Upgrade request, includes a security patch for `qs`

See http://goo.gl/bLbcLh for security advisory.