The InRelease file is currently signed using multiple keys and we want
to be able to verify its signature. So allow multiple signatures as
long as all of them are valid.

For uploads (.changes files) we still require that only a single
signature is present. This is currently enforced by the 'fingerprint',
'primary_fingerprint' and 'signature_id' accessors.

Requested-by: NEnrico Zini <enrico@enricozini.org>

This method install the source into an archive without adding it to
any suite. It is intended to be used to import extra source packages
(i.e. those referenced only by Built-Using).

This allows retrieving files using a temporary name, but to install
them into the archive using their proper name.

If the same source or binary package is uploaded again, the
fingerprint and changed_by might be different if some other person
signed the new .changes (or if there is no .changes). We still want to
be able to import such packages without error, retaining the
attributes already present.

Release files use different field names for checksum fields and the
set of allowed filenames is larger (slashes are allowed). This patch
allows switching the regexp used to validate filenames and the fields
for checksums to allow using parse_file_list not only for .dsc files,
but also for Release files.

I really would like to get rid of mapped components on security-master...

For example override.stretch.extra.* does not exist. Not ignoring this
pattern results in an output file containing an asterisk.

Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Do not mention details like how often Contents indices are updates as
these depend on the suite and have changed.

Also remove the description on how to use grep to search these files.

Signed-off-by: NLuca Falavigna <dktrkranz@debian.org>

Signed-off-by: NJoerg Jaspert <joerg@debian.org>

* nthykier/auto-decruft:
  dak/rm: Pass a list of bugs to remove() as the correct parameter

Thanks to Adam D. Barratt for spotting the mistake.
Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

* nthykier/auto-decruft:
  daklib/rm: Fix boolean inversion on partial removals

Signed-off-by: NNiels Thykier <niels@thykier.net>

Letting Python close the file will also release the lock after having
flushed all buffers.
Reported-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NJakub Wilk <jwilk@debian.org>

* nthykier/auto-decruft:
  daklib/rm: Components can be None even when partial is True

Signed-off-by: NNiels Thykier <niels@thykier.net>

* nthykier/auto-decruft:
  auto-decruft: Remember to commit database changes