Bump tiny-emitter from 1.2.0 to 2.0.2

Bump websocket from 1.0.26 to 1.0.28

Bump browserify-ngannotate from 1.0.1 to 2.0.0

Bump commander from 2.15.1 to 2.19.0

Bumps [tiny-emitter](https://github.com/scottcorgan/tiny-emitter) from 1.2.0 to 2.0.2.
- [Release notes](https://github.com/scottcorgan/tiny-emitter/releases)
- [Commits](https://github.com/scottcorgan/tiny-emitter/compare/1.2.0...2.0.2)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [browserify-ngannotate](https://github.com/omsmith/browserify-ngannotate) from 1.0.1 to 2.0.0.
- [Release notes](https://github.com/omsmith/browserify-ngannotate/releases)
- [Commits](https://github.com/omsmith/browserify-ngannotate/compare/v1.0.1...v2.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [websocket](https://github.com/theturtle32/WebSocket-Node) from 1.0.26 to 1.0.28.
- [Release notes](https://github.com/theturtle32/WebSocket-Node/releases)
- [Changelog](https://github.com/theturtle32/WebSocket-Node/blob/v1.0.28/CHANGELOG.md)
- [Commits](https://github.com/theturtle32/WebSocket-Node/compare/v1.0.26...v1.0.28)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [commander](https://github.com/tj/commander.js) from 2.15.1 to 2.19.0.
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tj/commander.js/compare/v2.15.1...v2.19.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump mocha from 2.5.3 to 5.2.0

Fix several tests which both called a `done` callback *and* returned a
Promise due to CoffeeScript's implicit returns.

Returning a Promise is preferred to using a `done` callback where
possible, so just do that.

Bumps [mocha](https://github.com/mochajs/mocha) from 2.5.3 to 5.2.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v2.5.3...v5.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump browserify from 13.3.0 to 16.2.3

Bump @octokit/rest from 16.9.0 to 16.10.0

Bump gulp-replace from 0.5.4 to 1.0.0

Bumps [browserify](https://github.com/browserify/browserify) from 13.3.0 to 16.2.3.
- [Release notes](https://github.com/browserify/browserify/releases)
- [Changelog](https://github.com/browserify/browserify/blob/master/changelog.markdown)
- [Commits](https://github.com/browserify/browserify/compare/13.3.0...v16.2.3)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 16.9.0 to 16.10.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v16.9.0...v16.10.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-replace](https://github.com/lazd/gulp-replace) from 0.5.4 to 1.0.0.
- [Release notes](https://github.com/lazd/gulp-replace/releases)
- [Commits](https://github.com/lazd/gulp-replace/compare/v0.5.4...v1.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Remove obsolete comment

The sidebar no longer makes use of any group information returned via
the profile API.

Adapt to change of `getAll` method name

This fixes the changelog update script.

See https://github.com/octokit/rest.js/pull/1094

Bump @octokit/rest from 15.13.0 to 16.9.0

Bump through2 from 2.0.5 to 3.0.0

Bump gulp-changed from 1.3.2 to 3.2.0

Bump postcss from 5.2.18 to 7.0.13

Bumps [postcss](https://github.com/postcss/postcss) from 5.2.18 to 7.0.13.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/master/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/commits/7.0.13)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [gulp-changed](https://github.com/sindresorhus/gulp-changed) from 1.3.2 to 3.2.0.
- [Release notes](https://github.com/sindresorhus/gulp-changed/releases)
- [Commits](https://github.com/sindresorhus/gulp-changed/compare/v1.3.2...v3.2.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [through2](https://github.com/rvagg/through2) from 2.0.5 to 3.0.0.
- [Release notes](https://github.com/rvagg/through2/releases)
- [Commits](https://github.com/rvagg/through2/compare/v2.0.5...v3.0.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bumps [@octokit/rest](https://github.com/octokit/rest.js) from 15.13.0 to 16.9.0.
- [Release notes](https://github.com/octokit/rest.js/releases)
- [Commits](https://github.com/octokit/rest.js/compare/v15.13.0...v16.9.0)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Fix `yarn version` command

b778c9ad refactored the Makefile and
removed the `all` target. This target was still referenced by
package.json however.

Bump gulp-sass from 3.2.1 to 4.0.2

Bumps [gulp-sass](https://github.com/dlmanning/gulp-sass) from 3.2.1 to 4.0.2.
- [Release notes](https://github.com/dlmanning/gulp-sass/releases)
- [Changelog](https://github.com/dlmanning/gulp-sass/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dlmanning/gulp-sass/compare/v3.2.1...v4.0.2)
Signed-off-by: dependabot[bot] <support@dependabot.com>

Bump redux-thunk from 2.2.0 to 2.3.0

[Security] Bump cached-path-relative from 1.0.1 to 1.0.2

Bump gulp-postcss from 6.4.0 to 8.0.0

[Security] Bump stringstream from 0.0.5 to 0.0.6

Bump vinyl from 1.2.0 to 2.2.0