search

BlueWallet / LndHub

Wrapper for Lightning Network Daemon. It provides separate accounts for end-users
http://LndHub.io
MIT License
747 stars 181 forks source link

[Snyk] Upgrade winston from 3.3.3 to 3.6.0 #395

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade winston from 3.3.3 to 3.6.0.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Release notes
Package name: winston
  • 3.6.0 - 2022-02-12

    v3.5.1...v3.6.0

  • 3.5.1 - 2022-01-31

    This release reverts the changes made in PR #1896 which added stricter typing to the available log levels,
    and inadvertently broke use of custom levels with TypeScript (Issue #2047). Apologies for that!

  • 3.5.0 - 2022-01-27

    This release includes the following, in sequence by first merge in group:

    Feature updates:

    Patch-level updates:

    • Bump dependency versions (thanks @ dependabot & @ DABH!)
      • Bump @ types/node from 16.11.12 to 17.0.8 (PR #2009)
      • Bump @ babel/preset-env from 7.16.7 to 7.16.8 (#2036)
      • Bump @ types/node from 17.0.8 to 17.0.9 (#2035)
      • Bump @ babel/cli from 7.16.7 to 7.16.8 (#2034)
      • Bump @ types/node from 17.0.9 to 17.0.10 (#2042)
      • Bump @ babel/core from 7.16.7 to 7.16.12 (#2041)
      • Bump @ babel/preset-env from 7.16.8 to 7.16.11 (#2040)
    • Fixing documentation syntax errors in transports code examples (#1916; thanks @ romanzaycev!)
    • Fix missing type declarations, especially for .rejections (#1842, #1929, #2021; thanks @ vanflux, @ svaj, @ glensc, & others!)
    • More narrowly typing the “level” string (#1896, thanks @ yonas-g!)
    • Using a safer stringify, e.g. to avoid issues from circular structures, in the http transport (#2043, thanks @ karlwir!)

    Updates to the repo & project which don’t actually affect the running code:

    Thanks also to maintainers @ DABH, @ fearphage, @ maverick1872, and @ wbt for issue/PR shepherding and help across multiple parts of the release!

    If somebody got missed in the list of thanks, please forgive the accidental oversight and/or feel free to open a PR on the changelog.

  • 3.4.0 - 2022-01-10
    Read more
  • 3.3.4 - 2022-01-10

    Version 3.3.4

  • 3.3.3 - 2020-06-23

    v3.3.2...v3.3.3

from winston GitHub release notes
Commit messages
Package name: winston
  • b2fde9d 3.6.0
  • 5e72485 Changelog updates for v3.6.0
  • 93077ef Update dependencies, including latest logform (#2071)
  • 035f94a Update to @ colors/colors (#2069)
  • 7665d88 Bump @ babel/core from 7.16.12 to 7.17.2 (#2068)
  • e658389 Bump @ babel/cli from 7.16.8 to 7.17.0 (#2064)
  • 30d260d chore: add editorconfig (#2058)
  • 40ef309 Add search terms field to bug report template (#2067)
  • c9b7579 Bump @ types/node from 17.0.13 to 17.0.15 (#2062)
  • 2b8cd55 Chore: Organize and restructure tests (#2049)
  • 2017c50 Bump to latest winston-transport
  • f741383 Memory leak fix: do not wait for `process.nextTick` to clear pending callbacks (#2057)
  • 438cb73 Update linter dependencies and config (#2059)
  • 7f6a6f2 Bump @ types/node from 17.0.10 to 17.0.13 (#2051)
  • 22bb31a Revert pr 1896 (#2052) for rerelease
  • a320b0c Revert "typed level type" (#2050)
  • 237534a Release 3.5.0 (#2045)
  • d18198d chore: use safe stringify in http transport (#2043)
  • 8a1735b Update README.md (#2027)
  • 278c492 Bump @ babel/preset-env from 7.16.8 to 7.16.11 (#2040)
  • 609a84b Bump @ babel/core from 7.16.7 to 7.16.12 (#2041)
  • f2d7e06 Bump @ types/node from 17.0.9 to 17.0.10 (#2042)
  • 3b48008 Bump @ babel/cli from 7.16.7 to 7.16.8 (#2034)
  • 4a0ed4f Bump @ types/node from 17.0.8 to 17.0.9 (#2035)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs