Packages

pino

10.4.0 · 2 Oct 2026MIT76M / weekRepositoryHomepagenpmAtom feed

Upgrading pino From 9.13.0 to 10.4.0

10 releases in betweenevery note read

Reading releases, release notes and advisories…

Other targets from 9.13.0Newest 9.x9.14.0
  1. 9.13.0yours
  2. 2 releases
  3. 10.0.0major
  4. 10.1.0breaking
  5. 10.1.1security
  6. 4 releases
  7. 10.4.0target
2
changes to make
0
advisories fixed
10
new
16
fixes

Before you upgrade

Tick each one off as you go
  • breaking10.1.0
  • breaking10.0.0

Security

  • Harden transport loading against prototype pollution

    10.1.1

Release by release

  1. 10.4.0

    2 Oct 20264 new · 9 fixes
    • new

      Add warning on incompatible formatters.level with multi-target transports

    • new

      Add Sentry Native Integration Docs

    • new

      browser: Add redaction support

    • new

      Add bindings() method to browser logger

  2. 10.3.1

    9 Feb 20261 fix
    • fixed

      transport: Sanitize invalid NODE_OPTIONS preloads for workers

  3. 10.3.0

    23 Jan 20262 new
    • new

      Improve the return type of multistream().clone()

    • new

      Set worker thread name for transport identification

  4. 10.2.1

    19 Jan 20261 fix
    • fixed

      Prevent ERR_WORKER_INVALID_EXEC_ARGV with monitoring tools

  5. 10.2.0

    14 Jan 20261 fix
    • fixed

      Prevent memory leak when using transport with --import preload

  6. 10.1.1

    Security fix9 Jan 20263 new · 2 fixes
    • security

      Harden transport loading against prototype pollution

    • new

      Use JSON.stringify in fast path for node v25+

    • new

      browser: Add reportCaller to surface user callsite

    • new

      types: Use ThreadStream type from thread-stream

    • fixed

      types: Correct conditional type handling for generic log function arguments

    • fixed

      Allow passing string, number, null for %o placeholder

  7. 10.1.0

    Migration needed18 Oct 20251 fix
    • breaking

      Use safer types for censor function signature

    • fixed

      Added missing isoTimeNano to nested namespace

  8. 10.0.0

    Migration needed3 Oct 20251 new
    • breaking

      The only breaking change is dropping support for Node 18.

    • new

      types: Add LogFnFields

10 other lines we could not sort, mostly version bumps

  • No bots allowed

    10.4.0

  • Update AWS Lambda reference in asynchronous docs

    10.4.0

  • Update contrib doc

    10.4.0

  • Delete .github/dependabot.yml

    10.4.0

  • Remove unused parsedChindingsSym symbol

    10.1.0

  • Use @pinojs/redact

    10.1.0

  • Convert tests to node:test

    10.0.0

  • Removed unused .taprc.yaml

    10.0.0

  • Update to pinojs redact

    9.14.0

  • Revert setlevel opt in 9.x

    9.14.0

52 internal lines (docs, tests, tooling) left out.