From bdb1575eaf16a71c0905b9b3c98db8c33f8407c9 Mon Sep 17 00:00:00 2001
From: Eric Crosson <ericcrosson@bitgo.com>
Date: Wed, 5 Aug 2026 13:49:22 -0500
Subject: [PATCH] fix(deps): Bump qs from 6.13.0 to 6.14.2

Resolves https://github.com/BitGo/api-ts/security/dependabot/144

Bumps [qs](https://github.com/ljharb/qs) from 6.13.0 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/commits)

Dependabot advisory: [GHSA-w7fw-mjwx-w883](https://github.com/advisories/GHSA-w7fw-mjwx-w883)
Ticket: AI-939
---
 package-lock.json         | 9 +++++----
 package.json              | 3 ++-
 website/package-lock.json | 8 ++++----
 website/package.json      | 3 ++-
 4 files changed, 13 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 7d757d25..6e97d4a2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8425,11 +8425,12 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.13.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
-      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "version": "6.14.2",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz",
+      "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==",
+      "license": "BSD-3-Clause",
       "dependencies": {
-        "side-channel": "^1.0.6"
+        "side-channel": "^1.1.0"
       },
       "engines": {
         "node": ">=0.6"
diff --git a/package.json b/package.json
index db640c75..0beeed8d 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,8 @@
     "typescript": "4.7.4"
   },
   "overrides": {
-    "semantic-release": ">=25.0.0"
+    "semantic-release": ">=25.0.0",
+    "qs": "6.14.2"
   },
   "engines": {
     "npm": ">=7"
diff --git a/website/package-lock.json b/website/package-lock.json
index 24462f2b..a4fa135c 100644
--- a/website/package-lock.json
+++ b/website/package-lock.json
@@ -17433,12 +17433,12 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.13.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
-      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "version": "6.14.2",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz",
+      "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==",
       "license": "BSD-3-Clause",
       "dependencies": {
-        "side-channel": "^1.0.6"
+        "side-channel": "^1.1.0"
       },
       "engines": {
         "node": ">=0.6"
diff --git a/website/package.json b/website/package.json
index b4a8bc81..ea7fdfa6 100644
--- a/website/package.json
+++ b/website/package.json
@@ -26,7 +26,8 @@
     "zod": "^3.24.2"
   },
   "overrides": {
-    "minimatch": "^3.1.3"
+    "minimatch": "^3.1.3",
+    "qs": "6.14.2"
   },
   "devDependencies": {
     "@docusaurus/module-type-aliases": "3.7.0"