remove xalan dependency due to it being end of life

Xalan is no longer supported.

https://lists.apache.org/thread/s8kjny5270ssfcp46v0fl39lk98987w7

It is better to use JAXP TransformerFactory than using xalan directly. If you add xalan dependency just to ensure that you have a JAXP compliant transformer on the classpath, this is unnecessary - the Java runtime has a built-in implementation.

Batik use of xalan:

• https://mvnrepository.com/artifact/org.apache.xmlgraphics/batik-dom/1.14
• https://github.com/apache/xmlgraphics-batik/blob/trunk/build.xml