Bump qs from 6.15.0 to 6.15.2

[dependabot]

Bumps qs from 6.15.0 to 6.15.2.

Changelog

Sourced from qs's changelog.

6.15.2

• [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
• [Fix] stringify: use configured delimiter after charsetSentinel (#555)
• [Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)
• [Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)
• [Fix] parse: handle nested bracket groups and add regression tests (#530)
• [readme] fix grammar (#550)
• [Dev Deps] update @ljharb/eslint-config
• [Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

• [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
• [Deps] update @ljharb/eslint-config
• [Dev Deps] update @ljharb/eslint-config, iconv-lite
• [Tests] increase coverage

Commits

• 9aca407 v6.15.2
• 5e33d33 [Dev Deps] update @ljharb/eslint-config
• 21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
• a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
• e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
• 0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
• 3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
• 96755ab [readme] fix grammar
• a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
• 3f5e1c5 v6.15.1
• Additional commits viewable in compare view

[github-actions]

npm Package Versions

Warning

The following packages have changed files but no version bump:

Package	Version	Changed files
kolibri	0.18.0	1

If these changes affect published code, consider bumping the version.

[rtibblesbot]

Dependency Update Review

Package: qs 6.15.0 → 6.15.2
Semver risk: Patch
Dependency type: Production (dependencies in packages/kolibri/package.json)
CI status: All completed checks passing; frontend tests and linting still in progress

Changelog Analysis

Sources consulted:

• PR body (Dependabot-extracted changelog)
• CHANGELOG.md

Breaking changes: None

Security fixes: None

Notable fixes in 6.15.1–6.15.2:

• stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder
• stringify: use configured delimiter after charsetSentinel
• stringify: apply formatter to encoded key under strictNullHandling
• parse: handle nested bracket groups
• parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently dropped all parameters

Compatibility Assessment

Kolibri uses qs.stringify in two places:

• packages/kolibri/utils/baseClient.js: uses qs.stringify(params, { arrayFormat: 'comma' }) — 6.15.2 directly fixes a crash in this exact usage when params contain null/undefined values
• packages/kolibri/client.js: plain qs.stringify(options.data)

No breaking changes. No peer dependency changes. No code migration required. The lockfile also includes minor transitive bumps to caniuse-lite, baseline-browser-mapping, electron-to-chromium, and node-releases — all routine browser-compat-data updates.

Recommendation

APPROVE — patch-only, all fixes, no breaking changes. The 6.15.2 crash fix for arrayFormat: 'comma' directly applies to Kolibri's usage in baseClient.js.

---

@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly

How was this generated?

Reviewed the pull request diff checking for:

• Correctness: bugs, edge cases, undocumented behavior, resource leaks, hardcoded values
• Design: unnecessary complexity, naming, readability, comment accuracy, redundant state
• Architecture: duplicated concerns, minimal interfaces, composition over inheritance
• Testing: behavior-based assertions, mocks only at hard boundaries, accurate coverage
• Completeness: missing dependencies, unupdated usages, i18n, accessibility, security
• Principles: DRY (same reason to change), SRP, Rule of Three (no premature abstraction)
• Checked CI status and linked issue acceptance criteria
• For UI changes: inspected screenshots for layout, visual completeness, and consistency

[github-actions]

Build Artifacts

Asset type	Download link
PEX file	kolibri-0.19.5.dev0_git.20260529174742.pex
Windows Installer (EXE)	kolibri-0.19.5.dev0+git.20260529174742-windows-setup-unsigned.exe
Debian Package	kolibri_0.19.5.dev0+git.20260529174742-0ubuntu1_all.deb
Mac Installer (DMG)	kolibri-0.19.5.dev0+git.20260529174742.dmg
Android Package (APK)	kolibri-0.19.5.dev0+git.20260529174742-0.1.10-debug.apk
Raspberry Pi Image	kolibri-pi-image-0.19.5.dev0+git.20260529174742.zip
TAR file	kolibri-0.19.5.dev0+git.20260529174742.tar.gz
WHL file	kolibri-0.19.5.dev0+git.20260529174742-py2.py3-none-any.whl

Smoke test screenshot

Download screenshot

[rtibbles]

No concerns from changelog, checks pass.