Bug: v8/tools/package-lock.json pins qs at 6.15.0, which has a vulnerability (CVE-2026-8723). qs.stringify throws a TypeError when called with arrayFormat: 'comma' and encodeValuesOnly: true on arrays containing null or undefined. Fixed in qs 6.15.2. Change-Id: I35d3fd11258f6473cab6010a01ad722731718d0c Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7952025 Reviewed-by: Paolo Severini <paolosev@microsoft.com> Reviewed-by: Camillo Bruni <cbruni@chromium.org> Commit-Queue: Tejas Vasisht <tejasvasisht@microsoft.com> Cr-Commit-Position: refs/heads/main@{#108343}