Update braces to fix possible ReDoS

[php-coder]

See for details: https://www.npmjs.com/advisories/786 and https://snyk.io/vuln/npm:braces:20180219

Because this dependency is required by Babel and used only in build-time, the severity is low in our case.

Tech debt for: 054acbc (#1060)

[php-coder]

Here is the report:

[INFO] Running 'npm audit' in /Users/coder/git/mystamps.git/src/main/frontend
[INFO]
[INFO]                        === npm audit security report ===
[INFO]
[INFO] ┌──────────────────────────────────────────────────────────────────────────────┐
[INFO] │                                Manual Review                                 │
[INFO] │            Some vulnerabilities require your attention to resolve            │
[INFO] │                                                                              │
[INFO] │         Visit https://go.npm.me/audit-guide for additional guidance          │
[INFO] └──────────────────────────────────────────────────────────────────────────────┘
[INFO] ┌───────────────┬──────────────────────────────────────────────────────────────┐
[INFO] │ Low           │ Regular Expression Denial of Service                         │
[INFO] ├───────────────┼──────────────────────────────────────────────────────────────┤
[INFO] │ Package       │ braces                                                       │
[INFO] ├───────────────┼──────────────────────────────────────────────────────────────┤
[INFO] │ Patched in    │ >=2.3.1                                                      │
[INFO] ├───────────────┼──────────────────────────────────────────────────────────────┤
[INFO] │ Dependency of │ babel-cli [dev]                                              │
[INFO] ├───────────────┼──────────────────────────────────────────────────────────────┤
[INFO] │ Path          │ babel-cli > chokidar > anymatch > micromatch > braces        │
[INFO] ├───────────────┼──────────────────────────────────────────────────────────────┤
[INFO] │ More info     │ https://npmjs.com/advisories/786                             │
[INFO] └───────────────┴──────────────────────────────────────────────────────────────┘
[INFO] found 1 low severity vulnerability in 3079 scanned packages
[INFO]   1 vulnerability requires manual review. See the full report for details.

[php-coder]

It seems like we can't just upgrade braces because it may break the packages that depends on it. One of the solution is to update babel-cli to 7.x version that will use newer versions of the dependencies that don't have vulnerability.

So, now this issue is (kind of) blocked by #1063

[php-coder]

Unblocked.

[php-coder]

One of the solution is to update babel-cli to 7.x version that will use newer versions of the dependencies that don't have vulnerability.

Quote from https://babeljs.io/docs/en/env/#babel-7 :

If you are using Babel version 7 you will need to run npm install @babel/preset-env and have "presets": ["@babel/preset-env"] in your configuration.