All Versions
110
Latest Version
Avg Release Cycle
22 days
Latest Release
-

Changelog History
Page 1

  • v2.0.5 Changes

    • 0️⃣ [pull #575, #278] Change the default "req" serializer to accept expressjs's req.originalUrl for the "url" field per https://expressjs.com/en/api.html#req.originalUrl. (By @twelve17 and @kingcody.)
    • ✅ Development change: Switch to node-tap for testing (from nodeunit, which is now obsolete). Currently just tap v9 because that is the last major version of node-tap that supports back to node v0.10.

  • v2.0.4 Changes

    • ⚡️ [pull #558] Update minimum "moment" version to 2.19.3 for CVE-2017-18214.
    • [issue #589] Use os.EOL for newlines in bunyan output, which helps with some Unix-EOL-naive apps like notepad. (By @bwknight877.)
    • Development change: Switched to GitHub Actions for CI.

  • v2.0.3 Changes

    • 🛠 Fix a vulnerability from a crafted argument to 'bunyan -p ARG'

    This was reported privately as: https://hackerone.com/reports/902739 bunyan - RCE via insecure command formatting

    Previous to this version the 'bunyan' CLI was not escaping a given argument to the '-p' option before executing ps -A -o pid,command | grep '$ARG' which could lead to unintended execution.

    (This same change is also in [email protected].)

  • v2.0.2 Changes

    August 02, 2017
    • [issue #444] Fix the bunyan CLI to not duplicate the "HTTP/1.1 ..." status line when serializing a "res" field.

  • v2.0.1 Changes

    August 02, 2017
    • [issue #504] Backward incompatible change to the bunyan CLI: The bunyan CLI no longer adds a Host header when rendering a client_req field in a log record. In 1.x it used to do this (using client_req.address and client_req.port), on the guess that Node.js' http.ClientRequest handling would add it. However, the guess can be wrong and misleading. It is better not to guess.

  • v2.0.0 Changes

    May 04, 2017
    • [issue #499] Fix some bunyan CLI exit handling problems.

  • v1.8.12

    August 02, 2017

  • v1.8.11

    August 02, 2017

  • v1.8.10 Changes

    April 05, 2017
    • Ensure that bunyan errors out if attempting to use -p PID and file args at the same time.

  • v1.8.9 Changes

    March 21, 2017
    • ⏪ [pull #409, issue #246] Revert a change added to the bunyan CLI version 1.0.1 where SIGINT was ignored, such that Ctrl+C could not be used to terminate bunyan. (By @zbjornson and @davepacheco.)
    • [pull #469] Fix a strict mode ("use strict;") error in some versions of Safari.