From a93bf027c2619af8c11b030414c339346f13ead6 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Tue, 7 Jul 2020 15:08:49 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .gitlab/ci/rules.gitlab-ci.yml                |   4 +-
 .../ide/components/branches/item.vue          |   2 +-
 .../components/commit_sidebar/empty_state.vue |   2 +-
 .../commit_sidebar/success_message.vue        |   2 +-
 .../ide/components/file_templates/bar.vue     |   2 +-
 .../javascripts/ide/components/jobs/item.vue  |   2 +-
 .../ide/components/merge_requests/item.vue    |   2 +-
 .../ide/components/merge_requests/list.vue    |   2 +-
 app/assets/javascripts/ide/lib/editor.js      |   4 +-
 .../javascripts/ide/lib/schemas/index.js      |   4 +
 .../javascripts/ide/lib/schemas/json/index.js |   8 ++
 .../ide/lib/schemas/yaml/gitlab_ci.js         |   4 +
 .../javascripts/ide/lib/schemas/yaml/index.js |  12 ++
 app/assets/javascripts/ide/utils.js           |  15 ++-
 .../components/issuable_list_root_app.vue     |  12 +-
 .../get_issues_list_details.query.graphql     |   5 +-
 .../issue_show/components/edit_actions.vue    |   2 +-
 .../components/test_reports/test_summary.vue  |   2 +-
 .../reports/components/report_item.vue        |   2 +-
 .../reports/components/summary_row.vue        |   2 +-
 .../components/mr_collapsible_extension.vue   |   2 +-
 .../mr_widget_expandable_section.vue          |   2 +-
 .../components/mr_widget_icon.vue             |   2 +-
 .../components/mr_widget_pipeline.vue         |   2 +-
 .../components/mr_widget_status_icon.vue      |   2 +-
 .../components/states/commits_header.vue      |   2 +-
 .../components/states/squash_before_merge.vue |  13 ++-
 .../components/terraform/terraform_plan.vue   |   2 +-
 .../components/file_finder/index.vue          |   2 +-
 .../markdown/suggestion_diff_header.vue       |  24 ++--
 .../services/build_custom_renderer.js         |  12 +-
 .../renderers/render_identifier_paragraph.js  |  16 +++
 .../renderers/render_identifier_text.js       |  81 --------------
 app/assets/stylesheets/framework/common.scss  |   1 -
 app/helpers/application_settings_helper.rb    |   8 +-
 .../application_setting_implementation.rb     |   8 +-
 app/models/project_statistics.rb              |   7 +-
 .../_import_export_limits.html.haml           |  34 ++++++
 .../application_settings/network.html.haml    |  11 ++
 .../ci/variables/_variable_row.html.haml      |   4 +-
 app/views/dashboard/todos/index.html.haml     |   2 +-
 app/views/groups/_home_panel.html.haml        |   2 +-
 app/views/projects/_home_panel.html.haml      |   2 +-
 .../projects/forks/_fork_button.html.haml     |   4 +-
 app/views/projects/forks/new.html.haml        |   2 +-
 app/views/shared/projects/_project.html.haml  |   4 +-
 .../unreleased/218472-gitlab-ci-linting.yml   |   5 +
 ...indicate-temporarily-increased-storage.yml |   5 +
 ...-count-to-imported-jira-issues-message.yml |   5 +
 ...rt-rate-limits-as-application-settings.yml |   5 +
 .../unreleased/id-fix-timeout-query.yml       |   5 +
 .../ps-find-remote-is-storage-scoped.yml      |   5 +
 config/gitlab.yml.example                     |   7 +-
 config/initializers/1_settings.rb             |   3 -
 config/plugins/monaco_webpack.js              |  17 +++
 config/webpack.config.js                      |   4 +-
 ...0225160300_steal_encrypt_runners_tokens.rb |  19 ----
 ...t_export_limits_to_application_settings.rb |  15 +++
 ...ry_storage_increase_to_namespace_limits.rb |   9 ++
 db/structure.sql                              |  12 +-
 .../monitoring/prometheus/gitlab_metrics.md   |   4 +-
 doc/api/groups.md                             |   8 +-
 doc/api/users.md                              |   8 +-
 doc/integration/saml.md                       |   9 +-
 doc/policy/maintenance.md                     |  28 +++--
 doc/security/rate_limits.md                   |   1 +
 .../img/import_export_rate_limits_v13_2.png   | Bin 0 -> 54802 bytes
 .../settings/import_export_rate_limits.md     |  32 ++++++
 .../settings/rate_limit_on_issues_creation.md |   2 +-
 .../repository/repository_mirroring.md        |   4 +-
 jest.config.base.js                           |   4 +-
 lib/gitlab/application_rate_limiter.rb        |  24 ++--
 .../background_migration/digest_column.rb     |  25 -----
 .../background_migration/encrypt_columns.rb   | 104 ------------------
 .../encrypt_runners_tokens.rb                 |  32 ------
 .../models/encrypt_columns/namespace.rb       |  28 -----
 .../models/encrypt_columns/project.rb         |  28 -----
 .../models/encrypt_columns/runner.rb          |  28 -----
 .../models/encrypt_columns/settings.rb        |  37 -------
 .../models/encrypt_columns/web_hook.rb        |  28 -----
 lib/gitlab/code_navigation_path.rb            |   2 +-
 lib/gitlab/gitaly_client/remote_service.rb    |   6 +-
 lib/gitlab/instrumentation/redis_base.rb      |   4 +-
 lib/quality/test_level.rb                     |   8 ++
 locale/gitlab.pot                             |  40 +++++--
 package.json                                  |   8 +-
 .../changing_repository_storage_spec.rb       |   2 +-
 spec/controllers/groups_controller_spec.rb    |   4 +-
 spec/controllers/projects_controller_spec.rb  |   4 +-
 .../frontend/__mocks__/monaco-editor/index.js |   2 +
 .../ide/components/repo_editor_spec.js        |   2 +
 spec/frontend/ide/lib/editor_spec.js          |   8 ++
 spec/frontend/ide/utils_spec.js               |  52 +++++++++
 .../components/issuable_list_root_app_spec.js |   3 +-
 .../mr_widget_squash_before_merge_spec.js     |  25 ++++-
 .../markdown/suggestion_diff_header_spec.js   |   7 +-
 .../rich_content_editor/mock_data.js          |  31 ++----
 .../render_identifier_paragraph_spec.js       |  55 +++++++++
 .../renderers/render_identifier_text_spec.js  |  61 ----------
 ...d_merge_request_diff_commits_count_spec.rb |   6 +-
 .../archive_legacy_traces_spec.rb             |   2 +-
 ...ckfill_hashed_project_repositories_spec.rb |   2 +-
 ...ckfill_legacy_project_repositories_spec.rb |   2 +-
 ...ll_project_fullpath_in_repo_config_spec.rb |   2 +-
 .../backfill_snippet_repositories_spec.rb     |   6 +-
 .../digest_column_spec.rb                     |  46 --------
 .../encrypt_columns_spec.rb                   |  96 ----------------
 .../encrypt_runners_tokens_spec.rb            |  79 -------------
 .../fix_cross_project_label_links_spec.rb     |   2 +-
 .../migrate_build_stage_spec.rb               |   6 +-
 .../migrate_legacy_artifacts_spec.rb          |   2 +-
 .../migrate_stage_index_spec.rb               |  32 +++---
 ...cluster_kubernetes_namespace_table_spec.rb |   2 +-
 .../untracked_file_spec.rb                    |   3 +-
 .../populate_untracked_uploads_spec.rb        |   3 +-
 .../prepare_untracked_uploads_spec.rb         |   2 +-
 .../remove_restricted_todos_spec.rb           |  14 ++-
 .../schedule_calculate_wiki_sizes_spec.rb     |  64 -----------
 ...nfidential_note_events_on_services_spec.rb |   2 +-
 ...nfidential_note_events_on_webhooks_spec.rb |   2 +-
 spec/lib/gitlab/code_navigation_path_spec.rb  |   2 +-
 .../gitaly_client/remote_service_spec.rb      |   3 +
 spec/lib/quality/test_level_spec.rb           |   4 +-
 spec/migrations/active_record/schema_spec.rb  |   2 +-
 .../schedule_calculate_wiki_sizes_spec.rb     |  60 ++++++++++
 spec/requests/api/group_export_spec.rb        |   8 +-
 spec/requests/api/project_export_spec.rb      |   4 +-
 .../import/gitlab_groups_controller_spec.rb   |   2 +
 .../background_migrations_matchers.rb         |   3 +-
 yarn.lock                                     |  60 ++++------
 130 files changed, 725 insertions(+), 1013 deletions(-)
 create mode 100644 app/assets/javascripts/ide/lib/schemas/index.js
 create mode 100644 app/assets/javascripts/ide/lib/schemas/json/index.js
 create mode 100644 app/assets/javascripts/ide/lib/schemas/yaml/gitlab_ci.js
 create mode 100644 app/assets/javascripts/ide/lib/schemas/yaml/index.js
 create mode 100644 app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph.js
 delete mode 100644 app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text.js
 create mode 100644 app/views/admin/application_settings/_import_export_limits.html.haml
 create mode 100644 changelogs/unreleased/218472-gitlab-ci-linting.yml
 create mode 100644 changelogs/unreleased/227054-eng-add-db-column-to-indicate-temporarily-increased-storage.yml
 create mode 100644 changelogs/unreleased/cngo-add-count-to-imported-jira-issues-message.yml
 create mode 100644 changelogs/unreleased/georgekoltsov-import-export-rate-limits-as-application-settings.yml
 create mode 100644 changelogs/unreleased/id-fix-timeout-query.yml
 create mode 100644 changelogs/unreleased/ps-find-remote-is-storage-scoped.yml
 create mode 100644 config/plugins/monaco_webpack.js
 delete mode 100644 db/migrate/20190225160300_steal_encrypt_runners_tokens.rb
 create mode 100644 db/migrate/20200701093859_add_import_export_limits_to_application_settings.rb
 create mode 100644 db/migrate/20200706170536_add_temporary_storage_increase_to_namespace_limits.rb
 create mode 100644 doc/user/admin_area/settings/img/import_export_rate_limits_v13_2.png
 create mode 100644 doc/user/admin_area/settings/import_export_rate_limits.md
 delete mode 100644 lib/gitlab/background_migration/digest_column.rb
 delete mode 100644 lib/gitlab/background_migration/encrypt_columns.rb
 delete mode 100644 lib/gitlab/background_migration/encrypt_runners_tokens.rb
 delete mode 100644 lib/gitlab/background_migration/models/encrypt_columns/namespace.rb
 delete mode 100644 lib/gitlab/background_migration/models/encrypt_columns/project.rb
 delete mode 100644 lib/gitlab/background_migration/models/encrypt_columns/runner.rb
 delete mode 100644 lib/gitlab/background_migration/models/encrypt_columns/settings.rb
 delete mode 100644 lib/gitlab/background_migration/models/encrypt_columns/web_hook.rb
 create mode 100644 spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph_spec.js
 delete mode 100644 spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text_spec.js
 delete mode 100644 spec/lib/gitlab/background_migration/digest_column_spec.rb
 delete mode 100644 spec/lib/gitlab/background_migration/encrypt_columns_spec.rb
 delete mode 100644 spec/lib/gitlab/background_migration/encrypt_runners_tokens_spec.rb
 delete mode 100644 spec/lib/gitlab/background_migration/schedule_calculate_wiki_sizes_spec.rb
 create mode 100644 spec/migrations/schedule_calculate_wiki_sizes_spec.rb

diff --git a/.gitlab/ci/rules.gitlab-ci.yml b/.gitlab/ci/rules.gitlab-ci.yml
index 7b044ac4bfb..4a65e9950cd 100644
--- a/.gitlab/ci/rules.gitlab-ci.yml
+++ b/.gitlab/ci/rules.gitlab-ci.yml
@@ -118,8 +118,8 @@
   - "{,ee/}spec/**/*.rb"
 
 .db-patterns: &db-patterns
-  - "{,ee/}{db}/**/*"
-  - "{,ee}/spec/{db,migrations}/**/*"
+  - "{,ee/}{,spec/}{db,migrations}/**/*"
+  - "{,ee/}{,spec/}lib/{,ee/}gitlab/background_migration/**/*"
 
 .backstage-patterns: &backstage-patterns
   - "Dangerfile"
diff --git a/app/assets/javascripts/ide/components/branches/item.vue b/app/assets/javascripts/ide/components/branches/item.vue
index e7f4cd796b5..49744d573da 100644
--- a/app/assets/javascripts/ide/components/branches/item.vue
+++ b/app/assets/javascripts/ide/components/branches/item.vue
@@ -33,7 +33,7 @@ export default {
 
 <template>
   <a :href="branchHref" class="btn-link d-flex align-items-center">
-    <span class="d-flex append-right-default ide-search-list-current-icon">
+    <span class="d-flex gl-mr-3 ide-search-list-current-icon">
       <icon v-if="isActive" :size="18" name="mobile-issue-close" />
     </span>
     <span>
diff --git a/app/assets/javascripts/ide/components/commit_sidebar/empty_state.vue b/app/assets/javascripts/ide/components/commit_sidebar/empty_state.vue
index 6a399fc352c..3ffbcbf99e8 100644
--- a/app/assets/javascripts/ide/components/commit_sidebar/empty_state.vue
+++ b/app/assets/javascripts/ide/components/commit_sidebar/empty_state.vue
@@ -12,7 +12,7 @@ export default {
   <div v-if="!lastCommitMsg" class="multi-file-commit-panel-section ide-commit-empty-state">
     <div class="ide-commit-empty-state-container">
       <div class="svg-content svg-80"><img :src="noChangesStateSvgPath" /></div>
-      <div class="append-right-default gl-ml-3">
+      <div class="gl-mr-3 gl-ml-3">
         <div class="text-content text-center">
           <h4>{{ __('No changes') }}</h4>
           <p>{{ __('Edit files in the editor and commit changes here') }}</p>
diff --git a/app/assets/javascripts/ide/components/commit_sidebar/success_message.vue b/app/assets/javascripts/ide/components/commit_sidebar/success_message.vue
index 35c8e5fb479..327b0b8172f 100644
--- a/app/assets/javascripts/ide/components/commit_sidebar/success_message.vue
+++ b/app/assets/javascripts/ide/components/commit_sidebar/success_message.vue
@@ -13,7 +13,7 @@ export default {
     <div class="svg-content svg-80">
       <img :src="committedStateSvgPath" :alt="s__('IDE|Successful commit')" />
     </div>
-    <div class="append-right-default gl-ml-3">
+    <div class="gl-mr-3 gl-ml-3">
       <div class="text-content text-center">
         <h4>{{ __('All changes are committed') }}</h4>
         <p v-html="lastCommitMsg"></p>
diff --git a/app/assets/javascripts/ide/components/file_templates/bar.vue b/app/assets/javascripts/ide/components/file_templates/bar.vue
index d459e3b43d3..b6a57d1b6e6 100644
--- a/app/assets/javascripts/ide/components/file_templates/bar.vue
+++ b/app/assets/javascripts/ide/components/file_templates/bar.vue
@@ -48,7 +48,7 @@ export default {
 
 <template>
   <div class="d-flex align-items-center ide-file-templates qa-file-templates-bar">
-    <strong class="append-right-default"> {{ __('File templates') }} </strong>
+    <strong class="gl-mr-3"> {{ __('File templates') }} </strong>
     <dropdown
       :data="templateTypes"
       :label="selectedTemplateType.name || __('Choose a type...')"
diff --git a/app/assets/javascripts/ide/components/jobs/item.vue b/app/assets/javascripts/ide/components/jobs/item.vue
index be8bf77bba0..db3630bc1d1 100644
--- a/app/assets/javascripts/ide/components/jobs/item.vue
+++ b/app/assets/javascripts/ide/components/jobs/item.vue
@@ -26,7 +26,7 @@ export default {
 
 <template>
   <div class="ide-job-item">
-    <job-description :job="job" class="append-right-default" />
+    <job-description :job="job" class="gl-mr-3" />
     <div class="ml-auto align-self-center">
       <button v-if="job.started" type="button" class="btn btn-default btn-sm" @click="clickViewLog">
         {{ __('View log') }}
diff --git a/app/assets/javascripts/ide/components/merge_requests/item.vue b/app/assets/javascripts/ide/components/merge_requests/item.vue
index 3f060392686..8b7b8d5a91c 100644
--- a/app/assets/javascripts/ide/components/merge_requests/item.vue
+++ b/app/assets/javascripts/ide/components/merge_requests/item.vue
@@ -40,7 +40,7 @@ export default {
 
 <template>
   <a :href="mergeRequestHref" class="btn-link d-flex align-items-center">
-    <span class="d-flex append-right-default ide-search-list-current-icon">
+    <span class="d-flex gl-mr-3 ide-search-list-current-icon">
       <icon v-if="isActive" :size="18" name="mobile-issue-close" />
     </span>
     <span>
diff --git a/app/assets/javascripts/ide/components/merge_requests/list.vue b/app/assets/javascripts/ide/components/merge_requests/list.vue
index bf2a33be653..af45d88b84a 100644
--- a/app/assets/javascripts/ide/components/merge_requests/list.vue
+++ b/app/assets/javascripts/ide/components/merge_requests/list.vue
@@ -102,7 +102,7 @@ export default {
                 class="btn-link d-flex align-items-center"
                 @click.stop="setSearchType(searchType)"
               >
-                <span class="d-flex append-right-default ide-search-list-current-icon">
+                <span class="d-flex gl-mr-3 ide-search-list-current-icon">
                   <icon :size="18" name="search" />
                 </span>
                 <span>{{ searchType.label }}</span>
diff --git a/app/assets/javascripts/ide/lib/editor.js b/app/assets/javascripts/ide/lib/editor.js
index 4dfc27117c0..a70611413ae 100644
--- a/app/assets/javascripts/ide/lib/editor.js
+++ b/app/assets/javascripts/ide/lib/editor.js
@@ -8,9 +8,10 @@ import ModelManager from './common/model_manager';
 import { editorOptions, defaultEditorOptions, defaultDiffEditorOptions } from './editor_options';
 import { themes } from './themes';
 import languages from './languages';
+import schemas from './schemas';
 import keymap from './keymap.json';
 import { clearDomElement } from '~/editor/utils';
-import { registerLanguages } from '../utils';
+import { registerLanguages, registerSchemas } from '../utils';
 
 function setupThemes() {
   themes.forEach(theme => {
@@ -44,6 +45,7 @@ export default class Editor {
 
     setupThemes();
     registerLanguages(...languages);
+    registerSchemas(...schemas);
 
     this.debouncedUpdate = debounce(() => {
       this.updateDimensions();
diff --git a/app/assets/javascripts/ide/lib/schemas/index.js b/app/assets/javascripts/ide/lib/schemas/index.js
new file mode 100644
index 00000000000..38a2f81921b
--- /dev/null
+++ b/app/assets/javascripts/ide/lib/schemas/index.js
@@ -0,0 +1,4 @@
+import json from './json';
+import yaml from './yaml';
+
+export default [json, yaml];
diff --git a/app/assets/javascripts/ide/lib/schemas/json/index.js b/app/assets/javascripts/ide/lib/schemas/json/index.js
new file mode 100644
index 00000000000..900d5442bec
--- /dev/null
+++ b/app/assets/javascripts/ide/lib/schemas/json/index.js
@@ -0,0 +1,8 @@
+export default {
+  language: 'json',
+  options: {
+    validate: true,
+    enableSchemaRequest: true,
+    schemas: [],
+  },
+};
diff --git a/app/assets/javascripts/ide/lib/schemas/yaml/gitlab_ci.js b/app/assets/javascripts/ide/lib/schemas/yaml/gitlab_ci.js
new file mode 100644
index 00000000000..af20744abb3
--- /dev/null
+++ b/app/assets/javascripts/ide/lib/schemas/yaml/gitlab_ci.js
@@ -0,0 +1,4 @@
+export default {
+  uri: 'https://json.schemastore.org/gitlab-ci',
+  fileMatch: ['*.gitlab-ci.yml'],
+};
diff --git a/app/assets/javascripts/ide/lib/schemas/yaml/index.js b/app/assets/javascripts/ide/lib/schemas/yaml/index.js
new file mode 100644
index 00000000000..e3fc406df4b
--- /dev/null
+++ b/app/assets/javascripts/ide/lib/schemas/yaml/index.js
@@ -0,0 +1,12 @@
+import gitlabCi from './gitlab_ci';
+
+export default {
+  language: 'yaml',
+  options: {
+    validate: true,
+    enableSchemaRequest: true,
+    hover: true,
+    completion: true,
+    schemas: [gitlabCi],
+  },
+};
diff --git a/app/assets/javascripts/ide/utils.js b/app/assets/javascripts/ide/utils.js
index c28a2bd9f1d..9ec7b2c06ce 100644
--- a/app/assets/javascripts/ide/utils.js
+++ b/app/assets/javascripts/ide/utils.js
@@ -66,7 +66,7 @@ export const trimPathComponents = path =>
     .join('/');
 
 export function registerLanguages(def, ...defs) {
-  if (defs.length) defs.forEach(lang => registerLanguages(lang));
+  defs.forEach(lang => registerLanguages(lang));
 
   const languageId = def.id;
 
@@ -75,6 +75,19 @@ export function registerLanguages(def, ...defs) {
   languages.setLanguageConfiguration(languageId, def.conf);
 }
 
+export function registerSchemas({ language, options }, ...schemas) {
+  schemas.forEach(schema => registerSchemas(schema));
+
+  const defaults = {
+    json: languages.json.jsonDefaults,
+    yaml: languages.yaml.yamlDefaults,
+  };
+
+  if (defaults[language]) {
+    defaults[language].setDiagnosticsOptions(options);
+  }
+}
+
 export const otherSide = side => (side === SIDE_RIGHT ? SIDE_LEFT : SIDE_RIGHT);
 
 export function trimTrailingWhitespace(content) {
diff --git a/app/assets/javascripts/issuables_list/components/issuable_list_root_app.vue b/app/assets/javascripts/issuables_list/components/issuable_list_root_app.vue
index 49a89d15c35..f859384916b 100644
--- a/app/assets/javascripts/issuables_list/components/issuable_list_root_app.vue
+++ b/app/assets/javascripts/issuables_list/components/issuable_list_root_app.vue
@@ -1,5 +1,7 @@
 <script>
 import { GlAlert, GlLabel } from '@gitlab/ui';
+import { last } from 'lodash';
+import { n__ } from '~/locale';
 import getIssuesListDetailsQuery from '../queries/get_issues_list_details.query.graphql';
 import {
   calculateJiraImportLabel,
@@ -47,6 +49,7 @@ export default {
         };
       },
       update: ({ project }) => ({
+        importedIssuesCount: last(project.jiraImports.nodes)?.importedIssuesCount,
         isInProgress: isInProgress(project.jiraImportStatus),
         isFinished: isFinished(project.jiraImportStatus),
         label: calculateJiraImportLabel(
@@ -60,6 +63,13 @@ export default {
     },
   },
   computed: {
+    finishedMessage() {
+      return n__(
+        '%d issue successfully imported with the label',
+        '%d issues successfully imported with the label',
+        this.jiraImport.importedIssuesCount,
+      );
+    },
     labelTarget() {
       return `${this.issuesPath}?label_name[]=${encodeURIComponent(this.jiraImport.label.title)}`;
     },
@@ -87,7 +97,7 @@ export default {
       {{ __('Import in progress. Refresh page to see newly added issues.') }}
     </gl-alert>
     <gl-alert v-if="shouldShowFinishedAlert" variant="success" @dismiss="hideFinishedAlert">
-      {{ __('Issues successfully imported with the label') }}
+      {{ finishedMessage }}
       <gl-label
         :background-color="jiraImport.label.color"
         scoped
diff --git a/app/assets/javascripts/issuables_list/queries/get_issues_list_details.query.graphql b/app/assets/javascripts/issuables_list/queries/get_issues_list_details.query.graphql
index b62b9b2af60..8f9b888d19b 100644
--- a/app/assets/javascripts/issuables_list/queries/get_issues_list_details.query.graphql
+++ b/app/assets/javascripts/issuables_list/queries/get_issues_list_details.query.graphql
@@ -1,5 +1,3 @@
-#import "~/jira_import/queries/jira_import.fragment.graphql"
-
 query($fullPath: ID!) {
   project(fullPath: $fullPath) {
     issues {
@@ -15,7 +13,8 @@ query($fullPath: ID!) {
     jiraImportStatus
     jiraImports {
       nodes {
-        ...JiraImport
+        importedIssuesCount
+        jiraProjectKey
       }
     }
   }
diff --git a/app/assets/javascripts/issue_show/components/edit_actions.vue b/app/assets/javascripts/issue_show/components/edit_actions.vue
index 6c252a1eca4..4ee44e50d2f 100644
--- a/app/assets/javascripts/issue_show/components/edit_actions.vue
+++ b/app/assets/javascripts/issue_show/components/edit_actions.vue
@@ -81,7 +81,7 @@ export default {
       v-if="shouldShowDeleteButton"
       :class="{ disabled: deleteLoading }"
       :disabled="deleteLoading"
-      class="btn btn-danger float-right append-right-default qa-delete-button"
+      class="btn btn-danger float-right gl-mr-3 qa-delete-button"
       type="button"
       @click="deleteIssuable"
     >
diff --git a/app/assets/javascripts/pipelines/components/test_reports/test_summary.vue b/app/assets/javascripts/pipelines/components/test_reports/test_summary.vue
index 67646c537bd..a71dc65e07e 100644
--- a/app/assets/javascripts/pipelines/components/test_reports/test_summary.vue
+++ b/app/assets/javascripts/pipelines/components/test_reports/test_summary.vue
@@ -72,7 +72,7 @@ export default {
         <gl-deprecated-button
           v-if="showBack"
           size="sm"
-          class="append-right-default js-back-button"
+          class="gl-mr-3 js-back-button"
           @click="onBackClick"
         >
           <icon name="angle-left" />
diff --git a/app/assets/javascripts/reports/components/report_item.vue b/app/assets/javascripts/reports/components/report_item.vue
index 51062cd7928..1b47d03aa01 100644
--- a/app/assets/javascripts/reports/components/report_item.vue
+++ b/app/assets/javascripts/reports/components/report_item.vue
@@ -52,7 +52,7 @@ export default {
       v-if="showReportSectionStatusIcon"
       :status="status"
       :status-icon-size="statusIconSize"
-      class="append-right-default"
+      class="gl-mr-3"
     />
 
     <component :is="component" v-if="component" :issue="issue" :status="status" :is-new="isNew" />
diff --git a/app/assets/javascripts/reports/components/summary_row.vue b/app/assets/javascripts/reports/components/summary_row.vue
index b9fc902cd3a..65efc24e968 100644
--- a/app/assets/javascripts/reports/components/summary_row.vue
+++ b/app/assets/javascripts/reports/components/summary_row.vue
@@ -45,7 +45,7 @@ export default {
 </script>
 <template>
   <div class="report-block-list-issue report-block-list-issue-parent align-items-center">
-    <div class="report-block-list-icon append-right-default">
+    <div class="report-block-list-icon gl-mr-3">
       <gl-loading-icon
         v-if="statusIcon === 'loading'"
         css-class="report-block-list-loading-icon"
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/mr_collapsible_extension.vue b/app/assets/javascripts/vue_merge_request_widget/components/mr_collapsible_extension.vue
index 6faa0eeab98..24174c29d51 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/mr_collapsible_extension.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/mr_collapsible_extension.vue
@@ -59,7 +59,7 @@ export default {
 
       <template v-else>
         <button
-          class="btn-blank btn s32 square append-right-default"
+          class="btn-blank btn s32 square gl-mr-3"
           type="button"
           :aria-label="ariaLabel"
           :disabled="isLoading"
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_expandable_section.vue b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_expandable_section.vue
index fd9a370fe05..fd999540f4a 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_expandable_section.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_expandable_section.vue
@@ -46,7 +46,7 @@ export default {
   <div>
     <div class="mr-widget-body gl-display-flex">
       <span
-        class="gl-display-flex gl-align-items-center gl-justify-content-center append-right-default gl-align-self-start gl-mt-1"
+        class="gl-display-flex gl-align-items-center gl-justify-content-center gl-mr-3 gl-align-self-start gl-mt-1"
       >
         <gl-icon :name="iconName" :size="24" />
       </span>
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_icon.vue b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_icon.vue
index 57d4d8b7ae6..e1659d9a167 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_icon.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_icon.vue
@@ -13,7 +13,7 @@ export default {
 </script>
 
 <template>
-  <div class="circle-icon-container append-right-default align-self-start align-self-lg-center">
+  <div class="circle-icon-container gl-mr-3 align-self-start align-self-lg-center">
     <icon :name="name" :size="24" />
   </div>
 </template>
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_pipeline.vue b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_pipeline.vue
index db0f225da8f..3c468adc176 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_pipeline.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_pipeline.vue
@@ -129,7 +129,7 @@ export default {
       <div class="media-body gl-ml-3" v-html="errorText"></div>
     </template>
     <template v-else-if="hasPipeline">
-      <a :href="status.details_path" class="align-self-start append-right-default">
+      <a :href="status.details_path" class="align-self-start gl-mr-3">
         <ci-icon :status="status" :size="24" :borderless="true" class="add-border" />
       </a>
       <div class="ci-widget-container d-flex">
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_status_icon.vue b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_status_icon.vue
index d0df8309dc7..82566682bca 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_status_icon.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/mr_widget_status_icon.vue
@@ -33,7 +33,7 @@ export default {
 </script>
 <template>
   <div class="d-flex align-self-start">
-    <div class="square s24 h-auto d-flex-center append-right-default">
+    <div class="square s24 h-auto d-flex-center gl-mr-3">
       <div v-if="isLoading" class="mr-widget-icon d-inline-flex">
         <gl-loading-icon size="md" class="mr-loading-icon d-inline-flex" />
       </div>
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/states/commits_header.vue b/app/assets/javascripts/vue_merge_request_widget/components/states/commits_header.vue
index e4f4032776b..d52e6d38ac6 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/states/commits_header.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/states/commits_header.vue
@@ -83,7 +83,7 @@ export default {
       <gl-deprecated-button
         :aria-label="ariaLabel"
         variant="blank"
-        class="commit-edit-toggle square s24 append-right-default"
+        class="commit-edit-toggle square s24 gl-mr-3"
         @click.stop="toggle()"
       >
         <icon :name="collapseIcon" :size="16" />
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/states/squash_before_merge.vue b/app/assets/javascripts/vue_merge_request_widget/components/states/squash_before_merge.vue
index 14e0a9e18a3..efd58341a2d 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/states/squash_before_merge.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/states/squash_before_merge.vue
@@ -1,6 +1,7 @@
 <script>
 import Icon from '~/vue_shared/components/icon.vue';
 import tooltip from '~/vue_shared/directives/tooltip';
+import { __ } from '~/locale';
 
 export default {
   components: {
@@ -25,12 +26,22 @@ export default {
       default: false,
     },
   },
+  computed: {
+    tooltipTitle() {
+      return this.isDisabled ? __('Required in this project.') : false;
+    },
+  },
 };
 </script>
 
 <template>
   <div class="inline">
-    <label :class="{ 'gl-text-gray-600': isDisabled }" data-testid="squashLabel">
+    <label
+      v-tooltip
+      :class="{ 'gl-text-gray-600': isDisabled }"
+      data-testid="squashLabel"
+      :data-title="tooltipTitle"
+    >
       <input
         :checked="value"
         :disabled="isDisabled"
diff --git a/app/assets/javascripts/vue_merge_request_widget/components/terraform/terraform_plan.vue b/app/assets/javascripts/vue_merge_request_widget/components/terraform/terraform_plan.vue
index 81e6b234a24..7695570753c 100644
--- a/app/assets/javascripts/vue_merge_request_widget/components/terraform/terraform_plan.vue
+++ b/app/assets/javascripts/vue_merge_request_widget/components/terraform/terraform_plan.vue
@@ -58,7 +58,7 @@ export default {
 <template>
   <div class="gl-display-flex">
     <span
-      class="gl-display-flex gl-align-items-center gl-justify-content-center append-right-default gl-align-self-start gl-mt-1"
+      class="gl-display-flex gl-align-items-center gl-justify-content-center gl-mr-3 gl-align-self-start gl-mt-1"
     >
       <gl-icon :name="iconType" :size="18" data-testid="change-type-icon" />
     </span>
diff --git a/app/assets/javascripts/vue_shared/components/file_finder/index.vue b/app/assets/javascripts/vue_shared/components/file_finder/index.vue
index fa69a4abb21..d6f591ccca1 100644
--- a/app/assets/javascripts/vue_shared/components/file_finder/index.vue
+++ b/app/assets/javascripts/vue_shared/components/file_finder/index.vue
@@ -261,7 +261,7 @@ export default {
             </li>
           </template>
           <li v-else class="dropdown-menu-empty-item">
-            <div class="append-right-default gl-ml-3 gl-mt-3 gl-mb-3">
+            <div class="gl-mr-3 gl-ml-3 gl-mt-3 gl-mb-3">
               <template v-if="loading">
                 {{ __('Loading...') }}
               </template>
diff --git a/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue b/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue
index e26ff51e01e..54e837882ce 100644
--- a/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue
+++ b/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue
@@ -53,14 +53,9 @@ export default {
     },
     tooltipMessage() {
       return this.canApply
-        ? __('This also resolves the discussion')
+        ? __('This also resolves this thread')
         : __("Can't apply as this line has changed or the suggestion already matches its content.");
     },
-    tooltipMessageBatch() {
-      return !this.canBeBatched
-        ? __("Suggestions that change line count can't be added to batches, yet.")
-        : this.tooltipMessage;
-    },
     isDisableButton() {
       return this.isApplying || !this.canApply;
     },
@@ -129,15 +124,14 @@ export default {
       </gl-deprecated-button>
     </div>
     <div v-else class="d-flex align-items-center">
-      <span v-if="canBeBatched" v-gl-tooltip.viewport="tooltipMessageBatch" tabindex="0">
-        <gl-deprecated-button
-          class="btn-inverted js-add-to-batch-btn btn-grouped"
-          :disabled="isDisableButton"
-          @click="addSuggestionToBatch"
-        >
-          {{ __('Add suggestion to batch') }}
-        </gl-deprecated-button>
-      </span>
+      <gl-deprecated-button
+        v-if="canBeBatched && !isDisableButton"
+        class="btn-inverted js-add-to-batch-btn btn-grouped"
+        :disabled="isDisableButton"
+        @click="addSuggestionToBatch"
+      >
+        {{ __('Add suggestion to batch') }}
+      </gl-deprecated-button>
       <span v-gl-tooltip.viewport="tooltipMessage" tabindex="0">
         <gl-deprecated-button
           class="btn-inverted js-apply-btn btn-grouped"
diff --git a/app/assets/javascripts/vue_shared/components/rich_content_editor/services/build_custom_renderer.js b/app/assets/javascripts/vue_shared/components/rich_content_editor/services/build_custom_renderer.js
index 92bb2c2ca7c..28cd33454ea 100644
--- a/app/assets/javascripts/vue_shared/components/rich_content_editor/services/build_custom_renderer.js
+++ b/app/assets/javascripts/vue_shared/components/rich_content_editor/services/build_custom_renderer.js
@@ -1,10 +1,11 @@
 import renderKramdownList from './renderers/render_kramdown_list';
 import renderKramdownText from './renderers/render_kramdown_text';
-import renderIdentifierText from './renderers/render_identifier_text';
+import renderIdentifierParagraph from './renderers/render_identifier_paragraph';
 import renderEmbeddedRubyText from './renderers/render_embedded_ruby_text';
 
 const listRenderers = [renderKramdownList];
-const textRenderers = [renderKramdownText, renderIdentifierText, renderEmbeddedRubyText];
+const paragraphRenderers = [renderIdentifierParagraph];
+const textRenderers = [renderKramdownText, renderEmbeddedRubyText];
 
 const executeRenderer = (renderers, node, context) => {
   const availableRenderer = renderers.find(renderer => renderer.canRender(node, context));
@@ -22,13 +23,18 @@ const buildCustomRendererFunctions = (customRenderers, defaults) => {
   return Object.fromEntries(customEntries);
 };
 
-const buildCustomHTMLRenderer = (customRenderers = { list: [], text: [] }) => {
+const buildCustomHTMLRenderer = (customRenderers = { list: [], paragraph: [], text: [] }) => {
   const defaults = {
     list(node, context) {
       const allListRenderers = [...customRenderers.list, ...listRenderers];
 
       return executeRenderer(allListRenderers, node, context);
     },
+    paragraph(node, context) {
+      const allParagraphRenderers = [...customRenderers.list, ...paragraphRenderers];
+
+      return executeRenderer(allParagraphRenderers, node, context);
+    },
     text(node, context) {
       const allTextRenderers = [...customRenderers.text, ...textRenderers];
 
diff --git a/app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph.js b/app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph.js
new file mode 100644
index 00000000000..f5b4502ea3c
--- /dev/null
+++ b/app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph.js
@@ -0,0 +1,16 @@
+import { buildUneditableOpenTokens, buildUneditableCloseToken } from './build_uneditable_token';
+
+const identifierRegex = /(^\[.+\]: .+)/;
+
+const isIdentifier = text => {
+  return identifierRegex.test(text);
+};
+
+const canRender = (node, context) => {
+  return isIdentifier(context.getChildrenText(node));
+};
+
+const render = (_, { entering, origin }) =>
+  entering ? buildUneditableOpenTokens(origin()) : buildUneditableCloseToken();
+
+export default { canRender, render };
diff --git a/app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text.js b/app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text.js
deleted file mode 100644
index a1c1f20b923..00000000000
--- a/app/assets/javascripts/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text.js
+++ /dev/null
@@ -1,81 +0,0 @@
-import {
-  buildUneditableOpenTokens,
-  buildUneditableCloseTokens,
-  buildUneditableTokens,
-} from './build_uneditable_token';
-
-const identifierRegex = /(^\[.+\]: .+)/;
-
-const isBasicIdentifier = ({ literal }) => {
-  return identifierRegex.test(literal);
-};
-
-const isInlineCodeNode = ({ type, tickCount }) => type === 'code' && tickCount === 1;
-
-const hasAdjacentInlineCode = (isForward, node) => {
-  const direction = isForward ? 'next' : 'prev';
-
-  let currentNode = node;
-  while (currentNode[direction] && currentNode.literal !== null) {
-    if (isInlineCodeNode(currentNode)) {
-      return true;
-    }
-
-    currentNode = currentNode[direction];
-  }
-
-  return false;
-};
-
-const hasEnteringPotential = literal => literal.includes('[');
-const hasExitingPotential = literal => literal.includes(']: ');
-
-const hasAdjacentExit = node => {
-  let currentNode = node;
-
-  while (currentNode && currentNode.literal !== null) {
-    if (hasExitingPotential(currentNode.literal)) {
-      return true;
-    }
-
-    currentNode = currentNode.next;
-  }
-
-  return false;
-};
-
-const isEnteringWithAdjacentInlineCode = ({ literal, next }) => {
-  if (next && hasEnteringPotential(literal) && !hasExitingPotential(literal)) {
-    return hasAdjacentInlineCode(true, next) && hasAdjacentExit(next);
-  }
-
-  return false;
-};
-
-const isExitingWithAdjacentInlineCode = ({ literal, prev }) => {
-  if (prev && !hasEnteringPotential(literal) && hasExitingPotential(literal)) {
-    return hasAdjacentInlineCode(false, prev);
-  }
-
-  return false;
-};
-
-const isAdjacentInlineCodeIdentifier = node => {
-  return isEnteringWithAdjacentInlineCode(node) || isExitingWithAdjacentInlineCode(node);
-};
-
-const canRender = (node, context) => {
-  return isBasicIdentifier(node) || isAdjacentInlineCodeIdentifier(node, context);
-};
-
-const render = (node, { origin }) => {
-  if (isEnteringWithAdjacentInlineCode(node)) {
-    return buildUneditableOpenTokens(origin());
-  } else if (isExitingWithAdjacentInlineCode(node)) {
-    return buildUneditableCloseTokens(origin());
-  }
-
-  return buildUneditableTokens(origin());
-};
-
-export default { canRender, render };
diff --git a/app/assets/stylesheets/framework/common.scss b/app/assets/stylesheets/framework/common.scss
index cb15e939eab..365b7358e16 100644
--- a/app/assets/stylesheets/framework/common.scss
+++ b/app/assets/stylesheets/framework/common.scss
@@ -408,7 +408,6 @@ img.emoji {
 .append-right-5 { margin-right: 5px; }
 .append-right-10 { margin-right: 10px; }
 .append-right-15 { margin-right: 15px; }
-.append-right-default { margin-right: $gl-padding; }
 .append-right-20 { margin-right: 20px; }
 .append-bottom-10 { margin-bottom: 10px; }
 .append-bottom-20 { margin-bottom: 20px; }
diff --git a/app/helpers/application_settings_helper.rb b/app/helpers/application_settings_helper.rb
index a8f8318090d..aa118a9bc45 100644
--- a/app/helpers/application_settings_helper.rb
+++ b/app/helpers/application_settings_helper.rb
@@ -321,7 +321,13 @@ module ApplicationSettingsHelper
       :email_restrictions_enabled,
       :email_restrictions,
       :issues_create_limit,
-      :raw_blob_request_limit
+      :raw_blob_request_limit,
+      :project_import_limit,
+      :project_export_limit,
+      :project_download_export_limit,
+      :group_import_limit,
+      :group_export_limit,
+      :group_download_export_limit
     ]
   end
 
diff --git a/app/models/application_setting_implementation.rb b/app/models/application_setting_implementation.rb
index 1e1f92df2e9..c489d11d462 100644
--- a/app/models/application_setting_implementation.rb
+++ b/app/models/application_setting_implementation.rb
@@ -158,7 +158,13 @@ module ApplicationSettingImplementation
         snowplow_iglu_registry_url: nil,
         custom_http_clone_url_root: nil,
         productivity_analytics_start_date: Time.current,
-        snippet_size_limit: 50.megabytes
+        snippet_size_limit: 50.megabytes,
+        project_import_limit: 6,
+        project_export_limit: 6,
+        project_download_export_limit: 1,
+        group_import_limit: 6,
+        group_export_limit: 6,
+        group_download_export_limit: 1
       }
     end
 
diff --git a/app/models/project_statistics.rb b/app/models/project_statistics.rb
index 1d8e72c902a..55c7c6ab682 100644
--- a/app/models/project_statistics.rb
+++ b/app/models/project_statistics.rb
@@ -75,7 +75,12 @@ class ProjectStatistics < ApplicationRecord
   end
 
   def update_storage_size
-    self.storage_size = repository_size + wiki_size + lfs_objects_size + build_artifacts_size + packages_size + snippets_size
+    storage_size = repository_size + wiki_size + lfs_objects_size + build_artifacts_size + packages_size
+    # The `snippets_size` column was added on 20200622095419 but db/post_migrate/20190527194900_schedule_calculate_wiki_sizes.rb
+    # might try to update project statistics before the `snippets_size` column has been created.
+    storage_size += snippets_size if self.class.column_names.include?('snippets_size')
+
+    self.storage_size = storage_size
   end
 
   # Since this incremental update method does not call update_storage_size above,
diff --git a/app/views/admin/application_settings/_import_export_limits.html.haml b/app/views/admin/application_settings/_import_export_limits.html.haml
new file mode 100644
index 00000000000..d26c3376391
--- /dev/null
+++ b/app/views/admin/application_settings/_import_export_limits.html.haml
@@ -0,0 +1,34 @@
+= form_for @application_setting, url: network_admin_application_settings_path(anchor: 'js-import-export-limits-settings'), html: { class: 'fieldset-form' } do |f|
+  = form_errors(@application_setting)
+
+  %fieldset
+    .form-group
+      = f.label :project_import_limit, _('Max Project Import requests per minute per user'), class: 'label-bold'
+      = f.number_field :project_import_limit, class: 'form-control'
+
+  %fieldset
+    .form-group
+      = f.label :project_export_limit, _('Max Project Export requests per minute per user'), class: 'label-bold'
+      = f.number_field :project_export_limit, class: 'form-control'
+
+  %fieldset
+    .form-group
+      = f.label :project_download_export_limit, _('Max Project Export Download requests per minute per user'), class: 'label-bold'
+      = f.number_field :project_download_export_limit, class: 'form-control'
+
+  %fieldset
+    .form-group
+      = f.label :group_import_limit, _('Max Group Import requests per minute per user'), class: 'label-bold'
+      = f.number_field :group_import_limit, class: 'form-control'
+
+  %fieldset
+    .form-group
+      = f.label :group_export_limit, _('Max Group Export requests per minute per user'), class: 'label-bold'
+      = f.number_field :group_export_limit, class: 'form-control'
+
+  %fieldset
+    .form-group
+      = f.label :group_download_export_limit, _('Max Group Export Download requests per minute per user'), class: 'label-bold'
+      = f.number_field :group_download_export_limit, class: 'form-control'
+
+  = f.submit 'Save changes', class: "btn btn-success", data: { qa_selector: 'save_changes_button' }
diff --git a/app/views/admin/application_settings/network.html.haml b/app/views/admin/application_settings/network.html.haml
index db4611964b4..15149e46f9c 100644
--- a/app/views/admin/application_settings/network.html.haml
+++ b/app/views/admin/application_settings/network.html.haml
@@ -57,4 +57,15 @@
   .settings-content
     = render 'issue_limits'
 
+%section.settings.as-import-export-limits.no-animate#js-import-export-limits-settings{ class: ('expanded' if expanded_by_default?) }
+  .settings-header
+    %h4
+      = _('Import/Export Rate Limits')
+    %button.btn.btn-default.js-settings-toggle{ type: 'button' }
+      = expanded_by_default? ? _('Collapse') : _('Expand')
+    %p
+      = _('Configure limits for Project/Group Import/Export.')
+  .settings-content
+    = render 'import_export_limits'
+
 = render_if_exists 'admin/application_settings/ee_network_settings'
diff --git a/app/views/ci/variables/_variable_row.html.haml b/app/views/ci/variables/_variable_row.html.haml
index 33210d6b141..c69a3adb0e9 100644
--- a/app/views/ci/variables/_variable_row.html.haml
+++ b/app/views/ci/variables/_variable_row.html.haml
@@ -42,7 +42,7 @@
         = link_to icon('question-circle'), help_page_path('ci/variables/README', anchor: 'mask-a-custom-variable'), target: '_blank', rel: 'noopener noreferrer'
     - unless only_key_value
       .ci-variable-body-item.ci-variable-protected-item.table-section.section-20.mr-0.border-top-0
-        .append-right-default
+        .gl-mr-3
           = s_("CiVariable|Protected")
         = render "shared/buttons/project_feature_toggle", is_checked: is_protected, label: s_("CiVariable|Toggle protected") do
           %input{ type: "hidden",
@@ -51,7 +51,7 @@
             value: is_protected,
             data: { default: is_protected_default.to_s } }
       .ci-variable-body-item.ci-variable-masked-item.table-section.section-20.mr-0.border-top-0
-        .append-right-default
+        .gl-mr-3
           = s_("CiVariable|Masked")
         = render "shared/buttons/project_feature_toggle", is_checked: is_masked, label: s_("CiVariable|Toggle masked"), class_list: "js-project-feature-toggle project-feature-toggle qa-variable-masked" do
           %input{ type: "hidden",
diff --git a/app/views/dashboard/todos/index.html.haml b/app/views/dashboard/todos/index.html.haml
index 9fca580a870..9b6150c4be2 100644
--- a/app/views/dashboard/todos/index.html.haml
+++ b/app/views/dashboard/todos/index.html.haml
@@ -25,7 +25,7 @@
 
     .nav-controls
       - if @todos.any?(&:pending?)
-        .append-right-default
+        .gl-mr-3
           = link_to destroy_all_dashboard_todos_path(todos_filter_params), class: 'btn btn-loading d-flex align-items-center js-todos-mark-all', method: :delete, data: { href: destroy_all_dashboard_todos_path(todos_filter_params) } do
             Mark all as done
             %span.spinner.ml-1
diff --git a/app/views/groups/_home_panel.html.haml b/app/views/groups/_home_panel.html.haml
index 2fbd98d9aa5..2cf94695482 100644
--- a/app/views/groups/_home_panel.html.haml
+++ b/app/views/groups/_home_panel.html.haml
@@ -5,7 +5,7 @@
 .group-home-panel
   .row.mb-3
     .home-panel-title-row.col-md-12.col-lg-6.d-flex
-      .avatar-container.rect-avatar.s64.home-panel-avatar.append-right-default.float-none
+      .avatar-container.rect-avatar.s64.home-panel-avatar.gl-mr-3.float-none
         = group_icon(@group, class: 'avatar avatar-tile s64', width: 64, height: 64)
       .d-flex.flex-column.flex-wrap.align-items-baseline
         .d-inline-flex.align-items-baseline
diff --git a/app/views/projects/_home_panel.html.haml b/app/views/projects/_home_panel.html.haml
index 9e29316bf99..3f6ceaba5b2 100644
--- a/app/views/projects/_home_panel.html.haml
+++ b/app/views/projects/_home_panel.html.haml
@@ -6,7 +6,7 @@
 .project-home-panel.js-show-on-project-root{ class: [("empty-project" if empty_repo)] }
   .row.gl-mb-3
     .home-panel-title-row.col-md-12.col-lg-6.d-flex
-      .avatar-container.rect-avatar.s64.home-panel-avatar.append-right-default.float-none
+      .avatar-container.rect-avatar.s64.home-panel-avatar.gl-mr-3.float-none
         = project_icon(@project, alt: @project.name, class: 'avatar avatar-tile s64', width: 64, height: 64)
       .d-flex.flex-column.flex-wrap.align-items-baseline
         .d-inline-flex.align-items-baseline
diff --git a/app/views/projects/forks/_fork_button.html.haml b/app/views/projects/forks/_fork_button.html.haml
index dfa502b281f..eec02a50b85 100644
--- a/app/views/projects/forks/_fork_button.html.haml
+++ b/app/views/projects/forks/_fork_button.html.haml
@@ -2,7 +2,7 @@
 - can_create_project = current_user.can?(:create_projects, namespace)
 
 - if forked_project = namespace.find_fork_of(@project)
-  .bordered-box.fork-thumbnail.text-center.gl-ml-3.append-right-default.gl-mt-3.gl-mb-3.forked
+  .bordered-box.fork-thumbnail.text-center.gl-ml-3.gl-mr-3.gl-mt-3.gl-mb-3.forked
     = link_to project_path(forked_project) do
       - if /no_((\w*)_)*avatar/.match(avatar)
         = group_icon(namespace, class: "avatar rect-avatar s100 identicon mx-auto")
@@ -12,7 +12,7 @@
       %h5.gl-mt-3
         = namespace.human_name
 - else
-  .bordered-box.fork-thumbnail.text-center.gl-ml-3.append-right-default.gl-mt-3.gl-mb-3{ class: ("disabled" unless can_create_project) }
+  .bordered-box.fork-thumbnail.text-center.gl-ml-3.gl-mr-3.gl-mt-3.gl-mb-3{ class: ("disabled" unless can_create_project) }
     = link_to project_forks_path(@project, namespace_key: namespace.id),
         method: "POST",
         class: ("disabled has-tooltip" unless can_create_project),
diff --git a/app/views/projects/forks/new.html.haml b/app/views/projects/forks/new.html.haml
index 576b6d65bcf..887081d0f35 100644
--- a/app/views/projects/forks/new.html.haml
+++ b/app/views/projects/forks/new.html.haml
@@ -9,7 +9,7 @@
   .col-lg-9
     - if @namespaces.present?
       .fork-thumbnail-container.js-fork-content
-        %h5.gl-mt-0.gl-mb-0.gl-ml-3.append-right-default
+        %h5.gl-mt-0.gl-mb-0.gl-ml-3.gl-mr-3
           = _("Select a namespace to fork the project")
         - @namespaces.each do |namespace|
           = render 'fork_button', namespace: namespace
diff --git a/app/views/shared/projects/_project.html.haml b/app/views/shared/projects/_project.html.haml
index 0d62b0735d1..ddf0bdeca4e 100644
--- a/app/views/shared/projects/_project.html.haml
+++ b/app/views/shared/projects/_project.html.haml
@@ -58,10 +58,10 @@
               = render_if_exists 'compliance_management/compliance_framework/compliance_framework_badge', project: project
 
         - if show_last_commit_as_description
-          .description.d-none.d-sm-block.append-right-default
+          .description.d-none.d-sm-block.gl-mr-3
             = link_to_markdown(project.commit.title, project_commit_path(project, project.commit), class: "commit-row-message")
         - elsif project.description.present?
-          .description.d-none.d-sm-block.append-right-default
+          .description.d-none.d-sm-block.gl-mr-3
             = markdown_field(project, :description)
 
       .controls.d-flex.flex-sm-column.align-items-center.align-items-sm-end.flex-wrap.flex-shrink-0.text-secondary{ class: css_controls_class.join(" ") }
diff --git a/changelogs/unreleased/218472-gitlab-ci-linting.yml b/changelogs/unreleased/218472-gitlab-ci-linting.yml
new file mode 100644
index 00000000000..0fc937a0a5d
--- /dev/null
+++ b/changelogs/unreleased/218472-gitlab-ci-linting.yml
@@ -0,0 +1,5 @@
+---
+title: Add support for linting based on schemas in WebIDE
+merge_request: 35838
+author:
+type: added
diff --git a/changelogs/unreleased/227054-eng-add-db-column-to-indicate-temporarily-increased-storage.yml b/changelogs/unreleased/227054-eng-add-db-column-to-indicate-temporarily-increased-storage.yml
new file mode 100644
index 00000000000..ee94dc596a7
--- /dev/null
+++ b/changelogs/unreleased/227054-eng-add-db-column-to-indicate-temporarily-increased-storage.yml
@@ -0,0 +1,5 @@
+---
+title: Add temporary storage increase column
+merge_request: 36107
+author:
+type: added
diff --git a/changelogs/unreleased/cngo-add-count-to-imported-jira-issues-message.yml b/changelogs/unreleased/cngo-add-count-to-imported-jira-issues-message.yml
new file mode 100644
index 00000000000..a0f1cc5f017
--- /dev/null
+++ b/changelogs/unreleased/cngo-add-count-to-imported-jira-issues-message.yml
@@ -0,0 +1,5 @@
+---
+title: Add count to imported Jira issues message
+merge_request: 36075
+author:
+type: added
diff --git a/changelogs/unreleased/georgekoltsov-import-export-rate-limits-as-application-settings.yml b/changelogs/unreleased/georgekoltsov-import-export-rate-limits-as-application-settings.yml
new file mode 100644
index 00000000000..8d44f84b2ef
--- /dev/null
+++ b/changelogs/unreleased/georgekoltsov-import-export-rate-limits-as-application-settings.yml
@@ -0,0 +1,5 @@
+---
+title: Convert Import/Export rate limits to configurable application settings
+merge_request: 35728
+author:
+type: added
diff --git a/changelogs/unreleased/id-fix-timeout-query.yml b/changelogs/unreleased/id-fix-timeout-query.yml
new file mode 100644
index 00000000000..d719f83379f
--- /dev/null
+++ b/changelogs/unreleased/id-fix-timeout-query.yml
@@ -0,0 +1,5 @@
+---
+title: Reduce number of scanned commits for code intelligence
+merge_request: 36093
+author:
+type: performance
diff --git a/changelogs/unreleased/ps-find-remote-is-storage-scoped.yml b/changelogs/unreleased/ps-find-remote-is-storage-scoped.yml
new file mode 100644
index 00000000000..da55f846707
--- /dev/null
+++ b/changelogs/unreleased/ps-find-remote-is-storage-scoped.yml
@@ -0,0 +1,5 @@
+---
+title: FindRemoteRepository is storage scoped
+merge_request: 35962
+author:
+type: added
diff --git a/config/gitlab.yml.example b/config/gitlab.yml.example
index 63430aaed7e..57296e3ceae 100644
--- a/config/gitlab.yml.example
+++ b/config/gitlab.yml.example
@@ -501,11 +501,6 @@ production: &base
     geo_registry_sync_worker:
       cron: "*/1 * * * *"
 
-    # GitLab Geo migrated local files clean up worker
-    # NOTE: This will only take effect if Geo is enabled (secondary nodes only)
-    geo_migrated_local_files_clean_up_worker:
-      cron: "15 */6 * * *"
-
     # Export pseudonymized data in CSV format for analysis
     pseudonymizer_worker:
       cron: "0 * * * *"
@@ -514,7 +509,7 @@ production: &base
     # NOTE: This will only take effect if elasticsearch is enabled.
     elastic_index_bulk_cron_worker:
       cron: "*/1 * * * *"
-      
+
     # Elasticsearch bulk updater for initial updates.
     # NOTE: This will only take effect if elasticsearch is enabled.
     elastic_index_initial_bulk_cron_worker:
diff --git a/config/initializers/1_settings.rb b/config/initializers/1_settings.rb
index 495c0702e70..8d7d51f1e32 100644
--- a/config/initializers/1_settings.rb
+++ b/config/initializers/1_settings.rb
@@ -522,9 +522,6 @@ Gitlab.ee do
   Settings.cron_jobs['geo_metrics_update_worker'] ||= Settingslogic.new({})
   Settings.cron_jobs['geo_metrics_update_worker']['cron'] ||= '*/1 * * * *'
   Settings.cron_jobs['geo_metrics_update_worker']['job_class'] ||= 'Geo::MetricsUpdateWorker'
-  Settings.cron_jobs['geo_migrated_local_files_clean_up_worker'] ||= Settingslogic.new({})
-  Settings.cron_jobs['geo_migrated_local_files_clean_up_worker']['cron'] ||= '15 */6 * * *'
-  Settings.cron_jobs['geo_migrated_local_files_clean_up_worker']['job_class'] ||= 'Geo::MigratedLocalFilesCleanUpWorker'
   Settings.cron_jobs['geo_prune_event_log_worker'] ||= Settingslogic.new({})
   Settings.cron_jobs['geo_prune_event_log_worker']['cron'] ||= '*/5 * * * *'
   Settings.cron_jobs['geo_prune_event_log_worker']['job_class'] ||= 'Geo::PruneEventLogWorker'
diff --git a/config/plugins/monaco_webpack.js b/config/plugins/monaco_webpack.js
new file mode 100644
index 00000000000..7d283782453
--- /dev/null
+++ b/config/plugins/monaco_webpack.js
@@ -0,0 +1,17 @@
+const { languagesArr } = require('monaco-editor-webpack-plugin/out/languages');
+
+// monaco-yaml library doesn't play so well with monaco-editor-webpack-plugin
+// so the only way to include its workers is by patching the list of languages
+// in monaco-editor-webpack-plugin and adding support for yaml workers. This is
+// a known issue in the library and this workaround was suggested here:
+// https://github.com/pengx17/monaco-yaml/issues/20
+
+const yamlLang = languagesArr.find(t => t.label === 'yaml');
+
+yamlLang.entry = [yamlLang.entry, '../../monaco-yaml/esm/monaco.contribution'];
+yamlLang.worker = {
+  id: 'vs/language/yaml/yamlWorker',
+  entry: '../../monaco-yaml/esm/yaml.worker.js',
+};
+
+module.exports = require('monaco-editor-webpack-plugin');
diff --git a/config/webpack.config.js b/config/webpack.config.js
index 557db58b1b9..8e51ce537c5 100644
--- a/config/webpack.config.js
+++ b/config/webpack.config.js
@@ -5,7 +5,7 @@ const webpack = require('webpack');
 const VueLoaderPlugin = require('vue-loader/lib/plugin');
 const StatsWriterPlugin = require('webpack-stats-plugin').StatsWriterPlugin;
 const CompressionPlugin = require('compression-webpack-plugin');
-const MonacoWebpackPlugin = require('monaco-editor-webpack-plugin');
+const MonacoWebpackPlugin = require('./plugins/monaco_webpack');
 const BundleAnalyzerPlugin = require('webpack-bundle-analyzer').BundleAnalyzerPlugin;
 const CopyWebpackPlugin = require('copy-webpack-plugin');
 const vendorDllHash = require('./helpers/vendor_dll_hash');
@@ -241,7 +241,7 @@ module.exports = {
       },
       {
         test: /\.(eot|ttf|woff|woff2)$/,
-        include: /node_modules\/katex\/dist\/fonts/,
+        include: /node_modules\/(katex\/dist\/fonts|monaco-editor)/,
         loader: 'file-loader',
         options: {
           name: '[name].[contenthash:8].[ext]',
diff --git a/db/migrate/20190225160300_steal_encrypt_runners_tokens.rb b/db/migrate/20190225160300_steal_encrypt_runners_tokens.rb
deleted file mode 100644
index 18c0d2a2e1b..00000000000
--- a/db/migrate/20190225160300_steal_encrypt_runners_tokens.rb
+++ /dev/null
@@ -1,19 +0,0 @@
-# frozen_string_literal: true
-
-class StealEncryptRunnersTokens < ActiveRecord::Migration[5.0]
-  include Gitlab::Database::MigrationHelpers
-
-  # This cleans after `EncryptRunnersTokens`
-
-  DOWNTIME = false
-
-  disable_ddl_transaction!
-
-  def up
-    Gitlab::BackgroundMigration.steal('EncryptRunnersTokens')
-  end
-
-  def down
-    # no-op
-  end
-end
diff --git a/db/migrate/20200701093859_add_import_export_limits_to_application_settings.rb b/db/migrate/20200701093859_add_import_export_limits_to_application_settings.rb
new file mode 100644
index 00000000000..6f40f439385
--- /dev/null
+++ b/db/migrate/20200701093859_add_import_export_limits_to_application_settings.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+class AddImportExportLimitsToApplicationSettings < ActiveRecord::Migration[6.0]
+  DOWNTIME = false
+
+  def change
+    add_column :application_settings, :project_import_limit, :integer, default: 6, null: false
+    add_column :application_settings, :project_export_limit, :integer, default: 6, null: false
+    add_column :application_settings, :project_download_export_limit, :integer, default: 1, null: false
+
+    add_column :application_settings, :group_import_limit, :integer, default: 6, null: false
+    add_column :application_settings, :group_export_limit, :integer, default: 6, null: false
+    add_column :application_settings, :group_download_export_limit, :integer, default: 1, null: false
+  end
+end
diff --git a/db/migrate/20200706170536_add_temporary_storage_increase_to_namespace_limits.rb b/db/migrate/20200706170536_add_temporary_storage_increase_to_namespace_limits.rb
new file mode 100644
index 00000000000..0b6d57831c7
--- /dev/null
+++ b/db/migrate/20200706170536_add_temporary_storage_increase_to_namespace_limits.rb
@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+class AddTemporaryStorageIncreaseToNamespaceLimits < ActiveRecord::Migration[6.0]
+  DOWNTIME = false
+
+  def change
+    add_column :namespace_limits, :temporary_storage_increase_ends_on, :date, null: true
+  end
+end
diff --git a/db/structure.sql b/db/structure.sql
index adf5b5ddfdb..d55d42d4a60 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -9145,6 +9145,12 @@ CREATE TABLE public.application_settings (
     compliance_frameworks smallint[] DEFAULT '{}'::smallint[] NOT NULL,
     notify_on_unknown_sign_in boolean DEFAULT true NOT NULL,
     default_branch_name text,
+    project_import_limit integer DEFAULT 6 NOT NULL,
+    project_export_limit integer DEFAULT 6 NOT NULL,
+    project_download_export_limit integer DEFAULT 1 NOT NULL,
+    group_import_limit integer DEFAULT 6 NOT NULL,
+    group_export_limit integer DEFAULT 6 NOT NULL,
+    group_download_export_limit integer DEFAULT 1 NOT NULL,
     CONSTRAINT check_51700b31b5 CHECK ((char_length(default_branch_name) <= 255)),
     CONSTRAINT check_d03919528d CHECK ((char_length(container_registry_vendor) <= 255)),
     CONSTRAINT check_d820146492 CHECK ((char_length(spam_check_endpoint_url) <= 255)),
@@ -13014,7 +13020,8 @@ CREATE TABLE public.namespace_aggregation_schedules (
 CREATE TABLE public.namespace_limits (
     additional_purchased_storage_size bigint DEFAULT 0 NOT NULL,
     additional_purchased_storage_ends_on date,
-    namespace_id integer NOT NULL
+    namespace_id integer NOT NULL,
+    temporary_storage_increase_ends_on date
 );
 
 CREATE TABLE public.namespace_root_storage_statistics (
@@ -22523,7 +22530,6 @@ COPY "schema_migrations" (version) FROM STDIN;
 20190220150130
 20190222051615
 20190225152525
-20190225160300
 20190225160301
 20190228192410
 20190301081611
@@ -23576,9 +23582,11 @@ COPY "schema_migrations" (version) FROM STDIN;
 20200626060151
 20200626130220
 20200630110826
+20200701093859
 20200702123805
 20200703154822
 20200704143633
 20200706005325
+20200706170536
 \.
 
diff --git a/doc/administration/monitoring/prometheus/gitlab_metrics.md b/doc/administration/monitoring/prometheus/gitlab_metrics.md
index b1bfbb83122..ee9f12f85b2 100644
--- a/doc/administration/monitoring/prometheus/gitlab_metrics.md
+++ b/doc/administration/monitoring/prometheus/gitlab_metrics.md
@@ -261,8 +261,8 @@ instance (`cache`, `shared_state` etc.).
 
 | Metric                            | Type    | Since | Description |
 |:--------------------------------- |:------- |:----- |:----------- |
-| `redis_client_exceptions_total`                    | Counter   | 13.2  | Number of Redis client exceptions, broken down by exception class |
-| `redis_client_requests_total`                    | Counter   | 13.2  | Number of Redis client requests |
+| `gitlab_redis_client_exceptions_total`                    | Counter   | 13.2  | Number of Redis client exceptions, broken down by exception class |
+| `gitlab_redis_client_requests_total`                    | Counter   | 13.2  | Number of Redis client requests |
 
 ## Metrics shared directory
 
diff --git a/doc/api/groups.md b/doc/api/groups.md
index 4b7d1a9e084..8c59d481715 100644
--- a/doc/api/groups.md
+++ b/doc/api/groups.md
@@ -667,8 +667,8 @@ Parameters:
 | `request_access_enabled`             | boolean | no       | Allow users to request member access. |
 | `parent_id`                          | integer | no       | The parent group ID for creating nested group. |
 | `default_branch_protection`          | integer | no       | See [Options for `default_branch_protection`](#options-for-default_branch_protection). Default to the global level default branch protection setting.      |
-| `shared_runners_minutes_limit`       | integer | no       | **(STARTER ONLY)** Pipeline minutes quota for this group. |
-| `extra_shared_runners_minutes_limit` | integer | no       | **(STARTER ONLY)** Extra pipeline minutes quota for this group. |
+| `shared_runners_minutes_limit`       | integer | no       | **(STARTER ONLY)** Pipeline minutes quota for this group (included in plan). Can be `nil` (default; inherit system default), `0` (unlimited) or `> 0` |
+| `extra_shared_runners_minutes_limit` | integer | no       | **(STARTER ONLY)** Extra pipeline minutes quota for this group (purchased in addition to the minutes included in the plan). |
 
 ### Options for `default_branch_protection`
 
@@ -741,8 +741,8 @@ PUT /groups/:id
 | `request_access_enabled`             | boolean | no       | Allow users to request member access. |
 | `default_branch_protection`          | integer | no       | See [Options for `default_branch_protection`](#options-for-default_branch_protection). |
 | `file_template_project_id`           | integer | no       | **(PREMIUM)** The ID of a project to load custom file templates from. |
-| `shared_runners_minutes_limit`       | integer | no       | **(STARTER ONLY)** Pipeline minutes quota for this group. |
-| `extra_shared_runners_minutes_limit` | integer | no       | **(STARTER ONLY)** Extra pipeline minutes quota for this group. |
+| `shared_runners_minutes_limit`       | integer | no       | **(STARTER ONLY)** Pipeline minutes quota for this group (included in plan). Can be `nil` (default; inherit system default), `0` (unlimited) or `> 0` |
+| `extra_shared_runners_minutes_limit` | integer | no       | **(STARTER ONLY)** Extra pipeline minutes quota for this group (purchased in addition to the minutes included in the plan). |
 
 NOTE: **Note:**
 The `projects` and `shared_projects` attributes in the response are deprecated and will be [removed in API v5](https://gitlab.com/gitlab-org/gitlab/-/issues/213797).
diff --git a/doc/api/users.md b/doc/api/users.md
index f32aef89066..b5551beff9f 100644
--- a/doc/api/users.md
+++ b/doc/api/users.md
@@ -384,7 +384,7 @@ Parameters:
 | `email`                              | Yes      | Email                                                                                                                                                   |
 | `extern_uid`                         | No       | External UID                                                                                                                                            |
 | `external`                           | No       | Flags the user as external - true or false (default)                                                                                                    |
-| `extra_shared_runners_minutes_limit` | No       | Extra pipeline minutes quota for this user **(STARTER)**                                                                                                |
+| `extra_shared_runners_minutes_limit` | No       | Extra pipeline minutes quota for this user (purchased in addition to the minutes included in the plan) **(STARTER)**                                                                                                |
 | `force_random_password`              | No       | Set user password to a random value - true or false (default)                                                                                           |
 | `group_id_for_saml`                  | No       | ID of group where SAML has been configured                                                                                                              |
 | `linkedin`                           | No       | LinkedIn                                                                                                                                                |
@@ -398,7 +398,7 @@ Parameters:
 | `provider`                           | No       | External provider name                                                                                                                                  |
 | `public_email`                       | No       | The public email of the user                                                                                                                            |
 | `reset_password`                     | No       | Send user password reset link - true or false(default)                                                                                                  |
-| `shared_runners_minutes_limit`       | No       | Pipeline minutes quota for this user **(STARTER)**                                                                                                      |
+| `shared_runners_minutes_limit`       | No       | Pipeline minutes quota for this user (included in plan). Can be `nil` (default; inherit system default), `0` (unlimited) or `> 0` **(STARTER)**                                                                                                      |
 | `skip_confirmation`                  | No       | Skip confirmation - true or false (default)                                                                                                             |
 | `skype`                              | No       | Skype ID                                                                                                                                                |
 | `theme_id`                           | No       | The GitLab theme for the user (see [the user preference docs](../user/profile/preferences.md#navigation-theme) for more information)                    |
@@ -426,7 +426,7 @@ Parameters:
 | `email`                              | No       | Email                                                                                                                                                   |
 | `extern_uid`                         | No       | External UID                                                                                                                                            |
 | `external`                           | No       | Flags the user as external - true or false (default)                                                                                                    |
-| `extra_shared_runners_minutes_limit` | No       | Extra pipeline minutes quota for this user **(STARTER)**                                                                                                |
+| `extra_shared_runners_minutes_limit` | No       | Extra pipeline minutes quota for this user (purchased in addition to the minutes included in the plan) **(STARTER)**                                                                                                |
 | `group_id_for_saml`                  | No       | ID of group where SAML has been configured                                                                                                              |
 | `id`                                 | Yes      | The ID of the user                                                                                                                                      |
 | `linkedin`                           | No       | LinkedIn                                                                                                                                                |
@@ -439,7 +439,7 @@ Parameters:
 | `projects_limit`                     | No       | Limit projects each user can create                                                                                                                     |
 | `provider`                           | No       | External provider name                                                                                                                                  |
 | `public_email`                       | No       | The public email of the user                                                                                                                            |
-| `shared_runners_minutes_limit`       | No       | Pipeline minutes quota for this user **(STARTER)**                                                                                                      |
+| `shared_runners_minutes_limit`       | No       | Pipeline minutes quota for this user (included in plan). Can be `nil` (default; inherit system default), `0` (unlimited) or `> 0` **(STARTER)**                                                                                                      |
 | `skip_reconfirmation`                | No       | Skip reconfirmation - true or false (default)                                                                                                           |
 | `skype`                              | No       | Skype ID                                                                                                                                                |
 | `theme_id`                           | No       | The GitLab theme for the user (see [the user preference docs](../user/profile/preferences.md#navigation-theme) for more information)                    |
diff --git a/doc/integration/saml.md b/doc/integration/saml.md
index 97384d8f6cf..0c9a7790ff4 100644
--- a/doc/integration/saml.md
+++ b/doc/integration/saml.md
@@ -580,13 +580,14 @@ Make sure the IdP provides a claim containing the user's email address, using cl
 If after signing in into your SAML server you are redirected back to the sign in page and
 no error is displayed, check your `production.log` file. It will most likely contain the
 message `Can't verify CSRF token authenticity`. This means that there is an error during
-the SAML request, but this error never reaches GitLab due to the CSRF check.
+the SAML request, but in GitLab 11.7 and earlier this error never reaches GitLab due to
+the CSRF check.
 
 To bypass this you can add `skip_before_action :verify_authenticity_token` to the
 `omniauth_callbacks_controller.rb` file immediately after the `class` line and
-comment out the `protect_from_forgery` line using a `#` then restart Unicorn. This
-will allow the error to hit GitLab, where it can then be seen in the usual logs,
-or as a flash message on the login screen.
+comment out the `protect_from_forgery` line using a `#`. Restart Unicorn for this
+change to take effect. This will allow the error to hit GitLab, where it can then
+be seen in the usual logs, or as a flash message on the login screen.
 
 That file is located in `/opt/gitlab/embedded/service/gitlab-rails/app/controllers`
 for Omnibus installations and by default in `/home/git/gitlab/app/controllers` for
diff --git a/doc/policy/maintenance.md b/doc/policy/maintenance.md
index 5a70e93195b..6ee454d8b4b 100644
--- a/doc/policy/maintenance.md
+++ b/doc/policy/maintenance.md
@@ -19,8 +19,8 @@ GitLab uses [Semantic Versioning](https://semver.org/) for its releases:
 
 For example, for GitLab version 12.10.6:
 
-- `12` represents the major version. The major release was 12.0.0, but often referred to as 12.0.
-- `10` represents the minor version. The minor release was 12.10.0, but often referred to as 12.10.
+- `12` represents the major version. The major release was 12.0.0 but often referred to as 12.0.
+- `10` represents the minor version. The minor release was 12.10.0 but often referred to as 12.10.
 - `6` represents the patch number.
 
 Any part of the version number can increment into multiple digits, for example, 13.10.11.
@@ -37,7 +37,7 @@ The following table describes the version types and their release cadence:
 
 We encourage everyone to run the [latest stable release](https://about.gitlab.com/releases/categories/releases/)
 to ensure that you can easily upgrade to the most secure and feature-rich GitLab experience.
-In order to make sure you can easily run the most recent stable release, we are working
+To make sure you can easily run the most recent stable release, we are working
 hard to keep the update process simple and reliable.
 
 If you are unable to follow our monthly release cycle, there are a couple of
@@ -79,7 +79,7 @@ We cannot guarantee that upgrading between major versions will be seamless.
 We suggest upgrading to the latest available *minor* version within
 your major version before proceeding to the next major version.
 Doing this will address any backward-incompatible changes or deprecations
-to help ensure a successful upgrade to next major release.
+to help ensure a successful upgrade to the next major release.
 
 It's also important to ensure that any background migrations have been fully completed
 before upgrading to a new major version. To see the current size of the `background_migration` queue,
@@ -110,14 +110,13 @@ Please see the table below for some examples:
 | `13.2.0`                | `11.5.0`      | `11.5.0` -> `11.11.8` -> `12.0.12` -> `12.10.6` -> `13.0.0` -> `13.2.0` | Four intermediate versions are required: the final `11.11`, `12.0`, and `12.10` releases, plus `13.0`. |
 | `13.0.1`              | `11.10.8`      | `11.10.5` -> `11.11.8` -> `12.0.12` -> `12.10.6` -> `13.0.1` | Three intermediate versions are required: `11.11`, `12.0`, and `12.10`. |
 | `12.10.6`             | `11.3.4`       | `11.3.4` -> `11.11.8` -> `12.0.12` -> `12.10.6`             |  Two intermediate versions are required: `11.11` and `12.0` |
-| `12.9.5.`             | `10.4.5`       | `10.4.5` -> `10.8.7` -> `11.11.8` -> `12.0.12` -> `12.9.5`   | Three intermediate versions are required: `10.8`, `11.11`, and `12.0`, then `12.9.5` |
+| `12.9.5`             | `10.4.5`       | `10.4.5` -> `10.8.7` -> `11.11.8` -> `12.0.12` -> `12.9.5`   | Three intermediate versions are required: `10.8`, `11.11`, and `12.0`, then `12.9.5` |
 | `12.2.5`              | `9.2.6`        | `9.2.6` -> `9.5.10` -> `10.8.7` -> `11.11.8` -> `12.0.12` -> `12.2.5` | Four intermediate versions are required: `9.5`, `10.8`, `11.11`, `12.0`, then `12.2`. |
 | `11.3.4`              | `8.13.4`       | `8.13.4` -> `8.17.7` -> `9.5.10` -> `10.8.7` -> `11.3.4` | `8.17.7` is the last version in version 8, `9.5.10` is the last version in version 9, `10.8.7` is the last version in version 10. |
 
 ### Upgrades from versions earlier than 8.12
 
-- `8.11.x` and earlier: you might have to upgrade to `8.12.0` specifically before you can
-  upgrade to `8.17.7`. This was [reported in an issue](https://gitlab.com/gitlab-org/gitlab/-/issues/207259).
+- `8.11.x` and earlier: you might have to upgrade to `8.12.0` specifically before you can upgrade to `8.17.7`. This was [reported in an issue](https://gitlab.com/gitlab-org/gitlab/-/issues/207259).
 - [CI changes prior to version 8.0](https://docs.gitlab.com/omnibus/update/README.html#updating-gitlab-ci-from-prior-540-to-version-714-via-omnibus-gitlab)
   when it was merged into GitLab.
 
@@ -155,11 +154,11 @@ and support cost.
 1. Supporting parallel version discourages incremental upgrades which over time accumulate in
 complexity and create upgrade challenges for all users. GitLab has a dedicated team ensuring that
 incremental upgrades (and installations) are as simple as possible.
-1. The number of changes created in the GitLab application is high, which contributes to backporting complexity to older releases. In number of cases, backporting has to go through the same
+1. The number of changes created in the GitLab application is high, which contributes to backporting complexity to older releases. In several cases, backporting has to go through the same
 review process a new change goes through.
-1. Ensuring that tests pass on older release is a considerable challenge in some cases, and as such is very time consuming.
+1. Ensuring that tests pass on the older release is a considerable challenge in some cases, and as such is very time-consuming.
 
-Including new features in patch releases is not possible as that would break [Semantic Versioning](https://semver.org/).
+Including new features in a patch release is not possible as that would break [Semantic Versioning](https://semver.org/).
 Breaking [Semantic Versioning](https://semver.org/) has the following consequences for users that
 have to adhere to various internal requirements (for example, org. compliance, verifying new features, and similar):
 
@@ -169,7 +168,7 @@ have to adhere to various internal requirements (for example, org. compliance, v
 
 In cases where a strategic user has a requirement to test a feature before it is
 officially released, we can offer to create a Release Candidate (RC) version that will
-include the specific feature. This should be needed only in extreme cases, and can be requested for
+include the specific feature. This should be needed only in extreme cases and can be requested for
 consideration by raising an issue in the [release/tasks](https://gitlab.com/gitlab-org/release/tasks/-/issues/new?issuable_template=Backporting-request) issue tracker.
 It is important to note that the Release Candidate will also contain other features and changes as
 it is not possible to easily isolate a specific feature (similar reasons as noted above). The
@@ -179,7 +178,7 @@ accessible.
 ### Backporting to older releases
 
 Backporting to more than one stable release is reserved for [security releases](#security-releases).
-In some cases however, we may need to backport *a bug fix* to more than one stable
+In some cases, however, we may need to backport *a bug fix* to more than one stable
 release, depending on the severity of the bug.
 
 The decision on whether backporting a change will be performed is done at the discretion of the
@@ -220,12 +219,11 @@ This decision is made on a case-by-case basis.
 Check [our release posts](https://about.gitlab.com/releases/categories/releases/).
 
 Each month, we publish either a major or minor release of GitLab. At the end
-of those release posts there are three sections to look for: Deprecations, Removals, and Important notes on upgrading. These will include:
+of those release posts, there are three sections to look for: Deprecations, Removals, and Important notes on upgrading. These will include:
 
 - Steps you need to perform as part of an upgrade.
   For example [8.12](https://about.gitlab.com/releases/2016/09/22/gitlab-8-12-released/#upgrade-barometer)
-  required the Elasticsearch index to be recreated. Any older version of GitLab upgrading to 8.12 or higher
-  would require this.
+  required the Elasticsearch index to be recreated. Any older version of GitLab upgrading to 8.12 or higher would require this.
 - Changes to the versions of software we support such as
   [ceasing support for IE11 in GitLab 13](https://about.gitlab.com/releases/2020/03/22/gitlab-12-9-released/#ending-support-for-internet-explorer-11).
 
diff --git a/doc/security/rate_limits.md b/doc/security/rate_limits.md
index d58eb130522..af2c14be2cd 100644
--- a/doc/security/rate_limits.md
+++ b/doc/security/rate_limits.md
@@ -26,6 +26,7 @@ similarly mitigated by a rate limit.
 - [User and IP rate limits](../user/admin_area/settings/user_and_ip_rate_limits.md).
 - [Raw endpoints rate limits](../user/admin_area/settings/rate_limits_on_raw_endpoints.md).
 - [Protected paths](../user/admin_area/settings/protected_paths.md).
+- [Import/Export rate limits](../user/admin_area/settings/import_export_rate_limits.md).
 
 ## Rack Attack initializer
 
diff --git a/doc/user/admin_area/settings/img/import_export_rate_limits_v13_2.png b/doc/user/admin_area/settings/img/import_export_rate_limits_v13_2.png
new file mode 100644
index 0000000000000000000000000000000000000000..78c94b3803c4cafd7ebdf78231c11086faa8a1b4
GIT binary patch
literal 54802
zcmeFZWmr{PANEU$ptO?Gjda%{Bo(BUknZkUbeABg)DjRd0F_Qb7Si3_ARyf>ea71R
zd7h2#_k1|#^SizF<#f$8=Ndi!<9FX<M5!vvW8WgXg@lBJ{pg{LIua6U7ZMUmECxFG
z#I^Tj4H6Qvl(n?9>LY1sYE>6U3u`-bBqZinrbb2t580U8jE#+q+PYa;Zn=1>M@Gh|
z8wE7f_0+Z1by9ayXTbFIevsh(Kz-7H^g*rutF2_Yq>~P@SyE!oSOH<)Xjtux^=Pu2
zt!~U`${S8uABmVyS0yCV67*D`G}P6>kjz+<lkWzOu}fAw#P3s+Ji@{grD!lfHDP)%
zcC*e#DmX1@gH^IZ(nZeX*2@dDwvk6t1S;|-(wjGsapXPeTpJ}lQIr`d5<Y4s1X?Yh
z2Y0;hI*1{-A#a3{bsxIKu)fMnLP|o)#TD3a@BOJOo)9@{^ASzcUNRS#wlBzDdL*7=
zN<&>y&5NK1^F&gQ%_&h)CAjh`DDFRGQwS9e+`XshoKlP*+HKlfSLc0vb=6CTg|%^q
zl;l$R{Oam>{_5%qWg+rJ0JSkl0SVp0!2hu1HYi#o6LalH7D`G;_rWy=5(+W_5-PYt
z27izutdY?Ex<*1`1b>6NcpZ*(6Z}m8{#VUJ`R`rSu1wVbUZcb!zW6{x`q3lsw}z>U
zxw(U@m807ajE}0IBE_tqXuD}EJr*%_wC6B3b2KsMfZ97D9zlXYMZl%KxtlRH)ZWg)
zRRk(V``0%_z%}AyPFm`}zT##pMysu)N-gc^VouG^!N<WxD}IZbni}F_W+9?3Bln-j
z!N0_4t=!z4L^wG;Jv})*c{v<iEIGM_g@rk}csO}@*ugj0UA-LKjG^ofu5^FD<iGEc
zF?Tg}v37E^c66Xdyw}*o(cMjqmKO0t|NHOnbeco0|M?{c*Z*V-WRMeahm)Iwi}U~V
zn47i5|I1^DJAXg+SHAxKISArqB2Qh-U8EiD?adwB#Q!N=$X~zo+s%K{`S*jW)=+ah
zZ5eCuq$|jixUeA4f1djD&j0aAoqwJb;OD#k<h483o<w9pM8(A#q|+EthT_~1&VPOO
zpYKCB5e0m$!2hnzzdi-kDSivW`M;(ie(T&~*8~Yk66ul5gC|hrjkh;o<g%v`tlHG|
zA>_z7o}O0=TU%S+mDSbNopT%!)uIvA(l7C-(NG?gTzRb*EO|5WiixJa?e6J06YI4*
zcGJ?*s(D(fa<z8$<(s@>eJ~?3=0iyof|r44^wj^klw?JrD?eQ#{@0B_G+N{vr4$c-
z|2lY5H9Ro53hOTJqd(phh<3N@=>PBoq$szRcvK<u|GK5hHF@)Y>G)rg%rTf@oszpR
z|4HJ1Z`IpTT~GPnA1BaoDZDYIeEr`q{U^CW=rmkrZ7;cu>H@i-J3smc1_r3JD7l+A
z`aj684CiXC4Cbh;jF(ytOC2yHC0adw%=pKv`wlUvlO(Rr_qpam?}Qh(kg>+_y?)T-
zmCxt4(#K`hm)TbvaK&}<GhU0Z`_>X9B|ZN46!e8*9;}aY9&AmE#_;wC=~pJ`7h0j-
z#KEdP-&0(f{Oag1NABO&yzuCcg4a(*G9H5_l}}*QVR;Pa>AS+NPS*=}TB!n>;PUtE
z%d$Pr?({2@pb4yf`Vjs~o>JJqkZ4uBgZTrR`1CY}*RPA?*@(}Kt~V!mERA5d<?E0q
zl8-*xTQ5M)Howj`h#gPeVT2h47mb-jFEZqx=!xwYRB;*nw=sY$^f6%Uq}h;oY$_p_
z+N8YDo6H*P5n70G+HEFoRo8c_zd^x)WmC8nSv?;{Y=EI_S1ij`C%l|?XX&lyOi>-m
z?I-Mg@1r@$IN&=CUslP)>NQlv2rFj&&q{`2(D|rFJ=bo+v)&Zj0v&<wNb$Dw@S$|x
zUWjYuYIdqiv|Bg-XlT5OxNvsW*0=SBjndxq)bC00hh5c4E-=mO4Y6A)Q$M(>y72)$
zMZo!Paf)jfx4gDv&Eb8`lXj*IwsdJW!H~E9r>oAdA+8KKkexaYt&>#8@0iCkK91+`
z!x3HMtBd0}gQ;h{d090!-PI!p<NY-o{`n^fiW%LU)d8&(o}tU>J{$%mXIs^+H>f)F
zx4D0-s7wJwtA_hu9F97z=YMVC4NYIhT)Ii+%az@D`w=;0o_+k+LL8OHr2W@}@?oNF
zn-63(t$9saxkd&q?F^02Z1V|oyGxEeXZ<{(mnX{$$GL^yMZ8V5^xcP3iiZXa_$>_<
zZh-1m(-R7mCAN6$K0;R5qhi3at!3y}K4$oJ#@qIWtGHaR!nIDA*^MUhn2U}Llt?So
zv<byEwf5@rZ0GW9JAx%AjmPW;E$eH)o%)+<M#{Y1eEIO_<GwAFJ{v;4iN1JN0cVr5
z&lWWblDZ20w`-13XrJRv^vhHE!ORlk&$uF>@ZFZ%pgXwMH3~1p@S-n`lr%wk7=!oU
zo>U|-*=G11>HPW`uQE^5Wb|2W22!l#t^HB>`{(a0R2{NnTunmmkIYRal%8CHLTMy1
zjls`OvH7BX>E>6(ZhpDf$=UdrxBG4jh3Ay<YgI$d=tfvXC;3mo87SS>egO|Un!48`
zX|Ej*mx7f35k<}#H*QipWwFB{6R3p2fO`G;po+wej`K!biBOho80}+$akKm-E7kO-
z(3t&+XyIE$v|=Vi^|SqQS9D$EXZyVprc|uv3REAI6HLFYX4?)Iem`Byg>G#JT=~Gv
zUO#$9SjgwNH~00`M0C@v-?9D%G1dszvIyzL3iySXix<AeZ^SYNsuF+e@0aqKjcEHI
zAru}{&aE)sxvt}BPebU>SMtw2C!89wO@DE?ruT}UZOl8%+-_Y;_t}E7rS=*}P!P@d
z9Z%Qk^_lT@aY-LcB;9%vx;z&_MTzmM=T@ZG(i<jn-<|rP_1E^L-2!UV`!o670+Vdy
zpuO)7c`d&szC0`p2&>-u#>#+=D{=00?j*6qZ26*uQP=F1?0|#PWHiS&W<BrKtlgCI
zQ3FwO_aQZB39pKH>Q>a~A9}vK%?n;j=R6Wek#w=lGq|s0{3<3Ls^_^q@M=QUW?eej
z)r_*@e|{ZQ77ZiR(&MJM#Z~$9wc@<z()<AWPLpd?o5(?*bhNc_dPifRw2$3lq87(3
zi=_}I(;(KS1Bt7XUbjz`Vy7z~qSI}lPi;9v8QrV)dqj1IGsHdn9^7oM4>4J4ta2TG
zswF#O<~nYk+<eljlRXr137bfC16@#0+val?t**ad`%38nE;>ii0NiVI=6-J8>({OJ
zDJlVt*n&+DkSA8!=;C7Bdl^4&@B8Rjy$dUem`?t!a(K|z_MWlGJl14$t+g$z5jbC<
zy0T(O67E60U`(|e=um8P#(EV`*hwxexeed%aqjetf#5|&Vjq<r4JdNT7Dvbz4(&W+
zD%SHZV4u~X*iEMspESi7`RP}CvXuJaB~!*dM|d&wmml%)q*cn}*?<7n;x1?S3yg)0
zh9}Uc_-1SaEhl+%&QsvG8>Df?62$bTW_`A6BIa};;}1kL{7<d9nc(^DuzUK-Y_62`
zQPg(16h0fpbI(}|NU|?EYtLQCjhIITCsI7~S26l~pPLs*{0Kxv$tyK^vv6=o;V~98
z?QyS`5d9VxdJf5x`js=RU?*Iq>*FN>vq~mMFlqnuPsWrxNxBX?aNe0`knfQc@GfZ8
z>zcg|R_m{o3{(c)Ay#ruOpc70cqHx0BC8*Fz}(YX2o1)kgr@A$n_|d@N()O%{=k<{
z1I^H`|HE@9rSRoAxU$e(s2j5bW~twN6w^GSL(i`1od%D(gW-|$%<E{}(zL{&##<KG
z=o`AT{I6Z>oVP@{G})w9%=}|@xZ99u@vLvJaX6iBX;`Fl%~;34jjraSIniMZlkTJX
zjbCT|Q@>YC(0(!wkxzB9)}{}NLs}4JH6FEr*1Yjag^%l91za5maHp1$kQipCxpb@?
z<^)im$E#Ul;X)03)B;X%S|IyiEaQV8P1rUcg)Z!{=@Ic3%;6S(df#moZx@iwX%EJ?
zUBQrLK~ld+u5}mmd%p_7oZmbMeJ3o}CT5?q6uDmwU3z0_lF=-kfhC^uPjn)=Phj+X
z0lfWgWJlg`<Utc=1ot7g*oV;+6)j~61+iNZMJ7SCcD-W9F|^pm!E^oQ{){bp6ZFBb
zLHLwQXY;};t_cw*ud93U9Tf<7Ud4nB@&nmMu2#=3?$#Koz<ms%Jw?|SI@~0jv{VCh
zGH*)L%E63TN`jLfYq`8YYZb4>@zydGo2tiW)`4Je+;%*Nt-X@c0*b=I+Q70aHKkhU
zBG<OZR@z0NQcv1z{wx%$mxiV~a=|Po%|*eP=DyUs6JtD%7;cp}^+9>{xSVDqu+HxD
z1GB}kkFHs|p|*P+8drI(sUnQX?bWe^NH<(xyh(kL4~9%NJ9QNynr~Gcg*C5@etJW*
zjv@q?@g{$Uz1)mBmMSHHu5p4!EDzl%Ze@P9VT$3o#Bk^N1(*O@KO?1m*v>Ap`_5##
zC3OC#Ha+GvOQ5}nKSzSQt<e!RsGA&m$%1HptLk5`1*=LjNS3!Wl)Z?QD?q=Kx74q4
z&s0y@AZn%S5qod%tng01&vv?fjTW}+z+h@j(-5`mZTyI>G(%sOWLLum+WcC3iTn&+
zE97+-p8%?Z$=M8xPif+r#lL%-6Yf-e2M%7k>)pf9m^(!&-ACVOYtVz|YOQR&dIFkj
z#qhg}qe;$N^r6_nc#XNb)((6IGxSNO^9>p1$@&${Fr8mmnmYAetR*Gkt^Al4BGAu9
z1y2g?D9blA1Sj%_mNEh^R~A*$ZPBQLiMH=c{9G@r73W~q`c|i<Yrv=c(4VKtX2d8V
zrg^pGf}3J{W%FQA#juN~T17&Jjp;*vWLsUwg@F1uIQ#97^+`d<;<q^}jqFVQnY#3q
zqo)=Z=Y;=>PJ*`Nk?dO%G)Lahn#4Ch??=t^3n6+$_U>#Lend7b%jG$=R=o%}98V0X
zy*ypl<lh3pXzsRedp4(_7NMg>ez>aQz7qbML^&gE`doEp=&Bfg6x*pg7~F|e@=JR}
znlA<@_BhJvg@j{|Dc>cc-ABEhwfR~pL&jU6H*cB82VQfAageC_jKv@pL-}?X_ow<e
zKGIyp?b2Rx*_Ksk{-oVSl|Wcua%YZVt^ZqEnBpXLV%7mv6OzNXIZlusFrs5gsFN+b
z(RTY)PulT@<43XM9kOfLYoT=l5mW0Yd7`@J_Q<(Urryl>-{DnZmNMy`ZxlLH<YgiW
z@H^akHcEZ6QWk!hh%nES%i~1fS-@+8eTzmVV3)lV8gaVh-V~4>bx{cwwWU-O7;#VW
zobg&X{H&L^-ZW{Hq+{`hWPGasG%OVqSnD&lx(pXu4pwjEjJG%6Lb}Iw13)<3T)3$Z
z%Z1ekc<wyTcACE{r<amFvW+p7r@eFvB7VApGCgGoeuII{&sSIvl$Mu=pJ8Z>eH<mv
z;)`rD8^7^&pg4Ahwr@n=a~j4@=^@q2Epsmfl_dctJZLQ$ykoW$wD4lFwJ}Zva}(;^
zL$#)o%4;P#ljU2QT(Kyhp)|{U210B1G+dQmVpj=~LJ!kzvu|@Hi&Rreei-U>xfU0e
z#UTyuVKlZBzix8rh{6~wyTon9>&s&*-~N7vZa~pB=?CQ{=zaNEKi|wsAlrk7@Fh!W
zq(%CIS2mMEQkz=(@zuq4K<hbF8b_IO#<z)2p+FwCaAR2~v8w+uu`IQ#VYcH8h;xhe
z;P+vlb5PN-B1bjvYxu-nSqi<Y(HcDwks}<Ke>!ywW1R3UzI3Qj=`Z{i+w_uXtzDaJ
zdK{q)Y{F$9-59TotR(%PU)0;&R{6bVceU?azKl_Ii{W}EA|)(cloQq{q|(}}T%t1f
zeSEmQba5$#E%hjrj+bC4y&1VuaIphNVCVFs*|^tTxPWa4wm{_EQJE`$vEGD%_1#+r
z7!GJ=r+r_w(PD5V2DXg4nw90WyBCuUDJ5joxx@nT;da$pYlbYi*GHS_Xi1k62JEMw
zJs|6JNjf3Vmmk6#!J5Fqw^PAGEXQRuPIRksH(vrShPk~>6G2Xp(d;GOO-Acgb2t(`
zV=2`LqUf1VCj+T&PG7k5@st9;l1?}6iw9G1$MMFxsL2(`I(e44TjTP+DC^{?4$ZHa
zxZkt=v!;T)5w`F~>K#5Ttx@~@d2@nO>w?<j!fqNr4}aIkdUGlsWoXXzQqQ`Mn?Af?
zs1GvYBt}m!VK7S@B~9clpxZz)b+5Y1(PbM7vr}n(U*LuoYQFc~V&7yate+D80WNV`
zwVckHo((6N>v3a_=_h4eDvczHcFbBxTX@@J&+m`ao{H;9RNV1>`CI<U&hxCY6~Z)a
z=Ge#}J7#e^42rAOoD37_!zwt4tgF6-2ACF^->{i@Rn;A%Zu}E>-zI4^-L*&9awC3t
z?^CN6(Ramg$#A;O-uH%V2@(B*W0n+w8=2~>kY5RLy4Sk&)+1_b+VsMGHrcWs!CBvC
zGf3_}h;BWf3D-WyysT~%(+>Ov){IfPmad#-N+XZLcv;uWOgAZF&RkRuaHFN@BKv)O
zVJ&T`9$Yg=uSXJ1xUFJrMZGDqIoM%AGGojrLbi2EQh^H?R6nRic9k7K*gyWWSWO4J
zIzJrAxQQVwlx{=a_aaW>Qd>`k4Rc1}WPbQ@u2^!m@dJ*6R@-!V=TLIrjkSnMbNaAY
zS$+I(I&|2}BvCB<ayEG7Boxt!>loXNVzkvm7(vRp^2zC}$8YN+%1#Ao?)ZN3^6y*>
zY0VJsULBT8Nd4BpfX$~WAl|NCGw502wb>jOqZ$k5A1<8qqM`?%>%Y0-I9ro_UoK~I
z9iHQ%Wjl)tPaHYf;cy^2ro~FHFfj@i{+ShiY;cV>SW%*^pt;FETmMwHB=eHs%iEbs
z^>0ge9J?MZD-<ftIzOXzbN=$q$4Q$(UPnRWG(5$P>V2ql41vEAA3YhaSa|7c%c;9+
z?d0nlDE%^HBk!%%g}>NO628_aTklaSX)QTRV->vl^&rK?x?<X6vd$;4G#u%tSjBi%
zXPqqGJVRGFQ6GL}YU}L|40-kzpO;lyB~O?b3z<IbD(35nDGct2Wl7u7nsIA($l;lU
zQuVQLN#&OscaSTx>RA$RNm1j+799*I#(%V$bgcDD<E=X}n~FHCXY_$2M!St)xKT{L
z^_XA@e`Fa~ZZ5&ymEFzpJY4Wi5N?Nbn{364&rF>&mW`FAi@8GvQ_;w%GR~hfWgqj%
zhiKV7E!hyepEU<nNUk7PJnW|I+=^$^QPAD;5lOBQpr8}$$0)<R5F@pIB%N@hHhQRV
zz-y`Ej`7RQh1Im*nx+yGE=O;$P-sc`LYSo)(S?Er#A{HMM=BkEV)(sc)XvY73lLC8
zdB@(Ue!cX_%Xxd_^a*^4$TXjBfHo#7O@^2{t%_5_X>dYO<~2`73N8+h!GqLc+*R?$
z8uq3jPZriLCVLhr<wDL*5ml!q$)Xhto9eK-Hgdj_IXl!|_tspgy@D>gn(@0ls9{GS
zg;O1Jv0YeIF?-tjV^+65+SK4awwcrF?eDfM(C^W+`yRKruh_$cktx)V8txChQW6tZ
z<(w$Z*PJlO8YT4iWe=m$Rh+x2?fpg9mow(5e22x-X`{!TQ_C{$e>^W}OF6TM+PV9w
zjP5(jThTiecSj;^SlI9;)wTOYY+gtmIB?enYh-5?S!moQ%l}bl%Ob?La2!1L!dj@+
zUHidM3uL?&EE7!(^t3Q$9a!MVO#Yl~WG$;nQhe6u2C&*Gb(qMQ`VQ?^w&Es&Vu)2t
za36<3FR$JGdtSz2pOd)#jFoa=0rl-<+xps%+0q@?Gb)PK2WZBv`H)m}*bBe6drzoS
zZcY<?No{b)RDu2ox@n>bT^iUuTAEfHJzO2k>DJ-?DtgATAz-M@NMq2&7YFZJ#Sw0@
z@h#V`sOive^|d6rSSv`9(&-qEo0XNn6zG_4G`$vR>SrKLJZFi{<LFLNYljuIl09mN
z8F&M7BG1Xu8aZZGJY(~&SEjQ>l6%H5rnzcI&ytRD7yXV-N3aQrE9_1BqZGty`8%<Q
zzDgN=t~XP!!0N5ouA;>x-4@#@9>!b3)fFm`e&hf$DK1Y*F;V*44QT4j4+QusrFjJJ
z{4*^61x(+{1b!VU(!?u-&Tn!H4MSx$M({G>C>40kq%d8*({xh<;>4JjR^lYl{xoem
z{ba~`-V}iBb2B8a#{bM9tQK0-&c!TNCV_q)jHv2_UxZZ+g*sR+^Td0~KeMH!c;hO%
zZ}KtdX>oBuMKC8FS)SaB#r#-`J4180cNTQ+=HZ#Brp@X_Ov1AMS@9q!Aw3#i>M$CU
z)VC*(zur(evKL4kSeDJB{i4|HB0xn%y`Z78{=nB$%+YA(TDkspsY->iU3=y4Op|vy
z^=`q{4{*r^liJ*ZZ#J!#2GX(i#-odnF8-n3kAFVcXM_f=Vat#!@~F}Lf`8wFl;Ik-
z{QI&|TCyGjIe`Dh3K8%5#*Tc$^{f3e)_)Q3|F4g@d7{9Vp(}mwrfX6t3?yLn1t~1B
zT>L%wZ{<TB#Gw%ANr6ko_bEE5V4di;g}s+bS#Z^Q#XE*;LpOpszf{ar$q;`RaCK??
zqb|rh#r4s}GJU$ac0B_B0%-q*;m>y?W4bA!NQYx#f>;Y9<R&goNA<Y?E!MqW9+N7|
z-t?2G+m?h~Px0SeLxX=`ro0NI8Sfrj8`1fV4S-a9AyDPgk~Ks5qwx_~$pOr1VduWi
z_9wl6ipdPirR53wJ=@5bd~~3sc`LrTC;f(C=&6IgpoQyl?KdpPiJvl`AC4M6bsR}Y
z17z490e>67>foOLuek`Pc7|lP&%~|>^gj2-GCk_44<KocfL=|e+q5js7Q**B+Di0E
z6RMay3%XW0TrnI*^<0&vJEf^=c3bW>_DWn$tr^r_9O*&<;zjM;wWW~$fk3~W)9zZW
zW)>XRn-$3ev<Y??epISm$s=u}pc@T<EfH9x+E+L=U^1aK$;*@CPAjq%%Tyw8G$5~p
zmmn05&`=g;fP>W_g?sc|&+^fvBQ65Rb}h$>Zehq%xIgi|(#a>~C2;~6HUeNCL4yv@
zJ$uexb&v9-96fJzd5d(fCCv=}Q9WJ+nQJ_JeGqW5ZaBB{A&ye6Es0fHH?|+g(EntS
z>(Q+5ezy}qD&gEMBy{OMo8_Yo0K42l;KL%oEF-FxQdl=C7h;h;^xFZ+EpCH9S&3WW
zSvu?o6N2c`qKhBn;X4HL4t+{fxIvevI-~th&1ZJvlVpi8c<;3{HG=q^SYXPj(P_*$
zBCPge(-C>s8L-Q674Z}LG_W$-Z1;fKQu-bA_f>mtI{~T_fsh{3TL&RWW2U(A6|CfA
zuDxQ7%A%Wh4MX*9y;`UO&UdC<dz(*P*n_t-LvU_IvsY-7fEU<yb0nB*xiS)RWWFV3
zo@-wD3vbc?0?~LwLG{+Nx##DNAn`sMDyFf*7XA$a>C*vM7mXn7q-1>SHlV51=a{VL
z(ms}K0O)1WxJBv>w5x8xS@O%v<Jt%SSlQA%Caj&2n0IXx>oG0|h7F`LM&+qM%PN|%
z$t8@UaBjjc?!Ak9*Msqm+3Sr_<>_8lpB$p5)c?(Xpm$lLZ0>P^1^bCw8_h~~s>3&~
z5pB~jSt1>Jas-wGT1?E0k&V(rFe6Zr6Y0D47p;BC4F}6Heo*C9vee{scCKJp!`<%|
zG}N|y>)yax2q)-`9|h6`Ii3k?ewlhDc%UIC!=LQ0<)32*+BV~fli18OSP8Jr#P5Tq
z<}TS}fz2soa;q^UT3hsNqtukN7w9Zda{Nm0r6$O(<ouj%^c=+uh?7kRaK(R7vjJsk
zF6bs@<olRCpcm+<CD<1?6LC924nSo%bFZ_1o#L5U2WkMW=thw=MA;8l_~*+?l@-xN
z8qPh*mBdn)jfctkqaeRz($j;7pW$UUA;O03jOoyMgw7Q~Y5}9cNuiEW|7EWWOPV<Y
zjW7y6c(JpS?Ju2CdA`><__;F6us+oP#zMTZ2+L6}=l5T<{!IAq)BWT5Cte|A#0VHd
z=fX_Cy|GAP!Ff`Y)jMbHKNm)9BC<!bIpecUQN?Q%qNcL;K(|i|???MX#enV!fFG&w
zUXgh5lm}Wx9ZXjKnvX7RcRjYIqP@4mIh7%fb;m!>cljJZ)hAsa*pG9|9iOaym^uI@
zdyBK?K>cUxt@=!|5Q6dEPak5*-l)#}w5Jqtvl_GiIz4|yP_Q@!*gNq$?DT>z4)VI>
z#U#8Wc|Fd{+%d7(@R~50k}laD{KhL2k~#nRp7qC(<X!;aoN+kQ>7=4|D_(mP)*L-I
zft}Pq;7n&bjkt~9&$jMW#<Ei?%J7F{=sHv_qNHm<!ZBQyVEzDH$oBgIZY>kEk6@N_
z;QMjGWV;7oJZy#FZDT~`(X@c)tD%ujYLw~t#F3P1q0I7iaRL)ob1>7`C<Cqrw@CtY
zWq-Z6tdjX+nJI#b*kwO3FyH`PBVf!j!|%PIcxQ+$W;LP-G-~SF6Yf8NP?PO)%;RqY
zy;JQ69oek+dOnQfEQee)RQT}y#m-ST&?V;jq;au9Pq&2gB__Mt<`v5w{Ib~ZngoOB
zY&1U7B22T|GwI$%_=5=WB_?tZbs2{dYDO9l$&ebQwZ^}oo-~aUqrG=p@7zj3e0s2Y
z=j_(%4*6it>;9#}+DmV3z~yOCm(n@Qht!*0a@=G%^*~#2zK_(p!iiW^!#Nk<*nIhn
zf<omi(#cjTll0l1#I0^604Sz0XREj&6f7T8Ao!gL5#MV-8))^<Sc4UOE?e|;twX-q
zv^OZY+6elX%ej7EHc+RO%@UT(w5kouk61<pI}ZDw7|=2xxUeRre<)Yl08>`hmJHF3
zC^a@JGUzx)X<HA-))Yi}ndN8c*)QlWD035Q^a8qAeeNe;TL~azN@gy-+~5;TxH%7z
z?xS9UWjt@I!>a`y-SBQSOCA~bBdB0Yi1<ti2yeun%fUyXY4|1Dds5AuVG<ZS<s;8n
zms*Rnk_|-iD(9cCx}|=Fo-yC^08BZ&oiUZon;jF?&|}<u!EZNnJ}7S(PczaFjd#WZ
zo`OYhgmDUV94i>x+0o`bS$?LSNM){iH0O7`mDJRj5kNu#6Q3h&9Um=gW9N&8JQ{>%
z25PvAX5idR*dLwDV;t)^|2FpN1TE6;#Jo<cZhAS}V8u-8x<)O{EGAPLm&GIDH?6VB
zN&6T|6Q*mQb7GfQqgBKXpQNRxb@ZfpFV!+N@^($>XcKt9$ntL&M~MlmeXYdZeAhTu
zcq!7bD%SrMdgKn2mpN#x83E3O+5*Q+oj$S4>EbyD;(c_a-mtp8Hbz8;LL-a3Q%yaU
z_5k&i?cGY*O;j$Rm-%&ZZ2Kovi}{5FQL!EN|H|5lD5;~j#W>639!B95Uo<zmh0f+J
zpKvn-8Tvk+=1UZ1J%KHx^_+6@*^ylUeTIVha@zHvE=VTRqCPE@gO;&(2an)eDj~xv
z4WV(c7HOkmGTY_?{sOXi?~YB$w>_YA={^p}lX>alr~9IBexpX4<d%vc<+>Thq)Ymg
zo4BLsX4zoNAO`AI7@lH_IL)#>cPQapE0$1ECIRh@SFa{MJflpYx*R|0E27Q2m(-3I
zF^r|+K4PT^4{TR>Q*k(>r;=)dF=PhC7giR=uQ<r1PkPjtiJk%R0h7cB`6NE9E~7|r
zTUJAx5A_aEket=H7G9{Bkm8C3i-}4~@-+nC<{+7YF1$$4A7-CxF0<yD2quK@W?D`%
zzvZ0fp?)2MOoWcTVoHK4uI+IuJ##TJA#T5V4;mFU_V5*LF?E;(G;9uLm!NieTo_S7
zAM>`J44nmxBOemj9Pqo^jk=MZ>~Vd~+Q_=#UR?YwVjjjg-~L?wtm7)3%5%#3LmmB-
zk~A7-JmScEln$jWX|imreI>X(;};w5i$^{OEBLsswRum^lpk7+yl#8gir0xjD)W#>
zDgpD@J}%3pVtHb~7Gt3~B$m2fqiZ?i>fAC-Q7@(9K(y=5l^cg&FORLF*RI2SeRDRL
z7&K=jV-tDo*K4YX>LZW2J2U)b2uwCWP)D9^=&YZvCb3k*_#nne&W+bedQ751mS!Lb
zH$2(<eH7#Kv-9?mh%?hHzr^p#<MD|{rEU;=%>3SGHqi+IM|xEk^glY^vU;*@``g=R
zR2*QV3y?U$0ISj^L@n;3R$)-QUB-=+u&8u8a79<7awR>Xel&1?Ke2w{dcercz@@$#
zRN>pI+Z_B1LSp&iqzHq>0GS^QIxQzH<9yJiqC8JFA3ydp3@nJj_>HO^5(1nQEES4<
zh0<UyFD{Lg0rt5rh|wLX6!Cj@MfF@X*;%8*>ppt~v{>j^BzR(<+4RDZ%*2@rRc)f@
zYM9^@{cmCtyLTUFkFsSg3|Fu{5Bu~p9{X*+n?Cz-_UsS$*2dIdj^9s~xPQJmqQ^@1
z+8Ad>fyZQRJ1b8y-#Kiunlw8wmdaIJu3TVXbX?Q!!AocJNZO;vo+qiW#(Sq#XdtU1
zylnk-;33L@W%DjDA&}AGiP&U0ZKamO&xQxY$039MN&N42v7{27PbE}LC1KzYd41^4
z0A7xH_-R5C*ST4dg?{MI&8@bQ9G}YTqPQe&A4h$ci2@s1Q}C0#bHz5cxsRc@?+C=m
zzx14(Z#GqC!mWg0+*#`SQrAVdiD7EY))4=ODaOcz!%Z`jH{i~@2Kd8JJj!vETZJ_p
zyp%`yN1+MxvX&1R;Hh12HXbWd3K9jIAO+*T`^@$*42h0DQMidkzq~|^6a6-Hl-GDU
z)MUZg90yvHpX76AMkx{!{a#J}6ldSt%a2sEzz}~cT2(PT(>&IdjNI#VHD}@cC@<&L
zIesl0b<6!OwvOgNTvip=IC_7L^l^6ln_Yqy#oXE@edK=OCyONSGiGo2q0_{Wu<^@C
zxW6}?0aCd$hv@$Mb#t%d+$_J6MMXc(L$w}+_8lbqO95NFOzlXT@1|S^eN3A0T-UZG
za#0x<)$&~15A-~p<}^4n@5n22CVIGAfjc}Z;Ck$lB-u?f{?dfdF7zHvLmtOlEET(F
zZ(v2EKmekC9?Ulz|1?Sm#%#OT0MV$lUadM1v)8G-HP`c{8N&nZ_Pb2$UB*z3Li2fk
zZC_ZUVv3vJghgkF<*S>PL}m&!@C2%DE&k4><fB0W{nU%}X-=_T6N4$@9;oVg2?|eF
zFEIYV$Y&DK9Ia=%u+8fNZ7~-ZH@tw~C6<auadl82F=xcSYCU&a)Cczz`}RBT%7*9j
zB=6wX{LT%F*2GN~Yg*&`A1$fF4)PMPMd7>F!_GaXY|JfwKi<3zc!4AeO6LQNQNQZ+
z$L=NYJj_FE(XDm{1}*U>Nc432o(GY~s5+u~32>e|)cRjEfT)FdP<8a+elaw&D`Vp@
z>nv-w3gQDg^za1JVtmDCt1Q2SAXIcAyz;D;+$x1lFv3UA_`au))Haq38O`Q~g+wZ!
z)WzSpH0m<CrKht=ZfiTPxUK)p!`~2|6caWO+3@fxM4@oM`kyteq$~c48iuo-*ypb;
zr+3h&f#-`PMOUPd*ZdF&crC&i*69`^;_%74CTT=?AMRs3Y~aHeYlrD7JapA1Zc`Y=
zzyDma)0=Uys%L^=>$&P9yU%nc*v8{CF2zRo4(}66zE#U{IbJGP!t(y8rI+RM<3Ubu
zLQk#Iauj8tV%2`=+?~Cy^|#vWsj3$n^A0Sy6$iLYtkFfo4G9&QS6XXYX&=tBqM>v6
zOt(<y<jFb=6){{ZHtfd>7yTC}awf#osmvY38Y;^u_6y|G8n`>fl-~Uyc{hr6!1eM$
zt^A7S+Sf)6k5l}`A0M=PY`J^?w*(4W0$mr^l?cBfS|xp0L|%Zia6?$i1HT2jqm4<d
zCPU(|=aN%~k)+=Lx@XZ|=ZBq)?kY8^$-CD(wzfK~nD7b%3COC#_6tkgSBWp4JUr1#
z?Tt=`zox19wIjmPkh>4-7c9wj(CR2X5VBW$mSLA-Q+s=$f<Z~3cW%1SqZWSp<eTT(
zhsV`Fh8@bag`HCfdszxA4$kISM33hvefh3K3VM{rO=D%!7m@5U)JtD@4DWIZ7CM<w
zTHSg<fp5N-UXE`RE5!Qpj)I{w^KjB+(dS*t1?vLF?-4a6{_?Qp&IY4Ze%r(9!2p-7
zytAi!pKw(!pjQHOqvNB+*ed=8tk<YV&@&9aGNXd5_u1D6xxXRD5U``=nvJ@k4qnsU
z{^PVHdj;&0_`2OZihuAJ$!UO4)?>%+{mYU`2WX6-Nv@8?^_(KU^+^=Km1%q*)IV=n
z$pB6xXUE_9FHYmmlxb8TYU21WR`%kdWc^fRzQvnAF<RypFmk%fZ(v^=hW@(D#0Lq!
zS3JyC`cDV>PyXM6JZ?qS{F?>=52-6%MT+^qXwbJis$8QK#exU~c0FxDa`c%-4o#ZC
zukgn$RZoz|Z*)iKf8OYe1POjIW|Q<UthJ^rS+D2WH1kKv2crGoO35BZ0HdP0@O$CF
zged4bq>sr*83Z7XpxxJLk2&DEv4uD2np|&aZulsh1YHPx0RzUg#?LwFB9HkmfuW;l
z<$ZL^ellQIT+0#1bzsFvwZC+^3cLdAp$KgYLHimLFFHAE$qoDthj+kYA6rX&bsh-N
z8~{3D2l=v&bGMS;S>FW~LQMr8sW`yzCW~<p2nK^)Ud&-8>F9H-pD11LO-d+rU(R=6
zYs9IhKvg)fl!Zpn@YDU1${-G9;0zTWUY)Qlq*$6e0hnsFFXF(hu*}}tI;tA6NEQO#
zslPB9IyTu|Wr>Rer-4UIS!SCPTVTSN1B>t52pC;mz*&Rw$_o(5n=<|%CJ;8(^*)N4
zt?74u_YZRsZcPZ7zTP>`eouTo<eLUr?FA&Z;N%(S^;RoMM?k_+e-1Jp3ap_;PiqPR
zvD2I#Oa@edVFOsrj6vvj+qR&}q7qoJ7Cr+3QpkVSZBQwC{tTGEBHtf^h27(1+|suo
zP(>Zx0NU*wFh<2LBSJndU_@SFXu0i=FwX5y?Vl`X#92Fll4C9rt^isCdch-)K_$U3
z;QRd!OIkoMO5plsH>tvOHkYKf)r;@B)1!1b2H4469FdjG%3iS%!+?vOam$S6ZLa`;
zHESiu@kKE_J3wVyqBl`2Hs^i^E7efoGvu-ekxx5tYSn$=nc*{s*)@RxTz~||(Ov<s
zAUhs*;054J+;P%4!t`l=N8{Xapx`Ca0Fj`P#pEKX{~`1F>9-^|=m=?OCQiaCFxlC=
z3!`F2O#^&IqN71PW(>6T1+Ea{1BwZnai9p_VLpDX$U&L}npj()|C^Yj_xjAJ$M02)
z5+@><Z@ecY@aZs|SYp|(DCu30tX5kd>b06x$94FI8=QFgKtJ+JCT^d2nK0D^D>idK
z@uzJBB>v*}2$xBS=SSjuo-f7WUeANaK!CA;L`Z&lzTaD^;-6p)1bmL8?j{y{4Y4nW
z!*h$x)VPmJYwdrzY(z1oM>ZS3WIw#u(e3Y{%3Nr;czE(e>o@yANFDQLzTEaqP2=q4
z(bqcZa|By1Jpq*W{aBjMR+VlT4RDuE&;1C&#Q{XwTpRF|_ejE^KQ+?FKPE`h_Za6|
z&ns<-(53u{f1fGMN$M{Hbq8zVRQ9|QSpRcVNJT}AgDT_q1qio);jyqK%s9NS)UwwJ
zNau2ee67%ja!8QlDOWW!YDolJhwATTzM||`tYRTX!R-$KzRNI#!!+px!G3;zZKI7w
zqa51x27rELcMM@)-oFQorl{uR<_T++fG&1IvEdeJ&MnO1c!d~00L_H><K4yR0+G;n
z?a>c$;v!BG1&CO>5qv_4aPt-+3~qR?Xt=&f&ul(RiUL$BI|pvY=8>BH`dAl@3uty}
zv+bM^XgjTuK?s-q64f2E%O~HCz#tMAf=izjpqh?wgqO%U(WHBT0)q{r+-AcA1pSQ@
z@K!f(gZ`^A1)SbF%{<MhVG@xkL*hf05fmPgtyWY`G#9UeqJZO+v*bg~j}{|TJ-kZ|
zCH|)yxQi1J$awDwBaI}rX}^)&H9;~3D@cXr$jPDJy)mtYm#5?xF?&0cEah$)cfYHA
z1AT|p4s<!=wwE-2Q4jYIJy`VY6=NnehjbH6lX7~0!GhUUHF*lcn?{x2$<_gq;XJa2
z9j^{D_2m@P#R}2#yvMeDW1du3HwG-scYi$mmY3x{luB&=krUyHZk`;>5eipr!2xjA
z3ADU$1TaGE9B`&)P?E?@^SZd-84n-W4)eQa?9BAR|5Wh9Wi5I+Ho{N_>ph=W=%|6u
zre?5LNju|hguzc6IQCI-XE2_kk>ieFEY%!Mu!_TJKjCSPfsv8a`*1DM_4q2ygwkeD
zlTH9Hw;fL*QX!Ns9M-&(M?<#bK-YnQ&MU>yOuPYj)RA-R1=Sq4<l!Ho19&$uEFiB)
zOo;Hq@no@RyYL9~szILR=gPt0Z0S<)-3R!fW#>YWWSD8>I4XYxGrwE{7LGQ|Z3CXr
zKF~JsWk-RZnj9dnWNj5R-uWB&L6Yz7cZ_K7lHmPnmALFzz!(glVkM<~xb%gN8UdEv
zDmMgtHj7&+?`=OSL!wmMYCnWRjb+|&p`#<P2J<<~z4zJqEl4-~97pv%U(8q)NQd$k
z0jHK>D1up9$llv78&p;^a>16ud8JX{hhQtvZZPQIyZJ!V(C;wtr3rQR>&4;-%nerO
zhh789=W=qCUO(NeVC)S?2ySt=4&f9eZ_DI#JqN>4)F|CY{H{c-Ei5-~p=QTquXa7d
zZjvSigC&HM^N7^n2aB0Hsp{$>-HW?7gigdk*WUfA&N16F|8#3+l?0!dgwpv^f=j3Y
ziQuB_S#1YSn%S9e$7KFL0g>b}4VPXpDNREockrv5DwHj|jEr%P4SYZjkf#Z>`tk1W
zHgWjNI;c_eLMfO`TZEf_zB=yf<&PYu*FK5e1e)5__{sJxC;>Qg(ylmd3j(n)Cp`*o
zV?ZN%6_mqi+pgHm-C$G-e6fYHDul)ZdMe^$LmDdj+`fW7e!55Tk#B%m#$@k+LPgjl
zE+{O|h>@O@CRojpElL7jMPki`PKZ|+T0(ap-;gBzAWu8?=H#!Og9$g4tyfaTyWtJ)
zb%Drgp|APzZ;l~c|I!vZ(^dI$)yAP(gN!60L?lw)@4|?lpFvl483}Gk&ITJYG@`~~
z$Z+u@HB#eBrCUWRj1V0q3Vno}urEfL4|I!e!@03nBk7ImtU*?u>+Dc;-Z?t(YvO6i
zyggEASX*h|OGRROUa<4i)cRGi8wVxZ$)FBg!C`W39bu+!9A7<4h+q#f#u|9KuJwp3
z`RGJba3}g&fq$h21^!00Wmr>}-J9nMh)VL@p_R;jR`OhPVsd@EMj~K45DseGdVH2s
z??KH}Qp8ir(_I@HBD}G2NF_Rc5?lAEtdj-1*GI+9n94@x{ks~E)!=5pydRA_{3tJ0
zWbIS4D@B!b&3&CJ*KwDR`;i(;W!ZR3b}9XG_t-5m*4l|13MOr{MzehyI1-sUxu*qn
zvp4)J$V2O1%co?d_GDFkXR}Kr`l@hj)EAB$T?u-PHvf#bIGbMijQ4t$-7|Z96{s_2
zH4{Pbj;9R7)hOycv*ox;&bOqJ!X}!<<Wu8Q1BcYTp7eFF6Y9uz%U{5RPIqZTHc{Jh
z@S~qpGB=vpd{5G>Il&%_y+>+|=NAnzXx7R2lxTIY=lf^Obp5nlYRl3xnEj-~r-Y+`
zwp~idUtC)!^}WTwN;X1Aa}B_}!DtqbXVu_{Y28JJ`<}!=yon1pXM;)Fciy-Kk0Dg@
z&aG7V7Z!aFMGV^%)KoD8>kL(=CD{cr+Jw8@VS-o>LYbHJMub{!8n^o4@j=`c+GU_0
z&v!m%pYNpc$P=khQg)bG&zPMW#IbjI_2s0sPd<;h`=A-FNfi0M0Gfd>3)Db6Ho3jW
znyhz%vx(@w1p3UEE6!sU(n+O6qQp9<yWl0^PL@$?d{ZHy??TNs1RE`Gu0EN{_Qk|x
zJfLVa?Fd#Xt4FB5%lxHW<gTG_n3RNsF8EntrJK@kForGE_&Q`rAh+M`rerGw3&;8K
z;}rMl|4`u{8K)f}{$)>3i4~Z|a<k~;+YapKS&+4ER_p`@74BoDexi;2t8nq=E8?Z^
z8dS7q7%IKqo2-YddwthdLMb72PPZ+V_U1Pk*y4r1x0@z3w}$YWVB_<wevFq>Q9gpO
z9@A#y353?sTEHfsA2Y4L=r9;e_uDgPFm7U_#dahJU*WVIx>?-oYlJ4^8vll>)7N0F
z$-OIpQ9>$>6ypbtSbnThq(BRQSE~82NvNC{TmJhOLKY4@a$_uVBs|6~ktmu(%VL9N
zH-pIvefPe%HZcUeW^U-501Tvr)jU~`pf)=(gVfH*`F<1Yz8*eHS9RDjFtZX8bNV1u
zJ!XFM4zlQaeD5BGVGKVR+mRL4NZlnUo%c@4Ams*K2TZ<G&*eR?)fus&FSkMZ+LHpm
z%Jh2jiRa(nN_A>j`5s+bOCZXWB@VwPza?dlyE1t6ZP*sf^E<GMwTd@wWAr$gKSQrY
zCQ3Bj40h3UG(e~caQ0f!%bXnv7E#I8NB*T)u-$-g<g~jTDj7fGM+-ZK+pqh4rsE|S
zD`y2ph;bRCIk<@vcQ#yFOmv}6_zD=RO&Bd9Y`DE__nW;8lAA(AZ>!I(()m^l*<e0k
zuOWKZ8N$<mTS&u-szHRNBW!BGXoA}>L&Ays1Ip8my6_Z|_q_{61A{#jrO;r)C<J@n
zOKL>N?iO+@xhAA<v)tyeCBAb?b17<pkjaf)Eo6>`j-IlRYTpZAD3nrT$!6aIKP&R-
z1g4{{?u(NK44oLStw?iC#vF1IR4f*$Ks>9lzDu1DiTxK<g4U5DZ8$=GmfA8ge0g@=
zCQpX&(PfZcriZQW=ncvX_slC}1sZ{H$7|>DJtMpbTfE&en#FuGuZ>*iPYIU!t%H(J
z*O;tzSuzIphqdEz4`uF_mYgHD2?o?2(45|kUN2Uqs%1grKP)giT#~K*!LLRlMOw&R
zyKk1K8PGy%*%V1~%82^tT#mGFVZ!F({^G(lDIxRh&Wak0cw#_j_~$SO)S-m-#pE5@
zE>vId6;97Qy3U7}Y<pp!6dHndbRmtQ>$FMGd{v$Sx{_T2%g%H$6>WiK4T=HbiqGPU
z1>M=Uz2Y?8y7uKy@9x4a-@Me8YGIwW1(um&?1{bSxprPwbZcrXvvv~$eh{xRpVf2c
zfmfX7a`0@zdi;sVFJ^E`jBRHR90!r)3br-56Ll+Rk)EUq*_U(`ox|07XIv{ttZ2|R
zx^c*OVWJ;p!~k4==(wUNoaqA68OD6WfA$>xzK-R-!e-Awv`ejG$D>&~nbfNri)@94
ziHg@Z2L^4)8dXY{*w)vJ`YFDM*iy&W+|pikZ`^--UYf43*U<U+A^!}6lyj-vX&H~h
z5p-hNcP6dddz2|L#9p`_CKktKANQ1i+`c_G!TpGAFJF^U$|6^1M#}l1&}LI>;wJvF
z*JuK(3jdK8dB>t4ZESg%I}2+^`%o05Sg(NNaOr9OG>b+#&(FhL7xz8bwW;lxmdk}^
z=-1BH)2yT6@TVoaHU#P8Nrcgpp2@Mbx9Zz-gLfix65oqna=eYFo0(;~y+7yWr=CBb
z>#8tz$}t_~x1KV*oC;rS9M-#rjMn5cHKa?{wXj|PL_EMq!4@=UaFA;nZR+qRv!M<u
zcmVhl|3tm|zwj3^U8d2N3ATyzwc+q@0A-7(%H{dOqv-CRuj^|DyN0W^L$t~NK>>fW
zyA?73hx9*Cu!a3o6n`TpH*Ua_I7X<6<p1%+{0)k}p#y3)YIReQ<{JO|>ry`kfUao%
z$mUmnVyl7&MhQoEO%V$O5c3%C{HTAIm6au?1AX!P?*=)@XUfM>BBYmh2;UblY)u#V
zcWb_*yiu<kKQGG$n8&g)upeQWzTnp+v8I1J)IDOISNPjoRMYGF-bpuRJ_wPzy1Zxv
z)TF?QBkr?t><Am|>~Njf`*@22^v$&J&mV96K`Z;-prPZClK^{Ba^F|S*&cZQ@tP3|
ze{}?AV@qk?{}AwhGA`+bV#Qb%KQe}9L)0bXbT52*?1jVXwdx1Hu2TX@-eIA$^6xiz
zjy>={>2Q5r=P>y9Zf`3tP~7OYT+!Epg}=eyTj1K85>BhR7Ki;^x_l&{9zytG&41*9
zI;e*RG!gQi8QDLpjto&j^<-W1e}Y)aWklP-vD~Kpvre()G6&Ikx2ey-Dy$I@m@%VB
zwu0Y^8zhsDE=U=_3oNee5qlCFz$%=a$N)Nr@N|Y>UYrTiIsV%shb@)46@1box{ZZ!
zg(18d4PgC%w*_|PBKD*^fp9|*gEpGw&jfWpG)nN+IyJ<t4FB(00DzESgPoc7+SXZ#
z^ZAJCEdVBhowM!Q(X){y&OhHkU?mvz&HL}2<6G6+e;EwOf%C~2)Oy_97-H8k37~(I
z`c|9?e>7xd%%N0C{Tr@8aWOejf$TQz0B2S>SnAR~2LIqDKLd-n&z{p=hJThkeV+r0
zJ8pZn8CbKL3W0r;4PaX)Il@%Nh1jZ&*obOZ)-SioQAzw~-2|eoJ<2Sgw1BrG02NWQ
z%a=C99&)hYPUUj?QRminZAtW><Yp@3f66tYv@h##=;G}q7eC)=)J(ht9RVdeKsc_7
zkf`?G!wRjcR{di!9hy`vMX=5KX^?O?VvjD+xOf|Ea`TD24_5laRJHH^IfA^byTUlI
zVi~*ot~u)i>@bah&uNLx1!%myKx`pF>{FZPk2Ig@?$Wckwl+r$C6b=>s<|F(u~=j^
z%I?Hnn0VXzmw?|%&3^Z51Ry9Kr}~eU-N%kV?6o?g=81M(+!<cLjp5*HGV(8eof0fL
zz04(eLzeYlt!FwG^ngkJ&xHRv5+RlvbQ+B3OaB_x{(n6JJW*9(ATvf-VR1tL{Ixzc
zw7$nyO!>u_Lu@dg!!<$xTZhKVD-Qk`xz`>db%%NkkfkDC_nQy)UiBt>&2QbXuO4lO
z?L*>!-V3TkJO3#OkJ&>KE+a`22-L}{b+LS==g(gt3;yds1^iAipCh|S9^JMMv<U_n
ztK~B3zbabtm|E5Kp~vy3it_6e_wOe669^W|`@4C+B?&Pyuz*1-UI0G)=lmDs3kE!2
z@$^5cm^z4&0Vo^;;a?~IC=2?RDw6eSy{)Bxe%|*H%wb9sJDR$GcDg;#T=q|(*Fvtp
zn@UOoXatY$&Di`)bP@-t6{q^`+<?DYYCJ-7vToG1|FcxufPmDqyrA>v=T_<<dyMwb
zT=qXlpA(SU6JN-`#(5<LFwTF(b}avG{s2!?X9NZdXT(|l`FZ9ekiFEhx%`Sh3;q9A
z#_vPI|E-MwFFiwea3@aeNP7%OPYADZs_<F?8d-E5n4pQk*%9$h05kJz*0cXM>wF^#
z^1xg|Y-{a;?03xpMn;h>0#4eH*9J^`;RHxLzOem9pC3T?i1Tv2I?zG*e!&qbBw&wi
z;atZhm@06<K@&Dm1lwiJaN7lwFtJ1BT)5=-#0}u=WEr6wj@Sf#Z>`nW%3{hV)ww$+
zfuW~B2XlPeQ8puZ2IdQs3?HzSUUWm#ezlXrgO~UE2ro%Y!_~2qumC_FHh|F@2(NYY
zIApJlZVp5Voc`M@Z<CUeV2eQ9ph`0EUPT;V!@Po!zo4^#wbxF6odT{{lzAVZB{+Ig
zjw25H*mnY=K?LH!i7v1r9M@>vKx~RP{_;8dK4mWtJ0&@?XhJ}Wbv7o*{W(UZkDsI0
z;jmT&Q-&`O*l*60f9mA7{p@NgS=%J)S1RIY4Ur9t@`FX3>d&Ot15G2eJ66dN!igt9
zLBvEDGEd3AB0T-M+pC?xv`pXuJkBe^`mWvljfq+Yq$+;EKo_(PY}wZRgPzTVTA@$1
z^!cX%%w63xu0ZTQgj;~!_E>-`I70$}2Rq`Obc7ryx4{m=UF}5axCz84s=+D$vrS`Q
z^^a<;04hZte>-AVU=b*9;z5`55nV@Y#Mw5FYr&Sc8|Y{yE&QvHxv8IVV&K4wIpAl1
zel}$aZ1A|D9hy8H)xc^(B(YP6I0m6D*u@B;NpwZ~U{gYb>QZg14Ci&9-Gpp|2BArg
z6?g*`6&RyUy5b~Q;+|+hrhqry7>>I<C_Zzc&g#idISC4$mn-tYB!P1gu<p0|4jc|G
zfb%&p6gjHQ@~HHzakWhl?#w)`3O{Blcf^ScCS;c%c{B<Kj!5~eRE2)Nl%5x3Mm=Mh
zN-v8vw?nvf%+0B`+0NVI#G#;eBZ5$Gy4a8aeec4=3$%o+wj>`eqd`DVO(q~XAUO4b
zr@Oobs@<zWASoKc1vWpPA+*lo#|fJt*20R^hV>hS8VxFs0n;M>x)YF*nzui{u##Bo
zKAhSQ!4;2O4gl>&8wXwfbqx>$cE^BhnL3#qm7Xc_iplRB#Ii~{SfxsbR-BwXkG=2?
zCC^l^)T@64-!>W7&~?28R_*7lI|-%-g8tG8sp73y&+`@!bDMaxf&x6F)!Ry({s}$#
zc!NA{FU{2W$oJA2d^3y04z>O)cnBh193ZzkNs<>9HQefF^+jyNKq$xFPeC1w)JgN<
zzK6!(M}dNN)%IFU)EKFn#AJj~r_0yTNg+=3*#Xj4D8j@3JQrblKiC-OodP!dxj<B$
z$Y3((kRnMTYH#jP)KMB4?g2V)gjoH{=@PUVSv3V6?xv}C5tL*zpeq*vMNI}->JrlB
zS_?J?NM!#{PE(sdb_u{RrvlN-ZhS+h;FwVeb7-vC(O4i79Ej-+2muXvx6Au-wF*t%
zfUPT|ZJra>IWOGhAatL&Li-R$zpR&o<CdBp;J{}<O?p5w)|B+|)yk;MmGmApiM!t~
zcNu++&ixp64)%xK+kp<;B>990l&BSult&E%{4!^LDtTo99rAtT2X^adutlI4swgAS
z`XlhEZAK%GC|d=-eJR*u((1R?me~P17x7A?c80hgianaE3{|l2hZh33z$ro+cLTXN
zErBd+&ejX0E4&tf`C+pNdFKZG1zzWZr0^%)3k+irBge}bWF0FU&k6GFHr=^7MxBT6
zi@{Gzi&p?@#t5EZ`t!CeTX{dIJIa82Wpu|skArB|9%T@o9>~V-`s58I;}2tTfRUHi
zIPs}w)H#U};v^cA?^yxrViTRw=jsSIgFJlJEM7^|J2j9wdqW5R3}LD_E#qFyuEoa;
z`H_8DWF(1_J5or{yRpq+utN1uM1xqAmjv5NKlL(_K$y}-anw>E4dA#Ik6f>6$WXdV
z2a9q24dNK78@-h29HGl4ogDWNk_kenlXIjr!4n1J><8*RO)SdT_^)K|lCjO@9#VJU
z*^|&>(<P7_M+M3!WPp*WUz$Y4;*y#N|0xit^bt$253mN)=U;t+o*5PV@@H2FLs|+l
zDm+m|;==8&!e5G7tJ9LryLm{RB{s4PVk;2hh$CvZosou=h!f!@7+oF^C&zyp1LPXJ
zNNWA@)qEhT!6~R$raYh^s*%^Dyb3L%!-cpH-F}d4SGAZFy~zg>+bZo;?<4n6;LIzj
zCP`q<AkwwzjyWw=2SSRJFQlXtZ=y1PkT;(%9XMn%Jn{dq_tsHSu5H|?G>Fm?(hbrf
z5<>|Lh@?m(-7O*AC=Jp>qacW&2-1?0(kb2DF?8s6&))mpTixe7wbpmmIcL3p$YSBl
z6L((s^^0p2th-_3^V4~_cpA};_vLt4;%mDd%^gvAUXZ@ABl9=xzZUZ>hDy{aqE+JB
z7ySL0{A96i!|qvtpXlMReW)_#G4K@uJHo?#uj-7&Xc10!0G$R%-dU-Sr*gQn@a#kN
zO8AM)r8@69T_k?gB{3PPTo7*Jhk3!Ehs)=@L4td)i{}fTv(0b2+niB8E<HY2s7#KW
zbqfC?*FI6>1JG{cN4^&dtm9zLnMk9cFl&|j-Xgs99l&YAD?i1?04@b|jBXTWI?Sd}
zmL|1`e!$IZx(m=W3~5pTj}ixCwKWU8fHjd<0W=M|%kDvQ<KV_FV^$FYN*gaW0$3tf
zxEbV|dj_6gsM(F!h?mXIk)td&2~mfn3%p>w9P1F>c6Y26>k-ZL+$ada8t>Ilu8irI
zpkOw+Mn^`Q1E@8+M9CCVOH8V1gL9HHFyl~&7X6JlK}1&Jwbsfd0a^@~Mhz+1wsxw6
z!q^M(aT_%j_RB#DiPX{F>Lm}^M!F=P788!ZYMqN*h_-ul6YBkjak`ql?qohlt)m4E
z1{71~Lyp}+WQ|Eqw6Jv%Mj)B8Xe^EvBhCYEWufH+^;X_9Zk0gAd($pY)9M$IGVLnH
z-(5GC=7o~;!S;a~Mb^RAI>^2Bg*f}m5FSRl=f?CiR^+vl5B!tN$MyBcz1J4E%byeL
zu;_;;X9ft<;hkooGy`(G%dBmda{JUzCwmtz<Yq=#JIF$j-i~Z1cDRk3=ANu3Xnnu6
zng3NPCZlv$FrgAm=~ks)RuKp8Ug(Wl>(CbPX`bs_wp2^c@7*Pv5ijB|5=0<r-9h5e
zlu!4QRLoH|50+@-gum>O()V|cTjoR&H{0XuYY8<a-#k&e7-k(|)9o$G>TOlP_9KWm
ztV^;xo?swiPPKeZCqg=?A1st#k*)vr4%QJ-s#49CZ}~B;Xe{<rOz1Vpg!dj59nq%~
zCOh8Ox7PaHSFws$f&_DZXq2|Z!>zJ}H5OkUkONuFp#6@(&CrC032vNk`o0N$&gvzk
z%Vh5orevGWE5I(ZtMNOoe3UBYqa1mfd2BP^>iVX^Bsx*20%!e1{x<p{Oh8ii6FLf&
zmzcs6xgh#P-;;4KFielDE`B=nO@}l(VwrP)e8>Mf5Kr@qFIJCfQ(h76Bko$EP@`b%
zi?8mm*5=6hdHTnsF;)lJZ(PPX=3fTisT_fQlE>tpF}?r7!?JBNEIBd6q}MFU#2e3i
zDkQ{&s&Su_UQ5l_ef*KH`v?p>j3f=MHm;m;>+Tzl%H{dYJ?;CwtX$Zn_~B`H^<xtt
zN!_fiq;hhZ)+-olzQI<hK|Nor>`ET(dX?J@ijt8&c(umexY=34FkCPs{(V12E3b@2
zw^QWivwr=rn9fQX?|s(Py4By{mIx9B2}w&fhMhBW(VsnyzJ$>$9-<g+1=|qbl>A}-
z-F1ct>Hgln9^bvRm(G!vLHrFB1R=1G*q0BA*1HN~ayx<t7tAhrW9ixXq0?lr#!wmw
zxqK_UH>2>nnc6{r0@t~FQhp{G0j2=KSJ$HtKtl?%o;$gZDfFYAw5s!BIv?`$sN}~8
zm?!QA<{6U_C-G?UarvwfxJb|Y5%i6PFVF`P`TW5>2iZL+>_$0|veHKU%%-IPd8-hM
zhxJ9oQ82R|{!Hi%)yKVWam}WI@6Up_4Ar5w6-*}LE#W9nW%A{o0uP>l<HJ|2p-hoB
zn97W0sUiDLFRrZwh>|%&$)qJ(XkVTwY2#&2Vc=R4bm%pgW1_6+5YolqYfOP;EU9mV
zq4`}CX?}PO&li<K?d#h4?0|7$Zx~Qv4YlOEk5(TX(;V*TGxpJ+*shyrg5uTv6c{|c
z9Ec;ue4kTZ1^OmZn$DZ*UvS?`d}gE)Tp#QYM3hMr&o6khGM`UsEk*b$1f!yeV|ox%
zEPB>6;}i3-oJo1nui%f}K;}M0W}aY=ky;;q9%n1E%@(9J9LtK{z52#(uhfErr|Z}Z
zvfC|cArZET_qto#;^phZb6frG<wSIvQjf&R{66E$2BZF9<y3;kr|5Urk`*rI{O;@U
zWO|wa=E|EetSkC|(ggk6Sdsj-cTFW3h~<orY&7gSE!g{mLg#324}>_j;7LMqv%u=P
z55Z=l<=@+zuclKd9e&5r_&8PUg7Q^FsPVFa{vsT_bXzG6Ll+s`0Uz0Y26I%J{i7p+
zhaq5&ndq6FL~zxIej$_W2!s~dM&Xx6J2nS>h4htKKZR%?U=$;O%8?DJxI<s76;;BT
zh-4y@0p=Am<{W!=r{`KP?yeePap_AYpo(7NJ6RzWxcI!`aFt&A#G?M~p(d+nyOkz7
z0Zb}duw4Y(CYTj2v+tzF)B;4?_f4vmzr96agPCBOo#y(+4=$JE8m(KTKZOznc7F;X
z-}VosbGXsRf*jg}icSL~?{2)d5Pql^a{9W+qixFTTmXeE*Fxn*#k)3IuD*)&!b4rT
z_Mr+r{e+tjC(HK8P;`gi@O$Ry8RT)STaXsvbt$lQU>h*o)p-nzTIo)teQ(d!y<WcZ
zUAp+AA#D)(<*sqPIDDOqwE5s%U19F$cqfmxKL-yAaJlkU-Egh0Ud`p>?u?~*G11y&
z5uik1@cR;pRjBkjP~|biz}<S^9T4U&TXo~8Vxy7;b&nJL;lXCkVk5K}CTSaLI}^4w
zP8T2N&$r4GZY`32Nx-GDZn?gD;{y>+muv8_hOoiT_jRr7BZ{+=HD>mAw)L%$SURPu
zL|&tpgb6C|%C1mNB?q9_mMo9O<>_2F;@&T_+I4CZ?GQOa8+25z?PS%fo^rjhN5hSO
zl`EA!KhI?`BAD>mT$*C>mbK$MqH)y%F20UN2N4JRrxtKy93eKh)pC(-g{+70@1MF0
zj|y#dPJT)()i4Ll<9z*q_E3l?K<;a}<N=#oQPRcZhY!EMc{SjkvX8gm!_W<}$+bW#
zly5t8!cKW}*sKQJpGp!mkHtKUVVeiN`QDv&Y}23gCboEjH5p43YOJyKpUy&#msH>T
zOgP~leAUrU`LsSLw#+`-Fmz^3@u&vB&JKIi$>-JK$>aA_8BGzAk+n!M);@(g4evB$
z`+myN@rwm0-RgcqMnanw9Jr{>$&6WJJ+57Qy>BMr`B`O@efM3?)%DGHN5(UJS4@3{
z6Y5=Jbe)XF_>$9JKW)7?a08TXex=F`^!z1-@h67HhjruRwLylq)-K~eGx9G6_8L3L
z>GjfW`}_-edj;?{@^{tj|4M(l5QBuGMeMQIPy5#&zxJzuG~mq<J>s7Nus@Sl!Vw@j
z`AN>}rvdrrlUTBV+rO~p#Qs<6Fhd5U4z+XZVt!8q@)LpEOWjR={;w=+FCDkMmp%V)
zCcv5Owa{NvMG}?t{W-ERh?7=-zH%0VKWVSoU|y&a6FB$&!9Lx;On{X(%s2VJY5sB*
z7G*<_2RG`^mi)uW0i3cm`IFm+xn*sLyRXiVu<N`|a1g@O=EsA9KXnuWqgYcwM)}DW
z*kb0Jmn(Nb>U49k(W3UZe{}=|iJx%dfsHNlU2Jo@s+-OBThPj1Q{ECjSlKDo=~p_l
z$SGc*F+u))(v^hk=UmaB3GM%<&^6F=hBwWh{xk>w9Ei?fNQs1ea{CvQica5e6`11o
z5|QUYi0y5;rHOxSZjhZ%jg`p9TtT>bvI9x65pbu&L6GytfD%gzV4`WUmH&32K&Mr4
zYw`xig%=<;z60!q#lWda9~0r&iNFs8Pv?TjQDa+whr|NR8Mx)^*nHOCB)<STGJ&G9
zLHT_RM3-vnJ(WQ?E^qqSz<;$IMZ97e0MbOe{jQEQ-4PZR;Al!5Ew~W+5fEwH9k&n;
z4Uyo)zs*_pzXgaXW`78*1_pU0m&}>&#;3qivzb`e79XL;Cyn+2M#;mU?f)mhUx=w%
zDI$<Y7&jOJ7Y7`2`zj++VEx)GL-K?OL6v+)GKKwne@Gx7F{o(b^39mq0^5KHV<C0Z
z0U45;z=A@NRM62-c<EpBn4$j-=CC?9LYr;`DB?JXOje=19~k@rtqtkzQ`aMYR?+|2
z>DUO^E-$m_Wl!Oo4>cR_8q-&R+MNrKiph-1M>McS0Sb4Yg+2WDc`i5Shw52IwB=_|
zxQj?C8G&S7Vdh=~YX`z@6qh-}<<b7_7T#TRbIwmc%Ynhdk}X2;R$atZ7ClNozXp2+
zHS~lNVc&<K?i(Er$SQ|S|2`v=z{(XhTa-~MF93t}L5_yi?uqf({Iy2@gA6H3X74z|
z(gI&6{%ge8%YsqAojQE|=RD^hIEyR-hDMcv|8to?7fz6Z_`mTLpmm-Cix)x)V2|<T
z_q(mJ{Dj`uc^+L4LceLfrK9WlPv+x~h1ZqA-~7IaRg@y)a)>n$<c0z8Dk0hvHGQ0<
z|I13ZW{B*bG$8*MD*$v!(YHG{$aooUkaE-9013~s#RDA&i{I~XQ_`Q?7Sa{EoGI!h
zAf3WtYKD-KBz}TN{;Q+2z3|=&F?{xVJgM_LgzJy`U%czrQTSi*@%I?!zu@DqE6e|D
zk>GTz({?H^c3S{}%}=|{_E5N1;$zhUv<#te!lCxwlbjC!0dnfCUSkFuFRGgP#DJ3J
z52GRg+*IQ9P2Tuv2dkm}7drQ%1LU;v5$-(hh%JJ8<#Laz3hW#vGgIO|z+*PU5p4c1
zfCa8iRjD7~#WW+t??9PWH{Z$p<Ptp5bFgjFzI0#|S%H~^AITjViGaOOy(U*JM(sP;
zvx*l)yUN>v^&eR;kVx!-C_uCJ!wj=N02Ic=H(AZs*)GxXdZ)im3_6gP*W*I=BoN?>
zNSOm~f7`A!{><CDFHV0){sEn+&;svw=P8JQW(%kk5IYkWlP}o4g%6F&0E^X4M@MI2
z=6{CX9mWax&HjVm!S8xt{R_YIc+h;?rsxmnedAR2p@k;=k5Xs(KoEckNRsQktZ_Fg
zfwxKs*v4sV0moLAdlq=P%mbkVR=lEs_PCAc*j=pQL5I)gH}52GY!nvbAOIAY<?FCJ
z%<uMZc+h=G1|kiOAJ{hCZA(9$2A;f>_zdYTpaKG-hwgy$G&EXO2c#f6KFS8b8z<=_
z(C5hZtpi#S*$3e5<-V~PBaY+!hX{@;737ZTia?k!|C0`G@h-@2Til3XY(n@xy}+To
zUDx8?#PxZrw9%us9Gq0WyB86rTtHf+2zkMrU=ueD7&}H_&~W7~pT4i0xeb!f5wJ`Z
zrT-mV4^hzIQhx_`8Q_0*5!CL62mzL<q|is;*3P=pT8EBHMKRY?KE<`q@g61f1V|m(
zaL^kA0|F3i=9TuW1lf0NR67W%+)N1EirT@6F%3jxCgUIwoOJ|n&U0XFevhV>v_tL~
z=<{A60GIGx#$-KS3a1X*KO|E5R?HicSzip>+)j-Vqx4d#X4dbA=#I0f>Wxs3b37D5
z4^?yzyFSr7z-Yi|SiJlQ%nOpq1#ycPS7{uJK*mRz!`TbE2*&+1kE8RbV9N(l2xAOG
zjXb^ySe21pNFRR~&Z>>WACVAo#yy__)-<U~tsGY{u@;Yw76-J#VTXBnB8-Nv;ShO0
zY@VPm)R5hTWM3InG<@a+Bre-;2Z9Me20=CDLXFC{Em=*v_qt(_tBQ;I-1qj_E66a(
zK)PLy{MFmrHZc0664357W3vEL2HLvMDldRHu1FG_?vJvp4b>=3{j`ebqX>!RB;$p6
zj6n8#5aotxrAr2(x6U#)D0lWau#>;p2i;B72mc&oao%I@k#ziv;4T~3dFpbXfNCqA
zR32K2$DnkDOo{e}VjY;N%?O(=ymq#tkM|F+gGFIKU{9|09q2NfL-~XLkap784wP-c
z=u0o{okkez>_c$vA!W25#DMD+LL1tO(ey7E5cd#rqaNs;_UF06cx!X?LhxGUV%B8V
zXo)cEWD*u6Tiy2{04i<<&U0kM+NQCB21%D#Mk~HxaQiCU11k!8r(h>bBIS8-DJ~gr
z?&*Us4hYv`+zGHI+Rhmr1OD6f?!G5><s<it_3K{CCiCvrY<`GE2$;w>6@>7MNc9&G
z!nSWV0cgabK@{$Fz)5f0U2G(+hIcjjIHxF#Eo>}b$*zP-)H4{2IZ-CXB1`39NDz(t
zNgm8Nyu+dJeMR_}Pap^m@B~6sk^LGl@dbTl8;vMdAv4zKGGig)@C0UHl6I=%H>@h#
zDiB4Ia9Qx}*uy8G2=DH2SU@u3jA4)Ph=}`qxocAq*_{Rq+8#6myivDY*=)CYcLCww
z=kxNMS1Zs5Aqx!UlD^qq0*+har7IKa8rqCFbm>65I53&jJ0y;oV$qNJwB2DDblv+g
zhqEZ|(*Y2Regq`Ib}>1sO96R~tMAc3n&=3?eQEte?Q^5sE(OPvcSf1nrZEOy$gP~T
zIV2qLF#11x9esGkV2uzgj=5Q8*^;Yo$c|{mfN~-MKc17?p1wDcrFbe$VVK>6U?xcX
zFwVAb^hetFK33KRRVs!m_7;B7U#)?IC;LpMSS!!>O2ZqL`=1wnjDt0g>g2598rz3i
zP`P7)htB)dp!tU%dWpP;`Gxns`Oe<~D^Rhk?9~q2BCxNAO*vza+_kJzfMiMMx-rv=
zDqhpRSCbk^C0emML>~`{<2goK(wAnNOZ`3b7C55r#ihRcSj1VZres2kGhn2;Lp0A<
z!PXSDstgj<?(b+m>M8*&$K7@@>RxpF_4~BGh?P{QLxgO3h3a`opZi;yy~UF+D0bjF
zAERfnGe4b*jyMCV{JzN15-7{S<;(0>ACIfyZs|Z<92g2dLG=m@9X_CzQp3B&bMwqp
z9AIL~Jj-Y#mwsMu$c&n*0^YSuSf~V2!=z1ecsVraNcfTxr_%cPXsz@tRCtMRt6qnO
zvav+4v0Ud2WeKDSWotiu-Q**McdPXlei(WnX-*5wQia#x$L2B_TgJ}h5Z_Sz;gnwn
z-_W$%`*Zc9^oz$Mb<X<wqoj2`#Zfe#AMux#j-q1IYm0bl?v7!W!b{&`95;t7#*IQ{
zCG=-ucQTS?#1=_GTTS&pU0m9l#H?9Z^epZ<Qnl}|TI*f4(#ysb5XL|7>clG;2#ZU;
z8<;P-k>)&L&O*LxWl}33Oo&d-M{wXZp+w)<v8(L{Hiy+_8C_e{k~3$Mr28`~4-L*A
zeV;1W5h)+&U|Xe)4H0D8t`kc1uyyIa@qTAGFSSo9<8BtS7%pYmK05XWY#5UUz6y2B
z5|1a@2&8^A?5A~Cn9u17p>Fr^DSSqLW{sNZk=AA#R;!$&#^lH8*Lo5Izl+>b`)*)A
z7CuZm-IFCE^tk-1pk_LAJ#JKQ=_>*FP}X;Thi{m{a1ZjFi!*0>SZ~&uQnKst2TIq{
zmF%b#+B2Byx6@wmPYHTqJEHNLLR~*&!$nYkpR$GFk%_73>J`Fc4o>&ocOYqDmuVLJ
z*ao#rYIYvVP4OA`;9k%+IVJX{dy<{6rO7Nywm<T9#19{qe%}sf(gAV$#z;DzkvP_n
z$oo96)uR=hV4%d4kYXl8h-V~~wJP%9C20u_&-LaG^dS$jjAc@=(mLpm?vM;gow2IX
zcd(1Ecv%YxgyAbeA5~E&$Kn&@Oe%<*KMu!F<!!aR(FNPl&Vw4p%9@fknf<6bai6L6
z*i;<nJSp_-yNZddff_%C5U9x&1DZ2L_$x28c#oYhM>3x2YBm@tPs_OHExULwh`Ge=
z089AHXYsXQ18?gmg<%W$)2^fGT8kD|s`FNl#U`z&Z2L9tS_}RNe9xWd%sgK@*KUQG
zMS4F%hq62Xb#rWdmq}c!f!c4muf%(O@Qu{wVvplSy&8GcfV;We%c^z?E+}u|AP|YB
zAqxA{KFAknh4!pAMW36t*jHgm5#;3Y+)5kAPS3*cMTl#QEyCS%n(1Sh4l*V|*@%M!
zjRs5c;ainAxlxS3x}^Y=$y!v?4&|a<uy5p_*sB^cT8g6Q1(%}88(s`CRa5#u>%z_H
z?6$T<eR_uH&BO!GeRA7g#JbWCegON@JxdOqf3W`~)V1eguNp8wghyB>U%ps8^3$#O
zKD|cMF*FVsL%ZqJ`Y9T{wn?Wre49ZH0SxB1Vp%k&Nc1btY6lJe=wt9hf*L#Wj$x*d
zvw7z2?z$XAuvCw?LRWLPkPz`KFW70n8*OZB{L?7C$qzZ6_dH^ip3AQzX~Jk?BaD%^
z4oJ5Mk?3|)4iv02H7IaLt$X>9(8D0f0qkli)$XRZ*{nds__a9a$`ufSR=v=5DJ_5#
zK@Tq7B651mS(=*Aw8)HF9*bs5pF8#Df|e0}mMr|X#~Z1D%Mj*WdKoe8dnRp>6rlj5
zaXm}4`k)}oY`EfUle7!E!Q<R!s!K;$I%Q#OdGpVnx=dbWolRb4n^pTD_cZdEUHG<f
z+QHcJg&=XUi+ulga!S|bg;%=QEh`7Y9#t3#m#x7TgpeUY**xbdelT7|5!*z}70&9V
zI2Vu=T3zpPslaP-#<d-<R@>2C5jl|jNO7dOjMq-4lon~yE>`QL+vqstIH4-Csj+Gq
zskhqtbQ6hsZ*^B4_2B)n&8o~*n;qTu27mNDisGv2AfL_?Z!sVlb)u@y%JLdMGm;mn
zl#{M|dVwmQYpH3*Y&E_Dhkkz~frLh+0)Cup89qkhTVA0Rf!s{Fi1w)A$DNs<=QUdh
zjA*eWZsH~}s*RD}`-;gI7U4j3yESy3^Ya!#TG2`8n&}kt=b27o?5a^mK$`2$VYr;6
z;M^lUn*Wl8?e;A(%<K}c(UFQ%y1L5L^f~sHAQip%QwVeybC0ydn1S=r6g6qqXCKC@
z`B#w0tyqJd5j%xS{Z;Nu8**rfToh~OSz>fBruhdj#MAwt^9%LHROtfg!;teCE9%ZJ
zTO@)Lg?P;L2U92%pD-{3AMhYQw79-((uSOq?c)BCgFX#n8;T(t#US&9=RUFPh~7!Y
z1WN$U$yeitlQ|sxd9iMZ8A^8HL9HHu2$JdoEFG8NEhs4qruZ)%4cLw*FB|g6IGBqg
zZ$SOqFli)7_&9G5#lR!6cSM)JKkjTnDLkc0Msgmv7oy4_jnbuc%Cz*0vT8gNLLF$M
z^V{#7MG9oE7vZ6MK)#|s`)*fbtAVHXSt%!6&f?ngbzEWe#eyrXN6PPou@_0VYcaoz
zj95|RY}^&bGs%V7k?qH{%o<G)`MG(RqbwV(;Q8rxs(RHAMNJwU*mtkZef~NNiT`uq
zyw1Xnj|QdW=G$nu<f0Ep<$n+Ls`6*RTQE)wp_XwZ$cDU1!uI5xOWF7;<F%Oi^>TQ@
zX_&EsdY!F(IjkD>6DoaV>PyUXUB*r+eLzngqhNRf%u>!?$v{qD@Rm@kISEmzy<5ke
zGftohZXvQGz!j#G6RhDWPsQHQ2)h>S&q&aOm4OLK2)UNhxAYv_vA4N7flk7l`q-?+
z9k}n3dfw(yD<;EQKu-2g$!8*z2BfX!Gk%5U?F8daVUPK*qma;d>aQd9AcT=J5=xFO
z%^h;XY-X#o3i#6asNBX6s@<>Y+DhR;9f?VnPzPMvUecZRQrBFLAT~+WOw6e&YT;21
z`WXe8H;Qg)!sV=iPkWn(O4d~@U8y$wSvQ86)iONX^;2M9dOEl$MIqNBgqt!XLdR)P
z&lNWF`H+*{jXhC4-%oICrz>$zaL=B>=xV{?D=}YxRkV_QPlZR=+`WT@b;6c8#1*Fu
zN!+EB$;Lb1{Vgf(H3Z8Q-takR8-9Xjp;!IndBaUeS@Cp(cHzOs<NRjY2@o2?&Am0x
zbh~CZN*Ci2FFA7f!WtS}KC~p*OrVN;8!Ubu>n48n1W)UpTO1CvxP8uFo8k4tpvK$*
z^SH*4>`*Te4=3lsmiQd9re))d?3f690uoz2hD_jU;&BCx9}-bYftLzDhN8kPJEdub
za@(0?iDc~inJtQjZG?_ru>)iaTdqP-DNr%?gAI^{q9qp$dhzh4fa}QFmso7$%;2ua
z#sq+ih?|Tpzr$>XTJwaigF)qv-<ZJn2L2OOzKPaQ+^`6Zot`M^@eklcNWpH><H>ov
zFT9%W`~unYvU<%95^8IidoOxmBaxS2?ZCxm=dQhyDzyvjrCX<@;X`H=k|7?MgxGS-
ziMN`8W;-cwJ~2Q~x(w4(uIE-|rJO8#iY2oi;CC%J*FJl9@lK$V=PYX$gu&jKgUT}n
zT~)g^>ddN3IcMc+X|ER<&6Qd_PW2PQObpxILhN8ss?S>Zsi+b+vwYm!uI;$UJL;l_
zZJ#ASiqwNoFZ;R)qrT;PRQRk5j<i;rT|XAmi`=Q~JIM&GN*QR}Pbp~HzJZ#MtAw*1
zJ-&VLHq8=ae_}_lXH!JmnWFQ7ib6gSrFMFJg|Y>DhFX5cGoA0cQWA>OWe*VnPuVn2
z*Rprt={;2jWV8Ch%d3bM4g$zoM#}v%^6%gFDkGwmj+gWIRqCgXPd~c=S=<u7^G32Z
z1=F8PE|H2M-Sr!L*`@n;NORtx+UQBkE*wr#cRaV&o2t+uo{VW_Yqv<{A@O(`&`qQZ
zeL+^h$ijkhw}QFDJfW)FYw7us!jYLz0`0f`+sjtv4%JTzPsTp_RXa?%b?|a_pBV+G
zX20D(oQ3cXZ)k0`5BIy{=@i;caG1>U;%--v_d4zD=PE4M<us2wuvg62_P82QRjQM7
zjH*$)Jm!uQPn8yXH$k-e>I0_!x?wg-Fm>QNxl1n^=-E38GL9vYQSV)`_G~4rORS1T
z-vdE`;-y&cgd?T7hvYdZ4D}+*Vzm~+LO(boqZx(CSTH=;V+b!?oI<w+4mTZ(_LnXU
zY8-z+?7|yvZa=!GPm%LZX)+^6kLsw`j`jU_{Spq>Hlpok0o=1l8=QGX$?Yd~e=l^g
zs8CVH&*YIBlISGKJtTwglU$uMl_s4oous3;$;`~(@#U~62yqZjwi6n5E$?R@sh==K
z=Rw|cTBg-?dOt>M-qI`=iyqo2pBB=!o3zrNdN^+NS-;3Z{bbogr+mOk^k~2;&FSLV
zu1Gm+uhd7q#20GGJ=?VqD%XjEC-+800^CN#miHHZ)Kx~l(ngoOG6*r5ww1}Oev^Ag
z%U=D%9j=PvcS9QOHu~QRX2$E)s9wMg+g9M`+J9}cL~F7EU!w}z@()eg+J*b3esrx-
z4&j;H-q*^?A!#=;ed!n9DjJ`GT%?~qYjUjbFFaGRpMLGT&!fsF&0Xip?_`+AXKn`F
zgQ5AX#SMuM?@JWF+*AM0wZ~3T+g#<3+cdqMbN{o9{1shG*aWDG9~K@NJ$d*0|M+2(
za-X<erFi{kRQ?$f1W;jtzhi!DzVn~>{LcXHu+ksN*>5zfTJt}l!yoYj(ON9{dyJuI
z(SN$?&#y`RFTcD3*@NTJBJKDjE`v;sV*Lzs3=CN(%oEjL9*-%#v9VDiRlrUs^{$OZ
zs<7)uFq^^jb^d-#_s`+(SV_t3+HvN6nHlEYuvjKVr<XPMQEdl5zd2~Ya+}e-L^jPl
zv#z8!)y}K8`76yg(%wA5=zf^YsR*k2D)U+NZl&E%RsE$Q4IyY6MOv{M?{yMax>NWv
z^N;jQ*!z$6xQ9NHX$!Fa+PG!JH0E^Ac#kS2Mv?gVsxn?o&nDXM+(HCsf3~tpb|rF)
z!V_S*J9)$75Fg8hk~?ONedk}@orUN;?dK^^{`0-RI&~kP+mMRdqVM&uqoCgc8NJ&_
z!^m9o?;HK`1w(Jt8?g5F@lSsr(*7C*DWJ2n)M4Z5|2!GuH&SXOl$HIb$L#+J_W!z#
z50hczl*KLcXFtCR_(Gekp&s&zOa$>8M5c&C>!YE!{Id36ulo0;N#8UksO}h4UmPrV
z4FTWimk6&heutS_enCO4>N>XHE=n|}h3YB%rPgJAkl*k7Wtrprmoh;8wP!aIp#JT-
zuDcMetz*JL^?-y^p5OX{rQZQrl+tMD-VJ!+udS6Wfl1085?uWI#fU&7qP=kV{c$is
zoBT9O|LV+u`;Gq9jeGBZoi6^!wA}Vca4=RE+W*z5;+Thrv+{}8fXv0|Y~bYg+uIH!
zFA99ARb_(-{o3nDXsMtZ(<Cn6{`MZ%zynvH{QhAb@OG6FPh)?7GVs}7M+fMj|Ji53
zthnS_1~cYP{;&7!hx)_9#=Z{EB7=_%<taX7)BLct`zY<#)h9ayjPe$xyzj(o!iJe(
z#_CkqYU`93Kd0}xdUCR&|MPRSY5B*R88aF)88fT-Vc)nR@TgKo>yx>nPQAB>PMxRg
z?WUdS%--!^dL^J9&+xVYeHUt%TE5bD1SIY2F*5yi*d%rD-QQbP;YPrRd{gB}W8Le&
zH`F_{8?Ztjz28QMiW=zeRE^qJjlT!*A6@>InA`Bf@zdWrTtX3C#71YISoi05B2vlL
z0mEaWz5KVwxqAy-#Hv--_Sa_#um<<ErXKxy#RBa<{1{v$@0LT!FE5XT_TLBpZ;St*
z94dFdeE#?!FM$6K44dp-lobRgd>!Doia|j^ci-QSc%m8L;IpZ_4&+_(4Hwh98}f$L
zKTU|Wg2qtfl^`5pmYyteaYXToO|u;!AaR=jvdn{X1h=d1$fRTrRFzg11~MSHN9JKJ
z^BZQd{V*$VT9#YQ^7E|$DaiH(A`{O@;NW@3t9I9Cmwae3dZg+5L2^T`vfug8I<xrM
zS1n4X9AO+Y-7?DoXkvazM|X_xVUC^!qU=rkg5w!!11PHPtgBUO`V~ewg!0pV)L)EP
zo^n1WKY6BoKHBj87BzhHUc*_>A^6=j!_4Gt9#pWAFZMku90CS*`(;2Dn0K#kU2&bm
z!Q-K4e-Kr|%*D(}UM0AbiAN2O(6=_Rb45p&PS$(|<clyE%Or-_UI3P6832jI+)(=i
z?rN-G%>MAT#|F^Fq88=g;!pd3e<gCxb(kiIXX=m3i{GoABI=@N^zF~XvwnDco^=`g
z;g)!Km@h8svp|^DQHa1=FVBSfJbG33d;qiSO}^Ms!8%{onZlOX;dv1CB~4a5{tluk
z*2nvNpLu@!l$nUgij@J23#P!+<*sCAWE<o#gc&2o!$?oR(`M@4_G*CF6E;DYo=c>~
zJ|#dxx$xO>&g#lKJ9^ILP0Mw$<JORtT({#|+?C}Aif-pyKo-e7axXy5avz-<m-T)z
zbqC+$Pg%=XpjVWcqGiMcdjZIoPMXMEd|3<1j#8&ui={jB*7S-|M3~ecBo-?~-iL;p
za8HEq2BKjPf@VLOT5l9cAbXfseJ@|*qO=D90<lrlKTg~8QE(yLb=!6h56dFtQ1y*^
z&gxI<c9%=rEiZt0E?GPoX#z0FGn07^6pf)slSB579z8bt@$VNX8o-T*A`C7U^vpYt
zz#E9X*D9e?9?6F=*m_WBAiHcKoHRVL5Pp|#jV=3~qotHQj}*zy<|&FI9xvk^DKg_`
zhz|GQf)*OP+mN(+)*&kv*A>P(%QeBUY%I>+eDW#l%9hiOf^7rSq%-^$B^p46EyQH=
zD-<Wgv}wEN+~=_k1QTS<srxfKP}=K(F!IH>M2AkN$l*c=`dL23{xnD5(O_~t|L24*
zOL{KPfrtaTdR(m+lxO)fT`g{D=lObDnjdic4lW+;Z2q&O2ZV8PFZg?a+AQm|xE^wJ
zYZ20OUs^A6sE*!hB^V&;Y60|)nK95LPlZdjg1ru&v8!NkwV^o##>U)Xs4RpI-<!bp
z)6SD!U`_(YcPx(B>6~kHa|q%?9%N0upm3HzS>}n}R;ll|B5kYfiE^v`g;pWV%l;6t
z1gg_Uj6AQ|i<z+XLOoJv{7YCngz3HZCnn`(CO?Ki{No6kATz%o7qjqE5Zxc}AaM6H
z_(T1JxH5nMGPBp8wsNibzrOMMppC=#3Jmh@3qn1Dj_H&7lb$o*8F*&0*l81P9w>%R
z8#9Q|H3~IS><E!PFv}V#)Lbpaw-r69?o(9w#1SLeFT-7O^i4OvKrMd-{^`5^NsVUB
z?A1<ko<d4oC6}K}N|#T`7k`N~)_q)`H7RE=8kQDnsc$Ad)qBmpPn(lHned6=)#(L$
z`QlfsToLO>`I(;9INom&GElC8Ow5%vQX_I?L1DgVke52#3lWE4I4kt!QzS4G?6U3x
z<yC@+0}M+Nk6P`rnz>3SaU0XXocAL&61^l}LA=!PJxP``@3Cg8B)Dp3Ap|!=%z3r9
zCj%eVqu6t#a1e!R&%ahE2{j-Wv0ROZoiio6@;k3|rz=m0WvJ&W*`=M&0uPmg3O@60
zQfm_T0a{6m5w*;N1Y4zX@#B)1WxFl|Ga=}PI#tf)PSWc974`SM5LaO(EoeJ-*8>-p
z{(&#EDD}EvmF;t`13&zFH%U14U?LHx3MxIbIKoG#y3%(<7cb&8PapmrDrE~GZ^}ZS
z5M^W^y?5}jsh4BK48@-ZoCe#B3nQ!~&^afdi1QTR^s3m&S4o-xLXtcT3P%ZqmExc#
znAQ~jj;arZfdpr;%xdUcR}Yu(enf4gga`q>HY#K6F`zy0dmV3`!r<lL0I|}iFwW#?
zNEGi)@RrhZ?NwOBD&kmSnKfTaYf1mo&?Pm5E7t8`bjqlIM+=Zb9#WApON;?tkF&qj
z#}=nR{O+pISs=a-!5P>|N5CF9dRS$chFD9iggK^J=fn8~k`}r5YUgi;;a|z2UPcb{
zId#f;sNXp;D@(eze5=@9#<(m-+Oge<s->;t4t+62va0tW`Rr+%3y`8Ooiv}xNGN)&
zO*NVh<~}&{b)1-XtA}S$yj9BrDskOj3`t%-RCILoL7?tU6rq7dNvz^z;4|pSxpdTS
znQ?VB5#<!4YN)RR4pi@|5mOUk=3cO#8-fB%h4jHG)a21UAd>gksR}cDug}Vr!GfR*
zoVVSpj}@WR-wPx$RjzlwH{~c*IQ=5YC`ib|xFs>VU={SH)aGQ}E4Y8-OAEsO0ZFn4
z-o-rTD;V@8-WFQzp+aZY$<Pf~F!}t}UZ#uGf0n`yIb-^+K>^%<*Gpo2Y&|E2GLuAN
zUaLj)GERui;tF41b8m{kL7z~|E$wONHTY*A-=O7w=bz#q6yc1lk@uDNbu;E;p?4UI
zzyv9sNjWo}tBOq2bm>Klj9^%-)Q*(zwv9oWEWHqvjA12e=d2avcaN7v>D`tscI=}4
zK}Hhoo+L%s`UeJRUiGPk=ZS+aJgwHYs=*l58vslXlzk84og2FeBSOfz#m@&~dO63q
z-zi`q)8{gX#V;&~`B`3CyY-Tq<$m%vOlh%XFE}&O&#7K5pSlOVNcl!7N%8519I8#E
zLL6ORtp!7Int#gTOX7RbS7cZ8t)d6`c!SzOl*?x4oUY_e`ZKTA5!Ski$=p53(YFIx
zC#Jx0b+~NVPn>sJJn*fM^Ga^J=+4vi$=UDEsCu@R@a&R&EH~A|<}$&py^zh#4POHE
z>hq;eblWPLVgsi214O-BU&?Ki+69qjH-<c8KE9w`ik!>$!ndJ|w~(CSZudy?A`HAq
z*1Ty9S419!P-d7$ev5aTAPQ4@!z-f;MEz+oX7&FBki$|4>}W^~QP$0SmYY6ZFW5<P
zf?}!lP#qZw`iLIJ5jHMPpe8lR7-*0uPB;ZsQB-LPDxbMrxwkr?2qmVM`ACpO|B<01
zstgolT&YAwLM_gP;Y?kM71yq6dPKTYpWIKLEcfcOv~o5!Ed$1gV@xy7z1%To%ja4o
z?PfX$a%$BMsP?EYFJHn+6<!Z9^y;p#7Qvyd#e-?AgR#ad*CZcPqygpgwCh{vfQxyu
zlpi22OP@sF4x(YsQ)n+)NUY^4Pq~6s^xC0aaz8&s6i4g%=3&?CmVkAkgj2@$$i=kC
zc`grk;CpB50MkOb-spzUQsOq5q@B_m*Ry($&!-f#WK%gk&?hYdJ;kvhS~F3aTSJ%A
zQOiBW-TgEMJ-DMei@_G;+=D$n(=HS|t!WoYiw<~x@tviP*i!KBq|%;yS(APLoc0KH
z5pBv3F$}-<{31HVsdJ5ZNVltHSe78i1GRa|ru#w;RW6b{o|MBhoMDJLC3Py@xGd^I
zkZi=P<{rs61*B-W6PMlR#-rF6Z`1nS*a!>gWz|?cpuZhhk&Y}2=91oB@=@4c@=5tn
zf4%{E9*^yshY`Qhlcs6UyRti(!6!_Cz}zUd2;E!jU<n?AtUCi#y%n~EIr9q1=JNN#
z);krN&9CzxNxato$kZA%bP&>3jH$GC&4}nF%|&v<rCCw$b^tD_AkUL@Z{D~*-W@KB
zHsqm=l$E|4=o1VlLdiqt)wA~o0S7H}H+EGY)Mf9jt5)F1qpZY+k-b@_^0r5tyX3L%
zTU7!9b2xzUMlr{_F3W5tmm_bQhdLIE4khLkMeY#FRg&{iM~yn#(Pf)6q4?cP{Xu=#
zBd^(i5^0Te4#^oJ9m%?(;Kr<##}_n-3A6el5XmW<Mqw{DrS$hMVz_WUQrOTu^^O{I
z%1no-KM%5c+*6*1{!P!>aA(7>30KU2t=01<Y~;3!%YGi>_>{{iQlYgXlAUVW{T;`J
zBT}DKOVyZJDi_JwREWaIF-}AC4UQrHl>5CtwGh<ETKpn>m$p{klleI6PBrwCSX_Oq
z3QR%FK}^(?7q^jos;9N;9o&?J=`i)MU>+(&P2wkAaV*a2;WSyie09XLFk-!OYF8Nv
z0_8UI$FUc|1sH**-{MJ^7isMy-Fa&?ner&(Ey+>EE&-&JG^GEQ+#KJLTEH%>;0LM?
zWGo`q!u)Q(w$wB{o9B4dd6;q4&`a1X^Q_xq#XsGIM=GF#SeamTOg-$vpR77>DA1XE
zJFQ~$>#GgeVl`);rDpjyw;@9k#;2!!5VO1)Om+`<VoIDTWu*{e`it#H#dW72_NT5*
zh*0vPeldH^aWMTx6z+B>FR6X_*?0Z@%Fwx#AInO0#?4og^D0z*Kc%dW2(|o_9Fx&e
zB_W4ljfv~y?+I{w!u-x!(C(0YWC&D+zIN}x+w=gCUsEJ8ukd5B0FhnCJ}xSPwpKwk
zMl9d)=o9u;T0Ql!?6`uONF^s+wg6JKd(~A;{Y=!CY<CDqCL;%-zG*RCqNAucB4LCH
z`wkw)!-Z4Ns?@Byd|ofU@|b<LYWf*iBQRq;UBa*k9Cxc-q?A${?OIIUP0{IVF2;1J
zR!+Ql6cYb&p-Fk_qH8D=!8qIMY<}flMV|9x$z&25a-H%vDn05GGrG0h#UN+Gxgp6%
zGk%dMu2K>$p3o?d>%2p|)hDpI5DD0|Bqh9^f_%=8p)Dw1*RIVWJ&M%l^9l&D82BnV
z$=Cp4h-fT$vH&Y1?0mS2(<HD;=jvqX);-S|BY;=TV<#fkZj--wGvAKz(xm4k4quy~
z*CqTV3ttoONq8mjRDQNN-zvIYCVC*Bf8$8!+2NjqfIZSH=P1uSlgMXO+Ywjm*JxgX
zdO_RqDFjn++rLqNB9&_a0c|b|P5ZA6&)FsQ^!A+fmHNsoInU|kY|D$DP*rQKxIe|U
z`@F5gvFdjem!<Io8n&K-8a=gp`z+i9Z_IhWr=j0Cm90ttQY3TCyvX3Q5VMEHgyZM+
z((MD{9kZ*l$qEl4`i`yHcg_BGCFYb(O!Qw+zv2g%WO^l5lfWcCKQaDx&F<}pRNh#~
zx$$G6JgR%t7|Er!s_m%S?<cNZ#4|&yu(~nF&J=_IL=-ROoGH+<%Hmd7L3uVW@<8Yz
z*S7(lCbzt4pE~j{5!z_o_Mv2GsxRElChl&>D3xktU?;>6xJ;-!dn}Uvykn^u4y%=Z
zHnO?(*a>OUJ9ffa`!k&T=vi)9?8vh)Nb8X2q+PR9g^l`$cRtY1ABKdqXYD>JWY#=&
z;FKB(ni#9-Og%!)-VRg&6Vb<>g#A;!HRa}0R>G_hwf1E(g{BYk85Hl1DT`g3S>2og
zborj5DauT}cyWHD;634#<_O<*y|s_}nchFiQSK5nrh9pGnY<+tg2!*@G3O+8rj(~C
zf}^g+zwd^UFQnJ8VCzTP?f?_|O-M!+$?EM069R<++Aoint1#TzqeWC>UX4n>*Y0}r
zpM2}EnxS64>1h1eBeq{bhQpl3x76n&G0z2l+Hd~cd0Ys%4R;upJb%kB>Rcz~9xa{V
zDEl=fEWr%2j!O4G{DuU*eFMM&j>75tzuotL@x@_-RzVt@zac@ob_=|}yiE2pWE2z>
ztBEozE5uQ8W4NH4?T0kmo&^2e_MHVrE&Wo{2dSc7&r*3zpsD;{B{#ypv9QPd{N9lY
zhKK{^a%ZB|c&VAy&Qvve5538h<?)8Fp?-~v6|i9NOa)OHR1K5wSD3|C0hvvsNUl)h
zy*xNLjl)XK^lOOLJl$bdW0CA>zo8yF*m!*SA}Qy(*_-|;WK&AbJG=7tep*1Uv-ImC
z8Rvl-mfLnOAm^c|H8?O?7h<=c=Jp@?=j=X^`@bmq(*5D*mte_mJOyd~m>5u)_184@
z8XxFXu|n=ozooUg#Q<2axVZH@I&-c7a?E{qy0`v`2meSGMaK9e!A}Lfh<|B*i2yM|
z(n|l7ACk`iStu8{>VN7B{r%A-DAC#&4ePf`y9R-&Sr+27Uk2!9`Dob0xd40{8JOh#
zZD<{aN%WztJjW)<16JIk8GysR4oJ%nHJ`YuBOm~T3D9|PhwX2VIIL<YUySVo{B?4H
zTLBZLOTXmVV+4>#^29|IeE+kjk9AD(f9BI)DX_*+GypDn13G;^aG~O{t2_F(4m{Zu
z5oSV}(LO*9nujRQ(US5^_SZK@Li6P4AM*DATtA^72xWc^$kGi0&T$691`I-Z0qm)^
zUB@ByzxI<qGClFyS%R%o1vu8`BFZEoh>(bC(g>>C14Q;w7_d-e)1SIM{<SAnvXc=2
zmN|b)88DSuF%-I93XJJ<flUEDBC$k#_B#~Z2xUY(ARx>s!dLs0LG>HB@N@lI_ooZ<
z1~cuoI1$vpjZp!*fK2r6gm`9Cc<~#~`qPCL(Vhrm4tbC`eI^Xtzy<;63Y9j}`0Z;%
zr^StphV)k_CaZ414n}Rl{`0o5gL@w_#dqLSt6%{<iTcG*yDlBfcg%i6NC{Q5C&#Sl
zZXbH3cv5j=;QeqrLu7ivbb0_B)wJ1<{|3YVz+7N2!Jxe|c)tkJ5U{E&4?y+2;xfnj
z?Rl(e`{7<Nn^%^!{~Ra(_y|)v7{kGZkFbA(;<$;yWldhK@%(n7|LdOzI4=V1)A{^t
zI~cfo{S*I#-x{^B{#gP%5Gxi~bFQ9PJO4T)4^@6b)IOQ_$af`iJOt~EV{UcB=FHU3
zGo_Ifo4Zt@NV;2k%XGsbAfO4lQGsdmt>{5lGM6%tp)1jk)lCjn|IN1eW8df}K?ae&
zX^No-SS)>FE%?Uu4W*HsFPf{Ne@D=N4!nRc+Ww=2tuR&Fhp&E{H4^1uPbiPE`K^Ji
z?-(}f4TV>Z{qo}e$RnVAN5nq-hAzJ?02fhYn=$_RoxqJA0|tZUMU}>{kCUATE^_z1
zd&K)+pGAcO+;e+T=hxX8kc!yj$`&{(ew}{*eenOb`2UZF%Arr=CCH%jOat<tm80Xw
zJax;G%{zOqaD7<n)?~Qke*kppe?2~C`0Wyoz?T&I?#2cATuja?Wqm))XEvQX+BEnf
zoNV_sj*<S=_}i1S4b6sB1bXrYfsC0X^@U9lx83;q6EZdoHSDyM_XMS!-Xzy;nOT8y
zH{`<I2xyF_&YxO%Pt;)tY~+WjqqR&vAm#Tk#&bAl5J)Tr`OP{L4paKPnd-ph6#+n(
zH3+;Hr)nqBuPAb6mrkC>cufg=RQLJpeCl1jxj!GDb!m!I3v!~&MQX|9bX+Dry}JN3
zs5Su{$leDaQ%<?r?9jic>HrWR@xd$be>`37()QRUFO~xS*(I#$xnJY2^lO(}tK;Y`
z@)alRds>}6UAsagN)JIw3bGBV0Ishq`+1(XFpI^GP6JbkGq`gmJpC1ZFT%)N^r%3&
zM{=(pX~zTpCvp}$@qd7vLBC*Sith#BE)A?9kfAdcgbAZCC<zsEa6h}JLon=G#FZF;
zD3<#!&%cn=zfATy`8?ax1;B~X<vs+KI>eW`AL+e?z`U#wLWPSmPxzXwxG*J1(r#Yj
zaT@^PX?1Nr&?olWyIeQi>oWMxd$naD-nH6%Z0F#mD@JW*{<um(eL3938(?wD2$<4&
z90B94u+~LBibJH2b3rfoEYrd-o?Vm@q#+P4>X`K=7nt<xoH-y8>sodP-^`kI_V!*M
zI|Z4}q}eQBjac#!m@%Xs@aB=ro_|&LjnhBt)Ld~^*+G;j)>tM(qXr1rfsm!HEs2La
z$T4RbC!z2W=%0QeS-FBe@3+r-g)$3AcRu(77JPe!0D6?h5(_$MC%RtCL^z3&uxqL8
zq|UZ`)L$-h;d(quLNLD&?wrXP$Bnkn<;u{uuu^lPG2KnPgyUcLl;UOyK~qjSA2~4S
z>z1RLyQnzWc5UHLtN>(DkIH<_XDLTb_x-{3h_M&Dp71jGytlIE2fdVrAK={HGaHB~
z#LiL-%AU9PpCcedzsl1zXt)!<pTUb~$5DUpN)jBXPzr8fSS~8MM2q`CFI(2wlP3U`
zzQBx*W{ECy4#ql+inQy!Dnh6x58yM5d|Ai>e%M?*w%ND3%_qB^l8r!=s7J-r@MEOd
zH_;#l_=31XrO1|<RE)2Rv_B0_l-mp~v_?43J={BL#1P}22Eefr0`hS-l-N7?1v}$}
zjqif|dN)8_Pa1xRasiEn3n-1Z+{fkd_2J-3nnUKt(*=?SSkPVMqi11_LGV^()b+?M
zf)@NO=U2UDTHRFV{ULb(IOX{RR$KMj)SXSmeEV$7DC7{}Y!G})=(Ujoy{9*jWdq-a
zh;A7nj%#858JF>npGWI<%Jq*Yw?6}R*CD{VS+5X~Q2^<&OSnohgRoey*u@rw9uOu!
zs}2g1aDCcL!VGaYc*bwo%sYV;b}jW<Vsu<SWSMn*eR|i|?R>0VENRpaAi_OO6dryE
zQ13|xipOhqgca|MeOn~iI#`Ar+I<etTe$)~58&aNwRDvR8>r&F_(QcKLegHZ;$L`z
zGFa~;_%3HB1^W;zH2}68+&5Rn%hd;YXDbkTj_<1%d#c;V*y6Rnc`r+eFFn+>myIFH
zQc1tX&3HAB>!-!l&**O|RPaPs5LkaWW1!4tA)viVMPceSn6*-D%)5$-uWam=x(FJ>
zw+pW?LLqQbpDx{*xP~7wK3gV3Lz%~AmzgFDt>3-<)=3wi;cO%}n7J?|X7<b`uN?ft
zLRB#|##SIx+{e_Z=3aT7b}iCsAQzzoHYjT^!NU6+HZw@z3vaa~4j4hgpm>Q%fWW~S
zkZF-62Z6vSDNiwtIE2*ms+G$(c9zgm);Kp2`$!I0KKmig&)(f<bbAbSVBGYPbVaVj
zDMLTt01M+5nM)w;zE{@gID^NJ_Y&`v3b?}v?JgBpH`7G7c327t%V*1TBVYiggJu>H
zN-Pk_c1UiK&+NSbkT$^{J`8>y<={<E2^>s?I##Ic!O-wmS~k`>05;c|BDjKUK$pVH
zU+NCn);G`+H`7luaeFS}#5?y2lzr}C<VAibnBz$^1jC{WiSIK(0_1WYx35VDj%iT{
z2bi{6Ld0AezUc-)n4sTD@nen~JA6=~Q<Vx5y>gsLcTOe<DN3jdtg{ZLmM;)OVvMMG
zCdE!l;iZsX?1_EgHmtjj*WMH%{6W5qHBg{a;(}r9jWfn7DN-IG(yT_<F70fHqQE!<
zzTVKQgB<EBmdUb-dOfJDdOH2Y7X!c*(ercR9C#pkMz+7~^&?}~n|ag?z#j%98X=o9
zpI3I<mcGU>etc5LyBOFKD%d2J)6s34eUs;Y&n$=VeNqqR=OnoJk;79fCe=T26OZsn
z)f>Apxk-BUvYl1s``cLNt^m2f^$_81?LF}DWfK}3y$R@70+LUW=yib8(bI&~jwsau
zuURpOB#JXOnBlwr*mnlt;vvZ9GqNAMD<bFOV0jOWO;aVp*Qdc|>u^vy|2-VvF)$uM
za}hGMzem@`gT;?<s(sbWCrlZ3Z4K<TD=PUYIi5Wyd2y?xj8R^%=ubBve^~Q26t9(y
z>-5<-UrKCASmd2XC>MzmSc|*w(`Yg6XZE5(B|_3(>kTWr2;fOO`9cNPDQIbcE^ExC
z6VFm?4hh%ND?E0q8I!SzE{t`e%xvNza|kct)+nnCO?N1B*f=T=ivO{ch1v)^dZ)4%
z!$6Znqk?E8e=CvsMyjgoBZw*cw{qcUpDQM!NM?&;(Yuzyc9)(<Vc-sqOZvLMkqX(p
z-~HI=o#=KV5$;@$-o9I&E!>0N?;m!~usncj;DFmZL>od8Co5DrZk|Q~!7Ji7=qFs`
z_Eh-TE@LBfPCl_kT`*EMrzN}B#lqGkk2(@r;nc8|HhZ~3L1POXh)T}-pF6N?fpmp0
zxg;7j={zHTXe*j9eSB=^NlE1B0qMS2o_6wNtJhABDN*4Q<J)$*8t6}PD#GTXt_7F6
z-O)ttHhW36dV9yF+Cc&SMybnN9PH{nNLWMfA1GXKs%gK_>LnVJ>-nb2*^6(+*(XcW
za<z%DD#u~MYD)?1yDE;XsF0^055ee?2|p==E8&#j7WWV@*SJ%gMfNS*jMR*APVi>w
zYJZ||h`xoJW1{_;i0|H7EtVT%eH(oh{Ziv1X*Jq=NMlid>DhK3MB|LR$;soa-j-|G
ztHNmIddA&u_qk^`eMzTRc4d}Kdeeo%s2?T7;557)E$vy2y8JtH$)ds*@B@lO&n|#l
zN9S)Q%sfOwHey_3l2Rqd$g`a)@e*5eMwYJ1I5<W6Wiych^bp25m0mTQ(o**^l7?qG
zZGa|EwGAjkZAhxb4q{`v)q=2!NJZ(~s}SfH4_QydI*bRoHJr4yhx}H<AMls4%v{sq
zV}g^^Xojcy!nat&cdJPfS=*lCa<=Ds>#Y&WwY(+Gc{c^0D9~#rGh@gO!{1UeGZgW~
zWM4z2QATB7ikM4xjf`CAsP>>Cr~mTC3`nZzK5=E->dCq6R+>Xni@eb$cbDEDbucpF
zQ#5>UP9VBTs?EKF{G>e@iO(#8f6B+$OTW4}{TRC7YfZ5ICSGdBk^byfPM*Sg+lz6$
z?MG$LxpU(qFeYQGlCyktUA<fPC(6}#?iO3$EAh)8wG`Q|&%acBm4111Uf^11Gdt-<
ztghs14xW*842-y{WHED@g!b(OlF@%o&I)<~su<l0v}O~0Y68_EccJm}yqq;yDp=O;
zry8jJB{zqdumY>x;#uDSdA_@^94WojvfQmnzS7qCfbkHT@Q_gaq9;#VZ=Jn{UA)Aq
zoj~hWI5EG@MbbB=+}T{(K_0-IGsQ#D^;qLT%A<2m?4X+s7mx0mX{r!zARSAjfBh8a
zjC1z^k|sMdH7eEACq?6g^z3*X%uI#uRXK=h_=OWzboFW~k)&R}lR8>As;|P)vYsrJ
zhiQE=q*wb$-bXEY>S51So(qi%bcZCbH^r`TsQ)WpPK`@KLI7I^vrDN8C)HT18054_
zLBYhl43?d4hoFsnb8!UVP5SNyQFk9nrDb!p5!qAmLc{%IR4u3&+C;x(9JBUO@2(RW
zOQ+yOx(lBH0avo78{j|Ku4zs%^<mDfPr48f6!fR3PJa1u+4o~<7d@wRipih3QXfy{
zz^_kNv@y~|qkN=f525{X{#IC@uP|hBE{J=W<II?+H&oDyOUdD)Fu+8XlK*5+On4^M
z?y~6b1ci!tz=IqP-kdauV8~yfm`J$anY6!*qZA$KGH~AJEy={Nc&gebRYi)%p4FJ)
zR<%l^#*y{oa&?vU18Re9yNhNL9Ph)smQVuvYSe<uG*)D!Kq1Z~tg^4Nm(&)>X3!kE
zhMxB2Oq)OfWXT<_<yq2J7X4~F$PrBGIhW7+!_CV*t^h$?BsNJdN@R#altf(YG3kR9
zcNe^uvO8I3rpfDls8zX2%bn!qXRS}Mf)Ob3B~76~+WY^}-kFC(*|&W>OE>PyS|Php
zw(KGrTNu<ZO4^7)MA^r_bC<2LWgELJGZjUVC1PyZ*U^TMecvV7-rrT-EuQCikM}v=
z<2jyx9)CF))68}K=IVEypY!uQi*cS;X-sL(4~KlfzF~L}=_VviCI*bsYm{aZVT!be
z>Ebg;<jrG()7WQB-H|26sZ=P5=PB}hP`TDUQHevKP&K?}=Z^>~uTC;md(Bg3EAA&Z
zM#2((I%$ZiS=4b>un|Fd4S6|fjz>8W-L6@d8ncS^OJi@}MR?7Dbc*)@Rx>R_=)z)T
ztBwD>z`%k1?w8p)PQmq)+73<OuRXe%WA^d&q-Rs1dum79TCj_1{lO~n6qlK1I>>0m
zTLx`v50*Wb*tA=5c_R7~X|Nc7CuH(RcTz*nrASf_t|0G@Whf#D1|qlOHOP6wnb&xV
zdY`;ray#PO7k$;XX2l3kk5Muk5q`t;jtRFYR){;&bjMB3S-yyE?p93vvYP#0G|g8K
z+-IrC`~_45^h{Z4#5kHU`ms5EPu3O8MVC9uD?Z#<YMc-u*%*w5SdGL4!KGd_R-Vm>
zPA|7h@ug5t?}BHh!}&As6sBEVBPaPQm(qAt=l99Nn>U?%g0^T5uk*Y+raR6)%bED5
z@qSBtpjUe((oF4yg<fIP*_<L`?tzM$ZcJJ2?135^a9H$L6~f?4-X@_gWy&}m;iaxe
z1;XJUbAH})DD3@eT@_taIa;O7T5Df^vAHKDh#@QL80XbDqEUn~!iD0VxY?_*Ij@Um
z<DLuIVIqy@dMB$Z9vO~0Bo4^FRbBq#lGf-O``Vtf|H5<M<YISe>A2-H^w*rR7gND!
zE~4GD>AmRX@Kt?xOU3@cFNXSo4SG36$~O@D`Rp5UdHOcb^~wYzNON2E6$E|v!IH<E
z`ETdEemPGM;)x@#F7)V4>5p{A$L)#S2u@J^Ae7It#rj5pyowXG-ES75fRMgdG1n<G
z!yj+~FNtY)%ZVB~kW{wX-Zn$Q$*bX`(Zld``yBt=y^!vU{I()jexf7)kAGsPV`e^D
zG|m3JoB#IRyAJY9pNY4DqJHB)SIsxcBb^zPAYbaP;&zocy~ThIv!-uJw(Ge(c)-v1
z=|?>LaY6W2fn5Vn<86HB@b3Elzy0a;5RM%uZoSC@J-7tW%}A)Ks)}N-_Wtc<`_u4?
zi;G8s+krTX*2Gx6PKx};rc1@-2c*gSpYR$5j2=B3m-W8j27y(|B1<cpJ?n`<=F{?D
zk4VSWe<W&;6TVnjf#P^q_F2-(B#8vJR~z_9iwnQicv(>XhlDR?>E~R`2EYwFZl&;+
zWuKD*yhYj?5vTp@KLL*8<GsNN!70cskq&2K%YIve$(n2S@7l@4<2@33@vfDhWK=o5
z)gVCyCV%(T&yC(U0`#AArHFp+Udak~e|#*zt`g-m8ms}aWrw>Av`cq^pp5r7)OKrJ
z>EYzVjN-;%;<*(VBZq=Ul=OhUL=x1>{LH+0YQiRAS7H8(TKYKIa`l~kB&b(e2MpkI
z0(-n{sJs2K(Mx$KZpZudb(vj%H6<XP{q_#jH{2yr&mK)HKauYBXp%%AK&312_t#!3
zKCj>XAwkzdlnT_n%1B|d{kS4<7wrV5&*7mO2&%qfsY#dw@<%0xkY$;_zjHtGmxm{;
zh>+)%yaQ(c!Jy9FNieNQ$H2DK9I!YLoBHX6HK*}!YerYupJCsM*BKePUJ#|z1x<*7
z`U9bS)WXJNNm*b-j}nLbNEEEC<kT)+D9~}%KQ&xjDiPTO?v60|?0Z4hm3J4^`3)35
zhPz(7c!e%HlM#A>;BFSbzC2C<kxcF>r^SrQPcANq&6^no)zR%*qij*iC<=?FMy6-$
zZ_h(}^P$wQb{q(dJ;ed?xvbD=G%Q10c-No(xp@hV&X3yOc)DB$rV|N5Wselu@*DeT
zeL>V5UaB3AvE&Lc-<FkHll+}C`-cd0*vv>X9Qg7QsX&LL2;M340&{!tP*))|e(CVW
z?~o9w3Fz>4-Wvz^Gcw4&b~upmwwVhkcfFqH^b_j}EzfleBX|9RNe8UqYW;_McTsAV
zec)-I>aMW-zaI~1xjP!o{rFm$OSQ^n?%yB}I+yb2B>-;IQ&{LY+O#eDe3#1VA)x#n
zkUgOoyHa404VC@Cb>?JO-+;5-Z#E_xyO-t4v5UOlq)iBFIvd>n^@7PT(?2`e_nWVF
zaAF@B-bCsdG9T_d)m_n0kYFt)p5a%z_0jN${Qoy=uBD&wIP<AipeXyhHTYvG|JM)u
zuh{lqmGIY3#ec?u{Gy279_HG?*@8Y0NJl0K<=Q=s7cq!a1a0B?d7rg11=Y`hY9+QW
z&f58w-56gWnh7reSwWZsR6ZwNK_&Mc=ex|Gn~ZK9K-ZU5s5oNA+SAh7<fn62iQ9lD
z5x`tD{=CYC>V0nwln(FP1_kmgaAB898`na4oc92x74FkJvj`_J#F+pRzCDlYNZ{*B
zrXJ-yqq1mKg4Ck=6+@UDOVuE-M<!SDe7AB&=P2<&VR<E$8r8r0#5LO(&_9ti)`&a4
z;Mp;3n}7xO7m&`m^vF4%>|}JVu<XnTxtO~G6)v|%_?5K2dTY7Xg_!cV<5wgt>Q{d0
zUtp^w#&lj^1oNuSig~_o?t&B@Cmhs9A9AkLC>sP|3BMdWk*8(6(et(oGJ#eguSh#V
z@~HQiRGJnL=sZCR*$Tl4M3=5jt-$1Mu|ClQP^0@a`!Iy7<kMtpgP=bAN#OPvc~mo{
z=IdNT81e2vB#8vXk8<|QJAgiDLd`te_cMneoxpnTRvL9OAV*(CB>4p*#Rgw}P4gI-
zk(QRantKEC`f2TgOsrSI5m$0e25e8x%%jgFxkvlwo>wNF7>vNdDnTDtlm9KRu~pEx
zBceq665N9;r5S-LE&-C+6}Bc(sI<?u{7WyucI2q9Pa7sxO1fH$`%^bT@dQ<sDpkpN
zD;+3Ac<CVE3E>+6n4L0aH+F11Y6Uu@kd%v1PX^^1>}@8v?;r(NLuMx=%q*XS0$6I*
zoxh83%&%s^vG5l49ec}Mv2dsSIDWh0hxNvfxXOCYcWc@>El%{Bd?6}F7D9z2ur(`a
zqa#}eqqP#6JwZGo-7JEz=Z{JNxk&B6it|#m9{5yLJi5$4FFvG?f8<yvp$IS_;Zo(7
z*QGN`pkhwCYqXNVejJm`Tt2vW5}Yby_Xg*F2r{;~`_>5?MFA>Q4zF(c12TsKi_C6=
z)#vN$QnePF=Vi{hXhvbdj&7#ro&?#dEosfPv`dIm)>(YHb^C<q`iPsg!HL&JO@0{3
z(+v$L>$CeUqrrBDEys};6%&Nv0MjL7$4!GQ_hGy5&4Z4xkzqj0IOOsofaix%KJ#+X
zJEYb<<G?dIj>98@n~S4Tz3Lg>`7>g^>t~H>k^73qH`K0JN`c-cjCCsR<pNkCC*$vw
zzXU)<2VxDy;vGJk*6kZCDukM8F#M23NNF}(U#QZ!P&L5T=OooMufAO2t>~v>d86)7
zadE`a^h^-zfPRzuH51l~G{8MErB(x34`5h9;ftHvB_QB(`HRkgdk>~1&cvd5pYiAF
za;{32MtoQ_RXEgow*Rs4K+Gu1L*O}#Ra%XfPN>ypBMTWSRQW10|2FFe;5|yCrj?G~
zZZgH|j=lpws(4K5=vuO6aDTKsaWFGFsziC5H#VwUl7T)IY|uj>7Kp@nkDnSysQB_a
z4^O4^xoVOj!cC3$GoP|42U#mbcbz~mZhTPVyzgp`@#rPdspcq~e$2W0FVMyZO1!AM
z%REk8Q|0=i%lobje6~^uR*qy1b^T_X%eX>t!v~K|+Keihu&6A-S-gklu9aJZHYKkX
zvctXQBS*!wpiOV}5U?6eE9^!8x>N43cy~|GcM|Bxa5f)BUv<!GHwpBGNFYRA36NH|
z1wL3PEIlH<W`zW;#*#t)1z$*11NWMV)bARVXo@{QOdF|(=L|SjwNf9o=)9tw+6KI@
zLXXv{nX~BSzHvoa)CUM)VB{X$>U#dxC`pMVr?S5Ix#?2Hy=8UpZE$UFo~A)JDy^Fv
zG<66$OQzf67*vAx+t`B8pC+3?o&Ai?Iw__vfW0>^1L{@$Me?sZBm-va!itoM2-bIW
zbm6K-rTTszBc7*k?3tBpQ)RpE*>lLb-obK*FThkWo-~r6Pz8Q04}rZw)iP*wqGJ*d
zF0&@shI;V9G%Nxxsqhs>u@{ixq8z~g3u0V<8JE|8!YA1_aZtC=^8`m2aFsyb-hkND
zrV5>hZt9iOM9mK5)JVq@?YMEF_L{Z7&Y1<+2f%yke%gALvV|(=uV{d5l9u%mJMt8_
zEU+3Yn7)Ed7XUUx5)Si~Pei6O%?qNyrk*gvwehZg>C4ikE8$TdvGoEw_}G6c>#e1*
z!Zt<j4+k5tYwlwfMcR3gl9p~%3~y?idwbcPZMR%@*Z2uZm~=s(Mw42{8T$G<7BUu6
z2C#}i9-(`P8Pmb?afNv;C|Q}dgJqIOd60YtjJwo?VvlKKO5TkOg*kx%l-X7!d>v1q
zQNo`{-j49v-~-G9zxsLVgIXS-k0ezrlJzkxjgl{j)5Eet6Fyfm9QcW~jV*vl6i2fH
zi~@Il-&T%49F7NsI8ufxuR=|t&^T9KCG0a&6j6YC8h}RG+9&I=`<%%!MwN?Uc3Gfo
zBt!MSuclR9oOwH?NuB5bGP}pyC}>}Rsjee0(skN^7H}VpPGP#_^$r-m%XM-#evb5f
zj<iOT$ibl`20$LC^h#6Zx*-qTOO4#3Nvon%!>KE4XS&jaG9TH(J4l{-7t=$pf_5^B
z=>=;K<L8&KCn`#cQRV0=BC<gfR>hJk(beqEYBL@4KzJ%bjTlA+Tf}~fqMp0lMlm&U
z@FN`CAX(<W0(?A)uSNMSdmjc}GbDkI?1)Rti@}Z05KN?+DwzW+m>d^nBUXoQ|NgAU
zMLj~^P$|5Z^s&m5(OEqs^H2T&K_qqVqpmt;<K%W#0!@li%ct~AfA1Xjp|n@giF@`i
z<ZG#^T)?&3NXE%lo;T`IoK5|NB2X6aE{xc99+2(pC~uZeds>wYml!$|^Z{&BHl2&C
zR{h&3dN|jfVRV`_hvqq6IT1TjKO0obBSsr9l}Vq^1KmK|szD=ti?TMBAH@f12Xy5_
zOJawtP@Y$}x7BZOaTs}tt+#cZBf3(G$+K9ZqMBs5nt$GJA4?=YAh!_BEu}t+HkTJ5
z+XoXFoj8Q1)Q{#zwK2zG@6{c=EGnagjeI#OVyBe{T7i}u#C|f)g-D2T4qf)K;FAJ`
zGoCrl&@dYJM$42h`mQ0~b!SYrvavaELl{An1yh<=z}`oW$_UA9%Ph{+F$1n9szLne
z*xEZ2z-e!}uS12PYu<Og2-Ys~;?UaZ`Z_y;qxv|-#z%#Vg5;M(b88}K?+UQN()jRC
zo*l@1fo!x`x%ZyhNj@2D@Z4FMC;0-1k_>#&ma4h1%b`|{qb@1?8<?w3ZjkzMa`ZM)
zw9JV8T7{LG*!%<h=wmEl2Mf5}SgueyEZWNkJU@vl<oYxW|3KNo9#k7FmFb)1=Auk_
z+sU+3P@O~9wg*M&=^lhP?vyEY_K)%j5Ip{%z$K)Yn>RR7>V{5*Mj9(4*22Xxcz(&g
zhi@Roa-*C;n{ZSa>d#%eC3hr^S$Zo}=N?eD6!TbtKA7=xu^1*_jZ>%|;6<z(I7?$+
z32$>s?`Yo=vZ#;nqWkI(+8r7Ylc!^S%s*c!$jEWcJhX_t`JbIUyeuauaJa`{Kp$@-
zvw@*oou)dvPFh>k4N4ZhkCu6}+_W9_2)~zUQ?lud{b7|8%<XX8RI8m2hO^F$Qslg0
zO#L{3(vfT-QRf($%P7tH5HY;5^Jc7hqY^{j$O6&gyK9spSm~m($Xj9EP26o&G7?9c
z_lla&UwA@|gGGidW5*6LlbbNAP-l*2Nv16-_SEid`0j|g9vAO9)4z_?t+&KD6~ZB+
zSRZ11PRUDjp#F>7>~&>(R6fx?K}dU0C6d$MVnkx8Z_>-b$S9$UU65RsT+>JMTyf0P
zq~#c!2%SJpiOc|Qq3~AFT|SpcFfQO|r$HZ)B7I(OTTqQ;(!&p5UOdx}>uK>pX5Tm>
zr-bBD++3(JD{wYSnug7M=5%r#+&~-wfuQr|?v99Nt;MTPZmlXVHGS%o)3d#FHGaO?
zrfIFS-#%jAtXsYG+PdNree;XOQ18SYeBIL6CA@ufo|~m{E@Algl|5J|se;?{;(Fzi
zETQ3u?Thi|AB#divoY2S_Ie#({?SN{vxM><ss`_0G7QEHNazW()|m)dB;bZLOuIvs
zBR#|1xk8lv7?c<@O_6)ACvubSB<W#=94dLi+FlzYzxVKogV7wT4RZ-2b}=0$%E<bD
zC}RnP?l%%X_M^j9Lpvq<>jgyTo1MS}@9~GBhLMs7;-GLR$7qwv@p4MZn6x!GUnoOG
ziR(RzbBY1<h&r>vAO>D?sO{rVdx9D_Yo=RD(b06Y3t81McRa1zQHITDsoeZ?o>=aa
zh;`E*et#KQQVV1H7JUOPzu(Q+N}WF#vM{Iia4>hXkrrW{wwfpFsTIl8i$gZ<Xki1T
zQj%+(%t3Hu$Ky68x|n7*Ss!)#)AjVu$jDZTLEbwj$Y|-3VVyk0{Zw&v6LO=O<t;OV
zWlb*^M`vmK=Gi8}1c3H68%*8_z0OkE_=j~~mA!jguw6^m<hD_Ro1OmEz-SzGJ-(FB
zW0d(acHL?%W&9MQpsfb_g=0)?r#JbeOTkIt;f~L)93eX)#cIjlO4m3%&&BaaA1!e$
zhN@+eUIPC>>O)E;nUlo=$49#Zy$fr{dae_e%YKxZaGK<qw77)uQX8|Za4WCA>BBIQ
zqm0ZphME}vS2e}Fe&IH5<RZ+8h7Y6^BJW~2tLqdn668$1k^wGG!;_C^YVHWpF$`yf
zPv#o7IC4q)UoG=X5X2)juKy{wmb{cMu!PX97H~B@$Y>b#LunK$$v?)zGidU{oN{H<
zWii$4Rn1dV)^%<oPcV<fnYKDX4*EWg=5b9!YmCxSf0I7DGX%1SdZmxZE#&{C-Y>^Y
z7d%w4bTP!L4w=L+ZhG}ZzoDB{c4DoikP0uE6rK4{NuQW@s8t&!E1zgjX<E#SQ0~Mf
zhVC$FXUX88BN9WQa^}GgTa%-SDNEvC5X46B%0=`8+a)!&v6G9}tr3SxQ7mEsi#XFZ
zcefG_4$f9mMS=@*=#=VU4GMd^AbFm_Chq+q<iPl;S0W65dy}3WG*zwvRAEn*(lWy^
zv_*u1&|Wg?2D!shvY%;Rky>CU$IBlxu8~POYEv<eqkCir8g*zNhd<|ut2;RRXx@uO
zoU!?@_a(7@l6rQOaeedJK@@Azq|W*VpR(>-V%vW>7%L8_$oo*=ZdNlGu{+|cvA)5f
z*KBt4lyChyoAyG>)@HY`OkX7j?dYP{kDh<zbqEo&GjG8Ag1;l;Ajq4%!@_(Mc#{Eq
zocJ0K&g8l}&P-Fv3rH%PST{`;=9I<m>qWx~&F<8f^m)_G_~QLSJWtS^#AP(7^Hs5}
z2m4}b)sMomq6Wr>8R3p5Ex~eCR69P$5Ux!&61<%c7qZ2?tx~wikF}{1&k!|&_Rxv*
z=9^?GAnv_Sqa|NzPz_`uGfm_p69s2<31Q>oU?_T<#);-wlHN#~U&JORLWp#NhSBYr
zJCbnY)HX_ljOmy}=w`TUxtZk`xc>!sxA0toxl{O_=vrzZzS6Q9!HgGs8vT5y>w?8>
z!qIWu_g?Tj><`fG87c~+<wocyq_U$>c};rD@;&r)K12P+@(OOaBeP*1!&PQ2p~S%D
zj!sqaF1S9I>eOD0JjcXIp?M|zX5kfb-Z!L=)!sEu9^z8|-?dCu3yKcJ!!%8JB(_tH
zlUqH%C6~5`GeyaZ&?uI2gi>dgvA#BPscT(1zqM2|g}sLZQ_`H-KO8&%hu}9WbNm!)
zA>xEh5M*T*!WhkuUB=t|qm<dk{?XsM?}#b^wu%e_F(`LGfhN6TnyiFy)W(P>6DpeU
zGZ!>nl$;{W>fv9*`j-*2)YzfwxMfEVygJ5#tx7k?e0Hfpou~e;r+Tl=+net2u*9g^
zv07<0&b}J&l&HLSfyC6iNY1NuPC5aJj#Ez7vVCs_>{uyHs~zJQ8oE@7dxdu@f*Fhu
zG-vCV4E0Baif{R#5}M)CdGljZ^}K1bc)SZHH_F<;oVa4)bM*s1=Xl2BXBDM$W?S~g
zll1pF4V<&=_b)Zd2WTU1)7*nmn<=abNgYUoOir1->o%*Af}ielkc>>H9F`p(<UA8m
z@8xf}x%vU^yHrap>(5GdDoyZ48OF)cvW*n@nSIoDH6>!RcJ0}UDF+ABrp+x^<N3ga
z4AtQG2P87VAoDz@7oFP^Emp5fmAxesb;@pv+OgMM`n#-;&e)gBCHN`7_Hn=&(e6aC
zS62a&7eSb6B)VB%DN{=wdI+MBOyqi>3tf7x*gAbRwpd8_7PD8KLr&A7-a-$XCqWl`
z_q(#z_vlthy5~xA2M-d2!isc;-|4H!^<Ef_{zu6(X*#97#%g1REhK?LAEc(dt{8r9
zdverv?d5R|`=IE7#f7PrEm%q3qZ`|z`j5GE<UahcWF}le^rxUJVa1c@)u|oB8AmP&
z5+UiYFr$$>cb!r<Tb)Luuvu%oC{B#^UP}$E_4)cyQb_%$<7TeX0fO>}aF5v6_C$Q>
z<nNDKNpy3*8S=d%mCi{%EPu3&Gb`@=4?6G_6r*{mv0v^RGm%wEe&-24uyV(70Gf{v
z-T3=B{tcFo0MIP+ZwUnaSHc7T`D2k*PjiPeeuXQ5Mu+#7`Ts@*b*cQpmo$Jo(m-sI
z282cap!?}~hjfMomqUw;$HlHZ<7-V-IMs@ifN3X=aIfCB<vIK_3IH64K#_cx*&YZD
z6<WW4Cha<B_}7?8vrRIa3x~MawHMObp!K>nSq?LNJgW3}j3tv#3_T>=^+-Rb3;bTj
zUI)HqN%?}4(*lYb{1N*5?O6N2`6c1d;*Vld{zh3>>u=`O%0)li!{#z$&m^7*MP7dZ
zqZm@^QhwGUzkT=b_cehMT=1t<*)B9U3_}y)ifyUtzc0G~MK{HsC6<E{av>nSkjjZg
zJ%sOK*?#1i2XT^3Tf(l!AiVKwN)MC|0a7XAL8_~8v1|5k=NdqLw!6wG4P3nFwM3{|
zei#G>LBkTlvRlSfe}7%d{^1a2?gyRAj7q!C1xUZwPA9-xwgOFjb`kA^|6+J2n#j)h
zi)a4rbEgYTTV|Gu-E^3n@|6ghlZ8cd6Za1%mC8SL+u$MN;7Bw|RO!o)joo+N;U9Jt
z-G{)*-rOto(;)xaDw3`o4IDY9V6NToLz(FJ-sRgveq068l_BhUSU~jmWqeQ<JXYra
z`dCO$-pMX^nY}u?>s|Cv|5so9^#c2!(HDt3R45MBei*Cwxjo=ZOI=6p$!T=J{{RH1
BXdVCn

literal 0
HcmV?d00001

diff --git a/doc/user/admin_area/settings/import_export_rate_limits.md b/doc/user/admin_area/settings/import_export_rate_limits.md
new file mode 100644
index 00000000000..92cb2a1a109
--- /dev/null
+++ b/doc/user/admin_area/settings/import_export_rate_limits.md
@@ -0,0 +1,32 @@
+---
+type: reference
+stage: Manage
+group: Import
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
+---
+
+# Project/Group Import/Export rate limits
+
+> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/35728) in GitLab 13.2.
+
+The following table includes configurable rate limits. The following table includes limits on a
+per minute per user basis:
+
+| Limit                    | Default (per minute per user) |
+|--------------------------|-------------------------------|
+| Project Import           | 6                             |
+| Project Export           | 6                             |
+| Project Export Download  | 1                             |
+| Group Import             | 6                             |
+| Group Export             | 6                             |
+| Group Export Download    | 1                             |
+
+All rate limits are:
+
+- Configurable at **(admin)** **Admin Area > Settings > Network > Import/Export Rate Limits**
+- Applied per minute per user
+- Not applied per IP address
+- Active by default. To disable, set the option to `0`
+- Logged to `auth.log` file if exceed rate limit
+
+![Import/Export rate limits](img/import_export_rate_limits_v13_2.png)
diff --git a/doc/user/admin_area/settings/rate_limit_on_issues_creation.md b/doc/user/admin_area/settings/rate_limit_on_issues_creation.md
index bae60aba15f..a9c55e9b874 100644
--- a/doc/user/admin_area/settings/rate_limit_on_issues_creation.md
+++ b/doc/user/admin_area/settings/rate_limit_on_issues_creation.md
@@ -11,7 +11,7 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 This setting allows you to rate limit the requests to the issue creation endpoint.
 It defaults to 300 requests per minute.
-You can change it in **Admin Area > Settings > Network > Performance Optimization**.
+You can change it in **Admin Area > Settings > Network > Issues Rate Limits**.
 
 For example, requests using the
 [Projects::IssuesController#create](https://gitlab.com/gitlab-org/gitlab/raw/master/app/controllers/projects/issues_controller.rb)
diff --git a/doc/user/project/repository/repository_mirroring.md b/doc/user/project/repository/repository_mirroring.md
index 4c88982b25c..bdf13100a6a 100644
--- a/doc/user/project/repository/repository_mirroring.md
+++ b/doc/user/project/repository/repository_mirroring.md
@@ -125,10 +125,10 @@ The repository will push soon. To force a push, click the appropriate button.
 
 ## Setting up a push mirror to another GitLab instance with 2FA activated
 
-1. On the destination GitLab instance, create a [personal access token](../../profile/personal_access_tokens.md) with `API` scope.
+1. On the destination GitLab instance, create a [personal access token](../../profile/personal_access_tokens.md) with `write_repository` scope.
 1. On the source GitLab instance:
    1. Fill in the **Git repository URL** field using this format: `https://oauth2@<destination host>/<your_gitlab_group_or_name>/<your_gitlab_project>.git`.
-   1. Fill in **Password** field with the GitLab personal access token created on the destination GitLab instance.
+   1. Fill in the **Password** field with the GitLab personal access token created on the destination GitLab instance.
    1. Click the **Mirror repository** button.
 
 ## Pulling from a remote repository **(STARTER)**
diff --git a/jest.config.base.js b/jest.config.base.js
index 1a1fd4e7b62..422b6779af4 100644
--- a/jest.config.base.js
+++ b/jest.config.base.js
@@ -82,7 +82,9 @@ module.exports = path => {
       '^.+\\.js$': 'babel-jest',
       '^.+\\.vue$': 'vue-jest',
     },
-    transformIgnorePatterns: ['node_modules/(?!(@gitlab/ui|bootstrap-vue|three|monaco-editor)/)'],
+    transformIgnorePatterns: [
+      'node_modules/(?!(@gitlab/ui|bootstrap-vue|three|monaco-editor|monaco-yaml)/)',
+    ],
     timers: 'fake',
     testEnvironment: '<rootDir>/spec/frontend/environment.js',
     testEnvironmentOptions: {
diff --git a/lib/gitlab/application_rate_limiter.rb b/lib/gitlab/application_rate_limiter.rb
index 3277ddd9f49..ed963476524 100644
--- a/lib/gitlab/application_rate_limiter.rb
+++ b/lib/gitlab/application_rate_limiter.rb
@@ -19,17 +19,17 @@ module Gitlab
       # and only do that when it's needed.
       def rate_limits
         {
-          issues_create:                { threshold: -> { Gitlab::CurrentSettings.current_application_settings.issues_create_limit }, interval: 1.minute },
-          project_export:               { threshold: 30, interval: 5.minutes },
-          project_download_export:      { threshold: 10, interval: 10.minutes },
+          issues_create:                { threshold: -> { application_settings.issues_create_limit }, interval: 1.minute },
+          project_export:               { threshold: -> { application_settings.project_export_limit }, interval: 1.minute },
+          project_download_export:      { threshold: -> { application_settings.project_download_export_limit }, interval: 1.minute },
           project_repositories_archive: { threshold: 5, interval: 1.minute },
-          project_generate_new_export: { threshold: 30, interval: 5.minutes },
-          project_import:              { threshold: 30, interval: 5.minutes },
-          play_pipeline_schedule:      { threshold: 1, interval: 1.minute },
-          show_raw_controller:         { threshold: -> { Gitlab::CurrentSettings.current_application_settings.raw_blob_request_limit }, interval: 1.minute },
-          group_export:                { threshold: 30, interval: 5.minutes },
-          group_download_export:       { threshold: 10, interval: 10.minutes },
-          group_import:                { threshold: 30, interval: 5.minutes }
+          project_generate_new_export:  { threshold: -> { application_settings.project_export_limit }, interval: 1.minute },
+          project_import:               { threshold: -> { application_settings.project_import_limit }, interval: 1.minute },
+          play_pipeline_schedule:       { threshold: 1, interval: 1.minute },
+          show_raw_controller:          { threshold: -> { application_settings.raw_blob_request_limit }, interval: 1.minute },
+          group_export:                 { threshold: -> { application_settings.group_export_limit }, interval: 1.minute },
+          group_download_export:        { threshold: -> { application_settings.group_download_export_limit }, interval: 1.minute },
+          group_import:                 { threshold: -> { application_settings.group_import_limit }, interval: 1.minute }
         }.freeze
       end
 
@@ -130,6 +130,10 @@ module Gitlab
 
         "application_rate_limiter:#{serialized}"
       end
+
+      def application_settings
+        Gitlab::CurrentSettings.current_application_settings
+      end
     end
   end
 end
diff --git a/lib/gitlab/background_migration/digest_column.rb b/lib/gitlab/background_migration/digest_column.rb
deleted file mode 100644
index 22a3bb8f8f3..00000000000
--- a/lib/gitlab/background_migration/digest_column.rb
+++ /dev/null
@@ -1,25 +0,0 @@
-# frozen_string_literal: true
-
-# rubocop:disable Style/Documentation
-module Gitlab
-  module BackgroundMigration
-    class DigestColumn
-      class PersonalAccessToken < ActiveRecord::Base
-        self.table_name = 'personal_access_tokens'
-      end
-
-      def perform(model, attribute_from, attribute_to, start_id, stop_id)
-        model = model.constantize if model.is_a?(String)
-
-        model.transaction do
-          relation = model.where(id: start_id..stop_id).where.not(attribute_from => nil).lock
-
-          relation.each do |instance|
-            instance.update_columns(attribute_to => Gitlab::CryptoHelper.sha256(instance.read_attribute(attribute_from)),
-                                    attribute_from => nil)
-          end
-        end
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/background_migration/encrypt_columns.rb b/lib/gitlab/background_migration/encrypt_columns.rb
deleted file mode 100644
index 173543b7c25..00000000000
--- a/lib/gitlab/background_migration/encrypt_columns.rb
+++ /dev/null
@@ -1,104 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module BackgroundMigration
-    # EncryptColumn migrates data from an unencrypted column - `foo`, say - to
-    # an encrypted column - `encrypted_foo`, say.
-    #
-    # To avoid depending on a particular version of the model in app/, add a
-    # model to `lib/gitlab/background_migration/models/encrypt_columns` and use
-    # it in the migration that enqueues the jobs, so code can be shared.
-    #
-    # For this background migration to work, the table that is migrated _has_ to
-    # have an `id` column as the primary key. Additionally, the encrypted column
-    # should be managed by attr_encrypted, and map to an attribute with the same
-    # name as the unencrypted column (i.e., the unencrypted column should be
-    # shadowed), unless you want to define specific methods / accessors in the
-    # temporary model in `/models/encrypt_columns/your_model.rb`.
-    #
-    class EncryptColumns
-      def perform(model, attributes, from, to)
-        model = model.constantize if model.is_a?(String)
-
-        # If sidekiq hasn't undergone a restart, its idea of what columns are
-        # present may be inaccurate, so ensure this is as fresh as possible
-        model.reset_column_information
-        model.define_attribute_methods
-
-        attributes = expand_attributes(model, Array(attributes).map(&:to_sym))
-
-        model.transaction do
-          # Use SELECT ... FOR UPDATE to prevent the value being changed while
-          # we are encrypting it
-          relation = model.where(id: from..to).lock
-
-          relation.each do |instance|
-            encrypt!(instance, attributes)
-          end
-        end
-      end
-
-      def clear_migrated_values?
-        true
-      end
-
-      private
-
-      # Build a hash of { attribute => encrypted column name }
-      def expand_attributes(klass, attributes)
-        expanded = attributes.flat_map do |attribute|
-          attr_config = klass.encrypted_attributes[attribute]
-          crypt_column_name = attr_config&.fetch(:attribute)
-
-          raise "Couldn't determine encrypted column for #{klass}##{attribute}" if
-            crypt_column_name.nil?
-
-          raise "#{klass} source column: #{attribute} is missing" unless
-            klass.column_names.include?(attribute.to_s)
-
-          # Running the migration without the destination column being present
-          # leads to data loss
-          raise "#{klass} destination column: #{crypt_column_name} is missing" unless
-            klass.column_names.include?(crypt_column_name.to_s)
-
-          [attribute, crypt_column_name]
-        end
-
-        Hash[*expanded]
-      end
-
-      # Generate ciphertext for each column and update the database
-      def encrypt!(instance, attributes)
-        to_clear = attributes
-          .map { |plain, crypt| apply_attribute!(instance, plain, crypt) }
-          .compact
-          .flat_map { |plain| [plain, nil] }
-
-        to_clear = Hash[*to_clear]
-
-        if instance.changed?
-          instance.save!
-
-          if clear_migrated_values?
-            instance.update_columns(to_clear)
-          end
-        end
-      end
-
-      def apply_attribute!(instance, plain_column, crypt_column)
-        plaintext = instance[plain_column]
-        ciphertext = instance[crypt_column]
-
-        # No need to do anything if the plaintext is nil, or an encrypted
-        # value already exists
-        return unless plaintext.present?
-        return if ciphertext.present?
-
-        # attr_encrypted will calculate and set the expected value for us
-        instance.public_send("#{plain_column}=", plaintext) # rubocop:disable GitlabSecurity/PublicSend
-
-        plain_column
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/background_migration/encrypt_runners_tokens.rb b/lib/gitlab/background_migration/encrypt_runners_tokens.rb
deleted file mode 100644
index ec64a73542e..00000000000
--- a/lib/gitlab/background_migration/encrypt_runners_tokens.rb
+++ /dev/null
@@ -1,32 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module BackgroundMigration
-    # EncryptColumn migrates data from an unencrypted column - `foo`, say - to
-    # an encrypted column - `encrypted_foo`, say.
-    #
-    # We only create a subclass here because we want to isolate this migration
-    # (migrating unencrypted runner registration tokens to encrypted columns)
-    # from other `EncryptColumns` migration. This class name is going to be
-    # serialized and stored in Redis and later picked by Sidekiq, so we need to
-    # create a separate class name in order to isolate these migration tasks.
-    #
-    # We can solve this differently, see tech debt issue:
-    #
-    # https://gitlab.com/gitlab-org/gitlab-foss/issues/54328
-    #
-    class EncryptRunnersTokens < EncryptColumns
-      def perform(model, from, to)
-        resource = "::Gitlab::BackgroundMigration::Models::EncryptColumns::#{model.to_s.capitalize}"
-        model = resource.constantize
-        attributes = model.encrypted_attributes.keys
-
-        super(model, attributes, from, to)
-      end
-
-      def clear_migrated_values?
-        false
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/background_migration/models/encrypt_columns/namespace.rb b/lib/gitlab/background_migration/models/encrypt_columns/namespace.rb
deleted file mode 100644
index 41f18979d76..00000000000
--- a/lib/gitlab/background_migration/models/encrypt_columns/namespace.rb
+++ /dev/null
@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module BackgroundMigration
-    module Models
-      module EncryptColumns
-        # This model is shared between synchronous and background migrations to
-        # encrypt the `runners_token` column in `namespaces` table.
-        #
-        class Namespace < ActiveRecord::Base
-          include ::EachBatch
-
-          self.table_name = 'namespaces'
-          self.inheritance_column = :_type_disabled
-
-          def runners_token=(value)
-            self.runners_token_encrypted =
-              ::Gitlab::CryptoHelper.aes256_gcm_encrypt(value)
-          end
-
-          def self.encrypted_attributes
-            { runners_token: { attribute: :runners_token_encrypted } }
-          end
-        end
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/background_migration/models/encrypt_columns/project.rb b/lib/gitlab/background_migration/models/encrypt_columns/project.rb
deleted file mode 100644
index bfeae14584d..00000000000
--- a/lib/gitlab/background_migration/models/encrypt_columns/project.rb
+++ /dev/null
@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module BackgroundMigration
-    module Models
-      module EncryptColumns
-        # This model is shared between synchronous and background migrations to
-        # encrypt the `runners_token` column in `projects` table.
-        #
-        class Project < ActiveRecord::Base
-          include ::EachBatch
-
-          self.table_name = 'projects'
-          self.inheritance_column = :_type_disabled
-
-          def runners_token=(value)
-            self.runners_token_encrypted =
-              ::Gitlab::CryptoHelper.aes256_gcm_encrypt(value)
-          end
-
-          def self.encrypted_attributes
-            { runners_token: { attribute: :runners_token_encrypted } }
-          end
-        end
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/background_migration/models/encrypt_columns/runner.rb b/lib/gitlab/background_migration/models/encrypt_columns/runner.rb
deleted file mode 100644
index 14ddce4b147..00000000000
--- a/lib/gitlab/background_migration/models/encrypt_columns/runner.rb
+++ /dev/null
@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module BackgroundMigration
-    module Models
-      module EncryptColumns
-        # This model is shared between synchronous and background migrations to
-        # encrypt the `token` column in `ci_runners` table.
-        #
-        class Runner < ActiveRecord::Base
-          include ::EachBatch
-
-          self.table_name = 'ci_runners'
-          self.inheritance_column = :_type_disabled
-
-          def token=(value)
-            self.token_encrypted =
-              ::Gitlab::CryptoHelper.aes256_gcm_encrypt(value)
-          end
-
-          def self.encrypted_attributes
-            { token: { attribute: :token_encrypted } }
-          end
-        end
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/background_migration/models/encrypt_columns/settings.rb b/lib/gitlab/background_migration/models/encrypt_columns/settings.rb
deleted file mode 100644
index 08ae35c0671..00000000000
--- a/lib/gitlab/background_migration/models/encrypt_columns/settings.rb
+++ /dev/null
@@ -1,37 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module BackgroundMigration
-    module Models
-      module EncryptColumns
-        # This model is shared between synchronous and background migrations to
-        # encrypt the `runners_token` column in `application_settings` table.
-        #
-        class Settings < ActiveRecord::Base
-          include ::EachBatch
-          include ::CacheableAttributes
-
-          self.table_name = 'application_settings'
-          self.inheritance_column = :_type_disabled
-
-          after_commit do
-            ::ApplicationSetting.expire
-          end
-
-          def runners_registration_token=(value)
-            self.runners_registration_token_encrypted =
-              ::Gitlab::CryptoHelper.aes256_gcm_encrypt(value)
-          end
-
-          def self.encrypted_attributes
-            {
-              runners_registration_token: {
-                attribute: :runners_registration_token_encrypted
-              }
-            }
-          end
-        end
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/background_migration/models/encrypt_columns/web_hook.rb b/lib/gitlab/background_migration/models/encrypt_columns/web_hook.rb
deleted file mode 100644
index 34e72fd9f34..00000000000
--- a/lib/gitlab/background_migration/models/encrypt_columns/web_hook.rb
+++ /dev/null
@@ -1,28 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module BackgroundMigration
-    module Models
-      module EncryptColumns
-        # This model is shared between synchronous and background migrations to
-        # encrypt the `token` and `url` columns
-        class WebHook < ActiveRecord::Base
-          include ::EachBatch
-
-          self.table_name = 'web_hooks'
-          self.inheritance_column = :_type_disabled
-
-          attr_encrypted :token,
-                         mode:      :per_attribute_iv,
-                         algorithm: 'aes-256-gcm',
-                         key:       ::Settings.attr_encrypted_db_key_base_32
-
-          attr_encrypted :url,
-                         mode:      :per_attribute_iv,
-                         algorithm: 'aes-256-gcm',
-                         key:       ::Settings.attr_encrypted_db_key_base_32
-        end
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/code_navigation_path.rb b/lib/gitlab/code_navigation_path.rb
index faf623faccf..0a182ed7181 100644
--- a/lib/gitlab/code_navigation_path.rb
+++ b/lib/gitlab/code_navigation_path.rb
@@ -5,7 +5,7 @@ module Gitlab
     include Gitlab::Utils::StrongMemoize
     include Gitlab::Routing
 
-    LATEST_COMMITS_LIMIT = 10
+    LATEST_COMMITS_LIMIT = 2
 
     def initialize(project, commit_sha)
       @project = project
diff --git a/lib/gitlab/gitaly_client/remote_service.rb b/lib/gitlab/gitaly_client/remote_service.rb
index 4566c59bbe0..06aaf460751 100644
--- a/lib/gitlab/gitaly_client/remote_service.rb
+++ b/lib/gitlab/gitaly_client/remote_service.rb
@@ -8,9 +8,11 @@ module Gitlab
       MAX_MSG_SIZE = 128.kilobytes.freeze
 
       def self.exists?(remote_url)
-        request = Gitaly::FindRemoteRepositoryRequest.new(remote: remote_url)
+        storage = GitalyClient.random_storage
 
-        response = GitalyClient.call(GitalyClient.random_storage,
+        request = Gitaly::FindRemoteRepositoryRequest.new(remote: remote_url, storage_name: storage)
+
+        response = GitalyClient.call(storage,
                                      :remote_service,
                                      :find_remote_repository, request,
                                      timeout: GitalyClient.medium_timeout)
diff --git a/lib/gitlab/instrumentation/redis_base.rb b/lib/gitlab/instrumentation/redis_base.rb
index 7993e6e84cc..52817bde97e 100644
--- a/lib/gitlab/instrumentation/redis_base.rb
+++ b/lib/gitlab/instrumentation/redis_base.rb
@@ -82,7 +82,7 @@ module Gitlab
         end
 
         def count_request
-          @request_counter ||= Gitlab::Metrics.counter(:redis_client_requests_total, 'Client side Redis request count, per Redis server')
+          @request_counter ||= Gitlab::Metrics.counter(:gitlab_redis_client_requests_total, 'Client side Redis request count, per Redis server')
           @request_counter.increment({ storage: storage_key })
         end
 
@@ -90,7 +90,7 @@ module Gitlab
           # This metric is meant to give a client side view of how the Redis
           # server is doing. Redis itself does not expose error counts. This
           # metric can be used for Redis alerting and service health monitoring.
-          @exception_counter ||= Gitlab::Metrics.counter(:redis_client_exceptions_total, 'Client side Redis exception count, per Redis server, per exception class')
+          @exception_counter ||= Gitlab::Metrics.counter(:gitlab_redis_client_exceptions_total, 'Client side Redis exception count, per Redis server, per exception class')
           @exception_counter.increment({ storage: storage_key, exception: ex.class.to_s })
         end
 
diff --git a/lib/quality/test_level.rb b/lib/quality/test_level.rb
index 334643fd0d3..cd94efddc1e 100644
--- a/lib/quality/test_level.rb
+++ b/lib/quality/test_level.rb
@@ -93,8 +93,14 @@ module Quality
 
     private
 
+    def migration_and_background_migration_folders
+      TEST_LEVEL_FOLDERS.fetch(:migration) + TEST_LEVEL_FOLDERS.fetch(:background_migration)
+    end
+
     def folders_pattern(level)
       case level
+      when :migration
+        "{#{migration_and_background_migration_folders.join(',')}}"
       # Geo specs aren't in a specific folder, but they all have the :geo tag, so we must search for them globally
       when :all, :geo
         '**'
@@ -105,6 +111,8 @@ module Quality
 
     def folders_regex(level)
       case level
+      when :migration
+        "(#{migration_and_background_migration_folders.join('|')})"
       # Geo specs aren't in a specific folder, but they all have the :geo tag, so we must search for them globally
       when :all, :geo
         ''
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 2bf0a7f4a23..e6967574212 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -192,6 +192,11 @@ msgid_plural "%d issues selected"
 msgstr[0] ""
 msgstr[1] ""
 
+msgid "%d issue successfully imported with the label"
+msgid_plural "%d issues successfully imported with the label"
+msgstr[0] ""
+msgstr[1] ""
+
 msgid "%d layer"
 msgid_plural "%d layers"
 msgstr[0] ""
@@ -6082,6 +6087,9 @@ msgstr ""
 msgid "Configure limit for issues created per minute by web and API requests."
 msgstr ""
 
+msgid "Configure limits for Project/Group Import/Export."
+msgstr ""
+
 msgid "Configure limits for web and API requests."
 msgstr ""
 
@@ -12226,6 +12234,9 @@ msgstr ""
 msgid "Import timed out. Import took longer than %{import_jobs_expiration} seconds"
 msgstr ""
 
+msgid "Import/Export Rate Limits"
+msgstr ""
+
 msgid "Import/Export illustration"
 msgstr ""
 
@@ -12756,9 +12767,6 @@ msgstr ""
 msgid "Issues referenced by merge requests and commits within the default branch will be closed automatically"
 msgstr ""
 
-msgid "Issues successfully imported with the label"
-msgstr ""
-
 msgid "Issues with comments, merge requests with diffs and comments, labels, milestones, snippets, and other project entities"
 msgstr ""
 
@@ -13989,6 +13997,24 @@ msgstr ""
 msgid "Maven Metadata"
 msgstr ""
 
+msgid "Max Group Export Download requests per minute per user"
+msgstr ""
+
+msgid "Max Group Export requests per minute per user"
+msgstr ""
+
+msgid "Max Group Import requests per minute per user"
+msgstr ""
+
+msgid "Max Project Export Download requests per minute per user"
+msgstr ""
+
+msgid "Max Project Export requests per minute per user"
+msgstr ""
+
+msgid "Max Project Import requests per minute per user"
+msgstr ""
+
 msgid "Max access level"
 msgstr ""
 
@@ -19505,6 +19531,9 @@ msgstr ""
 msgid "Required approvals (%{approvals_given} given, you've approved)"
 msgstr ""
 
+msgid "Required in this project."
+msgstr ""
+
 msgid "Requirement"
 msgstr ""
 
@@ -22379,9 +22408,6 @@ msgstr ""
 msgid "Suggestions must all be on the same branch."
 msgstr ""
 
-msgid "Suggestions that change line count can't be added to batches, yet."
-msgstr ""
-
 msgid "Suggestions:"
 msgstr ""
 
@@ -23397,7 +23423,7 @@ msgstr ""
 msgid "This also resolves all related threads"
 msgstr ""
 
-msgid "This also resolves the discussion"
+msgid "This also resolves this thread"
 msgstr ""
 
 msgid "This application was created by %{link_to_owner}."
diff --git a/package.json b/package.json
index 97aa4e1d3d6..1f1e4918e5d 100644
--- a/package.json
+++ b/package.json
@@ -97,6 +97,7 @@
     "jquery.caret": "^0.3.1",
     "jquery.waitforimages": "^2.2.0",
     "js-cookie": "^2.2.1",
+    "js-yaml": "^3.13.1",
     "jszip": "^3.1.3",
     "jszip-utils": "^0.0.2",
     "katex": "^0.10.0",
@@ -105,8 +106,9 @@
     "mermaid": "^8.5.2",
     "mersenne-twister": "1.1.0",
     "minimatch": "^3.0.4",
-    "monaco-editor": "^0.18.1",
-    "monaco-editor-webpack-plugin": "^1.7.0",
+    "monaco-editor": "^0.20.0",
+    "monaco-editor-webpack-plugin": "^1.9.0",
+    "monaco-yaml": "^2.4.0",
     "mousetrap": "^1.4.6",
     "pdfjs-dist": "^2.0.943",
     "pikaday": "^1.8.0",
@@ -220,7 +222,7 @@
   },
   "resolutions": {
     "chokidar": "^3.4.0",
-    "monaco-editor": "0.18.1",
+    "monaco-editor": "0.20.0",
     "vue-jest/ts-jest": "24.0.0"
   },
   "engines": {
diff --git a/qa/qa/specs/features/api/3_create/repository/changing_repository_storage_spec.rb b/qa/qa/specs/features/api/3_create/repository/changing_repository_storage_spec.rb
index 4f00a16d673..5695cbbac4e 100644
--- a/qa/qa/specs/features/api/3_create/repository/changing_repository_storage_spec.rb
+++ b/qa/qa/specs/features/api/3_create/repository/changing_repository_storage_spec.rb
@@ -38,7 +38,7 @@ module QA
 
       # Note: This test doesn't have the :orchestrated tag because it runs in the Test::Integration::Praefect
       # scenario with other tests that aren't considered orchestrated.
-      context 'when moving from Gitaly to Gitaly Cluster', :requires_praefect do
+      context 'when moving from Gitaly to Gitaly Cluster', :requires_praefect, quarantine: { issue: 'https://gitlab.com/gitlab-org/gitlab/-/issues/227127', type: :investigating } do
         let(:project) do
           Resource::Project.fabricate_via_api! do |project|
             project.name = 'repo-storage-move'
diff --git a/spec/controllers/groups_controller_spec.rb b/spec/controllers/groups_controller_spec.rb
index b655fa7ee62..88d0d96498e 100644
--- a/spec/controllers/groups_controller_spec.rb
+++ b/spec/controllers/groups_controller_spec.rb
@@ -941,7 +941,7 @@ RSpec.describe GroupsController do
 
         allow(Gitlab::ApplicationRateLimiter)
           .to receive(:increment)
-          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_export][:threshold] + 1)
+          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_export][:threshold].call + 1)
       end
 
       it 'throttles the endpoint' do
@@ -1015,7 +1015,7 @@ RSpec.describe GroupsController do
 
         allow(Gitlab::ApplicationRateLimiter)
           .to receive(:increment)
-          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_download_export][:threshold] + 1)
+          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_download_export][:threshold].call + 1)
       end
 
       it 'throttles the endpoint' do
diff --git a/spec/controllers/projects_controller_spec.rb b/spec/controllers/projects_controller_spec.rb
index d88a1e3666b..0f085b68de4 100644
--- a/spec/controllers/projects_controller_spec.rb
+++ b/spec/controllers/projects_controller_spec.rb
@@ -1197,7 +1197,7 @@ RSpec.describe ProjectsController do
       before do
         allow(Gitlab::ApplicationRateLimiter)
           .to receive(:increment)
-          .and_return(Gitlab::ApplicationRateLimiter.rate_limits["project_#{action}".to_sym][:threshold] + 1)
+          .and_return(Gitlab::ApplicationRateLimiter.rate_limits["project_#{action}".to_sym][:threshold].call + 1)
       end
 
       it 'prevents requesting project export' do
@@ -1264,7 +1264,7 @@ RSpec.describe ProjectsController do
           before do
             allow(Gitlab::ApplicationRateLimiter)
               .to receive(:increment)
-              .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:project_download_export][:threshold] + 1)
+              .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:project_download_export][:threshold].call + 1)
           end
 
           it 'prevents requesting project export' do
diff --git a/spec/frontend/__mocks__/monaco-editor/index.js b/spec/frontend/__mocks__/monaco-editor/index.js
index 7c53cfb5174..b9602d69b74 100644
--- a/spec/frontend/__mocks__/monaco-editor/index.js
+++ b/spec/frontend/__mocks__/monaco-editor/index.js
@@ -8,9 +8,11 @@ import 'monaco-editor/esm/vs/language/css/monaco.contribution';
 import 'monaco-editor/esm/vs/language/json/monaco.contribution';
 import 'monaco-editor/esm/vs/language/html/monaco.contribution';
 import 'monaco-editor/esm/vs/basic-languages/monaco.contribution';
+import 'monaco-yaml/esm/monaco.contribution';
 
 // This language starts trying to spin up web workers which obviously breaks in Jest environment
 jest.mock('monaco-editor/esm/vs/language/typescript/tsMode');
+jest.mock('monaco-yaml/esm/yamlMode');
 
 export * from 'monaco-editor/esm/vs/editor/editor.api';
 export default global.monaco;
diff --git a/spec/frontend/ide/components/repo_editor_spec.js b/spec/frontend/ide/components/repo_editor_spec.js
index a77edfc3fa8..a4336b8f2eb 100644
--- a/spec/frontend/ide/components/repo_editor_spec.js
+++ b/spec/frontend/ide/components/repo_editor_spec.js
@@ -637,6 +637,8 @@ describe('RepoEditor', () => {
           // set cursor to line 2, column 1
           vm.editor.instance.setSelection(new Range(2, 1, 2, 1));
           vm.editor.instance.focus();
+
+          jest.spyOn(vm.editor.instance, 'hasTextFocus').mockReturnValue(true);
         });
       });
 
diff --git a/spec/frontend/ide/lib/editor_spec.js b/spec/frontend/ide/lib/editor_spec.js
index f5815771cdf..0952facf3ee 100644
--- a/spec/frontend/ide/lib/editor_spec.js
+++ b/spec/frontend/ide/lib/editor_spec.js
@@ -199,6 +199,14 @@ describe('Multi-file editor library', () => {
     });
   });
 
+  describe('schemas', () => {
+    it('registers custom schemas defined with Monaco', () => {
+      expect(monacoLanguages.yaml.yamlDefaults.diagnosticsOptions).toMatchObject({
+        schemas: [{ fileMatch: ['*.gitlab-ci.yml'] }],
+      });
+    });
+  });
+
   describe('replaceSelectedText', () => {
     let model;
     let editor;
diff --git a/spec/frontend/ide/utils_spec.js b/spec/frontend/ide/utils_spec.js
index 15baeca7f36..b6de576a0a4 100644
--- a/spec/frontend/ide/utils_spec.js
+++ b/spec/frontend/ide/utils_spec.js
@@ -1,6 +1,7 @@
 import {
   isTextFile,
   registerLanguages,
+  registerSchemas,
   trimPathComponents,
   insertFinalNewline,
   trimTrailingWhitespace,
@@ -158,6 +159,57 @@ describe('WebIDE utils', () => {
     });
   });
 
+  describe('registerSchemas', () => {
+    let options;
+
+    beforeEach(() => {
+      options = {
+        validate: true,
+        enableSchemaRequest: true,
+        hover: true,
+        completion: true,
+        schemas: [
+          {
+            uri: 'http://myserver/foo-schema.json',
+            fileMatch: ['*'],
+            schema: {
+              id: 'http://myserver/foo-schema.json',
+              type: 'object',
+              properties: {
+                p1: { enum: ['v1', 'v2'] },
+                p2: { $ref: 'http://myserver/bar-schema.json' },
+              },
+            },
+          },
+          {
+            uri: 'http://myserver/bar-schema.json',
+            schema: {
+              id: 'http://myserver/bar-schema.json',
+              type: 'object',
+              properties: { q1: { enum: ['x1', 'x2'] } },
+            },
+          },
+        ],
+      };
+
+      jest.spyOn(languages.json.jsonDefaults, 'setDiagnosticsOptions');
+      jest.spyOn(languages.yaml.yamlDefaults, 'setDiagnosticsOptions');
+    });
+
+    it.each`
+      language  | defaultsObj
+      ${'json'} | ${languages.json.jsonDefaults}
+      ${'yaml'} | ${languages.yaml.yamlDefaults}
+    `(
+      'registers the given schemas with monaco for lang: $language',
+      ({ language, defaultsObj }) => {
+        registerSchemas({ language, options });
+
+        expect(defaultsObj.setDiagnosticsOptions).toHaveBeenCalledWith(options);
+      },
+    );
+  });
+
   describe('trimTrailingWhitespace', () => {
     it.each`
       input                                                            | output
diff --git a/spec/frontend/issuables_list/components/issuable_list_root_app_spec.js b/spec/frontend/issuables_list/components/issuable_list_root_app_spec.js
index 899010bdb0f..ac4922b050f 100644
--- a/spec/frontend/issuables_list/components/issuable_list_root_app_spec.js
+++ b/spec/frontend/issuables_list/components/issuable_list_root_app_spec.js
@@ -33,6 +33,7 @@ describe('IssuableListRootApp', () => {
           isFinishedAlertShowing,
           isInProgressAlertShowing,
           jiraImport: {
+            importedIssuesCount: 1,
             isInProgress,
             isFinished,
             label,
@@ -77,7 +78,7 @@ describe('IssuableListRootApp', () => {
 
     describe('shows an alert', () => {
       it('tells the user the Jira import has finished', () => {
-        expect(findAlert().text()).toBe('Issues successfully imported with the label');
+        expect(findAlert().text()).toBe('1 issue successfully imported with the label');
       });
 
       it('contains the label title associated with the Jira import', () => {
diff --git a/spec/frontend/vue_mr_widget/components/states/mr_widget_squash_before_merge_spec.js b/spec/frontend/vue_mr_widget/components/states/mr_widget_squash_before_merge_spec.js
index 5f5043285b8..1542b0939aa 100644
--- a/spec/frontend/vue_mr_widget/components/states/mr_widget_squash_before_merge_spec.js
+++ b/spec/frontend/vue_mr_widget/components/states/mr_widget_squash_before_merge_spec.js
@@ -19,6 +19,8 @@ describe('Squash before merge component', () => {
     wrapper.destroy();
   });
 
+  const findLabel = () => wrapper.find('[data-testid="squashLabel"]');
+
   describe('checkbox', () => {
     const findCheckbox = () => wrapper.find('.js-squash-checkbox');
 
@@ -64,8 +66,6 @@ describe('Squash before merge component', () => {
   });
 
   describe('label', () => {
-    const findLabel = () => wrapper.find('[data-testid="squashLabel"]');
-
     describe.each`
       isDisabled | expectation
       ${true}    | ${'grays out text if it is true'}
@@ -84,6 +84,27 @@ describe('Squash before merge component', () => {
     });
   });
 
+  describe('tooltip', () => {
+    const tooltipTitle = () => findLabel().element.dataset.title;
+
+    it('does not render when isDisabled is false', () => {
+      createComponent({
+        value: true,
+        isDisabled: false,
+      });
+      expect(tooltipTitle()).toBeUndefined();
+    });
+
+    it('display message when when isDisabled is true', () => {
+      createComponent({
+        value: true,
+        isDisabled: true,
+      });
+
+      expect(tooltipTitle()).toBe('Required in this project.');
+    });
+  });
+
   describe('about link', () => {
     it('is not rendered if no help path is passed', () => {
       createComponent({
diff --git a/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js b/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js
index 9a5b95b555f..436e1fd6815 100644
--- a/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js
+++ b/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js
@@ -71,7 +71,7 @@ describe('Suggestion Diff component', () => {
 
   it('renders correct tooltip message for apply button', () => {
     createComponent();
-    expect(wrapper.vm.tooltipMessage).toBe('This also resolves the discussion');
+    expect(wrapper.vm.tooltipMessage).toBe('This also resolves this thread');
   });
 
   describe('when apply suggestion is clicked', () => {
@@ -227,11 +227,10 @@ describe('Suggestion Diff component', () => {
       createComponent({ canApply: false });
     });
 
-    it('disables apply suggestion and add to batch buttons', () => {
+    it('disables apply suggestion and hides add to batch button', () => {
       expect(findApplyButton().exists()).toBe(true);
-      expect(findAddToBatchButton().exists()).toBe(true);
+      expect(findAddToBatchButton().exists()).toBe(false);
       expect(findApplyButton().attributes('disabled')).toBe('true');
-      expect(findAddToBatchButton().attributes('disabled')).toBe('true');
     });
 
     it('renders correct tooltip message for apply button', () => {
diff --git a/spec/frontend/vue_shared/components/rich_content_editor/mock_data.js b/spec/frontend/vue_shared/components/rich_content_editor/mock_data.js
index 629105dd085..e7b72257735 100644
--- a/spec/frontend/vue_shared/components/rich_content_editor/mock_data.js
+++ b/spec/frontend/vue_shared/components/rich_content_editor/mock_data.js
@@ -6,25 +6,6 @@ const buildMockTextNode = literal => {
   };
 };
 
-const buildMockTextNodeWithAdjacentInlineCode = isForward => {
-  const direction = isForward ? 'next' : 'prev';
-  const literalOpen = '[';
-  const literalClose = ' file]: https://file.com/file.md';
-  return {
-    literal: isForward ? literalOpen : literalClose,
-    type: 'text',
-    [direction]: {
-      literal: 'raw',
-      tickCount: 1,
-      type: 'code',
-      [direction]: {
-        literal: isForward ? literalClose : literalOpen,
-        [direction]: null,
-      },
-    },
-  };
-};
-
 const buildMockListNode = literal => {
   return {
     firstChild: {
@@ -38,15 +19,23 @@ const buildMockListNode = literal => {
   };
 };
 
+export const buildMockParagraphNode = literal => {
+  return {
+    firstChild: buildMockTextNode(literal),
+    type: 'paragraph',
+  };
+};
+
 export const kramdownListNode = buildMockListNode('TOC');
 export const normalListNode = buildMockListNode('Just another bullet point');
 
 export const kramdownTextNode = buildMockTextNode('{:toc}');
 export const identifierTextNode = buildMockTextNode('[Some text]: https://link.com');
-export const identifierInlineCodeTextEnteringNode = buildMockTextNodeWithAdjacentInlineCode(true);
-export const identifierInlineCodeTextExitingNode = buildMockTextNodeWithAdjacentInlineCode(false);
 export const embeddedRubyTextNode = buildMockTextNode('<%= partial("some/path") %>');
 export const normalTextNode = buildMockTextNode('This is just normal text.');
+export const normalParagraphNode = buildMockParagraphNode(
+  'This is just normal paragraph. It has multiple sentences.',
+);
 
 const uneditableOpenToken = {
   type: 'openTag',
diff --git a/spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph_spec.js b/spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph_spec.js
new file mode 100644
index 00000000000..a11f9579c4a
--- /dev/null
+++ b/spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph_spec.js
@@ -0,0 +1,55 @@
+import renderer from '~/vue_shared/components/rich_content_editor/services/renderers/render_identifier_paragraph';
+import {
+  buildUneditableOpenTokens,
+  buildUneditableCloseToken,
+} from '~/vue_shared/components/rich_content_editor/services/renderers/build_uneditable_token';
+
+import { buildMockParagraphNode, normalParagraphNode } from '../../mock_data';
+
+const identifierParagraphNode = buildMockParagraphNode(
+  `[another-identifier]: https://example.com "This example has a title" [identifier]: http://example1.com [this link]: http://example2.com`,
+);
+
+describe('Render Identifier Paragraph renderer', () => {
+  describe('canRender', () => {
+    it.each`
+      node                       | paragraph                                          | target
+      ${identifierParagraphNode} | ${'[Some text]: https://link.com'}                 | ${true}
+      ${normalParagraphNode}     | ${'Normal non-identifier text. Another sentence.'} | ${false}
+    `(
+      'should return $target when the $node matches $paragraph syntax',
+      ({ node, paragraph, target }) => {
+        const context = {
+          entering: true,
+          getChildrenText: jest.fn().mockReturnValueOnce(paragraph),
+        };
+
+        expect(renderer.canRender(node, context)).toBe(target);
+      },
+    );
+  });
+
+  describe('render', () => {
+    let origin;
+
+    beforeEach(() => {
+      origin = jest.fn();
+    });
+
+    it('should return uneditable open tokens when entering', () => {
+      const context = { entering: true, origin };
+
+      expect(renderer.render(identifierParagraphNode, context)).toStrictEqual(
+        buildUneditableOpenTokens(origin()),
+      );
+    });
+
+    it('should return an uneditable close tokens when exiting', () => {
+      const context = { entering: false, origin };
+
+      expect(renderer.render(identifierParagraphNode, context)).toStrictEqual(
+        buildUneditableCloseToken(origin()),
+      );
+    });
+  });
+});
diff --git a/spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text_spec.js b/spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text_spec.js
deleted file mode 100644
index 1a44ccbf0a8..00000000000
--- a/spec/frontend/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text_spec.js
+++ /dev/null
@@ -1,61 +0,0 @@
-import renderer from '~/vue_shared/components/rich_content_editor/services/renderers/render_identifier_text';
-import {
-  buildUneditableOpenTokens,
-  buildUneditableCloseTokens,
-  buildUneditableTokens,
-} from '~/vue_shared/components/rich_content_editor/services/renderers/build_uneditable_token';
-
-import {
-  identifierTextNode,
-  identifierInlineCodeTextEnteringNode,
-  identifierInlineCodeTextExitingNode,
-  normalTextNode,
-} from '../../mock_data';
-
-describe('Render Identifier Text renderer', () => {
-  describe('canRender', () => {
-    it('should return true when the argument `literal` has identifier syntax', () => {
-      expect(renderer.canRender(identifierTextNode)).toBe(true);
-    });
-
-    it('should return true when the argument `literal` has identifier syntax and forward adjacent inline code', () => {
-      expect(renderer.canRender(identifierInlineCodeTextEnteringNode)).toBe(true);
-    });
-
-    it('should return true when the argument `literal` has identifier syntax and backward adjacent inline code', () => {
-      expect(renderer.canRender(identifierInlineCodeTextExitingNode)).toBe(true);
-    });
-
-    it('should return false when the argument `literal` lacks identifier syntax', () => {
-      expect(renderer.canRender(normalTextNode)).toBe(false);
-    });
-  });
-
-  describe('render', () => {
-    const origin = jest.fn();
-
-    it('should return uneditable tokens for basic identifier syntax', () => {
-      const context = { origin };
-
-      expect(renderer.render(identifierTextNode, context)).toStrictEqual(
-        buildUneditableTokens(origin()),
-      );
-    });
-
-    it('should return uneditable open tokens for non-basic inline code identifier syntax when entering', () => {
-      const context = { origin };
-
-      expect(renderer.render(identifierInlineCodeTextEnteringNode, context)).toStrictEqual(
-        buildUneditableOpenTokens(origin()),
-      );
-    });
-
-    it('should return uneditable close tokens for non-basic inline code identifier syntax when exiting', () => {
-      const context = { origin };
-
-      expect(renderer.render(identifierInlineCodeTextExitingNode, context)).toStrictEqual(
-        buildUneditableCloseTokens(origin()),
-      );
-    });
-  });
-});
diff --git a/spec/lib/gitlab/background_migration/add_merge_request_diff_commits_count_spec.rb b/spec/lib/gitlab/background_migration/add_merge_request_diff_commits_count_spec.rb
index 589f6a322d7..1e72b249c19 100644
--- a/spec/lib/gitlab/background_migration/add_merge_request_diff_commits_count_spec.rb
+++ b/spec/lib/gitlab/background_migration/add_merge_request_diff_commits_count_spec.rb
@@ -2,13 +2,15 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::AddMergeRequestDiffCommitsCount, schema: 20180105212544 do
+RSpec.describe Gitlab::BackgroundMigration::AddMergeRequestDiffCommitsCount do
+  let(:namespaces_table) { table(:namespaces) }
   let(:projects_table) { table(:projects) }
   let(:merge_requests_table) { table(:merge_requests) }
   let(:merge_request_diffs_table) { table(:merge_request_diffs) }
   let(:merge_request_diff_commits_table) { table(:merge_request_diff_commits) }
 
-  let(:project) { projects_table.create!(name: 'gitlab', path: 'gitlab-org/gitlab-ce') }
+  let(:namespace) { namespaces_table.create!(name: 'gitlab-org', path: 'gitlab-org') }
+  let(:project) { projects_table.create!(name: 'gitlab', path: 'gitlab-org/gitlab-ce', namespace_id: namespace.id) }
   let(:merge_request) do
     merge_requests_table.create!(target_project_id: project.id,
                                  target_branch: 'master',
diff --git a/spec/lib/gitlab/background_migration/archive_legacy_traces_spec.rb b/spec/lib/gitlab/background_migration/archive_legacy_traces_spec.rb
index b08a118d4c3..7991ad69007 100644
--- a/spec/lib/gitlab/background_migration/archive_legacy_traces_spec.rb
+++ b/spec/lib/gitlab/background_migration/archive_legacy_traces_spec.rb
@@ -2,7 +2,7 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::ArchiveLegacyTraces, schema: 20180529152628 do
+RSpec.describe Gitlab::BackgroundMigration::ArchiveLegacyTraces do
   include TraceHelpers
 
   let(:namespaces) { table(:namespaces) }
diff --git a/spec/lib/gitlab/background_migration/backfill_hashed_project_repositories_spec.rb b/spec/lib/gitlab/background_migration/backfill_hashed_project_repositories_spec.rb
index 965835ec84b..79b344ea6fa 100644
--- a/spec/lib/gitlab/background_migration/backfill_hashed_project_repositories_spec.rb
+++ b/spec/lib/gitlab/background_migration/backfill_hashed_project_repositories_spec.rb
@@ -2,6 +2,6 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::BackfillHashedProjectRepositories, schema: 20181130102132 do
+RSpec.describe Gitlab::BackgroundMigration::BackfillHashedProjectRepositories do
   it_behaves_like 'backfill migration for project repositories', :hashed
 end
diff --git a/spec/lib/gitlab/background_migration/backfill_legacy_project_repositories_spec.rb b/spec/lib/gitlab/background_migration/backfill_legacy_project_repositories_spec.rb
index 47514f95b85..c4013d002b2 100644
--- a/spec/lib/gitlab/background_migration/backfill_legacy_project_repositories_spec.rb
+++ b/spec/lib/gitlab/background_migration/backfill_legacy_project_repositories_spec.rb
@@ -2,6 +2,6 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::BackfillLegacyProjectRepositories, schema: 20181212171634 do
+RSpec.describe Gitlab::BackgroundMigration::BackfillLegacyProjectRepositories do
   it_behaves_like 'backfill migration for project repositories', :legacy
 end
diff --git a/spec/lib/gitlab/background_migration/backfill_project_fullpath_in_repo_config_spec.rb b/spec/lib/gitlab/background_migration/backfill_project_fullpath_in_repo_config_spec.rb
index 5f76da66545..1b2e1ed0c1a 100644
--- a/spec/lib/gitlab/background_migration/backfill_project_fullpath_in_repo_config_spec.rb
+++ b/spec/lib/gitlab/background_migration/backfill_project_fullpath_in_repo_config_spec.rb
@@ -2,7 +2,7 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::BackfillProjectFullpathInRepoConfig, schema: 20181010133639 do
+RSpec.describe Gitlab::BackgroundMigration::BackfillProjectFullpathInRepoConfig do
   let(:namespaces) { table(:namespaces) }
   let(:projects) { table(:projects) }
   let(:group) { namespaces.create!(name: 'foo', path: 'foo') }
diff --git a/spec/lib/gitlab/background_migration/backfill_snippet_repositories_spec.rb b/spec/lib/gitlab/background_migration/backfill_snippet_repositories_spec.rb
index dcf0229bce9..6d416c48530 100644
--- a/spec/lib/gitlab/background_migration/backfill_snippet_repositories_spec.rb
+++ b/spec/lib/gitlab/background_migration/backfill_snippet_repositories_spec.rb
@@ -9,7 +9,6 @@ RSpec.describe Gitlab::BackgroundMigration::BackfillSnippetRepositories, :migrat
   let(:snippet_repositories) { table(:snippet_repositories) }
 
   let(:user_state) { 'active' }
-  let(:ghost) { false }
   let(:user_type) { nil }
   let(:user_name) { 'Test' }
 
@@ -20,7 +19,6 @@ RSpec.describe Gitlab::BackgroundMigration::BackfillSnippetRepositories, :migrat
                  username: 'test',
                  name: user_name,
                  state: user_state,
-                 ghost: ghost,
                  last_activity_on: 1.minute.ago,
                  user_type: user_type,
                  confirmed_at: 1.day.ago)
@@ -113,8 +111,7 @@ RSpec.describe Gitlab::BackgroundMigration::BackfillSnippetRepositories, :migrat
         end
 
         context 'when user is a ghost' do
-          let(:ghost) { true }
-          let(:user_type) { 'ghost' }
+          let(:user_type) { HasUserType::USER_TYPES[:ghost] }
 
           it_behaves_like 'migration_bot user commits files'
         end
@@ -255,7 +252,6 @@ RSpec.describe Gitlab::BackgroundMigration::BackfillSnippetRepositories, :migrat
                      username: 'test2',
                      name: 'Test2',
                      state: user_state,
-                     ghost: ghost,
                      last_activity_on: 1.minute.ago,
                      user_type: user_type,
                      confirmed_at: 1.day.ago)
diff --git a/spec/lib/gitlab/background_migration/digest_column_spec.rb b/spec/lib/gitlab/background_migration/digest_column_spec.rb
deleted file mode 100644
index a0f904df0d6..00000000000
--- a/spec/lib/gitlab/background_migration/digest_column_spec.rb
+++ /dev/null
@@ -1,46 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-
-RSpec.describe Gitlab::BackgroundMigration::DigestColumn, schema: 20180913142237 do
-  let(:personal_access_tokens) { table(:personal_access_tokens) }
-  let(:users) { table(:users) }
-
-  subject { described_class.new }
-
-  describe '#perform' do
-    context 'token is not yet hashed' do
-      before do
-        users.create(id: 1, email: 'user@example.com', projects_limit: 10)
-        personal_access_tokens.create!(id: 1, user_id: 1, name: 'pat-01', token: 'token-01')
-      end
-
-      it 'saves token digest' do
-        expect { subject.perform(PersonalAccessToken, :token, :token_digest, 1, 2) }.to(
-          change { PersonalAccessToken.find(1).token_digest }.from(nil).to(Gitlab::CryptoHelper.sha256('token-01')))
-      end
-
-      it 'erases token' do
-        expect { subject.perform(PersonalAccessToken, :token, :token_digest, 1, 2) }.to(
-          change { PersonalAccessToken.find(1).read_attribute(:token) }.from('token-01').to(nil))
-      end
-    end
-
-    context 'token is already hashed' do
-      before do
-        users.create(id: 1, email: 'user@example.com', projects_limit: 10)
-        personal_access_tokens.create!(id: 1, user_id: 1, name: 'pat-01', token_digest: 'token-digest-01')
-      end
-
-      it 'does not change existing token digest' do
-        expect { subject.perform(PersonalAccessToken, :token, :token_digest, 1, 2) }.not_to(
-          change { PersonalAccessToken.find(1).token_digest })
-      end
-
-      it 'leaves token empty' do
-        expect { subject.perform(PersonalAccessToken, :token, :token_digest, 1, 2) }.not_to(
-          change { PersonalAccessToken.find(1).read_attribute(:token) }.from(nil))
-      end
-    end
-  end
-end
diff --git a/spec/lib/gitlab/background_migration/encrypt_columns_spec.rb b/spec/lib/gitlab/background_migration/encrypt_columns_spec.rb
deleted file mode 100644
index 36a1e4c8b9c..00000000000
--- a/spec/lib/gitlab/background_migration/encrypt_columns_spec.rb
+++ /dev/null
@@ -1,96 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-
-RSpec.describe Gitlab::BackgroundMigration::EncryptColumns, schema: 20180910115836 do
-  let(:model) { Gitlab::BackgroundMigration::Models::EncryptColumns::WebHook }
-  let(:web_hooks) { table(:web_hooks) }
-
-  let(:plaintext_attrs) do
-    {
-      'encrypted_token' => nil,
-      'encrypted_url' => nil,
-      'token' =>  'secret',
-      'url' => 'http://example.com?access_token=secret'
-    }
-  end
-
-  let(:encrypted_attrs) do
-    {
-      'encrypted_token' => be_present,
-      'encrypted_url' => be_present,
-      'token' => nil,
-      'url' => nil
-    }
-  end
-
-  describe '#perform' do
-    it 'encrypts columns for the specified range' do
-      hooks = web_hooks.create([plaintext_attrs] * 5).sort_by(&:id)
-
-      # Encrypt all but the first and last rows
-      subject.perform(model, [:token, :url], hooks[1].id, hooks[3].id)
-
-      hooks = web_hooks.where(id: hooks.map(&:id)).order(:id)
-
-      aggregate_failures do
-        expect(hooks[0]).to have_attributes(plaintext_attrs)
-        expect(hooks[1]).to have_attributes(encrypted_attrs)
-        expect(hooks[2]).to have_attributes(encrypted_attrs)
-        expect(hooks[3]).to have_attributes(encrypted_attrs)
-        expect(hooks[4]).to have_attributes(plaintext_attrs)
-      end
-    end
-
-    it 'acquires an exclusive lock for the update' do
-      relation = double('relation', each: nil)
-
-      expect(model).to receive(:where) { relation }
-      expect(relation).to receive(:lock) { relation }
-
-      subject.perform(model, [:token, :url], 1, 1)
-    end
-
-    it 'skips already-encrypted columns' do
-      values = {
-        'encrypted_token' => 'known encrypted token',
-        'encrypted_url' => 'known encrypted url',
-        'token' => 'token',
-        'url' => 'url'
-      }
-
-      hook = web_hooks.create(values)
-
-      subject.perform(model, [:token, :url], hook.id, hook.id)
-
-      hook.reload
-
-      expect(hook).to have_attributes(values)
-    end
-
-    it 'reloads the model column information' do
-      expect(model).to receive(:reset_column_information).and_call_original
-      expect(model).to receive(:define_attribute_methods).and_call_original
-
-      subject.perform(model, [:token, :url], 1, 1)
-    end
-
-    it 'fails if a source column is not present' do
-      columns = model.columns.reject { |c| c.name == 'url' }
-      allow(model).to receive(:columns) { columns }
-
-      expect do
-        subject.perform(model, [:token, :url], 1, 1)
-      end.to raise_error(/source column: url is missing/)
-    end
-
-    it 'fails if a destination column is not present' do
-      columns = model.columns.reject { |c| c.name == 'encrypted_url' }
-      allow(model).to receive(:columns) { columns }
-
-      expect do
-        subject.perform(model, [:token, :url], 1, 1)
-      end.to raise_error(/destination column: encrypted_url is missing/)
-    end
-  end
-end
diff --git a/spec/lib/gitlab/background_migration/encrypt_runners_tokens_spec.rb b/spec/lib/gitlab/background_migration/encrypt_runners_tokens_spec.rb
deleted file mode 100644
index 8a2c2414edc..00000000000
--- a/spec/lib/gitlab/background_migration/encrypt_runners_tokens_spec.rb
+++ /dev/null
@@ -1,79 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-
-RSpec.describe Gitlab::BackgroundMigration::EncryptRunnersTokens, schema: 20181121111200 do
-  let(:settings) { table(:application_settings) }
-  let(:namespaces) { table(:namespaces) }
-  let(:projects) { table(:projects) }
-  let(:runners) { table(:ci_runners) }
-
-  context 'when migrating application settings' do
-    before do
-      settings.create!(id: 1, runners_registration_token: 'plain-text-token1')
-    end
-
-    it 'migrates runners registration tokens' do
-      migrate!(:settings, 1, 1)
-
-      encrypted_token = settings.first.runners_registration_token_encrypted
-      decrypted_token = ::Gitlab::CryptoHelper.aes256_gcm_decrypt(encrypted_token)
-
-      expect(decrypted_token).to eq 'plain-text-token1'
-      expect(settings.first.runners_registration_token).to eq 'plain-text-token1'
-    end
-  end
-
-  context 'when migrating namespaces' do
-    before do
-      namespaces.create!(id: 11, name: 'gitlab', path: 'gitlab-org', runners_token: 'my-token1')
-      namespaces.create!(id: 12, name: 'gitlab', path: 'gitlab-org', runners_token: 'my-token2')
-      namespaces.create!(id: 22, name: 'gitlab', path: 'gitlab-org', runners_token: 'my-token3')
-    end
-
-    it 'migrates runners registration tokens' do
-      migrate!(:namespace, 11, 22)
-
-      expect(namespaces.all.reload).to all(
-        have_attributes(runners_token: be_a(String), runners_token_encrypted: be_a(String))
-      )
-    end
-  end
-
-  context 'when migrating projects' do
-    before do
-      namespaces.create!(id: 11, name: 'gitlab', path: 'gitlab-org')
-      projects.create!(id: 111, namespace_id: 11, name: 'gitlab', path: 'gitlab-ce', runners_token: 'my-token1')
-      projects.create!(id: 114, namespace_id: 11, name: 'gitlab', path: 'gitlab-ce', runners_token: 'my-token2')
-      projects.create!(id: 116, namespace_id: 11, name: 'gitlab', path: 'gitlab-ce', runners_token: 'my-token3')
-    end
-
-    it 'migrates runners registration tokens' do
-      migrate!(:project, 111, 116)
-
-      expect(projects.all.reload).to all(
-        have_attributes(runners_token: be_a(String), runners_token_encrypted: be_a(String))
-      )
-    end
-  end
-
-  context 'when migrating runners' do
-    before do
-      runners.create!(id: 201, runner_type: 1, token: 'plain-text-token1')
-      runners.create!(id: 202, runner_type: 1, token: 'plain-text-token2')
-      runners.create!(id: 203, runner_type: 1, token: 'plain-text-token3')
-    end
-
-    it 'migrates runners communication tokens' do
-      migrate!(:runner, 201, 203)
-
-      expect(runners.all.reload).to all(
-        have_attributes(token: be_a(String), token_encrypted: be_a(String))
-      )
-    end
-  end
-
-  def migrate!(model, from, to)
-    subject.perform(model, from, to)
-  end
-end
diff --git a/spec/lib/gitlab/background_migration/fix_cross_project_label_links_spec.rb b/spec/lib/gitlab/background_migration/fix_cross_project_label_links_spec.rb
index cb824880621..8e3ace083fc 100644
--- a/spec/lib/gitlab/background_migration/fix_cross_project_label_links_spec.rb
+++ b/spec/lib/gitlab/background_migration/fix_cross_project_label_links_spec.rb
@@ -2,7 +2,7 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::FixCrossProjectLabelLinks, schema: 20180702120647 do
+RSpec.describe Gitlab::BackgroundMigration::FixCrossProjectLabelLinks do
   let(:namespaces_table) { table(:namespaces) }
   let(:projects_table) { table(:projects) }
   let(:issues_table) { table(:issues) }
diff --git a/spec/lib/gitlab/background_migration/migrate_build_stage_spec.rb b/spec/lib/gitlab/background_migration/migrate_build_stage_spec.rb
index 2373e8aad48..78a4ec34cf2 100644
--- a/spec/lib/gitlab/background_migration/migrate_build_stage_spec.rb
+++ b/spec/lib/gitlab/background_migration/migrate_build_stage_spec.rb
@@ -2,7 +2,8 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::MigrateBuildStage, schema: 20180212101928 do
+RSpec.describe Gitlab::BackgroundMigration::MigrateBuildStage do
+  let(:namespaces) { table(:namespaces) }
   let(:projects) { table(:projects) }
   let(:pipelines) { table(:ci_pipelines) }
   let(:stages) { table(:ci_stages) }
@@ -22,7 +23,8 @@ RSpec.describe Gitlab::BackgroundMigration::MigrateBuildStage, schema: 201802121
   end
 
   before do
-    projects.create!(id: 123, name: 'gitlab', path: 'gitlab-ce')
+    namespace = namespaces.create!(name: 'gitlab-org', path: 'gitlab-org')
+    projects.create!(id: 123, name: 'gitlab', path: 'gitlab-ce', namespace_id: namespace.id)
     pipelines.create!(id: 1, project_id: 123, ref: 'master', sha: 'adf43c3a')
 
     jobs.create!(id: 1, commit_id: 1, project_id: 123,
diff --git a/spec/lib/gitlab/background_migration/migrate_legacy_artifacts_spec.rb b/spec/lib/gitlab/background_migration/migrate_legacy_artifacts_spec.rb
index c4e33259e13..08f2b2a043e 100644
--- a/spec/lib/gitlab/background_migration/migrate_legacy_artifacts_spec.rb
+++ b/spec/lib/gitlab/background_migration/migrate_legacy_artifacts_spec.rb
@@ -2,7 +2,7 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::MigrateLegacyArtifacts, schema: 20180816161409 do
+RSpec.describe Gitlab::BackgroundMigration::MigrateLegacyArtifacts do
   let(:namespaces) { table(:namespaces) }
   let(:projects) { table(:projects) }
   let(:pipelines) { table(:ci_pipelines) }
diff --git a/spec/lib/gitlab/background_migration/migrate_stage_index_spec.rb b/spec/lib/gitlab/background_migration/migrate_stage_index_spec.rb
index abc5c312455..81874ff7982 100644
--- a/spec/lib/gitlab/background_migration/migrate_stage_index_spec.rb
+++ b/spec/lib/gitlab/background_migration/migrate_stage_index_spec.rb
@@ -2,35 +2,33 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::MigrateStageIndex, schema: 20180420080616 do
+RSpec.describe Gitlab::BackgroundMigration::MigrateStageIndex do
   let(:namespaces) { table(:namespaces) }
   let(:projects) { table(:projects) }
   let(:pipelines) { table(:ci_pipelines) }
   let(:stages) { table(:ci_stages) }
   let(:jobs) { table(:ci_builds) }
+  let(:namespace) { namespaces.create(name: 'gitlab-org', path: 'gitlab-org') }
+  let(:project) { projects.create!(namespace_id: namespace.id, name: 'gitlab', path: 'gitlab') }
+  let(:pipeline) { pipelines.create!(project_id: project.id, ref: 'master', sha: 'adf43c3a') }
+  let(:stage1) { stages.create(project_id: project.id, pipeline_id: pipeline.id, name: 'build') }
+  let(:stage2) { stages.create(project_id: project.id, pipeline_id: pipeline.id, name: 'test') }
 
   before do
-    namespaces.create(id: 10, name: 'gitlab-org', path: 'gitlab-org')
-    projects.create!(id: 11, namespace_id: 10, name: 'gitlab', path: 'gitlab')
-    pipelines.create!(id: 12, project_id: 11, ref: 'master', sha: 'adf43c3a')
-
-    stages.create(id: 100, project_id: 11, pipeline_id: 12, name: 'build')
-    stages.create(id: 101, project_id: 11, pipeline_id: 12, name: 'test')
-
-    jobs.create!(id: 121, commit_id: 12, project_id: 11,
-                 stage_idx: 2, stage_id: 100)
-    jobs.create!(id: 122, commit_id: 12, project_id: 11,
-                 stage_idx: 2, stage_id: 100)
-    jobs.create!(id: 123, commit_id: 12, project_id: 11,
-                 stage_idx: 10, stage_id: 100)
-    jobs.create!(id: 124, commit_id: 12, project_id: 11,
-                 stage_idx: 3, stage_id: 101)
+    jobs.create!(commit_id: pipeline.id, project_id: project.id,
+                 stage_idx: 2, stage_id: stage1.id)
+    jobs.create!(commit_id: pipeline.id, project_id: project.id,
+                 stage_idx: 2, stage_id: stage1.id)
+    jobs.create!(commit_id: pipeline.id, project_id: project.id,
+                 stage_idx: 10, stage_id: stage1.id)
+    jobs.create!(commit_id: pipeline.id, project_id: project.id,
+                 stage_idx: 3, stage_id: stage2.id)
   end
 
   it 'correctly migrates stages indices' do
     expect(stages.all.pluck(:position)).to all(be_nil)
 
-    described_class.new.perform(100, 101)
+    described_class.new.perform(stage1.id, stage2.id)
 
     expect(stages.all.order(:id).pluck(:position)).to eq [2, 3]
   end
diff --git a/spec/lib/gitlab/background_migration/populate_cluster_kubernetes_namespace_table_spec.rb b/spec/lib/gitlab/background_migration/populate_cluster_kubernetes_namespace_table_spec.rb
index 0ffd0a63935..73faca54b52 100644
--- a/spec/lib/gitlab/background_migration/populate_cluster_kubernetes_namespace_table_spec.rb
+++ b/spec/lib/gitlab/background_migration/populate_cluster_kubernetes_namespace_table_spec.rb
@@ -2,7 +2,7 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::PopulateClusterKubernetesNamespaceTable, schema: 20181022173835 do
+RSpec.describe Gitlab::BackgroundMigration::PopulateClusterKubernetesNamespaceTable do
   include MigrationHelpers::ClusterHelpers
 
   let(:migration) { described_class.new }
diff --git a/spec/lib/gitlab/background_migration/populate_untracked_uploads_dependencies/untracked_file_spec.rb b/spec/lib/gitlab/background_migration/populate_untracked_uploads_dependencies/untracked_file_spec.rb
index f1e42f141bf..6a25e8e2784 100644
--- a/spec/lib/gitlab/background_migration/populate_untracked_uploads_dependencies/untracked_file_spec.rb
+++ b/spec/lib/gitlab/background_migration/populate_untracked_uploads_dependencies/untracked_file_spec.rb
@@ -2,8 +2,7 @@
 
 require 'spec_helper'
 
-# Rollback DB to 10.5 (later than this was originally written for) because it still needs to work.
-RSpec.describe Gitlab::BackgroundMigration::PopulateUntrackedUploadsDependencies::UntrackedFile, schema: 20180208183958 do
+RSpec.describe Gitlab::BackgroundMigration::PopulateUntrackedUploadsDependencies::UntrackedFile do
   include MigrationsHelpers::TrackUntrackedUploadsHelpers
 
   let!(:appearances) { table(:appearances) }
diff --git a/spec/lib/gitlab/background_migration/populate_untracked_uploads_spec.rb b/spec/lib/gitlab/background_migration/populate_untracked_uploads_spec.rb
index 176f52e4a80..787cc54e79a 100644
--- a/spec/lib/gitlab/background_migration/populate_untracked_uploads_spec.rb
+++ b/spec/lib/gitlab/background_migration/populate_untracked_uploads_spec.rb
@@ -2,8 +2,7 @@
 
 require 'spec_helper'
 
-# Rollback DB to 10.5 (later than this was originally written for) because it still needs to work.
-RSpec.describe Gitlab::BackgroundMigration::PopulateUntrackedUploads, schema: 20180208183958 do
+RSpec.describe Gitlab::BackgroundMigration::PopulateUntrackedUploads do
   include MigrationsHelpers::TrackUntrackedUploadsHelpers
 
   subject { described_class.new }
diff --git a/spec/lib/gitlab/background_migration/prepare_untracked_uploads_spec.rb b/spec/lib/gitlab/background_migration/prepare_untracked_uploads_spec.rb
index 65acc0a67a3..9b01407dc8b 100644
--- a/spec/lib/gitlab/background_migration/prepare_untracked_uploads_spec.rb
+++ b/spec/lib/gitlab/background_migration/prepare_untracked_uploads_spec.rb
@@ -3,7 +3,7 @@
 require 'spec_helper'
 
 # Rollback DB to 10.5 (later than this was originally written for) because it still needs to work.
-RSpec.describe Gitlab::BackgroundMigration::PrepareUntrackedUploads, schema: 20180208183958 do
+RSpec.describe Gitlab::BackgroundMigration::PrepareUntrackedUploads do
   include MigrationsHelpers::TrackUntrackedUploadsHelpers
 
   let!(:untracked_files_for_uploads) { table(:untracked_files_for_uploads) }
diff --git a/spec/lib/gitlab/background_migration/remove_restricted_todos_spec.rb b/spec/lib/gitlab/background_migration/remove_restricted_todos_spec.rb
index b2fe9bbfcdc..7019d5d4212 100644
--- a/spec/lib/gitlab/background_migration/remove_restricted_todos_spec.rb
+++ b/spec/lib/gitlab/background_migration/remove_restricted_todos_spec.rb
@@ -2,7 +2,8 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::RemoveRestrictedTodos, schema: 20180704204006 do
+RSpec.describe Gitlab::BackgroundMigration::RemoveRestrictedTodos do
+  let(:namespaces)             { table(:namespaces) }
   let(:projects)               { table(:projects) }
   let(:users)                  { table(:users) }
   let(:todos)                  { table(:todos) }
@@ -18,8 +19,9 @@ RSpec.describe Gitlab::BackgroundMigration::RemoveRestrictedTodos, schema: 20180
     users.create(id: 2, email: 'reporter@example.com', projects_limit: 10)
     users.create(id: 3, email: 'guest@example.com', projects_limit: 10)
 
-    projects.create!(id: 1, name: 'project-1', path: 'project-1', visibility_level: 0, namespace_id: 1)
-    projects.create!(id: 2, name: 'project-2', path: 'project-2', visibility_level: 0, namespace_id: 1)
+    namespace = namespaces.create(name: 'gitlab-org', path: 'gitlab-org')
+    projects.create!(id: 1, name: 'project-1', path: 'project-1', visibility_level: 0, namespace_id: namespace.id)
+    projects.create!(id: 2, name: 'project-2', path: 'project-2', visibility_level: 0, namespace_id: namespace.id)
 
     issues.create(id: 1, project_id: 1)
     issues.create(id: 2, project_id: 2)
@@ -92,7 +94,7 @@ RSpec.describe Gitlab::BackgroundMigration::RemoveRestrictedTodos, schema: 20180
 
       context 'when issues are restricted to project members' do
         before do
-          project_features.create(issues_access_level: 10, project_id: 2)
+          project_features.create(issues_access_level: 10, pages_access_level: 10, project_id: 2)
         end
 
         it 'removes non members issue todos' do
@@ -102,7 +104,7 @@ RSpec.describe Gitlab::BackgroundMigration::RemoveRestrictedTodos, schema: 20180
 
       context 'when merge requests are restricted to project members' do
         before do
-          project_features.create(merge_requests_access_level: 10, project_id: 2)
+          project_features.create(merge_requests_access_level: 10, pages_access_level: 10, project_id: 2)
         end
 
         it 'removes non members issue todos' do
@@ -112,7 +114,7 @@ RSpec.describe Gitlab::BackgroundMigration::RemoveRestrictedTodos, schema: 20180
 
       context 'when repository and merge requests are restricted to project members' do
         before do
-          project_features.create(repository_access_level: 10, merge_requests_access_level: 10, project_id: 2)
+          project_features.create(repository_access_level: 10, merge_requests_access_level: 10, pages_access_level: 10, project_id: 2)
         end
 
         it 'removes non members commit and merge requests todos' do
diff --git a/spec/lib/gitlab/background_migration/schedule_calculate_wiki_sizes_spec.rb b/spec/lib/gitlab/background_migration/schedule_calculate_wiki_sizes_spec.rb
deleted file mode 100644
index 4e3c58ef2f2..00000000000
--- a/spec/lib/gitlab/background_migration/schedule_calculate_wiki_sizes_spec.rb
+++ /dev/null
@@ -1,64 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-require Rails.root.join('db', 'post_migrate', '20190527194900_schedule_calculate_wiki_sizes.rb')
-
-RSpec.describe ScheduleCalculateWikiSizes do
-  let(:migration_class) { Gitlab::BackgroundMigration::CalculateWikiSizes }
-  let(:migration_name)  { migration_class.to_s.demodulize }
-
-  let(:namespaces) { table(:namespaces) }
-  let(:projects) { table(:projects) }
-  let(:project_statistics) { table(:project_statistics) }
-
-  context 'when missing wiki sizes exist' do
-    before do
-      namespaces.create!(id: 1, name: 'wiki-migration', path: 'wiki-migration')
-      projects.create!(id: 1, name: 'wiki-project-1', path: 'wiki-project-1', namespace_id: 1)
-      projects.create!(id: 2, name: 'wiki-project-2', path: 'wiki-project-2', namespace_id: 1)
-      projects.create!(id: 3, name: 'wiki-project-3', path: 'wiki-project-3', namespace_id: 1)
-      project_statistics.create!(id: 1, project_id: 1, namespace_id: 1, wiki_size: 1000)
-      project_statistics.create!(id: 2, project_id: 2, namespace_id: 1, wiki_size: nil)
-      project_statistics.create!(id: 3, project_id: 3, namespace_id: 1, wiki_size: nil)
-    end
-
-    it 'schedules a background migration' do
-      Sidekiq::Testing.fake! do
-        Timecop.freeze do
-          migrate!
-
-          expect(migration_name).to be_scheduled_delayed_migration(5.minutes, 2, 3)
-          expect(BackgroundMigrationWorker.jobs.size).to eq 1
-        end
-      end
-    end
-
-    it 'calculates missing wiki sizes', :sidekiq_might_not_need_inline do
-      expect(project_statistics.find_by(id: 2).wiki_size).to be_nil
-      expect(project_statistics.find_by(id: 3).wiki_size).to be_nil
-
-      migrate!
-
-      expect(project_statistics.find_by(id: 2).wiki_size).not_to be_nil
-      expect(project_statistics.find_by(id: 3).wiki_size).not_to be_nil
-    end
-  end
-
-  context 'when missing wiki sizes do not exist' do
-    before do
-      namespaces.create!(id: 1, name: 'wiki-migration', path: 'wiki-migration')
-      projects.create!(id: 1, name: 'wiki-project-1', path: 'wiki-project-1', namespace_id: 1)
-      project_statistics.create!(id: 1, project_id: 1, namespace_id: 1, wiki_size: 1000)
-    end
-
-    it 'does not schedule a background migration' do
-      Sidekiq::Testing.fake! do
-        Timecop.freeze do
-          migrate!
-
-          expect(BackgroundMigrationWorker.jobs.size).to eq 0
-        end
-      end
-    end
-  end
-end
diff --git a/spec/lib/gitlab/background_migration/set_confidential_note_events_on_services_spec.rb b/spec/lib/gitlab/background_migration/set_confidential_note_events_on_services_spec.rb
index c7849cbe52f..364edf3ed2a 100644
--- a/spec/lib/gitlab/background_migration/set_confidential_note_events_on_services_spec.rb
+++ b/spec/lib/gitlab/background_migration/set_confidential_note_events_on_services_spec.rb
@@ -2,7 +2,7 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::SetConfidentialNoteEventsOnServices, schema: 20180122154930 do
+RSpec.describe Gitlab::BackgroundMigration::SetConfidentialNoteEventsOnServices do
   let(:services) { table(:services) }
 
   describe '#perform' do
diff --git a/spec/lib/gitlab/background_migration/set_confidential_note_events_on_webhooks_spec.rb b/spec/lib/gitlab/background_migration/set_confidential_note_events_on_webhooks_spec.rb
index 22679f78d3e..28b06ac3ba3 100644
--- a/spec/lib/gitlab/background_migration/set_confidential_note_events_on_webhooks_spec.rb
+++ b/spec/lib/gitlab/background_migration/set_confidential_note_events_on_webhooks_spec.rb
@@ -2,7 +2,7 @@
 
 require 'spec_helper'
 
-RSpec.describe Gitlab::BackgroundMigration::SetConfidentialNoteEventsOnWebhooks, schema: 20180104131052 do
+RSpec.describe Gitlab::BackgroundMigration::SetConfidentialNoteEventsOnWebhooks do
   let(:web_hooks) { table(:web_hooks) }
 
   describe '#perform' do
diff --git a/spec/lib/gitlab/code_navigation_path_spec.rb b/spec/lib/gitlab/code_navigation_path_spec.rb
index 534c9d59486..4dc864b158d 100644
--- a/spec/lib/gitlab/code_navigation_path_spec.rb
+++ b/spec/lib/gitlab/code_navigation_path_spec.rb
@@ -5,7 +5,7 @@ require 'spec_helper'
 RSpec.describe Gitlab::CodeNavigationPath do
   context 'when there is an artifact with code navigation data' do
     let_it_be(:project) { create(:project, :repository) }
-    let_it_be(:sha) { project.repository.commits('master', limit: 5).last.id }
+    let_it_be(:sha) { project.repository.commits('master', limit: Gitlab::CodeNavigationPath::LATEST_COMMITS_LIMIT).last.id }
     let_it_be(:pipeline) { create(:ci_pipeline, project: project, sha: sha) }
     let_it_be(:job) { create(:ci_build, pipeline: pipeline) }
     let_it_be(:artifact) { create(:ci_job_artifact, :lsif, job: job) }
diff --git a/spec/lib/gitlab/gitaly_client/remote_service_spec.rb b/spec/lib/gitlab/gitaly_client/remote_service_spec.rb
index 6d1f55a3416..b9ef76e1f41 100644
--- a/spec/lib/gitlab/gitaly_client/remote_service_spec.rb
+++ b/spec/lib/gitlab/gitaly_client/remote_service_spec.rb
@@ -73,8 +73,11 @@ RSpec.describe Gitlab::GitalyClient::RemoteService do
   describe '.exists?' do
     context "when the remote doesn't exist" do
       let(:url) { 'https://gitlab.com/gitlab-org/ik-besta-niet-of-ik-word-geplaagd.git' }
+      let(:storage_name) { 'default' }
 
       it 'returns false' do
+        expect(Gitaly::FindRemoteRepositoryRequest).to receive(:new).with(remote: url, storage_name: storage_name).and_call_original
+
         expect(described_class.exists?(url)).to be(false)
       end
     end
diff --git a/spec/lib/quality/test_level_spec.rb b/spec/lib/quality/test_level_spec.rb
index ad29c80b07a..0b113e8b63a 100644
--- a/spec/lib/quality/test_level_spec.rb
+++ b/spec/lib/quality/test_level_spec.rb
@@ -28,7 +28,7 @@ RSpec.describe Quality::TestLevel do
     context 'when level is migration' do
       it 'returns a pattern' do
         expect(subject.pattern(:migration))
-          .to eq("spec/{migrations}{,/**/}*_spec.rb")
+          .to eq("spec/{migrations,lib/gitlab/background_migration,lib/ee/gitlab/background_migration}{,/**/}*_spec.rb")
       end
     end
 
@@ -96,7 +96,7 @@ RSpec.describe Quality::TestLevel do
     context 'when level is migration' do
       it 'returns a regexp' do
         expect(subject.regexp(:migration))
-          .to eq(%r{spec/(migrations)})
+          .to eq(%r{spec/(migrations|lib/gitlab/background_migration|lib/ee/gitlab/background_migration)})
       end
     end
 
diff --git a/spec/migrations/active_record/schema_spec.rb b/spec/migrations/active_record/schema_spec.rb
index d26e6437b32..8199f55f5fc 100644
--- a/spec/migrations/active_record/schema_spec.rb
+++ b/spec/migrations/active_record/schema_spec.rb
@@ -25,6 +25,6 @@ RSpec.describe ActiveRecord::Schema, schema: :latest do
   it 'the schema_migrations table contains all schema versions' do
     versions = ActiveRecord::Base.connection.execute('SELECT version FROM schema_migrations ORDER BY version').map { |m| Integer(m['version']) }
 
-    expect(versions).to eq(all_migrations)
+    expect(versions).to match_array(all_migrations)
   end
 end
diff --git a/spec/migrations/schedule_calculate_wiki_sizes_spec.rb b/spec/migrations/schedule_calculate_wiki_sizes_spec.rb
new file mode 100644
index 00000000000..39a93f3ed25
--- /dev/null
+++ b/spec/migrations/schedule_calculate_wiki_sizes_spec.rb
@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require Rails.root.join('db', 'post_migrate', '20190527194900_schedule_calculate_wiki_sizes.rb')
+
+RSpec.describe ScheduleCalculateWikiSizes do
+  let(:migration_class) { Gitlab::BackgroundMigration::CalculateWikiSizes }
+  let(:migration_name)  { migration_class.to_s.demodulize }
+
+  let(:namespaces) { table(:namespaces) }
+  let(:projects) { table(:projects) }
+  let(:project_statistics) { table(:project_statistics) }
+  let(:namespace) { namespaces.create!(name: 'wiki-migration', path: 'wiki-migration') }
+  let(:project1) { projects.create!(name: 'wiki-project-1', path: 'wiki-project-1', namespace_id: namespace.id) }
+  let(:project2) { projects.create!(name: 'wiki-project-2', path: 'wiki-project-2', namespace_id: namespace.id) }
+  let(:project3) { projects.create!(name: 'wiki-project-3', path: 'wiki-project-3', namespace_id: namespace.id) }
+
+  context 'when missing wiki sizes exist' do
+    let!(:project_statistic1) { project_statistics.create!(id: 1, project_id: project1.id, namespace_id: namespace.id, wiki_size: 1000) }
+    let!(:project_statistic2) { project_statistics.create!(id: 2, project_id: project2.id, namespace_id: namespace.id, wiki_size: nil) }
+    let!(:project_statistic3) { project_statistics.create!(id: 3, project_id: project3.id, namespace_id: namespace.id, wiki_size: nil) }
+
+    it 'schedules a background migration' do
+      Timecop.freeze do
+        migrate!
+
+        expect(migration_name).to be_scheduled_delayed_migration(5.minutes, project_statistic2.id, project_statistic3.id)
+        expect(BackgroundMigrationWorker.jobs.size).to eq 1
+      end
+    end
+
+    it 'calculates missing wiki sizes', :sidekiq_inline do
+      expect(project_statistic2.wiki_size).to be_nil
+      expect(project_statistic3.wiki_size).to be_nil
+
+      migrate!
+
+      expect(project_statistic2.reload.wiki_size).not_to be_nil
+      expect(project_statistic3.reload.wiki_size).not_to be_nil
+    end
+  end
+
+  context 'when missing wiki sizes do not exist' do
+    before do
+      namespace = namespaces.create!(name: 'wiki-migration', path: 'wiki-migration')
+      project = projects.create!(name: 'wiki-project-1', path: 'wiki-project-1', namespace_id: namespace.id)
+      project_statistics.create!(project_id: project.id, namespace_id: 1, wiki_size: 1000)
+    end
+
+    it 'does not schedule a background migration' do
+      Sidekiq::Testing.fake! do
+        Timecop.freeze do
+          migrate!
+
+          expect(BackgroundMigrationWorker.jobs.size).to eq 0
+        end
+      end
+    end
+  end
+end
diff --git a/spec/requests/api/group_export_spec.rb b/spec/requests/api/group_export_spec.rb
index 8ce8068018b..50a1e9d0c3d 100644
--- a/spec/requests/api/group_export_spec.rb
+++ b/spec/requests/api/group_export_spec.rb
@@ -33,6 +33,10 @@ RSpec.describe API::GroupExport do
     context 'group_import_export feature flag enabled' do
       before do
         stub_feature_flags(group_import_export: true)
+
+        allow(Gitlab::ApplicationRateLimiter)
+          .to receive(:increment)
+          .and_return(0)
       end
 
       context 'when export file exists' do
@@ -87,7 +91,7 @@ RSpec.describe API::GroupExport do
       before do
         allow(Gitlab::ApplicationRateLimiter)
           .to receive(:increment)
-          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_download_export][:threshold] + 1)
+          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_download_export][:threshold].call + 1)
       end
 
       it 'throttles the endpoint' do
@@ -162,7 +166,7 @@ RSpec.describe API::GroupExport do
 
         allow(Gitlab::ApplicationRateLimiter)
           .to receive(:increment)
-          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_export][:threshold] + 1)
+          .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:group_export][:threshold].call + 1)
       end
 
       it 'throttles the endpoint' do
diff --git a/spec/requests/api/project_export_spec.rb b/spec/requests/api/project_export_spec.rb
index 79c24dfbb6b..d7ba3b4e158 100644
--- a/spec/requests/api/project_export_spec.rb
+++ b/spec/requests/api/project_export_spec.rb
@@ -237,7 +237,7 @@ RSpec.describe API::ProjectExport, :clean_gitlab_redis_cache do
           before do
             allow(Gitlab::ApplicationRateLimiter)
               .to receive(:increment)
-              .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:project_download_export][:threshold] + 1)
+              .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:project_download_export][:threshold].call + 1)
           end
 
           it 'prevents requesting project export' do
@@ -362,7 +362,7 @@ RSpec.describe API::ProjectExport, :clean_gitlab_redis_cache do
           before do
             allow(Gitlab::ApplicationRateLimiter)
               .to receive(:increment)
-              .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:project_export][:threshold] + 1)
+              .and_return(Gitlab::ApplicationRateLimiter.rate_limits[:project_export][:threshold].call + 1)
           end
 
           it 'prevents requesting project export' do
diff --git a/spec/requests/import/gitlab_groups_controller_spec.rb b/spec/requests/import/gitlab_groups_controller_spec.rb
index 1ca1df2998f..4125c5c7c7a 100644
--- a/spec/requests/import/gitlab_groups_controller_spec.rb
+++ b/spec/requests/import/gitlab_groups_controller_spec.rb
@@ -16,6 +16,8 @@ RSpec.describe Import::GitlabGroupsController do
       expect(import_export).to receive(:storage_path).and_return(import_path)
     end
 
+    allow(Gitlab::ApplicationRateLimiter).to receive(:throttled?).and_return(false)
+
     stub_uploads_object_storage(ImportExportUploader)
   end
 
diff --git a/spec/support/matchers/background_migrations_matchers.rb b/spec/support/matchers/background_migrations_matchers.rb
index 8735dac8b2a..0144a044f6c 100644
--- a/spec/support/matchers/background_migrations_matchers.rb
+++ b/spec/support/matchers/background_migrations_matchers.rb
@@ -10,7 +10,8 @@ RSpec::Matchers.define :be_scheduled_delayed_migration do |delay, *expected|
 
   failure_message do |migration|
     "Migration `#{migration}` with args `#{expected.inspect}` " \
-      'not scheduled in expected time!'
+      "not scheduled in expected time! Expected any of `#{BackgroundMigrationWorker.jobs.map { |j| j['args'] }}` to be `#{[migration, expected]}` " \
+      "and any of `#{BackgroundMigrationWorker.jobs.map { |j| j['at'].to_i }}` to be `#{delay.to_i + Time.now.to_i}` (`#{delay.to_i}` + `#{Time.now.to_i}`)."
   end
 end
 
diff --git a/yarn.lock b/yarn.lock
index bfbc92a01ae..cf2b1ac3224 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1171,11 +1171,6 @@
   dependencies:
     "@toast-ui/editor" "^2.2.0"
 
-"@types/anymatch@*":
-  version "1.3.0"
-  resolved "https://registry.yarnpkg.com/@types/anymatch/-/anymatch-1.3.0.tgz#d1d55958d1fccc5527d4aba29fc9c4b942f563ff"
-  integrity sha512-7WcbyctkE8GTzogDb0ulRAEw7v8oIS54ft9mQTU7PfM0hp5e+8kpa+HeQ7IQrFbKtJXBKcZ4bh+Em9dTw5L6AQ==
-
 "@types/babel__core@^7.1.0":
   version "7.1.2"
   resolved "https://registry.yarnpkg.com/@types/babel__core/-/babel__core-7.1.2.tgz#608c74f55928033fce18b99b213c16be4b3d114f"
@@ -1285,11 +1280,6 @@
   resolved "https://registry.yarnpkg.com/@types/stack-utils/-/stack-utils-1.0.1.tgz#0a851d3bd96498fa25c33ab7278ed3bd65f06c3e"
   integrity sha512-l42BggppR6zLmpfU6fq9HEa2oGPEI8yrSPL3GITjfRInppYFahObbIQOQK3UGxEnyQpltZLaPe75046NOZQikw==
 
-"@types/tapable@*":
-  version "1.0.4"
-  resolved "https://registry.yarnpkg.com/@types/tapable/-/tapable-1.0.4.tgz#b4ffc7dc97b498c969b360a41eee247f82616370"
-  integrity sha512-78AdXtlhpCHT0K3EytMpn4JNxaf5tbqbLcbIRoQIHzpTIyjpxLQKRoxU55ujBXAtg3Nl2h/XWvfDa9dsMOd0pQ==
-
 "@types/tern@*":
   version "0.23.3"
   resolved "https://registry.yarnpkg.com/@types/tern/-/tern-0.23.3.tgz#4b54538f04a88c9ff79de1f6f94f575a7f339460"
@@ -1297,13 +1287,6 @@
   dependencies:
     "@types/estree" "*"
 
-"@types/uglify-js@*":
-  version "3.0.4"
-  resolved "https://registry.yarnpkg.com/@types/uglify-js/-/uglify-js-3.0.4.tgz#96beae23df6f561862a830b4288a49e86baac082"
-  integrity sha512-SudIN9TRJ+v8g5pTG8RRCqfqTMNqgWCKKd3vtynhGzkIIjxaicNAMuY5TRadJ6tzDu3Dotf3ngaMILtmOdmWEQ==
-  dependencies:
-    source-map "^0.6.1"
-
 "@types/unist@*", "@types/unist@^2.0.0":
   version "2.0.3"
   resolved "https://registry.yarnpkg.com/@types/unist/-/unist-2.0.3.tgz#9c088679876f374eb5983f150d4787aa6fb32d7e"
@@ -1326,17 +1309,6 @@
     "@types/unist" "*"
     "@types/vfile-message" "*"
 
-"@types/webpack@^4.4.19":
-  version "4.4.23"
-  resolved "https://registry.yarnpkg.com/@types/webpack/-/webpack-4.4.23.tgz#059d6f4598cfd65ddee0e2db38317ef989696712"
-  integrity sha512-WswyG+2mRg0ul/ytPpCSWo+kOlVVPW/fKCBEVwqmPVC/2ffWEwhsCEQgnFbWDf8EWId2qGcpL623EjLfNTRk9A==
-  dependencies:
-    "@types/anymatch" "*"
-    "@types/node" "*"
-    "@types/tapable" "*"
-    "@types/uglify-js" "*"
-    source-map "^0.6.0"
-
 "@types/yargs-parser@*":
   version "15.0.0"
   resolved "https://registry.yarnpkg.com/@types/yargs-parser/-/yargs-parser-15.0.0.tgz#cb3f9f741869e20cce330ffbeb9271590483882d"
@@ -8252,17 +8224,24 @@ moment-mini@^2.22.1:
   resolved "https://registry.yarnpkg.com/moment-mini/-/moment-mini-2.22.1.tgz#bc32d73e43a4505070be6b53494b17623183420d"
   integrity sha512-OUCkHOz7ehtNMYuZjNciXUfwTuz8vmF1MTbAy59ebf+ZBYZO5/tZKuChVWCX+uDo+4idJBpGltNfV8st+HwsGw==
 
-monaco-editor-webpack-plugin@^1.7.0:
-  version "1.7.0"
-  resolved "https://registry.yarnpkg.com/monaco-editor-webpack-plugin/-/monaco-editor-webpack-plugin-1.7.0.tgz#920cbeecca25f15d70d568a7e11b0ba4daf1ae83"
-  integrity sha512-oItymcnlL14Sjd7EF7q+CMhucfwR/2BxsqrXIBrWL6LQplFfAfV+grLEQRmVHeGSBZ/Gk9ptzfueXnWcoEcFuA==
+monaco-editor-webpack-plugin@^1.9.0:
+  version "1.9.0"
+  resolved "https://registry.yarnpkg.com/monaco-editor-webpack-plugin/-/monaco-editor-webpack-plugin-1.9.0.tgz#5b547281b9f404057dc5d8c5722390df9ac90be6"
+  integrity sha512-tOiiToc94E1sb50BgZ8q8WK/bxus77SRrwCqIpAB5er3cpX78SULbEBY4YPOB8kDolOzKRt30WIHG/D6gz69Ww==
   dependencies:
-    "@types/webpack" "^4.4.19"
+    loader-utils "^1.2.3"
 
-monaco-editor@0.18.1, monaco-editor@^0.18.1:
-  version "0.18.1"
-  resolved "https://registry.yarnpkg.com/monaco-editor/-/monaco-editor-0.18.1.tgz#ced7c305a23109875feeaf395a504b91f6358cfc"
-  integrity sha512-fmL+RFZ2Hrezy+X/5ZczQW51LUmvzfcqOurnkCIRFTyjdVjzR7JvENzI6+VKBJzJdPh6EYL4RoWl92b2Hrk9fw==
+monaco-editor@0.20.0, monaco-editor@^0.20.0:
+  version "0.20.0"
+  resolved "https://registry.yarnpkg.com/monaco-editor/-/monaco-editor-0.20.0.tgz#5d5009343a550124426cb4d965a4d27a348b4dea"
+  integrity sha512-hkvf4EtPJRMQlPC3UbMoRs0vTAFAYdzFQ+gpMb8A+9znae1c43q8Mab9iVsgTcg/4PNiLGGn3SlDIa8uvK1FIQ==
+
+monaco-yaml@^2.4.0:
+  version "2.4.0"
+  resolved "https://registry.yarnpkg.com/monaco-yaml/-/monaco-yaml-2.4.0.tgz#027307a231d809c416babf1cf89b4c1bb940e55d"
+  integrity sha512-ElUS6uBqEjA2/o2gLuNdnqWSAAQXh8ISr1kwlFErm3t5IXO74TNfS3gnjO6Kv9TXS7LImjGfgPAZei7o8zNTHw==
+  optionalDependencies:
+    prettier "^1.19.1"
 
 mousetrap@^1.4.6:
   version "1.4.6"
@@ -9387,11 +9366,16 @@ prettier@1.16.3:
   resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.16.3.tgz#8c62168453badef702f34b45b6ee899574a6a65d"
   integrity sha512-kn/GU6SMRYPxUakNXhpP0EedT/KmaPzr0H5lIsDogrykbaxOpOfAFfk5XA7DZrJyMAv1wlMV3CPcZruGXVVUZw==
 
-prettier@1.18.2, prettier@^1.18.2:
+prettier@1.18.2:
   version "1.18.2"
   resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.18.2.tgz#6823e7c5900017b4bd3acf46fe9ac4b4d7bda9ea"
   integrity sha512-OeHeMc0JhFE9idD4ZdtNibzY0+TPHSpSSb9h8FqtP+YnoZZ1sl8Vc9b1sasjfymH3SonAF4QcA2+mzHPhMvIiw==
 
+prettier@^1.18.2, prettier@^1.19.1:
+  version "1.19.1"
+  resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.19.1.tgz#f7d7f5ff8a9cd872a7be4ca142095956a60797cb"
+  integrity sha512-s7PoyDv/II1ObgQunCbB9PdLmUcBZcnWOcxDh7O0N/UwDEsHyqkW+Qh28jW+mVuCdx7gLB0BotYI1Y6uI9iyew==
+
 pretty-format@^24.8.0:
   version "24.8.0"
   resolved "https://registry.yarnpkg.com/pretty-format/-/pretty-format-24.8.0.tgz#8dae7044f58db7cb8be245383b565a963e3c27f2"