diff --git a/packages/mongo-knex/package.json b/packages/mongo-knex/package.json
index 30265ca0..aa4adab4 100644
--- a/packages/mongo-knex/package.json
+++ b/packages/mongo-knex/package.json
@@ -26,7 +26,7 @@
     "mysql2": "3.12.0",
     "nconf": "0.12.0",
     "should": "13.2.3",
-    "sinon": "21.0.1",
+    "sinon": "21.0.3",
     "sqlite3": "5.1.6"
   },
   "dependencies": {
diff --git a/packages/mongo-utils/package.json b/packages/mongo-utils/package.json
index 1f28cc06..9a0b21a9 100644
--- a/packages/mongo-utils/package.json
+++ b/packages/mongo-utils/package.json
@@ -20,7 +20,7 @@
     "eslint-plugin-ghost": "3.5.0",
     "mocha": "11.7.5",
     "should": "13.2.3",
-    "sinon": "21.0.1"
+    "sinon": "21.0.3"
   },
   "dependencies": {
     "lodash": "^4.17.11"
diff --git a/packages/nql-lang/package.json b/packages/nql-lang/package.json
index 4ec52202..c32fff9d 100644
--- a/packages/nql-lang/package.json
+++ b/packages/nql-lang/package.json
@@ -25,7 +25,7 @@
     "jison": "0.4.18",
     "mocha": "11.7.5",
     "should": "13.2.3",
-    "sinon": "21.0.1"
+    "sinon": "21.0.3"
   },
   "dependencies": {
     "date-fns": "^2.28.0"
diff --git a/packages/nql/package.json b/packages/nql/package.json
index 061e8166..72f2a544 100644
--- a/packages/nql/package.json
+++ b/packages/nql/package.json
@@ -24,7 +24,7 @@
     "mysql2": "3.12.0",
     "nconf": "0.12.0",
     "should": "13.2.3",
-    "sinon": "21.0.1",
+    "sinon": "21.0.3",
     "sqlite3": "5.1.6"
   },
   "dependencies": {
diff --git a/yarn.lock b/yarn.lock
index c192f5e9..9c21de64 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -654,17 +654,17 @@
   dependencies:
     type-detect "4.0.8"
 
-"@sinonjs/fake-timers@^15.1.0":
+"@sinonjs/fake-timers@^15.1.1":
   version "15.1.1"
   resolved "https://registry.yarnpkg.com/@sinonjs/fake-timers/-/fake-timers-15.1.1.tgz#e1a6f7171941aadcc31d2cea1744264d58b8b34c"
   integrity sha512-cO5W33JgAPbOh07tvZjUOJ7oWhtaqGHiZw+11DPbyqh2kHTBc3eF/CjJDeQ4205RLQsX6rxCuYOroFQwl7JDRw==
   dependencies:
     "@sinonjs/commons" "^3.0.1"
 
-"@sinonjs/samsam@^8.0.3":
-  version "8.0.3"
-  resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-8.0.3.tgz#eb6ffaef421e1e27783cc9b52567de20cb28072d"
-  integrity sha512-hw6HbX+GyVZzmaYNh82Ecj1vdGZrqVIn/keDTg63IgAwiQPO+xCz99uG6Woqgb4tM0mUiFENKZ4cqd7IX94AXQ==
+"@sinonjs/samsam@^9.0.3":
+  version "9.0.3"
+  resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-9.0.3.tgz#da4cad6ee24ca0c9c205da16676f7d540df71f12"
+  integrity sha512-ZgYY7Dc2RW+OUdnZ1DEHg00lhRt+9BjymPKHog4PRFzr1U3MbK57+djmscWyKxzO1qfunHqs4N45WWyKIFKpiQ==
   dependencies:
     "@sinonjs/commons" "^3.0.1"
     type-detect "^4.1.0"
@@ -1683,10 +1683,10 @@ diff@^7.0.0:
   resolved "https://registry.yarnpkg.com/diff/-/diff-7.0.0.tgz#3fb34d387cd76d803f6eebea67b921dab0182a9a"
   integrity sha512-PJWHUb1RFevKCwaFA9RlG5tCd+FO5iRh9A8HEtkmBH2Li03iJriB6m6JIN4rGz3K3JLawI7/veA1xzRKP6ISBw==
 
-diff@^8.0.2:
-  version "8.0.3"
-  resolved "https://registry.yarnpkg.com/diff/-/diff-8.0.3.tgz#c7da3d9e0e8c283bb548681f8d7174653720c2d5"
-  integrity sha512-qejHi7bcSD4hQAZE0tNAawRK1ZtafHDmMTMkrrIGgSLl7hTnQHmKCeB45xAcbfTqK2zowkM3j3bHt/4b/ARbYQ==
+diff@^8.0.3:
+  version "8.0.4"
+  resolved "https://registry.yarnpkg.com/diff/-/diff-8.0.4.tgz#4f5baf3188b9b2431117b962eb20ba330fadf696"
+  integrity sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==
 
 dir-glob@^3.0.1:
   version "3.0.1"
@@ -5060,15 +5060,15 @@ simple-html-tokenizer@^0.5.11:
   resolved "https://registry.yarnpkg.com/simple-html-tokenizer/-/simple-html-tokenizer-0.5.11.tgz#4c5186083c164ba22a7b477b7687ac056ad6b1d9"
   integrity sha512-C2WEK/Z3HoSFbYq8tI7ni3eOo/NneSPRoPpcM7WdLjFOArFuyXEjAoCdOC3DgMfRyziZQ1hCNR4mrNdWEvD0og==
 
-sinon@21.0.1:
-  version "21.0.1"
-  resolved "https://registry.yarnpkg.com/sinon/-/sinon-21.0.1.tgz#36b9126065a44906f7ba4a47b723b99315a8c356"
-  integrity sha512-Z0NVCW45W8Mg5oC/27/+fCqIHFnW8kpkFOq0j9XJIev4Ld0mKmERaZv5DMLAb9fGCevjKwaEeIQz5+MBXfZcDw==
+sinon@21.0.3:
+  version "21.0.3"
+  resolved "https://registry.yarnpkg.com/sinon/-/sinon-21.0.3.tgz#fd3a2387ffe4fdbbfbbf3a0858f18d46c4acb34e"
+  integrity sha512-0x8TQFr8EjADhSME01u1ZK31yv2+bd6Z5NrBCHVM+n4qL1wFqbxftmeyi3bwlr49FbbzRfrqSFOpyHCOh/YmYA==
   dependencies:
     "@sinonjs/commons" "^3.0.1"
-    "@sinonjs/fake-timers" "^15.1.0"
-    "@sinonjs/samsam" "^8.0.3"
-    diff "^8.0.2"
+    "@sinonjs/fake-timers" "^15.1.1"
+    "@sinonjs/samsam" "^9.0.3"
+    diff "^8.0.3"
     supports-color "^7.2.0"
 
 slash@3.0.0, slash@^3.0.0: