fix(security): replace excel4node with write-excel-file to remove vulnerability

[EnkiP]

Definition of Done

General

• Write an explicit title for the Pull Request, following Conventional Commits specification
• Test manually the implemented changes
• Validate the code quality (indentation, syntax, style, simplicity, readability)

Security

• Consider the security impact of the changes made

Note

Replace excel4node with write-excel-file in xlsx export plugin

• Replaces the excel4node dependency with write-excel-file to remove a security vulnerability in plugin-export-advanced
• Rewrites the xlsx renderer to map records to write-excel-file cell descriptors, encoding booleans, numbers, and dates as typed cells
• addExportAdvanced now awaits the renderer output before returning the file result
• Risk: toCell in xlsx.ts now infers types, converting numeric strings to numbers and lowercase boolean strings to booleans, changing how some data is represented in exported spreadsheets

Changes since #1883 opened

• Added validation in the toCell utility within plugin-export-advanced to convert non-finite numeric values (NaN, Infinity, -Infinity) to string cells instead of number cells, and to return null for invalid Date instances [dba86e3]
• Changed the date format for XLSX date cells from 'yyyy-mm-dd hh:mm:ss' to 'm/d/yy' using a new XLSX_DATE_FORMAT constant [dba86e3]
• Configured the writeXlsxFile function call in plugin-export-advanced to specify the worksheet name as 'Export' [dba86e3]

^{Macroscope summarized 5a6cf6e.}

[qltysh]

2 new issues

Tool	Category	Rule	Count
qlty	Structure	Function with many returns (count = 9): toCell	1
qlty	Structure	Function with high complexity (count = 17): toCell	1

[qltysh]

Coverage Impact

This PR will not change total coverage.

Modified Files with Diff Coverage (2)

Rating	File	% Diff	Uncovered Line #s
	packages/plugin-export-advanced/src/index.ts	100.0%
	packages/plugin-export-advanced/src/renderers/xlsx.ts	100.0%
	Total	100.0%

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

[Tonours]

excel4node gone, security goal met. 5 findings in xlsx.ts, two are changes the description misses.