Release v0.20.0

Changes for v0.20.0

• Explicitly loading Email::Address in PGXN::Manager::Controller to avoid an issue where it's not loaded at all.
• Return a 404 instead of an error on an invalid semantic version when requesting a distribution and version (issue #66).
• Require SemVer v0.10.0 and pg-semver 0.3.10. These releases properly support the semver 2.0.0 spec (aside from version parts larger than 32 bits).
• Updated all URLs with HTTPS variants to use HTTPS.
• Regenerated the HOWTO HTML using MultiMarkdown, so as to get heading IDs for direct linking and with a language class for the code examples.
• Distribution versions are now allowed to be less than than previous release versions if they update existing major or minor versions. So if you have versions 2.0.0, 2.2.1, and 2.4.2, you can release 2.0.1, 2.2.2, 2.4.3, 2.5.0, or 3.0.0, but not 2.0.0-r1, 2.2.0, or 2.3.0. This should allow for the release of updates to older versions without otherwise creating new major or minor versions that were not previously released. Thanks to Geoff Montee for the report! (#52).
• Extension versions are no longer checked to ensure they're greater than or equal to previous versions. It's simply not feasible to check for appropriate extension versions while allowing the release of lower distribution versions as described in the last point without introducing an extremely convoluted set of rules we're likely to get wrong, and likely annoy at times even if they're right. Better to check for sensible distribution versions and let authors be responsible for proper extension version hygiene.
• Fixed the email sent to the PGXN admins on error to redact HTTP_AUTHORIZATION header from the environment dump.
• Fix the quoting for the reason for a new user request in the email sent to admins.
• Fixed the request object to read X_ variables from the Plack environment with a leading HTTP_. In other words, read HTTP_X_FORWARDED_FOR not X_FORWARDED_FOR. This seems to be how X_ variables are loaded by Plack.
• Worked around a situation where Plack gives an uploaded file a meaningless temporary name that Archive::Extract cannot detect the archive type for. Requires the Archive::Extract 0.88. Thanks to Sandro Santilli ror the report and Philippe Beaudoin for providing a file with which replicate the issue (#61).
• Eliminated the /pub app and moved the /auth app to /. The entire site is now served by the / app, so that it can be fully encrypted. Basic auth is enabled for those parts of the site that require authentication, but the rest is publicly available, including the home page, about, howto, etc. The /pub and /auth apps now simply redirect to the / app, in case they're still used, although the reverse proxy configuration should be updated to do the same, to avoid calling the /pub and /auth apps at all, only /.
• Updated the format of version check errors to show the distribution releases the conflicts are found in.
• Added the /login path and made it the URL for the "Log In" link on unauthenticated pages. It requires auth and simply redirects to /distributions for now.
• Dropped support for running PGXN Manager on PostgresSQL 11 or lower.
• Removed the Pod tests from the release.
• Fixed a server error when the account registration form is submitted with no nickname.