📦 Update subpackage devDependencies

[renovate]

This PR contains the following updates:

Package	Update	Type	Change	Package file	Age	Adoption	Passing	Confidence
actions/upload-artifact	patch	action	v4.3.0 -> v4.3.1	.github/workflows/scorecard.yml
cimg/openjdk	patch	docker	21.0-node -> 21.0.2-node	.circleci/config.yml
codecov	patch	orb	4.0.0 -> 4.0.1	.circleci/config.yml
github/codeql-action	minor	action	v3.23.2 -> v3.24.0	.github/workflows/scorecard.yml
rollup-plugin-json	replacement	devDependencies	4.0.0 -> 4.0.0	third_party/amp-toolbox-cache-url/package.json
semver	minor	devDependencies	7.5.4 -> 7.6.0	third_party/amp-toolbox-cache-url/package.json

See all other Renovate PRs on the Dependency Dashboard

How to resolve breaking changes

This PR may introduce breaking changes that require manual intervention. In such cases, you will need to check out this branch, fix the cause of the breakage, and commit the fix to ensure a green CI build. To check out and update this PR, follow the steps below:

# Check out the PR branch
git checkout -b renovate/subpackage-devdependencies main
git pull https://github.com/ampproject/amphtml.git renovate/subpackage-devdependencies

# Directly make fixes and commit them
amp lint --fix # For lint errors in JS files
amp prettify --fix # For prettier errors in non-JS files
# Edit source code in case of new compiler warnings / errors

# Push the changes to the branch
git push git@github.com:ampproject/amphtml.git renovate/subpackage-devdependencies:renovate/subpackage-devdependencies

This is a special PR that replaces rollup-plugin-json with the community suggested minimal stable replacement version.

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v4.3.1

Compare Source

• Bump @​actions/artifacts to latest version to include updated GHES host check

github/codeql-action (github/codeql-action)

v3.24.0

Compare Source

npm/node-semver (semver)

v7.6.0

Compare Source

Features

• a7ab13a #​671 preserve pre-release and build parts of a version on coerce (#​671) (@​madtisa, madtisa, @​wraithgar)

Chores

• 816c7b2 #​667 postinstall for dependabot template-oss PR (@​lukekarrys)
• 0bd24d9 #​667 bump @​npmcli/template-oss from 4.21.1 to 4.21.3 (@​dependabot[bot])
• e521932 #​652 postinstall for dependabot template-oss PR (@​lukekarrys)
• 8873991 #​652 chore: chore: postinstall for dependabot template-oss PR (@​lukekarrys)
• f317dc8 #​652 bump @​npmcli/template-oss from 4.19.0 to 4.21.0 (@​dependabot[bot])
• 7303db1 #​658 add clean() test for build metadata (#​658) (@​jethrodaniel)
• 6240d75 #​656 add missing quotes in README.md (#​656) (@​zyxkad)
• 14d263f #​625 postinstall for dependabot template-oss PR (@​lukekarrys)
• 7c34e1a #​625 bump @​npmcli/template-oss from 4.18.1 to 4.19.0 (@​dependabot[bot])
• 123e0b0 #​622 postinstall for dependabot template-oss PR (@​lukekarrys)
• 737d5e1 #​622 bump @​npmcli/template-oss from 4.18.0 to 4.18.1 (@​dependabot[bot])
• cce6180 #​598 postinstall for dependabot template-oss PR (@​lukekarrys)
• b914a3d #​598 bump @​npmcli/template-oss from 4.17.0 to 4.18.0 (@​dependabot[bot])

---

Configuration

📅 Schedule: Branch creation - "after 12am every weekday" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.