Merge pull request #6 from apache/dependabot/bundler/rexml-3.2.8

Bump rexml from 3.2.5 to 3.2.8