fix(deps): bump qs to >=6.14.2 (GHSA-6rw7-vpxm-498p, CVE-2025-15284)

[cswkim]

Description

Versions 6.7.0–6.14.1 are affected by GHSA-6rw7-vpxm-498p / CVE-2025-15284 (arrayLimit bypass in bracket notation, leading to DoS via memory exhaustion). Pinning to 6.14.2 ensures all dependents use the patched release.

Checklist

• It's useful if your PR references an issue where it is discussed ahead of time
• Adhere to semantic messaging and prefix your PR title with feat:, fix:, chore:, docs:, etc.
• I’ve added tests if needed
• I’ve updated documentation if applicable
• I’ve tested this locally
• Add a changeset (pnpm changeset) if necessary

Tests and linting

• Run the tests with pnpm test.
• Run the lint check with pnpm lint.
• Run the code formatting (prettier) check with pnpm format.

[changeset-bot]

🦋 Changeset detected

Latest commit: 5530cdd

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
discogs-mcp-server	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR