Merge remote-tracking branch 'upstream/pull/3279'

Merge remote-tracking branch 'upstream/pull/3278'

Fix redirect to terms path when not logged in

This was missed during #3147 since it wasn't covered by a test.

Switch to html5-compatible fragment encoding for wikipedia URLs

Fixes #3269

In the HTML4 days, fragments weren't allowed to have `%` signs, so
mediawiki generated fragments with `%` replaced with a `.`

In HTML5, fragments can have % encoded characters, and so in 2017
wikipedia switched over to this for their automatically generated
fragments, while keeping the "dot" versions available as a fallback.

However, we have been automatically converting all fragments,
including manually specified anchors that do not have "dot"-encoded
versions available. So we can now simplify everything by just using
the HTML5 percent-encoded fragments.

Merge remote-tracking branch 'upstream/pull/3277'

Use our darkgrey for bootstrap secondary colour

Our blue is less saturated and lighter, and so the bootstrap-default
secondary colour is too dark and too saturated when beside our
primary buttons.

Merge pull request #3268 from tomhughes/capitalisation

Improve capitalisation of page titles

Merge remote-tracking branch 'upstream/pull/3276'

Add --ignore-engines for yarn in the Dockerfile

Refs #3275

See also 102f3a6668665774f069a8116a251a28c3c5c0cc

Merge remote-tracking branch 'upstream/pull/3274'

Enable test for showing flash message in the new language

Add missing autocomplete attributes

Pass --ignore-engines to yarn

Update bundle

Use terser for javascript compression to get ES6 support

Fix locale matching for iD

Update path to js-cookie

Merge remote-tracking branch 'upstream/pull/3271'

Bump js-cookie from 2.2.1 to 3.0.0

Bumps [js-cookie](https://github.com/js-cookie/js-cookie) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/js-cookie/js-cookie/releases)
- [Changelog](https://github.com/js-cookie/js-cookie/blob/master/.release-it.json)
- [Commits](https://github.com/js-cookie/js-cookie/compare/v2.2.1...v3.0.0)

---
updated-dependencies:
- dependency-name: js-cookie
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/3270'

iD api url update

Update to iD v2.20.0

Localisation updates from https://translatewiki.net.

Improve capitalisation of page titles

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3257'

Use an unstyled list for showing the languages

Ensure that flash message is shown in the updated language

Merge remote-tracking branch 'upstream/pull/3233'

Merge remote-tracking branch 'upstream/pull/3265'

Remove incorrectly spelled helper_method

The spelling of language is wrong here, and the correct version
is already there further down at the preferred_language method definition

spelling: unknown

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: uniqueness

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: success

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: shouldn't

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: nonexistent

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: modify

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: layman's

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: languages

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: kindergarten

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: forbidden

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: extinguisher

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: beekeeper

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: abcdefghijklmnopqrstuvwxyz

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

spelling: (self reference is superfluous)

Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>

Merge remote-tracking branch 'upstream/pull/3264'

Ensure the heading text appears above the illustration

The easiest way to do this is to make the text a child of the div
with the background image. The change to min-size is so that if
the text wraps often enough on narrow screens, the header expands
vertically rather than the text spilling over.

Fixes #3259

Merge remote-tracking branch 'upstream/pull/3263'

Treat association between users and OAuth 2 applications as polymorphic

Refactor to use a heading class for height when using header-illustrations

This fixes a glitch highlighted in #3259, where the css class stopped applying
when the view was moved to a different controller.

We're moving to having each view responsible for their layout, and commonly having
override classes explicitly in the relevant views. So we can follow that pattern here.

Fix various code comments

These were found as part of #3233

Merge remote-tracking branch 'upstream/pull/3237'

Update bundle

Merge remote-tracking branch 'upstream/pull/3262'

Bump eslint from 7.30.0 to 7.31.0

Bumps [eslint](https://github.com/eslint/eslint) from 7.30.0 to 7.31.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.30.0...v7.31.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3251'

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3258'

Ensure message destroy button has danger colour when showing the message, and add button to show page when viewing sent messages

Ensure the message title shows in the heading for both sent and received messages

I'm not sure why they were ever different.

Add a title in the heading to match the main menu text

Convert mailbox navigation to use tabs

Move profile-related settings to their own form

Refs #3167

Remove code complexity around resetting language preferences

This was originally introduced since we saved the user and showed
the result on the same action. Now that the preferences controller
saves and redirects, the user model and associated language preferences
are reloaded between requests, and this code is no longer required.

Split user preferences into a separate page

Refs #3167

Update bundle

Localisation updates from https://translatewiki.net.

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3253'

Bump coverallsapp/github-action from 1.1.2 to 1.1.3

Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 1.1.2 to 1.1.3.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/v1.1.2...1.1.3)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Allow cross origin access to OAuth 2 token endpoints

Allow cross origin access to trace data

Fixes #3252

Update bundle

Allow acls to match on parent domains

Added historic=rune_stone to en.yml

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3247'

Bump eslint from 7.29.0 to 7.30.0

Bumps [eslint](https://github.com/eslint/eslint) from 7.29.0 to 7.30.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.29.0...v7.30.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/3246'

Update banner FAQ.

This adds a contrast requirement for the upper-right corner so the
'X' can be seen. It also adds a requirement that PRs be created
before the banner needs to be shown, in order to allow for proper
review.

Check that the permission is non-zero

Fixes #3241

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3240'

Merge remote-tracking branch 'upstream/pull/3239'

Refactor About header to use bootstrap and flex

This reduces the amount of custom CSS required for the layout, and
makes it responsive on small screen sizes.

Alight the max-width of the content to one of the bootstrap breakpoints

This makes various things easier to reason about, as well as making
some grid things easier too.

Use bootstrap font family

This contains and expanded list of fonts, covering more platforms
and edge cases than ours, so there's no need to override.

Remove some default styling from body

These mirror, either exactly or pretty close to exactly, what is set
by the bootstrap reboot style, so there's no need for us to duplicate.

Remove some references to webmaster

Fix some broken translation lookups

Fix new erblint warnings

Fix new rubocop warnings

Update bundle

Localisation updates from https://translatewiki.net.

Switch web site to use OAuth 2

Merge remote-tracking branch 'upstream/pull/3235'

Make /api/0.6/permissions work for OAuth 2 clients

Bump leaflet.locatecontrol from 0.73.0 to 0.74.0

Bumps [leaflet.locatecontrol](https://github.com/domoritz/leaflet-locatecontrol) from 0.73.0 to 0.74.0.
- [Release notes](https://github.com/domoritz/leaflet-locatecontrol/releases)
- [Changelog](https://github.com/domoritz/leaflet-locatecontrol/blob/gh-pages/CHANGELOG.md)
- [Commits](https://github.com/domoritz/leaflet-locatecontrol/compare/v0.73.0...v0.74.0)

---
updated-dependencies:
- dependency-name: leaflet.locatecontrol
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Restore browse-section class to changeset view

Fixes #3234