Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ampproject/amphtml).

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | `@types/dompurify` |  |
| npm | `@types/tar` |  |
| npm | [eslint-plugin-local](https://redirect.github.com/taskworld/eslint-plugin-local) |  |
| npm | [intersection-observer](https://redirect.github.com/GoogleChromeLabs/intersection-observer) |  |
| npm | [rollup-plugin-commonjs](https://redirect.github.com/rollup/rollup-plugin-commonjs) |  |
| npm | [rollup-plugin-json](https://redirect.github.com/rollup/rollup-plugin-json) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] 📦 Replace dependency rollup-plugin-json with @rollup/plugin-json 4.0.0
- [ ] 📦 Update linting devDependencies (`eslint-plugin-prettier`, `prettier`)
- [ ] 📦 Update build-system devDependencies to v8 (`@babel/preset-react`, `@babel/register`)
- [ ] 📦 Update dependency chromedriver to v153
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## PR Edited (Blocked)

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] [📦 Update build-system devDependencies](../pull/40386) (`@babel/preset-react`, `@babel/register`, `@inquirer/prompts`, `@percy/core`, `@percy/puppeteer`, `@percy/sdk-utils`, `@puppeteer/browsers`, `@storybook/addon-a11y`, `@types/selenium-webdriver`, `babel-loader`, `geckodriver`, `preact`, `puppeteer-core`, `selenium-webdriver`)

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [📦 Update dependency esbuild to v0.28.1 [SECURITY]](../pull/40544)
- [ ] [📦 Update dependency postcss to v8.5.23 [SECURITY]](../pull/40545)
- [ ] [📦 Update dependency @babel/core to v7.29.6 [SECURITY]](../pull/40546)
- [ ] [📦 Update dependency @babel/runtime to v7.26.10 [SECURITY]](../pull/40262)
- [ ] [📦 Update dependency dompurify to v3.4.13 [SECURITY]](../pull/40150)
- [ ] [📦 Update dependency morgan to v1.12.0 [SECURITY]](../pull/40547)
- [ ] [📦 Update validator devDependencies](../pull/39454) (`com_github_gflags_gflags`, `com_google_absl`, `com_google_googletest`, `com_google_javascript_closure_library`, `com_google_protobuf`, `com_googlesource_code_re2`, `commander`, `emsdk`, `font-awesome`, `io_bazel_rules_closure`, `jasmine`, `mocha`, `rules_cc`, `rules_proto`)
- [ ] [📦 Update babel devDependencies](../pull/40140) (`@babel/helper-module-imports`, `@babel/helper-plugin-test-runner`, `@babel/plugin-syntax-import-assertions`, `@babel/plugin-transform-react-jsx`, `@babel/preset-env`, `@babel/preset-typescript`, `babel-plugin-istanbul`, `babel-plugin-module-resolver`)
- [ ] [📦 Update core dependencies](../pull/40141) (`@use-gesture/react`, `@webcomponents/webcomponentsjs`, `date-fns`, `intersection-observer`, `jss`, `jss-preset-default`, `moment`, `preact`, `react-day-picker`, `react-jss`, `rrule`)
- [ ] [📦 Update core devDependencies](../pull/40087) (`@aws-sdk/client-s3`, `@chiragrupani/karma-chromium-edge-launcher`, `@jridgewell/sourcemap-codec`, `@octokit/graphql`, `@octokit/rest`, `@sinonjs/fake-timers`, `@types/chai`, `@types/estree`, `@types/klaw`, `@types/mocha`, `@types/node`, `ajv`, `autoprefixer`, `ava`, `body-parser`, `chai`, `css-what`, `dedent`, `express`, `fast-glob`, `fs-extra`, `ignore`, `jsdom`, `json-stable-stringify`, `karma`, `karma-spec-reporter`, `markdown-link-check`, `minimatch`, `mocha`, `multer`, `postcss-import`, `posthtml`, `semver`, `sync-rpc`, `terser`, `traverse`, `typescript`)
- [ ] [📦 Update subpackage devDependencies](../pull/40481) (`actions/checkout`, `actions/dependency-review-action`, `cimg/openjdk`, `eslint`, `github/codeql-action`, `ossf/scorecard-action`, `rollup`, `semver`, `step-security/harden-runner`)
- [ ] [📦 Update babel devDependencies to v8](../pull/40081) (`@babel/helper-module-imports`, `@babel/helper-plugin-test-runner`, `@babel/plugin-transform-react-jsx`, `@babel/preset-env`, `@babel/preset-typescript`, `babel-plugin-istanbul`)
- [ ] [📦 Update core dependencies (major)](../pull/39701) (`date-fns`, `react-day-picker`)
- [ ] [📦 Update core devDependencies (major)](../pull/40139) (`@jest/core`, `@octokit/graphql`, `@octokit/rest`, `@sinonjs/fake-timers`, `@types/chai`, `@types/dompurify`, `@types/node`, `@types/tar`, `ajv-formats`, `ava`, `body-parser`, `chai`, `chai-as-promised`, `chokidar`, `commander`, `css-what`, `cssnano`, `del`, `express`, `fetch-mock`, `ignore`, `jsdom`, `minimatch`, `mocha`, `multer`, `open`, `postcss-import`, `react`, `react-dom`, `sinon`, `sinon-chai`, `tempy`, `typescript`)
- [ ] [📦 Update linting devDependencies (major)](../pull/39950) (`@types/eslint`, `@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`, `eslint`, `eslint-config-prettier`, `eslint-plugin-chai-expect`, `eslint-plugin-eslint-plugin`, `eslint-plugin-jsdoc`, `eslint-plugin-local`, `eslint-plugin-react-hooks`, `eslint-plugin-sort-destructure-keys`)
- [ ] [📦 Update subpackage devDependencies (major)](../pull/40201) (`@rollup/plugin-babel`, `@rollup/plugin-node-resolve`, `actions/checkout`, `actions/dependency-review-action`, `actions/setup-node`, `actions/upload-artifact`, `eslint`, `github/codeql-action`, `jasmine`, `npm-run-all2`)
- [ ] [📦 Update validator devDependencies (major)](../pull/39825) (`commander`, `font-awesome`, `google-closure-compiler-java`, `gulp`, `jasmine`, `mocha`, `through2`)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [📦 Update dependency tar to v7 [SECURITY]](../pull/40471)

## Detected Dependencies

bazel (1)

validator/WORKSPACE (10)

- `com_google_absl fc44fa053cc91193d2bb60fb9356bcecb301242e` → [Updates: `undefined`]
- `com_google_googletest 8a6feabf04bec8fb125e0df0ad1195c42350725f` → [Updates: `undefined`]
- `com_google_protobuf f0dc78d7e6e331b8c6bb2d5283e06aa26883ca7c` → [Updates: `undefined`]
- `com_github_gflags_gflags a738fdf9338412f83ab3f26f31ac11ed3f3ec4bd` → [Updates: `undefined`]
- `com_googlesource_code_re2 87d09ef4f0307e53f1d3796843f4b90d41cfccaa` → [Updates: `undefined`]
- `rules_cc b039a551a7b41b70e426e4a3cd60346c89db9b6c` → [Updates: `undefined`]
- `rules_proto 8aa1e67c09bc8df20df33886909d44129cfb7e63` → [Updates: `undefined`]
- `emsdk fc645b7626ebf86530dbd82fbece74d457e7ae07` → [Updates: `undefined`]
- `com_google_javascript_closure_library e896a74c48695b2bfe0f586f13870c0bc50ce99e` → [Updates: `undefined`]
- `io_bazel_rules_closure 0.12.0` → [Updates: `0.16.0`]

circleci (1)

.circleci/config.yml (5)

- `browser-tools 2.4.2`
- `codecov 6.0.0`
- `macos 3.0.0`
- `node 7.2.1`
- `cimg/openjdk 25.0-node` → [Updates: `25.0.4-node`]

github-actions (10)

.github/workflows/codeql.yml (4)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `github/codeql-action v3.31.9@45c373516f557556c15d420e3f5e0aa3d64366bc` → [Updates: `v3.38.0`, `v4.38.0`]
- `github/codeql-action v3.31.9@45c373516f557556c15d420e3f5e0aa3d64366bc` → [Updates: `v3.38.0`, `v4.38.0`]

.github/workflows/cross-platform-builds.yml (6)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7.0.0`]
- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5`

.github/workflows/cut-nightly.yml (6)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7.0.0`]
- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5`

.github/workflows/dependency-review.yml (3)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `actions/dependency-review-action v4.8.2@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261` → [Updates: `v4.9.0`, `v5.0.0`]

.github/workflows/moderator.yml (2)

- `actions/checkout v4` → [Updates: `v7`]
- `github/ai-moderator v1`

.github/workflows/release-tagger.yml (6)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5`

.github/workflows/request-validator-rollup.yml (2)

- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5`

.github/workflows/scorecard.yml (5)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a` → [Updates: `v2.4.4`]
- `actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02` → [Updates: `v7.0.1`]
- `github/codeql-action v3.31.9@45c373516f557556c15d420e3f5e0aa3d64366bc` → [Updates: `v3.38.0`, `v4.38.0`]

.github/workflows/status-page.yml (6)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020` → [Updates: `v7.0.0`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]
- `JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5`

.github/workflows/update-session-issues.yml (2)

- `step-security/harden-runner v2.14.0@20cf305ff2072d973412fa9b1e3a4f227bda3c76` → [Updates: `v2.21.1`]
- `actions/checkout v4.3.1@34e114876b0b11c390a56381ad16ebd13914f8d5` → [Updates: `v4.4.0`, `v7.0.1`]

html (1)

validator/testdata/feature_tests/regexps.html (2)

- `font-awesome 6.3.0` → [Updates: `6.7.2`, `7.3.1`]
- `font-awesome 6.4.2` → [Updates: `6.7.2`, `7.3.1`]

npm (14)

build-system/tasks/e2e/package.json (6)

- `@babel/register 7.25.9` → [Updates: `7.29.7`, `8.0.5`]
- `@types/selenium-webdriver 4.1.28` → [Updates: `4.35.6`]
- `babel-regenerator-runtime 6.5.0`
- `chromedriver 148.0.4` → [Updates: `153.0.0`]
- `geckodriver 6.1.0` → [Updates: `6.1.1`]
- `selenium-webdriver 4.27.0` → [Updates: `4.49.0`]

build-system/tasks/storybook/env/amp/package.json (2)

- `@ampproject/storybook-addon 1.1.10`
- `preact 10.25.4` → [Updates: `10.29.8`]

build-system/tasks/storybook/env/preact/package.json (1)

- `preact 10.25.4` → [Updates: `10.29.8`]

build-system/tasks/storybook/env/react/package.json

build-system/tasks/storybook/package.json (6)

- `@babel/core 7.26.0` → [Updates: `7.29.6`]
- `@babel/preset-react 7.26.3` → [Updates: `7.29.7`, `8.0.1`]
- `@storybook/addon-a11y 10.2.10` → [Updates: `10.6.0`]
- `@storybook/addon-controls 9.0.8`
- `@storybook/addon-viewport 9.0.8`
- `babel-loader 10.0.0` → [Updates: `10.1.1`]

build-system/tasks/visual-diff/package.json (6)

- `@inquirer/prompts 8.3.0` → [Updates: `8.7.2`]
- `@percy/core 1.30.6` → [Updates: `1.32.9`]
- `@percy/puppeteer 2.0.2` → [Updates: `2.0.3`]
- `@percy/sdk-utils 1.30.6` → [Updates: `1.32.9`]
- `@puppeteer/browsers 3.0.3` → [Updates: `3.2.2`]
- `puppeteer-core 25.0.4` → [Updates: `25.10.0`]

extensions/amp-access/0.1/iframe-api/package.json (5)

- `babel-plugin-external-helpers 6.22.0`
- `babel-preset-env 1.7.0`
- `rollup 4.59.0` → [Updates: `4.63.2`]
- `@rollup/plugin-babel 6.1.0` → [Updates: `7.1.0`]
- `rollup-plugin-cleanup 3.2.1`

extensions/amp-viewer-integration/0.1/messaging/package.json

package.json (164)

- `@ampproject/animations 0.2.2`
- `@ampproject/bento-compiler 0.0.14`
- `@ampproject/toolbox-cache-url 2.10.1`
- `@ampproject/viewer-messaging 1.1.2`
- `@ampproject/worker-dom 0.36.0`
- `@use-gesture/react 10.2.10` → [Updates: `10.3.1`]
- `@webcomponents/webcomponentsjs 2.6.0` → [Updates: `2.8.0`]
- `date-fns 2.27.0` → [Updates: `2.30.0`, `4.4.0`]
- `dompurify 3.0.2` → [Updates: `3.4.13`]
- `google-closure-library 20230802.0.0`
- `intersection-observer 0.12.0` → [Updates: `0.12.2`]
- `jss 10.8.2` → [Updates: `10.10.0`]
- `jss-preset-default 10.8.2` → [Updates: `10.10.0`]
- `moment 2.29.4` → [Updates: `2.30.1`]
- `obj-str 1.1.0`
- `preact 10.16.0` → [Updates: `10.29.8`]
- `react-day-picker 8.0.0-beta.37` → [Updates: `8.10.2`, `10.0.1`]
- `react-jss 10.8.2` → [Updates: `10.10.0`]
- `resize-observer-polyfill 1.5.1`
- `rrule 2.7.2` → [Updates: `2.8.1`]
- `timeago.js 4.0.2`
- `web-activities 1.24.0`
- `web-animations-js 2.3.2`
- `@ampproject/filesize 4.3.0`
- `@ampproject/remapping 2.3.0`
- `@aws-sdk/client-s3 3.613.0` → [Updates: `3.1131.0`]
- `@babel/core 7.15.0` → [Updates: `7.29.6`]
- `@babel/helper-module-imports 7.14.5` → [Updates: `7.29.7`, `8.0.0`]
- `@babel/helper-plugin-test-runner 7.14.5` → [Updates: `7.29.7`, `8.0.0`]
- `@babel/plugin-syntax-import-assertions 7.14.5` → [Updates: `7.29.7`]
- `@babel/plugin-transform-react-jsx 7.14.9` → [Updates: `7.29.7`, `8.0.1`]
- `@babel/preset-env 7.15.0` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/preset-typescript 7.16.7` → [Updates: `7.29.7`, `8.0.1`]
- `@babel/runtime 7.15.3` → [Updates: `7.26.10`]
- `@chiragrupani/karma-chromium-edge-launcher 2.4.1` → [Updates: `2.5.1`]
- `@jest/core 29.7.0` → [Updates: `30.5.1`]
- `@jridgewell/doctrine 3.0.2`
- `@jridgewell/resolve-uri 3.1.2`
- `@jridgewell/sourcemap-codec 1.5.0` → [Updates: `1.6.0`]
- `@octokit/graphql 7.1.0` → [Updates: `7.1.1`, `9.0.5`]
- `@octokit/rest 20.1.1` → [Updates: `20.1.2`, `22.0.1`]
- `@sinonjs/fake-timers 11.2.2` → [Updates: `11.3.1`, `15.4.0`]
- `@types/chai 4.3.16` → [Updates: `4.3.20`, `5.2.3`]
- `@types/dompurify 2.4.0` → [Updates: `3.2.0`]
- `@types/eslint 8.56.12` → [Updates: `9.6.1`]
- `@types/estree 1.0.5` → [Updates: `1.0.9`]
- `@types/fs-extra 11.0.4`
- `@types/klaw 3.0.6` → [Updates: `3.0.7`]
- `@types/minimist 1.2.5`
- `@types/mocha 10.0.7` → [Updates: `10.0.10`]
- `@types/node 18.19.39` → [Updates: `18.19.130`, `24.13.4`]
- `@types/tar 6.1.13` → [Updates: `7.0.87`]
- `@typescript-eslint/eslint-plugin 7.18.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 7.18.0` → [Updates: `8.70.0`]
- `acorn-globals 7.0.1`
- `ajv 8.16.0` → [Updates: `8.20.0`]
- `ajv-formats 2.1.1` → [Updates: `3.0.1`]
- `amphtml-validator 1.0.38`
- `ast-replace 1.1.3`
- `atob 2.1.2`
- `autoprefixer 10.4.19` → [Updates: `10.6.0`]
- `ava 6.1.3` → [Updates: `6.4.1`, `8.0.1`]
- `babel-plugin-istanbul 6.0.0` → [Updates: `6.1.1`, `8.0.0`]
- `babel-plugin-minify-replace 0.5.0`
- `babel-plugin-module-resolver 5.0.0` → [Updates: `5.0.3`]
- `babel-plugin-optimize-objstr 1.0.0`
- `baconipsum 0.1.2`
- `base62 2.0.2`
- `body-parser 1.20.3` → [Updates: `1.20.8`, `2.3.0`]
- `chai 4.4.1` → [Updates: `4.5.0`, `6.2.2`]
- `chai-as-promised 7.1.2` → [Updates: `8.0.2`]
- `check-dependencies 2.0.0`
- `chokidar 3.6.0` → [Updates: `5.0.0`]
- `commander 11.1.0` → [Updates: `15.0.0`]
- `connect-header 0.0.5`
- `css-imports 0.3.1`
- `css-what 6.1.0` → [Updates: `6.2.2`, `8.0.0`]
- `cssnano 6.1.2` → [Updates: `9.0.4`]
- `dedent 1.5.3` → [Updates: `1.7.2`]
- `del 6.1.1` → [Updates: `8.0.1`]
- `enzyme 3.11.0`
- `enzyme-adapter-preact-pure 4.1.0`
- `esbuild 0.28.0` → [Updates: `0.28.1`]
- `escodegen 2.1.0`
- `eslint 8.57.1` → [Updates: `10.10.0`]
- `eslint-config-prettier 9.1.2` → [Updates: `10.1.8`]
- `eslint-import-resolver-babel-module 5.3.2`
- `eslint-plugin-chai-expect 3.1.0` → [Updates: `4.1.0`]
- `eslint-plugin-eslint-plugin 5.5.1` → [Updates: `7.6.2`]
- `eslint-plugin-import 2.32.0`
- `eslint-plugin-jasmine 4.2.2`
- `eslint-plugin-jsdoc 48.11.0` → [Updates: `64.3.10`]
- `eslint-plugin-local 4.2.2` → [Updates: `6.0.0`]
- `eslint-plugin-module-resolver 1.5.0`
- `eslint-plugin-prettier 5.5.5` → [Updates: `5.5.6`]
- `eslint-plugin-react 7.37.5`
- `eslint-plugin-react-hooks 4.6.2` → [Updates: `7.1.1`]
- `eslint-plugin-sort-destructure-keys 1.6.0` → [Updates: `3.0.0`]
- `esprima 4.0.1`
- `event-stream 4.0.1`
- `events 3.3.0`
- `express 4.20.0` → [Updates: `4.22.3`, `5.2.1`]
- `fast-glob 3.3.2` → [Updates: `3.3.3`]
- `fetch-mock 9.11.0` → [Updates: `12.6.0`]
- `formidable 3.5.4`
- `fs-extra 11.2.0` → [Updates: `11.4.0`]
- `gulp-connect 5.7.0`
- `html-minifier 4.0.0`
- `ignore 5.3.1` → [Updates: `5.3.2`, `7.0.9`]
- `istanbul-middleware 0.2.2`
- `jest-progress-bar-reporter 1.0.25`
- `jest-silent-reporter 0.6.0`
- `jison 0.4.18`
- `jsdom 24.1.0` → [Updates: `24.1.3`, `30.0.1`]
- `json-stable-stringify 1.1.1` → [Updates: `1.3.0`]
- `json5 2.2.3`
- `jsonminify 0.4.2`
- `karma 6.4.3` → [Updates: `6.4.4`]
- `karma-chrome-launcher 3.2.0`
- `karma-coverage-istanbul-reporter 3.0.3`
- `karma-esbuild-up 3.0.0`
- `karma-firefox-launcher 2.1.3`
- `karma-fixture 0.2.6`
- `karma-html2js-preprocessor 1.1.0`
- `karma-junit-reporter 2.0.1`
- `karma-mocha 2.0.1`
- `karma-mocha-reporter 2.2.5`
- `karma-safarinative-launcher 1.1.0`
- `karma-source-map-support 1.4.0`
- `karma-spec-reporter 0.0.36` → [Updates: `0.0.37`]
- `karma-structured-json-reporter 1.0.1`
- `klaw 4.1.0`
- `kleur 4.1.5`
- `list-imports-exports 0.1.2`
- `lodash.debounce 4.0.8`
- `markdown-link-check 3.12.2` → [Updates: `3.15.0`]
- `markdown-toc 1.2.0`
- `minimatch 9.0.7` → [Updates: `9.0.9`, `10.2.6`]
- `minimist 1.2.8`
- `mocha 10.6.0` → [Updates: `10.8.2`, `12.0.1`]
- `mocha-junit-reporter 2.2.1`
- `mocha-silent-reporter 1.0.0`
- `morgan 1.10.0` → [Updates: `1.12.0`]
- `multer 1.4.5-lts.1` → [Updates: `1.4.5-lts.2`, `2.4.0`]
- `open 8.4.2` → [Updates: `11.0.3`]
- `plugin-error 2.0.1`
- `postcss 8.5.10` → [Updates: `8.5.23`]
- `postcss-import 16.1.0` → [Updates: `16.2.0`, `17.0.0`]
- `posthtml 0.16.6` → [Updates: `0.16.7`]
- `prettier 3.8.3` → [Updates: `3.9.6`]
- `react 17.0.2` → [Updates: `19.3.0`]
- `react-dom 17.0.2` → [Updates: `19.3.0`]
- `rocambole 0.7.0`
- `semver 7.6.2` → [Updates: `7.8.5`]
- `sinon 11.1.2` → [Updates: `22.1.0`]
- `sinon-chai 3.7.0` → [Updates: `4.0.1`]
- `stream-browserify 3.0.0`
- `sync-rpc 1.3.6` → [Updates: `1.3.7`]
- `tar 6.2.1` → [Updates: `7.5.18`]
- `tempy 1.0.1` → [Updates: `3.2.0`]
- `terser 5.14.2` → [Updates: `5.51.2`]
- `traverse 0.6.9` → [Updates: `0.6.11`]
- `typescript 5.5.3` → [Updates: `5.9.3`, `7.0.2`]
- `util 0.12.5`

third_party/amp-toolbox-cache-url/package.json (19)

- `punycode 2.3.1`
- `url-parse 1.5.10`
- `@ampproject/rollup-plugin-closure-compiler 0.27.0`
- `eslint 9.39.2` → [Updates: `9.39.5`, `10.10.0`]
- `eslint-config-google 0.14.0`
- `jasmine 5.13.0` → [Updates: `7.0.0`]
- `karma 6.4.4`
- `karma-chrome-launcher 3.2.0`
- `karma-jasmine 5.1.0`
- `npm-run-all2 6.2.6` → [Updates: `9.0.3`]
- `rollup 4.55.1` → [Updates: `4.63.2`]
- `rollup-plugin-commonjs 10.1.0`
- `rollup-plugin-filesize 10.0.0`
- `rollup-plugin-ignore 1.0.10`
- `rollup-plugin-json 4.0.0` → [Updates: `4.0.0`]
- `rollup-plugin-node-builtins 2.1.2`
- `@rollup/plugin-node-resolve 15.3.1` → [Updates: `16.0.3`]
- `rollup-plugin-serve 3.0.0`
- `semver 7.7.3` → [Updates: `7.8.5`]

validator/js/gulpjs/package.json (5)

- `amphtml-validator 1.0.38`
- `kleur 4.1.5`
- `through2 4.0.2` → [Updates: `5.0.11`]
- `gulp 4.0.2` → [Updates: `5.0.1`]
- `mocha 10.2.0` → [Updates: `10.8.2`, `12.0.1`]

validator/js/nodejs/package.json (4)

- `colors 1.4.0`
- `commander 12.0.0` → [Updates: `12.1.0`, `15.0.0`]
- `promise 8.3.0`
- `jasmine 5.1.0` → [Updates: `5.13.0`, `7.0.0`]

validator/js/webui/package.json

validator/package.json (3)

- `google-closure-compiler-java 20230802.0.0` → [Updates: `20231112.0.0`]
- `jasmine 5.1.0` → [Updates: `5.13.0`, `7.0.0`]
- `jasmine-console-reporter 3.1.0`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Start with the linked Dependency Dashboard documentation, then review the listed dependency locations such as validator/WORKSPACE, .circleci/config.yml, and the GitHub workflow files. The dashboard shows many updates already represented by open or blocked pull requests; done would require resolving a specific dependency update and verifying its associated checks.

Written by the indexing model from the issue text.