0.16.2

What's Changed

• build(deps): batch compatible updates and group future Dependabot PRs by @ChrisRomp in #257
• build(deps): Bump the compatible-npm-updates group with 5 updates by @dependabot[bot] in #258
• build(deps): Bump the compatible-npm-updates group with 3 updates by @dependabot[bot] in #259
• build(deps): Bump qs from 6.15.2 to 6.16.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in #256
• build(deps): Bump the compatible-npm-updates group with 5 updates by @dependabot[bot] in #260
• fix: patch proxy-addr advisory and prepare 0.16.2 release in #261

Security

Updated transitive proxy-addr to 2.0.8 to fix GHSA-jqcg-44mw-7w3h (CVE-2026-90711). The release workflow now checks that the release tag and lockfile versions match package.json before publishing.

Full Changelog: v0.16.1...v0.16.2