Bump node-fetch from 2.6.1 to 2.6.7 in /extensions/ql-vscode

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Changelog](https://github.com/node-fetch/node-fetch/blob/main/docs/CHANGELOG.md)
- [Commits](node-fetch/node-fetch@v2.6.1...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

extensions/ql-vscode/package-lock.json

@@ -1009,7 +1009,7 @@
     "glob-promise": "^3.4.0",
     "js-yaml": "^3.14.0",
     "minimist": "~1.2.5",
-    "node-fetch": "~2.6.0",
+    "node-fetch": "~2.6.7",
     "path-browserify": "^1.0.1",
     "react": "^16.8.6",
     "react-dom": "^16.8.6",