cli: release 3.19

[bassosimone]

• probe-cli: pin to the latest staging-client commit using go get -u -v: chore: upgrade to Psiphon-Labs/psiphon-tunnel-core@3f91b1b probe-cli#1338
• probe-cli: make sure go list -json ./cmd/ooniprobe does not include any pinned package in psiphon's go.mod
• oocrypto: merge with upstream if needed chore: update to go1.20.8 oocrypto#21
• oohttp: merge with upstream if needed chore: update to go1.20.8 oohttp#47 chore: update examples to use go1.20.8 oohttp#48
• probe-cli: take a look at go report card
• probe-cli: sync stunreachability targets with snowflake (see ./internal/stuninput) chore: update the user agent we use probe-cli#1344
• probe-cli: update GOVERSION if needed chore: use go1.20.8 probe-cli#1340
• probe-cli: update the Go version mentioned in the Readme.md file chore: use go1.20.8 probe-cli#1340
• probe-cli: update user-agent at internal/model/http.go chore: update the user agent we use probe-cli#1344
• probe-cli: update github.com/ooni/probe-assets dependency chore: update go dependencies historical-geoip#7 Bump certifi from 2022.12.7 to 2023.7.22 historical-geoip#8 Bump urllib3 from 1.26.12 to 1.26.17 historical-geoip#9 ooni/probe-assets@8bc10a7 chore: use 2023-10 geoip database probe-cli#1341
• probe-cli: update bundled certs (using go generate ./...) chore: run go generate ./... probe-cli#1343
• probe-cli: ensure no dependency bumped its major version number using https://github.com/icholy/gomajor chore: use gomajor to update direct deps probe-cli#1342
• probe-cli: update cdeps: chore: upgrade C dependencies probe-cli#1339
• probe-cli: update NDKVERSION, and MOBILE/android/ensure if needed: chore: upgrade the NDK version probe-cli#1345
• probe-cli: update dependencies with go get -u -v -d ./... chore: upgrade most deps except snowflake probe-cli#1346 chore: update obfs4, goptlib, snowflake probe-cli#1347 chore: replace obfs4 with lyrebird probe-cli#1348
• probe-cli: tag a new version
• probe-cli: update internal/version/version.go to be alpha
• probe: create issue for next routine release: cli: release 3.20 #2556
• probe-engine: run ./script/autoexport.bash ooni/probe-engine@b8025d7 https://github.com/ooni/probe-engine/releases/tag/v0.26.0
• probe-cli: update internal/version/version.go chore: we're now hacking on v3.20.0-alpha probe-cli#1356
• probe-cli: make sure all workflows are green ooni/probe-cli@29e8c88
• probe-cli: go test -race -count 1 ./... must pass locally
• probe-cli: try to address all the issues marked as "releaseBlocker" fix: update Snowflake domain front probe-cli#1337 fix(logx): log when an operation is starting probe-cli#1350 fix: make bootstrap more robust (and slower 😢) probe-cli#1351 refactor: go test -short does not use the host network probe-cli#1352 fix(engineresolver): support HTTP/HTTPS proxies probe-cli#1353 chore(oonimkall): re-enable TestTaskRunnerRun probe-cli#1354 fix: anomaly with android_dns_cache_no_data and inconsistent dns probe-cli#1211 feat: mvp of conditionally enabling experiments probe-cli#1355 fix(torsf): bump the version number probe-cli#1357 feat: add echcheck to the experimental suite probe-cli#1217 fix(ooniprobe): make sure we actually run echcheck probe-cli#1358 fix(registry): mark torsf as disabled by default probe-cli#1359 cleanup(riseupvpn): remove summary keys probe-cli#1360 refactor(riseupvpn): rename structs, change progress, bump version probe-cli#1361 chore: use go1.20.10 probe-cli#1362 refactor(riseupvpn): handle failing API and simplify test keys probe-cli#1363 feat(riseupvpn): include bootstrap in progress probe-cli#1364 chore(ooniprobe): add riseupvpn to experimental test suite probe-cli#1365
• ios: replace ooni/go-libtor with scripts compiling tor #2564
• probe-cli: address any outstanding TODO in the diff since last release (or create an issue for it)
• probe-cli: check warnings emitted by gosec runs

[jefferyto]

It would be great to have 3.19 released with support for Go 1.21.

[bassosimone]

@jefferyto ACK, I will see of this is possible!