Bump xmldom and meteor-desktop

[dependabot]

Removes xmldom. It's no longer used after updating ancestor dependency meteor-desktop. These dependencies need to be updated together.

Removes xmldom

Updates meteor-desktop from 1.6.0 to 2.2.5

Changelog

Sourced from meteor-desktop's changelog.

v2.2.5 24.01.2020

• Fixed issue with packaging [#248](https://github.com/wojtkowiak/meteor-desktop/issues/248)

v2.2.4 21.01.2020

This is a community maintained release:

• Update some dependencies and fixes some vulnerabilities
• Added support for Electron 5 (by KoenLav in [#227](https://github.com/wojtkowiak/meteor-desktop/issues/227))
• Allow config header Access-Control-Allow-Origin on LocalServer module (by cbh6 in [#216](https://github.com/wojtkowiak/meteor-desktop/issues/216))
• Fix mas build (by wojtkowiak) in [#214](https://github.com/wojtkowiak/meteor-desktop/issues/214))
• Fix mac builds (by Strangerxxx in [#237](https://github.com/wojtkowiak/meteor-desktop/issues/237))
• Update default electron version to latest (6.0.1)
• Added support for private npm repository

Recommended versions:

• electron -> 6.1.7
• electron-builder -> 21.2.0

v2.0.0 02.10.2018

The main aim of this version is to decouple electron, electron-builder and electron-packager from this package. Until now every meteor-desktop release came with specific versions of those pinned to it. Now you are free to use any version with your meteor project. Just add them to your devDependencies. If you will not, meteor-desktop adds the recommended versions automatically when needed.

From now every meteor-desktop release will provide a recommended versions numbers of these dependencies. By default I will try to make meteor-desktop compatible within the compatibility version of the recommended version i.e. if the recommended electron version is 2.0.10 you should still be able to use any 2.x.x version without problems.

Recommended versions:

• electron -> 2.0.10
• electron-builder -> 20.28.4

BREAKING:

• support for Squirrel autoupdate mechanism ended, if you wish to continue with it, add the electron-builder-squirrel-windows dependency to your devDependencies and move it's settings to squirrel section in settings i.e.:

      "squirrel": {
          "autoUpdateFeedUrl": "http://127.0.0.1/update/:platform/:version",
          "autoUpdateFeedHeaders": {},
          "autoUpdateCheckOnStart": true
      },
  

  All builtin support will be definitely removed in January 2019.

v1.7.0 28.09.2018

• electron was updated to 2.0.10
• electron-builder was updated to 20.28.4

... (truncated)

Commits

• 39aa5c4 2.2.5
• 8b5eda1 chore: changelog update
• 8cdbfa8 Fix packager import (#248) (#262)
• c1df8b1 fix: typo
• a484d60 2.2.4
• 8b19c10 chore: update changelog
• 783f767 Merge pull request #237 from Strangerxxx/master
• 431ebb6 Merge pull request #255 from evan-coygo/patch-1
• f6ba496 2.2.3
• 31697c7 chore: update version in changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.