Skip to content

chore: bump the dev-dependencies group across 1 directory with 3 updates - #138

Merged
hsophie-sf merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-dd0451829d
Jun 23, 2026
Merged

chore: bump the dev-dependencies group across 1 directory with 3 updates#138
hsophie-sf merged 2 commits into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-dd0451829d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 3 updates in the / directory: @salesforce/ts-sinon, @types/sinon and semver.

Updates @salesforce/ts-sinon from 1.4.34 to 1.4.36

Release notes

Sourced from @​salesforce/ts-sinon's releases.

1.4.36

Bug Fixes

  • deps: bump @​babel/core from 7.25.2 to 7.29.7 (47daeee)

1.4.35

Bug Fixes

  • deps: bump markdown-it from 14.1.0 to 14.2.0 (a4c4eed)
Changelog

Sourced from @​salesforce/ts-sinon's changelog.

1.4.36 (2026-06-17)

Bug Fixes

  • deps: bump @​babel/core from 7.25.2 to 7.29.7 (47daeee)

1.4.35 (2026-06-17)

Bug Fixes

  • deps: bump markdown-it from 14.1.0 to 14.2.0 (a4c4eed)
Commits
  • 4b65f1b chore(release): 1.4.36 [skip ci]
  • 72d1af0 Merge pull request #308 from forcedotcom/dependabot-npm_and_yarn-babel-core-7...
  • 47daeee fix(deps): bump @​babel/core from 7.25.2 to 7.29.7
  • ccd3e27 chore(release): 1.4.35 [skip ci]
  • ef98d52 Merge pull request #307 from forcedotcom/dependabot-npm_and_yarn-markdown-it-...
  • a4c4eed fix(deps): bump markdown-it from 14.1.0 to 14.2.0
  • d52892a Upload required SECURITY.md file for compliance
  • See full diff in compare view

Updates @types/sinon from 21.0.0 to 21.0.1

Commits

Updates semver from 7.8.4 to 7.8.5

Release notes

Sourced from semver's releases.

v7.8.5

7.8.5 (2026-06-19)

Bug Fixes

Changelog

Sourced from semver's changelog.

7.8.5 (2026-06-19)

Bug Fixes

Commits
  • 6e05b76 chore: release 7.8.5 (#879)
  • 9c8692a fix: include prereleases in tilde range lower bound with includePrerelease (#...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies edit-on-call Heroku EDIT team on-call attention labels Jun 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 22, 2026 11:05
@dependabot dependabot Bot added dependencies edit-on-call Heroku EDIT team on-call attention labels Jun 22, 2026
@dependabot
chore: bump the dev-dependencies group across 1 directory with 3 updates
09b3851 
Bumps the dev-dependencies group with 3 updates in the / directory: [@salesforce/ts-sinon](https://github.com/forcedotcom/ts-sinon), [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) and [semver](https://github.com/npm/node-semver).


Updates `@salesforce/ts-sinon` from 1.4.34 to 1.4.36
- [Release notes](https://github.com/forcedotcom/ts-sinon/releases)
- [Changelog](https://github.com/forcedotcom/ts-sinon/blob/main/CHANGELOG.md)
- [Commits](forcedotcom/ts-sinon@1.4.34...1.4.36)

Updates `@types/sinon` from 21.0.0 to 21.0.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `semver` from 7.8.4 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.4...v7.8.5)

---
updated-dependencies:
- dependency-name: "@salesforce/ts-sinon"
  dependency-version: 1.4.36
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/sinon"
  dependency-version: 21.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-dd0451829d branch from 0c40fe4 to 09b3851 Compare June 22, 2026 17:08
ashwini-raja
ashwini-raja approved these changes Jun 22, 2026
View reviewed changes

@ashwini-raja ashwini-raja left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved: clean checks, low-risk dependency bump (changelog reviewed — ts-sinon, @types/sinon, semver all patch bumps; no breaking changes)

@hsophie-sf

hsophie-sf commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

CI failing for Node 26.x @ashwini-raja

@hsophie-sf

hsophie-sf commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Node 26.x CI failures here are unrelated to this PR — they reproduce on main. Root cause is Node 26.3.1's CVE-2026-48931 patch (http: fix response queue poisoning in http.Agent) interacting with jsforce's node-fetch@2.x keep-alive socket pool. Every wiremock-backed test hangs ~2 min until mocha's per-test timeout fires.

Related upstream tracker: nodejs/node#63989 reports the same patch causing a different symptom (ERR_STREAM_PREMATURE_CLOSE on HTTPS keep-alive to googleapis.com) on v24.17.0 — the fix was backported across 22/24/26 release lines, so it's the same root cause but a distinct failure mode from ours. I have not yet found an upstream issue filed for the hang-on-localhost-HTTP variant we hit.

Fix landing in #140 pins Node 26.x to 26.3.0; once that merges and dependabot rebases this PR, CI should go green.

@hsophie-sf
hsophie-sf merged commit 4d26aa6 into main Jun 23, 2026
11 checks passed
@hsophie-sf
hsophie-sf deleted the dependabot/npm_and_yarn/dev-dependencies-dd0451829d branch June 23, 2026 14:53
@github-actions github-actions Bot mentioned this pull request Jun 23, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@ashwini-raja ashwini-raja ashwini-raja approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

dependencies edit-on-call Heroku EDIT team on-call attention

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hsophie-sf @ashwini-raja