maikvandergaag / msft-extensions

Repository for extensions mainly used for Azure DevOps Extensions
https://msftplayground.com
MIT License
125 stars 80 forks source link

[Snyk] Upgrade winston from 2.3.1 to 2.4.7 #552

Open maikvandergaag opened 4 months ago

maikvandergaag commented 4 months ago

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade winston from 2.3.1 to 2.4.7.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **8 versions** ahead of your current version. - The recommended version was released on **2 years ago**.
Release notes
Package name: winston
  • 2.4.7 - 2022-11-15

    What's Changed

    New Contributors

    Full Changelog: v2.4.6...v2.4.7

  • 2.4.6 - 2022-04-28

    This updates a dependency to address https://security.snyk.io/vuln/SNYK-JS-ASYNC-2441827. See #2112 by @bacali95.

      </li>
      <li>
        <b>2.4.5</b> - 2020-06-22
      </li>
      <li>
        <b>2.4.4</b> - 2018-08-21
      </li>
      <li>
        <b>2.4.3</b> - 2018-06-12
      </li>
      <li>
        <b>2.4.2</b> - 2018-04-20
      </li>
      <li>
        <b>2.4.1</b> - 2018-03-09
      </li>
      <li>
        <b>2.4.0</b> - 2017-10-02
      </li>
      <li>
        <b>2.3.1</b> - 2017-01-20
      </li>
    </ul>
    from <a href="https://github.com/winstonjs/winston/releases">winston GitHub release notes</a>


[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information: