📦 Update subpackage devDependencies

[renovate]

This PR contains the following updates:

Package	Update	Type	Change	Package file	Age	Adoption	Passing	Confidence
actions/checkout	patch	action	v4.1.4 -> v4.1.5	.github/workflows/update-session-issues.yml
ossf/scorecard-action	patch	action	v2.3.1 -> v2.3.3	.github/workflows/scorecard.yml
rollup-plugin-json	replacement	devDependencies	4.0.0 -> 4.0.0	third_party/amp-toolbox-cache-url/package.json
semver	patch	devDependencies	7.6.1 -> 7.6.2	third_party/amp-toolbox-cache-url/package.json

See all other Renovate PRs on the Dependency Dashboard

How to resolve breaking changes

This PR may introduce breaking changes that require manual intervention. In such cases, you will need to check out this branch, fix the cause of the breakage, and commit the fix to ensure a green CI build. To check out and update this PR, follow the steps below:

# Check out the PR branch
git checkout -b renovate/subpackage-devdependencies main
git pull https://github.com/ampproject/amphtml.git renovate/subpackage-devdependencies

# Directly make fixes and commit them
amp lint --fix # For lint errors in JS files
amp prettify --fix # For prettier errors in non-JS files
# Edit source code in case of new compiler warnings / errors

# Push the changes to the branch
git push [email protected]:ampproject/amphtml.git renovate/subpackage-devdependencies:renovate/subpackage-devdependencies

This is a special PR that replaces rollup-plugin-json with the community suggested minimal stable replacement version.

---

Release Notes

actions/checkout (actions/checkout)

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

v2.3.2

Compare Source

npm/node-semver (semver)

v7.6.2

Compare Source

Bug Fixes

• 6466ba9 #​713 lru: use map.delete() directly (#​713) (@​negezor, @​lukekarrys)

---

Configuration

📅 Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.