Bump rexml from 3.2.6 to 3.2.8

Bumps [rexml](https://github.com/ruby/rexml) from 3.2.6 to 3.2.8.
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](https://github.com/ruby/rexml/compare/v3.2.6...v3.2.8)

---
updated-dependencies:
- dependency-name: rexml
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #4803 from tomhughes/preference-encoding

Fix exception uploading a unicode preference value

Merge remote-tracking branch 'upstream/pull/4802'

Treat the body as UTF-8 for user_preferences#update

Test unicode values in user preference keys and values

Localisation updates from https://translatewiki.net.

Merge pull request #4800 from AntonKhorev/welcome-stack

Stack welcome page columns on small screens

Merge pull request #4680 from tomhughes/validate-page-numbers

Add parameter validation to pagination

Stack welcome page columns on small screens

Make it similar to the fixthemap page.

Remove groups

Remove transforms from groups

Merge pull request #4633 from tomhughes/trace-images

Trace image cleanups

Remove transforms from circles

Remove fill rule style

Merge pull request #4496 from tomhughes/disabled-auth-error

Return an error when a disabled authentication mechanism is used

Remove line join styles for circles

Merge remote-tracking branch 'upstream/pull/4798'

Merge remote-tracking branch 'upstream/pull/4797'

Merge remote-tracking branch 'upstream/pull/4796'

Merge remote-tracking branch 'upstream/pull/4794'

Convert note markers to SVG

Convert menu icon to SVG

Improve alignment of text and images on welcome page

Convert welcome sprite to SVG

Convert routing sprite to SVG

Lock multi_xml to 0.6 for ruby 3.0 compatibility

Merge remote-tracking branch 'upstream/pull/4791'

Update bundle

Add warnings when creating notes anonymously

Merge pull request #4790 from AntonKhorev/docs-https

Use https links in documentation

Update bundler link

Use https links in documentation

Merge remote-tracking branch 'upstream/pull/4786'

Merge remote-tracking branch 'upstream/pull/4785'

Merge remote-tracking branch 'upstream/pull/4784'

Merge remote-tracking branch 'upstream/pull/4783'

Remove unused loading spinner image

Localisation updates from https://translatewiki.net.

Remove unused small openid icon

Remove unused myOpenID icon

Remove unused map zoom icons

Merge remote-tracking branch 'upstream/pull/4782'

Merge remote-tracking branch 'upstream/pull/4781'

Remove unused map sprite image

Use bg-body in "log in / sign up to access" messages

Stop login/signup tab bar getting reversed with RTL languages

Fixes #4780

Really remove login.live.com from CSP allow list

Merge remote-tracking branch 'upstream/pull/4779'

Merge remote-tracking branch 'upstream/pull/4778'

Fix CSP failures for Microsoft social sign-in

Replace login.live.com with login.microsoftonline.com in CSP allow list.

The URL changed with the move from using the omniauth-windowslive plugin
to the omniauth-microsoft_graph plugin but wasn't noticed until now.

Use consistent sizing for social signup buttons

Merge remote-tracking branch 'upstream/pull/4776'

Merge remote-tracking branch 'upstream/pull/4774'

Remove border attribute from <img> on Copyright page

Localisation updates from https://translatewiki.net.

Bump coverallsapp/github-action from 2.2.3 to 2.3.0

Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.2.3 to 2.3.0.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/v2.2.3...v2.3.0)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/4764'

Merge remote-tracking branch 'upstream/pull/4772'

Merge remote-tracking branch 'upstream/pull/4771'

Merge remote-tracking branch 'upstream/pull/4770'

Merge remote-tracking branch 'upstream/pull/4768'

Remove bs-custom-file-input javascript plugin

Make blank role icons transparent

Lighten moderator icon color

Lighten Leaflet scale control borders in dark mode

Adapt Leaflet scale and attribution controls to dark mode

Pin browser to versions that support ruby 3.0

Merge remote-tracking branch 'upstream/pull/4762'

Update bundle

Delete role icon files

Use inline svgs for moderator scope icons

Use inline svgs for user role icons

Merge remote-tracking branch 'upstream/pull/4759'

Localisation updates from https://translatewiki.net.

Use inline svg for notice icons

Allows to set fill to currentColor which adapts to dark mode.

Merge remote-tracking branch 'upstream/pull/4696'

Remove the arm pointing to the new user registration form

The arm has a white shadow that doesn't look good in dark mode.

Merge remote-tracking branch 'upstream/pull/4757'

Simplify message paths in tests

Merge remote-tracking branch 'upstream/pull/4455'

Improve flash message handling in users#new

Only show the duplicate email message if we actually have errors
logged against the email field, and then show it as a warning.

In all other cases we show the generic informational hint about
social logins and pre-existing accounts.

Merge remote-tracking branch 'upstream/pull/4753'

Merge remote-tracking branch 'upstream/pull/4752'

Merge remote-tracking branch 'upstream/pull/4751'

Remove tests for message paths without ids

These tests don't fail because they reuse ids from previous requests.

Redirect to inbox after marking a message as read/unread disregarding referer

Avoids staying on the message page after the "Mark as unread" button is clicked and immediately reading the message again.

Rename unread_message to message in messages controller test

There's only one message in the affected test methods. That message becomes read during the test.

Bump eslint from 9.1.1 to 9.2.0

Bumps [eslint](https://github.com/eslint/eslint) from 9.1.1 to 9.2.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v9.1.1...v9.2.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/4747'

Merge remote-tracking branch 'upstream/pull/4746'

Merge remote-tracking branch 'upstream/pull/4745'

Merge remote-tracking branch 'upstream/pull/4748'

Localisation updates from https://translatewiki.net.

Bump osm-community-index from 5.6.2 to 5.6.3

Bumps [osm-community-index](https://github.com/osmlab/osm-community-index) from 5.6.2 to 5.6.3.
- [Release notes](https://github.com/osmlab/osm-community-index/releases)
- [Changelog](https://github.com/osmlab/osm-community-index/blob/main/CHANGELOG.md)
- [Commits](https://github.com/osmlab/osm-community-index/compare/v5.6.2...v5.6.3)

---
updated-dependencies:
- dependency-name: osm-community-index
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Link to previous/next nonempty user's changeset on changeset pages

Use common sidebar_browse_check in notes controller test

Restore constraints on note id parameter

Update outdated tags of amenity/office/shop browse icons

Merge remote-tracking branch 'upstream/pull/4735'

Merge remote-tracking branch 'upstream/pull/4712'