fix: update audited transitive dependencies (#861)

Author: brendanjryan

.changeset/patch-fast-uri-qs.md

@@ -0,0 +1,5 @@
+---
+'mppx': patch
+---
+
+Updated `fast-uri` and `qs` to patched versions, resolving their latest security advisories.

pnpm-lock.yaml

@@ -26,7 +26,7 @@ overrides:
   nanoid@<3.3.18: '3.3.18'
   '@modelcontextprotocol/sdk@>=1.10.0 <=1.25.3': '1.26.0'
   '@modelcontextprotocol/server': '2.0.0-alpha.2'
-  qs@>=6.7.0 <=6.15.1: '6.15.2'
+  qs@>=6.7.0 <6.16.0: '6.16.0'
   ip-address@<=10.3.0: '10.3.1'
   readdir-glob@<3.0.0: '3.0.0'
   minimatch@>=5.0.0 <5.1.8: '5.1.8'
@@ -37,7 +37,7 @@ overrides:
   file-type: 'catalog:'
   flatted@<=3.4.1: '>=3.4.2'
   follow-redirects@<=1.15.11: '1.16.0'
-  fast-uri@<3.1.5: '3.1.5'
+  fast-uri@<3.1.6: '3.1.6'
   hono@<4.12.34: '4.12.34'
   '@hono/node-server@<2.0.10': '2.0.10'
   undici@>=7.0.0 <7.28.0: '7.28.0'
@@ -73,14 +73,15 @@ minimumReleaseAgeExclude:
   - esbuild@0.28.1
   - body-parser@2.3.0
   - brace-expansion@5.0.9
-  - fast-uri@3.1.5
+  - fast-uri@3.1.6
   - hono@4.12.34
   - ip-address@10.3.1
   - js-yaml@4.3.1
   - nanoid@3.3.18
   - ox@0.14.33
   - postcss@8.5.23
   - protobufjs@7.6.5
+  - qs@6.16.0
   - tar@7.5.21
   - tmp@0.2.7
   - socket.io-parser@4.2.7