Update dependency sinon to v18 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
sinon (source)	15.0.4 -> 18.0.1

---

Release Notes

sinonjs/sinon (sinon)

v18.0.1

Compare Source

Basically a patch release to update a transitive dependency in Nise.

• 03e33ec6
  Pin fake-timers@11.2.2 to avoid breaking change (Carl-Erik Kopseng)
• 5a7924ad
  Add createStubInstance header in stubs.md (Daniel Kaplan)
• ad6804cd
  Bump elliptic from 6.5.5 to 6.5.7 (#​2608) (dependabot[bot])
• 033287bd
  Bump path-to-regexp and nise (#​2611) (dependabot[bot])

  Bumps path-to-regexp to 8.1.0 and updates ancestor dependency nise. These dependencies need to be updated together.

  Updates path-to-regexp from 6.2.2 to 8.1.0

  • Release notes
  • Changelog
  • Commits

  Updates nise from 6.0.0 to 6.0.1

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: path-to-regexp

    dependency-type: indirect

  • dependency-name: nise

    dependency-type: direct:production

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• 0c609f95
  re-add testing of esm browser builds (Carl-Erik Kopseng)

  It seems unclear why it was removed in the first place: I have tested extensively that it
  does work and it does fail the build if changing any assertion in the script

• da4230a0
  Bump braces from 3.0.2 to 3.0.3 (#​2605) (dependabot[bot])

  Bumps braces from 3.0.2 to 3.0.3.

  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: braces

    dependency-type: indirect

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• 02542370
  feat(ci): add node v22 (#​2600) (Rotzbua)
• 794cb81a
  fix(tests): typo (#​2603) (Rotzbua)
• 1eb2a254
  Use NodeJS 22.2.0 as base development version (Carl-Erik Kopseng)
• 1aa713fd
  Bump rexml from 3.2.5 to 3.2.8 (#​2599) (dependabot[bot])

  Bumps rexml from 3.2.5 to 3.2.8. >

  • Release notes >
  • Changelog >
  • Commits > >
    --- >
    updated-dependencies: >
  • dependency-name: rexml >
    dependency-type: indirect >
    ... > >
    Signed-off-by: dependabot[bot] support@github.com >
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

Released by Carl-Erik Kopseng on 2024-09-10.

v18.0.0

Compare Source

This is what 17.0.2 should have been, as that contained two breaking changes. After updating
Nise we are down to one breaking change, which only affects sinon-test (which has been updated),
so most people are not affected. The legacyRoutes flag that is currently enabled in Nise by default
will at some later version be disabled. We will then issue a little migration note.

• 01d45312
  Use Nise 6 with legacyRoutes flag enabled (Carl-Erik Kopseng)

  This should be disabled in a future Sinon version by default.

• c618edc5
  fix #​2594: remove needless sandbox creation (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2024-05-15.

v17.0.2

Compare Source

• f6dca0ba
  upgrade packages (#​2595) (Carl-Erik Kopseng)
• 5025d001
  Avoid return and callArg* clearing each other's state (#​2593) (Carl-Erik Kopseng)

  • Partially revert "fix returns does not override call through (#​2567)"

  • revert to the old manual clearing of props

• ed068a88
  Bump ip from 1.1.8 to 1.1.9 (#​2587) (dependabot[bot])
• ec4d592e
  fix #​2589: avoid invoking getter as side-effect (#​2592) (Carl-Erik Kopseng)
• 9972e1e3
  Fix typo in mocks documentation (#​2591) (Eduardo de la Cruz Palacios)
• 52e6e4c5
  chore: prefer cache option of setup-node (Morgan Roderick)
• 08da1235
  Bump actions/cache from 3 to 4 (dependabot[bot])
• 404ef47e
  Bump nokogiri from 1.14.3 to 1.16.2 (dependabot[bot])
• fd79612c
  Update Bug_report.md (Carl-Erik Kopseng)
• 1fbc812a
  Re-add about (Carl-Erik Kopseng)
• fc8f6c3e
  Fix formatting :clown: (Carl-Erik Kopseng)
• c57e38ae
  Remove old template (Carl-Erik Kopseng)
• 754bf7a9
  Update Bug_report.md (Carl-Erik Kopseng)
• 87eed9d2
  Fix some typos at code comments (#​2581) (EliyahuMachluf)
• cbae6997
  Link to createStubInstance util.md docs in stubs.md (#​2577) (Daniel Kaplan)
• adcf936d
  Fix Mocha watch task by delegating to Node (#​2573) (Carl-Erik Kopseng)
• 30ad2372
  prettier:write (Carl-Erik Kopseng)
• 45c4d6b9
  Remove outdated info from README (#​2571) (Carl-Erik Kopseng)
• 6c9f5c2a
  Add a notice that the Fake Timers API doc is incomplete (#​2570) (Carl-Erik Kopseng)
• 93db3ef3
  breaking: Remove sinon.defaultConfig and related modules (#​2565) (Carl-Erik Kopseng)

  • breaking: Remove sinon.defaultConfig and related modules

  default-config and get-config are leftovers from when Sinon

  shipped with sinon.test (now the independent NPM module

  'sinon-test').

Released by Carl-Erik Kopseng on 2024-05-07.

v17.0.1

Compare Source

• 5fde5aeb
  fix returns does not override call through (#​2567) (Raz Luvaton)
• b5fc3671
  Documentation for assertion options for the sandbox (#​2564) (Carl-Erik Kopseng)
• f7d180cc
  fix: assertion log limit (#​2485) (Spencer Goossens)
• 4f538e3e
  Fix mochify breaking on node:assert (#​2559) (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2023-11-01.

v17.0.0

Compare Source

• 11a8e3f2
  Remove Proxyquire as it did not handle newer syntax (Carl-Erik Kopseng)
• ec37d634
  Drop Node 16, as it is out of maintenance (Carl-Erik Kopseng)
• 75e2b691
  Upgrade fake-timers@11.2.2: new Intl mirroring and bugfixes (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2023-10-20.

v16.1.3

Compare Source

• 93e8aa93
  Remove postinstall script as it causes issues for consumers (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2023-10-19.

v16.1.2

Compare Source

v16.1.1

Compare Source

• ff0e993d
  Showcase #replace.usingAccessor for DI in the typescript case study (#​2556) (Carl-Erik Kopseng)
• c47a4bee
  Bump @​babel/traverse from 7.22.5 to 7.23.2 (#​2555) (dependabot[bot])

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

Released by Carl-Erik Kopseng on 2023-10-18.

v16.1.0

Compare Source

• cac5184b
  Enable use of assignment in the presence of accessors (#​2538) (Carl-Erik Kopseng)
• f8c20e54
  New article: making Sinon work with complex setups (#​2540) (Carl-Erik Kopseng)

  Co-authored-by: Morgan Roderick morgan@roderick.dk >

• cb5b9621
  Add NPM script 'dev-docs' and document its usage (Carl-Erik Kopseng)
• dd7c6091
  Add a little update to contributing (Carl-Erik Kopseng)
• 79acdf38
  Move tool versions into single file at root (Carl-Erik Kopseng)
• 03b1db50
  Expose Changelog page (#​2550) (Carl-Erik Kopseng)
• e1c3dad2
  Add section on tooling and recommend using ASDF for tool versioning (#​2547) (Carl-Erik Kopseng)
  Released by Carl-Erik Kopseng on 2023-10-05.

v16.0.0

Compare Source

• c3396058
  fix(2525): ensure non empty message when error of type string is passed, but no message (#​2544) (Mark de Dios)
• baa1aee9
  .define method (#​2539) (Konstantin Gukov)

  • .define method for temporarily defining new properties during the tests

• fe799e78
  Fix issue 2534: spies are not restored (#​2535) (Carl-Erik Kopseng)
• 305fb6cc
  fix: actaully reset 'injectedKeys' (#​2456) (Morgan Roderick)
• de2635dd
  Bump LTS version one notch: 20 (#​2529) (Carl-Erik Kopseng)

Released by Morgan Roderick on 2023-09-13.

v15.2.0

Compare Source

• 66b0081e
  Use fake-timers v10.1.0 re-released as v10.3.0 (Carl-Erik Kopseng)

  Version 10.2.0 of fake-timers had an unexpected breaking
  change. We re-released 10.1.0 as 10.3.0 to force users
  into jumping over the deprecated version.

  v10.2.0 was re-released as v11.0.0 and will be part of
  the next Sinon major

• a79ccaeb
  Support callable instances (#​2517) (bojavou)

  • Support callable instances

  • Clean prettier lint

  ---

  Co-authored-by: - <->

• d220c995
  fix: bundling compatibility with webpack@5 (#​2519) (Avi Vahl)

  • fix: bundling compatibility with webpack@5

  when using webpack v5 to bundle code that calls require('sinon') (cjs) , it would have defaulted to "exports->require" and fail with multiple node-api requirements (util, timers, etc.)

  this patch ensures that anyone who bundles sinon for browser gets the (browser-compatible) esm version.

  tested on both webpack v5 and v4. should be noted that v4 worked even without this patch, as it automatically injected polyfills. v5 no longer does so. with this PR, people using webpack@4 to bundle sinon at least see size improvement, as the polyfills are no longer required.

  • fix: revert change for package.json -> "browser"

  browserify doesn't seem to like esm. leave that entry point alone, and ensure "exports" -> "browser" (which webpack@5 uses) is esm.

Released by Carl-Erik Kopseng on 2023-06-20.

v15.1.2

Compare Source

• 02b73aed
  Update lock file after removing node_modules ... (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2023-06-12.

v15.1.1

Compare Source

• 194fc2ef
  Change fake-timers version to specifically target the one containing the 'jump' feature (Carl-Erik Kopseng)

  Instead of the later (breaking) version. See #​470

• 05f05ac3
  docs: Remove threw(obj) from docs (#​2513) (Morgan Roderick)

  Since the introduction of threw in

  0feec9f, no one have reported that

  threw(obj) doesn't work as the documentation states.

  const sinon = require("sinon");
  
  const o = { pie: "apple" };
  
  const f = sinon.fake.throws(o);
  
  f();
  
  // this is supposed to return true
  
  f.threw(o);
  
  // => false

  Since it has been 12+ years without an error report, it's safe to assume

  that no one uses the threw method in this way. Let's remove it from

  the documentation.

Released by Carl-Erik Kopseng on 2023-06-12.

v15.1.0

Compare Source

• 79e719f2
  Ensure we use a fake-timers version with clock.jump (Carl-Erik Kopseng)
• b2a4df5a
  Add docs for clock.jump method (#​2512) (Jason O'Neill)
• f096abff
  fix (#​2514): only force new or inherited descriptors to be configurable (#​2515) (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2023-05-18.

---

Configuration

📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.