fix(core): Upgrade semver to address CVE-2022-25883 (#6689)

* fix(core): Upgrade semver to address CVE-2022-25883

[GH Advisory](https://github.com/advisories/GHSA-c2qf-rxjj-qqgw)

* enforce the patched version of semver everywhere in the dev setup

packages/cli/package.json

@@ -171,7 +171,7 @@
     "reflect-metadata": "^0.1.13",
     "replacestream": "^4.0.3",
     "samlify": "^2.8.9",
-    "semver": "^7.3.8",
+    "semver": "^7.5.4",
     "shelljs": "^0.8.5",
     "simple-git": "^3.17.0",
     "source-map-support": "^0.5.21",