Run npm audit fix to address non-breaking security vulnerabilities

[Copilot]

Summary

Ran npm audit fix (no force flag, no overrides) to address security vulnerabilities that can be fixed without breaking changes.

Changes

• Updated package-lock.json with fixed dependency versions

Remaining vulnerabilities

The following vulnerabilities require --force (breaking changes) and were not addressed per task requirements:

• elliptic: Cryptographic primitive with risky implementation (would require upgrading node-polyfill-webpack-plugin to v4.1.0 — breaking change)
• got / http-cache-semantics: High severity redirect and ReDoS vulnerabilities (would require downgrading download to v3.3.0 — breaking change)
• minimatch: ReDoS vulnerabilities (would require upgrading @typescript-eslint/parser to v8.58.0 — breaking change)
• serialize-javascript: RCE and CPU exhaustion vulnerabilities (would require upgrading copy-webpack-plugin to v14.0.0 — breaking change)

[Raymond Zhao (rzhao271)]

Requires fixing vscode/test.

[Raymond Zhao (rzhao271)]

I closed microsoft/vscode-test#325 since merging it just to fix Windows tests with spaces might regress an earlier issue.

[Raymond Zhao (rzhao271)]

Copilot Modify Windows tests to not use paths with spaces

[Copilot]

Copilot Modify Windows tests to not use paths with spaces

Renamed src/testTestingRootWkspc/target workspace → src/testTestingRootWkspc/target_workspace and updated the corresponding reference in testingAdapter.test.ts in commit 4d2b9e2.