Update dependency sinon to v21

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
sinon (source)	18.0.0 → 21.0.1
sinon (source)	15.2.0 → 21.0.1
sinon (source)	19.0.5 → 21.0.1
@types/sinon (source)	17.0.4 → 21.0.0

---

Release Notes

sinonjs/sinon (sinon)

v21.0.1

Compare Source

• 456a65c2
  Update dependencies - except @​sinonjs/samsam (#​2669) (Carl-Erik Kopseng)
• f04f3eb1
  Fix issue 2618 - Remove browserify in favor of esbuild (#​2661) (Artur Parkhisenko)
• 48b69df2
  fix(docs): remove assert.failException from documentation (#​2666) (Steffen Schroeder)
• 13b27ccc
  Fix sandbox restore not handling stubbed functions (#​2667) (thamion)
• ae9e09ac
  Update compatibility target to ES2023 (Carl-Erik Kopseng)

  Updated compatibility target from ES2017 to ES2023 and clarified the note on breaking changes.

• 26055043
  Improve error message for immutable descriptors (#​2664) (Stuart Dotson)
• 80fa9a5b
  Also mirror the calledOnceWith assertion (#​2660) (Benedikt Meurer)

Released by Carl-Erik Kopseng on 2025-12-19.

v21.0.0

Compare Source

• fd10f13f
  chore!: remove assert.failException property (#​2659) (Morgan Roderick)

  This was used for allowing customisation of the thrown error between
  sandboxes and for customisation for integrations (most likely from the
  days of BusterJS).

  To my knowledge and what I've been able to find on GitHub, this has
  never had any production use by end users.

  BREAKING CHANGE: this removes assert.failException from the API

Released by Morgan Roderick on 2025-06-13.

v20.0.0

Compare Source

• b6daed26
  chore!: remove usingPromise (Morgan Roderick)

  Everyone should be using native promises by now, or should know how to stub natives

• 95d4b8fc
  chore!: remove fakeXMLHttpRequest and fakeServer (Morgan Roderick)

  BREAKING CHANGE: remove fakeXMLHttpRequest and fakeServer from the API

Released by Morgan Roderick on 2025-03-24.

v19.0.5

Compare Source

• 67d19ff0
  chore: deprecate usingPromise (#​2651) (Morgan Roderick)
• 598dddb6
  chore: deprecate useFakeXMLHttpRequest and useFakeServer (Morgan Roderick)

Released by Morgan Roderick on 2025-03-23.

v19.0.4

Compare Source

The release script failed half-way in 19.0.3, so re-releasing.

• da67311a
  Revert "Add version 19.0.3 to releases" (Carl-Erik Kopseng)
• 84d5c82a
  Add version 19.0.3 to releases (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2025-03-19.

v19.0.3

Compare Source

Basically just documentation updates

• 1f1d3706
  Verifying links procedure (Carl-Erik Kopseng)
• 37623efc
  Catch latest two missing redirects (Carl-Erik Kopseng)
• 2404a45f
  Ignore ancient deadlinks to Sinon child projects in previous releases (Carl-Erik Kopseng)
• fba6f877
  Ignore historic links in changelog (Carl-Erik Kopseng)
• e3950d9b
  Fix external link (Carl-Erik Kopseng)
• 0be40825
  Fix the missing redirects to the migration guide (Carl-Erik Kopseng)
• 108fbca0
  Fix internal ../assertions link in source (Carl-Erik Kopseng)
• bb10e53a
  Fix spy-call reference in source (Carl-Erik Kopseng)
• ef582e31
  Remove bash-ism from Makefile (use POSIX) (Carl-Erik Kopseng)
• 7af1d235
  chore: remove .unimportedrc.json (Morgan Roderick)
• dfcad710
  chore: fix codecov upload (Morgan Roderick)

  We are seeing errors uploading coverage reports to codecov:

  Rate limit reached. Please upload with the Codecov repository upload token to resolve issue
  

  I've added a repository token, as instructed in https://docs.codecov.com/docs/adding-the-codecov-token.

  This changeset should fix the upload issue.

• 0ca2e49e
  fix: browser-test job fails in ubuntu-latest (Morgan Roderick)
• e9eb2eb2
  chore: remove unused unused job (Morgan Roderick)

  This crucial part of this workflow was removed in
  278e667, we should have removed the entire job.

• 278e667e
  chore: remove unimported (Morgan Roderick)

  The repository has been archived. See https://github.com/smeijer/unimported

• 9e30835b
  npm audit (Morgan Roderick)
• a74301cf
  chore: remove RunKit (Morgan Roderick)

  This service is dead.

• 80bc1d96
  Fix out-of-date fake-timers docs (#​2628) (Carl-Erik Kopseng)

  • Fix documentation issue for fake-timers mentioned in #​2625

  The docs were out of sync with the fake-timers docs.

  • Update dependencies before new patch version

• 527568cc
  Bump rexml from 3.3.7 to 3.3.9 (#​2626) (dependabot[bot])

  Bumps rexml from 3.3.7 to 3.3.9.

  • Release notes
  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: rexml

    dependency-type: indirect

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• ed029725
  Bump webrick from 1.8.1 to 1.8.2 (#​2623) (dependabot[bot])

  Bumps webrick from 1.8.1 to 1.8.2.

  • Release notes
  • Commits

  ---

  updated-dependencies:

  • dependency-name: webrick

    dependency-type: indirect

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

Released by Carl-Erik Kopseng on 2025-03-19.

v19.0.2

Compare Source

• 4eb4c4bc
  Use fix 13.0.2 version of fake-timers to get Date to pass instanceof checks (Carl-Erik Kopseng)
• a5b03db3
  Add links to code that is affected by the breaking changes (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2024-09-13.

v19.0.1

Compare Source

• 037ec2d2
  Update migration docs (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2024-09-13.

v19.0.0

Compare Source

• 3534ab4f
  Bump samsam and nise to latest versions (#​2617) (Carl-Erik Kopseng)

  Ensures consistency and less breakage when there are "circular" dependencies.

• 912c568d
  upgrade fake timers and others (#​2612) (Carl-Erik Kopseng)

  • Upgrade dependencies (includes breaking API in Fake Timers)
  • fake-timers: no longer creating dates using the original Date class, but a subclass (proxy)

• 9715798e
  Use newer @​mochify/* packages (#​2609) (Carl-Erik Kopseng)

  Co-authored-by: Maximilian Antoni mail@maxantoni.de

Released by Carl-Erik Kopseng on 2024-09-13.

v18.0.1

Compare Source

Basically a patch release to update a transitive dependency in Nise.

• 03e33ec6
  Pin fake-timers@​11.2.2 to avoid breaking change (Carl-Erik Kopseng)
• 5a7924ad
  Add createStubInstance header in stubs.md (Daniel Kaplan)
• ad6804cd
  Bump elliptic from 6.5.5 to 6.5.7 (#​2608) (dependabot[bot])
• 033287bd
  Bump path-to-regexp and nise (#​2611) (dependabot[bot])

  Bumps path-to-regexp to 8.1.0 and updates ancestor dependency nise. These dependencies need to be updated together.

  Updates path-to-regexp from 6.2.2 to 8.1.0

  • Release notes
  • Changelog
  • Commits

  Updates nise from 6.0.0 to 6.0.1

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: path-to-regexp

    dependency-type: indirect

  • dependency-name: nise

    dependency-type: direct:production

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• 0c609f95
  re-add testing of esm browser builds (Carl-Erik Kopseng)

  It seems unclear why it was removed in the first place: I have tested extensively that it
  does work and it does fail the build if changing any assertion in the script

• da4230a0
  Bump braces from 3.0.2 to 3.0.3 (#​2605) (dependabot[bot])

  Bumps braces from 3.0.2 to 3.0.3.

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: braces

    dependency-type: indirect

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• 02542370
  feat(ci): add node v22 (#​2600) (Rotzbua)
• 794cb81a
  fix(tests): typo (#​2603) (Rotzbua)
• 1eb2a254
  Use NodeJS 22.2.0 as base development version (Carl-Erik Kopseng)
• 1aa713fd
  Bump rexml from 3.2.5 to 3.2.8 (#​2599) (dependabot[bot])

  Bumps rexml from 3.2.5 to 3.2.8. >

  • Release notes >
  • Changelog >
  • Commits > >
    --- >
    updated-dependencies: >
  • dependency-name: rexml >
    dependency-type: indirect >
    ... > >
    Signed-off-by: dependabot[bot] support@github.com >
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

Released by Carl-Erik Kopseng on 2024-09-10.

---

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.18%. Comparing base (2754665) to head (25f7979).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #212   +/-   ##
=======================================
  Coverage   90.18%   90.18%           
=======================================
  Files         112      112           
  Lines        7621     7621           
  Branches     1092     1092           
=======================================
  Hits         6873     6873           
  Misses        740      740           
  Partials        8        8           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}