[security] run npm audit fix for dependabot alerts

[shouples]

Updates:

• js-yaml (closes https://github.com/confluentinc/vscode/security/dependabot/39)
• hono (closes https://github.com/confluentinc/vscode/security/dependabot/36, https://github.com/confluentinc/vscode/security/dependabot/37)
• glob (closes https://github.com/confluentinc/vscode/security/dependabot/41, https://github.com/confluentinc/vscode/security/dependabot/43)
• playwright (closes https://github.com/confluentinc/vscode/security/dependabot/35)

Previous report

# npm audit report

glob  10.2.0 - 10.4.5 || 11.0.0 - 11.0.3
Severity: high
glob CLI: Command injection via -c/--cmd executes matches with shell:true - https://github.com/advisories/GHSA-5j98-mcp5-4vw2
glob CLI: Command injection via -c/--cmd executes matches with shell:true - https://github.com/advisories/GHSA-5j98-mcp5-4vw2
fix available via `npm audit fix`
node_modules/@openapitools/openapi-generator-cli/node_modules/glob
node_modules/@vscode/vsce/node_modules/glob
node_modules/glob
node_modules/rimraf/node_modules/glob
  @openapitools/openapi-generator-cli  2.20.4 - 2.25.0
  Depends on vulnerable versions of glob
  node_modules/@openapitools/openapi-generator-cli

hono  <=4.10.2
Severity: high
Hono Improper Authorization vulnerability - https://github.com/advisories/GHSA-m732-5p4w-x69g
Hono vulnerable to Vary Header Injection leading to potential CORS Bypass - https://github.com/advisories/GHSA-q7jf-gf43-6x6p
fix available via `npm audit fix`
node_modules/hono

js-yaml  4.0.0 - 4.1.0
Severity: moderate
js-yaml has prototype pollution in merge (<<) - https://github.com/advisories/GHSA-mh29-5h37-fv8m
fix available via `npm audit fix`
node_modules/js-yaml

playwright  <1.55.1
Severity: high
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate - https://github.com/advisories/GHSA-7mvr-c777-76hp
fix available via `npm audit fix`
node_modules/playwright
  @playwright/test  0.9.7 - 0.1112.0-alpha2 || 1.38.0-alpha-1692262648000 - 1.55.1-beta-1758616458000
  Depends on vulnerable versions of playwright
  node_modules/@playwright/test

6 vulnerabilities (1 moderate, 5 high)

Also includes some test updates for breaking playwright changes in 1.46.0:

Fixture values that are array of objects, when specified in the test.use() block, may require being wrapped into a fixture tuple. This is best seen on the example:

import { test as base } from '@playwright/test';

// Define an option fixture that has an "array of objects" value
type User = { name: string, password: string };
const test = base.extend<{ users: User[] }>({
  users: [ [], { option: true } ],
}); 

// Specify option value in the test.use block.
test.use({
  // WRONG: this syntax may not work for you
  users: [
    { name: 'John Doe', password: 'secret' },
    { name: 'John Smith', password: 's3cr3t' },
  ],
  // CORRECT: this syntax will work. Note extra [] around the value, and the "scope" property.
  users: [[
    { name: 'John Doe', password: 'secret' },
    { name: 'John Smith', password: 's3cr3t' },
  ], { scope: 'test' }],
});

test('example test', async () => {
  // ...
});

[Copilot]

Copilot wasn't able to review any files in this pull request.