diff --git a/third_party/contour-latest/net-contour.yaml b/third_party/contour-latest/net-contour.yaml
index b4b38ba7f172..c75d54570d37 100644
--- a/third_party/contour-latest/net-contour.yaml
+++ b/third_party/contour-latest/net-contour.yaml
@@ -8,7 +8,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260318-6353b2c4"
+    app.kubernetes.io/version: "20260320-b227314e"
     serving.knative.dev/controller: "true"
 rules:
   - apiGroups: ["projectcontour.io"]
@@ -38,7 +38,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260318-6353b2c4"
+    app.kubernetes.io/version: "20260320-b227314e"
 data:
   _example: |
     ################################
@@ -111,7 +111,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260318-6353b2c4"
+    app.kubernetes.io/version: "20260320-b227314e"
 spec:
   replicas: 1
   selector:
@@ -123,14 +123,14 @@ spec:
         app: net-contour-controller
         app.kubernetes.io/component: net-contour
         app.kubernetes.io/name: knative-serving
-        app.kubernetes.io/version: "20260318-6353b2c4"
+        app.kubernetes.io/version: "20260320-b227314e"
     spec:
       serviceAccountName: controller
       containers:
         - name: controller
           # This is the Go import path for the binary that is containerized
           # and substituted here.
-          image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:ba329b1dcbc2fcf616d02dafc67e5bb80ea0a2dab4cab2e863fcc4085d570f5c
+          image: gcr.io/knative-nightly/knative.dev/net-contour/cmd/controller@sha256:a8d3cd9eac9c0f88ee80442f10bdda9613dee1cac9d3db8e06c6da1b26e6359f
           resources:
             requests:
               cpu: 40m
@@ -174,7 +174,7 @@ metadata:
     networking.knative.dev/ingress-provider: contour
     app.kubernetes.io/component: net-contour
     app.kubernetes.io/name: knative-serving
-    app.kubernetes.io/version: "20260318-6353b2c4"
+    app.kubernetes.io/version: "20260320-b227314e"
 spec:
   delegations:
     - secretName: routing-serving-certs