Bump winston from 3.3.3 to 3.8.2 in /src

Bumps [winston](https://github.com/winstonjs/winston) from 3.3.3 to 3.8.2.
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.3.3...v3.8.2)

---
updated-dependencies:
- dependency-name: winston
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

src/package-lock.json

@@ -20,7 +20,7 @@
     "morgan": "~1.10.0",
     "node-cache": "^5.1.2",
     "opentracing": "^0.14.7",
-    "winston": "^3.3.3"
+    "winston": "^3.8.2"
   },
   "devDependencies": {
     "chai": "^4.3.7",