Bump xml2js and blamer in /ui

Removes [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js). It's no longer used after updating ancestor dependency [blamer](https://github.com/kucherenko/blamer). These dependencies need to be updated together.


Removes `xml2js`

Updates `blamer` from 1.0.1 to 1.0.3
- [Changelog](https://github.com/kucherenko/blamer/blob/master/CHANGELOG.md)
- [Commits](kucherenko/blamer@v1.0.1...v1.0.3)

---
updated-dependencies:
- dependency-name: xml2js
  dependency-type: indirect
- dependency-name: blamer
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>