Monkey patch oauth gem to avoid use of deprecated URI.unescape

Handle UTF-8 correctly in monkey patched OAuth::Helper.escape

Fixes #3185

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3183'

Bump eslint from 7.24.0 to 7.25.0

Bumps [eslint](https://github.com/eslint/eslint) from 7.24.0 to 7.25.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.24.0...v7.25.0)

Signed-off-by: dependabot[bot] <support@github.com>

Fix some ruby 3 compatibility issues

Update deadlock_retry gem for ruby 3 compatibility

Monkey patch oauth gem to avoid use of deprecated URI.escape

Drop dynamic_form gem which is no longer required

Drop version constraint for debug_inspector

Localisation updates from https://translatewiki.net.

Fix new rubocop warnings

Update bundle

Localisation updates from https://translatewiki.net.

Localisation updates from https://translatewiki.net.

Merge branch 'pull/3164'

Add tests for routing and to ensure output format

This avoids the tests passing if the json output is an array of kv pairs,
instead of the desired hash of attributes.

Update bundle

Merge remote-tracking branch 'upstream/pull/3174'

Bump actions/cache from v2.1.4 to v2.1.5

Bumps [actions/cache](https://github.com/actions/cache) from v2.1.4 to v2.1.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.4...1a9e2138d905efd099035b49d8b7a3888c653ca8)

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/3172'

Localisation updates from https://translatewiki.net.

Bump eslint from 7.23.0 to 7.24.0

Bumps [eslint](https://github.com/eslint/eslint) from 7.23.0 to 7.24.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.23.0...v7.24.0)

Signed-off-by: dependabot[bot] <support@github.com>

Added test for user prefs JSON response

Update bundle

Localisation updates from https://translatewiki.net.

Merge pull request #1558 from plarus/master

Add start url and indicate minimal-ui is sufficient when added as a PWA.

Added root elements and dict support for preferences response

Update manifest.json.erb

Change for minimal-ui

Merge remote-tracking branch 'upstream/pull/3166'

Merge remote-tracking branch 'upstream/pull/3165'

Add missing root attributes to User#show and User#index json responses

Move confirmation methods into ConfirmationsController

Split password reset functionality into PasswordsController

Updated JSON response format per feedback

Added JSON support to user preferences

Update bundle

Localisation updates from https://translatewiki.net.

Don't allow deleted users to be confirmed

Localisation updates from https://translatewiki.net.

Add additional limits on sending messages

Additional limits apply to new accounts and accounts with
unresolved issues reported against them.

Fixes #3135

Merge remote-tracking branch 'upstream/pull/3157'

Switch GPX MIME type detection to use marcel

Update to rails 6.0.3.6

Add missing callbacks to session controller

Localisation updates from https://translatewiki.net.

Add test case to ensure clicking on the registration link takes you to the right page

Merge remote-tracking branch 'upstream/pull/3157'

Fix registration link

Fixes #3156

Merge remote-tracking branch 'upstream/pull/3155'

Bump eslint from 7.22.0 to 7.23.0

Bumps [eslint](https://github.com/eslint/eslint) from 7.22.0 to 7.23.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.22.0...v7.23.0)

Signed-off-by: dependabot[bot] <support@github.com>

Update bundle

Merge remote-tracking branch 'upstream/pull/3152'

Prevent addition of style attributes to all elements

Merge remote-tracking branch 'upstream/pull/3149'

Strip away class attributes from sanitized outputs

There's a lot of shenanigans that are possible when you can apply
arbitrary classes to the rendered output.

Rework configuration to use Sanitize::Config.merge

This is the recommended approach, and works better when dealing with deeper attributes

Add tests for richtext table classes

Merge remote-tracking branch 'upstream/pull/3147'

Merge remote-tracking branch 'upstream/pull/3148'

Bundle update for mimemagic yankage

Move sessions-related tests out of UsersControllerTest

Refactor login/logout into sessions controller

Certain controller methods are shared with oauth-based logins, and these have been
moved to a concern.

Fix new rubocop warnings

Update bundle

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3142'

Merge remote-tracking branch 'upstream/pull/3144'

Bump qs from 6.10.0 to 6.10.1

Bumps [qs](https://github.com/ljharb/qs) from 6.10.0 to 6.10.1.
- [Release notes](https://github.com/ljharb/qs/releases)
- [Changelog](https://github.com/ljharb/qs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.10.0...v6.10.1)

Signed-off-by: dependabot[bot] <support@github.com>

Added place=archipelago to en.yml

Added natural=atoll to en.yml

Merge remote-tracking branch 'upstream/pull/3141'

Handle errors checking for gravatars

Bump qs from 6.9.6 to 6.10.0

Bumps [qs](https://github.com/ljharb/qs) from 6.9.6 to 6.10.0.
- [Release notes](https://github.com/ljharb/qs/releases)
- [Changelog](https://github.com/ljharb/qs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.9.6...v6.10.0)

Signed-off-by: dependabot[bot] <support@github.com>

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/3140'

Use list-inline to achieve spacing between elements on a line

This is a better solution than spans and margins. Additionally, rework
to use mb-* instead of my-* (bootstrap advises against using margin-top)
and get rid of <br>s by using paragraphs instead.

Merge remote-tracking branch 'upstream/pull/3124'

Merge remote-tracking branch 'upstream/pull/3138'

Merge remote-tracking branch 'upstream/pull/3139'

Refactor traces list display

Ideas taken from #3036

Use .add method for adding errors

This avoids a deprecation warning on rails 6.1

Merge branch 'pull/3112'

Remove unused translations

Merge remote-tracking branch 'upstream/pull/3137'

Update code example to follow rubocop recommendations

Just for consistency with what you would see elsewhere in the codebase

Update bundle

Merge remote-tracking branch 'upstream/pull/3133'

Merge remote-tracking branch 'upstream/pull/3132'

Reject referers that do not include an absolute path

Localisation updates from https://translatewiki.net.

Bump eslint from 7.21.0 to 7.22.0

Bumps [eslint](https://github.com/eslint/eslint) from 7.21.0 to 7.22.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.21.0...v7.22.0)

Signed-off-by: dependabot[bot] <support@github.com>

Bump leaflet.locatecontrol from 0.72.2 to 0.73.0

Bumps [leaflet.locatecontrol](https://github.com/domoritz/leaflet-locatecontrol) from 0.72.2 to 0.73.0.
- [Release notes](https://github.com/domoritz/leaflet-locatecontrol/releases)
- [Changelog](https://github.com/domoritz/leaflet-locatecontrol/blob/gh-pages/CHANGELOG.md)
- [Commits](https://github.com/domoritz/leaflet-locatecontrol/compare/v0.72.2...v0.73.0)

Signed-off-by: dependabot[bot] <support@github.com>

Allow form submission to any location from the login page

This allows openid login to work on browsers like chrome that enforce
the form-action rule for redirect POST requests.

Fixes #3131

Merge remote-tracking branch 'upstream/pull/3130'

Remove GL and SH cantonal WMS servers from black list

The previously restrictively licensed material is now available on relatively open terms directly from swisstopo per 1. March 2021, so these entries can be removed.

Chasing parse errors

Added missing translation

Switched to hash rockets syntax per erblint feedback

Replaced H2 messages header links with Bootstrap nav links

Following suggestion from https://github.com/openstreetmap/openstreetmap-website/issues/2962#issuecomment-768985393