[release-2.1] fix: bump qs to ^6.16.0 for CVE-2026-82417

[Jeevansuresh1]

Backport of #681 to release-2.1.

Bump qs resolution to ^6.16.0 for CVE-2026-82417.

Test plan

• yarn install completes successfully
• yarn.lock resolves qs to 6.16.0

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 27dd36c4-f830-4fa2-9ed9-2c3aa387f7a5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (release-2.1@e46baa6). Learn more about missing BASE report.

@@              Coverage Diff               @@
##             release-2.1     #701   +/-   ##
==============================================
  Coverage               ?   87.27%           
==============================================
  Files                  ?      138           
  Lines                  ?     6869           
  Branches               ?     1746           
==============================================
  Hits                   ?     5995           
  Misses                 ?      863           
  Partials               ?       11           

Flag	Coverage Δ
plugins	87.27% <ø> (?)

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e46baa6...ff8d8b7. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.