Release SecureDrop 1.1.0

[rocodes]

This is a planning ticket designed to lay out what will be required to release SecureDrop Workstation 1.1.0, with support for a new securedrop-workstation-keyring package.

Pre-release tasks

• Merge remaining workstation-kerying PRs: Add rpm import in %post securedrop-workstation-keyring#4
• Ensure workstation-keyring package is compliant with qubes-builder expectations
• Decide securedrop-workstation rpm dependency on workstation-keyring package (requirement?)
• Release securedrop-workstation-keyring (first to yum-test, then to yum repo; requires infra support; requires version number decision)
• Update workstation-ci-runner to pull in workstation-keyring package for CI runs
• Decide on dev/staging provisioning strategy, if any changes
• Review and merge remaining securedrop-workstation PRs (ready now): Set vm template consistently across Salt files; cleanup unused requisites #1226, Bump supported fedora version to 41 #1221, Use qvm.anon-whonix, deprecate securedrop-handle-upgrade for sys-whonix #1227
• Review and merge remaining securedrop-workstation PRs (dependent on keyring package being available): WIP: Configure dom0 rpm repo settings via boostrap rpm package. #1210 Make grub2-xen-pvh a dependency of dom0 config rpm #1211
• Create workstation docs PR with new dom0 rpm instructions
• Submit package to qubes-contrib (does not need to be live on qubes-contrib for release, assuming we are also publishing)

Release tasks

• Assign roles
• rc version + changelog bump
• packages on yum-test; qa
• Prod version bump, changelog, and signed tag
• Prod QA (yum-qa)
• Prod release
• Update docs tag

Post-release tasks

• Followup qubes-contrib review as needed
• Bump version on main

Test Plan

Fresh install

TK

Upgrade testing

TK