Skip to content

chore(deps): bump qs from 6.14.1 to 6.14.2 - #7519

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/qs-6.14.2
Closed

chore(deps): bump qs from 6.14.1 to 6.14.2#7519
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/qs-6.14.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 13, 2026

Copy link
Copy Markdown
Contributor

Bumps qs from 6.14.1 to 6.14.2.

Changelog

Sourced from qs's changelog.

6.14.2

  • [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit (#546)
  • [Fix] arrayLimit means max count, not max index, in combine/merge/parseArrayValue
  • [Fix] parse: throw on arrayLimit exceeded with indexed notation when throwOnLimitExceeded is true (#529)
  • [Fix] parse: enforce arrayLimit on comma-parsed values
  • [Fix] parse: fix error message to reflect arrayLimit as max index; remove extraneous comments (#545)
  • [Robustness] avoid .push, use void
  • [readme] document that addQueryPrefix does not add ? to empty output (#418)
  • [readme] clarify parseArrays and arrayLimit documentation (#543)
  • [readme] replace runkit CI badge with shields.io check-runs badge
  • [meta] fix changelog typo (arrayLengtharrayLimit)
  • [actions] fix rebase workflow permissions
Commits
  • bdcf0c7 v6.14.2
  • 294db90 [readme] document that addQueryPrefix does not add ? to empty output
  • 5c308e5 [readme] clarify parseArrays and arrayLimit documentation
  • 6addf8c [Fix] parse: mark overflow objects for indexed notation exceeding arrayLimit
  • cfc108f [Fix] arrayLimit means max count, not max index, in combine/merge/`pars...
  • febb644 [Fix] parse: throw on arrayLimit exceeded with indexed notation when `thr...
  • f6a7abf [Fix] parse: enforce arrayLimit on comma-parsed values
  • fbc5206 [Fix] parse: fix error message to reflect arrayLimit as max index; remove e...
  • 1b9a8b4 [actions] fix rebase workflow permissions
  • 2a35775 [meta] fix changelog typo (arrayLengtharrayLimit)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot Bot added dependabot dependencies javascript Pull requests that update javascript code semver-patch labels Feb 13, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner February 13, 2026 00:35
@dependabot dependabot Bot added javascript Pull requests that update javascript code dependabot labels Feb 13, 2026
@github-actions

github-actions Bot commented Feb 13, 2026

Copy link
Copy Markdown
Contributor

Overall package size

Self size: 4.68 MB
Deduped: 5.52 MB
No deduping: 5.52 MB

Dependency sizes | name | version | self size | total size | |------|---------|-----------|------------| | import-in-the-middle | 2.0.6 | 81.92 kB | 813.08 kB | | dc-polyfill | 0.1.10 | 26.73 kB | 26.73 kB |

🤖 This report was automatically generated by heaviest-objects-in-the-universe

@codecov

codecov Bot commented Feb 13, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.28%. Comparing base (aa8ca98) to head (f77142e).
⚠️ Report is 27 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #7519      +/-   ##
==========================================
- Coverage   80.29%   80.28%   -0.01%     
==========================================
  Files         732      732              
  Lines       31468    31468              
==========================================
- Hits        25267    25265       -2     
- Misses       6201     6203       +2     
Flag Coverage Δ
aiguard-macos 39.01% <ø> (-0.11%) ⬇️
aiguard-ubuntu 39.13% <ø> (-0.11%) ⬇️
aiguard-windows 38.87% <ø> (-0.11%) ⬇️
apm-capabilities-tracing-macos 48.39% <ø> (ø)
apm-capabilities-tracing-ubuntu 48.42% <ø> (ø)
apm-capabilities-tracing-windows 48.12% <ø> (+0.04%) ⬆️
apm-integrations-child-process 38.58% <ø> (-0.11%) ⬇️
apm-integrations-couchbase-18 37.33% <ø> (-0.10%) ⬇️
apm-integrations-couchbase-eol 37.97% <ø> (+0.04%) ⬆️
apm-integrations-oracledb 37.81% <ø> (-0.10%) ⬇️
appsec-express 55.66% <ø> (-0.08%) ⬇️
appsec-fastify 51.97% <ø> (-0.07%) ⬇️
appsec-graphql 52.14% <ø> (-0.07%) ⬇️
appsec-kafka 44.63% <ø> (-0.03%) ⬇️
appsec-ldapjs 44.18% <ø> (-0.09%) ⬇️
appsec-lodash 43.86% <ø> (-0.08%) ⬇️
appsec-macos 58.75% <ø> (-0.07%) ⬇️
appsec-mongodb-core 49.08% <ø> (-0.08%) ⬇️
appsec-mongoose 49.77% <ø> (-0.08%) ⬇️
appsec-mysql 51.14% <ø> (-0.08%) ⬇️
appsec-node-serialize 43.37% <ø> (-0.09%) ⬇️
appsec-passport 47.89% <ø> (-0.09%) ⬇️
appsec-postgres 50.90% <ø> (-0.08%) ⬇️
appsec-sourcing 42.72% <ø> (-0.09%) ⬇️
appsec-template 43.54% <ø> (-0.09%) ⬇️
appsec-ubuntu 58.83% <ø> (-0.07%) ⬇️
appsec-windows 58.62% <ø> (-0.05%) ⬇️
instrumentations-instrumentation-bluebird 32.28% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-body-parser 40.59% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-child_process 37.89% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-cookie-parser 34.33% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-express 34.67% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-express-mongo-sanitize 34.46% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-express-session 40.21% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-fs 31.88% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-generic-pool 29.76% <ø> (ø)
instrumentations-instrumentation-http 39.93% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-knex 32.28% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-mongoose 33.46% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-multer 40.33% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-mysql2 38.38% <ø> (-0.10%) ⬇️
instrumentations-instrumentation-passport 44.18% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-passport-http 43.85% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-passport-local 44.40% <ø> (-0.09%) ⬇️
instrumentations-instrumentation-pg 37.79% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-promise 32.21% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-promise-js 32.21% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-q 32.26% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-url 32.18% <ø> (-0.11%) ⬇️
instrumentations-instrumentation-when 32.23% <ø> (-0.11%) ⬇️
llmobs-ai 41.42% <ø> (-0.10%) ⬇️
llmobs-anthropic 40.40% <ø> (-0.10%) ⬇️
llmobs-bedrock 39.32% <ø> (-0.09%) ⬇️
llmobs-google-genai 39.91% <ø> (-0.09%) ⬇️
llmobs-langchain 39.49% <ø> (-0.08%) ⬇️
llmobs-openai 44.23% <ø> (-0.09%) ⬇️
llmobs-vertex-ai 40.19% <ø> (-0.02%) ⬇️
platform-core 29.71% <ø> (ø)
platform-esbuild 32.89% <ø> (ø)
platform-instrumentations-misc 40.53% <ø> (ø)
platform-shimmer 36.14% <ø> (ø)
platform-unit-guardrails 31.27% <ø> (ø)
plugins-azure-event-hubs 24.02% <ø> (ø)
plugins-azure-service-bus 23.42% <ø> (ø)
plugins-bullmq 43.71% <ø> (-0.10%) ⬇️
plugins-cassandra 37.99% <ø> (+0.04%) ⬆️
plugins-cookie 25.08% <ø> (ø)
plugins-cookie-parser 24.87% <ø> (ø)
plugins-crypto 24.72% <ø> (ø)
plugins-dd-trace-api 38.43% <ø> (-0.11%) ⬇️
plugins-express-mongo-sanitize 25.04% <ø> (ø)
plugins-express-session 24.83% <ø> (ø)
plugins-fastify 42.36% <ø> (-0.10%) ⬇️
plugins-fetch 38.39% <ø> (-0.10%) ⬇️
plugins-fs 38.68% <ø> (-0.11%) ⬇️
plugins-generic-pool 24.06% <ø> (ø)
plugins-google-cloud-pubsub 45.51% <ø> (-0.09%) ⬇️
plugins-grpc 41.05% <ø> (-0.10%) ⬇️
plugins-handlebars 25.08% <ø> (ø)
plugins-hapi 40.22% <ø> (-0.10%) ⬇️
plugins-hono 40.49% <ø> (-0.10%) ⬇️
plugins-ioredis 38.49% <ø> (-0.11%) ⬇️
plugins-knex 24.80% <ø> (ø)
plugins-ldapjs 22.61% <ø> (ø)
plugins-light-my-request 24.48% <ø> (ø)
plugins-limitd-client 32.58% <ø> (-0.11%) ⬇️
plugins-lodash 24.13% <ø> (ø)
plugins-mariadb 39.59% <ø> (-0.10%) ⬇️
plugins-memcached 38.22% <ø> (-0.11%) ⬇️
plugins-microgateway-core 39.25% <ø> (-0.10%) ⬇️
plugins-moleculer 40.61% <ø> (-0.10%) ⬇️
plugins-mongodb 39.26% <ø> (-0.17%) ⬇️
plugins-mongodb-core 39.09% <ø> (-0.10%) ⬇️
plugins-mongoose 38.94% <ø> (-0.10%) ⬇️
plugins-multer 24.83% <ø> (ø)
plugins-mysql 39.23% <ø> (-0.08%) ⬇️
plugins-mysql2 39.33% <ø> (-0.10%) ⬇️
plugins-node-serialize 25.12% <ø> (ø)
plugins-opensearch 37.68% <ø> (-0.10%) ⬇️
plugins-passport-http 24.91% <ø> (ø)
plugins-postgres 35.73% <ø> (-0.09%) ⬇️
plugins-process 24.72% <ø> (ø)
plugins-pug 25.08% <ø> (ø)
plugins-redis 38.96% <ø> (+0.04%) ⬆️
plugins-router 43.12% <ø> (-0.10%) ⬇️
plugins-sequelize 23.66% <ø> (ø)
plugins-test-and-upstream-amqp10 38.56% <ø> (+0.04%) ⬆️
plugins-test-and-upstream-amqplib 43.90% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-apollo 39.09% <ø> (-0.09%) ⬇️
plugins-test-and-upstream-avsc 38.82% <ø> (-0.11%) ⬇️
plugins-test-and-upstream-bunyan 33.89% <ø> (-0.11%) ⬇️
plugins-test-and-upstream-connect 40.90% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-graphql 40.23% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-koa 40.47% <ø> (-0.10%) ⬇️
plugins-test-and-upstream-protobufjs 39.06% <ø> (-0.11%) ⬇️
plugins-test-and-upstream-rhea 44.18% <ø> (-0.10%) ⬇️
plugins-undici 39.18% <ø> (-0.10%) ⬇️
plugins-url 24.72% <ø> (ø)
plugins-valkey 38.11% <ø> (-0.14%) ⬇️
plugins-vm 24.72% <ø> (ø)
plugins-winston 34.08% <ø> (-0.10%) ⬇️
plugins-ws 42.01% <ø> (-0.10%) ⬇️
profiling-macos 39.98% <ø> (-0.10%) ⬇️
profiling-ubuntu 40.11% <ø> (-0.10%) ⬇️
profiling-windows 41.34% <ø> (-0.10%) ⬇️
serverless-azure-functions-client 23.75% <ø> (ø)
serverless-azure-functions-eventhubs 23.75% <ø> (ø)
serverless-azure-functions-servicebus 23.75% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@pr-commenter

pr-commenter Bot commented Feb 13, 2026

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2026-02-19 06:22:58

Comparing candidate commit f77142e in PR branch dependabot/npm_and_yarn/qs-6.14.2 with baseline commit aa8ca98 in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 230 metrics, 30 unstable metrics.

Bumps [qs](https://github.com/ljharb/qs) from 6.14.1 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.1...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/qs-6.14.2 branch from baee3b4 to f77142e Compare February 19, 2026 06:13
@dependabot @github

dependabot Bot commented on behalf of github Feb 26, 2026

Copy link
Copy Markdown
Contributor Author

Looks like qs is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Feb 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/qs-6.14.2 branch February 26, 2026 09:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot dependencies javascript Pull requests that update javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants