Qs dependency update

[dmattia]

Related Issues

• https://github.com/transcend-io/main/security/dependabot/1135

Security Implications

This change mitigates CVE-2024-28103, a prototype pollution vulnerability in qs versions prior to 6.14.1.

System Availability

[none]

This PR addresses a Dependabot alert by ensuring that any qs dependency resolved in this project is at least version 6.14.1.

Although qs was not found as a direct dependency or in the current yarn.lock, a top-level Yarn resolutions override has been added to package.json. This proactively forces all qs resolutions to ^6.14.1, mitigating the vulnerability if qs is introduced transitively in the future.

---

 

[cursor]

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
_{Learn more about Cursor Agents}