Packages

winston

3.19.0 · 7 Dec 2025MIT36.6M / weekRepositoryHomepagenpmAtom feed

Upgrading winston From 2.2.0 to 3.19.0

47 releases in betweennotes for 41

Reading releases, release notes and advisories…

Other targets from 2.2.0Newest 2.x2.4.7
  1. 2.2.0yours
  2. 10 releases
  3. 3.0.0major
  4. 10 releases
  5. 3.5.0security
  6. 2 releases
  7. 3.7.1security
  8. 4 releases
  9. 3.9.0security
  10. 2 releases
  11. 3.12.0breaking
  12. 2 releases
  13. 3.13.1breaking
  14. 6 releases
  15. 3.18.0security
  16. 3 releases
  17. 3.19.0target
2+
changes to make
0
advisories fixed
40+
new
41+
fixes

Counted from 41 of 47 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking3.13.1
  • breaking3.12.0

Security

  • Update diagnostics package to latest version to remove vulnerability 376e331

    3.18.0

  • GitHub Workflows security hardening in #2252; thanks to new contributor @sashashura

    3.9.0

  • This change includes some minor updates to package-lock.json resolving npm audit failures: one in ansi-regex and another in minimist.

    3.7.1

  • Add a channel for reporting security vulnerabilities (#2024, thanks @JamieSlome!)

    3.5.0

Release by release

  1. 3.19.0

    7 Dec 20252 fixes
    • fixed

      Append error cause when using logger.child() (#2467) e74a7ae

    • fixed

      Ensure File transport flushes all data before emitting finish (#2594) 86c890f

  2. 3.18.1 – 3.18.33 releases, nothing new or fixed in the notes

  3. 3.18.0

    Security fix30 Sep 20252 new
    • security

      Update diagnostics package to latest version to remove vulnerability 376e331

    • new

      Add @initd.sg/winston-cloudwatch (#2532) 71ee92a

    • new

      Adds helper function for highest log level (#2514) c69cdb0

  4. 3.14.2 – 3.17.04 releases, nothing new or fixed in the notes

  5. 3.14.1

    8 Aug 20241 new
    • new

      Add forceConsole to ConsoleTransportOptions (#2496) 4ff0538

  6. 3.14.0

    8 Aug 20241 new · 1 fix
    • new

      Add option forceConsole (#2276) b2098fd

    • fixed

      Readme (#2488) 0cb8c7c

  7. 3.13.1

    Migration needed10 Jul 20241 new
    • breaking

      Update minimum version logform (#2472) 7f5f014

    • new

      Add Parseable transport (#2466) debf4fa

  8. 3.13.0

    24 Mar 20241 fix
    • fixed

      http: Allow passing maximumDepth to prevent big object being stringified (#2425) a237865

165 other lines we could not sort, mostly version bumps

  • Run npm audit fix e7ccdc4

    3.19.0

  • Don't include jest.config.js in npm package 5a63c8c

    3.19.0

  • Bump rimraf from 5.0.1 to 5.0.10 (#2517) 8a956fd

    3.19.0

  • Bump actions/setup-node from 4 to 6 (#2589) 3b8be02

    3.19.0

  • Bump @babel/core from 7.28.0 to 7.28.5 (#2591) f4c3e2c

    3.19.0

  • Bump actions/checkout from 4 to 6 (#2593) dd7906e

    3.19.0

  • Update diagnostics dependency (removes fix-esm transitive dependency) a15a9e9

    3.18.3

  • Bump diagnostics package to resolve #2583 (again) f4582c3

    3.18.2

  • Bump diagnostics package to resolve #2583 e668c2c

    3.18.1

  • Update transports.md (#2549) 3547a95

    3.18.0

42 internal lines (docs, tests, tooling) left out.