From 9efba5ff94cc1c9d46a66dbfc470d9880fb86ac6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 30 Aug 2024 04:35:04 +0000 Subject: [PATCH] fix: upgrade winston from 3.13.0 to 3.14.1 Snyk has created this PR to upgrade winston from 3.13.0 to 3.14.1. See this package in npm: winston See this project in Snyk: https://app.snyk.io/org/pavel-durov/project/94dc3fda-4f43-470b-8834-efed0f8570eb?utm_source=github&utm_medium=referral&page=upgrade-pr --- package-lock.json | 11 ++++++----- package.json | 2 +- 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 3beca69..8a85611 100644 --- a/package-lock.json +++ b/package-lock.json @@ -15,7 +15,7 @@ "jest": "^29.7.0", "node-telegram-bot-api": "^0.65.1", "ts-jest": "^29.2.3", - "winston": "^3.13.0" + "winston": "^3.14.1" }, "devDependencies": { "@biomejs/biome": "1.1.2", @@ -7303,15 +7303,16 @@ } }, "node_modules/winston": { - "version": "3.13.0", - "resolved": "https://registry.npmjs.org/winston/-/winston-3.13.0.tgz", - "integrity": "sha512-rwidmA1w3SE4j0E5MuIufFhyJPBDG7Nu71RkZor1p2+qHvJSZ9GYDA81AyleQcZbh/+V6HjeBdfnTZJm9rSeQQ==", + "version": "3.14.1", + "resolved": "https://registry.npmjs.org/winston/-/winston-3.14.1.tgz", + "integrity": "sha512-CJi4Il/msz8HkdDfXOMu+r5Au/oyEjFiOZzbX2d23hRLY0narGjqfE5lFlrT5hfYJhPtM8b85/GNFsxIML/RVA==", + "license": "MIT", "dependencies": { "@colors/colors": "^1.6.0", "@dabh/diagnostics": "^2.0.2", "async": "^3.2.3", "is-stream": "^2.0.0", - "logform": "^2.4.0", + "logform": "^2.6.0", "one-time": "^1.0.0", "readable-stream": "^3.4.0", "safe-stable-stringify": "^2.3.1", diff --git a/package.json b/package.json index 18884d6..d22ec07 100644 --- a/package.json +++ b/package.json @@ -21,7 +21,7 @@ "jest": "^29.7.0", "node-telegram-bot-api": "^0.65.1", "ts-jest": "^29.2.3", - "winston": "^3.13.0" + "winston": "^3.14.1" }, "devDependencies": { "@biomejs/biome": "1.1.2",