Packages

winston

3.19.0 · 7 Dec 2025MIT36.6M / weekRepositoryHomepagenpmAtom feed

Upgrading winston From 0.5.3 to 3.19.0

77 releases in betweennotes for 58

Reading releases, release notes and advisories…

Other targets from 0.5.3Newest 0.x0.9.0
  1. 0.5.3yours
  2. 10 releases
  3. 0.7.0major
  4. 3 releases
  5. 0.8.0major
  6. 3 releases
  7. 0.9.0major
  8. 1.0.0major
  9. 5 releases
  10. 2.0.0major
  11. 14 releases
  12. 3.0.0major
  13. 10 releases
  14. 3.5.0security
  15. 2 releases
  16. 3.7.1security
  17. 4 releases
  18. 3.9.0security
  19. 12 releases
  20. 3.18.0security
  21. 3 releases
  22. 3.19.0target
16+
changes to make
0
advisories fixed
62+
new
61+
fixes

Counted from 58 of 77 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking3.13.1
  • breaking3.12.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0

Security

  • Update diagnostics package to latest version to remove vulnerability 376e331

    3.18.0

  • GitHub Workflows security hardening in #2252; thanks to new contributor @sashashura

    3.9.0

  • This change includes some minor updates to package-lock.json resolving npm audit failures: one in ansi-regex and another in minimist.

    3.7.1

  • Add a channel for reporting security vulnerabilities (#2024, thanks @JamieSlome!)

    3.5.0

Release by release

  1. 3.19.0

    7 Dec 20252 fixes
    • fixed

      Append error cause when using logger.child() (#2467) e74a7ae

    • fixed

      Ensure File transport flushes all data before emitting finish (#2594) 86c890f

  2. 3.18.1 – 3.18.33 releases, nothing new or fixed in the notes

  3. 3.18.0

    Security fix30 Sep 20252 new
    • security

      Update diagnostics package to latest version to remove vulnerability 376e331

    • new

      Add @initd.sg/winston-cloudwatch (#2532) 71ee92a

    • new

      Adds helper function for highest log level (#2514) c69cdb0

  4. 3.14.2 – 3.17.04 releases, nothing new or fixed in the notes

  5. 3.14.1

    8 Aug 20241 new
    • new

      Add forceConsole to ConsoleTransportOptions (#2496) 4ff0538

  6. 3.14.0

    8 Aug 20241 new · 1 fix
    • new

      Add option forceConsole (#2276) b2098fd

    • fixed

      Readme (#2488) 0cb8c7c

  7. 3.13.1

    Migration needed10 Jul 20241 new
    • breaking

      Update minimum version logform (#2472) 7f5f014

    • new

      Add Parseable transport (#2466) debf4fa

  8. 3.13.0

    24 Mar 20241 fix
    • fixed

      http: Allow passing maximumDepth to prevent big object being stringified (#2425) a237865

194 other lines we could not sort, mostly version bumps

  • Run npm audit fix e7ccdc4

    3.19.0

  • Don't include jest.config.js in npm package 5a63c8c

    3.19.0

  • Bump rimraf from 5.0.1 to 5.0.10 (#2517) 8a956fd

    3.19.0

  • Bump actions/setup-node from 4 to 6 (#2589) 3b8be02

    3.19.0

  • Bump @babel/core from 7.28.0 to 7.28.5 (#2591) f4c3e2c

    3.19.0

  • Bump actions/checkout from 4 to 6 (#2593) dd7906e

    3.19.0

  • Update diagnostics dependency (removes fix-esm transitive dependency) a15a9e9

    3.18.3

  • Bump diagnostics package to resolve #2583 (again) f4582c3

    3.18.2

  • Bump diagnostics package to resolve #2583 e668c2c

    3.18.1

  • Update transports.md (#2549) 3547a95

    3.18.0

68 internal lines (docs, tests, tooling) left out.