From ed509186782d16d2bbcb34ac73303e8cb3a9d5a2 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Wed, 2 Nov 2022 12:11:04 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .rubocop_todo/style/case_like_if.yml          |  63 --------------
 .../style/redundant_interpolation.yml         |  79 ------------------
 .../diffs/components/diff_discussions.vue     |   1 +
 .../notes/components/discussion_notes.vue     |   7 ++
 .../notes/components/noteable_discussion.vue  |   6 ++
 .../notes/components/noteable_note.vue        |   7 +-
 .../labels_select_widget/label_item.vue       |   2 +-
 app/controllers/concerns/issuable_actions.rb  |   5 +-
 .../application_controller.rb                 |   5 +-
 .../oauth/authorizations_controller.rb        |  17 +++-
 app/controllers/projects/issues_controller.rb |   1 +
 app/controllers/projects/labels_controller.rb |   5 +-
 app/graphql/types/ci/job_need_union.rb        |   5 +-
 app/helpers/application_settings_helper.rb    |   1 +
 app/helpers/avatars_helper.rb                 |   5 +-
 app/helpers/broadcast_messages_helper.rb      |   5 +-
 app/helpers/issues_helper.rb                  |   5 +-
 .../routing/pseudonymization_helper.rb        |   7 +-
 app/helpers/todos_helper.rb                   |   5 +-
 app/models/application_setting.rb             |   3 +
 .../application_setting_implementation.rb     |   1 +
 app/models/integrations/jira.rb               |   5 +-
 app/models/members/member_task.rb             |   5 +-
 app/models/namespace.rb                       |   7 +-
 app/models/packages/go/module_version.rb      |   5 +-
 app/models/work_items/type.rb                 |  11 ++-
 app/serializers/group_child_serializer.rb     |   5 +-
 .../google_cloud/generate_pipeline_service.rb |   5 +-
 app/services/issuable/bulk_update_service.rb  |   5 +-
 app/services/todo_service.rb                  |   7 +-
 .../user_project_access_changed_service.rb    |   5 +-
 .../authorizations/forbidden.html.haml        |   5 ++
 .../development/work_items_mvc.yml            |   8 ++
 ...13103738_add_disable_admin_oauth_scopes.rb |   7 ++
 ...ective_and_keyresult_to_work_item_types.rb |  56 +++++++++++++
 db/schema_migrations/20221013103738           |   1 +
 db/schema_migrations/20221018050323           |   1 +
 db/structure.sql                              |   1 +
 doc/administration/gitaly/index.md            |   3 -
 doc/api/settings.md                           |   1 +
 doc/architecture/blueprints/pods/index.md     |  55 +++++++++++-
 .../blueprints/pods/pods-and-fulfillment.png  | Bin 0 -> 75803 bytes
 doc/drawers/advanced_search_syntax.md         |  45 +++++-----
 .../elasticsearch_troubleshooting.md          |   4 +-
 doc/user/project/integrations/webhooks.md     |  10 ++-
 doc/user/search/advanced_search.md            |  38 ++++++++-
 .../global_search/advanced_search_syntax.md   |  55 ++----------
 lib/api/helpers/label_helpers.rb              |   5 +-
 lib/api/settings.rb                           |   1 +
 lib/gitlab/ci/ansi2html.rb                    |   5 +-
 lib/gitlab/ci/ansi2json/converter.rb          |   5 +-
 lib/gitlab/ci/build/image.rb                  |   5 +-
 lib/gitlab/identifier.rb                      |   5 +-
 lib/gitlab/issues/rebalancing/state.rb        |   5 +-
 lib/gitlab/pagination/gitaly_keyset_pager.rb  |  14 ++--
 .../duplicate_jobs/duplicate_job.rb           |   1 +
 lib/gitlab/utils.rb                           |  10 ++-
 lib/gitlab/utils/strong_memoize.rb            |   5 +-
 locale/gitlab.pot                             |   6 ++
 qa/qa/git/repository.rb                       |   5 +-
 qa/qa/scenario/bootable.rb                    |   5 +-
 .../admin/integrations_controller_spec.rb     |   2 +-
 .../oauth/authorizations_controller_spec.rb   |  69 +++++++++++++++
 .../projects/issues_controller_spec.rb        |  18 ++++
 .../boards/user_adds_lists_to_board_spec.rb   |   5 +-
 spec/features/commits_spec.rb                 |   4 +-
 spec/features/issues/user_edits_issue_spec.rb |   4 +-
 .../user_scrolls_to_note_on_load_spec.rb      |   2 +-
 spec/features/one_trust_spec.rb               |   2 +-
 ...ith_external_authorization_enabled_spec.rb |   8 +-
 .../projects/jobs/user_browses_jobs_spec.rb   |   6 +-
 .../__snapshots__/notes_app_spec.js.snap      |   4 +-
 .../container_repositories_resolver_spec.rb   |   4 +-
 spec/graphql/types/issue_type_enum_spec.rb    |   2 +-
 spec/helpers/environments_helper_spec.rb      |   2 +-
 spec/helpers/integrations_helper_spec.rb      |   2 +-
 spec/helpers/snippets_helper_spec.rb          |   4 +-
 .../packages/dependency_proxy_helpers_spec.rb |   2 +-
 .../validations/validators/git_ref_spec.rb    |   2 +-
 .../api/validations/validators/limit_spec.rb  |   4 +-
 spec/lib/backup/database_backup_error_spec.rb |   8 +-
 spec/lib/backup/file_backup_error_spec.rb     |   4 +-
 .../lib/banzai/filter/autolink_filter_spec.rb |   2 +-
 ...ssuable_reference_expansion_filter_spec.rb |   2 +-
 .../references/alert_reference_filter_spec.rb |   2 +-
 .../commit_reference_filter_spec.rb           |   2 +-
 .../references/issue_reference_filter_spec.rb |   4 +-
 .../references/label_reference_filter_spec.rb |  10 +--
 .../milestone_reference_filter_spec.rb        |  10 +--
 .../project_reference_filter_spec.rb          |   4 +-
 .../references/user_reference_filter_spec.rb  |   2 +-
 spec/lib/feature_spec.rb                      |   8 +-
 spec/lib/gitlab/auth/auth_finders_spec.rb     |   5 +-
 .../legacy_upload_mover_spec.rb               |   2 +-
 .../populate_vulnerability_reads_spec.rb      |   2 +-
 spec/lib/gitlab/ci/config/entry/job_spec.rb   |   2 +-
 .../ci/config/entry/processable_spec.rb       |   2 +-
 spec/lib/gitlab/ci/reports/test_suite_spec.rb |   2 +-
 spec/lib/gitlab/database/batch_count_spec.rb  |   2 +-
 .../load_balancing/connection_proxy_spec.rb   |   4 +-
 .../gitlab/database/load_balancing_spec.rb    |   5 +-
 .../import_export/group/tree_saver_spec.rb    |   2 +-
 ..._projects_deletion_warning_tracker_spec.rb |   4 +-
 spec/lib/gitlab/metrics/dashboard/url_spec.rb |   2 +-
 .../pagination/gitaly_keyset_pager_spec.rb    |   2 +-
 spec/lib/gitlab/redis/multi_store_spec.rb     |   4 +-
 spec/lib/grafana/client_spec.rb               |   2 +-
 spec/lib/omni_auth/strategies/jwt_spec.rb     |   2 +
 spec/mailers/notify_spec.rb                   |   2 +-
 ...64845_populate_vulnerability_reads_spec.rb |   2 +-
 ...e_and_keyresult_to_work_item_types_spec.rb |  66 +++++++++++++++
 spec/models/active_session_spec.rb            |   2 +-
 .../clusters/platforms/kubernetes_spec.rb     |   2 +-
 spec/models/concerns/sha_attribute_spec.rb    |  10 ++-
 spec/models/diff_discussion_spec.rb           |   2 +-
 spec/models/namespace_spec.rb                 |   2 +-
 .../preloaders/labels_preloader_spec.rb       |   5 +-
 spec/models/work_items/type_spec.rb           |   4 +-
 spec/presenters/project_presenter_spec.rb     |   8 +-
 spec/rack_servers/configs/config.ru           |   2 +-
 .../api/alert_management_alerts_spec.rb       |   8 +-
 spec/requests/api/markdown_spec.rb            |   2 +-
 spec/requests/api/merge_requests_spec.rb      |   2 +-
 .../api/metrics/dashboard/annotations_spec.rb |   2 +-
 .../api/personal_access_tokens_spec.rb        |   5 +-
 spec/requests/api/rubygem_packages_spec.rb    |   5 +-
 spec/requests/api/tags_spec.rb                |   2 +-
 .../api/terraform/modules/v1/packages_spec.rb |   5 +-
 spec/requests/api/terraform/state_spec.rb     |   4 +-
 .../deployments_controller_spec.rb            |   6 +-
 .../service_accounts_controller_spec.rb       |   2 +-
 spec/routing/project_routing_spec.rb          |   4 +-
 .../atomic_processing_service_spec.rb         |   5 +-
 ..._or_update_service_account_service_spec.rb |   2 +-
 spec/services/groups/transfer_service_spec.rb |   4 +-
 spec/services/members/invite_service_spec.rb  |   4 +-
 .../change_state_service_spec.rb              |  10 ++-
 spec/services/todo_service_spec.rb            |   2 +-
 .../destroy/entity_leave_service_spec.rb      |   2 +-
 spec/services/users/approve_service_spec.rb   |   2 +-
 spec/services/users/ban_service_spec.rb       |   2 +-
 spec/services/users/reject_service_spec.rb    |   2 +-
 spec/services/users/unban_service_spec.rb     |   2 +-
 .../google_api/cloud_platform_helpers.rb      |   2 +-
 .../helpers/features/releases_helpers.rb      |   2 +-
 spec/support/helpers/filter_spec_helper.rb    |   5 +-
 spec/support/helpers/graphql_helpers.rb       |   2 +-
 spec/support/helpers/kubernetes_helpers.rb    |   2 +-
 spec/support/matchers/exceed_query_limit.rb   |   2 +-
 .../graphql/notes_creation_shared_examples.rb |   2 +-
 .../packages_resolvers_shared_examples.rb     |   4 +-
 .../mailers/notify_shared_examples.rb         |   4 +-
 ...ctive_record_subscriber_shared_examples.rb |   5 +-
 ...d_project_packages_list_shared_examples.rb |   2 +-
 .../requests/api/issues_shared_examples.rb    |   2 +-
 .../requests/api/notes_shared_examples.rb     |   7 +-
 ...ss_user_callout_service_shared_examples.rb |   2 +-
 .../object_storage_shared_examples.rb         |   5 +-
 spec/support_specs/graphql/arguments_spec.rb  |   4 +-
 .../commit/_commit_box.html.haml_spec.rb      |   2 +-
 .../loose_foreign_keys/cleanup_worker_spec.rb |   5 +-
 161 files changed, 699 insertions(+), 461 deletions(-)
 delete mode 100644 .rubocop_todo/style/case_like_if.yml
 create mode 100644 app/views/doorkeeper/authorizations/forbidden.html.haml
 create mode 100644 config/feature_flags/development/work_items_mvc.yml
 create mode 100644 db/migrate/20221013103738_add_disable_admin_oauth_scopes.rb
 create mode 100644 db/migrate/20221018050323_add_objective_and_keyresult_to_work_item_types.rb
 create mode 100644 db/schema_migrations/20221013103738
 create mode 100644 db/schema_migrations/20221018050323
 create mode 100644 doc/architecture/blueprints/pods/pods-and-fulfillment.png
 create mode 100644 spec/migrations/20221018050323_add_objective_and_keyresult_to_work_item_types_spec.rb

diff --git a/.rubocop_todo/style/case_like_if.yml b/.rubocop_todo/style/case_like_if.yml
deleted file mode 100644
index 61f2e6bc238..00000000000
--- a/.rubocop_todo/style/case_like_if.yml
+++ /dev/null
@@ -1,63 +0,0 @@
----
-# Cop supports --auto-correct.
-Style/CaseLikeIf:
-  Details: grace period
-  Exclude:
-    - 'app/controllers/concerns/issuable_actions.rb'
-    - 'app/controllers/groups/dependency_proxy/application_controller.rb'
-    - 'app/controllers/projects/labels_controller.rb'
-    - 'app/graphql/types/ci/job_need_union.rb'
-    - 'app/helpers/avatars_helper.rb'
-    - 'app/helpers/broadcast_messages_helper.rb'
-    - 'app/helpers/issues_helper.rb'
-    - 'app/helpers/routing/pseudonymization_helper.rb'
-    - 'app/helpers/todos_helper.rb'
-    - 'app/models/integrations/jira.rb'
-    - 'app/models/members/member_task.rb'
-    - 'app/models/namespace.rb'
-    - 'app/models/packages/go/module_version.rb'
-    - 'app/serializers/group_child_serializer.rb'
-    - 'app/services/google_cloud/generate_pipeline_service.rb'
-    - 'app/services/issuable/bulk_update_service.rb'
-    - 'app/services/todo_service.rb'
-    - 'app/services/user_project_access_changed_service.rb'
-    - 'ee/app/controllers/concerns/credentials_inventory_actions.rb'
-    - 'ee/app/finders/ee/notes_finder.rb'
-    - 'ee/app/finders/security/scan_execution_policies_finder.rb'
-    - 'ee/app/finders/security/training_providers/secure_code_warrior_url_finder.rb'
-    - 'ee/app/helpers/ee/branches_helper.rb'
-    - 'ee/app/services/epics/tree_reorder_service.rb'
-    - 'ee/app/services/merge_request_approval_settings/update_service.rb'
-    - 'ee/lib/gitlab/alert_management/alert_payload_field_extractor.rb'
-    - 'ee/spec/config/metrics/every_metric_definition_spec.rb'
-    - 'ee/spec/features/boards/user_adds_lists_to_board_spec.rb'
-    - 'ee/spec/features/issues/user_bulk_edits_issues_spec.rb'
-    - 'ee/spec/features/projects/custom_projects_template_spec.rb'
-    - 'ee/spec/support/matchers/ee/epic_aggregate_matchers.rb'
-    - 'lib/api/helpers/label_helpers.rb'
-    - 'lib/gitlab/ci/ansi2html.rb'
-    - 'lib/gitlab/ci/ansi2json/converter.rb'
-    - 'lib/gitlab/ci/build/image.rb'
-    - 'lib/gitlab/identifier.rb'
-    - 'lib/gitlab/issues/rebalancing/state.rb'
-    - 'lib/gitlab/pagination/gitaly_keyset_pager.rb'
-    - 'lib/gitlab/utils.rb'
-    - 'lib/gitlab/utils/strong_memoize.rb'
-    - 'qa/qa/git/repository.rb'
-    - 'qa/qa/scenario/bootable.rb'
-    - 'spec/features/boards/user_adds_lists_to_board_spec.rb'
-    - 'spec/lib/gitlab/auth/auth_finders_spec.rb'
-    - 'spec/lib/gitlab/database/load_balancing_spec.rb'
-    - 'spec/lib/omni_auth/strategies/jwt_spec.rb'
-    - 'spec/models/concerns/sha_attribute_spec.rb'
-    - 'spec/models/preloaders/labels_preloader_spec.rb'
-    - 'spec/requests/api/personal_access_tokens_spec.rb'
-    - 'spec/requests/api/rubygem_packages_spec.rb'
-    - 'spec/requests/api/terraform/modules/v1/packages_spec.rb'
-    - 'spec/services/ci/pipeline_processing/atomic_processing_service_spec.rb'
-    - 'spec/services/resource_events/change_state_service_spec.rb'
-    - 'spec/support/helpers/filter_spec_helper.rb'
-    - 'spec/support/shared_examples/metrics/active_record_subscriber_shared_examples.rb'
-    - 'spec/support/shared_examples/requests/api/notes_shared_examples.rb'
-    - 'spec/support/shared_examples/uploaders/object_storage_shared_examples.rb'
-    - 'spec/workers/loose_foreign_keys/cleanup_worker_spec.rb'
diff --git a/.rubocop_todo/style/redundant_interpolation.yml b/.rubocop_todo/style/redundant_interpolation.yml
index 3747312f2c4..ca7e01ffa61 100644
--- a/.rubocop_todo/style/redundant_interpolation.yml
+++ b/.rubocop_todo/style/redundant_interpolation.yml
@@ -94,83 +94,4 @@ Style/RedundantInterpolation:
     - 'qa/qa/tools/generate_perf_testdata.rb'
     - 'scripts/perf/gc/print_gc_stats.rb'
     - 'scripts/qa/testcases-check'
-    - 'spec/controllers/admin/integrations_controller_spec.rb'
-    - 'spec/features/commits_spec.rb'
-    - 'spec/features/issues/user_edits_issue_spec.rb'
-    - 'spec/features/merge_request/user_scrolls_to_note_on_load_spec.rb'
-    - 'spec/features/merge_request/user_sees_deployment_widget_spec.rb'
-    - 'spec/features/one_trust_spec.rb'
-    - 'spec/features/projects/issues/viewing_issues_with_external_authorization_enabled_spec.rb'
-    - 'spec/features/projects/jobs/user_browses_jobs_spec.rb'
-    - 'spec/graphql/resolvers/container_repositories_resolver_spec.rb'
-    - 'spec/helpers/environments_helper_spec.rb'
-    - 'spec/helpers/snippets_helper_spec.rb'
-    - 'spec/lib/api/helpers/packages/dependency_proxy_helpers_spec.rb'
-    - 'spec/lib/api/validations/validators/git_ref_spec.rb'
-    - 'spec/lib/api/validations/validators/limit_spec.rb'
-    - 'spec/lib/backup/database_backup_error_spec.rb'
-    - 'spec/lib/backup/file_backup_error_spec.rb'
-    - 'spec/lib/banzai/filter/autolink_filter_spec.rb'
-    - 'spec/lib/banzai/filter/issuable_reference_expansion_filter_spec.rb'
-    - 'spec/lib/banzai/filter/references/alert_reference_filter_spec.rb'
-    - 'spec/lib/banzai/filter/references/commit_reference_filter_spec.rb'
-    - 'spec/lib/banzai/filter/references/issue_reference_filter_spec.rb'
-    - 'spec/lib/banzai/filter/references/label_reference_filter_spec.rb'
-    - 'spec/lib/banzai/filter/references/milestone_reference_filter_spec.rb'
-    - 'spec/lib/banzai/filter/references/project_reference_filter_spec.rb'
-    - 'spec/lib/banzai/filter/references/user_reference_filter_spec.rb'
-    - 'spec/lib/feature_spec.rb'
-    - 'spec/lib/gitlab/background_migration/legacy_upload_mover_spec.rb'
-    - 'spec/lib/gitlab/background_migration/populate_vulnerability_reads_spec.rb'
-    - 'spec/lib/gitlab/ci/config/entry/job_spec.rb'
-    - 'spec/lib/gitlab/ci/config/entry/processable_spec.rb'
-    - 'spec/lib/gitlab/ci/reports/test_suite_spec.rb'
-    - 'spec/lib/gitlab/database/batch_count_spec.rb'
-    - 'spec/lib/gitlab/database/load_balancing/connection_proxy_spec.rb'
-    - 'spec/lib/gitlab/import_export/group/tree_saver_spec.rb'
-    - 'spec/lib/gitlab/inactive_projects_deletion_warning_tracker_spec.rb'
-    - 'spec/lib/gitlab/metrics/dashboard/url_spec.rb'
-    - 'spec/lib/gitlab/redis/multi_store_spec.rb'
-    - 'spec/lib/grafana/client_spec.rb'
-    - 'spec/mailers/notify_spec.rb'
-    - 'spec/migrations/20220107064845_populate_vulnerability_reads_spec.rb'
-    - 'spec/models/active_session_spec.rb'
-    - 'spec/models/clusters/platforms/kubernetes_spec.rb'
-    - 'spec/models/diff_discussion_spec.rb'
-    - 'spec/models/namespace_spec.rb'
-    - 'spec/presenters/project_presenter_spec.rb'
-    - 'spec/rack_servers/configs/config.ru'
-    - 'spec/requests/api/alert_management_alerts_spec.rb'
-    - 'spec/requests/api/markdown_spec.rb'
-    - 'spec/requests/api/merge_requests_spec.rb'
-    - 'spec/requests/api/metrics/dashboard/annotations_spec.rb'
-    - 'spec/requests/api/tags_spec.rb'
-    - 'spec/requests/api/terraform/state_spec.rb'
-    - 'spec/requests/projects/google_cloud/deployments_controller_spec.rb'
-    - 'spec/requests/projects/google_cloud/service_accounts_controller_spec.rb'
-    - 'spec/routing/project_routing_spec.rb'
-    - 'spec/services/clusters/kubernetes/create_or_update_service_account_service_spec.rb'
-    - 'spec/services/groups/transfer_service_spec.rb'
-    - 'spec/services/members/invite_service_spec.rb'
-    - 'spec/services/todo_service_spec.rb'
-    - 'spec/services/todos/destroy/entity_leave_service_spec.rb'
-    - 'spec/services/users/approve_service_spec.rb'
-    - 'spec/services/users/ban_service_spec.rb'
-    - 'spec/services/users/reject_service_spec.rb'
-    - 'spec/services/users/unban_service_spec.rb'
-    - 'spec/support/google_api/cloud_platform_helpers.rb'
-    - 'spec/support/helpers/features/releases_helpers.rb'
-    - 'spec/support/helpers/graphql_helpers.rb'
-    - 'spec/support/helpers/kubernetes_helpers.rb'
-    - 'spec/support/matchers/exceed_query_limit.rb'
-    - 'spec/support/shared_examples/graphql/notes_creation_shared_examples.rb'
-    - 'spec/support/shared_examples/graphql/resolvers/packages_resolvers_shared_examples.rb'
-    - 'spec/support/shared_examples/lib/sentry/client_shared_examples.rb'
-    - 'spec/support/shared_examples/mailers/notify_shared_examples.rb'
-    - 'spec/support/shared_examples/requests/api/graphql/packages/group_and_project_packages_list_shared_examples.rb'
-    - 'spec/support/shared_examples/requests/api/issues_shared_examples.rb'
-    - 'spec/support/shared_examples/requests/api/notes_shared_examples.rb'
-    - 'spec/support/shared_examples/services/users/dismiss_user_callout_service_shared_examples.rb'
-    - 'spec/support_specs/graphql/arguments_spec.rb'
-    - 'spec/views/projects/commit/_commit_box.html.haml_spec.rb'
     - 'tooling/rspec_flaky/flaky_example.rb'
diff --git a/app/assets/javascripts/diffs/components/diff_discussions.vue b/app/assets/javascripts/diffs/components/diff_discussions.vue
index 25d3bda147b..9e399a642d0 100644
--- a/app/assets/javascripts/diffs/components/diff_discussions.vue
+++ b/app/assets/javascripts/diffs/components/diff_discussions.vue
@@ -88,6 +88,7 @@ export default {
           :discussions-by-diff-order="true"
           :line="line"
           :help-page-path="helpPagePath"
+          :should-scroll-to-note="false"
           @noteDeleted="deleteNoteHandler"
         >
           <template v-if="renderAvatarBadge" #avatar-badge>
diff --git a/app/assets/javascripts/notes/components/discussion_notes.vue b/app/assets/javascripts/notes/components/discussion_notes.vue
index 2dbc9b10836..3e8cddc3174 100644
--- a/app/assets/javascripts/notes/components/discussion_notes.vue
+++ b/app/assets/javascripts/notes/components/discussion_notes.vue
@@ -52,6 +52,11 @@ export default {
       required: false,
       default: false,
     },
+    shouldScrollToNote: {
+      type: Boolean,
+      required: false,
+      default: true,
+    },
   },
   computed: {
     ...mapGetters(['userCanReply']),
@@ -133,6 +138,7 @@ export default {
           :discussion-root="true"
           :discussion-resolve-path="discussion.resolve_path"
           :is-overview-tab="isOverviewTab"
+          :should-scroll-to-note="shouldScrollToNote"
           @handleDeleteNote="$emit('deleteNote')"
           @startReplying="$emit('startReplying')"
         >
@@ -183,6 +189,7 @@ export default {
           :discussion-root="index === 0"
           :discussion-resolve-path="discussion.resolve_path"
           :is-overview-tab="isOverviewTab"
+          :should-scroll-to-note="shouldScrollToNote"
           @handleDeleteNote="$emit('deleteNote')"
         >
           <template #avatar-badge>
diff --git a/app/assets/javascripts/notes/components/noteable_discussion.vue b/app/assets/javascripts/notes/components/noteable_discussion.vue
index 50d166b6db5..b668d6ec182 100644
--- a/app/assets/javascripts/notes/components/noteable_discussion.vue
+++ b/app/assets/javascripts/notes/components/noteable_discussion.vue
@@ -73,6 +73,11 @@ export default {
       required: false,
       default: false,
     },
+    shouldScrollToNote: {
+      type: Boolean,
+      required: false,
+      default: true,
+    },
   },
   data() {
     return {
@@ -288,6 +293,7 @@ export default {
               :line="line"
               :should-group-replies="shouldGroupReplies"
               :is-overview-tab="isOverviewTab"
+              :should-scroll-to-note="shouldScrollToNote"
               @startReplying="showReplyForm"
               @deleteNote="deleteNoteHandler"
             >
diff --git a/app/assets/javascripts/notes/components/noteable_note.vue b/app/assets/javascripts/notes/components/noteable_note.vue
index c4b3111b919..8ce0c2f8648 100644
--- a/app/assets/javascripts/notes/components/noteable_note.vue
+++ b/app/assets/javascripts/notes/components/noteable_note.vue
@@ -91,6 +91,11 @@ export default {
       required: false,
       default: false,
     },
+    shouldScrollToNote: {
+      type: Boolean,
+      required: false,
+      default: true,
+    },
   },
   data() {
     return {
@@ -222,7 +227,7 @@ export default {
   },
 
   mounted() {
-    if (this.isTarget) {
+    if (this.isTarget && this.shouldScrollToNote) {
       this.scrollToNoteIfNeeded($(this.$el));
     }
   },
diff --git a/app/assets/javascripts/vue_shared/components/sidebar/labels_select_widget/label_item.vue b/app/assets/javascripts/vue_shared/components/sidebar/labels_select_widget/label_item.vue
index caeee2df7e5..314ffbaf84c 100644
--- a/app/assets/javascripts/vue_shared/components/sidebar/labels_select_widget/label_item.vue
+++ b/app/assets/javascripts/vue_shared/components/sidebar/labels_select_widget/label_item.vue
@@ -10,7 +10,7 @@ export default {
 </script>
 
 <template>
-  <div class="gl-display-flex gl-align-items-center">
+  <div class="gl-display-flex gl-align-items-center gl-word-break-word">
     <span
       class="dropdown-label-box gl-flex-shrink-0 gl-top-0 gl-mr-3"
       :style="{ 'background-color': label.color }"
diff --git a/app/controllers/concerns/issuable_actions.rb b/app/controllers/concerns/issuable_actions.rb
index 7c3401a7e90..1dd9c546be3 100644
--- a/app/controllers/concerns/issuable_actions.rb
+++ b/app/controllers/concerns/issuable_actions.rb
@@ -170,9 +170,10 @@ module IssuableActions
 
     discussions = Discussion.build_collection(notes, issuable)
 
-    if issuable.is_a?(MergeRequest)
+    case issuable
+    when MergeRequest
       render_mr_discussions(discussions, discussion_serializer, discussion_cache_context)
-    elsif issuable.is_a?(Issue)
+    when Issue
       render json: discussion_serializer.represent(discussions, context: self) if stale?(etag: [discussion_cache_context, discussions])
     else
       render json: discussion_serializer.represent(discussions, context: self)
diff --git a/app/controllers/groups/dependency_proxy/application_controller.rb b/app/controllers/groups/dependency_proxy/application_controller.rb
index f7337a3cdb1..300a82eed78 100644
--- a/app/controllers/groups/dependency_proxy/application_controller.rb
+++ b/app/controllers/groups/dependency_proxy/application_controller.rb
@@ -21,10 +21,11 @@ module Groups
 
           user_or_deploy_token = ::DependencyProxy::AuthTokenService.user_or_deploy_token_from_jwt(token)
 
-          if user_or_deploy_token.is_a?(User)
+          case user_or_deploy_token
+          when User
             @authentication_result = Gitlab::Auth::Result.new(user_or_deploy_token, nil, :user, [])
             sign_in(user_or_deploy_token)
-          elsif user_or_deploy_token.is_a?(DeployToken)
+          when DeployToken
             @authentication_result = Gitlab::Auth::Result.new(user_or_deploy_token, nil, :deploy_token, [])
           end
         end
diff --git a/app/controllers/oauth/authorizations_controller.rb b/app/controllers/oauth/authorizations_controller.rb
index bf8b61db2e5..43bf895ea76 100644
--- a/app/controllers/oauth/authorizations_controller.rb
+++ b/app/controllers/oauth/authorizations_controller.rb
@@ -4,7 +4,7 @@ class Oauth::AuthorizationsController < Doorkeeper::AuthorizationsController
   include InitializesCurrentUserMode
   include Gitlab::Utils::StrongMemoize
 
-  before_action :verify_confirmed_email!
+  before_action :verify_confirmed_email!, :verify_admin_allowed!
 
   layout 'profile'
 
@@ -97,4 +97,19 @@ class Oauth::AuthorizationsController < Doorkeeper::AuthorizationsController
     pre_auth.error = :unconfirmed_email
     render "doorkeeper/authorizations/error"
   end
+
+  def verify_admin_allowed!
+    render "doorkeeper/authorizations/forbidden" if disallow_connect?
+  end
+
+  def disallow_connect?
+    # we're disabling Cop/UserAdmin as OAuth tokens don't seem to respect admin mode
+    current_user&.admin? && Gitlab::CurrentSettings.disable_admin_oauth_scopes && dangerous_scopes? # rubocop:disable Cop/UserAdmin
+  end
+
+  def dangerous_scopes?
+    doorkeeper_application&.includes_scope?(*::Gitlab::Auth::API_SCOPE, *::Gitlab::Auth::READ_API_SCOPE,
+                                             *::Gitlab::Auth::ADMIN_SCOPES, *::Gitlab::Auth::REPOSITORY_SCOPES,
+                                             *::Gitlab::Auth::REGISTRY_SCOPES) && !doorkeeper_application&.trusted?
+  end
 end
diff --git a/app/controllers/projects/issues_controller.rb b/app/controllers/projects/issues_controller.rb
index 52a0d5fc84c..cadec97df60 100644
--- a/app/controllers/projects/issues_controller.rb
+++ b/app/controllers/projects/issues_controller.rb
@@ -52,6 +52,7 @@ class Projects::IssuesController < Projects::ApplicationController
   before_action only: :show do
     push_frontend_feature_flag(:issue_assignees_widget, project)
     push_frontend_feature_flag(:realtime_labels, project)
+    push_frontend_feature_flag(:work_items_mvc, project&.group)
     push_force_frontend_feature_flag(:work_items_mvc_2, project&.work_items_mvc_2_feature_flag_enabled?)
     push_frontend_feature_flag(:work_items_hierarchy, project)
     push_frontend_feature_flag(:epic_widget_edit_confirmation, project)
diff --git a/app/controllers/projects/labels_controller.rb b/app/controllers/projects/labels_controller.rb
index 8ec2cbb41e9..14f2e372bc5 100644
--- a/app/controllers/projects/labels_controller.rb
+++ b/app/controllers/projects/labels_controller.rb
@@ -68,9 +68,10 @@ class Projects::LabelsController < Projects::ApplicationController
   def generate
     Gitlab::IssuesLabels.generate(@project)
 
-    if params[:redirect] == 'issues'
+    case params[:redirect]
+    when 'issues'
       redirect_to project_issues_path(@project)
-    elsif params[:redirect] == 'merge_requests'
+    when 'merge_requests'
       redirect_to project_merge_requests_path(@project)
     else
       redirect_to project_labels_path(@project)
diff --git a/app/graphql/types/ci/job_need_union.rb b/app/graphql/types/ci/job_need_union.rb
index 59608a6a312..61ad5432db8 100644
--- a/app/graphql/types/ci/job_need_union.rb
+++ b/app/graphql/types/ci/job_need_union.rb
@@ -8,9 +8,10 @@ module Types
       possible_types Types::Ci::JobType, Types::Ci::BuildNeedType
 
       def self.resolve_type(object, context)
-        if object.is_a?(::Ci::BuildNeed)
+        case object
+        when ::Ci::BuildNeed
           Types::Ci::BuildNeedType
-        elsif object.is_a?(CommitStatus)
+        when CommitStatus
           Types::Ci::JobType
         else
           raise TypeNotSupportedError
diff --git a/app/helpers/application_settings_helper.rb b/app/helpers/application_settings_helper.rb
index c57f355b487..42aad60d1ba 100644
--- a/app/helpers/application_settings_helper.rb
+++ b/app/helpers/application_settings_helper.rb
@@ -221,6 +221,7 @@ module ApplicationSettingsHelper
       :default_projects_limit,
       :default_snippet_visibility,
       :delete_inactive_projects,
+      :disable_admin_oauth_scopes,
       :disable_feed_token,
       :disabled_oauth_sign_in_sources,
       :domain_denylist,
diff --git a/app/helpers/avatars_helper.rb b/app/helpers/avatars_helper.rb
index 617bc0e9bee..798bb7b64a4 100644
--- a/app/helpers/avatars_helper.rb
+++ b/app/helpers/avatars_helper.rb
@@ -105,9 +105,10 @@ module AvatarsHelper
   end
 
   def avatar_without_link(resource, options = {})
-    if resource.is_a?(Namespaces::UserNamespace)
+    case resource
+    when Namespaces::UserNamespace
       user_avatar_without_link(options.merge(user: resource.first_owner))
-    elsif resource.is_a?(Group)
+    when Group
       group_icon(resource, options.merge(class: 'avatar'))
     end
   end
diff --git a/app/helpers/broadcast_messages_helper.rb b/app/helpers/broadcast_messages_helper.rb
index 10cfa97030d..9827f075e54 100644
--- a/app/helpers/broadcast_messages_helper.rb
+++ b/app/helpers/broadcast_messages_helper.rb
@@ -77,11 +77,12 @@ module BroadcastMessagesHelper
     return unless current_user.present?
 
     strong_memoize(:current_user_access_level_for_project_or_group) do
-      if controller.is_a? Projects::ApplicationController
+      case controller
+      when Projects::ApplicationController
         next unless @project
 
         @project.team.max_member_access(current_user.id)
-      elsif controller.is_a? Groups::ApplicationController
+      when Groups::ApplicationController
         next unless @group
 
         @group.max_member_access_for_user(current_user)
diff --git a/app/helpers/issues_helper.rb b/app/helpers/issues_helper.rb
index 115cdd432e3..b9c7602126e 100644
--- a/app/helpers/issues_helper.rb
+++ b/app/helpers/issues_helper.rb
@@ -108,9 +108,10 @@ module IssuesHelper
 
   def awards_sort(awards)
     awards.sort_by do |award, award_emojis|
-      if award == "thumbsup"
+      case award
+      when "thumbsup"
         0
-      elsif award == "thumbsdown"
+      when "thumbsdown"
         1
       else
         2
diff --git a/app/helpers/routing/pseudonymization_helper.rb b/app/helpers/routing/pseudonymization_helper.rb
index eb4e5d1c01c..dce0517690d 100644
--- a/app/helpers/routing/pseudonymization_helper.rb
+++ b/app/helpers/routing/pseudonymization_helper.rb
@@ -43,11 +43,12 @@ module Routing
       private
 
       def mask_id(value)
-        if @request.path_parameters[:controller] == 'projects/blob'
+        case @request.path_parameters[:controller]
+        when 'projects/blob'
           ':repository_path'
-        elsif @request.path_parameters[:controller] == 'projects'
+        when 'projects'
           "project#{@project&.id}"
-        elsif @request.path_parameters[:controller] == 'groups'
+        when 'groups'
           "namespace#{@group&.id}"
         else
           value
diff --git a/app/helpers/todos_helper.rb b/app/helpers/todos_helper.rb
index 2663246ef81..be63d28600f 100644
--- a/app/helpers/todos_helper.rb
+++ b/app/helpers/todos_helper.rb
@@ -121,9 +121,10 @@ module TodosHelper
 
     case todo.target
     when MergeRequest
-      if state == 'closed'
+      case state
+      when 'closed'
         background_class = 'gl-bg-red-500'
-      elsif state == 'merged'
+      when 'merged'
         background_class = 'gl-bg-blue-500'
       end
     when Issue
diff --git a/app/models/application_setting.rb b/app/models/application_setting.rb
index ef968c2645c..5659c9c7c0b 100644
--- a/app/models/application_setting.rb
+++ b/app/models/application_setting.rb
@@ -689,6 +689,9 @@ class ApplicationSetting < ApplicationRecord
   validates :disable_feed_token,
             inclusion: { in: [true, false], message: N_('must be a boolean value') }
 
+  validates :disable_admin_oauth_scopes,
+            inclusion: { in: [true, false], message: N_('must be a boolean value') }
+
   before_validation :ensure_uuid!
   before_validation :coerce_repository_storages_weighted, if: :repository_storages_weighted_changed?
   before_validation :normalize_default_branch_name
diff --git a/app/models/application_setting_implementation.rb b/app/models/application_setting_implementation.rb
index d78c6d4a503..308c05d638c 100644
--- a/app/models/application_setting_implementation.rb
+++ b/app/models/application_setting_implementation.rb
@@ -62,6 +62,7 @@ module ApplicationSettingImplementation
         diff_max_patch_bytes: Gitlab::Git::Diff::DEFAULT_MAX_PATCH_BYTES,
         diff_max_files: Commit::DEFAULT_MAX_DIFF_FILES_SETTING,
         diff_max_lines: Commit::DEFAULT_MAX_DIFF_LINES_SETTING,
+        disable_admin_oauth_scopes: false,
         disable_feed_token: false,
         disabled_oauth_sign_in_sources: [],
         dns_rebinding_protection_enabled: true,
diff --git a/app/models/integrations/jira.rb b/app/models/integrations/jira.rb
index 25644dcf83b..30497c0110e 100644
--- a/app/models/integrations/jira.rb
+++ b/app/models/integrations/jira.rb
@@ -532,13 +532,14 @@ module Integrations
     end
 
     def build_entity_meta(entity)
-      if entity.is_a?(Commit)
+      case entity
+      when Commit
         {
           id: entity.short_id,
           description: entity.safe_message,
           branch: branch_name(entity)
         }
-      elsif entity.is_a?(MergeRequest)
+      when MergeRequest
         {
           id: entity.to_reference,
           branch: entity.source_branch
diff --git a/app/models/members/member_task.rb b/app/models/members/member_task.rb
index f093619ff36..6cf6b1adb45 100644
--- a/app/models/members/member_task.rb
+++ b/app/models/members/member_task.rb
@@ -34,9 +34,10 @@ class MemberTask < ApplicationRecord
   end
 
   def project_in_member_source
-    if member.is_a?(GroupMember)
+    case member
+    when GroupMember
       errors.add(:project, _('is not in the member group')) unless project.namespace == member.source
-    elsif member.is_a?(ProjectMember)
+    when ProjectMember
       errors.add(:project, _('is not the member project')) unless project == member.source
     end
   end
diff --git a/app/models/namespace.rb b/app/models/namespace.rb
index 12b96f34316..bef68586c66 100644
--- a/app/models/namespace.rb
+++ b/app/models/namespace.rb
@@ -550,11 +550,12 @@ class Namespace < ApplicationRecord
   end
 
   def shared_runners_setting_higher_than?(other_setting)
-    if other_setting == SR_ENABLED
+    case other_setting
+    when SR_ENABLED
       false
-    elsif other_setting == SR_DISABLED_WITH_OVERRIDE
+    when SR_DISABLED_WITH_OVERRIDE
       shared_runners_setting == SR_ENABLED
-    elsif other_setting == SR_DISABLED_AND_UNOVERRIDABLE
+    when SR_DISABLED_AND_UNOVERRIDABLE
       shared_runners_setting == SR_ENABLED || shared_runners_setting == SR_DISABLED_WITH_OVERRIDE
     else
       raise ArgumentError
diff --git a/app/models/packages/go/module_version.rb b/app/models/packages/go/module_version.rb
index c442b2416f1..5869a03e081 100644
--- a/app/models/packages/go/module_version.rb
+++ b/app/models/packages/go/module_version.rb
@@ -21,9 +21,10 @@ module Packages
         raise ArgumentError, "mod is required" unless mod
         raise ArgumentError, "commit is required" unless commit
 
-        if type == :ref
+        case type
+        when :ref
           raise ArgumentError, "ref is required" unless ref
-        elsif type == :pseudo
+        when :pseudo
           raise ArgumentError, "name is required" unless name
           raise ArgumentError, "semver is required" unless semver
         end
diff --git a/app/models/work_items/type.rb b/app/models/work_items/type.rb
index efffba62379..f5fea356831 100644
--- a/app/models/work_items/type.rb
+++ b/app/models/work_items/type.rb
@@ -12,12 +12,15 @@ module WorkItems
 
     # Base types need to exist on the DB on app startup
     # This constant is used by the DB seeder
+    # TODO - where to add new icon names created?
     BASE_TYPES = {
       issue: { name: 'Issue', icon_name: 'issue-type-issue', enum_value: 0 },
       incident: { name: 'Incident', icon_name: 'issue-type-incident', enum_value: 1 },
       test_case: { name: 'Test Case', icon_name: 'issue-type-test-case', enum_value: 2 }, ## EE-only
       requirement: { name: 'Requirement', icon_name: 'issue-type-requirements', enum_value: 3 }, ## EE-only
-      task: { name: 'Task', icon_name: 'issue-type-task', enum_value: 4 }
+      task: { name: 'Task', icon_name: 'issue-type-task', enum_value: 4 },
+      objective: { name: 'Objective', icon_name: 'issue-type-objective', enum_value: 5 }, ## EE-only
+      key_result: { name: 'Key Result', icon_name: 'issue-type-keyresult', enum_value: 6 } ## EE-only
     }.freeze
 
     WIDGETS_FOR_TYPE = {
@@ -27,7 +30,9 @@ module WorkItems
       test_case: [Widgets::Description],
       requirement: [Widgets::Description],
       task: [Widgets::Assignees, Widgets::Labels, Widgets::Description, Widgets::Hierarchy, Widgets::StartAndDueDate,
-             Widgets::Milestone]
+             Widgets::Milestone],
+      objective: [Widgets::Assignees, Widgets::Labels, Widgets::Description, Widgets::Hierarchy],
+      key_result: [Widgets::Assignees, Widgets::Labels, Widgets::Description, Widgets::StartAndDueDate]
     }.freeze
 
     WI_TYPES_WITH_CREATED_HEADER = %w[issue incident].freeze
@@ -69,7 +74,7 @@ module WorkItems
     end
 
     def self.allowed_types_for_issues
-      base_types.keys.excluding('task')
+      base_types.keys.excluding('task', 'objective', 'key_result')
     end
 
     def default?
diff --git a/app/serializers/group_child_serializer.rb b/app/serializers/group_child_serializer.rb
index 789707c2c9b..54e65752163 100644
--- a/app/serializers/group_child_serializer.rb
+++ b/app/serializers/group_child_serializer.rb
@@ -39,12 +39,13 @@ class GroupChildSerializer < BaseSerializer
   def represent_hierarchy(hierarchy, opts)
     serializer = self.class.new(params)
 
-    if hierarchy.is_a?(Hash)
+    case hierarchy
+    when Hash
       hierarchy.map do |parent, children|
         serializer.represent(parent, opts)
           .merge(children: Array.wrap(serializer.represent_hierarchy(children, opts)))
       end
-    elsif hierarchy.is_a?(Array)
+    when Array
       hierarchy.flat_map { |child| serializer.represent_hierarchy(child, opts) }
     else
       serializer.represent(hierarchy, opts)
diff --git a/app/services/google_cloud/generate_pipeline_service.rb b/app/services/google_cloud/generate_pipeline_service.rb
index 610ff47ef2a..b6438d6f501 100644
--- a/app/services/google_cloud/generate_pipeline_service.rb
+++ b/app/services/google_cloud/generate_pipeline_service.rb
@@ -34,7 +34,8 @@ module GoogleCloud
     end
 
     def generate_commit_attributes
-      if action == ACTION_DEPLOY_TO_CLOUD_RUN
+      case action
+      when ACTION_DEPLOY_TO_CLOUD_RUN
         branch_name = "deploy-to-cloud-run-#{SecureRandom.hex(8)}"
         {
           commit_message: 'Enable Cloud Run deployments',
@@ -43,7 +44,7 @@ module GoogleCloud
           branch_name: branch_name,
           start_branch: branch_name
         }
-      elsif action == ACTION_DEPLOY_TO_CLOUD_STORAGE
+      when ACTION_DEPLOY_TO_CLOUD_STORAGE
         branch_name = "deploy-to-cloud-storage-#{SecureRandom.hex(8)}"
         {
           commit_message: 'Enable Cloud Storage deployments',
diff --git a/app/services/issuable/bulk_update_service.rb b/app/services/issuable/bulk_update_service.rb
index 238f5ebddae..30444fa3938 100644
--- a/app/services/issuable/bulk_update_service.rb
+++ b/app/services/issuable/bulk_update_service.rb
@@ -68,9 +68,10 @@ module Issuable
     end
 
     def find_issuables(parent, model_class, ids)
-      if parent.is_a?(Project)
+      case parent
+      when Project
         projects = parent
-      elsif parent.is_a?(Group)
+      when Group
         projects = parent.all_projects
       else
         return
diff --git a/app/services/todo_service.rb b/app/services/todo_service.rb
index 6ae394072c6..06352d36215 100644
--- a/app/services/todo_service.rb
+++ b/app/services/todo_service.rb
@@ -329,11 +329,12 @@ class TodoService
       commit_id: nil
     }
 
-    if target.is_a?(Commit)
+    case target
+    when Commit
       attributes.merge!(target_id: nil, commit_id: target.id)
-    elsif target.is_a?(Issue)
+    when Issue
       attributes[:issue_type] = target.issue_type
-    elsif target.is_a?(Discussion)
+    when Discussion
       attributes.merge!(target_type: nil, target_id: nil, discussion: target)
     end
 
diff --git a/app/services/user_project_access_changed_service.rb b/app/services/user_project_access_changed_service.rb
index ceaf21bb926..f7178ee9bb6 100644
--- a/app/services/user_project_access_changed_service.rb
+++ b/app/services/user_project_access_changed_service.rb
@@ -21,9 +21,10 @@ class UserProjectAccessChangedService
       if blocking
         AuthorizedProjectsWorker.bulk_perform_and_wait(bulk_args)
       else
-        if priority == HIGH_PRIORITY
+        case priority
+        when HIGH_PRIORITY
           AuthorizedProjectsWorker.bulk_perform_async(bulk_args) # rubocop:disable Scalability/BulkPerformWithContext
-        elsif priority == MEDIUM_PRIORITY
+        when MEDIUM_PRIORITY
           AuthorizedProjectUpdate::UserRefreshWithLowUrgencyWorker.bulk_perform_in(MEDIUM_DELAY, bulk_args, batch_size: 100, batch_delay: 30.seconds) # rubocop:disable Scalability/BulkPerformWithContext
         else
           with_related_class_context do
diff --git a/app/views/doorkeeper/authorizations/forbidden.html.haml b/app/views/doorkeeper/authorizations/forbidden.html.haml
new file mode 100644
index 00000000000..9cad5ce62d8
--- /dev/null
+++ b/app/views/doorkeeper/authorizations/forbidden.html.haml
@@ -0,0 +1,5 @@
+%h1.page-title.gl-font-size-h-display= _("Forbidden")
+%main{ :role => "main" }
+  %p
+    = sprite_icon('warning-solid')
+    = (_("Administrators are not permitted to connect applications with these scopes: %{code_open}api%{code_close}, %{code_open}read_api%{code_close}, %{code_open}read_repository%{code_close}, %{code_open}write_repository%{code_close}, %{code_open}write_registry%{code_close}, %{code_open}read_registry%{code_close}, and %{code_open}sudo%{code_close}. To permit this, change the %{code_open}disable_admin_oauth_scopes%{code_close} setting using the API.") % { code_open: '<code>', code_close: '</code>' }).html_safe
diff --git a/config/feature_flags/development/work_items_mvc.yml b/config/feature_flags/development/work_items_mvc.yml
new file mode 100644
index 00000000000..928175c70ba
--- /dev/null
+++ b/config/feature_flags/development/work_items_mvc.yml
@@ -0,0 +1,8 @@
+---
+name: work_items_mvc
+introduced_by_url: "https://gitlab.com/gitlab-org/gitlab/-/merge_requests/101062"
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/377912
+milestone: '15.5'
+type: development
+group: group::project management
+default_enabled: false
diff --git a/db/migrate/20221013103738_add_disable_admin_oauth_scopes.rb b/db/migrate/20221013103738_add_disable_admin_oauth_scopes.rb
new file mode 100644
index 00000000000..3406252790d
--- /dev/null
+++ b/db/migrate/20221013103738_add_disable_admin_oauth_scopes.rb
@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+class AddDisableAdminOauthScopes < Gitlab::Database::Migration[2.0]
+  def change
+    add_column :application_settings, :disable_admin_oauth_scopes, :boolean, null: false, default: false
+  end
+end
diff --git a/db/migrate/20221018050323_add_objective_and_keyresult_to_work_item_types.rb b/db/migrate/20221018050323_add_objective_and_keyresult_to_work_item_types.rb
new file mode 100644
index 00000000000..51834a3b19b
--- /dev/null
+++ b/db/migrate/20221018050323_add_objective_and_keyresult_to_work_item_types.rb
@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+# See https://docs.gitlab.com/ee/development/migration_style_guide.html
+# for more information on how to write migrations for GitLab.
+
+class AddObjectiveAndKeyresultToWorkItemTypes < Gitlab::Database::Migration[2.0]
+  # Added the following statements as per https://docs.gitlab.com/ee/development/database/migrations_for_multiple_databases.html
+  disable_ddl_transaction!
+  restrict_gitlab_migration gitlab_schema: :gitlab_main
+
+  OBJECTIVE_ENUM_VALUE = 5
+  KEY_RESULT_ENUM_VALUE = 6
+
+  class WorkItemType < MigrationRecord
+    self.inheritance_column = :_type_disabled
+    self.table_name = 'work_item_types'
+  end
+
+  def up
+    # New instances will not run this migration and add this type via fixtures
+    # checking if record exists mostly because migration specs will run all migrations
+    # and that will conflict with the preloaded base work item types
+    objective_work_item = WorkItemType.find_by(base_type: OBJECTIVE_ENUM_VALUE, name: 'Objective', namespace_id: nil)
+    key_result_work_item = WorkItemType.find_by(base_type: KEY_RESULT_ENUM_VALUE, name: 'Key Result', namespace_id: nil)
+
+    if objective_work_item
+      say('Objective item record exist, skipping creation')
+    else
+      execute(
+        <<~SQL
+          INSERT INTO work_item_types (base_type, icon_name, name, created_at, updated_at) VALUES(
+            #{OBJECTIVE_ENUM_VALUE}, 'issue-type-objective', 'Objective', NOW(), NOW()
+            ) ON CONFLICT DO NOTHING;
+        SQL
+      )
+    end
+
+    if key_result_work_item
+      say('Keyresult item record exist, skipping creation')
+    else
+      execute(
+        <<~SQL
+          INSERT INTO work_item_types (base_type, icon_name, name, created_at, updated_at) VALUES(
+            #{KEY_RESULT_ENUM_VALUE}, 'issue-type-keyresult', 'Key Result', NOW(), NOW()
+            ) ON CONFLICT DO NOTHING;
+        SQL
+      )
+    end
+  end
+
+  def down
+    # There's the remote possibility that issues could already be
+    # using this issue type, with a tight foreign constraint.
+    # Therefore we will not attempt to remove any data.
+  end
+end
diff --git a/db/schema_migrations/20221013103738 b/db/schema_migrations/20221013103738
new file mode 100644
index 00000000000..8643304c5b1
--- /dev/null
+++ b/db/schema_migrations/20221013103738
@@ -0,0 +1 @@
+704d0973ce5fec01228a28d5551ecc88ccf057e246ee75f8f5b0cc0a08815095
\ No newline at end of file
diff --git a/db/schema_migrations/20221018050323 b/db/schema_migrations/20221018050323
new file mode 100644
index 00000000000..3e1d102da64
--- /dev/null
+++ b/db/schema_migrations/20221018050323
@@ -0,0 +1 @@
+05754025966b87f6998a0801e76c811b0cd42b2a77f35e8129a0c47f935e9bc4
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index 0b767416d5d..cef651cff2d 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -11494,6 +11494,7 @@ CREATE TABLE application_settings (
     password_expires_notice_before_days integer DEFAULT 7 NOT NULL,
     product_analytics_enabled boolean DEFAULT false NOT NULL,
     email_confirmation_setting smallint DEFAULT 2,
+    disable_admin_oauth_scopes boolean DEFAULT false NOT NULL,
     CONSTRAINT app_settings_container_reg_cleanup_tags_max_list_size_positive CHECK ((container_registry_cleanup_tags_service_max_list_size >= 0)),
     CONSTRAINT app_settings_container_registry_pre_import_tags_rate_positive CHECK ((container_registry_pre_import_tags_rate >= (0)::numeric)),
     CONSTRAINT app_settings_dep_proxy_ttl_policies_worker_capacity_positive CHECK ((dependency_proxy_ttl_group_policy_worker_capacity >= 0)),
diff --git a/doc/administration/gitaly/index.md b/doc/administration/gitaly/index.md
index 5d9473732e3..d79cfa297fe 100644
--- a/doc/administration/gitaly/index.md
+++ b/doc/administration/gitaly/index.md
@@ -219,9 +219,6 @@ The availability objectives for Gitaly clusters assuming a single node failure a
   second. Failover requires ten consecutive failed health checks on each
   Praefect node.
 
-  Faster outage detection, to improve this speed to less than 1 second,
-  is tracked [in this issue](https://gitlab.com/gitlab-org/gitaly/-/issues/2608).
-
 WARNING:
 If complete cluster failure occurs, disaster recovery plans should be executed. These can affect the
 RPO and RTO discussed above.
diff --git a/doc/api/settings.md b/doc/api/settings.md
index 3d8d02b8429..249891cb8e0 100644
--- a/doc/api/settings.md
+++ b/doc/api/settings.md
@@ -295,6 +295,7 @@ listed in the descriptions of the relevant settings.
 | `diff_max_patch_bytes`                   | integer          | no                                   | Maximum [diff patch size](../user/admin_area/diff_limits.md), in bytes. |
 | `diff_max_files`                         | integer          | no                                   | Maximum [files in a diff](../user/admin_area/diff_limits.md). |
 | `diff_max_lines`                         | integer          | no                                   | Maximum [lines in a diff](../user/admin_area/diff_limits.md). |
+| `disable_admin_oauth_scopes`             | boolean          | no                                   | Stops administrators from connecting their GitLab accounts to non-trusted OAuth 2.0 applications that have the `api`, `read_api`, `read_repository`, `write_repository`, `read_registry`, `write_registry`, or `sudo` scopes. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/375043) in GitLab 15.6. |
 | `disable_feed_token`                     | boolean          | no                                   | Disable display of RSS/Atom and calendar feed tokens. [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/231493) in GitLab 13.7. |
 | `disabled_oauth_sign_in_sources`         | array of strings | no                                   | Disabled OAuth sign-in sources. |
 | `dns_rebinding_protection_enabled`       | boolean          | no                                   | Enforce DNS rebinding attack protection. |
diff --git a/doc/architecture/blueprints/pods/index.md b/doc/architecture/blueprints/pods/index.md
index bfe95d91cbc..f861c543cc4 100644
--- a/doc/architecture/blueprints/pods/index.md
+++ b/doc/architecture/blueprints/pods/index.md
@@ -160,11 +160,64 @@ A number of technical issues need to be resolved to implement Pods (in no partic
 1. How are Pods provisioned?
 1. How can Pods implement disaster recovery capabilities?
 
+## Cross-section impact
+
+Pods is a fundamental architecture change that impacts other sections and stages. This section summarizes and links to other groups that may be impacted and highlights potential conflicts that need to be resolved. The Pods group is not responsible for achieving the goals of other groups but we want to ensure that dependencies are resolved.
+
+### Summary
+
+Based on discussions with other groups the net impact of introducing Pods and a new entity called organizations is mostly neutral. It may slow down development in some areas. We did not discover major blockers for other teams.
+
+1. We need to resolve naming conflicts (proposal is TBD)
+1. Pods requires introducing Organizations. Organizations are a new entity **above** top-level groups. Because this is a new entity, it may impact the ability to consolidate settings for Group Workspace and influence their decision on [how to approach introducing a workspace](https://gitlab.com/gitlab-org/gitlab/-/issues/376285#approach-2-workspace-is-built-on-top-of-top-level-groups)
+1. Organizations may make it slightly easier for Fulfillment to realize their billing plans.
+
+### Impact on Group Manage Workspace
+
+We synced with the Workspace PM and Designer ([recording](https://youtu.be/b5Opn9cFWFk)) and discussed the similarities and differences between the Pods and Workspace proposal ([presentation](https://docs.google.com/presentation/d/1FsUi22Up15b_tu6p2m-yLML3hCZ3rgrZrmzJAxUsNmU/edit?usp=sharing)).
+
+#### Goals of Group Manage Workspace
+
+As defined in the [workspace documentation](../../../user/workspace/index.md):
+
+1. Create an entity to manage everything you do as a GitLab administrator, including:
+   1. Defining and applying settings to all of your groups, subgroups, and projects.
+   1. Aggregating data from all your groups, subgroups, and projects.
+1. Reach feature parity between SaaS and self-managed installations, with all Admin Area settings moving to groups (?). Hardware controls remain on the instance level.
+
+The [workspace roadmap outlines](https://gitlab.com/gitlab-org/gitlab/-/issues/368237#high-level-goals) the current goals in detail.
+
+#### Potential conflicts with Pods
+
+- Workspace and Organization are different terms for the same entity. Both define a new entity as the primary organizational object for groups and projects. This is mainly a semantic difference and **we need to decide on a name** following [user research to decide if workspace](https://gitlab.com/gitlab-org/ux-research/-/issues/2147). This is also driven by the fact that the Remote Development team is looking at better names and [are considering the term Workspace as well](https://gitlab.com/gitlab-com/Product/-/issues/4812).
+- We will only introduce one entity
+- Group workspace highlighted the need to further validate the key assumption that users only care about what happens within their organization.
+
+### Impact on Fulfillment
+
+We synced with Fulfillment ([recording](https://youtu.be/FkQF3uF7vTY)) to discuss how Pods would impact them. Fulfillment is supportive of an entity above top-level namespaces. Their perspective is outline in [!5639](https://gitlab.com/gitlab-org/customers-gitlab-com/-/merge_requests/5639/diffs).
+
+#### Goals of Fulfillment
+
+- Fulfillment has a longstanding plan to move billing from the top-level namespace to a level above. This would mean that a license applies for an organization and all its top-level namespaces.
+- Fulfillment uses Zuora for billing and would like to have a 1-to-1 relationship between an organization and their Zuora entity called BillingAccount. They want to move away from tying a license to a single user.
+- If a customer needs multiple organizations, the corresponding BillingAccounts can be rolled up into a consolidated billing account (similar to [AWS consolidated billing](https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html))
+- Ideally, a self-managed instance has a single Organization by default, which should be enough for most customers.
+- Fulfillment prefers only one additional entity.
+
+A rough representation of this is:
+
+![Pods and Fulfillment](pods-and-fulfillment.png)
+
+#### Potential conflicts with Pods
+
+- There are no known conflicts between Fulfillment's plans and Pods
+
 ## Iteration plan
 
 We can't ship the entire Pods architecture in one go - it is too large. Instead, we are adopting an iteration plan that provides value along the way.
 
-1. Introduce organizations
+1. Introduce organizations 
 1. Migrate existing top-level namespaces to organizations
 1. Create new organizations on `pod_0`
 1. Migrate existing organizations from `pod_0` to `pod_n`
diff --git a/doc/architecture/blueprints/pods/pods-and-fulfillment.png b/doc/architecture/blueprints/pods/pods-and-fulfillment.png
new file mode 100644
index 0000000000000000000000000000000000000000..aab8556a5d3bd87302a1b6ea1c1c0e7dddeec9f7
GIT binary patch
literal 75803
zcmeFZWk8f$8#W3fDj^aoNC+dL(lK-nF~iV3lz_xAbi*)1t0<_Xgh)vUsDw&Nn{)`G
zASEIt-AaCIjQ#HS-R^U~pXbK`9A*~Jv*KRYeciF{$0$7=HEK#`N)i$hYIT&V0SO5?
ziiCu;f&2()xsj0j6#OFfF;G(`Dd}RJB_W}B=Zi4)bqjECa>bBv!&H90;}#Wm^ziZJ
zhN*IkirRR33feo_V7+bJd<5MwzMu*G-Oa<^$-xO@|MMDAVNp>55n%yQNh4t?ZkUoN
z@kLlvP)t(7{O9#HSd9Cx4#fq9K?fJKZS0)feLZ{}xnauSv%0%4#ufYq&EQqn5WJXz
ze<H%xBI4GPJm9U8r>85%1Y@h|1m=Jghe-;;BtY{8O_Y(g7PqJhc<<`uf&stOFm^5;
z#9LGxy*=DO3sOW_LQt6a4H^w?9BjOu{?-L?J^mPPA14p@-^&pc7Zmw9ag47G_Gc?b
z3M1vK?Be6$D2{ZoHuiB>^^*K~jW6C4^Ya?4hX>Xb3@FMCLjZC9k{jsX>6fJ3ynM}Y
zs@eoQA6sb=f|HajUf1mB<&x+CEjtNqF@&C&h#pqVRo%|W*-h11LsCr*X7A-GC92~l
zZDWR4akDd3S9Z`sxC3bc!69*2X95CcW~T<;>zNrFdZ9fK<|@KE;IHnsUhZgZgdRZ}
zBTmqFw(-^zchvI`chLZs>IiG=*@<XN1?b>y5e`xWVIxUXHGO4aDPdQA11$+ZeY^?Q
z#Z=5i*u&99N5fY_M^_l_i69{TkvQW3J3kWxf{}&|=tsj)Llfr<^AbS^*rGAgqWV}B
zFO>ju4TP7!p}(*$#@kfa)5%!d6I|*cs)o~a_fpf>5I1*`(8MD(^}WTsbzx3etTaJd
zNy^NO;BEk>?QidnumQMH#(GJM>xy8EJaN)6S4R~yn7D=#LC0T8T?b(T`g8S>@|G0y
zcXu{ZS3}u4+XSc~gvDXDh8}J(F>fz@Eny@Eg~Q?W-8Dr#_1!TdNTewiD`}`@YmUU>
z0#t;-zAL-hdm)vy{L~~crg*fmiKLjPfg{*IWfMKk0PsuMP(wx4OpJIT%EwR{jWCfk
z@l<hgbp|a)SZyOmBPk74q?3;q!qH39!Q4wk*+>syOj*lJQx`4bgI84t5K+e4s$n%$
z0BV(y-on!QMo2LeA2S0}Z4)1ikv`JhT^9jUu`|*ZCxX&N%f!sw&=c&ZsFR7KKNf4E
zVGNp4{)SQ-E=W@sH9Z?)F(gbMrfuq>?;vHUY7W#y8L#5yVxX;Tj&M~YsE8n)@X{C*
zLfcuy*um6YM>jwP6@Zt(f$Pj2Vd_{(yse9bimARST2INx3+L^m=4E1RYl<~?L5rEd
z)DdE66Rf_DILr*Er7z;<E2=Evibd%lTyVD1VlHkXZjPc(cyolipPCB7M;s$;tB=NM
zV*O1ug?)TH4E;^Cm7NgIqNc(=b`qXyCibuZcUwahpq)r#DM^@}ueg%0Cjo6{V<YK;
z0yFYO>48^!Q#)@ZAAdt(7ZITT%1AwPq`HB*p0qdG#!Jgc)5*<*pfBO-p%WnKh0^lY
zKpSdko4MOK5ap#UiVV<lb<;K$c9p~<)X;_~T`ACo0Uo0yW<)SlHg!i4JTVR~8cOaS
zE{5*D4u}8`4Q*Q=u!Tr(S6jTAk%yE!*fS(v!${j6-0AOQ<KnLE?W*d6b(O**0M6~u
z0czSRda7pH-gu0Gh!Nh_Tw2LT%fQaT)yc=k4<mxL710ED>chm4K4?`9LkV?nA5Cdv
zQ4=#$VN+EH5qkqYguOo+FDY#UGd9td5?8g?clMBQHgFQN(bf?+R`$V*_-gq3>1+A=
z;WQj!K3Wp?2pwSrHb7Ha3gLy;uyb-2Mj4wagFQrQc^WDSi-`H@+XvV=YIr%Sx@sGv
zP$*R?ZBsRWuK*==q_L5^7DC({spo}Ikq*#SS3;N=1b92+32J`&<^f1mw33F8sey@u
zp_)&Cvx$hkxR<cKsHd%(6xbzYw5Nx@kr`UoKLF?Jt>vpNVS_@usrjm!DJhw{X-hf+
zUPRhR1$f!2IvKiy>ve3kb#zSezUBcwFoLt0jklL0ah3#8adl@LT2umQFKlKk8W139
zh_rXN(Q`NOMTvXbs{6zIoa~g9#iX5W^ic->>Y6wc&>2kCTTd75q~jv&=AsERw^w$v
zwNvu5mDG|n6IXG^h`Z~Wqa+ON30f{v8i4$j10+QyL^M?0?FkZoW;VVChUzdoS36hm
zCnR3e-N4XJ8;8^(AOIkc2nk&kS3OZ+DU^k=2zwh36~Id_hECe*jz~L0cVT@qQz>nG
z9TPtlBLge}AE4?E19yojJJ^UKRo(G0CnZ}TLsbuFtckX;qq7ps)XN8FghYE|k*+po
z9!fg8s><E~%SeQi9}b4qu(NSMnrZupN=X2SYD?PNi6g<#9-=M*%C6qVnkW?qKTUmA
zi2z#-WldodFIz{fk*}exHc?A$)a?EJZS4RZC=+!b{J5d)-As_gcfRU&4vy-!Fl9YW
zLmN#^oVd0=)?Hi85vSy$q>7f%@OJk0Fmh0}H#AbQb--xhwf!`JDL@9G90HuhZH>f~
z#f)L<x@ZFpJvDz{VGU)Nn~ssVr?!s2y1xOz1cs9EHkUN9@e`ADGZWWWb2SO@H8u4%
zRWX;acSDI1DGdAw6Ldt-;^Ll2F>~M{C}YqfHY#|W2i8!{)KM9Y(iFyN8RJBp96Tlb
z9kISRC2y>;kuS<iLPcFt!v?Evq@$&0;tlikMPsE1U~aZZR}}+iZzUTE4+kw#7YQ|8
z5nnf)h^UE_p@d3+riYY?m$WcU)!xWQ7iVLSQb(&R85@E7Jfy+k5}GQG{#y2i>Q1Vv
zwsv?IQw<3N6EVCUM%mj`46PkthR5gxn4y$KfcpW4(jwr+Fac5+n5v|-hY5@z;py+C
zOu%}Y*xM3}u{szV2~m`!BvQ>$%R$UnTvHdIU0K|m;4W?Mg>}N3>lo{ps+kF^It!!i
z4b@yVjnMw4+8&PnMq-92RWDJz7!oP1D&gZQ45aVjWh{aUkg##~#swfe5oY?n7&kEy
zl!2I+9$rn<*~!FBooJ+WY?Sn{Fg14|31z&nr-q?3Pz0o%h>?eqo0Fe0z=^IIk?33<
zfo((@Nuh8=SA+ON<ka6D#t(M`eE#LY!4Te_ZRbcxpd{+5N=5-z^CL$SPxP}juQd85
z3L@y@-G#yqBkWB`mGoXgOlc7aS~>*cH6-#=8Oh~Kr5AE8G4fpIzkn*cWO7pVFjeo(
z3vOfI$NX%c4!Szv&bQhx;=1tD;||`_qum)D_U<7**wXp=c~=`H5>hf+_`kgDpSq(E
zTvP7y;W!N$Ey^yu(ru`%+^Mg(`moU%aNDxgB_Rm?Xs!VVgd7@1^2e81{!e6F$6c&U
z8Zr;;WF#YMI4>2GkW#qRW?thAgDXJDxCZ3^b$nVlR2eD<eT%z@^#$*v$r|>T)$lW4
z)s^8K(K68wIl|z*WaKEW=)2Ts|7Cn~XdD|Dq&GLKkQ;)hppCoKNL;Ng6?nJwZ|epV
z3MVIp(9hG7=arI>My)T%I>(Seq8Opj_yD`ge;q0eZVpC3JzC6pO0G%{M!5d}kM;iz
z8QMUGsytEv;JdZj5_vdZ-#E2aBuA<IXWY|)oj?3<J8uKonEQ}&iVq#&;N2<yp+$v8
z{)-v@<kdgJAHe%4EeZ>;G&>yl4k!)1036Qo_C;bW34{(}b(HI4h0A%v0v!a?pVd(A
z<fS7NG$K5d;amW*C{d|26_W6BdVoXp2m(Wg3MDN)M87apmBM3~pQm_C;E#xIQUe+g
z^p45sa5#jLHtquS^dru&Fk{eI^wpjDCj9GR9oYpjvuECzaK5L0b7-?N2kmz|qaizP
zvpv}=;q4RDe^zf=i?A@Vz@v~^KCq_XotV2oqdy-8`Z#(=02&r{6jC+peRDW)sh*D8
zZ{efyIi2(wrP-6=f0ooZkqX#pQPxCR4dLFg0$B-xeplYOl9H0$xUjs^%-;T_nT<tX
z<NNC5<aPFtxUc<>7@zo#0?qu>{GNfCJl2KAH4xRmYN=2fLe6Cs7N+_+dJqC3KdE$S
zx+~)x>&o}(EVabd-L>xa*NoN|uO{I6{@5G&D<Jge4dL)@AVJhvL+%t{mH;r<C`kt@
za;P2|X>ids1uM=Vrw=6=S{X7G<oC~Q7PCmW3YS?FU3_NnzR1kZ;aQ<&ZKarF4}5b3
zXWcE?5VA)wtMPp>=nz49>Prh}Y~mFf1yha03v@mf=2ZY<ceaZys=D5-EWe~lxkk;R
z(VD<5U&?uy;|~OsmqO&JuR_i@;njd&H;)2VhgK5b9S1~R+=LqoK7XCn8)dY&-n@6^
zxXguaf{WDndY^8}SjdjR`gU%t0x!T(>`)hO6t70u_<G7*_vI1m;0@#9Eor`vG)dhz
z(JbeM>emfAw$cL^pAoT-YEKrxl-6&08~Y#Z?_pNIv^tC!+}CJ*ifPXaSoysA!8)|{
z5RDx4$`R@tyx31o;i9esk0TpP%_}t6LU+CJ-zQVFnVuw1b*8l&>dIr38TkLSkN!a5
zkITlK{DcA3ljX8I9R?eT1RH64k>?Z<8IQ5uY^^OVaWo3wpgDO@?3y*Q6oPG&_ZO<h
z+On^+F|X8Iqw11fs;d@f7PXH&#wI6aTMuks_0mwKTiW{kprKXJ%IoSm89qn7&#BnV
z_|?hw=HS?_`Q?od*4N)#)cO}wpnPX~l%~3~vZi;$^WNUqWL*1L+PLq0`D89K`bKT>
z@+qsp1@YN;4-CUcU$*^e5zlFX%2tOAmj&t?jR&6MJ14kQuv%p6V&ai-{%9Q!w<cqX
z6=!#RFmKXEkt?MJFp*L3w#)p$)>VN$4BeusP-!wJ&6xf4@KMPP$Ivo|PF1W^k0-o{
zdyq6LD`Z=}OKRd)B*~Q_9hY~7@mgsT+CVu{mMpxFaw#0_`aIiRZN~ugh>TSQefKsj
zIl}2)GkdPe_=dU1R7Yy>L*qxvjaia^#8m;9%Bzhb&ONK7?&*Enitt0s=-Yd9CP^ng
zvJ0w}7iLvc?pmx4rzpm!ET%f`&$aEyYTSPRw(R@49QsEo#qsqw7P!S(j5JkO5_vd)
zic=Gf>i|*NWoh9}ILITD(q!`rXGFgyJI-ss=K7??nEes1{qNK4(zAKDzueYUh<bSY
zz4evDGHDSCy!Kt`(obz)-zeOOk@<STtlBd>QGi7@BSRMYHV1LDFjZX4HG60qP(|l~
zgvY3BrQeWSRqOKj%iKzfdV-(y%BvHT19q`V8cDpZz4tXc?Zmx>WNxaV(aB4jbi9A!
z@HkVVj<5Ma=rNl-+@~HUpUBX+U3eHx$09emYxiZCMJLGsqj9c?qo%XqXoJ9O&6Bqu
zA$=3PleTmQD$_6HT*r9!bXa*lZtAa<>VDgF9Rb^E5t!)@2$%)*?4D?Pl$0!i*K>0a
z+n(mp!1SauTjhEifG%4VTkA2@aKJ>gsO_uBLYWbu!T7F^!tTRT&!+CW<h*ZOteIO4
z-bE~isRod0-xZ6$&PHe<6Hmu{D6uriQKeYRVv%%D1oj1JsYOR9ZtlJIV)evvr-8>d
zM)K<-Y&FHh?UxTzsbZHd{mBV@tVZO@?T-|w@}>TZGV3zZ<=NUURc&=9inn=UJ7A%j
zQ$@$4T-@wiS@s7w4(W#82~)lNoC3vl`p#!MIJ6kBZ=T<lKA!CId13sj{p|2FAJvz>
z?;~{;_l$t}PgOl{r9{1=JfU@0Oub9-VE4{O&|Gm<o?UZ{erYI>MoyXfmx@=EC|2CC
zmuTRoE00OZ#RkD{g`J|h&5tgk_ARtd!_{65b1`i4=3<ZO8XOB%R8IeqKsJFVhPr6o
zOo@`R2(oDrOFh`0?yc+7_g=Z@FT(dUxLq+P`^MJ_KFueeUvs=4s<5ltUFjn{@X|ZQ
zqtCm^d2^)PyLn7@vfElhqv8<Xv%7C?rxk1MJ9X#oe+*B$Z#3A#B#aI{C>Rdj?<3<H
zZep}K1EEJWO%#(uX^93Re94wM6247dWZh`>_1%LLcNdx-d<S6t@@*m(*B@tpnCr-K
z)(cz1KDw$IgsnvZ8pU1DVZx~AOKMT?FD;Q9M~<C_ZjA<dWG;2`L9=69dg9(R>@2e2
z0uP(nY%PxD)1ZsZPZ0o3E!czZ5A$5}qx*vw(0h@%oif5!aNFk=)-B&;3p6H~Co$h{
zJ<>+(?_#bTTiPxXbM(G<alf%lRplgm<4!SNoBj3MheKXdW9`Yi{7dzZRTZ*!R0>Je
zDqNwdj1oyII)x|R7Iw~6w%#jalMH3q))C?{;aL@F!YBDHuN+n1%3jbO@fKp&K0qo2
zP569w7;o#*^oxDSW9i|>xzqoE<7JHkU)l%vq{gZR;nF!fiFC|B`RG$zglLpXRgpb}
zKG{#I6G0LV0Y3EwT1GzLU2q&0Y~1z6Z_gHRN@UwyKFSu*wBc}@F0Mz-l-09|^r=JV
z-AICfb;CuXYfx3ftRS`AbcpjkpLIiBkwuk`M)IwY{7Y7(QO#_DT7=DcCY(it*?3V|
zS3=cTi0t}%WHfUtP&1P|IRP|(@B-j>iMIb@^J^+p2O%V?PR7<>75+IkX%4eIsEg`1
zPs(%Hdzek4`kgnhJ&7h=fI5x!Lc7AY8PZbZt<lAoM=NMXbVK&1w)CLmHO;j*j<BX<
z7QSkGtL><DhK@?smO7est-dUHWd90tq9b(Cy7b{YS3P5NP^I}g9h15LBK-BvZN;Rh
zm!s76jr$@M_8VI+9hHyRjS%jsJ(fo@6$FhK3u3xh$WZ~cjdXF#?{D`47r+!S?dATg
z@+0Bpr|yWmB$vC7$mHx-IQP?2%gvW{E0hc+-3ohkJ}ZbrJ53_G&=4RB!HyaCf9v`3
zgsvRj6GBm{C@>=L5HC-=vq^uhRHzvRj=<z}R%o(?`!htob{fM9I>Ri-^ht};Hl=~Y
z+#ihy(K&gwVG=@05uE<|v0(RIHKX*Nea~mUrbi9w&O^uFJ?!&i@^1Uyj7kmGNK@R~
zpO9hdomF33n)rC;+{m@^+X?qIS{5^ECnK`^Fyj{1cRwr!EqI>@=;21gU!)c*zogFC
zu1I{JB5}KZlm4w5R?ctDVs$Wm>3%1sv%{q(NOa8t|2bc>vk@lf$cx>QM`$crwz&qr
zf!+KvbL)sVJooFAU&f&FQ0dv5M4o1SI>~(^?s3r3d*6YV2O>ZUe_9X#KWhR3@RvB1
z<52-cSJ2MCEGML2h>0``_}?wSd0^5nz1%gk+yU!G#j?qBv<2*Ke3%4sj&b%_47=K}
z^q?S<H%@agsmfzaFe`X7mH%S3p2F_3N~$c*{oSq8<4c2e__7&(#y=2QSTV$Bs^iJS
z*_(_)$-q>Y5u@tum^oMDp%Wvf=b_o8*WZum#(@}Tu*RmALb@Z!{mE{nZSjK_VJjo5
z?E2Z70dQp%a!dCZR>}UYdI{e44v0w5cE3T6(TW~Stk6^KdUMA-4RevB&n(4Mg(+#&
zG86w|=10vNrw*3h@D#9(#~uW%*L=`&{M_T<_vNnFv|3TtP(qk$&Q?kKDj@#m)M98D
zoIuo(?vUK~<YXG3-mrKi(s3eH%hlPdR=(Vpj+(yA-%5^}>7aSW?jd6L=9p7oe)QbK
z2EcFn<FUY}Hw6rM#`u~EDMfwH_NOZ}_VWWzM1lGE;Madj((NPHDPE%sJ%Ofwh?d9`
znyd&^^$}F06ic!r6sT9cW-7-SkGXP2TbyAv=az$JXGa9Ppl=1#o-mMF`^w;r?7p3I
zBXj>91izNOHCdQUowqgP(>eD9LLa*kYMI<+b?yuyi@&&*o!uDS=)l=I_J+Sf2{`A1
zdlqtzY#CmYduQ&e&#9~)=7f&#?I)T<k#QwVbfAIG$rEiKwo%`O48r-?zLj2j|67aD
zVE-c%$=LUW7oT~D52XT~v&4;X6FuX?A>bzq0OMUaw;gh@x7AyypBuU1(YWW&B;)I7
z#AHRrH5xEM{cNFfNOjKaPDGfh&AUI)6PbDw1<Kyup6r2{$k0;|S$qdEO{x+HY5f8j
zmoLM$y|0TdmG@%v3e6uS5P9WprL?L>5)adp$>p$Dky|^hqo>-gT6K3Z%!aOBIAKuz
zd9*BVcJ}Q=Vwaup`dbE0#cG{R-b#~90E?%e#e;$2m|QA8XtA80>hPES7R`4bnZf(L
zAv#P|&e+2WsB|>veSijGAPTZFYo}8Xr?ZdknvWB0_Pf~4(z?|f>4EM#H=f<o6ot@(
zkOONJr*w#hnpw=#a)do}SN}(Bw=YmN%t5q_Mob6_)cnVab~4Vz+NB1$xqO>MpDt-N
z9jS3Lr{26Mrz;AAd7%gUbaN--JVz>uBL5K*lAiK}(938RP`9to_T9Iv^(W(^?-|sA
z=LDBd^=5x)Evbz2fZOVBhL%amc~**1q~Txi1kDDve|f@UC3zsdc$?IK9}VXyD%x&-
zm$3Ks&2hPO+=SEWv=EDZzz3}MvxBrjHC{Adibo(hs`~39N2w}2r{(HN5UG(eK%sP>
zy6!uXf3v*wZFzjEd1v`P2>Dk(x|E)(`ASrWT;c8Y*%SKBgJoDv2Z#JQLN|!F%*!3=
zp6uTdvCH!qYtYA><c4NHCl5y3FHVAul{`zHQJ-u2<RJ5G;aoJc_>HiubD8#tf28sr
zBf`S23dm=C^Cz5%>tT+a+qn_+{kiw-yVCpR&x*{9I2{zKP*yDBYR46yWnP4B2CWf_
z)Lf-7mU4x~VoSch4bWQLLcB{%{aBID%RWZ+E9WX!Ewg|pu_ZJDA&vSXRdxyxqb_iB
zW(PgqF^88kw(zy+H3Z?;9HZ}wyD-!Q<CA2)KC8|GKXh31`Y|SsD@SQ!Ood8iA?seJ
zn7@!)XX2-ro~`$4PPo4`8;@YLigO>SK@=$hotIv!Tgz#?;0os`HRCP!9N9!LTAnN`
zA>+D;<K+8?nF&JxOUM6po=j4ljx>r%S13{PO^0~w?CI61B!i-Fp^}J&!FshLenHCb
zOFmvWvy;i;CZzbbTo?_v-8Q6}?7TkJrgVKt=+GN$R(-UU7$-q1j$OeF!$$4>I{3_5
z|Bm~L?&_uPlnxm?h7l;YW(w+YWyWh@BtT>;4k52T0fmltMOA>1MkRct7N<!JjrVuI
z)7@9tcxTv~s}{@QHcQM|fG{4JNax~kZJ5QICC;?mF<#7tA@xNA@M$sYGjB`g6fQN9
zJUiG=x34HGY*s&?ancxRbBKPTIW}c+q*g6)t5;J<Jw?!RwfH<K#fOoW8~=zlFU13U
zbyG(6xwf_{+;-!sxHoPZtJSGHJ8W7rJlsacBF4JX7CD%(@ws`bV(6UZxe8`u$%B|v
zapXdLxh^N9r?)%w;*{DgWCBxJy}W~Yj4Shauw9y2E$s(sPW!>5(FJWzjO>i`7sV#|
z2G^&Pdx{uBJ%-MHkYvYLEp3@HN`JX3L-D?{EC539zbRXcBq7Ctof(#X!T=!;xUf8v
z8>_K2TF<E=2LyuwX_3zt9U1(6(j+~SZ=B*o)&>8{6I3Gr>-~s*A~#m=D%tLAE*Rt@
zsRy58G+))Yyf2D(?tl1tqzlM1Pa|mtyX7`isl7QGxKy~sC;@$2YOVOzGqP;v*qNGz
z&#!MzTc|<ky=vo5{Ug=fqztgj;7_=GH$5`!D%zO+Np@^=&wcOcRiamrV{@H4^vf-~
zO}5|?*8ZnTg~q@<)Vz?S3P}{HKcDK?ZZbGT#w5o2WIi_w)4tu92i%z6sooRH8104w
z`BeFF&b2X_n-SN9L$<$G^;9n5x11js)z{(o!Zpvgtlodr(HQHfZ!J+e;_Q%F=znRF
zENaMvpOj)}JDmXph=E{gi^ZlVNXg`AzfGoC=lL&u)aMQ++K7A4L#?}RK7BBJ_GX{1
zqGi5rR;EXM8MZsQPe)e3Iin8DGNJ4AN{<Q+q9}A{p{gAu@+Q!hFPUrHzvYC-10+gy
zZ!t(fvlrg_OW$NUYPnTXyO^MK<p|;(rY~RHAX_=2+Rg6pKllU=EhIXWAIn-jKG^M9
zOO^@$iVg>j53jGB#`y+x6v;a8Zx}da8Q>e1Zf>Qt*LDkv#nyQy6N&SE3Y(A`R<)}x
z%^I#ew$s0RYISr?^GjL;A7`bX^7WVZM^2qrkCr(YAxo}5Z;`LClFgsFT~YMiDcEt3
zn0KIZci}WYiZ!eJg2jKSF+pH&dnWU-OIh44ml;Sp%=a23=;_8H#eo)D0oiSC$_uDL
zxgppLzvQ~T%^|v>_hu~HTT4r3!QMwH%Rhk(8)~G+Z*BO^iwLUw!2i{UDbKWl9o9_d
zkDrKDRCrit8r$lL-UXOd#kRM|@4Ny5a}L|kcwNC`(kLpyYWR9QbC*G>mAo0CJgsS9
zR$Aq^hB=A$?41l5m)wv%5BWb5yS+vr6uax6e!qV|a7dA8LONZKW7?Ct49{A@U*P+?
zLj6;FR8|sRck<JKd_ud4U*E^#r}zbl2Twy0g9Wy!avw&X*`@4O24&2TR#-foH&FtX
z2kWHEoj(Yy+Jwdf5P2R0>wi9@W*!bVC$9t9pWX_W50NzzPQ9uO0_I%Y8i~tA)F~Ie
zqvQ^D*XSlO_Vz80N*kD09I2?u<aXxEyeE@P-VFN}0iX43>B7vIcw*0e&6GmXF~Xd{
z?7$PdcVj|z%gU+3Hp(3`CncaFLEk)y4hl!x8Cm}#U}4WYTga3(1H$HF4_a2r+yLx2
zxTvo553-8O2XN{wpD6U#3eRfTx7^2#`%G=TrP|hf@Ra*4Wh96j!hE?pLCWYVF^VVW
zivVXn?%`lDH@Ysx1x{Vf(GYijhXMg{ZKSQ3=i4H)vcepYQWBibz-2yY&I;XkQl@x>
z-jnRVXyw-`1bu>Ea{xZblhh23t(@>%ATy!?Vj+8g0#T1qxm0N%hj#?fkRa6XO_|sD
z;mO-MV55PP+RB7Yr!#g3DP!&GT&+~mr@)ti<u-H1$|ZQ1fbjHdX4}p`!fxmY(Gd)!
zF*q28l${Uay1f*t`<2bu@W`#DBYI)PY-S<Mi4w4)ARPX}$AD6mB)pF7oNgxn_RG2t
zH;)|i-Mli~-g-WZf4iEhs@<#k%z0gf?|H1j>u>2iz*@5TLO`0Vx5m!}B<!Pyv?Jd4
zHN63{*KXlxybq==AGmoZ?A0wM7^P7a$g!#o(t$AgEC{3j$2o$N5S_Hgh5~NAeN_zt
zbD=~0?I}~ka_{#a0@rA(HQAZ03;^r$U}-reDOnvI*vp^J9c#G#Q7%gQi;iOr^>}_H
zpyph*4LUHf&V8Ug9l0tXLYg2b_Rzk_Q@@=DVso!C!-24?40VJJXX*7G70b?HeV{i?
zFo#>dOQV*&=%UjrY($=p`X^6AKLMaXMxQ5(d4Ochee1IL?DuTG-}ZZVp8Mq4R(L0q
z54_a^7H1t+48-_?m@-IbSyBes1IjuOT@X{8kOsc}uQF>dfjwBesL!68{X7CVT+`oc
zjzEYx7Rj-ovPAyWwV--tap$WJS9;XE_^lh{Lbz4!K}K!0jjyz2=4~!!{6&PwSYMv{
ziD&!UbDgft_cfA0{#zdqE@|+qW{|iOj8)in>{!^Cd8=~m_!(wOS24GbMhf4*-0s;9
zJ=m*C6tw(k9BfAM4_crl&jDzMZa&O#``EC-K3M0UmMCCt&O2Wln?X+MAr3SFC)^2+
ze>jMXqi6R(l7#!xnpQX`1%V)Q%Ih@Y>?0WBU9p9UsHkX1W4%?w_bHa|n?oL$$+jee
z2L{}Ok8Q4i6tx<&gzE)0HhkWPG#|@RkdEWB4*7oHaql6zm{*4H>U%yI%#hcp@KX&d
zTJ@jjW3DHmP#e3_J_oX1LqKDMO_mBUk1s^!jDcDFDUtXi8HKU~eB?BY2j|A^0Qjcw
z$Hf>)$tbzt@ErKXqFeui$iF^b$_2g*OJIfsXIv(cD9XkPfwRR$Oig;H4+7Qs^RY9W
znRr+>(Utp^-1HpKt*6Heo`EwOD44_H&$gI<TD4#6WC4mWFfdon6uu6Y8K1d_EC#7e
zX)yB7$nKxw_~B3Vnu7T-<JgSVnnb}6|43W?wVeOfynzc~YHzFxI?3~hN%r-5N#|%1
zNGs5<cvdX?D;DS9wE&fu|D^|L+#8})s@Do-Ajtp~kBeS934*gN6qrwV^`D~TpP9iX
zB$%eeri>f%Z?P&ZDhABrr$_&X1R^nQF9t%H_%|79{dAADKwN=2qvJydzXu0%pnUcE
zkLMmgHb{bag7f5q6AUuT1BY|S??jt}T%I?;!Oxt*zpO6r37C)AqTIunFbo)if6nvn
zO%ljqa1N&r6+{ES^3VJDSRYI+x?U%Z?muw}NU?K*k)^v_5C6+upt^ua)?U;4eq{W>
znYS^!-gl9V_Cg$(1H|iz=)XZNEE-JBb>8pet-obHpmD4~z^z^meE$Ma5{MH&m`}89
z>_g5=sQ}~cGU-#mvV{YgoQ%Ag^bb?=d$Iqfe%}<JBG@igP7&PV#kGU3P%H)$aW!2i
z|5@wPva&TJ`#n~MAaB+I_5t=6G$-e2h~IAubh;RyOIh1HINZGk5(mW7Je32TE)$*q
z!CPKqSTSkT?QVIQJ=s_W=%wr?;u*lNS`dC$d2QlW*iwNhfY??;a&Gwwqhi3yA#34~
zPZMjIeX;Z1^WEcWew#-(udB|}1cm?4&PASlEDn7h0(9fQ&XLK2=;BTj&+C}QE_9=>
zjV%=Nc{ba9_CKQW>;CXhlvlgkCU-3?SQPk70_ObAWVl`apY4UJHC2Ya0>((^13(-J
z88PP@hVCH)$Z3)dPdv;eb~3yD)AK8x2Xmj~t}KuG@pJ!GND^_X$MfnnqmA0sYo_00
z(5C96*Z&SwCHlt#P`bQ^T!G(v9L5>99(MHzXS&{1LyA3*45rJ^asFDrK?>b~JZmha
zOGE`{=^gsrNZeLbJ%HG|EmHBnl<o#^TraUBTY2-`Lh6aV-vf|9A{cwjxTd-?__hza
zIHkWWq62hCqy9dtS>loT-cB6DU&N?RgSzl+GzleqIfLdm_E9vX)To&)$zU#Ks{aD^
zrAGjZKaZz=^a_t7GoX(nr-!=zE3=a~fa!nQ5)t@iEW$rgadAP%<*M#F-MP|u=&kav
zwLZ3J!k;`^c4e@hy@&9(^}B+TQ5zMZKIE@9@|v(|Qi}7e*`C1VXxQmd_<g@66c{Ek
zuK4))=bTcmV@!^Uf15ff(eqzEo{#?}t4k4KSdgi@L^e*&w|R#7FB#ndTgsKr&Bxb%
zmD}{cg2C{6fI!L3V|&?t52)W%7It-QGR}<CbvW7)_G`2O!A~7r*~f#}%Y!}c{cUT=
z$%yt)cqa+{3qfI)kj%qe0sG~avd4=NzZKY<N(y#^F7DFUU%O2tRw!Uda@*40bHB&d
zCXVgqSq_ZkuUSIP;VNZvwpZj2{nZ5eybNpzM`XQ5+OMmcBmnVLZb&WsHQ;|O65M*>
zF_F=3uN?W^F*t*bphS6M?=5Y|Q~rhi|6uOtJ1#x2I*1n!^Y7773Gnbk^l}z5>hdog
zeh(5JM($Yczc~C%)UoGYSb3zwUoZr{{D&%kAy(<c1wHr+3bhN$Xf#82%JGk*@W8)%
zA|sc&5($z;=eXiYtZ)3?6ZxmNLC^C^2AYlA#{ep;5w6Z?5zKb|y*zLNa@F+;@dV`e
z%z@-Bh=%^-S~<(Fw#!_fc%e#C94Jd2i@#>@h3e{cE<m5Rtw}5YJE3?Im>5+$QoQVM
z1b#Xc4mr$4^t*D!{|>7Qg<&TWKFMN~CQaG@Hayub6qtURdia^Y2FszSrbL}|J5l$0
zO5iWytfXi3zIeIK|5yD@Tny3XKlxDj8<9|2U{x>6L;gO%?|y%@g-d}u1`xm7!q<s)
zZ2Q3|s^2aDxRah}ot`(H1XW7EwqFUXm_BZh?DvZQ+m#{a{fREu(thsdZ{&ngzB-2L
zNQJ2ZvFQCvr4`tuCIUe0`y~j;FQ@>PUOk37#w4nGgoe#^UlIU`MC|st{{ZQmKD-h4
z^#x8xar3y}-}?>s1U=2u{2m{^P4$H-uBD^nWQGz4AKy(guHMF2C(_>w_@qgCKJigf
zdso*c=FEeWzng!o>l3kd&-yP7?X`yT5|gihGbhBwpwIv2j=^)t(k}_ZQn)qlc>mpK
zH}QeFSg9Kv|J`q#On6}!S(#d132fjmXW~*CNf~P3{lwqYoFshx6fi6z!P~x0pgv{W
z|FpQ;Z|+#7jU-122a@fO6MGG_2nQ*PXO>ADK!^npkjz*|bfzo4G3w@c?$yaydngHh
z4+RO4E;;ppu8s+~-BJhU!0ncdgGgkAx*bD-vQC}55^l^b!70eIm#)Bxaq!1-CkZj}
zaW_^F#rw{^7Z@M1IRs9?OiA|^?@n_{_?B%)QZxM2EL#exD-iOtVW1$&9*f<{S?%Jd
ze{dY-d2#LaBAlD{LPD5zj0?h<%mWFW;;u%bQ%s!~raf(Kafp5+MoteMw4w>!vSyBe
z_Z;?RI1TDZ*PkBY+TL84)3!+j66T?+uIcU<b)T=E2~*W@eu?}c-d>$1rjr*eN_;=|
zXHarps%_dVJ~$0gq_%fP+4kI1;#pvhap9T7PLQ8eZ;EZM;1G|L<OB)PY3rLZY57NV
zn%=CH0$=9k-496(6Ef}HW4mnCdv}hUr8NpKW~ppfG0_!`Z9NMe*A|i`jk+bMZU0u*
z8gF=kc#_dewqEN33X4<~+x1~6u3`q)ADJCc=#Z`yu9iHS{(j-!D*3>Lo}D{^+GTqu
z<CawvfiP5r^p28Io^SFh_H?hKB2^^!+~4@sc4^}Khs`k6@y(N?5hRcYwBNR0vQwY}
zj<K`F&3L=G#A+5u0q-EM=~r!yI-DcEB@sjj<O9$qcs_N#7RwdhOB3+?w1zL$Q^+Vk
z+T{Y0X7SKXstV<%Xs~2SjiM`Iiich04(Q{SryEek;AqMm_{Lj-hrt<{HV<96JurEw
zWU(Qlafb*t!5x}p?@S#wZ+a81C3&XJt23H@4*E%#G{$9rp3yl16s&YL{wP=pr5p&@
z=Z21V2gjQOi$NM?KYs|sNZB0{w5VI)<Ev@|UI5Wc86<~N-}^~ZACC)*K9uTS6FYI2
zh5NlyQx=5v!|tHaJ4#YXNP6hVg(t@$`zIf->}tYaWbJTN0Hp@r^T1IMAE>0dLE}z`
z%N?RmO-&UA9xjtyz+<9IC}NRsL<C|uoI*H`sc<n*B$?t{Fx0Ry#lha5tKLMaggYah
zn&VSy*jTJfrg-9ITJn1&(_<w5yxLEZ00u&!2HD?(`3C$W)p8{DQf(ZNOMYS`{3+Qg
zHOd}?xo<BlV-}5-{lO-qV2s%eZtk;juB45}?VW{{uhcTf^eo+PwF2W<q%WNPlo4hf
z>oQsqmq1Hi0>=5YDIh@A5Eeac4bpI9rA}udO2oWLurAn&(L{PWR5Co1lwzo1fSW39
zfyix2440s=mU_*h%YvV#!#j*ZgeI#Q*5$J{51Tc0H&;Mw`y|NfXg}@FMQ~uCam=JF
z-Hi|Gtke-gx>*XA#3It`;-!4S&3-zFQv>Hf2xtKK`t0~Bp5?EtRz1x16nq)t3#^_p
zclrO|{<>3_pnVp)8Y<9KNC;btZ;Zf$JA=0-%tg19D<i_HAR!7R_#p%E=K!!zS3VS!
zx3CdMCgYkPY;@v*%n}n<J8Zz+tLNe7h~p=2TY>{oX7HxNr(2E%9PO)vQ+>lj4X@O0
z7e+t7a<u)P(v^gdG^`&I+B)CRE*pWhiR-dx*pQRyg{^sz$R?dL;{<w<5_VO*R+1V4
zT>yqUU@U@+t4{L1Dp>+I?Wwraasi%|$KeIGv|xjN3`PPOr2-rDYYvJu_Q#n-Uj+$i
zzs4EHxU_yeG<Y0b@a=o`RIm#G{Ur*|eQI=QFLN!~57l_=!d_58o>vAu-=)CVzhIC9
zp&tZatskX+s0S^13;^@<Sxs}>tgx)3qT<kO7;0voj){p$eStN`MSar2jy!<()AYpM
z0_yw1WRMF@-zCE`G;SBs{RH;ik+f?Zaht#r*DWanwo3z5^Q|D3jpui&yaJS(>|$7W
z2QkA#RsKU+WD@^xl_lH}$bEF_)L%jZw%e@N71Wi{l2?OClP+Dl%jihTa#VE0_d>Jy
zFItc)`CevScnabU>_Uyc?HRINo}YqO+(I}5J_7puga**VHPInBR0MqdnOF`B^Mf3-
zH~%mxCIyE`9JjBTRfuu<MGAoKu#I|rWW#{u{BmE(kbg7$scE5$H-WAb<9$1Ju;OEw
z%5b<X@#C8$10t=@k)3WSFKKu33?p-8ZSn03X8kbylN3HxPj!c6qsgo30Q7%y+)t(2
zA7*@T3PMafy-@(`WomOh6#k0*7smYz!L~#Va@_xMN=Rk^Bn$WFi+-y5gV`+G|8JQM
zUf%S9eg6WDrM&vbN;f`mFmk2k5D+#S)PM}aLmx?rii`w@?%1>gyPxq<QxcGO$sJP)
zQfo@UMn0fg@r}SBsa1?i!>}cAGD^sHLoWLClcSZJ42VY2U#|1`)t?IrAMkS`gP_5R
zmK)N58Sv1EBInWsTKqH*;1^`{JxPy<9vXcvCe#B7VQ<muzsK2J0bkk_6Z`}TQ7k!}
zo;7t=j|+5)_&fnJN=88P9uG^54f@~q73ijblcQFf&N+=SuM9(D>PnDDi2!kzK6$y6
z2QYX4kJ=jyg&ALoVf_H9AL^?Pqx!a2&EOew_c}Zt0EZzeR+2N$;0GJkpw*4lPQ;;-
z>RR#@tJ=WnR-Ws#UhkPGKSL9`%Jj+~$d~zlLH^iLQA6>W7B7LGTKQ<IY9e`)P8Z;T
zIS2F*|1AIp;W-8LDea+4l98VnY1FsXxzI6wm(alr{mv%IZQ^asp;y|)iREVakY%w4
z!H(3={660o9DD6dzI&cXR`ub3X*j^2=G`CUOUekyx8{o7{T=naqq{HTu63^Mz#SeQ
zIU`+if4oa8iSC<8(^9jz48X80mFGTY2@VY=+SUB8=G?}C6r@pglVxQH2f2E<gYGv}
zWzhj&xdE{VEb2^b!twgMnytOuH{Q9Caou>;oQAjxCQwWIcUlGx@>9PFGc&W+hlhTV
zO&FZ^i0H;;iNNm6!qE%pI@1RE_0G%ellKog6SmdZp((?DNXHRV#?mMIB{(KI=}+1`
z=%PF8tX`Ey1Gucj1*Sm%gK65*J)TEgESp+QONUY)F#8^R;Z=N3wiVP-5$n#LdUZ1J
z7?zY96`SdAJ}|1h_xc-Q&$M~o$cWIL>5AV@uKJR)^d439d?8P1!u&xY5?VF8HDL~Y
z>vR&rMgbgvjmVOg*RJNZ#uB>?2>*p)0dSCfTXZK;&^z_yr4)ebF(b=IdCuJ&P&$E9
zJN52kK^DncJ2LAzU8|3$rm0uAD$h)L^wT`#*vqPegA**1nG#N@zN5_OH)6%r67Db&
zE6!2l6TMvwo4jbP&5wK{LpO~d#>CE=2DkRUzW<@c2O_DEd{O(rO@J2~pHW=k`^!0{
zJV$#qyyN$Ql0LOinJ$m?JsZCVKCkwBH*cJ{f3bv}DywEv;Jf3t<Ww+DcY%B7eUan7
zWlz|vI+K*PtJ$!QKp~d*N--Xx0ncTg=T?+$*|&EVzqwn>R=z;f@eF+<g?~|hcGj{Z
zX5mL^=pFW$j1ZkAhRJuMK-l0bKeP4t@{#fCDgT4v@7;o_;vrA!cII<>pqXo<x#kja
z$Ln>I579gruavSbWt_W{QK;czRi#~7G<5FNqm)>gP-5xUuwR#<Ltm%t8E!@z=afQc
zQ<D;)5byoSsgd_ch;BSpQ$mliV#Y>BM}R~8?s~rm-4Ix&xRYP&O7DCJCw)yYB~8pP
zFJv&3YAC_D{e8>huI@Wk*20gYS;zK;PYCx}n<a<VXk^x|oq1qY`*a;YBgfN5eF5Zj
zhg9miiC)WI1JIm6LxGj}kkYnkpU_C&i;ZcE){PH|HGI-Jh`m>?az#edM}7DDlD2S(
z=Zb06ze)HV`g`?v8>oCH|4(X(jf%_$3X_9A39WyKbexW{eCpr-CNBBNkrFnaOfgr&
zr5O)`<m#6ltmeW?XVg~q8D*#UmydAy9*HXOzz-z`P98dQ-?sn7n3-PUqUFk<^Rvbs
zs%(xDCR_vSXq}b*jbj~w6{XGVnOx14@<xIOV`kw_DMSxcMu;33z=d6xwXxOZic%s;
zDL<NSm{7N#+4v;w?Tb{AL~Ii>fEK74Zx?&9x0Ih(NW8fyWvQdEbtkgZ5xUTtHkL4!
zT$%(<qEC3as~ZKo@}x}M6_D4Ky>j7F`}Yqt!3DT!?HXKiN5;C-tBsibxUDtG(5w6Y
z8q;s4)D#)WJ`+`k8%pO<O1?k0q)?`3#V&7hTqY>=8RiAIKJ|MRf%VLHy@4sb^hhf^
zErLKn*@1DXB|;;S_hYnx%uvKAZBAJ#gMI!@>P8QS45rey{ZqM%i=z#b>~9C7oLP-t
z?+&E2Agb<9IM)>Cm~%bNe88Uu7-yU49rV*@gk6n!X;Nt3)p3DNL7{Xm-Fsiedy%?8
z<AEsm2}26HvOiX_Z=}CndKEvF|N2)E`zX-Qw7{%N;!z?S<<G4Yad=CeJ+0#WHFT1(
z@ve~S_G{Eq{-XT$a5dpDHR_dsusUDeYLhE|DS|ua!EpcB0nho2;KbDJ3`B?4S;Cey
zDTVCjH7GFr>qg&hQ7#0Er}PQAFv#o|@2*PXzkM`O?tWW8w~%SD(A4IB1CtSY_}uZd
zvrD>Gcd>9t-YbfMZ-=x$i}5gpf1w=k-q$X19<>OZe)3&(G9Ewm`c3ii<UT<K^jB8>
zzGDy<y`bl5)-A7Wmhyf5Wfi6Lk8VLEGD9g))nkg6Yx1vUi=VV?XdCrjDss7am^5Gh
z8C=ZtZF%Qe{j!$5)dhCZ)m6q$@xkD-oofT>BKb9H{fRmsFfETbpK>_tOHaK+I?OvP
zQDP`n_a+z{+caN}MU%gorSTbWuZZ=JuTgt{GQ-Pp_uhlv#kSjDB5%*N-o!PsP=0ig
zQdQxo30iJ5FcX`6)Z=14DpDYx03LQtajxJ+BwC)PDqwRHbUEi2J8W$g>Zzl;*Z(=;
zEEYAmD#y#qng-5$6qrlU=b+;^9yIX*VV=qT+B5g1XGh#qe5t=%dCdB@^dpsU7X21U
z*Kc+=kIC)XK<FdZ`C5j+frIMJpC#kAKeiH7)H<zK-9)#|JhGBFkR~XF@)%1TTy^F+
zL|^MapR9;3x!ty792vOsh%~n1kwj#JTIfKBkb3EZ1B?COI^;otP-48im6&zQV*6J<
zZq1~~9SYN}xpQx2bGGE~88mc93{}p04A!|nde*LV^pc%GeuiSPZrd3WbB_`9p!a>d
zQGu2HJYCG^WgIBt9653Mi85`B%L?K1PHd>i6_1)3s70ElZY1I6XuMcn-|eZlEbb87
zCyUUJ^)9iypl+DQIRC0qznyBjY^3j=xMFEaFGe%fE@KF*{ngTlp!5LO`1PJGM@s1a
zN1Mw&czK1FgNr95>v^&|b}Lb&Q7_o2Mp!@4&)#l(>b4txE@{-2g;eOUtJDEu)_CCQ
z3-&dmgFEKlBNLWubviw2h}n@>D-4U!nDh3{b3Y(7@Wf;KL)((#_t&>FW^(!(aL+0#
zm`qwc@P4mcQ#W?$rAtO^dM7eroanvr+s2|f&17p;AbG$_=wz~^v^Mi_{f^z~>dELQ
znnj$};yB?*#1g{+7tLl+>&XYCv79<3LRk%4mNQRonp>@Wew{ZRS%zt>*}2BX{U}?e
zJ|0zCn=TvybN|v&n2kY~=#O^rk9VL84}$x?xlb*18JwgVskAEinlPk{y;i?4sfo9D
z9XPH6+@gt7M2DpF$<mmb>zCu;L5aX$4@!8k8-MMv&7Dwr#_nY_;FVlwUN_+p%(aGm
z;D3qR1ZF;C=l)^0eDqe|^nS3C2fA)&w*Zs^JAAltA?dG#AxJI(Z)O6Vw!BuXn=8wg
zeTlu}nJ`yzyhKn^E?EEF>qk1qp>wY^C-yB1M19-X752XB^^Wi~E=-=kTT69r?7-@k
z&wy{+&LXZVwua;bJEJ&4@nEA{nemo+)Uqt;ap~-si{eiW3*EaS>a9?t-#<=@7EYX)
zqDoWXgS{^s0sfd~zMPD1!=0Tg&!qe-y*|Efj(R^xVL#*R*q3E~AqyjL6Se7*CNnn7
zYx~J>Fd?gxpJBW^t&iOSCgjR%KD~??R8ve7>XPXk?BOv%)J>5otlz{Q6bL2)18!r5
zE1Hum;g(-gv;b7D#?Y{bc?E?p9qkr5L{c;Jdbg~q@x(^;sbB$IW5LAq2r;*^ck=3l
zd7ZyZ8OzM2fyYkuc1I}l75201_Lh(4SMN+;<eTJ85<l?wIU2wJSaiH(R=+#;m?A?4
z-j7OpBgYQ2)iv_ev(02GCU<%I-dqhq(r9s7{_8DC!mZlv?6r=-vD0fIuXfgTuD}SH
zC+Xfq`gJtqzO;Ml_tILVb=^y4`%rIX^bltACVQ(ItU<h44g2=_%S>Rn4}n6!(7T{$
z4LB=aGu5X<cKavnu8&INlx8AIueB2tJS$lVwj(VQ7Nju|hviFN4@vg!`Ng=*j$U~;
z=0M8Q)fh4}Cdq!+r6Fxj+P}p@-ZBE3PN<bWn5!99n!lc@<9_Bx#En{1m})MbHNAc<
zC#B2E;bB2@e+N};62ml`+vQQb0D|JMBR)E&SYYIOWeV@kbYkPTjM6WuL-}_?t-U`m
zd4D!jtI1&w?6m*xJWBbNiE&-Wb&pg(bcTg6+UKx4@nT3fg<*Pc>rT^h+_lQJr#9F&
zI)SgPR<CcQ!UF^3ebdjcUCz&EOWPlIb~yL0S#s8|Z{fBO)yP#tqnk&xol~1f(DL_e
z6JKLq%CxL3(BLpOFExlkJLac5x&oo68r@cYGbY`CwfI_h^+%%@OedUrzQET^?Wy&H
zb{DIr#Dh<&J#ueO4P~_NFl#P5lCe>ZAM3#pBHp}6M^78Sf8NY)AJaXqB#aHtNHvYk
z9pk^qbh*zgyk_(xa`TZP;+kJD8q@?bGiM!Vm+TX%y}(TM`FAbA<u2O9JEIgj5A;c+
zii(O{-K>yEq^G&M=8t?1y&%!=4IrhMzW(Z^Zprx%x8xP=&3jTgY>N+?+creM&7aqL
z#yPsgxZOKZRO%G4N2lGlvTc`t<U~3m)KzxrjiJgxG2=|^#jU%<GT}8zYQ~u&Y8_|m
zgZ#6RDtFItWgIQ1tY4Z8#I~kKv8T<pi`{?Jr~1`5{=Bc$MZx-7m3JX|isxeLf^ufg
zIM&RhC>E!!b=YDb!ir-<ye!wdOdRC*F5}=Yzh-Zj&x3l@{hf<;)N;3KY;7IuKVDxv
zuNb-(IMbdzI+AZKkukX@t=Pi(q5dxRDY|N?V0O=;-@<BM@aUP!tnXEJ#T$heb1y$=
zT)Pk3UA!`MZbO*yyG&pUC`#;xIfDNmVElSYq8pUFxgsFokWO$5tL8`Re!2B4!B$Ie
zZ@x&=WpS~h%zDuyt?;_$isRh11&3>t(`NAmezOK&znR92?n^^_I*AkAQd)1;3DUmV
zh0O`feh(u@l_vR_mHSAAvG~nR9*3`JYQd{xNnfs3_|{wHcE#tySgwtpm^)p>z?@HM
zojwu1ugxxG(9ovf?ULq2XTw`B+d<*u7`XoV;z532vJ0G}?%1?ct_>}9#LVY)rA4T@
zQtW^9iY4@(`j$fOKDiV`B0Y4kXNdXOyEPvhwlj=NyQQ#hucJ@c3DV#Feq@(8zVD>6
zR~5!`6YSP6o=7-u?RzZ}wo@KSC{oo|CS?{rz5a1hAE)B7Y`!G-e(wHq8qO9!ThU!{
z{+6)NbOXcNW~(~!&EU5z-URsoop%+9`$~sK31?0>NQG0?(@ovjkwMnwmr;D}xH`q`
z7$o_Y{ji^UUc?dglF(I%;-V<egA>4d3=)$T54qn^p=OTB5$4HhP*Qdr#xBMQcQ+ng
zbMJlo<UX-dlUYJqk5Z=VssF~gXSsX1`SIH=oC57;A>VwHZdLPRE7{N3l@8u}SoF=+
z&(R@cIQ+)e`A}yz%V~a@n2PNkafc36>|B-BjNl>N1CKiO51i2WJA3Us;=Ita9Ot0%
z#cN(=KTnE289>PorH+$Q?0q(R=u2@seXQEyQIOaK%lDNv>*zNXvA!|Y?UH7s6eE=(
zD|6C0x8F(IhQ4Lzx85J)hxyeC(u9gaeN)O6R8||@yVDx4D;_l{VDBR<4$1B_<9)$i
z1)e@*(P46HxHGbCi+d0}5R%`yWtm{uH50MNnNQKj#Jl+HlbH``iS<B9=x4|po273h
zHMO8)i*icJfu!M7-Fnpbs&n7`py(y79*Mf04vyKL+GmM_1?8zBW6v(V55MZJ@-elR
za=mMr@tRIbgh#MbThE}tdV7H&coIUYw(8u?v~mSg5Oup95gQGf30_O++RcWANwq)X
zEbE}jj9^0ff7jP&bq1-TbQm_qOWi+A5-7v2|AoDamOjIWq_f(`v3J9iL)tew)lw%^
z0#+49&#1z(Eci>K+eDjLsZY;LU&Q)@EQ-+@zDwS-a=jiSdJx@x-)_t>?|maoWPYHb
zFK@=L^4jnrUmdveT=0OpUnl>Gq=zXf{UFGkkgQLg4zxW}=2K;<!hp-Tz2+ESRw9k~
zXz7(>hKM~xDC#-z&u2Yw`)>YhZn&UhZXBmE8!CG!iE+fMCOv2|6lX0x)XoRhzhh?;
z(4y1sA9zu-Rp~qh%f^nE00o&V1U%11z7687Gbh+MVm2a+cfT?%?RKAe6*4pV?%i`@
zf<Nlryi3T)!_nvI;wyHogq4X%-l>LBUX2UTE&lsm*UpVdw!4~?)~{ce+rwk06=ib^
z*W;O9YcenfU;N~EK3cSNx`7UXU4J*YZ94+Zvom~|Z+&Lvv}%1<ZT9OcQ`_p;W!HiA
zrb4&53AyzrY|~@DcT<&mE?S=&_u_OH*sW>gss)ek)G>l*Vd@_w-vI^B&0nwkwK8$`
zHZxnw@K0ZB7`EfsKC_j$7ArELS98)K{nx{6vAACkv%#8Gs59mN`%$);f%-17Jk2+U
zwI}Br3Q)84nyD*`Ox^qmxiIFd4xIgii4}V??-f7^b`)v85h!}Pd<OjY3ACuVrns{z
z^hVyRH{AwBr|mPx5>iv0td55&*w$@*Ti93*Q!T3TtFNdipYP@RJZXQJYn@}O%S1>r
zHo-G_xjAHbXH-0!eJ)?IqG`7!YsXeU)Nvm78MU@Kthhf{ekr#k-BB=qDZ?+C!a^#x
zut&CIql9$NtJlmonRsfNGaiX-?(e!S5JZA5Nc<q%ZznLWm_K#gb0!5@-=`f~evG|E
zz#0BIe_Ak^pvF%7&>%qX%R{=1FL(NwBdn+haBzOx?!m5U$UgloVSfAYcy+S%^{-+D
zRpo40^z6ZU#5wJ(vCq3b>>=@t`-jx6aJ15gF1ZQHKM!)x;NE>!Goio)eSKpgX{j<}
z_C&^W1uO<UE*DGE+x+>eqM^ajbLU57+qqV**WodRL6RVL(qbLLCd`oZ{(d0D?>hSb
zQ1{khQFd?Js31y+QUZ!}rzqWnw6rt=qSDgc0|-dN01`tAN{N7g(hY)igLHQ{L+&;3
z_<X<j-S0m3aeUwYXa5H?bFX{dYhBm1t~$?q6Kjo?|7CY{mq;7HSZ6!|p#tfhM)aFl
zcDj2D0h7M6{E!~nxiVz`70x?(Jf1sch<wXvrJio!6SZ%{)AsRH0(c9Ezs5o#7+xL8
zdt$|$5g5Y3ER%>-!NBvL_M9Bwu{~>8S2AdM;Q7;aNh~#q=|{X+y)zk|U4(Ou^dq(2
z8>+b&UaalJVHaS@D)yVIiV9TrR-CvPV6%pIhUwXT{&r~)GCnd>m@Q&Dxx!fPqTF>5
zJc;|6x7qJf;c`>A(Jx@`U<;uq=O56F1S1gWc31Q9b}xS>a5NUvi+YphgG=;uxD+J3
znKqcJDqNdG?1l>T*$tXQBSAIvOM6~k|Kt$+T>zybu`!)EN3$2N?Na_qg-*t9Ys_&k
zHH_XvUIGa*ys&Nt<X3N+wcp;NZ7}&>=KiiAaEBT|2#a-u+$PNFxok~~1=6Rg8(Z@2
z5<$**@|BDzwd;@t=!#_}u-T;k{%ynuQ)YRholcgB7X{R2OWO+|XJ#qw*&&LWe+-V{
zX(rF<StuhlIiO?B8+HcG4^-LjDy{27Of>wF;Pn2=H3vOj5%(9SyyF1RJ^qounf3%-
zXi8y~9L|}M_Lv}`mSs!nWPnz?u~tIBYxp6V+qk{4sppcMpQ0X*L!0_jXUFR3(@l^m
z8@}W%j!^ri@p!SKi&!ez?IJXVK{9U%4YD6eRV|%r{)+vbDD{~web?>edhhY>F>E){
zhLX9MvBOOJZI)V|ciYcR*n8-XK7Mtrww_+WN%U43YfpUMQo~=*zjPcoOeS%1ax+fx
zNkoke`PkgYN8~b(PJ0zpsw4`t6|AOqBbMDx0+Y8O7j*l-KiN`D-LHsuK*cY=`2a!o
zXdI1pvARNy9y|HXD%bJ>iy;UE7oV4dw5~Q{!P=NUIl{!l{Bhp_o~RqT#^&7fXT~tb
zj>0EH1_`rd!{g9<eU`#Y=m`$FyaxbeeTnwo4OFHn0?=tsgoo7c@z2z@46`LycL=?F
ze6(AaWNwryYc!W~S?>D>M>wfMz~(|B*|VrrUbG>(ESzp)>iibxZGsD}MhQPu5s;4*
zg3di!%%6+g%a5~sbQxu`<-+haUAiQjqGD$$@fM^lev%&&zZUA@CekDQK!DSK)j&Fz
zT=}V*6m(c6H#RTwP1m39Zz3v%@Am&haJEYxcX+pc?-8ujeop|~HqZw})Dq1kV6s#W
z7U6epmjt<VC>_TKejqx`LrfLQwKH|_$pPpBRC8#n!;R+k+GdNida-_SQX)aiUkvAE
zvL3@(<j=xUDba>8Po~;FPz~r#V59N|y`}&a$mooB?BCHzhTbKxA_RMQ;X4s8$?LZX
zvpac~+AE060O9z}^fzR2P~wTuG?5kT!xHX(g|9*@O*2AkR*m+oJs08j&(=Iz`)UI&
z8FM1q%L<LUK=VjonzOE8$i;D%<*?EI`wNw?769aoWB@?|?vr|EY|8gHlU6!*Uy8UG
z<y5&Gh4yeo6b|(ZmYk+0ar$2p9;MJJC_%X1shh}h*w<gyI~vD^NTAUsRWd#<%L_}g
zgU%@nzbA)nQwygC&S`ulFT?|pCiEOnq_UlV*ksZ5#ZnanV1Bn(l;`~KPC}1w!cUF^
z7I#D&GY{?w-~NqYUFpCf>B7)=Xd8sj5eJBwm5*)r%svv2KyPEGoWVX^NQr&&D*00P
z=TnC)br+pvw`Cm2ov9Ns<1l^v3UjKe@bXlIPR~PHEO*vWVpyP~u3VGJ5RQ=mr04jc
zY!RJi73SunmOQ00wR>icyT4aJan@LSQ<q~No4;@_GVR?8Vt%iDD)F*wGMcR*q6<#P
zP~a``3dL%Z@=zQnEB~HVckMF)i2GAt32GDk-BC9Ho9xTi69gr!3;WDsf#vmkGs7ZX
z2R%=-c%pKpoPrryJxZ##pO&}`KLx4Q9@1ia2oX(f!n@as1)5w!6g8wh-xG2)0jq=b
znQ*OuU#gB>x9QUT*^Va;T?Y>r^KJCb-p<rW_d9of5_;R%$@eqy)$UuK&zJ=CzmKN8
zy0P)C>h63GCxG=7(k^`<^rZEl{GwU>Or7(w{#W^~;~&NIy!0x_oCzxajL|RizU_ya
z?Nd6Jn8Hzx+mAG50nRC`eCYs+ioc^)?G7@t&aoen6eJQDe-268D1}(~UWtkcy6g-T
zEWmxNrG?NtB2X|vw6t<i#Cp1HqB<O!uOPqu8bI^n&$&E;J<hkbMJ1sW3)@Wl$v-UG
zyTUTo>Uf?`WsVJ)-Jk2^O1t?zO=9DwiCnY>x^zrA@aJ~_+~s%v!Qa120AoC<AKvQ5
zQXJgjLWWH40U{+*H<cMu9KYy-ko&3TC1P!AA>~dgXTcG4TbG~tvk$_#>X|_Dn>PUc
z+UY%Zaqv~Pm=h;%K~6IubF;>+!_{t{=|Ft!ZYohpZ{g3*Ip%j18seazNk>YTr~X^q
zZ*RX36jFySy&Z08V_Qcq!+|Yc%l_M6+)X}&X9yH`6<XrNybSx=-m(RyDF{n2Fn(Au
zvvO&?$z&s%4r>AR^T^5qPzu=*NvyI85dGR^4ITbDbG8;BVq^S4U}JV}zUq-uXR)l?
ztM&eQk-da5Z!~Az(==yQO?1${P(s#@DI?)kBhr5I3IMof-V|^DOi~s-=IaQ}B5r$R
zuqY)=q&~&FS1!3&Ax2yZ9D<t_AXZuYkm3@-bGKlu=?&-nd8=F}b}~A-iuh3eBqR5l
z`rXb4A1i<E<X<|Ft^z#UURBM&nqu|Ez`_TU$5FS#%;8?Azo;FhyXGzV89|$U(66aJ
zfTPL)*j_Z+Sye*Qy9|`QHJbLEG&zZMQ=oUFMH{ri`Nd>#@@{GJI!(`j2a1Mxjl6FD
z<q*VMT$B&8b_&++#foa8)HF0SIw6Y9#V@PPP(iEG4P-OT1~os3f2>gP^*i;c3{K^F
z1d};CD=BW`zl1E=-Y<txxeC|3ZP4pCnlw)hnyl_g)7;C(i4oydt^MTRowT!A95R1^
zz9gZ*kb2sAA|zLBuN}8d!LxTV9}XbIaH(3=+F1IgNO#-YSPff&7^#FbN7(c;&QHd7
z-#YUze?OOx^gpM1x(r$*IM2_@zO1^CATwSU4u@vRDK<UknoXn_{eqGE;k0^Eowbu_
z1>l)PGgIpWP67Dlk)M^)meycpc9PNgR^mcQNksf*$GJ-)MeVWr<{FVF>5kj&AniHg
zM8S9m%v8^ooVgaxnn(ugF4uhPV@|(=+T<l|B5ukzUF`mRL_~*WMAj6~hli2rT)oq_
zMYpWgvqfk7t7O&9bMk_zCC75FuAeHKQ!OTb!+B3oFp<V)D>MHdNa$J$#uC5+&piAg
zDn9_$zr!VXa^qXE-s(Z;taD8)FGU+XXz7IEF${ROJeT)yJ{-Ailk$Hx5^tR>mR?jm
zQKO#_Wcd*Z^#A1Tuuopbukx07X`EGC=h<y|dIaXc!cb6L!nA+lLcV<pNAav4=cWgL
zm1}jGb&&HpFUWAt`&0ER@C)>3ckz7<xjlJ+u5>qjjcmqus*1zm$T^bD%94$(i={$x
zyczv9vRdj)jm+ZylmMJ?FO8Ajm+;$0rnT8;mKm;DpZ6qtZj5oaOj-~1CYm{PFxCPl
zfwzY_RkC4NGKQy)hC;6NNdF6WTcWNcWS$b+umV%2it9|zzMkZwN&<457L<9lZ<lyV
zTotP>g7SCAf*n<g)NDs;q3ZT1WHsxfg*sMkqz1<EW$z>y_!oajy-4-hzN4|!@*+9;
z?EoP`XGN*fCY8V~gIDe0wa&qN>p#aMzWuJQv0w7;;(0pX$wIUGmH6COK;+G))7GD(
z`)2Nlpv4Uq5gp5vm7Mm!90kF5aZFtBU@l9&pt{rRy4bb5mReO8ZQxIVwF9d506+gm
z_Bz;gIUNQaepE-guxP{KxlwhHp&9Qs(F5SohmJ;FCe<U_(lSStqXEHTyrPSwf-m*#
zs*-FMo-b;b#2m3u9I(o;Z5Q)TC7OsWLTRNoyIs?bVHm0SRb$gm#)rY<?JPJQu}818
zs0EI5y2G*clb9^+(P_!c9Ns^~5Xx1$W9Gc@{Dsjyz5^=G#t$OznlMA}FKPidH)?1L
zSlCpBSEb^0C2O}ztKT&uhVvw;hwogz*aE>|WPWK0rZ86fh!rT&oV?nkR5a{HR9gIN
zx1hJ3H~-M7lEW#mqStcWgjMr*C)1>3R;L^^y7xeOu2V5<j=i+xp-J-_hu){Kyhj%t
zm&o8;((CsSh%m+U`+Lf}46`_o_#%FnS!kj2*LW&2)_2Z!P^PV|e%3fDs4Q^R0qE0=
zh8lOd4e_IBP(5=ZgAE_m@E>}@FXmBI!*6pBh_zV$uzb0c*z6n)3RM1Imx%B1zFMid
z2L#als+Vr@&+wMI{pS?GPiqSIe`pd!2#dcM5F>#0+a96Jv4@kGcjqDNAH6LM{!=aw
z<P<3cPm%cgc2{9kp{KJ>v9h8KUC^vS(0+=BGWIyi_X!LRV(41jPR|tsWGSWi$nVmH
zXbru=-`b0*dtxWN{PzIGX)@i=l)-sf%oGkxuw?5alp&l;a%x8wCuf9`;mdc2LylhQ
z*UM`9=czSM-Uc6!S9%?PdobhtA)p|uUvko>&2%q|Wm8x#AqARUURJ%=(bC~x_JPJh
zwi!@|aIIOK*ymP>xP?2c#!(UG#&A0J3ap4eD|oRKug%~vf~@kN9D5M(@$ENN;6GI!
zD=%~?FIQg<57d<Ei2X(k;n}LR>@zZ^6eVWBPQSErcje^&Y+}!(UE$|i6-Y4MGhBrs
z;|B>goJSviKC+t;ZNv5aj2_t#^%+>tghVHSdUm~|eezCuSen{Mk_rDR&gltau)7=z
zJy1*yR&VzY4kL!edtAD6xHm{I7LOEKw|nFgTp%hu`;6@BYEySoYfd^lMnBCk>fr;<
zB#BGUiRO^oQe0m?MO^$QyWeYB3knb%2Rk@nzs|LXWrI|HDI^mqAOMs69X-GSlytN_
zb&y{;PW2NQG=F{~d|2RkHD7)?V!v4N>n)4QS2k;wpaPyJ4MaJWY8A<-vX+;Zu?r>a
zpywtnG;NFHxai7Rtep^fD?Yq%Z&u<kp|-tb=gfSp5cu+wsn5=5%uo977$UNA#nRCA
zR4F)JK+zmz_1t^cD5{6-#PGZ3UN{bQizwJ{@^k?%EXadZC@(1RrcpZzX1y9vLl)^#
z$!MX7!-$@Nt-{G{BOI5Dw@k%KD`lJ*0!GX0sdpyN`Z^S6SV?|wxoj{sH?iDdle6B1
zA2tO@mN4S#Cgg*7<}@4-x>V=zAJTyasd(F1BoR*0{xP)c0B+1W>Jczm-4g0UVQY8Z
z^Cw~N*vwOp!ZItO%$|r$X%xwZAm8SuSXP5z+_S4~srXIBFz_6kBLfRC2%&;@Rmx|m
zC3>{zSG^BuE1o7_#g?S`O*G9$$_ta+8*|dwMGB#m*j^V_i~b53d)^wEfm&Wi9F&Ed
z!wPn%4<iybRwSJ!Xv{xkvJX&*IJUKbgmc1c-+OM4UDodOK6`POzv*R?VEz76Qq8b+
zLydlc%dPY!G2;CIo?My}@y{O!9D3P<^sLO-F3*07OC7msJ4m7HalOfPzIV3W%Dz}V
zLxu0z^g&TQGeogE8xpljtmGM+`S_)Dp84_YK&P2CD9?7Dyxcrw^Gc*}uEvlt70ef8
zT9W(v*p0aS!!s+7!*n#V=TWNPkgXPmzBan{{fc*A3Olyz&?j%Px>@wR{<v4(KNtAn
zHVKdLll0#%U}Z;4_Bjhu&jBVEE~wW2k%i7NBHJunlH^O@#>CKOWY3O-FV@M(ptqmZ
z)I&ab2@q=Y*LD>$lup1sU&aeoB3;O;FB`qM3FQ5a-2~+~@n=@NgfnxV#hkPJM(`#Z
zx3vO6@nT;tgn3ICM%e1w@2!|5tKIqIR6RX37Q0uV6CshG#o1cza)fQqHqGkRl?QrY
zz9C%2m&bFRZ>;Uj%Eh!|DmM#Wt_h4kOZuI%XFc-QFZg}Am!*`aTj}=s?5A1fK(^{H
zKdfDyeZI4nHpj&i(^@z6z3Os0XZ}j(&Dbd~T?V7Jm@fMdH7?S@$b5$0l8~8|?#ii+
z31@#}K3QeQ7*D|%y*|4Z6X&JpebrZUPj=ddhk5fy-jWv->L)WBYhV?y+NA~z*dE|`
zCA3KL^KO>qq*|^a`vqIBQ}6WD{|GE5+uC)I9gXcBj$;OU)`%xSpKqX@oZk-PiA%vn
zwX>q^gDn4vnmo>$)9Wf56W)5o1~Rw2Yl57StF?|67JH+4NZu19!yUm*E3+H`zua(1
z0L|w?#Q(UKGxh%4!V>712k2~`LXva+B=C`Y4RKmG{oIBJvsqqoshX~EIJJf?zJD?_
zb%0(XC?I4!bT_q?suo428diPihqov^1KdNeHMIi)BTuMYDb<GIuICoKzFTfnKwMF1
z?RR``Eo4O%&UdD_cM|`LSEf~kzg5dIad*2a+wy1mH~5b&#8mR~$=ni1dC!L&d0{AA
zW^WDG`Clk!LmmjU6K}D{Ij8D9DC)0W!->pe7oHTlO?i~=6!GdZ0bVnu?LhK7WXr<b
zcn72n8%>e}jW()=;U}yG((jj9sSCp6$zJ$xvlj+IDqL!BA$w;Tk<DD0$ra(Rn#|HY
z0cQ-gNb1R`?Z&<6Lrrepn;zwHE)baM@$BJYgj5W?lGLOb!!xNRnz#00VU0+sM*p#I
zm)kgLZZp&&`aXN)UN&X&&u9IIZoN6gsWTyarm*pd_20Q&?AUPnJ^f1|{d|zuc<Su6
z68gaH%^K^=8WFMi->M|>Eiud3{KLYN-1`;xhJ@|M?jsBrOVeuo0~$c8&0*m^>75We
zUHi(^Fa2($!+klW>v_4B!*{IQM>Bz}M@tlxx~vWZ&W(^xdD)qedy^%6N2dIFV>@Z~
z1vTVbXImfZ$(n*T`7dLv0XU(=05p<ZdTwIre7<E3rJ6%m;CAL%BkL@WTNfU&v(GJD
z9F?bF&*lw0HnMdm-<9(`SHS^Z=n>kr7ivO3`(EfR&18I_YCmdN@wZ7@=O5kWC_6PH
zo(j0s9=+P|DR*d)N3o4j)087=E};I94E?<F)Nz%7A{e^$YOnvK=fur7Djc#_R$9F5
zG6YJ2Bu{C2k<5AuFUgV~*vQGzQNA&2=?7RZnJRBf;#O?K=E<!6{K?wVbAyzLZ0B1b
z4OHu1=v;HUPVIVL&)>KHjb?tmhHasM%_{_o*H5tu)h~ZF>1t7f;K<Z(uu2_o3{gmc
z)BKRP{5<Ix>rUcoLbDhito}&Ci!V>3(r#JtM-_9LmDfd4FRi(wM&KEd<<zJ?FI<qD
zt7CS2X7Tx)9U+oWayOvFk=@o&Q-*qV+6a#9lHMuaDa(9@sZd}&RyJ{lTeO8jI5&Cl
zF?9h6IqB}MUJmc?G;r9rPfbp?e7wu0%WbQrxGa0~_R?WD*X7XCalUr>B&qnm7XFqZ
z4X@|Qfq)yf*5w$zYAK21VdtJLX?bamvr^urW%0)gXQI^iKXNHs#0tg|@)vA%<%Uy=
zb0<sm*vmHbfD>tDiC>*E`LxQmQ-kT12m8p8w``h87qMgI_%mI#`hC}0fLRy|UjPuZ
zrM(9QnZ?cQJiLX=6RiT`5{2J)m_4nJX>bjM!?`DU@DBt)7Q7W7FfHgnx2VCPX;vib
zz}Xcwg^fRRF!1Psqr7g5t3xdMQf7*l<;V}GT#Hwg3SZatLA$9IefOY)#d_(&n&DCY
zgo;rumhqxGk@YRmbr1SrM=F9sLw^f?ubN=ZKq3<BkwypZBY(NxKf`pnZE`DMxTidR
zV7eZ(V<5722WaW8TG4$L0S<=gP(XmYwCm(kw}18C&-OjtUO0*vh2DVU>%??Rm@^G7
zeVuLC1Qi(?(qS260PqvpLUITUVNC%lsaLLu-=&DNe_k(0I5UZNyN_1sQDivC6j#`Z
z`hMMA`Wlw*EGZZvGbr6rvg)M!hBq2^WP8R=$^w?6eBtOZvPs}1r)j&zHsV!}{(j*g
zYdzjSed5c>de^jm{@0Jw(Xhqxs#bOD##aA6RCQgUTaWc1T!iv1L4v5~{HSK<zCIwJ
zv&if+DbztW@B;F`r(_=;pgc~0djZyOu($k7_k64YMI?^9@3?T@nwjR!|5(i;kvThj
zS)+|4Q!#EE0^t$m>W-x3n7~$v9<q;l>@?tT2?KcqmQ3+qR>Zs&hEncLiGcS1e^owM
z<+C;MIc@Z2GF@$+)+6=M5A+q|eFE>~a~Q|=R;vXh&slJ)7(l~soH@nDta_mjdjM!M
z)C2C5yDB7RS?KN0%@^E8b;nlFuOyB;q5yS-9(W(g{5?<idQ6hzCj8=rl+W47JTKhb
zIeq}Lc!TN1S3i%-o$g)jp(A5A_v+l!QE5TBjMas6b=P;%4k)!ahMB7_ZMJ!)mFXf*
z(y4>l5$m7<po(;)$j5b{2gH*JEmp{$g<>BAMN8Tf)?eeQ6-1V6Rbx&lwG_h^TNI<I
zG_bFGiBsqNmnYQ$XQ~iX{EL-4S@eI8^X;jnt`L$Hn%BH%h1yPM)pCauweQsmR3&9&
znP((>KhDq~VHVD}k;d&@c@|KmSdvFpc&sq1l2w;0TXPs<#scWm>jQ>7fCZqy{Noha
zA(|QCB!bs#l3LC2wxkNO(w`k1Gm`ZYlsBK+X`~XV6mbz(U96T53^XGfv;|V^bXiU=
z%7C-SVS8M;J6J{d!r#nvwj)>PH|Qj1J^8?h;-iaf_V0azk$s)?S~^=hBHvXyFZ2Ba
z@thfG0{Aw|7CZ1{r{gbZ(8d9**oI{RDvacj>N8TP&dEX&r>y=bamq>`+Ug2G3;D@0
zYKQ|I7#8#O2Hlzvk1D<Z@VehyEJLj&3S$`(IkUz?7&Sd~Eh5P!vqu1=M5e@_?^;T1
z4Z@-`M7tCMwAC&~J~|zo&}@rk-<Y_~i1|OxHyw)6MD$nN(4=pm^=X3pA9+e&NzcdZ
zxfQ?)%Q>e(csS95qn>^b6G@(ZL+uI#Y(cthNEv-j4q%eo|Muu_i70g9ZJ*kPk&D$e
zBSY#g5Qf}eqnd{Ni%i%8Ri+rBG09KM0EZB46<>*l)YK~s4p2`(e_*)QTwGKXrH+1$
z#!&%D5JLdCD1X$?D2H|?0)u~@V`|}+6S={~3A+MZ;3rEFYEh~$m7;2LwOUV~B^uiB
z1b7D^TS>3dM%&vr#b031Y9k*FyaVHZ0hoSwb@8BJUUjPbq+iR4aql7VWSA)PE#!?r
zVb&#zY<i(AwyiqKl17;eDZs%)0+VF-QO5F##}6MZ>6fZ}3-G=~0+>dfSV4ukwwsJw
ztPc5RjZ&3O&=oN=8O)8hoe2J~J-|44cEhI*=sOTd<JV4lByZEM;dt=>hA?6V4-HoD
zy!$^_?<!e(yk##PhHC?O{u}Z>o*n>-!_v13XlF=n6>DKJPY~EVK?XLQu!r$_aUZl8
zuV9H*NOSz3utab~7*qTg9M4!Y6hr2CuUI+{*9O$88^ToTho~rDJYgS_s#5|RbvE#5
z08l!h{$n(JMm^0!jjmxwZ~r^&2#{$X{uhAaPs?>+lpqlIE1V&qpkpMo0MyL4_TE~e
zodM>V2Bqp}dSL3x|4co5BCc7B{%Y!v|4*m>Pj^<{YbmJ@sjJVyZNO_A2(C`Cjvr%^
zIZsfjt^rw){|3lX|Kg4G*G^M`yT&vmUg!0{<Y{UtoP=sx1IUvO)6p6p%*Ogx0>-fd
zz$Rbyz9d^-L|oBde1cs+koIpf|5B>yn@HQ)1?OyGq!X+I&?j_326a*J8(>EWi?plQ
zUV~o)-#`RlJ2SL!P%e@E=|4BL6h#}nQU%}ndFuePXO%Ht0JO83(42aj7yJ)h!&?QQ
zH6Og|C#qYo;A#^4*G6|X;M`QW7m5V$`1oW}N#e^4BJyNn6dMxxFX>U>3Y0KPq+VW0
z7VUDQcp(NYfS3Cn{r*=={zb5TyIwQ-H78pVQp$htz$PlluTZFnJj~Vv{BAEXU0L=@
z-@Sq<_rMb>Tpc9P_sS5GqFldHV)BR#X}JF@=yeS^0W!vv{S|six6x&;P%=m(e5XfI
zQS}=EFesfB_tNSC65>0K%>~;HqFm}}&VMb+@c*+#`4`nU^v^NiSjmS3!6MO3jzR#~
z`6)RmQ;T8xXfDB#Ow1Qk=KgD-7dkgsH6-gykQ=V*m>2ampMf%x*|j7@v=@LN?@u7J
zY99bX^(z{1k^sJK<Ru(50ICfJZ6Hx@KDgIgA-Z0|)u8h4LUs1xpdle<$gL2~#FHdK
zZpCjxB^#6^F9K}&9SmCKf0qjL?8XZ&R7}9}Gb8+j^DhDoh*u<VN>TBzeHY1pggAYJ
zz3P#V8WQEk$;sKjO^cK*witK1F{w|cSF)AoSS84KEnB?*=dyK$UgZ2gRu&*;Q*M4I
z0HFH%dha=(R6f322o?df<xX_`H(;QoXhWw+9b)(&95hm9!_NKCX-QJuzC)awE{mNP
zZFw}jNH4>y{fexaG9+_<$TZ0p#T4B)dx4QAQF-WDD)A-kiv)EfR;#@1i@-Le=ZW`6
ziWtVut7}Z$tej&7kKlqwU7nlvlS`@a@*|-oM9R^T(3DA+t4R0JYeF<i+}OI~02A3<
zjl6mAZV+!3Y>*BOM3G4F7JU!?lEHORyn}*qoa${EZJ1S?RVp-j*_9E1yG`ZutGI^1
z>1F$QJ)v!9z|EA$+RwbpjQta%E22v}iN^&(T>W)a27JAFfq-8AWQ!F<#k39=`S$(>
z+BmR?GasTV1;Rz&JJL8;W#2+6!0Wlx0q?tT>ow=6t7|J8KJyjE^%jl7|85zzzR&x7
z!hZzU+ZzKl$l|kiS+fy}&pbojJ`cikd5QcFkG{>C+-9xS^A|X%lXS29&xcF2@==3w
zRI}Wix8FQOqnr+|yTe{J{gpgsmwp<9b{Y)@gO=Ur6QGF_7XCCLqoANLIr*9&jq(Nx
z4(@les4Bp0{9H-t=!T=b_YE{G+3BM8$1J7<HT)Nyyi@xM`pXz-7WAUJ#UrPao0STC
z{%0=lPpzS*FNl$MZ$FRI+MIYAXoL%{omKF@)R|L=KcrITL)*U`y6@?#tYi}1S8B6u
zM}#3-$Ac;#Wx2<9?hk${Nl8P~$Q9<z`^wLZ7!`Rn{xffc7<IP2B8KP<)IvH@)(AGG
zm%cZU^F)3U1SE_aZ-AcxJfIvH$a6(Q;1+l??;AT@C_VgiSHEjYzHwAqMze@^H62B7
zEpq3kq#IYmBZmQBqXu1n?ahW3Pdheic7h2$P6T62`k7JuoyV!p{~zW7i%Li!=^@C<
z%3_#3OCkW1_qN7(^87H2Wd#F`680LksUJ<yyI&mn{Gz%THeMljG)TbOQz~bp1upmp
zCq_T}yEHy!xH6b%s8W>Ae2@$7^B(VYl<pHK>0Pk&byTp}SYxPUU3)y(C9sSTyw^3;
z4Ay<b;5!Y}COaKrrCO@%O~Ty<)T;Q<U3yP24!*4Sb33sedpqRzAvXlM1uh9U_HHRv
zqR%1!DWeu;b@mUE{rjb8T|Y=XxQq%vKnFWZfI{EeI?rZ-obo@zdyCHCzpha(tKxrz
zoTdvdWo(Ntv!&SI@qHTTyhYP(T<v+l+*-g6pZ+O#xcl$T!8~r!)_J6P-{2=jE*Clm
zZoBX_8dC26xx+15aQ)w}#l4?%0G7RfX9w<rA?=MoHMj{r6Wt}CjAf|BSwZ=GEv^hu
zBOJyL0|RQNS5GX80=DDv4WWDg`2^nGm{0V#%Y9eK(I{WvLU~(GXq6fL_ZG)VqQQX=
zd?YAeLzS;)L@5hI{WDt28{{vF@P7aP{Unug+UR<G?^FyhR5b6(9WWFN7%DF%YwF*j
z07DZd#5KAGOa+s!j+Q^|m>($pG!1H#Dg}RZ{`CxDH;#C3-$btEJcB5!5|pCv=D)iI
zEaFq-x>HJlg>1n<a)zP~5m2VQgrMC(eqI-cR#uDX%X7d&#r+<7qY$uB_v`(=+T%GO
z7-gT3%>qM9;J%JZ!dOL$=r#??Yz{@WZ0gn1d7nNqKyKatu$H2f^$(ESf=dGyzyK}E
z7+kQ1iK~=HfqDb^Ij{laQy$kgKugM7%L?AO^7!vg)X-k*MoLCj)@hM1a)REXZ;&#r
z^@Se?T<i=Mq1HYA0;vGsqrn;oo+}mr8TP`Xj6H2n-M{^J(*-fVprNABz&>3sS3Pn=
zA3(xCAZLIpBPYjMOFeBQfA!`6&Tjk_>l<i73f_qKSrfjt$o<m=)2M8ap!>U+l+$K_
zqfuysJQUc&sGu9s^M<=bCI3o2*o#j#K&lvZCzFuEE-D1%dhS^a&tI)Xs*Nb+i)*!+
zHb7d>b=`{F;JSYm2NkJTqTZzUkQ;jw*avbORQmt?8eISPYpOb0IA9X|Ust1G_|epP
z_!Odm&nOX?xb4wX0sDW4M#1><B`XX4zWBR$%v@L7{^<q~DB>IB0sr{~bxUaR?8oEv
z4me;--UDgE;_ZL__ZA+Cl#&vmqSUxgAdFW6j!OrO!;ANGPmsSD!2rQ#yb|s<$MyJi
zO30yF6Zda{p<=*L8r}WYe}_5)WTt+pRnPT-VEW+$!Bjp=0>)q)4+v&N(sRwL8B)ps
z(ey>C{{Q!)=`Gq2XO*D}hNcG6q=@F&1&*NO$QwHY5w9|ouAZ*$JnUNY5SV|6+D*EW
zn6i@WWOoI_$wlkzP{C^tN|SC(1OOR?#dt5>!aq?m0k5yx1||{Kga#O5qnm~*c_&Jq
zbL@<q|M^6ZRwY}PyTkut=VRI8U}Uf!u8mS%u5G6$PWFlkYEVTj0?y=#JZF{vpjm`0
zFvCm%ckdg6MGr7TY|I}PBP#nZGp{6}&I?UNMOF3YiHVzA1w%RCrGr}^UnuZ!bn!6I
z<l}cd3oWDMJr2)dnZ880+wVLS)r9EswVy1nq;FxmaOWe)g~%KvDPJ7%YBs;XywWgT
zyzfX)DTsh%Fm_7Q%H~%fI19X;F)Sv&i-T8K(E+MsALq~peB|blQ^N4KkFlcml$NqH
zoPQtbpRJ-8#se`dquZ7*2+I80(il3nDe=u@j23=OYAd6Rf|^1%eQ=xvPOm?NCEjsm
ziz8GaZ*T);>eg)8-lAs%>pQl1M}sd$5y;^XawY*-v?rj<mt4E@1T6|)cPVnJow6Z_
z=_A1*h&M)c!>0^ShS^7AoU!K#Figa#o~y!Uqmq<(#8sHqT>H=7HiXsR01BWFma*Gv
z26uQoDxDmyO4_?@Q8@MW3q@3boHoElt|YL6V{iF^c@BSjVt5Cfm?bU=P%w#J;3?wW
z<qijjCs-NFv{A5!IQV*cx7FTzGXPOYoe=OTTa3MbKshap+QhwuKnuZ@d2$;mvd59$
zmgW!)+B3f3m1s6_ivGFwZ6pA_tpwKqAFyaPl658i@5bm`g=8EYA1Y&_rqI6D@o-v0
zn@za#T#qnthpUzdSjGM^z0=aDC3)wRu<bd<Or;VqwKpMIE5QB2y$fdCt33ArSPDXv
zF`}=QiL`r^y@N)gbQmsC-j+Kfc?5yx*ZwJusP0~h(sv9Wv@1jJ4YGJ8hrXf>5uf8l
zMgW(vA6rUhDiAa-G?l*o{+n*E-@SXs)zWhQfavR7cszk9r4^cmPId`WuENJM#2aw~
z1yROki*-IVahHC{Mn~Dgqs({hX3+Bc=d7xW0KY$dMmf{+LO#_3aA`FVDfKIXO(8*L
zqJE2p@8gY_DQ^&Sw9wm~XwWwtE}5`%s7_GH@1wf)&Z9Ab?WzMOQ_PG%^J3=KyWH>h
zE)Z*w`2tAk^8<mHFYh+6{2gD~r`W6;tVD}#z(S%&N|Y^;^0q!p{Rs<ANVaZmhaWh$
zFcu3GcH7R+H;IZVr{8-I&n1LBR{n*G3L*to8zw!!8)&Rx?OCNM-^@^Ewbvl$$(#R$
z1}p?A2tsfp&)tvOo2N?KVh_d^zJE2!=$i?69vrpvru@9h#OQQU&+fc9uI>2}IobM5
zKmn9$#hNuLb~uGiL2%G{aPR0<JUge9Co=<&h^*Cv-rm8dLHS%|r!Lw*4Z|GDm=qH9
z?KM&sN&k3Jwj2py$}-_YZAkfWVNY*nwOdaW#68CO5i5{2h+Tpg?#b#IWm+@RZ9OLT
z6U0O0v~C;0jpP_*3`n)gc9GS!hkVG!1kud4o9-S7`}%WiABl-6{C=G-EaWkginJ#{
zB>BTvV#tspIb-4mY@LL3-8-KqNaf-0BwPKqq~RLagy0bxW-POwSXa$5tr>(;9bogx
z$+RQL2{+%IDTI9>xgDU+L=(}uy4H50g+&WWOp_QmT*cx-a!@q<&nHTe1&~)UjY)0N
z9|5+TMW(TYp*_c}#Sj7AP<phGcJFhiN!VyAwdTZ>z_BOv7JlzBZOVE&AcOly8$uVq
zPCvkK@df*2pFYcE+xcjYfCVY$1uZ{KPnw=y(7>`!6E9`@XpnX&h~{eNBFhS!;Z(}X
z;9$m*h0TGZ7DDh{gK}p$b<Ak~u664c!~)|)lfvV&+OxFv`=^Z27laE#g_>>kMsf&a
zY(IAyi2J%2!f;o`%xMrFHCk@NDYK4nFW9%{lTeH2aJW#gH6jZW726Q_CaY~Q9L`qx
zeop){f9lL-WoQ0Z{WpA{n<%b`@Rg#&mM}ZS1RDT$T#mWX)}jWPdf;oiyx_9>yJu3i
zFKjT-gv5}dd36Rvq69z04Ma-i%lmq>xD@y@1LvIqj4Sv^H_#7h2Wen3f0XB%a2cNf
zO}`~2a}yZl2uv*|SWh0oZO2FK5U=w9+l`FU6oxErLB%%Bb`Ok;_EPY=jk*=PCQS8(
zQHBfm<Bb4Y+)XM^F3%A4+n9v8<Ab~W-B`4b*C%8~_pL}JewdG0!B3m1UAGX3#bUv!
zGO2gT%G}fqXIQk<Jn?9R*J|J4+eBN2@e~jB4Tg)b2m^Bp{&1NgC9DdqihMXKjy1L=
zN;G}bx^Vp_pi>2heX_S@A*qkw22IKZ11Fe!>$<Q7I45TnDCxMlxj!)g2R-7bJpCPn
z{LbJWy(b+3d7|aInX`ea*~s}iY01VUBH})qh8mzEiOrojJzS52culaXhcmMOlD+RZ
z!Q1)dQwy1c%yTBq6_`-O*v|0dk)k&Nq#EU+A4T>*39a2mr3RJE=WQB{$tKMq?=fhT
zL^K7?l#363qqBR`_e(>m|Ix{(nx}_bf|P5T*0E9OF|fw3u`%~!<_%dAe$7RO8|Y%v
zs*M+IE-9$wt2|`Vdu(TnL&#|{QPy~zBhyRG@uLMzyWI5Wzp5;s%*Io6hc?MKrQ(E}
zrl>r7tK9BcfjxD&j|&#<#miEK!;J}c!gr+1lEL$+{7nKAvPO;8UhqPEGi<4KH9xEp
zHnlOH=i$;GkC)@;T!7w^0l{CA_@z3VP`M+{hT#&4G+@N=H>xuPKveR!-P;}_J<H>`
z>(%yZ;Sk<~fYrV@dMXS|TRH;_A7lBm<5sK-s~QA~(9*7+RpMV6|D3V)UGDuDO<CIa
z-S)xV-ZlNUVTuAQ4M>I=+4IU-2mYG+NbQ84fSw3Pau(@S4OKVc3B}BN?XX*0P?i(#
zmmyXwy-V<WDnFh4SzA`bkAfn)d3XdCzB3zj_#WRTPX4%na-0b%Nszxi1wApaSqu2Q
zHu#Z~J)1>AaABO8W?cNF)pxP&ET{d8b{uE1p<K^iuJ^NFxFIH9#6P4*%$n~KCK?jU
ztWQ<y6Ln}=m8>5-B1Wg5R;WwHp}$PDWcsl@L=xdd&N9ZciNVn;py;~qEAp(c1!<;F
z**oG2L{3DsO5b*hFC+x8e*^}!W2VCBAw=fnQOLq6JM=Epc{0Z2_bTC<;b0W^Q#=_V
z$h2kep00;Df!W08H`_wYhsw44Bm;`8Jm1L9gn%B~h}e#Ly|aQK_BV_;oX@C7%8Wz!
zBX-vgmnH3F-zAgEgBRc7z>l?tYzf<RaLRTN?OzUC2Pbr~@>l;{ol5-VJ0pX2=|HWO
zU!%T?=r%Jm%Z%`6o2JVrbTRD(@wpVz5qk5QuP_S(WR<q>dxRpRe-Lq%{IWyCe@eo~
zb<+pgVikE~ISC&XSB3<22$L4sQ{!ApVnph2;7g1&wUth>#^gQNXfOBc?eZ$rJ8wEm
zZ$Fv-)nzxXEsZvIx);~ED_R*RKhgO0W6V#8C0DJvZFr8YJYBiF%F%0M|4#GL*2cJS
zo+<MQf-Zj9ixYbt8$nnly;DqMM8Vt9KNW8RMwpvi`SKeuI%B8LCQ9@P%p5noa5fL(
zZE#jvCOO54y0jj%Rq((LZ>souD!ZqY?GAoA7Lz1P_*KszpwaOd_F(c<LA!98xL*ps
zi!K*K)BfnidsVB4_89{?`u+PmT|_j#tfcvh!qSv!o+Ja@#i^r{g(d?W4{=FRS{2y!
ztwikGb`g-)z_lr?3(uyYL3yXU0p-vaJ=pl+)_41dD-7`n=QS}R^;7u{V$vGb%Ppp=
zSpF<AEb6i^Fki%_N%&KD?<YLiZ+#vX(M8SkqLzs5rG(pEt2puRb0?^+8R?dH21^v8
zTwz+UTwen!m=;)nlhPkS|J8+JWI%eWp;u8C^xAp&ADkSpK~UX_W+97VyOuT0_DBYG
z`(FyBjxOKN+cP)ec}lRyI3=;ObiqN!axUjH@S@izrHhrPlQkM&$<%w#$WL(fE^7{h
zLNcIx;KgegCqtJ%OqSqo&Wg*-KUa-|$@lk4Q!ajEpr}z!TkNE1)2ZFJ8S-aHaI2X3
z)kxOz`$V5NB$(Ce!N`kydAiLW#1;NB!_uQNzC7?2)7I|B<7)TARvI$>r%TF(&3Og7
zOx)pl7NfoBn+21nDQ5>uhoq=M85DUR5nCQ?%str%YflCpzY@oHt55q*;rE^;ay<&L
zGD%x{AaI$<dZAnsp}+IB_3ewTDuax%&z4`Bo`L2{_-EqZKTIG*greE(j;G<ukQ~$W
z7FEl;aucJ5lk)|Jvj!9i275HHo;{v-Uctca!JRmqk5GT4K!nG}99aIK8-46=FMzEY
zL$RkcZ8L&U(T^aHZ(|wZ;QoNH{-aQK+1b`!s&4}<yp)@uGk)eH9&Z(0JLJ6e$vVP8
z$6zaE!hK;zuI0f@E8)?PkM`_&asHmH7yr8R2DULhx6$xHtMc)BEQf6;8`J8uI(M`{
z^T|C-q6OO5V;(+N!5`9<y>g%aZytS}fKQXAeN7y(wP(xszJQ&P(gzsmJB^yPu+o6c
z#DI;6&UF@WVBOUi3^+b2ajg%$#dZ4L_)QN!GpuZ5Fn2y%)f_FNmleB|>!EQGi7szh
z^?<q4H-yzt{H@)t?TE0~Z>JyW`NHXn#xlm}ga#M5_janIE9HO(T%`8U{Rmt8c+!r4
zCTX;9t6Z^uYnKLwAuN5!dUtf%9oWH#pG7*UU>Ggidn;4F%T6bGu^rtpvgYYvJ!}Fg
zWp+t9Cv}3t3Ora@jE(M(T_$b3j;kkC3Z?il5Bi0z9pj1!Wlf%%*c|O3Cg0NNdO3vP
z9GD;4Bh`x{HJeTG+=-Wm8#SnB*5Wixr^cb;++%NW((AA_?C$NvDe#tCmExbFsv<53
zd$`EkSND2l%S4ur?Ei)+Pir;N4ydNduJmjEe^<Y_D(ml*%5#7F;K3n!k6E>kkawwm
zPtvnH=8ju(^jtjrGlcgcm7>{8=@abACJzc`K(AR)OR8I<7CT42!q;plh2iObS-N%c
zu|*()`+!UES)xc-Mwc14eG<E8!&~_NJZbSyzhL5`ICcHJ$odHmPNPs=51l8C&!FVZ
zUT2H=@Z;lvbTRJ$6WzEuQY$okFY8Nb==qdDF<~oCh*z{V1o1RL!4;F1^wE#h;fOM>
zfV=DyJe@yQF!<EY(y8O=$<|sIoJ%`iKu7>2-Y89*{l^&y8Aghr0jzTR56An`_mVp^
zR*VjOmzY_7B%BI;NuC&O>%#X&<Lul*<`fRG4fgVdIi{1+7LV4)>P+cF!Kqq7R9;r0
zCC2<uID{UAsHV=wLD|Cn&L&bxr=)8y7wm?+O^z~~aOCk`k{=TsH?RL+BH^oK>atHx
zPEIc=#gW0=YGpEJ(lSq7;v7%egFsIVGzlv!p#ekpW#A6mxwTjDhimW7IH%*Rantx?
zv8x1sk+?4-<al77u4AGLb-rWPxAWt5Vrosbd^3cL^SIP1t@kY9w%yPzhIpr+RUW5Y
z+Cry-W_>GM<!AXs{OjO_p8?nwB7GkD@cTdRvLWyQfsc@%hy{-Di&v<a6Yu95ZS~_V
z$?RCVp|<8v?nr|Vvr;3IzKq2s^?tSb?ln^q8Yo3+`({h3FVlIBm44ajQL&WQW8eZt
zwYsR3P9M?)-IvK0rl{K2Ci3wcT?*x%V4nYas)K$y8|d)3d_jo6wjCb%Wa-rXT6kLo
zM3&sWZIQ<__f-I_{NDoLkI~+id$*dw4?rLSUZeng`2Qhp_Z$TRgQAY&^1aC|&24Yg
z($0D9MP}B?CoPHx(##;FC`XK&go>sweR5K{Je#v4#ZQ30osSyJkOA)9XxS)Y=SzX%
z<QKZds+U|L&yE-#N8x7#x8LDaipj9olzq2!VmDH^2v)DeENi^i!VhtlAEdXiJ(n9l
z1#GTOk+ENUGp-_Kq3I&lLt&c={#0WqU)BVZ%9<Z@k^S1{YmGal$aPHkHCx7M?(Z0b
zB@bc(^(6ln(oZ7Ky|plDlbp8RA(BRB#U+`UHCjV#q5cHnqLQT+y?HuG`1xe#B1xie
ze=R}Uw?(4m2`V<)cJ7A5{5fM2vFVvtfxqEgEcyIf$n|k+K$dDCd|?W*jTlP*MC}js
z|De8_CDFW#78Qq#j&`Gd?P`INTn(<A(+^N<60KvoHpx{SyWel3A{aml@3Mmr6$Bmu
zfW#HkF>i0E%Ib~n++N(nr{Z5Yilz*UW5iD{6fz`Bi|y4ew+H=q4|_scbqFO!fpNPX
z)YE*lKFMO=!X9hZ4Yd$)LL;$n_M}q%@Fg)|;yh*TV<SK&q-~f#EL`ScdigC7Aq)Ys
z=k~1hHHLHeI2wN9uw`_mjuDn}k%{dwA`vp5^BB%kPAJ27E>wJg*>}DZLS6oxeD%r8
zp^G2A7+7jru<E9llsio^bMwOs<_l4Y{qtwJ-EGmf)VJ`N<9lsuJ@@iiWw?reJBp9W
zWi;Z1{N_pcCpuVs_LfWYR*PueBM^C|5)di{nNL1Q)k5(x1#wxvWIsdr4h1syKa-9k
zM@C{Yq*ocPpr$bHE^MFo$n3N7dr}+_G{C)MP=i8)<mNjWM7W@qV+BD!DoWnmqcAV=
zr64MZbz33>WJlb_K2@A&2EFpPaTM2>B!i8y?)?A>3(-yM(<lqwVmdkZLR=ZXB@C;a
z-og~1-f{@Dk*(c*?t;Vu3b#_taP;vC$pEXtG-?<MyVJeV1PY&~7VF26K@lc)ZnKSR
z8M+zbMK%cn>jv=iw)d>*FyN>M8mIJpLla+``j`RD?o0y<9X<ztMW8S-bH_SzmM-L0
z#HsBH$-@E1D#U4_wkI;|*sUVhuR0(@yz4qr*~kvI+xlouN0)f`3y<qMHj8F5#n6;G
zNTsegm$uTeSbmy#@rU_Hce{#zTp>1G0*jVjNI-6}`llN5q%b5HIX)%IfvQO|c`iS5
z<zQTnyAI62(s!{)l=AkKIrdP|Wmq+i)?>|xurG5r@8AZ;{>@pijpF^X#g!34<}8{B
z8c^ABkx~5}&z9TBoCTEXDrYeh7byp^041&lse*nJAkS<lEVuAakH}zI6`|3CEEil!
z`x{<_V%f*fe%(u0dA(28-#LU?ox1Y6q~zFh!OitcKTBqfRff$7+0vs(zoAqim;5ia
zg?~JpkG@!`?EPt5JTgVYPl$Ol)=bt{qOZzdX2H}So-$W|@3YZ)LE=K6PIt7iW-^oe
z<p=}F-=-H99x@GPY;DUez`Q7&yb$%5h8@XU2?hmKr5Ri`UtZY=@!_nv-+jlB<!?b4
zHRg0r@M4s%G(*@tTo@TnE~#2(0IyHd*`PNMLb}rw6c!QnNXmihpho971iNxmVeeEp
zy5f15m$qrFf818Ql?3fev0L~R{=Y#^DWUtc)&@>GHU0Zjb;7eb;IPHdtqv4038z>j
zN@f?nYb9Y)y?C8tXXt7#zpR08dBPQY$BmnV8gqerrgvl)v2QJ34I=!*tqJz_rAt=T
z51Efrml3IF+4{<%c+W8+lRcpx=_S&|zdl53&wYp_TWFG!E)T=Gm2YyLn1Kk%47d>S
z*-*A<;Skm@I8m8?gC94M@}CTl*d2%yqvd)Wb`9^2-lUKLLDhU0rXCG6U)x#jhUOO;
zycO=U<d1pE6?MaUKkhD9H#0?^P;Bt?bqW5Xoaea1yMk@|mkD9D)-h~rrE)pqva-Kc
z7iJ%S>L>`il}GW|nE1zpX*k4&lG5O|V%$`XKD!>dDVw8W?n4Dm(&#%tinx<*qtJo8
z*Q5QbDiWpBwds4y>r_;FzvAAUN1VzRnQ-EZS(9hR?E(}7KXZVR$Zk=QdGJz%@<P~4
zBSah8C+k5Wma-S^+kF{E2hUS4m(=HrD5a`u;B7W_!`=HR!;a#DGKjB63WO7H#Y;zf
z(&5<qGqqR@YF|D{PIZCAK=NyM1fk3_4~8?>qc`Eh*w~J%6jtQ1o}AV(BP7otm1~_=
zDmja3@XM-iBX3K3ZE6Hp2T0P>Z%ZGi>G&+iQl>5VCuX(vm9u2*;w@yXH4>B9`o{v(
zc~TzD-&nX3NRZn~k;`K^@|8-BvJhmX$}0~TU-bGC5o%<6GQ*Tlle@)l;lETWmRQyq
z?t03Mzp|sI6a7%!^I%?m?)|yYVdzU0z{FPM_DcY99&nex<c4d>7Hw~0Ezv>FiS<JI
zpf=w;h$@}p^5Wsbb6Xpg#rt|K$aAx+sEkap4maEr>WLpF+RzFjPvt4iT)q1JEYqEI
zm6C>fm0T-zn)u$D=A!Fpegp>x-wU{TuCu|K_So*#MDIvdwZnyS5`L`qK4BEKXAURl
z(<AECeRJV4e?F;_=ElG04sxBTirUO`6e&jG8;7Qk_}3Z;3|uiQtXROtJ10S?ADEyU
zjhoKilr-#~a=*$7p|^ymp4a`l$`uaa*miCltL<c48S%KUH%woebQPXle#27WUi(NP
zTNY1NPy?u9#&|bA+Qqcbmw7E~*f8r3_GO<l*$tlO%^7`g+;9`l*IvRENMb=A4mRjl
z1=^<YtGtoKdb8qTY|{F#5y&uGWG<QB3ld$IbZwmoXUtCOiM^E)m0HBkj!1@?eroQQ
z`_Cg+9hnK+5Eeq1sF;tc6;pv!mR^^mUh)eIPi#E(f61P5XAtQP8`oASbI`MP6+QX(
z5T&bPTB2A_YS{^AbjNz}oUyp&F>a^s^hacJXi=}515Pg%g7sk2a_>DtrZn;Q#kMO5
zJ~ETrx2&iX1X7GwbN;+N`R$4fl(k3uyh1A=&==ue57hk9biA^c>zPh&oF$bogkaGY
zSwAggJx8bcpqwVQd`LY5{H4XS9R2n+94PEpN@lWR^a)#dT$(U_Jk&h%Zq~OmJK%P<
z{9qM(f7?=#OZySmntzIWQ~KB!)56OVrd|W7yYW%KaD>r+MxR_7m-hsy_NOE>088^R
zBfQAEKkG&8Hv(jWl1Y3q*eYZ8zR}cXb0&Rs(?_b6zMT?dJCJOe=Z__u5j&Kv@RU9f
zAPn=)e4cf}e@60;*hR&OigCg^9vtK(P0qT|Jh5%Fo;qg&skcNEub=v*wN5b~ne{k~
zhs&<rrMZWx20R!vT=$t_J?5hAlftJ(feTzv)7TUPMTpR!gqpCkp?>>}Ax!o8gn%(L
z14|%#;2pyqbseD)@DMR}m%)WtxtCq8Vx^*e-B^NS@^6lKAxrig1j)T$^L0;~ej)e=
z`W>sUoC{#T#<7J6e~38Gef-3y9?^SgK2&hQ(tfF}NYBk{=~k`?gpWNjE8<K-#AT(J
z6h6N1!7S7N?VY*Txas1Jw4+#;5d*o(R}tnV$3D<S1!T?f4D~8?Qh1%c$Ez%iuBMZw
zoT*C6dPpaxKRIxsATSgyXT`6CtUd6G?<W~-x($CD)CbWqsokG?Tfw;g?=_))wKFi?
z(v|SjRyF|?RLqbh1x-*F^dJD;GhFp$&T?;9)y&_$@s#;#ehN{^e{077!ww!O>a=wx
z&2v`r%aF0BdeK17VaEZKn&=IDu*j*C#Y^vMAMMdI>E)|QoL-LnY%zSLJT{SOKkQKV
zNaK?3^k^fFS^8tdv2mfuYu(Fs<Knx|7hVQPek(ZJkN*j=;#lhWhO@wIWNeAS7EV@i
z@L@Df2kOVtC9X&&t{(nPd3mMPu9$`N)YN0vsbk~MZmH0~j1kSfl_On-J*CYW;nR+p
zlMi#3BA1dPq?J8q$-;Mn$L#%buMesDhQRJyWWJH%ID|6T`Yv+H_p_Xv^=lA~^0<!a
z+19FS2Y5O2nv{4s)eR@m-B0DnoNjRN&i;jsVx_A5s&jC>Jk`k|KWb0|*<Fx*T=WCk
z#{+R)`?;K+P%Pp@D_XY7WU^4NT8~PNluBDW<>ix}%4&Hj_F#8Z#l`$}or!X5pM+k}
zhk4m$`oLBm5Iytg%Lv)BUNwfeU#BSxDZ~{+!bQcF3@zPw@1>ZoHIwbGd^B35<74xO
z4^ly^J4cIZXx%j1mvCj89`d0E@!bUPG!v!F!35oY?~dLGp-~eYdyMjOY+f8?jHsKm
zfwD&2oOjQ_N#RAnKP4il3+#a+<%}-l6x*5P2fd?Ag#Di--X*5CK7pP4GNw*RfJTBg
zK%I>RJ&rAA=~n@2M40&nzOWR91rZA#v=W;z<?flYdst$NE|qvi?Hl@RrHrF!kcE@P
z=BT(E)f|b%eXmnBu*81N3Per;YWeCSa<|jg8J?V<ITqv9FBmyXH0r7;S03mxi*+b`
z%u?t`+>eoWvEV_)Bo;bX{)J=97DWNoI!nYZKfJ4&ckZob*8B5WxOmC8DUj~-8ZnHv
zp}{>hpWx}$QmJ`a&T3nSw;ju<F3<cflrg>X)SvyO*ZFFv%I+t8`XQrkKcY>U&cL)g
z7R+s(Dd%kX5ogeXbPd9;g%ZyX{X=r43ej{F&^Ytkn59c0JVX^BjbbTN;#P7#1-H1U
zpOi<|IJX7=BMc3kV!X!yv+2ryn9N;l|0NH>C07#6>>%=mo#jKU=@Mc2!ApIu0b(f@
zGH7;gDA7q#ij{T#n#zd2-9Vf@$e7&rkvRJhXZFxXA_=8m2=q7%fKnpu&(kO5sF9e<
z7qb<4ft%V{)^)_Khc?vvC^l9)^%5fD$0XO@^I@ZJlMF~0ZJ3F1%6o7xxzh-Jb=5U0
zH|mI~5236DZobIxk&DGbxaYzr4*0{Mq(dFOu^tQf-cUb9E3!P1B3;T;u^4&B-jKL2
zAVf8_6^2laGkP9PQSqxEgqI)JKK#HbIcSWU3S|^4eNeu&VZLxt!Vbq=Kj?l%;#APS
zk?7nSx&(=_7I|evF8i+6J{wog(#h{`0=eDd@~t9P&x~)cc1*UDMza*1lTztIBCURY
z(PkAp&A~D5&*u|v=aC)#-6okUNsP}$)78kC-;VD`S|6a;WKHhrPYU%Q+^cRpS?+%)
zTaY!@I`HOU(e#A1ZxWY|YO0BV%-|@Y{5eHje&qkf-djdx_4VzdiYO=`p@7l?ijvaO
z-6f!ODBayD4bmYUf~0hJDIncSmozuseV@5NpXdL)`#ta2XMfz|d~w`^;aY31x#s-k
zbzQUgs4hmk7W;y>b_NBD;(=`*XwuW@^R$$Uy4sfDuS8pgy7g1!eV)C*<%zUUIcs4$
zvS|ypYEMPd4UoxqP9~#Z<`$oJ(6O_~4e^*Sj3$%L(_?rO>~5eJ4I2x15aNn^z%^oG
zpBXm^Iw!O#k{Xnaw3_%#n%W=rN;(?g`FeE&k4BEhB!C(+YD&!FE7!d>PmN_AOl|ML
zu^Q~@kVZQnq09-iRXa0|%5xg)871;SJy-qTU*wt0_MK|-hhJ5coEU5#3#GyB*(~YH
z`tXP+_B&jtBykbms{Jy4&5<)vWEZ`+Oo6k+S|Egn-*L%hNi)V};CBJm;`%maJ!ndq
z{IUCum_%YEJ0N=3nRMOidjGbwUAy!YPau(vH|f+b!Ibx{V6nrY{SwF2$N6(w{rH(Z
z#=`!S1hc^W#knIVq-8hhK5JuGRcT0=F;PSRXmq{7Gih~V)#BNhS;cah9NMHUlP7OO
zsp<YUiVA*s7bve1Fb_)b?d<u(RfI|Acv7G~GKi;vJqmeB!`Bpvc&Sv*N7P^wR4jFb
z%X7ItF84)RsMMzmYC803!o%lNR+Ma8uDjKcDG~$WvnXfrj;z&p|Bz-0vPOP?iv#$%
zZYgK~=F_3gS;q^nNZzalGsjf)fqfb?*VvqIh*>&)_r7R(%ifxf1{K1AH?o!<dZztI
z7t*qrEj#+ePm;`dc#g*sWO~Dc?gmP+i%7v<xh_!bHcO<4d9hH4gEIaCGScZw%l7gI
zI-slGW6%CrVS?bMcVvL@#z4UNx1;C;C-%8~OUcF0K)F8&(9@0HH^?`C?<acTd0_N2
zpE6f54@Ei}scux+W_Kg1kWrx{`=-2=>kx0B^Tn!6!q;1%103=y_3O#h`+PeBg^ax7
znK*AMO&TClEjHDo3Zo=)o?FVPz9$8yZH;!W-tHV@gjBX303xKQtG8=}n~@Hy3BLsD
zK#4-by`GngEm=doJiR7D=~_3IRR+5mIWA8pbh0fDdw(kJ&JWIbxpR!X%Oyfv1j7oO
ztDixoO*Ev2(mmz!g~qB3(lYh~<2zCW&V8uLue7T%X<zL~&A-lmo_f@O-^ys5zFGTQ
z>pR_4t*`yRTW(!QR^q;pZz!7_)6&7A|D=~>*+MW*te!XAH|_ks0aMhwVy;M*-v1+i
z*(>gLTEQ-J>TYwjKqi)m3+IW;ElE4~F{4IMy;HrAgn+c}53b60{xc3C<YBR(?#iIM
zJxPslSO5NJReeRC8m-q+1=cyqUgI6~2k3oAcvnb~dR%UE_S4}>H@)B=FLE1H$h>NU
zS>4y-<v{4Sn5El@wCpi<8+&j1R2&o?I2`JFC*0ug>*L6Bnp|d&jTZ`{;XQ?AqzD1W
z!Ssk&JK7Rm0E@B<@HgS--04UFGc{Z5)7Y6#v5ZJ;;7jy5EuiZTOUxJPe9YpcbA{{H
zMhP(yx$ix48&c&o9r}SN57l2=VM3(}h_?k<L)M}eX=c7*iLNkbp<ja57oA9Q)QQ4j
zf=oAk&O|w9<-*~t>L8FR_PgpfRPW(bUKXrAItWHcnl+04*l$YpM$$qe^1WV~(=z^u
zX#Rt*@!UMNwt5`jaV8U=nx^SxJDl$pr{!SSA~+98#3X2!8C0NQ(`L8xcO}TUJb(Nk
zCU&NlYrM@wHZ_N+9KBRi`8mkvBjhq9I%`r`<KA4V^qRPO+Bg=KkBtk=pt}F<jB)gs
zrAAuP+y>QOOUaqC?3wddW0m%ejxgu((!Fj)&=xal(UBfN<veYY-x$$8mxF*`7fXIs
z(TbV}H8peHd~qX-+PIHB_%#+Yg$1NskX;{i1h_jTwt1L^YLHVTIY*^Ge4*7MMBH%d
zQ^&<L)k1*%XvMZ5PF=%!*43KJ_)Z*=OgUPz-Kq$c?j?t&#Dtqv`ch-uqr>z1k-E3(
zV|Yy3(p&oMh%mr5xR~{}HcFs=;HN-K)>x=UM>owvGXhrW`ns!Pc&h**LnTi2vG23N
z8W90`q4^JO_bzHpd<K_FK@b_`NBh{+Z6xTGVN42<i8Q02L1NwRboAhHgcBRa^0P4i
zXE?qe*Z0ZI=Hn+|PsY|TM<RN(?Z%BKT$-inhKxZWY3sT=@S8Pl4}9hE;V&_|y#Y`@
zXXDDWcRPCB`o<JXvDgnMz3Ggn@s2{TJiH_Gfl|lD8S5vIgt1t2W5<OyXxC789rLN!
za7?&l35|TUspX@|iAkZ|IAsoxK#F+@<0#coex8;2>#p9+(0b~)dy>47u(r4hMBqSI
zQ~@CCb3T%%faLJbOeH5Lc|Cjv_bV4Tw!uY$7anj4>oYCUKjO}LouBuHyQIz$<8h(Z
zpGr*2@@o&lD%j^gjgL|nbtQzmu1yXzQN}$ASkiZ=4(B^U&5*hC64*|y_rf%ZH(>&9
zSu0*`muP;mJf%G6BTNAT&eAW@8B!9hy)ac@slHjkUpjp)M=Z@QR4SOw%OCiWEQG66
zp<tB1^p%0QqpLiZ+FjS!c=e{#NCPR4LUbD2!I?DUTSJn3x3Mbgo!;WeDrLW3sA=BF
z&?wdRS|SbeA0hmfuyOjNU{S~p=1a&>bRsIhxJ0iQTN$`Z+3R)LFI4y%v~w_1<H-5D
z80(*Pg7TVCfnvQ`QkwFUJNA7pdj_D4Z*6k&Y3e>jQeGQ{YhcHV5Z-Slgol!T)XwXf
zGD;?hsi%5_UPDfILM=f{4^dE9ji+OM;Om6<B=_c5g0myNO4-td?4;!~j#gymL{PRM
zjaPb9^C~{2YN;o;a8_aL&|SYdV1S<#LKBE0YD2hIUXp3VM5W87Tj(ukZ;}n%e|~+t
zdkQP;x*KdH(HNe@`94xJ$N~|I(!#(^>K0%iJR?i_NMPeOtFu`LT0H|alx5z%H{W=J
zf+JiP`RCS`I7ROVqTYH%4xq-Nyd)Arm^$GOAt}h>vz-sa(<ZRjBpBxIfrR66E5K#>
zG3o<ELqy~isNQ?}L%q^@!|M&9rBOr=B}@yPui8I}HXI_G0G!le=q0X#&pq<}jYX~2
zKs=A85TIvZCR2Jolp;wLKV5&Ojob15ZC89FiUdix`ugYP>FP!EYG&K2Vu98NKSO%E
zzrNHS&U#i~n@Lw^yZ)(pdTXLo(@X;2Y}&u!qMTOlY@u7MJo;{EPc%T}Gjv||i<R$H
z>)EVa9t$;}5;s;0J_Dx}7*PHIT|M0BqK1wO(JaO8BN-Qm`lwtR(b1Y-L>2iy&3;%S
z!2!XXpV{L<{n4jOXP)=S`70SMrB^un>wYIkTWw~*>vuNnJ-h?ES~@8^2u60TV(+Ce
zIeSE}PjD>QO{&wRFd}3q0HmPlnQjC2LJN;Nva^kz=H4Ay1E{h+cKU6s;>QUs({zZE
zO~ON(XzSwjtqr*UuOS*ckYA`;bbSsFG)JK=04d!%LQtKS7rsYJmV9(4U{pP}-bxu4
z`1-3LjH(lq9J}ad3YZ_0;`E*NQmd@t@YZ0zK6HpkLB$$q`DQV}B=phPtv(x5^!R7#
z<r*%+UH6m7X;7!O!?Mt-Hmw&S!E_D<uwV<CT&45fS`{743_q|8%3h~BRa5(kFcu<H
zg!P+>#Pq5gR_K|y^(eD-ue;kVb-nuDSS9okn~IV(<t#|q`QB6-z1j?j7u+}(e*xe2
zZLV7xVmg2VI4RqO?@tWTdjP!`@lEPB3qu?+xi5DSe#17-3k?Qi;ZMQFOYypMf3W}+
z?P10<FVT?&hQ3kAkzmGS{+{lb%5X{&Z}a<CN~nJHAy0|SI$~Xt{ottIFQP`hEnkYU
za^&?B-v-N#hpxw2t|JWVdkIj<x@U`ShFc1!?@}7Cj7_$NJ0fnHzH+x?A!E0VtW;9(
zV?S$S>Bw8trJi6$`QsypT`jhH-6?_|wikHJ8^6P3?!;2#?qG<nRFKxxw}WPG*fT;I
zlyMK<w5BJdFYrZ|s-khX``2j+&BVKG!@JlnQ`DVxn%D$-QV7kBpDn99`krt_jLuFi
zbB6;n(QSghzk=lIIdOw+Btp;awWYAZK+pr?kTcTf;$72z`i)i0Ra~z%5CX7M;MCvG
zBs;@1nIn4ef0=}zjn{>JDGVW`OjLb&fgi`X*`-!VC675pqkZ`xbCK0cu&nrH1TU$Y
znnY*dpw9p@xf*Yp_%|r;u0nYU(F1rr?s6W_dfhf7i^C)F5<IU1Xi=NZ1>`bYiF>Xu
z!2EvHBm63u(|zzLYk?Wb-%cYuftR!_Ulfrj;isbA)-grZ?YUc9`%#o4mz8Z%6M%b3
zDjVE$giNmWJzN1aLft{%X-=kbkP6ws^F!(Dq~zpeI_J8YMVWNz(TdqsKUAJ@M69(v
zx@mYyoz+OKGEtSIEJ>=T9|#AdJ_Rb^tIBhXuzvFb-Ky?>G^y}HcfWg-yLc0+Kn}DL
zDc+7<ihbrM>H2%8Ue*-<L_<;wlI<D%J6_{r7bZEU2Z$0pDlh0J8Ga^qiFJkYlFBiC
z1YVn%{2663u;W5N1z+_GLbfk%3bi7S4d3WmF1%8jsPXsPJ=YX{+HiR}SnLd002<Tx
zZ`w&eKI-LW+r1HDJ4<`8_#>kczc@O&;XB=@$OHmH&aJdKDjk5lT-ws^%hs*P&9>#o
z9;>#kMBR+8ek#HVT6=Df1~1Se5BU3L;H|yN74UwaW-%GJM?o3!%F96twi!#spLBQD
zu|aPVHBvX57a`!e_7jAFyze6b9yVCsab$PZOS)gP4?tj`^zxhU9UvJD*4P?XjQZbF
z6S-=0Kf9HZ5Rt`8+UY0+$cSMTO!9_5$LDUN$4rk)vYa2r#3304M2WqDk%U>yZ+MRI
zk;q#3mR*4e0X+$R8l4O<+t*O<<{?n&o<b&%?t_a7tHGnIlM|V?G(fl9wb$<97~SP$
zMd2fOza#{UlY_87Qd`1ozgzdiQ)2HL8!QElY2$Vd>oZuTNA|fD>1p+|#*}+=k9N~M
z4_;>-OCK<wY0Sa2)S)A8sOjhY@HdHCg7xP;8k^ZicNK7(#UE+Mq<F*pL-34bVCyk?
zT|=wN`-x@0DjYDyL54lsR`3a~^!-$%MW^=R_rzW6ia4=bzP*hd$c1HsP>6f127kd;
z!nbl#;I@r0fQlszj%G@joHB|!VLUrzxsGz5>JtRm-U(ovZ@|z^d&+bcqCNjxnQCE?
zgW)#8tsj~+B8f^g292eS<{%(gy2KKq4q^eBEm_BDeQ;dYJr3b#u+i;^DUjaQwGgRZ
zQ&!l4ElZnUTFO>JAx}$E^q$cA9`{Af)}6|5_;Q%DHl1!`(xPoBGvwnB+mI+lFx`6I
z59{tD1b8y0-v$v}BgjXOM=JMG5$-~L?KxWi+?ycTToERr-zgs31&#lO;bHCcBSu10
zdAe&{>825LCud#lYDRC#VHTvYEt_L!BlJS9Of<T<$h^<3n#Q!M<E7=)?4exYSTS3h
z_=@UO?|0cAX?g%*l|M?ZtdR)TW~e-B*Ej@i@Lr9mvC6!54f{VZB&mBHNLdHnTDjZ?
z^^F@6OQuH^7xALG#`y8y-Bk{2IbC~TOGnLnr(FP1eLDdSTfc>$WM_JBPq%F^C7!j*
z-05VuN<-dftO`PP6Oo*NJ%=Zft9bq*R5STRFSM;3=4%)BFbUH;>XT+cbSf8P;Xx@K
zw^)JW%D34{U>Bs<U%}T(7d(@f+X0pv!svDsvlg&aQO_d{a9O=|Nws`d=B=^3(@9bc
zFxbsZMWBObTB4{!7m3vK2}oket+Db<uV>(^yx~pbk61?t;8XvR5cCjN)4iZ<(@{Ev
z#hhnLIr6<gC7vZB*+2_FB9`(12=r_Y_Udtw$=5EId>XVNW*%TdQULVD&YmhKpj~uR
zeY;Dp7otHjlzcIo$2bLrX2ud@9jKe!8VWSZk&8kJ7W*~{t@=(<Oq$CTi>Bw<6F(Uc
z?$(}5nS)C8Ii{$XloZ;^lM^YAl*S=J%?V$hwUt#1a>P2RCK&pxmQ-KGZ5f`H<vK(x
zcD{3m-&zpxM=#r(n-k^egGF=gOlR&<1I4G%=jKF*98V{g=ZMS}4{lh2_ECoW_a~XF
z&J^}BYqktR_av4J9!?<$$P-U<E`6ka@w+ti0PL|;b6>w-6Xm9rlY=_3C)qzDal2M&
zV0e73uDJE@h}LsnrS$=fFgjPI+2|8_KV8wY%N&TD(S}nlM(lD(G~TR})L(Lx;<|eo
zxEDP888pLp&pHowp=iloiaqIB%#>wAoK5a4t=-w`h|4yuy{W0lnz*P#6#{zy%jvc8
z(nU{=;B<!$Ej?#Uk*3s{R(=x98te|>Qrr1-#oO3z$kVy5!OuJ`K!U6j)6H-yda93w
z-xmu>chfW%{qW%QCrqty1}XC($_g9(E(<;=CqcEs$(_LN^05ldA<mw=^$nYG!%{})
z&cW~+m;8?L&%dA3K>iwETE_M<1?3~za8I*~aP{YD%Wg;2G7F&U#z>tk-6;F<({m#e
z6;N(4U_qf7yN%ULe|jQCr=G0+gq{_!c#1JR1b@vf0@?4S@$?Y*U1*WGm+WI)TV)_Q
zFId<9u|<Fcv!{+U5jaYkskZX(QiggPLV*QiEAf2*e|o?7Y0`$m!I^|PmrT66tsX{l
zZ%T#PC{Z`TSC|AVGoDey7W|v8m5UeIJkt2@XiQP1b(b2z2^1s;<SPdaX;qxBWKJLN
zVTkf0K=oC~i5?SxmJsTlUN6Vx)I{qs<_(*8HLEVi=74uqNZ!T@1u-H(EH%Zhb#-v{
za8K&N9Cv62uhtN;DiFU;W?ddaax9lApnWQ?%e_5}l=9YCF-(3ag#Mea<xxFdiVR#B
zAnAVi6MXvw`DAPqH~I++HP-a{oJ<xT%f(z_>eP(QF_Dkl25&4qagvxcS&FL9ON~QO
zVHcSO!bmiyZ62AUn&k_u)+X8hf|aBF!@(-|bLHAN$$thMYr31UrsM=085>xdSf4rr
zaD|ks=@Dqs_I#gGLMAUGzSY~2SY|v>+5Q&Q3N}g=`H~W@UjnR&ib_0vMbYg#H^6eb
zlX)*+7(LOfBG>X`+Z}9SwvnVZOl&j)>(e>q_#pBy<R0!XBXt^QLV-BpQKT>A*21vl
z&eGSO;pBvg_t^vVRkK4H|LuCaw<M{{_P-^;7Vkael3r#y)S<&wcQ5ELV@yB8U!vLw
z{n*cx={HRQfd2e5zJqq3_)d&;Gv-ZuBsr?@lJD=Gw?PJkYw2H$1448+imX0?EC?JF
zaxi&_fBan<{1YlWCw&Zced)6<qCTjUA^prGNwwv~VUz$zjm&R_xOeK&o3Ss1n>51)
z6kGL=J_%6i_tqzNJD=9}-mWyAe8QD%MD^)D54BrAjqzg-Z{7P@wIG~p0I7I8Zoxt!
z0kS{heS(*SVlU*#M_3ml8e{e$>=eZ0x^nLVJ}9Xp!Q8P!NGdg4t%f}z%wzZYCBS+?
zx{s)15Xvek&PPMmQ1|vD4jttj_Xv^+1Y;dW>sbgJxh2}uWTEZVyc7%Y*Qb@4Uq_-2
z96v#@=E~&Lc20-7(^Qo7xmF6ld~WkWMTWWJv8A&)%}LT$37v))pC|P=j|@Ys%UA3w
z)J9>AtOEyg%b;bt+f(;e@AvvcY_%0He%E&^QGYtc$R$I42Yfnv1^RKOH%f4IkAM|T
z*uRiw+c=*Ga6OecYNFFwRwkI>t6#mv(v<C!6^H}Wr1E$AdbIdg(x<8DS$XUr+Fr>H
z=z2{kst*scy6A;ma&{f${74x)MT82Ma*OS|Z1I8QVXt>uxp28tzVxi4u{|cU;Rpqg
zmFNsNP=1ZCjNEKI7J2~IdyUjboUTbq(NdO`36UD)tU$}u)-gQtvuMKVvGY?e;&#w;
zUJihPq$#$WB_2}%_cSqW1BOFN!J4C8K{bHNc1vTO;9R4U-f403amm8>EzcC6kKce#
zDYJ6Zde8See!?<B^1$C15bvE$%S{{J6=tnoX+^*xZX%B+dmJm>HHBw=O)z}vhBVnp
zyyAJo+s*oydjM*&bjbK^yFX1?l*eg9Vh=&eV8BroMzpLG$9m^J;=)A?cO(>S=fQ2Q
zi)!xe+SUt=I3}j;Rm$GVMD*D?b?oEYNWVP!QLV+7(GKDfK|Mh<5SnO!$cB3FVtJ?`
z-14Z=+$kSDtG9L+wF}vMtDqr2&zzNgb?v6S#UG1gIONrGu7P%{u(g>4hrlyZYL?<v
zeR~sbW(WGA>d&DT4&>;^4~!{mE4FZwV%NNCY#U90@^q~Evn=)(^~?F2#ji3t2vSXr
zh^a={sn^}2D0?TWmgokMvOXCR;&hvYCt!A(em7U`PPh|~O<I_CF>(AuVXXYXoJ`M>
zL9Zp<dJONx`HW{b>yTNfd!g~o>cX_qcYyb{lN^0C^5%J}`QG~EZYAcEH`%fUyz^&c
z4UvMl?+XCxX-rt8&{;|;iysMFQObcy-X;UVOTw(T`(cTFAGb1S|2`04iq0<THWt!u
zS}Io!HU&N2S#g~@-3z<1I=h6ZbJjo^x6@B4N-N9?0VSXi`FuB#l?Txzfo{PM&Grh(
z)06;a)?tXwEZ>T;u${_FaK&-ohfw|2pkuI}qlMu5oXJ>?rJu<}m3*fn6-7qZr_S>D
z-rFOWRbq!*6LgEY(adpoUKEpo7}1W}5YTwHi6QFGo?$ZAJt?sQa}jg`_i|lCtE~ds
z=_B)3U@m@DR=p^G@(wDtp(L|#iw5<4!aP%W^W5Uc30XJ(s277-)Sw?x)I51F{xBt{
zgF~BbF{>v|<i{%}sWrqTUDPnYSZkF0<!2=FHVUv6SVqL9?;uarWbdid+_U2k@#RIn
z`5W*1lgC$;r#mU{$gbk11u4L1gNul+9F~6PZX7ci65m0B#=1>b52Y~>GuEZbspO|=
zf?X$Jk8muL^4H^G)|34waop6U^(zUH_T?`3Jp_Z0JRuAOjl(VpeH*Ui&G;eKrb3<z
z!=Z1cg&I#ql2phfjK8)M+s;3Xyk9Jp()P@jyVdLpV?O<?p!(@2=X%Wsbt)MR=HBzd
z699f+oGnqF!5Rli0jFhau5h>QP*=?IXhZfp{bhrRyBH%T#5X$z+yU96V-7nHw5~wO
zq7E3=ZTPW8#lt*TaocK88iU)9rV){b6}6AqU?X6(vwB4B@9%#g`V=2;i$3F0`7rC2
zQg#U8sLYJUvw7lp!$Y}WQLs~%;!Kub4}XMr_U6~>PGl0wRV$ou4(YSyR50}@Xc);$
zRbDRBC8UG0FdI%E*%(&OQEkNr%jy?qQ)?h!ZpD=9Jjyd@i3&J|vrCpi*OP*kqV3ZB
zu!wCr-^6sO`xiy~z=4ryF;?q>Uu&+e@+rFT!z^>#nPV3U2nvCa9Q-{Jkn{jWxbgbK
z%2ZAb)EghT7XW%tcx1vadR4TIvHB5{+MNvwp7>j^B>TKE)e6ye9KqWhj3NTO-c@bS
zMejgO=7?sBQRFL3ha+%rb2FF>OTG3z(I0qd)wS7k=!RA#m>)t$YmQiR@Bt`99wORk
z+W_WAy+^$gn42U;-@{lED%||&={}p6XKjr(Fb;sZ!mhUFA5oJ@GbisOsOOE&D2xKI
zNYr0!^{qRDt08;ARn0E~^$K2kqPTL5z4*$$;i8XXeLu_OR6Dos=-lPxaEQ2P!b>Hj
zKvBN8?sEat#v7hM!WxnBB${N#6f^?&;ITcfvLK>YQ`BXZuo<SVVklVv4P~(zeY#H&
z>zCvEaz|m;$Q^Xkq1s}#ei(t+iwLd5R=2V}rLhW2KSzgbp~^9f&M(CKFCN|$S+85q
zkG^)Rk;m)#Fsa){kw|@?K#j5UeQaBKTg-4|U?C5yVt8z&lP9we-yfj!yXO!+Ie+$x
z416SEd(=eva#e;6Pkx{UqA~cI%FrGM7~BN13IN(W_Y(OzL_BgJyoxd-QUC#V;pn{?
z*K15?c&Q&^<6wT(8RrmR=Ueuc6vB!!MPRCJIj4X?h8iZA`+M@cisOH<^fo#x=Ltb1
zOG|Biv5mxu(_K0W$TXB8kL+j8O1A44m$Y506y{?)`GgEt8V3H=sj9k11a+z~3Ept0
z)rl1+Mv$hlpsulKumBzBHKY1`e0xN=*&h^fQBsoXWwffiUqa*GVq|L@$b_P{z(E(Z
z^#_~~*S2{pu`;{dRpe$a%I+!47kMZ24U()(LT!_}($@CRufDD3%A<P-Hn%nW-Soxp
zMnvjDE}ehylx${60igPf95@6rlG*dFS)BoeIe;1U1$@kEDIX0syl6BBUO}+bVKo~6
z)O`|4DK-(y5IsyFzN*C|#3+cZ+7Br=fV56f0vMpOg*x}d0%FsNs-f;7eogQFhDD{7
zXiyWmqPHWDiUJe%RAYqo<AG^|eEhF)?(ekp^+cB6RhKpz4lfeK1I_gHpX@9>AQo?H
zdAd|;7FrR`sPgj@sZd~hg%pSGAr(r7REn_NR~s>i9<e)UIwV;?+$9rZ2Xg5SFNxT0
zv_DOiaJ(N1EUHeNla@iiJ(mu@%8ZzNS)%>2wN^W!V&EX0W$<%PKxRECIhO@L=*^*l
zvfbVTDEazrIuwMKl}V({VEAeg7OL2heJMYxMb<Xr^>+q=*+lK(`;2k-FNgP@C59Cx
za!V|PvJa|-<t+WmSEXQ`wD5A-?Vu<Df>f)M)ulm?==mw%v{PEx2Zh+X$~1TANrKta
z(DO9C63Lh~1z|zm263JjuLkgFFS(&P^#-+zZxI9Z*)WGlskt>II^;~|ONc;unHsmW
z@f-3TqWq;IYVM~)OXgGdl1IcSipj*=6;R`8E!j04lPlYwv~m|5FyAh(uED4|#Zg@g
z6iZ)7lo#9gy&R)_)87wBPfN968l>5e3?lKUhcox@2I>w*T1)B$f_eq&IB<;Ixc~MT
z+#_iD{GVU`i@tnMd*AXta*H4I>Ml+j!3wHC=K{!gbZT`!jZq_wq>$<T+2k;Cbm!A#
zJ_O<Jk}SFwFsg&RS>=V7Ek=7FSRZW=n9^e#yt&d#b{pe>S`}`6r_+{10B&#Xu5W>`
zKlT;v=bSbuC_QD{AVFq;xjVRy4zK@Vd2}B><VrE4I!GWUj?N^Ld<CGaR*)mgu3XDy
zW~iEQ*gI)&t$Zvi04h*_*p;P;Fj&xA1|!~HNlaw&-_}pAkg1*&=vedCQ~i{P_x{D8
z&wnXQy!?UJ1+pNmSt9}Fwy<CMRx7D~OGfRRQ?(g79eJv-mRh&p0Sl&l&_`YNbiMwl
z>d;4p;Zu9@l7nBQn7^Gt0H}xX0`P!t-VRGn-W0n}{RVfErsl1$SzM}6WhXKXWRKl7
zu8Fj%Cl`?&5{tnidT|$NDe)6@c{c$j@Hx6V!?+6^_}+}p@Wt=HTu%-SO90GcFn!3-
z>O`H!YIw-?D-sK_A$KE){q*od9FWNsTrNvdw-{giP{0G7B<@}-<7Nnffx{Wlw^MCq
zfQ@i%O(90T!lN&t*1RO#&?f&q1Z$~0-RtA&k`*ERl>4M+N;pGYnGvb&|I5pI@HT;2
zP*KXJt<r}`-6ueVV%OxkP1jwK*RsV+sk_@jux~_16ZY<%pg0`Awb#j%I@4&e_ePoB
zJ|o?(fG!5jB>79v-?*l4D}MCteVzu;7xS#;o}>Bm*>>3GVjkV$B{BL-4mQ6c2Mckf
zzrp}Tz}bVUXbWCThIca!u5xt_I|TVLFXV-pRJ|W4Cf(a9AkH#t%TorPf&P|=z}2@4
zdkMZ6mT&R{fzM4~Sw4L91P!!wxSxR?`J?w|fhmxx-ZbOt+~0-J@crU(6UMKEDrX*z
z(OH|1UYCt1AJhAMq%7k+Yt08Hc0ldL#*96$*{gZOJ<wAqhysWV-wZbWNn8e9(V9dH
zX;Xk=%pw4FZ8og|Q@JuFOsMQVIc^i11M`2zkM5E=B6xBcsQH(6@c7(lor_UtE@&}g
z0ta6w?D^!)D`5+iWKL1)NmxKBA4xQ5WA~YjVg6gXCHhrL5FWGm>ET8~>jy<m*S7@?
zr)z4#AMGz%!u?(J!25>>yoU6^ZXni4gAF>u<?RX>MK?SUzg($=Ie<BF;b!M{x{!$D
zG$`=a^KYMCbe^aq!5=XRXK}^r@)=={;Ho_m2hKFsC}w7gKi-CuhB~8p>POetr^XBW
zI6ovpv&Mb%kA_NS7FUfmSZ8?l&FFG$j^8V<g}57Jx||*|ux;j%=`;l<_1GgF5{JQL
z`W^zP=z50LV6_NR=opYGh^*(oO#~=2+5P;taaDZj>V$yA!O~v1?5n9#NM`1?3=ug_
zuWgGm2?qLA<cj(acBDj}4ENbOqjH5w-1>OA1RkpyH5wjM`_N~H5gF=WPMmjga@{dR
zG7GD3T}C066fjPZR^OE<pB7MC0>Vv$s8@<zU@BIB!PyV~Fpxm$zRe0y<f;$t)`~(Q
zUqx;sfu=7J1b`W$Td9OW7JOY0x$}&!HwN@Jp4#I7!qMlr4^V8c`AS~_jUaUhD?nfm
zZ>7WI6WEadDlsz`)A_`YNN4<f*9+be%Q3^;sOe}fVdx@O|2ZkdL4Z+4ZExF0u7ckX
zs>uhfoJHqd7=FpYMe%6aOmbd;FdEJmnpKh^<`(IFBEoYvePGWcV)-x@yaF0)uR)3l
znAt5DqE%0YxR4z}Z&>y?b2q0YLiyFT3=brKMG__o>8Lq_A4MZa`#@aEUlPoMj<A@j
zHo*N_X(r$XUD!8R1`o5R8Wp(S?b)>WL!a601I)_2qXfNLG^hh0)fvU3q(E~b^+pmS
zKKyrn7EeU=JZ_v5Wl8`1+o)76WSY>vO)7x*&@Oqi@{4eSbqfnygTU4ZZ9ozO6uJ%9
za>CMF;hD-NiEK_DlFo<ov-&?nzCL;=43@!0pbsy<%uC=WPXMjSnzl!w*mVAWBsQ6I
zMPNE1#@&~b*VfK4EcQd-M|plA0tao4;(u(7zp6$(xQ~E92#9II&cU`P2a<Rm_29=S
z%-IR596k$+NKPi|Hv$$s+?e9?9h9E~0`TLWrwlvbSe&A{j?mMN#xYK7rfgMZs3?rd
z{YMiaHK!Dk2w@;sZ-}ex^v6rQ>h^$&SGr4i$<mi5j}LY5LH*s<GkD}dquKpmxj<8(
zROkmtKko2csSW@tv+nBTr{=ylCYI6@kpQny8|-{JO*Oyit_fPNv`U(-c<P(xPiI_r
za>uyS|I%J(LhJQ?4GurzsN;*C-BkW@&`GD*)t~$zh*ulLuO&tOTL7A`_3Bl|AChF6
zz2~CHIHb7XNwG7wi;}oWaZS<G|38?k&-m{EEm!fVNhg)P<iWf;83x7}C_Km(^Jl2|
ziGlNjz9(A&gma1Myz~pr{KP0)MM{(Ui?jRf5RQpGUY%49;$A}ONXOEwNe|{~tU<#}
zt$s@0g=OUWOr>V0A`R6dB_S4I`GE7BA#SPaHaWL-jsS@x6rAbn=sc>r@&Zq{V%w~)
z5`ZWFT>|igt0)HSb7xnXKG0S8cdZ8K6<*hcJG@$+)1lt?0vd~dgFeoeujp?g$YKGp
zpuiGUf+fZ)@iA1gDM)qVh6g`r%co(yw}#?EkYqf%mB9vFzam&k$DK(wcMzsY|CA6o
zMfZOl_%dU(qyN<@QE?N-w0$y5100$0bea!y04X3YsivKFIbL&@{)as|3>I!0Al+XT
zCpblecE8PnSnb1KT3ydAuLloEFosBfH~+-~JcTHB&ud%Xb6?2<^}QS<glrzhb3tJ0
z?_siJdGZE<t?y6&Iv%L1xqz~~cj2U%J_#7!->DHaS2tI><#CR&?Q|`Ywy6IQ(o-b`
zK6i;mMJe(*G&N7ZHYQ$6qyEXd{_CV)iLt5B0K}8k2IBC$RQ5k6_e$mq3RLK8UK`v2
z*7&bnlSI?Ig(wVvOy~_B*+%L`BtrR!SP0tQ^*jN!4^eUq?kr#4o8S$elknaLsfr5_
z&%r=`1Xd*q%1@00R69NrhJURbk%l|jH*Xe#Z|Wiq)DTzhsWwTd?XCH@(t?c--Ug={
zX}HJ(q9)_Jh!aCkIR+Z6cOmV?lQ{5$$2q0}@I`Mw4P!zGAd;z|G0<cq0&}T@KsQ6*
zlQ=NXo);@y42s69bUSQ%0{*@vuMMsYQ8U)Ree{24hzLAdI;3Fa?)od>0A%v*o*%jC
zZ*vuPn~{i>MxAR=A!HJ#M>?kHtRVR12;NpyV`fpey0i(_H$6awJj&M;eZ2lF;V;V?
z3&@O(uqr+C<n@#VF9E)Hhj0_7D0#xvD3A+27lHi!m0X}SLNczX&F19eM(|o<((it^
z1c*)FvR?wN5-}G$R$3tbOZTAYDR=F`%|Fr)wUG3~0b2Bvuxm;@z+GZG98K9r_8Cxv
zG};QIY9%f3^EG?r2_h$5Sd%JbZ6ka>m?8w|?4a2Fhl(N!kUn&1Mj5>x<ds>z{#o(h
zTAtJ!$dgVe_q#*yaGSKrQ{Q9T63E&8`~SN@N|c3D63hSi+tp7JG30cAe@xLLMdJtu
zR7UVI`>@_M50w@)0~JP+4oHOYQ6T2_v$*+}*UNSnXsvqOydL>KMgp-^5wQY}ZsLF;
za6f7C%#tAxV+9t#8;FZOo4oz#dMuVCO&2uxUmIS74*ofqFd4AZcJBtQK{x$|`K~$g
zT6vNM(LbwrPL%5ESzx<O&eScU=UrKst55c43>@HV7Y%Lg;{nHf>n0B8{Ebh~z{^lU
z>Y_FrNnp-NW}P8*(Jd|Z>jKlC3!y0!;{~o9>($){!0auMfa$Y3zDotJ-U4HHnh{aD
zzTkucjQyG#4mrkuPc8|D@pUd^$^^FUFVi8Q0(;|TE^^VV;iuYFYC!K70kXZXzGWC*
z*%Z-7H#g1i3iJg)I|n@d9|Pe-cyW~`T<c-Jeu+TsfD=S40;&C4Ag5<!#A#w~Gd#O`
z^gs15|8qDIpMa&+IUukDmnD;dFR`rV$@h<kU~Hq_TtZ2<yzTp+4+nZ+t-x0NX%4nT
z-#|$&UKBI_k1HR5EB`0~|8oLvc<2C)UQ%T)zbSB+W$@;!Y%%XJ{y9mU0$>H|t9d;6
z=l!68zoQ2W2Ztl201UVIDVTf{$3eV*UU@DEuDlla{LlF!QNDYnLOOgrJUpzkaSM83
zjBP~l^||Km1pRYTfY2fk)lFA@35mx3$G4*<3nL{JCc#9GC4PAIG5jOId;jl<kpAa=
z{$C~?sDFdypELgw|LVbD^IQb~U$=R#b=d4Ofo8Qwbu6@5nrac1w)YFni%@}T04-Sj
z3%j_#u1wko4zLL)Ez@xR`Gv2R5=k<m9D>IOOwntR<j?QGEvWxDWO@H{6OmJa)zq=Z
zwhneYr^tufGJVyEUjJOGvyTzFaXIJjq5dx>BoHzoqbD|?DC$oG7Lj&W<gfp@k^)?L
zz94n_zZky`abQ16obJ~`<`bB%A#2)Zl7DV(2VWqN-B*Pm@Xz}}18>p-R*%|_TOIgh
zEr}1e`$l)ung4m^aR9jTkK*%xEM49btSj4}y#r$Kj&UUDg-K@bf^fv4VYibic{T(S
zG;jA2YiwaS7tP$95mie9S%XhuKo2y}+ELDSwBm$cjtxoszZ#*Ye~W7V(G7nN<UMCs
z_gTf&2!OgU2%{9?@GhWPZF3zLG<|MCM1C0dL2+K?W^L;nH)smEH0MuL!E3JashAr_
znp>xLy8iLzRsg}*oDJ<CNS2Jof&IdC^l;%3X8L2Gd0d3-!o7iSO<72*13-0HBlnCE
zt%#6YlA+Sty0c_phbTn+EG*?GnX^TIPYj5D+iP{CC5uqZ_xBk^;UEgR<`V-E^dczI
z*aCRq79WaWun2d^`m?4ZGcEr<;Wz7&!DED-tH@^Sa>&i<3K<8pse(IA35+6va$FUh
zf&K5j!DAx8?E`f7@mL@O3&KoK3Y55H0^disZz>|zHH5`oiD)vrWFy{`f#Tvla;6|k
z8z}h0b`sfh<lk&OK@_${cJK!?gU)tK{vUT%gPI<A*x1lVS&(W1DLf8CHR+W!;-C9U
zOw$K1f)G>fy8y;(=$?*A+((*)&d6sZ7|Gy<!q;@{E6dKy0G0><24&B!uC8_%@Id2*
zj6bM%DYx%;_kYJgUP$;bg3E9v{c%DhP5_oKbniXX=cr=OuVg>R4RI-!FJTB+Z%Jll
z5hmTa)*f{Oap1pWZja;zI>ZSw^RJ*qD<*tB<VcebTC|A#$PTVg7-?vFlvJ-ISYqz}
zR|%HcXu>1SKa#JrmoOlxi}|lRf8f;tTZ5D_?GE%OMSwHd)_F4Yv*<GxBB$5~pYF*i
zezm;?i`M6m;JlhO5S+jJ3|e_KW`B=SAZxl90hv7Mzqivra+(_m1;}7ockpNCzUPA^
zZf~H(RoD7dEp^O&lm)7~K;QS?gHKqJO%*4es*{uMQ-5TC&k7;2qkrtga9}n3yZ!N?
zKSBDw&5=Hmir+oOF}BHX;xJg-qgeJte#ia-4sZa41?*>(Ph+9Lxw5MI&;AI7_6N}X
z{X3)JHlz@;BMy@p`coB1kf8Nd;CuTM$*dRxwa(He&hK~%KPq89Ak_Oio=WnK_)Dmn
zV`ga$xBVl@wAl#hjzO9&e|E)xChYRpwXJVJ1_v50?HzEI1T@$qLQ5LQA575#;CzZl
z*A2PJQ}46FKT5(D@B>Kp_g^>VC1LP*h)ItSz}s~GM@v2G`a3apdVG72v3=uaA)SsM
zh#<wU(oe^C7Fq}(F@sVF-O5+p`cR3b%9i;5Yz;KQP~xB#4YSOB#URfQR8XE+z|Qw{
z2GX<afxWB#zhL_Us#cK3cRk=IBL8fF$nO}?TKd<nE$~IZS{LBulf8XqeWZbPtmNM^
z;Ff8>U`=VtzJC)P6Kt&~`tR=jdux686R+k2@bu;>3FVb%<^@{TG!7+U9dAJp3^cZV
zx*@etmE90SYN)S)N96h8N>moM|3AzuuQ&<DON6`E&w3d20e}Ojb#P4TESM0n#Go$*
z7~^+j-lI4K7zYr1O2kLFO$JtjLeaEknI_cdw}7$!|J(QGf3tl-bj?6!1etY6@f-3B
z*7pPR@$K3}B}Ur${Gy_2(2S9&yw4`D#6f@aLKZR=YvlLKQ3EUlAHfe*3ZkFcq&%+X
z7$xw3+|pN|0|f~wsbIB)E3*cU*MUByn^HR}q96j&{e^AA@HC-af>kPRxbib@dXW(B
za$mKJ{@cwpDc~^4y2B=<zfE`l6myMADUAl#_=hj#Abm^<U8*SQQEa<+aCZXI1D^N7
zR=;C0-#uZpj{?BE6GHN{qs^HAB5-pB%dUJZGlGs=`r!ROXmveiw5T~h1P#SqUgI2V
zl^(&^xh`w05pZ(EjBO`mu#v_c;I>`QrVlF2CZD+HPtcwnZpOs_P=MHhZD&zsTa3V!
zxh}n~x%ID%g8IpIBG8{D_$LvF|MSx42kx+i04j~1xjm?c9jr|WNpMCgaN%`686(2^
zE720-{69*xd?9kb&GypbN}`3o!hHJa_z~Y@R`G$~LMVgj<{?v%T;KMD=2CO<ygrXj
zFW4&J@Txo3V5>mF86kc3@byT5EDwXA@Sv<+LSQF8#6FlQqs?}HOlg*|XH#!M&!Hh~
zK2auLVLtw1kus*k60USMB<z^|-N1THcta*Uchj7Zjxo;|Pyl+^{rczBAn64Q4pfsG
zc#SUBmXl`BiH2T%$!j<D29~ZIAVnkA+jvS1_z97}O%XQEyn&}mc@<&y@2s&4AXtjJ
z=WIY_z@HcjD=vz{9#e)LyF1$>=*wTgEzh;hQ`aTVv0DoV`6(&8P@np|`AUqfoE9Pa
zbmO^7Ubvh}&hv0leg?9Va#^uP7CCV_e+&lrk7bUeiF!tRz0G>-KCTHEClMFkQSu(w
z%-(tO85iSn-PVz6zMYV@)jH@TRa{na*`yh~`+QW@l`j1qj#8gFBkX3{LYm{Kg<ZYm
zQ6VQ-n0XhG+y*gVdDCIYWWrj<nXN?2@JzbjMf}pN=h<V+9*I=uQ%<+)VUDZ{GF!_D
z>GJ#^Q!k~Y&0RhB9gayW-_p&UR$T~Z%3tIVpO!00f1Gk(|3q=x`%)f3IWWYfRCm6@
zzo_LPRD&`r^JhSYsA6HHVv4C^hCWY&;Ix}loSN;{$zZy`h5wWR$wr(<>Eg0^rFd4Y
zs*sxM`d69Powm-6I8k=9ul8^))=rlW?e2CSjG%3N{?aDptdmNed??m3!|};DIx-mM
zcDMf5`o}wis|5;X*$lQ8)i*{oV^}eMLMKv!v-7||{*=7Do)2z;U!oDb{bmlQbHaKK
zyjqi;s?fodOD6r`1QD0RNKX5aglE*LGnozVP5co0q8voRo)<Me%zx>+K<apufiBoc
zU$F|)TwD*7p%-W@^?&?Au+deTm$Y2p>(4BxP`U{Eu#BXTE!!Ittif48XO(lnzUHy4
zaLn1v`qNLBg=*BTCA~Zd@_s!rM;fYx%p^A>ToE`w7xzU+L{iKSAJ908yps{*tG*on
zf~%Qh&UMhx9al7LGCVs87wyWGiP4s37ypP&XXN?2OW*aGydRB)jZN)wh<|w!&g?17
z2BpaT&pSia8$@JL^0YP<WYDB~=<#`Kd;fcIcO3$j!k$~Tl~+*x=G(o#;x6;>2*2p|
zqsdA}63cfpGrL{BGwEtS$rg&p?srrY;cbte&a(`d?l<f0L^#UCSZ=?Ip4{o%$E)PD
z&j{M&Zj~&h=bV4`LY9H!WyH+xgbasZBc^()(^$VK-oP)o^$(4c`AT)UYCT8mTP%gG
z1j|Q_5}&?wEvs&Mu3>kbshCfVq-IETgnvp4o!*%)lhIl8LO~X7L5Od$O<a??=r6<`
zM%8rR_X^siZ_Tso=rJ7pYWzhl!DOaH-dAlm=&=-O^oP-k9(Vu4r;E9Sj|b4tU1vX=
zXuuPqIMb`%40ETg@O<A`kQGyR2juaL;nb&6n)<=L^8NIy{*NZy#$KFmC{nE`^s@vs
zz(+P+pS{90Jw?s!&O+*r2%R}8d3`fL@a&t?X}MtN)W*clhqetG!HYLdIk1F@122mU
zTLFA;nLQhm3p}g6mJnI@nO`|+A=wrV9&dYLr-k^NV<$1|qcvUU(whATjZK8uMV^}y
zB1;mjGw43~xx|&rr?4Lii?P>h6f9IY3OJD69pBm;SP;^`-^&vLi^t_8kaKkBw)GvK
z(3h#!htfn$ibm&IC6lL<Z&Mkmr$4k5@|d7}g3s1XTN%X3Wm4y!|KjS6@XZg284<3d
zN};`cRz^&?dl{c<+U<3*EksP)>%t^Iol^ZwE7k>#Q>kkwI3ye<tci7cG(rr2$B)V0
z+U{C-6vnra5=}D$r)A}~i%T5dAI(l7y3jjGq=@O%4{W4Ie`-76T2^<8I>4^#flBzz
ze!7%ON2*N`Q{ZroUY&k>(jUK2)3s<INDI>~@$?<bMW=6??S0LLQ;RQ>E35+IF&vUa
zvDWG>&I+^Ia80CzX#K({I7h=r$C(oD3O=+|X28f`W06;=J8^8!*&SG1^cA7|^tGHa
z_P}<{19#JrYQ%=>RHN5UMiw`6c<SG#$W!{Ev5gnQB6{R|^O-RH&+j%{ba$5?NJv_e
zF`S97miP(p%i!*Fs!AKlsb-?8W5k2=H)3i5nD1)<x02(@r6XpFer`(9+DL)DyrJdK
z)!n1ZM%~uL@)DiXHGjwca+!f}6KRgEV}F4`O!Kl(*u|)>-UMq~J#Ml31T3N5r@lAD
z;SsQPuI3Y2;Mk4zaE3G*_Ng##-c#!{B4wsUffI|%m`wLFoDEi|U<10JFa;Jm8mAKh
z<yVexvo%q9^frhmru$p+Soe3A1;6Xo3u{nQB)+98aS!}L7gVW9wKBPVdS<pYQnx8_
z5lIG_47T#h!YC3o_l=>z`UT}s8kWWc7_(jbx(2-uN#0<-v7y_DySifGGSzY(+J)KY
zv#&EH1ppIHkn`q?iJ<O`n_e}wgPYHZ^YR*B_?MB@nfG`r!?W|-LaaU&rE3FURkd?$
zt(f;JWsZkQ4pfIf(F)L_UZ`W&-Zy?m*>u1v%U1DkOKTzbSyV+uC0YSG^sd9H$Q)Rs
zrac6{+PPIf{J7h<$@7o`4&sNSx##K7lfLZSd9telk3nnfnhi{0SqyP1)HKjRHg-+g
z<tI*Ct*knDpUJ#XUr>lXL0g+Ilr4=X9BZ)$+dYXe?=i-s?U%*h=W8rCK>mH)Cenpn
znS$@M@lymxd}%mTkeG7q^;s#gCaF13y(C_FK83npMbAO?uwTFzXG!dfJMpxOU!&-4
zOU)z?2?nM)fd-OfgLy%oi*dfPjCqJcp*-80lqE%`un>5+ah``C{fIPLzT%$u*AmOA
zrPmI8jZ=pyjG^~`E)I2@>wN2Bl#J7!-XfM2nc50Q6Nw$!jI|0TaMgOdSE`#o5tVD@
zozsX-Agif9e70#g)l>P)c0Vl3EbcM00YC4z%gyne%VG2j6~26H=fEG5nuAL<*8J$}
zUrfI|@$;bhkx-e}SAJ=7Aj3{wDJ_)#<OQrWovd$tyy6FEf4?k_%|OG##LonNcm=mt
zej%4cZ{4=wWBZHT60_Djr3Hsi--f)Pn{hceZ_Id7HZPrv`Smx-Q8zuh22<6$1M_io
z<@Yq|JE!z9ojI$v{1Xd5k#c=}bH3r`^7N0`IE8~v6vLs)MTD6-Xfb|d?0)}18NGMQ
z6v3F?r1}o|x2_@+Ce*Z44D~#g_Q!&OmH%FzoS%1`Q0{!WlvbaaEWr1M72=QcdU-gx
zO6#muc^1IgcN2XH^+ME5?!PVUVJ~@eT<+Ag(7R-797k^yPVKUDi*4TXLB^TD2C4tP
zy@%|SCQG4|64%QSX7$3txyJACa((v|d$fy$<xRy}@nS5;(6nXW!)*z|s>{=ir)>BC
zdO#8-1fh}=8xphY^OC>aL)`GqA~w_UMIv_!sZ#=Hb6<tP8>)64etRPwr!wvgSwb^+
z6$M?oSl`~f3tQ4El#OYpr_gn$I{WE|8=pF1>-c+qLSQCB13o6hP`4MjWD8TBJl#8E
z<oOiiTW3ndx%M1;ZphRicJ`N^c27?$N0u5HvrL{*h@(Tyx>Z|2m5?~m?p7HoJAbP{
zl17-6Cfta~|IocAa!eTaB0A;{E|X4bS1x)ZSzMuuiQ6ViUVb&EYMGL(H7ZK7<_lBv
zS0eY>>Y^UIY5MJs2$_f25m|Y}jSDnBz8t)@r_;LL*W=7y<1@WJobeJ2-+Fp}E^wi2
z?~)AZ5N_IVzy&Kl>Q=Rv-k@ZbX(zJf2Lk4d-M9J#&B$>pWQwhwD`(mzWn@_WQr2!1
zf{^aK7ym--fK6NHaCx`c?%C(CnL&6WeWv@0g)s_S<=$hxx4H14lyc$~mb|3I;j)T{
zFI0xT1E=H4#5IT`-=7koJz7~-6R~r&+*aFj{AC`X!BOXGP?<Y(AwKOsFK_5B&zQ5*
zCyEM5`@JXBeEEfW#h-12$H~yZm5L;lF44h`hOtv{tW#HKNKsYi_XlO!%8uN=UdMI3
zk}CM%dX5n7+K?n|)nVRip3km6mlJqa=OBXYydX?w-h%nRT1~?9{Wye4T9#6`Hocc2
z=671{|K&D0)+)+(0lS(=r88!ZGaQO8JLkrwbhI<OP~QGa4ga^(TO%_{gzIW_oPvoX
z4^>Y#8b8C}Un_rg?%DTs*s4$Nz-S%Qwrn0`{tA!Tbj(*Zz-#;lqG%Dk&vj5xU3?m@
z*Ena}-w4!r<ol%MIxj^&!056N5I_V5&aWr=@BtSb$Lmo1Gn)|sxk|37rZ^@#da3jD
zX{{VMxjVCc+kBtgnb<A{mnf{=Sd(yzQzjmMROVkPj~&*J6m-<H@;)=7D0<tFhsd!~
zX65}<oqkM$-}$M9Ch@LnAh*G~{V#*PzC?7mtx6z0S5`byTqyOr_BWhg53x_ttX-ey
zpi|@vnVT5#^5de340C<adsDHEU&NkX=O)ip`1Jg}QSS{u?(U!FHLC($+xXQ!CvLoJ
zf3W~)qNuSp<-^?NPTAsfd>~p-*YdqtfzyaY?m4L0Iv#VJs@b)rbnv8=aGA?Yp?VSM
zkoFqFW9WhpK5P0FH>7J?mzo{l!b&3L7l}aDB-%Lmcy9jl2n2Ivd)4L9+vc9!mpdDB
zW!b&^F-IjXhx&RC@itPv`TeRuz+%50CLQ>tnaa2$_B31)ME{OA7<Cl-`eDV0<V+0Q
zmu-f-ttAI~@nI7bnuM};W${KAWy$)QE+6k2DM^rm2=4UT_6I@E3zfVSq{93kx9|$f
zm0rS(FY3eAZhW37&wrO5123?swLETr&F=H2-rC6TYhEL<w~V!Z{Xo@}SZYqyy_(C=
zt-bg>^;7i%lJsb7B7{0uEBzeXPFX!%pSz+f<!=2jE-Urid}E8LA!Bj4K6`b&vWqMa
z>=ZxUEx0k&#d6IG<IftvumERZ-{iUZ$^~R2$scULGdezX`a(`O(~gQRx>6Yv81q~Y
z0Rhl;!c!Vfeoih72{k4SUo_jv6|7+{&E(t@T|nhnX@E~Qhyc+I{k7D&0HYszp<iF>
zf0JXZtG&<RK7pd>Bb|Kf>@xc1>U=kAnz?&%=`cInnQuC+Jh2+dmeiTxAUksu{QkN9
zI2!CA@%t35+kv*@Vyb<*R&dE~QzC4alkXs5QlQXbx(>e0!P*)ANqo6_Gm^ED)|jD@
zMW9b}6t=DgQ*K62Vp#AkChR`*K@;_s(bwAOuZeS7<XV;(>bksWtDL!oHNB!Mrzt^q
zWPD<1xGg3^*Z*{R|NcNlE$o~^k~haTv~BP*v;Bkj{ctW54Rb~#!DEIJSeM=_Q{!<W
zSpD{;-MQbbbfq14FSK9m&UTkiYm%jl_YOpOyfaaq&cEDDMIuq)CDp${*4XeQ`a{d$
z<J`qXq@{$fsPT^ZZ}Q(hp<Fzq;n4lQ%#(mg${i2Sh$|4ux-ppZ!RnA=Cx|3mR5Nyj
zN$U22aSmKCLoXDOTyDNw;~oXZa3d~o-LM1JU-OmL^<e2VX0dnf1YagKm>r}Qb`M*z
z#e@S9z3mde_!tmemBAV>FKmp5M0#fMD><Drh7DsmJ{aD9PDk7?XEXjn{oaEx|3mwT
zXg1Sh{*KsP*@6!lNfmr_6E&B2Iy{<Vy@tmLsQws;<G0|9X-(DWd2n7_6pGRer}Rk(
z;dm->!z%V=lNm@?1!lrZL~TQ+2e>k0k-X==f8%%@hD;1JI##C^v*#(}*8Y{)?cFk0
zC&n{UXhdU4ok87mIu;O1qMff;8XGcRK@+~fi7sFH&ckJ=-bUL9d{R7DPa9)pUqmR5
z%ZuRgUy%g@6HAUuG;s|onW#ycv%z8)ZHF{cC4SqDhv9+gb0-uFl=4{*9G#k|8KdAU
zPgxUWY1ffOSAb)y7X>-ISZNo&_uAai2f;8fbP2^(KR24jc~s)5#lg!}t7&HarRr17
z+M|vh{ZRTXKc4RA&rP;LgsuZ3b-j=s5Vm8)-)TRkUTsIm>qXYIX$i1@R(Q{6&`M#g
z_-&<6CQ>IINwL|9(_{PZOhcMMj*afwv7T$^u+WLch6<TQc7@y<uG^(rhx#QJyGYM4
z!mS4|rt<qP@FfH75utnzq*RUv#>Fl;byfFo-leNh*<K?k!(7%fecu>5`!Lrl3FZU8
z->=*5W2JBwDNs8E>&OahWP$gx$3A8JLCeA;f+8x2^2}R?<DlPjT5l~kF_8IU+HjeW
zj!Q&Grd(Hq_xE>4*uofxUc&AVcZ-CFRI=UD3Y|EZkU5aWKF0qj4~S&fS>JZU4REx4
z<r5LeKfEHH^{e(oxhML3{cE*m`<{LM<DI6S;G1{RID=|0-=3^}56&zwB$Q!n_UcyT
zW?2?F#yC0M+U6B<qj-IcaeCUraN(=GM};T)qgG|HI&M?m+!Kds5K;qLOfgS5AaE>B
zjMmO}n`&OOZ;Z$?>$wz8V5a7|8Su@0!7=R7R6i7i>ibEnez}=lO3SWXGwJ?5IoJGL
ztCZ7bk$mqGEz~YdelUcQ2lpXMKPC>*`myJV0rpQL#i+K8wT{YMRv+KZO|DG_w(7Cs
z)C*sp_Wrpd+nSH@6bj)y_UoTyr!-h#V~@l7x4*A!%6Dhu*1+8!a0pAnQ|EjPL+c)_
zN!aQn4XLJ(Fs~^@hvMW#j{MMxm-W4e9VS{tM^1w2csf{!y}!Eb%8INs^0>kE|7q{5
zqpI54eg#45fPjSbrW8a(=@K>}A)$cMh(Sq9H=7UyiH(9ti%3ZcNK1pFNF$pLrIC<s
zzPX5v$Mc@|-f{oCV|*}%W4YOLtvR3gJ<oh%E?RIbcJXfM$acPrpQ-Z-l}(QY=WBKO
zoTmcu{QVy&&EVfZ<rFqtHd`)!3?Pi$Hk95t_~)yRwJBbY(ryyuy1~ev!FLNQ1OJT3
z)fT??2%6q%D|-+_DWVv2I@*$Z-NhyQ3|>XtE=8!?E^t<<QH2RGY88JS1duLb1Qg7B
zp8sLx)^u09_CwhfSmH{4N>W45Vp~d%6WB-QEwAvYR$kM4=(;0RqWq#Kl<UfA-dfpa
z&4rrlQ5z;k*(0O2mYK{~CIuqx@jTyA%?7z`r%V~0-BH-&6JQL9Z4`N~9*u)M+%5@N
z`G*FE*|Lo<SbZ9}GDa=5S@+f`Mw)?T(;W+szEwK@k;fzoe|jU!wp4MW)}VC;<>%Mj
zToUKuYFE9)@wHKy+DFW!HTf07*W*;eqyRI@gt%0E=i}QD*geilt6eEjuwK2*GqKD+
zBfcf?=h!?D%HoO@@c6k#K=dT3*k;J>Pod*E&y7zRd7fE0+%G?#-fMmXPPuv+B#FcF
zb%oWd;&Piu)+^h(jQJ(R#|%!&Oc#KCgM<5QQbY~?SXpz{lQCG0Xx~#zAh}Z{jY&FE
z>3RClugI>Y8=Bx-DyvT3=@|WBMjf@5H6*`0zaN;$Z4zMEV@oPE#$m1X9O9Z>Bi<Rf
z=IM{O*H=xr>XCgCr7vD|>672Sj|Ki&*MJ)n@?+pxBDaddgt(zSC=rHue?t%}?AI3`
z0)t=gZ?J6lDO>&}XWqB%-~Y|U+t~@VHx;tD<X9;m@T~q#Z!USVN$zWs)G9A`&ql=Z
zBO~7c;PNo7=yWyN2l{$u^tlMWO;QUgad@k>7LO_gZw%_`a2?f!-aofP9m>x&5u3*}
zQM#0%!)O(xV=fbOmOH~(T5rW@=GE$r7^||P%JiuBbB|v1Y?txH7}W7`MJ33Vqizt1
zd`I5Q9T^ESz+xG6S#*zD8dY6tTHI~1%lnZuDi>v08TOE{Anw3F_f}2=vClAn;qtrc
z9Uil#S0cwZ9mX^m%)_r-%@>~u<`S0AE~!*X>-MHs)O7z;qSqWw;2O^vQ?Yyd%WY0(
z@(^Kejc;8B9-KD@w_UQ?uh@7r&r(Y;xydaw`*2-O(iqiE3DsqpuUPi-J&k9X_28=S
zXCd#phHS1F681}_x#_yCOFwlD2M51j;i>Uc=DUwA1DtC-IqCM&auB4*|GZUA41<xB
z$3bzjTB?ev3{LLlgfRMOy*v8CgFP2`$zR;A1QJl16=G0iS?`y|d~0fcQP?};QjwTv
z1TE^7-$qaA>b01{T73B#m)uh<cGBgpeWDLjWX)Z{o8)Zu=7@{`MP-SRxH2NP;ZWGK
z9edlFnWqv_*QF$4@QZ`ta}A~VWrvZ|EsHMj;_po@hVA86@?%MjG5$MU&rmbYSNp%r
zV~m2sqLYWTdPaO)Qyn9dLK=zKCp#&Hu|MXnm^E;==uusfc5D84nt_~oJ7#2LW_I^M
zPJgd?rt?&<?4@UZ6A5=Q$=3>8zle5sSl1Cg5b>pVnOnDy{7M_c9=WXWoS7qn-@Z+F
zs;D`K!8V-=?8A0E>5wI7h6KEP&NRPeB@r;qF@f#TIc4L?n+V?DOuP2%${2J0z(7Z7
z6yvOYZVhbHc7{H9tme*y94M1+T4qv5NDV2-z?s}GJZn?1d?D2setpyUa{%Um2XjX{
zjvT;+`$7qs!;#sp9%~=ZHQZcmB{foWf0vV>zY{w%;kb|)Pa<VVNrrT?s4L5x96Q})
zoWG;gw3Ma1J~0#jaNy0Rc*3uF)ULS<I7amXgq^MaY_%dcC<ud0<Rnse*<O26jcE?L
z-4FO0SNv5os9}<$Ucsovu)?NUyRGe_-DfJ~yTUfqmiPd>h8(9hoGGjViI6sUP*Se{
zbS(d~@a}$u-=XJ~uIE52(Fn72T>G}*l+%PW<npGNQio^?P1r`c4e2h;Yo>O$+7Bg^
z$lRgkZZSvMo9I03ER5gKO8pw$YUQ`F^IA88dwebMnZLnaGYNe|*Fyp2hj(Q2i0FAo
zmLG;*{Oi#*0=dZ;?X{H1Z>M)=FRxTP8cYR!Gb$5Fbs#6a^RAn#Y6a!-VD(_L2B8Vk
z4S4IH1(Kx!hQNq1J&MDq=#i}?e`Vq<bx8?jFvjS&!G-&KYeaoftU16VTbfVN@41;>
zyrY}%aVO_I59}9+h>yk-B=BxQ=YJ@RU9ekHVQ^E=x-Frsl=Hxw(51t6<7bPsRiJ4D
zV^00%InDKVMcNboInf3+q@}T~>u1|=f~l2TS+jmTTpSW<eqQM?|2!8}c|rKK&n4l!
z$3(e%O`pVHTGUFh2-o`&apgQ66#VA@X7k<6%AMq=T`Duw6`J<>A#1Je$zM0M=i=jB
z!I2*TU6utc#atClP@9}Kgg*VNHMiq;W6Pjy&S~U!Yfin*ebd%y$bp$M&AhgCicm%?
zL1b2zm-lAs$lf(Ft($PB?R)+n<16|4nVKp~gx^3kH(dKXo#7@Eq3YD`T*Y0<H1W1q
z-X0Eou*9vRO)3$9^h1gToAI#@vzF$jGDTDa?t#t<p|VmYy{Z2C=WR~0>=sSCI=@G8
zB#J2!e$fz-yu{Gj{(*uMmYDOYkCGJm#QaLp8t~cpwLa}(LSdy#G~rNKNkaBn47Xjy
zhEA3Ca<oo~kx)<GBb~|Kj1f$_*=l?qGP@mAo>8#pjq$7b{bU(^k(V4_Qf(;ZOt=uz
zT`tML^;U)dy}tWSvwEoiYC5W4ug@XIGXaDiHtzSh<XheWQIy_HM$>ZsnR((;JDM)_
zX7lHCt#@<v5i>bEAAe#TxpANw1`~_rnbq|G2y|dr5a@^&6AzlWJip0cGPO)bsNKbv
zMCZ%pJOJyo(hDwe2%L;9DGk~i=4V%b{c?j}{XMGIKZcOuGh-zUQW#TeNG3^fV}x05
zveG`yg)UF5GI<F}Fj_D&A59agH&@yEmro38@i1NTweN@ezy;RpMmW-)7R_fAY-clW
z7kz9`K~)Y(qx=(uix!OM-OrTXOYbuqmSiBCJ}G6k@w42@u$q8F(qXey?1^a3Oq3Bd
zBKB$T)t)_j9=FN@UcohSn-%x0CN}8Q54X;M51CmO_8|`}icHkJC)t>IWH<xUYNQBU
z6hMGRbW6)|D_AiVoII7N|8(U|r;0YW{)XoG)iTlVOX+<HkE#QVG^a0o3U9fsD{)$m
z*X_}bnDe#~QTZ^lI^4MCA0YY1)P=H&yVEPKcS?`9ZTa>Oaave?pz#gzH%a`HlZ08N
z{Ld6Dm7lV8MN>;}S<k9vv1-TZQ!f^N5MSzWD-j;}c0F3Jtt#kABJ%^yr!R8Up2YV5
z6y(th2tnF{yiDTS%18$Y;DmvU4)?OQ6Whfcgl{(O4Smg*9-LiEbqX^8iI$$R+85k_
zGCS_F;jzzr>~@qwG)EM)_|^!V*XnN@u_P~ClfqXLiM_xnl0a3uI=zLhx0l7uizs&M
zngD)-j#T~h{Nn5u|8wwO=JB`1A?K2rHMA1t%0HS8m+H-@*gU8uG1@V~z~fX%#dF)5
zGEC%NDWK5c3qMCUO-cWR^gc-6(eRLSK>p=Hq@Y+1YzCiF`@Dr>M|VhvWsC;1l82@T
zwkGsdK_r@FX>)wVg}c`su+eZlDXM+__4Cp1G0}}656(Js_r;`7X%me{WKq0}exci5
z8I{C$;HR8_5NR}u%c)jLl|3ZfK_d8?Q%j3U$Fu+3=J0#fCYwa7*VlA320V7|m2Gqt
zhTw+{z5Z0Rl1i87`icIGQEtV^i*TPtm4^5@&(B;gnb+z>dBsMpt!@;ItkOg&Uxnk}
zuS}7^qvQMDGVA))2Z{eJ^kV16j^_Nsahe2;0oRHs8Cmf)EiJ9_YJa~B@VZ+fy@yq=
zYB{IIC!oHb7lf5DV$xfrgfB`g+Qf#}5*%Na-WE!c?3@y`>2ltB5x2P2;whKzDf25}
zqWJq1!GO`&E%*Mx9HFrqj{#PY2Wis7FEKk)H<P2&I~qE)8xG>S^11h~y^&nWGXkfA
zUvwetoZ@>+uU1htQ@UFY<vG6&k%42FzB<0Gij^Q7aOe=Igz`gvDZ2_XJM7F37}=G%
zI=SZ#`2nJLu2_Mf-rVq^JvTRZzZ!?BH^i%97Ys{-($oN6w#y6szs700M{KeEQ6LnO
zR_%i`t~(L`MeU3%R{w!5UN(CyLT7JcNw*?VS?xSDbM-ZaQSgaGHA?#r8Mj9q8oF?O
z@ruj!lX8h~Vx(qUS)xFWaFxR5#?F1Z&ox*1Ry~zKjJq;eNb+$12(JnSG45p!y^9Az
zQ^#Hv{8g~pTvx9W!;(-!<Zk;n)veBH64wqZ;~SGAQe9cyFbgY_`+m*Fc!h{QD}$6&
z<IsyB5XQBmJt9U)18P_3OI-4zjNKM!u8x5eZ~)uFT9ao(t%fr9y=>r!e&KUh8Ch-a
zlAyE(3Hs&Lk@b8K(v%iIQ@p!~7XacH(wVC1I-xUG)0wt&50}Q9+EZ^ZXyq9MnD^ve
z6L$E?_Ty7%BtH2C>8$X98IkkV@g(~hdXTMN2luJ7`be?Akb447wG+PBAB8Yxbb7RX
zcrFR5gk<UKfnLr_`kwDqx(wVb{EARk_G|8o`0P3*LAK<EE!o7wGUra4{1hay?~U7c
z6@Rj6BnQRzZwvB#Ypp2XYI;wTz_ro!v(V#dX}j%c{RUB@h3pPn#}KA^<@kJ3kf?CQ
z%y4<vIau`y%GEfl%v2Fxqc@ufP#1rq_YG+5=Jwp(eu8f|*(#B8BZ0m^)gfm-7Ry!U
zsLtR!C2)8vsdV;(y~IfC0ikz$IVZW@JDHrVde4_kr`X~NOx@Inoab=1+x_<TsgmiG
z2Xhvl@z{Fkujp>=wI5{EGckD$fd+^_%=TU#JEaNeil7;i@>hm?&*b<kYiOw3f9vNm
z*lci2mKpfczV>;qG%rLVgUnMyu;aUk!%t+MVWZ5z#$dT?@~w1LlKGzU3LgBQ<VW^O
zP8ZzpyMuWE5MV5AM56UT&$g?>4r@&1meOv2t}LLlkxZ~)p6WwK^%vSg=c<Ag>07(q
z7iWPVyS-WK(6jUD4$qj(H*NCKR_-tX)7k8kV>k*34^GY5*>6d#5CJnLF0IJGxPT5d
z$I{H8aw2;R%wz{jl#5i-Rg<5r{k$_og}oYh1a>T!;Bcl#B8Ad`mYAI2y0xjL+Eo`p
z69rO9>+FgvBn_<a%8&9R*uWpt^(?oJSCz&3P69A9RDH4Qs`W4;oK1yE!^`kXI0+qR
zP3fQ}M|Zi$Vo1<4^j5y}a4WBu41SD4e_}(#sG<aR+pR5#RvM079QOHSG$MYJwlEZX
z66MxkEGEngJ<Q!s*p?0VEVPn1+%xACk$|eQx9+yTk#A2{h)j#fb9J9!=>`$~gCIX~
zC7guh3PwQY#U=6m#1jVAeNrG8XU=di4qwLrS(dL~zw%n96D_polq}jMtK!zN46k}{
zruf`t9Rd{qPX_D2Gd-tm5n@nDhxw07I)#c|nOe+cj`J_hDMiaA$pkNEA%XT}R1c!H
zryJ59%lha8?ZNDC7_|cp2bf^TIMsQQWs`3{zN3>C1GrG{i7_ugU^%-9-0eZh&eL8W
zu#0zX91b%SfFVvQ!0=G&1Pe0*!*dBJRSE&M*992z6@(YUD<=XxIIGVDHW6EUA^NuX
zD2Y|DDRBku-EFHACv>p0D=n=Ur~ToBn7W=qB1go>!1}-jhu1vKl8J+6Oo?mF+<_eo
zCnuJ>Sv4!b9p?gqtS^S~>Wy%V;Z?Ic(F9M@ya}*kODjr-TbHshQTjzi#4A!TE5L(T
zx<ficR*?(_8>v@MY6c%62(XI7ro3fd;p4Kf4Idb!*ZK+zzV~^sbYXzNP1w@6s<9#8
zQP+BML)~j8r%&g}CL^*4lnXVZbA~4{xbVs36%-oV13`<ZQ|@jj)xMlC0+1KRYOy4d
z^FAg6-g(Mvuwf)b27k@&tj7Hr2Qg~cgSb@r<1_|LX9DY;v7d(s2kx`*8XlIJdGQSL
zuEaiQ!05qkKPJ_e;ub4Fgy`t#Ak=(&^24&(obZiwLd;*dz!*H8(ELz1H{KMJd?P_D
z&)_p@PoCjZyPw@EA43_q$S>S_;=%@i$VeQMv`xo<CMTvvd)g1a3(;Td|APMeDki_s
zc@L0@1710<+wtCVKzqC;fkDNKh)%d+d8#8x{ma}++;cXk7A%(HT?)4s??8_#DUi*q
z)z^i`+~@(SBzR{3k)%N2!-#2U7>Dt}0v8b<$<H%Iz+nNH%VzR*K}l(JA`Wt36-k!4
zj`MfeZ@;}&=jxEdAp4C@D*}Oq(w9{hbqGWRgC$thC7T?Xx)T_EprEN+Mxh#FcO?+`
z^)h!MVNU{U=I1!PyJEFMr7--~9HEZs{|q;eyVtG*__X?IOkl<|ObBFY(B!-+1c8T&
z%MPl<crYP$!x#a~;N|9$U>+J3-A7ESpi-X=Uim`$t6-q;A>g1W4gqJ=y-mA%ZskW>
zDRTxX5|E}L;FB`RI~A}`2recIMnB_j3_L6-DCi>RRnP)Z7zdi!ptbCQb*<+p3B4W$
ziUHPAEz~E}{t6eY1=ap<fP+8CgMpV_iJicj>4hl5D&BR;C{N=&S_=YR2oHPz{(a`x
zuZkdm31g|&@`5HooPPo%;AOfd2?h$Ucta*-_l_y&0TRvKN|wZ}yEr`V!8z`;un^ez
zg7Z0_S=as{Ci2hEwWp~hxrKh5TN$`64`*^|1VNn{Dur@lHciBgRkaN0Jv@5!u$UK<
z56<akYEh?mlb$}O2yOHU(@FN%$pJ8S>Wfk0KIDzlL{TH<K*G6Nk8mNyCQ)A@nSV<X
zR)T3chkEAvCVbow@SqL25;>7ArqlFxfL{{gCj~u@#Gxt%$lHe=%T8**F>A<Fga}}e
z!(sO@1cn-DxecD+%?XnXChIG#hu@dNqNTL9tsEC5BDW3(5qC_|Y$2+2TugZ&#W5^$
zfd|?Msia&woDDWoSG26^^5*AX`?8RZ>EctQ`Rlbj=kppM8upl;41#RHjZN>n7v$RB
z#vB{H8|=aPQRY4$mhOe&E{~>U-CK<q(B#`VBhS$(+rPTq&5DUjrha!Sh%bA)?De}(
z^{dBfvrEqQEG#T+tn>26UBj^kNPqSSGzGYKJm1hVV(yXy)6rA7Y_@w9C6qUeTb!#;
z5F#e4jRbt0l+^Vk5Vmz<z*qw~WA90$B6UQZ6JDO!fd+<#hEohl%6~mjl-d_@C$+nK
zyE}uKf(0@symT>HuZLSl1gf15okZ!{Q{SY*!e<>W^vJr2Q~R-k)OwnF!l5qU%=yyt
zz|Paah7nJG%h34CEEk+4kG2)f1TPW3OW$6dI{pavi6(OlI5h+J5K`S(0q|=yeXd3i
zI{2>BEnsD2X+lgPEA!iMpbm~e9h_3L(%Ap_+!IpyB8&Zi?vc-RfN<6UfT@wZSl^DJ
zcK-?&9K0O>7ZAq@{o@%YFw;SFG7R5v^;mEZ<^hlsz}RodiN??v@c8b(6o36~vf#dT
zFk%wqSs-vd2Cc6ou9$zh@aH$6rRU-T(|#?$9(}t*R=v}JF~O=CW>)X3fpe`7i3GRv
zT3)t0)2^hT;DZYZ;Ry_VeCw9_$fhq6jDM$>lOha-O9~W@VkcCEMYQYLEy{xdz}lq2
zjf_%E;F7f@plq7{D*oF8Ao`ajTHk?z(twPJh=?(_*)$CFWDxV%ytMCMdXJtsK^Gw}
zEpaQ65sy&zvbXPiOw7rBhm8X`Z10p>y#8Qiu^d=h;!57`U1Ksl$^z2cXf<=YP&G*+
zW}!($u&-f}fP2dLXxTlSe=KDK`958v?)z9R2n`8#qM5!>b|Oi3z5KC|*!~~|1OjW~
zxXR*?*Ubc@_;Mx@yewBtT457rvV_N^cjLT^&GK@v3DxwqdY_)Y!QG$vLOYHFI){&%
zz<Pa(B{qZT*vTixjYcTvhrM_~@xFH4Y2W|CJXeKFieY9=gr@v~7*<69QPS<XcnklC
zBWUs5W&v7pBkObSpIQNBfHibNT>c;>&<bNnD^k+a*wBpGUne3I(u(3oLcD*{kJ#ED
z(ADw%$pZ9a4=8|J2=~GWV3hJ}7_Rndf*=~dkV5uYMQ*Zr0kZ*|AdXv9=0OKf`K@r}
z_bDTWu<jGdO?nv{8g9(43(=$J;6;Z2CN=e`AIo|<_v6W*`xK}mhv?Dv*R6dUi)JPq
zHjIgVilx(Eg$2{&h4ngG2}rRrt$jma035@7N!bqv%>zAJP}WgVLqF<(xO@0@WXRUq
zqFto%Tf)8gzi6qB=yW#{L0<fAk&m{Tm&QR}?Gp4kLI+T-xWF)t^5|QK+K+_RW3474
zmx}%Acz1FGp4!>k#%#w(8z!o8T@sr5!V5rLs{+b`YsU-O|2!4`6$9_88=*X})nKgE
z_QsO#a2i_jbg*7#H&LkL?+;pd32qU}clO(#w@8NTV&DOVzj;K86PSerlWe4l8TUkZ
zME1F9oeRcN3J~2suD#s<95)CcUKKAN4tnxvb}8e5J?ZuMo#PPG!Jig#;HsFUZp=uv
zf66IwgAULwW1PQJ=>%po0huuDUK4v<SXlMD&&@^W`Oq>(OWry}7$acSJpVYP5K}}J
zB8qhqn5{q|zWqMw&|d|*1aHSA#TRf|xJ$)ra<la>A#lLm(Vt0jz4HUZA|f8+9X{O`
zEMVB~=+8%AtaA1O>BnW_8Y{ol<m7;mbJhD{nSFi|(|Roo;ovo$N*xeVg$8*2ZJ%^Z
zUfgb0WH`cC{Spt4T6;%_($x}nOAT9<eOZANVE7Wa5yr;VRy_+Ti~Sk)Lv~GXR^s4)
z=t*OFvm@Uld>5w(ZFW{)Dd#6L%fCZ&0C!!didx89rEYtmnU)S(6?_E9A=x03^!Nq`
zS8SPZ)sv);v;OKkMgpfBaH%}s2jwWs&a;rv!wP^tsm?SF{yF%`Ib=HmOQ1yv?`VH`
zpd-+jCt!?s_cSefzj`3}h(0V;3Q$Yp5ydXp??8Q%;fTCo)3tN8S$la+@NhFr{6rrF
z54MfW|6w`vuvO`i?}*_3_s+3}{TzQIioS<4rg|0Mhq}zn%+XoI;g%d1a$!#J@%#TF
zsl(b{;n*w}G2)D*tO{rL>_^U(nY9pJI7;qfP`so6u89Q<9{-5?(UjyA!IbQZVk>P~
zQX16(yWX5wbByaW9y;dmFZ?&6uzR;}o+N!r$<@3hQ&y3ar1%?a-rPYv<Wse3rr#&o
zHWY(!*&;<QtU0%|VM~GAU+#@cf~?&>vA3CqHQ`L+a6(ytaxu3vk-oc?&P(II=eBLe
zAJHB@6=~zO(CV{Wk-T?>Tl!0k7u~+*VFAZSdfBf?_gp6Z*;XE(S{blU7wGh?yA_Y{
zb?ie%qZuwiW^D+siT19I_Nz5LODGSH9T_!EHCcKvbKQAh!Fb19(k+ipkU@~4MufZ>
z2mJb1mt^Pba(O$K<9_G*c*J4{eBgOxE5K`-^F#7T-e~{}Q(h4sa%d%SVRu6j94ARf
z{7oOT*a?SxkU<W6ojc9z{Oa>bCHmo0OBk1S#KEtp+m2^3C9`eMQX^mT0fZnSyA6;-
zn0O%uTvZmZeeyZFE0$E%3P!+P-jlM&8>}P8#e)I{lYrN>ObC3UPy~K*wYg&m<izi5
z_ChJRRZbCXWgj^HrtByX9RVBu&FA6xOvI@`dIYOA>5j(1|INApmTg~zxH+SJ>5Tg6
zW!oiNbKG@RKn1Rt2p=>cxp4t~UQ_yt@h3bY5FJ2eaODKuiSj(Lo<V}q^E%xBXrVA9
zK3GEfO(TY5Sv$NU21m=1w#6inuwd@w4i8@iF|L{)gmNoKO6i3FoWV7zwe9}LP$YQg
zGAU4Q$HLt6SgOq6nS9L$5vzR(1iK`VZkmyQ_>X}I_$BC}H}C-)YrPSU0A8GmX48a@
z0G!wW{8_@%J>-~hM>4I-1opoO>Fdh84&HElFz^j=jNY-g$)W`0ww;ar&>ub0ZD{lp
zD0=4^iI;(6GYxF(C&*LDtWHCtCjvnNgH;C{@&C6;cSD>JzN}{6?e<+o6q6qi<Q+-m
z>mv$bV40tR!S2y;VxyJfcrX-ic%1;c*w%ev!+Ky@gBBvDXtBo90@Fq6Bs}<s9C?KU
z7Xmo{&&~wL!H|+*AbXvW#_@gS!6U<Xuj8Xd;}~9F0|{&xGOU^QiWLSZ0}lBjr8m3$
z7MxOgIQ%YHx;4`=;G?hjp~xQ5S27y@1Shgk5Zl0FG5@#N2KsIX1cMg>QJ*x%#K03{
z#C3wy*Re0;H<SR{L^9en(S1y`!wJJ!_XYROsPu#LxNmL(df?~wkRMGI6i0x`vIIZ#
zK3?C^mDeN~x#$@6&IOiA1R{a}UVT4N2TdRA##ylRSlnZx9bF-sAg-L`srPF-PhZb`
z7c%@bkJ!=b4X@${BMaM9_ah&FUnvsOt<5N)B_%f+LbA#X`o`mI?(Pk#CRwryjV`D*
z-}bxe3MuaSnBePZf$)N&?(1qNPW&#B`?&EA@?9|S%35+Y8~31cuiYh%v8@7eS##BL
zWmci0#;A5s-<wNO?}7o{W8n;<7A-8Ipk=ToiBPuSA5^UpfmT>V&Mfz4j#g}aO(JTw
zK~hU}_Ia!FX`v5qZe?pJ^Jj0dE^Ft5O1#uE?d0tHKR@S#F`|8Tw`h;x>i@7aCDDsQ
zNMC5K`04&(rE`lL6!$LK`q=I<bLNQYg$PZtv8#VbgBm?wv}`J-5b3}M{0bs?`Z^W#
z>bsvCLponLl_q$^>3tmXvh*OLKYBVER#h1R$xFF00&c~+Gl_c^-JYvl*2>R+FoQzI
zoOcNS&iZt$cY~pFhh6rT;D@T~7NA^;R`ey*YR7&pP&&K9ctSt#!OW#}8#`xqRo+iA
z*e_^@@Jn-s1orN&lFvGQ=LjzN0Yxx!&d#72hFdHFcu1q|C5+Y%wDjbFxl3E!0e~tr
zYkaj3N+L_zT@Pl=cdaM$erLM+xn}S4sD$m9cf4_<ypm~Scp?F4e-V!^ns+LBN~@O>
zz2W?M`CFb%b8o9_Y0f6+%oos)6?UEPiwx~#U(3Zv?3NrP)EAe5qeuK}@U;Fe6X*vD
zBTWu$gxZ}3kK3J~0=+tPzf(9=Q$u*cl>`Vq*3o4D9)JG3C=as(DQ}B;ijX!{{^8mu
z#tM?Gmr{$wBwR$@RCGo3RzIdLejhGsdQVFuwk2P<lh=X8X-5_R=y^DsR=@9lZ_FJI
zki4SOs=-&8ti(~AGrv>xf+~puDquoF>9A7q&P%VwKx<D@(DZJevjxDU#I;P9$%?hz
zl9ms5fPin9wRqT?m)^?IQ<?K9$ROhgbF~X9CW?-DaFmWf19CB>;EmM20KNadj)T~w
zw3Qkr>1x6Z&Yl>X06*<L2fM>Y%wh*q>@#-Egy%tRgtD@!woV`!r)dgGbEQk$d3R1I
z<txXjcn;8t5uM<;U8)d2DKZeWcynWN(Wb?0K=GwyWDRJZ*aB@yj407o^$Y6a?ctPn
z{K2b^zC>9}*V_kW#)2JEKwW?L@y4V|3lO$>GvDza+K!7rkYj;bP28%sj~-9J;VwpF
z3t^b|hobo&kgWeG5;wft_{-><Sg8J`mF9H1UPY<DpvFjzE5Utn1}Vj@tfH_sv(b7Z
zmVgCAw*-{IZ2SCIJ1P{B6~nK=@s-NYNQL+-IRj!Ppq74&ZOQf?CMk8{*=3j0?An<o
zbrpVhc4N&qH#O2-U6iKw6jL=#G*gk7pgLV{2eiX!Gk)tvYd*Z{Ay|TP(TOcI*c`zw
z#t?xf2Hp^Zi8qcMoJpeiEI+|%xn<Y4Nwh<gldb9*l<urI2Do`N*qM2@zKj^2=F8E+
zz>8yg(EVZ1s1w&r$mz0zrNw4i)Z%xjnNpZ=k4r-<bk*e=R9jQx23LUE8OL`3(M{uT
zUYm>U<wJR-5bCp0sfj&<`Xxu6S_Vq^-Nxqt!4Z6&kjTQ8FJBf_?bDCS)1fwEF!k7j
z6z#DZfGYs|U2=H*^B-;Njg5?=h0h@0<xJJ2c29DTN(yD{d`^tp$s2Lpu=|A?AJW3f
zHyH1(AD=M62r#MkO{g5Wu;%F0WxfQesZ|SYqI7W<r)%fs#yJ=o4~wcpFW>u5Mb%=r
zuJiBHIOzh`!}otF+aAe8RStmL?cO}vKX&(!Y!BODm>CcPapv#Tn-FJ&dVm3_N<j^V
zopDnp#DA+Ee#a3n&?ov~K?XF(Pw5)!FpI=StIKA4E~_q8&|w7JpxC`}ZgAC)*2YPm
zs{FlYogC%r^r<2{4senae)UxxK^ydpo`M;D=r%pbCLMWP2Yg@f0z%%&`~9md4^)%W
z)Qm2XtyqIfWRuj6T5qyXQiBp%t+Hj2lJ}m`v5rd2OS?gBRG`fLLi*6_Y+ZrPXHP6D
zHr8dSzU>$;X**eejGkuBVdtk1t*i+`sN~37O!4e4c2=Eo<H7>57R=*V3qlq$8t+Ha
z_>YXnF%S&f1E!}xtX9&u2us`xT5kQhxY_=zSzYywN!XLP^Q6dD%#V6|Z!>jrC7Meo
z4W?}N9+Mba?mQ~%?^|VG>dk7=XZ^&NcF!YzuOHv}LI3>#3I`|ScJOXs#kq8iMFKgf
zW4pg^T%PB;Odn0OT+B?fJfV5jnk1ZQ`1}cfbXe-&1I7S|f&C6ErRZ!Uw+qMCQ-0_X
zYxiMElwD&5cgc!SHZyjq1ZwZxaLiOQpDdkk(Pic$j502q5q_V=YpT<-y*&|9&JEfm
zHXK$$RkN>CQHf@xg8p$|=lP>T{sjBpV6|veSf&q-A*dcU=w&95Vr!E@wh9!?DRE_R
zU3*GSPFH__+GoB2w4pRPfG#^zZ_10S!0UTA^z!O4tg=9x=S3xUl7E<Dus1&i2z>>{
z`Y;0O-eH%TXk6?`czj)Sbm19jpoc2kVt($}COGTWVhi{BkQ=d?n1U*puJtv8L7qmb
z{n|FSBBST*`A`8kXsA?8m+5KsSXqHuID3ujsSOQLg#+V5=i~JhDl`iRGh;O1l0zLf
zW}R6V#XSnHIqX*SWe!<r>Img4Ilz7DJ-}>MY4UN7WEh-)1C}FK!OnW@1|Bc04hB4l
zQ*T&u@=WI_7w4X482l*JXS&{nl<Xi%z24Ytd_DL3HL3Y}ATAO1ra@!*Vvz}zebl|H
zo$rO)E3A0Z)ywW@C#~CzopPRj5tWGa_2X+7jz2f+A`n4C6LNV5G+mfzf%@x+qJ%pX
z7u5949^ICD*q-R|tbpy3ID|^S?Z1A{3;$`)P6MY`5cR}!do>jtBA@`?q02=6Hj<o>
zjpad4g<)#couuh2W67EU_ctigleD+<Mg+iX9-rLG(o+ef;Cwc*Dda<4I-6qU5z%gV
zIs#voE-L7)noKOv?(bL+?9rsc&;WZ3>uWqW@s2+_x`H`@Z+oN01Lz-RGHbDDi}lrm
zy(g0gPa)bZBeuQ+4Dyl%{I{6(k&*C%L%T+U{PT9LSS+OX^X-{|KfO4vv;JQ)#HDfn
zt=Q&oNDdAxgEAvnbqF%BM|USw0^T_P!-3L*uL<JfuQBO_?T}L)sj~mQeCOZpm<wcs
z+kLbQc=U!-Tce&QZ93<~6oEm1-x5M6@&?ohsW?{rmJ*&1!gNIkM@b<iFQ(J^Ptr#w
z3Dk;lp_>fD9{`zP$BF-(0{)kZlOxg|=_H#kKxE0`Ty{(%Ao12I7(}#!Fpw>4C|Ke)
z{PHA(;@(O|7d}Y3|36L-b>iQ$y1$o^fH|x;b^j47KiK}`0SS7BkR!nrgz^ZC>z)o}
z<~`h6`9{G%2g`M$c^@(bQ}cZ(k_1!CJmre^Gwws%oHBB=|3pC+Q1u~AdW9X|iwx58
zD}rUmk!86+Fqb!%RdN4m91!piknEE`aL4KgVTzio77|Lw<ow?U{x3=Ye;1l6d^z4J
zYg1B%WHwM95K+}mWyZq6!Ew9nf%tDQN2U$bClQbR@2=eepu<QoIACE7h2|hSItRdY
zB*fv>Z$5M`NNYT43Me>Mo8zlz7cW2hUdIwC_Xv2dzVMto<+0tITj($}@EI(<_Hazw
WPv8q11in21e&nwyOJ_^o_5L4G;%X28

literal 0
HcmV?d00001

diff --git a/doc/drawers/advanced_search_syntax.md b/doc/drawers/advanced_search_syntax.md
index 3c2ce212b99..7556c8bdfaf 100644
--- a/doc/drawers/advanced_search_syntax.md
+++ b/doc/drawers/advanced_search_syntax.md
@@ -3,39 +3,42 @@ stage: Data Stores
 group: Global Search
 info: "To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/product/ux/technical-writing/#assignments"
 type: drawer
-source: /doc/user/search/global_search/advanced_search_syntax.md
+source: /doc/user/search/advanced_search.md
 ---
 
 # Search tips
 
 <!-- markdownlint-disable -->
 
-| Use  | Description | Example |
-|------|-------------|---------|
-| `"`                 | Exact search | [`"gem sidekiq"`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=%22gem+sidekiq%22)                             |
-| <code>&#124;</code> | Or           | [<code>display &#124; banner</code>](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+%7C+banner)         |
-| `+`                 | And          | [`display +banner`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=display+%2Bbanner&snippets=) |
-| `-`                 | Exclude      | [`display -banner`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+-banner)                             |
-| `*`                 | Partial      | [`bug error 50*`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=bug+error+50%2A&snippets=)     |
-| `\`                 | Escape       | [`\*md`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=%5C*md&group_id=9970&project_id=278964)                       |
+| Syntax        | Description                     | Example                                                                                                                                              |
+|--------------|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `"`          | Exact search                    | [`"gem sidekiq"`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=%22gem+sidekiq%22)                                 |
+| <code>&#124;</code> | Or                       | [<code>display &#124; banner</code>](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+%7C+banner)                                |
+| `+`          | And                             | [`display +banner`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=display+%2Bbanner&snippets=)       |
+| `-`          | Exclude                         | [`display -banner`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+-banner)                                   |
+| `*`          | Partial                         | [`bug error 50*`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=bug+error+50%2A&snippets=)         |
+| `\`          | Escape                          | [`\*md`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=%5C*md&group_id=9970&project_id=278964)                  |
+| `#`          | Issue ID                        | [`#23456`](https://gitlab.com/search?snippets=&scope=issues&repository_ref=&search=%2323456&group_id=9970&project_id=278964)               |
+| `!`          | Merge request ID                | [`!23456`](https://gitlab.com/search?snippets=&scope=merge_requests&repository_ref=&search=%2123456&group_id=9970&project_id=278964)       |
 
 ## Code search
 
-| Use  | Description | Example |
-|------|-------------|---------|
-| `filename:`  | Filename                        | [`filename:*spec.rb`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=filename%3A*spec.rb&group_id=9970&project_id=278964)    |
-| `path:`      | Repository location             | [`path:spec/workers/`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=path%3Aspec%2Fworkers&snippets=) |
-| `extension:` | File extension, without the `.` | [`extension:js`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=extension%3Ajs&snippets=)              |
-| `blob:`      | Git object ID                   | [`blob:998707*`](https://gitlab.com/search?snippets=false&scope=blobs&repository_ref=&search=blob%3A998707*&group_id=9970)                           |
+| Syntax        | Description                     | Example                                                                                                                                              |
+|--------------|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `filename:`  | Filename                        | [`filename:*spec.rb`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=filename%3A*spec.rb&group_id=9970&project_id=278964)     |
+| `path:`      | Repository location             | [`path:spec/workers/`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=path%3Aspec%2Fworkers&snippets=)   |
+| `extension:` | File extension without `.`      | [`extension:js`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=extension%3Ajs&snippets=)          |
+| `blob:`      | Git object ID                   | [`blob:998707*`](https://gitlab.com/search?snippets=false&scope=blobs&repository_ref=&search=blob%3A998707*&group_id=9970)                       |
 
-`extension` and `blob` return exact matches only.
+`extension:` and `blob:` return exact matches only.
 
 ## Examples
 
-| Use  | Description |
-|------|-------------|
-| [`rails -filename:gemfile.lock`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=rails+-filename%3Agemfile.lock&snippets=)              | Show _rails_ in all files except the _`gemfile.lock`_ file.          |
-| [`RSpec.describe Resolvers -*builder`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=RSpec.describe+Resolvers+-*builder)                              | Show all _RSpec.describe Resolvers_ that don't start with _builder_. |
-| [<code>bug &#124; (display +banner)</code>](https://gitlab.com/search?snippets=&scope=issues&repository_ref=&search=bug+%7C+%28display+%2Bbanner%29&group_id=9970&project_id=278964)  | Show _bug_ **or** _display_ **and** _banner_.                        |
+| Query                                                                                                                                                                              | Description                                                          |
+|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------|
+| [`rails -filename:gemfile.lock`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=rails+-filename%3Agemfile.lock&snippets=)              | Returns `rails` in all files except the `gemfile.lock` file.          |
+| [`RSpec.describe Resolvers -*builder`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=RSpec.describe+Resolvers+-*builder)                              | Returns `RSpec.describe Resolvers` that does not start with `builder`. |
+| [<code>bug &#124; (display +banner)</code>](https://gitlab.com/search?snippets=&scope=issues&repository_ref=&search=bug+%7C+%28display+%2Bbanner%29&group_id=9970&project_id=278964)  | Returns `bug` or both `display` and `banner`.                        |
+| [<code>helper -extension:yml -extension:js</code>](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=helper+-extension%3Ayml+-extension%3Ajs&snippets=)  | Returns `helper` in all files except files with a `.yml` or `.js` extension.                        |
 
 <!-- markdownlint-enable -->
diff --git a/doc/integration/advanced_search/elasticsearch_troubleshooting.md b/doc/integration/advanced_search/elasticsearch_troubleshooting.md
index 7136c273a2a..aa6613d6f1a 100644
--- a/doc/integration/advanced_search/elasticsearch_troubleshooting.md
+++ b/doc/integration/advanced_search/elasticsearch_troubleshooting.md
@@ -212,8 +212,8 @@ More [complex Elasticsearch API calls](https://www.elastic.co/guide/en/elasticse
 
 If the results:
 
-- Sync up, please check that you are using [supported syntax](../../user/search/global_search/advanced_search_syntax.md). Note that Advanced Search does not support [exact substring matching](https://gitlab.com/gitlab-org/gitlab/-/issues/325234).
-- Do not match up, this indicates a problem with the documents generated from the project. It is best to [re-index that project](../advanced_search/elasticsearch.md#indexing-a-range-of-projects-or-a-specific-project)
+- Sync up, check that you are using [supported syntax](../../user/search/advanced_search.md#syntax). Advanced Search does not support [exact substring matching](https://gitlab.com/gitlab-org/gitlab/-/issues/325234).
+- Do not match up, this indicates a problem with the documents generated from the project. It is best to [re-index that project](../advanced_search/elasticsearch.md#indexing-a-range-of-projects-or-a-specific-project).
 
 NOTE:
 The above instructions are not to be used for scenarios that only index a [subset of namespaces](elasticsearch.md#limit-the-number-of-namespaces-and-projects-that-can-be-indexed).
diff --git a/doc/user/project/integrations/webhooks.md b/doc/user/project/integrations/webhooks.md
index 66e877e6590..ef6957ac2d8 100644
--- a/doc/user/project/integrations/webhooks.md
+++ b/doc/user/project/integrations/webhooks.md
@@ -119,9 +119,10 @@ NOTE:
 Testing is not supported for some types of events for project and groups webhooks.
 Read more in [issue 379201](https://gitlab.com/gitlab-org/gitlab/-/issues/379201).
 
-Prerequisite:
+Prerequisites:
 
-- To test group webhooks, you must have administrator access for your instance.
+- To test project webhooks, you must have at least the Maintainer role for the project.
+- To test group webhooks, you must have the Owner role for the group.
 
 To test a webhook:
 
@@ -245,9 +246,10 @@ Webhook requests to your endpoint include the following headers:
 GitLab records the history of each webhook request.
 You can view requests made in the last 2 days in the **Recent events** table.
 
-Prerequisite:
+Prerequisites:
 
-- To troubleshoot group webhooks, you must have administrator access for your instance.
+- To troubleshoot project webhooks, you must have at least the Maintainer role for the project.
+- To troubleshoot group webhooks, you must have the Owner role for the group.
 
 To view the table:
 
diff --git a/doc/user/search/advanced_search.md b/doc/user/search/advanced_search.md
index 86b59572e77..925fc7e6036 100644
--- a/doc/user/search/advanced_search.md
+++ b/doc/user/search/advanced_search.md
@@ -37,9 +37,39 @@ You can use Advanced Search in:
 
 ## Syntax
 
-See [Advanced Search syntax](global_search/advanced_search_syntax.md) for more information.
+Advanced Search uses [Elasticsearch syntax](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-simple-query-string-query.html#simple-query-string-syntax). The syntax supports both exact and fuzzy search queries.
 
-## Search by ID
+<!-- markdownlint-disable -->
 
-- To search by issue ID, use the `#` prefix followed by the issue ID (for example, [`#23456`](https://gitlab.com/search?snippets=&scope=issues&repository_ref=&search=%2323456&group_id=9970&project_id=278964)).
-- To search by merge request ID, use the `!` prefix followed by the merge request ID (for example, [`!23456`](https://gitlab.com/search?snippets=&scope=merge_requests&repository_ref=&search=%2123456&group_id=9970&project_id=278964)).
+| Syntax        | Description                     | Example                                                                                                                                              |
+|--------------|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `"`          | Exact search                    | [`"gem sidekiq"`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=%22gem+sidekiq%22)                                 |
+| <code>&#124;</code> | Or                       | [<code>display &#124; banner</code>](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+%7C+banner)                                |
+| `+`          | And                             | [`display +banner`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=display+%2Bbanner&snippets=)       |
+| `-`          | Exclude                         | [`display -banner`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+-banner)                                   |
+| `*`          | Partial                         | [`bug error 50*`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=bug+error+50%2A&snippets=)         |
+| `\`          | Escape                          | [`\*md`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=%5C*md&group_id=9970&project_id=278964)                  |
+| `#`          | Issue ID                        | [`#23456`](https://gitlab.com/search?snippets=&scope=issues&repository_ref=&search=%2323456&group_id=9970&project_id=278964)               |
+| `!`          | Merge request ID                | [`!23456`](https://gitlab.com/search?snippets=&scope=merge_requests&repository_ref=&search=%2123456&group_id=9970&project_id=278964)       |
+
+### Code search
+
+| Syntax        | Description                     | Example                                                                                                                                              |
+|--------------|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `filename:`  | Filename                        | [`filename:*spec.rb`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=filename%3A*spec.rb&group_id=9970&project_id=278964)     |
+| `path:`      | Repository location             | [`path:spec/workers/`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=path%3Aspec%2Fworkers&snippets=)   |
+| `extension:` | File extension without `.`      | [`extension:js`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=extension%3Ajs&snippets=)          |
+| `blob:`      | Git object ID                   | [`blob:998707*`](https://gitlab.com/search?snippets=false&scope=blobs&repository_ref=&search=blob%3A998707*&group_id=9970)                       |
+
+`extension:` and `blob:` return exact matches only.
+
+### Examples
+
+| Query                                                                                                                                                                              | Description                                                          |
+|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------|
+| [`rails -filename:gemfile.lock`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=rails+-filename%3Agemfile.lock&snippets=)              | Returns `rails` in all files except the `gemfile.lock` file.          |
+| [`RSpec.describe Resolvers -*builder`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=RSpec.describe+Resolvers+-*builder)                              | Returns `RSpec.describe Resolvers` that does not start with `builder`. |
+| [<code>bug &#124; (display +banner)</code>](https://gitlab.com/search?snippets=&scope=issues&repository_ref=&search=bug+%7C+%28display+%2Bbanner%29&group_id=9970&project_id=278964)  | Returns `bug` or both `display` and `banner`.                        |
+| [<code>helper -extension:yml -extension:js</code>](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=helper+-extension%3Ayml+-extension%3Ajs&snippets=)  | Returns `helper` in all files except files with a `.yml` or `.js` extension.                        |
+
+<!-- markdownlint-enable -->
diff --git a/doc/user/search/global_search/advanced_search_syntax.md b/doc/user/search/global_search/advanced_search_syntax.md
index 1e64bd4b22a..c34c5c0c8fc 100644
--- a/doc/user/search/global_search/advanced_search_syntax.md
+++ b/doc/user/search/global_search/advanced_search_syntax.md
@@ -1,52 +1,11 @@
 ---
-stage: Data Stores
-group: Global Search
-info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/product/ux/technical-writing/#assignments
+redirect_to: '../advanced_search.md'
+remove_date: '2023-02-02'
 ---
 
-# Advanced Search syntax **(PREMIUM)**
+This document was moved to [another location](../advanced_search.md).
 
-With [Advanced Search](../advanced_search.md), you can perform a thorough
-search of your entire GitLab instance.
-
-The Advanced Search syntax supports fuzzy or exact search queries with prefixes,
-boolean operators, and more. Advanced Search uses
-[Elasticsearch's syntax](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-simple-query-string-query.html#simple-query-string-syntax).
-
-WARNING:
-Advanced Search searches default project branches only.
-
-## General search
-
-<!-- markdownlint-disable -->
-
-| Use | Description  | Example                                                                                                                                        |
-|-----|--------------|-----------------------------------------------------------------------------------------------------------------------------------------------|
-| `"` | Exact search | [`"gem sidekiq"`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=%22gem+sidekiq%22)                   |
-| <code>&#124;</code> | Or | [<code>display &#124; banner</code>](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+%7C+banner)          |
-| `+` | And          | [`display +banner`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=display+%2Bbanner&snippets=) |
-| `-` | Exclude      | [`display -banner`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=display+-banner)                              |
-| `*` | Partial      | [`bug error 50*`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=bug+error+50%2A&snippets=)       |
-| <code>&#92;</code> | Escape       | [`\*md`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=%5C*md&group_id=9970&project_id=278964)         |
-
-## Code search
-
-| Use          | Description                     | Example                                                                                                                                              |
-|--------------|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------|
-| `filename:`  | Filename                        | [`filename:*spec.rb`](https://gitlab.com/search?snippets=&scope=blobs&repository_ref=&search=filename%3A*spec.rb&group_id=9970&project_id=278964)    |
-| `path:`      | Repository location             | [`path:spec/workers/`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=path%3Aspec%2Fworkers&snippets=) |
-| `extension:` | File extension, without the `.` | [`extension:js`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=extension%3Ajs&snippets=)              |
-| `blob:`      | Git object ID                   | [`blob:998707*`](https://gitlab.com/search?snippets=false&scope=blobs&repository_ref=&search=blob%3A998707*&group_id=9970)                           |
-
-`extension` and `blob` return exact matches only.
-
-## Examples
-
-| Example                                                                                                                                                                              | Description                                                          |
-|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------|
-| [`rails -filename:gemfile.lock`](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=rails+-filename%3Agemfile.lock&snippets=)              | Show _rails_ in all files except the _`gemfile.lock`_ file.          |
-| [`RSpec.describe Resolvers -*builder`](https://gitlab.com/search?group_id=9970&project_id=278964&scope=blobs&search=RSpec.describe+Resolvers+-*builder)                              | Show all _RSpec.describe Resolvers_ that don't start with _builder_. |
-| [<code>bug &#124; (display +banner)</code>](https://gitlab.com/search?snippets=&scope=issues&repository_ref=&search=bug+%7C+%28display+%2Bbanner%29&group_id=9970&project_id=278964)  | Show _bug_ **or** _display_ **and** _banner_.                        |
-| [<code>helper -extension:yml -extension:js</code>](https://gitlab.com/search?group_id=9970&project_id=278964&repository_ref=&scope=blobs&search=helper+-extension%3Ayml+-extension%3Ajs&snippets=)  | Show _helper_ in all files, except for files with _`.yml`_ **or** _`.js`_ extensions.                        |
-
-<!-- markdownlint-enable -->
+<!-- This redirect file can be deleted after <2023-02-02>. -->
+<!-- Redirects that point to other docs in the same project expire in three months. -->
+<!-- Redirects that point to docs in a different project or site (for example, link is not relative and starts with `https:`) expire in one year. -->
+<!-- Before deletion, see: https://docs.gitlab.com/ee/development/documentation/redirects.html -->
diff --git a/lib/api/helpers/label_helpers.rb b/lib/api/helpers/label_helpers.rb
index 8572cc89e71..b3ba962666f 100644
--- a/lib/api/helpers/label_helpers.rb
+++ b/lib/api/helpers/label_helpers.rb
@@ -137,9 +137,10 @@ module API
       end
 
       def create_service_params(parent)
-        if parent.is_a?(Project)
+        case parent
+        when Project
           { project: parent }
-        elsif parent.is_a?(Group)
+        when Group
           { group: parent }
         else
           raise TypeError, 'Parent type is not supported'
diff --git a/lib/api/settings.rb b/lib/api/settings.rb
index 8c8b6c0a1ba..26b7e58bc7a 100644
--- a/lib/api/settings.rb
+++ b/lib/api/settings.rb
@@ -53,6 +53,7 @@ module API
       optional :default_project_visibility, type: String, values: Gitlab::VisibilityLevel.string_values, desc: 'The default project visibility'
       optional :default_projects_limit, type: Integer, desc: 'The maximum number of personal projects'
       optional :default_snippet_visibility, type: String, values: Gitlab::VisibilityLevel.string_values, desc: 'The default snippet visibility'
+      optional :disable_admin_oauth_scopes, type: Boolean, desc: 'Stop administrators from connecting to non-trusted OAuth applications.'
       optional :disable_feed_token, type: Boolean, desc: 'Disable display of RSS/Atom and Calendar `feed_tokens`'
       optional :disabled_oauth_sign_in_sources, type: Array[String], coerce_with: Validations::Types::CommaSeparatedToArray.coerce, desc: 'Disable certain OAuth sign-in sources'
       optional :domain_denylist_enabled, type: Boolean, desc: 'Enable domain denylist for sign ups'
diff --git a/lib/gitlab/ci/ansi2html.rb b/lib/gitlab/ci/ansi2html.rb
index 2ab702aa4f9..19819ff7275 100644
--- a/lib/gitlab/ci/ansi2html.rb
+++ b/lib/gitlab/ci/ansi2html.rb
@@ -312,9 +312,10 @@ module Gitlab
 
           normalized_section = section_to_class_name(section)
 
-          if action == "start"
+          case action
+          when "start"
             handle_section_start(normalized_section, timestamp)
-          elsif action == "end"
+          when "end"
             handle_section_end(normalized_section, timestamp)
           end
         end
diff --git a/lib/gitlab/ci/ansi2json/converter.rb b/lib/gitlab/ci/ansi2json/converter.rb
index ddf40296809..78f6c5bf0aa 100644
--- a/lib/gitlab/ci/ansi2json/converter.rb
+++ b/lib/gitlab/ci/ansi2json/converter.rb
@@ -107,9 +107,10 @@ module Gitlab
 
           section_name = sanitize_section_name(section)
 
-          if action == 'start'
+          case action
+          when 'start'
             handle_section_start(scanner, section_name, timestamp, options)
-          elsif action == 'end'
+          when 'end'
             handle_section_end(scanner, section_name, timestamp)
           else
             raise 'unsupported action'
diff --git a/lib/gitlab/ci/build/image.rb b/lib/gitlab/ci/build/image.rb
index 7dc375e05eb..84f8eae8deb 100644
--- a/lib/gitlab/ci/build/image.rb
+++ b/lib/gitlab/ci/build/image.rb
@@ -24,10 +24,11 @@ module Gitlab
         end
 
         def initialize(image)
-          if image.is_a?(String)
+          case image
+          when String
             @name = image
             @ports = []
-          elsif image.is_a?(Hash)
+          when Hash
             @alias = image[:alias]
             @command = image[:command]
             @entrypoint = image[:entrypoint]
diff --git a/lib/gitlab/identifier.rb b/lib/gitlab/identifier.rb
index d5f94ad04f1..08d44184bb6 100644
--- a/lib/gitlab/identifier.rb
+++ b/lib/gitlab/identifier.rb
@@ -5,10 +5,11 @@
 module Gitlab
   module Identifier
     def identify(identifier)
-      if identifier =~ /\Auser-\d+\Z/
+      case identifier
+      when /\Auser-\d+\Z/
         # git push over http
         identify_using_user(identifier)
-      elsif identifier =~ /\Akey-\d+\Z/
+      when /\Akey-\d+\Z/
         # git push over ssh
         identify_using_ssh_key(identifier)
       end
diff --git a/lib/gitlab/issues/rebalancing/state.rb b/lib/gitlab/issues/rebalancing/state.rb
index abb50281f7a..edda40ae587 100644
--- a/lib/gitlab/issues/rebalancing/state.rb
+++ b/lib/gitlab/issues/rebalancing/state.rb
@@ -136,9 +136,10 @@ module Gitlab
           current_rebalancing_containers.each do |string|
             container_type, container_id = string.split('/', 2).map(&:to_i)
 
-            if container_type == NAMESPACE
+            case container_type
+            when NAMESPACE
               namespace_ids << container_id
-            elsif container_type == PROJECT
+            when PROJECT
               project_ids << container_id
             end
           end
diff --git a/lib/gitlab/pagination/gitaly_keyset_pager.rb b/lib/gitlab/pagination/gitaly_keyset_pager.rb
index d4de2791195..6235874132f 100644
--- a/lib/gitlab/pagination/gitaly_keyset_pager.rb
+++ b/lib/gitlab/pagination/gitaly_keyset_pager.rb
@@ -35,11 +35,12 @@ module Gitlab
       def keyset_pagination_enabled?(finder)
         return false unless params[:pagination] == "keyset"
 
-        if finder.is_a?(BranchesFinder)
+        case finder
+        when BranchesFinder
           Feature.enabled?(:branch_list_keyset_pagination, project)
-        elsif finder.is_a?(TagsFinder)
+        when TagsFinder
           true
-        elsif finder.is_a?(::Repositories::TreeFinder)
+        when ::Repositories::TreeFinder
           Feature.enabled?(:repository_tree_gitaly_pagination, project)
         else
           false
@@ -49,11 +50,12 @@ module Gitlab
       def paginate_first_page?(finder)
         return false unless params[:page].blank? || params[:page].to_i == 1
 
-        if finder.is_a?(BranchesFinder)
+        case finder
+        when BranchesFinder
           Feature.enabled?(:branch_list_keyset_pagination, project)
-        elsif finder.is_a?(TagsFinder)
+        when TagsFinder
           true
-        elsif finder.is_a?(::Repositories::TreeFinder)
+        when ::Repositories::TreeFinder
           Feature.enabled?(:repository_tree_gitaly_pagination, project)
         else
           false
diff --git a/lib/gitlab/sidekiq_middleware/duplicate_jobs/duplicate_job.rb b/lib/gitlab/sidekiq_middleware/duplicate_jobs/duplicate_job.rb
index f452abe8d13..a27f9a7a347 100644
--- a/lib/gitlab/sidekiq_middleware/duplicate_jobs/duplicate_job.rb
+++ b/lib/gitlab/sidekiq_middleware/duplicate_jobs/duplicate_job.rb
@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'digest'
+require 'msgpack'
 
 module Gitlab
   module SidekiqMiddleware
diff --git a/lib/gitlab/utils.rb b/lib/gitlab/utils.rb
index 761cdf25765..d3055569ece 100644
--- a/lib/gitlab/utils.rb
+++ b/lib/gitlab/utils.rb
@@ -167,9 +167,10 @@ module Gitlab
     end
 
     def deep_indifferent_access(data)
-      if data.is_a?(Array)
+      case data
+      when Array
         data.map(&method(:deep_indifferent_access))
-      elsif data.is_a?(Hash)
+      when Hash
         data.with_indifferent_access
       else
         data
@@ -177,9 +178,10 @@ module Gitlab
     end
 
     def deep_symbolized_access(data)
-      if data.is_a?(Array)
+      case data
+      when Array
         data.map(&method(:deep_symbolized_access))
-      elsif data.is_a?(Hash)
+      when Hash
         data.deep_symbolize_keys
       else
         data
diff --git a/lib/gitlab/utils/strong_memoize.rb b/lib/gitlab/utils/strong_memoize.rb
index 50b8428113d..cb3c8f181f9 100644
--- a/lib/gitlab/utils/strong_memoize.rb
+++ b/lib/gitlab/utils/strong_memoize.rb
@@ -88,9 +88,10 @@ module Gitlab
       #
       # Depending on a type ensure that there's a single memory allocation
       def ivar(name)
-        if name.is_a?(Symbol)
+        case name
+        when Symbol
           name.to_s.prepend("@").to_sym
-        elsif name.is_a?(String)
+        when String
           :"@#{name}"
         else
           raise ArgumentError, "Invalid type of '#{name}'"
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 847a020aeba..133b3505e1b 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -3451,6 +3451,9 @@ msgstr ""
 msgid "Administrators"
 msgstr ""
 
+msgid "Administrators are not permitted to connect applications with these scopes: %{code_open}api%{code_close}, %{code_open}read_api%{code_close}, %{code_open}read_repository%{code_close}, %{code_open}write_repository%{code_close}, %{code_open}write_registry%{code_close}, %{code_open}read_registry%{code_close}, and %{code_open}sudo%{code_close}. To permit this, change the %{code_open}disable_admin_oauth_scopes%{code_close} setting using the API."
+msgstr ""
+
 msgid "Admin|Additional users must be reviewed and approved by a system administrator. Learn more about %{help_link_start}usage caps%{help_link_end}."
 msgstr ""
 
@@ -17175,6 +17178,9 @@ msgstr ""
 msgid "For more information, see the File Hooks documentation."
 msgstr ""
 
+msgid "Forbidden"
+msgstr ""
+
 msgid "Forgot your password?"
 msgstr ""
 
diff --git a/qa/qa/git/repository.rb b/qa/qa/git/repository.rb
index f132d7b7885..35c5262e767 100644
--- a/qa/qa/git/repository.rb
+++ b/qa/qa/git/repository.rb
@@ -305,11 +305,12 @@ module QA
 
         prefix = "-o merge_request"
         opts.each_with_object([]) do |(key, value), options|
-          if value.is_a?(Array)
+          case value
+          when Array
             value.each do |item|
               options << "#{prefix}.#{key}=\"#{item}\""
             end
-          elsif value == true
+          when true
             options << "#{prefix}.#{key}"
           else
             options << "#{prefix}.#{key}=\"#{value}\""
diff --git a/qa/qa/scenario/bootable.rb b/qa/qa/scenario/bootable.rb
index 8eedfab3cff..c6050798e22 100644
--- a/qa/qa/scenario/bootable.rb
+++ b/qa/qa/scenario/bootable.rb
@@ -19,7 +19,8 @@ module QA
             options.to_a.each do |opt|
               # The argument for the --set-feature-flags option should look something like "flag1=enabled,flag2=disabled"
               # Here we translate that string into a hash, e.g.: { 'flag1' => 'enabled', 'flag2' => "disabled" }
-              if opt.name == :set_feature_flags
+              case opt.name
+              when :set_feature_flags
                 parser.on(opt.arg, opt.desc) do |flags|
                   value = flags.split(',').each_with_object({}) do |pair, hash|
                     flag_name, flag_value = pair.split('=')
@@ -31,7 +32,7 @@ module QA
                 end
 
                 next
-              elsif opt.name == :count_examples_only || opt.name == :test_metadata_only
+              when :count_examples_only, :test_metadata_only
                 parser.on(opt.arg, opt.desc) do |value|
                   QA::Runtime::Env.dry_run = true
                   Runtime::Scenario.define(opt.name, value)
diff --git a/spec/controllers/admin/integrations_controller_spec.rb b/spec/controllers/admin/integrations_controller_spec.rb
index 0e456858b49..e75f27589d7 100644
--- a/spec/controllers/admin/integrations_controller_spec.rb
+++ b/spec/controllers/admin/integrations_controller_spec.rb
@@ -19,7 +19,7 @@ RSpec.describe Admin::IntegrationsController do
 
   describe '#edit' do
     Integration.available_integration_names.each do |integration_name|
-      context "#{integration_name}" do
+      context integration_name.to_s do
         it 'successfully displays the template' do
           get :edit, params: { id: integration_name }
 
diff --git a/spec/controllers/oauth/authorizations_controller_spec.rb b/spec/controllers/oauth/authorizations_controller_spec.rb
index fb90a70d91d..5185aa64d9f 100644
--- a/spec/controllers/oauth/authorizations_controller_spec.rb
+++ b/spec/controllers/oauth/authorizations_controller_spec.rb
@@ -213,6 +213,75 @@ RSpec.describe Oauth::AuthorizationsController do
         expect(response).to redirect_to(new_user_session_path)
       end
     end
+
+    context 'when the user is admin' do
+      context 'when disable_admin_oauth_scopes is set' do
+        before do
+          stub_application_setting(disable_admin_oauth_scopes: true)
+          scopes = Doorkeeper::OAuth::Scopes.from_string('api')
+
+          allow(Doorkeeper.configuration).to receive(:scopes).and_return(scopes)
+        end
+
+        let(:user) { create(:user, :admin) }
+
+        it 'returns 200 and renders forbidden view' do
+          subject
+
+          expect(response).to have_gitlab_http_status(:ok)
+          expect(response).to render_template('doorkeeper/authorizations/forbidden')
+        end
+      end
+
+      context 'when disable_admin_oauth_scopes is set and the application is trusted' do
+        before do
+          stub_application_setting(disable_admin_oauth_scopes: true)
+
+          application.update!(trusted: true)
+        end
+
+        let(:application_scopes) { 'api' }
+        let(:user) { create(:user, :admin) }
+
+        it 'returns 200 and renders redirect view' do
+          subject
+
+          expect(response).to have_gitlab_http_status(:ok)
+          expect(response).to render_template('doorkeeper/authorizations/redirect')
+        end
+      end
+
+      context 'when disable_admin_oauth_scopes is disabled' do
+        before do
+          stub_application_setting(disable_admin_oauth_scopes: false)
+        end
+
+        let(:application_scopes) { 'api' }
+        let(:user) { create(:user, :admin) }
+
+        it 'returns 200 and renders new view' do
+          subject
+
+          expect(response).to have_gitlab_http_status(:ok)
+          expect(response).to render_template('doorkeeper/authorizations/new')
+        end
+      end
+    end
+
+    context 'when the user is not admin' do
+      context 'when disable_admin_oauth_scopes is enabled' do
+        before do
+          stub_application_setting(disable_admin_oauth_scopes: true)
+        end
+
+        it 'returns 200 and renders new view' do
+          subject
+
+          expect(response).to have_gitlab_http_status(:ok)
+          expect(response).to render_template('doorkeeper/authorizations/new')
+        end
+      end
+    end
   end
 
   describe 'POST #create' do
diff --git a/spec/controllers/projects/issues_controller_spec.rb b/spec/controllers/projects/issues_controller_spec.rb
index 3166b502741..8f26be442a7 100644
--- a/spec/controllers/projects/issues_controller_spec.rb
+++ b/spec/controllers/projects/issues_controller_spec.rb
@@ -1088,6 +1088,24 @@ RSpec.describe Projects::IssuesController do
       end
     end
 
+    context 'when trying to create a objective' do
+      it 'defaults to issue type' do
+        issue = post_new_issue(issue_type: 'objective')
+
+        expect(issue.issue_type).to eq('issue')
+        expect(issue.work_item_type.base_type).to eq('issue')
+      end
+    end
+
+    context 'when trying to create a key_result' do
+      it 'defaults to issue type' do
+        issue = post_new_issue(issue_type: 'key_result')
+
+        expect(issue.issue_type).to eq('issue')
+        expect(issue.work_item_type.base_type).to eq('issue')
+      end
+    end
+
     context 'when create service return an unrecoverable error with http_status' do
       let(:http_status) { 403 }
 
diff --git a/spec/features/boards/user_adds_lists_to_board_spec.rb b/spec/features/boards/user_adds_lists_to_board_spec.rb
index 26c310a6f56..a1728d066cd 100644
--- a/spec/features/boards/user_adds_lists_to_board_spec.rb
+++ b/spec/features/boards/user_adds_lists_to_board_spec.rb
@@ -35,9 +35,10 @@ RSpec.describe 'User adds lists', :js do
 
       set_cookie('sidebar_collapsed', 'true')
 
-      if board_type == :project
+      case board_type
+      when :project
         visit project_board_path(project, project_board)
-      elsif board_type == :group
+      when :group
         visit group_board_path(group, group_board)
       end
 
diff --git a/spec/features/commits_spec.rb b/spec/features/commits_spec.rb
index db841ffc627..97f820c1518 100644
--- a/spec/features/commits_spec.rb
+++ b/spec/features/commits_spec.rb
@@ -212,13 +212,13 @@ RSpec.describe 'Commits' do
     end
 
     context 'author is just a name' do
-      let(:author) { "#{author_commit.author_name}" }
+      let(:author) { author_commit.author_name.to_s }
 
       it_behaves_like 'show commits by author'
     end
 
     context 'author is just an email' do
-      let(:author) { "#{author_commit.author_email}" }
+      let(:author) { author_commit.author_email.to_s }
 
       it_behaves_like 'show commits by author'
     end
diff --git a/spec/features/issues/user_edits_issue_spec.rb b/spec/features/issues/user_edits_issue_spec.rb
index 4eecb63c47e..af1b94b925b 100644
--- a/spec/features/issues/user_edits_issue_spec.rb
+++ b/spec/features/issues/user_edits_issue_spec.rb
@@ -186,7 +186,7 @@ RSpec.describe "Issues > User edits issue", :js do
               visit project_issue_path(project, issue)
 
               page.within('.assignee') do
-                expect(page).to have_content "#{user.name}"
+                expect(page).to have_content user.name.to_s
 
                 click_link 'Edit'
                 click_link 'Unassigned'
@@ -261,7 +261,7 @@ RSpec.describe "Issues > User edits issue", :js do
               visit project_issue_path(project, issue)
 
               page.within('.assignee') do
-                expect(page).to have_content "#{user.name}"
+                expect(page).to have_content user.name.to_s
 
                 click_button('Edit')
                 wait_for_requests
diff --git a/spec/features/merge_request/user_scrolls_to_note_on_load_spec.rb b/spec/features/merge_request/user_scrolls_to_note_on_load_spec.rb
index 60ea168940a..cf4875a7a25 100644
--- a/spec/features/merge_request/user_scrolls_to_note_on_load_spec.rb
+++ b/spec/features/merge_request/user_scrolls_to_note_on_load_spec.rb
@@ -19,7 +19,7 @@ RSpec.describe 'Merge request > User scrolls to note on load', :js do
 
     wait_for_all_requests
 
-    expect(page).to have_selector("#{fragment_id}")
+    expect(page).to have_selector(fragment_id.to_s)
 
     page_scroll_y = page.evaluate_script("window.scrollY")
     fragment_position_top = page.evaluate_script("Math.round(document.querySelector('#{fragment_id}').getBoundingClientRect().top + window.pageYOffset)")
diff --git a/spec/features/one_trust_spec.rb b/spec/features/one_trust_spec.rb
index 0ed08e8b99b..a7dfbfd6bdf 100644
--- a/spec/features/one_trust_spec.rb
+++ b/spec/features/one_trust_spec.rb
@@ -15,7 +15,7 @@ RSpec.describe 'OneTrust' do
       end
 
       it 'has the OneTrust CSP settings', :aggregate_failures do
-        expect(response_headers['Content-Security-Policy']).to include("#{onetrust_url}")
+        expect(response_headers['Content-Security-Policy']).to include(onetrust_url.to_s)
         expect(page.html).to include("https://cdn.cookielaw.org/consent/#{one_trust_id}/OtAutoBlock.js")
       end
     end
diff --git a/spec/features/projects/issues/viewing_issues_with_external_authorization_enabled_spec.rb b/spec/features/projects/issues/viewing_issues_with_external_authorization_enabled_spec.rb
index 4415f1f009f..3d40bae8544 100644
--- a/spec/features/projects/issues/viewing_issues_with_external_authorization_enabled_spec.rb
+++ b/spec/features/projects/issues/viewing_issues_with_external_authorization_enabled_spec.rb
@@ -102,8 +102,8 @@ RSpec.describe 'viewing an issue with cross project references' do
     it 'shows only the link to the cross project references' do
       visit project_issue_path(project, issue)
 
-      expect(page).to have_link("#{other_issue.to_reference(project)}")
-      expect(page).to have_link("#{other_merge_request.to_reference(project)}")
+      expect(page).to have_link(other_issue.to_reference(project).to_s)
+      expect(page).to have_link(other_merge_request.to_reference(project).to_s)
       expect(page).not_to have_content("#{other_issue.to_reference(project)} (#{other_issue.state})")
       expect(page).not_to have_xpath("//a[@title='#{other_issue.title}']")
       expect(page).not_to have_content("#{other_merge_request.to_reference(project)} (#{other_merge_request.state})")
@@ -113,7 +113,7 @@ RSpec.describe 'viewing an issue with cross project references' do
     it 'does not link a cross project confidential issue if the user does not have access' do
       visit project_issue_path(project, issue)
 
-      expect(page).not_to have_link("#{other_confidential_issue.to_reference(project)}")
+      expect(page).not_to have_link(other_confidential_issue.to_reference(project).to_s)
       expect(page).not_to have_xpath("//a[@title='#{other_confidential_issue.title}']")
     end
 
@@ -122,7 +122,7 @@ RSpec.describe 'viewing an issue with cross project references' do
 
       visit project_issue_path(project, issue)
 
-      expect(page).to have_link("#{other_confidential_issue.to_reference(project)}")
+      expect(page).to have_link(other_confidential_issue.to_reference(project).to_s)
       expect(page).not_to have_xpath("//a[@title='#{other_confidential_issue.title}']")
     end
 
diff --git a/spec/features/projects/jobs/user_browses_jobs_spec.rb b/spec/features/projects/jobs/user_browses_jobs_spec.rb
index 995f4a1e3d2..cb3c1594868 100644
--- a/spec/features/projects/jobs/user_browses_jobs_spec.rb
+++ b/spec/features/projects/jobs/user_browses_jobs_spec.rb
@@ -203,15 +203,15 @@ RSpec.describe 'User browses jobs' do
         end
 
         it 'contains a link to the job sha' do
-          expect(page.find('[data-testid="job-sha"]')).to have_content "#{job.sha[0..7]}"
+          expect(page.find('[data-testid="job-sha"]')).to have_content job.sha[0..7].to_s
         end
 
         it 'contains a link to the job id' do
-          expect(page.find('[data-testid="job-id-link"]')).to have_content "#{job.id}"
+          expect(page.find('[data-testid="job-id-link"]')).to have_content job.id.to_s
         end
 
         it 'contains a link to the job ref' do
-          expect(page.find('[data-testid="job-ref"]')).to have_content "#{job.ref}"
+          expect(page.find('[data-testid="job-ref"]')).to have_content job.ref.to_s
         end
       end
     end
diff --git a/spec/frontend/notes/components/__snapshots__/notes_app_spec.js.snap b/spec/frontend/notes/components/__snapshots__/notes_app_spec.js.snap
index bc29903d4bf..a4611149432 100644
--- a/spec/frontend/notes/components/__snapshots__/notes_app_spec.js.snap
+++ b/spec/frontend/notes/components/__snapshots__/notes_app_spec.js.snap
@@ -2,7 +2,7 @@
 
 exports[`note_app when sort direction is asc shows skeleton notes after the loaded discussions 1`] = `
 "<ul id=\\"notes-list\\" class=\\"notes main-notes-list timeline\\">
-  <noteable-discussion-stub discussion=\\"[object Object]\\" renderdifffile=\\"true\\" helppagepath=\\"\\" isoverviewtab=\\"true\\"></noteable-discussion-stub>
+  <noteable-discussion-stub discussion=\\"[object Object]\\" renderdifffile=\\"true\\" helppagepath=\\"\\" isoverviewtab=\\"true\\" shouldscrolltonote=\\"true\\"></noteable-discussion-stub>
   <skeleton-loading-container-stub class=\\"note-skeleton\\"></skeleton-loading-container-stub>
   <!---->
 </ul>"
@@ -11,7 +11,7 @@ exports[`note_app when sort direction is asc shows skeleton notes after the load
 exports[`note_app when sort direction is desc shows skeleton notes before the loaded discussions 1`] = `
 "<ul id=\\"notes-list\\" class=\\"notes main-notes-list timeline\\">
   <skeleton-loading-container-stub class=\\"note-skeleton\\"></skeleton-loading-container-stub>
-  <noteable-discussion-stub discussion=\\"[object Object]\\" renderdifffile=\\"true\\" helppagepath=\\"\\" isoverviewtab=\\"true\\"></noteable-discussion-stub>
+  <noteable-discussion-stub discussion=\\"[object Object]\\" renderdifffile=\\"true\\" helppagepath=\\"\\" isoverviewtab=\\"true\\" shouldscrolltonote=\\"true\\"></noteable-discussion-stub>
   <!---->
 </ul>"
 `;
diff --git a/spec/graphql/resolvers/container_repositories_resolver_spec.rb b/spec/graphql/resolvers/container_repositories_resolver_spec.rb
index 8cbb366f873..df0a98b1536 100644
--- a/spec/graphql/resolvers/container_repositories_resolver_spec.rb
+++ b/spec/graphql/resolvers/container_repositories_resolver_spec.rb
@@ -43,7 +43,7 @@ RSpec.describe Resolvers::ContainerRepositoriesResolver do
         end
 
         [:created_desc, :updated_asc, :name_desc].each do |order|
-          context "#{order}" do
+          context order.to_s do
             let(:args) { { sort: order } }
 
             it { is_expected.to eq([sort_repository2, sort_repository]) }
@@ -51,7 +51,7 @@ RSpec.describe Resolvers::ContainerRepositoriesResolver do
         end
 
         [:created_asc, :updated_desc, :name_asc].each do |order|
-          context "#{order}" do
+          context order.to_s do
             let(:args) { { sort: order } }
 
             it { is_expected.to eq([sort_repository, sort_repository2]) }
diff --git a/spec/graphql/types/issue_type_enum_spec.rb b/spec/graphql/types/issue_type_enum_spec.rb
index 8f4b6f3bf74..d462c26c6ac 100644
--- a/spec/graphql/types/issue_type_enum_spec.rb
+++ b/spec/graphql/types/issue_type_enum_spec.rb
@@ -5,7 +5,7 @@ require 'spec_helper'
 RSpec.describe Types::IssueTypeEnum do
   specify { expect(described_class.graphql_name).to eq('IssueType') }
 
-  it 'exposes all the existing issue type values' do
+  it 'exposes all the existing issue type values except objective & key_result' do
     expect(described_class.values.keys).to match_array(
       %w[ISSUE INCIDENT TEST_CASE REQUIREMENT TASK]
     )
diff --git a/spec/helpers/environments_helper_spec.rb b/spec/helpers/environments_helper_spec.rb
index c1eaf1b1bcd..cf33f8a4939 100644
--- a/spec/helpers/environments_helper_spec.rb
+++ b/spec/helpers/environments_helper_spec.rb
@@ -33,7 +33,7 @@ RSpec.describe EnvironmentsHelper do
         'default_branch' => 'master',
         'project_path' => project_path(project),
         'tags_path' => project_tags_path(project),
-        'has_metrics' => "#{environment.has_metrics?}",
+        'has_metrics' => environment.has_metrics?.to_s,
         'external_dashboard_url' => nil,
         'environment_state' => environment.state,
         'custom_metrics_path' => project_prometheus_metrics_path(project),
diff --git a/spec/helpers/integrations_helper_spec.rb b/spec/helpers/integrations_helper_spec.rb
index 3e5ec9b5348..9822f9fac05 100644
--- a/spec/helpers/integrations_helper_spec.rb
+++ b/spec/helpers/integrations_helper_spec.rb
@@ -174,7 +174,7 @@ RSpec.describe IntegrationsHelper do
     end
 
     it "only consider these enumeration values are valid" do
-      expected_valid_types = %w[issue incident test_case requirement task]
+      expected_valid_types = %w[issue incident test_case requirement task objective key_result]
       expect(Issue.issue_types.keys).to contain_exactly(*expected_valid_types)
     end
   end
diff --git a/spec/helpers/snippets_helper_spec.rb b/spec/helpers/snippets_helper_spec.rb
index 37520affc5a..48f67a291c4 100644
--- a/spec/helpers/snippets_helper_spec.rb
+++ b/spec/helpers/snippets_helper_spec.rb
@@ -74,7 +74,7 @@ RSpec.describe SnippetsHelper do
       let(:snippet) { public_personal_snippet }
 
       it 'returns copy button of embedded snippets' do
-        expect(subject).to eq(copy_button("#{blob.id}"))
+        expect(subject).to eq(copy_button(blob.id.to_s))
       end
     end
 
@@ -82,7 +82,7 @@ RSpec.describe SnippetsHelper do
       let(:snippet) { public_project_snippet }
 
       it 'returns copy button of embedded snippets' do
-        expect(subject).to eq(copy_button("#{blob.id}"))
+        expect(subject).to eq(copy_button(blob.id.to_s))
       end
     end
 
diff --git a/spec/lib/api/helpers/packages/dependency_proxy_helpers_spec.rb b/spec/lib/api/helpers/packages/dependency_proxy_helpers_spec.rb
index 3c77f8df350..582795acc4e 100644
--- a/spec/lib/api/helpers/packages/dependency_proxy_helpers_spec.rb
+++ b/spec/lib/api/helpers/packages/dependency_proxy_helpers_spec.rb
@@ -120,7 +120,7 @@ RSpec.describe API::Helpers::Packages::DependencyProxyHelpers do
       end
 
       Packages::Package.package_types.keys.without('maven', 'npm', 'pypi').each do |pkg_type|
-        context "#{pkg_type}" do
+        context pkg_type.to_s do
           let(:package_type) { pkg_type.to_sym }
 
           it 'raises an error' do
diff --git a/spec/lib/api/validations/validators/git_ref_spec.rb b/spec/lib/api/validations/validators/git_ref_spec.rb
index 0d2d9e8f39a..6b9f5dee5fc 100644
--- a/spec/lib/api/validations/validators/git_ref_spec.rb
+++ b/spec/lib/api/validations/validators/git_ref_spec.rb
@@ -38,7 +38,7 @@ RSpec.describe API::Validations::Validators::GitRef do
       expect_validation_error('test' => 'heads/f[/bar')
       expect_validation_error('test' => "heads/foo\t")
       expect_validation_error('test' => "heads/foo\177")
-      expect_validation_error('test' => "#{'a' * 1025}")
+      expect_validation_error('test' => 'a' * 1025)
       expect_validation_error('test' => nil)
       expect_validation_error('test' => '')
     end
diff --git a/spec/lib/api/validations/validators/limit_spec.rb b/spec/lib/api/validations/validators/limit_spec.rb
index 0c10e2f74d2..11d808d390b 100644
--- a/spec/lib/api/validations/validators/limit_spec.rb
+++ b/spec/lib/api/validations/validators/limit_spec.rb
@@ -13,13 +13,13 @@ RSpec.describe API::Validations::Validators::Limit do
     it 'does not raise a validation error' do
       expect_no_validation_error('test' => '123-456')
       expect_no_validation_error('test' => '00000000-ffff-0000-ffff-000000000000')
-      expect_no_validation_error('test' => "#{'a' * 255}")
+      expect_no_validation_error('test' => 'a' * 255)
     end
   end
 
   context 'longer than limit param' do
     it 'raises a validation error' do
-      expect_validation_error('test' => "#{'a' * 256}")
+      expect_validation_error('test' => 'a' * 256)
     end
   end
 
diff --git a/spec/lib/backup/database_backup_error_spec.rb b/spec/lib/backup/database_backup_error_spec.rb
index e001f65465c..2745d1540ea 100644
--- a/spec/lib/backup/database_backup_error_spec.rb
+++ b/spec/lib/backup/database_backup_error_spec.rb
@@ -19,12 +19,12 @@ RSpec.describe Backup::DatabaseBackupError do
   it { is_expected.to respond_to :db_file_name }
 
   it 'expects exception message to include database file' do
-    expect(subject.message).to include("#{db_file_name}")
+    expect(subject.message).to include(db_file_name.to_s)
   end
 
   it 'expects exception message to include database paths being back-up' do
-    expect(subject.message).to include("#{config[:host]}")
-    expect(subject.message).to include("#{config[:port]}")
-    expect(subject.message).to include("#{config[:database]}")
+    expect(subject.message).to include(config[:host].to_s)
+    expect(subject.message).to include(config[:port].to_s)
+    expect(subject.message).to include(config[:database].to_s)
   end
 end
diff --git a/spec/lib/backup/file_backup_error_spec.rb b/spec/lib/backup/file_backup_error_spec.rb
index bb174bbe4a0..948e15b7e5c 100644
--- a/spec/lib/backup/file_backup_error_spec.rb
+++ b/spec/lib/backup/file_backup_error_spec.rb
@@ -13,11 +13,11 @@ RSpec.describe Backup::FileBackupError do
     it { is_expected.to respond_to :backup_tarball }
 
     it 'expects exception message to include file backup path location' do
-      expect(subject.message).to include("#{subject.backup_tarball}")
+      expect(subject.message).to include(subject.backup_tarball.to_s)
     end
 
     it 'expects exception message to include file being back-up' do
-      expect(subject.message).to include("#{subject.app_files_dir}")
+      expect(subject.message).to include(subject.app_files_dir.to_s)
     end
   end
 
diff --git a/spec/lib/banzai/filter/autolink_filter_spec.rb b/spec/lib/banzai/filter/autolink_filter_spec.rb
index ba15860f3c9..75108130602 100644
--- a/spec/lib/banzai/filter/autolink_filter_spec.rb
+++ b/spec/lib/banzai/filter/autolink_filter_spec.rb
@@ -195,7 +195,7 @@ RSpec.describe Banzai::Filter::AutolinkFilter do
     it 'escapes RTLO and other characters' do
       # rendered text looks like "http://example.com/evilexe.mp3"
       evil_link = "#{link}evil\u202E3pm.exe"
-      doc = filter("#{evil_link}")
+      doc = filter(evil_link.to_s)
 
       expect(doc.at_css('a')['href']).to eq "http://about.gitlab.com/evil%E2%80%AE3pm.exe"
     end
diff --git a/spec/lib/banzai/filter/issuable_reference_expansion_filter_spec.rb b/spec/lib/banzai/filter/issuable_reference_expansion_filter_spec.rb
index ef23725c790..a11fe203541 100644
--- a/spec/lib/banzai/filter/issuable_reference_expansion_filter_spec.rb
+++ b/spec/lib/banzai/filter/issuable_reference_expansion_filter_spec.rb
@@ -91,7 +91,7 @@ RSpec.describe Banzai::Filter::IssuableReferenceExpansionFilter do
     link = create_link(closed_issue.to_reference(other_project), issue: closed_issue.id, reference_type: 'issue')
     doc = filter(link, context.merge(project: other_project))
 
-    expect(doc.css('a').last.text).to eq("#{closed_issue.to_reference(other_project)}")
+    expect(doc.css('a').last.text).to eq(closed_issue.to_reference(other_project).to_s)
   end
 
   it 'does not append state when filter is not enabled' do
diff --git a/spec/lib/banzai/filter/references/alert_reference_filter_spec.rb b/spec/lib/banzai/filter/references/alert_reference_filter_spec.rb
index cba41166be4..c1fdee48f12 100644
--- a/spec/lib/banzai/filter/references/alert_reference_filter_spec.rb
+++ b/spec/lib/banzai/filter/references/alert_reference_filter_spec.rb
@@ -229,7 +229,7 @@ RSpec.describe Banzai::Filter::References::AlertReferenceFilter do
     let(:alert2_reference) { alert2.to_reference(full: true) }
 
     it 'does not have N+1 per multiple references per project', :use_sql_query_cache do
-      markdown = "#{alert_reference}"
+      markdown = alert_reference.to_s
       max_count = ActiveRecord::QueryRecorder.new(skip_cached: false) do
         reference_filter(markdown)
       end.count
diff --git a/spec/lib/banzai/filter/references/commit_reference_filter_spec.rb b/spec/lib/banzai/filter/references/commit_reference_filter_spec.rb
index 6bcea41a603..c368a852ea9 100644
--- a/spec/lib/banzai/filter/references/commit_reference_filter_spec.rb
+++ b/spec/lib/banzai/filter/references/commit_reference_filter_spec.rb
@@ -282,7 +282,7 @@ RSpec.describe Banzai::Filter::References::CommitReferenceFilter do
     let(:commit3_reference) { commit3.to_reference(full: true) }
 
     it 'does not have N+1 per multiple references per project', :use_sql_query_cache do
-      markdown = "#{commit_reference}"
+      markdown = commit_reference.to_s
       max_count = ActiveRecord::QueryRecorder.new(skip_cached: false) do
         reference_filter(markdown)
       end.count
diff --git a/spec/lib/banzai/filter/references/issue_reference_filter_spec.rb b/spec/lib/banzai/filter/references/issue_reference_filter_spec.rb
index d17deaa4736..32538948b4b 100644
--- a/spec/lib/banzai/filter/references/issue_reference_filter_spec.rb
+++ b/spec/lib/banzai/filter/references/issue_reference_filter_spec.rb
@@ -392,7 +392,7 @@ RSpec.describe Banzai::Filter::References::IssueReferenceFilter do
 
   context 'cross-project URL in link href' do
     let(:reference_link) { %{<a href="#{reference}">Reference</a>} }
-    let(:reference) { "#{issue_url + "#note_123"}" }
+    let(:reference) { (issue_url + "#note_123").to_s }
     let(:issue)     { create(:issue, project: project2) }
     let(:project2)  { create(:project, :public, namespace: namespace) }
     let(:namespace) { create(:namespace, name: 'cross-reference') }
@@ -497,7 +497,7 @@ RSpec.describe Banzai::Filter::References::IssueReferenceFilter do
     end
 
     it 'links to a valid reference for cross-reference in link href' do
-      reference = "#{issue_url + "#note_123"}"
+      reference = (issue_url + "#note_123").to_s
       reference_link = %{<a href="#{reference}">Reference</a>}
 
       doc = reference_filter("See #{reference_link}", context)
diff --git a/spec/lib/banzai/filter/references/label_reference_filter_spec.rb b/spec/lib/banzai/filter/references/label_reference_filter_spec.rb
index 12cdb5cfb95..d5b9c71b861 100644
--- a/spec/lib/banzai/filter/references/label_reference_filter_spec.rb
+++ b/spec/lib/banzai/filter/references/label_reference_filter_spec.rb
@@ -715,13 +715,13 @@ RSpec.describe Banzai::Filter::References::LabelReferenceFilter do
     let_it_be(:project_label2)     { create(:label, project: project) }
     let_it_be(:project2_label)     { create(:label, project: project2) }
     let_it_be(:group2_label)       { create(:group_label, group: group2, color: '#00ff00') }
-    let_it_be(:project_reference)  { "#{project_label.to_reference}" }
-    let_it_be(:project_reference2) { "#{project_label2.to_reference}" }
-    let_it_be(:project2_reference) { "#{project2_label.to_reference}" }
+    let_it_be(:project_reference)  { project_label.to_reference.to_s }
+    let_it_be(:project_reference2) { project_label2.to_reference.to_s }
+    let_it_be(:project2_reference) { project2_label.to_reference.to_s }
     let_it_be(:group2_reference)   { "#{project2.full_path}~#{group2_label.name}" }
 
     it 'does not have N+1 per multiple references per project', :use_sql_query_cache do
-      markdown = "#{project_reference}"
+      markdown = project_reference.to_s
       control_count = 1
 
       expect do
@@ -737,7 +737,7 @@ RSpec.describe Banzai::Filter::References::LabelReferenceFilter do
 
     it 'has N+1 for multiple unique project/group references', :use_sql_query_cache do
       # reference to already loaded project, only one query
-      markdown = "#{project_reference}"
+      markdown = project_reference.to_s
       control_count = 1
 
       expect do
diff --git a/spec/lib/banzai/filter/references/milestone_reference_filter_spec.rb b/spec/lib/banzai/filter/references/milestone_reference_filter_spec.rb
index c21a9339ebb..98090af06b1 100644
--- a/spec/lib/banzai/filter/references/milestone_reference_filter_spec.rb
+++ b/spec/lib/banzai/filter/references/milestone_reference_filter_spec.rb
@@ -490,13 +490,13 @@ RSpec.describe Banzai::Filter::References::MilestoneReferenceFilter do
     let_it_be(:project_milestone2) { create(:milestone, project: project) }
     let_it_be(:project2_milestone) { create(:milestone, project: project2) }
     let_it_be(:group2_milestone)   { create(:milestone, group: group2) }
-    let_it_be(:project_reference)  { "#{project_milestone.to_reference}" }
-    let_it_be(:project_reference2) { "#{project_milestone2.to_reference}" }
-    let_it_be(:project2_reference) { "#{project2_milestone.to_reference(full: true)}" }
+    let_it_be(:project_reference)  { project_milestone.to_reference.to_s }
+    let_it_be(:project_reference2) { project_milestone2.to_reference.to_s }
+    let_it_be(:project2_reference) { project2_milestone.to_reference(full: true).to_s }
     let_it_be(:group2_reference)   { "#{project2.full_path}%\"#{group2_milestone.name}\"" }
 
     it 'does not have N+1 per multiple references per project', :use_sql_query_cache do
-      markdown = "#{project_reference}"
+      markdown = project_reference.to_s
       control_count = 4
 
       expect do
@@ -511,7 +511,7 @@ RSpec.describe Banzai::Filter::References::MilestoneReferenceFilter do
     end
 
     it 'has N+1 for multiple unique project/group references', :use_sql_query_cache do
-      markdown = "#{project_reference}"
+      markdown = project_reference.to_s
       control_count = 4
 
       expect do
diff --git a/spec/lib/banzai/filter/references/project_reference_filter_spec.rb b/spec/lib/banzai/filter/references/project_reference_filter_spec.rb
index d88e262883f..0dd52b45f5d 100644
--- a/spec/lib/banzai/filter/references/project_reference_filter_spec.rb
+++ b/spec/lib/banzai/filter/references/project_reference_filter_spec.rb
@@ -6,7 +6,7 @@ RSpec.describe Banzai::Filter::References::ProjectReferenceFilter do
   include FilterSpecHelper
 
   def invalidate_reference(reference)
-    "#{reference.reverse}"
+    reference.reverse.to_s
   end
 
   def get_reference(project)
@@ -109,7 +109,7 @@ RSpec.describe Banzai::Filter::References::ProjectReferenceFilter do
     let_it_be(:nested_project_reference) { get_reference(nested_project) }
 
     it 'does not have N+1 per multiple project references', :use_sql_query_cache do
-      markdown = "#{normal_project_reference}"
+      markdown = normal_project_reference.to_s
 
       # warm up first
       reference_filter(markdown)
diff --git a/spec/lib/banzai/filter/references/user_reference_filter_spec.rb b/spec/lib/banzai/filter/references/user_reference_filter_spec.rb
index 70cbdb080a4..b153efd9655 100644
--- a/spec/lib/banzai/filter/references/user_reference_filter_spec.rb
+++ b/spec/lib/banzai/filter/references/user_reference_filter_spec.rb
@@ -209,7 +209,7 @@ RSpec.describe Banzai::Filter::References::UserReferenceFilter do
     let(:reference3) { group.to_reference }
 
     it 'does not have N+1 per multiple user references', :use_sql_query_cache do
-      markdown = "#{reference}"
+      markdown = reference.to_s
 
       control_count = ActiveRecord::QueryRecorder.new(skip_cached: false) do
         reference_filter(markdown)
diff --git a/spec/lib/feature_spec.rb b/spec/lib/feature_spec.rb
index 56e0b4bca30..5741f568867 100644
--- a/spec/lib/feature_spec.rb
+++ b/spec/lib/feature_spec.rb
@@ -522,7 +522,7 @@ RSpec.describe Feature, stub_feature_flags: false do
 
       it_behaves_like 'logging' do
         let(:expected_action) { :enable }
-        let(:expected_extra) { { "extra.thing" => "#{thing.flipper_id}" } }
+        let(:expected_extra) { { "extra.thing" => thing.flipper_id.to_s } }
       end
     end
   end
@@ -548,7 +548,7 @@ RSpec.describe Feature, stub_feature_flags: false do
 
       it_behaves_like 'logging' do
         let(:expected_action) { :disable }
-        let(:expected_extra) { { "extra.thing" => "#{thing.flipper_id}" } }
+        let(:expected_extra) { { "extra.thing" => thing.flipper_id.to_s } }
       end
     end
   end
@@ -561,7 +561,7 @@ RSpec.describe Feature, stub_feature_flags: false do
 
     it_behaves_like 'logging' do
       let(:expected_action) { :enable_percentage_of_time }
-      let(:expected_extra) { { "extra.percentage" => "#{percentage}" } }
+      let(:expected_extra) { { "extra.percentage" => percentage.to_s } }
     end
   end
 
@@ -584,7 +584,7 @@ RSpec.describe Feature, stub_feature_flags: false do
 
     it_behaves_like 'logging' do
       let(:expected_action) { :enable_percentage_of_actors }
-      let(:expected_extra) { { "extra.percentage" => "#{percentage}" } }
+      let(:expected_extra) { { "extra.percentage" => percentage.to_s } }
     end
   end
 
diff --git a/spec/lib/gitlab/auth/auth_finders_spec.rb b/spec/lib/gitlab/auth/auth_finders_spec.rb
index e2226952d15..05eca4cf70f 100644
--- a/spec/lib/gitlab/auth/auth_finders_spec.rb
+++ b/spec/lib/gitlab/auth/auth_finders_spec.rb
@@ -89,12 +89,13 @@ RSpec.describe Gitlab::Auth::AuthFinders do
       context 'with a running job' do
         let(:token) { job.token }
 
-        if without_job_token_allowed == :error
+        case without_job_token_allowed
+        when :error
           it 'returns an Unauthorized exception' do
             expect { subject }.to raise_error(Gitlab::Auth::UnauthorizedError)
             expect(@current_authenticated_job).to be_nil
           end
-        elsif without_job_token_allowed == :user
+        when :user
           it 'returns the user' do
             expect(subject).to eq(user)
             expect(@current_authenticated_job).to eq job
diff --git a/spec/lib/gitlab/background_migration/legacy_upload_mover_spec.rb b/spec/lib/gitlab/background_migration/legacy_upload_mover_spec.rb
index 264faa4de3b..c522c8b307f 100644
--- a/spec/lib/gitlab/background_migration/legacy_upload_mover_spec.rb
+++ b/spec/lib/gitlab/background_migration/legacy_upload_mover_spec.rb
@@ -241,7 +241,7 @@ RSpec.describe Gitlab::BackgroundMigration::LegacyUploadMover, :aggregate_failur
   context 'when legacy uploads are stored in object storage' do
     let(:legacy_upload) { create_remote_upload(note, filename) }
     let(:remote_file) do
-      { key: "#{legacy_upload.path}" }
+      { key: legacy_upload.path.to_s }
     end
 
     let(:connection) { ::Fog::Storage.new(FileUploader.object_store_credentials) }
diff --git a/spec/lib/gitlab/background_migration/populate_vulnerability_reads_spec.rb b/spec/lib/gitlab/background_migration/populate_vulnerability_reads_spec.rb
index 3de84a4e880..fc06012ed20 100644
--- a/spec/lib/gitlab/background_migration/populate_vulnerability_reads_spec.rb
+++ b/spec/lib/gitlab/background_migration/populate_vulnerability_reads_spec.rb
@@ -28,7 +28,7 @@ RSpec.describe Gitlab::BackgroundMigration::PopulateVulnerabilityReads, :migrati
         project_id: project.id,
         external_type: 'uuid-v5',
         external_id: 'uuid-v5',
-        fingerprint: Digest::SHA1.hexdigest("#{vulnerability.id}"),
+        fingerprint: Digest::SHA1.hexdigest(vulnerability.id.to_s),
         name: 'Identifier for UUIDv5')
 
       create_finding!(
diff --git a/spec/lib/gitlab/ci/config/entry/job_spec.rb b/spec/lib/gitlab/ci/config/entry/job_spec.rb
index bcf6628e67d..acf60a6cdda 100644
--- a/spec/lib/gitlab/ci/config/entry/job_spec.rb
+++ b/spec/lib/gitlab/ci/config/entry/job_spec.rb
@@ -673,7 +673,7 @@ RSpec.describe Gitlab::Ci::Config::Entry::Job do
       with_them do
         let(:config) { { script: 'ls', rules: rules, only: only }.compact }
 
-        it "#{name}" do
+        it name.to_s do
           expect(workflow).to receive(:has_rules?) { has_workflow_rules? }
 
           entry.compose!(deps)
diff --git a/spec/lib/gitlab/ci/config/entry/processable_spec.rb b/spec/lib/gitlab/ci/config/entry/processable_spec.rb
index 052bcdacd0f..f1578a068b9 100644
--- a/spec/lib/gitlab/ci/config/entry/processable_spec.rb
+++ b/spec/lib/gitlab/ci/config/entry/processable_spec.rb
@@ -248,7 +248,7 @@ RSpec.describe Gitlab::Ci::Config::Entry::Processable do
       with_them do
         let(:config) { { script: 'ls', rules: rules, only: only }.compact }
 
-        it "#{name}" do
+        it name.to_s do
           expect(workflow).to receive(:has_rules?) { has_workflow_rules? }
 
           entry.compose!(deps)
diff --git a/spec/lib/gitlab/ci/reports/test_suite_spec.rb b/spec/lib/gitlab/ci/reports/test_suite_spec.rb
index 4a1f77bed65..05f6a8a8cb6 100644
--- a/spec/lib/gitlab/ci/reports/test_suite_spec.rb
+++ b/spec/lib/gitlab/ci/reports/test_suite_spec.rb
@@ -209,7 +209,7 @@ RSpec.describe Gitlab::Ci::Reports::TestSuite do
 
   Gitlab::Ci::Reports::TestCase::STATUS_TYPES.each do |status_type|
     describe "##{status_type}" do
-      subject { test_suite.public_send("#{status_type}") }
+      subject { test_suite.public_send(status_type.to_s) }
 
       context "when #{status_type} test case exists" do
         before do
diff --git a/spec/lib/gitlab/database/batch_count_spec.rb b/spec/lib/gitlab/database/batch_count_spec.rb
index a87b0c1a3a8..852cc719d01 100644
--- a/spec/lib/gitlab/database/batch_count_spec.rb
+++ b/spec/lib/gitlab/database/batch_count_spec.rb
@@ -330,7 +330,7 @@ RSpec.describe Gitlab::Database::BatchCount do
     end
 
     it 'counts with "id" field' do
-      expect(described_class.batch_distinct_count(model, "#{column}")).to eq(2)
+      expect(described_class.batch_distinct_count(model, column.to_s)).to eq(2)
     end
 
     it 'counts with table.column field' do
diff --git a/spec/lib/gitlab/database/load_balancing/connection_proxy_spec.rb b/spec/lib/gitlab/database/load_balancing/connection_proxy_spec.rb
index 41312dbedd6..a2076f5b950 100644
--- a/spec/lib/gitlab/database/load_balancing/connection_proxy_spec.rb
+++ b/spec/lib/gitlab/database/load_balancing/connection_proxy_spec.rb
@@ -53,7 +53,7 @@ RSpec.describe Gitlab::Database::LoadBalancing::ConnectionProxy do
   end
 
   Gitlab::Database::LoadBalancing::ConnectionProxy::NON_STICKY_READS.each do |name|
-    describe "#{name}" do
+    describe name.to_s do
       it 'runs the query on the replica' do
         expect(proxy).to receive(:read_using_load_balancer)
           .with(name, 'foo')
@@ -64,7 +64,7 @@ RSpec.describe Gitlab::Database::LoadBalancing::ConnectionProxy do
   end
 
   Gitlab::Database::LoadBalancing::ConnectionProxy::STICKY_WRITES.each do |name|
-    describe "#{name}" do
+    describe name.to_s do
       it 'runs the query on the primary and sticks to it' do
         session = Gitlab::Database::LoadBalancing::Session.new
 
diff --git a/spec/lib/gitlab/database/load_balancing_spec.rb b/spec/lib/gitlab/database/load_balancing_spec.rb
index 76dfaa74ae6..1c85abac91c 100644
--- a/spec/lib/gitlab/database/load_balancing_spec.rb
+++ b/spec/lib/gitlab/database/load_balancing_spec.rb
@@ -468,9 +468,10 @@ RSpec.describe Gitlab::Database::LoadBalancing, :suppress_gitlab_schemas_validat
           payload = event.payload
 
           assert =
-            if payload[:name] == 'SCHEMA'
+            case payload[:name]
+            when 'SCHEMA'
               false
-            elsif payload[:name] == 'SQL' # Custom query
+            when 'SQL' # Custom query
               true
             else
               keywords = %w[_test_load_balancing_test]
diff --git a/spec/lib/gitlab/import_export/group/tree_saver_spec.rb b/spec/lib/gitlab/import_export/group/tree_saver_spec.rb
index 85d07e3fe63..79ab1913e7e 100644
--- a/spec/lib/gitlab/import_export/group/tree_saver_spec.rb
+++ b/spec/lib/gitlab/import_export/group/tree_saver_spec.rb
@@ -106,7 +106,7 @@ RSpec.describe Gitlab::ImportExport::Group::TreeSaver do
             members
             milestones
           ].each do |association|
-            path = exported_path_for("#{g.id}", "#{association}.ndjson")
+            path = exported_path_for(g.id.to_s, "#{association}.ndjson")
             expect(File.exist?(path)).to eq(true), "#{path} does not exist"
           end
         end
diff --git a/spec/lib/gitlab/inactive_projects_deletion_warning_tracker_spec.rb b/spec/lib/gitlab/inactive_projects_deletion_warning_tracker_spec.rb
index 7afb80488d8..cb4fdeed1a1 100644
--- a/spec/lib/gitlab/inactive_projects_deletion_warning_tracker_spec.rb
+++ b/spec/lib/gitlab/inactive_projects_deletion_warning_tracker_spec.rb
@@ -11,7 +11,7 @@ RSpec.describe Gitlab::InactiveProjectsDeletionWarningTracker, :freeze_time do
     end
 
     it 'returns the list of projects for which deletion warning email has been sent' do
-      expected_hash = { "project:1" => "#{Date.current}" }
+      expected_hash = { "project:1" => Date.current.to_s }
 
       expect(Gitlab::InactiveProjectsDeletionWarningTracker.notified_projects).to eq(expected_hash)
     end
@@ -57,7 +57,7 @@ RSpec.describe Gitlab::InactiveProjectsDeletionWarningTracker, :freeze_time do
     end
 
     it 'returns the date if a deletion warning email has been sent for a given project' do
-      expect(Gitlab::InactiveProjectsDeletionWarningTracker.new(project_id).notification_date).to eq("#{Date.current}")
+      expect(Gitlab::InactiveProjectsDeletionWarningTracker.new(project_id).notification_date).to eq(Date.current.to_s)
     end
 
     it 'returns nil if a deletion warning email has not been sent for a given project' do
diff --git a/spec/lib/gitlab/metrics/dashboard/url_spec.rb b/spec/lib/gitlab/metrics/dashboard/url_spec.rb
index 830d43169a9..d49200f87cc 100644
--- a/spec/lib/gitlab/metrics/dashboard/url_spec.rb
+++ b/spec/lib/gitlab/metrics/dashboard/url_spec.rb
@@ -61,7 +61,7 @@ RSpec.describe Gitlab::Metrics::Dashboard::Url do
           'url' => url,
           'namespace' => 'namespace1',
           'project' => 'project1',
-          'environment' => "#{environment_id}",
+          'environment' => environment_id.to_s,
           'query' => "?dashboard=config%2Fprometheus%2Fcommon_metrics.yml&environment=#{environment_id}&group=awesome+group&start=2019-08-02T05%3A43%3A09.000Z",
           'anchor' => '#title'
         }
diff --git a/spec/lib/gitlab/pagination/gitaly_keyset_pager_spec.rb b/spec/lib/gitlab/pagination/gitaly_keyset_pager_spec.rb
index 0bafd436bd0..b5ed583b1f1 100644
--- a/spec/lib/gitlab/pagination/gitaly_keyset_pager_spec.rb
+++ b/spec/lib/gitlab/pagination/gitaly_keyset_pager_spec.rb
@@ -99,7 +99,7 @@ RSpec.describe Gitlab::Pagination::GitalyKeysetPager do
 
         before do
           allow(request_context).to receive(:request).and_return(fake_request)
-          allow(finder).to receive(:is_a?).with(BranchesFinder) { true }
+          allow(BranchesFinder).to receive(:===).with(finder).and_return(true)
           expect(finder).to receive(:execute).with(gitaly_pagination: true).and_return(branches)
         end
 
diff --git a/spec/lib/gitlab/redis/multi_store_spec.rb b/spec/lib/gitlab/redis/multi_store_spec.rb
index 82ae58783be..c3b3d876779 100644
--- a/spec/lib/gitlab/redis/multi_store_spec.rb
+++ b/spec/lib/gitlab/redis/multi_store_spec.rb
@@ -211,7 +211,7 @@ RSpec.describe Gitlab::Redis::MultiStore do
     end
 
     with_them do
-      describe "#{name}" do
+      describe name.to_s do
         before do
           allow(primary_store).to receive(name).and_call_original
           allow(secondary_store).to receive(name).and_call_original
@@ -363,7 +363,7 @@ RSpec.describe Gitlab::Redis::MultiStore do
     end
 
     with_them do
-      describe "#{name}" do
+      describe name.to_s do
         let(:expected_args) { args || no_args }
 
         before do
diff --git a/spec/lib/grafana/client_spec.rb b/spec/lib/grafana/client_spec.rb
index c233d0b8445..13fe9acc6e9 100644
--- a/spec/lib/grafana/client_spec.rb
+++ b/spec/lib/grafana/client_spec.rb
@@ -54,7 +54,7 @@ RSpec.describe Grafana::Client do
     }
 
     exceptions.each do |exception, message|
-      context "#{exception}" do
+      context exception.to_s do
         before do
           stub_request(:get, grafana_api_url).to_raise(exception)
         end
diff --git a/spec/lib/omni_auth/strategies/jwt_spec.rb b/spec/lib/omni_auth/strategies/jwt_spec.rb
index b29e48b0de5..97547912663 100644
--- a/spec/lib/omni_auth/strategies/jwt_spec.rb
+++ b/spec/lib/omni_auth/strategies/jwt_spec.rb
@@ -51,6 +51,7 @@ RSpec.describe OmniAuth::Strategies::Jwt do
         context "when the #{algorithm} algorithm is used" do
           let(:algorithm) { algorithm }
           let(:secret) do
+            # rubocop:disable Style/CaseLikeIf
             if private_key_class == OpenSSL::PKey::RSA
               private_key_class.generate(2048)
                 .to_pem
@@ -61,6 +62,7 @@ RSpec.describe OmniAuth::Strategies::Jwt do
             else
               private_key_class.new(jwt_config.strategy.secret)
             end
+            # rubocop:enable Style/CaseLikeIf
           end
 
           let(:private_key) { private_key_class ? private_key_class.new(secret) : secret }
diff --git a/spec/mailers/notify_spec.rb b/spec/mailers/notify_spec.rb
index 1f53c472c5c..5733e892d2a 100644
--- a/spec/mailers/notify_spec.rb
+++ b/spec/mailers/notify_spec.rb
@@ -750,7 +750,7 @@ RSpec.describe Notify do
           before_all do
             private_project.add_guest(recipient)
 
-            note.update!(note: "#{private_issue.to_reference(full: true)}")
+            note.update!(note: private_issue.to_reference(full: true).to_s)
           end
 
           let(:html_part) { subject.body.parts.last.to_s }
diff --git a/spec/migrations/20220107064845_populate_vulnerability_reads_spec.rb b/spec/migrations/20220107064845_populate_vulnerability_reads_spec.rb
index ece971a50c9..063a51227dd 100644
--- a/spec/migrations/20220107064845_populate_vulnerability_reads_spec.rb
+++ b/spec/migrations/20220107064845_populate_vulnerability_reads_spec.rb
@@ -29,7 +29,7 @@ RSpec.describe PopulateVulnerabilityReads, :migration do
         project_id: project.id,
         external_type: 'uuid-v5',
         external_id: 'uuid-v5',
-        fingerprint: Digest::SHA1.hexdigest("#{vulnerability.id}"),
+        fingerprint: Digest::SHA1.hexdigest(vulnerability.id.to_s),
         name: 'Identifier for UUIDv5')
 
       create_finding!(
diff --git a/spec/migrations/20221018050323_add_objective_and_keyresult_to_work_item_types_spec.rb b/spec/migrations/20221018050323_add_objective_and_keyresult_to_work_item_types_spec.rb
new file mode 100644
index 00000000000..4de897802b9
--- /dev/null
+++ b/spec/migrations/20221018050323_add_objective_and_keyresult_to_work_item_types_spec.rb
@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe AddObjectiveAndKeyresultToWorkItemTypes, :migration do
+  include MigrationHelpers::WorkItemTypesHelper
+
+  let_it_be(:work_item_types) { table(:work_item_types) }
+
+  let(:base_types) do
+    {
+      issue: 0,
+      incident: 1,
+      test_case: 2,
+      requirement: 3,
+      task: 4,
+      objective: 5,
+      key_result: 6
+    }
+  end
+
+  after(:all) do
+    # Make sure base types are recreated after running the migration
+    # because migration specs are not run in a transaction
+    reset_work_item_types
+  end
+
+  it 'skips creating both objective & keyresult type record if it already exists' do
+    reset_db_state_prior_to_migration
+    work_item_types.find_or_create_by!(name: 'Key Result', namespace_id: nil, base_type: base_types[:key_result],
+                                       icon_name: 'issue-type-keyresult')
+    work_item_types.find_or_create_by!(name: 'Objective', namespace_id: nil, base_type: base_types[:objective],
+                                       icon_name: 'issue-type-objective')
+
+    expect do
+      migrate!
+    end.to not_change(work_item_types, :count)
+  end
+
+  it 'adds both objective & keyresult to base work item types' do
+    reset_db_state_prior_to_migration
+
+    expect do
+      migrate!
+    end.to change(work_item_types, :count).from(5).to(7)
+
+    expect(work_item_types.all.pluck(:base_type)).to include(base_types[:objective])
+    expect(work_item_types.all.pluck(:base_type)).to include(base_types[:key_result])
+  end
+
+  def reset_db_state_prior_to_migration
+    # Database needs to be in a similar state as when this migration was created
+    work_item_types.delete_all
+    work_item_types.find_or_create_by!(name: 'Issue', namespace_id: nil, base_type: base_types[:issue],
+                                       icon_name: 'issue-type-issue')
+    work_item_types.find_or_create_by!(name: 'Incident', namespace_id: nil, base_type: base_types[:incident],
+                                       icon_name: 'issue-type-incident')
+    work_item_types.find_or_create_by!(name: 'Test Case', namespace_id: nil, base_type: base_types[:test_case],
+                                       icon_name: 'issue-type-test-case')
+    work_item_types.find_or_create_by!(name: 'Requirement', namespace_id: nil, base_type: base_types[:requirement],
+                                       icon_name: 'issue-type-requirements')
+    work_item_types.find_or_create_by!(name: 'Task', namespace_id: nil, base_type: base_types[:task],
+                                       icon_name: 'issue-type-task')
+  end
+end
diff --git a/spec/models/active_session_spec.rb b/spec/models/active_session_spec.rb
index 5d316f7cff2..c85a72be54c 100644
--- a/spec/models/active_session_spec.rb
+++ b/spec/models/active_session_spec.rb
@@ -477,7 +477,7 @@ RSpec.describe ActiveSession, :clean_gitlab_redis_sessions do
 
         it 'removes obsolete lookup entries even without active session' do
           Gitlab::Redis::Sessions.with do |redis|
-            redis.sadd(lookup_key, "#{max_number_of_sessions_plus_two + 1}")
+            redis.sadd(lookup_key, (max_number_of_sessions_plus_two + 1).to_s)
           end
 
           ActiveSession.cleanup(user)
diff --git a/spec/models/clusters/platforms/kubernetes_spec.rb b/spec/models/clusters/platforms/kubernetes_spec.rb
index 4ac2fd022ba..35ed6f4e2c6 100644
--- a/spec/models/clusters/platforms/kubernetes_spec.rb
+++ b/spec/models/clusters/platforms/kubernetes_spec.rb
@@ -452,7 +452,7 @@ RSpec.describe Clusters::Platforms::Kubernetes do
 
     context 'when there are ignored K8s connections errors' do
       described_class::IGNORED_CONNECTION_EXCEPTIONS.each do |exception|
-        context "#{exception}" do
+        context exception.to_s do
           before do
             exception_args = ['arg1']
             exception_args.push('arg2', 'arg3') if exception.name == 'Kubeclient::HttpError'
diff --git a/spec/models/concerns/sha_attribute_spec.rb b/spec/models/concerns/sha_attribute_spec.rb
index 790e6936803..fca94b50fee 100644
--- a/spec/models/concerns/sha_attribute_spec.rb
+++ b/spec/models/concerns/sha_attribute_spec.rb
@@ -72,9 +72,10 @@ RSpec.describe ShaAttribute do
         end
 
         it 'validates column type' do
-          if expected_error == :no_error
+          case expected_error
+          when :no_error
             expect { load_schema! }.not_to raise_error
-          elsif expected_error == :sha_mismatch_error
+          when :sha_mismatch_error
             expect { load_schema! }.to raise_error(
               described_class::ShaAttributeTypeMismatchError,
               /sha_attribute.*#{column_name}.* should be a :binary column/
@@ -89,9 +90,10 @@ RSpec.describe ShaAttribute do
         end
 
         it 'validates column type' do
-          if expected_error == :no_error
+          case expected_error
+          when :no_error
             expect { load_schema! }.not_to raise_error
-          elsif expected_error == :sha_mismatch_error
+          when :sha_mismatch_error
             expect { load_schema! }.to raise_error(
               described_class::Sha256AttributeTypeMismatchError,
               /sha256_attribute.*#{column_name}.* should be a :binary column/
diff --git a/spec/models/diff_discussion_spec.rb b/spec/models/diff_discussion_spec.rb
index 7a57f895b8a..fdfc4ec7cc4 100644
--- a/spec/models/diff_discussion_spec.rb
+++ b/spec/models/diff_discussion_spec.rb
@@ -128,7 +128,7 @@ RSpec.describe DiffDiscussion do
   end
 
   describe '#cache_key' do
-    let(:notes_sha) { Digest::SHA1.hexdigest("#{diff_note.post_processed_cache_key}") }
+    let(:notes_sha) { Digest::SHA1.hexdigest(diff_note.post_processed_cache_key.to_s) }
     let(:position_sha) { Digest::SHA1.hexdigest(diff_note.position.to_json) }
 
     it 'returns the cache key with the position sha' do
diff --git a/spec/models/namespace_spec.rb b/spec/models/namespace_spec.rb
index 4fc752a6a66..0516d446945 100644
--- a/spec/models/namespace_spec.rb
+++ b/spec/models/namespace_spec.rb
@@ -1826,7 +1826,7 @@ RSpec.describe Namespace do
 
         group.update!(parent: parent)
 
-        expect(group.full_path_before_last_save).to eq("#{group.path_before_last_save}")
+        expect(group.full_path_before_last_save).to eq(group.path_before_last_save.to_s)
       end
     end
 
diff --git a/spec/models/preloaders/labels_preloader_spec.rb b/spec/models/preloaders/labels_preloader_spec.rb
index 86e64d114c7..07f148a0a6c 100644
--- a/spec/models/preloaders/labels_preloader_spec.rb
+++ b/spec/models/preloaders/labels_preloader_spec.rb
@@ -40,10 +40,11 @@ RSpec.describe Preloaders::LabelsPreloader do
 
   def access_data(labels)
     labels.each do |label|
-      if label.is_a?(ProjectLabel)
+      case label
+      when ProjectLabel
         label.project.project_feature
         label.lazy_subscription(user, label.project)
-      elsif label.is_a?(GroupLabel)
+      when GroupLabel
         label.group.route
         label.lazy_subscription(user)
       end
diff --git a/spec/models/work_items/type_spec.rb b/spec/models/work_items/type_spec.rb
index aa18e00f63b..6685720778a 100644
--- a/spec/models/work_items/type_spec.rb
+++ b/spec/models/work_items/type_spec.rb
@@ -35,10 +35,10 @@ RSpec.describe WorkItems::Type do
       it 'deletes type but not unrelated issues' do
         type = create(:work_item_type)
 
-        expect(WorkItems::Type.count).to eq(6)
+        expect(WorkItems::Type.count).to eq(8)
 
         expect { type.destroy! }.not_to change(Issue, :count)
-        expect(WorkItems::Type.count).to eq(5)
+        expect(WorkItems::Type.count).to eq(7)
       end
     end
 
diff --git a/spec/presenters/project_presenter_spec.rb b/spec/presenters/project_presenter_spec.rb
index 832deee6186..c32cc87afbb 100644
--- a/spec/presenters/project_presenter_spec.rb
+++ b/spec/presenters/project_presenter_spec.rb
@@ -104,7 +104,7 @@ RSpec.describe ProjectPresenter do
           expect(release).to be_truthy
           expect(presenter.releases_anchor_data).to have_attributes(
             is_link: true,
-            label: a_string_including("#{project.releases.count}"),
+            label: a_string_including(project.releases.count.to_s),
             link: presenter.project_releases_path(project)
           )
         end
@@ -295,7 +295,7 @@ RSpec.describe ProjectPresenter do
         expect(release).to be_truthy
         expect(presenter.releases_anchor_data).to have_attributes(
           is_link: true,
-          label: a_string_including("#{project.releases.count}"),
+          label: a_string_including(project.releases.count.to_s),
           link: presenter.project_releases_path(project)
         )
       end
@@ -329,7 +329,7 @@ RSpec.describe ProjectPresenter do
       it 'returns branches data' do
         expect(presenter.branches_anchor_data).to have_attributes(
           is_link: true,
-          label: a_string_including("#{project.repository.branches.size}"),
+          label: a_string_including(project.repository.branches.size.to_s),
           link: presenter.project_branches_path(project)
         )
       end
@@ -339,7 +339,7 @@ RSpec.describe ProjectPresenter do
       it 'returns tags data' do
         expect(presenter.tags_anchor_data).to have_attributes(
           is_link: true,
-          label: a_string_including("#{project.repository.tags.size}"),
+          label: a_string_including(project.repository.tags.size.to_s),
           link: presenter.project_tags_path(project)
         )
       end
diff --git a/spec/rack_servers/configs/config.ru b/spec/rack_servers/configs/config.ru
index 63daeb9eec5..c832ee9b6ff 100644
--- a/spec/rack_servers/configs/config.ru
+++ b/spec/rack_servers/configs/config.ru
@@ -2,7 +2,7 @@
 
 app = proc do |env|
   if env['REQUEST_METHOD'] == 'GET'
-    [200, {}, ["#{Process.pid}"]]
+    [200, {}, [Process.pid.to_s]]
   else
     Process.kill(env['QUERY_STRING'], Process.pid)
     [200, {}, ['Bye!']]
diff --git a/spec/requests/api/alert_management_alerts_spec.rb b/spec/requests/api/alert_management_alerts_spec.rb
index 99293e5ae95..680a3883387 100644
--- a/spec/requests/api/alert_management_alerts_spec.rb
+++ b/spec/requests/api/alert_management_alerts_spec.rb
@@ -140,7 +140,7 @@ RSpec.describe API::AlertManagementAlerts do
         project.send("add_#{user_role}", user)
       end
 
-      it_behaves_like "#{params[:expected_status]}"
+      it_behaves_like params[:expected_status].to_s
     end
 
     context 'file size too large' do
@@ -245,7 +245,7 @@ RSpec.describe API::AlertManagementAlerts do
         project.update!(visibility_level: Gitlab::VisibilityLevel::PRIVATE) unless public_project
       end
 
-      it_behaves_like "#{params[:expected_status]}"
+      it_behaves_like params[:expected_status].to_s
     end
   end
 
@@ -293,7 +293,7 @@ RSpec.describe API::AlertManagementAlerts do
         project.update!(visibility_level: Gitlab::VisibilityLevel::PRIVATE) unless public_project
       end
 
-      it_behaves_like "#{params[:expected_status]}"
+      it_behaves_like params[:expected_status].to_s
     end
 
     context 'when user has access' do
@@ -368,7 +368,7 @@ RSpec.describe API::AlertManagementAlerts do
         project.update!(visibility_level: Gitlab::VisibilityLevel::PRIVATE) unless public_project
       end
 
-      it_behaves_like "#{params[:expected_status]}"
+      it_behaves_like params[:expected_status].to_s
     end
 
     context 'when user has access' do
diff --git a/spec/requests/api/markdown_spec.rb b/spec/requests/api/markdown_spec.rb
index 3e702b05bc9..6239ac4e749 100644
--- a/spec/requests/api/markdown_spec.rb
+++ b/spec/requests/api/markdown_spec.rb
@@ -193,7 +193,7 @@ RSpec.describe API::Markdown do
           end
 
           let(:issue)  { create(:issue, project: public_project, title: 'Team only title') }
-          let(:text)   { "#{issue.to_reference}" }
+          let(:text)   { issue.to_reference.to_s }
           let(:params) { { text: text, gfm: true, project: public_project.full_path } }
 
           shared_examples 'user without proper access' do
diff --git a/spec/requests/api/merge_requests_spec.rb b/spec/requests/api/merge_requests_spec.rb
index b04cc26d1ff..eea223485ce 100644
--- a/spec/requests/api/merge_requests_spec.rb
+++ b/spec/requests/api/merge_requests_spec.rb
@@ -3279,7 +3279,7 @@ RSpec.describe API::MergeRequests do
       end
 
       it 'when removing labels, only removes those specified' do
-        put api_base, params: { remove_labels: "#{label.title}" }
+        put api_base, params: { remove_labels: label.title.to_s }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['labels']).to eq([label2.title])
diff --git a/spec/requests/api/metrics/dashboard/annotations_spec.rb b/spec/requests/api/metrics/dashboard/annotations_spec.rb
index 5e64ac7d481..a09596f167d 100644
--- a/spec/requests/api/metrics/dashboard/annotations_spec.rb
+++ b/spec/requests/api/metrics/dashboard/annotations_spec.rb
@@ -64,7 +64,7 @@ RSpec.describe API::Metrics::Dashboard::Annotations do
               {
                 'starting_at' => starting_at.to_time,
                 'ending_at' => ending_at.to_time,
-                "#{source_type}" => source,
+                source_type.to_s => source,
                 'dashboard_path' => dashboard_unescaped,
                 'description' => params[:description]
               }
diff --git a/spec/requests/api/personal_access_tokens_spec.rb b/spec/requests/api/personal_access_tokens_spec.rb
index f656fdff12e..1fa2ad6ebfa 100644
--- a/spec/requests/api/personal_access_tokens_spec.rb
+++ b/spec/requests/api/personal_access_tokens_spec.rb
@@ -18,9 +18,10 @@ RSpec.describe API::PersonalAccessTokens do
       it "status, count and result as expected" do
         subject
 
-        if status == :bad_request
+        case status
+        when :bad_request
           expect(json_response).to eq(result)
-        elsif status == :ok
+        when :ok
           expect(map_id(json_response)).to a_collection_containing_exactly(*result)
         end
 
diff --git a/spec/requests/api/rubygem_packages_spec.rb b/spec/requests/api/rubygem_packages_spec.rb
index f0408d94137..a7d461781b8 100644
--- a/spec/requests/api/rubygem_packages_spec.rb
+++ b/spec/requests/api/rubygem_packages_spec.rb
@@ -325,9 +325,10 @@ RSpec.describe API::RubygemPackages do
         let(:headers) { user_headers.merge(workhorse_headers) }
         let(:snowplow_gitlab_standard_context) { { project: project, namespace: project.namespace, user: snowplow_user } }
         let(:snowplow_user) do
-          if token_type == :deploy_token
+          case token_type
+          when :deploy_token
             deploy_token
-          elsif token_type == :job_token
+          when :job_token
             job.user
           else
             user
diff --git a/spec/requests/api/tags_spec.rb b/spec/requests/api/tags_spec.rb
index c635d73efe3..3f2ca2a0938 100644
--- a/spec/requests/api/tags_spec.rb
+++ b/spec/requests/api/tags_spec.rb
@@ -71,7 +71,7 @@ RSpec.describe API::Tags do
 
     context 'searching' do
       it 'only returns searched tags' do
-        get api("#{route}", user), params: { search: 'v1.1.0' }
+        get api(route.to_s, user), params: { search: 'v1.1.0' }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(response).to include_pagination_headers
diff --git a/spec/requests/api/terraform/modules/v1/packages_spec.rb b/spec/requests/api/terraform/modules/v1/packages_spec.rb
index dff44a45de4..ae61017f5bb 100644
--- a/spec/requests/api/terraform/modules/v1/packages_spec.rb
+++ b/spec/requests/api/terraform/modules/v1/packages_spec.rb
@@ -585,9 +585,10 @@ RSpec.describe API::Terraform::Modules::V1::Packages do
         let(:headers) { user_headers.merge(workhorse_headers) }
         let(:snowplow_gitlab_standard_context) { { project: project, namespace: project.namespace, user: snowplow_user } }
         let(:snowplow_user) do
-          if token_type == :deploy_token
+          case token_type
+          when :deploy_token
             deploy_token
-          elsif token_type == :job_token
+          when :job_token
             job.user
           else
             user
diff --git a/spec/requests/api/terraform/state_spec.rb b/spec/requests/api/terraform/state_spec.rb
index e8458db4a4d..959d28f52c9 100644
--- a/spec/requests/api/terraform/state_spec.rb
+++ b/spec/requests/api/terraform/state_spec.rb
@@ -318,7 +318,7 @@ RSpec.describe API::Terraform::State, :snowplow do
         Version: '0.1',
         Operation: 'OperationTypePlan',
         Info: '',
-        Who: "#{current_user.username}",
+        Who: current_user.username.to_s,
         Created: Time.now.utc.iso8601(6),
         Path: ''
       }
@@ -365,7 +365,7 @@ RSpec.describe API::Terraform::State, :snowplow do
         Version: '0.1',
         Operation: 'OperationTypePlan',
         Info: '',
-        Who: "#{current_user.username}",
+        Who: current_user.username.to_s,
         Created: Time.now.utc.iso8601(6),
         Path: ''
       }
diff --git a/spec/requests/projects/google_cloud/deployments_controller_spec.rb b/spec/requests/projects/google_cloud/deployments_controller_spec.rb
index ad6a3912e0b..c777e8c1f69 100644
--- a/spec/requests/projects/google_cloud/deployments_controller_spec.rb
+++ b/spec/requests/projects/google_cloud/deployments_controller_spec.rb
@@ -83,7 +83,7 @@ RSpec.describe Projects::GoogleCloud::DeploymentsController do
     end
 
     it 'renders template' do
-      get "#{project_google_cloud_deployments_path(project)}"
+      get project_google_cloud_deployments_path(project).to_s
 
       expect(response).to render_template(:index)
 
@@ -98,7 +98,7 @@ RSpec.describe Projects::GoogleCloud::DeploymentsController do
   end
 
   describe 'Authorized GET project/-/google_cloud/deployments/cloud_run', :snowplow do
-    let_it_be(:url) { "#{project_google_cloud_deployments_cloud_run_path(project)}" }
+    let_it_be(:url) { project_google_cloud_deployments_cloud_run_path(project).to_s }
 
     before do
       sign_in(user_maintainer)
@@ -188,7 +188,7 @@ RSpec.describe Projects::GoogleCloud::DeploymentsController do
   end
 
   describe 'Authorized GET project/-/google_cloud/deployments/cloud_storage', :snowplow do
-    let_it_be(:url) { "#{project_google_cloud_deployments_cloud_storage_path(project)}" }
+    let_it_be(:url) { project_google_cloud_deployments_cloud_storage_path(project).to_s }
 
     before do
       allow_next_instance_of(GoogleApi::CloudPlatform::Client) do |client|
diff --git a/spec/requests/projects/google_cloud/service_accounts_controller_spec.rb b/spec/requests/projects/google_cloud/service_accounts_controller_spec.rb
index 133c6f9153d..d91e5a4f068 100644
--- a/spec/requests/projects/google_cloud/service_accounts_controller_spec.rb
+++ b/spec/requests/projects/google_cloud/service_accounts_controller_spec.rb
@@ -6,7 +6,7 @@ RSpec.describe Projects::GoogleCloud::ServiceAccountsController do
   let_it_be(:project) { create(:project, :public) }
 
   describe 'GET index', :snowplow do
-    let_it_be(:url) { "#{project_google_cloud_service_accounts_path(project)}" }
+    let_it_be(:url) { project_google_cloud_service_accounts_path(project).to_s }
 
     let_it_be(:user_guest) { create(:user) }
     let_it_be(:user_developer) { create(:user) }
diff --git a/spec/routing/project_routing_spec.rb b/spec/routing/project_routing_spec.rb
index 9317a661188..af7b8186c90 100644
--- a/spec/routing/project_routing_spec.rb
+++ b/spec/routing/project_routing_spec.rb
@@ -543,7 +543,7 @@ RSpec.describe 'project routing' do
                        method: :get },
                     { controller: 'projects/find_file', action: 'show',
                       namespace_id: 'gitlab', project_id: 'gitlabhq',
-                      id: "#{newline_file}" })
+                      id: newline_file.to_s })
     end
 
     it 'to #list' do
@@ -554,7 +554,7 @@ RSpec.describe 'project routing' do
                        method: :get },
                     { controller: 'projects/find_file', action: 'list',
                       namespace_id: 'gitlab', project_id: 'gitlabhq',
-                      id: "#{newline_file}" })
+                      id: newline_file.to_s })
     end
 
     it_behaves_like 'redirecting a legacy path', "/gitlab/gitlabhq/find_file", "/gitlab/gitlabhq/-/find_file"
diff --git a/spec/services/ci/pipeline_processing/atomic_processing_service_spec.rb b/spec/services/ci/pipeline_processing/atomic_processing_service_spec.rb
index 06bb6d39fe5..9a37736967e 100644
--- a/spec/services/ci/pipeline_processing/atomic_processing_service_spec.rb
+++ b/spec/services/ci/pipeline_processing/atomic_processing_service_spec.rb
@@ -53,9 +53,10 @@ RSpec.describe Ci::PipelineProcessing::AtomicProcessingService do
         expect(statuses.count).to eq(job_names.count) # ensure that we have the same counts
 
         statuses.each do |status|
-          if event == 'play'
+          case event
+          when 'play'
             status.play(user)
-          elsif event == 'retry'
+          when 'retry'
             ::Ci::RetryJobService.new(project, user).execute(status)
           else
             status.public_send("#{event}!")
diff --git a/spec/services/clusters/kubernetes/create_or_update_service_account_service_spec.rb b/spec/services/clusters/kubernetes/create_or_update_service_account_service_spec.rb
index 064f9e42e96..37478a0bcd9 100644
--- a/spec/services/clusters/kubernetes/create_or_update_service_account_service_spec.rb
+++ b/spec/services/clusters/kubernetes/create_or_update_service_account_service_spec.rb
@@ -166,7 +166,7 @@ RSpec.describe Clusters::Kubernetes::CreateOrUpdateServiceAccountService do
 
         expect(WebMock).to have_requested(:put, api_url + "/apis/rbac.authorization.k8s.io/v1/namespaces/#{namespace}/rolebindings/#{role_binding_name}").with(
           body: hash_including(
-            metadata: { name: "gitlab-#{namespace}", namespace: "#{namespace}" },
+            metadata: { name: "gitlab-#{namespace}", namespace: namespace.to_s },
             roleRef: {
               apiGroup: 'rbac.authorization.k8s.io',
               kind: 'ClusterRole',
diff --git a/spec/services/groups/transfer_service_spec.rb b/spec/services/groups/transfer_service_spec.rb
index b543661e9a0..3cf2c875341 100644
--- a/spec/services/groups/transfer_service_spec.rb
+++ b/spec/services/groups/transfer_service_spec.rb
@@ -200,7 +200,7 @@ RSpec.describe Groups::TransferService, :sidekiq_inline do
           let_it_be(:project2) { create(:project, :private, namespace: group) }
 
           it_behaves_like 'project namespace path is in sync with project path' do
-            let(:group_full_path) { "#{group.path}" }
+            let(:group_full_path) { group.path.to_s }
             let(:projects_with_project_namespace) { [project1, project2] }
           end
         end
@@ -274,7 +274,7 @@ RSpec.describe Groups::TransferService, :sidekiq_inline do
         end
 
         it_behaves_like 'project namespace path is in sync with project path' do
-          let(:group_full_path) { "#{new_parent_group.full_path}" }
+          let(:group_full_path) { new_parent_group.full_path.to_s }
           let(:projects_with_project_namespace) { [project] }
         end
       end
diff --git a/spec/services/members/invite_service_spec.rb b/spec/services/members/invite_service_spec.rb
index 6fa781a84c2..23d4d671afc 100644
--- a/spec/services/members/invite_service_spec.rb
+++ b/spec/services/members/invite_service_spec.rb
@@ -393,7 +393,7 @@ RSpec.describe Members::InviteService, :aggregate_failures, :clean_gitlab_redis_
 
     context 'when email is already a member with a user on the project' do
       let!(:existing_member) { create(:project_member, :guest, project: project) }
-      let(:params) { { email: "#{existing_member.user.email}", access_level: ProjectMember::MAINTAINER } }
+      let(:params) { { email: existing_member.user.email.to_s, access_level: ProjectMember::MAINTAINER } }
 
       it 'allows re-invite of an already invited email and updates the access_level' do
         expect { result }.not_to change(ProjectMember, :count)
@@ -403,7 +403,7 @@ RSpec.describe Members::InviteService, :aggregate_failures, :clean_gitlab_redis_
 
       context 'when email belongs to an existing user as a confirmed secondary email' do
         let(:secondary_email) { create(:email, :confirmed, email: 'secondary@example.com', user: existing_member.user) }
-        let(:params) { { email: "#{secondary_email.email}" } }
+        let(:params) { { email: secondary_email.email.to_s } }
 
         it 'allows re-invite to an already invited email' do
           expect_to_create_members(count: 0)
diff --git a/spec/services/resource_events/change_state_service_spec.rb b/spec/services/resource_events/change_state_service_spec.rb
index 255ee9eca57..b679943073c 100644
--- a/spec/services/resource_events/change_state_service_spec.rb
+++ b/spec/services/resource_events/change_state_service_spec.rb
@@ -18,10 +18,11 @@ RSpec.describe ResourceEvents::ChangeStateService do
 
         event = resource.resource_state_events.last
 
-        if resource.is_a?(Issue)
+        case resource
+        when Issue
           expect(event.issue).to eq(resource)
           expect(event.merge_request).to be_nil
-        elsif resource.is_a?(MergeRequest)
+        when MergeRequest
           expect(event.issue).to be_nil
           expect(event.merge_request).to eq(resource)
         end
@@ -91,10 +92,11 @@ RSpec.describe ResourceEvents::ChangeStateService do
   end
 
   def expect_event_source(event, source)
-    if source.is_a?(MergeRequest)
+    case source
+    when MergeRequest
       expect(event.source_commit).to be_nil
       expect(event.source_merge_request).to eq(source)
-    elsif source.is_a?(Commit)
+    when Commit
       expect(event.source_commit).to eq(source.id)
       expect(event.source_merge_request).to be_nil
     else
diff --git a/spec/services/todo_service_spec.rb b/spec/services/todo_service_spec.rb
index 45a8268043f..774a6ddcfb3 100644
--- a/spec/services/todo_service_spec.rb
+++ b/spec/services/todo_service_spec.rb
@@ -1037,7 +1037,7 @@ RSpec.describe TodoService do
     let_it_be(:noteable) { create(:issue, project: project) }
 
     let(:note) { create(:note, project: project, note: mentions, noteable: noteable) }
-    let(:addressed_note) { create(:note, project: project, note: "#{directly_addressed}", noteable: noteable) }
+    let(:addressed_note) { create(:note, project: project, note: directly_addressed.to_s, noteable: noteable) }
 
     it 'creates a todo for each valid mentioned user not included in skip_users' do
       service.update_note(note, author, skip_users)
diff --git a/spec/services/todos/destroy/entity_leave_service_spec.rb b/spec/services/todos/destroy/entity_leave_service_spec.rb
index 9942bd8688b..9d5ed70e9ef 100644
--- a/spec/services/todos/destroy/entity_leave_service_spec.rb
+++ b/spec/services/todos/destroy/entity_leave_service_spec.rb
@@ -28,7 +28,7 @@ RSpec.describe Todos::Destroy::EntityLeaveService do
       set_access(group, user, group_access) if group_access
     end
 
-    it "#{params[:method].to_s.humanize(capitalize: false)}" do
+    it params[:method].to_s.humanize(capitalize: false) do
       send(method_name)
     end
   end
diff --git a/spec/services/users/approve_service_spec.rb b/spec/services/users/approve_service_spec.rb
index 078dde546c9..34eb5b18ff6 100644
--- a/spec/services/users/approve_service_spec.rb
+++ b/spec/services/users/approve_service_spec.rb
@@ -67,7 +67,7 @@ RSpec.describe Users::ApproveService do
 
           subject
 
-          expect(Gitlab::AppLogger).to have_received(:info).with(message: "User instance access request approved", user: "#{user.username}", email: "#{user.email}", approved_by: "#{current_user.username}", ip_address: "#{current_user.current_sign_in_ip}")
+          expect(Gitlab::AppLogger).to have_received(:info).with(message: "User instance access request approved", user: user.username.to_s, email: user.email.to_s, approved_by: current_user.username.to_s, ip_address: current_user.current_sign_in_ip.to_s)
         end
 
         it 'emails the user on approval' do
diff --git a/spec/services/users/ban_service_spec.rb b/spec/services/users/ban_service_spec.rb
index 79f3cbeb46d..3f9c7ebf067 100644
--- a/spec/services/users/ban_service_spec.rb
+++ b/spec/services/users/ban_service_spec.rb
@@ -34,7 +34,7 @@ RSpec.describe Users::BanService do
       end
 
       it 'logs ban in application logs' do
-        expect(Gitlab::AppLogger).to receive(:info).with(message: "User ban", user: "#{user.username}", email: "#{user.email}", ban_by: "#{current_user.username}", ip_address: "#{current_user.current_sign_in_ip}")
+        expect(Gitlab::AppLogger).to receive(:info).with(message: "User ban", user: user.username.to_s, email: user.email.to_s, ban_by: current_user.username.to_s, ip_address: current_user.current_sign_in_ip.to_s)
 
         ban_user
       end
diff --git a/spec/services/users/reject_service_spec.rb b/spec/services/users/reject_service_spec.rb
index abff6b1e023..12952a43de0 100644
--- a/spec/services/users/reject_service_spec.rb
+++ b/spec/services/users/reject_service_spec.rb
@@ -73,7 +73,7 @@ RSpec.describe Users::RejectService do
 
           subject
 
-          expect(Gitlab::AppLogger).to have_received(:info).with(message: "User instance access request rejected", user: "#{user.username}", email: "#{user.email}", rejected_by: "#{current_user.username}", ip_address: "#{current_user.current_sign_in_ip}")
+          expect(Gitlab::AppLogger).to have_received(:info).with(message: "User instance access request rejected", user: user.username.to_s, email: user.email.to_s, rejected_by: current_user.username.to_s, ip_address: current_user.current_sign_in_ip.to_s)
         end
       end
     end
diff --git a/spec/services/users/unban_service_spec.rb b/spec/services/users/unban_service_spec.rb
index d536baafdcc..3dcb8450e7b 100644
--- a/spec/services/users/unban_service_spec.rb
+++ b/spec/services/users/unban_service_spec.rb
@@ -38,7 +38,7 @@ RSpec.describe Users::UnbanService do
       end
 
       it 'logs unban in application logs' do
-        expect(Gitlab::AppLogger).to receive(:info).with(message: "User unban", user: "#{user.username}", email: "#{user.email}", unban_by: "#{current_user.username}", ip_address: "#{current_user.current_sign_in_ip}")
+        expect(Gitlab::AppLogger).to receive(:info).with(message: "User unban", user: user.username.to_s, email: user.email.to_s, unban_by: current_user.username.to_s, ip_address: current_user.current_sign_in_ip.to_s)
 
         unban_user
       end
diff --git a/spec/support/google_api/cloud_platform_helpers.rb b/spec/support/google_api/cloud_platform_helpers.rb
index 840f948e377..b9752577c76 100644
--- a/spec/support/google_api/cloud_platform_helpers.rb
+++ b/spec/support/google_api/cloud_platform_helpers.rb
@@ -157,7 +157,7 @@ module GoogleApi
     def cloud_platform_projects_billing_info_body(project_id, billing_enabled)
       {
         "name": "projects/#{project_id}/billingInfo",
-        "projectId": "#{project_id}",
+        "projectId": project_id.to_s,
         "billingAccountName": "account-name",
         "billingEnabled": billing_enabled
       }
diff --git a/spec/support/helpers/features/releases_helpers.rb b/spec/support/helpers/features/releases_helpers.rb
index 9cce9c4882d..a24b99bbe61 100644
--- a/spec/support/helpers/features/releases_helpers.rb
+++ b/spec/support/helpers/features/releases_helpers.rb
@@ -39,7 +39,7 @@ module Spec
 
               wait_for_all_requests
 
-              click_button("#{branch_name}")
+              click_button(branch_name.to_s)
             end
           end
 
diff --git a/spec/support/helpers/filter_spec_helper.rb b/spec/support/helpers/filter_spec_helper.rb
index ca844b33ba8..7beed9c7755 100644
--- a/spec/support/helpers/filter_spec_helper.rb
+++ b/spec/support/helpers/filter_spec_helper.rb
@@ -90,10 +90,11 @@ module FilterSpecHelper
   #
   # Returns a String
   def invalidate_reference(reference)
-    if reference =~ /\A(.+)?[^\d]\d+\z/
+    case reference
+    when /\A(.+)?[^\d]\d+\z/
       # Integer-based reference with optional project prefix
       reference.gsub(/\d+\z/) { |i| i.to_i + 10_000 }
-    elsif reference =~ /\A(.+@)?(\h{7,40}\z)/
+    when /\A(.+@)?(\h{7,40}\z)/
       # SHA-based reference with optional prefix
       reference.gsub(/\h{7,40}\z/) { |v| v.reverse }
     else
diff --git a/spec/support/helpers/graphql_helpers.rb b/spec/support/helpers/graphql_helpers.rb
index b2fc6ae3286..bd0efc96bd8 100644
--- a/spec/support/helpers/graphql_helpers.rb
+++ b/spec/support/helpers/graphql_helpers.rb
@@ -378,7 +378,7 @@ module GraphqlHelpers
 
   def field_with_params(name, attributes = {})
     namerized = GraphqlHelpers.fieldnamerize(name.to_s)
-    return "#{namerized}" if attributes.blank?
+    return namerized.to_s if attributes.blank?
 
     field_params = if attributes.is_a?(Hash)
                      "(#{attributes_to_graphql(attributes)})"
diff --git a/spec/support/helpers/kubernetes_helpers.rb b/spec/support/helpers/kubernetes_helpers.rb
index 912e7d24b25..fb695ce8e61 100644
--- a/spec/support/helpers/kubernetes_helpers.rb
+++ b/spec/support/helpers/kubernetes_helpers.rb
@@ -537,7 +537,7 @@ module KubernetesHelpers
       },
       "spec" => {
         "containers" => [
-          { "name" => "#{container_name}" },
+          { "name" => container_name.to_s },
           { "name" => "#{container_name}-1" }
         ]
       },
diff --git a/spec/support/matchers/exceed_query_limit.rb b/spec/support/matchers/exceed_query_limit.rb
index bfcaf9552b3..6d7658b7c33 100644
--- a/spec/support/matchers/exceed_query_limit.rb
+++ b/spec/support/matchers/exceed_query_limit.rb
@@ -333,7 +333,7 @@ RSpec::Matchers.define :issue_same_number_of_queries_as do
     or_fewer_msg = "or fewer" if @or_fewer
     threshold_msg = "(+/- #{threshold})" unless threshold == 0
 
-    ["#{expected_count}", or_fewer_msg, threshold_msg].compact.join(' ')
+    [expected_count.to_s, or_fewer_msg, threshold_msg].compact.join(' ')
   end
 
   def skip_cached
diff --git a/spec/support/shared_examples/graphql/notes_creation_shared_examples.rb b/spec/support/shared_examples/graphql/notes_creation_shared_examples.rb
index 0aa3bf8944f..bdd4dbfe209 100644
--- a/spec/support/shared_examples/graphql/notes_creation_shared_examples.rb
+++ b/spec/support/shared_examples/graphql/notes_creation_shared_examples.rb
@@ -78,7 +78,7 @@ RSpec.shared_examples 'a Note mutation when there are rate limit validation erro
 
     context 'when the user is in the allowlist' do
       before do
-        stub_application_setting(notes_create_limit_allowlist: ["#{current_user.username}"])
+        stub_application_setting(notes_create_limit_allowlist: [current_user.username.to_s])
       end
 
       it_behaves_like 'a Note mutation that creates a Note'
diff --git a/spec/support/shared_examples/graphql/resolvers/packages_resolvers_shared_examples.rb b/spec/support/shared_examples/graphql/resolvers/packages_resolvers_shared_examples.rb
index 3017f62a7c9..aadc061f175 100644
--- a/spec/support/shared_examples/graphql/resolvers/packages_resolvers_shared_examples.rb
+++ b/spec/support/shared_examples/graphql/resolvers/packages_resolvers_shared_examples.rb
@@ -25,7 +25,7 @@ RSpec.shared_examples 'group and projects packages resolver' do
     end
 
     %w[CREATED_DESC NAME_DESC VERSION_DESC TYPE_ASC].each do |order|
-      context "#{order}" do
+      context order.to_s do
         let(:args) { { sort: order } }
 
         it { is_expected.to eq([maven_package, conan_package]) }
@@ -33,7 +33,7 @@ RSpec.shared_examples 'group and projects packages resolver' do
     end
 
     %w[CREATED_ASC NAME_ASC VERSION_ASC TYPE_DESC].each do |order|
-      context "#{order}" do
+      context order.to_s do
         let(:args) { { sort: order } }
 
         it { is_expected.to eq([conan_package, maven_package]) }
diff --git a/spec/support/shared_examples/mailers/notify_shared_examples.rb b/spec/support/shared_examples/mailers/notify_shared_examples.rb
index 20ed380fb18..919311adc96 100644
--- a/spec/support/shared_examples/mailers/notify_shared_examples.rb
+++ b/spec/support/shared_examples/mailers/notify_shared_examples.rb
@@ -44,12 +44,12 @@ end
 
 RSpec.shared_examples 'an email with X-GitLab headers containing IDs' do
   it 'has X-GitLab-*-ID header' do
-    is_expected.to have_header "X-GitLab-#{model.class.name}-ID", "#{model.id}"
+    is_expected.to have_header "X-GitLab-#{model.class.name}-ID", model.id.to_s
   end
 
   it 'has X-GitLab-*-IID header if model has iid defined' do
     if model.respond_to?(:iid)
-      is_expected.to have_header "X-GitLab-#{model.class.name}-IID", "#{model.iid}"
+      is_expected.to have_header "X-GitLab-#{model.class.name}-IID", model.iid.to_s
     else
       expect(subject.header["X-GitLab-#{model.class.name}-IID"]).to eq nil
     end
diff --git a/spec/support/shared_examples/metrics/active_record_subscriber_shared_examples.rb b/spec/support/shared_examples/metrics/active_record_subscriber_shared_examples.rb
index 3f187a7e9e4..ef4b08c7865 100644
--- a/spec/support/shared_examples/metrics/active_record_subscriber_shared_examples.rb
+++ b/spec/support/shared_examples/metrics/active_record_subscriber_shared_examples.rb
@@ -37,7 +37,8 @@ RSpec.shared_examples 'store ActiveRecord info in RequestStore' do |db_role|
       Gitlab::WithRequestStore.with_request_store do
         subscriber.sql(event)
 
-        expected = if db_role == :primary
+        expected = case db_role
+                   when :primary
                      transform_hash(expected_payload_defaults, {
                        db_count: record_query ? 1 : 0,
                        db_write_count: record_write_query ? 1 : 0,
@@ -53,7 +54,7 @@ RSpec.shared_examples 'store ActiveRecord info in RequestStore' do |db_role|
                        db_primary_wal_cached_count: record_wal_query && record_cached_query ? 1 : 0,
                        "db_#{db_config_name}_wal_cached_count": record_wal_query && record_cached_query ? 1 : 0
                      })
-                   elsif db_role == :replica
+                   when :replica
                      transform_hash(expected_payload_defaults, {
                        db_count: record_query ? 1 : 0,
                        db_write_count: record_write_query ? 1 : 0,
diff --git a/spec/support/shared_examples/requests/api/graphql/packages/group_and_project_packages_list_shared_examples.rb b/spec/support/shared_examples/requests/api/graphql/packages/group_and_project_packages_list_shared_examples.rb
index 1b609915f32..fb4aacfd7a9 100644
--- a/spec/support/shared_examples/requests/api/graphql/packages/group_and_project_packages_list_shared_examples.rb
+++ b/spec/support/shared_examples/requests/api/graphql/packages/group_and_project_packages_list_shared_examples.rb
@@ -114,7 +114,7 @@ RSpec.shared_examples 'group and project packages query' do
     end
 
     [:CREATED_ASC, :NAME_ASC, :VERSION_ASC, :TYPE_ASC, :CREATED_DESC, :NAME_DESC, :VERSION_DESC, :TYPE_DESC].each do |order|
-      context "#{order}" do
+      context order.to_s do
         let(:sorted_packages) { packages_order_map.fetch(order) }
 
         it_behaves_like 'sorted paginated query' do
diff --git a/spec/support/shared_examples/requests/api/issues_shared_examples.rb b/spec/support/shared_examples/requests/api/issues_shared_examples.rb
index 991dbced02d..6328fb9cd8a 100644
--- a/spec/support/shared_examples/requests/api/issues_shared_examples.rb
+++ b/spec/support/shared_examples/requests/api/issues_shared_examples.rb
@@ -37,7 +37,7 @@ RSpec.shared_examples 'labeled issues with labels and label_name params' do
 
   context 'negation' do
     context 'array of labeled issues when all labels match with negation' do
-      let(:params) { { labels: "#{label.title},#{label_b.title}", not: { labels: "#{label_c.title}" } } }
+      let(:params) { { labels: "#{label.title},#{label_b.title}", not: { labels: label_c.title.to_s } } }
 
       it_behaves_like 'returns negated label names'
     end
diff --git a/spec/support/shared_examples/requests/api/notes_shared_examples.rb b/spec/support/shared_examples/requests/api/notes_shared_examples.rb
index 8479493911b..11f9565989f 100644
--- a/spec/support/shared_examples/requests/api/notes_shared_examples.rb
+++ b/spec/support/shared_examples/requests/api/notes_shared_examples.rb
@@ -179,7 +179,8 @@ RSpec.shared_examples 'noteable API' do |parent_type, noteable_type, id_name|
         end
       end
 
-      if parent_type == 'projects'
+      case parent_type
+      when 'projects'
         context 'by a project owner' do
           let(:user) { project.first_owner }
 
@@ -211,7 +212,7 @@ RSpec.shared_examples 'noteable API' do |parent_type, noteable_type, id_name|
             expect(Time.parse(json_response['updated_at'])).to be_like_time(creation_time)
           end
         end
-      elsif parent_type == 'groups'
+      when 'groups'
         context 'by a group owner' do
           it 'sets the creation time on the new note' do
             post api("/#{parent_type}/#{parent.id}/#{noteable_type}/#{noteable[id_name]}/notes", user), params: params
@@ -288,7 +289,7 @@ RSpec.shared_examples 'noteable API' do |parent_type, noteable_type, id_name|
       end
 
       it 'allows user in allow-list to create notes' do
-        stub_application_setting(notes_create_limit_allowlist: ["#{user.username}"])
+        stub_application_setting(notes_create_limit_allowlist: [user.username.to_s])
         subject
 
         expect(response).to have_gitlab_http_status(:created)
diff --git a/spec/support/shared_examples/services/users/dismiss_user_callout_service_shared_examples.rb b/spec/support/shared_examples/services/users/dismiss_user_callout_service_shared_examples.rb
index 09820593cdb..46a1f4b6598 100644
--- a/spec/support/shared_examples/services/users/dismiss_user_callout_service_shared_examples.rb
+++ b/spec/support/shared_examples/services/users/dismiss_user_callout_service_shared_examples.rb
@@ -20,7 +20,7 @@ RSpec.shared_examples_for 'dismissing user callout' do |model|
       old_time = 1.day.ago
       new_time = Time.current
       attributes = params.merge(dismissed_at: old_time, user: user)
-      existing_callout = create("#{model.name.split('::').last.underscore}".to_sym, attributes)
+      existing_callout = create(model.name.split('::').last.underscore.to_s.to_sym, attributes)
 
       expect { execute }.to change { existing_callout.reload.dismissed_at }.from(old_time).to(new_time)
     end
diff --git a/spec/support/shared_examples/uploaders/object_storage_shared_examples.rb b/spec/support/shared_examples/uploaders/object_storage_shared_examples.rb
index 3c977e62a10..af56f8ffac7 100644
--- a/spec/support/shared_examples/uploaders/object_storage_shared_examples.rb
+++ b/spec/support/shared_examples/uploaders/object_storage_shared_examples.rb
@@ -26,9 +26,10 @@ RSpec.shared_examples "migrates" do |to_store:, from_store: nil|
     expect(subject).to be_an(CarrierWave::Uploader::Base)
     expect(subject).to be_a(ObjectStorage::Concern)
 
-    if from == described_class::Store::REMOTE
+    case from
+    when described_class::Store::REMOTE
       expect(subject.file).to be_a(CarrierWave::Storage::Fog::File)
-    elsif from == described_class::Store::LOCAL
+    when described_class::Store::LOCAL
       expect(subject.file).to be_a(CarrierWave::SanitizedFile)
     else
       raise 'Unexpected file type'
diff --git a/spec/support_specs/graphql/arguments_spec.rb b/spec/support_specs/graphql/arguments_spec.rb
index 925af1ab79c..925f8c15d68 100644
--- a/spec/support_specs/graphql/arguments_spec.rb
+++ b/spec/support_specs/graphql/arguments_spec.rb
@@ -6,14 +6,14 @@ RSpec.describe Graphql::Arguments do
   it 'returns a blank string if the arguments are blank' do
     args = described_class.new({})
 
-    expect("#{args}").to be_blank
+    expect(args.to_s).to be_blank
   end
 
   it 'returns a serialized arguments if the arguments are not blank' do
     units = described_class.new({ temp: :CELSIUS, time: :MINUTES })
     args = described_class.new({ temp: 180, time: 45, units: units })
 
-    expect("#{args}").to eq('temp: 180, time: 45, units: {temp: CELSIUS, time: MINUTES}')
+    expect(args.to_s).to eq('temp: 180, time: 45, units: {temp: CELSIUS, time: MINUTES}')
   end
 
   it 'supports merge with +' do
diff --git a/spec/views/projects/commit/_commit_box.html.haml_spec.rb b/spec/views/projects/commit/_commit_box.html.haml_spec.rb
index c503e085d02..4335a0901ae 100644
--- a/spec/views/projects/commit/_commit_box.html.haml_spec.rb
+++ b/spec/views/projects/commit/_commit_box.html.haml_spec.rb
@@ -17,7 +17,7 @@ RSpec.describe 'projects/commit/_commit_box.html.haml' do
   it 'shows the commit SHA' do
     render
 
-    expect(rendered).to have_text("#{Commit.truncate_sha(project.commit.sha)}")
+    expect(rendered).to have_text(Commit.truncate_sha(project.commit.sha).to_s)
   end
 
   context 'when there is a pipeline present' do
diff --git a/spec/workers/loose_foreign_keys/cleanup_worker_spec.rb b/spec/workers/loose_foreign_keys/cleanup_worker_spec.rb
index 77190dc49d9..e01a391e277 100644
--- a/spec/workers/loose_foreign_keys/cleanup_worker_spec.rb
+++ b/spec/workers/loose_foreign_keys/cleanup_worker_spec.rb
@@ -105,9 +105,10 @@ RSpec.describe LooseForeignKeys::CleanupWorker do
   def perform_for(db:)
     time = Time.current.midnight
 
-    if db == :main
+    case db
+    when :main
       time += 2.minutes
-    elsif db == :ci
+    when :ci
       time += 3.minutes
     end