[Snyk] Security upgrade qs from 6.6.0 to 6.6.1

[shahinalzahrani]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-QS-3153490	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: qs

The new version differs by 25 commits.

• 4cc653c v6.6.1
• 5a8c870 [meta] do not publish workflow files
• 7320525 [Fix] `parse`: ignore `__proto__` keys (#428)
• 65c669e [Robustness] `stringify`: avoid relying on a global `undefined` (#427)
• 6024134 [readme] remove travis badge; add github actions/codecov badges; update URLs
• 33b27f4 [meta] fix README.md (#399)
• 54530e2 [actions] backport actions from main
• 8e8e1ef Clean up license text so it’s properly detected as BSD-3-Clause
• 16148bd add FUNDING.yml
• 1e7aa19 [Refactor] `formats`: tiny bit of cleanup.
• 0fab4eb [Fix] fix for an impossible situation: when the formatter is called with a non-string value
• 0a7c131 [Dev Deps] backport from main
• 8bb6271 [Tests] fix Buffer tests to work in node < 4.5 and node < 5.10
• 3189e58 [Refactor] `utils`: `isBuffer`: small tweak; add tests
• b888304 [Robustness] `stringify`: cache `Object.prototype.hasOwnProperty`
• 75a186c [Tests] always use `String(x)` over `x.toString()`
• a6070be [Fix] `utils.merge`: avoid a crash with a null target and an array source
• 4d2cc40 [Refactor]: `stringify`/`utils`: cache `Array.isArray`
• 0762294 [Refactor] `utils`: reduce observable [[Get]]s
• 340ac6e [Fix]` `utils.merge`: avoid a crash with a null target and a truthy non-array source
• 04ec477 [Refactor] use cached `Array.isArray`
• 8caafe6 [Refactor] `parse`/`stringify`: make a function to normalize the options
• b7be5a1 Clarify the need for "arrayLimit" option
• 2b9b41b Fixes typo in CHANGELOG.md

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution