Use chokidar@2

[stefee]

Change log

• Breaking: Upgrade chokidar dependency which requires globs to be more strict and always use POSIX-style slashes because Windows-style slashes are used as escape sequences
• See chokidar change log for more details: https://github.com/paulmillr/chokidar/blob/master/CHANGELOG.md

Notes for reviewer

• I've set a minimum chokidar version 2.0.4 to match @babel/cli https://github.com/babel/babel/blob/master/packages/babel-cli/package.json#L33
• This includes patch for the braces vulnerability described in this npm advisory:
  https://www.npmjs.com/advisories/786

[stefee]

cc @kmagiera

[stefee]

See below npm audit report which this PR addresses:

$ npm audit

                       === npm audit security report ===

┌──────────────────────────────────────────────────────────────────────────────┐
│                                Manual Review                                 │
│            Some vulnerabilities require your attention to resolve            │
│                                                                              │
│         Visit https://go.npm.me/audit-guide for additional guidance          │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Low           │ Regular Expression Denial of Service                         │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ braces                                                       │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in    │ >=2.3.1                                                      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ babel-watch [dev]                                            │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ babel-watch > chokidar > anymatch > micromatch > braces      │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/786                             │
└───────────────┴──────────────────────────────────────────────────────────────┘

[STRML]

Causes no issues in my testing. Merging.

[stefee]

@STRML would you be able to release this change as a patch for us?

[STRML]

I don't have publish permissions, @kmagiera?

[stefee]

@kmagiera
a new patch release would be appreciated