CDP-5757: Bump third-party dependencies

[richdawe-cio]

Bump the following third-party dependencies that we use for development. This updates a number of dependencies to resolve known security issues.

• ava
• nyc
• pretty-quick
• sinon
• @types/sinon

Also:

• Add a mise configuration to help with local development.
• Update examples/getCustomerByEmail.js to print the search results.

Note

Low Risk
Low risk: adds local toolchain config and adjusts an example script to log async results, with no production/library logic changes.

Overview
Adds .mise.toml to standardize local tooling (enables mise experimental mode and pins Node to 22.22.0).

Updates examples/getCustomerByEmail.js to use consistent quoting/semicolons and to handle the getCustomersByEmail promise by logging the returned result.

^{Reviewed by Cursor Bugbot for commit 685fa07. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	sinon@​14.0.0 ⏵ 17.0.2	+1		-2
	@​types/​sinon@​10.0.11 ⏵ 17.0.4	+1
	nyc@​15.1.0 ⏵ 18.0.0	+1
	pretty-quick@​3.1.3 ⏵ 3.3.1	+1		+1
	ava@​5.0.1 ⏵ 5.3.1	+1			-1

View full report