build(deps): update dependency qs to v6.16.1 (#13475)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [qs](https://redirect.github.com/ljharb/qs) | [`6.16.0` →
`6.16.1`](https://renovatebot.com/diffs/npm/qs/6.16.0/6.16.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/qs/6.16.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/qs/6.16.0/6.16.1?slim=true)
|

---

### Release Notes

<details>
<summary>ljharb/qs (qs)</summary>

###
[`v6.16.1`](https://redirect.github.com/ljharb/qs/blob/HEAD/CHANGELOG.md#6161)

[Compare
Source](https://redirect.github.com/ljharb/qs/compare/v6.16.0...v6.16.1)

- \[Fix] `parse`: do not mutate an object input
- \[Fix] `stringify`: stop re-encoding structural separator dots when
`encodeDotInKeys` is set
([#&#8203;564](https://redirect.github.com/ljharb/qs/issues/564))
- \[Fix] `stringify`: `arrayFormat: 'comma'`: pass the full encoder
arguments with `encodeValuesOnly`
- \[Fix] `utils`: encode `+` as `%2B` in iso-8859-1 mode so values
round-trip
([#&#8203;565](https://redirect.github.com/ljharb/qs/issues/565))
- \[Fix] parse: only convert top-level dots to brackets when allowDots
is on ([#&#8203;621](https://redirect.github.com/ljharb/qs/issues/621))
- \[Fix] `stringify`: ignore inherited array format names
([#&#8203;622](https://redirect.github.com/ljharb/qs/issues/622))
- \[Fix] `stringify`: `arrayFormat: 'comma'`: do not throw on elements
with no callable `toString`
- \[Fix] `utils`: `merge`: seed an overflow container's index from its
own keys, not just the source
- \[Fix] `utils`: `merge`: keep a `strictMerge` conflict container's
index and `arrayLimit` correct
- \[Fix] `parse`: only treat `[]` as array syntax when it ends the key
- \[Perf] `decode`: skip decoders when there is no percent sign
([#&#8203;583](https://redirect.github.com/ljharb/qs/issues/583))
- \[Robustness] `utils`: `merge`: apply `arrayLimit` to the two-element
array built for colliding values
- \[Robustness] `parse`: bound the nesting added by repeated
`strictMerge` conflicts (credit
[@&#8203;Yeaseen](https://redirect.github.com/Yeaseen))
- \[Docs] document that `qs` and flat parsers disagree about parameter
names
- \[Docs] clarify that `throwOnLimitExceeded` limits each array, not the
total number of values
- \[Docs] clarify 6.14.1/6.15.2 parse bracket behavior change
([#&#8203;567](https://redirect.github.com/ljharb/qs/issues/567),
[#&#8203;568](https://redirect.github.com/ljharb/qs/issues/568))
- \[meta] fix changelog indents
- \[actions] set least-privilege `cache-mode`
- \[Tests] `utils`: `decode`: add missing cases
- \[Tests] `parse`: characterize the `]=` split when an `=` precedes any
bracket group
([#&#8203;620](https://redirect.github.com/ljharb/qs/issues/620))
- \[Tests] `parse`: `allowDots`: cover stray close brackets before a dot
- \[Dev Deps] update `@ljharb/eslint-config`, `eslint`, `tape`

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/authelia/authelia).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImphdmFzY3JpcHQiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

internal/suites/example/compose/duo-api/pnpm-lock.yaml

@@ -6,7 +6,7 @@ settings:
 
 overrides:
   proxy-addr: 2.0.8
-  qs: 6.16.0
+  qs: 6.16.1
 
 importers:
 
@@ -203,8 +203,8 @@ packages:
     resolution: {integrity: sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==}
     engines: {node: '>= 0.10'}
 
-  qs@6.16.0:
-    resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==}
+  qs@6.16.1:
+    resolution: {integrity: sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==}
     engines: {node: '>=0.6'}
 
   range-parser@1.3.0:
@@ -287,7 +287,7 @@ snapshots:
       http-errors: 2.0.1
       iconv-lite: 0.7.3
       on-finished: 2.4.1
-      qs: 6.16.0
+      qs: 6.16.1
       raw-body: 3.0.2
       type-is: 2.1.0
     transitivePeerDependencies:
@@ -363,7 +363,7 @@ snapshots:
       once: 1.4.0
       parseurl: 1.3.3
       proxy-addr: 2.0.8
-      qs: 6.16.0
+      qs: 6.16.1
       range-parser: 1.3.0
       router: 2.2.0
       send: 1.2.1
@@ -472,7 +472,7 @@ snapshots:
       forwarded: 0.2.0
       ipaddr.js: 1.9.1
 
-  qs@6.16.0:
+  qs@6.16.1:
     dependencies:
       es-define-property: 1.0.1
       side-channel: 1.1.1

internal/suites/example/compose/duo-api/pnpm-workspace.yaml

@@ -1,7 +1,3 @@
-# SPDX-FileCopyrightText: 2026 Authelia
-#
-# SPDX-License-Identifier: Apache-2.0
-
 overrides:
   proxy-addr: 2.0.8
-  qs: 6.16.0
+  qs: 6.16.1

web/pnpm-lock.yaml

@@ -10,7 +10,7 @@ overrides:
   js-yaml: 5.4.3
   minimatch: 10.2.6
   picomatch: 4.0.7
-  qs: 6.16.0
+  qs: 6.16.1
   semver: 7.8.5
   source-map-js: 1.2.2
   vite: 8.3.4
@@ -3348,8 +3348,8 @@ packages:
     peerDependencies:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
-  qs@6.16.0:
-    resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==}
+  qs@6.16.1:
+    resolution: {integrity: sha512-5Px6J7rfHBAGUhNQ3es4YzcOdBBw0SDcVtThJml4RdnKw4tKs2epA0kPZ+K8X+WiHktT93RHVcQ/3ym5aTCgtg==}
     engines: {node: '>=0.6'}
 
   range-parser@1.3.0:
@@ -5558,7 +5558,7 @@ snapshots:
       http-errors: 2.0.1
       iconv-lite: 0.7.3
       on-finished: 2.4.1
-      qs: 6.16.0
+      qs: 6.16.1
       raw-body: 3.0.2
       type-is: 2.1.0
     transitivePeerDependencies:
@@ -6259,7 +6259,7 @@ snapshots:
       once: 1.4.0
       parseurl: 1.3.3
       proxy-addr: 2.0.8
-      qs: 6.16.0
+      qs: 6.16.1
       range-parser: 1.3.0
       router: 2.2.0
       send: 1.2.1
@@ -7239,7 +7239,7 @@ snapshots:
     dependencies:
       react: 19.3.1
 
-  qs@6.16.0:
+  qs@6.16.1:
     dependencies:
       es-define-property: 1.0.1
       side-channel: 1.1.1

web/pnpm-workspace.yaml

@@ -7,7 +7,7 @@ overrides:
   js-yaml: 5.4.3
   minimatch: 10.2.6
   picomatch: 4.0.7
-  qs: 6.16.0
+  qs: 6.16.1
   semver: 7.8.5
   source-map-js: 1.2.2
   vite: 8.3.4