Summary:
The previous attempt kept the vulnerable dependency around in `yarn.lock`. Now
it's being resolved to the "fixed" version.
Reviewed By: mweststrate
Differential Revision: D26778354
fbshipit-source-id: 17d8e2f1bbcd28939d85e5a976da0bd074ea25e2