Make the boot URL templating used during development work in IE 11 and
Edge. In IE 11 `document.currentScript` is not available and in IE 11 /
early Edge, the `URL` constructor is not available before polyfills have
been loaded.

The `document.currentScript` fallback here assumes that the boot script
has been loaded synchronously so that the boot script is the last
`<script>` element on the page at the point when it runs.

Also add a fast path for production builds where URLs do not contain
template params.

This is a follow up to #1441

Fix PDF anchoring when annotation refers to last text on a page

Bump eslint from 6.5.1 to 6.6.0

Bump sass from 1.23.0 to 1.23.1

Whether to add commas after the final argument in array and object
literals or function argument lists is handled by Prettier.

Bump scroll-into-view from 1.11.0 to 1.12.2

Bump autoprefixer from 9.6.5 to 9.7.0

Merge pull request #1460 from hypothesis/dependabot/npm_and_yarn/babel-plugin-transform-async-to-promises-0.8.15

Bump babel-plugin-transform-async-to-promises from 0.8.14 to 0.8.15

Bump puppeteer from 1.20.0 to 2.0.0

Bumps [autoprefixer](https://github.com/postcss/autoprefixer) from 9.6.5 to 9.7.0.
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/postcss/autoprefixer/compare/9.6.5...9.7.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [eslint](https://github.com/eslint/eslint) from 6.5.1 to 6.6.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v6.5.1...v6.6.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.33.1 to 16.34.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.33.1...v16.34.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [puppeteer](https://github.com/GoogleChrome/puppeteer) from 1.20.0 to 2.0.0.
- [Release notes](https://github.com/GoogleChrome/puppeteer/releases)
- [Commits](https://github.com/GoogleChrome/puppeteer/compare/v1.20.0...v2.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [babel-plugin-transform-async-to-promises](https://github.com/rpetrich/babel-plugin-transform-async-to-promises) from 0.8.14 to 0.8.15.
- [Release notes](https://github.com/rpetrich/babel-plugin-transform-async-to-promises/releases)
- [Commits](https://github.com/rpetrich/babel-plugin-transform-async-to-promises/compare/v0.8.14...v0.8.15)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.553.0 to 2.556.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.553.0...v2.556.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [sass](https://github.com/sass/dart-sass) from 1.23.0 to 1.23.1.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sass/dart-sass/compare/1.23.0...1.23.1)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [scroll-into-view](https://github.com/KoryNunn/scroll-into-view) from 1.11.0 to 1.12.2.
- [Release notes](https://github.com/KoryNunn/scroll-into-view/releases)
- [Changelog](https://github.com/KoryNunn/scroll-into-view/blob/master/CHANGELOG.md)
- [Commits](https://github.com/KoryNunn/scroll-into-view/commits)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Help & Tutorial 2/n: Add `isSidebar`, `versionData` utilities

Add a utility for organizing information about the current user session
and app version. This will be used by the updated help panel.

The client application has several existing tests to see if the app is
“in sidebar mode” currently. This utility is a first step to harmonizing
this and making things consistent.

Improve accessability for toggle buttons

These don't cover all of the functionality but they do at least cover
the main buttons.

A small change to `toolbar.coffee` was needed so that the button states
are updated correctly when the toolbar is not added to `document.body`.

Help & Tutorial 1/n: Add and update SVG icons

- Add aria attribute for show / hide side bar
- Add aria attribute for show / hide highlights
- Fix a bug that prevents the correct class from showing on the highlight icon when highlights are initially disabled

Remove unroll and convert its use cases to use forEach instead

`unroll()` is not necessary to maintain as it didn't offer any value when writing tests over a simple `forEach()` call over a list of test parameter sets for a common testing function.

Change PDF anchoring to use the new text position => Range
implementation from the `src/annotator/anchoring/text-position` module
which fixes an issue when the last text in a PDF page is selected.

Fixes #1329

Add a new implementation of conversion from text positions (that is,
offsets within an element's `textContent`) to DOM `Range`s along with
test cases.

This addresses an issue with the existing implementation of `toRange` in
the `dom-anchor-text-position` package where conversion fails when the
text position includes the end of the element's text.

Even if/when the issue is addressed upstream, I think it would be useful
to retain these test cases to guard against future regressions.

See #1329

This currently fails to a bug on `dom-anchor-text-position`'s `toRange`
implementation.

See #1329

Make it easier to test client from a different device

Bump preact from 10.0.0 to 10.0.1

Make it easier to test the development client from a different device by removing
the need to customize the `SIDEBAR_APP_URL` and `PACKAGE_SERVER_HOSTNAME`
environment variables first.

Instead of hardcoding the client/h dev server hostname and scheme in the client's
boot script, support a very simple URL templating scheme where
references to `{current_host}` and `{current_scheme}` are replaced by
the corresponding elements of the boot script's URL.

This means that for example, if the embed script is accessed as
https://Roberts-MacBook-Pro.local:5000/embed.js then the boot script
will use asset URLs such as
https://Roberts-MacBook-Pro.local:3001/assets/sidebar.bundle.js. If
the boot script is accessed as http://localhost:5000/embed.js then
it will generate http://localhost:3001/assets/sidebar.bundle.js
instead.

A related change in h will remove the need to set the `CLIENT_URL` env
var and modify the OAuth client's redirect URL. At present, those steps
are still required.

Bump mocha from 6.2.1 to 6.2.2

Bump @sentry/browser from 5.7.0 to 5.7.1

Bump karma from 4.3.0 to 4.4.1