Upgrade dependency to fix vulnerabilities

[sascha-cariad]

Not sure if it is a right place to post it

vulnerability

[CVE-2026-24051] CWE-426: Untrusted Search Path

package

golang/go.opentelemetry.io/otel/sdk@v1.39.0

fix

A fix was released with v1.40.0.

reported by

nancy version: v1.0.51

[charlieegan3]

Thanks, I have opened a PR here: open-policy-agent/opa#8305.

No problem to file this here, but can also open issues for things like this.