diff --git a/go.mod b/go.mod
index ad42195fe4..7a4612a5b2 100644
--- a/go.mod
+++ b/go.mod
@@ -23,7 +23,7 @@ require (
 	knative.dev/caching v0.0.0-20260120130310-f1fc03b7f5ee
 	knative.dev/eventing v0.48.2
 	knative.dev/hack v0.0.0-20260420222011-c985ed3cefe8
-	knative.dev/pkg v0.0.0-20260319144603-18c5d580ae64
+	knative.dev/pkg v0.0.0-20260531000707-c085a76e54cc
 	knative.dev/reconciler-test v0.0.0-20260424102515-75d476349613
 	knative.dev/serving v0.48.2
 	sigs.k8s.io/yaml v1.6.0
diff --git a/go.sum b/go.sum
index 98e0d4baeb..d25061dc88 100644
--- a/go.sum
+++ b/go.sum
@@ -1720,8 +1720,8 @@ knative.dev/hack v0.0.0-20260420222011-c985ed3cefe8 h1:IrUBuFRxzqUm+f//hY6XGPzXo
 knative.dev/hack v0.0.0-20260420222011-c985ed3cefe8/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
 knative.dev/networking v0.0.0-20260120131110-a7cdca238a0d h1:QQ5QeH5MZlYdu6gRGGjmEBQ/CVoatiXKnVIrUoKlj4U=
 knative.dev/networking v0.0.0-20260120131110-a7cdca238a0d/go.mod h1:mZD2edO8op3zI6yLOn1yoz8xqbyZfrrDOJCbYElMEKs=
-knative.dev/pkg v0.0.0-20260319144603-18c5d580ae64 h1:TiwrcgUKNePfdAbaJT9W4P57lsKjiZnjJ0wVC6XrL0U=
-knative.dev/pkg v0.0.0-20260319144603-18c5d580ae64/go.mod h1:Tz3GoxcNC5vH3Zo//cW3mnHL474u+Y1wbsUIZ11p8No=
+knative.dev/pkg v0.0.0-20260531000707-c085a76e54cc h1:cwemQFdQtoXRgsb7mfuV0IB+CYVY2mXQhizqKXCbrr0=
+knative.dev/pkg v0.0.0-20260531000707-c085a76e54cc/go.mod h1:MO0fpS2gSc+yVOKvJiaLYoXVC/ZrK0BT2qopLjXK5rE=
 knative.dev/reconciler-test v0.0.0-20260424102515-75d476349613 h1:LB7Jowx8eVwJKlMmHn0FkIk8NyeFiC0b1q/yTAjThrE=
 knative.dev/reconciler-test v0.0.0-20260424102515-75d476349613/go.mod h1:FUaadFiniAaqqBp/D2g2cO/FUABVR8W4yZd2azDzp7I=
 knative.dev/serving v0.48.2 h1:CdPvTytMt1wGoKI9hsM5QU1bolUIwkhBGbGojx2l4f4=
diff --git a/vendor/knative.dev/pkg/tracker/enqueue.go b/vendor/knative.dev/pkg/tracker/enqueue.go
index 88d0254b33..f04928d3c3 100644
--- a/vendor/knative.dev/pkg/tracker/enqueue.go
+++ b/vendor/knative.dev/pkg/tracker/enqueue.go
@@ -277,8 +277,8 @@ func (i *impl) GetObservers(obj interface{}) []types.NamespacedName {
 				keys = append(keys, key)
 			}
 		}
-		if len(s) == 0 {
-			delete(i.exact, ref)
+		if len(ms) == 0 {
+			delete(i.inexact, ref)
 		}
 	}
 
@@ -309,7 +309,7 @@ func (i *impl) OnDeletedObserver(obj interface{}) {
 	for ref, matchers := range i.inexact {
 		delete(matchers, key)
 		if len(matchers) == 0 {
-			delete(i.exact, ref)
+			delete(i.inexact, ref)
 		}
 	}
 }
diff --git a/vendor/knative.dev/pkg/webhook/webhook.go b/vendor/knative.dev/pkg/webhook/webhook.go
index e8895db75e..b8ff962e56 100644
--- a/vendor/knative.dev/pkg/webhook/webhook.go
+++ b/vendor/knative.dev/pkg/webhook/webhook.go
@@ -394,5 +394,7 @@ func (wh *Webhook) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	wh.mux.ServeHTTP(w, r)
+	const MaxBodySize = 3 * 1024 * 1024 // 3 MiB
+	h := http.MaxBytesHandler(&wh.mux, MaxBodySize)
+	h.ServeHTTP(w, r)
 }
diff --git a/vendor/modules.txt b/vendor/modules.txt
index a35950ffd8..be3d4c0c79 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -1616,7 +1616,7 @@ knative.dev/networking/pkg/client/clientset/versioned/typed/networking/v1alpha1
 knative.dev/networking/pkg/config
 knative.dev/networking/pkg/http/header
 knative.dev/networking/pkg/ingress
-# knative.dev/pkg v0.0.0-20260319144603-18c5d580ae64
+# knative.dev/pkg v0.0.0-20260531000707-c085a76e54cc
 ## explicit; go 1.24.0
 knative.dev/pkg/apiextensions/storageversion
 knative.dev/pkg/apiextensions/storageversion/cmd/migrate