Start on 0.4.0.1-alpha changelog

69 files changed, 319 insertions, 301 deletions

diff --git a/ChangeLog b/ChangeLog
index 090498c859..d6a72e2efd 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,322 @@
+Changes in version 0.4.0.1-alpha - 2019-01-18
+  blurb blurb blurb
+
+  o Major features (battery management, client, dormant mode):
+    - When Tor is running as a client, and it is unused for a long time,
+      it can now enter a "dormant" state. When Tor is dormant, it avoids
+      network activity and CPU wakeups until it is reawoken either by a
+      user request or by a controller command. For more information, see
+      the configuration options starting with "Dormant". Implements
+      tickets 2149 and 28335.
+    - The client's memory of whether it is "dormant", and how long it
+      has spend idle, persists across invocations. Implements
+      ticket 28624.
+    - There is a DormantOnFirstStartup option that integrators can use
+      if they expect that in many cases, Tor will be installed but
+      not used.
+
+  o Major features (bootstrap):
+    - Report the first connection to a relay as the earliest phases of
+      bootstrap progress, regardless of whether it's a connection for
+      building application circuits. This allows finer-grained reporting
+      of early progress than previously possible with the improvements
+      of ticket 27169. Closes tickets 27167 and 27103. Addresses
+      ticket 27308.
+    - Separately report the intermediate stage of having connected to a
+      proxy or pluggable transport, versus succesfully using that proxy
+      or pluggable transport to connect to a relay. Closes tickets 27100
+      and 28884.
+
+  o Major features (circuit padding):
+    - Implement preliminary support for the circuit padding portion of
+      Proposal 254. The implementation supports Adaptive Padding (aka
+      WTF-PAD) state machines for use between experimental clients and
+      relays. Support is also provided for APE-style state machines that
+      use probability distributions instead of histograms to specify
+      inter-packet delay. At the moment, Tor does not provide any
+      padding state machines that are used in normal operation -- this
+      feature exists solely for experimentation in this release. Closes
+      ticket 28142.
+
+  o Major features (refactoring):
+    - Tor now uses an explicit list of its own subsystems when
+      initializing and shutting down. Previously, these systems were
+      managed implicitly though various places throughout the codebase.
+      (There still some subsystems using the old system.) Closes
+      ticket 28330.
+
+  o Minor feature (bootstrap):
+    - When reporting bootstrap progress, stop distinguishing between
+      situations where it seems that only internal paths are available
+      and situations where it seems that external paths are available.
+      Previously, tor would often erroneously report that it had only
+      internal paths. Closes ticket 27402.
+
+  o Minor features (Continuous Integration):
+    - Log Python version during each Travis CI job. Resolves
+      issue 28551.
+
+  o Minor features (controller):
+    - Add a DROPOWNERSHIP command to undo the effects of TAKEOWNERSHIP.
+      Implements ticket 28843.
+
+  o Minor features (developer tooling):
+    - Provide a git hook script to prevent "fixup!" and "squash!"
+      commits from ending up in master. Closes ticket 27993.
+
+  o Minor features (directory authority):
+    - Directory authorities support a new consensus algorithm, under
+      which microdescriptor entries are encoded in a canonical form.
+      This improves their compressibility in transit and on the client.
+      Closes ticket 28266; implements proposal 298.
+
+  o Minor features (directory authority, relay):
+    - Authorities now vote on a "StaleDesc" flag to indicate that a
+      relay's descriptor is so old that the relay should upload again
+      soon. Relays understand this flag, and treat it as a signal to
+      upload a new descriptor. This flag will eventually let us remove
+      the 'published' date from routerstatus entries, and save a great
+      deal of space in our consensus diffs. Closes ticket 26770;
+      implements proposal 293.
+
+  o Minor features (fallback directory mirrors):
+    - Update the fallback whitelist based on operator opt-ins and opt-
+      outs. Closes ticket 24805, patch by Phoul.
+    - Accept fallbacks that deliver reasonably live consensuses.
+      (Consensuses that will become valid less than 24 hours in the
+      future, or that expired less than 24 hours ago.) Closes
+      ticket 28768.
+    - Accept relays that are a fuzzy match to a fallback whitelist
+      entry. If a relay matches at least one fingerprint, IPv4 address,
+      or IPv6 address in the fallback whitelist, it can become a
+      fallback. This reduces the work required to keep the list up to
+      date. Closes ticket 24838.
+
+  o Minor features (FreeBSD):
+    - Warn relay operators if the "net.inet.ip.random_id" sysctl (IP ID
+      randomization) is disabled on their relay if it is running on
+      FreeBSD based operating systems. Closes ticket 28518.
+
+  o Minor features (HTTP standards compliance):
+    - Don't send Content-Type: application/octet-stream for transparently
+      compressed documents, which confused browsers. Closes ticket 28100.
+
+  o Minor features (ipv6):
+    - We add an option ClientAutoIPv6ORPort which makes clients randomly
+      prefer a node's IPv4 or IPv6 ORPort. The random preference is set
+      every time a node is loaded from a new consensus or bridge config.
+      Closes ticket 27490. Patch by Neel Chauhan.
+    - When using addrs_in_same_network_family(), check IPv6 subnets as
+      well as IPv4 ones where possible when a client chooses circuit
+      paths. Previously, we used this function only for IPv4 subnets.
+      Closes ticket 24393. Patch by Neel Chauhan.
+
+  o Minor features (log messages):
+    - Improve log message in HSv3 service that could print out negative
+      revision counters. Closes ticket 27707. Patch by "ffmancera".
+
+  o Minor features (memory usage):
+    - Store microdescriptor family lists with a more compact
+      representation to save memory. Closes ticket 27359.
+    - Tor clients no longer need to keep the full text of a consensus in
+      memory in order to parse it, or apply a diff to it. Instead, they
+      use mmap() to read the consensus files from disk. Closes
+      ticket 27244.
+
+  o Minor features (parsing):
+    - Directory authorities now validate that router descriptors and
+      ExtraInfo documents are in a valid subset of UTF-8, and reject
+      them if not. Closes ticket 27367.
+
+  o Minor features (performance):
+    - Avoid parsing the same protocol-versions string over and over in
+      summarize_protover_flags(). This should save us a huge number of
+      malloc calls on startup, and may reduce memory fragmentation with
+      some allocators. Closes ticket 27225.
+    - Remove a needless memset() call from get_token_arguments, thereby
+      speeding up the tokenization of directory objects by about 20%.
+      Closes ticket 28852.
+    - Replace parse_short_policy() with a faster implementation, to
+      improve microdescriptor parsing time. Closes ticket 28853.
+    - Speed up directory parsing a little by avoiding use of the non-
+      inlined strcmp_len() function. Closes ticket 28856.
+    - Speed up microdesriptor parsing by about 30%, to help improve
+      startup time. Closes ticket 28839.
+
+  o Minor features (pluggable transports):
+    - Add support for emitting STATUS updates to Tor's control port from
+      a pluggable transport process. Closes ticket 28846.
+    - Add support for logging to Tor's logging subsystem from a
+      pluggable transport process. Closes ticket 28180
+
+  o Minor features (process management):
+    - Add new Process API for handling child processes. This new API
+      allows Tor to have bi-directional communication with child
+      processes on both Unix and Windows. Closes ticket 28179.
+    - Use the subsystem module to initialize and shut down the process
+      module. Closes ticket 28847.
+
+  o Minor features (relay):
+    - When listing relay families, list them in canonical form including
+      the relay's own identity, and try to give a more useful set of
+      warnings. Part of ticket 28266 and proposal 298.
+
+  o Minor features (required protocols):
+    - Tor no longer exits if it is missing a required protocol, if the
+      consensus that requires the protocol predates the release date of
+      the version of Tor. This change prevents Tor releases from exiting
+      because of an old cached consensus, on the theory that a newer
+      cached consensus might not require the protocol. Implements
+      proposal 297; closes ticket 27735.
+
+  o Minor features (testing):
+    - Allow HeartbeatPeriod of less than 30 minutes in testing Tor
+      networks. Closes ticket 28840, patch by robgjansen
+
+  o Minor bugfixes (client, bootstrap):
+    - When Tor's clock is behind the clocks on the authorities, allow
+      Tor to bootstrap successfully. Fixes bug 28591; bugfix
+      on 0.2.0.9-alpha.
+
+  o Minor bugfixes (client, guard selection):
+    - When Tor's consensus has expired, but is still reasonably live,
+      use it to select guards. Fixes bug 24661; bugfix on 0.3.0.1-alpha.
+
+  o Minor bugfixes (compilation):
+    - Fix missing headers required for proper detection of OpenBSD. Fixes
+      bug 28938; bugfix on 0.3.5.1-alpha. Patch from Kris Katterjohn.
+
+  o Minor bugfixes (directory clients):
+    - Mark outdated dirservers when Tor only has a reasonably live
+      consensus. Fixes bug 28569; bugfix on 0.3.2.5-alpha.
+
+  o Minor bugfixes (directory mirror):
+    - When Tor's clock is behind the clocks on the authorities, allow
+      Tor to serve future consensuses. Fixes bug 28654; bugfix
+      on 0.3.0.1-alpha.
+
+  o Minor bugfixes (DNS):
+    - Gracefully handle empty or absent resolve.conf file by falling
+      back to using localhost DNS service and hoping it works. Fixes bug
+      21900; bugfix on 0.2.1.10-alpha.
+
+  o Minor bugfixes (fallback scripts):
+    - In updateFallbackDirs.py, call the filter file a "fallback list"
+      instead of a "whitelist" in check_existing mode. Fixes bug 24953;
+      bugfix on 0.3.0.3-alpha.
+
+  o Minor bugfixes (guards):
+    - In count_acceptable_nodes(), check if we have at least one bridge
+      or guard node, and two non-guard nodes for a circuit. Previously,
+      we have added up the sum of all nodes with a descriptor, but that
+      could cause us to build circuits that fail if we had either too
+      many bridges, or not enough guard nodes. Fixes bug 25885; bugfix
+      on 0.3.6.1-alpha. Patch by Neel Chauhan.
+
+  o Minor bugfixes (IPv6):
+    - Fix tor_ersatz_socketpair on IPv6-only systems. Previously, the
+      IPv6 socket was bound using an address family of AF_INET instead
+      of AF_INET6. Fixes bug 28995; bugfix on 0.3.5.1-alpha. Patch from
+      Kris Katterjohn.
+
+  o Minor bugfixes (logging):
+    - Rework rep_hist_log_link_protocol_counts() to iterate through all
+      link protocol versions when logging incoming/outgoing connection
+      counts. Tor no longer skips version 5 and we don't have to
+      remember to update this function when new link protocol version is
+      developed. Fixes bug 28920; bugfix on 0.2.6.10.
+
+  o Minor bugfixes (networking):
+    - Introduce additional checks into tor_addr_parse() to reject
+      certain incorrect inputs that previously were not detected. Fixes
+      bug 23082; bugfix on 0.2.0.10-alpha.
+
+  o Minor bugfixes (onion service v3, client):
+    - Avoid a BUG() stacktrace in case a SOCKS connection is found
+      waiting for the descriptor while we do have it in the cache. There
+      is a rare case when this can happen. Now, tor will recover and
+      retry the descriptor. Fixes bug 28669; bugfix on 0.3.2.4-alpha.
+
+  o Minor bugfixes (periodic events):
+    - Refrain from calling routerlist_remove_old_routers() from
+      check_descriptor_callback(). Instead, create a new periodic event
+      that will run once every hour even if Tor is not configured as
+      onion router. Fixes bug 27929; bugfix on 0.2.8.1-alpha.
+
+  o Minor bugfixes (pluggable transports):
+    - Make sure that data is continously read from standard out and
+      error of the PT child-process to avoid deadlocking when the pipes'
+      buffer is full. Fixes bug 26360; bugfix on 0.2.3.6-alpha.
+
+  o Minor bugfixes (unit tests):
+    - Instead of relying on hs_free_all() to clean up all onion service
+      objects we created in test_build_descriptors(), deallocate them
+      one by one. This lets Coverity know that we are not leaking memory
+      here and fixes CID 1442277. Fixes bug 28989; bugfix
+      on 0.3.5.1-alpha.
+
+  o Minor bugfixes (usability):
+    - Stop saying "Your Guard ..." in pathbias_measure_{use,close}_rate()
+      as that confusingly suggests that mentioned guard node is under
+      control and responsibility of end user, which it is not. Fixes bug
+      28895; bugfix on Tor 0.3.0.1-alpha.
+
+  o Code simplification and refactoring:
+    - Reimplement NETINFO cell parsing and generation to rely on
+      trunnel-generated wire format handling code. Closes ticket 27325.
+    - Remove unnecessarily unsafe code from the rust macro cstr!. Closes
+      ticket 28077.
+    - Rework SOCKS wire format handling to rely on trunnel-generated
+      parsing/generation code. Resolves ticket 27620.
+    - Split out bootstrap progress reporting from control.c into a
+      separate file. Part of ticket 27402.
+    - The .may_include files that we use to describe our directory-by-
+      directory dependency structure now describe a noncircular
+      dependency graph over the directories that they cover. Our
+      checkIncludes.py tool now enforces this. Closes ticket 28362.
+
+  o Documentation:
+    - Mention that you cannot add new Onion Service if Tor is already
+      running with Sandbox enabled. Closes ticket 28560.
+    - Improve ControlPort description in tor manpage to mention that it
+      accepts address/port pair, and can be used multiple times. Closes
+      ticket 28805.
+    - Document the exact output of "tor --version". Closes ticket 28889.
+
+  o Removed features:
+    - Stop responding to 'GETINFO status/version/num-concurring' and
+      'GETINFO status/version/num-versioning' control port commands, as
+      those were deprecated back in 0.2.0.30. Also stop listing them in
+      output of 'GETINFO info/names'. Resolves ticket 28757.
+    - The scripts used to generate and maintain the list of fallback
+      directories have been extracted into a new "fallback-scripts"
+      repository. Closes ticket 27914.
+
+  o Testing:
+    - Run shellcheck for stuff in scripts/ directory. Closes
+      ticket 28058.
+    - Write some unit tests for tokenize_string() and get_next_token()
+      functions. Resolves ticket 27625.
+
+  o Code simplification and refactoring (onion service v3):
+    - Consolidate the authorized client descriptor cookie computation
+      code from client and service into one function. Closes
+      ticket 27549.
+
+  o Code simplification and refactoring (shell scripts):
+    - Cleanup scan-build.sh to silence shellcheck warnings. Closes
+      ticket 28007.
+    - Fix issues that shellcheck found in chutney-git-bisect.sh.
+      Resolves ticket 28006.
+    - Fix issues that shellcheck found in updateRustDependencies.sh.
+      Resolves ticket 28012.
+    - Fix shellcheck warnings in cov-diff script. Resolves issue 28009.
+    - Fix shellcheck warnings in run_calltool.sh. Resolves ticket 28011.
+    - Fix shellcheck warnings in run_trunnel.sh. Resolves issue 28010.
+    - Fix shellcheck warnings in scripts/test/coverage. Resolves
+      issue 28008.
+
+
 Changes in version 0.3.3.11 - 2018-01-07
   Tor 0.3.3.11 backports numerous fixes from later versions of Tor.
   numerous fixes, including an important fix for anyone using OpenSSL
diff --git a/changes/bug21900 b/changes/bug21900
deleted file mode 100644
index 686cb6c584..0000000000
--- a/changes/bug21900
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (DNS):
-    - Gracefully handle empty or absent resolve.conf file by falling
-      back to using localhost DNS service and hoping it works. Fixes
-      bug 21900; bugfix on 0.2.1.10-alpha.
diff --git a/changes/bug23082 b/changes/bug23082
deleted file mode 100644
index fc4b52c364..0000000000
--- a/changes/bug23082
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (networking):
-    - Introduce additional checks into tor_addr_parse() to
-      reject certain incorrect inputs that previously were
-      not detected. Fixes bug 23082; bugfix on 0.2.0.10-alpha.
diff --git a/changes/bug24393 b/changes/bug24393
deleted file mode 100644
index e190192319..0000000000
--- a/changes/bug24393
+++ /dev/null
@@ -1,6 +0,0 @@
-  o Minor features (ipv6):
-    - When using addrs_in_same_network_family(), check IPv6 subnets as well as
-      IPv4 ones where possible when a client chooses circuit paths. Previously,
-      we used this function only for IPv4 subnets. Closes ticket 24393. Patch
-      by Neel Chauhan.
-
diff --git a/changes/bug24661 b/changes/bug24661
deleted file mode 100644
index a915a93e0e..0000000000
--- a/changes/bug24661
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor bugfixes (client, guard selection):
-    - When Tor's consensus has expired, but is still reasonably live, use it
-      to select guards. Fixes bug 24661; bugfix on 0.3.0.1-alpha.
diff --git a/changes/bug24953 b/changes/bug24953
deleted file mode 100644
index d142dfd6cc..0000000000
--- a/changes/bug24953
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (fallback scripts):
-    - In updateFallbackDirs.py, call the filter file a "fallback list"
-      instead of a "whitelist" in check_existing mode.
-      Fixes bug 24953; bugfix on 0.3.0.3-alpha.
diff --git a/changes/bug25885 b/changes/bug25885
deleted file mode 100644
index 1b89acfe06..0000000000
--- a/changes/bug25885
+++ /dev/null
@@ -1,7 +0,0 @@
-  o Minor bugfixes (guards):
-    - In count_acceptable_nodes(), check if we have at least one bridge
-      or guard node, and two non-guard nodes for a circuit. Previously,
-      we have added up the sum of all nodes with a descriptor, but that
-      could cause us to build circuits that fail if we had either too
-      many bridges, or not enough guard nodes. Fixes bug 25885; bugfix
-      on 0.3.6.1-alpha. Patch by Neel Chauhan.
diff --git a/changes/bug27707 b/changes/bug27707
deleted file mode 100644
index e114222741..0000000000
--- a/changes/bug27707
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (log messages):
-    - Improve log message in HSv3 service that could print out negative
-      revision counters. Closes ticket 27707. Patch by "ffmancera".
\ No newline at end of file
diff --git a/changes/bug27929 b/changes/bug27929
deleted file mode 100644
index dab57a2eca..0000000000
--- a/changes/bug27929
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor bugfixes (periodic events):
-    - Refrain from calling routerlist_remove_old_routers() from
-      check_descriptor_callback(). Instead, create a new periodic
-      event that will run once every hour even if Tor is not configured
-      as onion router. Fixes bug 27929; bugfix on 0.2.8.1-alpha.
diff --git a/changes/bug28518 b/changes/bug28518
deleted file mode 100644
index d7ebab29bb..0000000000
--- a/changes/bug28518
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor features (FreeBSD):
-    - Warn relay operators if the "net.inet.ip.random_id" sysctl (IP ID
-      randomization) is disabled on their relay if it is running on FreeBSD
-      based operating systems. Closes ticket 28518.
diff --git a/changes/bug28569 b/changes/bug28569
deleted file mode 100644
index 45a57a80ae..0000000000
--- a/changes/bug28569
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor bugfixes (unit tests, directory clients):
-    - Mark outdated dirservers when Tor only has a reasonably live consensus.
-      Fixes bug 28569; bugfix on 0.3.2.5-alpha.
diff --git a/changes/bug28591 b/changes/bug28591
deleted file mode 100644
index 3a1c96ac16..0000000000
--- a/changes/bug28591
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (client, bootstrap):
-    - When Tor's clock is behind the clocks on the authorities, allow Tor to
-      bootstrap successfully. Fixes bug 28591; bugfix on 0.2.0.9-alpha.
-
diff --git a/changes/bug28654 b/changes/bug28654
deleted file mode 100644
index 4ca843309f..0000000000
--- a/changes/bug28654
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor bugfixes (directory mirror):
-    - When Tor's clock is behind the clocks on the authorities, allow Tor to
-      serve future consensuses. Fixes bug 28654; bugfix on 0.3.0.1-alpha.
diff --git a/changes/bug28895 b/changes/bug28895
deleted file mode 100644
index 25fb167b2e..0000000000
--- a/changes/bug28895
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor bugfixes (usability):
-    - Stop saying "Your Guard ..." in pathbias_measure_{use,close}_rate()
-      as that confusingly suggests that mentioned guard node is under control
-      and responsibility of end user, which it is not. Fixes bug 28895;
-      bugfix on Tor 0.3.0.1-alpha.
diff --git a/changes/bug28920 b/changes/bug28920
deleted file mode 100644
index e698686a6d..0000000000
--- a/changes/bug28920
+++ /dev/null
@@ -1,6 +0,0 @@
-  o Minor bugfixes (logging):
-    - Rework rep_hist_log_link_protocol_counts() to iterate through all link
-      protocol versions when logging incoming/outgoing connection counts. Tor
-      no longer skips version 5 and we don't have to remember to update this
-      function when new link protocol version is developed. Fixes bug 28920;
-      bugfix on 0.2.6.10.
diff --git a/changes/bug28938 b/changes/bug28938
deleted file mode 100644
index de6c5f7b79..0000000000
--- a/changes/bug28938
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (compilation):
-    - Fix missing headers required for proper detection of
-      OpenBSD.  Fixes bug 28938; bugfix on 0.3.5.1-alpha.
-      Patch from Kris Katterjohn.
diff --git a/changes/bug28989 b/changes/bug28989
deleted file mode 100644
index 3e3ccccaf3..0000000000
--- a/changes/bug28989
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor bugfixes (unit tests):
-    - Instead of relying on hs_free_all() to clean up all onion service
-      objects we created in test_build_descriptors(), deallocate
-      them one by one. This lets Coverity know that we are not leaking memory
-      here and fixes CID 1442277. Fixes bug 28989; bugfix on 0.3.5.1-alpha.
diff --git a/changes/bug28995 b/changes/bug28995
deleted file mode 100644
index f76b6a085a..0000000000
--- a/changes/bug28995
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor bugfix (IPv6):
-    Fix tor_ersatz_socketpair on IPv6-only systems.  Previously,
-    the IPv6 socket was bound using an address family of AF_INET
-    instead of AF_INET6.  Fixes bug 28995; bugfix on 0.3.5.1-alpha.
-    Patch from Kris Katterjohn.
diff --git a/changes/doc28560 b/changes/doc28560
deleted file mode 100644
index c3356bda0a..0000000000
--- a/changes/doc28560
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Documentation (hidden service manpage, sandbox):
-    - Mention that you cannot add new Onion Service if Tor is already
-      running with Sandbox enabled. Closes ticket 28560.
diff --git a/changes/doc28805 b/changes/doc28805
deleted file mode 100644
index 6c9fea44fa..0000000000
--- a/changes/doc28805
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Documentation (manpage):
-    - Improve ControlPort description in tor manpage to mention that it
-      accepts address/port pair, and can be used multiple times. Closes ticket
-      28805.
diff --git a/changes/document_version b/changes/document_version
deleted file mode 100644
index a45992b6b5..0000000000
--- a/changes/document_version
+++ /dev/null
@@ -1,2 +0,0 @@
-  o Documentation:
-    - Document the exact output of "tor --version". Closes ticket 28889.
diff --git a/changes/feature27244 b/changes/feature27244
deleted file mode 100644
index a4debbbe53..0000000000
--- a/changes/feature27244
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor features (memory usage):
-    - Tor clients no longer need to keep the full text of a consensus in
-      memory in order to parse it, or apply a diff to it. Instead, they
-      use mmap() to read the consensus files from disk. Closes ticket
-      27244.
diff --git a/changes/feature27367 b/changes/feature27367
deleted file mode 100644
index 99c0839621..0000000000
--- a/changes/feature27367
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor features (parsing):
-    - Directory authorities now validate that router descriptors and ExtraInfo
-      documents are in a valid subset of UTF-8, and reject them if not.
-      Closes ticket 27367.
diff --git a/changes/prop297 b/changes/prop297
deleted file mode 100644
index 4f93b232d2..0000000000
--- a/changes/prop297
+++ /dev/null
@@ -1,7 +0,0 @@
-  o Minor features (required protocols):
-    - Tor no longer exits if it is missing a required protocol, if the
-      consensus that requires the protocol predates the release date of the
-      version of Tor. This change prevents Tor releases from exiting because
-      of an old cached consensus, on the theory that a newer cached
-      consensus might not require the protocol.  Implements proposal 297;
-      closes ticket 27735.
diff --git a/changes/subsystems b/changes/subsystems
deleted file mode 100644
index a51fb8e2b1..0000000000
--- a/changes/subsystems
+++ /dev/null
@@ -1,6 +0,0 @@
-  o Major features (refactoring):
-    - Tor now uses an explicit list of its own subsystems when initializing
-      and shutting down.  Previously, these systems were managed implicitly
-      though various places throughout the codebase.  (There still some
-      subsystems using the old system.)
-      Closes ticket 28330.
diff --git a/changes/ticket24805 b/changes/ticket24805
deleted file mode 100644
index 4ba6f6ecd4..0000000000
--- a/changes/ticket24805
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (fallback directory list):
-    - Update the fallback whitelist based on operator opt-ins and opt-outs.
-      Closes ticket 24805, patch by Phoul.
diff --git a/changes/ticket24838 b/changes/ticket24838
deleted file mode 100644
index d068e31b91..0000000000
--- a/changes/ticket24838
+++ /dev/null
@@ -1,6 +0,0 @@
-  o Minor features (fallback directory mirrors):
-    - Accept relays that are a fuzzy match to a fallback whitelist entry.
-      If a relay matches at least one fingerprint, IPv4 address, or IPv6
-      address in the fallback whitelist, it can become a fallback. This
-      reduces the work required to keep the list up to date.
-      Closes ticket 24838.
diff --git a/changes/ticket26360 b/changes/ticket26360
deleted file mode 100644
index 80afbd1c17..0000000000
--- a/changes/ticket26360
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor bugfixes (pluggable transports):
-    - Make sure that data is continously read from standard out and error of the
-      PT child-process to avoid deadlocking when the pipes' buffer is full.
-      Fixes bug 26360; bugfix on 0.2.3.6-alpha.
diff --git a/changes/ticket26770 b/changes/ticket26770
deleted file mode 100644
index 7f3e92e9dd..0000000000
--- a/changes/ticket26770
+++ /dev/null
@@ -1,8 +0,0 @@
-  o Minor features (directory authority, relay):
-    - Authorities now vote on a "StaleDesc" flag to indicate that a relay's
-      descriptor is so old that the relay should upload again soon.  Relays
-      understand this flag, and treat it as a signal to upload a new
-      descriptor.  This flag will eventually let us remove the 'published'
-      date from routerstatus entries, and save a great deal of space in our
-      consensus diffs. Closes ticket 26770; implements proposal 293.
-
diff --git a/changes/ticket27167 b/changes/ticket27167
deleted file mode 100644
index 81c66630c8..0000000000
--- a/changes/ticket27167
+++ /dev/null
@@ -1,11 +0,0 @@
-  o Major features (bootstrap):
-    - Report the first connection to a relay as the earliest phases of
-      bootstrap progress, regardless of whether it's a connection for
-      building application circuits.  This allows finer-grained
-      reporting of early progress than previously possible with the
-      improvements of ticket 27169.  Closes tickets 27167 and 27103.
-      Addresses ticket 27308.
-    - Separately report the intermediate stage of having connected to
-      a proxy or pluggable transport, versus succesfully using that
-      proxy or pluggable transport to connect to a relay.  Closes
-      tickets 27100 and 28884.
diff --git a/changes/ticket27225 b/changes/ticket27225
deleted file mode 100644
index 4c05a269d6..0000000000
--- a/changes/ticket27225
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor features (performance):
-    - Avoid parsing the same protocol-versions string over and over
-      in summarize_protover_flags(). This should save us a huge number
-      of malloc calls on startup, and may reduce memory fragmentation with
-      some allocators. Closes ticket 27225.
diff --git a/changes/ticket27325 b/changes/ticket27325
deleted file mode 100644
index 2cf2bb7d69..0000000000
--- a/changes/ticket27325
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Code simplification and refactoring:
-    - Reimplement NETINFO cell parsing and generation to rely on
-      trunnel-generated wire format handling code. Closes ticket
-      27325.
diff --git a/changes/ticket27359 b/changes/ticket27359
deleted file mode 100644
index bddc90634d..0000000000
--- a/changes/ticket27359
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (memory usage):
-    - Store microdescriptor family lists with a more compact representation
-      to save memory.  Closes ticket 27359.
diff --git a/changes/ticket27402 b/changes/ticket27402
deleted file mode 100644
index b79fb56760..0000000000
--- a/changes/ticket27402
+++ /dev/null
@@ -1,10 +0,0 @@
-  o Minor feature (bootstrap):
-    - When reporting bootstrap progress, stop distinguishing between
-      situations where it seems that only internal paths are available
-      and situations where it seems that external paths are available.
-      Previously, tor would often erroneously report that it had only
-      internal paths.  Closes ticket 27402.
-
-  o Code simplification and refactoring:
-    - Split out bootstrap progress reporting from control.c into a
-      separate file.  Part of ticket 27402.
diff --git a/changes/ticket27490 b/changes/ticket27490
deleted file mode 100644
index 523477dfea..0000000000
--- a/changes/ticket27490
+++ /dev/null
@@ -1,6 +0,0 @@
-  o Minor features (ipv6):
-    - We add an option ClientAutoIPv6ORPort which makes clients randomly
-      prefer a node's IPv4 or IPv6 ORPort. The random preference is set
-      every time a node is loaded from a new consensus or bridge config.
-      Closes ticket 27490. Patch by Neel Chauhan.
-
diff --git a/changes/ticket27549 b/changes/ticket27549
deleted file mode 100644
index 51d0f24757..0000000000
--- a/changes/ticket27549
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring (hidden service v3):
-    - Consolidate the authorized client descriptor cookie computation code
-      from client and service into one function. Closes ticket 27549.
diff --git a/changes/ticket27620 b/changes/ticket27620
deleted file mode 100644
index 6c491696d0..0000000000
--- a/changes/ticket27620
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Rework SOCKS wire format handling to rely on trunnel-generated
-      parsing/generation code. Resolves ticket 27620.
diff --git a/changes/ticket27625 b/changes/ticket27625
deleted file mode 100644
index 33d40adf34..0000000000
--- a/changes/ticket27625
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Testing:
-    - Write some unit tests for tokenize_string() and
-      get_next_token() functions. Resolves ticket 27625.
-
diff --git a/changes/ticket27914 b/changes/ticket27914
deleted file mode 100644
index 433e9657af..0000000000
--- a/changes/ticket27914
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Removed features:
-    - The scripts used to generate and maintain the list of fallback
-      directories have been extracted into a new "fallback-scripts"
-      repository. Closes ticket 27914.
diff --git a/changes/ticket27993 b/changes/ticket27993
deleted file mode 100644
index 78ee7c2054..0000000000
--- a/changes/ticket27993
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (developer tooling):
-    - Provide git hook script to prevent "fixup!" and "squash!" commits from
-      ending up in master. Closes ticket 27993.
diff --git a/changes/ticket28006 b/changes/ticket28006
deleted file mode 100644
index 95a4b2cae4..0000000000
--- a/changes/ticket28006
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Fix issues that shellcheck found in chutney-git-bisect.sh.
-      Resolves ticket 28006.
diff --git a/changes/ticket28007 b/changes/ticket28007
deleted file mode 100644
index 1ac87862eb..0000000000
--- a/changes/ticket28007
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Cleanup scan-build.sh to silence shellcheck warnings.
-      Closes ticket 28007.
diff --git a/changes/ticket28008 b/changes/ticket28008
deleted file mode 100644
index 1f0de1a14d..0000000000
--- a/changes/ticket28008
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Fix shellcheck warnings in scripts/test/coverage. Resolves issue
-      28008.
diff --git a/changes/ticket28009 b/changes/ticket28009
deleted file mode 100644
index 1d986d4211..0000000000
--- a/changes/ticket28009
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Fix shellcheck warnings in cov-diff script. Resolves issue
-      28009.
diff --git a/changes/ticket28010 b/changes/ticket28010
deleted file mode 100644
index 4fca17d022..0000000000
--- a/changes/ticket28010
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Fix shellcheck warnings in run_trunnel.sh. Resolves issue
-      28010.
diff --git a/changes/ticket28011 b/changes/ticket28011
deleted file mode 100644
index 5efc3c917b..0000000000
--- a/changes/ticket28011
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Fix shellcheck warnings in run_calltool.sh. Resolves
-      ticket 28011.
diff --git a/changes/ticket28012 b/changes/ticket28012
deleted file mode 100644
index b2fe83e02a..0000000000
--- a/changes/ticket28012
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Fix issues that shellcheck found in updateRustDependencies.sh.
-      Resolves ticket 28012.
diff --git a/changes/ticket28058 b/changes/ticket28058
deleted file mode 100644
index 00ac595864..0000000000
--- a/changes/ticket28058
+++ /dev/null
@@ -1,2 +0,0 @@
-  o Testing:
-    - Run shellcheck for stuff in scripts/ directory. Closes ticket 28058.
diff --git a/changes/ticket28077 b/changes/ticket28077
deleted file mode 100644
index 2b5afb1678..0000000000
--- a/changes/ticket28077
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Code simplification and refactoring:
-    - Remove unnecessarily unsafe code from the rust macro cstr!. Closes
-      ticket 28077.
diff --git a/changes/ticket28100 b/changes/ticket28100
deleted file mode 100644
index b8e3271013..0000000000
--- a/changes/ticket28100
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (HTTP standards compliance):
-    - Don't send Content-Type: application/octet-stream for transparently
-      compressed documents, which confused browsers. Closes ticket 28100.
diff --git a/changes/ticket28142 b/changes/ticket28142
deleted file mode 100644
index b74b2bd47e..0000000000
--- a/changes/ticket28142
+++ /dev/null
@@ -1,10 +0,0 @@
-  o Major features (circuit padding):
-    - Implement preliminary support for the circuit padding portion of
-      Proposal 254. The implementation supports Adaptive Padding (aka
-      WTF-PAD) state machines for use between experimental clients and
-      relays. Support is also provided for APE-style state machines that
-      use probability distributions instead of histograms to specify
-      inter-packet delay. At the moment, Tor does not provide any padding
-      state machines that are used in normal operation -- this feature
-      exists solely for experimentation in this release. Closes
-      ticket 28142.
diff --git a/changes/ticket28179 b/changes/ticket28179
deleted file mode 100644
index f548c4a79a..0000000000
--- a/changes/ticket28179
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor features (process):
-    - Add new Process API for handling child processes. This
-      new API allows Tor to have bi-directional
-      communication with child processes on both Unix and Windows.
-      Closes ticket 28179.
diff --git a/changes/ticket28180 b/changes/ticket28180
deleted file mode 100644
index 59de1c6251..0000000000
--- a/changes/ticket28180
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (pluggable transports):
-    - Add support for logging to Tor's logging subsystem from a pluggable
-      transport process. Closes ticket 28180
diff --git a/changes/ticket28266 b/changes/ticket28266
deleted file mode 100644
index e0bc171080..0000000000
--- a/changes/ticket28266
+++ /dev/null
@@ -1,10 +0,0 @@
-  o Minor features (directory authority):
-    - Directory authorities support a new consensus algorithm,
-      under which microdescriptor entries are encoded in a canonical
-      form. This improves their compressibility in transit and on the client.
-      Closes ticket 28266; implements proposal 298.
-
-  o Minor features (relay):
-    - When listing relay families, list them in canonical form including the
-      relay's own identity, and try to give a more useful set of warnings.
-      Part of ticket 28266 and proposal 298.
diff --git a/changes/ticket28335 b/changes/ticket28335
deleted file mode 100644
index eecf7c7fd9..0000000000
--- a/changes/ticket28335
+++ /dev/null
@@ -1,7 +0,0 @@
-  o Major features (client):
-    - When Tor is running as a client, and it is unused for a long time, it
-      can now enter a "dormant" state.  When Tor is dormant, it avoids
-      network activity and CPU wakeups until it is reawoken either by a user
-      request or by a controller command.  For more information, see
-      the configuration options starting with "Dormant". Implements tickets
-      2149 and 28335.
diff --git a/changes/ticket28362 b/changes/ticket28362
deleted file mode 100644
index 4ac22d50f2..0000000000
--- a/changes/ticket28362
+++ /dev/null
@@ -1,6 +0,0 @@
-  o Code simplification and refactoring:
-    - The .may_include files that we use to describe our
-      directory-by-directory dependency structure now describe a noncircular
-      dependency graph over the directories that they cover.
-      Our checkIncludes.py tool now enforces this.
-      Closes ticket 28362.
diff --git a/changes/ticket28551 b/changes/ticket28551
deleted file mode 100644
index 46ba9d713b..0000000000
--- a/changes/ticket28551
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (Continuous Integration):
-    - Log Python version during each Travis CI job. Resolves issue
-      28551.
diff --git a/changes/ticket28624 b/changes/ticket28624
deleted file mode 100644
index 353f962be9..0000000000
--- a/changes/ticket28624
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Minor features (battery management, client, dormant mode):
-    - The client's memory of whether it is "dormant", and how long it has
-      spend idle, persists across invocations.  Implements ticket 28624.
-    - There is a  DormantOnFirstStartup option that integrators can use if
-      they expect that in many cases, Tor will be installed but not used.
diff --git a/changes/ticket28669 b/changes/ticket28669
deleted file mode 100644
index 32c6114ffc..0000000000
--- a/changes/ticket28669
+++ /dev/null
@@ -1,6 +0,0 @@
-  o Minor bugfix (hidden service v3, client):
-    - Avoid a BUG() stacktrace in case a SOCKS connection is found waiting for
-      the descriptor while we do have it in the cache. There is a rare case
-      when this can happen. Now, tor will recover and retry the descriptor.
-      Fixes bug 28669; bugfix on 0.3.2.4-alpha.
-    
diff --git a/changes/ticket28757 b/changes/ticket28757
deleted file mode 100644
index 62c6d099ff..0000000000
--- a/changes/ticket28757
+++ /dev/null
@@ -1,5 +0,0 @@
-  o Removed features:
-    - Stop responding to 'GETINFO status/version/num-concurring' and
-      'GETINFO status/version/num-versioning' control port commands, as those
-      were deprecated back in 0.2.0.30. Also stop listing them in output of
-      'GETINFO info/names'. Resolves ticket 28757.
diff --git a/changes/ticket28768 b/changes/ticket28768
deleted file mode 100644
index 27d90febc8..0000000000
--- a/changes/ticket28768
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor features (fallback directory mirrors):
-    - Accept fallbacks that deliver reasonably live consensuses.
-      (Consensuses that will become valid less than 24 hours in the future,
-      or that expired less than 24 hours ago.) Closes ticket 28768.
diff --git a/changes/ticket28839 b/changes/ticket28839
deleted file mode 100644
index e9f81dc405..0000000000
--- a/changes/ticket28839
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (performance):
-    - Speed up microdesriptor parsing by about 30%, to help
-      improve startup time.  Closes ticket 28839.
diff --git a/changes/ticket28840 b/changes/ticket28840
deleted file mode 100644
index 05d3fbb94c..0000000000
--- a/changes/ticket28840
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (testing):
-    - Allow HeartbeatPeriod of less than 30 minutes in testing Tor networks.
-      Closes ticket 28840, patch by robgjansen
diff --git a/changes/ticket28843 b/changes/ticket28843
deleted file mode 100644
index 00905293c4..0000000000
--- a/changes/ticket28843
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (controller):
-    - Add a DROPOWNERSHIP command to undo the effects of TAKEOWNERSHIP.
-      Implements ticket 28843.
diff --git a/changes/ticket28846 b/changes/ticket28846
deleted file mode 100644
index efb5b9938e..0000000000
--- a/changes/ticket28846
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (pluggable transports):
-    - Add support for emitting STATUS updates to Tor's control port from a
-      pluggable transport process. Closes ticket 28846.
diff --git a/changes/ticket28847 b/changes/ticket28847
deleted file mode 100644
index 63100c5813..0000000000
--- a/changes/ticket28847
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (process):
-    - Use the subsystem module to initialize and shut down the process module.
-      Closes ticket 28847.
diff --git a/changes/ticket28852 b/changes/ticket28852
deleted file mode 100644
index a58cc3ba0e..0000000000
--- a/changes/ticket28852
+++ /dev/null
@@ -1,4 +0,0 @@
-  o Minor features (performance):
-    - Remove a needless memset() call from get_token_arguments,
-      thereby speeding up the tokenization of directory objects by about
-      20%. Closes ticket 28852.
diff --git a/changes/ticket28853 b/changes/ticket28853
deleted file mode 100644
index e76f6bd8c9..0000000000
--- a/changes/ticket28853
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (performance):
-    - Replace parse_short_policy() with a faster implementation, to improve
-      microdescriptor parsing time. Closes ticket 28853.
diff --git a/changes/ticket28856 b/changes/ticket28856
deleted file mode 100644
index b136470494..0000000000
--- a/changes/ticket28856
+++ /dev/null
@@ -1,3 +0,0 @@
-  o Minor features (performance):
-    - Speed up directory parsing a little by avoiding use of the
-      non-inlined strcmp_len() function. Closes ticket 28856.