Changes
9.0.0
af7b6ee
chore: GitHub CI improvements (#262) (Yashar Fakhari)
>
Github Actions Workflow:
- Use Node 22 and the latest checkout github action for code coverage job
- Replace HUSKY_SKIP_INSTALL with HUSKY=0 for Husky v9 compatibility
- Set HUSKY env variable once for entire workflow
- Use built-in npm module caching instead of manual cache setup
- Add TypeScript build step to static analysis
- Use codecov's official action for uploading coverage reports
- Remove redundant npm test execution from test-check-coverage
- Add automerge job for Dependabot
Dependabot Config:
- Set npm updates to weekly on Wednesdays at 00:00 UTC
- Batch npm update PRs by semver into separate major, minor, and patch groups
- Set monthly GitHub Actions updates on Wednesdays at 01:00 UTC
3fbe355
fix #251: compare props on the prototype chain (#267) (Carl-Erik Kopseng)
>
Co-authored-by: Morgan Roderick 20321+mroderick@users.noreply.github.com
Co-authored-by: Morgan Roderick 20321+mroderick@users.noreply.github.com
61cf8ba
Bump lint-staged from 16.1.4 to 16.1.5 (#266) (dependabot[bot])
>
Bumps lint-staged from 16.1.4 to 16.1.5.
updated-dependencies:
- dependency-name: lint-staged
dependency-version: 16.1.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com
08ab1b5
Update eslint-config to include ES2024 (Carl-Erik Kopseng)
4cd3416
Create dependabot.yml (#265) (Carl-Erik Kopseng)
8d76aa0
fix: ignore coverage for mochify.webdriver.cjs (#264) (Yashar Fakhari)
7cd4092
Upgrade package-lock.json version and add workflow runs on PRs (#263) (Carl-Erik Kopseng)
>
55611bd
Chore: toolchain upgrades (#260) (Yashar Fakhari)
>
- Chore: toolchain upgrades
- Upgrade mochify to @mochify/cli (esbuild-based)
- Replace nyc with c8 for test coverage
ffcfbf3
Bump pbkdf2 from 3.1.2 to 3.1.3 (#259) (dependabot[bot])
>
Bumps pbkdf2 from 3.1.2 to 3.1.3.
updated-dependencies:
- dependency-name: pbkdf2
dependency-version: 3.1.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com
Released by Carl-Erik Kopseng on 2025-08-10.
8.0.3
630f2ae
Bump elliptic from 6.5.7 to 6.6.1 (#258) (dependabot[bot])
>
Bumps elliptic from 6.5.7 to 6.6.1.
updated-dependencies:
- dependency-name: elliptic
dependency-version: 6.6.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com
dd18c1c
Remove deprecated lodash.get (#254) (Yashar Fakhari)
>
We need slightly more than a direct substitution of .get()
with ?.
because ?.
handles individual properties and hasNested function needs to handle nested paths which are not single properties.
To handle nested paths, the regex is breaking the property string into its individual components and removes empty values. The loop traverses the object, moving one level deeper for each part of the path so we can safely access the next property (part) of the current object (current = current?.[part]
). This handles cases where any intermediate property might be undefined
or null
. If current
becomes undefined
at any point we know the path doesn't exist, so we can immediately return false
. After the loop is finished then the value of current
is the value we want to get.
Released by Carl-Erik Kopseng on 2025-07-25.
8.0.2
Released by Carl-Erik Kopseng on 2024-09-12.
8.0.1
Released by Carl-Erik Kopseng on 2024-09-12.
8.0.0
5f88086
fix: ensure nothing can mutate the exported 'message' (Carl-Erik Kopseng)
Released by Carl-Erik Kopseng on 2023-03-26.
7.0.1
fb6573a
Prefer @sinonjs/commons@2 (Morgan Roderick)
>
That makes ES2017 support explicit
Released by Morgan Roderick on 2022-11-07.
7.0.0
85a9acb
Stop testing in Node 12, start testing in Node 18, 19 (Morgan Roderick)
Released by Morgan Roderick on 2022-11-02.
6.1.3
Released by Morgan Roderick on 2022-11-02.
6.1.2
aa3badb
Fix to compare input for iteratables. (#229) (Shuhei Aoyama)
58480cc
npm audit fix (Morgan Roderick)
1b9c378
Upgrade benchmark and microtime to latest (Morgan Roderick)
3d6e322
Remove unused mkdirp dependency (Morgan Roderick)
4388ea7
Upgrade typescript to latest (Morgan Roderick)
4e29ee0
Upgrade prettier to latest (Morgan Roderick)
f2c548e
Upgrade nyc to latest (Morgan Roderick)
3bda5a3
Upgrade mochify to latest (Morgan Roderick)
30ac30b
Upgrade mocha to latest (Morgan Roderick)
fd9aa60
Upgrade jsdoc to latest (Morgan Roderick)
501fef7
Upgrade husky to latest (Morgan Roderick)
>
See:
10857c2
Upgrade @studio/changes to latest (Morgan Roderick)
c31f564
Upgrade @sinonjs/eslint-config to latest (Morgan Roderick)
08ed814
Upgrade @sinonjs/referee to latest (Morgan Roderick)
a16c58b
Bump jsdom from 16.2.2 to 16.5.0 (dependabot[bot])
>
Bumps jsdom from 16.2.2 to 16.5.0.
updated-dependencies:
- dependency-name: jsdom
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] support@github.com
8b7d7de
Bump shell-quote from 1.6.1 to 1.7.3 (dependabot[bot])
>
Bumps shell-quote from 1.6.1 to 1.7.3.
updated-dependencies:
- dependency-name: shell-quote
dependency-type: indirect
...
Signed-off-by: dependabot[bot] support@github.com
409866f
chore: Set permissions for GitHub actions (Morgan Roderick)
>
Restrict the GitHub token permissions only to the required ones; this
way, even if the attackers will succeed in compromising your workflow,
they won’t be able to do much.
Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests
See sinonjs/sinon#2461
5a7317f
Update README (Morgan Roderick)
>
The default branch was renamed
4354403
Verify lockfileVersion (Morgan Roderick)
be7df9e
Merge prettier, lint into static-analysis (Morgan Roderick)
2e1bf94
Upgrade mocha to latest (Morgan Roderick)
3bab205
Bump hosted-git-info from 3.0.4 to 3.0.8 (dependabot[bot])
>
Bumps hosted-git-info from 3.0.4 to 3.0.8.
updated-dependencies:
- dependency-name: hosted-git-info
dependency-type: indirect
...
Signed-off-by: dependabot[bot] support@github.com
14d3637
Bump ajv from 6.10.2 to 6.12.6 (dependabot[bot])
>
Bumps ajv from 6.10.2 to 6.12.6.
updated-dependencies:
- dependency-name: ajv
dependency-type: indirect
...
Signed-off-by: dependabot[bot] support@github.com
Released by Morgan Roderick on 2022-10-31.
6.1.1
Released on 2022-01-28.
6.1.0
6955f94
fix (#226) (Stuart Dotson)
f1a1f30
add support for iterables (#225) (Stuart Dotson)
2bc9f80
Bump path-parse from 1.0.6 to 1.0.7 (dependabot[bot])
64dfb5d
Bump ws from 6.2.1 to 6.2.2 (dependabot[bot])
d41050b
Bump browserslist from 4.16.3 to 4.16.6 (dependabot[bot])
Released on 2022-01-27.
6.0.2
144204d
Fix deep equal comparison between promises (#217) (David G. Miguel)
Released on 2021-05-24.
6.0.1
Released on 2021-04-08.
6.0.0
95d1dce
Use @sinonjs/eslint-config (Morgan Roderick)
>
This drops support for legacy runtimes like IE11, legacy Edge, Safari 9 and the like
Released on 2021-03-30.
5.3.1
04e0faa
Distribute package as source (Morgan Roderick)
>
This library is not meant for writing end user applications or even for
being used directly when writing tests. It is not meant to be loaded
directly by browsers.
Consumers of this package are assumed to use their own bundlers, should
they need to bundle code for use in browsers or workers.
Therefore, it is safe to distribute the package as source files and not
bundle them up.
This allows us to remove the bundler and its transitive dependencies,
which reduces the maintenance burden of managing the library.
Released on 2021-01-13.
5.3.0
Released on 2020-11-16.
5.2.0
f27b87c
Add match.json (Maximilian Antoni)
Released by Maximilian Antoni on 2020-10-06.
5.1.0
820c296
Evaluate symbol keys for object matchers (#206) (Joel Bradshaw)
>
- Make match() work for objects with symbol keys
Released on 2020-08-11.
5.0.3
9d2add0
Remove unused @sinonjs/formatio (Morgan Roderick)
>
As can be seen with searching the codebase, @sinonjs/formatio is never
imported, and is thus not a direct dependency of @sinonjs/samsam.
Released on 2020-02-28.
5.0.2
Released on 2020-02-20.
5.0.1
fe5d035
Bump jsdom from 15.2.1 to 16.2.0 (dependabot-preview[bot])
>
Bumps jsdom from 15.2.1 to 16.2.0.
Signed-off-by: dependabot-preview[bot] support@dependabot.com
910af18
Remove maintenance junk from CHANGES.md (Morgan Roderick)
Released on 2020-02-18.
5.0.0
f288430
Drop support for Node 8 (Morgan Roderick)
>
As can be seen at https://github.com/nodejs/Release, Node 8 reached
"end" of life on 2019-12-31, and is no longer actively supported.
We will stop testing in Node 8 and start testing in Node 13, which will
become the next LTS release from April 2020.
Released on 2020-02-18.
4.2.2
Released by Maximilian Antoni on 2020-01-09.
4.2.1
8987966
re-introduce bound deepEqual (#160) (James Garbutt)
Released on 2019-12-30.