From 01600ff2d11bb7f77bb70bf143a95efdf59931e1 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Mon, 1 Nov 2021 06:09:58 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .../components/manage_two_factor_form.vue     | 133 +++++++++++----
 .../testing_guide/end_to_end/index.md         |   2 +-
 .../testing_guide/end_to_end/style_guide.md   |  10 +-
 .../testing_guide/testing_migrations_guide.md |   2 +-
 doc/development/uploads.md                    |  28 ++--
 doc/index.md                                  |   6 +
 .../dependency_scanning/index.md              |   6 +
 .../getting_started/pages_ci_cd_template.md   |  22 +--
 .../pages/img/choose_ci_template_v13_1.png    | Bin 10343 -> 0 bytes
 doc/user/project/pages/img/setup_ci_v13_1.png | Bin 15480 -> 0 bytes
 locale/gitlab.pot                             |  15 +-
 .../profiles/two_factor_auths_spec.rb         |  12 +-
 .../components/manage_two_factor_form_spec.js | 156 +++++++++++-------
 .../hook/smime_signature_interceptor_spec.rb  |   2 +-
 spec/tasks/gitlab/db_rake_spec.rb             |  24 +--
 spec/workers/emails_on_push_worker_spec.rb    |   2 +-
 16 files changed, 269 insertions(+), 151 deletions(-)
 delete mode 100644 doc/user/project/pages/img/choose_ci_template_v13_1.png
 delete mode 100644 doc/user/project/pages/img/setup_ci_v13_1.png

diff --git a/app/assets/javascripts/authentication/two_factor_auth/components/manage_two_factor_form.vue b/app/assets/javascripts/authentication/two_factor_auth/components/manage_two_factor_form.vue
index 0b748f18cb2..484c6524d0e 100644
--- a/app/assets/javascripts/authentication/two_factor_auth/components/manage_two_factor_form.vue
+++ b/app/assets/javascripts/authentication/two_factor_auth/components/manage_two_factor_form.vue
@@ -1,26 +1,46 @@
 <script>
-import { GlFormInput, GlFormGroup, GlButton, GlForm } from '@gitlab/ui';
+import { GlFormInput, GlFormGroup, GlButton, GlForm, GlModal } from '@gitlab/ui';
 import csrf from '~/lib/utils/csrf';
 import { __ } from '~/locale';
 
 export const i18n = {
   currentPassword: __('Current password'),
+  confirmTitle: __('Are you sure?'),
   confirmWebAuthn: __(
-    'Are you sure? This will invalidate your registered applications and U2F / WebAuthn devices.',
+    'This will invalidate your registered applications and U2F / WebAuthn devices.',
   ),
-  confirm: __('Are you sure? This will invalidate your registered applications and U2F devices.'),
+  confirm: __('This will invalidate your registered applications and U2F devices.'),
   disableTwoFactor: __('Disable two-factor authentication'),
+  disable: __('Disable'),
+  cancel: __('Cancel'),
   regenerateRecoveryCodes: __('Regenerate recovery codes'),
+  currentPasswordInvalidFeedback: __('Please enter your current password.'),
 };
 
 export default {
   name: 'ManageTwoFactorForm',
   i18n,
+  modalId: 'manage-two-factor-auth-confirm-modal',
+  modalActions: {
+    primary: {
+      text: i18n.disable,
+      attributes: {
+        variant: 'danger',
+      },
+    },
+    secondary: {
+      text: i18n.cancel,
+      attributes: {
+        variant: 'default',
+      },
+    },
+  },
   components: {
     GlForm,
     GlFormInput,
     GlFormGroup,
     GlButton,
+    GlModal,
   },
   inject: [
     'webauthnEnabled',
@@ -32,8 +52,11 @@ export default {
   ],
   data() {
     return {
-      method: '',
-      action: '#',
+      method: null,
+      action: null,
+      currentPassword: '',
+      currentPasswordState: null,
+      showConfirmModal: false,
     };
   },
   computed: {
@@ -46,9 +69,34 @@ export default {
     },
   },
   methods: {
-    handleFormSubmit(event) {
-      this.method = event.submitter.dataset.formMethod;
-      this.action = event.submitter.dataset.formAction;
+    submitForm() {
+      this.$refs.form.$el.submit();
+    },
+    async handleSubmitButtonClick({ method, action, confirm = false }) {
+      this.method = method;
+      this.action = action;
+
+      if (this.isCurrentPasswordRequired && this.currentPassword === '') {
+        this.currentPasswordState = false;
+
+        return;
+      }
+
+      this.currentPasswordState = null;
+
+      if (confirm) {
+        this.showConfirmModal = true;
+
+        return;
+      }
+
+      // Wait for form action and method to be updated
+      await this.$nextTick();
+
+      this.submitForm();
+    },
+    handleModalPrimary() {
+      this.submitForm();
     },
   },
   csrf,
@@ -57,10 +105,11 @@ export default {
 
 <template>
   <gl-form
-    class="gl-display-inline-block"
+    ref="form"
+    class="gl-sm-display-inline-block"
     method="post"
     :action="action"
-    @submit="handleFormSubmit($event)"
+    @submit.prevent
   >
     <input type="hidden" name="_method" data-testid="test-2fa-method-field" :value="method" />
     <input :value="$options.csrf.token" type="hidden" name="authenticity_token" />
@@ -69,35 +118,59 @@ export default {
       v-if="isCurrentPasswordRequired"
       :label="$options.i18n.currentPassword"
       label-for="current-password"
+      :state="currentPasswordState"
+      :invalid-feedback="$options.i18n.currentPasswordInvalidFeedback"
     >
       <gl-form-input
         id="current-password"
+        v-model="currentPassword"
         type="password"
         name="current_password"
-        required
+        :state="currentPasswordState"
         data-qa-selector="current_password_field"
       />
     </gl-form-group>
 
-    <gl-button
-      type="submit"
-      class="btn-danger gl-mr-3 gl-display-inline-block"
-      data-testid="test-2fa-disable-button"
-      variant="danger"
-      :data-confirm="confirmText"
-      :data-form-action="profileTwoFactorAuthPath"
-      :data-form-method="profileTwoFactorAuthMethod"
+    <div class="gl-display-flex gl-flex-wrap">
+      <gl-button
+        type="submit"
+        class="gl-sm-mr-3 gl-w-full gl-sm-w-auto"
+        data-testid="test-2fa-disable-button"
+        variant="danger"
+        @click.prevent="
+          handleSubmitButtonClick({
+            method: profileTwoFactorAuthMethod,
+            action: profileTwoFactorAuthPath,
+            confirm: true,
+          })
+        "
+      >
+        {{ $options.i18n.disableTwoFactor }}
+      </gl-button>
+      <gl-button
+        type="submit"
+        class="gl-mt-3 gl-sm-mt-0 gl-w-full gl-sm-w-auto"
+        data-testid="test-2fa-regenerate-codes-button"
+        @click.prevent="
+          handleSubmitButtonClick({
+            method: codesProfileTwoFactorAuthMethod,
+            action: codesProfileTwoFactorAuthPath,
+          })
+        "
+      >
+        {{ $options.i18n.regenerateRecoveryCodes }}
+      </gl-button>
+    </div>
+    <gl-modal
+      v-model="showConfirmModal"
+      :modal-id="$options.modalId"
+      size="sm"
+      :title="$options.i18n.confirmTitle"
+      :action-primary="$options.modalActions.primary"
+      :action-secondary="$options.modalActions.secondary"
+      @primary="handleModalPrimary"
     >
-      {{ $options.i18n.disableTwoFactor }}
-    </gl-button>
-    <gl-button
-      type="submit"
-      class="gl-display-inline-block"
-      data-testid="test-2fa-regenerate-codes-button"
-      :data-form-action="codesProfileTwoFactorAuthPath"
-      :data-form-method="codesProfileTwoFactorAuthMethod"
-    >
-      {{ $options.i18n.regenerateRecoveryCodes }}
-    </gl-button>
+      {{ confirmText }}
+    </gl-modal>
   </gl-form>
 </template>
diff --git a/doc/development/testing_guide/end_to_end/index.md b/doc/development/testing_guide/end_to_end/index.md
index b097d6b0729..57c8c3bf59c 100644
--- a/doc/development/testing_guide/end_to_end/index.md
+++ b/doc/development/testing_guide/end_to_end/index.md
@@ -147,7 +147,7 @@ as well as these:
 | Variable | Description |
 |-|-|
 | `QA_SCENARIO` | The scenario to run (default `Test::Instance::Image`) |
-| `QA_TESTS` | The test(s) to run (no default, which means run all the tests in the scenario). Use file paths as you would when running tests via RSpec, e.g., `qa/specs/features/ee/browser_ui` would include all the `EE` UI tests. |
+| `QA_TESTS` | The test(s) to run (no default, which means run all the tests in the scenario). Use file paths as you would when running tests via RSpec, for example, `qa/specs/features/ee/browser_ui` would include all the `EE` UI tests. |
 | `QA_RSPEC_TAGS` | The RSpec tags to add (no default) |
 
 For now [manual jobs with custom variables don't use the same variable
diff --git a/doc/development/testing_guide/end_to_end/style_guide.md b/doc/development/testing_guide/end_to_end/style_guide.md
index 22ddae6e836..a9571df1188 100644
--- a/doc/development/testing_guide/end_to_end/style_guide.md
+++ b/doc/development/testing_guide/end_to_end/style_guide.md
@@ -14,7 +14,7 @@ This document describes the conventions used at GitLab for writing End-to-end (E
 
 When clicking in a single link to navigate, use `click_`.
 
-E.g.:
+For example:
 
 ```ruby
 def click_ci_cd_pipelines
@@ -33,7 +33,7 @@ From a testing perspective, if we want to check that clicking a link, or a butto
 
 When interacting with multiple elements to go to a page, use `go_to_`.
 
-E.g.:
+For example:
 
 ```ruby
 def go_to_operations_environments
@@ -63,12 +63,12 @@ We follow a simple formula roughly based on Hungarian notation.
 - `type`: A generic control on the page that can be seen by a user.
   - `_button`
   - `_checkbox`
-  - `_container`: an element that includes other elements, but doesn't present visible content itself. E.g., an element that has a third-party editor inside it, but which isn't the editor itself and so doesn't include the editor's content.
+  - `_container`: an element that includes other elements, but doesn't present visible content itself. For example, an element that has a third-party editor inside it, but which isn't the editor itself and so doesn't include the editor's content.
   - `_content`: any element that contains text, images, or any other content displayed to the user.
   - `_dropdown`
   - `_field`: a text input element.
   - `_link`
-  - `_modal`: a popup modal dialog, e.g., a confirmation prompt.
+  - `_modal`: a popup modal dialog, for example, a confirmation prompt.
   - `_placeholder`: a temporary element that appears while content is loading. For example, the elements that are displayed instead of discussions while the discussions are being fetched.
   - `_radio`
   - `_tab`
@@ -116,7 +116,7 @@ we use the name of the page object in [snake_case](https://en.wikipedia.org/wiki
 (all lowercase, with words separated by an underscore). See good and bad examples below.
 
 While we prefer to follow the standard in most cases, it is also acceptable to
-use common abbreviations (e.g., `mr`) or other alternatives, as long as
+use common abbreviations (for example, `mr`) or other alternatives, as long as
 the name is not ambiguous. This can include appending `_page` if it helps to
 avoid confusion or make the code more readable. For example, if a page object is
 named `New`, it could be confusing to name the block argument `new` because that
diff --git a/doc/development/testing_guide/testing_migrations_guide.md b/doc/development/testing_guide/testing_migrations_guide.md
index 88b2eb730c1..4092c1a2f6d 100644
--- a/doc/development/testing_guide/testing_migrations_guide.md
+++ b/doc/development/testing_guide/testing_migrations_guide.md
@@ -38,7 +38,7 @@ ensures proper isolation.
 
 ## Testing an `ActiveRecord::Migration` class
 
-To test an `ActiveRecord::Migration` class (i.e., a
+To test an `ActiveRecord::Migration` class (for example, a
 regular migration `db/migrate` or a post-migration `db/post_migrate`), you
 must load the migration file by using the `require_migration!` helper
 method because it is not autoloaded by Rails.
diff --git a/doc/development/uploads.md b/doc/development/uploads.md
index 9c5686db0f6..6d8b951be83 100644
--- a/doc/development/uploads.md
+++ b/doc/development/uploads.md
@@ -7,12 +7,12 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 # Uploads development documentation
 
 [GitLab Workhorse](https://gitlab.com/gitlab-org/gitlab-workhorse) has special rules for handling uploads.
-To prevent occupying a Ruby process on I/O operations, we process the upload in workhorse, where is cheaper.
+We process the upload in Workhorse to prevent occupying a Ruby process on I/O operations and because it is cheaper.
 This process can also directly upload to object storage.
 
 ## The problem description
 
-The following graph explains machine boundaries in a scalable GitLab installation. Without any workhorse optimization in place, we can expect incoming requests to follow the numbers on the arrows.
+The following graph explains machine boundaries in a scalable GitLab installation. Without any Workhorse optimization in place, we can expect incoming requests to follow the numbers on the arrows.
 
 ```mermaid
 graph TB
@@ -27,10 +27,10 @@ graph TB
     subgraph "redis cluster"
        r(persisted redis)
     end
-    LB-- 1 -->workhorse
+    LB-- 1 -->Workhorse
 
     subgraph "web or API fleet"
-      workhorse-- 2 -->rails
+      Workhorse-- 2 -->rails
     end
     rails-- "3 (write files)" -->nfs
     rails-- "4 (schedule a job)" -->r
@@ -63,12 +63,12 @@ graph TB
     subgraph "redis cluster"
        r(persisted redis)
     end
-    LB-- 1 -->workhorse
+    LB-- 1 -->Workhorse
 
     subgraph "web or API fleet"
-      workhorse-- "3 (without files)" -->rails
+      Workhorse-- "3 (without files)" -->rails
     end
-    workhorse -- "2 (write files)" -->nfs
+    Workhorse -- "2 (write files)" -->nfs
     rails-- "4 (schedule a job)" -->r
 
     subgraph sidekiq
@@ -120,7 +120,7 @@ We have three kinds of file encoding in our uploads:
 
 1. <i class="fa fa-check-circle"></i> **multipart**: `multipart/form-data` is the most common, a file is encoded as a part of a multipart encoded request.
 1. <i class="fa fa-check-circle"></i> **body**: some APIs uploads files as the whole request body.
-1. <i class="fa fa-times-circle"></i> **JSON**: some JSON API uploads files as base64 encoded strings. This requires a change to GitLab Workhorse,
+1. <i class="fa fa-times-circle"></i> **JSON**: some JSON APIs upload files as base64-encoded strings. This requires a change to GitLab Workhorse,
    which is tracked [in this issue](https://gitlab.com/gitlab-org/gitlab/-/issues/325068).
 
 ## Uploading technologies
@@ -131,9 +131,9 @@ GitLab supports 3 kinds of uploading technologies, here follows a brief descript
 
 ### Rack Multipart upload
 
-This is the default kind of upload, and it's most expensive in terms of resources.
+This is the default kind of upload, and it's the most expensive in terms of resources.
 
-In this case, workhorse is unaware of files being uploaded and acts as a regular proxy.
+In this case, Workhorse is unaware of files being uploaded and acts as a regular proxy.
 
 When a multipart request reaches the rails application, `Rack::Multipart` leaves behind temporary files in `/tmp` and uses valuable Ruby process time to copy files around.
 
@@ -213,7 +213,7 @@ sequenceDiagram
 
 This is the more advanced acceleration technique we have in place.
 
-Workhorse asks rails for temporary pre-signed object storage URLs and directly uploads to object storage.
+Workhorse asks Rails for temporary pre-signed object storage URLs and directly uploads to object storage.
 
 In this setup, an extra Rails route must be implemented in order to handle authorization. Examples of this can be found in:
 
@@ -221,7 +221,7 @@ In this setup, an extra Rails route must be implemented in order to handle autho
   and [its routes](https://gitlab.com/gitlab-org/gitlab/-/blob/cc723071ad337573e0360a879cbf99bc4fb7adb9/config/routes/git_http.rb#L31-32).
 - [API endpoints for uploading packages](packages.md#file-uploads).
 
-This falls back to _disk buffered upload_ when `direct_upload` is disabled inside the [object storage setting](../administration/uploads.md#object-storage-settings).
+Direct upload falls back to _disk buffered upload_ when `direct_upload` is disabled inside the [object storage setting](../administration/uploads.md#object-storage-settings).
 The answer to the `/authorize` call contains only a file system path.
 
 ```mermaid
@@ -275,7 +275,7 @@ sequenceDiagram
 
 In this section, we describe how to add a new upload route [accelerated](#uploading-technologies) by Workhorse for [body and multipart](#upload-encodings) encoded uploads.
 
-Uploads routes belong to one of these categories:
+Upload routes belong to one of these categories:
 
 1. Rails controllers: uploads handled by Rails controllers.
 1. Grape API: uploads handled by a Grape API endpoint.
@@ -289,7 +289,7 @@ GraphQL uploads do not support [direct upload](#direct-upload) yet. Depending on
 For both the Rails controller and Grape API uploads, Workhorse has to be updated in order to get the
 support for the new upload route.
 
-1. Open an new issue in the [Workhorse tracker](https://gitlab.com/gitlab-org/gitlab-workhorse/-/issues/new) describing precisely the new upload route:
+1. Open a new issue in the [Workhorse tracker](https://gitlab.com/gitlab-org/gitlab-workhorse/-/issues/new) describing precisely the new upload route:
    - The route's URL.
    - The [upload encoding](#upload-encodings).
    - If possible, provide a dump of the upload request.
diff --git a/doc/index.md b/doc/index.md
index a638647e3e3..57eb9e195ff 100644
--- a/doc/index.md
+++ b/doc/index.md
@@ -6,12 +6,18 @@ comments: false
 description: 'Learn how to use and administer GitLab, the most scalable Git-based fully integrated platform for software development.'
 ---
 
+<!-- markdownlint-disable MD044 -->
+<!-- MD044/proper-names test disabled after this line to make page compatible with markdownlint-cli 0.29.0. -->
+<!-- See https://docs.gitlab.com/ee/development/documentation/testing.html#disable-markdownlint-tests -->
+
 <div class="d-none">
   <h3>Visit <a href="https://docs.gitlab.com/ee/">docs.gitlab.com</a> for the latest version
   of this help information with enhanced navigation, discoverability, and readability.</h3>
 </div>
 <!-- the div above will not display on the docs site but will display on /help -->
 
+<!-- markdownlint-enable MD044 -->
+
 # GitLab Docs
 
 Welcome to [GitLab](https://about.gitlab.com/) documentation.
diff --git a/doc/user/application_security/dependency_scanning/index.md b/doc/user/application_security/dependency_scanning/index.md
index 46b4ef6c96b..a6972e464dd 100644
--- a/doc/user/application_security/dependency_scanning/index.md
+++ b/doc/user/application_security/dependency_scanning/index.md
@@ -60,6 +60,10 @@ maximum of two directory levels from the repository's root. For example, the
 `gemnasium-dependency_scanning` job is enabled if a repository contains either `Gemfile`,
 `api/Gemfile`, or `api/client/Gemfile`, but not if the only supported dependency file is `api/v1/client/Gemfile`.
 
+<!-- markdownlint-disable MD044 -->
+<!-- MD044/proper-names test disabled after this line to make page compatible with markdownlint-cli 0.29.0. -->
+<!-- See https://docs.gitlab.com/ee/development/documentation/testing.html#disable-markdownlint-tests -->
+
 The following languages and dependency managers are supported:
 
 <style>
@@ -246,6 +250,8 @@ table.supported-languages ul {
   </tbody>
 </table>
 
+<!-- markdownlint-enable MD044 -->
+
 ### Notes regarding supported languages and package managers
 
 1. Although Gradle with Java 8 is supported, there are other issues such that Android project builds are not supported at this time. Please see the backlog issue [Android support for Dependency Scanning (gemnasium-maven)](https://gitlab.com/gitlab-org/gitlab/-/issues/336866) for more details.
diff --git a/doc/user/project/pages/getting_started/pages_ci_cd_template.md b/doc/user/project/pages/getting_started/pages_ci_cd_template.md
index 74bc54c63f0..55a57bd9e07 100644
--- a/doc/user/project/pages/getting_started/pages_ci_cd_template.md
+++ b/doc/user/project/pages/getting_started/pages_ci_cd_template.md
@@ -13,29 +13,17 @@ the CI/CD pipeline to generate a Pages website.
 
 Use a `.gitlab-ci.yml` template when you have an existing project that you want to add a Pages site to.
 
-Your GitLab repository should contain files specific to an SSG, or plain HTML.
-After you complete these steps, you may need to do additional
-configuration for the Pages site to generate properly.
+Your GitLab repository should contain files specific to an SSG, or plain HTML. After you complete
+these steps, you may have to do additional configuration for the Pages site to generate properly.
 
 1. On the left sidebar, select **Project information**.
-1. Click **Set up CI/CD**.
-
-   ![setup GitLab CI/CD](../img/setup_ci_v13_1.png)
-
-   If this button is not available, CI/CD is already configured for
-   your project. You may want to browse the `.gitlab-ci.yml` files
-   [in these projects instead](https://gitlab.com/pages).
-
+1. Click **Set up CI/CD**. If this button is not available, CI/CD is already configured for your project.
+   You may want to browse the `.gitlab-ci.yml` files [in these projects instead](https://gitlab.com/pages).
 1. From the **Apply a template** list, choose a template for the SSG you're using.
-   You can also choose plain HTML.
-
-   ![gitlab-ci templates](../img/choose_ci_template_v13_1.png)
-
-   If you don't find a corresponding template, you can view the
+   You can also choose plain HTML. If you don't find a corresponding template, you can view the
    [GitLab Pages group of sample projects](https://gitlab.com/pages).
    These projects contain `.gitlab-ci.yml` files that you can modify for your needs.
    You can also [learn how to write your own `.gitlab-ci.yml` file for GitLab Pages](pages_from_scratch.md).
-
 1. Save and commit the `.gitlab-ci.yml` file.
 
 If everything is configured correctly, the site can take approximately 30 minutes to deploy.
diff --git a/doc/user/project/pages/img/choose_ci_template_v13_1.png b/doc/user/project/pages/img/choose_ci_template_v13_1.png
deleted file mode 100644
index a0c25ba16425dfc619333b1ec17787d0f89c02c6..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 10343
zcma)i2UJtt(l#~_6@5WL5dlE~K}aO@u2K|&H0dNkfzWFRy@@CYDhMc{qezi1olt^E
zC-mNt5<>62g#QHn-uwRFckf!4#oBwHnc1^vo@ZtsSnC9;sXU@Ncl{g%1qF@bV>t~9
zic=U0iW6yPPXQ88666*zoi=;$<N*amZpitA=VyTD6OI~>9#Ukt-k7DJI4NbJsf*Tq
zqAYG~X9Id}VrPT|x!TwRRumMHuHwMb28n)t)78e>)=}J5iv8F^99WaZVD_8GCTJ@u
zcHJjxH)ZWm$eThSLC`&R>2o)4-jqa{n2Kx2Dg4<EJV~*eqtW)_V6cme3&=$PWQQ^X
z^NWdzf$u@U5C|V&!RP2^i+=9PXX|+Dx0C<zBZqV}Mp@XSE$nP>lKnn6vU5U9v9ps8
z`upd1oJd!Tf1PCO_$MtOK`>bZ<_Fya|GRBy3)BCwjjZ{-?KrRB$4Qc%iEB9`QL=V6
zHb`5v^iyLL5^3vbZikjUKI#8c{wvPk8`Ugak=D9$7QjwNASY=tez8Bh{<r4e?$rC&
zPC<y!KX?8^^N*e66vS0g7C@ZO$rwuWOM?H8?2o-9m<;eg0RPSAu@s<F`kW;A@6wPy
zmp}TU11O|bHDyitqoX4b2(-1eMLIen5C{hc2P6_{Z*Om9Wo3DJdGCO9NIG)NnVVhT
zU)wnx8yl;ssoCA#U0Pb&-rinaU0qyUoSB)audkPtl|4Kpt*@_7O-=0`9c^uH9v$rv
ziNw$kp+I3eIXP8TRn^ti^$!dP@pzF)qbLwxp68AD`1sAq5-lyQ$F@JFr>AFUXS1`j
zaH9uD2S+<QJA-8oX=&+UVc`~*mQ78KWo2cA-6OxeDZ#tWwY9bL^Yg<)!&V@^(b3U@
zf&y<4-~PeAmzNiW*DyFZxUH>?L^_I%iCJ4)(*c1bBqTO=kH*KxBO{~K)YOQFM@mXc
zhkIk)-QBNVy;@jY40z*jV`pDnT)c94l#-It*Vk7*1YojOGk!3>OByQob#r$eUp?sP
z>@-6ndzX$#B*Mbx!Q|wWlG~53NlAIRxh<{D`uh5T`BR@heR_i>F7>9o1Mv!TzgyfU
zwYRr#?H?)F7m9JDY>a&`9@v{{NzlM_tgmeB&;9JpN0CVLxhU4RL4lLCVWj<CLqo&;
zz4gQ00UQq3Hh+|by7?rarV{@v+D&h0gGB5t{!~UtYg+Nm8r$Dp*jsAzi7qSuKwHt!
z{u$1(x4kE;ixcIF1_;>QAB;t@m1RUPj}+G?Jl)vXC}>-%`)qr#-YOs<(9qD39irWt
zZk6(rkn@(_A$9m`=|D7ycmMFnt8hLg!XY*3Q+8Q3Hp<p5G;eQxprs@(s(Sf8>ea^9
zUP-)L+pkSO6uYT&%KOv~dk~*Zbn64XY@{P5yJPEZO1UqbOG^K}cS1*hRoce>?#A5U
z0M??twk^UNg-Oia-92i}_1l<kmUD@5^$5z2ea*nYkdplaSC((~_S?|-O5cy@s-9&T
z{jZT;EWvP2rJ!#ky{*yd9UZCa+Mj#9KPJ|vy!wb@OUlak^45(>#kSX#8N%;qgFurT
z<JJNY37GrN>WqW_yT#EiQ8?U&$0-`-IJUkn4ClUa!|NIa#Z3xDxd)oAg9~vUYMOn_
z^=)<&-#dC=gqZrHU1mkUFZlb;Xg_+(G;+FBs8xaav!8=RqWMXGVWg|B+YUw0SHE-L
zZYHufyb-{edDidrntLVT=;|LC+k8z6k>e7w>8jk5a520J*VSaWx_@{95#iBRu{}H{
zm9Q>BT#8dadwf~{bC^l#_FUfz?waQ|NP5MW5NuEJm#7j`r4+Z%yaCB0?=Y+^ORk7Y
zTR)ADokwAc;_MA>g+z`{=;d0=A-*Um+DX0Tq&T<H8%j15#p&Rg)9g_HCOo!c@QzsI
z1;tiXTW|}p<?Kz06Ki4TuEP*>s;kd>^5mJks&VRX&L8R1gQvOrk<xrpc)}Ko@}S~d
zI6|BCmry<PSvCsa)v!D`V)XXw<YYHNXj0GRCv@43Q=VnR&tj}6@`5nf*2GLfiqGp6
zlA{eIZbY8_8JXB|nY+<x?YXU>*H2OpT=l*`Vjf_Cca>F49bVYqU%tI}jsNsb3dD3X
zTalW3RO`#=mRM>kLKvT{X^pP>BfVDQ177p671zcihPQ}JTVbQK_bJLhiiJjGxwy~X
zHjDejY5Uos?tsc|ApsAS^}Gv?GqIqRqc}N^96V_eIYAiZZhlcHSu8nfUZ$;3nZI_U
zs~E$ehi+o4`Rm0CS8h=$B`{TZa!_AX%fpW=K|d*xv*y)!BOP^$`}fN=<Fo6UuDYFb
zPlbO7G1$GutR9j73JfMPHGUt1JrTUYfBJL2BENXTupkt?>C`HAEA{a%OM9vjZr<i5
z1`}R^2tt{u8&Covn}yH1XNSA_F<8p$hofx<&}<tqQ;`uunhHf>D1zGpXHzI*E%qty
z<$bCz92CB0*-POFX1)xM#qzV%51Rj38vp%z<><jB8j71|XHI}mya4{DaHXawKTYui
zO7V+>;#ckF+UxB~J6H&aD?4ZV;MT3`mv0(ER~F8!Xk4WoWDab1D_me4-87UA*xq;}
z2I1k4#4)J8b7wJ{(>OIER+l^{o+_a2lJ;Oe8C2loD&om?>wuuv1`qN8UHyxNDD7in
zWM9k4zb0nRn0kKW2*L7`*p5~(%be5j>%+exjcnMYVQzU+Zi<y>(=%9qp`LdKKXroJ
z!%H=nsS}a~ww%+d=8@*EBAXD&D+tOEi~}2>WOJ~I+-SD@LHPwUvbAaC$|#4}ni>31
z4Rxgkk8_m2!mQ9Ce*XP1(t-bWXZcvdcm?4tcZGm(e&M6wwI+x_NR|~%B3h+#NO(z)
ztp&s!{dyf5-B&NNp8JcVe1Q^ik?r~fU`<n$p1PVB#p&D+^%_vhI)DpkbmYEy6Vwwk
z9~Uz;RLEybr^iXviKp>TYg!)k(J9eMlTN>5(`>oo^`^6qLv?`=^$mdwYAcW5DA3tU
zDw8$?KO$A(AG@e!Ul?|H!rTwt;<edktmowNz_4iFky)!gw|u?vS+&V_5PfuS%;0L?
z7U^eji1B8ME+fuGI-mPo3-jvL>l-`MTh2D&ZZa0aHB{};ia;JYJR6&lq?R{Viq_(Y
z9M=_bPu5$tq6dl<%0q+c#I+wH8ShUawX<!Gl(fqB_?S*3!mcA*poAvk`%wsCW0RdQ
zjrPY#zch+>Ywrj|kmg20rbL|!Tw2N*5|@`WstTf|#^@HKn=({Jxb(MzOsCZnw<&ML
zrgUhsa_-FuGHu)Mx+fNTmk)nd!PvN22+Ir#!r(=z$h#aHDVg;_(zuC^#imQ)ENb9S
z`5zs|K8Nx9b2?2~R@6yjG5m7*o_PABD_m}9ol2zN5Bv$)iVOBmp1b?CwWoVl9$Tm)
za|cycJ9X434Z_4b@R!0ZX4I5OYJ}v*?{Pb+uG@#kb|UKI=qI$yG2cftlG8{n)Z!vj
zkn>9Z)Sn78zv@-rsvaBdAI`>jIkN^!E!IOFO*!=HnDKv2uo}KQ3Mwm$T6Va4Pkz=n
z_Prz_EUxS&BZO;&Bc`<2J*_BgreAYAd$jo}R+nYwxqn82L&1<{LL>g8jfo!4@oS{s
z%IDBq5Jl}>_CCufKP#V{Fx-CU(}Fz;y&`jYydrjpW~r^KH=$XwY*KhpY2;DS`#FhG
zu7|ty9rYm?CTka@d(8UE;ZT7~Wy3++TAazix7!t)k4l&kYM>D~n`!W;8TT;nkhow6
zhn_}xe1w!-fax6vRD_*Y?~|i=6eFqY!{<0d@c`x?;*G>DUc)+c)%zDkcSIi9w%m<y
z=nGmq`3Rq9BlsA>I(A!i=D;=WVvskn$~AXM&KWwtaj-BJ{*KeB$OL@#f~r_-9LkkF
zL`}y$nno)cwbx(B2WPDBwJt=OTV6k(nv3c4*uU0TB(3T`|LXdj$LSJlR>c#l6}A|!
z!DzPOGZ)Gwt0$4PUWadO(9ju?j`X_<PIT!Ur7pGl3j;j@<r#*bl6Z#?m4B4;W~IV0
zZ}PDCgD;ILL`X>!xAst+O>Dhrl$UhtQkosD-qLVN@?PG_Y>V06uQWy%`BeBjdu-(V
zeYMlo+{Ad4{dokfHTMyw(=9<?IFts<OXI8=Jqu)L1lO+P`c0wqb~@8qOXv8@z@g)L
zUtdX&+3Ey&sI(SWITLfxa!YeOW9gam?_@&WE#UP@;tN?fS5Xb~ww!V$eh&@Y@t4-K
z(6&s>Hlj{1>vNl0)Qd(ZOv71ozy@xEHPmdA0;NrT%QSJUV1qLpn90IGo+)bFLiaM*
z=g2pu5Chd=Wx)-KJB+fh;50~@G-IpA+go@W4ob1i5iecFaz{$I?0|Q|ex{1(UJxr-
zc6y~Skd8RhCZwqBV{*faVY+kgWY%a6_De5LZ^rcQJ6b2f(9|!+nq}^$R}$7*7w)U1
zg!)jPX~whb^T=gygk5TzwALdO$T(7p(3=~-dD?qpaKRf=o0t^Ez$tDO-MZdEXP{LO
z>NHSe5M=(L2~TU67y0G6U9kBW9>$}Rp+nimh1BwY#1tZ4<7u23VRh>@-^9HJ+a@ix
z<Q~o`dm}^xb0zPR6n504@h`~F@{F?b(#-vjcCY2PkbD8NFYUZ{vjv1@nh0%09$mH1
z23YYC$pu_)j<=m&(@35mJR{CL$tY3utbB~Mh;QGGGfemERGvhpYzXSED#&0Lw(IiU
z1_Z>gsj6VdS<CK>`Q*Sc5$0bRYHn^*J-Np9i15k&K<^6PR1WXT%6FkQTspMvhbwho
zKXl<cy&!XX`bbCg!z#<Nb?M>Gm|#mUnQcXW(?C-Lf84tvgi3*sJ)-VAVwma@CO~KI
zW`<|VY{)55pS$bOinM1!m%Q!>=UPXUrpzyhSs3IOz@)MVm9p|JT+Kkd)B8MpLo0c~
z4DYjuu#_6^EboZ*vm)o2HL|nxCQNbp6(u}V@htLO?K|L$kHHmOeRoHvHD139&j8R-
z3lvjIMy^cZ6V&tOeTT{`MfA93ELL~|-sMBwSA;*n475hZuKP5L)MJ&7T4oHre_bR!
z=@Gy>Ph;Xgf1K`kn3Zmm>`!CNzfW@>x;W*KiO18Wx37pgr{h6Uj8N-xrSLFf>kCrF
z!qf0#OMMB%971AwEAJa0m~hkn6f^6-%+`|3o%G2Ur*=T@0kJRR-)w%6SmIVk#Sg!4
zI6+-$^OKn_iRZ7g=jiOuok*kQ7E0t)|4RE^_q`DpC#Nu-ggU>FaEGws5aXnBXF+&m
zn4oiKzhc+y?Jkv+-LkUfkq{UAhUcx5BO}`qe!o_imU8W6>|DkS`nSa+O5vO>7*f#v
z%nM)V@fCqONxnL*aOR5Jx*#1_tcll!p`3oV8UkvJYhWN@gRvZ*S1)5CgVkjwi4JlE
za2wAK5lAOj4>s<2K&%)qNL9RjdTBl3aG>WPz@}lhZ5IsF38-OS)6B3cEM&Ct39rPC
z+j@VU<<|!b7j|x~*#urliA{c3huQLcIGDDM5CV^4`c;31E`nXFhX}KsZ<&WMM^k=g
zI&UxKlJ*I`J{|5Z9lOL%y*o}sH@mi{#hOnpa2gLJ?Wur7)Jq$O2m?fK7hP*Gc))P-
zu;1V6lwMAdUk%?z*6UNtd9;(8DLJjYUVRB$c|%g7n*@{t4?({0mCMHPq3)_gNSVKY
zkxX-Y{^Dt-5C=?V_tw>g55-rh-mJT4Y-m=83qImagilncVxik_DccDu@B950BKC4A
zahEcK)?FYQD_ddAb6sbaycc?DUU}{o=`uN6_J`w4vj!qTiU_4q*FNLzcEg#=m14NX
zFC5lXNx`$XxOC_Fwv6@89Q2A6IW2zBoD0btJ$+YJ);qHpiu0(i@y@jJ*e%K{=KGkh
z`D3&H0;)-&&!nhJ*(`b7ug2E-#!g6OKo4&!l;|+?MU1IGinvXul`9?Sch;=q{j!Gk
z9hwa*lI;@HS$1W+h+-j}wFM(T?x15ZSk_7>QwHVl)Pcp@dO!4zF?>2w?;d{8**1R=
z>LZsQN^}K<+!!kzX8`pnf%L@S$Q(V@;PQk*qxm2EapfYL+O`R<RqRe3wZ7SgogsJQ
zukPm-Y)`LyKAyG6LhaeI3@^Fy49S%q*5RI+L94?BbVtHrpf7#-`zPm7mnw?00}!NQ
z*AcT0N@2OO{>F4yk&1#9f!vCuN0mxW%XT6a!YfRretnc%a-&zpq2;jP5}&l|%hHPQ
zkp6kg&zlQz*=u)=7KCKlNbgwa>>gf6eDM(-_cXHzNV0Uof@kI3(Oq{pXzVa(tF4So
zox1qBK?H6w(nEN65`X6Q(Fp|i&^o;0O$I&JY@$azcMH}v%+`SK6Qzu3=M$PHg;wT;
zci_@Yi8c`<5L{ja2UY#DkSNi=?$d-=v;0bxB7%R>V$c`F>Sz?(wd7m}TP2O+BI8Ic
z+XFxCQil^OKJHDMEIx={=ak6c3srdUnY6(napsNL=d0&jcS&)bc38ae!9H;+r=!gs
zwavOB`N?KtArPIv#5~^TC4TYH{&oMgvCn7=jr(xh=K;A(Q;%3}#J#~5&)ysQaF5{L
z_V!gM%o5F56bI#x^lnzZXmx(U;?-cEDH13X>eM#B+ajzzi2)P(0_Lu|+=y;J#2*^<
zy$#XCwByelT<n~ne>-ZD+HpHC;1X}~3j1FtBwQXJv{7YZ|9Z4QEFX=<9$ZfLS)5XJ
zvI7rk=dOD#Y(0H-+wA&cV|IYFXTaiW;aJ{axYDdsFVymv(@WMH#Ku_q^|xa07ixO$
zYVk*_>o0>!9f<p`=W6Y@6BV{lh9A0?OR|?7B1d^YZSUXSixBl8W-YJc&MaSBwK=5k
zYiX?seQI(!XUDtN_-koaumr!%R$%4E>X1;pzsh2i_~&WE1}<9OF3YL>rJ^`{nX1Ft
zt?Bx;&`js3?)t%b?+}cn{5?xhHDVF6EJ6$ymUMhqQRHIF^l;sHGy9ytXy)ZMg;9AC
zl4N=AdHK{^P0nI_(<!PLyrZ;f#rw;}yrqGp2N;rHfyn3Z$a+*GB?+S^;rMK#OO5+*
zU{P6mb#{&4?CJN)UztQo*R<ud`^Ha9Byo#d;+LO8?BED=xTK6WW2H~p(%9qKWRH{j
z4RcJ}R6F$bvCHc<^K}z4A}TwZ5t~;xLtkJeHQ3;zBEuUCjRHca;FsM3j=YrE2a?NY
zeyz3E=JJYyn7f#>8B1IslLzsbY5_%^Ua1(hwvlmrxjcMF{a+y2n>&Yidl$uDbfEEn
z{z3|1M$D&64wkCK&z^8*q@1UGE(Kmzu5(A|iro1Ds(uzHmFY9vf`ar`)`)u?TXY&#
zn4ihK`rgTc_B7THll6=4!7n<jYzMnHB`EY)nzE{D$fG)%yPU~QukiLJdY>feS8p{^
zE4`-1jMqbO=}Pi{$s{U$3)10KF1a9qncWlozH!wwT3YHfjGZlEmoLLq<&0=0*N+xh
z55zFAesyaQe=XwU$7^zKQE+4^Yd3epw}y=JWXmGD5O$b<9KIa;RO$|MSE#y!tGP;C
z%+)+l;c}1QPvp1TRbdO_-;|SWAN##)_z>KP*4j0JK73O;>|$(hF9Gw9ht_F)o#nav
zR@Q|3?tG{D@IBdnLPS*nRbMsoY-w!vY|y;5ZLqwFh3(S2`A+3aUYIe@Qek?KY<se7
zDz|~pb4m#N)n1GRI{1SNW7grO&p2cQrV=IH-Q)I!cKe}1%IZV2z7P3T7m%2awkqV~
z((aE!Z4}iVQ5~=p>Qfk*0BFf8=$RtSHADXte2H$!1_2@rx&UKoTn0;t2r!U&qMurO
z{UE;Do*HAH_RX7jdc2AQ_LJiz=7ch$H)X&+@JDi3B3L9pvU8kH{WH|7Ry^Y2r^ci`
z2dp$oH~ntQrB;2{gn?^KpwwL^bnq2}OIjW3I9N7h%{q9@8k&HNkzL@J4OM5+n?@mc
zYNyYQfxaecS)N%EhAF(kGZ;UQuZ6_SXx{EC3iFbC9Ag3DdXvhLPY<F!Q;L4bo0lGi
zXYX}xWslJQn)_IOA%)%eNlC<`Ts>F@GPvLRCr6?hCW}LS8j>-rJA}5(=dU&?2!nmi
z?PbX(JpUyA9UL?Ci%#80rYI>X$&(?C9v+6VS#36EW3wp|n;_ahL3ucxXM4>wWDHm(
z;s@UiYM0@Ycb@a|7haFTe`m3hwz2hb^&PNAoW;DM+s|E{Fau+H6BDDO?~t6XrG9sv
ztQ*mbf<)Q}-l-=j*<n^qzVN^Q@X8Y&S@zMWQIJ^8k!X%_)HN80&_)&{H$w(HcaLsS
zq*w^U*p-~3I@0k*lZ}xmW7@`I#`heJQy#)zCZA{lox`kz`ru>UTP1QI7a@>Sn6m&O
zFm`~UzZYb-s4<U!z$cc)_no=-%US`V$h^UfMs6mo>WiEO+N2cdCQ@cT73T2=_?nXi
z{yS)K2AE9dJAZP}Sz~nTy$+m)$LXl^pckKtBt1|tc}z3~oUXvbxRp5}Ji**g&%)Tl
zr!|rS-@Pkus^)+&f<g`Yd`jegH#qH|g)h0rN-l&nZ|c_zodD62pI$*v|6csD1?ucr
ze!&XkVj~>YWHq5K2%y%Gto7^53u?@pmoNru4sPKG-!CUBX$FSKiB(?a%gRaBPxFVC
z$h}-dF|%>J3@pes?Mmm|)x2kRDd*Op(Sw~T<;2!!m->Lj*{fWl*dpT@Sj^+N`crAn
zs}`Pr7%u+wTlN)yzJZ6PO!TH?1go4Zn({85ceZ&RjeEbIdE2D8{o_4lVh-$P|J&2X
zgXz0GK;XAaKyI1kM@>d~=diC#&Oh0msD7A*q}eZaC*w;8!(apXGo>;a^18K05g@e;
z)+^Cruia*Opz=oDFnp;p8xzn~)Y*8>RmZ~b9s*Y2%W3ySo9i&8LJyHN^u1c=&Z810
zbgTeGLVsbKolBL!{<P<qZ`0>#5f;YX?t<u13CG;lULVc6NcNKgRjqj|5wSIKr^n0a
zR9a8aC9A^p25wfMG^RB)L_-XhqEbWJ*L<OJp`bvXKFcS&(f}WFSEe9&|G93C%Lo93
z+~(v;0!rt2@wc3CG*Fh%E7!|QF$w&qBAA`%u$Q7Kmph?w&d#^LqxRYbKBb3W=!`OM
zXV}AGYg9UiXHNQh29Hh|s8l3#ZoS3|D61+>N?t-MH{Cuz{;0yPHe0r&h6Cgf2!+x8
z8L2UV<gfsLK-k=L+8-Nn$&h|CPKUV?g~vsM=zI?0lVPu+Fbxxsqqj`QTKE3^GEao4
z;Y1ia+QL>h%0UXd+}(4xq)MkkuheOwMBg&db1preknF0ilVt#SmY>SoB$Ry(7EK@7
zkBy^uSg=+p)aZ!%<g)3U&0&?jHS%715;*NW-rmQe?<B_NE1Ceg=W1rgycj45&Z~VZ
zr6?6k4kr|ElH<Y@OUIo5*~@X@B5T}p8*F8B<Ru1>gJMUf@%wU%`|Tetz&YRJ*E$Ip
zCk!KOA}rC-tqhgMHGcIj=E-`$$H5s)Ns@VA?q*k)dPy)1i~+r-(eYLXLp|i8(o<M!
zN<D;RehUp+DGf2)1vP$&TItdB;-OjB8oBC*ZNTF)#4Q>>UykJ=PF@4fR4+MjH0<;d
z|DdwmJMRbGdjWEh{*CER4$v{CK-9-rEB;%=|4S`x$pxa}Gz4&A6N;}rfbIiMlNKGK
z)`tvz;?fO&aDXg4V9^c_P-!EPFidy6{+T{n3u$`JwyNc59iweoKH=bXjWP{B&M7Ad
zClL1X48+RYT(ha5XUld&*m=^2Z)R9LUazyW3uTW^bQTuwT#719>oHLV;2RxE9!5;n
zZ~4}+v?zx)T1R4TWhr&ZoDB(XzWpWTu_`{JF%k%@q73gFbKS+S9`(JWTu0y#VwF%A
zED`0vFFJS+v{=8|UIJ6D1B!080&W@%jarr5nUZs?l9Ayu%|vK1(OG)&gC1>`>f~f|
zdI6wp#DlD=+PZtfSLG2&MrK`?aHSDghK(yX7>CZ}DmfSBJYru(u>c^Ph0T4^VU0d7
zHilk<b=amP_T=@-Yh2Q&wa9R`F3j)Ebq~0-M|I591^4J^hsDNU`47@9m0J(T<d&MX
zHTFhUwIKE-ebi&#E8>io0go<@*m(Mo93P=`I{680)s0J4zJn^tKWjL=?qOumIi`=e
zkv$V?#N0SHFMCDS0pxDMRp}zC1XgCKeIRu3B&O{8-^9Oy0{8(^*aX1W?c)(Z;J7S+
z@xRcLs6bXU%h}st+bbHZHGrp}QKZC;7jCP<Uor^VhBB-eUf=|FmndhUC?(ZRnqOnh
zaWNQrXe=0Lhca}tXSO}b_dxoo&-F497njxzyY9;Tq#d-SRdNJ^rW%Na`y6JIkk!RE
zJKwdT5HfhH!i|J9AES5Tsr@nYxIW`~B-vAF$qfv|NGLcsY`5k)jJGfR<r4JgMU@W~
zUfg>&j-V&J0ndR1f#&_C99iU7Xr<Rw9CCTHMwwDcYNo4))zl}7S|k?#oLnXH6A;Ps
zb%a{!$LU_q44GQhf$&1pM=j#LC7F~|4Au95D=DakAR^?GSfH?lWxV{6C3+ocu!f1~
zHs#1LkHI2HeS~}Ds$_RyoS%DgYnGCzs5&3alx@tKvoAh7Vj&-7c{JI3K!fDJKqm7s
zOzEJhJm=Z<aL@0kEM=A2y-a}&#v6C1lZ|||;|}23e~v_c$4JT;mZ#msZB4V>jngls
zF*5@BAE)&RfAsnHnMDl*%WLHJ8Ja`|{Ny0_E<oxr!N0Fj00lCs#~uH>v&a7nZKrCP
zpi2-<Qz3^7vv!d_rf?;#0>3b40k}>?5A<ca%}DBAhNDNjO?SHQ=jf=CFUn+mEc4I1
z5s-o2cp|2<$SAnASrKAo<+dpZgcsw$=!v!#n7^4eZleDPfOPO9-VeN5BBWp147%?u
zpUFrzLScusoO@x;DJ0+6nT}I{hzT_yi3)qPREqEPjaTYuDV3N<<qVsD+_qO7Dhtla
zS_aEv>T`V!3S)Zhb>K@v7yYh#lq7{XjF^o>91|_MG``>mFP8GM`hNl-TFf)Z>jhff
z31l&;kt5k=Rp*RH8jt7sLI-Uze)c|5H>Rr(kqQX3p@yjsBjO5=UKwG{o)KgLg_Fi!
zLxJnlfqZ5D0r?oxKb-?4MAnkW|DYvI!`F@ysWC&uu>CiGfr{HWwnx}uwh7Rsr-~)R
z4>7}iQO8}mRvG65bZ2K#iD%58#lg7uJo%c9!H=2EsT!lSqO5jtLrinVCxL2eDS@?A
zE*!T?QpQ&K+&Ask?kpgN0%}aoI{0#cLoQ4;s5&$1iO22E3q%DnQ5E>UT?}EUKG6Mb
zmZ|82J5~~8?<UM;(LPa{`wPt%lDwRvScS<XO*yezP3ecRWVd46`PP1lGhhl7F(Y9F
zixCGuCu`AjUFsF<=pANq9M~IZ$ZoJD62-Ib&|GpOO?s33Qllw>fk|8Oti(jqWS6zg
zD)NnGC3LtDjFSdvnqTWeQUX?dj@Yul%kucG^!q~k8`eK14HWi&p`A^ILyiChyg*R^
zf`ihS=1L&HLVT~TR~t`B@Z<H_&(6t%vj7wYw3v)tjGGSCt*jc`gPb#QW(tE@86yCd
z7N<alL__gG25ezIwFiW0+EM@NfX*c#)+c1Z(dbUM?q_-)Ilk?&(=W%IJpBR6ID2ye
zZ^7DgPHj+p;2!n|l5GbrGD3bQGnFrOb*DE}DRLhE%COpW;?Z~pywC?f<82%FlAPD{
z0t$m_Lr3U<4`C|F-vVgk^^1cGN6}8Kz=7|{$f6*caaYo(U$zY&+1Mpn`dlV=qRX!A
zZ1<kd>W<7%nO_g*ON!uX0XC+gr%(E1^XW7+wlr=_ovuY_eEf7y>J06?-ok@)9mD%G
zZ>J^<qBYrB&OdZ^KJX5J2`KM8Yak>{9@?j6V-Hv-G+?O4<dUgBQy3J4JzjHQU?^^2
z9R_tEPh|DKL?G-HKn-joPrt1|*zSw4!OAI(S!{t%V{)gX#ZeeEc>%R%edFg)3}i#5
zw#=@}?*s89CuZ&yevw3|Xb*2`MU;Ed8cQ`eo(P9JRS^;n@mcuw9qCtnxvglj=qJJX
z2sOWEGVtnqe@QcnESg|08>uXJ*>#;n;q>}51mHiWG~)Kgh!*7~V-7NbU|Cm|dF8A3
zu$nF~gvwjRgPnCjTt*#!XPUE4yz7iIsD~L7bBJHRww!`@_@<H*BE#Cl)<%|}!1(li
zjA^SSWc-Dz7oWnuXiOHLUUTVDFORQ7g1h#|HR8~W7wtlPJejFLSj~r^^<bz2fXM`a
z(C_ItTE{Q}&?pOnYJVd}o`T4@0^n|{g3Mlfxa!uvgD%z(zHzrPJd=J$2#_CmR|4S2
zu--F}nL{NgVbF3ORCpOvjVLVkiS%@u=jtEJaF+!YehpYCFHX<S&W=wSkuNi>#C^8x
zVM^J3M}Wv+{1O>k@rX6%0`He7Y3ra9m_eFmb#=jzux02xmwC|UE#a0pDp39_G5s#(
z3h#L?UBjn|yx3+<Q>y4B`!||C4?sN{mvw%SYvErx{ZEG6<YefM^WgZ+J~zm~Y4^Nc
XGZL*yS@4tmseq!qid^=?XD|OB+kl-N

diff --git a/doc/user/project/pages/img/setup_ci_v13_1.png b/doc/user/project/pages/img/setup_ci_v13_1.png
deleted file mode 100644
index 2cf1c05d6d8b5527dc1cc753297782b015454c3d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15480
zcmajG1$107vMp+6j45`Eam>uj%ouab&}Qh4nVFfHofu<gjF};3W~Mgtb7tn=JNN&2
z>vgX_r;e(2Nh<Zyl5}c^DJx2$A`u`#KtQ0%NQ<jNKtSib%XA2E@7K3{et!rENFhrx
zF=ZJsF;ZnGdvi-0GYAOkI1@v|Eg5?1K_eqW!@)5+8YCwd)zHvLRYRYiuKupUu92=@
z((F_{y^W6;8_?=K5CtmTjn=~T!VcParnpLRM;;200>@a|V^ST|5ywWQQjmHyKl_G+
zAJH+WzTjaeF*7swLo5#OQoxcrL&q|x!ho=21z>v>Lw;%cF34cq68}n%CAA=Zf{JB`
z&5TQhG8KZT`5qtJI}^8{>>=XIK)*29>+dTj155D}hk|s8r!%*PnoXcUyc_c)?@y#`
zw;^|4BuO|)I24rJU%@|KJ)sGMBaI0Wsu$!?P#&>FUL`|!BiNV;w+sz8Xe2`|JB$oB
z<V*~?OEqG(5)oV=wz-nG*iFb0GCcU8p^xj{-h@Kfn15NbGC#M!zP+8FzP-JD>+kCF
zjPTp+;(|cF(Y4m&3txVZsIi%rjJbjW1ns+w009O00RsA6f_(o%gjhnr{6mI-pnSi-
z4@7)01pNE`!~0J;7wW&X&^fu#|0P4v{WTO(6O)m7zpI%znVH!E0rsGX6^C^Q2q=C_
zbuEyVf;_K@y)C1WslBloqpPjMUkC)hEAP8#YX&kRb+xsz1M<2GeEx?8@4NiBnCUa=
zKTJT@0-v=Mlu5<xoy<r%7}*(_KMNv}l9KW}nVR#eic9_r{{AHJ82|z~@G>#ExVSL7
zurb;@SunBi@bEA(vof)=GQ3+b0Nw0BMy?EYK=OY&`7b}>W<V1sO9zmpy&dUazedLP
z-$4SOKmV=hzd!$Mr<tqe|I}m${8zW$JIM4`!^FbK%=DjNAWQTA3+%7vpRj-Q>z~!}
z|8>Uu6=>!pW^Ze2W(N}dpWyQUqo)6*{GWFI6R2$IYG$J)ZuyP`zV}Ixhn4GJsQ<6#
zKO(jN2g%O%@4$ak{2TCZ4|tWFEZ>`H^f!cpEc{IWzp{VX^E3U8@4v<SpM&|2()ZC6
zMB-=q?|+6M(h6GH`^>;CC?hVS?h1M8g$hcVO}Z^`MO;y}i!*G_kCU*%x<?3_^tb&?
z`7Jn_hWsAWCU4z$m_8~1l**lmW>BnMov1`<8_dayl_nzB63k5yJZRWLnPv&4pd%tf
zFCudkm?uI|ns@zKzdPdE<Ms)7?s4vQZqT#?Kdw#Jd_LheF#)_?v^ami><0_63d08Z
ziVBnEVkjd}!(c-pLH_rno&=0tTexLeA<n;-{<{%bZlaO|!oNZOP3bU;sXV;@HAKto
zKe+yD$F(SOF(pOPy?wdS6NId+D|(6{`&#?St_jklKhkexx94E0V0(B2-RB-Unussh
zal3zWzVo&IEu%;-#cICQ<y>Q;k_<&MiXf=2j@{J4;%S*<uFr6K(Br&41R5R<AR()u
z&?j)W5)gNPQqj0J{g|X~`gnbq%3=Z+{8an$bXU;XY4F>-+aETS-SPw6@#12w#pR)r
z55d*mSimHJ--!88b=YJ886G*OY?bkM7Uwp@y2B2R=tR!Ls0A}{Z`5^ACxVR-upGTM
z%jO}N>(K0^7o1_ky5i>1#_#xJiy{CISpi`k`_&T94&giZm+<{_?>j#ERA$JW`(7$i
z**GLk5=a%W(ESE<s=ppR?Dce!+(M&0$yvvf-HPYcSZP+JHx{ZJnkczoj#5Tuljj4g
zT^mcwrhk4MnSIT1K7?ors|t_v$wJdn*#RqKs(PW3ukYmT0EtgzhFuGyXe0O&1NBmL
zaJ0Ki#phhp1nYV;czvck#0M;%uR9tczcCZFQo%F?RS1|h>BT)8<PNXTZl3p>Axp!3
z8~c?`gop?TULa>@D>?=8ytdNFd3Y#RN4M*PsX&drDs)qI1}R=BRu<2lK}^rf2m`{y
zuPVEm2zneai8fBNxkS~7oo}yC>3SH$e7}<wP2qGk_`iN6fPwL_4A9CeE2GoEzIi2(
z5FV}dd0JlYFVD)4OU3w!AR{hp&gtRdVN(3#fR$35wuf1)>kwpxYg8Rx1mMFJJ$eZh
z?gHX+UokptifzQCY%|uxD{KWHwS-Y4rx`1JBIrp}(x&`c+>pnNy4G&UWQ#%9_OO>x
zo&V!*o*GJ&+!zU$j+!7WDAqkk9tQgxC6+?coP($^K)2y@A5!>!zo>LO2_^!F7*5{}
z@qSToBW28YCFkCL<L(@?&LIr@&qoZzwBtLsFKhT-(7$gYQc9ae4YkM(d6Nj{g4Bar
z&oGohZmS#*-_?v9bBp~&H(G>+Z})G2yH`<SzIV`FH#8f#To;GBenV=$8B~|}R3<z2
z{OeJQm%sD-A%w7xdW5^8U1)cKf$<@(b?PEy7^sjE<WrL>=fOyjm!#$XqK1WJr1}wk
z5iWJPu6FF8KdqPnU7m_{gE@gf9|-Rm=xajg*No+Mw0eJiQ;@{<+%n{Y+zUIiQT{8J
z9X~T|i&b7f1kuv*ZYR+>3XuDYhw~0MJWeng<Sd+6$cyxl_R8-v{QkIUop~i5oNxL<
zwqEVC>QlEjb6cey4G8xD=Vg}<2S+f`M3Ao`1JA3%W+0@b$>rkwmwOpgrib;%qk|GV
zxCsnX)}ucty7W~EA<k`VkJr85p+=?4i!)1pm}^TJkD%(O;Y6Vj&(W6LW5(8o&5pV}
zyZ%fihllI~N-668j7P(OgrCS$lAC|SW!xm5jOZHL?wUf|7(5=d@gchR^$?pWhIF~G
z2itb_>i&qFw(63xC{|aW{m3kQQk6H62<8#}q!!()^1q|U!>vn`BNo&#?2?Pn%i5d-
z!kHkVZaHejjPO0Vli$}sdeCiyVh~yk>zPoTy^G*Hn^geW@4pb`Y#vcp(5g`tgdiPV
zM^1oOsW-OeuFK`zoJY01-VQ=xMRE8)K)rX9W_TYOo!|HD>`eN>cr2Y`$)FeEDCm7&
zjm3Z(-r*!`Qr{5~6`tB9g{-K-2f>_VnxnXrsRtwZ8AS_k=2T3}QF}--ffu^o+&&%L
zQ(PQ*zZ~G6VYXkLJat*Ci}!_1?Z)`^r`#O-_sK#M?Va+)ZY^Gp7oI$1vY1GYf<yfu
z+t0n2-1*NvxNncWyGlQl6dEtp$w+U)gyEiS4MwOGu-LluLJ2lX-<5bcoUk(sL`;mG
z->6@#Ee}j8Sws44-2GIu`(1cBhs~WZ<XXb$^`W+82Gm8F$>)tS&|bikP_>VlTzNTm
zFf<dJO_153;IvfWdh0oia$G2L&7Calx*f%JasKvt&g}*^{ZmD$m>F8-b!wd|;Nkqo
zb#J7jkyk_$WiVYt@&kwK)P2AW_hU0Eb@RNpLG`&f`JC;U<WNJsbjk1fT!+Po%4o(W
z)|yRXylcr$p7oGhJ9O54)1Dy)1oMl`gPv}3DaXAw^k~Nf7T}qusiI?g)zthLSl6=K
zb-Rs%=rAGcBKt^m9-kD5J9FbhfhTxPco=w|EN{x1jmzjU`Tc-2npo&}Bbt1h3FV#-
z3l?Jmzq<~YlAF7~IgW>+g)L%($#@+Vk6`L()cfNSqcg|B%Y>}W!>qhIe={?THF-l7
ze3CUS3(y1>R}s}NO4wcSy5l>>seN{Dh#>Dys~N%G3Wty|o65o9{Ca>Qab7wPodCCw
z<$N@8I!1K`LtVkHOv~|!IeKa~tc!HqV~k7Q#J;FTaJ_wOG<t$$i;^|_)|Mgv{#7!V
zWlD>E@lJz}pE08bMi`<{sBO(}dw)=s$$hgetB#vVIAZR{+RO<#k(A>jz2(ei&*_^r
z+TOs)#2ofkXL8bnYd?y0xMqM0Dql;TdQ(*^5s?&NnDdO%)k`tJq8W;1tB@z^b@1*a
z0Q!(^Xr_(#MJFvjVB2mf>kNVfb+cmg`q1}yj=iu5j@LK1Y9Q!@nHL;yKkYbFktXd@
z%|v)?BJ>MAI_yx#2RYxR;LSKZ=$s%&>Zp@4n>YvEgi7B04UHK31c>f!wa-q@9ozx_
z*>6UKgYV)oe!nqJYEbv7ieclXem3_6mPwW_A`X|ATW9N=P>LX-r!)DHXGHZwn4a}K
zVKauOJjGSk8|2c@(AW2QiCTsFLxP_61OJ7=b*db2EhGoxtUU+mN6<VzhvLyk3^Bz|
z<D>(L7Pe;4=tskxJst)$8f!%(pIK%QlOpV$l%-??mT@*NFSkqw_$sXQ+YZGesYE3J
z%t4U?9=Cw1e41Q5C8Dlr9G_3=Fy|!wXPWaSyjcK=Xy}u(T%HtzPQH+D2Cr)B7su19
zL|T}x-Bfsv8_RN+ji5Cg0^IUPzUNf~rXE)XZPebU&51S9?w!~LlFk4NJchn2t**8*
z7B6*DZ)y3BDwpjFsrda}mMKWZ;j5~*$0}}Mu#S2psiU||l-$ELq4?q)k^EFpeG<-K
zILn~xdQp$_+^1?7K_pytB4K<;Bf>jTrqb*R$+MOUEkW`&Xji5B+{Z=pM4Q!U`R(sd
zm8|NG*RZ?uO;xy-5wgneK9o5gQ@8Rs1h$DvJBfx*rSjLW#_**X{L&tV(6Z-p=!Ltd
zA~$Ta7kf#D%Sgq2Po>{=yKL{1CqrAZwCQJbD&);|k`emN1RLxOh|4bmrNBbf%U!2F
zmU<}Y1cy@J+$eOki=Por%^4bF{C}MXzVrqXPrze-ojF;Oi<k^qLNx;jS}WA!-!PpC
zZ?+)Or*(@kAQ9cLYt~k@+f><l6T~O-6V?ClY#@@>4z2hqA#%DSFe}+&15?b{Jr@;}
z?4n=y>_uT2v2MfF!LuGT951VUjfQm7>TI})m7&5eM@ectWlFHrpivM9YW#LEPU*T<
zI`CM5N@gz|G0|N8_|s{$@uH@(J?X~^o@#!v`$?)!=-9fxzxs%{qO`wJ<K<)#4`rYi
z;jReSZJxPMuHu#WkG+0OFjluA`&n54U&+VavYL9l%PBpw^z2G;po6N2i}euQjKU+T
zJ2_Vx^-pRM%2s)1`zZMw$POg%80~G*ibKcVsRYFXrF16_kk6H<D3AahEzjk4orn;A
zFs|B2*K+cUnd@8qK&=t_fUkc&^|xdkjbmx_+w*mjnW5#2jpp)hjF^!%J8%vO!dsr6
zvI^w!pA4doY&L<<$&UF!_91cL#d*~z1)=Zx*KZYpe2{_w&4J!*$4tI6vZy<2EH+KJ
zF!Ty_(~N%XJkacO8Jc}Biy?N96-#?kXWu%6Vip7%F@(Nrv_+_s^CK(f(gV7l^yf(f
zeHhR9$bk>>oN&ElCE7Lh?blgW{rzBEdhb%~=7g&9?>20q7tD-qbBdhYt6}|uB)E!`
zEKzh>2u{^>CWxHRUyVea{D{uwOTqY%Om8MC!uIVqbAyyk1>(TW=zX8Zwqn5a0Na}D
zt~R#4H?drfu5aVq7?lx$<E_dfmf4>icO=RoI=1IM-(uI{)8aSRfMKf6dKkqM<Hx0a
zl^0anz!he%vul=T-LEX!>kkb4nXHJd6imU`aREOIHO}3jVPoK{V6u;G^0$8WLG9aI
z(~+<4r=3YGhS~<cZ=4!rExqv$T}Y!*<@<n7x2JLOv)MwA2L&veQe!agK2zp;?vr45
zk{WP6DjOPVi9`LAeALra0gLOcBjy;<Qm^pFr?;d44><0Hv~FPGoH9RKwfnZ!s1mSy
z#slMPhD)xC0mTt(Lq2r?mIHmP$)0SYj{ugSHZ7Y!uuUIND!lMe<UE@JkX?`ZpoU`p
zo8)K2Ow;MAK^aZ9rCV9G^P*>RZ^Z4RERtc?!lf)8ZL(QU+-Cz*qu=JVG$~MSM&%><
zbsu4ydU7^}$vdz@*!$E<r=M$`6$y4EE0WO6up8KiA^1dTvs$Tba?CswzlEY&BgNgy
zxQ7b;@nx9c$Tza4U~Nn$PmmGMCvW!>rAe%vd=u$Y>*<pu<o_1v83Be1QCY*fDQx7S
zuD*t(%6i%K*Ct^)q678KWYrS(jW}&OJFxEk((jODeM(amG$+ZTY;Tf@){1}$qHYS_
zN^8xBk>ELWxaSA>6v6SOxBS}n;E;aGW0Vhz{Xv&)NAFYfv03jF{L%rBy8M$p2OvCq
zCZCvKmw*qqW%GHl&01@kV!8deNcP($Xun|RvQIkaz;|Dr&uXx?WvNspL8Wp+Z$JX5
zNME@S$q!~Xiu$%A!C|Y9EubB4Q^Q`}85<;<lbj4q$CYfI5F!Y!81E<e(-0f&Jsp0k
z=Qj1>*M&xupin14MoPSe{svyB?Lf4}(V(XGxCb3O!Q7*2_{C1F;k8hlf0m1r+5S)d
z3i=Dy&Jyd5w0go_AIT!+VF5+=Ql`|khpg_n>RqX^g<I1OgIu)J&Tk%NP_C8VB1bcb
z4uqznk4kvp*uUo4B}YQ$y$BSxA+DgoXVdi&4LfSX0M#z_+S9P6r?pu8hlUAFjKv9e
z=GTCkM?0p?`z9zg;GrPl?k!O#+7%^<2BnM!GfhRsc+JFN7Q305+m{%l^<(}~fgB5J
z8#UifKYhnO$EipjqhX7heqYy}y40jrYAk3k?$bOJF6m*56>xc!&E)*|(66$;Gc6T+
zv(PdmceYfA`+6eU&z(1SeSS*dnFZJQq=wom!5pizupoyS%1V&MB)DY6#bMTw)D;&~
z)_{MS@ge?fjN;ND9x&;CqmekwUR?m45YeWao8j+A%SaMF)et{bd3mxB!5ToOH=OrW
z5A5q|NZi;{UXE7EZ2#<Lm6y#5yqP$YI-2%Su6{8hynocyB84h`B^W4mF4&J-l)j^D
z(%W63IWGMWDgB5#BirXn{%u=j+9!T@VdH82P4MXn)fGHM1+U!iUB>~6vuxt2m6@r?
zX>i1utf2*Uz}IKy*%i~2hax}F;fCx^%}ByJTCnl4nwajGT<WO|eny6lo0k_$*gJW)
zOH*+%bkj!MQ<_?DEgqM$OoNX}p3i%5V1h;WN*Z&k{q&O&iI)X#c&WrXPFtdTH9kw5
zvZ_JvSTv40n;^vHv&W(p_G=|>iX9i0`AOoXLxSYz`RVw396dC6g2Sb%M!yW-8zM{5
z6t4N2`~!*ON-KrIB#nttT{JWvk+E}uwc%MCR{r#W&lFe^>#6wom<D)9I)U*u$}QD{
z>yn2qIC;;WOvCyoq63IbtmldKeK7tdSWG#j6qZQ`V!tO^V@X8Fj+g2Y;VtZbd&Z@S
z`JZ#+YzPXDYK`Lq)C`LcO#lz(2PFM+31o}8`xf;lQN33p=?goD*QipodrWkY-korK
zXpQ-&r=M-Nip(?vZr!H(Rd<wT`#wln@rHM_L$>#2On%>>ZY#HDwdBx73#klrK~-wm
zDfLRIBRp)h;hByMYf=Z7$Cr3&U1br}omq-u9`+IBPh}?Xk6HdAzJsxppvqE?pV$7P
zeCPq@|1MkVBTAl=fLr3zj5bE4By~ckNO?jq(A&2}@tsUVXfjyAqpo-BvE-)vQ(9HC
zS+^9M0S#h|I}rZTxIM5T%z55;pe&7=Q+~*QYf`+^*?@^8XoH6Vgc54+)HiM^sqEc`
zkH(Lu$M7lMaZx0ncRfsDw|>b~6qAY#BzPdf*0>DvtPEVXMH$H(@%r&P!n$$1OFbSp
zrH)X89s)>GudUMFHb8UX3@0&&q8Dqr8~!qSt5bJ}7~|s5M%{CS^RN_KQ6Vm{8hiq4
z39z>cvJfR}up5?Ckip3edbnu#Q}9ABwEaW*UYsR)lvUC}XX($IDLer+vNQ(1=}ivP
zzEx+3juuc04Atn)A6^d6Wyml>QbCx@V{wJd$Bp(K6B?hb=9lNJ)sE^xBeGYf>&m6E
zfO~z-l(^TFQ+b;ZU*!7js|8MDfvHwQ!NINverB6nq<M23xV@cZwkRXAh0AcYV25O#
zaX>V=<ea%e*L%fxErK4OYT+uSvLDRf&IF+AAZ)oRaV%5+)X0l7DNELqYN1)BHSuiH
zCB@%hwzhhb52OiH+ejA31@EV0&>^0_2*1xIyLGqindPhVm5tjl!^AP=lHS3{{tAnX
zUaT#b@W&1gxVsTlq78@-fTBio<mqOC9}cB!w;gH~dJJCpL1r0oKFEhTbvzHBM*QZj
zryRr&MuS%1HBENgou8>$+&Dk-lkjHHlql_{Ze8TlkTr92bVX3Ls`OM?a9EE_x|_nM
zE1ALL8vC=MwAOBC^<UuPa#^CA)~g|mu@8B@dD*cmQfL0=spPM5f$_STf^XZkQJ>7g
z57_(l)Zqi+daZkZ7HlkND>}33+V)$qC%mMytO&gJG)<1*WFU*)dTHPJtI+Y0wBv@v
z^LLP%+!ux;54^>^FIpodLio;aJ}<`x@Cs;ORE0?_Vlxoc=H??*M)4golfII%1$qB@
zMb$+5>Dp3k?lh5sHP&iX_mw6A^^T;n4_Dz5<cO|_n@N?fQd>4FzcK7R6zL%m4fL6<
za(%?g6lIf6N6=0CIbTvnE=U`@mm}2iqu&lmGeT=1qT<Jj*~huyL2*Wf;j7%5I;0Bw
zo1QX?!~S@xrpFz;=)&8SjiRuyw3uf~0=Sv#5nsz4C#LkJ(ADxJYBvx|*+NJ$nkBXX
z=!{-03S}B=I#!~1Zbns3BJpzIBPRbT^|ov%b++XSSE3sbeN6JWE)0n+DtDdj1-o@Y
zJp$<^yyRic>s-gCVuLosD2Ab8V_Q&Kuc3j<;%@vHWav%R*<Mu-fSv>oEJmv}!>#=Z
z6l^eXkp4X^h4e5OLWEP_V0PVB<`Ufl-=mPTayK35ynIUv1Rt>DXSUu{b}A`Li){)7
zZ&|wW_^`n91&`ZdHUR$Ic)T{Hkj^Xf?`GlJ$&1O{INQACnXwLe;_Yfq6`^upPVc4(
z3caL<mk8AlHEZ!iKs_!pUO&pPbB;Z9HtLHTa&_ZUWG>DJcMV?6eC~Z<7u?&mGNvNX
zDYRGf<9Mp#m}siJ@pogAq|T*44XeJ0OJYaa!>!q;onoxf1zf<~i+s!`gl@23F1AlW
zcwy{m&zgxuP^r4V^mStd5{El#f0~(a&fl{y9o!|-0-IiBd&V@Z_D@&hHQ9+j9z9gl
zZ+ZfXw-CYZi{$6W)>5-BrIX~>ibc+HZuP~k=HtVX#Tj%DgiM@*9?HL$sOVJiJf`IP
zX81Tz7ju*f>O)f8T)B<J`hfDBxO<KqSw+^a!NaM^40qj0DVE_S5pL#cWH%tL0w*ty
z2fhlZ>DoB+&@8*hH0hL~jE}nqOYJfl^54yO@_+f_LVNWF7N55pZNpLtua}A~*5<pa
z9*&Mk?ZN1jOy*aeP|zZgbxWyzUq|d@9&QvIv?|_jvP=HNvi>PE^|qP5A(WVP-+X4N
z+h~U&yd=Y&#0%g+4=A2h{+=Ny=rO_aZHp<qgpVBS>Lp>H47Rpe0f2&W-e};3LG6yv
zw68?1<fAB*9Q1^|jR<{6bvbDHjmcJ|o;v$X-gJT@g>1dzrCYKtyO;ycOWL$K3Ow`#
zY9v_~PHV4mL(z{4Ia2c4e+sLSx)Oj2;QW+bCMm{+^Tw|ua{28z!jBW7u&)eecQM!A
z(wu%Q{X06tdF2-(1{JRG9{@QF652~RzBPO|(=e{tSl2R*iXQ8#cHC>wTASPbWsDEu
zH9dF?GTo0v{Eh14_B0QuO+AX_(y6<BhT}%fUhWLF-CEM&!%SyH^r~Dv_kJ|d<fxHc
zC+nweDuZ5k+E5%m^sQ<p1|$`ufP~oAM8rl*^z{wd<7qxOg?`Noc9-wO-XDFQ<gtiH
z4Du>~#MTRat}ExwMx4anKV+UHpQK(vHdm^n3xuv;G>e#k>xWrzRLI^Oxvg{p+gCqJ
zvU~W>+qNfk<!#N9c;j#;D_>OYxsdi8cCVa>30qqxjmweTT6H=4{v>HehT|;i2<F?^
z?PSXfILsbPG&|3fw-7Ea$;PdE3y{0#3$ZrI905y$#y-ocDyCI)`KLDC>y%yqA|Axw
z#(d&E<P;Lh*VhA2o+2D;Y>5c)8@<mo=$qM6MOx1Dc=jf^^0eVHE1peQ(O65W)(irB
znu|Yo*#ladt5ZE-7`lzlKGpNLPLJdjV@^zQ+S;4ErqphvZ;9E-66xF#2Xa{;X4c5k
zgdYZa+N{;+u?0xHiIlH5L1!bok9pj7$~%uP&JS>!Jm`7RRA(WT@dyWRZ5REbIdK@5
zm!&l7?#3Z4Xy>N+qB%BU6Zwlo5vwQ?n;+nj*3%UjG?;zje@@q|H<pqlmd=!3m)CdQ
zC18&z8x2I)MTSjn2P%7avW(al{&}mEjDy@)_guTOVsqCrs4z{TZUK4-&tb3b(6TBJ
zATGTsZ}2K&Q;ycTtguWe)F)b%FsoL<3p}G9k!KULcg~5m8bH&9e7XY0w}Rb@2Fmql
z&Iu|(hb0C`YtCdzqG-_wK^bJ6V`(fVZ|)8U!gP-VzgC5Aa|70>%<R^0+}clH9xLNw
zhuG%pU`kHhV{zd%y<~M8^_ncfp4e4<QQvhxseIFpso3QQPJU=p-{bH$?4AL(5y8{c
z9czqWf3Y7It!zdzf0#R)eqYc4+Vb|ARkQOxrUdD-PY=r=(`ct+^?te;(5SQ`udt3A
zot0?D+y`a=DyDDO31JogSZ+VW+uMt6vS)GC3)aGMgd77D*bKHU!3vZwtcj`K_}u*f
zvH}EMRCs4tHtXtakI0yueAv-6b9Se`sYeBp0cY*m>HDX4y`Y_=hhhQ2^5-(+!h}kX
zTU8db{J7!GhxY44dTbwHQ3Iaa(CXEs>mL*H00#-jl0gW@VIiEB=h}Q>AkxhJtz&pr
zaa-<e*F7G6r5p+Sm=pP)hY2lirB;O8YD_*cVGc3fj?~KQ<z2iB<(+)WM~~ts<r@J0
z(%rN>1C^n6_0F<xn2YiVzFBikP97n&@vvp#r!goqE6fI4y&nljhvxi`SvqacSHwGv
zx}o*x20aBC$13+1I`nB)kxA90)sk#gYECM4Hh$eNSIUw;7^lUNrV31uZgY=mdLBxI
zvw#NW`wduL;hoxCmUXb-SH=c@v=&ecrS;vnRe2h6t$xICKy&qWR`(y9u*}gBq1Ve8
zM2besvESX7&0JR@BmQ*F9r*-@;}K2NWf3SeKU<t==k42SWW0Uv*1P#SSv1IeUisG!
z3{0)jN~AbneR3xl719Wqi`u!ZkdTPAVmiGnvCs$&{3Kki4O7a?D_4USEg@mYbH;0K
zevHdmEK)DZG^P4ms;OQde|aGZH3`ttruw6}SBkq>x^If^j<Q|eQH*;%#s53;3i&K<
zQBt6Ae27eLR>7v8s)wHqjMAr;-4v(R^^r*jmY!kH_swl$;8ndK_Gh!!Ytiy1+nv!P
z01ba@_Rl~IZiPXVIjuCR(1PDdxaio<08=W@^shEgKBPmU#;XMt(B!f0ei-8)p^>yX
zcz~dH4hpquBRjozTtM~cNV(+^duunP(;~UuQKKho9s5?nLjuc`LnU52RiuBGt>}|w
zWu3yGbGGx5862f%g)zx)^>lj6+G$Bov{*MF=)IYys|nC`vuRAWK0-Uhby_0Uu(aJg
zE|E8l%_kAZYq}Px)Q2?pibQ`XRm9y71g4HjPBNNf8mWJ;z!~-yeMoEef1>n}sl`5{
zvCD47Hz``aawDD0n=`u_kBIj9iR$FMOX~oX5Ja7_oK|u)7v1b!Lw~8md1e&`?g6XJ
z;AT8ppzE2!4UOUOR)E(6o_h&^&dbSNVL~*C5w*3xiPm7QZ?fM6BkRBxCS;ot5qn=|
z7es31t0gl=ye=^1PX#}ukLPkoubmReU1bXm$)rnOcW4E-=+Y^(|4v<r_}nPzX2u}V
zdo0&G#8VJzo&nE8CUMo*U_;MYu2fE<eR;AC10c#8cn}-rF%99yxavf1{sm0O{6JxZ
zex0|zygHz?{Ole&U<Ut?b#BbZDKIlEVASk98+IYj%}P~sjyULMc{k}FG;Bc?w33Pa
zO{dDo8CjDBKjq;%JJ#O+Cm`J{zk77h%c2X|Y(kjU7O3(V^L)M}Rw7EI2$rivK#FOE
znW2?=Ow0ay?NnH-(j_$dRVV$hr9>6+O_dnjIcm$Tu4gMInJ4ioBZ0XK|LrCsU_kdn
zWOh~DTu=-<jRM9Dwx%MgrlyU5!pmUXXS(kn<dcN$V=Notx635LF6|d$Agg!kJfemS
z6<uu>JwvZYJ$QL);m*yzRbddD_BM1xKP}Z8>KoSB5h{2934d7eA)=eXl%S6Fl1~Ji
zuU(}N8tG}{u?&+2`4yTJAGhXG#k<Qr*BK4)Daf+Tv~R6v@ww<55g`96I}J%ySUuM|
zZTtlSVucHFF_`u_LE=6SK^5wL3>8v4XE|XF|8<xrbR&dYCDQ6W74Se-hMA18wChpA
zeLTTzDJuMsSbud{i`+D>Euyv@kowZs_$$NlwbFr8l`)t)$0h~#f!@H|H_Qr=@?l+=
z@RL@=Mb^2eRBIBB5@K~GhGiW6TU&o=a%%O-eK+pNr*V20k80)pDTiS0P)w&A^p~DV
zDp;&vV*J`L##++~7t=Dpc*M-8mt8W~15EZ`<1~kprn}e*Sj|<`-wExt(dJhO(*=8{
z%zv&h)s;e<@hw*usTx>rI~2eph3KOhG7>|^()rxsIx<^RK$nS}mz{!u3`mrSUnt;V
z*=t!ySvwUU&ts<%vewu^$6u|AwKMaA!G7opAuX{UIj@Qhh}r=NOx=FhhDJSkmlcj#
zYSZ=3c3u@Jdu4ty=nQD>)OR=2FrMKZRq_iK<EyYMGavMPuYn<x<7swm*MPF8wgMTq
z-92B`y_wr8a8s}$*i4*D<8?iWd+^1rUP-gN&o3gTF7_6mMva^o5T4DUNgbbnpS1id
z)vI@Y<b^v^W{fkaL>!>1w03_kzPG=^?q?$rW6`{))&IEk)F6nQ&Jp&&mnBJZXh^bo
zRF@c92D9A2u;)l8$Zn?}(ju5{8Z<kVZoD-Q?Z|C9wj1s`?@%n4;O$m8;gpUG2d}6O
zpmemMN~=RginC;-*7@^E+b<7x_<hIdZG>E^bHHzBE(~aV`tzMCW;@LqJo+%$Ne6x0
z9CNsl;S~&)>EZF<*NbIsNnz|+D9T)@JrSZ4asH%f>ue|T2J;P&jQ#xF<!`Y!J+{!$
zE0Q2jyeK}gBVaI!pknZ0gpd6;7OaPB{-fVaL_i_KP(i|Lk@w7~j10BN$TmCD%^ktc
zzQOO|^On79B)j5tG5&Rq;;y3W51uK8p;X|&+!vEHN50}>^07?79)~tbaTM~za=Lk;
zQ<Gbw!~;<U;87bn#-)I!CAHuj>28=%n$BI&&(%p{CKZ89VAGR=EX`2qYR0EU%W3Mj
zxpG*cQ2?<xwXlCo$onY?MM;_mW0*vGDy+4ilprSjex0EVt4_UGh{Ecs`5>Nu6$LjT
z7-v^nTfKHrKw3PzzOdx<&F-o@iAyTQ4?a_obm~=Ypgu$WH_&cF!B}(dh~m~PaKS0N
zWYlJ4T?}0Sn@r<+AP1xhRiwFmI5K|~i{qaDaz$dfXEfD0z24#CK!SEr1Df{+wY}2n
zd)<5mwJrTfTjTU<MNIydv2>EgF&5Fu<7>PpA*MTup!>58m5vh^;w$=0WFAygD>keP
zb1B9UMxZGVXVYoJ@)n;e#gFLg*Pj(uQ>M2+k<N;?UuDip$`+bb$uEL&&%&+`BWona
zCE5M&PMyb4*nX&mW1OG+V*m1<GLwwC_fTU;?R`ta!m{5)y#vfC$JW42#PQlaGm0&)
z2``qPn|x~pHn9i=Ac^I~RTeY5sc5#q9nU#TjO+>{DWaLDpNW_m|N5;wExmrMu!Jr8
zYO?$Isxv(}htxtrrQ!9|#A{dQw*QI-WQ~r;x}*GvRAxxQ7QHeR6uk{uU37dw<^~|i
z<j;t;_q;}0@*GxD*I60ITUg5&xnLbL8*>=4qZoRW*TB@_{wkWV43?d4oaFJ5(;SNQ
zX3~j<nMq1xY!b5n9e^Flcnhmgz-^yhE@A1FoPcS5DLoSX=@3I0INIyDmb!UYf^+&=
zRBxV$weL{uMu-dkR}$!8r(lodJ1nnPX|JOZ_>@qkUT~U@rEVkk^?M7E0+s7AVFqaN
z_sUz<KIg?7^yatU>5MPetpVA=&>&ibA)Zj<&!Io@ZyC?XC-pub@bch8@<I$hK3ctJ
z2<|JoSE4dXUhj;1_#Y^ocd};`F6MDupV&{zcRph=%%wm#cf<|APj#nGdgd6Ks+JRF
zbJcXlwLL{2=t8M(6UbeQF7k{`uEV^dQ%od1qR%$bo5rV+@%M#M9Lv?QR3(hhKZE3h
zrtVtK0;R-`SM{UdplTpK1u3Bs#l0N49|)}!_YI{d4_6CYr1C^)8t>A+R2_`4u>fyJ
zNq1+SIV%msB!}88s)fdqM!?L#al%4{STKzLVGx%F&(0_?h7Fl6hq{k5n^u{28)6_F
zZKMfHI!SYtAz4t8N|cYwXl7ia!4yEMipK}N9o+0P5sFJ^;FV=px5$>O&G;*YiSrk>
z{FV7wZ>Bccumyl69wY=Z5hipZ=$^lr7(|}zEA30=Nw{{F`US?9!xaF;VLm=VnUo_I
zl(f>3k}IzPCU>GNul?=&nSJ1?C&15ki-K{$l%L{MsfwYIn*vkvkBQi;sg{ZhsS=T3
z>jA!m4zT5z5E&5jIArhU$MVIb(A9l{P?cm~XSs0wTjnUVtJyxIJpR}#ptn6#MythB
z5UuTkKL@*j)cS*}WZL7dD>i@6_mLZ+p6*7H{(L_CAg_lmx+=r@J{tL*&yVYZzDFtI
zwy<;OkBr6eP5HO-uL^GoI1rk~6xda?lNu&t&-Ec-rZ3-4d1Ca^*zIYM%yl%>UPw?*
zgPOx*m1#z2p`8^M;rG!Q$Gw#*L|!&2uf4q}Tm;$k69y90vl)8YbjK$%nSQ-e2#<9#
zMb!FdfhN_$@}KrMM$4{+J$iD|PlMRybfMb^ywits`pE{VJsGjfClw5#NqCwx9T*6>
zvDTZ*P%>JORW97P#zBpF9TM1j#0<Zf6FLbwd6?Y+4PQsb?vlk>92LoMt@at=RA;MF
zZ?~<d8lt0NcKjq^_z|)XxuywgPnhVcO)b#`9Io#1(;a2)?A|(f<~EE!SsAqS;%gK@
z^&Huyh3xJ{W@O9!c|){4ib+>JNeP=lxRZHRx5|=8&>j)FQFjI-%^X1Zmu*v}kTXI5
zz-e3+x-h)_#z^SyH;z}xy*GNB0zRNC$GuTX>Au=9miN5FXh*PO`J&;9K?eFJc<0Me
z(BMhbf`?-?&d}x9P;utSgXdPGj=vum*I1^&$4hn9K}a0Wm{<Zo&z~NnCJcC^xvN^k
zX`2|0OmIH8qUWhYyP>+@@xM$&5*^B?B(@ceiM1a7b<qvABAATDSktLk=jcL)RNt;z
z4Tv|Z&eJ9<Nz=2P*xQjdBG)82Km@G@7o6x`Z9HClApj`S9o0naOW-QbN;R%X&E<!I
z=>3fsr-G>Ow@xpd)~&uJpfC$>l9TB_*OkP*(X`ZcQ|h-AZZ$p*iI#6agnrlie#S_;
zzT;h%kU40{UtUibK7Zg5D?e^DHkQ0sj=9xdT>JC=B|2cWn>=6tNF286xBn!G!1p=C
z3Db+0>~VcGxttK68^MHR*l0@Hv59gidwonN>1Dr`&}E;Ig*-2w3!kMaS#-jlWPu(M
z6cEfE20t)#-%%*LeBUe0(c*8G$yp3mWGeTB8Jrk5qxCFXSo~hVr{^Y3a$D<aZ|qfV
z;?+7J`<}w(mKpdnTMG^WPt3GjOcg)5Uv~I+G8eR@rE3~kLS%pfIO~SH*59N%WI(00
zBq;|>{p09^?eucGBLDn2A23z{U*Z`-{UzDU_Je@m^i!j<vdSVSJ^O?*`F#0{i~#O>
zD~9My+=$BPRf?NAcjtsL(VoI}UKH4Okf1Rnjav29jT8@cV#;q5ZW!4h2i_k3shOG%
zL{GV*t@+WdJ68dr#+1)nJ))<Ta_a#3`_e*TOwx5A0f#}ApU^;GyGh*LuBQ%!d4Zp-
z_+l_Ewm?@~YsTbcf4b7Q=+jSEH}dfJKCUs4j)RutAnaeLR!#1muW2*XkI&+unE=mY
z#LBZOYAH*7VO)Sm9&V*XT`tlxS7l>fN!Wl%6kYGml@w1gK{PF@UOi@07348jj@V}A
zCHI3>03}`V?$m?%$6Lg~+GP8uXyPp*BHqWb5-e#d@%~uyQeLG4tgz<93bsBg=5fRK
znX1w=++~>#nMNc>>2X?2%ZDpz;{056f~zB9IkItfeH|NHNrMj0^M;e~o@Y$IS(GO%
zyo6&#(n4&;l73lSN;IN3E;cY{W-jOQrprWIqhcW3Ope7zCo~>_OY@!cE*r|{Vfy#|
zk>_!9mN^Xh&s@-r1*{U2bSanzV*n0|N^!?g*1|A-iJ++dCGKmGbocUd#n{{qUSN7K
z4|5Ef_R(Q%(J_cNd_=<pc|z^jY6|DqXqzav_oA=231^>zg?L}*uE>r$+_AH&gUnE2
z2sb=II#g{=o>?r~G0$`<%Y7Fg*B%2~l9F5_QA!ZF#+dcQikPBLKqMrJDRn|N+Y&$=
z(#?aC9`b!!O`jR)pp<Gsog+UJU!EME0ROA1Ab0Qzdu+CJ)a=u*X*!ET#~i9GrZh5!
zm^J-#t{}n+IDl<D+3<&zZJs8I`Rb9_sX;g5R$#KMqQ1VNP=Ly89g{NYYHdJqi5K;o
zInTJmgbcX=${YyjTa@t>L}RmjSBL9oA}csd!V{ptUr_tdM^L;We3l<{urhye7h)o!
z+zJ}s!1s%ZlGv?9y(W}ye3pd4yDO>iT5$*#-DRue83Pe6WwX%w*c7jE6`}G}cgqCj
zZb(ZRMMpf1@*cQ>!Wxzcvh%Tm*6Bs~h!C!$r;f=jP1g*<>!XSIxl*%X>Uj@oS}hnv
zSh7S?cf%DEEQ6Ub6>G;^an*9Sj>If^Bxe%z1@1^@Rl=CXG`g+I_010(3%93B=8Ok~
zrW1DJB+;78<+r7wJ`IqWNBX^@^)8C5zOVR8<e-j5wL}|V3RGT{ZVqf%VdNp*MR7HJ
zfZs#$>tz_s<rZc#A2f8q<hBb;x3DD?`;&WTr{dPjBL_OkIFj20Uenb&<Zq)Jx${R*
z#5li9lk?P_YRs+@^wq)7O13Bf7ULSmKG4Po#<l~fjFJ8wmdSu?c7M4tA-T>fm>{A|
z5Ks3wolP>?=WKo`lhbWyv&qidC;RuwhkY&fQV-XZdSG|*7Gp&YmuP+*qcZ<)&el3&
zs-rsHVs`EriZh1$3Umi1)NIcqtT`Hw9ZG71STD91qv8TsOc)bd9)<xI!14kFha3jT
za74}aiHC4mqP+k{3>5bdO!blu4*pX9drDCWSbZ7u`KA6?e_lKGwp8dTv;djAS+7NX
z(gjdcBZ#9`Qk3oFQgk8E5jnJy=j&=~8w&+@D0uCxS3kJ4vC$CETB-3STitgfPJiG%
zgmm`_<Wl&Mb-*;`XqQFkSJhRO_xGTAm6s<~JJB|N$l55?4*wIf{~$RwAI5XX)Jr$P
zIgKa6K$w#jvzzIw=TVIGH4~x2W1RYse(xnU&(%u)^M|U~czx}UH7ve;(Nc;dFA=Jl
zPw>$>gjg;gO^oOA>#4_Q%pj>^I(4{{5@1&}zCI~sN+YatDdOj)>Klz@lkIs}rP0N}
zZLu(XTXEXXnVBRlgceq!BS5K_Nx)GE(ayu5`aEH^?qr;SCVWG#K_5mDuNbR$lDlu>
z?&xjE^8L&EiA8*rv*iGv{l?J_Nd?Kx?d|8NeH)4oAHI{ul~de_4|B(Fp%tQT{apWK
z-{#luaR=wtT>qp9)BZPY6`FaVUM|WeQH~XD@o7k;hx4L6=A0;QZP`0<L9A-vH~;<E
zz)Hd)5{hJ4(FY3~67-_EYrOGO)igwNPRC+QavlDRN0To`PwvtH@#K^IDfqEeFZGZ0
z1*BWWm?Zo*FbZ{>f=K(b02p1EZO=i0AK7<(eXs!m>`wL4@%t}>JPV&kxdn$j^EdX3
z77H~#8w*Sd<{zm3ipJe4k=xYX`Y5r~Yo_fMll<u5#YK4JRAkmv49Ey%#on$-d6vGd
zUsUq__=gS*!E`g*;Siq8{sq$Fk9bdK#BJ{Ydr=MrtD-nvNH%fEo9joum?v;}0zZBU
z=o`PWN<FCHk3gO$1s?f%s_lnr@l7U4d7&^VMH9j*_OXxCHi^}2gs|ITVfF`i*FSU{
zia%@!9y&cjO)YacKV>}hQcSp~!B?cKY9^UfI44&=eBa=z1VK%~dzwjM$!I?$lJmB-
z@(^K3-S^;iU`Wy9P~bvAJK8XN+@2KDBvubwc#&9QTn>=2MRfyTRN&n=K@^;7Y?GdK
z=iH$v=FV}$yvBep$rvKVIo#VRGQlD?SJF`!hddS=@I|iJ-dhr6#9YU5r3r&qe%u)!
zKdf=|f_Q%L)5XCN3a@M`r*u>Q4&7|F`Tc&bzOCACJP7Sr6h|60JZzoMDqZLFC6V}!
zY@qDAUzTg`iCOEzAm7O{ohvi_Kay&=DPi(^Fc1xB>oP_C?#iE2+(LQ}n27cF1Z)Yb
zjXkb2lNshEx02AV?}wgquy?P96>Jl<i;l@F{_a`@CtC!qe*$(MZSFSpt*brpLl<Wq
zs#0jz>!W<%UpP(@&}DxL4{gyz2qbq{je#6zFZVX(xJc_Qm;W6X`P|DhcCAOkGj7=a
zel9JeA_!jwMN9IRpd)3-%ymOIiUW1|Iro57zfip`F8Hs%I1Tu(`axZ@lEP8%lz~z5
zsWT)&D*o)M4^db%Eo4(L@E_NsUC?^N-Fz3zCgQ`o-p{nYu=ym-T}TN}4PMw699IWg
z&0e|N+{77JIHqILQD=WbCcDum>q;OmR?=kFlR{XyR4nq0R)$JtA3Cyi3Dgk9@#sPr
zgges`nUbat{PSc=j)DG-@+g;a(M<i21_sW*>-FWy#JkwlPCisU(3%jE15R%nmEZSh
z@vkE^h{4T^Fm6ue|DCVz$eH&}pU@E(zFe`c{`xg5KFXH>IzH-PP)>;^hrDX6?gQNb
z9C_U)T=hb@Bpjwq($^J)9|a9t!LkyBk_ZbtV+ah{Tg`c)KRkkjxuL935C(R1yp0F=
zekV@+B^Z%O`RI?NqO`Uk-cG|+_xw;PQ0MD|IwbHWnJD(o!^FXc3J4Q!1O4nz?Y6;5
z(qzT>dp?_9NsuCjsd6{}>D^(|nhw9S*Qx71DmK(B;6>g1tUsD4;+><UO;UC&BD(SX
zaCLw28y(a7d=Q?*(^tuJ3oAgKHfhX3w2M4sf~}W#0K6R|6s#&7qBinv*(@xD(JV5o
zZ@tpCQ2kVr0P1qOfgnXnXQUKNiRI_|6c!2jzM$!i;tH<tp{V7ituXQx{*sPh?S=`M
z$QD3W@fW?GHd2nVZba~}H)LEGP^E=|RpDQE+b7E80ZP`-)XU)-ad_OVx=gLC5Nc*b
zY%NYr<pI8+NZgPvB76}|$#->c*N>Y2$wIlvkT)&I2^BW^UVlPVhpc@eX{@wR9Lryd
z7Dk_V6eM|35EhdK`+Fk8L*mYR;v{(#bs#sk(HFFP;SLP7WfqfuK=}S&=9cW%N;A;)
zYK-f$b^QhHowT@Q<?ourx=IkS>~gqsv{)Y?;^DzptdJ3`<aMOxI5kM}dI3MU=baZv
zA(sqT*J__iqh!^5N*e{Gk8}6F8jLbaZm}(v8S~0vxLj^Ee{T}{6#43NFiGZlTbmP=
z!DtqAFc?Qp@NL+I9C9E|y2{xMm(rpB>B(@H<zrnI^~Be0a6Q`^8l2ZRI=3%NN~Ta?
z&CbW!uSC!%_v;SsoLZi&`rbJ<I+2oC4Z|f6`TqZz6GsgbA0(W*Xj}6^<M7|eZvTto
z)+H`XlSBF8Nb^6D>ZoBV37}*j+N>r^1OGFx?*9#cBVmB#kMyDH)c?ynm61>suM{=(
F|33*pv~mCd

diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 9a07fac8368..44fb580caa0 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -4585,12 +4585,6 @@ msgstr ""
 msgid "Are you sure? The device will be signed out of GitLab and all remember me tokens revoked."
 msgstr ""
 
-msgid "Are you sure? This will invalidate your registered applications and U2F / WebAuthn devices."
-msgstr ""
-
-msgid "Are you sure? This will invalidate your registered applications and U2F devices."
-msgstr ""
-
 msgid "Arrange charts"
 msgstr ""
 
@@ -25747,6 +25741,9 @@ msgstr ""
 msgid "Please enter or upload a valid license."
 msgstr ""
 
+msgid "Please enter your current password."
+msgstr ""
+
 msgid "Please fill in a descriptive name for your group."
 msgstr ""
 
@@ -35338,6 +35335,12 @@ msgstr ""
 msgid "This variable can not be masked."
 msgstr ""
 
+msgid "This will invalidate your registered applications and U2F / WebAuthn devices."
+msgstr ""
+
+msgid "This will invalidate your registered applications and U2F devices."
+msgstr ""
+
 msgid "This will redirect you to an external sign in page."
 msgstr ""
 
diff --git a/spec/features/profiles/two_factor_auths_spec.rb b/spec/features/profiles/two_factor_auths_spec.rb
index 3f5789e119a..fcb857df93f 100644
--- a/spec/features/profiles/two_factor_auths_spec.rb
+++ b/spec/features/profiles/two_factor_auths_spec.rb
@@ -57,7 +57,9 @@ RSpec.describe 'Two factor auths' do
 
         click_button 'Disable two-factor authentication'
 
-        page.accept_alert
+        page.within('[role="dialog"]') do
+          click_button 'Disable'
+        end
 
         expect(page).to have_content('You must provide a valid current password')
 
@@ -65,7 +67,9 @@ RSpec.describe 'Two factor auths' do
 
         click_button 'Disable two-factor authentication'
 
-        page.accept_alert
+        page.within('[role="dialog"]') do
+          click_button 'Disable'
+        end
 
         expect(page).to have_content('Two-factor authentication has been disabled successfully!')
         expect(page).to have_content('Enable two-factor authentication')
@@ -95,7 +99,9 @@ RSpec.describe 'Two factor auths' do
 
           click_button 'Disable two-factor authentication'
 
-          page.accept_alert
+          page.within('[role="dialog"]') do
+            click_button 'Disable'
+          end
 
           expect(page).to have_content('Two-factor authentication has been disabled successfully!')
           expect(page).to have_content('Enable two-factor authentication')
diff --git a/spec/frontend/authentication/two_factor_auth/components/manage_two_factor_form_spec.js b/spec/frontend/authentication/two_factor_auth/components/manage_two_factor_form_spec.js
index 870375318e3..694c16a85c4 100644
--- a/spec/frontend/authentication/two_factor_auth/components/manage_two_factor_form_spec.js
+++ b/spec/frontend/authentication/two_factor_auth/components/manage_two_factor_form_spec.js
@@ -1,7 +1,6 @@
-import { within } from '@testing-library/dom';
-import { GlForm } from '@gitlab/ui';
-import { mount } from '@vue/test-utils';
-import { extendedWrapper } from 'helpers/vue_test_utils_helper';
+import { GlForm, GlModal } from '@gitlab/ui';
+import { mountExtended } from 'helpers/vue_test_utils_helper';
+import { stubComponent } from 'helpers/stub_component';
 import ManageTwoFactorForm, {
   i18n,
 } from '~/authentication/two_factor_auth/components/manage_two_factor_form.vue';
@@ -17,100 +16,133 @@ describe('ManageTwoFactorForm', () => {
   let wrapper;
 
   const createComponent = (options = {}) => {
-    wrapper = extendedWrapper(
-      mount(ManageTwoFactorForm, {
-        provide: {
-          ...defaultProvide,
-          webauthnEnabled: options?.webauthnEnabled ?? false,
-          isCurrentPasswordRequired: options?.currentPasswordRequired ?? true,
-        },
-      }),
-    );
+    wrapper = mountExtended(ManageTwoFactorForm, {
+      provide: {
+        ...defaultProvide,
+        webauthnEnabled: options?.webauthnEnabled ?? false,
+        isCurrentPasswordRequired: options?.currentPasswordRequired ?? true,
+      },
+      stubs: {
+        GlModal: stubComponent(GlModal, {
+          template: `
+            <div>
+              <slot name="modal-title"></slot>
+              <slot></slot>
+              <slot name="modal-footer"></slot>
+            </div>`,
+        }),
+      },
+    });
   };
 
-  const queryByText = (text, options) => within(wrapper.element).queryByText(text, options);
-  const queryByLabelText = (text, options) =>
-    within(wrapper.element).queryByLabelText(text, options);
-
   const findForm = () => wrapper.findComponent(GlForm);
   const findMethodInput = () => wrapper.findByTestId('test-2fa-method-field');
   const findDisableButton = () => wrapper.findByTestId('test-2fa-disable-button');
   const findRegenerateCodesButton = () => wrapper.findByTestId('test-2fa-regenerate-codes-button');
+  const findConfirmationModal = () => wrapper.findComponent(GlModal);
+
+  const itShowsConfirmationModal = (confirmText) => {
+    it('shows confirmation modal', async () => {
+      await wrapper.findByLabelText('Current password').setValue('foo bar');
+      await findDisableButton().trigger('click');
+
+      expect(findConfirmationModal().props('visible')).toBe(true);
+      expect(findConfirmationModal().html()).toContain(confirmText);
+    });
+  };
+
+  const itShowsValidationMessageIfCurrentPasswordFieldIsEmpty = (findButtonFunction) => {
+    it('shows validation message if `Current password` is empty', async () => {
+      await findButtonFunction().trigger('click');
+
+      expect(wrapper.findByText(i18n.currentPasswordInvalidFeedback).exists()).toBe(true);
+    });
+  };
 
   beforeEach(() => {
     createComponent();
   });
 
-  describe('Current password field', () => {
-    it('renders the current password field', () => {
-      expect(queryByLabelText(i18n.currentPassword).tagName).toEqual('INPUT');
-    });
-  });
-
-  describe('when current password is not required', () => {
-    beforeEach(() => {
-      createComponent({
-        currentPasswordRequired: false,
+  describe('`Current password` field', () => {
+    describe('when required', () => {
+      it('renders the current password field', () => {
+        expect(wrapper.findByLabelText(i18n.currentPassword).exists()).toBe(true);
       });
     });
 
-    it('does not render the current password field', () => {
-      expect(queryByLabelText(i18n.currentPassword)).toBe(null);
+    describe('when not required', () => {
+      beforeEach(() => {
+        createComponent({
+          currentPasswordRequired: false,
+        });
+      });
+
+      it('does not render the current password field', () => {
+        expect(wrapper.findByLabelText(i18n.currentPassword).exists()).toBe(false);
+      });
     });
   });
 
   describe('Disable button', () => {
     it('renders the component with correct attributes', () => {
       expect(findDisableButton().exists()).toBe(true);
-      expect(findDisableButton().attributes()).toMatchObject({
-        'data-confirm': i18n.confirm,
-        'data-form-action': defaultProvide.profileTwoFactorAuthPath,
-        'data-form-method': defaultProvide.profileTwoFactorAuthMethod,
-      });
     });
 
-    it('has the right confirm text', () => {
-      expect(findDisableButton().attributes('data-confirm')).toBe(i18n.confirm);
-    });
+    describe('when clicked', () => {
+      itShowsValidationMessageIfCurrentPasswordFieldIsEmpty(findDisableButton);
 
-    describe('when webauthnEnabled', () => {
-      beforeEach(() => {
-        createComponent({
-          webauthnEnabled: true,
+      itShowsConfirmationModal(i18n.confirm);
+
+      describe('when webauthnEnabled', () => {
+        beforeEach(() => {
+          createComponent({
+            webauthnEnabled: true,
+          });
         });
+
+        itShowsConfirmationModal(i18n.confirmWebAuthn);
       });
 
-      it('has the right confirm text', () => {
-        expect(findDisableButton().attributes('data-confirm')).toBe(i18n.confirmWebAuthn);
+      it('modifies the form action and method when submitted through the button', async () => {
+        const form = findForm();
+        const methodInput = findMethodInput();
+        const submitSpy = jest.spyOn(form.element, 'submit');
+
+        await wrapper.findByLabelText('Current password').setValue('foo bar');
+        await findDisableButton().trigger('click');
+
+        expect(form.attributes('action')).toBe(defaultProvide.profileTwoFactorAuthPath);
+        expect(methodInput.attributes('value')).toBe(defaultProvide.profileTwoFactorAuthMethod);
+
+        findConfirmationModal().vm.$emit('primary');
+
+        expect(submitSpy).toHaveBeenCalled();
       });
     });
-
-    it('modifies the form action and method when submitted through the button', async () => {
-      const form = findForm();
-      const disableButton = findDisableButton().element;
-      const methodInput = findMethodInput();
-
-      await form.vm.$emit('submit', { submitter: disableButton });
-
-      expect(form.attributes('action')).toBe(defaultProvide.profileTwoFactorAuthPath);
-      expect(methodInput.attributes('value')).toBe(defaultProvide.profileTwoFactorAuthMethod);
-    });
   });
 
   describe('Regenerate recovery codes button', () => {
     it('renders the button', () => {
-      expect(queryByText(i18n.regenerateRecoveryCodes)).toEqual(expect.any(HTMLElement));
+      expect(findRegenerateCodesButton().exists()).toBe(true);
     });
 
-    it('modifies the form action and method when submitted through the button', async () => {
-      const form = findForm();
-      const regenerateCodesButton = findRegenerateCodesButton().element;
-      const methodInput = findMethodInput();
+    describe('when clicked', () => {
+      itShowsValidationMessageIfCurrentPasswordFieldIsEmpty(findRegenerateCodesButton);
 
-      await form.vm.$emit('submit', { submitter: regenerateCodesButton });
+      it('modifies the form action and method when submitted through the button', async () => {
+        const form = findForm();
+        const methodInput = findMethodInput();
+        const submitSpy = jest.spyOn(form.element, 'submit');
 
-      expect(form.attributes('action')).toBe(defaultProvide.codesProfileTwoFactorAuthPath);
-      expect(methodInput.attributes('value')).toBe(defaultProvide.codesProfileTwoFactorAuthMethod);
+        await wrapper.findByLabelText('Current password').setValue('foo bar');
+        await findRegenerateCodesButton().trigger('click');
+
+        expect(form.attributes('action')).toBe(defaultProvide.codesProfileTwoFactorAuthPath);
+        expect(methodInput.attributes('value')).toBe(
+          defaultProvide.codesProfileTwoFactorAuthMethod,
+        );
+        expect(submitSpy).toHaveBeenCalled();
+      });
     });
   });
 });
diff --git a/spec/lib/gitlab/email/hook/smime_signature_interceptor_spec.rb b/spec/lib/gitlab/email/hook/smime_signature_interceptor_spec.rb
index 0a1f04ed793..352eb596cd9 100644
--- a/spec/lib/gitlab/email/hook/smime_signature_interceptor_spec.rb
+++ b/spec/lib/gitlab/email/hook/smime_signature_interceptor_spec.rb
@@ -36,7 +36,7 @@ RSpec.describe Gitlab::Email::Hook::SmimeSignatureInterceptor do
   end
 
   before do
-    allow(Gitlab::X509::Certificate).to receive_messages(from_files: certificate)
+    allow(Gitlab::Email::Hook::SmimeSignatureInterceptor).to receive(:certificate).and_return(certificate)
 
     Mail.register_interceptor(described_class)
     mail.deliver_now
diff --git a/spec/tasks/gitlab/db_rake_spec.rb b/spec/tasks/gitlab/db_rake_spec.rb
index e485ba6f5d8..5e88b71733d 100644
--- a/spec/tasks/gitlab/db_rake_spec.rb
+++ b/spec/tasks/gitlab/db_rake_spec.rb
@@ -201,9 +201,11 @@ RSpec.describe 'gitlab:db namespace rake task', :silence_stdout do
   describe 'reindex' do
     let(:reindex) { double('reindex') }
     let(:indexes) { double('indexes') }
+    let(:databases) { Gitlab::Database.databases }
+    let(:databases_count) { databases.count }
 
     it 'cleans up any leftover indexes' do
-      expect(Gitlab::Database::Reindexing).to receive(:cleanup_leftovers!)
+      expect(Gitlab::Database::Reindexing).to receive(:cleanup_leftovers!).exactly(databases_count).times
 
       run_rake_task('gitlab:db:reindex')
     end
@@ -212,8 +214,8 @@ RSpec.describe 'gitlab:db namespace rake task', :silence_stdout do
       it 'executes async index creation prior to any reindexing actions' do
         stub_feature_flags(database_async_index_creation: true)
 
-        expect(Gitlab::Database::AsyncIndexes).to receive(:create_pending_indexes!).ordered
-        expect(Gitlab::Database::Reindexing).to receive(:perform).ordered
+        expect(Gitlab::Database::AsyncIndexes).to receive(:create_pending_indexes!).ordered.exactly(databases_count).times
+        expect(Gitlab::Database::Reindexing).to receive(:perform).ordered.exactly(databases_count).times
 
         run_rake_task('gitlab:db:reindex')
       end
@@ -231,8 +233,8 @@ RSpec.describe 'gitlab:db namespace rake task', :silence_stdout do
 
     context 'when no index_name is given' do
       it 'uses all candidate indexes' do
-        expect(Gitlab::Database::PostgresIndex).to receive(:reindexing_support).and_return(indexes)
-        expect(Gitlab::Database::Reindexing).to receive(:perform).with(indexes)
+        expect(Gitlab::Database::PostgresIndex).to receive(:reindexing_support).exactly(databases_count).times.and_return(indexes)
+        expect(Gitlab::Database::Reindexing).to receive(:perform).with(indexes).exactly(databases_count).times
 
         run_rake_task('gitlab:db:reindex')
       end
@@ -247,7 +249,8 @@ RSpec.describe 'gitlab:db namespace rake task', :silence_stdout do
 
       it 'calls the index rebuilder with the proper arguments' do
         allow(indexes).to receive(:where).with(identifier: 'public.foo_idx').and_return([index])
-        expect(Gitlab::Database::Reindexing).to receive(:perform).with([index])
+        expect(Gitlab::Database::Reindexing).to receive(:perform).with([index]).ordered
+        expect(Gitlab::Database::Reindexing).to receive(:perform).with(indexes).ordered if databases.many?
 
         run_rake_task('gitlab:db:reindex', '[public.foo_idx]')
       end
@@ -255,16 +258,17 @@ RSpec.describe 'gitlab:db namespace rake task', :silence_stdout do
       context 'when database name is provided' do
         it 'calls the index rebuilder with the proper arguments when the database name match' do
           allow(indexes).to receive(:where).with(identifier: 'public.foo_idx').and_return([index])
-          expect(Gitlab::Database::Reindexing).to receive(:perform).with([index])
+          expect(Gitlab::Database::Reindexing).to receive(:perform).with([index]).ordered
+          expect(Gitlab::Database::Reindexing).to receive(:perform).with(indexes).ordered if databases.many?
 
           run_rake_task('gitlab:db:reindex', '[public.foo_idx,main]')
         end
 
         it 'ignores the index and uses all candidate indexes if database name does not match' do
-          expect(Gitlab::Database::PostgresIndex).to receive(:reindexing_support).and_return(indexes)
-          expect(Gitlab::Database::Reindexing).to receive(:perform).with(indexes)
+          expect(Gitlab::Database::PostgresIndex).to receive(:reindexing_support).exactly(databases_count).times.and_return(indexes)
+          expect(Gitlab::Database::Reindexing).to receive(:perform).with(indexes).exactly(databases_count).times
 
-          run_rake_task('gitlab:db:reindex', '[public.foo_idx,ci]')
+          run_rake_task('gitlab:db:reindex', '[public.foo_idx,no_such_database]')
         end
       end
 
diff --git a/spec/workers/emails_on_push_worker_spec.rb b/spec/workers/emails_on_push_worker_spec.rb
index 1993edb804f..3e313610054 100644
--- a/spec/workers/emails_on_push_worker_spec.rb
+++ b/spec/workers/emails_on_push_worker_spec.rb
@@ -157,7 +157,7 @@ RSpec.describe EmailsOnPushWorker, :mailer do
           end
 
           before do
-            allow(Gitlab::X509::Certificate).to receive_messages(from_files: certificate)
+            allow(Gitlab::Email::Hook::SmimeSignatureInterceptor).to receive(:certificate).and_return(certificate)
 
             Mail.register_interceptor(Gitlab::Email::Hook::SmimeSignatureInterceptor)
           end