deps: qs@1.0.2

closes #1048