Bump xercesImpl from 2.9.1 to 2.12.2

Bumps xercesImpl from 2.9.1 to 2.12.2.

---
updated-dependencies:
- dependency-name: xerces:xercesImpl
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/pom.xml b/pom.xml
index 6f811e2..d31f609 100644
--- a/pom.xml
+++ b/pom.xml
@@ -176,7 +176,7 @@
     <quartz.version>1.6.3</quartz.version>
     <slf4j.version>1.7.6</slf4j.version>
     <xalan.version>2.7.1</xalan.version>
-    <xerces.version>2.9.1</xerces.version>
+    <xerces.version>2.12.2</xerces.version>
     <xml-apis.version>2.0.2</xml-apis.version>
 
     <sonar.host.url>https://analysis.apache.org/</sonar.host.url>