Bump mpath and mongoose

Bumps [mpath](https://github.com/aheckmann/mpath) and [mongoose](https://github.com/Automattic/mongoose). These dependencies needed to be updated together.

Updates `mpath` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/aheckmann/mpath/releases)
- [Changelog](https://github.com/mongoosejs/mpath/blob/master/History.md)
- [Commits](mongoosejs/mpath@0.8.3...0.8.4)

Updates `mongoose` from 5.13.7 to 5.13.15
- [Release notes](https://github.com/Automattic/mongoose/releases)
- [Changelog](https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md)
- [Commits](Automattic/mongoose@5.13.7...5.13.15)

---
updated-dependencies:
- dependency-name: mpath
  dependency-type: indirect
- dependency-name: mongoose
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

package-lock.json

@@ -27,7 +27,7 @@
     "fs": "0.0.1-security",
     "moment": "^2.29.1",
     "moment-duration-format": "^2.3.2",
-    "mongoose": "^5.13.7",
+    "mongoose": "^5.13.15",
     "ms": "^2.1.3"
   },
   "devDependencies": {