upgrade to latest dependencies (knative-extensions#704)

bumping knative.dev/pkg 918fd93...0243d64:
  > 0243d64 Function AllowRestrictedPodSecurityStandard for modifying test pods (# 2625)
  > 389f811 upgrade to latest dependencies (# 2629)
bumping knative.dev/hack 8f3c705...b035462:
  > b035462 Calculate Image references properly (# 251)
  > 1ba176e Trap calls are now executed in LIFO order (# 249)
bumping knative.dev/hack/schema 8f3c705...b035462:
  > b035462 Calculate Image references properly (# 251)
  > 1ba176e Trap calls are now executed in LIFO order (# 249)

Signed-off-by: Knative Automation <automation@knative.team>

Signed-off-by: Knative Automation <automation@knative.team>

Author: knative-automation

go.mod

@@ -10,9 +10,9 @@ require (
 	k8s.io/client-go v0.25.2
 	k8s.io/code-generator v0.25.2
 	k8s.io/kube-openapi v0.0.0-20220803162953-67bda5d908f1
-	knative.dev/hack v0.0.0-20221104013908-8f3c7050408b
-	knative.dev/hack/schema v0.0.0-20221104013908-8f3c7050408b
-	knative.dev/pkg v0.0.0-20221104013805-918fd9396a31
+	knative.dev/hack v0.0.0-20221114224536-b0354624aa29
+	knative.dev/hack/schema v0.0.0-20221114224536-b0354624aa29
+	knative.dev/pkg v0.0.0-20221107171117-0243d641354d
 )
 
 require (

go.sum

@@ -815,12 +815,12 @@ k8s.io/kube-openapi v0.0.0-20220803162953-67bda5d908f1 h1:MQ8BAZPZlWk3S9K4a9NCkI
 k8s.io/kube-openapi v0.0.0-20220803162953-67bda5d908f1/go.mod h1:C/N6wCaBHeBHkHUesQOQy2/MZqGgMAFPqGsGQLdbZBU=
 k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed h1:jAne/RjBTyawwAy0utX5eqigAwz/lQhTmy+Hr/Cpue4=
 k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
-knative.dev/hack v0.0.0-20221104013908-8f3c7050408b h1:EqqlOqjCy/hVexdmPpUjcplO2eZc12+jTdTpodfLaI4=
-knative.dev/hack v0.0.0-20221104013908-8f3c7050408b/go.mod h1:yk2OjGDsbEnQjfxdm0/HJKS2WqTLEFg/N6nUs6Rqx3Q=
-knative.dev/hack/schema v0.0.0-20221104013908-8f3c7050408b h1:X3Pk0tAcvPFvOPIW/A2U81DVuUhYMJEtcF9TJtOK74s=
-knative.dev/hack/schema v0.0.0-20221104013908-8f3c7050408b/go.mod h1:GeIb+PLd5mllawcpHEGF5J5fYTQrvgEO5liao8lUKUs=
-knative.dev/pkg v0.0.0-20221104013805-918fd9396a31 h1:5+cuI5IFhitHtuiUdlgK7eiBcyXTR2G5wBjMdacnv1M=
-knative.dev/pkg v0.0.0-20221104013805-918fd9396a31/go.mod h1:j5kO7gKmWGj2DJpefCEiPbItToiYf+2bCtI+A6REkQo=
+knative.dev/hack v0.0.0-20221114224536-b0354624aa29 h1:FUHfJXlY5e9wFuSf5JlMONy/fQbofS7hEBfOMXLHXso=
+knative.dev/hack v0.0.0-20221114224536-b0354624aa29/go.mod h1:yk2OjGDsbEnQjfxdm0/HJKS2WqTLEFg/N6nUs6Rqx3Q=
+knative.dev/hack/schema v0.0.0-20221114224536-b0354624aa29 h1:A4cbz8rvv+a6zZ6sfZAk4A7bIbWysNM/w/3vuxMfq2c=
+knative.dev/hack/schema v0.0.0-20221114224536-b0354624aa29/go.mod h1:GeIb+PLd5mllawcpHEGF5J5fYTQrvgEO5liao8lUKUs=
+knative.dev/pkg v0.0.0-20221107171117-0243d641354d h1:ACj/4O74QvoB8zE/mlg1ji680gFW7RaUIjAL1x5IN58=
+knative.dev/pkg v0.0.0-20221107171117-0243d641354d/go.mod h1:JwNkOLWAeuMYlH9WQA83k+afGCanWcvWvdXZsI3xKo4=
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=

vendor/knative.dev/hack/library.sh

@@ -647,7 +647,7 @@ function add_trap {
     local current_trap
     current_trap="$(trap -p "$trap_signal" | cut -d\' -f2)"
     local new_cmd="($cmd)"
-    [[ -n "${current_trap}" ]] && new_cmd="${current_trap};${new_cmd}"
+    [[ -n "${current_trap}" ]] && new_cmd="${new_cmd};${current_trap}"
     trap -- "${new_cmd}" "$trap_signal"
   done
 }

vendor/knative.dev/hack/release.sh

@@ -98,7 +98,7 @@ RELEASE_NOTES=""
 RELEASE_BRANCH=""
 RELEASE_GCS_BUCKET="knative-nightly/${REPO_NAME}"
 RELEASE_DIR=""
-KO_FLAGS="-P --platform=all --image-refs=imagerefs.txt"
+KO_FLAGS="-P --platform=all"
 VALIDATION_TESTS="./test/presubmit-tests.sh"
 ARTIFACTS_TO_PUBLISH=""
 FROM_NIGHTLY_RELEASE=""
@@ -312,8 +312,22 @@ function build_from_source() {
   sign_release || abort "error signing the release"
 }
 
+function get_images_in_yamls() {
+  rm -rf imagerefs.txt
+  echo "Assembling a list of image refences to sign"
+  for file in $@; do
+    [[ "${file##*.}" != "yaml" ]] && continue
+    echo "Inspecting ${file}"
+    for image in $(grep -oh "\S*${KO_DOCKER_REPO}\S*" "${file}"); do
+      echo $image >> imagerefs.txt
+    done
+  done
+  sort -uo imagerefs.txt imagerefs.txt # Remove duplicate entries
+}
+
 # Build a release from source.
 function sign_release() {
+  get_images_in_yamls "${ARTIFACTS_TO_PUBLISH}"
   if (( ! IS_PROW )); then # This function can't be run by devs on their laptops
     return 0
   fi

vendor/modules.txt

@@ -814,16 +814,16 @@ k8s.io/utils/net
 k8s.io/utils/pointer
 k8s.io/utils/strings/slices
 k8s.io/utils/trace
-# knative.dev/hack v0.0.0-20221104013908-8f3c7050408b
+# knative.dev/hack v0.0.0-20221114224536-b0354624aa29
 ## explicit; go 1.18
 knative.dev/hack
-# knative.dev/hack/schema v0.0.0-20221104013908-8f3c7050408b
+# knative.dev/hack/schema v0.0.0-20221114224536-b0354624aa29
 ## explicit; go 1.18
 knative.dev/hack/schema/commands
 knative.dev/hack/schema/docs
 knative.dev/hack/schema/registry
 knative.dev/hack/schema/schema
-# knative.dev/pkg v0.0.0-20221104013805-918fd9396a31
+# knative.dev/pkg v0.0.0-20221107171117-0243d641354d
 ## explicit; go 1.18
 knative.dev/pkg/apis
 knative.dev/pkg/apis/duck