(package_version is now an instance attribute after it is determined in _create_db_entries.)

Running plugins now done only after the completion of _create_db_entries.

 - Importer class from debexpo_importer.py moved into its own namespace (debexpo.importer)
 - importuploads cronjob directly uses the class above instead of subprocess'ing debexpo_importer.py
 - debexpo_importer.py uses this Importer class (not tested)

 * add a 'dmup' column to the User ORM Object
 * add a form to the account page for accepting the DMUP (checkbox)
 * show the DMUP acceptance status in the user's profile
 * debexpo_importer.py: reject uploading if the user has not accepted the DMUP

  accept uploads only if an user could be obtained by the GPG signature
  Implement a form validator to verify that the imported key matches the
* profile mail address
* Update CHANGELOG

Aliaksei Palkanau authored Apr 06, 2012 and Arno Töll committed Apr 16, 2012

Signed-off-by: Arno Töll <arno@debian.org>

* Change copyright header
* Remove PPA controller
* Remove static HTML hooks we don't use anyway

* Extend GnuPG interface
* Drop the scary upload hash verification. Instead, use GnuPG to verify all uploads - drop all unsigned packages
* Write an updatekeyring cronjob which updates the mentors keyring.
* Update configuration files
* Update CHANGELOG, postpone sponsoring guidelines to the next release

Fix the orig.tar.gz handling. Again. This may also fix an extremely scarce bug where people would need to uploada .orig.tar.gz which doesn't match the checksum of an already known orig.tar.gz in the repository

Fix a nasty bug with the orig.tar.gz handling. Make return status of find_orig_tarball() more obvious, optimize the importer not to copy the orig.tar.gz twice, fix the getorigtarball plugin handling

Fix a nasty bug with the orig.tar.gz handling. Make return status of find_orig_tarball() more obvious, optimize the importer not to copy the orig.tar.gz twice, fix the getorigtarball plugin handling

Extend list of supported distribution to allow every branch known in Debian. This might be a bit more flexible in future

Extend list of supported distribution to allow every branch known in Debian. This might be a bit more flexible in future