From b46d41d54b05eab84bb9653c111124b67f573dd8 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Tue, 31 Aug 2021 09:08:57 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 GITALY_SERVER_VERSION                         |   2 +-
 app/assets/javascripts/api.js                 |   8 +++
 .../components/deploy_freeze_table.vue        |  63 +++++++++++++++++-
 .../deploy_freeze/store/actions.js            |  16 +++++
 .../deploy_freeze/store/mutation_types.js     |   4 ++
 .../deploy_freeze/store/mutations.js          |  33 +++++++--
 .../environments/components/container.vue     |   6 +-
 .../components/environment_item.vue           |  10 +--
 .../components/environments_app.vue           |   5 --
 .../components/environments_detail_header.vue |   8 +--
 .../components/environments_table.vue         |   7 --
 .../folder/environments_folder_bundle.js      |   3 -
 .../folder/environments_folder_view.vue       |   5 --
 app/assets/javascripts/environments/index.js  |   2 -
 .../javascripts/environments/mount_show.js    |   1 -
 .../components/blob_viewers/image_viewer.vue  |  19 ++++++
 .../components/blob_viewers/index.js          |   6 ++
 .../search/highlight_blob_search_result.js    |   2 +-
 app/controllers/boards/issues_controller.rb   |   4 +-
 app/controllers/registrations_controller.rb   |   3 +-
 .../resolvers/board_list_issues_resolver.rb   |   5 +-
 app/graphql/types/ci/stage_type.rb            |  21 ++++--
 app/helpers/environment_helper.rb             |   1 -
 app/models/ci/pipeline.rb                     |   1 +
 app/models/concerns/cron_schedulable.rb       |   8 +--
 app/models/member.rb                          |   6 +-
 app/models/note.rb                            |   2 +-
 app/presenters/ci/build_presenter.rb          |   8 +--
 app/presenters/ci/stage_presenter.rb          |  25 ++++---
 app/services/boards/issues/list_service.rb    |   8 +++
 .../dast_profile_schedule_cadence.json        |  31 +++++++++
 app/views/admin/runners/show.html.haml        |   2 +-
 app/views/projects/ci/builds/_build.html.haml |   6 +-
 app/views/search/results/_blob_data.html.haml |   2 +-
 ...instrumentation_disable_initialization.yml |   8 +++
 config/initializers/zz_metrics.rb             |  38 ++++++-----
 ...6_add_cadence_to_dast_profile_schedules.rb |   7 ++
 ..._add_timezone_to_dast_profile_schedules.rb |  26 ++++++++
 ...add_starts_at_to_dast_profile_schedules.rb |   7 ++
 ..._dast_profile_to_dast_profile_schedules.rb |  38 +++++++++++
 ...pound_index_from_dast_profile_schedules.rb |  30 +++++++++
 ...dex_project_id_on_dast_profile_schedule.rb |  13 ++++
 db/schema_migrations/20210807101446           |   1 +
 db/schema_migrations/20210807101621           |   1 +
 db/schema_migrations/20210807102004           |   1 +
 db/schema_migrations/20210816095826           |   1 +
 db/schema_migrations/20210818061156           |   1 +
 db/schema_migrations/20210818115613           |   1 +
 db/structure.sql                              |  10 ++-
 doc/ci/cloud_deployment/index.md              |   2 +-
 doc/ci/environments/deployment_safety.md      |   4 +-
 doc/ci/environments/incremental_rollouts.md   |   2 +-
 doc/ci/environments/index.md                  |   2 +-
 doc/ci/environments/protected_environments.md |   2 +-
 doc/ci/pipeline_editor/index.md               |   2 +-
 doc/ci/troubleshooting.md                     |   4 +-
 doc/ci/yaml/index.md                          |   4 +-
 doc/development/changelog.md                  |   1 +
 doc/user/application_security/dast/index.md   |   6 +-
 .../offline_deployments/index.md              |   2 +-
 doc/user/project/clusters/serverless/index.md |   2 +-
 .../test_coverage_visualization.md            |  10 +--
 doc/user/project/pages/index.md               |   2 +-
 .../releases/img/deploy_freeze_v13_10.png     | Bin 15902 -> 0 bytes
 .../releases/img/deploy_freeze_v14_3.png      | Bin 0 -> 32558 bytes
 doc/user/project/releases/index.md            |  12 ++--
 lib/gitlab/ci/cron_parser.rb                  |  36 +++++++++-
 locale/gitlab.pot                             |  18 +++++
 .../projects/pipelines_controller_spec.rb     |  37 +++++++---
 .../registrations_controller_spec.rb          |  20 ++++++
 spec/features/invites_spec.rb                 |  10 +++
 .../components/deploy_freeze_table_spec.js    |  26 ++++++++
 .../deploy_freeze/store/actions_spec.js       |  44 ++++++++++++
 .../deploy_freeze/store/mutations_spec.js     |   6 +-
 .../environments/environment_item_spec.js     |   7 --
 .../environments/environment_table_spec.js    |  11 ---
 .../environments/environments_app_spec.js     |   1 -
 .../environments_detail_header_spec.js        |   8 +--
 .../environments_folder_view_spec.js          |   1 -
 .../folder/environments_folder_view_spec.js   |   1 -
 .../blob_viewers/image_viewer_spec.js         |  25 +++++++
 .../highlight_blob_search_result_spec.js      |   2 +-
 .../board_list_issues_resolver_spec.rb        |  14 ++--
 spec/helpers/environment_helper_spec.rb       |   1 -
 spec/lib/gitlab/ci/cron_parser_spec.rb        |  61 +++++++++++++++++
 spec/lib/gitlab/import_export/all_models.yml  |   1 +
 spec/models/member_spec.rb                    |  10 +++
 spec/models/note_spec.rb                      |   8 +++
 .../boards/board_list_issues_query_spec.rb    |  14 ++--
 .../api/graphql/project/pipeline_spec.rb      |  12 +++-
 .../boards/issues/list_service_spec.rb        |  47 +++++++++++++
 91 files changed, 802 insertions(+), 192 deletions(-)
 create mode 100644 app/assets/javascripts/repository/components/blob_viewers/image_viewer.vue
 create mode 100644 app/validators/json_schemas/dast_profile_schedule_cadence.json
 create mode 100644 config/feature_flags/development/method_instrumentation_disable_initialization.yml
 create mode 100644 db/migrate/20210807101446_add_cadence_to_dast_profile_schedules.rb
 create mode 100644 db/migrate/20210807101621_add_timezone_to_dast_profile_schedules.rb
 create mode 100644 db/migrate/20210807102004_add_starts_at_to_dast_profile_schedules.rb
 create mode 100644 db/migrate/20210816095826_add_unique_index_on_dast_profile_to_dast_profile_schedules.rb
 create mode 100644 db/migrate/20210818061156_remove_project_profile_compound_index_from_dast_profile_schedules.rb
 create mode 100644 db/migrate/20210818115613_add_index_project_id_on_dast_profile_schedule.rb
 create mode 100644 db/schema_migrations/20210807101446
 create mode 100644 db/schema_migrations/20210807101621
 create mode 100644 db/schema_migrations/20210807102004
 create mode 100644 db/schema_migrations/20210816095826
 create mode 100644 db/schema_migrations/20210818061156
 create mode 100644 db/schema_migrations/20210818115613
 delete mode 100644 doc/user/project/releases/img/deploy_freeze_v13_10.png
 create mode 100644 doc/user/project/releases/img/deploy_freeze_v14_3.png
 create mode 100644 spec/frontend/repository/components/blob_viewers/image_viewer_spec.js

diff --git a/GITALY_SERVER_VERSION b/GITALY_SERVER_VERSION
index 522c3806095..ff24873ca4c 100644
--- a/GITALY_SERVER_VERSION
+++ b/GITALY_SERVER_VERSION
@@ -1 +1 @@
-40fae4205d3ad62ca9341620146486bee8d31b28
+d924490032231edb9452acdaca7d8e4747cf6ab4
diff --git a/app/assets/javascripts/api.js b/app/assets/javascripts/api.js
index 84a5d5ae4b3..01e463c1965 100644
--- a/app/assets/javascripts/api.js
+++ b/app/assets/javascripts/api.js
@@ -870,6 +870,14 @@ const Api = {
     return axios.put(url, freezePeriod);
   },
 
+  deleteFreezePeriod(id, freezePeriodId) {
+    const url = Api.buildUrl(this.freezePeriodPath)
+      .replace(':id', encodeURIComponent(id))
+      .replace(':freeze_period_id', encodeURIComponent(freezePeriodId));
+
+    return axios.delete(url);
+  },
+
   trackRedisCounterEvent(event) {
     if (!gon.features?.usageDataApi) {
       return null;
diff --git a/app/assets/javascripts/deploy_freeze/components/deploy_freeze_table.vue b/app/assets/javascripts/deploy_freeze/components/deploy_freeze_table.vue
index 8282f1d910a..77767456f76 100644
--- a/app/assets/javascripts/deploy_freeze/components/deploy_freeze_table.vue
+++ b/app/assets/javascripts/deploy_freeze/components/deploy_freeze_table.vue
@@ -1,5 +1,5 @@
 <script>
-import { GlTable, GlButton, GlModalDirective, GlSprintf } from '@gitlab/ui';
+import { GlTable, GlButton, GlModal, GlModalDirective, GlSprintf } from '@gitlab/ui';
 import { mapState, mapActions } from 'vuex';
 import { s__ } from '~/locale';
 
@@ -21,21 +21,42 @@ export default {
       key: 'edit',
       label: s__('DeployFreeze|Edit'),
     },
+    {
+      key: 'delete',
+      label: s__('DeployFreeze|Delete'),
+    },
   ],
   translations: {
     addDeployFreeze: s__('DeployFreeze|Add deploy freeze'),
+    deleteDeployFreezeTitle: s__('DeployFreeze|Delete deploy freeze?'),
+    deleteDeployFreezeMessage: s__(
+      'DeployFreeze|Deploy freeze from %{start} to %{end} in %{timezone} will be removed. Are you sure?',
+    ),
     emptyStateText: s__(
       'DeployFreeze|No deploy freezes exist for this project. To add one, select %{strongStart}Add deploy freeze%{strongEnd}',
     ),
   },
+  modal: {
+    id: 'deleteFreezePeriodModal',
+    actionPrimary: {
+      text: s__('DeployFreeze|Delete freeze period'),
+      attributes: { variant: 'danger', 'data-testid': 'modal-confirm' },
+    },
+  },
   components: {
     GlTable,
     GlButton,
+    GlModal,
     GlSprintf,
   },
   directives: {
     GlModal: GlModalDirective,
   },
+  data() {
+    return {
+      freezePeriodToDelete: null,
+    };
+  },
   computed: {
     ...mapState(['freezePeriods']),
     tableIsNotEmpty() {
@@ -46,7 +67,14 @@ export default {
     this.fetchFreezePeriods();
   },
   methods: {
-    ...mapActions(['fetchFreezePeriods', 'setFreezePeriod']),
+    ...mapActions(['fetchFreezePeriods', 'setFreezePeriod', 'deleteFreezePeriod']),
+    handleDeleteFreezePeriod(freezePeriod) {
+      this.freezePeriodToDelete = freezePeriod;
+    },
+    confirmDeleteFreezePeriod() {
+      this.deleteFreezePeriod(this.freezePeriodToDelete);
+      this.freezePeriodToDelete = null;
+    },
   },
 };
 </script>
@@ -72,6 +100,18 @@ export default {
           @click="setFreezePeriod(item)"
         />
       </template>
+      <template #cell(delete)="{ item }">
+        <gl-button
+          v-gl-modal="$options.modal.id"
+          category="secondary"
+          variant="danger"
+          icon="remove"
+          :aria-label="$options.modal.actionPrimary.text"
+          :loading="item.isDeleting"
+          data-testid="delete-deploy-freeze"
+          @click="handleDeleteFreezePeriod(item)"
+        />
+      </template>
       <template #empty>
         <p data-testid="empty-freeze-periods" class="gl-text-center text-plain">
           <gl-sprintf :message="$options.translations.emptyStateText">
@@ -90,5 +130,24 @@ export default {
     >
       {{ $options.translations.addDeployFreeze }}
     </gl-button>
+    <gl-modal
+      :title="$options.translations.deleteDeployFreezeTitle"
+      :modal-id="$options.modal.id"
+      :action-primary="$options.modal.actionPrimary"
+      static
+      @primary="confirmDeleteFreezePeriod"
+    >
+      <template v-if="freezePeriodToDelete">
+        <gl-sprintf :message="$options.translations.deleteDeployFreezeMessage">
+          <template #start>
+            <code>{{ freezePeriodToDelete.freezeStart }}</code>
+          </template>
+          <template #end>
+            <code>{{ freezePeriodToDelete.freezeEnd }}</code>
+          </template>
+          <template #timezone>{{ freezePeriodToDelete.cronTimezone.formattedTimezone }}</template>
+        </gl-sprintf>
+      </template>
+    </gl-modal>
   </div>
 </template>
diff --git a/app/assets/javascripts/deploy_freeze/store/actions.js b/app/assets/javascripts/deploy_freeze/store/actions.js
index fed80b46eda..a2056165cb2 100644
--- a/app/assets/javascripts/deploy_freeze/store/actions.js
+++ b/app/assets/javascripts/deploy_freeze/store/actions.js
@@ -52,6 +52,22 @@ export const updateFreezePeriod = (store) =>
     }),
   );
 
+export const deleteFreezePeriod = ({ state, commit }, { id }) => {
+  commit(types.REQUEST_DELETE_FREEZE_PERIOD, id);
+
+  return Api.deleteFreezePeriod(state.projectId, id)
+    .then(() => commit(types.RECEIVE_DELETE_FREEZE_PERIOD_SUCCESS, id))
+    .catch((e) => {
+      createFlash({
+        message: __('Error: Unable to delete deploy freeze'),
+      });
+      commit(types.RECEIVE_DELETE_FREEZE_PERIOD_ERROR, id);
+
+      // eslint-disable-next-line no-console
+      console.error('[gitlab] Unable to delete deploy freeze:', e);
+    });
+};
+
 export const fetchFreezePeriods = ({ commit, state }) => {
   commit(types.REQUEST_FREEZE_PERIODS);
 
diff --git a/app/assets/javascripts/deploy_freeze/store/mutation_types.js b/app/assets/javascripts/deploy_freeze/store/mutation_types.js
index 8e6fdfd4443..0fec96e2e4c 100644
--- a/app/assets/javascripts/deploy_freeze/store/mutation_types.js
+++ b/app/assets/javascripts/deploy_freeze/store/mutation_types.js
@@ -10,4 +10,8 @@ export const SET_SELECTED_ID = 'SET_SELECTED_ID';
 export const SET_FREEZE_START_CRON = 'SET_FREEZE_START_CRON';
 export const SET_FREEZE_END_CRON = 'SET_FREEZE_END_CRON';
 
+export const REQUEST_DELETE_FREEZE_PERIOD = 'REQUEST_DELETE_FREEZE_PERIOD';
+export const RECEIVE_DELETE_FREEZE_PERIOD_SUCCESS = 'RECEIVE_DELETE_FREEZE_PERIOD_SUCCESS';
+export const RECEIVE_DELETE_FREEZE_PERIOD_ERROR = 'RECEIVE_DELETE_FREEZE_PERIOD_ERROR';
+
 export const RESET_MODAL = 'RESET_MODAL';
diff --git a/app/assets/javascripts/deploy_freeze/store/mutations.js b/app/assets/javascripts/deploy_freeze/store/mutations.js
index fdd1ea6e32e..151f7f39f5a 100644
--- a/app/assets/javascripts/deploy_freeze/store/mutations.js
+++ b/app/assets/javascripts/deploy_freeze/store/mutations.js
@@ -1,15 +1,28 @@
+import Vue from 'vue';
 import { convertObjectPropsToCamelCase } from '~/lib/utils/common_utils';
+import { secondsToHours } from '~/lib/utils/datetime_utility';
 import * as types from './mutation_types';
 
-const formatTimezoneName = (freezePeriod, timezoneList) =>
-  convertObjectPropsToCamelCase({
+const formatTimezoneName = (freezePeriod, timezoneList) => {
+  const tz = timezoneList.find((timezone) => timezone.identifier === freezePeriod.cron_timezone);
+  return convertObjectPropsToCamelCase({
     ...freezePeriod,
     cron_timezone: {
-      formattedTimezone: timezoneList.find((tz) => tz.identifier === freezePeriod.cron_timezone)
-        ?.name,
+      formattedTimezone: tz && `[UTC ${secondsToHours(tz.offset)}] ${tz.name}`,
       identifier: freezePeriod.cron_timezone,
     },
   });
+};
+
+const setFreezePeriodIsDeleting = (state, id, isDeleting) => {
+  const freezePeriod = state.freezePeriods.find((f) => f.id === id);
+
+  if (!freezePeriod) {
+    return;
+  }
+
+  Vue.set(freezePeriod, 'isDeleting', isDeleting);
+};
 
 export default {
   [types.REQUEST_FREEZE_PERIODS](state) {
@@ -53,6 +66,18 @@ export default {
     state.selectedId = id;
   },
 
+  [types.REQUEST_DELETE_FREEZE_PERIOD](state, id) {
+    setFreezePeriodIsDeleting(state, id, true);
+  },
+
+  [types.RECEIVE_DELETE_FREEZE_PERIOD_SUCCESS](state, id) {
+    state.freezePeriods = state.freezePeriods.filter((f) => f.id !== id);
+  },
+
+  [types.RECEIVE_DELETE_FREEZE_PERIOD_ERROR](state, id) {
+    setFreezePeriodIsDeleting(state, id, false);
+  },
+
   [types.RESET_MODAL](state) {
     state.freezeStartCron = '';
     state.freezeEndCron = '';
diff --git a/app/assets/javascripts/environments/components/container.vue b/app/assets/javascripts/environments/components/container.vue
index 9e058af56c4..cec53869aa8 100644
--- a/app/assets/javascripts/environments/components/container.vue
+++ b/app/assets/javascripts/environments/components/container.vue
@@ -22,10 +22,6 @@ export default {
       type: Object,
       required: true,
     },
-    canReadEnvironment: {
-      type: Boolean,
-      required: true,
-    },
   },
   methods: {
     onChangePage(page) {
@@ -42,7 +38,7 @@ export default {
     <slot name="empty-state"></slot>
 
     <div v-if="!isLoading && environments.length > 0" class="table-holder">
-      <environment-table :environments="environments" :can-read-environment="canReadEnvironment" />
+      <environment-table :environments="environments" />
 
       <table-pagination
         v-if="pagination && pagination.totalPages > 1"
diff --git a/app/assets/javascripts/environments/components/environment_item.vue b/app/assets/javascripts/environments/components/environment_item.vue
index 5fbd83a39a9..d12863ee742 100644
--- a/app/assets/javascripts/environments/components/environment_item.vue
+++ b/app/assets/javascripts/environments/components/environment_item.vue
@@ -48,12 +48,6 @@ export default {
   mixins: [timeagoMixin],
 
   props: {
-    canReadEnvironment: {
-      type: Boolean,
-      required: false,
-      default: false,
-    },
-
     model: {
       type: Object,
       required: true,
@@ -790,14 +784,14 @@ export default {
         />
 
         <external-url-component
-          v-if="externalURL && canReadEnvironment"
+          v-if="externalURL"
           :external-url="externalURL"
           data-track-action="click_button"
           data-track-label="environment_url"
         />
 
         <monitoring-button-component
-          v-if="monitoringUrl && canReadEnvironment"
+          v-if="monitoringUrl"
           :monitoring-url="monitoringUrl"
           data-track-action="click_button"
           data-track-label="environment_monitoring"
diff --git a/app/assets/javascripts/environments/components/environments_app.vue b/app/assets/javascripts/environments/components/environments_app.vue
index 105315dcf51..9d2f2646e74 100644
--- a/app/assets/javascripts/environments/components/environments_app.vue
+++ b/app/assets/javascripts/environments/components/environments_app.vue
@@ -52,10 +52,6 @@ export default {
       type: Boolean,
       required: true,
     },
-    canReadEnvironment: {
-      type: Boolean,
-      required: true,
-    },
     newEnvironmentPath: {
       type: String,
       required: true,
@@ -210,7 +206,6 @@ export default {
         :is-loading="isLoading"
         :environments="state.environments"
         :pagination="state.paginationInformation"
-        :can-read-environment="canReadEnvironment"
         @onChangePage="onChangePage"
       >
         <template v-if="!isLoading && state.environments.length === 0" #empty-state>
diff --git a/app/assets/javascripts/environments/components/environments_detail_header.vue b/app/assets/javascripts/environments/components/environments_detail_header.vue
index 467c89fd8b8..d71b553a878 100644
--- a/app/assets/javascripts/environments/components/environments_detail_header.vue
+++ b/app/assets/javascripts/environments/components/environments_detail_header.vue
@@ -27,10 +27,6 @@ export default {
       type: Object,
       required: true,
     },
-    canReadEnvironment: {
-      type: Boolean,
-      required: true,
-    },
     canAdminEnvironment: {
       type: Boolean,
       required: true,
@@ -84,7 +80,7 @@ export default {
       return this.environment.isAvailable && Boolean(this.environment.autoStopAt);
     },
     shouldShowExternalUrlButton() {
-      return this.canReadEnvironment && Boolean(this.environment.externalUrl);
+      return Boolean(this.environment.externalUrl);
     },
     shouldShowStopButton() {
       return this.canStopEnvironment && this.environment.isAvailable;
@@ -138,7 +134,7 @@ export default {
         >{{ $options.i18n.externalButtonText }}</gl-button
       >
       <gl-button
-        v-if="canReadEnvironment"
+        v-if="shouldShowExternalUrlButton"
         data-testid="metrics-button"
         :href="metricsPath"
         :title="$options.i18n.metricsButtonTitle"
diff --git a/app/assets/javascripts/environments/components/environments_table.vue b/app/assets/javascripts/environments/components/environments_table.vue
index 61438872afc..f1c728b84fd 100644
--- a/app/assets/javascripts/environments/components/environments_table.vue
+++ b/app/assets/javascripts/environments/components/environments_table.vue
@@ -23,11 +23,6 @@ export default {
       required: true,
       default: () => [],
     },
-    canReadEnvironment: {
-      type: Boolean,
-      required: false,
-      default: false,
-    },
   },
   data() {
     return {
@@ -155,7 +150,6 @@ export default {
       <environment-item
         :key="`environment-item-${i}`"
         :model="model"
-        :can-read-environment="canReadEnvironment"
         :table-data="tableData"
         data-qa-selector="environment_item"
       />
@@ -191,7 +185,6 @@ export default {
             <environment-item
               :key="`environment-row-${i}-${index}`"
               :model="child"
-              :can-read-environment="canReadEnvironment"
               :table-data="tableData"
               data-qa-selector="environment_item"
             />
diff --git a/app/assets/javascripts/environments/folder/environments_folder_bundle.js b/app/assets/javascripts/environments/folder/environments_folder_bundle.js
index 1be9a4608cb..206381e0b7e 100644
--- a/app/assets/javascripts/environments/folder/environments_folder_bundle.js
+++ b/app/assets/javascripts/environments/folder/environments_folder_bundle.js
@@ -1,7 +1,6 @@
 import Vue from 'vue';
 import VueApollo from 'vue-apollo';
 import createDefaultClient from '~/lib/graphql';
-import { parseBoolean } from '../../lib/utils/common_utils';
 import Translate from '../../vue_shared/translate';
 import environmentsFolderApp from './environments_folder_view.vue';
 
@@ -31,7 +30,6 @@ export default () => {
         endpoint: environmentsData.environmentsDataEndpoint,
         folderName: environmentsData.environmentsDataFolderName,
         cssContainerClass: environmentsData.cssClass,
-        canReadEnvironment: parseBoolean(environmentsData.environmentsDataCanReadEnvironment),
       };
     },
     render(createElement) {
@@ -40,7 +38,6 @@ export default () => {
           endpoint: this.endpoint,
           folderName: this.folderName,
           cssContainerClass: this.cssContainerClass,
-          canReadEnvironment: this.canReadEnvironment,
         },
       });
     },
diff --git a/app/assets/javascripts/environments/folder/environments_folder_view.vue b/app/assets/javascripts/environments/folder/environments_folder_view.vue
index 8070f3f12f8..3c608ad0ba9 100644
--- a/app/assets/javascripts/environments/folder/environments_folder_view.vue
+++ b/app/assets/javascripts/environments/folder/environments_folder_view.vue
@@ -30,10 +30,6 @@ export default {
       required: false,
       default: '',
     },
-    canReadEnvironment: {
-      type: Boolean,
-      required: true,
-    },
   },
   methods: {
     successCallback(resp) {
@@ -72,7 +68,6 @@ export default {
       :is-loading="isLoading"
       :environments="state.environments"
       :pagination="state.paginationInformation"
-      :can-read-environment="canReadEnvironment"
       @onChangePage="onChangePage"
     />
   </div>
diff --git a/app/assets/javascripts/environments/index.js b/app/assets/javascripts/environments/index.js
index f1f8b4c8bc8..5e33923d518 100644
--- a/app/assets/javascripts/environments/index.js
+++ b/app/assets/javascripts/environments/index.js
@@ -32,7 +32,6 @@ export default () => {
         newEnvironmentPath: environmentsData.newEnvironmentPath,
         helpPagePath: environmentsData.helpPagePath,
         canCreateEnvironment: parseBoolean(environmentsData.canCreateEnvironment),
-        canReadEnvironment: parseBoolean(environmentsData.canReadEnvironment),
       };
     },
     render(createElement) {
@@ -42,7 +41,6 @@ export default () => {
           newEnvironmentPath: this.newEnvironmentPath,
           helpPagePath: this.helpPagePath,
           canCreateEnvironment: this.canCreateEnvironment,
-          canReadEnvironment: this.canReadEnvironment,
         },
       });
     },
diff --git a/app/assets/javascripts/environments/mount_show.js b/app/assets/javascripts/environments/mount_show.js
index f1c2dfec94b..6df4fad83f2 100644
--- a/app/assets/javascripts/environments/mount_show.js
+++ b/app/assets/javascripts/environments/mount_show.js
@@ -36,7 +36,6 @@ export const initHeader = () => {
           environment: this.environment,
           canDestroyEnvironment: dataset.canDestroyEnvironment,
           canUpdateEnvironment: dataset.canUpdateEnvironment,
-          canReadEnvironment: dataset.canReadEnvironment,
           canStopEnvironment: dataset.canStopEnvironment,
           canAdminEnvironment: dataset.canAdminEnvironment,
           cancelAutoStopPath: dataset.environmentCancelAutoStopPath,
diff --git a/app/assets/javascripts/repository/components/blob_viewers/image_viewer.vue b/app/assets/javascripts/repository/components/blob_viewers/image_viewer.vue
new file mode 100644
index 00000000000..83d36209bb3
--- /dev/null
+++ b/app/assets/javascripts/repository/components/blob_viewers/image_viewer.vue
@@ -0,0 +1,19 @@
+<script>
+export default {
+  props: {
+    url: {
+      type: String,
+      required: true,
+    },
+    alt: {
+      type: String,
+      required: true,
+    },
+  },
+};
+</script>
+<template>
+  <div class="gl-text-center gl-p-7 gl-bg-gray-50">
+    <img :src="url" :alt="alt" data-testid="image" />
+  </div>
+</template>
diff --git a/app/assets/javascripts/repository/components/blob_viewers/index.js b/app/assets/javascripts/repository/components/blob_viewers/index.js
index 4e16b16041f..3b4f4eb51fe 100644
--- a/app/assets/javascripts/repository/components/blob_viewers/index.js
+++ b/app/assets/javascripts/repository/components/blob_viewers/index.js
@@ -6,6 +6,8 @@ export const loadViewer = (type) => {
       return () => import(/* webpackChunkName: 'blob_text_viewer' */ './text_viewer.vue');
     case 'download':
       return () => import(/* webpackChunkName: 'blob_download_viewer' */ './download_viewer.vue');
+    case 'image':
+      return () => import(/* webpackChunkName: 'blob_image_viewer' */ './image_viewer.vue');
     default:
       return null;
   }
@@ -23,5 +25,9 @@ export const viewerProps = (type, blob) => {
       filePath: blob.rawPath,
       fileSize: blob.rawSize,
     },
+    image: {
+      url: blob.rawPath,
+      alt: blob.name,
+    },
   }[type];
 };
diff --git a/app/assets/javascripts/search/highlight_blob_search_result.js b/app/assets/javascripts/search/highlight_blob_search_result.js
index c553d5b14a0..07967434f37 100644
--- a/app/assets/javascripts/search/highlight_blob_search_result.js
+++ b/app/assets/javascripts/search/highlight_blob_search_result.js
@@ -2,7 +2,7 @@ export default (search = '') => {
   const highlightLineClass = 'hll';
   const contentBody = document.getElementById('content-body');
   const searchTerm = search.toLowerCase();
-  const blobs = contentBody.querySelectorAll('.blob-result');
+  const blobs = contentBody.querySelectorAll('.js-blob-result');
 
   blobs.forEach((blob) => {
     const lines = blob.querySelectorAll('.line');
diff --git a/app/controllers/boards/issues_controller.rb b/app/controllers/boards/issues_controller.rb
index f0f074792ed..7dea6191fa4 100644
--- a/app/controllers/boards/issues_controller.rb
+++ b/app/controllers/boards/issues_controller.rb
@@ -27,9 +27,7 @@ module Boards
       list_service = Boards::Issues::ListService.new(board_parent, current_user, filter_params)
       issues = issues_from(list_service)
 
-      if Gitlab::Database.read_write? && !board.disabled_for?(current_user)
-        Issue.move_nulls_to_end(issues)
-      end
+      ::Boards::Issues::ListService.initialize_relative_positions(board, current_user, issues)
 
       render_issues(issues, list_service.metadata)
     end
diff --git a/app/controllers/registrations_controller.rb b/app/controllers/registrations_controller.rb
index 3dffbbf3108..96432fa30c9 100644
--- a/app/controllers/registrations_controller.rb
+++ b/app/controllers/registrations_controller.rb
@@ -21,9 +21,10 @@ class RegistrationsController < Devise::RegistrationsController
 
   def create
     set_user_state
-    accept_pending_invitations
 
     super do |new_user|
+      accept_pending_invitations if new_user.persisted?
+
       persist_accepted_terms_if_required(new_user)
       set_role_required(new_user)
 
diff --git a/app/graphql/resolvers/board_list_issues_resolver.rb b/app/graphql/resolvers/board_list_issues_resolver.rb
index 25fb35ec74b..4b09e753a18 100644
--- a/app/graphql/resolvers/board_list_issues_resolver.rb
+++ b/app/graphql/resolvers/board_list_issues_resolver.rb
@@ -15,8 +15,11 @@ module Resolvers
     def resolve(**args)
       filter_params = item_filters(args[:filters]).merge(board_id: list.board.id, id: list.id)
       service = ::Boards::Issues::ListService.new(list.board.resource_parent, context[:current_user], filter_params)
+      pagination_connections = Gitlab::Graphql::Pagination::Keyset::Connection.new(service.execute)
 
-      service.execute
+      ::Boards::Issues::ListService.initialize_relative_positions(list.board, current_user, pagination_connections.items)
+
+      pagination_connections
     end
 
     # https://gitlab.com/gitlab-org/gitlab/-/issues/235681
diff --git a/app/graphql/types/ci/stage_type.rb b/app/graphql/types/ci/stage_type.rb
index 63357e2345b..7b35eab3d27 100644
--- a/app/graphql/types/ci/stage_type.rb
+++ b/app/graphql/types/ci/stage_type.rb
@@ -52,15 +52,22 @@ module Types
 
       # rubocop: disable CodeReuse/ActiveRecord
       def jobs_for_pipeline(pipeline, stage_ids, include_needs)
-        builds_results = pipeline.latest_builds.where(stage_id: stage_ids).preload(:job_artifacts, :project)
-        bridges_results = pipeline.bridges.where(stage_id: stage_ids).preload(:project)
-        builds_results = builds_results.preload(:needs) if include_needs
-        bridges_results = bridges_results.preload(:needs) if include_needs
-        commit_status_results = pipeline.latest_statuses.where(stage_id: stage_ids)
+        jobs = pipeline.statuses.latest.where(stage_id: stage_ids)
 
-        results = builds_results | bridges_results | commit_status_results
+        common_relations = [:project]
+        common_relations << :needs if include_needs
 
-        results.group_by(&:stage_id)
+        preloaders = {
+          ::Ci::Build => [:metadata, :job_artifacts],
+          ::Ci::Bridge => [:metadata, :downstream_pipeline],
+          ::GenericCommitStatus => []
+        }
+
+        preloaders.each do |klass, relations|
+          ActiveRecord::Associations::Preloader.new.preload(jobs.select { |job| job.is_a?(klass) }, relations + common_relations)
+        end
+
+        jobs.group_by(&:stage_id)
       end
       # rubocop: enable CodeReuse/ActiveRecord
     end
diff --git a/app/helpers/environment_helper.rb b/app/helpers/environment_helper.rb
index 3f23f73eed7..f57bb600527 100644
--- a/app/helpers/environment_helper.rb
+++ b/app/helpers/environment_helper.rb
@@ -73,7 +73,6 @@ module EnvironmentHelper
       external_url: environment.external_url,
       can_update_environment: can?(current_user, :update_environment, environment),
       can_destroy_environment: can_destroy_environment?(environment),
-      can_read_environment: can?(current_user, :read_environment, environment),
       can_stop_environment: can?(current_user, :stop_environment, environment),
       can_admin_environment: can?(current_user, :admin_environment, project),
       environment_metrics_path: environment_metrics_path(environment),
diff --git a/app/models/ci/pipeline.rb b/app/models/ci/pipeline.rb
index 308d36ce50f..71cec48aa4e 100644
--- a/app/models/ci/pipeline.rb
+++ b/app/models/ci/pipeline.rb
@@ -66,6 +66,7 @@ module Ci
     has_many :processables, class_name: 'Ci::Processable', foreign_key: :commit_id, inverse_of: :pipeline
     has_many :bridges, class_name: 'Ci::Bridge', foreign_key: :commit_id, inverse_of: :pipeline
     has_many :builds, foreign_key: :commit_id, inverse_of: :pipeline
+    has_many :generic_commit_statuses, foreign_key: :commit_id, inverse_of: :pipeline, class_name: 'GenericCommitStatus'
     has_many :job_artifacts, through: :builds
     has_many :trigger_requests, dependent: :destroy, foreign_key: :commit_id # rubocop:disable Cop/ActiveRecordDependent
     has_many :variables, class_name: 'Ci::PipelineVariable'
diff --git a/app/models/concerns/cron_schedulable.rb b/app/models/concerns/cron_schedulable.rb
index 48605ecc3d7..d5b86db2640 100644
--- a/app/models/concerns/cron_schedulable.rb
+++ b/app/models/concerns/cron_schedulable.rb
@@ -14,12 +14,10 @@ module CronSchedulable
   # The `next_run_at` column is set to the actual execution date of worker that
   # triggers the schedule. This way, a schedule like `*/1 * * * *` won't be triggered
   # in a short interval when the worker runs irregularly by Sidekiq Memory Killer.
-  def calculate_next_run_at
-    now = Time.zone.now
+  def calculate_next_run_at(start_time = Time.zone.now)
+    ideal_next_run = ideal_next_run_from(start_time)
 
-    ideal_next_run = ideal_next_run_from(now)
-
-    if ideal_next_run == cron_worker_next_run_from(now)
+    if ideal_next_run == cron_worker_next_run_from(start_time)
       ideal_next_run
     else
       cron_worker_next_run_from(ideal_next_run)
diff --git a/app/models/member.rb b/app/models/member.rb
index 397e60be3a8..28b8695f70b 100644
--- a/app/models/member.rb
+++ b/app/models/member.rb
@@ -278,12 +278,14 @@ class Member < ApplicationRecord
 
   def accept_invite!(new_user)
     return false unless invite?
+    return false unless new_user
+
+    self.user = new_user
+    return false unless self.user.save
 
     self.invite_token = nil
     self.invite_accepted_at = Time.current.utc
 
-    self.user = new_user
-
     saved = self.save
 
     after_accept_invite if saved
diff --git a/app/models/note.rb b/app/models/note.rb
index 7619ace6dce..7f6f7db36c4 100644
--- a/app/models/note.rb
+++ b/app/models/note.rb
@@ -582,7 +582,7 @@ class Note < ApplicationRecord
   end
 
   def post_processed_cache_key
-    cache_key_items = [cache_key, author.cache_key]
+    cache_key_items = [cache_key, author&.cache_key]
     cache_key_items << Digest::SHA1.hexdigest(redacted_note_html) if redacted_note_html.present?
 
     cache_key_items.join(':')
diff --git a/app/presenters/ci/build_presenter.rb b/app/presenters/ci/build_presenter.rb
index 384cb3285fc..06ed6791bb7 100644
--- a/app/presenters/ci/build_presenter.rb
+++ b/app/presenters/ci/build_presenter.rb
@@ -12,11 +12,11 @@ module Ci
       erased_by.name if erased_by_user?
     end
 
-    def status_title
+    def status_title(status = detailed_status)
       if auto_canceled?
         "Job is redundant and is auto-canceled by Pipeline ##{auto_canceled_by_id}"
       else
-        tooltip_for_badge
+        tooltip_for_badge(status)
       end
     end
 
@@ -41,8 +41,8 @@ module Ci
 
     private
 
-    def tooltip_for_badge
-      detailed_status.badge_tooltip.capitalize
+    def tooltip_for_badge(status)
+      status.badge_tooltip.capitalize
     end
 
     def detailed_status
diff --git a/app/presenters/ci/stage_presenter.rb b/app/presenters/ci/stage_presenter.rb
index 9ec3f8d153a..2d5ee3d2f25 100644
--- a/app/presenters/ci/stage_presenter.rb
+++ b/app/presenters/ci/stage_presenter.rb
@@ -15,18 +15,23 @@ module Ci
     private
 
     def preload_statuses(statuses)
-      loaded_statuses = statuses.load
-      statuses.tap do |statuses|
-        # rubocop: disable CodeReuse/ActiveRecord
-        ActiveRecord::Associations::Preloader.new.preload(preloadable_statuses(loaded_statuses), %w[pipeline tags job_artifacts_archive metadata])
-        # rubocop: enable CodeReuse/ActiveRecord
-      end
-    end
+      common_relations = [:pipeline]
 
-    def preloadable_statuses(statuses)
-      statuses.reject do |status|
-        status.instance_of?(::GenericCommitStatus) || status.instance_of?(::Ci::Bridge)
+      preloaders = {
+        ::Ci::Build => [:metadata, :tags, :job_artifacts_archive],
+        ::Ci::Bridge => [:metadata, :downstream_pipeline],
+        ::GenericCommitStatus => []
+      }
+
+      # rubocop: disable CodeReuse/ActiveRecord
+      preloaders.each do |klass, relations|
+        ActiveRecord::Associations::Preloader
+          .new
+          .preload(statuses.select { |job| job.is_a?(klass) }, relations + common_relations)
       end
+      # rubocop: enable CodeReuse/ActiveRecord
+
+      statuses
     end
   end
 end
diff --git a/app/services/boards/issues/list_service.rb b/app/services/boards/issues/list_service.rb
index 8806e6788ff..9a3e3bc3bdb 100644
--- a/app/services/boards/issues/list_service.rb
+++ b/app/services/boards/issues/list_service.rb
@@ -9,6 +9,14 @@ module Boards
         IssuesFinder.valid_params
       end
 
+      # It is a class method because we cannot apply it
+      # prior to knowing how many items should be fetched for a list.
+      def self.initialize_relative_positions(board, current_user, issues)
+        if Gitlab::Database.read_write? && !board.disabled_for?(current_user)
+          Issue.move_nulls_to_end(issues)
+        end
+      end
+
       private
 
       def order(items)
diff --git a/app/validators/json_schemas/dast_profile_schedule_cadence.json b/app/validators/json_schemas/dast_profile_schedule_cadence.json
new file mode 100644
index 00000000000..5583acfa5af
--- /dev/null
+++ b/app/validators/json_schemas/dast_profile_schedule_cadence.json
@@ -0,0 +1,31 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "description": "Dast profile schedule cadence schema",
+  "type": "object",
+  "anyOf": [
+    {
+      "properties": {
+        "unit": { "enum": ["day"] },
+        "duration": { "enum": [1] }
+      }
+    },
+    {
+      "properties": {
+        "unit": { "enum": ["week"] },
+        "duration": { "enum": [1] }
+      }
+    },
+    {
+      "properties": {
+        "unit": { "enum": ["month"] },
+        "duration": { "enum": [1, 3 ,6] }
+      }
+    },
+    {
+      "properties": {
+        "unit": { "enum": ["year"] },
+        "duration": { "enum": [1] }
+      }
+    }
+  ]
+}
diff --git a/app/views/admin/runners/show.html.haml b/app/views/admin/runners/show.html.haml
index 1f45f3eae26..59523ed3a0c 100644
--- a/app/views/admin/runners/show.html.haml
+++ b/app/views/admin/runners/show.html.haml
@@ -52,7 +52,7 @@
             .float-right
               = form_for project.runner_projects.new, url: admin_namespace_project_runner_projects_path(project.namespace, project), method: :post do |f|
                 = f.hidden_field :runner_id, value: @runner.id
-                = f.submit _('Enable'), class: 'gl-button btn btn-sm'
+                = f.submit _('Enable'), class: 'gl-button btn btn-sm', data: { confirm: (s_('Runners|You are about to change this instance runner to a project runner. This operation is not reversible. Are you sure you want to continue?') if @runner.instance_type?) }
     = paginate_without_count @projects
 
   .col-md-6
diff --git a/app/views/projects/ci/builds/_build.html.haml b/app/views/projects/ci/builds/_build.html.haml
index 1a3813ba99f..437529c3608 100644
--- a/app/views/projects/ci/builds/_build.html.haml
+++ b/app/views/projects/ci/builds/_build.html.haml
@@ -7,10 +7,14 @@
 - pipeline_link = local_assigns.fetch(:pipeline_link, false)
 - stage = local_assigns.fetch(:stage, false)
 - allow_retry = local_assigns.fetch(:allow_retry, false)
+-# This prevents initializing another Ci::Status object where 'status' is used
+- status = job.detailed_status(current_user)
 
 %tr.build.commit{ class: ('retried' if retried) }
   %td.status
-    = render "ci/status/badge", status: job.detailed_status(current_user), title: job.status_title
+    -# Sending 'status' prevents calling the user relation inside the presenter, generating N+1,
+    -# see https://gitlab.com/gitlab-org/gitlab/-/merge_requests/68743
+    = render "ci/status/badge", status: status, title: job.status_title(status)
 
   %td
     - if can?(current_user, :read_build, job)
diff --git a/app/views/search/results/_blob_data.html.haml b/app/views/search/results/_blob_data.html.haml
index 2f13d7d96c7..dcbf2c02307 100644
--- a/app/views/search/results/_blob_data.html.haml
+++ b/app/views/search/results/_blob_data.html.haml
@@ -1,4 +1,4 @@
-.blob-result.gl-mt-3.gl-mb-5{ data: { qa_selector: 'result_item_content' } }
+.js-blob-result.gl-mt-3.gl-mb-5{ data: { qa_selector: 'result_item_content' } }
   .file-holder.file-holder-top-border
     .js-file-title.file-title{ data: { qa_selector: 'file_title_content' } }
       = link_to blob_link, data: {track_event: 'click_text', track_label: 'blob_path', track_property: 'search_result'} do
diff --git a/config/feature_flags/development/method_instrumentation_disable_initialization.yml b/config/feature_flags/development/method_instrumentation_disable_initialization.yml
new file mode 100644
index 00000000000..d73d6fdaac7
--- /dev/null
+++ b/config/feature_flags/development/method_instrumentation_disable_initialization.yml
@@ -0,0 +1,8 @@
+---
+name: method_instrumentation_disable_initialization
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/69091
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/339665
+milestone: '14.3'
+type: development
+group: group::memory
+default_enabled: false
diff --git a/config/initializers/zz_metrics.rb b/config/initializers/zz_metrics.rb
index e352ff5090a..bb768070b1f 100644
--- a/config/initializers/zz_metrics.rb
+++ b/config/initializers/zz_metrics.rb
@@ -178,27 +178,33 @@ if Gitlab::Metrics.enabled? && !Rails.env.test? && !(Rails.env.development? && d
       ActiveRecord::Querying.public_instance_methods(false).map(&:to_s)
     )
 
-    Gitlab::Metrics::Instrumentation
-      .instrument_class_hierarchy(ActiveRecord::Base) do |klass, method|
-        # Instrumenting the ApplicationSetting class can lead to an infinite
-        # loop. Since the data is cached any way we don't really need to
-        # instrument it.
-        if klass == ApplicationSetting
-          false
-        else
-          loc = method.source_location
+    # We are removing the Instrumentation module entirely in steps.
+    # More in https://gitlab.com/gitlab-org/gitlab/-/issues/217978.
+    unless ::Feature.enabled?(:method_instrumentation_disable_initialization)
+      Gitlab::Metrics::Instrumentation
+        .instrument_class_hierarchy(ActiveRecord::Base) do |klass, method|
+          # Instrumenting the ApplicationSetting class can lead to an infinite
+          # loop. Since the data is cached any way we don't really need to
+          # instrument it.
+          if klass == ApplicationSetting
+            false
+          else
+            loc = method.source_location
 
-          loc && loc[0].start_with?(models_path) && method.source =~ regex
+            loc && loc[0].start_with?(models_path) && method.source =~ regex
+          end
         end
-      end
 
-    # Ability is in app/models, is not an ActiveRecord model, but should still
-    # be instrumented.
-    Gitlab::Metrics::Instrumentation.instrument_methods(Ability)
+      # Ability is in app/models, is not an ActiveRecord model, but should still
+      # be instrumented.
+      Gitlab::Metrics::Instrumentation.instrument_methods(Ability)
+    end
   end
 
-  Gitlab::Metrics::Instrumentation.configure do |config|
-    instrument_classes(config)
+  unless ::Feature.enabled?(:method_instrumentation_disable_initialization)
+    Gitlab::Metrics::Instrumentation.configure do |config|
+      instrument_classes(config)
+    end
   end
 
   GC::Profiler.enable
diff --git a/db/migrate/20210807101446_add_cadence_to_dast_profile_schedules.rb b/db/migrate/20210807101446_add_cadence_to_dast_profile_schedules.rb
new file mode 100644
index 00000000000..c9b17e3d5c5
--- /dev/null
+++ b/db/migrate/20210807101446_add_cadence_to_dast_profile_schedules.rb
@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddCadenceToDastProfileSchedules < ActiveRecord::Migration[6.1]
+  def change
+    add_column :dast_profile_schedules, :cadence, :jsonb, null: false, default: {}
+  end
+end
diff --git a/db/migrate/20210807101621_add_timezone_to_dast_profile_schedules.rb b/db/migrate/20210807101621_add_timezone_to_dast_profile_schedules.rb
new file mode 100644
index 00000000000..3c3eb507432
--- /dev/null
+++ b/db/migrate/20210807101621_add_timezone_to_dast_profile_schedules.rb
@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+class AddTimezoneToDastProfileSchedules < ActiveRecord::Migration[6.1]
+  include Gitlab::Database::MigrationHelpers
+
+  disable_ddl_transaction!
+
+  # We disable these cops here because adding the column is safe. The table does not
+  # have any data in it as it's behind a feature flag.
+  # rubocop: disable Rails/NotNullColumn
+  def up
+    execute('DELETE FROM dast_profile_schedules')
+
+    unless column_exists?(:dast_profile_schedules, :timezone)
+      add_column :dast_profile_schedules, :timezone, :text, null: false
+    end
+
+    add_text_limit :dast_profile_schedules, :timezone, 255
+  end
+
+  def down
+    return unless column_exists?(:dast_profile_schedules, :timezone)
+
+    remove_column :dast_profile_schedules, :timezone
+  end
+end
diff --git a/db/migrate/20210807102004_add_starts_at_to_dast_profile_schedules.rb b/db/migrate/20210807102004_add_starts_at_to_dast_profile_schedules.rb
new file mode 100644
index 00000000000..4eea5fd7e8c
--- /dev/null
+++ b/db/migrate/20210807102004_add_starts_at_to_dast_profile_schedules.rb
@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddStartsAtToDastProfileSchedules < ActiveRecord::Migration[6.1]
+  def change
+    add_column :dast_profile_schedules, :starts_at, :datetime_with_timezone, null: false, default: -> { 'NOW()' }
+  end
+end
diff --git a/db/migrate/20210816095826_add_unique_index_on_dast_profile_to_dast_profile_schedules.rb b/db/migrate/20210816095826_add_unique_index_on_dast_profile_to_dast_profile_schedules.rb
new file mode 100644
index 00000000000..b7ea8545df1
--- /dev/null
+++ b/db/migrate/20210816095826_add_unique_index_on_dast_profile_to_dast_profile_schedules.rb
@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+# See https://docs.gitlab.com/ee/development/migration_style_guide.html
+# for more information on how to write migrations for GitLab.
+
+class AddUniqueIndexOnDastProfileToDastProfileSchedules < ActiveRecord::Migration[6.1]
+  include Gitlab::Database::MigrationHelpers
+
+  INDEX_NAME = 'index_dast_profile_schedules_on_dast_profile_id'
+  TABLE = :dast_profile_schedules
+  # We disable these cops here because changing this index is safe. The table does not
+  # have any data in it as it's behind a feature flag.
+  # rubocop: disable Migration/AddIndex
+  # rubocop: disable Migration/RemoveIndex
+  def up
+    execute('DELETE FROM dast_profile_schedules')
+
+    if index_exists_by_name?(TABLE, INDEX_NAME)
+      remove_index TABLE, :dast_profile_id, name: INDEX_NAME
+    end
+
+    unless index_exists_by_name?(TABLE, INDEX_NAME)
+      add_index TABLE, :dast_profile_id, unique: true, name: INDEX_NAME
+    end
+  end
+
+  def down
+    execute('DELETE FROM dast_profile_schedules')
+
+    if index_exists_by_name?(TABLE, INDEX_NAME)
+      remove_index TABLE, :dast_profile_id, name: INDEX_NAME
+    end
+
+    unless index_exists_by_name?(TABLE, INDEX_NAME)
+      add_index TABLE, :dast_profile_id
+    end
+  end
+end
diff --git a/db/migrate/20210818061156_remove_project_profile_compound_index_from_dast_profile_schedules.rb b/db/migrate/20210818061156_remove_project_profile_compound_index_from_dast_profile_schedules.rb
new file mode 100644
index 00000000000..b50947a0a99
--- /dev/null
+++ b/db/migrate/20210818061156_remove_project_profile_compound_index_from_dast_profile_schedules.rb
@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+# See https://docs.gitlab.com/ee/development/migration_style_guide.html
+# for more information on how to write migrations for GitLab.
+
+class RemoveProjectProfileCompoundIndexFromDastProfileSchedules < ActiveRecord::Migration[6.1]
+  include Gitlab::Database::MigrationHelpers
+
+  TABLE = :dast_profile_schedules
+  INDEX_NAME = 'index_dast_profile_schedules_on_project_id_and_dast_profile_id'
+  # We disable these cops here because changing this index is safe. The table does not
+  # have any data in it as it's behind a feature flag.
+  # rubocop: disable Migration/AddIndex
+  # rubocop: disable Migration/RemoveIndex
+  def up
+    execute('DELETE FROM dast_profile_schedules')
+
+    if index_exists_by_name?(TABLE, INDEX_NAME)
+      remove_index TABLE, %i[project_id dast_profile_id], name: INDEX_NAME
+    end
+  end
+
+  def down
+    execute('DELETE FROM dast_profile_schedules')
+
+    unless index_exists_by_name?(TABLE, INDEX_NAME)
+      add_index TABLE, %i[project_id dast_profile_id], unique: true, name: INDEX_NAME
+    end
+  end
+end
diff --git a/db/migrate/20210818115613_add_index_project_id_on_dast_profile_schedule.rb b/db/migrate/20210818115613_add_index_project_id_on_dast_profile_schedule.rb
new file mode 100644
index 00000000000..392b335ab45
--- /dev/null
+++ b/db/migrate/20210818115613_add_index_project_id_on_dast_profile_schedule.rb
@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# See https://docs.gitlab.com/ee/development/migration_style_guide.html
+# for more information on how to write migrations for GitLab.
+
+class AddIndexProjectIdOnDastProfileSchedule < ActiveRecord::Migration[6.1]
+  # We disable these cops here because changing this index is safe. The table does not
+  # have any data in it as it's behind a feature flag.
+  # rubocop: disable Migration/AddIndex
+  def change
+    add_index :dast_profile_schedules, :project_id
+  end
+end
diff --git a/db/schema_migrations/20210807101446 b/db/schema_migrations/20210807101446
new file mode 100644
index 00000000000..0b6d526429f
--- /dev/null
+++ b/db/schema_migrations/20210807101446
@@ -0,0 +1 @@
+30e1463616c60b92afb28bbb76e3c55830a385af6df0e60e16ed96d9e75943b9
\ No newline at end of file
diff --git a/db/schema_migrations/20210807101621 b/db/schema_migrations/20210807101621
new file mode 100644
index 00000000000..ab053cf4cbc
--- /dev/null
+++ b/db/schema_migrations/20210807101621
@@ -0,0 +1 @@
+7e9b39914ade766357751953a4981225dbae7e5d371d4824af61b01af70f46ae
\ No newline at end of file
diff --git a/db/schema_migrations/20210807102004 b/db/schema_migrations/20210807102004
new file mode 100644
index 00000000000..e63485435f8
--- /dev/null
+++ b/db/schema_migrations/20210807102004
@@ -0,0 +1 @@
+a2454f9fca3b1cedf7a0f2288b69abe799fe1f9ff4e2fe26d2cadfdddea73a83
\ No newline at end of file
diff --git a/db/schema_migrations/20210816095826 b/db/schema_migrations/20210816095826
new file mode 100644
index 00000000000..079a83fae8f
--- /dev/null
+++ b/db/schema_migrations/20210816095826
@@ -0,0 +1 @@
+d1ad234656f49861d2ca7694d23116e930bba597fca32b1015db698cc23bdc1c
\ No newline at end of file
diff --git a/db/schema_migrations/20210818061156 b/db/schema_migrations/20210818061156
new file mode 100644
index 00000000000..fba5486b2a8
--- /dev/null
+++ b/db/schema_migrations/20210818061156
@@ -0,0 +1 @@
+23becdc9ad558882f4ce42e76391cdc2f760322a09c998082465fcb6d29dfeb5
\ No newline at end of file
diff --git a/db/schema_migrations/20210818115613 b/db/schema_migrations/20210818115613
new file mode 100644
index 00000000000..efe76d3a46a
--- /dev/null
+++ b/db/schema_migrations/20210818115613
@@ -0,0 +1 @@
+9c5114dac05e90c15567bb3274f20f03a82f9e4d73d5c72d89c26bc9d742cc35
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index 70fa133912b..ef88af2a04f 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -12089,7 +12089,11 @@ CREATE TABLE dast_profile_schedules (
     updated_at timestamp with time zone NOT NULL,
     active boolean DEFAULT true NOT NULL,
     cron text NOT NULL,
-    CONSTRAINT check_86531ea73f CHECK ((char_length(cron) <= 255))
+    cadence jsonb DEFAULT '{}'::jsonb NOT NULL,
+    timezone text NOT NULL,
+    starts_at timestamp with time zone DEFAULT now() NOT NULL,
+    CONSTRAINT check_86531ea73f CHECK ((char_length(cron) <= 255)),
+    CONSTRAINT check_be4d1c3af1 CHECK ((char_length(timezone) <= 255))
 );
 
 COMMENT ON TABLE dast_profile_schedules IS '{"owner":"group::dynamic analysis","description":"Scheduling for scans using DAST Profiles"}';
@@ -23812,9 +23816,9 @@ CREATE UNIQUE INDEX index_daily_build_group_report_results_unique_columns ON ci_
 
 CREATE INDEX index_dast_profile_schedules_active_next_run_at ON dast_profile_schedules USING btree (active, next_run_at);
 
-CREATE INDEX index_dast_profile_schedules_on_dast_profile_id ON dast_profile_schedules USING btree (dast_profile_id);
+CREATE UNIQUE INDEX index_dast_profile_schedules_on_dast_profile_id ON dast_profile_schedules USING btree (dast_profile_id);
 
-CREATE UNIQUE INDEX index_dast_profile_schedules_on_project_id_and_dast_profile_id ON dast_profile_schedules USING btree (project_id, dast_profile_id);
+CREATE INDEX index_dast_profile_schedules_on_project_id ON dast_profile_schedules USING btree (project_id);
 
 CREATE INDEX index_dast_profile_schedules_on_user_id ON dast_profile_schedules USING btree (user_id);
 
diff --git a/doc/ci/cloud_deployment/index.md b/doc/ci/cloud_deployment/index.md
index a4b4fd9fd16..25b87366a30 100644
--- a/doc/ci/cloud_deployment/index.md
+++ b/doc/ci/cloud_deployment/index.md
@@ -95,7 +95,7 @@ GitLab provides a series of [CI templates that you can include in your project](
 To automate deployments of your application to your [Amazon Elastic Container Service](https://aws.amazon.com/ecs/) (AWS ECS)
 cluster, you can `include` the `AWS/Deploy-ECS.gitlab-ci.yml` template in your `.gitlab-ci.yml` file.
 
-GitLab also provides [Docker images](https://gitlab.com/gitlab-org/cloud-deploy/-/tree/master/aws) that can be used in your `gitlab-ci.yml` file to simplify working with AWS:
+GitLab also provides [Docker images](https://gitlab.com/gitlab-org/cloud-deploy/-/tree/master/aws) that can be used in your `.gitlab-ci.yml` file to simplify working with AWS:
 
 - Use `registry.gitlab.com/gitlab-org/cloud-deploy/aws-base:latest` to use AWS CLI commands.
 - Use `registry.gitlab.com/gitlab-org/cloud-deploy/aws-ecs:latest` to deploy your application to AWS ECS.
diff --git a/doc/ci/environments/deployment_safety.md b/doc/ci/environments/deployment_safety.md
index 4e34cc7ce38..1b34b520007 100644
--- a/doc/ci/environments/deployment_safety.md
+++ b/doc/ci/environments/deployment_safety.md
@@ -136,10 +136,10 @@ connect the CD project to your development projects by using [multi-project pipe
 
 A `.gitlab-ci.yml` may contain rules to deploy an application to the production server. This
 deployment usually runs automatically after pushing a merge request. To prevent developers from
-changing the `gitlab-ci.yml`, you can define it in a different repository. The configuration can
+changing the `.gitlab-ci.yml`, you can define it in a different repository. The configuration can
 reference a file in another project with a completely different set of permissions (similar to
 [separating a project for deployments](#separate-project-for-deployments)).
-In this scenario, the `gitlab-ci.yml` is publicly accessible, but can only be edited by users with
+In this scenario, the `.gitlab-ci.yml` is publicly accessible, but can only be edited by users with
 appropriate permissions in the other project.
 
 For more information, see [Custom CI/CD configuration path](../pipelines/settings.md#specify-a-custom-cicd-configuration-file).
diff --git a/doc/ci/environments/incremental_rollouts.md b/doc/ci/environments/incremental_rollouts.md
index 9c95ddc6fa0..bc52fd1f16c 100644
--- a/doc/ci/environments/incremental_rollouts.md
+++ b/doc/ci/environments/incremental_rollouts.md
@@ -135,5 +135,5 @@ to switch to a different deployment. Both deployments are running in parallel, a
 can be switched to at any time.
 
 An [example deployable application](https://gitlab.com/gl-release/blue-green-example)
-is available, with a [`gitlab-ci.yml` CI/CD configuration file](https://gitlab.com/gl-release/blue-green-example/blob/master/.gitlab-ci.yml)
+is available, with a [`.gitlab-ci.yml` CI/CD configuration file](https://gitlab.com/gl-release/blue-green-example/blob/master/.gitlab-ci.yml)
 that demonstrates blue-green deployments.
diff --git a/doc/ci/environments/index.md b/doc/ci/environments/index.md
index db9fbec85ae..f0204180d8a 100644
--- a/doc/ci/environments/index.md
+++ b/doc/ci/environments/index.md
@@ -177,7 +177,7 @@ You can find the play button in the pipelines, environments, deployments, and jo
 
 If you are deploying to a [Kubernetes cluster](../../user/project/clusters/index.md)
 associated with your project, you can configure these deployments from your
-`gitlab-ci.yml` file.
+`.gitlab-ci.yml` file.
 
 NOTE:
 Kubernetes configuration isn't supported for Kubernetes clusters that are
diff --git a/doc/ci/environments/protected_environments.md b/doc/ci/environments/protected_environments.md
index 3cd4ebdbdf1..dc2df68e918 100644
--- a/doc/ci/environments/protected_environments.md
+++ b/doc/ci/environments/protected_environments.md
@@ -251,7 +251,7 @@ To protect a group-level environment:
 
 1. Make sure your environments have the correct
    [`deployment_tier`](index.md#deployment-tier-of-environments) defined in
-   `gitlab-ci.yml`.
+   `.gitlab-ci.yml`.
 1. Configure the group-level protected environments via the
    [REST API](../../api/group_protected_environments.md).
 
diff --git a/doc/ci/pipeline_editor/index.md b/doc/ci/pipeline_editor/index.md
index 7132d47d324..10a6d34b076 100644
--- a/doc/ci/pipeline_editor/index.md
+++ b/doc/ci/pipeline_editor/index.md
@@ -56,7 +56,7 @@ reflected in the CI lint. It displays the same results as the existing [CI Lint
 > - [Moved to **CI/CD > Editor**](https://gitlab.com/gitlab-org/gitlab/-/issues/263141) in GitLab 13.7.
 > - [Feature flag removed](https://gitlab.com/gitlab-org/gitlab/-/issues/290117) in GitLab 13.12.
 
-To view a visualization of your `gitlab-ci.yml` configuration, in your project,
+To view a visualization of your `.gitlab-ci.yml` configuration, in your project,
 go to **CI/CD > Editor**, and then select the **Visualize** tab. The
 visualization shows all stages and jobs. Any [`needs`](../yaml/index.md#needs)
 relationships are displayed as lines connecting jobs together, showing the
diff --git a/doc/ci/troubleshooting.md b/doc/ci/troubleshooting.md
index df9b20d1708..827a89fa99c 100644
--- a/doc/ci/troubleshooting.md
+++ b/doc/ci/troubleshooting.md
@@ -29,7 +29,7 @@ with your editor of choice.
 ### Verify syntax with CI Lint tool
 
 The [CI Lint tool](lint.md) is a simple way to ensure the syntax of a CI/CD configuration
-file is correct. Paste in full `gitlab-ci.yml` files or individual jobs configuration,
+file is correct. Paste in full `.gitlab-ci.yml` files or individual jobs configuration,
 to verify the basic syntax.
 
 When a `.gitlab-ci.yml` file is present in a project, you can also use the CI Lint
@@ -49,7 +49,7 @@ and check if their values are what you expect.
 
 ## GitLab CI/CD documentation
 
-The [complete `gitlab-ci.yml` reference](yaml/index.md) contains a full list of
+The [complete `.gitlab-ci.yml` reference](yaml/index.md) contains a full list of
 every keyword you may need to use to configure your pipelines.
 
 You can also look at a large number of pipeline configuration [examples](examples/index.md)
diff --git a/doc/ci/yaml/index.md b/doc/ci/yaml/index.md
index 236911791f1..c307316472c 100644
--- a/doc/ci/yaml/index.md
+++ b/doc/ci/yaml/index.md
@@ -386,7 +386,7 @@ does not block triggered pipelines.
 > [Moved](https://gitlab.com/gitlab-org/gitlab-foss/-/issues/42861) to GitLab Free in 11.4.
 
 Use `include` to include external YAML files in your CI/CD configuration.
-You can break down one long `gitlab-ci.yml` file into multiple files to increase readability,
+You can break down one long `.gitlab-ci.yml` file into multiple files to increase readability,
 or reduce duplication of the same configuration in multiple places.
 
 You can also store template files in a central repository and `include` them in projects.
@@ -4483,7 +4483,7 @@ deploy_review_job:
 
 You can use only integers and strings for the variable's name and value.
 
-If you define a variable at the top level of the `gitlab-ci.yml` file, it is global,
+If you define a variable at the top level of the `.gitlab-ci.yml` file, it is global,
 meaning it applies to all jobs. If you define a variable in a job, it's available
 to that job only.
 
diff --git a/doc/development/changelog.md b/doc/development/changelog.md
index c96fe2c18c1..be46d61eb4c 100644
--- a/doc/development/changelog.md
+++ b/doc/development/changelog.md
@@ -98,6 +98,7 @@ EE: true
   database records created during Cycle Analytics model spec."
 - _Any_ contribution from a community member, no matter how small, **may** have
   a changelog entry regardless of these guidelines if the contributor wants one.
+- Any [GLEX experiment](experiment_guide/gitlab_experiment.md) changes **should not** have a changelog entry.
 - [Removing](feature_flags/#changelog) a feature flag, when the new code is retained.
 
 ## Writing good changelog entries
diff --git a/doc/user/application_security/dast/index.md b/doc/user/application_security/dast/index.md
index 9a83b077f4e..e2f15e3362f 100644
--- a/doc/user/application_security/dast/index.md
+++ b/doc/user/application_security/dast/index.md
@@ -74,7 +74,7 @@ If your application utilizes Docker containers you have another option for deplo
 After your Docker build job completes and your image is added to your container registry, you can use the image as a
 [service](../../../ci/services/index.md).
 
-By using service definitions in your `gitlab-ci.yml`, you can scan services with the DAST analyzer.
+By using service definitions in your `.gitlab-ci.yml`, you can scan services with the DAST analyzer.
 
 ```yaml
 stages:
@@ -1307,9 +1307,9 @@ dast:
 By default, DAST downloads all artifacts defined by previous jobs in the pipeline. If
 your DAST job does not rely on `environment_url.txt` to define the URL under test or any other files created
 in previous jobs, we recommend you don't download artifacts. To avoid downloading
-artifacts, add the following to your `gitlab-ci.yml` file:
+artifacts, add the following to your `.gitlab-ci.yml` file:
 
-```json
+```yaml
 dast:
    dependencies: []
 ```
diff --git a/doc/user/application_security/offline_deployments/index.md b/doc/user/application_security/offline_deployments/index.md
index 3bf9d85cd0b..cdf54070d69 100644
--- a/doc/user/application_security/offline_deployments/index.md
+++ b/doc/user/application_security/offline_deployments/index.md
@@ -111,7 +111,7 @@ example of such a transfer:
 GitLab provides a [vendored template](../../../ci/yaml/index.md#includetemplate)
 to ease this process.
 
-This template should be used in a new, empty project, with a `gitlab-ci.yml` file containing:
+This template should be used in a new, empty project, with a `.gitlab-ci.yml` file containing:
 
 ```yaml
 include:
diff --git a/doc/user/project/clusters/serverless/index.md b/doc/user/project/clusters/serverless/index.md
index ec22f71157f..ca6b2ba686e 100644
--- a/doc/user/project/clusters/serverless/index.md
+++ b/doc/user/project/clusters/serverless/index.md
@@ -316,7 +316,7 @@ The optional `runtime` parameter can refer to one of the following runtime alias
 | `openfaas/classic/python3` | OpenFaaS |
 | `openfaas/classic/ruby` | OpenFaaS |
 
-After the `gitlab-ci.yml` template has been added and the `serverless.yml` file
+After the `.gitlab-ci.yml` template has been added and the `serverless.yml` file
 has been created, pushing a commit to your project results in a CI pipeline
 being executed which deploys each function as a Knative service. After the
 deploy stage has finished, additional details for the function display
diff --git a/doc/user/project/merge_requests/test_coverage_visualization.md b/doc/user/project/merge_requests/test_coverage_visualization.md
index ce8bfa2d054..11360809ad7 100644
--- a/doc/user/project/merge_requests/test_coverage_visualization.md
+++ b/doc/user/project/merge_requests/test_coverage_visualization.md
@@ -129,7 +129,7 @@ The `source` is ignored if the path does not follow this pattern. The parser ass
 
 ### JavaScript example
 
-The following [`gitlab-ci.yml`](../../../ci/yaml/index.md) example uses [Mocha](https://mochajs.org/)
+The following [`.gitlab-ci.yml`](../../../ci/yaml/index.md) example uses [Mocha](https://mochajs.org/)
 JavaScript testing and [nyc](https://github.com/istanbuljs/nyc) coverage-tooling to
 generate the coverage artifact:
 
@@ -147,7 +147,7 @@ test:
 
 #### Maven example
 
-The following [`gitlab-ci.yml`](../../../ci/yaml/index.md) example for Java or Kotlin uses [Maven](https://maven.apache.org/)
+The following [`.gitlab-ci.yml`](../../../ci/yaml/index.md) example for Java or Kotlin uses [Maven](https://maven.apache.org/)
 to build the project and [JaCoCo](https://www.eclemma.org/jacoco/) coverage-tooling to
 generate the coverage artifact.
 You can check the [Docker image configuration and scripts](https://gitlab.com/haynes/jacoco2cobertura) if you want to build your own image.
@@ -185,7 +185,7 @@ coverage-jdk11:
 
 #### Gradle example
 
-The following [`gitlab-ci.yml`](../../../ci/yaml/index.md) example for Java or Kotlin uses [Gradle](https://gradle.org/)
+The following [`.gitlab-ci.yml`](../../../ci/yaml/index.md) example for Java or Kotlin uses [Gradle](https://gradle.org/)
 to build the project and [JaCoCo](https://www.eclemma.org/jacoco/) coverage-tooling to
 generate the coverage artifact.
 You can check the [Docker image configuration and scripts](https://gitlab.com/haynes/jacoco2cobertura) if you want to build your own image.
@@ -223,7 +223,7 @@ coverage-jdk11:
 
 ### Python example
 
-The following [`gitlab-ci.yml`](../../../ci/yaml/index.md) example for Python uses [pytest-cov](https://pytest-cov.readthedocs.io/) to collect test coverage data and [coverage.py](https://coverage.readthedocs.io/) to convert the report to use full relative paths.
+The following [`.gitlab-ci.yml`](../../../ci/yaml/index.md) example for Python uses [pytest-cov](https://pytest-cov.readthedocs.io/) to collect test coverage data and [coverage.py](https://coverage.readthedocs.io/) to convert the report to use full relative paths.
 The information isn't displayed without the conversion.
 
 This example assumes that the code for your package is in `src/` and your tests are in `tests.py`:
@@ -243,7 +243,7 @@ run tests:
 
 ### C/C++ example
 
-The following [`gitlab-ci.yml`](../../../ci/yaml/index.md) example for C/C++ with
+The following [`.gitlab-ci.yml`](../../../ci/yaml/index.md) example for C/C++ with
 `gcc` or `g++` as the compiler uses [`gcovr`](https://gcovr.com/en/stable/) to generate the coverage
 output file in Cobertura XML format.
 
diff --git a/doc/user/project/pages/index.md b/doc/user/project/pages/index.md
index 5a688fbb485..385a4fafa7d 100644
--- a/doc/user/project/pages/index.md
+++ b/doc/user/project/pages/index.md
@@ -46,7 +46,7 @@ To create a GitLab Pages website:
 
 | Document | Description |
 | -------- | ----------- |
-| [Create a `gitlab-ci.yml` file from scratch](getting_started/pages_from_scratch.md)    | Add a Pages site to an existing project. Learn how to create and configure your own CI file. |
+| [Create a `.gitlab-ci.yml` file from scratch](getting_started/pages_from_scratch.md)    | Add a Pages site to an existing project. Learn how to create and configure your own CI file. |
 | [Use a `.gitlab-ci.yml` template](getting_started/pages_ci_cd_template.md) | Add a Pages site to an existing project. Use a pre-populated CI template file. |
 | [Fork a sample project](getting_started/pages_forked_sample_project.md)               | Create a new project with Pages already configured by forking a sample project. |
 | [Use a project template](getting_started/pages_new_project_template.md)       | Create a new project with Pages already configured by using a template. |
diff --git a/doc/user/project/releases/img/deploy_freeze_v13_10.png b/doc/user/project/releases/img/deploy_freeze_v13_10.png
deleted file mode 100644
index 5c4b2d983dd392a33fbfbbf77aea27eebe8d8e1e..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15902
zcmb_@Wmp_rvn~k`2<~nn5CQ}S32wnPxO;Hd!8O6%-8I48-QC?C1|4K@$Xv3&eeSo<
zch3EH`{}2rd#!rwt*Wk7Yi4?Nh`g*gDiRSA3=9maq=bkf3=Av?2IiGABJ4|x@6rCn
z%LkmP;8#Hyn5rn`r*H5t*RLEE#f4zX$4L%hU|ye_E2{(5zshhM+FCPyGqN=>W^}c-
zdy#^H;dSMHIkh$hexq=;wz6^LcIBh|OM?65{7*B0lHxBBpd}xr`d4`hVOs}d3O2^i
zj7*gLNE8$lybeYt+=?P%f5Ts{_$bYQKs#;#z{SOd(S?=K*1;6O%*Dk8U}6EVurRzx
zFgUu|0Kd61*f_rbmy-X|BVz1m=wNOKG`F>(_@nomfvppekCO5a(f{54Whc<w<ljs-
zj(@xL;vnEp4}h7G3Glzcj9tzDAFw|?|APJH*T3j^|0v^DG<LMLa{6PHij6stpN01?
zj{j`_w~_xs$vK!Czqt7a#?SmW<ezQ-DKBhmZRcR@==e|hf42Rnyu6t$(DvmPIhY$t
z+5n9mUci5|{g;9NZ;5~C`r|jZyt%8fm4=A9wXw}#{H&jucme-w&wnCS9E}}btb73i
z`IQVEj9(PI*!4H~pPl~+{EJfk-;~TuO#hAZA6<V#c>#ZN;vYHkuLS(7^(6!Ok$3_B
zH=Fs9QW!cRFCzs;UPf6I3WZ{rbp!?m-b0};G$tk{@ooF(=jY^3BP%N_Q0RTf;(13$
z2NRQ3#mXJ@dE<V)e*F$=1pqiOF)dz0t;*KxEt!8U-9YcwZ+=6W)a#*7d+Rk;Oib#~
zXDIadB@>e)6nb+Bg&sXa%gQRYo}fQWOs>}|p|^|bOaQl{g^gMubh|MsGV0>|(D%gv
zQ>TSH=xVj!@7vpk^}Bi}Cg{<?ep@5};O|(q4t+i`F^<zP?|fLR0H~MU-#u0**dCr;
zl9Q90nELE&Z$mDx8o!$;r;Z=@Cl4OK7&X_n_ne<sXkub{yIA5|vlj7US=m;li%DN!
z|M0>#z^OjYj%nl^IthWMjGU%rq&NMHVX~~Zi>t|;hP2mY*Vk07msvpWZnhhJtwQoa
z7mrZL-sAJrVrSvh%=Gi=JR@WB#YA?w#wP$UJ>Jah;NYO7zJa&uqQo3fGJ0g}TWwji
z(30spxP2E}I=o!sVq#ZzehYOnHHAJsY|eEz&K#*1Ecj-(hO}<`_<8}<Q^$|ayHf0K
zxBBheeCCdy^9MnXdt2by`l<RPYkS-J?uq#NX)>o7b+7czwYl!$)q!Zh;uAD4z-GK<
z?qa#Eq^|#9Adks1419QWG*PxVRDW@{VC@?_k*V3++W@_sfI?1c$5!Tl+O+sF?(Upt
zGck>%+WhKRSe{%~k8Fx9tXteXWl9*8ave2`?C$F7Dv1dR3LE}uZ4%jg!o>8`B6p&^
zqZ?pZ7Li=Oa(Wf%+8OU@ZJ*wo-nu%vegOz>!7%Hqo&le&@1#|>4Yrm$Sa%n=Fm>NS
zNn&<KCP$*fJdDl!iak2IqqUQPYE0?@#|zWNyT5sZr`@d$^9m-1OJXSecPmr+*87Gm
z)tNNN$-iqeMXNLV#Qpr?X5LjjgJVCCBS8jm9rlfgW>mLi&E5)JeZu`dTO6Xs#AHV9
zzQ%9XVKZ<=POjP2J~30=<D~CIPHv>bWEnwD{>@mITs%`-ODRds0BRP95eP-XwvC5@
zp@5MT5ma_vKFP3@!O_4Qumus*InTfX^KuuX&XaS*@%>)cW9SY6MNSnyAcNot<?Rua
zw+Xa0R)>P`>hXJ-FkmS+9}M6LhfJ#TC{svL>6iT15WShFHqVlbvF{Do<A!Xi57xEj
z&@-EH((uN?!Y)p8MOrGi^UzF38x=Lo9~6lHW4{XF<5tVIXassxiedIbC*h03(T;Hh
zpCW#LnL8ZN6vcpE9h7@#SU_4Pf4&di*gK#Y5k?({nX_Xj`9aAnCypWD2r3VRQ8Bm6
zkru~*z7|;mqXhpJQVap)!lp-Gw^W*7_D1Qyb^79K!HrOW09RQ{Ziy%OBnyfS&7Q=B
z3y7pZL?RW8zNZ78iidHsYRA`%nhBN*K;3#+tW@AG#B&CSe(Bd*a@QzJMSaziM~u&j
z8c-F*@WF9Ew<tcBU@Z$@kRvCg5_)?>@FJh00J5L()7`juSc7EC4R<gv2$3_k>1dk4
zX4qr|OfncNcaW~&2%6xzW25H@Kt|2jGD7KBm==U40sxLIu11ywN>*tzZs%xP5Fk^K
z6&+IX$__PT1BElgN$<zp)ienn%#(p#^olOvJ0G~Y?WAP7i)SlfN}<wUW7zF^%FGlP
z`LQ}at|#{XtEjB0FqJ~6b-#y84E#IDjny-15uYE~Euz<nvi5yj6W#+FS@i%B?Q?iE
zx)pCYcpk%=u;AbxJ&6)HVve~B{Sv$BNL=a^H%-PBbimatasN(D@29%Z(30n+(MNzH
zJ5{2Z=WslQltMVBQ9H61DqnB+?d7^m(X|)1>LDI?aF(vyN45eKw5fQy5a@3$@=s(r
zc{&zvGe~lP%uR*iW2AT*4H!G@8X%4YF6pIiuxqC*_U<HEWq(+_9(l)x^^i4ZTg)=`
zWj@=w4xT@z*5+}=`|~P7IV7Xs$j|$0GH%6z^{X8c==4Hz`BBKIZ7F3GU?D#;lL$V>
z{HSD=DGa9~Y6zRmNW|vodr4F?ws7+$W#jT!hqf3(dVOu>dvA%IV5tQtsfNUEMK9`d
zf+lTQud3SgZj8lzu{%1$WWwM!Yy`w_OjxJVW@cu3x^{(C6N|FcxfjiT+eir{@DRbJ
zfQ1gqwI{zJ_&oQzOW{3S1;xg*ITt4sfWOxF*zfVhLTUw%I8zSWrmX@p;WgiYEtgH$
z<2Do@GEZuko=Axpf$wZy)71wG=G&s~9XF1A-#D?<LrHpGlc?cpLh*E=iK|K}`y`W-
zH8@w9#n)>Um}wAXf_h96Y&^A~w=Ma7)F*2Fml=EcQ?kUQan1nh(@C$KJ4UnYCl4WU
z^4-o^^)Fw1-!UkOMv>V7^{fnq8mf=CnZQO=_z#%OOcU<Dx5;2VDel#+dT~&;0hjSX
zj2j5+_A_=f;lmpbg4+$2rc{QfmPSUbiMK}Y{Le<Cq^I{bLS8j8gify5PWf=MegPFK
zF{L@Zw)Ux-I%~Yd`#D3nR;mg@%XDsAP;p8OygJ_2?$!ob-r12(C9>xDaYw-uzxzxM
z0IF&Sw-9)>^2{AHtX7^22m<L@%!wQ%!(mdr18Cq`paI??dK#7!XA#o=+1f|5^g<k-
zbdr|I;v005rYN`DHa*ibH|-*LubvJgrG!jv*j~lAR7`ByeW4p8y%p=eI@gY%g!EO5
zZ;Zaat7V_4yL~I<Q#-P?2*1Z<slyGJMj5HuLnIsKX57DAG08&H-W?~MKr&iK=3|V(
zi?46XXN>l|)#qQMc(W5(M|>oWOpDEJZ8O4pxQyC^YW?0kCCSX*oZ(bqkDJ@PuIfAM
zR_WU!J`dyfN*`M^&O&&^<#2D?1LVsOWzYOMWa)r|o2M8zS}fyu;-r|<Xk3pj_)|iq
z8)K(R0i}i=0t#R0#((->W)|WHM2`C8T#c9j!`I%bAy?B6#%q>QKzbAzKGJ8Qj)|`P
zDnhPyfh}M_r)JO67*hom*3ihFFS@b1)E1VD;+{8U=;@XKh;prDB9Zw>Rxj+<e7^!=
zczIo<XVgGeYg@#69R?W)H6^;r28Q+m$crr%c(`oheL}JFS&l$|cu4fw?fN%_4L=(A
zY8ZdC`+M;jUb{C>EkKR>xIHho8;()ez>USYT!y{Ns50G!sdwo33sVWRD`>GFh5+A=
z8Wm+5W6;-VQ@)fcTKzCxJ&o!2BGn<6<Ch;s+Hq?!2&X{)0-CALLhm1&%F-;K4YAZp
zG#zb<QnjzJ0*o073geIq8!p`u?r)eoedK@_KWS<sRdmLi7q)-uVBWXG%b0ZMZ=JvS
z0e_GGnb$$h9jWGHiEqR$HLBZ7_4$t6_UyF3%IDf`<t)dQuOkxPq+vL?4BUVwSFG)+
zi}_m*0P{>uE)#lU7`3p1c9VMz%68?E^p1^R%+drw8)!xmyO?u=Vrgeh>(9SkPE_Jz
z?&{z+!(bhmlTmd++kPbVVC?GPbDPs!M5cdeXoyhVF0(?s97iS<#F+Ds1lWCvc0+BC
zeJh9ua~CTLrvbBR8TVpVBjk%(hb-HJ&UerxX72`*uvi)Uvw9igb`-yk%4F92V1fNZ
z?j(0QmqR82aSS-Y|G7tNRI|_UEosuW$91f6c9k9)T$hr4%sYL`1BVZ>=Mp6y<(aTc
zxnr<hk@1zdk9>^+7<Yf~pf&x?X5*4cdimUTyP`MnaR$>T`N1}9ITj2%S5imla%J80
z$p+e3dQ@_2!rP(=_{5Z9iOp9*zwV}H#<f}rY}F|J)@bR>=0iW$kSEWssKgbfXo>!n
zzhml{SzT!<T3P8S-(y#a&v;<nA*nx!Wvg=|{?l)kh$0tJEt7{pWJdr{T@n&Ui!4=e
zZ9A{UCVO>W$+14h(cLmdd{6w{x#Joe@u$_oMH$n2^jy-TwjPr<>txR`By?|k(+?GU
z*#>uwe}y5!V?4h)CS$}@!DNYs)z(TXP32)y@^(=CtMvMf@i?|LbBWS7qt$XaVq^3C
zBg4YA!Qqw|=nme26*X84eSAIV`%I;HT|M~*(hjPdSDAWyB~aFRg?^D|ysnO2(+%6d
z-6gmlg~*M;tNoU;VD5zK8$j^6NNYwT<JFo=$aew1wb%*r5wfStovVWhVIbYao1Ogl
z>36B!g?+8Tun1SB7a0TZev{`ukau=lzR!qn=aki#E<E~}RoAC!K)+0Lt3TAdDq*5l
z^iGmiEuxnHGi6k&_ilxk`U0vBj@7%8>_o7GYD52mn683`tcC964=jvkPn`9j)3$H#
zfcKN}M`m7vK_$V8`Im97k<uPSk!<$@Z~fH>P7+%IPnb6heh9s3bQWU2bVVfh$C0UX
zOAC3qk$%&ZaAq;eN_}fF&FecrY|0e8b_%JUl-8Y0q>DAmCPxnnt-p71VZm9x|N5p3
zO#eL)5)U^brxf=yFitTveB0V1b1baC;<@cZ$)jUI?p}`znDf@3--+OIhutoH>A5mZ
zD&oQ`g3}H<0aPDozcTx-EO^a$JCyqgJEFWY%Uhhg^xN=K6&?KY`;xQ{a*C2oLef(K
zR-rJ%RqIkOlf3JL50;O4Vp;Vv<=K_O?KHlMdZ`JImqj4~;Iq)w4RxF6E26MA=b7yi
zfO+``*Sg>O?XIxIA?nr@BL@Igsx%fE1Y(L|+YtVSNIY%Q?<VFiQ@?c^(a4v{W0dCa
zA8X$F<Vj!qVixYXZHZ~Fwjw{wsnixQ`jykH6Ppj$An>7#&u>g5Wzm(CjxB`7H&joP
z!7|&)iPT?v!;4Vp!`3*~QTIPkc;l7(o~t8ksY{kQ;R5NGQVK7s6jYTHgC-NR)lS^z
z9qysVU`@k3?(%ad7pmQYV;yk6KFZ^-2zs9SDirTh9b%qYI;yX3h*q%dRT0=S7s3?c
zbQJ#BN>b87OriEG+42p%;r6bCv=-B`6j)MUBt)cyh&A5fN<^d<$K>9K|E9Q3XLURq
zUkkGQ*r)I8ZRd3`p6<BMb2WCXJAQ<xf%AS!g_R&uyJ~+~<$@|qx#4rfN7@_n5xa|I
z5#Kgs6I!h=pX-&1hj23%ig&Z_3<+UShL7NCVmoC9W|Zhj;BVg9KZNomqrl5@n3U)x
z174}kg?2mT<sNJto)8z6U4@Es{#K_hOpB#(I!5%P215di5S%PK?@`&me0??6Sh+Pz
zT1rsp-kI)fOPWkeT51)L#ujwtmtuEnj+1+3SJrd#=_x#&?8slZi@ww8j1;%=yIJC6
z1_|bqGsB`hy8F@q!}jGDZ!IyLjWF12p)2DUPP@LfNsB|6aD0iSrAPWIDFh3}pV|s$
zS?sT6TR$$yQ#Tp{Vo;&uk|6PCtP5@Rv&ArH69Qvt{B1eL1iYQhVj-OF;W6FM0vR>b
zDoL9am5C0SGd1$%-yc`>TlsKCXA=mx%<pc|?Q7J2Efi{&79>B|d<(&6$I$XiVLZps
zj<aVw-ua4PF?ccGRoDOK)}7Fg{_^S_XyPX43(Lp?L-ofuIjiBPNRdd<#sW<dqQzR0
zg0umNuVnMdU;;U;q><4OrN*X2NKBNdrY_XV(coDgT?&bB%87_m%^OMd*U`Eu@hh5Q
zLA%A(TSO}|a_?*fSqkd!51DxQ-%`U^P}7optEQ4^WA%aSW2dk{GP7xan~NFpP2d-C
zu^=n10gsS(NoUr+7v?ftNuPF1@Ae&GiqR5(W=%?4PXG^HUD&97>E}qJ4tT>ZF5<^V
zLT5^Gx$)rhXYCV#u+MtBLFPY6#ZcQ|nRLa_)c47CO<q~B{4|WbMfb*$NHoO{nzrKP
zCDK@m^*biI@_uO22EBW5$h~aMOuEf+ouc**QY(HV%x)@OJpZmL$vzW1sdp2p7@Y}U
zJw7|@V-Ky`xOSS21~Qu1<|fI-ZELHh_;=*bL}B0hcdSb!fjDqH7*x%=f%L@(WiykL
zeUV0q6<RojoPAcQKk^9h{M!x-C7ebak)@bJB2ho&(rf*CG$}gWQKDdMQ6_^6m(UL-
zadUIayq`vf;rePrA*#!xxXY{*t88o|JjGEuwwHYxm_Z%z{)A;>Md+xY*F@+gL&r>e
z_D(FiFvO;tKi$$vLa2K5wK6gfXT^p`U(Nke3E45-H;<O0X5vk06Q+6iq>%+z6@~v6
z%=1_`gFSQWit{SqtKI{Gs?YJvm+FF-sA-S9o~4pyO`49%DRZ!BH<{=;KhbF`Ql)W6
z!g^jRT&hXawF{Z4*=i<6n3B%1qC4)x<;Bw3kFle459NJ5lQ3wLT!^VNSEyN-DB4xm
zQy?Y_bH+|ONTJpxfI0p_um)$UjzwF6&$hrFR{}_@*D#oy9L$*Zt-GrHLTRhaFy?5U
zceGdZGv?a+idfJzo;B}9U6@>^&E+6rMn5S`;V*3C8!16~GV?GLd9?`8<i-1tOoNA^
z@z`!m=OS1M9WS%^AR#O>8-8M0kp=@ZdadR>zGz7in%?*_AZ#i~O2mn#iqjiU7NQ-*
zjVg#Cp%W<vqz?A7;#Gk*Ev8_mfrgQdd$#9Kihb)~MX+>WEwFy}<=W{Mbo}Z{>A+a<
zL#@X<sXleE*VwwFE=}nUJ{y(GNy=<e-rqz~uV!EtT5^!}MqX&9O*h4ALrj$HuliD5
z?!WF>yV-3~B~d-w{}Pr@w-(8VT9cGeY_Z_pqX;EOEp7&pJS@^-JJAo^8V(<$M=zbi
zK81E!*}UmtK4|<tB8gXIbEvN*nM0Ur>YM?hZfs7cpW9@twJOqV-f;t|CQn_s{EFf?
z#p1(HYSlQyX~rA5Ptx84TOeYR>S2pv=tvrTVCt3u>hM{;u@bZ3XIR6XT=mQVeIr;7
z-ybh|A1Dc|SBYJ+e#afQV|ux#3POMmTKuVG`8=~2g1{T*c9$ShDSz<6b}VV?pl<d>
z36=gS%)X^c9EeChj`MmZElD)@EO~L7gUZ56yxOIlKz=|J*Fbukk)P5qmw2GJ{YYn<
z&?m{T5?uU?o*1nZB+c8ibi{co;=<5bc9{&?3{VQG=p<5Cdp(TKo3s~*a{B~qW1ll%
zxT~*w<MHhv)J9IL`N#)e%tzlY4QF~L2!X2_dwe07al}s4dmSw?JoN9v)em1_@e(v-
z8*$NCTE+Eg-M9jXha7MN2U7%K$9SDtu4s|k=I5p3uwo6sI)F*WgfaVi?cT^TH5GcM
zIUwbOpq*6Q!wFQurLe|oQ`hFSp?+Xd!m0_tM8o9EUpK?7V0ROV&>qKp2_Lq|LwtAW
zJ5Zl}Sjc$2*n93U){scq27Gu{w%oL~JoQ$jg;c~`dh!*X&dZA2JMVHtA?y{FMdYG0
zrI6#pPL*Sr@Fd>uJbuF07MCAPy^DZbSOSm^B^9RdGkaw42e(nf4Qdh71QA{iUqeQ$
zHT0%!K6MfuTuLU~iC^#77CF;a=i?b#lSXsLJ*l`=b+Z_H;XRvh6%CBm;0}KCk}LC>
z6n(8zM~>un4TYoz4d<{0BF{&7R3FB7ez^ju77XI*p?#8>wwh-trWD}N#WXN|AFqF(
zDvH;4V_vX|66j}hn^J$y&{nOenEiDdsD@QX2xYdG^tuwCxEW$Vq5~DFctF_nUOh3D
zRN%v5q=Y0W3MB4Z{}TNkoA^6RB7aUbhzQC~@O4=mL{phUJ(WsqDjvY3fmOK9<bAc)
zMx%ec_QQgDviQDmOAOHyTbSFjmlBEDoPLdyF96tQaL)0Pio3u^`7}vjb*P7U2u4@`
z8>h%Y4<P8<@PLMI0PIaLW;@slXFG1~9RLQd>p}mo>Q$dkly(&NE}JaEh%w(&;j)yP
ze$PqQc-CsUOeJtHKpGO@WBaXm+CqGW#a0Y>Ww<v$r+;L4kNI^Dr^F<=U+n=H<5?n|
zf{)vT`gQ1XcFE%P_@|Zk#u`qVtJ{y@tkT|ioWt|)f_~#uhHO5q6p#IP&i!=b9EmVl
z6%L>9AHq))rY=njQr5=s$1<ZY+N-{Y{=BexYJ<mCee9CeumSJ6UpU|4@7-+q$o$e6
zs{~f;-P)jAyYKQ_WSj#b1BWkiuk_f;N;V$DU}K<;yALTLb(WhwZ4K)_gH_gRm6Wn=
zA<OVGUrvX@N1=12LFCtWNW7WbwEulS^pPmD{JA<&ThE5(#@jdZd~hHCn6WJr_0zQ(
zY<}uR^RUbbx_}IR&~uFz8Ex4~4rVdmf*)BgMfM@Wqp=@;mU9UmAr<8hf2$cU5is?I
zCb*w?kU8*e)waijk&)zvs{!Q$+IZuF*9j<MFQiJqG{;+k{o#2G8zJ2uJy)CmyomBr
ztClAsWbop)_WXx}5JO;}WcYX=m(IjYU8)T?-X~XGkNGOPH-1si@7P<=8Pw13bTCNm
zLvZiygk5cW%z~H&!|<G{DIXAgchGhT-uH!qhw38^uBx2$1RSG0)ZhO03EniUB2(%x
z!)tJsqp))!+`G(?+7iTy;E4(`>)$~3s@()axrU9HBMF~xdrxlQ1$v}6I`!CWChjTm
zrWzszA?Oe7>aH9j;@SqD{(=|q3~<uKu(f6iG&(WahD1IT10Y%xPdVe27hlIeWqI53
zEXJH5uY@lsixh*x5Si?Zgub(WxJTe1p_&SB{`j6%F)N|#L3^V!^uzTHWE)KC>~UM*
z{YiJjilFMpX9F1l+`!4hCKThJ-Ea!jB2g&IWdXL~6c5*XrtD-{EPMJ+*Vvp{QNND^
zj#$qJY^kR>bhW(Sg#1>#y>uz7yAi(Ns>VV`2)WEce@L`#ts-~i2Ij6Tv<xvqf1$KW
z+!Q*FiV`Nr*muE1*jg1~t=|g0!!bV}xci~qBma)^bcRti1jZ!!J4@ZKIJ&5vFU=$*
z4^zKkS103VDL&u~PGM!l<}ltn0P@EagcKc;2ZHZ1KM6*CGVd2La)h{MeG_SbHuG))
zqIGUGgu0j3`bYL?hM^kHzkBcfJBFYMSC>ocm;R)Vn`DLo-ZyM`bUYp4r!3Wnoc?Yj
z>-s(<5BIveh+<r%M-J!FR@(L_lk*$t?CZRNyjL7oH=B&1+aSfZI-2*dISKC-lStpD
zqcG4e5GI<%y%BAS@1lQO-9=Z2->8sjcN4qBGB=8Wf-bsE5d!@Neljefo8a_bx33{S
z6AQDJJSDREzKnuIAA|ZWiN25{T1Z?qEg@c(_A+RVG9a7fjmaw#Ka9?|7J{#4KEu~B
z!6(8`GY_CH{s0<E#{|yB<0#8euoX>GBnsU8c3;2B^pJbS%Cvg+C|SCCRdV2Uc7NkF
z(RAQhZmbh;B8CZMI99^y{6d{|%|W(w|C8k>I-&e@qum3>G)AEu%BYXU_TW;^P>*w_
zBKp(vLw|2}2gXkPpgp^svv8p6lAerU1uh`!{2L#1V-DP8nXy%YkBi_kq!O~c7@}`C
zJ$IcImSB+98@z$`aMuZTxuW1&$setxP&>0l=E6@%jya-)i-?1j_P&To&%p^ryN5SN
zUB{PL`Sy#pG7F$!9`^DNg}fXqnM6+SBzNCM9#VR%SFX@ES_jA?ZP6@o=ELu^@NWtH
zQc}~rAMW{vY|YcCheAMSk$aDjH+-I%30CHo8Tb~aS{0%m4pM~ltIF8M)C<d+d#-_U
zoQzmr3=dLhdcV#!YuThn1^5fY5_FDFnN1%I2QpNmBI7z@G;=H`qQZFX5lJ(6U4m=G
z`E=scId$WyTbF5eufPu&(x1{l>ou?3Fr=$W4^KrbuorzwQq&z9x!j`FVbKkAbh1w@
z)HGp>8;-_`rkbi_q+`u1bHH&3{jh~z=6s2FRV+(*b6!Rjk^fF+;!}JfL6O#yXS6J$
z1Vb_g1a(c^RXeJ&=jx%v0aWg{u7HUm+tl6;x_1&MW*ld;91A5y$9tB}4AK$=G%IvB
zOm}lAdpNZXHgbRr^llKp<wO&D7ij-zna7QBR0t(3Vx)|Wb9<a&^|rtXwNTdE)Fj$_
z_XJz!y~4^khG!gG6kSM&o?qaNbJY9xVM(QmG%91dnkdwzQ(Ur$ElSc`Zuy6GA{9+;
z3r`}L^&Kdtp5BuakHJOu60Op2jNW)mmXpI>l#2H&eA_S~slZqZFS{-4PKS}BZBu$j
z%0zYm)piQl+?J=jL!m)vq5VrZd7n?6=L60)#KT}~n$<1mJ$@Dmr6}LgpP2HJjMYCQ
zi(5zzILRMM8a2gJTe4G!)n1>IUzn`1l%zN#gB^vaBtOrKTAS3WME1be%p}0cM}TP5
z!yYAwB!xeU`i}1k@R+_%Lif}kf0FzYP95F_%Ipw9z_jq~9Q1dOkLx6U2LVd^%!b{T
z<@nfrSHI|Ig9bk`Pt&6*^8RAc$qI678KmYK_wgux)O^0;3Sx_@N_$4SYs8`Vb)j^&
z7l?WC`Pia0fnJlri7UA>)xA@ncfQxoMkx;d;wD@Ol;9U#u(%s++>6YLRkS3Fd&;bZ
zU-=~Yc=#tbWf0xJLZ-KRf|hV;z!3>SZUEKc{Sdb~1KD~c_e5+9KoT^XRrqvb$Vqz1
zyQ<Jh5>T=8_CoYszEhqmXgRFg{M|Q4iL4SDJVw46sZ;)<+x)l*EzY8DW;AJNw|QOu
zbLOEW3rI?rwgMIuJ10`IR@^uS9Em0pT!<Ah)R{FA)7m3&dm71#a_>Zau(Px$mwa!I
zXgnnp=f+X<FxmL!?K8I_$<>>--w*B?;u~aMiYIfX9T<XoWGFUiy0!X|`lglk&9;*q
zK(z~jSCpXVuH9^oH@X=$opnDCN7VY8%qZ#iVw$ZfiE*fGCmF)t4e41cd`LkuPrdk}
zc_eN+Kl{Tg@o>`c=V#TP!S>q$^;luGzmrVu9F$7EmOXP8ejdulCkQw^Iazh1#4;V=
zZV{QRfwXFOWZO3Q=?*TOKy*bWEH&e8f7p0@D9h$q*<W_hZ?QY_Fz+wPj+6eJV<$yl
z)W9dd6|Xscm02XY+q+F%4`o+OcN!@**)Nozl#Dei4O<>HD<R1Uu(f!b{r15(R!o=Y
zrRtd`hUA<DPfE6@2n=<!v<p^1-HD=rd;%3Vl^zhynLGgYjMOep%3{B_<5rpdk%HW$
zK>Iy0SH+=&OUk1BDJ3psLJ#Q2c<UrYVf};PfREEO&+cs?2Z<TQL9XXx5u@s4gis9s
z4s)W|!(!+Un=qCkWr>+^glR<qsdqak{@KLV)EcM_Lkhp5{+T%l4NIgex02{n`(ksq
zF0~0GL)FqeJ}cR3L-y^Fes{zj90M8!L~Q2q1iTFCn)*)>&A81s_a8t}Xgv8Ipx*8R
z)B4~Y6|}X8Ke4&A`@C`k_*1mH-K^t2fP_q%RG*4e$e!7~9atV}jGK*BS(QG5&?K=U
zoD|Xs6ZGVV9{k~$#;_ql2=SjU9pVC+ybSb@EuotSM^D#BVGiN@Z@ijuAq3!2x4{LK
zbj$+~t8Pn`Q@`$19652bTBaSKh=9oI2&(TC$SK~@ZX({W;?{w);!|lTYk$5QUWjKO
z(av1he5b=~|3Uu;882(yS(^biq{ee2pviuBrL{=Ikagnn`T3Z@fpM5LzqwHmz=0$>
zC3}dU&o&!W$&;11qi<iTo-4BxHv1CGShWaXD4IZvn}dYV<j_xvf=paa79hyO&@(<h
z-%SSMF^$J-BI!UmeYV&xSIxFBmb749<l!PiPM<c_mui`NfTnBMfcDTjb!s&;$ypL#
za~EdJx_y$>WPS8w)xUEow7>_YmcZwI-46@fA7o4TAM>MjTLX52W|(zP>74Fjq-V7_
z-8fUNAMqn+V<W4iVy&l<+<(!Y4`IL3spePZtPN998d)_dRGf^UQfRpv9R2n5Lvuc<
z!B(MtUU)b=ijF{j`r~jJoByHS={REeYQFJ+AOHpizxK~sfb<`>Hp;MwY8z%hbm{%b
zR%0-EM&7SZmQ}PP_z)`<t<8}h1IiELY(um4BKzhwvMQca<+4WJmsL!4V0h^5H*NK6
zbA6r^zTJ!rV`lpj?egW~*^PaNX53Hj<HdF$vZoI@)3_)b-h$H>s&b&X0(zNz{EqzA
zOQ3rTG|YK$kV7yFsE0on3bDw<A~<lO;}((cHAEdo`2~EP%Iljg$fSaQGXJj`*&MlE
zBQ`y_mZu)9v_jO=WG%yF3&e*uscKsqmhrevYKcy+RDVqZeE5~!VB=!3?OF7hZNtl6
zv#yxm5BlT&zPuwwIimQ+05F?*enr>J$B<)pm_n|L0;kGdZP!nI#E{OSH~sfqQ73iu
zGFRYS4o?mM<Vq&9B#v09YDXD_i&tSRfq`7Iu_+2;qh6~AkpLgL?B?ce3xu8qb@s!+
zlt5z3GBwsV)}*5g_bEl_A(?Y;v5gb*r&DstH}}5-GT;sjs*(Hi<WY_Tx_@(MExPwq
z@{L`7(d;lDX6k6^_kK#YEs9HsmwY`$bx|<UMnML<1H&z*ldV#6wp)m0S!7hVJDL*3
zMdtIKO=@A?6UAta=a4qN5jxCbv)*jS1&cqPmq;?mp5kH=fasY*E9~lPQuxW+q+jQI
zjLTiZkZ14AC8~GIE&p7NBcrySkD85{t!tZy!Ufd3!oz^+EL3P}0ygC_rdidE{N}Zb
zn@2;-tJ|2-R~^(|Cyghz6?QoXuvwo52{gD|ZR5l4k_q+P&H6IR+ndkQc+s}p+{<>7
zHtrw0TCR4bdU9Y9z<o28E}}W0o$ukF7B79a0c{x_7b!vWD9LSCaz0@JBU<N&BM9th
z+b)zRJcBLbq`n7kklaV88^ohP9wjJ;jpPmoHbB}-Kl#;PixvNU@cZ6QHw)w2CHw1{
z3+I(@S5L)*`%)8b(*@l{v}{xDbH+$$FX8c5NA6{U$8zitfJ^$c8IcA2mtlv@gt@x9
z{f66JPD2exT0`Tk>zi=z_wHwFrKaj~I`|{|Vanp$d|bb9VTz<0E1bfwR7GVGN`T`H
zHuw($KP%WqFwqG+RJuIwUAf2y^p1=Y{z$Io)fig(lN^l5KbjY`?+E07?c`c=y92a6
zk+WHs5+=N+NZ?u`G)}tAD9=n?w>o@-B_J}{LwYhjoH6CF)nYvN5eJ4g{CwM~GV20Z
zVKvt9!#e<dOK)h45P)xZ-y=lnPxJbfgo5hZFg<+oO7U%(CEkSQ<`SnR@I(Haiu4Yf
z@rX?44{*cs02oE=t!BgRH2Fu@21aY2X~@FVNO523`-{t9Cbvw}rD<Pe7zxqAFnkLi
z>U-E)6@oHYCfDjS&a^xfj<(lKi%Y9bD5C$4^Z(zobG@7K+qw{|h@GH7)1-Z=It&S6
z3aq@i=#@cvX;EPXN#fGe+Gsr0_qqjQ*2eFUZh}t5M0@Hk)YRm07<4#5YsLx+X3_vD
zX&t@Q2NTpEN!69M%N)O9A0PM+MxzSnoGVmg5AQtvM^i=}xi`2DJSW`7YbpLbSj7p>
zv(&|VNECKpt83AC_&owb5wN3-j4F4{bL{abo4*Gp1nYfa1>%d@1i+<kn&sF?equJu
zmH~V4fWv>FuTk<kQ{f<u**q+|-`L;JZ-Xt6`8)+wo(z_{x(A)20)%K?gMLKu-^A>M
za&HT_iEUhs|EhZ$Jr2TSOBqd1M|vq*a<m#&uTMekIzRG>moAv)KMc<qd!SG}a&UMj
zrq?$yGdhO4c~l3PG;^C!C{9~iT--!*QD0$KoIkOjFMcoTTJj5E;l{^^IKQ|5sH4No
zW^c#z@{DL!|8?D3%8#xYMrPvC5i;eMC9Gsgig$JQ1lz1AM0wyU)<7hFVA%CyCf%rs
zL!3fzzM%QJ#X#t;zR8=KbYHj>F3>?qG{>8z1&Re~X7Anr`-)e^7t+4vmUlVIX&SsG
zuM6NdS;z$6AlkY|W0`Ajg`Y))Mu_2ZD&S@F67)J79osF-bRm;fIqN#Z1#Re(1u^4a
z8V2K{re<3YL>i8QJWj&P;K`dsU9Gq>WV0Gn1e4I^nzgOy;jZ7KH-1db4Zu(L?2;Vb
zsBEx|bTw@JyaZkYUN{Tc!dvsATQE1=`Nlg|N`YKdx{%X6v~4;=iCgi*j35$z85{1T
zkOp!4kw$j&Rx5eqsK&c%Un-93cdq+7IKri7QH(s{?E~W<pC%cm4PBb<W-jA^L}~=j
z9|Mi>Z>vWqZbM>1Qy$kGtb5CS*i>11A{en0eO{4XNp9b7XJ-0URv>-#liS9@wG1-?
z=9Go2Na&n0=SZ8&`+Z(A)?P-&R11si>L%EpLHPQCEK2S!y!{~HB~J{fSe7@jbcfjb
z(o)F|#fdEg?YKIUBX;h&$Qpmok))O=gsZz?QNEKTSc~a+WG->lCasD}D-@+E5fkSq
zqc5Dw_*jgr2GJ<Lhz*`HMmB#>iB=OIz}y>p3liHX5wpFI4PPH!5WL-yd=7pjNU5Ok
zI>$9sBO~A92Y3xLZP~jUCU<if;)Ub0<#{}vkFIXRDlQJ3+`%<ZJ>F$DRNRS0(ME)~
zG2q%RqbyDMe;xxpBO3%K5U+te=0FqeRCzl{8Jr)x;CDFDq<G1W%3dWeMvZXZBH>*q
z);*(&lncP@4aqX8LZp0Ml14ve^7)?+(WWE%PZ@5KzzoU=PDPw8qYgs|Y-sPKqurL4
z7CvfmxO<~i<qGB*y<v5zo4Req{*#SqgOxjXyTeX91oF`Co}qGsca$tH3d-KbR$sci
zTu>=IF@{^GNXXl7$S}aIqx9Z9bpBWTg{M;`OBlNDjCDAZAg(!(aX*<3&YkV2YJ+^j
zYVfb>zCEW(ia_;?Fj6bmHn1BFjwc8&gW<X!UOeOBrZxJ$;*>`<!xjH(SC7X8?a=gS
z!*+<_)Q42K)Yotp&j0PXJof)wfbqYzR9W1oQUp)D8T<IZE!p@tqW9ouyCZN6E8KZr
z=@G-9+LK?iVb`Y*SZWiWE{ma>U1QT!;*>Ef1o!QgSkiL^Zd8OKGNwPgdQI*KoM80S
z+aDBp*l>bkG>AXKWifh@!o3lvo#r_n_OS;UcYx0!@7?Ve>$HbFw->Ukt!MU@f>Pf0
z*={+=JzXj|{dN-SV>>qmPb;hp6ff<+w?J4XxN5g<<1*KN%yVJ^A3RSj->>PdI_h`-
zY}f%OG1x*lVNm8Z)<Em_o-&BXc<24uS`0eo<SxGl>XctN_|U0zor95`1cu`}m}Ww3
z-+VWmS{Ojp^YYD_<35jC+tlVhvU81dY1L{A@`I0U?RT>8!`?h~kU}TH5;&Q?<bDo)
zccHaM97as)wN4ZiJr_Y1&A0$2VpoNf!7v;tlkLIg+K0rx?ej2f(sjlab9G}N2Yt&r
z?0rl~y4JH@ue&?eyq{;$=(Kx|eyS#`iD8vSP?2C*gb}nyU+N+oK3Kd7Tkf$55VNh-
zOWS%w!93(m5)^3cG(Q|T)j*S_u>t~J0X^tZG}l15(>_<@7Mt#$f8ni}C5}iZj?%QN
zesWdIwAdkxe{&UbYZ-Z?D=oNBazqZx>0`uU68WCdLma8Pt<>OXSGjlUDjy+U9Qng*
zxv!0@>sLlJM$n~KcFTRWNSeiy(WXG#(l7yVj`UF~O2o>5c&!XC(H0(BzGiX@0)>4D
zsu5T^x)b1&412HEdeehK0{W77eBkvhD<NXsD-xPLcO+KvJtCGxp}e4b>imsU<7V`r
zZz)3nI7#MXJNtqgarJ?STUmUdptUGRoNGtx!VcHYx1g;jui6?8x(zS*_a6Q6hiQ%H
z<LgP3Xfn0fE?&%ok+Ony3S&7u1XvYR(OFSjrG+XOm?~Re@9Evi)3a&`ZFLMT!&ghd
zqqEmbJ=p1oYDL~j<oXX3z@>S?+yv;XQ?!>iF(ulw_UOBLHtva)l`AhBjl7-uiy?2&
ztvPX{g>@s-1m2_TQeuJB2b`$1$ljd%`o~heM^m@9``*XCH%%LL2v?B^n>h6=GyQb-
zea=@nToiS1`S=Fi*CEC(Ra1G-#CJ#$9&y>af+A0(N>{vjYODR>Cfl)zWi<DZdv-}-
zV*~GPX$V&sc%CZJ)lSoQK!(IxSt!eSp2M9^dOQcI884RIa#@buHW^3oV;t?haVbt=
za<;M}p84RlhD%PDBIk+g)3hmjlr}|bf&*4-2S1%Qu=kJm3!BG#VN%NJ7O$g7q{xHV
zfCyAHdaf<@)MV)G9l0(g_X4S!6%>?YjGwu$P&(XEW7;g{;~JBW9NOFpZS?91k-fxQ
zjTpBvw#M$Ne$pzx7PJp)b>!zz)|v;ApEuR{M7678>2jeUppnK_yLgo-w2}|sy@#~O
ze3}C!?RfgN`&-R;^9yA3eSJV41Jw}6IDU_3a*saj*D-@+yMG8TSH-~e>ISVL>*nhO
zRP@3HFSU_ZTe$nSxWr5^w5;x&+w3Hp0G}37o9@JDf34RpahjG+H`6}^dA{5t^2k+#
zMrQ1cCKb#g<MAq@zJ<;Xw{c5{ybZ<Ec?Oi-vK8M#^v6`(pwzEbTj1ZedB?cQd4|Q{
zJq->#<JAL%KH>)CZN)P@pLajoGVU~Ff)Xmfu9_aVPTebS$-b$2WuNLpFg0-xXEBHC
zweuIFn$Y&4h9nAR)#506h02HZ-*3p~t~=pbkFR?mpj5VvhJkMDTPi!%{BCPg`x*t<
zgRE-)#>mUtJ>oVG!aSE_T#;TIH-L*{{izsw_~MCz>m}qQ{=9wwJ!E>C45m(to@!4)
zN1SdOF(0d7fnowQoJYJv0AV2c_)OZdFtN0y-6R@;hT*euF#mP!UQd2^AG$wGj9RXE
zahBnVRhzN`f?9%q3vctH!$b<4xk4Q9BJ?Z8w<2d;ag*R0kns!#s6oat+0`G-P^DFg
zYpQ&((7uxNTbjY5W>}^gc5zD$zZs4e`#{55Fo}s5i~)@6{5*eFk<VF6@w=+ymKVHM
zaw|Mj2Xebzzf~H1Yz3#W+Kzj-9eC~BTU;0ToJ+acWlKECGC(2ioX*-eJZp4f_bw_1
z8Ygj^Ts8L0<Bj$0dU}Nwk>!V8RR{!P;hPb*fo?x}Z<J>tR{Y{@x9#DwyL}bpzf_(p
z96A&yR+pNlpC1f6H1%>THoPvrJcp1=Xt=bu&uZVMpVVov1D8^!n*t`L*5F@RlC+Mf
zZH^}H+_dCMX9;j8D3+AVFStAs*rOxzF*^WpM6zDJtV3ka!WXC5!X^nmMY_l4Pd*>`
zfp)*MU|HrInu+0VanM>sjZDyHbba9iMwlf!SZ~>ste6?j>7YU+U81U$#<uF%%cNZ|
zMB0TBLO{%zd?keN1q8za%V7uO0MlUf+5v_`1I{5AXp@HW-+oklnO{NBA2`ST^U~Ts
zH=d}h*T}nH4xY4KIv*O9kfUK6Z;4(GX>?ye{%9E7FDx(mZ$3fv28mG<(bt@Is~sro
zS=_(ohp*BoilyvqcWBY*0<$|>)3}$F@{+8N7Sw((XF|+56I<aAk=m4`+)BERay-sT
zItoi2iROSEZpM|A_Pc~0bx;YH?T?P0x#-^0O{d@4pQ`q44JGs1yqe{PXDk%h<P&S(
zJ0VYFHy^duDUsE?gH+Zx-pH;-w7+gIthxVW4;+-BwT~A>*jPEe(|?3zXwUBmR-p>N
znSZI}A0RSFI!@ksB`WLH?jV520f(MVro?>{gFTh3HJk(8d&Q93om9nVgSEEP@9Xi^
zMa<^4Ki7*}iqXHCdR=8Hw&(R{@g_JfL@=nJf5_NZ&8GpbH9g4HYw|%f-6mHcqLL73
zH<4|eCx?Bl9)Fx14Yqg+wmW!bVmIKn&ly4Ur0t!psNNKZn8&aebU64Es}SI3+{;z9
ztreUk038souCmAm?MXWo{H2=D790v*t<K?)zE7&D-jL`#^}O<(Na1wQew6IE(%k-N
zSPmdjL-5g^ueJ5a{=N-Ogo_pPIE>~!;$k)TKO<9{xc~V)zF+9PMF=jxTyN1+qZ=)Q
zBqvTf9ptjLJB|c;U)g10kdG|B&7Cl@*&qo>FUmuC`<(BYe?T<{;FO2r<+WWMq}Gps
z=aPu9ufq<|p_}F%HLAl<PxW`jty4;2i>mH2;vg-c&8d$#;HDiU6>S-&5Gb>DJjWHZ
zGnx=CAb;gHp9ELnDIBCrpT>>OFE6Rb3zcCj7fOm_ud2drA%9TK&|-%)90fr%tetf)
z`KXDn3vNrf3ak^OJii;7K4j2A_KB{0vrb&d2(b-B_DdWg3%f1dt5Q)dWX;E$f1!mh
zyL(sGn}<)*L$p&ZAD_i9%@Rq<cS7vB&g0u5s`H<GYQV)OPQT^XZSE8kix?trjbfS-
z$XuYfI>Y0$<7GTfQ1vnDgNN#CB)?Q-j%%ZlDOEQuh=Ead!LZhD6Ww0GPTRPl1+DGM
zEZ)WNbMx@O+^%LVa750^YeBBQA25PPvRZNn<t#>Vzjd<yjY~qT6%#nA#B=bKVbQ!i
zUT_%6nG2Exmjj!K_Uv)`=4I$0lEUP`QUGC~95$OUyD&CGa4&~y#9fiYRd&LEjzk#W
z(gyU-$SwLmFQEP}8$}D`(}8i|9vMGjr;StQZ5<!0XNLG;C!@xA{J6^Dh$px2T8!xg
ziJRx&gBFpL0{C~0paD{p2xXP&vIiZbPHibZZug&^KV`)8?%WP&f!m4S0V!aG(I<ir
z_Fd;lPl5C7Bn>`H)Dw5lZ_|XaNBq%@^g%W3%*iAV%MJeRwN4<x3tS}^iub~LP7p4#
zlFSi*0(!+91Zk09KY58Rt@1FeN$DWhNSMueCKsp&v*1vIoQe#*T+6BUBL#FcZiuqC
z4&nkxXip@>PzwAhxq8KLB>VjFd7*zyMF?S<#NE}*PW4x*nrL>V&>f}po<Xi$@YZ6f
zcd2}^Ic{-9r7}v1llZs1RG43r*X`o$1IqGpPY2gYNRJaleZ5ZCcbz@K%Wlez@3$5m
z3M$Xt3kW#W-jYf<g6L+?M}K*h8332smA4{GkL=X)au8H@9+J+(X$;U^?kHI!X?3pS
zk=7O)C<_<p5a#@TM!5Wf>x=g)@>CWuS-l(FSCm5=MmV)E@kh&Ng}B*+JIx1_A(yG#
z;vBLwrel*T3tN$b*HWu%YdU9<zbX*>Ro_F3K=+TuJ5_ErWT;;1=ubzl3>LMExt^l=
z=@-?hffN}z6)K2H%b(lh37Q!gA%wWi;GF4tEA1p{Brj23j*2b9oR#p&fmtwE>vK~7
zXMIQ39N0rtzK?<U-px!qx|6JDby9pzdb3G$202m3YA$R}3)B^!WSLV3+a*<#*ZeEl
zp=)Zt0Ui#Zqonii!A;69Uzoi9C^1LX$?)p1(FW+H;~O%NcH^hu=6KllGWM6DhSX2c
zg@@UHPjoa;{<`ILZ)`BzNU)G|qaxNp$5|LFq{aiTeUk7rW>oX15fJED)_(D$EC-Mv
zCk|!saxYUr)XQ_<(`|TrQOWDxWmTXUT$N+~Ovfl9NX3h7hHn6=a$j_Ov?{_t+hIu~
zVEc&>xybd<KfcIf_SEE;7WI;h8A`XD8=rdLAlnn;8*Cin&BJ<0{T>s#g#BSq0?yP>
zm(X5r_(M9D<I`d%e#9{pa1ik5v_AV<od)>$a5`&!@S)K4mPo%~((S+Iu^d=`G~dZr
vo;0hmZwFtk8etBGOgCAx{LgXbJPCyXJO7GS8f;1V(<><|D^f0`|KtAv@-gLU

diff --git a/doc/user/project/releases/img/deploy_freeze_v14_3.png b/doc/user/project/releases/img/deploy_freeze_v14_3.png
new file mode 100644
index 0000000000000000000000000000000000000000..396c8b5cbae464dafb981892aad64861b4592377
GIT binary patch
literal 32558
zcmdSBc{G-7+c$h7l(EqmnnzO<AwyIuq#|Rckjgw~IHQP4(u52dQY15>%u-Y`lzArM
zG|%(&{f_Ip?)$ml_j%U(-u15a{qe2Ux~?*u=W*=EzHi%a+Rppu&nYr9a50cbB<3@x
zPh2FCXecBSmHJvbd?ouZTM3D@jdbS3arK+wLv8a0oB9ic7AE&5W{gVDj<{7ewPeo9
zv?VmOORrh8UGBN({f(yTYu@lgMW3V%-nZ|X*Mq3{iFASW8b5<#zp!ngZ>G|<e172&
zivUX$6VLhe-W;Xd6l7-UH6qSEiQag1dhu5Ngu=zZ?`o=-q^I3)eD|Q)?!8`qE%Bc{
ztsY?%>VN)$uTV?=>suoG&&%!o_m5FAQ2zDzue;=^UjFMhLe}hy+VuBJt=;~NMC<Uc
zzng4~@;vv~Ti`#+)SIi<{qw?)&v^dFo2>gkc$0R~8<|`^Jw5vb1Ww+%C6lk5cUDR1
zg1$aWrjB%P`Q3lNTApI<jUx<<j28?HWCf!qE#ov2F6ip|efsq2P>RsMuYZDfzmSk3
znY?_0y*o(_-=CP6IJC_CpWo-_KVe|dL3}?3FQKC&8C!V#-?!YpbAEn)lb&~Wy;cLy
zzwg&2;Jh54%)ehm{uDFqR9DQuSHPt9fBd#g>4Ad>x36EjZT;G@5>{E|YuY-xx@o56
zY(GLo>1SqUwBBFaVAY-{5pBBT@72%K-515$A+@QR@7T?vJE<e(U%t>DKYsjPKmgyQ
zVm-HrHg(R~H+N3#_?Zwn*pQ;C74pv$7>&5kMBx^<I^pUn=_V9-)^@Z#f8D`=H|_JD
zGE<pWZIXw@#2#s;?NO0aJ#)sW=k%E~$Bm4(r)OmRY-^J?`uDrLo#GNvQc~K$#^$4)
zarOAV%~y)=&>pq#eW=~>#?z|Vd(9Mua_vt~PuK4+ey3Gc%NC{wjf{;;d=}^CqO!A{
zFMmIxP3>xExGl{2pKZc<aOb*^j$4ZYCL)}IdO6<gLi$l@X&bP@kIQ?mk|U{eu5a2{
zUAVg9mfxisDRVa<fR)<}*WP_G`P;_ozKSsV+j5?rot^6r{<Ee3w28Mqc3E8^AC;0)
zh*xJ>%-$arCU%`#QkWwsDJcnSZD?%lm7FYCIW{nG!=f>jikFwy#>PfYPL7nGo-Qmb
zTvY0^yl`X<HP!2j`*U)0pM-`o@bU2-m5|te^eBgBihkXqiW*gZX6BZbZ0oXDC;hf<
zX6Wkax%=V;M{PqxhAsAA)8Q*uu1v+IxzF3JT|@mLC+AgRVWjBLpKs4j3C*&yveJ|0
z=I4)ZTi=PNyiZ7|Y@jaT5P87?U+ntg$8Mq1kYb>yrNyyp<GS#dFE?!6`tbMfD_)M4
zl^>crj?6TFu#NdrPEX?E;(8n&&O}_=(W7#B5+ki28&i#FLc_wCgM$A)o+6Sy+#<%t
z#^b};9idwlV}5QE72QPKuY<#hYuEPOFgI_q!M()B(j{o7_-OI_#Ki3UR8k@_U)0jV
ztr);dEcaF(9^!Ea3mK$$^;Jds;!EE0+j}d*d<|~R-xaMYC@5He|HN8m=AJ(iN_m=8
zJf!+0-Lley2M%0`G{|vSR}-ru%CWg2S+BgbhR)%(oZ(osxq?TBx?FI1kByU)*imLT
zH@D4fY}BNMg@tWwet1H{#-&W>whdD#hQXtI_wF66NZCzA{`PctYDPx)^XQZmRub;q
z!a=g^5l{D0?8oj2+9_}EHGaXW3JNrr_4Jq@nVFgSMnv$&4AT8wb4>nV9hR4up9BY+
z*@ed_2JG0jjWj(yeLh~jG0m7BdvCBWjDez}qVmCgUWALA`+~Oi{mxE9i{|(D{Ri=I
zRl>xgKYrvq`(`6fRoSmMN>rq(NZGRY*K2J0DtV@6XJZNqcm)ImNS+fDb{{@`h{BSR
z$>h^YN(ypvMX3Xw`HYms*-^9Zo<Dy`Bpn@{Z5!|7%&+I*xcB}0S?n9*!TKbN%a&U8
z%oMe_b0_WWL<9{A9@f^XJ2|!2*RwG*Gm{?DJ7nrGhbWhpb`*NZqG+w(w5g;t@`yQ`
z+dbWj7dI|0Wp~^%uK9>NSX}BV@pYYSX>Whj+^lo+=1sY6>$l;SGcz;aCMB6FdO3Kd
zdwJ1hSv1{QUYyN{(cHazx5eDdaLf4bFO0`rCf4||3tc^4keONc+cr{${D7X7H&yfa
zaVo|x(W^fU6*Ks?W$0P98b-c6=CTo|^5n^rw72Ga*e`#uDgIUW;P1V6CA!N;+1lE=
z-M9FgiAd!#1?&Gp+D)vSCg}3-h{(t)ms7#P!R&qSI%Z~^v~+d5vGs9rcm4gDQ3%##
z>QscBv#{XrGl{<#@12=>MEyV@r+tz^Y}(;|YF8^OLGIDG$XnE;t;cRYCTnPFmX!_<
z4jLDag;^I+6){s3s<g~ZOj3<-<!cO&MPWk>^6aaA;OA#t@;*8}FE5-N>$bX7>d%es
z);Tg_m3~XP%`2Ii!otGxHZif5d!;AXKz`f$qKXQC`<a!WF^Y-G;#RGxH(R53?AXzG
zR5SUqQKW9VyVFSPx6<YDGCoCzRffO!+Go2G=8y{)E;MFYhW+fqO{b=(|60^czLcPm
zrfhm3%KR{wiK!`3OHjAR#>cz<yp6`8!C@ciC}bslaGgFtO+#aZ9gIzvX0dVe<~8i>
z>^EIpZ1q$0^V2`DwC8%>`tx;zSj5c4{kL!Tp~7JGc8Z8RowRds@Rr*qcjCkvl9gOX
zzMHsN^Vv5~nQPi*E%~F$%E~gTd{^p1tT<Gal#C<ItL`i=F4AyZJ|3qU$$~06TCiAY
zvixFGwf|lB;hyQ_<mB)i?R?iG2hB7zg1&SQNV?7NbMvyZmvLVGHnIQUL9f8TEq%Xc
zTqb+BOG$BCx91(wR{Xn3J$}M%^>t~w!2q@23sp9z`$xFMGy4P)VUEP|@83x;SSWkX
zh0C2jz1EE_<g#D`Bc)k%oK#&`N6XF4?L?cZp`^t4`}gn0p3y^x4xK)GmaBB@pxY>Q
z&PdbsyYf_|x!-<5%I%B->(@5suZyLYBsDfS<5?Mgd9Z~zB*WGWcjfc1Q|OkHbhFc|
z9EGZ^t*m@53!05O@;x;CYD44d;USyr&`~>x^2_F*kbt9$$G(2;n#bQvC__Vkn6gdg
zNkzjg*=biRxbo9~L`b`7DW?6?NPD@@d~JPyebb2@8_q=>yT7pD`aUb`)$7;ZcZa0i
zW{S$n=<Dk0&L`9zb)c+g<JT(U4SM<fx%cPKC&cpSC;Pf5ddf+j`EIkHs;XE~ZYUIr
z+>IOW^yOw}XBAacm~(P+*7NaIML55?7;iIJFEBMVg}%vt{rYvSEDKK0;wWqEi=`#^
zYlpcUoSa_8#$MH$T-B$YDlI+L*wUhaMOayyAF^+A3yGBVu$pjIrk#59h(*j|ab_4x
zGxhcB=@}PYU2Zc;T%?88sZ(@|dCAF-$hT&OwB08w#IXhh;;>$R_=gFtPb$~qWx(!k
zYA<?Hkf7f8%E#O}vY(&!#3;SF*wvhAu9bOX%i;=F=f{f7zxMu4=8%scKdxn9xN~|J
z{(J%supR$>l2jBXZv7aYG+vznXYs_zleQ6`^)FnYQdL!*ksFHiSmC@FzuA|C=g!6W
z&kwd7G_<y6b#``s9T!(pQsPB!C@*Kkk$QZ3*LuG%_x$}&Dk{=@7Vj<c_4YO_eaLBJ
zXD5ID{Q7tA-ZeU>7!*D_>Bn}QpREK-jGD_=pI0bOwOp5=xt4{+M{b)Zv2Bl=Yinx{
z<>opKi_A;qP)SQlhKdf=#;aLqp(Ek&G%&Yd$wcQQNbZZn*%n&YukSZ|F=J$oDs3E`
zw>sAykT)&*)HB)5dak<s%qbDUqWr?kvv#-ig82Cqnp;}@1x5b`IA1ATgO4RNnA*H#
z+S|W*@^0GXbx<?8GuYr(@pyOHlNT?(^6uHQo+8_tl##LNV*K;Fv)CN+(dVO*l9&T{
zr9YvLH+{&V(p%I;11^nL@NL}mRZmZ^iQI$!W7eIllgUs~Q9&6URYdQT3bVGf^w-OE
zBAyN)oYCxgdRp54iaxv*>Rh8i0`59wx}$yPItpI=O0Zwmi$gScUe~OwPMMn@1gd@#
z7ABQw%O~T0FJ3JUhbq-q=$Px&z5MsAi5VvImp|Ik;_^?R{6-vexr4%S1wGh;bL&wX
z&+O!XPDqI&6?qQ#YBhvr=RGuJQCagP6E7{X{T5}gDZ`93MYB-dK(x-`<|ATy{-;U=
z7kOPZmH?0Vqgcpj7GAS~2LsPmIu|TWC}j+o?Lv8E;ghkLTCq#h`Vp^YU&hSDbXYqW
z6^c!WudTexw_w-C`|UKm|6D+fAN9gm{v?&&u8qam1N-;y&oc|v)zL{MFFLJRv!>|h
z&kZ}CtexzwP(aso^DeNG3%Gy37*KUPn_t(!z=I>^^_^HT*BbK75a*pccm4r**rXxM
zZc~&E=m6WEeFNz9M9VUs9cgn_b!ync%Uk)qXjb;N&Q4|uY3$FpP1xkcC<nklURwO6
zI0$JTtGDu3sSlf7Zd*0zW2AVxl*c6|GL4UqqYV^K_17G-Y(9);ZP=1!IaJvH4_`9&
zCGJL)ikvql{e^t&+N#r!(o(wN;o(ge>HY!HhyGYHQ=U=LIxwm@$XT148+-Jyv9XDb
z6srESBC&sy54KQ>XT-~w6}MJfKiYS%EdE32t}y&XRji`#vrur861jO~%4*y{r0(m9
zgZuW${RbPmcu|C4L*&hMwY4@Y>Hhx^!98I>K3=P*Pbw!QC7pC}nSZfTD#iY9(#Jt?
zvGeCW0Y~yZ+;%L0r~!TAE5g0gC;y9D{fp@B-+%lcqIdS}d3}8uL3+{u?`h`R{~IoA
z_>0~_R#x^;UmvU62MIt&;B}@ar%~}gZ%`Q|KMfCm_~*}``+{_wiab0#D6lB`9QCt`
z#%^^$@;iUk)F_(jbYFk%c$$g(dOoj|6O*V}<>zn-`}5k`65ro&hk#|20F7Ts<1nj=
zcuD!aUS9dd*8;F#UN#~9V|!|NE9PBwXFI$f2HUby{Qdm_H{=ZsqqMsN6y*#GZ%J?5
zv?*F6;b&{>u~*mgRq(G3JUr4vqiS+|ZXjFU%6k<4dbqSC+NqzyTvX)OEh8rCnws<g
z9YBI6S{;06@`0~P+S_><?otB*qtkaSKLQN^JM>jk_d_oN#rgf|E+b`R#OLfAuE~zW
z4X1;fOhlTRo5$HUY`6_-lwXx?+2Zr{>(_Prezy2gOBQB3uBv>!$vNwJYi`UaQ7@Mb
zu=h)Ou#ig`Ux4RGSJ&-dzkY2{>9%|x85y7yEXcgL7|UgT|Aa_?rM&-LU<!cjhy7Cm
zP51pB^Kma9f3BtMY;)QhQ(1ZL^_w@x!Tbgncg8mW$X@CH_2!hXqM~9q0ON1>ppcOJ
zpf=h|x<NO93*@%FcwTJ#y4*q}?R^rNTPt1m+O=z*`T5c#ZMkJK3Gd$BIlu3Of<lSb
z7Te1YojpE3-6r)k{pC?xYV@P<s(n!b0t$}jzG`vIdX98=(|o-A2(-cE>eY!yvb<D!
zd!8K^3=X))HM&#HKQkj^(rrUEUJ=-TPY%Zqtp+LDsV6Z?t!1UB2abq~vlkZ^<2p~B
z+Hvrp`K~YASw22=YuDUaH*Y!Nl;PlEGuC;0ZgJ7r(2zt*z4C=&2rMA+fw)y^uI!aF
zk9p2CJ>rvnbno8UO0&(?WkJ!BdrkNsn#*}C%^d=?q@$x7t5KERzHOVFbvW?D+`@wV
zzRf#!?OL<(zIRP@A9u22cPTT!cKVt}j~?0B+8#$`Tv%M3E}a}7zm1;x@+A*QU-IRT
zck=R%5v19`WBCZkX`1t>KFLe5Q9)iFchxyKSS~RrBP{IcMb9dao9AcSDI>!R@rFcD
zy0v%Z@#k-x5)~CiB2|N*q!cVL2nq@k%;472xT2RMNP%yrdBcu9d+2K7RLgJ@rUX-J
z>-|sfk_TlS7#wU877`Ky)u38gSs^+<u)xKO7gLSPSi~O5N6UdY1Do|$zVzFv_$ZYp
zb7V>C=urZfQBhIRahrR1c$|Cb<m?=Fgq#!<#P%UK*SMpA`~ocM^OZwRLyfn=8^zq~
z6Scp7`&NuMU%z>?NxGo<jT?rRmK74^_KP!?DA8krxmbuq{d_KLgBLPnNoWNLv-R~F
zjZIA;_Mqcjd6wP9Ui3DOjy>*K5CZ=6_D-DRBQY>A2wS%wn`y_9Cg4tXwm246UO}NL
za9`;_Tdic!<Hw#arJQ#N3$K@tUO(Aa)weZ~i-SWBx(#S5?rg`-of6x>s<%<~TBigF
zs>ylKTfgIvZT7l-n`)>%pBpgh+_`gFc{dN;xN+lVT)g^$4O_O*0(0H_awSnG^LyvQ
z4^3b6@Xz0#?QNPv^YT*OV>~*ar8hkD^yyP-;4>7jxw)H_oDJ{Z9auw8Us7C5h07=d
z<7c+YJ#yrT7B~UciqHjkd99|h_(1ZuO1o~Bk&z*E1+0JHyM1cqmFKxz+S-^wEFfpl
zaOAz0`royOieyc_*jUG|PqYB=pPHMwaKm_};iFJ8Hr3bHr>3Rd#^JkgVFStV=c|(+
z?0Oi&BFDyT5_Pj#(7>T%e7HHj<JQW&S=LI5R@xo4;NJJk%^9K1VyE_PewCRSm~FLj
z<3<}w^>%Mx-x73vu-x$e&|Hr-$|+Jg<%AwHHa*?rKASsQpy2L)Y;<WN(@TM~r6Hu5
z4V!=alhc186dtf{dU|>YWCNL*K3P)s18wSV1H;4q*yNu8Oo`>rbrJyjT+hS9jFmq9
z=3=;{<M%|Dx^q>(mT&Jz!MqJHeJ)bQ|I;V=uO=c{9kg@VX9}{EgWougFVA*BAY%@{
zuKZFm@MW9F+}L*Tzb*=8t+=@OP*X<Pkn0OEOD;1Rw2BSv?DU?6veYj|xI=EJ`DRqr
z=U`DREG)Eg1A~I-3~h8L#>R?#n7MHnr?Pezkh25}WFq5bY~|&tFRH0&w{(q;2IM-A
zrgtgKcAy=BqjIA<;Av)AwS8}%VCELvwtxS9wXEvu^Vs`zP&8ghISW30_6&>B`TO@B
z0$Z*uFAilx+>p@pVagT|(dhGjc-NMhlB3uG>B-2{^h;CIG55LkPzs7bz@jt~Y=QG|
z>N8lRJ8bj_8TY^e0_KBYb>St^?l|}xszoU-E-tBAS*1X{(dYL?U5u}8YFekMsd+iq
ziJ69mhWI5&7LZ4&NSvIU1P83HulE7F@%HiAapcIQ(QI^#^&2;SlAJIyGMeiRv#xGw
z@yp4PJiTip<fQ>Jss<}6iXwDPppQkerI!{YWVE^3+S(|HN+4O`G~4v`^~Yvs%Wwo6
zSyZy0b%2z{t3L=2-}<)hMr*zs`^Nigz+FkgjT^!w?DzaFkouPe@Riim)C`GI+-n-@
ze*L1xu1`$lcW`is%E{pZ(lqvucAA6Q0A1;ulT++~9ePsuBd;u)^6VifIh_Lo3}_ut
zCBtPsc&TrbE?v4rnyZQm+f=Qh(s4e{7G&g_rR80eHyaz_KD&boirp%8N_eV40=hn-
zp<Md{&ko_x01;PTJ4~Vz>el;UvwbrIEvSes`o_7nBA1+lEK*9eV-=joV!vN`C;hde
z;;yeRJygW%h6Z1VP)@Ar@z+bgeAzB3$#o!*0VLy8)t#}rXbGye+N^}6+}7614vvmp
z?fGt~X{Ik3EL%(~vs!9vz0tH|AlU{627+Lf#;SxdRT9FEm}RqfZ|_xHS)xH<gnh_|
zcvG{t{ybdOU>*-VJxLI~6y97k0)GfED$-2JnTtIVE=p0L$w^2!hyvh+Ms8we21>ha
z`*tcQA9rx`P>$mSD=Zh8UmouZi-hI}k++-RQfTu>ji`k^R=;MCPy{ouD^Q5jymX5?
zCGDUEx6k*O)B6UsH5NRw)`ck7?VX46jg3Ps+*;4lHu59hS#3BzYgyw!;M@54<B)={
zR)*gPWqk!!2H15MoDr)znm2H+>gh67B#tr4DKwd`1_O^CrtUBgCF-0vj>YWNrXrk=
zaDQkb8hpL=GzN0wb$nfe+~b+?K_eNCoKjwbY<@5lZrJFGWT$)=H*hEa#%-Xl$E2rk
z#G21_`SNvAC|}P#XKM3E(axaL&9XQS#*V(X0b=3wU;_;)859@ldzx)aOA8+I&-V7@
z?27UpyQ7klSDMmI-zF#f;CMmJlK^(pJz-Y;?IvfoXM01#UzqOZm?t^Qq5tAm8TS|Y
z9XXB%rF4_txSiqeuu;P~PXkBtDq*6Xs*+s|7p?qg-`CmKS2k|}nV(RmNQ5A!_6Xg7
z3(=Y$dO-ceN*q3Ngo>n}casYGO=U<M4$lD3{@S4H6jP-R_etg}#>P~nw6wHvmh8W^
zJh!OF*dbDrF>hMFiPs*l`1Z}{<!wfGLCVYRS${S<7xWMQ68n(DdLzfSo36FB^=OHs
z)Ju0qmxZb8-rn9Mj?3&{t{ei?rh1|8<TF5S&vW573^*kxeuS*>vJ_hR%*yw`gW)XI
z)vkRB!B}4O#V}^I1A#!_i8b9LBad{mt<t&_gm#Mk$EoPG@Y2Z{E(Yxdxg%8Fe9_L>
zSWX@u|G<Nqc9Kp$|2hli*W8*Q8V?%w_V(($A0GH#RRvKzpx8*E;mdzXnR!G5lsX*6
zY8ecf?U37yMg5cC37UHDHC+Cl$+<j`0a2Ko-fR|b^l^1_qe)F17T;Vw-@6yPoscCY
zWzmUbCz7NTf}2n{Y&(mnNOGp8yK~Qe3!g4lmwH=XOKj%z`!=s<xI6UF2%?{$e%{(5
z8(k@fT+z68mCQJW>=1xzBec%&4jX6ZvYzr_m%h5{sks^YUL9yRxevZQozFfTrF)Ux
zor>K1Bcw6YoSpGr&Z(VI+=BsH&Ej0mu{t?b^`;}cM{-)8eq20LF#mgS6KfkA$*}9w
z-J{MUTS+4;x^8bCkA%2Gm_yNnk~%drBfo277YH=T6MMwCBJ>D}NhlJ&(CgQ)Q)eN1
z;W40?@!0B~pn3_`!brJ$_b$HXnnKISmWoy--&mUPriB2dN^YE#r@NJa!PcM%qnmK?
zhednJIMB3ZTk~z*y0x>X=Zi~EUtdgNAs?!yNXSD`Wj7OEj-kBD2<b3K3MmTw8c4#m
z=CDK4!)Or*5~&@8IOXT(*Zy8V-<4L*!)&dM)I92I2>^~nNqKoWS{;c*$lLTZ@A=me
z72Wi0@uhv6Qz1f2hNlQhNlBqQ-vfBu%+8+S+O13M!TE`vqvVCdo@whSIW^$+1h7&+
zU^?nsFJ+L=(R}~hOUW&cj*h6#{5IG7eYO?kWSF?|REpHK6;B3!QFkMX@WY2pgjCPZ
zMraD)QoS#)LI{P#ybhq^rkk6+WUP+6<JuSO)hd>`J_CZ%(mZhV){wviI)*GY;qDwf
z$OsZa+#u*#Yg^lNsi=nF{S$W}gG~xbDGcUYH4cuB`l6ai-HXk<QFj2;^u?tV9rqgQ
zQ?gMs3xf+4VdC0)I=^OEnJK+L0-}d?f<G=Q7C4$+lPh!_WHV238f~vgzQ|R%5Y@sm
zAd;EV-NHuN2CND}{5XI(kOU*GyXCOWpk7M^SLoGSw+i&XYD2mdy!@d^D#a(ZEL&Ds
z)6OoveZjDDDPULBWF4)6oX5nUb+2B%GK9AI`0@J6;@qDsl$_-a1qB-n!fy1-=mvkJ
z(#sVHsnM+a9VVnkzEU)nMR*_0Yuc8bwY531b7M5=hGor3azJrXoqV92DDNbn;Hv87
zFsFjB(9lz@Y!~GAcAK_RF901uh<vcJa%<*>g$49-!{E<fK7Y1(<Vw|gjs*yXaCkue
znmE(ojRfqA>ihGDLz<hO$w@g=k%jsGg9o3`bdN^v-^`#zsA+3j@m~2E6>c*_Myo9l
z_>9NaCa@XoU4@+JYW5!8z45{n@I!t~i#t{Rt5<jO`@#wYExi)l4rf9(en~D=`~3S~
zSpbo&l0OOMjg4ApeLDpOAH6(6r7R?6Po4AZ*|VP=?jUnR!^0A$JcFLex})yXpBkdK
zy0Y0^`;Ybx&~U)-<M44u$0JM2%T1M`*12?a&MV^9?cR8eVh^v*gc4|>85xg?DD+dn
zLt**D5umf%w{NEm3{aE4_Sik6(wj{$2N-E=Y)mazQW20U@MK|%*ud>dR|C9jYHCWF
z8@$Bc@&3m;3Yc_{yVz4tt1~Uu6eh`zr7>Cu`)v9G$FgdB8W5Iu2?>XsM=rDV`eev(
zFj8V?9DCPH+4og$KX8Bn!sF1&P0zw4S|80(NRmM#4f7~XBActJR_6Q6%asFPrU;6N
ziZ)%c(SZc2l%&x;H{Ok7XgcdKS?2{b2%J#T&doq6UD)YP-dP}4_lumB++7xsA^J_n
zz2&LI;$iz<zZBKPe0seG)RD$58*&y$J3Ll-#KgqHvvS|Op~YV)!^5<~9KYdhvchzd
zNWFSpj_<mz$=k|xoQ&NYt8v^3GX`4c0JCno$vU^Q*KBPMfwY0j0bw$Jyv*|C^k+#4
z_Yy~1I=XaU<->;$8=@TSWS{^>LAF6{QLwfag1dRte*l!QYh<KyMD4nj)m2t=3DnSI
z$Br?{gqz@3*0QqtqCuXDIc{kwASop^U5aw#CAY0eRd(4M&tqw(#To*5B9q<6txir(
zU(tB*vu0*-?fIUulJl^)2|f%}ANUpv-__s$jcWp=6u{v3SXT*LiMI&}UXhWJKRria
zYNFmiyTPCKzxu7Mt?jkz*NXw?HmqOoX<YWm)`xXD<w`-$^YR|89Ebf^t0F3znnHD)
z-2JCv7ZZ_%u`UHK*0qB}L*5WfSa>A8QU4(quN4Wg_(8ouv|siDmL43YF3=^=N!S^w
zZswU%7u6iizRgI6n}$Ar{+Z?cI8g!5>*@JFc)&n-sWCA$@RoNMEYIk+U;o}?S1(}!
zO(r8l6j6wHacg(S57r$rKwr`C-Z6m10MK#Qc_ynL*uL@pk7g$nPev$mz$DRlq4@at
zJv2Fmg|eW-aG36b+CpurPc$_<C)bf-#_I0wj(29x)bUsFWibNG88W)+KK;(mTF0GA
z8ohYKh7A-Li!Jk~sU;1TDcGFzy}m+GVYwcEbe(+!MGb|AQgkxUjwXh`8T3l?w7Ow{
z7aoNW=I6%<?YMDy+|z}Md~{j{XQcmDTln&Ec)L>FmJicBE5%pcEkgvA24A5|5w7o<
zGwWPkT_3|6{YdUa)4yhJ?u7>o!UBrdc&q)qGzFVZ-o#`VTGw58K8cq<UKApl_1Luk
zT(i2;Y*P;E&9=a^KkMsDn|Bvjeyf#HVefDspT56o<3^Ce^Ex^NHVv0{V}scsu&Hf1
z`&3LZ{Ok=73Eo`1530U%$BsMpHa8$Mf$D&1-MfDuRwq~W{6KKZ3R9iLc4MQ<)C<t@
z{oBi4Jb6L|S~VlHcQ5_O$Oy6faB;}n9DTX9pi2i_4+Q%z_69XIbt+E%23iNhF^m3p
zml8lGsp0)VB~5j^3V>t_NAsqu>lM`UArVOu5(PNtcTexSk}_Jj%3EZ(lbw$*0HC+H
zqJp`rtLx^>P)NIVUr&z_N&vD4rm8hOk{!7EzXBPM@d?oCwz=S(jPOl~8QfpfCMn<c
zRcCMkH~>Ui0!}xaMG>xQMkq4o_52|1kUKvo_M2blZbcVVfO&xT>hJGQJam|?_eZ=E
z{3x&B5l&sFUWcu$TaS{UlfcpAUP}2*z+wB|AGe=9+l2JQcy{5k<qztdXjkz|Lhd}@
zQF^yYNN|FifjE6h*2~57(IzUk=X}ecP0)3i=f|X_p`}#nvZ)OhrxdO*VEZC(Vgzf8
zNOZJlhlTdurlA)`A;nRa-|>WFS!zdt<j~O233c_&C`D-X<896z#A2KZmN3+oqxVFn
z#y?}&$J?8u)hY1oZjD4OD&#C6ckPsxe%YpY>^T59dTyhdGx8x4U5&NrqI;tXT_)*p
zU>=`+gJi}jymsGyiu<&r1LuoSHUqhogoF~Pyl_dHyaW`vstF=S>rgP?#YhPn;!{bI
z@}YKx3ze9dsFf;Wc1vI##dDneQlf>LWYLs<a<u4~#J>*04Si;ns_^Av)MVv|Kzf+A
z1w_GjV2%?6ZJ`I;fxNrz(4h?x5fMXO5roDDvP}TK;o%Awox*6>>PsjWuwOEUkI#Oj
zbzk04<j`?1MJ3ZAQrf}g#EBDfyEdjxOjs(pFIwoilV#NYqFEphgg;8CRPdhrI)7C!
zJKNifLQx~)Hy=KJ+zuTfMV5%wV69p|*m{x0!aZf4W_>;Xa+3&K>9R-lx3Pyk9=hkm
zN<VRJH*xq3y1a9z@rfGY&4yodtq<4p$hWiA@^SJOczKuDPWGzYJF&xSul!n<hVybB
zN<`A_VbEPhcDqV>CVJYb*_vyKQr>w2Z)HV}8E>eb9qmvxOZw*KMZKVV2bngL4~Q#V
z(A4xTD3Bq<80cL?1wXr9d9K{z@N@KioJ~8e=wrrDodX)rvvt=f5^UD%5I}p}_5H^W
zZ}kH>Jy1;Fwm%E-#Y-+4@&D`UA^@*&G!c4=>XB>b{y$CTonm5Qib_aeg!P2n%#<sm
zKK=&G@Ow#i|3A^bJb`^t+=x(lW@TlqV-26;YKIx*FaJ-Z@K2HgRhwsJW#u~7kSVUF
zgp3UPSDHKj@vzdqzGk9qS`NPAFtar5k(r&X+PGkRA4DGc2Iwft4i|h(6IX7SA0B*@
zoXmo1$#eH&zm(Gu2f@@O?0ciq)9sXR8K<8<ckYy(-9)Ny*we^JRvaX+63S@n*K5};
zEKWc>fq)7NMDeh|-=0mt2jyCs4f1O_Z?sb9{B3Dea5=xH&e>fUZ=NV01ITaH`oU;s
z4!xBqNI=dq%TsE89;ycdf5Wje=JFPJ8TX`sNNkv!`|VeY?ZgJ&Q%2@yVt#f1{{4H8
z9z}Fs3>hV}P~f<yW@r1#M|)n3ckf$`45XGEtBXJ2y{dKS=a-v<Xv2hv3a!Ws^%6K*
zBl+_E(9qCB%Wcua{V*rt6|Y5?0_ohK;+9T7HJe2Kb)>a`58+C-ZnkPsQPFYA&z%{i
zJV~Bb->e6?5^O@AJh_dgn_q=2maysf&FF}nOZv99<FA=1rM=e^4fx1YKczUUCnqOu
zp+_B>7l6O=Dr28d!Kw`X)IZKij7;0N2h@^q2qkZhZ9^R=tW6?&@ah#clo6iEgT6jl
zaoC#(XYvGISDo=(DacgK@oAZL>o|6u@`?V!$xV7p^7p75?&nf<^N4lyddgf#aXu0i
zu-nY64-G+~!y}T02=qYSQzYj++d}KWKq=`N9P|TwRCPE6Hoh&m946T_>8L{M;Z13+
z-Rv)4Y`k#v=a+5X9Ku#qWR&u+<>khsAa!Zie(r$BfFxaX>R7<39gzG`n2*CaK$S$R
zKiYBWK;XRx5AFa=5Nn*IV>%Y!=Eo-R2_(PqFw%Ygh}0-Y%J5u_uchohALR1|E=;0U
z8a1EC5@Doh;3tF%m!2{Q;6={w`y9EtWR_oEY=%vEy(ZS^`}6(8L&i6<EL(msP@v-x
zfeK>JxKI65L^u3`^x07=a(R#dc>CN?Mpde9_o?^q-@lMH$hK<xbcdF4?AzYRBB<eK
z&YZbg@hn~w3`b^ZOo0d&RuN)1P`O;Z`X>ZG;b?$2W5*NGJuUuIDk>HCs9g~w!BsM+
zX)(d`g7R%IXse!3N95dKQs5TEtlNM1K&|VVtdjLb;4g?@`%Zeg2+3=^9gOF{GZu}|
zh4!9zg}{Y^4?WZutxZx=k~rE^Qx1@@QP@tLI%Rj~+S#)Va80O4fR2R74JQWe4L}Sr
zmH-s48Ez~A5xf9e@2!dqKxgG<Is=s-7mhfe7xaB+XK|8T^!aW4{7g{wffBwv*{R56
zrBqrl3XuBY!%<LQ1(;Qb4{sJSC@|?rNKQV5@{N=1PA2<D<o`|xhWCLS*m{u=Cg5%O
z=|H;SuFcR0u2zK7rfEIok#dTPi=+4KVo6P#>4Wb7Le@jZtd&4~u;;_8z)nfJy1K|w
z;f+3Zbaea?5!Y~1b9^2WvM&1kSAD{pMAEZyc4Bg}YjBVetse?G@kEUNTO{&iN~Lw{
zhugcAf{362tS!I{c@K|5{f|Wd>hAV}_F0+pMZ8sg9_s7{Zf-`xGT60|FlS8U#4{hE
z_H`$u6hNb31myO|#(TmH9srMkdkmSXlBOn3x7m>++I{YG)C+ePQ#wB+F{$lf=*nM|
zxnaO8*!R6uaBh_Bxw`3+w}-YGsW6|l`t3sZQ{$G3?8oH6-LZSyOAC|t%Z26eZO{(9
zS9yyryRhTS>VhuS*5Bplr)tM;m)%P|dxFQ~f%Z4&vBFgiQt&Q`Kbgb#WOe;j#RIQ=
zZ<aq{a_N<aTuFgiT`hCR`wrpVuh!p5Ih!_^PTgEAksY?)fwDo&MD|Nz%0c-nBb{$3
z?~-M_d0if|zIrfbtGsSTKS^ADt8{d9^jb#7?!?&~m^5JI-<w6?%|T)hX6|e8ftYw3
zG?hSMu<j6BA$=H*M}dxGmU5li2Z&MK-26S(9(WG%EN-p}zUkL*^dj%VN`n*m<n&Rh
zw#EgS&|x(d6@P8htk-0bOHM^|SrZ^E=N4ZtOAjAbu{7>|uL>?GEoRYJG;c9b8xP}`
zWSGNu?Rv*3@-xI1!4n%p5D;6hmQoyi=Rt#w%F}Lx`pt3^(>$Bi^XLq3a@Sw;v`(ot
zy3wk#R31uwbF?5JPAIqWJ%3Z_Xl+)>@Tl{+kU7KHx6+Lk(rW%x%ws=&uKa0VjuD!S
zRrSK-@eJ*?`qOH4XSJPP%XMt~N?z9bRZhJ-3gY@CQfQ0YcvYA9SX{OHQcB^LqTx}m
zmX<g40*~Fv^sDKyB)$_{jF!jaD16mXZ(`W_l7&j~&7th2SsA(3{sUe;yS*R&Kq4Cy
z9Y(BzV6XxRG=d-KV_!1Nsz^*?Z;3Q#i4bDfs9l7wL-NFNJE5ouVLmz`p`4;!9PR%e
zdi)<d2_(~OR+e1Qjnyypiwg$PO+lpqVt<A79FR+yStPl19i=%qZ86i=jcyt8-%<BD
zVaV3w19b-h^9?J*CBi*N5U)W?I!0a~T*{+2$D*_+U!UJM)*lyn1vc!p8#m<j^myQ8
zTg@B`afNiqD7!R9<5md2+oC;>6NDNE>L_-=BOWQA!j<Win=4BaC}5vBJ&sc4$H%Wj
zO6ruc@lK@bk;C}0PLEs6qDa$#OmG_z;jCn2^oSZk$RRpOrH~4U%Oe$q9x+cv>i&IZ
zW;E{S_U+qRNKS;s0wY62v4t31AOH2okIyKE@TLgc8s1+h69t+hL=0e{Pe^US#Q84C
z{_^F^Au>uDuk0-*5S$pZL%tDIqXPqX)DN6Ica8<je55^}5t`hlz2{y`lZTI4HKo(S
zXM>Q7GD%?WICq4lONxp}4<0-~$f&6Q@{RF2C9wK}x!;V$6@t~`@SIjr>8VxI&|pJd
zCb%<^!xRu;_Pj;ksJ=M4Fl~-L5ruG{Ki~TGMG~HGO({%)(WX}KhI;FN67(G?zBu}S
zNGp>_ouD;@<w&?NkjYTyVxW{L1O^AkynVYC36N~-4uam|iPDguQ<fq}>7T6YUZN7n
zN+KF0cE(%v129aHl=_64mi35=u;mNpd%2+wzXE<k>Odd`x*3uCC6tMMn*k}=l7baN
z7$_6XPVVb3d83R?&6uYSUuM4il&-42;AWdw&BUJCgKp<n@;2G4jTp^8DI3bo3bQtH
z{cX8fRxLW&QTXO5lS@~eCiK+BoT70gel}H&buC=s`1<JH*LU769izXS%B>D(&+g#Q
zp!Q&>P`rA9rnz=`pG)i~l&VhwU%UoQ6jfzcM03_~-esn^ih4dZJK+94n!|VXr%Tnx
zHg6A|Cjrlo(Y_1IjUL*1Y#$|ThFk3AyH8;<%r`=F$8oZkCLR~ILulw69c6`OjQIGO
zQGO@bbl62iq@2)jFy{dR;(alGjiD>|K!5*j<vk^Yz60rG-)06RZ)iHR;yhP49Z(Ik
zDrpc8JrI_h?90k`1$6KOL|AMgkVrZ(6t>^WNux1MGTIlf+PCagGZlB%<wR5fQOKFm
zj;cjze6hgO>K)&;GaXp$)<5ZW)0C5YS9YeaZHV0WvrWo#@c~Po1^2P)tJk>OoillV
z^VroETvTXk@_pN_I^G|9@vR#@>n^Qye~+B_&5OzP3iy@Y8GUteR^DA5Hzzpb1U_DF
z|J3|4yhUZshJ5HjM8PSn-=hxq`?7a?yT|>CJw6_CpwrWDd32Cfcl=#G``y5l@#D38
z!=*hFY)eOSIM5ij3Rrn7J>8nWOvj+KmNRYLItp~C#O)0aAUjBLDg=M9ZpmUsODB24
zL4e+|5gGP99`@IEN;`xS5k4!c<n~#9W(u+cdsQP$MtAPqS++ZhmHe&8ZmFeknR{>4
zXj^V@zUsMir8vD6p>ZX?tj36U<aIOu^(}VHFC^Np{8Z#aR42nz9~refcc_nIcm(ET
zcd0*Ol$;mj_zuX*@*&_r@`R;H$f6maa(;JrYb&1B1mh(%Su<N0gcus>8?w8wVRl6j
zYC&s`qhCIs>;CL$&*Vj$NPv)Sf`TkXhV=Zx!jDDCYQdbW%#A*hHWCsN;oD3H7Mopa
z^OxpeT_J}|@&pj-znct8q!Z&It~I?0?8pP0^X-S@Xlj<jTvy}IE#BGNOD9)I^P^$K
z`|jQC$X66~szss#NoWdO;~XTh>h;Ecw>rmj{V*52&MPP@Lm4=mm3HtsVYMTxB@dwy
z+LBHGuiY_b{LE*tO5iV4OcA$5Gp)v%#V-}a#_mxL6Z6l=*S5Q#J0dxQ0Rg9J|N6?8
zQcs>gUt^fswz@P~B~g=MlE3x4x}3q2@im9`MyAaQ@Z`_MZJFn99mug+-7=K5lvdDU
zRdDy9!X2v<8oRT?<9n4yRio$Mnh*aBYp=GA%pWR^l%M?BG+DM~Lzk?E;c!~<@T}JL
zoxQQG-O4*-Qg7F!Ijj8kxpvZzYjyVf;I)2=Y2-;W*^-5BRpweBBM72lVwQKnoN&^9
z*4C~u6pq4_P?+cl9=h#Fs{|=Fd%N1K&Lr&=R8Qn~Lh~aLY&dXWDtHv*Dou6lIyu1~
z!gM+mbIBsvKYFuNv2Y_<Pa`58y-^BIKWL*&u4<jR58ZEoUgy^=n1<*_3&-W*YqY<s
zGzQ5m9PK``ZR+18cDBn#6_*{_JrotRyJgOxp51t|{{||KolN1Pn^bI~z=;l7L63Fi
ziA4n-mz$p2=dKeiEGXeL;4ttpe&bL2k^5P?_p@lC)J)l}RcpnAsWu%nOPb2-Zh4rl
ztlV9HB?QL<Qv-AJeUTC+0b3>RAX!K9;jTr<78`(yW9acHQUGAsV>2_Q2>39s>@nDx
zkMvQv3|VK?4NaR>W{w1z%xv`8)2F4oqY7`1-_gr@lmFQQ%mt>LDV4O8RG7a9)Hn!Y
zGdLT(YO%^jDZ~JX5%?^uC9Y?l`WTucUI?QfU($@rgkf%q{Qw{N^5x4uK|!K5s2|ue
zDEDyJe;alnC<2L~$e<Z?4begcbJW=Vu93lkfktR2u94=Ep^OxIM*mYZ=H}*kxH>ZA
zc=XXS$e~mu_*ja>Ovo&>CCKXCm%p<zMW_gCu)|aUCO&>3Fuk8hdzF{_O>#AlcO?X)
ze*v<9uv9uAWaVG~4E#GONr1G>B5bf|k7PQVOh$V8<HwH;Q)M1HdO8kzr404fUbuR7
z4>pnn{W?gvkSbrzN)OlZfE}Jh0s*pH>h+pEm0PHC9K)YJy#u7bZQs7N2wuTfrX?W@
zUG(Q~d{5XDpY8|krqXlfIf#J?l&<#CYpm}$Z_HNc2{9kqQf=x{=m%JAm^;tbH=RDr
ze3+{<*I@9Fcn`0MM<L^4Qnuk1w`b%Ar%8d!WE06KnxfUr3CSCw)2zE#c(RjnS&1&D
zJIgny{OKc?#?0`?BU*v;-lEJdmQpKR(pptMk~6ehQpQyePE7Y&w@8#ner|7XXMyx#
z0j8H~K}YSXtjq-6{&OxfdA7~jqJ`&yP*kD&{6>r(qOqTX-;AIH)49F7c6sygSN~$R
zjjf;kX%+cHAVXq!lR;BOlg9V*azZ>i=CKk^E}fOOZ~k}75juLb5iRFPUs&#3^xNa3
z_HrKFBYf4Jg(+VZ^Ph5O^~Eih#u|MSThY~{4|*f}S=P71(``Vy_3d1D)N98fmDacC
z!7{wCJk?{aHhQA(dE7>F0)BWb6-0Zs$BvX~#=YA%zrccp@>_i<*!AAUa^TjIN0)f2
zw6n$P?c0xM+x{L$tZdq5XhWY5%YZm4&!2C0(m0U-!}wp8nA_U2gHeok<&oKXkPlj)
zzAs7^_!Rq|@Isi+t)f88A@M&g6X53u_k?d?V4(3PaV%y-xFx*`AUS08_5;O)3(JO5
z>7i{PgwY6VL1uNy{v4-2?G*A5b_J`L66%J>e3gC*&~F=}mwI|$vmWSEY}J^tVnB34
zOt}HXV_NbNX>4({u%xuq$G*x17BDJwb&J$Z@0Rmsr*}L-bkZ}Q?~EKS@^D{-iKlGT
zV8nF^$ARbVO<w@1*3i<1Op_HR-*QLT+1X8v^ojYT=p!HhQ#8EU^_Mia+Qp01NbHdo
zcnk|>;&OAjG5d1<Kp+vQdMKm*y_F?3K7F$80#xY}JD#*_zaqlBGu4k_cSG&uJXZ4I
z*0L)RsA$Xnh&(%6wY{C4^55W3HTrxJqUn~FmO~j`bPh-aVAEG}I_UW{la=brqcM!~
zc$AM@I?R2pl<`AcyF!_4<u!I`vUD`n^66s6e9=E3kJ}c@$ZxT4>nhsjMh{Mm-}uUz
z*M;eUk{riDy7HL-w`xZL#8iRv>42XkorYfg^!+{oUqLturpT5K^6bm@5c4ElHR1*~
zGBy9PWj_u-!>w5!M9c=Mw&ZpiQbk*-a;9oXNXXiC>$==yxvMjorfCHF7q6#O*O>B0
zc@z|0whpTmdC$CRN=|Fnb_9iPBo78zbnEC@)7c2GN~}bt4h}Jd5C_j=X+Oh31N-EM
zhxSIT4u(=!julNQHckXAwoq;BcNd7OP%4;{+GWsD3`H!w@7j9#Qw`XkNULCcGb%N8
zeSUsEk#U1CWqxxKkuXFIUcK4@y!;#ckBFG&(klU>*m84mbq)<ZL^x?+x%V3V6fsN$
zp#kF{eeS$a6Yy+-*t-#<LlPW&xzKf*VRf8u^)_IQSK;E)yuCX@My|IH@7O_Pn1Q=*
zV%!xP_%s|lw`x`lT4;E#AeA@{9jdd%y6~i$+9vQg+uxtp`BCSjEnJLOC$h0nKgSVP
zvg0M0S;@_gjmhcggf>x;(RIfrCl&BJ;3WjDr*<_k;LFR;Pji{PiVU5Ts(|oKu}hHW
z-F|Ihpv5R;)X!_F$RlA~0;%oaNI2cQcdygIfyvPaVFPB|j{2ob(NJ%inwm;jD4-uu
zi2#RvbdpYiD=sZ9J*0Dh31wnpA{X-$f1)s&3v!99xhH-EJ~-SJe<yF>TOHNM27LAg
zo+T6^^5RT12CEQbq!apbI8L91_t;uMHm43l7y@qRUt~pK0ImAhuRGXiJ1{wkn40ml
z2_nEF_J7PhJd4dXZk2K8u(GnE<Kv)x(Lp7433AbEjRY8-mSYSoFooe8V<<oY*OQU)
zY&q`zjG>;YDl4KsPlAGcOv{7%RdxafN;jrPM^mBBnEf?Ud}+<iE&s{_Ac=jdL7<>3
z_B%b3PYNQ@h_r6O;llhAkA@sQUCTJKu!z?|Ij*g*f0bcB#;c?-EYsl{g5lWI%G<@B
z1rxq|DgE4?d88;xJj3eNTQuyq+-Uvju4&H3q}z@~8C<bqK5;*L{I?@(bI#)WFtsDm
zRQVtC*;jL7Nx4D|(Yel~E&h6`P43U6Exw;GL$0QEahU8G^hp2O;i8&gy=$7RKHk7B
zLmL;O9|4UZ7MF+S0b5|-{{6*Zh1w+5)2BV*LtuUi&ZZ5<%m6FcZm3u)V88mJ5u-#^
zcXR}xx-6|Mj*@;bQh?$=BSc7K$qU5Q{|BpGK0JP!%-_7%{=0?M;^&5-7tI<7m`SXP
zrkD=60l6Wc@Iun@z}d5Bt7~e!5OxOu&|r;SxE(aLj6$L!sH?ZvD*yBI%)1{hN#C?d
zdl%2GA~_qy+UAoT5%1F$q<iyM_1%$nDtG%cRB@K3Lq`5M@WH(AI~_Io(4T{Sljism
zl4Axd3|rKi8t<+?*k243`sBh~nd>L^YJ;r&Vjx-DxU847c2L$%&IN3_rZyXsoJk*%
zJCfnlef1Le3YXqPEaK<LB%i8?j>hE)hzO^Zm1_@*Z#TKQXK4Qj{yjD^afc9Rk?;Hq
zd?6h>H&ISl^F<MI?{d{7Y&uB@xidoJg?JdF_*hXYYP2zp27RgP*zL=2xbkX`K`|v{
zYskJJJYG;N!OG$LWyFQA%vX7oBA|l!AdxJqJUlbhM1u~5Aodl^xVaX-jEEp+LIY$L
z?nx&OWBwJ0(g#cx`gE#U6>mNm&E{ERK()N1!lf<GWfP#{+@EKvhNh->L3FeZtCkL6
zOpq9wj=Z(7pJ;`ZeZ6#32rR*x>k{&qXC!nt?&|;Do8*C&VDUjdx(HK%#7F@IBa8?<
zU|vM65jLyb3gP)jn0SEW7{bOII63e4*Tj{;r-f@7E^PT$bgH+4d)MB*C3SUMV7L;2
zw$~T?Q!yh-WG5`7w2_O4Limtw3f1rj<Rzds)d(j2_Jz)38h*W;=hF9Eszo`K$&o_G
zAY2>Oy}N{Ih}&^-doj`9SmP%UPaw*z5_W6gOcI_XjGv~gq@=k2#W4<#`$^z%h#W7C
z4%MxYyv!VMCdMnoJ2;Y9?WKyqE#5ssaYlrq^Ut3(h>z$KGynhLT{jma)Jxcv|DJAq
zT<mKU6dYXA(7+CGws!5>B2X|Gy>yW*Nx4=?w%gXDR+OSvSV@`JClX#Xf+YyQM;p;Q
z1fC^w55)bVVj*SHcg&`?y6KYIU=JMFhY=T+2GqB#Y!0n*SuQjZZyfV0%q()r-MYH>
z-P%{5TTV+FFdB}vUyPJ4?D9x1ph{>AJB?NrTdHyyK6A?v%f};I-3M})>ve|;)QfJ)
zX*$gqO$Th5OL?);Jw0vBEjPZ-pR&A1Gv^(SoLHC5EYmqa`58luvtoV(`!CI=Oa3yD
zen9%}T?8tE>qEE_cuGg<9p<v4(IJUXOW3v12z!)&DRfgcrka@Xu>ky+Kb$W_zSqtU
z1Kce50t|^A{QM6${eGA<YW!0sMD1@?g#MxRLD(IH;gFr(_g)qG5Yc%;8!;Ta=<>f<
z&HT>^de=NF1!Se0g>!(}2vOH^rRG3M_nAxkV^3_B2T^+!=W*-{nIhI&BkuX3=F(gh
zW#iIf&JKR*xySbPO|6!B*#=&w{jB4`(_iK~JPsDU7swu)%-0OJJ+XSzHE%>zXb#)a
zo!sTDe1D&}f;*?{;*rM<StYi*oGX0;-0Mdl@048R{N#~XG?*;ozE$lG<1D?$tV$%^
zxt8y#s}04v+)l&Iw7~E&^zYYg4+=^3lnDvpHuTR&5gf16H1NMEIl52|lR$QPs^*2t
zDj6w7L<=9@7cBiC;;_y5HR7^fNV)z7LWmJlk-ul;Gjg0y6^0adhLb(&s-Z>sQo*xt
zCf0f_kv7S6j0NN(*&W;eBnb;r>Bam^E&O<sTZ?NAJjF)Sc9@#5u`q`5+nc`g+ma*}
zPG)gPG={a5yI*N`rGEAs!M`zDw6dXNyYWw|pz@xfGhN<~(~dl$(o52S+hWIiQ6jYT
z6`5;Lq_C>FxfzqctM${{3EqF1R$;A6uD_BTSn3W$9GF)w{WPg<YPx=bBhPu1_v()q
zx2t3pnSft$&Kv%^fQ^1%;3}0sz$_aQe?J>lF!<j+^c1Uhc3cW3*u-62q_&$(DVzND
z4x>H8I}fo9*JuULlkFjh<lS24YHMr5N2@d}IzRh1@-dx$)ws?vZ^Tt<q0xK&Eo8$W
zHW7n$ys}3QV8Uw8vCqHEO@!JO7u!vNDUqW1`-3s++&&F28ork*A|~gKaXelxlC?)9
z3aKFmOaO6Z^aq@j<HOxszlw?ZD~FJivqMIv{m*KK>Zx48gPr+dGn(FcN~OcRQ`r@e
zg%J!xyhp6d=$U?RK2{8K67%ie_W#Tq=l<8n;j9<=KlyN-|EsCT|Cdkj`MTQC-X@#r
zD0DMomGz=t_JGDL>$lftxe0EP1vOGNN7TNxOG#z4*pHrTOKJ-V%{`LapY-yhTCSQe
zy%Jm3aXJMX<y8M-ry<XA8ru)0s)k!-TRwYp&{K=ibsI|TLHL4Bp~z6~*xL1!3|X5C
zk6j)Y$xHgoCJZckz1c|)=+ye9+lS9uA{kPzk;MN<q&;#`G{pb^fBuEB(E9-anx{^k
zdac==`N!_#j(i4^XG3FoN^xE?zn+m%G*iiWXeF;TX@%dU(z>2H<-=6+LKL25NhX69
zZR4Z0Q}f7`R^{sbcnC~E@e?X|Y{Zd+#Q$qecB~DW$YjA)*grxy!<tfxS$q|Ij3_Wm
z5#+iTwk*Sc;J{h5SrC3TXfxHb$D?Tc7~P`yq+Qj4jwk(*oAou{B7XzY!a}DPtN#2g
zpsg+3+zCK*-iApUg>_jx0`#|K8sO`ZTjcSv2e{nh$8V3OL;Aj?p>bgQ_Tyk552uhq
zRW{sHJv-deHyiOAkx$0<t25?fFlz!|ym$-C;tXb)o}t`b!f05~bbvP`J$wX7{Oi{z
zFo*+{Gk5crExSvE@7!utVxBsm-$$p<Zp1o;YqwGP_)0`X#3WP4VE)!s{jE4X@~IjL
z9XDDY1$oICv_>oV&YAF%)>r><OAQJNin7jVG#>+dH{tLRYSfIu`+O-aUC^s<Za(1m
z<rSn<M`vgHynr`!u5a7zX;K(#)+~Um1%`zsAU$zl|Nb)w1wYxf49UN_fSjACk$@Sl
zO9lp`xfP9#FHo5R!^0EdxNX_I8Q$Y*1hFQ0(;bEy(@t8?rbExVj-^c3Nh)v*4G#~u
zKRS%dJACL+^wXys-@JKqeR*N}?74IGsC7NluDex6_h;)Q<=FQ<!g~<wglO+#n<`+-
zTaTfH$}25De~d1p7%w1lfQ}G{nc6cChMe9v+TpPSEB}J7oP^JtX|fR8!p3&v%9T&f
zZoVba0kSJvY<?#p(xq$huUXi^#y|u^z6&$8<vOeWn#!7jbNBA;+tcgTts^c5b@-3X
zQP}4D6YAb!SS&s}yTO?c)D}Y$nwKw!i&?e4g|J=G#D-6i>T9#2qo?0}2D$ixjy^~u
zKwLe!mQlmSgVXQQ(=USJ2G!lT<m8kUAw$mDA*)Ez8osk`>WjV?KKyE1iLgWO4^GU@
zR=KppUt?%cSQj==t@ji%;?5Fbb#3ka*T-jNgy<Kpq*zYo_pvyv77Ysi?l_K#*tFOE
za^g%1a20S_4G?&1F+u}-!PLZr0{Oi;-P8~97WdWbth~qGA`h~KoqZ7J0Djyrn50J}
zB;rBX2JulIIS&0#EyTi@N*<SVX-zq0_&<7dKuk;npEv*mvIg-qM=+i<7Znt|hMaQo
zDAX@p=*sPYT07iPXn--YF`lbZlf7=eDsC1Qi9|?*N7CUmqDJ4peS2cWAqh>VgWK_k
zb=vSXr}J@m<giHLE<K<)ZNBy~M4VnMOa<rod7IVj;#7W2i~{KV19U40znPeZ<@7lo
zC3I!~ZJCTDXp(X`p0mq>1Q18+M^S`H0gU45>+x~hH?Lps!_mVqxH`-frjlyxgkf=2
zd;1LQ+;3G?!A2a-X~w>>v9S&av~l`G3+QIO{qR8xNdCDI$GfDYz|A+^@R>PNNyH6r
z;o}p^ZA-?|2Ck%07ro1<cCI#)xyL%ibxf*yabdv$%5sOj!^x9(QO0)6k7<0CzujJ2
zyQ@Ul-GEhVD8H)wc0r?gi~Q(EFET4#-lH8WJX45RD21|2;X&YYALgvo)Yb9h4znYA
z)3dYq@D_bkDLl1-(NW@3GtGlByII%Kkz(1BwO>rEKD$9Dbj51m$FsQCQP$$Z!q_;^
zpFVws<*1S{*<0Nu2EPQWK`i8yT2xiL{XyG%ix&m5cq-Nq6?D(uz2xlsfBstWj@2Kt
zuTbxZs}&L<o?nYqo_-3Hg0)j8`FB^xVAC{s%=ZN2^&l1p?s7TCtDU6rrL0UTw0+W&
z!v|9-3E&T?8V9jWBHbsx<qaM>b}aGF9~1o0AlC2cYcL65tMAVB9a&joSZ<6-DqSoZ
zhPSJN=PfNQjT_apwN1l=LX=2;B7?>=(<FK{s-dp#48sz!%x^N??&VI^teXTwU>_rv
zl$Vk@+%wx+TtH8wuNf=(dATR!Dr{)Cc2%(|ToOv1ONuCy0&jrg)7oFZUg0QUQf97~
zxz|Y)pVAN*5iyc0BP3Ln9e1NZ4g;#uuoqKs&D#8IxIk0_rG@>~1~LyH$Qgthve-t>
zhg9ABYsG?DQy^D8#be2JPTAFu3G_fCj$6LklRQ&j1a?=O$@cxoOT$r_)SH0;H@`xB
zVA%Ec4r2|C`f$fF*ZhKxwjb{LDVq2gptC9})4KInGrn16D}}m!=ouoa!~sc3*LKG_
zC<g}9WppI-b5RPdH2HL!D6%0g{)w3BoNG68ilU!vo|$kPd6O4Rudf)(G8G~niKta*
z#?p^CGt`)fSs7m+ACv5sz{iiHkW9iZi9~XV=h)5jK1OfT(k?umf^@q`zBmi-3zH((
z&|wBfMj|%(-KKsiZCI>*E=ti(isAj`D7i?9%T~SXubmk>&T9CEn%p}!g-1kp*%$FD
zEEJf{qMnTX>BS$s)8OSlt;3k#OTUhdMaifit=K^_bfKnojcVu&rdh^B@-ri4zUXY7
z3U&%MD0+q3*|QHyOG~K>W<%CZg~X`Q<Y(nCMYu_f_S|l`A5XIkA`H*;g1dVjW{uup
zdk-S=#l^!DxXa)$L^)lAlr!<cTCYJYUGnvZF<6}4keisO47nr+*@0KtVV3Uhm+@&6
z4aja>($`PMIsYomB=Pdx8QGIXPyp&08{eXp<7<|!A1>h63PvO77^d(}<-)P7H6KAs
z4z7l4=Ju>{-Ie|SwD+B1O{QJ`j0otUFpiFlgMbA)#RdonWJE<o5a~)&6cA|+MQT87
z==cgl7nP=f(m|TkfT*an&_xKbPz{|xAP};@N8bOw`@eSIYp?yV`(@WJY6?8LpZh-N
z{K`3bLaO2W@p-femq>3SB6DqlB+C!S`Pj&NXbepxf+~7)F|4Z**WEuq+zv)>CkhPY
z8Zd6tjta;b<ti(1dyMStQbw1>M3*fMC<u%m9ZY)qlnA}-Z)sV+{cm`9r0Qy2M`~xU
z+Z@HANUX@JM98mgCunX13yTp}<-(;slT+DEO?naG;TX1e5`Bmtv(H`koB1q2cez`}
zBA9a&B6u@8G?tVTi>gfJ@MbCN3l#6?h}9yC?U0etfgA6AU7aDCEfNQBtNKi*qucmG
zjtNp-3KF7>=kzdip(D-;o%mlk3IMbnqE^@`EnPS2?5O6yU<UdUDYRVO%vQ$%ecVq$
zmJN3m?K>Oqb5LAN)z<`0mA`0C#u&!2*Z-w`mCF+IKf8#iL;8KICc5s4{qJaun6rT@
zlA{+Oqb;F5*<l-p<4|LhyJOq7YL?BpH-~Khz^tpbmX>ggYIuxnjuVP7sO>S@Jw=oM
zF#P#zuo{t4LDiy>;6S1<Pvp6Tuvc|{jwVBLGrgp!<c8B>I0bNDD`p9&RStzsVar_t
zHpIPoFnR8k)hHP}UU*1I0$Rmq9((7s7tD6M3e1VG@D#f#P5pr=vMXLLb0hxdIdPRF
zK>S^?^nd1omp>1nQG5me^~$rme<l7}W_5PhO8CDG0<^6!?36~0giQDh?&BlXP~=hl
z^js;~%*nRA^Yn?fd7D2qj6Q!TgVAl$INqZ`(T$pt=o!3tms!RC@=s!QDjs~fQUWh~
z21uRk!?~Tqk<Eh!?(S3eqJyzP@``jHEnbc3n_C{Jh&g(P6l&MAx;HiDB>zO98x#HY
zLV>UlR;gw+4~AELUN%>nK(+R=B;G*o7V+wAvG!6Mnp_fchyXulwNo-PBdfnIpDT4L
zG{r1C;^m)wN2Rq_P6v`LPHH@io$nJl7bkLi%@Q&Ebo=Ah*1ZoN%^Bup`kdFUUwK0`
zK!}Ius@zSIrP30yWx|Uu`Z1u~ZK={v;@@#r+nOch!DVh64t~Gg={uIPo20je(%cRG
z{P)pjyG>o%4R2aIeR4mtcs<JvCEHtC-eUJ|*>VI@@=8Y6=YmJau9VLu%hubzajAc+
z6MtTMBlU;$A5q;SwuQ7_Y6WqzsZ6Qn3Whomnf2AH0Ss0Ov51kgc5pa>DixLT-<YZQ
z+Xe=nAweRMRagrO3btZ|;;sB8kuqyS%=Gn99{N_<<nsM8XupGM``9<ZKdYy!g0a&f
zz(P;&3ro`G*IPpC5BxNC1-l7>w;35(#60uy<3osfKa4t~2=ktw8Gl>@7n=d9^p&2L
z%P2`s7{H~zQ%b4@+%@n;L`+Nu2uQvt5a7#R2vs^sR62z%y9Y(b(7<5E+{nl%8OnuX
zjjG?g33T<)Wcv29QtdkN+&EbbUYo+n-l3vGv?3Y<C!su#EUUk(Lcx#+nO_G`{7+^w
z($cjgUsYGj&bY?Ssue(7F^6SMis9P({ulh2T@VBE!lqKJ8K#vOqYL}qC>@F9BgLNr
z1AIP2JR*>yZW63-MzI7H>Ag*^9ZvcsN5_>foRD<EnV}9ng{ob3<`XYsl|DN6&wP2}
zE2p)bi7u5h05{94&itUoN)0)vT#pec1|}xkzgJh!zqo1~-yPDmP-0o%abEml9(Tle
zW3;G=^vksaxR=G3KVL&V>08B^;xDD4qy|bXIU8?mWb_UGM0Bn-W0GYWOltL_N6;IL
zHq92;3|bl+0f2;3l9FCKN24*Ix33Q`)xyN8qH@fKMd^IeOZeAaRy#Ty$HubJ%kB=v
z3Z<6)<;%L5pNUBa6Q=cF$1nER$9x+aYQfyPmgeRs2=DKPugpn{3{9^ZlD|Ve;}q{x
zW<f82q>_v*MH#j~3a|-_s@v2zL-#9J(2kZ;RCF4{Lu)MhU&qpy@UbNp#snx+E2b6Q
z_we!Y6%%=oR;^cS!GaoVUh4Tr{do)=7Ot@{$!bqSh+y-1?G8}gzdsQ}0kIj-aA|k;
zED2~EW>n5KSEBB~9sW&1q8*bBQn2}Ci=EKANmRDrI$OHBq@rq)FdYHhTgua?wqC-X
z(UCt7plJ?J5p{`B)q@|jCU+9I1UYd3-o0N+YHe~e2D(D>Tmlwq{;FM>zV@6T!GDvd
zT8*`ewa=e_qB`5NdKmR!C5h#E5O9tPhep0T!^phc_cTzcYou$D8Q|<GZ|~yi5n39&
zpkDM^c{#ZqYHF4ko1x^*d<J1FDzDz;v{pwD5ZDtGg#!5wK0YPLGvTqZnY;o*QZI~m
z-XGrl!SUyW{4P>lMp>D8V`HPMjD(n&p`KnS_<Z$(@__FvI;2vT;PR;=KvAvgG9XAh
zI@dSvEtFJ@saNzV2LwdxTT*hej9n&*P!+F<!=X&HJ~)2Nvuo_de97>zu*vrl6*pe$
z0S;ntTsn4A<`_0=Vb`%(vHo}O-jyGVD;feA-X-sm$S3-)!H;X2k1*F5R$0VIZ7CjE
zsWQiLR##HUMtcVpVyuDTFY~8GF`6m-!Gl!55!v4c5JV9U-q+U~+1Ml_+wOH<F*QB?
z?bV&tA4|O^uLX=udAnnPBbw89$;m~K6cUmgG=K{+(cq|V4ccSad~DyqNBkw^r6t;%
z@{IOUael&MV#J=iuk4#0HeAA~k)<%jZc*SgA!7t#Im1jQ3L@n*@c4iV_NeG4yvugV
z$QT(Igpc~ngVdhPVD!iNXQJ@fvTfTOnPg;XnMIrzU^T!oCI5v|pzR2J0MtSq!&hL|
z83Ymk1Esx8H{O|6YzS9pq$Hgj6(0W9sc;t%p{4KmP0U-#ckS0ftaa>o{(5xa+3Pm{
z0z!KZJE=NeB6XjHiG$e0EupHV@7}*}!ftJ)QsW^EA=@}L_F~_PlyP%%_8=tfP*glk
z1T?G{-4(TIwSk#gI<PRkVE|NgIYXq=0$>VbZ`0w?01Y7qBaJLoq$ESqyx2_>F6NbN
zTizQrE}Le1t3Kjh_=Y(BdJEH*jUAl!ZJ-8>Ei;X8DE0dD-aSL~m%~Dwi9SKTC^eU!
z+n}tr*fo-}($fvRyozAoFhIgZqokKwh8ngm=B{R;PEW;#L=_sF8^r{IMkqJ%@F*m<
z4_rqK*gLYuo~^o6>7;?r^k+~Ic%DLNY1<ywC8HxkZvXz;(^pVG15}rrcrVNsL9E!<
z{}bzMVer{P%^PjU`PoQa1h?~7hW+ja=bBj|HcZ%(+7g3}V3Tm7F&Ph`aaL%b41P0c
zv0H(Ga`N(hBJq>MzjK+*CsDNR46c5H?oALj?>=8Xwg`z4rBg~uOfe?&xAp560XYiw
z`_R?H;ei<Q>8a#r56$_FeF}iy7Edg9yAZKB2t@q(3%Nvm(mBRIC&mOisj<o#K!w-_
zf=+Jl-sc17%UpW@1S=f@)63XTQ_(7IXu1}Z`8wrosIUJ7-9IT=StqfN{M4?aU3j*h
zvIkKOdd-%tTiL3K77jj$d&KQVM#Im049aPik8M>Lk*qdDF!qmwSKYpmbabNTkA(^A
z$~Utvee!pc_}Q0VzucxImigjYo4fO~nhC#S{rpDPL1*G_;0(N}u5SJKF%_#X<M}uP
zZcIm7aVv|{@OlaP4YG!4%W8}j4H>1ryon~IpZm7{GIRwE*+A@h;5h+iK+$|dD8(H#
z($J{B#)^xMUUymS8cp>YZR@JvcC8x#g(%$NdMJDG9vuQ*=qsT^FmyO_ld)3cy`<6M
zVZ#$A{zmr_MRnjl(W9x^98iv*PMN!Z=VEa6*ODPb0d|$dLiQ)Nrj{VHgJrI(8;?^*
zr=Zi-`d7@NHLjS78^#%6!*w$+BPdTz8dRA=PaZ)%Nv*v*%6mVGc9FLJC=ZW#Bk>&p
zMXnk|oW1<%DpJ6HRaF@~Z`qmJQ-ZlgW-{w;<s^<iXgFL}(>tM3fN@GQnQ>lzLkz}4
z)^u)R6i@)Aj1>S_PBztaIk5gX;X<GVTt5At;kx~+Z;I<f&Fql*P0kO`w3j8IYP7J6
z?nRE^Up2SS9?jL0<!>?Egn{AoOdtI<C*sdLp1G)ua>a}?e@kK4uDfL&X)V41So1xj
zrxP(`vrnaY<WPXc>C-91>{<%%kV_HDA@bMj!m5Ae<@FaDE50g2)<#+<C{fH$%0E}d
zPhXFXRjv-^vYB&evX{h#*b5Ff2`7v42SK4#3b2s_c>OAJx=6A+c8n|gZ~$@u+hCH$
zQaYBq=XE$t`q8Wr2SG`hkL4hLgQWyvR9hsoYnK)tZ|><yL|%J}GjQ*3e|wgfXP^<Z
zKAN=vA1@+x248<zvibo4L^KuZV&d_r?S{IQZkpIA(?__6I`6hK5a+__#$Fae%-02S
znyHzYv6HPoRIIpmuSd6fR<BQ96m@a%?e7~EhlcDUYy;=YY*|kJnG8^edZ75g0FSN|
z*dSdhrrGR#12ylk$7vgzKKr?sw_gM3<0ADB9lEx4>(+T0B3M~ibU&Ii*-r3gSVN!$
z&T+<z@czPH{^E8<jO(u~5Ip_9%XZ7jCE*|-WYQ@9mQ7tm`#F&ooKFtb)QS%TAYx+-
z7QyJ47r^(TNIxC-=#hb*UejX@D=<`uI(0sIL3K8h<X_IYxac7U8UY}p<msEgd1oEY
zH+cMqEH9l0s;S%d>}ixuyuOl2>by&HYDbnQx7P_V&lVs_)Q^j~-PhYa%4f8x{(4O3
z-v}fCNQQ8^6JY?r8Bh}HT?$bekl$|ip>C8WD;N8)GO^)Nob6XqN=2{T>5Mi$Va6+l
zV>yYqN-%H)*#zS}4sL2niYAKX$&q#D+i_xE1l_qq&<CwxZ$m;><rfsB=H!e=v?;gv
zP`7Q}x@Pt2Cm0loPl#g=%A!%B8s2a6#`ez6G-Ofw##+c0`j}8cP<$GK@U)r2cY!Mj
z#jQ3rjvAd`VI#~WG1N@$?bE>D(yfUMS!bh9CYOP{WWq@W4ueh3NY2R6Mt&=I`~ohX
zaHL_b`rgr1B2f1xG8zz!F&Yk3!5Rq($|uX<UqwZm!F7XF%Y?UjrI1i+VWBa8avK70
zD~dY^3n2cqPn-btv}b@MoL7eC-=pY5_eRe<wuT#r?QR(_P&{1wl><XaKiP~V$+!BQ
zY@p}%F9$yq)ouT9EOyp!)@s{T!M?*THK@8*;x0g`RPvfgB)AvI7AT&GN?Q=vWnF-f
zomb~6e5OTV1o@=b<BDy%%p_m&e)0=1s7m<kAh{8En4c=IdySsY0Z*`5MnS>&N{Ko6
zn(q|a<-w$7y_#Qa4&^5&zhMyuwmcXv>Fc9p%=Lg^h}@HyC`nNy*aJ`|#QJN}km7Kr
z5|N5_qBg+dm#b7|smIF}EaYnI=s*uTSKraZU@#(}C)|DgMOm3MM0rmI48UZ^?P%2o
zmGiuF7@68^>|$1Q?tA~SN&!4TNE|J=$+-C#)M-^2*YN7q4dSSn62qX#?7^oXHN)B&
ztw{6MxgE%p1D#*Rhc=Gfb(94KO6VacP8e8OJti7%P$|*z4DHH=3y0U<eeLmz=j>MC
zpXd$3M;-|%7p_D3SotU+h9t0dZH{`^4;#XvkhHg21q4O>fmU;`lRIzsA`AAf7}=dc
z$VA_7(QT5z%j+b8?43Uicp9RRM0=Z`&p?hZHq4JR#`;%}fl>@yJVXdCDV2UGPB%Z>
zBll}pQPMKE^es!3t{Q$ujwxTA6$7VJQ(CSAvDZ|Bh}q2E?mTA=|GXfXHBE|=Z0|Vl
zQa;yr?c9hjOS`CE+%%*ppk3@=k$my7qk98_@^36M5r^Vs@zf20e|`F&0{w98=-czJ
z`3pNUAfaV9i2hjbL0`d6XC#2!Xb!W?5}Yd~CH{k@c%)<dq2FC82I=QqoWh!7sZqv}
z?t<)wIiwx@2mHeZy}y$NSPsZQE_iJT?Ob%jpc{VGPN~U^rC=x?jh3f~%oWr$H?EDG
zwHWG@=`V4<WvyBvwfJ5|ycaMEF6-3vbhAc$^~<ins_~C+W>?_7#P58U)h<1wP_Hf*
zJMSHX2Uho+xc;|LQ#f#F>H0q=>VE+fWmDK`oqq=5KM4v_X%h#n+@(#$aNydbK_Sac
zg6HhfgxftJ-PhgvEGqv{`q?o{tpL^4y@DK{EfA)S0mY%`Qnu}Zqy@yw7v;}prT}D%
zj`=|bGC+Ud<sultuGTD7-nPjeDlt(x<=KUyltA$W4j}*2M8Z5R(8WjnBCaCk@#B}H
zu$Juw@N76e4Jse8EPOxb=wNSua>rNvzq}Ki2qU*aRUc@+Ez2?s1tO?%DLWN>Lj+OH
zTHZ$cs}>Avu92O^?)DWVOa(~>nTF)nZ>E7BgqId_p|;gtXsreMLOF|`ZzJE4W6QUO
zcKWkw6n$!W?@iM=J0)Ft(~f*tQU-NcM8=GYdd=ChtXr|h-OX(~k_TMaY_twd!D-B(
zCaAkcrr~=xFmDhYa8I2n93u#5F{^bDkCi<}3{X7)P!Zr~7}w@h=yTe2(*)87A)v!e
z{|pES738Ih7pYY0Uv!s*1!6&}-kU6vIj(x9rVpX$&c{Br!4QNUz_$451eXs$0p0<U
zJSA~T3Se4CCkXbMR`5cAF&)FxiVcC4OWB}`+%QEGtV~@|5J}+b&9dW?4MCHDsVF38
zWO6$kb}4yCW|+lu_x`^R9Uo7!Bu^RY*8Dq`q+jamxF>{QLf9j|PoUU$_Bkq}KB;z;
zF<@l~TCO61*Bg|^^Zvs<F-ZQH*eZ0XLw8|By{v2_Gg5RQ7d_&;pncW%g7yJBsORcB
zxhtz5m=wV5s|OuIu&e6Z<!cB&oDe&1LEp+TVPbLvg|Xa?$K->{X0I!cV40iSMDBZz
z!Hel1x<b}ENUDMMXe}POcjP30e`cB<qga7C#G<Sm?5eo*Qvs;~&JRPwPr35mWfrtz
zcP)HL6I2QF-S@kk3g3fv0p(d+d&0cP#k%_}Si~v8WQ^XkZn*PSOH;EEN&eay`Ebgd
zu9LILI^Zm58emU^-g!fPBs?R8e!HKOe`mJbV%2sk8r}_cbvI}dd?g0w4tsEhND`u=
z`oMNz_6YjY+Qx?Mh}xsO1=SRe;1m?Zl!S!eL;d4VYHJhB6bji$lyac&a3JykGqy-d
z5`GpxjrBZNqd`qus-}}KTzDli2%RrG`||5Pd0wJ~&*o#JS|Cm}C{!>^VrqV7z}K#k
zJ`+86u;p86v<y^|3=o$}zB6NwdZAzvf*Fcz)QxGSrDoV&Q>HeHbO1pHz{s8f+Q=Sa
ztLwA@A90dVXoLMiQ$r+(hzqDfAhO=Q({YGXBHTNDD<UT}!0%hj4p?cWBpHeT&+sv4
zSW+wqZ~|CRDlxtEN1~ODXxj-*#BU}zAF-`!%G5H8EO-Q%pdY|d666md)Jv*BfkL_D
z4e=JtD?xl#R{pNJ5I}sB42aZAxSS?t!x%U~mm)JZ;8!?gARI&arD_{_OuV%2^+bK0
z@2$CZZ?d=6aV=~$pZ~loD6`M(k5kY#bfbDXf7JssBACI;15A1^I5;go-w+K^=FCJh
z@Xo&<nOH>U<~BAq71q~cR)>Hr_@}VEP_TDYHM~>wko^{34je!meVja*10fg&=MK{c
z;hr!`bMIa)EVFh181;FF!-VI-(B$ATc;lx!ca?wGID&%#6<#Jv3vmY8K_dtQ;O3FS
zt`qV8<F7@q^<rH)4yg5%{N_C?s)c!Mvcr!FSwE6>ciOjHKGd?uQJ>iUo18m$N#{N)
z3TWM6<!_S#lf|ub7v0?U>!n?7*9D@(Y_ook(}Z4K)?wn)C&<JIGia-}_0LfNOvc)I
zBz&ixyuI0_+X@~9*Yt+AUYfdx<~dRmGocTHzQ;({xbz%zP#^FOd=HyeZ580hW)6Ba
z9I!Mq8#3+dC3zfJ4+g6lE$`tG5%4wn26iaO%kNZHHU*v54(<%`YO|dZ6|M5>gpB~C
zz8_;Z;1nnaaFh@SHBhMo=Kap`<=N2mPw=V;Z8LAF6h_b2dpKg4jAf^Y@{M}m0Kd_0
z6`Y%kFa(WGU`#Mbin^lUn@h?-{TQVgA^~OP1*t8}Jb~40(pbR7)wO><CGX}E8e{6c
zQy~NE<7fL2lcT^zhmNY>=m_Wr1O)R<ncP(?#9W7{O^7D=Y?7Qj0S;tlh@{xR6Vg7A
zco6*FD9~YxK+wv%ceYz0{qXmqd({BR^Trk`0vK`bz=h*`4^nb-^${rhF1tu|0AgC_
zn6!Y2Y-~IQZtm@+{M4*0*`~Bx%O1)SZ;OC}iRq4MU?Q+l@cZ<vtiF_P8#CQb-I9`;
zdK`uWcv<tHt`Wo)!WejGk$u3~U^a=+f~CHW+<_Ui5VxNq(6FUTbmK9R-x5@7`RKKV
z`--*XK6wo99p@~60dNi>7ImqemDM3!YB@<lT-*o-8^F1qaZfie9Q5VmHvR%-nVC99
zX{{`U&fMHw0vh4+af<Cg44~$3Ke{_)-sSc`kU{ill<buyFV5;n7JlEMQUR*C+OTaW
zFJY<)L4*Q%A(B;hyGm*OTYxw9-v9WIX;r?2itJ<o(WZnZ10EA5Gd^K4ODRC>TxNe?
zAMPI*!Hej!##cWLg|_8BeX4;X#{d)sAUkmuQQ|1pNUtHjHKa)A(SbdqWW0^7W8(qG
zFMtzL!4U{aFb#wQHUm%*mbb{rWWoaD?rsMk1z{BQRf_|asQF;dwhePw;*lsYe2x?>
zq1J}x2c)e$2oYH2)dM^hqW>xKGK|lC!OIiroDv|OdO-M!)4ok$hBpuzA|%QUCN;~M
zy05&lT_2vx4ml|IAqy1aQn_UQIbQnbpZoZY5dJGtFGDt>pKd;hiLHaJr{zm%BR=bW
z$-F#9M<q9V<qH%`0!M{S(iB8ixB`E?cc1?7XYI<;k$;GuNA`v;|Bliiqy7h)D6x6}
z4vm&ElQu72AHLHe8EnzJuj4n!7XJsUuyX%_Yv6wxR{htE!$^J)Gh{NfiW1^X%Nyek
z8}Dr!n<?rQB_4U0k$KtC51)$XtoOO)#OpXxeZ>p4MrnmVI}HvedcXNi+<8k^Q=HSY
z#s;g*)q})K$29O#k5K1t4G#IMgw<~qy&;}fey32CvwR7jzdCqx3)O$Et2uXjh)Vwo
z?zquQX-?OK_5u0diMQ`A%U;UHWgI=ozpih+|Ig;@g0z1ko;VRqvOVnfeGBsJzV~1J
zw___GyUcbo+xez+O}SrD4gYU3ykFV0^1i>+y1DjT;Y)*87_)zA+}TopTR?$e5_ouO
z&a+AWvbmc27AYg+KLw~Z4E&*evFeTyCrrC=s&Me$Dq*MZZUUajYGy#Jdy=`ehvnOS
zy{#qD^i>17ZzykPbV8XTqN1C`KQ8*YOMhz?0KZOSpPa2rCHFK{i^Tqn7s?jOYwEq)
z{P4T$<f^glHxk#9<(nlTu#MS2?M?QazB6)AEH<~+f0sier~cH+VC|IT*GYJK{;?8u
zs-`HbvQd*fc~+NuY0jMPE=_ZCROA{6`>l_tQAx=f6`mO$_gAEH>w-#(+YZL#wfR#)
zcAdRfI7MX^{&B<9aAS5!@W@OgC%A~!+Nd^Cn8~eb+j>vugl6ci>g4?g<&!9L0}zg;
zx0j@=|H2aJaXI;oyTkLR%QWs_;5{W8HBCH9LyYtF{mfT^joi8JQ8G&fZ`u=V9H!q?
zoY(2CoMOS1uTFTdHi}<kn>)qTfXk{BSX>dQFgU<+QzZ;_r=E1{q_$J$XOy+QdPO3+
zo!z5TR<EA;9~is7;N9%F&i`WL+nI3LR9<s6pQUG}>Hgl9Dl)+fs+|cG%!}#zQ->nF
z;!H7({W!sxJMncCbKr}g2-2rgDrcKneYOH@dSbUxf5i*=NTsRvhfWOchxT-=VBX+e
z`LY-TS&i!3p*kG5mxa6$<{vFP<ZNU5JFolY6=;yF#9yx`Ct5n%H(4g_Uuwp(uj5r>
zYDX>XE&82%zRjF-;6MW1f0{b#$L+Gn!uc33XP<E1*2;*<>-_eI_S+fty9;=NJJG?r
zk~6Np<nJ4%J}+Q_?wD>IT=RrGHb|yhudLr_ZEnZn%w3?l4s*Um(}!&&BE<*T9h<4o
zlcvhbg$0S_QS0>82-Ba4xu22LnZY$1YZmYEXP<kr^(k?I4^|IItWh(n+Z;tV6V-|-
zzgS=TAv3Fdlx5!DrkqUobCDe&HBkB_Chum<WfjQTSv95k7tB7*RyE^1`H?a_T@w80
zxscp}KxXi8GgoK3SGtebX1^L=u7klTjmYT;p2bT~j+Uo#8J`0uyW3d}N69rUc`w3s
zCp;^k3Au5GR$c7C5=^}~h|@H8&p+f3+isFSZoit4&VX89ciid$pK|ZyFQyHgNDeEm
z+qk{r2Jx|QVC>wij&m<GJ90|QSuIV&u`Js>-T2Xxwn2{$E5^b?fW&^qB*pe#BR6)2
zDfeySLaT(D!+oz6>gV-comgDyapk$i4RvClV|*N?`6(yDoLxQbP4~q4wa8+!I)reW
zvvTj1DS6WToyUh3FSnLlR%+}ueGykHwst`wrBH6q;1mc+Wop>T!j$nlT-IQ_gnesW
zTikRi-NAjww_|rzclalp8^_ft+h)V@Tg+vompqs_&h-sYZ{}{DD){JKeL?v%_w&uN
zmXyBCMlWY|!ZgHF(G<OxO4lrrX1xkuh%$E-W|Y(9d*;NM{xY8NpL2F_+N*@8qTa1!
ztFgGm5w$cBDE6CPmN(@8-Z|38>V0A03^r7`@Q*f2XpMUwQyQ)eIO{nxX6nQvXynf&
z<wf=eIT{i~K<3aiJoXR7wzO#tv(v))Ii2eR#iw3ygoIBj(voF=^ZtJRnuAIv7am=M
z9Kx{RT-L>*_6;oJHeit^t5;V>w6VT*#gr?$avi;&#0q=m^{3ggYkK%OuixDA60X|z
z-7dG`K=KOatDm2WFC5^WqeY8!a)f3JqLg}lRg-^bCCVt2QS<wLpzsL0acX>SikMDw
zIr9k*K58(1-##Jsl}~|bF|ByUJg%63Ym4&GDLZnO-}t#FqwE)9!L5qBGl!mkzhT7T
zz?R&<Up`4dEof)?2Y=xye@fA*>m!;pM~Ty8{c9ZJ1<tT2+RiO^9;$e^sbx-!d`*3!
z7Ed24ed=Gxh?TUv;CuY~ld$qVu96j59!hQ*UL?c~EQxz&&Po4>=XsQOI*Yexzdk>k
zaiDKbh@BQ>8XOqzm7|i#vMWHl2yp}VFHt$Xxg}r$!NcCu;l0P&nO3Dm4)*@h_`r)d
zl&A{poz0nJ)2(~||A({WgfCV{1l?B4j99dr@toL9UAIc?@B8(i{aa8go-0+X$K5_|
z^y>Uy=Q6)1Nng&?Wru4-Zu*{%i5z=Uq2=(wW$XHW^Dj;~Ix0zDQN48;@q%QLND`&v
zTT{d1T~oFNzm-K)#4__$yN|y}Qp;@}ux*Se?)diOzj-aB5l&3cL-s6&>4yy*M_yO6
z^f$*3l&mM*k!K^b`4$a{CciFb$E(X1GcnJ7p8pjO%yYeGQr2Xj2+AgwSM!L@;mkv4
Gul)<y*zIWm

literal 0
HcmV?d00001

diff --git a/doc/user/project/releases/index.md b/doc/user/project/releases/index.md
index 76b300bdd57..e6033c844be 100644
--- a/doc/user/project/releases/index.md
+++ b/doc/user/project/releases/index.md
@@ -186,7 +186,8 @@ To subscribe to notifications for releases:
 
 ## Prevent unintentional releases by setting a deploy freeze
 
-> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/29382) in GitLab 13.0.
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/29382) in GitLab 13.0.
+> - The ability to delete freeze periods through the UI was [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/212451) in GitLab 14.3.
 
 Prevent unintended production releases during a period of time you specify by
 setting a [*deploy freeze* period](../../../ci/environments/deployment_safety.md).
@@ -199,7 +200,7 @@ If the job that's executing is within a freeze period, GitLab CI/CD creates an e
 variable named `$CI_DEPLOY_FREEZE`.
 
 To prevent the deployment job from executing, create a `rules` entry in your
-`gitlab-ci.yml`, for example:
+`.gitlab-ci.yml`, for example:
 
 ```yaml
 deploy_to_production:
@@ -219,11 +220,8 @@ To set a deploy freeze window in the UI, complete these steps:
 1. Click **Add deploy freeze** to open the deploy freeze modal.
 1. Enter the start time, end time, and timezone of the desired deploy freeze period.
 1. Click **Add deploy freeze** in the modal.
-1. After the deploy freeze is saved, you can edit it by selecting the edit button (**{pencil}**).
-   ![Deploy freeze modal for setting a deploy freeze period](img/deploy_freeze_v13_10.png)
-
-WARNING:
-To delete a deploy freeze, use the [Freeze Periods API](../../../api/freeze_periods.md).
+1. After the deploy freeze is saved, you can edit it by selecting the edit button (**{pencil}**) and remove it by selecting the delete button (**{remove}**).
+   ![Deploy freeze modal for setting a deploy freeze period](img/deploy_freeze_v14_3.png)
 
 If a project contains multiple freeze periods, all periods apply. If they overlap, the freeze covers the
 complete overlapping period.
diff --git a/lib/gitlab/ci/cron_parser.rb b/lib/gitlab/ci/cron_parser.rb
index bc03658aab8..7334a112ccf 100644
--- a/lib/gitlab/ci/cron_parser.rb
+++ b/lib/gitlab/ci/cron_parser.rb
@@ -6,8 +6,40 @@ module Gitlab
       VALID_SYNTAX_SAMPLE_TIME_ZONE = 'UTC'
       VALID_SYNTAX_SAMPLE_CRON = '* * * * *'
 
-      def self.parse_natural(expression, cron_timezone = 'UTC')
-        new(Fugit::Nat.parse(expression)&.original, cron_timezone)
+      class << self
+        def parse_natural(expression, cron_timezone = 'UTC')
+          new(Fugit::Nat.parse(expression)&.original, cron_timezone)
+        end
+
+        # This method generates compatible expressions that can be
+        # parsed by Fugit::Nat.parse to generate a cron line.
+        # It takes start date of the cron and cadence in the following format:
+        # cadence = {
+        #   unit: 'day/week/month/year'
+        #   duration: 1
+        # }
+        def parse_natural_with_timestamp(starts_at, cadence)
+          case cadence[:unit]
+          when 'day' # Currently supports only 'every 1 day'.
+            "#{starts_at.min} #{starts_at.hour} * * *"
+          when 'week' # Currently supports only 'every 1 week'.
+            "#{starts_at.min} #{starts_at.hour} * * #{starts_at.wday}"
+          when 'month'
+            unless [1, 3, 6, 12].include?(cadence[:duration])
+              raise NotImplementedError, "The cadence #{cadence} is not supported"
+            end
+
+            "#{starts_at.min} #{starts_at.hour} #{starts_at.mday} #{fall_in_months(cadence[:duration], starts_at)} *"
+          when 'year' # Currently supports only 'every 1 year'.
+            "#{starts_at.min} #{starts_at.hour} #{starts_at.mday} #{starts_at.month} *"
+          else
+            raise NotImplementedError, "The cadence unit #{cadence[:unit]} is not implemented"
+          end
+        end
+
+        def fall_in_months(offset, start_date)
+          (1..(12 / offset)).map { |i| start_date.next_month(offset * i).month }.join(',')
+        end
       end
 
       def initialize(cron, cron_timezone = 'UTC')
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 51b9cdbd1c6..4039f5a2f37 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -11068,6 +11068,18 @@ msgstr ""
 msgid "DeployFreeze|Add deploy freeze"
 msgstr ""
 
+msgid "DeployFreeze|Delete"
+msgstr ""
+
+msgid "DeployFreeze|Delete deploy freeze?"
+msgstr ""
+
+msgid "DeployFreeze|Delete freeze period"
+msgstr ""
+
+msgid "DeployFreeze|Deploy freeze from %{start} to %{end} in %{timezone} will be removed. Are you sure?"
+msgstr ""
+
 msgid "DeployFreeze|Edit"
 msgstr ""
 
@@ -13262,6 +13274,9 @@ msgstr ""
 msgid "Error: Unable to create deploy freeze"
 msgstr ""
 
+msgid "Error: Unable to delete deploy freeze"
+msgstr ""
+
 msgid "Error: Unable to find AWS role for current user"
 msgstr ""
 
@@ -28991,6 +29006,9 @@ msgstr ""
 msgid "Runners|Windows 2019 Shell with manual scaling and optional scheduling. Non-spot. Default choice for Windows Shell executor."
 msgstr ""
 
+msgid "Runners|You are about to change this instance runner to a project runner. This operation is not reversible. Are you sure you want to continue?"
+msgstr ""
+
 msgid "Runners|You can set up a specific runner to be used by multiple projects but you cannot make this a shared runner."
 msgstr ""
 
diff --git a/spec/controllers/projects/pipelines_controller_spec.rb b/spec/controllers/projects/pipelines_controller_spec.rb
index 65a563fac7c..774971e992d 100644
--- a/spec/controllers/projects/pipelines_controller_spec.rb
+++ b/spec/controllers/projects/pipelines_controller_spec.rb
@@ -311,23 +311,42 @@ RSpec.describe Projects::PipelinesController do
 
       let_it_be(:pipeline) { create(:ci_pipeline, project: project) }
 
-      def create_build_with_artifacts(stage, stage_idx, name)
-        create(:ci_build, :artifacts, :tags, pipeline: pipeline, stage: stage, stage_idx: stage_idx, name: name)
+      def create_build_with_artifacts(stage, stage_idx, name, status)
+        create(:ci_build, :artifacts, :tags, status, user: user, pipeline: pipeline, stage: stage, stage_idx: stage_idx, name: name)
+      end
+
+      def create_bridge(stage, stage_idx, name, status)
+        create(:ci_bridge, status, pipeline: pipeline, stage: stage, stage_idx: stage_idx, name: name)
       end
 
       before do
-        create_build_with_artifacts('build', 0, 'job1')
-        create_build_with_artifacts('build', 0, 'job2')
+        create_build_with_artifacts('build', 0, 'job1', :failed)
+        create_build_with_artifacts('build', 0, 'job2', :running)
+        create_build_with_artifacts('build', 0, 'job3', :pending)
+        create_bridge('deploy', 1, 'deploy-a', :failed)
+        create_bridge('deploy', 1, 'deploy-b', :created)
       end
 
-      it 'avoids N+1 database queries', :request_store do
-        control_count = ActiveRecord::QueryRecorder.new { get_pipeline_html }.count
+      it 'avoids N+1 database queries', :request_store, :use_sql_query_cache do
+        # warm up
+        get_pipeline_html
         expect(response).to have_gitlab_http_status(:ok)
 
-        create_build_with_artifacts('build', 0, 'job3')
+        control = ActiveRecord::QueryRecorder.new(skip_cached: false) do
+          get_pipeline_html
+          expect(response).to have_gitlab_http_status(:ok)
+        end
 
-        expect { get_pipeline_html }.not_to exceed_query_limit(control_count)
-        expect(response).to have_gitlab_http_status(:ok)
+        create_build_with_artifacts('build', 0, 'job4', :failed)
+        create_build_with_artifacts('build', 0, 'job5', :running)
+        create_build_with_artifacts('build', 0, 'job6', :pending)
+        create_bridge('deploy', 1, 'deploy-c', :failed)
+        create_bridge('deploy', 1, 'deploy-d', :created)
+
+        expect do
+          get_pipeline_html
+          expect(response).to have_gitlab_http_status(:ok)
+        end.not_to exceed_all_query_limit(control)
       end
     end
 
diff --git a/spec/controllers/registrations_controller_spec.rb b/spec/controllers/registrations_controller_spec.rb
index a5a0f16f2b1..5edd60ebc79 100644
--- a/spec/controllers/registrations_controller_spec.rb
+++ b/spec/controllers/registrations_controller_spec.rb
@@ -283,6 +283,26 @@ RSpec.describe RegistrationsController do
           end
         end
 
+        context 'when the registration fails' do
+          let_it_be(:member) { create(:project_member, :invited) }
+          let_it_be(:missing_user_params) do
+            { username: '', email: member.invite_email, password: 'Any_password' }
+          end
+
+          let_it_be(:user_params) { { user: missing_user_params } }
+
+          let(:session_params) { { invite_email: member.invite_email } }
+
+          subject { post(:create, params: user_params, session: session_params) }
+
+          it 'does not delete the invitation or register the new user' do
+            subject
+
+            expect(member.invite_token).not_to be_nil
+            expect(controller.current_user).to be_nil
+          end
+        end
+
         context 'when soft email confirmation is enabled' do
           before do
             stub_feature_flags(soft_email_confirmation: true)
diff --git a/spec/features/invites_spec.rb b/spec/features/invites_spec.rb
index 583daba37f1..87fb8955dcc 100644
--- a/spec/features/invites_spec.rb
+++ b/spec/features/invites_spec.rb
@@ -189,6 +189,16 @@ RSpec.describe 'Group or Project invitations', :aggregate_failures do
       end
 
       context 'email confirmation enabled' do
+        context 'when user is not valid in sign up form' do
+          let(:new_user) { build_stubbed(:user, first_name: '', last_name: '') }
+
+          it 'fails sign up and redirects back to sign up', :aggregate_failures do
+            expect { fill_in_sign_up_form(new_user) }.not_to change { User.count }
+            expect(page).to have_content('prohibited this user from being saved')
+            expect(current_path).to eq(user_registration_path)
+          end
+        end
+
         context 'with invite email acceptance', :snowplow do
           it 'tracks the accepted invite' do
             fill_in_sign_up_form(new_user)
diff --git a/spec/frontend/deploy_freeze/components/deploy_freeze_table_spec.js b/spec/frontend/deploy_freeze/components/deploy_freeze_table_spec.js
index 168ddcfeacc..403d0dce3fc 100644
--- a/spec/frontend/deploy_freeze/components/deploy_freeze_table_spec.js
+++ b/spec/frontend/deploy_freeze/components/deploy_freeze_table_spec.js
@@ -1,3 +1,4 @@
+import { GlModal } from '@gitlab/ui';
 import { createLocalVue, mount } from '@vue/test-utils';
 import Vuex from 'vuex';
 import DeployFreezeTable from '~/deploy_freeze/components/deploy_freeze_table.vue';
@@ -29,6 +30,8 @@ describe('Deploy freeze table', () => {
   const findAddDeployFreezeButton = () => wrapper.find('[data-testid="add-deploy-freeze"]');
   const findEditDeployFreezeButton = () => wrapper.find('[data-testid="edit-deploy-freeze"]');
   const findDeployFreezeTable = () => wrapper.find('[data-testid="deploy-freeze-table"]');
+  const findDeleteDeployFreezeButton = () => wrapper.find('[data-testid="delete-deploy-freeze"]');
+  const findDeleteDeployFreezeModal = () => wrapper.findComponent(GlModal);
 
   beforeEach(() => {
     createComponent();
@@ -73,6 +76,29 @@ describe('Deploy freeze table', () => {
           store.state.freezePeriods[0],
         );
       });
+
+      it('displays delete deploy freeze button', () => {
+        expect(findDeleteDeployFreezeButton().exists()).toBe(true);
+      });
+
+      it('confirms a user wants to delete a deploy freeze', async () => {
+        const [{ freezeStart, freezeEnd, cronTimezone }] = store.state.freezePeriods;
+        await findDeleteDeployFreezeButton().trigger('click');
+        const modal = findDeleteDeployFreezeModal();
+        expect(modal.text()).toContain(
+          `Deploy freeze from ${freezeStart} to ${freezeEnd} in ${cronTimezone.formattedTimezone} will be removed.`,
+        );
+      });
+
+      it('deletes the freeze period on confirmation', async () => {
+        await findDeleteDeployFreezeButton().trigger('click');
+        const modal = findDeleteDeployFreezeModal();
+        modal.vm.$emit('primary');
+        expect(store.dispatch).toHaveBeenCalledWith(
+          'deleteFreezePeriod',
+          store.state.freezePeriods[0],
+        );
+      });
     });
   });
 
diff --git a/spec/frontend/deploy_freeze/store/actions_spec.js b/spec/frontend/deploy_freeze/store/actions_spec.js
index 6bc9c4d374c..ac606f1b182 100644
--- a/spec/frontend/deploy_freeze/store/actions_spec.js
+++ b/spec/frontend/deploy_freeze/store/actions_spec.js
@@ -12,6 +12,7 @@ jest.mock('~/api.js');
 jest.mock('~/flash.js');
 
 describe('deploy freeze store actions', () => {
+  const freezePeriodFixture = freezePeriodsFixture[0];
   let mock;
   let state;
 
@@ -24,6 +25,7 @@ describe('deploy freeze store actions', () => {
     Api.freezePeriods.mockResolvedValue({ data: freezePeriodsFixture });
     Api.createFreezePeriod.mockResolvedValue();
     Api.updateFreezePeriod.mockResolvedValue();
+    Api.deleteFreezePeriod.mockResolvedValue();
   });
 
   afterEach(() => {
@@ -195,4 +197,46 @@ describe('deploy freeze store actions', () => {
       );
     });
   });
+
+  describe('deleteFreezePeriod', () => {
+    it('dispatch correct actions on deleting a freeze period', () => {
+      testAction(
+        actions.deleteFreezePeriod,
+        freezePeriodFixture,
+        state,
+        [
+          { type: 'REQUEST_DELETE_FREEZE_PERIOD', payload: freezePeriodFixture.id },
+          { type: 'RECEIVE_DELETE_FREEZE_PERIOD_SUCCESS', payload: freezePeriodFixture.id },
+        ],
+        [],
+        () =>
+          expect(Api.deleteFreezePeriod).toHaveBeenCalledWith(
+            state.projectId,
+            freezePeriodFixture.id,
+          ),
+      );
+    });
+
+    it('should show flash error and set error in state on delete failure', () => {
+      const errorSpy = jest.spyOn(console, 'error').mockImplementation();
+      const error = new Error();
+      Api.deleteFreezePeriod.mockRejectedValue(error);
+
+      testAction(
+        actions.deleteFreezePeriod,
+        freezePeriodFixture,
+        state,
+        [
+          { type: 'REQUEST_DELETE_FREEZE_PERIOD', payload: freezePeriodFixture.id },
+          { type: 'RECEIVE_DELETE_FREEZE_PERIOD_ERROR', payload: freezePeriodFixture.id },
+        ],
+        [],
+        () => {
+          expect(createFlash).toHaveBeenCalled();
+
+          expect(errorSpy).toHaveBeenCalledWith('[gitlab] Unable to delete deploy freeze:', error);
+        },
+      );
+    });
+  });
 });
diff --git a/spec/frontend/deploy_freeze/store/mutations_spec.js b/spec/frontend/deploy_freeze/store/mutations_spec.js
index f8683489340..878a755088c 100644
--- a/spec/frontend/deploy_freeze/store/mutations_spec.js
+++ b/spec/frontend/deploy_freeze/store/mutations_spec.js
@@ -28,9 +28,9 @@ describe('Deploy freeze mutations', () => {
   describe('RECEIVE_FREEZE_PERIODS_SUCCESS', () => {
     it('should set freeze periods and format timezones from identifiers to names', () => {
       const timezoneNames = {
-        'Europe/Berlin': 'Berlin',
-        'Etc/UTC': 'UTC',
-        'America/New_York': 'Eastern Time (US & Canada)',
+        'Europe/Berlin': '[UTC 2] Berlin',
+        'Etc/UTC': '[UTC 0] UTC',
+        'America/New_York': '[UTC -4] Eastern Time (US & Canada)',
       };
 
       mutations[types.RECEIVE_FREEZE_PERIODS_SUCCESS](stateCopy, freezePeriodsFixture);
diff --git a/spec/frontend/environments/environment_item_spec.js b/spec/frontend/environments/environment_item_spec.js
index a568a7d5396..b930259149f 100644
--- a/spec/frontend/environments/environment_item_spec.js
+++ b/spec/frontend/environments/environment_item_spec.js
@@ -31,7 +31,6 @@ describe('Environment item', () => {
     factory({
       propsData: {
         model: environment,
-        canReadEnvironment: true,
         tableData,
       },
     });
@@ -135,7 +134,6 @@ describe('Environment item', () => {
             factory({
               propsData: {
                 model: environmentWithoutDeployable,
-                canReadEnvironment: true,
                 tableData,
               },
             });
@@ -161,7 +159,6 @@ describe('Environment item', () => {
           factory({
             propsData: {
               model: environmentWithoutUpcomingDeployment,
-              canReadEnvironment: true,
               tableData,
             },
           });
@@ -177,7 +174,6 @@ describe('Environment item', () => {
           factory({
             propsData: {
               model: environment,
-              canReadEnvironment: true,
               tableData,
               shouldShowAutoStopDate: true,
             },
@@ -205,7 +201,6 @@ describe('Environment item', () => {
                   ...environment,
                   auto_stop_at: futureDate,
                 },
-                canReadEnvironment: true,
                 tableData,
                 shouldShowAutoStopDate: true,
               },
@@ -241,7 +236,6 @@ describe('Environment item', () => {
                   ...environment,
                   auto_stop_at: pastDate,
                 },
-                canReadEnvironment: true,
                 tableData,
                 shouldShowAutoStopDate: true,
               },
@@ -360,7 +354,6 @@ describe('Environment item', () => {
       factory({
         propsData: {
           model: folder,
-          canReadEnvironment: true,
           tableData,
         },
       });
diff --git a/spec/frontend/environments/environment_table_spec.js b/spec/frontend/environments/environment_table_spec.js
index 71426ee5170..1851163ac68 100644
--- a/spec/frontend/environments/environment_table_spec.js
+++ b/spec/frontend/environments/environment_table_spec.js
@@ -28,7 +28,6 @@ describe('Environment table', () => {
     factory({
       propsData: {
         environments: [folder],
-        canReadEnvironment: true,
         ...eeOnlyProps,
       },
     });
@@ -50,7 +49,6 @@ describe('Environment table', () => {
     await factory({
       propsData: {
         environments: [mockItem],
-        canReadEnvironment: true,
         userCalloutsPath: '/callouts',
         lockPromotionSvgPath: '/assets/illustrations/lock-promotion.svg',
         helpCanaryDeploymentsPath: 'help/canary-deployments',
@@ -78,7 +76,6 @@ describe('Environment table', () => {
       propsData: {
         environments: [mockItem],
         canCreateDeployment: false,
-        canReadEnvironment: true,
         userCalloutsPath: '/callouts',
         lockPromotionSvgPath: '/assets/illustrations/lock-promotion.svg',
         helpCanaryDeploymentsPath: 'help/canary-deployments',
@@ -114,7 +111,6 @@ describe('Environment table', () => {
       propsData: {
         environments: [mockItem],
         canCreateDeployment: false,
-        canReadEnvironment: true,
         userCalloutsPath: '/callouts',
         lockPromotionSvgPath: '/assets/illustrations/lock-promotion.svg',
         helpCanaryDeploymentsPath: 'help/canary-deployments',
@@ -151,7 +147,6 @@ describe('Environment table', () => {
     factory({
       propsData: {
         environments: [mockItem],
-        canReadEnvironment: true,
         userCalloutsPath: '/callouts',
         lockPromotionSvgPath: '/assets/illustrations/lock-promotion.svg',
         helpCanaryDeploymentsPath: 'help/canary-deployments',
@@ -179,7 +174,6 @@ describe('Environment table', () => {
       propsData: {
         environments: [mockItem],
         canCreateDeployment: false,
-        canReadEnvironment: true,
         userCalloutsPath: '/callouts',
         lockPromotionSvgPath: '/assets/illustrations/lock-promotion.svg',
         helpCanaryDeploymentsPath: 'help/canary-deployments',
@@ -230,7 +224,6 @@ describe('Environment table', () => {
       factory({
         propsData: {
           environments: mockItems,
-          canReadEnvironment: true,
           ...eeOnlyProps,
         },
       });
@@ -296,7 +289,6 @@ describe('Environment table', () => {
       factory({
         propsData: {
           environments: mockItems,
-          canReadEnvironment: true,
           ...eeOnlyProps,
         },
       });
@@ -335,7 +327,6 @@ describe('Environment table', () => {
       factory({
         propsData: {
           environments: mockItems,
-          canReadEnvironment: true,
           ...eeOnlyProps,
         },
       });
@@ -364,7 +355,6 @@ describe('Environment table', () => {
       factory({
         propsData: {
           environments: mockItems,
-          canReadEnvironment: true,
           ...eeOnlyProps,
         },
       });
@@ -415,7 +405,6 @@ describe('Environment table', () => {
       factory({
         propsData: {
           environments: mockItems,
-          canReadEnvironment: true,
           ...eeOnlyProps,
         },
       });
diff --git a/spec/frontend/environments/environments_app_spec.js b/spec/frontend/environments/environments_app_spec.js
index dc176001943..afe2e4cdc63 100644
--- a/spec/frontend/environments/environments_app_spec.js
+++ b/spec/frontend/environments/environments_app_spec.js
@@ -20,7 +20,6 @@ describe('Environment', () => {
   const mockData = {
     endpoint: 'environments.json',
     canCreateEnvironment: true,
-    canReadEnvironment: true,
     newEnvironmentPath: 'environments/new',
     helpPagePath: 'help',
     userCalloutsPath: '/callouts',
diff --git a/spec/frontend/environments/environments_detail_header_spec.js b/spec/frontend/environments/environments_detail_header_spec.js
index 6334060c736..305e7385b43 100644
--- a/spec/frontend/environments/environments_detail_header_spec.js
+++ b/spec/frontend/environments/environments_detail_header_spec.js
@@ -44,7 +44,6 @@ describe('Environments detail header component', () => {
         TimeAgo,
       },
       propsData: {
-        canReadEnvironment: false,
         canAdminEnvironment: false,
         canUpdateEnvironment: false,
         canStopEnvironment: false,
@@ -60,7 +59,7 @@ describe('Environments detail header component', () => {
 
   describe('default state with minimal access', () => {
     beforeEach(() => {
-      createWrapper({ props: { environment: createEnvironment() } });
+      createWrapper({ props: { environment: createEnvironment({ externalUrl: null }) } });
     });
 
     it('displays the environment name', () => {
@@ -164,7 +163,6 @@ describe('Environments detail header component', () => {
       createWrapper({
         props: {
           environment: createEnvironment({ hasTerminals: true, externalUrl }),
-          canReadEnvironment: true,
         },
       });
     });
@@ -178,8 +176,7 @@ describe('Environments detail header component', () => {
     beforeEach(() => {
       createWrapper({
         props: {
-          environment: createEnvironment(),
-          canReadEnvironment: true,
+          environment: createEnvironment({ metricsUrl: 'my metrics url' }),
           metricsPath,
         },
       });
@@ -195,7 +192,6 @@ describe('Environments detail header component', () => {
       createWrapper({
         props: {
           environment: createEnvironment(),
-          canReadEnvironment: true,
           canAdminEnvironment: true,
           canStopEnvironment: true,
           canUpdateEnvironment: true,
diff --git a/spec/frontend/environments/environments_folder_view_spec.js b/spec/frontend/environments/environments_folder_view_spec.js
index e4661d27872..72a7449f24e 100644
--- a/spec/frontend/environments/environments_folder_view_spec.js
+++ b/spec/frontend/environments/environments_folder_view_spec.js
@@ -11,7 +11,6 @@ describe('Environments Folder View', () => {
   const mockData = {
     endpoint: 'environments.json',
     folderName: 'review',
-    canReadEnvironment: true,
     cssContainerClass: 'container',
     userCalloutsPath: '/callouts',
     lockPromotionSvgPath: '/assets/illustrations/lock-promotion.svg',
diff --git a/spec/frontend/environments/folder/environments_folder_view_spec.js b/spec/frontend/environments/folder/environments_folder_view_spec.js
index d02ed8688c6..9eb57b2682f 100644
--- a/spec/frontend/environments/folder/environments_folder_view_spec.js
+++ b/spec/frontend/environments/folder/environments_folder_view_spec.js
@@ -14,7 +14,6 @@ describe('Environments Folder View', () => {
   const mockData = {
     endpoint: 'environments.json',
     folderName: 'review',
-    canReadEnvironment: true,
     cssContainerClass: 'container',
     userCalloutsPath: '/callouts',
     lockPromotionSvgPath: '/assets/illustrations/lock-promotion.svg',
diff --git a/spec/frontend/repository/components/blob_viewers/image_viewer_spec.js b/spec/frontend/repository/components/blob_viewers/image_viewer_spec.js
new file mode 100644
index 00000000000..6735dddf51e
--- /dev/null
+++ b/spec/frontend/repository/components/blob_viewers/image_viewer_spec.js
@@ -0,0 +1,25 @@
+import { shallowMount } from '@vue/test-utils';
+import ImageViewer from '~/repository/components/blob_viewers/image_viewer.vue';
+
+describe('Image Viewer', () => {
+  let wrapper;
+
+  const propsData = {
+    url: 'some/image.png',
+    alt: 'image.png',
+  };
+
+  const createComponent = () => {
+    wrapper = shallowMount(ImageViewer, { propsData });
+  };
+
+  const findImage = () => wrapper.find('[data-testid="image"]');
+
+  it('renders a Source Editor component', () => {
+    createComponent();
+
+    expect(findImage().exists()).toBe(true);
+    expect(findImage().attributes('src')).toBe(propsData.url);
+    expect(findImage().attributes('alt')).toBe(propsData.alt);
+  });
+});
diff --git a/spec/frontend/search/highlight_blob_search_result_spec.js b/spec/frontend/search/highlight_blob_search_result_spec.js
index 6908bcbd283..9fa3bfc1f9a 100644
--- a/spec/frontend/search/highlight_blob_search_result_spec.js
+++ b/spec/frontend/search/highlight_blob_search_result_spec.js
@@ -9,6 +9,6 @@ describe('search/highlight_blob_search_result', () => {
   it('highlights lines with search term occurrence', () => {
     setHighlightClass(searchKeyword);
 
-    expect(document.querySelectorAll('.blob-result .hll').length).toBe(4);
+    expect(document.querySelectorAll('.js-blob-result .hll').length).toBe(4);
   });
 });
diff --git a/spec/graphql/resolvers/board_list_issues_resolver_spec.rb b/spec/graphql/resolvers/board_list_issues_resolver_spec.rb
index 6ffc8b045e9..e63c0d60398 100644
--- a/spec/graphql/resolvers/board_list_issues_resolver_spec.rb
+++ b/spec/graphql/resolvers/board_list_issues_resolver_spec.rb
@@ -20,18 +20,20 @@ RSpec.describe Resolvers::BoardListIssuesResolver do
       let!(:issue1) { create(:issue, project: project, labels: [label], relative_position: 10) }
       let!(:issue2) { create(:issue, project: project, labels: [label, label2], relative_position: 12) }
       let!(:issue3) { create(:issue, project: project, labels: [label, label3], relative_position: 10) }
+      let!(:issue4) { create(:issue, project: project, labels: [label], relative_position: nil) }
 
-      it 'returns the issues in the correct order' do
+      it 'returns issues in the correct order with non-nil relative positions', :aggregate_failures do
         # by relative_position and then ID
-        issues = resolve_board_list_issues
+        result = resolve_board_list_issues
 
-        expect(issues.map(&:id)).to eq [issue3.id, issue1.id, issue2.id]
+        expect(result.map(&:id)).to eq [issue3.id, issue1.id, issue2.id, issue4.id]
+        expect(result.map(&:relative_position)).not_to include(nil)
       end
 
       it 'finds only issues matching filters' do
         result = resolve_board_list_issues(args: { filters: { label_name: [label.title], not: { label_name: [label2.title] } } })
 
-        expect(result).to match_array([issue1, issue3])
+        expect(result).to match_array([issue1, issue3, issue4])
       end
 
       it 'finds only issues matching search param' do
@@ -49,7 +51,7 @@ RSpec.describe Resolvers::BoardListIssuesResolver do
       it 'accepts assignee wildcard id NONE' do
         result = resolve_board_list_issues(args: { filters: { assignee_wildcard_id: 'NONE' } })
 
-        expect(result).to match_array([issue1, issue2, issue3])
+        expect(result).to match_array([issue1, issue2, issue3, issue4])
       end
 
       it 'accepts assignee wildcard id ANY' do
@@ -89,6 +91,6 @@ RSpec.describe Resolvers::BoardListIssuesResolver do
   end
 
   def resolve_board_list_issues(args: {}, current_user: user)
-    resolve(described_class, obj: list, args: args, ctx: { current_user: current_user })
+    resolve(described_class, obj: list, args: args, ctx: { current_user: current_user }).items
   end
 end
diff --git a/spec/helpers/environment_helper_spec.rb b/spec/helpers/environment_helper_spec.rb
index 0eecae32cc1..49937a3b53a 100644
--- a/spec/helpers/environment_helper_spec.rb
+++ b/spec/helpers/environment_helper_spec.rb
@@ -43,7 +43,6 @@ RSpec.describe EnvironmentHelper do
         external_url: environment.external_url,
         can_update_environment: true,
         can_destroy_environment: true,
-        can_read_environment: true,
         can_stop_environment: true,
         can_admin_environment: true,
         environment_metrics_path: environment_metrics_path(environment),
diff --git a/spec/lib/gitlab/ci/cron_parser_spec.rb b/spec/lib/gitlab/ci/cron_parser_spec.rb
index 15293429354..4017accb462 100644
--- a/spec/lib/gitlab/ci/cron_parser_spec.rb
+++ b/spec/lib/gitlab/ci/cron_parser_spec.rb
@@ -297,4 +297,65 @@ RSpec.describe Gitlab::Ci::CronParser do
       it { is_expected.to eq(true) }
     end
   end
+
+  describe '.parse_natural', :aggregate_failures do
+    let(:cron_line) { described_class.parse_natural_with_timestamp(time, { unit: 'day', duration: 1 }) }
+    let(:time) { Time.parse('Mon, 30 Aug 2021 06:29:44.067132000 UTC +00:00') }
+    let(:hours) { Fugit::Cron.parse(cron_line).hours }
+    let(:minutes) { Fugit::Cron.parse(cron_line).minutes }
+    let(:weekdays) { Fugit::Cron.parse(cron_line).weekdays.first }
+    let(:months) { Fugit::Cron.parse(cron_line).months }
+
+    context 'when repeat cycle is day' do
+      it 'generates daily cron expression', :aggregate_failures do
+        expect(hours).to include time.hour
+        expect(minutes).to include time.min
+      end
+    end
+
+    context 'when repeat cycle is week' do
+      let(:cron_line) { described_class.parse_natural_with_timestamp(time, { unit: 'week', duration: 1 }) }
+
+      it 'generates weekly cron expression', :aggregate_failures do
+        expect(hours).to include time.hour
+        expect(minutes).to include time.min
+        expect(weekdays).to include time.wday
+      end
+    end
+
+    context 'when repeat cycle is month' do
+      let(:cron_line) { described_class.parse_natural_with_timestamp(time, { unit: 'month', duration: 3 }) }
+
+      it 'generates monthly cron expression', :aggregate_failures do
+        expect(minutes).to include time.min
+        expect(months).to include time.month
+      end
+
+      context 'when an unsupported duration is specified' do
+        subject { described_class.parse_natural_with_timestamp(time, { unit: 'month', duration: 7 }) }
+
+        it 'raises an exception' do
+          expect { subject }.to raise_error(NotImplementedError, 'The cadence {:unit=>"month", :duration=>7} is not supported')
+        end
+      end
+    end
+
+    context 'when repeat cycle is year' do
+      let(:cron_line) { described_class.parse_natural_with_timestamp(time, { unit: 'year', duration: 1 }) }
+
+      it 'generates yearly cron expression', :aggregate_failures do
+        expect(hours).to include time.hour
+        expect(minutes).to include time.min
+        expect(months).to include time.month
+      end
+    end
+
+    context 'when the repeat cycle is not implemented' do
+      subject { described_class.parse_natural_with_timestamp(time, { unit: 'quarterly', duration: 1 }) }
+
+      it 'raises an exception' do
+        expect { subject }.to raise_error(NotImplementedError, 'The cadence unit quarterly is not implemented')
+      end
+    end
+  end
 end
diff --git a/spec/lib/gitlab/import_export/all_models.yml b/spec/lib/gitlab/import_export/all_models.yml
index cf340b47b68..ee939823129 100644
--- a/spec/lib/gitlab/import_export/all_models.yml
+++ b/spec/lib/gitlab/import_export/all_models.yml
@@ -224,6 +224,7 @@ ci_pipelines:
 - builds
 - bridges
 - processables
+- generic_commit_statuses
 - trigger_requests
 - variables
 - auto_canceled_by
diff --git a/spec/models/member_spec.rb b/spec/models/member_spec.rb
index 067b3c25645..3f7f69ff34e 100644
--- a/spec/models/member_spec.rb
+++ b/spec/models/member_spec.rb
@@ -645,6 +645,16 @@ RSpec.describe Member do
 
       expect(user.authorized_projects.reload).to include(project)
     end
+
+    it 'does not accept the invite if saving a new user fails' do
+      invalid_user = User.new(first_name: '', last_name: '')
+
+      member.accept_invite! invalid_user
+
+      expect(member.invite_accepted_at).to be_nil
+      expect(member.invite_token).not_to be_nil
+      expect_any_instance_of(Member).not_to receive(:after_accept_invite)
+    end
   end
 
   describe "#decline_invite!" do
diff --git a/spec/models/note_spec.rb b/spec/models/note_spec.rb
index e26355b1eb4..a2b818576a6 100644
--- a/spec/models/note_spec.rb
+++ b/spec/models/note_spec.rb
@@ -1576,6 +1576,14 @@ RSpec.describe Note do
       expect(note.post_processed_cache_key).to eq("#{note.cache_key}:#{note.author.cache_key}")
     end
 
+    context 'when note has no author' do
+      let(:note) { build(:note, author: nil) }
+
+      it 'returns cache key only' do
+        expect(note.post_processed_cache_key).to eq("#{note.cache_key}:")
+      end
+    end
+
     context 'when note has redacted_note_html' do
       let(:redacted_note_html) { 'redacted note html' }
 
diff --git a/spec/requests/api/graphql/boards/board_list_issues_query_spec.rb b/spec/requests/api/graphql/boards/board_list_issues_query_spec.rb
index 3628171fcc1..008241b8055 100644
--- a/spec/requests/api/graphql/boards/board_list_issues_query_spec.rb
+++ b/spec/requests/api/graphql/boards/board_list_issues_query_spec.rb
@@ -48,13 +48,18 @@ RSpec.describe 'get board lists' do
     issues_data.map { |i| i['title'] }
   end
 
+  def issue_relative_positions
+    issues_data.map { |i| i['relativePosition'] }
+  end
+
   shared_examples 'group and project board list issues query' do
     let!(:board) { create(:board, resource_parent: board_parent) }
     let!(:label_list) { create(:list, board: board, label: label, position: 10) }
     let!(:issue1) { create(:issue, project: issue_project, labels: [label, label2], relative_position: 9) }
     let!(:issue2) { create(:issue, project: issue_project, labels: [label, label2], relative_position: 2) }
-    let!(:issue3) { create(:issue, project: issue_project, labels: [label], relative_position: 9) }
-    let!(:issue4) { create(:issue, project: issue_project, labels: [label2], relative_position: 432) }
+    let!(:issue3) { create(:issue, project: issue_project, labels: [label, label2], relative_position: nil) }
+    let!(:issue4) { create(:issue, project: issue_project, labels: [label], relative_position: 9) }
+    let!(:issue5) { create(:issue, project: issue_project, labels: [label2], relative_position: 432) }
 
     context 'when the user does not have access to the board' do
       it 'returns nil' do
@@ -69,10 +74,11 @@ RSpec.describe 'get board lists' do
         board_parent.add_reporter(user)
       end
 
-      it 'can access the issues' do
+      it 'can access the issues', :aggregate_failures do
         post_graphql(query("id: \"#{global_id_of(label_list)}\""), current_user: user)
 
-        expect(issue_titles).to eq([issue2.title, issue1.title])
+        expect(issue_titles).to eq([issue2.title, issue1.title, issue3.title])
+        expect(issue_relative_positions).not_to include(nil)
       end
     end
   end
diff --git a/spec/requests/api/graphql/project/pipeline_spec.rb b/spec/requests/api/graphql/project/pipeline_spec.rb
index cb6755640a9..d46ef313563 100644
--- a/spec/requests/api/graphql/project/pipeline_spec.rb
+++ b/spec/requests/api/graphql/project/pipeline_spec.rb
@@ -311,6 +311,10 @@ RSpec.describe 'getting pipeline information nested in a project' do
     end
 
     it 'does not generate N+1 queries', :request_store, :use_sql_query_cache do
+      # create extra statuses
+      create(:generic_commit_status, :pending, name: 'generic-build-a', pipeline: pipeline, stage_idx: 0, stage: 'build')
+      create(:ci_bridge, :failed, name: 'deploy-a', pipeline: pipeline, stage_idx: 2, stage: 'deploy')
+
       # warm up
       post_graphql(query, current_user: current_user)
 
@@ -318,9 +322,11 @@ RSpec.describe 'getting pipeline information nested in a project' do
         post_graphql(query, current_user: current_user)
       end
 
-      create(:ci_build, name: 'test-a', pipeline: pipeline, stage_idx: 1, stage: 'test')
-      create(:ci_build, name: 'test-b', pipeline: pipeline, stage_idx: 1, stage: 'test')
-      create(:ci_build, name: 'deploy-a', pipeline: pipeline, stage_idx: 2, stage: 'deploy')
+      create(:generic_commit_status, :pending, name: 'generic-build-b', pipeline: pipeline, stage_idx: 0, stage: 'build')
+      create(:ci_build, :failed, name: 'test-a', pipeline: pipeline, stage_idx: 1, stage: 'test')
+      create(:ci_build, :running, name: 'test-b', pipeline: pipeline, stage_idx: 1, stage: 'test')
+      create(:ci_build, :pending, name: 'deploy-b', pipeline: pipeline, stage_idx: 2, stage: 'deploy')
+      create(:ci_bridge, :failed, name: 'deploy-c', pipeline: pipeline, stage_idx: 2, stage: 'deploy')
 
       expect do
         post_graphql(query, current_user: current_user)
diff --git a/spec/services/boards/issues/list_service_spec.rb b/spec/services/boards/issues/list_service_spec.rb
index bbdc178b234..d1f854f72bc 100644
--- a/spec/services/boards/issues/list_service_spec.rb
+++ b/spec/services/boards/issues/list_service_spec.rb
@@ -139,4 +139,51 @@ RSpec.describe Boards::Issues::ListService do
     end
     # rubocop: enable RSpec/MultipleMemoizedHelpers
   end
+
+  describe '.initialize_relative_positions' do
+    let_it_be(:user) { create(:user) }
+    let_it_be(:project) { create(:project, :empty_repo) }
+    let_it_be(:board) { create(:board, project: project) }
+    let_it_be(:backlog) { create(:backlog_list, board: board) }
+
+    let(:issue) { create(:issue, project: project, relative_position: nil) }
+
+    context "when 'Gitlab::Database::read_write?' is true" do
+      before do
+        allow(Gitlab::Database).to receive(:read_write?).and_return(true)
+      end
+
+      context 'user cannot move issues' do
+        it 'does not initialize the relative positions of issues' do
+          described_class.initialize_relative_positions(board, user, [issue])
+
+          expect(issue.relative_position).to eq nil
+        end
+      end
+
+      context 'user can move issues' do
+        before do
+          project.add_developer(user)
+        end
+
+        it 'initializes the relative positions of issues' do
+          described_class.initialize_relative_positions(board, user, [issue])
+
+          expect(issue.relative_position).not_to eq nil
+        end
+      end
+    end
+
+    context "when 'Gitlab::Database::read_write?' is false" do
+      before do
+        allow(Gitlab::Database).to receive(:read_write?).and_return(false)
+      end
+
+      it 'does not initialize the relative positions of issues' do
+        described_class.initialize_relative_positions(board, user, [issue])
+
+        expect(issue.relative_position).to eq nil
+      end
+    end
+  end
 end