oeng/matrix-alertmanager

Watch

Fork 0

Update dependency sinon to v22 #30

Merged

jessebot merged 1 commit from renovate/sinon-22.x into main

2026-11-12 21:43:50 +00:00

Owentje commented

2026-11-12 21:34:26 +00:00

Owner

This PR contains the following updates:

Package	Change	Age	Confidence
sinon (source)	`^18.0.0` → `^22.0.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

sinonjs/sinon (sinon)

`v22.1.0`

Compare Source

d36e921b
fix: let returns override returnsArg (王胜)

Signed-off-by: 王胜 <2318857637@qq.com>
40c4caa0
fix: align restoreObject docs test with idempotent behavior (#2745) (Julia Miller)

restoreObject was made idempotent in #2737 — it no longer throws
for objects with no restorable methods. Updates the docs page
and its corresponding test to reflect this.
a68dac19
fix: throw a clear error when throwArg index equals the argument count (#2743) (spokodev)
- fix: throw a clear error when throwArg index equals the argument count
spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it
with pos equal to the number of recorded arguments slipped past the guard
and reached throw this.args[pos], throwing undefined instead of the
intended TypeError. A thrown undefined cannot be inspected as an Error and
is reported by test frameworks as no exception thrown.

Use >= to match ensureArgs in behavior.js and the sibling callArg helpers,
which already reject an out-of-range index with a clear error.
9ea504e3
feat: make sinon.restoreObject idempotent (#2737) (Ilia Choly)

Passing an object with no live fakes to restoreObject now restores
nothing instead of throwing, giving it symmetry with sinon.restore()
and sandbox.restore(). The strict "found no methods" check is retained
for spy(object) and stub(object), which now use a dedicated
walkObjectStrict export, while restoreObject uses the loose walkObject.
Passing a falsy value still throws.

Fixes #2736
4db4feff
fix: preserve fake undefined argument validation (Vishal Kumar Singh)
755a40d7
fix: isolate callId counter per sandbox for parallel test support (Vishal Kumar Singh)

The global callId counter in proxy-invoke.js caused calledImmediatelyBefore
and calledImmediatelyAfter to fail when tests run in parallel with separate
sandboxes. Each sandbox now maintains its own callId counter, passed through
the spy/stub/fake creation chain via a context object.

Fixes #2472

Released by Morgan Roderick on 2026-07-20.

`v22.0.0`

Compare Source

ed911df5
Update Ruby gems (Carl-Erik Kopseng)
75a1e5b8
Update to Node 26 (Carl-Erik Kopseng)
197d6608
Update documentation on faking timers to reflect the current state of fake-timers (Carl-Erik Kopseng)
c5ddf80b
Update fake-timers@15.4: includes new Temporal API (Carl-Erik Kopseng)
f4ab02f6
Update updatable packages (Carl-Erik Kopseng)
0536afc8
Quality: Global mutable call id can grow unbounded across long-lived processes (#2691) (tuanaiseo)
- refactor: global mutable call id can grow unbounded across l
callId is module-scoped and incremented on every invocation. In long-running test runners or embedded usage, this can grow indefinitely and eventually lose integer precision semantics for strict ordering comparisons.

Affected files: proxy-invoke.js

Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com
- Wrap around for all values that are too high
Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com
Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com
f4f7d93b
Perform additional cleanup when calling callThrough() (#2670) (Cyrille)
6199e9e4
improve GitHubworkflows by introducing zizmor for monitoring (#2686) (Till!)
- fix(workflows): fetch-depth is for actions/checkout
- chore(workflows): update
- pin all actions to precise commits
- avoid credential leakage from actions/checkout
- group action updates going forward
- add zimor config to ignore "secrets outside env"
- add job to keep validating workflows
f7476b59
Use path.normalize() for path normalization (Carl-Erik Kopseng)
2c975393
fix: make build and node test scripts cross-platform (laplace young)
a7692917
fix: isolate walk state from Object prototype (laplace young)
66df977a
Fix sinon.restore() cascade-restoring sub-sandboxes (#2704) (Charlie Leitheiser)
The ESM port of createApi (#2683, shipped in 21.1.0) replaced createSandbox: createSandbox with a wrapper that pushes every newly-created sandbox into the root sandbox's fake collection:
```
createSandbox: function createSandbox(config) {
    const s = createConfiguredSandbox(config);
    sandbox.getFakes().push(s);
    return s;
}
```
Sandbox#restore then walks that collection and calls .restore() on each entry. Because a sub-sandbox is itself an entry, every top-level sinon.restore() cascades into every sub-sandbox and undoes its stubs/timers/etc. — defeating the whole point of having an isolated sub-sandbox. The same cascade hits resetHistory and
verifyAndRestore. This is the regression reported in #2701.

Restore the pre-21.1 behaviour: hand the root API a direct reference to createConfiguredSandbox. Sub-sandboxes are now isolated; only subSandbox.restore() (or verifyAndRestore) clears their fakes.

Also flip the four sandbox tests that were locking in the buggy cascade: they now assert the parent's restore/resetHistory leaves the child untouched, with an explicit child-side cleanup at the
end.

Closes #2701
f0bd6e1b
fix: exclude proto from walk() (#2699) (Kevin Locke)
__proto__ is a special property to access an object's prototype. It
has many pitfalls:
- Setting it to an object value changes an object's prototype, which is
  generally discouraged and may be unexpected by the iterator callback.
- Setting it to a non-object value does nothing (meaning seen[k] = true has no effect).
- When Node.js is run with the --disable-proto=throw option, getting
  or setting __proto__ causes an exception with code
  ERR_PROTO_ACCESS to be thrown.
Additionally, since this property (and all properties of
Object.prototype) are currently unused in this project by consumers of
walk(), it is both safe and preferable to exclude.

Fixes: #2695

Signed-off-by: Kevin Locke kevin@kevinlocke.name
1f8afd50
chore: add context7.json for ownership confirmation (Morgan Roderick)

Released by Carl-Erik Kopseng on 2026-05-05.

`v21.1.2`

Compare Source

53817f7d
Upgrade to ESLint 10 and new shared config (#2696) (Carl-Erik Kopseng)
- Upgrade to ESLint 10 and new shared config
- Update deps
d7a682e0
fix: move npm-run-all to devDeps (#2694) (Avi Vahl)

used only during dev, and caused a considerable dep count jump downstream
5b8720ec
use latest shared eslint-config (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-11.

`v21.1.1`

Compare Source

3c8b023b
Update deps (Carl-Erik Kopseng)
2eabf5da
fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693) (Carl-Erik Kopseng)
- fix(#2692): Remove ESM-only supports-color as it breaks CJS exports

Released by Carl-Erik Kopseng on 2026-04-10.

`v21.1.0`

Compare Source

0a5526c5
updated deps (Carl-Erik Kopseng)
5262204f
fix: build artifacts before running bundled tests (Carl-Erik Kopseng)
819bb64b
Migration to ECMAScript modules (ESM) (#2683) (Carl-Erik Kopseng)
This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating ./lib
- Modern ignores 😁
- test: add distribution harness
- test: verify packed cjs and esm entrypoints
- test: lock distribution api manifest
- test: smoke test built pkg artifacts
- docs: require contract tests for package migration
- test: guard esm migration regressions
- docs: require contract gate for esm migration
- build: generate cjs lib from esm source entries
- refactor: port root api surface to esm
- build: clean port of root api to esm
- docs: include implementation plans
- fix: align lint and smoke tests with esm migration
- refactor: complete esm port of all core components
- refactor: finalize esm migration with sandbox and naming fixes
- fix: finish esm migration stabilization
- chore: stop tracking generated lib output
- remove plans
- prettier
- linting
- fix: make distribution tests self-contained
- fix: build before coverage test bundle
- refactor: move simple unit tests to src
- refactor: flatten test and coverage script chains
- refactor: use parallel mocha for node tests
- test: restore fake timers cleanup
- refactor: remove node test runner script
- remove unneccessary clutter
- fix: make mocha watch use polling
- simplify
- Increase coverage
- Fix coverage by removing duplicated tests
These were covering the generated lib/ folder.
- Move shared util into esm dir
- fix package dep issues
- Adjust coverage
- Upgrade all dependencies
npx npm-check-updates -u
cd2bf5a3
Use newer endpoint (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-09.

`v21.0.3`

Compare Source

0494251b
fix(#2678): upgrade samsam to fix buffer comparisons (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-16.

`v21.0.2`

Compare Source

024321c4
fix: skip Node specific tests in browser env (Carl-Erik Kopseng)
b836fccb
fix: js-yaml breaking change from v3 to v4 (Carl-Erik Kopseng)
ebf0c431
docs: add how-to article for stubbing ES module imports (#1832) (#2676) (Eduard Barrera)
- docs: add how-to article for stubbing ES module imports with esm package
Adds a comprehensive How-To guide that addresses issue #1832, documenting
how to configure Node.js to allow Sinon stubs to work with ES modules.
- Explains why ES module namespace bindings are immutable by spec
- Shows how to use the 'esm' npm package with mutableNamespace: true
- Provides a complete working example with project layout, package.json,
  loader file, source modules, and a full test suite
- Documents limitations (destructured imports, non-standard behavior)
- Replaces the TODO comment in link-seams-commonjs.md with a cross-reference
Closes #1832
Co-authored-by: Eduard Barrera eduardbar@users.noreply.github.com
Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com
ebcd506c
Fix spies not being reset properly (#2673) (simon-id)
3beab2ba
Make doc tests pass with new jQuery (Carl-Erik Kopseng)
766715c6
build: reduce transitive audit findings (Carl-Erik Kopseng)
92aaf5c9
build: upgrade eslint config and replace dependency-check (Carl-Erik Kopseng)
c6aaa871
chore: ignore project worktrees (Carl-Erik Kopseng)
ef387e8e
Upgrade most deps (Carl-Erik Kopseng)
3cf4e77d
docs: improve writing of documentation (#2675) (Eduardo de la Cruz Palacios)
6349032f
Check login status before publishing steps are performed (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-04.

`v21.0.1`

Compare Source

456a65c2
Update dependencies - except @sinonjs/samsam (#2669) (Carl-Erik Kopseng)
f04f3eb1
Fix issue 2618 - Remove browserify in favor of esbuild (#2661) (Artur Parkhisenko)
48b69df2
fix(docs): remove assert.failException from documentation (#2666) (Steffen Schroeder)
13b27ccc
Fix sandbox restore not handling stubbed functions (#2667) (thamion)
ae9e09ac
Update compatibility target to ES2023 (Carl-Erik Kopseng)

Updated compatibility target from ES2017 to ES2023 and clarified the note on breaking changes.
26055043
Improve error message for immutable descriptors (#2664) (Stuart Dotson)
80fa9a5b
Also mirror the calledOnceWith assertion (#2660) (Benedikt Meurer)

Released by Carl-Erik Kopseng on 2025-12-19.

`v21.0.0`

Compare Source

fd10f13f
chore!: remove assert.failException property (#2659) (Morgan Roderick)

BREAKING CHANGE: this removes assert.failException from the API

Released by Morgan Roderick on 2025-06-13.

`v20.0.0`

Compare Source

b6daed26
chore!: remove usingPromise (Morgan Roderick)

Everyone should be using native promises by now, or should know how to stub natives
95d4b8fc
chore!: remove fakeXMLHttpRequest and fakeServer (Morgan Roderick)

BREAKING CHANGE: remove fakeXMLHttpRequest and fakeServer from the API

Released by Morgan Roderick on 2025-03-24.

`v19.0.5`

Compare Source

67d19ff0
chore: deprecate usingPromise (#2651) (Morgan Roderick)
598dddb6
chore: deprecate useFakeXMLHttpRequest and useFakeServer (Morgan Roderick)

Released by Morgan Roderick on 2025-03-23.

`v19.0.4`

Compare Source

The release script failed half-way in 19.0.3, so re-releasing.

da67311a
Revert "Add version 19.0.3 to releases" (Carl-Erik Kopseng)
84d5c82a
Add version 19.0.3 to releases (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2025-03-19.

`v19.0.3`

Compare Source

Basically just documentation updates

1f1d3706
Verifying links procedure (Carl-Erik Kopseng)
37623efc
Catch latest two missing redirects (Carl-Erik Kopseng)
2404a45f
Ignore ancient deadlinks to Sinon child projects in previous releases (Carl-Erik Kopseng)
fba6f877
Ignore historic links in changelog (Carl-Erik Kopseng)
e3950d9b
Fix external link (Carl-Erik Kopseng)
0be40825
Fix the missing redirects to the migration guide (Carl-Erik Kopseng)
108fbca0
Fix internal ../assertions link in source (Carl-Erik Kopseng)
bb10e53a
Fix spy-call reference in source (Carl-Erik Kopseng)
ef582e31
Remove bash-ism from Makefile (use POSIX) (Carl-Erik Kopseng)
7af1d235
chore: remove .unimportedrc.json (Morgan Roderick)
dfcad710
chore: fix codecov upload (Morgan Roderick)
We are seeing errors uploading coverage reports to codecov:
```
Rate limit reached. Please upload with the Codecov repository upload token to resolve issue
```
I've added a repository token, as instructed in https://docs.codecov.com/docs/adding-the-codecov-token.

This changeset should fix the upload issue.
0ca2e49e
fix: browser-test job fails in ubuntu-latest (Morgan Roderick)
e9eb2eb2
chore: remove unused unused job (Morgan Roderick)

This crucial part of this workflow was removed in
278e667, we should have removed the entire job.
278e667e
chore: remove unimported (Morgan Roderick)

The repository has been archived. See https://github.com/smeijer/unimported
9e30835b
npm audit (Morgan Roderick)
a74301cf
chore: remove RunKit (Morgan Roderick)

This service is dead.
80bc1d96
Fix out-of-date fake-timers docs (#2628) (Carl-Erik Kopseng)
- Fix documentation issue for fake-timers mentioned in #2625
The docs were out of sync with the fake-timers docs.
- Update dependencies before new patch version
527568cc
Bump rexml from 3.3.7 to 3.3.9 (#2626) (dependabot[bot])
Bumps rexml from 3.3.7 to 3.3.9.
updated-dependencies:
- dependency-name: rexml
  
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] support@github.com

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ed029725
Bump webrick from 1.8.1 to 1.8.2 (#2623) (dependabot[bot])
Bumps webrick from 1.8.1 to 1.8.2.
- Release notes
- Commits
updated-dependencies:
- dependency-name: webrick
  
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] support@github.com

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Released by Carl-Erik Kopseng on 2025-03-19.

`v19.0.2`

Compare Source

4eb4c4bc
Use fix 13.0.2 version of fake-timers to get Date to pass instanceof checks (Carl-Erik Kopseng)
a5b03db3
Add links to code that is affected by the breaking changes (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2024-09-13.

`v19.0.1`

Compare Source

037ec2d2
Update migration docs (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2024-09-13.

`v19.0.0`

Compare Source

3534ab4f
Bump samsam and nise to latest versions (#2617) (Carl-Erik Kopseng)

Ensures consistency and less breakage when there are "circular" dependencies.
912c568d
upgrade fake timers and others (#2612) (Carl-Erik Kopseng)
- Upgrade dependencies (includes breaking API in Fake Timers)
- fake-timers: no longer creating dates using the original Date class, but a subclass (proxy)
9715798e
Use newer @mochify/* packages (#2609) (Carl-Erik Kopseng)

Co-authored-by: Maximilian Antoni mail@maxantoni.de

Released by Carl-Erik Kopseng on 2024-09-13.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [sinon](https://sinonjs.org/) ([source](https://github.com/sinonjs/sinon)) | [`^18.0.0` → `^22.0.0`](https://renovatebot.com/diffs/npm/sinon/18.0.1/22.1.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/sinon/22.1.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sinon/18.0.1/22.1.0?slim=true) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/24) for more information. --- ### Release Notes <details> <summary>sinonjs/sinon (sinon)</summary> ### [`v22.1.0`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2210) [Compare Source](https://github.com/sinonjs/sinon/compare/v22.0.0...v22.1.0) - [`d36e921b`](https://github.com/sinonjs/sinon/commit/d36e921baf382598cfa9323cb672c87ce85e2ad5) fix: let returns override returnsArg (王胜) > Signed-off-by: 王胜 <2318857637@qq.com> - [`40c4caa0`](https://github.com/sinonjs/sinon/commit/40c4caa0f47b8fb184319a8873bac616c3eef871) fix: align restoreObject docs test with idempotent behavior ([#2745](https://github.com/sinonjs/sinon/issues/2745)) (Julia Miller) > restoreObject was made idempotent in [#2737](https://github.com/sinonjs/sinon/issues/2737) — it no longer throws > for objects with no restorable methods. Updates the docs page > and its corresponding test to reflect this. - [`a68dac19`](https://github.com/sinonjs/sinon/commit/a68dac198c6d0d9ce797dc9178d0c57ea6455aab) fix: throw a clear error when throwArg index equals the argument count ([#2743](https://github.com/sinonjs/sinon/issues/2743)) (spokodev) > - fix: throw a clear error when throwArg index equals the argument count > > spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it > with pos equal to the number of recorded arguments slipped past the guard > and reached throw this.args\[pos], throwing undefined instead of the > intended TypeError. A thrown undefined cannot be inspected as an Error and > is reported by test frameworks as no exception thrown. > > Use >= to match ensureArgs in behavior.js and the sibling callArg helpers, > which already reject an out-of-range index with a clear error. - [`9ea504e3`](https://github.com/sinonjs/sinon/commit/9ea504e317e9a27c376a9740bc04ec75f699ed30) feat: make sinon.restoreObject idempotent ([#2737](https://github.com/sinonjs/sinon/issues/2737)) (Ilia Choly) > Passing an object with no live fakes to restoreObject now restores > nothing instead of throwing, giving it symmetry with sinon.restore() > and sandbox.restore(). The strict "found no methods" check is retained > for spy(object) and stub(object), which now use a dedicated > walkObjectStrict export, while restoreObject uses the loose walkObject. > Passing a falsy value still throws. > > Fixes [#2736](https://github.com/sinonjs/sinon/issues/2736) - [`4db4feff`](https://github.com/sinonjs/sinon/commit/4db4feffe19d3f117d46b9015b4890187a282cf0) fix: preserve fake undefined argument validation (Vishal Kumar Singh) - [`755a40d7`](https://github.com/sinonjs/sinon/commit/755a40d772b02a7ba7e9a1d465a5f26d486ebbdb) fix: isolate callId counter per sandbox for parallel test support (Vishal Kumar Singh) > The global callId counter in proxy-invoke.js caused calledImmediatelyBefore > and calledImmediatelyAfter to fail when tests run in parallel with separate > sandboxes. Each sandbox now maintains its own callId counter, passed through > the spy/stub/fake creation chain via a context object. > > Fixes [#2472](https://github.com/sinonjs/sinon/issues/2472) *Released by Morgan Roderick on 2026-07-20.* ### [`v22.0.0`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2200) [Compare Source](https://github.com/sinonjs/sinon/compare/v21.1.2...v22.0.0) - [`ed911df5`](https://github.com/sinonjs/sinon/commit/ed911df50d2967d52f9ca341f1f15c8b4def8878) Update Ruby gems (Carl-Erik Kopseng) - [`75a1e5b8`](https://github.com/sinonjs/sinon/commit/75a1e5b80d9aab698fadd8bb8c30998f109e1841) Update to Node 26 (Carl-Erik Kopseng) - [`197d6608`](https://github.com/sinonjs/sinon/commit/197d660899fc8f9ac523e8ad9712f600c72cdbd2) Update documentation on faking timers to reflect the current state of fake-timers (Carl-Erik Kopseng) - [`c5ddf80b`](https://github.com/sinonjs/sinon/commit/c5ddf80bd8653ad9a3e539103a3c801e7bec112c) Update fake-timers\@15.4: includes new Temporal API (Carl-Erik Kopseng) - [`f4ab02f6`](https://github.com/sinonjs/sinon/commit/f4ab02f6b78d4602401369d5797bbbb2a1110c7e) Update updatable packages (Carl-Erik Kopseng) - [`0536afc8`](https://github.com/sinonjs/sinon/commit/0536afc8fedd1db7dbc3557a2d162d1d8a1d12aa) Quality: Global mutable call id can grow unbounded across long-lived processes ([#2691](https://github.com/sinonjs/sinon/issues/2691)) (tuanaiseo) > - refactor: global mutable call id can grow unbounded across l > > `callId` is module-scoped and incremented on every invocation. In long-running test runners or embedded usage, this can grow indefinitely and eventually lose integer precision semantics for strict ordering comparisons. > > Affected files: proxy-invoke.js > > Signed-off-by: tuanaiseo <221258316+tuanaiseo@users.noreply.github.com> > > - Wrap around for all values that are too high > > *** > > Signed-off-by: tuanaiseo <221258316+tuanaiseo@users.noreply.github.com> > Co-authored-by: Carl-Erik Kopseng <carlerik@gmail.com> - [`f4f7d93b`](https://github.com/sinonjs/sinon/commit/f4f7d93bc6bd664400e74d153fd5812dae84d222) Perform additional cleanup when calling callThrough() ([#2670](https://github.com/sinonjs/sinon/issues/2670)) (Cyrille) - [`6199e9e4`](https://github.com/sinonjs/sinon/commit/6199e9e43db4440ea350961e2ef204236ca4ca4f) improve GitHubworkflows by introducing zizmor for monitoring ([#2686](https://github.com/sinonjs/sinon/issues/2686)) (Till!) > - fix(workflows): fetch-depth is for actions/checkout > > - chore(workflows): update > > * pin all actions to precise commits > * avoid credential leakage from actions/checkout > * group action updates going forward > * add zimor config to ignore "secrets outside env" > * add job to keep validating workflows - [`f7476b59`](https://github.com/sinonjs/sinon/commit/f7476b59deda4893f9fa5b1e1dcfa74a059d4d4e) Use path.normalize() for path normalization (Carl-Erik Kopseng) - [`2c975393`](https://github.com/sinonjs/sinon/commit/2c975393f19b33c611cf7c4221f585cdffa3a619) fix: make build and node test scripts cross-platform (laplace young) - [`a7692917`](https://github.com/sinonjs/sinon/commit/a76929179340333cb7e9d55d8c00791683d674a5) fix: isolate walk state from Object prototype (laplace young) - [`66df977a`](https://github.com/sinonjs/sinon/commit/66df977a5cb7139de221512f80ca36504e8eb671) Fix sinon.restore() cascade-restoring sub-sandboxes ([#2704](https://github.com/sinonjs/sinon/issues/2704)) (Charlie Leitheiser) > The ESM port of `createApi` ([#2683](https://github.com/sinonjs/sinon/issues/2683), shipped in 21.1.0) replaced `createSandbox: createSandbox` with a wrapper that pushes every newly-created sandbox into the root sandbox's fake collection: > > ``` > createSandbox: function createSandbox(config) { > const s = createConfiguredSandbox(config); > sandbox.getFakes().push(s); > return s; > } > ``` > > `Sandbox#restore` then walks that collection and calls `.restore()` on each entry. Because a sub-sandbox is itself an entry, every top-level `sinon.restore()` cascades into every sub-sandbox and undoes its stubs/timers/etc. — defeating the whole point of having an isolated sub-sandbox. The same cascade hits `resetHistory` and > `verifyAndRestore`. This is the regression reported in [#2701](https://github.com/sinonjs/sinon/issues/2701). > > Restore the pre-21.1 behaviour: hand the root API a direct reference to `createConfiguredSandbox`. Sub-sandboxes are now isolated; only `subSandbox.restore()` (or `verifyAndRestore`) clears their fakes. > > Also flip the four sandbox tests that were locking in the buggy cascade: they now assert the parent's restore/resetHistory leaves the child untouched, with an explicit child-side cleanup at the > end. > > Closes [#2701](https://github.com/sinonjs/sinon/issues/2701) - [`f0bd6e1b`](https://github.com/sinonjs/sinon/commit/f0bd6e1b67155804f04e4b00623c4fb1d2549f97) fix: exclude **proto** from walk() ([#2699](https://github.com/sinonjs/sinon/issues/2699)) (Kevin Locke) > [`__proto__`] is a special property to access an object's prototype. It > has many pitfalls: > > - Setting it to an object value changes an object's prototype, which is > generally discouraged and may be unexpected by the `iterator` callback. > - Setting it to a non-object value does nothing (meaning `seen[k] = > true` has no effect). > - When Node.js is run with the [`--disable-proto=throw`] option, getting > or setting `__proto__` causes an exception with code > `ERR_PROTO_ACCESS` to be thrown. > > Additionally, since this property (and all properties of > `Object.prototype`) are currently unused in this project by consumers of > `walk()`, it is both safe and preferable to exclude. > > [`__proto__`]: https://tc39.es/ecma262/multipage/fundamental-objects.html#sec-object.prototype.__proto__ > > [`--disable-proto=throw`]: https://nodejs.org/api/cli.html#disable-protomode > > Fixes: [#2695](https://github.com/sinonjs/sinon/issues/2695) > > Signed-off-by: Kevin Locke <kevin@kevinlocke.name> - [`1f8afd50`](https://github.com/sinonjs/sinon/commit/1f8afd50683aac84dbd501676399f39ae2b942bd) chore: add context7.json for ownership confirmation (Morgan Roderick) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2026-05-05.* ### [`v21.1.2`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2112) [Compare Source](https://github.com/sinonjs/sinon/compare/v21.1.1...v21.1.2) - [`53817f7d`](https://github.com/sinonjs/sinon/commit/53817f7d3ab9447001ae7e622361c2f148170965) Upgrade to ESLint 10 and new shared config ([#2696](https://github.com/sinonjs/sinon/issues/2696)) (Carl-Erik Kopseng) > - Upgrade to ESLint 10 and new shared config > - Update deps - [`d7a682e0`](https://github.com/sinonjs/sinon/commit/d7a682e0a8e8db3111c3e7f8cb238b2c7dfddb0e) fix: move npm-run-all to devDeps ([#2694](https://github.com/sinonjs/sinon/issues/2694)) (Avi Vahl) > used only during dev, and caused a considerable dep count jump downstream - [`5b8720ec`](https://github.com/sinonjs/sinon/commit/5b8720ec579787f4830fcb40cf97c9d2744ade74) use latest shared eslint-config (Carl-Erik Kopseng) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2026-04-11.* ### [`v21.1.1`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2111) [Compare Source](https://github.com/sinonjs/sinon/compare/v21.1.0...v21.1.1) - [`3c8b023b`](https://github.com/sinonjs/sinon/commit/3c8b023b942b7cbd235b3804e81a36293f1c1b1a) Update deps (Carl-Erik Kopseng) - [`2eabf5da`](https://github.com/sinonjs/sinon/commit/2eabf5dabdc242dd1cba1d6f0ffdbbfdf026da2b) fix([#2692](https://github.com/sinonjs/sinon/issues/2692)): Remove ESM-only supports-color as it breaks CJS exports ([#2693](https://github.com/sinonjs/sinon/issues/2693)) (Carl-Erik Kopseng) > - fix([#2692](https://github.com/sinonjs/sinon/issues/2692)): Remove ESM-only supports-color as it breaks CJS exports *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2026-04-10.* ### [`v21.1.0`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2110) [Compare Source](https://github.com/sinonjs/sinon/compare/v21.0.3...v21.1.0) - [`0a5526c5`](https://github.com/sinonjs/sinon/commit/0a5526c54b44885cd0e85fb3c42218e75caa93ee) updated deps (Carl-Erik Kopseng) - [`5262204f`](https://github.com/sinonjs/sinon/commit/5262204f018503e7f22e82f53cc776edda38d88e) fix: build artifacts before running bundled tests (Carl-Erik Kopseng) - [`819bb64b`](https://github.com/sinonjs/sinon/commit/819bb64b5b83e4811fabeaed1d21cef677647c34) Migration to ECMAScript modules (ESM) ([#2683](https://github.com/sinonjs/sinon/issues/2683)) (Carl-Erik Kopseng) > This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating `./lib` > > - Modern ignores 😁 > - test: add distribution harness > - test: verify packed cjs and esm entrypoints > - test: lock distribution api manifest > - test: smoke test built pkg artifacts > - docs: require contract tests for package migration > - test: guard esm migration regressions > - docs: require contract gate for esm migration > - build: generate cjs lib from esm source entries > - refactor: port root api surface to esm > - build: clean port of root api to esm > - docs: include implementation plans > - fix: align lint and smoke tests with esm migration > - refactor: complete esm port of all core components > - refactor: finalize esm migration with sandbox and naming fixes > - fix: finish esm migration stabilization > - chore: stop tracking generated lib output > - remove plans > - prettier > - linting > - fix: make distribution tests self-contained > - fix: build before coverage test bundle > - refactor: move simple unit tests to src > - refactor: flatten test and coverage script chains > - refactor: use parallel mocha for node tests > - test: restore fake timers cleanup > - refactor: remove node test runner script > - remove unneccessary clutter > - fix: make mocha watch use polling > - simplify > - Increase coverage > - Fix coverage by removing duplicated tests > > These were covering the generated lib/ folder. > > - Move shared util into esm dir > - fix package dep issues > - Adjust coverage > - Upgrade all dependencies > > npx npm-check-updates -u - [`cd2bf5a3`](https://github.com/sinonjs/sinon/commit/cd2bf5a3025cc3f2adb51f5065cf7fb0a9721af3) Use newer endpoint (Carl-Erik Kopseng) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2026-04-09.* ### [`v21.0.3`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2103) [Compare Source](https://github.com/sinonjs/sinon/compare/v21.0.2...v21.0.3) - [`0494251b`](https://github.com/sinonjs/sinon/commit/0494251bc54c56e7e79258586238db88f0d191b3) fix([#2678](https://github.com/sinonjs/sinon/issues/2678)): upgrade samsam to fix buffer comparisons (Carl-Erik Kopseng) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2026-03-16.* ### [`v21.0.2`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2102) [Compare Source](https://github.com/sinonjs/sinon/compare/v21.0.1...v21.0.2) - [`024321c4`](https://github.com/sinonjs/sinon/commit/024321c48e670de35098b2555173e25f024db90d) fix: skip Node specific tests in browser env (Carl-Erik Kopseng) - [`b836fccb`](https://github.com/sinonjs/sinon/commit/b836fccb8adabd3d116338b19ae1f6a4ccfc7d3e) fix: js-yaml breaking change from v3 to v4 (Carl-Erik Kopseng) - [`ebf0c431`](https://github.com/sinonjs/sinon/commit/ebf0c4313f41edfdf71f206c826a8ce7d56f2d2c) docs: add how-to article for stubbing ES module imports ([#1832](https://github.com/sinonjs/sinon/issues/1832)) ([#2676](https://github.com/sinonjs/sinon/issues/2676)) (Eduard Barrera) > - docs: add how-to article for stubbing ES module imports with esm package > > Adds a comprehensive How-To guide that addresses issue [#1832](https://github.com/sinonjs/sinon/issues/1832), documenting > how to configure Node.js to allow Sinon stubs to work with ES modules. > > - Explains why ES module namespace bindings are immutable by spec > - Shows how to use the 'esm' npm package with mutableNamespace: true > - Provides a complete working example with project layout, package.json, > loader file, source modules, and a full test suite > - Documents limitations (destructured imports, non-standard behavior) > - Replaces the TODO comment in link-seams-commonjs.md with a cross-reference > > Closes [#1832](https://github.com/sinonjs/sinon/issues/1832) > Co-authored-by: Eduard Barrera <eduardbar@users.noreply.github.com> > Co-authored-by: Carl-Erik Kopseng <carlerik@gmail.com> - [`ebcd506c`](https://github.com/sinonjs/sinon/commit/ebcd506cbb55df6c7d2bda558f58386a218df9be) Fix spies not being reset properly ([#2673](https://github.com/sinonjs/sinon/issues/2673)) (simon-id) - [`3beab2ba`](https://github.com/sinonjs/sinon/commit/3beab2ba97fe74cdb0f495420ac06652e59835aa) Make doc tests pass with new jQuery (Carl-Erik Kopseng) - [`766715c6`](https://github.com/sinonjs/sinon/commit/766715c68a94fd66e9ca79f62c23d07fd1645d4c) build: reduce transitive audit findings (Carl-Erik Kopseng) - [`92aaf5c9`](https://github.com/sinonjs/sinon/commit/92aaf5c9d1686a9b4a025c31cb3b0813e7fd2350) build: upgrade eslint config and replace dependency-check (Carl-Erik Kopseng) - [`c6aaa871`](https://github.com/sinonjs/sinon/commit/c6aaa8719ea831c43112ff0d0727a35e6bf92731) chore: ignore project worktrees (Carl-Erik Kopseng) - [`ef387e8e`](https://github.com/sinonjs/sinon/commit/ef387e8ec6eb692f63844130b4590d018729a723) Upgrade most deps (Carl-Erik Kopseng) - [`3cf4e77d`](https://github.com/sinonjs/sinon/commit/3cf4e77d2c20a63a27c0ac14e0186f45761a0b77) docs: improve writing of documentation ([#2675](https://github.com/sinonjs/sinon/issues/2675)) (Eduardo de la Cruz Palacios) - [`6349032f`](https://github.com/sinonjs/sinon/commit/6349032fc42f01c302e05d3146e489d92fc9dbf9) Check login status before publishing steps are performed (Carl-Erik Kopseng) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2026-03-04.* ### [`v21.0.1`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2101) [Compare Source](https://github.com/sinonjs/sinon/compare/v21.0.0...v21.0.1) - [`456a65c2`](https://github.com/sinonjs/sinon/commit/456a65c2813533fa4e946b9e707baf798a679ad3) Update dependencies - except [@sinonjs/samsam](https://github.com/sinonjs/samsam) ([#2669](https://github.com/sinonjs/sinon/issues/2669)) (Carl-Erik Kopseng) - [`f04f3eb1`](https://github.com/sinonjs/sinon/commit/f04f3eb108f3d9b0402e42281b54d9057211bf16) Fix issue 2618 - Remove browserify in favor of esbuild ([#2661](https://github.com/sinonjs/sinon/issues/2661)) (Artur Parkhisenko) - [`48b69df2`](https://github.com/sinonjs/sinon/commit/48b69df24c97ef316ebc3835418b3459337c325a) fix(docs): remove `assert.failException` from documentation ([#2666](https://github.com/sinonjs/sinon/issues/2666)) (Steffen Schroeder) - [`13b27ccc`](https://github.com/sinonjs/sinon/commit/13b27cccd066a1bc75cfdcd207f1c8c44ab7b049) Fix sandbox restore not handling stubbed functions ([#2667](https://github.com/sinonjs/sinon/issues/2667)) (thamion) - [`ae9e09ac`](https://github.com/sinonjs/sinon/commit/ae9e09ac00799f923a8e6b559ead720999a0e865) Update compatibility target to ES2023 (Carl-Erik Kopseng) > Updated compatibility target from ES2017 to ES2023 and clarified the note on breaking changes. - [`26055043`](https://github.com/sinonjs/sinon/commit/26055043212a03afeb2914e16ea32cb7f0a3ac44) Improve error message for immutable descriptors ([#2664](https://github.com/sinonjs/sinon/issues/2664)) (Stuart Dotson) - [`80fa9a5b`](https://github.com/sinonjs/sinon/commit/80fa9a5b8b605eb141e556ec5c8e7cd164ca9c5c) Also mirror the calledOnceWith assertion ([#2660](https://github.com/sinonjs/sinon/issues/2660)) (Benedikt Meurer) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2025-12-19.* ### [`v21.0.0`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2100) [Compare Source](https://github.com/sinonjs/sinon/compare/v20.0.0...v21.0.0) - [`fd10f13f`](https://github.com/sinonjs/sinon/commit/fd10f13f3fed7853dd489dd9e84f28c22df715c2) chore!: remove assert.failException property ([#2659](https://github.com/sinonjs/sinon/issues/2659)) (Morgan Roderick) > BREAKING CHANGE: this removes assert.failException from the API *Released by Morgan Roderick on 2025-06-13.* ### [`v20.0.0`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#2000) [Compare Source](https://github.com/sinonjs/sinon/compare/v19.0.5...v20.0.0) - [`b6daed26`](https://github.com/sinonjs/sinon/commit/b6daed26cd4ba2c045d3d2fc2cadbdcbf43c61e6) chore!: remove usingPromise (Morgan Roderick) > Everyone should be using native promises by now, or should know how to stub natives - [`95d4b8fc`](https://github.com/sinonjs/sinon/commit/95d4b8fc89316c7af82c02750e8ca71e5bc76d07) chore!: remove fakeXMLHttpRequest and fakeServer (Morgan Roderick) > BREAKING CHANGE: remove fakeXMLHttpRequest and fakeServer from the API *Released by Morgan Roderick on 2025-03-24.* ### [`v19.0.5`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#1905) [Compare Source](https://github.com/sinonjs/sinon/compare/v19.0.4...v19.0.5) - [`67d19ff0`](https://github.com/sinonjs/sinon/commit/67d19ff01541fd76dceb1b753e5110b4375fb819) chore: deprecate usingPromise ([#2651](https://github.com/sinonjs/sinon/issues/2651)) (Morgan Roderick) - [`598dddb6`](https://github.com/sinonjs/sinon/commit/598dddb6e1d65187f6410a1b7f270858ce45c857) chore: deprecate useFakeXMLHttpRequest and useFakeServer (Morgan Roderick) *Released by Morgan Roderick on 2025-03-23.* ### [`v19.0.4`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#1904) [Compare Source](https://github.com/sinonjs/sinon/compare/v19.0.3...v19.0.4) The release script failed half-way in 19.0.3, so re-releasing. - [`da67311a`](https://github.com/sinonjs/sinon/commit/da67311a3eeff7df47ac13af21a7331e523b433a) Revert "Add version 19.0.3 to releases" (Carl-Erik Kopseng) - [`84d5c82a`](https://github.com/sinonjs/sinon/commit/84d5c82a67218f12745e018c930bb3b988f41f25) Add version 19.0.3 to releases (Carl-Erik Kopseng) *Released by Carl-Erik Kopseng on 2025-03-19.* ### [`v19.0.3`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#1903) [Compare Source](https://github.com/sinonjs/sinon/compare/v19.0.2...v19.0.3) Basically just documentation updates - [`1f1d3706`](https://github.com/sinonjs/sinon/commit/1f1d3706c07e70fc29b111844025c74e48f83284) Verifying links procedure (Carl-Erik Kopseng) - [`37623efc`](https://github.com/sinonjs/sinon/commit/37623efc5118f1eeb9a7df28694997412bcd38b1) Catch latest two missing redirects (Carl-Erik Kopseng) - [`2404a45f`](https://github.com/sinonjs/sinon/commit/2404a45feeae904a286b3d6321d22ef2cdb08e93) Ignore ancient deadlinks to Sinon child projects in previous releases (Carl-Erik Kopseng) - [`fba6f877`](https://github.com/sinonjs/sinon/commit/fba6f877b04a1ced5533c050724ecc4e9aba9df6) Ignore historic links in changelog (Carl-Erik Kopseng) - [`e3950d9b`](https://github.com/sinonjs/sinon/commit/e3950d9b391b26e684a1add77da2f70fdd1cdc6d) Fix external link (Carl-Erik Kopseng) - [`0be40825`](https://github.com/sinonjs/sinon/commit/0be4082548f206e0e6f2b02b84b190e04e137fd1) Fix the missing redirects to the migration guide (Carl-Erik Kopseng) - [`108fbca0`](https://github.com/sinonjs/sinon/commit/108fbca09ccccac6521ba48fd4030a762d498e11) Fix internal ../assertions link in source (Carl-Erik Kopseng) - [`bb10e53a`](https://github.com/sinonjs/sinon/commit/bb10e53a905a60cca2d2ec59d2205e8453214899) Fix spy-call reference in source (Carl-Erik Kopseng) - [`ef582e31`](https://github.com/sinonjs/sinon/commit/ef582e319a89ced90c5c259657900aa4cf2c88b5) Remove bash-ism from Makefile (use POSIX) (Carl-Erik Kopseng) - [`7af1d235`](https://github.com/sinonjs/sinon/commit/7af1d23581d2c8c7625e248a9bdfb2767f12ef98) chore: remove .unimportedrc.json (Morgan Roderick) - [`dfcad710`](https://github.com/sinonjs/sinon/commit/dfcad71008a751f151063d7a739590e847a338d9) chore: fix codecov upload (Morgan Roderick) > We are seeing errors uploading coverage reports to codecov: > > ``` > Rate limit reached. Please upload with the Codecov repository upload token to resolve issue > ``` > > I've added a repository token, as instructed in <https://docs.codecov.com/docs/adding-the-codecov-token>. > > This changeset should fix the upload issue. - [`0ca2e49e`](https://github.com/sinonjs/sinon/commit/0ca2e49e857ec6b10ed4134944cdf591a0065965) fix: browser-test job fails in ubuntu-latest (Morgan Roderick) - [`e9eb2eb2`](https://github.com/sinonjs/sinon/commit/e9eb2eb26e873f106a9996610a142d25d917d9e8) chore: remove unused unused job (Morgan Roderick) > This crucial part of this workflow was removed in > [`278e667`](https://github.com/sinonjs/sinon/commit/278e667e095cd1a666c3ab2dc4268379a5754598), we should have removed the entire job. - [`278e667e`](https://github.com/sinonjs/sinon/commit/278e667e095cd1a666c3ab2dc4268379a5754598) chore: remove unimported (Morgan Roderick) > The repository has been archived. See <https://github.com/smeijer/unimported> - [`9e30835b`](https://github.com/sinonjs/sinon/commit/9e30835bb7c7bb550ed299a4102fdd53a23b083f) npm audit (Morgan Roderick) - [`a74301cf`](https://github.com/sinonjs/sinon/commit/a74301cff8e7fb42ebb164c91d059ab391741473) chore: remove RunKit (Morgan Roderick) > This service is dead. - [`80bc1d96`](https://github.com/sinonjs/sinon/commit/80bc1d96371580a8b2dad39122db46933e7f5884) Fix out-of-date fake-timers docs ([#2628](https://github.com/sinonjs/sinon/issues/2628)) (Carl-Erik Kopseng) > - Fix documentation issue for fake-timers mentioned in [#2625](https://github.com/sinonjs/sinon/issues/2625) > > The docs were out of sync with the fake-timers docs. > > - Update dependencies before new patch version - [`527568cc`](https://github.com/sinonjs/sinon/commit/527568cc60a3c30359732bbb02806cee47a33d02) Bump rexml from 3.3.7 to 3.3.9 ([#2626](https://github.com/sinonjs/sinon/issues/2626)) (dependabot\[bot]) > Bumps [rexml](https://github.com/ruby/rexml) from 3.3.7 to 3.3.9. > > - [Release notes](https://github.com/ruby/rexml/releases) > - [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md) > - [Commits](https://github.com/ruby/rexml/compare/v3.3.7...v3.3.9) > > *** > > updated-dependencies: > > - dependency-name: rexml > > dependency-type: indirect > > ... > > Signed-off-by: dependabot\[bot] <support@github.com> > > Co-authored-by: dependabot\[bot] <49699333+dependabot\[bot][@users](https://github.com/users).noreply.github.com> - [`ed029725`](https://github.com/sinonjs/sinon/commit/ed0297257413b728bc31515ac0a87e738e069961) Bump webrick from 1.8.1 to 1.8.2 ([#2623](https://github.com/sinonjs/sinon/issues/2623)) (dependabot\[bot]) > Bumps [webrick](https://github.com/ruby/webrick) from 1.8.1 to 1.8.2. > > - [Release notes](https://github.com/ruby/webrick/releases) > - [Commits](https://github.com/ruby/webrick/compare/v1.8.1...v1.8.2) > > *** > > updated-dependencies: > > - dependency-name: webrick > > dependency-type: indirect > > ... > > Signed-off-by: dependabot\[bot] <support@github.com> > > Co-authored-by: dependabot\[bot] <49699333+dependabot\[bot][@users](https://github.com/users).noreply.github.com> *Released by Carl-Erik Kopseng on 2025-03-19.* ### [`v19.0.2`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#1902) [Compare Source](https://github.com/sinonjs/sinon/compare/v19.0.1...v19.0.2) - [`4eb4c4bc`](https://github.com/sinonjs/sinon/commit/4eb4c4bc0266d90d1624e5067029599ed57f7fb2) Use fix 13.0.2 version of fake-timers to get Date to pass instanceof checks (Carl-Erik Kopseng) - [`a5b03db3`](https://github.com/sinonjs/sinon/commit/a5b03db3af8948fe57c9f6818d7ae51fdef7ab52) Add links to code that is affected by the breaking changes (Carl-Erik Kopseng) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2024-09-13.* ### [`v19.0.1`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#1901) [Compare Source](https://github.com/sinonjs/sinon/compare/v19.0.0...v19.0.1) - [`037ec2d2`](https://github.com/sinonjs/sinon/commit/037ec2d2a995fb1f84f7b63ed00e632316648612) Update migration docs (Carl-Erik Kopseng) *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2024-09-13.* ### [`v19.0.0`](https://github.com/sinonjs/sinon/blob/HEAD/CHANGES.md#1900) [Compare Source](https://github.com/sinonjs/sinon/compare/v18.0.1...v19.0.0) - [`3534ab4f`](https://github.com/sinonjs/sinon/commit/3534ab4fb02803173d9ca34f6020c3701d82abc9) Bump samsam and nise to latest versions ([#2617](https://github.com/sinonjs/sinon/issues/2617)) (Carl-Erik Kopseng) > Ensures consistency and less breakage when there are "circular" dependencies. - [`912c568d`](https://github.com/sinonjs/sinon/commit/912c568d3038dc0bea0e8a7b25e4298087c7c99c) upgrade fake timers and others ([#2612](https://github.com/sinonjs/sinon/issues/2612)) (Carl-Erik Kopseng) > - Upgrade dependencies (includes breaking API in Fake Timers) > - fake-timers: no longer creating dates using the original Date class, but a subclass (proxy) - [`9715798e`](https://github.com/sinonjs/sinon/commit/9715798e30e59b110a1349cd0bd087b0fa5f9af2) Use newer @mochify/\* packages ([#2609](https://github.com/sinonjs/sinon/issues/2609)) (Carl-Erik Kopseng) > Co-authored-by: Maximilian Antoni <mail@maxantoni.de> *Released by [Carl-Erik Kopseng](https://github.com/fatso83) on 2024-09-13.* </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

Owentje added 1 commit

2026-11-12 21:34:26 +00:00