Merge pull request #4210 from freedomofpress/backport-changelog

Backport changelog
freedomofpress · Mar 1, 2019 · 8a53454 · 8a53454
2 parents d012f14 + fa24797
commit 8a53454
Show file tree

Hide file tree

Showing 13 changed files with 101 additions and 19 deletions.
diff --git a/changelog.md b/changelog.md
@@ -1,6 +1,75 @@
 # Changelog
 
-## 0.12.0~rc1
+## 0.13.0~rc1
+
+## 0.12.0
+
+### Web Application
+
+* Add Romanian and Icelandic as supported languages (#4187)
+* Added toggle to show password for journalists on login (#3713)
+* Updated language referencing Tor button (#4131, #4141)
+* Added instructions for disabling NoScript XSS because of upload problem (#4078, #4159)
+* Prevented setting session cookies on API endpoints (#3876)
+* Updated API to allow clients to set a reply's UUID (#3957)
+* Changed GPG key generation to avoid leaking key creation date (#3912)
+* Fixed race condition that caused all public keys to be exported by API (#4005)
+* Added `filename` to payload when creating a reply via the API (#4047)
+* Fix bug that caused internal server errors on malformed auth tokens (#4053)
+* Added alert on journalist interface to alert when the operating system is out of date (#4027)
+* Added journalist UUID to payload when creating an auth token via the API (#4081)
+* Added GPG 2.1+ compatibility (#3622, #4013, #4038, #4035)
+* Added OS information to metadata endpoint (#4059)
+
+### Operations
+
+* Removed hardcoded Ansible plugin `profile_tasks` (#2943)
+* Fixed restore logic to ensure recreation of onion services (#3960, #4136)
+* Added logic to conditionally update the `release-upgrades` prompt (#4104, #4142)
+* Added logic to ensure packages required by Ansible are present on Xenial systems (#4109, #4143)
+* Ensured Tor is installed from FPF repo (#4175, #4169)
+* Set Debian packages to only use explicitly declared conffiles (#4176, #4161)
+* Removed `iptables` UID restrictions to allow `apt` to work correctly (#3952)
+* Updated kernels to 4.4.167 and removed wireless support (#2726)
+* Updated `cron-apt` remove action to occur after security (#4003)
+* Updated AppArmor profile for Xenial (#3962)
+* Removed common-auth PAM customizations (#3963)
+* Updated `./securedrop-admin logs` command to log installed packages (#3967) and `cron-apt` logs (#4000)
+* Explicitly declared onion services as v2 (#4092)
+* Added ability to store both Trusty and Xenial Debian packages (#3961)
+* Added ability to fetch upstream Tor Debian packages for inclusion in FPF repo (#4101)
+* Run `haveged` confined on Xenial (#4098)
+* Updated PaX flag management for on Apache on Xenial (#4110)
+
+### Developer Workflow
+
+* Fixed the QA data loader to prevent clobbering data (#3793)
+* Fixed updated version script (#4146)
+* Added nested virtualized to CI (#3702)
+* Moved to Vagrant 2.1.x (#3350)
+* Fixed linting tasks on macOS (#3996)
+* Added automatic re-running of flaky admin tests (#4004)
+* Increased max line to 100 characters for Python files (#4006)
+* Re-added static analysis and Python dependency checking to CI (#4033)
+* Updated setuptools in CI (#4036)
+* Added Trusty and Xenial test targets to CI (#3966)
+* Moved CI nightly jobs to 4AM UTC (#4067)
+* Fixed bug where failed CI runs were reported as successes (#4066)
+* Fixed Xenial-specific errors in tests (#4037, #4039)
+* Added 0.11.1 upgrade testing boxes (#4093)
+* Ensured config test coverage on Xenial (#3964)
+
+### Documentation
+
+* Added documentation on how to test upgrades (#3832)
+* Added documentation on how to set the locales (#3846)
+* Added documentation for upgrading from 0.10.0 to 0.11.x (#3982)
+* Added documentation on how to prepare the app and mon servers for upgrade to Xenial (#4044)
+* Updated date where SecureDrop uses Ubuntu Trusty as default OS (#4062)
+* Updated list of hardware recommendations to remove Gigabyte BRIX (#3197, #4075) and added updates to NUCs and Mac Minis (#3976)
+* Added note about how dev can generate 2FA tokens (#4095)
+* Removed old markdown redirect (#4097)
+* Updated SecureDrop client references (#4102)
 
 ## 0.11.1
 

diff --git a/docs/conf.py b/docs/conf.py
@@ -57,9 +57,9 @@
 # built documents.
 #
 # The short X.Y version.
-version = '0.12.0~rc1'
+version = '0.13.0~rc1'
 # The full version, including alpha/beta/rc tags.
-release = '0.12.0~rc1'
+release = '0.13.0~rc1'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

diff --git a/docs/set_up_admin_tails.rst b/docs/set_up_admin_tails.rst
@@ -114,8 +114,8 @@ key:
 .. code:: sh
 
     cd ~/Persistent/securedrop/
-    git checkout 0.12.0~rc1
-    git tag -v 0.12.0~rc1
+    git checkout 0.13.0~rc1
+    git tag -v 0.13.0~rc1
 
 You should see ``Good signature from "SecureDrop Release Signing Key"`` in the
 output of that last command along with the fingerprint above.

diff --git a/install_files/ansible-base/group_vars/all/securedrop b/install_files/ansible-base/group_vars/all/securedrop
@@ -2,7 +2,7 @@
 # Variables that apply to both the app and monitor server go in this file
 # If the monitor or app server need different values define the variable in
 # hosts_vars/app.yml or host_vars/mon.yml
-securedrop_app_code_version: "0.12.0~rc1"
+securedrop_app_code_version: "0.13.0~rc1"
 
 grsecurity: true
 install_local_packages: false

diff --git a/install_files/ansible-base/roles/build-securedrop-app-code-deb-pkg/files/changelog-trusty b/install_files/ansible-base/roles/build-securedrop-app-code-deb-pkg/files/changelog-trusty
@@ -1,8 +1,14 @@
-securedrop-app-code (0.12.0~rc1+trusty) trusty; urgency=medium
+securedrop-app-code (0.13.0~rc1+trusty) trusty; urgency=medium
 
-  * See changelog.md
+  * See changelog.md 
+
+ -- SecureDrop Team <[email protected]>  Wed, 27 Feb 2019 11:01:15 +0000
+
+securedrop-app-code (0.12.0+trusty) trusty; urgency=medium
+
+  * See changelog.md 
 
- -- SecureDrop Team <[email protected]>  Thu, 13 Dec 2018 02:02:05 +0000
+ -- SecureDrop Team <[email protected]>  Wed, 27 Feb 2019 00:36:47 +0000
 
 securedrop-app-code (0.11.1) trusty; urgency=medium
 

diff --git a/install_files/ansible-base/roles/build-securedrop-app-code-deb-pkg/files/changelog-xenial b/install_files/ansible-base/roles/build-securedrop-app-code-deb-pkg/files/changelog-xenial
@@ -1,5 +1,12 @@
-securedrop-app-code (0.12.0~rc1+xenial) xenial; urgency=medium
+securedrop-app-code (0.13.0~rc1+xenial) xenial; urgency=medium
 
-  * See changelog.md
+  * See changelog.md 
+
+ -- SecureDrop Team <[email protected]>  Wed, 27 Feb 2019 11:02:06 +0000
+
+securedrop-app-code (0.12.0+xenial) xenial; urgency=medium
+
+  * See changelog.md 
+
+ -- SecureDrop Team <[email protected]>  Wed, 27 Feb 2019 00:37:02 +0000
 
- -- SecureDrop Team <[email protected]>  Thu, 13 Dec 2018 02:02:05 +0000
diff --git a/install_files/securedrop-config/DEBIAN/control b/install_files/securedrop-config/DEBIAN/control
@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-config
-Version: 0.1.2+0.12.0~rc1
+Version: 0.1.2+0.13.0~rc1
 Architecture: all
 Description: Establishes baseline system state for running SecureDrop.
  Configures apt repositories.
diff --git a/install_files/securedrop-keyring/DEBIAN/control b/install_files/securedrop-keyring/DEBIAN/control
@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-keyring
-Version: 0.1.2+0.12.0~rc1
+Version: 0.1.2+0.13.0~rc1
 Architecture: amd64
 Depends: gnupg
 Description: Provides an apt keyring for SecureDrop-related packages, so the master signing key used for SecureDrop packages can be updated via apt.
diff --git a/install_files/securedrop-ossec-agent/DEBIAN/control b/install_files/securedrop-ossec-agent/DEBIAN/control
@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-ossec-agent
-Version: 3.0.0+0.12.0~rc1
+Version: 3.0.0+0.13.0~rc1
 Architecture: amd64
 Depends: ossec-agent,securedrop-keyring,securedrop-config
 Replaces: ossec-agent

diff --git a/install_files/securedrop-ossec-server/DEBIAN/control b/install_files/securedrop-ossec-server/DEBIAN/control
@@ -4,7 +4,7 @@ Priority: optional
 Maintainer: SecureDrop Team <[email protected]>
 Homepage: https://securedrop.org
 Package: securedrop-ossec-server
-Version: 3.0.0+0.12.0~rc1
+Version: 3.0.0+0.13.0~rc1
 Architecture: amd64
 Depends: ossec-server,securedrop-keyring,securedrop-config
 Replaces: ossec-server

diff --git a/molecule/builder-trusty/tests/vars.yml b/molecule/builder-trusty/tests/vars.yml
@@ -1,5 +1,5 @@
 ---
-securedrop_version: "0.12.0~rc1"
+securedrop_version: "0.13.0~rc1"
 ossec_version: "3.0.0"
 keyring_version: "0.1.2"
 config_version: "0.1.2"

diff --git a/molecule/shared/stable.ver b/molecule/shared/stable.ver
@@ -1 +1 @@
-0.11.1
+0.12.0
diff --git a/securedrop/version.py b/securedrop/version.py
@@ -1 +1 @@
-__version__ = '0.12.0~rc1'
+__version__ = '0.13.0~rc1'
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		__version__ = '0.12.0~rc1'
		__version__ = '0.13.0~rc1'