Localisation updates from https://translatewiki.net.

Prevent redirects to the login page being cached

Merge remote-tracking branch 'upstream/pull/6787'

Merge remote-tracking branch 'upstream/pull/6863'

Merge remote-tracking branch 'upstream/pull/6730'

More padding for menu items on mobile devices

Merge pull request #6868 from tomhughes/thunderforest-urls

Drop subdomains from thunderforest layer URLs

Drop subdomains from thunderforest layer URLs

Update leaflet-osm to latest upstream version

Merge remote-tracking branch 'upstream/pull/6867'

Faster, more idiomatic, easier to read

Localisation updates from https://translatewiki.net.

Raise linkify regex timeout

Integrate Tom's timeout patch that closes #6812 and closes #6799

Merge pull request #6818 from CommanderStorm/fix-traces

Fix traces going off screen for very long filenames

Merge pull request #6782 from CommanderStorm/maplibre-error

Add Human facing error messages when users without WebGL use

Simplify AssetHelper logic paths

Merge pull request #6862 from tomhughes/multiple-classes

Fix new rubocop Style/OneClassPerFile warnings

Fix new rubocop Style/OneClassPerFile warnings

Fix new rubocop warning

Update rubocop todo file

Merge remote-tracking branch 'upstream/pull/6859'

Merge remote-tracking branch 'upstream/pull/6861'

Merge remote-tracking branch 'upstream/pull/6860'

Merge remote-tracking branch 'upstream/pull/6858'

Bump the dependencies group with 4 updates

Bumps the dependencies group with 4 updates: [addressable](https://github.com/sporkmonger/addressable), [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby), [brakeman](https://github.com/presidentbeef/brakeman) and [database_consistency](https://github.com/djezzzl/database_consistency).

Updates `addressable` from 2.8.8 to 2.8.9
- [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sporkmonger/addressable/compare/addressable-2.8.8...addressable-2.8.9)

Updates `aws-sdk-s3` from 1.213.0 to 1.214.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `brakeman` from 8.0.2 to 8.0.4
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](https://github.com/presidentbeef/brakeman/compare/v8.0.2...v8.0.4)

Updates `database_consistency` from 2.1.3 to 3.0.0
- [Changelog](https://github.com/djezzzl/database_consistency/blob/master/CHANGELOG.md)
- [Commits](https://github.com/djezzzl/database_consistency/compare/v2.1.3...v3.0.0)

---
updated-dependencies:
- dependency-name: addressable
  dependency-version: 2.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: aws-sdk-s3
  dependency-version: 1.214.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: brakeman
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: database_consistency
  dependency-version: 3.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump the dependencies group with 2 updates

Bumps the dependencies group with 2 updates: [i18n-js](https://github.com/fnando/i18n) and [globals](https://github.com/sindresorhus/globals).

Updates `i18n-js` from 4.5.2 to 4.5.3
- [Changelog](https://github.com/fnando/i18n/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fnando/i18n/compare/v4.5.2...v4.5.3)

Updates `globals` from 17.3.0 to 17.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.3.0...v17.4.0)

---
updated-dependencies:
- dependency-name: i18n-js
  dependency-version: 4.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: globals
  dependency-version: 17.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump rubocop from 1.84.2 to 1.85.0 in the rubocop group

Bumps the rubocop group with 1 update: [rubocop](https://github.com/rubocop/rubocop).

Updates `rubocop` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.84.2...v1.85.0)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.85.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: rubocop
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump the dependencies group with 3 updates

Bumps the dependencies group with 3 updates: [ruby/setup-ruby](https://github.com/ruby/setup-ruby), [actions/setup-node](https://github.com/actions/setup-node) and [actions/upload-artifact](https://github.com/actions/upload-artifact).

Updates `ruby/setup-ruby` from 1.288.0 to 1.289.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/09a7688d3b55cf0e976497ff046b70949eeaccfd...19a43a6a2428d455dbd1b85344698725179c9d8c)

Updates `actions/setup-node` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/6044e13b5dc448c55e2357c09f80417699197238...53b83947a5a98c8d113130e565377fae1a50d02f)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.289.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/setup-node
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/6856'

Merge remote-tracking branch 'upstream/pull/6857'

Add tests for the case of suspended accounts

Stop testing `mark_deleted` as it's deprecated

Make AssetHelper work without precompiled assets

Merge remote-tracking branch 'upstream/pull/6850'

Merge remote-tracking branch 'upstream/pull/6847'

Merge pull request #6848 from tyrasd/iD-2.38.0

Upgrade iD to v2.38.0

Document the dev:populate script

Upgrade iD to v2.38.0

Avoid polluting the logs with non-descriptive exceptions

Localisation updates from https://translatewiki.net.

Show an WebGL error message if this is disabled

Merge remote-tracking branch 'upstream/pull/6832'

Merge remote-tracking branch 'upstream/pull/6833'

Merge remote-tracking branch 'upstream/pull/6841'

Localisation updates from https://translatewiki.net.

Bump rollup from 4.53.2 to 4.59.0

Bumps [rollup](https://github.com/rollup/rollup) from 4.53.2 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.53.2...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/6840'

Merge remote-tracking branch 'upstream/pull/6839'

Merge remote-tracking branch 'upstream/pull/6838'

Bump the dependencies group with 6 updates

Bumps the dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [mini_racer](https://github.com/discourse/mini_racer) | `0.19.2` | `0.20.0` |
| [omniauth-google-oauth2](https://github.com/zquestz/omniauth-google-oauth2) | `1.2.1` | `1.2.2` |
| [dalli](https://github.com/petergoldstein/dalli) | `4.3.2` | `4.3.3` |
| [minitest](https://github.com/minitest/minitest) | `6.0.1` | `6.0.2` |
| [selenium-webdriver](https://github.com/SeleniumHQ/selenium) | `4.40.0` | `4.41.0` |
| [database_consistency](https://github.com/djezzzl/database_consistency) | `2.1.2` | `2.1.3` |

Updates `mini_racer` from 0.19.2 to 0.20.0
- [Changelog](https://github.com/rubyjs/mini_racer/blob/main/CHANGELOG)
- [Commits](https://github.com/discourse/mini_racer/compare/v0.19.2...v0.20.0)

Updates `omniauth-google-oauth2` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/zquestz/omniauth-google-oauth2/releases)
- [Changelog](https://github.com/zquestz/omniauth-google-oauth2/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zquestz/omniauth-google-oauth2/compare/v1.2.1...v1.2.2)

Updates `dalli` from 4.3.2 to 4.3.3
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/petergoldstein/dalli/compare/v4.3.2...v4.3.3)

Updates `minitest` from 6.0.1 to 6.0.2
- [Changelog](https://github.com/minitest/minitest/blob/master/History.rdoc)
- [Commits](https://github.com/minitest/minitest/compare/v6.0.1...v6.0.2)

Updates `selenium-webdriver` from 4.40.0 to 4.41.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Changelog](https://github.com/SeleniumHQ/selenium/blob/trunk/rb/CHANGES)
- [Commits](https://github.com/SeleniumHQ/selenium/compare/selenium-4.40.0...selenium-4.41.0)

Updates `database_consistency` from 2.1.2 to 2.1.3
- [Changelog](https://github.com/djezzzl/database_consistency/blob/master/CHANGELOG.md)
- [Commits](https://github.com/djezzzl/database_consistency/compare/v2.1.2...v2.1.3)

---
updated-dependencies:
- dependency-name: mini_racer
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: omniauth-google-oauth2
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dalli
  dependency-version: 4.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: minitest
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: selenium-webdriver
  dependency-version: 4.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: database_consistency
  dependency-version: 2.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump the dependencies group with 5 updates

Bumps the dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) | `5.18.0` | `5.19.0` |
| [tag2link](https://github.com/JOSM/tag2link) | `2026.1.21` | `2026.2.21` |
| [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin) | `5.8.0` | `5.9.0` |
| [@types/jquery](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jquery) | `3.5.33` | `4.0.0` |
| [eslint](https://github.com/eslint/eslint) | `10.0.0` | `10.0.2` |

Updates `maplibre-gl` from 5.18.0 to 5.19.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/maplibre/maplibre-gl-js/compare/v5.18.0...v5.19.0)

Updates `tag2link` from 2026.1.21 to 2026.2.21
- [Release notes](https://github.com/JOSM/tag2link/releases)
- [Commits](https://github.com/JOSM/tag2link/compare/2026.1.21...2026.2.21)

Updates `@stylistic/eslint-plugin` from 5.8.0 to 5.9.0
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.9.0/packages/eslint-plugin)

Updates `@types/jquery` from 3.5.33 to 4.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jquery)

Updates `eslint` from 10.0.0 to 10.0.2
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v10.0.0...v10.0.2)

---
updated-dependencies:
- dependency-name: maplibre-gl
  dependency-version: 5.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tag2link
  dependency-version: 2026.2.21
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/jquery"
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 10.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump rubocop-minitest from 0.38.2 to 0.39.1 in the rubocop group

Bumps the rubocop group with 1 update: [rubocop-minitest](https://github.com/rubocop/rubocop-minitest).

Updates `rubocop-minitest` from 0.38.2 to 0.39.1
- [Release notes](https://github.com/rubocop/rubocop-minitest/releases)
- [Changelog](https://github.com/rubocop/rubocop-minitest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-minitest/compare/v0.38.2...v0.39.1)

---
updated-dependencies:
- dependency-name: rubocop-minitest
  dependency-version: 0.39.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: rubocop
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #6824 from tomhughes/database-consistency-fixes

Database consistency fixes

Use media-breakpoint-up in header

Add support for using an cloudflare turnstile widget during signup

Make with_settings correctly restore unset options

Merge remote-tracking branch 'upstream/pull/6432'

Merge remote-tracking branch 'upstream/pull/6835'

Localisation updates from https://translatewiki.net.

Add alt text for image a11y

More graceful recovery from errors

Create an admin and a normal user

Simple seed script to provide an initial user

Refactor to allow reuse

require password on user sign up, same as email and username

Merge remote-tracking branch 'upstream/pull/6829'

Localisation updates from https://translatewiki.net.

Store header translation strings together

Move secondary navigation item configutation to helper

Merge remote-tracking branch 'upstream/pull/6828'

Bump nokogiri from 1.19.0 to 1.19.1

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.19.0...v1.19.1)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-version: 1.19.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/6827'

Bump the dependencies group with 2 updates

Bumps the dependencies group with 2 updates: [bootsnap](https://github.com/rails/bootsnap) and [binding_of_caller](https://github.com/banister/binding_of_caller).

Updates `bootsnap` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rails/bootsnap/compare/v1.22.0...v1.23.0)

Updates `binding_of_caller` from 1.0.1 to 2.0.0
- [Release notes](https://github.com/banister/binding_of_caller/releases)
- [Commits](https://github.com/banister/binding_of_caller/compare/v1.0.1...v2.0.0)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: binding_of_caller
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix some null constraint database consistency warnings

Merge remote-tracking branch 'upstream/pull/6823'

Avoid using positive tabindexes

The use of positive tabindexes is widely discouraged. Instead, we
should order the elements of the page in the same order as they
are displayed, which they are already.

Previously the tab indexes did match the order that these elements
were shown on the page, but the lack of tabindexes on certain other
elements was used to "skip over" things like explanatory links
in forms. This made these other elements hard to focus, and meant that
overall the focus skipped around the page unintuitively.

It is less confusing for keyboard users if the focus just moves around
in the same order that the elements are shown on the page, which is
also the same order they appear in the html.

See https://herb-tools.dev/linter/rules/html-no-positive-tab-index
and the list of references on that page, for further discussion.

Drop redundant index on gpx_files table

Ignore database consistency check reports

Merge remote-tracking branch 'upstream/pull/6821'

Add database_consistency gem

Disable all failing and erroring checks, as a starting point.

Merge pull request #6820 from 1ec5/donate-6819

Avoid zombie Hardware Upgrade Fund translations

Renamed donation link string to avoid zombie translations

make sure that long trace-filenames are wrapped instead of going off screen

Move the tables on the traces page into an .table-resposponsive to work properly with too long content

Test that SVGs link to asset paths internally

Collect chat bubble transforms

Reuse osm logo in related social link icons

Add asset routing transformation for inline SVG images

Drop bogus translations

Merge remote-tracking branch 'upstream/pull/6816'

Bump rack from 3.2.4 to 3.2.5

Bumps [rack](https://github.com/rack/rack) from 3.2.4 to 3.2.5.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rack/rack/compare/v3.2.4...v3.2.5)

---
updated-dependencies:
- dependency-name: rack
  dependency-version: 3.2.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Localisation updates from https://translatewiki.net.

Raise linkify regex timeout

Merge remote-tracking branch 'upstream/pull/6810'

Merge remote-tracking branch 'upstream/pull/6798'

Explain how to regenerate a Postgres development volume

No idea how, but this appears to be interfering under macOS/arm64

Ensure version of Postgres compatible with client tools

Merge pull request #6797 from hlfan/html-attribute-double-quotes

Use double quotes for HTML atttribute values

Merge remote-tracking branch 'upstream/pull/6808'