Bump glob from 10.3.12 to 11.0.0 in /extensions/ql-vscode

[dependabot]

Bumps glob from 10.3.12 to 11.0.0.

Changelog

Sourced from glob's changelog.

changeglob

11.0

• Drop support for node before v20

10.4

• Add includeChildMatches: false option
• Export the Ignore class

10.3

• Add --default -p flag to provide a default pattern
• exclude symbolic links to directories when follow and nodir are both set

10.2

• Add glob cli

10.1

• Return '.' instead of the empty string '' when the current working directory is returned as a match.
• Add posix: true option to return / delimited paths, even on Windows.

10.0.0

• No default exports, only named exports

9.3.3

• Upgraded minimatch to v8, adding support for any degree of nested extglob patterns.

9.3

• Add aliases for methods. glob.sync, glob.stream, glob.stream.sync, etc.

9.2

• Support using a custom fs object, which is passed to PathScurry
• add maxDepth option
• add stat option
• add custom Ignore support

9.1

... (truncated)

Commits

• 561601d 11.0.0
• 57226aa drop node before 20
• 7827516 10.4.4
• d06c8f8 restore support for node 14.latest and 16.latest
• c14b787 10.4.3
• 8a69def node 14 no longer supported
• eef7ea3 10.4.2
• c76a7d2 use package-json-from-dist to look up package.json
• 3cb1ed7 10.4.1
• 7a6c2a2 changelog 10.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[koesie10]

This drops support for Node.js 20, so we can't upgrade to this until we set the minimum supported VS Code version to 1.90.0.

[shati-patel]

This drops support for Node.js 20, so we can't upgrade to this until we set the minimum supported VS Code version to 1.90.0.

Minimum version has been been bumped to 1.90.0 (and released), so I believe this is okay to merge now