mongodb-js · dependabot · Apr 29, 2026 · Apr 29, 2026 · May 3, 2026
diff --git a/.depcheckrc b/.depcheckrc
@@ -5,3 +5,5 @@ ignores:
   - '@babel/core'
   - '@babel/parser'
   - 'lerna'
+  # sinon is added to the root to ensure it is hoisted and shared across all workspaces
+  - 'sinon'
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -50,6 +50,7 @@
     "@babel/parser": "^7.22.7",
     "depcheck": "^1.4.7",
     "husky": "^9.1.7",
-    "lerna": "^9.0.7"
+    "lerna": "^9.0.7",
+    "sinon": "^21.1.2"
   }
 }
diff --git a/packages/device-id/package.json b/packages/device-id/package.json
@@ -69,7 +69,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/devtools-connect/package.json b/packages/devtools-connect/package.json
@@ -82,9 +82,9 @@
     "nyc": "^15.1.0",
     "os-dns-native": "^2.0.1",
     "resolve-mongodb-srv": "^1.1.1",
+    "sinon": "^21.1.2",
     "sinon-chai": "^4.0.1",
     "ts-node": "^10.9.2",
-    "ts-sinon": "^2.0.1",
     "typescript": "^5.9.3",
     "prettier": "^3.8.1"
   },

diff --git a/packages/devtools-connect/src/connect.spec.ts b/packages/devtools-connect/src/connect.spec.ts
@@ -4,7 +4,24 @@ import { isHumanOidcFlow } from './connect';
 import { EventEmitter, once } from 'events';
 import { MongoClient } from 'mongodb';
 import { MongoClient as MongoClient6 } from 'mongodb6';
-import sinon, { stubConstructor } from 'ts-sinon';
+import sinon from 'sinon';
+
+function stubConstructor<T extends object>(
+  Constructor: new (...args: any[]) => T,
+): sinon.SinonStubbedInstance<T> {
+  const instance = new Constructor();
+  for (const key of Object.keys(instance)) {
+    if (typeof (instance as any)[key] === 'function') {
+      sinon.stub(instance as any, key);
+    }
+  }
+  for (const key of Object.getOwnPropertyNames(Constructor.prototype)) {
+    if (key !== 'constructor' && typeof (instance as any)[key] === 'function') {
+      sinon.stub(instance as any, key);
+    }
+  }
+  return instance as sinon.SinonStubbedInstance<T>;
+}
 import chai, { expect } from 'chai';
 import sinonChai from 'sinon-chai';
 import { Agent as HTTPSAgent } from 'https';

diff --git a/packages/devtools-connect/src/ipc-rpc-state-share.spec.ts b/packages/devtools-connect/src/ipc-rpc-state-share.spec.ts
@@ -1,6 +1,6 @@
 import chai, { expect } from 'chai';
 import { PassThrough } from 'stream';
-import sinon from 'ts-sinon';
+import sinon from 'sinon';
 import {
   sign,
   readSignedStream,

diff --git a/packages/devtools-proxy-support/package.json b/packages/devtools-proxy-support/package.json
@@ -94,7 +94,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3",
     "xvfb-maybe": "^0.2.1"
   }

diff --git a/packages/dl-center/package.json b/packages/dl-center/package.json
@@ -73,7 +73,7 @@
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
     "s3rver": "^3.7.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   },
   "dependencies": {

diff --git a/packages/download-url/package.json b/packages/download-url/package.json
@@ -64,7 +64,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3",
     "ts-node": "^10.9.2"
   },

diff --git a/packages/get-os-info/package.json b/packages/get-os-info/package.json
@@ -67,7 +67,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/mongodb-cloud-info/package.json b/packages/mongodb-cloud-info/package.json
@@ -75,7 +75,7 @@
     "nock": "^14.0.12",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "ts-node": "^10.9.2",
     "typescript": "^5.9.3"
   }

diff --git a/packages/mongodb-constants/package.json b/packages/mongodb-constants/package.json
@@ -72,7 +72,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   },
   "dependencies": {

diff --git a/packages/mongodb-downloader/package.json b/packages/mongodb-downloader/package.json
@@ -79,7 +79,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "sinon-chai": "^4.0.1",
     "typescript": "^5.9.3"
   }

diff --git a/packages/mongodb-log-writer/package.json b/packages/mongodb-log-writer/package.json
@@ -85,7 +85,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/mongodb-log-writer/src/mongo-log-manager.spec.ts b/packages/mongodb-log-writer/src/mongo-log-manager.spec.ts
@@ -7,7 +7,7 @@ import path from 'path';
 import os from 'os';
 import { gunzip, constants as zlibConstants } from 'zlib';
 import { promisify } from 'util';
-import sinon from 'ts-sinon';
+import sinon from 'sinon';
 import { expect } from 'chai';
 
 describe('MongoLogManager', function () {

diff --git a/packages/mongodb-ns/package.json b/packages/mongodb-ns/package.json
@@ -65,7 +65,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/mongodb-redact/package.json b/packages/mongodb-redact/package.json
@@ -67,7 +67,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   },
   "dependencies": {

diff --git a/packages/mongodb-runner/package.json b/packages/mongodb-runner/package.json
@@ -84,7 +84,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.0.4"
   }
 }
diff --git a/packages/mongodb-server-log-checker/package.json b/packages/mongodb-server-log-checker/package.json
@@ -68,7 +68,7 @@
     "mongodb-runner": "^6.7.10",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/mongodb-ts-autocomplete/package.json b/packages/mongodb-ts-autocomplete/package.json
@@ -80,7 +80,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "ts-node": "^10.9.2"
   }
 }
diff --git a/packages/monorepo-tools/package.json b/packages/monorepo-tools/package.json
@@ -63,7 +63,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   },
   "dependencies": {

diff --git a/packages/node-webpack-startup-snapshot-checker/package.json b/packages/node-webpack-startup-snapshot-checker/package.json
@@ -69,7 +69,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/oidc-mock-provider/package.json b/packages/oidc-mock-provider/package.json
@@ -75,7 +75,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/query-parser/package.json b/packages/query-parser/package.json
@@ -73,7 +73,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   },
   "peerDependencies": {

diff --git a/packages/saslprep/package.json b/packages/saslprep/package.json
@@ -80,7 +80,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/sbom-tools/package.json b/packages/sbom-tools/package.json
@@ -75,7 +75,7 @@
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
     "rimraf": "^6.1.3",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3",
     "webpack": "^5.82.0"
   },

diff --git a/packages/sbom-tools/src/commands/generate-third-party-notices.spec.ts b/packages/sbom-tools/src/commands/generate-third-party-notices.spec.ts
@@ -24,7 +24,10 @@ async function runGenerateNotices(structure: Record<string, string>) {
 describe('generate-third-party-notices', function () {
   let clock: SinonFakeTimers;
   before(function () {
-    clock = useFakeTimers(new Date('2023-01-01T12:00:00.468Z'));
+    clock = useFakeTimers({
+      now: new Date('2023-01-01T12:00:00.468Z'),
+      toFake: ['Date'],
+    });
   });
 
   after(function () {

diff --git a/packages/sbom-tools/src/commands/generate-vulnerability-report.spec.ts b/packages/sbom-tools/src/commands/generate-vulnerability-report.spec.ts
@@ -471,7 +471,10 @@ patch: {}
       process.env.JIRA_API_TOKEN = 'tok123';
       process.env.JIRA_PROJECT = 'MY-PROJECT';
       delete process.env.JIRA_VULNERABILITY_BUILD_INFO;
-      clock = useFakeTimers(new Date('2023-01-01T12:00:00.468Z'));
+      clock = useFakeTimers({
+        now: new Date('2023-01-01T12:00:00.468Z'),
+        toFake: ['Date'],
+      });
     });
 
     afterEach(function () {

diff --git a/packages/shell-bson-parser/package.json b/packages/shell-bson-parser/package.json
@@ -75,7 +75,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   }
 }
diff --git a/packages/signing-utils/package.json b/packages/signing-utils/package.json
@@ -68,7 +68,7 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3",
+    "sinon": "^21.1.2",
     "typescript": "^5.9.3"
   },
   "dependencies": {

diff --git a/packages/ts-autocomplete/package.json b/packages/ts-autocomplete/package.json
@@ -72,6 +72,6 @@
     "mocha": "^8.4.0",
     "nyc": "^15.1.0",
     "prettier": "^3.8.1",
-    "sinon": "^9.2.3"
+    "sinon": "^21.1.2"
   }
 }