diff --git a/packages/boutique/backend/package.json b/packages/boutique/backend/package.json
index 0a84d0d1d..ba7c4f2c5 100644
--- a/packages/boutique/backend/package.json
+++ b/packages/boutique/backend/package.json
@@ -16,7 +16,7 @@
     "knex": "^3.1.0",
     "objection": "^3.1.4",
     "pg": "^8.11.3",
-    "winston": "^3.11.0",
+    "winston": "^3.12.0",
     "zod": "^3.22.4"
   },
   "devDependencies": {
diff --git a/packages/wallet/backend/package.json b/packages/wallet/backend/package.json
index cc7653031..2d9ccd149 100644
--- a/packages/wallet/backend/package.json
+++ b/packages/wallet/backend/package.json
@@ -30,7 +30,7 @@
     "randexp": "^0.5.3",
     "socket.io": "^4.7.4",
     "uuid": "^9.0.1",
-    "winston": "^3.11.0",
+    "winston": "^3.12.0",
     "zod": "^3.22.4"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 165c52a8f..68fbeb1ba 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -46,7 +46,7 @@ importers:
     dependencies:
       '@google-cloud/logging-winston':
         specifier: ^6.0.0
-        version: 6.0.0(winston@3.11.0)
+        version: 6.0.0(winston@3.12.0)
       '@interledger/open-payments':
         specifier: ^6.1.1
         version: 6.1.1
@@ -75,8 +75,8 @@ importers:
         specifier: ^8.11.3
         version: 8.11.3
       winston:
-        specifier: ^3.11.0
-        version: 3.11.0
+        specifier: ^3.12.0
+        version: 3.12.0
       zod:
         specifier: ^3.22.4
         version: 3.22.4
@@ -101,7 +101,7 @@ importers:
         version: 1.14.1
       ts-jest:
         specifier: ^29.1.2
-        version: 29.1.2(@babel/core@7.23.0)(jest@29.7.0)(typescript@5.3.3)
+        version: 29.1.2(@babel/core@7.23.9)(jest@29.7.0)(typescript@5.3.3)
       tsc-alias:
         specifier: ^1.8.8
         version: 1.8.8
@@ -207,7 +207,7 @@ importers:
     dependencies:
       '@google-cloud/logging-winston':
         specifier: ^6.0.0
-        version: 6.0.0(winston@3.11.0)
+        version: 6.0.0(winston@3.12.0)
       '@sendgrid/mail':
         specifier: ^8.1.1
         version: 8.1.1
@@ -275,8 +275,8 @@ importers:
         specifier: ^9.0.1
         version: 9.0.1
       winston:
-        specifier: ^3.11.0
-        version: 3.11.0
+        specifier: ^3.12.0
+        version: 3.12.0
       zod:
         specifier: ^3.22.4
         version: 3.22.4
@@ -1757,7 +1757,7 @@ packages:
       - supports-color
     dev: false
 
-  /@google-cloud/logging-winston@6.0.0(winston@3.11.0):
+  /@google-cloud/logging-winston@6.0.0(winston@3.12.0):
     resolution: {integrity: sha512-/lVp7CyT3nFOr+AjQlZnJhTIOf+kcNGB4JTziL0fkX6Ov/2qNKtRGS/NqE6cD+VSPiv5jLOty3LgkRsXMpYxQQ==}
     engines: {node: '>=14.0.0'}
     peerDependencies:
@@ -1766,7 +1766,7 @@ packages:
       '@google-cloud/logging': 11.0.0
       google-auth-library: 9.6.3
       lodash.mapvalues: 4.6.0
-      winston: 3.11.0
+      winston: 3.12.0
       winston-transport: 4.5.0
     transitivePeerDependencies:
       - encoding
@@ -10952,40 +10952,6 @@ packages:
   /ts-interface-checker@0.1.13:
     resolution: {integrity: sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==}
 
-  /ts-jest@29.1.2(@babel/core@7.23.0)(jest@29.7.0)(typescript@5.3.3):
-    resolution: {integrity: sha512-br6GJoH/WUX4pu7FbZXuWGKGNDuU7b8Uj77g/Sp7puZV6EXzuByl6JrECvm0MzVzSTkSHWTihsXt+5XYER5b+g==}
-    engines: {node: ^16.10.0 || ^18.0.0 || >=20.0.0}
-    hasBin: true
-    peerDependencies:
-      '@babel/core': '>=7.0.0-beta.0 <8'
-      '@jest/types': ^29.0.0
-      babel-jest: ^29.0.0
-      esbuild: '*'
-      jest: ^29.0.0
-      typescript: '>=4.3 <6'
-    peerDependenciesMeta:
-      '@babel/core':
-        optional: true
-      '@jest/types':
-        optional: true
-      babel-jest:
-        optional: true
-      esbuild:
-        optional: true
-    dependencies:
-      '@babel/core': 7.23.0
-      bs-logger: 0.2.6
-      fast-json-stable-stringify: 2.1.0
-      jest: 29.7.0(@types/node@18.18.3)
-      jest-util: 29.7.0
-      json5: 2.2.3
-      lodash.memoize: 4.1.2
-      make-error: 1.3.6
-      semver: 7.5.4
-      typescript: 5.3.3
-      yargs-parser: 21.1.1
-    dev: true
-
   /ts-jest@29.1.2(@babel/core@7.23.9)(jest@29.7.0)(typescript@5.3.3):
     resolution: {integrity: sha512-br6GJoH/WUX4pu7FbZXuWGKGNDuU7b8Uj77g/Sp7puZV6EXzuByl6JrECvm0MzVzSTkSHWTihsXt+5XYER5b+g==}
     engines: {node: ^16.10.0 || ^18.0.0 || >=20.0.0}
@@ -11484,8 +11450,17 @@ packages:
       triple-beam: 1.4.1
     dev: false
 
-  /winston@3.11.0:
-    resolution: {integrity: sha512-L3yR6/MzZAOl0DsysUXHVjOwv8mKZ71TrA/41EIduGpOOV5LQVodqN+QdQ6BS6PJ/RdIshZhq84P/fStEZkk7g==}
+  /winston-transport@4.7.0:
+    resolution: {integrity: sha512-ajBj65K5I7denzer2IYW6+2bNIVqLGDHqDw3Ow8Ohh+vdW+rv4MZ6eiDvHoKhfJFZ2auyN8byXieDDJ96ViONg==}
+    engines: {node: '>= 12.0.0'}
+    dependencies:
+      logform: 2.5.1
+      readable-stream: 3.6.2
+      triple-beam: 1.4.1
+    dev: false
+
+  /winston@3.12.0:
+    resolution: {integrity: sha512-OwbxKaOlESDi01mC9rkM0dQqQt2I8DAUMRLZ/HpbwvDXm85IryEHgoogy5fziQy38PntgZsLlhAYHz//UPHZ5w==}
     engines: {node: '>= 12.0.0'}
     dependencies:
       '@colors/colors': 1.6.0
@@ -11498,7 +11473,7 @@ packages:
       safe-stable-stringify: 2.4.3
       stack-trace: 0.0.10
       triple-beam: 1.4.1
-      winston-transport: 4.5.0
+      winston-transport: 4.7.0
     dev: false
 
   /wrap-ansi@6.2.0: