chore(deps): update test dependencies (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/sinon (source)	^17.0.3 → ^22.0.0
@types/supertest (source)	^6.0.2 → ^7.2.1
c8	^10.1.2 → ^12.0.0
mocha (source)	^10.7.3 → ^12.0.2
npm-run-all2	^6.2.2 → ^9.0.3
sinon (source)	^17.0.1 → ^22.1.0
supertest	^6.3.4 → ^7.3.0

---

Release Notes

bcoe/c8 (c8)

v12.0.0

Compare Source

⚠ BREAKING CHANGES

• yargs enforces a stricter range of Node versions ^20.19.0 || ^22.12.0 || >=23

Features

• update yargs to 18.x.x (#​599) (dc2d6c8)

v11.0.0

Compare Source

⚠ BREAKING CHANGES

• deps: transitive deps require 20 || >=22

Bug Fixes

• deps: pull newer minimatch addressing CVE-2026-26996 (#​576) (678eeca)

v10.1.3

Compare Source

Bug Fixes

• deps: update bcoe/v8-coverage addressing v8 issue (#​552) (b32a563)

mochajs/mocha (mocha)

v12.0.2

Compare Source

🩹 Fixes

• fail nested tests on beforeEach failure (#​6292) (a75b43b)
• give CLI reporter-option precedence over config file (#​6331) (571110f)
• propagate spec file path on parallel worker death (#​6268) (55a544a)
• use find-up-simple to workaround ERR_PACKAGE_PATH_NOT_EXPORTED (#​6342) (a652ff5)
• watch existing dirs so first run starts armed (#​6263) (f5c8aca)

📚 Documentation

• add remaining external services (#​6316) (bfe0b5d)
• update copyright year, holder, and URLs (#​6303) (288c075)

🧹 Chores

• add "stale branch" workflow (#​6315) (ad17f9f)
• add dependency conflict detection workflow (#​6246) (ef0ae32)
• add folder for reproducing issues (#​6330) (6728030)
• add stale triage reminder for unreviewed issues (#​6314) (ee35133)
• auto-remove "waiting for author" label on author activity (#​6213) (dbd4322)
• convert file-unloader to ESM (#​6294) (dc73f4c)
• deps: update dependency @​playwright/test to v1.63.0 (#​6299) (931baa5)
• deps: update dependency eslint to v10.10.0 (#​6296) (3cb22d1)
• deps: update dependency knip to v6.35.0 (#​6324) (a2416af)
• deps: update octoguide/bot action to v0.23.0 (#​6304) (bbe5a27)
• exclude "v11.x" from "stale branch" workflow (#​6338) (e7b7fe1)
• fix owner in auto-add workflow (#​6309) (037aa8b)
• fixup "auto-add" workflow (#​6308) (b3f7cbc)
• fixup workflow perms in-job (#​6327) (633480c)
• provide write perms to workflows (#​6325) (d6f6f4c)
• remove "stale" label on author activity (#​6312) (e60fbda)
• remove unused .editorconfig file (#​6306) (880269f)
• replace find-conflicts with improved smoke versions (#​6344) (2668e71)
• set author to Mark Wiemer (#​6305) (cd2a730)
• site: update Astro (7.3.2) and fast-uri (3.1.7) (#​6301) (a4f2213)
• stabilize --parallel integration suite (#​6313) (856a1ae)
• stop auto-adding PRs to project (#​6352) (a8309fd)
• track Codecov in issue without failing CI (#​6323) (c39f602)
• widen --exit detection window (#​6293) (ee3a4b1)

v12.0.1

Compare Source

🩹 Fixes

• bump serialize-javascript to ^7.1.1 (#​6278) (02558a3)
• deps: update dependency find-up to v8 (#​5747) (ee11d29)
• deps: update dependency is-path-inside to v4 (#​5748) (5b27e3a)
• deps: update dependency starlight-blog to ^0.29.0 (#​6248) (532b82b)
• keep unknown config values from becoming test specs (#​6244) (15aa7d1)
• only reject positional args that are entirely numeric (#​6222) (1633779)
• reporter: split err.stack at trailing frame block so embedded stacks render once (#​5997) (90f48e4)

📚 Documentation

• blog: fixup v12 blog (#​6258) (6bcbee4)
• fix minor API documentation issue (#​6241) (683fd10)
• publish v12 stable blog (#​6249) (d5ad803)

🧹 Chores

• auto-add GitHub items to project (#​5686) (d24c320)
• convert lib/runner.js to ESM (#​6260) (123b2d5)
• deps: update actions/add-to-project action to v2 (#​6276) (00f873b)
• deps: update actions/github-script action to v9 (#​6277) (49ed525)
• deps: update dependency astro to v7.2.9 (#​6223) (513bd50)
• deps: update dependency eslint to v10.9.1 (#​6251) (e28b90c)
• deps: update dependency eslint-plugin-n to v18.3.0 (#​6240) (3a11840)
• deps: update dependency globals to v17.11.0 (#​6243) (1cf345b)
• deps: update dependency globals to v17.12.0 (#​6288) (97b8df6)
• deps: update dependency js-yaml to v5.4.1 (#​6247) (9593caa)
• deps: update dependency knip to v6.32.3 (#​6224) (6781fa1)
• deps: update dependency knip to v6.34.0 (#​6279) (85ff1b6)
• deps: update dependency rollup to v4.63.1 (#​6274) (e5a779e)
• deps: update dependency serialize-javascript to v7.1.0 (#​6239) (77e4d4a)
• deps: update dependency webpack to v5.110.1 (#​6275) (ec436d5)
• deps: update matteogabriele/agentscan-action action to v2.5.0 (#​6280) (0bb7925)
• remove unused .lintstagedrc.json (#​6270) (d84fdbf)
• update spam filter (#​6271) (b932787)
• use a junction to link the config fixture on Windows (#​6218) (a6b5d98)

v12.0.0

Compare Source

🩹 Fixes

• fixup parsing negative numbers and quoted strings (#​6250) (2962875)
• preserve FIFO descriptors when respawning (#​6254) (3bb317d)

📚 Documentation

• fix minor correctness issues (#​6215) (e6b9ee7)
• link to mochajs.org instead of the wiki (#​6216) (8720225)

🧹 Chores

• setup Release Please for v12 stable (#​6084) (219674f)

v11.8.0

Compare Source

v11.7.6

Compare Source

🩹 Fixes

• make describe().timeout() work (aafe6fd)
• test: replace wmic usage with native Windows API (#​5694) (73ebdfa)

🧹 Chores

• format all code (#​5629) (0696784)
• remove Netlify (#​5630) (8d01d33)

v11.7.5

Compare Source

🩹 Fixes

• swallow more require errors from *ts files (#​5498) (d89dbaf)

🧹 Chores

• run tests on PRs for and pushes to v11.x (#​5525) (8b21b38)
• setup release-please for v11 (#​5522) (663fff4)

v11.7.4

Compare Source

🩹 Fixes

• watch mode using chokidar v4 (#​5379) (c2667c3)

📚 Documentation

• migrate remaining legacy wiki pages to main documentation (#​5465) (bff9166)

🧹 Chores

• remove trailing spaces (#​5475) (7f68e5c)

v11.7.3

Compare Source

🩹 Fixes

• use original require() error for TS files if ERR_UNKNOWN_FILE_EXTENSION (#​5408) (ebdbc48)

📚 Documentation

• add security escalation policy (#​5466) (4122c7d)
• fix duplicate global leak documentation (#​5461) (1164b9d)
• migrate third party UIs wiki page to docs (#​5434) (6654704)
• update maintainer release notes for release-please (#​5453) (185ae1e)

🤖 Automation

• deps: bump actions/setup-node in the github-actions group (#​5459) (48c6f40)

v11.7.2

Compare Source

🩹 Fixes

• fail with an informative error message on a file with a broken default import (#​5413) (b0e6135)
• load mjs files correctly (#​5429) (a947b9b)

📚 Documentation

• add banner from old site to new site, link from new to old (#​5414) (dedef11)
• add info on spies to legacy docs (#​5421) (21f5544)
• explain node import swallowing error (#​5401) (09f5b2c)
• fix links in new site (#​5416) (b2bc769)
• migrate assertion libraries wiki link to main docs (#​5442) (95f3ca8)
• migrate count assertions wiki page to docs (#​5438) (02a306c)
• migrate shared behaviours to docs-next (#​5432) (1dc4aa9)
• migrate Spies wiki page to explainers (#​5420) (cbcf007)
• Migrate tagging wiki page to docs (#​5435) (876247a)
• migrate third party reporters wiki page to docs (#​5433) (f70764c)
• migrate to global leak wiki page to docs (#​5437) (8a6fdca)
• update /next bug report link to be docs issue template (#​5424) (668cb66)

🧹 Chores

• add issue form for ⚡️ Performance (#​5406) (a908b3b)
• add test for -R import-only-loader (#​5391) (6ee5b48)
• also test Node.js 24 in CI (#​5405) (15f5980)
• bump CI to use 20.19.4, 22.18.0, 24.6.0 (#​5430) (ace5eb4)
• bump Knip to 5.61.2 (#​5394) (f3d7430)
• cleanup references of --opts (#​5402) (1096b37)
• enabled ESLint's no-unused-vars (#​5399) (d4168ae)
• move callback and object typedefs to a new types.d.ts (#​5351) (3300d21)
• rewrite base path instead of copy-pasting (#​5431) (c6c6740)
• unify caught errors as err (#​5439) (d4912e7)
• Update experimental module detection test and pin exact Node versions (#​5417) (2489090)

🤖 Automation

• deps: bump actions/checkout in the github-actions group (#​5419) (03ac2d0)

v11.7.1

Compare Source

🩹 Fixes

• always fallback to import() if require() fails (#​5384) (295c168)

🧹 Chores

• add esm loader test (#​5383) (f58e49f)

v11.7.0

Compare Source

🌟 Features

• use require to load esm (#​5366) (41e24a2)

v11.6.0

Compare Source

🌟 Features

• bump workerpool from ^6.5.1 to ^9.2.0 (#​5350) (581a3c5)

v11.5.0

Compare Source

🌟 Features

• bump mimimatch from ^5.1.6 to ^9.0.5 (#​5349) (a3dea85)

v11.4.0

Compare Source

🌟 Features

• bump diff from ^5.2.0 to ^7.0.0 (#​5348) (554d6bb)

📚 Documentation

• added CHANGELOG.md note around 11.1 yargs-parser update (#​5362) (618415d)

v11.3.0

Compare Source

🌟 Features

• add option to use posix exit code upon fatal signal (#​4989) (91bbf85)

📚 Documentation

• Deploy new site alongside old one (#​5360) (6c96545)
• mention explicit browser support range (#​5354) (c514c0b)
• update Node.js version requirements for 11.x (#​5329) (abf3dd9)

🧹 Chores

• remove prerelease setting in release-please config (#​5363) (8878f22)

v11.2.2

Compare Source

🩹 Fixes

• deps: update chokidar to v4 (#​5256) (8af0f1a)

📚 Documentation

• add ClientRedirects.astro (#​5324) (b88d441)
• add example/tests.html to docs-next (#​5325) (6ec5762)

v11.2.1

Compare Source

🩹 Fixes

• switch from ansi-colors to picocolors (#​5323) (7c08d09)

📚 Documentation

• fix new website typos, improve readability (#​5312) (fbceb19)

🧹 Chores

• "force" Netlify to use npm to build new site (#​5319) (3a46855)
• Fix tests (#​5320) (18699a0)

v11.2.0

Compare Source

🌟 Features

• enable reporters to show relative paths of tests (#​5292) (81ea666)

📚 Documentation

• add instructions for API docs (#​5287) (b720ec1)
• add new website using Astro Starlight (#​5246) (b1f1cb7)
• improve third-party reporter docs (#​5285) (c5a0ef5)

🧹 Chores

• enabled eslint-plugin-n (#​5280) (945d6e3)
• pin node-lts tests to 22.11.0 (#​5279) (664e1f4)
• replace fs-extra with newer fs built-ins (#​5284) (75dcf8c)

v11.1.0

Compare Source

🌟 Features

• bump yargs to 17 (#​5165) (8f1c8d8)
  • Note that this also included a version bump of yargs-parser from ^20.2.9 to ^21.1., which fixed a bug that caused extra quotes in file paths to be removed.
    See #​5341 for more information.
• replace strip-ansi with util.stripVTControlCharacters (#​5267) (3c191c0), closes #​5265

v11.0.2

Compare Source

🩹 Fixes

• catch exceptions setting Error.stackTraceLimit (#​5254) (259f8f8)
• error handling for unexpected numeric arguments passed to cli (#​5263) (210d658)

📚 Documentation

• correct outdated status: accepting prs link (#​5268) (f729cd0)
• replace "New in" with "Since" in version annotations (#​5262) (6f10d12)

v11.0.1

Compare Source

🌟 Features

• bumped glob dependency from 8 to 10 (#​5250) (43c3157)

📚 Documentation

• fix examples for linkPartialObjects methods (#​5255) (34e0e52)

v11.0.0

Compare Source

⚠ BREAKING CHANGES

• adapt new engine range for Mocha 11 (#​5216)

🌟 Features

• allow calling hook methods (#​5231) (e3da641)

🩹 Fixes

• adapt new engine range for Mocha 11 (#​5216) (80da25a)

📚 Documentation

• downgrade example/tests chai to 4.5.0 (#​5245) (eac87e1)

v10.8.2

Compare Source

🩹 Fixes

• support errors with circular dependencies in object values with --parallel (#​5212) (ba0fefe)
• test link in html reporter (#​5224) (f054acc)

📚 Documentation

• indicate 'exports' interface does not work in browsers (#​5181) (14e640e)

🧹 Chores

• fix docs builds by re-adding eleventy and ignoring gitignore again (#​5240) (881e3b0)

🤖 Automation

• deps: bump the github-actions group with 1 update (#​5132) (e536ab2)

v10.8.1

Compare Source

🩹 Fixes

• handle case of invalid package.json with no explicit config (#​5198) (f72bc17)
• Typos on mochajs.org (#​5237) (d8ca270)
• use accurate test links in HTML reporter (#​5228) (68803b6)

v10.8.0

Compare Source

🌟 Features

• highlight browser failures (#​5222) (8ff4845)

🩹 Fixes

• remove :is() from mocha.css to support older browsers (#​5225) (#​5227) (0a24b58)

📚 Documentation

• add SECURITY.md pointing to Tidelift (#​5210) (bd7e63a)
• adopt Collective Funds Guidelines 0.1 (#​5199) (2b03d86)
• update README, LICENSE and fix outdated (#​5197) (1203e0e)

🧹 Chores

• fix npm scripts on windows (#​5219) (1173da0)
• remove trailing whitespace in SECURITY.md (7563e59)

bcomnes/npm-run-all2 (npm-run-all2)

v9.0.3

Compare Source

Merged

• Upgrade: Bump ansi-styles from 6.2.3 to 7.0.0 #244
• Upgrade: Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 #243
• Upgrade: Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 #242
• Upgrade: Bump actions/setup-node from 6 to 7 #241
• chore: update schema version in .knip.jsonc to v6 #237
• Upgrade: Bump @​types/node from 25.9.4 to 26.0.0 #239
• Upgrade: Bump actions/checkout from 6 to 7 #238

Commits

• Harden GitHub Actions workflows 7f5fca6
• Remove obsolete shell-quote types d970668

v9.0.2

Compare Source

Merged

• fix: update Node.js version requirements #232
• Upgrade: Bump codecov/codecov-action from 6 to 7 #233
• fix: bump shell-quote to ^1.8.4 #236
• Upgrade: Bump pidtree from 0.6.1 to 1.0.0 #234

v9.0.1

Compare Source

Merged

• fix: update help.js to include --node-run option details #230

v9.0.0

Compare Source

Merged

• Add more colors based on terminal capabilities #222
• Upgrade: Bump releasearoni from 0.1.14 to 0.2.0 #227
• Breaking change: Glob patterns that match no tasks now succeed silently #226
• Add -x / --node-run flag to bypass the package manager #225
• Remove redundant build call from prepublishOnly #224
• Whitelist files to include in npm package #199
• Fix jsdoc types and use tsc for type safety checks #220
• Upgrade: Bump codecov/codecov-action from 5 to 6 #215
• Update SECURITY.md with new reporting process #201
• Upgrade: Bump actions/checkout from 5 to 6 #200
• Upgrade: Bump actions/setup-node from 5 to 6 #196
• Upgrade: Bump github/codeql-action from 3 to 4 #195
• Upgrade: Bump actions/setup-node from 4 to 5 #192
• Upgrade: Bump actions/checkout from 4 to 5 #191
• chore: fix typo in test #185
• refactor: use optional chain for better readability #184

Fixed

• Breaking change: Glob patterns that match no tasks now succeed silently (#​226) #149
• Add -x / --node-run flag to use node --run instead of the package manager #155
• docs: clarify glob pattern execution order guarantee #167

Commits

• Add node-run smoke tests f4ac667
• Implement releasaroni for the release process 6a2baff
• Use shared publishing action b6a39a6

v8.0.4

Compare Source

Commits

• Merge pull request #​182 from bcomnes/beta afcc18a

v8.0.3

Compare Source

Commits

• Merge pull request #​175 from bcomnes/revert-pico 75bb00e
• Revert "replace minimatch with picomatch" 5d93a54

v8.0.2

Compare Source

Commits

• Merge pull request #​172 from beeequeue/picomatch 4f42923
• replace minimatch with picomatch 74201f5
• add type field e8f046a

v8.0.1

Compare Source

Commits

• Merge pull request #​159 from bcomnes/dependabot/npm_and_yarn/minimatch-10.0.1 54af3ab
• Upgrade: Bump minimatch from 9.0.5 to 10.0.1 f50ddf4
• Merge pull request #​170 from bcomnes/fix-engine-range e43e670

v8.0.0

Compare Source

Commits

• Breaking change: Raise engine floor to >= Node 20 b1b12f8
• Merge pull request #​169 from bcomnes/node-20-or-greater bb27458

v7.0.2

Compare Source

Merged

• Upgrade: Bump neostandard from 0.11.9 to 0.12.0 #164
• Upgrade: Bump codecov/codecov-action from 4 to 5 #161

Commits

• Raise cross-spawn version floor to ^7.0.6 45a9e19
• Merge pull request #​163 from bcomnes/dependabot/npm_and_yarn/mocha-11.0.1 285967a
• Upgrade: Bump mocha from 10.8.2 to 11.0.1 5d1aea5

v7.0.1

[Compare Source](https://redire

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Stockholm)

• Branch creation
  • Between 05:00 AM and 05:59 AM, every 14 days in a month (* 5 */14 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.