Bump semver and @types/semver in /extensions/ql-vscode

Bumps [semver](https://github.com/npm/node-semver) and [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver). These dependencies needed to be updated together.

Updates `semver` from 7.7.3 to 7.7.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.7.3...v7.7.4)

Updates `@types/semver` from 7.5.8 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: "@types/semver"
  dependency-version: 7.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

extensions/ql-vscode/package-lock.json

@@ -2083,7 +2083,7 @@
     "proper-lockfile": "^4.1.2",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
-    "semver": "^7.6.2",
+    "semver": "^7.7.4",
     "source-map": "^0.7.6",
     "source-map-support": "^0.5.21",
     "stream-json": "^1.9.1",
@@ -2133,7 +2133,7 @@
     "@types/react": "^19.2.3",
     "@types/react-dom": "^19.2.3",
     "@types/sarif": "^2.1.2",
-    "@types/semver": "^7.5.8",
+    "@types/semver": "^7.7.1",
     "@types/stream-json": "^1.7.8",
     "@types/styled-components": "^5.1.11",
     "@types/tar-stream": "^3.1.4",