[Snyk] Upgrade qs from 6.11.1 to 6.13.1

[dolevmiz1]

Snyk has created this PR to upgrade qs from 6.11.1 to 6.13.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.

• The recommended version was released on 22 days ago.

Release notes

Package name: qs

• 6.13.1 - 2024-11-17
  

  v6.13.1

• 6.13.0 - 2024-08-01
  

  v6.13.0

• 6.12.3 - 2024-07-08
  

  v6.12.3

• 6.12.2 - 2024-07-01
  

  v6.12.2

• 6.12.1 - 2024-04-12
  

  v6.12.1

• 6.12.0 - 2024-03-06
  

  v6.12.0

• 6.11.2 - 2023-05-15
  

  v6.11.2

• 6.11.1 - 2023-03-06
  

  v6.11.1

from qs GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[Svector-anu]

Heads up — the target version here (6.13.1) no longer covers all currently-known qs advisories; osv-scanner flags 4 CVEs against 6.11.1/6.13.1 that are only fixed at 6.16.0 (GHSA-4mjr-xmp4-gh2g, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883).

Opened #344 as a bundled lockfile-only bump (qs -> 6.16.0 plus 8 other transitive deps with published CVEs, no package.json/breaking changes) — feel free to close this one in favor of that if it looks good, or let me know if you'd rather keep this PR and I'll narrow #344 to exclude qs.