📦 Update subpackage devDependencies

[renovate]

This PR contains the following updates:

Package	Update	Type	Change	Package file	Age	Adoption	Passing	Confidence
github/codeql-action	patch	action	v3.26.6 -> v3.26.7	.github/workflows/scorecard.yml
npm-run-all2	patch	devDependencies	6.2.2 -> 6.2.3	third_party/amp-toolbox-cache-url/package.json
rollup (source)	patch	devDependencies	4.21.2 -> 4.21.3	third_party/amp-toolbox-cache-url/package.json
rollup-plugin-json	replacement	devDependencies	4.0.0 -> 4.0.0	third_party/amp-toolbox-cache-url/package.json
step-security/harden-runner	minor	action	v2.9.1 -> v2.10.1	.github/workflows/update-session-issues.yml

See all other Renovate PRs on the Dependency Dashboard

How to resolve breaking changes

This PR may introduce breaking changes that require manual intervention. In such cases, you will need to check out this branch, fix the cause of the breakage, and commit the fix to ensure a green CI build. To check out and update this PR, follow the steps below:

# Check out the PR branch
git checkout -b renovate/subpackage-devdependencies main
git pull https://github.com/ampproject/amphtml.git renovate/subpackage-devdependencies

# Directly make fixes and commit them
amp lint --fix # For lint errors in JS files
amp prettify --fix # For prettier errors in non-JS files
# Edit source code in case of new compiler warnings / errors

# Push the changes to the branch
git push git@github.com:ampproject/amphtml.git renovate/subpackage-devdependencies:renovate/subpackage-devdependencies

This is a special PR that replaces rollup-plugin-json with the community suggested minimal stable replacement version.

---

Release Notes

github/codeql-action (github/codeql-action)

v3.26.7

Compare Source

bcomnes/npm-run-all2 (npm-run-all2)

v6.2.3

Compare Source

Commits

• Merge pull request #​151 from bcomnes/fix-pnpm-agian c43fa2b
• Avoid passing config fields as flags for pnpm dc2d7da

rollup/rollup (rollup)

v4.21.3

Compare Source

2024-09-12

Bug Fixes

• Always respect side effects in left-hand side of optional chain (#​5642)
• Update stack trace for augmented errors to not hide relevant information (#​5640)

Pull Requests

• #​5636: chore(deps): lock file maintenance minor/patch updates (@​renovate[bot])
• #​5637: chore(deps): lock file maintenance (@​renovate[bot])
• #​5640: fix: keep the message of stack up-to-date (@​TrickyPi)
• #​5642: fix: include left-side effect of optional chaining in the end of hasEffectsAsChainElement (@​TrickyPi)

step-security/harden-runner (step-security/harden-runner)

v2.10.1

Compare Source

What's Changed

Release v2.10.1 by @​varunsh-coder in https://github.com/step-security/harden-runner/pull/463
Bug fix: Resolves an issue where DNS resolution of .local domains was failing when using a Kind cluster in a GitHub Actions workflow.

Full Changelog: step-security/harden-runner@v2...v2.10.1

v2.10.0

Compare Source

What's Changed

Release v2.10.0 by @​h0x0er and @​varunsh-coder in https://github.com/step-security/harden-runner/pull/455

ARM Support: Harden-Runner Enterprise tier now supports GitHub-hosted ARM runners. This includes all the features that apply to previously supported GitHub-hosted x64 Linux runners.

Full Changelog: step-security/harden-runner@v2...v2.10.0

---

Configuration

📅 Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.