Bump xalan from 2.7.0 to 2.7.2 Bumps xalan from 2.7.0 to 2.7.2. --- updated-dependencies: - dependency-name: xalan:xalan dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>