Merge tag '0.10.2' into merge-0.10.2 (note - this breaks whistleflow …

…export)

SecureDrop Client 0.10.2

.cargo/audit.toml

@@ -0,0 +1,13 @@
+[advisories]
+# advisory IDs to ignore e.g. ["RUSTSEC-2019-0001", ...]
+ignore = []
+
+# Output Configuration
+[output]
+deny = ["warnings"]
+quiet = false
+
+# Target Configuration
+[target]
+arch = "x86_64" # Ignore advisories for CPU architectures other than this one
+os = "linux" # Ignore advisories for operating systems other than this one

.git-blame-ignore-revs

@@ -1,2 +1,3 @@
 8859979ca1ce036c1bf9ad4a96334326af2e1b4c
-361ba8821de684b077dcad34bea3d16df246a8c4
+361ba8821de684b077dcad34bea3d16df246a8c4
+787844dc339e090aa0e9ac2241895365522c4119

.github/dependabot.yml

@@ -0,0 +1,56 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  # Python development dependencies
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "development"
+  - package-ecosystem: "pip"
+    directory: "/client"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "development"
+    ignore:
+      - dependency-name: "pyqt*"
+    groups:
+      dev-dependencies:
+        patterns: ["*"]
+        dependency-type: "development"
+  - package-ecosystem: "pip"
+    directory: "/export"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "development"
+    groups:
+      dev-dependencies:
+        patterns: ["*"]
+        dependency-type: "development"
+  - package-ecosystem: "pip"
+    directory: "/log"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "development"
+    groups:
+      dev-dependencies:
+        patterns: ["*"]
+        dependency-type: "development"
+  - package-ecosystem: "pip"
+    directory: "/proxy"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "development"
+    groups:
+      dev-dependencies:
+        patterns: ["*"]
+        dependency-type: "development"

.github/pull_request_template.md

@@ -1,11 +1,15 @@
-# Description
+## Status
+
+Ready for review / Work in progress
+
+## Description
 
 Fixes #issue.
 
-# Test Plan
+## Test Plan
 
 
-# Checklist
+## Checklist
 
 If these changes modify code paths involving cryptography, the opening of files in VMs or network (via the RPC service) traffic, Qubes testing in the staging environment is required. For fine tuning of the graphical user interface, testing in any environment in Qubes is required. Please check as applicable: