Skip to content

Bump qs, cypress, cypress-html-validate and express#3135

Merged
Crabcyborg merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-f4f3727cc4
Jun 11, 2026
Merged

Bump qs, cypress, cypress-html-validate and express#3135
Crabcyborg merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-f4f3727cc4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor

Bumps qs to 6.15.2 and updates ancestor dependencies qs, cypress, cypress-html-validate and express. These dependencies need to be updated together.

Updates qs from 6.14.2 to 6.15.2

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage

6.15.0

  • [New] parse: add strictMerge option to wrap object/primitive conflicts in an array (#425, #122)
  • [Fix] duplicates option should not apply to bracket notation keys (#514)
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
  • e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
  • 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
  • 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
  • 96755ab [readme] fix grammar
  • a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
  • 3f5e1c5 v6.15.1
  • Additional commits viewable in compare view

Updates cypress from 13.17.0 to 15.17.0

Release notes

Sourced from cypress's releases.

v15.17.0

Changelog: https://docs.cypress.io/app/references/changelog#15-17-0

v15.16.0

Changelog: https://docs.cypress.io/app/references/changelog#15-16-0

v15.15.0

Changelog: https://docs.cypress.io/app/references/changelog#15-15-0

v15.14.2

Changelog: https://docs.cypress.io/app/references/changelog#15-14-2

v15.14.1

Changelog: https://docs.cypress.io/app/references/changelog#15-14-1

v15.14.0

Changelog: https://docs.cypress.io/app/references/changelog#15-14-0

v15.13.1

Changelog: https://docs.cypress.io/app/references/changelog#15-13-1

v15.13.0

Changelog: https://docs.cypress.io/app/references/changelog#15-13-0

v15.12.0

Changelog: https://docs.cypress.io/app/references/changelog#15-12-0

v15.11.0

Changelog: https://docs.cypress.io/app/references/changelog#15-11-0

v15.10.0

Changelog: https://docs.cypress.io/app/references/changelog#15-10-0

v15.9.0

Changelog: https://docs.cypress.io/app/references/changelog#15-9-0

v15.8.2

Changelog: https://docs.cypress.io/app/references/changelog#15-8-2

v15.8.1

Changelog: https://docs.cypress.io/app/references/changelog#15-8-1

v15.8.0

Changelog: https://docs.cypress.io/app/references/changelog#15-8-0

v15.7.1

Changelog: https://docs.cypress.io/app/references/changelog#15-7-1

v15.7.0

Changelog: https://docs.cypress.io/app/references/changelog#15-7-0

... (truncated)

Commits
  • b22780a chore: Update Chrome (stable) to 149.0.7827.102 and Chrome for Testing (stabl...
  • ada42a7 chore: send standard identity headers on cy-prompt/studio session requests (#...
  • 6017154 perf(server): release pending automation requests after response (#34037)
  • 6be559a chore: don't redeclare inherited observable Session.name (#34034)
  • 437a08e chore: update need help link for auto provision project slug error modal (#34...
  • 04dd296 refactor(proxy): request/response interception adapters and wire middleware (...
  • 482cd41 chore: reporter support for test replay embedding (#34031)
  • f3de1b2 chore: reorder changelog entries for release by popularity of issue (#34032)
  • b60b68f misc: warn when a --spec pattern matches no spec files (#34023)
  • e0fe6e0 perf: Fix Command Log performance regression on hover (#34029)
  • Additional commits viewable in compare view
Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.


Updates cypress-html-validate from 6.1.0 to 9.0.0

Release notes

Sourced from cypress-html-validate's releases.

v9.0.0

9.0.0 (2026-05-12)

⚠ BREAKING CHANGES

  • deps: Cypress v13 or later is now required.
  • deps: NodeJS v22 or later is now required.

Features

  • deps: remove support for cypress v12 (2c81df1)
  • deps: require nodejs v22 or later (c6b4ca3)

v8.2.0

8.2.0 (2026-05-11)

Features

  • deps: support html-validate v11 (1db3e6d)

v8.1.1

8.1.1 (2026-05-06)

Bug Fixes

  • add sideEffects field to package.json (ae4a1b5)

v8.1.0

8.1.0 (2025-08-21)

Features

  • deps: support cypress v15 (a86e61a)

v8.0.0

8.0.0 (2025-08-10)

⚠ BREAKING CHANGES

  • deps: Cypress v12 or later is now required.
  • deps: NodeJS v20 or later is now required.

Features

  • deps: remove support for cypress v11 (1d5f8ad)
  • deps: require nodejs v20 or later (89571b1)

v7.2.0

7.2.0 (2025-08-10)

... (truncated)

Changelog

Sourced from cypress-html-validate's changelog.

9.0.0 (2026-05-12)

⚠ BREAKING CHANGES

  • deps: Cypress v13 or later is now required.
  • deps: NodeJS v22 or later is now required.

Features

  • deps: remove support for cypress v12 (2c81df1)
  • deps: require nodejs v22 or later (c6b4ca3)

8.2.0 (2026-05-11)

Features

  • deps: support html-validate v11 (1db3e6d)

8.1.1 (2026-05-06)

Bug Fixes

  • add sideEffects field to package.json (ae4a1b5)

8.1.0 (2025-08-21)

Features

  • deps: support cypress v15 (a86e61a)

8.0.0 (2025-08-10)

⚠ BREAKING CHANGES

  • deps: Cypress v12 or later is now required.
  • deps: NodeJS v20 or later is now required.

Features

  • deps: remove support for cypress v11 (1d5f8ad)
  • deps: require nodejs v20 or later (89571b1)

7.2.0 (2025-08-10)

Features

  • deps: support html-validate v10 (d30dcf2)

7.1.0 (2025-01-20)

... (truncated)

Commits
  • 430c68c chore(release): 9.0.0
  • 1a3a529 Merge branch 'feature/node22' into 'master'
  • 2c81df1 feat(deps): remove support for cypress v12
  • c6b4ca3 feat(deps)!: require nodejs v22 or later
  • a8da91d chore(deps): update dependency html-validate to v11.1.0
  • 4ecf520 chore(deps): update dependency @​html-validate/jest-config to v3.18.0
  • 7038a3c chore(release): 8.2.0
  • 2eab8ab Merge branch 'renovate/html-validate-11.x' into 'master'
  • 1db3e6d feat(deps): support html-validate v11
  • dc68339 chore(deps): update dependency html-validate to v10.17.0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitLab CI/CD, a new releaser for cypress-html-validate since your current version.


Updates express from 4.22.1 to 4.22.2

Release notes

Sourced from express's releases.

v4.22.2

What's Changed

  • fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
    • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
  • deps: qs@~6.15.1
  • deps: body-parser@~1.20.5

New Contributors

Full Changelog: expressjs/express@v4.22.1...v4.22.2

Changelog

Sourced from express's changelog.

4.22.2 / 2026-05-011

  • fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
    • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
  • deps: qs@~6.15.1
  • deps: body-parser@~1.20.5
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [qs](https://github.com/ljharb/qs) to 6.15.2 and updates ancestor dependencies [qs](https://github.com/ljharb/qs), [cypress](https://github.com/cypress-io/cypress), [cypress-html-validate](https://gitlab.com/html-validate/cypress-html-validate) and [express](https://github.com/expressjs/express). These dependencies need to be updated together.


Updates `qs` from 6.14.2 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.2...v6.15.2)

Updates `cypress` from 13.17.0 to 15.17.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v13.17.0...v15.17.0)

Updates `cypress-html-validate` from 6.1.0 to 9.0.0
- [Release notes](https://gitlab.com/html-validate/cypress-html-validate/tags)
- [Changelog](https://gitlab.com/html-validate/cypress-html-validate/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/html-validate/cypress-html-validate/compare/v6.1.0...v9.0.0)

Updates `express` from 4.22.1 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](expressjs/express@v4.22.1...v4.22.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
- dependency-name: cypress
  dependency-version: 15.17.0
  dependency-type: direct:development
- dependency-name: cypress-html-validate
  dependency-version: 9.0.0
  dependency-type: direct:development
- dependency-name: express
  dependency-version: 4.22.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 11, 2026
@deepsource-io

deepsource-io Bot commented Jun 11, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 1e8df4e...d79a6d2 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
PHP Jun 11, 2026 4:04p.m. Review ↗
JavaScript Jun 11, 2026 4:04p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@Crabcyborg
Crabcyborg merged commit 80db5c9 into master Jun 11, 2026
66 of 67 checks passed
@Crabcyborg
Crabcyborg deleted the dependabot/npm_and_yarn/multi-f4f3727cc4 branch June 11, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code run analysis run tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant