Release 2016.13

There is one notable feature in this release - we
now support per-remote cookies, which can be used
for systems like Amazon CloudFront that can be configured
to require them for access.

Another interesting change is the static delta generation
process was tweaked to look for "similar" filenames, which
for example should ensure we get dracut's "reproducible"
initramfs in the delta.

That aside, it's mostly smaller bugfixes here, such
as memory leaks.  Another good example of a bugfix
is `pull: Don't do deltas with --commit-metadata-only`.

Thanks to all contributors!

```
Alexander Larsson (1):
      Fix pruning of partial commits

Colin Walters (14):
      docs: Link to releng-scripts
      tests: Skip libarchive/selinux tests if in container without SELinux
      tree-wide: Remove unused variables detected by CLang
      otutil: Note that ot_log_structured takes a printf format
      parse-datetime: Use labs() for long input value
      deploy: Suppress unused variable warning for fscreatecon cleanup
      Define an initializer for GVariant{Builder,Dict}
      libglnx: Bump to master (for -fsanitize fixes)
      remote-refs: Add NULL terminator to options array
      ci: Use -fsanitize=undefined by default
      repo: Don't put remote refs in the summary file
      pull: Don't do deltas with --commit-metadata-only
      deltas: Only keep one file open at a time during compilation
      Release 2016.13

Giuseppe Scrivano (1):
      static-delta: find a similar filename using what is before '.' or '-'

Jonathan Lebon (3):
      .redhat-ci.yml: add clang
      delta: return valid enum member
      .redhat-ci.yml: use new build key

Simon McVittie (14):
      Force C.UTF-8 or C locale for tests
      Distribute test scripts even if we wouldn't run them
      Distribute valgrind suppressions in tarballs
      _ostree_kernel_args_replace_take: don't leak when replacing
      ot_admin_builtin_set_origin: don't leak options GVariant
      ostree_builtin_pull: consistently set free-function on refs_to_fetch
      ostree_admin_option_context_parse: explicitly clean up when exiting early
      ostree_sysroot_upgrader_finalize: free new_revision
      _ostree_sysroot_write_deployments_internal: stop leaking hash table
      keyfile_set_from_vardict: free the string array
      ostree_repo_pull_with_options: clear dirs array
      ot_remote_builtin_show_url: autofree context
      Fix some leaks of floating GVariants
      load_metadata_internal: don't leak GBytes

Sjoerd Simons (8):
      Filter bootloader supplied kernel cmdline options
      pull: Add per-remote cookie jar
      remote: Add command to list cookies
      remote: Add commands to add and remove cookies for a remote
      OsreeFetcher: Treat 403 as not found
      trivial-httpd: Add support for checking cookies
      tests: Add test for the cookie jar handling
      Update documentation for cookie handling commands
```

Git-EVTag-v0-SHA512: 905067d8a6ba66af636a7de20baa779b661a4e4df9b13fe95b1883c1db34b700b180e854af22866cd93e51d59a24b062cfbb1ce444342076eabcdf7d05900f67
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYJLe3Exx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwuN
tAf/dtJ5VhuQz31Pcbk0jQHuuL5V6UP/8Z2hlUNmqNFGKv228ciMGG4Vo68SDYRm
sCU6PPw/aKOQwzFMnqMTFNO6AhLdjc10iZz/TtaEQX5+cSYxTPSBVqQa8WvLLvyj
AuAZS7GcxDsis4XEho66wRGeDlyFA7ECIaXWs+jtGKwkHiA2tmxqibO7PIR1Zlr8
F8U5jjTtUSJYFic5HovjJab73PxjM92dLnPLGG2ttr5r9ezabzeJZJ45RkQWNGwh
BtQJh9mXM614yvwDxvjmv2/ShuWmqfXlC3jOiPI66JfN+D34XMW3cPuqOTgq16G9
hHZwQM9JPLm+NHloZb4IU1grFA==
=gV4o
-----END PGP SIGNATURE-----