Merge remote-tracking branch 'origin/main' into german/hal-623-hud-summary-locale

# Conflicts:
#	src/voice/gevActions.test.mjs

changelog.d/1093-multipart-cable-feature-ownership.md

@@ -0,0 +1,4 @@
+- Keep every submarine-cable segment associated with its source feature after
+  Cesium expands multipart geometry, correcting segment colors, click destinations
+  and horizon culling while retaining one reference stem per feature
+  (@Aliciawque, #1093).

changelog.d/1427-military-installations-cross-site-gate.md

@@ -0,0 +1,4 @@
+- The military-installations proxy (`/api/military-installations`) now refuses
+  cross-site and reverse-proxy-forwarded browser requests with 403 before any
+  Overpass work, through the same shared gate as `/api/overpass`. Same-origin
+  app requests and local tools such as curl still work (@Sunil56224972, #1427).

changelog.d/1436-military-geom-vertical-rate.md

@@ -0,0 +1,3 @@
+- Military aircraft whose transponders report a GNSS vertical rate now carry it
+  in analyst and tracked-aircraft data instead of null (Aditya, @Rohilalala,
+  #1436).

changelog.d/1447-bikeshare-derived-capacity.md

@@ -0,0 +1,3 @@
+- Bike Share stations whose feed publishes no capacity now take it from each
+  status poll's bikes and docks instead of keeping the first poll's value or
+  the placeholder 15 (Aditya, @Rohilalala, #1447).

changelog.d/1448-local-adsb-geom-rate.md

@@ -0,0 +1,6 @@
+- Local ADS-B decoder feeds now carry a GNSS-sourced vertical rate
+  (`geom_rate`) when no barometric rate is sent, so the card shows V/S
+  instead of a dash (Aditya, @Rohilalala, #1448).
+- Local ADS-B, military and the adsb.lol flight fallback read the vertical
+  rate through one shared readsb field reader, so all three prefer the
+  barometric rate and fall back to the GNSS rate the same way (#1448).

changelog.d/1449-cable-tool-duplicates.md

@@ -0,0 +1,3 @@
+- List each submarine cable once in find_submarine_cables. TeleGeography
+  splits 17 cables (2Africa, Echo, Hawaiki) into several features, so a
+  search for Echo read "3 submarine cables" (Aditya, @Rohilalala, #1449).

changelog.d/1453-satellite-launch-year.md

@@ -0,0 +1,6 @@
+- Space Missions no longer shows an older satellite with a similar name and a
+  different known launch year as a new payload's orbit: the launch-year check
+  on loaded satellites now runs (Aditya, @Rohilalala, #1453).
+- Satellite launch years come from one TLE designator parser for both the
+  loaded catalog and the active-TLE fallback; a blank designator is an
+  unknown year instead of 2000 (#1453).

changelog.d/1457-dock-icon-only-wings.md

@@ -0,0 +1,5 @@
+- Between 721px and 900px wide (tablet portrait, phone landscape), the
+  Location and Visual Presets dock wings show only their icons, so their
+  labels no longer spill over the voice control or take taps meant for the
+  mic button. The full name stays in the tooltip and accessible name, and the
+  Cyber layout keeps its labels (Denis Groshev, @ZloyS, #1457).

changelog.d/1458-node-24-22-1-security-release.md

@@ -0,0 +1,4 @@
+- The Docker image and CI now pin Node 24.22.2, the current 24 LTS patch. It
+  carries the October 21, 2026 security fixes first released in 24.22.1,
+  including CVE-2026-111497 in the Brotli decoder (Luis Ortiz, @anobjectn,
+  #1458).

changelog.d/1462-voice-alias-hint-budget.md

@@ -0,0 +1,5 @@
+- Leave layer aliases the layer id already spells, such as "dams" for
+  `local-dams`, out of the voice layer hint. The Realtime prompt is 305
+  characters shorter, leaving room under the 52,000 gate for new
+  voice-toggleable layers; every alias is still accepted (@quanticsoul4772,
+  #1462).

changelog.d/1469-utilities-panel.md

@@ -0,0 +1,6 @@
+- Gather Directions, Draw and Import in a new UTILITIES panel in the left
+  column, between Data Layers and Scenes. Draw and Import leave DISPLAY, and
+  Radio stays in Data Layers under "Audio". Each drawn shape now gets a row
+  under Draw, like an imported file: name it, recolour it, hide it, fly to it
+  or remove it there. Area, Line and Pin are icon buttons, and the colour for
+  the next shape is a row of swatches (asturksever, #1469).

changelog.d/210-contributor-docs-refresh.md

@@ -0,0 +1,4 @@
+- Contributor docs: CONTRIBUTING lists what each of the three baseline checks
+  needs to run, DATA_SOURCES documents loading a local CCTV source pack, and
+  KNOWN-ISSUES points the floor-placement note at its verification script
+  instead of a missing report (Gaurav Patidar, @gaurav7902, #210).

changelog.d/842-voice-outlines.md

@@ -0,0 +1,52 @@
+- Add source-backed voice outlines without public Overpass calls: bundled Census and
+  Who's On First boundaries cover places and neighborhoods, OpenFreeMap tiles
+  cover streets, buildings, and grounds, and guarded Nominatim lookup handles
+  remaining named areas with bounded caching and usage limits (bilawalsidhu,
+  #842).
+- Preserve standalone server-token maps, project tile outlines only on demand,
+  select building components with their holes independently, preserve non-Latin
+  street-name marks, and enforce public Nominatim spacing at fetch invocation.
+  Nominatim now requires explicit endpoint configuration (manjunath22466, #842).
+- Keep Census labels in filled geometry, handle local dateline outlines in one
+  coordinate frame, and require whole settlement names or explicit returned
+  aliases while retaining landmark shorthand (manjunath22466, #842).
+- Harden and integrate voice outlines with main (manjunath22466, #842).
+- Wait for the original building installation before reporting duplicate results,
+  including deferred outline installs, without restarting probes
+  (manjunath22466, #842).
+- Carry actual outline provenance to visible geometry and retain inline map
+  credits only while the owning outline is displayed (manjunath22466, #842).
+- Require a named building's resolved anchor inside its tile footprint, outside
+  courtyard holes, while keeping nearby selection for pointed-at buildings
+  (manjunath22466, #842).
+- Start each queued building's ground-sampling budget when it reaches the head
+  of the queue, keep Nominatim outlines that cross the antimeridian, let an
+  unnamed school, university, hospital, cemetery, stadium or zoo area answer a
+  grounds ask whose head noun names that kind, keep the shared OpenFreeMap tile
+  caches within the 64 MiB budget of the single source traffic and installations
+  shared before, fold place names in one shared helper, and exclude Who's On
+  First sources whose licence is only listed as CC BY or CC0 "equivalent",
+  including the Ottawa, Saskatoon, Gatineau and Madrid records
+  (manjunath22466, #842).
+- Skip Nominatim place and outline lookups when the server reports that no
+  Nominatim endpoint is configured, so a default install sends no request it
+  would refuse (manjunath22466, #842).
+- Keep the phone credit line on screen when map and outline credits make it
+  longer, wrapping it within the screen instead of running off the edge
+  (manjunath22466, #842).
+- Outline nothing from tiles when the tile under the point failed to load, so a
+  neighbouring building or area never stands in for it, and match each of a
+  Nominatim name tag's ";"-separated names (manjunath22466, #842).
+- Keep bent streets outlined when the geocoded point sits beside the
+  centreline, never answer a landmark ask with the park or square around it,
+  pick the same-name Nominatim outline that holds the resolved place, and keep
+  a new outline when an identical older mark fails to clean up
+  (samehkhamis, #842).
+- Tighten the remaining voice outline review items: Nominatim name checks use
+  the bundled packs' place-name key ("St. Paul" = "Saint Paul"), "E Street" no
+  longer matches "East Street" while "E St NW" answers "E Street" near it,
+  "Burj Khalifa Tower" still finds the tower, no neighbour standing in
+  for a building cut at the tile edge, no cut area answering grounds, https-only
+  PHOTON_URL, an interrupted Nominatim dispatch reclaimed after ten minutes,
+  no node:sqlite startup warning, and lazily decoded shared OpenFreeMap layers
+  (samehkhamis, #842).

changelog.d/980-codespaces-setup.md

@@ -0,0 +1,3 @@
+- Document GitHub Codespaces as a fourth setup path in the README: a cloud
+  workspace runs the dev server while the globe renders in your own browser
+  (John Leshan, @johnleshan, #980).