chore(deps): update dependency semver to v7.5.4

[AasthaMehtaTech]

Which problem is this PR solving?

• This PR updates semver version in opentelemetry-instrumentation-dns in order to fix https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795

Short description of the changes

• After this PR, the version for semver will be upgraded & aligned with other opentelemetry packages in this monorepo.

[linux-foundation-easycla]

The committers listed above are authorized under a signed CLA.

• ✅ login: AasthaMehtaTech / name: AasthaTechO (b0dc53b, a7cfcbf, 64c8748, 4407ad8, f30a23e)

[blumamir]

Thank you @AasthaMehtaTech for the contribution.

I support aligning the "semver" versions, but A quick search in the repo reveals other packages that still use different versions. There is also inconsistencies with using the caret range.

Would you mind aligning these dependencies too? I assume the same security alert will show up there as well.

I think our conventions are to pin dev dependencies since they are not part of the distribution and can introduce breaking changes for our builds and CI. For "dependencies" we do use caret ^ range to allow our users to get bug fixes for packages we depend on. Could be a great opportunity to apply this on "semver" across the repo if you have time and motivation 🙏

@haddasbronfman documented the reasoning here for the core repo as a reference.

[codecov]

Codecov Report

Merging #1646 (f30a23e) into main (0fbacba) will not change coverage.
The diff coverage is n/a.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1646   +/-   ##
=======================================
  Coverage   91.77%   91.77%           
=======================================
  Files         139      139           
  Lines        7112     7112           
  Branches     1427     1427           
=======================================
  Hits         6527     6527           
  Misses        585      585           

[blumamir]

Thank you for the fix 🥇