Bump jetty-webapp from 9.4.39.v20210325 to 9.4.40.v20210413 in /source

[dependabot[bot]]

Bumps jetty-webapp from 9.4.39.v20210325 to 9.4.40.v20210413.

Release notes

Sourced from jetty-webapp's releases.

9.4.40.v20210413

Notable Bug Fixes

Users of GzipHandler should upgrade. (#6168) Users of SSL/TLS on the jetty-server or jetty-client should upgrade. (#6082)

Changelog

• #6168 - Improve handling of unconsumed content
• #6148 - Jetty start.jar always reports jetty.tag.version as master
• #6105 - HttpConnection.getBytesIn() incorrect for requests with chunked content
• #6082 - SslConnection compacting

Commits

• b881a57 Updating to version 9.4.40.v20210413
• fe359ac Fixes #6168 - Improve handling of unconsumed content
• 57d0bae Issue #5684 Reduce intensity and rename SameNodeLoadTest (#6143)
• 23c45c0 Merge pull request #6149 from eclipse/jetty-9.4.x-start-tag-name
• 19a1b0c Issue #6148 - introduce jetty.build to show git sha for build
• 8715600 Issue #6148 - update jetty.tag.version behavior
• aed20ab Fixes #6105 - HttpConnection.getBytesIn() incorrect for requests with… (#6108)
• 58538c9 Fix #6082 Reduce SSL buffer compaction (#6083)
• 941d7fb Improve testing for temp directories (#5483)
• 45c6599 Merge pull request #6134 from eclipse/jetty-9.4.x-version-cve-update
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/The4thLaw/demyo/network/alerts).

[dependabot[bot]]

Looks like org.eclipse.jetty:jetty-webapp is up-to-date now, so this is no longer needed.