chore(deps): update test dependencies (major)

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
mocha (source)	^10.7.3 -> ^11.7.3
npm-run-all2	^6.2.2 -> ^8.0.4
sinon (source)	^19.0.2 -> ^21.0.0

---

Release Notes

mochajs/mocha (mocha)

v11.7.3

Compare Source

🩹 Fixes

• use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#​5408) (ebdbc48)

📚 Documentation

• add security escalation policy (#​5466) (4122c7d)
• fix duplicate global leak documentation (#​5461) (1164b9d)
• migrate third party UIs wiki page to docs (#​5434) (6654704)
• update maintainer release notes for release-please (#​5453) (185ae1e)

🤖 Automation

• deps: bump actions/setup-node in the github-actions group (#​5459) (48c6f40)

v11.7.2

Compare Source

🩹 Fixes

• fail with an informative error message on a file with a broken default import (#​5413) (b0e6135)
• load mjs files correctly (#​5429) (a947b9b)

📚 Documentation

• add banner from old site to new site, link from new to old (#​5414) (dedef11)
• add info on spies to legacy docs (#​5421) (21f5544)
• explain node import swallowing error (#​5401) (09f5b2c)
• fix links in new site (#​5416) (b2bc769)
• migrate assertion libraries wiki link to main docs (#​5442) (95f3ca8)
• migrate count assertions wiki page to docs (#​5438) (02a306c)
• migrate shared behaviours to docs-next (#​5432) (1dc4aa9)
• migrate Spies wiki page to explainers (#​5420) (cbcf007)
• Migrate tagging wiki page to docs (#​5435) (876247a)
• migrate third party reporters wiki page to docs (#​5433) (f70764c)
• migrate to global leak wiki page to docs (#​5437) (8a6fdca)
• update /next bug report link to be docs issue template (#​5424) (668cb66)

🧹 Chores

• add issue form for ⚡️ Performance (#​5406) (a908b3b)
• add test for -R import-only-loader (#​5391) (6ee5b48)
• also test Node.js 24 in CI (#​5405) (15f5980)
• bump CI to use 20.19.4, 22.18.0, 24.6.0 (#​5430) (ace5eb4)
• bump Knip to 5.61.2 (#​5394) (f3d7430)
• cleanup references of --opts (#​5402) (1096b37)
• enabled ESLint's no-unused-vars (#​5399) (d4168ae)
• move callback and object typedefs to a new types.d.ts (#​5351) (3300d21)
• rewrite base path instead of copy-pasting (#​5431) (c6c6740)
• unify caught errors as err (#​5439) (d4912e7)
• Update experimental module detection test and pin exact Node versions (#​5417) (2489090)

🤖 Automation

• deps: bump actions/checkout in the github-actions group (#​5419) (03ac2d0)

v11.7.1

Compare Source

🩹 Fixes

• always fallback to import() if require() fails (#​5384) (295c168)

🧹 Chores

• add esm loader test (#​5383) (f58e49f)

v11.7.0

Compare Source

🌟 Features

• use require to load esm (#​5366) (41e24a2)

v11.6.0

Compare Source

🌟 Features

• bump workerpool from ^6.5.1 to ^9.2.0 (#​5350) (581a3c5)

v11.5.0

Compare Source

🌟 Features

• bump mimimatch from ^5.1.6 to ^9.0.5 (#​5349) (a3dea85)

v11.4.0

Compare Source

🌟 Features

• bump diff from ^5.2.0 to ^7.0.0 (#​5348) (554d6bb)

📚 Documentation

• added CHANGELOG.md note around 11.1 yargs-parser update (#​5362) (618415d)

v11.3.0

Compare Source

🌟 Features

• add option to use posix exit code upon fatal signal (#​4989) (91bbf85)

📚 Documentation

• Deploy new site alongside old one (#​5360) (6c96545)
• mention explicit browser support range (#​5354) (c514c0b)
• update Node.js version requirements for 11.x (#​5329) (abf3dd9)

🧹 Chores

• remove prerelease setting in release-please config (#​5363) (8878f22)

v11.2.2

Compare Source

🩹 Fixes

• deps: update chokidar to v4 (#​5256) (8af0f1a)

📚 Documentation

• add ClientRedirects.astro (#​5324) (b88d441)
• add example/tests.html to docs-next (#​5325) (6ec5762)

v11.2.1

Compare Source

🩹 Fixes

• switch from ansi-colors to picocolors (#​5323) (7c08d09)

📚 Documentation

• fix new website typos, improve readability (#​5312) (fbceb19)

🧹 Chores

• "force" Netlify to use npm to build new site (#​5319) (3a46855)
• Fix tests (#​5320) (18699a0)

v11.2.0

Compare Source

🌟 Features

• enable reporters to show relative paths of tests (#​5292) (81ea666)

📚 Documentation

• add instructions for API docs (#​5287) (b720ec1)
• add new website using Astro Starlight (#​5246) (b1f1cb7)
• improve third-party reporter docs (#​5285) (c5a0ef5)

🧹 Chores

• enabled eslint-plugin-n (#​5280) (945d6e3)
• pin node-lts tests to 22.11.0 (#​5279) (664e1f4)
• replace fs-extra with newer fs built-ins (#​5284) (75dcf8c)

v11.1.0

Compare Source

🌟 Features

• bump yargs to 17 (#​5165) (8f1c8d8)
  • Note that this also included a version bump of yargs-parser from ^20.2.9 to ^21.1., which fixed a bug that caused extra quotes in file paths to be removed.
    See #​5341 for more information.
• replace strip-ansi with util.stripVTControlCharacters (#​5267) (3c191c0), closes #​5265

v11.0.2

Compare Source

🩹 Fixes

• catch exceptions setting Error.stackTraceLimit (#​5254) (259f8f8)
• error handling for unexpected numeric arguments passed to cli (#​5263) (210d658)

📚 Documentation

• correct outdated status: accepting prs link (#​5268) (f729cd0)
• replace "New in" with "Since" in version annotations (#​5262) (6f10d12)

v11.0.1

Compare Source

🌟 Features

• bumped glob dependency from 8 to 10 (#​5250) (43c3157)

📚 Documentation

• fix examples for linkPartialObjects methods (#​5255) (34e0e52)

v11.0.0

Compare Source

⚠ BREAKING CHANGES

• adapt new engine range for Mocha 11 (#​5216)

🌟 Features

• allow calling hook methods (#​5231) (e3da641)

🩹 Fixes

• adapt new engine range for Mocha 11 (#​5216) (80da25a)

📚 Documentation

• downgrade example/tests chai to 4.5.0 (#​5245) (eac87e1)

v10.8.2

Compare Source

🩹 Fixes

• support errors with circular dependencies in object values with --parallel (#​5212) (ba0fefe)
• test link in html reporter (#​5224) (f054acc)

📚 Documentation

• indicate 'exports' interface does not work in browsers (#​5181) (14e640e)

🧹 Chores

• fix docs builds by re-adding eleventy and ignoring gitignore again (#​5240) (881e3b0)

🤖 Automation

• deps: bump the github-actions group with 1 update (#​5132) (e536ab2)

v10.8.1

Compare Source

🩹 Fixes

• handle case of invalid package.json with no explicit config (#​5198) (f72bc17)
• Typos on mochajs.org (#​5237) (d8ca270)
• use accurate test links in HTML reporter (#​5228) (68803b6)

v10.8.0

Compare Source

🌟 Features

• highlight browser failures (#​5222) (8ff4845)

🩹 Fixes

• remove :is() from mocha.css to support older browsers (#​5225) (#​5227) (0a24b58)

📚 Documentation

• add SECURITY.md pointing to Tidelift (#​5210) (bd7e63a)
• adopt Collective Funds Guidelines 0.1 (#​5199) (2b03d86)
• update README, LICENSE and fix outdated (#​5197) (1203e0e)

🧹 Chores

• fix npm scripts on windows (#​5219) (1173da0)
• remove trailing whitespace in SECURITY.md (7563e59)

bcomnes/npm-run-all2 (npm-run-all2)

v8.0.4

Compare Source

Commits

• Merge pull request #​182 from bcomnes/beta afcc18a

v8.0.3

Compare Source

Commits

• Merge pull request #​175 from bcomnes/revert-pico 75bb00e
• Revert "replace minimatch with picomatch" 5d93a54

v8.0.2

Compare Source

Commits

• Merge pull request #​172 from beeequeue/picomatch 4f42923
• replace minimatch with picomatch 74201f5
• add type field e8f046a

v8.0.1

Compare Source

Commits

• Merge pull request #​159 from bcomnes/dependabot/npm_and_yarn/minimatch-10.0.1 54af3ab
• Upgrade: Bump minimatch from 9.0.5 to 10.0.1 f50ddf4
• Merge pull request #​170 from bcomnes/fix-engine-range e43e670

v8.0.0

Compare Source

Commits

• Breaking change: Raise engine floor to >= Node 20 b1b12f8
• Merge pull request #​169 from bcomnes/node-20-or-greater bb27458

v7.0.2

Compare Source

Merged

• Upgrade: Bump neostandard from 0.11.9 to 0.12.0 #164
• Upgrade: Bump codecov/codecov-action from 4 to 5 #161

Commits

• Raise cross-spawn version floor to ^7.0.6 45a9e19
• Merge pull request #​163 from bcomnes/dependabot/npm_and_yarn/mocha-11.0.1 285967a
• Upgrade: Bump mocha from 10.8.2 to 11.0.1 5d1aea5

v7.0.1

Compare Source

Commits

• Revert engine range bump back to Node 18 b2e849b

v7.0.0

Compare Source

Merged

• Prevent a throw when looking up undefined results #158

Commits

• Breaking change: Bump node engines ^18.17.0 || >=20.5.0 49b95f0
• Merge pull request #​156 from bcomnes/rm-rf-rimraf c661ffc
• Remove rimraf c77e085

v6.2.6

Compare Source

Commits

• Prevent a throw when looking up undefined results d928f9a

v6.2.5

Compare Source

v6.2.4

Compare Source

Merged

• Switch to JS-based which command #154

Fixed

• Switch to JS-based which command #153

v6.2.3

Compare Source

Commits

• Merge pull request #​151 from bcomnes/fix-pnpm-agian c43fa2b
• Avoid passing config fields as flags for pnpm dc2d7da

sinonjs/sinon (sinon)

v21.0.0

Compare Source

• fd10f13f
  chore!: remove assert.failException property (#​2659) (Morgan Roderick)

  This was used for allowing customisation of the thrown error between
  sandboxes and for customisation for integrations (most likely from the
  days of BusterJS).

  To my knowledge and what I've been able to find on GitHub, this has
  never had any production use by end users.

  BREAKING CHANGE: this removes assert.failException from the API

Released by Morgan Roderick on 2025-06-13.

v20.0.0

Compare Source

• b6daed26
  chore!: remove usingPromise (Morgan Roderick)

  Everyone should be using native promises by now, or should know how to stub natives

• 95d4b8fc
  chore!: remove fakeXMLHttpRequest and fakeServer (Morgan Roderick)

  BREAKING CHANGE: remove fakeXMLHttpRequest and fakeServer from the API

Released by Morgan Roderick on 2025-03-24.

v19.0.5

Compare Source

• 67d19ff0
  chore: deprecate usingPromise (#​2651) (Morgan Roderick)
• 598dddb6
  chore: deprecate useFakeXMLHttpRequest and useFakeServer (Morgan Roderick)

Released by Morgan Roderick on 2025-03-23.

v19.0.4

Compare Source

The release script failed half-way in 19.0.3, so re-releasing.

• da67311a
  Revert "Add version 19.0.3 to releases" (Carl-Erik Kopseng)
• 84d5c82a
  Add version 19.0.3 to releases (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2025-03-19.

v19.0.3

Compare Source

Basically just documentation updates

• 1f1d3706
  Verifying links procedure (Carl-Erik Kopseng)
• 37623efc
  Catch latest two missing redirects (Carl-Erik Kopseng)
• 2404a45f
  Ignore ancient deadlinks to Sinon child projects in previous releases (Carl-Erik Kopseng)
• fba6f877
  Ignore historic links in changelog (Carl-Erik Kopseng)
• e3950d9b
  Fix external link (Carl-Erik Kopseng)
• 0be40825
  Fix the missing redirects to the migration guide (Carl-Erik Kopseng)
• 108fbca0
  Fix internal ../assertions link in source (Carl-Erik Kopseng)
• bb10e53a
  Fix spy-call reference in source (Carl-Erik Kopseng)
• ef582e31
  Remove bash-ism from Makefile (use POSIX) (Carl-Erik Kopseng)
• 7af1d235
  chore: remove .unimportedrc.json (Morgan Roderick)
• dfcad710
  chore: fix codecov upload (Morgan Roderick)

  We are seeing errors uploading coverage reports to codecov:

  Rate limit reached. Please upload with the Codecov repository upload token to resolve issue
  

  I've added a repository token, as instructed in https://docs.codecov.com/docs/adding-the-codecov-token.

  This changeset should fix the upload issue.

• 0ca2e49e
  fix: browser-test job fails in ubuntu-latest (Morgan Roderick)
• e9eb2eb2
  chore: remove unused unused job (Morgan Roderick)

  This crucial part of this workflow was removed in
  278e667, we should have removed the entire job.

• 278e667e
  chore: remove unimported (Morgan Roderick)

  The repository has been archived. See https://github.com/smeijer/unimported

• 9e30835b
  npm audit (Morgan Roderick)
• a74301cf
  chore: remove RunKit (Morgan Roderick)

  This service is dead.

• 80bc1d96
  Fix out-of-date fake-timers docs (#​2628) (Carl-Erik Kopseng)

  • Fix documentation issue for fake-timers mentioned in #​2625

  The docs were out of sync with the fake-timers docs.

  • Update dependencies before new patch version

• 527568cc
  Bump rexml from 3.3.7 to 3.3.9 (#​2626) (dependabot[bot])

  Bumps rexml from 3.3.7 to 3.3.9.

  • Release notes
  • Changelog
  • Commits

  ---

  updated-dependencies:

  • dependency-name: rexml

    dependency-type: indirect

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

• ed029725
  Bump webrick from 1.8.1 to 1.8.2 (#​2623) (dependabot[bot])

  Bumps webrick from 1.8.1 to 1.8.2.

  • Release notes
  • Commits

  ---

  updated-dependencies:

  • dependency-name: webrick

    dependency-type: indirect

  ...

  Signed-off-by: dependabot[bot] support@github.com

  Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@​users.noreply.github.com>

Released by Carl-Erik Kopseng on 2025-03-19.

---

Configuration

📅 Schedule: Branch creation - Between 05:00 AM and 05:59 AM, every 14 days ( * 5 */14 * * ) in timezone Europe/Stockholm, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.