bump HaXml upper bound to < 1.26