test(cli): Switched to esmock

- because esm caching issues with shared stubs

Signed-off-by: Günter Schafranek <[email protected]>

Author: gschafra

lib/cli/index.poku.js

@@ -1,46 +1,27 @@
-import { afterEach, assert, beforeEach, describe, it } from "poku";
-import quibble from "quibble";
+import esmock from "esmock";
+import { assert, describe, it } from "poku";
 import sinon from "sinon";
 
 describe("CLI tests", () => {
   describe("submitBom()", () => {
-    let gotStub;
-    let submitBom;
-
-    beforeEach(async () => {
-      // Create a sinon stub that mimics got()
+    it("should successfully report the SBOM with given project id, name, version and a single tag", async () => {
       const fakeGotResponse = {
         json: sinon.stub().resolves({ success: true }),
       };
 
-      gotStub = sinon.stub().returns(fakeGotResponse);
-
-      // Attach extend to the function itself
+      const gotStub = sinon.stub().returns(fakeGotResponse);
       gotStub.extend = sinon.stub().returns(gotStub);
 
-      // Replace the real 'got' module with our stub
-      await quibble.esm("got", {
-        default: gotStub,
+      const { submitBom } = await esmock("./index.js", {
+        got: { default: gotStub },
       });
 
-      // Import the module under test AFTER quibble
-      ({ submitBom } = await import(`./index.js?update=${Date.now()}`));
-    });
-
-    afterEach(async () => {
-      await quibble.reset();
-      sinon.reset();
-    });
-
-    it("should successfully report the SBOM with given project id, name, version and a single tag", async () => {
       const serverUrl = "https://dtrack.example.com";
       const projectId = "f7cb9f02-8041-4991-9101-b01fa07a6522";
       const projectName = "cdxgen-test-project";
       const projectVersion = "1.0.0";
       const projectTag = "tag1";
-      const bomContent = {
-        bom: "test",
-      };
+      const bomContent = { bom: "test" };
       const apiKey = "TEST_API_KEY";
       const skipDtTlsCheck = false;
 
@@ -72,7 +53,6 @@ describe("CLI tests", () => {
       // Grab call arguments
       const [calledUrl, options] = gotStub.firstCall.args;
 
-      // Assert call arguments against expectations
       assert.equal(calledUrl, `${serverUrl}/api/v1/bom`);
       assert.equal(options.method, "PUT");
       assert.equal(options.https.rejectUnauthorized, !skipDtTlsCheck);
@@ -82,6 +62,17 @@ describe("CLI tests", () => {
     });
 
     it("should successfully report the SBOM with given parent project, name, version and multiple single tags", async () => {
+      const fakeGotResponse = {
+        json: sinon.stub().resolves({ success: true }),
+      };
+
+      const gotStub = sinon.stub().returns(fakeGotResponse);
+      gotStub.extend = sinon.stub().returns(gotStub);
+
+      const { submitBom } = await esmock("./index.js", {
+        got: { default: gotStub },
+      });
+
       const serverUrl = "https://dtrack.example.com";
       const projectName = "cdxgen-test-project";
       const projectVersion = "1.0.0";

package.json

@@ -472,8 +472,8 @@
   },
   "devDependencies": {
     "@biomejs/biome": "2.3.8",
+    "esmock": "^2.7.3",
     "poku": "3.0.2",
-    "quibble": "0.9.2",
     "sinon": "21.0.0",
     "typescript": "5.9.3"
   },