Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade winston from 3.3.3 to 3.6.0 #6

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Apr 1, 2022

Snyk has created this PR to upgrade winston from 3.3.3 to 3.6.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2022-02-12.
Release notes
Package name: winston
  • 3.6.0 - 2022-02-12

    v3.5.1...v3.6.0

  • 3.5.1 - 2022-01-31

    This release reverts the changes made in PR #1896 which added stricter typing to the available log levels,
    and inadvertently broke use of custom levels with TypeScript (Issue #2047). Apologies for that!

  • 3.5.0 - 2022-01-27

    This release includes the following, in sequence by first merge in group:

    Feature updates:

    Patch-level updates:

    • Bump dependency versions (thanks @ dependabot & @ DABH!)
      • Bump @ types/node from 16.11.12 to 17.0.8 (PR #2009)
      • Bump @ babel/preset-env from 7.16.7 to 7.16.8 (#2036)
      • Bump @ types/node from 17.0.8 to 17.0.9 (#2035)
      • Bump @ babel/cli from 7.16.7 to 7.16.8 (#2034)
      • Bump @ types/node from 17.0.9 to 17.0.10 (#2042)
      • Bump @ babel/core from 7.16.7 to 7.16.12 (#2041)
      • Bump @ babel/preset-env from 7.16.8 to 7.16.11 (#2040)
    • Fixing documentation syntax errors in transports code examples (#1916; thanks @ romanzaycev!)
    • Fix missing type declarations, especially for .rejections (#1842, #1929, #2021; thanks @ vanflux, @ svaj, @ glensc, & others!)
    • More narrowly typing the “level” string (#1896, thanks @ yonas-g!)
    • Using a safer stringify, e.g. to avoid issues from circular structures, in the http transport (#2043, thanks @ karlwir!)

    Updates to the repo & project which don’t actually affect the running code:

    Thanks also to maintainers @ DABH, @ fearphage, @ maverick1872, and @ wbt for issue/PR shepherding and help across multiple parts of the release!

    If somebody got missed in the list of thanks, please forgive the accidental oversight and/or feel free to open a PR on the changelog.

  • 3.4.0 - 2022-01-10
    Read more
  • 3.3.4 - 2022-01-10

    Version 3.3.4

  • 3.3.3 - 2020-06-23

    v3.3.2...v3.3.3

from winston GitHub release notes
Commit messages
Package name: winston
  • b2fde9d 3.6.0
  • 5e72485 Changelog updates for v3.6.0
  • 93077ef Update dependencies, including latest logform (#2071)
  • 035f94a Update to @ colors/colors (#2069)
  • 7665d88 Bump @ babel/core from 7.16.12 to 7.17.2 (#2068)
  • e658389 Bump @ babel/cli from 7.16.8 to 7.17.0 (#2064)
  • 30d260d chore: add editorconfig (#2058)
  • 40ef309 Add search terms field to bug report template (#2067)
  • c9b7579 Bump @ types/node from 17.0.13 to 17.0.15 (#2062)
  • 2b8cd55 Chore: Organize and restructure tests (#2049)
  • 2017c50 Bump to latest winston-transport
  • f741383 Memory leak fix: do not wait for `process.nextTick` to clear pending callbacks (#2057)
  • 438cb73 Update linter dependencies and config (#2059)
  • 7f6a6f2 Bump @ types/node from 17.0.10 to 17.0.13 (#2051)
  • 22bb31a Revert pr 1896 (#2052) for rerelease
  • a320b0c Revert "typed level type" (#2050)
  • 237534a Release 3.5.0 (#2045)
  • d18198d chore: use safe stringify in http transport (#2043)
  • 8a1735b Update README.md (#2027)
  • 278c492 Bump @ babel/preset-env from 7.16.8 to 7.16.11 (#2040)
  • 609a84b Bump @ babel/core from 7.16.7 to 7.16.12 (#2041)
  • f2d7e06 Bump @ types/node from 17.0.9 to 17.0.10 (#2042)
  • 3b48008 Bump @ babel/cli from 7.16.7 to 7.16.8 (#2034)
  • 4a0ed4f Bump @ types/node from 17.0.8 to 17.0.9 (#2035)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@sonarcloud
Copy link

sonarcloud bot commented Apr 1, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant