fix: bump xmlbuilder2 version to address security vulnerability

xmlbuilder2 has a dependency on js-yaml. js-yaml versions <3.14.2 has a moderate severity
vulnerability (CVE-2025-64718). This patch bumps xmlbuilder2 to a version that depends on the fixed
js-yaml.

fix #3519

Author: heitorPB

package-lock.json

@@ -42,7 +42,7 @@
     "spark-md5": "3.0.2",
     "utif": "3.1.0",
     "webworker-promise": "0.5.0",
-    "xmlbuilder2": "3.1.1"
+    "xmlbuilder2": "^4.0.3"
   },
   "devDependencies": {
     "@commitlint/cli": "19.7.1",