Skip to content

chore(deps): bump qs from 6.11.2 to 6.15.1#368

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/qs-6.14.2
Open

chore(deps): bump qs from 6.11.2 to 6.15.1#368
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/qs-6.14.2

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Feb 13, 2026

Bumps qs from 6.11.2 to 6.15.1.

Changelog

Sourced from qs's changelog.

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage

6.15.0

  • [New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#425, #122)
  • [Fix] duplicates option should not apply to bracket notation keys (#514)

6.14.2

  • [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
  • [Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
  • [Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)
  • [Fix] parse: enforce arrayLimit on comma-parsed values
  • [Fix] parse: fix error message to reflect arrayLimit as max index; remove extraneous comments (#545)
  • [Robustness] avoid .push, use void
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [meta] fix changelog typo (arrayLengtharrayLimit)
  • [actions] fix rebase workflow permissions

6.14.1

  • [Fix] ensure arrayLimit applies to [] notation as well
  • [Fix] parse: when a custom decoder returns null for a key, ignore that key
  • [Refactor] parse: extract key segment splitting helper
  • [meta] add threat model
  • [actions] add workflow permissions
  • [Tests] stringify: increase coverage
  • [Dev Deps] update eslint, @ljharb/eslint-config, npmignore, es-value-fixtures, for-each, object-inspect

6.14.0

  • [New] parse: add throwOnParameterLimitExceeded option (#517)
  • [Refactor] parse: use utils.combine more
  • [patch] parse: add explicit throwOnLimitExceeded default
  • [actions] use shared action; re-add finishers
  • [meta] Fix changelog formatting bug
  • [Deps] update side-channel
  • [Dev Deps] update es-value-fixtures, has-bigints, has-proto, has-symbols
  • [Tests] increase coverage

6.13.3

[Fix] fix regressions from robustness refactor [actions] update reusable workflows

6.13.2

  • [Robustness] avoid .push, use void
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)

... (truncated)

Commits
  • 3f5e1c5 v6.15.1
  • c85b67f [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true s...
  • 4dfa0f0 [Deps] update @ljharb/eslint-config
  • dbb05d7 [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • b0cfe7c [Tests] increase coverage
  • d9b4c66 v6.15.0
  • cb41a54 [New] parse: add strictMerge option to wrap object/primitive conflicts in...
  • 88e1563 [Fix] duplicates option should not apply to bracket notation keys
  • 9d441d2 Merge backport release tags v6.0.6–v6.13.3 into main
  • 85cc8ca v6.12.5
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 13, 2026
andreabadesso added a commit that referenced this pull request Feb 25, 2026
Consolidates 30 dependabot PRs into a single update:

Direct dependency bumps:
- axios: 0.21.1 → 1.13.5 (wallet-service), 1.6.2 → 1.13.5 (daemon)
- eslint: ^8.57.0 → ^9.26.0 (root)
- jsonwebtoken: 8.5.1 → 9.0.0 (wallet-service)
- lodash: 4.17.21 → 4.17.23 (daemon, wallet-service)
- mysql2: ^3.9.3 → ^3.9.8 (root), 2.2.5 → 3.9.8 (wallet-service), 3.5.2 → 3.9.8 (daemon)
- webpack: 5.88.2 → 5.104.1 (wallet-service)
- ws: 8.13.0 → 8.17.1 (daemon)

Transitive dependency updates via yarn.lock regeneration:
qs, diff, jws, node-forge, sha.js, tar-fs, js-yaml, base-x,
@babel/helpers, serialize-javascript, elliptic, cross-spawn,
secp256k1, tar, jose, es5-ext, ip, @babel/traverse, validator

Closes #368, #366, #365, #364, #361, #353, #348, #347, #345, #344
Closes #328, #323, #318, #316, #315, #314, #258, #220, #215, #214
Closes #197, #191, #188, #187, #157, #142, #139, #126, #124, #123

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@luislhl
Copy link
Copy Markdown
Collaborator

luislhl commented May 4, 2026

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps): bump qs from 6.11.2 to 6.14.2 chore(deps): bump qs from 6.11.2 to 6.15.1 May 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.14.2 branch from e9e0048 to e496302 Compare May 4, 2026 19:04
@luislhl
Copy link
Copy Markdown
Collaborator

luislhl commented May 4, 2026

@dependabot rebase

Bumps [qs](https://github.com/ljharb/qs) from 6.11.2 to 6.15.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.11.2...v6.15.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.14.2 branch from e496302 to 36f7307 Compare May 4, 2026 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant