Bump winston from 2.4.1 to 2.4.4 (#5203)

Bumps [winston](https://github.com/winstonjs/winston) from 2.4.1 to 2.4.4.
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/2.4.4/CHANGELOG.md)
- [Commits](https://github.com/winstonjs/winston/compare/2.4.1...2.4.4)

Signed-off-by: dependabot[bot] <support@dependabot.com>

package.json

@@ -40,7 +40,7 @@
     "semver": "5.6.0",
     "tv4": "1.3.0",
     "uuid": "^3.1.0",
-    "winston": "2.4.1",
+    "winston": "2.4.4",
     "winston-daily-rotate-file": "1.7.2",
     "ws": "6.1.2"
   },