Bump qs and http-server

[dependabot[bot]]

Bumps qs to 6.11.0 and updates ancestor dependency http-server. These dependencies need to be updated together.

Updates qs from 2.3.3 to 6.11.0

Changelog

Sourced from qs's changelog.

6.11.0

• [New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option (#442)
• [readme] fix version badge

6.10.5

• [Fix] stringify: with arrayFormat: comma, properly include an explicit [] on a single-item array (#434)

6.10.4

• [Fix] stringify: with arrayFormat: comma, include an explicit [] on a single-item array (#441)
• [meta] use npmignore to autogenerate an npmignore file
• [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, object-inspect, tape

6.10.3

• [Fix] parse: ignore __proto__ keys (#428)
• [Robustness] stringify: avoid relying on a global undefined (#427)
• [actions] reuse common workflows
• [Dev Deps] update eslint, @ljharb/eslint-config, object-inspect, tape

6.10.2

• [Fix] stringify: actually fix cyclic references (#426)
• [Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)
• [readme] remove travis badge; add github actions/codecov badges; update URLs
• [Docs] add note and links for coercing primitive values (#408)
• [actions] update codecov uploader
• [actions] update workflows
• [Tests] clean up stringify tests slightly
• [Dev Deps] update eslint, @ljharb/eslint-config, aud, object-inspect, safe-publish-latest, tape

6.10.1

• [Fix] stringify: avoid exception on repeated object values (#402)

6.10.0

• [New] stringify: throw on cycles, instead of an infinite loop (#395, #394, #393)
• [New] parse: add allowSparse option for collapsing arrays with missing indices (#312)
• [meta] fix README.md (#399)
• [meta] only run npm run dist in publish, not install
• [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbols, tape
• [Tests] fix tests on node v0.6
• [Tests] use ljharb/actions/node/install instead of ljharb/actions/node/run
• [Tests] Revert "[meta] ignore eclint transitive audit warning"

6.9.7

• [Fix] parse: ignore __proto__ keys (#428)
• [Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)
• [Robustness] stringify: avoid relying on a global undefined (#427)
• [readme] remove travis badge; add github actions/codecov badges; update URLs
• [Docs] add note and links for coercing primitive values (#408)
• [Tests] clean up stringify tests slightly
• [meta] fix README.md (#399)
• Revert "[meta] ignore eclint transitive audit warning"

... (truncated)

Commits

• 56763c1 v6.11.0
• ddd3e29 [readme] fix version badge
• c313472 [New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option
• 95bc018 v6.10.5
• 0e903c0 [Fix] stringify: with arrayFormat: comma, properly include an explicit `[...
• ba9703c v6.10.4
• 4e44019 [Fix] stringify: with arrayFormat: comma, include an explicit [] on a s...
• 113b990 [Dev Deps] update object-inspect
• c77f38f [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, tape
• 2cf45b2 [meta] use npmignore to autogenerate an npmignore file
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for qs since your current version.

Updates http-server from 0.9.0 to 14.1.1

Release notes

Sourced from http-server's releases.

v14.1.1

• Patch CVE-2021-44906 @​dpassen (#803)

Other changes

• Bump follow-redirects from 1.14.4 to 1.14.8 @​dependabot (#794)

v14.1.0

This release contains an emergency fix which replaces colors.js with chalk. See #781 for more info and discussion, and Marak/colors.js#285 for broader discussion about colors.js.

• Switch from colors to chalk @​zbynek (#785)

v14.0.0

Breaking changes

• Add encoding charset sniffing @​boarwell (#736)
• Drop Node.js 10 support @​boarwell (#739)
  • Required to support charset sniffing

Features and enhancements

• add passphrase option @​chris--jones (#746)
• Make --ssl an alias for --tls @​thornjad (#747)
• add ability to pass proxyOptions @​yannickglt (#688)
• Replace mkdirp in tests with native JS @​thornjad (#743)
• Implement displaying last modified date in index @​owenl131 (#737)
• Adds version number to server startup output @​Innoveramera (#734)

Bug Fixes

• Don't crash when file path errors @​thornjad (#753)
• Fix CORS option detection @​thornjad (#748)
• fix crash on redirect with formfeed in URL @​thornjad (#749)
• Fixes --proxy without a protocol throwing an uncaught error @​Ratcoder (#742)
• Fix tests EACCESS by finding an open port every time @​thornjad (#741)
• Use relative paths in directory listing #661 @​boarwell (#732)

Other changes

• Add Contributing guide @​thornjad (#752)
• Eslint config - replace common-style with eslint-config-populist @​chris--jones (#744)
• Update some dependencies @​thornjad (#740)

Full Changelog: https://github.com/http-party/http-server/compare/v13.0.2...v14.0.0

v13.1.0

This release contains an emergency backport from v14.1.0 which replaces colors.js with chalk

• Switch from colors to chalk @​zbynek (#785)

... (truncated)

Commits

• af0ac3e 14.1.1
• e5301d3 update license year
• 318c55f Merge pull request #794 from http-party/dependabot/npm_and_yarn/follow-redire...
• 284a0b0 Merge pull request #803 from dpassen/patch-CVE-2021-44906
• 17cc8d6 Patch CVE-2021-44906
• dc2fcf0 Bump follow-redirects from 1.14.4 to 1.14.8
• 33a6639 Update SECURITY.md
• 251d4a1 Update support commitments for Jan 2022
• e16ed1d 14.1.0
• 56bdf6e Merge pull request #785 from zbynek/use-chalk
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by thornjad, a new releaser for http-server since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/eswdd/aardvark/network/alerts).

[coveralls]

Coverage: 80.71%. Remained the same when pulling 2ddc70fb434a005f772ccf3e6304e4ca5e826cd5 on dependabot/npm_and_yarn/qs-and-http-server-6.11.0 into 13f7bde61552825189e711942fccb0429a73dfb6 on master.

[dependabot[bot]]

Looks like these dependencies are up-to-date now, so this is no longer needed.