search

Incognito / one-time-secret

Self-Host secrets on a host that you choose. Minimal requirements. Designed for easy setup.
MIT License
32 stars 5 forks source link

Bump winston from 3.3.3 to 3.4.0 #399

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps winston from 3.3.3 to 3.4.0.

Release notes

Sourced from winston's releases.

v3.4.0 / 2022-01-10

Yesterday's release was done with a higher sense of urgency than usual due to vandalism in the colors package. This release:

  • ties up a loose end by including #1973 to go with #1824
  • adds a missing http property in NpmConfigSetColors #2004 (thanks @​SimDaSong)
  • fixes a minor issue in the build/release process #2014
  • pins the version of the testing framework to avoid an issue with a test incorrectly failing #2017

The biggest change in this release, motivating the feature-level update, is #2006 Make winston more ESM friendly, thanks to @​miguelcobain.

Thanks also to @​DABH, @​wbt, and @​fearphage for contributions and reviews!

v3.3.4

Compared to v3.3.3, this version fixes some issues and includes some updates to project infrastructure, such as replacing Travis with Github CI and dependabot configuration. There have also been several relatively minor improvements to documentation, and incorporation of some updated dependencies.
Dependency updates include a critical bug fix #2008 in response to self-vandalism by the author of a dependency.

  • #1964 Added documentation for how to use a new externally maintained Seq transport.
  • #1712 Add default metadata when calling log with string level and message.
  • #1824 Unbind event listeners on close
  • #1961 Handle undefined rejections
  • #1878 Correct boolean evaluation of empty-string value for eol option
  • #1977 Improved consistency of object parameters for better test reliability
Changelog

Sourced from winston's changelog.

v3.4.0 / 2022-01-10

Yesterday's release was done with a higher sense of urgency than usual due to vandalism in the colors package. This release:

  • ties up a loose end by including #1973 to go with #1824
  • adds a missing http property in NpmConfigSetColors #2004 (thanks @​SimDaSong)
  • fixes a minor issue in the build/release process #2014
  • pins the version of the testing framework to avoid an issue with a test incorrectly failing #2017

The biggest change in this release, motivating the feature-level update, is #2006 Make winston more ESM friendly, thanks to @​miguelcobain.

Thanks also to @​DABH, @​wbt, and @​fearphage for contributions and reviews!

v3.3.4 / 2022-01-09

Compared to v3.3.3, this version fixes some issues and includes some updates to project infrastructure, such as replacing Travis with Github CI and dependabot configuration. There have also been several relatively minor improvements to documentation, and incorporation of some updated dependencies.
Dependency updates include a critical bug fix #2008 in response to self-vandalism by the author of a dependency.

  • #1964 Added documentation for how to use a new externally maintained Seq transport.
  • #1712 Add default metadata when calling log with string level and message.
  • #1824 Unbind event listeners on close
  • #1961 Handle undefined rejections
  • #1878 Correct boolean evaluation of empty-string value for eol option
  • #1977 Improved consistency of object parameters for better test reliability
Commits
  • c5f6c5c Update package.json version to 3.4.0
  • 6a71cbb Add 3.4.0 release notes
  • 955dffa Pin mocha to v8 as short-term test failure fix
  • 5f38299 Simplify path so that e.g. 'npm run build' can find it more easily
  • 754ca4e More general testing beyond undefined
  • 7ca9e9c Bugfix: copy-paste from referenced source
  • 2206c39 Unhandle exceptions and rejections B4 replacement
  • 2927964 Make winston more ESM friendly (#2006)
  • 8d6e7f2 add http property to NpmConfigSetColors (#2004)
  • 473d391 Fix release notes from yesterday
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by w-b-t, a new releaser for winston since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 2 years ago

Superseded by #403.