Use correct extension and type for avatar images attached to mails

Fixes #4147

Merge remote-tracking branch 'upstream/pull/4145'

Take exclude_place_ids from Nominatim results directly

Fixes #4137

Remove 'no home' message css from profile edit form

Remove unused user image css from profile edit form

Merge remote-tracking branch 'upstream/pull/4143'

Merge remote-tracking branch 'upstream/pull/4142'

Update bundle

Remove old rails error css

Expose changeset query limit values in api capabilities

Use max changeset query limit setting in tests

Move changeset query limit values to settings

Localisation updates from https://translatewiki.net.

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/4136'

Use hashes to define where..in sql queries

This is preferable to using SQL statements.

Add titles to issue pages

Use multiple columns for map controls if they don't fit vertically

Stretch login menu buttons in small nav mode

Merge remote-tracking branch 'upstream/pull/4131'

Merge pull request #4106 from tomhughes/diary-paging

Replace page numbers with ID based selection for diary indexes

Merge pull request #4111 from AntonKhorev/hidden-welcome-banner

Hide/show welcome banner with hidden attribute

Switch to bootstrap recommended viewport definition

Original version was introduced in 6674873478c9fe221d2fd78f76cabc6d4b03c0aa
and has not been changed since.

Google's PageSpeed Insights tool also flagged this up as an accessibility
issue, since it previously prohibited users zooming into the site.

Merge pull request #4112 from AntonKhorev/no-float-inside-sidebar

Remove unnecessary full-width float css from sidebar

Merge pull request #4125 from tomhughes/oauth-scopes

Only show granted permissions in the authorized application list

Merge pull request #4107 from tomhughes/diary-visibility

Allow administrators to see deleted diary entries

Merge pull request #4113 from AntonKhorev/no-w-100

Remove setting 100% width with w-100 where it's the default width

Merge pull request #4120 from AntonKhorev/no-deprecated-iframe-attrs

Remove deprecated attributes from share html

Update bundle

Localisation updates from https://translatewiki.net.

Only show granted permissions in the authorized application list

Fixes #4124

Merge remote-tracking branch 'upstream/pull/4114'

Merge remote-tracking branch 'upstream/pull/4115'

Merge remote-tracking branch 'upstream/pull/4110'

Merge remote-tracking branch 'upstream/pull/4118'

Merge remote-tracking branch 'upstream/pull/4119'

Merge remote-tracking branch 'upstream/pull/4116'

Remove deprecated attributes from share html

Remove resize css property from textarea

Remove display properties from share tabs

Bump eslint from 8.45.0 to 8.46.0

Bumps [eslint](https://github.com/eslint/eslint) from 8.45.0 to 8.46.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.45.0...v8.46.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Move map attribution print styles to print.scss

Remove unused 0 bottom margin from map ui css

Remove setting 100% width with w-100 where it's the default width

Remove unnecessary full-width float css from sidebar

Hide/show welcome banner with hidden attribute

Remove links to apps from OAuth2 authorizations page

Merge remote-tracking branch 'upstream/pull/4108'

Replace page numbers with ID based selection for diary indexes

Improve testing of paged access to trace lists

Disambiguate ID queries for tagged trace lists

Allow moderator to unhide diary entries as well as hide them

Allow administrators to see deleted diary entries

Simplify menu-icon css

Remove the duplicate display property, since it was force-overridden
by the `!important` keyword in the same definiton. This then makes the
`!important` keywords unnecessary. The menu-icon is floated, and
therefore can't be `inline-block`, so browsers were interpreting that
as `block` all along.

Remove unused parameter

Remove unused CSS

The browse_details CSS classes were removed in 30ab1e91da6710159285f354c24529bdeeb7fb64 and c4090bb150e0eb866151ba0477e50b0421d60527

Merge pull request #3933 from AntonKhorev/api-changesets-limit

Add limit parameter to api changesets query

Merge pull request #4089 from tomhughes/trace-paging

Replace page numbers with ID based selection for trace indexes

Update bundle

Localisation updates from https://translatewiki.net.

Replace page numbers with ID based selection for trace indexes

Localisation updates from https://translatewiki.net.

Fix new rubocop warnings

Update bundle

Merge remote-tracking branch 'upstream/pull/4097'

Merge remote-tracking branch 'upstream/pull/4095'

Merge remote-tracking branch 'upstream/pull/4094'

Consistent plural forms for browse.way.nodes_count

Without this, translatewiki's validator shows an error for English.

Bump eslint from 8.44.0 to 8.45.0

Bumps [eslint](https://github.com/eslint/eslint) from 8.44.0 to 8.45.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.44.0...v8.45.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump coverallsapp/github-action from 2.2.0 to 2.2.1

Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Remove default imagery blacklist

Merge remote-tracking branch 'upstream/pull/4093'

Block mapy.cz as non-approved imagery

Issue: https://github.com/openstreetmap/openstreetmap-website/issues/4085

Merge remote-tracking branch 'upstream/pull/4092'

Update to iD v2.26.2

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/4091'

Bump osm-community-index from 5.5.3 to 5.5.4

Bumps [osm-community-index](https://github.com/osmlab/osm-community-index) from 5.5.3 to 5.5.4.
- [Release notes](https://github.com/osmlab/osm-community-index/releases)
- [Changelog](https://github.com/osmlab/osm-community-index/blob/main/CHANGELOG.md)
- [Commits](https://github.com/osmlab/osm-community-index/compare/v5.5.3...v5.5.4)

---
updated-dependencies:
- dependency-name: osm-community-index
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/4090'

Update to iD v2.26.1

Merge remote-tracking branch 'upstream/pull/4088'

Merge remote-tracking branch 'upstream/pull/4086'

Avoid using sprockets for combining stylesheets

There are two options for combining stylesheets, using sprockets
(via `require` statements) or using sass (via `@import` statements).

This commit switches to using `@import` statements throughout, to
avoid a bug with libsass that prevents us from using bootstrap 5.2+

See https://github.com/sass/sassc-rails/issues/174

Since R2 is not triggered when `@import`ing a file, we need to
switch the top-level stylesheet names to include the extension. We
can also take the opportunity to remove a level of indirection,
along with removing symlinks which cause problems on some platforms.

* https://github.com/openstreetmap/openstreetmap-website/issues/3984
* https://github.com/openstreetmap/openstreetmap-website/issues/3422

Update to iD v2.26.0

Update bundle

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/4078'

Bump sanitize from 6.0.1 to 6.0.2

Bumps [sanitize](https://github.com/rgrove/sanitize) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/rgrove/sanitize/releases)
- [Changelog](https://github.com/rgrove/sanitize/blob/main/HISTORY.md)
- [Commits](https://github.com/rgrove/sanitize/compare/v6.0.1...v6.0.2)

---
updated-dependencies:
- dependency-name: sanitize
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/4077'

Merge remote-tracking branch 'upstream/pull/4076'

Avoid using the zero key for pluralisation in English

This makes it impossible to translate to other languages that use the
`zero:` key, e.g. for other numbers that end in zero.

An alternative approach would be possible in future, when ruby-i18n
and rails and translatewiki all have full support for `0:` and `1:` keys.

Fixes #3997

Expand raw html checks to all translation files

This closes a potential security issue, where unreviewed html could
be added via translation files.

Merge remote-tracking branch 'upstream/pull/4075'

Remove obsolete pt-BR.yml translation file

Translatewiki now pushes pt-BR to pt.yml, which is used for both
pt and pt-BR.

Fixes #3670.

Update bundle

Localisation updates from https://translatewiki.net.

Update bundle

Update to rails 7.0.6

Merge remote-tracking branch 'upstream/pull/4074'