📦 Update subpackage devDependencies

[renovate]

This PR contains the following updates:

Package	Update	Type	Change	Package file	Age	Adoption	Passing	Confidence
actions/dependency-review-action	patch	action	v3.0.6 -> v3.0.7	.github/workflows/dependency-review.yml
rollup (source)	minor	devDependencies	3.27.2 -> 3.28.0	third_party/amp-toolbox-cache-url/package.json
rollup-plugin-babel	replacement	devDependencies	4.4.0 -> 5.0.0	extensions/amp-access/0.1/iframe-api/package.json
step-security/harden-runner	patch	action	v2.5.0 -> v2.5.1	.github/workflows/update-session-issues.yml

See all other Renovate PRs on the Dependency Dashboard

How to resolve breaking changes

This PR may introduce breaking changes that require manual intervention. In such cases, you will need to check out this branch, fix the cause of the breakage, and commit the fix to ensure a green CI build. To check out and update this PR, follow the steps below:

# Check out the PR branch
git checkout -b renovate/subpackage-devdependencies main
git pull https://github.com/ampproject/amphtml.git renovate/subpackage-devdependencies

# Directly make fixes and commit them
amp lint --fix # For lint errors in JS files
amp prettify --fix # For prettier errors in non-JS files
# Edit source code in case of new compiler warnings / errors

# Push the changes to the branch
git push git@github.com:ampproject/amphtml.git renovate/subpackage-devdependencies:renovate/subpackage-devdependencies

This is a special PR that replaces rollup-plugin-babel with the community suggested minimal stable replacement version.

---

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v3.0.7: 3.0.7

Compare Source

What's Changed

• Make GHES support / setup more clear by @​rajbos in https://github.com/actions/dependency-review-action/pull/534
• Add an option to deny packages or groups of packages by @​adrienpessu in https://github.com/actions/dependency-review-action/pull/544

New Contributors

• @​rajbos made their first contribution in https://github.com/actions/dependency-review-action/pull/534
• @​adrienpessu made their first contribution in https://github.com/actions/dependency-review-action/pull/544

Full Changelog: actions/dependency-review-action@v3...v3.0.7

rollup/rollup (rollup)

v3.28.0

Compare Source

2023-08-09

Features

• Add a new property preliminaryFileName to generated chunks containing the file name placeholder (#​5086)
• Improve performance of sourcemap generation by lazily decoding mappings (#​5087)

Bug Fixes

• Make the code property of rendered modules in the output readonly (#​5091)

Pull Requests

• #​5086: feat: add preliminaryFileName to OutputChunk (@​lsdsjy)
• #​5087: perf(sourcemaps): add back lazy sourcemap decode and handling nullish mappings (@​thebanjomatic)
• #​5091: fix: the type of RenderedModule.code is readonly (@​TrickyPi)

step-security/harden-runner (step-security/harden-runner)

v2.5.1

Compare Source

What's Changed

• Updated default allowed endpoints to include *.actions.githubusercontent.com. GitHub Actions recently started making calls to additional sub-domains for this domain. Please update to this latest version of harden-runner to allow these new endpoints.
• Update README.md by @​varunsh-coder in https://github.com/step-security/harden-runner/pull/326
• Bump step-security/harden-runner from 2.4.1 to 2.5.0 by @​dependabot in https://github.com/step-security/harden-runner/pull/327

Full Changelog: step-security/harden-runner@v2...v2.5.1

---

Configuration

📅 Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[ampprojectbot]

Warning: disparity between this PR Percy build and its main build

The Percy build for this PR was approved (either manually by a member of the AMP team, or automatically if there were no visual diffs). However, during a continuous integration step we generated another Percy build using the commit on the main branch that this PR was merged into, and there appears to be a mismatch between the two.

This is possibly an indication of an issue with this pull request, but could also be the result of flakiness. Please inspect the two builds < This PR's Percy build / main commit's Percy build > and determine further action:

• If the disparity appears to be caused by this PR, please create an bug report or send out a new PR to fix
• If the disparity appears to be a flake, please @-mention ampproject/wg-approvers in a comment
• If there is no disparity and this comment was created by mistake, please @-mention ampproject/wg-infra
• If unsure, @-mention ampproject/wg-approvers