6.5.3
- [Fix] 
parse: ignore __proto__ keys (#428) 
- [Fix]utils.merge`: avoid a crash with a null target and a truthy non-array source
 
- [Fix] correctly parse nested arrays
 
- [Fix] 
stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279) 
- [Fix] 
utils: merge: fix crash when source is a truthy primitive & no options are provided 
- [Fix] when 
parseArrays is false, properly handle keys ending in [] 
- [Fix] fix for an impossible situation: when the formatter is called with a non-string value
 
- [Fix] 
utils.merge: avoid a crash with a null target and an array source 
- [Refactor] 
utils: reduce observable [[Get]]s 
- [Refactor] use cached 
Array.isArray 
- [Refactor] 
stringify: Avoid arr = arr.concat(...), push to the existing instance (#269) 
- [Refactor] 
parse: only need to reassign the var once 
- [Robustness] 
stringify: avoid relying on a global undefined (#427) 
- [readme] remove travis badge; add github actions/codecov badges; update URLs
 
- [Docs] Clean up license text so it’s properly detected as BSD-3-Clause
 
- [Docs] Clarify the need for "arrayLimit" option
 
- [meta] fix README.md (#399)
 
- [meta] add FUNDING.yml
 
- [actions] backport actions from main
 
- [Tests] always use 
String(x) over x.toString() 
- [Tests] remove nonexistent tape option
 
- [Dev Deps] backport from main
 
6.5.2
- [Fix] use 
safer-buffer instead of Buffer constructor 
- [Refactor] utils: 
module.exports one thing, instead of mutating exports (#230) 
- [Dev Deps] update 
browserify, eslint, iconv-lite, safer-buffer, tape, browserify 
6.5.1
- [Fix] Fix parsing & compacting very deep objects (#224)
 
- [Refactor] name utils functions
 
- [Dev Deps] update 
eslint, @ljharb/eslint-config, tape 
- [Tests] up to 
node v8.4; use nvm install-latest-npm so newer npm doesn’t break older node 
- [Tests] Use precise dist for Node.js 0.6 runtime (#225)
 
- [Tests] make 0.6 required, now that it’s passing
 
- [Tests] on 
node v8.2; fix npm on node 0.6 
6.5.0
- [New] add 
utils.assign 
- [New] pass default encoder/decoder to custom encoder/decoder functions (#206)
 
- [New] 
parse/stringify: add ignoreQueryPrefix/addQueryPrefix options, respectively (#213) 
- [Fix] Handle stringifying empty objects with addQueryPrefix (#217)
 
- [Fix] do not mutate 
options argument (#207) 
- [Refactor] 
parse: cache index to reuse in else statement (#182) 
- [Docs] add various badges to readme (#208)
 
- [Dev Deps] update 
eslint, browserify, iconv-lite, tape 
- [Tests] up to 
node v8.1, v7.10, v6.11; npm v4.6 breaks on node < v1; npm v5+ breaks on node < v4 
- [Tests] add 
editorconfig-tools 
6.4.0
- [New] 
qs.stringify: add encodeValuesOnly option 
- [Fix] follow 
allowPrototypes option during merge (#201, #201) 
- [Fix] support keys starting with brackets (#202, #200)
 
- [Fix] chmod a-x
 
- [Dev Deps] update 
eslint 
- [Tests] up to 
node v7.7, v6.10,v4.8; disable osx builds since they block linux builds 
- [eslint] reduce warnings
 
6.3.2
- [Fix] follow 
allowPrototypes option during merge (#201, #200) 
- [Dev Deps] update 
eslint 
- [Fix] chmod a-x
 
- [Fix] support keys starting with brackets (#202, #200)
 
- [Tests] up to 
node v7.7, v6.10,v4.8; disable osx builds since they block linux builds 
6.3.1
- [Fix] ensure that 
allowPrototypes: false does not ever shadow Object.prototype properties (thanks, @snyk!) 
- [Dev Deps] update 
eslint, @ljharb/eslint-config, browserify, iconv-lite, qs-iconv, tape 
- [Tests] on all node minors; improve test matrix
 
- [Docs] document stringify option 
allowDots (#195) 
- [Docs] add empty object and array values example (#195)
 
- [Docs] Fix minor inconsistency/typo (#192)
 
- [Docs] document stringify option 
sort (#191) 
- [Refactor] 
stringify: throw faster with an invalid encoder 
- [Refactor] remove unnecessary escapes (#184)
 
- Remove contributing.md, since 
qs is no longer part of hapi (#183) 
6.3.0
- [New] Add support for RFC 1738 (#174, #173)
 
- [New] 
stringify: Add serializeDate option to customize Date serialization (#159) 
- [Fix] ensure 
utils.merge handles merging two arrays 
- [Refactor] only constructors should be capitalized
 
- [Refactor] capitalized var names are for constructors only
 
- [Refactor] avoid using a sparse array
 
- [Robustness] 
formats: cache String#replace 
- [Dev Deps] update 
browserify, eslint, @ljharb/eslint-config; add safe-publish-latest 
- [Tests] up to 
node v6.8, v4.6; improve test matrix 
- [Tests] flesh out arrayLimit/arrayFormat tests (#107)
 
- [Tests] skip Object.create tests when null objects are not available
 
- [Tests] Turn on eslint for test files (#175)
 
6.2.3
- [Fix] follow 
allowPrototypes option during merge (#201, #200) 
- [Fix] chmod a-x
 
- [Fix] support keys starting with brackets (#202, #200)
 
- [Tests] up to 
node v7.7, v6.10,v4.8; disable osx builds since they block linux builds 
6.2.2
- [Fix] ensure that 
allowPrototypes: false does not ever shadow Object.prototype properties 
6.2.1
- [Fix] ensure 
key[]=x&key[]&key[]=y results in 3, not 2, values 
- [Refactor] Be explicit and use 
Object.prototype.hasOwnProperty.call 
- [Tests] remove 
parallelshell since it does not reliably report failures 
- [Tests] up to 
node v6.3, v5.12 
- [Dev Deps] update 
tape, eslint, @ljharb/eslint-config, qs-iconv 
- [New] pass Buffers to the encoder/decoder directly (#161)
 
- [New] add "encoder" and "decoder" options, for custom param encoding/decoding (#160)
 
- [Fix] fix compacting of nested sparse arrays (#150)
 
**6.1.2
- [Fix] follow 
allowPrototypes option during merge (#201, #200) 
- [Fix] chmod a-x
 
- [Fix] support keys starting with brackets (#202, #200)
 
- [Tests] up to 
node v7.7, v6.10,v4.8; disable osx builds since they block linux builds 
6.1.1
- [Fix] ensure that 
allowPrototypes: false does not ever shadow Object.prototype properties 
- [New] allowDots option for 
stringify (#151) 
- [Fix] "sort" option should work at a depth of 3 or more (#151)
 
- [Fix] Restore 
dist directory; will be removed in v7 (#148) 
6.0.4
- [Fix] follow 
allowPrototypes option during merge (#201, #200) 
- [Fix] chmod a-x
 
- [Fix] support keys starting with brackets (#202, #200)
 
- [Tests] up to 
node v7.7, v6.10,v4.8; disable osx builds since they block linux builds 
6.0.3
- [Fix] ensure that 
allowPrototypes: false does not ever shadow Object.prototype properties 
- [Fix] Restore 
dist directory; will be removed in v7 (#148) 
- Revert ES6 requirement and restore support for node down to v0.8.
 
- #127 Fix engines definition in package.json
 
- #124 Use ES6 and drop support for node < v4
 
5.2.1
- [Fix] ensure 
key[]=x&key[]&key[]=y results in 3, not 2, values 
- #64 Add option to sort object keys in the query string
 
- #117 make URI encoding stringified results optional
 
- #106 Add flag 
skipNulls to optionally skip null values in stringify 
- #114 default allowDots to false
 
- #100 include dist to npm
 
- #98 make returning plain objects and allowing prototype overwriting properties optional
 
- #89 Add option to disable "Transform dot notation to bracket notation"
 
- #80 qs.parse silently drops properties
 
- #77 Perf boost
 
- #60 Add explicit option to disable array parsing
 
- #74 Bad parse when turning array into object
 
- #81 Add a 
filter option 
- #68 Fixed issue with recursion and passing strings into objects.
 
- #66 Add mixed array and object dot notation support Closes: #47
 
- #76 RFC 3986
 
- #85 No equal sign
 
- #84 update license attribute
 
- #73 Property 'hasOwnProperty' of object #
 
- #70 Add arrayFormat option
 
- #59 make sure array indexes are >= 0, closes #57
 
- #58 make qs usable for browser loader
 
- #55 allow merging a string into an object
 
- #52 Return "undefined" and "false" instead of throwing "TypeError".
 
- #50 add option to omit array indices, closes #46
 
- #39 Is there an alternative to Buffer.isBuffer?
 
- #49 refactor utils.merge, fixes #45
 
- #41 avoid browserifying Buffer, for #39
 
- #38 how to handle object keys beginning with a number
 
- #37 parser discards first empty value in array
 
- #36 Update to lab 4.x
 
- #33 Error when plain object in a value
 
- #34 use Object.prototype.hasOwnProperty.call instead of obj.hasOwnProperty
 
- #24 Changelog? Semver?
 
- #32 account for circular references properly, closes #31
 
- #31 qs.parse stackoverflow on circular objects
 
- #26 Don't use Buffer global if it's not present
 
- #30 Bug when merging non-object values into arrays
 
- #29 Don't call Utils.clone at the top of Utils.merge
 
- #23 Ability to not limit parameters?
 
- #22 Enable using a RegExp as delimiter
 
- #18 Why is there arrayLimit?
 
- #20 Configurable parametersLimit
 
- #21 make all limits optional, for #18, for #20
 
- #19 Don't overwrite null values
 
- #16 ignore non-string delimiters
 
- #15 Close code block
 
- #12 Add optional delim argument
 
- #13 fix #11: flattened keys in array are now correctly parsed
 
- #7 Empty values of a POST array disappear after being submitted
 
- #9 Should not omit equals signs (=) when value is null
 
- #6 Minor grammar fix in README
 
- #5 array holes incorrectly copied into object on large index