What does it do?

IMPORTANT: This PR could technically present a breaking change for a small number of users, because it causes changes in some subtle javascript behaviours, like async run order, and build changes like white-spacing differences; things which are unsafe to rely on but nonetheless sometimes might be used by user code. This should be released in a minor version of Strapi along with a release note.

• Updates all babel related packages in yarn.lock
• Updates doc service api tests that broke from it, due to assertions on async events that weren't being awaited; without these changes, the assertions don't happen until after the test completes, causing it to fail
• Updates upgrade tool unit tests that broke from it
• Updates front-end test snapshots because there were several minor changes like whitespace

Why is it needed?

ResolvesCVE-2025-27789 -- Strapi itself does not appear to be vulnerable, although project code that directly passes user input strings to the second param of a regexp are potentially vulnerable

How to test it?

Provide information about the environment and the path to verify the behaviour.

Related issue(s)/PR(s)

DX-1952