I don't know if the issue [0] was caused by a faulty merge, or why, but
it seems like babel-messages had the wrong URL in there and resolved to
babel-plugin-transform-object-rest-spread, which is wrong.

So the integrity check did actually work and catch that!

[0]: https://gitlab.com/gitlab-org/gitlab-ce/issues/52192

yarn >= 1.10.0 adds sha512 integrity checks to the yarn.lock file. For
more details see https://github.com/yarnpkg/yarn/pull/5042. The
behaviour is backwards compatible.

https://github.com/vuejs/vue/releases

most relevant release notes are in the 2.5.17 beta post:
https://github.com/vuejs/vue/releases/tag/v2.5.17-beta.0

We needed to disable a few eslint-config-airbnb-base rules in order
to keep the number of line changes under control.  These should be
re-enabled asap.

Closes #51065