[Snyk] Security upgrade winston from 3.0.0-rc1 to 3.0.0

[bkawk]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: winston

The new version differs by 139 commits.

• 8be746b [dist] Version bump. 3.0.0
• ce2c0dc 3.0.0 pre-release (#1342)
• 133d0c2 [doc] Cleaned up some of the documentation on `colorize` to address c… (#1301)
• d701505 Remove paddings as we have no use for it in the current API. (#1357)
• 11283a0 Move splat functionality into logform. Fixes #1298 (#1356)
• 109031f [fix] Update level property to change transport level #1191 (#1328)
• 4c301eb [dist] Update package-lock.json
• 5fdfad8 Wrap calls to `format.transform` with try / catch. (#1347)
• 0c84f4f Implement _final from Node.js streams; misc. clean-up (#1346)
• 4089b59 [doc fix] Formatting fixes to docs.
• 189559b console transport: send all levels to stdout not stderr by default (#1332)
• 30b83f9 [fix] Follow-up to #1344 to use setMaxListeners in all relevant locations.
• 767b010 Set max listeners to 30 to silence node warnings (#1344)
• ad1e1bf [fix test] Document how to use levels. Add test to ensure it is true. (#1343)
• 0be2362 Check log.length when evaluating "legacyness" of transports (#1340)
• 35707e2 [fix dist] Missing `,`
• 9debbca [dist tiny] Add more tags for npm search.
• f28c0eb Add arguments for exceptions.(un)handle in TS defs; prefer non-deprecated syntax in readme (#1330)
• 9971268 [dist] Version bump. 3.0.0-rc6
• 46d4a6a [doc] Final CHANGELOG.md updates.
• aff10ab 3.0.0-rc6 pre-release and final items for 3.0.0 (#1327)
• 9042c49 Merge pull request #1335 from sveyret/silentBool
• a902062 Silent is boolean
• b223e09 Merge pull request #1333 from winstonjs/fix/close-loggers

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic