chore(deps): Upgrade Pino to v10

[lisa-assistant]

Bumps pino 9.7.0 → 10.3.1 in @cedarjs/api (dependencies) and @cedarjs/api-server (devDependencies), and pino-abstract-transport 1.2.0 → 3.0.0 in @cedarjs/api-server (devDependencies).

Renovate flags major version bumps for manual dashboard approval, so this one had been sitting unapplied. Following up on #2583 (Express 5), this is the next most important major bump: Pino backs the logger used by every generated Cedar app's api-side server.

The only breaking change in either major version is dropping Node.js 18 support (Pino v10 release notes, pino-abstract-transport v3 release notes), which Cedar already doesn't support — packages/api's engines field requires >=24.

No source changes were needed. packages/api/src/logger/index.ts and packages/api-server's test suite both use standard, unaffected Pino APIs (pino(options, stream), logger.info/warn/error/debug, and the abstract transport's build() helper).

pino isn't a peer dependency of any Cedar package, so no action is needed in Cedar apps.

[netlify]

👷 Deploy request for cedarjs pending review.

Visit the deploys page to approve it

Name	Link
🔨 Latest commit	13b5e34

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 38d16139-eeff-4db3-a790-d7ab5c5b6d34

📥 Commits

Reviewing files that changed from the base of the PR and between 9d4d7bc and 315bcf1.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (3)

• .changesets/2584.md
• packages/api-server/package.json
• packages/api/package.json

Included review availability: Your plan provides up to 2 included reviews per hour; 0 remain after this review.

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated the application logging components to newer versions.
  • Improved the development and test logging setup.
• Compatibility
  • Maintained existing logging behavior and compatibility with the supported Node.js runtime.

Walkthrough

Changes

Pino dependency upgrade

Layer / File(s)	Summary
Dependency versions and compatibility packages/api/package.json, packages/api-server/package.json, .changesets/2584.md	Pino is upgraded to v10.3.1. pino-abstract-transport is upgraded to v3.0.0. The changeset records the Node.js 18 support drop and confirms that no source changes are required.

Merge Risk: ⚪ Minimal · up to 315bc

This localized logging dependency upgrade changes no application source behavior and has passed the relevant builds and tests; no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description check	✅ Passed	The description directly explains the Pino and pino-abstract-transport upgrades, their compatibility with Cedar's Node.js requirement, and the absence of source changes.
Title check	✅ Passed	The title clearly and concisely identifies the main change: upgrading Pino to v10.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (3 skipped: 3 unsupported.)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Greptile Summary

The PR upgrades the API logging stack to Pino 10.3.1 and pino-abstract-transport 3.0.0 while retaining Cedar’s existing logging behavior.

• Updates the API runtime dependency and API-server test dependencies.
• Deduplicates the corresponding Pino 10 transport packages in the lockfile.
• Adapts the mailer’s console fallback to the updated Pino Logger type.
• Adds a changeset documenting the upgrade and Node.js support requirement.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
packages/api/package.json	Upgrades the API runtime’s pinned Pino dependency from 9.7.0 to 10.3.1.
packages/api-server/package.json	Upgrades the Pino and abstract-transport development dependencies used by API-server tests.
packages/mailer/core/src/mailer.ts	Adds a type assertion for the optional console logger fallback; current Mailer calls remain console-compatible.
yarn.lock	Resolves and deduplicates Pino 10.3.1 and pino-abstract-transport 3.0.0 without changing Fastify’s pre-existing resolved Pino version.
.changesets/2584.md	Documents the dependency upgrade, Node.js compatibility boundary, and unchanged public usage.

_{Reviews (3): Last reviewed commit: "fix(mailer-core): Handle Pino v10 Logger..." | Re-trigger Greptile}

[nx-cloud]

🤖 Nx Cloud AI Fix

Ensure the fix-ci command is configured to always run in your CI pipeline to get automatic fixes in future runs. For more information, please see https://nx.dev/ci/features/self-healing-ci

---

View your CI Pipeline Execution ↗ for commit 13b5e34

Command	Status	Duration	Result
nx run-many -t build --output-style=stream	❌ Failed	1m 50s	View ↗

💡 Dealing with memory or CPU issues? See memory and CPU details with the resource usage add-on ↗.

---

☁️ Nx Cloud last updated this comment at 2026-09-01 08:12:03 UTC