Chore: Update vulnerable deps

[robertdeniszczyc2]

Is this pull request a content or a code change? (Please fill in the relevant section and delete the other)

Code change

I can confirm:

Accessibility considerations

• [x] This change will not change layouts, page structures or anything else that might impact accessibility

or

• [ ] This change might impact accessibility, automated aXe tests cover the impact

or

• [ ] This change might impact accessibility and is not covered by automated aXe tests - manual testing has been performed (If the change might impact accessibility then please add some further information here)

Content change

I can confirm:

• [ ] Content does not include any code or configuration changes (excluding frontmatter information)
• [ ] Content meets the content standards e.g. Writing a principle and Writing a standard
• [ ] Content is suitable to open source, i.e.:
  • Content does not relate to unreleased gov policy
  • Content does not refer to anti-fraud mechanisms
  • Content does not include sensitive business logic
• [ ] Last updated date for content is correct

[robertdeniszczyc2]

Fixes:

# npm audit report

semver  <5.7.2 || >=7.0.0 <7.5.2
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
semver vulnerable to Regular Expression Denial of Service - https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
fix available via `npm audit fix`
node_modules/nodemon/node_modules/semver
node_modules/simple-update-notifier/node_modules/semver
  simple-update-notifier  1.0.7 - 1.1.0
  Depends on vulnerable versions of semver
  node_modules/simple-update-notifier
    nodemon  2.0.19 - 2.0.22
    Depends on vulnerable versions of simple-update-notifier
    node_modules/nodemon
      govuk-prototype-kit  <=13.12.1
      Depends on vulnerable versions of nodemon
      node_modules/govuk-prototype-kit