Bump tar-stream and @types/tar-stream in /extensions/ql-vscode

Bumps [tar-stream](https://github.com/mafintosh/tar-stream) and [@types/tar-stream](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/tar-stream). These dependencies needed to be updated together.

Updates `tar-stream` from 3.1.7 to 3.1.8
- [Commits](mafintosh/tar-stream@v3.1.7...v3.1.8)

Updates `@types/tar-stream` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/tar-stream)

---
updated-dependencies:
- dependency-name: tar-stream
  dependency-version: 3.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: "@types/tar-stream"
  dependency-version: 3.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

extensions/ql-vscode/package-lock.json

@@ -2136,7 +2136,7 @@
     "@types/semver": "^7.5.8",
     "@types/stream-json": "^1.7.8",
     "@types/styled-components": "^5.1.11",
-    "@types/tar-stream": "^3.1.3",
+    "@types/tar-stream": "^3.1.4",
     "@types/through2": "^2.0.36",
     "@types/tmp": "^0.2.6",
     "@types/vscode": "1.90.0",
@@ -2177,7 +2177,7 @@
     "patch-package": "^8.0.1",
     "prettier": "^3.6.1",
     "storybook": "^10.2.13",
-    "tar-stream": "^3.1.7",
+    "tar-stream": "^3.1.8",
     "through2": "^4.0.2",
     "ts-jest": "^29.4.6",
     "ts-json-schema-generator": "^2.3.0",