[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pino (source)	9.14.0 → 10.4.0

---

Release Notes

pinojs/pino (pino)

v10.4.0

Compare Source

What's Changed

• Add warning on incompatible formatters.level with multi-target transports by @​lraveri in #​2381
• chore: use TSTyche for type testing by @​mrazauskas in #​2376
• Add Sentry Native Integration Docs by @​KyleTryon in #​2394
• docs: add flush limitation warning for pino-pretty, fix #​1015 by @​mcollina in #​2402
• feat(browser): add redaction support by @​abhu85 in #​2396
• chore: lint the type declaration file by @​mrazauskas in #​2408
• chore: remove TSTyche config file by @​mrazauskas in #​2409
• docs: clarify multi-target formatter limitation by @​mcollina in #​2410
• No bots allowed by @​mcollina in #​2412
• build(deps): bump real-require from 0.2.0 to 1.0.0 by @​dependabot[bot] in #​2414
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in #​2418
• fix: use util.getCallSites when able to allow frozen intrinsics by @​CarlOlson in #​2294
• Update AWS Lambda reference in asynchronous docs by @​urbanautomaton in #​2413
• chore: update license by @​Tony133 in #​2375
• fix: add named default export by @​mrazauskas in #​2421
• Update contrib doc by @​jsumners in #​2424
• docs: use @​hono/structured-logger for Pino with Hono by @​brunorodmoreira in #​2425
• chore(deps): remove pre-commit by @​kshitijanurag in #​2423
• build(deps): bump actions/github-script from 8 to 9 by @​dependabot[bot] in #​2427
• build(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 by @​dependabot[bot] in #​2428
• build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by @​dependabot[bot] in #​2429
• test: fix flaky transport config test by @​mcollina in #​2434
• chore: upgrade typescript to v6.0.2 by @​Tony133 in #​2419
• docs: fix typo "compatability" → "compatibility" in README by @​premsreelathasugeendran in #​2435
• docs: warn against untrusted top-level log keys by @​mcollina in #​2450
• test(transport): keep event loop alive while awaiting async flush by @​YBJ0000 in #​2470
• docs: clarify Node.js version support policy in LTS doc by @​youdie006 in #​2472
• fix: honor per-target level filter on single-element targets array by @​mcollina in #​2432
• fix(multistream): resolve string level labels in write() by @​xianjianlf2 in #​2474
• fix: escape child binding keys by @​mcollina in #​2452
• docs: clarify stringification limits by @​mcollina in #​2475
• fix: add setBindings to the browser logger by @​ankit1324 in #​2471
• build(deps): bump actions/setup-node from 6 to 7 by @​dependabot[bot] in #​2486
• build(deps-dev): bump through2 from 4.0.2 to 5.0.10 by @​dependabot[bot] in #​2488
• build(deps-dev): bump bole from 5.0.29 to 6.0.7 by @​dependabot[bot] in #​2489
• build(deps-dev): bump eslint-plugin-n from 17.23.2 to 18.2.2 by @​dependabot[bot] in #​2492
• build(deps): bump actions/checkout from 6.0.2 to 7.0.1 by @​dependabot[bot] in #​2485
• fix: log objects with an own proto key instead of crashing by @​spokodev in #​2457
• fix: build the redaction shape without Object.prototype by @​luantaraschi in #​2495
• ci: add Node.js 26 to test matrix by @​aquie00t in #​2480
• fix(multistream): fix clone add crash and missing end/remove methods by @​spellsaif in #​2493
• ci: check pull requests target main by @​marktran0710 in #​2500
• build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 by @​dependabot[bot] in #​2513
• build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 by @​dependabot[bot] in #​2515
• Delete .github/dependabot.yml by @​jsumners in #​2517
• docs: document the APIs that are unavailable in the browser by @​kavish-19 in #​2521
• ci: pin lock-threads to upstream v6.0.2 to fix token validation failure by @​simpleqt in #​2525
• Add bindings() method to browser logger by @​RT1811 in #​2504
• docs: Note that serializers run on child bindings at creation time by @​itz-puneet in #​2518
• docs: fix the pino-pretty flush explanation after thread-stream#198 by @​k-adm in #​2524

New Contributors

• @​lraveri made their first contribution in #​2381
• @​KyleTryon made their first contribution in #​2394
• @​abhu85 made their first contribution in #​2396
• @​CarlOlson made their first contribution in #​2294
• @​urbanautomaton made their first contribution in #​2413
• @​brunorodmoreira made their first contribution in #​2425
• @​kshitijanurag made their first contribution in #​2423
• @​premsreelathasugeendran made their first contribution in #​2435
• @​YBJ0000 made their first contribution in #​2470
• @​youdie006 made their first contribution in #​2472
• @​xianjianlf2 made their first contribution in #​2474
• @​ankit1324 made their first contribution in #​2471
• @​spokodev made their first contribution in #​2457
• @​luantaraschi made their first contribution in #​2495
• @​aquie00t made their first contribution in #​2480
• @​spellsaif made their first contribution in #​2493
• @​marktran0710 made their first contribution in #​2500
• @​kavish-19 made their first contribution in #​2521
• @​simpleqt made their first contribution in #​2525
• @​RT1811 made their first contribution in #​2504
• @​itz-puneet made their first contribution in #​2518
• @​k-adm made their first contribution in #​2524

Full Changelog: pinojs/pino@v10.3.1...v10.4.0

v10.3.1

Compare Source

What's Changed

• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​2385
• build(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.23.2 by @​dependabot[bot] in #​2386
• docs: clarify transport level filtering behavior by @​mcollina in #​2390
• fix(transport): sanitize invalid NODE_OPTIONS preloads for workers by @​mcollina in #​2391

Full Changelog: pinojs/pino@v10.3.0...v10.3.1

v10.3.0

Compare Source

What's Changed

• feat: improve the return type of multistream().clone() by @​mrazauskas in #​2377
• feat: set worker thread name for transport identification by @​mcollina in #​2380

Full Changelog: pinojs/pino@v10.2.1...v10.3.0

v10.2.1

Compare Source

What's Changed

• fix: prevent ERR_WORKER_INVALID_EXEC_ARGV with monitoring tools by @​mcollina in #​2379

Full Changelog: pinojs/pino@v10.2.0...v10.2.1

v10.2.0

Compare Source

What's Changed

• chore: lint TypeScript files by @​mrazauskas in #​2363
• fix: prevent memory leak when using transport with --import preload by @​mcollina in #​2374

New Contributors

• @​mrazauskas made their first contribution in #​2363

Full Changelog: pinojs/pino@v10.1.1...v10.2.0

v10.1.1

Compare Source

What's Changed

• fix(types): Correct conditional type handling for generic log function arguments by @​samchungy in #​2329
• perf: use JSON.stringify in fast path for node v25+ by @​ronag in #​2330
• build(deps): bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​2336
• build(deps-dev): bump borp from 0.20.2 to 0.21.0 by @​dependabot[bot] in #​2337
• build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 by @​dependabot[bot] in #​2338
• docs: update CONTRIBUTING.md to reference 'main' instead of 'master' by @​NoobFullStack in #​2334
• feat(browser): add reportCaller to surface user callsite by @​dev-KingMaster in #​2340
• docs: update transports.md by @​marklai1998 in #​2224
• docs: add Node.js 22+ native TypeScript type stripping support by @​mcollina in #​2347
• feat(types): use ThreadStream type from thread-stream by @​CHC383 in #​2320
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​2354
• build(deps): update thread-stream to v4 by @​mcollina in #​2356
• fix: harden transport loading against prototype pollution by @​omdxp in #​2358
• docs: add threat model to SECURITY.md by @​mcollina in #​2360
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​2365
• build(deps-dev): bump @​types/node from 24.10.4 to 25.0.3 by @​dependabot[bot] in #​2367
• fix: allow passing string, number, null for %o placeholder by @​rChaoz in #​2372

New Contributors

• @​NoobFullStack made their first contribution in #​2334
• @​dev-KingMaster made their first contribution in #​2340
• @​marklai1998 made their first contribution in #​2224
• @​CHC383 made their first contribution in #​2320
• @​omdxp made their first contribution in #​2358
• @​rChaoz made their first contribution in #​2372

Full Changelog: pinojs/pino@v10.1.0...v10.1.1

v10.1.0

Compare Source

What's Changed

• test: add regression test for issue #​2313 by @​mcollina in #​2314
• fix!: use safer types for censor function signature (#​2307) by @​slifty in #​2308
• remove unused parsedChindingsSym symbol by @​mcollina in #​2315
• chore: add .npmignore to exclude unnecessary files by @​mcollina in #​2312
• chore(lint): migrate from standard to neostandard & upgrade eslint to v9 by @​lokeshwar777 in #​2316
• build(deps-dev): bump eslint-plugin-n from 15.7.0 to 17.23.1 by @​dependabot[bot] in #​2305
• Use @​pinojs/redact by @​mcollina in #​2321
• fix: added missing isoTimeNano to nested namespace by @​edge33 in #​2325

New Contributors

• @​slifty made their first contribution in #​2308
• @​lokeshwar777 made their first contribution in #​2316

Full Changelog: pinojs/pino@v10.0.0...v10.1.0

v10.0.0

Compare Source

The only breaking change is dropping support for Node 18.

What's Changed

• feat(types): add LogFnFields by @​samchungy in #​2254
• Convert tests to node:test by @​jsumners in #​2299
• removed unused .taprc.yaml by @​jsumners in #​2310

Full Changelog: pinojs/pino@v9.13.1...v10.0.0

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.