pin sinon dep to avoid broken future version

Author: pearigee

package.json

@@ -95,9 +95,17 @@
     "proxyquire": "^2.1.3",
     "rimraf": "^5.0.0",
     "server-destroy": "^1.0.1",
-    "sinon": "^21.0.0",
+    "sinon": "21.0.3",
     "tmp": "^0.2.3",
     "typescript": "^5.8.3",
     "yargs-parser": "^21.1.1"
-  }
+  },
+    "overrides": {
+    "@sinonjs/fake-timers": "15.2.1"
+  },
+  "pnpm": {
+    "overrides": {
+      "@sinonjs/fake-timers": "15.2.1"
+    }
+  },
 }