Release 3.6.0 (#239)

* chore: update dependencies

* chore: update user agent for measurements

* chore: we're now at v3.6.0

* chore: update assets

* chore: update bundled CA

* fix: address some goreportcard.com warnings

* fix(debian/changelog): zap release that breaks out build scripts

We're forcing the content of changelog with `dch`, so it's fine to
not have any specific new release in there.

* fix: make sure tests are passing locally

Notably, I removed a chunk of code where we were checking for network
activity. Now we don't fetch the databases and it's not important. Before,
it was important because the databases are ~large.

* fix: temporarily comment out riseupvn integration tests

See https://github.com/ooni/probe/issues/1354 for work aimed at
reducing the rate of false positives (thanks @cyBerta!)

internal/engine/netx/quicdialer/errorwrapper.go

@@ -22,7 +22,7 @@ func (d ErrorWrapperDialer) DialContext(
 	sess, err := d.Dialer.DialContext(ctx, network, host, tlsCfg, cfg)
 	err = errorx.SafeErrWrapperBuilder{
 		// ConnID does not make any sense if we've failed and the error
-		// does not make any sense (and is nil) if we succeded.
+		// does not make any sense (and is nil) if we succeeded.
 		DialID:    dialID,
 		Error:     err,
 		Operation: errorx.QUICHandshakeOperation,

internal/engine/netx/quicdialer/system_test.go

@@ -69,7 +69,7 @@ func TestSystemDialerSuccessWithReadWrite(t *testing.T) {
 			t.Fatal("unexpected Name")
 		}
 		if ev[idx].Time.Before(ev[idx-1].Time) {
-			t.Fatal("unexpected Time")
+			t.Fatal("unexpected Time", ev[idx].Time, ev[idx-1].Time)
 		}
 	}
 }