Fix NPM vulnerabilites (#5459)

Author: andyleejordan

.github/copilot-instructions.md

@@ -9,3 +9,5 @@
 - After updating, verify: `npm run compile` (build), `npm run lint` (lint), `npm audit` (security)
 - The ESLint packages (`eslint`, `@eslint/js`, `typescript-eslint`, `eslint-config-prettier`) should be updated together
 - Fix any new lint warnings from updates to ESLint
+- Use `npm audit` to identify vulnerabilities
+- Do not use `npm audit fix --force` when a vulnerability is in a transitive dependency, instead add an `overrides` entry

package-lock.json

@@ -94,6 +94,10 @@
     "typescript": "^6.0.2",
     "typescript-eslint": "^8.58.0"
   },
+  "overrides": {
+    "serialize-javascript": "^7.0.5",
+    "diff": "^8.0.3"
+  },
   "extensionDependencies": [
     "vscode.powershell"
   ],