Require Django Evolution 0.6.9 or higher.
Lock down the uploaded files a bit in default Apache configs.

The generated Apache configs now set some defaults that limit what can
be done in the uploaded directories. It prevents a .htaccess from
overriding settings, prevents other modules like php from executing, and
also sets some file types to appear as plaintext so that the browser
won't render them.

This is not a complete solution for protection against malicious files.
Older versions of IE don't care what mimetypes we use and will sniff for
HTML files, for instance. It's really up to the administrator to do some
heightened security precautions, which will be outlined in a KB article
separately.
Relax markdown version requirement.

The minimum markdown version requirement for Python 2.7 is now 2.2.1,
which will make it easier for certain setups using older versions to
upgrade. This was an issue for OpenShift.

Reviewed at https://reviews.reviewboard.org/r/4359/
Add a X-ReviewRequest-Repository header to e-mails.

This adds a X-ReviewRequest-Repository header to all outgoing e-mails.
This can help assist in filtering of e-mails when dealing with many
different repositories on Review Board.

Based on https://reviews.reviewboard.org/r/4328/, but with the header
renamed.
Update the Recaptcha URLs for Google's new URLs.

Google updated the Recaptcha URLs to be hosted on google.com. While the
old HTTP URL still works (as a redirect), the old HTTPS URL doesn't seem
to be working.

We now make use of the new URLs.
Merge branch 'release-1.6.x' into release-1.7.x
Merge branch 'release-1.7.x'
Fix an alignment issue with file attachment edit icons.

The edit icon rule wasn't updated to use .rb-icon-edit, and was still
using an img, when specifying alignment. This both updates the rule, and
fixes the alignment to actually look a bit better.
Remove the admin expand/collapse images.

These weren't needed anymore, since they're in the spritesheet.
Use an unguessable filename for all file attachment uploads.

FileAttachments now save with an unguessable filename. They contain the
real filename, but with a UUID prepended. This serves a couple purposes.

1) People can't guess/scan for common names.
2) Users can't craft malicious filenames with the intent to mess up an
   unsecured installation (such as naming a file .htaccess).

The original filename is stored in the database, which is useful for
display purposes. We never actually present the resulting filename
except in the HTML for linking/display.

The caption is now set to the filename by default, so there isn't
necessarily this weird "caption OR filename" thing. It's a sane default
that users can see and override.
Merge branch 'release-1.6.x' into release-1.7.x
Release Review Board 1.6.18.
Merge branch 'release-1.6.x' into release-1.7.x
Fix the list of dependencies.

These got messed up during a merge. We're now back at the proper 1.7.x
dependency list, plus an update for Djblets 0.7.16.
Don't add the new header if the review request doesn't have a repository.

The recent change to add a X-ReviewRequest-Repository header for e-mails
broke for review requests without a repository. It's now conditionally
added.
Release Review Board 1.6.18.
Merge branch 'release-1.6.x' into release-1.7.x
Release Review Board 1.7.12.
Merge branch 'release-1.7.x'
Update the docs database for the latest schema changes.