set dependency version for mongoose
bump