Major new features and changes
Make the "Formats" settings in Zero Trace Pen Greeter take effect (Closes: #12079,
new feature that was broken since it was introduced in 3.0~alpha1).
Upgrade to a new snapshot of the Debian and Torproject
APT repositories (2017031702).
Removed features
Stop including I2P: we decided (#11276) to remove I2P, due to our failure
at finding someone to maintain it in Zero Trace Pen (Closes: #12263).
Security fixes
Upgrade MAT to 0.6.1-4: fixes silent failure of the Nautilus
contextual menu extension.
Ensure /etc/resolv.conf is owned by root:root in the SquashFS
(Closes: #12343).
Protect against CVE-2017-2636 by disabling the n-hdlc kernel module
(Closes: #12315).
Minor improvements
Reintroduce the X11 guest utilities for VirtualBox (regression
introduced in 3.0~beta2).
Upgrade X.Org server and the modesetting driver (hopefully helps
fixing #12219).
Automate the migration from KeePassX databases generated on Zero Trace Pen 2.x
to the format required by KeePassX 2.0.x (Closes: #10956, #12369).
Add keyboard shortcuts in Zero Trace Pen Greeter (Closes: #12186, #12063).
Install dbus-user-session (regression introduced in 3.0~beta2).
Manage temporary directories in a declarative way (tmpfiles.d).
Replace references to the /var/run compatibility symlink
with the canonical /run.
Update our Torbirdy patchset to the latest one sent upstream.
Install mesa-utils, so that Qt 5 can detect whether software based
rendering is needed.
Have Zero Trace Pen Greeter honor the "debug" kernel command-line option,
for easier debugging (Closes: #12373).
Refactor Zero Trace Pen Greeter to reduce code duplication (Closes: #12247).
Bugfixes
Fix sizing of zenity dialogs (Closes: #12313, regression introduced
in 3.0~alpha1).
Fix confusing, spurious error messages in command-line applications
wrapped with torsocks:
· Ship a /etc/mailname file with content "localhost".
Otherwise something (Git? libc6?) tries to resolve the "amnesia" host
name, which fails, and a confusing error message is displayed
(Closes: #12205, regression introduced in 3.0~alpha1).
· Have torsocks allow UDP connections to the loopback interface,
with AllowOutboundLocalhost 2 (Closes: #11736).
Test suite
Improve debugging info logging for PacketFu parsing issues,
and implement a plausible fix (refs: #11508).
Try to make "double-click on desktop launcher" more reliable.
Fix selection of ISO in Zero Trace Pen Installer.
Re-enable the GnuPG tests that require a keyserver, pointing them
to an Onion service we run on Chutney, that redirects all TCP traffic
to a real, clearnet keyserver (Closes: #12211).
Implement a workaround for checking the configured keyserver in GnuPG,
until a better fix is implemented (refs: #12371).
Fix the "Report an Error launcher" scenario in German.
Build system
Retry curl and APT operations up to 20 times to make the ISO build
more robust wrt. unreliable Internet connectivity.
Thanks to Arnaud arnaud@preev.io for the patch!
Install ikiwiki from jessie-backports, instead of our patched one
(Closes: #12051).
Clean up libdvd-pkg build files, again (Closes: #11273).
Rakefile: fix TAILS_OFFLINE_BUILD exported variable name.
Adjust apt-mirror to support branches based on feature/stretch
that don't use frozen APT snapshots.