Packages

qs

6.17.1 · 28 Oct 2026BSD-3-Clause214.6M / weekRepositorynpmAtom feed

Upgrading qs from 6.9.9 to 6.17.1

39 releases in betweennotes for 20

Other targets from 6.9.9Clears its 4 advisories6.16.1
?
changes to make
4
advisories fixed
4+
new
10+
fixes

Counted from 20 of 39 release notes. Advisories are counted from the advisory database, in full.

Security

Release by release

  1. 6.17.1nothing new or fixed in the note

  2. 6.17.0

    27 Oct 20261 new · 2 fixes
    • new

      Add changelog acknowledgement

    • fixed

      Fix indentation

    • fixed

      Fix changelog indents

  3. 6.15.3 – 6.16.25 releases, nothing new or fixed in the notes

  4. 6.15.2

    16 May 20261 fix
    • fixed

      Fix grammar

  5. 6.14.3 – 6.15.13 releases, nothing new or fixed in the notes

  6. 6.14.2

    11 Feb 20262 fixes
    • fixed

      Avoid .push, use void

    • fixed

      Fix rebase workflow permissions

  7. 6.14.1

    29 Dec 20252 new · 1 fix
    • new

      Add threat model

    • new

      Add workflow permissions

    • fixed

      Ensure arrayLimit applies to `` notation as well

  8. 6.14.0

    14 Jan 20251 fix
    • fixed

      Fix changelog formatting bug

100 other lines we could not sort, mostly version bumps
  • parse: interpretNumericEntities: decode code points above U+FFFF as surrogate pairs

    6.17.1
  • parse: respect plainObjects for `` with parseArrays: false

    6.17.1
  • utils: merge: count the elements of a sparse array against arrayLimit, not its holes

    6.17.1
  • parse: guard bracket-wrapped prototype keys at depth 0

    6.17.1
  • parse: extract wrapping-bracket stripping helper

    6.17.1
  • Document that depth: 0 and depth: false keep keys flat

    6.17.1
  • stringify: add WHATWG format

    6.17.0
  • stringify: do not sort the caller's filter array in place

    6.17.0
  • parse: copy an own __proto__ key as data

    6.17.0
  • parse: decode percent-encoded dots case-insensitively

    6.17.0

37 internal lines (docs, tests, tooling) left out.