chore(deps-dev): bump the test-tools group across 1 directory with 4 updates - #200
Merged
Merged
Conversation
…updates Bumps the test-tools group with 4 updates in the / directory: [mocha](https://github.com/mochajs/mocha), [nyc](https://github.com/istanbuljs/nyc), [sinon](https://github.com/sinonjs/sinon) and [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon). Updates `mocha` from 10.8.2 to 11.7.5 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md) - [Commits](mochajs/mocha@v10.8.2...v11.7.5) Updates `nyc` from 15.1.0 to 18.0.0 - [Release notes](https://github.com/istanbuljs/nyc/releases) - [Changelog](https://github.com/istanbuljs/nyc/blob/main/CHANGELOG.md) - [Commits](istanbuljs/nyc@v15.1.0...nyc-v18.0.0) Updates `sinon` from 15.2.0 to 21.1.2 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v15.2.0...v21.1.2) Updates `@types/sinon` from 10.0.20 to 21.0.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) --- updated-dependencies: - dependency-name: mocha dependency-version: 11.7.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: test-tools - dependency-name: nyc dependency-version: 18.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: test-tools - dependency-name: sinon dependency-version: 21.1.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: test-tools - dependency-name: "@types/sinon" dependency-version: 21.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: test-tools ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dhensby
approved these changes
Apr 28, 2026
dhensby
left a comment
dhensby
left a comment
Owner
There was a problem hiding this comment.
Dependabot Review: test-tools group (4 majors, dev-only)
Package Changes
| Package | Change | Publisher |
|---|---|---|
mocha |
10.8.2 → 11.7.5 | voxpelli (mochajs maintainer) |
nyc |
15.1.0 → 18.0.0 | bcoe (nyc maintainer) |
sinon |
15.2.0 → 21.1.2 | fatso83 (sinon maintainer) |
@types/sinon |
10.0.20 → 21.0.1 | DefinitelyTyped automation |
Supply-Chain Verification ✅
- mocha 11.7.5: GitHub release
v11.7.5published bygithub-actions[bot], npm timestamp aligns - nyc 18.0.0: no GitHub release/tag, but commit
chore(main): release nyc 18.0.0 (#1613)on 2026-02-22 matches npm publish; the build commit notes manual publication due to token rotation - sinon 21.1.2: tag
v21.1.2present in source repo - @types/sinon 21.0.1: DefinitelyTyped automation as expected
- No install hooks on any package; PR diff is
package.json+package-lock.jsononly
CI ✅
All checks green: Lint code, Lint commits, Run tests (16.x/18.x/20.x/22.x), Test coverage.
Notes
mocha@11engines>=18.18;nyc@18engines20 || >=22. Node 16/18 entries in the CI matrix will emit EBADENGINE warnings but npm only warns, not fails. Worth pruning the lower matrix entries as a follow-up.chai/sinon-chaiexcluded from this group per dependabot ignore — avoids the ESM peer-dep cascade.
Approved. Dev-only majors from known maintainers; full CI matrix green; no source changes.
|
🎉 This PR is included in version 1.0.6 🎉 The release is available on: Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the test-tools group with 4 updates in the / directory: mocha, nyc, sinon and @types/sinon.
Updates
mochafrom 10.8.2 to 11.7.5Release notes
Sourced from mocha's releases.
... (truncated)
Changelog
Sourced from mocha's changelog.
... (truncated)
Commits
9a6a5dbchore(v11.x): release 11.7.5 (#5523)8b21b38chore: run tests on PRs for and pushes to v11.x (#5525)663fff4chore: setup release-please for v11 (#5522)8d97220Update release-please to include v11.x and use Node ^22d89dbaffix: swallow morerequireerrors from *ts files (#5498)8649f39chore(main): release 11.7.4 (#5473)c2667c3fix: watch mode using chokidar v4 (#5379)7f68e5cchore: remove trailing spaces (#5475)bff9166Docs: migrate remaining legacy wiki pages to main documentation (#5465)c805327chore(main): release 11.7.3 (#5455)Updates
nycfrom 15.1.0 to 18.0.0Release notes
Sourced from nyc's releases.
Changelog
Sourced from nyc's changelog.
... (truncated)
Commits
3ce6d97chore(main): release nyc 18.0.0 (#1613)b9f6781build: publication is now manual again due to changes in tokens0707729fix(deps)!: update dependencies pulling in old glob (#1612)41f4476chore(main): release nyc 17.1.0 (#1572)d338985chore(deps-dev): bump requirejs from 2.3.6 to 2.3.7 (#1582)af74d1efeat(deps): bump foreground-child from ^2.0.0 to ^3.0.0 (#1546)ae657b6fix: reduce size of serialized JSON output (#1570)b6a9484chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#1571)b86edbcchore(deps-dev): bump ws from 8.16.0 to 8.17.1 (#1568)fee2821chore(main): release nyc 17.0.0 (#1558)Updates
sinonfrom 15.2.0 to 21.1.2Changelog
Sourced from sinon's changelog.
... (truncated)
Commits
c9ee06321.1.253817f7Upgrade to ESLint 10 and new shared config (#2696)d7a682efix: move npm-run-all to devDeps (#2694)5b8720euse latest shared eslint-config40f9d6b21.1.13c8b023Update deps2eabf5dfix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693)30cf67e21.1.00a5526cupdated deps5262204fix: build artifacts before running bundled testsMaintainer changes
This version was pushed to npm by fatso83, a new releaser for sinon since your current version.
Updates
@types/sinonfrom 10.0.20 to 21.0.1Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions