[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
pino (source)	10.3.1 → 10.4.0
pino-pretty	13.1.3 → 13.2.0

---

Release Notes

pinojs/pino (pino)

v10.4.0

Compare Source

What's Changed

• Add warning on incompatible formatters.level with multi-target transports by @​lraveri in #​2381
• chore: use TSTyche for type testing by @​mrazauskas in #​2376
• Add Sentry Native Integration Docs by @​KyleTryon in #​2394
• docs: add flush limitation warning for pino-pretty, fix #​1015 by @​mcollina in #​2402
• feat(browser): add redaction support by @​abhu85 in #​2396
• chore: lint the type declaration file by @​mrazauskas in #​2408
• chore: remove TSTyche config file by @​mrazauskas in #​2409
• docs: clarify multi-target formatter limitation by @​mcollina in #​2410
• No bots allowed by @​mcollina in #​2412
• build(deps): bump real-require from 0.2.0 to 1.0.0 by @​dependabot[bot] in #​2414
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in #​2418
• fix: use util.getCallSites when able to allow frozen intrinsics by @​CarlOlson in #​2294
• Update AWS Lambda reference in asynchronous docs by @​urbanautomaton in #​2413
• chore: update license by @​Tony133 in #​2375
• fix: add named default export by @​mrazauskas in #​2421
• Update contrib doc by @​jsumners in #​2424
• docs: use @​hono/structured-logger for Pino with Hono by @​brunorodmoreira in #​2425
• chore(deps): remove pre-commit by @​kshitijanurag in #​2423
• build(deps): bump actions/github-script from 8 to 9 by @​dependabot[bot] in #​2427
• build(deps-dev): bump eslint-plugin-promise from 6.6.0 to 7.3.0 by @​dependabot[bot] in #​2428
• build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by @​dependabot[bot] in #​2429
• test: fix flaky transport config test by @​mcollina in #​2434
• chore: upgrade typescript to v6.0.2 by @​Tony133 in #​2419
• docs: fix typo "compatability" → "compatibility" in README by @​premsreelathasugeendran in #​2435
• docs: warn against untrusted top-level log keys by @​mcollina in #​2450
• test(transport): keep event loop alive while awaiting async flush by @​YBJ0000 in #​2470
• docs: clarify Node.js version support policy in LTS doc by @​youdie006 in #​2472
• fix: honor per-target level filter on single-element targets array by @​mcollina in #​2432
• fix(multistream): resolve string level labels in write() by @​xianjianlf2 in #​2474
• fix: escape child binding keys by @​mcollina in #​2452
• docs: clarify stringification limits by @​mcollina in #​2475
• fix: add setBindings to the browser logger by @​ankit1324 in #​2471
• build(deps): bump actions/setup-node from 6 to 7 by @​dependabot[bot] in #​2486
• build(deps-dev): bump through2 from 4.0.2 to 5.0.10 by @​dependabot[bot] in #​2488
• build(deps-dev): bump bole from 5.0.29 to 6.0.7 by @​dependabot[bot] in #​2489
• build(deps-dev): bump eslint-plugin-n from 17.23.2 to 18.2.2 by @​dependabot[bot] in #​2492
• build(deps): bump actions/checkout from 6.0.2 to 7.0.1 by @​dependabot[bot] in #​2485
• fix: log objects with an own proto key instead of crashing by @​spokodev in #​2457
• fix: build the redaction shape without Object.prototype by @​luantaraschi in #​2495
• ci: add Node.js 26 to test matrix by @​aquie00t in #​2480
• fix(multistream): fix clone add crash and missing end/remove methods by @​spellsaif in #​2493
• ci: check pull requests target main by @​marktran0710 in #​2500
• build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 by @​dependabot[bot] in #​2513
• build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 by @​dependabot[bot] in #​2515
• Delete .github/dependabot.yml by @​jsumners in #​2517
• docs: document the APIs that are unavailable in the browser by @​kavish-19 in #​2521
• ci: pin lock-threads to upstream v6.0.2 to fix token validation failure by @​simpleqt in #​2525
• Add bindings() method to browser logger by @​RT1811 in #​2504
• docs: Note that serializers run on child bindings at creation time by @​itz-puneet in #​2518
• docs: fix the pino-pretty flush explanation after thread-stream#198 by @​k-adm in #​2524

New Contributors

• @​lraveri made their first contribution in #​2381
• @​KyleTryon made their first contribution in #​2394
• @​abhu85 made their first contribution in #​2396
• @​CarlOlson made their first contribution in #​2294
• @​urbanautomaton made their first contribution in #​2413
• @​brunorodmoreira made their first contribution in #​2425
• @​kshitijanurag made their first contribution in #​2423
• @​premsreelathasugeendran made their first contribution in #​2435
• @​YBJ0000 made their first contribution in #​2470
• @​youdie006 made their first contribution in #​2472
• @​xianjianlf2 made their first contribution in #​2474
• @​ankit1324 made their first contribution in #​2471
• @​spokodev made their first contribution in #​2457
• @​luantaraschi made their first contribution in #​2495
• @​aquie00t made their first contribution in #​2480
• @​spellsaif made their first contribution in #​2493
• @​marktran0710 made their first contribution in #​2500
• @​kavish-19 made their first contribution in #​2521
• @​simpleqt made their first contribution in #​2525
• @​RT1811 made their first contribution in #​2504
• @​itz-puneet made their first contribution in #​2518
• @​k-adm made their first contribution in #​2524

Full Changelog: pinojs/pino@v10.3.1...v10.4.0

pinojs/pino-pretty (pino-pretty)

v13.2.0

Compare Source

What's Changed

• Minor updates by @​jsumners in #​638
• build(deps): bump actions/cache from 4 to 5 by @​dependabot[bot] in #​639
• build(deps-dev): bump @​types/node from 24.10.4 to 25.0.3 by @​dependabot[bot] in #​640
• Support "true" and "false" for boolean options by @​leorossi in #​642
• fix: Remove unused (and undocumented) outputStream option by @​cmfcmf in #​641
• build(deps-dev): bump borp from 0.21.0 to 1.0.0 by @​dependabot[bot] in #​646
• fix: preserve newlines in messageFormat by @​mahmoodhamdi in #​649
• chore: use TSTyche for type testing by @​mrazauskas in #​650
• chore: remove coverage-map.js by @​mrazauskas in #​652
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in #​654
• build(deps-dev): bump typescript from 5.9.3 to 6.0.2 by @​dependabot[bot] in #​655
• build(deps): bump sonic-boom from 4.2.1 to 5.0.0 by @​dependabot[bot] in #​656
• chore: remove legacy .eslintrc config by @​kshitijanurag in #​657
• build(deps-dev): bump tstyche from 6.2.0 to 7.1.0 by @​dependabot[bot] in #​659
• build(deps): bump actions/dependency-review-action from 4 to 5 by @​dependabot[bot] in #​661
• build(deps): bump actions/cache from 5 to 6 by @​dependabot[bot] in #​666
• build(deps-dev): bump @​types/node from 25.9.4 to 26.0.1 by @​dependabot[bot] in #​669
• fix: strip unsafe terminal control characters by @​mcollina in #​671
• docs: add security policy by @​mcollina in #​670
• build(deps): bump actions/setup-node from 6 to 7 by @​dependabot[bot] in #​673
• fix: support nested keys in the include filter by @​DSeaStar in #​677

New Contributors

• @​leorossi made their first contribution in #​642
• @​cmfcmf made their first contribution in #​641
• @​mahmoodhamdi made their first contribution in #​649
• @​mrazauskas made their first contribution in #​650
• @​kshitijanurag made their first contribution in #​657
• @​DSeaStar made their first contribution in #​677

Full Changelog: pinojs/pino-pretty@v13.1.3...v13.2.0

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • "before 8am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Automated Reviewer Suggestions

Based on the git blame history of the changed files, we recommend the following reviewers:

• No candidates found from git blame history.

[codecov-commenter]

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.