* Extend GnuPG interface
* Drop the scary upload hash verification. Instead, use GnuPG to verify all uploads - drop all unsigned packages
* Write an updatekeyring cronjob which updates the mentors keyring.
* Update configuration files
* Update CHANGELOG, postpone sponsoring guidelines to the next release

Fix the orig.tar.gz handling. Again. This may also fix an extremely scarce bug where people would need to uploada .orig.tar.gz which doesn't match the checksum of an already known orig.tar.gz in the repository

Fix a nasty bug with the orig.tar.gz handling. Make return status of find_orig_tarball() more obvious, optimize the importer not to copy the orig.tar.gz twice, fix the getorigtarball plugin handling

Fix a nasty bug with the orig.tar.gz handling. Make return status of find_orig_tarball() more obvious, optimize the importer not to copy the orig.tar.gz twice, fix the getorigtarball plugin handling

Extend list of supported distribution to allow every branch known in Debian. This might be a bit more flexible in future

Extend list of supported distribution to allow every branch known in Debian. This might be a bit more flexible in future

Remove checkfiles from plugin list, remove worthless debugging messages, increase readability in the importer

Remove the checkfiles plugin refactor code into a generic file system library check. Refactor debexpo_importer to make use of that library to possibly refuse uploads

Remove checkfiles from plugin list, remove worthless debugging messages, increase readability in the importer

Remove the checkfiles plugin refactor code into a generic file system library check. Refactor debexpo_importer to make use of that library to possibly refuse uploads

By relying simply on pylons.config, we simplify our imports.

This prevents a problem where sometimes pylons.config is not initialized
when we access it.

(The maintainer address is available as a local variable, not
as part of the self object.)