Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ampproject/amp.dev).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [url-search-params](https://redirect.github.com/WebReflection/url-search-params) |  |

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update packages](../pull/6836) (`@babel/cli`, `@babel/core`, `@babel/eslint-parser`, `@babel/node`, `@babel/plugin-transform-modules-commonjs`, `@babel/plugin-transform-runtime`, `@babel/preset-env`, `@babel/runtime`, `@rollup/plugin-node-resolve`, `babel-loader`, `cheerio`, `codemirror`, `cookie`, `cookie-parser`, `cors`, `crypto-browserify`, `eslint`, `eslint-config-prettier`, `eslint-plugin-prettier`, `express`, `gcp-metadata`, `golang`, `google-spreadsheet`, `gulp-once`, `handlebars`, `highlight.js`, `html-webpack-plugin`, `ioredis`, `jasmine`, `jest-puppeteer`, `joi`, `js-base64`, `js-beautify`, `js-yaml`, `mini-css-extract-plugin`, `module-alias`, `multer`, `netlify-cli`, `npm-run-all2`, `postcss`, `prettier`, `python`, `randomstring`, `sass`, `svg-spritemap-webpack-plugin`, `vinyl`, `webpack`, `webpack-dev-server`, `ws`)
- [ ] [Update packages (major)](../pull/6773) (`@babel/cli`, `@babel/core`, `@babel/eslint-parser`, `@babel/node`, `@babel/plugin-transform-modules-commonjs`, `@babel/plugin-transform-runtime`, `@babel/preset-env`, `@babel/runtime`, `@google-cloud/datastore`, `@rollup/plugin-commonjs`, `@rollup/plugin-node-resolve`, `@rollup/plugin-replace`, `actions/checkout`, `actions/download-artifact`, `actions/setup-node`, `actions/setup-python`, `actions/upload-artifact`, `archiver`, `babel-loader`, `codemirror`, `cookie`, `copy-webpack-plugin`, `css-loader`, `css-minimizer-webpack-plugin`, `del`, `dropzone`, `eslint`, `eslint-config-prettier`, `express`, `fetch-mock`, `filemanager-webpack-plugin`, `gcp-metadata`, `google-spreadsheet`, `gulp`, `gulp-once`, `gulp-sass`, `helmet-csp`, `husky`, `ioredis`, `jasmine`, `jest`, `jest-environment-jsdom`, `jest-puppeteer`, `joi`, `js-beautify`, `js-yaml`, `linkifyjs`, `lru-cache`, `marked`, `multer`, `netlify-cli`, `node`, `node-fetch`, `npm-run-all2`, `p-queue`, `peter-evans/create-pull-request`, `sass-loader`, `supertest`, `svg-spritemap-webpack-plugin`, `through2`, `uuid`, `webpack-build-notifier`, `webpack-cli`, `webpack-dev-server`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

dockerfile (3)

Dockerfile (1)

- `node 22-alpine` → [Updates: `24-alpine`]

packager/Dockerfile (1)

- `golang 1.22` → [Updates: `1.27`]

thumbor/Dockerfile

github-actions (5)

.github/workflows/deploy.yaml (19)

- `fkirc/skip-duplicate-actions master`
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/setup-python v5` → [Updates: `v7`]
- `actions/download-artifact v4` → [Updates: `v8`]
- `actions/upload-artifact v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `actions/download-artifact v4` → [Updates: `v8`]
- `node 22` → [Updates: `24`]
- `node 22` → [Updates: `24`]
- `node 22` → [Updates: `24`]
- `python 3.9` → [Updates: `3.14`]
- `node 22` → [Updates: `24`]

.github/workflows/lint.yaml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `node 22` → [Updates: `24`]

.github/workflows/sync-doc.yaml (4)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `peter-evans/create-pull-request v5` → [Updates: `v8`]
- `node 18` → [Updates: `24`]

.github/workflows/test-platform.yaml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `node 22` → [Updates: `24`]

.github/workflows/test-playground.yaml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `actions/setup-node v4` → [Updates: `v7`]
- `node 22` → [Updates: `24`]

npm (2)

package.json (125)

- `@ampproject/toolbox-cache-list 2.10.1`
- `@ampproject/toolbox-cors 2.10.1`
- `@ampproject/toolbox-optimizer 2.10.1`
- `@google-cloud/datastore 8.7.0` → [Updates: `11.0.1`]
- `@iarna/toml 2.2.5`
- `busboy 1.6.0`
- `casual 1.6.2`
- `cheerio 1.0.0-rc.12` → [Updates: `1.2.0`]
- `client-sessions 0.8.0`
- `cookie 0.6.0` → [Updates: `0.7.2`, `2.0.1`]
- `cookie-parser 1.4.6` → [Updates: `1.4.7`]
- `cors 2.8.5` → [Updates: `2.8.6`]
- `crypto-browserify 3.12.0` → [Updates: `3.12.1`]
- `dropzone 5.9.3` → [Updates: `6.3.1`]
- `express 4.19.2` → [Updates: `4.22.3`, `5.2.1`]
- `express-formidable 1.2.0`
- `gcp-metadata 6.1.0` → [Updates: `6.1.1`, `9.0.3`]
- `google-spreadsheet 4.1.2` → [Updates: `4.1.5`, `5.3.0`]
- `gulp-file 0.4.0`
- `helmet-csp 3.4.0` → [Updates: `4.1.0`]
- `http-proxy 1.18.1`
- `ioredis 5.4.1` → [Updates: `5.11.1`, `6.0.0`]
- `joi 17.13.3` → [Updates: `17.13.8`, `18.2.9`]
- `js-yaml 4.1.0` → [Updates: `4.3.2`, `5.4.2`]
- `json-tree-view 0.4.12`
- `linkifyjs 2.1.9` → [Updates: `4.3.3`]
- `lru-cache 6.0.0` → [Updates: `11.5.2`]
- `middy 0.36.0`
- `module-alias 2.2.3` → [Updates: `2.3.4`]
- `mri 1.2.0`
- `multer 1.4.4-lts.1` → [Updates: `1.4.4`, `2.4.0`]
- `node-fetch 2.7.0` → [Updates: `3.3.2`]
- `nunjucks 3.2.4`
- `p-queue 6.6.2` → [Updates: `9.3.3`]
- `postcss 8.4.40` → [Updates: `8.5.28`]
- `postcss-css-variables 0.19.0`
- `randomstring 1.3.0` → [Updates: `1.3.1`]
- `rcs-core 3.7.1`
- `rss-to-json 2.1.1`
- `signale 1.4.0`
- `stream-browserify 3.0.0`
- `util 0.12.5`
- `uuid 9.0.1` → [Updates: `14.0.2`]
- `vinyl 3.0.0` → [Updates: `3.0.1`]
- `web-push 3.6.7`
- `ws 8.18.0` → [Updates: `8.21.3`]
- `@ampproject/toolbox-cache-url 2.10.1`
- `@ampproject/toolbox-validator-rules 2.10.1`
- `@babel/cli 7.24.8` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/core 7.25.2` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/eslint-parser 7.25.1` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/node 7.25.0` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/plugin-syntax-dynamic-import 7.8.3`
- `@babel/plugin-transform-modules-commonjs 7.24.8` → [Updates: `7.29.7`, `8.0.1`]
- `@babel/plugin-transform-runtime 7.24.7` → [Updates: `7.29.7`, `8.0.1`]
- `@babel/preset-env 7.25.3` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/runtime 7.25.0` → [Updates: `7.29.7`, `8.0.5`]
- `@rollup/plugin-commonjs 25.0.8` → [Updates: `29.0.3`]
- `@rollup/plugin-node-resolve 15.2.3` → [Updates: `15.3.1`, `16.0.3`]
- `@rollup/plugin-replace 5.0.7` → [Updates: `6.0.3`]
- `absolutify 0.1.0`
- `amphtml-validator 1.0.38`
- `ansi-colors 4.1.3`
- `archiver 6.0.2` → [Updates: `8.0.0`]
- `babel-loader 9.1.3` → [Updates: `9.2.1`, `10.1.1`]
- `clean-css 5.3.3`
- `clean-webpack-plugin 4.0.0`
- `codemirror 5.65.17` → [Updates: `5.65.21`, `6.0.2`]
- `copy-webpack-plugin 12.0.2` → [Updates: `14.0.0`]
- `css-loader 6.11.0` → [Updates: `7.1.5`]
- `css-minimizer-webpack-plugin 6.0.0` → [Updates: `8.0.0`]
- `del 6.1.1` → [Updates: `8.0.1`]
- `eslint 8.57.0` → [Updates: `8.57.1`, `10.10.0`]
- `eslint-config-google 0.14.0`
- `eslint-config-prettier 9.1.0` → [Updates: `9.1.2`, `10.1.8`]
- `eslint-plugin-prettier 5.2.1` → [Updates: `5.5.6`]
- `fetch-mock 9.11.0` → [Updates: `12.6.0`]
- `file-loader 6.2.0`
- `filemanager-webpack-plugin 8.0.0` → [Updates: `10.0.1`]
- `gulp 4.0.2` → [Updates: `5.0.1`]
- `gulp-amphtml-validator 1.0.8`
- `gulp-once 2.1.1` → [Updates: `2.2.0`, `3.0.1`]
- `gulp-sass 5.1.0` → [Updates: `6.0.1`]
- `handlebars 4.7.8` → [Updates: `4.7.9`]
- `handlebars-loader 1.7.3`
- `highlight.js 11.10.0` → [Updates: `11.12.0`]
- `hogan.js 3.0.2`
- `html-loader 5.1.0`
- `html-webpack-inline-source-plugin 1.0.0-beta.2`
- `html-webpack-plugin 5.6.0` → [Updates: `5.6.8`]
- `husky 7.0.4` → [Updates: `9.1.7`]
- `jasmine 5.2.0` → [Updates: `5.13.0`, `7.0.0`]
- `jest 29.7.0` → [Updates: `30.5.1`]
- `jest-environment-jsdom 29.7.0` → [Updates: `30.5.1`]
- `jest-puppeteer 10.0.1` → [Updates: `10.1.4`, `11.0.0`]
- `js-base64 3.7.7` → [Updates: `3.9.3`]
- `js-beautify 1.15.1` → [Updates: `1.15.4`, `2.0.3`]
- `keymaster 1.6.2`
- `marked 2.1.3` → [Updates: `18.0.13`]
- `mini-css-extract-plugin 2.9.0` → [Updates: `2.10.2`]
- `mini-svg-data-uri 1.4.4`
- `netlify-cli 17.33.5` → [Updates: `17.38.1`, `27.5.2`]
- `npm-run-all2 6.2.2` → [Updates: `6.2.6`, `9.0.3`]
- `octonode 0.10.2`
- `preload-webpack-plugin 3.0.0-beta.4`
- `prettier 3.3.3` → [Updates: `3.9.6`]
- `quoted-printable 1.0.1`
- `recursive-search 1.0.1`
- `sass 1.77.8` → [Updates: `1.104.1`]
- `sass-loader 14.2.1` → [Updates: `17.0.1`]
- `snarkdown 2.0.0`
- `striptags 3.2.0`
- `supertest 6.3.4` → [Updates: `7.2.2`]
- `svg-spritemap-webpack-plugin 4.5.1` → [Updates: `4.7.0`, `5.1.4`]
- `through2 4.0.2` → [Updates: `5.0.11`]
- `url-loader 4.1.1`
- `url-search-params 1.1.0`
- `wade 0.3.3`
- `webpack 5.93.0` → [Updates: `5.111.0`]
- `webpack-build-notifier 2.3.0` → [Updates: `3.1.0`]
- `webpack-cli 5.1.4` → [Updates: `7.2.3`]
- `webpack-dev-server 5.0.4` → [Updates: `5.2.6`, `6.0.0`]
- `write 2.0.0`
- `fsevents 2.3.3`
- `node 22.x` → [Updates: `24.x`]

pixi/cloud-function/package.json (1)

- `@ampproject/toolbox-page-experience 2.10.1`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Review package.json, Dockerfile, packager/Dockerfile, and the .github/workflows/*.yaml files; start with the linked update PRs 6836 and 6773. Done means the selected dependency updates are completed without leaving the dashboard's listed updates unresolved.

Written by the indexing model from the issue text.