chore(deps): bump github.com/buildpacks/pack from 0.40.7 to 0.40.8

[dependabot]

Bumps github.com/buildpacks/pack from 0.40.7 to 0.40.8.

Release notes

Sourced from github.com/buildpacks/pack's releases.

pack v0.40.8

Prerequisites

• A container runtime such as Docker or podman must be available to execute builds.

Install

For instructions on installing pack, see our installation docs.

Run

Run the command pack.

You should see the following output

CLI for building apps using Cloud Native Buildpacks
Usage:
pack [command]
Available Commands:
build                 Generate app image from source code
builder               Interact with builders
buildpack             Interact with buildpacks
extension             Interact with extensions
config                Interact with your local pack config file
inspect               Show information about a built app image
stack                 (deprecated) Interact with stacks
rebase                Rebase app image with latest run image
sbom                  Interact with SBoM
completion            Outputs completion script location
report                Display useful information for reporting an issue
version               Show current 'pack' version
help                  Help about any command
Flags:
--force-color   Force color output
-h, --help          Help for 'pack'
--no-color      Disable color output
-q, --quiet         Show less output
--timestamps    Enable timestamps in output
-v, --verbose       Show more output
--version       Show current 'pack' version
Use "pack [command] --help" for more information about a command.

Info

... (truncated)

Commits

• 3253355 build(deps): bump Go to 1.25.12 and safe x/* deps to fix CVEs (#2653)
• a469ae3 build(deps): bump safe go-dependencies (kaniko, tcell, gomega, x/mod) (#2647)
• 02d2e69 Add license scan report and status (#2638)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.22%. Comparing base (97cf738) to head (0aff079).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5831   +/-   ##
=======================================
  Coverage   50.22%   50.22%           
=======================================
  Files         346      346           
  Lines       79603    79603           
=======================================
  Hits        39980    39980           
  Misses      38102    38102           
  Partials     1521     1521           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.