Bumps [mocha](https://github.com/mochajs/mocha) from 2.5.3 to 5.2.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v2.5.3...v5.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump browserify from 13.3.0 to 16.2.3

Bump @octokit/rest from 16.9.0 to 16.10.0

Bump gulp-replace from 0.5.4 to 1.0.0

Bumps [browserify](https://github.com/browserify/browserify) from 13.3.0 to 16.2.3.
- [Release notes](https://github.com/browserify/browserify/releases)
- [Changelog](https://github.com/browserify/browserify/blob/master/changelog.markdown)
- [Commits](https://github.com/browserify/browserify/compare/13.3.0...v16.2.3)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.9.0 to 16.10.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.9.0...v16.10.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-replace](https://github.com/lazd/gulp-replace) from 0.5.4 to 1.0.0.
- [Release notes](https://github.com/lazd/gulp-replace/releases)
- [Commits](https://github.com/lazd/gulp-replace/compare/v0.5.4...v1.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Remove obsolete comment

The sidebar no longer makes use of any group information returned via
the profile API.

Adapt to change of `getAll` method name

This fixes the changelog update script.

See https://github.com/octokit/rest.js/pull/1094

Bump @octokit/rest from 15.13.0 to 16.9.0

Bump through2 from 2.0.5 to 3.0.0

Bump gulp-changed from 1.3.2 to 3.2.0

Bump postcss from 5.2.18 to 7.0.13

Bumps [postcss](https://github.com/postcss/postcss) from 5.2.18 to 7.0.13.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/master/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/commits/7.0.13)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-changed](https://github.com/sindresorhus/gulp-changed) from 1.3.2 to 3.2.0.
- [Release notes](https://github.com/sindresorhus/gulp-changed/releases)
- [Commits](https://github.com/sindresorhus/gulp-changed/compare/v1.3.2...v3.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [through2](https://github.com/rvagg/through2) from 2.0.5 to 3.0.0.
- [Release notes](https://github.com/rvagg/through2/releases)
- [Commits](https://github.com/rvagg/through2/compare/v2.0.5...v3.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 15.13.0 to 16.9.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v15.13.0...v16.9.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Fix `yarn version` command

b778c9ad refactored the Makefile and
removed the `all` target. This target was still referenced by
package.json however.

Bump gulp-sass from 3.2.1 to 4.0.2

Bumps [gulp-sass](https://github.com/dlmanning/gulp-sass) from 3.2.1 to 4.0.2.
- [Release notes](https://github.com/dlmanning/gulp-sass/releases)
- [Changelog](https://github.com/dlmanning/gulp-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dlmanning/gulp-sass/compare/v3.2.1...v4.0.2)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump redux-thunk from 2.2.0 to 2.3.0

[Security] Bump cached-path-relative from 1.0.1 to 1.0.2

Bump gulp-postcss from 6.4.0 to 8.0.0

[Security] Bump stringstream from 0.0.5 to 0.0.6

Bump vinyl from 1.2.0 to 2.2.0

Bumps [gulp-postcss](https://github.com/postcss/gulp-postcss) from 6.4.0 to 8.0.0.
- [Release notes](https://github.com/postcss/gulp-postcss/releases)
- [Commits](https://github.com/postcss/gulp-postcss/compare/6.4.0...8.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 0.0.6. **This update includes security fixes.**
- [Release notes](https://github.com/mhart/StringStream/releases)
- [Commits](https://github.com/mhart/StringStream/compare/v0.0.5...v0.0.6)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [redux-thunk](https://github.com/reduxjs/redux-thunk) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/reduxjs/redux-thunk/releases)
- [Commits](https://github.com/reduxjs/redux-thunk/compare/v2.2.0...v2.3.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [vinyl](https://github.com/gulpjs/vinyl) from 1.2.0 to 2.2.0.
- [Release notes](https://github.com/gulpjs/vinyl/releases)
- [Commits](https://github.com/gulpjs/vinyl/compare/v1.2.0...v2.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [cached-path-relative](https://github.com/ashaffer/cached-path-relative) from 1.0.1 to 1.0.2. **This update includes security fixes.**
- [Release notes](https://github.com/ashaffer/cached-path-relative/releases)
- [Changelog](https://github.com/ashaffer/cached-path-relative/blob/master/History.md)
- [Commits](https://github.com/ashaffer/cached-path-relative/commits)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Update AngularJS to 1.7.x

Upgrade to gulp 4

In Angular 1.6 the behavior where inputs to components ("bindings")
were accessible in the controller's constructor was deprecated [1] but a
switch was made available to re-enable the old behavior to assist migration.
This switch has been removed in Angular 1.7, so we need to stop relying
on it before we can upgrade.

The correct thing to do is to put all init logic which accesses bindings
(`this.someBindingName`) in the `$onInit` lifecycle method.

This commit makes the minimal amount of changes to enable the app and
tests to run without requiring pre-assigned bindings.

[1] https://toddmotto.com/angular-1-6-is-here

This should make future maintenance easier since Gulp v4 has better
documentation [1], more checks for incorrect usage and a simpler API for
expressing what should run in parallel vs sequentially during build
steps. This also eliminates a bunch of old transitive dependencies that
gulp v3 had, which sometimes caused problems (eg. with Node upgrades).

Changes required:

 - Make sure `gulp.task` functions return a value, so Gulp knows when
   the task is finished
 - `gulp.watch` now requires a function rather than a task name
 - Task no longer support a list of dependencies but need a task
   function. Dependencies are expressed using `gulp.series` or
   `gulp.parallel` to compose other functions
 - Give several functions names so that there are fewer `<anonymous>
   {starting, finished}` messages in log output.

[1] https://gulpjs.com/docs/en/api/concepts