fix(vscode-extension): bump version to 1.13.0 (#422)

* fix(vscode-extension): bump version to 1.13.0 — missed in v1.13.0 release

Fixes version mismatch flagged in PR #421 review (github-actions bot).
package.json was still at 1.12.1, package-lock.json had diverged further
to 1.10.1 in the packages[""] entry.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix(ci): bump trivy-action 0.28.0 → v0.35.0 (version did not exist)

aquasecurity/trivy-action@0.28.0 has been removed upstream, causing all
PR security scans to fail at job setup. Latest stable is v0.35.0.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Ajit Pratap Singh <ajitpratapsingh@Ajits-Mac-mini-2655.local>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 3 people

.github/workflows/security.yml

@@ -76,7 +76,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.35.0
         with:
           scan-type: 'fs'
           scan-ref: '.'
@@ -118,7 +118,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run Trivy configuration scanner
-        uses: aquasecurity/trivy-action@0.28.0
+        uses: aquasecurity/trivy-action@v0.35.0
         with:
           scan-type: 'config'
           scan-ref: '.'

vscode-extension/package-lock.json

@@ -2,7 +2,7 @@
   "name": "gosqlx",
   "displayName": "GoSQLX",
   "description": "High-performance SQL parsing, validation, formatting, and analysis powered by GoSQLX",
-  "version": "1.12.1",
+  "version": "1.13.0",
   "publisher": "ajitpratap0",
   "license": "Apache-2.0",
   "repository": {