Merge pull request #352 from scala/dependabot/bundler/rexml-3.2.8

Bump rexml from 3.2.6 to 3.2.8

Author: sjrd

Gemfile.lock

@@ -268,7 +268,8 @@ GEM
     rb-fsevent (0.11.2)
     rb-inotify (0.10.1)
       ffi (~> 1.0)
-    rexml (3.2.6)
+    rexml (3.2.8)
+      strscan (>= 3.0.9)
     rouge (3.30.0)
     ruby-rc4 (0.1.5)
     rubyzip (2.3.2)
@@ -283,6 +284,7 @@ GEM
       faraday (>= 0.17.3, < 3)
     simpleidn (0.2.1)
       unf (~> 0.1.4)
+    strscan (3.1.0)
     terminal-table (1.8.0)
       unicode-display_width (~> 1.1, >= 1.1.1)
     timers (4.3.5)