Merge pull request #7 from apache/dependabot/bundler/rexml-3.3.6

Bump rexml from 3.2.8 to 3.3.6