Remove unnecessary yarn resolutions

[Elizabeth Craig (ecraig12345)]

Description of changes

Update yarn resolutions to remove resolutions that are unnecessary (either the bad version is no longer referenced, or the fixed version is in-range), and scope down the remaining resolutions where possible.

Recommended procedure for security updates in nested dependencies

In general, to handle security updates in nested dependencies, look at yarn.lock and/or use yarn why to determine which of the following cases apply:

• Range is ^ or ~ and fixed version is in range: delete lock file entry, reinstall
• Something pins the dep to a specific version (same major or 0.x-minor as fixed version): set resolution to "foo@npm:1.2.3": "^1.2.3" and reinstall
• Fixed version of nested dependency is different major or 0.x-minor from fix:
  • find what depends on it and try to update that
    • direct dep of repo: try updating directly
    • nested dep: same method of deleting from lock file, maybe up to multiple parents
  • for dev or unpublished tool deps only, check the changelog for the new version to see if it's compatible, and if so use a targeted resolution as above

Verification

PR build passes