Generation of query string parameters should take [DisableQueryString] into account. See also the remark at #1378:

If a controller is decorated with [DisableQueryString(JsonApiQueryStringParameters.All)], we could hide the query string from OpenAPI. I didn't implement that, because the information is hard to obtain and it's a corner case. And when users decide to add their own query string parameters, it would incorrectly hide the possibility of providing them.

Originally posted by @bkoelman in #1058 (comment)