Packages

winston

3.19.0 · 7 Dec 2025MIT36.6M / weekRepositoryHomepagenpmAtom feed

Upgrading winston From 1.0.1 to 3.19.0

56 releases in betweennotes for 50

Reading releases, release notes and advisories…

Other targets from 1.0.1Newest 1.x1.1.2
  1. 1.0.1yours
  2. 4 releases
  3. 2.0.0major
  4. 14 releases
  5. 3.0.0major
  6. 10 releases
  7. 3.5.0security
  8. 2 releases
  9. 3.7.1security
  10. 4 releases
  11. 3.9.0security
  12. 12 releases
  13. 3.18.0security
  14. 3 releases
  15. 3.19.0target
10+
changes to make
0
advisories fixed
47+
new
52+
fixes

Counted from 50 of 56 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking3.13.1
  • breaking3.12.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0
  • breaking2.0.0

Security

  • Update diagnostics package to latest version to remove vulnerability 376e331

    3.18.0

  • GitHub Workflows security hardening in #2252; thanks to new contributor @sashashura

    3.9.0

  • This change includes some minor updates to package-lock.json resolving npm audit failures: one in ansi-regex and another in minimist.

    3.7.1

  • Add a channel for reporting security vulnerabilities (#2024, thanks @JamieSlome!)

    3.5.0

Release by release

  1. 3.19.0

    7 Dec 20252 fixes
    • fixed

      Append error cause when using logger.child() (#2467) e74a7ae

    • fixed

      Ensure File transport flushes all data before emitting finish (#2594) 86c890f

  2. 3.18.1 – 3.18.33 releases, nothing new or fixed in the notes

  3. 3.18.0

    Security fix30 Sep 20252 new
    • security

      Update diagnostics package to latest version to remove vulnerability 376e331

    • new

      Add @initd.sg/winston-cloudwatch (#2532) 71ee92a

    • new

      Adds helper function for highest log level (#2514) c69cdb0

  4. 3.14.2 – 3.17.04 releases, nothing new or fixed in the notes

  5. 3.14.1

    8 Aug 20241 new
    • new

      Add forceConsole to ConsoleTransportOptions (#2496) 4ff0538

  6. 3.14.0

    8 Aug 20241 new · 1 fix
    • new

      Add option forceConsole (#2276) b2098fd

    • fixed

      Readme (#2488) 0cb8c7c

  7. 3.13.1

    Migration needed10 Jul 20241 new
    • breaking

      Update minimum version logform (#2472) 7f5f014

    • new

      Add Parseable transport (#2466) debf4fa

  8. 3.13.0

    24 Mar 20241 fix
    • fixed

      http: Allow passing maximumDepth to prevent big object being stringified (#2425) a237865

174 other lines we could not sort, mostly version bumps

  • Run npm audit fix e7ccdc4

    3.19.0

  • Don't include jest.config.js in npm package 5a63c8c

    3.19.0

  • Bump rimraf from 5.0.1 to 5.0.10 (#2517) 8a956fd

    3.19.0

  • Bump actions/setup-node from 4 to 6 (#2589) 3b8be02

    3.19.0

  • Bump @babel/core from 7.28.0 to 7.28.5 (#2591) f4c3e2c

    3.19.0

  • Bump actions/checkout from 4 to 6 (#2593) dd7906e

    3.19.0

  • Update diagnostics dependency (removes fix-esm transitive dependency) a15a9e9

    3.18.3

  • Bump diagnostics package to resolve #2583 (again) f4582c3

    3.18.2

  • Bump diagnostics package to resolve #2583 e668c2c

    3.18.1

  • Update transports.md (#2549) 3547a95

    3.18.0

42 internal lines (docs, tests, tooling) left out.