Bump the dev-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the dev-dependencies group with 2 updates in the / directory: puppeteer and sinon.

Updates puppeteer from 25.2.0 to 25.4.0

Release notes

Sourced from puppeteer's releases.

puppeteer-core: v25.4.0

25.4.0 (2026-07-27)

🎉 Features

• add browser-level PWA install/launch/uninstall APIs (#15235) (4a48c8a)
• expose Explicit Resource Management (using) (#15027) (a1ca86b)
• expose handled getter on Dialog (#15225) (be6f726)
• roll to Chrome 151.0.7922.47 (#15237) (06442ae)

🛠️ Fixes

• combine duplicate BiDi response headers instead of overwriting (#15203) (16ec165)
• don't throw in checkVisibility for a detached text node (#15197) (89683ac)
• roll to Chrome 150.0.7871.115 (#15223) (3232cd4)
• roll to Chrome 150.0.7871.46 (#15196) (30d4100)
• roll to Chrome 150.0.7871.49 (#15220) (633d55d)
• roll to Firefox 152.0.5 (#15219) (5de975a)

puppeteer: v25.4.0

25.4.0 (2026-07-27)

🎉 Features

• roll to Chrome 151.0.7922.47 (#15237) (06442ae)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.3.0 to 25.4.0

puppeteer-core: v25.3.0

25.3.0 (2026-07-01)

🎉 Features

• support installing extensions for browser contexts (#15164) (118d84d)

🛠️ Fixes

• handle swaps without a timer (#15198) (2356a15)
• normalize duplicate set-cookie headers using newline (#15173) (55787d5)
• roll to Firefox 152.0.3 (#15158) (2d64852)

... (truncated)

Changelog

Sourced from puppeteer's changelog.

25.4.0 (2026-07-27)

🎉 Features

• add browser-level PWA install/launch/uninstall APIs (#15235) (4a48c8a)
• expose Explicit Resource Management (using) (#15027) (a1ca86b)
• expose handled getter on Dialog (#15225) (be6f726)
• roll to Chrome 151.0.7922.47 (#15237) (06442ae)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.3.0 to 25.4.0

🛠️ Fixes

• combine duplicate BiDi response headers instead of overwriting (#15203) (16ec165)
• don't throw in checkVisibility for a detached text node (#15197) (89683ac)
• roll to Chrome 150.0.7871.115 (#15223) (3232cd4)
• roll to Chrome 150.0.7871.46 (#15196) (30d4100)
• roll to Chrome 150.0.7871.49 (#15220) (633d55d)
• roll to Firefox 152.0.5 (#15219) (5de975a)

25.3.0 (2026-07-01)

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.0.5 to 3.0.6

🎉 Features

• support installing extensions for browser contexts (#15164) (118d84d)

🛠️ Fixes

... (truncated)

Commits

• f5b96c5 chore: release main (#15201)
• 29a6e7c chore(webmcp): Update WebMCP to Chrome 151 implementation (#15146)
• 4a48c8a feat: add browser-level PWA install/launch/uninstall APIs (#15235)
• ffe1c91 chore(deps): bump the all group with 5 updates (#15262)
• 06442ae feat: roll to Chrome 151.0.7922.47 (#15237)
• 7c72827 chore(deps): bump svgo from 3.3.3 to 3.3.4 in /website (#15253)
• 83b0e31 chore(deps): bump fast-uri from 3.1.2 to 3.1.4 in /website (#15254)
• 0ebbd98 chore(deps): bump shell-quote from 1.8.4 to 1.10.0 in /website (#15255)
• befa16f chore(deps): bump body-parser from 1.20.5 to 1.20.6 in /website (#15256)
• 8af689d chore(deps): bump webpack-dev-server from 5.2.5 to 5.2.6 in /website (#15257)
• Additional commits viewable in compare view

Updates sinon from 22.0.0 to 22.1.0

Changelog

Sourced from sinon's changelog.

22.1.0

• d36e921b fix: let returns override returnsArg (王胜)

  Signed-off-by: 王胜 2318857637@qq.com

• 40c4caa0 fix: align restoreObject docs test with idempotent behavior (#2745) (Julia Miller)

  restoreObject was made idempotent in #2737 — it no longer throws for objects with no restorable methods. Updates the docs page and its corresponding test to reflect this.

• a68dac19 fix: throw a clear error when throwArg index equals the argument count (#2743) (spokodev)

  • fix: throw a clear error when throwArg index equals the argument count

  spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it with pos equal to the number of recorded arguments slipped past the guard and reached throw this.args[pos], throwing undefined instead of the intended TypeError. A thrown undefined cannot be inspected as an Error and is reported by test frameworks as no exception thrown.

  Use >= to match ensureArgs in behavior.js and the sibling callArg helpers, which already reject an out-of-range index with a clear error.

• 9ea504e3 feat: make sinon.restoreObject idempotent (#2737) (Ilia Choly)

  Passing an object with no live fakes to restoreObject now restores nothing instead of throwing, giving it symmetry with sinon.restore() and sandbox.restore(). The strict "found no methods" check is retained for spy(object) and stub(object), which now use a dedicated walkObjectStrict export, while restoreObject uses the loose walkObject. Passing a falsy value still throws.

  Fixes #2736

• 4db4feff fix: preserve fake undefined argument validation (Vishal Kumar Singh)
• 755a40d7 fix: isolate callId counter per sandbox for parallel test support (Vishal Kumar Singh)

  The global callId counter in proxy-invoke.js caused calledImmediatelyBefore and calledImmediatelyAfter to fail when tests run in parallel with separate sandboxes. Each sandbox now maintains its own callId counter, passed through the spy/stub/fake creation chain via a context object.

  Fixes #2472

Released by Morgan Roderick on 2026-07-20.

Commits

• ab289e9 22.1.0
• bb3b75a chore: remove Jekyll steps from version hook
• bb38f25 chore: run docs tests in preversion hook
• d36e921 fix: let returns override returnsArg
• 11db213 ci: run docs tests on every PR (#2746)
• 40c4caa fix: align restoreObject docs test with idempotent behavior (#2745)
• 5ccb7fd build(deps): bump the action-deps group with 4 updates (#2744)
• a68dac1 fix: throw a clear error when throwArg index equals the argument count (#2743)
• 9ea504e feat: make sinon.restoreObject idempotent (#2737)
• cf5d9e8 fix: remove dead link and exclude code example URLs from link check
• Additional commits viewable in compare view

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 46.21%. Comparing base (b36cfc4) to head (a673bdd).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2207      +/-   ##
==========================================
+ Coverage   46.01%   46.21%   +0.19%     
==========================================
  Files        1039     1039              
  Lines       17131    17131              
  Branches     3123     3123              
==========================================
+ Hits         7883     7917      +34     
+ Misses       9248     9214      -34     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.