[rpms/pack] epel8: Update to 0.40.8

[rpms/pack] epel8: Update to 0.40.8

[Lokesh Mandvekar]

            A new commit has been pushed.

            Repo   : rpms/pack
            Branch : epel8
            Commit : afb463f71aedc08b8ee0b08c3f3ff81934c9fc40
            Author : Lokesh Mandvekar <lsm5@redhat.com>
            Date   : 2026-07-22T15:53:49-04:00
            Stats  : +3/-2 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/pack/c/afb463f71aedc08b8ee0b08c3f3ff81934c9fc40?branch=epel8

            Log:
            Update to 0.40.8

Resolves: rhbz#2489893
Resolves: rhbz#2489912
Fixes: CVE-2026-39828
Fixes: GO-2026-4970
Fixes: GO-2026-5856

---
diff --git a/.gitignore b/.gitignore
index 2f4d14e..f1cbd13 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,3 +25,4 @@
 /v0.39.1-vendor.tar.gz
 /v0.40.5-vendor.tar.gz
 /v0.40.7-vendor.tar.gz
+/v0.40.8-vendor.tar.gz

diff --git a/pack.spec b/pack.spec
index 52f8ff0..e55faa5 100644
--- a/pack.spec
+++ b/pack.spec
@@ -12,7 +12,7 @@
 %global import_path %{provider}.%{provider_tld}/%{project}/%{repo}
 
 Name: pack
-Version: 0.40.7
+Version: 0.40.8
 Release: %autorelease
 Summary: Convert code into runnable images
 License: Apache-2.0 and BSD-2-Clause and BSD-3-Clause and ISC and MIT

diff --git a/sources b/sources
index d2f8f30..a81ba7e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v0.40.7-vendor.tar.gz) = 31f9bc1b0c660fc14b8f375b6dae602ac5b2c42758a1a1925ab860f6270c4f3831616180dfdb0c539e0b6363cf02e04b86753edb58b2332bcea38e4049ff713b
+SHA512 (v0.40.8-vendor.tar.gz) = a785076357ebad3e51f824dc9fc3bb8b5fc9f94a81395095dca188134f91147e99d8835bd2b268598ec04bc434a2f3d7ee2c1670b02a11ff97359187a47b5035