Release 0.17.2 (2018-09-21)

Baseline: aa118ca8

Cherry picks:
   + 0e046258:
     Update checker framework dataflow and javacutil versions
   + 3987300d:
     Stop using --release in versioned java_toolchains
   + 438b2773:
     make_deb: Add new empty line in the end of conffiles file
   + 50440179:
     Properly mark configuration files in the Debian package.
   + 9ed9d8ac:
     Add flag
     --incompatible_symlinked_sandbox_expands_tree_artifacts_in_runfil
     es_tree.
   + 22d761ab:
     Update protobuf to 3.6.1 -- add new files
   + 27303d79:
     Update protobuf to 3.6.1 -- update references
   + ddc97ed6:
     Update protobuf to 3.6.1 -- remove 3.6.0 sources
   + ead1002d:
     Fix protobuf in the WORKSPACE
   + 12dcd35e:
     Revert "Update to JDK 10 javac"
   + 7eb9ea15:
     Automated rollback of
     https://github.com/bazelbuild/bazel/commit/808ec9ff9b5cec14f23a4b
     a106bc5249cacc8c54 and
     https://github.com/bazelbuild/bazel/commit/4c9149d558161e7d3e363f
     b697f5852bc5742a36 and some manual merging.
   + 4566a428:
     Fix tests on JDK 9 and 10
   + 1e9f0aa8:
     Fix more tests on JDK 9 and 10
   + a572c1cb:
     Add ubuntu1804_nojava, ubuntu1804_java9, ubuntu1804_java10 to
     postsubmit.
   + 29f1de09:
     Disable Android shell tests on the "nojava" platform.
   + b495eafd:
     Update bazel_toolchains to latest release.
   + 9323c576:
     Windows: fix writing java.log
   + 1aba9ac4:
     Automated rollback of commit
     de22ab05.
   + 2579b791:
     Fix toolchain_java9 on --host_javabase=<jdk9> after
     7eb9ea15
   + 2834613f:
     Include also ext jars in the bootclasspath jar.
   + fdb09a26:
     Release 0.17.1 (2018-09-14)
   + 1d956c70:
     Do not fail the build when gcov is not installed
   + 2e677fb6:
     Ignore unrecognized VM options in desugar.sh, such as the JVM 9
     flags to silence warnings.

Important changes:

  - In the future, Bazel will expand tree artifacts in runfiles, too,
    which causes the sandbox to link each file individually into the
    sandbox directory, instead of symlinking the entire directory. In
    this release, the behavior is not enabled by default yet. Please
    try it out via
    --incompatible_symlinked_sandbox_expands_tree_artifacts_in_runfile
    s_tree and let us know if it causes issues. If everything looks
    good, this behavior will become the default in a following
    release.