Skip to content

chore(deps-dev): bump the dev-sinon group across 1 directory with 2 updates#2645

Merged
WilliamBergamin merged 3 commits into
mainfrom
dependabot/npm_and_yarn/packages/cli-hooks/dev-sinon-c4e0d06176
Jul 20, 2026
Merged

chore(deps-dev): bump the dev-sinon group across 1 directory with 2 updates#2645
WilliamBergamin merged 3 commits into
mainfrom
dependabot/npm_and_yarn/packages/cli-hooks/dev-sinon-c4e0d06176

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-sinon group with 2 updates in the /packages/cli-hooks directory: @types/sinon and sinon.

Updates @types/sinon from 21.0.1 to 22.0.0

Commits

Updates sinon from 21.1.2 to 22.0.0

Changelog

Sourced from sinon's changelog.

22.0.0

  • ed911df5 Update Ruby gems (Carl-Erik Kopseng)
  • 75a1e5b8 Update to Node 26 (Carl-Erik Kopseng)
  • 197d6608 Update documentation on faking timers to reflect the current state of fake-timers (Carl-Erik Kopseng)
  • c5ddf80b Update fake-timers@15.4: includes new Temporal API (Carl-Erik Kopseng)
  • f4ab02f6 Update updatable packages (Carl-Erik Kopseng)
  • 0536afc8 Quality: Global mutable call id can grow unbounded across long-lived processes (#2691) (tuanaiseo)
    • refactor: global mutable call id can grow unbounded across l

    callId is module-scoped and incremented on every invocation. In long-running test runners or embedded usage, this can grow indefinitely and eventually lose integer precision semantics for strict ordering comparisons.

    Affected files: proxy-invoke.js

    Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com

    • Wrap around for all values that are too high

    Signed-off-by: tuanaiseo 221258316+tuanaiseo@users.noreply.github.com Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

  • f4f7d93b Perform additional cleanup when calling callThrough() (#2670) (Cyrille)
  • 6199e9e4 improve GitHubworkflows by introducing zizmor for monitoring (#2686) (Till!)
    • fix(workflows): fetch-depth is for actions/checkout
    • chore(workflows): update
    • pin all actions to precise commits
    • avoid credential leakage from actions/checkout
    • group action updates going forward
    • add zimor config to ignore "secrets outside env"
    • add job to keep validating workflows
  • f7476b59 Use path.normalize() for path normalization (Carl-Erik Kopseng)
  • 2c975393 fix: make build and node test scripts cross-platform (laplace young)
  • a7692917 fix: isolate walk state from Object prototype (laplace young)
  • 66df977a Fix sinon.restore() cascade-restoring sub-sandboxes (#2704) (Charlie Leitheiser)

    The ESM port of createApi (#2683, shipped in 21.1.0) replaced createSandbox: createSandbox with a wrapper that pushes every newly-created sandbox into the root sandbox's fake collection:

... (truncated)

Commits
  • 52555af 22.0.0
  • ed911df Update Ruby gems
  • 75a1e5b Update to Node 26
  • 197d660 Update documentation on faking timers to reflect the current state of fake-ti...
  • c5ddf80 Update fake-timers@15.4: includes new Temporal API
  • f4ab02f Update updatable packages
  • 0536afc Quality: Global mutable call id can grow unbounded across long-lived processe...
  • f4f7d93 Perform additional cleanup when calling callThrough() (#2670)
  • 6199e9e improve GitHubworkflows by introducing zizmor for monitoring (#2686)
  • 1519009 Merge #2703: isolate walk state from Object prototype
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code pkg:cli-hooks applies to `@slack/cli-hooks` labels Jul 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 2, 2026 19:33
@dependabot dependabot Bot added pkg:cli-hooks applies to `@slack/cli-hooks` dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 2, 2026
@changeset-bot

changeset-bot Bot commented Jul 2, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 1578103

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codecov

codecov Bot commented Jul 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.17%. Comparing base (13973fe) to head (1578103).
⚠️ Report is 3 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #2645   +/-   ##
=======================================
  Coverage   89.17%   89.17%           
=======================================
  Files          65       65           
  Lines       10339    10339           
  Branches      474      474           
=======================================
  Hits         9220     9220           
  Misses       1091     1091           
  Partials       28       28
Flag Coverage Δ
cli-hooks 89.17% <ø> (ø)
cli-test 89.17% <ø> (ø)
logger 89.17% <ø> (ø)
oauth 89.17% <ø> (ø)
socket-mode 89.17% <ø> (ø)
web-api 89.17% <ø> (ø)
webhook 89.17% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/cli-hooks/dev-sinon-c4e0d06176 branch 2 times, most recently from 37a14f0 to 97186cd Compare July 14, 2026 17:47
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/cli-hooks/dev-sinon-c4e0d06176 branch from 97186cd to 10e1793 Compare July 16, 2026 19:33
@WilliamBergamin

WilliamBergamin commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
chore(deps-dev): bump the dev-sinon group across 1 directory with 2 u…
5c26324 
…pdates

Bumps the dev-sinon group with 2 updates in the /packages/cli-hooks directory: [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) and [sinon](https://github.com/sinonjs/sinon).


Updates `@types/sinon` from 21.0.1 to 22.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `sinon` from 21.1.2 to 22.0.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v21.1.2...v22.0.0)

---
updated-dependencies:
- dependency-name: "@types/sinon"
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-sinon
- dependency-name: sinon
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dev-sinon
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/cli-hooks/dev-sinon-c4e0d06176 branch from 10e1793 to 5c26324 Compare July 17, 2026 20:33
@WilliamBergamin
WilliamBergamin enabled auto-merge (squash) July 20, 2026 14:19
@WilliamBergamin
WilliamBergamin merged commit 1e3c0c5 into main Jul 20, 2026
12 checks passed
@WilliamBergamin
WilliamBergamin deleted the dependabot/npm_and_yarn/packages/cli-hooks/dev-sinon-c4e0d06176 branch July 20, 2026 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@WilliamBergamin WilliamBergamin WilliamBergamin approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code pkg:cli-hooks applies to `@slack/cli-hooks`

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@WilliamBergamin