chore(templates/angular): bump qs, body-parser and express in /templates/angular by dependabot[bot] · Pull Request #326 · khaneliman/khanelinix

dependabot · 2026-05-22T21:53:33Z

Bumps qs, body-parser and express. These dependencies needed to be updated together.
Updates qs from 6.15.0 to 6.15.2

Changelog

6.15.2

[Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + encodeValuesOnly instead of crashing in encoder

[Fix] stringify: use configured delimiter after charsetSentinel (#555)

[Fix] stringify: apply formatter to encoded key under strictNullHandling (#554)

[Fix] stringify: skip null/undefined filter-array entries instead of crashing in encoder (#551)

[Fix] parse: handle nested bracket groups and add regression tests (#530)

[readme] fix grammar (#550)

[Dev Deps] update @ljharb/eslint-config

[Tests] add regression tests for keys containing percent-encoded bracket text

6.15.1

[Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters

[Deps] update @ljharb/eslint-config

[Dev Deps] update @ljharb/eslint-config, iconv-lite

[Tests] increase coverage

Commits

9aca407 v6.15.2
5e33d33 [Dev Deps] update @ljharb/eslint-config
21f80b3 [Fix] stringify: skip null/undefined entries in arrayFormat: 'comma' + `e...
a0a81ea [Fix] stringify: use configured delimiter after charsetSentinel
e3062f7 [Fix] stringify: apply formatter to encoded key under strictNullHandling
0c180a4 [Fix] stringify: skip null/undefined filter-array entries instead of crashi...
3a8b94a [Tests] add regression tests for keys containing percent-encoded bracket text
96755ab [readme] fix grammar
a419ce5 [Fix] parse: handle nested bracket groups and add regression tests
3f5e1c5 v6.15.1
Additional commits viewable in compare view

Updates body-parser from 1.20.3 to 1.20.5

Release notes

Sourced from body-parser's releases.

v1.20.5

What's Changed

The reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (> 100) on qs@6.14.2+. (expressjs/body-parser#716)

refactor(json): simplify strict mode error string construction by @jonchurch in expressjs/body-parser#692

fix: correct off-by-one error in parameterCount by @abhu85 in expressjs/body-parser#716

deps(qs): bump qs to 6.15.1 by @jonchurch in expressjs/body-parser#722

Release: 1.20.5 by @jonchurch in expressjs/body-parser#721

New Contributors

@abhu85 made their first contribution in expressjs/body-parser#716

Special thanks to triager @krzysdz for keeping this on our radar and effectively triaging the specific issue!

Full Changelog: expressjs/body-parser@1.20.4...1.20.5

1.20.4

What's Changed

Remove redundant depth check by @blakeembrey in expressjs/body-parser#538

ci: add support for Node.js v23 by @Phillip9587 in expressjs/body-parser#553

ci: restore CI for 1.x branch by @bjohansebas in expressjs/body-parser#665

deps: qs@^6.14.0 by @bjohansebas in expressjs/body-parser#664

deps: use tilde notation and update certain dependencies by @Phillip9587 in expressjs/body-parser#668

chore: remove SECURITY.md by @Phillip9587 in expressjs/body-parser#669

ci: add CodeQL (SAST) by @Phillip9587 in expressjs/body-parser#670

Release: 1.20.4 by @UlisesGascon in expressjs/body-parser#672

Full Changelog: expressjs/body-parser@1.20.3...1.20.4

Changelog

Sourced from body-parser's changelog.

1.20.5 / 2026-04-24

refactor(json): simplify strict mode error string construction

fix: extended urlencoded parsing of arrays with >100 elements (#716)

deps: qs@~6.15.1

1.20.4 / 2025-12-01

deps: qs@~6.14.0

deps: use tilde notation for dependencies

deps: http-errors@~2.0.1

deps: raw-body@~2.5.3

Commits

0defdbe release(patch): 1.20.5
cd0e7a0 deps(qs): bump qs to 6.15.1
6f24d7e fix: correct off-by-one error in parameterCount (#716)
b849bd5 deps: qs@~6.14.1 (#690)
2c55e2f refactor(json): simplify strict mode error string construction (#692)
7db202c 1.20.4 (#672)
d8f8adb ci: add CodeQL (SAST) (#670)
6d133c1 chore: remove SECURITY.md (#669)
fcd1535 deps: use tilde notation and update certain dependencies (#668)
ec5fa29 deps: qs@~6.14.0 (#664)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for body-parser since your current version.

Updates express from 4.22.1 to 4.22.2

Release notes

Sourced from express's releases.

v4.22.2

What's Changed

fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)

This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.

deps: qs@~6.15.1

deps: body-parser@~1.20.5

New Contributors

@suuuuuuminnnnnn made their first contribution in expressjs/express#7021

@SAY-5 made their first contribution in expressjs/express#7181

Full Changelog: expressjs/express@v4.22.1...v4.22.2

Changelog

Sourced from express's changelog.

4.22.2 / 2026-05-011

fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)

This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.

deps: qs@~6.15.1

deps: body-parser@~1.20.5

Commits

df0abc9 4.22.2
836d366 4.x update qs to 6.15.1, body-parser 1.20.5 (#7224)
8d09bfe fix: restore array parsing for req.query repeated keys (#7181)
d39e8ad deps: body-parser@~1.20.4 (#7021)
efe85d9 deps: qs@^6.14.1 (#6972)
f62378e 📝 add note to history
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Disable Home Manager's nh clean timer when the integrated system config already enables services.fast-nix-gc. This keeps nh available for switching while avoiding duplicate automatic garbage collection on NixOS hosts.

Expose nix-fast-build through flake apps for checks and packages so repo validation can use parallel evaluation and build orchestration without replacing switch or activation workflows.

Pass explicit TimeoutStopSec values to UWSM-launched app scopes so persistent desktop apps do not inherit the 90 second stop timeout during reboot. Also force Vicinae to stop its full control group with a short timeout because its upstream service only kills the main process.

Starting to annoy with recent changes and lots of apps requesting focus.

Replace the Playwright skill wrapper's npx dependency with a Nix-provided playwright binary from playwright-test. Update the skill docs to route agents through the wrapper instead of asking for Node/npm or a global npm install.

Forgot to actually disable the systemd service.

Launch skhd-stable directly through Home Manager's launchd wrapper and only refresh the copied binary when its contents change. This keeps macOS Accessibility tied to the stable shim path without adding a nested shell wrapper.

Launch yabai through a copied yabai-stable binary so Accessibility permissions are not tied to changing Nix store paths. Regenerate the launch arguments with the existing yabai config file behavior preserved.

Add a Darwin activation cleanup for path-based Accessibility permissions. It removes invalid /nix/store clients and refreshes stale skhd-stable/yabai-stable rows when their code identity no longer matches the copied binary.

Switch to service to resolve issue with systemd slice not working all of a sudden.

Bumps [qs](https://github.com/ljharb/qs), [body-parser](https://github.com/expressjs/body-parser) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together. Updates `qs` from 6.15.0 to 6.15.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.15.0...v6.15.2) Updates `body-parser` from 1.20.3 to 1.20.5 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/1.20.5/HISTORY.md) - [Commits](expressjs/body-parser@1.20.3...1.20.5) Updates `express` from 4.22.1 to 4.22.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md) - [Commits](expressjs/express@v4.22.1...v4.22.2) --- updated-dependencies: - dependency-name: qs dependency-version: 6.15.2 dependency-type: indirect - dependency-name: body-parser dependency-version: 1.20.5 dependency-type: indirect - dependency-name: express dependency-version: 4.22.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

khaneliman and others added 14 commits May 20, 2026 23:04

fix(nh): defer clean timer to fast gc

1f7287f

Disable Home Manager's nh clean timer when the integrated system config already enables services.fast-nix-gc. This keeps nh available for switching while avoiding duplicate automatic garbage collection on NixOS hosts.

feat(flake): add fast build apps

522cfed

Expose nix-fast-build through flake apps for checks and packages so repo validation can use parallel evaluation and build orchestration without replacing switch or activation workflows.

refactor(hyprland)!: disable focus on activate

f16d7e4

Starting to annoy with recent changes and lots of apps requesting focus.

chore(flake): lock update

0b5b543

fix(ai-tools): use nix playwright wrapper

d612f59

Replace the Playwright skill wrapper's npx dependency with a Nix-provided playwright binary from playwright-test. Update the skill docs to route agents through the wrapper instead of asking for Node/npm or a global npm install.

fix(thunderbird): disable birdtray

4e47385

Forgot to actually disable the systemd service.

chore(flake): lock update

c42725d

fix(skhd): use stable accessibility shim

9d681d6

Launch skhd-stable directly through Home Manager's launchd wrapper and only refresh the copied binary when its contents change. This keeps macOS Accessibility tied to the stable shim path without adding a nested shell wrapper.

fix(yabai): use stable accessibility shim

229cbb7

Launch yabai through a copied yabai-stable binary so Accessibility permissions are not tied to changing Nix store paths. Regenerate the launch arguments with the existing yabai config file behavior preserved.

fix(tcc): prune stale accessibility entries

9b5dcfa

Add a Darwin activation cleanup for path-based Accessibility permissions. It removes invalid /nix/store clients and refreshes stale skhd-stable/yabai-stable rows when their code identity no longer matches the copied binary.

fix(hyprland): fix steam startup issue

5a8dbc6

Switch to service to resolve issue with systemd slice not working all of a sudden.

fixup! chore(flake): lock update

c9c777c

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 22, 2026

dependabot Bot requested a review from khaneliman as a code owner May 22, 2026 21:53

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 22, 2026

khaneliman force-pushed the main branch 11 times, most recently from 1f7780f to 308a1af Compare May 30, 2026 01:46

khaneliman force-pushed the main branch 3 times, most recently from b283788 to 09d3b39 Compare May 31, 2026 02:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(templates/angular): bump qs, body-parser and express in /templates/angular#326

chore(templates/angular): bump qs, body-parser and express in /templates/angular#326
dependabot[bot] wants to merge 14 commits into
mainfrom
dependabot/npm_and_yarn/templates/angular/multi-62d2111253

dependabot Bot commented on behalf of github May 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 22, 2026

6.15.2

6.15.1

v1.20.5

What's Changed

New Contributors

1.20.4

What's Changed

1.20.5 / 2026-04-24

1.20.4 / 2025-12-01

v4.22.2

What's Changed

New Contributors

4.22.2 / 2026-05-011

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant