chore(deps): update testing

[github-actions]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/chai (source)	^4 → ^4.3.20
@types/mocha (source)	^10 → ^10.0.10
@types/sinon (source)	^21.0.0 → ^21.0.1
chai (source)	^4 → ^4.5.0
mocha (source)	^10 → ^10.8.2
msw (source)	^2.12.4 → ^2.13.5
sinon (source)	^21.0.1 → ^21.1.2

---

Release Notes

mswjs/msw (msw)

v2.13.5

Compare Source

v2.13.5 (2026-04-23)

Bug Fixes

• reset generator state on .resetHandlers()/.restoreHandlers() (#​2725) (8d16801) @​kettanaito

v2.13.4

Compare Source

v2.13.4 (2026-04-16)

Bug Fixes

• implement proper ServiceWorkerSource singleton pattern (#​2715) (580256b) @​kettanaito
• use verbatimModuleSyntax consistently in exports (#​2702) (9dedf52) @​christoph-fricke @​kettanaito
• update dependencies (#​2719) (d0cbd2d) @​kettanaito
• sse: respect request.signal for the underlying stream (#​2718) (429e05c) @​kettanaito

v2.13.3

Compare Source

v2.13.3 (2026-04-14)

Bug Fixes

• update rettime to 0.11.7 (#​2711) (feee3ed) @​kettanaito

v2.13.2

Compare Source

v2.13.2 (2026-04-08)

Bug Fixes

• delay: prevent infinite mode from throwing (#​2697) (613d4a1) @​kettanaito

v2.13.1

Compare Source

v2.13.1 (2026-04-07)

Bug Fixes

• annotate life-cycle events correctly (#​2694) (e7890e9) @​kettanaito

v2.13.0

Compare Source

v2.13.0 (2026-04-06)

Features

• use the network source architecture (defineNetwork) (#​2650) (2b73790) @​kettanaito @​felmonon
• handlers are now grouped internally by kind, making handler lookup a O(1) operation.
• handlers filtering no longer uses an instanceof check. Instead, the kind property of the handler is used.

Bug fixes

• fix an issue where a WebSocket connection would be logged in the console even when there are no matching event handlers for it.

v2.12.14

Compare Source

v2.12.14 (2026-03-21)

Bug Fixes

• support wildcard ports in url matching (#​2677) (f90bf49) @​trknhr @​kettanaito

v2.12.13

Compare Source

v2.12.13 (2026-03-17)

Bug Fixes

• GraphQL: support application/graphql-response+json response content-type (#​2513) (4b8c330) @​phryneas @​kettanaito
• HttpResponse: mark implicit content-type headers with a symbol (#​2675) (98716e7) @​kettanaito

v2.12.12

Compare Source

v2.12.12 (2026-03-17)

Bug Fixes

• minor improvements (#​2672) (cd52873) @​kettanaito
• handle special characters in postinstall script (#​2649) (b79d7ae) @​aloisklink @​kettanaito
• replace barrel exports with granular exports (#​2671) (83bc40e) @​kettanaito

v2.12.11

Compare Source

v2.12.11 (2026-03-15)

Bug Fixes

• node: avoid open handles for infinite delays (#​2669) (3ccc8a3) @​FelmonFekadu @​kettanaito

v2.12.10

Compare Source

v2.12.10 (2026-02-10)

Bug Fixes

• export AnyHandler type (#​2663) (90f9be4) @​kettanaito

v2.12.9

Compare Source

v2.12.9 (2026-02-06)

Bug Fixes

• ws: support relative urls in ws.link (#​2661) (2f1d23c) @​kettanaito

v2.12.8

Compare Source

v2.12.8 (2026-02-03)

Bug Fixes

• update @mswjs/interceptors to fix a memory leak (#​2659) (e5e905f) @​kettanaito
• update rettime (#​2657) (3a7b451) @​kettanaito

v2.12.7

Compare Source

v2.12.7 (2025-12-27)

Bug Fixes

• graphql: export the GraphQLLinkHandlers type (#​2647) (cfab780) @​kettanaito
• graphql: support TypedDocumentString as request predicate (#​2646) (494d5e8) @​kettanaito
• graphql: remove redundant DocumentNode union (#​2645) (0f6e28f) @​kettanaito

v2.12.6

Compare Source

v2.12.6 (2025-12-26)

Bug Fixes

• sse: respect the worker quiet option (#​2644) (d50f73e) @​kettanaito

v2.12.5

Compare Source

v2.12.5 (2025-12-26)

Bug Fixes

• sse: handle multi-line messages (#​2643) (1266f61) @​BSteffaniak @​kettanaito

sinonjs/sinon (sinon)

v21.1.2

Compare Source

• 53817f7d
  Upgrade to ESLint 10 and new shared config (#​2696) (Carl-Erik Kopseng)

  • Upgrade to ESLint 10 and new shared config
  • Update deps

• d7a682e0
  fix: move npm-run-all to devDeps (#​2694) (Avi Vahl)

  used only during dev, and caused a considerable dep count jump downstream

• 5b8720ec
  use latest shared eslint-config (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-11.

v21.1.1

Compare Source

• 3c8b023b
  Update deps (Carl-Erik Kopseng)
• 2eabf5da
  fix(#​2692): Remove ESM-only supports-color as it breaks CJS exports (#​2693) (Carl-Erik Kopseng)

  • fix(#​2692): Remove ESM-only supports-color as it breaks CJS exports

Released by Carl-Erik Kopseng on 2026-04-10.

v21.1.0

Compare Source

• 0a5526c5
  updated deps (Carl-Erik Kopseng)
• 5262204f
  fix: build artifacts before running bundled tests (Carl-Erik Kopseng)
• 819bb64b
  Migration to ECMAScript modules (ESM) (#​2683) (Carl-Erik Kopseng)

  This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating ./lib

  • Modern ignores 😁
  • test: add distribution harness
  • test: verify packed cjs and esm entrypoints
  • test: lock distribution api manifest
  • test: smoke test built pkg artifacts
  • docs: require contract tests for package migration
  • test: guard esm migration regressions
  • docs: require contract gate for esm migration
  • build: generate cjs lib from esm source entries
  • refactor: port root api surface to esm
  • build: clean port of root api to esm
  • docs: include implementation plans
  • fix: align lint and smoke tests with esm migration
  • refactor: complete esm port of all core components
  • refactor: finalize esm migration with sandbox and naming fixes
  • fix: finish esm migration stabilization
  • chore: stop tracking generated lib output
  • remove plans
  • prettier
  • linting
  • fix: make distribution tests self-contained
  • fix: build before coverage test bundle
  • refactor: move simple unit tests to src
  • refactor: flatten test and coverage script chains
  • refactor: use parallel mocha for node tests
  • test: restore fake timers cleanup
  • refactor: remove node test runner script
  • remove unneccessary clutter
  • fix: make mocha watch use polling
  • simplify
  • Increase coverage
  • Fix coverage by removing duplicated tests

  These were covering the generated lib/ folder.

  • Move shared util into esm dir
  • fix package dep issues
  • Adjust coverage
  • Upgrade all dependencies

  npx npm-check-updates -u

• cd2bf5a3
  Use newer endpoint (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-09.

v21.0.3

Compare Source

• 0494251b
  fix(#​2678): upgrade samsam to fix buffer comparisons (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-16.

v21.0.2

Compare Source

• 024321c4
  fix: skip Node specific tests in browser env (Carl-Erik Kopseng)
• b836fccb
  fix: js-yaml breaking change from v3 to v4 (Carl-Erik Kopseng)
• ebf0c431
  docs: add how-to article for stubbing ES module imports (#​1832) (#​2676) (Eduard Barrera)

  • docs: add how-to article for stubbing ES module imports with esm package

  Adds a comprehensive How-To guide that addresses issue #​1832, documenting
  how to configure Node.js to allow Sinon stubs to work with ES modules.

  • Explains why ES module namespace bindings are immutable by spec
  • Shows how to use the 'esm' npm package with mutableNamespace: true
  • Provides a complete working example with project layout, package.json,
    loader file, source modules, and a full test suite
  • Documents limitations (destructured imports, non-standard behavior)
  • Replaces the TODO comment in link-seams-commonjs.md with a cross-reference

  Closes #​1832
  Co-authored-by: Eduard Barrera eduardbar@users.noreply.github.com
  Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

• ebcd506c
  Fix spies not being reset properly (#​2673) (simon-id)
• 3beab2ba
  Make doc tests pass with new jQuery (Carl-Erik Kopseng)
• 766715c6
  build: reduce transitive audit findings (Carl-Erik Kopseng)
• 92aaf5c9
  build: upgrade eslint config and replace dependency-check (Carl-Erik Kopseng)
• c6aaa871
  chore: ignore project worktrees (Carl-Erik Kopseng)
• ef387e8e
  Upgrade most deps (Carl-Erik Kopseng)
• 3cf4e77d
  docs: improve writing of documentation (#​2675) (Eduardo de la Cruz Palacios)
• 6349032f
  Check login status before publishing steps are performed (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-04.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.