Skip to content

Build(deps): bump pino from 9.14.0 to 10.3.1 - #34

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pino-10.3.1
Open

Build(deps): bump pino from 9.14.0 to 10.3.1#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/pino-10.3.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps pino from 9.14.0 to 10.3.1.

Release notes

Sourced from pino's releases.

v10.3.1

What's Changed

Full Changelog: pinojs/pino@v10.3.0...v10.3.1

v10.3.0

What's Changed

Full Changelog: pinojs/pino@v10.2.1...v10.3.0

v10.2.1

What's Changed

Full Changelog: pinojs/pino@v10.2.0...v10.2.1

v10.2.0

What's Changed

New Contributors

Full Changelog: pinojs/pino@v10.1.1...v10.2.0

v10.1.1

What's Changed

... (truncated)

Commits
  • 6b34498 Bumped v10.3.1
  • f1203e6 fix(transport): sanitize invalid NODE_OPTIONS preloads for workers (#2391)
  • 6a8e598 docs: clarify transport level filtering behavior (#2390)
  • 49a4807 Merge branch 'main' of github.com:pinojs/pino
  • 960bbbb build(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.23.2 (#2386)
  • e2a5b4a build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#2385)
  • 04859e2 chore: update gitignore for ai assistant files
  • d6adf03 Bumped v10.3.0
  • 06d55b1 feat: set worker thread name for transport identification (#2380)
  • a728702 fix: fix multistream().clone() return type (#2377)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pino](https://github.com/pinojs/pino) from 9.14.0 to 10.3.1.
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v9.14.0...v10.3.1)

---
updated-dependencies:
- dependency-name: pino
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
@github-actions

Copy link
Copy Markdown

Mission Control — Launch Readiness Report

Generated: 2026-08-12T01:35:26Z

Ready to launch: YES (warnings remain)

Result Count
Critical gaps 0
Warnings 4
Passing 30
Total checks 34

Warnings (should fix before launch)

  • Error tracking integration (Sentry / Bugsnag / Rollbar) — Wire up Sentry (or equivalent) for prod error visibility.
  • Security headers / CSP applied — Use helmet (or equivalent) for HSTS, CSP, X-Frame-Options, etc.
  • Privacy policy — Add a privacy policy (required if you handle PII).
  • Terms of service — Add ToS before customers sign up.

Passing

  • Application source code present
  • Dependency manifest (package.json / pyproject.toml / requirements.txt / go.mod)
  • Locked dependencies (lockfile present)
  • README with setup + run instructions
  • License file
  • .env.example documenting required configuration
  • .gitignore excludes secrets / build artifacts
  • No committed secrets (.env, *.pem, credentials.json)
  • Authentication implementation present
  • Authorization / RBAC mention
  • Database / persistence layer
  • Database migrations directory
  • Test suite present
  • Linter configured
  • Formatter configured
  • Type checking configured
  • Health check endpoint defined
  • Structured logging present
  • Metrics / tracing (OTel / Prometheus / Datadog)
  • SECURITY.md (vuln disclosure policy)
  • Dependabot / Renovate configured
  • Rate limiting middleware
  • Input validation library
  • CSRF protection (for cookie-based auth)
  • Dockerfile
  • .dockerignore
  • CI workflow defined
  • AI provider integration (Anthropic / OpenAI)
  • Marketing channel integrations (email / social / ads)
  • Background jobs / queue (BullMQ, Celery, etc.)

Next steps: see LAUNCH_CHECKLIST.md for the full launch runbook.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants