[main] Upgrade to latest dependencies (#263)

upgrade to latest dependencies

bumping knative.dev/serving daae9fd...df03027:
  > df03027 fix: fixed the pinned dependencies issue (# 15475)
  > da8d2d1 Allow securityContext.Privileged to be configurable (# 15643)
  > c0f181d Update net-contour nightly (# 15665)
  > 746e72f Update net-gateway-api nightly (# 15658)
  > 750f9a2 Drop k8s v1.28 from kind testing and update cluster version to 1.30 in e2e (# 15655)
bumping knative.dev/networking 43a6a77...34f5e09:
  > 34f5e09 upgrade to latest dependencies (# 1028)
bumping knative.dev/caching 09897a3...98070c2:
  > 98070c2 upgrade to latest dependencies (# 911)

Signed-off-by: Knative Automation <[email protected]>

go.mod

@@ -14,11 +14,11 @@ require (
 	k8s.io/client-go v0.30.3
 	k8s.io/code-generator v0.30.3
 	k8s.io/kube-openapi v0.0.0-20240808142205-8e686545bdb8
-	knative.dev/caching v0.0.0-20241224023107-09897a309546
+	knative.dev/caching v0.0.0-20241228165110-98070c283d73
 	knative.dev/hack v0.0.0-20241227080210-e92a16ae0893
-	knative.dev/networking v0.0.0-20241223132331-43a6a77176e5
+	knative.dev/networking v0.0.0-20241229023211-34f5e09274c8
 	knative.dev/pkg v0.0.0-20241223131119-4c901591eb4a
-	knative.dev/serving v0.43.1-0.20241226122210-daae9fd9497c
+	knative.dev/serving v0.43.1-0.20241230225749-df030277a7be
 )
 
 require (

go.sum

@@ -802,16 +802,16 @@ k8s.io/kube-openapi v0.0.0-20240808142205-8e686545bdb8 h1:1Wof1cGQgA5pqgo8MxKPtf
 k8s.io/kube-openapi v0.0.0-20240808142205-8e686545bdb8/go.mod h1:Os6V6dZwLNii3vxFpxcNaTmH8LJJBkOTg1N0tOA0fvA=
 k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 h1:pUdcCO1Lk/tbT5ztQWOBi5HBgbBP1J8+AsQnQCKsi8A=
 k8s.io/utils v0.0.0-20240711033017-18e509b52bc8/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-knative.dev/caching v0.0.0-20241224023107-09897a309546 h1:RKJr+2johLO/PcyH09CdM6hS2E1GnLWLZvy4NlC4yTY=
-knative.dev/caching v0.0.0-20241224023107-09897a309546/go.mod h1:/eipmU7BYlwwvUNd/zwy7N3LDNwQvs1KQ8AZKtMPZVc=
+knative.dev/caching v0.0.0-20241228165110-98070c283d73 h1:R9ourCbtO+twCxnG/k8wSlt6RTsPBvCginNYsV6QGFI=
+knative.dev/caching v0.0.0-20241228165110-98070c283d73/go.mod h1:XifurIHfoPIJocfQJtDJm4st9QPOhjpXprVgp/uSU8o=
 knative.dev/hack v0.0.0-20241227080210-e92a16ae0893 h1:zy7LwNJ2S7obPMHVAtxQgZPXxBTZzoxHbtb6uhxOl7Q=
 knative.dev/hack v0.0.0-20241227080210-e92a16ae0893/go.mod h1:R0ritgYtjLDO9527h5vb5X6gfvt5LCrJ55BNbVDsWiY=
-knative.dev/networking v0.0.0-20241223132331-43a6a77176e5 h1:SGN9eqPd3n3i+qNNNCKvuD3F2KnKtV+HISrzJ00RFL8=
-knative.dev/networking v0.0.0-20241223132331-43a6a77176e5/go.mod h1:l6MjoBv15PID8T93esYon2w5FOWn7Lj60xzt7dVyr+4=
+knative.dev/networking v0.0.0-20241229023211-34f5e09274c8 h1:0280xW/AUcpCa/jIGt4RrG3dJwGlqqI3nPf59fDBGg8=
+knative.dev/networking v0.0.0-20241229023211-34f5e09274c8/go.mod h1:EU4KaerdVqxeELmrEiS342GlnXINvYm0mDmNN+D+xew=
 knative.dev/pkg v0.0.0-20241223131119-4c901591eb4a h1:31rLKAGHeQEkxMOc/h4XCmHOTiR/1R4NRPvJ3wg05WY=
 knative.dev/pkg v0.0.0-20241223131119-4c901591eb4a/go.mod h1:C2dxK66GlycMOS0SKqv0SMAnWkxsYbG4hkH32Xg1qD0=
-knative.dev/serving v0.43.1-0.20241226122210-daae9fd9497c h1:CvuJFaCboCOdmr6sZt1Vnlu+Q0ExvXGut8Xmk3rMfAI=
-knative.dev/serving v0.43.1-0.20241226122210-daae9fd9497c/go.mod h1:t4ry8crQ2u732iZdr6nBcOfx9ulNc1uyfS2TeALLOKM=
+knative.dev/serving v0.43.1-0.20241230225749-df030277a7be h1:SXCce1/7konpjPpKU15RzzzZnjjz1rmmGO3OUeHjSro=
+knative.dev/serving v0.43.1-0.20241230225749-df030277a7be/go.mod h1:t4ry8crQ2u732iZdr6nBcOfx9ulNc1uyfS2TeALLOKM=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=

vendor/knative.dev/serving/pkg/apis/serving/fieldmask.go

@@ -710,10 +710,12 @@ func SecurityContextMask(ctx context.Context, in *corev1.SecurityContext) *corev
 	// SeccompProfile defaults to "unconstrained", but the safe values are
 	// "RuntimeDefault" or "Localhost" (with localhost path set)
 	out.SeccompProfile = in.SeccompProfile
-
+	// Only allow setting Privileged to false
+	if in.Privileged != nil && !*in.Privileged {
+		out.Privileged = in.Privileged
+	}
 	// Disallowed
 	// This list is unnecessary, but added here for clarity
-	out.Privileged = nil
 	out.SELinuxOptions = nil
 	out.ProcMount = nil
 

vendor/modules.txt

@@ -1125,7 +1125,7 @@ k8s.io/utils/pointer
 k8s.io/utils/ptr
 k8s.io/utils/strings/slices
 k8s.io/utils/trace
-# knative.dev/caching v0.0.0-20241224023107-09897a309546
+# knative.dev/caching v0.0.0-20241228165110-98070c283d73
 ## explicit; go 1.22.7
 knative.dev/caching/pkg/apis/caching
 knative.dev/caching/pkg/apis/caching/v1alpha1
@@ -1146,7 +1146,7 @@ knative.dev/caching/pkg/client/listers/caching/v1alpha1
 # knative.dev/hack v0.0.0-20241227080210-e92a16ae0893
 ## explicit; go 1.21
 knative.dev/hack
-# knative.dev/networking v0.0.0-20241223132331-43a6a77176e5
+# knative.dev/networking v0.0.0-20241229023211-34f5e09274c8
 ## explicit; go 1.22.7
 knative.dev/networking/pkg
 knative.dev/networking/pkg/apis/networking
@@ -1248,7 +1248,7 @@ knative.dev/pkg/version
 knative.dev/pkg/webhook
 knative.dev/pkg/webhook/certificates/resources
 knative.dev/pkg/websocket
-# knative.dev/serving v0.43.1-0.20241226122210-daae9fd9497c
+# knative.dev/serving v0.43.1-0.20241230225749-df030277a7be
 ## explicit; go 1.22.7
 knative.dev/serving/pkg/activator
 knative.dev/serving/pkg/apis/autoscaling