chore(deps): bump winston from 3.7.2 to 3.11.0

[dependabot[bot]]

Bumps winston from 3.7.2 to 3.11.0.

Release notes

Sourced from winston's releases.

v3.11.0

• Bump split2 from 4.1.0 to 4.2.0 (#2336) 37f4282
• Bump actions/checkout from 3 to 4 (#2346) fdcc893
• Bump @​colors/colors packgae to 1.6.0 (#2353) dcbec34
• Bump rimraf from 3.0.2 to 5.0.5 (#2357) aaaa4c0
• feat: add guardrails to the instantiation of a Profiler (#2226) 914b846
• Bump @​types/node from 20.3.1 to 20.4.2 (#2329) 23cb80c
• Bug Fix: FileTransportOptions type missing lazy:boolean option (#2334) 1c43f7b

https://github.com/winstonjs/winston/compare/v3.10.0...v3.11.0

v3.10.0

• Avoid potential github issues - relax engines node requirement in package.json fc9c83d
• Export Logger class (#2181) eda40ef
• Added Lazy option to file transport (#2317) f7e7f2f
• Bump eslint from 8.32.0 to 8.44.0 (#2321) de2e887
• docs(#2319): Syntax error on README.md (#2320) fcc69ec
• fix(types): Allow any object to be passed as meta to logger.profile (#2314) 9d6001a
• Bump @​types/node from 18.11.18 to 20.3.1 (#2313) 06e3165
• Update supported Node versions and run npm audit fix (#2315) 61e2f5b
• Bump @​babel/core from 7.20.12 to 7.22.1 (#2309) 7643ad6

https://github.com/winstonjs/winston/compare/v3.9.0...v3.10.0

v3.9.0

Functionality changes

• Handle undefined errors in getAllInfo in exception-handler in winstonjs/winston#2208; thanks to new contributor @​eivindrs
• fix: properly allow passing non-array transport in winstonjs/winston#2256; thanks to new contributor @​Tanuel
• fix #1732 (Http Transport uses JSON format options as request options) in winstonjs/winston#2272; thanks to new contributor @​MoritzLoewenstein (minor version bump per comment on the issue)
• fix: add guard clause to prevent FD leak in winstonjs/winston#2301; thanks to new contributor @​td-tomasz-joniec

Dependency updates by @​dependabot + CI autotesting

• Bump eslint from 8.23.0 to 8.32.0 by @​dependabot in winstonjs/winston#2209, winstonjs/winston#2236, winstonjs/winston#2258, & winstonjs/winston#2271
• Bump @​babel/core from 7.19.0 to 7.20.12 by @​dependabot in winstonjs/winston#2206, winstonjs/winston#2234, winstonjs/winston#2259, & winstonjs/winston#2275
• Bump @​types/node from 18.0.0 to 18.11.18 by @​dependabot in winstonjs/winston#2215, winstonjs/winston#2235, & winstonjs/winston#2264
• Bump @​babel/preset-env from 7.19.0 to 7.20.2 by @​dependabot in winstonjs/winston#2218 & winstonjs/winston#2244
• Bump safe-stable-stringify from 2.3.1 to 2.4.3 by @​dependabot in winstonjs/winston#2217 & winstonjs/winston#2292
• Bump @​babel/cli from 7.18.10 to 7.19.3 by @​dependabot in winstonjs/winston#2216
• Bump json5 from 2.2.1 to 2.2.3 by @​dependabot in winstonjs/winston#2260

Documentation changes

• Fix readme typo in winstonjs/winston#2230; thanks to new contributor @​aretecode
• create new example for ready to use in winstonjs/winston#2240; thanks to new contributor @​myagizmaktav
• minor fixes to publishing.md

Build Infrastructure changes

• GitHub Workflows security hardening in winstonjs/winston#2252; thanks to new contributor @​sashashura

v3.8.2

Patch-level changes

... (truncated)

Changelog

Sourced from winston's changelog.

CHANGELOG

v3.9.0

Functionality changes

• Handle undefined errors in getAllInfo in exception-handler in winstonjs/winston#2208; thanks to new contributor @​eivindrs
• fix: properly allow passing non-array transport in winstonjs/winston#2256; thanks to new contributor @​Tanuel
• fix #1732 (Http Transport uses JSON format options as request options) in winstonjs/winston#2272; thanks to new contributor @​MoritzLoewenstein (minor version bump per comment on the issue)
• fix: add guard clause to prevent FD leak in winstonjs/winston#2301; thanks to new contributor @​td-tomasz-joniec

Dependency updates by @​dependabot + CI autotesting

• Bump eslint from 8.23.0 to 8.32.0 by @​dependabot in winstonjs/winston#2209, winstonjs/winston#2236, winstonjs/winston#2258, & winstonjs/winston#2271
• Bump @​babel/core from 7.19.0 to 7.20.12 by @​dependabot in winstonjs/winston#2206, winstonjs/winston#2234, winstonjs/winston#2259, & winstonjs/winston#2275
• Bump @​types/node from 18.0.0 to 18.11.18 by @​dependabot in winstonjs/winston#2215, winstonjs/winston#2235, & winstonjs/winston#2264
• Bump @​babel/preset-env from 7.19.0 to 7.20.2 by @​dependabot in winstonjs/winston#2218 & winstonjs/winston#2244
• Bump safe-stable-stringify from 2.3.1 to 2.4.3 by @​dependabot in winstonjs/winston#2217 & winstonjs/winston#2292
• Bump @​babel/cli from 7.18.10 to 7.19.3 by @​dependabot in winstonjs/winston#2216
• Bump json5 from 2.2.1 to 2.2.3 by @​dependabot in winstonjs/winston#2260

Documentation changes

• Fix readme typo in winstonjs/winston#2230; thanks to new contributor @​aretecode
• create new example for ready to use in winstonjs/winston#2240; thanks to new contributor @​myagizmaktav
• minor fixes to publishing.md

Build Infrastructure changes

• GitHub Workflows security hardening in winstonjs/winston#2252; thanks to new contributor @​sashashura

v3.8.2

Patch-level changes

• Add .js to main entry point in package.json in winstonjs/winston#2177; thanks to new contributor @​rumanbsl
• Small grammatical fixes in README.md in winstonjs/winston#2183; thanks to new contributor @​mikebarr24
• Move colors to non-dev dependencies by @​wbt in winstonjs/winston#2190

Dependency updates by @​dependabot + CI autotesting

• Bump @​babel/preset-env from 7.18.2 to 7.19.0 in winstonjs/winston#2189
• Bump @​babel/cli from 7.17.10 to 7.18.10 in winstonjs/winston#2173
• Bump eslint from 8.18.0 to 8.23.0 in winstonjs/winston#2184
• Bump @​babel/core from 7.18.5 to 7.19.0 in winstonjs/winston#2192
• Bump logform from 2.4.1 to 2.4.2 in winstonjs/winston#2191

v3.8.1

Patch-level changes

• Update types to match in-code definitions in winstonjs/winston#2157; thanks to new contributor @​flappyBug

Dependency updates by @​dependabot + CI autotesting

• Bump logform from 2.4.0 to 2.4.1 in winstonjs/winston#2156
• Bump async from 3.2.3 to 3.2.4 in winstonjs/winston#2147

v3.8.0 / 2022-06-23

Added functionality

• Add the stringify replacer option to the HTTP transport by @​domiins in winstonjs/winston#2155

... (truncated)

Commits

• 1c8c65f 3.11.0
• 37f4282 Bump split2 from 4.1.0 to 4.2.0 (#2336)
• fdcc893 Bump actions/checkout from 3 to 4 (#2346)
• dcbec34 Bump @​colors/colors packgae to 1.6.0 (#2353)
• aaaa4c0 Bump rimraf from 3.0.2 to 5.0.5 (#2357)
• 914b846 feat: add guardrails to the instantiation of a Profiler (#2226)
• 23cb80c Bump @​types/node from 20.3.1 to 20.4.2 (#2329)
• 1c43f7b Bug Fix: FileTransportOptions type missing lazy:boolean option (#2334)
• 19ac9d8 3.10.0
• fc9c83d Avoid potential github issues - relax engines node requirement in package.json
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security[bot]]

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
winston	3.7.2...3.11.0	None	+1/-0	310 kB	dabh

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.