Merge pull request #1870 from rocketstack-matt/fix/vsce-xml2js-vulnerability

fix: upgrade vsce to @vscode/vsce to fix xml2js vulnerability

Author: LeighFinegold

calm-plugins/vscode/package.json

@@ -2,7 +2,7 @@
     "name": "calm-vscode-plugin",
     "displayName": "CALM Preview & Tools",
     "description": "Live-visualize CALM architecture models, validate, and generate docs.",
-    "version": "0.0.9",
+    "version": "0.0.10",
     "publisher": "FINOS",
     "homepage": "https://calm.finos.org",
     "repository": {
@@ -137,7 +137,7 @@
         "test:coverage": "vitest run --coverage",
         "lint": "eslint src",
         "lint-fix": "eslint src --fix",
-        "package": "npm run build && vsce package --no-dependencies",
+        "package": "npm run build && npx @vscode/vsce package --no-dependencies",
         "vscode:prepublish": "npm run build"
     },
     "devDependencies": {
@@ -154,7 +154,7 @@
         "globals": "^16.0.0",
         "tsup": "^8.2.4",
         "typescript": "^5.6.2",
-        "vsce": "^2.15.0"
+        "@vscode/vsce": "^3.7.1"
     },
     "dependencies": {
         "@finos/calm-models": "file:../../calm-models",