Update dependency winston to ^3.3.4

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
winston	dependencies	patch	^3.3.3 -> ^3.3.4

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	7.8	CVE-2021-43138	#107

---

Release Notes

winstonjs/winston (winston)

v3.3.4

Compare Source

Compared to v3.3.3, this version fixes some issues and includes some updates to project infrastructure,
such as replacing Travis with Github CI and dependabot configuration.
There have also been several relatively minor improvements to documentation, and incorporation of some updated dependencies.
Dependency updates include a critical bug fix [#​2008] in response to self-vandalism by the author of a dependency.

• [#​1964] Added documentation for how to use a new externally maintained Seq transport.
• [#​1712] Add default metadata when calling log with string level and message.
• [#​1824] Unbind event listeners on close
• [#​1961] Handle undefined rejections
• [#​1878] Correct boolean evaluation of empty-string value for eol option
• [#​1977] Improved consistency of object parameters for better test reliability

---

• If you want to rebase/retry this PR, check this box