Forward-port release notes for version 1.6.8.

docs/source/releases/index.rst

@@ -38,6 +38,7 @@ Release notes for each version of Oscar published to PyPI.
     v1.6.5
     v1.6.6
     v1.6.7
+    v1.6.8
 
 
 1.5 release branch

docs/source/releases/v1.6.8.rst

@@ -0,0 +1,10 @@
+=========================
+Oscar 1.6.8 release notes
+=========================
+
+:release: 2020-06-20
+
+This is Oscar 1.6.8, a Django 2.2 compatibility release.
+
+It also updates Bootstrap to 3.4.1 and explicitly specifies extend in the
+npm dependencies to fix CVE-2019-8331 and CVE-2018-16492 vulnerabilities.