update qs dep

no more `__proto__` in the body:D