Skip to content

chore(deps): bump qs from 6.15.0 to 6.16.0 - #258

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/qs-6.16.0
Open

chore(deps): bump qs from 6.15.0 to 6.16.0#258
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/qs-6.16.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps qs from 6.15.0 to 6.16.0.

Changelog

Sourced from qs's changelog.

6.16.0

  • [New] stringify: add a depth option to bound recursion depth (default Infinity)
  • [Fix] stringify: serialize Date values when a filter is provided
  • [Fix] parse: enforce arrayLimit on comma groups under []= when throwOnLimitExceeded is set
  • [Fix] parse: flatten a collection appended to an overflowed array (#571)
  • [Fix] utils: isBuffer: do not invoke a non-callable constructor.isBuffer
  • [Fix] stringify: do not let allowEmptyArrays skip cycle detection (or drop own keys) on an empty array with own properties
  • [Fix] stringify: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (#562)
  • [Docs] threat model: clarify stringify deep-nesting DoS is caller-bounded
  • [Docs] clarify arrayLimit is a representation threshold, not an element-count cap
  • [Tests] parse: remove a test that pinned []= comma groups escaping arrayLimit
  • [Tests] stringify: pin current encodeDotInKeys separator-dot behavior
  • [Dev Deps] update @ljharb/eslint-config, eslint
  • [Dev Deps] update eslint, evalmd

6.15.3

  • [Fix] parse: enforce throwOnLimitExceeded for cumulative array growth via combine/merge
  • [Fix] utils: respect encoding of surrogate pairs across chunks (#559)
  • [Robustness] parse: throw the arrayLimit error before splitting oversized comma values
  • [Robustness] utils.merge / utils.assign: avoid invoking __proto__ setter when copying own properties
  • [Robustness] utils: enforce arrayLimit consistently across merge's array paths
  • [Perf] utils: make compact O(n) via a side-channel visited-set instead of Array.indexOf
  • [Deps] update side-channel
  • [Dev Deps] update eslint, mock-property, tape
  • [Tests] parse: characterize current lenient handling of unbalanced bracket keys (#558)

6.15.2

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#530); changes output for some unbalanced bracket keys (see #558)
  • [readme] fix grammar (#550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

  • [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
  • [Deps] update @ljharb/eslint-config
  • [Dev Deps] update @ljharb/eslint-config, iconv-lite
  • [Tests] increase coverage
Commits
  • bb9379e v6.16.0
  • 62fd254 [Fix] stringify: serialize Date values when a filter is provided
  • 8859c37 [Fix] parse: enforce arrayLimit on comma groups under []= when `throwOn...
  • 8079adc [Tests] parse: remove a test that pinned []= comma groups escaping `array...
  • d56f48c [Fix] parse: flatten a collection appended to an overflowed array
  • e83d321 [Fix] utils: isBuffer: do not invoke a non-callable constructor.isBuffer
  • 7e87a07 [Dev Deps] update @ljharb/eslint-config, eslint
  • 9a76af2 [Dev Deps] update eslint, evalmd
  • 3a890d4 [Dev Deps] update eslint, evalmd
  • b433a9b [Fix] stringify: do not let allowEmptyArrays skip cycle detection (or dro...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.16.0.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.0...v6.16.0)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 2, 2026

@adesege adesege left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Benchmark

Details
Benchmark suite Current: f1c7c5c Previous: ccb3f17 Ratio
test/benchmarks/request-response.bench.ts > Request/Response > simple GET - 200 38923.24006266123 ops/sec (±1.16%) 44355.827899388205 ops/sec (±1.52%) 1.14
test/benchmarks/request-response.bench.ts > Request/Response > GET with route params - 200 42884.400240330964 ops/sec (±0.77%) 49077.55133303189 ops/sec (±1.07%) 1.14
test/benchmarks/request-response.bench.ts > Request/Response > POST with JSON body - 201 16568.810988986224 ops/sec (±1.09%) 24127.579263272528 ops/sec (±1.28%) 1.46
test/benchmarks/request-response.bench.ts > Request/Response > POST invalid body - validation error 4101.657831500404 ops/sec (±2.77%) 4332.798367697519 ops/sec (±3.08%) 1.06
test/benchmarks/request-response.bench.ts > Request/Response > GET unknown route - 404 6261.238470609869 ops/sec (±1.05%) 6877.491973422911 ops/sec (±1.38%) 1.10
src/__benchmarks__/application.bench.ts > Application - Bootstrap > constructor only 356739.9257980895 ops/sec (±0.70%) 367439.1967778971 ops/sec (±2.58%) 1.03
src/__benchmarks__/application.bench.ts > Application - Bootstrap > full initialize() 34969.76633202125 ops/sec (±3.79%) 40916.51636711715 ops/sec (±2.82%) 1.17
src/__benchmarks__/application.bench.ts > Application - Service Resolution > resolve service after bootstrap 38535.42050434821 ops/sec (±2.01%) 46221.77899438597 ops/sec (±1.51%) 1.20
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > initialize with 5 controllers (8 routes) 44445.50301038727 ops/sec (±0.71%) 47297.584538015675 ops/sec (±0.94%) 1.06
src/__benchmarks__/application.bench.ts > Application - Multi-Controller Bootstrap > resolve service after multi-controller bootstrap 43978.95479616074 ops/sec (±0.73%) 46712.398512126 ops/sec (±0.86%) 1.06
src/di/__benchmarks__/container.bench.ts > Container - Registration > register class provider 4313743.965490103 ops/sec (±1.66%) 3659523.004609583 ops/sec (±0.26%) 0.85
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerSingleton 4130464.289984628 ops/sec (±0.23%) 3674735.919157303 ops/sec (±0.23%) 0.89
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerValue 4701825.717885256 ops/sec (±1.68%) 3643329.0527346027 ops/sec (±0.97%) 0.77
src/di/__benchmarks__/container.bench.ts > Container - Registration > registerFactory 4637450.729340289 ops/sec (±2.13%) 3731349.291036125 ops/sec (±0.79%) 0.80
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve class token 1457297.845526371 ops/sec (±0.42%) 1231183.1036989056 ops/sec (±0.71%) 0.84
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve symbol token 1435175.2278755598 ops/sec (±1.46%) 1316018.4734202325 ops/sec (±0.72%) 0.92
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve value token 1973059.154849006 ops/sec (±1.57%) 1783899.5774658315 ops/sec (±0.30%) 0.90
src/di/__benchmarks__/container.bench.ts > Container - Resolution > resolve singleton token 1397708.6134737402 ops/sec (±0.42%) 1315930.5814242992 ops/sec (±0.55%) 0.94
src/di/__benchmarks__/container.bench.ts > Container - Resolution > isRegistered check 2081848.3012131348 ops/sec (±0.21%) 1806360.778904609 ops/sec (±0.19%) 0.87
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when().use().give().otherwise() 2541383.4764826945 ops/sec (±3.46%) 1989351.3462046375 ops/sec (±2.25%) 0.78
src/di/__benchmarks__/container.bench.ts > Container - Conditional Binding > when() with cached predicate 2452578.2145281923 ops/sec (±1.47%) 2077218.3049918814 ops/sec (±0.64%) 0.85
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register single module 1372388.8279799847 ops/sec (±0.71%) 1318623.2747570868 ops/sec (±0.43%) 0.96
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register 3-level module tree 707488.3388173971 ops/sec (±0.39%) 674368.8967327109 ops/sec (±0.61%) 0.95
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Registration > register dynamic module (forRoot) 1223330.6714631342 ops/sec (±0.38%) 1033574.8692689876 ops/sec (±0.46%) 0.84
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Initialization > initialize with lifecycle hooks 873314.7459198092 ops/sec (±0.54%) 861264.3797109328 ops/sec (±0.67%) 0.99
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllControllers 612273.9926529006 ops/sec (±2.52%) 601067.2979531069 ops/sec (±0.70%) 0.98
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllConsumers 627726.3666562346 ops/sec (±0.28%) 598005.5897686194 ops/sec (±2.06%) 0.95
src/module/__benchmarks__/module-registry.bench.ts > ModuleRegistry - Collection > getAllJobs 618271.6834444861 ops/sec (±0.42%) 606220.5693193878 ops/sec (±0.44%) 0.98
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register controller with 5 OpenAPI routes 18204.915132697337 ops/sec (±6.60%) 20659.201604495036 ops/sec (±7.81%) 1.13
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register single-route controller 85927.9592701447 ops/sec (±7.97%) 87549.06480088776 ops/sec (±9.59%) 1.02
src/router/__benchmarks__/route-registration.bench.ts > RouteRegistration - Configure > register multiple controllers 19359.707358664014 ops/sec (±6.28%) 20055.348642388202 ops/sec (±7.48%) 1.04
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 10 routes by specificity 335000.5789275192 ops/sec (±1.04%) 348297.84898624144 ops/sec (±1.02%) 1.04
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 50 routes by specificity 61866.885035000596 ops/sec (±0.32%) 66342.982298651 ops/sec (±0.49%) 1.07
src/router/__benchmarks__/route-registration.bench.ts > Route Sorting > sort 100 routes by specificity 29933.318298609447 ops/sec (±0.43%) 32949.193140155745 ops/sec (±0.54%) 1.10
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - static path 12456663.402061194 ops/sec (±0.18%) 12503091.774915366 ops/sec (±0.09%) 1.00
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - single param 1927849.0553576406 ops/sec (±1.66%) 2209847.5226742206 ops/sec (±1.46%) 1.15
src/router/__benchmarks__/route-registration.bench.ts > Param Extraction > extractParamNames - multiple params 1430391.3506036317 ops/sec (±0.36%) 1332989.981337998 ops/sec (±0.60%) 0.93

This comment was automatically generated by workflow using github-action-benchmark.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant