Bump Winston to 2.4.6

This recreates #153 which has conflicts that I can't be bothered to resolve. Fixes a potential security vulnerability.
Financial-Times · Oct 21, 2022 · 2f05aeb · 2f05aeb
1 parent 8944423
commit 2f05aeb
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 28 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -13,7 +13,7 @@
   "dependencies": {
     "json-stringify-safe": "^5.0.1",
     "node-fetch": "^2.6.7",
-    "winston": "^2.4.0"
+    "winston": "^2.4.6"
   },
   "devDependencies": {
     "@financial-times/n-gage": "^8.0.0",