fix: @W-19244073 Updating packages after security scan

Author: sf-pallavi-das

package.json

@@ -15,14 +15,22 @@
     "@types/jsdom": "^21.1.7",
     "@types/lodash.chunk": "^4.2.9",
     "@types/shelljs": "^0.8.15",
+    "@xmldom/xmldom": "^0.9.8",
     "cli-progress": "^3.12.0",
     "diff": "^5.1.0",
+    "form-data": "^4.0.4",
     "jsdom": "^25.0.0",
+    "jsonwebtoken": "^9.0.2",
     "lodash.chunk": "^4.2.0",
+    "marked": "^16.1.2",
+    "minimatch": "^10.0.3",
+    "nanoid": "^5.1.5",
     "open": "^8.4.2",
+    "semver": "^7.7.2",
     "shelljs": "^0.8.5",
-    "tslib": "^2",
-    "xmldom": "^0.6.0"
+    "tough-cookie": "^5.1.2",
+    "trim-newlines": "^5.0.0",
+    "tslib": "^2"
   },
   "devDependencies": {
     "@babel/parser": "^7.25.6",
@@ -37,6 +45,7 @@
     "@salesforce/ts-sinon": "^1",
     "@types/babel__traverse": "^7.20.6",
     "@types/jsforce": "^1.11.5",
+    "@types/xmldom": "^0.1.34",
     "@typescript-eslint/eslint-plugin": "^4.2.0",
     "@typescript-eslint/parser": "^4.2.0",
     "chai": "^4.4.1",
@@ -62,6 +71,31 @@
     "ts-node": "^10.9.2",
     "typescript": "^4.9.5"
   },
+  "resolutions": {
+    "nanoid": "^3.3.8",
+    "marked": "^4.0.10",
+    "semver": "^7.5.2",
+    "jsonwebtoken": "^9.0.2",
+    "form-data": "^4.0.4",
+    "trim-newlines": "^3.0.1",
+    "minimatch": "^3.0.5",
+    "tough-cookie": "^4.1.3",
+    "ansi-regex": "^4.1.1",
+    "json5": "^2.2.2",
+    "braces": "^3.0.3",
+    "ejs": "^3.1.10",
+    "micromatch": "^4.0.8",
+    "path-to-regexp": "^1.9.0",
+    "@babel/runtime-corejs3": "^7.26.10",
+    "@babel/runtime": "^7.26.10",
+    "@babel/helpers": "^7.26.10",
+    "cross-spawn": "^7.0.5",
+    "tar-fs": "^2.1.3",
+    "brace-expansion": "^2.0.2",
+    "tmp": "^0.2.4",
+    "request": "^2.88.2",
+    "lodash.template": "^4.5.0"
+  },
   "engines": {
     "node": ">=12.0.0"
   },

src/utils/XMLUtil.ts

@@ -10,7 +10,7 @@
 /* eslint-disable @typescript-eslint/no-unsafe-assignment */
 /* eslint-disable @typescript-eslint/no-explicit-any */
 
-import { DOMParser, XMLSerializer } from 'xmldom';
+import { DOMParser, XMLSerializer } from '@xmldom/xmldom';
 
 /**
  * XMLUtil provides XML parsing and building functionality using the xmldom library.
@@ -50,15 +50,20 @@ export class XMLUtil {
 
   // Parse XML string to JSON
   public parse(xmlString: string): any {
-    const doc = this.parser.parseFromString(xmlString, 'text/xml');
-    return this.xmlToJson(doc.documentElement);
+    try {
+      const doc = this.parser.parseFromString(xmlString, 'text/xml');
+      return this.xmlToJson(doc.documentElement as any);
+    } catch (error) {
+      // Return empty object for invalid XML instead of throwing
+      return {};
+    }
   }
 
   // Convert JSON object to XML
   public build(jsonObject: any, rootElement = 'root'): string {
     const doc = new DOMParser().parseFromString(`<${rootElement}></${rootElement}>`, 'text/xml');
     const rootNode = doc.documentElement;
-    this.jsonToXml(jsonObject, rootNode);
+    this.jsonToXml(jsonObject, rootNode as unknown as Node);
     return this.xmlHeader + this.prettyPrintXml(this.serializer.serializeToString(doc));
   }
 

src/utils/lwcparser/xmlParser/XmlParser.ts

@@ -6,7 +6,7 @@
 /* eslint-disable @typescript-eslint/no-unsafe-assignment */
 /* eslint-disable @typescript-eslint/explicit-member-accessibility */
 import * as fs from 'fs';
-import { DOMParser, XMLSerializer } from 'xmldom';
+import { DOMParser, XMLSerializer, Document } from '@xmldom/xmldom';
 import { FileConstant } from '../fileutils/FileConstant';
 import { Logger } from '../../logger';
 
@@ -51,6 +51,8 @@ export class XmlParser {
       xmlContentMap.set(FileConstant.MODIFIED_CONTENT, xmlString);
       return xmlContentMap;
     }
+
+    return xmlContentMap;
   }
 
   public saveToFile(outputFilePath: string, xmlString: string): void {