Multiple pinnings to vulnerable copies of libexpat

[hartwork]

Hi!

I found pinnings to old and vulnerable versions of libexpat in here at:

• Expat 2.2.9 at https://github.com/NLnetLabs/unbound/blob/HEAD/contrib/ios/install_expat.sh
• Expat 2.2.9 at https://github.com/NLnetLabs/unbound/blob/HEAD/contrib/android/install_expat.sh
• Expat 2.2.10 at https://github.com/NLnetLabs/unbound/blob/HEAD/.github/workflows/analysis_ports.yml

If any of these affect end users, please update to Expat 2.7.0 (or upcoming 2.7.1).

Thanks and best, Sebastian

[gthess]

Thanks for pointing out! These are all for CI test workflow runs, but I just went ahead and updated them.

[hartwork]

@gthess cool — thanks! 👍