#3509 Bump sinon from 9.2.0 to 21.1.2

[Anonymous]

Originally created by: dependabot[bot]

Bumps sinon from 9.2.0 to 21.1.2.

Changelog

Sourced from sinon's changelog.

21.1.2

• 53817f7d Upgrade to ESLint 10 and new shared config (#2696](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2696">/issues/2696)) (Carl-Erik Kopseng)

  • Upgrade to ESLint 10 and new shared config
  • Update deps

• d7a682e0 fix: move npm-run-all to devDeps (#2694](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2694">/issues/2694)) (Avi Vahl)

  used only during dev, and caused a considerable dep count jump downstream

• 5b8720ec use latest shared eslint-config (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-11.

21.1.1

• 3c8b023b Update deps (Carl-Erik Kopseng)
• 2eabf5da fix(#2692](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2692">/issues/2692)): Remove ESM-only supports-color as it breaks CJS exports (#2693](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2693">/issues/2693)) (Carl-Erik Kopseng)

  • fix(#2692](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2692">/issues/2692)): Remove ESM-only supports-color as it breaks CJS exports

Released by Carl-Erik Kopseng on 2026-04-10.

21.1.0

• 0a5526c5 updated deps (Carl-Erik Kopseng)
• 5262204f fix: build artifacts before running bundled tests (Carl-Erik Kopseng)
• 819bb64b Migration to ECMAScript modules (ESM) (#2683](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2683">/issues/2683)) (Carl-Erik Kopseng)

  This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating ./lib

  • Modern ignores 😁
  • test: add distribution harness
  • test: verify packed cjs and esm entrypoints
  • test: lock distribution api manifest
  • test: smoke test built pkg artifacts
  • docs: require contract tests for package migration
  • test: guard esm migration regressions
  • docs: require contract gate for esm migration
  • build: generate cjs lib from esm source entries
  • refactor: port root api surface to esm
  • build: clean port of root api to esm
  • docs: include implementation plans
  • fix: align lint and smoke tests with esm migration
  • refactor: complete esm port of all core components
  • refactor: finalize esm migration with sandbox and naming fixes
  • fix: finish esm migration stabilization

... (truncated)

Commits

• c9ee063 21.1.2
• 53817f7 Upgrade to ESLint 10 and new shared config (#2696](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2696">/issues/2696))
• d7a682e fix: move npm-run-all to devDeps (#2694](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2694">/issues/2694))
• 5b8720e use latest shared eslint-config
• 40f9d6b 21.1.1
• 3c8b023 Update deps
• 2eabf5d fix(#2692](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2692">/issues/2692)): Remove ESM-only supports-color as it breaks CJS exports (#2693](https://github.com/href="https://redirect.github.com/sinonjs/sinon/issues/2693">/issues/2693))
• 30cf67e 21.1.0
• 0a5526c updated deps
• 5262204 fix: build artifacts before running bundled tests
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by fatso83, a new releaser for sinon since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name=""> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </dependency>