fix(core): Upgrade semver to address CVE-2022-25883 (#6689)

* fix(core): Upgrade semver to address CVE-2022-25883

[GH Advisory](https://github.com/advisories/GHSA-c2qf-rxjj-qqgw)

* enforce the patched version of semver everywhere in the dev setup

package.json

@@ -82,6 +82,7 @@
       "http-cache-semantics": "4.1.1",
       "jsonwebtoken": "9.0.0",
       "prettier": "^2.8.3",
+      "semver": "^7.5.4",
       "tough-cookie": "^4.1.3",
       "tslib": "^2.5.0",
       "ts-node": "^10.9.1",