[Aikido] Fix security issue in x/mod via minor version upgrade from 0.19.0 to 0.40.0 in utils

[aikido-autofix]

Upgrade golang.org/x/mod to fix critical vulnerabilities allowing malicious GOPROXY/GOSUMDB to bypass transparency log verification and inject malicious module content.

✅ 2 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
CVE-2026-56865	HIGH	[golang.org/x/mod] A malicious GOPROXY can forge sumdb tiles to bypass GOSUMDB verification and inject malicious module content into the local Go module cache, enabling undetected code execution through compromised dependencies.
CVE-2026-56864	HIGH	[golang.org/x/mod] A malicious GOSUMDB can serve arbitrary module content outside the transparency log, enabling coordinated attacks between a compromised GOPROXY and GOSUMDB to deliver undetectable malicious modules. This vulnerability allows remote code execution through supply chain compromise.

[deepsource-io]

DeepSource Code Review

We reviewed changes in eec11ce...233f63c on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Go		Aug 16, 2026 1:33a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.