Bump sinon and @types/sinon

[dependabot]

Bumps sinon and @types/sinon. These dependencies needed to be updated together.
Updates sinon from 11.1.2 to 21.0.3

Changelog

Sourced from sinon's changelog.

21.0.3

• 0494251b fix(#2678): upgrade samsam to fix buffer comparisons (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-16.

21.0.2

• 024321c4 fix: skip Node specific tests in browser env (Carl-Erik Kopseng)
• b836fccb fix: js-yaml breaking change from v3 to v4 (Carl-Erik Kopseng)
• ebf0c431 docs: add how-to article for stubbing ES module imports (#1832) (#2676) (Eduard Barrera)

  • docs: add how-to article for stubbing ES module imports with esm package

  Adds a comprehensive How-To guide that addresses issue #1832, documenting how to configure Node.js to allow Sinon stubs to work with ES modules.

  • Explains why ES module namespace bindings are immutable by spec
  • Shows how to use the 'esm' npm package with mutableNamespace: true
  • Provides a complete working example with project layout, package.json, loader file, source modules, and a full test suite
  • Documents limitations (destructured imports, non-standard behavior)
  • Replaces the TODO comment in link-seams-commonjs.md with a cross-reference

  Closes #1832 Co-authored-by: Eduard Barrera eduardbar@users.noreply.github.com Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

• ebcd506c Fix spies not being reset properly (#2673) (simon-id)
• 3beab2ba Make doc tests pass with new jQuery (Carl-Erik Kopseng)
• 766715c6 build: reduce transitive audit findings (Carl-Erik Kopseng)
• 92aaf5c9 build: upgrade eslint config and replace dependency-check (Carl-Erik Kopseng)
• c6aaa871 chore: ignore project worktrees (Carl-Erik Kopseng)
• ef387e8e Upgrade most deps (Carl-Erik Kopseng)
• 3cf4e77d docs: improve writing of documentation (#2675) (Eduardo de la Cruz Palacios)
• 6349032f Check login status before publishing steps are performed (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-04.

21.0.1

... (truncated)

Commits

• 1381482 21.0.3
• 0494251 fix(#2678): upgrade samsam to fix buffer comparisons
• 2d93d68 21.0.2
• 3af394e lint-staged -> 16.3.2
• 2948314 prettier
• 024321c fix: skip Node specific tests in browser env
• b836fcc fix: js-yaml breaking change from v3 to v4
• ebf0c43 docs: add how-to article for stubbing ES module imports (#1832) (#2676)
• ebcd506 Fix spies not being reset properly (#2673)
• 3beab2b Make doc tests pass with new jQuery
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by fatso83, a new releaser for sinon since your current version.

Updates @types/sinon from 10.0.2 to 21.0.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Assignees

The following users could not be added as assignees: DrozmotiX. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

[DutchmanNL]

Superseded by the consolidated maintenance pass in #165 (merged). Dependencies were updated in bulk and repository-checker findings addressed there.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.