Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ampproject/amp-github-apps).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [@octokit/webhooks-types](https://redirect.github.com/octokit/webhooks) |  |
| npm | `@types/express-rate-limit` |  |
| npm | `@types/webpack-dev-server` |  |
| npm | [highlight](https://redirect.github.com/andris9/highlight) |  |
| npm | [node-sass](https://redirect.github.com/sass/node-sass) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] 📦 Update bundle-size packages (`@types/express`, `@types/node`, `express`, `knex`, `nodemon`, `pg`, `supertest`, `tsx`, `typescript`)
- [ ] 📦 Update error-monitoring packages (`@types/express`, `@types/node`, `express`, `tsx`, `typescript`)
- [ ] 📦 Update onduty packages (`@types/express`, `@types/node`, `nodemon`, `ts-jest`, `typescript`)
- [ ] 📦 Update core packages (`@babel/eslint-parser`, `eslint-plugin-prettier`, `prettier`, `typescript`, `yaml`)
- [ ] 📦 Update owners packages (`@google-cloud/storage`, `express`, `supertest`)
- [ ] 📦 Update webhook-pubsub-publisher packages (`@types/node`, `nodemon`, `tsx`, `typescript`)
- [ ] 📦 Update actions/checkout action to v7
- [ ] 📦 Update bundle-size-chart packages (major) (`@google-cloud/storage`, `@octokit/plugin-paginate-rest`, `@octokit/plugin-rest-endpoint-methods`, `@types/node`, `typescript`)
- [ ] 📦 Update github/codeql-action action to v4
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Other Branches

The following updates are pending. To force the creation of a PR, click on a checkbox below.

- [ ] 📦 Update bundle-size-chart packages (`@google-cloud/storage`, `@octokit/core`, `@octokit/plugin-paginate-rest`, `@octokit/plugin-rest-endpoint-methods`, `@types/express`, `@types/node`, `dotenv`, `express`, `nodemon`, `tsx`, `typescript`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [📦 Update dependency typeorm to v0.3.31 [SECURITY]](../pull/3101)
- [ ] [📦 Update dependency webpack-dev-server to v5.2.6 [SECURITY]](../pull/3102)
- [ ] [📦 Update dependency @babel/core to v7.29.6 [SECURITY]](../pull/3103)
- [ ] [📦 Update dependency ajv to v8.18.0 [SECURITY]](../pull/3104)
- [ ] [📦 Update dependency lodash to v4.18.1 [SECURITY]](../pull/3105)
- [ ] [📦 Update dependency mysql2 to v3.23.1 [SECURITY]](../pull/3110)
- [ ] [📦 Update dependency webpack to v5.104.1 [SECURITY]](../pull/3106)
- [ ] [📦 Update dependency body-parser to v2 [SECURITY]](../pull/3107)
- [ ] [📦 Update dependency minimatch to v10.2.3 [SECURITY]](../pull/3108)
- [ ] [📦 Update dependency vitest to v4 [SECURITY]](../pull/3109)
- [ ] [📦 Update release-calendar packages](../pull/3088) (`@fullcalendar/core`, `@fullcalendar/daygrid`, `@fullcalendar/interaction`, `@fullcalendar/react`, `@fullcalendar/timegrid`, `@types/express-rate-limit`, `@types/jest`, `@types/node`, `@types/node-fetch`, `@types/react`, `@types/react-dom`, `css-loader`, `dotenv`, `dotenv-webpack`, `express`, `express-rate-limit`, `html-webpack-plugin`, `moment-timezone`, `sass`, `sass-loader`, `ts-jest`, `ts-loader`, `typescript`)
- [ ] [📦 Update invite packages](../pull/3090) (`@google-cloud/functions-framework`, `@octokit/rest`, `@types/node`, `dotenv`, `knex`, `nodemon`, `pg`, `ts-jest`, `typescript`)
- [ ] [📦 Update bundle-size packages (major)](../pull/3095) (`@octokit/core`, `@octokit/plugin-rest-endpoint-methods`, `@octokit/plugin-retry`, `@octokit/request-error`, `@octokit/types`, `@octokit/webhooks`, `@probot/octokit-plugin-config`, `@types/node`, `@types/supertest`, `probot`, `smee-client`, `sqlite3`, `typescript`, `vitest-mock-extended`)
- [ ] [📦 Update core packages (major)](../pull/2394) (`@babel/eslint-parser`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `eslint`, `eslint-config-prettier`, `eslint-plugin-notice`, `react`, `typescript`)
- [ ] [📦 Update error-monitoring packages (major)](../pull/3097) (`@octokit/core`, `@octokit/graphql`, `@octokit/plugin-rest-endpoint-methods`, `@types/node`, `dotenv`, `express`, `google-auth-library`, `nock`, `typescript`)
- [ ] [📦 Update invite packages (major)](../pull/2103) (`@google-cloud/functions-framework`, `@octokit/rest`, `@types/jest`, `@types/node`, `dotenv`, `jest`, `probot`, `sqlite3`, `typescript`)
- [ ] [📦 Update onduty packages (major)](../pull/2690) (`@google-cloud/functions-framework`, `@octokit/rest`, `@types/express`, `@types/jest`, `@types/node`, `dotenv`, `jest`, `typescript`)
- [ ] [📦 Update owners packages (major)](../pull/2697) (`@google-cloud/storage`, `@octokit/rest`, `jest`, `probot`, `sinon`, `smee-client`)
- [ ] [📦 Update release-calendar packages (major)](../pull/3081) (`@fullcalendar/core`, `@fullcalendar/react`, `@types/jest`, `@types/node`, `@types/react`, `@types/react-dom`, `dotenv`, `dotenv-webpack`, `express`, `express-rate-limit`, `jest`, `react`, `react-dom`, `sass-loader`, `typescript`, `webpack-cli`)
- [ ] [📦 Update webhook-pubsub-publisher packages (major)](../pull/3098) (`@google-cloud/pubsub`, `@types/node`, `probot`, `smee-client`, `typescript`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

github-actions (2)

.github/workflows/codeql.yml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `github/codeql-action v3` → [Updates: `v4`]
- `github/codeql-action v3` → [Updates: `v4`]
- `github/codeql-action v3` → [Updates: `v4`]

.github/workflows/pr-check.yaml (1)

- `actions/checkout v4` → [Updates: `v7`]

npm (9)

bundle-size-chart/package.json (12)

- `@google-cloud/storage 7.13.0` → [Updates: `7.22.0`, `8.1.0`]
- `@octokit/core 7.0.3` → [Updates: `7.0.8`]
- `@octokit/plugin-paginate-rest 13.1.1` → [Updates: `13.2.1`, `15.0.0`]
- `@octokit/plugin-rest-endpoint-methods 16.0.0` → [Updates: `16.1.1`, `18.0.0`]
- `@types/express 5.0.0` → [Updates: `5.0.6`]
- `@types/node 22.8.2` → [Updates: `22.20.2`, `24.13.4`]
- `csv-writer 1.6.0`
- `dotenv 17.2.1` → [Updates: `17.4.2`]
- `express 5.2.0` → [Updates: `5.2.1`]
- `tsx 4.19.1` → [Updates: `4.23.13`]
- `typescript 5.6.3` → [Updates: `5.9.3`, `7.0.2`]
- `nodemon 3.1.7` → [Updates: `3.1.14`]

bundle-size/package.json (27)

- `@octokit/core 6.1.6` → [Updates: `7.0.8`]
- `@octokit/plugin-rest-endpoint-methods 13.5.0` → [Updates: `18.0.0`]
- `@octokit/plugin-retry 7.2.1` → [Updates: `8.1.1`]
- `@octokit/request-error 6.1.8` → [Updates: `7.1.2`]
- `@octokit/types 13.10.0` → [Updates: `18.0.0`]
- `@probot/octokit-plugin-config 3.0.2` → [Updates: `4.1.0`]
- `knex 3.1.0` → [Updates: `3.3.0`]
- `minimatch 10.0.3` → [Updates: `10.2.3`]
- `node-cache 5.1.2`
- `pg 8.16.3` → [Updates: `8.23.0`]
- `probot 13.4.7` → [Updates: `14.3.2`]
- `sleep-promise 9.1.0`
- `tsx 4.20.5` → [Updates: `4.23.13`]
- `typescript 5.9.2` → [Updates: `5.9.3`, `7.0.2`]
- `@octokit/webhooks 13.9.1` → [Updates: `14.2.0`]
- `@types/express 5.0.3` → [Updates: `5.0.6`]
- `@types/fancy-log 2.0.2`
- `@types/node 22.18.0` → [Updates: `22.20.2`, `24.13.4`]
- `@types/supertest 6.0.3` → [Updates: `7.2.1`]
- `express 5.2.0` → [Updates: `5.2.1`]
- `fancy-log 2.0.0`
- `vitest-mock-extended 2.0.2` → [Updates: `5.1.1`]
- `nodemon 3.1.10` → [Updates: `3.1.14`]
- `smee-client 2.0.4` → [Updates: `5.0.0`]
- `sqlite3 5.1.7` → [Updates: `6.0.1`]
- `supertest 7.1.4` → [Updates: `7.2.2`]
- `vitest 2.1.9` → [Updates: `4.1.11`]

error-monitoring/package.json (19)

- `@octokit/core 6.1.6` → [Updates: `7.0.8`]
- `@octokit/graphql 8.2.2` → [Updates: `9.0.5`]
- `@octokit/plugin-rest-endpoint-methods 13.5.0` → [Updates: `18.0.0`]
- `@types/body-parser 1.19.6`
- `@types/express 5.0.3` → [Updates: `5.0.6`]
- `@types/mustache 4.2.6`
- `body-parser 1.20.3` → [Updates: `2.3.0`]
- `dotenv 16.6.1` → [Updates: `17.4.2`]
- `express 4.21.2` → [Updates: `4.22.3`, `5.2.1`]
- `google-auth-library 9.15.1` → [Updates: `11.0.2`]
- `http-status-codes 2.3.0`
- `mustache 4.2.0`
- `node-cache 5.1.2`
- `node-fetch 3.3.2`
- `tsx 4.20.5` → [Updates: `4.23.13`]
- `typescript 5.9.2` → [Updates: `5.9.3`, `7.0.2`]
- `@types/node 22.18.0` → [Updates: `22.20.2`, `24.13.4`]
- `vitest 2.1.9` → [Updates: `4.1.11`]
- `nock 13.5.6` → [Updates: `14.0.17`]

invite/package.json (15)

- `@octokit/rest 20.1.1` → [Updates: `20.1.2`, `22.0.1`]
- `dotenv 16.4.7` → [Updates: `16.6.1`, `17.4.2`]
- `knex 3.1.0` → [Updates: `3.3.0`]
- `pg 8.13.1` → [Updates: `8.23.0`]
- `probot 12.4.0` → [Updates: `14.3.2`]
- `@google-cloud/functions-framework 3.4.2` → [Updates: `3.5.1`, `5.0.5`]
- `@octokit/webhooks-types 7.6.1`
- `@types/jest 29.5.14` → [Updates: `30.0.0`]
- `@types/node 20.17.9` → [Updates: `20.19.43`, `24.13.4`]
- `jest 29.7.0` → [Updates: `30.5.1`]
- `jest-silent-reporter 0.6.0`
- `nodemon 3.1.7` → [Updates: `3.1.14`]
- `sqlite3 5.1.7` → [Updates: `6.0.1`]
- `ts-jest 29.2.5` → [Updates: `29.4.12`]
- `typescript 5.7.2` → [Updates: `5.9.3`, `7.0.2`]

onduty/package.json (14)

- `@octokit/rest 20.1.2` → [Updates: `22.0.1`]
- `@probot/serverless-gcf 0.2.0`
- `dotenv 16.6.1` → [Updates: `17.4.2`]
- `http-status-codes 2.3.0`
- `sleep-promise 9.1.0`
- `@google-cloud/functions-framework 3.5.1` → [Updates: `5.0.5`]
- `@types/express 4.17.23` → [Updates: `4.17.25`, `5.0.6`]
- `@types/jest 29.5.14` → [Updates: `30.0.0`]
- `@types/node 20.19.11` → [Updates: `20.19.43`, `24.13.4`]
- `jest 29.7.0` → [Updates: `30.5.1`]
- `jest-silent-reporter 0.6.0`
- `nodemon 3.1.10` → [Updates: `3.1.14`]
- `ts-jest 29.4.1` → [Updates: `29.4.12`]
- `typescript 5.9.2` → [Updates: `5.9.3`, `7.0.2`]

owners/package.json (15)

- `@google-cloud/storage 7.17.0` → [Updates: `7.22.0`, `8.1.0`]
- `@octokit/rest 20.1.2` → [Updates: `22.0.1`]
- `ajv 8.17.1` → [Updates: `8.18.0`]
- `express 5.2.0` → [Updates: `5.2.1`]
- `highlight 0.2.4`
- `json5 2.2.3`
- `lodash 4.17.21` → [Updates: `4.18.1`]
- `minimatch 9.0.5` → [Updates: `10.2.3`]
- `probot 13.4.7` → [Updates: `14.3.2`]
- `sleep-promise 9.1.0`
- `jest 29.7.0` → [Updates: `30.5.1`]
- `jest-silent-reporter 0.6.0`
- `sinon 18.0.1` → [Updates: `22.1.0`]
- `smee-client 2.0.4` → [Updates: `5.0.0`]
- `supertest 7.1.4` → [Updates: `7.2.2`]

package.json (17)

- `@babel/core 7.28.3` → [Updates: `7.29.6`]
- `@babel/eslint-parser 7.28.0` → [Updates: `7.29.7`, `8.0.5`]
- `@typescript-eslint/eslint-plugin 7.18.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 7.18.0` → [Updates: `8.70.0`]
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-config-google 0.14.0`
- `eslint-config-prettier 9.1.2` → [Updates: `10.1.8`]
- `eslint-plugin-notice 0.9.10` → [Updates: `1.0.0`]
- `eslint-plugin-prettier 5.5.4` → [Updates: `5.5.6`]
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-sort-imports-es6-autofix 0.6.0`
- `eslint-plugin-sort-requires 2.1.0`
- `kleur 4.1.5`
- `prettier 3.6.2` → [Updates: `3.9.6`]
- `react 18.3.1` → [Updates: `19.3.0`]
- `typescript 5.9.2` → [Updates: `5.9.3`, `7.0.2`]
- `yaml 2.8.1` → [Updates: `2.9.1`]

release-calendar/package.json (43)

- `@fullcalendar/core 6.1.15` → [Updates: `6.1.21`, `7.1.0`]
- `@fullcalendar/daygrid 6.1.15` → [Updates: `6.1.21`]
- `@fullcalendar/interaction 6.1.15` → [Updates: `6.1.21`]
- `@fullcalendar/react 6.1.15` → [Updates: `6.1.21`, `7.1.0`]
- `@fullcalendar/timegrid 6.1.15` → [Updates: `6.1.21`]
- `@popperjs/core 2.11.8`
- `@types/express-rate-limit 6.0.0` → [Updates: `6.0.2`]
- `@types/jest 29.5.13` → [Updates: `29.5.14`, `30.0.0`]
- `@types/node 22.8.2` → [Updates: `22.20.2`, `24.13.4`]
- `@types/node-fetch 2.6.11` → [Updates: `2.6.13`]
- `@types/react 18.3.11` → [Updates: `18.3.31`, `19.3.0`]
- `@types/react-dom 18.3.1` → [Updates: `18.3.7`, `19.3.0`]
- `@types/webpack-dev-server 4.7.2`
- `body-parser 1.20.3` → [Updates: `2.3.0`]
- `css-loader 7.1.2` → [Updates: `7.1.5`]
- `dotenv 16.4.5` → [Updates: `16.6.1`, `17.4.2`]
- `dotenv-webpack 8.1.0` → [Updates: `8.1.1`, `9.0.0`]
- `empty-module 0.0.2`
- `express 4.21.1` → [Updates: `4.22.3`, `5.2.1`]
- `express-rate-limit 7.4.1` → [Updates: `7.5.1`, `8.7.0`]
- `html-webpack-plugin 5.6.2` → [Updates: `5.6.8`]
- `moment 2.30.1`
- `moment-timezone 0.5.46` → [Updates: `0.6.3`]
- `moment-timezone-data-webpack-plugin 1.5.1`
- `mysql2 3.11.3` → [Updates: `3.23.1`]
- `node-sass 9.0.0`
- `react 18.3.1` → [Updates: `19.3.0`]
- `react-dom 18.3.1` → [Updates: `19.3.0`]
- `react-popper 2.3.0`
- `sass 1.80.1` → [Updates: `1.104.1`]
- `sass-loader 16.0.2` → [Updates: `16.0.8`, `17.0.1`]
- `source-map-loader 5.0.0`
- `style-loader 4.0.0`
- `ts-loader 9.5.1` → [Updates: `9.6.2`]
- `typeorm 0.3.26` → [Updates: `0.3.31`]
- `typescript 5.6.3` → [Updates: `5.9.3`, `7.0.2`]
- `webpack 5.95.0` → [Updates: `5.104.1`]
- `webpack-cli 5.1.4` → [Updates: `7.2.3`]
- `webpack-dev-server 5.2.1` → [Updates: `5.2.6`]
- `webpack-node-externals 3.0.0`
- `jest 29.7.0` → [Updates: `30.5.1`]
- `jest-silent-reporter 0.6.0`
- `ts-jest 29.2.5` → [Updates: `29.4.12`]

webhook-pubsub-publisher/package.json (9)

- `@google-cloud/pubsub 4.11.0` → [Updates: `6.0.1`]
- `probot 13.4.7` → [Updates: `14.3.2`]
- `tsx 4.20.5` → [Updates: `4.23.13`]
- `typescript 5.9.2` → [Updates: `5.9.3`, `7.0.2`]
- `@octokit/webhooks-types 7.6.1`
- `@types/node 22.18.0` → [Updates: `22.20.2`, `24.13.4`]
- `nodemon 3.1.10` → [Updates: `3.1.14`]
- `smee-client 2.0.4` → [Updates: `5.0.0`]
- `vitest 2.1.9` → [Updates: `4.1.11`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository