downgrade Chart.js to fix CSP violations

chartjs/Chart.js#5208

package.json

@@ -85,5 +85,8 @@
       "lib/include-api-in-build",
       "lib/inject-app-version-in-meta-tag"
     ]
+  },
+  "resolutions": {
+    "chart.js": "~2.6.0"
   }
 }

yarn.lock

@@ -2700,13 +2700,13 @@ charm@^1.0.0:
   dependencies:
     inherits "^2.0.1"
 
-chart.js@^2.7.0:
-  version "2.7.3"
-  resolved "https://registry.yarnpkg.com/chart.js/-/chart.js-2.7.3.tgz#cdb61618830bf216dc887e2f7b1b3c228b73c57e"
-  integrity sha512-3+7k/DbR92m6BsMUYP6M0dMsMVZpMnwkUyNSAbqolHKsbIzH2Q4LWVEHHYq7v0fmEV8whXE0DrjANulw9j2K5g==
+chart.js@^2.7.0, chart.js@~2.6.0:
+  version "2.6.0"
+  resolved "https://registry.yarnpkg.com/chart.js/-/chart.js-2.6.0.tgz#308f9a4b0bfed5a154c14f5deb1d9470d22abe71"
+  integrity sha1-MI+aSwv+1aFUwU9d6x2UcNIqvnE=
   dependencies:
     chartjs-color "^2.1.0"
-    moment "^2.10.2"
+    moment "^2.10.6"
 
 chartjs-color-string@^0.5.0:
   version "0.5.0"
@@ -7428,7 +7428,7 @@ moment-timezone@^0.5.13:
   resolved "https://registry.yarnpkg.com/moment/-/moment-2.18.1.tgz#c36193dd3ce1c2eed2adb7c802dbbc77a81b1c0f"
   integrity sha1-w2GT3Tzhwu7SrbfIAtu8d6gbHA8=
 
-moment@^2.10.2, moment@^2.19.3:
+moment@^2.10.6, moment@^2.19.3:
   version "2.23.0"
   resolved "https://registry.yarnpkg.com/moment/-/moment-2.23.0.tgz#759ea491ac97d54bac5ad776996e2a58cc1bc225"
   integrity sha512-3IE39bHVqFbWWaPOMHZF98Q9c3LDKGTmypMiTM2QygGXXElkFWIH7GxfmlwmY2vwa+wmNsoYZmG2iusf1ZjJoA==