Bump react/promise from 2.5.0 to 2.7.0

[dependabot-preview]

Bumps react/promise from 2.5.0 to 2.7.0.

Release notes

Sourced from react/promise's releases.

v2.7.0

• Feature: Improve memory consumption for pending promises by using static internal callbacks without binding to self.
  (#124 by clue)

v2.6.0

• Feature: Significantly improve memory consumption and performance by only passing resolver args
  to resolver and canceller if callback requires them. Also use static callbacks without
  binding to promise, clean up canceller function reference when they are no longer
  needed and hide resolver and canceller references from call stack on PHP 7+.
  (#113, #115, #116, #117, #118, #119 and #123 by clue)

  These changes combined mean that rejecting promises with an Exception should
  no longer cause any internal circular references which could cause some unexpected
  memory growth in previous versions. By explicitly avoiding and explicitly
  cleaning up said references, we can avoid relying on PHP's circular garbage collector
  to kick in which significantly improves performance when rejecting many promises.

• Mark legacy progress support / notification API as deprecated
  (#112 by clue)

• Recommend rejecting promises by throwing an exception
  (#114 by jsor)

• Improve documentation to properly instantiate LazyPromise
  (#121 by holtkamp)

• Follower cancellation propagation was originally planned for this release
  but has been reverted for now and is planned for a future release.
  (#99 by jsor and #122 by clue)

v2.5.1

• Fix circular references when resolving with a promise which follows itself (#94).

Commits

• f4edc25 Prepare v2.7.0 release
• 9bd9d48 Merge pull request #124 from clue-labs/static
• ef228a9 Additional tests to avoid future garbage cycle regressions
• 72087fd Use static internal callbacks without binding to parent promise
• 5e60e55 Prepare v2.6.0 release
• 8345e87 Merge pull request #123 from clue-labs/static
• 9281a8a Simplify static references by using static closure functions
• 8361389 Merge pull request #122 from clue-labs/revert-cancellation-propagation
• 0914c13 Revert follower cancellation propagation (#99)
• 5c777af Merge pull request #121 from holtkamp/patch-1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If all status checks pass Dependabot will automatically merge this pull request.

---

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.