Merge pull request #2496 from github/dependabot/npm_and_yarn/extensions/ql-vscode/xml2js-and-vscode/vsce-and-azure/core-http-0.5.0

Bump xml2js, @vscode/vsce and @azure/core-http in /extensions/ql-vscode

Author: koesie10