fix(dependencies): remove qs limitation (#6850)

Haroenv · web-flow · commit ca866878fb53 · 2025-12-31T10:06:00.000+01:00
* fix(dependencies): remove qs limitation Previously, we limited qs to versions < 6.10, because since that version the size of the package significantly increased. However, a vulnerability (GHSA-6rw7-vpxm-498p) relevant for server use cases causes us to need to bump the version past 6.14.1 allowed now. Fixes #6849 * patch parcel: parcel-bundler/parcel#10053
diff --git a/bundlesize.config.json b/bundlesize.config.json
@@ -10,27 +10,27 @@
     },
     {
       "path": "./packages/instantsearch.js/dist/instantsearch.production.min.js",
-      "maxSize": "91.5 kB"
+      "maxSize": "100 kB"
     },
     {
       "path": "./packages/instantsearch.js/dist/instantsearch.development.js",
-      "maxSize": "200 kB"
+      "maxSize": "210 kB"
     },
     {
       "path": "packages/react-instantsearch-core/dist/umd/ReactInstantSearchCore.min.js",
-      "maxSize": "53.75 kB"
+      "maxSize": "62 kB"
     },
     {
       "path": "packages/react-instantsearch/dist/umd/ReactInstantSearch.min.js",
-      "maxSize": "73 kB"
+      "maxSize": "82 kB"
     },
     {
       "path": "packages/vue-instantsearch/vue2/umd/index.js",
-      "maxSize": "70.25 kB"
+      "maxSize": "80 kB"
     },
     {
       "path": "packages/vue-instantsearch/vue3/umd/index.js",
-      "maxSize": "70.5 kB"
+      "maxSize": "80 kB"
     },
     {
       "path": "packages/vue-instantsearch/vue2/cjs/index.js",
diff --git a/examples/js/algolia-experiences/package.json b/examples/js/algolia-experiences/package.json
@@ -17,10 +17,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "targets": {
diff --git a/examples/js/calendar-widget/package.json b/examples/js/calendar-widget/package.json
@@ -16,9 +16,9 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0"
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3"
   },
   "@parcel/resolver-default": {
     "packageExports": true
diff --git a/examples/js/default-theme/package.json b/examples/js/default-theme/package.json
@@ -16,10 +16,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0"
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3"
   },
   "@parcel/resolver-default": {
     "packageExports": true
diff --git a/examples/js/e-commerce-umd/package.json b/examples/js/e-commerce-umd/package.json
@@ -15,10 +15,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "@parcel/resolver-default": {
diff --git a/examples/js/e-commerce/package.json b/examples/js/e-commerce/package.json
@@ -17,10 +17,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "@parcel/resolver-default": {
diff --git a/examples/js/getting-started/package.json b/examples/js/getting-started/package.json
@@ -17,10 +17,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0"
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3"
   },
   "@parcel/resolver-default": {
     "packageExports": true
diff --git a/examples/js/media/package.json b/examples/js/media/package.json
@@ -18,10 +18,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "@parcel/resolver-default": {
diff --git a/examples/js/query-suggestions/package.json b/examples/js/query-suggestions/package.json
@@ -17,10 +17,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0"
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3"
   },
   "@parcel/resolver-default": {
     "packageExports": true
diff --git a/examples/js/tourism/package.json b/examples/js/tourism/package.json
@@ -16,10 +16,10 @@
   },
   "devDependencies": {
     "@babel/core": "7.15.5",
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
-    "parcel": "2.10.0"
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
+    "parcel": "2.16.3"
   },
   "@parcel/resolver-default": {
     "packageExports": true
diff --git a/examples/react/default-theme/package.json b/examples/react/default-theme/package.json
@@ -19,11 +19,11 @@
     "react-instantsearch-core": "7.22.0"
   },
   "devDependencies": {
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
     "@types/react": "19.0.3",
-    "parcel": "2.10.0",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "@parcel/resolver-default": {
diff --git a/examples/react/e-commerce/package.json b/examples/react/e-commerce/package.json
@@ -21,11 +21,11 @@
     "react-instantsearch-core": "7.22.0"
   },
   "devDependencies": {
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
     "@types/react": "19.0.3",
-    "parcel": "2.10.0",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "@parcel/resolver-default": {
diff --git a/examples/react/getting-started/package.json b/examples/react/getting-started/package.json
@@ -18,11 +18,11 @@
     "react-instantsearch-core": "7.22.0"
   },
   "devDependencies": {
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
     "@types/react": "19.0.3",
-    "parcel": "2.10.0",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "@parcel/resolver-default": {
diff --git a/examples/react/query-suggestions/package.json b/examples/react/query-suggestions/package.json
@@ -18,11 +18,11 @@
     "react-instantsearch-core": "7.22.0"
   },
   "devDependencies": {
-    "@parcel/core": "2.10.0",
-    "@parcel/packager-raw-url": "2.10.0",
-    "@parcel/transformer-webmanifest": "2.10.0",
+    "@parcel/core": "2.16.3",
+    "@parcel/packager-raw-url": "2.16.3",
+    "@parcel/transformer-webmanifest": "2.16.3",
     "@types/react": "19.0.3",
-    "parcel": "2.10.0",
+    "parcel": "2.16.3",
     "typescript": "5.5.2"
   },
   "@parcel/resolver-default": {
diff --git a/examples/vue/ssr/package.json b/examples/vue/ssr/package.json
@@ -13,7 +13,7 @@
     "instantsearch-ui-components": "0.16.0",
     "instantsearch.css": "8.9.0",
     "instantsearch.js": "4.86.0",
-    "qs": "6.9.7",
+    "qs": "6.14.1",
     "vue": "2.7.14",
     "vue-instantsearch": "4.22.7",
     "vue-router": "^3.0.2",
diff --git a/packages/instantsearch-codemods/package.json b/packages/instantsearch-codemods/package.json
@@ -30,6 +30,6 @@
   "devDependencies": {
     "@codeshift/cli": "^0.15.6",
     "@types/jscodeshift": "^0.11.6",
-    "parcel": "2.10.0"
+    "parcel": "2.16.3"
   }
 }
diff --git a/packages/instantsearch.js/package.json b/packages/instantsearch.js/package.json
@@ -37,7 +37,7 @@
     "htm": "^3.0.0",
     "instantsearch-ui-components": "0.16.0",
     "preact": "^10.10.0",
-    "qs": "^6.5.1 < 6.10",
+    "qs": "^6.5.1",
     "react": ">= 0.14.0",
     "search-insights": "^2.17.2",
     "zod": "^3.25.76 || ^4",
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -10,27 +10,27 @@`
`10`	`10`	`},`
`11`	`11`	`{`
`12`	`12`	`"path": "./packages/instantsearch.js/dist/instantsearch.production.min.js",`
`13`		`- "maxSize": "91.5 kB"`
	`13`	`+ "maxSize": "100 kB"`
`14`	`14`	`},`
`15`	`15`	`{`
`16`	`16`	`"path": "./packages/instantsearch.js/dist/instantsearch.development.js",`
`17`		`- "maxSize": "200 kB"`
	`17`	`+ "maxSize": "210 kB"`
`18`	`18`	`},`
`19`	`19`	`{`
`20`	`20`	`"path": "packages/react-instantsearch-core/dist/umd/ReactInstantSearchCore.min.js",`
`21`		`- "maxSize": "53.75 kB"`
	`21`	`+ "maxSize": "62 kB"`
`22`	`22`	`},`
`23`	`23`	`{`
`24`	`24`	`"path": "packages/react-instantsearch/dist/umd/ReactInstantSearch.min.js",`
`25`		`- "maxSize": "73 kB"`
	`25`	`+ "maxSize": "82 kB"`
`26`	`26`	`},`
`27`	`27`	`{`
`28`	`28`	`"path": "packages/vue-instantsearch/vue2/umd/index.js",`
`29`		`- "maxSize": "70.25 kB"`
	`29`	`+ "maxSize": "80 kB"`
`30`	`30`	`},`
`31`	`31`	`{`
`32`	`32`	`"path": "packages/vue-instantsearch/vue3/umd/index.js",`
`33`		`- "maxSize": "70.5 kB"`
	`33`	`+ "maxSize": "80 kB"`
`34`	`34`	`},`
`35`	`35`	`{`
`36`	`36`	`"path": "packages/vue-instantsearch/vue2/cjs/index.js",`