chore: bump sinon and @types/sinon (#1918)

* chore: bump sinon and @types/sinon

Bumps [sinon](https://github.com/sinonjs/sinon) and [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon). These dependencies needed to be updated together.

Updates `sinon` from 15.2.0 to 22.1.0
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md)
- [Commits](sinonjs/sinon@v15.2.0...v22.1.0)

Updates `@types/sinon` from 10.0.20 to 22.0.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

---
updated-dependencies:
- dependency-name: "@types/sinon"
  dependency-version: 22.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: sinon
  dependency-version: 22.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* test: keep viewer polling clocks out of session teardown

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kun Ren <renkun@outlook.com>

Author: dependabot[bot]

package.json

@@ -2621,7 +2621,7 @@
     "@types/ejs": "^3.1.5",
     "@types/mocha": "^8.2.3",
     "@types/node": "^22.20.5",
-    "@types/sinon": "^10.0.20",
+    "@types/sinon": "^22.0.2",
     "@types/vscode": "~1.101.0",
     "@types/winreg": "^1.2.36",
     "@vscode/test-cli": "^0.0.15",
@@ -2633,7 +2633,7 @@
     "mocha": "^12.0.3",
     "ovsx": "^1.3.0",
     "oxfmt": "0.73.0",
-    "sinon": "^15.2.0",
+    "sinon": "^22.1.0",
     "typescript": "~7.0.2",
     "oxlint": "^1.89.0",
     "oxlint-tsgolint": "~7.0.2005"

pnpm-lock.yaml

@@ -589,7 +589,8 @@ suite('Viewer session ownership', () => {
     });
 
     test('viewers share polling and release it when the last viewer closes', async () => {
-        const clock = sandbox.useFakeTimers();
+        // Server shutdown needs real nextTick callbacks; only fake the polling interval.
+        const clock = sandbox.useFakeTimers({ toFake: ['setInterval', 'clearInterval'] });
         const kill = sandbox.stub(process, 'kill').returns(true);
         const request = sandbox.stub().resolves({});
         const first = session.registerSessionTransport(
@@ -663,6 +664,7 @@ suite('Viewer session ownership', () => {
         } finally {
             session.unregisterSessionTransport(first);
             session.unregisterSessionTransport(second);
+            clock.restore();
         }
     });