Bump sinon from 4.1.5 to 4.4.9

[dependabot-preview]

Bumps sinon from 4.1.5 to 4.4.9.

Changelog

Sourced from sinon's changelog.

4.4.9 / 2018-03-27

• Fix #1746: Remove dependency on ES2015 code from post-install script

4.4.8 / 2018-03-21

• Fix 1743: Add scripts/support-sinon.js to package

4.4.7 / 2018-03-21

• Improve the post-install script: remove noise, add ❤️

4.4.6 / 2018-03-15

• Return returned value of invokant when using yields* and callsArg* (#1724)

4.4.5 / 2018-03-13

• Add postinstall banner pointing to Open Collective

4.4.4 / 2018-03-13

• Make std/esm a devDependency

4.4.3 / 2018-03-12

• Fix inconsistent newline usage for %D in spy.printf (#1717)

4.4.2 / 2018-02-25

• Add descriptive error message on attempt to call argument that is not a function (#1695)

4.4.1 / 2018-02-24

• Docs: make it clear that it is possible to use assert with spy calls (#1688)

4.4.0 / 2018-02-23

• Change return value of yield and callArg

... (truncated)

Commits

• c4c4279 4.4.9
• b1e2c47 Update History.md and AUTHORS for new release
• 8f7a966 Fix #1746: Remove dependency on ES2015 code from post-install script
• 224084b Update docs/changelog.md and set new release id in docs/_config.yml
• 46ace0f Add release documentation for v4.4.8
• 5254ed3 4.4.8
• 9a13d14 Update History.md and AUTHORS for new release
• f547e1a Fix 1743: Add scripts/support-sinon.js to package
• e060fe9 Update docs/changelog.md and set new release id in docs/_config.yml
• e9fce06 Add release documentation for v4.4.7
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot ignore this [minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use [this|these] label[s] will set the current labels as the default for future PRs for this repo and language

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #162.