Bump the npm-minor group with 2 updates by dependabot[bot] · Pull Request #3566 · github/codeql-action · GitHub

Bumps the npm-minor group with 2 updates: globals and sinon.

Updates globals from 17.3.0 to 17.4.0

Release notes

Sourced from globals's releases.

v17.4.0

Update globals (2026-03-01) (#338) d43a051

sindresorhus/globals@v17.3.0...v17.4.0

Commits

a9cfd74 17.4.0
d43a051 Update globals (2026-03-01) (#338)
See full diff in compare view

Updates sinon from 21.0.1 to 21.0.2

Changelog

Sourced from sinon's changelog.

21.0.2

024321c4 fix: skip Node specific tests in browser env (Carl-Erik Kopseng)

b836fccb fix: js-yaml breaking change from v3 to v4 (Carl-Erik Kopseng)

ebf0c431 docs: add how-to article for stubbing ES module imports (#1832) (#2676) (Eduard Barrera)

docs: add how-to article for stubbing ES module imports with esm package

Adds a comprehensive How-To guide that addresses issue #1832, documenting how to configure Node.js to allow Sinon stubs to work with ES modules.

Explains why ES module namespace bindings are immutable by spec

Shows how to use the 'esm' npm package with mutableNamespace: true

Provides a complete working example with project layout, package.json, loader file, source modules, and a full test suite

Documents limitations (destructured imports, non-standard behavior)

Replaces the TODO comment in link-seams-commonjs.md with a cross-reference

Closes #1832 Co-authored-by: Eduard Barrera eduardbar@users.noreply.github.com Co-authored-by: Carl-Erik Kopseng carlerik@gmail.com

ebcd506c Fix spies not being reset properly (#2673) (simon-id)

3beab2ba Make doc tests pass with new jQuery (Carl-Erik Kopseng)

766715c6 build: reduce transitive audit findings (Carl-Erik Kopseng)

92aaf5c9 build: upgrade eslint config and replace dependency-check (Carl-Erik Kopseng)

c6aaa871 chore: ignore project worktrees (Carl-Erik Kopseng)

ef387e8e Upgrade most deps (Carl-Erik Kopseng)

3cf4e77d docs: improve writing of documentation (#2675) (Eduardo de la Cruz Palacios)

6349032f Check login status before publishing steps are performed (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-03-04.

Commits

2d93d68 21.0.2
3af394e lint-staged -> 16.3.2
2948314 prettier
024321c fix: skip Node specific tests in browser env
b836fcc fix: js-yaml breaking change from v3 to v4
ebf0c43 docs: add how-to article for stubbing ES module imports (#1832) (#2676)
ebcd506 Fix spies not being reset properly (#2673)
3beab2b Make doc tests pass with new jQuery
766715c build: reduce transitive audit findings
92aaf5c build: upgrade eslint config and replace dependency-check
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor group with 2 updates: [globals](https://github.com/sindresorhus/globals) and [sinon](https://github.com/sinonjs/sinon). Updates `globals` from 17.3.0 to 17.4.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.3.0...v17.4.0) Updates `sinon` from 21.0.1 to 21.0.2 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md) - [Commits](sinonjs/sinon@v21.0.1...v21.0.2) --- updated-dependencies: - dependency-name: globals dependency-version: 17.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: sinon dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

Pull request overview

This PR updates the repository’s Node.js dev dependencies for linting/testing by bumping globals and sinon to their latest patch/minor releases, with corresponding lockfile updates and regenerated compiled artifacts.

Changes:

Bump globals from ^17.3.0 to ^17.4.0.
Bump sinon from ^21.0.1 to ^21.0.2 (and update related transitive lock entries).
Regenerate lib/* compiled outputs reflecting updated dependency metadata.

Reviewed changes

Copilot reviewed 13 out of 14 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
package.json	Updates devDependency versions for globals and sinon.
package-lock.json	Updates locked versions/integrity for globals, sinon, and relevant transitive deps.
lib/upload-sarif-action.js	Regenerated compiled output reflecting updated dependency metadata.
lib/upload-sarif-action-post.js	Regenerated compiled output reflecting updated dependency metadata.
lib/upload-lib.js	Regenerated compiled output reflecting updated dependency metadata.
lib/start-proxy-action.js	Regenerated compiled output reflecting updated dependency metadata.
lib/start-proxy-action-post.js	Regenerated compiled output reflecting updated dependency metadata.
lib/setup-codeql-action.js	Regenerated compiled output reflecting updated dependency metadata.
lib/resolve-environment-action.js	Regenerated compiled output reflecting updated dependency metadata.
lib/init-action.js	Regenerated compiled output reflecting updated dependency metadata.
lib/init-action-post.js	Regenerated compiled output reflecting updated dependency metadata.
lib/autobuild-action.js	Regenerated compiled output reflecting updated dependency metadata.
lib/analyze-action.js	Regenerated compiled output reflecting updated dependency metadata.
lib/analyze-action-post.js	Regenerated compiled output reflecting updated dependency metadata.

dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Mar 11, 2026

dependabot Bot requested a review from a team as a code owner March 11, 2026 17:53

dependabot Bot added the Rebuild Re-transpile JS & re-generate workflows label Mar 11, 2026

github-actions Bot added size/XS Should be very easy to review and removed Rebuild Re-transpile JS & re-generate workflows labels Mar 11, 2026

henrymercer added the Rebuild Re-transpile JS & re-generate workflows label Mar 11, 2026

github-actions Bot removed the Rebuild Re-transpile JS & re-generate workflows label Mar 11, 2026

Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-aebc49e072

9771a76

henrymercer added the Rebuild Re-transpile JS & re-generate workflows label Mar 11, 2026

github-actions Bot removed the Rebuild Re-transpile JS & re-generate workflows label Mar 11, 2026

Rebuild

0d0df94

github-actions Bot marked this pull request as draft March 11, 2026 19:52

henrymercer marked this pull request as ready for review March 11, 2026 20:32

Copilot AI review requested due to automatic review settings March 11, 2026 20:32

henrymercer approved these changes Mar 11, 2026

View reviewed changes

Copilot started reviewing on behalf of henrymercer March 11, 2026 20:32 View session

Copilot AI reviewed Mar 11, 2026

View reviewed changes

henrymercer enabled auto-merge March 11, 2026 20:35

henrymercer added this pull request to the merge queue Mar 11, 2026

Merged via the queue into main with commit 1dbebad Mar 11, 2026
221 checks passed

henrymercer deleted the dependabot/npm_and_yarn/npm-minor-aebc49e072 branch March 11, 2026 21:07

This was referenced Mar 16, 2026

Merge main into releases/v4 #3574

Merged

Merge releases/v4 into releases/v3 #3577

Merged

Bump the npm-minor group with 2 updates by dependabot[bot] · Pull Request #3566 · github/codeql-action · GitHub

Uh oh!

Bump the npm-minor group with 2 updates - #3566

Bump the npm-minor group with 2 updates#3566
henrymercer merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-aebc49e072

dependabot Bot commented on behalf of github Mar 11, 2026

Uh oh!

github-actions Bot commented Mar 11, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the npm-minor group with 2 updates by dependabot[bot] · Pull Request #3566 · github/codeql-action · GitHub

Uh oh!

Bump the npm-minor group with 2 updates - #3566

Bump the npm-minor group with 2 updates#3566henrymercer merged 3 commits intomaingithub/codeql-action:mainfrom dependabot/npm_and_yarn/npm-minor-aebc49e072github/codeql-action:dependabot/npm_and_yarn/npm-minor-aebc49e072Copy head branch name to clipboard

Conversation

dependabot Bot commented on behalf of github Mar 11, 2026

v17.4.0

21.0.2

Uh oh!

github-actions Bot commented Mar 11, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the npm-minor group with 2 updates#3566
henrymercer merged 3 commits into
mainfrom
dependabot/npm_and_yarn/npm-minor-aebc49e072