Bump xml2js and cos-nodejs-sdk-v5

Removes [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js). It's no longer used after updating ancestor dependency [cos-nodejs-sdk-v5](https://github.com/tencentyun/cos-nodejs-sdk-v5). These dependencies need to be updated together.


Removes `xml2js`

Updates `cos-nodejs-sdk-v5` from 2.5.14 to 2.14.6
- [Release notes](https://github.com/tencentyun/cos-nodejs-sdk-v5/releases)
- [Changelog](https://github.com/tencentyun/cos-nodejs-sdk-v5/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tencentyun/cos-nodejs-sdk-v5/commits)

---
updated-dependencies:
- dependency-name: xml2js
  dependency-type: indirect
- dependency-name: cos-nodejs-sdk-v5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>