[Snyk] Security upgrade @google-cloud/logging-winston from 4.1.0 to 5.0.0

[tamnk74]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	823/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-PROTOBUFJS-5756498	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @google-cloud/logging-winston

The new version differs by 52 commits.

• ba504bc chore(main): release 5.0.0 (#712)
• 1315964 fix(deps): update dependency @ google-cloud/logging to v10 (#709)
• 63d6a93 build!: update library to use Node 12 (#706)
• 433cc45 chore(main): release 4.2.4 (#711)
• 9549b41 fix: LoggingWinston log test 'should work correctly with winston formats' failed (#710)
• ca4c9eb build: update auto approve to v2, remove release autoapproving (#1432) (#705)
• 17d4786 chore(deps): update dependency @ types/mocha to v9 (#702)
• f277995 build: sdd srs yaml file (#1419) (#694)
• 4a3733b build: make ci testing conditional on engines field in package.json, move configs to Node 12 (#1418) (#693)
• 0828d51 chore(main): release 4.2.3 (#699)
• 3dec8ac build(node): update client library version in samples metadata (#1356) (#700)
• 2470dbc fix: Reenable staleness bot (#691)
• a76167f chore(deps): update actions/checkout action to v3 (#1392) (#689)
• 9548088 chore(deps): update actions/setup-node action to v3 (#1393) (#688)
• 5ca50bb chore(main): release 4.2.2 (#685)
• acc1933 fix: Error: write after end when handling SIGINT (#684)
• 2301beb chore(main): release 4.2.1 (#683)
• 71158c8 fix: Add missing closure for code snippet in README (#682)
• b192301 chore(main): release 4.2.0 (#677)
• 76135ca feat: Add support to print structured logging to STDOUT (#676)
• 077960d chore(main): release 4.1.3 (#673)
• 4bc7baa fix: Use defaultCallback in LoggingCommon class (#672)
• 52676bf chore(deps): update actions/checkout action to v3 (#670)
• d1cad8d chore(deps): update actions/setup-node action to v3 (#669)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution