[Snyk] Upgrade winston from 3.9.0 to 3.10.0

[elishowk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade winston from 3.9.0 to 3.10.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 22 days ago, on 2023-07-10.

Release notes

Package name: winston

• 3.10.0 - 2023-07-10
  
  • Avoid potential github issues - relax engines node requirement in package.json fc9c83d
  • Export Logger class (#2181) eda40ef
  • Added Lazy option to file transport (#2317) f7e7f2f
  • Bump eslint from 8.32.0 to 8.44.0 (#2321) de2e887
  • docs(#2319): Syntax error on README.md (#2320) fcc69ec
  • fix(types): Allow any object to be passed as meta to logger.profile (#2314) 9d6001a
  • Bump @ types/node from 18.11.18 to 20.3.1 (#2313) 06e3165
  • Update supported Node versions and run npm audit fix (#2315) 61e2f5b
  • Bump @ babel/core from 7.20.12 to 7.22.1 (#2309) 7643ad6

  v3.9.0...v3.10.0

• 3.9.0 - 2023-05-26
  

  Functionality changes

  • Handle undefined errors in getAllInfo in exception-handler in #2208; thanks to new contributor @ eivindrs
  • fix: properly allow passing non-array transport in #2256; thanks to new contributor @ Tanuel
  • fix #1732 (Http Transport uses JSON format options as request options) in #2272; thanks to new contributor @ MoritzLoewenstein (minor version bump per comment on the issue)
  • fix: add guard clause to prevent FD leak in #2301; thanks to new contributor @ td-tomasz-joniec

  Dependency updates by @ dependabot + CI autotesting

  • Bump eslint from 8.23.0 to 8.32.0 by @ dependabot in #2209, #2236, #2258, & #2271
  • Bump @ babel/core from 7.19.0 to 7.20.12 by @ dependabot in #2206, #2234, #2259, & #2275
  • Bump @ types/node from 18.0.0 to 18.11.18 by @ dependabot in #2215, #2235, & #2264
  • Bump @ babel/preset-env from 7.19.0 to 7.20.2 by @ dependabot in #2218 & #2244
  • Bump safe-stable-stringify from 2.3.1 to 2.4.3 by @ dependabot in #2217 & #2292
  • Bump @ babel/cli from 7.18.10 to 7.19.3 by @ dependabot in #2216
  • Bump json5 from 2.2.1 to 2.2.3 by @ dependabot in #2260

  Documentation changes

  • Fix readme typo in #2230; thanks to new contributor @ aretecode
  • create new example for ready to use in #2240; thanks to new contributor @ myagizmaktav
  • minor fixes to publishing.md

  Build Infrastructure changes

  • GitHub Workflows security hardening in #2252; thanks to new contributor @ sashashura

from winston GitHub release notes

Commit messages

Package name: winston

• 19ac9d8 3.10.0
• fc9c83d Avoid potential github issues - relax engines node requirement in package.json
• eda40ef Export Logger class (#2181)
• f7e7f2f Added Lazy option to file transport (#2317)
• de2e887 Bump eslint from 8.32.0 to 8.44.0 (#2321)
• fcc69ec docs(#2319): Syntax error on README.md (#2320)
• 9d6001a fix(types): Allow any object to be passed as meta to logger.profile (#2314)
• 06e3165 Bump @ types/node from 18.11.18 to 20.3.1 (#2313)
• 61e2f5b Update supported Node versions and run npm audit fix (#2315)
• 7643ad6 Bump @ babel/core from 7.20.12 to 7.22.1 (#2309)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs