diff --git a/third_party/contour-latest/net-contour.yaml b/third_party/contour-latest/net-contour.yaml
index 58eb90feec98..3beddc547f3c 100644
--- a/third_party/contour-latest/net-contour.yaml
+++ b/third_party/contour-latest/net-contour.yaml
@@ -8,7 +8,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250120-4d3f78af"
+    app.kubernetes.io/version: "20250121-0a8a9bc1"
     serving.knative.dev/controller: "true"
 rules:
   - apiGroups: ["projectcontour.io"]
@@ -38,7 +38,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250120-4d3f78af"
+    app.kubernetes.io/version: "20250121-0a8a9bc1"
 data:
   _example: |
     ################################
@@ -111,7 +111,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250120-4d3f78af"
+    app.kubernetes.io/version: "20250121-0a8a9bc1"
 spec:
   replicas: 1
   selector:
@@ -123,14 +123,14 @@ spec:
         app: net-contour-controller
         app.kubernetes.io/component: net-contour
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "20250120-4d3f78af"
+        app.kubernetes.io/version: "20250121-0a8a9bc1"
     spec:
       serviceAccountName: controller
       containers:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:c21707b7f3753383990c72cda78cc2f90cdec48af894582b2d554ae1dd878993
+          image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:2b5862c842d5a1bf890df6bf85e8be9545f4624bb6e1ebdb5732d358fd2faf86
           resources:
             requests:
               cpu: 40m
@@ -174,7 +174,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20250120-4d3f78af"
+    app.kubernetes.io/version: "20250121-0a8a9bc1"
 spec:
   delegations:
     - secretName: routing-serving-certs