Merge pull request #373 from contentstack/fix/DX-3856

fix cve-2025-15284 by updating 'qs' dependency

Author: nadeem-cs

.talismanrc

@@ -6,7 +6,7 @@ fileignoreconfig:
   - filename: .github/workflows/secrets-scan.yml
     checksum: d79ec3f3288964f7d117b9ad319a54c0ebc152e35f69be8fde95522034fdfb2a
   - filename: package-lock.json
-    checksum: 215757874c719e0192e440dd4b98f4dfb6824f72e526047182fcd60cc03e3e80
+    checksum: c7c4feda727fae78c6fa03665b1d8f2a6363060631dd57b475f09307991ad305
   - filename: src/core/modules/assets.js
     checksum: 00f19d659b830b0f145b4db0ccf3211a4048d9488f30a224fe3c31cacca6dcd2
   - filename: .husky/pre-commit

CHANGELOG.md

@@ -1,4 +1,9 @@
 ## Change log
+### Version: 3.26.4
+#### Date:  Jan-27-2026
+##### Feat:
+ - Update the internal dependency of qs to latest version to fix the CVE-2025-15284 issue
+
 ### Version: 3.26.3
 #### Date:  Dec-08-2025
 ##### Feat:

LICENSE.txt

@@ -1,7 +1,7 @@
 The MIT License (MIT)
 
 
-Copyright (c) 2016-2025 Contentstack
+Copyright (c) 2016-2026 Contentstack
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -292,7 +292,7 @@ You can use advanced sync queries to fetch custom results while performing initi
 
 ### The MIT License (MIT)
 
-Copyright © 2012-2025 [Contentstack](https://www.contentstack.com). All Rights Reserved
+Copyright © 2012-2026 [Contentstack](https://www.contentstack.com). All Rights Reserved
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "contentstack",
-  "version": "3.26.3",
+  "version": "3.26.4",
   "description": "Contentstack Javascript SDK",
   "homepage": "https://www.contentstack.com/",
   "author": {
@@ -103,5 +103,8 @@
     "es6-promise": "^4.2.8",
     "husky": "^9.1.7",
     "localStorage": "1.0.4"
+  },
+  "overrides": {
+    "qs": "^6.14.1"
   }
 }

package.json

@@ -118,12 +118,6 @@ describe('Asset Query Test', () => {
         expect(assetQuery._query).toEqual({"include_reference_content_type_uid": true, query:{} });
         done()
     });
-    // The includeOwner function is deprecated.
-    test.skip('Asset Query include owner test', done => {
-        const assetQuery = makeAssetQuery().includeOwner()
-        expect(assetQuery._query).toEqual({"include_owner": true, query:{} });
-        done()
-    });
 
     test('Asset Query less than test', done => {
         const assetQuery = makeAssetQuery().lessThan('fieldUID', 'value')

test/typescript/asset-query.test.ts

@@ -123,12 +123,6 @@ describe('Entry Test', () => {
         expect(entry._query).toEqual({"include_fallback": true});
         done()
     });
-    // The includeOwner function is deprecated.
-    test.skip('Entry include owner test', done => {
-        const entry = makeEntry().includeOwner()
-        expect(entry._query).toEqual({"include_owner": true});
-        done()
-    });
 });
 
 function makeEntry() {