Update bundle

Merge remote-tracking branch 'upstream/pull/5341'

Bump qs from 6.13.0 to 6.13.1

Bumps [qs](https://github.com/ljharb/qs) from 6.13.0 to 6.13.1.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.13.1)

---
updated-dependencies:
- dependency-name: qs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge branch 'pull/5297'

Add status filter to user's note page

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/5335'

Merge remote-tracking branch 'upstream/pull/5334'

Merge branch 'pull/5338'

Enable dark mode attribution font color

Increases the specificity of the dark mode attribution selector. This makes it overwrite Leaflet's default link selector.

Bump eslint from 9.14.0 to 9.15.0

Bumps [eslint](https://github.com/eslint/eslint) from 9.14.0 to 9.15.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v9.14.0...v9.15.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump @eslint/plugin-kit from 0.2.0 to 0.2.3

Bumps [@eslint/plugin-kit](https://github.com/eslint/rewrite) from 0.2.0 to 0.2.3.
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/release-please-config.json)
- [Commits](https://github.com/eslint/rewrite/compare/core-v0.2.0...plugin-kit-v0.2.3)

---
updated-dependencies:
- dependency-name: "@eslint/plugin-kit"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #5333 from AntonKhorev/auth-buttons-same-as-preferred

Style small auth buttons similarly to preferred auth buttons

Merge pull request #5331 from AntonKhorev/trace-badges-text-bg

Set colors for trace visibility badges using .text-bg-*

Merge pull request #5332 from AntonKhorev/layer-preview-backgrounds

Set background for layer buttons to secondary body color

Style small auth buttons similarly to preferred auth buttons

Set background for layer buttons to secondary body color

Set colors for trace visibility badges using .text-bg-*

Merge pull request #5330 from AntonKhorev/apply-tile-filter-once

Apply dimming filter to tiles directly

Apply dimming filter to tiles directly

Merge remote-tracking branch 'upstream/pull/5320'

Localisation updates from https://translatewiki.net.

Remove jQuery.timers plugin

Merge pull request #4761 from AntonKhorev:dark-mode-with-close-button

Enable dark theme if user prefers dark color scheme - no javascript version

Merge pull request #5151 from AntonKhorev/no-history-and-export-buttons

Move History and Export buttons to secondary nav

Merge pull request #5293 from AntonKhorev/user-roles-resourceful-routes

Use resourceful routes for granting/revoking user roles

Merge remote-tracking branch 'upstream/pull/5319'

Merge remote-tracking branch 'upstream/pull/5318'

Merge pull request #5158 from tomhughes/vagrant-debian

Switch vagrant to use Debian 12

Add note on assigning issues

New users are encouraged by Github to read the CONTRIBUTING file,
so that's where it's worth putting it. The explanation of why can
be put elsewhere.

Merge remote-tracking branch 'upstream/pull/5316'

Merge remote-tracking branch 'upstream/pull/5315'

Merge remote-tracking branch 'upstream/pull/5312'

Switch vagrant to use Debian 12

Merge pull request #5295 from tomhughes/danger-branches

Create base and head branches before running danger

Merge pull request #5303 from tomhughes/remember-me

Make the "remember me" option work as intended

Remove unused timer from new note js controller

Make the "remember me" option work as intended

Show spinner using delayed css animation in sidebar loader

Add yaml syntax highlighting to code blocks

Show spinner using delayed css animation in richtext preview

Add missing headers to docs

Use fenced code blocks

For consistency with other documentation

Don't update deactivates_at if block was already viewed

Merge remote-tracking branch 'upstream/pull/5310'

Merge remote-tracking branch 'upstream/pull/5311'

Update bundle

Localisation updates from https://translatewiki.net.

Restore loading spinner in richtext previews

Send notifications to note subscribers instead of commenters

Merge remote-tracking branch 'upstream/pull/5307'

Merge remote-tracking branch 'upstream/pull/5304'

Replace query marker fade animation with css

Backfill note subscriptions

Merge remote-tracking branch 'upstream/pull/4464'

Remove hardcoded rate limit value

Name is chosen to match the equivalent setting in the configuration
of the rate limits for edits.

Fixes #4427.

Localisation updates from https://translatewiki.net.

Use resourceful routes for granting/revoking user roles

Fix new rubocop warnings

Update bundle

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/5301'

Added new Danger labeling rule

Added new rule which checks if Gemfile is updated and Gemfile.lock is not updated and if positive generates "gemfile-lock-outdated" PR label.

Localisation updates from https://translatewiki.net.

Merge remote-tracking branch 'upstream/pull/5299'

Bump eslint from 9.13.0 to 9.14.0

Bumps [eslint](https://github.com/eslint/eslint) from 9.13.0 to 9.14.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v9.13.0...v9.14.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge remote-tracking branch 'upstream/pull/5284'

Localisation updates from https://translatewiki.net.

Update to rails 7.2.2

Adjust imports for leaflet.locatecontrol

Merge remote-tracking branch 'upstream/pull/5296'

Create base and head branches before running danger

Bump leaflet.locatecontrol from 0.81.1 to 0.82.0

Bumps [leaflet.locatecontrol](https://github.com/domoritz/leaflet-locatecontrol) from 0.81.1 to 0.82.0.
- [Changelog](https://github.com/domoritz/leaflet-locatecontrol/blob/gh-pages/CHANGELOG.md)
- [Commits](https://github.com/domoritz/leaflet-locatecontrol/compare/v0.81.1...v0.82.0)

---
updated-dependencies:
- dependency-name: leaflet.locatecontrol
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Update bundle

Subscribe users when they interact with notes

Create note subscription table and model

Merge pull request #5290 from tomhughes/danger

Improvements to danger workflow

Merge remote-tracking branch 'upstream/pull/5292'

Merge remote-tracking branch 'upstream/pull/5291'

Consistent use of quotes

Most strings used single quotes, and a few used
opening backticks. Now it's single quotes everywhere.

Add articles before "exit" and "roundabout"

There are articles before "ramp" everywhere,
and it sounds more correct with articles
before "exit" and "roundabout", too.

Make danger labels use consisent capitalisation

Existing labels are all lower case and avoid spaces.

Avoid suggesting danger is only about labels

Get danger working in GitHub actions

Merge remote-tracking branch 'upstream/pull/5289'

Merge remote-tracking branch 'upstream/pull/5288'

Merge remote-tracking branch 'upstream/pull/5286'

Avoid adjusting time by a number of days

Using hours instead of days avoids test failures when moving
past a point in time when the clocks change.

Remove callback from initialize() in note js controller

Decrease padding between close button and inputs in directions form

Bump coverallsapp/github-action from 2.3.3 to 2.3.4

Bumps [coverallsapp/github-action](https://github.com/coverallsapp/github-action) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](https://github.com/coverallsapp/github-action/compare/v2.3.3...v2.3.4)

---
updated-dependencies:
- dependency-name: coverallsapp/github-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Localisation updates from https://translatewiki.net.

Update bundle

Update to rails 7.2.1.2

Revert to using released version of canonical-rails

Get danger working on pull requests

Update bundle

Merge remote-tracking branch 'upstream/pull/5276'

Attempt to get danger working

Localisation updates from https://translatewiki.net.