dependabot[bot] opened a new pull request, #3921:
URL: https://github.com/apache/jena/pull/3921

   Bumps [sinon](https://github.com/sinonjs/sinon) from 21.1.2 to 22.0.0.
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/sinonjs/sinon/blob/main/docs/changelog.md";>sinon's 
changelog</a>.</em></p>
   <blockquote>
   <h2>22.0.0</h2>
   <ul>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/ed911df50d2967d52f9ca341f1f15c8b4def8878";><code>ed911df5</code></a>
   Update Ruby gems (Carl-Erik Kopseng)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/75a1e5b80d9aab698fadd8bb8c30998f109e1841";><code>75a1e5b8</code></a>
   Update to Node 26 (Carl-Erik Kopseng)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/197d660899fc8f9ac523e8ad9712f600c72cdbd2";><code>197d6608</code></a>
   Update documentation on faking timers to reflect the current state of 
fake-timers (Carl-Erik Kopseng)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/c5ddf80bd8653ad9a3e539103a3c801e7bec112c";><code>c5ddf80b</code></a>
   Update [email protected]: includes new Temporal API (Carl-Erik Kopseng)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/f4ab02f6b78d4602401369d5797bbbb2a1110c7e";><code>f4ab02f6</code></a>
   Update updatable packages (Carl-Erik Kopseng)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/0536afc8fedd1db7dbc3557a2d162d1d8a1d12aa";><code>0536afc8</code></a>
   Quality: Global mutable call id can grow unbounded across long-lived 
processes (<a 
href="https://redirect.github.com/sinonjs/sinon/issues/2691";>#2691</a>) 
(tuanaiseo)
   <blockquote>
   <ul>
   <li>refactor: global mutable call id can grow unbounded across l</li>
   </ul>
   <p><code>callId</code> is module-scoped and incremented on every invocation. 
In long-running test runners or embedded usage, this can grow indefinitely and 
eventually lose integer precision semantics for strict ordering comparisons.</p>
   <p>Affected files: proxy-invoke.js</p>
   <p>Signed-off-by: tuanaiseo <a 
href="mailto:[email protected]";>[email protected]</a></p>
   <ul>
   <li>Wrap around for all values that are too high</li>
   </ul>
   <hr />
   <p>Signed-off-by: tuanaiseo <a 
href="mailto:[email protected]";>[email protected]</a>
   Co-authored-by: Carl-Erik Kopseng <a 
href="mailto:[email protected]";>[email protected]</a></p>
   </blockquote>
   </li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/f4f7d93bc6bd664400e74d153fd5812dae84d222";><code>f4f7d93b</code></a>
   Perform additional cleanup when calling callThrough() (<a 
href="https://redirect.github.com/sinonjs/sinon/issues/2670";>#2670</a>) 
(Cyrille)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/6199e9e43db4440ea350961e2ef204236ca4ca4f";><code>6199e9e4</code></a>
   improve GitHubworkflows by introducing zizmor for monitoring (<a 
href="https://redirect.github.com/sinonjs/sinon/issues/2686";>#2686</a>) (Till!)
   <blockquote>
   <ul>
   <li>fix(workflows): fetch-depth is for actions/checkout</li>
   <li>chore(workflows): update</li>
   </ul>
   <ul>
   <li>pin all actions to precise commits</li>
   <li>avoid credential leakage from actions/checkout</li>
   <li>group action updates going forward</li>
   <li>add zimor config to ignore &quot;secrets outside env&quot;</li>
   <li>add job to keep validating workflows</li>
   </ul>
   </blockquote>
   </li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/f7476b59deda4893f9fa5b1e1dcfa74a059d4d4e";><code>f7476b59</code></a>
   Use path.normalize() for path normalization (Carl-Erik Kopseng)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/2c975393f19b33c611cf7c4221f585cdffa3a619";><code>2c975393</code></a>
   fix: make build and node test scripts cross-platform (laplace young)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/a76929179340333cb7e9d55d8c00791683d674a5";><code>a7692917</code></a>
   fix: isolate walk state from Object prototype (laplace young)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/66df977a5cb7139de221512f80ca36504e8eb671";><code>66df977a</code></a>
   Fix sinon.restore() cascade-restoring sub-sandboxes (<a 
href="https://redirect.github.com/sinonjs/sinon/issues/2704";>#2704</a>) 
(Charlie Leitheiser)
   <blockquote>
   <p>The ESM port of <code>createApi</code> (<a 
href="https://redirect.github.com/sinonjs/sinon/issues/2683";>#2683</a>, shipped 
in 21.1.0) replaced <code>createSandbox: createSandbox</code> with a wrapper 
that pushes every newly-created sandbox into the root sandbox's fake 
collection:</p>
   </blockquote>
   </li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/52555af4463c5a41ba4e24d9c42937b0e306a1e6";><code>52555af</code></a>
 22.0.0</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/ed911df50d2967d52f9ca341f1f15c8b4def8878";><code>ed911df</code></a>
 Update Ruby gems</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/75a1e5b80d9aab698fadd8bb8c30998f109e1841";><code>75a1e5b</code></a>
 Update to Node 26</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/197d660899fc8f9ac523e8ad9712f600c72cdbd2";><code>197d660</code></a>
 Update documentation on faking timers to reflect the current state of 
fake-ti...</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/c5ddf80bd8653ad9a3e539103a3c801e7bec112c";><code>c5ddf80</code></a>
 Update [email protected]: includes new Temporal API</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/f4ab02f6b78d4602401369d5797bbbb2a1110c7e";><code>f4ab02f</code></a>
 Update updatable packages</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/0536afc8fedd1db7dbc3557a2d162d1d8a1d12aa";><code>0536afc</code></a>
 Quality: Global mutable call id can grow unbounded across long-lived 
processe...</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/f4f7d93bc6bd664400e74d153fd5812dae84d222";><code>f4f7d93</code></a>
 Perform additional cleanup when calling callThrough() (<a 
href="https://redirect.github.com/sinonjs/sinon/issues/2670";>#2670</a>)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/6199e9e43db4440ea350961e2ef204236ca4ca4f";><code>6199e9e</code></a>
 improve GitHubworkflows by introducing zizmor for monitoring (<a 
href="https://redirect.github.com/sinonjs/sinon/issues/2686";>#2686</a>)</li>
   <li><a 
href="https://github.com/sinonjs/sinon/commit/1519009d5faaa5b8fab96e07f96e1b4bffa0bf07";><code>1519009</code></a>
 Merge <a 
href="https://redirect.github.com/sinonjs/sinon/issues/2703";>#2703</a>: isolate 
walk state from Object prototype</li>
   <li>Additional commits viewable in <a 
href="https://github.com/sinonjs/sinon/compare/v21.1.2...v22.0.0";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sinon&package-manager=npm_and_yarn&previous-version=21.1.2&new-version=22.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to