build(deps): bump query-string from 6.14.1 to 9.5.1 in /web

[dependabot]

Bumps query-string from 6.14.1 to 9.5.1.

Release notes

Sourced from query-string's releases.

v9.5.1

• Fix stringifyUrl() dropping a leading # in the fragment identifier and throwing on some absolute URLs 47b5b30

---

sindresorhus/query-string@v9.5.0...v9.5.1

v9.5.0

• Update dependencies 55e453d

---

sindresorhus/query-string@v9.4.1...v9.5.0

v9.4.1

• Fix relative URLs with fragments 872fb6f

---

sindresorhus/query-string@v9.4.0...v9.4.1

v9.4.0

• Improve performance 482b19a

---

sindresorhus/query-string@v9.3.1...v9.4.0

v9.3.1

• Fix custom type functions with array formats 720f2ff

---

sindresorhus/query-string@v9.3.0...v9.3.1

v9.3.0

• Add replacer option to stringify() 509014d
• Fix encoded separator incorrectly splitting single values into arrays ec67fea

---

sindresorhus/query-string@v9.2.2...v9.3.0

v9.2.2

• Accept valueless parameters as true when using a boolean with types option (#410) 557a550

---

sindresorhus/query-string@v9.2.1...v9.2.2

... (truncated)

Commits

• 7fd8133 9.5.1
• 47b5b30 Fix stringifyUrl() dropping a leading # in the fragment identifier and th...
• aae373a 9.5.0
• 55e453d Update dependencies
• c69443c 9.4.1
• 872fb6f Fix relative URLs with fragments
• f5daa07 Create security.md
• 0b047b7 9.4.0
• 3ac2e84 Meta tweaks
• 482b19a Improve performance
• Additional commits viewable in compare view

[netlify]

✅ Deploy Preview for pipecd-site canceled.

Name	Link
🔨 Latest commit	7d4832c
🔍 Latest deploy log	https://app.netlify.com/projects/pipecd-site/deploys/6ab8f84989ed730008ea8cb1

[Copilot]

🟡 Changes recommended

The major upgrade to query-string is likely to break the current Jest/ts-jest (CommonJS) test setup due to ESM-only packaging unless the test/tooling configuration is updated accordingly.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates the PipeCD web frontend’s dependency on query-string to a newer major version, refreshing the corresponding Yarn lockfile entries.

Changes:

• Bump query-string in web/package.json from ^6.14.1 to ^9.5.1.
• Update web/yarn.lock to the resolved query-string@9.5.1 dependency tree (including decode-uri-component, filter-obj, and split-on-first).

File summaries

File	Description
web/package.json	Updates the declared query-string dependency version.
web/yarn.lock	Updates the lockfile to reflect the new query-string version and its transitive dependencies.

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 25.51%. Comparing base (595f791) to head (c077f62).

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #7345      +/-   ##
==========================================
- Coverage   29.75%   25.51%   -4.24%     
==========================================
  Files         601        3     -598     
  Lines       64442      533   -63909     
==========================================
- Hits        19172      136   -19036     
+ Misses      43778      390   -43388     
+ Partials     1492        7    -1485     

Flag	Coverage Δ
.	?
.-pkg-app-pipedv1-plugin-analysis	?
.-pkg-app-pipedv1-plugin-ecs	?
.-pkg-app-pipedv1-plugin-kubernetes	?
.-pkg-app-pipedv1-plugin-kubernetes_multicluster	?
.-pkg-app-pipedv1-plugin-scriptrun	?
.-pkg-app-pipedv1-plugin-terraform	?
.-pkg-app-pipedv1-plugin-wait	?
.-pkg-app-pipedv1-plugin-waitapproval	?
.-pkg-plugin-sdk	?
.-tool-actions-gh-release	?
.-tool-actions-plan-preview	25.51% <ø> (ø)
.-tool-codegen-protoc-gen-auth	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.