updated lxml version

[sumandari]

This PR is to address lxml CVE-2021-28957.

Please be noted that in the dockerize version, we are using defusedxml instead of lxml
\cc @dimasciput

[codecov-commenter]

Codecov Report

Merging #209 (c10c412) into master (9d2528d) will increase coverage by 2.49%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master     #209      +/-   ##
==========================================
+ Coverage   65.53%   68.03%   +2.49%     
==========================================
  Files          97       98       +1     
  Lines        3821     3785      -36     
==========================================
+ Hits         2504     2575      +71     
+ Misses       1317     1210     -107     

Impacted Files	Coverage Δ
qgis-app/plugins/management/__init__.py
qgis-app/lib/__init__.py
qgis-app/base/views/__init__.py
qgis-app/base/forms/__init__.py
qgis-app/plugins/tests/__init__.py	100.00% <0.00%> (ø)
qgis-app/users/tests.py	100.00% <0.00%> (ø)
qgis-app/userexport/tests.py	100.00% <0.00%> (ø)
qgis-app/plugins/tests/test_validator.py	100.00% <0.00%> (ø)
qgis-app/plugins/tests/tests.py	100.00% <0.00%> (ø)
qgis-app/plugins/validator.py	62.89% <0.00%> (+49.68%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 9d2528d...c10c412. Read the comment docs.

[timlinux]

Check if we are still using this dependency and if not remove it rather