chore(deps): resolve 3 more Dependabot alerts (dompurify, fast-xml-parser, sharp) (#8069)

- dompurify ^3.4.12 (direct dep + override) — #132 (low)
- fast-xml-parser ^5.10.1 (override, via @azure/core-xml) — #133 (high, DOCTYPE entity expansion)
- sharp ^0.35.0 (override, via next + @huggingface/transformers) — #134 (high, libvips CVEs)

Resolved: dompurify 3.4.12, fast-xml-parser 5.10.1, sharp 0.35.3. All clear in npm audit; lockfile-lint OK.

changelog.d/fixes/sec-deps2-dependabot-3.md

@@ -0,0 +1 @@
+- chore(deps): bump dompurify≥3.4.12, fast-xml-parser≥5.10.1, sharp≥0.35.0 to clear 3 Dependabot alerts

package.json

@@ -251,7 +251,7 @@
     "clsx": "^2.1.1",
     "commander": "^15.0.0",
     "csv-stringify": "^6.7.0",
-    "dompurify": "^3.4.11",
+    "dompurify": "^3.4.12",
     "express": "^5.2.1",
     "fetch-socks": "^1.3.3",
     "fflate": "^0.8.3",
@@ -390,7 +390,9 @@
     ]
   },
   "overrides": {
-    "dompurify": "^3.4.11",
+    "dompurify": "^3.4.12",
+    "fast-xml-parser": "^5.10.1",
+    "sharp": "^0.35.0",
     "postcss": "^8.5.14",
     "ip-address": "10.2.0",
     "qs": "^6.15.2",