[Snyk] Upgrade winston from 3.2.1 to 3.11.0 #737

debarghyab · 2023-11-05T14:05:05Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade winston from 3.2.1 to 3.11.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 17 versions ahead of your current version.
The recommended version was released a month ago, on 2023-10-07.

Release notes

Package name: winston

3.11.0 - 2023-10-07
- Bump split2 from 4.1.0 to 4.2.0 (#2336) 37f4282
- Bump actions/checkout from 3 to 4 (#2346) fdcc893
- Bump @ colors/colors packgae to 1.6.0 (#2353) dcbec34
- Bump rimraf from 3.0.2 to 5.0.5 (#2357) aaaa4c0
- feat: add guardrails to the instantiation of a Profiler (#2226) 914b846
- Bump @ types/node from 20.3.1 to 20.4.2 (#2329) 23cb80c
- Bug Fix: FileTransportOptions type missing lazy:boolean option (#2334) 1c43f7b
v3.10.0...v3.11.0
3.10.0 - 2023-07-10
- Avoid potential github issues - relax engines node requirement in package.json fc9c83d
- Export Logger class (#2181) eda40ef
- Added Lazy option to file transport (#2317) f7e7f2f
- Bump eslint from 8.32.0 to 8.44.0 (#2321) de2e887
- docs(#2319): Syntax error on README.md (#2320) fcc69ec
- fix(types): Allow any object to be passed as meta to logger.profile (#2314) 9d6001a
- Bump @ types/node from 18.11.18 to 20.3.1 (#2313) 06e3165
- Update supported Node versions and run npm audit fix (#2315) 61e2f5b
- Bump @ babel/core from 7.20.12 to 7.22.1 (#2309) 7643ad6
v3.9.0...v3.10.0
3.9.0 - 2023-05-26
Read more
3.8.2 - 2022-09-07
Patch-level changes
- Add .js to main entry point in package.json in #2177; thanks to new contributor @ rumanbsl
- Small grammatical fixes in README.md in #2183; thanks to new contributor @ mikebarr24
- Move colors to non-dev dependencies by @ wbt in #2190
Dependency updates by @ dependabot + CI autotesting
- Bump @ babel/preset-env from 7.18.2 to 7.19.0 in #2189
- Bump @ babel/cli from 7.17.10 to 7.18.10 in #2173
- Bump eslint from 8.18.0 to 8.23.0 in #2184
- Bump @ babel/core from 7.18.5 to 7.19.0 in #2192
- Bump logform from 2.4.1 to 2.4.2 in #2191
3.8.1 - 2022-06-30
Patch-level changes
- Update types to match in-code definitions in #2157; thanks to new contributor @ flappyBug
Dependency updates by @ dependabot + CI autotesting
- Bump logform from 2.4.0 to 2.4.1 in #2156
- Bump async from 3.2.3 to 3.2.4 in #2147
Full Changelog: v3.8.0...v3.8.1
3.8.0 - 2022-06-23
Read more
3.7.2 - 2022-04-04
What's Changed
- Revert for #2103 in #2104
Full Changelog: v3.7.1...v3.7.2

The release announcement on GitHub is 24 days behind the NPM release in this case, sorry for the confusion!
3.7.1 - 2022-04-04
This change includes some minor updates to package-lock.json resolving npm audit failures: one in ansi-regex and another in minimist.

Full Changelog: v3.7.0...v3.7.1
3.6.0 - 2022-02-12
3.5.1 - 2022-01-31
3.5.0 - 2022-01-27
3.4.0 - 2022-01-10
3.3.4 - 2022-01-10
3.3.3 - 2020-06-23
3.3.2 - 2020-06-22
3.3.1 - 2020-06-22
3.3.0 - 2020-06-21
3.2.1 - 2019-01-29

from winston GitHub release notes

Commit messages

Package name: winston

1c8c65f 3.11.0
37f4282 Bump split2 from 4.1.0 to 4.2.0 (#2336)
fdcc893 Bump actions/checkout from 3 to 4 (#2346)
dcbec34 Bump @ colors/colors packgae to 1.6.0 (#2353)
aaaa4c0 Bump rimraf from 3.0.2 to 5.0.5 (#2357)
914b846 feat: add guardrails to the instantiation of a Profiler (#2226)
23cb80c Bump @ types/node from 20.3.1 to 20.4.2 (#2329)
1c43f7b Bug Fix: FileTransportOptions type missing lazy:boolean option (#2334)
19ac9d8 3.10.0
fc9c83d Avoid potential github issues - relax engines node requirement in package.json
eda40ef Export Logger class (#2181)
f7e7f2f Added Lazy option to file transport (#2317)
de2e887 Bump eslint from 8.32.0 to 8.44.0 (#2321)
fcc69ec docs(#2319): Syntax error on README.md (#2320)
9d6001a fix(types): Allow any object to be passed as meta to logger.profile (#2314)
06e3165 Bump @ types/node from 18.11.18 to 20.3.1 (#2313)
61e2f5b Update supported Node versions and run npm audit fix (#2315)
7643ad6 Bump @ babel/core from 7.20.12 to 7.22.1 (#2309)
0ed7650 Merge branch 'master' of https://github.com/winstonjs/winston
0f092ca v3.9.0 package-lock & changelog
c77e117 Note what might be missing
b2bf0b3 Bump safe-stable-stringify from 2.4.0 to 2.4.3
c198523 move guard higher and add comment
2609a55 attempt to fix haning streams issue