build(deps-dev): bump conduction/hydra-gates from 1.16.0 to 1.16.1

[dependabot]

Bumps conduction/hydra-gates from 1.16.0 to 1.16.1.

Release notes

Sourced from conduction/hydra-gates's releases.

v1.16.1

Four fixes have been sitting on main since v1.16.0, and one of them is holding four apps red on development.

• fix(phpmd): exempt FleetAppId from StaticAccess (#696) — the fleet's cross-app id resolver is stateless and takes its collaborators as arguments, so the hidden coupling the rule exists to catch is absent. It was firing on the shape of the call, 24 times across larpinq, humaniq, dossiq and decidiq within minutes of the resolver landing.
• fix(gate-109): read the register wherever the app keeps it (#693)
• fix(gate-23): the PDOK exemption did not follow the integriq rename

Measured through each app's own phpmd.xml, which is how CI runs it: humaniq 10 → 1, decidiq 10 → 1, dossiq 3 → 0, larpinq 3 → 0. The two survivors are CouplingBetweenObjects, unrelated to this rule.

⚠️ The exemption lists fully-qualified names, one per app. phpmd matches this property against the FQN it prints, so FleetAppId alone matches nothing. An app adopting the resolver must be added to that list or it reds on its first push.

Commits

• bfb34cc fix(phpmd): exempt FleetAppId from StaticAccess (#696)
• 0eea792 Merge pull request #694 from ConductionNL/fix/pdok-exemption-follows-the-inte...
• f8218e9 fix(gate-23): the PDOK exemption did not follow the integriq rename
• 0897947 fix(gate-109): read the register wherever the app keeps it (#693)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Quality Report — ConductionNL/keepiq @ 9e5da53

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
test-l10n		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
composer			✅	✅ 111/111
npm			✅	✅ 543/543
app:check-code	⏭️
info.xml	✅
REUSE	✅
PHPUnit					✅
Newman					✅
Playwright					⏭️ deferred — runs on the promotion into beta/main, not on a pull request into development
Hydra gates					✅

---

Quality workflow — 2026-09-08 13:21 UTC

Download the full PDF report from the workflow artifacts.