[Snyk] Upgrade @google-cloud/logging-winston from 4.2.4 to 6.0.1

[RebelTat]

Snyk has created this PR to upgrade @google-cloud/logging-winston from 4.2.4 to 6.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 17 versions ahead of your current version.

• The recommended version was released 7 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Pollution SNYK-JS-PROTOBUFJS-5756498	495	Proof of Concept
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-GRPCGRPCJS-7242922	495	No Known Exploit

Release notes

Package name: @google-cloud/logging-winston

• 6.0.1 - 2025-05-13
  

  6.0.1 (2024-10-23)

  Bug Fixes

  • Fix trace_sampled type to be consistent with API documentation (#830) (33103dc)
  • Skip writing RequestLogEntry for Cloud Run with flag enabled (#821) (7a0ec6f)
• 6.0.0 - 2023-08-10
  

  6.0.0 (2023-08-10)

  ⚠ BREAKING CHANGES

  • upgrade to node 14 (#807)

  Miscellaneous Chores

  • Upgrade to node 14 (#807) (2f4ea63)
• 5.3.0 - 2023-01-04
  

  5.3.0 (2023-01-04)

  Features

  • Add support for TransportStream options (#775) (cf240dd)
• 5.2.3 - 2022-12-02
  

  5.2.3 (2022-12-02)

  Bug Fixes

  • Add a partner team as approvers for PRs (#769) (fbb96e0)
• 5.2.2 - 2022-11-09
  

  5.2.2 (2022-11-08)

  Bug Fixes

  • Unknown log level : http (#766) (167b89c)
• 5.2.1 - 2022-11-07
  

  5.2.1 (2022-11-07)

  Bug Fixes

  • Switch instrumentation code to return version stored in NODEJS_WINSTON_DEFAULT_LIBRARY_VERSION (#764) (3e23e5a)
• 5.2.0 - 2022-11-04
  

  5.2.0 (2022-11-04)

  Features

  • Add support for instrumentation version annotations (#760) (8237001)
• 5.1.8 - 2022-11-01
  

  5.1.8 (2022-11-01)

  Bug Fixes

  • Prevent instrumentation crash and fix the system test (#756) (fdb6b26)
• 5.1.7 - 2022-10-20
  

  5.1.7 (2022-10-19)

  Bug Fixes

  • Default callback is not called upon error (#750) (737dc6c)
• 5.1.6 - 2022-10-13
  

  5.1.6 (2022-10-13)

  Bug Fixes

  • Instrumentation performance (#747) (75daae8)
• 5.1.5 - 2022-09-02
• 5.1.4 - 2022-08-25
• 5.1.3 - 2022-08-24
• 5.1.2 - 2022-07-18
• 5.1.1 - 2022-07-13
• 5.1.0 - 2022-05-30
• 5.0.0 - 2022-05-24
• 4.2.4 - 2022-05-24

from @google-cloud/logging-winston GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[RebelTat]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.