fix(deps): upgrade qs to 6.14.1 to fix CVE-2025-15284

[rocketstack-matt]

Resolves https://github.com/finos/architecture-as-code/security/dependabot/128

Type of Change

• 🐛 Bug fix (non-breaking change which fixes an issue)
• ✨ New feature (non-breaking change which adds functionality)
• 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)
• 📚 Documentation update
• 🎨 Code style/formatting changes
• ♻️ Refactoring (no functional changes)
• ⚡ Performance improvements
• ✅ Test additions or updates
• 🔧 Chore (maintenance, dependencies, CI, etc.)

Affected Components

• CLI (cli/)
• Shared (shared/)
• CALM Widgets (calm-widgets/)
• CALM Hub (calm-hub/)
• CALM Hub UI (calm-hub-ui/)
• Documentation (docs/)
• VS Code Extension (calm-plugins/vscode/)
• Dependencies
• CI/CD

Commit Message Format ✅

Testing

• I have tested my changes locally
• I have added/updated unit tests
• All existing tests pass

Checklist

• My commits follow the conventional commit format
• I have updated documentation if necessary
• I have added tests for my changes (if applicable)
• My changes follow the project's coding standards

[Copilot]

Pull request overview

This PR adds a dependency override for the qs package to version 6.14.1 to address security vulnerability CVE-2025-15284. The qs library is used as a transitive dependency through body-parser and express packages.

Key Changes:

• Added qs version override to ^6.14.1 in the root package.json overrides section

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.