The blog post will trigger a mail to the list
Merge branch 'security-release' into 'master'

Improve security release documentation

I think the MailChimp step is not needed anymore because we automated it.

See merge request !1271
Remove unused password argument from notification

We were still passing a 'password' argument around, but it is not used
anywhere because we send a password reset link in the welcome email
nowadays.
Fix deploy keys permission check in internal api

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Fix internal API for missing project or key

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
Merge branch 'remove_password_argument' into 'master'

Remove unused password argument

We no longer put a (random) password in the 'new user' email, so no need to pass it around in the code.

See merge request !1279
Merge branch 'fix-internal-api' into 'master'

Fix internal api

Fixes #1787

See merge request !1280