Expat 2.2.9 is out, but we import 2.2.6. There was some issue with updating in !6340 that needs looked at.