Bumps [qs](https://github.com/ljharb/qs) from 6.13.0 to 6.13.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's changelog</a>.</em></p> <blockquote> <h2><strong>6.13.1</strong></h2> <ul> <li>[Fix] <code>stringify</code>: avoid a crash when a <code>filter</code> key is <code>null</code></li> <li>[Fix] <code>utils.merge</code>: functions should not be stringified into keys</li> <li>[Fix] <code>parse</code>: avoid a crash with interpretNumericEntities: true, comma: true, and iso charset</li> <li>[Fix] <code>stringify</code>: ensure a non-string <code>filter</code> does not crash</li> <li>[Refactor] use <code>__proto__</code> syntax instead of <code>Object.create</code> for null objects</li> <li>[Refactor] misc cleanup</li> <li>[Tests] <code>utils.merge</code>: add some coverage</li> <li>[Tests] fix a test case</li> <li>[actions] split out node 10-20, and 20+</li> <li>[Dev Deps] update <code>es-value-fixtures</code>, <code>mock-property</code>, <code>object-inspect</code>, <code>tape</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/qs/commit/f1ee0376c1dfd06606520f3268ee0c5f3aaece65"><code>f1ee037</code></a> v6.13.1</li> <li><a href="https://github.com/ljharb/qs/commit/afd20d014f6885a8ccc4fc5b86d127a698851f0f"><code>afd20d0</code></a> [Dev Deps] update <code>object-inspect</code></li> <li><a href="https://github.com/ljharb/qs/commit/d185cee45f17f1a69705d034eb370dbbbc9fba2d"><code>d185cee</code></a> [actions] split out node 10-20, and 20+</li> <li><a href="https://github.com/ljharb/qs/commit/4cf55677ba561ef915a8cfb0b30e1a0ae3b4aeca"><code>4cf5567</code></a> [Dev Deps] update <code>es-value-fixtures</code>, <code>tape</code></li> <li><a href="https://github.com/ljharb/qs/commit/3c8a6f5a1e8d2c4772fd733c7ca1a28e92498fd7"><code>3c8a6f5</code></a> [Refactor] use <code>__proto__</code> syntax instead of <code>Object.create</code> for null objects</li> <li><a href="https://github.com/ljharb/qs/commit/96f4d93e171ada73cb466a5abe3ac23c9ed4217a"><code>96f4d93</code></a> [Fix] <code>stringify</code>: avoid a crash when a <code>filter</code> key is <code>null</code></li> <li><a href="https://github.com/ljharb/qs/commit/aa1f0a8432a7a918c36486e8b2334ef12ff4f46b"><code>aa1f0a8</code></a> [Fix] <code>utils.merge</code>: functions should not be stringified into keys</li> <li><a href="https://github.com/ljharb/qs/commit/2a548a95e7409e9fbbd1f0b972aad57f25764cae"><code>2a548a9</code></a> [Tests] <code>utils.merge</code>: add some coverage</li> <li><a href="https://github.com/ljharb/qs/commit/3e750c1ac6bb7ea328b9c3183d867902dce43c95"><code>3e750c1</code></a> [Refactor] misc cleanup</li> <li><a href="https://github.com/ljharb/qs/commit/ca55d0f8653f88d92c78cbdbb7d590a30ab71fb3"><code>ca55d0f</code></a> [Fix] <code>parse</code>: avoid a crash with interpretNumericEntities: true, comma: true...</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/qs/compare/v6.13.0...v6.13.1">compare view</a></li> </ul> </details> <br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=qs&package-manager=npm_and_yarn&previous-version=6.13.0&new-version=6.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> You can view, comment on, or merge this pull request online at: https://github.com/openstreetmap/openstreetmap-website/pull/5341 -- Commit Summary -- * Bump qs from 6.13.0 to 6.13.1 -- File Changes -- M yarn.lock (6) -- Patch Links -- https://github.com/openstreetmap/openstreetmap-website/pull/5341.patch https://github.com/openstreetmap/openstreetmap-website/pull/5341.diff -- Reply to this email directly or view it on GitHub: https://github.com/openstreetmap/openstreetmap-website/pull/5341 You are receiving this because you are subscribed to this thread. Message ID: <openstreetmap/openstreetmap-website/pull/5...@github.com>
_______________________________________________ rails-dev mailing list rails-dev@openstreetmap.org https://lists.openstreetmap.org/listinfo/rails-dev