chore: Bump braces and gulp in /lacommunaute/static/machina (#676)

Bumps [braces](https://github.com/micromatch/braces) to 3.0.3 and
updates ancestor dependency [gulp](https://github.com/gulpjs/gulp).
These dependencies need to be updated together.

Updates `braces` from 3.0.2 to 3.0.3
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/micromatch/braces/commit/74b2db2938fad48a2ea54a9c8bf27a37a62c350d"><code>74b2db2</code></a>
3.0.3</li>
<li><a
href="https://github.com/micromatch/braces/commit/88f1429a0f47e1dd3813de35211fc97ffda27f9e"><code>88f1429</code></a>
update eslint. lint, fix unit tests.</li>
<li><a
href="https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"><code>415d660</code></a>
Snyk js braces 6838727 (<a
href="https://redirect.github.com/micromatch/braces/issues/40">#40</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/190510f79db1adf21d92798b0bb6fccc1f72c9d6"><code>190510f</code></a>
fix tests, skip 1 test in test/braces.expand</li>
<li><a
href="https://github.com/micromatch/braces/commit/716eb9f12d820b145a831ad678618731927e8856"><code>716eb9f</code></a>
readme bump</li>
<li><a
href="https://github.com/micromatch/braces/commit/a5851e57f45c3431a94d83fc565754bc10f5bbc3"><code>a5851e5</code></a>
Merge pull request <a
href="https://redirect.github.com/micromatch/braces/issues/37">#37</a>
from coderaiser/fix/vulnerability</li>
<li><a
href="https://github.com/micromatch/braces/commit/2092bd1fb108d2c59bd62e243b70ad98db961538"><code>2092bd1</code></a>
feature: braces: add maxSymbols (<a
href="https://github.com/micromatch/braces/issues/">https://github.com/micromatch/braces/issues/</a>...</li>
<li><a
href="https://github.com/micromatch/braces/commit/9f5b4cf47329351bcb64287223ffb6ecc9a5e6d3"><code>9f5b4cf</code></a>
fix: vulnerability (<a
href="https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/98414f9f1fabe021736e26836d8306d5de747e0d"><code>98414f9</code></a>
remove funding file</li>
<li><a
href="https://github.com/micromatch/braces/commit/665ab5d561c017a38ba7aafd92cc6655b91d8c14"><code>665ab5d</code></a>
update keepEscaping doc (<a
href="https://redirect.github.com/micromatch/braces/issues/27">#27</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/micromatch/braces/compare/3.0.2...3.0.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `gulp` from 4.0.2 to 5.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gulpjs/gulp/releases">gulp's
releases</a>.</em></p>
<blockquote>
<h2>gulp v5.0.0</h2>
<p>We've tried to provide a high-level changelog for gulp v5 below, but
it
doesn't contain all changes from the 60+ dependencies that we
maintain.</p>
<p>Please see <a
href="https://github.com/gulpjs/gulp/blob/HEAD/#individual-changelogs">individual
changelogs</a> to drill down
into all changes that were made.</p>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>Drop support for Node.js &lt;10.13</li>
<li>Default stream encoding to UTF-8</li>
<li>Standardized on <code>anymatch</code> library for globbing paths.
All globs should work the same between <code>src</code> and
<code>watch</code> now!</li>
<li>Removed support for ordered globs. This aligns with the chokidar
globbing implementation. If you need your globs to be ordered, you can
use <code>ordered-read-stream</code></li>
<li>All globs and paths are normalized to unix-like filepaths</li>
<li>Only allow JS variants for <code>.gulp.*</code> config files</li>
<li>Removed support for alpha releases of v4 from
<code>gulp-cli</code></li>
<li>Removed the <code>--verify</code> flag</li>
<li>Renamed the <code>--require</code> flag to <code>--preload</code> to
avoid conflicting with Node.js flags</li>
<li>Removed many legacy and deprecated loaders</li>
<li>Upgrade to chokidar v3</li>
<li>Clone <code>Vinyl</code> objects with stream contents using
<code>teex</code>, but no longer wait for all streams to flow before
cloned streams will receive data</li>
<li>Stop using <code>process.umask()</code> to make directories, instead
falling back to Node's default mode</li>
<li>Throw on non-function, non-string option coercers</li>
<li>Drop support of Node.js snake_case flags</li>
<li>Use a Symbol for attaching the <code>gulplog</code> namespace to the
store</li>
<li>Use a Symbol for attaching the <code>gulplog</code> store to the
global</li>
<li>Use sha256 to hash the <code>v8flags</code> cache into a
filename</li>
</ul>
<h3>Features</h3>
<ul>
<li>Streamlined the dependency tree</li>
<li>Switch all streams implementation to Streamx</li>
<li>Rewrote <code>glob-stream</code> to use a custom directory walk that
relies on newer Node.js features and is more performant than old
implementation</li>
<li>Implement translation support for all CLI messages and all messages
passing through gulplog</li>
<li>Allow users to customize or remove the timestamp from their
logs</li>
<li>Upgraded gulplog to v2. Messages logged via v1 will also display a
deprecated warning. Plugins should update to v2 as the community
upgrades to gulp 5</li>
<li>Added support for <code>gulpile.cjs</code> and
<code>gulpfile.mjs</code></li>
<li>Add support for <code>swc</code>, <code>esbuild</code>,
<code>sucrase</code>, and <code>mdx</code> loaders</li>
<li>Provide an ESM export (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2760">#2760</a>)
(<a
href="https://www.github.com/gulpjs/gulp/commit/b00de681f5ef6ade283d544f62f770f6b27a9e52">b00de68</a>)</li>
<li>Support sourcemap handling on streaming <code>Vinyl</code>
contents</li>
<li>Support <code>extends</code> syntax for <code>.gulp.*</code> config
file</li>
<li>Allow overriding <code>gulpfile</code> and <code>preloads</code> via
<code>.gulp.*</code> config file</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Resolve bugs related to symlinks on various platforms</li>
<li>Resolved some reported ReDoS CVEs and improved performance in
glob-parent</li>
<li>Rework errors surfaced when encountering files or symlinks when
trying to create directories</li>
<li>Ensure watch allows japanese characters in globs (<a
href="https://www.github.com/gulpjs/gulp/commit/72668c61e445c81fad23bc6ed24967a3238a648d">72668c6</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md">gulp's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://www.github.com/gulpjs/gulp/compare/v4.0.2...v5.0.0">5.0.0</a>
(2024-03-29)</h2>
<p>We've tried to provide a high-level changelog for gulp v5 below, but
it
doesn't contain all changes from the 60+ dependencies that we
maintain.</p>
<p>Please see <a
href="https://github.com/gulpjs/gulp/blob/master/#individual-changelogs">individual
changelogs</a> to drill down
into all changes that were made.</p>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>Drop support for Node.js &lt;10.13</li>
<li>Default stream encoding to UTF-8</li>
<li>Standardized on <code>anymatch</code> library for globbing paths.
All globs should work the same between <code>src</code> and
<code>watch</code> now!</li>
<li>Removed support for ordered globs. This aligns with the chokidar
globbing implementation. If you need your globs to be ordered, you can
use <code>ordered-read-stream</code></li>
<li>All globs and paths are normalized to unix-like filepaths</li>
<li>Only allow JS variants for <code>.gulp.*</code> config files</li>
<li>Removed support for alpha releases of v4 from
<code>gulp-cli</code></li>
<li>Removed the <code>--verify</code> flag</li>
<li>Renamed the <code>--require</code> flag to <code>--preload</code> to
avoid conflicting with Node.js flags</li>
<li>Removed many legacy and deprecated loaders</li>
<li>Upgrade to chokidar v3</li>
<li>Clone <code>Vinyl</code> objects with stream contents using
<code>teex</code>, but no longer wait for all streams to flow before
cloned streams will receive data</li>
<li>Stop using <code>process.umask()</code> to make directories, instead
falling back to Node's default mode</li>
<li>Throw on non-function, non-string option coercers</li>
<li>Drop support of Node.js snake_case flags</li>
<li>Use a Symbol for attaching the <code>gulplog</code> namespace to the
store</li>
<li>Use a Symbol for attaching the <code>gulplog</code> store to the
global</li>
<li>Use sha256 to hash the <code>v8flags</code> cache into a
filename</li>
</ul>
<h3>Features</h3>
<ul>
<li>Streamlined the dependency tree</li>
<li>Switch all streams implementation to Streamx</li>
<li>Rewrote <code>glob-stream</code> to use a custom directory walk that
relies on newer Node.js features and is more performant than old
implementation</li>
<li>Implement translation support for all CLI messages and all messages
passing through gulplog</li>
<li>Allow users to customize or remove the timestamp from their
logs</li>
<li>Upgraded gulplog to v2. Messages logged via v1 will also display a
deprecated warning. Plugins should update to v2 as the community
upgrades to gulp 5</li>
<li>Added support for <code>gulpile.cjs</code> and
<code>gulpfile.mjs</code></li>
<li>Add support for <code>swc</code>, <code>esbuild</code>,
<code>sucrase</code>, and <code>mdx</code> loaders</li>
<li>Provide an ESM export (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2760">#2760</a>)
(<a
href="https://www.github.com/gulpjs/gulp/commit/b00de681f5ef6ade283d544f62f770f6b27a9e52">b00de68</a>)</li>
<li>Support sourcemap handling on streaming <code>Vinyl</code>
contents</li>
<li>Support <code>extends</code> syntax for <code>.gulp.*</code> config
file</li>
<li>Allow overriding <code>gulpfile</code> and <code>preloads</code> via
<code>.gulp.*</code> config file</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>Resolve bugs related to symlinks on various platforms</li>
<li>Resolved some reported ReDoS CVEs and improved performance in
glob-parent</li>
<li>Rework errors surfaced when encountering files or symlinks when
trying to create directories</li>
<li>Ensure watch allows japanese characters in globs (<a
href="https://www.github.com/gulpjs/gulp/commit/72668c61e445c81fad23bc6ed24967a3238a648d">72668c6</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/gulpjs/gulp/commit/5c4c5473c5582a8e4495c695ecd93b13f0852cbd"><code>5c4c547</code></a>
chore: Release 5.0.0 (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2762">#2762</a>)</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/bf72116c5d5f613836b392fb83633ea6c14f3a65"><code>bf72116</code></a>
chore: Add index.mjs to files list</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/b00de681f5ef6ade283d544f62f770f6b27a9e52"><code>b00de68</code></a>
feat: Provide an ESM export (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2760">#2760</a>)</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/72668c61e445c81fad23bc6ed24967a3238a648d"><code>72668c6</code></a>
chore!: Normalize repository, dropping node &lt;10.13 support (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2758">#2758</a>)</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/85896d4f099a80d58dd08d1f6d80586b07678995"><code>85896d4</code></a>
chore(docs): Update stream handbook link (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2711">#2711</a>)</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/818bd73e5da1ad69f43eef84214c98d6392a73e4"><code>818bd73</code></a>
Docs: Remove gulp-sourcemaps because it is built-in (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2592">#2592</a>)</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/598f971a6567401e5760f4fd0b84df0180c2e350"><code>598f971</code></a>
Docs: Fix broken link in recipe (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2571">#2571</a>)</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/9877de07cf923c889d7f0661d87f3d6f8634eeb1"><code>9877de0</code></a>
Docs: Guide CustomRegistries to maintain properties on tasks (fixes <a
href="https://redirect.github.com/gulpjs/gulp/issues/2561">#2561</a>)
(#...</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/f91c388beb265e5008202f11100309549162247a"><code>f91c388</code></a>
Docs: Remove typo in custom registry docs (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2543">#2543</a>)</li>
<li><a
href="https://github.com/gulpjs/gulp/commit/df252509b52acd712300b3b5d00bf7aedf0dbd40"><code>df25250</code></a>
Docs: Fix typo in task docs (<a
href="https://redirect.github.com/gulpjs/gulp/issues/2524">#2524</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/gulpjs/gulp/compare/v4.0.2...v5.0.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/gip-inclusion/itou-communaute-django/network/alerts).

</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>