diff --git a/.circleci/config.yml b/.circleci/config.yml
index 024a1670a813..f1ec7a6e5abe 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -2,7 +2,7 @@ version: 2.1
 
 orbs:
   browser-tools: circleci/browser-tools@1.4.8
-  codecov: codecov/codecov@4.1.0
+  codecov: codecov/codecov@4.2.0
   macos: circleci/macos@2.5.2
   node: circleci/node@6.1.0
 
diff --git a/extensions/amp-access/0.1/iframe-api/package.json b/extensions/amp-access/0.1/iframe-api/package.json
index 006d0256d1c5..f4a9ddfda558 100644
--- a/extensions/amp-access/0.1/iframe-api/package.json
+++ b/extensions/amp-access/0.1/iframe-api/package.json
@@ -16,7 +16,7 @@
   "devDependencies": {
     "babel-plugin-external-helpers": "6.22.0",
     "babel-preset-env": "1.7.0",
-    "rollup": "4.22.5",
+    "rollup": "4.23.0",
     "@rollup/plugin-babel": "6.0.4",
     "rollup-plugin-cleanup": "3.2.1"
   }
diff --git a/third_party/amp-toolbox-cache-url/package.json b/third_party/amp-toolbox-cache-url/package.json
index 3b0cb4783e39..0f547a97cd62 100644
--- a/third_party/amp-toolbox-cache-url/package.json
+++ b/third_party/amp-toolbox-cache-url/package.json
@@ -40,7 +40,7 @@
     "karma-chrome-launcher": "3.2.0",
     "karma-jasmine": "5.1.0",
     "npm-run-all2": "6.2.3",
-    "rollup": "4.22.5",
+    "rollup": "4.23.0",
     "rollup-plugin-commonjs": "10.1.0",
     "rollup-plugin-filesize": "10.0.0",
     "rollup-plugin-ignore": "1.0.10",