiated generic alias
  > fcb6088 x/tools: delete obsolete code
  > c3b48f5 gopls: update to go1.26
  > 30b6a4e internal/diff: unified diffs should use line diffs
  > 6cbcf5a go/analysis/passes/modernize: atomic: use new atomic types
  > 07ce8ce go/ssa: emit short-circuit control flow for boolean switch cases
  > e89f568 gopls/internal/lsprpc: increase test timeout 1s -> 10s
  > 49cd9d8 gopls/internal/protocol: add lazy enum form input type
  > b365b0a go/analysis/passes/modernize: rangeint: omit unneeded type conversion
  > 83aca55 go/analysis/passes/modernize: fmtappendf: remove whitespace
  > 6a2886b go/packages: explicitly disable collecting vcs information when not needed
  > f1f4626 go/analysis/passes/modernize: reflecttypefor: simplify .Elem()
  > 0c3890d go/analysis/passes: fix stringscut variable shadowing
  > a63d2a1 gopls/internal/analysis: add new Analyzer writestring
  > 3c6f94a go/analysis/passes: fmtappendf: skip if formatter could produce empty string
  > 64804da go/analysis/passes/modernize: slicescontains: omit fix with empty body
  > da12812 go/analysis/passes/modernize: fix stringscut false positive for unguarded afterSlice
  > 7e46809 go/analysis/passes/modernize: stringsbuilder: allow multiple rvalue uses
  > 55840e9 internal/astutil: missing test for CL 748480
  > aa7725f gopls/internal/server: send notification when go.work file changes
  > 01a0310 gopls/internal/server: limit checkGoModDeps during bulk operations
  > 13444bf gopls/integration/govim: deal with breaking change to gs CLI
  > dd752d6 gopls/internal/test/integration/completion: fix flaky TestUnimportedCompletion_VSCodeIssue3365
  > a5d96d4 gopls/internal/test/integration/completion: fix flaky TestUnimportedCompletion_VSCodeIssue3365
  > 981d752 internal/astutil: fix \r bug in PosInStringLiteral
  > 64da537 gopls/codeaction: support struct tag dialog
  > ca2bd77 analysisflags: quote analyzer name in enable usage
  > 31904d1 refactor/satisfy: fix panic on interface literals
  > c48686b go/analysis/passes/modernize: skip func literals with return values in waitgroup
  > 5c2a459 go/analysis/passes/modernize: don't consider selects for min/max pass
  > b9ba349 internal/mcp: partial revert of go.dev/cl/731503
  > e8d9b54 gopls/internal/test/marker: use openbsd/riscv64 in OS/ARCH suffix test
  > 20b0bd9 go/analysis/unitchecker: update go fix, go vet error message
  > 8151966 gopls/internal/server: add telemetry for vulncheck_prompt
  > 67b6d4f go/analysis/passes/modernize: fix invalid rewrite of reflect.TypeOf(nil)
  > 43ba126 gopls: fix typos
  > d332078 go/analysis/passes/modernize: leave out space in stringsbuilder edit
  > 001923f go/packages: aggregate chunked files in Load
  > d2fc364 internal/diff: remove myers' diff implementation
  > a8a17b7 gopls/test/imports_test: add logging for flaky test
  > 5cd825b gopls/bench: disable one DidChange benchmark
  > f644bf7 all: upgrade go directive to at least 1.25.0 [generated]
  > cab62c1 gopls/internal/debug: replace timeUnits with time.Duration
bumping golang.org/x/term 3aff304...9d2dc07:
  > 9d2dc07 go.mod: update golang.org/x dependencies
  > d954e03 all: upgrade go directive to at least 1.25.0 [generated]
bumping golang.org/x/text 817fba9...7ca2c6d:
  > 7ca2c6d go.mod: update golang.org/x dependencies
  > 73d1ba9 all: upgrade go directive to at least 1.25.0 [generated]
bumping knative.dev/pkg b3fe2e5...5d1c12d:
  > 5d1c12d Bump the golang-x group with 2 updates (# 3334)
  > 5834c5d Add TLS support to Prometheus metrics server (# 3322)
bumping golang.org/x/sys fc646e4...eaaaaee:
  > eaaaaee windows/registry: correct KeyInfo.ModTime calculation
  > 942780b cpu: darwin/arm64 feature detection
  > acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
  > 3687fbd cpu: better defaults on darwin ARM64
  > 48062e9 plan9: change Note to alias syscall.Note
  > 4f23f80 windows: change Signal to alias syscall.Signal
  > 7548802 all: upgrade go directive to at least 1.25.0 [generated]

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -10,7 +10,7 @@ require (
 	k8s.io/code-generator v0.35.2
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
 	knative.dev/hack v0.0.0-20260310014051-c448fdb867e2
-	knative.dev/pkg v0.0.0-20260314220421-b3fe2e572de3
+	knative.dev/pkg v0.0.0-20260316154451-5d1c12d99335
 )
 
 require (
@@ -71,15 +71,15 @@ require (
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/mod v0.33.0 // indirect
-	golang.org/x/net v0.51.0 // indirect
+	golang.org/x/mod v0.34.0 // indirect
+	golang.org/x/net v0.52.0 // indirect
 	golang.org/x/oauth2 v0.35.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
-	golang.org/x/sys v0.41.0 // indirect
-	golang.org/x/term v0.40.0 // indirect
-	golang.org/x/text v0.34.0 // indirect
+	golang.org/x/sys v0.42.0 // indirect
+	golang.org/x/term v0.41.0 // indirect
+	golang.org/x/text v0.35.0 // indirect
 	golang.org/x/time v0.10.0 // indirect
-	golang.org/x/tools v0.42.0 // indirect
+	golang.org/x/tools v0.43.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20260209200024-4cfbd4190f57 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260209200024-4cfbd4190f57 // indirect

go.sum

@@ -165,24 +165,24 @@ go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
 go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
-golang.org/x/mod v0.33.0 h1:tHFzIWbBifEmbwtGz65eaWyGiGZatSrT9prnU8DbVL8=
-golang.org/x/mod v0.33.0/go.mod h1:swjeQEj+6r7fODbD2cqrnje9PnziFuw4bmLbBZFrQ5w=
-golang.org/x/net v0.51.0 h1:94R/GTO7mt3/4wIKpcR5gkGmRLOuE/2hNGeWq/GBIFo=
-golang.org/x/net v0.51.0/go.mod h1:aamm+2QF5ogm02fjy5Bb7CQ0WMt1/WVM7FtyaTLlA9Y=
+golang.org/x/mod v0.34.0 h1:xIHgNUUnW6sYkcM5Jleh05DvLOtwc6RitGHbDk4akRI=
+golang.org/x/mod v0.34.0/go.mod h1:ykgH52iCZe79kzLLMhyCUzhMci+nQj+0XkbXpNYtVjY=
+golang.org/x/net v0.52.0 h1:He/TN1l0e4mmR3QqHMT2Xab3Aj3L9qjbhRm78/6jrW0=
+golang.org/x/net v0.52.0/go.mod h1:R1MAz7uMZxVMualyPXb+VaqGSa3LIaUqk0eEt3w36Sw=
 golang.org/x/oauth2 v0.35.0 h1:Mv2mzuHuZuY2+bkyWXIHMfhNdJAdwW3FuWeCPYN5GVQ=
 golang.org/x/oauth2 v0.35.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
 golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4=
 golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
-golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
-golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/term v0.40.0 h1:36e4zGLqU4yhjlmxEaagx2KuYbJq3EwY8K943ZsHcvg=
-golang.org/x/term v0.40.0/go.mod h1:w2P8uVp06p2iyKKuvXIm7N/y0UCRt3UfJTfZ7oOpglM=
-golang.org/x/text v0.34.0 h1:oL/Qq0Kdaqxa1KbNeMKwQq0reLCCaFtqu2eNuSeNHbk=
-golang.org/x/text v0.34.0/go.mod h1:homfLqTYRFyVYemLBFl5GgL/DWEiH5wcsQ5gSh1yziA=
+golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=
+golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/term v0.41.0 h1:QCgPso/Q3RTJx2Th4bDLqML4W6iJiaXFq2/ftQF13YU=
+golang.org/x/term v0.41.0/go.mod h1:3pfBgksrReYfZ5lvYM0kSO0LIkAl4Yl2bXOkKP7Ec2A=
+golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8=
+golang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA=
 golang.org/x/time v0.10.0 h1:3usCWA8tQn0L8+hFJQNgzpWbd89begxN66o1Ojdn5L4=
 golang.org/x/time v0.10.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
-golang.org/x/tools v0.42.0 h1:uNgphsn75Tdz5Ji2q36v/nsFSfR/9BRFvqhGBaJGd5k=
-golang.org/x/tools v0.42.0/go.mod h1:Ma6lCIwGZvHK6XtgbswSoWroEkhugApmsXyrUmBhfr0=
+golang.org/x/tools v0.43.0 h1:12BdW9CeB3Z+J/I/wj34VMl8X+fEXBxVR90JeMX5E7s=
+golang.org/x/tools v0.43.0/go.mod h1:uHkMso649BX2cZK6+RpuIPXS3ho2hZo4FVwfoy1vIk0=
 golang.org/x/tools/go/expect v0.1.1-deprecated h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM=
 golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM=
@@ -229,8 +229,8 @@ k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzk
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 knative.dev/hack v0.0.0-20260310014051-c448fdb867e2 h1:b35SGLEp03D8oGf8mE9HBt3yfNgYpAK0fw46hFXs9w4=
 knative.dev/hack v0.0.0-20260310014051-c448fdb867e2/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
-knative.dev/pkg v0.0.0-20260314220421-b3fe2e572de3 h1:+Lf0Ey1i+RfFQqcQqgE06mZH1oEGDRnYCjmLvZlkCT8=
-knative.dev/pkg v0.0.0-20260314220421-b3fe2e572de3/go.mod h1:DKf80HbmuintxxLmzOCxUDgfNS7hz/UHJQTmKmg2qL8=
+knative.dev/pkg v0.0.0-20260316154451-5d1c12d99335 h1:OpR5LNa0m34T8KOzGLwObjmMkxuuenSFU51oiNcfKRw=
+knative.dev/pkg v0.0.0-20260316154451-5d1c12d99335/go.mod h1:o/XS1E/hYh9IR8deEEiJG4kKtQfqnf9Gwt5bwp2x4AU=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=