Bump sinon from 8.1.1 to 9.0.0

Bumps [sinon](https://github.com/sinonjs/sinon) from 8.1.1 to 9.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v8.1.1...v9.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump @sentry/browser from 5.12.1 to 5.12.4

Bumps [@sentry/browser](https://github.com/getsentry/sentry-javascript) from 5.12.1 to 5.12.4.
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-javascript/compare/5.12.1...5.12.4)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.43.1 to 17.0.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.43.1...v17.0.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.620.0 to 2.624.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.620.0...v2.624.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Make `NewNoteBtn` show login prompt if user not logged in

Apply the same UX to `NewNoteBtn` as to the annotator for attempting
to create new annotations when not logged in. Display login prompt.

Also refactor to remove dependency on `$rootScope` and events

Bumps [eslint-plugin-react-hooks](https://github.com/facebook/react/tree/HEAD/packages/eslint-plugin-react-hooks) from 1.7.0 to 2.4.0.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/HEAD/packages/eslint-plugin-react-hooks)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Fix error in angular callback by providing `event` object

Fix error from expected event object in angular

Move rendering of sidebar errors above tabs for consistency.

Apply login-prompt UX to reply action if user not logged in

This has no real effect as the tabs are not rendered when sidebar errors
are rendered, but for consistency, let’s put all sidebar-ish errors
above the tabs.

Disable unauthenticated annotating and highlighting

Address remaining contrast nits

We’ve decided not to remedy this for now, as the `disabled` state
and other attributes of the publish button suffice, but in the future
it would be good to find a better contrast solution here.

Increase contrast in annotation cards to meet WCAG AA requirements

Increase contrast of Button components (a11y)

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.619.0 to 2.620.0.
- [Release notes](https://github.com/aws/aws-sdk-js/releases)
- [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js/compare/v2.619.0...v2.620.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Assume white background by default in a11y tests

Add `lang=""` to user-generated/chosen content in sidebar UI

Do not set "aria-pressed" attribute for non-toggle buttons

Several accessibility tests were failing incorrectly because axe-core
compared the component's foreground text color against the #ececec color
used for the body of the sidebar app, whereas the components are in fact
rendered on a white background.

Change a11y tests to assume a white background by default, as that is
the case for _most_ elements in the UI. Individual a11y tests can customize
this as appropriate.

Tag suggestions are user-supplied content, so indicate that language is
unknown/may differ from the UI.

Setting the `aria-pressed` attribute on a button indicates to assistive
technology that it is a toggle button. Because the `Button` component
always set this attribute and the `isActive` prop had a default value of
false, this meant that every `Button` in the UI was identified as a
toggle button by screen readers.

Fix the issue by renaming `isActive` to `isPressed` and aligning it with
the behavior of `aria-pressed`:

 - If `true`, the button is a pressed toggle button
 - If `false`, the button is a non-pressed toggle button
 - If undefined, the button is a regular button and `aria-pressed` is
   not set

Add accessible label to annotation body markdown editor

Extract repeated references to editor text string into a variable to
make it more obvious how different statements in the test are connected.

Add accessible label to search input field

Bump postcss from 7.0.26 to 7.0.27

Bumps [babel-plugin-mockable-imports](https://github.com/robertknight/babel-plugin-mockable-imports) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/robertknight/babel-plugin-mockable-imports/releases)
- [Changelog](https://github.com/robertknight/babel-plugin-mockable-imports/blob/master/CHANGELOG.md)
- [Commits](https://github.com/robertknight/babel-plugin-mockable-imports/compare/v1.7.0...v1.7.1)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [postcss](https://github.com/postcss/postcss) from 7.0.26 to 7.0.27.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/master/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/7.0.26...7.0.27)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bump preact from 10.3.1 to 10.3.2

Bump axe-core from 3.4.2 to 3.5.1