foundation: use default mediawiki version

mediawiki: Set default version to 1.46

dev: Be more aggressive against "faked" UAs

dev: Force proxy timeout of 90s instead of 300s

dev: Increase apache max_spare_threads to reduce rapid up/down scaling

dev: increase apache max_connections_per_child as apache not very leaky

dev: Set much more modest php-fpm max timeout

dns: Bump dnscontrol to latest release

Restore allow listing of outgoing mail

Improve allow listing of valid OSM email

Bump tilekiln version

Fix table permissions after running tile scripts

Update to osm-carto v6.1.0

Closes #873.

Really treat podman addresses as trusted by spamassassin

Whitelist openstreetmap.org mail from trusted hosts

Modernise spamassassin configuration

foundation: meta-externalagent crawler is mad

dns: Bump dnscontrol to latest

Use the Debian 13 libvips

Merge remote-tracking branch 'github/pull/871'

Update READMEs to refer to custom resources

LWRPs ("Light-Weight Resource Providers") was the old terminology,
but since these were written all LWRPs have been converted to
custom resources.

Merge remote-tracking branch 'github/pull/870'

Merge remote-tracking branch 'github/pull/869'

build(deps): bump cinc-auditor-bin from 7.1.7 to 7.2.1

---
updated-dependencies:
- dependency-name: cinc-auditor-bin
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump test-kitchen from 4.1.3 to 4.1.4

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Filter out some senders from OTRS

Configure sentry reporting to glitchtip

Replace manual unpacking with archive_file in tile cookbook

Fix valkey address binding for podman

Switch tile to a role based test

Ensure parent directories for tile directories are created

Move tile_directories configuration to tile role

Use differential backups between full backups

Make osm-logical an allowed output plugin

Drop some Debian 12 and Ubuntu 24.04 support code

Fix planet-dump tests

Add missing dependency to glitchtip cookbook

Use trixie repository for HP MCP on Debian 13

Remove key cleanup code used for Debian 12 to 13 upgrades

Drop installation of hpricot gem which was used by munin plugins

Drop unused support for elasticsearch 6

Work around gpx-import build errors on Debian 13

Install linux-sysctl-defaults on Debian

Enable prometheus monitorting for glitchtip

Treat podman addresses as trusted by spamassassin

Allow exim to relay from podman for glitchtip

Correct typo

Configure email sender correctly

Enable podman apache support for glitchtip

Enable valkey connections from glitchtip container

Enable postgresql connections from glitchtip container

Enable postgresql connections from glitchtip container

Add glitchtip to smaug

Add a glitchtip cookbook

Drop debian-12 and ubuntu-24.04 test environments

Use debian-13 for tests

Add inspec-docker-resources to bundle

Add a valkey cookbook

Add volumes attribute to podman_site

Rename volume to volumes to better reflect what it does

tile: Allow X-Requested-With header via CORS

Minor Gemfile update

mediawiki: Add placeholder $wgReadOnly setting

mediawiki: Disable Patrol edits

Closes: https://github.com/openstreetmap/operations/issues/1357

mediawiki: ensure images temp has right permission

mediawiki: Install PdfHandler only prior to MW 1.46 for now

wiki: Upgrade to 1.46

Let mapnik use the default plugin directory

Use archive_file to unpack sst

hardware: minor lint

hardware: remove dummy line

hardware: fix sst extract

hardware: bump sst to latest release

dns: Bump dnscontrol to 5.0.2

Fix cookstyle warnings and update cookstyle todo

Merge remote-tracking branch 'github/pull/868'

Merge remote-tracking branch 'github/pull/867'

Merge remote-tracking branch 'github/pull/866'

build(deps): bump test-kitchen from 4.1.1 to 4.1.3

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 4.1.1 to 4.1.3.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v4.1.1...v4.1.3)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump kitchen-dokken from 2.23.3 to 2.24.0

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.23.3 to 2.24.0.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.23.3...v2.24.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump cookstyle from 8.7.6 to 9.0.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.7.6 to 9.0.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.7.6...v9.0.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Add ripgrep to default tools

foundation: increase php-fpm workers

Tune naga apache for CPU and high load

Move wiki CrawlerProtection upstream to Mediawiki cookbook

vector: enable cmok tileupdate

vector: enable cmok replication

community: Bump to latest commits on ESR release

wiki: CrawlerProtection follow main branch

wiki: Add CrawlerProtection extension

prometheus: Site power increased for AM6 and DB4

community: Bump to latest ESR release

vector: turn off cmok for updates

Add missing comma

vector: bump default spirit, hold back cmok

vector: Turn on tileupdate on dribble

vector: enable dribble updates

vector: turn off dribble for update

Add fallback NTP servers for UCL

Add fallback NTP servers for pixeldeck