Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.10.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ljharb/qs/blob/main/CHANGELOG.md">qs's changelog</a>.</em></p> <blockquote> <h2><strong>6.10.3</strong></h2> <ul> <li>[Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/428">#428</a>)</li> <li>[Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/427">#427</a>)</li> <li>[actions] reuse common workflows</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>object-inspect</code>, <code>tape</code></li> </ul> <h2><strong>6.10.2</strong></h2> <ul> <li>[Fix] <code>stringify</code>: actually fix cyclic references (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/426">#426</a>)</li> <li>[Fix] <code>stringify</code>: avoid encoding arrayformat comma when <code>encodeValuesOnly = true</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/424">#424</a>)</li> <li>[readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li>[Docs] add note and links for coercing primitive values (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/408">#408</a>)</li> <li>[actions] update codecov uploader</li> <li>[actions] update workflows</li> <li>[Tests] clean up stringify tests slightly</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>object-inspect</code>, <code>safe-publish-latest</code>, <code>tape</code></li> </ul> <h2><strong>6.10.1</strong></h2> <ul> <li>[Fix] <code>stringify</code>: avoid exception on repeated object values (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/402">#402</a>)</li> </ul> <h2><strong>6.10.0</strong></h2> <ul> <li>[New] <code>stringify</code>: throw on cycles, instead of an infinite loop (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/395">#395</a>, <a href="https://github-redirect.dependabot.com/ljharb/qs/issues/394">#394</a>, <a href="https://github-redirect.dependabot.com/ljharb/qs/issues/393">#393</a>)</li> <li>[New] <code>parse</code>: add <code>allowSparse</code> option for collapsing arrays with missing indices (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/312">#312</a>)</li> <li>[meta] fix README.md (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/399">#399</a>)</li> <li>[meta] only run <code>npm run dist</code> in publish, not install</li> <li>[Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>aud</code>, <code>has-symbols</code>, <code>tape</code></li> <li>[Tests] fix tests on node v0.6</li> <li>[Tests] use <code>ljharb/actions/node/install</code> instead of <code>ljharb/actions/node/run</code></li> <li>[Tests] Revert "[meta] ignore eclint transitive audit warning"</li> </ul> <h2><strong>6.9.7</strong></h2> <ul> <li>[Fix] <code>parse</code>: ignore <code>__proto__</code> keys (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/428">#428</a>)</li> <li>[Fix] <code>stringify</code>: avoid encoding arrayformat comma when <code>encodeValuesOnly = true</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/424">#424</a>)</li> <li>[Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code> (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/427">#427</a>)</li> <li>[readme] remove travis badge; add github actions/codecov badges; update URLs</li> <li>[Docs] add note and links for coercing primitive values (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/408">#408</a>)</li> <li>[Tests] clean up stringify tests slightly</li> <li>[meta] fix README.md (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/399">#399</a>)</li> <li>Revert "[meta] ignore eclint transitive audit warning"</li> <li>[actions] backport actions from main</li> <li>[Dev Deps] backport updates from main</li> </ul> <h2><strong>6.9.6</strong></h2> <ul> <li>[Fix] restore <code>dist</code> dir; mistakenly removed in d4f6c32</li> </ul> <h2><strong>6.9.5</strong></h2> <ul> <li>[Fix] <code>stringify</code>: do not encode parens for RFC1738</li> <li>[Fix] <code>stringify</code>: fix arrayFormat comma with empty array/objects (<a href="https://github-redirect.dependabot.com/ljharb/qs/issues/350">#350</a>)</li> <li>[Refactor] <code>format</code>: remove <code>util.assign</code> call</li> <li>[meta] add "Allow Edits" workflow; update rebase workflow</li> <li>[actions] switch Automatic Rebase workflow to <code>pull_request_target</code> event</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ljharb/qs/commit/f92ddb56089ae2c74f5ca7b0447fef3a97e8c9bc"><code>f92ddb5</code></a> v6.10.3</li> <li><a href="https://github.com/ljharb/qs/commit/d9e95298c88ef52d1ca3b3b5d227f02420e02a01"><code>d9e9529</code></a> [Dev Deps] update <code>eslint</code></li> <li><a href="https://github.com/ljharb/qs/commit/8b4cc14cda94a5c89341b77e5fe435ec6c41be2d"><code>8b4cc14</code></a> [Fix] <code>parse</code>: ignore <code>__proto__</code> keys</li> <li><a href="https://github.com/ljharb/qs/commit/ad63d36ce18cd2c315899ac1e8193de22be08cd8"><code>ad63d36</code></a> [actions] reuse common workflows</li> <li><a href="https://github.com/ljharb/qs/commit/c028385f6543e3148f243e2768e487c63b7e60b7"><code>c028385</code></a> [Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>object-inspect</code>, <code>tape</code></li> <li><a href="https://github.com/ljharb/qs/commit/0a1d3e806e6c7d9d640d46df7b1d27e6e44125f8"><code>0a1d3e8</code></a> [Robustness] <code>stringify</code>: avoid relying on a global <code>undefined</code></li> <li><a href="https://github.com/ljharb/qs/commit/408ff95f1ab94ea73027bc8a7443afb62d41a72d"><code>408ff95</code></a> v6.10.2</li> <li><a href="https://github.com/ljharb/qs/commit/3cea04d889db3953e408554012f0ff44571eeb99"><code>3cea04d</code></a> [Dev Deps] update <code>@ljharb/eslint-config</code></li> <li><a href="https://github.com/ljharb/qs/commit/28fba8fd928ee14c758c7f55cbce9d8730443dd4"><code>28fba8f</code></a> [Dev Deps] update <code>eslint</code>, <code>@ljharb/eslint-config</code>, <code>tape</code></li> <li><a href="https://github.com/ljharb/qs/commit/9aee773432b80bd50441f7ac1b64a86a7e00ccca"><code>9aee773</code></a> [Fix] <code>stringify</code>: actually fix cyclic references</li> <li>Additional commits viewable in <a href="https://github.com/ljharb/qs/compare/v6.5.2...v6.10.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=qs&package-manager=npm_and_yarn&previous-version=6.5.2&new-version=6.10.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/quantumlib/Cirq/network/alerts). </details>