Bump mocha from 2.5.3 to 5.2.0

Fix several tests which both called a `done` callback *and* returned a
Promise due to CoffeeScript's implicit returns.

Returning a Promise is preferred to using a `done` callback where
possible, so just do that.

Bumps [mocha](https://github.com/mochajs/mocha) from 2.5.3 to 5.2.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v2.5.3...v5.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump browserify from 13.3.0 to 16.2.3

Bump @octokit/rest from 16.9.0 to 16.10.0

Bump gulp-replace from 0.5.4 to 1.0.0

Bumps [browserify](https://github.com/browserify/browserify) from 13.3.0 to 16.2.3.
- [Release notes](https://github.com/browserify/browserify/releases)
- [Changelog](https://github.com/browserify/browserify/blob/master/changelog.markdown)
- [Commits](https://github.com/browserify/browserify/compare/13.3.0...v16.2.3)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.9.0 to 16.10.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.9.0...v16.10.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-replace](https://github.com/lazd/gulp-replace) from 0.5.4 to 1.0.0.
- [Release notes](https://github.com/lazd/gulp-replace/releases)
- [Commits](https://github.com/lazd/gulp-replace/compare/v0.5.4...v1.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Remove obsolete comment

The sidebar no longer makes use of any group information returned via
the profile API.

Adapt to change of `getAll` method name

This fixes the changelog update script.

See https://github.com/octokit/rest.js/pull/1094

Bump @octokit/rest from 15.13.0 to 16.9.0

Bump through2 from 2.0.5 to 3.0.0

Bump gulp-changed from 1.3.2 to 3.2.0

Bump postcss from 5.2.18 to 7.0.13

Bumps [postcss](https://github.com/postcss/postcss) from 5.2.18 to 7.0.13.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/master/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/commits/7.0.13)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-changed](https://github.com/sindresorhus/gulp-changed) from 1.3.2 to 3.2.0.
- [Release notes](https://github.com/sindresorhus/gulp-changed/releases)
- [Commits](https://github.com/sindresorhus/gulp-changed/compare/v1.3.2...v3.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [through2](https://github.com/rvagg/through2) from 2.0.5 to 3.0.0.
- [Release notes](https://github.com/rvagg/through2/releases)
- [Commits](https://github.com/rvagg/through2/compare/v2.0.5...v3.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 15.13.0 to 16.9.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v15.13.0...v16.9.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Fix `yarn version` command

b778c9ad refactored the Makefile and
removed the `all` target. This target was still referenced by
package.json however.

Bump gulp-sass from 3.2.1 to 4.0.2

Bumps [gulp-sass](https://github.com/dlmanning/gulp-sass) from 3.2.1 to 4.0.2.
- [Release notes](https://github.com/dlmanning/gulp-sass/releases)
- [Changelog](https://github.com/dlmanning/gulp-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dlmanning/gulp-sass/compare/v3.2.1...v4.0.2)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump redux-thunk from 2.2.0 to 2.3.0

[Security] Bump cached-path-relative from 1.0.1 to 1.0.2

Bump gulp-postcss from 6.4.0 to 8.0.0

[Security] Bump stringstream from 0.0.5 to 0.0.6

Bump vinyl from 1.2.0 to 2.2.0

Bumps [gulp-postcss](https://github.com/postcss/gulp-postcss) from 6.4.0 to 8.0.0.
- [Release notes](https://github.com/postcss/gulp-postcss/releases)
- [Commits](https://github.com/postcss/gulp-postcss/compare/6.4.0...8.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 0.0.6. **This update includes security fixes.**
- [Release notes](https://github.com/mhart/StringStream/releases)
- [Commits](https://github.com/mhart/StringStream/compare/v0.0.5...v0.0.6)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [redux-thunk](https://github.com/reduxjs/redux-thunk) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/reduxjs/redux-thunk/releases)
- [Commits](https://github.com/reduxjs/redux-thunk/compare/v2.2.0...v2.3.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [vinyl](https://github.com/gulpjs/vinyl) from 1.2.0 to 2.2.0.
- [Release notes](https://github.com/gulpjs/vinyl/releases)
- [Commits](https://github.com/gulpjs/vinyl/compare/v1.2.0...v2.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [cached-path-relative](https://github.com/ashaffer/cached-path-relative) from 1.0.1 to 1.0.2. **This update includes security fixes.**
- [Release notes](https://github.com/ashaffer/cached-path-relative/releases)
- [Changelog](https://github.com/ashaffer/cached-path-relative/blob/master/History.md)
- [Commits](https://github.com/ashaffer/cached-path-relative/commits)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Update AngularJS to 1.7.x

Upgrade to gulp 4