[Snyk] Upgrade winston from 3.8.2 to 3.14.2

[nejidevelops]

Snyk has created this PR to upgrade winston from 3.8.2 to 3.14.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 10 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2024-08-14.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-XML2JS-5414874	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: winston

• 3.14.2 - 2024-08-14
  
  • Move initialization to constructor (#2503) 2458ba6

  v3.14.1...v3.14.2

• 3.14.1 - 2024-08-08
  
  • Save a reference to console methods in console transport (#2498) e82752f
  • Add forceConsole to ConsoleTransportOptions (#2496) 4ff0538
  • Bump mocha from 10.6.0 to 10.7.0 (#2489) 62acaad
  • Update readme with forceConsole info (#2493) b2b79af

  v3.14.0...v3.14.1

• 3.14.0 - 2024-08-08
  
  • Add option forceConsole (#2276) b2098fd
  • Set _rotate false on emit 'rotate' false (#2457) 1719275
  • Bump @ babel/core from 7.24.7 to 7.24.9 (#2485) d2859f3
  • Bump @ babel/preset-env from 7.24.7 to 7.24.8 (#2487) 71e4bb1
  • fix: readme (#2488) 0cb8c7c

  v3.13.1...v3.14.0

• 3.13.1 - 2024-07-10
  
  • revert to rimraf 5.0.1, last known version to work with node 18 for now 1b3a500
  • Merge branch 'master' of github.com:winstonjs/winston b56117e
  • Update dependencies a5853b5
  • Bump @ types/node from 20.12.7 to 20.14.10 (#2483) 93b52ac
  • Bump mocha from 10.3.0 to 10.6.0 (#2484) 33611c9
  • Bump @ babel/preset-env from 7.24.0 to 7.24.7 (#2475) 4aa6550
  • Update minimum version logform (#2472) 7f5f014
  • Add Parseable transport (#2466) debf4fa
  • chore(docs): Update w/ MySQL transport (#2456) d567c57
  • fix typo at test/unit/winston/transports/http.test.js (#2453) 1d5d527
  • Bump @ babel/cli from 7.23.9 to 7.24.5 (#2454) d89a34e
  • Bump @ types/node from 20.11.29 to 20.12.7 (#2448) 947fa79
  • Bump @ babel/core from 7.24.0 to 7.24.5 (#2455) 8c58d0a

  v3.13.0...v3.13.1

• 3.13.0 - 2024-03-24
  
  • fix(http): allow passing maximumDepth to prevent big object being stringified (#2425) a237865

  v3.12.1...v3.13.0

• 3.12.1 - 2024-03-24
  
  • Bump @ types/node from 20.11.24 to 20.11.29 (#2431) b10b98f
  • Revert "Remove nonexistent Logger methods from types" (#2434) 0277035
  • fixed flaky test case (#2412) d95c948

  v3.12.0...v3.12.1

• 3.12.0 - 2024-03-04
  Read more
• 3.11.0 - 2023-10-07
  
  • Bump split2 from 4.1.0 to 4.2.0 (#2336) 37f4282
  • Bump actions/checkout from 3 to 4 (#2346) fdcc893
  • Bump @ colors/colors packgae to 1.6.0 (#2353) dcbec34
  • Bump rimraf from 3.0.2 to 5.0.5 (#2357) aaaa4c0
  • feat: add guardrails to the instantiation of a Profiler (#2226) 914b846
  • Bump @ types/node from 20.3.1 to 20.4.2 (#2329) 23cb80c
  • Bug Fix: FileTransportOptions type missing lazy:boolean option (#2334) 1c43f7b

  v3.10.0...v3.11.0

• 3.10.0 - 2023-07-10
  Read more
• 3.9.0 - 2023-05-26
  Read more
• 3.8.2 - 2022-09-07

from winston GitHub release notes

Commit messages

Package name: winston

• 51a4551 3.14.2
• 2458ba6 Move initialization to constructor (#2503)
• b270c4e 3.14.1
• e82752f Save a reference to console methods in console transport (#2498)
• 4ff0538 Add `forceConsole` to `ConsoleTransportOptions` (#2496)
• 62acaad Bump mocha from 10.6.0 to 10.7.0 (#2489)
• b2b79af Update readme with forceConsole info (#2493)
• c4a15ec 3.14.0
• b2098fd Add option forceConsole (#2276)
• 1719275 Set _rotate false on emit 'rotate' false (#2457)
• d2859f3 Bump @ babel/core from 7.24.7 to 7.24.9 (#2485)
• 71e4bb1 Bump @ babel/preset-env from 7.24.7 to 7.24.8 (#2487)
• 0cb8c7c fix: readme (#2488)
• 7d7f9d3 3.13.1
• 1b3a500 revert to rimraf 5.0.1, last known version to work with node 18 for now
• b56117e Merge branch 'master' of github.com:winstonjs/winston
• a5853b5 Update dependencies
• 93b52ac Bump @ types/node from 20.12.7 to 20.14.10 (#2483)
• 33611c9 Bump mocha from 10.3.0 to 10.6.0 (#2484)
• 4aa6550 Bump @ babel/preset-env from 7.24.0 to 7.24.7 (#2475)
• 7f5f014 Update minimum version logform (#2472)
• debf4fa Add Parseable transport (#2466)
• d567c57 chore(docs): Update w/ MySQL transport (#2456)
• 1d5d527 fix typo at test/unit/winston/transports/http.test.js (#2453)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs