From 8694cc8f45a3881485d7cddbe6db3a44dd8681d7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 29 May 2026 09:22:59 +0000
Subject: [PATCH] Bump qs and express in /source

Bumps [qs](https://github.com/ljharb/qs) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `qs` from 6.15.1 to 6.15.2
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.1...v6.15.2)

Updates `express` from 4.22.1 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/v4.22.1...v4.22.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: direct:production
- dependency-name: express
  dependency-version: 4.22.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 source/container/package.json   |  4 ++--
 source/data-models/package.json |  2 +-
 source/package-lock.json        | 30 +++++++++++++++---------------
 3 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/source/container/package.json b/source/container/package.json
index 9f10d0d5e..ae7aca245 100644
--- a/source/container/package.json
+++ b/source/container/package.json
@@ -27,10 +27,10 @@
     "color": "4.2.3",
     "compression": "^1.7.4",
     "cors": "^2.8.5",
-    "express": "^4.18.2",
+    "express": "^4.22.2",
     "helmet": "^7.1.0",
     "morgan": "^1.10.1",
-    "qs": "^6.14.2",
+    "qs": "^6.15.2",
     "sharp": "^0.34.3",
     "zod": "^4.1.4"
   },
diff --git a/source/data-models/package.json b/source/data-models/package.json
index 558c62e03..9b0d0b71e 100644
--- a/source/data-models/package.json
+++ b/source/data-models/package.json
@@ -22,7 +22,7 @@
     "@types/node": "^20.10.4",
     "@types/qs": "^6.14.0",
     "jest": "^30.0.5",
-    "qs": "^6.14.2",
+    "qs": "^6.15.2",
     "ts-jest": "^29.4.0",
     "typescript": "^5.3.3"
   }
diff --git a/source/package-lock.json b/source/package-lock.json
index 5bcb5a157..d35b16c59 100644
--- a/source/package-lock.json
+++ b/source/package-lock.json
@@ -39,10 +39,10 @@
         "color": "4.2.3",
         "compression": "^1.7.4",
         "cors": "^2.8.5",
-        "express": "^4.18.2",
+        "express": "^4.22.2",
         "helmet": "^7.1.0",
         "morgan": "^1.10.1",
-        "qs": "^6.14.2",
+        "qs": "^6.15.2",
         "sharp": "^0.34.3",
         "zod": "^4.1.4"
       },
@@ -299,7 +299,7 @@
         "@types/node": "^20.10.4",
         "@types/qs": "^6.14.0",
         "jest": "^30.0.5",
-        "qs": "^6.14.2",
+        "qs": "^6.15.2",
         "ts-jest": "^29.4.0",
         "typescript": "^5.3.3"
       }
@@ -8886,9 +8886,9 @@
       "license": "MIT"
     },
     "node_modules/body-parser": {
-      "version": "1.20.4",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.4.tgz",
-      "integrity": "sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==",
+      "version": "1.20.5",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.5.tgz",
+      "integrity": "sha512-3grm+/2tUOvu2cjJkvsIxrv/wVpfXQW4PsQHYm7yk4vfpu7Ekl6nEsYBoJUL6qDwZUx8wUhQ8tR2qz+ad9c9OA==",
       "license": "MIT",
       "dependencies": {
         "bytes": "~3.1.2",
@@ -8899,7 +8899,7 @@
         "http-errors": "~2.0.1",
         "iconv-lite": "~0.4.24",
         "on-finished": "~2.4.1",
-        "qs": "~6.14.0",
+        "qs": "~6.15.1",
         "raw-body": "~2.5.3",
         "type-is": "~1.6.18",
         "unpipe": "~1.0.0"
@@ -10883,14 +10883,14 @@
       }
     },
     "node_modules/express": {
-      "version": "4.22.1",
-      "resolved": "https://registry.npmjs.org/express/-/express-4.22.1.tgz",
-      "integrity": "sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==",
+      "version": "4.22.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
+      "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
       "license": "MIT",
       "dependencies": {
         "accepts": "~1.3.8",
         "array-flatten": "1.1.1",
-        "body-parser": "~1.20.3",
+        "body-parser": "~1.20.5",
         "content-disposition": "~0.5.4",
         "content-type": "~1.0.4",
         "cookie": "~0.7.1",
@@ -10909,7 +10909,7 @@
         "parseurl": "~1.3.3",
         "path-to-regexp": "~0.1.12",
         "proxy-addr": "~2.0.7",
-        "qs": "~6.14.0",
+        "qs": "~6.15.1",
         "range-parser": "~1.2.1",
         "safe-buffer": "5.2.1",
         "send": "~0.19.0",
@@ -16710,9 +16710,9 @@
       "license": "MIT"
     },
     "node_modules/qs": {
-      "version": "6.15.1",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz",
-      "integrity": "sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==",
+      "version": "6.15.2",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
+      "integrity": "sha512-Rzq0KEyX/w/tEybncDgdkZrJgVUsUMk3xjh3t5bv3S1HTAtg+uOYt72+ZfwiQwKdysThkTBdL/rTi6HDmX9Ddw==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "side-channel": "^1.1.0"