Merge remote-tracking branch 'upstream/pull/7245'

Build export download links from locale keys (#7271)

The four bulk download links on the export page had their URLs
hardcoded in the view, with the Overpass one spelt out a second
time in export.js so the bbox could be appended on each map move.

Follow the pattern already used by the help page and drive the list
from locale keys, adding a URL key alongside the existing title and
description for each source. This removes the duplication between
the view and the JS, and allows the URLs to be localised or pointed
elsewhere by deployments that are not openstreetmap.org.

export.js no longer needs to know the Overpass URL: it sets the
search component of the link's existing href rather than rebuilding
the whole thing.

The wiki link now points to Downloading_data, the target of the
redirect that the previous /wiki/Download URL followed.

settings.overpass_url is deliberately untouched: it is the query
server's interpreter endpoint, a separate concern from the export
download link.

Merge pull request #7293 from openstreetmap/translatewiki

Localisation updates from https://translatewiki.net.

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/7289'

Simplify Bootstrap classes; improve markup; DRY

DRY web notification templates

Merge remote-tracking branch 'upstream/pull/7290'

Bump msgpack from 1.8.1 to 1.8.2

Bumps [msgpack](https://github.com/msgpack/msgpack-ruby) from 1.8.1 to 1.8.2.
- [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog)
- [Commits](https://github.com/msgpack/msgpack-ruby/compare/v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/7283'

Remove intermediary now that it's not used

Render note_comment using the record directly

Render new_follower using the record directly

Render GPX import notifications, from the trace record as possible

Render diary_comment using the record directly

Render changeset_comment using the record directly

Prepare to drop the intermediate objects

Merge pull request #7282 from openstreetmap/translatewiki

Localisation updates from https://translatewiki.net.

Localisation updates from https://translatewiki.net.

Remove unnecessary indirection

Update database_consistency todo list

Merge remote-tracking branch 'upstream/pull/7281'

Merge remote-tracking branch 'upstream/pull/7280'

Merge remote-tracking branch 'upstream/pull/7279'

Merge remote-tracking branch 'upstream/pull/7278'

Bump the dependencies group with 5 updates

Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.228.0` | `1.228.1` |
| [danger](https://github.com/danger/danger) | `9.6.0` | `9.6.1` |
| [simplecov](https://github.com/simplecov-ruby/simplecov) | `1.0.2` | `1.0.3` |
| [annotaterb](https://github.com/drwl/annotaterb) | `4.23.0` | `4.24.0` |
| [database_consistency](https://github.com/djezzzl/database_consistency) | `3.0.6` | `3.0.8` |

Updates `aws-sdk-s3` from 1.228.0 to 1.228.1
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `danger` from 9.6.0 to 9.6.1
- [Release notes](https://github.com/danger/danger/releases)
- [Changelog](https://github.com/danger/danger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/danger/danger/compare/v9.6.0...v9.6.1)

Updates `simplecov` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](https://github.com/simplecov-ruby/simplecov/compare/v1.0.2...v1.0.3)

Updates `annotaterb` from 4.23.0 to 4.24.0
- [Changelog](https://github.com/drwl/annotaterb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/drwl/annotaterb/compare/v4.23.0...v4.24.0)

Updates `database_consistency` from 3.0.6 to 3.0.8
- [Changelog](https://github.com/djezzzl/database_consistency/blob/master/CHANGELOG.md)
- [Commits](https://github.com/djezzzl/database_consistency/compare/v3.0.6...v3.0.8)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.228.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: danger
  dependency-version: 9.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: simplecov
  dependency-version: 1.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: annotaterb
  dependency-version: 4.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: database_consistency
  dependency-version: 3.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump the dependencies group across 1 directory with 4 updates

Bumps the dependencies group with 4 updates in the / directory: [osm-community-index](https://github.com/osmlab/osm-community-index), [terra-draw](https://github.com/JamesLMilner/terra-draw), [eslint](https://github.com/eslint/eslint) and [globals](https://github.com/sindresorhus/globals).

Updates `osm-community-index` from 6.0.0 to 6.1.1
- [Release notes](https://github.com/osmlab/osm-community-index/releases)
- [Changelog](https://github.com/osmlab/osm-community-index/blob/main/CHANGELOG.md)
- [Commits](https://github.com/osmlab/osm-community-index/compare/v6.0.0...v6.1.1)

Updates `terra-draw` from 1.30.1 to 1.32.2
- [Release notes](https://github.com/JamesLMilner/terra-draw/releases)
- [Changelog](https://github.com/JamesLMilner/terra-draw/blob/main/release.js)
- [Commits](https://github.com/JamesLMilner/terra-draw/compare/terra-draw@1.30.1...terra-draw@1.32.2)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v10.7.0...v10.8.0)

Updates `globals` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.7.0...v17.8.0)

---
updated-dependencies:
- dependency-name: osm-community-index
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: terra-draw
  dependency-version: 1.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: globals
  dependency-version: 17.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump coverallsapp/github-action in the dependencies group

Bumps the dependencies group with 1 update: [coverallsapp/github-action](https://github.com/coverallsapp/github-action).

Updates `coverallsapp/github-action` from 2.3.7 to 2.3.8
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/5cbfd81b66ca5d10c19b062c04de0199c215fb6e...8d6379e14d29928660c4ba802d8e85393440b329)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump rails from 8.1.3 to 8.1.3.1 in the rails group

Bumps the rails group with 1 update: [rails](https://github.com/rails/rails).

Updates `rails` from 8.1.3 to 8.1.3.1
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](https://github.com/rails/rails/compare/v8.1.3...v8.1.3.1)

---
updated-dependencies:
- dependency-name: rails
  dependency-version: 8.1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rails
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #7277 from tomhughes/npm-constraints

Improve management of node module constraints

Remove pessimistic node moduile version constraints

We were ignoring them in dependabot so they aren't really necessary.

We can add constraints when we run into specific problems, but
otherwise we should be optimistic that, in most cases, the new version
of a module will either work fine as-is or will be flagged up by CI.

Exceptions are iD which is updated by manual PR and maplibre where
version 6.x is not currently usable by us.

Configure dependabot to respect package.json constraints

This allows us to use constraints in package.json, without having to
remember to repeat them in the dependabot configuration.

Merge remote-tracking branch 'upstream/pull/7274'

Merge remote-tracking branch 'upstream/pull/7273'

Bump postcss from 8.5.10 to 8.5.25

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.25.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.25)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump oauth from 1.1.3 to 1.1.6

Bumps [oauth](https://github.com/ruby-oauth/oauth) from 1.1.3 to 1.1.6.
- [Release notes](https://github.com/ruby-oauth/oauth/releases)
- [Changelog](https://github.com/ruby-oauth/oauth/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ruby-oauth/oauth/compare/v1.1.3...v1.1.6)

---
updated-dependencies:
- dependency-name: oauth
  dependency-version: 1.1.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/7148'

Use Turbo frames for sidebar loading

On edit, zoom in on the existing area

DRY

Implement complex update rules, as per user blocks

Show status of moderation zones

Assign revoker after update deactivates modzone

Take expiry into account when checking moderation zones

Draw moderation zones

Co-authored-by: Marwin Hochfelsner <50826859+hlfan@users.noreply.github.com>

CRUD interface for moderation zones

Merge remote-tracking branch 'upstream/pull/7270'

Merge remote-tracking branch 'upstream/pull/7267'

Test with a subject closer to reality

I missed these two the first time around.

Fix navbar toggler button class for proper collapse behavior

Merge pull request #7269 from openstreetmap/translatewiki

Localisation updates from https://translatewiki.net.

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/7265'

Destructure popstate listener event

Flatten route recognition method

Remove route argument

Simplify page state management

Rename full page load method

Promise cleanup

Co-authored-by: Pablo Brasero <pablo@pablobm.com>

Merge remote-tracking branch 'upstream/pull/7264'

Override Bootstrap navbar dropdown positioning

Suppress Bootstrap navbar animation on desktop

Merge pull request #7262 from openstreetmap/translatewiki

Localisation updates from https://translatewiki.net.

Merge pull request #7263 from pablobm/bad-string

Remove bad translation string

Remove bad translation string

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/7030'

Paginate notifications

Implement web notifications for GPX imports completion

Implement web notifications for new followers

Implement web notifications for diary comments

Implement web notifications for note comments

Implement web notifications for changeset comments

Skeleton to implement each type of web notification

Create page to list notifications

Merge remote-tracking branch 'upstream/pull/7261'

Merge remote-tracking branch 'upstream/pull/7260'

Bump websocket-driver from 0.8.1 to 0.8.2

Bumps [websocket-driver](https://github.com/faye/websocket-driver-ruby) from 0.8.1 to 0.8.2.
- [Changelog](https://github.com/faye/websocket-driver-ruby/blob/main/CHANGELOG.md)
- [Commits](https://github.com/faye/websocket-driver-ruby/compare/0.8.1...0.8.2)

---
updated-dependencies:
- dependency-name: websocket-driver
  dependency-version: 0.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump rails-html-sanitizer from 1.7.0 to 1.7.1

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases)
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rails/rails-html-sanitizer/compare/v1.7.0...v1.7.1)

---
updated-dependencies:
- dependency-name: rails-html-sanitizer
  dependency-version: 1.7.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/7259'

Merge remote-tracking branch 'upstream/pull/7257'

Merge remote-tracking branch 'upstream/pull/7256'

Bump the dependencies group with 5 updates

Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [omniauth-facebook](https://github.com/simi/omniauth-facebook) | `10.0.0` | `11.0.0` |
| [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-ruby) | `1.12.1` | `1.13.0` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.227.0` | `1.228.0` |
| [simplecov](https://github.com/simplecov-ruby/simplecov) | `1.0.1` | `1.0.2` |
| [database_consistency](https://github.com/djezzzl/database_consistency) | `3.0.5` | `3.0.6` |

Updates `omniauth-facebook` from 10.0.0 to 11.0.0
- [Release notes](https://github.com/simi/omniauth-facebook/releases)
- [Changelog](https://github.com/simi/omniauth-facebook/blob/master/CHANGELOG.md)
- [Commits](https://github.com/simi/omniauth-facebook/compare/v10.0.0...v11.0.0)

Updates `opentelemetry-sdk` from 1.12.1 to 1.13.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby/releases)
- [Commits](https://github.com/open-telemetry/opentelemetry-ruby/compare/opentelemetry-sdk/v1.12.1...opentelemetry-sdk/v1.13.0)

Updates `aws-sdk-s3` from 1.227.0 to 1.228.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `simplecov` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](https://github.com/simplecov-ruby/simplecov/compare/v1.0.1...v1.0.2)

Updates `database_consistency` from 3.0.5 to 3.0.6
- [Changelog](https://github.com/djezzzl/database_consistency/blob/master/CHANGELOG.md)
- [Commits](https://github.com/djezzzl/database_consistency/compare/v3.0.5...v3.0.6)

---
updated-dependencies:
- dependency-name: omniauth-facebook
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: aws-sdk-s3
  dependency-version: 1.228.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: simplecov
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: database_consistency
  dependency-version: 3.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump rubocop-minitest from 0.39.1 to 0.40.0 in the rubocop group

Bumps the rubocop group with 1 update: [rubocop-minitest](https://github.com/rubocop/rubocop-minitest).

Updates `rubocop-minitest` from 0.39.1 to 0.40.0
- [Release notes](https://github.com/rubocop/rubocop-minitest/releases)
- [Changelog](https://github.com/rubocop/rubocop-minitest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-minitest/compare/v0.39.1...v0.40.0)

---
updated-dependencies:
- dependency-name: rubocop-minitest
  dependency-version: 0.40.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: rubocop
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump the dependencies group with 2 updates

Bumps the dependencies group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [ruby/setup-ruby](https://github.com/ruby/setup-ruby).

Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)

Updates `ruby/setup-ruby` from 1.318.0 to 1.321.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/8e41b362d2589a22a44c1cfa214b3c83052c195b...95ef2b042f9d7a56d8268cba8559e2842e2ad01b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ruby/setup-ruby
  dependency-version: 1.321.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Remove debugging code left in accidentally

Move CSRF disablement to the correct controller

Merge remote-tracking branch 'upstream/pull/7252'

Overlay routing markers without setting position

Merge remote-tracking branch 'upstream/pull/7239'

Don't verify the CSRF token for the auth deletion callback

Use Bootstrap navbar for header

Combine navs in header

Merge remote-tracking branch 'upstream/pull/7246'

Bump brace-expansion from 5.0.3 to 5.0.7

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 5.0.3 to 5.0.7.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.3...v5.0.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #7244 from openstreetmap/translatewiki

Localisation updates from https://translatewiki.net.

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/7240'

Stop Turbo from interfering with our routing

Merge pull request #7237 from openstreetmap/translatewiki

Localisation updates from https://translatewiki.net.