deps(fix): qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion

Author: Dwlad90

package.json

@@ -48,37 +48,38 @@
   "packageManager": "pnpm@9.15.4",
   "pnpm": {
     "overrides": {
-      "webpack@<5.0.0": ">=5.0.0",
-      "@types/webpack@<5.0.0": ">=5.0.0",
-      "micromatch@<4.0.8": ">=4.0.8",
-      "cross-spawn@<6.0.6": ">=6.0.6",
-      "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5",
-      "path-to-regexp@<0.1.12": ">=0.1.12",
-      "nanoid@<3.3.8": ">=3.3.8",
-      "koa@>=2.0.0 <2.16.3": ">=2.16.3 <3.0.0",
-      "esbuild@<=0.24.2": ">=0.25.0",
       "@babel/core@<7.26.10": ">=7.26.10",
       "@babel/helpers@<7.26.10": "7.26.10",
       "@babel/runtime@<7.26.10": ">=7.26.10",
-      "http-proxy-middleware@<2.0.9": ">=2.0.9",
-      "http-proxy-middleware@>=3 <3.0.5": ">=3.0.5",
+      "@eslint/plugin-kit@<0.3.3": ">=0.3.3 <1.0.0",
       "@farmfe/core@<1.7.10": ">=1.7.11 <2.0.0",
+      "@stylexjs/stylex@<0.17.3": ">=0.17.3",
+      "@types/webpack@<5.0.0": ">=5.0.0",
       "brace-expansion@>=1.0.0 <=1.1.11": ">=1.1.12 <2.0.0",
       "brace-expansion@>=2.0.0 <=2.0.1": ">=2.0.2 <3.0.0",
-      "on-headers@<1.1.0": ">=1.1.0 <2.0.0",
+      "cross-spawn@<6.0.6": ">=6.0.6",
+      "cross-spawn@>=7.0.0 <7.0.5": ">=7.0.5",
+      "esbuild@<=0.24.2": ">=0.25.0",
       "form-data@>=4.0.0 <4.0.4": ">=4.0.4 <5.0.0",
-      "@eslint/plugin-kit@<0.3.3": ">=0.3.3 <1.0.0",
-      "tmp@<= 0.2.3": ">=0.2.4 <1.0.0",
-      "node-forge@<1.3.2": ">=1.3.2 <2.0.0",
       "glob@>=10.2.0 <10.5.0": ">=10.5.0 <11.0.0",
       "glob@>=11.0.0 <11.1.0": ">=11.1.0 <12.0.0",
+      "http-proxy-middleware@<2.0.9": ">=2.0.9",
+      "http-proxy-middleware@>=3 <3.0.5": ">=3.0.5",
       "js-yaml@<3.14.2 <4.0.0": ">=3.14.2 <4.0.0",
       "js-yaml@>=4.0.0 <4.1.1": ">=4.1.1 <5.0.0",
-      "@stylexjs/stylex@<0.17.3": ">=0.17.3"
+      "koa@>=2.0.0 <2.16.3": ">=2.16.3 <3.0.0",
+      "micromatch@<4.0.8": ">=4.0.8",
+      "nanoid@<3.3.8": ">=3.3.8",
+      "node-forge@<1.3.2": ">=1.3.2 <2.0.0",
+      "on-headers@<1.1.0": ">=1.1.0 <2.0.0",
+      "path-to-regexp@<0.1.12": ">=0.1.12",
+      "qs@<6.14.1": ">=6.14.1 <7.0.0",
+      "tmp@<= 0.2.3": ">=0.2.4 <1.0.0",
+      "webpack@<5.0.0": ">=5.0.0"
     },
     "patchedDependencies": {
       "scripty@3.0.0": "patches/scripty@3.0.0.patch"
     }
   },
   "repository": "dwlad90/stylex-swc-plugin"
-}
+}