Skip to content

build(deps): bump query-string from 6.14.1 to 9.5.1 in /web - #7345

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web/query-string-9.5.1
Open

build(deps): bump query-string from 6.14.1 to 9.5.1 in /web#7345
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/web/query-string-9.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps query-string from 6.14.1 to 9.5.1.

Release notes

Sourced from query-string's releases.

v9.5.1

  • Fix stringifyUrl() dropping a leading # in the fragment identifier and throwing on some absolute URLs 47b5b30

sindresorhus/query-string@v9.5.0...v9.5.1

v9.5.0

  • Update dependencies 55e453d

sindresorhus/query-string@v9.4.1...v9.5.0

v9.4.1

  • Fix relative URLs with fragments 872fb6f

sindresorhus/query-string@v9.4.0...v9.4.1

v9.4.0

  • Improve performance 482b19a

sindresorhus/query-string@v9.3.1...v9.4.0

v9.3.1

  • Fix custom type functions with array formats 720f2ff

sindresorhus/query-string@v9.3.0...v9.3.1

v9.3.0

  • Add replacer option to stringify() 509014d
  • Fix encoded separator incorrectly splitting single values into arrays ec67fea

sindresorhus/query-string@v9.2.2...v9.3.0

v9.2.2

  • Accept valueless parameters as true when using a boolean with types option (#410) 557a550

sindresorhus/query-string@v9.2.1...v9.2.2

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [query-string](https://github.com/sindresorhus/query-string) from 6.14.1 to 9.5.1.
- [Release notes](https://github.com/sindresorhus/query-string/releases)
- [Commits](sindresorhus/query-string@v6.14.1...v9.5.1)

---
updated-dependencies:
- dependency-name: query-string
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 8, 2026
Copilot AI lite review requested due to automatic review settings September 8, 2026 23:15
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 8, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 8, 2026 23:15
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Sep 8, 2026
@netlify

netlify Bot commented Sep 8, 2026

Copy link
Copy Markdown

Deploy Preview for pipecd-site canceled.

Name Link
🔨 Latest commit c077f62
🔍 Latest deploy log https://app.netlify.com/projects/pipecd-site/deploys/6aa097184f424f00087f3603

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The major upgrade to query-string is likely to break the current Jest/ts-jest (CommonJS) test setup due to ESM-only packaging unless the test/tooling configuration is updated accordingly.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates the PipeCD web frontend’s dependency on query-string to a newer major version, refreshing the corresponding Yarn lockfile entries.

Changes:

  • Bump query-string in web/package.json from ^6.14.1 to ^9.5.1.
  • Update web/yarn.lock to the resolved query-string@9.5.1 dependency tree (including decode-uri-component, filter-obj, and split-on-first).
File summaries
File Description
web/package.json Updates the declared query-string dependency version.
web/yarn.lock Updates the lockfile to reflect the new query-string version and its transitive dependencies.
Review details
  • Files reviewed: 1/2 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread web/package.json
"path-browserify": "^1.0.1",
"prism-react-renderer": "^2.4.1",
"query-string": "^6.14.1",
"query-string": "^9.5.1",
@codecov

codecov Bot commented Sep 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 25.51%. Comparing base (595f791) to head (c077f62).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #7345      +/-   ##
==========================================
- Coverage   29.75%   25.51%   -4.24%     
==========================================
  Files         601        3     -598     
  Lines       64442      533   -63909     
==========================================
- Hits        19172      136   -19036     
+ Misses      43778      390   -43388     
+ Partials     1492        7    -1485     
Flag Coverage Δ
. ?
.-pkg-app-pipedv1-plugin-analysis ?
.-pkg-app-pipedv1-plugin-ecs ?
.-pkg-app-pipedv1-plugin-kubernetes ?
.-pkg-app-pipedv1-plugin-kubernetes_multicluster ?
.-pkg-app-pipedv1-plugin-scriptrun ?
.-pkg-app-pipedv1-plugin-terraform ?
.-pkg-app-pipedv1-plugin-wait ?
.-pkg-app-pipedv1-plugin-waitapproval ?
.-pkg-plugin-sdk ?
.-tool-actions-gh-release ?
.-tool-actions-plan-preview 25.51% <ø> (ø)
.-tool-codegen-protoc-gen-auth ?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/web dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant