Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@types/dompurify
npm	eslint-plugin-local
npm	rollup-plugin-commonjs
npm	rollup-plugin-json

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• 📦 Update build-system devDependencies (@babel/core, @inquirer/prompts, @percy/core, @percy/sdk-utils, @puppeteer/browsers, @storybook/addon-a11y, @storybook/addon-controls, @storybook/addon-viewport, preact, puppeteer-core, selenium-webdriver)
• 📦 Update dependency babel-loader to v10
• 📦 Update dependency chromedriver to v134
• 🔐 Create all rate-limited PRs at once 🔐

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• 📦 Update dependency @babel/runtime to v7.26.10 [SECURITY]
• 📦 Update dependency dompurify to v3.2.4 [SECURITY]
• 📦 Update dependency esbuild to v0.25.0 [SECURITY]
• 📦 Update validator devDependencies (com_github_gflags_gflags, com_google_absl, com_google_googletest, com_google_javascript_closure_library, com_google_protobuf, com_googlesource_code_re2, commander, emsdk, font-awesome, io_bazel_rules_closure, jasmine, mocha, rules_cc, rules_proto)
• 📦 Update linting devDependencies (eslint-plugin-prettier, eslint-plugin-react, prettier)
• 📦 Update subpackage devDependencies (@rollup/plugin-node-resolve, actions/checkout, actions/dependency-review-action, actions/setup-node, actions/upload-artifact, browser-tools, cimg/openjdk, codecov, eslint, github/codeql-action, jasmine, npm-run-all2, ossf/scorecard-action, rollup, rollup-plugin-json, semver, step-security/harden-runner)
• 📦 Update babel devDependencies (@babel/core, @babel/helper-module-imports, @babel/helper-plugin-test-runner, @babel/plugin-syntax-import-assertions, @babel/plugin-transform-react-jsx, @babel/preset-env, @babel/preset-typescript, babel-plugin-istanbul, babel-plugin-module-resolver)
• 📦 Update core dependencies (@use-gesture/react, @webcomponents/webcomponentsjs, date-fns, intersection-observer, jss, jss-preset-default, moment, preact, react-day-picker, react-jss, rrule)
• 📦 Update core devDependencies (@aws-sdk/client-s3, @octokit/graphql, @octokit/rest, @sinonjs/fake-timers, @types/chai, @types/estree, @types/mocha, @types/node, ajv, autoprefixer, ava, chai, express, fast-glob, formidable, fs-extra, ignore, jsdom, json-stable-stringify, karma, markdown-link-check, mocha, multer, postcss, semver, terser, traverse, typescript)
• 📦 Update core dependencies (major) (date-fns, react-day-picker)
• 📦 Update core devDependencies (major) (@octokit/graphql, @octokit/rest, @sinonjs/fake-timers, @types/chai, @types/dompurify, @types/node, ajv-formats, body-parser, chai, chai-as-promised, chokidar, commander, cssnano, del, fetch-mock, ignore, jsdom, minimatch, mocha, open, react, react-dom, sinon, sinon-chai, tar, tempy)
• 📦 Update dependency babel-plugin-istanbul to v7
• 📦 Update linting devDependencies (major) (@types/eslint, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, eslint-config-prettier, eslint-plugin-eslint-plugin, eslint-plugin-jsdoc, eslint-plugin-local, eslint-plugin-react-hooks, eslint-plugin-sort-destructure-keys)
• 📦 Update subpackage devDependencies (major) (@rollup/plugin-node-resolve, node, npm-run-all2)
• 📦 Update validator devDependencies (major) (commander, google-closure-compiler-java, gulp, mocha)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

bazel

validator/WORKSPACE

• com_google_absl fc44fa053cc91193d2bb60fb9356bcecb301242e
• com_google_googletest 8a6feabf04bec8fb125e0df0ad1195c42350725f
• com_google_protobuf f0dc78d7e6e331b8c6bb2d5283e06aa26883ca7c
• com_github_gflags_gflags a738fdf9338412f83ab3f26f31ac11ed3f3ec4bd
• com_googlesource_code_re2 87d09ef4f0307e53f1d3796843f4b90d41cfccaa
• rules_cc b039a551a7b41b70e426e4a3cd60346c89db9b6c
• rules_proto 8aa1e67c09bc8df20df33886909d44129cfb7e63
• emsdk fc645b7626ebf86530dbd82fbece74d457e7ae07
• com_google_javascript_closure_library e896a74c48695b2bfe0f586f13870c0bc50ce99e
• io_bazel_rules_closure 0.12.0

circleci

.circleci/config.yml

• browser-tools 1.5.1
• codecov 5.0.0
• macos 2.5.2
• node 6.3.0
• cimg/openjdk 21.0.5-node

github-actions

.github/workflows/codeql.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• github/codeql-action v3.26.13@f779452ac5af1c261dce0346a8f964149f49322b
• github/codeql-action v3.26.13@f779452ac5af1c261dce0346a8f964149f49322b

.github/workflows/cross-platform-builds.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/setup-node v4.0.4@0a44ba7841725637a19e28fa30b79a866c81b0a6
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/cut-nightly.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/setup-node v4.0.4@0a44ba7841725637a19e28fa30b79a866c81b0a6
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/dependency-review.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• actions/dependency-review-action v4.3.4@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c

.github/workflows/release-tagger.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/setup-node v4.0.4@0a44ba7841725637a19e28fa30b79a866c81b0a6
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/scorecard.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.4.3@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882
• github/codeql-action v3.26.13@f779452ac5af1c261dce0346a8f964149f49322b

.github/workflows/status-page.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/setup-node v4.0.4@0a44ba7841725637a19e28fa30b79a866c81b0a6
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871
• JasonEtco/create-an-issue v2.9.2@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5

.github/workflows/update-session-issues.yml

• step-security/harden-runner v2.10.1@91182cccc01eb5e619899d80e4e971d6181294a7
• actions/checkout v4.2.1@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871

html

validator/testdata/feature_tests/regexps.html

• font-awesome 6.3.0
• font-awesome 6.4.2

npm

build-system/tasks/e2e/package.json

• @babel/register 7.25.9
• @types/selenium-webdriver 4.1.28
• babel-regenerator-runtime 6.5.0
• chromedriver 131.0.5
• geckodriver 5.0.0
• selenium-webdriver 4.27.0

build-system/tasks/storybook/env/amp/package.json

• @ampproject/storybook-addon 1.1.10
• preact 10.25.4

build-system/tasks/storybook/env/preact/package.json

• preact 10.25.4

build-system/tasks/storybook/env/react/package.json

build-system/tasks/storybook/package.json

• @babel/core 7.26.0
• @babel/preset-react 7.26.3
• @storybook/addon-a11y 8.4.7
• @storybook/addon-controls 8.4.7
• @storybook/addon-viewport 8.4.7
• babel-loader 9.2.1

build-system/tasks/visual-diff/package.json

• @inquirer/prompts 7.2.1
• @percy/core 1.30.6
• @percy/puppeteer 2.0.2
• @percy/sdk-utils 1.30.6
• @puppeteer/browsers 2.7.0
• puppeteer-core 24.0.0

extensions/amp-access/0.1/iframe-api/package.json

• babel-plugin-external-helpers 6.22.0
• babel-preset-env 1.7.0
• rollup 4.24.0
• @rollup/plugin-babel 6.0.4
• rollup-plugin-cleanup 3.2.1

extensions/amp-viewer-integration/0.1/messaging/package.json

package.json

• @ampproject/animations 0.2.2
• @ampproject/bento-compiler 0.0.14
• @ampproject/toolbox-cache-url 2.10.1
• @ampproject/viewer-messaging 1.1.2
• @ampproject/worker-dom 0.35.0
• @use-gesture/react 10.2.10
• @webcomponents/webcomponentsjs 2.6.0
• date-fns 2.27.0
• dompurify 3.0.2
• google-closure-library 20230802.0.0
• intersection-observer 0.12.0
• jss 10.8.2
• jss-preset-default 10.8.2
• moment 2.29.4
• obj-str 1.1.0
• preact 10.16.0
• react-day-picker 8.0.0-beta.37
• react-jss 10.8.2
• resize-observer-polyfill 1.5.1
• rrule 2.7.2
• timeago.js 4.0.2
• web-activities 1.24.0
• web-animations-js 2.3.2
• @ampproject/filesize 4.3.0
• @ampproject/remapping 2.3.0
• @aws-sdk/client-s3 3.613.0
• @babel/core 7.15.0
• @babel/helper-module-imports 7.14.5
• @babel/helper-plugin-test-runner 7.14.5
• @babel/plugin-syntax-import-assertions 7.14.5
• @babel/plugin-transform-react-jsx 7.14.9
• @babel/preset-env 7.15.0
• @babel/preset-typescript 7.16.7
• @babel/runtime 7.15.3
• @chiragrupani/karma-chromium-edge-launcher 2.4.1
• @jest/core 29.7.0
• @jridgewell/doctrine 3.0.2
• @jridgewell/resolve-uri 3.1.2
• @jridgewell/sourcemap-codec 1.5.0
• @octokit/graphql 7.1.0
• @octokit/rest 20.1.1
• @sinonjs/fake-timers 11.2.2
• @types/chai 4.3.16
• @types/dompurify 2.4.0
• @types/eslint 8.56.12
• @types/estree 1.0.5
• @types/fs-extra 11.0.4
• @types/klaw 3.0.6
• @types/minimist 1.2.5
• @types/mocha 10.0.7
• @types/node 18.19.39
• @types/tar 6.1.13
• @typescript-eslint/eslint-plugin 7.18.0
• @typescript-eslint/parser 7.18.0
• acorn-globals 7.0.1
• ajv 8.16.0
• ajv-formats 2.1.1
• amphtml-validator 1.0.38
• ast-replace 1.1.3
• atob 2.1.2
• autoprefixer 10.4.19
• ava 6.1.3
• babel-plugin-istanbul 6.0.0
• babel-plugin-minify-replace 0.5.0
• babel-plugin-module-resolver 5.0.0
• babel-plugin-optimize-objstr 1.0.0
• baconipsum 0.1.2
• base62 2.0.2
• body-parser 1.20.3
• chai 4.4.1
• chai-as-promised 7.1.2
• check-dependencies 2.0.0
• chokidar 3.6.0
• commander 11.1.0
• connect-header 0.0.5
• css-imports 0.3.1
• css-what 6.1.0
• cssnano 6.1.2
• dedent 1.5.3
• del 6.1.1
• enzyme 3.11.0
• enzyme-adapter-preact-pure 4.1.0
• esbuild 0.24.2
• escodegen 2.1.0
• eslint 8.57.1
• eslint-config-prettier 9.1.0
• eslint-import-resolver-babel-module 5.3.2
• eslint-plugin-chai-expect 3.1.0
• eslint-plugin-eslint-plugin 5.5.1
• eslint-plugin-import 2.31.0
• eslint-plugin-jasmine 4.2.2
• eslint-plugin-jsdoc 48.11.0
• eslint-plugin-local 4.2.2
• eslint-plugin-module-resolver 1.5.0
• eslint-plugin-prettier 5.2.1
• eslint-plugin-react 7.37.1
• eslint-plugin-react-hooks 4.6.2
• eslint-plugin-sort-destructure-keys 1.6.0
• esprima 4.0.1
• event-stream 4.0.1
• events 3.3.0
• express 4.20.0
• fast-glob 3.3.2
• fetch-mock 9.11.0
• formidable 3.5.1
• fs-extra 11.2.0
• gulp-connect 5.7.0
• html-minifier 4.0.0
• ignore 5.3.1
• istanbul-middleware 0.2.2
• jest-progress-bar-reporter 1.0.25
• jest-silent-reporter 0.6.0
• jison 0.4.18
• jsdom 24.1.0
• json-stable-stringify 1.1.1
• json5 2.2.3
• jsonminify 0.4.2
• karma 6.4.3
• karma-chrome-launcher 3.2.0
• karma-coverage-istanbul-reporter 3.0.3
• karma-esbuild-up 3.0.0
• karma-firefox-launcher 2.1.3
• karma-fixture 0.2.6
• karma-html2js-preprocessor 1.1.0
• karma-junit-reporter 2.0.1
• karma-mocha 2.0.1
• karma-mocha-reporter 2.2.5
• karma-safarinative-launcher 1.1.0
• karma-source-map-support 1.4.0
• karma-spec-reporter 0.0.36
• karma-structured-json-reporter 1.0.1
• klaw 4.1.0
• kleur 4.1.5
• list-imports-exports 0.1.2
• lodash.debounce 4.0.8
• markdown-link-check 3.12.2
• markdown-toc 1.2.0
• minimatch 9.0.5
• minimist 1.2.8
• mocha 10.6.0
• mocha-junit-reporter 2.2.1
• mocha-silent-reporter 1.0.0
• morgan 1.10.0
• multer 1.4.5-lts.1
• open 8.4.2
• plugin-error 2.0.1
• postcss 8.4.39
• postcss-import 16.1.0
• posthtml 0.16.6
• prettier 3.3.3
• react 17.0.2
• react-dom 17.0.2
• rocambole 0.7.0
• semver 7.6.2
• sinon 11.1.2
• sinon-chai 3.7.0
• stream-browserify 3.0.0
• sync-rpc 1.3.6
• tar 6.2.1
• tempy 1.0.1
• terser 5.14.2
• traverse 0.6.9
• typescript 5.5.3
• util 0.12.5

third_party/amp-toolbox-cache-url/package.json

• punycode 2.3.1
• url-parse 1.5.10
• @ampproject/rollup-plugin-closure-compiler 0.27.0
• eslint 9.13.0
• eslint-config-google 0.14.0
• jasmine 5.4.0
• karma 6.4.4
• karma-chrome-launcher 3.2.0
• karma-jasmine 5.1.0
• npm-run-all2 6.2.4
• rollup 4.24.0
• rollup-plugin-commonjs 10.1.0
• rollup-plugin-filesize 10.0.0
• rollup-plugin-ignore 1.0.10
• rollup-plugin-json 4.0.0
• rollup-plugin-node-builtins 2.1.2
• @rollup/plugin-node-resolve 15.3.0
• rollup-plugin-serve 3.0.0
• semver 7.6.3

validator/js/gulpjs/package.json

• amphtml-validator 1.0.38
• kleur 4.1.5
• through2 4.0.2
• gulp 4.0.2
• mocha 10.2.0

validator/js/nodejs/package.json

• colors 1.4.0
• commander 12.0.0
• promise 8.3.0
• jasmine 5.1.0

validator/js/webui/package.json

validator/package.json

• google-closure-compiler-java 20230802.0.0
• jasmine 5.1.0
• jasmine-console-reporter 3.1.0

---

• Check this box to trigger a request for Renovate to run again on this repository