Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ampproject/samples).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [@babel/plugin-proposal-class-properties](https://redirect.github.com/babel/babel) |  |
| npm | [babel-preset-es2015](https://redirect.github.com/babel/babel) |  |
| npm | [cuid](https://redirect.github.com/ericelliott/cuid) |  |
| npm | [jsrsasign](https://redirect.github.com/kjur/jsrsasign) |  |
| npm | [moize](https://redirect.github.com/planttheidea/moize) |  |
| npm | [request](https://redirect.github.com/request/request) |  |
| npm | [sw-precache](https://redirect.github.com/googlechrome/sw-precache) |  |
| npm | [uglify-es](https://redirect.github.com/mishoo/UglifyJS2) |  |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update dependency gulp-htmllint to v0.0.19
- [ ] Update dependency gulp-noop to v1.0.1
- [ ] Update dependency gulp-plumber to v1.2.1
- [ ] Update dependency gulp-sourcemaps to v2.6.5
- [ ] Update dependency gulp-uglify to v3.0.2
- [ ] Update dependency imagemin-cli to v4.0.1
- [ ] Update dependency live-server to v1.2.2
- [ ] Update dependency mime-types to v2.1.35
- [ ] Update dependency moize to v5.4.7
- [ ] Update dependency react-feather to v1.1.6
- [ ] Update dependency react-scripts to v2.1.8
- [ ] Update dependency rimraf to v3.0.2
- [ ] Update dependency svg-country-flags to v1.2.10
- [ ] Update dependency url-join to v4.0.1
- [ ] Update babel monorepo (`@babel/cli`, `@babel/plugin-proposal-class-properties`, `@babel/preset-env`, `@babel/preset-react`, `@babel/register`)
- [ ] Update dependency @ampproject/toolbox-optimizer to v2.10.1
- [ ] Update dependency @mapbox/stylelint-processor-arbitrary-tags to v0.4.0
- [ ] Update dependency babel-plugin-module-resolver to v3.2.0
- [ ] Update dependency babel-plugin-styled-components to v1.13.3
- [ ] Update dependency busboy to v0.3.1
- [ ] Update dependency classnames to v2.5.1
- [ ] Update dependency connect-history-api-fallback to v1.6.0
- [ ] Update dependency cookies to v0.9.2
- [ ] Update dependency copy-dir to v1.3.0
- [ ] Update dependency eslint to v5.16.0
- [ ] Update dependency eslint-config-metalab to v10.1.0
- [ ] Update dependency fuse.js to v3.6.1
- [ ] Update dependency geoip-country to v3.4.1
- [ ] Update dependency gulp-replace to v1.1.4
- [ ] Update dependency gulp-sass to v4.1.1
- [ ] Update dependency helmet to v3.23.3
- [ ] Update dependency http-server to ^0.13.0
- [ ] Update dependency js-beautify to v1.15.4
- [ ] Update dependency jshint to v2.13.6
- [ ] Update dependency mdi-react to v5.6.0
- [ ] Update dependency nodemon to v1.19.4
- [ ] Update dependency polished to v3.7.2
- [ ] Update dependency prettier to v1.19.1
- [ ] Update dependency prop-types to v15.8.1
- [ ] Update dependency punycode to v2.3.1
- [ ] Update dependency ramda to v0.32.0
- [ ] Update dependency random to v2.2.0
- [ ] Update dependency react-bootstrap to v0.33.1
- [ ] Update dependency request to v2.88.2
- [ ] Update dependency styled-components to v4.4.1
- [ ] Update dependency stylelint to v9.10.1
- [ ] Update dependency stylelint-config-standard to v18.3.0
- [ ] Update dependency workbox-build to v3.6.3
- [ ] Update dependency xml2json to ^0.12.0
- [ ] Update Node.js to v6.17.1
- [ ] Update Node.js to v8.17.0
- [ ] Update Node.js to v10.24.1
- [ ] Update react monorepo to v16.14.0 (`react`, `react-dom`)
- [ ] Update babel monorepo to v8 (`@babel/cli`, `@babel/preset-env`, `@babel/preset-react`, `@babel/register`)
- [ ] Update dependency @ampproject/toolbox-cors to v2
- [ ] Update dependency babel-plugin-module-resolver to v5
- [ ] Update dependency babel-plugin-styled-components to v2
- [ ] Update dependency browser-sync to v3
- [ ] Update dependency busboy to v1
- [ ] Update dependency clean-css to v5
- [ ] Update dependency connect-history-api-fallback to v2
- [ ] Update dependency cuid to v3
- [ ] Update dependency del to v8
- [ ] Update dependency del to v8
- [ ] Update dependency eslint to v10
- [ ] Update dependency express to v5
- [ ] Update dependency fast-glob to v3
- [ ] Update dependency fuse.js to v7
- [ ] Update dependency geoip-country to v5
- [ ] Update dependency google-spreadsheet to v5
- [ ] Update dependency gulp to v5
- [ ] Update dependency gulp-autoprefixer to v10
- [ ] Update dependency gulp-autoprefixer to v10
- [ ] Update dependency gulp-filter to v10
- [ ] Update dependency gulp-rename to v2
- [ ] Update dependency gulp-sass to v6
- [ ] Update dependency gulp-sass to v6
- [ ] Update dependency gulp-sourcemaps to v3
- [ ] Update dependency gulp-stylelint to v13
- [ ] Update dependency helmet to v8
- [ ] Update dependency html-minifier to v4
- [ ] Update dependency http-server to v14
- [ ] Update dependency imagemin-cli to v8
- [ ] Update dependency js-beautify to v2
- [ ] Update dependency jsdom to v30
- [ ] Update dependency mdi-react to v9
- [ ] Update dependency mime-types to v3
- [ ] Update dependency moize to v6
- [ ] Update dependency nodemon to v3
- [ ] Update dependency pluralize to v8
- [ ] Update dependency polished to v4
- [ ] Update dependency prettier to v3
- [ ] Update dependency random to v5
- [ ] Update dependency react-bootstrap to v2
- [ ] Update dependency react-feather to v2
- [ ] Update dependency react-helmet to v6
- [ ] Update dependency react-scripts to v5
- [ ] Update dependency rimraf to v6
- [ ] Update dependency styled-components to v6
- [ ] Update dependency stylelint to v17
- [ ] Update dependency stylelint-config-standard to v40
- [ ] Update dependency through2 to v5
- [ ] Update dependency url-join to v5
- [ ] Update Node.js to v24
- [ ] Update react monorepo to v19 (`react`, `react-dom`)
- [ ] Update react-router monorepo (major) (`react-router`, `react-router-dom`)
- [ ] Update workbox monorepo to v7 (`workbox-build`, `workbox-sw`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency @babel/core to v7.29.6 [SECURITY]](../pull/438)
- [ ] [Update dependency body-parser to v1.20.6 [SECURITY]](../pull/439)
- [ ] [Update dependency bootstrap to v4.3.1 [SECURITY]](../pull/440)
- [ ] [Update dependency express to v4.20.0 [SECURITY]](../pull/441)
- [ ] [Update dependency node-fetch to v2.6.7 [SECURITY]](../pull/442)
- [ ] [Update dependency jsonwebtoken to v9 [SECURITY]](../pull/443)
- [ ] [Update dependency jsrsasign to v11 [SECURITY]](../pull/426)
- [ ] [Update dependency multer to v2 [SECURITY]](../pull/444)
- [ ] [Update dependency serialize-to-js to v3 [SECURITY]](../pull/432)
- [ ] [Update dependency uuid to v11 [SECURITY]](../pull/445)
- [ ] [Update dependency amp-toolbox-update-cache to v1.0.6](../pull/415)
- [ ] [Update dependency amphtml-validator to v1.0.38](../pull/416)
- [ ] [Update dependency clean-css to v4.2.4](../pull/417)
- [ ] [Update dependency cookie-parser to v1.4.7](../pull/418)
- [ ] [Update dependency cuid to v2.1.8](../pull/419)
- [ ] [Update dependency fast-glob to v2.2.7](../pull/420)
- [ ] [Update dependency get-timezone-offset to v1.0.5](../pull/421)
- [ ] [Update dependency google-spreadsheet to v2.0.9](../pull/422)
- [ ] [Update dependency gulp to v4.0.2](../pull/424)
- [ ] [Update dependency gulp-amphtml-validator to v1.0.8](../pull/446)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected Dependencies

circleci (3)

amp-article/.circleci/config.yml

amp-concert/.circleci/config.yml

amp-stories/.circleci/config.yml

nodenv (3)

amp-article/.node-version (1)

- `node 10.8.0` → [Updates: `10.24.1`, `24.21.0`]

amp-concert/.node-version (1)

- `node 10.8.0` → [Updates: `10.24.1`, `24.21.0`]

amp-stories/.node-version (1)

- `node 10.8.0` → [Updates: `10.24.1`, `24.21.0`]

npm (11)

amp-article/package.json (25)

- `@babel/preset-react 7.0.0` → [Updates: `7.29.7`, `8.0.1`]
- `clean-css 4.2.1` → [Updates: `4.2.4`, `5.3.3`]
- `midori 3.3.0`
- `node-fetch 2.3.0` → [Updates: `2.6.7`]
- `ramda 0.26.1` → [Updates: `0.32.0`]
- `random 2.0.13` → [Updates: `2.2.0`, `5.5.1`]
- `react 16.7.0` → [Updates: `16.14.0`, `19.3.0`]
- `react-dom 16.7.0` → [Updates: `16.14.0`, `19.3.0`]
- `react-feather 1.1.5` → [Updates: `1.1.6`, `2.0.10`]
- `react-router 4.3.1` → [Updates: `8.3.1`]
- `react-router-dom 4.3.1` → [Updates: `7.18.3`]
- `string-hash 1.1.3`
- `styled-components 4.1.2` → [Updates: `4.4.1`, `6.5.3`]
- `url-join 4.0.0` → [Updates: `4.0.1`, `5.0.0`]
- `@babel/cli 7.2.3` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/core 7.2.2` → [Updates: `7.29.6`]
- `@babel/plugin-proposal-class-properties 7.2.3` → [Updates: `7.18.6`]
- `@babel/preset-env 7.2.3` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/register 7.0.0` → [Updates: `7.29.7`, `8.0.5`]
- `amphtml-validator 1.0.23` → [Updates: `1.0.38`]
- `babel-plugin-module-resolver 3.1.1` → [Updates: `3.2.0`, `5.0.3`]
- `eslint 5.10.0` → [Updates: `5.16.0`, `10.10.0`]
- `eslint-config-metalab 10.0.0` → [Updates: `10.1.0`]
- `nodemon 1.18.8` → [Updates: `1.19.4`, `3.1.14`]
- `prettier 1.15.3` → [Updates: `1.19.1`, `3.9.6`]

amp-camp/package.json (29)

- `@ampproject/toolbox-optimizer 2.0.0-alpha.3` → [Updates: `2.10.1`]
- `@ampproject/toolbox-cors 1.1.1` → [Updates: `2.10.1`]
- `amphtml-validator ^1.0.29`
- `browser-sync ^2.26.7` → [Updates: `^3.0.0`]
- `client-sessions ^0.8.0`
- `del ^3.0.0` → [Updates: `^8.0.0`]
- `express ^4.17.1` → [Updates: `^5.0.0`]
- `express-formidable ^1.2.0`
- `gulp-amphtml-validator ^1.0.2`
- `gulp-autoprefixer ^6.1.0` → [Updates: `^10.0.0`]
- `gulp-file-include ^2.1.1`
- `gulp-filter ^5.1.0` → [Updates: `^10.0.0`]
- `gulp-plumber *`
- `gulp-print ^5.0.0`
- `gulp-sass ^4.0.2` → [Updates: `^6.0.0`]
- `gulp-sourcemaps *`
- `gulp-uglify ^3.0.1`
- `jsdom ^11.12.0` → [Updates: `^30.0.0`]
- `mustache-express ^1.3.0`
- `request ^2.88.0`
- `serialize-to-js ^1.2.2` → [Updates: `^3.0.1`]
- `through2 ^2.0.5` → [Updates: `^5.0.0`]
- `uglify-es ^3.3.10`
- `workbox-build ^3.6.3` → [Updates: `^7.0.0`]
- `workbox-sw ^3.6.3` → [Updates: `^7.0.0`]
- `gulp-merge-media-queries ^0.2.1`
- `gulp-nodemon ^2.2.1`
- `gulp-noop ^1.0.0`
- `gulp-replace ^1.0.0`

amp-concert/package.json (34)

- `@babel/preset-react 7.0.0` → [Updates: `7.29.7`, `8.0.1`]
- `babel-plugin-module-resolver 3.1.1` → [Updates: `3.2.0`, `5.0.3`]
- `busboy 0.2.14` → [Updates: `0.3.1`, `1.6.0`]
- `classnames 2.2.6` → [Updates: `2.5.1`]
- `cookies 0.7.3` → [Updates: `0.9.2`]
- `cuid 2.1.4` → [Updates: `2.1.8`, `3.0.0`]
- `doasync 2.0.1`
- `fast-glob 2.2.6` → [Updates: `2.2.7`, `3.3.3`]
- `fuse.js 3.3.0` → [Updates: `3.6.1`, `7.5.0`]
- `geoip-country 3.2.0` → [Updates: `3.4.1`, `5.0.202609120131`]
- `get-timezone-offset 1.0.3` → [Updates: `1.0.5`]
- `google-spreadsheet 2.0.6` → [Updates: `2.0.9`, `5.3.0`]
- `jsonwebtoken 8.4.0` → [Updates: `9.0.0`]
- `mdi-react 5.1.0` → [Updates: `5.6.0`, `9.4.0`]
- `midori 3.3.0`
- `node-fetch 2.3.0` → [Updates: `2.6.7`]
- `pluralize 7.0.0` → [Updates: `8.0.0`]
- `react 16.7.0` → [Updates: `16.14.0`, `19.3.0`]
- `react-dom 16.7.0` → [Updates: `16.14.0`, `19.3.0`]
- `react-router 4.3.1` → [Updates: `8.3.1`]
- `react-router-dom 4.3.1` → [Updates: `7.18.3`]
- `styled-components 4.1.3` → [Updates: `4.4.1`, `6.5.3`]
- `svg-country-flags 1.2.6` → [Updates: `1.2.10`]
- `url-join 4.0.0` → [Updates: `4.0.1`, `5.0.0`]
- `@babel/cli 7.2.3` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/core 7.2.2` → [Updates: `7.29.6`]
- `@babel/plugin-proposal-class-properties 7.2.3` → [Updates: `7.18.6`]
- `@babel/preset-env 7.2.3` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/register 7.0.0` → [Updates: `7.29.7`, `8.0.5`]
- `amphtml-validator 1.0.23` → [Updates: `1.0.38`]
- `eslint 5.12.0` → [Updates: `5.16.0`, `10.10.0`]
- `eslint-config-metalab 10.0.0` → [Updates: `10.1.0`]
- `nodemon 1.18.9` → [Updates: `1.19.4`, `3.1.14`]
- `prettier 1.15.3` → [Updates: `1.19.1`, `3.9.6`]

amp-paywall-demo/package.json (10)

- `body-parser 1.18.3` → [Updates: `1.20.6`]
- `cookie-parser 1.4.3` → [Updates: `1.4.7`]
- `express 4.16.4` → [Updates: `4.20.0`]
- `gcloud ^0.37.0`
- `hogan-express 0.5.2`
- `hogan.js ^3.0.2`
- `jsonwebtoken ^8.0.0` → [Updates: `^9.0.0`]
- `uuid 3.3.2` → [Updates: `11.1.1`]
- `jshint 2.9.7` → [Updates: `2.13.6`]
- `node ^4.0.0` → [Updates: `^24.0.0`]

amp-pwa-reader/package.json (22)

- `connect-history-api-fallback *` → [Updates: `*`]
- `del *` → [Updates: `*`]
- `express ^4.16.2` → [Updates: `^4.16.2`]
- `express-sslify ^1.2.0`
- `gulp-autoprefixer *` → [Updates: `*`]
- `gulp-concat *`
- `gulp-insert *`
- `gulp-live-server 0.0.31`
- `gulp-noop *` → [Updates: `*`]
- `gulp-plumber *` → [Updates: `*`]
- `gulp-rename ^1.2.2` → [Updates: `^2.0.0`]
- `gulp-replace *` → [Updates: `*`]
- `gulp-sass *` → [Updates: `*`]
- `gulp-sourcemaps *` → [Updates: `*`]
- `gulp-uglify *` → [Updates: `*`]
- `helmet ^3.12.1` → [Updates: `^3.12.1`, `^8.0.0`]
- `memory-cache ^0.2.0`
- `request ^2.81.0` → [Updates: `^2.81.0`]
- `uglify-es *`
- `workbox-build ^3.2.0` → [Updates: `^3.2.0`, `^7.0.0`]
- `xml2json ^0.11.2` → [Updates: `^0.12.0`]
- `node 6.16.0` → [Updates: `6.17.1`, `24.21.0`]

amp-pwa/package.json (8)

- `bootstrap 4.2.1` → [Updates: `4.3.1`]
- `react 16.7.0` → [Updates: `16.14.0`, `19.3.0`]
- `react-bootstrap 0.32.4` → [Updates: `0.33.1`, `2.10.10`]
- `react-dom 16.7.0` → [Updates: `16.14.0`, `19.3.0`]
- `react-router 4.3.1` → [Updates: `8.3.1`]
- `express 4.16.4` → [Updates: `4.20.0`]
- `react-scripts 2.1.3` → [Updates: `2.1.8`, `5.0.1`]
- `sw-precache 5.2.1`

amp-pwa/src/components/amp-document/package.json (3)

- `babel-cli 6.26.0`
- `babel-preset-es2015 6.24.1`
- `babel-preset-react 6.24.1`

amp-stories/package.json (34)

- `@babel/preset-react 7.0.0` → [Updates: `7.29.7`, `8.0.1`]
- `babel-plugin-styled-components ^1.10.6` → [Updates: `^1.10.6`, `^2.0.0`]
- `clean-css 4.2.1` → [Updates: `4.2.4`, `5.3.3`]
- `http-server ^0.11.1` → [Updates: `^0.13.0`, `^14.0.0`]
- `js-beautify ^1.10.2` → [Updates: `^1.10.2`, `^2.0.0`]
- `midori 3.3.0`
- `moize ^5.4.4` → [Updates: `^5.4.4`, `^6.0.0`]
- `node-fetch 2.3.0` → [Updates: `2.6.7`]
- `polished ^3.4.1` → [Updates: `^3.4.1`, `^4.0.0`]
- `prop-types ^15.7.2` → [Updates: `^15.7.2`]
- `ramda 0.26.1` → [Updates: `0.32.0`]
- `random 2.0.12` → [Updates: `2.2.0`, `5.5.1`]
- `react 16.6.3` → [Updates: `16.14.0`, `19.3.0`]
- `react-dom 16.6.3` → [Updates: `16.14.0`, `19.3.0`]
- `react-feather 1.1.4` → [Updates: `1.1.6`, `2.0.10`]
- `react-helmet ^5.2.1` → [Updates: `^6.0.0`]
- `react-router 4.3.1` → [Updates: `8.3.1`]
- `react-router-dom 4.3.1` → [Updates: `7.18.3`]
- `string-hash 1.1.3`
- `styled-components 4.1.2` → [Updates: `4.4.1`, `6.5.3`]
- `url-join 4.0.0` → [Updates: `4.0.1`, `5.0.0`]
- `@babel/cli 7.2.0` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/core 7.2.0` → [Updates: `7.29.6`]
- `@babel/plugin-proposal-class-properties 7.2.1` → [Updates: `7.18.6`]
- `@babel/preset-env 7.2.0` → [Updates: `7.29.7`, `8.0.5`]
- `@babel/register 7.0.0` → [Updates: `7.29.7`, `8.0.5`]
- `amphtml-validator 1.0.23` → [Updates: `1.0.38`]
- `babel-plugin-module-resolver 3.1.1` → [Updates: `3.2.0`, `5.0.3`]
- `copy-dir ^1.2.0` → [Updates: `^1.2.0`]
- `eslint 5.10.0` → [Updates: `5.16.0`, `10.10.0`]
- `eslint-config-metalab 10.0.0` → [Updates: `10.1.0`]
- `nodemon 1.18.9` → [Updates: `1.19.4`, `3.1.14`]
- `prettier 1.15.3` → [Updates: `1.19.1`, `3.9.6`]
- `rimraf ^3.0.0` → [Updates: `^3.0.0`, `^6.0.0`]

amp-story/package.json (9)

- `@mapbox/stylelint-processor-arbitrary-tags 0.2.0` → [Updates: `0.4.0`]
- `gulp 4.0.0` → [Updates: `4.0.2`, `5.0.1`]
- `gulp-amphtml-validator 1.0.2` → [Updates: `1.0.8`]
- `gulp-htmllint 0.0.16` → [Updates: `0.0.19`]
- `gulp-stylelint 8.0.0` → [Updates: `13.0.0`]
- `live-server 1.2.1` → [Updates: `1.2.2`]
- `stylelint 9.9.0` → [Updates: `9.10.1`, `17.15.0`]
- `stylelint-config-standard 18.2.0` → [Updates: `18.3.0`, `40.0.0`]
- `node ^4.0.0` → [Updates: `^24.0.0`]

amp-tube/package.json (2)

- `html-minifier 3.5.21` → [Updates: `4.0.0`]
- `imagemin-cli 4.0.0` → [Updates: `4.0.1`, `8.0.0`]

amp-update-cache/package.json (8)

- `amp-toolbox-update-cache ^1.0.0` → [Updates: `^1.0.0`]
- `express ^4.14.1` → [Updates: `^4.14.1`]
- `jsrsasign ^8.0.0` → [Updates: `^11.0.0`]
- `mime-types ^2.1.15` → [Updates: `^2.1.15`, `^3.0.0`]
- `multer ^1.3.0` → [Updates: `^2.0.0`]
- `node-fetch ^2.0.0` → [Updates: `^2.0.0`]
- `punycode ^2.1.0` → [Updates: `^2.1.0`]
- `node 8.15.0` → [Updates: `8.17.0`, `24.21.0`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository