address vulnerabilities (rollup, babel)

[yen-tt]

addressed:

• Cross-site Scripting vulnerability in rollup in test-site package: https://yexttest.atlassian.net/browse/VULN-39404?focusedCommentId=1649810
• babel-plugin-polyfill-regenerator issue: https://yexttest.atlassian.net/browse/VULN-38484?focusedCommentId=1649848. Note that updating to [email protected] didn’t actually update babel-plugin-polyfill-regenerator, doing a manual update of the direct parent dep @babel/plugin-transform-runtime did bump up the polyfill dep to 0.6.3.

J=VULN-39404&VULN-38484

[yen-tt]

CC-BY-4.0 license is approved for caniuse-lite dependency for this usage. Updated license exception in sempgrep for this repo.

[semgrep-app]

Legal Risk
The following dependencies were released under a license that is currently prohibited by your organization. Merging is blocked until this is resolved.
Recommendation:
Reach out to your security team or Semgrep admin to address this issue. In special cases, exceptions may be made for dependencies with violating licenses, however, the general recommendation is to avoid using a dependency under such a license

CC-BY-4.0
caniuse-lite 1.0.30001690
caniuse-lite 1.0.30001690