Skip to content

chore(deps): update dependency qs to v6.15.2#5941

Merged
thomhurst merged 1 commit into
mainfrom
renovate/qs-6.x
May 17, 2026
Merged

chore(deps): update dependency qs to v6.15.2#5941
thomhurst merged 1 commit into
mainfrom
renovate/qs-6.x

Conversation

@thomhurst
Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Type Update Change
qs resolutions patch 6.15.16.15.2

Release Notes

ljharb/qs (qs)

v6.15.2

Compare Source

  • [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
  • [Fix] stringify: use configured delimiter after charsetSentinel (#​555)
  • [Fix] stringify: apply formatter to encoded key under strictNullHandling (#​554)
  • [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#​551)
  • [Fix] parse: handle nested bracket groups and add regression tests (#​530)
  • [readme] fix grammar (#​550)
  • [Dev Deps] update @ljharb/eslint-config
  • [Tests] add regression tests for keys containing percent-encoded bracket text

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@thomhurst thomhurst added dependencies Pull requests that update a dependency file PATCH renovate-bot labels May 16, 2026
@thomhurst thomhurst enabled auto-merge (squash) May 16, 2026 23:23
@codacy-production
Copy link
Copy Markdown

codacy-production Bot commented May 16, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Copy link
Copy Markdown
Contributor

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Update Review: qs 6.15.1 → 6.15.2

This is a straightforward patch-level dependency update generated by Renovate, scoped entirely to docs/package.json and docs/yarn.lock.

Change summary:

  • qs bumped from 6.15.16.15.2 (patch)
  • Only affects the documentation site dependencies, no impact on TUnit's core .NET codebase

What's in qs 6.15.2:

  • Bug fixes for stringify when using arrayFormat: 'comma' + encodeValuesOnly (previously crashed on null/undefined entries)
  • Bug fixes for stringify delimiter handling after charsetSentinel
  • Bug fix for stringify formatter application under strictNullHandling
  • Bug fix for parse nested bracket group handling

Assessment: All changes are pure bug fixes in the patch release. No breaking changes. The lockfile hash and integrity SHA are properly updated. The qs@~6.14.0 range alias is preserved correctly in the lockfile.

This is safe to merge as-is. Auto-merge is already enabled.

Copy link
Copy Markdown
Contributor

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency Update Review: qs 6.15.1 → 6.15.2

This is a straightforward patch-level dependency update in the docs site (docs/package.json and docs/yarn.lock). No concerns.

What changed: The qs query-string library received four bug fixes in stringify/parse (crash fixes for null/undefined entries, delimiter and formatter handling) plus a regression test for bracket group parsing.

Assessment:

  • Scope is correctly limited to docs/ — no impact on TUnit's core .NET packages or test infrastructure.
  • All changes are bug fixes, no API surface changes (patch semver).
  • Lock file checksum and resolved URL updated consistently.
  • Auto-merge is appropriately enabled for this kind of Renovate bot patch bump.

✅ LGTM — safe to merge.

Copy link
Copy Markdown
Contributor

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-review: qs 6.15.1 → 6.15.2

No changes since the previous reviews — this is the same patch-level bump of qs in docs/package.json and docs/yarn.lock.

Previous reviews addressed: Both prior reviews confirmed this is safe to merge (pure bug fixes, docs-only scope, no API changes). Nothing new to flag.

✅ Still LGTM — auto-merge can proceed.

Copy link
Copy Markdown
Contributor

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-review: qs 6.15.1 → 6.15.2

No changes since the prior three reviews. This remains a patch-level bump of the qs query-string library scoped entirely to docs/package.json and docs/yarn.lock — no impact on TUnit's core .NET codebase.

All prior findings were addressed: scope is correct, the lockfile checksum and resolved URL are consistent, and all changes in qs 6.15.2 are bug fixes (no API surface changes).

✅ LGTM — auto-merge can proceed.

Copy link
Copy Markdown
Contributor

@claude claude Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Re-review: qs 6.15.1 → 6.15.2

No changes since the prior four reviews. This is an automated Renovate patch bump of the qs query-string library, scoped entirely to docs/package.json and docs/yarn.lock — no impact on TUnit's .NET core or test infrastructure.

All previous review findings remain valid:

  • Pure bug-fix release (stringify crash fixes, parse regression fix — no API changes)
  • Lockfile checksum and resolved URL updated consistently
  • Auto-merge correctly enabled

✅ LGTM — safe to merge.

This was referenced May 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file PATCH renovate-bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants