Fix-committed: #16780

Fix-committed: #16148

Fix-committed: #16148

Some programs expect this, which could lead to hard-to-debug issues
for front desk from users installing such a program.

Refs: #16148

Fix-committed: #16742

We attempt to completely block it on the netfilter level but we have
seen ICMPv6 "leaks" any way (related to Router Solicitation, refs:
16148) so let's just completely disable.

Instead let's just apply the same filtering when we are inspecting the
pcap files. This way any pcap file saved on failure will include the
full capture, and not just the packets sent by the system under
testing, which sometimes makes it hard to understand what is going on.

Refs: #16148

Most of thunderbird.feature is @fragile so we need the +force-all-tests
suffix so that Jenkins runs these tests.

Fix-committed: #16748

Merge remote-tracking branch 'origin/bugfix/16730-have-reproducible-build-attempt-use-same-commit-as-first-build' into stable

Fix-committed: #16730

The intention was probably to drop the spawn() line but it was
forgotten; we should only run the upgrader once, so one of the m is
enough. However, execute() is wrong since the command is blocking, so
let's revert back to spawn().

No commit message

We used the syslinux from the vagrant box before, which caused issues
with when building Tails/Buster with a Stretch vagrant box and then
cloning the image via Tails Installer with syslinux from Buster.

Merge branch 'stable' into bugfix/16730-have-reproducible-build-attempt-use-same-commit-as-first-build

Otherwise all branches based on stable FTBFS with "Not building from a tag, but
last version in changelog was released".

Merge branch 'stable' into bugfix/16730-have-reproducible-build-attempt-use-same-commit-as-first-build

The old instruction would not update the tag if it has been changed on
the origin. Since we update rewrite the tag each release, there is a
always a window where the TR can fetch a tag that will cause this
problem.

Merge remote-tracking branch 'cbrownstein/doc/16705-javascript-protections' into doc/16705-javascript-protections

Conflicts:
	wiki/src/inc/stable_amd64_img_gpg_signature_output.html
	wiki/src/inc/stable_amd64_iso_gpg_signature_output.html

Resolve conflicts by picking the signatures from the web/release-3.14
branch, the other ones were just fixups for the previous release.