Fix several tests which both called a `done` callback *and* returned a
Promise due to CoffeeScript's implicit returns.

Returning a Promise is preferred to using a `done` callback where
possible, so just do that.

Bumps [mocha](https://github.com/mochajs/mocha) from 2.5.3 to 5.2.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v2.5.3...v5.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump browserify from 13.3.0 to 16.2.3

Bump @octokit/rest from 16.9.0 to 16.10.0

Bump gulp-replace from 0.5.4 to 1.0.0

Bumps [browserify](https://github.com/browserify/browserify) from 13.3.0 to 16.2.3.
- [Release notes](https://github.com/browserify/browserify/releases)
- [Changelog](https://github.com/browserify/browserify/blob/master/changelog.markdown)
- [Commits](https://github.com/browserify/browserify/compare/13.3.0...v16.2.3)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.9.0 to 16.10.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.9.0...v16.10.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-replace](https://github.com/lazd/gulp-replace) from 0.5.4 to 1.0.0.
- [Release notes](https://github.com/lazd/gulp-replace/releases)
- [Commits](https://github.com/lazd/gulp-replace/compare/v0.5.4...v1.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Remove obsolete comment

The sidebar no longer makes use of any group information returned via
the profile API.

Adapt to change of `getAll` method name

This fixes the changelog update script.

See https://github.com/octokit/rest.js/pull/1094

Bump @octokit/rest from 15.13.0 to 16.9.0

Bump through2 from 2.0.5 to 3.0.0

Bump gulp-changed from 1.3.2 to 3.2.0

Bump postcss from 5.2.18 to 7.0.13

Bumps [postcss](https://github.com/postcss/postcss) from 5.2.18 to 7.0.13.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/master/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/commits/7.0.13)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-changed](https://github.com/sindresorhus/gulp-changed) from 1.3.2 to 3.2.0.
- [Release notes](https://github.com/sindresorhus/gulp-changed/releases)
- [Commits](https://github.com/sindresorhus/gulp-changed/compare/v1.3.2...v3.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [through2](https://github.com/rvagg/through2) from 2.0.5 to 3.0.0.
- [Release notes](https://github.com/rvagg/through2/releases)
- [Commits](https://github.com/rvagg/through2/compare/v2.0.5...v3.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 15.13.0 to 16.9.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v15.13.0...v16.9.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Fix `yarn version` command

b778c9ad refactored the Makefile and
removed the `all` target. This target was still referenced by
package.json however.

Bump gulp-sass from 3.2.1 to 4.0.2

Bumps [gulp-sass](https://github.com/dlmanning/gulp-sass) from 3.2.1 to 4.0.2.
- [Release notes](https://github.com/dlmanning/gulp-sass/releases)
- [Changelog](https://github.com/dlmanning/gulp-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dlmanning/gulp-sass/compare/v3.2.1...v4.0.2)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump redux-thunk from 2.2.0 to 2.3.0

[Security] Bump cached-path-relative from 1.0.1 to 1.0.2

Bump gulp-postcss from 6.4.0 to 8.0.0

[Security] Bump stringstream from 0.0.5 to 0.0.6

Bump vinyl from 1.2.0 to 2.2.0

Bumps [gulp-postcss](https://github.com/postcss/gulp-postcss) from 6.4.0 to 8.0.0.
- [Release notes](https://github.com/postcss/gulp-postcss/releases)
- [Commits](https://github.com/postcss/gulp-postcss/compare/6.4.0...8.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 0.0.6. **This update includes security fixes.**
- [Release notes](https://github.com/mhart/StringStream/releases)
- [Commits](https://github.com/mhart/StringStream/compare/v0.0.5...v0.0.6)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [redux-thunk](https://github.com/reduxjs/redux-thunk) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/reduxjs/redux-thunk/releases)
- [Commits](https://github.com/reduxjs/redux-thunk/compare/v2.2.0...v2.3.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [vinyl](https://github.com/gulpjs/vinyl) from 1.2.0 to 2.2.0.
- [Release notes](https://github.com/gulpjs/vinyl/releases)
- [Commits](https://github.com/gulpjs/vinyl/compare/v1.2.0...v2.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [cached-path-relative](https://github.com/ashaffer/cached-path-relative) from 1.0.1 to 1.0.2. **This update includes security fixes.**
- [Release notes](https://github.com/ashaffer/cached-path-relative/releases)
- [Changelog](https://github.com/ashaffer/cached-path-relative/blob/master/History.md)
- [Commits](https://github.com/ashaffer/cached-path-relative/commits)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Update AngularJS to 1.7.x

Upgrade to gulp 4

In Angular 1.6 the behavior where inputs to components ("bindings")
were accessible in the controller's constructor was deprecated [1] but a
switch was made available to re-enable the old behavior to assist migration.
This switch has been removed in Angular 1.7, so we need to stop relying
on it before we can upgrade.

The correct thing to do is to put all init logic which accesses bindings
(`this.someBindingName`) in the `$onInit` lifecycle method.

This commit makes the minimal amount of changes to enable the app and
tests to run without requiring pre-assigned bindings.

[1] https://toddmotto.com/angular-1-6-is-here