[Snyk] Upgrade pino from 10.1.0 to 10.2.0

[PrivateGER]

Snyk has created this PR to upgrade pino from 10.1.0 to 10.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.

• The recommended version was released 24 days ago.

Release notes

Package name: pino

• 10.2.0 - 2026-01-14
  

  What's Changed

  • chore: lint TypeScript files by @ mrazauskas in #2363
  • fix: prevent memory leak when using transport with --import preload by @ mcollina in #2374

  New Contributors

  • @ mrazauskas made their first contribution in #2363

  Full Changelog: v10.1.1...v10.2.0

• 10.1.1 - 2026-01-09
  

  What's Changed

  • fix(types): Correct conditional type handling for generic log function arguments by @ samchungy in #2329
  • perf: use JSON.stringify in fast path for node v25+ by @ ronag in #2330
  • build(deps): bump actions/setup-node from 4 to 6 by @ dependabot[bot] in #2336
  • build(deps-dev): bump borp from 0.20.2 to 0.21.0 by @ dependabot[bot] in #2337
  • build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 by @ dependabot[bot] in #2338
  • docs: update CONTRIBUTING.md to reference 'main' instead of 'master' by @ NoobFullStack in #2334
  • feat(browser): add reportCaller to surface user callsite by @ dev-KingMaster in #2340
  • docs: update transports.md by @ marklai1998 in #2224
  • docs: add Node.js 22+ native TypeScript type stripping support by @ mcollina in #2347
  • feat(types): use ThreadStream type from thread-stream by @ CHC383 in #2320
  • build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @ dependabot[bot] in #2354
  • build(deps): update thread-stream to v4 by @ mcollina in #2356
  • fix: harden transport loading against prototype pollution by @ omdxp in #2358
  • docs: add threat model to SECURITY.md by @ mcollina in #2360
  • build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @ dependabot[bot] in #2365
  • build(deps-dev): bump @ types/node from 24.10.4 to 25.0.3 by @ dependabot[bot] in #2367
  • fix: allow passing string, number, null for %o placeholder by @ rChaoz in #2372

  New Contributors

  • @ NoobFullStack made their first contribution in #2334
  • @ dev-KingMaster made their first contribution in #2340
  • @ marklai1998 made their first contribution in #2224
  • @ CHC383 made their first contribution in #2320
  • @ omdxp made their first contribution in #2358
  • @ rChaoz made their first contribution in #2372

  Full Changelog: v10.1.0...v10.1.1

• 10.1.0 - 2025-10-18
  

  What's Changed

  • test: add regression test for issue #2313 by @ mcollina in #2314
  • fix!: use safer types for censor function signature (#2307) by @ slifty in #2308
  • remove unused parsedChindingsSym symbol by @ mcollina in #2315
  • chore: add .npmignore to exclude unnecessary files by @ mcollina in #2312
  • chore(lint): migrate from standard to neostandard & upgrade eslint to v9 by @ lokeshwar777 in #2316
  • build(deps-dev): bump eslint-plugin-n from 15.7.0 to 17.23.1 by @ dependabot[bot] in #2305
  • Use @ pinojs/redact by @ mcollina in #2321
  • fix: added missing isoTimeNano to nested namespace by @ edge33 in #2325

  New Contributors

  • @ slifty made their first contribution in #2308
  • @ lokeshwar777 made their first contribution in #2316

  Full Changelog: v10.0.0...v10.1.0

from pino GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch snyk-upgrade-aba16aa286703e2db81fdb3e0c04c6b7

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}