[Snyk] Upgrade sinon from 4.0.0 to 14.0.0

[snyk-bot]

Snyk has created this PR to upgrade sinon from 4.0.0 to 14.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 104 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2022-05-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-SETVALUE-450213	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-1540541	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-450213	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-SETVALUE-1540541	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MIXINDEEP-450212	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	375/1000 Why? CVSS 7.5	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-608086	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-567746	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-450202	375/1000 Why? CVSS 7.5	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-AJV-584908	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-AJV-584908	375/1000 Why? CVSS 7.5	No Known Exploit
	Insecure Randomness npm:cryptiles:20180710	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	375/1000 Why? CVSS 7.5	Proof of Concept
	Validation Bypass SNYK-JS-KINDOF-537849	375/1000 Why? CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-JUSTEXTEND-72674	375/1000 Why? CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sinon

• 14.0.0 - 2022-05-07
  

  14.0.0

• 13.0.2 - 2022-04-14
  

  13.0.2

• 13.0.1 - 2022-02-01
  

  13.0.1

• 13.0.0 - 2022-01-28
  

  13.0.0

• 12.0.1 - 2021-11-04
  

  12.0.1

• 12.0.0 - 2021-11-03
  

  12.0.0

• 11.1.2 - 2021-07-27
  

  11.1.2

• 11.1.1 - 2021-05-26
  

  11.1.1

• 11.1.0 - 2021-05-25
  

  11.1.0

• 11.0.0 - 2021-05-24
  

  11.0.0

• 10.0.1 - 2021-04-08
• 10.0.0 - 2021-03-22
• 9.2.4 - 2021-01-23
• 9.2.3 - 2021-01-06
• 9.2.2 - 2020-12-11
• 9.2.1 - 2020-10-28
• 9.2.0 - 2020-10-06
• 9.1.0 - 2020-09-29
• 9.0.3 - 2020-08-11
• 9.0.2 - 2020-04-08
• 9.0.1 - 2020-03-10
• 9.0.0 - 2020-02-19
• 8.1.1 - 2020-01-22
• 8.1.0 - 2020-01-16
• 8.0.4 - 2020-01-06
• 8.0.3 - 2020-01-06
• 8.0.2 - 2019-12-30
• 8.0.1 - 2019-12-23
• 8.0.0 - 2019-12-22
• 7.5.0 - 2019-09-23
• 7.4.2 - 2019-09-02
• 7.4.1 - 2019-08-06
• 7.3.2 - 2019-04-17
• 7.3.1 - 2019-03-27
• 7.3.0 - 2019-03-20
• 7.2.7 - 2019-03-04
• 7.2.6 - 2019-03-01
• 7.2.5 - 2019-02-27
• 7.2.4 - 2019-02-18
• 7.2.3 - 2019-01-19
• 7.2.2 - 2018-12-12
• 7.2.1 - 2018-12-12
• 7.2.0 - 2018-12-10
• 7.1.1 - 2018-10-31
• 7.1.0 - 2018-10-25
• 7.0.0 - 2018-10-14
• 6.3.5 - 2018-10-03
• 6.3.4 - 2018-09-18
• 6.3.3 - 2018-09-14
• 6.3.2 - 2018-09-13
• 6.3.1 - 2018-09-12
• 6.3.0 - 2018-09-12
• 6.2.0 - 2018-09-04
• 6.1.6 - 2018-09-04
• 6.1.5 - 2018-08-09
• 6.1.4 - 2018-07-21
• 6.1.3 - 2018-07-07
• 6.1.2 - 2018-07-06
• 6.1.1 - 2018-07-06
• 6.1.0 - 2018-07-03
• 6.0.1 - 2018-06-24
• 6.0.0 - 2018-06-11
• 5.1.1 - 2018-06-08
• 5.1.0 - 2018-06-06
• 5.0.10 - 2018-05-24
• 5.0.9 - 2018-05-24
• 5.0.8 - 2018-05-23
• 5.0.7 - 2018-05-07
• 5.0.6 - 2018-05-07
• 5.0.5 - 2018-05-07
• 5.0.4 - 2018-05-05
• 5.0.3 - 2018-05-02
• 5.0.2 - 2018-05-01
• 5.0.1 - 2018-04-30
• 5.0.1-next.1 - 2018-04-23
• 5.0.0 - 2018-01-11
• 5.0.0-next.4 - 2018-03-30
• 5.0.0-next.3 - 2018-01-16
• 5.0.0-next.1 - 2018-01-11
• 4.5.0 - 2018-03-30
• 4.4.10 - 2018-03-28
• 4.4.9 - 2018-03-27
• 4.4.8 - 2018-03-21
• 4.4.6 - 2018-03-15
• 4.4.5 - 2018-03-13
• 4.4.4 - 2018-03-13
• 4.4.3 - 2018-03-12
• 4.4.2 - 2018-02-25
• 4.4.1 - 2018-02-24
• 4.4.0 - 2018-02-23
• 4.3.0 - 2018-02-10
• 4.2.3 - 2018-02-10
• 4.2.2 - 2018-01-26
• 4.2.1 - 2018-01-23
• 4.2.0 - 2018-01-21
• 4.1.6 - 2018-01-16
• 4.1.5 - 2018-01-13
• 4.1.4 - 2018-01-08
• 4.1.3 - 2017-12-07
• 4.1.2 - 2017-11-07
• 4.1.1 - 2017-11-03
• 4.1.0 - 2017-11-02
• 4.0.2 - 2017-10-25
• 4.0.1 - 2017-10-04
• 4.0.0 - 2017-09-26
  

  14.0.0

from sinon GitHub release notes

Commit messages

Package name: sinon

• 242b429 14.0.0
• c2bbd82 Drop node 12
• 18d5601 13.0.2
• bddb631 Update fake-timers
• 9e334cd master => main
• eaed0eb Bump nokogiri from 1.13.3 to 1.13.4 (#2451)
• 0ed91d7 Bump minimist from 1.2.5 to 1.2.6 (#2450)
• ff1443e Bump nokogiri from 1.13.1 to 1.13.3
• 238f14b Add some jsdoc
• 698fe79 13.0.1
• a21ad7a omission 💩
• ec4223f Bump nise to fix TypeError: performance.mark is not a function on node@16 sinonjs/nise#193
• f329a01 Add unimported to workflow (#2441)
• 209f71f Fix fake tests (#2439)
• 7f16cec Enable updates to same major version
• 0dd4d93 Merge branch 'single-release-per-major__master'
• 91dab22 Persist prettier fix to the script that generates this
• f784d7a Re-introduce new version.sh script to version hook
• 51c508a Add dry run mode to `npm version` (#2436)
• a57bbf6 Remove dry-run flag from npm publish (#2434)
• ae134d2 Add sort_id
• 0cb7c09 Adjust copy script
• 3cfd12a update script
• b217ba9 Update scripts and Liquid templates

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs