Release v5

[michielbdejong]

To do

Preparation

• tag version 0.3.1 of solid-panes and push it to npm
• merge Use solid-panes@1.3.1 SolidOS/mashlib#24 (moved to 'Follow Up' below)
• tag version 0.7.18 of mashlib and push it to npm
• merge fetch profile docs acl-check#20
• update this branch to use the new versions of mashlib and acl-check
• merge Redo #1118 #1140 into this PR
• clean up [do not merge] Enable trusted apps in dependencies #1138
• get Travis green on [do not merge] Enable trusted apps in dependencies #1138
• tag a new version of acl-check and push it to npm
• get Travis green on Redo #1122 #1144
• merge Redo #1122 #1144
• merge Restricting access to some HTTP API endpoints to top domain #1073
• get Travis green on Release v5 #1141

Manual testing

• run tests locally
• run server locally
• create an account
• click around in the data browser
• edit some things in the data browser
• add a trusted app
• use some third-party apps which we did not add as trusted
• use some third-party apps which we added as trusted for 'Read'
• use some third-party apps which we added as trusted for 'Read' and 'Write'
• test https://github.com/Inrupt-inc/generator-solid-react

Documentation

• changelog, release notes
• merge this PR
• git tag v5.0.0 and 🍾

For follow-up:

See #1145

[michielbdejong]

Issue found during manual testing: https://localhost:8443/common/js/mashlib.min.js will be cached by the browser so people will not see the A-pane (even Shift-Ctrl-R in FF, which I thought was supposed to punch http cache for all resources?) -> i think that last part wasn't true, I was just trying it while the server was stopped. Seeing 'registering pane: trustedApplications' in the console now, but still no A-pane somehow.

[kjetilk]

Finally, we are there!