chore(deps): update dependency sinon to v21.0.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
sinon (source)	21.0.0 → 21.0.2

---

Release Notes

sinonjs/sinon (sinon)

v21.0.2

Compare Source

• 024321c4
  fix: skip Node specific tests in browser env (Carl-Erik Kopseng)
• b836fccb
  fix: js-yaml breaking change from v3 to v4 (Carl-Erik Kopseng)
• ebf0c431
  docs: add how-to article for stubbing ES module imports (#​1832) (#​2676) (Eduard Barrera)

  • docs: add how-to article for stubbing ES module imports with esm package

  Adds a comprehensive How-To guide that addresses issue #​1832, documenting
  how to configure Node.js to allow Sinon stubs to work with ES modules.

  • Explains why ES module namespace bindings are immutable by spec
  • Shows how to use the 'esm' npm package with mutableNamespace: true
  • Provides a complete working example with project layout, package.json,
    loader file, source modules, and a full test suite
  • Documents limitations (destructured imports, non-standard behavior)
  • Replaces the TODO comment in link-seams-commonjs.md with a cross-reference

  Closes #​1832
  Co-authored-by: Eduard Barrera eduardbar@users.noreply.github.com
  Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

• ebcd506c
  Fix spies not being reset properly (#​2673) (simon-id)
• 3beab2ba
  Make doc tests pass with new jQuery (Carl-Erik Kopseng)
• 766715c6
  build: reduce transitive audit findings (Carl-Erik Kopseng)
• 92aaf5c9
  build: upgrade eslint config and replace dependency-check (Carl-Erik Kopseng)
• c6aaa871
  chore: ignore project worktrees (Carl-Erik Kopseng)
• ef387e8e
  Upgrade most deps (Carl-Erik Kopseng)
• 3cf4e77d
  docs: improve writing of documentation (#​2675) (Eduardo de la Cruz Palacios)
• 6349032f
  Check login status before publishing steps are performed (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-04.

v21.0.1

Compare Source

• 456a65c2
  Update dependencies - except @​sinonjs/samsam (#​2669) (Carl-Erik Kopseng)
• f04f3eb1
  Fix issue 2618 - Remove browserify in favor of esbuild (#​2661) (Artur Parkhisenko)
• 48b69df2
  fix(docs): remove assert.failException from documentation (#​2666) (Steffen Schroeder)
• 13b27ccc
  Fix sandbox restore not handling stubbed functions (#​2667) (thamion)
• ae9e09ac
  Update compatibility target to ES2023 (Carl-Erik Kopseng)

  Updated compatibility target from ES2017 to ES2023 and clarified the note on breaking changes.

• 26055043
  Improve error message for immutable descriptors (#​2664) (Stuart Dotson)
• 80fa9a5b
  Also mirror the calledOnceWith assertion (#​2660) (Benedikt Meurer)

Released by Carl-Erik Kopseng on 2025-12-19.

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	sinon@​21.0.0 ⏵ 21.0.2	+1			+4

View full report