📦 Update subpackage devDependencies

[renovate]

This PR contains the following updates:

Package	Update	Type	Change	Package file	Age	Adoption	Passing	Confidence
github/codeql-action	minor	action	v3.24.10 -> v3.25.0	.github/workflows/scorecard.yml
rollup (source)	patch	devDependencies	4.14.1 -> 4.14.3	third_party/amp-toolbox-cache-url/package.json
rollup-plugin-json	replacement	devDependencies	4.0.0 -> 4.0.0	third_party/amp-toolbox-cache-url/package.json

See all other Renovate PRs on the Dependency Dashboard

How to resolve breaking changes

This PR may introduce breaking changes that require manual intervention. In such cases, you will need to check out this branch, fix the cause of the breakage, and commit the fix to ensure a green CI build. To check out and update this PR, follow the steps below:

# Check out the PR branch
git checkout -b renovate/subpackage-devdependencies main
git pull https://github.com/ampproject/amphtml.git renovate/subpackage-devdependencies

# Directly make fixes and commit them
amp lint --fix # For lint errors in JS files
amp prettify --fix # For prettier errors in non-JS files
# Edit source code in case of new compiler warnings / errors

# Push the changes to the branch
git push git@github.com:ampproject/amphtml.git renovate/subpackage-devdependencies:renovate/subpackage-devdependencies

This is a special PR that replaces rollup-plugin-json with the community suggested minimal stable replacement version.

---

Release Notes

github/codeql-action (github/codeql-action)

v3.25.0

Compare Source

rollup/rollup (rollup)

v4.14.3

Compare Source

2024-04-15

Bug Fixes

• Support Alpine Linux and other MUSL builds on ARM (#​5471)

Pull Requests

• #​5471: Add linux arm musl build (@​sapphi-red)

v4.14.2

Compare Source

2024-04-12

Bug Fixes

• Do not create invalid code when reexporting both a namespace and the default export from that namespace (#​5466)
• Ensure ppc64 platform is properly detected (#​5460)

Pull Requests

• #​5456: Add high-level architecture documentation (@​lukastaegert)
• #​5460: Fix ppc64le target (@​lukastaegert)
• #​5463: chore: tweak the comment about files should not be edited (@​TrickyPi)
• #​5466: Ensure reexported namespaces do not prevent creation of default export helpers (@​lukastaegert)
• #​5468: chore(deps): update dependency eslint-plugin-unicorn to v52 (@​renovate[bot], @​lukastaegert)
• #​5469: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​5470: chore(deps): lock file maintenance (@​renovate[bot])

---

Configuration

📅 Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.