#3497 Bump sinon from 9.2.0 to 21.0.3

[Anonymous]

Originally created by: dependabot[bot]

Bumps sinon from 9.2.0 to 21.0.3.

Changelog

Sourced from sinon's changelog.

21.0.3

• 0494251b fix(#2678](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2678">/issues/2678)): upgrade samsam to fix buffer comparisons (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-16.

21.0.2

• 024321c4 fix: skip Node specific tests in browser env (Carl-Erik Kopseng)
• b836fccb fix: js-yaml breaking change from v3 to v4 (Carl-Erik Kopseng)
• ebf0c431 docs: add how-to article for stubbing ES module imports (#1832](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/1832">/issues/1832)) (#2676](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2676">/issues/2676)) (Eduard Barrera)

  • docs: add how-to article for stubbing ES module imports with esm package

  Adds a comprehensive How-To guide that addresses issue #1832](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/1832">/issues/1832), documenting how to configure Node.js to allow Sinon stubs to work with ES modules.

  • Explains why ES module namespace bindings are immutable by spec
  • Shows how to use the 'esm' npm package with mutableNamespace: true
  • Provides a complete working example with project layout, package.json, loader file, source modules, and a full test suite
  • Documents limitations (destructured imports, non-standard behavior)
  • Replaces the TODO comment in link-seams-commonjs.md with a cross-reference

  Closes #1832](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/1832">/issues/1832) Co-authored-by: Eduard Barrera eduardbar@users.noreply.github.com Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

• ebcd506c Fix spies not being reset properly (#2673](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2673">/issues/2673)) (simon-id)
• 3beab2ba Make doc tests pass with new jQuery (Carl-Erik Kopseng)
• 766715c6 build: reduce transitive audit findings (Carl-Erik Kopseng)
• 92aaf5c9 build: upgrade eslint config and replace dependency-check (Carl-Erik Kopseng)
• c6aaa871 chore: ignore project worktrees (Carl-Erik Kopseng)
• ef387e8e Upgrade most deps (Carl-Erik Kopseng)
• 3cf4e77d docs: improve writing of documentation (#2675](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2675">/issues/2675)) (Eduardo de la Cruz Palacios)
• 6349032f Check login status before publishing steps are performed (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-04.

21.0.1

... (truncated)

Commits

• 1381482 21.0.3
• 0494251 fix(#2678](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2678">/issues/2678)): upgrade samsam to fix buffer comparisons
• 2d93d68 21.0.2
• 3af394e lint-staged -> 16.3.2
• 2948314 prettier
• 024321c fix: skip Node specific tests in browser env
• b836fcc fix: js-yaml breaking change from v3 to v4
• ebf0c43 docs: add how-to article for stubbing ES module imports (#1832](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/1832">/issues/1832)) (#2676](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2676">/issues/2676))
• ebcd506 Fix spies not being reset properly (#2673](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2673">/issues/2673))
• 3beab2b Make doc tests pass with new jQuery
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by fatso83, a new releaser for sinon since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name=""> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </dependency>

[Anonymous]

Originally posted by: dependabot[bot]

Superseded by [#3509].

[Anonymous]

Ticket changed by: dependabot[bot]

• status: open --> closed