Merge pull request #4372 from github/dependabot/npm_and_yarn/extensions/ql-vscode/multi-6c96afc0a9

Bump semver and @types/semver in /extensions/ql-vscode

Author: nickrolfe

extensions/ql-vscode/package-lock.json

@@ -2083,7 +2083,7 @@
     "proper-lockfile": "^4.1.2",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
-    "semver": "^7.6.2",
+    "semver": "^7.7.4",
     "source-map": "^0.7.6",
     "source-map-support": "^0.5.21",
     "stream-json": "^1.9.1",
@@ -2133,7 +2133,7 @@
     "@types/react": "^19.2.3",
     "@types/react-dom": "^19.2.3",
     "@types/sarif": "^2.1.2",
-    "@types/semver": "^7.5.8",
+    "@types/semver": "^7.7.1",
     "@types/stream-json": "^1.7.8",
     "@types/styled-components": "^5.1.11",
     "@types/tar-stream": "^3.1.4",