fix: pin fast-xml-parser past the 5.7 addentity break

[ArjunCodess]

Summary

• bump the fast-xml-parser v5 override past the 5.7.0–5.7.1 window that rejects @aws-sdk/xml-builder's addEntity("#xD")
• keep the v4 security pin
• add a webapp smoke test that constructing the parser the way the aws sdk does does not throw

Fixes #4951

Test plan

• apps/webapp/test/fast-xml-parser-irsa.test.ts
• IRSA AssumeRoleWithWebIdentity on a self-hosted webapp no longer fails during xml parser setup

[changeset-bot]

⚠️ No Changeset found

Latest commit: 6bd1170

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

Hi @ArjunCodess, thanks for your interest in contributing!

This project requires that pull request authors are vouched, and you are not in the list of vouched users.

This PR will be closed automatically. See https://github.com/triggerdotdev/trigger.dev/blob/main/CONTRIBUTING.md for more details.

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Advanced

Run ID: b8a7cdfc-fcb8-4622-a73d-dc7743e0b1c8

📥 Commits

Reviewing files that changed from the base of the PR and between 3dcafbd and 6bd1170.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (3)

• apps/webapp/package.json
• apps/webapp/test/fast-xml-parser-irsa.test.ts
• package.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}