chore(deps): update dependency mqtt to v5.16.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
mqtt	5.14.1 → 5.16.0

---

Release Notes

mqttjs/MQTT.js (mqtt)

v5.16.0

Compare Source

Bug Fixes

• bounds-check the suback granted array against subscriptions sent (GHSA-rj8f-4655-cgg2) (#​2061) (46ee23f), closes #​2060
• enforce MQTT 5 Receive Maximum for inbound QoS 2 messages (GHSA-h8jm-hm87-fqw3) (#​2065) (ec5bf3e), closes #​2064 #​2063 #​2062 #​2061 #​2060
• keep broker CONNACK properties out of the user options object (GHSA-gfxc-3w7m-8ch4) (#​2062) (3db16f5), closes #​2061 #​2060 #​2060 #​2060
• reject a duplicate CONNACK instead of re-running connection setup (GHSA-8phv-jwjm-93rr) (#​2064) (7108ea5), closes #​2063 #​2062 #​2061 #​2060
• reject an unsolicited AUTH instead of crashing the process (GHSA-fwrw-4mhv-wxvm) (#​2063) (b511e7b), closes #​2062 #​2061 #​2060 #​2060
• reject unsolicited MQTT 5 topic alias instead of crashing (GHSA-c8jq-r765-cq7g) (#​2060) (7d07757)

5.15.2 (2026-07-06)

Bug Fixes

• connect/tls: don't overwrite an explicit servername (SNI) (#​2051) (cd1d780)
• support relative WebSocket URLs (#​2049) (c4be563), closes #​2035

5.15.1 (2026-03-24)

v5.15.2

Compare Source

Bug Fixes

• connect/tls: don't overwrite an explicit servername (SNI) (#​2051) (cd1d780)
• support relative WebSocket URLs (#​2049) (c4be563), closes #​2035

v5.15.1

Compare Source

v5.15.0

Compare Source

Features

• exported topic validation functions for external use (#​2036) 396e02a, closes #​2036

5.14.1 (2025-09-04)

Bug Fixes

• connect/ws: ensure proxy stream is writable (#​2024) (fe45405), closes #​1914
• isWebWorkerEnv check for Deno environment (#​2023) (a6e74ad)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.