Bump some dependencies with "breaking" changes in patch versions

[mischnic]

I copied some changes from #8631 that aren't related to undeclared dependencies (and caused the tests to fail once some deps were bumped in the lockfile)

Both of these happened in a patch version (that is covered by our dependency ranges):

• fastest-levenshtein added __esModule: true, so import levenshtein from "..." didn't work anymore.
• xmldom now correctly updates element.parentNode after removing the element:

element.parentNode.removeChild(element);
element.parentNode.appendChild(...); // parentNode is null now

And for empty documents, parsed.documentElement is null