bump mongoose dev dependancy