This release is a stable bugfix release, including fixes for security issues.
Changes since release 0.3.5:
database: drop constraint that started failing ith MariaDB 10.2 / MySQL 5.7 (Issue #324)
hg: mitigate some privilege escalation problems that were fixed in Mercurial 4.5.1 (CVE-2018-1000132, see Mercurial release notes)
markdown: sanitize generated HTML to fix cross-site scripting (XSS) issue when repo front page shows README.md. See details. This issue was reported by Bob Hogg, thanks!