]> git.openstreetmap.org Git - rails.git/log
rails.git
20 hours agoMerge pull request #6703 from openstreetmap/dependabot/npm_and_yarn/dependencies... live
Marwin Hochfelsner [Wed, 14 Jan 2026 02:07:01 +0000 (03:07 +0100)]
Merge pull request #6703 from openstreetmap/dependabot/npm_and_yarn/dependencies-eaf06a8087

Bump the dependencies group across 1 directory with 4 updates

20 hours agoBump the dependencies group across 1 directory with 4 updates
dependabot[bot] [Wed, 14 Jan 2026 01:55:18 +0000 (01:55 +0000)]
Bump the dependencies group across 1 directory with 4 updates

Bumps the dependencies group with 4 updates in the / directory: [leaflet.locatecontrol](https://github.com/domoritz/leaflet-locatecontrol), [make-plural](https://github.com/eemeli/make-plural/tree/HEAD/packages/plurals), [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) and [@stylistic/eslint-plugin](https://github.com/eslint-stylistic/eslint-stylistic/tree/HEAD/packages/eslint-plugin).

Updates `leaflet.locatecontrol` from 0.85.1 to 0.86.0
- [Changelog](https://github.com/domoritz/leaflet-locatecontrol/blob/gh-pages/CHANGELOG.md)
- [Commits](https://github.com/domoritz/leaflet-locatecontrol/compare/v0.85.1...v0.86.0)

Updates `make-plural` from 7.4.0 to 8.1.0
- [Release notes](https://github.com/eemeli/make-plural/releases)
- [Changelog](https://github.com/eemeli/make-plural/blob/main/packages/plurals/CHANGELOG.md)
- [Commits](https://github.com/eemeli/make-plural/commits/make-plural@8.1.0/packages/plurals)

Updates `maplibre-gl` from 5.15.0 to 5.16.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/maplibre/maplibre-gl-js/compare/v5.15.0...v5.16.0)

Updates `@stylistic/eslint-plugin` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/eslint-stylistic/eslint-stylistic/releases)
- [Changelog](https://github.com/eslint-stylistic/eslint-stylistic/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-stylistic/eslint-stylistic/commits/v5.7.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: leaflet.locatecontrol
  dependency-version: 0.86.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: make-plural
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: maplibre-gl
  dependency-version: 5.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@stylistic/eslint-plugin"
  dependency-version: 5.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
21 hours agoMerge pull request #6704 from openstreetmap/dependabot/bundler/dependencies-0868531289
Marwin Hochfelsner [Wed, 14 Jan 2026 01:47:25 +0000 (02:47 +0100)]
Merge pull request #6704 from openstreetmap/dependabot/bundler/dependencies-0868531289

Bump the dependencies group across 1 directory with 8 updates

21 hours agoBump the dependencies group across 1 directory with 8 updates
dependabot[bot] [Wed, 14 Jan 2026 01:19:21 +0000 (01:19 +0000)]
Bump the dependencies group across 1 directory with 8 updates

Bumps the dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bootsnap](https://github.com/rails/bootsnap) | `1.20.1` | `1.21.0` |
| [argon2](https://github.com/technion/ruby-argon2) | `2.3.2` | `2.3.3` |
| [bootstrap](https://github.com/twbs/bootstrap-rubygem) | `5.3.5` | `5.3.8` |
| [omniauth-apple](https://github.com/nhosoya/omniauth-apple) | `1.3.0` | `1.4.0` |
| [dalli](https://github.com/petergoldstein/dalli) | `3.2.8` | `4.0.0` |
| [opentelemetry-instrumentation-all](https://github.com/open-telemetry/opentelemetry-ruby-contrib) | `0.89.1` | `0.90.1` |
| [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) | `1.209.0` | `1.211.0` |
| [minitest-focus](https://github.com/seattlerb/minitest-focus) | `1.4.0` | `1.4.1` |

Updates `bootsnap` from 1.20.1 to 1.21.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rails/bootsnap/compare/v1.20.1...v1.21.0)

Updates `argon2` from 2.3.2 to 2.3.3
- [Changelog](https://github.com/technion/ruby-argon2/blob/master/Changelog.md)
- [Commits](https://github.com/technion/ruby-argon2/compare/v2.3.2...v2.3.3)

Updates `bootstrap` from 5.3.5 to 5.3.8
- [Release notes](https://github.com/twbs/bootstrap-rubygem/releases)
- [Changelog](https://github.com/twbs/bootstrap-rubygem/blob/main/CHANGELOG.md)
- [Commits](https://github.com/twbs/bootstrap-rubygem/compare/v5.3.5...v5.3.8)

Updates `omniauth-apple` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/nhosoya/omniauth-apple/releases)
- [Changelog](https://github.com/nhosoya/omniauth-apple/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nhosoya/omniauth-apple/commits)

Updates `dalli` from 3.2.8 to 4.0.0
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/petergoldstein/dalli/compare/v3.2.8...v4.0.0)

Updates `opentelemetry-instrumentation-all` from 0.89.1 to 0.90.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-ruby-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-ruby-contrib/blob/main/instrumentation/all/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-ruby-contrib/compare/opentelemetry-instrumentation-all/v0.89.1...opentelemetry-instrumentation-all/v0.90.1)

Updates `aws-sdk-s3` from 1.209.0 to 1.211.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

Updates `minitest-focus` from 1.4.0 to 1.4.1
- [Changelog](https://github.com/minitest/minitest-focus/blob/master/History.rdoc)
- [Commits](https://github.com/seattlerb/minitest-focus/compare/v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: argon2
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: bootstrap
  dependency-version: 5.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: omniauth-apple
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: dalli
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: opentelemetry-instrumentation-all
  dependency-version: 0.90.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: aws-sdk-s3
  dependency-version: 1.211.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: minitest-focus
  dependency-version: 1.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
21 hours agoMerge pull request #6702 from openstreetmap/dependabot/bundler/rails-6f02697e9b
Marwin Hochfelsner [Wed, 14 Jan 2026 01:14:05 +0000 (02:14 +0100)]
Merge pull request #6702 from openstreetmap/dependabot/bundler/rails-6f02697e9b

Bump rails from 8.1.1 to 8.1.2 in the rails group

21 hours agoMerge pull request #6701 from openstreetmap/dependabot/github_actions/dependencies...
Marwin Hochfelsner [Wed, 14 Jan 2026 01:10:19 +0000 (02:10 +0100)]
Merge pull request #6701 from openstreetmap/dependabot/github_actions/dependencies-721a27d89f

Bump ruby/setup-ruby from 1.280.0 to 1.282.0 in the dependencies group

22 hours agoBump rails from 8.1.1 to 8.1.2 in the rails group
dependabot[bot] [Wed, 14 Jan 2026 00:42:04 +0000 (00:42 +0000)]
Bump rails from 8.1.1 to 8.1.2 in the rails group

Bumps the rails group with 1 update: [rails](https://github.com/rails/rails).

Updates `rails` from 8.1.1 to 8.1.2
- [Release notes](https://github.com/rails/rails/releases)
- [Commits](https://github.com/rails/rails/compare/v8.1.1...v8.1.2)

---
updated-dependencies:
- dependency-name: rails
  dependency-version: 8.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rails
...

Signed-off-by: dependabot[bot] <support@github.com>
22 hours agoBump ruby/setup-ruby from 1.280.0 to 1.282.0 in the dependencies group
dependabot[bot] [Wed, 14 Jan 2026 00:40:08 +0000 (00:40 +0000)]
Bump ruby/setup-ruby from 1.280.0 to 1.282.0 in the dependencies group

Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).

Updates `ruby/setup-ruby` from 1.280.0 to 1.282.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/d5f787ce339eb0767271bc01d922e85644c2c8ab...4fc31e1c823882afd7ef55985266a526c589de90)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.282.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
22 hours agoUpdate lock file
Tom Hughes [Wed, 14 Jan 2026 00:36:50 +0000 (00:36 +0000)]
Update lock file

22 hours agoBlock updates to minitest 6
Tom Hughes [Wed, 14 Jan 2026 00:33:45 +0000 (00:33 +0000)]
Block updates to minitest 6

34 hours agoMerge pull request #6698 from hlfan/coveralls-badge-link
Andy Allan [Tue, 13 Jan 2026 11:51:48 +0000 (11:51 +0000)]
Merge pull request #6698 from hlfan/coveralls-badge-link

Update coverage badge link in README.md

2 days agoUpdate coverage badge link in README.md
Marwin Hochfelsner [Mon, 12 Jan 2026 21:13:41 +0000 (22:13 +0100)]
Update coverage badge link in README.md

2 days agoMerge pull request #6696 from mmd-osm/patch/wiki2026
Marwin Hochfelsner [Mon, 12 Jan 2026 17:55:13 +0000 (18:55 +0100)]
Merge pull request #6696 from mmd-osm/patch/wiki2026

Update wiki_pages.yml

2 days agoFix unit test, caused by wiki_pages.yml update
mmd-osm [Mon, 12 Jan 2026 17:10:13 +0000 (18:10 +0100)]
Fix unit test, caused by wiki_pages.yml update

2 days agoMerge pull request #6697 from pablobm/patch-1
Marwin Hochfelsner [Mon, 12 Jan 2026 16:04:48 +0000 (17:04 +0100)]
Merge pull request #6697 from pablobm/patch-1

rbenv install: show which versions are available

2 days agoShow how to see what versions are available
Pablo Brasero [Mon, 12 Jan 2026 12:39:50 +0000 (12:39 +0000)]
Show how to see what versions are available

While setting up an environment in the development server, I realised I didn't know which Ruby versions were available. I had to run `rbenv versions`, which answered my question, but might not be obvious to others.

2 days agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Mon, 12 Jan 2026 12:17:36 +0000 (13:17 +0100)]
Localisation updates from https://translatewiki.net.

3 days agoUpdated wiki_pages.yml
mmd-osm [Sun, 11 Jan 2026 14:41:32 +0000 (15:41 +0100)]
Updated wiki_pages.yml

5 days agoAdd info icon with Wiki links to map layers menu (#6669)
Swayam [Fri, 9 Jan 2026 09:02:42 +0000 (14:32 +0530)]
Add info icon with Wiki links to map layers menu (#6669)

6 days agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Thu, 8 Jan 2026 12:17:56 +0000 (13:17 +0100)]
Localisation updates from https://translatewiki.net.

6 days agoMerge pull request #6687 from gravitystorm/firefox_binary
Marwin Hochfelsner [Thu, 8 Jan 2026 10:56:27 +0000 (11:56 +0100)]
Merge pull request #6687 from gravitystorm/firefox_binary

Update documentation on firefox binary config

6 days agoMerge pull request #6689 from openstreetmap/dependabot/bundler/rubocop-0b660dca05
Marwin Hochfelsner [Thu, 8 Jan 2026 10:43:00 +0000 (11:43 +0100)]
Merge pull request #6689 from openstreetmap/dependabot/bundler/rubocop-0b660dca05

Bump rubocop-rails from 2.34.2 to 2.34.3 in the rubocop group

6 days agoMerge pull request #6688 from openstreetmap/dependabot/github_actions/dependencies...
Marwin Hochfelsner [Thu, 8 Jan 2026 10:31:19 +0000 (11:31 +0100)]
Merge pull request #6688 from openstreetmap/dependabot/github_actions/dependencies-1835ec334b

Bump ruby/setup-ruby from 1.278.0 to 1.280.0 in the dependencies group

6 days agoMerge pull request #6686 from gravitystorm/custom_hard_coded_string
Marwin Hochfelsner [Thu, 8 Jan 2026 10:19:33 +0000 (11:19 +0100)]
Merge pull request #6686 from gravitystorm/custom_hard_coded_string

Enable erb_lint hard coded string linter

6 days agoBump rubocop-rails from 2.34.2 to 2.34.3 in the rubocop group
dependabot[bot] [Thu, 8 Jan 2026 01:20:02 +0000 (01:20 +0000)]
Bump rubocop-rails from 2.34.2 to 2.34.3 in the rubocop group

Bumps the rubocop group with 1 update: [rubocop-rails](https://github.com/rubocop/rubocop-rails).

Updates `rubocop-rails` from 2.34.2 to 2.34.3
- [Release notes](https://github.com/rubocop/rubocop-rails/releases)
- [Changelog](https://github.com/rubocop/rubocop-rails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-rails/compare/v2.34.2...v2.34.3)

---
updated-dependencies:
- dependency-name: rubocop-rails
  dependency-version: 2.34.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: rubocop
...

Signed-off-by: dependabot[bot] <support@github.com>
6 days agoBump ruby/setup-ruby from 1.278.0 to 1.280.0 in the dependencies group
dependabot[bot] [Thu, 8 Jan 2026 01:19:48 +0000 (01:19 +0000)]
Bump ruby/setup-ruby from 1.278.0 to 1.280.0 in the dependencies group

Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).

Updates `ruby/setup-ruby` from 1.278.0 to 1.280.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/4c24fa5ec04b2e79eb40571b1cee2a0d2b705771...d5f787ce339eb0767271bc01d922e85644c2c8ab)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.280.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
7 days agoMerge pull request #6661 from Firefishy/add-spam-rich-text-whitespace-normalise
Andy Allan [Wed, 7 Jan 2026 17:25:06 +0000 (17:25 +0000)]
Merge pull request #6661 from Firefishy/add-spam-rich-text-whitespace-normalise

SpamScorer: normalise whitespace in comparable form

7 days agoUpdate documentation on firefox binary config
Andy Allan [Wed, 7 Jan 2026 16:42:08 +0000 (16:42 +0000)]
Update documentation on firefox binary config

This setting can't be put into the config/settings.local.yml file, since
that file is ignored in the test environment. Instead, we can use
config/settings/test.local.yml file, which is git-ignored.

7 days agoEnable erb_lint hard coded string linter
Andy Allan [Wed, 3 Dec 2025 11:06:18 +0000 (11:06 +0000)]
Enable erb_lint hard coded string linter

The implementation uses a customised linter, to add `&middot;` to the
list of punctuation that doesn't need translating.

We can remove our customised linter when this list becomes a config option,
see https://github.com/Shopify/erb_lint/pull/397

7 days agoMerge pull request #6685 from CommanderStorm/better-docker-guide
Andy Allan [Wed, 7 Jan 2026 15:27:25 +0000 (15:27 +0000)]
Merge pull request #6685 from CommanderStorm/better-docker-guide

Clarify how precompilation works in the docker setup guide

7 days agoimprove the docker setup guide
Frank Elsinga [Wed, 7 Jan 2026 14:33:35 +0000 (15:33 +0100)]
improve the docker setup guide

8 days agoMerge pull request #6676 from CommanderStorm/user_diary
Marwin Hochfelsner [Tue, 6 Jan 2026 21:49:39 +0000 (22:49 +0100)]
Merge pull request #6676 from CommanderStorm/user_diary

Migrate the user diary to be maplibre based

8 days agoMerge pull request #6675 from CommanderStorm/migrate-user-location-edit
Marwin Hochfelsner [Tue, 6 Jan 2026 21:49:28 +0000 (22:49 +0100)]
Merge pull request #6675 from CommanderStorm/migrate-user-location-edit

Migrate the edit location page from leaflet to Maplibre

8 days agoMerge pull request #6682 from pablobm/fix-language-selector-submit
Marwin Hochfelsner [Tue, 6 Jan 2026 20:21:58 +0000 (21:21 +0100)]
Merge pull request #6682 from pablobm/fix-language-selector-submit

Avoid language selector breaking on submit

8 days agoMerge pull request #6654 from aNsHuL5217/fix-dashboard-marker-z-order
Marwin Hochfelsner [Tue, 6 Jan 2026 20:14:30 +0000 (21:14 +0100)]
Merge pull request #6654 from aNsHuL5217/fix-dashboard-marker-z-order

Fix incorrect z-order of dashboard map markers (fixes #6639)

8 days agoFix incorrect z-order f dashboard map markers (fixes #6639)
Anshul Zilpe [Tue, 6 Jan 2026 19:46:04 +0000 (01:16 +0530)]
Fix incorrect z-order f dashboard map markers (fixes #6639)

8 days agoAvoid language selector breaking on submit
Pablo Brasero [Tue, 6 Jan 2026 14:48:11 +0000 (14:48 +0000)]
Avoid language selector breaking on submit

9 days agoMigrate the user diary to be maplibre based
Frank Elsinga [Sun, 4 Jan 2026 22:30:03 +0000 (23:30 +0100)]
Migrate the user diary to be maplibre based

Also creates `OSM.MapLibre.defaultSecondaryMapOptions` to share the map style between the secondary maps this also

9 days agocreate `OSM.MapLibre.defaultSecondaryMapOptions` to share the map style between the...
Frank Elsinga [Mon, 5 Jan 2026 09:06:07 +0000 (10:06 +0100)]
create `OSM.MapLibre.defaultSecondaryMapOptions` to share the map style between the secondary maps

9 days agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Mon, 5 Jan 2026 12:16:27 +0000 (13:16 +0100)]
Localisation updates from https://translatewiki.net.

10 days agoMigrate user location edit page to MapLibre
Frank Elsinga [Sun, 4 Jan 2026 19:23:13 +0000 (20:23 +0100)]
Migrate user location edit page to MapLibre

This commit migrates the user home location page (the "Edit" tab on the user profile) from Leaflet to MapLibre GL JS. This is part of a wider migration to
MapLibre across the website. The change follows the pattern established in the dashboard migration.

13 days agoMerge pull request #6665 from openstreetmap/dependabot/bundler/dependencies-98a26080d9
Marwin Hochfelsner [Thu, 1 Jan 2026 12:18:15 +0000 (13:18 +0100)]
Merge pull request #6665 from openstreetmap/dependabot/bundler/dependencies-98a26080d9

Bump the dependencies group with 4 updates

13 days agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Thu, 1 Jan 2026 12:18:04 +0000 (13:18 +0100)]
Localisation updates from https://translatewiki.net.

13 days agoMerge pull request #6662 from openstreetmap/dependabot/bundler/action_text-trix-2...
Marwin Hochfelsner [Thu, 1 Jan 2026 12:14:47 +0000 (13:14 +0100)]
Merge pull request #6662 from openstreetmap/dependabot/bundler/action_text-trix-2.1.16

Bump action_text-trix from 2.1.15 to 2.1.16

13 days agoMerge pull request #6663 from openstreetmap/dependabot/github_actions/dependencies...
Marwin Hochfelsner [Thu, 1 Jan 2026 12:08:35 +0000 (13:08 +0100)]
Merge pull request #6663 from openstreetmap/dependabot/github_actions/dependencies-a0e46cd791

Bump ruby/setup-ruby from 1.275.0 to 1.278.0 in the dependencies group

13 days agoBump the dependencies group with 4 updates
dependabot[bot] [Wed, 31 Dec 2025 23:03:53 +0000 (23:03 +0000)]
Bump the dependencies group with 4 updates

Bumps the dependencies group with 4 updates: [pg](https://github.com/ged/ruby-pg), [bootsnap](https://github.com/rails/bootsnap), [mini_racer](https://github.com/discourse/mini_racer) and [brakeman](https://github.com/presidentbeef/brakeman).

Updates `pg` from 1.6.2 to 1.6.3
- [Changelog](https://github.com/ged/ruby-pg/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ged/ruby-pg/compare/v1.6.2...v1.6.3)

Updates `bootsnap` from 1.20.0 to 1.20.1
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rails/bootsnap/compare/v1.20.0...v1.20.1)

Updates `mini_racer` from 0.19.1 to 0.19.2
- [Changelog](https://github.com/rubyjs/mini_racer/blob/main/CHANGELOG)
- [Commits](https://github.com/discourse/mini_racer/compare/v0.19.1...v0.19.2)

Updates `brakeman` from 7.1.1 to 7.1.2
- [Release notes](https://github.com/presidentbeef/brakeman/releases)
- [Changelog](https://github.com/presidentbeef/brakeman/blob/main/CHANGES.md)
- [Commits](https://github.com/presidentbeef/brakeman/compare/v7.1.1...v7.1.2)

---
updated-dependencies:
- dependency-name: pg
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: bootsnap
  dependency-version: 1.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: mini_racer
  dependency-version: 0.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: brakeman
  dependency-version: 7.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
13 days agoBump ruby/setup-ruby from 1.275.0 to 1.278.0 in the dependencies group
dependabot[bot] [Wed, 31 Dec 2025 23:01:00 +0000 (23:01 +0000)]
Bump ruby/setup-ruby from 1.275.0 to 1.278.0 in the dependencies group

Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).

Updates `ruby/setup-ruby` from 1.275.0 to 1.278.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/d354de180d0c9e813cfddfcbdc079945d4be589b...4c24fa5ec04b2e79eb40571b1cee2a0d2b705771)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.278.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2 weeks agoBump action_text-trix from 2.1.15 to 2.1.16
dependabot[bot] [Wed, 31 Dec 2025 22:09:30 +0000 (22:09 +0000)]
Bump action_text-trix from 2.1.15 to 2.1.16

Bumps [action_text-trix](https://github.com/basecamp/trix) from 2.1.15 to 2.1.16.
- [Release notes](https://github.com/basecamp/trix/releases)
- [Commits](https://github.com/basecamp/trix/compare/v2.1.15...v2.1.16)

---
updated-dependencies:
- dependency-name: action_text-trix
  dependency-version: 2.1.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2 weeks agoSpamScorer: normalise whitespace in comparable form
Grant Slater [Tue, 30 Dec 2025 17:58:26 +0000 (17:58 +0000)]
SpamScorer: normalise whitespace in comparable form

Collapse Unicode whitespace runs to a single space in SpamScorer::RichText#to_comparable_form to improve SpammyPhrase matching across newlines/tabs.

2 weeks agoMerge pull request #6629 from tomhughes/user-actions
Andy Allan [Tue, 30 Dec 2025 14:10:00 +0000 (14:10 +0000)]
Merge pull request #6629 from tomhughes/user-actions

Send bulk user confirmations through the state machine

2 weeks agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Mon, 29 Dec 2025 12:20:29 +0000 (13:20 +0100)]
Localisation updates from https://translatewiki.net.

2 weeks agoMerge pull request #6658 from Dimitar5555/patch-1
Andy Allan [Sat, 27 Dec 2025 14:44:02 +0000 (14:44 +0000)]
Merge pull request #6658 from Dimitar5555/patch-1

Update OSM Carto repository URL

2 weeks agoUpdate OSM Carto repository URL
Dimitar [Sat, 27 Dec 2025 14:16:30 +0000 (16:16 +0200)]
Update OSM Carto repository URL

Ref: https://github.com/openstreetmap-carto/openstreetmap-carto/pull/5157

2 weeks agoMerge remote-tracking branch 'upstream/pull/6657'
Tom Hughes [Fri, 26 Dec 2025 17:14:58 +0000 (17:14 +0000)]
Merge remote-tracking branch 'upstream/pull/6657'

2 weeks agoFix tooltip date offset
Marwin Hochfelsner [Fri, 26 Dec 2025 16:11:42 +0000 (17:11 +0100)]
Fix tooltip date offset

2 weeks agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Thu, 25 Dec 2025 12:20:12 +0000 (13:20 +0100)]
Localisation updates from https://translatewiki.net.

2 weeks agoFix new rubocop warnings
Tom Hughes [Thu, 25 Dec 2025 10:52:39 +0000 (10:52 +0000)]
Fix new rubocop warnings

2 weeks agoMerge remote-tracking branch 'upstream/pull/6653'
Tom Hughes [Thu, 25 Dec 2025 10:51:22 +0000 (10:51 +0000)]
Merge remote-tracking branch 'upstream/pull/6653'

2 weeks agoBump rubocop from 1.82.0 to 1.82.1 in the rubocop group
dependabot[bot] [Wed, 24 Dec 2025 23:01:30 +0000 (23:01 +0000)]
Bump rubocop from 1.82.0 to 1.82.1 in the rubocop group

Bumps the rubocop group with 1 update: [rubocop](https://github.com/rubocop/rubocop).

Updates `rubocop` from 1.82.0 to 1.82.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.82.0...v1.82.1)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.82.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: rubocop
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks agoDisable dashboard map rotation and pitch (#6648)
Marwin Hochfelsner [Wed, 24 Dec 2025 09:56:18 +0000 (10:56 +0100)]
Disable dashboard map rotation and pitch (#6648)

3 weeks agoMerge remote-tracking branch 'upstream/pull/6606'
Tom Hughes [Wed, 24 Dec 2025 09:36:36 +0000 (09:36 +0000)]
Merge remote-tracking branch 'upstream/pull/6606'

3 weeks agoMerge remote-tracking branch 'upstream/pull/6649'
Tom Hughes [Wed, 24 Dec 2025 09:33:33 +0000 (09:33 +0000)]
Merge remote-tracking branch 'upstream/pull/6649'

3 weeks agoBump the dependencies group with 2 updates
dependabot[bot] [Tue, 23 Dec 2025 22:35:26 +0000 (22:35 +0000)]
Bump the dependencies group with 2 updates

Bumps the dependencies group with 2 updates: [bootsnap](https://github.com/rails/bootsnap) and [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby).

Updates `bootsnap` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/rails/bootsnap/releases)
- [Changelog](https://github.com/rails/bootsnap/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rails/bootsnap/compare/v1.19.0...v1.20.0)

Updates `aws-sdk-s3` from 1.208.0 to 1.209.0
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: bootsnap
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: aws-sdk-s3
  dependency-version: 1.209.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks agoPin connection_pool to 2.x pending a new rails release
Tom Hughes [Wed, 10 Dec 2025 13:06:31 +0000 (13:06 +0000)]
Pin connection_pool to 2.x pending a new rails release

https://github.com/rails/rails/pull/56294

3 weeks agoMerge remote-tracking branch 'upstream/pull/6647'
Tom Hughes [Tue, 23 Dec 2025 22:24:51 +0000 (22:24 +0000)]
Merge remote-tracking branch 'upstream/pull/6647'

3 weeks agoMerge remote-tracking branch 'upstream/pull/6646'
Tom Hughes [Tue, 23 Dec 2025 22:24:34 +0000 (22:24 +0000)]
Merge remote-tracking branch 'upstream/pull/6646'

3 weeks agoMerge remote-tracking branch 'upstream/pull/6645'
Tom Hughes [Tue, 23 Dec 2025 22:24:04 +0000 (22:24 +0000)]
Merge remote-tracking branch 'upstream/pull/6645'

3 weeks agoMerge remote-tracking branch 'upstream/pull/6644'
Tom Hughes [Tue, 23 Dec 2025 22:24:00 +0000 (22:24 +0000)]
Merge remote-tracking branch 'upstream/pull/6644'

3 weeks agoMerge pull request #6630 from tomhughes/maplibre-i18n
Marwin Hochfelsner [Tue, 23 Dec 2025 15:53:59 +0000 (16:53 +0100)]
Merge pull request #6630 from tomhughes/maplibre-i18n

Don't reinitialise i18n in maplibre code

3 weeks agoMerge pull request #6607 from pablobm/consistent-factories
Andy Allan [Tue, 23 Dec 2025 09:56:52 +0000 (09:56 +0000)]
Merge pull request #6607 from pablobm/consistent-factories

Ensure consistent naming for all factory files

3 weeks agoEnsure all factory files named in the plural
Pablo Brasero [Wed, 10 Dec 2025 14:47:09 +0000 (14:47 +0000)]
Ensure all factory files named in the plural

3 weeks agoBump the dependencies group with 4 updates
dependabot[bot] [Mon, 22 Dec 2025 23:04:44 +0000 (23:04 +0000)]
Bump the dependencies group with 4 updates

Bumps the dependencies group with 4 updates: [strong_migrations](https://github.com/ankane/strong_migrations), [connection_pool](https://github.com/mperham/connection_pool), [timeout](https://github.com/ruby/timeout) and [debug](https://github.com/ruby/debug).

Updates `strong_migrations` from 2.5.1 to 2.5.2
- [Changelog](https://github.com/ankane/strong_migrations/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ankane/strong_migrations/compare/v2.5.1...v2.5.2)

Updates `connection_pool` from 2.5.5 to 3.0.2
- [Changelog](https://github.com/mperham/connection_pool/blob/main/Changes.md)
- [Commits](https://github.com/mperham/connection_pool/compare/v2.5.5...v3.0.2)

Updates `timeout` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/ruby/timeout/releases)
- [Commits](https://github.com/ruby/timeout/compare/v0.5.0...v0.6.0)

Updates `debug` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/ruby/debug/releases)
- [Commits](https://github.com/ruby/debug/compare/v1.11.0...v1.11.1)

---
updated-dependencies:
- dependency-name: strong_migrations
  dependency-version: 2.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: connection_pool
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: timeout
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: debug
  dependency-version: 1.11.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks agoBump rubocop from 1.81.7 to 1.82.0 in the rubocop group
dependabot[bot] [Mon, 22 Dec 2025 23:01:44 +0000 (23:01 +0000)]
Bump rubocop from 1.81.7 to 1.82.0 in the rubocop group

Bumps the rubocop group with 1 update: [rubocop](https://github.com/rubocop/rubocop).

Updates `rubocop` from 1.81.7 to 1.82.0
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.81.7...v1.82.0)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.82.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: rubocop
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks agoBump maplibre-gl from 5.14.0 to 5.15.0 in the dependencies group
dependabot[bot] [Mon, 22 Dec 2025 23:01:23 +0000 (23:01 +0000)]
Bump maplibre-gl from 5.14.0 to 5.15.0 in the dependencies group

Bumps the dependencies group with 1 update: [maplibre-gl](https://github.com/maplibre/maplibre-gl-js).

Updates `maplibre-gl` from 5.14.0 to 5.15.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/maplibre/maplibre-gl-js/compare/v5.14.0...v5.15.0)

---
updated-dependencies:
- dependency-name: maplibre-gl
  dependency-version: 5.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks agoBump ruby/setup-ruby from 1.270.0 to 1.275.0 in the dependencies group
dependabot[bot] [Mon, 22 Dec 2025 23:01:10 +0000 (23:01 +0000)]
Bump ruby/setup-ruby from 1.270.0 to 1.275.0 in the dependencies group

Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).

Updates `ruby/setup-ruby` from 1.270.0 to 1.275.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/ac793fdd38cc468a4dd57246fa9d0e868aba9085...d354de180d0c9e813cfddfcbdc079945d4be589b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.275.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Mon, 22 Dec 2025 12:20:34 +0000 (13:20 +0100)]
Localisation updates from https://translatewiki.net.

3 weeks agoMerge remote-tracking branch 'upstream/pull/6634'
Tom Hughes [Thu, 18 Dec 2025 20:21:34 +0000 (20:21 +0000)]
Merge remote-tracking branch 'upstream/pull/6634'

3 weeks agoBump aws-sdk-s3 from 1.207.0 to 1.208.0
dependabot[bot] [Thu, 18 Dec 2025 19:59:20 +0000 (19:59 +0000)]
Bump aws-sdk-s3 from 1.207.0 to 1.208.0

Bumps [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby) from 1.207.0 to 1.208.0.
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)

---
updated-dependencies:
- dependency-name: aws-sdk-s3
  dependency-version: 1.208.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
3 weeks agoMerge remote-tracking branch 'upstream/pull/6632'
Tom Hughes [Thu, 18 Dec 2025 16:45:09 +0000 (16:45 +0000)]
Merge remote-tracking branch 'upstream/pull/6632'

3 weeks agoMerge pull request #6631 from pablobm/swap-confirm-suspend-actions
Marwin Hochfelsner [Thu, 18 Dec 2025 15:41:28 +0000 (16:41 +0100)]
Merge pull request #6631 from pablobm/swap-confirm-suspend-actions

Swap confirm and suspend actions

3 weeks agoFix invalid <p> nesting in comment rendering
Marwin Hochfelsner [Thu, 18 Dec 2025 13:32:42 +0000 (14:32 +0100)]
Fix invalid <p> nesting in comment rendering

3 weeks agoColour 'suspend' action as dangerous
Pablo Brasero [Thu, 18 Dec 2025 12:47:08 +0000 (12:47 +0000)]
Colour 'suspend' action as dangerous

3 weeks agoSwap actions around for consistency with users/lists
Pablo Brasero [Thu, 18 Dec 2025 12:44:15 +0000 (12:44 +0000)]
Swap actions around for consistency with users/lists

3 weeks agoLocalisation updates from https://translatewiki.net.
translatewiki.net [Thu, 18 Dec 2025 12:22:57 +0000 (13:22 +0100)]
Localisation updates from https://translatewiki.net.

3 weeks agoTest visibility
Pablo Brasero [Fri, 12 Dec 2025 16:12:46 +0000 (16:12 +0000)]
Test visibility

3 weeks agoMove heatmap setting to own profile settings page
Pablo Brasero [Fri, 12 Dec 2025 15:34:47 +0000 (15:34 +0000)]
Move heatmap setting to own profile settings page

3 weeks agoFirst stab at hiding the heatmap
Pablo Brasero [Tue, 9 Dec 2025 12:59:57 +0000 (12:59 +0000)]
First stab at hiding the heatmap

3 weeks agoAdd user setting to show/hide their heatmap
Pablo Brasero [Tue, 9 Dec 2025 12:59:57 +0000 (12:59 +0000)]
Add user setting to show/hide their heatmap

4 weeks agoDon't reinitialise i18n in maplibre code
Tom Hughes [Wed, 17 Dec 2025 19:07:45 +0000 (19:07 +0000)]
Don't reinitialise i18n in maplibre code

Fixes #6624.

4 weeks agoSend bulk user confirmations through the state machine
Tom Hughes [Wed, 17 Dec 2025 18:51:46 +0000 (18:51 +0000)]
Send bulk user confirmations through the state machine

4 weeks agoMerge remote-tracking branch 'upstream/pull/6613'
Tom Hughes [Wed, 17 Dec 2025 18:43:14 +0000 (18:43 +0000)]
Merge remote-tracking branch 'upstream/pull/6613'

4 weeks agoMerge remote-tracking branch 'upstream/pull/6564'
Tom Hughes [Wed, 17 Dec 2025 18:34:19 +0000 (18:34 +0000)]
Merge remote-tracking branch 'upstream/pull/6564'

4 weeks agoMerge remote-tracking branch 'upstream/pull/6623'
Tom Hughes [Wed, 17 Dec 2025 18:26:38 +0000 (18:26 +0000)]
Merge remote-tracking branch 'upstream/pull/6623'

4 weeks agoMerge remote-tracking branch 'upstream/pull/6628'
Tom Hughes [Wed, 17 Dec 2025 18:23:25 +0000 (18:23 +0000)]
Merge remote-tracking branch 'upstream/pull/6628'

4 weeks agoMerge remote-tracking branch 'upstream/pull/6627'
Tom Hughes [Wed, 17 Dec 2025 18:22:42 +0000 (18:22 +0000)]
Merge remote-tracking branch 'upstream/pull/6627'

4 weeks agoMerge remote-tracking branch 'upstream/pull/6625'
Tom Hughes [Wed, 17 Dec 2025 18:21:33 +0000 (18:21 +0000)]
Merge remote-tracking branch 'upstream/pull/6625'

4 weeks agoFix page name for OAuth app configuration
Andy Allan [Wed, 17 Dec 2025 17:36:41 +0000 (17:36 +0000)]
Fix page name for OAuth app configuration

This was changed in the UI in #5681 but not in the documentation

4 weeks agoRefactor turbo-frame element to avoid multiline conditionals inside html attribute
Andy Allan [Wed, 17 Dec 2025 17:01:09 +0000 (17:01 +0000)]
Refactor turbo-frame element to avoid multiline conditionals inside html attribute

While the original is perfectly valid erb, it's hard to read and hard for erblint to parse.

This refactor moves the multi-line conditional logic outside of the turbo-frame `src` html attribute.

4 weeks agoMerge pull request #6626 from gravitystorm/docker_healthcheck
Marwin Hochfelsner [Wed, 17 Dec 2025 16:13:52 +0000 (17:13 +0100)]
Merge pull request #6626 from gravitystorm/docker_healthcheck

Use a healthcheck to ensure the docker db container is active

4 weeks agoUse a healthcheck to ensure the docker db container is active
Andy Allan [Wed, 17 Dec 2025 15:36:46 +0000 (15:36 +0000)]
Use a healthcheck to ensure the docker db container is active

This is an extracted and reworked part of #6588