[Snyk] Security upgrade @vscode/extension-telemetry from 0.8.5 to 0.9.0

[posit-snyk-bot]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• extensions/positron-python/package.json
• extensions/positron-python/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-OPENTELEMETRYCORE-17373280	111

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[posit-snyk-bot]

This is a minor version upgrade. The release notes for version 0.9.0 indicate that the changes are limited to internal dependency updates and a migration of the project's linting configuration. There are no documented API changes or breaking changes for consumers of the package.

Changes in v0.9.0:

• Updates to direct dependencies.
• Bumps of brace-expansion, flatted, and minimatch.
• Migration to ESLint 9.

Source: GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[github-actions]

E2E Tests 🚀
This PR will run tests tagged with: @:critical

^{readme  valid tags}

[juliasilge]

@austin3dickey can you evaluate if we should take this bump? We turn off all the Microsoft telemetry but having the version that triggers security checks is not good for us.

[austin3dickey]

The upstream change that bumps this is microsoft/vscode-python#26007, which bumps the major version. But this minor version bump should be fine in the meantime while we wait for that to be merged.