mediawiki: Add placeholder $wgReadOnly setting

mediawiki: Disable Patrol edits

Closes: https://github.com/openstreetmap/operations/issues/1357

mediawiki: ensure images temp has right permission

mediawiki: Install PdfHandler only prior to MW 1.46 for now

wiki: Upgrade to 1.46

Let mapnik use the default plugin directory

Use archive_file to unpack sst

hardware: minor lint

hardware: remove dummy line

hardware: fix sst extract

hardware: bump sst to latest release

dns: Bump dnscontrol to 5.0.2

Fix cookstyle warnings and update cookstyle todo

Merge remote-tracking branch 'github/pull/868'

Merge remote-tracking branch 'github/pull/867'

Merge remote-tracking branch 'github/pull/866'

build(deps): bump test-kitchen from 4.1.1 to 4.1.3

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 4.1.1 to 4.1.3.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v4.1.1...v4.1.3)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump kitchen-dokken from 2.23.3 to 2.24.0

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.23.3 to 2.24.0.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.23.3...v2.24.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump cookstyle from 8.7.6 to 9.0.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.7.6 to 9.0.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.7.6...v9.0.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Add ripgrep to default tools

foundation: increase php-fpm workers

Tune naga apache for CPU and high load

Move wiki CrawlerProtection upstream to Mediawiki cookbook

vector: enable cmok tileupdate

vector: enable cmok replication

community: Bump to latest commits on ESR release

wiki: CrawlerProtection follow main branch

wiki: Add CrawlerProtection extension

prometheus: Site power increased for AM6 and DB4

community: Bump to latest ESR release

vector: turn off cmok for updates

Add missing comma

vector: bump default spirit, hold back cmok

vector: Turn on tileupdate on dribble

vector: enable dribble updates

vector: turn off dribble for update

Add fallback NTP servers for UCL

Add fallback NTP servers for pixeldeck

Fix overdue low zoom render alert

Merge remote-tracking branch 'github/pull/864'

Bump Gems

prometheus: bump versions

Update user agent block for git.osm.org

Fix IRC bot switch2osm links

Add shortbread-docs to irc bot

Merge remote-tracking branch 'github/pull/865'

Add gpstrackpoints branch and remove gpsvisibility from dev server

Stop database backup cleaning up IPCs

ripe: Remove ripe-atlas-repo package as we handle repo

Fix typo in path

Update fastly cli client to 15.6.0

mediawiki: re-enable PdfHandler

Bump test wiki to MW 1.46 (LTS)

Switch out pool.ntp.org for Google and Cloudflare NTP pools

dhcpd: Use RFC6842, limit NTP server responses

hardware: do not install amsd on quetzal

devices: Cleanup udev rules + add BCM57416 tweaks

hardware: Install amsd on Gen10 Plus

openssh: update oob1.dub keys

Configure quetzal as a tile server

Use ttyS0 for serial console on Gen10 Plus

Add ssh key for quetzal OOB

Add automatic transfer switch in Dublin

Add role for quetzal

Merge remote-tracking branch 'github/pull/863'

build(deps): bump json from 2.21.1 to 2.21.2

Bumps [json](https://github.com/ruby/json) from 2.21.1 to 2.21.2.
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](https://github.com/ruby/json/compare/v2.21.1...v2.21.2)

---
updated-dependencies:
- dependency-name: json
  dependency-version: 2.21.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: reenable debug view

Run ofastlylog-hourly hourly

tilelog: run ofastlylog hourly

Move pgbackrest lock file to /run

prometheus: scrape cloudwatch wal-prod-replication metrics

prometheus: Also scrape cloudwatch eu-west-1 for osm-backup

community: upgrade to pg18

community: temporarily remove postgres max_connections workaround

community: bump discourse release

prometheus: do no collect zero interrupts (fixed)

Revert "prometheus: do no collect zero interrupts"

This reverts commit ed1f1c558ad0380f19c77346632fbc79debe4dc1.

prometheus: do no collect zero interrupts

dns: bump dnscontrol to 4.45.0

Automate pgbackrest backups

Suppress warnings from prometheus backup

tilelog: don't run website

The website success logs aren't yet developed

community: bump to esr release

Bump Gems + remove test-kitchen time workaround

prometheus: bump to v3.13.2

community: bump release to latest release/2026.1

Install correct ofastlylog package

Correct boolean constant

Merge branch 'ofastlylog'

imagery: ZW imagery revision bump

Allow planetdump to read sequences for tables it can read

letsencrypt: refactor requests exec to use a notify_group rerun if cert missing

letsencrypt: Run cert request on each run if cert missing

Move docker inspec tests to use command equivilant

Upgrade Gems and add Time#iso8601 workaround

imagery: bump ZW revisions

Run hourly ofastlylog with tilelog

Switch planet dump to generate it's own database dumps

Disable database backups for now

Alert if a low zoom render has been runnning for over 24 hours