All Versions
110
Latest Version
Avg Release Cycle
22 days
Latest Release
-
Changelog History
Page 1
Changelog History
Page 1
-
v2.0.5 Changes
- 0️⃣ [pull #575, #278] Change the default "req" serializer to accept expressjs's
req.originalUrl
for the "url" field per https://expressjs.com/en/api.html#req.originalUrl. (By @twelve17 and @kingcody.) - ✅ Development change: Switch to node-tap for testing (from nodeunit, which is now obsolete). Currently just tap v9 because that is the last major version of node-tap that supports back to node v0.10.
- 0️⃣ [pull #575, #278] Change the default "req" serializer to accept expressjs's
-
v2.0.4 Changes
- ⚡️ [pull #558] Update minimum "moment" version to 2.19.3 for CVE-2017-18214.
- [issue #589] Use
os.EOL
for newlines in bunyan output, which helps with some Unix-EOL-naive apps like notepad. (By @bwknight877.) - Development change: Switched to GitHub Actions for CI.
-
v2.0.3 Changes
- 🛠 Fix a vulnerability from a crafted argument to 'bunyan -p ARG'
This was reported privately as: https://hackerone.com/reports/902739 bunyan - RCE via insecure command formatting
Previous to this version the 'bunyan' CLI was not escaping a given argument to the '-p' option before executing
ps -A -o pid,command | grep '$ARG'
which could lead to unintended execution.(This same change is also in [email protected].)
-
v2.0.2 Changes
August 02, 2017- [issue #444] Fix the
bunyan
CLI to not duplicate the "HTTP/1.1 ..." status line when serializing a "res" field.
- [issue #444] Fix the
-
v2.0.1 Changes
August 02, 2017- [issue #504] Backward incompatible change to the
bunyan
CLI: Thebunyan
CLI no longer adds aHost
header when rendering aclient_req
field in a log record. In 1.x it used to do this (usingclient_req.address
andclient_req.port
), on the guess that Node.js'http.ClientRequest
handling would add it. However, the guess can be wrong and misleading. It is better not to guess.
- [issue #504] Backward incompatible change to the
-
v2.0.0 Changes
May 04, 2017- [issue #499] Fix some
bunyan
CLI exit handling problems.
- [issue #499] Fix some
-
v1.8.12
August 02, 2017 -
v1.8.11
August 02, 2017 -
v1.8.10 Changes
April 05, 2017- Ensure that
bunyan
errors out if attempting to use-p PID
and file args at the same time.
- Ensure that
-
v1.8.9 Changes
March 21, 2017- ⏪ [pull #409, issue #246] Revert a change added to the
bunyan
CLI version 1.0.1 whereSIGINT
was ignored, such that Ctrl+C could not be used to terminate bunyan. (By @zbjornson and @davepacheco.) - [pull #469] Fix a strict mode (
"use strict;"
) error in some versions of Safari.
- ⏪ [pull #409, issue #246] Revert a change added to the