[dependabot]

Bumps pino-http from 10.4.0 to 11.0.0.

Release notes

Sourced from pino-http's releases.

v11.0.0

What's Changed

• build(deps-dev): bump @​types/node from 22.15.32 to 24.0.3 by @​dependabot[bot] in pinojs/pino-http#370
• build(deps-dev): bump typescript from 5.8.3 to 5.9.2 by @​dependabot[bot] in pinojs/pino-http#373
• build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @​dependabot[bot] in pinojs/pino-http#376
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in pinojs/pino-http#380
• build(deps): bump actions/setup-node from 4 to 5 by @​dependabot[bot] in pinojs/pino-http#382
• Update for pino@10 by @​jsumners in pinojs/pino-http#383

Full Changelog: pinojs/pino-http@v10.5.0...v11.0.0

v10.5.0

What's Changed

• build(deps-dev): bump typescript from 5.7.3 to 5.8.2 by @​dependabot[bot] in pinojs/pino-http#364
• build(deps): bump actions/dependency-review-action from 3 to 4 by @​dependabot[bot] in pinojs/pino-http#326
• build(deps): bump process-warning from 4.0.1 to 5.0.0 by @​dependabot[bot] in pinojs/pino-http#367
• build(deps-dev): bump tsd from 0.31.2 to 0.32.0 by @​dependabot[bot] in pinojs/pino-http#368

Full Changelog: pinojs/pino-http@v10.4.0...v10.5.0

Commits

• 6615953 v11.0.0
• da0442e Update for pino@10 (#383)
• c77bf25 build(deps): bump actions/setup-node from 4 to 5 (#382)
• 5b06a22 build(deps): bump actions/checkout from 4 to 5 (#380)
• bc69ee9 build(deps-dev): bump tsd from 0.32.0 to 0.33.0 (#376)
• c2ccdb3 build(deps-dev): bump typescript from 5.8.3 to 5.9.2 (#373)
• 6dbe316 build(deps-dev): bump @​types/node from 22.15.32 to 24.0.3 (#370)
• d8c995e Bumped 10.5.0
• e3f04bf build(deps-dev): bump tsd from 0.31.2 to 0.32.0 (#368)
• 5e19fa6 build(deps): bump process-warning from 4.0.1 to 5.0.0 (#367)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: experimental. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[netlify]

✅ Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name	Link
🔨 Latest commit	4db1387
🔍 Latest deploy log	https://app.netlify.com/projects/endearing-brigadeiros-63f9d0/deploys/6ae0405786e512f339a34ac9

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@pinojs/redact	0.4.0	Unknown	Unknown
npm/is-stream	2.0.1	🟢 3.6	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Maintained ⚠️ 0 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Security-Policy 🟢 9 security policy file detected Code-Review ⚠️ 2 Found 8/30 approved changesets -- score normalized to 2 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/pino	10.4.0	🟢 6.6	Details Check Score Reason Maintained 🟢 10 19 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 9 Found 22/23 approved changesets -- score normalized to 9 Security-Policy 🟢 10 security policy file detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 1 dependency not pinned by hash detected -- score normalized to 1 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Packaging 🟢 10 packaging workflow detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches
npm/pino-abstract-transport	3.0.0	🟢 5.1	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 7 Found 12/17 approved changesets -- score normalized to 7 Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches
npm/pino-http	11.0.0	🟢 5.3	Details Check Score Reason Code-Review 🟢 7 Found 7/10 approved changesets -- score normalized to 7 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Maintained ⚠️ 2 3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2 Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/process-warning	5.1.1	Unknown	Unknown
npm/real-require	1.0.0	Unknown	Unknown
npm/thread-stream	4.2.0	Unknown	Unknown

Scanned Files

• experimental/license-inventory/package-lock.json

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.