diff --git a/third_party/kourier-latest/kourier.yaml b/third_party/kourier-latest/kourier.yaml
index f48512f3fdd2..334122185fa7 100644
--- a/third_party/kourier-latest/kourier.yaml
+++ b/third_party/kourier-latest/kourier.yaml
@@ -20,7 +20,7 @@ metadata:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/name: knative-serving
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
 
 ---
 # Copyright 2020 The Knative Authors
@@ -45,7 +45,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 data:
   envoy-bootstrap.yaml: |
@@ -174,7 +174,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 data:
   _example: |
@@ -325,7 +325,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -335,7 +335,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 rules:
   - apiGroups: [""]
@@ -367,7 +367,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -401,7 +401,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 spec:
   strategy:
@@ -423,7 +423,7 @@ spec:
         app: net-kourier-controller
     spec:
       containers:
-        - image: gcr.io/knative-nightly/knative.dev/net-kourier/cmd/kourier@sha256:bc811f766091141ab13b2570e435966a2e928dd365852a7836ae5386b0b8ee8e
+        - image: gcr.io/knative-nightly/knative.dev/net-kourier/cmd/kourier@sha256:a2e8f568a4bf68ef6391bc3afea956d11a8698f6a22c4be50844b1da4f8bcc74
           name: controller
           env:
             # CERTS_SECRET_NAMESPACE and CERTS_SECRET_NAME can also be configured from a ConfigMap.
@@ -493,7 +493,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 spec:
   ports:
@@ -532,7 +532,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 spec:
   strategy:
@@ -653,7 +653,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 spec:
   ports:
@@ -677,7 +677,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 spec:
   ports:
@@ -701,7 +701,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 spec:
   minReplicas: 1
@@ -727,7 +727,7 @@ metadata:
   labels:
     networking.knative.dev/ingress-provider: kourier
     app.kubernetes.io/component: net-kourier
-    app.kubernetes.io/version: "20260421-ddc3397ff"
+    app.kubernetes.io/version: "20260428-918ac8489"
     app.kubernetes.io/name: knative-serving
 spec:
   minAvailable: 80%