Fix Vulnerability

Summary:
per title

For `xmldom`, npm can't push the update as mentioned in https://github.com/xmldom/xmldom/releases/tag/0.7.0

Reviewed By: lblasa

Differential Revision: D30101848

fbshipit-source-id: 0d84a302b845708787d5cae01643dba9963f0330

desktop/package.json

@@ -218,7 +218,8 @@
     "axios": "^0.21.1",
     "glob-parent": "^5.1.2",
     "normalize-url": "^4.5.1",
-    "d3-array": "2.3.3"
+    "d3-array": "2.3.3",
+    "tar": "^6.1.2"
   },
   "scripts": {
     "build": "cross-env NODE_ENV=production ./ts-node scripts/build-release.ts $@",

desktop/yarn.lock

@@ -9515,10 +9515,10 @@ minipass@^3.0.0:
   dependencies:
     yallist "^4.0.0"
 
-minizlib@^2.1.0:
+minizlib@^2.1.1:
-  version "2.1.0"
+  version "2.1.2"
-  resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-2.1.0.tgz#fd52c645301ef09a63a2c209697c294c6ce02cf3"
+  resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-2.1.2.tgz#e90d3466ba209b932451508a11ce3d3632145931"
-  integrity sha512-EzTZN/fjSvifSX0SlqUERCN39o6T40AMarPbv0MrarSFtIITCBh7bi+dU8nxGFHuqs9jdIAeoYoKuQAAASsPPA==
+  integrity sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg==
   dependencies:
     minipass "^3.0.0"
     yallist "^4.0.0"
@@ -12509,15 +12509,15 @@ tar-stream@^2.0.0, tar-stream@^2.2.0:
     inherits "^2.0.3"
     readable-stream "^3.1.1"
 
-tar@^6.0.1:
+tar@^6.0.1, tar@^6.1.2:
-  version "6.0.2"
+  version "6.1.6"
-  resolved "https://registry.yarnpkg.com/tar/-/tar-6.0.2.tgz#5df17813468a6264ff14f766886c622b84ae2f39"
+  resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.6.tgz#c23d797b0a1efe5d479b1490805c5443f3560c5d"
-  integrity sha512-Glo3jkRtPcvpDlAs/0+hozav78yoXKFr+c4wgw62NNMO3oo4AaJdCo21Uu7lcwr55h39W2XD1LMERc64wtbItg==
+  integrity sha512-oaWyu5dQbHaYcyZCTfyPpC+VmI62/OM2RTUYavTk1MDr1cwW5Boi3baeYQKiZbY2uSQJGr+iMOzb/JFxLrft+g==
   dependencies:
     chownr "^2.0.0"
     fs-minipass "^2.0.0"
     minipass "^3.0.0"
-    minizlib "^2.1.0"
+    minizlib "^2.1.1"
     mkdirp "^1.0.3"
     yallist "^4.0.0"
 

react-native/ReactNativeFlipperExample/package.json

@@ -30,7 +30,7 @@
     "react-native-flipper": "../react-native-flipper"
   },
   "resolutions": {
-    "xmldom": "0.5.0",
+    "xmldom": "github:xmldom/xmldom#0.7.0",
     "react-devtools-core": "4.13.2",
     "lodash": "4.17.21",
     "hosted-git-info": "3.0.8",

react-native/ReactNativeFlipperExample/yarn.lock

@@ -6229,10 +6229,9 @@ xmldoc@^1.1.2:
   dependencies:
     sax "^1.2.1"
 
-xmldom@0.5.0, xmldom@^0.5.0:
+xmldom@^0.5.0, "xmldom@github:xmldom/xmldom#0.7.0":
-  version "0.5.0"
+  version "0.7.0"
-  resolved "https://registry.yarnpkg.com/xmldom/-/xmldom-0.5.0.tgz#193cb96b84aa3486127ea6272c4596354cb4962e"
+  resolved "https://codeload.github.com/xmldom/xmldom/tar.gz/c568938641cc1f121cef5b4df80fcfda1e489b6e"
-  integrity sha512-Foaj5FXVzgn7xFzsKeNIde9g6aFBxTPi37iwsno8QvApmtg7KYrr+OPyRHcJF7dud2a5nGRBXK3n0dL62Gf7PA==
 
 xtend@~4.0.1:
   version "4.0.2"

react-native/react-native-flipper/package.json

@@ -36,7 +36,7 @@
     "minimist": "1.2.3",
     "kind-of": "6.0.3",
     "node-fetch": "^2.6.1",
-    "xmldom": "0.5.0",
+    "xmldom": "github:xmldom/xmldom#0.7.0",
     "browserslist": "^4.16.5",
     "ws": "7.4.6"
   }

react-native/react-native-flipper/yarn.lock

@@ -4467,10 +4467,9 @@ xmldoc@^1.1.2:
   dependencies:
     sax "^1.2.1"
 
-xmldom@0.1.x, xmldom@0.5.0:
+xmldom@0.1.x, "xmldom@github:xmldom/xmldom#0.7.0":
-  version "0.5.0"
+  version "0.7.0"
-  resolved "https://registry.yarnpkg.com/xmldom/-/xmldom-0.5.0.tgz#193cb96b84aa3486127ea6272c4596354cb4962e"
+  resolved "https://codeload.github.com/xmldom/xmldom/tar.gz/c568938641cc1f121cef5b4df80fcfda1e489b6e"
-  integrity sha512-Foaj5FXVzgn7xFzsKeNIde9g6aFBxTPi37iwsno8QvApmtg7KYrr+OPyRHcJF7dud2a5nGRBXK3n0dL62Gf7PA==
 
 xtend@~4.0.1:
   version "4.0.2"