knative/serving

📋 What's Changed

• [release-1.22] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/16627
• bumping knative.dev/networking e9578ef...c8de379:
• > c8de379 Fix idle connection leak in prober (# 1142)
• bumping knative.dev/pkg ec45287...52dbd5e:
• > 52dbd5e Limit the webhook request body size to 3MiB (# 3363)
• > 2279959 Fix memory leak in expired matchers (# 3360)
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.22.0...knative-v1.22.1

📋 What's Changed

• [release-1.21] Fix non-constant format string error by @knative-prow-robot in https://github.com/knative/serving/pull/16621
• [release-1.21] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/16628
• bumping knative.dev/pkg 18c5d58...011b23b:
• > 011b23b Limit the webhook request body size to 3MiB (# 3364)
• > 9b08ba8 fix compilation (# 3361)
• > 39109c9 Fix memory leak in expired matchers (# 3359)
• bumping knative.dev/networking a7cdca2...ea8c792:
• > ea8c792 Fix idle connection leak in prober (# 1141)
• + 4 more

✨ ✨ Features / Enhancements

• Allow custom ports for the primary container's livenessProbe by @Fedosin - https://github.com/knative/serving/pull/16572
• add an annotation to the kingress mapping tags to hostnames by @dprotaso - https://github.com/knative/serving/pull/16455
• only update the deployment if desired labels, annotations or spec changes by @dprotaso - https://github.com/knative/serving/pull/16554

🔒 🔐 Security / TLS / Reliability

• queue-proxy pod statistics security by @sonikaarora - https://github.com/knative/serving/pull/16366
• feat: use knative.dev/pkg/tls for reconciler TLS configuration by @Fedosin - https://github.com/knative/serving/pull/16431
• feat: use knative.dev/pkg/tls for activator TLS configuration by @Fedosin - https://github.com/knative/serving/pull/16424
• feat: use knative.dev/pkg/tls for queue-proxy TLS configuration by @Fedosin - https://github.com/knative/serving/pull/16425
• Update TLS import path to knative.dev/pkg/network/tls by @Fedosin - https://github.com/knative/serving/pull/16458
• Shutdown Websocket Connections Gracefully in the queue-proxy by @dprotaso - https://github.com/knative/serving/pull/16362
• Fix EnsureCleanup to properly skip clean up when requested by @dprotaso - https://github.com/knative/serving/pull/16372

📦 📊 Metrics / Observability

• Add kn.revision.request.queued and kn.revision.request.active metrics by @prashanthjos - https://github.com/knative/serving/pull/16367
• minor refactoring of activator request metrics by @dprotaso - https://github.com/knative/serving/pull/16381

📦 🌐 Networking / EndpointSlices / Scaling

• Migrate autoscaler stat forwarder to use EndpointSlices by @dprotaso - https://github.com/knative/serving/pull/16448
• Switch e2e testing assertions to use EndpointSlices by @dprotaso - https://github.com/knative/serving/pull/16454
• Add endpointslices/restricted permission to ClusterRole by @linkvt - https://github.com/knative/serving/pull/16465
• use the /scale subresource to when updating replica count by @dprotaso - https://github.com/knative/serving/pull/16540

⚡ ⚙️ Performance / Stability / Testing

• increase timeout due to test flake by @dprotaso - https://github.com/knative/serving/pull/16389
• Stabilize performance test SLAs with tolerance thresholds by @aviralgarg05 - https://github.com/knative/serving/pull/16371

📦 🧪 CI / Build / Tooling

• checkout the repo prior to restoring the cache by @dprotaso - https://github.com/knative/serving/pull/16373
• drop 1.33 k8s in kind testing by @dprotaso - https://github.com/knative/serving/pull/16385
• hack: remove deprecated GO111MODULE=on by @Ankitsinghsisodya - https://github.com/knative/serving/pull/16499
• ci: pin registry image to immutable SHA digest by @Ankitsinghsisodya - https://github.com/knative/serving/pull/16503
• fix: adding required permissions to top level and jobs in the workflow by @gaganhr94 - https://github.com/knative/serving/pull/16556
• Address linter warnings now that we've bumped to go1.26 by @dprotaso - https://github.com/knative/serving/pull/16557

🐛 🐛 Bug Fixes

• Fix non-constant format string error by @dsimansk - https://github.com/knative/serving/pull/16538

📝 📚 Docs / Cleanup

• docs: update HTTP links to HTTPS in comments and docs by @Ankitsinghsisodya - https://github.com/knative/serving/pull/16551
• Fix spelling mistakes in comments, docs, and error strings by @Ankitsinghsisodya - https://github.com/knative/serving/pull/16547

✨ 👥 New Contributors

• @sonikaarora - https://github.com/knative/serving/pull/16366
• @Ankitsinghsisodya - https://github.com/knative/serving/pull/16499
• @gaganhr94 - https://github.com/knative/serving/pull/16556

💥 🚨 Breaking or Notable Changes

• For `1.21` release the `secure-pod-defaults` default will remain `disabled` but in a future release (most likely `v1.22`) we will switch this default to `AllowRootBounded`.
• _If you're unsure whether your workloads will support this new setting you should explicitly set this option to `disabled` prior to upgrading to `v1.22`._
• For more information see the [documentation](https://knative.dev/development/serving/configuration/secure-pod-defaults/) and reach out if you foresee issues in your testing.

📋 What's Changed

• [release-1.21] feat: use knative.dev/pkg/network/tls for configurable TLS by @Fedosin in https://github.com/knative/serving/pull/16482
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.21.1...knative-v1.21.2

💥 🚨 Breaking or Notable Changes

• For `1.21` release the `secure-pod-defaults` default will remain `disabled` but in a future release (most likely `v1.22`) we will switch this default to `AllowRootBounded`.
• _If you're unsure whether your workloads will support this new setting you should explicitly set this option to `disabled` prior to upgrading to `v1.22`._
• For more information see the [documentation](https://knative.dev/development/serving/configuration/secure-pod-defaults/) and reach out if you foresee issues in your testing.

📋 What's Changed

• [release-1.21] Rebuilt prior release with v1.25.7 in https://github.com/knative/serving/pull/16408
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.21.0...knative-v1.21.1

📋 What's Changed

• [release-1.20] rebuilt prior release with go v1.25.7 in https://github.com/knative/serving/pull/16407
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.20.2...knative-v1.20.3

📋 What's Changed

• [release-1.19] fix sub-second precision metric reporting by @knative-prow-robot in https://github.com/knative/serving/pull/16360
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.8...knative-v1.19.9

💥 🚨 Breaking or Notable Changes

• For `1.21` release the `secure-pod-defaults` default will remain `disabled` but in a future release (most likely `v1.22`) we will switch this default to `AllowRootBounded`.
• _If you're unsure whether your workloads will support this new setting you should explicitly set this option to `disabled` prior to upgrading to `v1.22`._
• For more information see the [documentation](https://knative.dev/development/serving/configuration/secure-pod-defaults/) and reach out if you foresee issues in your testing.

✨ 💫 New Features & Changes

• You can now set the new feature `pod-is-always-schedulable` to `true` in the config-deployment ConfigMap. As a result, Knative will not mark revisions as Unschedulable when a Pod is not scheduled. This makes sense if you want to omit this transient state in clusters that have cluster-autoscaling set up, and you can guarantee that all Pods will be eventually scheduled. (#16146, @SaschaSchwarze0)
• Activator probe timeout and frequency are now configurable via PROBE_TIMEOUT and PROBE_FREQUENCY environment variables. (#16250, @bindrad)
• Add `terminationGracePeriodSeconds` support for user and sidecar container probes (#16255, @flomedja)
• Added support for OpenTelemetry W3C Trace Context (traceparent header) in request logging, while maintaining backward compatibility with Zipkin B3 format. (#16168, @SomilJain0112)
• Allow activator to be out of the request path when system-internal-tls is enabled (#16183, @linkvt)
• Allow adjusting Revision min/max scale annotations (#16186, @dprotaso)
• Allow unreachable revisions with initialScale > 1 to scale to 0 (#16327, @aviralgarg05)
• Include two new activator metrics (`kn.activator.stats.conn.reachable`, `kn.activator.stats.conn.errors`) that reflect the stats reporter connection status (#16318, @prashanthjos)

🐛 🐞Bug Fixes

• Preserve deployment and template annotations and labels during reconcile (#16199, @linkvt)
• Fall back to HTTP1 on failed HTTP2 health probes (e.g. on connection error or non-readiness) (#16205, @linkvt)
• Fix a rare data race in revision backend manager creating revision watchers during shutdown (#16225, @linkvt)
• Fix flaky HTTPS e2e tests by waiting for HTTPS endpoint to be Ready. (#16230, @linkvt)
• Fix metric names to match the original design document `kn.queueproxy.app.duration` becomes `kn.serving.invocation.duration` and `kn.queueproxy.depth` becomes `kn.serving.queue.depth` (#16290, @dprotaso)
• Fix request log output corruption when using invalid log templates (#16242, @linkvt)
• Fixed duplicate ACME challenge paths when Services with traffic tags use HTTP-01 challenges for TLS certificates. (#16259, @linkvt)
• Services can no longer route traffic to revisions belonging to different services; attempting to do so will result in Ready=False with reason RevisionNotOwned. (#16294, @linkvt)
• + 3 more

✨ New Contributors

• @SomilJain0112 made their first contribution in https://github.com/knative/serving/pull/16168
• @linkvt made their first contribution in https://github.com/knative/serving/pull/16230
• @bindrad made their first contribution in https://github.com/knative/serving/pull/16250
• @prashanthjos made their first contribution in https://github.com/knative/serving/pull/16318
• @aviralgarg05 made their first contribution in https://github.com/knative/serving/pull/16327

📦 Dependencies

• <details>
• <summary>Added</summary>
• github.com/CloudyKit/fastprinter: [33d98a0](https://github.com/CloudyKit/fastprinter/tree/33d98a0)
• github.com/CloudyKit/jet/v6: [v6.2.0](https://github.com/CloudyKit/jet/tree/v6.2.0)
• github.com/Joker/jade: [v1.1.3](https://github.com/Joker/jade/tree/v1.1.3)
• github.com/RaveNoX/go-jsoncommentstrip: [v1.0.0](https://github.com/RaveNoX/go-jsoncommentstrip/tree/v1.0.0)
• github.com/Shopify/goreferrer: [8cddb4f](https://github.com/Shopify/goreferrer/tree/8cddb4f)
• github.com/andybalholm/brotli: [v1.0.5](https://github.com/andybalholm/brotli/tree/v1.0.5)
• + 151 more

💥 🚨 Breaking or Notable Changes

• For `v1.20` release the `secure-pod-defaults` default will remain `disabled` but in a future release (most likely `v1.21`) we will switch this default to `AllowRootBounded`.
• _If you're unsure whether your workloads will support this new setting you should explicitly set this option to `disabled` prior to upgrading to `v1.21`._

📋 What's Changed

• [release-1.20] fix sub-second precision metric reporting by @knative-prow-robot in https://github.com/knative/serving/pull/16359
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.20.1...knative-v1.20.2

💥 🚨 Breaking or Notable Changes

• For `v1.20` release the `secure-pod-defaults` default will remain `disabled` but in a future release (most likely `v1.21`) we will switch this default to `AllowRootBounded`.
• _If you're unsure whether your workloads will support this new setting you should explicitly set this option to `disabled` prior to upgrading to `v1.21`._

📋 What's Changed

• [release-1.20] Fix Serving Metric Names to match Design Document by @knative-prow-robot in https://github.com/knative/serving/pull/16293
• [release-1.20] Make autoscaler instrument async so we can remove metric attributes when revisions go away by @knative-prow-robot in https://github.com/knative/serving/pull/16302
• [release-1.20] Preserve deployment and its template labels and annotations by @knative-prow-robot in https://github.com/knative/serving/pull/16303
• [release-1.20] Suppress 'default value insecure' warning when secure-pod-defaults is enabled. by @knative-prow-robot in https://github.com/knative/serving/pull/16220
• [release-1.20] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/16319
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.20.0...knative-v1.20.1

📋 What's Changed

• [release-1.19] Fix Serving Metric Names to match Design Document by @knative-prow-robot in https://github.com/knative/serving/pull/16292
• [release-1.19] Make autoscaler instrument async so we can remove metric attributes when revisions go away by @knative-prow-robot in https://github.com/knative/serving/pull/16301
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.7...knative-v1.19.8

💥 🚨 Breaking or Notable Changes

• For `v1.20` release the `secure-pod-defaults` default will remain `disabled` but in a future release (most likely `v1.21`) we will switch this default to `AllowRootBounded`.
• _If you're unsure whether your workloads will support this new setting you should explicitly set this option to `disabled` prior to upgrading to `v1.21`._
• For more information see the [documentation](https://knative.dev/development/serving/configuration/secure-pod-defaults/) and reach out if you foresee issues in your testing.

✨ 💫 New Features & Changes

• Create a new value for `secure-pod-defaults`: `AllowRootBounded`
• when AllowRootBounded, defaults SeccompProfile and Capabilities if nil
• when enabled sets RunAsNonRoot to true if not already specified (#16042, @nader-ziada)
• Made it possible to configure the `httputil.ReverseProxy` or add `http.Handler`s to queue-proxy in out-of-tree builds. (#16097, @mbaynton)
• Podspec-dryrun feature flag has been removed. Dry run validation will now occur when a user opts into it using `kubectl apply --dry-run=server` (#16008, @Alexander-Kita)
• Add distinct logging for timeout types by @thiagomedina in https://github.com/knative/serving/pull/16109
• drop unnecessary 'kn.activator.proxy' metric/span attribute by @dprotaso in https://github.com/knative/serving/pull/16045
• bump Istio to v1.27 and Contour to v1.33 by @dprotaso in https://github.com/knative/serving/pull/16099
• + 1 more

🐛 🐞Bug Fixes

• Fix min-scale transition by @dprotaso in https://github.com/knative/serving/pull/16094
• Add initialize conditions to MakePA to avoid potential race conditions by @nader-ziada in https://github.com/knative/serving/pull/16037
• For orphaned certificates if we have an issue listing just log the error by @dprotaso in https://github.com/knative/serving/pull/16096
• Fix queue proxy user metrics port by @dprotaso in https://github.com/knative/serving/pull/16018
• drop unused metrics domain env var by @dprotaso in https://github.com/knative/serving/pull/16019
• fix otelhttp setup in activator by @dprotaso in https://github.com/knative/serving/pull/16044
• Drop probe tracing in queue-proxy by @dprotaso in https://github.com/knative/serving/pull/16048
• Adjust queue proxy metric attributes by @dprotaso in https://github.com/knative/serving/pull/16049
• + 2 more

✨ New Contributors

• @Alexander-Kita made their first contribution in https://github.com/knative/serving/pull/16008
• @mbaynton made their first contribution in https://github.com/knative/serving/pull/16097
• @thiagomedina made their first contribution in https://github.com/knative/serving/pull/16109
• @ali-a-a made their first contribution in https://github.com/knative/serving/pull/16201

📦 Dependencies

• <details>
• <summary>Added</summary>
• github.com/prometheus/otlptranslator: [v1.0.0](https://github.com/prometheus/otlptranslator/tree/v1.0.0)
• golang.org/x/tools/go/expect: v0.1.1-deprecated
• golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated
• </details>
• <details>
• <summary>Changed</summary>
• + 70 more

📋 What's Changed

• [release-1.19] Fix min-scale transition by @knative-prow-robot in https://github.com/knative/serving/pull/16101
• [release-1.19] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/16192
• [release-1.19] Fix: PodAutoscaler not reconciled due to missing class annotation by @knative-prow-robot in https://github.com/knative/serving/pull/16191
• [release-1.19] Fix: controller crash due to metric panic
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.6...knative-v1.19.7

📋 What's Changed

• [release-1.18] Fix min-scale transition by @knative-prow-robot in https://github.com/knative/serving/pull/16100
• [release-1.18] Fix: PodAutoscaler not reconciled due to missing class annotation by @knative-prow-robot in https://github.com/knative/serving/pull/16190
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.18.1...knative-v1.18.2

📋 What's Changed

• [release-1.19] Serving Metric Tweaks by @knative-prow-robot in https://github.com/knative/serving/pull/16063
• [release-1.19] Fix work queue depth metric calculation in https://github.com/knative/serving/pull/16084
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.5...knative-v1.19.6

📋 What's Changed

• [release-1.19] Fix release script @dprotaso
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.4...knative-v1.19.5

📋 What's Changed

• [release-1.19] fix otelhttp setup in activator by @knative-prow-robot in https://github.com/knative/serving/pull/16046
• [release-1.19] drop unnecessary 'kn.activator.proxy' metric/span attribute by @knative-prow-robot in https://github.com/knative/serving/pull/16047
• [release-1.19] Drop probe tracing in queue-proxy by @knative-prow-robot in https://github.com/knative/serving/pull/16050
• [release-1.19] Adjust queue proxy metric attributes by @knative-prow-robot in https://github.com/knative/serving/pull/16051
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.2...knative-v1.19.3

📋 What's Changed

• [release-1.19] fix otelhttp setup in activator by @knative-prow-robot in https://github.com/knative/serving/pull/16046
• [release-1.19] drop unnecessary 'kn.activator.proxy' metric/span attribute by @knative-prow-robot in https://github.com/knative/serving/pull/16047
• [release-1.19] Drop probe tracing in queue-proxy by @knative-prow-robot in https://github.com/knative/serving/pull/16050
• [release-1.19] Adjust queue proxy metric attributes by @knative-prow-robot in https://github.com/knative/serving/pull/16051
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.2...knative-v1.19.3

📋 What's Changed

• Fix OTel metrics exporting by bumping dependencies (@dprotaso)
• [release-1.19] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/16035
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.1...knative-v1.19.2

📋 What's Changed

• Full Changelog: https://github.com/knative/serving/compare/knative-v1.19.0...knative-v1.19.1

📋 What's Changed

• Fix prometheus pull metric names @dprotaso
• [release-1.19] fix a tracing protocol comment [skip-dot-release] by @knative-prow-robot in https://github.com/knative/serving/pull/16016
• [release-1.19] Fix queue proxy user metrics port by @knative-prow-robot in https://github.com/knative/serving/pull/16021
• [release-1.19] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/16025

🐛 Bug or Regression

• Fix labels and annotations propagation to k8s service on update (#15892, @dsimansk)

📦 Uncategorized

• Knative Serving now supports Kubernetes’ new "image" volume type. (#15878, @Fedosin)
• System_internal_tls_test.go:110: TLS not used on requests to queue-proxy: pods "system-internal-tls-mjhqutwi-00001-deployment-6b84b959d7-mjkcs" not found (#15895, @maschmid)

✨ Added

• github.com/cenkalti/backoff/v5: [v5.0.2](https://github.com/cenkalti/backoff/tree/v5.0.2)
• github.com/spiffe/go-spiffe/v2: [v2.5.0](https://github.com/spiffe/go-spiffe/tree/v2.5.0)
• github.com/zeebo/errs: [v1.4.0](https://github.com/zeebo/errs/tree/v1.4.0)
• go.opentelemetry.io/contrib/instrumentation/runtime: v0.62.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc: v1.37.0
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp: v1.37.0
• go.opentelemetry.io/otel/exporters/prometheus: v0.59.0
• go.opentelemetry.io/otel/exporters/stdout/stdouttrace: v1.37.0
• + 3 more

📋 Changed

• cel.dev/expr: v0.19.1 → v0.23.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: [v1.25.0 → v1.27.0](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/compare/detectors/gcp/v1.25.0...detectors/gcp/v1.27.0)
• github.com/cncf/xds/go: [cff3c89 → ae57f3c](https://github.com/cncf/xds/compare/cff3c89...ae57f3c)
• github.com/go-jose/go-jose/v4: [v4.0.2 → v4.0.5](https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5)
• github.com/go-logr/logr: [v1.4.2 → v1.4.3](https://github.com/go-logr/logr/compare/v1.4.2...v1.4.3)
• github.com/golang-jwt/jwt/v4: [v4.5.1 → v4.5.2](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2)
• github.com/golang/mock: [v1.4.4 → v1.1.1](https://github.com/golang/mock/compare/v1.4.4...v1.1.1)
• github.com/google/btree: [v1.0.1 → v1.1.3](https://github.com/google/btree/compare/v1.0.1...v1.1.3)
• + 58 more

🗑️ Removed

• cloud.google.com/go/bigquery: v1.8.0
• cloud.google.com/go/datastore: v1.1.0
• cloud.google.com/go/pubsub: v1.3.1
• cloud.google.com/go/storage: v1.10.0
• dmitri.shuralyov.com/gpu/mtl: 666a987
• github.com/BurntSushi/xgb: [27f1227](https://github.com/BurntSushi/xgb/tree/27f1227)
• github.com/IBM/sarama: [v1.43.1](https://github.com/IBM/sarama/tree/v1.43.1)
• github.com/Shopify/sarama: [v1.19.0](https://github.com/Shopify/sarama/tree/v1.19.0)
• + 46 more

📋 What's Changed

• [release-1.18] Fix labels and annotations propagation to k8s service on update by @knative-prow-robot in https://github.com/knative/serving/pull/15908
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.18.0...knative-v1.18.1

📋 What's Changed

• [release-1.17] Fix labels and annotations propagation to k8s service on update by @knative-prow-robot in https://github.com/knative/serving/pull/15907
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.17.1...knative-v1.17.2

📋 What's Changed

• [release-1.17] bump google container registry and dependent dependencies by @dprotaso in https://github.com/knative/serving/pull/15851
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.17.0...knative-v1.17.1

🐛 Bug or Regression

• Fixes revision timeout defaulting when identical values are present in timeout settings. (#15617, @skonto)

📦 Uncategorized

• Add the ability to use mountPropagation for volumeMounts, gated under kubernetes.podspec-volumes-mount-propagation (#15758, @elijah-rou)
• Adding support for CSI (Container Storage Interface) volumes. This feature allows users to mount CSI-compatible storage volumes into their Knative service containers. It enables integration with enterprise storage solutions and cloud provider storage services that implement the CSI specification. The feature is behind the flag `kubernetes.podspec-volumes-csi`. (#15815, @mwritescode)
• Autoscaling: ignore ScaleDownDelay if the revision is not reachable (#15831, @scottjmaddox)
• Bump go-containerregistry to address issues with tag to digest resolution on EKS (#15754, @dprotaso)
• Fix golangci exclude config (#15775, @dsimansk)
• Kubernetes min version is now v1.31 (#15774, @dprotaso)
• Minimum Kubernetes version is now v1.31 (#15777, @dprotaso)
• Support exec readiness probes for sidecar containers (#15773, @flomedja)

✨ Added

• github.com/containerd/log: [v0.1.0](https://github.com/containerd/log/tree/v0.1.0)
• github.com/distribution/reference: [v0.6.0](https://github.com/distribution/reference/tree/v0.6.0)
• github.com/envoyproxy/go-control-plane/envoy: [v1.32.4](https://github.com/envoyproxy/go-control-plane/tree/envoy/v1.32.4)
• github.com/envoyproxy/go-control-plane/ratelimit: [v0.1.0](https://github.com/envoyproxy/go-control-plane/tree/ratelimit/v0.1.0)
• github.com/magefile/mage: [v1.14.0](https://github.com/magefile/mage/tree/v1.14.0)
• github.com/moby/docker-image-spec: [v1.3.1](https://github.com/moby/docker-image-spec/tree/v1.3.1)
• go.opentelemetry.io/auto/sdk: v1.1.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.33.0

📋 Changed

• cel.dev/expr: v0.16.2 → v0.19.1
• cloud.google.com/go/compute/metadata: v0.5.2 → v0.6.0
• github.com/Azure/go-autorest/autorest/adal: [v0.9.23 → v0.9.24](https://github.com/Azure/go-autorest/compare/autorest/adal/v0.9.23...autorest/adal/v0.9.24)
• github.com/Azure/go-autorest/autorest/azure/auth: [v0.5.11 → v0.5.13](https://github.com/Azure/go-autorest/compare/autorest/azure/auth/v0.5.11...autorest/azure/auth/v0.5.13)
• github.com/Azure/go-autorest/autorest/azure/cli: [v0.4.6 → v0.4.7](https://github.com/Azure/go-autorest/compare/autorest/azure/cli/v0.4.6...autorest/azure/cli/v0.4.7)
• github.com/Azure/go-autorest/autorest/date: [v0.3.0 → v0.3.1](https://github.com/Azure/go-autorest/compare/autorest/date/v0.3.0...autorest/date/v0.3.1)
• github.com/Azure/go-autorest/autorest: [v0.11.29 → v0.11.30](https://github.com/Azure/go-autorest/compare/autorest/v0.11.29...autorest/v0.11.30)
• github.com/Azure/go-autorest/logger: [v0.2.1 → v0.2.2](https://github.com/Azure/go-autorest/compare/logger/v0.2.1...logger/v0.2.2)
• + 113 more

🗑️ Removed

• cloud.google.com/go/compute: v1.10.0
• github.com/Azure/go-ansiterm: [d185dfc](https://github.com/Azure/go-ansiterm/tree/d185dfc)
• github.com/google/gnostic: [v0.6.9](https://github.com/google/gnostic/tree/v0.6.9)
• github.com/jmespath/go-jmespath/internal/testify: [v1.5.1](https://github.com/jmespath/go-jmespath/tree/internal/testify/v1.5.1)

📋 What's Changed

• [release-1.16] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/15794
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.16.2...knative-v1.16.3

📋 What's Changed

• [release-1.16] Fix configuration timeout defaulting by @knative-prow-robot in https://github.com/knative/serving/pull/15721
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.16.1...knative-v1.16.2

📋 Changes

• Adding support for the "hostPath" volume type. The feature allows users to mount directories from the host node's filesystem into their Knative service containers. It enables access to local storage on the node, facilitating use cases such as accessing node-specific data or utilizing local caches. The feature is behind the flag `kubernetes.podspec-volumes-hostpath`. (#15648, @amarflybot)
• Fixes previously supported probe syntax without a leading slash. (#15681, @skonto)
• Fixes revision timeout defaulting when identical values are present in timeout settings. (#15617, @skonto)
• A revision is now set to ContainerHealthy=True when it has ready replicas (#15503, @SaschaSchwarze0)
• Add default container annotation to Pods created by the reconciler (#15694, @konstfish)
• Allow explicitly setting `containers.securityContext.privileged` to `false` (#15643, @KapilSareen)
• Fixes a problem in configuration reconciliation where labeler creates a different order of the route names listed via the annotation `serving.knative.dev/routes` compared to the configuration reconciler. (#15601, @skonto)
• Kubernetes Deployments created for a Knative Revision are not configured with revisionHistoryLimit=0 which saves a lot of space in your Kubernetes database if you have a lot of Knative Services that are not updated while you regularly update Knative itself and pick up new queue-proxy images. (#15698, @SaschaSchwarze0)

📦 Dependencies

• <details>
• <summary>Added</summary>
• cloud.google.com/go/longrunning: v0.5.6
• cloud.google.com/go/translate: v1.10.3
• github.com/Azure/azure-sdk-for-go/sdk/azcore: [v1.14.0](https://github.com/Azure/azure-sdk-for-go/tree/sdk/azcore/v1.14.0)
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: [v1.7.0](https://github.com/Azure/azure-sdk-for-go/tree/sdk/azidentity/v1.7.0)
• github.com/Azure/azure-sdk-for-go/sdk/internal: [v1.10.0](https://github.com/Azure/azure-sdk-for-go/tree/sdk/internal/v1.10.0)
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dns/armdns: [v1.2.0](https://github.com/Azure/azure-sdk-for-go/tree/sdk/resourcemanager/dns/armdns/v1.2.0)
• + 139 more

📋 What's Changed

• Fix deepcopy gen by @skonto in https://github.com/knative/serving/pull/15493
• Fix GO-2024-2659 by @knative-prow-robot in https://github.com/knative/serving/pull/15548
• Fix configuration metadata inconsistency by @knative-prow-robot in https://github.com/knative/serving/pull/15651
• Pin version of the chainguard kind setup action by @knative-prow-robot in https://github.com/knative/serving/pull/15714
• Ensure ContainerHealthy condition is set back to True by @knative-prow-robot in https://github.com/knative/serving/pull/15713
• Fix configuration timeout defaulting by @knative-prow-robot in https://github.com/knative/serving/pull/15722
• Upgrade the hack tool to fix the patch release issue by @houshengbo in https://github.com/knative/serving/pull/15724
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.15.2...knative-v1.15.3

📋 What's Changed

• [release-1.16] Fix configuration metadata inconsistency by @knative-prow-robot in https://github.com/knative/serving/pull/15650
• [release-1.16] Pin version of the chainguard kind setup action by @knative-prow-robot in https://github.com/knative/serving/pull/15693
• [release-1.16] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/15692
• [release-1.16] Upgrade to latest dependencies by @knative-automation in https://github.com/knative/serving/pull/15704
• [release-1.16] Ensure ContainerHealthy condition is set back to True by @knative-prow-robot in https://github.com/knative/serving/pull/15712
• Full Changelog: https://github.com/knative/serving/compare/knative-v1.16.0...knative-v1.16.1