From 03d56c8af04d2982aff573b78f08192b07107c5b Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Wed, 9 Dec 2020 21:09:43 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .gitlab/ci/rules.gitlab-ci.yml                |   2 -
 GITALY_SERVER_VERSION                         |   2 +-
 .../admin/users/components/app.vue            |   7 +-
 .../admin/users/components/users_table.vue    |  63 +++++
 .../boards/components/board_column_new.vue    |   8 +-
 .../boards/components/board_list_header.vue   |   8 +-
 .../components/board_list_header_new.vue      |   8 +-
 app/assets/javascripts/boards/constants.js    |   5 -
 app/assets/javascripts/boards/index.js        |   1 -
 .../javascripts/boards/stores/actions.js      |  28 +--
 .../javascripts/boards/stores/boards_store.js |  22 --
 .../javascripts/boards/stores/mutations.js    |   3 +-
 app/assets/javascripts/boards/stores/state.js |   1 -
 .../javascripts/import_projects/index.js      |   7 -
 .../pipelines/charts/components/app.vue       | 232 +++++++++++++++---
 .../charts/components/app_legacy.vue          | 151 ++++++++++++
 .../charts/components/statistics_list.vue     |   7 +-
 .../projects/pipelines/charts/constants.js    |   6 +
 ...get_pipeline_count_by_status.query.graphql |  14 ++
 ..._project_pipeline_statistics.query.graphql |  17 ++
 .../projects/pipelines/charts/index.js        |  63 ++++-
 app/assets/stylesheets/pages/tree.scss        |   4 +
 app/assets/stylesheets/utilities.scss         |  13 +
 .../jira_connect/app_descriptor_controller.rb |  71 ++++--
 .../projects/pipelines_controller.rb          |   1 +
 app/controllers/projects_controller.rb        |   2 -
 .../resolvers/ci/runner_setup_resolver.rb     |   5 +-
 app/models/application_setting.rb             |   4 +-
 app/models/ci/pipeline.rb                     |  10 +
 app/models/concerns/issuable.rb               |   6 +-
 app/models/label.rb                           |   2 +-
 app/models/todo.rb                            |   6 +-
 app/services/ci/create_pipeline_service.rb    |   4 +-
 .../clusters/aws/fetch_credentials_service.rb |   9 +-
 app/services/git/base_hooks_service.rb        |   5 +-
 app/services/jira_connect/sync_service.rb     |  12 +-
 app/validators/json_schema_validator.rb       |  11 +-
 .../admin/application_settings/_eks.html.haml |   5 +
 app/views/admin/users/index.html.haml         |   8 +-
 app/views/projects/_files.html.haml           |   3 +
 app/views/projects/pipelines/charts.html.haml |  13 +-
 app/workers/all_queues.yml                    |  12 +-
 .../jira_connect/sync_branch_worker.rb        |   1 +
 .../jira_connect/sync_builds_worker.rb        |  24 ++
 .../jira_connect/sync_merge_request_worker.rb |   2 +
 ...er-importer-ignores-first-25-repositor.yml |   5 +
 ...497-add-validating-json-schema-draft-7.yml |   5 +
 ...ting-additional-boards-within-a-group-.yml |   5 +
 .../unreleased/sh-aws-sdk-use-iam-profile.yml |   5 +
 .../unreleased/tz-reduce-last-commit-cls.yml  |   5 +
 .../graphql_pipeline_analytics.yml            |   8 +
 .../development/jira_sync_builds.yml          |   8 +
 doc/api/audit_events.md                       |   6 +-
 doc/development/README.md                     |   1 +
 .../documentation/styleguide/index.md         |   4 +-
 doc/development/integrations/codesandbox.md   | 140 +++++++++++
 doc/development/product_analytics/snowplow.md |  11 +
 .../product_analytics/usage_ping.md           |   5 +-
 doc/user/packages/package_registry/index.md   |   9 +-
 .../img/issue_board_default_lists_v13_4.png   | Bin 14866 -> 0 bytes
 .../protected_branches_deploy_keys_v13_5.png  | Bin 0 -> 46325 bytes
 doc/user/project/issue_board.md               |  29 ++-
 doc/user/project/protected_branches.md        |  31 +++
 lib/atlassian/jira_connect/client.rb          |  75 ++++--
 .../jira_connect/serializers/base_entity.rb   |   6 +
 .../jira_connect/serializers/build_entity.rb  |  94 +++++++
 locale/gitlab.pot                             |  12 +
 spec/factories/merge_requests.rb              |   8 +
 spec/factories/sequences.rb                   |   2 +
 spec/features/boards/boards_spec.rb           |   4 +-
 .../admin/users/components/app_spec.js        |  37 +++
 .../users/components/users_table_spec.js      |  61 +++++
 spec/frontend/admin/users/mock_data.js        |   2 +-
 spec/frontend/boards/boards_store_spec.js     |  35 ---
 .../components/board_list_header_new_spec.js  |   2 +-
 .../components/board_list_header_spec.js      |   2 +-
 spec/frontend/boards/stores/actions_spec.js   |  29 +--
 spec/frontend/boards/stores/mutations_spec.js |   3 -
 .../statistics_list_spec.js.snap              |   4 +-
 .../charts/components/app_legacy_spec.js      |  72 ++++++
 .../pipelines/charts/components/app_spec.js   |  66 +++--
 .../charts/components/statistics_list_spec.js |   2 +-
 .../projects/pipelines/charts/mock_data.js    | 215 ++++++++++++++++
 .../lib/atlassian/jira_connect/client_spec.rb | 163 ++++++++++--
 .../serializers/build_entity_spec.rb          |  52 ++++
 spec/models/application_setting_spec.rb       |  13 +-
 spec/models/ci/pipeline_spec.rb               |  34 +++
 .../aws/fetch_credentials_service_spec.rb     |  54 ++++
 .../jira_connect/sync_service_spec.rb         |  33 ++-
 .../atlassian/jira_connect/schemata.rb        |  83 +++++++
 spec/support/helpers/after_next_helpers.rb    |   6 +-
 spec/support/helpers/next_instance_of.rb      |  15 +-
 spec/support/matchers/be_valid_json.rb        |  32 +++
 .../multiple_issue_boards_shared_examples.rb  |   4 +-
 spec/validators/json_schema_validator_spec.rb |  30 +++
 .../jira_connect/sync_branch_worker_spec.rb   |   9 +-
 .../jira_connect/sync_builds_worker_spec.rb   |  60 +++++
 .../sync_merge_request_worker_spec.rb         |   9 +-
 .../jira_connect/sync_project_worker_spec.rb  |  10 +-
 99 files changed, 2109 insertions(+), 394 deletions(-)
 create mode 100644 app/assets/javascripts/admin/users/components/users_table.vue
 create mode 100644 app/assets/javascripts/projects/pipelines/charts/components/app_legacy.vue
 create mode 100644 app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_pipeline_count_by_status.query.graphql
 create mode 100644 app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_project_pipeline_statistics.query.graphql
 create mode 100644 app/workers/jira_connect/sync_builds_worker.rb
 create mode 100644 changelogs/unreleased/262168-pagination-of-bitbucket-server-importer-ignores-first-25-repositor.yml
 create mode 100644 changelogs/unreleased/263497-add-validating-json-schema-draft-7.yml
 create mode 100644 changelogs/unreleased/270583-improve-efficiency-when-creating-additional-boards-within-a-group-.yml
 create mode 100644 changelogs/unreleased/sh-aws-sdk-use-iam-profile.yml
 create mode 100644 changelogs/unreleased/tz-reduce-last-commit-cls.yml
 create mode 100644 config/feature_flags/development/graphql_pipeline_analytics.yml
 create mode 100644 config/feature_flags/development/jira_sync_builds.yml
 create mode 100644 doc/development/integrations/codesandbox.md
 delete mode 100644 doc/user/project/img/issue_board_default_lists_v13_4.png
 create mode 100644 doc/user/project/img/protected_branches_deploy_keys_v13_5.png
 create mode 100644 lib/atlassian/jira_connect/serializers/build_entity.rb
 create mode 100644 spec/frontend/admin/users/components/app_spec.js
 create mode 100644 spec/frontend/admin/users/components/users_table_spec.js
 create mode 100644 spec/frontend/projects/pipelines/charts/components/app_legacy_spec.js
 create mode 100644 spec/lib/atlassian/jira_connect/serializers/build_entity_spec.rb
 create mode 100644 spec/support/atlassian/jira_connect/schemata.rb
 create mode 100644 spec/support/matchers/be_valid_json.rb
 create mode 100644 spec/workers/jira_connect/sync_builds_worker_spec.rb

diff --git a/.gitlab/ci/rules.gitlab-ci.yml b/.gitlab/ci/rules.gitlab-ci.yml
index 62a1f76b301..271eec1b997 100644
--- a/.gitlab/ci/rules.gitlab-ci.yml
+++ b/.gitlab/ci/rules.gitlab-ci.yml
@@ -602,8 +602,6 @@
 
 .rails:rules:detect-tests:
   rules:
-    - <<: *if-not-ee
-      when: never
     - <<: *if-default-refs
       changes: *code-backstage-patterns
     - <<: *if-merge-request-title-run-all-rspec
diff --git a/GITALY_SERVER_VERSION b/GITALY_SERVER_VERSION
index 6bafd9452fa..b424faadd27 100644
--- a/GITALY_SERVER_VERSION
+++ b/GITALY_SERVER_VERSION
@@ -1 +1 @@
-c0ea152ccad891cda5fd255c1fea78562aae5e4a
+14b4e7cba593bccd9093fd231cdbd3f016688451
diff --git a/app/assets/javascripts/admin/users/components/app.vue b/app/assets/javascripts/admin/users/components/app.vue
index 5ff2dbbfcb1..a3abd904a6b 100644
--- a/app/assets/javascripts/admin/users/components/app.vue
+++ b/app/assets/javascripts/admin/users/components/app.vue
@@ -1,5 +1,10 @@
 <script>
+import UsersTable from './users_table.vue';
+
 export default {
+  components: {
+    UsersTable,
+  },
   props: {
     users: {
       type: Array,
@@ -16,6 +21,6 @@ export default {
 
 <template>
   <div>
-    <!-- Temporary empty app -->
+    <users-table :users="users" :paths="paths" />
   </div>
 </template>
diff --git a/app/assets/javascripts/admin/users/components/users_table.vue b/app/assets/javascripts/admin/users/components/users_table.vue
new file mode 100644
index 00000000000..a2d68972519
--- /dev/null
+++ b/app/assets/javascripts/admin/users/components/users_table.vue
@@ -0,0 +1,63 @@
+<script>
+import { GlTable } from '@gitlab/ui';
+import { __ } from '~/locale';
+
+const DEFAULT_TH_CLASSES =
+  'gl-bg-transparent! gl-border-b-solid! gl-border-b-gray-100! gl-p-5! gl-border-b-1!';
+const thWidthClass = width => `gl-w-${width}p ${DEFAULT_TH_CLASSES}`;
+
+export default {
+  components: {
+    GlTable,
+  },
+  props: {
+    users: {
+      type: Array,
+      required: true,
+    },
+    paths: {
+      type: Object,
+      required: true,
+    },
+  },
+  fields: [
+    {
+      key: 'name',
+      label: __('Name'),
+      thClass: thWidthClass(40),
+    },
+    {
+      key: 'projectsCount',
+      label: __('Projects'),
+      thClass: thWidthClass(10),
+    },
+    {
+      key: 'createdAt',
+      label: __('Created on'),
+      thClass: thWidthClass(15),
+    },
+    {
+      key: 'lastActivityOn',
+      label: __('Last activity'),
+      thClass: thWidthClass(15),
+    },
+    {
+      key: 'settings',
+      label: '',
+      thClass: thWidthClass(20),
+    },
+  ],
+};
+</script>
+
+<template>
+  <div>
+    <gl-table
+      :items="users"
+      :fields="$options.fields"
+      :empty-text="s__('AdminUsers|No users found')"
+      show-empty
+      stacked="md"
+    />
+  </div>
+</template>
diff --git a/app/assets/javascripts/boards/components/board_column_new.vue b/app/assets/javascripts/boards/components/board_column_new.vue
index 8d01cbd9234..9ae9d4697d9 100644
--- a/app/assets/javascripts/boards/components/board_column_new.vue
+++ b/app/assets/javascripts/boards/components/board_column_new.vue
@@ -2,7 +2,6 @@
 import { mapGetters, mapActions, mapState } from 'vuex';
 import BoardListHeader from 'ee_else_ce/boards/components/board_list_header_new.vue';
 import BoardList from './board_list_new.vue';
-import { ListType } from '../constants';
 
 export default {
   components: {
@@ -36,16 +35,11 @@ export default {
     listIssues() {
       return this.getIssuesByList(this.list.id);
     },
-    shouldFetchIssues() {
-      return this.list.type !== ListType.blank;
-    },
   },
   watch: {
     filterParams: {
       handler() {
-        if (this.shouldFetchIssues) {
-          this.fetchIssuesForList({ listId: this.list.id });
-        }
+        this.fetchIssuesForList({ listId: this.list.id });
       },
       deep: true,
       immediate: true,
diff --git a/app/assets/javascripts/boards/components/board_list_header.vue b/app/assets/javascripts/boards/components/board_list_header.vue
index 3e37fc0a1ac..3db5c2e0830 100644
--- a/app/assets/javascripts/boards/components/board_list_header.vue
+++ b/app/assets/javascripts/boards/components/board_list_header.vue
@@ -72,9 +72,7 @@ export default {
       return this.list?.label?.description || this.list.title || '';
     },
     showListHeaderButton() {
-      return (
-        !this.disabled && this.listType !== ListType.closed && this.listType !== ListType.blank
-      );
+      return !this.disabled && this.listType !== ListType.closed;
     },
     showMilestoneListDetails() {
       return (
@@ -106,9 +104,6 @@ export default {
         this.listType !== ListType.backlog && this.showListHeaderButton && this.list.isExpanded
       );
     },
-    showBoardListAndBoardInfo() {
-      return this.listType !== ListType.blank;
-    },
     uniqueKey() {
       // eslint-disable-next-line @gitlab/require-i18n-strings
       return `boards.${this.boardId}.${this.listType}.${this.list.id}`;
@@ -286,7 +281,6 @@ export default {
       </gl-tooltip>
 
       <div
-        v-if="showBoardListAndBoardInfo"
         class="issue-count-badge gl-display-inline-flex gl-pr-0 no-drag text-secondary"
         :class="{
           'gl-display-none!': !list.isExpanded && isSwimlanesHeader,
diff --git a/app/assets/javascripts/boards/components/board_list_header_new.vue b/app/assets/javascripts/boards/components/board_list_header_new.vue
index 95812dcbaac..b7c892e3b52 100644
--- a/app/assets/javascripts/boards/components/board_list_header_new.vue
+++ b/app/assets/javascripts/boards/components/board_list_header_new.vue
@@ -75,9 +75,7 @@ export default {
       return this.list?.label?.description || this.list.title || '';
     },
     showListHeaderButton() {
-      return (
-        !this.disabled && this.listType !== ListType.closed && this.listType !== ListType.blank
-      );
+      return !this.disabled && this.listType !== ListType.closed;
     },
     showMilestoneListDetails() {
       return (
@@ -111,9 +109,6 @@ export default {
         this.listType !== ListType.backlog && this.showListHeaderButton && this.list.isExpanded
       );
     },
-    showBoardListAndBoardInfo() {
-      return this.listType !== ListType.blank;
-    },
     uniqueKey() {
       // eslint-disable-next-line @gitlab/require-i18n-strings
       return `boards.${this.boardId}.${this.listType}.${this.list.id}`;
@@ -299,7 +294,6 @@ export default {
       <!-- EE end -->
 
       <div
-        v-if="showBoardListAndBoardInfo"
         class="issue-count-badge gl-display-inline-flex gl-pr-0 no-drag gl-text-gray-500"
         :class="{
           'gl-display-none!': !list.isExpanded && isSwimlanesHeader,
diff --git a/app/assets/javascripts/boards/constants.js b/app/assets/javascripts/boards/constants.js
index 3256992d915..9264fac5eda 100644
--- a/app/assets/javascripts/boards/constants.js
+++ b/app/assets/javascripts/boards/constants.js
@@ -9,7 +9,6 @@ export const ListType = {
   backlog: 'backlog',
   closed: 'closed',
   label: 'label',
-  blank: 'blank',
 };
 
 export const inactiveId = 0;
@@ -17,11 +16,7 @@ export const inactiveId = 0;
 export const ISSUABLE = 'issuable';
 export const LIST = 'list';
 
-/* eslint-disable-next-line @gitlab/require-i18n-strings */
-export const DEFAULT_LABELS = ['to do', 'doing'];
-
 export default {
   BoardType,
   ListType,
-  DEFAULT_LABELS,
 };
diff --git a/app/assets/javascripts/boards/index.js b/app/assets/javascripts/boards/index.js
index 159bde4e42c..cb9782b08ed 100644
--- a/app/assets/javascripts/boards/index.js
+++ b/app/assets/javascripts/boards/index.js
@@ -181,7 +181,6 @@ export default () => {
           .then(res => res.data)
           .then(lists => {
             lists.forEach(list => boardsStore.addList(list));
-            boardsStore.addBlankState();
             this.loading = false;
           })
           .catch(() => {
diff --git a/app/assets/javascripts/boards/stores/actions.js b/app/assets/javascripts/boards/stores/actions.js
index 63478d6260c..1a745eef482 100644
--- a/app/assets/javascripts/boards/stores/actions.js
+++ b/app/assets/javascripts/boards/stores/actions.js
@@ -3,7 +3,7 @@ import { pick } from 'lodash';
 import boardListsQuery from 'ee_else_ce/boards/graphql/board_lists.query.graphql';
 import createGqClient, { fetchPolicies } from '~/lib/graphql';
 import { getIdFromGraphQLId } from '~/graphql_shared/utils';
-import { BoardType, ListType, inactiveId, DEFAULT_LABELS } from '~/boards/constants';
+import { BoardType, ListType, inactiveId } from '~/boards/constants';
 import * as types from './mutation_types';
 import {
   formatBoardLists,
@@ -89,7 +89,6 @@ export default {
         if (!lists.nodes.find(l => l.listType === ListType.backlog) && !hideBacklogList) {
           dispatch('createList', { backlog: true });
         }
-        dispatch('generateDefaultLists');
       })
       .catch(() => commit(types.RECEIVE_BOARD_LISTS_FAILURE));
   },
@@ -150,31 +149,6 @@ export default {
       .catch(() => commit(types.RECEIVE_LABELS_FAILURE));
   },
 
-  generateDefaultLists: async ({ state, commit, dispatch }) => {
-    if (state.disabled) {
-      return;
-    }
-    if (
-      Object.entries(state.boardLists).find(
-        ([, list]) => list.type !== ListType.backlog && list.type !== ListType.closed,
-      )
-    ) {
-      return;
-    }
-
-    const fetchLabelsAndCreateList = label => {
-      return dispatch('fetchLabels', label)
-        .then(res => {
-          if (res.length > 0) {
-            dispatch('createList', { labelId: res[0].id });
-          }
-        })
-        .catch(() => commit(types.GENERATE_DEFAULT_LISTS_FAILURE));
-    };
-
-    await Promise.all(DEFAULT_LABELS.map(fetchLabelsAndCreateList));
-  },
-
   moveList: (
     { state, commit, dispatch },
     { listId, replacedListId, newIndex, adjustmentValue },
diff --git a/app/assets/javascripts/boards/stores/boards_store.js b/app/assets/javascripts/boards/stores/boards_store.js
index fa1ffdfa26a..4505155d7d6 100644
--- a/app/assets/javascripts/boards/stores/boards_store.js
+++ b/app/assets/javascripts/boards/stores/boards_store.js
@@ -3,7 +3,6 @@
 /* global ListIssue */
 import { sortBy, pick } from 'lodash';
 import Vue from 'vue';
-import Cookies from 'js-cookie';
 import BoardsStoreEE from 'ee_else_ce/boards/stores/boards_store_ee';
 import {
   urlParamsToObject,
@@ -125,20 +124,6 @@ const boardsStore = {
       .querySelector(`.js-board-list-${getIdFromGraphQLId(listId)}`)
       ?.classList.remove('is-active');
   },
-  shouldAddBlankState() {
-    // Decide whether to add the blank state
-    return !this.state.lists.filter(list => list.type !== 'backlog' && list.type !== 'closed')[0];
-  },
-  addBlankState() {
-    if (!this.shouldAddBlankState() || this.welcomeIsHidden()) return;
-
-    this.generateDefaultLists()
-      .then(res => res.data)
-      .then(data => Promise.all(data.map(list => this.addList(list))))
-      .catch(() => {
-        this.removeList(undefined, 'label');
-      });
-  },
 
   findIssueLabel(issue, findLabel) {
     return issue.labels.find(label => label.id === findLabel.id);
@@ -202,9 +187,6 @@ const boardsStore = {
     return list.issues.find(issue => issue.id === id);
   },
 
-  welcomeIsHidden() {
-    return parseBoolean(Cookies.get('issue_board_welcome_hidden'));
-  },
   removeList(id, type = 'blank') {
     const list = this.findList('id', id, type);
 
@@ -562,10 +544,6 @@ const boardsStore = {
     return axios.get(this.state.endpoints.listsEndpoint);
   },
 
-  generateDefaultLists() {
-    return axios.post(this.state.endpoints.listsEndpointGenerate, {});
-  },
-
   createList(entityId, entityType) {
     const list = {
       [entityType]: entityId,
diff --git a/app/assets/javascripts/boards/stores/mutations.js b/app/assets/javascripts/boards/stores/mutations.js
index efe6c2042af..1860cc442a5 100644
--- a/app/assets/javascripts/boards/stores/mutations.js
+++ b/app/assets/javascripts/boards/stores/mutations.js
@@ -32,11 +32,10 @@ export const addIssueToList = ({ state, listId, issueId, moveBeforeId, moveAfter
 
 export default {
   [mutationTypes.SET_INITIAL_BOARD_DATA](state, data) {
-    const { boardType, disabled, showPromotion, ...endpoints } = data;
+    const { boardType, disabled, ...endpoints } = data;
     state.endpoints = endpoints;
     state.boardType = boardType;
     state.disabled = disabled;
-    state.showPromotion = showPromotion;
   },
 
   [mutationTypes.RECEIVE_BOARD_LISTS_SUCCESS]: (state, lists) => {
diff --git a/app/assets/javascripts/boards/stores/state.js b/app/assets/javascripts/boards/stores/state.js
index 6f29115aebd..a2f026862df 100644
--- a/app/assets/javascripts/boards/stores/state.js
+++ b/app/assets/javascripts/boards/stores/state.js
@@ -4,7 +4,6 @@ export default () => ({
   endpoints: {},
   boardType: null,
   disabled: false,
-  showPromotion: false,
   isShowingLabels: true,
   activeId: inactiveId,
   sidebarType: '',
diff --git a/app/assets/javascripts/import_projects/index.js b/app/assets/javascripts/import_projects/index.js
index 79fbd58e355..cbb98efa07e 100644
--- a/app/assets/javascripts/import_projects/index.js
+++ b/app/assets/javascripts/import_projects/index.js
@@ -2,7 +2,6 @@ import Vue from 'vue';
 import Translate from '../vue_shared/translate';
 import ImportProjectsTable from './components/import_projects_table.vue';
 import { parseBoolean } from '../lib/utils/common_utils';
-import { queryToObject } from '../lib/utils/url_utility';
 import createStore from './store';
 
 Vue.use(Translate);
@@ -20,18 +19,12 @@ export function initStoreFromElement(element) {
     paginatable,
   } = element.dataset;
 
-  const params = queryToObject(document.location.search);
-  const page = parseInt(params.page ?? 1, 10);
-
   return createStore({
     initialState: {
       defaultTargetNamespace: gon.current_username,
       ciCdOnly: parseBoolean(ciCdOnly),
       canSelectNamespace: parseBoolean(canSelectNamespace),
       provider,
-      pageInfo: {
-        page,
-      },
     },
     endpoints: {
       reposPath,
diff --git a/app/assets/javascripts/projects/pipelines/charts/components/app.vue b/app/assets/javascripts/projects/pipelines/charts/components/app.vue
index c6e2b2e1140..8b5bed08931 100644
--- a/app/assets/javascripts/projects/pipelines/charts/components/app.vue
+++ b/app/assets/javascripts/projects/pipelines/charts/components/app.vue
@@ -1,66 +1,202 @@
 <script>
 import dateFormat from 'dateformat';
 import { GlColumnChart } from '@gitlab/ui/dist/charts';
-import { __, sprintf } from '~/locale';
+import { GlAlert } from '@gitlab/ui';
+import { __, s__, sprintf } from '~/locale';
 import { getDateInPast } from '~/lib/utils/datetime_utility';
+import getPipelineCountByStatus from '../graphql/queries/get_pipeline_count_by_status.query.graphql';
+import getProjectPipelineStatistics from '../graphql/queries/get_project_pipeline_statistics.query.graphql';
 import StatisticsList from './statistics_list.vue';
 import PipelinesAreaChart from './pipelines_area_chart.vue';
 import {
   CHART_CONTAINER_HEIGHT,
-  INNER_CHART_HEIGHT,
-  X_AXIS_LABEL_ROTATION,
-  X_AXIS_TITLE_OFFSET,
   CHART_DATE_FORMAT,
+  DEFAULT,
+  INNER_CHART_HEIGHT,
+  LOAD_ANALYTICS_FAILURE,
+  LOAD_PIPELINES_FAILURE,
   ONE_WEEK_AGO_DAYS,
   ONE_MONTH_AGO_DAYS,
+  PARSE_FAILURE,
+  UNSUPPORTED_DATA,
+  X_AXIS_LABEL_ROTATION,
+  X_AXIS_TITLE_OFFSET,
 } from '../constants';
 
+const defaultCountValues = {
+  totalPipelines: {
+    count: 0,
+  },
+  successfulPipelines: {
+    count: 0,
+  },
+};
+
+const defaultAnalyticsValues = {
+  weekPipelinesTotals: [],
+  weekPipelinesLabels: [],
+  weekPipelinesSuccessful: [],
+  monthPipelinesLabels: [],
+  monthPipelinesTotals: [],
+  monthPipelinesSuccessful: [],
+  yearPipelinesLabels: [],
+  yearPipelinesTotals: [],
+  yearPipelinesSuccessful: [],
+  pipelineTimesLabels: [],
+  pipelineTimesValues: [],
+};
+
 export default {
   components: {
-    StatisticsList,
+    GlAlert,
     GlColumnChart,
+    StatisticsList,
     PipelinesAreaChart,
   },
-  props: {
-    counts: {
-      type: Object,
-      required: true,
-    },
-    timesChartData: {
-      type: Object,
-      required: true,
-    },
-    lastWeekChartData: {
-      type: Object,
-      required: true,
-    },
-    lastMonthChartData: {
-      type: Object,
-      required: true,
-    },
-    lastYearChartData: {
-      type: Object,
-      required: true,
+  inject: {
+    projectPath: {
+      type: String,
+      default: '',
     },
   },
   data() {
     return {
-      timesChartTransformedData: [
-        {
-          name: 'full',
-          data: this.mergeLabelsAndValues(this.timesChartData.labels, this.timesChartData.values),
-        },
-      ],
+      counts: {
+        ...defaultCountValues,
+      },
+      analytics: {
+        ...defaultAnalyticsValues,
+      },
+      showFailureAlert: false,
+      failureType: null,
     };
   },
+  apollo: {
+    counts: {
+      query: getPipelineCountByStatus,
+      variables() {
+        return {
+          projectPath: this.projectPath,
+        };
+      },
+      update(data) {
+        return data?.project;
+      },
+      error() {
+        this.reportFailure(LOAD_PIPELINES_FAILURE);
+      },
+    },
+    analytics: {
+      query: getProjectPipelineStatistics,
+      variables() {
+        return {
+          projectPath: this.projectPath,
+        };
+      },
+      update(data) {
+        return data?.project?.pipelineAnalytics;
+      },
+      error() {
+        this.reportFailure(LOAD_ANALYTICS_FAILURE);
+      },
+    },
+  },
   computed: {
+    failure() {
+      switch (this.failureType) {
+        case LOAD_ANALYTICS_FAILURE:
+          return {
+            text: this.$options.errorTexts[LOAD_ANALYTICS_FAILURE],
+            variant: 'danger',
+          };
+        case PARSE_FAILURE:
+          return {
+            text: this.$options.errorTexts[PARSE_FAILURE],
+            variant: 'danger',
+          };
+        case UNSUPPORTED_DATA:
+          return {
+            text: this.$options.errorTexts[UNSUPPORTED_DATA],
+            variant: 'info',
+          };
+        default:
+          return {
+            text: this.$options.errorTexts[DEFAULT],
+            variant: 'danger',
+          };
+      }
+    },
+    successRatio() {
+      const { successfulPipelines, failedPipelines } = this.counts;
+      const successfulCount = successfulPipelines?.count;
+      const failedCount = failedPipelines?.count;
+      const ratio = (successfulCount / (successfulCount + failedCount)) * 100;
+
+      return failedCount === 0 ? 100 : ratio;
+    },
+    formattedCounts() {
+      const {
+        totalPipelines,
+        successfulPipelines,
+        failedPipelines,
+        totalPipelineDuration,
+      } = this.counts;
+
+      return {
+        total: totalPipelines?.count,
+        success: successfulPipelines?.count,
+        failed: failedPipelines?.count,
+        successRatio: this.successRatio,
+        totalDuration: totalPipelineDuration,
+      };
+    },
     areaCharts() {
       const { lastWeek, lastMonth, lastYear } = this.$options.chartTitles;
+      let areaChartsData = [];
 
+      try {
+        areaChartsData = [
+          this.buildAreaChartData(lastWeek, this.lastWeekChartData),
+          this.buildAreaChartData(lastMonth, this.lastMonthChartData),
+          this.buildAreaChartData(lastYear, this.lastYearChartData),
+        ];
+      } catch {
+        areaChartsData = [];
+        this.reportFailure(PARSE_FAILURE);
+      }
+
+      return areaChartsData;
+    },
+    lastWeekChartData() {
+      return {
+        labels: this.analytics.weekPipelinesLabels,
+        totals: this.analytics.weekPipelinesTotals,
+        success: this.analytics.weekPipelinesSuccessful,
+      };
+    },
+    lastMonthChartData() {
+      return {
+        labels: this.analytics.monthPipelinesLabels,
+        totals: this.analytics.monthPipelinesTotals,
+        success: this.analytics.monthPipelinesSuccessful,
+      };
+    },
+    lastYearChartData() {
+      return {
+        labels: this.analytics.yearPipelinesLabels,
+        totals: this.analytics.yearPipelinesTotals,
+        success: this.analytics.yearPipelinesSuccessful,
+      };
+    },
+    timesChartTransformedData() {
       return [
-        this.buildAreaChartData(lastWeek, this.lastWeekChartData),
-        this.buildAreaChartData(lastMonth, this.lastMonthChartData),
-        this.buildAreaChartData(lastYear, this.lastYearChartData),
+        {
+          name: 'full',
+          data: this.mergeLabelsAndValues(
+            this.analytics.pipelineTimesLabels,
+            this.analytics.pipelineTimesValues,
+          ),
+        },
       ];
     },
   },
@@ -85,6 +221,13 @@ export default {
         ],
       };
     },
+    hideAlert() {
+      this.showFailureAlert = false;
+    },
+    reportFailure(type) {
+      this.showFailureAlert = true;
+      this.failureType = type;
+    },
   },
   chartContainerHeight: CHART_CONTAINER_HEIGHT,
   timesChartOptions: {
@@ -96,6 +239,16 @@ export default {
       nameGap: X_AXIS_TITLE_OFFSET,
     },
   },
+  errorTexts: {
+    [LOAD_ANALYTICS_FAILURE]: s__(
+      'PipelineCharts|An error has ocurred when retrieving the analytics data',
+    ),
+    [LOAD_PIPELINES_FAILURE]: s__(
+      'PipelineCharts|An error has ocurred when retrieving the pipelines data',
+    ),
+    [PARSE_FAILURE]: s__('PipelineCharts|There was an error parsing the data for the charts.'),
+    [DEFAULT]: s__('PipelineCharts|An unknown error occurred while processing CI/CD analytics.'),
+  },
   get chartTitles() {
     const today = dateFormat(new Date(), CHART_DATE_FORMAT);
     const pastDate = timeScale =>
@@ -116,13 +269,16 @@ export default {
 </script>
 <template>
   <div>
-    <div class="mb-3">
+    <gl-alert v-if="showFailureAlert" :variant="failure.variant" @dismiss="hideAlert">
+      {{ failure.text }}
+    </gl-alert>
+    <div class="gl-mb-3">
       <h3>{{ s__('PipelineCharts|CI / CD Analytics') }}</h3>
     </div>
-    <h4 class="my-4">{{ s__('PipelineCharts|Overall statistics') }}</h4>
+    <h4 class="gl-my-4">{{ s__('PipelineCharts|Overall statistics') }}</h4>
     <div class="row">
       <div class="col-md-6">
-        <statistics-list :counts="counts" />
+        <statistics-list :counts="formattedCounts" />
       </div>
       <div class="col-md-6">
         <strong>
@@ -139,7 +295,7 @@ export default {
       </div>
     </div>
     <hr />
-    <h4 class="my-4">{{ __('Pipelines charts') }}</h4>
+    <h4 class="gl-my-4">{{ __('Pipelines charts') }}</h4>
     <pipelines-area-chart
       v-for="(chart, index) in areaCharts"
       :key="index"
diff --git a/app/assets/javascripts/projects/pipelines/charts/components/app_legacy.vue b/app/assets/javascripts/projects/pipelines/charts/components/app_legacy.vue
new file mode 100644
index 00000000000..c6e2b2e1140
--- /dev/null
+++ b/app/assets/javascripts/projects/pipelines/charts/components/app_legacy.vue
@@ -0,0 +1,151 @@
+<script>
+import dateFormat from 'dateformat';
+import { GlColumnChart } from '@gitlab/ui/dist/charts';
+import { __, sprintf } from '~/locale';
+import { getDateInPast } from '~/lib/utils/datetime_utility';
+import StatisticsList from './statistics_list.vue';
+import PipelinesAreaChart from './pipelines_area_chart.vue';
+import {
+  CHART_CONTAINER_HEIGHT,
+  INNER_CHART_HEIGHT,
+  X_AXIS_LABEL_ROTATION,
+  X_AXIS_TITLE_OFFSET,
+  CHART_DATE_FORMAT,
+  ONE_WEEK_AGO_DAYS,
+  ONE_MONTH_AGO_DAYS,
+} from '../constants';
+
+export default {
+  components: {
+    StatisticsList,
+    GlColumnChart,
+    PipelinesAreaChart,
+  },
+  props: {
+    counts: {
+      type: Object,
+      required: true,
+    },
+    timesChartData: {
+      type: Object,
+      required: true,
+    },
+    lastWeekChartData: {
+      type: Object,
+      required: true,
+    },
+    lastMonthChartData: {
+      type: Object,
+      required: true,
+    },
+    lastYearChartData: {
+      type: Object,
+      required: true,
+    },
+  },
+  data() {
+    return {
+      timesChartTransformedData: [
+        {
+          name: 'full',
+          data: this.mergeLabelsAndValues(this.timesChartData.labels, this.timesChartData.values),
+        },
+      ],
+    };
+  },
+  computed: {
+    areaCharts() {
+      const { lastWeek, lastMonth, lastYear } = this.$options.chartTitles;
+
+      return [
+        this.buildAreaChartData(lastWeek, this.lastWeekChartData),
+        this.buildAreaChartData(lastMonth, this.lastMonthChartData),
+        this.buildAreaChartData(lastYear, this.lastYearChartData),
+      ];
+    },
+  },
+  methods: {
+    mergeLabelsAndValues(labels, values) {
+      return labels.map((label, index) => [label, values[index]]);
+    },
+    buildAreaChartData(title, data) {
+      const { labels, totals, success } = data;
+
+      return {
+        title,
+        data: [
+          {
+            name: 'all',
+            data: this.mergeLabelsAndValues(labels, totals),
+          },
+          {
+            name: 'success',
+            data: this.mergeLabelsAndValues(labels, success),
+          },
+        ],
+      };
+    },
+  },
+  chartContainerHeight: CHART_CONTAINER_HEIGHT,
+  timesChartOptions: {
+    height: INNER_CHART_HEIGHT,
+    xAxis: {
+      axisLabel: {
+        rotate: X_AXIS_LABEL_ROTATION,
+      },
+      nameGap: X_AXIS_TITLE_OFFSET,
+    },
+  },
+  get chartTitles() {
+    const today = dateFormat(new Date(), CHART_DATE_FORMAT);
+    const pastDate = timeScale =>
+      dateFormat(getDateInPast(new Date(), timeScale), CHART_DATE_FORMAT);
+    return {
+      lastWeek: sprintf(__('Pipelines for last week (%{oneWeekAgo} - %{today})'), {
+        oneWeekAgo: pastDate(ONE_WEEK_AGO_DAYS),
+        today,
+      }),
+      lastMonth: sprintf(__('Pipelines for last month (%{oneMonthAgo} - %{today})'), {
+        oneMonthAgo: pastDate(ONE_MONTH_AGO_DAYS),
+        today,
+      }),
+      lastYear: __('Pipelines for last year'),
+    };
+  },
+};
+</script>
+<template>
+  <div>
+    <div class="mb-3">
+      <h3>{{ s__('PipelineCharts|CI / CD Analytics') }}</h3>
+    </div>
+    <h4 class="my-4">{{ s__('PipelineCharts|Overall statistics') }}</h4>
+    <div class="row">
+      <div class="col-md-6">
+        <statistics-list :counts="counts" />
+      </div>
+      <div class="col-md-6">
+        <strong>
+          {{ __('Duration for the last 30 commits') }}
+        </strong>
+        <gl-column-chart
+          :height="$options.chartContainerHeight"
+          :option="$options.timesChartOptions"
+          :bars="timesChartTransformedData"
+          :y-axis-title="__('Minutes')"
+          :x-axis-title="__('Commit')"
+          x-axis-type="category"
+        />
+      </div>
+    </div>
+    <hr />
+    <h4 class="my-4">{{ __('Pipelines charts') }}</h4>
+    <pipelines-area-chart
+      v-for="(chart, index) in areaCharts"
+      :key="index"
+      :chart-data="chart.data"
+    >
+      {{ chart.title }}
+    </pipelines-area-chart>
+  </div>
+</template>
diff --git a/app/assets/javascripts/projects/pipelines/charts/components/statistics_list.vue b/app/assets/javascripts/projects/pipelines/charts/components/statistics_list.vue
index aa59717ddcd..94cecd2e479 100644
--- a/app/assets/javascripts/projects/pipelines/charts/components/statistics_list.vue
+++ b/app/assets/javascripts/projects/pipelines/charts/components/statistics_list.vue
@@ -1,7 +1,10 @@
 <script>
 import { formatTime } from '~/lib/utils/datetime_utility';
+import { SUPPORTED_FORMATS, getFormatter } from '~/lib/utils/unit_format';
 import { s__, n__ } from '~/locale';
 
+const defaultPrecision = 2;
+
 export default {
   props: {
     counts: {
@@ -14,6 +17,8 @@ export default {
       return formatTime(this.counts.totalDuration);
     },
     statistics() {
+      const formatter = getFormatter(SUPPORTED_FORMATS.percentHundred);
+
       return [
         {
           title: s__('PipelineCharts|Total:'),
@@ -29,7 +34,7 @@ export default {
         },
         {
           title: s__('PipelineCharts|Success ratio:'),
-          value: `${this.counts.successRatio}%`,
+          value: formatter(this.counts.successRatio, defaultPrecision),
         },
         {
           title: s__('PipelineCharts|Total duration:'),
diff --git a/app/assets/javascripts/projects/pipelines/charts/constants.js b/app/assets/javascripts/projects/pipelines/charts/constants.js
index 5dbe3c01100..079e23943c1 100644
--- a/app/assets/javascripts/projects/pipelines/charts/constants.js
+++ b/app/assets/javascripts/projects/pipelines/charts/constants.js
@@ -11,3 +11,9 @@ export const ONE_WEEK_AGO_DAYS = 7;
 export const ONE_MONTH_AGO_DAYS = 31;
 
 export const CHART_DATE_FORMAT = 'dd mmm';
+
+export const DEFAULT = 'default';
+export const PARSE_FAILURE = 'parse_failure';
+export const LOAD_ANALYTICS_FAILURE = 'load_analytics_failure';
+export const LOAD_PIPELINES_FAILURE = 'load_analytics_failure';
+export const UNSUPPORTED_DATA = 'unsupported_data';
diff --git a/app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_pipeline_count_by_status.query.graphql b/app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_pipeline_count_by_status.query.graphql
new file mode 100644
index 00000000000..eb0dbf8dd16
--- /dev/null
+++ b/app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_pipeline_count_by_status.query.graphql
@@ -0,0 +1,14 @@
+query getPipelineCountByStatus($projectPath: ID!) {
+  project(fullPath: $projectPath) {
+    totalPipelines: pipelines {
+      count
+    }
+    successfulPipelines: pipelines(status: SUCCESS) {
+      count
+    }
+    failedPipelines: pipelines(status: FAILED) {
+      count
+    }
+    totalPipelineDuration
+  }
+}
diff --git a/app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_project_pipeline_statistics.query.graphql b/app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_project_pipeline_statistics.query.graphql
new file mode 100644
index 00000000000..18b645f8831
--- /dev/null
+++ b/app/assets/javascripts/projects/pipelines/charts/graphql/queries/get_project_pipeline_statistics.query.graphql
@@ -0,0 +1,17 @@
+query getProjectPipelineStatistics($projectPath: ID!) {
+  project(fullPath: $projectPath) {
+    pipelineAnalytics {
+      weekPipelinesTotals
+      weekPipelinesLabels
+      weekPipelinesSuccessful
+      monthPipelinesLabels
+      monthPipelinesTotals
+      monthPipelinesSuccessful
+      yearPipelinesLabels
+      yearPipelinesTotals
+      yearPipelinesSuccessful
+      pipelineTimesLabels
+      pipelineTimesValues
+    }
+  }
+}
diff --git a/app/assets/javascripts/projects/pipelines/charts/index.js b/app/assets/javascripts/projects/pipelines/charts/index.js
index eef1bc2d28b..f6e79f0ab51 100644
--- a/app/assets/javascripts/projects/pipelines/charts/index.js
+++ b/app/assets/javascripts/projects/pipelines/charts/index.js
@@ -1,8 +1,20 @@
 import Vue from 'vue';
+import VueApollo from 'vue-apollo';
+import createDefaultClient from '~/lib/graphql';
+import ProjectPipelinesChartsLegacy from './components/app_legacy.vue';
 import ProjectPipelinesCharts from './components/app.vue';
 
-export default () => {
-  const el = document.querySelector('#js-project-pipelines-charts-app');
+Vue.use(VueApollo);
+
+const apolloProvider = new VueApollo({
+  defaultClient: createDefaultClient(),
+});
+
+const mountPipelineChartsApp = el => {
+  // Not all of the values will be defined since some them will be
+  // empty depending on the value of the graphql_pipeline_analytics
+  // feature flag, once the rollout of the feature flag is completed
+  // the undefined values will be deleted
   const {
     countsFailed,
     countsSuccess,
@@ -20,22 +32,48 @@ export default () => {
     lastYearChartLabels,
     lastYearChartTotals,
     lastYearChartSuccess,
+    projectPath,
   } = el.dataset;
 
-  const parseAreaChartData = (labels, totals, success) => ({
-    labels: JSON.parse(labels),
-    totals: JSON.parse(totals),
-    success: JSON.parse(success),
-  });
+  const parseAreaChartData = (labels, totals, success) => {
+    let parsedData = {};
+
+    try {
+      parsedData = {
+        labels: JSON.parse(labels),
+        totals: JSON.parse(totals),
+        success: JSON.parse(success),
+      };
+    } catch {
+      parsedData = {};
+    }
+
+    return parsedData;
+  };
+
+  if (gon?.features?.graphqlPipelineAnalytics) {
+    return new Vue({
+      el,
+      name: 'ProjectPipelinesChartsApp',
+      components: {
+        ProjectPipelinesCharts,
+      },
+      apolloProvider,
+      provide: {
+        projectPath,
+      },
+      render: createElement => createElement(ProjectPipelinesCharts, {}),
+    });
+  }
 
   return new Vue({
     el,
-    name: 'ProjectPipelinesChartsApp',
+    name: 'ProjectPipelinesChartsAppLegacy',
     components: {
-      ProjectPipelinesCharts,
+      ProjectPipelinesChartsLegacy,
     },
     render: createElement =>
-      createElement(ProjectPipelinesCharts, {
+      createElement(ProjectPipelinesChartsLegacy, {
         props: {
           counts: {
             failed: countsFailed,
@@ -67,3 +105,8 @@ export default () => {
       }),
   });
 };
+
+export default () => {
+  const el = document.querySelector('#js-project-pipelines-charts-app');
+  return !el ? {} : mountPipelineChartsApp(el);
+};
diff --git a/app/assets/stylesheets/pages/tree.scss b/app/assets/stylesheets/pages/tree.scss
index f8b96772ed7..af54b3537b3 100644
--- a/app/assets/stylesheets/pages/tree.scss
+++ b/app/assets/stylesheets/pages/tree.scss
@@ -1,3 +1,7 @@
+.project-last-commit {
+  min-height: 4.75rem;
+}
+
 .tree-holder {
   .nav-block {
     margin: 16px 0;
diff --git a/app/assets/stylesheets/utilities.scss b/app/assets/stylesheets/utilities.scss
index ab330ed69c6..bf251993c38 100644
--- a/app/assets/stylesheets/utilities.scss
+++ b/app/assets/stylesheets/utilities.scss
@@ -143,3 +143,16 @@
     flex-direction: column !important;
   }
 }
+
+// These will be moved to @gitlab/ui in https://gitlab.com/gitlab-org/gitlab-ui/-/issues/1091
+.gl-w-10p {
+  width: 10%;
+}
+
+.gl-w-20p {
+  width: 20%;
+}
+
+.gl-w-40p {
+  width: 40%;
+}
diff --git a/app/controllers/jira_connect/app_descriptor_controller.rb b/app/controllers/jira_connect/app_descriptor_controller.rb
index bf53c61601b..d1ba8a98c64 100644
--- a/app/controllers/jira_connect/app_descriptor_controller.rb
+++ b/app/controllers/jira_connect/app_descriptor_controller.rb
@@ -27,29 +27,9 @@ class JiraConnect::AppDescriptorController < JiraConnect::ApplicationController
       authentication: {
         type: 'jwt'
       },
+      modules: modules,
       scopes: %w(READ WRITE DELETE),
       apiVersion: 1,
-      modules: {
-        jiraDevelopmentTool: {
-          key: 'gitlab-development-tool',
-          application: {
-            value: 'GitLab'
-          },
-          name: {
-            value: 'GitLab'
-          },
-          url: 'https://gitlab.com',
-          logoUrl: view_context.image_url('gitlab_logo.png'),
-          capabilities: %w(branch commit pull_request)
-        },
-        postInstallPage: {
-          key: 'gitlab-configuration',
-          name: {
-            value: 'GitLab Configuration'
-          },
-          url: relative_to_base_path(jira_connect_subscriptions_path)
-        }
-      },
       apiMigrations: {
         gdpr: true
       }
@@ -58,6 +38,55 @@ class JiraConnect::AppDescriptorController < JiraConnect::ApplicationController
 
   private
 
+  HOME_URL = 'https://gitlab.com'
+  DOC_URL = 'https://docs.gitlab.com/ee/user/project/integrations/jira.html#gitlab-jira-integration'
+
+  def modules
+    modules = {
+      jiraDevelopmentTool: {
+        key: 'gitlab-development-tool',
+        application: {
+          value: 'GitLab'
+        },
+        name: {
+          value: 'GitLab'
+        },
+        url: HOME_URL,
+        logoUrl: logo_url,
+        capabilities: %w(branch commit pull_request)
+      },
+      postInstallPage: {
+        key: 'gitlab-configuration',
+        name: {
+          value: 'GitLab Configuration'
+        },
+        url: relative_to_base_path(jira_connect_subscriptions_path)
+      }
+    }
+
+    modules.merge!(build_information_module)
+
+    modules
+  end
+
+  def logo_url
+    view_context.image_url('gitlab_logo.png')
+  end
+
+  # See: https://developer.atlassian.com/cloud/jira/software/modules/build/
+  def build_information_module
+    {
+      jiraBuildInfoProvider: {
+        homeUrl: HOME_URL,
+        logoUrl: logo_url,
+        documentationUrl: DOC_URL,
+        actions: {},
+        name: { value: "GitLab CI" },
+        key: "gitlab-ci"
+      }
+    }
+  end
+
   def relative_to_base_path(full_path)
     full_path.sub(/^#{jira_connect_base_path}/, '')
   end
diff --git a/app/controllers/projects/pipelines_controller.rb b/app/controllers/projects/pipelines_controller.rb
index 270fa056014..0918325d214 100644
--- a/app/controllers/projects/pipelines_controller.rb
+++ b/app/controllers/projects/pipelines_controller.rb
@@ -17,6 +17,7 @@ class Projects::PipelinesController < Projects::ApplicationController
     push_frontend_feature_flag(:new_pipeline_form, project, default_enabled: true)
     push_frontend_feature_flag(:graphql_pipeline_header, project, type: :development, default_enabled: false)
     push_frontend_feature_flag(:graphql_pipeline_details, project, type: :development, default_enabled: false)
+    push_frontend_feature_flag(:graphql_pipeline_analytics, project, type: :development)
     push_frontend_feature_flag(:new_pipeline_form_prefilled_vars, project, type: :development)
   end
   before_action :ensure_pipeline, only: [:show]
diff --git a/app/controllers/projects_controller.rb b/app/controllers/projects_controller.rb
index 6348e760fd6..96cf3c9cc50 100644
--- a/app/controllers/projects_controller.rb
+++ b/app/controllers/projects_controller.rb
@@ -71,8 +71,6 @@ class ProjectsController < Projects::ApplicationController
     @project = ::Projects::CreateService.new(current_user, project_params(attributes: project_params_create_attributes)).execute
 
     if @project.saved?
-      cookies[:issue_board_welcome_hidden] = { path: project_path(@project), value: nil, expires: Time.zone.at(0) }
-
       redirect_to(
         project_path(@project, custom_import_params),
         notice: _("Project '%{project_name}' was successfully created.") % { project_name: @project.name }
diff --git a/app/graphql/resolvers/ci/runner_setup_resolver.rb b/app/graphql/resolvers/ci/runner_setup_resolver.rb
index 241cd57f74b..f68d71174c3 100644
--- a/app/graphql/resolvers/ci/runner_setup_resolver.rb
+++ b/app/graphql/resolvers/ci/runner_setup_resolver.rb
@@ -23,7 +23,10 @@ module Resolvers
 
       def resolve(platform:, architecture:, **args)
         instructions = Gitlab::Ci::RunnerInstructions.new(
-          { current_user: current_user, os: platform, arch: architecture }.merge(target_param(args))
+          current_user: current_user,
+          os: platform,
+          arch: architecture,
+          **target_param(args)
         )
 
         {
diff --git a/app/models/application_setting.rb b/app/models/application_setting.rb
index ef3326cfdae..007de5812ee 100644
--- a/app/models/application_setting.rb
+++ b/app/models/application_setting.rb
@@ -367,11 +367,11 @@ class ApplicationSetting < ApplicationRecord
 
   validates :eks_access_key_id,
             length: { in: 16..128 },
-            if: :eks_integration_enabled?
+            if: -> (setting) { setting.eks_integration_enabled? && setting.eks_access_key_id.present? }
 
   validates :eks_secret_access_key,
             presence: true,
-            if: :eks_integration_enabled?
+            if: -> (setting) { setting.eks_integration_enabled? && setting.eks_access_key_id.present? }
 
   validates_with X509CertificateCredentialsValidator,
                  certificate: :external_auth_client_cert,
diff --git a/app/models/ci/pipeline.rb b/app/models/ci/pipeline.rb
index b59eb22fd4c..d40450f638b 100644
--- a/app/models/ci/pipeline.rb
+++ b/app/models/ci/pipeline.rb
@@ -259,6 +259,16 @@ module Ci
         end
       end
 
+      after_transition any => any do |pipeline|
+        next unless Feature.enabled?(:jira_sync_builds, pipeline.project)
+
+        pipeline.run_after_commit do
+          # Passing the seq-id ensures this is idempotent
+          seq_id = ::Atlassian::JiraConnect::Client.generate_update_sequence_id
+          ::JiraConnect::SyncBuildsWorker.perform_async(pipeline.id, seq_id)
+        end
+      end
+
       after_transition any => [:success, :failed] do |pipeline|
         ref_status = pipeline.ci_ref&.update_status_by!(pipeline)
 
diff --git a/app/models/concerns/issuable.rb b/app/models/concerns/issuable.rb
index 39a6ef24582..c3a394c1ca5 100644
--- a/app/models/concerns/issuable.rb
+++ b/app/models/concerns/issuable.rb
@@ -304,14 +304,12 @@ module Issuable
     end
 
     def order_labels_priority(direction = 'ASC', excluded_labels: [], extra_select_columns: [], with_cte: false)
-      params = {
+      highest_priority = highest_label_priority(
         target_type: name,
         target_column: "#{table_name}.id",
         project_column: "#{table_name}.#{project_foreign_key}",
         excluded_labels: excluded_labels
-      }
-
-      highest_priority = highest_label_priority(params).to_sql
+      ).to_sql
 
       # When using CTE make sure to select the same columns that are on the group_by clause.
       # This prevents errors when ignored columns are present in the database.
diff --git a/app/models/label.rb b/app/models/label.rb
index 3c70eef9bd5..54129c7c7f3 100644
--- a/app/models/label.rb
+++ b/app/models/label.rb
@@ -257,7 +257,7 @@ class Label < ApplicationRecord
   end
 
   def present(attributes)
-    super(attributes.merge(presenter_class: ::LabelPresenter))
+    super(**attributes.merge(presenter_class: ::LabelPresenter))
   end
 
   private
diff --git a/app/models/todo.rb b/app/models/todo.rb
index 0d893b25253..12dc9ce0fe6 100644
--- a/app/models/todo.rb
+++ b/app/models/todo.rb
@@ -139,13 +139,11 @@ class Todo < ApplicationRecord
     # Todos with highest priority first then oldest todos
     # Need to order by created_at last because of differences on Mysql and Postgres when joining by type "Merge_request/Issue"
     def order_by_labels_priority
-      params = {
+      highest_priority = highest_label_priority(
         target_type_column: "todos.target_type",
         target_column: "todos.target_id",
         project_column: "todos.project_id"
-      }
-
-      highest_priority = highest_label_priority(params).to_sql
+      ).to_sql
 
       select("#{table_name}.*, (#{highest_priority}) AS highest_priority")
         .order(Gitlab::Database.nulls_last_order('highest_priority', 'ASC'))
diff --git a/app/services/ci/create_pipeline_service.rb b/app/services/ci/create_pipeline_service.rb
index 32670d81906..dbe81521cfc 100644
--- a/app/services/ci/create_pipeline_service.rb
+++ b/app/services/ci/create_pipeline_service.rb
@@ -91,7 +91,9 @@ module Ci
     # rubocop: enable Metrics/ParameterLists
 
     def execute!(*args, &block)
-      execute(*args, &block).tap do |pipeline|
+      source, params = args[0], Hash(args[1])
+
+      execute(source, **params, &block).tap do |pipeline|
         unless pipeline.persisted?
           raise CreateError, pipeline.full_error_messages
         end
diff --git a/app/services/clusters/aws/fetch_credentials_service.rb b/app/services/clusters/aws/fetch_credentials_service.rb
index 96abbb43969..497e676f549 100644
--- a/app/services/clusters/aws/fetch_credentials_service.rb
+++ b/app/services/clusters/aws/fetch_credentials_service.rb
@@ -30,10 +30,17 @@ module Clusters
       attr_reader :provider, :region
 
       def client
-        ::Aws::STS::Client.new(credentials: gitlab_credentials, region: region)
+        ::Aws::STS::Client.new(**client_args)
+      end
+
+      def client_args
+        { region: region, credentials: gitlab_credentials }.compact
       end
 
       def gitlab_credentials
+        # These are not needed for IAM instance profiles
+        return unless access_key_id.present? && secret_access_key.present?
+
         ::Aws::Credentials.new(access_key_id, secret_access_key)
       end
 
diff --git a/app/services/git/base_hooks_service.rb b/app/services/git/base_hooks_service.rb
index ea5b2f401b3..1ca1bfa0c05 100644
--- a/app/services/git/base_hooks_service.rb
+++ b/app/services/git/base_hooks_service.rb
@@ -135,11 +135,12 @@ module Git
       # We only need the last commit for the event push, and we don't
       # need the full deltas either.
       @event_push_data ||= Gitlab::DataBuilder::Push.build(
-        push_data_params(commits: commits.last, with_changed_files: false))
+        **push_data_params(commits: commits.last, with_changed_files: false)
+      )
     end
 
     def push_data
-      @push_data ||= Gitlab::DataBuilder::Push.build(push_data_params(commits: limited_commits))
+      @push_data ||= Gitlab::DataBuilder::Push.build(**push_data_params(commits: limited_commits))
 
       # Dependent code may modify the push data, so return a duplicate each time
       @push_data.dup
diff --git a/app/services/jira_connect/sync_service.rb b/app/services/jira_connect/sync_service.rb
index f8855fb6deb..b2af284f1f0 100644
--- a/app/services/jira_connect/sync_service.rb
+++ b/app/services/jira_connect/sync_service.rb
@@ -6,13 +6,15 @@ module JiraConnect
       self.project = project
     end
 
-    def execute(commits: nil, branches: nil, merge_requests: nil, update_sequence_id: nil)
-      JiraConnectInstallation.for_project(project).each do |installation|
+    # Parameters: see Atlassian::JiraConnect::Client#send_info
+    # Includes: update_sequence_id, commits, branches, merge_requests, pipelines
+    def execute(**args)
+      JiraConnectInstallation.for_project(project).flat_map do |installation|
         client = Atlassian::JiraConnect::Client.new(installation.base_url, installation.shared_secret)
 
-        response = client.store_dev_info(project: project, commits: commits, branches: branches, merge_requests: merge_requests, update_sequence_id: update_sequence_id)
+        responses = client.send_info(project: project, **args)
 
-        log_response(response)
+        responses.each { |r| log_response(r) }
       end
     end
 
@@ -29,7 +31,7 @@ module JiraConnect
         jira_response: response&.to_json
       }
 
-      if response && response['errorMessages']
+      if response && (response['errorMessages'] || response['rejectedBuilds'].present?)
         logger.error(message)
       else
         logger.info(message)
diff --git a/app/validators/json_schema_validator.rb b/app/validators/json_schema_validator.rb
index f8c1727035c..fee4a00cec5 100644
--- a/app/validators/json_schema_validator.rb
+++ b/app/validators/json_schema_validator.rb
@@ -12,6 +12,7 @@
 class JsonSchemaValidator < ActiveModel::EachValidator
   FILENAME_ALLOWED = /\A[a-z0-9_-]*\Z/.freeze
   FilenameError = Class.new(StandardError)
+  JSON_VALIDATOR_MAX_DRAFT_VERSION = 4
 
   def initialize(options)
     raise ArgumentError, "Expected 'filename' as an argument" unless options[:filename]
@@ -29,10 +30,18 @@ class JsonSchemaValidator < ActiveModel::EachValidator
   private
 
   def valid_schema?(value)
-    JSON::Validator.validate(schema_path, value)
+    if draft_version > JSON_VALIDATOR_MAX_DRAFT_VERSION
+      JSONSchemer.schema(Pathname.new(schema_path)).valid?(value)
+    else
+      JSON::Validator.validate(schema_path, value)
+    end
   end
 
   def schema_path
     Rails.root.join('app', 'validators', 'json_schemas', "#{options[:filename]}.json").to_s
   end
+
+  def draft_version
+    options[:draft] || JSON_VALIDATOR_MAX_DRAFT_VERSION
+  end
 end
diff --git a/app/views/admin/application_settings/_eks.html.haml b/app/views/admin/application_settings/_eks.html.haml
index 5c0e544eaad..6a2f3262520 100644
--- a/app/views/admin/application_settings/_eks.html.haml
+++ b/app/views/admin/application_settings/_eks.html.haml
@@ -24,8 +24,13 @@
         .form-group
           = f.label :eks_access_key_id, 'Access key ID', class: 'label-bold'
           = f.text_field :eks_access_key_id, class: 'form-control'
+          .form-text.text-muted
+            = _('AWS Access Key.  Only required if not using role instance credentials')
+
         .form-group
           = f.label :eks_secret_access_key, 'Secret access key', class: 'label-bold'
           = f.password_field :eks_secret_access_key, autocomplete: 'off', class: 'form-control'
+          .form-text.text-muted
+            = _('AWS Secret Access Key.  Only required if not using role instance credentials')
 
       = f.submit 'Save changes', class: "gl-button btn btn-success"
diff --git a/app/views/admin/users/index.html.haml b/app/views/admin/users/index.html.haml
index 731d5ff6746..b86abb893a9 100644
--- a/app/views/admin/users/index.html.haml
+++ b/app/views/admin/users/index.html.haml
@@ -69,13 +69,13 @@
               = link_to admin_users_path(sort: value, filter: params[:filter], search_query: params[:search_query]) do
                 = title
 
-- if @users.empty?
-  .nothing-here-block.border-top-0
-    = s_('AdminUsers|No users found')
-- elsif Feature.enabled?(:vue_admin_users)
+- if Feature.enabled?(:vue_admin_users)
   #js-admin-users-app{ data: admin_users_data_attributes(@users) }
     .gl-spinner-container.gl-my-7
       %span.gl-vertical-align-bottom.gl-spinner.gl-spinner-dark.gl-spinner-lg{ aria: { label: _('Loading') } }
+- elsif @users.empty?
+  .nothing-here-block.border-top-0
+    = s_('AdminUsers|No users found')
 - else
   .table-holder
     .thead-white.text-nowrap.gl-responsive-table-row.table-row-header{ role: 'row' }
diff --git a/app/views/projects/_files.html.haml b/app/views/projects/_files.html.haml
index 6a50d897c98..88dcc74a465 100644
--- a/app/views/projects/_files.html.haml
+++ b/app/views/projects/_files.html.haml
@@ -11,6 +11,9 @@
     = render 'projects/tree/tree_header', tree: @tree
 
   #js-last-commit
+    .info-well.gl-display-none.gl-display-sm-flex.project-last-commit
+      .gl-spinner-container.m-auto
+        = loading_icon(size: 'md', color: 'dark', css_class: 'align-text-bottom')
 
   - if is_project_overview
     .project-buttons.gl-mb-3.js-show-on-project-root
diff --git a/app/views/projects/pipelines/charts.html.haml b/app/views/projects/pipelines/charts.html.haml
index 55f1b9098c3..f3360e150ad 100644
--- a/app/views/projects/pipelines/charts.html.haml
+++ b/app/views/projects/pipelines/charts.html.haml
@@ -1,7 +1,10 @@
 - page_title _('CI / CD Analytics')
 
-#js-project-pipelines-charts-app{ data: { counts: @counts, success_ratio: success_ratio(@counts),
-  times_chart: { labels: @charts[:pipeline_times].labels, values: @charts[:pipeline_times].pipeline_times },
-  last_week_chart: { labels: @charts[:week].labels, totals: @charts[:week].total, success: @charts[:week].success },
-  last_month_chart: { labels: @charts[:month].labels, totals: @charts[:month].total, success: @charts[:month].success },
-  last_year_chart: { labels: @charts[:year].labels, totals: @charts[:year].total, success: @charts[:year].success } } }
+- if Feature.enabled?(:graphql_pipeline_analytics)
+  #js-project-pipelines-charts-app{ data: { project_path: @project.full_path } }
+- else
+  #js-project-pipelines-charts-app{ data: { counts: @counts, success_ratio: success_ratio(@counts),
+    times_chart: { labels: @charts[:pipeline_times].labels, values: @charts[:pipeline_times].pipeline_times },
+    last_week_chart: { labels: @charts[:week].labels, totals: @charts[:week].total, success: @charts[:week].success },
+    last_month_chart: { labels: @charts[:month].labels, totals: @charts[:month].total, success: @charts[:month].success },
+    last_year_chart: { labels: @charts[:year].labels, totals: @charts[:year].total, success: @charts[:year].success } } }
diff --git a/app/workers/all_queues.yml b/app/workers/all_queues.yml
index de0016f64d6..369a769328e 100644
--- a/app/workers/all_queues.yml
+++ b/app/workers/all_queues.yml
@@ -877,15 +877,23 @@
   :tags: []
 - :name: jira_connect:jira_connect_sync_branch
   :feature_category: :integrations
-  :has_external_dependencies:
+  :has_external_dependencies: true
   :urgency: :low
   :resource_boundary: :unknown
   :weight: 1
   :idempotent:
   :tags: []
+- :name: jira_connect:jira_connect_sync_builds
+  :feature_category: :integrations
+  :has_external_dependencies: true
+  :urgency: :low
+  :resource_boundary: :unknown
+  :weight: 1
+  :idempotent: true
+  :tags: []
 - :name: jira_connect:jira_connect_sync_merge_request
   :feature_category: :integrations
-  :has_external_dependencies:
+  :has_external_dependencies: true
   :urgency: :low
   :resource_boundary: :unknown
   :weight: 1
diff --git a/app/workers/jira_connect/sync_branch_worker.rb b/app/workers/jira_connect/sync_branch_worker.rb
index 4c1c987353d..d7e773b0861 100644
--- a/app/workers/jira_connect/sync_branch_worker.rb
+++ b/app/workers/jira_connect/sync_branch_worker.rb
@@ -7,6 +7,7 @@ module JiraConnect
     queue_namespace :jira_connect
     feature_category :integrations
     loggable_arguments 1, 2
+    worker_has_external_dependencies!
 
     def perform(project_id, branch_name, commit_shas, update_sequence_id = nil)
       project = Project.find_by_id(project_id)
diff --git a/app/workers/jira_connect/sync_builds_worker.rb b/app/workers/jira_connect/sync_builds_worker.rb
new file mode 100644
index 00000000000..c1c749f6041
--- /dev/null
+++ b/app/workers/jira_connect/sync_builds_worker.rb
@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module JiraConnect
+  class SyncBuildsWorker
+    include ApplicationWorker
+
+    idempotent!
+    worker_has_external_dependencies!
+
+    queue_namespace :jira_connect
+    feature_category :integrations
+
+    def perform(pipeline_id, sequence_id)
+      pipeline = Ci::Pipeline.find_by_id(pipeline_id)
+
+      return unless pipeline
+      return unless Feature.enabled?(:jira_sync_builds, pipeline.project)
+
+      ::JiraConnect::SyncService
+        .new(pipeline.project)
+        .execute(pipelines: [pipeline], update_sequence_id: sequence_id)
+    end
+  end
+end
diff --git a/app/workers/jira_connect/sync_merge_request_worker.rb b/app/workers/jira_connect/sync_merge_request_worker.rb
index f45ab38f35d..6ef426790b3 100644
--- a/app/workers/jira_connect/sync_merge_request_worker.rb
+++ b/app/workers/jira_connect/sync_merge_request_worker.rb
@@ -7,6 +7,8 @@ module JiraConnect
     queue_namespace :jira_connect
     feature_category :integrations
 
+    worker_has_external_dependencies!
+
     def perform(merge_request_id, update_sequence_id = nil)
       merge_request = MergeRequest.find_by_id(merge_request_id)
 
diff --git a/changelogs/unreleased/262168-pagination-of-bitbucket-server-importer-ignores-first-25-repositor.yml b/changelogs/unreleased/262168-pagination-of-bitbucket-server-importer-ignores-first-25-repositor.yml
new file mode 100644
index 00000000000..e94dfff99ac
--- /dev/null
+++ b/changelogs/unreleased/262168-pagination-of-bitbucket-server-importer-ignores-first-25-repositor.yml
@@ -0,0 +1,5 @@
+---
+title: Remove unneeded pagination code for project importers.
+merge_request: 49589
+author:
+type: changed
diff --git a/changelogs/unreleased/263497-add-validating-json-schema-draft-7.yml b/changelogs/unreleased/263497-add-validating-json-schema-draft-7.yml
new file mode 100644
index 00000000000..7447e61736b
--- /dev/null
+++ b/changelogs/unreleased/263497-add-validating-json-schema-draft-7.yml
@@ -0,0 +1,5 @@
+---
+title: Add validating jsonb fields with json schema draft-07
+merge_request: 49451
+author:
+type: added
diff --git a/changelogs/unreleased/270583-improve-efficiency-when-creating-additional-boards-within-a-group-.yml b/changelogs/unreleased/270583-improve-efficiency-when-creating-additional-boards-within-a-group-.yml
new file mode 100644
index 00000000000..ff17adef4c6
--- /dev/null
+++ b/changelogs/unreleased/270583-improve-efficiency-when-creating-additional-boards-within-a-group-.yml
@@ -0,0 +1,5 @@
+---
+title: Boards - Remove default labels lists generation
+merge_request: 49071
+author:
+type: changed
diff --git a/changelogs/unreleased/sh-aws-sdk-use-iam-profile.yml b/changelogs/unreleased/sh-aws-sdk-use-iam-profile.yml
new file mode 100644
index 00000000000..e5c8382f3f8
--- /dev/null
+++ b/changelogs/unreleased/sh-aws-sdk-use-iam-profile.yml
@@ -0,0 +1,5 @@
+---
+title: Support instance profiles for IAM role for Amazon EKS integration
+merge_request: 49212
+author:
+type: added
diff --git a/changelogs/unreleased/tz-reduce-last-commit-cls.yml b/changelogs/unreleased/tz-reduce-last-commit-cls.yml
new file mode 100644
index 00000000000..4b6c75fbfbd
--- /dev/null
+++ b/changelogs/unreleased/tz-reduce-last-commit-cls.yml
@@ -0,0 +1,5 @@
+---
+title: Rendering Loading State of Last Commit earlier
+merge_request: 49362
+author:
+type: performance
diff --git a/config/feature_flags/development/graphql_pipeline_analytics.yml b/config/feature_flags/development/graphql_pipeline_analytics.yml
new file mode 100644
index 00000000000..f91475fcbd7
--- /dev/null
+++ b/config/feature_flags/development/graphql_pipeline_analytics.yml
@@ -0,0 +1,8 @@
+---
+name: graphql_pipeline_analytics
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/48267
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/290153
+milestone: '13.7'
+type: development
+group: group::continuos integration
+default_enabled: false
diff --git a/config/feature_flags/development/jira_sync_builds.yml b/config/feature_flags/development/jira_sync_builds.yml
new file mode 100644
index 00000000000..8cb054b848d
--- /dev/null
+++ b/config/feature_flags/development/jira_sync_builds.yml
@@ -0,0 +1,8 @@
+---
+name: jira_sync_builds
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/49348
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/292013
+milestone: '13.7'
+type: development
+group: group::ecosystem
+default_enabled: false
diff --git a/doc/api/audit_events.md b/doc/api/audit_events.md
index 83b244ccb8d..282c4ccfeea 100644
--- a/doc/api/audit_events.md
+++ b/doc/api/audit_events.md
@@ -132,7 +132,8 @@ Example response:
 
 The Group Audit Events API allows you to retrieve [group audit events](../administration/audit_events.md#group-events).
 
-To retrieve group audit events using the API, you must [authenticate yourself](README.md#authentication) as an Administrator or an owner of the group.
+A user with a Owner role (or above) can retrieve group audit events of all users.
+A user with a Developer or Maintainer role is limited to group audit events based on their individual actions.
 
 ### Retrieve all group audit events
 
@@ -238,7 +239,8 @@ Example response:
 
 The Project Audit Events API allows you to retrieve [project audit events](../administration/audit_events.md#project-events).
 
-To retrieve project audit events using the API, you must [authenticate yourself](README.md#authentication) as a Maintainer or an Owner of the project.
+A user with a Maintainer role (or above) can retrieve project audit events of all users.
+A user with a Developer role is limited to project audit events based on their individual actions.
 
 ### Retrieve all project audit events
 
diff --git a/doc/development/README.md b/doc/development/README.md
index 4409b6313d6..b46e7d57936 100644
--- a/doc/development/README.md
+++ b/doc/development/README.md
@@ -160,6 +160,7 @@ See [database guidelines](database/index.md).
 - [Security Scanners](integrations/secure.md)
 - [Secure Partner Integration](integrations/secure_partner_integration.md)
 - [How to run Jenkins in development environment](integrations/jenkins.md)
+- [How to run local Codesandbox integration for Web IDE Live Preview](integrations/codesandbox.md)
 
 ## Testing guides
 
diff --git a/doc/development/documentation/styleguide/index.md b/doc/development/documentation/styleguide/index.md
index 3b63d8a9a27..71ab08d9144 100644
--- a/doc/development/documentation/styleguide/index.md
+++ b/doc/development/documentation/styleguide/index.md
@@ -1811,9 +1811,9 @@ Tier badges are displayed as orange text next to a heading. For example:
 You must assign a tier badge:
 
 - To [all H1 topic headings](#product-tier-badges-on-headings).
-- To all H2 or higher topic headings that apply to a tier other than Core.
+- To topic headings that don't apply to the same tier as the H1.
 - To [sections of a topic](#product-tier-badges-on-other-content),
-  if they apply to a tier other than Core.
+  if they apply to a tier other than what applies to the H1.
 
 #### Product tier badges on headings
 
diff --git a/doc/development/integrations/codesandbox.md b/doc/development/integrations/codesandbox.md
new file mode 100644
index 00000000000..1641f4656a0
--- /dev/null
+++ b/doc/development/integrations/codesandbox.md
@@ -0,0 +1,140 @@
+# Set up local Codesandbox development environment
+
+This guide walks through setting up a local [Codesandbox repository](https://github.com/codesandbox/codesandbox-client) and integrating it with a local GitLab instance. Codesandbox 
+is used to power the Web IDE's [Live Preview feature](../../user/project/web_ide/index.md#live-preview). Having a local Codesandbox setup is useful for debugging upstream issues or 
+creating upstream contributions like [this one](https://github.com/codesandbox/codesandbox-client/pull/5137).
+
+## Initial setup
+
+Before using Codesandbox with your local GitLab instance, you must:
+
+1. Enable HTTPS on your GDK. Codesandbox uses Service Workers that require `https`.
+   Follow the GDK [NGINX configuration instructions](https://gitlab.com/gitlab-org/gitlab-development-kit/-/blob/master/doc/howto/nginx.md) to enable HTTPS for GDK.
+1. Clone the [`codesandbox-client` project](https://github.com/codesandbox/codesandbox-client)
+   locally. If you plan on contributing upstream, you might want to fork and clone first.
+1. (Optional) Use correct `python` and `nodejs` versions. Otherwise, `yarn` may fail to
+   install or build some packages. If you're using `asdf` you can run the following commands:
+
+   ```shell
+   asdf local nodejs 10.14.2
+   asdf local python 2.7.18
+   ```
+
+1. Run the following commands in the `codesandbox-client` project checkout:
+
+   ```shell
+   # This might be necessary for the `prepublishOnly` job that is run later
+   yarn global add lerna
+
+   # Install packages
+   yarn
+   ```
+
+   You can run `yarn build:clean` to clean up the build assets.
+
+## Use local GitLab instance with local Codesandbox
+
+GitLab integrates with two parts of Codesandbox:
+
+- An NPM package called `smooshpack` (called `sandpack` in the `codesandbox-client` project).
+  This exposes an entrypoint for us to kick off Codesandbox's bundler.
+- A server that houses Codesandbox assets for bundling and previewing. This is hosted
+  on a separate server for security.
+
+Each time you want to run GitLab and Codesandbox together, you need to perform the
+steps in the following sections.
+
+### Use local `smooshpack` for GitLab
+
+GitLab usually satisfies its `smooshpack` dependency with a remote module, but we want
+to use a locally-built module. To build and use a local `smooshpack` module:
+
+1. In the `codesandbox-client` project directory, run:
+
+   ```shell
+   cd standalone-packages/sandpack
+   yarn link
+
+   # (Optional) you might want to start a development build
+   yarn run start
+   ```
+
+   Now, in the GitLab project, you can run `yarn link "smooshpack"`. `yarn` looks 
+   for `smooshpack` **on disk** as opposed to the one hosted remotely.
+
+1. In the `gitlab` project directory, run:
+
+   ```shell
+   # Remove and reinstall node_modules just to be safe
+   rm -rf node_modules
+   yarn install
+
+   # Use the "smooshpack" package on disk
+   yarn link "smooshpack"
+   ```
+
+### Fix possible GDK webpack problem
+
+`webpack` in GDK can fail to find packages inside a linked package. This step can help
+you avoid `webpack` breaking with messages saying that it can't resolve packages from
+`smooshpack/dist/sandpack.es5.js`.
+
+In the `codesandbox-client` project directory, run:
+
+```shell
+cd standalone-packages
+
+mkdir node_modules
+ln -s $PATH_TO_LOCAL_GITLAB/node_modules/core-js ./node_modules/core-js
+```
+
+### Start building codesandbox app assets
+
+In the `codesandbox-client` project directory:
+
+```shell
+cd packages/app
+
+yarn start:sandpack-sandbox
+```
+
+### Create HTTPS proxy for Codesandbox `sandpack` assets
+
+Because we need `https`, we need to create a proxy to the webpack server. We can use
+[`http-server`](https://www.npmjs.com/package/http-server), which can do this proxying
+out of the box:
+
+```shell
+npx http-server --proxy http://localhost:3000 -S -C $PATH_TO_CERT_PEM -K $PATH_TO_KEY_PEM -p 8044 -d false
+```
+
+### Update `bundler_url` setting in GitLab
+
+We need to update our `application_setting_implementation.rb` to point to the server that hosts the 
+Codesandbox `sandpack` assets. For instance, if these assets are hosted by a server at `https://sandpack.local:8044`:
+
+```patch
+diff --git a/app/models/application_setting_implementation.rb b/app/models/application_setting_implementation.rb
+index 6eed627b502..1824669e881 100644
+--- a/app/models/application_setting_implementation.rb
++++ b/app/models/application_setting_implementation.rb
+@@ -391,7 +391,7 @@ def static_objects_external_storage_enabled?
+   # This will eventually be configurable
+   # https://gitlab.com/gitlab-org/gitlab/issues/208161
+   def web_ide_clientside_preview_bundler_url
+-    'https://sandbox-prod.gitlab-static.net'
++    'https://sandpack.local:8044'
+   end
+ 
+   private
+
+```
+
+NOTE:
+You can apply this patch by copying it to your clipboard and running `pbpaste | git apply`.
+
+You'll might want to restart the GitLab Rails server after making this change:
+
+```shell
+gdk restart rails-web
+```
diff --git a/doc/development/product_analytics/snowplow.md b/doc/development/product_analytics/snowplow.md
index 43ffaf45098..bba0512993f 100644
--- a/doc/development/product_analytics/snowplow.md
+++ b/doc/development/product_analytics/snowplow.md
@@ -154,6 +154,17 @@ Below is a list of supported `data-track-*` attributes:
 | `data-track-value`    | false    | The `value` as described in our [Structured event taxonomy](#structured-event-taxonomy). If omitted, this is the element's `value` property or an empty string. For checkboxes, the default value is the element's checked attribute or `false` when unchecked. |
 | `data-track-context`  | false    | The `context` as described in our [Structured event taxonomy](#structured-event-taxonomy). |
 
+#### Caveats
+
+When using the GitLab helper method [`nav_link`](https://gitlab.com/gitlab-org/gitlab/-/blob/898b286de322e5df6a38d257b10c94974d580df8/app/helpers/tab_helper.rb#L69) be sure to wrap `html_options` under the `html_options` keyword argument.
+Be careful, as this behavior can be confused with the `ActionView` helper method [`link_to`](https://api.rubyonrails.org/v5.2.3/classes/ActionView/Helpers/UrlHelper.html#method-i-link_to) that does not require additional wrapping of `html_options`
+
+`nav_link(controller: ['dashboard/groups', 'explore/groups'], html_options: { data: { track_label: "groups_dropdown", track_event: "click_dropdown" } })`
+
+vs
+
+`link_to assigned_issues_dashboard_path, title: _('Issues'), data: { track_label: 'main_navigation', track_event: 'click_issues_link' }`
+
 ### Tracking within Vue components
 
 There's a tracking Vue mixin that can be used in components if more complex tracking is required. To use it, first import the `Tracking` library and request a mixin.
diff --git a/doc/development/product_analytics/usage_ping.md b/doc/development/product_analytics/usage_ping.md
index 92998de13cd..a52d7baceac 100644
--- a/doc/development/product_analytics/usage_ping.md
+++ b/doc/development/product_analytics/usage_ping.md
@@ -351,9 +351,8 @@ Implemented using Redis methods [PFADD](https://redis.io/commands/pfadd) and [PF
      be `{i_compliance_credential_inventory}-2020-34`.
    - `expiry`: expiry time in days. Default: 29 days for daily aggregation and 6 weeks for weekly
      aggregation.
-   - `aggregation`: aggregation `:daily` or `:weekly`. The argument defines how we build the Redis
-     keys for data storage. For `daily` we keep a key for metric per day of the year, for `weekly` we
-     keep a key for metric per week of the year.
+   - `aggregation`: may be set to a `:daily` or `:weekly` key. Defines how counting data is stored in Redis.
+     Aggregation on a `daily` basis does not pull more fine grained data.
    - `feature_flag`: optional. For details, see our [GitLab internal Feature flags](../feature_flags/) documentation.
 
 1. Track event in controller using `RedisTracking` module with `track_redis_hll_event(*controller_actions, name:, feature:, feature_default_enabled: false)`.
diff --git a/doc/user/packages/package_registry/index.md b/doc/user/packages/package_registry/index.md
index a47520c79be..0ff64368b81 100644
--- a/doc/user/packages/package_registry/index.md
+++ b/doc/user/packages/package_registry/index.md
@@ -33,20 +33,19 @@ CI/CD templates, which you can use to get started, are in [this repo](https://gi
 
 Learn more about using CI/CD to build:
 
-- [Maven packages](../maven_repository/index.md#create-maven-packages-with-gitlab-cicd)
-- [NPM packages](../npm_registry/index.md#publish-an-npm-package-by-using-cicd)
 - [Composer packages](../composer_repository/index.md#publish-a-composer-package-by-using-cicd)
-- [NuGet packages](../nuget_repository/index.md#publish-a-nuget-package-by-using-cicd)
 - [Conan packages](../conan_repository/index.md#publish-a-conan-package-by-using-cicd)
 - [Generic packages](../generic_packages/index.md#publish-a-generic-package-by-using-cicd)
+- [Maven packages](../maven_repository/index.md#create-maven-packages-with-gitlab-cicd)
+- [NPM packages](../npm_registry/index.md#publish-an-npm-package-by-using-cicd)
+- [NuGet packages](../nuget_repository/index.md#publish-a-nuget-package-by-using-cicd)
 
 If you use CI/CD to build a package, extended activity information is displayed
 when you view the package details:
 
 ![Package CI/CD activity](img/package_activity_v12_10.png)
 
-When using Maven and NPM, you can view which pipeline published the package, and
-the commit and user who triggered it.
+You can view which pipeline published the package, and the commit and user who triggered it. However, the history is limited to five updates of a given package.
 
 ## Download a package
 
diff --git a/doc/user/project/img/issue_board_default_lists_v13_4.png b/doc/user/project/img/issue_board_default_lists_v13_4.png
deleted file mode 100644
index 23cdc9b4e22c0247a46e7dd73e6908954b390347..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 14866
zcmeHtcUV(f)_xELM5TySBTWPaLkKk>MS4eRf`CeZ0HK8>bVO8;-jOCvdItgNRZQq0
zh;)<=(t8*91-<u<cjkU~=Faz<=lf^E6WC|(cfD)vcdxb2KIg&ruA2M>QU+200B}K3
zK}G`rI1L2=2pmWV@jcb414Q^gr_Cf)B>{lK;B((#XYkhq7!7$TKz=814gerlbkWka
z(||cL+oF-C2rD?VowF^R8SaEI1pu6e@}dx7S2-wN9AikCo}CW!oO~m<OC(+^p>!><
zGQ(BWL6^FO;7p4vn6_f8KXLf*9oWY?>XTBwu<MhobOr`;oWzr@O20e(Tl+Y4P5ch|
zQs??1U3nAVdN*td6(v`7v^!SewHdsWKO&YiLiPE|hqIISg;#k-15?FBhpv65>fLf`
zE*YrG5))mXWORx_Cpzz*Bdy?&SXr)Np}(#QPoit^yC~LAfjl=cX%!cdBV!zgZNLN!
zqI&3TlmS!kw-X#!MhW%->l-a@a*q<tpPZ6->niij6J85h-&-K-E_heR{3PmqTk>k*
zRavBj^{n_#0(@m_;DIu|%tqezm4vTxNV<W7tWL9-_s|Hls-RZ&#~XyL8BDd9^H~=S
z;kOid(^?|!KYO27QGuO-o@EK3C@4K8FA(75q%<3H<@`2#?h9xG`fikw(;#bq<(3{&
z0XBW({DlUS298n2Wu5rr8C%z2!cZVjiGeOm2in>Y@P4F%msHARw0iE$>PGq84zfWi
zn<taD{lx{rQ6^2h2&N%F+7F?q*2ADPoikzt6osWm0Wx%}_mh=qkSx(8P#O{oT}C6)
zD?~B^Dgo!ulArCAI%{TK3#n)%x*!~9YD6Vt-rhY%bo@N`<)uSiPV-E}r_}8Gs{TFM
zpr*K@nK)1)bN@{}-V!TQTz1JtWllYGp@tGD&x^tLnI5J@&mu4HOuud>M927XN}4yL
z>--R=?4iq&HFIL9SCFXHOLh5JSfgTewDZu-;?7bmh!v-#tn;w6H9N=pZRw<%zT=nD
zw*0CZ-KzVCbGx*;EggF0(IS(JIEK8=Md255w#nXnbmtTeN5}|CM1Y--Lti$)mThM&
z>u>NIrZU=$ynIi0DgBycS#|lryAkBt%-e4?$nnHzjCbX+hcL0d#K!g+%Z;fD6l8m~
z!6Pf!X|!>5{z`Iiiaz78mPK1y5W|kts1xVlYnutZMBZ|PP~EEsR|b7-G$seaRQlAG
zD;tm;Woi}q;}!?WSM>(_v`DWuK3uCAMkynRs;QsT<b4fgfxQ)kXtX6H+y<$FaEu<E
z7tOf)OK=sC;f%ttVZLR_Cd5F-w9VJMTE^S@!;^jxv-W^y03b%><Eo222bY)q%gx$L
z=7d^j3O?7nHfCQl)pyCVA_!q*-3fkS!1cUsoVt?LwjizL>r1NyyFjnDr>5QI_tSLH
zPu=uFrwFI=9}=~d2;^S5`Cb!v|ASj};Rg{#s<~&DFKa*D$xfxd&x7;}uE{O${y+?W
z(0_xAsn6{JN3m1DJh6)y)!v&lGYS^S@))Qi-{*pQ{&`Ejn+wfCN!ar>8cN=y_jhzN
zUEiD{y98KlFIUXV8K+NwkG|RAnbl+Uxlps0vs@A@+hDPIAbfGTPy<Lzb6?BT?Se-7
z{0Pe79h)f7cfgOz(WeI#jc^8;huVG<NMmGMQGHOcAEH~FDv4!oo_$7XdDck(fwNo!
z!c#SwF<<?B=C-<Ik8XBM0va?meVG6twCG3fz?gooNV2vocTiel;e)W1p0y1}b=@2L
zMg42_X5_{1d&Qp<EkE#lOZ9=(BSd?{Fg%kf`C0*cUfx652QMh|N>oftp0Uwt<Y;^y
zv3?#kMti2o$GM4j^`*={=S^yjQ^_$6_cJr!m%PigXd=G>l)g--kLJE6z=DSJ51Ase
zrl^EST7172_b&^iFkSGx;*bD5!^W_=6qodt3(L<we<{5rM4C2Kl)}6%86f)wE1`t=
zcw4-XXg$kDij%DBnLm%c(#HqRZ{-G!AzPpJOHXb4W#77x@{($e5Iyq6;g%e8eGyTT
z!zl$?PH0l9Wu~uF3Zr`SSNjexW(q@I!H?A-#X)ugdXjq18SbiNzOPKr5p7JeQwbk^
zTVyg&4w$&I$yttTf}7x+$j@fk32!}#DFhbj>P<BXt*k`11ehlY?ui63Hr9VhPsmGG
z;WvTpK94Yf)ZH5meR{e$K?j&XX~XJz*YcjWP>>W|V_yK1>1llhgWg=+UB%q@QIiiB
z#X`kW95{jDrp6=@$Bpp0?IFFaBcH8rlp$!gbA%hGoqY*u?>I-WT}mZ1)O(P|*JD*U
zdpAQle#kk#dx)7+TT=ZV*EsvivtgF9B;rs7;V#JOQy3{J1k;sW)t0uo){VRg!`g(?
z;*nr!<6GGxS*Qe&nA0lor~TZ+ib}>6x0m6OC=EG#!Zn@8E8iY*@sH76dO}_@zjrHr
zeeH;X7XDy(WAXIJT@|##%mTS>ziP+p#TNnmbqwp(Om@KVK3cWfC%2raq<UV9yuk)-
zw9U-2E6BS9KB*d&>yPsH^d9V|sikutT>SQUapK#vU5iha+wqgNZ=6MW4!t4EZanVl
zL06AB7C&>Wy89l&w}ie{C5{~jf33<GT<2;lh$5aE4cJ(|=l_kUD|oJ!e%i*TK=LJl
z>pj1fIs!i?u4YcqQ+fb^0)oKbRCQHVM2wNv+%OZQ5uDq}+7^H71pq`PoNQsnmT)^}
zBe)sDMvQf(s*aTzVIsz=BcRHoYAX#lM<}?U;hHXLTE;Gx#=<7765^zyP9k^$Yq%YZ
z*~!|<1|#Am#`>LC1m8aC2D37MhuB$)vFfVcWtK*w;mrKp{M<YsSto=8FRM5yvnblc
zR768Y?iULDl^CnJot>=+80_fi$nD6-jYOM)A;QAKU>;sDFE0p>0AZYM>|jnH8_d-c
ziXR*@aEvh;VQYs#+AyDR!i<pic4Dlo_;Kc6$nm4bvQGHUUmToVf2YUTnSd4X7yS77
z-~nJ>9v&!&hZn>v4F1_3KdP$wo3#z*7Zve(f}LQtU<fx4*xLGc78pBOhrjvzLko-+
z{%ix*fMbyMXk)mn1Kh^$>d#JXt?V&B`?SZvPrAOxZDnE##s~G?^UpT&imG>ivpJE`
z3}J2i-QooOGt$KPH=M0K+Uh&T#25^>f?MMQ!Qh!8zr&xL!G5#&-F!|){vi;&yFW(%
zs@L~ezUwL?gEY23ajGaI#(EO3hzZgdVIuOqDQqHSBqYRd4B{1l@`LzIO!+{<5K}>X
z3(n8WCk!(ZGUoY-O3?;m2eUDTpHSh+xe<6Cekg<=$_FzA8S@I_DTE<LAR}W_eh{xQ
z4=<D-A_O%y<^74`4jO^41en#&QJqkk;HiXogrI`Fyrv+ysSzB+&kN%PLHUJwK!W^m
z6MlXOzHKD%o$6#AL?rJjim~!?|A_B<&s{5+ohcG+Eyk*Xu(5ag8&nHn4cD}Tornez
z<l*5H<Pn4j@bmEs2>fJy501v*ll+7e!o$t`W5mQ*L=Mjg!zUZU8fFFu+uE3Y=RH{#
zk-G>dxRtI9p55k$DIYK2kIDXR`2J7B5C{bNs}>^CXgJIciPl0Qt;ASQ;%7c_{Jrp)
zMSm$N5f!8{?4<O*gW)D8RryO@O2N#)-!DbMe+K>sCQWmsqs_m@^Ec>kERtwDM<m+v
z4*HIf1>D%~&w2g`{2P-7en-UEp`8`~$)x@cC;B6)74Wu5wDV8?HQ}fqS3kBbE5vuH
zn3=zC6(TU>6BWf+F)#<X$@e9|>-b~H*c@hK2FLHozZB%J{fIwEb~rDODU1(>&u$2>
zFo>UDSO5g$=Me<K`Hf-5LNHTa7+mo8>=>k}og)klmo&qdAby?k1^9iPnXiA((Hp-<
zJDS7sL2~i%itzBT{#agSQSiyO`|I>XPc|l1Rgs?s5IxzrL=;c*Q`6qo)(Qbf|6Z71
z6Xk!v{bc`3QvNgZpJ6|&rIEJI_|i7FyW?o{r|$m%_=7<OVT>;$<e!E9JBaA_8q>zW
z(b7oklMU{tpe3z-x%xF3PVQ79R``X+Z(JY~xGBuu%8pfB(-;lM`!q+|{Ses-@e9Xy
z$$upg1^<z!9~M8|9r30=`tWyM{7oGE+g<zz=SkuICqKWW`+w2}GxL9){3U(=E7yPJ
z`b!G@CGdZ<>%VgSB?bNx_`lip|4lB^zr6>5+u#qHj`*j1pTp)v{2PL^whH$#007Ok
zlP`gy2HPqCaBB0eik9sD{yx<Ug~i3i`T6<v_4U=&)xEvF<KyF%m6f%%wV9cjt*x!q
zJT-%I{f&){+1c5-xw*~F&E@6grtzlT&$z9=%9`PtgM$M``?j&MvHt%4qoX5JQ`70`
z>E6+SzL9~sm4&ZgztTQexa=-pU0vPY-d@vE-_qY<Wo6aS&~SKoSlv;-y|cZ&v(wtz
z+T7ecGBUEex7*XxGdMWd-QAs$kuf?tYHVy=S67F_;T9Ga%+2wS|8^D@7DyyAE-voN
zmoH&qVX3L9Q&Usxo4Y6!%G1+xcXnWKZXhNmCNVKl@NtK?x3{04Us+jMNl8fouB5QB
zY-wqUpP#?8v-6UtLPbTzYQB0zTLk_kML|J9adGj)#6)gx?&Rd;#`_Q#7Z({1{lLJ$
z$jC@#W#z1_tY^=jxw*OFAIl313;X)|l9H0d#l;N_42s^B+Su5TzmV_k?bR#4e;(5+
zD=XX8)fF5ZjKyL<e(C)(JGPpu%<9l~bbNfcHr?}Ob!uToQ&TguC!@5r`bpB@%I4bO
z)X3uc^5)JKH#hfMu~Br<=tjNAql$;qYf}$`dpZV|mezLn4h|2t*IaV_wtMo?>CgA4
zyM~8{RbIj?T4x&v+Hk$Cfz1J~4KDGO>F_F(gQYRc8jJ4Pu8!euzv9UJ{QQNj`9kb8
zx(+4%{DW0w@5t18M$N?Y{E)4V6c!(~wKqEJm3Erp2t<U_!MA-}_xw%gj_HN1)P}sZ
z?e+1mo3A=zZUyOum&SkFm~ZXv99tUCt1n*JS#F<diz-Y6+PCem&b}@i)As8o@s!)y
z-AU?t?GW$rFcw`jP*mT8D{L*V=&UnIaLlOA=MA_g7ize@yQku7r0U&W*EwI?(SYr4
zZWw)+(NORx#I|C%Vs?4X&=8N=)`_;xt}FaBF%Xn9vbl4xJKnb09Hm>P6ObKI^YOhW
z&ZFwXJNXw6z21b+F70@x24^=GZ4JF+uxo?3-I-mVefI&!VBbDFJ^5{KTL=5b2moNB
zR+N#{avEBUwN#;+V|bcz`#@dc`f5fbrKc6w+jG`)XY?q}fkK|Xea);`AzRU!))e+W
z?ZRn=3i>CRSPIIEM^7QS7pY`U6ApepokB<A!(1shX@5B0XxZ74;BID0%9xpU^L5~|
zbE4;5S4{1OK+j6did!B1c>(~yin9Fz0AT2Ec=Gn{fBw`T(~sMzn2piYqD8%EsQ_`(
znc*VpU)3(pmoVJmF^oN(zdhS0Hq7=KUgBRVJYUbX>(mvGCY@sx?^~fJk}#`R+?5k<
zx?KC^mh~J9jfdYQp03N)AQxg4t*6`l5>~O(a-1^J-c=rC)qcdwsowLa89%KhkF817
zBgoMr^1vj?TgdESu>Jij41+dLLz9M0JiR5lN;}5s1?d}ZjVu$`2HQUpX-1fZ!l|jh
z#XVb511^5JU)<||bS6LN%O{+;^#SF_%<4rZ?=mpikovs-9@6$HGX*hVVs`;6Va_OO
z*mfACxl@}8UA^Kz$?QW2sJ()UtE_ADBD^x2|Ij?&vi4|)#@k&jh~px@x(%7h0N6s=
z&fY=u$wyb#OcwVoJ3MHQJ0~c#QWw&iJ3<n;iBJIMpuBFwg}?_<^Lg(UZp9*T$9Xsu
z>kB%|)CB1GUEmj^!sA)0n+AeDguBbQcNgJZ5JdVFux(Lp0e$No<n(m@VCQa2-{p?2
z#D=;`cSJn&t5GslD3{dC{gzhS<J`|)iibi}^8Wt4Y7${>90b_plESrFkk5N4ze<gR
zYS?i=$47I2jI#bkd2O2r2E~usMBWp3r*r(N-dkNZt_LR4YbT`SoyxyOI=TN83g8%@
zRGOE%stYEo<6J6Kcx3b3p3`LMF$w$4x3yP;58f8))tP2^T`u))#YGInldGi=d+hZ2
zdAQ4P>x6LWU6{S;;3>(;)@yUC_(iO*@jR(LeN$9R+MJHYc?k)KdTc_6t|R?u+ih#t
zwF}tpz^$-Gp6xA)wz)n&{-No;vqll7hx)zete1`#EP?8oH%~$MP>;N%QM)YFqL=rg
z+Q?;nDL%eHhxtc)LI*~k>&3Nv(DGFmC@^5t^tCNbzU}GiQ#9p`tqT8kB~H#k;jOz-
zIM|2K_F`?TsHgUZ6;?grsdKAw1!T~dKDz3g0(bFC+WbxuFs<eUMbkA-`t_H&FL~Q_
z+}LgfP{_+juC<a(Jzsh{+1L6srFgR5ezP_o77yiZfqN?H<oZ%z&iVV~<ll|YbC4a+
zQWTBrxT9exSyG{)V{cQW4P2`u7fdYW3K|Z66iev>?X3$Ka$izDU<*1DS9Tg2=Fg^l
zCjUrCytXJ5y014(gLp4?=)Otkt%5O?0(!5g*qzxSr{_3uHKlC~ph5<Ga8+3`FUF)R
zPHvlNlb~J?FqF|rsQb=p-kcvuqJunA_PMHz%Tj;C>3Pv3LxkJG5uNZ(H7Zvz>m@zb
zz*<*{=>52JK)2BJ?d(&~K;~;1uV`(;vwc4LR~*rmNo8=F^es}o$W)@5o4a9GLwtkG
zEBj@^Z1YxDc6KHd1b(HTXU5k2LT^DHIpjC#$hzpUlPbhO;tDLUR09eqr41})$!I01
za~fQ2`SfT&D{Cb9TKw!w1?W0+L}rnq)SbJL0_qbK{8R*Y9EPamk$S7=J{`XsDGNw{
z7;Tn2F@PyUrFR%vJRULq-12yHR7X!xK|9@@p0_SmaHrOCf!=22GF8acpweXyH^TJg
zwfx}7q^QQ_$hNw6@_-MoW<I=C8=xe9=ygeI3T%cE6`~@R*DsaO&LEFcw%~I<&?wFs
zAS!(q=oA~Fuy{8s@--Bq1bfk}X*pGd#*TPTKw}LENYSqw380j!dDj<<8RTO`Ql;7h
z8=r5!VrNM=52NX86u6P7r%8=+D0;{VekZjRmOYXBdCwDSLD~k7c0<`wz+zV(WmG@2
zy)_X+!)zBoL44IqN&6GY61m@|485XN0(YW*Oh7b*BtmoI>o;=BH_NZCpgy_pg2q4&
z{hkRmvTbzp52)qaCdGRc4kCJa{hhPnDGW_g2POpw)MMYszKu?+IGeYADH2^pJZq_2
z-50L~jfZ~uvet47<X9Qt;GZ(Isik!<Esp}p9<*qHP)cBb4pQSrMIi)Uk(e0DS2Cl-
zb56^nH0<g9{F$+#^*vKEEq+IS(AQ8>Xc<rsq%kw-C#~hRM^`>FxtM9^PROJz;3RmB
z#6S3w`h;x`6wHF9Y_PqvW64R~mMW7y!OEo+rNLBV!W9%Qli}7Ys^pw<wD~pbgGR&v
zgJ)3qgbzEhcmtbfQ@Knf3(VP6(&|Q;MqstW<n<QLAW7D-uZUX{woFgfj2i9Am`bW;
z-+$;z%$caCCt$jHOy%t{@%6Fsoja~OPC^|Y`97J)k-hbsME8&EVke$vZK*75+Pdy6
z@jZB;97TI`sTf}l7kwd`bL_>OoWc^qUW~6^k42K4hU}H=DCDX6U*>s|yc!*l2A-DV
zyN4ZTQEKmM&7HW*(IW}07n-{85UQM2NGWfjouAG5{GzudBB?sWe_F>WDj`IDf&`?J
z&4N|eEe5}e+2R)nyAuEnqBYT;y1#N%MBNm)BQv6N<$~5XP2ve_d0<$Vxh#U3g-nty
zQ8k^@FIUFlUfgwdDfN1P7Th~E(SkSWoL?nB=U=8>?1kQ>@l?^w(|P^~oI<Nv6Rd-S
zC7g}kx1KUzO`m{{e3XrSBHTB+Usz+7wbU^}axG{!aD$1^On-ky<^6}ohowCaw}VSS
zZ;!hBd9CgMU+j~fP1c#?f(Bt(v^jGio?i`W$ziHeL$wA^=q{4l#;Ez}>OEwKtgp&G
zQDIwqcTGfML^gnqzS(<)bOKNtf06k9D9Odbet!@32QTA2P@d7Wqg)2jIAcSjYaTeW
zFo`C;fRr4qN`*FFyDz%snOcn`6UOQW4}wZuN2=gpo%=}}CQX%dy5!eb$fm+#)Ms$(
z@{FX(^k0CX4OC~HDoL<3H;e?leR9gkb?6tY53yT0v<pkV#^j;TNf?vwDI4=JIG6WZ
zv2TRc3u0;pjV>~8B*yxs9CX9c><(+Mr`rM6<DCOj7%BE(nneAZ9}s3=QdPT%zNm=v
zssXEeWc6Qh&}{pqV6y?^*o%&AWKC|hGw0&8D2P`}-ev7wdS)GHOl(jRADmZJ$?(7y
zvpUpYOJH^GL;lJb5zpj!!DcRL&@<@M6&}pqsj|4yw~(g5ZcLwZh|ZNhQex4m?Fa%C
zU^EFzM=K}66_QZplsEoyEKhUQ?k4_lfU>GDiRD;0LbQFoLpw2E=yGzB7>IUVJBF_q
zNDnFX03P$KMbiZa)&RpE-|u6&f04u2mx0PvExGa4t6cWik_*>te4@-PDT#-RmPD@5
zM_y4kqoGtz(%{m}xCKh%t!meh^pkRomU8D-E>j*nguHFr94$Im<-TnYOV`8xkaeh<
z9F3lMHuZRA@5^jeoO0>&l_ihIWbx4LrS50n!kdC_+Y^z+LN%C&J!WCA(9w7HkJ_$e
zr0gqicRyo#^2T4D_{n>}6dxy@Q|G4qa(AB?im*;6cq)wn-bgfW&%to4EjHl_N#l&H
zN0UqiM|ScChr_`J;_e&og7$XqK*?t=hc6~+zl?p|78!T=T9#e3_CXjS;K1W?;uA*6
z>ftL9BogAQZDvf%K4x_^jjHa4gJjMQ5yvE&YgHHN{^vvH$w)H;8~*q3X^&VA0>HpF
zsEOhf0B{=!0N{@(000XAoxp#w_>=2z4g7*UeGeiNjRhx0L^gU)xr2k@kl;ya^&uyI
zf5eCus7OQ_n}($Hu9jhGdx&LVr3oF3cy5(`Xm|6{yl*gRada^I6Ka212Qwdjap?(M
zXyRwb{Tq5ll)^_A%T6>HcTO5Vc_DT+69|=%sZn9`_W2t`C^qR!{>`DeWT%4;g=k0-
zHj$&k+(Ecx65i8Tf(a*LR2?yQl!@bYKWb(&3Su8Zd?x_4c-pvz_t|4j8XxJ8c`6=^
zD175yqT2PB!g!GUc~pf=!foY>#Tr`gBBeN8tBN#}wz^c#ZdY*7NcRY6x>MVFFRFT$
z0nfHZ6k)$$e{(&1=K+viJFLx-e<JT#GpcT9f=(4(b5%WpO}wN6PwIW!IgBAWUqJ^L
z9DK}r7US>4?htWZyGe2}+c9576X=|6hg*wHxzlL{H<~*L01C2-UrMXm&up#c$EmZO
zLOq3UO96{9OUMeN`CdID2krQ~735*i)xcZG3PXz|2w{>!xoP1g{Oq8j6VdT52PKi=
z{;s3V>-MjhKUH-`UYfXmt@H-jx4GehlDH?eJMyXns?UWKh;WjblEC}SWX5j-<YFG{
z!_U-4O+>r&YY%Z1$56_n27=o4u_&xclpcrb6FYn1VJdGC@aw3ltg@>?DJzvqu9Xn!
ziPga+0ex(eq2=v6=to4L6HEc=nHP7fcP7kX7NHf__5>faEMs9y`4miJMNy#_E?nT&
z5gVo0w$nFuUA7M+f}!7JpT2WR9x=C#T??xU^pGo0NfCQ8g_fY2U?!o~sFb$KxT*%k
zK26{*EtYGX4Z5~GW@+G}ge_3MIRTnrzKBy_>bt<IU!oIM3ynk;J&#VH(Lz~<3)38h
z5}>+1Uzp-y4p_3oTBCUc3_T}ug!6NQ1!x-m)rwSf3#hFr<+DU2fm;tTV2h8vai4>r
zx!TlnDvJuHs6uH}2(G*B6RVqN!Bx4omVxv*$(o1eLAb~few^gvHGNnKbO_R?<6zsi
zoS9O!&YDWjBj0SNCNaTxHa1nEcW#`WXsY8v=j~*u&E=1jP4BB37%-#y2Z#9AC^+KW
z8{8j)!JT&+iMWdCDda!d$UAs0ZVz=#*v8BmS%zlBwOmw<{zyD(RmC47y+*vaNFsZK
z3j0hGcXr|p%g0-n<V@~xqT=?Ynp<WUt>h-#+b^00^rm%e0F~(}yd%$^*_a)@8B~g~
zyZ*Adw^8@gSNl0@<PaHUc2Vyd>DFB}>tyKTnbRmO)~UHlpAf+`s1ZFnY@V)^%U@4G
z(V;4}WSZGOrRBDFKEsQSc9b>!>o_l=Si7sjs$@1Lk;w+x{I0-6cMulmR*N;c+?L00
zDZLl1vd{-B@v_igBDhGb$yoI)JLwVE<~7#-`$;Szu0)w3zIh8lZ@w`&vq=JNtVJev
z=VzHPT)~6OxaqbH%_xr98FNPi#>6;Lhf2fgUAO#6NFo6$Ai34$)yxxCb>OCkE5tLp
zIAgZD{Hn#J{d?3Vp1JTP#QJGlN91#8u7mn>s2y9pk{nnz^<vX!t{o_bqTs&R&C%-O
zLap*uBO@2s)>b&}9a5yYo5;Iu*#wi@KtEd!D!<#hao5RQ)Zukg^Jb}CUCAiY_f$Fj
zizs`PK>Z3NasfkyRX0<h@D4ps>1;umt#l(u*K7A~P&N0f(d>6QpY^WxT_Huh8Q~VX
z(qy4OC`n7))8%={rWq>|8(2v>t{dyp>{A?<CtF^|w6dN$IJtYz=iHhihuG`ot}XH^
zVukPz(<^+JMINip1`?|PL6ky=7OP{rRHONZf|Y6M!x>7ZHH}^^a;=j%mMV$>{6AVb
zDWSgY5q|+@>?NE51>q)}X71y&JRqW^q6f3+<qp3M6!z(G3T6SvKrLRf70-G^@dVaH
zub2kD!KFu&MSH$AoRO5RhR%Dy9pv8#ssSyIUq^j@?h=vZ#pzy-4nEkAt%j1W<c{h+
z8FDhRM;N&oIm3)6aVvx2AR%5z6DpLth9xXY3#f62gX-c?I4tRN?zjbjij@_8IUHJm
z^Ot5kPgd>`Arl8}y{dL&qmj>0;aU)~j*2%mc)4|k6M=fWWj|OGR;b1VKQCmz-8=6k
z{mIPxHjt3D|IB`gn!hilga|}-uq(9PBnB~cN>HgZRk#VYLOR+R)O|?3W^3<Gm5wOc
z>^;*!Nr;%Yp=RPiK{wkWy@JNNss7-D+d3dsHf;5p1FZ3#VKvm^vO#K(tgprg)Z=zD
zWffrf<kA^Sa$S^Yw41;qo|0$?icbAZ@vWD_S<q_xhn2!5AFqb9VuRN}YSa(r(M7RY
z>k86B?<Sm3o(5MHR@NJRJ-Sj@W&#_6fLU17{Km>^$3%Ha?U3&7J|!q<_QhqhKI9=r
z7&Bo@91V{JS3rRmR6yjP3}s#-MJ~NeB$JKs&Z3afyv%MN*yt~f>w7ARh=W=+;~s|(
z`8V8{g&wh)H1jNECHFo4<U7|WV@&BG(=$)@_~YQPe=j2uO6G$=&mln6sQwb$=zT6J
z5fQuoO_h3;RMMQWs)ZZ4wcdz@#~0G(ZB@2n(vDg0eT0b2<kV^*=&%CBs=(%!`Q)2c
z{IWTF8)QE5=8iHklt}k0?6Q%bNq(Tbq}I=)ZZ3X-GAh8O;&86Fx6Dy*KY-Lgr9I1r
z&`956&UPNwf|o#5PO^+}dR;0;2~(Eo5gK<s&4&vBK5=RxEhD1RZ)+Ifc6h8eXV}r3
z&?h%A**;nrVB*m<%g$Dr6H2Ad{IM8c%}}$y@l5*_%NcApwNa#Wydv&dIsJL*aP2<B
z8NutJKK>+EZzYo7^5wtb#o5PP#KTb}H*_frOW77e=@OD#89(~!cn5G#*lKZ2C{Cwz
zKj%U}cb}n{w<M6QpDJfA1LFmL{mjVgk`p*w`<_UOoy&cfiQWDESjDh=vG2v7?l_*8
z?Yz8@3};+=c1b?^a}rReUZP?4@gTE)A7kl_Qs{-{Oe1*=u-_eu%WFq#CZ7Rkkk0h=
zE%Ql7td-y*wxcE|N1TV6Vknvn>1!y8x14jJT@*rBM9lMZ#%DpX<zzZO@l<aGVpEP@
zVt~EP`UTf5U#s9(R@}Y0Kn#XkON`l)Klei3EE1V(qY`&r)McizJ;nYW5X{RGBv_iF
zMWw(^M($d^5pOMhsqQ@y`7OD!kYnV^vU6-@0|4+S!Z1zi#cGnCYWq_YWjbNDLgQDr
z#h;Rz=blb|{+d+Lk4Nz=2}_9XK;_$WH?`BadF*b_dkz&UYug)UVZmR)W8`*uZt)be
zL(op|oYN936iu~$(;G7h96NCv39+5F2~OoaG50NlChM~<52_q%P4gD80J+3cSJoGC
zu4X$A#2+7i>007*mHXIJCej&C&)7mXTKV=3)tJJ_g%9yuJKjwhk@sjw_f}c<RIjfz
ztYr<dbI9lTU1EyAUw#DRkq~|Wy<&HhCj8(aypXVG*euAHB|_=KwaBC9O<K~5=^H`o
z&$P0U{BcuG{Gp>%542l41PGg2C%&|i0)yN9xgu7S)Ss+F4Pp;LeWcLz)=BSt?5sL;
zM%kKcB(r^cE8X8;`J8E0(?idW1o8|)5pL@67!u&x__JQy%>WKLrT2pv7PUZc&bAEM
z>LQ=@nT}ZRYZ3{f-*#a)lpZ~-J31&>$2Es%<UPGAM$gVh|6<ZKt44>)Bf_kr;d5Hd
z!S1eBwBKeHI^3v<!_-k$N4w~N)pqlm4Tm^a+T_Pqwpv>upE@?A3FE<Jo9zDnS0uAT
zR>&PXg2|g)3TXDzcWlg{>79}57>8VRQPaL(F-KGebR9OIF5mXPPNm4HFhvo1FR^~w
z^3d0MXq&1mIMN7yX4!hGflxkJO|E^^iC`e-(d9208&X}Q(Dm7ky>BwCR5t)sPwGCs
z4Ylg{fHmdHtF0@4RVa7HFrIJCD7mWaSa-u7NcgBX@7w-#qQ{5U;L%1sf~GO^8`OK<
zT$E7s)oG%-OwD;AjTT&o!V6iCQ*U<fNQyw*7B`Q!sGs6I;_0Q0(>4QoY4oxALE0L$
zOF9b$z|VYT4=yu-n{JVRVjPy4{+eWY!Di)vx9=jfGHjYI_lEGJoWW3?{_DcWcGqk3
z!!`!$B!n`7Zbz>8u!%lSYo!t=Uz=SJBV>q*GYeySd#7bj<O8d#wqSY7QrE2l;rzq$
ztpnqfvX?gF4<ojaXxII3@iw9dHVf{Sp@&bzVx7UUBZ9!Ofw9tk9q__O)Y8Jayxq*E
z()?np!_xf~i7fZ-wQq)8HV}%@%D{#(K$F+l*DTBsznetRnD;sRiC`MHJ|}yt`FL@W
z?wdfzSDsf%h>pG`3nma9OLGhEsCkH~HlTLdp!J17z6T{{&F!J-;{!>QZH=!yjFI^W
zsDnk^Zjmr_V(>h)eoatK;%gArBWBFa`|5yx&;0W8C&Lb9M|91K7_ji@R>_k1!`K9?
zwDB>3{03sqVnb_phXhFo90L$T>j}tgpZ?M;q#BQ&vs%gYO6kyqXr5^b-B!cZazbY|
zLtJdzmu!9v6p{wvyF)FYL$|2oy*PjT%>0h$C(1u-emwOz*MEll`!IiCT}b{NpWnGy
zKz~g6uk|K*|Ekwt5BmRX%6~o7e@%=NUTM9bljuL`>F-k3`|ZEK5@P^w#(zKm6wdwI
z$%ohHE6cww?%z%M_XYb`wU#C)_%nk4-K_o>YY{^8+aB~+r-aw1OZwl>Kg6F3^3SFu
zcKRRo(0?QTzuSfX6^8$_4EiVO_#csTvc_Xl;-ecQeT3(NBmP|<Kv7mrCSS_%`Tqlh
C&PSX8

diff --git a/doc/user/project/img/protected_branches_deploy_keys_v13_5.png b/doc/user/project/img/protected_branches_deploy_keys_v13_5.png
new file mode 100644
index 0000000000000000000000000000000000000000..6eda7a671b29075f97c5292cd007da30580f2f39
GIT binary patch
literal 46325
zcmce;Ral(C(<chS9YSym9^Bm$AV_ct65QS0L-61bWbg!c4LZ0CPJrO<t^*7*z!~!2
zZ=b!`i*L_)_Vmrn+tb}|Rd-icb=9vXN>y1F3!M}l4h{}WUQSva4h}&R4(=5;Dl)95
z6G71%_JQaoDX)nNEB>hFk+5eH_m4X68cvq(UM8*<a8`~^4i;=~X08?%j&9aY?q>*{
z;&5<p;pC-1XnJQIulV_oUq6E`Kn+K&^WDdNmi9aYtgIPB2~vp~D370#q&nOaIKpUt
zX=-YIVtzwkoYnE2e3)y`wD9Lb%mSyStjJ=O-NIS?n2$ZXS<2p{r`w1}fOsxs@A^)E
zE@cAj+bMB2Qk0jM2Z#5sv^WwBxBcgPVh}SD^M7ht7IGd&jDj9NN=m+JX=%w4^J^5f
zd;RaXyQLD<pRZDwKmYpj+jiLnM3Kf?&-CuyyW6Ac&dBKKeA}6_bj2c9W)10=vVAsW
z&!3#09vL5xL%^(0yl<tUs;ZihknlA>pH?QnmR#Y@e@1;69vPt(5y^yg&km}3^<G&y
zuIESOOBv)#S7dN?b!GRddi7>if}ZAInM=*h4H_~VyJY<LXiEP-NoP`x`qxiKKKRo=
z8u~t=YyPK`mU`ZQn5a#9mGZAqWXhY8e~qLo3f})`=>PUmt!lFT+<u2D<V<J6aB>Xx
z2NA5OBk#^6|BdH}@f`U+#f2`0LT$+6?-$AoKd%~r4*M@7g12Hu)pyxH>TFJtvyH(}
z0(&u2_W#+*g196}muoxli-40dcz4WZ^**rmnzW})p{Kd_-H+}GDlDs>y7@Y$<h5J-
z^LM+Hqb&J1|K7LlX`$z-w37(Phz%IoP&_dp8r993?~JJyrx?x4=Sk-Q;uX~`0sb*9
z*TT~K9?7_GTP;l{mK6TaJHa1c04oPg{v;3K0>3`|eZ88|94djGOEYHQwH4f?Bgp;+
z|H2;XOfx+f>NaeuGL~=(<h``{wle<Pj=`hfIHUUAvh0Z0>}8-HKHZt|Vc*0;%^tDM
zfNiKdRrg?Vh)|QR%-`1xDp?bay~Q=ewy(LjX;*_vYT6z0m;R8~P)C|bDDH7JDa6y+
zc7tP}hj7Jp-9Ie@gt5sd&KuJz-IZ@B#e<&k;wS~f`aAg9{9@N<a$=nk2T`|<nk205
zawCLNkg<PLZT0$ua2e!3mK1XExVRw7suU(V@NepOB0ZDbA;-_O;mTKg*iV8{{@hJ#
z6u_n^!7zq+DOo1P>9(KXWfLZj{BX%@O`4p9BjmB{B5zAMku~tPUq=1XCYd@!gzs}4
z=!I*>?|mLr4OFlLdCvxjhiq_IT=rLVzp+H6#bz_wohBkRMkFuKe9Q5@lq1G8R#w6g
zu#5<5w(y5`mjh2~6PPGg-Ug!4A_okY4m^5WyhqRnD<|l#U_~OtEc4xB$nXlhl3D&f
zB%k92+30V@))dHy`obTD!>Cx$y>bSA@6z38Kd>?W1my2Z0X~kTi<=SCl6ROaN*N}Q
z^v@cg-AX{%%}9y4G7U<R-stB)Za)U$9{h<yqy4gFE#AEg$mR6eF8=!%C>Xm=3exgs
zOfxg~3K#uC1R8xD^$B9mXLzWy*Dvu!{rIw_hIJNDn0dD0&FS#lg6MPE;=08Pa6Bg1
z1n&O;9h^-#;RbcOm#ONlg%1P5CDu{j*Te(%bBuVbK=q2&dJTYR#%tRd;m*uuinSUV
zzR*dY+#&~yJT)=or`fPMt!Eia5K5%3U~W5m{KfTyibi!hH-%_G>F1+EynNSo)$g84
zVrzyKYrNTFwde2iO|?87WpcZ5USs0=3sf<-U2JZ8ko)Z0ptE>(wfVg3{>{Ev6nYa|
zrG$!wJ%EVVCR2aCAO;OYB%S$oZbzAk7e7E@O?HfoxaH%DA-3mWN%b@A`rj!b2VmNI
zZ^2;F@7AE}a#}0Kr-!|}Qj4>W{6+-eb(~AylWB-W!6CXwptxmgRO1lD+HlS4sltde
zkeEWzyN{A#bO}^CdBZKYYwS*X6YNDqR`e+ql$a~Nli#8z^dljB!8*Plv#KydbV9n9
z!GjZe%UJ89T0ZYlRUe=dBs%|IlEFC}w7YWvzffwPTIBxkENo%7Se4qD^5i|csf^B_
zgr7S!)MU5G(zUU=?J!jr$KW5wIUleJ;J6Bemyy*5ezN_m+SBo?!+5(H%UcwJe)jvO
zp9^fYN(n6Z5th1{P+`5MQx+a=!n~;U@1z*k2dI29alihl)_$~4blILPY;Qc#q3G*N
zaIM~dW--Bp;6Zx(YTfvoy&Hp%^ON{n6)LCWDeOekijQp7ESZ%@W-2#1Ymqcpbvfj;
zGPDI2mWF>93%O16g)FFg6jYknNHe?<)6}U{kxepjOiCA`TeZ=W1!g;z_~MlQ5#U&u
zDbDmUYI*Tb+m<%)c8EpsH_3ZD5Pn65P)P3#rKP#G2~DYo71k)2@S>kVHX~Dg(A`0K
z>5sU3*&R7gcwBgJ{8Sf#`lj;cJoLl2mA54z4MgZIQgz4XAb5pz-FB2NtW^~ESOMSZ
z*7+h0s@X0U$HYW@7P$V41nFm8HO}|~nU0_zKK59-*|5kb!gU=e-dCZxN0A;*(y>0r
zoFT@{ynYdicMN;Fb59mkf%b*=@BcG#(swA#%+v1kRxtv~=JyZ1y2iD|mV>=Ok%MK-
zAl0MEL{adA_ijAdsJaxNWKOxll5Z^W(_KWfA~efq3pv>mb{O%5KJ&iA)couFJ-)cd
zkBVdCaf4^D)@$HwqsbbdTruM3^G;eVkGIu1dI_O)XH*(8^PyO;UWi6IuM_#i7-z^N
z<({oab5nYs*_FLw0?2hYmUI-e9&az>gF7jN<hgzE&C%RKU~QGJJ?Zj4&FIRq@CH_-
zWo5UHj`UW4|3~XVEBglqHqXw2o?OCQEB=YQ^fr~!|7C^w|5f)k?mfLGBh!ns_#aGw
zvv4$@o}PAeBmPwkt{J+!U(v_&ZL9oSum4+m|Nn@Mg;XziSHF>o2}UliL?BS~5)2+`
zBY%<eyR_Qhzx&O()qdN4ws#m2e|o1X-!cSi$j*+ft(}&6gG}_Il$P`Y1H}&x4*L50
zH@3DkcIUE4FBx|jxVZ4NwTa3!U9{3)=t<1%nVlun*48f5ER{4hH3c+Pzo*~X9R=`c
zRvl}u{+qEuhpwTaC?F8X?W7(2X?Sd*-l|mfgVTo>Vp{I(9UPp7#U5HS{^>%z|F(tn
zsL=0}IaF{)JJJ@D$!vCq5$Xw$zGYjsn!1EXL_xtPCs&--13JCD<nBQ&?>_DOoeld)
zkobp%iH0CQw;*o@6B84Aa<XqffzdCG5?!tIR*|40bQh0*itqO4G|V&M^TpUH#g`ZE
zZ43iDC=81(tNydVj>y-lDQG+ZMimoVzEs_MOD?-%M8o|}$>m>oq5|~#?a~%>9F}}r
z5AJVyd4FJw4b+Ja`!A3JLOCcEa@i}<u&@iq@<Y<=*bbIw?THsM_-O?U?|nm6ektt3
z5i+I}#j1Z=92@;9wvS7y=xmL0AE&SAy&Kkl0lvq*-<K<jIgv`kuC!VCiBiq}{qMue
zp4+C93oaWa=4!ov4U;+5=~U6FAQ~yX1vlGg@g#UT)82v)SNl^Lf7Xp9MKFyGF}F{0
zB;&F7a{PY$toL+#S`=|3OGduRQ#exn77~Ky@c1sI$bKtn<e^|?lzbrs`{&QlaL+u@
zeC%FYCd7X*nL-i`8@o^{H<2|?)N6>ccNxC&fYVxNj)Y)Xjc(eIa)J;9uc%iSdN3he
z=Qu;9!~TWVa`mktlpzH>-?GMh>~+zVhw+JB2!H^=_*Z`jq>DqM_VL&D>!)c;WfXBa
zJ;+pp8tDZq=`{^lJ>&cyxWoE<NDs}I*zK>iV;7p+&DUEn^5Pwtb+kNTgt%>jsTJod
z<zB34b)dew3PX~|%`p8P0FAC-Z|y$m`#aT@H$HS>K@-n6IwiAt)Q)gj>rHH(rjFb(
z^02krx!yy)ewFM*mJ{%ZP&Ag=-zUCGo^?ZdmfKb{F4*%Fsd?DJ8D%qFbaBJ8+BY5$
z>#~;H#v5<GyH0e+Je~``Rm^EIRW5q>UTk?HWn&?<qguse5oFeqYvdht`vW8SUHZo5
zQ+DU?^TG;+^P-9UQ$!!1jk(j0Pkz-SA6bqqyR!sIaf0Fv*$~cMAvF6NX+8tb@5+PT
zDM}G!ip%i?nw;E86O60qO`#r>esLfF<d`pgL3YR90~qg>{WCRzQT=rsC|W^))b<35
zi+-IF8^Ch!iPMFc{>pb6k|Wy4x>9BMa=S`2H78${?b`@BUZM(;FBw*ewOm`3B46yx
zz0JBTRf4Fdkno^IKi~szdw68dWYhn0L}E0llDIhFej0fT!C+}YnLJ(Y{i+>la3@%P
zGa#kW`HPX_++nfq++-T=(o?)EG#8QxkrP303>aI^_wY6uT5^Z9*3sn4>Ipa6e@C-E
zY>Xd!zRRv5M!f{*L$b!M*td9`c`W*J-j1!upWSWos+Io~2w#h)9FTS8<jai2b3p5`
z*F%|j(}km`bl_VZRV(4ZSZyGpxFJz1^qXs<(U~KFj9$n!0ny*ad$Nqcj;|{sOgj6k
zo6X$%m$bvZHDU%}S)1vq&o}eD^fdJsDQVnY*TqlUmMX9$H(7hC=e1W&{$8AqCgJ>@
z2Z>*^>@c>?;O=kH`_Gm!&7PzqKLW2gO&NIjvkHy;$0PS*6dybhKWGEeX=q*X&Vp(p
z*YY(6dk_hE9CfviL|hA6i+TDili<x|`b}LrGS{c{gZ*auldtK_Q-OzTNwwz^b6IP>
z`$}iksTZbQGg_RJSHYIVMh{UZJ}1tPHax{-5(*^`*9~e~b?hh9qZ(^3x6r{E%^L9A
zJZkAv5ouc)@`oEbv&>8-!(gnGve{x2gEY6a=%$WF*Tu8Wr0!Z__`ty1J0#q{r)aB`
zkav`_bM=?D5-2H6nUDzJ1Z9LQ$@S2jzu1<?qM!alrLh^}I1Xn0*U~Eu)Qoj1{_(SK
z!!rRcjal1$AA5I|`*MKJI4OE?;@D_VO3I)yPiFprua-qdI&A?05)SfPRW~Q>n2D?w
zWN<RH##}}|!ghD-A6OsQNvYHQ%q3jBH}xKS+)_hz;`Ez!<I<aXW5j2o!y~@G@U(+2
z^_fB+^L!4_DVzQZsVtM3gCkiKQ~SC7*S6edU75=nxZRp$JHqI_7}TJu@iL`s?h=%6
zPG&-H^!yA)5|j3eN9{1cH59awh1zx)1|9aeYG~YFmr7mj<)=3=WZf2coAxx-T2IMY
zp6n)FQ`%c@rm3u11lXFjuI_n1I=~Se@paSMF-lZKQ8O_mkGhe}mE*6xn$~&Tc+=S5
zhfmd#fy3a`&#?VGuHp}`YW$SK!B|PnEuJ&Tmz>@L3ihM2cR8UHe37Z8<uKK22&zUN
zb&$nij1c|zm5r}L$py3`I{aY2DWD%%_0MO1m-4XqjW>E7hKkk`GR=Ubs1fEzN|wfb
zd7}7We{p|S(FfdXa`51&dx1$?`N??}@h<j0NPn7hH|U1*l)mB-g4@-FGmyaN$ZMdd
z=X?cBz8QP9aQzU*2lWjY;N7At3KR|nspxVxd#_J7^QmZeHdEloQrd>QjFHx5ib*Me
z6d>xY{BWI&-dkZ}F@e=0*>&Cd53E{osIP$Dn=4G_9bjsw>kI{E_P;jQuQUeSTen5Y
zj@*kf5A?!C#Zy@$gqI&S8G*CvE-!wK0y=_YQB?cGfd%x&py*X<q%v-kzR7x0A3a7c
zXQ>Ud2;0?VpEJ}VvAOK>wW;YOYN{*C<u)FYNeP1b$;kG4l(7Kv>c)PHB@`~x0XqHF
zyB|Vk$VuPDD1#@?KSTu|<_>Mo0l3_Rd3Jy883N6*WWTj`j*XtqITo8vH|dhy+<Z<=
zt-^AqE19#ZIQ%?H11ZA1wWda>YH4R=8;JP{Nw=$_d-1yT-(`j}!DW7fmHmBd=;Px^
z8)3`Xa@ASetxtfrzlGf{+p$rG55kKPS`hQ2|9Wr70c!9q`#&a~L|iyDYT4AVeYYmR
z`RBKn0Wah8DgVn&^?&T^DOlDlQ4OxQnn?8`c^S-=Y;a-%G~0L_#P<ni6DbvbN|94g
zU^(N4Q6s(0pOBLiH)PHX_9Q5Q^{o7oGF_~aoRlOP7#Qf2M*A|rv*g{~T|q&C^Zk`g
znO5bO-IKI{+%!3+g~i3qtt}~2QyNelg+|Fg8;#q_&Mtb$yaxo@E5f|f$V+myu(MOR
zKAah8!+bG)@XD<RbN})EzjaHkNYOuAtBGKr2gVWcoK@>X(S=AxpSdW`;`nSVyue3M
zOZcE;f3H<*Ukp#r&o<KbIzws`vIoT0K?*nCH^;iJZf<ulC!OQS8euuih3B>Gf<nNe
zRUjFb2^O0<35**Vsq}W(`4nZsGH>3J$(Z4n;>AQmLqFAteL3OE8^<pdv@_NlhJ*72
z7#yITOQ+xzi<;o4ujAO$dgGPa-q}~TKC!G<TW=?~+w?i}?y+De_4wp?q2AoW!lYKm
zaS7uQHtnXhI)lT*txS9G_nM*0$8$Gp3?ky+&gZ8E=D!1)9awICj9dYK>1bT*nN;P4
zxOnU~8K51Czxr+y{bNv&9j#Q~7+V!6V~HI8utG`D--Ow>u*=O4FA{p@x8b^Ci=3_j
z7b7?m6z?ByPHgZ=M|q-?E0$zGz*~)HwFEOqYv=4WzxAgvXzTb0vrr%J@y2{yPcQVE
zdexhCt4}%=_)Rbvc<iR5F4<v=pQ;X9AkzXzEZW^Il0Jhg`<_#ThHUTjN+OS{Z3c6f
zzS%g288`tIOKhh>jhv=d!<LNBr~9L_k*D<A*KTIRfw`S=4iouQ6z`__?I1ZrtsV*_
zE@>O#i!CJW#B;)+XI>=G-jv7{(yabg=8vx+8P2!!7rQeF9T{nh5aU^kv$1bjX2kaa
z_n(_IaA4lbH?k1e1>vIFLbjVj=y)X9*Awo}eg!btt)tfwU8+>>8+O!BF+l^WMaL>v
zo!7hGMU#{j*oxhhOrejy1Lvnh^^nmt3w~C!4c!q1IXS16tV{yyxD(r>thj`=cMJE(
zz~8*s!Nn&VW0CrGV26uy4>QeNU(sD%c+Ps)3wZHc+K~AMe|z%s^Wi@Oz;!gV2OJ*n
zAv90MoPN#U+#RX)st|oPq0!u+yb?k^QCm%`#lgi;eJ$57eUg@e^?;I4a_7sui{xIC
zzd+_Fi8zz1qVO2NEn)|pG>_N3bezZC*Gb4{__rdS2;dIgekzc94Y8>8`L?rRD^XWZ
z?Pn*h?WH$UF25{8#;*d3XrKC*)h*(52KA-|k`oM@pOH@<E=NOx=Mm__xx98?dG-|;
za|v$XP35XRers+9jQA;|3yx<rStd+fwDf2s67}B47u9zj*a81e9b}wE1%+&KwBn;>
zLa-DXWfM(nd-Ff|`Q8L1yx;37ywI~eA6t|VN=;D4R^~l@Cgk9&b`3lVlEg9AEyJ6N
zB^9WBOfOu+HQci?1he=8y)nT)S$hWX+(I>$!bZ9KgL;o4CEk;s{q2pl5*@vaBW7|#
z@FF-8Uqqi?wSU7f5^+05?togdse#nxnuwk4E=147$wDvO1u?8ROtdv$ksxc6Hk^%2
z;~=Z=Tn>y~*yo5P@3fi9bz?VWICwwBGM+PLsh}v*Ki^IGFwLXBpG}4M*p!m>iXX_n
z#qHeSv8;-vp{CC!KXwLVY;5GLw9GY~Pus;AcK>h++|`jpJ|J|yERh|g6+2j6#@K3k
z%#AbdKSrup%Y7f$o#M+zS?pA8T=ptKW*!LefA+&fV-i}|j0eed$kDSFJc}lFNFWef
zi#C@Gyp9uM^QYz^vS(oK{?^@#gA<MP%5nW8Azn+^8`$yb{nxpRRsyi5+++4TIO|O+
zl}nyO0FR!h)%*70E?sQOp>Cb&Od0yd^oikxjhL9mEr9rkhH`Tg$hc0C;a|MWnmrZD
z2j-A_$lT5dGQ(ia`ZlsLUGrxOOAk(yVTs<lGn~uetYKb?gD{*H`v+PAg%!9Cdkd9*
z9;?zrWb)X2P|TLjX;p8r7>lGNvr$E>^V$35U4)pZnw^xrjH$XyUFE{BkRAHWUR}`u
zv4hwL9@jj^?JPP_sqKNX@uqK)qQ2ax_J{+poI@7t(021@c=S$_rt+0w#wA~~G`Gml
zZXFhf{wm_${QEuq>Ud_?Z9WA-v{_l0+tO8=nNGz#oi`|=WY#7if$0Sk8<pq8F=yKB
zWI~ls8M{5<r0%2_<V&gkJ;g`QZ`ph)1CTp=6h0JUXdv~~SRRx4cU%+eehraDMG#N#
zqvd;h@Q}6-S;#fFC{FChU93h{^x{4~ia*%KMv~XNyN#Wg$94IkS&x_2<%vlu_DwmE
zh&@`vQ_;K&WEUyNr&_$lx$4udQOdrGA!oWIi=PhkB`U6q)od#l$X`8Ck&BA3VAwo@
zq_>X5-UJ{|_pt+vQduo7BZOjn9?|?`6UgsSP|!9yd%tW-V>cVP*aX<H$wzzdZk#zc
zPXK=G^VZenb$|8pKEdk*!{-?<5mVm&k$aY{zjahYWb*N8_IwHrlRDB!Xh@OIXQ*SK
zA*c`F%eW>6H9vh2%$68eQ`D#YQ1+7_vT}yroV5m_!f)fGIm4RmFua|4KeY)j3M^%@
zD-u(0cy!_S=MA3FqFUGFZ~p7ppXaq!WESfzetJP#u2DD0p9#1%_G2*X`3*)S#KvN_
zw;MyfS6Y?Q@+8ec=-gXcCF<mEk!B6dZt7U>pR{)_U5WePMA*@YL~i964_bIF2$z;G
zflrb4RcY&kKj#4+lwHEBrStOIYoQ_Y4<Y2&9<()nqZDg8{d|Z2X;5J&!U`Gu<@r7>
zw6xp>XJ1mqNn{z5aFaivcUiZ-)Zm#uV=3fr`|McW`PU;jz-ALsDEyFktd`Z^i&<ou
zvS^|P?pWE;v^%TR|KNtbnz!@HLuFYox#i)++x|QgQBYS-W!Ha<US1rSOB+rI_0qvV
zW*s^<`29l{U&YkNjTiD6$<6hR8k3_a6bfg%wBx)v_ZjMRFFl3j#PzNj9e3nA4nuu7
zp(uYdqoYt~?cq|XVnfV!Wnl1p@@ViHB$?_@ZnuLN*S3zcYlIYWjoorYV*K0y+<Y6^
z&jPbJgYF28xn!zKx(SF!NV1=9n`qe&S!NpbCzxDAy|p&jm$szI1*9Bki=P$En`A$0
zHH>W5A~7y}w2&M$dEh#?+0(r2SGs5FnD<L<e6|@Ri^W)5tkkd9X@%$y4p}UeY1(J-
znU6oW=+7D=9r8IB*JxC5$F|bd+Yi{>=mO8V-mrU>?|gb#B-$LDtpo{etA}8z_z^g2
zPXN9};sgDwvNU-#%Opp9v3a>w6*FG33Yl*cJ7ZXfc2<kMx&D|UbG0}_Ua_3x!Xc(J
zs)ekNa7ry$gN_@icS$Kz{gf?*i06G*_8E#M?nSY;lzg)!Q@^G98j)0P0zSkFE*2WV
zWhm=GqSm%>kx7E0ZRIRSZ*NB2-I0CH^08=m=^QQj=7GoNPG2(1RX%=U1WjXu8zL)i
zxkDQ!^~BKX-&6PVx_W-KyqB}6lS~q;*gY`&mQ_l2qIk9E>F+D_K^mG@MPttZ8R+nm
zO1$~ia`@<hfos8cz_rnUW9i6zwZK%B48zi@Zz`9QrqvKAyLs2d;<=~n#LD{5^G9Dk
zj+p%59Lu;^!|t;76=Kc5y~fUVa{2F{Szeue2H+&FbEhp}9GM9}QE*(5jzMKG4uaIa
zapo=#mTk+A>X3ZHKOmPdB=#nZCmqq6sAUECP{n~dw`Kx4z;P4m46A3-0~u&B1}9yE
zK4b^`o}tw_cQ_Ke9?TYMEukvpqqkxZ&cJTj2KQ<?^;_FtqsCIWQbbkTg<Eb1(*cZP
zLAP1TX#piGB1)zfFn4!}rNQcDm3+*tXbNM|quklO4^;R<SH|#a@mp9gqXCJ48@nM)
z#BR)J0kywr@%0Q^leej?>c{TTc99Ic#RY6QmYP5&?#=@X-GfotBJ*=4glu*{$V-m{
zLQvW7+nlc1j~9Rc7{vdx+_^6w!iW`uAO!hCE*?Kdg0=sAAA-1q@FXru*%DE@gq^Sg
zyrVbL*`_O&DujD=_^|0GM%Crk=82J~X8cy>ZA}Mbsy3+pzS#Qo=p?A4aj`oX@l|l}
zwac(i3d!2Dq^YxPS!lJnlB5!4U@;X;_)rV@nSk6!et~{;34Yn|n3`29k#C>fo)Lz2
zagCi_d*_aNj{SGfQ|3f>o0X0PPZx90CRQVe-Wvy?-#F}+ABpJ09H04q*Y$FP|AhsB
zi577dY9)Lk%JdL@u7`+<#*w4f;Y|6ba;Q0>Om^6nI}Nvkjeh-`H3CL+7etYaIp8n^
zF;&qs>)Th6@;CV7uDVV3R1~sK#i#3)yxGa0_^qnBOu_*nXm|5-uI%V0+O~g()7E)p
zeQsl&!yT0AtD5B@$7GX*N)|UNRQ>4_gta{UZQEOjZ)2PDNi@qSRLkrt${ec_l9gSO
zDJ(&b#sea>B>c{A5m4f+K7K<|h(jtF7Be6<YqMkK=maB4g!gM?9HPt7Tt-GktU}ZG
zNFV-~41$2O>}e(Q<!hO)VHKLDX7R}iAG4s6B}T*5I}XcwlaGnGwu112c$eNNz<3##
z0_(mkEaX%FD+xrQ;8+cwC$O~=w!`WNc@5P!xZ_i2%9FQ%w3cd_kM_>RJ3*9%i&PSL
zT2mFwjMy%iIHa>3`|2&W0f#ML1U>hW9ajZre?InxwZG%%Tf8tfCO>L2;!h0W3hh9U
z`u-{xpU+nC!@c9|NAEwCYXQv&1a|IQ2M@8wU)tjJT^HI9aLCWjWQ$1&YD;x;i*p>c
zOsltrkV5NC0|+ah9%$HBFeEHaKV;kZ_y{Bt&<H$!@*GSSHSDBWmmUO*mAJW6WR6qS
z1>fT|79tyKa77xQi7F2m3M=TtqohN|s57nu_LB^UwoANiANRyoeJ_>$+d78)q)3y<
zJqotb+&J+&-Pq6KNd^*v5r_qCnbZht^v%AF738CBZy%c+Vgwv4HE{$yi1%)v2yGV^
z8(rL8Iy|6Wk5^bi%g?~q;m)te=yQw9x$mdnb;Vto$ub3Ei~Ai4T!e?p#bsa|HE32T
zb$z7R#l9w6|L`h8#c-{vI$+c$OVB6$({F@7hzB&6DutBHOtLZ=_e+Tso*C^2cdX*3
zASp4HZ{2cD?}<CWyu~3Z_%?cBRwL`*j=ya3KM&RG{gj;$0ciHhopxLMvbA^1h>7WP
zcLO{`HgAn*#22BODW$ZB)7MFAVmF948G{dFo|n^QX8`cPL`8r-T|VU%lB2zAr~+}-
zREE$upX5E~KWFmy*mjYb)PUR~r5)o*)4lZ%K!`G;$Xu1_-PL48)m$!D_43GXWctN*
z<$76R1YC`3>KTgep=vTBh|8OTAP^5kX&nddkkk1hEQeq^pqlHV?@fn4#7A5rBMfYS
z!*jUuvyk`;3ev#_>yt6_+DQ~GJx*7T&1p{-%AR^d^hlWd?*1;EF2G!UO0|qmUA_MH
zIv-^HJQ-%icAE_F`FUcx(y(wu;VdTM6oMazEmNml(ABTjy^wNPG{UbSPme*QZ@?kC
zqqPzYoHxH5q~+nmi3lem%vjcUZU)Ad4=HV!H?nlkDDdc<-kTShZ>%4BZfJ_MY?zMH
z?EI4AC*c6f#|*Hj1Pp{%>q=P_EqfhgmdcFu_%))dlTLL_N`HjlQnpmT`Pk3Cm3+|V
z;#YwalId-l1}5WSG_)Wc0<*6F{kA9T*-|jQXl%4IJdrZj4!ryTx1pzf`FL3xV@S{g
zHp``-C&5G()EGFcWbu=&ga-W~@Gv+^ccP>J9tjmIiTE`9IbWoFJ<BH}OoE|it~Z3;
z5stumW;yKJxi>?&MS@Xp*t*?Qn;|bkhOEV_!Ogu8?K_l3W0hoEt0*Y=ieOEYN;D}%
zsge{p*?=A^dV+dUGWffiI+nM>hVH=_y{*ba&8$T3VfOmgMjwuCobJ-X`{K9IgFrDz
z!HK7?o`vg(9}i_-XyL=Kd{XoYq3Zys{<Rgh>}$U<VFhR5xKMI!Qi-X=w?Q00|MrUx
z)@I^z<f+y<7N9@{U*p5vrJeslCd98m0z#0iX`j`~#lsp?Q^VQQ!%k6T86q;~8*jDS
zlVbmcC#(uE;&WDRYI()7s~N6BGFGvT4Xk&kIGU|AJBeBS+hL#m_b<ky8em9weSI+O
zZX4a`8p!g+6ExEgP{v1J5`*mR<x1=&Ciza3&HZFRlcwz04^tGC*8Cov;Zc@WbMd<X
zH`C|z?0~K~!=>cZcZhUg6B)O)b^X1q2`*ETKMh85J{g0eU~BrIg7_Mz4?x%4z+EyX
zjXnhk#5hu)B+!0%W2&NG?o?b-#G-P^CnPMGkdoxTQJ<NkSa!Fm>f-=2W$%s+{vIqv
z-}CoZo8ey}K1zL}LatY)r0uVQr=Y|fSR29Mcs`t?d_rsX^EFKi{NWx#WN1kAq*>{j
z68PTi^S9Fn94FvXF0z$p?G0r5E52t6YeAoZ3XYYiON3hu_^QM85(93O{JZF<4p|4$
z*!9zsU~1Z=!M^A?NLS$N^SqnSR=Rw~R$qBivlPU0=EN<n{DCZP46am@!&)?#IEAnv
z<;X;=R--QKy->(kt<&2#Vg|K2L?<ltJbQEchsZ)(E-7Q>^9!cpNrO|#ck7z5)DYr@
z4!W!lnaT6Mx4cK#yUrV~6LC2w`h$<xZ~;$VNgiq>_A74RJs5vFVu_%~k?)PI6fgMk
zMz^EwzOIHyF8WMwkGdc$i;PY^7B3K_^xXWwsQ*eYoo)W~gn2_bW;&N!ER<suJe<Pu
zJlJ37)~ihO%PcBZyel}FWL~qb7u&gH4O8N#-u)&%^rJK`USN7?bRaUQQ_9M=u)^#R
zBvHd7`Yke&(^H1d)u2oh)SJ+g^O+1aK8~LM<{jfiJjN)4?;dgwjcHVDtmRn;;yCef
zP1{f>d}^RE%M$jRM{z*u`R3BL=fUUt{AdK5S~YFVnUMx_lgkQO6BK#jw$zI4^N%AK
zHRpSE)u<{F->!`AY!|o=-BH_1yvk^10`%qP@jT_1_z^FR1&A60xuOl^!_ux=<Wc5p
zsIy+9aBH<>va>PQ?kzE~E|Pq3za{L*xRHo!Y5b{>ufE3RK@aAd4Qdajdn*QIA*8t6
zcp@xJH|#BCIziaFJw0-ugKq(Kn%&&npC0~6_^w%Cv(z@YSoiIG`4<|q)^UsZy9{kM
zoVs5SJcKvf1LxC=`Fm*#xP4|2k(%piCVLiPl>?O7`jgFrAqonY9l8h8>NAuY1Y!Q(
zz_}(?p#+SAdb@i`nle7x2Caj}35@6O{Wd4wt!6gG9`67l#V9FmH}y9WoWIOo7DVm1
zW-*$C%!B&x7O{c^G={2|CNeJWt^Eig%~X}X0Gla>UQa%3lIeZV;FH*pkFzk}dz{+r
z4-buDq&LxLMMk31;1nB8a+$~Jj%;F?gvy52K1JJ9$d$@JU_TLQ$*qAF!}L(2Bi|l_
zCIBsBxvdl#8%V@QUWLCwT&XG#8EhMq(#QIPjBBUe>;)KJB1YHyC5B4~;HTgIM1&ut
zZ<TvY>lH*TpRuz`{VXY_i&;&ryb&ky{Gt>)_#_nBY19dMw^fGIx&e;CjjU^WfKx96
ze-~Xq@mbm6FQrEJX7J$}ag*&H2muA>VpfI3Jzz0RONGzUv(TEM;(MO#u5JuLtoOZE
zf9E?y?@)eorpXvxpGd3OJ+m!q*(OE<o3&Q)t#~Tq%Wq<%Lr7*HY1#QiOFSzVSAgj}
z4X^Uk`nY`u)at-2>zn$3gfC&BL~qu_39W1fb_nahcTZjilCIl<w1918MmOW>rend>
zI3$r}DCr+R<GCI`w6f)qu5Oo6{hF);e7726m}lvnwy(aVZM+=6SGGq0W0uS6Qr-19
z>)i2C)C<KB#7SX>yMp3nx+^dO5EiG1?*3|Ep-rmUgit4R@$luTi80tc8eT+OLh>F`
zIP;mKXjpC-+cM~u&`jCFjDJysaU01n2s)Lg`g~z!eQ_x(y1L7QiS5O`e-!W2NAX2m
zAW13TaI2PbTu?-C)6WXQR{u?@gY#QX+#>OrBJ0%7MBwz}RAa~!n3*l2y}$RTQwU^h
z^xpH`wL@OuvkJ)wA_L@jaMGSfhRBK3i_9}n@>_X5<9VqziT!Ojy&FUQqG^O|2tOvJ
zx?peaOw6^-am^2_rI?)`-I=Kz?Y$a>#H4moSgrAXne#4Z7v9zztU+Ga>3wYwqMJ(1
z(<@RlT3N2sA<A@e^7EUk?z>;7i^CKV=g`G8pQ<BaQQ)J^<`Kf4)8{g|KhYW_JQlC0
zZtOvk_O$G))R_0{PZ$qgwxH?9Amh<!3SBGC^~E~`m_Os!R|Nm%2Ldg|ZIhwKgx}><
zCwpH@FUm)A-KmtRIk*qP(13gewA0@$amX(=-XAW#mrouhO6VIPA#?HHWU0zWC^PSf
z=RP08?9dg<zEEH@uIU~6&7f3uT^KT%yP6-q!Rv=sUaUg5V%jy7505j~0fF+~?-fuz
zrhFdBmm91#t^wy6W<FhEvL6p!2HB#vyIIzmj+@WwV$KV-Y-(5E6pEQQ62?_!_fMb^
zVp3jPOWcxB0&ivLLxQi;&j7#0k)jQhNJaT$tWMcTy{)ebK_ek1H?LEb9|7bcD1mIq
zJavA5_|8hfwsUFE(OE+o2l%>H&V}7(tB4P&&ZD2t_WBcLcG+%ogfz61&A8UL4`tgI
zpPzDdaT9}3{+DQzf}x)DHuu579M?jhL(fpDJqIF(1So8}s5<{B10ed#Zu~Vt-{|Jh
z-p!=f0m!|z8~k~;`ef|&Q~!JMv4aUK4kRKGH}lzXh|j?iMyDPO+)(J{<2jWeftSc_
zZswLk=3cN&$0#zjGea#vUUaqiJyOmECfCxAk(HHfu+Y$s!NA%8h1as$uEQbu8Zji{
z^ol*i({aF#1r|H<he3I01h!v-B$k$`z)gpq$;m`?g5gH6(cbOZh9$5O7VetJrw*b~
zFJjg#dBIFKHa0e$B)lUdBYOetEFv|HyWF)bR98kuLcun$=+SZwIsvn>Q&43~=eEoN
zc{HqE>;Psk{VOd0$MLe4FqriJ3vBd%2P3s~$^PEa2{uP`3=BzWX|n%IP>mbLCJglr
z3#fgsbXWjUAu%%vz#6__pbigRr&rhi#qR#Ws>H;yo0|pw{r!ib85&Ygu+?B-*gQOx
zOko~J*Z9{=V;&ZZJ3RaZ!>r3GDzbuaUV?d9LT=&1DcQsSiM+L72?_}%rlo1`o-o6L
zEJA)atOU&aZ0}zB3*=T-o+!0g8EMzQJkrqocTwbJrv3FMQ*uT2Bdq@E4Y2@P##)9_
z|8il*z%9k1iYTW41R13r{m?c0KUwbGSCT8T`=*l&-B)(H(bVflGbhPz;}~76#Nqd|
zN8_x?cthDZ4xQMe#4tM7gC1Om+i+hN^)9WY65%rxC?1OJWg_Xl@Z6<+H$TRRAj>Io
zxaKNqK_BvHvOzx4Jn6|wN3jap=#*C}e2Fpskbup9-tu-BPtXQ6<_+>}KzlYdRa0**
z&@RbtaASW0Ll;P$MH|(kI+SS3clyh0%`miit&EgLm)}SD4nf>9p>0F!MDt~PJPkN5
zQI^G=VCXn>#G~OanswUo+f{j`>rXjaVxN47_@gSRCo!BSPsU_VlO=Bua@Wa}NTg*T
z`t=Wcvf#7g6b*8yr*Y4zTYM9jg*8rV12%m_Z$4)B@62eC4@r$mCV%q(3#)azn|DVV
z23QdOh1A{M&5K3ZwfQTYyN8IYQH4lSO3G&10&c4_ek1p9yv2e*no7q?bfKXDGSutc
z1mr|!nzTx@j^k|jh2-ts5&CO$8eOYu{iIyLdr9A?N{-S&hefHBzJce*Z+2-U4fZw#
znO+=(kHk`tr@+Ex@gzWqkvV0ykI9sCnU$mIjV!JAxM-{si1*iB_6@59@ka)D!6eY?
z+OOKIZ|(B9>)0)74?^b6$vLrKfpX%3j)>)A58y+_ZovWeo!%%8o^dy(To2EPK>#LY
zEh;#GgDX(e13m6|eF+expU+PlYXtqS#uoDx&CBa;AYN~{BK36+5wS!wWs9E`c;R->
zXNEU7UU;SMG@H!zazcmO;MBypn*T4mZ<Wbbv{p@)`P?%hSZe-*`h@1MFRHRRhaM8Y
zPpYPj@5NKcAL7=2sU(^lNv;Q|OqOfFDSwQ1i+dXFxs#}ccrz19eSSqn)ssgEcXyoq
zWR!!@mCMN3p_s`mu#@mFN-sCC5g?s4x)n!<fko!Mq57BYM=t4D2SV{6LvSbQTG-r7
z)uZFDB_7rO=fOHLad$EbxUSxK<jWZW1++7XZ+YtWIc+C)yOfo^JPHGURxt9IVg<WH
zoF<I7+<0u3c9qdrmp*u}_BQZ-yj;pPwxSw4d$`<R9hW|iTdTc=6#gu&sXWujxVRU1
zwAn*NMB;o`flytAPFwHBh|Ov+Y7)<=bLHs;h0EX%%U%QD@Ey9Hmxbl#9zeIw@7z$m
z0=~82`{BX;X~1)=#o^x1B<OQLRIxEL_bJn#Mp#k`s&g|E{!J!q(8wDR02bfKO#dRf
z>P5^aG;oikkls;3dUj<uNDu;MmDRoPb`SJ8`ZUq)QTn3>(2r5XvvjRwi0SgJAotGy
z^0hj&Z3=w%MRQzbBgT&4EqqP?^F^YlM=|V+yvYlMW4p-hydp~Bl3JZ7uEyzEmz2Lm
zzJGc$luEE4@QRH2^YuVGdC!~WBB>|SK>eYOuIDZI>K@Q(Hf5p9tnX7(rF+P_vNR0k
z<oLd3E^Ln(MF13$e;gk+++B&*aBL+@hg+YyhH+Zx<%e=}HjmL){{Z0y>NRz>msD09
zSH@VADLOlIc6YN8w=$5qeL^RpbD`tMcn~@32>z2Sz1_`wd<JaeRD?JFrDpv$JpUo;
zF(T%neCiitz!_J~!}KKZ@|37z!Q;o38^$!GhHF$3Tzo%SWa3~eU@uke=rM$b)5bY^
zNs~IrXFq~ju*Z{at>4BE&*nSL*8DX@B!3Vd+vzsS8sv#d{x>Qi93GL^@q^hJMr}n>
zIb%*vj<;{ChH|bR?0`#L`h+Bc^NMt~yB{vdqOaCzg7PK{N8{Q?XAa3sXvUN5Mm4Pd
zs;zgM9;j5juJGVP9yqUTIO3UJRku@ERh#Ok@WoGM<Do`wlOl+^@`FliQ*eK>7cOAC
zcQ>DMd3sZywBC4YDypdnlE2ztDbl+2@zjHYq$_2G>zVL0^vW-LzyPP-ZUmX1HK%Ks
z>I>KUjv=pd+=fmd10L05T4kC&zMKrUevWTad@c-+;9Z0ha5{x#NMfEmKDkArd08F}
z854W^a#FWohy6sSfl$y~EAj`aJ(-|8_P$SPdq9~jUhVJF<(S_5rTBx0KPA}cscT@=
z)15iv^vqU6LbG}=n)*bbXOlYb9g#)o2_3f6(*#jhG~tOIx5Enhu88#3v$Y1Z0NY#6
z9R)4_fCSX|S)l&k9nJPs0ngIOf^_IPxYb`J4)L!CgC7{X2mIx=rs))q3GWA68D!_v
z)pw8{{=mCfxi5s*>N~YwvWSFdjOT0yzR)Gk=DDK&=b569#R2};H^r<vgo+`%aGz~p
zkcBTsqNIOjv71cW5?I&0aULVQ3U=wsMK<CJLti;wp}w53eP4(qXH3Qg(}L2!EjbPv
zQTl1yQ;XCf;2<I4;yQ1r{OL8Yw!ceBA>)RZ71bZ@tJIS+f4#mRiNJVgG3}UinP)m3
z=nfX|8&%uV?O@AVu`A*{&UX-8h47wyca1Sxy78v^GMW^L+~9PGT7)aiD>S^>?{{wh
z*mbwzMWA<;9}S@vhxwU&$h`0=J2GQO((2o+Jv;J>?{R<pPM-@`G8t=J2|ZgKcVet2
zy!LNdB74#o4B>0@s&^P8^<*UYomdw+NlR4k0CD6WB^}BnyR=?_{0!=Q)ab9nSXai;
z<5pK6ys3zaa9}Q0KmH!RN$}|6)k^oA75&MPa;D^mPYkBsgu<+sR~<su`Atb5AU%Y<
z-Lx1Pv(cGBRsxq5W=E(SGSB<q&Nq<6J|ml;ugAG;4a6!aDfQ3H{07>!++7Bm+~0m)
zo-`9w;Vbb!;MO2u?c^|DfES?jEun{J2i^MgtKaxZ$n3R2F9sLKyfC~r|CEx&X00?A
zdx%X1=?y^_>UC?uyr&dKTfKOdE+TV#d-}1Rjcl}|`5e`vBwxiC$_S3PmXy5C`_lJp
zHuW2FDpA-Lk<@FPC@^-%EhfE=ZrS*$I{7JDrb$Yczw(cjzpnQ{0~4{D9(*6m;{BVi
z_JFcK-*r-l&`_*pfMPn!ZhHFdOou2jT)RBNdUNh8zfuge#g)H)x61gT_7g7^cT^MQ
z71JF1@R842HuR1q^(i%Or&^zTTKRRoAIaL8sQgZ<!NK3I+)o!vI`wxdQ!K*9P?qdu
zmxrj4((h@}@Po8ZX|cyD9@Kdq9PEZw1!0eai$*G@u8qZS83D}*Y6T)bTUvPf%MSC;
z)1-|ctvuJl&Ot>H8O1s_L&wj9t8KxRC~nTxmUMg!;k+mu%gn3G;C~>swA#|Iu>_eZ
zA5U9=SpUoI!KuU~@#ynCBs(m*Ew#?R*YH<-u`9z`>L+%-^Ufxg6%jsG@?~qGp`2$n
zOWpYouX(_w+xs6?A;DKH_cLqLejS_1cYZF1PuLvc^B?ZTwI&|oV(~7_cb7JG_!6o(
zFn`5bZBV*lSDT$~#!B}UCFu>}Ri`2lU+ch;KLV;dpmFU{E$f>qbHN<b@&bA<8B0*w
zAODDav50-wUTOv_-FaTkIC#EbgkVK(LGAy2lH;&a7&?KV-;KRb8ug2*+Y}6i`ok_7
zBS3?f7s4!P8aB2{;K+;RnYi@c*H@S!xpZ{tGYl!E0ZU_0&J|bs^a=gnwI}X{7%0Zh
z-X07v*K;skTnft<1vDAm1Q^m3n!|u_u#C{Cs3>v~PsN`v%20YZ3wC2-NJgWg%FX27
zR)OK@`|Ev=-&sD9%1YYu6Poe85`h%fZ((ayuJr!o#bEak=GkB2a=&C=q~i#m(GWM^
zy%(c17g}E_!^t1Gq8Y?{8-<lTaIv%dNG_Iw#qM>{a|O7%9HF%wd$W4yN`NO@-@S^2
z^K2;!-d);T8bi$;3B@709Qny>pM`KB3RRM60KYO#7s;b?Q|e8BUg&L3n}~XazP3J7
zuFU~Lf1y~qq8NrZWd}U^(c~?ZD+2hUhiEesT6|w?cnVK>+@dG~u4rQGwRoPgcj({~
zhGs89NS>n+#0+x>8sr}@7M_J@860SFzT!h0ceF>9!ntf_S&M*A<Ub7)8ZJC?sM;vM
zbPgBTOs5N0kU%d)9+IMmBaQlkB1Y*7yMykG7kOnG`0H&)-|hAju?d9S&F20~D@hC@
zxP}4kW%S7qr+Eh{zCj1|+k)k>asIR$Xyh?ntIyV&xDu<0#`sMk6FS}o-JD8v?A|{=
z-#UmaVK?$U*zl8OVyQ{*f-tG;Q1O@~4)M=AoX#XQ!y^k!lNtxxel-~p{3<zTziST!
zj#bxwAK)BFcQ{57dGP26ikVI|Ix-JmsZJYVKg$ODcH~TegvQ&lAAH1(CX!W}N|>%N
zxLzrtdIw?{6bC4<nuO}!W6)O&6}A+Z6LQSU7#5d~k}f1}MpZ}?3Ln>L;zEXKu#qG{
zWn3HmJgQ0q_?_1zvrdYZ>v`{y*%o{9GVfttJXl%wc~df+%|q#Uvt4YJh$M*M)zT&v
z$nV3jE-i}Ya{zVHA?sjuNyTE5Z*%X-1>E2V;hr8)x%T%a3_q>Gk_7POy}^U(vOtv_
zc>ike)PG|_`Oq~5LMG)7kUX&k6SRQ^95`LMfo^NNT#%$a!7aa?21Hf=s@UG&5m;os
zn|Nait09xqTO29uFJeQZUHty@<RRkLSxsvG&^TiF4;Mewd=3vF_%?9QP;rA=zaz7Q
z5#D2Y@ZkVex8u>;b*pLVCEEuNuYu`fKiEH=aZ$K7U^ZIOpfPd2S;v&0-ONCLmQUIC
z{n{#)ypaf?Hd+9d3e{WoT)|k{N2e3b_~7C-z-$<mKGB-4vuSFk(<B<cDaQ0#SF}OQ
zAg8T?EBqf<I#N8E1mgf@ji<4O62K@xBKY%xk6<g(WS}PThEi3>?u6I6Vo`B>cUFHj
z7dII&#5UCtSMbMzTP%>vjcIydlpaMENQS)|n`3foJMd3zx5I0=GRJm9LlI#qD=e*q
zcOtL%CWF?sT7x<wgBRWYWkVO}Lxn_a!VmdVNSacWY`oM!AcQ(>@Ciz^{3VrQ$$t{P
z2bJ>Qdt?f`nPcPz-15j5yAFD}=Q~cXN_X&wc7118d=a>U*J^pKN=P?Z<5M{V24OEe
z$?X&wJiYw(f6Gnr|9@inf1D>L0X5YBg$4NEWn-CZPa?_fSaJgd-S=^YgoI#O_utuN
zU*_SIQzjozR#x_KwlaFs8o2SuqADN81yF>cBQS!3o?ZQdVQwMV#KHQ?$;+F}RT=Qw
z%^rt$?)^=YDCLa6rs!E)qcSow3S)ZNkxWD~`H73a?Y6eIdVfkqIC?*$YpR=!XNyEM
zHF<sfkDf^R+SDWfqd@>@gv4CR85R~sj2Zr&UFwAzX88O`9rn3nmjAQ7d}eXg!U0YW
znk0`>?G}Td>QM%-`!AcxI?3dG6ygA~+hvag2LCqoAVuXS!spq*j<v>UeBGC}apxz$
zEbNuW+n@<dDb49Rubn0<Qf^O7wVcGe*}kkQSuJ*^mfVracYJuHugV#m?{^U>X?p$0
z9>3mFGEcTz{j#lo#Am)KQP+LYe@A^nJMXQ4SV(6497HU!i{NRl<xZ_m2=MDPULX<?
zbPKr`fo>r;_OIO%xm|YTF1QIQe9(dMz0L39_UiMdE#XNcD8<3Q@kVA0Pj2VONBzIX
zl>6KSV_Pq;k^9(&7ChXSqtZ!N*soKBeY2Hj!E#%!ePcerX12NR7#bda`M&9=qCtud
z6fN-56j|V`hb+}=mVrM8eJ3~y7KpfY6OcK7zyFRugZ=t<dSv&Cbx>{fU@Sd?A)$)`
z&HftwkKLaq2jW*^o)$*=H9#@xaDieU@NVc;T<dMKB3)I^@E^w$G%T#bhxI7d__kq1
z87<7jiR)s$2h|MNpAcB5J;i+g&Q#0F79ROWRmK5o)<NTT-HG};H0t#=Kh93D<3uf8
zt+Y>@)n#A5nE|qFjsJ6D;Qu&x^v2j+O23d;FjUbWwmf0#L0N<d3}RmRUY2et$Q4!c
zoZOK`uTz&3(sl+bw3a{-QkYUF8YTDODQqUU&@zhrLBsQ%HF-=vB>A$^7YbvH>7)ex
z>8mn<8TTp!RSHOJ1It_4V;${j>V1Kp4BLs|5oLvULN&BG(D2HZIi2M>Fzs%l=L8ri
z=EZKdxL0f0Bbcghp9S=PL%SMZyt}0VAmfYr2@y7H?b*>F#QuPp(U!FXyDA*FTcN_K
z!zOlOE~sbTk5x@g!w0y_0TeNPGg8gVmFAOvyK?ZCjC5$Z<?Ql)-B_93FZfx2uhCwi
z<0fd-?rcEAO74w9s{d#VQEpy~Rn!(==EdJ~wb1}C8k|cW9>bU(*BKQ`{iB~NzDc@}
zU2@MBvHmL)h)GcPY*F8DMT*7Po1gt3JeG;%x6>TE76<qCSLlEI`NMt{uhT=-A^`ZU
z5i!-K=O>vdz}OHVki+Z&9lmym^p9IT;kbeH_?v3LE80g|t7QHhQ3##WOvS?5`B^##
zFyraJaC}y61=gHywlLgO=M4T?H9*C3P=R#g>t<Wu`<eY)8f0#qldU<a&Uy~<7R?f7
zIThoz)e!QSc*Z;b{=ZtM!OU)3#n6dTi~z})^@XTawtC&p%?NHI+Sf33y}3-aH+Fz<
zK>WI=S8CNnU9gW8`dymzPiv_d$n%62<1JUJfo`0p!U8Bx^Q-yIfYth3t56QngYX+D
zxl=3}V}U$AB_&Ueqa%uLCl`sF`O1`-rjIxGbhtYmT>)*ojJT3rlilY%=`rD8L}cXG
z`$sW}=1&hBp7uSUi}3_!Nl9UD>-)?rx3%71Dpifa!T27Fp?I%f%M=G!gAMxv3aSmd
zf<|0@#sNG9Ld|X}I;dEryl)H4h_SMs1&`NPf~!oZLqo%OEd2$5+@7_xcyALvL^sy>
zD65E8&qCNhX`sDIlZ~TC>&*@4lcFLW%NXyJGw>H4VORFV{8ly4&utd=Xa|i5o@*<{
z`%dAsmPDx%if3^%8jdmh9O|b%u|M{_iEewZg&GB_F3x!VAKKmms;c-46TOIn5~2dq
zU=Y%!bXbTq($YvONO!9!ND4@agmkxbO1FS?Hz-`XYxdFqyjgF(nKy6VtZ^;Z0`9%%
zp7T4uUElZZeO73;a=9vAy*T=1OjgnKI5R)^vDoG5*w14Al+=yxp~0ViK8YlBe=(VS
zO&WVB428dD;TnJ)+%}TWUf4Emm5}N^dnqZ$Pq#tv(l4@OESp8ygov%P$U_C9qkMa$
zqa=9rouZ8B*vdDKEsmp^pkOT}%9I&*L9xK$4;itijw+dvBW?Wh$pz-~)Rh&&4>3_+
zU-qR^T^9AwYU*TE7(R2s3JgHkIEr`%H+{p;m-AipX?+@cStdW|ESQfl34Ii`o$}7<
z?wvPryHPio!{Z3bd$XLT8mndhrBpM9&YjT&22PUHFB!T$mpL{VFQ1>BBu)HIFjy29
zBXNb2Tp=L{%ZtaFc6JZbP+fa*xKj85?UgvklVUGCUHPBS5@J_6(^~o)lC^KA91bMX
zFDH#LM!(g3geHi~6FCt%y=QYyxc=cqT$+ZnKh(#~St`G=!p&P!M@u2kG<_JF*X%TZ
zaMUt#`1<3Y0!qsohR=DQuKf7ny^eP2o{B5-xxlIF7+5%vZ~2;s^|lcwy^#N>yyhql
zn>!CAbn>RK2_4=Sr|O-u@#uVs60QvOI=-RKTQkDEiZ^;Yj$v~zyi&l17T+KBF-yCY
zYH`AX>znFDnJ=~mOZyMTVm7%a(apY`Ncc0SDekX)X=(AZQQq#e8{i8^C5oCHqw@WK
z%+cA4O?D#I?7a5#BQBdB&kGrX-nkt1xSF?OUUtpD8MdzN;o&})^9kGJ^O=aou94oz
z*T?Ia7Ck#l<WI~;r07LA{1i=N%{Rqe^oK~V2bpLmVBdZsM{px$KZT#5jWWH>s%NY*
zhic{K;w%2vA<u7q)!$~D3|-f!1@W}Lf2w|lOGY^3I=?`7SQQ$>_w{kLgA2LN>b%{p
zSg%UkQ{F6mo$%7p58+9M7^=>P=ju%sb~!69(>_wuUDp4&K`S3!CnNcFiQ*ymTAA6X
z1F3+0l1=>`k%>x@9}l07R|FBA?IuSUhwF}rc>4%3ly}D6Z<cy3?fp@%ZFZ^7{jQE?
z!S~xD#-3Onum9~-8LPCnCr6h<+;4h6WD=2nz>l5LaOPfL7w=vvScXkahn_r(yV|k;
zg0QvfaN4DlTIi*Gci7iBhl02~zd|MY-P3*MgVP|z=8L4GKg(XyZdD&fcIZ^TJPBdI
zca7GIJtjWu8V$&wr?^`^q<Wu<chg<qVYr3p7tQdfbEVCqLER+{!8?{i#FL5<FYdme
z4a#E4%ZldKUYTuHlb+Ti(I0kqKc>S@HQH$}s$|=$l?|McixWUm^9e3){8{t9Sy`vt
zWl5hmE1%+kXFU9~`mx8g_Lfh9hNR1~Mg%FQ9Ru?i`+XMZQK1Fx8TUl)>cM?)htiQV
z#as#n;pL&^o6okY=>~pz{)%&N%pSHpm)ko+pGF+BS)9L+eW%>@?uU?r(w;mz>EH4R
zR}!xp2i1rmsZY!5Qjolz4{i=IO-j6G#PRB4=Dp_iwPR8}eDa_14RV9x>M!>GkeEqg
zeT}i2p%u08rR%pnSf$6r>Z5&4HhVjqkdUJN!@<?c;=0E}io$Hw&$p9gB95NwltjLU
zoM7hyx#;8eV>^~f)T;AwzE^Hz=t-%dK5_2j4r4887OQ;DEDiUUs#W)$MJPTv)e}7t
z%b};|2^@;7qAVLZ+Vpg}SS<IV6Fc+c#{k3G-=razk`@*9B6%wthYlz}m!bE(!7)7b
zuEEbxnVc~>Z5$1eJ2?zST12xcjq=H>p(Mui=azaiuq1RUW#%$SUx4OgJYu(b0jHJX
zc{SUI(vzcM8jALuZK1D1U)woq>|M~CswyHoe{|#W{b+KE%?e~WPA@Z3%Gk42pRV=>
z<u3NeRs7<cQCvwUl;6DV=_irVC4AoIbBv2rR;qNMzN)Wq-5wTdifkhKdP=tI&Lcbx
z`?B7{Z<&?UDC`pN$aQVnm;%*}&7uCrTseKz-u|PuHRE+w<wEvY62DXCe~~lCEYqov
zBZ*GN;tj`zd9t*b>KASyyxF6gr({lHpS(@x9Y0x|Mqi92*jkybqtx1_o{XK|9IX!8
zlHKNb8`P!Wkr!NfDkiWObl~}N+M{F7(SAi1SA2bK>>Hl}8O7F9DPFTzLQnTTU9$+r
z^yYFwbC4%{)D>~olX7hmFSt5*a;He0NH0$2iu!CU^81tVc<Je14^}8-lyS>lmor>x
z@X3#{91@Np`4C_*Vk~O?<9zIN-^W0cCnF@eoYq663pDr(IyQ?O>lum{cKMQC>+MGB
z`8%Ho7HG)QzLISA<2HDLc5$L-|K7H6)IvhaV@9i3ywI1oTvdvhLU^=qw9AY~!T0IS
z?a9ToGmex%yn{byDh`oMH_w_APbE4$7~j%S=zsL{oA-8G_Bj8n+uJE2n{d>)s^ym<
z><2$Oqgk$ju#qPAAg_Bgc?Mc|`J9<Pt{ZMMnu2|)G8=zdhlf8_?pr*Mh`bOR<M>;T
z;e}DatyfwsR-BoU0%*6(&U*{XeydjK$8q*~dLt~Si@(0G4Ymu!>Pb5uksUkK)Xy2V
z-oG&|S48VjPZV2t{uDO0+KXua8i9Yd)HZ;ocl(Ck8IJ5UvVpm0Krj+(NzI2=M%KC2
z%$?Hda1>n2>Gb{h@g@t)3VU2c*`bbY%<Q9I4uqwzT%`jHH%8a;w-<Hz!)84bqj~Mr
zPv7zC5U^_-y^=I|^h<idwI(`gTZnS}t%>L>dc_}ZZ}@Ii5KOz299c>oguNTyb>v;?
zu*t2GE?sN%{9Nkm6JeB}+C$;G<4pQQk&7Z>!l3KRIPJXP^kf1>q7IpaTB}{`QR0%Y
zC8yKL!d7P_b85_M!clG>(`yuyt3FqsYH~%sq2XWuk-D|CX!_#pH(6zsrEm@Xyr(|?
z+lm1F-N<WFO6?rTl|MB!Ts`UzIsF<#l*SZtu7A?~K|~O8a<}z<z7lah#zO!8^gW!U
zoPB2EjK%P&(}~NZ|G&tlIDa**%^^ZGShD-^s~Nq5&4T^uDu;vYel_iy=?9BO{(mt<
z)r9-X!LHc(OU)0UWdEF5@5*&b7EU`nJ2^x1Sa!+rgo@Up_3r`aBw-jETb~!_<gw$s
z!&kMqQXX^fDSl}*2K+mab*5S1-=A(-kN!_UPU0qA4tX^-wVuC|PoC20az$~F2mGfz
zWn*Kb6m_pm_y=Q3-k_tqATHhvh2Oa_rO0x-Kh`r1mqJ29IHIJ9wf@4GV{fGC2_+;X
zzVcbUh1Vz6Pj`f&2KIk)yYtJv*`MDYeHE~i{D)$i^CkB9fKCHmV2+^kfKvGzybYg%
zCu`|%Px0fd1Uiqu7||`2Uc4}+JB7opoulvv>pyw<`DF{QgWI0Ikz{H}p4whKJK0)8
zUNMDN@{a>l@~$1cI~O))OZP}gPw!@`TpT?wZ$v^u0!|JBj^s2C41{MWXU;4yf2`BZ
zJJ0%_DLsoQZ7!vpD8<*;_YMoo-2TRFX=&-y>S{opZrapuq)2tf!NqNDX_<nTeq|`*
zYG`Nx+)JF1)Z3dvWZf6lY1CoF4bx{z%gScZ=o}8vzgS0ekm5NyI!?{ZJal$0pI<9~
zY6v<`-p=H+sV|*I@Kt;sr$Sv_4$8LA;p|^rAR!^?iW8N4_Uu`D&Bm>;0OS%PPTy&$
zsij2$!Vo<AxlR`b65f9x$s~M%sVrTx3qcB6R&(d@!k!w!SU%pE({~`3u{Q3Rv`_Cq
zE~&>s2HrB}w7sXrB#3;bh!$ov&2=T#tSLk-yZjyLcivNHccr#DR~9e|YmFXQ>x*u_
z$oU)poU~0}`EPUo{@o92vclnxVVlJkkvL2vOKaPtaz9)i9v)(?FD<NM{{|zm+3b$-
zcNrO-S_yI!7UGwdDdpB?JT@0r|2Kp%qE#f$X4s9NKVp(WVfdfaro|8k2dCXO?x|tw
z|ND4BrsU6`iQv6V<$qhj%Q~U|Ik_)GnfcW~mc*-9uf!t$ZkiH)xY|`f1!mwT78Y`Y
zW~S)%XgGn$KB{n7Gi9r=u&}-CAp+Z^vurn3TaO-`>`h8YNhRtx2Ywaxh#jwRAS5KL
zZw+OL5^}N@i}*VuD$K_yZLavc^*oOI;W7gZ4Z^G))bYT-4}*sY8Dx{(PYxYjT>7e9
z9IjovmNO!!txXMoroD6LA`K1A;qI!GwROS#e%ABCi#Rw5&O5))U$~HOzdEw%ri+}i
z^{9M&$f!C{1unZQ7`2U!7d#_$+@sPJQ_op;3-9F_b&^v%FWuzg=FS}g^y<7~s%+!<
zc+AmSO&oNmbC~?Rfr5iIF7+g~wzuoodScvt+3WS?p6P^_I6ZRw5=_>E(9!VB%;<Rs
z0s;bh*{@IGym7Cy)OL0T(0CkQb#QRNx=h)^5a;@1bH1HSz}6&Pq@b`cO4LI{TU$Fz
zyXp&*vi~-E+*>A^$Le_B3QQdZ7=Nn8WVO(GEhg{Q&A-z!SY^4DtVhZ3np~-_u15LO
zh{j%~60lqu;zW=z;4;u?G-}LY(hUXrBkh4^SmD;TwwdkazF%3-2~|~jd0vm4zptQh
zEnB0+Xs#ugQp7b94shk#wI6FWXYQfY-~QI#zhQS56H`%%+1lPk^`*$%=I1996&2Og
z)O;!{TWsc6?XqW%`u!^%(=+?^M!N_vFA2O#31V6so7v3V>K8yEhR3;}%dkD+R3b33
zFRveObr<S4Uv3Jb@d%|!|NA8wEK;XAc0JWC0rE;p1_v;`Gak4ZkBaVzs=v3n`e1<q
z-rxP>J+9N?a_UE4-vqlq1K=L~ST%~L*4E@|+}$wJlryhGmwlp6jeC~P8P&<rp7H7N
z0UnLWS9+N*meW5joI7`J>E}1hNslw(+^Svjoj-$%;ABvw0ZlbpC1Bq%GgEc%hK7gr
zOifJ>uBJ<~y!qXmx_4`SULlf+g(WHeM%=Go+`LJXEiF%ZEG9Y@<2<?|IrV+~{gdEi
zT~7}dk9S8cyu7`+Z5E_6R2?qp!m=0`7<`J1Y|(Nk;{Xz?va0G}E>vzPPY*LEC+AnD
zDuE|13EQVHU)o}YUD8yt$-x>Hvr8t*Z`uJMI(F&R;BIqQ7xlZk`1^EWKZ0+IOO6-+
z2iper%Rv=K>2FSe5Codr?Xgt*`~4VGmI}SZqv!XJG~7i)W8b8vdP5Ll5)Y(g+@V&<
zbwn)j>ec@vy1UjKAwhN~rd#*!K|_ELxbb$IG>z~&-P*c33^_SDv)5rde+RpvY3Hw}
zAzs=2m=E@KbA3JLyE=L8N8`PS>+k45q5|Aosekcn?y`dU8d_0NF<rY#z+v1@H5p$~
zUg**M@87=QZqn1!{}U2@#_q#m!B%8tW#{`(UN7cUpl`9W=l%<-SA!|i#?C1}dlnpC
z5~j;R%Cu@{fEep72PQh||9@+O-oGE_LjSQrksrX?b6xZdA+Ebvb_`*?5b~D#Gf9AS
zG<;R#c4Qw&C8)A+ii?X2oFf6VN>*O+W8@nd6E$e%4GY({OeUf@-;r?}am>b;h^Vde
zPp-<&tciWoyvCEQtED-DpTYf+wOu9u#I_Fqx12c%93fsgQ$-bz$H~db_Rl~7qhiYE
zbarqx=P)tz3k#VQk6@=<qoL7RP{+r@eDmgwqqB4P!Cx*eUv_w+C#>R}wT(3CJL)7=
zT=qM6gPmRwh?=W6^=>mbWrVI}E2JqYz_P*^i}ll^wXFdSi!gy=+hqmW7y+>-Po6{_
z!d<$}!jdJ_Rs`GsN!cztvW|`B-@d-6MYFNHy18Mj?+`R}-i;HpviiC-=hvM+p7p%O
zZ#K2ts`_VO1-YGZOZ}T6tMEx)*XClKK%1OeAC1}*+m$gKk5s9X>((OXWZW~p%@=?3
zzZL&8{6O|rbj@hn8~x=uQq7B{HQZY22eXbFS-7e8g;po_mt(q;YP$kFFS|KzPt2TN
z&WRP<7*!UfrW}Y%k!_(u!$6Mx{rx<>daOWdVae5z?{8*?)8#}C&g<w*D!h3G4x@5+
z#55^2bry~8(hm}D>XQ@2uZ6Bga59MVLRB9A&IF#quh7_UFr*klo2s_c1%^~nZ8eBF
z1~UyGQCS)#mtlWD38L-<*9-P}_th^S&`wORtr6TWF&`)8v%DcEv~gb0enod6>p7%m
zzAGzcF!qjA*!eDj(7I>x+5W!cg!|EJ@V{Q*x$C_NO1!G!Z;(pyS<hV@9v&7tUa$A3
z;0-L9aQ5qr<_(RGmWmOuQ>%331o>@C61Xp)78z^Y3mNTX{>Ae0_c1=j#nyha6-Td4
zMBNbQ7%tNn$B>w0)!%U^`C^9_%iEx=c|G3bOH7Z2XC{X)h{9}&?-H6QrpJnZWhZ!t
zuW=zcbALWZUSMw{QSy+QCr77IJ>uqe)#%kOv{8S7jKSgi-m(aSzzd5lc2?(lF)-b!
zu-0{{Fm=5{e<&q?3J!kYcbyfXa(WWP!Y#LU26goH_3H`cgz9>erC3)@`!gE-*sFaq
zGnuWdtU6+aqniRK`XFGpA5N6nFtDl@#hVW1zz~}&R8%q$cxIb}N{XDo!@{sNd=$7&
z)b{UwztfW=nB80p!db`J0N(wncLZ#IMEUunl9FgAT(@M*%*@m(>{-FmTu*ie9i5!4
ze*a=TJ?Qq>TuKb$a^1J&F&}Gz9lXEU&Yu1(5esOhnUYEOSvc8dP(3p#XXL$T#3?o#
z{sI2T%E4iAt~K<pfLDQWT>VYP6&#dxp@iVo?(i664y>YtrsP>H-gCbXW?h!;(IW1F
zyw4aaNn+4B=R9jPZl;Q!2A|Ote-p3rOXV+@udlD?l72ALz0!Fp{*R~1ugr7%1M%be
zd(VmE9;3${LW^w#o2j6hPo!&Nt8<JHq^2$zP-K|@1G?<<=g<HAZmRkukh0aLTi6>`
zFwXsu5rQ4K(R!}>^Ha04?_dj|Aa|G_wWy(EV?+DC!HL(daxO9(zII1jyVQEVO`+NJ
zSK0$hOUv{l;L(f^#tpbQ^?rC|4p>-N$c+}i#xUtgxWLKD+0fANv%<mRI;;BQD(4-?
zjYbj-lYuO<XkH5=m<26#x<8BJ<Ku&J16#@iK2|?G90jS7o`prX+updtDuX<d&|kL0
zO@8~3YgWWiWh{C0$=F+gpUlVRly7iV1?X1Kr<e8=7=?+VGtu60QW)N{DG!7rm;-Hh
zZ3XE2$W&_fQvXN`*|g9__oefbR-NRKrX*RnwY4F#^o7o7!Yfy5Aq>kVJ_&d#Ba;jX
z(#m*61Q-`Ym%Q)a=WE|!R_;x>AaQwUXb4KKmaZ<gJ~bH82?noI7%*&RG*RgU`|iW`
zwk^2r53L3X@$pmT(OPg>Q}gp;>gpRttTkt+f*TtfMdsrpz4W4@aiI)y+TVl3shzxX
zYfit2xE=ni@$hioL(6~~C1*q%xn@~A+zU);DmBbi>dtz1Nv$%pW0(drbMpMDbczM-
zt}2;6-fPy7x2CyUks+(JC?L2$uFxGh#sY@UCvaUyZx51$YsAEj=<$l>;X;PMz`$^Q
zATvP{&S^dOl$^(`1<pCIuu#7@Ny3o2-Q=!<+J3X&Xj9Wd0S~ikj={!Eqd%2kczpbg
zVvEVHinZ#ah$fhb?w&n5I@(uYC<Q~dl`{hT+QURYdCvSSv7VQ#KHikN&ZgN?VA!r!
zYKhUGSrJ}_1*Q`$SjTGH^A1B$oY&R#S1qWZ^>Av(vE_RC?YZ`Xj=Ex}hWG`AOv^Ft
zNmpx?K4~z~D?8XUI-cI;x2JY=Jl;?o&&Qeaiip0d*v2WV#S>3u|6yicS)puhZcZNb
zIjC~m<+lL=_<|1TB#*OGRJi{0=g$!(JhyQdhvT{~Ij^~N{RjM9GT9u&CbP1#6!uQw
zZXzDmo5np7lKW?n`(+*xT)cP#CXhnz2|<um6ms9eY}2XQH!K>(pW)tusT<hgBXO!E
zbJV4}kuy?d@3^HPAam&9od-=e4QHhRN)hz7mss3Q%<pM2j#c~7xaU6f)Vf?2i17>8
zOyW_A+;I6Ovxy7MJ*t}wCzQ(P(2bLqT%*4?2)Z+8R^RQ-`A86GUp6<@IDTrrUr~P;
zBf1_fh3U`FKXfpz^+NnXnW9#yWnDp1XIEDsMCXvNU(JTYHWlLAy1MB3_(-856*-tA
zjCcH~^*rK8OXB2k=K$Q&#?B5MD{BBu@p@Kbt~HRW(+$Obnqul@@KpunXHY?eu-6=i
z^dyRJflqq@b_d5My=(GQxf_&BH$_EhATA+s&)vP+u<$Re-8Q#-SxKp`W_EV_E`;A5
z<{@p}2G;mXRnA%?(*#23KM#lU&#oPHa@miJi{00d``y1jUw7(ed1%gjc4S1hh>Nde
zgL|W>cTV%<ziI)Dtm1zp@&^fDo_syhdKfm!L6$i^Ja_f&$qA@lu&>n&H<cS&Sw_%&
zt0GE6+rspIz_X-G&RrxRVDC>ch%d;`*E`%^uH5Pp#G~NBgGQ3Eu`!nEKe^=hUJ-@T
z%e?4_<SebIAS5MyTH}7g=eo}Un}e2{n~;Hl;rC#!MZc^I6hN-W8_m+uJOP&o>8GZq
z?vIz-Ic>HwaFXJw3N5Zr*RyDre#**Xfg?jS)=hssgk+*jxD<uMX0lJ8#zStyTQqxH
zJaBAX#KIx$grAX#DIqP*=f{tSI5?XUGQu{)U3Rd06s+8b3o&VG1W=T+lI1U=J^dz~
zE?UwHW6H@9tgNiS*FkH?Z_~STfeuhoDXi)3`2JJT{P*+{|KH~OLsAO>2%Ha7F4{s6
zgbb=DAxcR8c(qJ8Oe3C)Jm9OKLr!IR%__9)%uG$m|3jF3TJV+3-?a7hg~DZb#R^No
zP+KQ_n|5YEUH;8Ln_gai-ZPKXU+`W7Rc)%#kr9PV6;=gBMJN<AioUh!av)2Yt^Pgl
zdq15iVm-GULacF><S8>={YrZl`{?h7eUwOL{*CeX`QLfMLGWlTxI3qvepTjwh{FM)
z1`6te9y@s80xd0Vp4-u`FWYQ5@5^3Vs0DRWieV?2jTC)^d&;%vu|D;n+<vtUa)NBu
zXK-)LZ9KYUi&6a<%Jl|Z%1<BMDtY%T@ktLjKSV?T!HNvBG8j<haoQVgRaTI%-;AUM
z3i9%n!}%Z`did}mBoD8n4q-fU{p4hg^lJi2zS?&78fg_3l_*m?TU**2H&DjLi(GNY
z)IEpGp{-ttiTdeBW*9=k!u)QBcOf|^R)}oLMnlEz_5S_Fv^UM>@66oZay!%0t++G9
zyLH8OrY&unOTdLd)lZH9Z}u=4Zh9zRAAUb9(1-bSP4Kje;Ah2)j!?QD!{>@JCJNG?
z7t-4-b~O$TmW(xl@-bK=wABF0E@C;kZiT(k2OCAokmv$Dc=JDS9HRo-OiWBHJnrq=
za}efKdgxB*?!EdI4-<+}w&<}a$PP9d2<6t%70;w&L5K?)%L$J&w}EU8@dpnuUXK*%
zferEr2=r!a@KQU?1uIzW)3~lb_<&FGBu>PQ&t?G+#t<^_@LUIzq;^^1jCKCa2<caj
zTKD13pD1A$9)Jc@;7g<<Io?c7>Hft}AcFBZZPG%>+dnwqgmetaMEK9tXAKPvIpH2(
zrsTV?u1@~_RsV}dUt$)m^3RQaB%$HqA5v2p)+)CG4Ld{yp(_ePumBi)eODJcquUfd
z0KR}lEzc9a?RiQMa?|8QPrN`31ejs?ZlZXQ(PCE&I3RE?4W(AIEQJb?#?KueY;}C)
z4=pt2c08Ep1PQ1=tnc*F65?_8n?+Bb{pQCfAi(xDE<pliK|z5dz!3a)zlmTmlOffD
z4TprYkkC*hUdOrZl0jkax;t!~rI!D;sOT<CI!xE85rNEs{>F{k-ZS1w*ZO7}4=7HI
zO`r`L>WoB4oKVO)L`IT=1*R(`<IuS8-&D>}nhxNd&|RCT0?)Gf^ASN9NKZhe!{>bW
zlAxd<xCU0yTMpy^lOnxoH8p33xmGaG8z2KYtz=Ct97XULP|8_Cq2kN7YylA^SuRcl
zK`SaZ+n9$&N4ZT0Slsugv0)cO%0$P-6#`Q+AsrVtF}YJ=zgqCsW9jEj#DRd#fERkv
z;B&RKy!;v&nFL@*7Bwe4u;8$V4hr&1UXM0Gs!S&2$RYFP?lgk_w0ydmrCD|ji9%F@
zO%R+SxeRfz-o1emhTD1DBq1>ogg#Yh$Ec_%v+?q<tGA#0%+q_srdfI)_zvXYkl7_b
zDTUk-fY?q~7dOCp`IB<Kg<0WS;|`P0&vm`MfNL^Z%z7CHPaCB{LLhc_dIAWNZr4}-
z%8e!p*Y!H=h@I$A8w6@Zz7!IK;SviPWOeO+|N15s!4__RcDh#sl?dE4j62!`dmY@}
z@`Xk+5EUBz$+*`yHl~M-<EqU3;Q=&Z@I07}UMY4f0F)NG<GR5mbodf8qlQYYZUa1~
z56c5Okj)-(8cw4Q(r`8{Ur28#c+Hc**0z^=-hnrU*1$*(y>qbhD<PMG+p2BFm;|b6
z1i*w_iiZW5x{{>o*^t`foJ_zv=N1;Mp>+8g6Z5>xny#m(2g&3;A*%skv>x`b$zTo@
zqybzcY?|?Kc4ni+0k90y^Ye`<GSN>ZC0{^}tCXn{0BL+4pmo(p=n7`6jDxMkzA_u*
z4+J!q??>~zMi2|Ba27rA>nPY2eUQ_mz#^MroudRD*uH)HW;R@qEIs=jvS2REotm=~
z0#9seM--^?&{caAH7Cc!*RO|!g}nz;15a((8bSw97^1X>lZfQCpq_Ny!cUcrDfp^r
z9p3q`-Y^XWCCo$U`GFAg0z`ji6P0C3@flhb_UY*^u%jW_F)E{?p+R84+>x4y2ok_5
zu@D#)WPc%_KYP{Gh|;)iUqy;*$e1vFjrrl%XV(Y`(=|%iP{46O+-T_40jT%8>0oi?
z2P8EgNV!k9$*Wl|($duQ0X#jR8BWvhNhGP*@7$?1;DUk`7b5xoMl;RwuXI8vg1~uW
zG`5d|3Bw;k=f@x?fV9J-(Tadd;BgSOFiQ!bEKu&yT)K2gHTyew1L-&ss>0#ph-OTr
zS_+`xH3F1)du2EjN!Y;gXbzZzH%~tI6if^SW&8|4eoXy5%*=$f1(X($yswOvg}xpw
zwpy#&vqm84mwohH+<v1#en8RF42JMjPOii(4XR(uPQ&*R;6Q^vf41%90W(5e$m(c`
z4Qx-i48TMO?2fQlqzL+Yd)K$N5NZekdg-LXKfiL=oRg4>KP<$+#NyEVaXyenw969%
zb7?4lRyo2AAm*oyit*PDC=f>smCgF*CNkX=6;AhpZg_N59|pxjjgLT?aK(n;pDMR|
zrNU<c&|9o05M{B81)=9msZrqpdrd13DIOG5y88NC5zQ4!v*I*v4G=rj@^mqDTsJPj
zj=l>qMyUcIYUI3odwU(hKRy2oZWODIk+E|ZI(iF(eiTBz<I*>8<bzO<h5zXVpt-fR
z6+?HvEsRCGG7_RVjJa>vT^)6T8`6GENgD8^{aSgZu!lwU0X;SW^<2NIP9yA}_qZhC
zPEN1jvQRAg0Qqt{u1_g&zd%h)OsK9V0^&ag1*|Lhc<HZv!SLA+V7*~4U6G{g0C<`#
zTY%YBax^7ilx}`WNvi$oj31HQS3bQcr^7;|Fq8<T?}>ka`D!pn<{cJ3>LMN<l5~Yn
zo~?9SoMN6kHv}k0kjUX3d7%m-5|U<20wK$O=h>MVmgt+B7L}QhN7^p;zQ?9<{bU^L
z^r2hy?6}~*-AkTD1<wqP611{$5Zi@h2;}G1p-}9F>JwZF_`vLWHG6xQ=X|nD5kP)#
z1~Lw;sj)H}!<>`uuV25SV9qVm_qjDFiUBq3Eb#A!e;I#HAW)}iRq#N;;IYh)g*dz9
z2<=<&d;;*sYT;L4BeZ0TzmZJxS5Q#!f$0^(!Z8Spf3O&*2tM*j5L>lTy0e|C^Y&65
zRBpgg0^JfE9Q+2%72G^_JZxmR4I;<uk4`s&Jk$=&!Cisloo*!2F@X30seS0@&yN9!
z+t}T0s;__N?~e!6#A7IN92cUDNx6;iAO}E#K$iM<Uw9D<k5qS=n}NZb-)7+_$n#*T
zG2ER1!+}NTSuF{eZ;X%t=Huls<~KMz{0T&m(*YZ2MtQ9-!<TSyUV!Dn2|j0gm81SW
zBUuY_hvzl!!Z1T85!^kcfNjg~e1NCkhlUa&u0_~+8(|{1S4Sf}JyGB~1;Kv30Ci!I
zi!E~YPmOi<g^GhizX?yh#9Ri5D9Gi)?>o|Es$~Bd9i@PL2y`NFJAvg?(|QN_@@Mu7
zOu<};F+u&R3tx*2aRx`rZP0S%aBt1x5~lny-FL7eWALCzMn64W2k0eB^XkgV(nOUY
zl3N4`ZTif+zpJZ-L$nmV>_aGsw6u%hiorE}00#`YJ}`1zz&HrlF5QQfM8YnxItUAO
zgO4u~<hEhuDXkL|u>dk6F$(x$_UiqF`GDh{riu_qSdh>Lj2Oa6+`M^n@VJWspdtH}
zA*;^C9bjQl$;Cg<Y~mpMnTON~wf$!>2tZ4O_yF3>%Gx>s!j{VFo%yM$TCYolFa^a3
zvWH(eTG5DcAZ!~XK%p@3WOH-V(#oprxBu*p?dk|I5T3B-YumyQSa7-yo2Jqz9*i(<
zAO5$rw<kg&EFH!5m;9W&Zlqs5QDW{pc0+Z9=j7F-9<4|Be}ip_wP4?lJ^8<?wdyu{
z5e&NU8*vidwav}qqbX9!DXNwK>X-l96W6S<e-9U?h93c&>oa!#fAKkOf}UPpUcNbx
znBGX~tY|1HJ%;QVDv->j5G3+g2sp0au(!7lXW!{3Ig&KILP=?MFplnJ2iA{R!C#3Q
zN!5snpQ))mh0iT^$L0R#bDQhywOw78-_?0SLlV}zZwXS@7*!#qX0y|vx%uxJ{&y;`
zzs2PLloDcmhs23jzwUGx*`yy0LTLc*pDFF{;PZ5ouv_wmRO6ikc9{p0t-d*r&5hxP
z&q895`A=mqcip-f9^UoR%*XZP;KV8KB)yXDJ!?VJu~JS1ztku;D>JG9My{{WSPm?y
zQ&CP>?BS1o9V9bEpez`OMGY0lLRSnFvft+SA-R;?LyuqjOGWsDa|n)!dCeai7bmBr
zL<9-MJZv5VK*s=QIzGV$uKw07!xs*T0$etq`}MUATTlDom0)koz#Q%UaSF+^RCpNJ
z>)8Nu$)tyO&BqWTl*4J$K;&qJ8#p_5)56!IJO}{^1mVlxq)R$(JH(GZ;ORlwLAaGy
zraaLHgEgmOVE>TfFM!WQU`NeT%QpbcVCI1iR=vpN0c1ExO(r1l1<A03Xb5Vd2HFQN
z4Y#lsq!Pd@LPAW&Yp!`9`d3wAJ$sJWz-DFNip#pT4#sO?x3uzgoo2T?z19)1I5wta
zjj<Rrxkaq^GyZ|uWOWRLPi_bFSbJc1oM;>{5!_Hzp+<^cKFZauQY$dH1fGzoe;4pl
zBgl{;Ee`>=g9%(%B+qN|ZjmDvAkI+0Nd|?pYMetjNiahUJ_j@<Ad0jC0wdN?*v5d*
zz4NziVvLrTLtbk}a&b_Fqnt6au$XK9Ok3ZyN!Fe3B5U-+0rY%jp{4K<VUUdg_SaWq
z?c5e(y)%P@j&>U&fpKj&y6eK!_lk{|(x!{DFBx6icm2UKKpRVc`?fdbO8V8GUz)`O
zQjFJ=qu2=<N?3Kf5_VRkJ5bH)V}d5<`i{!AgkqcJEcR|3e|M#Pb^fQb?)gOOoPdSS
zx!f;8PFz8vr+kprCqojP97rW#>q9N<tY%JuhlK_tl$q^F&~gd|4c*}!7l7=32&M)O
zG65oXM9eHu$&f6fAd@4yetq)?F1uP_bf*!hARw%f1~?<Etk35X>x)VrEwT~}3<PGD
z$xV%#Hr7Yv#c09Hd{axW<g~H)%H9z2e{I7WB)`|v&eymRlj*o+XCdNV!#<Ic*sv;8
zyHPna%-(#ACrh;-yVvyQjA7Q~l~)nIBI)Tuw*l&MVBpYV9DQ?Lwvw>Z!PM`IWT}_e
zPdZesaI{;t>gEsdT4Gv2j{x2?MLO!o*~#Qtn1B&aG$?WyZFD@6Sv`A9iZt~NEi4FX
z{}nHc{pem!#K;+S=C7o2sck7R416waUYqvVP+RTIezol!E$7X9PP);-OMFwA&mcKD
zIHo#y`Sz*IF*KFm+nMhTW8xWW_mP`OX4Z(}ig#Qv?aQ^)={v8&au|h2Y4UUJb;?Q2
z6F&VP23+S}l62e0pOofC4zUH;vEvymRL`yqxf8uTQ;K{_hF}dysRadk{I3%X3=AaE
zg=~<>6O!tgnHk5aH`r`{Zr{1%^Xr!q2%gsW_ONv!$AS#)Dk-VsI5|RygQY;pe&zc0
z-4YszA<)xlH_!EGUOiJpJMdsGPFQRvoiZ@n?cMTCn)O$Ld(1^V=ja1-qMI^pN~|jz
zunc+Tf@ARcPL_!lb<w-;vX5+@c5^)#VL!H~G)t4)W1yIJ&DTl1+TkJ4kLB<dz5CX!
zxm7{}n<%Y80G3c_cSt`O?eafLOe}{FAd~$D-~%}P^_9YIYxEdDuy{+r{C0H>)=cI7
zk29qjy`aC3D9y>y%=w1nHtqI=_X0=0=|W#+<?dZkkHVNN`)O67dRJ?zzQmFcY1R?Z
zzBu`{cdmrrefKlbrz@WIlWIK%$2Ru~^WQ@5g;+FX*5OBx0@QwHRCGK$*?SI&Gt{^p
z(Y!%O8Dd`zwJFpX)D~4c*I`W?Oz!pq-2<t)$^v;)AQkc?i09xqzz2i8>Nt4|K+~M2
zF3?6bs5)tu%RQE49yCqsNU`nZ-prlkIJuI#<w@STyk)?L|Jt6AcTfGzZ@IB|8#eFV
z$gua(HR8)dC60xc04aNy(;h)F6)GoEHgf{GqyYf+$!J^x0tTVuHX7>VsOV@4ZljLU
z-y8Q#2R@gNSG&1D>Y-Qm+Ss^xt6Q`i{_CV{zzVmu^|V6w0+-a};*#2fexI@Owt4c5
zolxpoaqO1%)*B22wP8l%8dG>*D|;Cy90-^4!edegVEEEx+WeR94gZ25lSj9yT`EN;
z&yG+oXD4`7*9Bk1#RbV^wz9+#**>C1I+&jt&NxTlqWFg!<17UQ1ZIBEC<N1e91Ahm
zjko@h8%`2PmI^h<jkTG*XZ;x-qFS+zUz*jmmk-ll@Sq6@IS)wtCUv^2XR(JI#xTSO
z$<Lpk2&j29{3LhWL4cdmh<nX1j?Yradn+*KJl}%}d}muER)v8a8Q+|(-^wQ4{iNwu
zSR_zYJPfq7z)30hd~c!3$;<nckZ=oXS3o+ZAO$;*Z93_UAc2kSF7{Kis;M2T-ATss
z+3NS83Iur^pbRg5+NoH33%VWJrtjqy6RRP<408L||3@COXHTr<sbmg*lvoR955m8G
zn9Tj~0yeg)?IpNA>mE2wCHS#~iuHgH@lF5T=erqT!v(+h^OF)AyyZ{|7yM5)m=quH
zxwY7>YAXSU+T>Nv)u#H3n_$9_rlFDFTh3*LF(Pi|zg}0({1u%1FOQ2lJX;-ia>d&_
ztKAq}F%OZM3-qEzGrt`7qBm!fj4n?P4`-4jP|6Gp&&b#%QCHH)kaVMBl^nPGjxPKa
zc7^xBry~&u2X~JwGeQZUiw`Edn{Tsn#~pOI&^J`>ogBD6xyE$U>&nB6H@)uMl1Tga
z)0G4t+Hcp8zg>CgbE`MZ7WGib7t}1g=3}+(?U_lBuEJ~78o_!MLp)UkFF$gU;xp1w
zb?HlGGQZDGq{#MW|50D!B;kGA{Pv}=D<vQO{Tl`cN!Z!h0m+sWpoGKD<P(t<``N`6
z)sB#xWk2YNuzeiF-v9Zbku}aAk(UpCrV7%fJ2$j^65SX|hk9^#clVC(!-LKFjlI3a
z#2}GdoSgY;hrHwgF!PF7N~eTbtNgBS!W9||v<J8efQ%H2&7Q-^BbpZe_izazd9R&m
zva;(&aEP2{D%pLp%(Cj*+FW%S6U9y){hGTV*Mnqe8mh=tAfyo`AfzvSP|m@#0wo11
zAC49p6Cl_w!0ib33x!R%?NeBS$N3T;ahoNZ9uhN~QYF!eh;$2_5r@csY#x|t^h3&O
zC|3Xvxk^sn27Ep1Q3T8LhrnH1IyfLrhAX2b-31owQ+1#TLFA$^Twn<R+Xyx-rgcrA
z9zkMp88n1#;jB{f@>h(zW9hiLL%9sw0J?Yti6yGgsPo}7q7Rp;)O9@=WW9cZ1Q80J
z11L{Sh70DkX59fvk|%l(Izf~rKz2l8-yXcfLIJMzS2L%j#i&y)1dg_HFPaJNGZCTk
z1u@3uJFzUjSW$kv7el)7ajsBDw=SBp*$CVU`(qVFM<x5sv0QC-*05QeidmtqzdWhl
z$)xQwV?78LmIksZAaTa%c(nW<_8CC}J&rf9ApxeNr9IEf%WJ<j(Fq_k2qA9)vJ0Jr
zHrq?jfD!z%#*at{AVEk2=>r0?1Az8b$SDL6^35@u?tIJXhrl<2u<m52(uo@dM`Yz#
zfVg&*f}$M~tjNsqm>KlQcV-G6GhL{m5gif$UFUx0>x;v#1q6_ek?|u^=|RN~iKMD#
ziQ3=2O?010>EL2eXHt97m16HEQJz+!+MQBq__5DW{o-_fkla|~H$ePR;bn3Vs!*VN
zA#mLrFTo?@@&Xuj9Z>T*0dv51DfuitAx*c0=LiizVVSxH$g2D4fw88R)^LRbyGDt5
zvcuYhW~F1WVS9KFgf)~(mf8a#2oSCrwp<Zt9BLhbys@;mZ)$F47~B<X9EbY}%0>js
zh0TEIdN>%2GcrP=qCRTprowSLVgw_AVj`JW!TD>bE;lYIi_m9ROIw%cC)M96n6ted
zs-nZT%t4(2+|9WKF`8PTZk!t&99Kw4RNLii*VorwgMh0>AwJt_SF6nWJwT8k1+uiU
z!9+wFD5Pkpt-YV2n%f1CIdJheA+ZDC7&9Pcszy7v`j82*mCF4YKT3Y<hJq7WD?xt#
zjTt|7>)9s!>nv&j?qHihg#w_w$#-?5j>tDEneza8A<6Ioz4u@LlHe%uFf6E^Bt%lc
z>&Sk=`IUtC`cKVr+mDa~V<2J<RJ&yf6#tu`xqV(;kSS5pF53d<$nsJC$rCITY@%j(
zY$phGo-arkGCTkf?O|dM!e>Fowhts4&<KW5k~sJuL|Yhf*e=N<3DC&*%;d?6Mq#rd
z4pfsr*&~?B0g=CGdpK2&hE2P&1>iA=dGnpTlPuf9M1Rjy?6ytX<_4c?YJsrqBVs>T
zl8BE%L5l!Ff(t@ue~>X;sD&#Y{%%Tw0Ew^xpCtBN0pSF!g7wZu8*{FFh7u#}<DiNP
z!3Pf>AX@W<g{Cqac-q^}AR@ShU9S(P1F9PN98G=%;4tO%qefL8EJP!!A<YW=08mi?
zwc<Ru4;6P8d=!B^k)#C*dxwAuuy3KW<1MqHJPdHQu*w$@)(TSFU+Ie20Z$%*6gl||
z{a+tXO_?q~P7rhb$U7|Lx2@7%(Lzn(ug7&zU@|Ia5CH~11BIhfy25*4tUiOmP0!7p
zkM#a^vgUDC-`?&A^o0$uoWS^ie7e1V5WqELqa#Qk$d(cTFoZjfC}ja~cw%5cs~bCd
z7bplKv1vFJ+ohjxV0mU%R?giAZYd4H$AMq5|CaOU84+SOZ4vAUd=hofROQ=DS8VhS
zaFq#ze^>|g3=JCrh)1MUpquH46Fn0_7yJuecw)-R_io-~Ya6fluUde*%^Qa;xVZFb
z9(cERPibCL|73K1a;oK{B2ZqV6;V5Ww!Xl*6Ua)H@!9Z|oZPvwyR<99?S(ZA*10>k
zlZ})w7fB|}Is}iQelqHoZaK-xy|fK7cFF^f0&`fPkD*TY#;sd#;XEUrvVhY<P)ewS
zpfFv_%!Missahd>HR;bF2Ka$F<&F)w3`)3f3jm=u0NxLx^Jz5t^nMo|#KRiK?WLQQ
zZK_PRM@vI|u)%*W+rkpwB@ZxMI+hbArd*+sk0*%E5y}ziZxN^ppnb%-y*Py0D<Er#
zyF~Ygnm|VK18?~F0hzpz8ib0@9Xw{@4D7D(Q!U~AVYd$|vw=O!K}jyMDdwp|6<b^T
zOhuJ0iW{CFqO_i>#Q>1H85CU25VmNB%63<V>jB$OSIfWE9?lwSAbIg-17Q-zcZTGv
zL({tvW6>p|gVW2`KDH$syPU_P@~+U@uvN|2&{VG+h<@=~_H*70MP9KBQFgV@x7bH~
z;-MK^uXN;!T}$2!{kGWX9240;H+YI;wE30F%WIOhJp->_1MfvgbIkhpvVQTV3o0^S
zYJ&v3t+?BL3y8_rN9JB`XPwiGl*)}Q<afwi_I7ti4GC?LQPlkL#6&$?`Le;^H$X!x
zH0+DBQ^ED(2gjFrNA$6c5@8Cz|19etV%L&WTC39a4i}rqf#HfFb1^mnVY!Nw{9O~A
z{N=`9sbOyeI@~MRAyPN?26=mnzhTC{UV=QT?AurIe?dZfLnNGG^ygfrg$dtx(aEf=
zy0L>$HLiW;0m?t`EVQ2be!y~LST~Q6<TLncbl?@Vuj@;~EMo43Z~6M*{M$#&T+80M
zX{(<eH*5$$Hi)pvz?&L;go);uV}GY#XTgPz!>Z&pyy~9J&Clb)LQ}KWG;_9d)3}_d
zVqScphUY^ZFYgb|4N?zrB5R|ND$IKAjHhuKJf9+Elc+R1CsNtP)?&j*S2D%pB7Y==
zEk;^3c_#FEhGB+^zHBhKVY|awjvnMTcT{%%-19(z%Ty(9aaKR-4jVNK*>del{^Bsk
zo!E&iiZsKq2Ft)PYQHdMo0QUXd2T(Tl};-gI!_-VOE42?HmbN5)9R?|>Z@Sy?4O?M
zb8LDZTh*NQw#!*`=thpcsmG72IcwzYJz*4_xgMI-YZ2~K%UGv;<rVjT@C3RIf3V@D
zvNGAE!xyabk1mWYYL~irWO$c^?a7IYdFH^rjOqra&;DB(njpFds-c_XDe`?a_mWp;
zo(dh)d6T$5$};?IbFZ?({n6?|wpEeTZQ&W?T{n@pO85WV`>?nWfN^6rmnTbWTQ>#I
z2Rql1kf|GM|KKo0ss6%X(uZH!Gmq5X^X)bppm_FokFV%R={sQ6Xoec%2HFHXQNl=I
zYm9fSmcFgyKxx@LUV&qW>w@+lXL%l1w>9Z1ovMND<griwCr+ca*wk$)^mbxf#!y(k
z#oZrNwN>UhI4X6vLWAGQ$IF`jD87)ewwyjuWzuEKdHJ%xP~ctJ!?V^)ckVH7DCSyI
zes%qLf_g6DA4A#XJGWBp-=Sss_NBy>atV&89kclTr3*HrKiYf^f9`Ls+zGU*{2O$F
zFh|KtRhXs5Lf9xPW8c`lcSzf7yGA~lR-aR)+IbYmBsI3lMu~_02S+%4c$PqY_`BY0
z!t2O8K`!quoBTM;ciAPAws-E;uT7cgE~1tXDxH5f>?DG@s1llfcB()+`2jb-q$|eG
zOHrq)E&2Qn<`5#GJ4e6O$yLXjgUep~q+Y(K9WC3ZZLB8hahslUW2rDI<&>ANBnj6$
zv95{n-Q#x$7-OV6!bjDov9z_3_Q`YT^iqq)X!+-(x|jwdL%LxvF_-f5-(+n|*M9KN
zOP2m}C~6;DDbbeQ7OIdEVkq0A$X=Xy{Hc3sz?7={?!|aek@lqI2=W}nv6h&U@JCyR
zicYTUKhL2uOe4kTmr}~P=UTdm;qHuGerUvHp-y|#>b@qWU?|g-i}4OgnYnMA`d;uw
z<58BjE-W(jjp6Q!FAPQn|0xk!=d<Apxg8^vzEWF7r-TZTzJ%;*QHI#0ynx5!=exWT
z((R&}c20h-RQWQxoPAt5q4+49{aAjI;7-j8iikc`Z)@o~124N#5O>Ct9a$=Q2RprP
z8VXK~XU0Ez<OKXJbWtSX=)$kO^H1(bd@OPQGZgXr)S1owUL>w@h^HInX*MC%(Qd8V
zDKw_r*QJ)>4lat+i+U`k*;@U<5MqAwIr^K>sf8#pfd##6)1>r)E|#&z`9cGA?n<f~
zC%Mx_2RJq#uji!;`s?skwM<s*<-I-<NU7Sm{fGXv$)TGh#q0Aqcpil1j;8ZOa#`3;
z6}w2zkoxq~>pcg@>8fVgmL&y-+ui}BuZLgh22^`iYknmgE~I349-Z>K^t3xhdij%q
z#9uqlxg`-$eK}TE4W=&`%9812`sm*^H=N#VbR}PUHI2ToL9sg~*@8NqUN~@krIhv#
z|7dfSq{P@Vf3v~H_Ex|3>X7He^*cv+Y+q;Q4$_VTugiV%j*u7gwxZvCSzc`}n}WK<
z_967WD%$?CvdOP+H~|9NN&QJAP8M62xMD3r6D1Ab-HTeN;pCT6o%o(+{yoG)*5GHM
z%(qwSdyi$>Z{e6`l%fW=&{7?e3w?~KYS$uM;zAhG6-<V|ajnj<_0Fa`noo7`&RVdJ
z#u(9JGE4q>GdCL4epBi~(ZYL1+6|<lZP4%jT3}*k;qjqQUs*EfQu5TJ!j4sRTSi*`
z35C?esjSsPJM~w&7Bab8j4vClL^ett9othPa{N=3`Hn6}6>j_EX6_rkMECdnP{A%-
z%GK8_y)O3ay|CFSLsUUnl{LYEO{NdC@lf?5IT;zh2z%bkCT8~1{H@F$mJzo%rh{yj
zW_t>6#ZMaYXM9A3gTrnLI6G|9*J^oJRpCzzdpzq6RU=DDJ@Z4~wd?`yvW%U>__)rG
zOvSu`lcSfuUt-&WhZMHWSD%WxP#IDcooTy#3C81fab0;J(>;|@7g+nnS#xzq$+oPX
zfb4HkAg)ccF<3WI@*JJq(0*Zhnn=9YEi27b`5SSd*HxQDPpl7x4NsP=a{BK!zq7(@
zQ?jGqI<(rdQCAUovaL3}z=v+)yjI9GD=+XSDf-))d!sg|YPmV(?W;OM84FYbh8>dL
z3bH1CuF5mdHrJVycslo|wu=1^5(HUOhi6raF><T6@vv1-M;pG-7JCSW&{#A~sH?aU
z#S!dwjt9A5Pq^vh#<`EYOJR)S50@$VhV~X+_uz@!8gCGhmctq>=r{Rk{d4tR-Yu>I
zxA~WED^zan3$qJlNz*nZ72LU8Tbp8Ny#D+7N3z?@({J7|-;7u)qYW$-I!Rj@z19^x
z5jJ!jMa=UY>y|#@P{@T(O_heKj^)P61I0fds9#rQ)47c$U!NFBqZlJW72{+tac(k4
zZsExM`*3Rei=!_b6Jt7>rUkgjDhineYmRcoZTFmsZ<XwLt@6u;YvE?tI|nITE#z}7
zU*`@W%4~DAJN#5C>=9~6@-#rTTvur9y-&m2z>D)UA12c|r(BLL{HIn9Y$-L|WbpUg
zD5ITBPk#lxYcQ@7PnLE2I7uB?T!g>jqH4Xn&T!YwkPJWTZP~S0&!%)Nl}pTJ&YU>c
zJQ&Q*7>brEzF^sx>_*t%I%#3L_9G}{{?~=cVpD#KoaQbxOGMCzi9IbMx<}8Hm1Ukj
zt!-^hPttcX*!MrKNP2YVdTQ!jrsXTvFzgD(heP8nh@Sur)3k`X4wmt_6-U_lV(w-b
z&bWvG&t)heYz3&)v#$p{dG|y=XY2TvVqM)SOaxW6;o2$RtFLb-d_5pG6WG1bkX!fI
zkl|6zqnBHax(Q99ogbqYWX##M;+5Z@>5qS=X|be|j7}%~8H-b2u8vABeY$-r$6slQ
zaS6+l{?}2BsMUmg%&K6{0$<^6S(%i+JVg@Cu^j^~?bg;a{6)<`!@gDW&ctD6_Su#5
z%Mr%;Yg<<zKO<Z-S4>--Bo}88j=CgXTAYLp62S@APdVfh<JD!~X}E6lSkC=1*9>Hp
z8;-dCGf&1;@~Zfc(^Ip!8m6-{^%4mrTTb7z*B8r&&P%f#V>OAi&6}6{-`xbj>fyx=
z6Xs>F-_`S>mclP-zcD$LFenjNTt;5`yB+jszqN@op3I7h<z;PEvE#G<EvdXpc|+vq
z>vMe{NqAdMx>l~BC!YRws}k3a@I9c}?(!aC5Iua)hE=L>kX=~DXYKap7^ZMr(*GQG
z13BykRa2EJRljgKK~a@Qi){iLeVZ?hk-y;N037k3cjiz}xTH~Y6KiHiZIx%;XZZL1
zcOsSkp8#H?9EP%Xgi@9gp-EA)qyU~3#eYz~$N7a0>GzFPB*ZriTJL(sglb55-~0>M
z1zk~A1{DK7(qSnqTs3qQ1no!Yu`<`A)sn^uhX-sr)g2(8^R>;Y)71qc@feCi=7qG!
zvVfcd5)z+O4<@6hPN4JH=(>T?7iQ*!C8f{<5hJ6hwM@sNmIR_1(c3&c;m~b3wYaF-
z`;Dl@<Sv)h%wrU&DLl1v*#}O$V+5O_2u}ybALNy?`MWVRp{)&|ec%U`Cg=vH0OYDp
zolQ(kbOOpCub^P&`=B<n0v@oyF90QcEG|B~yxa=K`NsA(i-L|^0tnOqmI_F?0~&mP
zX#0r({LY8L%iF?6``DIYG-dDRy_;B}oXJU#oXuVqCFj{#CyuX+IqvhYFIzUe1~ByO
z5<nez<ad2CRdczZfOT=_^MFPlL^TTN%#y7D$bpciPel6$5TwifXQHRjm?;gaDu6$P
zPPY3%{)I?0?9pQqfLs77hcFGGp4+VMz6Yf-^!7Xi>DfMjkQhi+4<c6V+W!795JilQ
zkFS-jK?gL<5F9RkO+g;;!8pz>9B#pc!;fg4jtd8?C6h?!5XMlAhp0fzWo6};h$Olg
zj*$vC^1bha+`&E|F2dP$x}dBl10jj9jyGU_4fQ4b?48w`y?Pfn?zaNk+Rz>)jRC+C
zN$B!K6ZKfB6`~OYQ4ZjU&}g#>d@Yx5Eec54-5WpLZym#TqM$jL!V@%b1<<Punp4o1
zfJluKxOq0Ma$B86L~#qiU~8cpRKX}jEeTjbq1_)9+j5sP%9rpJSvobb9UamjG<{y>
zd=EtS&Nnz07XeBEc?Dhf?%bRKDl0pCV{@~>6`mVDp~x~k83%~1#vy{tJf42~kS_LO
zMn(a21p*QmYI?NV`dK!076_dOiHsvOCjjLZI;?2};HH<3LR9&G26Ht=5d99&(tSlQ
z6}6q_iQ%ri94;|zzm9;HAcO&&nE{wTF~95M_v%K=?U(^p1nG5Lj#fp1)0R=KP;(l*
z2H36@K$s{lE-qjPo4dP%z?};2R#;4mK(mNHC<46+XsY#(fi<j$7mYf<=y8yuY?2$`
z7wG91a%*mCx<*cps4@|T3<cdKNDnu{pMy~8S-Jup=r8H)JwY(oo36+JJ;R%LQpX6u
zJ5k9GHEO2eC@ef8XapsP(+iNcU`@d@%$wlwP|;&9G~~cxK(31C33m~sk56=UZ@?Zy
zBz`l9a0bEIVgwyP6;zM(+5o$zo*fRzjP=Q(9ip@Y;Sft$49Fb-N)m%6D_E6Oz%j#J
zTuLIr_7F`XY^58FjIGu*%|SFl0Rb|xf25?P&m%nypeJbB><77!(Cf7%%`$7GLmI?9
zm#Kvu<(d)1^2`pPa)uv(j7NbY2&8F%pb)i)Mjb*^HY>rNSn?elu#!0twKhO67hFNH
z`8ZA_VG1CFR&auVjUr-iL`ek2yXS%45s2HN#aS0RPv9CNMcf3yfibVU0+{szKugVP
zS2Ad({!w2~CTP!sAkzXdU7PD)Pky??L<>ADOaw~=cB9rEa99L71ezVu>)tgRS`XX+
zH%EbujosVV$GXQSc-0w5*UjxSKypy)+kJBSuV3Tehbtfjxv_JVi0a!<!gy=ot`OB8
zz;^h+2*J(?&+G;@B*?~_;O<~Nm6Fo`;dN<g#~HdUSA{s!N(TP00*?WwkqXNNO<~Bk
z1wk2WYdwHwhywBD%a`zWSiu$ziz=~Kub4nAa4sH%NJ?q)Z$NGP3@Entowd=DATS!}
zwhGM1P}9(`+4-#uk~?V8nuQgrJUcxKZ|jbEaTynP7DN{aC=L2@j0MqA(3kpC@^f|X
zG&VG#7M$cg&Q5rNHFFvvQrV45Tv>}o;vbIqHKvUrMdf}4F$r1O1@JsZpm8IhjcSv~
z9o+h*D2HJ=-$slAv=^fmy6l?)t|R5QrUe6aJ=oN221APi;p{a^O1xSaH~@{UZF@q{
zLvwyA#$iGa<nZAco$xVi-Sp3^lQlH8At;z=kW@R=*VjkJ`QkhX1CbtB+qH?4oDI{v
z<i{r`7&eBur!q5}(YZET3o<A`Ft-Ab9v)<K1F?MN$`w>?2%QwlWU^Y=<Me<5)EJ$1
z9f)`aj0h784~6u>BA!mK{sXZiwI_k-@h51@j{$TQFh`h(a0jtXDna`>SS>_A4mvt$
zMreoW2@k+id<+ak06khRu4^|2U*J<yQ+t*r{DR&D=)-UHxq2HsCr}Q^kO7c9w}3tz
z;W&V!h0fdGIh??#4JmvBl`#)60S2&;px5q&ts*oSru7E*(j`3*B^H?uq61qGVm>pg
zUf$n3LhxIkAHiab4f=A=h+v)Tkj(&6LpUh1U&BubZbh|)3vc6hJSsFFE5(SUIkst&
zT`?a_k)Z%GsU3{tA}($r?e&A5;bbY2_OqIkT@85S12Z!gxHZrM770DBq0klf{IneO
zv=^FUsN{g0B8A})-)0H$@C*PIT$!kf23;L!rr&Dkb`$dIk`*jWO?@(+1PLJ03H)E$
zyV7u~_kX)Prz9y(NF2k-oFPM;B2q+|3K=qlWJeSsGDaw6DDzavP}qfNkjhLlPf6$`
z97?8;DdMiL|9x?v`|iHK=S9zX3_p8+htIG+YpsnGdlr@haXS;@CGQCDw)M*|6f^5i
z`ul<=F6Fux?&F+zNL6iZFtWsB#FXFi=iTMm1-mid!Hgp!;$ZLdtHnK-Nz~{M>9YzR
zR}M+nE%otya4gxrd;9k7gxg>2F=d_i9NgQ>;m8X~;9ad7X5$6GddnjJ3)o%_^9r1@
z*)13l;e%}$aaF8=k`rbwqFEb`rAi+Y1w39#qACDbm5=-y+0`r+U0v~rD4(JXsNNBE
z2KxF@_rK}h*Nio1T9qvMp`XY0c|!Kb?xlTVVh<IU-uYNa=YN`$VKO#0#!0KjFvbMP
zG}xHcNZe4HuzMWCAHYy<6B85hfA}%kSEf6)*Wo>*x3_m?W#viaJ5&$wmlf~poY0Jw
zDXUWw6r7hS2I0U8)NAm$z?&TNnba|Q|4-lgV&o^pDZIl6c(ZZi2zyArcOXUSd&aad
zUyA8V8&0kH5>cY%95`znNYRpOYm%63U_%CKz~BpfYJOn!*8P>&K#!#}G@RTu41)0=
zJUm;=L1aiB<pQh@9t?}EE&I2w%j*bV7AQ1Wne|9C6Y^>GD+h-5vg?qtc0+WKrlPdt
zaT<?-3{{r1_+mdXg%S`JCTwgZ8q93L^tg_)0oTZLG`FbL{uyB&dKMi&dsc{ockx{D
zu`$hHQ?5~{dPaqfj5FdC5$kAe7@hC)%Ochprq4M2k(u!ML<|S<7P?X1VCq>3YDlT?
z(*E7A`$0&(<5XJrHj<yz87RCmFax<9-iPx54NC#Uqzw^On8!%>x!UkXyV7^#ZIC%u
zb8|Bp=6OctU_jx5vE7x`Uzc%XW3yT?E}Vi`xec=*s2n6*6U*;1o0nbTF0mk&fZ?^f
zKNg$?BV8!@Bzy$~1@*FyaW`z6h?lf{fLUSO=sxFx^+*@|{QOliWiX2HGB5Fp#oV*~
zh4UGrBFLGZo$O1+)UN<lP=ocZ%c1fZ>|(}cec^(RuC8w0a~jQMW!aO0mv&t}W2d4b
z7c?u7n-ZeEcxL1&wnoon&|r!O8jD*Xv@U!c@;Vq8{aXKVQ&`hoe-=e#N15NM_e#u)
zBe*m0IeyAG+c9#<=SSO-IL#W=R*ACbwxN)=8fm|e;uUopq2qwz^7O|O`%Y1;otlr2
zB8}Gm+S3&=WAj1Co^apz$gBy!LI$A64=e^@Y7>V^c4Sf#LwUqbRq<a?WN<=13i=eq
zHNb5z!pQ@~+huq+5b`>PmTaOcphJ_5LA~ef=Jt%S;uYaNuXCNPv5`q@vpZSRbC>Zf
zl{#b^k%pH+ehs6)WISmarvky_j$&*+u4oF*Z6p*OXcJrwV=!92pb=4uQRHv=`<0ab
zk!i`s0yA>$i$JP<;ykEMBxGab<ETzWLMjnpvti&tIA6$>cs-|KfCa8N9UbhU>X0NC
zaT&S`&XC!44PsP81ha+TFE{MR8%R(jzMvPH;XVT)$X?J9*Ed%2xaOTrh>Sd4+=T{2
zC9A{4A_+_vZ5J0AY!lcn?KpLcU5Qaq);DLav0J=#WxB;BA2s?vLODw<0uO`$+Z|+v
z;9V3O%f`XMArcY*eHliD5RA4KvhGdbO+akX2GJ951B`NL2*VXS`Cztzr~qyPypI0v
z+8<8DyTtfH<irC;$=Bb1BV?-H-a9C<ksA~DIrHI*0Yf{)#Ke$-*8AVSeLS!JO)`<Y
zV(0QKO6t+W=w~nZ`uGqkzLkZd%EQj#-XhSrFkR&n6uhS7Jx4i7L)o_rbxO^2?5P@>
z=`&H~Uq4uI0aXo&@(ea0Vbr!zGzz%<=b&Rr%ac_0D&g_-^Ft{jE?JWd(GikwIXL#9
z*8yq3*%MGw;`RsiJK#%-_g0i@m@bYWV5Ry@Z?dxJZv{gfDfFHQ1EHN`??6a*S@=$T
z#_+q<9UU`y1&a#{CnwAh<|lhf@rh<2iox*aMoEbha^6`elnfr7lx}ew4x5?tMX|%B
z<i(nNEPgU1oV3*<3F$PNm$KG4gWgFvghR!c^F8yy1AP!SqPC8vCCR%A;lkX*aLori
z*_!sOIvYa2VB&=y&6_9#aEis^N?q$yT4JN3R6qzuv2wb*kZO=;UR-_#OQ8;RQH$bC
z81=?Ij~~Qn0>K)|e!tN16!Z3e`kk7(U)xkYV)G5Y&b1XdgJ+o5F(O{|e)G?JIyZ!G
zMn^{vb-nD}OFwnbhAFl_QTOIj22B*DhazAcbcxv9&2k^}Mes2bO}L9Nbi=D(i<3ep
zh_J^R9Dc%6Xl-pZui~l6*a-%$<(0(^&^Xg=;WQvGfJYT^v3MJ8e^Wo(fQEo;c92I{
zO-)T&r@e-@b|%^v7&{&4>-;TLbx!m$f&&T)L>DtFvy8T*7&ODE#b>5zFR&%-Cn}qR
z8Esa!w!yi%xjrF_^sS?_5N-ydf7Zv)H)<=Hu6c}!*k2iy**r!0Xpshz{6fo?Mela%
z*|Vqs{An~0d7cRVVz8{`7Wkdzj@WFaMFD7?k%@^!?iZ5&d2H<N7vB@uJWX}I>&p<i
zYFyJ?&cZ+Rdg5^7+Ly`&{8W<b(FN&jA%*TmX8Rjdy=7-ggK{AuXMLT86vXk3`e1fZ
zbXqMr0v_UZN9a{<ETz*3vEjUCY4zK%UkS1d6izm6+RXx<b&O)a7|+qx85-)b&Rp5>
z_<3Ra-6JNqY!Cmz!I3x_8V0Tr7LgjIyJ_cy7AQIng}e70pz_w)8|C>jFbEkA>2!H{
z*o}+V#cW~=SFdVu7CtIREoi=UP0l19m9Xedtu=&6L<SIzM*wM~N%o(Iel`@H5bNk7
z-W0vzpnQ6@wQjggLZf80p&=WauC#Hwc9G}_8qL~3$Bu2wiS(^fN<S&V9Zru$cZTh%
z3;q!4mK@~~UX?ttR>4;%qh+pUfhL^)5iWS2FR{>oW~#<L4>4k(L*H&lFS(9tD*ex>
z{I~A7ntMsQ>v91C>WOO@y35?}urt~27b0H}yvuf|x;;qhysU!xrRR;!^!;A?T!?oy
z+ig#O94Y-Lyv;5X#24asam~IANk!rE1O&_PxqC5mE(BwPuO{XM2+n{7p1jUnaJ~pW
z0d9&uun1Ha*Z4y9>Gh7{mIB2IMjQs$M+=$f9MqL0ZhZPwnpx%j746ZKi|dgMS8giT
zjlHPy_{OD62~U@j`$kEmMd~ZAexguVwKNVNGAQ8DkxFRPh>KNkFxJ~xY=3mXWA;$y
z9meeJuQ72pEh+6gbgFA>2mAY-EvHH#N+f26$}0=Mo0;`4z3vG(_so=LkQ4Cgm3LYX
z2wE^jquuNHXR&q?J%LG)BR4ROvit>d^{}dogSVA&+UGmFs$@Vh0lWS<Kq)N+R=lr)
zJb+2*%zXU(BVGBtLeV!-ME8%6H$efJh(6wXeu9cZF$T}itn#r7Q_t|cx+!@(TWp2n
z>`mFs$5Jc%b}N`&xuH~9B)zdwBPN}ixwMDk!#=~b=gii7YN~2tN3O>^{+N7Ge%|yb
zKUfMU|D88Dg%&SxBNO!a#7k(T^I?~-<xDcrmHVw1?#MZ)qom@ol3lw12{vz2nXi3^
z?M!rJWCiE|_-Ue?BGnjS>VE%z5weHP<zPN(gSanI3lcsZj4r@^6z_d`d9s;MXKvp<
zL!d3Ez7)umdY)fsK&|PLdx@Q!o2<?`5F(J%meJ)G&*8DjJ5{d}=~O^Kzy~xB-1&o`
zBfSQ+M6B$f!gocCr;ze2N%mZnL-s$Y0*<$&D9wxuOGs=%OMWSYZVQ7@XZ3<i)53=g
z`7@5^Z8hInj6L(>dgfIcE?*v#{d;4We05B=(muNjk2_4ICG2@q)h23gYznlm%uJHX
z5mh&=si?U6^yyRYg{?z#08pUSVDXw8t3&BIJyzE1`=|01MZ9Fx>0vNkng)ew3dVsf
ztgMF*9;CqTMp#Csy?q6l{WC~r>pp|FMCx+<=m0qUq;4(seRY2vYY)qy@S%CqR}-8N
zISeHS!Oa><QAhv`4NgtvCE1NaL>++73aZ_qK?IeF(Cc8D$uA`p0g2bY#eR?ylmq5L
z_jL04h3>*@09^iHW<J<g>MQR(_lRnF^e8=QH39rQ_Ml<WwO(?&KUiSx`IgGWdJf19
z0p;Ax(Kmu+_nZq&iFg=r{=Xsreq#Pg+=vfnRZoabbms)lY9LUe_97=sfSfMlK!rHb
z7f?})k)i>+Pr9<4JT7I&E35kW!;lc64RBqYrotTtnqOl0b{bk_LMK8oB4yjmh4XzF
zf^HODjNA%P9kK)3Bux@pMz|@$UIXkJEA+m&2t?BcVF;SaDeinhlpm<5iJlmxv<Cob
zf_)M=EY)vC9vBorIDBT1@G(fYt9+I;);=&y?ubj4m9EYYx16TTw<R`-VIS-ti9cMv
z|B%ig+S5(h)xlLmR8<au+`Uh@<cOgAW%Ano>L@s>x(l#F_tSGMXl#fy4yCR$1n3QJ
zY{RA8P_7a^Bp}fgEUXNu%wT5KqZhvhVHDPeAAK~6`eFH1z<2N$v7P?64z(vJK|A0j
zg80|8Ck$g6!au_WBws_l5F=sszOW4HW&o92%BNHEfbxYRJrgP;(I8AuSE98+qe<{>
z+)IL-VYvZJziscr-Gkh%@bzI&v>!yM)Meovj%6Yz?32gf7C@j^!99bR>k9xS;s}7{
z747Q}SghHGyZNWn>qFT6k-jozoY^yD9}3`8)Cvi*f#DDkLq0Sq*ougVh;oEv(7uSg
zJg&6Q^9wiHdIo<mqx)AWBz7|;3K*z-tN}&~1HDWT;}$38XJ@H+HbAWobU{GT2#}9;
z8OB{fmPfh0+KNhOEAN3YfT2)iLYc(rk6+a*@p1#mgNDZML#gk6q(ac9xZ}RXCns~G
zs2fH=0i!h$EJYwob$BA_sj(vdo}DE?XxTg@@UQ|#KL;EUT&UAXAp`+i`1!LC^7G~8
zWnIHq$fUNPOp{5}wv$aVpNvu25LoxNmPe;mOyTUCvD!=;qsz>hyGKrFy>dFU_1_*x
z{ieDYn!iz-l*CUbBjKPahn#XgpQ6T4Ct^y0cZZMGyigArzW64?)01W>i6z*g03Uru
zuZs7{RE}+1gwTp13>@TonfV;_@&ru*rLF_7-+Ua!JlM!E&hZCOG1Pk;PnbFH2PBbz
z`gs@Ds`oDR{&6-3%+Qv(Hq8)OB9ZmNgW%c6EWp}N?ArJ~c~2@4;QSow(yLvGmf}cf
z{BUnt?pyuE3!E3V^hE$>sESq5wUEgHl$yjM0x$iyVNW~MhJt`J3kBM!^)YqxJ%mVo
zB%JK5nme1&e$N*y7!d;6s;vmzNI2TK<Y@@!gnTH)G)aTQ1Po#qc`Sk20CQb8WBnUk
zFBF%?p2Yn^c@1K7x#ID+XkVjPKZ>d8k=Y5mq{aG1S8u?)q_>8;ixCxNoWQ^Cz(@oh
znuw@hGwAex^?rLee6cF5WTviqpD}2R&2i?@kxtMCN7q2U$bq#6YLu|erya+X5$-2m
zGFTh}yr-(G8!<GGAVzEt2t?uJWSO}%JTh`l!@t5@UQ<)Eel~p|0AML9fJ55a+9|&1
zr--i`4(44T0t5|!*R09c7lndCLL>t?qg;VF95g-Pauc^|?}9ZBlC0^K{7(BE<9v&}
z(|&5s!;Kt>XweQUW@yzuV044d{^yT#80bjU8O#yYEb>150VaHtElK_P0mZ?<Zm|Ez
zNDH^@Daxjn6^wE4vQBes>%_ETZnEz<_N&!SmWcS#j<SGaihwWzb>G!5@Gq*clA;U;
zL!M%bt&PswlECZllzQ1EAEN~7Cj$U8KzoOP{==P&9lOBA#l@gFSFBaG%}M*r<A=PH
zFXXB-lin7;46<09uMJHaER!#C9i<OXKV)c_;+m}@T>H&mMWwpQyEFwk>*9YixWANM
z`1m3c*_wT%6uUK~Amn}RKt`KKSLe^a=I3YKiLi&jsLHF$d$63;h41}nv$J$J`8+2=
zdkB+ICEbRU87<c1#$K`P)JlOsHMgQGlb6d-6Hkc%?+kje8NCV|bDBwBHsHWHuSHh{
zo_R9W3{|8&EIa|o4kp^BRKVE^XwDRJxeH3KS6kESjqYo*5iq^1d1ZQTj;?X02>M3(
z%M<32d16R#h$>SAye7^mfX`YGHa~#S3QJe<?<dhJU!q-~I3~w2{Js^RzNe;^)%N{V
zqq27Rr>aJ~nE+NJ&Miiq7gEL*!s+;FL;asrZG$u3(|M}}$HsOlS$5!I+3--ow$;ye
zqG<wryz%3zuQxLeM-|YGCWrizvxzN`$sKobaY?(S?ECX6)tLpK^=IA?Zp)OWh4bk~
z`hJPfD1Ui*Mfb5C=y6}=JLI76MmTJU_2+@K5FKxt2m`*uFDhEEf3xXRe#Z#;yA%MJ
z^(^^h9kZhtVo~2gklKn$0K={(EYYp__;_mf4}3Jb6oz|Ry$CycFE5=Vs2`xSbz}^*
zfGQrB+&!%?{~a;{(swmHh+B{{u0kIL7!HHXC~QkRPAISk0@WjS;NAy5e*Ad<91^Dv
zfS4mF_mR-VaIJ~aW!x_^Jwlqqv;u~er>vAQ*}Qz}&-RYl5i{3&1_m2sMSR$NBNE#-
zUVN7%=HB;)i*hi(ZQAhN0j{TBte;;c1lnZN9hkEVIV6{+x0>rjZE1UHjB!soju;~R
za1Rd*7=XdQ@S3%coaha-mgO{gY8OdO=*7Kpc6X=yoRgKpw|n<3+`<!>odBtI-Ll%4
z1L%k(73e$wWK|-MNh~4Ifuf^CVkj8}pq3*BD!6wu2<7^qYm==6Ky)KCGy`z<yqiw`
z>uCnqqgtWqB~n8`>I8>EowLq$LlH7t7^hqaz{*JEQz#!$;N7{;_ib>n3fR^y$mY@c
zEG#Yc&3o4oynmybsDTP=KydIzOwBW~oZvpEVgQVxiVIMj>erq#F1hMiA`BQX)uKXx
z%P?h_7F%KUR<7ua<5N=!*Wt!A?CbiC8~4Dq4|Wmf7XP)t_@F6C4Ycz_1vgP>=7~93
zT+I$gV|Xb5p5s7GLVO1(&^NU_b2*KbMYtn{5Z>ta9e0p|C3}qi7Cu1<@jRHykeSFB
zH!g3ysI`YfI?XgnNP@xmNz{V;#Cioa)wzg+YI<)Q8>^d}^IGQ_8Xs;$6(`rna1S$5
z%q}qkUP+nk4UEBJfO*UzV?z(0z}+|}aA{iSk0z@F)n}ZzNhL8V!o}Y_W{dun;LF5F
z3r88_N~^^c6Em|Jn57VO7KMSyGkZ4V9C#%r-DD9iyz<LSJ#0q>wv(91AgLASJ3!6;
znW#7b)|1gRjGU+7u47Uv8Impq0|AoWU}}>9><5ScnRw8;;nNYwon%G?@MhRF-GYSe
zcOv%9@jdiYltgVI(8H150xRIS9`tBnmL9=`7sdK#_*jTOMo$a_Y$2!4&+oOovW~1a
zH6{e^FyQ~){7+M(#XH;F{3orqTI=gDIy*GlUH0>7ZcM-J%Kaw(+;u%UNsB+YIn+?T
zgf3fKqR3KX@%q7RF(k(J()ZGNE>t{#ak0;w;SY}TGX{Cw#Wa8CdSKE*DBDmdp}^C@
zbZzp(f&Fb7_1aaLa;sH2hjwbowcOztFij0j-1NcW(e$I~_%u$9Jyhv8{Qm3DD0H6x
zcrtOv_24|#-%pKN%k0o&Rg2n%zpbLUo#?|JV*mrW3;C>4q$tUYCi8cJm~XoIvT`HG
zl7``vqkB2BbLRhgpYWzT%<hvUcR6zr-3~(*&Y`}3KVENHX-TUznoW+Vg~G<`v5trR
zbN6zx@}=`l{diG!+Lm;q%uJz-i!4mxjEmmW#B^=f;<mvPbCLHs6NVSL2AwAEm8i;<
zigdKg*lK3jN#zV%K1_(-6`mepQ=hqbZ8g%qeqci_=cNv#^jqQkp(hvgp&|nI38=0F
zy|}E8*Uy>=V~t!HMGh0%PCpjaQ2n8iQT_ON&Ao*Jy4{lr?II!6KNHx6bq(1{-h^E0
zJSq{*a=`S6#se$>{nW|G+sr}C^TdsvJy*0{%a~2LM#xy^zSXfLzVMu7W^Y!MDN(OP
z9J5YJ*B$V`WyA*CR>{QB{~$bkIRqmLO&0+~X%%f%75jG7<7IJ%-7`BU!+Wf16-I5+
z{68tu*Ja;$t+y%<qH9esIBT-E=1EMb!GHhxs33xJ0Zb)ES-W?G^Wl8)VtG$bk4)Sr
zy@$4E+U4!PnQwX*FZ{PW2g)m>=UfWO%OYzO$U%)1>mcTuH$6R^z>a~RVy+B9f;B+!
z9gNFoXT(7v2|pBAXH(hKq!Xvkj=jLF5jw%c1s(R!P_C2msXdMCkcy&ip~xESh5u)b
zM0L3KReHU{1Oy`swe#>F8Y*PKM!umYutu*U-}wI@{y(lprq~E&Z5gXG(#|TCdE4`H
z|2gl^_s780PIT%2S>XRI;S^NSi;3ELh%9~0!4(~LLb>>#+rlHNrYD|i19S_$|E41X
zc*>1*Ajg>b{WV`Usj}P!sE{Y=uCg7QS_QQ3a1_}Vwnl1GW8>w$ott|h#jo$$LVhGh
zftR|K&vSEe-MD>QSV6%QIxKQ(Dy^g-fg;msbRPZ!`U7P;=y@eZ{;Kv1q|vfzAvk1q
zvdGJrXdp61!K$au1{_6lq@39~!|71*adC6Et%+gQ!khZ_m7A*qo(1_HUkm*{*voR_
zt9UjZ)n<2i+8gh5pbg9s)7<ydej4dP5qM>X<;f2wnfK}lv2cb98LJ4^5h|bFv|}oN
z?5{Mt=KQhosFOEWp?|Gbjh_j2o|}9Uy=#pocjJiGl}(1tehq?=+g9CHnanIcM$0!H
RTBP7V4Ygy3^Hi(?{tGwOxj+B_

literal 0
HcmV?d00001

diff --git a/doc/user/project/issue_board.md b/doc/user/project/issue_board.md
index dafc6e7451c..e0f66013454 100644
--- a/doc/user/project/issue_board.md
+++ b/doc/user/project/issue_board.md
@@ -394,19 +394,6 @@ status.
 If you're not able to do some of the things above, make sure you have the right
 [permissions](#permissions).
 
-### First time using an issue board
-
-> The automatic creation of the **To Do** and **Doing** lists was [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/202144) in GitLab 13.5.
-
-The first time you open an issue board, you are presented with the default lists
-(**Open**, **To Do**, **Doing**, and **Closed**).
-
-If the **To Do** and **Doing** labels don't exist in the project or group, they are created, and
-their lists appear as empty. If any of them already exists, the list is filled with the issues that
-have that label.
-
-![issue board default lists](img/issue_board_default_lists_v13_4.png)
-
 ### Create a new list
 
 Create a new list by clicking the **Add list** dropdown button in the upper right corner of the issue board.
@@ -566,6 +553,22 @@ To select and move multiple cards:
 
 ![Multi-select Issue Cards](img/issue_boards_multi_select_v12_4.png)
 
+### First time using an issue board
+
+> - The automatic creation of the **To Do** and **Doing** lists [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/202144) in GitLab 13.5.
+> - [Deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/270583) in GitLab 13.7. In GitLab 13.7 and later, the **To Do** and **Doing** columns are not automatically created.
+
+WARNING:
+This feature was [deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/270583) in GitLab 13.7.
+The **To Do** and **Doing** columns are no longer automatically created.
+
+In GitLab 13.5 and 13.6, the first time you open an issue board, you are presented with the default lists
+(**Open**, **To Do**, **Doing**, and **Closed**).
+
+If the **To Do** and **Doing** labels don't exist in the project or group, they are created, and
+their lists appear as empty. If any of them already exists, the list is filled with the issues that
+have that label.
+
 ## Tips
 
 A few things to remember:
diff --git a/doc/user/project/protected_branches.md b/doc/user/project/protected_branches.md
index 839f92b2e91..8a7678b6864 100644
--- a/doc/user/project/protected_branches.md
+++ b/doc/user/project/protected_branches.md
@@ -74,6 +74,33 @@ dropdown list in the "Already protected" area.
 If you don't choose any of those options while creating a protected branch,
 they are set to "Maintainers" by default.
 
+### Allow Deploy Keys to push to a protected branch
+
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/30769) in GitLab 13.7.
+> - This feature is being selectively deployed in GitLab.com 13.7, and may not be available for all users.
+
+You can allow specific machines to access protected branches in your repository with
+[Deploy Keys](deploy_keys/index.md). This can be useful for your CI/CD workflow,
+for example.
+
+Deploy keys can be selected in the **Allowed to push** dropdown when:
+
+- Defining a protected branch.
+- Updating an existing branch.
+
+Select a deploy key to allow the owner of the key to push to the chosen protected branch,
+even if they aren't a member of the related project. The owner of the selected deploy
+key must have at least read access to the given project.
+
+For a deploy key to be selectable:
+
+- It must be [enabled for your project](deploy_keys/index.md#how-to-enable-deploy-keys).
+- It must have [write access](deploy_keys/index.md#deploy-keys-permissions) to your project repository.
+
+Deploy Keys are not available in the **Allowed to merge** dropdown.
+
+![Deploy Keys on protected branches](img/protected_branches_deploy_keys_v13_5.png)
+
 ## Restricting push and merge access to certain users **(STARTER)**
 
 > [Introduced](https://gitlab.com/gitlab-org/gitlab-foss/-/merge_requests/5081) in [GitLab Starter](https://about.gitlab.com/pricing/) 8.11.
@@ -197,6 +224,10 @@ for details about the pipelines security model.
 
 ## Changelog
 
+**13.5**
+
+- [Allow Deploy keys to push to protected branches once more](https://gitlab.com/gitlab-org/gitlab/-/issues/30769).
+
 **11.9**
 
 - [Allow protected branches to be created](https://gitlab.com/gitlab-org/gitlab-foss/-/issues/53361) by Developers (and users with higher permission levels) through the API and the user interface.
diff --git a/lib/atlassian/jira_connect/client.rb b/lib/atlassian/jira_connect/client.rb
index f81ed462174..da24d0e20ee 100644
--- a/lib/atlassian/jira_connect/client.rb
+++ b/lib/atlassian/jira_connect/client.rb
@@ -12,32 +12,69 @@ module Atlassian
         @shared_secret = shared_secret
       end
 
-      def store_dev_info(project:, commits: nil, branches: nil, merge_requests: nil, update_sequence_id: nil)
-        dev_info_json = {
-          repositories: [
-            Serializers::RepositoryEntity.represent(
-              project,
-              commits: commits,
-              branches: branches,
-              merge_requests: merge_requests,
-              user_notes_count: user_notes_count(merge_requests),
-              update_sequence_id: update_sequence_id
-            )
-          ]
-        }.to_json
+      def send_info(project:, update_sequence_id: nil, **args)
+        common = { project: project, update_sequence_id: update_sequence_id }
+        dev_info = args.slice(:commits, :branches, :merge_requests)
+        build_info = args.slice(:pipelines)
 
-        uri = URI.join(@base_uri, '/rest/devinfo/0.10/bulk')
+        responses = []
 
-        headers = {
-          'Authorization' => "JWT #{jwt_token('POST', uri)}",
-          'Content-Type' => 'application/json'
-        }
+        responses << store_dev_info(**common, **dev_info) if dev_info.present?
+        responses << store_build_info(**common, **build_info) if build_info.present?
+        raise ArgumentError, 'Invalid arguments' if responses.empty?
 
-        self.class.post(uri, headers: headers, body: dev_info_json)
+        responses.compact
       end
 
       private
 
+      def store_build_info(project:, pipelines:, update_sequence_id: nil)
+        return unless Feature.enabled?(:jira_sync_builds, project)
+
+        builds = pipelines.map do |pipeline|
+          build = Serializers::BuildEntity.represent(
+            pipeline,
+            update_sequence_id: update_sequence_id
+          )
+          next if build.issue_keys.empty?
+
+          build
+        end.compact
+        return if builds.empty?
+
+        post('/rest/builds/0.1/bulk', { builds: builds })
+      end
+
+      def store_dev_info(project:, commits: nil, branches: nil, merge_requests: nil, update_sequence_id: nil)
+        repo = Serializers::RepositoryEntity.represent(
+          project,
+          commits: commits,
+          branches: branches,
+          merge_requests: merge_requests,
+          user_notes_count: user_notes_count(merge_requests),
+          update_sequence_id: update_sequence_id
+        )
+
+        post('/rest/devinfo/0.10/bulk', { repositories: [repo] })
+      end
+
+      def post(path, payload)
+        uri = URI.join(@base_uri, path)
+
+        self.class.post(uri, headers: headers(uri), body: metadata.merge(payload).to_json)
+      end
+
+      def headers(uri)
+        {
+          'Authorization' => "JWT #{jwt_token('POST', uri)}",
+          'Content-Type' => 'application/json'
+        }
+      end
+
+      def metadata
+        { providerMetadata: { product: "GitLab #{Gitlab::VERSION}" } }
+      end
+
       def user_notes_count(merge_requests)
         return unless merge_requests
 
diff --git a/lib/atlassian/jira_connect/serializers/base_entity.rb b/lib/atlassian/jira_connect/serializers/base_entity.rb
index 94deb174a45..640337c0399 100644
--- a/lib/atlassian/jira_connect/serializers/base_entity.rb
+++ b/lib/atlassian/jira_connect/serializers/base_entity.rb
@@ -11,6 +11,12 @@ module Atlassian
 
         expose :update_sequence_id, as: :updateSequenceId
 
+        def eql(other)
+          other.is_a?(self.class) && to_json == other.to_json
+        end
+
+        alias_method :==, :eql
+
         private
 
         def update_sequence_id
diff --git a/lib/atlassian/jira_connect/serializers/build_entity.rb b/lib/atlassian/jira_connect/serializers/build_entity.rb
new file mode 100644
index 00000000000..3eb8b1f1978
--- /dev/null
+++ b/lib/atlassian/jira_connect/serializers/build_entity.rb
@@ -0,0 +1,94 @@
+# frozen_string_literal: true
+
+module Atlassian
+  module JiraConnect
+    module Serializers
+      # A Jira 'build' represents what we call a 'pipeline'
+      class BuildEntity < Grape::Entity
+        include Gitlab::Routing
+
+        format_with(:iso8601, &:iso8601)
+
+        expose :schema_version, as: :schemaVersion
+        expose :pipeline_id, as: :pipelineId
+        expose :iid, as: :buildNumber
+        expose :update_sequence_id, as: :updateSequenceNumber
+        expose :source_ref, as: :displayName
+        expose :url
+        expose :state
+        expose :updated_at, as: :lastUpdated, format_with: :iso8601
+        expose :issue_keys, as: :issueKeys
+        expose :test_info, as: :testInfo
+        expose :references
+
+        def issue_keys
+          # extract Jira issue keys from either the source branch/ref or the
+          # merge request title.
+          @issue_keys ||= begin
+                            src = "#{pipeline.source_ref} #{pipeline.merge_request&.title}"
+                            JiraIssueKeyExtractor.new(src).issue_keys
+                          end
+        end
+
+        private
+
+        alias_method :pipeline, :object
+        delegate :project, to: :object
+
+        def url
+          project_pipeline_url(project, pipeline)
+        end
+
+        # translate to Jira status
+        def state
+          case pipeline.status
+          when 'scheduled', 'created', 'pending', 'preparing', 'waiting_for_resource' then 'pending'
+          when 'running' then 'in_progress'
+          when 'success' then 'successful'
+          when 'failed' then 'failed'
+          when 'canceled', 'skipped' then 'cancelled'
+          else
+            'unknown'
+          end
+        end
+
+        def pipeline_id
+          pipeline.ensure_ci_ref!
+
+          pipeline.ci_ref.id.to_s
+        end
+
+        def schema_version
+          '1.0'
+        end
+
+        def test_info
+          builds = pipeline.builds.pluck(:status) # rubocop: disable CodeReuse/ActiveRecord
+          n = builds.size
+          passed = builds.count { |s| s == 'success' }
+          failed = builds.count { |s| s == 'failed' }
+
+          {
+            totalNumber: n,
+            numberPassed: passed,
+            numberFailed: failed,
+            numberSkipped: n - (passed + failed)
+          }
+        end
+
+        def references
+          ref = pipeline.source_ref
+
+          [{
+            commit: { id: pipeline.sha, repositoryUri: project_url(project) },
+            ref: { name: ref, uri: project_commits_url(project, ref) }
+          }]
+        end
+
+        def update_sequence_id
+          options[:update_sequence_id] || Client.generate_update_sequence_id
+        end
+      end
+    end
+  end
+end
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 27c5e2ef8a2..17081b32f7c 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -20104,6 +20104,15 @@ msgstr ""
 msgid "Pipeline: %{status}"
 msgstr ""
 
+msgid "PipelineCharts|An error has ocurred when retrieving the analytics data"
+msgstr ""
+
+msgid "PipelineCharts|An error has ocurred when retrieving the pipelines data"
+msgstr ""
+
+msgid "PipelineCharts|An unknown error occurred while processing CI/CD analytics."
+msgstr ""
+
 msgid "PipelineCharts|CI / CD Analytics"
 msgstr ""
 
@@ -20119,6 +20128,9 @@ msgstr ""
 msgid "PipelineCharts|Successful:"
 msgstr ""
 
+msgid "PipelineCharts|There was an error parsing the data for the charts."
+msgstr ""
+
 msgid "PipelineCharts|Total duration:"
 msgstr ""
 
diff --git a/spec/factories/merge_requests.rb b/spec/factories/merge_requests.rb
index 4da384ce61f..e69743122cc 100644
--- a/spec/factories/merge_requests.rb
+++ b/spec/factories/merge_requests.rb
@@ -24,6 +24,14 @@ FactoryBot.define do
     trait :with_diffs do
     end
 
+    trait :jira_title do
+      title { generate(:jira_title) }
+    end
+
+    trait :jira_branch do
+      source_branch { generate(:jira_branch) }
+    end
+
     trait :with_image_diffs do
       source_branch { "add_images_and_changes" }
       target_branch { "master" }
diff --git a/spec/factories/sequences.rb b/spec/factories/sequences.rb
index 7e2836d3688..b338fd99625 100644
--- a/spec/factories/sequences.rb
+++ b/spec/factories/sequences.rb
@@ -15,4 +15,6 @@ FactoryBot.define do
   sequence(:sha) { |n| Digest::SHA1.hexdigest("commit-like-#{n}") }
   sequence(:oid) { |n| Digest::SHA2.hexdigest("oid-like-#{n}") }
   sequence(:variable) { |n| "var#{n}" }
+  sequence(:jira_title) { |n| "[PROJ-#{n}]: fix bug" }
+  sequence(:jira_branch) { |n| "feature/PROJ-#{n}" }
 end
diff --git a/spec/features/boards/boards_spec.rb b/spec/features/boards/boards_spec.rb
index 06ec4e05828..b3cc2eb418d 100644
--- a/spec/features/boards/boards_spec.rb
+++ b/spec/features/boards/boards_spec.rb
@@ -27,11 +27,11 @@ RSpec.describe 'Issue Boards', :js do
     end
 
     it 'creates default lists' do
-      lists = ['Open', 'To Do', 'Doing', 'Closed']
+      lists = %w[Open Closed]
 
       wait_for_requests
 
-      expect(page).to have_selector('.board', count: 4)
+      expect(page).to have_selector('.board', count: 2)
 
       page.all('.board').each_with_index do |list, i|
         expect(list.find('.board-title')).to have_content(lists[i])
diff --git a/spec/frontend/admin/users/components/app_spec.js b/spec/frontend/admin/users/components/app_spec.js
new file mode 100644
index 00000000000..65b13e3a40d
--- /dev/null
+++ b/spec/frontend/admin/users/components/app_spec.js
@@ -0,0 +1,37 @@
+import { shallowMount } from '@vue/test-utils';
+
+import AdminUsersApp from '~/admin/users/components/app.vue';
+import AdminUsersTable from '~/admin/users/components/users_table.vue';
+import { users, paths } from '../mock_data';
+
+describe('AdminUsersApp component', () => {
+  let wrapper;
+
+  const initComponent = (props = {}) => {
+    wrapper = shallowMount(AdminUsersApp, {
+      propsData: {
+        users,
+        paths,
+        ...props,
+      },
+    });
+  };
+
+  afterEach(() => {
+    wrapper.destroy();
+    wrapper = null;
+  });
+
+  describe('when initialized', () => {
+    beforeEach(() => {
+      initComponent();
+    });
+
+    it('renders the admin users table with props', () => {
+      expect(wrapper.find(AdminUsersTable).props()).toEqual({
+        users,
+        paths,
+      });
+    });
+  });
+});
diff --git a/spec/frontend/admin/users/components/users_table_spec.js b/spec/frontend/admin/users/components/users_table_spec.js
new file mode 100644
index 00000000000..ba36e1e32ef
--- /dev/null
+++ b/spec/frontend/admin/users/components/users_table_spec.js
@@ -0,0 +1,61 @@
+import { GlTable } from '@gitlab/ui';
+import { mount } from '@vue/test-utils';
+
+import AdminUsersTable from '~/admin/users/components/users_table.vue';
+import { users, paths } from '../mock_data';
+
+describe('AdminUsersTable component', () => {
+  let wrapper;
+
+  const getCellByLabel = (trIdx, label) => {
+    return wrapper
+      .find(GlTable)
+      .find('tbody')
+      .findAll('tr')
+      .at(trIdx)
+      .find(`[data-label="${label}"][role="cell"]`);
+  };
+
+  const initComponent = (props = {}) => {
+    wrapper = mount(AdminUsersTable, {
+      propsData: {
+        users,
+        paths,
+        ...props,
+      },
+    });
+  };
+
+  afterEach(() => {
+    wrapper.destroy();
+    wrapper = null;
+  });
+
+  describe('when there are users', () => {
+    const user = users[0];
+
+    beforeEach(() => {
+      initComponent();
+    });
+
+    it.each`
+      key                 | label
+      ${'name'}           | ${'Name'}
+      ${'projectsCount'}  | ${'Projects'}
+      ${'createdAt'}      | ${'Created on'}
+      ${'lastActivityOn'} | ${'Last activity'}
+    `('renders users.$key for $label', ({ key, label }) => {
+      expect(getCellByLabel(0, label).text()).toBe(`${user[key]}`);
+    });
+  });
+
+  describe('when users is an empty array', () => {
+    beforeEach(() => {
+      initComponent({ users: [] });
+    });
+
+    it('renders a "No users found" message', () => {
+      expect(wrapper.text()).toContain('No users found');
+    });
+  });
+});
diff --git a/spec/frontend/admin/users/mock_data.js b/spec/frontend/admin/users/mock_data.js
index b80d04454b0..62fa9469638 100644
--- a/spec/frontend/admin/users/mock_data.js
+++ b/spec/frontend/admin/users/mock_data.js
@@ -5,7 +5,7 @@ export const users = [
     createdAt: '2020-11-13T12:26:54.177Z',
     email: 'nikki@example.com',
     username: 'nikki',
-    lastActivityOn: null,
+    lastActivityOn: '2020-12-09',
     avatarUrl:
       'https://secure.gravatar.com/avatar/054f062d8b1a42b123f17e13a173cda8?s=80\\u0026d=identicon',
     badges: [],
diff --git a/spec/frontend/boards/boards_store_spec.js b/spec/frontend/boards/boards_store_spec.js
index e7c1cf79fdc..84c8242a7b9 100644
--- a/spec/frontend/boards/boards_store_spec.js
+++ b/spec/frontend/boards/boards_store_spec.js
@@ -66,23 +66,6 @@ describe('boardsStore', () => {
     });
   });
 
-  describe('generateDefaultLists', () => {
-    const listsEndpointGenerate = `${endpoints.listsEndpoint}/generate.json`;
-
-    it('makes a request to generate default lists', () => {
-      axiosMock.onPost(listsEndpointGenerate).replyOnce(200, dummyResponse);
-      const expectedResponse = expect.objectContaining({ data: dummyResponse });
-
-      return expect(boardsStore.generateDefaultLists()).resolves.toEqual(expectedResponse);
-    });
-
-    it('fails for error response', () => {
-      axiosMock.onPost(listsEndpointGenerate).replyOnce(500);
-
-      return expect(boardsStore.generateDefaultLists()).rejects.toThrow();
-    });
-  });
-
   describe('createList', () => {
     const entityType = 'moorhen';
     const entityId = 'quack';
@@ -727,24 +710,6 @@ describe('boardsStore', () => {
         });
       });
 
-      it('check for blank state adding', () => {
-        expect(boardsStore.shouldAddBlankState()).toBe(true);
-      });
-
-      it('check for blank state not adding', () => {
-        boardsStore.addList(listObj);
-
-        expect(boardsStore.shouldAddBlankState()).toBe(false);
-      });
-
-      it('check for blank state adding when closed list exist', () => {
-        boardsStore.addList({
-          list_type: 'closed',
-        });
-
-        expect(boardsStore.shouldAddBlankState()).toBe(true);
-      });
-
       it('removes list from state', () => {
         boardsStore.addList(listObj);
 
diff --git a/spec/frontend/boards/components/board_list_header_new_spec.js b/spec/frontend/boards/components/board_list_header_new_spec.js
index 5a0bf351992..12306052ff6 100644
--- a/spec/frontend/boards/components/board_list_header_new_spec.js
+++ b/spec/frontend/boards/components/board_list_header_new_spec.js
@@ -79,7 +79,7 @@ describe('Board List Header Component', () => {
   const findCaret = () => wrapper.find('.board-title-caret');
 
   describe('Add issue button', () => {
-    const hasNoAddButton = [ListType.blank, ListType.closed];
+    const hasNoAddButton = [ListType.closed];
     const hasAddButton = [ListType.backlog, ListType.label, ListType.milestone, ListType.assignee];
 
     it.each(hasNoAddButton)('does not render when List Type is `%s`', listType => {
diff --git a/spec/frontend/boards/components/board_list_header_spec.js b/spec/frontend/boards/components/board_list_header_spec.js
index 9b7bf7a0854..656a503bb86 100644
--- a/spec/frontend/boards/components/board_list_header_spec.js
+++ b/spec/frontend/boards/components/board_list_header_spec.js
@@ -73,7 +73,7 @@ describe('Board List Header Component', () => {
   const findCaret = () => wrapper.find('.board-title-caret');
 
   describe('Add issue button', () => {
-    const hasNoAddButton = [ListType.blank, ListType.closed];
+    const hasNoAddButton = [ListType.closed];
     const hasAddButton = [ListType.backlog, ListType.label, ListType.milestone, ListType.assignee];
 
     it.each(hasNoAddButton)('does not render when List Type is `%s`', listType => {
diff --git a/spec/frontend/boards/stores/actions_spec.js b/spec/frontend/boards/stores/actions_spec.js
index c55b01da5cc..294e7eb4578 100644
--- a/spec/frontend/boards/stores/actions_spec.js
+++ b/spec/frontend/boards/stores/actions_spec.js
@@ -123,7 +123,7 @@ describe('fetchLists', () => {
           payload: formattedLists,
         },
       ],
-      [{ type: 'generateDefaultLists' }],
+      [],
       done,
     );
   });
@@ -153,37 +153,12 @@ describe('fetchLists', () => {
           payload: formattedLists,
         },
       ],
-      [{ type: 'createList', payload: { backlog: true } }, { type: 'generateDefaultLists' }],
+      [{ type: 'createList', payload: { backlog: true } }],
       done,
     );
   });
 });
 
-describe('generateDefaultLists', () => {
-  let store;
-  beforeEach(() => {
-    const state = {
-      endpoints: { fullPath: 'gitlab-org', boardId: '1' },
-      boardType: 'group',
-      disabled: false,
-      boardLists: [{ type: 'backlog' }, { type: 'closed' }],
-    };
-
-    store = {
-      commit: jest.fn(),
-      dispatch: jest.fn(() => Promise.resolve()),
-      state,
-    };
-  });
-
-  it('should dispatch fetchLabels', () => {
-    return actions.generateDefaultLists(store).then(() => {
-      expect(store.dispatch.mock.calls[0]).toEqual(['fetchLabels', 'to do']);
-      expect(store.dispatch.mock.calls[1]).toEqual(['fetchLabels', 'doing']);
-    });
-  });
-});
-
 describe('createList', () => {
   it('should dispatch addList action when creating backlog list', done => {
     const backlogList = {
diff --git a/spec/frontend/boards/stores/mutations_spec.js b/spec/frontend/boards/stores/mutations_spec.js
index 5246bc7a7c9..2efd9af9c26 100644
--- a/spec/frontend/boards/stores/mutations_spec.js
+++ b/spec/frontend/boards/stores/mutations_spec.js
@@ -33,19 +33,16 @@ describe('Board Store Mutations', () => {
       };
       const boardType = 'group';
       const disabled = false;
-      const showPromotion = false;
 
       mutations[types.SET_INITIAL_BOARD_DATA](state, {
         ...endpoints,
         boardType,
         disabled,
-        showPromotion,
       });
 
       expect(state.endpoints).toEqual(endpoints);
       expect(state.boardType).toEqual(boardType);
       expect(state.disabled).toEqual(disabled);
-      expect(state.showPromotion).toEqual(showPromotion);
     });
   });
 
diff --git a/spec/frontend/projects/pipelines/charts/components/__snapshots__/statistics_list_spec.js.snap b/spec/frontend/projects/pipelines/charts/components/__snapshots__/statistics_list_spec.js.snap
index ac87fe893b9..c7e760486c0 100644
--- a/spec/frontend/projects/pipelines/charts/components/__snapshots__/statistics_list_spec.js.snap
+++ b/spec/frontend/projects/pipelines/charts/components/__snapshots__/statistics_list_spec.js.snap
@@ -1,6 +1,6 @@
 // Jest Snapshot v1, https://goo.gl/fbAQLP
 
-exports[`StatisticsList matches the snapshot 1`] = `
+exports[`StatisticsList displays the counts data with labels 1`] = `
 <ul>
   <li>
     <span>
@@ -35,7 +35,7 @@ exports[`StatisticsList matches the snapshot 1`] = `
     </span>
      
     <strong>
-      50%
+      50.00%
     </strong>
   </li>
   <li>
diff --git a/spec/frontend/projects/pipelines/charts/components/app_legacy_spec.js b/spec/frontend/projects/pipelines/charts/components/app_legacy_spec.js
new file mode 100644
index 00000000000..c03b571eb26
--- /dev/null
+++ b/spec/frontend/projects/pipelines/charts/components/app_legacy_spec.js
@@ -0,0 +1,72 @@
+import { shallowMount } from '@vue/test-utils';
+import { GlColumnChart } from '@gitlab/ui/dist/charts';
+import Component from '~/projects/pipelines/charts/components/app_legacy.vue';
+import StatisticsList from '~/projects/pipelines/charts/components/statistics_list.vue';
+import PipelinesAreaChart from '~/projects/pipelines/charts/components/pipelines_area_chart.vue';
+import {
+  counts,
+  timesChartData,
+  areaChartData as lastWeekChartData,
+  areaChartData as lastMonthChartData,
+  lastYearChartData,
+} from '../mock_data';
+
+describe('ProjectsPipelinesChartsApp', () => {
+  let wrapper;
+
+  beforeEach(() => {
+    wrapper = shallowMount(Component, {
+      propsData: {
+        counts,
+        timesChartData,
+        lastWeekChartData,
+        lastMonthChartData,
+        lastYearChartData,
+      },
+    });
+  });
+
+  afterEach(() => {
+    wrapper.destroy();
+    wrapper = null;
+  });
+
+  describe('overall statistics', () => {
+    it('displays the statistics list', () => {
+      const list = wrapper.find(StatisticsList);
+
+      expect(list.exists()).toBeTruthy();
+      expect(list.props('counts')).toBe(counts);
+    });
+
+    it('displays the commit duration chart', () => {
+      const chart = wrapper.find(GlColumnChart);
+
+      expect(chart.exists()).toBeTruthy();
+      expect(chart.props('yAxisTitle')).toBe('Minutes');
+      expect(chart.props('xAxisTitle')).toBe('Commit');
+      expect(chart.props('bars')).toBe(wrapper.vm.timesChartTransformedData);
+      expect(chart.props('option')).toBe(wrapper.vm.$options.timesChartOptions);
+    });
+  });
+
+  describe('pipelines charts', () => {
+    it('displays 3 area charts', () => {
+      expect(wrapper.findAll(PipelinesAreaChart).length).toBe(3);
+    });
+
+    describe('displays individual correctly', () => {
+      it('renders with the correct data', () => {
+        const charts = wrapper.findAll(PipelinesAreaChart);
+
+        for (let i = 0; i < charts.length; i += 1) {
+          const chart = charts.at(i);
+
+          expect(chart.exists()).toBeTruthy();
+          expect(chart.props('chartData')).toBe(wrapper.vm.areaCharts[i].data);
+          expect(chart.text()).toBe(wrapper.vm.areaCharts[i].title);
+        }
+      });
+    });
+  });
+});
diff --git a/spec/frontend/projects/pipelines/charts/components/app_spec.js b/spec/frontend/projects/pipelines/charts/components/app_spec.js
index 0dd3407dbbc..f8737dda5f6 100644
--- a/spec/frontend/projects/pipelines/charts/components/app_spec.js
+++ b/spec/frontend/projects/pipelines/charts/components/app_spec.js
@@ -1,29 +1,45 @@
-import { shallowMount } from '@vue/test-utils';
+import { createLocalVue, shallowMount } from '@vue/test-utils';
+import VueApollo from 'vue-apollo';
+import createMockApollo from 'jest/helpers/mock_apollo_helper';
 import { GlColumnChart } from '@gitlab/ui/dist/charts';
 import Component from '~/projects/pipelines/charts/components/app.vue';
 import StatisticsList from '~/projects/pipelines/charts/components/statistics_list.vue';
 import PipelinesAreaChart from '~/projects/pipelines/charts/components/pipelines_area_chart.vue';
-import {
-  counts,
-  timesChartData,
-  areaChartData as lastWeekChartData,
-  areaChartData as lastMonthChartData,
-  lastYearChartData,
-} from '../mock_data';
+import getPipelineCountByStatus from '~/projects/pipelines/charts/graphql/queries/get_pipeline_count_by_status.query.graphql';
+import getProjectPipelineStatistics from '~/projects/pipelines/charts/graphql/queries/get_project_pipeline_statistics.query.graphql';
+import { mockPipelineCount, mockPipelineStatistics } from '../mock_data';
+
+const projectPath = 'gitlab-org/gitlab';
+const localVue = createLocalVue();
+localVue.use(VueApollo);
 
 describe('ProjectsPipelinesChartsApp', () => {
   let wrapper;
 
-  beforeEach(() => {
-    wrapper = shallowMount(Component, {
-      propsData: {
-        counts,
-        timesChartData,
-        lastWeekChartData,
-        lastMonthChartData,
-        lastYearChartData,
+  function createMockApolloProvider() {
+    const requestHandlers = [
+      [getPipelineCountByStatus, jest.fn().mockResolvedValue(mockPipelineCount)],
+      [getProjectPipelineStatistics, jest.fn().mockResolvedValue(mockPipelineStatistics)],
+    ];
+
+    return createMockApollo(requestHandlers);
+  }
+
+  function createComponent(options = {}) {
+    const { fakeApollo } = options;
+
+    return shallowMount(Component, {
+      provide: {
+        projectPath,
       },
+      localVue,
+      apolloProvider: fakeApollo,
     });
+  }
+
+  beforeEach(() => {
+    const fakeApollo = createMockApolloProvider();
+    wrapper = createComponent({ fakeApollo });
   });
 
   afterEach(() => {
@@ -35,14 +51,20 @@ describe('ProjectsPipelinesChartsApp', () => {
     it('displays the statistics list', () => {
       const list = wrapper.find(StatisticsList);
 
-      expect(list.exists()).toBeTruthy();
-      expect(list.props('counts')).toBe(counts);
+      expect(list.exists()).toBe(true);
+      expect(list.props('counts')).toMatchObject({
+        failed: 1,
+        success: 23,
+        total: 34,
+        successRatio: 95.83333333333334,
+        totalDuration: 2471,
+      });
     });
 
     it('displays the commit duration chart', () => {
       const chart = wrapper.find(GlColumnChart);
 
-      expect(chart.exists()).toBeTruthy();
+      expect(chart.exists()).toBe(true);
       expect(chart.props('yAxisTitle')).toBe('Minutes');
       expect(chart.props('xAxisTitle')).toBe('Commit');
       expect(chart.props('bars')).toBe(wrapper.vm.timesChartTransformedData);
@@ -52,7 +74,7 @@ describe('ProjectsPipelinesChartsApp', () => {
 
   describe('pipelines charts', () => {
     it('displays 3 area charts', () => {
-      expect(wrapper.findAll(PipelinesAreaChart).length).toBe(3);
+      expect(wrapper.findAll(PipelinesAreaChart)).toHaveLength(3);
     });
 
     describe('displays individual correctly', () => {
@@ -62,7 +84,9 @@ describe('ProjectsPipelinesChartsApp', () => {
         for (let i = 0; i < charts.length; i += 1) {
           const chart = charts.at(i);
 
-          expect(chart.exists()).toBeTruthy();
+          expect(chart.exists()).toBe(true);
+          // TODO: Refactor this to use the mocked data instead of the vm data
+          // https://gitlab.com/gitlab-org/gitlab/-/issues/292085
           expect(chart.props('chartData')).toBe(wrapper.vm.areaCharts[i].data);
           expect(chart.text()).toBe(wrapper.vm.areaCharts[i].title);
         }
diff --git a/spec/frontend/projects/pipelines/charts/components/statistics_list_spec.js b/spec/frontend/projects/pipelines/charts/components/statistics_list_spec.js
index f78608e9cb2..4e79f62ce81 100644
--- a/spec/frontend/projects/pipelines/charts/components/statistics_list_spec.js
+++ b/spec/frontend/projects/pipelines/charts/components/statistics_list_spec.js
@@ -18,7 +18,7 @@ describe('StatisticsList', () => {
     wrapper = null;
   });
 
-  it('matches the snapshot', () => {
+  it('displays the counts data with labels', () => {
     expect(wrapper.element).toMatchSnapshot();
   });
 });
diff --git a/spec/frontend/projects/pipelines/charts/mock_data.js b/spec/frontend/projects/pipelines/charts/mock_data.js
index 84e0ccb828a..da055536fcc 100644
--- a/spec/frontend/projects/pipelines/charts/mock_data.js
+++ b/spec/frontend/projects/pipelines/charts/mock_data.js
@@ -32,3 +32,218 @@ export const transformedAreaChartData = [
     data: [['01 Jan', 3], ['02 Jan', 3], ['03 Jan', 3], ['04 Jan', 3], ['05 Jan', 5]],
   },
 ];
+
+export const mockPipelineCount = {
+  data: {
+    project: {
+      totalPipelines: { count: 34, __typename: 'PipelineConnection' },
+      successfulPipelines: { count: 23, __typename: 'PipelineConnection' },
+      failedPipelines: { count: 1, __typename: 'PipelineConnection' },
+      totalPipelineDuration: 2471,
+      __typename: 'Project',
+    },
+  },
+};
+
+export const mockPipelineStatistics = {
+  data: {
+    project: {
+      pipelineAnalytics: {
+        weekPipelinesTotals: [0, 0, 0, 0, 0, 0, 0, 0],
+        weekPipelinesLabels: [
+          '24 November',
+          '25 November',
+          '26 November',
+          '27 November',
+          '28 November',
+          '29 November',
+          '30 November',
+          '01 December',
+        ],
+        weekPipelinesSuccessful: [0, 0, 0, 0, 0, 0, 0, 0],
+        monthPipelinesLabels: [
+          '01 November',
+          '02 November',
+          '03 November',
+          '04 November',
+          '05 November',
+          '06 November',
+          '07 November',
+          '08 November',
+          '09 November',
+          '10 November',
+          '11 November',
+          '12 November',
+          '13 November',
+          '14 November',
+          '15 November',
+          '16 November',
+          '17 November',
+          '18 November',
+          '19 November',
+          '20 November',
+          '21 November',
+          '22 November',
+          '23 November',
+          '24 November',
+          '25 November',
+          '26 November',
+          '27 November',
+          '28 November',
+          '29 November',
+          '30 November',
+          '01 December',
+        ],
+        monthPipelinesTotals: [
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          2,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+        ],
+        monthPipelinesSuccessful: [
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+          0,
+        ],
+        yearPipelinesLabels: [
+          'December 2019',
+          'January 2020',
+          'February 2020',
+          'March 2020',
+          'April 2020',
+          'May 2020',
+          'June 2020',
+          'July 2020',
+          'August 2020',
+          'September 2020',
+          'October 2020',
+          'November 2020',
+          'December 2020',
+        ],
+        yearPipelinesTotals: [0, 0, 0, 0, 0, 0, 0, 0, 23, 7, 2, 2, 0],
+        yearPipelinesSuccessful: [0, 0, 0, 0, 0, 0, 0, 0, 17, 5, 1, 0, 0],
+        pipelineTimesLabels: [
+          'b3781247',
+          'b3781247',
+          'a50ba059',
+          '8e414f3b',
+          'b2964d50',
+          '7caa525b',
+          '761b164e',
+          'd3eccd18',
+          'e2750f63',
+          'e2750f63',
+          '1dfb4b96',
+          'b49d6f94',
+          '66fa2f80',
+          'e2750f63',
+          'fc82cf15',
+          '19fb20b2',
+          '25f03a24',
+          'e054110f',
+          '0278b7b2',
+          '38478c16',
+          '38478c16',
+          '38478c16',
+          '1fb2103e',
+          '97b99fb5',
+          '8abc6e87',
+          'c94e80e3',
+          '5d349a50',
+          '5d349a50',
+          '9c581037',
+          '02d95fb2',
+        ],
+        pipelineTimesValues: [
+          1,
+          0,
+          0,
+          0,
+          0,
+          1,
+          1,
+          2,
+          1,
+          0,
+          1,
+          2,
+          2,
+          0,
+          4,
+          2,
+          1,
+          2,
+          1,
+          1,
+          0,
+          1,
+          1,
+          0,
+          1,
+          5,
+          2,
+          0,
+          0,
+          0,
+        ],
+        __typename: 'Analytics',
+      },
+      __typename: 'Project',
+    },
+  },
+};
diff --git a/spec/lib/atlassian/jira_connect/client_spec.rb b/spec/lib/atlassian/jira_connect/client_spec.rb
index c260c6404f5..6a161854dfb 100644
--- a/spec/lib/atlassian/jira_connect/client_spec.rb
+++ b/spec/lib/atlassian/jira_connect/client_spec.rb
@@ -7,6 +7,8 @@ RSpec.describe Atlassian::JiraConnect::Client do
 
   subject { described_class.new('https://gitlab-test.atlassian.net', 'sample_secret') }
 
+  let_it_be(:project) { create_default(:project, :repository) }
+
   around do |example|
     freeze_time { example.run }
   end
@@ -19,41 +21,158 @@ RSpec.describe Atlassian::JiraConnect::Client do
     end
   end
 
-  describe '#store_dev_info' do
-    let_it_be(:project) { create_default(:project, :repository) }
-    let_it_be(:merge_requests) { create_list(:merge_request, 2, :unique_branches) }
+  describe '#send_info' do
+    it 'calls store_build_info and store_dev_info as appropriate' do
+      expect(subject).to receive(:store_build_info).with(
+        project: project,
+        update_sequence_id: :x,
+        pipelines: :y
+      ).and_return(:build_stored)
 
-    let(:expected_jwt) do
-      Atlassian::Jwt.encode(
-        Atlassian::Jwt.build_claims(
-          Atlassian::JiraConnect.app_key,
-          '/rest/devinfo/0.10/bulk',
-          'POST'
-        ),
-        'sample_secret'
-      )
+      expect(subject).to receive(:store_dev_info).with(
+        project: project,
+        update_sequence_id: :x,
+        commits: :a,
+        branches: :b,
+        merge_requests: :c
+      ).and_return(:dev_stored)
+
+      args = {
+        project: project,
+        update_sequence_id: :x,
+        commits: :a,
+        branches: :b,
+        merge_requests: :c,
+        pipelines: :y
+      }
+
+      expect(subject.send_info(**args)).to contain_exactly(:dev_stored, :build_stored)
+    end
+
+    it 'only calls methods that we need to call' do
+      expect(subject).to receive(:store_dev_info).with(
+        project: project,
+        update_sequence_id: :x,
+        commits: :a
+      ).and_return(:dev_stored)
+
+      args = {
+        project: project,
+        update_sequence_id: :x,
+        commits: :a
+      }
+
+      expect(subject.send_info(**args)).to contain_exactly(:dev_stored)
+    end
+
+    it 'raises an argument error if there is nothing to send (probably a typo?)' do
+      expect { subject.send_info(project: project, builds: :x) }
+        .to raise_error(ArgumentError)
+    end
+  end
+
+  def expected_headers(path)
+    expected_jwt = Atlassian::Jwt.encode(
+      Atlassian::Jwt.build_claims(Atlassian::JiraConnect.app_key, path, 'POST'),
+      'sample_secret'
+    )
+
+    {
+      'Authorization' => "JWT #{expected_jwt}",
+      'Content-Type' => 'application/json'
+    }
+  end
+
+  describe '#store_build_info' do
+    let_it_be(:mrs_by_title) { create_list(:merge_request, 4, :unique_branches, :jira_title) }
+    let_it_be(:mrs_by_branch) { create_list(:merge_request, 2, :jira_branch) }
+    let_it_be(:red_herrings) { create_list(:merge_request, 1, :unique_branches) }
+
+    let_it_be(:pipelines) do
+      (red_herrings + mrs_by_branch + mrs_by_title).map do |mr|
+        create(:ci_pipeline, merge_request: mr)
+      end
+    end
+
+    let(:build_info_payload_schema) do
+      Atlassian::Schemata.build_info_payload
+    end
+
+    let(:body) do
+      matcher = be_valid_json.according_to_schema(build_info_payload_schema)
+
+      ->(text) { matcher.matches?(text) }
     end
 
     before do
-      stub_full_request('https://gitlab-test.atlassian.net/rest/devinfo/0.10/bulk', method: :post)
-        .with(
-          headers: {
-            'Authorization' => "JWT #{expected_jwt}",
-            'Content-Type' => 'application/json'
-          }
-        )
+      path = '/rest/builds/0.1/bulk'
+      stub_full_request('https://gitlab-test.atlassian.net' + path, method: :post)
+        .with(body: body, headers: expected_headers(path))
     end
 
     it "calls the API with auth headers" do
-      subject.store_dev_info(project: project)
+      subject.send(:store_build_info, project: project, pipelines: pipelines)
+    end
+
+    it 'only sends information about relevant MRs' do
+      expect(subject).to receive(:post).with('/rest/builds/0.1/bulk', { builds: have_attributes(size: 6) })
+
+      subject.send(:store_build_info, project: project, pipelines: pipelines)
+    end
+
+    it 'does not call the API if there is nothing to report' do
+      expect(subject).not_to receive(:post)
+
+      subject.send(:store_build_info, project: project, pipelines: pipelines.take(1))
+    end
+
+    it 'does not call the API if the feature flag is not enabled' do
+      stub_feature_flags(jira_sync_builds: false)
+
+      expect(subject).not_to receive(:post)
+
+      subject.send(:store_build_info, project: project, pipelines: pipelines)
+    end
+
+    it 'does call the API if the feature flag enabled for the project' do
+      stub_feature_flags(jira_sync_builds: project)
+
+      expect(subject).to receive(:post).with('/rest/builds/0.1/bulk', { builds: Array })
+
+      subject.send(:store_build_info, project: project, pipelines: pipelines)
     end
 
     it 'avoids N+1 database queries' do
-      control_count = ActiveRecord::QueryRecorder.new { subject.store_dev_info(project: project, merge_requests: merge_requests) }.count
+      baseline = ActiveRecord::QueryRecorder.new do
+        subject.send(:store_build_info, project: project, pipelines: pipelines)
+      end
+
+      pipelines << create(:ci_pipeline, head_pipeline_of: create(:merge_request, :jira_branch))
+
+      expect { subject.send(:store_build_info, project: project, pipelines: pipelines) }.not_to exceed_query_limit(baseline)
+    end
+  end
+
+  describe '#store_dev_info' do
+    let_it_be(:merge_requests) { create_list(:merge_request, 2, :unique_branches) }
+
+    before do
+      path = '/rest/devinfo/0.10/bulk'
+
+      stub_full_request('https://gitlab-test.atlassian.net' + path, method: :post)
+        .with(headers: expected_headers(path))
+    end
+
+    it "calls the API with auth headers" do
+      subject.send(:store_dev_info, project: project)
+    end
+
+    it 'avoids N+1 database queries' do
+      control_count = ActiveRecord::QueryRecorder.new { subject.send(:store_dev_info, project: project, merge_requests: merge_requests) }.count
 
       merge_requests << create(:merge_request, :unique_branches)
 
-      expect { subject.store_dev_info(project: project, merge_requests: merge_requests) }.not_to exceed_query_limit(control_count)
+      expect { subject.send(:store_dev_info, project: project, merge_requests: merge_requests) }.not_to exceed_query_limit(control_count)
     end
   end
 end
diff --git a/spec/lib/atlassian/jira_connect/serializers/build_entity_spec.rb b/spec/lib/atlassian/jira_connect/serializers/build_entity_spec.rb
new file mode 100644
index 00000000000..52e475d20ca
--- /dev/null
+++ b/spec/lib/atlassian/jira_connect/serializers/build_entity_spec.rb
@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Atlassian::JiraConnect::Serializers::BuildEntity do
+  let_it_be(:user) { create_default(:user) }
+  let_it_be(:project) { create_default(:project) }
+
+  subject { described_class.represent(pipeline) }
+
+  context 'when the pipeline does not belong to any Jira issue' do
+    let_it_be(:pipeline) { create(:ci_pipeline) }
+
+    describe '#issue_keys' do
+      it 'is empty' do
+        expect(subject.issue_keys).to be_empty
+      end
+    end
+
+    describe '#to_json' do
+      it 'can encode the object' do
+        expect(subject.to_json).to be_valid_json
+      end
+
+      it 'is invalid, since it has no issue keys' do
+        expect(subject.to_json).not_to be_valid_json.according_to_schema(Atlassian::Schemata.build_info)
+      end
+    end
+  end
+
+  context 'when the pipeline does belong to a Jira issue' do
+    let(:pipeline) { create(:ci_pipeline, merge_request: merge_request) }
+
+    %i[jira_branch jira_title].each do |trait|
+      context "because it belongs to an MR with a #{trait}" do
+        let(:merge_request) { create(:merge_request, trait) }
+
+        describe '#issue_keys' do
+          it 'is not empty' do
+            expect(subject.issue_keys).not_to be_empty
+          end
+        end
+
+        describe '#to_json' do
+          it 'is valid according to the build info schema' do
+            expect(subject.to_json).to be_valid_json.according_to_schema(Atlassian::Schemata.build_info)
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/spec/models/application_setting_spec.rb b/spec/models/application_setting_spec.rb
index efe62a1d086..ea03cbc3706 100644
--- a/spec/models/application_setting_spec.rb
+++ b/spec/models/application_setting_spec.rb
@@ -259,7 +259,18 @@ RSpec.describe ApplicationSetting do
         it { is_expected.to allow_value('access-key-id-12').for(:eks_access_key_id) }
         it { is_expected.not_to allow_value('a' * 129).for(:eks_access_key_id) }
         it { is_expected.not_to allow_value('short-key').for(:eks_access_key_id) }
-        it { is_expected.not_to allow_value(nil).for(:eks_access_key_id) }
+        it { is_expected.to allow_value(nil).for(:eks_access_key_id) }
+
+        it { is_expected.to allow_value('secret-access-key').for(:eks_secret_access_key) }
+        it { is_expected.to allow_value(nil).for(:eks_secret_access_key) }
+      end
+
+      context 'access key is specified' do
+        let(:eks_enabled) { true }
+
+        before do
+          setting.eks_access_key_id = '123456789012'
+        end
 
         it { is_expected.to allow_value('secret-access-key').for(:eks_secret_access_key) }
         it { is_expected.not_to allow_value(nil).for(:eks_secret_access_key) }
diff --git a/spec/models/ci/pipeline_spec.rb b/spec/models/ci/pipeline_spec.rb
index 6183edb7828..f4a3572902b 100644
--- a/spec/models/ci/pipeline_spec.rb
+++ b/spec/models/ci/pipeline_spec.rb
@@ -1206,6 +1206,40 @@ RSpec.describe Ci::Pipeline, :mailer, factory_default: :keep do
       end
     end
 
+    describe 'synching status to Jira' do
+      let(:worker) { ::JiraConnect::SyncBuildsWorker }
+
+      %i[prepare! run! skip! drop! succeed! cancel! block! delay!].each do |event|
+        context "when we call pipeline.#{event}" do
+          it 'triggers a Jira synch worker' do
+            expect(worker).to receive(:perform_async).with(pipeline.id, Integer)
+
+            pipeline.send(event)
+          end
+
+          context 'the feature is disabled' do
+            it 'does not trigger a worker' do
+              stub_feature_flags(jira_sync_builds: false)
+
+              expect(worker).not_to receive(:perform_async)
+
+              pipeline.send(event)
+            end
+          end
+
+          context 'the feature is enabled for this project' do
+            it 'does trigger a worker' do
+              stub_feature_flags(jira_sync_builds: pipeline.project)
+
+              expect(worker).to receive(:perform_async)
+
+              pipeline.send(event)
+            end
+          end
+        end
+      end
+    end
+
     describe '#duration', :sidekiq_inline do
       context 'when multiple builds are finished' do
         before do
diff --git a/spec/services/clusters/aws/fetch_credentials_service_spec.rb b/spec/services/clusters/aws/fetch_credentials_service_spec.rb
index 4b9458d277b..0358ca1f535 100644
--- a/spec/services/clusters/aws/fetch_credentials_service_spec.rb
+++ b/spec/services/clusters/aws/fetch_credentials_service_spec.rb
@@ -81,5 +81,59 @@ RSpec.describe Clusters::Aws::FetchCredentialsService do
         expect { subject }.to raise_error(described_class::MissingRoleError, 'AWS provisioning role not configured')
       end
     end
+
+    context 'with an instance profile attached to an IAM role' do
+      let(:sts_client) { Aws::STS::Client.new(region: region, stub_responses: true) }
+      let(:provision_role) { create(:aws_role, user: user, region: 'custom-region') }
+
+      before do
+        stub_application_setting(eks_access_key_id: nil)
+        stub_application_setting(eks_secret_access_key: nil)
+
+        expect(Aws::STS::Client).to receive(:new)
+          .with(region: region)
+          .and_return(sts_client)
+
+        expect(Aws::AssumeRoleCredentials).to receive(:new)
+          .with(
+            client: sts_client,
+            role_arn: provision_role.role_arn,
+            role_session_name: session_name,
+            external_id: provision_role.role_external_id,
+            policy: session_policy
+          ).and_call_original
+      end
+
+      context 'provider is specified' do
+        let(:region) { provider.region }
+        let(:session_name) { "gitlab-eks-cluster-#{provider.cluster_id}-user-#{user.id}" }
+        let(:session_policy) { nil }
+
+        it 'returns credentials', :aggregate_failures do
+          expect(subject.access_key_id).to be_present
+          expect(subject.secret_access_key).to be_present
+          expect(subject.session_token).to be_present
+        end
+      end
+
+      context 'provider is not specifed' do
+        let(:provider) { nil }
+        let(:region) { provision_role.region }
+        let(:session_name) { "gitlab-eks-autofill-user-#{user.id}" }
+        let(:session_policy) { 'policy-document' }
+
+        before do
+          stub_file_read(Rails.root.join('vendor', 'aws', 'iam', 'eks_cluster_read_only_policy.json'), content: session_policy)
+        end
+
+        subject { described_class.new(provision_role, provider: provider).execute }
+
+        it 'returns credentials', :aggregate_failures do
+          expect(subject.access_key_id).to be_present
+          expect(subject.secret_access_key).to be_present
+          expect(subject.session_token).to be_present
+        end
+      end
+    end
   end
 end
diff --git a/spec/services/jira_connect/sync_service_spec.rb b/spec/services/jira_connect/sync_service_spec.rb
index 83088bb2e79..4b434348146 100644
--- a/spec/services/jira_connect/sync_service_spec.rb
+++ b/spec/services/jira_connect/sync_service_spec.rb
@@ -3,30 +3,23 @@
 require 'spec_helper'
 
 RSpec.describe JiraConnect::SyncService do
+  include AfterNextHelpers
+
   describe '#execute' do
     let_it_be(:project) { create(:project, :repository) }
-    let(:branches) { [project.repository.find_branch('master')] }
-    let(:commits) { project.commits_by(oids: %w[b83d6e3 5a62481]) }
-    let(:merge_requests) { [create(:merge_request, source_project: project, target_project: project)] }
+    let(:client) { Atlassian::JiraConnect::Client }
+    let(:info) { { a: 'Some', b: 'Info' } }
 
     subject do
-      described_class.new(project).execute(commits: commits, branches: branches, merge_requests: merge_requests)
+      described_class.new(project).execute(**info)
     end
 
     before do
       create(:jira_connect_subscription, namespace: project.namespace)
     end
 
-    def expect_jira_client_call(return_value = { 'status': 'success' })
-      expect_next_instance_of(Atlassian::JiraConnect::Client) do |instance|
-        expect(instance).to receive(:store_dev_info).with(
-          project: project,
-          commits: commits,
-          branches: [instance_of(Gitlab::Git::Branch)],
-          merge_requests: merge_requests,
-          update_sequence_id: anything
-        ).and_return(return_value)
-      end
+    def store_info(return_values = [{ 'status': 'success' }])
+      receive(:send_info).with(project: project, **info).and_return(return_values)
     end
 
     def expect_log(type, message)
@@ -41,20 +34,22 @@ RSpec.describe JiraConnect::SyncService do
     end
 
     it 'calls Atlassian::JiraConnect::Client#store_dev_info and logs the response' do
-      expect_jira_client_call
+      expect_next(client).to store_info
 
       expect_log(:info, { 'status': 'success' })
 
       subject
     end
 
-    context 'when request returns an error' do
+    context 'when a request returns an error' do
       it 'logs the response as an error' do
-        expect_jira_client_call({
-          'errorMessages' => ['some error message']
-        })
+        expect_next(client).to store_info([
+          { 'errorMessages' => ['some error message'] },
+          { 'rejectedBuilds' => ['x'] }
+        ])
 
         expect_log(:error, { 'errorMessages' => ['some error message'] })
+        expect_log(:error, { 'rejectedBuilds' => ['x'] })
 
         subject
       end
diff --git a/spec/support/atlassian/jira_connect/schemata.rb b/spec/support/atlassian/jira_connect/schemata.rb
new file mode 100644
index 00000000000..91f8fe0bb41
--- /dev/null
+++ b/spec/support/atlassian/jira_connect/schemata.rb
@@ -0,0 +1,83 @@
+# frozen_string_literal: true
+
+module Atlassian
+  module Schemata
+    def self.build_info
+      {
+        'type' => 'object',
+        'required' => %w(schemaVersion pipelineId buildNumber updateSequenceNumber displayName url state issueKeys testInfo references),
+        'properties' => {
+          'schemaVersion' => { 'type' => 'string', 'pattern' => '1.0' },
+          'pipelineId' => { 'type' => 'string' },
+          'buildNumber' => { 'type' => 'integer' },
+          'updateSequenceNumber' => { 'type' => 'integer' },
+          'displayName' => { 'type' => 'string' },
+          'url' => { 'type' => 'string' },
+          'state' => {
+            'type' => 'string',
+            'pattern' => '(pending|in_progress|successful|failed|cancelled)'
+          },
+          'issueKeys' => {
+            'type' => 'array',
+            'items' => { 'type' => 'string' },
+            'minItems' => 1
+          },
+          'testInfo' => {
+            'type' => 'object',
+            'required' => %w(totalNumber numberPassed numberFailed numberSkipped),
+            'properties' => {
+              'totalNumber' => { 'type' => 'integer' },
+              'numberFailed' => { 'type' => 'integer' },
+              'numberPassed' => { 'type' => 'integer' },
+              'numberSkipped' => { 'type' => 'integer' }
+            }
+          },
+          'references' => {
+            'type' => 'array',
+            'items' => {
+              'type' => 'object',
+              'required' => %w(commit ref),
+              'properties' => {
+                'commit' => {
+                  'type' => 'object',
+                  'required' => %w(id repositoryUri),
+                  'properties' => {
+                    'id' => { 'type' => 'string' },
+                    'repositoryUri' => { 'type' => 'string' }
+                  }
+                },
+                'ref' => {
+                  'type' => 'object',
+                  'required' => %w(name uri),
+                  'properties' => {
+                    'name' => { 'type' => 'string' },
+                    'uri' => { 'type' => 'string' }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    end
+
+    def self.build_info_payload
+      {
+        'type' => 'object',
+        'required' => %w(providerMetadata builds),
+        'properties' => {
+          'providerMetadata' => provider_metadata,
+          'builds' => { 'type' => 'array', 'items' => build_info }
+        }
+      }
+    end
+
+    def self.provider_metadata
+      {
+        'type' => 'object',
+        'required' => %w(product),
+        'properties' => { 'product' => { 'type' => 'string' } }
+      }
+    end
+  end
+end
diff --git a/spec/support/helpers/after_next_helpers.rb b/spec/support/helpers/after_next_helpers.rb
index a681a6b2393..0a7844fdd8f 100644
--- a/spec/support/helpers/after_next_helpers.rb
+++ b/spec/support/helpers/after_next_helpers.rb
@@ -30,7 +30,11 @@ module AfterNextHelpers
       msg = asserted ? :to : :not_to
       case level
       when :expect
-        expect_next_instance_of(klass, *args) { |instance| expect(instance).send(msg, condition) }
+        if asserted
+          expect_next_instance_of(klass, *args) { |instance| expect(instance).send(msg, condition) }
+        else
+          allow_next_instance_of(klass, *args) { |instance| expect(instance).send(msg, condition) }
+        end
       when :allow
         allow_next_instance_of(klass, *args) { |instance| allow(instance).send(msg, condition) }
       else
diff --git a/spec/support/helpers/next_instance_of.rb b/spec/support/helpers/next_instance_of.rb
index 7e10ff36887..a8e9ab2bafe 100644
--- a/spec/support/helpers/next_instance_of.rb
+++ b/spec/support/helpers/next_instance_of.rb
@@ -2,17 +2,26 @@
 
 module NextInstanceOf
   def expect_next_instance_of(klass, *new_args, &blk)
-    stub_new(expect(klass), *new_args, &blk)
+    stub_new(expect(klass), nil, *new_args, &blk)
+  end
+
+  def expect_next_instances_of(klass, number, *new_args, &blk)
+    stub_new(expect(klass), number, *new_args, &blk)
   end
 
   def allow_next_instance_of(klass, *new_args, &blk)
-    stub_new(allow(klass), *new_args, &blk)
+    stub_new(allow(klass), nil, *new_args, &blk)
+  end
+
+  def allow_next_instances_of(klass, number, *new_args, &blk)
+    stub_new(allow(klass), number, *new_args, &blk)
   end
 
   private
 
-  def stub_new(target, *new_args, &blk)
+  def stub_new(target, number, *new_args, &blk)
     receive_new = receive(:new)
+    receive_new.exactly(number).times if number
     receive_new.with(*new_args) if new_args.any?
 
     target.to receive_new.and_wrap_original do |method, *original_args|
diff --git a/spec/support/matchers/be_valid_json.rb b/spec/support/matchers/be_valid_json.rb
new file mode 100644
index 00000000000..f46c35c7198
--- /dev/null
+++ b/spec/support/matchers/be_valid_json.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+RSpec::Matchers.define :be_valid_json do
+  def according_to_schema(schema)
+    @schema = schema
+    self
+  end
+
+  match do |actual|
+    data = Gitlab::Json.parse(actual)
+
+    if @schema.present?
+      @validation_errors = JSON::Validator.fully_validate(@schema, data)
+      @validation_errors.empty?
+    else
+      data.present?
+    end
+  rescue JSON::ParserError => e
+    @error = e
+    false
+  end
+
+  def failure_message
+    if @error
+      "Parse failed with error: #{@error}"
+    elsif @validation_errors.present?
+      "Validation failed because #{@validation_errors.join(', and ')}"
+    else
+      "Parsing did not return any data"
+    end
+  end
+end
diff --git a/spec/support/shared_examples/boards/multiple_issue_boards_shared_examples.rb b/spec/support/shared_examples/boards/multiple_issue_boards_shared_examples.rb
index 38a5ed244c4..f89d52f81ad 100644
--- a/spec/support/shared_examples/boards/multiple_issue_boards_shared_examples.rb
+++ b/spec/support/shared_examples/boards/multiple_issue_boards_shared_examples.rb
@@ -85,7 +85,7 @@ RSpec.shared_examples 'multiple issue boards' do
 
       wait_for_requests
 
-      expect(page).to have_selector('.board', count: 5)
+      expect(page).to have_selector('.board', count: 3)
 
       in_boards_switcher_dropdown do
         click_link board.name
@@ -93,7 +93,7 @@ RSpec.shared_examples 'multiple issue boards' do
 
       wait_for_requests
 
-      expect(page).to have_selector('.board', count: 4)
+      expect(page).to have_selector('.board', count: 2)
     end
 
     it 'maintains sidebar state over board switch' do
diff --git a/spec/validators/json_schema_validator_spec.rb b/spec/validators/json_schema_validator_spec.rb
index 83eb0e2f3dd..1e9420c5422 100644
--- a/spec/validators/json_schema_validator_spec.rb
+++ b/spec/validators/json_schema_validator_spec.rb
@@ -29,6 +29,36 @@ RSpec.describe JsonSchemaValidator do
           expect(build_report_result.errors.full_messages).to eq(["Data must be a valid json schema"])
         end
       end
+
+      context 'when draft is > 4' do
+        let(:validator) { described_class.new(attributes: [:data], filename: "build_report_result_data", draft: 6) }
+
+        it 'uses JSONSchemer to perform validations' do
+          expect(JSONSchemer).to receive(:schema).with(Pathname.new(Rails.root.join('app', 'validators', 'json_schemas', 'build_report_result_data.json').to_s)).and_call_original
+
+          subject
+        end
+      end
+
+      context 'when draft is <= 4' do
+        let(:validator) { described_class.new(attributes: [:data], filename: "build_report_result_data", draft: 4) }
+
+        it 'uses JSON::Validator to perform validations' do
+          expect(JSON::Validator).to receive(:validate).with(Rails.root.join('app', 'validators', 'json_schemas', 'build_report_result_data.json').to_s, build_report_result.data)
+
+          subject
+        end
+      end
+
+      context 'when draft value is not provided' do
+        let(:validator) { described_class.new(attributes: [:data], filename: "build_report_result_data") }
+
+        it 'uses JSON::Validator to perform validations' do
+          expect(JSON::Validator).to receive(:validate).with(Rails.root.join('app', 'validators', 'json_schemas', 'build_report_result_data.json').to_s, build_report_result.data)
+
+          subject
+        end
+      end
     end
 
     context 'when filename is not set' do
diff --git a/spec/workers/jira_connect/sync_branch_worker_spec.rb b/spec/workers/jira_connect/sync_branch_worker_spec.rb
index 4aa2f89de7b..c8453064b0d 100644
--- a/spec/workers/jira_connect/sync_branch_worker_spec.rb
+++ b/spec/workers/jira_connect/sync_branch_worker_spec.rb
@@ -3,6 +3,8 @@
 require 'spec_helper'
 
 RSpec.describe JiraConnect::SyncBranchWorker do
+  include AfterNextHelpers
+
   describe '#perform' do
     let_it_be(:group) { create(:group) }
     let_it_be(:project) { create(:project, :repository, group: group) }
@@ -67,7 +69,7 @@ RSpec.describe JiraConnect::SyncBranchWorker do
 
     context 'with update_sequence_id' do
       let(:update_sequence_id) { 1 }
-      let(:request_url) { 'https://sample.atlassian.net/rest/devinfo/0.10/bulk' }
+      let(:request_path) { '/rest/devinfo/0.10/bulk' }
       let(:request_body) do
         {
           repositories: [
@@ -78,14 +80,13 @@ RSpec.describe JiraConnect::SyncBranchWorker do
               update_sequence_id: update_sequence_id
             )
           ]
-        }.to_json
+        }
       end
 
       subject { described_class.new.perform(project_id, branch_name, commit_shas, update_sequence_id) }
 
       it 'sends the reqeust with custom update_sequence_id' do
-        expect(Atlassian::JiraConnect::Client).to receive(:post)
-          .with(URI(request_url), headers: anything, body: request_body)
+        expect_next(Atlassian::JiraConnect::Client).to receive(:post).with(request_path, request_body)
 
         subject
       end
diff --git a/spec/workers/jira_connect/sync_builds_worker_spec.rb b/spec/workers/jira_connect/sync_builds_worker_spec.rb
new file mode 100644
index 00000000000..7c58803d778
--- /dev/null
+++ b/spec/workers/jira_connect/sync_builds_worker_spec.rb
@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe ::JiraConnect::SyncBuildsWorker do
+  include AfterNextHelpers
+  include ServicesHelper
+
+  describe '#perform' do
+    let_it_be(:pipeline) { create(:ci_pipeline) }
+
+    let(:sequence_id) { Random.random_number(1..10_000) }
+    let(:pipeline_id) { pipeline.id }
+
+    subject { described_class.new.perform(pipeline_id, sequence_id) }
+
+    context 'when pipeline exists' do
+      it 'calls the Jira sync service' do
+        expect_next(::JiraConnect::SyncService, pipeline.project)
+          .to receive(:execute).with(pipelines: contain_exactly(pipeline), update_sequence_id: sequence_id)
+
+        subject
+      end
+    end
+
+    context 'when pipeline does not exist' do
+      let(:pipeline_id) { non_existing_record_id }
+
+      it 'does not call the sync service' do
+        expect_next(::JiraConnect::SyncService).not_to receive(:execute)
+
+        subject
+      end
+    end
+
+    context 'when the feature flag is disabled' do
+      before do
+        stub_feature_flags(jira_sync_builds: false)
+      end
+
+      it 'does not call the sync service' do
+        expect_next(::JiraConnect::SyncService).not_to receive(:execute)
+
+        subject
+      end
+    end
+
+    context 'when the feature flag is enabled for this project' do
+      before do
+        stub_feature_flags(jira_sync_builds: pipeline.project)
+      end
+
+      it 'calls the sync service' do
+        expect_next(::JiraConnect::SyncService).to receive(:execute)
+
+        subject
+      end
+    end
+  end
+end
diff --git a/spec/workers/jira_connect/sync_merge_request_worker_spec.rb b/spec/workers/jira_connect/sync_merge_request_worker_spec.rb
index b3c0db4f260..1a40aa2b3ad 100644
--- a/spec/workers/jira_connect/sync_merge_request_worker_spec.rb
+++ b/spec/workers/jira_connect/sync_merge_request_worker_spec.rb
@@ -3,6 +3,8 @@
 require 'spec_helper'
 
 RSpec.describe JiraConnect::SyncMergeRequestWorker do
+  include AfterNextHelpers
+
   describe '#perform' do
     let_it_be(:group) { create(:group) }
     let_it_be(:project) { create(:project, :repository, group: group) }
@@ -33,7 +35,7 @@ RSpec.describe JiraConnect::SyncMergeRequestWorker do
 
     context 'with update_sequence_id' do
       let(:update_sequence_id) { 1 }
-      let(:request_url) { 'https://sample.atlassian.net/rest/devinfo/0.10/bulk' }
+      let(:request_path) { '/rest/devinfo/0.10/bulk' }
       let(:request_body) do
         {
           repositories: [
@@ -43,14 +45,13 @@ RSpec.describe JiraConnect::SyncMergeRequestWorker do
               update_sequence_id: update_sequence_id
             )
           ]
-        }.to_json
+        }
       end
 
       subject { described_class.new.perform(merge_request_id, update_sequence_id) }
 
       it 'sends the request with custom update_sequence_id' do
-        expect(Atlassian::JiraConnect::Client).to receive(:post)
-          .with(URI(request_url), headers: anything, body: request_body)
+        expect_next(Atlassian::JiraConnect::Client).to receive(:post).with(request_path, request_body)
 
         subject
       end
diff --git a/spec/workers/jira_connect/sync_project_worker_spec.rb b/spec/workers/jira_connect/sync_project_worker_spec.rb
index 25210de828c..f7fa565d534 100644
--- a/spec/workers/jira_connect/sync_project_worker_spec.rb
+++ b/spec/workers/jira_connect/sync_project_worker_spec.rb
@@ -36,7 +36,7 @@ RSpec.describe JiraConnect::SyncProjectWorker, factory_default: :keep do
     end
 
     it_behaves_like 'an idempotent worker' do
-      let(:request_url) { 'https://sample.atlassian.net/rest/devinfo/0.10/bulk' }
+      let(:request_path) { '/rest/devinfo/0.10/bulk' }
       let(:request_body) do
         {
           repositories: [
@@ -46,13 +46,13 @@ RSpec.describe JiraConnect::SyncProjectWorker, factory_default: :keep do
               update_sequence_id: update_sequence_id
             )
           ]
-        }.to_json
+        }
       end
 
       it 'sends the request with custom update_sequence_id' do
-        expect(Atlassian::JiraConnect::Client).to receive(:post)
-          .exactly(IdempotentWorkerHelper::WORKER_EXEC_TIMES).times
-          .with(URI(request_url), headers: anything, body: request_body)
+        allow_next_instances_of(Atlassian::JiraConnect::Client, IdempotentWorkerHelper::WORKER_EXEC_TIMES) do |client|
+          expect(client).to receive(:post).with(request_path, request_body)
+        end
 
         subject
       end