This is required for example to preview images (ie. open a .png file from the
editor). Without the default value of {{uuid}}.mini-browser.{{hostname}} is used
but we don't have anything in place to resolve such domain names.

See merge request nexedi/slapos!990

Going Go1.15.11 -> Go1.15.12 brings in fixes to compiler, runtime and stdlib
including security fix to net/http package:

https://golang.org/doc/devel/release.html#go1.15.minor

Tested on helloworld SR (by adjusting it to use go1.15 instead of go1.16).

Going Go1.16.3 -> Go1.16.4 brings in fixes to compiler, runtime and stdlib
including security fix to net/http package:

https://golang.org/doc/devel/release.html#go1.16.minor

Tested on helloworld SR.

Before this commit, the Go workspace was always activated before
launching the Theia shell and starting the embedded supervisord.

This in turn added the gcc installed by Theia to the PATH, meaning
that nested instances would be compiled with Theia's gcc instead of
the system gcc, making the compilation outcome dependant on Theia.

With this commit, the gcc resolved by PATH is now the system one.

See merge request nexedi/slapos!987

This option takes a string representing a valid JSON object and
forwards the corresponding python dict to the embedded instance.

Features:

 * random response is possible of big sizes
 * timeout can be randomized

See merge request nexedi/slapos!979

This fixes 157dd7ab.

It workarounds stack/resilient/pbsready.cfg.in directory:backup string
concatenation:

  backup = $${basedirectory:backup}/$${slap-parameter:namebase}

See merge request nexedi/slapos!981

This fixes:

  Installing jupyter.
  While:
    Installing jupyter.
    Base installation request: ...
    Getting distribution for 'argon2-cffi'.
  Error: Picked: argon2-cffi = 20.1.0

Addition of argon2-cffi in commit 7d1ea024
was a last-minute change to fix jupyter SR.

Accessing http with path starting with /HTTPS/ would result with 503 responses
from ATS itself.

Test is covering the problem and also asserting that fix does not damage https
access with path starting with /HTTP/