build(deps): bump qs from 6.15.2 to 6.16.0

[sinchubhat]

Resolves CVE-2026-82417 and CVE-2026-82562 by pinning qs to 6.16.0 while keeping Express 4.x unchanged.

PR Checklist

• Unit Tests have been added for new changes
• API tests have been updated if applicable
• All commented code has been removed
• If you've added a dependency, you've ensured license is compatible with Apache 2.0 and clearly outlined the added dependency.

What are you changing?

Anything the reviewer should know when reviewing this PR?

If the there are associated PRs in other repositories, please link them here (i.e. device-management-toolkit/repo#365 )

[Copilot]

🟡 Changes recommended

The lockfile does not appear to record the new overrides metadata, which can cause npm ci to fail due to a package.json/package-lock mismatch.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Pins the transitive qs dependency to 6.16.0 via npm overrides to address the referenced CVEs without changing the Express 4.x dependency, and updates the lockfile’s resolved versions accordingly.

Changes:

• Add an npm overrides rule in package.json to force qs@6.16.0.
• Update package-lock.json entries so qs (and related transitive packages) resolve to the newer versions.

File summaries

File	Description
package.json	Adds an npm overrides entry to pin qs to 6.16.0.
package-lock.json	Updates resolved qs and related transitive dependency versions/integrity hashes.

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟡 Changes recommended

The new override uses a semver range (^6.16.0) despite the PR stating it is “pinning” to 6.16.0, which can lead to unintended future upgrades when regenerating the lockfile.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 1
• Review effort level: Lite