Jelle van der Waa authored Nov 04, 2019 and Jelle van der Waa committed Nov 04, 2019

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

news: Add the MAILMAN_PASSWORD option and use it for sending authenticated emails

This makes the check work with previous versions of archweb while also taking into
account downstreams that might not want or need this change.

Due to spamming to arch-announce mail list, we now use a poster password to make sure only authorized
emails are allowed through to the list.

Add information about official docker image

We have an official docker image now, let's mention that on our
`Download` page.
Signed-off-by: Christian Rebischke <chris@nullday.de>

Move the only used JavaScript from the general archweb.js to it's page.
Later this can be refactored to remove the jQuery dependency which is
currently 1/3 of the request.

Reports cleanup

The description doesn't add a lot of useful information to the report.

Some todolists have an elaborate description which takes up a lot of
space, limit these two 50 words.

devel/views: Invalidate template fragment cache on profile update

Closes #166.
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

Update django

Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Add django-extensions to the default installation

Django extensions comes with a lot of goodies, including shell_plus. As a default,
included ptpython for default shell, but this can be overridden by installing another
shell (bpython, ipython) and setting the SHELL_PLUS variable on local_settings.py.

A group contains maintainers not a maintainer field, which can be
multiple maintainers.

Send notification once package has enough signoffs

Developing locally needs CSRF_COOKIE_SECURE=False

packages: fix negative and invalid limit in search API

Resolve 500 issues when limit=wji or limit=-1 by setting a min_value of
0 and changing the field to a IntegerField.

Test on 3.7 and on Python nightly

Some vulnerability scanners try to find security issues in all webforms
and submit invalid null byte into the search from. This is cleaned out
by django and leads to 'q' not being set which gives a 500 error. Check
if the 'q' key exists in the cleaned_data if not return an empty list.
Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>

Fixes a ValueError when setting an IPv6 address with a subnet.
Signed-off-by: Jelle van der Waa <jelle@archlinux.org>

Update to mitigate CVE-2019-12781.

trailing space on line 168