Skip to content

chore: update qs package version to 6.14.1#6849

Merged
bijin-bruno merged 2 commits into
mainfrom
fix/qs-vuln
Jan 19, 2026
Merged

chore: update qs package version to 6.14.1#6849
bijin-bruno merged 2 commits into
mainfrom
fix/qs-vuln

Conversation

@sid-bruno
Copy link
Copy Markdown
Collaborator

@sid-bruno sid-bruno commented Jan 19, 2026

Description

Update qs to the most recent version for https://github.com/usebruno/bruno/security/dependabot/157

Closes: #6845

Contribution Checklist:

  • I've used AI significantly to create this pull request
  • The pull request only addresses one issue or adds one feature.
  • The pull request does not introduce any breaking changes
  • I have added screenshots or gifs to help explain the change if applicable.
  • I have read the contribution guidelines.
  • Create an issue and link to the pull request.

Note: Keeping the PR small and focused helps make it easier to review and merge. If you have multiple changes you want to make, please consider submitting them as separate pull requests.

Publishing to New Package Managers

Please see here for more information.

Summary by CodeRabbit

Release Notes

  • Chores
    • Updated internal libraries to incorporate performance improvements and security enhancements across the application.

✏️ Tip: You can customize this high-level summary in your review settings.

Copilot AI review requested due to automatic review settings January 19, 2026 15:44
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Jan 19, 2026

Walkthrough

Three package.json files updated with a single dependency version bump: the "qs" package upgraded from ^6.11.0 to ^6.14.1 across bruno-app, bruno-cli, and bruno-electron packages.

Changes

Cohort / File(s) Summary
Dependency Version Update
packages/bruno-app/package.json, packages/bruno-cli/package.json, packages/bruno-electron/package.json
Upgraded "qs" dependency from ^6.11.0 to ^6.14.1 across all three packages

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

📦 A little bump, so small and neat,
From six-eleven to six-fourteen—
Dependencies dance, the versions align,
Query strings parsing just fine! ✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and specifically summarizes the main change: updating the qs package dependency across multiple packages to version 6.14.1 to address a security advisory.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates the qs package from version ^6.11.0 to ^6.14.1 across three packages in the Bruno monorepo to address a security vulnerability (Dependabot alert #157).

Changes:

  • Updated qs dependency version in bruno-electron, bruno-cli, and bruno-app packages
  • Corresponding package-lock.json updates including transitive dependency updates (AWS SDK and other dependencies)

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated no comments.

File Description
packages/bruno-electron/package.json Updated qs from ^6.11.0 to ^6.14.1
packages/bruno-cli/package.json Updated qs from ^6.11.0 to ^6.14.1
packages/bruno-app/package.json Updated qs from ^6.11.0 to ^6.14.1
package-lock.json Lockfile updates for qs and transitive dependencies

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions
Copy link
Copy Markdown

CLI Test Results

  1 files  ±0  141 suites  ±0   53s ⏱️ -2s
236 tests ±0  236 ✅ ±0  0 💤 ±0  0 ❌ ±0 
302 runs  ±0  301 ✅ ±0  1 💤 ±0  0 ❌ ±0 

Results for commit 8990d19. ± Comparison against base commit 6642f4d.

@bijin-bruno bijin-bruno merged commit ebafdd8 into main Jan 19, 2026
6 of 8 checks passed
FraCata00 pushed a commit to FraCata00/bruno that referenced this pull request Feb 9, 2026
Co-authored-by: Siddharth Gelera <ahoy@barelyhuman.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

qs vulnerability still present in the latest version

5 participants