Pando

------------------------------------------

* fix a regression in simplate scoping introduced in 0.38 (463)

-------------------------------------------

* fix a regression in aspen.wsgi introduced in 0.39 (460)

-------------------------------------------

* fix two security bugs related to CRLF injection
https://github.com/gratipay/security-qf35us/issues/1

* remove argv-based configuration; Website now takes kwargs instead (455)

* remove exec-based configuration, i.e., configure-aspen.py (373); use kwargs
to Website or environment variables instead

* add a base_url configuration setting and use it in a new algorithm
function, redirect_to_base_url (457)

* improve the redirect API: it's now at website.redirect instead of
request.redirect; it honors the new website.base_url; and it takes an
optional response object (458)

---------------------------------------

* refactor aspen.__main__ into aspen.serve()

* alias 'website' as 'application' in aspen.wsgi to better support some WSGI servers

* finish removing request.fs since we now have state['dispatch_result'].match

* update dependencies

* Add an autosphinx target to help sphinx migration

* prevent simplate locals from implictly leaking into `state` (427) (Thanks Changaco!)

---------------------------------------

* Fix some return types during error handling (406, 398)

* Make simplates a bit more separate from Aspen (412)

* Use algorithm state as request context

* Make convenience aliases in request context read-only (414)

* Generate html test coverage report (Thanks Changaco!)

* Python 3 fixes to build.py and fabricate.py (Thanks Changaco!)

---------------------------------------

* Don't return a 415 when the body is empty (Thanks Changaco!)

* Simplify the simplate class hierarchy

* Don't show scary tracebacks when pygments is missing (268)

* Let custom typecasters access global state. (395)