Skip to content

refactor: Bump qs from 6.14.2 to 6.15.2 - #10476

Merged
mtrezza merged 1 commit into
alphafrom
dependabot/npm_and_yarn/qs-6.15.2
Jul 13, 2026
Merged

refactor: Bump qs from 6.14.2 to 6.15.2#10476
mtrezza merged 1 commit into
alphafrom
dependabot/npm_and_yarn/qs-6.15.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 23, 2026

Copy link
Copy Markdown
Contributor

Bumps qs from 6.14.2 to 6.15.2.

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage

6.15.0

  • [New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#425, #122)
  • [Fix] duplicates option should not apply to bracket notation keys (#514)
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
  • e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
  • 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
  • 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
  • 96755ab [readme] fix grammar
  • a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
  • 3f5e1c5 v6.15.1
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Summary by CodeRabbit

  • Chores
    • Updated a dependency to a newer patch release.
    • Refreshed the associated package metadata and integrity information.

@dependabot dependabot Bot added dependencies Bot label; pull requests that updates a dependency file javascript Pull requests that update javascript code labels May 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.15.2 branch 3 times, most recently from ede71a1 to 96ee10d Compare June 3, 2026 14:45
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.15.2 branch 3 times, most recently from 319af8d to 75e2d92 Compare June 10, 2026 23:52
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.15.2 branch 4 times, most recently from 1ca1920 to 7a73b64 Compare June 17, 2026 14:34
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.15.2 branch from 7a73b64 to 6bbb88d Compare June 19, 2026 00:21
Bumps [qs](https://github.com/ljharb/qs) from 6.14.2 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.2...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.15.2 branch from 6bbb88d to 014f03c Compare June 19, 2026 23:15
@mtrezza

mtrezza commented Jul 13, 2026

Copy link
Copy Markdown
Member

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Jul 13, 2026

Copy link
Copy Markdown
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@coderabbitai

coderabbitai Bot commented Jul 13, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

The package-lock.json updates both qs dependency entries from version 6.14.2 to 6.15.2, including their resolved tarball URLs and integrity checksums.

Changes

qs dependency update

Layer / File(s) Summary
Update qs lockfile metadata
package-lock.json
Both qs entries record version 6.15.2 with matching resolved URLs and integrity hashes.

Estimated code review effort: 1 (Trivial) | ~2 minutes


Caution

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

  • Ignore

❌ Failed checks (1 error, 1 inconclusive)

Check name Status Explanation Resolution
Description check ❌ Error The description is missing the required Issue, Approach, and Tasks sections from the repository template. Add the template sections for Issue, Approach, and Tasks, and fill them with a brief summary plus the relevant checkboxes.
Engage In Review Feedback ❓ Inconclusive The repo only shows a one-file qs lockfile bump and no review-thread evidence, so engagement with feedback can't be verified here. Provide the PR review comment thread or discussion history, or a commit referencing the feedback response.
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title uses an allowed prefix and clearly matches the dependency bump shown in the changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Security Check ✅ Passed PASS: the diff only bumps qs in package-lock.json to 6.15.2; GitHub advisories for qs affect only versions below 6.3.2, so no known qs security issue is introduced.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/qs-6.15.2

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@mtrezza
mtrezza merged commit 3f4d0d7 into alpha Jul 13, 2026
22 checks passed
@mtrezza
mtrezza deleted the dependabot/npm_and_yarn/qs-6.15.2 branch July 13, 2026 12:05
@parseplatformorg

Copy link
Copy Markdown
Contributor

🎉 This change has been released in version 9.10.1-alpha.1

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Jul 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bot label; pull requests that updates a dependency file javascript Pull requests that update javascript code state:released-alpha Released as alpha version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants