From 121f826f24872a8a411aeb3df6a6933cc1cee846 Mon Sep 17 00:00:00 2001 From: Drew Stone Date: Thu, 3 Sep 2026 13:23:11 -0700 Subject: [PATCH 1/3] fix(deps): resolve open Dependabot alerts --- package.json | 3 ++- yarn.lock | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index 29bcbd3f3..cfae97e79 100644 --- a/package.json +++ b/package.json @@ -75,7 +75,8 @@ "ws@npm:8.18.0": "npm:8.21.3", "ws@npm:8.18.3": "npm:8.21.3", "ws@npm:8.20.1": "npm:8.21.3", - "ws@npm:~8.17.1": "npm:8.21.3" + "ws@npm:~8.17.1": "npm:8.21.3", + "qs": ">=6.16.0" }, "dependencies": { "@bigmi/react": "^0.6.5", diff --git a/yarn.lock b/yarn.lock index a6fe7d2d5..108f59dd5 100644 --- a/yarn.lock +++ b/yarn.lock @@ -31935,7 +31935,7 @@ __metadata: languageName: node linkType: hard -"qs@npm:^6.12.3, qs@npm:^6.4.0": +"qs@npm:>=6.16.0": version: 6.16.0 resolution: "qs@npm:6.16.0" dependencies: From dbd206914f8f2ba21fe69b6d01520a3a468dfdc1 Mon Sep 17 00:00:00 2001 From: Drew Stone Date: Thu, 3 Sep 2026 13:26:28 -0700 Subject: [PATCH 2/3] fix(deps): pin the express qs descriptor to 6.16.0 --- package.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package.json b/package.json index cfae97e79..852c2b5d2 100644 --- a/package.json +++ b/package.json @@ -76,7 +76,8 @@ "ws@npm:8.18.3": "npm:8.21.3", "ws@npm:8.20.1": "npm:8.21.3", "ws@npm:~8.17.1": "npm:8.21.3", - "qs": ">=6.16.0" + "qs": ">=6.16.0", + "qs@npm:6.15.2": "6.16.0" }, "dependencies": { "@bigmi/react": "^0.6.5", From fa36594da68a8434b1e542c5e0f69dcf01e3dc44 Mon Sep 17 00:00:00 2001 From: Drew Stone Date: Thu, 3 Sep 2026 13:28:47 -0700 Subject: [PATCH 3/3] fix(deps): map the original qs@6.13.0 descriptor to 6.16.0 --- package.json | 5 ++--- yarn.lock | 11 +---------- 2 files changed, 3 insertions(+), 13 deletions(-) diff --git a/package.json b/package.json index 852c2b5d2..02efb4de5 100644 --- a/package.json +++ b/package.json @@ -65,7 +65,7 @@ "lodash@npm:~4.17.15": "npm:4.18.1", "postcss@npm:8.4.49": "npm:8.5.26", "prismjs@npm:~1.27.0": "npm:1.30.0", - "qs@npm:6.13.0": "npm:6.15.2", + "qs@npm:6.13.0": "npm:6.16.0", "shell-quote@npm:1.8.4": "npm:1.10.0", "tmp@npm:^0.0.33": "npm:0.2.7", "uuid@npm:8.3.2": "npm:11.1.1", @@ -76,8 +76,7 @@ "ws@npm:8.18.3": "npm:8.21.3", "ws@npm:8.20.1": "npm:8.21.3", "ws@npm:~8.17.1": "npm:8.21.3", - "qs": ">=6.16.0", - "qs@npm:6.15.2": "6.16.0" + "qs": ">=6.16.0" }, "dependencies": { "@bigmi/react": "^0.6.5", diff --git a/yarn.lock b/yarn.lock index 108f59dd5..bb96580ae 100644 --- a/yarn.lock +++ b/yarn.lock @@ -31926,16 +31926,7 @@ __metadata: languageName: node linkType: hard -"qs@npm:6.15.2": - version: 6.15.2 - resolution: "qs@npm:6.15.2" - dependencies: - side-channel: "npm:^1.1.0" - checksum: 10c0/e6fd5f6f0aab06d480fe9ab15cebfc4ce4235303e2f91dc69a8f7f4df1e668a61c11d1cfbabacf4295cbbeb7b670ed23db45307480726259761f98e5695e93a7 - languageName: node - linkType: hard - -"qs@npm:>=6.16.0": +"qs@npm:6.16.0, qs@npm:>=6.16.0": version: 6.16.0 resolution: "qs@npm:6.16.0" dependencies: