Packages

pino

10.4.0 · 2 Oct 2026MIT76M / weekRepositoryHomepagenpmAtom feed

Upgrading pino From 9.3.0 to 10.4.0

27 releases in betweennotes for 26

Reading releases, release notes and advisories…

Other targets from 9.3.0Newest 9.x9.14.0
  1. 9.3.0yours
  2. 19 releases
  3. 10.0.0major
  4. 10.1.0breaking
  5. 10.1.1security
  6. 4 releases
  7. 10.4.0target
2+
changes to make
0
advisories fixed
24+
new
30+
fixes

Counted from 26 of 27 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking10.1.0
  • breaking10.0.0

Security

  • Harden transport loading against prototype pollution

    10.1.1

Release by release

  1. 10.4.0

    2 Oct 20264 new · 9 fixes
    • new

      Add warning on incompatible formatters.level with multi-target transports

    • new

      Add Sentry Native Integration Docs

    • new

      browser: Add redaction support

    • new

      Add bindings() method to browser logger

  2. 10.3.1

    9 Feb 20261 fix
    • fixed

      transport: Sanitize invalid NODE_OPTIONS preloads for workers

  3. 10.3.0

    23 Jan 20262 new
    • new

      Improve the return type of multistream().clone()

    • new

      Set worker thread name for transport identification

  4. 10.2.1

    19 Jan 20261 fix
    • fixed

      Prevent ERR_WORKER_INVALID_EXEC_ARGV with monitoring tools

  5. 10.2.0

    14 Jan 20261 fix
    • fixed

      Prevent memory leak when using transport with --import preload

  6. 10.1.1

    Security fix9 Jan 20263 new · 2 fixes
    • security

      Harden transport loading against prototype pollution

    • new

      Use JSON.stringify in fast path for node v25+

    • new

      browser: Add reportCaller to surface user callsite

    • new

      types: Use ThreadStream type from thread-stream

    • fixed

      types: Correct conditional type handling for generic log function arguments

    • fixed

      Allow passing string, number, null for %o placeholder

  7. 10.1.0

    Migration needed18 Oct 20251 fix
    • breaking

      Use safer types for censor function signature

    • fixed

      Added missing isoTimeNano to nested namespace

  8. 10.0.0

    Migration needed3 Oct 20251 new
    • breaking

      The only breaking change is dropping support for Node 18.

    • new

      types: Add LogFnFields

20 other lines we could not sort, mostly version bumps

  • No bots allowed

    10.4.0

  • Update AWS Lambda reference in asynchronous docs

    10.4.0

  • Update contrib doc

    10.4.0

  • Delete .github/dependabot.yml

    10.4.0

  • Remove unused parsedChindingsSym symbol

    10.1.0

  • Use @pinojs/redact

    10.1.0

  • Convert tests to node:test

    10.0.0

  • Removed unused .taprc.yaml

    10.0.0

  • Update to pinojs redact

    9.14.0

  • Revert setlevel opt in 9.x

    9.14.0

104 internal lines (docs, tests, tooling) left out.