From d88ab3545c27cd674f5fb8bff5fb64a9eeed590f Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Tue, 17 May 2022 15:09:01 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .../issue_templates/Feature Flag Roll Out.md  |   1 -
 GITALY_SERVER_VERSION                         |   2 +-
 GITLAB_PAGES_VERSION                          |   2 +-
 app/assets/javascripts/api.js                 |  17 ++
 .../components/secure_files_list.vue          | 194 +++++++++++++++--
 .../javascripts/ci_secure_files/index.js      |   5 +
 .../list/components/issues_list_app.vue       |   2 +
 app/assets/javascripts/issues/list/index.js   |   2 +
 .../list/queries/get_issues.query.graphql     |   1 +
 .../get_issues_without_crm.query.graphql      |   1 +
 .../list/queries/issue.fragment.graphql       |   4 +-
 .../javascripts/lib/utils/http_status.js      |   1 +
 .../pipelines/components/header_component.vue |  16 +-
 .../list/components/issuable_item.vue         |  15 +-
 app/controllers/projects/blame_controller.rb  |   7 +-
 .../projects/ci/secure_files_controller.rb    |   1 +
 .../mutations/work_items/delete_task.rb       |   4 -
 .../design_management/designs_resolver.rb     |   2 +-
 app/graphql/types/global_id_type.rb           |  16 --
 app/graphql/types/query_type.rb               |   4 -
 app/helpers/issues_helper.rb                  |   2 +
 app/services/projects/blame_service.rb        |  65 ++++++
 app/views/projects/blame/show.html.haml       |   3 +
 .../projects/ci/secure_files/show.html.haml   |   4 +-
 .../development/blame_page_pagination.yml     |   8 +
 .../development/updated_mr_header.yml         |   2 +-
 .../004_zeitwerk.rb                           |   1 -
 doc/api/dora4_project_analytics.md            |   2 +-
 doc/development/application_slis/index.md     |  43 +++-
 doc/development/documentation/versions.md     |   4 +-
 doc/tutorials/make_your_first_git_commit.md   |   2 -
 .../img/create-new-issue_v14_3.png            | Bin 4358 -> 0 bytes
 .../discussions/img/create-new-issue_v15.png  | Bin 0 -> 5672 bytes
 .../img/unresolved_threads_v14_1.png          | Bin 1540 -> 0 bytes
 .../img/unresolved_threads_v15.png            | Bin 0 -> 2793 bytes
 doc/user/discussions/index.md                 |   7 +-
 doc/user/project/merge_requests/changes.md    |   2 +-
 .../img/mr-diff-example_v14_8.png             | Bin 17683 -> 0 bytes
 .../img/mr-diff-example_v15.png               | Bin 0 -> 28658 bytes
 .../background_migration/job_coordinator.rb   |   2 +-
 .../DAST-Default-Branch-Deploy.gitlab-ci.yml  |   2 +-
 .../ci/templates/Jobs/Deploy.gitlab-ci.yml    |   2 +-
 .../Jobs/Deploy.latest.gitlab-ci.yml          |   2 +-
 lib/gitlab/database/migration_helpers.rb      |   1 +
 .../restrict_gitlab_schema.rb                 |   6 +-
 .../background_migration_helpers.rb           |  77 ++++---
 .../reestablished_connection_stack.rb         |  56 +++++
 .../table_management_helpers.rb               |   1 -
 .../gitlab_schemas_validate_connection.rb     |  37 ++++
 lib/gitlab/database/shared_model.rb           |   6 +-
 lib/gitlab/graphql/global_id_compatibility.rb |  20 --
 lib/gitlab/metrics/rails_slis.rb              |   8 +-
 lib/gitlab/metrics/sli.rb                     |  63 ++++--
 locale/gitlab.pot                             |  27 +++
 .../ci/secure_files_controller_spec.rb        |  34 ++-
 spec/factories/ci/secure_files.rb             |   2 +-
 spec/features/projects/blobs/blame_spec.rb    |  67 ++++++
 .../features/projects/ci/secure_files_spec.rb |  46 +++-
 .../projects/tags/user_views_tags_spec.rb     |  30 +++
 spec/frontend/api_spec.js                     |  32 +++
 .../components/secure_files_list_spec.js      |  49 ++++-
 .../list/components/issues_list_app_spec.js   |  20 ++
 .../pipelines/header_component_spec.js        |  51 ++++-
 spec/graphql/types/global_id_type_spec.rb     | 125 -----------
 spec/helpers/issues_helper_spec.rb            |   1 +
 .../job_coordinator_spec.rb                   |   2 +-
 .../restrict_gitlab_schema_spec.rb            |  45 +++-
 .../background_migration_helpers_spec.rb      |  89 ++++++--
 .../reestablished_connection_stack_spec.rb    |  57 +++++
 .../migrations/test_background_runner_spec.rb |   2 +
 ...gitlab_schemas_validate_connection_spec.rb |  70 +++++++
 spec/lib/gitlab/database/shared_model_spec.rb |   2 +-
 spec/lib/gitlab/metrics/rails_slis_spec.rb    |  14 +-
 spec/lib/gitlab/metrics/sli_spec.rb           | 197 ++++++++++++------
 spec/services/projects/blame_service_spec.rb  | 129 ++++++++++++
 spec/support/helpers/next_instance_of.rb      |   8 +-
 ...lished_connection_stack_shared_examples.rb |  32 +++
 spec/tooling/danger/project_helper_spec.rb    |   9 +
 tooling/danger/project_helper.rb              |   2 +
 79 files changed, 1487 insertions(+), 380 deletions(-)
 create mode 100644 app/services/projects/blame_service.rb
 create mode 100644 config/feature_flags/development/blame_page_pagination.yml
 delete mode 100644 doc/user/discussions/img/create-new-issue_v14_3.png
 create mode 100644 doc/user/discussions/img/create-new-issue_v15.png
 delete mode 100644 doc/user/discussions/img/unresolved_threads_v14_1.png
 create mode 100644 doc/user/discussions/img/unresolved_threads_v15.png
 delete mode 100644 doc/user/project/merge_requests/img/mr-diff-example_v14_8.png
 create mode 100644 doc/user/project/merge_requests/img/mr-diff-example_v15.png
 create mode 100644 lib/gitlab/database/migrations/reestablished_connection_stack.rb
 create mode 100644 lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection.rb
 delete mode 100644 lib/gitlab/graphql/global_id_compatibility.rb
 create mode 100644 spec/features/projects/blobs/blame_spec.rb
 create mode 100644 spec/lib/gitlab/database/migrations/reestablished_connection_stack_spec.rb
 create mode 100644 spec/lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection_spec.rb
 create mode 100644 spec/services/projects/blame_service_spec.rb
 create mode 100644 spec/support/shared_examples/lib/gitlab/database/reestablished_connection_stack_shared_examples.rb

diff --git a/.gitlab/issue_templates/Feature Flag Roll Out.md b/.gitlab/issue_templates/Feature Flag Roll Out.md
index 910ec01a49c..52f189f09f0 100644
--- a/.gitlab/issue_templates/Feature Flag Roll Out.md	
+++ b/.gitlab/issue_templates/Feature Flag Roll Out.md	
@@ -176,4 +176,3 @@ You can either [create a follow-up issue for Feature Flag Cleanup](https://gitla
 ```
 
 /label ~"feature flag" ~"type::feature" ~"feature::addition"
-/assign DRI
diff --git a/GITALY_SERVER_VERSION b/GITALY_SERVER_VERSION
index a149f31c093..46ababbbca8 100644
--- a/GITALY_SERVER_VERSION
+++ b/GITALY_SERVER_VERSION
@@ -1 +1 @@
-6b31501b13eae70aea5061edc8273c551ba4c349
+93762b621c011fe570339c1c247d5197c2cfefcc
diff --git a/GITLAB_PAGES_VERSION b/GITLAB_PAGES_VERSION
index 373aea97570..79f82f6b8e0 100644
--- a/GITLAB_PAGES_VERSION
+++ b/GITLAB_PAGES_VERSION
@@ -1 +1 @@
-1.57.0
+1.58.0
diff --git a/app/assets/javascripts/api.js b/app/assets/javascripts/api.js
index e47c3e7bb55..8d46ea76be1 100644
--- a/app/assets/javascripts/api.js
+++ b/app/assets/javascripts/api.js
@@ -93,6 +93,7 @@ const Api = {
   groupNotificationSettingsPath: '/api/:version/groups/:id/notification_settings',
   notificationSettingsPath: '/api/:version/notification_settings',
   deployKeysPath: '/api/:version/deploy_keys',
+  secureFilePath: '/api/:version/projects/:project_id/secure_files/:secure_file_id',
   secureFilesPath: '/api/:version/projects/:project_id/secure_files',
   dependencyProxyPath: '/api/:version/groups/:id/dependency_proxy/cache',
 
@@ -978,6 +979,22 @@ const Api = {
     return axios.get(url, { params: { per_page: DEFAULT_PER_PAGE, ...options } });
   },
 
+  uploadProjectSecureFile(projectId, fileData) {
+    const url = Api.buildUrl(this.secureFilesPath).replace(':project_id', projectId);
+
+    const headers = { 'Content-Type': 'multipart/form-data' };
+
+    return axios.post(url, fileData, { headers });
+  },
+
+  deleteProjectSecureFile(projectId, secureFileId) {
+    const url = Api.buildUrl(this.secureFilePath)
+      .replace(':project_id', projectId)
+      .replace(':secure_file_id', secureFileId);
+
+    return axios.delete(url);
+  },
+
   async updateNotificationSettings(projectId, groupId, data = {}) {
     let url = Api.buildUrl(this.notificationSettingsPath);
 
diff --git a/app/assets/javascripts/ci_secure_files/components/secure_files_list.vue b/app/assets/javascripts/ci_secure_files/components/secure_files_list.vue
index 1283db5c8eb..dbc4565b19d 100644
--- a/app/assets/javascripts/ci_secure_files/components/secure_files_list.vue
+++ b/app/assets/javascripts/ci_secure_files/components/secure_files_list.vue
@@ -1,22 +1,48 @@
 <script>
-import { GlLink, GlLoadingIcon, GlPagination, GlTable } from '@gitlab/ui';
+import {
+  GlAlert,
+  GlButton,
+  GlIcon,
+  GlLink,
+  GlLoadingIcon,
+  GlModal,
+  GlModalDirective,
+  GlPagination,
+  GlSprintf,
+  GlTable,
+  GlTooltipDirective,
+} from '@gitlab/ui';
+import * as Sentry from '@sentry/browser';
 import Api, { DEFAULT_PER_PAGE } from '~/api';
 import { helpPagePath } from '~/helpers/help_page_helper';
-import { __ } from '~/locale';
+import httpStatusCodes from '~/lib/utils/http_status';
+import { __, s__, sprintf } from '~/locale';
 import TimeagoTooltip from '~/vue_shared/components/time_ago_tooltip.vue';
 
 export default {
   components: {
+    GlAlert,
+    GlButton,
+    GlIcon,
     GlLink,
     GlLoadingIcon,
+    GlModal,
     GlPagination,
+    GlSprintf,
     GlTable,
     TimeagoTooltip,
   },
-  inject: ['projectId'],
+  directives: {
+    GlTooltip: GlTooltipDirective,
+    GlModal: GlModalDirective,
+  },
+  inject: ['projectId', 'admin', 'fileSizeLimit'],
   docsLink: helpPagePath('ci/secure_files/index'),
   DEFAULT_PER_PAGE,
   i18n: {
+    deleteLabel: __('Delete File'),
+    uploadLabel: __('Upload File'),
+    uploadingLabel: __('Uploading...'),
     pagination: {
       next: __('Next'),
       prev: __('Prev'),
@@ -26,23 +52,45 @@ export default {
       'Use Secure Files to store files used by your pipelines such as Android keystores, or Apple provisioning profiles and signing certificates.',
     ),
     moreInformation: __('More information'),
+    uploadErrorMessages: {
+      duplicate: __('A file with this name already exists.'),
+      tooLarge: __('File too large. Secure Files must be less than %{limit} MB.'),
+    },
+    deleteModalTitle: s__('SecureFiles|Delete %{name}?'),
+    deleteModalMessage: s__(
+      'SecureFiles|Secure File %{name} will be permanently deleted. Are you sure?',
+    ),
+    deleteModalButton: s__('SecureFiles|Delete secure file'),
   },
+  deleteModalId: 'deleteModalId',
   data() {
     return {
       page: 1,
       totalItems: 0,
       loading: false,
+      uploading: false,
+      error: false,
+      errorMessage: null,
       projectSecureFiles: [],
+      deleteModalFileId: null,
+      deleteModalFileName: null,
     };
   },
   fields: [
     {
       key: 'name',
       label: __('Filename'),
+      tdClass: 'gl-vertical-align-middle!',
     },
     {
       key: 'created_at',
       label: __('Uploaded'),
+      tdClass: 'gl-vertical-align-middle!',
+    },
+    {
+      key: 'actions',
+      label: '',
+      tdClass: 'gl-text-right gl-vertical-align-middle!',
     },
   ],
   computed: {
@@ -59,6 +107,18 @@ export default {
     this.getProjectSecureFiles();
   },
   methods: {
+    async deleteSecureFile(secureFileId) {
+      this.loading = true;
+      this.error = false;
+      try {
+        await Api.deleteProjectSecureFile(this.projectId, secureFileId);
+        this.getProjectSecureFiles();
+      } catch (error) {
+        Sentry.captureException(error);
+        this.error = true;
+        this.errorMessage = error;
+      }
+    },
     async getProjectSecureFiles(page) {
       this.loading = true;
       const response = await Api.projectSecureFiles(this.projectId, { page });
@@ -68,6 +128,48 @@ export default {
       this.projectSecureFiles = response.data;
 
       this.loading = false;
+      this.uploading = false;
+    },
+    async uploadSecureFile() {
+      this.error = null;
+      this.uploading = true;
+      const [file] = this.$refs.fileUpload.files;
+      try {
+        await Api.uploadProjectSecureFile(this.projectId, this.uploadFormData(file));
+        this.getProjectSecureFiles();
+      } catch (error) {
+        this.error = true;
+        this.errorMessage = this.formattedErrorMessage(error);
+        this.uploading = false;
+      }
+    },
+    formattedErrorMessage(error) {
+      let message = '';
+      if (error?.response?.data?.message?.name) {
+        message = this.$options.i18n.uploadErrorMessages.duplicate;
+      } else if (error.response.status === httpStatusCodes.PAYLOAD_TOO_LARGE) {
+        message = sprintf(this.$options.i18n.uploadErrorMessages.tooLarge, {
+          limit: this.fileSizeLimit,
+        });
+      } else {
+        Sentry.captureException(error);
+        message = error;
+      }
+      return message;
+    },
+    loadFileSelctor() {
+      this.$refs.fileUpload.click();
+    },
+    setDeleteModalData(secureFile) {
+      this.deleteModalFileId = secureFile.id;
+      this.deleteModalFileName = secureFile.name;
+    },
+    uploadFormData(file) {
+      const formData = new FormData();
+      formData.append('name', file.name);
+      formData.append('file', file);
+
+      return formData;
     },
   },
 };
@@ -75,16 +177,51 @@ export default {
 
 <template>
   <div>
-    <h1 data-testid="title" class="gl-font-size-h1 gl-mt-3 gl-mb-0">{{ $options.i18n.title }}</h1>
+    <gl-alert v-if="error" variant="danger" class="gl-mt-6" @dismiss="error = null">
+      {{ errorMessage }}
+    </gl-alert>
+    <div class="row">
+      <div class="col-md-12 col-lg-6 gl-display-flex">
+        <div class="gl-flex-direction-column gl-flex-wrap">
+          <h1 class="gl-font-size-h1 gl-mt-3 gl-mb-0">
+            {{ $options.i18n.title }}
+          </h1>
+        </div>
+      </div>
 
-    <p>
-      <span data-testid="info-message" class="gl-mr-2">
-        {{ $options.i18n.overviewMessage }}
-        <gl-link :href="$options.docsLink" target="_blank">{{
-          $options.i18n.moreInformation
-        }}</gl-link>
-      </span>
-    </p>
+      <div class="col-md-12 col-lg-6">
+        <div class="gl-display-flex gl-flex-wrap gl-justify-content-end">
+          <gl-button v-if="admin" class="gl-mt-3" variant="info" @click="loadFileSelctor">
+            <span v-if="uploading">
+              <gl-loading-icon size="sm" class="gl-my-5" inline />
+              {{ $options.i18n.uploadingLabel }}
+            </span>
+            <span v-else>
+              <gl-icon name="upload" class="gl-mr-2" /> {{ $options.i18n.uploadLabel }}
+            </span>
+          </gl-button>
+          <input
+            id="file-upload"
+            ref="fileUpload"
+            type="file"
+            class="hidden"
+            data-qa-selector="file_upload_field"
+            @change="uploadSecureFile"
+          />
+        </div>
+      </div>
+    </div>
+
+    <div class="row">
+      <div class="col-md-12 col-lg-12 gl-my-4">
+        <span data-testid="info-message">
+          {{ $options.i18n.overviewMessage }}
+          <gl-link :href="$options.docsLink" target="_blank">{{
+            $options.i18n.moreInformation
+          }}</gl-link>
+        </span>
+      </div>
+    </div>
 
     <gl-table
       :busy="loading"
@@ -111,7 +248,20 @@ export default {
       <template #cell(created_at)="{ item }">
         <timeago-tooltip :time="item.created_at" />
       </template>
+
+      <template #cell(actions)="{ item }">
+        <gl-button
+          v-if="admin"
+          v-gl-modal="$options.deleteModalId"
+          v-gl-tooltip.hover.top="$options.i18n.deleteLabel"
+          variant="danger"
+          icon="remove"
+          :aria-label="$options.i18n.deleteLabel"
+          @click="setDeleteModalData(item)"
+        />
+      </template>
     </gl-table>
+
     <gl-pagination
       v-if="!loading"
       v-model="page"
@@ -121,5 +271,25 @@ export default {
       :prev-text="$options.i18n.pagination.prev"
       align="center"
     />
+
+    <gl-modal
+      :ref="$options.deleteModalId"
+      :modal-id="$options.deleteModalId"
+      title-tag="h4"
+      category="primary"
+      :ok-title="$options.i18n.deleteModalButton"
+      ok-variant="danger"
+      @ok="deleteSecureFile(deleteModalFileId)"
+    >
+      <template #modal-title>
+        <gl-sprintf :message="$options.i18n.deleteModalTitle">
+          <template #name>{{ deleteModalFileName }}</template>
+        </gl-sprintf>
+      </template>
+
+      <gl-sprintf :message="$options.i18n.deleteModalMessage">
+        <template #name>{{ deleteModalFileName }}</template>
+      </gl-sprintf>
+    </gl-modal>
   </div>
 </template>
diff --git a/app/assets/javascripts/ci_secure_files/index.js b/app/assets/javascripts/ci_secure_files/index.js
index 18b4ac6866e..3944286dc60 100644
--- a/app/assets/javascripts/ci_secure_files/index.js
+++ b/app/assets/javascripts/ci_secure_files/index.js
@@ -1,14 +1,19 @@
 import Vue from 'vue';
+import { parseBoolean } from '~/lib/utils/common_utils';
 import SecureFilesList from './components/secure_files_list.vue';
 
 export const initCiSecureFiles = (selector = '#js-ci-secure-files') => {
   const containerEl = document.querySelector(selector);
   const { projectId } = containerEl.dataset;
+  const { admin } = containerEl.dataset;
+  const { fileSizeLimit } = containerEl.dataset;
 
   return new Vue({
     el: containerEl,
     provide: {
       projectId,
+      admin: parseBoolean(admin),
+      fileSizeLimit,
     },
     render(createElement) {
       return createElement(SecureFilesList);
diff --git a/app/assets/javascripts/issues/list/components/issues_list_app.vue b/app/assets/javascripts/issues/list/components/issues_list_app.vue
index 150016ed99d..b81ab103271 100644
--- a/app/assets/javascripts/issues/list/components/issues_list_app.vue
+++ b/app/assets/javascripts/issues/list/components/issues_list_app.vue
@@ -125,6 +125,7 @@ export default {
     'isAnonymousSearchDisabled',
     'isIssueRepositioningDisabled',
     'isProject',
+    'isPublicVisibilityRestricted',
     'isSignedIn',
     'jiraIntegrationPath',
     'newIssuePath',
@@ -209,6 +210,7 @@ export default {
       const isIidSearch = ISSUE_REFERENCE.test(this.searchQuery);
       return {
         fullPath: this.fullPath,
+        hideUsers: this.isPublicVisibilityRestricted && !this.isSignedIn,
         iid: isIidSearch ? this.searchQuery.slice(1) : undefined,
         isProject: this.isProject,
         isSignedIn: this.isSignedIn,
diff --git a/app/assets/javascripts/issues/list/index.js b/app/assets/javascripts/issues/list/index.js
index 61cd3840cc1..f5cb160e344 100644
--- a/app/assets/javascripts/issues/list/index.js
+++ b/app/assets/javascripts/issues/list/index.js
@@ -101,6 +101,7 @@ export function mountIssuesListApp() {
     isAnonymousSearchDisabled,
     isIssueRepositioningDisabled,
     isProject,
+    isPublicVisibilityRestricted,
     isSignedIn,
     jiraIntegrationPath,
     markdownHelpPath,
@@ -144,6 +145,7 @@ export function mountIssuesListApp() {
       isAnonymousSearchDisabled: parseBoolean(isAnonymousSearchDisabled),
       isIssueRepositioningDisabled: parseBoolean(isIssueRepositioningDisabled),
       isProject: parseBoolean(isProject),
+      isPublicVisibilityRestricted: parseBoolean(isPublicVisibilityRestricted),
       isSignedIn: parseBoolean(isSignedIn),
       jiraIntegrationPath,
       newIssuePath,
diff --git a/app/assets/javascripts/issues/list/queries/get_issues.query.graphql b/app/assets/javascripts/issues/list/queries/get_issues.query.graphql
index dcc0db786b7..df7016aeb74 100644
--- a/app/assets/javascripts/issues/list/queries/get_issues.query.graphql
+++ b/app/assets/javascripts/issues/list/queries/get_issues.query.graphql
@@ -2,6 +2,7 @@
 #import "./issue.fragment.graphql"
 
 query getIssues(
+  $hideUsers: Boolean = false
   $isProject: Boolean = false
   $isSignedIn: Boolean = false
   $fullPath: ID!
diff --git a/app/assets/javascripts/issues/list/queries/get_issues_without_crm.query.graphql b/app/assets/javascripts/issues/list/queries/get_issues_without_crm.query.graphql
index 94948bb7d34..4a8b1dfd618 100644
--- a/app/assets/javascripts/issues/list/queries/get_issues_without_crm.query.graphql
+++ b/app/assets/javascripts/issues/list/queries/get_issues_without_crm.query.graphql
@@ -2,6 +2,7 @@
 #import "./issue.fragment.graphql"
 
 query getIssuesWithoutCrm(
+  $hideUsers: Boolean = false
   $isProject: Boolean = false
   $isSignedIn: Boolean = false
   $fullPath: ID!
diff --git a/app/assets/javascripts/issues/list/queries/issue.fragment.graphql b/app/assets/javascripts/issues/list/queries/issue.fragment.graphql
index d09e4d9df2b..73a13cea94a 100644
--- a/app/assets/javascripts/issues/list/queries/issue.fragment.graphql
+++ b/app/assets/javascripts/issues/list/queries/issue.fragment.graphql
@@ -17,7 +17,7 @@ fragment IssueFragment on Issue {
   userDiscussionsCount @include(if: $isSignedIn)
   webPath
   webUrl
-  assignees {
+  assignees @skip(if: $hideUsers) {
     nodes {
       __typename
       id
@@ -27,7 +27,7 @@ fragment IssueFragment on Issue {
       webUrl
     }
   }
-  author {
+  author @skip(if: $hideUsers) {
     __typename
     id
     avatarUrl
diff --git a/app/assets/javascripts/lib/utils/http_status.js b/app/assets/javascripts/lib/utils/http_status.js
index 6b9be34235b..c5190592bb6 100644
--- a/app/assets/javascripts/lib/utils/http_status.js
+++ b/app/assets/javascripts/lib/utils/http_status.js
@@ -22,6 +22,7 @@ const httpStatusCodes = {
   METHOD_NOT_ALLOWED: 405,
   CONFLICT: 409,
   GONE: 410,
+  PAYLOAD_TOO_LARGE: 413,
   UNPROCESSABLE_ENTITY: 422,
   TOO_MANY_REQUESTS: 429,
   INTERNAL_SERVER_ERROR: 500,
diff --git a/app/assets/javascripts/pipelines/components/header_component.vue b/app/assets/javascripts/pipelines/components/header_component.vue
index afe624928af..37878f3fb6d 100644
--- a/app/assets/javascripts/pipelines/components/header_component.vue
+++ b/app/assets/javascripts/pipelines/components/header_component.vue
@@ -93,6 +93,7 @@ export default {
   data() {
     return {
       pipeline: null,
+      failureMessages: [],
       failureType: null,
       isCanceling: false,
       isRetrying: false,
@@ -159,8 +160,9 @@ export default {
     },
   },
   methods: {
-    reportFailure(errorType) {
+    reportFailure(errorType, errorMessages = []) {
       this.failureType = errorType;
+      this.failureMessages = errorMessages;
     },
     async postPipelineAction(name, mutation) {
       try {
@@ -176,7 +178,7 @@ export default {
         if (errors.length > 0) {
           this.isRetrying = false;
 
-          this.reportFailure(POST_FAILURE);
+          this.reportFailure(POST_FAILURE, errors);
         } else {
           await this.$apollo.queries.pipeline.refetch();
           if (!this.isFinished) {
@@ -214,7 +216,7 @@ export default {
         });
 
         if (errors.length > 0) {
-          this.reportFailure(DELETE_FAILURE);
+          this.reportFailure(DELETE_FAILURE, errors);
           this.isDeleting = false;
         } else {
           redirectTo(setUrlFragment(this.paths.pipelinesPath, 'delete_success'));
@@ -231,9 +233,11 @@ export default {
 </script>
 <template>
   <div class="js-pipeline-header-container">
-    <gl-alert v-if="hasError" :variant="failure.variant" :dismissible="false">{{
-      failure.text
-    }}</gl-alert>
+    <gl-alert v-if="hasError" :title="failure.text" :variant="failure.variant" :dismissible="false">
+      <div v-for="(failureMessage, index) in failureMessages" :key="`failure-message-${index}`">
+        {{ failureMessage }}
+      </div>
+    </gl-alert>
     <ci-header
       v-if="shouldRenderContent"
       :status="pipeline.detailedStatus"
diff --git a/app/assets/javascripts/vue_shared/issuable/list/components/issuable_item.vue b/app/assets/javascripts/vue_shared/issuable/list/components/issuable_item.vue
index 8008b85bbdb..6453290f6ea 100644
--- a/app/assets/javascripts/vue_shared/issuable/list/components/issuable_item.vue
+++ b/app/assets/javascripts/vue_shared/issuable/list/components/issuable_item.vue
@@ -55,7 +55,7 @@ export default {
       return createdSecondsAgo < SECONDS_IN_DAY;
     },
     author() {
-      return this.issuable.author;
+      return this.issuable.author || {};
     },
     webUrl() {
       return this.issuable.gitlabWebUrl || this.issuable.webUrl;
@@ -215,7 +215,7 @@ export default {
         <span class="gl-display-none gl-sm-display-inline">
           <span aria-hidden="true">&middot;</span>
           <span class="issuable-authored gl-mr-3">
-            <gl-sprintf :message="__('created %{timeAgo} by %{author}')">
+            <gl-sprintf v-if="author.name" :message="__('created %{timeAgo} by %{author}')">
               <template #timeAgo>
                 <span
                   v-gl-tooltip.bottom
@@ -241,6 +241,17 @@ export default {
                 </gl-link>
               </template>
             </gl-sprintf>
+            <gl-sprintf v-else :message="__('created %{timeAgo}')">
+              <template #timeAgo>
+                <span
+                  v-gl-tooltip.bottom
+                  :title="tooltipTitle(issuable.createdAt)"
+                  data-testid="issuable-created-at"
+                >
+                  {{ createdAt }}
+                </span>
+              </template>
+            </gl-sprintf>
           </span>
           <slot name="timeframe"></slot>
         </span>
diff --git a/app/controllers/projects/blame_controller.rb b/app/controllers/projects/blame_controller.rb
index 57a06f26f8c..64ced43311a 100644
--- a/app/controllers/projects/blame_controller.rb
+++ b/app/controllers/projects/blame_controller.rb
@@ -23,8 +23,11 @@ class Projects::BlameController < Projects::ApplicationController
     environment_params[:find_latest] = true
     @environment = ::Environments::EnvironmentsByDeploymentsFinder.new(@project, current_user, environment_params).execute.last
 
-    @blame = Gitlab::Blame.new(@blob, @commit)
-    @blame = Gitlab::View::Presenter::Factory.new(@blame, project: @project, path: @path).fabricate!
+    blame_service = Projects::BlameService.new(@blob, @commit, params.permit(:page))
+
+    @blame = Gitlab::View::Presenter::Factory.new(blame_service.blame, project: @project, path: @path).fabricate!
+
+    render locals: { blame_pagination: blame_service.pagination }
   end
 end
 
diff --git a/app/controllers/projects/ci/secure_files_controller.rb b/app/controllers/projects/ci/secure_files_controller.rb
index 5141d0188b0..59ddca19081 100644
--- a/app/controllers/projects/ci/secure_files_controller.rb
+++ b/app/controllers/projects/ci/secure_files_controller.rb
@@ -6,5 +6,6 @@ class Projects::Ci::SecureFilesController < Projects::ApplicationController
   feature_category :pipeline_authoring
 
   def show
+    render_404 unless Feature.enabled?(:ci_secure_files, project)
   end
 end
diff --git a/app/graphql/mutations/work_items/delete_task.rb b/app/graphql/mutations/work_items/delete_task.rb
index a3caebbe45a..87620a28fa1 100644
--- a/app/graphql/mutations/work_items/delete_task.rb
+++ b/app/graphql/mutations/work_items/delete_task.rb
@@ -50,8 +50,6 @@ module Mutations
       private
 
       def authorized_find_task!(task_id)
-        # TODO: Remove coercion when working on https://gitlab.com/gitlab-org/gitlab/-/issues/257883
-        task_id = ::Types::GlobalIDType[::WorkItem].coerce_isolated_input(task_id)
         task = ::Gitlab::Graphql::Lazy.force(GitlabSchema.find_by_gid(task_id))
 
         if current_user.can?(:delete_work_item, task)
@@ -64,8 +62,6 @@ module Mutations
 
       # method used by `authorized_find!(id: id)`
       def find_object(id:)
-        # TODO: Remove coercion when working on https://gitlab.com/gitlab-org/gitlab/-/issues/257883
-        id = ::Types::GlobalIDType[::WorkItem].coerce_isolated_input(id)
         GitlabSchema.find_by_gid(id)
       end
     end
diff --git a/app/graphql/resolvers/design_management/designs_resolver.rb b/app/graphql/resolvers/design_management/designs_resolver.rb
index 9993368715f..429bbba74a5 100644
--- a/app/graphql/resolvers/design_management/designs_resolver.rb
+++ b/app/graphql/resolvers/design_management/designs_resolver.rb
@@ -24,7 +24,7 @@ module Resolvers
       end
 
       def resolve(ids: nil, filenames: nil, at_version: nil)
-        context.scoped_set!(:at_version_argument, VersionID.coerce_isolated_input(at_version)) if at_version
+        context.scoped_set!(:at_version_argument, at_version) if at_version
 
         ::Gitlab::Graphql::Lazy.with_value(version(at_version)) do |visible_at|
           ::DesignManagement::DesignsFinder.new(
diff --git a/app/graphql/types/global_id_type.rb b/app/graphql/types/global_id_type.rb
index 4f92b5e8cc2..6a924c13a3c 100644
--- a/app/graphql/types/global_id_type.rb
+++ b/app/graphql/types/global_id_type.rb
@@ -1,21 +1,5 @@
 # frozen_string_literal: true
 
-module GraphQLExtensions
-  module ScalarExtensions
-    # Allow ID to unify with GlobalID Types
-    def ==(other)
-      if name == 'ID' && other.is_a?(self.class) &&
-          other.type_class.ancestors.include?(::Types::GlobalIDType)
-        return true
-      end
-
-      super
-    end
-  end
-end
-
-::GraphQL::ScalarType.prepend(GraphQLExtensions::ScalarExtensions)
-
 module Types
   class GlobalIDType < BaseScalar
     graphql_name 'GlobalID'
diff --git a/app/graphql/types/query_type.rb b/app/graphql/types/query_type.rb
index 67b3280c689..01b1a71896a 100644
--- a/app/graphql/types/query_type.rb
+++ b/app/graphql/types/query_type.rb
@@ -157,10 +157,6 @@ module Types
     end
 
     def milestone(id:)
-      # This field coerces its ID, and thus allows the use of ID typed values.
-      # This should be removed when app/graphql/queries/burndown_chart/burnup.query.graphql
-      # has been fixed/removed and as part of !83457
-      id = ::Types::GlobalIDType[Milestone].coerce_input(id, context)
       GitlabSchema.find_by_gid(id)
     end
 
diff --git a/app/helpers/issues_helper.rb b/app/helpers/issues_helper.rb
index 4ac39e36af8..04de77dd484 100644
--- a/app/helpers/issues_helper.rb
+++ b/app/helpers/issues_helper.rb
@@ -204,6 +204,8 @@ module IssuesHelper
       initial_sort: current_user&.user_preference&.issues_sort,
       is_anonymous_search_disabled: Feature.enabled?(:disable_anonymous_search, type: :ops).to_s,
       is_issue_repositioning_disabled: issue_repositioning_disabled?.to_s,
+      is_public_visibility_restricted:
+        Gitlab::CurrentSettings.restricted_visibility_levels.include?(Gitlab::VisibilityLevel::PUBLIC).to_s,
       is_signed_in: current_user.present?.to_s,
       jira_integration_path: help_page_url('integration/jira/issues', anchor: 'view-jira-issues'),
       rss_path: url_for(safe_params.merge(rss_url_options)),
diff --git a/app/services/projects/blame_service.rb b/app/services/projects/blame_service.rb
new file mode 100644
index 00000000000..f7c1240a3ba
--- /dev/null
+++ b/app/services/projects/blame_service.rb
@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+# Service class to correctly initialize Gitlab::Blame and Kaminari pagination
+# objects
+module Projects
+  class BlameService
+    PER_PAGE = 1000
+
+    def initialize(blob, commit, params)
+      @blob = blob
+      @commit = commit
+      @page = extract_page(params)
+    end
+
+    def blame
+      Gitlab::Blame.new(blob, commit, range: blame_range)
+    end
+
+    def pagination
+      return unless pagination_enabled?
+
+      Kaminari.paginate_array([], total_count: blob_lines_count)
+        .page(page)
+        .per(per_page)
+        .limit(per_page)
+    end
+
+    private
+
+    attr_reader :blob, :commit, :page
+
+    def blame_range
+      return unless pagination_enabled?
+
+      first_line = (page - 1) * per_page + 1
+      last_line = (first_line + per_page).to_i - 1
+
+      first_line..last_line
+    end
+
+    def extract_page(params)
+      page = params.fetch(:page, 1).to_i
+
+      return 1 if page < 1 || overlimit?(page)
+
+      page
+    end
+
+    def per_page
+      PER_PAGE
+    end
+
+    def overlimit?(page)
+      page * per_page >= blob_lines_count + per_page
+    end
+
+    def blob_lines_count
+      @blob_lines_count ||= blob.data.lines.count
+    end
+
+    def pagination_enabled?
+      Feature.enabled?(:blame_page_pagination, commit.project)
+    end
+  end
+end
diff --git a/app/views/projects/blame/show.html.haml b/app/views/projects/blame/show.html.haml
index 7f72438c3f9..bc1e62a8980 100644
--- a/app/views/projects/blame/show.html.haml
+++ b/app/views/projects/blame/show.html.haml
@@ -58,3 +58,6 @@
                     #{line}
 
           - current_line += line_count
+
+  - if blame_pagination
+    = paginate(blame_pagination, theme: "gitlab")
diff --git a/app/views/projects/ci/secure_files/show.html.haml b/app/views/projects/ci/secure_files/show.html.haml
index db0734be6bd..1a87ccd753c 100644
--- a/app/views/projects/ci/secure_files/show.html.haml
+++ b/app/views/projects/ci/secure_files/show.html.haml
@@ -1,5 +1,3 @@
-- @content_class = "limit-container-width"
-
 - page_title s_('Secure Files')
 
-#js-ci-secure-files{ data: { project_id: @project.id } }
+#js-ci-secure-files{ data: { project_id: @project.id, admin: can?(current_user, :admin_secure_files, @project).to_s, file_size_limit: Ci::SecureFile::FILE_SIZE_LIMIT.to_mb } }
diff --git a/config/feature_flags/development/blame_page_pagination.yml b/config/feature_flags/development/blame_page_pagination.yml
new file mode 100644
index 00000000000..49fb1a7f605
--- /dev/null
+++ b/config/feature_flags/development/blame_page_pagination.yml
@@ -0,0 +1,8 @@
+---
+name: blame_page_pagination
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/85827
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/360927
+milestone: '15.0'
+type: development
+group: group::source code
+default_enabled: false
diff --git a/config/feature_flags/development/updated_mr_header.yml b/config/feature_flags/development/updated_mr_header.yml
index b5ed19b65dc..7268076b587 100644
--- a/config/feature_flags/development/updated_mr_header.yml
+++ b/config/feature_flags/development/updated_mr_header.yml
@@ -5,4 +5,4 @@ rollout_issue_url:
 milestone: '14.10'
 type: development
 group: group::code review
-default_enabled: false
+default_enabled: true
diff --git a/config/initializers_before_autoloader/004_zeitwerk.rb b/config/initializers_before_autoloader/004_zeitwerk.rb
index ff96a84166a..db0688d1559 100644
--- a/config/initializers_before_autoloader/004_zeitwerk.rb
+++ b/config/initializers_before_autoloader/004_zeitwerk.rb
@@ -27,7 +27,6 @@ Rails.autoloaders.each do |autoloader|
     'dn' => 'DN',
     'gitlab_cli_activity_unique_counter' => 'GitLabCliActivityUniqueCounter',
     'global_id_type' => 'GlobalIDType',
-    'global_id_compatibility' => 'GlobalIDCompatibility',
     'hll' => 'HLL',
     'hll_redis_counter' => 'HLLRedisCounter',
     'redis_hll_metric' => 'RedisHLLMetric',
diff --git a/doc/api/dora4_project_analytics.md b/doc/api/dora4_project_analytics.md
index c202b075c42..53170c3a77f 100644
--- a/doc/api/dora4_project_analytics.md
+++ b/doc/api/dora4_project_analytics.md
@@ -10,7 +10,7 @@ type: reference, api
 > [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/279039) in GitLab 13.7.
 
 WARNING:
-These endpoints are deprecated and will be removed in GitLab 14.0. Use the [DORA metrics API](dora/metrics.md) instead.
+These endpoints have been removed in GitLab 14.0. Use the [DORA metrics API](dora/metrics.md) instead.
 
 All methods require reporter authorization.
 
diff --git a/doc/development/application_slis/index.md b/doc/development/application_slis/index.md
index 69cd30420b8..2834723fc01 100644
--- a/doc/development/application_slis/index.md
+++ b/doc/development/application_slis/index.md
@@ -30,7 +30,22 @@ to be emitted from the rails application:
 
 ## Defining a new SLI
 
-An SLI can be defined using the `Gitlab::Metrics::Sli` class.
+An SLI can be defined using the `Gitlab::Metrics::Sli::Apdex` or
+`Gitlab::Metrics::Sli::ErrorRate` class. These work in broadly the same way, but
+for clarity, they define different metric names:
+
+1. `Gitlab::Metrics::Sli::Apdex.new('foo')` defines:
+    1. `gitlab_sli:foo_apdex:total` for the total number of measurements.
+    1. `gitlab_sli:foo_apdex:success_total` for the number of successful
+       measurements.
+1. `Gitlab::Metrics::Sli::ErrorRate.new('foo')` defines:
+    1. `gitlab_sli:foo_error_rate:total` for the total number of measurements.
+    1. `gitlab_sli:foo_error_rate:error_total` for the number of error
+       measurements - as this is an error rate, it's more natural to talk about
+       errors divided by the total.
+
+As shown in this example, they can share a base name (`foo` in this example). We
+recommend this when they refer to the same operation.
 
 Before the first scrape, it is important to have [initialized the SLI
 with all possible
@@ -41,7 +56,7 @@ To initialize an SLI, use the `.initialize_sli` class method, for
 example:
 
 ```ruby
-Gitlab::Metrics::Sli.initialize_sli(:received_email, [
+Gitlab::Metrics::Sli::Apdex.initialize_sli(:received_email, [
   {
     feature_category: :team_planning,
     email_type: :create_issue
@@ -67,7 +82,7 @@ this adds is understood and acceptable.
 Tracking an operation in the newly defined SLI can be done like this:
 
 ```ruby
-Gitlab::Metrics::Sli[:received_email].increment(
+Gitlab::Metrics::Sli::Apdex[:received_email].increment(
   labels: {
     feature_category: :service_desk,
     email_type: :service_desk
@@ -79,20 +94,26 @@ Gitlab::Metrics::Sli[:received_email].increment(
 Calling `#increment` on this SLI will increment the total Prometheus counter
 
 ```prometheus
-gitlab_sli:received_email:total{ feature_category='service_desk', email_type='service_desk' }
+gitlab_sli:received_email_apdex:total{ feature_category='service_desk', email_type='service_desk' }
 ```
 
-If the `success:` argument passed is truthy, then the success counter
-will also be incremented:
+If the `success:` argument passed is truthy, then the success counter will also
+be incremented:
 
 ```prometheus
-gitlab_sli:received_email:success_total{ feature_category='service_desk', email_type='service_desk' }
+gitlab_sli:received_email_apdex:success_total{ feature_category='service_desk', email_type='service_desk' }
 ```
 
-So far, only tracking `apdex` using a success rate is supported. If you
-need to track errors this way, please upvote
-[this issue](https://gitlab.com/gitlab-com/gl-infra/scalability/-/issues/1395)
-and leave a comment so we can prioritize this.
+For error rate SLIs, the equivalent argument is called `error:`:
+
+```ruby
+Gitlab::Metrics::Sli::ErrorRate[:merge].increment(
+  labels: {
+    merge_type: :fast_forward
+  },
+  error: !merge_success?
+)
+```
 
 ## Using the SLI in service monitoring and alerts
 
diff --git a/doc/development/documentation/versions.md b/doc/development/documentation/versions.md
index 6c404fdbfb1..0f2bdca4c73 100644
--- a/doc/development/documentation/versions.md
+++ b/doc/development/documentation/versions.md
@@ -146,7 +146,7 @@ To remove a page:
    Use [feature X](<link-to-issue>) instead.
    ```
 
-1. Remove the page from the left nav.
+1. Remove the page's entry from the global navigation by editing [`navigation.yaml`](https://gitlab.com/gitlab-org/gitlab-docs/blob/main/content/_data/navigation.yaml) in `gitlab-docs`.
 
 This content is removed from the documentation as part of the Technical Writing team's
 [regularly scheduled tasks](https://about.gitlab.com/handbook/engineering/ux/technical-writing/#regularly-scheduled-tasks).
@@ -163,7 +163,7 @@ To remove a topic:
 
    ```markdown
    <!--- start_remove The following content will be removed on remove_date: '2023-08-22' -->
-   
+
    ## Title (removed) **(ULTIMATE SELF)**
 
    This feature was [deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/351963) in GitLab 14.8
diff --git a/doc/tutorials/make_your_first_git_commit.md b/doc/tutorials/make_your_first_git_commit.md
index 4b88b528be6..fd153b51a2c 100644
--- a/doc/tutorials/make_your_first_git_commit.md
+++ b/doc/tutorials/make_your_first_git_commit.md
@@ -255,8 +255,6 @@ Let's look in the UI and confirm your changes. Go to your project.
 
   ![Commit message](img/commit_message_v14_10.png)
 
-- Above the file list, select **History** to view your commit details.
-
 Now you can return to the command line and change back to your personal branch
 (`git checkout example-tutorial-branch`). You can continue updating files or
 creating new ones. Type `git status` to view the status
diff --git a/doc/user/discussions/img/create-new-issue_v14_3.png b/doc/user/discussions/img/create-new-issue_v14_3.png
deleted file mode 100644
index d76fed6cb4280b34929e2b0427dc5b37e64b0ce1..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 4358
zcmZ`-2UJtp){cN9f`SE91d%`zY6#6pZ_+}O-a8335FkN95fGw)ASLwPL8VG>A{`?|
zhTdx|ND(Ol0{WuPyqWc{_usYdIs2TwzunJScijjbZPoL1*XaNNz<Gq4k{$qX3PGXK
zwA7SwNU^enGSN6HXej^yFJkDAZBJ9yr?7geih%M#wp9Rtiq6@<1ZSe9DQS;!6SPHQ
z>`;PuHxG&w03eN*q>yeXoGl054egGV#LIC0l8~g(Keu6=9KS?xt}>h^S~?teFkUDQ
zxS)`r5T`612M33=7t%pePf6u3IAtZn>4d|1NWx$~K0bmzqJkJNN0_jLgak}T1STQ^
zrAR=rzV0|%Jk%Y_^;^l`dX!LDdoO1XoHNFq<ELI*JB&9@hLiKBq5nR={lqyt{A0--
z`&U?$0AW8lFkwL<*#Cl|@Xr4a>?h|p>{ndB%}M`MCaH(QV$j|{y)txn#>t9E|FZFa
zxBqcc`ll{Q9cMfWZKCAthH}SJpt7PO64J2$$@!m1(|?e{LgN2M{)_V$QX2L%TmQ=5
z@6!C*rPM~2P8#;#I?K`x)>SoAN`KZv%@hj&&|m)fo&uz0T%)u~nvSM{GKHz7rBzi`
z_3G8DnVFeKj~*Q!9{%|8<J-4yTU%Q~LP8D>4ksrk2L}iJ{r!4+di(qPySuxhqN3lw
ze_vl;-`Uxbl$7l5?$*%I@b&eLii*n3&7GQ>QczH!qN3W^*jQa%-P_yC&d#o{uTM-&
z<m2OOZEgMf_3M`}UoaTV+}vDsb#+%)7aot#$jG3kruOsm>+S6wA0O}R?4;CXa&mHd
zdYVioU%h%YG&HoPrsmC?H}BrPb98jv-rnZn;mOI#(bm>ZNJx19{{7(K;O6G$hYue(
zIXUO&=NTCp;cz$u1H;?5Z(qNDy}Z1vqM|Z9JpAd?CwqJQwY9b8=H}Vi*}%X+B9Ule
zVR8BLWn*Jw4-XGlS63z`rm(QE)2C0PP^giS5oTs)5{X1hOKWLq>E`Cv*4B1(bR;Du
zg~ejo+1U*Y4F3G{PaPed#>Pe)8=Ix2B@+{qf`Wq2pFa-`4OLcF4h#&iva+hFsg;zJ
zq^72tnVBgmDT#@RnVXv{Dk|32);@Xiq`bVGKp-S1C!aZU#@gCCI5;>dDJdWzKu}O{
zY-~(eSa@-9@#DvjadB}kUc3ki2^k$71%ttKbaYRjK5c1fiH?q@oV$w`FE%wbJ$v>{
zS6A2F-90ZakByBDhr_wJxUjIW0D-`B=gvt>OUud0J%9c@Gc!{_Kp-nCtF*M#$;rvt
z*%^&SzkK<!r>E!k?b}EsQe9oWuCDI*__(jHk8;4%($WkK4Hp&`?Ck8q!^2}@VpLUC
zi;9Zc+uIu&8vOnJQ&LhQBO@UY$m7S4i;IiBy}eCMO=V?eJv}`U2!y7lW>8Sjy?ggM
zIyxdEB34#b3JVL%%F5#7<MZ?L_4V~1Ja};T?p+WFG%+zDBO`NY!qiS_*9C-<f&qSd
zeKx{a-}pLUD>619SwoT7dO?SlMlqP<G&K($t%<z6k?uuiC8JZ&&GGv+`3)6ibuKq*
z%gaWh&F@NC7WLtp`u!Xhek31m`opdX0U7MjUYkA)nC3n%xy|kQ0f`G2ge4Sc9>g*c
z74^Dy;*YoLZGqS19y2zO(?LorK22@v<q#k%mYUyJ2nR-J%7ga_m1O=?i2*<YIR9b6
zFPs`30>}%>R`i;RoGX`*xVu||8BEg*FDh#tVRxB9Y#+6QP4%g|S#u6TCb|j|bc@%F
zzU{N<BQsKNu1UE`^h37nJP>dMHG!Z2HysIFx`_|mp?j6q;D|W`ES$d0hS&R4j?}tZ
zbne{NAG6gr^u5?RCyRD`JLfZ>B6TAT<_sct#a{>8gI?l}&bO`|v{)u-;&yEwMzgZN
z8<RSdUx16o$fc`@Xj9<`y1|!a$PH)Z_gy=T&0p7o04utMFQJeRdw_38NF8F%BAOS?
z4Vs0#s$UJ{bc~BcmvrqI9R{3cYE!=TvIqcjj*T@qyC^5YW6FPDOHEW@i>G2<f)*Up
zS^P=&QF;A)bddXm`<$enkxp%og?9M&UIG$wbHF-*oD>!P%rfclhVYfR^u&QGvI{FI
z$<MX3(9Mh8icAQ6yAFA#5w|`lS5lPyApgcqP%QAE?}_EG^L%stqIE70sk+7Q14qK~
zwXaQJ&q<Lsy3pL&@cZk>+ja;C1VJox2|oIi=-Z^<vftBXq0CcXAkk^#^f0>-j0LgX
zb?oF*_JVsB2QfZ0YS~R<zisLuI7L5!#Rah%S~X%Xs9ObJsYe2V*N4{ja=1e!hn6e4
zP1RrAUIU9)s0(6OZK@NG>&-$;H{21ik!3iIB&yF-!?wzoZg1}PsSJH58f1{&Dy*|S
zYtG2NbBK9U;=|D6IgAg%L>9d!+Ait{4weFMI>n**5ee*ClROc^NP)JEt^F-aS@E;0
zHF1xcRQGHzazepm$=zr*S#>!x=)2?0<#jz|JedCOJ#Kta^JlgwqVZDJ9{zd_iP$;4
zZSFsC7Sy;nXDFFa1HI1Ch?{7x7-BH2%ANi4IcgSl;?vBYm+amtpN{0xP|)`?aY<NP
zQI6i*pLh9K!4hXM;^Va9lIOf^b+AGo#-W@v%k@_5cdLL9-SY)A6}#?UqSQ8Vq2k^{
z*^xw55XY@C!1SJ%(T?&qj4Sw1+%y7<(}zlMor1QRc9v7~nm>!a`fPxPX9}7v*;tU4
zWgT^E>EmG>JI?vjPC=tw7(U7PGg|_YAoNyqV`IC)y0B%BJi6`JaVx9Qk)QF)L|9_L
z8*GlhoL+(JE_8I)3>C<2d?{iA7b6w9@BShL2>Sb=efI#Lly;ld&JYR~QWOr4b`RbT
z-id{QP6APJ=cDf>pcm#t8FvnEFgB}PA(V8GC%Q7;?x0BJm9C0j84aO^*^pouakv)*
zP3<`P6tX2`6_QCP?U*2GCkW7-EutrRDsojMrM6DR&&m%kj#k-vD>U4)|ESV1s+-?8
zd(WEwaG?!2Ty>ZhyUU%bu9llskQ&|_QfcpWSv+ayT_XnggHCDv)5VuFuRw$1Q)a}v
z@F)RV#*|<xaWdIzeNJ0cEzjqN9C7pXlGBOz@VRK9iM-l#X`gz`Lm+TfilO7CgTH#y
zRl?d4X6`vnuc^z7zs{M%mrbIz+3oi!0$x{^64rU23DUyU{%8mbMVg4H`PgdNu@7#d
z@_b@gYweAZW2cvHIgX9ZGCXWimrkW*k8&~nojl4db@tU+TheT>Iy;@^Yd+ei$o@4T
zf9fR@gxchdv}j8yU>gyTIZ{l+8Td;6NivmZ{n)&mtJ5(iNw%@9MRv{iI|Fdr+WlLW
z6!P`)tDIIxz_ZMpf|^Q6PQ0Qh+=0z+UGG3&#Yd@M2~-HK!(A84osd>QI`zh+Y^8XP
za9OWKr3RA~&9}t$+?rJM#RBu8!%jr7+{@du)<5n;?Wl-jtL-4?VJA+`-t+4}gqw;J
zqt>&6kxCa7^zH|PYL^uCe&4je0+KTzZBvVms_h6)>A>9#5^m9$4S$UY47s@*kG6(s
zepQT#|Azlz$n1FaAWqumS_Ie%te@Yb<YEKnU%pmtk(GkHlD^7S=vH2}P{nW?W_oN~
z`%w8PF2g0|I;@xP&Kd)TsH@AHMPJLSt9vR@z+uhO+{|QJlsIYv(G{7$ZzELtbRUwM
z6VTOkoBUZRKx2GNhMEMsc5evxmHQAhjOuZ-q<QjGh#4xl1clqRzKj?iSn_3&zH?~l
z4_V+gUYE*MgESHk7CH?TYenhbiAgSGC6}wKNI}aj5;QA#GWMR<+4*P26*~mh;;9!{
z`HPJEh;ik-FxPB(FJ`mN9q4KlAFHtloR9A-%Yb;018Q3~xqBI|edmK1T(qZd*|Yi~
zw9xzu0k!n8S0D;yFFX696(?vqIN#0*P1+q`{W9&pn$Q}0R9p6#EG_+=7M$7eqp`V8
z6mQq9E1Wp-?MfjxtLH)pQIz$?ciH?P(gCEnebusx@+Dzw##Fq^%hK07H0j7ORVgUD
zX+yq-`09e_Du06S4>WULNB+<>n{?ovFh3f8Qe668ZLP4MtoXHPws}S<nY7J!qeh8!
zWD@o<4Bf+trDq*$p2~fFp3x*iZ{{jmb-T33vS!kcujeaVba+3d&!kIdJA6!KW4x3*
zwkuo03T!`Dt(AHg(N83bJo54aO)N!K4~iQNE3HC|<X7f<=%rZTwU^iP=7%i?tG%l^
zX9vUM!5aec<qo}?>kOFm<jTTCkLf>&^t>_yX$jNpTLaET{on2xS$4Gcgfb;q*lq+=
zd5Q#Px9fa16ls5^-t&z}js@8BaF_U8Mf;Wd^e)N93@rC1)QRx_p;1`RGK0^#7Qz4J
z6UvAL))4S<>NA@r;UPVC8LYlqYd6z9tyK7|(ya#YF%FiQVMqOtE72rD&3QXp&ou2<
zMC>`On6!d=Pp`CovZdYwHVp|DA|(E}eZ_zzJqynxOW!4xL<P;*-pv`6M*UF@IZ0&h
zgN}jT&SBwcTfBTBwOi6ltNOmWP2<HNlu>^J{tM!&zlY$lc@j(eI{wy^x8g-x)}|^0
zOIBdv;i9A%E(t@GZNAk<3A}3%!)-OLAOTEzv6yyU{P06`DH$S|Y-Md>`e0|*SfDOG
zvxl)UFnODaX#oDh3+=*xh-TC3tE?Y6&$R*?iAltjcjtB)Srgw74@%>mkx;z1T;#a%
zqNeQ4^j102w-b#Pxx3Gar1P@bA$oawEo|D43nFXZF_)1q^E0}xM3=tr1<{wfZoJUG
zClFEFl$Ozt&gdJw?@M6jBTkEtt2UDKCfxcs=4={k-nNcI8xwD2NvMd#oDXa~2ukPY
zf79hXYJ4`OS;E0%K#1YYnD~a>p$ebHD$Sis65e@_3YKwh;vS3RUFQ(W1xW=loZfvT
zoXt(ud*B-84^-$_0`<vE$R#41OdC9ort(WUwZWRx>-Hr-g{VHy>u18mlUc;mL#w!F
zXl!zQ8VI4C*C*Mglk2Y7<pf+Xz7j^KuI6R(&cl;A#gm81{7$rATP%~)skFLBeGl)@
zJ3TQGW_=L5oB00y?O2BHD?}_v*Dq3ichjd&ip!Hq`NchjbuzHV^(^7ah4wsJ_z6EO
z+~NYg4PU}Uuv)v{2Gs+h?gs~-HjBte8^CyI^Sp^Go4dPK7vRz3hUJeY7sg}JRHtn&
zb2}y?Wr9LL<MW*Lk6(X$dVMMOoSW8S1*S`1dr&uy<wiEht)Tw-ybrFx2iG4U22#D_
z^=lv#$gyT6DiyJ0G4{<hZUrC$e*$_3l#swRRIHwU2(smX$*-o(TkI{h4$hW_rNm~G
zsZ2@kZ0ii#zS@5fHZW*N0C?2eudvK1E7H<pd0ad$0j@u0>&OQpgh2J4TXYuyEo?I?
zcZlIRWFXbhEe_Ss2{+G^{)}ZiPtuj=0hy|tk`+pWtTF=b!%N|fmL2v#|4<;5wUx>h
HZ9@J7webpo

diff --git a/doc/user/discussions/img/create-new-issue_v15.png b/doc/user/discussions/img/create-new-issue_v15.png
new file mode 100644
index 0000000000000000000000000000000000000000..779196b6ba43d7aa93dd3ea64716fa53436675cc
GIT binary patch
literal 5672
zcmbVwXH?V8w{9R15C}yf{6LEI4xtwjFiP)8uL(#~X$n#WDG4ngU3wRS2+~18S|n7d
z(vcRBqDYnUDsVXO`LFZo-nH(!d##z-YwtbJlxOz-FtJ7knoufMDi8<+)z-Ri0s?`7
zE4`BveAU<R%f^C0B(X+%rs|iMmsgha{cn4FdvG`$gTb7ipLcY0n3$OS`SZsaX?b#T
z;^N}6v$G>DEq!=+*!}S>6bk*bJFl;=$HvAcCnvkRHun4XZ&MRP1mf=P+qZXjcR$pY
zobJq~q@>i<)#>VJJ2^RNXlM)#4Z&cr&K6urNr{)27dJQe+1Z(@s_MeRf}x=yKR<s_
zQIVgI``5wNqpiulzCJu2|1!jPb%tPVZDnR=wz9Gk8XCH|xVZ6caPcdC5MMtwHrCVA
zlbaF$#NDZ^AT2yR{K=CiMcJ<c0s<WDZ8SCReQv7~78c&#-kzPE{jogUSXDSVIayv_
zzPY(MH`?jv=Z8chU7Q>;GBTo~qGF?huVj6Fy{)aSva+(EpdcqFCo3i9fw8`lqC#&+
z&8t_h;^N|-K7DFq`9MKIp{63YvNSU_F-lxq{Nm(?|Fb92(a{YJ4IPbTJ1ZkCEiLGm
z0p~}=_wU~)#)e_B*x=`0rFkhAe~*bo;&@++_Y)T~GO}Sp)Bg8~k>2Lo+S=poPE`<y
z(OUcdUDJTMpEHulU=n(8mszM_E+<4<`Z#+3hHq+S3hfnJ|0}}nBY$pQZl9<u@vO64
z8(}zLVJP6aCxMXRA>Ky(#8P!>C1d0KquMkh3*^@QWw2=_s8Tj4&$=5Rq>0y3WYriL
zgPSB`lArz`T{T$M<6q0N9&jx2bT?Ym180B`D+arke8oMZAaA_Wa_<e;rsj=F?M_g|
zc;x8aqMxJl7YFMvQf1nGN-F2Mp6zaoW@QVEKtiX<SzP#Yu&H%+#LC&GOFvm9?94Lf
zrt<M{kVA^|1=F3vK0pY>(mqasoWA^con7OJw{sSka<A+~^+m&ogEr{JMe?feki|I4
zEld$R#PV{`&<>2_Kg*%@?sUldZ4JBZTm0cLphUAH5xviZ`<3FWqZaY@HQq9h_THb^
znW$t6c*$2X;nMWM<oQ25A9Ke_J;q!og*Td%S=X*>tvzL->X|*W5f|S0CHT#3IKJx$
z=|Aox`1ACcf#<J+jNF;+5Nd#Y1SY^9AOBr3I^p88@$*WNuZk>~)IsAUx^Cmi;a?A>
zOYoKww#Fm@rM(cHhvcW`<QQH<D9EMa?usDwYvWs1(Z0ei;wwt+7MJbim8qCajtSX4
zeh#q|M+3JNOBbUEkw1AODv0ek0UI-r%Wh(kw2TdCZotzItt5bNfjkKlgKWDM23$ko
z$5HQYRJ&2m9PKQ8Q3uA8+QK(FxfL<Hh#@V9KEmyQ;Sy8>w389_f+tS~nF-1sM5QeU
z8amW88Cc&5NW2-3(qeaR{)os+MTI~-A4>6Wn`(d+!TI^LPI=zyLY<C%)Fo$uMliZ@
z?eZBixwgaOn}?EXgR?>1seA<5m%ELG<ZJb?YeW)-(sY?*Zh_9=_(thvaaMvXd|@a=
z1?Ece?lBS>IIVD&dp1f+n+AVNoKyQ&Rc*BK5YSu3R<n5H5+T(uf8^<10>CDGiqhiY
zGIk8E!<Y?^=dA)~@|L4ZPxNKFbG+u`F&mv8yjaFMUq7nog9{bI15fLkVw9;*7FX61
z!u{;~{C$LI{dVWDBapZ0>5Nulj@oCaSvTh?Nre1^mb6=X8At1s;H|FqLI}%(mdR!$
zsO5)~Ceh(%DB>93&cs9+leSN7ejvwq=p@4rI=`w8h@+F~?3-KFoVl=!C9Ua9+qU!?
z&=#&ie(N#gNjYyE-jc_54E9zRHRB5fJtV&@Sj`C*s1PoU+6VGe<Dw)ZMfQ_Qe;C-7
z%q>Vrpe1cArCwotINHRQNI99i-6TKSSQQPEqiPbR&!TlTG{IiwH(jmNqHFD2iUp7y
zP#(=`ImF2t2d^yldOk}s+;R({6*KT;_x`i%P$G=W26|7$suW3Lp#zM4+otjpr*smP
zYe-5+grwMbZ^5Ua7Du3?t;fxeQ2_1ew+y-FLGILTLa9@MFsemU`;zhZcbm5fIiNa5
zh^9kjl7!`QHbOfpnatpvPhA7A1?gy1_AZKI_?M~(I2%~r`9}Geae*0m(8TlF_y4|b
zPAzA_gqP+3<iY0tEP0LLv=cqyhMlHbG#4L@yFEqImQWbEr}hmoDj^2K{2t$X`z{82
zC&#%gk1X~-{B#*A<d7UoXxzRqe3M1%^vPS@oJ!Dm<^!1$HR{Q!*uwKx|AoU}VY}n@
zfM20r9mKci{jm0lHMB&T4fZ!u-yX^-x@+HZOQZR-7CASKOKp1U;75Uw<1soeY9hE_
zgVha(y6-O{lJ)_P<*h-NzcF?g4=$Nt-G)z5TcneDo78H`^BZj-0QMUM_oqjoQZb*Y
zb<`gfY6+~N+OzLT`h^!|FEUBX9s%a8GxI}+`lbD_(S<K34-N*VJNt1wO|ft)wN=Nj
zoTU0HtrQ=l0}o(Y3v4f1$*KY9z1gaFMjPGmccL%1#&HthO!V<sczds<wC(I2(oY0O
zAh*jYlz;H`z?Ty)+wy}dQp0`|{4&5nOcM3%dbWN!n*0z5p`nF@m`j6vg?LhQY^m=3
zCvUp^Z|atWi)`lX`hA}C)1fz!XMB$LpZLeZ9ju}I++-2QinGrJdu@Hxx)rQ5{y{N3
z{OhM4SLT@%i>e&8#*^^sz-QDLpBlrW8EI&#0NtiZX2t@3y8=&sF2FONJ|?G+2kg^W
zlsduW|5k=z@I;OT>6<rWqp!(mY?+|BsdA(H9qsp{8NB}9NTACzz^JCO>}5$WbI0e`
zJ-C>3zDfOxT_o3c?Z!$G-hukN>Az*`<Ny~GK0Sf@%-U!f4x{_(NN%lc6wl<guO?<*
z*aQB5H(o-WTM0~Gc1SMSM_0oyA!h|V<`e3%m$YvCodJg`2Z-pRPs?G{PKJ;o{HT2)
zK7fxM(-ew|;tb@%*SyjwPJFEzkAJ;usI<NTm&)sR8*Yh&(P8WNcqFLQoT;m!2l6WM
z_iD1e-@Iyrzk5%Q@i8P)1pEJ7m0?r!`Fkg>2l0+fn1UfFCF5yi78##>LnL_-2jd5X
z(MZ2YqQTS1(XNh#HD<i*({3;NU+iro$0c^09c3)-aH#3?oVLv3X9GAG#TiQ;%e-7K
zjzveu9S%*K;*;oxw__&;88Gg)@g<}N$LbfA>;(B`NBkF&Wu7-(GDh=b_>--IXB^Y3
zmZYuTR7;=8bW#o<WgD~Vfg9POMA^r;k?hl}n<-LO06`a7!+gnPb_joXH4RQRWe@s+
zgY^QIZ~z7S#fWUlOBA9l3!l3PeU%LUkqOg09D_z~tZZk7a2D-H&LLTGJJqQBjS9mb
z^EKw~yc$aFxdEC^gG{J-cpMa~Vq0Lnpp7TWo|v(U!V6ZmE1<bG^)SFkEYU0{TTc}&
zX6xlTl6|A5R3;Ph=y59ZIqGwx!XgR2vU!rc8_q$ZdNP~CXY}vJ8~fug;M_KB@{|VM
z@b8?XN(Dw&=jlPO^?1DF20yPAOMGuA`B`cn<ER%Ti!<D1-rki$vYzgpxAxR-p+)#z
zpAAI17ix$9e>H{CC^jT3Rdy0-8CTIYZ6vF?43|hIr2`8h1V!2J&iyo#eu;%U#39Ct
z4}IDA$u*jL{}6qy$``DYX;pP3KJ?2dh}orMw$_O;8g&cX9f?)WWK@Z0MJElL2^ZY@
zouL@6W1(`cG~Z*~iOmiVTw>?wkZF|KB*mrQWmc=A`3QRCJW6gP5-Gmu;jF*sES3{8
zcE_c$-@IeOZdK?S2UA55&dL+6E%Od-QE4jrw%J(pAC>0QEk4HM?)N71@qvs^%=bK{
z(85l-dyi8i4g45$LR-Guxz;Kl{^F>hf#B;86ao3i%*Sy1{L54Z98D;YU-cCJ!;OwO
zPER=asIN}N(<QBFls*N=9(YokYDBoUceh-Jgm}XUYJhi_1@KzUtAcEVk|^3uiG~kz
zV~zf!Ud+_DzHTalClZM({*oHZI=ogk*E4e9M({1mAmXZZ^y5!8*od6I(rRW$@-c1&
zbb{aI*+FjGk+X;1Yd?|05QZW5)Fazm!&g;Ssc;U{>l#zMSc*wUcz%2EiD`EdoI@?X
zE5Ke*`8E8?K01zi5+bV1QF-iq@5*Q1;f$Zb-N}F3#D&rVM3(AMZ7=@nI`Gn5b6U5N
z!y@rB9GqShHiS1(KAhO|=gpp8V-DLI6UqaNiDhRpC2z|<73Zcmf~{jSpgc2NWgL{k
zwmN`2e26-xee1{~h`g=r=VbVu>||OQL02lBhU@3FSXV_9JmK|q!om=Lv9N>t**dzY
z+F}N;idm6oRXOjf!v{Dh(4yFwRn{Vnomh99_^`7TvY-vsHg;;aiiV#Dc#y$`B6c;k
zko){Y9bS-;s+WeSpwLG_bgL&Q%kg5fSU^FJMOK}(V(%|0A+0SAm>&u%`s=q7b)^Sr
ziTa>b@=G#>gU)4&M7c<Zf~$CTkl%F=66<u0t&iH=X48Qp72A``r>#5tw>aoL<{38v
z)LWfQOePCXWp;nl_$xpncUd|z`kOZ}4$!bLtXl6cXc-ds52)sJjuNx=$7}#zu(B57
zyR?}piGA2UYxgjDWsjx9erqkFOR6}Lb3KaTNa%FVygSp1dJ{_<pC$uhyZ(*j`RVan
zd4{92I6=1H$Dn|_jf1PPO6Z-&0Nld;s5!?NFB=|!18JNI-h)ywFK6$2I;Qp1NRyN#
z;OGhF*Y0KnFNMtgQ2r`D6ocj|Yp#^S#-6$OCTnA){U8omHz9*swrkPGNw*1YGHP$&
zAo;Y0g3g%))Vp+gmn6VOEQ)$e&GdDPc(K7y?BoI~Kimzv7bDFi$e$b-Q8S?8b0<pZ
z{dc@u)2(r(twSGrv++P&KKIXTl-{s>WxV6QJxgc+;V3=S9uU3P(nm*>I>q|%qK4)r
z7Z_*+m>}MB{!nUM=2%O}jEZzWxi@NNT1QKR!sw*!LdhE@wy)9QZx1o}LPjuXd*rd4
zq2&Rpst&UtojT<;1nabhPLmQ)o1t`qe=bh;%)Gt7A9#8r+z<Dy+I9{?KI_^`H;WJv
zMp@Zj=FI(fF%QZyfv6gq=gFK9FCgc@rean$#bZ@gqQMt%MCCAbCJ@Z1Ohh`_Ic-Ve
zbiPsy2W~zJQGF1P2}0930!qjpuMO3x)Vg7L33O%iwcNMLP4G*+Je!JhA?VRuh-Xnl
zY%PgwzWHCjdp4b!xn3^J@dH|r5C5|uX67ovW|>Hi(D5T6g9%i?=REMvz7L%nZ$ahl
z)iWi&S;yFC;-fmq(Ypa3Dhl=P^R=hkj8c+y1FyEp0A{P6B=R0A+AzlJ5HG>@n*04B
zsZYg!`)X8@5j|>9ePMfFe!$e~7yV`4fxnmntg*u{?Ii65#-QG>l_!{~Z$!Tr+V*bv
zNg5PHN~GGvcn<eGofdqDr5c-Z6Bal`HE4Y$$EKa}W{KVM`Me{E4QQwSU};1+syMq$
z3rf8~;7^^Y{&Xh=9$M!Qk$40)X2bOEjz&VIigCc+xGuFE$ppu0omISD@Mz?%0HM~P
zBtKLacN*+@^2LUqONyS{B(MHk)93AjtBKhHL$2Sy1jj}r>5>3q0~=9JnS!QR9drRP
zBYEj*r0b>9s8?%hawGVf9zxQR$wToc6@yVa2)BQ4D6K`v534e&6Blh6Xzpd&#g%-V
zv!eO#f$}2hmhZ9Yr+|YOXU&eA)al2FXq3Eubx-;{sa&k%*OPcjG~!+4kQGzzwp!w`
zU~a9A+44MyRuZfm_U(O*TVY&+eAZ{Jxbo)-^tC!UsdUUdFt2>*3|mfXPxE7mMnH47
z+WFU1@&oU5O)Ld+DrKROBX-T-m;AP}q_w##Hvc-F)DtJ_A7Kkxv1xd6v71#V6bWeW
zi;@td{hQk}DO_oC$i)8zO|i>=irgn%a=t6Mn69(i0Ho1A28;Wc!bE3EV<hL7bfp4G
z7vq>Z${+DJU5~`zM!_^Hy86jZf*QiTxQEwyxHxWh#wef?_W@7kuTJ~lA06~fs+qL$
zt<_}$d3M`XJ%#r|3PyTY{<5Y-uyo<)86^jb5M{(YmjvSk1wGz*hnF_|8}y@PF#yLh
z5WvZX=MMj&z-=gBT6*Izmj;g&HbB{HnG;WbtDybb<6nMpy?;iuy%dM$@8fzDiUAnh
zzh8m^D}-QgNwT>u<XH2;ff8xqi29l_A~4@+BPlFUY(w6L19*_vL?fC~%P5J)p&o|k
zh=OmY4`^Cq9X}JdNOT#7DM0Oy9?#X1Ufsy9q?VV-h&W+dYyJa_7~?o9Yjp0e|If3+
zFIrqwpBIaNzm$>OWPbVM?g!O0*?kh^g2NF3nk8rn+3ULLpVOHpB)L{J_K<OC#ie<2
z8&Ms(pa^f{9AS-#y$iMH=IrgcBK4Z+A8M}{_E2_+VdW&F2{xduTwn>U^PYMQ*j36K
z-uN~Nw5opG`3o|*sgl5;UK<&H;_f)g8sjTA%ehj|sQ&Tb(43c#pfH~2Jhd{xH!Pv`
zy*?A*Q1FpVS!KCrQlTq3!<Z7hpK^t}arC+=!ycX108qfg)JEBRAnp2<AWVGwf`!yx
zGMV#od61~3MGbzYuNk>$!!-vzbTDEr`Nrz=S+1&6CW<G;dYZo8Uq3~ndr)K=3}X!c
zErOuA8Nl5|Whp?Y2jWI7{($IvVbPBkeO^26!`4-qBA00H#@Ev6bT^ovAH*Dw)@!6C
zWdGhw>24A|oZXy~6e6FPHF#ozjW~&U@W;g!tBIDDEMR|BXI3J-7&aKjOAz2gXiB^}
z+IcpNd9diMFR)~dtzS89-u!DyH4IqOh!JMJWh5DcTFv8qLUWg0LB6^%Fyh})Rkl<n
zF+w~dKKcJP>>mFBdQd=2_ug`NOi!keU5j_~t%Wm?O8B-+c&^&y>OlFD<UEUn0@Z!Q
zVSDI6fk0LSycz+N-NIJVV}vM)!ci!y?mlOaLR%5`A%lac+Rd$RCO~cYQ*|Xu&w(3+
z2Zoxus3*|0$0gwB22xSA$|n>3CO{@OLcO?T*+rX<C{~h51@6E)R{1*mc&4zSLh5Vb
zH7w{jU*Q&+SG^-P!IE0L9io1B8`R%vxKFi=sVWQ=&=OTJiEn<FLBM)51t#5gQW=Z$
zLE7Qh!ca7J*>_vv$9T|98JZ<(X}b50d~@Uw@S{>x!zbRkdNpRFk{41TIekBD3#oA_
p8Ogse;)UkT5Bo^pVuTION#ixE0$J_JyZ-z8P+Q&Lel-Fa@n2S+kvaeX

literal 0
HcmV?d00001

diff --git a/doc/user/discussions/img/unresolved_threads_v14_1.png b/doc/user/discussions/img/unresolved_threads_v14_1.png
deleted file mode 100644
index 806dfdc995cf6c749e31d8ccbedaa235eea11ab5..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1540
zcmV+f2K)JmP)<h;3K|Lk000e1NJLTq008{}001Wl0{{R3^G?2p00004XF*Lt006O%
z3;baP00001b5ch_0Itp)=>Px$l2A-kMgRZ*f`WoNIy(6H_-1BiFfcIn_4fMu`rF&v
zzrVjrOH0zy(m_E%gM))cMn;T`jO66xQBhH_u(0jz?Pq6ao12@8ii&x8c~4JIw6wIb
zv9a#%?x&}x*4EbY^76sK!H$lOl$4ZQTwKr3&!M5AuCA`2prB)8W98-L_V)IrrKQu;
z)0UQ&jg5`Y&d%}i@%j1r@bK_pU|_quyYut&aBy%~SXjfu!{+AZcXxN$+1ZAMhJ1W{
ztgNie%*<3&RLaWAT3TA%+}!;9{Kdt^@9*zxYinw1YHx3Eo}Qk^$H(8_;Hs*s?Ck7l
zXlUZ%;*gM#WMpLO>gxCR_vz{BfPjGO>+6JsgwW8?;Nale+S=ja;gOM%m6er=iHWGF
zsF#<Q-QC@?va-CqyuH1>(b3U?fq~fA*tfU0e}8|OnVIzT^yla2larHQUtgS@oT8$l
za&mIGxVXv5$#isdtE;Pac6P?b#-E>`si~>0t*wiTi?g${%gf8?=;*bzwYj;u)z#I&
zz`%2Jb8T&H#Kgo)+;JuV00a<8L_t(&-tF4wSKCMs0B~!q(HOZQOx$ud#>5Sb4Y+{|
z#!0B5gbwMKa+h|!*IfO-Gm<5Y9T_=+dyjY4d|635tEZo|TCFTwEN1j~SZA->E@2G(
zXE8DnZsBbnD_+7FIQyENqx#0+$O(V;Dq?@>EtbIvZRxtT|MWLTv?Uw%pT1RX>P@|=
zH}$6eQt8K>yb``Kz2nzvJ90i$pPG9ABaMZ0H-D3BE#Fx;+DYJ<zTS62+t4|FAKw<v
zbLj_{VBr1rj*oOVdxx9lPah)=F{7PGSM>Efua*3-!aK*W)po3Xkp62Hy?DJ90vDv`
z3tQdvoKxto7o1L^2Yn^zQT6j;7%`Z@PsKM4wv?o@R!?AZ-_aN+&r3gBx`mj0;gTYP
zthbAFeRupNoG-BD619)l*@Htxe=Gv?lRhXpoVyqsUUj9lENfh1Ge?Nwipy0q)|cIU
zp_|^#%Rqg-Kx0EYzuSF(Rn^~wX~c0C+QCtK$<kD^)xTavrJ*#$a0qGxjRuB`{-5J)
zU)JxkAL(Sl^ewg$n1c|;;6Y#;6n!=a-Y3+g81zCMuR;BxUCVk7>A(!z#VW+V6Twh#
zDf673-mTvAg1(;c9M{h8UH=E-p+qGOVgJHi>d$rbiYYwEOqIYUlRa|J_eK#5bNHEG
zKx=Uli$26@$LXFg=SIIG{T`lV9n)xOhmZ$qh!Z{NIsWk(dQM+2;{~Ce-@BfAcnqi{
z_$qK52k>eQ#K^)FuDaxL5*B3r5hSzJR8%sg6a=a2`!+p2OT069O>U!RAugnyQOL~0
zF>Pc9dbhjG`z+miKBwRF6+9Jfd}IBhsvnfEZ?jCp=;&xQ62|g93I4{kNQrw;lJ!&K
zdX5R`kTd4S^YEOis-2@=g!FP7HH$hzB2t0O8YJb726~DoTix|smr<{IS`_|d&-!_=
z)3xf*=j0BNe~pVYBE}(^g9F48%qnC4qs?lCT6|7zJs$M`LTbOJk9Fv^Ea?Se1~RYV
zDUF~;J>TM<)VXsFpLosFqVU~4>pk#o=qYsQcO3uN?a>C#x$Jv~EOp>mK3WsEn@>C&
zz;D!*;ohAQb{ikTP^bdx^WMJ{YS(L7n^Ndm9Wt13{g6o*>f4|#y%0Y&+u_bP*IU${
z_v;MAeO3Qh)#IO0fW%$g+6EBU5JR-O;vxM*sw=wWUx@;KfKT#hrQu<@x~WbD8L0XM
zeko!rYeEFL0%Q35Fu-l;i!=3{jGNTa7cO$9dlJ?iy*Y0-s}y<l*TAgsPKGC?6vE=E
zU3JacNU8hDcb(_^nrcPw*3t9#H~!CWIh?B2?fEOda(}$xa`(;mdsA=fO}(i<Uv+<f
q$?ET~nEm|)yTAXvV1^le7jFUW&-?_gi&Z=T0000<MNUMnLSTZQ+D1+Q

diff --git a/doc/user/discussions/img/unresolved_threads_v15.png b/doc/user/discussions/img/unresolved_threads_v15.png
new file mode 100644
index 0000000000000000000000000000000000000000..113af20effc36e0c14ee68544d1b4871a4ef8343
GIT binary patch
literal 2793
zcmV<F3KsQ=P)<h;3K|Lk000e1NJLTq00K$?003MF0{{R3rtNA30003FP)t-s|NsB}
z@!c>mFu%XQW@ct(U|2IVGs3#6va+&NQcpKFHT&<|xv`_bxTyK<+U()Z;@HOC)We*W
zi}UE!(#g3^OGxnL((mNa&BU})P)tWgL&UtTqMML`eRbB%ymWAB^z`($uAyXNUia+S
z=G@A~#l^C!pX}`H+tI*0J34G?WI8!G$G@<jpPzVmcw1Og`0Uw}j)aGTdT(!U{`c$I
z+1Z(rh<9;lUtL%~K0U3bnx>zWYiD5f>DIrsrlp>fetL3ta%=tc<LKVZ$jHd4qLzz>
zeR_3nLP0;u!m^HufJ8$<{`~gv@bKK++`zc0m6eroZDyaCjf8)9;^N}&<Is$ZjM352
zyu7^F*w}b*w#5Jd36@DjK~#9!?AEaj10fJZ(K$^c6afvK2!Yi7cjEkf_F336Ape(d
zHu_ot0000000000004l$Q{uj1E_*C`qNeO0%c<%eal?$FP9+bKbd4g-YS)RI-Gchq
z>JyrMqe%;kXHCjMy=?Ug`Lau8!@P<PsvR_9N(y!*O6!V`QED19B{e5LrFHE($PS~X
z6rA<ahM9dfhHqaprG+u2JNxz8lr|8CVR+tWXn=%63P}@b3q>ji3y3l!;Hf%}Q_&CD
z)^^(e|3~_6HU^qjj7_MFv-g)|H5+$kFIQA4N~-lrQBo;Ns`W}yQYlKR^-57vDN3sK
z>T%oI>i1iUk}3g8nN%vHD5;)?QtPIlT4>m7DN4_?Ra0sWQ=x_}Md?|#YDzb$Kk6w;
z&$3lh;zQ|naeT|i($*>{6`T8|{5k!nu5{g`=pE|1OMj`X>!%d6OMR2pqE%DkQz-NW
zuD_KurNSA!KEI;>(p%sqMXv<BroZ$G*ru3i$kJN$FO=TJrNo$iCQ4~AhF`~`)fbnN
zG3gu;_q3GUqa&9R>oJs?sh*_NOWnkyG)!^dZ<C{B2uZt^d0_(;gH~L8N(Er!$tk5@
zaA``a$dsgko}kp@n|PGoWrhM&D=|tr09|iuY~YYq*E6ETk|J2Djz%tpaz~>o{n2A6
zZOQXQD9FU4#D5|)eEE?WrA?qjUgv;*O!Hnj4S)9>$KXrZIp%wJW{SbxxID`bh%?M|
zzFnZ8@^to|=9%4`RbHfII6Pa{aGZjiW98f;1sUypw-};iI7PsAobnx|#&mj2QP$(;
z7uVysxppC-6s$M0q$rj~@`>=wQ9Md)Dfn+bCME6%za}wC6`(!8O;b=2sFBwjU?zWs
zoiVr%Cq!~=+5p5B)UUm7lt}iv0#3W~(bc^nKA+DinSf2Q8X#U+JcDTbl4Q9{Z`l5g
zQWJiX()%np+j?j{^$9rrtl>kdfz!SiJSDW=Xp$mX8ik+Wnei#Hr9e`AO8q2HB^@wG
z2H@%*N_lUq>?~w;lH&^G*5%;0Pofh1HU`Ai;a4dKlxPDmNmS6F@nek*$T~$5bs^JE
z@251DM4`8rucrpTtV5i!1KC%m6k2aoN$K>1mR$Knc%~bd5?hjz;#1-`4c{esDp_+%
zwWXARoeL{x1D%0CzTB%f8)O0aRL}2e5}5;_WSSQf;J`<*ebC*#=IMig(#N}f&I6}J
z#x_gapMGSlwm3UX9msx}?%Tj3CCBXo*RJadO5A4CYEGB{EnANZ;A&PqnD{?(PXIm1
zoq4!I>y0WYxOw=|@Gv$d7Qm8{pwt&1xDunZ9UMh3#nvpRv{T^gpaWF>ahW)y1H2*b
z1kenk17Mf9sxIDF(EZ`J4&MZn9Ka?~&9i*S3>@+DtlaNSV8`HV!^Zs|yHPX5LN&lx
zww_PWn#7sFn8<_HC9W<hh1MHU(qk<JgZPx#5=)9tNghhcQA+<}-t3yw1fnoJ=e@uH
z)}Ue|)X*9~s>Rl7XB?CIk&L4;$wix_>Hq&Jl|5u3J1vZb$@tu4aAi4WA9oLD5#e{S
z>;o7ktHevv2x!KS2f&O3mq1UnS4i@PrQk7irAjmdEMDL4h)4%|d|B?yfWZr$m8249
z+}D7Y6py3^jl_I-E1Pwa@k%ntkuKgLsq~X4rF>N4fxxt~esADBZB{a5!qO1O=OnlV
zma^r7SF}x;LN?Jr`M_JL(t@X-AHYZmVi2=MpJ)|@;{01Bmjn}_m=KTTs|!f;0^YGo
zGF~S0l9j$3W?$es8C5z8B>MI3=Z8F1GOxgB-LzcEk@HL=UX%$sFa!{JPiZRB=lkMU
zUcjUZL!c*BDjBG8bDO9Qz>s}B1((=J)zj)q-+^LMJY*Ke`qn^zn48d&A5kYY-i(QK
zdXk<`+TGb#rPp}$&7AZBXrER^;4x7p{qHKBLBf;C*D;Tq(csoH$uX`=mFN+$sHBNS
z)k7SQ8d14)vbRcVJSVXi#M<doh)_w1H{<Pndg&miVnF8rRU$Imb&Ch>;%_QFB&o!P
zY>G^`XcO@~;9y5Zv=*XSsT`@~1<eJ%W*dO)qF4=H9`7|PCB-uYwCl>nqV5B{V$Nkz
zRwpIitVPH4f@WSN%1$Pg_zCgcRbtE<(2l7j)0J_GN*m5iRC@Qo`HNi10IHEn<f2Ab
z(B>p_rTE3C#5nt^q{dSPz$v`Um27#-p)2ub-U><IX31^iq?1V{-W1MLrCZ<c$`Ntn
zW@*odPKrteDP7C5szfKpZ+X;3n*9!NObWOGY7|qc0$5r&^*J&ZZd;bf&^6Y&2dFA-
zlT}jVdBf8yPksFMv8=P}q{f>&>6^d*yPbPrDtUmvqOd&Er5HMJ!?!_+D)A7Egncuy
zT-EsfR2BDBrXLR7$^a^Hl~%wI7(C}=ec_JHQ^O2!N<klYib^JcRia92JY`@g!kGdH
z<y_E?HH1n^yt$M9NXkAceU3e3a$qXa6fl-vZ|ws$lVUsqT4m6@LW)XU^gDYfEM2aH
zHvnyPQ*LhAAzK5c56#m)aArm-@ukr>>3P)qr^V(acy(I&fIDh#wop`}JHVYZRh5$B
z=>x;>gNlnCVO<RO7wZ{VB{kmH=l>pk`<NkD`gnA7^n3TT((cd4{8X}P2)R3^IMwHd
z_h~B80*LK~Rds|6MUMr9I4z>MN=-!f{4IIXDFxVI{IQ}^1p%r`N%3^SI66Qiv}Hzo
ziW2YZ^ZF0u#(v54CC9Y8bq&F#`hPq=GXS`QB~YN3xyVu;GYbbhv`6m3teguqCuVqp
z&Kt8&w1bNPf|e$%Vopvq?5Hh>c_&Q%)PCSKP-3ow29ZtQlVA-j65|=T;`5zM0Sc&!
zOZB^aiV|-o4pk-jGl9HSQYqQ%WkC^%Dck&VI#0IUrii)cwJ74mt6L>Xp=8y)IYq4O
zun(2D$MZeoncKY=UA203ZdKyVlS5MJ4?A~k0ssudK(O`x6Q?y9Kp1g1K&ppS@)|GA
z|G^nARY^`N_bYaAb%I0hky5qf`3WgiOCH79uSltmQ(Z`jTcm`PxJ61xiCd)f+Ph;L
z24Nr!qn5mghkyl;OQ2={O`^C+ffA*IJMmuS0ZyOX{Wv9J$#hBvPa{h;cxr|@vQ#t7
z#^EDNH4ZOJfsH7gv((!ir_}n0lHXEJOZnocb#GUnQrl}i-Va?$>C>chm+ml{^xrxu
vQ#8x8mLImc*NgReD*ylh00000z=OO1$q!qQFMXj+00000NkvXXu0mjf{F-iK

literal 0
HcmV?d00001

diff --git a/doc/user/discussions/index.md b/doc/user/discussions/index.md
index c3da0acd7f8..97c3d5f1058 100644
--- a/doc/user/discussions/index.md
+++ b/doc/user/discussions/index.md
@@ -303,7 +303,7 @@ To resolve a thread:
 
 At the top of the page, the number of unresolved threads is updated:
 
-![Count of unresolved threads](img/unresolved_threads_v14_1.png)
+![Count of unresolved threads](img/unresolved_threads_v15.png)
 
 ### Move all unresolved threads in a merge request to an issue
 
@@ -311,7 +311,7 @@ If you have multiple unresolved threads in a merge request, you can
 create an issue to resolve them separately. In the merge request, at the top of the page,
 select **Create issue to resolve all threads** (**{issue-new}**):
 
-![Open new issue for all unresolved threads](img/create-new-issue_v14_3.png)
+![Open new issue for all unresolved threads](img/create-new-issue_v15.png)
 
 All threads are marked as resolved, and a link is added from the merge request to
 the newly created issue.
@@ -330,7 +330,8 @@ the newly created issue.
 ### Prevent merge unless all threads are resolved
 
 You can prevent merge requests from being merged until all threads are
-resolved.
+resolved. When this setting is enabled, the **Unresolved threads** counter in a merge request
+is shown in orange when at least one thread remains unresolved.
 
 1. On the top bar, select **Menu > Projects** and find your project.
 1. On the left sidebar, select **Settings > General**.
diff --git a/doc/user/project/merge_requests/changes.md b/doc/user/project/merge_requests/changes.md
index 8796ea0635b..5016a33ed28 100644
--- a/doc/user/project/merge_requests/changes.md
+++ b/doc/user/project/merge_requests/changes.md
@@ -14,7 +14,7 @@ changes.
 By default, the diff view compares the versions of files in the merge request source branch
 to the files in the target branch, and shows only the parts of a file that have changed.
 
-![Example screenshot of a source code diff](img/mr-diff-example_v14_8.png)
+![Example screenshot of a source code diff](img/mr-diff-example_v15.png)
 
 ## Show all changes in a merge request
 
diff --git a/doc/user/project/merge_requests/img/mr-diff-example_v14_8.png b/doc/user/project/merge_requests/img/mr-diff-example_v14_8.png
deleted file mode 100644
index 1984defde9a67d5bbf4796f5271953ce05146d29..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17683
zcmZsiWn3Fg7wC}|DU?D5m*Osk;7)OO_hLbd7k4OL91`5!-Q9x)*J8n;5Zrosp7(w4
z?|!)XklC3%b7uDJng48Z&W0;1O1*tU_yz$1;jN6cxGDkyG6Vqu5d#hRrDaw!QR=05
zWhts4ihxiPi}7gk`lXKOtSTjjP&q+-@FI<%EUzx{aB#%N#y0e4W(`MtWo6}VVRh{R
zc7K0={PgGV-@lcWmFMT@9De@XR$V<kJvTQue7t=42>y5X568#HW@cvR*SCM4p6~AN
zbaizvFE1aTp7;0ncXoD8f99N=o*a85W@l%stE+ErZf+1OJirdOSoB0iMeFM74ll0H
z&dy?DVt&(TJl{QpgoYe@r)p_wHZ?UJ-k<KNd+<8;MMOljwY3TQ4Bw8;PfkuAT1Pzm
zhTRNIJ)K|5$;oYOY#bdO85<c54-en3Y?YLiN=i!pNi2PSeB8e|a(8p%<L4vBjewW5
zDJdyEU*8@&#e!1PZl{;`&4Q=b&#t>6pFhW11A%k<`+6xe_6`n7Nl9CrCYyiG=jP^i
zzS>+h3}jU1URHGvEe-_+1}-iwh19Ig%*>>9Zf(ohFYlZWZ*Jef_Tk&GmyeUP)1HB!
zho|R7UgP-qxKLW!{=#C-^1{;S_>cDX?aPDA%*@B*KbBc@JUpQO{{Di3g7M|a<MlPA
zUz7R$JDdCP{>77xvt90ph|&?**~ZREK>F~}R8=bY^8VgFZ$Y!PxOu4E&)+Y58X_*9
zUEj8Nw}1Hc=Qw|S+&Yyi5oYL4d-n)rdue|)w72`{WVd<x@I0gDs%^wTugtcw!Pm=+
zGbChJ(b@c4)y(F6WJHg9@lwb5e8<K{S65d)2;5O#*-%(4Czn5Qw49a;-WwW~$<G_!
z9xExFo{mqhXs(WG+?X@>^zrkV=%|-$3W^F2v9YQDH9VA?GI%sGwHu$iEnu-Uy2i+u
zXjoY}+P;ty6AK6mh)s=$`h<^8cKBATbVK@<giL1o2VnEtN#GH0?@o_^*0GMx)uZ1|
z&JAI);azq0fga6gF@?XUW@>6`c0*G4D;iwv?W?-$)YOU?+{7m;iiet7vRg{#E;eT!
z{Ig2OVL25m8cwa{lbmvft+Ra>9Sv*DSbQP6<vF=)Yirp(UAJc^dOeAJ7FI5WQOe*S
zTe2Ldxk-nit}rXL2euiuKjQh*$xR3dpAlrlMb&>SAE%4j5Xs;U?FD3OqpJ_(=jas!
zXZh+KgMPiUo04b@7M~K$P7ry^H*#D5zPB2iEMIW9J@aARdsqT5E2y*EJD??85Z?)I
z7FA1N>4tmVVei`3Mm^+adKSZVMcW8gy(;t6xGK9T-P&mrmXVQp^4sU<eWj`zZ$VE_
zFH@J8n3%64D=Rz0M155;l|CK$(pqw&t}?kglMa2CmY6u(csSL!RHW0(MBOmwnG*)U
z+qIIGv1^DRhtTultE%c%{Hx%lKQ%QlIX*rfASdIaw-tLQ@{h_ejZUMiwH!}j)|Ye3
zgdN34tY`OcCsI70LSBZo)~h}4d~Vqoo_~0mPKjNP$MuCXpetPlRFK~&Q8)S5`QI7-
zZ-UfU5a>ABLtv>;lEHKNlQ)H6x52Y;dZ+K$h%d+L!P}zxc<5AC7>sg7=>F@}>UXk(
z%^3sY@VcRn1e+#jcVAd*&vx7oudIRq9;__rspA%TZm!;<**mYl^2h||+s>zz_5Lom
z`tCPp*OZmj*0+CN6Eei)VRn5=&G^7+EHCJIX_@0uPIsLEeS9j5jC@D7o{d2!q_3|p
zK<9~we>1lPmh@6a@IpBmy7NV2Yad(xVzr6A=Fo)MRHhvuu|?i`nnO@GR0K8Xx>0IW
zW`K@Z2ydO*C%#p@T@9#fd-@rxsm<yAqn=noCG_i~+r7fnDo?no+YH(QveA>W(!&i(
z^}!P$HcN=>FI(1M&#NQG&<z-zjPzn~8o9fC0Cx%PdQSE^?pv$;8nDW-t&+_6raD(B
z9ah{y+#Rs-K&wY*A65L5%+Z}&>caCh05BwZgl<*Xef)PxRmkrixXl~tAhgC~oyg9a
zo@WSonD+HTJN02c4Z8OL(QfYz*U!bm@8;$pVP$1X@YuMmP?}}8m^p}M-dZCsV`@gc
zMxH+FTVzdJ&Jd?Svm2(erv8Zq@wP;hV>2p1%C-|y*<h5Y2HnR<rl}(sT{SNNf;`As
z7hkg?)|bIroKiO?CR!wE(aPuo1z<wcf%9pdwL|=cba>wr2dn!cEH$jtjzbTOXR0lS
zt<qd^6X}%k_12Cf0wuIu+_wN;*WM1vcK(egSDABC$$J~$ry2)+YTJX(4jYTPv=`+D
z4HPc1p8`E}YfFI)bb5KCb^**Hsbi^Rj71##ry0J#7h@~X3DKYSyIWRf3&Br+q!?3s
zs!OHd)`7Vd%{14StLf!SEd{(8gWd8QP4T<j3n?iJ4)YOzAJ2@|9m<U&jFggk6H)iO
zE)V*G-`;6KALW~j@!)r{T3UuyF;vU^2!zHFE$=dIVYlxVVF<YGZ{`?8GBNh&ySIiA
zDj1@s)uvwc##BYH9|bHSOV?0nr}lty6h089nu*!_%Ym6H56^K#K4iya<zXRU8Qt1h
z^KPtvEKknv`}QF@OauF8sHodl>bG8@SoBaV*^e7raZ;j$2zbwm6i}|EQ82aVB9li)
z)n_sUgI9RLuT5o=L$pw)-g%8o2%=sG)#M`O1W1Rx#_Cj8ka$8%=c>+gzu)ZWR7!JG
zo;iP8$bG*VtI4)(qLIs+nr+4Ckn@$ldmWU41}Xb`pFBO@@s{1)!}<0e>Kb2p)Ae{Q
z4RX#EIY=7NA!s_5fDp3k6j-z6MSpXHu|JLH8YDnkbGd!oK%ZEJzn6t?b*WYQxN^pZ
zT5vI{e-}&@hX-y4{>J+0TNuU&Y9KfNSg2poi-{N31AY7L&6`PX++$2FCBxq}%VSqR
z$89M?ymZI%sH#2QP(JcmMhC`>L9q^*<1pnVP@BgA8AL*mg4I{qTPsH<flvo|ZPH*+
zsCDRqF|DNYKVHPojY|DS9e&q%Q!SEOYm2nY2|{*wlm~nI#Te~tIU*_`>rsy(+oG$s
zFy!|c;v&XOBfdQ-BjgilL^J*Q+D-en<+6$}Qqea6?NfJ6)ptbzDm4#f(kec9c_&O*
zx5p|>BOLZUkfI_OP_?w=2HMb{S=zaJ+xh@E-x4o;evb7Minq}0Z5RYg$7z4YzZSDO
zJ2lN;ADZhKpeSm<V>ty$O|21h`vCl|G8*L$p6_%g{vK{WLg)Tjg=JR2d3zJ$o=n{+
zbA)89P{VYaNP^EiPz;AJ>8ECF^DauR5eBC9!=Lw+`%Zk`PoaX=ijKe~QZmMH1ZI~n
z-8(bLQSw3A>!cbgyi)3ac0WPr-*5sq3=xfl#%3T|u}S;GBfPQG>40N`3#%80;-Tg@
z$o(7(nP>Ahj|ZTx-vZRmR$N?Q`mWjHMFy{#&%EYp&Y;yP4=y>sa<S#-K3W|=^r?Ik
z4N!8PjqN_bhsX#MpY_YVn22OqvnI<sfvn6KZe8D3D(=i98mEZ_S~#HsuD5=CU~dOD
z>qJ5ryZ{i|)Y)mg>2j06gd*EX^B9_2oc#~7{UixXbC?wvS1o7tID5{kQ3>|b651DU
z#!-}mrJSK{SchJWrC3Per|cxc6rd$1|E0nt%LG!Vir=S(B(dOa4JOVPTI0Lh;OmFS
zchgjQ0}|D~pr6dl=+EiB;%=weg)@R8#d~I(iV7Xcw`QDiM(XAyoTFg*CX?9H#L2&y
zBRa%6LTA2Q%}dV^|Ja7gcQ^zJ&l{G_D%BF_ES>EJZV_f;yOEU62Mq@5DqDZle?rQF
z6_W)(zkm{ae^h;dn8=`VBgulD!H+M9!9S^Hm?l=7vSSp25FS^ogwJ@F(&-2Y7BwZn
zvRMB%KA-0SHOp8Sr@g~p59#1ze&6AHV`Dks*c$DDl_XN>1vB`*t^{9L2ewsX)%oE_
zY8g*ozdqf-h_%ok_cCm+!HoLJsZT;8U^0iFnc*IKCB*-pO>QodcoHZXY0NvKS}16q
zc8^YGstd~dK&A42Q9RwcxmNWf%6jkTV)s|sbtDBJ^6nD<6nkB37ucH-Q%Uv&q9pRx
zCE2FKnm6@8eeYje6K|(&n-?P`=x1gW%e*Wgr$k<_4l)((V|q_y`3YTos}F#O4*59b
zx0q9i?ex{`Oj#A;z|(;j%)~&`|4`=hG9BFVdVA%OJzKrbBhjP=^`Y|>!!;OrN(3#?
z#_Jc3#etgXm)}#@bM;QT457OVR}GscK7F0<$e-U{J)}&H^UbBFdIBu74_obRLUktJ
zvsd)Ce65*rojj4R*m-j5_S;lkS^LrOoN^~{*Q7>hMJ)_Pp+lZ%3Ob+-ouWV5Vo2Lm
ziDQxfKGx(IhOgLj80FZb?12#+z^GL3gd|ynd#pkCh)o@!5Go}N2*mgi-17T#@z9tu
z$uzZUq6OP)fV-gA&#!mtLGSG&+m1#2LsevBp~T$Ya?aYh2!IYSS8g}TSV=(b=IXIm
zkOP-e$NDzi<*2smrJkV7%<;{8rCA704oP?9YtUN%8f!iQYO!9_Jq`~^5$~pyw6k_#
zm`N+vk?mz4S%vYx%Y{vp2lh~=`TcJId(6msYX%*p;xaiS-KfjU-TCfxjURKes!Djx
zP^|3HsQAW69FEw$4lpTPqlv#D5MX=P%Cu%T@jdR?l#t)7p!S~ZdIH92PZiyVh9u!$
zOt*L%myt@77L<n{N-)*@hx$A?b$|d98S;v^zlcO<|M#zLLObGo+<mH46P#e)OLJDn
zVcyTlCeJ~g<Gt(N%MabA_-^(Onlgv1O>1sK$H2XtS2M}2vJ5RpB{voEwqpfbkvh=i
z$7`sxl||Xn@)c_mq>0|#Yc<iiX{df|s>-HLz9?$zT)=$URaRyJsLP;bum==#6zSb4
z6gd5*D%L1Vw9qwuV{W7lpT0<C|1q@+7HqGy6Dq3IN&dzy^RdO2#|r-JdIHb5_z`*8
z**LwbiBvU%U-xWE1tsPEJ_%dT<hAoq(_=V0-X8-fEG`S0I-gk^R@qFdAL%@iD)7)}
zt><{`!rn02b<#RWp55pz<u47*d;qG^SFPqSA3c%qo!r{*^NmK5HhS#vB{PD(ygH{d
zN22t|yhwK4yB_UtB1-wycTw{lR7W*3%>$M%qu5XKh6w8KK+9eH60z<R<HPb`v5U38
z&qCL{ZFMX18>h^gi|s`u#HTh3>hFGSZy7W;);H8~2rE6AdOYN~IdT#C-JKLs#s+X+
zZFMf~*@{+14&Q!uH=xfX(J7vnwa0}r`P8h|XezeNIuAh%?)`%JWSw;$O5Mlf_|Y_Y
zTfVvPd$BR5jHAXjRnt8*YkK>gC3ku4{?QzX%tIw@Dq0c_tC1#yi)wUrJwn?E4H^s$
zv|9EK<G#LYR3&p2H6m`|1n%c8s2E)8RBe~~KDvI~@bQtKzCb4Ab8@!(!?T@9T2gmX
zQkMq#2#1Ai{DmKlrLcmF8t<Bmq-N`I84Dnx-fqT5kYB*njl>QwaOgcR;RP8B5UeD0
z3%W*s{L@$C-ZRFJYm_{uh-&GZYi01DuDE!X{<NJ+@_>18Lm4aFF)u6R)%NbmO~db|
zdA>`5k=D6$;he>G98%L_19gu*-1rNf%hx$SDzOtf9hsQMZ+6=uh%X!X<uD$@=!Z24
z)C!p7fo1e{)Q)v5dMW4Ud6ikVhjdAez$2fU?s$KNbaZ^F*)n!$Zi@*ATAIq+k^-Mr
z>MuU-2~HmUaL+5U`y}uCqv(;h9cSXGh$VA-58N}Lypg)n*?8{wxH{nRD83Wsp-6=A
zo%FYRECK@9gae_P;H5-F7z*5odDmS~L*Unf;y;G;TuO|Pg7P?^g&?GA{C|c1BkTY2
zH_9R=LNgs0uL=R7FioQ00^t`B8R10^f$QJmzdHXX{!+fk|F_#q(QSc%V2kpf;yLd(
ze~@0Zre0@o1ysF2HDe;2nx<Va7^kF{BXdlCNWit>dP=fPg?Mv^BaOM^Rt#4wwGz0)
ze2KCsu*UAZzMwP7vlqzMu$x)Pl5}yB5Nn^6L$9M8g@b$aM=cgfbZUY3{p@2UOYHae
z79s<t_Y{Q}X*t&(?dDFXYlvJ*UpP)a|B;vsTaCzSv>j`=0*4`=hQFwVF75ap0d02^
zY#Y@kU7Ck<SAk<&1(5QJyszCb;Gl5~2mZcU?HW0lWJQ+p&Ab8mBbT$xXw08f7WHv}
zQ_lLy3KK^4xQWT{H;j~w6s2df;I`y!Ee@Pyg{8Xh$QpHVXrksaYqJ-EyfMlR`IdE3
z$nqNM?!m)!<kv`i@s3pN4>5nrrp8NnY$RNQm9=H6KD}MC=Fg)<l|Xtg1OGO!Fc<E{
zRrE!!HQc(YoIsfw+9W<B!W{rn>&=Gny0=ptUa+7~8xu@^B_|}YpGjen;P{04?X<t7
z;N9Y}^q1q{7J=vw@uPKtJd`Hh_Cs8Dw3_>G7)Cu#-!Rzd+0*?{q<7_(4;c~596&r<
zTFo8S`2=BFXz;f9nVmo;(@nyAQpJ+pBO#TBcLB&xPN_iCS*G@4{>oKNQONNMfQe7C
zUToVaX5lQ1X%%a^RHM}9J&j($!iR2~DF(g@E`(qa$ld<}R-lxKkaR#lM~ho?G+~+n
z>g-2Og$FH4nb=`yPW>ZkN)uow{OmQB-7bLyiZpii8As=28g_X%ZP`7J3KMW-?pvLD
z$}(j&T`7(~JrV-E4#_y2`G--UGTpfRT33LCJ%Q$`9&_D(znEsy!WZK@Hf`|oHd@93
z0PSafvn~R-Xu{$UmIIOa;=twcQHD8nSm$@WhuMLzru8-zy~OGlF1-OW-an`?h*>nL
zJ23k*cy52{uo$1!DFaR=!_yI3`&<o?nEr_>L(%8eZRb8Ndy@?b#o@(`CLu415|GpR
zRZO?~^9QA~?ZUQF89}4;2po`raUjvEvUH3$hA7q`r(7EkBfUqn%~S-ZVFo*Hz}!r}
zk@g3eNNC0#v<mE7Y}+OG@Yi6(GJw^>*tJ)1W-KCN>`Lh9O|^M<2V=HxNj~|f3EMhr
z0OBMB=CczG6ry6AbP85V=rnt*G}Dv0js)Jv*@WfFiXt`qDI&yk_L;KK38I<6O`&zA
z$5Gn(gJ2AwU9!z*7YF%(&EJ<d>a7;l^KMFfPrS1Pm^mvFG^`pdrK=P&IB=zKl>vCq
zR#xd|_S>c1AffUTX)J?F<)G{)*EIlLzJ(N+?0T=4{r60X7ndddz<%YgZOjG1)07X!
zeNFAT(=NPjexGc+Ve&DGg(LE^&2|BbNZ_JCt{dd_71{FUwOabmDO`0TF0&+zYq{&B
z@OnDjpSTJtsCK7+R>wRxU_UJ@QrnUsZ%@5Q${gzSnK76cY5TrTCc)K78`*^>EckSG
zrrEX}i%2rOx5u~L%1CBJRF;U(?HTjG1Sv|LV9ybP`qt<o1VF_PhdbYF3qiBLEA5vu
zQ<nE>sy$@IIQBaBEdbtkm(q@BGE26qZs1Xk&nxj`U(N9y&?n&J;N1%y>`OZq((x&;
zG&d{9X_D$Ri*-dXY+G_+>q5Wuc~M@EQ*_<bi5X-TyUOGgoIA>5)vav)28=xSrp#uz
zfQ3(LaBNwBI*EI&dAHh;tLz#YH`}U9)bWZ-DRN?Ssvhda_t+?OZC~cGBN`d%VTu#<
zem9`Pp6SyOW_u3VUna||`RRnlyqHJs>OLZR4wvOGn~%4slB0FgfNl}m00?wsoY(x7
zXgAc|m#MEg8-~1yc`x4bVVi()5t9XZ*wBRIg}47<^Zy^w{}TPbgvNK^Krn9g2wU{N
zIp(xR@PGIEpU!<2{{a5?qn$m==tkwDfPlU-7^6*#c1a*-5Va+g%r9N}cVtCH#lvlR
z&ycM%T(m=R@N`~F^RUberr6>8*9=TMe~X<m_2a5gb7c+|%c_#)mtTQ(dMoc05KHQ<
z&gCH7OtIF!Y<A3lZ|ZLD7!Ubi)9w(r>(}MYuf`!X2Yb8yVHsr5u2S};vGAzw(t6gO
zWtg2P1md?Wm=7Tuyjivhnr?K=;<_T*NBKRoQeM~K2|U*IN#<IjdKvmh6+_qE(c~pN
z{ED?<xs|5HNH2Y%z5taoVnFVu-e>tq9*X73btaH2rey7|zPZ=1%<Oqr^xRbScQ=R9
zUryNJw58=fgxrW`NuXxXE1l`@<Kc>5{Xrym6`j~ZN<)EO)2Z)8()Cj2wUx>9bXG(3
z)k*{P$@)gaRVL&e*J=4Gw32uowD3H+zH|j>D0fUBu>$pc0%_`Iw}&$;7vMvus_9v+
zlO(a)URMCb=6>0s#j9fh-sT|ME6()ilT)BCeW7B|tozXZCwFrYqlGOjzsaeF6^+~X
zbys&<+SR;UgGi013;gjzTdU@tjt{PZa8_Cle6O$NjnmsJ7L8nwr+JRP2WHAujO+wa
zX9JIlN*)k~cp`({Sm5S~vzXPw^2LUMn+P$tk?8QQwb(*wndS8E5OX3-M>V>a9is6-
z^7mBYY{$`=-}4Y8m2|n3*LC`MM{JKWC6nFK_*nLjI*G(6m}RI|nRk1eb#)nFW824S
zR@cWBsl^^k8C3Oap;)Z&jzUa<xmcs{j>X}HmnUm}Ylt9G+5lMH!#mf3X??a_GY_!C
z+4IOy8-^eJNq4rN40R%`Z_h>@q+?h3Sy+PQo;|mXk^*w}!;bU~biQyBBb2p_?Gwtq
z<zyh|WzquYKFcvH7XYyD+8P>q;q~?&*|G;KlFneu!gSU1I!=K5G3-o}eD+KKAcRsb
zkJ(ZKq-TX#X#zLkmK>uW$=k!u^FZT_ZryKg+1;91i_vg=e2esy0PIwr$UoZ#^JP?O
zEaMj5P5pdtSw(xcA*)oi@!NShss3y=Q3dSa<T;WSgXoep&Xp5Tw$Dytq=l8e00@OR
z8gYy1pkxGRUMu~DOzefO@Jd-vWU098{(6oOg3swXT>s(MFAMTQcm??T5s<}u%RP{2
zar;wL1kPG}*lR1aKR1oV>fQf2n_yl!KtzON3KIzt@);Y=3gw>~+A9F^OKs}$$eQ8D
zPGO-{fJ5rQAZn!dLTy?KR<nxehP-p~n3l##3H(0SyQdyU_;%}bz2k^aw(r+k?rT@U
z_c}R5UR3XK-ciM?s1|EfGM$&_MF*L|-urQJX=dH^jz@k?sJpB1UB5&>IF9IH#^A$+
z@Uj@)jBXfA=)QN&x&1j~)Gdl@^sY>A${Q9Sc4}g?GMx`IW+Tk{rZ2ho3VroQrgBMA
z@<sWeU3CA(cxLnYcg;G_iDpzX@e&V*D7)6d;m>Y;|I@2w?V=G`F>o6Qq?AqXkZHIr
zJt#AcG14%3e?3#t6mb_6ck~`&**QNgH6S>y>dplRpp!SpnJOLkyxPFyHdELEFifZG
zTYj&D>PB4}v016;o%cze6F*kV{DkG*0a(U%X2-k6U_^slWJd~KYl4^4o8Q6TI>(XL
z(?#ph?RBTVSWP(InR+%GMX{!G<>u2lFncF5cV1Q<ScEg>BC3b`I#?CN7T-sS!4(>7
z4->aY-6}#lb&FggURMH6)SwU=aw3<y+=8VELrNl>OY(RMH6Y=84c&^V<xYC4pW&I5
zyaQNu@phPw1R5azy3#*9g9eGfaq%pHYSUHe>8362W=I|vQ9Vcll+|JMdVzB4%OIqM
z#mIBPHm=i{7pFi@|MGPLbEo9=uqrD^Tbv9<8P!vY{O|W5=8!~Srk^{`TH;zC3ugA6
z8z46Z<gO}eGODP0UTp3hQI5tKepRpX6<*k_uUHuTd6!RCOhwL=w<5=bme*YA+>whq
zQ_`v8mkGCH9gACR*HXF$_{qRpX(jZ?iw~&Oelmc`;+60v+ilyC)eazUnt?^J0`M0Z
z%F}VX16ftj&)_l9=BfkbI*mu0Tkx1$4D)g%)K!)qup4HU<&Rw2#NZ{<?_$$<!+Gr8
za;#G@a!S)p>LeC_dzI|0t`f6OECH&}a7$qJMF(}_F7`TXG8Ihhkb?$Z&s38x`LxE=
z=0x4)*ourLyqQ!{IOh7%nS-y`G7=)=xus(A)wg4nXXMX=bF86S-;V-gr0R|@u9Oc2
z$=2|gxO2?_jGe|5kX*7wvPdh(og1~{_D`<Agd{7aotaHpUUQp)Cc`WGW?JZc;u?0G
zhFPLr7Pg4g!GxfqU~C6c+BlNNrpAP=MT>b@Ft$lgxrtdC7D{3BvD32Q<mFQ@U}4*{
zRCH#3ZB6n~iQNWn$ds3V)U-~t-dpj{VyPWl&?;FcUBi?Api<lZ$%t)ws|=4hw9mDH
z0g{v-cvYaM6F?*9;vP87)EZ_WNxAvGSxJ`(s3SwYkWk{<rV374+8+*`9l+fi6kiS!
zOMIKXR8=w03u*tvxVlo#bvE2{eifD3m}|e9kYYhp1=&i~{R+>X1M~O$^W&-SFljfA
zX&KxJwpK9o;>i=KwDwaQv5jomeB^{oYPG3@rnhkc;&gq*-=w(%JPnefET#p^O%R?O
zI}Dx-<|G+<#_SpBqrpuI*LM7@eWHzD3irgK_Be4)8_d!tLzlR>17{eh%3m$qHuGAe
zS2*v(ednmW6jzS^Y&h}k&o6ImXK%ygxQ50|m?2x~jro>U-Er9J0{;-C&Rb6{_@6b_
zzjS0C$?C&@!q@cJ__K1P!2`j-JXuVx1MOf$Em*R7u5zE0YlZQ-0;A=XT$i1N^D<D^
zZO@7~nxp+IJvpSzU4PL+@DxxrebgSR=JwjrpQ%w7H~1qMsyJ=Th0*w71YGkLmHm2f
z(aep==c0EMR*!6luZNt^n*tjgiNa5vLLsRtdcyFjQ`2(SWY(#$Qr7~9_<VIc3T<u2
z{Tlw+a^QXao=<GU$#{n{m)3Q#Hx?JCg{;!<nJUlu4kAfREqg`E=mD1i8aKl})pR<w
zEc}MY4(Bv8SzOduP@=PJ5{i67zrQmhFl~rP#*Aha%BlVWY)nAVzxYN1iT+c2Vfz1I
zKJ_;a#*|V8YBlxwhu2&2jnAgBS;BbsD&1p@Ql%+)T20V9s-l74q+Z9Dd+68v8K}N;
z{T<v-TYoh51r>`pCQUfA+R=+Qn@ojon0W*YyvIe|ta-DDrqUO7k7l2@%z-)EIRDk{
zwgDgN!f2w~*-c^|U=>#{Z)3zO_4NI{`y|klfw<~1HBywZ-51uh<>Yd+Ef6;6eL<7m
zXah4eHP~<pY7*qZuBdU~(?Y-_Q};U<{?8C)g|bCp=Ft~tJNIE76#uy!mkAyBX+`6v
zDjt0lvXFK;iPvNaqe5m&sDB%JvG%DE|4Z4QQT8^UM}M7rjwHi(WdVj^eUKDZK5<1K
z(rYLu2b8r==?<&0FAQ0zYB}Pv8N!rIGV*=ps%0QyZ}rTa)M(I;Mi$8wgjLs<oJ8X{
zchokwzkPQ0t;a%2Cw8IGB12_lz!~nn<IL+l?`W?lX}eY8V-Y5G&dl*(7<IQeFcoQL
zV(3O~F<(qe^OS9CJr8nTGF{T5rB=2WOA(2^rPdlzgdDNK0o44Qyod+R9Egyx7Vjq*
z!#o}n|CU#7d&8eNf!1$qOv<1pOk2UOwd&Dl<2LIyj!$^O`7$|ar|9E6R22D3@w-V>
zM$c599%(ymy<eiwiOO@9)}qdRX!Sl0;EBe0mVLT`cEV{H?fEOd^ZoqtyhF2Q`*gvh
ziT2y3h%iZ0@RHeTO3oY9%%Q3Mip}2sbYV(<1OKe#P8xj}$OWx{rp$rnVS@I8Fq0TG
z{8)JX>9(BgyevskPqW^Hlu(MA?!oR|@Hy2kP3TRzc8PDs<1EMcTvX<&66oMH&yfs4
zXUG?#H&J?DGBs-_cvE6K`>5uru)#aRjjOL7T`mj-c>k9R;5<gVQiAi>jDr+T=VtAM
zw6*v03(6Y{K=%7WgF~feLo1Orm1e8WAgn&r&wX>cG++T1J8rXwA>rvBFw8lPA1kk;
zsSavVNVX%F)(pn38Xb8nXPSU75f)&+G{)$Ue5#}iIy!4ZPF;XGq9hQZN=G%G_P(=q
zc>MeA?9m7+4d;0d-V6OEQkf>Qw&Eh__Z?OlW-4l*b|n`pp~(BOZUWRs#uQO4EdBOp
z{z~8vY`TvFc~k1T&L075_+q1lAxw8AF5p~XYZs@WZ1GZvYGc=Kk^NtPpG-?w8iACW
zb(J9zU)Bsk*3cyUHglvM1{a9ESJ_oJD<4Sg*Zq=6x^|g7Xy$Q-yM@Twy2UsmGFrx4
z&^~~2T*OO=Athr<P6!T1U{J#j#M}~%gtVszOZP7DgF_Fr`!*x^A_GaTWHr>_Z_sT7
zDi2j2oPGyXHe~GioS+mgrC|XcB$t8vIFY`x9Pi)*NUeUabK3AD57lojll-5J-(RCw
zW1JhSvcEBgBDiWPLrWBTENVK63f1zE61!G*CG3x;9TQ+dwcb9DOGSS7X2tEsKFpFX
zAFV;vGjGNw5<EC^Jo28Wcj_C7-M&I17@-0l_shKMR}H%?1SUpl9RXcCbbA-7UC6uF
zzo!ak^sB#>Rnvd8(tSmXq=ujwC~K;~+v4AA^M&Lh8)zpjq8@G=0${-hx|w|?=Vz*|
zOynpDnWONWD452S)@#dpJ4EEQqc?MTD)ve_4Jjf_nkXrJ`2d)lo-;*iD_LjT_&bP2
zg7akg&90f5dhARJk{Y(>*B#@Ci>d4^3nzI7h=Pl%I9Gm@wECQ&kA~TtBw}F4o-rMy
zyviS5SR*@{OrQVSRRmh1g1BsTq7v?9Hsh_F%nJDOe2|xO5lEmH6=6ZGu=uJefM?!H
zsMp~6U6J`(iy3ce(cS(`NaO-@%Hqh8T(V9-90=Iz40Y?DC2$#w33FqBsBkw%VB{W+
zRZfpvEVG5@qG17j({ZF>^@#9BO(II_t&cZcGmFyBn7ri3RFhfu(}eDM(e;SHqwAsI
z{IyV{juZ<9H9G9nk7<&iI+;gV)B1tNHv(JonhI?!V(%R_1Z9oh$fH|HHF#avS$u|U
zl7gnC2{w<CQ}zKbS4v;{7D;=tdu;#{X|Ww@^I??`V)bFP^kB9aVQxZrnH?y^Hin1Z
z;)hSes%;dhLV}|3A@rNGOkSFS;cCYK)=vmk%0dI#GbA%P!7am(LMJe0y@^;ua@pFK
zRS$QP>pbt5&?EvDfes183h8L%(9~HQOB`*`o5<*=THv$7C)v8Kg7T?*;`e6toNSl+
zQT-M;hcvx!rJ~Hy@YLVoh?q059n6oLfjZ36Sx0`C02oUTbn<I-rt_|M$AA3*6$YUc
zrdW7jWw`w^Afk7(1~As>sI5WqVjx_Lw4cMj)%DT&i_$V5@8_lc>$XIXyO#REZDhSS
zL=>!xtV2RV*KJubm~nXJT?4~0Uu8aAZ&a|3w0k&hJq(}&Y&*y2xB;{R4w;|f7V%?8
zHe<p{5DJh(dZs`Ku+z)?BE7(&kh)i_7kyXiIoI>1sUb)~z@f2~T`^^Bl-uA7Iuw(m
zlL>K%@*I)NJhp(mum#;~W=joZ&f3I*1H-V&X0Ex;PX={whqs|aSfr#MP9k4nUc3(w
zozFwdW`7INGq74e7Rx&b^~Z~ZR%2s)j7YR71uZ8|VMaQZN*yt>2H@K$cx=u8Xw9+!
zGz^UGzLCFXq7#XReXb7@Q7>vOVg;;NUcxOHM6e0i9Zqqu{inN04cpXaO6UPl7wZmy
z(yV(IK&uC9;^K;6`T1zkA#509e#5jL)j3$Oi@FM!M=~UVJ%^*{=cTz&FT+wbqLV&$
z^xg}v=z?!lkwu3I@AP_umSO6E8ZUhgrVQ1s^Hw#4HYQLTkZp@dw7*Gq5((f5C#9=V
zK;&yrg;m$>alB`M^fSUjeylZ7yjs-O(?j{X;2|VK;YkyY=l4<21FZ-Rua;B-Aqkkx
ztDu!0Al@IQOkXl1uK}$*H*Nfy?^)mZDAS&QESGbrEDX_X`dkGZlS&LONtEQ!ahy1M
zAy+|%$rNSwqFC##5TX}W>S*hni}f1_AVZfGa{S7M6X+X4atDti7hYOgFr5wiW<J@)
zhp~RHcJH1QJ5~(c$l!B5^jEZ-@z-6S(_<P%US`{X+u+Kgcf-oe2E1zms)#xKDZ8kN
z@Wl$Jdpk|LtUIt57%yLWSDmlaX&MWt42YH{bw&gPAVnDe1|p%hQ{4U;elh|IeawRT
z9{J6u7MVDk87{2w->M}?t2_NLiI(k2AdZ%Y%7cW59SnkR+LIQP#_>qf4WV|(eO<Ly
zHx{OOaX^qv-5m)7RGtIK1>}MN5-eU0?S6pLOd!JE7{(xAVf3gxNPz>A{}P%5yy$v4
ztp6(vIl^#k@9=rZ)bDKieioE{x5cpJ<LYw_(#5L{s_(ySIc?Al3F40!L^RG7@JzgB
z&<JmDZ<30hh?;$+mh;tvz|H|o*Rcnv+9=n=>A=u1v&k>iHMsq3)p-$rY*E#&uW@vN
zWYzs6t1MM<8S4~{f+vsdXNx_f1_9lfnh!)=8$t1a%}`?ZzA${oOA)>d*-M3a9btYY
zWos&%3k&-RV}IW0S<$ap?cr=uERu}iAj#OkT$-JAs*ohz8%>tu;H88JVAcQVi=?PB
zq1W0rRW8BZ_5^ttRz`CKTVxH7LHa)f$0PYbV}~}KJaTT9oxdVuvxXl~IRqtwQd9w+
z^aI=%d?E-!TH?pDR8kYCF{k=L8Cch&yVfMx!ZgtJw-85*j?$>|g)+1Queqzf4`7>z
z$wJW+T&=xp#Gi>gmFg%ft}$hKTbIl+U@g{RC8iVv?FR1xuBQpp9^_*TsvPXw5bd-X
zTcw;Lf%kv-Kf9QzgNPInKvSrJ9%xlG2y{H;wm`s;3UlaU5ZrO|7BfR}mMMZyl=8d7
zD0+ggEF7~*ez3xs_s=CdPtbFQAfmOUlk@Kt{%n0A<nCKy<wz9PipA}Mj~lZ#zYvgY
z-3d{5_03*q{ITztaGi60TgZ!rmm-H_UxqB(#N|X|clKjl9%xvW3xPD;n&fyC5tUHV
za5a-miRO^MUs{i`4V>_`w`hrBsh74S`dYbo?2fS7mD`3h%kt~sBFg-e!w$eiMBd*R
ziuzvpm1rvBIp!Ih4*;qf1t{@;5FJ78*5E#qqXbnot{{a&77<m_uW4~0^x-w4M5e1G
z@_n!V^wK4iBN!zhqJPZ4!E32VBKh-s2VP|JZjdZy!^3-P^Q_B5;CX9>-^Q=~?oQa3
zSoq;4VKOPVM~*&|^9TJv3->vnhzLuQUnHa5R(6|?)Cv|~9{<W=3krC5m1Y5PZ1s6U
z6VJu%D9(Op=fo%515vGAIl7Az<fl)`#hsgXp9$XRuW`>>=?@ad)<H3L#K~#dFo2C3
zd*b=4YF+u>^~u{E5I4KwtoZ2H<xfWi;&5@sBln<)VF7Hf&28WJE{N1on%8-dBQICb
z_+rUM4}MJJ#$$uHeXL}}UV97b4zt4QiGa|^BRc5$$`W<jCpUlk^Vq+*$ZgrZYBV^c
zSUK0dRP^mzmhh_<JU=3$zowzM(T1|qza=6ab~v>~Xampto#U4QLMi;KENO#N&KWC)
z2Nc~YatOy0+X$WKQC=2EH>W_u;`Ko}V{S5`%F2o^YEahWquI%x%5;0A6%BmXJ{UYy
zLlFI{P0tw2c*2tVJvuB5P6**hPAN<7It0!SSX9d%bC<ePqwA_64D6R11V#l|kX`<M
zrRDhRkBF3X*BeQziQLc-qb2^XESg3E|0cnJbX3yxU{oW_cLnX()Z39gL^q;qQ7&&W
zWLR6sH|I|=5GmSnzCVbF8MT_&m@bGhg{-WORX$38z>_;+KA_I6sHVgA<U})ENMtT~
zWY`4$^?%Cb;CT8{5FzHelwRd#(Fr}{ZM1|rcM7A#NMA7nQR{kn#iRU`HNMt*7t(Xo
z<7aJW7PrdI9a?sjHa=Lp&M`_G{>|1j@+wn(@{}?7G7VDwq#0jYAODh1#CMB4PKaXB
zFUu9~|1&Ie8`G<#=5&roa^t&ji6r7N_nH|Xi>E~eWi=(QMKOQL?}%iYM%qqK;Bh0i
ze(3EgTXezRm4oWDDYAF}4;Dyi7)jGv1ZTNZO?=WOSZ`OF-@v02u~K6WtMk$*5f<m1
zZx%h;GZ*MknRLREf;jL76pkz;<qdC&cfig1VGh-QPQdS3uS&hW>CcNWsx*9PI9w}`
zs!|kuc*=VydOmlZV=XdF(i|!6l~vtfD5sjcr`Pll5-Cf^DQ>mQR}wlpR*b&76(JhW
zqzCOup<+51vaNT1hCFLEtv=`esX*`AFp@eK5>+a`4&77tf<Lj+LGJGahj-^;hT}w7
z*>{Q~@V{pDwssviJ~m~?VCVdi0!m|{j>o*1nIDDcWfU4X_s|fUc<wg)#0A9Ot`2=)
znjo0dFnDZ?+@bS4DP{+9;_8><;cT}yu<=x!-J)>e0W(w$K0G|5kSK0!vU8BZ8MQq*
zq?IUU(b3Q@n6+h;(eMGy1(1nEkY|eUeT8o>b<D3vpU!IcEiFX@AQRDoXnhX^-;JUy
zgk1++p)PwuKtKYmk`hmh*A(NtPDV$m&SEsFi1QIVK8lvED`(=C+;I$b26KtUaaswd
zv=D$dN6CDv6)a8YQ$tGbVyIyl{_8Z%CEq|HWv}&n-17n!!`xfunK;n(TRi3{Mv4=c
z^PA3F|NRpV6(4T$)4%J<1utgS08*D^nI-KZ{|q`NE=1i45WVrXE`Q+WvFA~6Ci;33
zxd)+rqUC>B+2>G7dX}le-|gTT9HMgF)j8aa+<M-6?WwHpZk(4pW(r{L(kt4RxO<It
z!x@`1O{)iSo|z1|n(Q1VwYiQ;o7P7Q7_RzDX>US9rk0xu;h2}lhlG?k){#+Ke1lj$
z`@QViFy=*V4$zW=IJ-%&l?8y~pYPt_5fvcIv-Y&NH^z7{dV&~wUK;ubNshd`<^pYa
zT0v?wZ{CY?{Aur(IPHX$FBzn>8+YmS%pv?f8F=(+#=9-y)Z6dqmc`YcJM`%)lNh=d
z7kBkY(o*q~{wqLyXH%fI>E=l0yjQeD$~o=Bmil@_Rm^$npii1EO@CDICG%*zb}iw@
z#)S_v<~kDecm+V{GcbU-4J-VjIB83$K>G{U7JE>cx9w<osP98*C^b*4R@e0<zKilz
zaWhUD@~Q&+Z|T*SglQ<T2!&^44%2O*u47lT!jfcRA5<Vi1lnQ=u_DpZ%<6xbANvBr
zP^kOnoHcbEloCYz@ocZi!?t*810rS^WXAZ1%k%s$88@?3ET|Vt@Ak5N68ddj)roey
zT%5xv7Vo!t!v%r%#SDhm_!h8?Gr_{}aQH9>fMJozwGAP?e`k6mHD%ibJpr(XOVNA~
zY{~!fdS-o%#qL;+0`3-P(RTTsNCsf(J@%Rp|A&>Tdex;_$=Ep)<BK!Pl+GOTv=*j>
z*pk`)ey49hly^5A=jJblY0AA!KEbsNpAp!l`%c$r(k-B~TlMZ6vW~|@DC!7<pEz~d
zqmG%J-Uvw)znphTp;?mfVtCo(Ci4dFBXcq^28V3LFc$LC>K*~Rl0_?w^A|Kr>SCM5
zku3x^_Ubt0Wzcrv$SCHF%38rf6+a_Y*;R^1!}?~@Md-x$sgO|RRDyF6qvaxVhm#@-
z@$#x=LII*|5iA8(ip|{$lx?fhxh+avVvhcI4TC5v<g02ScN$=She2qmao^y=qG?>Y
znTAP{W?gwqp3MagktQa8HPKG{EwWbALr+Y%l@KAsEe+Nj*S~aL(GD2Gkm1n33?N`#
z-z5C=S$@_tXrXMQhuNpy+ybGp$>jU5Rg`!af&SYpcMck)=gD9TrbL(c=;muQuCSUR
z*57Q{C!+T8Z!sE{0T7lrSnX(a5h?pOEldpG?4`Nc{JhRIe1rjCXUeHn^|SD7G&WNB
ztqT4EMbjSexEio>vXbMHZx>6WAUB;o_z9Cj4UnX)^z|KL;*@;QP)w*9=;S@biL&Rc
z$AqKtn1`2k^`XEhcJA`=e8w7bw95cJ$il1Sw^wAIO{H>e8RWV1EH#y_b&~#vwL>2@
zho(8xa#~JP%m_){dSOpm?%(Z1K>7F(sVfN0H-Fp4h<Ak^Or+fQgWF}V?=?BTJI6<^
z4|U{|H~6C1`>XsMzaNz1#o#J8S?!3g^?h9J-FU!~I|_{BAOL(jPbd=L4Fz~;Vc=x^
zj!}n3@kCnKIa8@(6oDtg!YxJSj*iS{BW8$+0`LNtx?^8wd*De>;22;oa7{M}$=AuP
zTF$fwi}e_@mpW3v*Hy6kVqS)U^oXqne!pW7;*d;KAXWalP?*)By|gl|-gxDR@al>_
zibTWu$|y|ra8aS5bvD@i1;n~CrM)jMOgcOEqj9R`_N$iG;?i%fmn*!1AZ`oUMynP2
zd|P!#fPBRof))0u6t7xDJI~PTYfn2XvU|mTYiAGZa7pSyvHcNV!=b>jGn7HCcV~5)
zA0N|4sdO$)fI_xLJXWA1viI$?Cb7NL^4d59eu2lU-b2?{p`?6_{n%d&hZ?S??BHR*
z%=L)^-hf6tQ9$JZFvWsjfg^ZXhV5PMjw#4uiF+)1hLWopi4<$7s*JJnk9MkhnG)-_
zRkc!0)<xCBL!E~EW&Grd7q6u*kuCeS?>WU*4f|B(z%A52M@>FNmv@H-h*bfdNTM=Z
z1>w^#Wbr%Le=d8R)?O|P!zc@j<P(VE{wzc^SwJA{{iBVt%mW3|P7E9~m9R&PapX4}
zXiJ2eMGZ~~6#oW~nei)Ou4_!CZ-WPD4Z{j_l5IDbgc@b1iC3{A&Sn@IaX*H`UYT!T
z`LFCsUbtM>f>-vp&$){fIL8V!%CxF@ONkdI6*c93oOf+QWK>gZaA_t9Z3?OW<;h{{
zKX(JgL4N*Iy$MkhWlAI5$lz?>-=rWwVp%GCsmTHJHo|96A!|~K4B(g3p4M;D=iEFw
z#*MFOWif}EHn*G(vElKD@l#KdS>jIJdTk^S*6+XU=}Z6Y=~ux-^wDvWb*KmiO<Zy9
zOS`ZN|38&sv1U`_U)M1WTI0Yl2;@rhivvsDo6|ozKr9+$)phx@xn<*S#S0kqgA0X%
zGg>&Qz~M~XiQDG@GziFS_~TTnvMIeR++tapl%bEO<HYO7%id4!S6a=+WkxAcOlqjg
z{4JlW!8+kzrl{6cyf8(#mN;vrhY>|L*zfP0Yy4ffMo-K|`;xSoP1dRWS&>J>?^tZ6
zTWX!%ch4lP7wNB?rZk?NfUvWqe7I>lb>)TB>O}zHjAAP)z(8FNc&+}=c3(T1^)Dpd
zqF(rVbRgZ9teFiF;}@g+IbTZzR9KO~*bXb;74N8taoNq4_|j4s9oPauou*JojN=jq
zW-7ivvI`bdRUjgi*^rjrxE7X+jl&gpt)-Q7l{eS<_u(t)A0Bj+C;zQ=7ZSFk(jj&)
zGxjP24%DJ6tl}pa6C2Aj4I&W`qatzqxF!F97M0Y4SQCUTYKo>kTt`<<K~DZ9B3FST
z2Ms5VoGJnri<eE`2`x;cHln`h`y%pIyxznkvYy7;qMdv9wG|5LgAa9UYuQoKQ}MmB
z@T#xCbGKrQ!&>^v)U(aJ@X{Te=ZH8X%U2Vo-y>WdeOBsPLMNcY+SN8zIH`2%JHH>!
z-t>I`r}FA_p+s2FDcJYnjCE*L;Ya^YlMz6&sBW_J`0;eo!65rC(nqlk4h338Zpb-T
z3Ko%IW)9B32K}uTJoU>6ZM=;Pg>?Z*H-pcV&A%QY{Wpy7Z;?&#Y7_}{=c19(`T8ZS
z@0aXv@lSyNB{cMM1}Q@T!c`VW`VNbUszy7!G+`>eAIW#~v$CXBV*?tJiKAF?6&_(?
z{qt{aP=anZEAgvQGzhoe1s(V`S0))b?FX@$G&j}A4_6gGpY@BR>hu9h&O3TdW^TaD
zutL<`j}XaD9p!L4+&Adp#=xy@prW;-Q_M)LQ0Ksf6!aUEeUQmX9j9}GLMm=7mIlg5
z2@s+ynun-x5m`r~g9DWv<ZA5|O&wM3AzjCQj}`>N?2zpvGyKzIBg50x!6wp?LGD;|
z$kRd<_!&9+-KY$xLJU1an27f9NG<;kE%L*~p<kia$^ey**>dL4`<%PCgI%57i_(-*
zpEjQjnASYdUph&E<bwMu$_0Aj-$SHy(tl~S6^5<Yc0ATXFMq{A$k=@Ea9P2mr=4sX
zo6k!4UCSYZsJovbArF+^i3;Bs0A#?I>1p`<u<@*spG@X=&-(@+(!%%41~?!?vWfGS
ztZd$wb9H+9O<2?s++A2iHZ*SD8dRI%((Wcxjf}Al8@Dq}-keD;K-%0(lQ)nc+4}h{
zy4mbpHT|R9zqT!UY5=qiJff3Sw*5>_AJd%Ng#c-!xSM+J@`c<Y9CX~4%jdP~dNba&
zYL<>Or=K=V$;4gl>n6d}0uF^z*mQe9q3B5<<9@sj*Go2s<v<gQTS`uWsEBj2ci0<?
zg%=m-#6kaGd@xAlUzY#{{MSLU)x@0j6InAICdT9#SyI=x#+-Z^iLu1+5O!Zd&{aBb
zRZN`gs56?4JtJAi?xG1Cky{byXsr}~UTDy11Ix1kTY(46?A!Uag<)QxbmgDa7D=$&
z&u#RmW!X~xwF$6bI-@+x2)n`h|H$n`Nz)nV#2TXFi941s$kq|#Za@=I&m_);T+o%1
zE5X~j-VL^=7`>u=jy;#SX^u0GzNp&;4g1O+*jTUeG;;yM*k5_@d&wOutiBS52_cT!
zgLD$BcymU0bis=HY#kDz?d@cPqP++Fg&En+pTdJvasiV+`CYa;C?qN3LfoflMRXME
z-tXG9#_!pgJ*RvAr_U;O83hJ@75$6s&B9Mpj*|x0FT}kz6p*!mmoY3rb96@B1mMR1
zT<lIkduJ_nI5T(vHSBIH%89+RGt^yt5gFN>`5%kD2@#O{YWJV{J0(PQ=HRc$Z900S
z<B+Vs`Lr4B$SZDz6@DfLBhcm!dP(7YG0-EL%qTP*qp)c>5xl(>4`XPiil87W<L=$U
zB}kO`qAxx_d6awWi*o;pj^A=Q{HsIlU;TvHEjh<F2CI4fHH^|Mi7+wt7X#W)VNL@7
z2@C%}IX?fw0qMW@`#%{!NFdkJ;lHXIIwp3zXZ6H5gxb3Cs6K)Vz?jI3IoksELL5AK
zhd4*S4HBW2yHinsgEfv9q2(9*hMNJrYnLKbbN!OjG3!IOCK_%9&BK?MtyuMM1882K
zgwVHVg~}buoJTtetWC_#zzbt|LGoQJ#lC9@YeJ~N7pIw1HZn4z|Cs;Z5&FWgSqD1R
z=6L+uex;=AyAf`g5Xu*fHmk<4d^#7}k=cCLb6#MLyJ7*f-j!TzIMHKN$ebh5J6Pqt
z>K|UC8mf~$2#tj7G*5m~{GK#*;{59$bE-ovXZ~x=+B89b=CM)d#hbv3J*&YA1_(-3
z7BRKV!{k0vyeC^d%6>x^3K3?Fs&AE+Dd3^~O*li5P*q_(p{L>3!|R57K!MfU_$-Yr
zXzgh||CHJ?K;Pte?ICjIC?XOl@p^Yh7ly(7{Jx^BH1_p}H;^hn^^36pSb8BZ`6wO)
z2lT&LFv@mUJ>*K~;f(*>y7zpg6;fOZ05BdBhzuX}ecHhvyCi3SdqzG$jFux9zX@`o
z1bAyRY{Xz^6!Q;a6JAR2UMa+{)a>3G)3=zM^{(Z|tc%pEbElOxMVknSGtftN?7#;~
z$jM03r9OeGz7rFG|4yiIn#l1F8I1QO?Q9X>Xv|s#?#x^g4rQ1F{?-}5y%0doKh}ux
zb|d#i*a|=VbF)oA<{kkv?e!X;a41uKSyeyceYbg+c{SUQq8!F=L`YLE(?<w8rxLY~
zlP_&UdS(&VY-3S}UBSqbFRt&9&E3T6@`{F*KJCu#?w@liN*-yuO5f67Y?33}OQ?MT
z5fMN>70>R83f5@Z>XVq}9Tza#dZ)-WJAu|MocCHCq}~|*4Q6E3^wV4D1rEY=W$Qv7
z2Hn8Z?Hf5u2#mzLcPd0K59u%O3fxgFr^EimzI+RTH(O=8GN`Qot#|B{chygsrc{YT
zMO=$?mSh!$O%pGX{}WIHul#bXl9_JL>K+}ZT_~U_g#&$U-6Y3Bm~ZTja%vxIYb!&u
zmsuTU6$X;Y?s})%9E*uGPocdwntk|+9tU#wN%$XJhq`aotfjf*?D_L`Ty^DDd{wY=
z#j*EaPia2G@pziiY<#8+)*zr+6XlEN3spo@jSHr?$hg0hW)_flA%cVBOo>H?kWWi<
zsf%g~2hflQ&EkM#psW;;G1KMNmg+&z7aPfK%KP5HA*TT}SxRK^usU27*zF2X+ev3*
zslydV^WGRPMYM2N^cAtR=(ew7f76X~dYX;gjUR}bE6?Jy`z4$uf#z!$XmLt&J-2Cr
zehxGzMERn#XFfHWkF?0x*u1k5qq#^Oo5Si%TQ@fMX*rFmySI!0ylM~Nd`5Gxwp1^@
zMQNsEb0giXVzt;^@pX4Ohnc+x``Im}l#9&88|m0QoA6eqhS*<*X|6y^^E37lREM%x
z9i_SX(xvJc&2!PQ`O*#O<v_D8$`@}uWHi;dV0w!Tuba*0g%z_**3F@a7&)qJ&49b7
zX4r?Nnqg;6O>9TH4@)NN=l}o#nMp)JRN05=v9+RCL$g|HanRQ@KxuY*JZ#;J-Mtk)
z>~i+`E2gx2Y0hqX?DFj)SG3fSz13r<>t<I)&C}Sr+2v_#8|!9!+H^l!;wQKRUdH&F
zD@{g>zq&Z*pAcd+A8_0RT{iQz7kOT?aOa!b8O_grgkBCb>!W;?Yd<<pDK41KBC|Ay
z*kHVcXWoko>qpXz^Z$*I!-vZdRcx=@@1!ebX%eAs4b5sP?;y=4G(Sh^Ih(0_+^81^
z8p+K`P2Ih0QNCwKgJZ5}saZF&PmYnl6i#JhTvh1+LM}R7mvAj?%1pIShUnWJbWi&=
zx%w$aa}&qW531@|sd9Xt<G!af%NMReF9({l`N>W>bo~9<3hC&ZKHq1v4eG9VApQxI
zfH&}&!U=`2L3usNV36Wx+Di8K+||!iVzeH&AT~C$iTMB9xkDp>K_CEvCE$>V6hbsz
z(7&aD7z8>Pp4lw`^*3*T)`lrp^WFEfWBlgV=c3MU{dq!pk|9^KH&mczHG`S~H3MtS
lKx`Yk890fWLCwH<HGj%EopE3N_T2yg002ovPDHLkV1nc=hzkG!

diff --git a/doc/user/project/merge_requests/img/mr-diff-example_v15.png b/doc/user/project/merge_requests/img/mr-diff-example_v15.png
new file mode 100644
index 0000000000000000000000000000000000000000..8fdf3935906718447c6a9b2319784304b684de8f
GIT binary patch
literal 28658
zcmY)VbChR2&^8LUZBE;^ZQHhOTfa7^d)l^b+wPvWZQEz==Y7umeP^$gol51Zt5TJ$
z{YR1=sVFZ24}%Q@1Ox;xB`K;51Oy8BC!axq{(H-yKqLLDz$}F1gn)qR<6%FI!2h*@
zU6dt+fof)O&;H3;R;rq=nsTz-CJuJ=My3wNX7rwRj{i_VK)jyZ|3o`8S0h4CJ6n4f
zZcjeq|3Ps7lmAmQ5EK3n#MOq6SW`}sP{hI6jF6q4k)Dy5ABK>Skk{GNoLgB`{C~~=
zwfKlFU0ofy85le~Jm@`G=pCFb7?`-YxEL6j8JL;r{vqgGyzE_#Jn8IRNd6DW|H~t4
z=3?S(<>+eVU{ClTuaU8Xn=2nN@qdo~@AH4g>1t*E|MO(;^1osI3y|Tz9tI|QMuz{(
z{m+#5KP|U{vz6ID&;RlBGx7cp^8cgzUq8GI|2hBv8_fTS^nbMfLgk0yW%$2o<A=f0
z--G;@NoYq&Ef*jlSk(UtFi=L;uYdCdq$sN@_Wu6<_4W1r{e5$D^Y;FBcXzk3vGMcs
zb9;Mx`E`4JeSLp_e|~<x`Ej(jw|9AY`S9@Y^73-?{dn<p^Y!!fk9&WA|KjWR>+|dB
z>FMg~>h<;Y;`8?7<70Job$fgJ>ih2T@$u&S{_N~*<Kyt{<Nf*N`TqNPYHDg_W#!`I
z`u6*&p`l@YeSLm@{^$GW^z<}0H+Oe;_x%0p@#pR2<fJ{}duL~-qoX4sA>kk3=;-L-
z=VfAIqO7d!=j%HxEUdb^`s?HK<>zC0d3pciY<70`^X<L4xw)XAptiPlWMm{OE6c^*
zH6|uTLsO%(vok0tXl!ik^XKd1=jZwTMO<9Gt*vcsZLPSt`1|KaPEIZ@EzRHGKP4rl
zr>Cd4xA*k*a&cinNm)r(PuJ1Oad2?Z$i#U2dOsv2Wc_^m>GJO1TKczy{{H=&Pv9RH
z7q@?Z92pszl$3PzeJv;`_<Hx$Gu5Ak>)zs;Yi(nFaB$$`=i}w=W$R#PZegB^ZP(b>
zvi*Jf`TQ|3Fu=mXGF{U9_VYEgFgCF|z0o&6UpusPxOTgL*4Nj!+&V!)PSNRCvVVSX
ze{xMnN0(WWbGdbV{Cs}-a6P-dSku+;{`fL9G*nqxdA4%U7GB)l-JST$Y_z8HaAtF1
zbgIcOcf75SfPkPYu`<89sBNsPMlWeRr@f@Pe0O|hII%G~KkfAX{P_Ch`0q{$XIQCd
z<V?><LPlbLQB$2`TCHl*$IGiPz`u|xxX~)3Qa0}6`>V=4>E-OSTr&<G6+H$+GZ`6V
zAiB1qwYo$;GB_%vC#rHVqp{vNb#;6$6ai?ycN`W1Iwm>pVW4mBYPBn~I;AQ*G%50V
zW%+1oY9u*jV|mpX25j$mZ@Ren!OGx4RdR~}=q@~{-pcA?Wo5mq^QoorkqpF7GH-Bu
z(jSqzSW@z?AiFy<(jdusp{}mY&#!<tsB>v><!N{4V23qG^@fl7?%^(vj1<zHcb5k2
z{^jxE@d3yZ^Zo1l>-$Dyv|9`ah!99hR7llx{Ze;JhGZP0mb#KpC}bT`g5AnH7>Wo~
zo*cpyEz%OzdFjpsH#pK%oHP=wA37xD!_a&*75#c~cd#p#|0Mp_Ea3x@c3?lV2Jv9B
zA)cjfGg;^BchSR<@97M^$A!hhS&fR@d6vo(kJ=U~%D?6ODkEeHMM_EvP4<7v|3~<~
zBQ=%nqB*fUXK75-nb@38d$Q2u4sB_pE>msbaiK8=qF-`5qU-cP<AA!DsNkz3H>+w_
zR*8Rd)0}<`)5lS3g~w}~s&r|tURbuy_%y7s*P13<KGiGClq=DIjAzrC4iv%(sl;0f
zOV>jkJRYmB@LsmIZ-cYO)EhY`8O->qh>rZw#KLfwvplCL+rWaT+6t`4P{}LFXeK5~
zqLLEc-w0~fhF;RI1ptOPf^s=(0dRkEBH&{GwS;aY<7*o*5~(4V@DbU{{sROGeSK{j
z8N~v+kt<xFp(7nYvg3TPC82houv`9UI^0QQ!E#7e1DaG6Hi;KH#0Sy$uB0U=Q;NQu
z>h(pi-u{5+MrxA?p9@^DC0;D?#Ev~-{GM$tmqH}6dt?=l(cQ4hEc>kxp6ILODTTw*
z>-a~q+2H<(WOG2~-<RimcySaY)|HJf?asTLOW<F|zkMZ9q$U5i{IB%sN4dv4-{Ci%
z2sr%Vt#wT2aEJ`9u~=!HxfTco<eJ^M-AnJkeWow>2z~ft=WMJLm-cR5eo<3!F}aQp
zFlYs?-{wDW$sMR4jJp|DOPrRF9*VX)R+nZqv^<2MN?%}i&a{`Xu^vDaUN!5HF#TG@
zI*rZdYS4*huf?9~Es%3-0wmeRG8fa`N03KhEgf2W7V05WOf4P|ViW!0NPJVd>o&)l
z8z0M?ch=vG02tpsncnL$dnL=ByG3R`aA*2$Sr^Cfgv!I;VV_pgi6<kTnEjsE3NDjY
zv|Oz6I=P;#$b%FUK!^5_p}cxXxRY1A!FNnIo0P2MvBbH+&-M<<D44b3?>Hoe{ne!<
zbuhL9S7nBv@0N&Ky-}JO$KIx##6Aliau#nO`vOds7%C?vZ!@7K0YY~MbhZ~+E&{7E
zNR>M%oIhY);^(}voB{~8gnZiqTeMFHWZ~-h{d|8#zHxIc#8)h*k7UF}hnOE7FTJ6_
zYxg5T#_HrA7mKT&dUGGM*b>dNmL@)pvZ=Afo1;pALAIl1Qn?0Odl<pesU5!{Ai(l9
ztp^p3`ywAP{!qVzLUeGnqFI+WK#tmiFTT+>UvQhDPhL%C<g61~C&yiJqjPb<+pF$d
z52<ZPT{|asW;JPp5$UA`g$%Pfwi}-@DX2m*$d`N9@k?A#<C?ZO)9lM8*5PCK&SJM{
zXGN<WR1Cwd5WW*@n*ry_Iq{UDFs@NPCmGjz+XafrE!%?@UeTJfYu}%n)9fkTuS`Zy
zHa<)?P9_~H+0EDKB4JN46hz^FYCbD=PJOQx5`8k^fz$|N7+CMJGDerJZ6+%D*$l#N
zzJC>(N2;a`aHWlcfn8yws9QgkLgv$i>zC5i`xmIygW>N#CwO@Gm>|7$RGrJR*deEs
zb+E@H$|hMB_c-=B!ZieVNU<3kXh6(&p)EnPiO{cGcP!5SwZ~Q6z}11Sq$?geGG#*n
z^bJ+|Z%EZGy%GW*7^7*BSZz)-j6RIzK^_j-?3I9C<fRJz8e!kKUYR(!I2M>!zFATQ
zmw0_42?UmR@EpIdug=cqJ4>kOAsmVIzn0p8M`Y11@gnvYr^)697vufH8V6K&y1XUw
zk*hV0yPi^14A%7VjX6m2OSB&p+|aw_a`f?Ya}4lu0|M^%INw^hH^haZ`|(4bM;oGc
zWiT*-Mo^6yinps)2;^PPJ5g`9U_a6!;vLaqAoJTGIaL<xJ3$4dwa8Fl6m!I6-CRct
zrMtlTT`8{%69%AH2WaQEMJWd?CF%{J5rYMAu`yBKfaTpi+$+xN2t3PIm8dHUR)#oP
zx=daRQX!399Xod+Nvt!5g{Z>b(-96P->xlv1KrU-;Fry;nJKTN(0D|XuN}Sfddn2K
z@ugpbG;St{^A`j=R9?(URAD!-Om-su#na|<NB58s@P<XDE|I)gF<zFi=lez76_HXs
z!lLjAL$m@kXs4wJ!y7}iJ5;0~1>?g8^tb^|GMwD7s?ej-5KnH~7oDg}?boRJl-?qo
zn@$usu4bErF^41Uu!S=1>0d}-WM5enU@z_MYd<dz0v~0^IrrlS(K`XXobv25PV$df
z;FK<gg4Fir`c51itrJ7uP9CjI_alfx^6lc1PtnD}Az}76CW7O*!kLg3e{;1}PGhg3
z+uJ?UwAxct<7(n&XB6mX6t)9ipT3TUH!4YdvIB>hjeDRz=M^F{kwtE8vCWa{k;1He
zGbFO|es_NsAw37agGIX<6FBh$b;A}c970v?FSBgMKkd6igv+Gu3=z$y(P0l@ts>DF
z=~`;V34wTc+$u@w?oI&V?y8<?*~2>dCGd?((Y}lT$kJEp0<m-vs*L{{%(w|nu-f1b
zJ)=1-A&TKHx--JW-+>o-h_1oi_|Wq&`xrVx-<{Eq?CrJG^(;z7XN6(ZcRktuu8RCK
zr$m`*$VxKB6{wLmD2DA5(#9e87IjPQ63^A@HZq87e9eTD_7U&+42-)k4(wE|(bQKu
z;e1WTA3n&uZ?EauObX%#RqQo%Pbtd0A;T%f75xYHfittu&FCm?v<yKBiMX@4IXnAF
z&5a+f;xHF{t2840XD9dP^`JHWMNeo?<EP{G=<zWXwxE^JDEy<>wCGx!^w4<SD;>t=
zL)xIXU1tFtE6p(YtEIL4ctj!V5>BWyoPQZ1V$+c9Fl--nJkUAdY8=pxl#}hpDZs<?
z<LKn?pT*noan5ifz}xpJhz+|&w0R4SVA|~?6REXXR2VGn@}YUTH99p!PhZ!=>us#*
z{|JWp##mGP6{s+Dvb_g_(INiw9A5Z>gsBld*!JM9Pg}NVoZ1rP@dvjj&hDp(6yR9$
z3KG80@BsX4M0A#)UIFbkvL|r%c*S_u@fnE;X?5r+?S%~D^C*Ua24x6|e$FVXy|Ydi
z4LFDW{udIOK6=UwMrum;aChi_#qJ^8wR|LWfCKJi{feey6%QCXFHalmCj`sqZ%Jr9
ztjCnO^HPDV(UZuY;>~zOWFH<T0tLI;)p+Tltr488Uns*=Q&o0*B@X8Sml?A*#8%j&
zbe)gT;>NtZ3uZ>5rli0JqC~%t7fX=lEsf!n$?cj#ib;%=QBaD6k~||BVK;;@7&?{4
z<W3i#^`GZbi4F;%g3>Rk1Q5<-8e3T(X<0x1NKvGp*_Y(kj+1GoICQH$`R>fVe5e`?
z;*G{oB=i-3l3>x`1OZK)aYl_G)yze5tBJWDUsx_gQ`$FyCwph9b}@;XIJArTLcEAt
zG8}1T&)iCe+d1++nxmmP?g;!WoqFD{RQ7(}8;mC5pfvc@zLeR{#skyO8Wi!94D@^u
z$2>|(lG&w<*I1z>DdwEyAJ5QZ6DF81)r=7yl4LQ~HyjhkAHW<N8=w(Q@@m_^1i(UT
z;gidFBLRxfvr{539A=;C71SUtC?H$&=OpDTxD|?<7yFxiJA&Bq=l)h&i!^i5!jCXo
zg^*>jPs(Ag(U;H0iA86s`_ZFdp+Y;6q}3_RpM=&-F`)-fAxUf3VU7i-WYW=Zq2@1#
zhPt;!begT>tkSurN?c*kOF1WWl9&cuJX6Y-Qwr5E9qMP3HX(4b&&!Y=I{%uwNn$QM
zb)k#FNym+YS`wi-8fnWApNK!#nrT$j8IqF&KItdf6U<=6ot%U0DJ`9^Q6=f3&<q6}
z2lKW>b3ypJX0ff08vUwhmu^!Wk@Xof>CC6F;vEz5neUBsVO+MfPNmv9CnLUvp$`<l
zgb36SXT+RmSs*bo#br6Wr*$8Z)-1WT2K&gD{9PQY2I|D>u>y4!S?6(Jd$%5fccphb
z3fJX}c-wuA{^?C4TuhWC&Bw<tQ1|({|4I5JHTi)^EV~miM_h$Y$G8dK-%+$c%6zw6
zQ4wptDoR(Cs=C-#FZOgcV9Xmdc^fKADXTs-#$hIm-;~BEg1h+A<CVS6)6L6iq97m8
z)h7A0S=LaBI&7{{A%Dm?Z<ma6yly15ggKih>uP&Y6sn5d%pt~d+KDcQg&9hgWdU`1
zTyq(ep^23?^b4-Zbi=T?9SBx)Nk~puV0E~}KTb4F)DCEPL@6I-(&RU?VPH)0sri%h
z2&ZEjQ!oUX!=I5n<!ltgME?aM)3ufeK)CV`c2sz^=y-*e&>xqtFS5Tn(q$2IklVDe
zXl!xQ6RUky?F-Dn93eSYM=>ywK#v7La3*uW>S$|zDEajBj9gCp@0=H|h_CG+>}J{u
z#PIh`UdJ7k@RO!4XQZ)W&aJv2%`Q><=cmOySYbV3x}fxuE-lqYT&{G&+#q@lQH?2r
zphqffCZoYvmN{HGxECcNZ43j<w+HG1Huu;7NTfvDwt%l20*zXID=<R`u`%sugi{8$
z&+FZjzx{7c(of06s`g&+zG9F=7KTcPeSt^)gGkBpvXZnLPQMIIAR64zw^G{~BIX7(
zV3qGTItqEy>e5J1T{)auEF|L<6yg}@cfQirRkjit%U8lrzLc{5#v(FQ4xE<Q={$SU
zI@!r$Q$5IK>PUDItB*4Zg{G3oW06>OdX^>BF)kCS9Q`)Sl)Kc91Z=pMQ87ZX;k4+W
z)MUI*OolPe{L+$lcv7^S^l`%LsxDN5+IvpJ@%T$1#py>kV1u%rGPlKnpT=QXmE#C(
zVxoDtMonjG6&$U95gB=^Et)$MsWl4cHPA<-y~tU~0oX8^YHs|?P9_jZJ;+~(TWX{J
z+1chQH{iAjjMySv!X2gtTDT4Whx2&7Xw-37k`#AxpMMpH?uuVNNFUh<MQ@HG8h@9)
zM(PyrY;C@YKqmh?->)}UoiJ!V(+Ez+T?lXRN+LIL4!pUlZM!!|t6rc;xPw@rySKwT
z;OQGv$c<uPrTpNbac3Lv^W;+;5FkE)!z0~at03EmP9f;41~tLIgPr_1^>^S{+*PnC
z#c4P-37d@xewUK7S5(+sgBtwr&T?A5>SCVT_lwc9+xh+F{?*3fVp4p!5;X_n#N=Lw
zC87~kT~fIV9(5-bT$rC`>lJa$;h1}d*`G}{-9~UHuxBOr<2u9018dS~99y)2ypVBr
z`H{n5$Vzj=)Vg15=SwBT14<K$s5PV+5r8gjl|LJ>Zg5wL>s9c73jVNx6T|}NlVruX
zkF!t`AEKeKiybgxgn0~OWg}8FX~l$&hcc^8xihy7)w*wpY-q+EgxNr71es?FIoE)$
zT0>SC%MEkk#tHQ+jwXA8ld*>_m?F`*PXLnUNl;XgD(x7w%wPgYhGgPVVZV64MvP3V
z<YJWVS$UX{p^fMFNRhG8KxPwGmRPCD4cF7s^@Z1*lAza6+$Z>_GFePPAy78HAW-tL
z-6>J&rCv02#Q;W790UF)bmZ|sFSm}0U#+PEUk~SRlf9Mr0Ui<qxdyuU1O&bOTmo-`
z{kMk~VwOss92@&Uk&a<f>Wg?58!$6fosCGYwa#8JAK70C0xZC^8t=yBO}8cMCj<xn
zZYJVN`D~w~9_5-#;n5tWr4IBrIVcMacOt3OD^ztVkG1HEG&5dZQJNIAm&WWtZKhZb
z<iQb<>xLxxp!UDrX)XH`M2oYf(|?Pu+FB7h7r9Eva5v}mzDb|Ok&pL+Q%mC{=?<{l
z7(uB=M8|Q?D{o9w9(a4p?x%l|8^2(=$PHkj5SinbQ}`?fcQFq^2!t|0gjw~fWrcc~
zk+w=_Dw%iEF<wpY-c!Gga+&$OKfl9GMr6`iCE(I8vsebRW;?lzf_NdrcHt-`&K*Hf
zTd;Y56tcH3n(N4Q6;7)=*W%4#o-SOfGgex$$>uRrvrGbfwv@<*t&?kRXdP-3Fc<do
zXJWun_UP>wpVxf0u5FOxRJo4YWtQF(V0>;Q`yXfmDLxNwzP~<XUxNr=pU)Osd+|Q4
zOvt~K0JJet>A1k;9WeF{g>%mXWwafyq(n}F^@Yn`MlLvczP(1zYuBe7zZHj{xf^o3
zSX>;RucyHSe*Cat3q6jeV}^-8bGuD!>~y4La<F790ki_ERivgQqOqWHPH^PV1w_dG
zoUsZS02B&Vj?L#kf;drf2I^ZX7~Z?Qp<lqzht+ifMg}j4v|qsC56(Fg{8#+6u#+>V
z#!@|p3%ZukJ?trL57Qo*Z#`I2J7cltz>evoI;-YKu6i|WZ6TW|(zDiCPY*InS`emB
zYm*Hz_H5Cd;A^(^>FUagb#;0bOL^02aS6?$a^bdCEwUBA4uSYg#@S&z^pecXWJrTc
z=2VyVZwUmrP04-fPhcs*)nG4jNQr*~S_9$5Wah2SQ^+=9A{JFfTv;3j^=oE?maDkK
zlIy98!{o~_ac#{WpT5aed_Us3M<b?9k}Dn9Cy$(6T(Dr|h`t_NhOjnNI2RQ)Hx59x
z`kCxBbC1Dgj`NmeO<F$cWQ`X0n3t%M%{0>(9176}b-Jq4Q;aXLC_rt@Bb&$*=}4AS
zplwWnvxg_;WKN{bNhVJlz1TMx$1yK&DfOnry(75ym^DCH%cT#RNv*=-rf6SIet75d
zNBCb)dVg?yMDKRTZ+iW{KR0d$QvrXWEdaY*L=u~vY0!}hHUh{RDs6A0a6gZ3AAHa`
zpE}Ov+cS2~m-00)VWMx=*I%C-x;Fb;^J{N<(cM<pr>k^O*zL5gx$>e5lvo*-!Y*Kz
z1(3h5&<huRP-vAZg^3|YnW-pVkQLc@xVZgPM7===pP9`yGnA90=hc8l&;OvIs@L1I
ziJTU@Do=E9l|0VNF}>*TwYan=X3Fmq!;>0y6KCI*cW|ZH)6l$N5*_WoaoSh#B&WE7
zX~pqR9?gsq4^)>bAX0T<aK<{m^W0%ppz9U*`2OMuAE9aLj!CcDAzwMRO|?@+U6A!i
zCUu^t)iPk-P)mGDw4ns4CVj-xz|2&RH+xNOTUTh8_fH*SLb&7^XUlIT{#s#h9b2Db
z2w3_C8YF_-`}ux8TQLw|D(sg&pf3HLY8-+U4ckz(dQOr>?R1nxds0PPGu05&-BIIo
z#)9pGxO}XTKkdHao_R8fS_6&M*4EtY^U%~>Z#I=Qn`_MfE8rt7#d)Sgxu3m2_5E_S
zTQ8a$GE9CMYScpBdb6`CZIz}xZLi`qdfAu1>Y;4BXlTYeGI9m1T}*^Q>_G=QSxzta
z)|@>%TYuHyRCt-Exic9dsC}Y*AVt~uLU%rVJ+@~(CMcY4y-X$DSYj2CW?WX4`4dVG
zxqEXAKNr1I2P0Bi*;$S=&AW|I&(ZUIZhUDmi3t{>A#qJlt*Huj&e{RN-oHKm)QULj
z!!yUt1*iLl9ry5$cdrDKRRF}MPsdX4*XI0gu!}1&+8V>|v1!;!bk@(|@FFyXRDxqe
zX1KL360$G9YepoA`26lIrbAe0Js&kPskQnt1r!l#Po?h5D*O#jWMVi`Bq4$4!f_Pr
z{^nsUlZXYt|9wpz(XPu+OTm2Lw-BeY2<Xk~1-n~0AF5#TQsIW_=L)6wo3$)0t@ut1
zClk4>L)DT>YfrKjBR>65>{TkPeDD`IN#>cop^L-GK=Xa-*QO3<J3*njTPw@!2i}OS
zdsZDSc2oP}U5St;C*O>^LTS3G!rl^|t0`w)x$QV)wh8&APB7|Nf3(Mva9DSeTz6_i
zkLbI@F3e9Ra4&39RdePedp7BlVIg;ynvQ(T^LTVlPcCp#GHV*0mDK3goKiupL~r;R
zhtmKU$}7zBNF*wGg5W*?nlypa=)dX~o|_0aK+We$+#vA2xZ3`OEfG_re}lqDVqrT0
z8&~5V{DpNl+Y08!Hb#y*NFxulb{8P!D@_>m5qu|~_NnLq0=>DT@WejCnLk0+OPV7H
z@&ca4H3Cfsx<f|D9|VT-3uq>Uh(gxsT=iW(KPR=wmtWy$jAQ&q_{Zz#;jNBQpzl%O
zt3fjMkS(q?Q5eHMG#mvbap0cvuAfOD>VPfD*H}5?Y!deX!*|H@Ew{%qXoTpV@dMad
zlu!!BODbQ8)M}0#O(aT^wa7vAd5)Ecf$A@N*^?OjyDecr5r=U$$#6AaolDWpgHnD-
zTzp)Npg5H(pZ&=yC6ty7vWleAUufoVh*&5_$^>Kan8s)%7&`Q3qb^92%OXW5ir7sL
zAw-_NM?K*DEUA)zDTD%!&4h;a;6bgR{GZs|?Joht#!l}U@~>>6L_qd)&nc&yAt|jC
zq;2ro{a;U)D_cyhEU3}~&mB+yHj#+xiQ8=35cdLUGV%3}#OFzk^;G~hl90M)k3lwY
zb2JC<3;8yi=$WE8UVm!j5oAeG=F%zIus1M0N*`8SO^&(g)eQW;oo?EC{8T7JnWJ!x
ziK)>BjJez~QbLQz_>v^vvmQsGbe33`CcPIURA9wH2MQ#6%Ru&(M$j0raDkM7(S4yC
znbu?3qHEdkL%69UtfN#VD=yI`imGBz!3ed`fvMEhzM~EkjAJmON={+PV~CI}^MdE4
zd0QB6%VtzN;JBcO`Fv;PIrR+uJ|B-RG)9N7GC7H`a;@P_oOf}2H-`kb?W=1Ea9M-r
z$xC^XRglBQC4lm&hq<b}I9Jc7s&i`<;6ciRZ7TXf2N}gc#fVw=!H?=Z9{cgg#&XM$
z2=IB={)S&%gj-!^dnTiyrzdaMh^1w@p&2$|taOB7z6fOnA_o5!a5Z&opbH@!`k*Dr
z0$=;Ae-euEOwox{m4K(%3T)H8Y(l`JeRcJ0MJrDUIG7xEP8PMiw!G3*l35zohYX2u
zH5`bEpS$0D)5Rn-z-tB1E2w$KTm&pw;}Es`{^e2X<17qCbGqt^<n;lEDGzIF<WS*&
z;%j#fBcbCn1COSr`L#b)g5rp9X~HVcoy`hCSiurc%T&;4qm;)Qzl=W~-0*2`B9$Bp
zoLz71KPk`2*V*CLbnkn%h8Sw&xfg*7QkB!XqiP*?>uBb0p&nPwmwdnO?{f!!#j=uL
z@_f9}=_Lk5BH%Ot8r;}=;>kH;8xY{}Z!3QPCCRsoap&5&UGwaPV~{Ma>KBag(@`^q
z(9q$~Ei6-Pt2mNFq`_3Lb#1pbHV_U(Hl8Ws()MS*mST{tE5f+dmuox%R*vB>RZ8hB
z`GRd$LLA9ycLUl~fX4+H3cMs4l;_x?>N6?fcK3t*u>vd<7AbLi0GdSLqK{a_S<$|-
zn+}MHmxKS&X+mP5D<u|+m7!m~b<$oKC8{yD213FPFSP}@t=k9B>SCfeiR?N+h3Zc5
zkVcNYYvRNGM+_EOqmWaT8x%OG{H7U(d_Vmh1ZzUQac3dWVSLWA0rRZRN3kRRqa?p$
zfyi3OS<t#(SU25M`8hAtvz82^VTIquUUrQ%jq+1@?FI|QLXQU8+0MhEv=yLdr}xmI
z+W3W<P3xYp=MI0*+8U>^4#OpTb6FAA=i};&`-sQ2*YcN3T40^~yKcTJpdB@_ueo8F
z?vlYO+oSR+RBsU}cu4?!!O78RG}8|VW1R*&1S0xZ-~t{pH1k=XJDKJPlE?+3kK3$L
zBxY|$r3Xg#=ZJ89*E}4C#44>v1(v?KMFeVrcB9LALj5wQU9uQ}`DnTP;10>L#9+S9
z-=MGY?6Y6w>1Q)t$mV_>BkU^mQnf)ujy$xxI1C92qu^J*B~+NEC`xR5Y?5k^<*<u3
zk|=5V)>e+v=r;)HSH6d%M$^e=Kb~IC_z@@45c+|>kHAgma@1v39Gp=L)n%As62bET
zXc<qf52*6-1Jv;lk-O|Vn!HY>nzc_e#{!qhVKdy_ZMkFYq1bK$LaVDIdgD`DC9&-2
zc+Rp!=iSq;T0$;fJ2@lPlm0O`M()R5$JW5(_k~noBRTwMc}Tlj)cHFd|0p5pBenwF
zRJnmxgH@kZx5ad+j@IVm3vPv)s860C^;;;cd<0Kv4~%RhL}qPvuPn0jYUfW2%37-x
znHG$jnqg^coI1`+Ze<&J+M4Rz(M(T2Axl^Tqu1}j1wt?Jgt>BoQ=q%LRb}wi?S8|7
zo>co7YlYR`GAJ(iJu5(h=h6%qvGJH*x|!_8xZtQfDhjd7%i`7IF;@RmFhbzGdjQx?
zFt<L7=x3V_vICJ-ZY~_j@;P3ns`{u>y@LwvR-+$5jcV?3$JDrnly<OxHw2WGS3LXJ
z6IaQTN3bH&-%OmBlfd#`=Cu5g@uZ?VCOh$2XCLp?Uz-8kJagjGe_t9W`<7AIc&7cH
zQ+<;<-E})bq5gc0=6pUyr@>-EMPsfuSosOm>4()UtZN<@ckUn7;L+`q=W{+mOX%-Q
zS#q4y#zxtxh}4|mM@830IbRvxqjMC73CLVY8tUhGlYH}!vDoy-q&!_uMoes7WjWsS
z!_w;Pg7bK^&SLj$*-=S?VSaC?jQhXYMyz!(8_+Lgsl{y=c_RJEu?X)>kc92LegEXX
zUUt}4p#1LYyz9Y-oMfE9yDZH?uS!<$a_m-!?a;?s|N6CJV`x6j9EPQidrScGrY)BL
zM0QumDZ^)gLmyHcPi3y8LRG4UAxP=*;QBkZ{tm;!$d{Equ@u?L<eL2Cy25oJLLbpR
zQ(}>)XtLbaj_%fRtF@33?NuFV4VRLrSvF^ac1q7dzKGGekpf<7Pk<eODs{i1l%LUf
z51NGZ5U<v;sVZMvdFv-fnGOp0v#C=Lo^`goyw$_^zRlRwIo8z0s5$A(vz6Vq9!*A?
z#_5i0YZn<ER@9{3uT$N%y!Gj3HoZKtIiVh%TJDAM|K0@<<^WV@n`3Zn_n#nO)I-Z_
ze*gY6k)<grc1$A2H!7L&>VZAQ`x2Ea_w=nncsO<*>j!Ab&UmM8*nT-w?%Z*mOpPo1
zZ7RPeq*x;jc&)2z+#WtcqJWa{0d=1EO<X&k`U@zWmm&Z2on2Um)|f^|vwIOTOY%+U
zJX}BgW@{kS>I{Iu;@Sy>YHhH>ox$SME*!v}Pg`9zzhN68*|0%K4&R+&1iGJ`x=ASc
z*O8G(k(VhDDbhXAy5;GW>q74W#kDjXT`+>{#ShR+#JeoAp@>T@z({O{>Yp~RZHhIj
zRe1mC-TC}$z8iHyK6%4Z`ZCbsM&Y%l`BIHB(K|wxc}hQCV~pqkugNR#mTSoO5uM{Y
zLSOitWBV9JMMMul>@5F|`<3ZSk!_PJ5Ou&E5;o>`Zn1ec?_p6dn0sfks^M**r3BM}
zHrtWM-r@~(CpVihX{0u`lhho0XU6_|_haG=s5?^^eu`V|v$`UUpx}1)j?JxaIclp6
zaLbvAO>E_ZD510eWu^eF!W>|yPo^V5K7FYhhaC!D{IU}6J=%dCQalQ+RMh4K-eCRr
zl0&OKH<m!5kv<kgY}M{`c~lbZj#zk!*VA@pM8kdznNp(muwpruu6qO@!9M$nUr6g~
z0h+5PS6TG9F_!tKu)nf?DSzvyw$!v2E`N^B-{yOP1g30J181=!p7&!lj*AbU=7e7#
z2GJ|Wf&wc9Jvo^?tS6|fG5DrWUC;YV`<GbGRrh$tL3e@+9QUl(=V@ozQH+Tr>?osW
zF4XfQ_ph7}V1zMg!6CC6fFj0k6Kye5^}iyf!tJ8fQ+83O8_-XVUJ>L7%Ts@9m)m*Y
zH2CTX0>?jftD}O-gLGIN5T1TxqSbU41gCz0JaS|mWUZ_ksj@!b@#U}mHedjy1VLs|
zVaZ77Qjlz54%;4r-<Dv&T6DcZB|Pk$SDiSH+UtO#w=;}7rNXOGrY=e6IgWt^0K||Q
z9b@wd)hdCK#`?C)iD^6CTwl`9#8)y=-uC8b-C)5LS3K0;>LjnOx2W9Vv^wF!6W$&e
zD?S;&aX-m<cp9<CZVR#dlNoSOjXq?XgtWv#2pu31QV@_5D@@nKkcaff`QbRsR`PO7
zB_)j&S0?jvABt}W^&CG5Yi3%#yPMS_A&>^X9aozxpgQRlkVzeW$#*dXYjqK^iL!0^
z503m@1fFKce5!TzA+$%;4HXqNfRQKWjd&#JQ5&TEA^t<s?ddN;;Lz$Lth|aEs90zL
zMFxnja@;a|P>MK7rWV@Vfgi{X`8k6g4iJh^?C_Yjajz4|4Cm(d6``~rxwU?-kp93c
zYR=+Xq*h8@lt7MKXkQl9t^F{M_pYkQGH#A3PZn`ey2vV}!-QH9;#j^R@06OvH&7tQ
zr1<m1OXbl6VBD)uTc1|qW@^eL1wUIkoqwl1bbu<}^gA_7CsEv%ggRaNL+XrlmP_=>
z!LjmC(3UjZNs%H=opwm9T9izzNI5izT*M<O{D*vq;0hbjKu6rpsnrKrR5X2ZD5w2V
zpYMt(=uM<I+z;Ky-|wY?G1UxPr}L>;xmMqA`=jdx27R8{la$s|Em?feq+Od~f))pt
z{ac~gOOCF#ks6y`X4SPjI}TE$)Zemku(|>SDoJa3$9$fdR@afcBc5m8zskp?Bu5Bp
zeSUPBc|%9nB17h4J1-RTM_3i8vK$VypjrzW94UiLN##OcZ2t5@pB$cnys7<x!BcC%
z8CsF&CEr_PPUfyBknOG-SDOQ3xv0c18t{RmM^a!7=SrGXTnz+eBM^*K{F`x1(Q3K-
z;RYL}y$8>>2kEXfDw7wgdhqy-85l`@kXJBjHYR>?42lX0Sr``p@*4w|f(I8EYK4t4
zRvZZMhwsLX+6hUXzUGPvj~veAdV&*5$!({D83HBnmJKwe%9DS-9|>qc2u7F&G?R!0
zi?E<AJh{CCcmjsGA>}9AdBD3`-RbAbw6*syMNvzmpLf%7xRjCouiUTJEXAW8NquD`
zC(J%pv13G&7_yD-zbn9eAIwACmCeiJCagfZ!i2il>Y|g4=XXI?4!W(q2_9P;Z~b<U
zVRtglae!TaJEBEfXKwCL!<U8GagoBJ$(yn*HPLRD`G=WgH{{8d-$ubu;&@2N`Q_QY
zX+fYAg`glfEbDB{39lF1U?kI-hucKZ7uxbLsIodC_R<ouTcE_rsn(_SXGs{7Zwefg
zyho-CRAeGrJ6g8;kz8sP%|4|p->-r0BV?bE9#Rq@5aRgk<SMtW&)3XcmZu#_Qpe2P
zQ>@Cik?zzg4c?-=gk4&rSa83QS~>*P6*jVZ%TY<Myz}A&QFS2TAuzcrY>GX9`Mscu
zwqs4lB{^{A)0u<)4pCGWW$$s&<)4iPsD`5lVqHJl34_J-F-J6Ea*n!^N^vp&Qmn%I
zfXpjwy5SNX4~zFWuBrq{?ao+tg?r$dCXsG+AxPxWmhJ$|5!$+CXgggW9wvm`4$t;=
zSTu?By4H6y7`!WJ*?DZV^Ya=&JlH~Owl^D2^qt3eRLcP62P5!B^$Xp|q5B45>PkLH
z$V-GXqYN!r5)e6OT(rYF(&&nd^rA!2C^2>DuooEbVG2?<7>40i@^P;z4NJ#d>Tn42
z{M223B|4Tb?tl<4+|^rnCD$Toh%`UD=__mG;*Qu{UJJaFt+F)^bE)2^Y3Q!FdSI(o
zOQ5;>82F$)8u4YWs+Az0crp$hT2Ar5aK~BvGOA(^v){$qA<jPurZdWHK@1dg=Ex<N
z$c-XhE##eeN$TE;W{bdk(2^a=wBH5S@MDk^Mx_Z=7;R!~^hETLcOBeD^0f7E@8mp<
z;<?ev)pKVdm=TU{LfAHSv`n;0g98<%cp14|q;gq*gwPieVrHD<$8jhbAJyZ>?nq)A
z`#T^u%QIO;lP)4WH28;jTCcPIPq`i8*?t$dW+#a3-sIhF%)Kf21k9Qv)0*2;<zl^L
z?;SJK>|fufE?!<U1RcrA=;9VSDv$-l&Rt7FB|HKzH5PXBhixcV_LD(D%ImA~K8$PL
zLd=}+p@sdB@fE7qTTKx4N{<?Oh556>WZRMS@2{ye9L>SRBP}!UbNKG<MDgeA<?F?>
z&9pC66!_`;%`_<)4&0{7TLmO}D;qpr{hMA_?U1=T)D~~2twJv^7@br`p{lI7EkWZo
z%-$lW0Yh5C5m;%i&1RAqn!!ER1#|tmEen<>OoJ~0SU@k#0MDpX1$jWlkFXKMg-C0$
z3b8CAJf6}X!`6Gj;vt@S*3=|ejowo*%zM7tY`6+_+>BYm5nEY=slZ3~nxwdq946J>
ziQg??M}BE{WK6GxF=0>bGVelZzjlJuTOP$=sAJK^<O|o<2r?7#Y<Xx6{rHf}=C(_z
z4?PLfR-@McDH*fZ?dJ`l&^dvYrm0SLU58M+VH{_h(x9e=acE-|4;|fzCtV&Js#!d;
z-ES<(ym>S8D>8F7(rDt*d(%(bn3N7a0K8_zRskC+%aJv%Rnv9TvlHdeX(QI`kA{6u
zTdCw8GY3@dIb|<hh~=c0zEzXflGokOI~E%7LhR9!)ns#9G@e{}Orn%l5xl{BKUy$3
zCE0tkmca|#Q0Lhix&tKDJhKz2V*cr%rSI@(TSd_Gk%j?DY%z~kzWJs*9=s+s<)jW8
zd}&@@2J~|zE>+!r4prUib5al7H?qWx3-BP}(yD~?#UEK1(hj+Qx685v8&pFSvR3H2
z{oOvelc#Ctry$fbzDUQ2RoP>hm9cwd&vgtb3b1$@3O<lY-y|QBq(t_}Yes!_DA)XZ
z#WI{wREry@Zome@2Mz~6UIISvzHffKnSWmPrvf-GlEa#B<Wof*{+--N4i3!zGV|pz
z{3@<2f<vP@EH%+SgCYzO^?n%NEndovlO{4cgfHnPcX4mw@q69gB21tz8Xz0NnTk;o
zQbIniHbO5XK#=gmi%onu!xxjP_sxM&g64fyZa^8rhX57oGN()y0(9v?3#kOQ1`Zwl
zJ5(t_Lk+V!KubQ6Dd;D=1;X;Z5N?pJpWvAxOo$UyOTKk+0Q~ml=J_lEZo?fg1LGfm
z@B&2=J7IBtdrXm*W;AktYivM5lFBK1d8eUx%bA;huo!rIz6EJTeuWNc0<C49!|H~o
zxb-UYnp%ldfc-0pNXb}7qJehoya#dx$jo_`-8*m$mDcps;n}N#qJ=V<$b@kGE&Z!&
zK{cedcXJNVwH8R@m_ukxy#w@Pbn~gdKDN%uZ^3*A9mzUA91&S01R_Mlh9k6$RNw~1
zzN}h^slD^JMzpd^)295_eu;Yjd1!$;n#1Qj2GvJ!0p@e}YRYo7hZu$j!*fqSzfbE=
z|3_B(c&#;CB$dM&pMfcP`U8mt`AO0VmqiYXHrzzHb+Y=!VN&rlo6S+}P}bCgMg!nE
z<Jyr^mjJ<oL64!`DYT9)nrUtmOE5>;n!C{ZifdjK+s?`&eKULR)D-^v>1@|hq+p5S
zXT}WN1xI#A;!6!d#f*4;GhNcJP2WaQdOpDrJBnPxUh&yl+nqJFW5uQ!TaNowrZ5a`
zk|$QVQoQtU65hB%{Q1#DauBAukPDji1H{>?7<Ax}Q|5L)xp`KVGFPmSiZ+EtgxH~?
z8&`ZHAKqS7i&|+;#JaRuDsM$Quen}Q#R=?5m1-(?{!~HvjhF)hyA{oocl3{bMNZ6d
z8M>wN%2VUSVtwE_hbTj%dM)mB6~$VcDdPC2`6D)2-y@E$iqjI4k#+a&5=h$}<V>W%
z0rtDhPjMPC_K4fsI-1=PSJJF=wX1r^LOS|w7JB@TR%s`r>QAERbn1ie^7tV+&J}dC
z4=GkH??%ogI`o<7^wHJ4o*9)e@{HCu1TF#>?cdYR(*a%A=^6dOE}W0)8Y|{c1B|Eh
znJSw<A)QUqKsT7hlSV;@US5B--Oj^(O_=9B|6U${AEi{E%aVIpFxHcGS@>MGM|*>=
zFsQh>or^Vh<?FoN3@A_3s1{mCN6!HL_{pdE?N}6dyJHBO*p-tIyy3o?)vErGFrlI*
zt(~FyW;Dk0vIhU@j4&it=6{m|`}gC+0yW<a^rkX?JmT?`Hhu0Wyo+|Eo*Q{dk>|HB
z)WdtNEPB{yPS-4<sd2|9iauC=AF?p1F)A}r*J&=A)T7jn@_WDnBUE}?4Ol*5I=)z8
zd;tQL)OIKmOz^aR$lFzLVz|)QkgFRMyju2jCZ9W!GoY?x>Biw)rP36MnMrR8uNfFI
zQiEK7Y##5Z{`y_J%<!5LRmF+$5C9{udH<jrhh*$;?7>AA^p8fB6p9NNSBT({n@MCb
zrD6_=+2c=Sxn@ejfsH=2@--5Q3F`8gxkP$e6a-PdE2Q8Uo^VgeHu-<Ui(+RY5v-P(
z)o^Uzrf5pn^T-e0qA)e4#s(zTu}U)6b-KF$-8Piws)Z9KFR2u<M8)Nn+I4OPcuR11
zh5hF`CK5{+jNSsuYBQsc=|4h9B0P*^P$PAB2qIJ!B|_fDDB=?_%>T@d1;_qF`~t|z
z!VUD20eELmbOPO&N@`h|NDeueR95L=zG*>x^KX6OC-`SGWwgY}RG0|SILFDM+II?&
zY|Fv>-n0iQpI2Q|e_;G}vUL!|@l@uC&`1ZQu!vYvx2jGeVrBT?NeH04vVlmaQS7I7
z&Q4*U^4^0@pPl*N;;y~;BaMoa8uCcVC(T06N4jw~2cs*Sykhh0v2j=ekY#o9&DTkr
zhepD>TppNh!HjX7-Ck>c<2#|YVOUE6jlWWkSIFf8qpAq~n?+M-+xOliXI%wK$Cief
zWt68g3@^d4kO!=1&%-dJbSnHyL}I>i4`~H;RF%+(C<Eq2wr=C75#BUX3QDX6jD_ms
zqUPj~rWYeuyg#nrE;qj+b61gp05KZ;HhUiL;^lEE0-TE2Vu#MF?2>>XImv8>mWh=o
z0DdaYzoZia*lQ}z-t#8Y4ko;VNLxPHbb$GHMs;otvEs@5l@&8Cmrhl0=%FFU@7Wq(
z(v}I-pZx<GHga>>-sIO;BMByw+3%%7PG<t^CSii#u@_q~8!EZ<lr}_KkE~%osi4l3
z!e0YTTe2d{fuJIX(ZTb}xmzu!96??~poHp>pu#%_=@5Lepu8r4q=WVHkAc`{k0ObG
zy;o>!Py)9sf5<JPMf0b&2E7NgP%Fql>moi2eCMNIDYcD6Kyn3?;biysZ7nOZo+;ng
zaeLGqguQ%(ySOm5fv3!i1n#}P07X9>A!Q2C&H_!p49M3mzWc&e;^=Q147uZ8U*_U2
zeD!}$Kx1U{q^B~D(nZiAf~HyUBq5<NGPLK!^O7lIUP4R82$u}d<<E7MH?QzGw*btZ
zdKQW;fswc&#d$r5#XXm9tgRSA%oQ}kOYx;YZXP52#u8WE0vd35MFcjpSgH6j`qUi^
zD4pRsXBl)jx_#v+7dDVc9Z6Vy5K(db*ReefgQV{KGc_yoln^Ql2?8?p!}bmWZenZl
z96F?lbosU+HP^%%`0=L4*yTbUt5dWG78Q6r9i47gNO(J(KR0lia(EU?OKTAgU$-WY
z3b{0M^#hX;nYt=Sq@a+G@RhRA351Q+KSkgguy9HSMgd(*=(ZJ!wp{VhkPeV~5XyaN
zj0+IQzrBCGz?5K`c$RI&<E&($@`936BF``VnQ-*ca3!mbHLU0Az}^kh1kD>}$-q{{
z?frPUZCV~Ug@4~WM&phYY6lZ;eK7)k-bc#J3IF2Es4)U41}{Qu#@^(y`T8WVYf(XA
zp0*()Yx{>w7<@x+7Eazifc2e1Pj%~)x{Ovb2Dsk4|JL3?1F$p3RlVu%tK3Fazu&RZ
z;2RlJLkW*x?y#n~e!SvtDH+!?RO(ohgSQoag%EzZOfr4f+1ZW_hE)3@bvCcSDlQqo
zt^_a}))X6bDc~c5C6{A^G$Rr;J+%rNbfTV$?2RdM;17{92>*)pMLg63m1Q@q=4008
z4dVC#S&f_>+P|n{`Iq)hp;A{LZgv6fIIm4Dx&kEUaU)|cT16-g1jFMkW?Z`6Nfphv
zhsUF#Ywo_yQor>wStvYX9MU2E2f<X}>&T@(;_x&WKmy0MJCN74!j@axVS6FzCY++r
z1~EF&9!f$S-GyZ3@Chkc(X-r;aTR=c+7&cZ3{E``;tY9}8~QjA5#}9tm4LS))&8Ho
zgVG$DxI7NPx6KfOsdcpQ*i#8%(Lr1GnNIyHyKqE`qnj%ZY+L*>|FzN6(IC@{7Ss-+
z%*16G++I1z9&X<dbd{_vEkf!}aBT7cABQ<|17TMrlDjHgtfi4`S3jXCwWqQ8Nk!O%
zA^i9q^rmU!?8pijjqO`J^an*hwLM4%`<!<D3gX<^cb#Qu3l)X1<uI?CF?!%qpm?}M
zfoxi*{AG~MY0)~$DJMb`B~ly_pyM}PU16>?T|NwvdTSv6>6s4W7*YXQ%rGYQ)=}N3
zw=1&BN~wl9^VYo98eTTfb_%2`6_f|&DU`GMJ6OsA%jppDMz6ytCZUTgWe_<r|9wRF
zE^-K&acYXtm?|Y8tGdIgk*A8JU4H6M$AC=h6?hCZ-S4}&v25uwtaNW;cM`yX->UTD
z;P*D>w5xHLaD=QoZ(3~d&?K5M0fBc=pIfv-82&+8rO%aC#0f8+-tSUBr0;{{h|~}Q
zpFa1|LP9~pmXDKJ&i6%Ghl4an^s6P|&q3Z#5_UeJtHZqjk4AEH^9xD<WbUb5Oejb1
z2*t6XF}V4u>eT7==n6$06LP@Y-qzIp&uV8zE_))`wbck3$k1s2Z#z>YVc{xM#(Fd|
zWSE5Cq0<^!jzA4y7<YF_%>4?YF~7Q?Q&vwxs{8B7?}vwinhUDH8W6)o1b<aGAZr7M
zzc^gd{q$GjZ<wIoqkv9+%*pGtmD+Sv;&cY+EnQb+Of$Z6IH^EKPav|uak_R0ZNXCN
z&7Zk;Tg1ZsEeb}WN7)uu(bo-HH_JzE<En0+v0TvQePwW&TxAuM)06fI_{F}<YEM&G
zS80XqFx<I>pG14eYh$C%z5%$xc3?|62(|FdHvV(RsuNVtzEf6a2UND2*2i95EQlR5
z0leqW8v&Al`a(p!j;!O&6nV5nCIG(ELy3H<DCjA}A;xB`;Yk2%%#14^MJOdmiqDbM
zUnGh}7UEPcGDIVz8N6quw~Y*r)uVB3HM~@8)~);Hq$-yRNmP))Z&rSr5dKIdA9d~R
z#1M5^@4JkUWQzPdwcaD!Ws>1NTh8(L_@sdCLw;8#{0S?Gy*+J{M>7=n6D>x^4jv1K
zyZw`|r)NmMePR8)qQ{6JkDN_!BruZ?wSIpCV)Lw5##5<?sWdH+x{;$-)Tz*_<6-f2
zeSMI9>{ZBgdPcJ3kHVDJAL>i)`vg)Axh~|{%xbD99%jfdz<T6FY&mdw7FG5bnlnNw
zsRNR=@?x=2T6p=uCv+{oNtkc5=*;AFE%e}Q(ou8~EF<S+7}}h0XkJDQ%)k#<slM>o
zQ8v6<TA37he#XBUQv9!a{Ar>1`x*WMz*NK;AD-QrIj>KBZX>f&5Wl~oN2@rB5#PG2
zeh2@Ce8W+@-}!)+Tso~q23!ssPu0CW)#{=6Uu7~3B|S&Gv=AC5Ic$<>U@e1VM9_S|
z{&1;-iHhy91t%;a5thK>Dk)0b_dbIfK{47r1yplM<>jl2?YRXdu%%NwaMYCqn@l;X
zq2mwc-X<t|A1i=LIHspz;P&KooM2cw%Lqs`9YcbiRj@KbEa&fox<J5^qmClC7vma&
zxM(i~Uga~pah6?t`&e~IwIHr14rV>enh_f@dmO#k&dN@&gR-zb$HI?)<E$zpWc1Hv
z1=V0#+si*%^-A#dB>cJyrE<yWLxCkL6RYr@1*s==e9vl-F89U-BIi4syI3R;doID-
z_vZ!?-}!AW;bI%KZvRTTR~pXg9B)MwiP<DM%Tqth)m~l-mu9O5n^Xf6Ge!78a5!Qn
zh5FP$PQOw=hx^mnj3qC&_Y|10<meWc8+I%gI+A7-g>P?LrKb0m{zO_z&6Fn^PB}k4
zh^6xfk|oY-ES|9c5X7je`J^l=V!-1;@>w?<_-bq*;n^0CbcQ{rv6<-2jk4b2_6bNe
z(?FJ;dawLXP5a5#8I+=z9g=6MllCpR6;sCTdqc?5U<;2ykXjX5aL>azgBd1@b4cQv
z8K`eW4=B-O@_3Fv^WjeAtR#HoUku8h&ty{pr2AqBiz@7hg=TXny;yulIYQG3TslKG
z4#6No(w8vJK}C&YrhJVAz*B58J4WCV^PFbbPEG0LV37MQj|rVp&n3!5Cs7h`pW$v4
zO@gOQ5B^C=O1B+&*@F8_6B{99NgKwBrHEU4Y(eZ>jim`U&*a*Be!n?}S!zj3S_+NM
z`7hGvbM1-dy#5@k8(nA>t3mmSlj?Rt4()>}O%sy)_Euq&AvH_|OEZX;3~$t+{eGOk
z;TkvlR7wQsSIDrUq)Z^M{*-N^)GDDs`+(p3l=wuB*pXuQwhseJJPMbIbre$WafmX$
ze`^F)at~2^2@5S_AR8F2yN}2a{$1M||9=AFE*;UM+YTY<EUs7-KX%tXHsEm#d`zT3
zaUq@m?3Wx@bTjC3(a3QGt1`Sj9HyPvlVN!^aYgbgV+A@4SImWV_*F4V>qL@Cp62b#
zswBK75RwLm5o$IHj4{Kq+|V$<@X&>wdOuf2q36YqGjru&d#;6{1rzj4PUBKrGB`TB
z_&S3H0**(E{j+xf{?>nYd2tx-PfgD>gLb*|`QjZYUYMDAuuu-Ak5*P5Re^bV%sJf#
zhP%$umFL;`Oor|$=j?0)wDm7fJ!4^gadc&&jI{TUbdIh=@pKW`=8B-abGGy8O{iO$
zp6XU)#6aiBa_3_#j87rXt45upQ(XYPll`O1bpUsqC>}Woe>&;_*gxJ8woW*R3-58#
zCWYTWgpP3%vs*rtj=qD`VPYQw-q7JzIPJjEK`1r#c2yESe0Uq;rLEnqklUAy`Nkjb
zgqD5*e(&(~LmXnl@4voH@NjaF+TA8#frNlu<L=a+AVJ~?@pl-9_~GeJKo62|l-d#W
zc_u?RI^X+G@81R>AaKB+`d5XNaDd`hJl)z&tfIVjpICB=hW+iYJT5N&-P2t^aKd|G
zCt(LMb$FQKvD2>KN>ovJO_I=P_JGzrK??OJ9KQ!J;9yNx1>qCje9`1HXnI)+k4K<X
zHx8cLpnchCaOjj!5ml{E?-+`xD^t6%OIxfPXFHvs)jg?s{M5i0#^#J#79LDD8fLm-
zOjq0Rt_K`CtLN36;uXveO%-c3FulN34mzN&7D`8YfbDwKtgV6xT{+x)RSD()7_r_M
zHaKs>jdzNVM1B2oUs(ysfUt4C2wo318vgm1?bF$S>HCq;ty}buJ)GvjkD};3?Ep6H
z#jV^vpE~AUxS6tVp(F$pIMSvc0w3f2p^%N+7RAz*m;c^%B)BAqdSkmsK{p3!Q`LYs
zEPCHSBpv~udzF!dUus->NQw~NjHN+{T4|ElcM=fal)%5a$}jmKzLW%M$(@wqdU}qL
zC)~s(zrh7bZxZ}oY1O;S$3I44F9ebs_1xGWsXP#_x<As0Al_|e+so_SOHvYto^VGP
zl;R9{-VLiDydDsm*a1g#Z@Z1t6d2y3;`KyJ&&Gv4>(7Dk<{W}+5^T;AxIYbs#YZi;
zQPaMg2kYdG3<z;9J#C>E4kz_)x`}FLv98ka$_m4a4FK)4NGw}?ZZ<oe&^-#U&<CB*
z0Qz3!_IX`1sAzh03l8((3UoBJJDg8U(C~_e?5!QCgqA5I7zYP{`ZGRryw=TTHdr{>
z`tQpFSevRrV7A_k(`I7;03ZNKL_t(HKhaeU>kMFgSqseFS$QWGiG>k3p%6eKWnsXw
z7nk>7Co<CPvLxjE+W~I?e4jv$dBe%Ke7gXC8aE1cOO!@i9U;GXz*4z|Oi~GC@dkyJ
z@8@GTYMG&J*+VPn``H`B3mJqE+YWp>2G|L})(PV9B(VL_2fRCY?gR#fr#nh7gajQZ
z?~Vf;1YMhN0=^}I>ak(SI+x(~FPgLy@Vila^~Nc45RP$C2#E6PQ2yJ5>bQJ8AY{4v
zmfpH?TcI&#G@9G%^Ais<b*=!yu}%j5#oqP*G?iuX_E|U*aTUfl51}2PGOkwiEs)6!
zF`&Gx6euhsWN1Jo2;yYqn_`BvFltw%*?nE8Y#p2lh|4r)-Pol+0Lcczm&7sb1TfBK
ze)J#EU*{j#bMNc>(o&!ZB$F8qZQtv==bm%!efQIIzrDjhD&aUnq3E^&J~-RPR>9u;
z?eIZUt_(uvXq$~ZcAMR7f;6~!T?gq8-aq`$bSSP#1Smb9W`HAKmNt~!i-+<~U^*|t
z*&G4Ny5;Ev0Y<JQGH|@F>{I(lIu!m`IMQ8jg7mi2dIPkhj8jeM2`@ClQ8@OX!EU#u
z%flW4nrkT_8}20OA-$&cYSH(Z?R{x*@cthG9(C)KX^k_88hv1nXY?(TBAI}62Kixx
zzjeg}f-u+-5FH4@=h#v0@PQOZV|mVsO}z_Jf`h_gn3(T!dPh49L|zIAEABI}_ymR=
zPHzA~*o&C%f|<D~x9FfC9HdVw2gje|xY7M=$TbAs4zJfM_S1Mef<Al^lOeb}G()0T
zjZTZ`{`?Hgzv_3ny&iFhXF`2e&D4+pp7|DLcvgfC5p+xFl0EZdP7)LH<oECIdcvJr
zCnWBqqz7Vts2BOGY_R1qVR<Ds<|}Zj%>bpX6m*@HaImHw;;;Np`NcI|I7R?ja!ZF;
z%tn9M$Yy5Nq(fs9f-r}8LZPpLa+c=P&@=gG0j{?y!GEEk8!IFgyO2nSE6V^{>-CWP
zfYeg@gS}v{#4+LLji@7?O$?tTy!D7SOWT)NL1k!b!H@fT*d92^#^ZU-9@5->i(d4E
zK?Im{jts=6{iI-nLF(=V^n}<IodD>-A=xYs-q~R~C`<vb0|$!^*%MBz3=euoC#~{i
zCORnRW9*6ojSZ0EL{Era(INU^G6Rd4Y@H+#a1eyP+36J?{4QxWre$)1O8DsdfM#}c
z20N<c$>o&}XA88DARP|x%-E=O6KDw(R>8eIOyXqu(C$%~#d53!=}hkn60+`In`w7u
zW{0|?ru4>-vqua<tV<LJigRscsroH0QRtzTtsP-YAeSv2VJji=lC8bwChTR4v11qy
zNrDMU4+i!sDM?`y0pSt$PpA4i5mG1N7>nJ}5w`YT9F77@8uN>wvjX7Od1z;|?d<0Q
z&2AD*FwmEX?I(vFC_Xy?mo7Bsu=#q(Y^t!w<Jj_M72B3b<0hid>+Gv4xYQ_X)<aV{
z?Svg+E9^<9*piV4sIsCjyNQ4>welDUR+xA_NdkAjSPHxt<aOg7*OG|6JI|O~By)}d
z*P_2`YQ;bJ`a5vH4vMY-SgnG9`C1%vZpROZ9C0ilo|)(vp7u<PCFx0`0S9^>@7pIZ
z{=y?V#)vqVTV%Q%gZ{bKUaYq97lY#PqGLSp7Q3vl_!ftu)|E-WIOj*?;Ghu=YG==C
zpPinc@{+(D?zbL-Q`gHymk)w2aop(ze*E=w&6se;^|l4-dMBUxpHHO-^Db`y4R8mC
z0xlBn@r(LhN4R6_gr^4v+7AmcF4h}_eFY6wiCbQ*M^D&V+FXKptM1g6d;*y{70tB=
z;c#IO94Sgw*USrZ$(?Vv3j`<e*DDG$A+s<MdLA7F#x!s-XAdw}zi7VR4z>Y+dp7i3
z6&F9Tt9o*?Gf4z*`=yHdc=#y)c8T3a{-;Il&0>J!=JJ7(IM`RzLq?BD*<ZDm|3S6S
zUM!s*uP;pn`<?ocqCJpSR6bBcf*Y203s}RxW$H&ppLzzLz>NE;`#($A+-JN`1K8EX
ze%xa(3^`Z4Za<FU+|zD#HNdy*4*bxI@DZObceQwWy%RoV#gG@D1>G-!_e?K|?iM2M
zvAYZW&N<OdLg6stV|Q=Y(zM6(5><<1G<bMmZZ6=1E_Xi-LO#M~t8ihUfB7jvuOB<E
z;F}68Ings(J<gRy^oIS*qSh07zDolu^aodhKIola4zAz`a@_gM>Bs!>Y|kzTcWTFs
zPC)l2#Jp|IU=j@at#4byF=0NjkpbHE#DmG8ES~F&2W%rFwt>^D7NHHR7uoThrfh8t
ziA%jl^B1Hk>&<#8r!H(6TMw!%k`s9vspf{BNX^n9^>h;0?#JPm)S^VXSWd{=4=K~j
zN&}ULSfNxtR6Jsr@6}7BSL4=x9u}WP>}&N)iHH<IT7~b`NI|hFR5q`4v<c7f{E{>_
z6$D8MMbugLU?f}^=yf{rv!!Dw^n`OtZ?rA2yd;6B?wuV6iKmw*RaNlmZfA7o#)LYP
zNw=AQ5~?%l4BG+1PKbDnUfG<Hmfuv--QC<&yn6db*kkt)eWwWiYG1jH`76)wRb$q#
zy{RN@TB4k4zF>o>hLyJ6X}cP}(}c`?JfEFwS?wkGuvrhn>7SiOni?E-PEJh@MdS!h
zlEhhW=rRxCU=I6A^{2puW74PmYd7`xqRh71n0^N;oS^~9H{6RYRdes`ORbn)0B#+G
z8<9>qNsH5Mg5B_rAY|Y`qT~wd)W9)H17P%_ouzUFCK*Lcm>;ZT)W9=@g{hMR(CFpu
zrb_4<g*CJ*t4`4js&GZKCTvVy$U1T~ecZS=4Au15;vY?+|9?#p9-24RmWw>u#GjFf
zY(kk)w};UPRD39rm$UE;!^^>MAQXH@QOeN7t|6-uNGD=WG_0;MahODuV<4q}I4nol
z(^qn|9jO3k`ny71h1~!;o1(g?AUvSAT21Sdnr=<oCw;YQudbB|U;9#iTXoED;_7-*
z_-(NyniQU2i<RG;rTi|Uw#^eB`S7z%(9yWhHbrqC9$K5K*G^hkSTBvzI=R;seW*Gl
zAm&`vYiq6!v&*y)&077!`u2q6=w-7c+p43Ld11rCsi{<NY-J3wM$1vX>RkF%SgY5y
zXQOh*O4ZS>RByyq{jT;@Z^5v2c@`GPQ(xgA#D3qkyIGr{bKhibioP*&TmrrbkrVQb
zp3#H)NiUKYeaq+aH%`u&pbC=?G*M!Z^U*UUgH~CXiijhpo^YH-t}IJ7TNbAwiBr`U
zdWABpCUA;KH7VRkj?)MYd&!)fVxUw&ZPm)z5+Y@3i^|E@xv)|vsJBT|0F_^JhtvuR
z)hVZ~5-#k1hAfruj8ef|LU`S%4I^BY_NHs<o|Dz9m7`RldV{#Ij2x%6S*<|Lo!7P*
zZN+J{MAU|+DR5k5Q_?hIMHR<o{Cy7%U>gC#{aN^jl(k<zi=Zqek%CY@->+c~v5?O!
z`3hk`5GHINSt5lQEym5tFluvfM$0?eM>Sh4mJL;`BF>WV%b;jx8jZgoV}6xnUIT=&
z69M5`NfP?9va&QB2*PbGKt{x!%P^bQ1Z?!S&SjXj7&J$U#EW?`;L?~tG$$uVQ*X@p
zy?MQ2XK10k-cQaBqctNVwrgAX(TueO+y+(lD+3{H9)ucHtqsDgyLYKey?gH5-7GB#
zxm8`F?V}SX)@(GKIXR|VAEh0h*tj8bW}=xhMs+6Uyl-#B*rYO&*U`2156sSiaC>!{
zPsHd3&6mHuk^I|0VaB_GFcwdU82stY&v^Lx&6}T86ly`pZKjefc}RG7&?{N!J1@^-
zzVY?n%$L<4*Sz<xeSPcCCoGiLNO`c+O}<$0%fpA{VuB=xvb=}K%jUoQTW)*CJmX*g
z_tmvzj^+rd<nk^*yo^eW$S%Dl2@;R2*>dB*xBg}RKYLd5n#h*LcZOQ@rh?SwLN1qv
zqU(~))P-J5?P_Lr;zq)ttBQ)3Vlq-NL0`z1fyOGP7C|D_x{-*6Xg?V(I#Gve9+GKD
zd_5rv`B()1fLW$Hf56;Qlf1mQX=r9O4Y_Eg&OKjse)o4yY1|B38U)<L{zR1dK{5$l
zk=dm*4rIKh_xxZA|8UX7Nx*D9ntmR;e{&jvG_frCaRM;$X5y?cRx3Rt9%-r$a1WwW
z)6Yej4B9(`P<m3wZpx^-hn@m?zT+|Yv1N8g7_UiYr6(icY5z2Whot#?AH182`buP3
zL!4K{@c#mZ=zj*nms^+R>+8#{7hlTPt=1C?e*r?DJigjf0b`<KNkAe5ya**kR2A_w
zXwKkAj+rH@x016E;4xMSk|0q<z*<3e0cA8(Zj(F|Bwkf{iBYDaVuod2nQ6sl;be4{
zqjdQqXCN6f<r3%H;DH>WAtxdNq(I<Xha%5B5hRgmeW*yl&lF?FCUnZ7xWmg(R8_?v
z>X`!~)21bhDwt(7i^oy>i~V6D&ib9IdcPaMkPrn*AoAxrP!W)zLNNG6H%kc59N+uI
zYy!ahqMX3<JQ3me9;<J*gJ)Gc%d|eaCGboM<^e#2j6Em5R=_dkOcda;o=5IcBK;p&
zvoN+imPPC%^5ZA=0YtWg<&_u7Z|TW@7KGzi`^Zw`FF!K?Po4owfg(sq9A^th%iSn>
zfR-TQS@s-efxn*_VWNbc%d8n;`PEc&!6x!|Cj15vzI?g$`MBA*+}irwzPxNVw;tcl
zJc3YywB&GKIU@*=8g|COoI@G^u?0%al7{JmX`9j%g#xEr+bx4aXi&|xGz3c-ilM9<
zmL(vndx?_ma9A@<2Lr>P8J(AqoYBkcU<^V49okqh4NbsK#@8y@O-sWL%>^^IjvQTL
zOGcV5+ZhT)BV)m-<ylDW@CBs+Ml&ggRi0ro<xt?6%hVBwwQLiOgYw8_Den~g1v{>L
zdXG4W0)GvBn8Tg<vjE3;e&5TU&bbi5+nW1O?f}BT*((P+f&S6lTnC~~?G<1Z@48NH
zp5qF&(+;bBc)QqfCCC?Q0rXJj%n0OMrcOIOyJwkpYc&_Mv3Y*cbv4MlwOjZg3iwXV
zt?V<)fm#7eW0TBf=RQziCnbMhE4U7F-BGRZ>-JQ_l9kaRpbnC$fh65AGB$@Obxcb_
zyxr7!<WR#bamcW}xLtB4S@Rz$<k&*8)wCr5vEH=VDJA>)H2|-rS_%igGvPOY@WqQS
zTmSKyu-y9N=l1cJtzUysfU4ba$k#TbxRD5LY}l%~LL;qJ4Hsjf<(x{FlipGrjL&mH
zK&@4FUB)Pv8m=r`Vmls+n}jCT)|Oht8m1D%p|0r3jg2J5jqpV{WfSU!*TSI*2xV*(
z!(q?UNh!6S@Ej%g#!IbHu8~~uR&&HkQQvxAUrTz+UC|1M!d-b>!-9mH!-Wm6$jGyt
zU^q9D2`|=!Vs0Un3|oXh4m((u#Xz>gi0Nzq@m`-_{Lt^GYY6o|^pDc7@z3e{-99K(
zj_&IHMck>J3{GybH07x3-QfL?<i37%Qm@RB`J;CSl@8>q2lcyyQ6N1S9Ni*t#q{)D
ze0JBr>wyWh0It>*u5zUo>UV>5fcT;(r&y|He>fW4liI=HU|)jM{Eh|(_04?*_St_I
zMX8$Zr}rSfubfm7hid8m;AD~X-q#OKM$frW#`<b%Ev$3v%{*Pp<&BFqFO|~O*81v3
z%pygWrd-}mt$W*LVtE_k;f*fJ<5@(!X^8NmNQ`bg6w4^^IR2Md4k4NvCSz?Vh!-A*
zr0-1lO*7$(zl}lIYF=KK8<)QUA?L`Y7S)`u1z|U68Hr&uvqPiB7_SF&s&0#Pd#IJq
zbw)E2mHJXyGax<=HVo6Sf=%IO0nuO^G~O7T)(ug^5xtP+Y;@I&V2SQDqK$1^Uz&nY
zfEp+#N{-B>ZXk^{NU5Y4@dg6sPRTJu^IXqo-spM#P1v?e#zGO>+qs8^$#GWNj=><7
zOE?HRmZ7$m3?tZ(+CfVN-8BJ8vhwQVKiPTz_bkM{_xSW<4_>9U(e9yK-~1hadr#)G
zHD2EPaNluoHS5C4J9&J#NU*b8C4~T#I+cFMkoo>kow?mZ5np{gbpPNMZUH~&Gu?~M
zVDoJuTP2IxMP*#PK)m{iaQ%8@Z<9f{fD5-0`uRX%n_+#oAg6o$XtRbVHu(LtJHNY6
z_Oh?>rw?2q+fzq#j0v@Ob%eC+6|8<dRV%vzW&m?Qn0<OF%n#$XlcDl*IiiP;^G+z3
zF-%H|!4|a)lZD?{a`a%ED=urY(_Po7Jju4CB)bX>-9#)VQ)0*Kc1CUfi=B(Xb=$UP
zfm&RbvGkn@zv(B6mlGyz<&Ho5U!H>yKrVCLYP7C1!dFe-lGqI?`Qw;k#%Z*%0*!_B
zCRKR4ZO)Y9r6~vjK}(q^<iu83%cFcdDMU*_-PkG3`2Ap{=qW0q%j?BrJdE0FDj9ZF
z?}9|yD-#fMvoh-@4OJ|iuNI5TDI({(#aLI1+B-DQV=Kl$7-k?`$VB<P85|bd=bkwE
zRS}>_vXN&ap6G*6#-(=g=G?H(jR@VbRO!ZpY~F*N+t+NiJv`xX^+>FxN0GVRLM<!j
zZ#U-@w|aH8d5H6WdjFOn`Q2TwH`pAFDFZ<H=;UyO+357C&PKCBwnj+5!sDwWB4Pwj
z_j@M;+&e((S^8~lx6<4HSQW?bynxvIx5E9GUF&&m8_VOj8Xa~I3R+(Tc{~Q*phsaD
zJ?LR|Q|V3QBEsUFlpn+hGRDgUIVC@=LXpktkO>j0bul)!Yb%JALnAp$+7jA;<E9}s
z<K~dfA24&9nfw9s<fIu`dMNDn)WH(A#aHjEr!U|4{e0f%+iY8>h3ct>C)kVj=<t}2
za$U8N+r6kYd%ap4C6)rK9oH>7Dq1Owdd;Id{N7%)g@FL9H*JXN1FDxfnuJYcHQN;J
z^0&lZMA^rNB}q_QG_CBqXKBii(m)1vrYI4WVlM0qxN>&6k}7THk>w~V0u$HbC>n$a
z3}VaP98jV`oOiJk)3uexG=rrHL3S2I_K!;V|472Gy!XMMetG}jaFm|9T?#6;&VckM
zCE@Tu1l}AdPwQ&up-U>mY0f0s?UGu)O~N$eF8Rm>C|K8kONIjtR<`Z@(~4y*>j;Od
zt_JmG$1sfw6AuV87?OjK0^N<9BxFQl&g%>+Z})xEuwl3v7!QXcsVv!ohDyu2Y|QAY
zK2sttF}8ivELFfwTZD)oI;@yf!bMlW<)s57c%3gjc0qo-B!kX|hDDmG1W}0i&pig#
zkI~t)OEg*BYUH}iox-1mS9?*Ei!hF!ZHfGoy=tS?xbI%0F&<vFpV#Vef@wE}E_<1q
zO@rzR#G@BT6L720K3zG4Cp#LTNf;HPC~90@V@#TaJ9wg5C46J0P`FDPg*T1%&tmJ@
zE?ok)P7AHGsBv|J#Jk5Wh?`Y(n0TJu#rMW8feV{e0iG5n@l~!NSHI__aS~$uA!-`2
zm&(wkRC$VGlMT;u*8?Pqg5)SbWZ-bU<oSkZPtzD|Q~DPw&=r`QO1K)b!a+><^5F4i
zNsS*GreD%2x~WKRIxWbdBCvl{!v779ewDz{?;iQ#58rvgM>b}lYzG<vpA1LmaK@Rp
zN=t4kUJx;{@L&$+mrI%Qe1(YMdb?GdG3aj`C>pED!Hk<SxO{%OqL$`#M8Z{~LUGAU
zWh@DX=LDX|);Ya4pm6kNS(p8dEQZORYeps%il*@TP>?IzdIsUjb~Y8vQBF8tA{wf2
zc1o4mTd_q_I*6f_&|h{{nO1?6|1N8Dbp7Yb1R2v=Nu;!^Sx-1&4q9zm35$PEeOuh6
zhk920>%H1!YPS$!(#SorSU@49C8OKfOS05{4gh<yPYB!1(VDe4LhNV-iICr^s%rHW
ziV9EEUV*<~+|49gjkigt!o!gSh}F%t$;t~^?LCLH#mh{+xO-K+m$7b41t{#aRrIP&
zn){Y&AwXS{_Rks%)i)zc-YTAEE^4QwT4hM{1VS+$e$YKd)}85C7EFtaK}ugXEq5)T
zOASrJ)kI)*=1I!JvOPs(u$+e|R5CKWe%-wEk8_KicTif+X!8Rrm`SHp0@&<wnSy))
zGD^sP5gG;foDzlEc^~*+QAX&8KYm1_;F0aQSp3u^47u3jJhj3NJ#G%$>z=VRr2N51
zmEM(!I~Jz|s8Kkh0p!eS*hTu&Re$rG=v+BtaJGbfIzpCsT*o+Y$Y4Q+%7I+woDR1r
zjzuj|)MRr>M<Q~#zOQ)F!Ll*r&P9};+US%~{`J7*mUPvAXUGB%&tIG7dP%zR%#*oT
zqPd9m%|*&bxsJC@U9LTKX1Fqf*(u)=HR=9;_ILoVYVFq1F`PX*jB+bL%N<6Aqi@{8
zeq-k+S_vnM&H5y|Uu!?8R<*R2JQVob+g9UwlNE5I*lul+Uad8%-Nm^2QW6>5E4F$^
z$3nO8>R*MuF8?CeX#M+JRvSMSK0B(9ern6n+pp`zh_q_;Uajy%eEIyOkh?<7LMwXN
zfMZh)M>T3%rNz1V^=JkDWvA81ReAiN^=z+o2CK!Bz2Yg^e*wth_cRHoIsHSCqUeEh
z45dOs&R^qbC7f~y!;2)I2ej<#OY5ajnXtz($U_=~(92%CbS0DP$6PFz*A4GoU(U|W
z8^K04i5Jm;M)c_t`4S4@XVnRR{l%xBUmyM8^?&@msr2_GOf#a(e`?cA!U-M46DXBj
z@0cc&?<h(qkMkW{)`P4?WLYLMX2hUE)0!=NA{2PGGE_P)wb6+k<XK+uLnq4uW1z%k
zZ1@=X27ty|Y?_eXEGH@zuJrS)00i?u2`iEwFL<WGGtlnDB^H*H(D(8rAJ~}Zq1Inr
zb9DK}GtYV@HklKobTA9e_1FlqNb5U(vaS<nQNtSE>P2*AhmFINsD;mt>&?+FfZtSC
zqWTuTSZPM}yDSe*d+iGrUR2*!8!V9s<yE9x-{0x&LIH@4QSTCKt^MXKWZ;8{&IxvV
zJH04M2CttSckyn0f4{dozL5|t)(`8ghBVne+&>c_{Wm&mQ5$Od>WXw*`}-%CV?!cg
zAv)~U8w|eF-f2eg#wCo}z22zK@U32bZ<a)7434Ocy}583Ii5-0sFTOp_`vh%WKH@a
z=xS6llh?u8;o5-*@&S!O#|1$2<IZ)sWEp84B`^(14;97K7*=<bLEy49URdB6DPH(8
z(CFvg9ewm@+_-jqe57M0{poFql*JFvNjednSpW%614J)TTqDtwh<@MnJhN{@X54U?
zX3@A|9kcw64Mdc~03=CZ0wn4=rmTifW1MCXfQaaQFS*}zAxI3<Kmr0{c^0Ozl<4cM
zB(W0=22dJH-eVs?Vgv$=#Ix70KqeV%+&GsA=$L_sepT|se4J-BlnrzwT#NM#!!i*6
z#@_kGHg(-`{GOX*A404pv32mA>kE!u#bDpKTf&qeV_2^;$4eAq{J@2F42bwwvAXT5
zK~)RbLn5`(h(y)>sW6(wLt6<|8WpgIPODasr9O1-_A<p(yd*rKh&=Rx$DMPpuj4?R
z>p$tF*}pG>>+5^|+&_H$JNKOP`yK!8kM5mdb-P(5e6F2a-}qS(PChEmJ`el%es|*|
zuDioQua_Tl`@+F6JAts*ub&mK(d%dD8Fu<Y4?^KT|05johgnnb#9ck(jS*H<IP7F!
zhI~dwR=O`_zqR|5d&BJFn5puWk`6lAX$76UR9*(Vf)J~c?Q!`=-rxPr+wX^cJcpCp
zzIXSAR_7iD{ULT={Laq3{MH1W`YT^JXw0z)hWtTx>)G+W`n15{Ztn%-aee3vdxJrC
zF~Jaf46LqT$j2WLdtRL(=N~`)Fz9uIC2X=|<^^Nw_6uw0nl?6flv%?6_<dg8^P`iO
zzzF7jBJ3l3EBW`ysY{opPF@JRjlxSk=<G*YPh)=J)ty$@x28vnTkoa~h2Oh;is%2^
z*`P61+wIj$cd`6NH<HU3!szt6^kU33zTv;<HBVn~cAA&va+glh8w&q^Zu-y#_Fs(u
z2vp=`2SdB>-n(UVes=o!d{bVdx9sM_zjcLYZr{9l^Xo6J-tzHjsh#FQR<k~cZMw?%
zbcch#zkd794rV&szL4{?t9QO;S?~Ol!Dm$J^O;w`Uba4Y`>Wey%$n<0aP^CuJn1)P
zQhs~9#xJB<r8j)zw_m+}m)R%%riH@qe(J64PAlC}cFH_~t27R5JOg$Q`K5bHlN8<V
zVdsgzPMbGPzh-u~d@ens&$vs*Wrh8&wwOBlz4ne)N#B?&liPRp>@(e{t5Z-r{f3@5
ztTk5UD;3bduUM6ujf%a$d+*J#d%an*Uf-=u$g10+uG2d4;K6Wt7`^HZ(Tg3nKRDrZ
z*OIh+y5BwcY<2oOZ)r4ipQ}Eu_42osE7S83*5#!8X5CJ`u7>3IyZ-Ow=CfSaKg2EH
zrq<<iI^CffPs?9((sGV)<%NWXU7$@<=equcKdVcBsx!IY>2Du(`az(L6@1PT>e1GO
z@eNgZSeClv@jBFYfu8<n+W+GBk+k6)pqj&DZ4mO1M+vP6S;%9C8XpAniz*=x&3u*V
zn+<tbiVzARok8sp@^It0qeAU*M<pYrv<Y!XL7*0uSXTsYj0oa5As&N%O$6>L0q_Z5
zNfZl2tVj-)5CpQ0J6Z)oOa?OD3@3H#;cb%jf-o2%N3>UFo9@hj+{l73qKx?Rc`6s*
z6MOb31j0Lm+7?2L<sHfEF@#Y-n@vWrY_T*NMtzeLnoX5$DMjgSWK|~7Tm!ef<DpXk
zA*hWZ6ok~+=`50k>~S)9Bw(>fD8{0FXGH5z#Z30F(%{l)j)+|#>Q5ZDnE>0%3_3oB
zu<lp@01EO+L_t*eH9!bz>*lD3#Ip$55*hLI5j(P6F1w!uv<@T;psvO&A(@?{^i>bO
zbm$D74v_2|edk}V0)(J;hEPyZj6v9)a2%e^MpVH9LX62a1|gQk?nWRKNtB)(Qs^;!
zhAMB-dGRF89iU(dLG2A8)**BxBiX*4F=PQD7J5mBLx|PB#vnXSFCTe>9_*O<7)9u4
z;QlERs94t-1ZqDBv4GWBR+Vkq^&xa@Mzpeog2XK0R#ueUtvFO{q^So&jb47|($qxX
z<wGP+a~XP+cqlYSLGArcsFHY!ASpRY`X`1gI%f3d=#R91!ZtR=MjEh$5qiLb(j&r|
zX)#Vm`+sxDmZEO}grIh|gea3zCSn<4pGfC&1ITiS!WK!sG`|Z=@!5UzGo_KjdLR^z
z(le*1LMSCEdW5`1=kC)}03oQYAq>RF((x$5+p;rV$ZD`2qyBVcd)$t3Ix-g7)mtxw
zjKbdBo}ccEipd;_UO!AcFYSqIDS!~v*3D6U+?>&e5K`ApTf^(mTH_0|3wpuk8)RLB
z^=tOfdS8M-?FFH*W&*b*gl6*cw*F~r3_K+A38Nz0i2M`G9R;;Fgk_G_c7j%euu5j|
zq5y%KgirtoK_Gw-1Of;FLJ$Zb1cBNSLbH=|&Ecv;6s7bSOA-bML7>fm5Mx!vr46oO
zh(eP2EN_g6SWXTQf<R3`$Y_#!^$;_7pcYFg6M29$C~fH}5AFkmAW-8FVxcFU8&k3D
z8O)_uqgzyWWx|=+$sSo9N+w6+l8gaD5U4o_F_yErL>37`T+`+)13h6(>{>F>fz-jY
zW8|gnB0vZNH4CADqf(qfhy$Ko^Vk|fHP98+oq9z=QnLhOfDi;~{+%$EMf{y`#u`HY
zo#9!}8lnT*7?Hpdf<VneXoR<5hfqxr>Ynx75@Io?VR$D5fi@39%pkN5{)@}uEyVOh
z2ZG*F5NH#cqcYh!N%$r`kC1h96qBgdMX+dBI*1J8gdkAU5MsHjFMGVNOZD`{l7W6~
z6>UxS*v1k=wjU1d8`~1tDnQ2!2-Gx$WQU?@ik)QmX1i6~QAymAQ<BQ05Lc3#l2QRe
z5U6Pg1>7r1z2%MdV7<hJvDC}{KywrX+JtvPL1r>HHF#05R6Jp2a)1y7Y68MFF=lG9
zgzF>+2tlA`AOwFx5C|XyfdE2)5Cj4UOX5pugFx*Dq0zy@!&Trq!dpm9gtrhY!~HVs
zR`*2mOgL^4A_Ie3A3_NueTg%XpxVP*U;&kb;5TFm#Wf$yz5QhT+~?0G+YiqZ)Y=eY
zL<R-~ETgV&4-%~Bj;ciPaAy1aY-(fSEf8@WixSbWafo<k=4VU_RkDzO#CDJ<s{8f*
zFCQ(L=8*p*B0v(<Y7k=C7SYnGJP^}z+DLiU+6G<}Bge8mG8)lxiI}GWS0<4q%u<cW
zsD#x4N-vtLGRfr8w-5O$G2+YmDitDGC=~T%{O`*mEZziaJqR(DXOC-HB=@Jc+2Tr{
zh^@j~3~I-Dc#FW0V_PCk8u2H@B*GvhL{fD_NT+|`SZ#b>TRLa7Kd<qF*T_=gA=~+U
z++4uvMR-L7wHky14hV7XPpBf&r3?{_Ey7!Ld-U)YoVnBUjfA&IUB38Bs*u1hUYky+
z<mc0`y>fA%VF_8|b8%&Pfspen#pTCO5LsAUEao4Q^Tnr6AC8X~7q6UOSvf}lLs09z
z6LP0s?lQk4u~o!1hPO~{yHd#js@D>VBtYrWIhrHCqDKzUQ8Ie)gI5kHWeAIlg(pNj
zSI95s^Iu+jT3CF{Ea6I_xXd;Sg_R;}tOA6fR)f&=te1#Q87mvYjlx^#5TfpELhDiM
zhj5<mBR{5-L-eFQOHX04<^I%a?<g~V3_@})zc^kjEG-q5$&+uNT**IOSjay<PaftA
z%j3WxsAVBU9xbNIwZxdo=;1A}(3{PQxb8LUHJV}|W+QZtQaZhbbXP(slSc-G%Y;G5
zfn<M|^17DDm8XRT0^Osa)@zRH;Vm%goll8Gs5!g^5)s*+kcGM-%(3^u>vYmi4-PrD
zrv>8pc&c*6`h~)yGK5QoB8T!1`NvCFmKIb}%;y)+gCzvD8iZK31!i-BE_`|->d5rS
z*fP9D-;A=O1KTsUs1o~cd*}1pHW|k8*y;1SdOc;{p%E!ctO*GbDMrE<tDsRSibAJR
zRya^^MJwu7aVQ|9N;@nAPP=oMxQw3pBe?a@BRx}1xrCjfiXJ)Q#Lny2KbqQYI&b6q
zi4?!KpZE9s&Er?L-<-n}_7=Xp`Q5^1>A^y)`}kw8TnmpTp3u7(?VlVD`hV>lo{U7e
zb8v7pniCEV`+puEYcHN3^`9SMP6*yO5vopWZGFY5t*x)Ex2ozHB79q!-(1;jeNlS9
zwcff_YoFs5#mdwBOSd;Q=SS~ybWPJ1zgY@IxU6`yzTsea(0?{O@`8VBFAn}a9{!{4
zpLkcJ{bz&W{wIUsuMi=4<K~2=;Pu?`o4RMe)Em6ct6ZbnIsXubYTEd&J6);!&Qa#>
z-LW1u?ZeTDorhl7+dka?L-QXZeG3u<ueAtE`QD<K`r<@gsmr3y{=|&pUr;KEXSEY7
zE53y=UB&}5;Pn<^doBmpXf79?2-PVw!H5c#u_N@hBXva{MN<X-aben4R6i7daBW7i
zRI?bUGf4cE{TWd&);_a}r6xjZwv=ZzE>251XM)~1O%vf&rJkMkoYAi5u{Us;2*8=1
zu%5@Wy_?q))+ILv!2cfYowx{9ZIM+gIk4?YE}Z%61^{3}tyfNpu+zv&v(xD`M_<{a
zG#XdtIWLbs<<Ymlk??jV=ec|;VkF|rMzRIx(IjJuiG42b#F8i{5P9;HvvMi8lpBv8
z7PXTr5|lTYeX<%UEy6?VWWji(c05@>5rszz#e<#*>ow`ENm=D=c_c5Xiagn{Qd@JW
z;=CN~1fJ-Ev>_nXn3rRzmBa3eS6ME6Io=yw8bth*yyb||9-La}SW}JzR7nwG!(<t;
zKMLq&j>6a?0RRMgnkQ^#RFmucwzNCq-VZmwH{I+aoCg3*(5q>lFslgduYX!y-QM2*
z_R(is4nzpROBbPsWx32@u4S=2m!oKR0A?ma$E@D^%Cb!pA_Slq5xTB(=gAGH15XG*
zK_X<#-rIQ3b{RwnK%pXRK!gAkDZ(2zg9rgANQBK!Z*QYp*}|L<fI>v*R$Ck0*2dP}
z?QW$35du(vCp5QKAMF0T`{W*D7DNa@0V1^Q=HsXLfB)1mEnJQQP{^FnbvmE_@`1@*
z%n1P~Mug0@yLXt0`-A`#CPL<#6=vZU1ppTjp?V<^GRw`UL5L6l8A|blWtUwl5Fr4P
z2K62#JYmV{T&f7UL8O!JLnLj-VH)pDEGYUVwj?5uI5n{tg`_NE@%_`Ws1eJQuylz0
z<dbKK#D*rhq?(MQi=b~uDcO_MKB5+sQZN#EN0Jidp=6EHf?-~fBq+=zX!NkXDUyFs
zI0{=>PqZ_obO@zXE7^J^($<rGM|wDH<e?ECJ91=-Hv&;CSCXPo%0NhzdD@U7DF%f@
zgorQJV<Pl+YZbR~iP+T&03e`uRjkBYlGZ_NU)PQJudSh{W9Wu)rdh-Si;4gcV$_B3
zN?3yxfMO{{SLU9+#`t)h`NZnq!BO?JCE@)&{7VD?>1u-~1mG3&ga81D5CDh}0PvFe
Y548sue+%5BUH||907*qoM6N<$f*=CMwg3PC

literal 0
HcmV?d00001

diff --git a/lib/gitlab/background_migration/job_coordinator.rb b/lib/gitlab/background_migration/job_coordinator.rb
index acbb5f76ad8..c440db58b94 100644
--- a/lib/gitlab/background_migration/job_coordinator.rb
+++ b/lib/gitlab/background_migration/job_coordinator.rb
@@ -14,7 +14,7 @@ module Gitlab
           worker_class = worker_for_tracking_database[tracking_database]
 
           if worker_class.nil?
-            raise ArgumentError, "tracking_database must be one of [#{worker_for_tracking_database.keys.join(', ')}]"
+            raise ArgumentError, "The '#{tracking_database}' must be one of #{worker_for_tracking_database.keys.to_a}"
           end
 
           new(worker_class)
diff --git a/lib/gitlab/ci/templates/Jobs/DAST-Default-Branch-Deploy.gitlab-ci.yml b/lib/gitlab/ci/templates/Jobs/DAST-Default-Branch-Deploy.gitlab-ci.yml
index 2bc3285def3..04b1c4a6f73 100644
--- a/lib/gitlab/ci/templates/Jobs/DAST-Default-Branch-Deploy.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/Jobs/DAST-Default-Branch-Deploy.gitlab-ci.yml
@@ -1,5 +1,5 @@
 variables:
-  DAST_AUTO_DEPLOY_IMAGE_VERSION: 'v2.26.0'
+  DAST_AUTO_DEPLOY_IMAGE_VERSION: 'v2.25.0'
 
 .dast-auto-deploy:
   image: "registry.gitlab.com/gitlab-org/cluster-integration/auto-deploy-image:${DAST_AUTO_DEPLOY_IMAGE_VERSION}"
diff --git a/lib/gitlab/ci/templates/Jobs/Deploy.gitlab-ci.yml b/lib/gitlab/ci/templates/Jobs/Deploy.gitlab-ci.yml
index 6bf4d3e15ee..c29b5b74bfc 100644
--- a/lib/gitlab/ci/templates/Jobs/Deploy.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/Jobs/Deploy.gitlab-ci.yml
@@ -1,5 +1,5 @@
 variables:
-  AUTO_DEPLOY_IMAGE_VERSION: 'v2.26.0'
+  AUTO_DEPLOY_IMAGE_VERSION: 'v2.25.0'
 
 .auto-deploy:
   image: "registry.gitlab.com/gitlab-org/cluster-integration/auto-deploy-image:${AUTO_DEPLOY_IMAGE_VERSION}"
diff --git a/lib/gitlab/ci/templates/Jobs/Deploy.latest.gitlab-ci.yml b/lib/gitlab/ci/templates/Jobs/Deploy.latest.gitlab-ci.yml
index ae5051b517c..d09bb53a5b1 100644
--- a/lib/gitlab/ci/templates/Jobs/Deploy.latest.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/Jobs/Deploy.latest.gitlab-ci.yml
@@ -1,5 +1,5 @@
 variables:
-  AUTO_DEPLOY_IMAGE_VERSION: 'v2.26.0'
+  AUTO_DEPLOY_IMAGE_VERSION: 'v2.25.0'
 
 .auto-deploy:
   image: "registry.gitlab.com/gitlab-org/cluster-integration/auto-deploy-image:${AUTO_DEPLOY_IMAGE_VERSION}"
diff --git a/lib/gitlab/database/migration_helpers.rb b/lib/gitlab/database/migration_helpers.rb
index 80f675c825d..f5e4aa1b19d 100644
--- a/lib/gitlab/database/migration_helpers.rb
+++ b/lib/gitlab/database/migration_helpers.rb
@@ -3,6 +3,7 @@
 module Gitlab
   module Database
     module MigrationHelpers
+      include Migrations::ReestablishedConnectionStack
       include Migrations::BackgroundMigrationHelpers
       include Migrations::BatchedBackgroundMigrationHelpers
       include DynamicModelHelpers
diff --git a/lib/gitlab/database/migration_helpers/restrict_gitlab_schema.rb b/lib/gitlab/database/migration_helpers/restrict_gitlab_schema.rb
index 5a25128f3a9..d8d07fcaf2d 100644
--- a/lib/gitlab/database/migration_helpers/restrict_gitlab_schema.rb
+++ b/lib/gitlab/database/migration_helpers/restrict_gitlab_schema.rb
@@ -27,7 +27,7 @@ module Gitlab
             return
           end
 
-          Gitlab::Database::QueryAnalyzer.instance.within([validator_class]) do
+          Gitlab::Database::QueryAnalyzer.instance.within([validator_class, connection_validator_class]) do
             validator_class.allowed_gitlab_schemas = self.allowed_gitlab_schemas
 
             super
@@ -45,6 +45,10 @@ module Gitlab
           Gitlab::Database::QueryAnalyzers::RestrictAllowedSchemas
         end
 
+        def connection_validator_class
+          Gitlab::Database::QueryAnalyzers::GitlabSchemasValidateConnection
+        end
+
         def unmatched_schemas
           (self.allowed_gitlab_schemas || []) - allowed_schemas_for_connection
         end
diff --git a/lib/gitlab/database/migrations/background_migration_helpers.rb b/lib/gitlab/database/migrations/background_migration_helpers.rb
index 44aa25413e1..9bffed43077 100644
--- a/lib/gitlab/database/migrations/background_migration_helpers.rb
+++ b/lib/gitlab/database/migrations/background_migration_helpers.rb
@@ -47,6 +47,19 @@ module Gitlab
               'in the body of your migration class'
           end
 
+          # Background Migrations do not work well for in cases requiring to update `gitlab_shared`
+          # Once the decomposition is done, enqueued jobs for `gitlab_shared` tables (on CI database)
+          # will not be executed since the queue (which is stored in Redis) is tied to main database, not to schema.
+          # The batched background migrations do not have those limitations since the tracking tables
+          # are properly database-only.
+          if background_migration_restrict_gitlab_migration_schemas&.include?(:gitlab_shared)
+            raise 'The `#queue_background_migration_jobs_by_range_at_intervals` cannot " \
+              "use `restrict_gitlab_migration:` " with `:gitlab_shared`. ' \
+              'Background migrations do encode migration worker which is tied to a given database. ' \
+              'After split this worker will not be properly duplicated into decomposed database. ' \
+              'Use batched background migrations instead that do support well working across all databases.'
+          end
+
           raise "#{model_class} does not have an ID column of #{primary_column_name} to use for batch ranges" unless model_class.column_names.include?(primary_column_name.to_s)
           raise "#{primary_column_name} is not an integer or string column" unless [:integer, :string].include?(model_class.columns_hash[primary_column_name.to_s].type)
 
@@ -96,14 +109,20 @@ module Gitlab
         # delay_interval - The duration between each job's scheduled time
         # batch_size - The maximum number of jobs to fetch to memory from the database.
         def requeue_background_migration_jobs_by_range_at_intervals(job_class_name, delay_interval, batch_size: BATCH_SIZE, initial_delay: 0)
-          job_coordinator = coordinator_for_tracking_database
-
           if transaction_open?
             raise 'The `#requeue_background_migration_jobs_by_range_at_intervals` can not be run inside a transaction, ' \
               'you can disable transactions by calling disable_ddl_transaction! ' \
               'in the body of your migration class'
           end
 
+          if background_migration_restrict_gitlab_migration_schemas&.any?
+            raise 'The `#requeue_background_migration_jobs_by_range_at_intervals` cannot use `restrict_gitlab_migration:`. ' \
+              'The `#requeue_background_migration_jobs_by_range_at_intervals` needs to be executed on all databases since ' \
+              'each database has its own queue of background migrations.'
+          end
+
+          job_coordinator = coordinator_for_tracking_database
+
           # To not overload the worker too much we enforce a minimum interval both
           # when scheduling and performing jobs.
           delay_interval = [delay_interval, job_coordinator.minimum_interval].max
@@ -145,34 +164,40 @@ module Gitlab
         # This method does not garauntee that all jobs completed successfully.
         # It can only be used if the previous background migration used the queue_background_migration_jobs_by_range_at_intervals helper.
         def finalize_background_migration(class_name, delete_tracking_jobs: ['succeeded'])
-          if self.is_a?(::Gitlab::Database::MigrationHelpers::RestrictGitlabSchema)
-            raise 'The `#finalize_background_migration` is currently not supported with `Migration[2.0]`. Use `Migration[1.0]`. ' \
-              'For more information visit: https://docs.gitlab.com/ee/development/database/migrations_for_multiple_databases.html'
-          end
-
           if transaction_open?
             raise 'The `#finalize_background_migration` can not be run inside a transaction, ' \
               'you can disable transactions by calling disable_ddl_transaction! ' \
               'in the body of your migration class'
           end
 
-          job_coordinator = coordinator_for_tracking_database
-
-          # Empty the sidekiq queue.
-          job_coordinator.steal(class_name)
-
-          # Process pending tracked jobs.
-          jobs = Gitlab::Database::BackgroundMigrationJob.pending.for_migration_class(class_name)
-
-          jobs.find_each do |job|
-            job_coordinator.perform(job.class_name, job.arguments)
+          if background_migration_restrict_gitlab_migration_schemas&.any?
+            raise 'The `#finalize_background_migration` cannot use `restrict_gitlab_migration:`. ' \
+              'The `#finalize_background_migration` needs to be executed on all databases since ' \
+              'each database has its own queue of background migrations.'
           end
 
-          # Empty the sidekiq queue.
-          job_coordinator.steal(class_name)
+          job_coordinator = coordinator_for_tracking_database
 
-          # Delete job tracking rows.
-          delete_job_tracking(class_name, status: delete_tracking_jobs) if delete_tracking_jobs
+          with_restored_connection_stack do
+            # Since we are running trusted code (background migration class) allow to execute any type of finalize
+            Gitlab::Database::QueryAnalyzers::RestrictAllowedSchemas.with_suppressed do
+              # Empty the sidekiq queue.
+              job_coordinator.steal(class_name)
+
+              # Process pending tracked jobs.
+              jobs = Gitlab::Database::BackgroundMigrationJob.pending.for_migration_class(class_name)
+
+              jobs.find_each do |job|
+                job_coordinator.perform(job.class_name, job.arguments)
+              end
+
+              # Empty the sidekiq queue.
+              job_coordinator.steal(class_name)
+
+              # Delete job tracking rows.
+              delete_job_tracking(class_name, status: delete_tracking_jobs) if delete_tracking_jobs
+            end
+          end
         end
 
         def migrate_in(*args, coordinator: coordinator_for_tracking_database)
@@ -197,6 +222,10 @@ module Gitlab
 
         private
 
+        def background_migration_restrict_gitlab_migration_schemas
+          self.allowed_gitlab_schemas if self.respond_to?(:allowed_gitlab_schemas)
+        end
+
         def with_migration_context(&block)
           Gitlab::ApplicationContext.with_context(caller_id: self.class.to_s, &block)
         end
@@ -206,11 +235,9 @@ module Gitlab
         end
 
         def coordinator_for_tracking_database
-          Gitlab::BackgroundMigration.coordinator_for_database(tracking_database)
-        end
+          tracking_database = Gitlab::Database.db_config_name(connection)
 
-        def tracking_database
-          Gitlab::BackgroundMigration::DEFAULT_TRACKING_DATABASE
+          Gitlab::BackgroundMigration.coordinator_for_database(tracking_database)
         end
       end
     end
diff --git a/lib/gitlab/database/migrations/reestablished_connection_stack.rb b/lib/gitlab/database/migrations/reestablished_connection_stack.rb
new file mode 100644
index 00000000000..d7cf482c32a
--- /dev/null
+++ b/lib/gitlab/database/migrations/reestablished_connection_stack.rb
@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module Database
+    module Migrations
+      module ReestablishedConnectionStack
+        # This is workaround for `db:migrate` that switches `ActiveRecord::Base.connection`
+        # depending on execution. This is subject to be removed once proper fix is implemented:
+        # https://gitlab.com/gitlab-org/gitlab/-/issues/362341
+        #
+        # In some cases when we run application code we need to restore application connection stack:
+        # - ApplicationRecord (in fact ActiveRecord::Base): points to main
+        # - Ci::ApplicationRecord: points to ci
+        #
+        # rubocop:disable Database/MultipleDatabases
+        def with_restored_connection_stack(&block)
+          original_handler = ActiveRecord::Base.connection_handler
+
+          original_db_config = ActiveRecord::Base.connection_db_config
+          return yield if ActiveRecord::Base.configurations.primary?(original_db_config.name)
+
+          # If the `ActiveRecord::Base` connection is different than `:main`
+          # re-establish and configure `SharedModel` context accordingly
+          # to previously established `ActiveRecord::Base` to allow the application
+          # code to use `ApplicationRecord` and `Ci::ApplicationRecord` usual way.
+          # We swap a connection handler as migration context does hold an actual
+          # connection which we cannot close.
+          base_model = Gitlab::Database.database_base_models.fetch(original_db_config.name.to_sym)
+
+          # copy connections over to new connection handler
+          db_configs = original_handler.connection_pool_names.map do |connection_pool_name|
+            [connection_pool_name.constantize, connection_pool_name.constantize.connection_db_config]
+          end
+
+          new_handler = ActiveRecord::ConnectionAdapters::ConnectionHandler.new
+          ActiveRecord::Base.connection_handler = new_handler
+
+          db_configs.each do |klass, db_config|
+            new_handler.establish_connection(db_config, owner_name: klass)
+          end
+
+          # re-establish ActiveRecord::Base to main
+          ActiveRecord::Base.establish_connection :main # rubocop:disable Database/EstablishConnection
+
+          Gitlab::Database::SharedModel.using_connection(base_model.connection) do
+            yield
+          end
+        ensure
+          ActiveRecord::Base.connection_handler = original_handler
+          new_handler&.clear_all_connections!
+        end
+        # rubocop:enable Database/MultipleDatabases
+      end
+    end
+  end
+end
diff --git a/lib/gitlab/database/partitioning_migration_helpers/table_management_helpers.rb b/lib/gitlab/database/partitioning_migration_helpers/table_management_helpers.rb
index 034e18ec9f4..a541ecf5316 100644
--- a/lib/gitlab/database/partitioning_migration_helpers/table_management_helpers.rb
+++ b/lib/gitlab/database/partitioning_migration_helpers/table_management_helpers.rb
@@ -6,7 +6,6 @@ module Gitlab
       module TableManagementHelpers
         include ::Gitlab::Database::SchemaHelpers
         include ::Gitlab::Database::MigrationHelpers
-        include ::Gitlab::Database::Migrations::BackgroundMigrationHelpers
 
         ALLOWED_TABLES = %w[audit_events web_hook_logs].freeze
         ERROR_SCOPE = 'table partitioning'
diff --git a/lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection.rb b/lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection.rb
new file mode 100644
index 00000000000..3de9e8011fb
--- /dev/null
+++ b/lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection.rb
@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module Database
+    module QueryAnalyzers
+      # The purpose of this analyzer is to validate if tables observed
+      # are properly used according to schema used by current connection
+      class GitlabSchemasValidateConnection < Base
+        CrossSchemaAccessError = Class.new(QueryAnalyzerError)
+
+        class << self
+          def enabled?
+            true
+          end
+
+          def analyze(parsed)
+            tables = parsed.pg.select_tables + parsed.pg.dml_tables
+            table_schemas = ::Gitlab::Database::GitlabSchema.table_schemas(tables)
+            return if table_schemas.empty?
+
+            allowed_schemas = ::Gitlab::Database.gitlab_schemas_for_connection(parsed.connection)
+            return unless allowed_schemas
+
+            invalid_schemas = table_schemas - allowed_schemas
+            if invalid_schemas.any?
+              message = "The query tried to access #{tables} (of #{table_schemas.to_a}) "
+              message += "which is outside of allowed schemas (#{allowed_schemas}) "
+              message += "for the current connection '#{Gitlab::Database.db_config_name(parsed.connection)}'"
+
+              raise CrossSchemaAccessError, message
+            end
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/lib/gitlab/database/shared_model.rb b/lib/gitlab/database/shared_model.rb
index 563fab692ef..f4c8fca8fa2 100644
--- a/lib/gitlab/database/shared_model.rb
+++ b/lib/gitlab/database/shared_model.rb
@@ -15,14 +15,16 @@ module Gitlab
           previous_connection = self.overriding_connection
 
           unless previous_connection.nil? || previous_connection.equal?(connection)
-            raise 'cannot nest connection overrides for shared models with different connections'
+            raise "Cannot change connection for Gitlab::Database::SharedModel "\
+              "from '#{Gitlab::Database.db_config_name(previous_connection)}' "\
+              "to '#{Gitlab::Database.db_config_name(connection)}'"
           end
 
           self.overriding_connection = connection
 
           yield
         ensure
-          self.overriding_connection = nil unless previous_connection.equal?(self.overriding_connection)
+          self.overriding_connection = previous_connection
         end
 
         def connection
diff --git a/lib/gitlab/graphql/global_id_compatibility.rb b/lib/gitlab/graphql/global_id_compatibility.rb
deleted file mode 100644
index a96e4c4b976..00000000000
--- a/lib/gitlab/graphql/global_id_compatibility.rb
+++ /dev/null
@@ -1,20 +0,0 @@
-# frozen_string_literal: true
-
-module Gitlab
-  module Graphql
-    module GlobalIDCompatibility
-      # TODO: remove this module once the compatibility layer is no longer needed.
-      # See: https://gitlab.com/gitlab-org/gitlab/-/issues/257883
-      def coerce_global_id_arguments!(args)
-        global_id_arguments = self.class.arguments.values.select do |arg|
-          arg.type.is_a?(Class) && arg.type <= ::Types::GlobalIDType
-        end
-
-        global_id_arguments.each do |arg|
-          k = arg.keyword
-          args[k] &&= arg.type.coerce_isolated_input(args[k])
-        end
-      end
-    end
-  end
-end
diff --git a/lib/gitlab/metrics/rails_slis.rb b/lib/gitlab/metrics/rails_slis.rb
index c4f305dbdc4..71da0085c8c 100644
--- a/lib/gitlab/metrics/rails_slis.rb
+++ b/lib/gitlab/metrics/rails_slis.rb
@@ -5,16 +5,16 @@ module Gitlab
     module RailsSlis
       class << self
         def initialize_request_slis!
-          Gitlab::Metrics::Sli.initialize_sli(:rails_request_apdex, possible_request_labels) unless Gitlab::Metrics::Sli.initialized?(:rails_request_apdex)
-          Gitlab::Metrics::Sli.initialize_sli(:graphql_query_apdex, possible_graphql_query_labels) unless Gitlab::Metrics::Sli.initialized?(:graphql_query_apdex)
+          Gitlab::Metrics::Sli::Apdex.initialize_sli(:rails_request, possible_request_labels)
+          Gitlab::Metrics::Sli::Apdex.initialize_sli(:graphql_query, possible_graphql_query_labels)
         end
 
         def request_apdex
-          Gitlab::Metrics::Sli[:rails_request_apdex]
+          Gitlab::Metrics::Sli::Apdex[:rails_request]
         end
 
         def graphql_query_apdex
-          Gitlab::Metrics::Sli[:graphql_query_apdex]
+          Gitlab::Metrics::Sli::Apdex[:graphql_query]
         end
 
         private
diff --git a/lib/gitlab/metrics/sli.rb b/lib/gitlab/metrics/sli.rb
index de73db0755d..fcd893b675f 100644
--- a/lib/gitlab/metrics/sli.rb
+++ b/lib/gitlab/metrics/sli.rb
@@ -2,12 +2,10 @@
 
 module Gitlab
   module Metrics
-    class Sli
-      SliNotInitializedError = Class.new(StandardError)
-
+    module Sli
       COUNTER_PREFIX = 'gitlab_sli'
 
-      class << self
+      module ClassMethods
         INITIALIZATION_MUTEX = Mutex.new
 
         def [](name)
@@ -16,6 +14,8 @@ module Gitlab
 
         def initialize_sli(name, possible_label_combinations)
           INITIALIZATION_MUTEX.synchronize do
+            next known_slis[name] if initialized?(name)
+
             sli = new(name)
             sli.initialize_counters(possible_label_combinations)
             known_slis[name] = sli
@@ -33,6 +33,10 @@ module Gitlab
         end
       end
 
+      def self.included(mod)
+        mod.extend(ClassMethods)
+      end
+
       attr_reader :name
 
       def initialize(name)
@@ -41,16 +45,17 @@ module Gitlab
       end
 
       def initialize_counters(possible_label_combinations)
-        @initialized_with_combinations = possible_label_combinations.any?
+        # This module is effectively an abstract class
+        @initialized_with_combinations = possible_label_combinations.any? # rubocop:disable Gitlab/ModuleWithInstanceVariables
         possible_label_combinations.each do |label_combination|
           total_counter.get(label_combination)
-          success_counter.get(label_combination)
+          numerator_counter.get(label_combination)
         end
       end
 
-      def increment(labels:, success:)
+      def increment(labels:, increment_numerator:)
         total_counter.increment(labels)
-        success_counter.increment(labels) if success
+        numerator_counter.increment(labels) if increment_numerator
       end
 
       def initialized?
@@ -60,24 +65,44 @@ module Gitlab
       private
 
       def total_counter
-        prometheus.counter(total_counter_name.to_sym, "Total number of measurements for #{name}")
+        prometheus.counter(counter_name('total'), "Total number of measurements for #{name}")
       end
 
-      def success_counter
-        prometheus.counter(success_counter_name.to_sym, "Number of successful measurements for #{name}")
-      end
-
-      def total_counter_name
-        "#{COUNTER_PREFIX}:#{name}:total"
-      end
-
-      def success_counter_name
-        "#{COUNTER_PREFIX}:#{name}:success_total"
+      def counter_name(suffix)
+        :"#{COUNTER_PREFIX}:#{name}_#{self.class.name.demodulize.underscore}:#{suffix}"
       end
 
       def prometheus
         Gitlab::Metrics
       end
+
+      class Apdex
+        include Sli
+
+        def increment(labels:, success:)
+          super(labels: labels, increment_numerator: success)
+        end
+
+        private
+
+        def numerator_counter
+          prometheus.counter(counter_name('success_total'), "Number of successful measurements for #{name}")
+        end
+      end
+
+      class ErrorRate
+        include Sli
+
+        def increment(labels:, error:)
+          super(labels: labels, increment_numerator: error)
+        end
+
+        private
+
+        def numerator_counter
+          prometheus.counter(counter_name('error_total'), "Number of error measurements for #{name}")
+        end
+      end
     end
   end
 end
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 81255bed4c6..c23f8e37410 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -1581,6 +1581,9 @@ msgstr ""
 msgid "A file with '%{file_name}' already exists in %{branch} branch"
 msgstr ""
 
+msgid "A file with this name already exists."
+msgstr ""
+
 msgid "A group is a collection of several projects"
 msgstr ""
 
@@ -11462,6 +11465,9 @@ msgstr ""
 msgid "DastProfiles|Password form field"
 msgstr ""
 
+msgid "DastProfiles|Profile is being used by this on-demand scan"
+msgstr ""
+
 msgid "DastProfiles|Profile name"
 msgstr ""
 
@@ -11935,6 +11941,9 @@ msgstr ""
 msgid "Delete Comment"
 msgstr ""
 
+msgid "Delete File"
+msgstr ""
+
 msgid "Delete Internal Note"
 msgstr ""
 
@@ -15943,6 +15952,9 @@ msgstr ""
 msgid "File templates"
 msgstr ""
 
+msgid "File too large. Secure Files must be less than %{limit} MB."
+msgstr ""
+
 msgid "File upload error."
 msgstr ""
 
@@ -19360,6 +19372,9 @@ msgstr ""
 msgid "In this page you will find information about the settings that are used in your current instance."
 msgstr ""
 
+msgid "In use"
+msgstr ""
+
 msgid "InProductMarketing|%{organization_name} logo"
 msgstr ""
 
@@ -33422,6 +33437,15 @@ msgstr ""
 msgid "Secure token that identifies an external storage request."
 msgstr ""
 
+msgid "SecureFiles|Delete %{name}?"
+msgstr ""
+
+msgid "SecureFiles|Delete secure file"
+msgstr ""
+
+msgid "SecureFiles|Secure File %{name} will be permanently deleted. Are you sure?"
+msgstr ""
+
 msgid "Security"
 msgstr ""
 
@@ -40579,6 +40603,9 @@ msgstr ""
 msgid "Uploading changes to terminal"
 msgstr ""
 
+msgid "Uploading..."
+msgstr ""
+
 msgid "Upstream"
 msgstr ""
 
diff --git a/spec/controllers/projects/ci/secure_files_controller_spec.rb b/spec/controllers/projects/ci/secure_files_controller_spec.rb
index 1138897bcc6..200997e31b9 100644
--- a/spec/controllers/projects/ci/secure_files_controller_spec.rb
+++ b/spec/controllers/projects/ci/secure_files_controller_spec.rb
@@ -9,17 +9,35 @@ RSpec.describe Projects::Ci::SecureFilesController do
   subject(:show_request) { get :show, params: { namespace_id: project.namespace, project_id: project } }
 
   describe 'GET #show' do
-    context 'with enough privileges' do
-      before do
-        sign_in(user)
-        project.add_developer(user)
-        show_request
+    context 'when the :ci_secure_files feature flag is enabled' do
+      context 'with enough privileges' do
+        before do
+          stub_feature_flags(ci_secure_files: true)
+          sign_in(user)
+          project.add_developer(user)
+          show_request
+        end
+
+        it { expect(response).to have_gitlab_http_status(:ok) }
+
+        it 'renders show page' do
+          expect(response).to render_template :show
+        end
       end
+    end
 
-      it { expect(response).to have_gitlab_http_status(:ok) }
+    context 'when the :ci_secure_files feature flag is disabled' do
+      context 'with enough privileges' do
+        before do
+          stub_feature_flags(ci_secure_files: false)
+          sign_in(user)
+          project.add_developer(user)
+          show_request
+        end
 
-      it 'renders show page' do
-        expect(response).to render_template :show
+        it 'responds with 404' do
+          expect(response).to have_gitlab_http_status(:not_found)
+        end
       end
     end
 
diff --git a/spec/factories/ci/secure_files.rb b/spec/factories/ci/secure_files.rb
index 9198ea61d14..9afec5db858 100644
--- a/spec/factories/ci/secure_files.rb
+++ b/spec/factories/ci/secure_files.rb
@@ -2,7 +2,7 @@
 
 FactoryBot.define do
   factory :ci_secure_file, class: 'Ci::SecureFile' do
-    name { 'filename' }
+    sequence(:name) { |n| "file#{n}" }
     file { fixture_file_upload('spec/fixtures/ci_secure_files/upload-keystore.jks', 'application/octet-stream') }
     checksum { 'foo1234' }
     project
diff --git a/spec/features/projects/blobs/blame_spec.rb b/spec/features/projects/blobs/blame_spec.rb
new file mode 100644
index 00000000000..bb3b5cd931c
--- /dev/null
+++ b/spec/features/projects/blobs/blame_spec.rb
@@ -0,0 +1,67 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe 'File blame', :js do
+  include TreeHelper
+
+  let_it_be(:project) { create(:project, :public, :repository) }
+
+  let(:path) { 'CHANGELOG' }
+
+  def visit_blob_blame(path)
+    visit project_blame_path(project, tree_join('master', path))
+    wait_for_all_requests
+  end
+
+  it 'displays the blame page without pagination' do
+    visit_blob_blame(path)
+
+    expect(page).to have_css('.blame-commit')
+    expect(page).not_to have_css('.gl-pagination')
+  end
+
+  context 'when blob length is over the blame range limit' do
+    before do
+      stub_const('Projects::BlameService::PER_PAGE', 2)
+    end
+
+    it 'displays two first lines of the file with pagination' do
+      visit_blob_blame(path)
+
+      expect(page).to have_css('.blame-commit')
+      expect(page).to have_css('.gl-pagination')
+
+      expect(page).to have_css('#L1')
+      expect(page).not_to have_css('#L3')
+      expect(find('.page-link.active')).to have_text('1')
+    end
+
+    context 'when user clicks on the next button' do
+      before do
+        visit_blob_blame(path)
+
+        find('.js-next-button').click
+      end
+
+      it 'displays next two lines of the file with pagination' do
+        expect(page).not_to have_css('#L1')
+        expect(page).to have_css('#L3')
+        expect(find('.page-link.active')).to have_text('2')
+      end
+    end
+
+    context 'when feature flag disabled' do
+      before do
+        stub_feature_flags(blame_page_pagination: false)
+      end
+
+      it 'displays the blame page without pagination' do
+        visit_blob_blame(path)
+
+        expect(page).to have_css('.blame-commit')
+        expect(page).not_to have_css('.gl-pagination')
+      end
+    end
+  end
+end
diff --git a/spec/features/projects/ci/secure_files_spec.rb b/spec/features/projects/ci/secure_files_spec.rb
index 65c41eaf2ac..a0e9d663d35 100644
--- a/spec/features/projects/ci/secure_files_spec.rb
+++ b/spec/features/projects/ci/secure_files_spec.rb
@@ -7,13 +7,55 @@ RSpec.describe 'Secure Files', :js do
   let(:user) { create(:user) }
 
   before do
+    stub_feature_flags(ci_secure_files_read_only: false)
     project.add_maintainer(user)
     sign_in(user)
-
-    visit project_ci_secure_files_path(project)
   end
 
   it 'user sees the Secure Files list component' do
+    visit project_ci_secure_files_path(project)
     expect(page).to have_content('There are no records to show')
   end
+
+  it 'prompts the user to confirm before deleting a file' do
+    file = create(:ci_secure_file, project: project)
+
+    visit project_ci_secure_files_path(project)
+
+    expect(page).to have_content(file.name)
+
+    find('button.btn-danger').click
+
+    expect(page).to have_content("Delete #{file.name}?")
+
+    click_on('Delete secure file')
+
+    visit project_ci_secure_files_path(project)
+
+    expect(page).not_to have_content(file.name)
+  end
+
+  it 'displays an uploaded file in the file list' do
+    visit project_ci_secure_files_path(project)
+    expect(page).to have_content('There are no records to show')
+
+    page.attach_file('spec/fixtures/ci_secure_files/upload-keystore.jks') do
+      click_button 'Upload File'
+    end
+
+    expect(page).to have_content('upload-keystore.jks')
+  end
+
+  it 'displays an error when a duplicate file upload is attempted' do
+    create(:ci_secure_file, project: project, name: 'upload-keystore.jks')
+    visit project_ci_secure_files_path(project)
+
+    expect(page).to have_content('upload-keystore.jks')
+
+    page.attach_file('spec/fixtures/ci_secure_files/upload-keystore.jks') do
+      click_button 'Upload File'
+    end
+
+    expect(page).to have_content('A file with this name already exists.')
+  end
 end
diff --git a/spec/features/projects/tags/user_views_tags_spec.rb b/spec/features/projects/tags/user_views_tags_spec.rb
index e1962ad3df5..dfb5d5d9221 100644
--- a/spec/features/projects/tags/user_views_tags_spec.rb
+++ b/spec/features/projects/tags/user_views_tags_spec.rb
@@ -2,6 +2,36 @@
 require 'spec_helper'
 
 RSpec.describe 'User views tags', :feature do
+  context 'with html' do
+    let(:project) { create(:project, :repository, visibility_level: Gitlab::VisibilityLevel::PUBLIC) }
+    let(:user) { create(:user) }
+    let(:tag_name) { "stable" }
+    let!(:release) { create(:release, project: project, tag: tag_name) }
+
+    before do
+      project.add_developer(user)
+      project.repository.add_tag(user, tag_name, project.default_branch_or_main)
+
+      sign_in(user)
+    end
+
+    shared_examples 'renders the tag index page' do
+      it do
+        visit project_tags_path(project)
+
+        expect(page).to have_content tag_name
+      end
+    end
+
+    it_behaves_like 'renders the tag index page'
+
+    context 'when tag name contains a slash' do
+      let(:tag_name) { "stable/v0.1" }
+
+      it_behaves_like 'renders the tag index page'
+    end
+  end
+
   context 'rss' do
     shared_examples 'has access to the tags RSS feed' do
       it do
diff --git a/spec/frontend/api_spec.js b/spec/frontend/api_spec.js
index 85332bf21d8..5f162f498c4 100644
--- a/spec/frontend/api_spec.js
+++ b/spec/frontend/api_spec.js
@@ -1593,6 +1593,38 @@ describe('Api', () => {
     });
   });
 
+  describe('uploadProjectSecureFile', () => {
+    it('uploads a secure file to a project', async () => {
+      const projectId = 1;
+      const secureFile = {
+        id: projectId,
+        title: 'File Name',
+        permissions: 'read_only',
+        checksum: '12345',
+        checksum_algorithm: 'sha256',
+        created_at: '2022-02-21T15:27:18',
+      };
+
+      const expectedUrl = `${dummyUrlRoot}/api/${dummyApiVersion}/projects/${projectId}/secure_files`;
+      mock.onPost(expectedUrl).reply(httpStatus.OK, secureFile);
+      const { data } = await Api.uploadProjectSecureFile(projectId, 'some data');
+
+      expect(data).toEqual(secureFile);
+    });
+  });
+
+  describe('deleteProjectSecureFile', () => {
+    it('removes a secure file from a project', async () => {
+      const projectId = 1;
+      const secureFileId = 2;
+
+      const expectedUrl = `${dummyUrlRoot}/api/${dummyApiVersion}/projects/${projectId}/secure_files/${secureFileId}`;
+      mock.onDelete(expectedUrl).reply(httpStatus.NO_CONTENT, '');
+      const { data } = await Api.deleteProjectSecureFile(projectId, secureFileId);
+      expect(data).toEqual('');
+    });
+  });
+
   describe('dependency proxy cache', () => {
     it('schedules the cache list for deletion', async () => {
       const groupId = 1;
diff --git a/spec/frontend/ci_secure_files/components/secure_files_list_spec.js b/spec/frontend/ci_secure_files/components/secure_files_list_spec.js
index ea4e17e43bd..ad5f8a56ced 100644
--- a/spec/frontend/ci_secure_files/components/secure_files_list_spec.js
+++ b/spec/frontend/ci_secure_files/components/secure_files_list_spec.js
@@ -10,6 +10,7 @@ import { secureFiles } from '../mock_data';
 
 const dummyApiVersion = 'v3000';
 const dummyProjectId = 1;
+const fileSizeLimit = 5;
 const dummyUrlRoot = '/gitlab';
 const dummyGon = {
   api_version: dummyApiVersion,
@@ -33,9 +34,13 @@ describe('SecureFilesList', () => {
     window.gon = originalGon;
   });
 
-  const createWrapper = (props = {}) => {
+  const createWrapper = (admin = true, props = {}) => {
     wrapper = mount(SecureFilesList, {
-      provide: { projectId: dummyProjectId },
+      provide: {
+        projectId: dummyProjectId,
+        admin,
+        fileSizeLimit,
+      },
       ...props,
     });
   };
@@ -46,6 +51,8 @@ describe('SecureFilesList', () => {
   const findHeaderAt = (i) => wrapper.findAll('thead th').at(i);
   const findPagination = () => wrapper.findAll('ul.pagination');
   const findLoadingIcon = () => wrapper.findComponent(GlLoadingIcon);
+  const findUploadButton = () => wrapper.findAll('span.gl-button-text');
+  const findDeleteButton = () => wrapper.findAll('tbody tr td button.btn-danger');
 
   describe('when secure files exist in a project', () => {
     beforeEach(async () => {
@@ -135,4 +142,42 @@ describe('SecureFilesList', () => {
       expect(findLoadingIcon().exists()).toBe(false);
     });
   });
+
+  describe('admin permissions', () => {
+    describe('with admin permissions', () => {
+      beforeEach(async () => {
+        mock = new MockAdapter(axios);
+        mock.onGet(expectedUrl).reply(200, secureFiles);
+
+        createWrapper();
+        await waitForPromises();
+      });
+
+      it('displays the upload button', () => {
+        expect(findUploadButton().exists()).toBe(true);
+      });
+
+      it('displays a delete button', () => {
+        expect(findDeleteButton().exists()).toBe(true);
+      });
+    });
+
+    describe('without admin permissions', () => {
+      beforeEach(async () => {
+        mock = new MockAdapter(axios);
+        mock.onGet(expectedUrl).reply(200, secureFiles);
+
+        createWrapper(false);
+        await waitForPromises();
+      });
+
+      it('does not display the upload button', () => {
+        expect(findUploadButton().exists()).toBe(false);
+      });
+
+      it('does not display a delete button', () => {
+        expect(findDeleteButton().exists()).toBe(false);
+      });
+    });
+  });
 });
diff --git a/spec/frontend/issues/list/components/issues_list_app_spec.js b/spec/frontend/issues/list/components/issues_list_app_spec.js
index 2bba816f107..d92ba527b5c 100644
--- a/spec/frontend/issues/list/components/issues_list_app_spec.js
+++ b/spec/frontend/issues/list/components/issues_list_app_spec.js
@@ -82,6 +82,7 @@ describe('CE IssuesListApp component', () => {
     isAnonymousSearchDisabled: false,
     isIssueRepositioningDisabled: false,
     isProject: true,
+    isPublicVisibilityRestricted: false,
     isSignedIn: true,
     jiraIntegrationPath: 'jira/integration/path',
     newIssuePath: 'new/issue/path',
@@ -932,4 +933,23 @@ describe('CE IssuesListApp component', () => {
       });
     });
   });
+
+  describe('public visibility', () => {
+    it.each`
+      description                                                                    | isPublicVisibilityRestricted | isSignedIn | hideUsers
+      ${'shows users when public visibility is not restricted and is not signed in'} | ${false}                     | ${false}   | ${false}
+      ${'shows users when public visibility is not restricted and is signed in'}     | ${false}                     | ${true}    | ${false}
+      ${'hides users when public visibility is restricted and is not signed in'}     | ${true}                      | ${false}   | ${true}
+      ${'shows users when public visibility is restricted and is signed in'}         | ${true}                      | ${true}    | ${false}
+    `('$description', ({ isPublicVisibilityRestricted, isSignedIn, hideUsers }) => {
+      const mockQuery = jest.fn().mockResolvedValue(defaultQueryResponse);
+      wrapper = mountComponent({
+        provide: { isPublicVisibilityRestricted, isSignedIn },
+        issuesQueryResponse: mockQuery,
+      });
+      jest.runOnlyPendingTimers();
+
+      expect(mockQuery).toHaveBeenCalledWith(expect.objectContaining({ hideUsers }));
+    });
+  });
 });
diff --git a/spec/frontend/pipelines/header_component_spec.js b/spec/frontend/pipelines/header_component_spec.js
index c4639bd8e16..5cc11adf696 100644
--- a/spec/frontend/pipelines/header_component_spec.js
+++ b/spec/frontend/pipelines/header_component_spec.js
@@ -1,4 +1,4 @@
-import { GlModal, GlLoadingIcon } from '@gitlab/ui';
+import { GlAlert, GlModal, GlLoadingIcon } from '@gitlab/ui';
 import { shallowMount } from '@vue/test-utils';
 import { nextTick } from 'vue';
 import waitForPromises from 'helpers/wait_for_promises';
@@ -21,6 +21,7 @@ describe('Pipeline details header', () => {
   let glModalDirective;
   let mutate = jest.fn();
 
+  const findAlert = () => wrapper.find(GlAlert);
   const findDeleteModal = () => wrapper.find(GlModal);
   const findRetryButton = () => wrapper.find('[data-testid="retryPipeline"]');
   const findCancelButton = () => wrapper.find('[data-testid="cancelPipeline"]');
@@ -121,6 +122,22 @@ describe('Pipeline details header', () => {
       it('should render retry action tooltip', () => {
         expect(findRetryButton().attributes('title')).toBe(BUTTON_TOOLTIP_RETRY);
       });
+
+      it('should display error message on failure', async () => {
+        const failureMessage = 'failure message';
+        jest.spyOn(wrapper.vm.$apollo, 'mutate').mockResolvedValue({
+          data: {
+            pipelineRetry: {
+              errors: [failureMessage],
+            },
+          },
+        });
+
+        findRetryButton().vm.$emit('click');
+        await waitForPromises();
+
+        expect(findAlert().text()).toBe(failureMessage);
+      });
     });
 
     describe('Retry action failed', () => {
@@ -156,6 +173,22 @@ describe('Pipeline details header', () => {
           variables: { id: mockRunningPipelineHeader.id },
         });
       });
+
+      it('should display error message on failure', async () => {
+        const failureMessage = 'failure message';
+        jest.spyOn(wrapper.vm.$apollo, 'mutate').mockResolvedValue({
+          data: {
+            pipelineCancel: {
+              errors: [failureMessage],
+            },
+          },
+        });
+
+        findCancelButton().vm.$emit('click');
+        await waitForPromises();
+
+        expect(findAlert().text()).toBe(failureMessage);
+      });
     });
 
     describe('Delete action', () => {
@@ -179,6 +212,22 @@ describe('Pipeline details header', () => {
           variables: { id: mockFailedPipelineHeader.id },
         });
       });
+
+      it('should display error message on failure', async () => {
+        const failureMessage = 'failure message';
+        jest.spyOn(wrapper.vm.$apollo, 'mutate').mockResolvedValue({
+          data: {
+            pipelineDestroy: {
+              errors: [failureMessage],
+            },
+          },
+        });
+
+        findDeleteModal().vm.$emit('ok');
+        await waitForPromises();
+
+        expect(findAlert().text()).toBe(failureMessage);
+      });
     });
 
     describe('Permissions', () => {
diff --git a/spec/graphql/types/global_id_type_spec.rb b/spec/graphql/types/global_id_type_spec.rb
index 8df92c818fc..a57db9234f1 100644
--- a/spec/graphql/types/global_id_type_spec.rb
+++ b/spec/graphql/types/global_id_type_spec.rb
@@ -246,131 +246,6 @@ RSpec.describe Types::GlobalIDType do
     end
   end
 
-  describe 'compatibility' do
-    def query(doc, vars)
-      GraphQL::Query.new(schema, document: doc, context: {}, variables: vars)
-    end
-
-    def run_query(gql_query, vars)
-      query(GraphQL.parse(gql_query), vars).result
-    end
-
-    all_types = [::GraphQL::Types::ID, ::Types::GlobalIDType, ::Types::GlobalIDType[::Project]]
-
-    shared_examples 'a working query' do
-      # Simplified schema to test compatibility
-      let!(:schema) do
-        # capture values so they can be closed over
-        arg_type = argument_type
-        res_type = result_type
-
-        project = Class.new(GraphQL::Schema::Object) do
-          graphql_name 'Project'
-          field :name, String, null: false
-          field :id, res_type, null: false, resolver_method: :global_id
-
-          def global_id
-            object.to_global_id
-          end
-        end
-
-        Class.new(GraphQL::Schema) do
-          query(Class.new(GraphQL::Schema::Object) do
-            graphql_name 'Query'
-
-            field :project_by_id, project, null: true do
-              argument :id, arg_type, required: true
-            end
-
-            # This is needed so that all types are always registered as input types
-            field :echo, String, null: true do
-              argument :id, ::GraphQL::Types::ID, required: false
-              argument :gid, ::Types::GlobalIDType, required: false
-              argument :pid, ::Types::GlobalIDType[::Project], required: false
-            end
-
-            def project_by_id(id:)
-              gid = ::Types::GlobalIDType[::Project].coerce_isolated_input(id)
-              gid.model_class.find(gid.model_id)
-            end
-
-            def echo(id: nil, gid: nil, pid: nil)
-              "id: #{id}, gid: #{gid}, pid: #{pid}"
-            end
-          end)
-        end
-      end
-
-      it 'works' do
-        res = run_query(document, 'projectId' => project.to_global_id.to_s)
-
-        expect(res['errors']).to be_blank
-        expect(res.dig('data', 'project', 'name')).to eq(project.name)
-        expect(res.dig('data', 'project', 'id')).to eq(project.to_global_id.to_s)
-      end
-    end
-
-    context 'when the client declares the argument as ID the actual argument can be any type' do
-      let(:document) do
-        <<-GRAPHQL
-        query($projectId: ID!){
-          project: projectById(id: $projectId) {
-            name, id
-          }
-        }
-        GRAPHQL
-      end
-
-      where(:result_type, :argument_type) do
-        all_types.flat_map { |arg_type| all_types.zip([arg_type].cycle) }
-      end
-
-      with_them do
-        it_behaves_like 'a working query'
-      end
-    end
-
-    context 'when the client passes the argument as GlobalID' do
-      let(:document) do
-        <<-GRAPHQL
-        query($projectId: GlobalID!) {
-          project: projectById(id: $projectId) {
-            name, id
-          }
-        }
-        GRAPHQL
-      end
-
-      let(:argument_type) { ::Types::GlobalIDType }
-
-      where(:result_type) { all_types }
-
-      with_them do
-        it_behaves_like 'a working query'
-      end
-    end
-
-    context 'when the client passes the argument as ProjectID' do
-      let(:document) do
-        <<-GRAPHQL
-        query($projectId: ProjectID!) {
-          project: projectById(id: $projectId) {
-            name, id
-          }
-        }
-        GRAPHQL
-      end
-
-      let(:argument_type) { ::Types::GlobalIDType[::Project] }
-
-      where(:result_type) { all_types }
-
-      with_them do
-        it_behaves_like 'a working query'
-      end
-    end
-  end
-
   describe '.model_name_to_graphql_name' do
     it 'returns a graphql name for the given model name' do
       expect(described_class.model_name_to_graphql_name('DesignManagement::Design')).to eq('DesignManagementDesignID')
diff --git a/spec/helpers/issues_helper_spec.rb b/spec/helpers/issues_helper_spec.rb
index 0f653fdd282..0421c7b7458 100644
--- a/spec/helpers/issues_helper_spec.rb
+++ b/spec/helpers/issues_helper_spec.rb
@@ -302,6 +302,7 @@ RSpec.describe IssuesHelper do
         is_anonymous_search_disabled: 'true',
         is_issue_repositioning_disabled: 'true',
         is_project: 'true',
+        is_public_visibility_restricted: 'false',
         is_signed_in: current_user.present?.to_s,
         jira_integration_path: help_page_url('integration/jira/issues', anchor: 'view-jira-issues'),
         markdown_help_path: help_page_path('user/markdown'),
diff --git a/spec/lib/gitlab/background_migration/job_coordinator_spec.rb b/spec/lib/gitlab/background_migration/job_coordinator_spec.rb
index c1351481505..95847c67d94 100644
--- a/spec/lib/gitlab/background_migration/job_coordinator_spec.rb
+++ b/spec/lib/gitlab/background_migration/job_coordinator_spec.rb
@@ -18,7 +18,7 @@ RSpec.describe Gitlab::BackgroundMigration::JobCoordinator do
       it 'raises an error' do
         expect do
           described_class.for_tracking_database('notvalid')
-        end.to raise_error(ArgumentError, /tracking_database must be one of/)
+        end.to raise_error(ArgumentError, /must be one of/)
       end
     end
   end
diff --git a/spec/lib/gitlab/database/migration_helpers/restrict_gitlab_schema_spec.rb b/spec/lib/gitlab/database/migration_helpers/restrict_gitlab_schema_spec.rb
index bc12096a5b7..1009ec354c3 100644
--- a/spec/lib/gitlab/database/migration_helpers/restrict_gitlab_schema_spec.rb
+++ b/spec/lib/gitlab/database/migration_helpers/restrict_gitlab_schema_spec.rb
@@ -401,8 +401,8 @@ RSpec.describe Gitlab::Database::MigrationHelpers::RestrictGitlabSchema, query_a
               ci: :dml_not_allowed
             },
             gitlab_schema_gitlab_shared: {
-              main: :dml_access_denied,
-              ci: :dml_access_denied
+              main: :runtime_error,
+              ci: :runtime_error
             },
             gitlab_schema_gitlab_main: {
               main: :success,
@@ -486,6 +486,37 @@ RSpec.describe Gitlab::Database::MigrationHelpers::RestrictGitlabSchema, query_a
               ci: :skipped
             }
           }
+        },
+        "does raise exception about cross schema access when suppressing restriction to ensure" => {
+          migration: ->(klass) do
+            # The purpose of this test is to ensure that we use ApplicationRecord
+            # a correct connection will be used:
+            # - this is a case for finalizing background migrations
+            def up
+              Gitlab::Database::QueryAnalyzers::RestrictAllowedSchemas.with_suppressed do
+                ::ApplicationRecord.connection.execute("SELECT 1 FROM ci_builds")
+              end
+            end
+
+            def down
+            end
+          end,
+          query_matcher: /FROM ci_builds/,
+          setup: -> (_) { skip_if_multiple_databases_not_setup },
+          expected: {
+            no_gitlab_schema: {
+              main: :cross_schema_error,
+              ci: :success
+            },
+            gitlab_schema_gitlab_shared: {
+              main: :cross_schema_error,
+              ci: :success
+            },
+            gitlab_schema_gitlab_main: {
+              main: :cross_schema_error,
+              ci: :skipped
+            }
+          }
         }
       }
     end
@@ -517,6 +548,8 @@ RSpec.describe Gitlab::Database::MigrationHelpers::RestrictGitlabSchema, query_a
           %i[no_gitlab_schema gitlab_schema_gitlab_main gitlab_schema_gitlab_shared].each do |restrict_gitlab_migration|
             context "while restrict_gitlab_migration=#{restrict_gitlab_migration}" do
               it "does run migrate :up and :down" do
+                instance_eval(&setup) if setup
+
                 expected_result = expected.fetch(restrict_gitlab_migration)[db_config_name.to_sym]
                 skip "not configured" unless expected_result
 
@@ -543,10 +576,18 @@ RSpec.describe Gitlab::Database::MigrationHelpers::RestrictGitlabSchema, query_a
                   expect { migration_class.migrate(:up) }.to raise_error(Gitlab::Database::QueryAnalyzers::RestrictAllowedSchemas::DMLAccessDeniedError)
                   expect { ignore_error(Gitlab::Database::QueryAnalyzers::RestrictAllowedSchemas::DMLAccessDeniedError) { migration_class.migrate(:down) } }.not_to raise_error
 
+                when :runtime_error
+                  expect { migration_class.migrate(:up) }.to raise_error(RuntimeError)
+                  expect { ignore_error(RuntimeError) { migration_class.migrate(:down) } }.not_to raise_error
+
                 when :ddl_not_allowed
                   expect { migration_class.migrate(:up) }.to raise_error(Gitlab::Database::QueryAnalyzers::RestrictAllowedSchemas::DDLNotAllowedError)
                   expect { ignore_error(Gitlab::Database::QueryAnalyzers::RestrictAllowedSchemas::DDLNotAllowedError) { migration_class.migrate(:down) } }.not_to raise_error
 
+                when :cross_schema_error
+                  expect { migration_class.migrate(:up) }.to raise_error(Gitlab::Database::QueryAnalyzers::GitlabSchemasValidateConnection::CrossSchemaAccessError)
+                  expect { ignore_error(Gitlab::Database::QueryAnalyzers::GitlabSchemasValidateConnection::CrossSchemaAccessError) { migration_class.migrate(:down) } }.not_to raise_error
+
                 when :skipped
                   expect_next_instance_of(migration_class) do |migration_object|
                     expect(migration_object).to receive(:migration_skipped).and_call_original
diff --git a/spec/lib/gitlab/database/migrations/background_migration_helpers_spec.rb b/spec/lib/gitlab/database/migrations/background_migration_helpers_spec.rb
index 921628d92cc..b0caa21e01a 100644
--- a/spec/lib/gitlab/database/migrations/background_migration_helpers_spec.rb
+++ b/spec/lib/gitlab/database/migrations/background_migration_helpers_spec.rb
@@ -6,12 +6,21 @@ RSpec.describe Gitlab::Database::Migrations::BackgroundMigrationHelpers do
   let(:base_class) { ActiveRecord::Migration }
 
   let(:model) do
-    base_class.new.extend(described_class)
+    base_class.new
+      .extend(described_class)
+      .extend(Gitlab::Database::Migrations::ReestablishedConnectionStack)
   end
 
-  shared_examples_for 'helpers that enqueue background migrations' do |worker_class, tracking_database|
+  shared_examples_for 'helpers that enqueue background migrations' do |worker_class, connection_class, tracking_database|
     before do
       allow(model).to receive(:tracking_database).and_return(tracking_database)
+
+      # Due to lib/gitlab/database/load_balancing/configuration.rb:92 requiring RequestStore
+      # we cannot use stub_feature_flags(force_no_sharing_primary_model: true)
+      allow(connection_class.connection.load_balancer.configuration)
+        .to receive(:use_dedicated_connection?).and_return(true)
+
+      allow(model).to receive(:connection).and_return(connection_class.connection)
     end
 
     describe '#queue_background_migration_jobs_by_range_at_intervals' do
@@ -203,6 +212,22 @@ RSpec.describe Gitlab::Database::Migrations::BackgroundMigrationHelpers do
         end
       end
 
+      context 'when using Migration[2.0]' do
+        let(:base_class) { Class.new(Gitlab::Database::Migration[2.0]) }
+
+        context 'when restriction is set to gitlab_shared' do
+          before do
+            base_class.restrict_gitlab_migration gitlab_schema: :gitlab_shared
+          end
+
+          it 'does raise an exception' do
+            expect do
+              model.queue_background_migration_jobs_by_range_at_intervals(ProjectAuthorization, 'FooJob', 10.seconds)
+            end.to raise_error /use `restrict_gitlab_migration:` " with `:gitlab_shared`/
+          end
+        end
+      end
+
       context 'when within transaction' do
         before do
           allow(model).to receive(:transaction_open?).and_return(true)
@@ -241,6 +266,27 @@ RSpec.describe Gitlab::Database::Migrations::BackgroundMigrationHelpers do
         expect(subject).to eq(20.minutes)
       end
 
+      context 'when using Migration[2.0]' do
+        let(:base_class) { Class.new(Gitlab::Database::Migration[2.0]) }
+
+        it 'does re-enqueue pending jobs' do
+          subject
+
+          expect(worker_class.jobs).not_to be_empty
+        end
+
+        context 'when restriction is set' do
+          before do
+            base_class.restrict_gitlab_migration gitlab_schema: :gitlab_main
+          end
+
+          it 'does raise an exception' do
+            expect { subject }
+              .to raise_error /The `#requeue_background_migration_jobs_by_range_at_intervals` cannot use `restrict_gitlab_migration:`./
+          end
+        end
+      end
+
       context 'when within transaction' do
         before do
           allow(model).to receive(:transaction_open?).and_return(true)
@@ -373,18 +419,37 @@ RSpec.describe Gitlab::Database::Migrations::BackgroundMigrationHelpers do
       end
 
       context 'when using Migration[2.0]' do
-        let(:base_class) { ::Gitlab::Database::Migration[2.0] }
+        let(:base_class) { Class.new(Gitlab::Database::Migration[2.0]) }
 
-        let!(:job_class) do
-          Class.new do
-            def perform(*arguments)
-            end
+        it_behaves_like 'finalized tracked background migration', worker_class do
+          before do
+            model.finalize_background_migration(job_class_name)
           end
         end
 
-        it 'does raise an exception' do
-          expect { model.finalize_background_migration(job_class_name, delete_tracking_jobs: %w[pending succeeded]) }
-            .to raise_error /is currently not supported with/
+        context 'when restriction is set' do
+          before do
+            base_class.restrict_gitlab_migration gitlab_schema: :gitlab_main
+          end
+
+          it 'does raise an exception' do
+            expect { model.finalize_background_migration(job_class_name, delete_tracking_jobs: %w[pending succeeded]) }
+              .to raise_error /The `#finalize_background_migration` cannot use `restrict_gitlab_migration:`./
+          end
+        end
+      end
+
+      context 'when running migration in reconfigured ActiveRecord::Base context' do
+        it_behaves_like 'reconfigures connection stack', tracking_database do
+          it 'does restore connection hierarchy' do
+            expect_next_instances_of(job_class, 1..) do |job|
+              expect(job).to receive(:perform) do
+                validate_connections!
+              end
+            end
+
+            model.finalize_background_migration(job_class_name, delete_tracking_jobs: %w[pending succeeded])
+          end
         end
       end
 
@@ -505,7 +570,7 @@ RSpec.describe Gitlab::Database::Migrations::BackgroundMigrationHelpers do
   end
 
   context 'when the migration is running against the main database' do
-    it_behaves_like 'helpers that enqueue background migrations', BackgroundMigrationWorker, 'main'
+    it_behaves_like 'helpers that enqueue background migrations', BackgroundMigrationWorker, ActiveRecord::Base, 'main'
   end
 
   context 'when the migration is running against the ci database', if: Gitlab::Database.has_config?(:ci) do
@@ -515,7 +580,7 @@ RSpec.describe Gitlab::Database::Migrations::BackgroundMigrationHelpers do
       end
     end
 
-    it_behaves_like 'helpers that enqueue background migrations', BackgroundMigration::CiDatabaseWorker, 'ci'
+    it_behaves_like 'helpers that enqueue background migrations', BackgroundMigration::CiDatabaseWorker, Ci::ApplicationRecord, 'ci'
   end
 
   describe '#delete_job_tracking' do
diff --git a/spec/lib/gitlab/database/migrations/reestablished_connection_stack_spec.rb b/spec/lib/gitlab/database/migrations/reestablished_connection_stack_spec.rb
new file mode 100644
index 00000000000..cfb308c63e4
--- /dev/null
+++ b/spec/lib/gitlab/database/migrations/reestablished_connection_stack_spec.rb
@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::Database::Migrations::ReestablishedConnectionStack do
+  let(:base_class) { ActiveRecord::Migration }
+
+  let(:model) do
+    base_class.new
+      .extend(described_class)
+  end
+
+  describe '#with_restored_connection_stack' do
+    Gitlab::Database.database_base_models.each do |db_config_name, _|
+      context db_config_name do
+        it_behaves_like "reconfigures connection stack", db_config_name do
+          it 'does restore connection hierarchy' do
+            model.with_restored_connection_stack do
+              validate_connections!
+            end
+          end
+
+          primary_db_config = ActiveRecord::Base.configurations.primary?(db_config_name)
+
+          it 'does reconfigure connection handler', unless: primary_db_config do
+            original_handler = ActiveRecord::Base.connection_handler
+            new_handler = nil
+
+            model.with_restored_connection_stack do
+              new_handler = ActiveRecord::Base.connection_handler
+
+              # establish connection
+              ApplicationRecord.connection.select_one("SELECT 1 FROM projects LIMIT 1")
+              Ci::ApplicationRecord.connection.select_one("SELECT 1 FROM ci_builds LIMIT 1")
+            end
+
+            expect(new_handler).not_to eq(original_handler), "is reconnected"
+            expect(new_handler).not_to be_active_connections
+            expect(ActiveRecord::Base.connection_handler).to eq(original_handler), "is restored"
+          end
+
+          it 'does keep original connection handler', if: primary_db_config do
+            original_handler = ActiveRecord::Base.connection_handler
+            new_handler = nil
+
+            model.with_restored_connection_stack do
+              new_handler = ActiveRecord::Base.connection_handler
+            end
+
+            expect(new_handler).to eq(original_handler)
+            expect(ActiveRecord::Base.connection_handler).to eq(original_handler)
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/spec/lib/gitlab/database/migrations/test_background_runner_spec.rb b/spec/lib/gitlab/database/migrations/test_background_runner_spec.rb
index eb7f37e02ef..a2fe91712c7 100644
--- a/spec/lib/gitlab/database/migrations/test_background_runner_spec.rb
+++ b/spec/lib/gitlab/database/migrations/test_background_runner_spec.rb
@@ -3,6 +3,7 @@
 require 'spec_helper'
 
 RSpec.describe Gitlab::Database::Migrations::TestBackgroundRunner, :redis do
+  include Gitlab::Database::Migrations::ReestablishedConnectionStack
   include Gitlab::Database::Migrations::BackgroundMigrationHelpers
   include Database::MigrationTestingHelpers
 
@@ -13,6 +14,7 @@ RSpec.describe Gitlab::Database::Migrations::TestBackgroundRunner, :redis do
   end
 
   let(:result_dir) { Dir.mktmpdir }
+  let(:connection) { ApplicationRecord.connection }
 
   after do
     FileUtils.rm_rf(result_dir)
diff --git a/spec/lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection_spec.rb b/spec/lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection_spec.rb
new file mode 100644
index 00000000000..5e8afc0102e
--- /dev/null
+++ b/spec/lib/gitlab/database/query_analyzers/gitlab_schemas_validate_connection_spec.rb
@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::Database::QueryAnalyzers::GitlabSchemasValidateConnection, query_analyzers: false do
+  let(:analyzer) { described_class }
+
+  context 'properly observes all queries', :request_store do
+    using RSpec::Parameterized::TableSyntax
+
+    where do
+      {
+        "for simple query observes schema correctly" => {
+          model: ApplicationRecord,
+          sql: "SELECT 1 FROM projects",
+          expect_error: nil,
+          setup: nil
+        },
+        "for query accessing gitlab_ci and gitlab_main" => {
+          model: ApplicationRecord,
+          sql: "SELECT 1 FROM projects LEFT JOIN ci_builds ON ci_builds.project_id=projects.id",
+          expect_error: /The query tried to access \["projects", "ci_builds"\]/,
+          setup: -> (_) { skip_if_multiple_databases_not_setup }
+        },
+        "for query accessing gitlab_ci and gitlab_main the gitlab_schemas is always ordered" => {
+          model: ApplicationRecord,
+          sql: "SELECT 1 FROM ci_builds LEFT JOIN projects ON ci_builds.project_id=projects.id",
+          expect_error: /The query tried to access \["ci_builds", "projects"\]/,
+          setup: -> (_) { skip_if_multiple_databases_not_setup }
+        },
+        "for query accessing main table from CI database" => {
+          model: Ci::ApplicationRecord,
+          sql: "SELECT 1 FROM projects",
+          expect_error: /The query tried to access \["projects"\]/,
+          setup: -> (_) { skip_if_multiple_databases_not_setup }
+        },
+        "for query accessing CI database" => {
+          model: Ci::ApplicationRecord,
+          sql: "SELECT 1 FROM ci_builds",
+          expect_error: nil
+        },
+        "for query accessing CI table from main database" => {
+          model: ::ApplicationRecord,
+          sql: "SELECT 1 FROM ci_builds",
+          expect_error: /The query tried to access \["ci_builds"\]/,
+          setup: -> (_) { skip_if_multiple_databases_not_setup }
+        }
+      }
+    end
+
+    with_them do
+      it do
+        instance_eval(&setup) if setup
+
+        if expect_error
+          expect { process_sql(model, sql) }.to raise_error(expect_error)
+        else
+          expect { process_sql(model, sql) }.not_to raise_error
+        end
+      end
+    end
+  end
+
+  def process_sql(model, sql)
+    Gitlab::Database::QueryAnalyzer.instance.within([analyzer]) do
+      # Skip load balancer and retrieve connection assigned to model
+      Gitlab::Database::QueryAnalyzer.instance.send(:process_sql, sql, model.retrieve_connection)
+    end
+  end
+end
diff --git a/spec/lib/gitlab/database/shared_model_spec.rb b/spec/lib/gitlab/database/shared_model_spec.rb
index 54af4a0c4dc..574111f4c01 100644
--- a/spec/lib/gitlab/database/shared_model_spec.rb
+++ b/spec/lib/gitlab/database/shared_model_spec.rb
@@ -51,7 +51,7 @@ RSpec.describe Gitlab::Database::SharedModel do
 
             expect do
               described_class.using_connection(second_connection) {}
-            end.to raise_error(/cannot nest connection overrides/)
+            end.to raise_error(/Cannot change connection for Gitlab::Database::SharedModel/)
 
             expect(described_class.connection).to be(new_connection)
           end
diff --git a/spec/lib/gitlab/metrics/rails_slis_spec.rb b/spec/lib/gitlab/metrics/rails_slis_spec.rb
index 2ba06316507..b30eb57101f 100644
--- a/spec/lib/gitlab/metrics/rails_slis_spec.rb
+++ b/spec/lib/gitlab/metrics/rails_slis_spec.rb
@@ -36,18 +36,8 @@ RSpec.describe Gitlab::Metrics::RailsSlis do
         }
       end
 
-      expect(Gitlab::Metrics::Sli).to receive(:initialized?).with(:rails_request_apdex) { false }
-      expect(Gitlab::Metrics::Sli).to receive(:initialized?).with(:graphql_query_apdex) { false }
-      expect(Gitlab::Metrics::Sli).to receive(:initialize_sli).with(:rails_request_apdex, array_including(*possible_labels)).and_call_original
-      expect(Gitlab::Metrics::Sli).to receive(:initialize_sli).with(:graphql_query_apdex, array_including(*possible_graphql_labels)).and_call_original
-
-      described_class.initialize_request_slis!
-    end
-
-    it 'does not initialize the SLI if they were initialized already', :aggregate_failures do
-      expect(Gitlab::Metrics::Sli).to receive(:initialized?).with(:rails_request_apdex) { true }
-      expect(Gitlab::Metrics::Sli).to receive(:initialized?).with(:graphql_query_apdex) { true }
-      expect(Gitlab::Metrics::Sli).not_to receive(:initialize_sli)
+      expect(Gitlab::Metrics::Sli::Apdex).to receive(:initialize_sli).with(:rails_request, array_including(*possible_labels)).and_call_original
+      expect(Gitlab::Metrics::Sli::Apdex).to receive(:initialize_sli).with(:graphql_query, array_including(*possible_graphql_labels)).and_call_original
 
       described_class.initialize_request_slis!
     end
diff --git a/spec/lib/gitlab/metrics/sli_spec.rb b/spec/lib/gitlab/metrics/sli_spec.rb
index 8ba4bf29568..9b776d6738d 100644
--- a/spec/lib/gitlab/metrics/sli_spec.rb
+++ b/spec/lib/gitlab/metrics/sli_spec.rb
@@ -10,72 +10,151 @@ RSpec.describe Gitlab::Metrics::Sli do
   end
 
   describe 'Class methods' do
-    before do
-      described_class.instance_variable_set(:@known_slis, nil)
+    it 'does not allow them to be called on the parent module' do
+      expect(described_class).not_to respond_to(:[])
+      expect(described_class).not_to respond_to(:initialize_sli)
     end
 
-    describe '.[]' do
-      it 'warns about an uninitialized SLI but returns and stores a new one' do
-        sli = described_class[:bar]
+    it 'allows different SLIs to be defined on each subclass' do
+      apdex_counters = [
+        fake_total_counter('foo', 'apdex'),
+        fake_numerator_counter('foo', 'apdex', 'success')
+      ]
 
-        expect(described_class[:bar]).to be(sli)
-      end
+      error_rate_counters = [
+        fake_total_counter('foo', 'error_rate'),
+        fake_numerator_counter('foo', 'error_rate', 'error')
+      ]
 
-      it 'returns the same object for multiple accesses' do
-        sli = described_class.initialize_sli(:huzzah, [])
+      apdex = described_class::Apdex.initialize_sli(:foo, [{ hello: :world }])
 
-        2.times do
-          expect(described_class[:huzzah]).to be(sli)
+      expect(apdex_counters).to all(have_received(:get).with(hello: :world))
+
+      error_rate = described_class::ErrorRate.initialize_sli(:foo, [{ other: :labels }])
+
+      expect(error_rate_counters).to all(have_received(:get).with(other: :labels))
+
+      expect(described_class::Apdex[:foo]).to be(apdex)
+      expect(described_class::ErrorRate[:foo]).to be(error_rate)
+    end
+  end
+
+  subclasses = {
+    Gitlab::Metrics::Sli::Apdex => :success,
+    Gitlab::Metrics::Sli::ErrorRate => :error
+  }
+
+  subclasses.each do |subclass, numerator_type|
+    subclass_type = subclass.to_s.demodulize.underscore
+
+    describe subclass do
+      describe 'Class methods' do
+        before do
+          described_class.instance_variable_set(:@known_slis, nil)
+        end
+
+        describe '.[]' do
+          it 'returns and stores a new, uninitialized SLI' do
+            sli = described_class[:bar]
+
+            expect(described_class[:bar]).to be(sli)
+            expect(described_class[:bar]).not_to be_initialized
+          end
+
+          it 'returns the same object for multiple accesses' do
+            sli = described_class.initialize_sli(:huzzah, [])
+
+            2.times do
+              expect(described_class[:huzzah]).to be(sli)
+            end
+          end
+        end
+
+        describe '.initialize_sli' do
+          it 'returns and stores a new initialized SLI' do
+            counters = [
+              fake_total_counter(:bar, subclass_type),
+              fake_numerator_counter(:bar, subclass_type, numerator_type)
+            ]
+
+            sli = described_class.initialize_sli(:bar, [{ hello: :world }])
+
+            expect(sli).to be_initialized
+            expect(counters).to all(have_received(:get).with(hello: :world))
+            expect(counters).to all(have_received(:get).with(hello: :world))
+          end
+
+          it 'does not change labels for an already-initialized SLI' do
+            counters = [
+              fake_total_counter(:bar, subclass_type),
+              fake_numerator_counter(:bar, subclass_type, numerator_type)
+            ]
+
+            sli = described_class.initialize_sli(:bar, [{ hello: :world }])
+
+            expect(sli).to be_initialized
+            expect(counters).to all(have_received(:get).with(hello: :world))
+            expect(counters).to all(have_received(:get).with(hello: :world))
+
+            counters.each do |counter|
+              expect(counter).not_to receive(:get)
+            end
+
+            expect(described_class.initialize_sli(:bar, [{ other: :labels }])).to eq(sli)
+          end
+        end
+
+        describe '.initialized?' do
+          before do
+            fake_total_counter(:boom, subclass_type)
+            fake_numerator_counter(:boom, subclass_type, numerator_type)
+          end
+
+          it 'is true when an SLI was initialized with labels' do
+            expect { described_class.initialize_sli(:boom, [{ hello: :world }]) }
+              .to change { described_class.initialized?(:boom) }.from(false).to(true)
+          end
+
+          it 'is false when an SLI was not initialized with labels' do
+            expect { described_class.initialize_sli(:boom, []) }
+              .not_to change { described_class.initialized?(:boom) }.from(false)
+          end
         end
       end
-    end
 
-    describe '.initialized?' do
-      before do
-        fake_total_counter(:boom)
-        fake_success_counter(:boom)
+      describe '#initialize_counters' do
+        it 'initializes counters for the passed label combinations' do
+          counters = [
+            fake_total_counter(:hey, subclass_type),
+            fake_numerator_counter(:hey, subclass_type, numerator_type)
+          ]
+
+          described_class.new(:hey).initialize_counters([{ foo: 'bar' }, { foo: 'baz' }])
+
+          expect(counters).to all(have_received(:get).with({ foo: 'bar' }))
+          expect(counters).to all(have_received(:get).with({ foo: 'baz' }))
+        end
       end
 
-      it 'is true when an SLI was initialized with labels' do
-        expect { described_class.initialize_sli(:boom, [{ hello: :world }]) }
-          .to change { described_class.initialized?(:boom) }.from(false).to(true)
+      describe "#increment" do
+        let!(:sli) { described_class.new(:heyo) }
+        let!(:total_counter) { fake_total_counter(:heyo, subclass_type) }
+        let!(:numerator_counter) { fake_numerator_counter(:heyo, subclass_type, numerator_type) }
+
+        it "increments both counters for labels when #{numerator_type} is true" do
+          sli.increment(labels: { hello: "world" }, numerator_type => true)
+
+          expect(total_counter).to have_received(:increment).with({ hello: 'world' })
+          expect(numerator_counter).to have_received(:increment).with({ hello: 'world' })
+        end
+
+        it "only increments the total counters for labels when #{numerator_type} is false" do
+          sli.increment(labels: { hello: "world" }, numerator_type => false)
+
+          expect(total_counter).to have_received(:increment).with({ hello: 'world' })
+          expect(numerator_counter).not_to have_received(:increment).with({ hello: 'world' })
+        end
       end
-
-      it 'is false when an SLI was not initialized with labels' do
-        expect { described_class.initialize_sli(:boom, []) }
-          .not_to change { described_class.initialized?(:boom) }.from(false)
-      end
-    end
-  end
-
-  describe '#initialize_counters' do
-    it 'initializes counters for the passed label combinations' do
-      counters = [fake_total_counter(:hey), fake_success_counter(:hey)]
-
-      described_class.new(:hey).initialize_counters([{ foo: 'bar' }, { foo: 'baz' }])
-
-      expect(counters).to all(have_received(:get).with({ foo: 'bar' }))
-      expect(counters).to all(have_received(:get).with({ foo: 'baz' }))
-    end
-  end
-
-  describe "#increment" do
-    let!(:sli) { described_class.new(:heyo) }
-    let!(:total_counter) { fake_total_counter(:heyo) }
-    let!(:success_counter) { fake_success_counter(:heyo) }
-
-    it 'increments both counters for labels successes' do
-      sli.increment(labels: { hello: "world" }, success: true)
-
-      expect(total_counter).to have_received(:increment).with({ hello: 'world' })
-      expect(success_counter).to have_received(:increment).with({ hello: 'world' })
-    end
-
-    it 'only increments the total counters for labels when not successful' do
-      sli.increment(labels: { hello: "world" }, success: false)
-
-      expect(total_counter).to have_received(:increment).with({ hello: 'world' })
-      expect(success_counter).not_to have_received(:increment).with({ hello: 'world' })
     end
   end
 
@@ -89,11 +168,11 @@ RSpec.describe Gitlab::Metrics::Sli do
     fake_counter
   end
 
-  def fake_total_counter(name)
-    fake_prometheus_counter("gitlab_sli:#{name}:total")
+  def fake_total_counter(name, type)
+    fake_prometheus_counter("gitlab_sli:#{name}_#{type}:total")
   end
 
-  def fake_success_counter(name)
-    fake_prometheus_counter("gitlab_sli:#{name}:success_total")
+  def fake_numerator_counter(name, type, numerator_name)
+    fake_prometheus_counter("gitlab_sli:#{name}_#{type}:#{numerator_name}_total")
   end
 end
diff --git a/spec/services/projects/blame_service_spec.rb b/spec/services/projects/blame_service_spec.rb
new file mode 100644
index 00000000000..40b2bc869dc
--- /dev/null
+++ b/spec/services/projects/blame_service_spec.rb
@@ -0,0 +1,129 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Projects::BlameService, :aggregate_failures do
+  subject(:service) { described_class.new(blob, commit, params) }
+
+  let_it_be(:project) { create(:project, :repository) }
+  let_it_be(:commit) { project.repository.commit }
+  let_it_be(:blob) { project.repository.blob_at('HEAD', 'README.md') }
+
+  let(:params) { { page: page } }
+  let(:page) { nil }
+
+  before do
+    stub_const("#{described_class.name}::PER_PAGE", 2)
+  end
+
+  describe '#blame' do
+    subject { service.blame }
+
+    it 'returns a correct Gitlab::Blame object' do
+      is_expected.to be_kind_of(Gitlab::Blame)
+
+      expect(subject.blob).to eq(blob)
+      expect(subject.commit).to eq(commit)
+      expect(subject.range).to eq(1..2)
+    end
+
+    describe 'Pagination range calculation' do
+      subject { service.blame.range }
+
+      context 'with page = 1' do
+        let(:page) { 1 }
+
+        it { is_expected.to eq(1..2) }
+      end
+
+      context 'with page = 2' do
+        let(:page) { 2 }
+
+        it { is_expected.to eq(3..4) }
+      end
+
+      context 'with page = 3 (overlimit)' do
+        let(:page) { 3 }
+
+        it { is_expected.to eq(1..2) }
+      end
+
+      context 'with page = 0 (incorrect)' do
+        let(:page) { 0 }
+
+        it { is_expected.to eq(1..2) }
+      end
+
+      context 'when feature flag disabled' do
+        before do
+          stub_feature_flags(blame_page_pagination: false)
+        end
+
+        it { is_expected.to be_nil }
+      end
+    end
+  end
+
+  describe '#pagination' do
+    subject { service.pagination }
+
+    it 'returns a pagination object' do
+      is_expected.to be_kind_of(Kaminari::PaginatableArray)
+
+      expect(subject.current_page).to eq(1)
+      expect(subject.total_pages).to eq(2)
+      expect(subject.total_count).to eq(4)
+    end
+
+    context 'when feature flag disabled' do
+      before do
+        stub_feature_flags(blame_page_pagination: false)
+      end
+
+      it { is_expected.to be_nil }
+    end
+
+    context 'when per_page is above the global max per page limit' do
+      before do
+        stub_const("#{described_class.name}::PER_PAGE", 1000)
+        allow(blob).to receive_message_chain(:data, :lines, :count) { 500 }
+      end
+
+      it 'returns a correct pagination object' do
+        is_expected.to be_kind_of(Kaminari::PaginatableArray)
+
+        expect(subject.current_page).to eq(1)
+        expect(subject.total_pages).to eq(1)
+        expect(subject.total_count).to eq(500)
+      end
+    end
+
+    describe 'Current page' do
+      subject { service.pagination.current_page }
+
+      context 'with page = 1' do
+        let(:page) { 1 }
+
+        it { is_expected.to eq(1) }
+      end
+
+      context 'with page = 2' do
+        let(:page) { 2 }
+
+        it { is_expected.to eq(2) }
+      end
+
+      context 'with page = 3 (overlimit)' do
+        let(:page) { 3 }
+
+        it { is_expected.to eq(1) }
+      end
+
+      context 'with page = 0 (incorrect)' do
+        let(:page) { 0 }
+
+        it { is_expected.to eq(1) }
+      end
+    end
+  end
+end
diff --git a/spec/support/helpers/next_instance_of.rb b/spec/support/helpers/next_instance_of.rb
index 95d8936588c..461d411a5ce 100644
--- a/spec/support/helpers/next_instance_of.rb
+++ b/spec/support/helpers/next_instance_of.rb
@@ -22,9 +22,15 @@ module NextInstanceOf
   def stub_new(target, number, ordered = false, *new_args, &blk)
     receive_new = receive(:new)
     receive_new.ordered if ordered
-    receive_new.exactly(number).times if number
     receive_new.with(*new_args) if new_args.any?
 
+    if number.is_a?(Range)
+      receive_new.at_least(number.begin).times if number.begin
+      receive_new.at_most(number.end).times if number.end
+    elsif number
+      receive_new.exactly(number).times
+    end
+
     target.to receive_new.and_wrap_original do |method, *original_args|
       method.call(*original_args).tap(&blk)
     end
diff --git a/spec/support/shared_examples/lib/gitlab/database/reestablished_connection_stack_shared_examples.rb b/spec/support/shared_examples/lib/gitlab/database/reestablished_connection_stack_shared_examples.rb
new file mode 100644
index 00000000000..67d739b79ab
--- /dev/null
+++ b/spec/support/shared_examples/lib/gitlab/database/reestablished_connection_stack_shared_examples.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+RSpec.shared_context 'reconfigures connection stack' do |db_config_name|
+  before do
+    skip_if_multiple_databases_not_setup
+
+    # Due to lib/gitlab/database/load_balancing/configuration.rb:92 requiring RequestStore
+    # we cannot use stub_feature_flags(force_no_sharing_primary_model: true)
+    Gitlab::Database.database_base_models.each do |_, model_class|
+      allow(model_class.load_balancer.configuration).to receive(:use_dedicated_connection?).and_return(true)
+    end
+
+    ActiveRecord::Base.establish_connection(db_config_name.to_sym) # rubocop:disable Database/EstablishConnection
+
+    expect(Gitlab::Database.db_config_name(ActiveRecord::Base.connection)) # rubocop:disable Database/MultipleDatabases
+      .to eq(db_config_name)
+  end
+
+  around do |example|
+    with_reestablished_active_record_base do
+      example.run
+    end
+  end
+
+  def validate_connections!
+    model_connections = Gitlab::Database.database_base_models.to_h do |db_config_name, model_class|
+      [model_class, Gitlab::Database.db_config_name(model_class.connection)]
+    end
+
+    expect(model_connections).to eq(Gitlab::Database.database_base_models.invert)
+  end
+end
diff --git a/spec/tooling/danger/project_helper_spec.rb b/spec/tooling/danger/project_helper_spec.rb
index b3fb592c2e3..78e9c8e9c62 100644
--- a/spec/tooling/danger/project_helper_spec.rb
+++ b/spec/tooling/danger/project_helper_spec.rb
@@ -101,6 +101,15 @@ RSpec.describe Tooling::Danger::ProjectHelper do
       'Rakefile'       | [:backend]
       'FOO_VERSION'    | [:backend]
 
+      'lib/scripts/bar.rb'                                    | [:backend, :tooling]
+      'lib/scripts/bar.js'                                    | [:frontend, :tooling]
+      'scripts/bar.rb'                                        | [:backend, :tooling]
+      'scripts/bar.js'                                        | [:frontend, :tooling]
+      'lib/scripts/subdir/bar.rb'                             | [:backend, :tooling]
+      'lib/scripts/subdir/bar.js'                             | [:frontend, :tooling]
+      'scripts/subdir/bar.rb'                                 | [:backend, :tooling]
+      'scripts/subdir/bar.js'                                 | [:frontend, :tooling]
+
       'Dangerfile'                                            | [:tooling]
       'danger/bundle_size/Dangerfile'                         | [:tooling]
       'ee/danger/bundle_size/Dangerfile'                      | [:tooling]
diff --git a/tooling/danger/project_helper.rb b/tooling/danger/project_helper.rb
index ad58907c20d..c0afd9b7319 100644
--- a/tooling/danger/project_helper.rb
+++ b/tooling/danger/project_helper.rb
@@ -101,6 +101,8 @@ module Tooling
         %r{\A\.editorconfig\z} => :tooling,
         %r{Dangerfile\z} => :tooling,
         %r{\A((ee|jh)/)?(danger/|tooling/danger/)} => :tooling,
+        %r{\A((ee|jh)/)?(lib/)?scripts/.*\.rb} => [:backend, :tooling],
+        %r{\A((ee|jh)/)?(lib/)?scripts/.*\.js} => [:frontend, :tooling],
         %r{\A((ee|jh)/)?scripts/} => :tooling,
         %r{\Atooling/} => :tooling,
         %r{(CODEOWNERS)} => :tooling,