Add a new `autosaveService`, which subscribes to the store and
automatically saves new highlights. Remove implementation of highlight
auto-save from `Annotation` controller.

Fix manifest not rebuilding after source file changes

Fix an issue where `build/boot.js` and `build/manifest.json` were not
rebuilt after script/style bundles were updated or other resources were
updated in the `build/` directory.

The `updateManifest` gulp task function was not returning a value so
gulp silently treated the task as never completing. I thought this
generated a warning at some point in the past, but it looks like that
was not happening.

This fixes an issue in development where `build/boot.js` would sometimes
be generated before `build/scripts/boot.bundle.js` had been fully
written and then not regenerated after that file was written. This
resulted in an empty or incomplete `build/boot.js` file and as a result
the dev client would fail to start.

Bump sinon from 8.1.1 to 9.0.0

Bumps [sinon](https://github.com/sinonjs/sinon) from 8.1.1 to 9.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v8.1.1...v9.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump @sentry/browser from 5.12.1 to 5.12.4

Bumps [@sentry/browser](https://github.com/getsentry/sentry-javascript) from 5.12.1 to 5.12.4.
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-javascript/compare/5.12.1...5.12.4)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.43.1 to 17.0.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.43.1...v17.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.620.0 to 2.624.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.620.0...v2.624.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Make `NewNoteBtn` show login prompt if user not logged in

Apply the same UX to `NewNoteBtn` as to the annotator for attempting
to create new annotations when not logged in. Display login prompt.

Also refactor to remove dependency on `$rootScope` and events

Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 1.7.0 to 2.4.0.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Fix error in angular callback by providing `event` object

Fix error from expected event object in angular

Move rendering of sidebar errors above tabs for consistency.

Apply login-prompt UX to reply action if user not logged in

This has no real effect as the tabs are not rendered when sidebar errors
are rendered, but for consistency, let’s put all sidebar-ish errors
above the tabs.

Disable unauthenticated annotating and highlighting

Address remaining contrast nits

We’ve decided not to remedy this for now, as the `disabled` state
and other attributes of the publish button suffice, but in the future
it would be good to find a better contrast solution here.

Increase contrast in annotation cards to meet WCAG AA requirements

Increase contrast of Button components (a11y)

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.619.0 to 2.620.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.619.0...v2.620.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Assume white background by default in a11y tests

Add `lang=""` to user-generated/chosen content in sidebar UI

Do not set "aria-pressed" attribute for non-toggle buttons

Several accessibility tests were failing incorrectly because axe-core
compared the component's foreground text color against the #ececec color
used for the body of the sidebar app, whereas the components are in fact
rendered on a white background.

Change a11y tests to assume a white background by default, as that is
the case for _most_ elements in the UI. Individual a11y tests can customize
this as appropriate.

Tag suggestions are user-supplied content, so indicate that language is
unknown/may differ from the UI.

Setting the `aria-pressed` attribute on a button indicates to assistive
technology that it is a toggle button. Because the `Button` component
always set this attribute and the `isActive` prop had a default value of
false, this meant that every `Button` in the UI was identified as a
toggle button by screen readers.

Fix the issue by renaming `isActive` to `isPressed` and aligning it with
the behavior of `aria-pressed`:

 - If `true`, the button is a pressed toggle button
 - If `false`, the button is a non-pressed toggle button
 - If undefined, the button is a regular button and `aria-pressed` is
   not set

Add accessible label to annotation body markdown editor

Extract repeated references to editor text string into a variable to
make it more obvious how different statements in the test are connected.

Add accessible label to search input field

Bump postcss from 7.0.26 to 7.0.27

Bumps [babel-plugin-mockable-imports](https://github.com/robertknight/babel-plugin-mockable-imports) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/robertknight/babel-plugin-mockable-imports/releases)
- [Changelog](https://github.com/robertknight/babel-plugin-mockable-imports/blob/master/CHANGELOG.md)
- [Commits](https://github.com/robertknight/babel-plugin-mockable-imports/compare/v1.7.0...v1.7.1)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>