[Snyk] Security upgrade qs from 6.14.0 to 6.14.1

[cdimascio]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-QS-14724253	828

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[cvchauhan]

Hi @cdimascio is there any plan for merge this pr & publish? Express is already updated this dependency

[rajnish21m]

@cdimascio , could we please get this merged?

[cdimascio]

Will roll a new version tomorrow

[cvchauhan]

@cdimascio hope will see new release today

[cdimascio]

v5.6.1 is out

[cvchauhan]

Hi @cdimascio , it looks like the latest version of @apidevtools/json-schema-ref-parser no longer supports CommonJS.

After upgrading to the latest version, our existing CommonJS-based project started failing with an error indicating that require() is not supported. This has broken backward compatibility for older projects that still rely on CommonJS.

Could you please confirm:

Whether CommonJS support has been officially dropped?

If there is a recommended workaround or a compatible version we should pin to for CommonJS projects?

Thanks for your help.

[cdimascio]

thanks @cvchauhan, reverted upgrade of that lib for now. will revisit

[cdimascio]

the upgrade for @apidevtools/json-schema-ref-parser with continued support for both esm and non-esm is here: #1132

[cvchauhan]

Thanks @cdimascio after override old version we are able to run our application on server but for latest it was failed

[cvchauhan]

Thanks @cdimascio after override old version we are able to run our application on server but for latest it was failed