build(deps): bump inspec-core from 5.23.6 to 5.24.5

Bumps [inspec-core](https://github.com/inspec/inspec) from 5.23.6 to 5.24.5.
- [Release notes](https://github.com/inspec/inspec/releases)
- [Changelog](https://github.com/inspec/inspec/blob/v5.24.5/CHANGELOG.md)
- [Commits](https://github.com/inspec/inspec/compare/v5.23.6...v5.24.5)

---
updated-dependencies:
- dependency-name: inspec-core
  dependency-version: 5.24.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Block bogus referers

Update api-statistics for new log format

nominatim: add custom nginx log format

web: log JA4H fingerprint

Merge remote-tracking branch 'github/pull/831'

build(deps): bump cookstyle from 8.5.3 to 8.6.4

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.5.3 to 8.6.4.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.5.3...v8.6.4)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 8.6.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Update APT signing key for passenger

Workaround inspec licensing issue breaking tests

web: reduce cores used during rails logrotate compress

Improve consistency of :location for site roles

web: reduce cores used during logrotate compress

imagery: fix titiler tile user format

nominatim: remove check for HTTP version

nominatim: add vary header to block responses

Update bundle

Add JA4 fingerprint to logging

naga: increase apache limits

prometheus: bump alertmanager to 0.31.1

Merge remote-tracking branch 'github/pull/828'

build(deps): bump faraday from 1.3.1 to 2.14.1

Bumps [faraday](https://github.com/lostisland/faraday) from 1.3.1 to 2.14.1.
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lostisland/faraday/compare/v1.3.1...v2.14.1)

---
updated-dependencies:
- dependency-name: faraday
  dependency-version: 2.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: Fix fail2ban ignoreips join

nominatim: add fastly IPs to fail2ban ignore

nominatim: add a fast lane for requests from osm.org

wiki: Switch Captcha to Turnstile

Merge remote-tracking branch 'github/pull/827'

Handle /api/0.6/changeset/:id with the Rails app (not cgimap)

nominatim: increase warning threshold for replication delay even more

nominatim: switch to asgi/uwsgi protocol for gunicorn

dns: Upgrade dnscontrol to v4.33.0

prometheus: upgrade alertmanager to v0.31.0

Enable atlas cookbook on piasa

Enable atlas cookbook on orm

Enable atlas cookbook on rhaegal

Enable atlas cookbook on nidhogg

Enable atlas cookbook on ysera

Enable atlas cookbook on angor

Enable atlas cookbook on azure-01

Update branch name of OsmWikibase extension

Add Ruben to dev server

dns: Update dnscontrol to 4.32.0

community: Update discourse to v2026.1 (ESR)

Add ssh key for yuri

Give yuri access to muirdris

network: batch nftables blocks for nft submission

Back off SMTP retries more quickly

Improve ability to batch SMTP deliveries

Merge remote-tracking branch 'github/pull/826'

Merge remote-tracking branch 'github/pull/825'

build(deps): bump test-kitchen from 3.9.1 to 4.0.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.9.1 to 4.0.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.9.1...v4.0.0)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump kitchen-dokken from 2.22.0 to 2.22.1

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.22.0 to 2.22.1.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.22.0...v2.22.1)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

dns: Update dnscontrol to 4.31.1

dns: Update dnscontrol to 4.31.0

Add ripe atlas software probe cookbook

increase alter time for nominatim replicaton delay

Update SST CLI to version 2.6

Install btree_gist owned by the apis user for dev instances

Merge remote-tracking branch 'github/pull/824'

build(deps): bump kitchen-inspec from 3.0.0 to 3.1.0

Bumps [kitchen-inspec](https://github.com/inspec/kitchen-inspec) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/inspec/kitchen-inspec/releases)
- [Changelog](https://github.com/inspec/kitchen-inspec/blob/main/CHANGELOG.md)
- [Commits](https://github.com/inspec/kitchen-inspec/compare/v3.0.0...v3.1.0)

---
updated-dependencies:
- dependency-name: kitchen-inspec
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Let cmake create the cgimap build directory if required

Make rails_port install node modules before running db:migrate

Merge remote-tracking branch 'github/pull/823'

Deploy a Rails app for pablobm

Add new SSH key for pablobm + label existing ones

community: Update discourse to v3.5.3

prometheus: bump to v3.9.1

prometheus: bump prometheus to 3.9.0, alertmanager to 0.30.0

nominatim: remove support contact from block message

letsencrypt: enable verbose logging to catch errors

docs: improve contributor testing guide and dockerised cookstyle

Merge remote-tracking branch 'github/pull/820'

build(deps): bump aws-sdk-s3 from 1.141.0 to 1.208.0

Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.141.0 to 1.208.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.208.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/819'

Remove mention of sqlite3-pcre

Taginfo doesn't use it any more.

See https://github.com/taginfo/taginfo/issues/436.

nominatim: reduce pool sizes

build(deps): bump kitchen-dokken from 2.21.4 to 2.22.0

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.21.4 to 2.22.0.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.21.4...v2.22.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump kitchen-dokken gem to fixed release

Workaround kitchen-dokken Docker API compatibility issue

Fixes: https://github.com/openstreetmap/chef/issues/816

apt: remove mcp keyring cleanup

apt: Force reinstall of hpe mcp renewed key

build(deps): bump cookstyle from 8.5.2 to 8.5.3

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.5.2 to 8.5.3.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.5.2...v8.5.3)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 8.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: add static response file

spamassassin: Use correct daemon name on Ubuntu 24.04

Add ruby versions for ubuntu 24.04

Add ubuntu 24.04 to test-kitchen

Add debian-13 to supported kitchen tests

ruby: add debian 13 system ruby version support

clamav: Setup fangfrisch on Debian 13

taginfo: only install sqlite3-pcre if still available

php: improve version selection logic

dns: Update dnscontrol to 4.28.2

raise nominatim connection alert limit even more

increase warning limit for nominatim connections

Re-enable fullstaq-ruby apt key by using fingerprint

chef: bump client to 18.8.54

systemd: use subscribes to avoid daemon-reload race with service reload/restart

nominatim: be quicker to ban IPs that have been blocked

Update to tilelog 1.8.0

web: Use Fastly client IP, remove Cloudflare

vector: update spirit, expire all layers