SecureDrop Client 0.17.0

[deeplow]

This issue tracks the SecureDrop Client release [version]. It will be organized by:

• Release Manager: @deeplow
• Deputy Release Manager: @legoktm

This release includes the following user-facing changes:

• Whonix deprecation in favor of arti in sd-proxy
• Have plaintext files be printed through LibreOffice

(Full list of changes, minus app development: https://gist.github.com/legoktm/d2eaff1129314df59b678c5794370f08)

Pending PRs to cut a release branch:

• Add whonix-config package back #2664

SecureDrop maintainers and testers: As you QA this release, please report back your testing results as comments on this ticket. File GitHub issues for any problems found, tag them "QA: Release", and associate them with the release milestone for tracking (or ask a maintainer to do so).

Test plan

To be coordinated with the workstation release 0.14.0.

• Pseudolocale (LANG=en_XA) QA per https://github.com/freedomofpress/securedrop-workstation/wiki/Workstation-Acceptance-Tests#internationalization-reference

Release tasks

The following checklist is derived from the developer documentation.

• Check if there are any security bug fixes waiting to be pulled into the RC
• Check if there are any translations: (will be included in RC2 or final artifact)
  • pending merge into main
  • pending inclusion as a supported language in MANIFEST.in
• Update changelog
• Create test plan
• Build and deploy the package to apt-test
• Begin formal QA (and iterate until suitable release candidate)
• Build production package
• Sign production package
• Perform final pre-flight testing using apt-qa.freedom.press
  • Localization: In a sd-app, the locale to a supported language (e.g.: sudo dpkg-reconfigure locales and select pt_PT.utf-8 and apply.). Run the Client, and confirm that the application is translated.
• Publish production package
• Publicize release via support channels

Post-release Tasks

• Run the updater on a production setup once packages are live, and conduct a smoketest (successful updater run, and basic functionality if updating client packages).
• Backport changelog commit(s) with git cherry-pick -x from the release branch into the main development branch, and sign the commit(s). 0.17.0 changelog backport + version bump #2692
• Run the ./update_version.sh script to bump the version on main to the next minor version’s rc1. Open a PR with these commits; this PR can close the release tracking issue. 0.17.0 changelog backport + version bump #2692