Release SecureDrop 0.3.11

[redshiftzero]

This is a tracking issue for SecureDrop 0.3.11 - tasks may get added or modified.

Finish release candidate (0.3.11-rc1)

• Make new PR targeting release/0.3.11 branch cherry picking commits in Update source TB logout instructions #1522 and Get sources to set Tor Browser security slider to High #1480 and updating for latest version of Tor Browser - @redshiftzero
• Cherry pick commits from Add SourceClear integration to .travis.yml #1520 (SourceClear integration), Redirect source to /lookup if visiting /generate and already logged in #1165 (adds the explicit /logout route), and Fix text showing on top of button in start page of Source Interface #1186 (needed such that the styling on the interface is not horrible), the commits from Misc test cleanup #1445 that fix the broken test suite into release/0.3.11, Remove source choice in length of codename #1521 (remove source choice in number of words from interface) - @redshiftzero
• Review and merge above PR - @garrettr
• Build test debs - @conorsch
• Stand up test apt server with 0.3.11-rc1 packages - @msheiny

QA

• Unit tests pass on 0.3.11-rc1 staging VM
• Test upgrade from 0.3.10 works correctly on staging VM
• Interactive testing produces produce nothing strange in logs in staging VM
• Test upgrade from 0.3.10 works on prod w/ test repo debs
• Test install (not upgrade) of 0.3.10 works on prod w/ test repo debs

Release

• Build final Debian packages for 0.3.11
• Release 0.3.11
• Publish blog post about 0.3.11 Debian package release

Post-release

• Merge release changes into development branch - @redshiftzero

[psivesely]

Coveralls is being run in .travis.yml, but there's no securedrop/.coveragerc in branch release/0.3.11, hence the ever-pending coveralls CI status (see, e.g., #1578). We probably want to either:

1. Copy the securedrop/.coveragerc from develop.
2. Stop installing & running coveralls in .travis.yml.

We could also just ignore it. I'm in favor of 1 provided the checklist here is up-to-date; if we haven't built the test debs, this is a change that we can make super quick and won't require testing as it's outside of the app code. It'd be nice to know what type of coverage we have on our actual production code, not just our develop branch.

[conorsch]

Coveralls changed added by @redshiftzero in cf48c3d.

[b-meson]

Great job with the release @redshiftzero !!!

[redshiftzero]

Changes merged. Closing.