build(deps): bump winston from 3.6.0 to 3.7.2

Bumps [winston](https://github.com/winstonjs/winston) from 3.6.0 to 3.7.2.
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](https://github.com/winstonjs/winston/commits)

---
updated-dependencies:
- dependency-name: winston
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

package-lock.json

@@ -13,7 +13,7 @@
     "http-proxy": "^1.18.1",
     "prom-client": "14.0.1",
     "strftime": "~0.10.0",
-    "winston": "~3.6.0"
+    "winston": "~3.7.2"
   },
   "devDependencies": {
     "jasmine": "^3.5.0",