@psnext/slingcli 3.5.20261026-1 → 3.6.20261105-1

package/node_modules/qs/eslint.config.mjs

@@ -1,57 +1,68 @@
 import ljharbConfig from '@ljharb/eslint-config/flat';
+import latest from '@ljharb/eslint-config/flat/node/latest';
 
 export default [
-    {
-        ignores: ['dist/'],
-    },
+	{
+		ignores: ['dist/'],
+	},
 
-    ...ljharbConfig,
+	...ljharbConfig,
 
-    {
-        rules: {
-            complexity: 'off',
-            'consistent-return': 'warn',
-            eqeqeq: ['error', 'allow-null'],
-            'func-name-matching': 'off',
-            'id-length': [
-                'error',
-                {
-                    max: 25,
-                    min: 1,
-                    properties: 'never',
-                },
-            ],
-            indent: ['error', 4],
-            'max-lines': 'off',
-            'max-lines-per-function': [
-                'error',
-                { max: 150 },
-            ],
-            'max-params': ['error', 20],
-            'max-statements': ['error', 100],
-            'multiline-comment-style': 'off',
-            'no-continue': 'warn',
-            'no-magic-numbers': 'off',
-            'no-restricted-syntax': [
-                'error',
-                'BreakStatement',
-                'DebuggerStatement',
-                'ForInStatement',
-                'LabeledStatement',
-                'WithStatement',
-            ],
-        },
-    },
+	{
+		rules: {
+			complexity: 'off',
+			'consistent-return': 'warn',
+			eqeqeq: ['error', 'allow-null'],
+			'func-name-matching': 'off',
+			'id-length': [
+				'error',
+				{
+					max: 25,
+					min: 1,
+					properties: 'never',
+				},
+			],
+			indent: ['error', 4],
+			'max-lines': 'off',
+			'max-lines-per-function': [
+				'error',
+				{ max: 150 },
+			],
+			'max-params': ['error', 20],
+			'max-statements': ['error', 100],
+			'multiline-comment-style': 'off',
+			'no-continue': 'warn',
+			'no-magic-numbers': 'off',
+			'no-restricted-syntax': [
+				'error',
+				'BreakStatement',
+				'DebuggerStatement',
+				'ForInStatement',
+				'LabeledStatement',
+				'WithStatement',
+			],
+		},
+	},
 
-    {
-        files: ['test/**'],
-        rules: {
-            'function-paren-newline': 'off',
-            'max-lines-per-function': 'off',
-            'max-statements': 'off',
-            'no-buffer-constructor': 'off',
-            'no-extend-native': 'off',
-            'no-throw-literal': 'off',
-        },
-    },
+	{
+		files: ['test/**'],
+		rules: {
+			'function-paren-newline': 'off',
+			'max-lines-per-function': 'off',
+			'max-statements': 'off',
+			'no-buffer-constructor': 'off',
+			'no-extend-native': 'off',
+			'no-throw-literal': 'off',
+		},
+	},
+
+	...latest.map((x) => ({
+		files: ['README.md/**'],
+		...x,
+	})),
+
+	...ljharbConfig.map((x) => ({
+		files: ['eslint.config.mjs'],
+		...x,
+	})),
 ];

package/node_modules/qs/lib/formats.js

@@ -5,7 +5,8 @@ var percentTwenties = /%20/g;
 
 var Format = {
     RFC1738: 'RFC1738',
-    RFC3986: 'RFC3986'
+    RFC3986: 'RFC3986',
+    WHATWG: 'WHATWG'
 };
 
 module.exports = {
@@ -16,8 +17,12 @@ module.exports = {
         },
         RFC3986: function (value) {
             return String(value);
+        },
+        WHATWG: function (value) {
+            return replace.call(value, percentTwenties, '+');
         }
     },
     RFC1738: Format.RFC1738,
-    RFC3986: Format.RFC3986
+    RFC3986: Format.RFC3986,
+    WHATWG: Format.WHATWG
 };

package/node_modules/qs/lib/parse.js

@@ -6,6 +6,7 @@ var utils = require('./utils');
 var has = Object.prototype.hasOwnProperty;
 var isArray = Array.isArray;
 var getPrototypeOf = Object.getPrototypeOf;
+var fromCharCode = String.fromCharCode;
 
 var isPlainContainer = function isPlainContainer(value) {
     if (!value || typeof value !== 'object') {
@@ -39,15 +40,16 @@ var copyInput = function copyInput(input) {
         var keys = Object.keys(source);
         for (var j = 0; j < keys.length; ++j) {
             var value = source[keys[j]];
+            // `target[key] =` would invoke the `__proto__` setter. `setProperty` stores that key as data.
             if (isPlainContainer(value)) {
                 if (!copies.has(value)) {
                     var copy = emptyCopyOf(value);
                     copies.set(value, copy);
                     queue[queue.length] = { source: value, target: copy };
                 }
-                target[keys[j]] = copies.get(value);
+                utils.setProperty(target, keys[j], copies.get(value));
             } else {
-                target[keys[j]] = value;
+                utils.setProperty(target, keys[j], value);
             }
         }
     }
@@ -82,7 +84,13 @@ var defaults = {
 
 var interpretNumericEntities = function (str) {
     return str.replace(/&#(\d+);/g, function ($0, numberStr) {
-        return String.fromCharCode(parseInt(numberStr, 10));
+        var c = parseInt(numberStr, 10);
+        if (c > 0xFFFF && c <= 0x10FFFF) {
+            // `String.fromCodePoint` is not available in every supported engine, so build the surrogate pair by hand
+            c -= 0x10000;
+            return fromCharCode(0xD800 | (c >> 10), 0xDC00 | (c & 0x3FF));
+        }
+        return fromCharCode(c);
     });
 };
 
@@ -102,7 +110,11 @@ var parseArrayValue = function (val, options, currentArrayLength) {
         return val.split(',');
     }
 
-    if (options.throwOnLimitExceeded && currentArrayLength >= options.arrayLimit) {
+    if (
+        options.throwOnLimitExceeded
+        && currentArrayLength >= options.arrayLimit
+        && currentArrayLength > 0
+    ) {
         throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
     }
 
@@ -178,7 +190,7 @@ var parseValues = function parseQueryStringValues(str, options) {
                     parseArrayValue(
                         part.slice(pos + 1),
                         options,
-                        isArray(obj[key]) ? obj[key].length : 0
+                        isArray(obj[key]) && (options.duplicates === 'combine' || isEmptyBracketKey) ? obj[key].length : 0
                     ),
                     function (encodedVal) {
                         return options.decoder(encodedVal, defaults.decoder, charset, 'value');
@@ -188,7 +200,9 @@ var parseValues = function parseQueryStringValues(str, options) {
         }
 
         if (val && options.interpretNumericEntities && charset === 'iso-8859-1') {
-            val = interpretNumericEntities(String(val));
+            val = utils.maybeMap(val, function (value) {
+                return value ? interpretNumericEntities(String(value)) : value;
+            });
         }
 
         if (isEmptyBracketKey) {
@@ -218,6 +232,10 @@ var parseValues = function parseQueryStringValues(str, options) {
     return obj;
 };
 
+var stripWrappingBrackets = function stripWrappingBrackets(key) {
+    return key.charAt(0) === '[' && key.charAt(key.length - 1) === ']' ? key.slice(1, -1) : key;
+};
+
 var parseObject = function (chain, val, options, valuesParsed) {
     var currentArrayLength = 0;
     if (chain.length > 0 && chain[chain.length - 1] === '[]') {
@@ -248,8 +266,8 @@ var parseObject = function (chain, val, options, valuesParsed) {
             }
         } else {
             obj = options.plainObjects ? { __proto__: null } : {};
-            var cleanRoot = root.charAt(0) === '[' && root.charAt(root.length - 1) === ']' ? root.slice(1, -1) : root;
-            var decodedRoot = options.decodeDotInKeys ? cleanRoot.replace(/%2E/g, '.') : cleanRoot;
+            var cleanRoot = stripWrappingBrackets(root);
+            var decodedRoot = options.decodeDotInKeys ? cleanRoot.replace(/%2E/gi, '.') : cleanRoot;
             var index = parseInt(decodedRoot, 10);
             var isValidArrayIndex = !isNaN(index)
                 && root !== decodedRoot
@@ -257,7 +275,7 @@ var parseObject = function (chain, val, options, valuesParsed) {
                 && index >= 0
                 && options.parseArrays;
             if (!options.parseArrays && decodedRoot === '') {
-                obj = { 0: leaf };
+                obj[0] = leaf;
             } else if (isValidArrayIndex && index < options.arrayLimit) {
                 obj = [];
                 obj[index] = leaf;
@@ -321,7 +339,8 @@ var splitKeyIntoSegments = function splitKeyIntoSegments(originalKey, options) {
 
     // depth <= 0 keeps the whole key as one segment
     if (options.depth <= 0) {
-        if (!options.plainObjects && has.call(Object.prototype, key)) {
+        // `parseObject` strips one wrapping bracket pair, so guard the key it will store ("[toString]" -> "toString")
+        if (!options.plainObjects && has.call(Object.prototype, stripWrappingBrackets(key))) {
             if (!options.allowPrototypes) {
                 return;
             }

package/node_modules/qs/lib/stringify.js

@@ -166,7 +166,7 @@ var stringify = function stringify(
     var adjustedPrefix = commaRoundTrip && isArray(obj) && obj.length === 1 ? encodedPrefix + '[]' : encodedPrefix;
 
     if (allowEmptyArrays && isArray(obj) && obj.length === 0 && Object.keys(obj).length === 0) {
-        return adjustedPrefix + '[]';
+        return formatter(encoder && !encodeValuesOnly ? encoder(adjustedPrefix, defaults.encoder, charset, 'key', format) : adjustedPrefix) + '[]';
     }
 
     for (var j = 0; j < objKeys.length; ++j) {
@@ -300,7 +300,9 @@ module.exports = function (object, opts) {
         filter = options.filter;
         obj = filter('', obj);
     } else if (isArray(options.filter)) {
-        filter = options.filter;
+        // a copy: `sort` below must not reorder the caller's array, and nested
+        // levels take their key order from the sorted copy
+        filter = options.filter.slice();
         objKeys = filter;
     }
 
@@ -347,7 +349,7 @@ module.exports = function (object, opts) {
             options.skipNulls,
             options.encodeDotInKeys,
             options.encode ? options.encoder : null,
-            options.filter,
+            filter,
             options.sort,
             options.allowDots,
             options.serializeDate,

package/node_modules/qs/lib/utils.js

@@ -110,6 +110,17 @@ var maxNumericIndex = function maxNumericIndex(obj, min) {
     return max;
 };
 
+// parsed arrays stay sparse until `compact`, so `length` would count the holes left by indices like `a[19]`
+var countElements = function countElements(arr) {
+    var count = 0;
+    for (var i = 0; i < arr.length; ++i) {
+        if (has.call(arr, i)) {
+            count += 1;
+        }
+    }
+    return count;
+};
+
 var limitedPair = function limitedPair(first, second, options) {
     var pair = [first, second];
     if (options && typeof options.arrayLimit === 'number' && pair.length > options.arrayLimit) {
@@ -130,7 +141,7 @@ var merge = function merge(target, source, options) {
     if (typeof source !== 'object' && typeof source !== 'function') {
         if (isArray(target)) {
             var nextIndex = target.length;
-            if (options && typeof options.arrayLimit === 'number' && nextIndex >= options.arrayLimit) {
+            if (options && typeof options.arrayLimit === 'number' && countElements(target) >= options.arrayLimit) {
                 if (options.throwOnLimitExceeded) {
                     throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
                 }
@@ -215,7 +226,7 @@ var merge = function merge(target, source, options) {
                 target[i] = item;
             }
         });
-        if (options && typeof options.arrayLimit === 'number' && target.length > options.arrayLimit) {
+        if (options && typeof options.arrayLimit === 'number' && countElements(target) > options.arrayLimit) {
             if (options.throwOnLimitExceeded) {
                 throw new RangeError('Array limit exceeded. Only ' + options.arrayLimit + ' element' + (options.arrayLimit === 1 ? '' : 's') + ' allowed in an array.');
             }
@@ -376,11 +387,12 @@ var encode = function encode(str, defaultEncoder, charset, kind, format) {
                 c === 0x2D // -
                 || c === 0x2E // .
                 || c === 0x5F // _
-                || c === 0x7E // ~
+                || (c === 0x7E && format !== formats.WHATWG) // ~
                 || (c >= 0x30 && c <= 0x39) // 0-9
                 || (c >= 0x41 && c <= 0x5A) // a-z
                 || (c >= 0x61 && c <= 0x7A) // A-Z
                 || (format === formats.RFC1738 && (c === 0x28 || c === 0x29)) // ( )
+                || (format === formats.WHATWG && c === 0x2A) // *
             ) {
                 arr[arr.length] = segment.charAt(i);
                 continue;
@@ -404,13 +416,19 @@ var encode = function encode(str, defaultEncoder, charset, kind, format) {
                 continue;
             }
 
-            i += 1;
-            c = 0x10000 + (((c & 0x3FF) << 10) | (segment.charCodeAt(i) & 0x3FF));
+            var next = segment.charCodeAt(i + 1);
+            if (c <= 0xDBFF && next >= 0xDC00 && next <= 0xDFFF) {
+                i += 1;
+                c = 0x10000 + (((c & 0x3FF) << 10) | (next & 0x3FF));
 
-            arr[arr.length] = hexTable[0xF0 | (c >> 18)]
-                + hexTable[0x80 | ((c >> 12) & 0x3F)]
-                + hexTable[0x80 | ((c >> 6) & 0x3F)]
-                + hexTable[0x80 | (c & 0x3F)];
+                arr[arr.length] = hexTable[0xF0 | (c >> 18)]
+                    + hexTable[0x80 | ((c >> 12) & 0x3F)]
+                    + hexTable[0x80 | ((c >> 6) & 0x3F)]
+                    + hexTable[0x80 | (c & 0x3F)];
+            } else {
+                // a lone surrogate has no UTF-8 encoding; like `URLSearchParams` and `TextEncoder`, emit U+FFFD
+                arr[arr.length] = '%EF%BF%BD';
+            }
         }
 
         out += arr.join('');
@@ -508,5 +526,6 @@ module.exports = {
     markOverflow: markOverflow,
     maybeMap: maybeMap,
     merge: merge,
+    setProperty: setProperty,
     toCoercible: toCoercible
 };

package/node_modules/qs/package.json

@@ -2,7 +2,7 @@
     "name": "qs",
     "description": "A querystring parser that supports nesting and arrays, with a depth limit",
     "homepage": "https://github.com/ljharb/qs",
-    "version": "6.16.1",
+    "version": "6.17.1",
     "repository": {
         "type": "git",
         "url": "https://github.com/ljharb/qs.git"
@@ -43,8 +43,8 @@
         "common-shakeify": "~1.0.0",
         "eclint": "^2.8.1",
         "es-value-fixtures": "^1.7.1",
-        "eslint": "^10.12.0",
-        "evalmd": "^0.0.22",
+        "eslint": "^10.13.0",
+        "evalmd": "^0.1.0",
         "for-each": "^0.3.5",
         "glob": "=10.3.7",
         "has-bigints": "^1.1.0",
@@ -59,7 +59,7 @@
         "mkdirp": "^0.5.5",
         "mock-property": "^1.1.2",
         "module-deps": "^6.2.3",
-        "npmignore": "^0.3.5",
+        "npmignore": "^0.3.6",
         "nyc": "^10.3.2",
         "object-inspect": "^1.13.4",
         "qs-iconv": "^1.0.4",
@@ -72,12 +72,12 @@
         "prepack": "npmignore --auto --commentLines=autogenerated && npm run dist",
         "prepublishOnly": "safe-publish-latest",
         "prepublish": "not-in-publish || npm run prepublishOnly",
-        "pretest": "npm run --silent readme && npm run --silent lint",
+        "pretest": "npm run lint",
         "test": "npm run tests-only",
         "tests-only": "nyc tape 'test/**/*.js'",
         "posttest": "npx npm@'>=10.2' audit --production",
-        "readme": "evalmd README.md",
         "postlint": "eclint check $(git ls-files | xargs find 2> /dev/null | grep -vE 'node_modules|\\.git' | grep -v dist/)",
+        "prelint": "evalmd --eslint README.md",
         "lint": "eslint .",
         "dist": "mkdirp dist && browserify --standalone Qs -g unassertify -g @browserify/envify -g [@browserify/uglifyify --mangle.keep_fnames --compress.keep_fnames --format.indent_level=1 --compress.arrows=false --compress.passes=4 --compress.typeofs=false] -p common-shakeify -p bundle-collapser/plugin lib/index.js > dist/qs.js"
     },