chore(deps): bump maplibre/martin from 1.12.0 to 1.13.0 in /tileserver

[dependabot]

Bumps maplibre/martin from 1.12.0 to 1.13.0.

Release notes

Sourced from maplibre/martin's releases.

martin-v1.13.0

Passthrough sources: config-file wiring

1.12.0 introduced passthrough sources at the martin-core level; this release finishes the job by wiring them into martin's config file. This adds a dedicated typed config section, clearer errors for unrecognized keys, and correct etag-suffixing so cached passthrough tiles don't collide with tiles from other sources. Done in #2910.

New cache MBTiles schema

MBTiles files can now use a cache schema: like flat, but with fetched, expires and etag columns stored alongside each tile, so a .mbtiles file can double as a persistent, inspectable web-tile cache. It still exposes a spec-compatible tiles view, so any standard MBTiles reader (including martin itself) can serve a cache file unmodified. The mbtiles CLI gained a matching cache-purge <file> [--max-size <MB>] subcommand to evict expired (and, if needed, soonest-expiring) entries and reclaim space. Done in #3009.

martin-cp now responds to Ctrl+C when copying from PostgreSQL

Previously, interrupting a martin-cp run against PostgreSQL could hang instead of exiting. In-flight Postgres queries are now tracked and cancelled on interrupt, and the copier drains already-queued tiles instead of getting stuck. Done in #2901.

Added

• (mbtiles) read and validate the hash_algorithm metadata key, so files hashed with an algorithm other than MD5 (e.g. by tippecanoe) report a clear "unsupported algorithm" error instead of a misleading hash mismatch during validation (#2985)

Fixed

• (pmtiles) restore AWS profile support (#3029)
• (deps) update npm dependencies (#3012)
• (martin-ui) center tile inspect map on tileset bounds, not 0/0/0 (#3002)
• (postgres) clearer error when a source schema exists but has no tile sources (#2979)
• (martin-ui) match metric endpoints when a route_prefix is set (#2986)
• connect to prerelease PostgreSQL versions (#3024)
• (postgres) honor sslmode=verify-ca by skipping only the hostname check (#2987)
• (mbtiles) validate min/max zoom metadata against actual tiles (#2983)

Other

• (deps) Bump the npm_and_yarn group across 2 directories with 1 update (#3045)
• (deps) update dependency postcss to v8.5.18 [security] (#3044)
• (deps) autoupdate pre-commit (#3040)
• use re-exported mvt from mlt (#3037)
• derive CollectUnrecognizedKeys instead of hand-written impls (#3031)
• make UnrecognizedValues a newtype (#3030)
• (deps) update cargo dependencies (#3011)
• (deps) update dependency pbf to v5.1.1 (#3020)
• (deps) update dependency @​types/node to v26.1.1 (#3019)
• add render_finalize_failure helper and snapshot tests (#3000)
• (deps) autoupdate pre-commit (#2998)
• (postgres) use NonZeroUsize for pool_size (#2996)
• run just fmt (#2981)

... (truncated)

Commits

• cc660bd chore: release (#3047)
• 80590bd ci: silence zig's linker_messages warning on musl release builds (#3046)
• 1d3bc98 chore(deps): Bump the npm_and_yarn group across 2 directories with 1 update (...
• 883aa2b chore(deps): update dependency postcss to v8.5.18 [security] (#3044)
• 866a92c feat(martin): passthrough tile source configuration (#2910)
• 2f0f914 chore(deps): autoupdate pre-commit (#3040)
• f4140bd feat(mbtiles): add a new cache schema (#3009)
• e99011d chore: use re-exported mvt from mlt (#3037)
• 4955c69 refactor: derive CollectUnrecognizedKeys instead of hand-written impls (#3031)
• 6fc32b7 refactor: make UnrecognizedValues a newtype (#3030)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)