rebump golang.org/x/mod to v0.40.0 (#7030)