Bump rexml from 3.3.6 to 3.3.9

Bumps [rexml](https://github.com/ruby/rexml) from 3.3.6 to 3.3.9.
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.3.6...v3.3.9)

---
updated-dependencies:
- dependency-name: rexml
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Gemfile.lock

@@ -24,13 +24,6 @@ GEM
       rack-test (>= 0.6.3)
       rails-dom-testing (~> 2.0)
       rails-html-sanitizer (~> 1.0, >= 1.2.0)
-    actiontext (7.0.8.5)
-      actionpack (= 7.0.8.5)
-      activerecord (= 7.0.8.5)
-      activestorage (= 7.0.8.5)
-      activesupport (= 7.0.8.5)
-      globalid (>= 0.6.0)
-      nokogiri (>= 1.8.5)
     actionview (7.0.8.5)
       activesupport (= 7.0.8.5)
       builder (~> 3.1)
@@ -45,13 +38,6 @@ GEM
     activerecord (7.0.8.5)
       activemodel (= 7.0.8.5)
       activesupport (= 7.0.8.5)
-    activestorage (7.0.8.5)
-      actionpack (= 7.0.8.5)
-      activejob (= 7.0.8.5)
-      activerecord (= 7.0.8.5)
-      activesupport (= 7.0.8.5)
-      marcel (~> 1.0)
-      mini_mime (>= 1.1.0)
     activesupport (7.0.8.5)
       concurrent-ruby (~> 1.0, >= 1.0.2)
       i18n (>= 1.6, < 2)
@@ -88,7 +74,6 @@ GEM
       net-imap
       net-pop
       net-smtp
-    marcel (1.0.4)
     method_source (1.1.0)
     mini_mime (1.1.5)
     minitest (5.25.1)
@@ -135,8 +120,7 @@ GEM
     rainbow (3.1.1)
     rake (13.2.1)
     regexp_parser (2.8.3)
-    rexml (3.3.6)
-      strscan
+    rexml (3.3.9)
     rspec (3.12.0)
       rspec-core (~> 3.12.0)
       rspec-expectations (~> 3.12.0)
@@ -182,7 +166,6 @@ GEM
       rubocop-capybara (~> 2.17)
       rubocop-factory_bot (~> 2.22)
     ruby-progressbar (1.13.0)
-    strscan (3.1.0)
     thor (1.3.1)
     timecop (0.9.8)
     timeout (0.4.1)