build(deps-dev): bump sinon from 18.0.1 to 22.0.0 (#3149)

* build(deps-dev): bump sinon from 18.0.1 to 22.0.0

Bumps [sinon](https://github.com/sinonjs/sinon) from 18.0.1 to 22.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](sinonjs/sinon@v18.0.1...v22.0.0)

---
updated-dependencies:
- dependency-name: sinon
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* build(deps-dev): update @types/sinon to 21.0.1 and fix fake timer test leaks

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: lahirumaramba

package-lock.json

@@ -247,7 +247,7 @@
     "@types/node": "^25.7.0",
     "@types/request": "^2.47.0",
     "@types/request-promise": "^4.1.41",
-    "@types/sinon": "^17.0.2",
+    "@types/sinon": "^21.0.1",
     "@types/sinon-chai": "^3.0.0",
     "@types/uuid": "^10.0.0",
     "@typescript-eslint/eslint-plugin": "^8.59.3",
@@ -276,7 +276,7 @@
     "request": "^2.75.0",
     "request-promise": "^4.1.1",
     "run-sequence": "^2.2.1",
-    "sinon": "^18.0.0",
+    "sinon": "^22.0.0",
     "sinon-chai": "^3.0.0",
     "ts-node": "^10.2.0",
     "typescript": "^5.7.3",

package.json

@@ -1101,7 +1101,10 @@ describe('HttpClient', () => {
   });
 
   it('should wait when retry-after expressed as a timestamp', () => {
-    clock = sinon.useFakeTimers();
+    clock = sinon.useFakeTimers({
+      toFake: ['Date', 'setTimeout', 'clearTimeout', 'setInterval', 'clearInterval'],
+      shouldClearNativeTimers: true
+    });
     clock.setSystemTime(1000);
     const timestamp = new Date(clock.now + 30 * 1000);
 

test/unit/utils/api-request.spec.ts

@@ -599,7 +599,11 @@ describe('UrlKeyFetcher', () => {
       mockedRequests.push(mockFetchPublicKeys());
       mockedRequests.push(mockFetchPublicKeys());
 
-      clock = sinon.useFakeTimers(1000);
+      clock = sinon.useFakeTimers({
+        now: 1000,
+        toFake: ['Date', 'setTimeout', 'clearTimeout', 'setInterval', 'clearInterval'],
+        shouldClearNativeTimers: true
+      });
 
       return keyFetcher.fetchPublicKeys().then(() => {
         expect(https.request).to.have.been.calledOnce;
@@ -716,7 +720,11 @@ describe('JwksFetcher', () => {
       mockedRequests.push(mockFetchJsonWebKeys());
       mockedRequests.push(mockFetchJsonWebKeys());
 
-      clock = sinon.useFakeTimers(1000);
+      clock = sinon.useFakeTimers({
+        now: 1000,
+        toFake: ['Date', 'setTimeout', 'clearTimeout', 'setInterval', 'clearInterval'],
+        shouldClearNativeTimers: true
+      });
 
       return keyFetcher.fetchPublicKeys().then(() => {
         expect(https.request).to.have.been.calledOnce;