Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade winston from 3.3.3 to 3.3.4 #5

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade winston from 3.3.3 to 3.3.4.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 22 days ago, on 2022-01-10.
Release notes
Package name: winston
  • 3.3.4 - 2022-01-10

    Compared to v3.3.3, this version fixes some issues and includes some updates to project infrastructure,
    such as replacing Travis with Github CI and dependabot configuration.
    There have also been several relatively minor improvements to documentation, and incorporation of some updated dependencies.
    Dependency updates include a critical bug fix [#2008] in response to self-vandalism by the author of a dependency.

    • [#1964] Added documentation for how to use a new externally maintained Seq transport.
    • [#1712] Add default metadata when calling log with string level and message.
    • [#1824] Unbind event listeners on close
    • [#1961] Handle undefined rejections
    • [#1878] Correct boolean evaluation of empty-string value for eol option
    • [#1977] Improved consistency of object parameters for better test reliability
  • 3.3.3 - 2020-06-23

    v3.3.2...v3.3.3

from winston GitHub release notes
Commit messages
Package name: winston
  • 038ae23 fix all high-severity vulnerabilities from npm audit
  • 7467d0a v3.3.4
  • 05bda20 Pin colors package to 1.4.0 due to Security Vuln (#2008)
  • 65ab472 Update logform in package.json per #1952
  • 36586d3 Bump winston-transport from 4.4.0 to 4.4.1 (#1997)
  • 310de77 Bump @ babel/preset-env from 7.16.4 to 7.16.5 (#1992)
  • de611c1 Bump is-stream from 2.0.0 to 2.0.1 (#1991)
  • b9fbeb2 Bump @ babel/core from 7.16.0 to 7.16.5 (#1990)
  • c4f24e9 Bump @ babel/cli from 7.10.3 to 7.16.0
  • 0f8cf59 Bump through2 from 3.0.1 to 4.0.2 (#1986)
  • 1a3ff33 Remove AppVeyor (#1975)
  • 77ea34c Bump @ babel/preset-env from 7.10.3 to 7.16.4 (#1982)
  • 2a476b0 Bump @ types/node from 14.0.13 to 16.11.12 (#1979)
  • 2b9c32e Bump split2 from 3.1.1 to 4.1.0 (#1980)
  • f18abad Bump assume from 2.2.0 to 2.3.0
  • 7ea4381 fixed inconsistent tests (#1977)
  • 64cde03 Bump async from 3.2.0 to 3.2.2 (#1978)
  • bf9f335 added dependabot config (#1976)
  • 923e534 Replaced TravisCI with GitHub Actions (#1974)
  • e9d8018 Added Seq transport (#1964)
  • a584db3 fix(transport): eol='' not work (#1878)
  • 2299d19 fix: handle undefined rejections
  • 4572c2a Small documentation fix
  • 39cec7f fix a typo

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant