Bump through2 and @types/through2 in /extensions/ql-vscode

Bumps [through2](https://github.com/rvagg/through2) and [@types/through2](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/through2). These dependencies needed to be updated together.

Updates `through2` from 4.0.2 to 5.0.11
- [Release notes](https://github.com/rvagg/through2/releases)
- [Changelog](https://github.com/rvagg/through2/blob/master/CHANGELOG.md)
- [Commits](rvagg/through2@v4.0.2...v5.0.11)

Updates `@types/through2` from 2.0.41 to 5.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/through2)

---
updated-dependencies:
- dependency-name: "@types/through2"
  dependency-version: 5.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: through2
  dependency-version: 5.0.7
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

extensions/ql-vscode/package-lock.json

@@ -2143,7 +2143,7 @@
     "@types/stream-json": "^1.7.8",
     "@types/styled-components": "^5.1.11",
     "@types/tar-stream": "^3.1.4",
-    "@types/through2": "^2.0.36",
+    "@types/through2": "^5.0.0",
     "@types/tmp": "^0.2.6",
     "@types/vscode": "1.90.0",
     "@types/yauzl": "^3.4.0",
@@ -2184,7 +2184,7 @@
     "prettier": "^3.9.3",
     "storybook": "^10.5.5",
     "tar-stream": "^3.2.0",
-    "through2": "^4.0.2",
+    "through2": "^5.0.11",
     "ts-jest": "^29.4.6",
     "ts-json-schema-generator": "^2.3.0",
     "ts-node": "^10.9.2",