adapted time zone tests to argentina's use of DST, refs #660
fixed the issue where ecurity filters cannot perform checks in addition to isSecure(), closes #671
CHANGELOG, RELEASE_NOTES and a new UPGRADING document with instructions, all for #671
merge 61bc5f086948ca3c017bd75f1ea486c9d442d5f5
merge e7a9e7b6945f3f81feddcbb7789d5356f52888c0
merge 5fbed4bd4c1b45131e91f0e45550e8312977035d
merge 0ce7c759c5882ffae5ac1312437527b630e373a9
merge 209d7fb381e515e313fc1ccf1e0ed2c87c746dd8
Deprecated AgaviSecureWebRequest, closes #676
Allow arrays as values for web request sources. That way, you can, for example, make Agavi try HTTP_X_FORWARDED_SERVER first, and SERVER_NAME second for the SERVER_NAME source. The last value in the list will be the static fallback value if nothing is found ultimately. Closes #675
Moved AgaviWebRequest::getSourceValue() to AgaviRequest, closes #686
moar changelogs
Deprecated directive "core.use_routing" in favor of a routing config parameter ("enabled"), closes #683
Info about deprecated stuff
merging b220732eb503f77c64e6f3f54012bd6e28206aaa
merging a2203da3e29534d2776457a97d22fc0faa25c9a8
merging 2256e1c8b4c3c5e9f6a9ce844b25bc93b6809146...9a93e99b878615b9c05ce11a79bd64d7ab61508c
merge d52553efdd4703d50297b70c41bfad4e348220e5
merge a333594f919888a7bf0ea527b7aa86667cb74654...61d2e022ef86c7cf7785775366fc839fa8223ba9
merging 2492e147c4131211f3c82dea064f8221d930dea0...5923e8cf35b5164a20a0c38df72e77dbc0121dba