Bump xmldom and cos-js-sdk-v5

[dependabot[bot]]

Removes xmldom. It's no longer used after updating ancestor dependency cos-js-sdk-v5. These dependencies need to be updated together.

Removes xmldom

Updates cos-js-sdk-v5 from 0.4.7 to 1.4.6

Release notes

Sourced from cos-js-sdk-v5's releases.

v1.4.6

• 修复代码容错

v1.4.5

• 去掉源码里的 source-map

v1.4.3

• 分片复制支持续传

v1.4.1

fix

• 修复引入sdk在dev模式下启动报错问题

v1.4.0

feat

• 升级webpack版本
• 增加beacon上报

v1.3.10

fix - isNode环境判断新增webWorker场景

v1.3.9

feat

• putBucketCors支持ResponseVary
• 补充d.ts

v1.3.8

fix：修复已知错误

v1.3.7

feat：更换依赖xmldom->@​xmldom/xmldom

v1.3.6

feat：getObjectUrl支持单独设置全球加速参数UseAccelerate

v1.3.5

• cos.request支持透传DataType参数

v1.3.4

fix：修复host签名时不兼容全球加速域名

v1.3.3

• host参与签名
• getObjectUrl签名签入Query
• 新增参与签名的headers白名单

v1.3.2

fix：兼容某些环境下不存在navigator对象问题

... (truncated)

Changelog

Sourced from cos-js-sdk-v5's changelog.

v1.4.6 - 2022-09-05

• 修复代码容错

Commits

• 修复代码容错 b038089
• Updated CHANGELOG.md 2ee0f64

v1.4.5 - 2022-09-01

• 去掉源码里的 source-map

Commits

• Updated CHANGELOG.md 1011454
• 修改 sourceMap 6d4b2a9
• 修改 sourceMap 63c12bd

v1.4.4 - 2022-09-01

Commits

• 修改 sourceMap 835a567
• 修改 sourceMap 1497325

v1.4.3 - 2022-08-31

• 分片复制支持续传

Commits

• 修复容错 6e4cfd3
• Updated CHANGELOG.md 9a9e81e

v1.4.2 - 2022-08-31

Commits

• 复制支持自动判断续传 adb2791
• 修复复制错误，优化测试用例 6dbf95a
• Updated CHANGELOG.md f42fb53

v1.4.1 - 2022-08-18

fix

• 修复引入sdk在dev模式下启动报错问题

Merged

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.