Release 2019.5

Mainly in this release:

 - We discovered that CLang has a static analyzer `scan-build`;
   it found some small memory leaks so far, otherwise mostly
   noise, but we haven't dug through all the errors yet.
 - Gained a new zipl (s390x bootloader) backend
 - Install the `.hmac` files needed for FIPS mode in `/boot` too

This is also the first release where we switched to using
the OpenShift Prow as a merge bot, though a lot more CI work
is pending.

```
Alex Kiernan (5):
      Always enable trivial-httpd for tests
      Gate ostree-trivial-httpd on BUILDOPT_TRIVIAL_HTTPD
      Revert "Gate ostree-trivial-httpd on BUILDOPT_TRIVIAL_HTTPD"
      Revert "Always enable trivial-httpd for tests"
      tests/export: Guard with check for libarchive

Colin Walters (25):
      ci: Honor ARTIFACTS environment variable
      ci: Make ${ARTIFACTS} directory
      OWNERS: New file
      libostree: Add an assert to pacify clang-analyzer
      repo: [scan-build] Initialize a variable
      sysroot: [scan-build]: Remove a dead assignment
      sysroot: [scan-build] Remove a dead assignment
      repo: [scan-build]: Mark a variable used
      libotutil: Port keyfile-utils.c to new style
      ci: Skip all yum operations if SKIP_INSTALLDEPS is set
      commit: [scan-build] Remove a dead assignment
      tree-wide: [scan-build]: Add some asserts that pointers are non-NULL
      prune: [scan-build] Initialize a variable
      bootloader: Add a zipl bootloader backend
      ci: Trim PAPR config to drop required flag
      tree-wide: [scan-build] Fix some dead stores
      lib/repo: [scan-build] Quiet a dead store warning
      lib/pull: [scan-build] Silence a dead store warning
      tests: Port keyfile test to new style
      lib: Port variant-builder.c to new style
      tests: [scan-build] Initialize a variable
      lib/checksum-utils: Use g_memdup()
      build-sys: Cleanup handling for trivial-httpd-cmdline
      Revert "grub2: Exit gracefully if the configuration has BLS enabled"
      Release 2019.5

Dan Nicholson (1):
      repo: Stop using deprecated G_GNUC_FUNCTION

Javier Martinez Canillas (1):
      grub2: Exit gracefully if the configuration has BLS enabled

Jonathan Lebon (6):
      Post-release version bump
      configure.ac: Add more details on how to do a release
      src/libotutil: Fix strv memory leak
      lib/pull: Avoid calling destroy on unref'ed GSource
      lib/pull: Tweak update_timeout logic again
      lib/deploy: Also install HMAC file into /boot

Umang Jain (1):
      async-progress: Plug memory leak while destroying GSource

```

Git-EVTag-v0-SHA512: 395f281ee8286eb6d22c215abc5146e1f27ecba6b120abee045d178150ea2116dd87e0e82b2d9ef4c150dec719716ae0d2583e5a1f9f38cb790fa81f55867e70
-----BEGIN PGP SIGNATURE-----

iQFHBAABCgAxFiEEq5KKnPjdBikJw3u93EX9WSHBPwsFAl25+TwTHHdhbHRlcnNA
dmVyYnVtLm9yZwAKCRDcRf1ZIcE/C3eFB/42VTlOWGei+VhTY7NmpuX8I28YKS/m
/OznhgDw1CPoUVzTT35oMAbD67ufZAN5vRdlBi/Liw1w1a867hVA2t+sEPNp/BiJ
hcdzLCGlUR1KRlpKKqiMPjzrWGdB9J9f1a2w8BPJ0FTUfXsnoVgbBJLkSVJ0ws0o
/FvHrzZl4BoIGhqMRsiK/+xOU+TyCqT6/7x8Iah4spBFoPWz2c7CHC6zfXBN+6h/
o14+PHDAx8V4WFvyFSDHrvE447YXX/r09zPDa1s2qSIduszWcZsh0WcAG5X/lxbi
taFA7MzOL28M6OgnQcUuxOVThAcxfvV3XuGqo1L+hRAKF1Fllw6bYlpd
=2M+V
-----END PGP SIGNATURE-----