Merge pull request #4327 from github/dependabot/npm_and_yarn/extensions/ql-vscode/multi-c70ddd30be

Bump tar-stream and @types/tar-stream in /extensions/ql-vscode

Author: cklin

extensions/ql-vscode/package-lock.json

@@ -2136,7 +2136,7 @@
     "@types/semver": "^7.5.8",
     "@types/stream-json": "^1.7.8",
     "@types/styled-components": "^5.1.11",
-    "@types/tar-stream": "^3.1.3",
+    "@types/tar-stream": "^3.1.4",
     "@types/through2": "^2.0.36",
     "@types/tmp": "^0.2.6",
     "@types/vscode": "1.90.0",
@@ -2177,7 +2177,7 @@
     "patch-package": "^8.0.1",
     "prettier": "^3.6.1",
     "storybook": "^10.2.13",
-    "tar-stream": "^3.1.7",
+    "tar-stream": "^3.1.8",
     "through2": "^4.0.2",
     "ts-jest": "^29.4.6",
     "ts-json-schema-generator": "^2.3.0",