Merge pull request #509 from nexB/dependabot/pip/lxml-4.9.1

Bump lxml from 4.8.0 to 4.9.1

Author: chinyeungli

requirements.txt

@@ -35,7 +35,7 @@ javaproperties==0.8.1
 Jinja2==3.0.3
 jsonstreams==0.6.0
 license-expression==21.6.14
-lxml==4.8.0
+lxml==4.9.1
 MarkupSafe==2.0.1
 more-itertools==8.13.0
 normality==2.3.3