chore(deps): bump winston from 3.6.0 to 3.7.1 (#9467)

Bumps [winston](https://github.com/winstonjs/winston) from 3.6.0 to 3.7.1.
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](https://github.com/winstonjs/winston/compare/v3.6.0...v3.7.1)

---
updated-dependencies:
- dependency-name: winston
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

package.json

@@ -132,7 +132,7 @@
     "tough-cookie": "4.0.0",
     "tunnel": "0.0.6",
     "twit": "2.2.11",
-    "winston": "3.6.0",
+    "winston": "3.7.1",
     "xml2js": "0.4.23"
   },
   "jest": {

yarn.lock

@@ -14173,10 +14173,10 @@ winston-transport@^4.5.0:
     readable-stream "^3.6.0"
     triple-beam "^1.3.0"
 
-winston@3.6.0:
-  version "3.6.0"
-  resolved "https://registry.yarnpkg.com/winston/-/winston-3.6.0.tgz#be32587a099a292b88c49fac6fa529d478d93fb6"
-  integrity sha512-9j8T75p+bcN6D00sF/zjFVmPp+t8KMPB1MzbbzYjeN9VWxdsYnTB40TkbNUEXAmILEfChMvAMgidlX64OG3p6w==
+winston@3.7.1:
+  version "3.7.1"
+  resolved "https://registry.yarnpkg.com/winston/-/winston-3.7.1.tgz#1c1914c8f03ba76d6d882bacc831bac0f423aa18"
+  integrity sha512-qKLMQVWMOvY0h9H4BA8Sfh79+KdnKi8gsyCSvfQgc+6teSlq92j82WK+zAJc6fLbAA2jwQuqkANLpQeOFA4Kug==
   dependencies:
     "@dabh/diagnostics" "^2.0.2"
     async "^3.2.3"