Bump angular-sanitize from 1.7.6 to 1.7.7

Bump aws-sdk from 2.395.0 to 2.396.0

Bump angular from 1.7.6 to 1.7.7

Bumps [angular-sanitize](https://github.com/angular/angular.js) from 1.7.6 to 1.7.7.
- [Release notes](https://github.com/angular/angular.js/releases)
- [Changelog](https://github.com/angular/angular.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/angular/angular.js/compare/v1.7.6...v1.7.7)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.395.0 to 2.396.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.395.0...v2.396.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [angular](https://github.com/angular/angular.js) from 1.7.6 to 1.7.7.
- [Release notes](https://github.com/angular/angular.js/releases)
- [Changelog](https://github.com/angular/angular.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/angular/angular.js/compare/v1.7.6...v1.7.7)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump @octokit/rest from 16.14.0 to 16.15.0

Stop updating package.json version field during deployments from Jenkins

The "Build" step stopped working after b778c9ad because `make` with no
arguments just prints help output.

Since the client is rebuilt with a different version number as part of the
QA and prod releases, a separate "Build" step serves no purpose.

`yarn version` does not run the "postversion" script when called with
`--no-git-tag-version`.

The npm tag we wait on needs to match the one which was used when the
release was published.

The package version is now determined based on the highest
previously-tagged version. This means we need to fetch existing tags
before we can determine the new version number.

The call to `new IllegalArgumentException` fails inside the sandbox that
the Jenkinsfile script runs in. Use `error` instead per
https://stackoverflow.com/questions/42718785/

Creating a commit which updates the version number as part of
the release process prevents deployments of the master branch which are
not the latest commit, which is a surprising limitation compared to our
release process for h etc.

This commit resolves the issue by removing the version-bumping commit.
Instead package.json in the source tree contains a fixed, unchanging
version number which is set to the real version just before the package
is published to npm. The release version is obtained by fetching the tag
with the highest version number and incrementing the major part.

Bump eslint from 5.12.1 to 5.13.0

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.14.0 to 16.15.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.14.0...v16.15.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [eslint](https://github.com/eslint/eslint) from 5.12.1 to 5.13.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v5.12.1...v5.13.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump @octokit/rest from 16.13.4 to 16.14.0

Update PDF anchoring for changes in PDF.js API

PDF.js commit e293c12afcf3a9a55669b6bf095d657e7780ba16 removed the
`getPageTextContent` method from `PDFViewer`, so we need to call the
underlying method on the `PDFPageProxy` object instead.

This change is backwards compatible with earlier versions of PDF.js.

Fixes https://github.com/hypothesis/product-backlog/issues/915

Modernize PDFViewerApplication fake

In preparation for updating the fake PDFViewerApplication to match changes
in PDF.js' interface, refactor the fake.

 - Rewrite old-style classes as ES6+ classes

 - Replace object literals for `PDFViewer` and `PDFPageView` fakes with
   actual classes that have JSDoc comments pointing to the real class's
   definition

Convert PDF anchoring code to JS

Remove changelog

Update script to authenticate using the new API documented at
https://github.com/octokit/rest.js#authentication

Since we're using GitHub's Node REST client already, use it to create
the GitHub release instead of making a "manual" HTTP request.

The client deployment process currently involves a commit to master to
update the CHANGELOG and version in package.json. This creates a problem
when trying to deploy a build that is not the latest release of master.
It also creates other failure modes that are not really necessary.

As a first step to resolving this problem, remove the changelog in the source
tree. The notes attached to the GitHub release will suffice, together
with any handwritten updates that developers post in #changelog in
Slack.

 - Remove CHANGELOG.md and scripts to generate it from source tree
 - Remove changelog references from build process
 - Change GitHub release script to generate the change list directly
   instead of reading it from CHANGELOG.md
 - Change the client's dev server to use the Code of Conduct instead of
   the changelog as a text source for the test page

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.13.4 to 16.14.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.13.4...v16.14.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump @babel/core from 7.1.6 to 7.2.2

Bump @babel/preset-env from 7.1.6 to 7.3.1

Bumps [@babel/core](https://github.com/babel/babel) from 7.1.6 to 7.2.2.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.1.6...v7.2.2)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@babel/preset-env](https://github.com/babel/babel) from 7.1.6 to 7.3.1.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.1.6...v7.3.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump eslint from 4.19.1 to 5.12.1

Bump @octokit/rest from 16.10.0 to 16.13.4

Bump proxyquire from 1.8.0 to 2.1.0

Bumps [eslint](https://github.com/eslint/eslint) from 4.19.1 to 5.12.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v4.19.1...v5.12.1)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump exorcist from 0.4.0 to 1.0.1

Merge pull request #912 from hypothesis/dependabot/npm_and_yarn/babel-plugin-angularjs-annotate-0.10.0

Bump babel-plugin-angularjs-annotate from 0.9.0 to 0.10.0