Skip to content

Bump sinon from 11.1.2 to 19.0.4 - #411

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sinon-19.0.4
Closed

Bump sinon from 11.1.2 to 19.0.4#411
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/sinon-19.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 20, 2025

Copy link
Copy Markdown
Contributor

Bumps sinon from 11.1.2 to 19.0.4.

Changelog

Sourced from sinon's changelog.

19.0.4

The release script failed half-way in 19.0.3, so re-releasing.

  • da67311a Revert "Add version 19.0.3 to releases" (Carl-Erik Kopseng)
  • 84d5c82a Add version 19.0.3 to releases (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2025-03-19.

19.0.3

Basically just documentation updates

  • 1f1d3706 Verifying links procedure (Carl-Erik Kopseng)
  • 37623efc Catch latest two missing redirects (Carl-Erik Kopseng)
  • 2404a45f Ignore ancient deadlinks to Sinon child projects in previous releases (Carl-Erik Kopseng)
  • fba6f877 Ignore historic links in changelog (Carl-Erik Kopseng)
  • e3950d9b Fix external link (Carl-Erik Kopseng)
  • 0be40825 Fix the missing redirects to the migration guide (Carl-Erik Kopseng)
  • 108fbca0 Fix internal ../assertions link in source (Carl-Erik Kopseng)
  • bb10e53a Fix spy-call reference in source (Carl-Erik Kopseng)
  • ef582e31 Remove bash-ism from Makefile (use POSIX) (Carl-Erik Kopseng)
  • 7af1d235 chore: remove .unimportedrc.json (Morgan Roderick)
  • dfcad710 chore: fix codecov upload (Morgan Roderick)

    We are seeing errors uploading coverage reports to codecov:

    Rate limit reached. Please upload with the Codecov repository upload token to resolve issue
    

    I've added a repository token, as instructed in https://docs.codecov.com/docs/adding-the-codecov-token.

    This changeset should fix the upload issue.

  • 0ca2e49e fix: browser-test job fails in ubuntu-latest (Morgan Roderick)
  • e9eb2eb2 chore: remove unused unused job (Morgan Roderick)

... (truncated)

Commits
  • 8122a5b 19.0.4
  • da67311 Revert "Add version 19.0.3 to releases"
  • 84d5c82 Add version 19.0.3 to releases
  • 632e016 19.0.3
  • 1f1d370 Verifying links procedure
  • 37623ef Catch latest two missing redirects
  • 2404a45 Ignore ancient deadlinks to Sinon child projects in previous releases
  • fba6f87 Ignore historic links in changelog
  • e3950d9 Fix external link
  • 0be4082 Fix the missing redirects to the migration guide
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by fatso83, a new releaser for sinon since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sinon](https://github.com/sinonjs/sinon) from 11.1.2 to 19.0.4.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](sinonjs/sinon@v11.1.2...v19.0.4)

---
updated-dependencies:
- dependency-name: sinon
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 20, 2025
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/diff 7.0.0 🟢 4.2
Details
CheckScoreReason
Dangerous-Workflow⚠️ -1no workflows found
Code-Review⚠️ 0Found 2/24 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1010 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 91 existing vulnerabilities detected
npm/sinon 19.0.4 🟢 5.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 77 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 7
Code-Review⚠️ 2Found 7/26 approved changesets -- score normalized to 2
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Security-Policy⚠️ 0security policy file not detected
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST🟢 8SAST tool is not run on all commits -- score normalized to 8
Vulnerabilities🟢 46 existing vulnerabilities detected
npm/sinon ^19.0.4 🟢 5.8
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 77 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 7
Code-Review⚠️ 2Found 7/26 approved changesets -- score normalized to 2
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Security-Policy⚠️ 0security policy file not detected
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST🟢 8SAST tool is not run on all commits -- score normalized to 8
Vulnerabilities🟢 46 existing vulnerabilities detected

Scanned Files

  • package-lock.json
  • package.json

@dependabot @github

dependabot Bot commented on behalf of github Mar 24, 2025

Copy link
Copy Markdown
Contributor Author

Superseded by #415.

@dependabot dependabot Bot closed this Mar 24, 2025
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/sinon-19.0.4 branch March 24, 2025 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants