Bump semver and mongoose in /003 - Mongoose with Express

Removes [semver](https://github.com/npm/node-semver). It's no longer used after updating ancestor dependency [mongoose](https://github.com/Automattic/mongoose). These dependencies need to be updated together.


Removes `semver`

Updates `mongoose` from 5.9.7 to 5.13.19
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/5.13.19/History.md)
- [Commits](Automattic/mongoose@5.9.7...5.13.19)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: indirect
- dependency-name: mongoose
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

003 - Mongoose with Express/package-lock.json

@@ -12,7 +12,7 @@
     "debug": "~2.6.9",
     "express": "~4.16.1",
     "http-errors": "~1.6.3",
-    "mongoose": "^5.9.7",
+    "mongoose": "^5.13.19",
     "morgan": "~1.9.1",
     "pug": "2.0.0-beta11"
   }