Skip to content

Bump qs and @google-cloud/functions-framework - #2

Merged
anthonypetersen merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8dfcc3b024
Sep 14, 2026
Merged

anthonypetersen merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8dfcc3b024

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •

Copy link
Copy Markdown
Contributor

Bumps qs to 6.16.0 and updates ancestor dependency @google-cloud/functions-framework. These dependencies need to be updated together.

Updates qs from 6.15.3 to 6.16.0

Changelog

Sourced from qs's changelog.

6.16.0

  • [New] stringify: add a depth option to bound recursion depth (default Infinity)
  • [Fix] stringify: serialize Date values when a filter is provided
  • [Fix] parse: enforce arrayLimit on comma groups under []= when throwOnLimitExceeded is set
  • [Fix] parse: flatten a collection appended to an overflowed array (#571)
  • [Fix] utils: isBuffer: do not invoke a non-callable constructor.isBuffer
  • [Fix] stringify: do not let allowEmptyArrays skip cycle detection (or drop own keys) on an empty array with own properties
  • [Fix] stringify: encode dots in a top-level key with a primitive value when encodeDotInKeys is set (#562)
  • [Docs] threat model: clarify stringify deep-nesting DoS is caller-bounded
  • [Docs] clarify arrayLimit is a representation threshold, not an element-count cap
  • [Tests] parse: remove a test that pinned []= comma groups escaping arrayLimit
  • [Tests] stringify: pin current encodeDotInKeys separator-dot behavior
  • [Dev Deps] update @ljharb/eslint-config, eslint
  • [Dev Deps] update eslint, evalmd
Commits
  • bb9379e v6.16.0
  • 62fd254 [Fix] stringify: serialize Date values when a filter is provided
  • 8859c37 [Fix] parse: enforce arrayLimit on comma groups under []= when `throwOn...
  • 8079adc [Tests] parse: remove a test that pinned []= comma groups escaping `array...
  • d56f48c [Fix] parse: flatten a collection appended to an overflowed array
  • e83d321 [Fix] utils: isBuffer: do not invoke a non-callable constructor.isBuffer
  • 7e87a07 [Dev Deps] update @ljharb/eslint-config, eslint
  • 9a76af2 [Dev Deps] update eslint, evalmd
  • 3a890d4 [Dev Deps] update eslint, evalmd
  • b433a9b [Fix] stringify: do not let allowEmptyArrays skip cycle detection (or dro...
  • Additional commits viewable in compare view

Updates @google-cloud/functions-framework from 3.5.1 to 5.0.5

Release notes

Sourced from @​google-cloud/functions-framework's releases.

v5.0.5

5.0.5 (2026-06-29)

Bug Fixes

v5.0.4

5.0.4 (2026-06-24)

Bug Fixes

  • decode only the viewed bytes of Uint8Array log data (#772) (8b780fc)

v5.0.3

5.0.3 (2026-06-22)

Bug Fixes

  • add typesVersions so testing module resolves under classic TypeScript moduleResolution (#770) (d1593c2)
  • deps: bump path-to-regexp from 0.1.12 to 0.1.13 in /docs/esm (#760) (5f58e79)
  • deps: bump qs, body-parser and express in /docs/esm (#761) (308a16e)

v5.0.2

5.0.2 (2026-02-18)

Bug Fixes

  • correct deprecated API usage and source comment typos (#741) (8d3ac85)
  • deps: bump qs from 6.14.1 to 6.15.0 (#739) (6c6b444)

v5.0.1

5.0.1 (2026-02-06)

Bug Fixes

v5.0.0

5.0.0 (2025-12-30)

⚠ BREAKING CHANGES

  • update dependency express to v5 (#726)

... (truncated)

Changelog

Sourced from @​google-cloud/functions-framework's changelog.

5.0.5 (2026-06-29)

Bug Fixes

5.0.4 (2026-06-24)

Bug Fixes

  • decode only the viewed bytes of Uint8Array log data (#772) (8b780fc)

5.0.3 (2026-06-22)

Bug Fixes

  • add typesVersions so testing module resolves under classic TypeScript moduleResolution (#770) (d1593c2)
  • deps: bump path-to-regexp from 0.1.12 to 0.1.13 in /docs/esm (#760) (5f58e79)
  • deps: bump qs, body-parser and express in /docs/esm (#761) (308a16e)

5.0.2 (2026-02-18)

Bug Fixes

  • correct deprecated API usage and source comment typos (#741) (8d3ac85)
  • deps: bump qs from 6.14.1 to 6.15.0 (#739) (6c6b444)

5.0.1 (2026-02-06)

Bug Fixes

5.0.0 (2025-12-30)

⚠ BREAKING CHANGES

  • update dependency express to v5 (#726)

Miscellaneous Chores

4.0.1 (2025-11-20)

... (truncated)

Commits
  • f39924d chore(main): release 5.0.5 (#775)
  • 85344d0 fix(deps): Update dependencies (#774)
  • 817c233 chore(main): release 5.0.4 (#773)
  • 8b780fc fix: decode only the viewed bytes of Uint8Array log data (#772)
  • 7d08f3b chore: correct SCM path prefix for GoB (#771)
  • f1fa1ab chore(main): release 5.0.3 (#769)
  • 2115956 chore(deps): update dependency pack-n-play to v4 (#757)
  • edc6ed1 chore(deps): update dependency @​types/supertest to v7 (#753)
  • d1593c2 fix: add typesVersions so testing module resolves under classic TypeScript mo...
  • 5f58e79 fix(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /docs/esm (#760)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
Bumps [qs](https://github.com/ljharb/qs) to 6.16.0 and updates ancestor dependency [@google-cloud/functions-framework](https://github.com/GoogleCloudPlatform/functions-framework-nodejs). These dependencies need to be updated together.


Updates `qs` from 6.15.3 to 6.16.0
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.15.3...v6.16.0)

Updates `@google-cloud/functions-framework` from 3.5.1 to 5.0.5
- [Release notes](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/functions-framework-nodejs/blob/main/CHANGELOG.md)
- [Commits](GoogleCloudPlatform/functions-framework-nodejs@v3.5.1...v5.0.5)

---
updated-dependencies:
- dependency-name: "@google-cloud/functions-framework"
  dependency-version: 5.0.5
  dependency-type: direct:development
- dependency-name: qs
  dependency-version: 6.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-8dfcc3b024 branch from fb458f2 to 070d395 Compare September 4, 2026 16:56
@anthonypetersen
anthonypetersen merged commit 0780040 into main Sep 14, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-8dfcc3b024 branch September 14, 2026 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant