Update bundle

Add JA4 fingerprint to logging

naga: increase apache limits

prometheus: bump alertmanager to 0.31.1

Merge remote-tracking branch 'github/pull/828'

build(deps): bump faraday from 1.3.1 to 2.14.1

Bumps [faraday](https://github.com/lostisland/faraday) from 1.3.1 to 2.14.1.
- [Release notes](https://github.com/lostisland/faraday/releases)
- [Changelog](https://github.com/lostisland/faraday/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lostisland/faraday/compare/v1.3.1...v2.14.1)

---
updated-dependencies:
- dependency-name: faraday
  dependency-version: 2.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: Fix fail2ban ignoreips join

nominatim: add fastly IPs to fail2ban ignore

nominatim: add a fast lane for requests from osm.org

wiki: Switch Captcha to Turnstile

Merge remote-tracking branch 'github/pull/827'

Handle /api/0.6/changeset/:id with the Rails app (not cgimap)

nominatim: increase warning threshold for replication delay even more

nominatim: switch to asgi/uwsgi protocol for gunicorn

dns: Upgrade dnscontrol to v4.33.0

prometheus: upgrade alertmanager to v0.31.0

Enable atlas cookbook on piasa

Enable atlas cookbook on orm

Enable atlas cookbook on rhaegal

Enable atlas cookbook on nidhogg

Enable atlas cookbook on ysera

Enable atlas cookbook on angor

Enable atlas cookbook on azure-01

Update branch name of OsmWikibase extension

Add Ruben to dev server

dns: Update dnscontrol to 4.32.0

community: Update discourse to v2026.1 (ESR)

Add ssh key for yuri

Give yuri access to muirdris

network: batch nftables blocks for nft submission

Back off SMTP retries more quickly

Improve ability to batch SMTP deliveries

Merge remote-tracking branch 'github/pull/826'

Merge remote-tracking branch 'github/pull/825'

build(deps): bump test-kitchen from 3.9.1 to 4.0.0

Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.9.1 to 4.0.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/compare/v3.9.1...v4.0.0)

---
updated-dependencies:
- dependency-name: test-kitchen
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump kitchen-dokken from 2.22.0 to 2.22.1

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.22.0 to 2.22.1.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.22.0...v2.22.1)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

dns: Update dnscontrol to 4.31.1

dns: Update dnscontrol to 4.31.0

Add ripe atlas software probe cookbook

increase alter time for nominatim replicaton delay

Update SST CLI to version 2.6

Install btree_gist owned by the apis user for dev instances

Merge remote-tracking branch 'github/pull/824'

build(deps): bump kitchen-inspec from 3.0.0 to 3.1.0

Bumps [kitchen-inspec](https://github.com/inspec/kitchen-inspec) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/inspec/kitchen-inspec/releases)
- [Changelog](https://github.com/inspec/kitchen-inspec/blob/main/CHANGELOG.md)
- [Commits](https://github.com/inspec/kitchen-inspec/compare/v3.0.0...v3.1.0)

---
updated-dependencies:
- dependency-name: kitchen-inspec
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Let cmake create the cgimap build directory if required

Make rails_port install node modules before running db:migrate

Merge remote-tracking branch 'github/pull/823'

Deploy a Rails app for pablobm

Add new SSH key for pablobm + label existing ones

community: Update discourse to v3.5.3

prometheus: bump to v3.9.1

prometheus: bump prometheus to 3.9.0, alertmanager to 0.30.0

nominatim: remove support contact from block message

letsencrypt: enable verbose logging to catch errors

docs: improve contributor testing guide and dockerised cookstyle

Merge remote-tracking branch 'github/pull/820'

build(deps): bump aws-sdk-s3 from 1.141.0 to 1.208.0

Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.141.0 to 1.208.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.208.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'github/pull/819'

Remove mention of sqlite3-pcre

Taginfo doesn't use it any more.

See https://github.com/taginfo/taginfo/issues/436.

nominatim: reduce pool sizes

build(deps): bump kitchen-dokken from 2.21.4 to 2.22.0

Bumps [kitchen-dokken](https://github.com/test-kitchen/kitchen-dokken) from 2.21.4 to 2.22.0.
- [Release notes](https://github.com/test-kitchen/kitchen-dokken/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-dokken/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/kitchen-dokken/compare/v2.21.4...v2.22.0)

---
updated-dependencies:
- dependency-name: kitchen-dokken
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump kitchen-dokken gem to fixed release

Workaround kitchen-dokken Docker API compatibility issue

Fixes: https://github.com/openstreetmap/chef/issues/816

apt: remove mcp keyring cleanup

apt: Force reinstall of hpe mcp renewed key

build(deps): bump cookstyle from 8.5.2 to 8.5.3

Bumps [cookstyle](https://github.com/chef/cookstyle) from 8.5.2 to 8.5.3.
- [Release notes](https://github.com/chef/cookstyle/releases)
- [Changelog](https://github.com/chef/cookstyle/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/cookstyle/compare/v8.5.2...v8.5.3)

---
updated-dependencies:
- dependency-name: cookstyle
  dependency-version: 8.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

nominatim: add static response file

spamassassin: Use correct daemon name on Ubuntu 24.04

Add ruby versions for ubuntu 24.04

Add ubuntu 24.04 to test-kitchen

Add debian-13 to supported kitchen tests

ruby: add debian 13 system ruby version support

clamav: Setup fangfrisch on Debian 13

taginfo: only install sqlite3-pcre if still available

php: improve version selection logic

dns: Update dnscontrol to 4.28.2

raise nominatim connection alert limit even more

increase warning limit for nominatim connections

Re-enable fullstaq-ruby apt key by using fingerprint

chef: bump client to 18.8.54

systemd: use subscribes to avoid daemon-reload race with service reload/restart

nominatim: be quicker to ban IPs that have been blocked

Update to tilelog 1.8.0

web: Use Fastly client IP, remove Cloudflare

vector: update spirit, expire all layers

vectortile: make styles with absolute URLs available

Manage the spammy_phrases table in the API database

Set a 5 minute statement timeout on rails database connections

This is equal to the API timeout, which is longer than the web
timeout, and is intended to act as a backstop.

nominatim: reduce wirkers on dulcy

Disable failing apt key

Add missing apache reload on ssl_certificate change

sotm: Add 2026

web: ignore faulty Cloudflare rum posts

Merge remote-tracking branch 'github/pull/810'

build(deps): bump actions/checkout from 5 to 6

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

rsync should use preallocate

Logs compressions should not use rsyncable as each log unique

naga: tune apache to hardware size

wordpress: Block public wp-json API

Fix apache reload logic for wordpress and mediawiki site resources