build(deps): bump braces, gulp and vinyl-fs

Bumps [braces](https://github.com/micromatch/braces) to 3.0.3 and updates ancestor dependencies [braces](https://github.com/micromatch/braces), [gulp](https://github.com/gulpjs/gulp) and [vinyl-fs](https://github.com/gulpjs/vinyl-fs). These dependencies need to be updated together.


Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `gulp` from 4.0.2 to 5.0.0
- [Release notes](https://github.com/gulpjs/gulp/releases)
- [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md)
- [Commits](gulpjs/gulp@v4.0.2...v5.0.0)

Updates `vinyl-fs` from 2.4.4 to 3.0.3
- [Release notes](https://github.com/gulpjs/vinyl-fs/releases)
- [Changelog](https://github.com/gulpjs/vinyl-fs/blob/master/CHANGELOG.md)
- [Commits](gulpjs/vinyl-fs@v2.4.4...v3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
- dependency-name: gulp
  dependency-type: direct:development
- dependency-name: vinyl-fs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>