This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade winston from 3.8.2 to 3.10.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **2 versions** ahead of your current version.
- The recommended version was released **21 days ago**, on 2023-07-10.
Release notes Package name: winston
Handle undefined errors in getAllInfo in exception-handler in #2208; thanks to new contributor @ eivindrs
fix: properly allow passing non-array transport in #2256; thanks to new contributor @ Tanuel
fix #1732 (Http Transport uses JSON format options as request options) in #2272; thanks to new contributor @ MoritzLoewenstein (minor version bump per comment on the issue)
fix: add guard clause to prevent FD leak in #2301; thanks to new contributor @ td-tomasz-joniec
Dependency updates by @ dependabot + CI autotesting
eec59af fix: properly allow passing non-arry transport (#2256)
95af182 Bump @ babel/core from 7.20.2 to 7.20.7 (#2259)
Compare
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/amida-tech/project/b91a6c7a-a2b3-4ae3-b573-d3ae47070fb0?utm_source=github&utm_medium=referral&page=upgrade-pr)
🛠 [Adjust upgrade PR settings](https://app.snyk.io/org/amida-tech/project/b91a6c7a-a2b3-4ae3-b573-d3ae47070fb0/settings/integration?utm_source=github&utm_medium=referral&page=upgrade-pr)
🔕 [Ignore this dependency or unsubscribe from future upgrade PRs](https://app.snyk.io/org/amida-tech/project/b91a6c7a-a2b3-4ae3-b573-d3ae47070fb0/settings/integration?pkg=winston&utm_source=github&utm_medium=referral&page=upgrade-pr#auto-dep-upgrades)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade winston from 3.8.2 to 3.10.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **2 versions** ahead of your current version. - The recommended version was released **21 days ago**, on 2023-07-10.
Release notes
Package name: winston
-
3.10.0 - 2023-07-10
- Avoid potential github issues - relax engines node requirement in package.json fc9c83d
- Export Logger class (#2181) eda40ef
- Added Lazy option to file transport (#2317) f7e7f2f
- Bump eslint from 8.32.0 to 8.44.0 (#2321) de2e887
- docs(#2319): Syntax error on README.md (#2320) fcc69ec
- fix(types): Allow any object to be passed as meta to logger.profile (#2314) 9d6001a
- Bump @ types/node from 18.11.18 to 20.3.1 (#2313) 06e3165
- Update supported Node versions and run npm audit fix (#2315) 61e2f5b
- Bump @ babel/core from 7.20.12 to 7.22.1 (#2309) 7643ad6
-
3.9.0 - 2023-05-26
- Handle undefined errors in getAllInfo in exception-handler in #2208; thanks to new contributor @ eivindrs
- fix: properly allow passing non-array transport in #2256; thanks to new contributor @ Tanuel
- fix #1732 (Http Transport uses JSON format options as request options) in #2272; thanks to new contributor @ MoritzLoewenstein (minor version bump per comment on the issue)
- fix: add guard clause to prevent FD leak in #2301; thanks to new contributor @ td-tomasz-joniec
- Bump eslint from 8.23.0 to 8.32.0 by @ dependabot in #2209, #2236, #2258, & #2271
- Bump @ babel/core from 7.19.0 to 7.20.12 by @ dependabot in #2206, #2234, #2259, & #2275
- Bump @ types/node from 18.0.0 to 18.11.18 by @ dependabot in #2215, #2235, & #2264
- Bump @ babel/preset-env from 7.19.0 to 7.20.2 by @ dependabot in #2218 & #2244
- Bump safe-stable-stringify from 2.3.1 to 2.4.3 by @ dependabot in #2217 & #2292
- Bump @ babel/cli from 7.18.10 to 7.19.3 by @ dependabot in #2216
- Bump json5 from 2.2.1 to 2.2.3 by @ dependabot in #2260
- Fix readme typo in #2230; thanks to new contributor @ aretecode
- create new example for ready to use in #2240; thanks to new contributor @ myagizmaktav
- minor fixes to publishing.md
- GitHub Workflows security hardening in #2252; thanks to new contributor @ sashashura
-
3.8.2 - 2022-09-07
- Add
- Small grammatical fixes in README.md in #2183; thanks to new contributor @ mikebarr24
- Move colors to non-dev dependencies by @ wbt in #2190
- Bump @ babel/preset-env from 7.18.2 to 7.19.0 in #2189
- Bump @ babel/cli from 7.17.10 to 7.18.10 in #2173
- Bump eslint from 8.18.0 to 8.23.0 in #2184
- Bump @ babel/core from 7.18.5 to 7.19.0 in #2192
- Bump logform from 2.4.1 to 2.4.2 in #2191
from winston GitHub release notesv3.9.0...v3.10.0
Functionality changes
Dependency updates by @ dependabot + CI autotesting
Documentation changes
Build Infrastructure changes
Patch-level changes
.jsto main entry point in package.json in #2177; thanks to new contributor @ rumanbslDependency updates by @ dependabot + CI autotesting
Commit messages
Package name: winston
- 19ac9d8 3.10.0
- fc9c83d Avoid potential github issues - relax engines node requirement in package.json
- eda40ef Export Logger class (#2181)
- f7e7f2f Added Lazy option to file transport (#2317)
- de2e887 Bump eslint from 8.32.0 to 8.44.0 (#2321)
- fcc69ec docs(#2319): Syntax error on README.md (#2320)
- 9d6001a fix(types): Allow any object to be passed as meta to logger.profile (#2314)
- 06e3165 Bump @ types/node from 18.11.18 to 20.3.1 (#2313)
- 61e2f5b Update supported Node versions and run npm audit fix (#2315)
- 7643ad6 Bump @ babel/core from 7.20.12 to 7.22.1 (#2309)
- 0ed7650 Merge branch 'master' of https://github.com/winstonjs/winston
- 0f092ca v3.9.0 package-lock & changelog
- c77e117 Note what might be missing
- b2bf0b3 Bump safe-stable-stringify from 2.4.0 to 2.4.3
- c198523 move guard higher and add comment
- 2609a55 attempt to fix haning streams issue
- f8320c1 Bump @ babel/core from 7.20.7 to 7.20.12 (#2275)
- 6926648 fix #1732 (#2272)
- bf14c3b Typo fix in publishing doc
- c7208a7 Bump @ types/node from 18.11.9 to 18.11.18 (#2264)
- fe75342 Bump eslint from 8.30.0 to 8.32.0 (#2271)
- 6b1c761 Bump json5 from 2.2.1 to 2.2.3 (#2260)
- eec59af fix: properly allow passing non-arry transport (#2256)
- 95af182 Bump @ babel/core from 7.20.2 to 7.20.7 (#2259)
Compare**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.* For more information: