[Security] Bump symfony/http-foundation from 3.4.17 to 3.4.40

Bumps [symfony/http-foundation](https://github.com/symfony/http-foundation) from 3.4.17 to 3.4.40. **This update includes security fixes.**
- [Release notes](https://github.com/symfony/http-foundation/releases)
- [Changelog](https://github.com/symfony/http-foundation/blob/master/CHANGELOG.md)
- [Commits](symfony/http-foundation@v3.4.17...v3.4.40)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>