Packages

pino

10.4.0 · 2 Oct 2026MIT76M / weekRepositoryHomepagenpmAtom feed

Upgrading pino From 8.17.1 to 10.4.0

36 releases in betweennotes for 35

Reading releases, release notes and advisories…

Other targets from 8.17.1Newest 8.x8.21.0
  1. 8.17.1yours
  2. 5 releases
  3. 9.0.0major
  4. 22 releases
  5. 10.0.0major
  6. 10.1.0breaking
  7. 10.1.1security
  8. 4 releases
  9. 10.4.0target
2+
changes to make
0
advisories fixed
34+
new
38+
fixes

Counted from 35 of 36 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking10.1.0
  • breaking10.0.0

Security

  • Harden transport loading against prototype pollution

    10.1.1

Release by release

  1. 10.4.0

    2 Oct 20264 new · 9 fixes
    • new

      Add warning on incompatible formatters.level with multi-target transports

    • new

      Add Sentry Native Integration Docs

    • new

      browser: Add redaction support

    • new

      Add bindings() method to browser logger

  2. 10.3.1

    9 Feb 20261 fix
    • fixed

      transport: Sanitize invalid NODE_OPTIONS preloads for workers

  3. 10.3.0

    23 Jan 20262 new
    • new

      Improve the return type of multistream().clone()

    • new

      Set worker thread name for transport identification

  4. 10.2.1

    19 Jan 20261 fix
    • fixed

      Prevent ERR_WORKER_INVALID_EXEC_ARGV with monitoring tools

  5. 10.2.0

    14 Jan 20261 fix
    • fixed

      Prevent memory leak when using transport with --import preload

  6. 10.1.1

    Security fix9 Jan 20263 new · 2 fixes
    • security

      Harden transport loading against prototype pollution

    • new

      Use JSON.stringify in fast path for node v25+

    • new

      browser: Add reportCaller to surface user callsite

    • new

      types: Use ThreadStream type from thread-stream

    • fixed

      types: Correct conditional type handling for generic log function arguments

    • fixed

      Allow passing string, number, null for %o placeholder

  7. 10.1.0

    Migration needed18 Oct 20251 fix
    • breaking

      Use safer types for censor function signature

    • fixed

      Added missing isoTimeNano to nested namespace

  8. 10.0.0

    Migration needed3 Oct 20251 new
    • breaking

      The only breaking change is dropping support for Node 18.

    • new

      types: Add LogFnFields

35 other lines we could not sort, mostly version bumps

  • No bots allowed

    10.4.0

  • Update AWS Lambda reference in asynchronous docs

    10.4.0

  • Update contrib doc

    10.4.0

  • Delete .github/dependabot.yml

    10.4.0

  • Remove unused parsedChindingsSym symbol

    10.1.0

  • Use @pinojs/redact

    10.1.0

  • Convert tests to node:test

    10.0.0

  • Removed unused .taprc.yaml

    10.0.0

  • Update to pinojs redact

    9.14.0

  • Revert setlevel opt in 9.x

    9.14.0

123 internal lines (docs, tests, tooling) left out.