chore(deps): update dependency pino to v10.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pino (source)	10.3.1 → 10.4.0

---

Release Notes

pinojs/pino (pino)

v10.4.0

Compare Source

What's Changed

• Add warning on incompatible formatters.level with multi-target transports by @​lraveri in #​2381
• chore: use TSTyche for type testing by @​mrazauskas in #​2376
• Add Sentry Native Integration Docs by @​KyleTryon in #​2394
• docs: add flush limitation warning for pino-pretty, fix #​1015 by @​mcollina in #​2402
• feat(browser): add redaction support by @​abhu85 in #​2396
• chore: lint the type declaration file by @​mrazauskas in #​2408
• chore: remove TSTyche config file by @​mrazauskas in #​2409
• docs: clarify multi-target formatter limitation by @​mcollina in #​2410
• No bots allowed by @​mcollina in #​2412
• build(deps): bump real-require from 0.2.0 to 1.0.0 by @​dependabot[bot] in #​2414
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in #​2418
• fix: use util.getCallSites when able to allow frozen intrinsics by @​CarlOlson in #​2294
• Update AWS Lambda reference in asynchronous docs by @​urbanautomaton in #​2413
• chore: update license by @​Tony133 in #​2375
• fix: add named default export by @​mrazauskas in #​2421
• Update contrib doc by @​jsumners in #​2424
• docs: use @​hono/structured-logger for Pino with Hono by @​brunorodmoreira in #​2425
• chore(deps): remove pre-commit by @​kshitijanurag in #​2423
• build(deps): bump actions/github-script from 8 to 9 by @​dependabot[bot] in #​2427
• build(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 by @​dependabot[bot] in #​2428
• build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by @​dependabot[bot] in #​2429
• test: fix flaky transport config test by @​mcollina in #​2434
• chore: upgrade typescript to v6.0.2 by @​Tony133 in #​2419
• docs: fix typo "compatability" → "compatibility" in README by @​premsreelathasugeendran in #​2435
• docs: warn against untrusted top-level log keys by @​mcollina in #​2450
• test(transport): keep event loop alive while awaiting async flush by @​YBJ0000 in #​2470
• docs: clarify Node.js version support policy in LTS doc by @​youdie006 in #​2472
• fix: honor per-target level filter on single-element targets array by @​mcollina in #​2432
• fix(multistream): resolve string level labels in write() by @​xianjianlf2 in #​2474
• fix: escape child binding keys by @​mcollina in #​2452
• docs: clarify stringification limits by @​mcollina in #​2475
• fix: add setBindings to the browser logger by @​ankit1324 in #​2471
• build(deps): bump actions/setup-node from 6 to 7 by @​dependabot[bot] in #​2486
• build(deps-dev): bump through2 from 4.0.2 to 5.0.10 by @​dependabot[bot] in #​2488
• build(deps-dev): bump bole from 5.0.29 to 6.0.7 by @​dependabot[bot] in #​2489
• build(deps-dev): bump eslint-plugin-n from 17.23.2 to 18.2.2 by @​dependabot[bot] in #​2492
• build(deps): bump actions/checkout from 6.0.2 to 7.0.1 by @​dependabot[bot] in #​2485
• fix: log objects with an own proto key instead of crashing by @​spokodev in #​2457
• fix: build the redaction shape without Object.prototype by @​luantaraschi in #​2495
• ci: add Node.js 26 to test matrix by @​aquie00t in #​2480
• fix(multistream): fix clone add crash and missing end/remove methods by @​spellsaif in #​2493
• ci: check pull requests target main by @​marktran0710 in #​2500
• build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 by @​dependabot[bot] in #​2513
• build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 by @​dependabot[bot] in #​2515
• Delete .github/dependabot.yml by @​jsumners in #​2517
• docs: document the APIs that are unavailable in the browser by @​kavish-19 in #​2521
• ci: pin lock-threads to upstream v6.0.2 to fix token validation failure by @​simpleqt in #​2525
• Add bindings() method to browser logger by @​RT1811 in #​2504
• docs: Note that serializers run on child bindings at creation time by @​itz-puneet in #​2518
• docs: fix the pino-pretty flush explanation after thread-stream#198 by @​k-adm in #​2524

New Contributors

• @​lraveri made their first contribution in #​2381
• @​KyleTryon made their first contribution in #​2394
• @​abhu85 made their first contribution in #​2396
• @​CarlOlson made their first contribution in #​2294
• @​urbanautomaton made their first contribution in #​2413
• @​brunorodmoreira made their first contribution in #​2425
• @​kshitijanurag made their first contribution in #​2423
• @​premsreelathasugeendran made their first contribution in #​2435
• @​YBJ0000 made their first contribution in #​2470
• @​youdie006 made their first contribution in #​2472
• @​xianjianlf2 made their first contribution in #​2474
• @​ankit1324 made their first contribution in #​2471
• @​spokodev made their first contribution in #​2457
• @​luantaraschi made their first contribution in #​2495
• @​aquie00t made their first contribution in #​2480
• @​spellsaif made their first contribution in #​2493
• @​marktran0710 made their first contribution in #​2500
• @​kavish-19 made their first contribution in #​2521
• @​simpleqt made their first contribution in #​2525
• @​RT1811 made their first contribution in #​2504
• @​itz-puneet made their first contribution in #​2518
• @​k-adm made their first contribution in #​2524

Full Changelog: pinojs/pino@v10.3.1...v10.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pino@​10.3.1 ⏵ 10.4.0	+1			+2

View full report