tile: ensure headers always sent, including 404

Merge remote-tracking branch 'github/pull/793'

build(deps): bump actions/checkout from 4 to 5

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

civicrm: Add additional required php extensions

civicrm: remove wkhtmltopdf requirement

https://civicrm.org/advisory/civi-psa-2024-01-wkhtmltopdf-eol

mediawiki: zstd only required for backup compression

podman: only trigger apache reload on apache resource change

apache: remove old SSL Stapling config fragments

apache: restart apache if ports or ssl config changed

apache: add restart support to apache_conf

Add dummy apple authentication credentials for testing

Revert "apache: remove fragments of old SSL Stapling support"

This reverts commit 501977933a2755839ad84a7c4310c9ea174f76d3.

apache: remove fragments of old SSL Stapling support

dev: Add time to default utils

Update postgres to 17 on dev

vectorfile: Switch to x-rendered-by response header

imagery: bump os-openmap-local cache revision

imagery: Use updated os-openmap-local-2025-04 render

Merge remote-tracking branch 'github/pull/791'

build(deps): bump cookstyle from 8.3.0 to 8.4.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.3.0 to 8.4.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.3.0...v8.4.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

vectortile: Add diagnostics X-TileRender response header

Fixes: https://github.com/openstreetmap/operations/issues/1271

Enable apple authentication

foundation: Add txt upload support to wiki

dns: Update dnscontrol to 4.23.0

Disable LLMNR and Multicast DNS in resolved

Disable DNS lookups in the chrony exporter

Use preferred ntp server for osuosl

Add IPv6 address for palulukon

Remove unused template

Upgrade postgres to 17 on wawel

Revert "Remove tile role from palulukon briefly"

This reverts commit 8aa1d6ca145148a5a0c6f1b56cdc3c4d3269c90c.

hardware: remove lp module requirement

Remove tile role from palulukon briefly

Update palulukon instance IPs

Merge remote-tracking branch 'github/pull/790'

oxidized: removed old rest config. Set journal log level to trace

build(deps): bump cookstyle from 8.2.1 to 8.3.0

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.2.1 to 8.3.0.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.2.1...v8.3.0)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

oxidized: Add newly added logger support

imagery: Add OS OpenMap Local April 2025

Merge remote-tracking branch 'github/pull/789'

nominatim: have chef update nominatim-data-analyser package

take into account extra pip source when listing outdated pkgs

nominatim: need extra packages for building QA tool

apache: Set minimal ServerTokens and disable ServerSignature

Add :timezone comment reminder in multiple timezone countries

pixeldeck: set correct timezone for timer jobs

pixeldeck: set only time.pixeldeck.net as ntp

vectortile: Use http/1.1 to backend

piasa set energy_perf_bias to max performance

orm set energy_perf_bias to max performance

Use local ntp on pixeldeck

Revert "Use layer3+4 lacp xmithashpolicy for orm"

This reverts commit 145a161fe8a12ffedce2e88636219ec4a2e49e4e.

Configure orm as a tile server

Use layer3+4 lacp xmithashpolicy for orm

Fix bonding parameters for orm

Add linux-base to debian backport_packages

Make nmoore at pixeldeck

Fix network interface for orm

Add role for orm

Merge remote-tracking branch 'github/pull/788'

fix imagery blocklist RegExp for vworld.kr

Update matomo to 5.3.2

nominatim: add appropriate vary headers

build(deps): bump test-kitchen from 3.8.0 to 3.8.1

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.8.0 to 3.8.1.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.8.0...v3.8.1)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Enable enhanced statistics for production cgimap

Add trixie to aptly repositories

Update README.md - Update contact links

Corrected badges, updated existing links.

Merge remote-tracking branch 'github/pull/786'

build(deps): bump thor from 1.3.2 to 1.4.0

Bumps [thor](https://github.com/rails/thor) from 1.3.2 to 1.4.0.
- [Release notes](https://github.com/rails/thor/releases)
- [Commits](https://github.com/rails/thor/compare/v1.3.2...v1.4.0)

---
updated-dependencies:
- dependency-name: thor
  dependency-version: 1.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

nginx: No longer enable OCSP stapling

apache: No longer enable OCSP stapling

Configure maptiler key for web site

Fix timeout syntax

elasticsearch: Extend timeout avoid timeout

web: use zstd for apache log compression

imagery: Bump leaflet versions

imagery: Add Namibian historic 250k series

Send export errors in plain text

Merge remote-tracking branch 'github/pull/783'

Replace cgi by urllib

Avoid accessing form data for OPTIONS requests

Allow the TOTP token to be sent in the render URL

Enable enhanced statistics for dev cgimap

Allow some rails headers in CORS preflight

Don't set Access-Control-Allow-Origin if CGI has done so

Handle CORS preflight requests to the render export script

planet: switch to zstd for apache logrotate

tile: switch to zstd for apache logrotate

Merge remote-tracking branch 'github/pull/782'

build(deps): bump test-kitchen from 3.7.2 to 3.8.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.7.2 to 3.8.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.7.2...v3.8.0)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/781'

build(deps): bump kitchen-dokken from 2.20.7 to 2.20.8

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.20.7 to 2.20.8.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.20.7...v2.20.8)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.20.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

overpass: Run make with multiple jobs

Switch apt_repository repos to using url for key retrieval

chef: Bump client to latest  18.7.10

Cleanup inactive nginx cache quicker on lockheed

nginx: fix apt_repository key to use url

Fix new cookstyle warnings

Merge remote-tracking branch 'github/pull/779'

Merge remote-tracking branch 'github/pull/778'