Qs: v6.16.0 Release

13 Commits in this Release

Ordered by the degree to which they evolved the repo in this version.

[Fix] `utils`: `isBuffer`: do not invoke a non-callable `constructor.isBuffer`

Authored August 28, 2026

[New] `stringify`: add a `depth` option to bound recursion depth (default `Infinity`)

Authored July 11, 2026

[Fix] `parse`: enforce `arrayLimit` on comma groups under `[]=` when `throwOnLimitExceeded` is set

Authored August 29, 2026

[Fix] `stringify`: do not let `allowEmptyArrays` skip cycle detection (or drop own keys) on an empty array with own properties

Authored July 11, 2026

[Tests] `parse`: remove a test that pinned `[]=` comma groups escaping `arrayLimit`

Authored August 29, 2026

[Tests] `stringify`: pin current `encodeDotInKeys` separator-dot behavior

Authored July 2, 2026

v6.16.0

Authored August 29, 2026

[Docs] threat model: clarify `stringify` deep-nesting DoS is caller-bounded

Authored July 11, 2026

[Docs] clarify `arrayLimit` is a representation threshold, not an element-count cap

Authored July 2, 2026

[Dev Deps] update `eslint`

Authored June 26, 2026

[Dev Deps] update `eslint`, `evalmd`

Authored July 11, 2026

[Dev Deps] update `@ljharb/eslint-config`, `eslint`

Authored August 24, 2026

[Dev Deps] update `eslint`, `evalmd`

Authored August 8, 2026