Upgrade to Tomcat 9.0.40

Closes gh-24360

spring-boot-project/spring-boot-dependencies/pom.xml

@@ -209,7 +209,7 @@
 		<thymeleaf-layout-dialect.version>2.4.1</thymeleaf-layout-dialect.version>
 		<thymeleaf-extras-data-attribute.version>2.0.1</thymeleaf-extras-data-attribute.version>
 		<thymeleaf-extras-java8time.version>3.0.4.RELEASE</thymeleaf-extras-java8time.version>
-		<tomcat.version>9.0.39</tomcat.version>
+		<tomcat.version>9.0.40</tomcat.version>
 		<unboundid-ldapsdk.version>4.0.14</unboundid-ldapsdk.version>
 		<undertow.version>2.0.32.Final</undertow.version>
 		<webjars-hal-browser.version>3325375</webjars-hal-browser.version>