Skip to content

build(deps-dev): bump qs from 6.16.0 to 6.16.1 - #2280

Merged
beachtom merged 1 commit into
mainfrom
dependabot/npm_and_yarn/qs-6.16.1
Oct 19, 2026
Merged

beachtom merged 1 commit into
mainfrom
dependabot/npm_and_yarn/qs-6.16.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps qs from 6.16.0 to 6.16.1.

Changelog

Sourced from qs's changelog.

6.16.1

  • [Fix] parse: do not mutate an object input
  • [Fix] stringify: stop re-encoding structural separator dots when encodeDotInKeys is set (#564)
  • [Fix] stringify: arrayFormat: 'comma': pass the full encoder arguments with encodeValuesOnly
  • [Fix] utils: encode + as %2B in iso-8859-1 mode so values round-trip (#565)
  • [Fix] parse: only convert top-level dots to brackets when allowDots is on (#621)
  • [Fix] stringify: ignore inherited array format names (#622)
  • [Fix] stringify: arrayFormat: 'comma': do not throw on elements with no callable toString
  • [Fix] utils: merge: seed an overflow container's index from its own keys, not just the source
  • [Fix] utils: merge: keep a strictMerge conflict container's index and arrayLimit correct
  • [Fix] parse: only treat [] as array syntax when it ends the key
  • [Perf] decode: skip decoders when there is no percent sign (#583)
  • [Robustness] utils: merge: apply arrayLimit to the two-element array built for colliding values
  • [Robustness] parse: bound the nesting added by repeated strictMerge conflicts (credit @​Yeaseen)
  • [Docs] document that qs and flat parsers disagree about parameter names
  • [Docs] clarify that throwOnLimitExceeded limits each array, not the total number of values
  • [Docs] clarify 6.14.1/6.15.2 parse bracket behavior change (#567, #568)
  • [meta] fix changelog indents
  • [actions] set least-privilege cache-mode
  • [Tests] utils: decode: add missing cases
  • [Tests] parse: characterize the ]= split when an = precedes any bracket group (#620)
  • [Tests] parse: allowDots: cover stray close brackets before a dot
  • [Dev Deps] update @ljharb/eslint-config, eslint, tape
Commits
  • 2471b66 v6.16.1
  • 51f736e [Docs] document that qs and flat parsers disagree about parameter names
  • 40239f7 [Dev Deps] update tape
  • d219359 [Fix] parse: do not mutate an object input
  • 98157dc [Fix] stringify: stop re-encoding structural separator dots when `encodeDot...
  • cb075c5 [Fix] stringify: arrayFormat: 'comma': pass the full encoder arguments wi...
  • 4b89c03 [Fix] utils: encode + as %2B in iso-8859-1 mode so values round-trip
  • 266527d [Perf] decode: skip decoders when there is no percent sign
  • 82c5bd0 [Tests] utils: decode: add missing cases
  • 3ee412c [Tests] parse: characterize the ]= split when an = precedes any bracket...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [qs](https://github.com/ljharb/qs) from 6.16.0 to 6.16.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.16.0...v6.16.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.16.1
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
@beachtom
beachtom merged commit f37f626 into main Oct 19, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/qs-6.16.1 branch October 19, 2026 07:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant