Packages

pino

10.4.0 · 2 Oct 2026MIT76M / weekRepositoryHomepagenpmAtom feed

Upgrading pino From 5.13.1 to 10.4.0

135 releases in betweennotes for 132

Reading releases, release notes and advisories…

Other targets from 5.13.1Newest 5.x5.17.0
  1. 5.13.1yours
  2. 9 releases
  3. 6.0.0major
  4. 28 releases
  5. 7.0.0major
  6. 26 releases
  7. 8.0.0major
  8. 7 releases
  9. 8.5.0security
  10. 30 releases
  11. 9.0.0major
  12. 22 releases
  13. 10.0.0major
  14. 1 release
  15. 10.1.1security
  16. 4 releases
  17. 10.4.0target
14+
changes to make
0
advisories fixed
105+
new
108+
fixes

Counted from 132 of 135 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking10.1.0
  • breaking10.0.0
  • breaking8.0.0
  • breaking7.0.0
  • breaking6.0.0
  • breaking6.0.0
  • breaking6.0.0
  • breaking6.0.0
  • breaking6.0.0
  • breaking6.0.0

Security

  • Harden transport loading against prototype pollution

    10.1.1

  • GitHub Workflows security hardening

    8.5.0

Release by release

  1. 10.4.0

    2 Oct 20264 new · 9 fixes
    • new

      Add warning on incompatible formatters.level with multi-target transports

    • new

      Add Sentry Native Integration Docs

    • new

      browser: Add redaction support

    • new

      Add bindings() method to browser logger

  2. 10.3.1

    9 Feb 20261 fix
    • fixed

      transport: Sanitize invalid NODE_OPTIONS preloads for workers

  3. 10.3.0

    23 Jan 20262 new
    • new

      Improve the return type of multistream().clone()

    • new

      Set worker thread name for transport identification

  4. 10.2.1

    19 Jan 20261 fix
    • fixed

      Prevent ERR_WORKER_INVALID_EXEC_ARGV with monitoring tools

  5. 10.2.0

    14 Jan 20261 fix
    • fixed

      Prevent memory leak when using transport with --import preload

  6. 10.1.1

    Security fix9 Jan 20263 new · 2 fixes
    • security

      Harden transport loading against prototype pollution

    • new

      Use JSON.stringify in fast path for node v25+

    • new

      browser: Add reportCaller to surface user callsite

    • new

      types: Use ThreadStream type from thread-stream

    • fixed

      types: Correct conditional type handling for generic log function arguments

    • fixed

      Allow passing string, number, null for %o placeholder

  7. 10.1.0

    Migration needed18 Oct 20251 fix
    • breaking

      Use safer types for censor function signature

    • fixed

      Added missing isoTimeNano to nested namespace

  8. 10.0.0

    Migration needed3 Oct 20251 new
    • breaking

      The only breaking change is dropping support for Node 18.

    • new

      types: Add LogFnFields

173 other lines we could not sort, mostly version bumps

  • No bots allowed

    10.4.0

  • Update AWS Lambda reference in asynchronous docs

    10.4.0

  • Update contrib doc

    10.4.0

  • Delete .github/dependabot.yml

    10.4.0

  • Remove unused parsedChindingsSym symbol

    10.1.0

  • Use @pinojs/redact

    10.1.0

  • Convert tests to node:test

    10.0.0

  • Removed unused .taprc.yaml

    10.0.0

  • Update to pinojs redact

    9.14.0

  • Revert setlevel opt in 9.x

    9.14.0

249 internal lines (docs, tests, tooling) left out.