Packages

qs

6.17.1 · 28 Oct 2026BSD-3-Clause214.6M / weekRepositorynpmAtom feed

Your version

6.16.1

14 Oct 2026Where it was published

6.17.1 is the newest release of 6.x.

In short

1 fixed15 changed6 internal

Security

Fixes 1 advisory that affected 6.16.0

Release note

  • parse: do not mutate an object input

  • stringify: stop re-encoding structural separator dots when encodeDotInKeys is set

  • stringify: arrayFormat: 'comma': pass the full encoder arguments with encodeValuesOnly

  • utils: encode + as %2B in iso-8859-1 mode so values round-trip

  • parse: Only convert top-level dots to brackets when allowDots is on

  • stringify: ignore inherited array format names

  • stringify: arrayFormat: 'comma': do not throw on elements with no callable toString

  • utils: merge: seed an overflow container's index from its own keys, not just the source

  • utils: merge: keep a strictMerge conflict container's index and arrayLimit correct

  • parse: only treat `` as array syntax when it ends the key

  • decode: skip decoders when there is no percent sign

  • utils: merge: apply arrayLimit to the two-element array built for colliding values

  • parse: bound the nesting added by repeated strictMerge conflicts (credit @Yeaseen)

  • Fix changelog indents

  • Set least-privilege cache-mode

  • Update @ljharb/eslint-config, eslint, tape