Skip to content

chore(deps): bump qs from 6.15.0 to 6.15.2#5966

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/qs-6.15.2
Open

chore(deps): bump qs from 6.15.0 to 6.15.2#5966
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/qs-6.15.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 23, 2026

Bumps qs from 6.15.0 to 6.15.2.

Changelog

Sourced from qs's changelog.

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage
Commits
  • 9aca407 v6.15.2
  • 5e33d33 [Dev Deps] update @ljharb/eslint-config
  • 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
  • a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
  • e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
  • 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
  • 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
  • 96755ab [readme] fix grammar
  • a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
  • 3f5e1c5 v6.15.1
  • Additional commits viewable in compare view


Note

Low Risk
Lockfile-only patch upgrade with no app code edits; minor behavioral changes in query parsing are possible but limited to how nested query strings are interpreted.

Overview
Bumps the transitive qs dependency from 6.15.0 to 6.15.2 in yarn.lock only; no application source changes.

The newer patch release fixes parse / stringify edge cases (nested bracket keys, delimiter/charsetSentinel behavior, null/undefined in comma/filter-array modes, and parameterLimit: Infinity with throwOnLimitExceeded). Redis Insight still wires qs.parse as the Express query parser for nested query objects.

Reviewed by Cursor Bugbot for commit 19bfe25. Bugbot is set up for automated code reviews on this repo. Configure here.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 23, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 23, 2026 13:37
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 23, 2026
@CLAassistant
Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@jit-ci
Copy link
Copy Markdown

jit-ci Bot commented May 23, 2026

🛡️ Jit Security Scan Results

CRITICAL HIGH MEDIUM

✅ No security findings were detected in this PR


Security scan by Jit

@valkirilov valkirilov added the run-all-tests Trigger the CI to run the front-end, back-end and integration tests label May 26, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Code Coverage - Backend unit tests

St.
Category Percentage Covered / Total
🟢 Statements 92.71% 15672/16904
🟡 Branches 74.72% 4941/6613
🟢 Functions 86.84% 2442/2812
🟢 Lines 92.55% 14980/16186

Test suite run success

3448 tests passing in 308 suites.

Report generated by 🧪jest coverage report action from 26fc32d

@github-actions
Copy link
Copy Markdown
Contributor

Code Coverage - Integration Tests

Status Category Percentage Covered / Total
🟡 Statements 79.5% 17587/22121
🟡 Branches 62.15% 8102/13036
🟡 Functions 67.91% 2436/3587
🟡 Lines 79.07% 16542/20919

@github-actions
Copy link
Copy Markdown
Contributor

Code Coverage - Frontend unit tests

St.
Category Percentage Covered / Total
🟢 Statements 82.9% 24806/29923
🟡 Branches 68.13% 10421/15296
🟡 Functions 78.15% 6698/8571
🟢 Lines 83.36% 24223/29060

Test suite run success

6986 tests passing in 802 suites.

Report generated by 🧪jest coverage report action from 26fc32d

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.15.2 branch from 26fc32d to fcbb07b Compare May 28, 2026 04:45
@pawelangelow
Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.15.2 branch from fcbb07b to 19bfe25 Compare May 28, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code run-all-tests Trigger the CI to run the front-end, back-end and integration tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants