dependabot[bot] [Wed, 5 Aug 2026 23:16:00 +0000 (23:16 +0000)]
Bump the dependencies group with 4 updates
Bumps the dependencies group with 4 updates: [dalli](https://github.com/petergoldstein/dalli), [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby), [herb](https://github.com/marcoroth/herb) and [overcommit](https://github.com/sds/overcommit).
Updates `dalli` from 5.0.5 to 5.0.6
- [Release notes](https://github.com/petergoldstein/dalli/releases)
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/petergoldstein/dalli/compare/v5.0.5...v5.0.6)
Updates `aws-sdk-s3` from 1.228.1 to 1.228.2
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)
Updates `herb` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/marcoroth/herb/releases)
- [Commits](https://github.com/marcoroth/herb/compare/v0.10.2...v0.10.3)
Updates `overcommit` from 0.71.0 to 0.72.0
- [Release notes](https://github.com/sds/overcommit/releases)
- [Changelog](https://github.com/sds/overcommit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sds/overcommit/compare/v0.71.0...v0.72.0)
dependabot[bot] [Wed, 5 Aug 2026 23:13:06 +0000 (23:13 +0000)]
Bump the dependencies group with 4 updates
Bumps the dependencies group with 4 updates: [osm-community-index](https://github.com/osmlab/osm-community-index), [@herb-tools/linter](https://github.com/marcoroth/herb/tree/HEAD/javascript/packages/linter), [@types/leaflet](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/leaflet) and [globals](https://github.com/sindresorhus/globals).
Updates `osm-community-index` from 6.1.1 to 6.2.0
- [Release notes](https://github.com/osmlab/osm-community-index/releases)
- [Changelog](https://github.com/osmlab/osm-community-index/blob/main/CHANGELOG.md)
- [Commits](https://github.com/osmlab/osm-community-index/compare/v6.1.1...v6.2.0)
Updates `@herb-tools/linter` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/marcoroth/herb/releases)
- [Commits](https://github.com/marcoroth/herb/commits/v0.10.3/javascript/packages/linter)
Updates `@types/leaflet` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/leaflet)
Updates `globals` from 17.8.0 to 17.9.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.8.0...v17.9.0)
SomSamantray [Wed, 5 Aug 2026 14:01:28 +0000 (19:31 +0530)]
fix(i18n): make future-tense block time text translatable
block_short_time_in_future rendered its relative-duration text via
time_ago_in_words with no :scope, falling back to Rails' bundled
gem-default locale data instead of the app's own translatable
config/locales files (issue #5769). Mirror the existing
distance_in_words_ago pattern used by block_short_time_in_past: add a
symmetric distance_in_words_in scope and point the helper at it, and
drop the hardcoded literal "in " from time_in_future_title so the
direction word is fully translator-controlled, like the past-tense
string already is.
Andy Allan [Wed, 5 Aug 2026 13:12:48 +0000 (14:12 +0100)]
Select contributor terms from a list of the available jurisdictions
Rather than probing the filesystem with an interpolated path and falling
back when it doesn't exist, check the country code against the set of
files in config/legales, so that only known-good values are ever joined
onto a path. This also covers codes returned by OSM.ip_to_country, which
the controller's parameter validation doesn't apply to.
Andy Allan [Wed, 5 Aug 2026 13:12:40 +0000 (14:12 +0100)]
Anchor legale parameter validation to the whole string
Ruby's ^ and $ match at line boundaries, and rails_param tests the
format with a bare =~, so a value such as "../../config/settings\nGB"
satisfied /^[A-Z]+$/.
Matt Van Horn [Wed, 5 Aug 2026 06:21:56 +0000 (23:21 -0700)]
Fix social link form resubmission after removing invalid link (#6945)
When a social link with validation errors is removed via the "Remove"
button, the row is hidden with d-none but the input retains its
required attribute. This prevents form submission because HTML5
validation rejects hidden required fields that cannot be focused.
Strip the required attribute from the text input when marking a social
link for destruction so the form can be resubmitted.
Pablo Brasero [Tue, 14 Jul 2026 17:23:00 +0000 (18:23 +0100)]
Avoid showing very long pieces of text in notifications
I am unsure about this one. I am relying on `RichText#truncate_html`, to avoid having to put together my own truncation facility. My problem is that I find that method to be too coarse-grained as it works by removing entire HTML elements:
- If the text starts with a small paragraph, then a long one, it may only show the first.
- If it starts with a long paragraph, it may not show anything, or it will show the whole paragraph.
I think this is confusing. Note that can't just use Rails's own `String#truncate` as this is a `RichText`, not a `String`, and then we'd have to worry about truncating the HTML.
Having said that: `#truncate_html` is right there, and it is what we use for diary entries. So I guess let's reuse it, leaving it for a future contribution to rework it into something better, if there's inclination.
Lee Kindness [Tue, 4 Aug 2026 06:21:34 +0000 (07:21 +0100)]
Build export download links from locale keys (#7271)
The four bulk download links on the export page had their URLs
hardcoded in the view, with the Overpass one spelt out a second
time in export.js so the bbox could be appended on each map move.
Follow the pattern already used by the help page and drive the list
from locale keys, adding a URL key alongside the existing title and
description for each source. This removes the duplication between
the view and the JS, and allows the URLs to be localised or pointed
elsewhere by deployments that are not openstreetmap.org.
export.js no longer needs to know the Overpass URL: it sets the
search component of the link's existing href rather than rebuilding
the whole thing.
The wiki link now points to Downloading_data, the target of the
redirect that the previous /wiki/Download URL followed.
settings.overpass_url is deliberately untouched: it is the query
server's interpreter endpoint, a separate concern from the export
download link.
Bumps [msgpack](https://github.com/msgpack/msgpack-ruby) from 1.8.1 to 1.8.2.
- [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog)
- [Commits](https://github.com/msgpack/msgpack-ruby/compare/v1.8.1...v1.8.2)
Updates `aws-sdk-s3` from 1.228.0 to 1.228.1
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)
Updates `danger` from 9.6.0 to 9.6.1
- [Release notes](https://github.com/danger/danger/releases)
- [Changelog](https://github.com/danger/danger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/danger/danger/compare/v9.6.0...v9.6.1)
Updates `simplecov` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](https://github.com/simplecov-ruby/simplecov/compare/v1.0.2...v1.0.3)
Updates `annotaterb` from 4.23.0 to 4.24.0
- [Changelog](https://github.com/drwl/annotaterb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/drwl/annotaterb/compare/v4.23.0...v4.24.0)
Updates `database_consistency` from 3.0.6 to 3.0.8
- [Changelog](https://github.com/djezzzl/database_consistency/blob/master/CHANGELOG.md)
- [Commits](https://github.com/djezzzl/database_consistency/compare/v3.0.6...v3.0.8)
Bump the dependencies group across 1 directory with 4 updates
Bumps the dependencies group with 4 updates in the / directory: [osm-community-index](https://github.com/osmlab/osm-community-index), [terra-draw](https://github.com/JamesLMilner/terra-draw), [eslint](https://github.com/eslint/eslint) and [globals](https://github.com/sindresorhus/globals).
Updates `osm-community-index` from 6.0.0 to 6.1.1
- [Release notes](https://github.com/osmlab/osm-community-index/releases)
- [Changelog](https://github.com/osmlab/osm-community-index/blob/main/CHANGELOG.md)
- [Commits](https://github.com/osmlab/osm-community-index/compare/v6.0.0...v6.1.1)
Updates `terra-draw` from 1.30.1 to 1.32.2
- [Release notes](https://github.com/JamesLMilner/terra-draw/releases)
- [Changelog](https://github.com/JamesLMilner/terra-draw/blob/main/release.js)
- [Commits](https://github.com/JamesLMilner/terra-draw/compare/terra-draw@1.30.1...terra-draw@1.32.2)
Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v10.7.0...v10.8.0)
Updates `globals` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.7.0...v17.8.0)
Tom Hughes [Wed, 29 Jul 2026 19:46:14 +0000 (20:46 +0100)]
Remove pessimistic node moduile version constraints
We were ignoring them in dependabot so they aren't really necessary.
We can add constraints when we run into specific problems, but
otherwise we should be optimistic that, in most cases, the new version
of a module will either work fine as-is or will be flagged up by CI.
Exceptions are iD which is updated by manual PR and maplibre where
version 6.x is not currently usable by us.
projects / rails.git / log