Bump loofah from 2.6.0 to 2.7.0

Can't show this merge request because the source branch dependabot-bundler-loofah-2.7.0 is missing from project georgekoltsov-multiple-projects-test-4/imported-project-ef029319134ab099. Close this merge request or update the source branch.