dependabot[bot] [Wed, 5 Aug 2026 23:16:00 +0000 (23:16 +0000)]
Bump the dependencies group with 4 updates
Bumps the dependencies group with 4 updates: [dalli](https://github.com/petergoldstein/dalli), [aws-sdk-s3](https://github.com/aws/aws-sdk-ruby), [herb](https://github.com/marcoroth/herb) and [overcommit](https://github.com/sds/overcommit).
Updates `dalli` from 5.0.5 to 5.0.6
- [Release notes](https://github.com/petergoldstein/dalli/releases)
- [Changelog](https://github.com/petergoldstein/dalli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/petergoldstein/dalli/compare/v5.0.5...v5.0.6)
Updates `aws-sdk-s3` from 1.228.1 to 1.228.2
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)
Updates `herb` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/marcoroth/herb/releases)
- [Commits](https://github.com/marcoroth/herb/compare/v0.10.2...v0.10.3)
Updates `overcommit` from 0.71.0 to 0.72.0
- [Release notes](https://github.com/sds/overcommit/releases)
- [Changelog](https://github.com/sds/overcommit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sds/overcommit/compare/v0.71.0...v0.72.0)
dependabot[bot] [Wed, 5 Aug 2026 23:13:06 +0000 (23:13 +0000)]
Bump the dependencies group with 4 updates
Bumps the dependencies group with 4 updates: [osm-community-index](https://github.com/osmlab/osm-community-index), [@herb-tools/linter](https://github.com/marcoroth/herb/tree/HEAD/javascript/packages/linter), [@types/leaflet](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/leaflet) and [globals](https://github.com/sindresorhus/globals).
Updates `osm-community-index` from 6.1.1 to 6.2.0
- [Release notes](https://github.com/osmlab/osm-community-index/releases)
- [Changelog](https://github.com/osmlab/osm-community-index/blob/main/CHANGELOG.md)
- [Commits](https://github.com/osmlab/osm-community-index/compare/v6.1.1...v6.2.0)
Updates `@herb-tools/linter` from 0.10.2 to 0.10.3
- [Release notes](https://github.com/marcoroth/herb/releases)
- [Commits](https://github.com/marcoroth/herb/commits/v0.10.3/javascript/packages/linter)
Updates `@types/leaflet` from 1.9.21 to 1.9.22
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/leaflet)
Updates `globals` from 17.8.0 to 17.9.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.8.0...v17.9.0)
Andy Allan [Wed, 5 Aug 2026 13:12:48 +0000 (14:12 +0100)]
Select contributor terms from a list of the available jurisdictions
Rather than probing the filesystem with an interpolated path and falling
back when it doesn't exist, check the country code against the set of
files in config/legales, so that only known-good values are ever joined
onto a path. This also covers codes returned by OSM.ip_to_country, which
the controller's parameter validation doesn't apply to.
Andy Allan [Wed, 5 Aug 2026 13:12:40 +0000 (14:12 +0100)]
Anchor legale parameter validation to the whole string
Ruby's ^ and $ match at line boundaries, and rails_param tests the
format with a bare =~, so a value such as "../../config/settings\nGB"
satisfied /^[A-Z]+$/.
Matt Van Horn [Wed, 5 Aug 2026 06:21:56 +0000 (23:21 -0700)]
Fix social link form resubmission after removing invalid link (#6945)
When a social link with validation errors is removed via the "Remove"
button, the row is hidden with d-none but the input retains its
required attribute. This prevents form submission because HTML5
validation rejects hidden required fields that cannot be focused.
Strip the required attribute from the text input when marking a social
link for destruction so the form can be resubmitted.
Lee Kindness [Tue, 4 Aug 2026 06:21:34 +0000 (07:21 +0100)]
Build export download links from locale keys (#7271)
The four bulk download links on the export page had their URLs
hardcoded in the view, with the Overpass one spelt out a second
time in export.js so the bbox could be appended on each map move.
Follow the pattern already used by the help page and drive the list
from locale keys, adding a URL key alongside the existing title and
description for each source. This removes the duplication between
the view and the JS, and allows the URLs to be localised or pointed
elsewhere by deployments that are not openstreetmap.org.
export.js no longer needs to know the Overpass URL: it sets the
search component of the link's existing href rather than rebuilding
the whole thing.
The wiki link now points to Downloading_data, the target of the
redirect that the previous /wiki/Download URL followed.
settings.overpass_url is deliberately untouched: it is the query
server's interpreter endpoint, a separate concern from the export
download link.
Bumps [msgpack](https://github.com/msgpack/msgpack-ruby) from 1.8.1 to 1.8.2.
- [Changelog](https://github.com/msgpack/msgpack-ruby/blob/master/ChangeLog)
- [Commits](https://github.com/msgpack/msgpack-ruby/compare/v1.8.1...v1.8.2)
Updates `aws-sdk-s3` from 1.228.0 to 1.228.1
- [Release notes](https://github.com/aws/aws-sdk-ruby/releases)
- [Changelog](https://github.com/aws/aws-sdk-ruby/blob/version-3/gems/aws-sdk-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-ruby/commits)
Updates `danger` from 9.6.0 to 9.6.1
- [Release notes](https://github.com/danger/danger/releases)
- [Changelog](https://github.com/danger/danger/blob/master/CHANGELOG.md)
- [Commits](https://github.com/danger/danger/compare/v9.6.0...v9.6.1)
Updates `simplecov` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](https://github.com/simplecov-ruby/simplecov/compare/v1.0.2...v1.0.3)
Updates `annotaterb` from 4.23.0 to 4.24.0
- [Changelog](https://github.com/drwl/annotaterb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/drwl/annotaterb/compare/v4.23.0...v4.24.0)
Updates `database_consistency` from 3.0.6 to 3.0.8
- [Changelog](https://github.com/djezzzl/database_consistency/blob/master/CHANGELOG.md)
- [Commits](https://github.com/djezzzl/database_consistency/compare/v3.0.6...v3.0.8)
Bump the dependencies group across 1 directory with 4 updates
Bumps the dependencies group with 4 updates in the / directory: [osm-community-index](https://github.com/osmlab/osm-community-index), [terra-draw](https://github.com/JamesLMilner/terra-draw), [eslint](https://github.com/eslint/eslint) and [globals](https://github.com/sindresorhus/globals).
Updates `osm-community-index` from 6.0.0 to 6.1.1
- [Release notes](https://github.com/osmlab/osm-community-index/releases)
- [Changelog](https://github.com/osmlab/osm-community-index/blob/main/CHANGELOG.md)
- [Commits](https://github.com/osmlab/osm-community-index/compare/v6.0.0...v6.1.1)
Updates `terra-draw` from 1.30.1 to 1.32.2
- [Release notes](https://github.com/JamesLMilner/terra-draw/releases)
- [Changelog](https://github.com/JamesLMilner/terra-draw/blob/main/release.js)
- [Commits](https://github.com/JamesLMilner/terra-draw/compare/terra-draw@1.30.1...terra-draw@1.32.2)
Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v10.7.0...v10.8.0)
Updates `globals` from 17.7.0 to 17.8.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.7.0...v17.8.0)
Tom Hughes [Wed, 29 Jul 2026 19:46:14 +0000 (20:46 +0100)]
Remove pessimistic node moduile version constraints
We were ignoring them in dependabot so they aren't really necessary.
We can add constraints when we run into specific problems, but
otherwise we should be optimistic that, in most cases, the new version
of a module will either work fine as-is or will be flagged up by CI.
Exceptions are iD which is updated by manual PR and maplibre where
version 6.x is not currently usable by us.
projects / rails.git / log