Repository: freedomofpress/securedrop

Issue:
Release SecureDrop 0.9.0
This is a tracking issue for the upcoming release of SecureDrop 0.9.0 - tasks may get added or modified. 

**Feature freeze:** August 22, 2018
**String freeze:** August 29, 2018
**Pre-release announcement:** August 29, 2018
**Release date:** September 5, 2018
 
_SecureDrop maintainers and testers:_ As you QA 0.9.0, please report back your testing results as comments on this ticket. File GitHub issues for any problems found, tag them "QA: Release", and associate them with the 0.9 milestone for tracking. 

Test debian packages will be posted on https://apt-test.freedom.press signed with [the test key](https://gist.githubusercontent.com/conorsch/ec4008b111bc3142fca522693f3cce7e/raw/2968621e8ad92db4505a31fcc5776422d7d26729/apt-test%2520apt%2520pubkey). An Ansible playbook testing the upgrade path is [here](https://gist.github.com/conorsch/e7556624df59b2a0f8b81f7c0c4f9b7d).

# Prepare release candidate (0.9.0~rc2)
- [x] Update `securedrop-keyring` package (#3723)
- [x] Prepare 0.9.0-rc2 release changelog - @emkll
- [x] Prepare test plan for 0.9.0~rc2 - @emkll and @redshiftzero
- [x] Create pull request for 0.9.0~rc2 into release/0.9 - @emkll
- [x] Build debs (including linux-{image,firmware}) and put up `0.9.0~rc2` on test apt server - @emkll 

# Prepare release candidate (0.9.0~rc1)
- [x] Prepare 0.9.0 release changelog - @emkll
- [x] Write and send pre-release announcement (#3725 ) - @eloquence 
- [x] Check for Tor stable release (`0.3.3.9` is currently on apt-test)
- [x] Prepare test plan for 0.9.0~rc1 - @emkll and @redshiftzero
- [x] Branch `release/0.9` off `develop` 
- [x] Build debs (including linux-{image,firmware}) and put up `0.9.0~rc1` on test apt server - @emkll 

# **[QA Matrix for SecureDrop 0.9.0](https://docs.google.com/spreadsheets/d/1hp85kSusSO_nsR0oLLGukr44mGufqSbbP5wi_THqW7U/edit#gid=652784916)**

After each test, please update the QA matrix and post details for Basic Server Testing, Application Acceptance Testing and 0.9.0-specific testing below.

# Final release
- [x] Merge final translations
- [x] Push updated signing key to keyservers
- [x] Push signed tag
- [x] Update tor-apt repo with latest tor
- [x] Build final Debian packages for 0.9.0
- [x] Upload Debian packages (including new `securedrop-keyring`, `linux-image`, `linux-firmware`, and `tor` packages)
- [x] Pre-Flight: Test install (not upgrade) of 0.9.0 works w/ prod repo debs
- [x] Write and send release announcement (#3726 ) - @eloquence 
- [x] Publish blog post about 0.9.0 Debian package release and instructions for admins 

# Post release

- [x] Merge changelog (i.e. rc commits) back to `develop` 
- [x] Bump version on `develop` in prep for 0.10.0 release


Discussion:

Resolving patch:
diff --git a/docs/conf.py b/docs/conf.py
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -57,9 +57,9 @@
 # built documents.
 #
 # The short X.Y version.
-version = '0.9.0~rc1'
+version = '0.10.0~rc1'
 # The full version, including alpha/beta/rc tags.
-release = '0.9.0~rc1'
+release = '0.10.0~rc1'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/securedrop/version.py b/securedrop/version.py
--- a/securedrop/version.py
+++ b/securedrop/version.py
@@ -1 +1 @@
-__version__ = '0.9.0~rc1'
+__version__ = '0.10.0~rc1'


Test patch:
diff --git a/molecule/builder/tests/vars.yml b/molecule/builder/tests/vars.yml
--- a/molecule/builder/tests/vars.yml
+++ b/molecule/builder/tests/vars.yml
@@ -1,5 +1,5 @@
 ---
-securedrop_version: "0.9.0~rc1"
+securedrop_version: "0.10.0~rc1"
 ossec_version: "2.8.2"
 keyring_version: "0.1.2"
 config_version: "0.1.1"