Bump the tests-qunit group across 1 directory with 2 updates

[dependabot]

Bumps the tests-qunit group with 2 updates in the / directory: grunt-contrib-qunit and sinon.

Updates grunt-contrib-qunit from 10.1.1 to 10.2.0

Changelog

Sourced from grunt-contrib-qunit's changelog.

v10.2.0:

• date: 2026-04-15
• changes:
  • Update from Puppeteer 22 (Chrome 127) to Puppeteer 24 (Chrome 147).
  • Fix url.parse() deprecation warning on Node.js 24.
  • Increase default timeout from 5s to 10s (it seems Chrome launch times got more spotty, at least via GitHub Actions).

Commits

• 0a965d7 10.2.0
• ed19845 Increase default timeout from 5s to 10s
• 3d6b9ca Docs: Convert changelog to markdown
• 5c08371 Fix url.parse() deprecation warning on Node.js 24
• 51854f1 Upgrade to Puppeteer 24
• 4c7ece6 Build: Switch from JSHint to ESLint
• 297c6cc Build: Remove package-lock.json
• efc2ae0 docs: Add SECURITY.md
• ea5030c docs: Add QUnit compatibility table
• d124309 Build: Fix GitHub's own self-induced deprecation warnings
• See full diff in compare view

Updates sinon from 16.1.3 to 21.1.2

Changelog

Sourced from sinon's changelog.

21.1.2

• 53817f7d Upgrade to ESLint 10 and new shared config (#2696) (Carl-Erik Kopseng)

  • Upgrade to ESLint 10 and new shared config
  • Update deps

• d7a682e0 fix: move npm-run-all to devDeps (#2694) (Avi Vahl)

  used only during dev, and caused a considerable dep count jump downstream

• 5b8720ec use latest shared eslint-config (Carl-Erik Kopseng)

Released by Carl-Erik Kopseng on 2026-04-11.

21.1.1

• 3c8b023b Update deps (Carl-Erik Kopseng)
• 2eabf5da fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693) (Carl-Erik Kopseng)

  • fix(#2692): Remove ESM-only supports-color as it breaks CJS exports

Released by Carl-Erik Kopseng on 2026-04-10.

21.1.0

• 0a5526c5 updated deps (Carl-Erik Kopseng)
• 5262204f fix: build artifacts before running bundled tests (Carl-Erik Kopseng)
• 819bb64b Migration to ECMAScript modules (ESM) (#2683) (Carl-Erik Kopseng)

  This allowed us to finally consume ESM-only dependencies and has broken us free from some CJS shackes. Now produce the same API surface for CJS consumers, as well, by generating ./lib

  • Modern ignores 😁
  • test: add distribution harness
  • test: verify packed cjs and esm entrypoints
  • test: lock distribution api manifest
  • test: smoke test built pkg artifacts
  • docs: require contract tests for package migration
  • test: guard esm migration regressions
  • docs: require contract gate for esm migration
  • build: generate cjs lib from esm source entries
  • refactor: port root api surface to esm
  • build: clean port of root api to esm
  • docs: include implementation plans
  • fix: align lint and smoke tests with esm migration
  • refactor: complete esm port of all core components
  • refactor: finalize esm migration with sandbox and naming fixes
  • fix: finish esm migration stabilization

... (truncated)

Commits

• c9ee063 21.1.2
• 53817f7 Upgrade to ESLint 10 and new shared config (#2696)
• d7a682e fix: move npm-run-all to devDeps (#2694)
• 5b8720e use latest shared eslint-config
• 40f9d6b 21.1.1
• 3c8b023 Update deps
• 2eabf5d fix(#2692): Remove ESM-only supports-color as it breaks CJS exports (#2693)
• 30cf67e 21.1.0
• 0a5526c updated deps
• 5262204 fix: build artifacts before running bundled tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions