* Migrate email utils to non-static

* Migrate http utils to non-static

* Migrate net utils to non-static

* Migrate random utils to non-static

* Migrate system utils to non-static

* Migrate time utils to non-static

* Migrate xml utils to non-static

* Upgrade notes

* Update test-framework

* Fix tests

Convert to our wrapper class for assertions

* Remove deprecated classes

* Remove support for certificate fingerprints

* Remove many deprecated methods and pieces of code

* Remove SAML1.1/Shib1.3 support

* Remove many superfluous annotations

* Update unit test to work with new PHPunit

Closes #1268 
Closes #1020 
Closes #431 
Closes #167 
Closes #151 

* Migrate assertions to Webmozart

* Raise minimum PHP version to 7.0

* Remove tests pre-PHP 7.2

* Upgrade dev dependencies

* Ignore tests for deprecated class

* Add typehints; not touching public API

* Remove none-array replacements-param; old behaviour from pre-1.4 release

* Psalm fixes

* Add upgrade notes

* PSR-12

PSR-12 compliancy

* Allow list of entity ids to be loaded to better support idpList

Certain metadata sources, like mdq, were don't support loading all metadata which
prevented them from being used with idplist. This change adds support for allowing
metadata sources to load a list of entities, allowing MDQ to be used for idp list.

Some metadata publishers offer SHA256 fingerprints to validate the
fingerprint of the certificate used to sign metadata. Allow users to
configure the fingerprinting algorithm to facilitate validation.

For backward compatibility, the default algorithm remains SHA1.

Don't bail out if the MDQ cache is broken or the query fails, because
later other metadata sources might provide the metadata for the entity.

Move SimpleSAML_Metadata_MetaDataStorageHandlerMDX to SimpleSAML\Metadata\Sources\MDQ, and stop referring to it as MDX elsewhere.