Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency sinon to v13 - abandoned #257

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
sinon (source) devDependencies major ^4.5.0 -> ^13.0.2

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.1 WS-2018-0590 #22

Release Notes

sinonjs/sinon

v13.0.2

Compare Source

  • bddb631a
    Update fake-timers (Carl-Erik Kopseng)
  • eaed0eb2
    Bump nokogiri from 1.13.3 to 1.13.4 (#​2451) (dependabot[bot])

Released by Carl-Erik Kopseng on 2022-04-14.

v13.0.1

Compare Source

  • ec4223f9
    Bump nise to fix sinonjs/nise#​193 (Carl-Erik Kopseng)
  • f329a010
    Add unimported to workflow (#​2441) (Morgan Roderick)
  • 7f16cec9
    Enable updates to same major version (Carl-Erik Kopseng)
  • f784d7ad
    Re-introduce new version.sh script to version hook (Joel Bradshaw)

    This was inadvertently removed during merge conflicts, and is required
    for any of the new release process stuff to work

  • 51c508ab
    Add dry run mode to npm version (#​2436) (Joel Bradshaw)
    • Add DRY_RUN flag to skip publish/push

    • Allow overriding branch names for testing

  • 05341dcf
    Update npm version scripts to manage new releases branch (Joel Bradshaw)
  • fe658261
    Remove release archives from master (Joel Bradshaw)

    These archives made it difficult to find things in the GitHub interface,
    and take up a lot of space in a checked-out repo for something that is
    not useful to most people checking out the repository.

    The main purpose of these archives is to make old versions and
    documentation available on the Sinon website that is run out of this
    repo. This can be supported by using a separate branch for website
    releases, and to maintain the archives.

    Following this commit, the npm version scripts will be updated to
    automatically handle archiving the releases in the new releases branch
    and keeping it up to date with master.

    Also remove the directories we removed from .prettierignore, since they
    don't exist any more.

Released by Carl-Erik Kopseng on 2022-02-01.

v13.0.0

Compare Source

  • cf3d6c0c
    Upgrade packages (#​2431) (Carl-Erik Kopseng)
    • Update all @​sinonjs/ packages

    • Upgrade to fake-timers 9

    • chore: ensure always using latest LTS release

  • 41710467
    Adjust deploy scripts to archive old releases in a separate branch, move existing releases out of master (#​2426) (Joel Bradshaw)

    Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

  • c80a7266
    Bump node-fetch from 2.6.1 to 2.6.7 (#​2430) (dependabot[bot])

    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

  • a00f14a9
    Add explicit export for ./* (#​2413) (なつき)
  • b82ca7ad
    Bump cached-path-relative from 1.0.2 to 1.1.0 (#​2428) (dependabot[bot])
  • a9ea1427
    Add documentation for assert.calledOnceWithMatch (#​2424) (Mathias Schreck)
  • 1d5ab86b
    Be more general in stripping off stack frames to fix Firefox tests (#​2425) (Joel Bradshaw)
  • 56b06129
    Check call count type (#​2410) (Joel Bradshaw)
  • 7863e2df
    Fix #​2414: make Sinon available on homepage (Carl-Erik Kopseng)
  • fabaabdd
    Bump nokogiri from 1.11.4 to 1.13.1 (#​2423) (dependabot[bot])
  • dbc0fbd2
    Bump shelljs from 0.8.4 to 0.8.5 (#​2422) (dependabot[bot])
  • fb8b3d72
    Run Prettier (Carl-Erik Kopseng)
  • 12a45939
    Fix 2377: Throw error when trying to stub non-configurable or non-writable properties (#​2417) (Stuart Dotson)

    Fixes issue #​2377 by throwing an error when trying to stub non-configurable or non-writable properties

Released by Carl-Erik Kopseng on 2022-01-28.

v12.0.1

Compare Source

  • 3f598221
    Fix issue with npm unlink for npm version > 6 (Carl-Erik Kopseng)
  • 51417a38
    Fix bundling of cjs module (#​2412) (Julian Grinblat)

Released by Carl-Erik Kopseng on 2021-11-04.

v12.0.0

Compare Source

  • b20ef9e4
    Upgrade to fake-timers@8 (Carl-Erik Kopseng). This is potentially breaking, but should not be,
    as the breaking change deals with the Node timer object created by fake timers.
  • eba42cc3
    Enable esm named exports (#​2382) (Julian Grinblat)
  • b0cf5448
    Spelling (#​2398) (Josh Soref)
  • e78a6706
    Make calledWith() assertions idempotent (#​2407) (Joel Bradshaw)
  • 2814c0a2
    Generate CHANGES.md using @​studio/changes (Morgan Roderick)

    This will bring us closer to having the same release process as the
    other @sinonjs packages.

  • 2d5d6ad4
    Run tests in Node 16 in GitHub Actions (Morgan Roderick)

Released by Carl-Erik Kopseng on 2021-11-03.

v11.1.2

Compare Source

v11.1.1

Compare Source

  • Fix #​2379 by using v7 of supports-color

v11.1.0

Compare Source

  • Add sinon.promise() implementation (#​2369)
  • Set wrappedMethod on getters/setters (#​2378)
  • [Docs] Update fake-server usage & descriptions (#​2365)
  • Fake docs improvement (#​2360)
  • Update nise to 5.1.0 (fixed #​2318)

v11.0.0

Compare Source

  • Explicitly use samsam 6.0.2 with fix for #​2345
  • Update most packages (#​2371)
  • Update compatibility docs (#​2366)
  • Update packages (includes breaking fake-timers change, see #​2352)
  • Warn of potential memory leaks (#​2357)
  • Fix clock test errors

v10.0.1

Compare Source

  • Upgrade sinon components (bumps y18n to 4.0.1)
  • Bump y18n from 4.0.0 to 4.0.1

v10.0.0

Compare Source

v9.2.4

Compare Source

v9.2.3

Compare Source

v9.2.2

Compare Source

v9.2.1

Compare Source

  • Fix #​2203: skip writing 'name' property if not writable (#​2304)
  • Update error message on assert when representation of expected and actual value is equal, fixing issue #​2084 (#​2303)
  • Make sandboxes each use their own assert object (#​2302)
  • Add usingPromise() method on fakes to fix issue #​2293 (#​2301)

v9.2.0

Compare Source

  • Update dependencies (#​2299)
  • Update sandbox docs with missing comma
  • Add minor markdown formatting to release docs for sandbox
  • Minor formatting improvements to legacy sandbox documentation

v9.1.0

Compare Source

  • Add a calledOnceWithMatch assertion (#​2294)

v9.0.3

Compare Source

v9.0.2

Compare Source

v9.0.1

Compare Source

  • Fix #​2226: restore props defined on prototype chain by deleting

v9.0.0

Compare Source

  • Ignore errors on thisValue property accesses (#​2216)
  • Add firstArg to spy calls and fakes. (#​2150)
  • Drop Node 8 support

v8.1.1

Compare Source

v8.1.0

Compare Source

  • Support negative indices in getCall (#​2199)

v8.0.4

Compare Source

  • Remove misleading 'own' from exception message

v8.0.3

Compare Source

  • Move .printf to proxy

v8.0.2

Compare Source

v8.0.1

Compare Source

  • Force upgrade @​sinonjs/commons (#​2181)
  • Update docs/changelog.md and set new release id in docs/_config.yml
  • Add release documentation for v8.0.0

v8.0.0

Compare Source

The major release is caused by removing old mistakes and upgrading dependencies that themselves have had new major releases.

v7.5.0

Compare Source

  • Add sinon.assert.calledOnceWithExactly
  • Feature parity: support spying all methods on an object

v7.4.2

Compare Source

  • Restore sinon.createStubInstance() behaviour (#​2073)
  • Fix Typo in migration 6 and updated migration docs for migration from… (#​2074)

v7.4.1

Compare Source

  • Update nise and lolex (minor versions)
  • add callThroughWithNew method
  • add browser field
  • Create COMPATIBILITY.md (#​2051)
  • Fix sinon.resetHistory() does not reset history (#​2022)

v7.3.2

Compare Source

v7.3.1

Compare Source

v7.3.0

Compare Source

  • Simplify Circle CI setup
  • Add a Docker Compose config file for testing the setup locally
  • Inject createStubInstance and fake functionality
  • Remove unused prop 'injectIntoThis'
  • Fix #​1974 by upgrading to @​sinonjs/samsam@​3.3.0

v7.2.7

Compare Source

  • Retain spy function names and fix spy.named(name) (#​1987)
  • Document spying on accessors (#​1976)

v7.2.6

Compare Source

v7.2.5

Compare Source

  • don't call extends.nonEnum in spy.resetHistory (#​1984)

v7.2.4

Compare Source

  • minor package updates
  • Update eslint-plugin-mocha
  • Fix high prio audit warnings
  • Update nise to use @​sinonjs/text-encoding
  • Make all properties non-enumerable in spies, stubs, mocks and fakes
  • docs(sandbox): add example for default sandbox

v7.2.3

Compare Source

v7.2.2

Compare Source

  • Fix mock.withArgs using matchers (#​1961)

v7.2.1

Compare Source

v7.2.0

Compare Source

  • Upgrade to samsam 3 (#​1955)
  • Rename History.md to CHANGELOG.md

v7.1.1

Compare Source

  • Make the spy functions non enumerable so that printing it is more concise (#​1936)

v7.1.0

Compare Source

  • Issue #​1852: Add a way to pass a global context to lolex when calling useFakeTimers
  • Get latest 'nise' patch

v7.0.0

Compare Source

  • Update to Lolex 3: no negative ticks allowed

v6.3.5

Compare Source

  • Upgrade lolex
  • Upgrade @​sinonjs/samsam - fixes minor issue with IE11 introduced in 6.3.4

v6.3.4

Compare Source

  • Update samsam, puppeteer and rollup
  • Fix #​1850 (keep context in fakes)

v6.3.3

Compare Source

  • Upgrade formatio, samsam, nise and referee

v6.3.2

Compare Source

  • Adds guard for empty properties in deepEqual when a matcher is provided (#​1901)

v6.3.1

Compare Source

  • Fix use of non-cached reference to forEach

v6.3.0

Compare Source

  • Allow providing stubs overrides for sinon.createStubInstance (#​1864)
  • Bump Lolex to 2.7.4 to include IE fixes for performance.mark

v6.2.0

Compare Source

  • Add mock.usingPromise to set the Promise library for mock expectations

v6.1.6

Compare Source

  • Upgrade Lolex, Nise and other dependencies

v6.1.5

Compare Source

  • Fix #​1796, failing to stub Array.prototype.sort

v6.1.4

Compare Source

  • Update lolex and nise dependencies to latest versions

v6.1.3

Compare Source

  • Fix issue with matchers and cyclic references (#​1709)

v6.1.2

Compare Source

  • Made callsArg, returnsArg, and throwsArg more strict (#​1848)

v6.1.1

Compare Source

  • Restore useFakeXMLHttpRequest correctly in default sandbox (#​1840)

v6.1.0

Compare Source

  • Syntax sugar for resolvesArg (#​1846)

v6.0.1

Compare Source

  • Add fake behaviors to sandbox (#​1815)

v6.0.0

Compare Source

  • Export Sinon and its functions as an EcmaScript module (#​1809 and #​1835)
  • Document/test call ordering checks

v5.1.1

Compare Source

  • Remove ES2015 'module' field for 5x branch (fix in separate branch - see tag)

v5.1.0

Compare Source

5## .0.10

  • Remove functions shadowing time related sandbox methods (#​1802)

v5.0.10

Compare Source

v5.0.9

Compare Source

  • Upgrade @std/esm to esm.

v5.0.8

Compare Source

  • Add isSealed check to is-es-module to make certain ESM mocks possible

v5.0.7

Compare Source

v5.0.6

Compare Source

  • Remove support-sinon.js as postinstall banner

v5.0.5

Compare Source

  • Refuse to replace already replaced values (#​1779)

v5.0.4

Compare Source

  • Fix #​1781: Reject non-function values a f argument to fake

v5.0.3

Compare Source

  • Fix #​1775: Default sandbox does not restore stubs, spies, mocks

v5.0.2

Compare Source

  • Reset history on sandbox reset (#​1770)

v5.0.1

Compare Source

  • Remove deprecated spy.reset method
  • Add sinon.replace, sinon.replaceGetter and sinon.replaceSetter
  • Add fake
  • Use sinon as a default sandbox

v5.0.0

Compare Source


  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label May 1, 2022
@mend-for-github-com
Copy link
Contributor Author

mend-for-github-com bot commented Jun 19, 2022

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@mend-for-github-com mend-for-github-com bot changed the title Update dependency sinon to v13 Update dependency sinon to v13 - abandoned Jan 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants