fix: jszip related CVE (#755)

Fix https://github.com/redhat-developer/podman-desktop-sandbox-ext/security/dependabot/1.

Signed-off-by: Denis Golovin <[email protected]>

Author: dgolovin

package.json

@@ -103,7 +103,7 @@
     "vitest": "^3.0.5",
     "vscode-uri": "^3.1.0",
     "xvfb-maybe": "^0.2.1",
-    "zip-local": "^0.3.5",
-    "js-yaml": "^4.1.1"
+    "js-yaml": "^4.1.1",
+    "zip-a-folder": "^4.0.4"
   }
 }

scripts/build.cjs

@@ -17,7 +17,7 @@
  * SPDX-License-Identifier: Apache-2.0
  ***********************************************************************/
 
-const zipper = require('zip-local');
+const { zip } = require('zip-a-folder');
 const path = require('path');
 const packageJson = require('../package.json');
 const { mkdirp } = require('mkdirp');
@@ -58,6 +58,6 @@ byline(fileStream)
         throw new Error('Error copying files', error);
       }
       console.log(`Zipping files to ${destFile}`);
-      zipper.sync.zip(zipDirectory).compress().save(destFile);
+      zip(zipDirectory, destFile);
     });
   });