Bump core-js from 3.5.0 to 3.6.0

[dependabot-preview]

Bumps core-js from 3.5.0 to 3.6.0.

Changelog

Sourced from core-js's changelog.

3.6.0 - 2019.12.19

• Added support of sticky (y) RegExp flag, #372, #732, #492, thanks @​cvle and @​nicolo-ribaudo
• Added RegExp#test delegation to RegExp#exec, #732, thanks @​cvle
• Fixed some cases of Object.create(null) in IE8-, #727, #728, thanks @​aleen42
• Allowed object of minimum environment versions as core-js-compat and core-js-builder targets argument
• Allowed corresponding to Babel targets.esmodules, targets.browsers, targets.node options in core-js-compat and core-js-builder
• Engines in compat data and results of targets parsing sorted alphabetically
• Fixed features/instance/match-all entry compat data
• Fixed Array.prototype[@[@​unscopables](https://github.com/unscopables)] descriptor (was writable)
• Added Samsung Internet 11 compat data mapping

Commits

• f10bf27 3.6.0
• 3171d47 fix Array.prototype[@[@​unscopables](https://github.com/unscopables)] descriptor
• 6c10843 update documentation
• ff4f391 some missed actions for #732
• 80d7bfe Sticky RegExp 'y' and RegExp#test delegation (#732)
• 62716b6 updated the changelog, some stylistic changes
• 5e193bf Merge pull request #728 from aleen42/object.create
• eaf1bd3 pin semver to 7.0 since 7.1 does not support Node 8
• d101fd4 add support of browserslist aliases to targets object
• 35e400f chore: add a comment
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @skjnldsv.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)