Merge branch 'main' into upstream/traffic-paired-flow-density

changelog.d/1093-multipart-cable-feature-ownership.md

@@ -0,0 +1,4 @@
+- Keep every submarine-cable segment associated with its source feature after
+  Cesium expands multipart geometry, correcting segment colors, click destinations
+  and horizon culling while retaining one reference stem per feature
+  (@Aliciawque, #1093).

changelog.d/1427-military-installations-cross-site-gate.md

@@ -0,0 +1,4 @@
+- The military-installations proxy (`/api/military-installations`) now refuses
+  cross-site and reverse-proxy-forwarded browser requests with 403 before any
+  Overpass work, through the same shared gate as `/api/overpass`. Same-origin
+  app requests and local tools such as curl still work (@Sunil56224972, #1427).

changelog.d/1447-bikeshare-derived-capacity.md

@@ -0,0 +1,3 @@
+- Bike Share stations whose feed publishes no capacity now take it from each
+  status poll's bikes and docks instead of keeping the first poll's value or
+  the placeholder 15 (Aditya, @Rohilalala, #1447).

changelog.d/1456-terrain-partial-heights.md

@@ -0,0 +1,3 @@
+- A terrain request the proxy can only partly answer (a 429 pause, or a point
+  the upstream returns without a height) now keeps the real heights it has
+  instead of putting the whole chunk on the geoid (quanticsoul4772, #1456).

changelog.d/1457-dock-icon-only-wings.md

@@ -0,0 +1,5 @@
+- Between 721px and 900px wide (tablet portrait, phone landscape), the
+  Location and Visual Presets dock wings show only their icons, so their
+  labels no longer spill over the voice control or take taps meant for the
+  mic button. The full name stays in the tooltip and accessible name, and the
+  Cyber layout keeps its labels (Denis Groshev, @ZloyS, #1457).

changelog.d/1458-node-24-22-1-security-release.md

@@ -0,0 +1,4 @@
+- The Docker image and CI now pin Node 24.22.2, the current 24 LTS patch. It
+  carries the October 21, 2026 security fixes first released in 24.22.1,
+  including CVE-2026-111497 in the Brotli decoder (Luis Ortiz, @anobjectn,
+  #1458).

changelog.d/1462-voice-alias-hint-budget.md

@@ -0,0 +1,5 @@
+- Leave layer aliases the layer id already spells, such as "dams" for
+  `local-dams`, out of the voice layer hint. The Realtime prompt is 305
+  characters shorter, leaving room under the 52,000 gate for new
+  voice-toggleable layers; every alias is still accepted (@quanticsoul4772,
+  #1462).

changelog.d/1469-utilities-panel.md

@@ -0,0 +1,6 @@
+- Gather Directions, Draw and Import in a new UTILITIES panel in the left
+  column, between Data Layers and Scenes. Draw and Import leave DISPLAY, and
+  Radio stays in Data Layers under "Audio". Each drawn shape now gets a row
+  under Draw, like an imported file: name it, recolour it, hide it, fly to it
+  or remove it there. Area, Line and Pin are icon buttons, and the colour for
+  the next shape is a row of swatches (asturksever, #1469).

changelog.d/1474-radio-next-no-autoplay.md

@@ -0,0 +1,5 @@
+- Radio Next, Previous and the tuning dial no longer start a broadcaster stream
+  before Play is pressed; while a stream plays, it follows the new station.
+  Play reads Pause while a stream connects, and a tuner release onto a station
+  the directory removed or changed no longer leaves a Resume for another
+  station (gekh, #1474).

changelog.d/1488-hud-summary-language.md

@@ -0,0 +1,3 @@
+- Write the AI HUD summary in the interface language, led by the HUD's own
+  translated feed-state warning. A partial layer no longer reads as off or
+  nominal in the HUD, voice and analyst answers (German, @gekh, #1488).

changelog.d/210-contributor-docs-refresh.md

@@ -0,0 +1,4 @@
+- Contributor docs: CONTRIBUTING lists what each of the three baseline checks
+  needs to run, DATA_SOURCES documents loading a local CCTV source pack, and
+  KNOWN-ISSUES points the floor-placement note at its verification script
+  instead of a missing report (Gaurav Patidar, @gaurav7902, #210).

changelog.d/842-voice-outlines.md

@@ -0,0 +1,52 @@
+- Add source-backed voice outlines without public Overpass calls: bundled Census and
+  Who's On First boundaries cover places and neighborhoods, OpenFreeMap tiles
+  cover streets, buildings, and grounds, and guarded Nominatim lookup handles
+  remaining named areas with bounded caching and usage limits (bilawalsidhu,
+  #842).
+- Preserve standalone server-token maps, project tile outlines only on demand,
+  select building components with their holes independently, preserve non-Latin
+  street-name marks, and enforce public Nominatim spacing at fetch invocation.
+  Nominatim now requires explicit endpoint configuration (manjunath22466, #842).
+- Keep Census labels in filled geometry, handle local dateline outlines in one
+  coordinate frame, and require whole settlement names or explicit returned
+  aliases while retaining landmark shorthand (manjunath22466, #842).
+- Harden and integrate voice outlines with main (manjunath22466, #842).
+- Wait for the original building installation before reporting duplicate results,
+  including deferred outline installs, without restarting probes
+  (manjunath22466, #842).
+- Carry actual outline provenance to visible geometry and retain inline map
+  credits only while the owning outline is displayed (manjunath22466, #842).
+- Require a named building's resolved anchor inside its tile footprint, outside
+  courtyard holes, while keeping nearby selection for pointed-at buildings
+  (manjunath22466, #842).
+- Start each queued building's ground-sampling budget when it reaches the head
+  of the queue, keep Nominatim outlines that cross the antimeridian, let an
+  unnamed school, university, hospital, cemetery, stadium or zoo area answer a
+  grounds ask whose head noun names that kind, keep the shared OpenFreeMap tile
+  caches within the 64 MiB budget of the single source traffic and installations
+  shared before, fold place names in one shared helper, and exclude Who's On
+  First sources whose licence is only listed as CC BY or CC0 "equivalent",
+  including the Ottawa, Saskatoon, Gatineau and Madrid records
+  (manjunath22466, #842).
+- Skip Nominatim place and outline lookups when the server reports that no
+  Nominatim endpoint is configured, so a default install sends no request it
+  would refuse (manjunath22466, #842).
+- Keep the phone credit line on screen when map and outline credits make it
+  longer, wrapping it within the screen instead of running off the edge
+  (manjunath22466, #842).
+- Outline nothing from tiles when the tile under the point failed to load, so a
+  neighbouring building or area never stands in for it, and match each of a
+  Nominatim name tag's ";"-separated names (manjunath22466, #842).
+- Keep bent streets outlined when the geocoded point sits beside the
+  centreline, never answer a landmark ask with the park or square around it,
+  pick the same-name Nominatim outline that holds the resolved place, and keep
+  a new outline when an identical older mark fails to clean up
+  (samehkhamis, #842).
+- Tighten the remaining voice outline review items: Nominatim name checks use
+  the bundled packs' place-name key ("St. Paul" = "Saint Paul"), "E Street" no
+  longer matches "East Street" while "E St NW" answers "E Street" near it,
+  "Burj Khalifa Tower" still finds the tower, no neighbour standing in
+  for a building cut at the tile edge, no cut area answering grounds, https-only
+  PHOTON_URL, an interrupted Nominatim dispatch reclaimed after ten minutes,
+  no node:sqlite startup warning, and lazily decoded shared OpenFreeMap layers
+  (samehkhamis, #842).

changelog.d/980-codespaces-setup.md

@@ -0,0 +1,3 @@
+- Document GitHub Codespaces as a fourth setup path in the README: a cloud
+  workspace runs the dev server while the globe renders in your own browser
+  (John Leshan, @johnleshan, #980).