fix: semver vuln dep

BREAKING CHANGE: official support for node@8 dropped.

However there's no function being used in semver that breaks node 8,
so it's technically still possible to run with node 8, but it will
no longer be supported (or tested in CI).

Fixes: #2119

Thanks to @Primexz for pushing the change through.

* Primexz-main:
  update simple-update-notifier
  bump simple-update-notifier & semver

package.json

@@ -9,7 +9,7 @@
     "nodemon": "./bin/nodemon.js"
   },
   "engines": {
-    "node": ">=8.10.0"
+    "node": ">=10"
   },
   "repository": {
     "type": "git",
@@ -60,8 +60,8 @@
     "ignore-by-default": "^1.0.1",
     "minimatch": "^3.1.2",
     "pstree.remy": "^1.1.8",
-    "semver": "^5.7.1",
-    "simple-update-notifier": "^1.0.7",
+    "semver": "^7.5.3",
+    "simple-update-notifier": "^2.0.0",
     "supports-color": "^5.5.0",
     "touch": "^3.1.0",
     "undefsafe": "^2.0.5"