fix(deps): update module golang.org/x/mod to v0.40.0 [security] (#38914)