chore(deps): update dependency pino to v10.2.1 (#79)

This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [pino](https://getpino.io) ([source](https://github.com/pinojs/pino)) | [`10.1.0` → `10.2.1`](https://renovatebot.com/diffs/npm/pino/10.1.0/10.2.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/pino/10.2.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/pino/10.1.0/10.2.1?slim=true) |

---

### Release Notes

<details>
<summary>pinojs/pino (pino)</summary>

### [`v10.2.1`](https://github.com/pinojs/pino/releases/tag/v10.2.1)

[Compare Source](https://github.com/pinojs/pino/compare/v10.2.0...v10.2.1)

#### What's Changed

- fix: prevent ERR\_WORKER\_INVALID\_EXEC\_ARGV with monitoring tools by [@&#8203;mcollina](https://github.com/mcollina) in [#&#8203;2379](https://github.com/pinojs/pino/pull/2379)

**Full Changelog**: <https://github.com/pinojs/pino/compare/v10.2.0...v10.2.1>

### [`v10.2.0`](https://github.com/pinojs/pino/releases/tag/v10.2.0)

[Compare Source](https://github.com/pinojs/pino/compare/v10.1.1...v10.2.0)

#### What's Changed

- chore: lint TypeScript files by [@&#8203;mrazauskas](https://github.com/mrazauskas) in [#&#8203;2363](https://github.com/pinojs/pino/pull/2363)
- fix: prevent memory leak when using transport with --import preload by [@&#8203;mcollina](https://github.com/mcollina) in [#&#8203;2374](https://github.com/pinojs/pino/pull/2374)

#### New Contributors

- [@&#8203;mrazauskas](https://github.com/mrazauskas) made their first contribution in [#&#8203;2363](https://github.com/pinojs/pino/pull/2363)

**Full Changelog**: <https://github.com/pinojs/pino/compare/v10.1.1...v10.2.0>

### [`v10.1.1`](https://github.com/pinojs/pino/releases/tag/v10.1.1)

[Compare Source](https://github.com/pinojs/pino/compare/v10.1.0...v10.1.1)

#### What's Changed

- fix(types): Correct conditional type handling for generic log function arguments by [@&#8203;samchungy](https://github.com/samchungy) in [#&#8203;2329](https://github.com/pinojs/pino/pull/2329)
- perf: use JSON.stringify in fast path for node v25+  by [@&#8203;ronag](https://github.com/ronag) in [#&#8203;2330](https://github.com/pinojs/pino/pull/2330)
- build(deps): bump actions/setup-node from 4 to 6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2336](https://github.com/pinojs/pino/pull/2336)
- build(deps-dev): bump borp from 0.20.2 to 0.21.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2337](https://github.com/pinojs/pino/pull/2337)
- build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2338](https://github.com/pinojs/pino/pull/2338)
- docs: update CONTRIBUTING.md to reference 'main' instead of 'master' by [@&#8203;NoobFullStack](https://github.com/NoobFullStack) in [#&#8203;2334](https://github.com/pinojs/pino/pull/2334)
- feat(browser): add reportCaller to surface user callsite by [@&#8203;dev-KingMaster](https://github.com/dev-KingMaster) in [#&#8203;2340](https://github.com/pinojs/pino/pull/2340)
- docs: update transports.md by [@&#8203;marklai1998](https://github.com/marklai1998) in [#&#8203;2224](https://github.com/pinojs/pino/pull/2224)
- docs: add Node.js 22+ native TypeScript type stripping support by [@&#8203;mcollina](https://github.com/mcollina) in [#&#8203;2347](https://github.com/pinojs/pino/pull/2347)
- feat(types): use ThreadStream type from thread-stream by [@&#8203;CHC383](https://github.com/CHC383) in [#&#8203;2320](https://github.com/pinojs/pino/pull/2320)
- build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2354](https://github.com/pinojs/pino/pull/2354)
- build(deps): update thread-stream to v4 by [@&#8203;mcollina](https://github.com/mcollina) in [#&#8203;2356](https://github.com/pinojs/pino/pull/2356)
- fix: harden transport loading against prototype pollution by [@&#8203;omdxp](https://github.com/omdxp) in [#&#8203;2358](https://github.com/pinojs/pino/pull/2358)
- docs: add threat model to SECURITY.md by [@&#8203;mcollina](https://github.com/mcollina) in [#&#8203;2360](https://github.com/pinojs/pino/pull/2360)
- build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2365](https://github.com/pinojs/pino/pull/2365)
- build(deps-dev): bump [@&#8203;types/node](https://github.com/types/node) from 24.10.4 to 25.0.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;2367](https://github.com/pinojs/pino/pull/2367)
- fix: allow passing string, number, null for %o placeholder by [@&#8203;rChaoz](https://github.com/rChaoz) in [#&#8203;2372](https://github.com/pinojs/pino/pull/2372)

#### New Contributors

- [@&#8203;NoobFullStack](https://github.com/NoobFullStack) made their first contribution in [#&#8203;2334](https://github.com/pinojs/pino/pull/2334)
- [@&#8203;dev-KingMaster](https://github.com/dev-KingMaster) made their first contribution in [#&#8203;2340](https://github.com/pinojs/pino/pull/2340)
- [@&#8203;marklai1998](https://github.com/marklai1998) made their first contribution in [#&#8203;2224](https://github.com/pinojs/pino/pull/2224)
- [@&#8203;CHC383](https://github.com/CHC383) made their first contribution in [#&#8203;2320](https://github.com/pinojs/pino/pull/2320)
- [@&#8203;omdxp](https://github.com/omdxp) made their first contribution in [#&#8203;2358](https://github.com/pinojs/pino/pull/2358)
- [@&#8203;rChaoz](https://github.com/rChaoz) made their first contribution in [#&#8203;2372](https://github.com/pinojs/pino/pull/2372)

**Full Changelog**: <https://github.com/pinojs/pino/compare/v10.1.0...v10.1.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi43MS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNzQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: #79
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.bun-version

@@ -1 +1 @@
-1.3.2
+1.3.5

.gitea/workflows/cd.yaml

@@ -52,7 +52,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
       - name: Login to Registry
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
@@ -76,7 +76,7 @@ jobs:
           push: true
           provenance: false
           tags: |
-            ${{ env.DOCKER_REGISTRY }}/t00n/${{ steps.meta.outputs.REPO_NAME }}:${{ steps.meta.outputs.REPO_VERSION }}-${{ matrix.arch }}
+            ${{ env.DOCKER_REGISTRY }}/t.behrendt/${{ steps.meta.outputs.REPO_NAME }}:${{ steps.meta.outputs.REPO_VERSION }}-${{ matrix.arch }}
 
   create_tag:
     name: Create tag
@@ -89,12 +89,12 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
         with:
           fetch-depth: 0
-      - uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@0.1.20
+      - uses: https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment@9841c96e72d4fc1ecec620e91e213895341cce86 # 0.1.22
         id: tag
         with:
           token: ${{ secrets.GITEA_TOKEN }}
           prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@0.0.2
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@d9f83ca84e1cbac7de9d1986cb3a7e0c54434e6a # 0.1.1
         with:
           tag: ${{ steps.tag.outputs.new-tag }}
       - name: Set output

Dockerfile

@@ -1,4 +1,4 @@
-FROM oven/bun:1.3.2 AS base
+FROM oven/bun:1.3.5@sha256:e90cdbaf9ccdb3d4bd693aa335c3310a6004286a880f62f79b18f9b1312a8ec3 AS base
 
 WORKDIR /app
 

package.json

@@ -16,9 +16,9 @@
   "dependencies": {
     "env-var": "7.5.0",
     "gotify": "1.1.0",
-    "pino": "10.1.0",
+    "pino": "10.2.1",
     "pino-pretty": "13.1.3",
-    "ts3-nodejs-library": "3.4.1"
+    "ts3-nodejs-library": "3.5.1"
   },
   "name": "ts3gotify",
   "module": "src/main.ts",