2.6.2

Superseded by 2.6.3, which adds the qs 6.16.1 security fix.

Security patch release. Fixes critical and high Dependabot alerts in axios, js-yaml and transitive dependencies (#69). No API changes.