diff --git a/.rubocop_todo/factory_bot/excessive_create_list.yml b/.rubocop_todo/factory_bot/excessive_create_list.yml
index 62b53e08b9e..5f88e22c926 100644
--- a/.rubocop_todo/factory_bot/excessive_create_list.yml
+++ b/.rubocop_todo/factory_bot/excessive_create_list.yml
@@ -1,6 +1,5 @@
 ---
 FactoryBot/ExcessiveCreateList:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/groups/hooks_controller_spec.rb'
     - 'ee/spec/features/search/elastic/global_search_spec.rb'
diff --git a/.rubocop_todo/gemspec/add_runtime_dependency.yml b/.rubocop_todo/gemspec/add_runtime_dependency.yml
deleted file mode 100644
index 50bd80e5a6c..00000000000
--- a/.rubocop_todo/gemspec/add_runtime_dependency.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-Gemspec/AddRuntimeDependency:
-  Details: grace period
diff --git a/.rubocop_todo/gitlab/avoid_current_organization.yml b/.rubocop_todo/gitlab/avoid_current_organization.yml
index 85bb28dcdd2..d4b256117bc 100644
--- a/.rubocop_todo/gitlab/avoid_current_organization.yml
+++ b/.rubocop_todo/gitlab/avoid_current_organization.yml
@@ -1,5 +1,4 @@
 ---
 Gitlab/AvoidCurrentOrganization:
-  Details: grace period
   Exclude:
     - 'lib/gitlab/github_gists_import/importer/gist_importer.rb'
diff --git a/.rubocop_todo/gitlab/documentation_links/link.yml b/.rubocop_todo/gitlab/documentation_links/link.yml
index c867c607312..2efd412f5c3 100644
--- a/.rubocop_todo/gitlab/documentation_links/link.yml
+++ b/.rubocop_todo/gitlab/documentation_links/link.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Gitlab/DocumentationLinks/Link:
-  Details: grace period
   Exclude:
     - '**/*.haml'
     - 'app/helpers/releases_helper.rb'
diff --git a/.rubocop_todo/gitlab/ee_only_class.yml b/.rubocop_todo/gitlab/ee_only_class.yml
index 1c998d80cce..7ff29f83736 100644
--- a/.rubocop_todo/gitlab/ee_only_class.yml
+++ b/.rubocop_todo/gitlab/ee_only_class.yml
@@ -1,6 +1,5 @@
 ---
 Gitlab/EeOnlyClass:
-  Details: grace period
   Exclude:
     - 'ee/app/controllers/concerns/ee/routable_actions/sso_enforcement_redirect.rb'
     - 'ee/app/graphql/ee/resolvers/pending_group_members_resolver.rb'
diff --git a/.rubocop_todo/internal_affairs/cop_description_with_example.yml b/.rubocop_todo/internal_affairs/cop_description_with_example.yml
deleted file mode 100644
index ac566aaa0af..00000000000
--- a/.rubocop_todo/internal_affairs/cop_description_with_example.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-InternalAffairs/CopDescriptionWithExample:
-  Details: grace period
diff --git a/.rubocop_todo/layout/line_length.yml b/.rubocop_todo/layout/line_length.yml
index 2fde5173291..399f1bcb80a 100644
--- a/.rubocop_todo/layout/line_length.yml
+++ b/.rubocop_todo/layout/line_length.yml
@@ -137,20 +137,6 @@ Layout/LineLength:
     - 'app/models/ci/unit_test.rb'
     - 'app/models/clusters/agent.rb'
     - 'app/models/clusters/cluster.rb'
-    - 'app/models/commit_range.rb'
-    - 'app/models/commit_status.rb'
-    - 'app/models/concerns/analytics/cycle_analytics/stage_event_model.rb'
-    - 'app/models/concerns/avatarable.rb'
-    - 'app/models/concerns/bulk_insert_safe.rb'
-    - 'app/models/concerns/cache_markdown_field.rb'
-    - 'app/models/concerns/cacheable_attributes.rb'
-    - 'app/models/concerns/cascading_namespace_setting_attribute.rb'
-    - 'app/models/concerns/ci/has_status.rb'
-    - 'app/models/concerns/each_batch.rb'
-    - 'app/models/concerns/enums/ci/pipeline.rb'
-    - 'app/models/concerns/enums/vulnerability.rb'
-    - 'app/models/concerns/fast_destroy_all.rb'
-    - 'app/models/concerns/group_descendant.rb'
     - 'app/models/concerns/ignorable_columns.rb'
     - 'app/models/concerns/iid_routes.rb'
     - 'app/models/concerns/integrations/has_data_fields.rb'
diff --git a/.rubocop_todo/lint/debugger.yml b/.rubocop_todo/lint/debugger.yml
index 5e119ad03ca..3e7da83ff61 100644
--- a/.rubocop_todo/lint/debugger.yml
+++ b/.rubocop_todo/lint/debugger.yml
@@ -1,5 +1,4 @@
 ---
 Lint/Debugger:
-  Details: grace period
   Exclude:
     - 'spec/support/helpers/docs_screenshot_helpers.rb'
diff --git a/.rubocop_todo/lint/safe_navigation_consistency.yml b/.rubocop_todo/lint/safe_navigation_consistency.yml
index a9da0a877d2..d9cdfcf4e83 100644
--- a/.rubocop_todo/lint/safe_navigation_consistency.yml
+++ b/.rubocop_todo/lint/safe_navigation_consistency.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Lint/SafeNavigationConsistency:
-  Details: grace period
   Exclude:
     - 'app/models/concerns/ci/deployable.rb'
     - 'app/policies/packages/policies/dependency_proxy/group_policy.rb'
diff --git a/.rubocop_todo/lint/void.yml b/.rubocop_todo/lint/void.yml
index afb43b7e250..8630f92e63b 100644
--- a/.rubocop_todo/lint/void.yml
+++ b/.rubocop_todo/lint/void.yml
@@ -1,6 +1,5 @@
 ---
 # Cop supports --autocorrect.
 Lint/Void:
-  Details: grace period
   Exclude:
     - 'spec/lib/gitlab/import_export/json/streaming_serializer_spec.rb'
diff --git a/.rubocop_todo/rails/date.yml b/.rubocop_todo/rails/date.yml
index c09e6ba71eb..0780b1872e7 100644
--- a/.rubocop_todo/rails/date.yml
+++ b/.rubocop_todo/rails/date.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Rails/Date:
-  Details: grace period
   Exclude:
     - 'app/controllers/users_controller.rb'
     - 'app/finders/issues_finder.rb'
diff --git a/.rubocop_todo/rails/enum_hash.yml b/.rubocop_todo/rails/enum_hash.yml
index ffd8c06ad8e..fc384ad2f42 100644
--- a/.rubocop_todo/rails/enum_hash.yml
+++ b/.rubocop_todo/rails/enum_hash.yml
@@ -1,6 +1,5 @@
 ---
 # Cop supports --autocorrect.
 Rails/EnumHash:
-  Details: grace period
   Exclude:
     - 'app/models/activity_pub/releases_subscription.rb'
diff --git a/.rubocop_todo/rails/enum_syntax.yml b/.rubocop_todo/rails/enum_syntax.yml
index 4874b07c4f7..4ee23b1543c 100644
--- a/.rubocop_todo/rails/enum_syntax.yml
+++ b/.rubocop_todo/rails/enum_syntax.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Rails/EnumSyntax:
-  Details: grace period
   Exclude:
     - 'app/models/abuse_report.rb'
     - 'app/models/alert_management/alert.rb'
diff --git a/.rubocop_todo/rails/pluralization_grammar.yml b/.rubocop_todo/rails/pluralization_grammar.yml
index 53e9df01227..5fe067f1262 100644
--- a/.rubocop_todo/rails/pluralization_grammar.yml
+++ b/.rubocop_todo/rails/pluralization_grammar.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Rails/PluralizationGrammar:
-  Details: grace period
   Exclude:
     - 'app/models/application_setting.rb'
     - 'app/models/application_setting_implementation.rb'
diff --git a/.rubocop_todo/rails/where_range.yml b/.rubocop_todo/rails/where_range.yml
index b897f1d5c95..eaa7b349046 100644
--- a/.rubocop_todo/rails/where_range.yml
+++ b/.rubocop_todo/rails/where_range.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Rails/WhereRange:
-  Details: grace period
   Exclude:
     - 'app/finders/events_finder.rb'
     - 'app/finders/groups_finder.rb'
diff --git a/.rubocop_todo/rspec/be_empty.yml b/.rubocop_todo/rspec/be_empty.yml
index 64ea6a52b9d..1ac162c7e15 100644
--- a/.rubocop_todo/rspec/be_empty.yml
+++ b/.rubocop_todo/rspec/be_empty.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/BeEmpty:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/subscriptions/groups_controller_spec.rb'
     - 'ee/spec/finders/groups/users_finder_spec.rb'
diff --git a/.rubocop_todo/rspec/be_eq.yml b/.rubocop_todo/rspec/be_eq.yml
index 97797db1669..a6470c8c591 100644
--- a/.rubocop_todo/rspec/be_eq.yml
+++ b/.rubocop_todo/rspec/be_eq.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/BeEq:
-  Details: grace period
   Exclude:
     - 'ee/spec/bin/custom_ability_spec.rb'
     - 'ee/spec/controllers/admin/application_settings_controller_spec.rb'
diff --git a/.rubocop_todo/rspec/be_nil.yml b/.rubocop_todo/rspec/be_nil.yml
index 82d00626347..6d3d51a8d30 100644
--- a/.rubocop_todo/rspec/be_nil.yml
+++ b/.rubocop_todo/rspec/be_nil.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/BeNil:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/projects_controller_spec.rb'
     - 'ee/spec/graphql/mutations/issues/set_weight_spec.rb'
diff --git a/.rubocop_todo/rspec/contain_exactly.yml b/.rubocop_todo/rspec/contain_exactly.yml
index 34635d33bcc..0ddfa6eb31f 100644
--- a/.rubocop_todo/rspec/contain_exactly.yml
+++ b/.rubocop_todo/rspec/contain_exactly.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/ContainExactly:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/operations_controller_spec.rb'
     - 'ee/spec/finders/billed_users_finder_spec.rb'
diff --git a/.rubocop_todo/rspec/dialect.yml b/.rubocop_todo/rspec/dialect.yml
index 4b3a90b443f..3140950b2d1 100644
--- a/.rubocop_todo/rspec/dialect.yml
+++ b/.rubocop_todo/rspec/dialect.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/Dialect:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/admin/application_settings_controller_spec.rb'
     - 'ee/spec/helpers/ee/personal_access_tokens_helper_spec.rb'
diff --git a/.rubocop_todo/rspec/duplicated_metadata.yml b/.rubocop_todo/rspec/duplicated_metadata.yml
deleted file mode 100644
index 32d62eb23c6..00000000000
--- a/.rubocop_todo/rspec/duplicated_metadata.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-RSpec/DuplicatedMetadata:
-  Details: grace period
diff --git a/.rubocop_todo/rspec/empty_metadata.yml b/.rubocop_todo/rspec/empty_metadata.yml
deleted file mode 100644
index a344b3d6e51..00000000000
--- a/.rubocop_todo/rspec/empty_metadata.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-RSpec/EmptyMetadata:
-  Details: grace period
diff --git a/.rubocop_todo/rspec/empty_output.yml b/.rubocop_todo/rspec/empty_output.yml
deleted file mode 100644
index 07c212b3220..00000000000
--- a/.rubocop_todo/rspec/empty_output.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-RSpec/EmptyOutput:
-  Details: grace period
diff --git a/.rubocop_todo/rspec/eq.yml b/.rubocop_todo/rspec/eq.yml
index 82e98b969f0..f43dcdc8a7c 100644
--- a/.rubocop_todo/rspec/eq.yml
+++ b/.rubocop_todo/rspec/eq.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/Eq:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/admin/application_settings_controller_spec.rb'
     - 'spec/controllers/projects/compare_controller_spec.rb'
diff --git a/.rubocop_todo/rspec/example_without_description.yml b/.rubocop_todo/rspec/example_without_description.yml
index 77c483db4eb..44ae7dc6868 100644
--- a/.rubocop_todo/rspec/example_without_description.yml
+++ b/.rubocop_todo/rspec/example_without_description.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/ExampleWithoutDescription:
-  Details: grace period
   Exclude:
     - 'ee/spec/bin/custom_ability_spec.rb'
     - 'ee/spec/components/gitlab_subscriptions/discover_duo_pro_component_spec.rb'
diff --git a/.rubocop_todo/rspec/excessive_docstring_spacing.yml b/.rubocop_todo/rspec/excessive_docstring_spacing.yml
index fd331f0df86..84f35ec2837 100644
--- a/.rubocop_todo/rspec/excessive_docstring_spacing.yml
+++ b/.rubocop_todo/rspec/excessive_docstring_spacing.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/ExcessiveDocstringSpacing:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/ee/groups/usage_quotas_controller_spec.rb'
     - 'ee/spec/features/gitlab_subscriptions/trials/duo_enterprise/creation_with_one_existing_namespace_flow_spec.rb'
diff --git a/.rubocop_todo/rspec/expect_in_let.yml b/.rubocop_todo/rspec/expect_in_let.yml
index 4a97b4b6deb..5f081e89035 100644
--- a/.rubocop_todo/rspec/expect_in_let.yml
+++ b/.rubocop_todo/rspec/expect_in_let.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/ExpectInLet:
-  Details: grace period
   Exclude:
     - 'ee/spec/models/elasticsearch_indexed_namespace_spec.rb'
     - 'ee/spec/models/elasticsearch_indexed_project_spec.rb'
diff --git a/.rubocop_todo/rspec/identical_equality_assertion.yml b/.rubocop_todo/rspec/identical_equality_assertion.yml
index 81f48d3b75c..9518ff52d94 100644
--- a/.rubocop_todo/rspec/identical_equality_assertion.yml
+++ b/.rubocop_todo/rspec/identical_equality_assertion.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/IdenticalEqualityAssertion:
-  Details: grace period
   Exclude:
     - 'ee/spec/lib/gitlab/ci/reports/license_scanning/license_spec.rb'
     - 'ee/spec/lib/gitlab/elastic/document_reference_spec.rb'
diff --git a/.rubocop_todo/rspec/is_expected_specify.yml b/.rubocop_todo/rspec/is_expected_specify.yml
index 23ae910f9ae..204f21c4eef 100644
--- a/.rubocop_todo/rspec/is_expected_specify.yml
+++ b/.rubocop_todo/rspec/is_expected_specify.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/IsExpectedSpecify:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/groups/analytics/repository_analytics_controller_spec.rb'
     - 'ee/spec/graphql/ee/types/branch_protection_type_spec.rb'
diff --git a/.rubocop_todo/rspec/missing_expectation_target_method.yml b/.rubocop_todo/rspec/missing_expectation_target_method.yml
index 40fbd9911c0..da0b209d31f 100644
--- a/.rubocop_todo/rspec/missing_expectation_target_method.yml
+++ b/.rubocop_todo/rspec/missing_expectation_target_method.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/MissingExpectationTargetMethod:
-  Details: grace period
   Exclude:
     - 'ee/spec/lib/ee/gitlab/ci/pipeline/chain/validate/external_spec.rb'
     - 'spec/config/object_store_settings_spec.rb'
diff --git a/.rubocop_todo/rspec/no_expectation_example.yml b/.rubocop_todo/rspec/no_expectation_example.yml
index e3f83c39a97..50ec95a94eb 100644
--- a/.rubocop_todo/rspec/no_expectation_example.yml
+++ b/.rubocop_todo/rspec/no_expectation_example.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/NoExpectationExample:
-  Details: grace period
   Exclude:
     - 'ee/spec/components/gitlab_subscriptions/discover_duo_pro_component_spec.rb'
     - 'ee/spec/features/billings/billing_plans_spec.rb'
diff --git a/.rubocop_todo/rspec/pending_without_reason.yml b/.rubocop_todo/rspec/pending_without_reason.yml
index d83b4ec56c8..fb12dcfe665 100644
--- a/.rubocop_todo/rspec/pending_without_reason.yml
+++ b/.rubocop_todo/rspec/pending_without_reason.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/PendingWithoutReason:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/operations_controller_spec.rb'
     - 'ee/spec/features/merge_request/user_approves_spec.rb'
diff --git a/.rubocop_todo/rspec/receive_messages.yml b/.rubocop_todo/rspec/receive_messages.yml
index 4bd8cd2c9ea..b41fab7ee56 100644
--- a/.rubocop_todo/rspec/receive_messages.yml
+++ b/.rubocop_todo/rspec/receive_messages.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/ReceiveMessages:
-  Details: grace period
   Exclude:
     - 'ee/spec/bin/custom_ability_spec.rb'
     - 'ee/spec/components/namespaces/storage/limit_alert_component_spec.rb'
diff --git a/.rubocop_todo/rspec/redundant_around.yml b/.rubocop_todo/rspec/redundant_around.yml
index 262fbc0dce0..7966acaabb4 100644
--- a/.rubocop_todo/rspec/redundant_around.yml
+++ b/.rubocop_todo/rspec/redundant_around.yml
@@ -1,6 +1,5 @@
 ---
 # Cop supports --autocorrect.
 RSpec/RedundantAround:
-  Details: grace period
   Exclude:
     - 'spec/spec_helper.rb'
diff --git a/.rubocop_todo/rspec/redundant_predicate_matcher.yml b/.rubocop_todo/rspec/redundant_predicate_matcher.yml
index 7ed5415164c..95261daefc7 100644
--- a/.rubocop_todo/rspec/redundant_predicate_matcher.yml
+++ b/.rubocop_todo/rspec/redundant_predicate_matcher.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/RedundantPredicateMatcher:
-  Details: grace period
   Exclude:
     - 'ee/spec/lib/gitlab/ci/templates/api_fuzzing_gitlab_ci_yaml_spec.rb'
     - 'ee/spec/lib/gitlab/ci/templates/api_fuzzing_latest_gitlab_ci_yaml_spec.rb'
diff --git a/.rubocop_todo/rspec/remove_const.yml b/.rubocop_todo/rspec/remove_const.yml
index d37d274f402..cd1e1f54882 100644
--- a/.rubocop_todo/rspec/remove_const.yml
+++ b/.rubocop_todo/rspec/remove_const.yml
@@ -1,5 +1,4 @@
 ---
 RSpec/RemoveConst:
-  Details: grace period
   Exclude:
     - 'spec/support/helpers/click_house_schema_helpers.rb'
diff --git a/.rubocop_todo/rspec/repeated_subject_call.yml b/.rubocop_todo/rspec/repeated_subject_call.yml
index bbc80a8b2e5..91e610314d7 100644
--- a/.rubocop_todo/rspec/repeated_subject_call.yml
+++ b/.rubocop_todo/rspec/repeated_subject_call.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/RepeatedSubjectCall:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/projects/settings/repository_controller_spec.rb'
     - 'ee/spec/controllers/registrations/groups_controller_spec.rb'
diff --git a/.rubocop_todo/rspec/skip_block_inside_example.yml b/.rubocop_todo/rspec/skip_block_inside_example.yml
deleted file mode 100644
index adb2ca7c0d1..00000000000
--- a/.rubocop_todo/rspec/skip_block_inside_example.yml
+++ /dev/null
@@ -1,3 +0,0 @@
----
-RSpec/SkipBlockInsideExample:
-  Details: grace period
diff --git a/.rubocop_todo/rspec/spec_file_path_format.yml b/.rubocop_todo/rspec/spec_file_path_format.yml
index dccd529167e..a4b5956a423 100644
--- a/.rubocop_todo/rspec/spec_file_path_format.yml
+++ b/.rubocop_todo/rspec/spec_file_path_format.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/SpecFilePathFormat:
-  Details: grace period
   Exclude:
     - 'ee/spec/models/merge_request/blocking_spec.rb'
     - 'ee/spec/requests/api/ci/runner/jobs_put_spec.rb'
diff --git a/.rubocop_todo/rspec/spec_file_path_suffix.yml b/.rubocop_todo/rspec/spec_file_path_suffix.yml
index 1d93756a635..a7e44ae9311 100644
--- a/.rubocop_todo/rspec/spec_file_path_suffix.yml
+++ b/.rubocop_todo/rspec/spec_file_path_suffix.yml
@@ -1,6 +1,5 @@
 ---
 RSpec/SpecFilePathSuffix:
-  Details: grace period
   Exclude:
     - 'ee/spec/frontend/fixtures/analytics/charts.rb'
     - 'ee/spec/frontend/fixtures/analytics/devops_reports/devops_adoption/enabled_namespaces.rb'
diff --git a/.rubocop_todo/rspec/undescriptive_literals_description.yml b/.rubocop_todo/rspec/undescriptive_literals_description.yml
index d0e703f3da9..238a8f7b3e2 100644
--- a/.rubocop_todo/rspec/undescriptive_literals_description.yml
+++ b/.rubocop_todo/rspec/undescriptive_literals_description.yml
@@ -1,5 +1,4 @@
 ---
 RSpec/UndescriptiveLiteralsDescription:
-  Details: grace period
   Exclude:
     - 'spec/services/merge_requests/base_service_spec.rb'
diff --git a/.rubocop_todo/rspec/verified_double_reference.yml b/.rubocop_todo/rspec/verified_double_reference.yml
index 84c907e0a72..1797f5da240 100644
--- a/.rubocop_todo/rspec/verified_double_reference.yml
+++ b/.rubocop_todo/rspec/verified_double_reference.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 RSpec/VerifiedDoubleReference:
-  Details: grace period
   Exclude:
     - 'ee/spec/controllers/groups/analytics/productivity_analytics_controller_spec.rb'
     - 'ee/spec/controllers/groups/security/policies_controller_spec.rb'
diff --git a/.rubocop_todo/style/arguments_forwarding.yml b/.rubocop_todo/style/arguments_forwarding.yml
index afa320927ae..0b0890b919b 100644
--- a/.rubocop_todo/style/arguments_forwarding.yml
+++ b/.rubocop_todo/style/arguments_forwarding.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Style/ArgumentsForwarding:
-  Details: grace period
   Exclude:
     - 'app/controllers/admin/users_controller.rb'
     - 'app/controllers/application_controller.rb'
diff --git a/.rubocop_todo/style/empty_literal.yml b/.rubocop_todo/style/empty_literal.yml
deleted file mode 100644
index 1da4e31a992..00000000000
--- a/.rubocop_todo/style/empty_literal.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-Style/EmptyLiteral:
-  Details: grace period
diff --git a/.rubocop_todo/style/iso8601_date.yml b/.rubocop_todo/style/iso8601_date.yml
deleted file mode 100644
index f78b684d699..00000000000
--- a/.rubocop_todo/style/iso8601_date.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-Style/Iso8601Date:
-  Details: grace period
diff --git a/.rubocop_todo/style/map_into_array.yml b/.rubocop_todo/style/map_into_array.yml
index 7fa10454008..5082e181e1b 100644
--- a/.rubocop_todo/style/map_into_array.yml
+++ b/.rubocop_todo/style/map_into_array.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Style/MapIntoArray:
-  Details: grace period
   Exclude:
     - 'app/finders/projects/members/effective_access_level_finder.rb'
     - 'app/services/packages/nuget/extract_metadata_content_service.rb'
diff --git a/.rubocop_todo/style/redundant_interpolation_unfreeze.yml b/.rubocop_todo/style/redundant_interpolation_unfreeze.yml
deleted file mode 100644
index 8b6bdf95a10..00000000000
--- a/.rubocop_todo/style/redundant_interpolation_unfreeze.yml
+++ /dev/null
@@ -1,4 +0,0 @@
----
-# Cop supports --autocorrect.
-Style/RedundantInterpolationUnfreeze:
-  Details: grace period
diff --git a/.rubocop_todo/style/send_with_literal_method_name.yml b/.rubocop_todo/style/send_with_literal_method_name.yml
index ecf11504384..d3796b4301b 100644
--- a/.rubocop_todo/style/send_with_literal_method_name.yml
+++ b/.rubocop_todo/style/send_with_literal_method_name.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Style/SendWithLiteralMethodName:
-  Details: grace period
   Exclude:
     - 'ee/spec/models/ci/build_spec.rb'
     - 'lib/gitlab/database/load_balancing/connection_proxy.rb'
diff --git a/.rubocop_todo/style/super_arguments.yml b/.rubocop_todo/style/super_arguments.yml
index ce47ee5f5e2..d5c18acca08 100644
--- a/.rubocop_todo/style/super_arguments.yml
+++ b/.rubocop_todo/style/super_arguments.yml
@@ -1,7 +1,6 @@
 ---
 # Cop supports --autocorrect.
 Style/SuperArguments:
-  Details: grace period
   Exclude:
     - 'app/finders/merge_requests_finder.rb'
     - 'app/finders/packages/composer/packages_finder.rb'
diff --git a/app/assets/javascripts/behaviors/find_and_replace.js b/app/assets/javascripts/behaviors/find_and_replace.js
new file mode 100644
index 00000000000..c2deb01194e
--- /dev/null
+++ b/app/assets/javascripts/behaviors/find_and_replace.js
@@ -0,0 +1,14 @@
+import $ from 'jquery';
+
+if (gon.features?.findAndReplace) {
+  $(document).on('markdown-editor:find-and-replace', (e, keyboardEvent) => {
+    const $target = $(keyboardEvent.target);
+
+    if ($target.is('textarea.markdown-area')) {
+      $(document).triggerHandler('markdown-editor:find-and-replace:show', [
+        $target.closest('form'),
+      ]);
+      keyboardEvent.preventDefault();
+    }
+  });
+}
diff --git a/app/assets/javascripts/behaviors/index.js b/app/assets/javascripts/behaviors/index.js
index d8ee4296203..3ae1ccf12ac 100644
--- a/app/assets/javascripts/behaviors/index.js
+++ b/app/assets/javascripts/behaviors/index.js
@@ -10,6 +10,7 @@ import { initGlobalAlerts } from './global_alerts';
 import './shortcuts';
 import './toggler_behavior';
 import './preview_markdown';
+import './find_and_replace';
 
 installGlEmojiElement();
 initCopyAsGFM();
diff --git a/app/assets/javascripts/behaviors/shortcuts/keybindings.js b/app/assets/javascripts/behaviors/shortcuts/keybindings.js
index 5c86e8b7e0b..61b7c1e199e 100644
--- a/app/assets/javascripts/behaviors/shortcuts/keybindings.js
+++ b/app/assets/javascripts/behaviors/shortcuts/keybindings.js
@@ -1,6 +1,6 @@
 import { memoize } from 'lodash';
 import AccessorUtilities from '~/lib/utils/accessor';
-import { __ } from '~/locale';
+import { __, s__ } from '~/locale';
 
 /**
  * @param {object} command
@@ -174,6 +174,13 @@ export const OUTDENT_LINE = {
   customizable: false,
 };
 
+export const FIND_AND_REPLACE = {
+  id: 'editing.findAndReplace',
+  description: s__('MarkdownEditor|Find and replace'),
+  defaultKeys: ['mod+f'],
+  customizable: false,
+};
+
 export const TOGGLE_MARKDOWN_PREVIEW = {
   id: 'editing.toggleMarkdownPreview',
   description: __('Toggle Markdown preview'),
@@ -589,6 +596,7 @@ export const EDITING_SHORTCUTS_GROUP = {
     STRIKETHROUGH_TEXT,
     LINK_TEXT,
     TOGGLE_MARKDOWN_PREVIEW,
+    FIND_AND_REPLACE,
     EDIT_RECENT_COMMENT,
     SAVE_CHANGES,
   ],
diff --git a/app/assets/javascripts/behaviors/shortcuts/shortcuts.js b/app/assets/javascripts/behaviors/shortcuts/shortcuts.js
index ede9afd799c..0f953b5de58 100644
--- a/app/assets/javascripts/behaviors/shortcuts/shortcuts.js
+++ b/app/assets/javascripts/behaviors/shortcuts/shortcuts.js
@@ -18,6 +18,7 @@ import {
   HIDE_APPEARING_CONTENT,
   TOGGLE_CANARY,
   TOGGLE_MARKDOWN_PREVIEW,
+  FIND_AND_REPLACE,
   GO_TO_YOUR_TODO_LIST,
   GO_TO_ACTIVITY_FEED,
   GO_TO_YOUR_ISSUES,
@@ -113,6 +114,14 @@ export default class Shortcuts {
       keysFor(TOGGLE_MARKDOWN_PREVIEW).includes(combo) ? false : undefined,
     );
 
+    if (gon?.features?.findAndReplace) {
+      this.add(FIND_AND_REPLACE, Shortcuts.toggleFindAndReplaceBar);
+
+      addStopCallback((e, element, combo) =>
+        keysFor(FIND_AND_REPLACE).includes(combo) ? false : undefined,
+      );
+    }
+
     $(document).on('click', '.js-shortcuts-modal-trigger', this.onToggleHelp);
 
     if (shouldDisableShortcuts()) {
@@ -255,6 +264,10 @@ export default class Shortcuts {
     $(document).triggerHandler('markdown-preview:toggle', [e]);
   }
 
+  static toggleFindAndReplaceBar(e) {
+    $(document).triggerHandler('markdown-editor:find-and-replace', [e]);
+  }
+
   focusFilter(e) {
     if (!this.filterInput) {
       this.filterInput = $('input[type=search]', '.nav-controls');
diff --git a/app/assets/javascripts/ci/jobs_page/components/job_cells/pipeline_cell.vue b/app/assets/javascripts/ci/jobs_page/components/job_cells/pipeline_cell.vue
index 0699d1eec7f..ea4f7295527 100644
--- a/app/assets/javascripts/ci/jobs_page/components/job_cells/pipeline_cell.vue
+++ b/app/assets/javascripts/ci/jobs_page/components/job_cells/pipeline_cell.vue
@@ -45,7 +45,7 @@ export default {
         {{ pipelineId }}
       </gl-link>
 
-      <span class="gl-text-secondary">
+      <span class="gl-text-subtle">
         <span>{{ __('created by') }}</span>
         <gl-link v-if="showAvatar" :href="userPath" data-testid="pipeline-user-link">
           <gl-avatar :src="pipelineUserAvatar" :size="16" />
@@ -54,7 +54,7 @@ export default {
       </span>
     </div>
 
-    <div v-if="job.stage" class="gl-mt-1 gl-truncate gl-text-sm gl-text-secondary">
+    <div v-if="job.stage" class="gl-mt-1 gl-truncate gl-text-sm gl-text-subtle">
       <span data-testid="job-stage-name">{{ $options.i18n.stageLabel }}: {{ job.stage.name }}</span>
     </div>
   </div>
diff --git a/app/assets/javascripts/ci/jobs_page/components/job_cells/status_cell.vue b/app/assets/javascripts/ci/jobs_page/components/job_cells/status_cell.vue
index 978a940f9f6..092ceb93990 100644
--- a/app/assets/javascripts/ci/jobs_page/components/job_cells/status_cell.vue
+++ b/app/assets/javascripts/ci/jobs_page/components/job_cells/status_cell.vue
@@ -39,7 +39,7 @@ export default {
 <template>
   <div>
     <ci-icon :status="job.detailedStatus" show-status-text />
-    <div class="gl-ml-1 gl-mt-2 gl-text-sm gl-text-secondary">
+    <div class="gl-ml-1 gl-mt-2 gl-text-sm gl-text-subtle">
       <div v-if="duration" data-testid="job-duration">
         <gl-icon name="timer" :size="$options.iconSize" data-testid="duration-icon" />
         {{ durationFormatted }}
diff --git a/app/assets/javascripts/diffs/components/app.vue b/app/assets/javascripts/diffs/components/app.vue
index faeec1764f7..71e1b6ce0e4 100644
--- a/app/assets/javascripts/diffs/components/app.vue
+++ b/app/assets/javascripts/diffs/components/app.vue
@@ -739,6 +739,9 @@ export default {
       this.toggleTreeList();
       this.adjustView();
     },
+    isDiffViewActive(item) {
+      return this.virtualScrollCurrentIndex >= 0 && this.currentDiffFileId === item.file_hash;
+    },
   },
   howToMergeDocsPath: helpPagePath('user/project/merge_requests/merge_request_troubleshooting.md', {
     anchor: 'check-out-merge-requests-locally-through-the-head-ref',
@@ -812,6 +815,7 @@ export default {
                   :item="item"
                   :active="active"
                   :class="{ active }"
+                  class="gl-mb-5"
                 >
                   <diff-file
                     :file="item"
@@ -824,7 +828,7 @@ export default {
                     :can-current-user-fork="canCurrentUserFork"
                     :view-diffs-file-by-file="viewDiffsFileByFile"
                     :active="active"
-                    :is-diff-view-active="currentDiffFileId === item.file_hash"
+                    :is-diff-view-active="isDiffViewActive(item)"
                   />
                 </dynamic-scroller-item>
               </template>
@@ -846,6 +850,7 @@ export default {
                 :can-current-user-fork="canCurrentUserFork"
                 :view-diffs-file-by-file="viewDiffsFileByFile"
                 :is-diff-view-active="currentDiffFileId === file.file_hash"
+                class="gl-mb-5"
               />
             </template>
             <div
diff --git a/app/assets/javascripts/diffs/components/diff_file.vue b/app/assets/javascripts/diffs/components/diff_file.vue
index 897e30e6b27..71f07a3c1ac 100644
--- a/app/assets/javascripts/diffs/components/diff_file.vue
+++ b/app/assets/javascripts/diffs/components/diff_file.vue
@@ -430,11 +430,10 @@ export default {
       'has-body': showBody,
       'is-virtual-scrolling': isVirtualScrollingEnabled,
       'linked-file': isLinkedFile,
-      'gl-border-gray-200': isDiffViewActive && !file.conflict_type,
-      'gl-border-red-700': isDiffViewActive && file.conflict_type,
+      'diff-file-is-active': isDiffViewActive,
     }"
     :data-path="file.new_path"
-    class="diff-file file-holder gl-mb-5"
+    class="diff-file file-holder"
   >
     <gl-alert
       v-if="!showLoadingIcon && file.conflict_type"
@@ -492,8 +491,6 @@ export default {
         hasBodyClasses.header,
         {
           '!gl-rounded-none !gl-bg-red-200': file.conflict_type,
-          '!gl-bg-strong': isDiffViewActive && !file.conflict_type,
-          '!gl-bg-red-300': isDiffViewActive && file.conflict_type,
           '!gl-rounded-tl-none !gl-rounded-tr-none': file.conflict_type && isCollapsed,
           '!gl-border-0': file.conflict_type || isCollapsed,
         },
@@ -504,7 +501,7 @@ export default {
 
     <div
       v-if="idState.forkMessageVisible"
-      class="js-file-fork-suggestion-section file-fork-suggestion gl-border-1 gl-border-t-0 gl-border-solid gl-border-gray-100"
+      class="js-file-fork-suggestion-section file-fork-suggestion gl-border-1 gl-border-t-0 gl-border-solid gl-border-default"
     >
       <span v-safe-html="forkMessage" class="file-fork-suggestion-note"></span>
       <gl-button
diff --git a/app/assets/javascripts/sidebar/components/todo_toggle/sidebar_todo_widget.vue b/app/assets/javascripts/sidebar/components/todo_toggle/sidebar_todo_widget.vue
index ed7f9dff96b..4d1d00ea897 100644
--- a/app/assets/javascripts/sidebar/components/todo_toggle/sidebar_todo_widget.vue
+++ b/app/assets/javascripts/sidebar/components/todo_toggle/sidebar_todo_widget.vue
@@ -95,9 +95,7 @@ export default {
           };
         },
         skip() {
-          return (
-            !this.glFeatures.realtimeIssuableTodo || !todoQueries[this.issuableType].subscription
-          );
+          return !todoQueries[this.issuableType].subscription;
         },
       },
     },
diff --git a/app/assets/javascripts/vue_shared/components/markdown/header.vue b/app/assets/javascripts/vue_shared/components/markdown/header.vue
index 9434bcbfa7d..56c09de9ac8 100644
--- a/app/assets/javascripts/vue_shared/components/markdown/header.vue
+++ b/app/assets/javascripts/vue_shared/components/markdown/header.vue
@@ -1,6 +1,6 @@
 <!-- eslint-disable vue/multi-word-component-names -->
 <script>
-import { GlPopover, GlButton, GlTooltipDirective } from '@gitlab/ui';
+import { GlPopover, GlButton, GlTooltipDirective, GlFormInput } from '@gitlab/ui';
 import $ from 'jquery';
 import {
   keysFor,
@@ -10,6 +10,7 @@ import {
   LINK_TEXT,
   INDENT_LINE,
   OUTDENT_LINE,
+  FIND_AND_REPLACE,
 } from '~/behaviors/shortcuts/keybindings';
 import glFeatureFlagsMixin from '~/vue_shared/mixins/gl_feature_flags_mixin';
 import { getModifierKey } from '~/constants';
@@ -28,6 +29,7 @@ export default {
     ToolbarButton,
     GlPopover,
     GlButton,
+    GlFormInput,
     DrawioToolbarButton,
     CommentTemplatesModal,
     AiActionsDropdown: () => import('ee_component/ai/components/ai_actions_dropdown.vue'),
@@ -108,6 +110,11 @@ export default {
     return {
       tag: '> ',
       suggestPopoverVisible: false,
+      shouldShowFindAndReplaceBar: false,
+      findAndReplace: {
+        find: '',
+        replace: '',
+      },
       modifierKey,
       shiftKey: modifierKey === '⌘' ? '⇧' : 'Shift+',
     };
@@ -144,6 +151,11 @@ export default {
           !this.newCommentTemplatePath)
       );
     },
+    showFindAndReplaceButton() {
+      return (
+        this.glFeatures.findAndReplace && !this.restrictedToolBarItems.includes('find-and-replace')
+      );
+    },
   },
   watch: {
     showSuggestPopover() {
@@ -153,12 +165,14 @@ export default {
   mounted() {
     $(document).on('markdown-preview:show.vue', this.showMarkdownPreview);
     $(document).on('markdown-preview:hide.vue', this.hideMarkdownPreview);
+    $(document).on('markdown-editor:find-and-replace:show', this.showFindAndReplaceBar);
 
     this.updateSuggestPopoverVisibility();
   },
   beforeDestroy() {
     $(document).off('markdown-preview:show.vue', this.showMarkdownPreview);
     $(document).off('markdown-preview:hide.vue', this.hideMarkdownPreview);
+    $(document).off('markdown-editor:find-and-replace:show', this.showFindAndReplaceBar);
   },
   methods: {
     async updateSuggestPopoverVisibility() {
@@ -243,6 +257,21 @@ export default {
         this.$el.closest('.md-area')?.querySelector('textarea')?.focus();
       }, 500);
     },
+    showFindAndReplaceBar(_, form) {
+      if (!this.isValid(form)) return;
+
+      this.shouldShowFindAndReplaceBar = true;
+    },
+    handleKeyDown(e) {
+      if (e.key === 'Enter') {
+        e.preventDefault();
+        return;
+      }
+
+      if (e.key === 'Escape') {
+        this.shouldShowFindAndReplaceBar = false;
+      }
+    },
   },
   shortcuts: {
     bold: keysFor(BOLD_TEXT),
@@ -251,6 +280,7 @@ export default {
     link: keysFor(LINK_TEXT),
     indent: keysFor(INDENT_LINE),
     outdent: keysFor(OUTDENT_LINE),
+    findAndReplace: keysFor(FIND_AND_REPLACE),
   },
   i18n: {
     comment: __('This comment was generated by AI'),
@@ -545,7 +575,27 @@ export default {
             tracking-property="fullScreen"
           />
         </div>
+        <toolbar-button
+          v-if="showFindAndReplaceButton"
+          v-show="!previewMarkdown"
+          class="gl-hidden"
+          :button-title="s__('MarkdownEditor|Find and replace')"
+          :shortcuts="$options.shortcuts.findAndReplace"
+          icon="retry"
+        />
       </div>
     </div>
+    <div
+      v-if="shouldShowFindAndReplaceBar"
+      class="gl-border gl-absolute gl-right-0 gl-z-1 gl-flex gl-w-34 gl-rounded-bl-base gl-border-r-0 gl-bg-section gl-p-3 gl-shadow-sm"
+      data-testid="find-and-replace"
+    >
+      <gl-form-input
+        v-model="findAndReplace.find"
+        :placeholder="__('Find')"
+        autofocus
+        @keydown="handleKeyDown"
+      />
+    </div>
   </div>
 </template>
diff --git a/app/assets/stylesheets/framework/diffs.scss b/app/assets/stylesheets/framework/diffs.scss
index fceaa7e1539..b2565a1a2ed 100644
--- a/app/assets/stylesheets/framework/diffs.scss
+++ b/app/assets/stylesheets/framework/diffs.scss
@@ -16,6 +16,11 @@ $diff-file-header: 41px;
 .diff-file {
   margin-bottom: $gl-padding;
 
+  &.diff-file-is-active,
+  &:has(*:not(textarea):focus-visible) {
+    box-shadow: 0 0 0 2px var(--gl-border-color-strong);
+  }
+
   table.code tr:last-of-type td:last-of-type {
     border-bottom-right-radius: $gl-border-radius-base-inner;
   }
@@ -48,17 +53,6 @@ $diff-file-header: 41px;
         top: calc(#{$calc-application-header-height} + #{$mr-sticky-header-height} + #{$diff-file-header} - #{$gl-border-size-1});
       }
 
-      &::before {
-        content: '';
-        position: absolute;
-        top: -1px;
-        left: -11px;
-        width: 10px;
-        height: calc(100% + 1px);
-        @apply gl-bg-default;
-        pointer-events: none;
-      }
-
       &.is-commit,
       &.is-compare,
       &.is-wiki {
@@ -655,12 +649,6 @@ table.code {
   }
 }
 
-.files {
-  .diff-file:not(.is-virtual-scrolling):last-child {
-    margin-bottom: 0;
-  }
-}
-
 .diff-comments-more-count,
 .diff-notes-collapse,
 .inline-findings-collapse {
diff --git a/app/assets/stylesheets/framework/mixins.scss b/app/assets/stylesheets/framework/mixins.scss
index 649b2861759..2446b258bfa 100644
--- a/app/assets/stylesheets/framework/mixins.scss
+++ b/app/assets/stylesheets/framework/mixins.scss
@@ -42,7 +42,7 @@
     @include clearfix;
 
     padding: 10px 0;
-    border-bottom: 1px solid $gray-100;
+    @apply gl-border-b gl-border-b-subtle;
     display: block;
     margin: 0;
 
@@ -51,10 +51,10 @@
     }
 
     &.active {
-      background: $gray-10;
+      @apply gl-bg-subtle;
 
       a {
-        font-weight: $gl-font-weight-bold;
+        @apply gl-font-bold;
       }
     }
 
diff --git a/app/assets/stylesheets/page_bundles/projects.scss b/app/assets/stylesheets/page_bundles/projects.scss
index 56fbfb439bd..7a421cc210b 100644
--- a/app/assets/stylesheets/page_bundles/projects.scss
+++ b/app/assets/stylesheets/page_bundles/projects.scss
@@ -286,7 +286,7 @@
     vertical-align: top;
     padding-top: $gl-spacing-scale-4;
     padding-bottom: $gl-spacing-scale-4;
-    border-bottom: 1px solid var(--gray-50, $gray-50);
+    @apply gl-border-b gl-border-b-subtle;
   }
 
   .project-row:last-of-type {
@@ -302,7 +302,7 @@
       .stats {
         float: right;
         line-height: $list-text-height;
-        color: $gl-text-color-secondary;
+        @apply gl-text-subtle;
 
         @include media-breakpoint-down(xs) {
           padding-top: $gl-padding-6;
diff --git a/app/components/layouts/page_heading_component.haml b/app/components/layouts/page_heading_component.haml
index 47b68e1b90b..32cb15903d7 100644
--- a/app/components/layouts/page_heading_component.haml
+++ b/app/components/layouts/page_heading_component.haml
@@ -7,5 +7,5 @@
       = actions
 
   - if description? || @description
-    .gl-w-full.gl-mt-2.gl-text-secondary{ data: { testid: 'page-heading-description' } }
+    .gl-w-full.gl-mt-2.gl-text-subtle{ data: { testid: 'page-heading-description' } }
       = description || @description
diff --git a/app/controllers/projects/merge_requests_controller.rb b/app/controllers/projects/merge_requests_controller.rb
index 14bfa7c7144..624248b6c61 100644
--- a/app/controllers/projects/merge_requests_controller.rb
+++ b/app/controllers/projects/merge_requests_controller.rb
@@ -48,7 +48,6 @@ class Projects::MergeRequestsController < Projects::MergeRequests::ApplicationCo
     push_frontend_feature_flag(:reviewer_assign_drawer, current_user)
     push_frontend_feature_flag(:vulnerability_code_flow, project)
     push_frontend_feature_flag(:pipeline_vulnerability_code_flow, project)
-    push_frontend_feature_flag(:realtime_issuable_todo, current_user)
   end
 
   around_action :allow_gitaly_ref_name_caching, only: [:index, :show, :diffs, :rapid_diffs, :discussions]
diff --git a/app/graphql/graphql_triggers.rb b/app/graphql/graphql_triggers.rb
index bb21f889966..c48c1de44fa 100644
--- a/app/graphql/graphql_triggers.rb
+++ b/app/graphql/graphql_triggers.rb
@@ -73,8 +73,7 @@ module GraphqlTriggers
     ::GitlabSchema.subscriptions.trigger('workItemUpdated', { work_item_id: work_item.to_gid }, work_item)
   end
 
-  def self.issuable_todo_updated(issuable, user)
-    return if ::Feature.disabled?(:realtime_issuable_todo, user)
+  def self.issuable_todo_updated(issuable)
     return unless issuable.respond_to?(:to_gid)
 
     ::GitlabSchema.subscriptions.trigger(
diff --git a/app/helpers/routing/pseudonymization_helper.rb b/app/helpers/routing/pseudonymization_helper.rb
index c05cea93bc5..3869747e882 100644
--- a/app/helpers/routing/pseudonymization_helper.rb
+++ b/app/helpers/routing/pseudonymization_helper.rb
@@ -4,6 +4,8 @@ module Routing
   module PseudonymizationHelper
     PSEUDONOMIZED_NAMESPACE = "namespace"
     PSEUDONOMIZED_PROJECT = "project"
+    PSEUDONOMIZED_GROUP = "group"
+    PSEUDONOMIZED_ID = "id"
 
     class MaskHelper
       QUERY_PARAMS_TO_NOT_MASK = %w[
@@ -109,19 +111,27 @@ module Routing
       return unless params && params[:controller]
       return if params[:action] == "route_not_found"
 
+      original_id = params[:id]
+
       case params[:controller]
       when 'groups'
         params[:id] = PSEUDONOMIZED_NAMESPACE
       when 'projects'
         params[:id] = PSEUDONOMIZED_PROJECT
-        params[:namespace_id] = PSEUDONOMIZED_NAMESPACE
       else
-        params[:project_id] = PSEUDONOMIZED_PROJECT if params[:project_id]
-        params[:namespace_id] = PSEUDONOMIZED_NAMESPACE if params[:namespace_id]
+        params[:id] = PSEUDONOMIZED_ID if params[:id]
       end
 
+      params[:project_id] = PSEUDONOMIZED_PROJECT if params[:project_id]
+      params[:group_id] = PSEUDONOMIZED_GROUP if params[:group_id]
+      params[:namespace_id] = PSEUDONOMIZED_NAMESPACE if params[:namespace_id]
+
       masked_query_params = masked_query_params(URI.parse(url))
 
+      Gitlab::Routing.url_helpers.url_for(params.merge(params: masked_query_params))
+    rescue ActionController::UrlGenerationError
+      # If URL cannot be constructed with placeholder, use original ID
+      params[:id] = original_id
       Gitlab::Routing.url_helpers.url_for(params.merge(params: masked_query_params))
     end
 
diff --git a/app/models/ci/catalog/resources/components/last_usage.rb b/app/models/ci/catalog/resources/components/last_usage.rb
index a97e4bcafeb..b8c98b488f9 100644
--- a/app/models/ci/catalog/resources/components/last_usage.rb
+++ b/app/models/ci/catalog/resources/components/last_usage.rb
@@ -10,6 +10,8 @@ module Ci
           self.table_name = 'catalog_resource_component_last_usages'
           self.primary_key = :id
 
+          scope :older_than_30_days, -> { where(last_used_date: ...30.days.ago.to_date) }
+
           belongs_to :component, class_name: 'Ci::Catalog::Resources::Component', inverse_of: :last_usages
           belongs_to :catalog_resource, class_name: 'Ci::Catalog::Resource', inverse_of: :component_last_usages
           belongs_to :component_project, class_name: 'Project', inverse_of: :ci_component_last_usages
diff --git a/app/models/commit_range.rb b/app/models/commit_range.rb
index cb24297f2c8..d39b8678edb 100644
--- a/app/models/commit_range.rb
+++ b/app/models/commit_range.rb
@@ -8,9 +8,15 @@
 #   range.exclude_start?  # => false
 #   range.to_s            # => "f3f85602...e86e1013"
 #
-#   range = CommitRange.new('f3f856029bc5f966c5a7ee24cf7efefdd20e6019..e86e1013709735be5bb767e2b228930c543f25ae', project)
+#   range = CommitRange.new(
+#                           'f3f856029bc5f966c5a7ee24cf7efefdd20e6019..e86e1013709735be5bb767e2b228930c543f25ae',
+#                           project
+#                          )
 #   range.exclude_start?  # => true
-#   range.to_param        # => {from: "f3f856029bc5f966c5a7ee24cf7efefdd20e6019^", to: "e86e1013709735be5bb767e2b228930c543f25ae"}
+#   range.to_param        # => {
+#                               from: "f3f856029bc5f966c5a7ee24cf7efefdd20e6019^",
+#                               to: "e86e1013709735be5bb767e2b228930c543f25ae"
+#                              }
 #   range.to_s            # => "f3f85602..e86e1013"
 #
 #   # Assuming the specified project has a repository containing both commits:
diff --git a/app/models/commit_status.rb b/app/models/commit_status.rb
index e57ef8a84fd..1f4af83c37d 100644
--- a/app/models/commit_status.rb
+++ b/app/models/commit_status.rb
@@ -18,9 +18,18 @@ class CommitStatus < Ci::ApplicationRecord
 
   belongs_to :user
   belongs_to :project
-  belongs_to :pipeline, ->(build) { in_partition(build) }, class_name: 'Ci::Pipeline', foreign_key: :commit_id, inverse_of: :statuses, partition_foreign_key: :partition_id
+  belongs_to :pipeline,
+    ->(build) { in_partition(build) },
+    class_name: 'Ci::Pipeline',
+    foreign_key: :commit_id,
+    inverse_of: :statuses,
+    partition_foreign_key: :partition_id
   belongs_to :auto_canceled_by, class_name: 'Ci::Pipeline', inverse_of: :auto_canceled_jobs
-  belongs_to :ci_stage, ->(build) { in_partition(build) }, class_name: 'Ci::Stage', foreign_key: :stage_id, partition_foreign_key: :partition_id
+  belongs_to :ci_stage,
+    ->(build) { in_partition(build) },
+    class_name: 'Ci::Stage',
+    foreign_key: :stage_id,
+    partition_foreign_key: :partition_id
 
   has_many :needs, class_name: 'Ci::BuildNeed', foreign_key: :build_id, inverse_of: :build
 
@@ -141,7 +150,16 @@ class CommitStatus < Ci::ApplicationRecord
 
     event :drop do
       transition canceling: :canceled # runner returns success/failed
-      transition [:created, :waiting_for_resource, :preparing, :waiting_for_callback, :pending, :running, :manual, :scheduled] => :failed
+      transition [
+        :created,
+        :waiting_for_resource,
+        :preparing,
+        :waiting_for_callback,
+        :pending,
+        :running,
+        :manual,
+        :scheduled
+      ] => :failed
     end
 
     event :success do
@@ -154,7 +172,14 @@ class CommitStatus < Ci::ApplicationRecord
       transition CANCELABLE_STATUSES.map(&:to_sym) + [:manual] => :canceled
     end
 
-    before_transition [:created, :waiting_for_resource, :preparing, :skipped, :manual, :scheduled] => :pending do |commit_status|
+    before_transition [
+      :created,
+      :waiting_for_resource,
+      :preparing,
+      :skipped,
+      :manual,
+      :scheduled
+    ] => :pending do |commit_status|
       commit_status.queued_at = Time.current
     end
 
diff --git a/app/models/concerns/analytics/cycle_analytics/stage_event_model.rb b/app/models/concerns/analytics/cycle_analytics/stage_event_model.rb
index c06e935b1bc..6b7c11cfdcf 100644
--- a/app/models/concerns/analytics/cycle_analytics/stage_event_model.rb
+++ b/app/models/concerns/analytics/cycle_analytics/stage_event_model.rb
@@ -18,12 +18,19 @@ module Analytics
         scope :start_event_timestamp_before, ->(date) { where(arel_table[:start_event_timestamp].lteq(date)) }
         scope :authored, ->(user) { where(author_id: user) }
         scope :with_milestone_id, ->(milestone_id) { where(milestone_id: milestone_id) }
-        scope :without_milestone_id, ->(milestone_id) { where('milestone_id <> ? or milestone_id IS NULL', milestone_id) }
+        scope :without_milestone_id,
+          ->(milestone_id) { where('milestone_id <> ? or milestone_id IS NULL', milestone_id) }
         scope :end_event_is_not_happened_yet, -> { where(end_event_timestamp: nil) }
         scope :for_consistency_check_worker, ->(direction) do
           keyset_order(
-            :end_event_timestamp => { order_expression: arel_order(arel_table[:end_event_timestamp], direction), nullable: direction == :asc ? :nulls_last : :nulls_first },
-            issuable_id_column => { order_expression: arel_order(arel_table[issuable_id_column], direction), nullable: :not_nullable }
+            :end_event_timestamp => {
+              order_expression: arel_order(arel_table[:end_event_timestamp], direction),
+              nullable: direction == :asc ? :nulls_last : :nulls_first
+            },
+            issuable_id_column => {
+              order_expression: arel_order(arel_table[issuable_id_column], direction),
+              nullable: :not_nullable
+            }
           )
         end
         scope :order_by_end_event, ->(direction) do
@@ -31,7 +38,10 @@ module Analytics
           # start_event_timestamp must be included in the ORDER BY clause for the duration
           # calculation to work: SELECT end_event_timestamp - start_event_timestamp
           keyset_order(
-            :end_event_timestamp => { order_expression: arel_order(arel_table[:end_event_timestamp], direction), nullable: direction == :asc ? :nulls_last : :nulls_first },
+            :end_event_timestamp => {
+              order_expression: arel_order(arel_table[:end_event_timestamp], direction),
+              nullable: direction == :asc ? :nulls_last : :nulls_first
+            },
             issuable_id_column => { order_expression: arel_order(arel_table[issuable_id_column], direction) },
             :start_event_timestamp => { order_expression: arel_order(arel_table[:start_event_timestamp], direction) }
           )
@@ -41,7 +51,10 @@ module Analytics
           # start_event_timestamp must be included in the ORDER BY clause for the duration
           # calculation to work: SELECT end_event_timestamp - start_event_timestamp
           keyset_order(
-            :end_event_timestamp => { order_expression: arel_order(arel_table[:end_event_timestamp], direction), nullable: direction == :asc ? :nulls_last : :nulls_first },
+            :end_event_timestamp => {
+              order_expression: arel_order(arel_table[:end_event_timestamp], direction),
+              nullable: direction == :asc ? :nulls_last : :nulls_first
+            },
             issuable_id_column => { order_expression: arel_order(arel_table[issuable_id_column], direction) },
             :start_event_timestamp => { order_expression: arel_order(arel_table[:start_event_timestamp], direction) },
             :duration_in_milliseconds => {
diff --git a/app/models/concerns/avatarable.rb b/app/models/concerns/avatarable.rb
index 0aa4a72e4b9..9ff8bbf5399 100644
--- a/app/models/concerns/avatarable.rb
+++ b/app/models/concerns/avatarable.rb
@@ -52,7 +52,9 @@ module Avatarable
 
   def avatar_type
     unless self.avatar.image?
-      errors.add :avatar, "file format is not supported. Please try one of the following supported formats: #{AvatarUploader::SAFE_IMAGE_EXT.join(', ')}"
+      errors.add :avatar,
+        "file format is not supported. " \
+          "Please try one of the following supported formats: #{AvatarUploader::SAFE_IMAGE_EXT.join(', ')}"
     end
   end
 
diff --git a/app/models/concerns/bulk_insert_safe.rb b/app/models/concerns/bulk_insert_safe.rb
index 439ce8e6ec1..5963668f901 100644
--- a/app/models/concerns/bulk_insert_safe.rb
+++ b/app/models/concerns/bulk_insert_safe.rb
@@ -93,14 +93,24 @@ module BulkInsertSafe
     #
     # @return true if operation succeeded, throws otherwise.
     #
-    def bulk_insert!(items, validate: true, skip_duplicates: false, returns: nil, unique_by: nil, batch_size: DEFAULT_BATCH_SIZE, &handle_attributes)
-      _bulk_insert_all!(items,
+    def bulk_insert!(
+      items,
+      validate: true,
+      skip_duplicates: false,
+      returns: nil,
+      unique_by: nil,
+      batch_size: DEFAULT_BATCH_SIZE,
+      &handle_attributes
+    )
+      _bulk_insert_all!(
+        items,
         validate: validate,
         on_duplicate: skip_duplicates ? :skip : :raise,
         returns: returns,
         unique_by: unique_by,
         batch_size: batch_size,
-        &handle_attributes)
+        &handle_attributes
+      )
     end
 
     # Upserts the given ActiveRecord [items] to the table mapped to this class.
@@ -128,14 +138,23 @@ module BulkInsertSafe
     #
     # @return true if operation succeeded, throws otherwise.
     #
-    def bulk_upsert!(items, unique_by:, returns: nil, validate: true, batch_size: DEFAULT_BATCH_SIZE, &handle_attributes)
-      _bulk_insert_all!(items,
+    def bulk_upsert!(
+      items,
+      unique_by:,
+      returns: nil,
+      validate: true,
+      batch_size: DEFAULT_BATCH_SIZE,
+      &handle_attributes
+    )
+      _bulk_insert_all!(
+        items,
         validate: validate,
         on_duplicate: :update,
         returns: returns,
         unique_by: unique_by,
         batch_size: batch_size,
-        &handle_attributes)
+        &handle_attributes
+      )
     end
 
     private
@@ -161,11 +180,16 @@ module BulkInsertSafe
 
       transaction do
         items.each_slice(batch_size).flat_map do |item_batch|
-          attributes = _bulk_insert_item_attributes(
-            item_batch, validate, &handle_attributes)
+          attributes = _bulk_insert_item_attributes(item_batch, validate, &handle_attributes)
 
           ActiveRecord::InsertAll
-              .new(insert_all_proxy_class, attributes, on_duplicate: on_duplicate, returning: returning, unique_by: unique_by)
+              .new(
+                insert_all_proxy_class,
+                attributes,
+                on_duplicate: on_duplicate,
+                returning: returning,
+                unique_by: unique_by
+              )
               .execute
               .cast_values(insert_all_proxy_class.attribute_types).to_a
         end
diff --git a/app/models/concerns/cache_markdown_field.rb b/app/models/concerns/cache_markdown_field.rb
index 83751974ca5..e66562155b8 100644
--- a/app/models/concerns/cache_markdown_field.rb
+++ b/app/models/concerns/cache_markdown_field.rb
@@ -117,8 +117,10 @@ module CacheMarkdownField
         refresh_markdown_cache
       else
         # Invalidated due to stale HTML cache
-        # This could happen when the Markdown cache version is bumped or when a model is imported and the HTML is empty.
-        # We persist the updated HTML here so that subsequent calls to this method do not have to regenerate the HTML again.
+        # This could happen when the Markdown cache version is bumped
+        # or when a model is imported and the HTML is empty.
+        # We persist the updated HTML here so that subsequent calls
+        # to this method do not have to regenerate the HTML again.
         refresh_markdown_cache!
       end
     end
@@ -133,7 +135,9 @@ module CacheMarkdownField
 
     # rubocop:disable Gitlab/ModuleWithInstanceVariables -- acceptable use case
     # See https://docs.gitlab.com/ee/development/module_with_instance_variables.html#acceptable-use
-    @latest_cached_markdown_version ||= Gitlab::MarkdownCache.latest_cached_markdown_version(local_version: local_version)
+    @latest_cached_markdown_version ||= Gitlab::MarkdownCache.latest_cached_markdown_version(
+      local_version: local_version
+    )
     # rubocop:enable Gitlab/ModuleWithInstanceVariables
   end
 
diff --git a/app/models/concerns/cacheable_attributes.rb b/app/models/concerns/cacheable_attributes.rb
index f3b47047c55..5d22cc35e99 100644
--- a/app/models/concerns/cacheable_attributes.rb
+++ b/app/models/concerns/cacheable_attributes.rb
@@ -83,6 +83,10 @@ module CacheableAttributes
   end
 
   def cache!
-    self.class.cache_backend.write(self.class.cache_key, self, expires_in: Gitlab.config.gitlab['application_settings_cache_seconds'] || 60)
+    self.class.cache_backend.write(
+      self.class.cache_key,
+      self,
+      expires_in: Gitlab.config.gitlab['application_settings_cache_seconds'] || 60
+    )
   end
 end
diff --git a/app/models/concerns/cascading_namespace_setting_attribute.rb b/app/models/concerns/cascading_namespace_setting_attribute.rb
index 0085b155612..543e3e91b36 100644
--- a/app/models/concerns/cascading_namespace_setting_attribute.rb
+++ b/app/models/concerns/cascading_namespace_setting_attribute.rb
@@ -39,7 +39,8 @@ module CascadingNamespaceSettingAttribute
     # - `toggle_security_policy_custom_ci_locked_by_ancestor?`
     # - `toggle_security_policy_custom_ci_locked_by_application_setting?`
     # - `toggle_security_policy_custom_ci?` (only defined for boolean attributes)
-    # - `toggle_security_policy_custom_ci_locked_ancestor` - Returns locked namespace settings object (only namespace_id)
+    # - `toggle_security_policy_custom_ci_locked_ancestor` - Returns locked namespace settings object
+    #                                                        (only namespace_id)
     #
     # Defined validators ensure attribute value cannot be updated if locked by
     # an ancestor or application settings.
@@ -64,7 +65,9 @@ module CascadingNamespaceSettingAttribute
         validate :"lock_#{attribute}_changeable?"
 
         before_save :"before_save_#{attribute}", if: -> { will_save_change_to_attribute?(attribute) }
-        after_update :"clear_descendant_#{attribute}_locks", if: -> { saved_change_to_attribute?("lock_#{attribute}", to: true) }
+        after_update :"clear_descendant_#{attribute}_locks", if: -> {
+          saved_change_to_attribute?("lock_#{attribute}", to: true)
+        }
       end
     end
 
@@ -162,7 +165,10 @@ module CascadingNamespaceSettingAttribute
         return unless cascading_attribute_changed?("lock_#{attribute}")
 
         if cascading_attribute_locked?(attribute, include_self: false)
-          return errors.add(:"lock_#{attribute}", s_('CascadingSettings|cannot be changed because it is locked by an ancestor'))
+          return errors.add(
+            :"lock_#{attribute}",
+            s_('CascadingSettings|cannot be changed because it is locked by an ancestor')
+          )
         end
 
         # Don't allow locking a `nil` attribute.
@@ -231,8 +237,9 @@ module CascadingNamespaceSettingAttribute
 
     self.class
   .select(attribute)
-  .joins("join unnest(ARRAY[#{namespace_ancestor_ids.join(',')}]) with ordinality t(namespace_id, ord) USING (namespace_id)")
-  .where("#{attribute} IS NOT NULL")
+  .joins(
+    "join unnest(ARRAY[#{namespace_ancestor_ids.join(',')}]) with ordinality t(namespace_id, ord) USING (namespace_id)"
+  ).where("#{attribute} IS NOT NULL")
   .order('t.ord')
   .limit(1).first&.read_attribute(attribute)
   end
diff --git a/app/models/concerns/ci/has_status.rb b/app/models/concerns/ci/has_status.rb
index 5c0ce6465ba..fac19802166 100644
--- a/app/models/concerns/ci/has_status.rb
+++ b/app/models/concerns/ci/has_status.rb
@@ -6,13 +6,41 @@ module Ci
 
     DEFAULT_STATUS = 'created'
     BLOCKED_STATUS = %w[manual scheduled].freeze
-    AVAILABLE_STATUSES = %w[created waiting_for_resource preparing waiting_for_callback pending running success failed canceling canceled skipped manual scheduled].freeze
+    AVAILABLE_STATUSES = %w[
+      created
+      waiting_for_resource
+      preparing
+      waiting_for_callback
+      pending
+      running
+      success
+      failed
+      canceling
+      canceled
+      skipped
+      manual
+      scheduled
+    ].freeze
     STARTED_STATUSES = %w[running success failed].freeze
     ACTIVE_STATUSES = %w[waiting_for_resource preparing waiting_for_callback pending running].freeze
     COMPLETED_STATUSES = %w[success failed canceled skipped].freeze
     COMPLETED_WITH_MANUAL_STATUSES = COMPLETED_STATUSES + %w[manual]
     STOPPED_STATUSES = COMPLETED_STATUSES + BLOCKED_STATUS
-    ORDERED_STATUSES = %w[failed preparing pending running waiting_for_callback waiting_for_resource manual scheduled canceling canceled success skipped created].freeze
+    ORDERED_STATUSES = %w[
+      failed
+      preparing
+      pending
+      running
+      waiting_for_callback
+      waiting_for_resource
+      manual
+      scheduled
+      canceling
+      canceled
+      success
+      skipped
+      created
+    ].freeze
     PASSED_WITH_WARNINGS_STATUSES = %w[failed canceled].to_set.freeze
     IGNORED_STATUSES = %w[manual].to_set.freeze
     EXECUTING_STATUSES = %w[running canceling].freeze
diff --git a/app/models/concerns/each_batch.rb b/app/models/concerns/each_batch.rb
index c7c736f39c1..e7938cac139 100644
--- a/app/models/concerns/each_batch.rb
+++ b/app/models/concerns/each_batch.rb
@@ -35,7 +35,8 @@ module EachBatch
     #
     # This will produce SQL queries along the lines of:
     #
-    #     User Load (0.7ms)  SELECT  "users"."id" FROM "users" WHERE ("users"."id" >= 41654)  ORDER BY "users"."id" ASC LIMIT 1 OFFSET 1000
+    #     User Load (0.7ms)  SELECT  "users"."id" FROM "users" WHERE ("users"."id" >= 41654)
+    #                        ORDER BY "users"."id" ASC LIMIT 1 OFFSET 1000
     #       (0.7ms)  SELECT COUNT(*) FROM "users" WHERE ("users"."id" >= 41654) AND ("users"."id" < 42687)
     #
     # of - The number of rows to retrieve per batch.
diff --git a/app/models/concerns/enums/ci/pipeline.rb b/app/models/concerns/enums/ci/pipeline.rb
index 8b97216a143..03dbd3f79e2 100644
--- a/app/models/concerns/enums/ci/pipeline.rb
+++ b/app/models/concerns/enums/ci/pipeline.rb
@@ -66,7 +66,15 @@ module Enums
       # - when a container_registry_push pipeline runs it is for security testing purpose and should
       #   not affect the ref CI status.
       def self.dangling_sources
-        sources.slice(:webide, :parent_pipeline, :ondemand_dast_scan, :ondemand_dast_validation, :security_orchestration_policy, :container_registry_push, :duo_workflow)
+        sources.slice(
+          :webide,
+          :parent_pipeline,
+          :ondemand_dast_scan,
+          :ondemand_dast_validation,
+          :security_orchestration_policy,
+          :container_registry_push,
+          :duo_workflow
+        )
       end
 
       # CI sources are those pipeline events that affect the CI status of the ref
diff --git a/app/models/concerns/enums/vulnerability.rb b/app/models/concerns/enums/vulnerability.rb
index b178e85ef3c..1966e6ae88c 100644
--- a/app/models/concerns/enums/vulnerability.rb
+++ b/app/models/concerns/enums/vulnerability.rb
@@ -37,8 +37,9 @@ module Enums
       security_audit: 4
     }.with_indifferent_access.freeze
 
-    # keep the order of the values in the state enum, it is used in state_order method to properly order vulnerabilities based on state
-    # remember to recreate index_vulnerabilities_on_state_case_id index when you update or extend this enum
+    # keep the order of the values in the state enum, it is used in state_order method
+    # to properly order vulnerabilities based on state remember to recreate
+    # index_vulnerabilities_on_state_case_id index when you update or extend this enum
     VULNERABILITY_STATES = {
       detected: 1,
       confirmed: 4,
diff --git a/app/models/concerns/fast_destroy_all.rb b/app/models/concerns/fast_destroy_all.rb
index f862031bce0..8247d453001 100644
--- a/app/models/concerns/fast_destroy_all.rb
+++ b/app/models/concerns/fast_destroy_all.rb
@@ -15,7 +15,8 @@
 #
 # Situation
 # - `Project` has many `Ci::BuildTraceChunk` through `Ci::Build`
-# - `Ci::BuildTraceChunk` stores associated data in Redis, so it relies on `dependent: :destroy` and `before_destroy` for the deletion
+# - `Ci::BuildTraceChunk` stores associated data in Redis,
+#    so it relies on `dependent: :destroy` and `before_destroy` for the deletion
 #
 # How to use
 # - Define `use_fast_destroy :build_trace_chunks` in `Project` model.
diff --git a/app/models/concerns/group_descendant.rb b/app/models/concerns/group_descendant.rb
index de316446e14..20976344136 100644
--- a/app/models/concerns/group_descendant.rb
+++ b/app/models/concerns/group_descendant.rb
@@ -36,7 +36,9 @@ module GroupDescendant
 
   def expand_hierarchy_for_child(child, hierarchy, hierarchy_top, preloaded)
     parent = hierarchy_top if hierarchy_top && child.parent_id == hierarchy_top.id
-    parent ||= preloaded.detect { |possible_parent| possible_parent.is_a?(Group) && possible_parent.id == child.parent_id }
+    parent ||= preloaded.detect do |possible_parent|
+      possible_parent.is_a?(Group) && possible_parent.id == child.parent_id
+    end
 
     if parent.nil? && !child.parent_id.nil?
       parent = child.parent
diff --git a/app/models/concerns/users/visitable.rb b/app/models/concerns/users/visitable.rb
index 854561862bc..ec986a04896 100644
--- a/app/models/concerns/users/visitable.rb
+++ b/app/models/concerns/users/visitable.rb
@@ -49,7 +49,7 @@ module Users
         SQL
 
         ::Gitlab::Database::LoadBalancing::SessionMap
-          .current(connection.load_balancer).fallback_to_replicas_for_ambiguous_queries do
+          .current(load_balancer).fallback_to_replicas_for_ambiguous_queries do
           connection.execute(sql).to_a
         end
       end
diff --git a/app/models/work_items/widgets/linked_items.rb b/app/models/work_items/widgets/linked_items.rb
index b405555c038..9b2323277ca 100644
--- a/app/models/work_items/widgets/linked_items.rb
+++ b/app/models/work_items/widgets/linked_items.rb
@@ -4,6 +4,10 @@ module WorkItems
   module Widgets
     class LinkedItems < Base
       delegate :linked_work_items, to: :work_item
+
+      def self.quick_action_commands
+        [:blocks, :blocked_by]
+      end
     end
   end
 end
diff --git a/app/services/issuable_links/create_service.rb b/app/services/issuable_links/create_service.rb
index 7943fe55553..0e812853746 100644
--- a/app/services/issuable_links/create_service.rb
+++ b/app/services/issuable_links/create_service.rb
@@ -116,7 +116,7 @@ module IssuableLinks
     end
 
     def references(extractor)
-      extractor.issues
+      extractor.issues + extractor.work_items
     end
 
     def extractor_context
diff --git a/app/services/projects/import_export/relation_import_service.rb b/app/services/projects/import_export/relation_import_service.rb
index fc663332d2c..fe38daeb031 100644
--- a/app/services/projects/import_export/relation_import_service.rb
+++ b/app/services/projects/import_export/relation_import_service.rb
@@ -43,6 +43,16 @@ module Projects
 
         tracker = create_status_tracker
 
+        unless tracker.persisted?
+          return error(
+            format(
+              _('Relation import could not be created: %{errors}'),
+              errors: tracker.errors.full_messages.to_sentence
+            ),
+            :bad_request
+          )
+        end
+
         attach_import_file
 
         Projects::ImportExport::RelationImportWorker.perform_async(
diff --git a/app/services/todo_service.rb b/app/services/todo_service.rb
index b513b8c1632..7b9092a1a5f 100644
--- a/app/services/todo_service.rb
+++ b/app/services/todo_service.rb
@@ -208,7 +208,7 @@ class TodoService
 
     resolve_todos(pending_todos([current_user], attributes), current_user)
 
-    GraphqlTriggers.issuable_todo_updated(target, current_user)
+    GraphqlTriggers.issuable_todo_updated(target)
   end
 
   # Resolves all todos related to target for all users
@@ -237,7 +237,7 @@ class TodoService
 
     todo.update(state: resolution, resolved_by_action: resolved_by_action)
 
-    GraphqlTriggers.issuable_todo_updated(todo.target, current_user)
+    GraphqlTriggers.issuable_todo_updated(todo.target)
 
     current_user.update_todos_count_cache
   end
diff --git a/app/services/work_items/data_sync/widgets/milestone.rb b/app/services/work_items/data_sync/widgets/milestone.rb
index 7c9265dfa6b..254f310e994 100644
--- a/app/services/work_items/data_sync/widgets/milestone.rb
+++ b/app/services/work_items/data_sync/widgets/milestone.rb
@@ -5,13 +5,51 @@ module WorkItems
     module Widgets
       class Milestone < Base
         def before_create
-          # set milestone, e.g.
-          # target_work_item.milestone_id = work_item.milestone_id
-          # todo system notes for removed/not copied milestone?
+          return unless target_work_item.get_widget(:milestone)
+          return if work_item.milestone_id.blank?
+
+          target_work_item.milestone = matching_milestone
         end
 
         def post_move_cleanup
-          # do it
+          work_item.update_column(:milestone_id, nil)
+        end
+
+        private
+
+        def matching_milestone
+          params = { project_ids: target_work_item.project&.id, group_ids: ancestors }
+          milestone = by_id(params)
+
+          return milestone if milestone.present?
+
+          by_title(params)
+        end
+
+        def by_id(params)
+          return if work_item.milestone_id.blank?
+
+          find_milestone(params.merge(ids: work_item.milestone_id))
+        end
+
+        def by_title(params)
+          return if work_item.milestone&.title.blank?
+
+          find_milestone(params.merge(title: work_item.milestone&.title))
+        end
+
+        def find_milestone(params)
+          milestones = MilestonesFinder.new(params).execute
+          milestones.first
+        end
+
+        def ancestors
+          case target_work_item.namespace
+          when Group
+            target_work_item.namespace.self_and_ancestors
+          else
+            target_work_item.project.ancestors
+          end
         end
       end
     end
diff --git a/app/views/projects/branches/_commit.html.haml b/app/views/projects/branches/_commit.html.haml
index 858cacd9a9b..d7ff26dac9c 100644
--- a/app/views/projects/branches/_commit.html.haml
+++ b/app/views/projects/branches/_commit.html.haml
@@ -1,9 +1,9 @@
 - class_name = local_assigns.fetch(:class_name, '')
 
-.branch-commit.gl-text-sm.gl-text-gray-500.gl-truncate{ class: class_name }
+.branch-commit.gl-text-sm.gl-text-subtle.gl-truncate{ class: class_name }
   = link_to commit.short_id, project_commit_path(project, commit.id), class: "commit-sha"
   &middot;
   %span
-    = link_to_markdown commit.title, project_commit_path(project, commit.id), class: "commit-row-message !gl-text-gray-500"
+    = link_to_markdown commit.title, project_commit_path(project, commit.id), class: "commit-row-message !gl-text-subtle"
   &middot;
-  %span.gl-text-secondary= time_ago_with_tooltip(commit.committed_date)
+  %span.gl-text-subtle= time_ago_with_tooltip(commit.committed_date)
diff --git a/app/views/shared/projects/_project.html.haml b/app/views/shared/projects/_project.html.haml
index f21e41b3314..fac8c229d69 100644
--- a/app/views/shared/projects/_project.html.haml
+++ b/app/views/shared/projects/_project.html.haml
@@ -89,7 +89,7 @@
             = updated_tooltip
         = render_if_exists 'shared/projects/actions', project: project
 
-  .project-cell.project-controls{ class: "#{css_class} !gl-hidden sm:!gl-table-cell", data: { testid: 'project_controls'} }
+  .project-cell.project-controls.gl-text-subtle{ class: "#{css_class} !gl-hidden sm:!gl-table-cell", data: { testid: 'project_controls'} }
     .controls.gl-flex.gl-items-center.gl-mb-2.gl-gap-4{ class: "#{css_controls_class} !gl-pr-0 !gl-justify-end" }
       - if show_pipeline_status_icon && last_pipeline.present?
         - pipeline_path = pipelines_project_commit_path(project.pipeline_status.project, project.pipeline_status.sha, ref: project.pipeline_status.ref)
diff --git a/app/workers/all_queues.yml b/app/workers/all_queues.yml
index 690298ac5fe..322ca5c4714 100644
--- a/app/workers/all_queues.yml
+++ b/app/workers/all_queues.yml
@@ -255,6 +255,15 @@
   :weight: 1
   :idempotent: true
   :tags: []
+- :name: cronjob:ci_catalog_resources_cleanup_last_usages
+  :worker_name: Ci::Catalog::Resources::CleanupLastUsagesWorker
+  :feature_category: :pipeline_composition
+  :has_external_dependencies: false
+  :urgency: :low
+  :resource_boundary: :unknown
+  :weight: 1
+  :idempotent: true
+  :tags: []
 - :name: cronjob:ci_catalog_resources_process_sync_events
   :worker_name: Ci::Catalog::Resources::ProcessSyncEventsWorker
   :feature_category: :pipeline_composition
diff --git a/app/workers/auto_merge_process_worker.rb b/app/workers/auto_merge_process_worker.rb
index f2e1e6b5a43..46766331fe4 100644
--- a/app/workers/auto_merge_process_worker.rb
+++ b/app/workers/auto_merge_process_worker.rb
@@ -7,6 +7,10 @@ class AutoMergeProcessWorker # rubocop:disable Scalability/IdempotentWorker
 
   sidekiq_options retry: 3
 
+  # Avoid _simultaneous execution_ of this job for the same MR,
+  # but reschedule the second job just in case the first fails.
+  deduplicate :until_executed, if_deduplicated: :reschedule_once
+
   queue_namespace :auto_merge
   feature_category :continuous_delivery
   worker_resource_boundary :cpu
diff --git a/app/workers/ci/catalog/resources/cleanup_last_usages_worker.rb b/app/workers/ci/catalog/resources/cleanup_last_usages_worker.rb
new file mode 100644
index 00000000000..47a8d6bf4c1
--- /dev/null
+++ b/app/workers/ci/catalog/resources/cleanup_last_usages_worker.rb
@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+module Ci
+  module Catalog
+    module Resources
+      class CleanupLastUsagesWorker
+        include ApplicationWorker
+        include CronjobQueue # rubocop: disable Scalability/CronWorkerContext -- Periodic processing is required
+
+        feature_category :pipeline_composition
+
+        data_consistency :sticky
+        urgency :low
+        idempotent!
+
+        def perform
+          Ci::Catalog::Resources::Components::LastUsage.older_than_30_days.each_batch(of: 1000) do |batch|
+            batch.delete_all
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/config/feature_flags/beta/enable_add_on_users_pagesize_selection.yml b/config/feature_flags/beta/enable_add_on_users_pagesize_selection.yml
index 908b8487e10..e5c9c246248 100644
--- a/config/feature_flags/beta/enable_add_on_users_pagesize_selection.yml
+++ b/config/feature_flags/beta/enable_add_on_users_pagesize_selection.yml
@@ -6,4 +6,4 @@ rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/500069
 milestone: '17.6'
 type: beta
 group: group::provision
-default_enabled: false
+default_enabled: true
diff --git a/config/feature_flags/beta/realtime_issuable_todo.yml b/config/feature_flags/beta/realtime_issuable_todo.yml
deleted file mode 100644
index 30992147978..00000000000
--- a/config/feature_flags/beta/realtime_issuable_todo.yml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-name: realtime_issuable_todo
-feature_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/449018
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/147456
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/495542
-milestone: '17.5'
-group: group::code review
-type: beta
-default_enabled: false
diff --git a/config/feature_flags/gitlab_com_derisk/use_load_balancing_session_map.yml b/config/feature_flags/gitlab_com_derisk/use_load_balancing_session_map.yml
deleted file mode 100644
index 032dac5e123..00000000000
--- a/config/feature_flags/gitlab_com_derisk/use_load_balancing_session_map.yml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-name: use_load_balancing_session_map
-feature_issue_url: https://gitlab.com/gitlab-com/gl-infra/scalability/-/issues/3834
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/168642
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/496505
-milestone: '17.6'
-group: group::scalability
-type: gitlab_com_derisk
-default_enabled: false
diff --git a/config/feature_flags/wip/find_and_replace.yml b/config/feature_flags/wip/find_and_replace.yml
new file mode 100644
index 00000000000..3d85db33f48
--- /dev/null
+++ b/config/feature_flags/wip/find_and_replace.yml
@@ -0,0 +1,9 @@
+---
+name: find_and_replace
+feature_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/481892
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/164251
+rollout_issue_url:
+milestone: '17.6'
+group: group::knowledge
+type: wip
+default_enabled: false
diff --git a/config/initializers/1_settings.rb b/config/initializers/1_settings.rb
index ac752da9e52..1975f9dfdcd 100644
--- a/config/initializers/1_settings.rb
+++ b/config/initializers/1_settings.rb
@@ -720,6 +720,9 @@ Settings.cron_jobs['performance_bar_stats']['job_class'] = 'GitlabPerformanceBar
 Settings.cron_jobs['ci_catalog_resources_aggregate_last30_day_usage_worker'] ||= {}
 Settings.cron_jobs['ci_catalog_resources_aggregate_last30_day_usage_worker']['cron'] ||= '*/4 * * * *'
 Settings.cron_jobs['ci_catalog_resources_aggregate_last30_day_usage_worker']['job_class'] = 'Ci::Catalog::Resources::AggregateLast30DayUsageWorker'
+Settings.cron_jobs['ci_catalog_resources_cleanup_last_usages_worker'] ||= {}
+Settings.cron_jobs['ci_catalog_resources_cleanup_last_usages_worker']['cron'] ||= '0 0 * * *'
+Settings.cron_jobs['ci_catalog_resources_cleanup_last_usages_worker']['job_class'] = 'Ci::Catalog::Resources::CleanupLastUsagesWorker'
 Settings.cron_jobs['ci_click_house_finished_pipelines_sync_worker'] ||= {}
 Settings.cron_jobs['ci_click_house_finished_pipelines_sync_worker']['cron'] ||= '*/4 * * * *'
 Settings.cron_jobs['ci_click_house_finished_pipelines_sync_worker']['args'] ||= [1]
diff --git a/db/docs/batched_background_migrations/backfill_ci_runners_partitioned_table.yml b/db/docs/batched_background_migrations/backfill_ci_runners_partitioned_table.yml
new file mode 100644
index 00000000000..654dee11df4
--- /dev/null
+++ b/db/docs/batched_background_migrations/backfill_ci_runners_partitioned_table.yml
@@ -0,0 +1,8 @@
+---
+migration_job_name: BackfillCiRunnersPartitionedTable
+description: This migration copies runners from ci_runners to the new partitioned ci_runners_e59bb2812d table
+feature_category: runner
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/166520
+milestone: '17.6'
+queued_migration_version: 20241023144448
+finalized_by: # version of the migration that finalized this BBM
diff --git a/db/migrate/20241113051149_add_last_used_date_index_in_last_usage.rb b/db/migrate/20241113051149_add_last_used_date_index_in_last_usage.rb
new file mode 100644
index 00000000000..036621191f7
--- /dev/null
+++ b/db/migrate/20241113051149_add_last_used_date_index_in_last_usage.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class AddLastUsedDateIndexInLastUsage < Gitlab::Database::Migration[2.2]
+  disable_ddl_transaction!
+  milestone '17.6'
+
+  INDEX_NAME = 'index_last_usages_on_last_used_date'
+
+  def up
+    add_concurrent_index :catalog_resource_component_last_usages, :last_used_date, name: INDEX_NAME
+  end
+
+  def down
+    remove_concurrent_index :catalog_resource_component_last_usages, :last_used_date, name: INDEX_NAME
+  end
+end
diff --git a/db/post_migrate/20241113140110_remove_faulty_async_index_definitions2.rb b/db/post_migrate/20241113140110_remove_faulty_async_index_definitions2.rb
new file mode 100644
index 00000000000..1bf624c51ea
--- /dev/null
+++ b/db/post_migrate/20241113140110_remove_faulty_async_index_definitions2.rb
@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+class RemoveFaultyAsyncIndexDefinitions2 < Gitlab::Database::Migration[2.2]
+  milestone '17.6'
+
+  def up
+    unprepare_async_index_by_name 'gitlab_partitions_dynamic.security_findings_126', 'index_ee8a554af9'
+  end
+
+  def down
+    # no-op
+  end
+end
diff --git a/db/schema_migrations/20241113051149 b/db/schema_migrations/20241113051149
new file mode 100644
index 00000000000..e12dffdc6e8
--- /dev/null
+++ b/db/schema_migrations/20241113051149
@@ -0,0 +1 @@
+11c4771539e727cdf4b2bf6d3a6d6c51a3ef80d45f31e6a26509597a9568c4b2
\ No newline at end of file
diff --git a/db/schema_migrations/20241113140110 b/db/schema_migrations/20241113140110
new file mode 100644
index 00000000000..f4323d33696
--- /dev/null
+++ b/db/schema_migrations/20241113140110
@@ -0,0 +1 @@
+abf6f16571a422d90f3486fb417a91d86d8073380be5c6d5f4b3e9eca9e6f06d
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index a1f10f3ba95..d8aba925248 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -30430,6 +30430,8 @@ CREATE INDEX index_labels_on_title_varchar ON labels USING btree (title varchar_
 
 CREATE INDEX index_labels_on_type_and_project_id ON labels USING btree (type, project_id);
 
+CREATE INDEX index_last_usages_on_last_used_date ON catalog_resource_component_last_usages USING btree (last_used_date);
+
 CREATE INDEX index_ldap_group_links_on_member_role_id ON ldap_group_links USING btree (member_role_id);
 
 CREATE UNIQUE INDEX index_lfs_file_locks_on_project_id_and_path ON lfs_file_locks USING btree (project_id, path);
diff --git a/doc/development/database/partitioning/list.md b/doc/development/database/partitioning/list.md
index 6e1abbfab5f..7ca43a9e502 100644
--- a/doc/development/database/partitioning/list.md
+++ b/doc/development/database/partitioning/list.md
@@ -132,12 +132,6 @@ result in a `Key is still referenced from table ...` error and updating the
 partition column on the source table would raise a
 `Key is not present in table ...` error.
 
-This migration can be automatically generated using:
-
-```shell
-./scripts/partitioning/generate-fk --source source_table_name --target target_table_name
-```
-
 ### Step 5 - Swap primary key
 
 Swap the primary key including the partitioning key column. This can be done only after
diff --git a/doc/user/application_security/policies/scan_execution_policies.md b/doc/user/application_security/policies/scan_execution_policies.md
index 80a2e654345..e902af79694 100644
--- a/doc/user/application_security/policies/scan_execution_policies.md
+++ b/doc/user/application_security/policies/scan_execution_policies.md
@@ -133,8 +133,13 @@ This rule enforces the defined actions whenever the pipeline runs for a selected
 
 ## `schedule` rule type
 
-> - The `branch_type` field was [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/404774) in GitLab 16.1 [with a flag](../../../administration/feature_flags.md) named `security_policies_branch_type`. Generally available in GitLab 16.2. Feature flag removed.
-> - The `branch_exceptions` field was [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/418741) in GitLab 16.3 [with a flag](../../../administration/feature_flags.md) named `security_policies_branch_exceptions`. Generally available in GitLab 16.5. Feature flag removed.
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/404774) the `branch_type` field in GitLab 16.1 [with a flag](../../../administration/feature_flags.md) named `security_policies_branch_type`. Generally available in GitLab 16.2. Feature flag removed.
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/418741) the `branch_exceptions` field in GitLab 16.3 [with a flag](../../../administration/feature_flags.md) named `security_policies_branch_exceptions`. Generally available in GitLab 16.5. Feature flag removed.
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/147691) a new `scan_execution_pipeline_worker` worker to scheduled scans to create pipelines in GitLab 16.11 [with a flag](../../../administration/feature_flags.md).
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/152855) a new application setting `security_policy_scheduled_scans_max_concurrency` in GitLab 17.1. The concurrency limit applies when both the `scan_execution_pipeline_worker` and `scan_execution_pipeline_concurrency_control` are enabled.
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/158636) a concurrency limit for scan execution scheduled jobs in GitLab 17.3 [with a flag](../../../administration/feature_flags.md) named  `scan_execution_pipeline_concurrency_control`.
+> - [Enabled](https://gitlab.com/gitlab-org/gitlab/-/issues/451890) the `scan_execution_pipeline_worker` feature flag on GitLab.com in GitLab 17.5.
+> - [Enabled](https://gitlab.com/gitlab-org/gitlab/-/issues/463802) the `scan_execution_pipeline_concurrency_control` feature flag on GitLab.com in GitLab 17.6.
 
 WARNING:
 In GitLab 16.1 and earlier, you should **not** use [direct transfer](../../../administration/settings/import_and_export_settings.md#enable-migration-of-groups-and-projects-by-direct-transfer) with scheduled scan execution policies. If using direct transfer, first upgrade to GitLab 16.2 and ensure security policy bots are enabled in the projects you are enforcing.
@@ -230,6 +235,36 @@ The keys for a schedule rule are:
 - `agents:<agent-name>` (required): The name of the agent to use for scanning.
 - `agents:<agent-name>:namespaces` (optional): The Kubernetes namespaces to scan. If omitted, all namespaces are scanned.
 
+### Concurrency control
+
+If both the `scan_execution_pipeline_worker` and `scan_execution_pipeline_concurrency_control` feature flags are enabled, concurrency control is applied.
+Concurrency control limits the number of pipeline jobs created by the scan execution policy that can be active for each top-level group on an instance. For GitLab.com, the limit is managed by GitLab administrators.
+The active pipeline job statuses are: 
+
+- `preparing`
+- `pending`
+- `running`
+- `waiting_for_callback`
+- `waiting_for_resource`
+- `canceling`
+- `created`
+
+If the number of active pipeline jobs exceeds the value of the `max_scheduled_scans_concurrency` application setting, pipeline creation is postponed until more capacity is available.
+Due to the concurrency execution of the background jobs responsible for creating the scheduled scans pipeline jobs, the concurrency limit can take some time be enforced.
+
+#### Set the maximum top-level group concurrency for security policy scheduled scans
+
+For GitLab.com, this limit is managed by GitLab administrators. The current limit is 100.
+
+For self-managed instances, the limit has a default value of 10,000 can be changed in the **Admin** area.
+
+To update the **Security policy scheduled scans maximum top-level group concurrency** setting:
+
+1. Go to **Admin** > **Settings** > **CI/CD**.
+1. Expand **Continuous Integration and Deployment**.
+1. Set the **Security policy scheduled scans maximum top-level group concurrency**.
+1. Select **Save changes**.
+
 ## `scan` action type
 
 > - Scan Execution Policies variable precedence was [changed](https://gitlab.com/gitlab-org/gitlab/-/issues/424028) in GitLab 16.7 [with a flag](../../../administration/feature_flags.md) named `security_policies_variables_precedence`. Enabled by default. [Feature flag removed in GitLab 16.8](https://gitlab.com/gitlab-org/gitlab/-/issues/435727).
diff --git a/doc/user/compliance/compliance_center/compliance_standards_adherence_dashboard.md b/doc/user/compliance/compliance_center/compliance_standards_adherence_dashboard.md
index 8405eb81429..2203032121f 100644
--- a/doc/user/compliance/compliance_center/compliance_standards_adherence_dashboard.md
+++ b/doc/user/compliance/compliance_center/compliance_standards_adherence_dashboard.md
@@ -18,8 +18,8 @@ DETAILS:
 > - Standards adherence grouping [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/413735) in GitLab 16.9.
 > - Standards adherence grouping by standards that a check belongs to and grouping by projects that a check belongs to [added](https://gitlab.com/gitlab-org/gitlab/-/issues/413735) in GitLab 16.10.
 > - **Last Scanned** column [renamed](https://gitlab.com/gitlab-org/gitlab/-/issues/439545) to **Date since last status change** in GitLab 16.10.
-> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/440721) DAST scanner check to GitLab Standard in GitLab 17.6 [with a flag](../../../administration/feature_flags.md) named `enable_adherence_check_for_scanners`. Disabled by default.
-> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/440722) SAST scanner check to GitLab Standard in GitLab 17.6 [with a flag](../../../administration/feature_flags.md) named `enable_adherence_check_for_scanners`. Disabled by default.
+> - DAST scanner check [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/440721) to GitLab Standard in GitLab 17.6.
+> - SAST scanner check [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/440722) to GitLab Standard in GitLab 17.6.
 
 The compliance standards adherence dashboard lists the adherence status of projects complying to the _GitLab standard_.
 
diff --git a/doc/user/project/repository/mirror/troubleshooting.md b/doc/user/project/repository/mirror/troubleshooting.md
index 5ac23675577..26d7cef4307 100644
--- a/doc/user/project/repository/mirror/troubleshooting.md
+++ b/doc/user/project/repository/mirror/troubleshooting.md
@@ -161,25 +161,9 @@ that includes the `ssh://` protocol, like `ssh://git@gitlab.com/gitlab-org/gitla
 ## Host key verification failed
 
 This error is returned when the target host public SSH key changes.
-Public SSH keys rarely, if ever, change. If host key verification fails,
-but you suspect the key is still valid, you can refresh the key's information.
-
-Prerequisites:
-
-- You must have at least the Maintainer role for a project.
-
-To resolve the issue:
-
-1. [Verify the host key](index.md#verify-a-host-key).
-1. On the left sidebar, select **Search or go to** and find your project.
-1. Select **Settings > Repository**.
-1. Expand **Mirroring repositories**.
-1. To refresh the keys, either:
-
-   - Select **Detect host keys** for GitLab to fetch the host keys from the server, and display the fingerprints.
-   - Select **Input host keys manually**, and enter the host key into the **SSH host key** field.
-
-- Select **Mirror repository**.
+Public SSH keys rarely change. If host key verification fails,
+but you suspect the key is still valid, you must delete the repository mirror
+and create it again. For more information, see [Create a repository mirror](index.md#create-a-repository-mirror).
 
 ## Transfer mirror users and tokens to a single service account
 
diff --git a/doc/user/workspace/set_up_workspaces_proxy.md b/doc/user/workspace/set_up_workspaces_proxy.md
index 52873c8befd..d1785496676 100644
--- a/doc/user/workspace/set_up_workspaces_proxy.md
+++ b/doc/user/workspace/set_up_workspaces_proxy.md
@@ -19,6 +19,7 @@ To set up `gitlab-workspaces-proxy`, you're going to:
 1. [Install the Helm chart for the proxy](#install-the-helm-chart-for-the-proxy).
 1. [Verify Kubernetes resources](#verify-kubernetes-resources).
 1. [Update your DNS records](#update-your-dns-records).
+1. [Update the GitLab agent configuration](#update-the-gitlab-agent-configuration).
 
 ## Prerequisites
 
@@ -203,28 +204,11 @@ Let's now verify Kubernetes resources.
 
 ## Verify Kubernetes resources
 
-1. Verify the following Kubernetes resources:
+1. Verify the Ingress class, hosts, address, and port for the `gitlab-workspaces` namespace:
 
-   - The configuration secret:
-
-     ```shell
-     kubectl -n gitlab-workspaces get secret gitlab-workspaces-proxy  -o=go-template='{{index .data "config.yaml"}}' | base64 -d
-     ```
-
-   - The Ingress class for the `gitlab-workspaces` namespace:
-
-     ```shell
-     kubectl -n gitlab-workspaces get ingress
-     ```
-
-     If you deploy the Helm chart for the proxy to any namespace other than `gitlab-workspaces`,
-     update the namespace in the [GitLab agent configuration](gitlab_agent_configuration.md):
-
-     ```yaml
-     remote_development:
-       gitlab_workspaces_proxy:
-         namespace: "<custom-gitlab-workspaces-proxy-namespace>"
-     ```
+   ```shell
+   kubectl -n gitlab-workspaces get ingress
+   ```
 
 1. Verify the pods are running:
 
@@ -256,5 +240,16 @@ To update your DNS records:
 
    The logs show a `could not find upstream workspace upstream not found` error.
 
+## Update the GitLab agent configuration
+
+If you deploy the Helm chart for the proxy to any namespace other than `gitlab-workspaces`,
+update the namespace in the [GitLab agent configuration](gitlab_agent_configuration.md):
+
+```yaml
+remote_development:
+  gitlab_workspaces_proxy:
+    namespace: "<custom-gitlab-workspaces-proxy-namespace>"
+```
+
 You're all set! You can now use the GitLab workspaces proxy to
 authenticate and authorize [workspaces](index.md) in your cluster.
diff --git a/lib/api/ml/mlflow_artifacts/artifacts.rb b/lib/api/ml/mlflow_artifacts/artifacts.rb
index 4cdfe8b80f5..ff16e39fc2c 100644
--- a/lib/api/ml/mlflow_artifacts/artifacts.rb
+++ b/lib/api/ml/mlflow_artifacts/artifacts.rb
@@ -22,10 +22,17 @@ module API
         route_setting :api, write: true
         route_setting :model_registry, write: true
         params do
-          optional :path, type: String, desc: 'Path to the artifact, MLflow usually send the version'
+          optional :path, type: String,
+            desc: 'Path to the artifact, model version id, optionally followed by path. E.g. 15/MLmodel'
         end
         get 'artifacts', urgency: :low do
-          package_files = { files: list_model_artifacts(user_project, params[:path]).all }
+          model_version, path = params[:path].split('/', 2)
+
+          # MLflow handles directories differently than GitLab does so when MLflow checks if a path is a directory
+          # we return an empty array as 404s would cause issues for MLflow
+          files = path.present? ? [] : list_model_artifacts(user_project, model_version).all
+
+          package_files = { files: files }
           present package_files, with: Entities::Ml::MlflowArtifacts::ArtifactsList
         end
 
diff --git a/lib/generators/gitlab/partitioning/foreign_keys_generator.rb b/lib/generators/gitlab/partitioning/foreign_keys_generator.rb
deleted file mode 100644
index 3e50f240117..00000000000
--- a/lib/generators/gitlab/partitioning/foreign_keys_generator.rb
+++ /dev/null
@@ -1,151 +0,0 @@
-# frozen_string_literal: true
-
-require 'rails/generators'
-require 'rails/generators/active_record/migration'
-
-module Gitlab
-  module Partitioning
-    class ForeignKeysGenerator < Rails::Generators::Base
-      include ActiveRecord::Generators::Migration
-
-      desc 'This generator creates the migrations needed for updating the foreign keys when partitioning the tables'
-
-      source_root File.expand_path('templates', __dir__)
-
-      class_option :target, type: :string, required: true, desc: 'Target table name'
-      class_option :source, type: :string, required: true, desc: 'Source table name'
-      class_option :partitioning_column, type: :string, default: :partition_id,
-        desc: 'The column that is used for partitioning'
-      class_option :database, type: :string, default: :ci,
-        desc: 'Database name connection'
-
-      def create_fk_index_migration
-        migration_template(
-          '../templates/foreign_key_index.rb.template',
-          fk_index_file_name)
-      end
-
-      def create_fk_definition_migration
-        migration_template(
-          '../templates/foreign_key_definition.rb.template',
-          fk_definition_file_name)
-      end
-
-      def create_fk_validation_migration
-        migration_template(
-          '../templates/foreign_key_validation.rb.template',
-          fk_validation_file_name)
-      end
-
-      def remove_old_fk_migration
-        migration_template(
-          '../templates/foreign_key_removal.rb.template',
-          fk_removal_file_name)
-      end
-
-      private
-
-      def fk_index_file_name
-        post_migration_file_path(
-          "add_fk_index_to_#{source_table_name}_on_#{partitioning_column}_and_#{foreign_key_column}.rb")
-      end
-
-      def fk_definition_file_name
-        post_migration_file_path(
-          "add_fk_to_#{source_table_name}_on_#{partitioning_column}_and_#{foreign_key_column}.rb")
-      end
-
-      def fk_validation_file_name
-        post_migration_file_path(
-          "validate_fk_on_#{source_table_name}_#{partitioning_column}_and_#{foreign_key_column}.rb")
-      end
-
-      def fk_removal_file_name
-        post_migration_file_path(
-          "remove_fk_to_#{target_table_name}_#{source_table_name}_on_#{foreign_key_column}.rb")
-      end
-
-      def post_migration_file_path(name)
-        File.join(db_migrate_path, name)
-      end
-
-      def db_migrate_path
-        super.sub('migrate', 'post_migrate')
-      end
-
-      def source_table_name
-        options[:source]
-      end
-
-      def target_table_name
-        options[:target]
-      end
-
-      def partitioning_column
-        options[:partitioning_column]
-      end
-
-      def foreign_keys_candidates
-        connection
-          .foreign_keys(source_table_name)
-          .select { |fk| fk.to_table == target_table_name }
-          .reject { |fk| fk.name.end_with?('_p') }
-      end
-
-      def fk_candidate
-        @fk_candidate ||= select_foreign_key
-      end
-
-      def foreign_key_name
-        fk_candidate.name
-      end
-
-      def partitioned_foreign_key_name
-        "#{foreign_key_name}_p"
-      end
-
-      def foreign_key_column
-        fk_candidate.column
-      end
-
-      def fk_on_delete_option
-        fk_candidate.on_delete
-      end
-
-      def fk_target_column
-        fk_candidate.primary_key
-      end
-
-      def connection
-        Gitlab::Database
-          .database_base_models
-          .fetch(options[:database])
-          .connection
-      end
-
-      def select_foreign_key
-        case foreign_keys_candidates.size
-        when 0
-          raise Thor::InvocationError, "No FK found between #{source_table_name} and #{target_table_name}"
-        when 1
-          foreign_keys_candidates.first
-        else
-          select_fk_from_user_input
-        end
-      end
-
-      def select_fk_from_user_input
-        options = (0...foreign_keys_candidates.size).to_a.map(&:to_s)
-
-        say "There are multiple FKs between #{source_table_name} and #{target_table_name}:"
-        foreign_keys_candidates.each.with_index do |fk, index|
-          say "\t#{index} : #{fk}"
-        end
-
-        input = ask("Please select one:", limited_to: options, default: '0')
-
-        foreign_keys_candidates.fetch(input.to_i)
-      end
-    end
-  end
-end
diff --git a/lib/generators/gitlab/partitioning/templates/foreign_key_definition.rb.template b/lib/generators/gitlab/partitioning/templates/foreign_key_definition.rb.template
deleted file mode 100644
index a9cf5d085d1..00000000000
--- a/lib/generators/gitlab/partitioning/templates/foreign_key_definition.rb.template
+++ /dev/null
@@ -1,39 +0,0 @@
-# frozen_string_literal: true
-
-class <%= migration_class_name %> < Gitlab::Database::Migration[<%= Gitlab::Database::Migration.current_version %>]
-  milestone '<%= Gitlab.current_milestone %>'
-
-  disable_ddl_transaction!
-
-  SOURCE_TABLE_NAME = :<%= source_table_name %>
-  TARGET_TABLE_NAME = :<%= target_table_name %>
-  COLUMN = :<%= foreign_key_column %>
-  TARGET_COLUMN = :<%= fk_target_column %>
-  FK_NAME = :<%= partitioned_foreign_key_name %>
-  PARTITION_COLUMN = :<%= partitioning_column %>
-
-  def up
-    add_concurrent_foreign_key(
-      SOURCE_TABLE_NAME,
-      TARGET_TABLE_NAME,
-      column: [PARTITION_COLUMN, COLUMN],
-      target_column: [PARTITION_COLUMN, TARGET_COLUMN],
-      validate: false,
-      reverse_lock_order: true,
-      on_update: :cascade,
-      on_delete: :<%= fk_on_delete_option %>,
-      name: FK_NAME
-    )
-  end
-
-  def down
-    with_lock_retries do
-      remove_foreign_key_if_exists(
-        SOURCE_TABLE_NAME,
-        TARGET_TABLE_NAME,
-        name: FK_NAME,
-        reverse_lock_order: true
-      )
-    end
-  end
-end
diff --git a/lib/generators/gitlab/partitioning/templates/foreign_key_index.rb.template b/lib/generators/gitlab/partitioning/templates/foreign_key_index.rb.template
deleted file mode 100644
index 4ca4dd3c842..00000000000
--- a/lib/generators/gitlab/partitioning/templates/foreign_key_index.rb.template
+++ /dev/null
@@ -1,19 +0,0 @@
-# frozen_string_literal: true
-
-class <%= migration_class_name %> < Gitlab::Database::Migration[<%= Gitlab::Database::Migration.current_version %>]
-  milestone '<%= Gitlab.current_milestone %>'
-
-  disable_ddl_transaction!
-
-  INDEX_NAME = :index_<%= source_table_name -%>_on_<%= partitioning_column -%>_<%= foreign_key_column %>
-  TABLE_NAME = :<%= source_table_name %>
-  COLUMNS = [:<%= partitioning_column -%>, :<%= foreign_key_column -%>]
-
-  def up
-    add_concurrent_index(TABLE_NAME, COLUMNS, name: INDEX_NAME)
-  end
-
-  def down
-    remove_concurrent_index_by_name(TABLE_NAME, INDEX_NAME)
-  end
-end
diff --git a/lib/generators/gitlab/partitioning/templates/foreign_key_removal.rb.template b/lib/generators/gitlab/partitioning/templates/foreign_key_removal.rb.template
deleted file mode 100644
index 16bd2548f18..00000000000
--- a/lib/generators/gitlab/partitioning/templates/foreign_key_removal.rb.template
+++ /dev/null
@@ -1,37 +0,0 @@
-# frozen_string_literal: true
-
-class <%= migration_class_name %> < Gitlab::Database::Migration[<%= Gitlab::Database::Migration.current_version %>]
-  milestone '<%= Gitlab.current_milestone %>'
-
-  disable_ddl_transaction!
-
-  SOURCE_TABLE_NAME = :<%= source_table_name %>
-  TARGET_TABLE_NAME = :<%= target_table_name %>
-  COLUMN = :<%= foreign_key_column %>
-  TARGET_COLUMN = :<%= fk_target_column %>
-  FK_NAME = :<%= foreign_key_name %>
-
-  def up
-    with_lock_retries do
-      remove_foreign_key_if_exists(
-        SOURCE_TABLE_NAME,
-        TARGET_TABLE_NAME,
-        name: FK_NAME,
-        reverse_lock_order: true
-      )
-    end
-  end
-
-  def down
-    add_concurrent_foreign_key(
-      SOURCE_TABLE_NAME,
-      TARGET_TABLE_NAME,
-      column: COLUMN,
-      target_column: TARGET_COLUMN,
-      validate: true,
-      reverse_lock_order: true,
-      on_delete: :<%= fk_on_delete_option %>,
-      name: FK_NAME
-    )
-  end
-end
diff --git a/lib/generators/gitlab/partitioning/templates/foreign_key_validation.rb.template b/lib/generators/gitlab/partitioning/templates/foreign_key_validation.rb.template
deleted file mode 100644
index b065f390863..00000000000
--- a/lib/generators/gitlab/partitioning/templates/foreign_key_validation.rb.template
+++ /dev/null
@@ -1,19 +0,0 @@
-# frozen_string_literal: true
-
-class <%= migration_class_name %> < Gitlab::Database::Migration[<%= Gitlab::Database::Migration.current_version %>]
-  milestone '<%= Gitlab.current_milestone %>'
-
-  disable_ddl_transaction!
-
-  TABLE_NAME = :<%= source_table_name %>
-  FK_NAME = :<%= partitioned_foreign_key_name %>
-  COLUMNS = [:<%= partitioning_column -%>, :<%= foreign_key_column -%>]
-
-  def up
-    validate_foreign_key(TABLE_NAME, COLUMNS, name: FK_NAME)
-  end
-
-  def down
-    # no-op
-  end
-end
diff --git a/lib/gitlab/database/load_balancing/session.rb b/lib/gitlab/database/load_balancing/session.rb
index c95fe1f98ee..d9347dd23f0 100644
--- a/lib/gitlab/database/load_balancing/session.rb
+++ b/lib/gitlab/database/load_balancing/session.rb
@@ -9,20 +9,6 @@ module Gitlab
       # has been completed. Sessions can be used to keep track of what hosts
       # should be used for queries.
       class Session
-        CACHE_KEY = :gitlab_load_balancer_session
-
-        def self.current
-          RequestStore[CACHE_KEY] ||= new
-        end
-
-        def self.clear_session
-          RequestStore.delete(CACHE_KEY)
-        end
-
-        def self.without_sticky_writes(&)
-          current.ignore_writes(&)
-        end
-
         def initialize
           @use_primary = false
           @performed_write = false
diff --git a/lib/gitlab/database/load_balancing/session_map.rb b/lib/gitlab/database/load_balancing/session_map.rb
index 997f63a05d5..6d01a76aa32 100644
--- a/lib/gitlab/database/load_balancing/session_map.rb
+++ b/lib/gitlab/database/load_balancing/session_map.rb
@@ -10,45 +10,24 @@ module Gitlab
 
         # lb - Gitlab::Database::LoadBalancing::LoadBalancer instance
         def self.current(load_balancer)
-          return Session.current unless use_session_map?
-
           cached_instance.lookup(load_balancer)
         end
 
         # models - Array<ActiveRecord::Base>
         def self.with_sessions(models)
-          return Session.current unless use_session_map?
-
           dbs = models.map { |m| m.load_balancer.name }.uniq
           dbs.each { |db| cached_instance.validate_db_name(db) }
           ScopedSessions.new(dbs, cached_instance.session_map)
         end
 
         def self.clear_session
-          return Session.clear_session unless use_session_map?
-
           RequestStore.delete(CACHE_KEY)
         end
 
         def self.without_sticky_writes(&)
-          return Session.without_sticky_writes(&) unless use_session_map?
-
           with_sessions(Gitlab::Database::LoadBalancing.base_models).ignore_writes(&)
         end
 
-        def self.use_session_map?
-          ::Feature.enabled?(:use_load_balancing_session_map, :current_request, type: :gitlab_com_derisk)
-        rescue ActiveRecord::StatementInvalid,
-          Gitlab::Database::QueryAnalyzers::Base::QueryAnalyzerError
-          # If the feature_gates table is missing, we should default to a false.
-          # In a migration scope, we also rescue and default to false.
-          false
-        rescue StandardError => e
-          ::Gitlab::ErrorTracking.track_exception(e)
-          false
-        end
-        private_class_method :use_session_map?
-
         def self.cached_instance
           RequestStore[CACHE_KEY] ||= new
         end
@@ -71,18 +50,26 @@ module Gitlab
         end
 
         def validate_db_name(db)
-          # Allow :primary only for rake task db migrations as ActiveRecord::Tasks::PostgresqlDatabaseTasks calls
-          # .establish_connection using a hash which resets the name from :main/:ci to :primary.
-          # See
-          # https://github.com/rails/rails/blob/v7.0.8.4/activerecord/lib/active_record/tasks/postgresql_database_tasks.rb#L97
-          #
-          # In the case of derailed test in memory-on-boot job, the runtime is unknown.
-          return if db == :primary && (Gitlab::Runtime.rake? || Gitlab::Runtime.safe_identify.nil?)
+          if db == :primary
+            # Allow :primary in general but report the exeception. We should expect primary for:
+            #
+            # 1. rake task db migrations as ActiveRecord::Tasks::PostgresqlDatabaseTasks calls
+            # .establish_connection using a hash which resets the name from :main/:ci to :primary.
+            # See
+            # https://github.com/rails/rails/blob/v7.0.8.4/activerecord/lib/active_record/tasks/postgresql_database_tasks.rb#L97
+            #
+            # 2. In the case of derailed test in memory-on-boot job, the runtime is unknown.
+            # 3. `scripts/regenerate-schema` which runs in RAILS_ENV=test
+            Gitlab::ErrorTracking.track_exception(
+              InvalidLoadBalancerNameError.new("Using #{db} load balancer in #{Gitlab::Runtime.safe_identify}.")
+            )
 
-          # Disallow :primary usage outside of rake or unknown runtimes as the db config should be
-          # main/ci/embedding/ci/geo.
-          return if db != :primary && session_map[db]
+            return
+          end
 
+          return if session_map[db]
+
+          # All other load balancer names are invalid and should raise an error
           raise InvalidLoadBalancerNameError, "Invalid load balancer name #{db} in #{Gitlab::Runtime.safe_identify}."
         end
       end
diff --git a/lib/gitlab/database/postgres_autovacuum_activity.rb b/lib/gitlab/database/postgres_autovacuum_activity.rb
index 4523519b8b5..226af490899 100644
--- a/lib/gitlab/database/postgres_autovacuum_activity.rb
+++ b/lib/gitlab/database/postgres_autovacuum_activity.rb
@@ -10,7 +10,7 @@ module Gitlab
 
       def self.for_tables(tables)
         Gitlab::Database::LoadBalancing::SessionMap
-          .current(connection.load_balancer)
+          .current(load_balancer)
           .use_primary do
           # calling `.to_a` here to execute the query in the primary's scope
           # and to avoid having the scope chained and re-executed
diff --git a/lib/gitlab/gon_helper.rb b/lib/gitlab/gon_helper.rb
index 5d6963307b1..6e5678ed920 100644
--- a/lib/gitlab/gon_helper.rb
+++ b/lib/gitlab/gon_helper.rb
@@ -84,6 +84,7 @@ module Gitlab
       push_frontend_feature_flag(:vscode_web_ide, current_user)
       push_frontend_feature_flag(:ui_for_organizations, current_user)
       push_frontend_feature_flag(:organization_switching, current_user)
+      push_frontend_feature_flag(:find_and_replace, current_user)
       # To be removed with https://gitlab.com/gitlab-org/gitlab/-/issues/399248
       push_frontend_feature_flag(:remove_monitor_metrics)
       push_frontend_feature_flag(:work_items_view_preference, current_user)
diff --git a/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder.rb b/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder.rb
index 4755d408df8..1fdfff082f6 100644
--- a/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder.rb
+++ b/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder.rb
@@ -154,7 +154,7 @@ module Gitlab
             tags = runner.tags.offset(2).sample(Random.rand(1..5)) # rubocop: disable CodeReuse/ActiveRecord
 
             build_attrs = {
-              name: "Fake job #{index}",
+              name: "Mock job #{index}",
               scheduling_type: 'dag',
               ref: 'main',
               status: job_status,
@@ -169,11 +169,14 @@ module Gitlab
             }
             logger.info(message: 'Creating build', **build_attrs)
 
+            build = nil
+
             ::Ci::Build.transaction do
               build = ::Ci::Build.new(importing: true, **build_attrs).tap(&:save!)
-
               ::Ci::RunningBuild.upsert_build!(build) if build.running?
             end
+
+            build&.trace&.set("Mock log...\nMock log... DONE!")
           end
 
           def random_pipeline_status
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index cbc44e5c51c..31239771d13 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -17326,6 +17326,9 @@ msgstr ""
 msgid "DORA4Metrics|Failed to load DORA performance scores for Group: %{fullPath}"
 msgstr ""
 
+msgid "DORA4Metrics|Failed to load dashboard panel."
+msgstr ""
+
 msgid "DORA4Metrics|Failed to load labels matching the filter: %{labels}"
 msgstr ""
 
@@ -23712,6 +23715,9 @@ msgstr ""
 msgid "Finalizing"
 msgstr ""
 
+msgid "Find"
+msgstr ""
+
 msgid "Find File"
 msgstr ""
 
@@ -33062,6 +33068,9 @@ msgstr ""
 msgid "MarkdownEditor|Click to expand"
 msgstr ""
 
+msgid "MarkdownEditor|Find and replace"
+msgstr ""
+
 msgid "MarkdownEditor|Indent line (%{modifierKey}])"
 msgstr ""
 
@@ -45534,6 +45543,9 @@ msgstr ""
 msgid "Relates to"
 msgstr ""
 
+msgid "Relation import could not be created: %{errors}"
+msgstr ""
+
 msgid "Relation import tracker cannot be created for project with ongoing import"
 msgstr ""
 
diff --git a/package.json b/package.json
index 8e3439ea0b2..4159a0e6ae9 100644
--- a/package.json
+++ b/package.json
@@ -280,7 +280,7 @@
     "commander": "^2.20.3",
     "crypto": "^1.0.1",
     "custom-jquery-matchers": "^2.1.0",
-    "eslint": "9.13.0",
+    "eslint": "9.14.0",
     "eslint-import-resolver-jest": "3.0.2",
     "eslint-import-resolver-webpack": "0.13.9",
     "eslint-plugin-import": "^2.31.0",
diff --git a/qa/qa/resource/personal_access_token.rb b/qa/qa/resource/personal_access_token.rb
index ef25fee0611..377187fd07b 100644
--- a/qa/qa/resource/personal_access_token.rb
+++ b/qa/qa/resource/personal_access_token.rb
@@ -18,6 +18,8 @@ module QA
       end
 
       def fabricate_via_api!
+        raise Runtime::UserStore::InvalidTokenError, "Admin api client is missing" unless api_client
+
         super
         self.api_client = Runtime::API::Client.new(personal_access_token: token)
       rescue Runtime::UserStore::InvalidTokenError, NoValueError
diff --git a/scripts/frontend/check_jest_vue3_quarantine.js b/scripts/frontend/check_jest_vue3_quarantine.js
index 44f102c1407..be9e4412434 100644
--- a/scripts/frontend/check_jest_vue3_quarantine.js
+++ b/scripts/frontend/check_jest_vue3_quarantine.js
@@ -1,8 +1,12 @@
 const { spawnSync } = require('node:child_process');
 const { readFile } = require('node:fs/promises');
 const parser = require('fast-xml-parser');
+const defaultChalk = require('chalk');
 const { getLocalQuarantinedFiles } = require('./jest_vue3_quarantine_utils');
 
+// Always use basic color output
+const chalk = new defaultChalk.constructor({ level: 1 });
+
 async function parseJUnitReport() {
   let junit;
   try {
@@ -49,16 +53,40 @@ async function parseJUnitReport() {
   };
 }
 
-function reportPassingSpecsShouldBeUnquarantined(passed) {
-  console.log(' ');
-  console.warn(
-    `Congratulations, the following ${passed.length} spec file(s) now pass(es) under Vue 3!`,
+/**
+ * Wraps the output of `callback` in a collapsible section (for GitLab CI).
+ *
+ * Assumes `callback` is synchronous.
+ *
+ * See https://docs.gitlab.com/ee/ci/jobs/job_logs.html#custom-collapsible-sections
+ */
+function section(header, callback, { showCollapsed = true } = {}) {
+  const ANSI_CLEAR_LINE = '\x1b[0K';
+  const timestamp = () => Math.floor(Date.now() / 1000);
+  const collapsed = showCollapsed ? '[collapsed=true]' : '';
+  const name = header.toLowerCase().replace(/\W+/g, '_');
+
+  console.log(
+    `${ANSI_CLEAR_LINE}section_start:${timestamp()}:${name}${collapsed}\r${ANSI_CLEAR_LINE}${chalk.cyan.bold(header)}`,
   );
-  console.log(' ');
-  console.warn(passed.join('\n'));
-  console.log(' ');
+
+  callback();
+
+  console.log(`${ANSI_CLEAR_LINE}section_end:${timestamp()}:${name}\r${ANSI_CLEAR_LINE}`);
+}
+
+function reportPassingSpecsShouldBeUnquarantined(passed) {
+  console.warn(' ');
   console.warn(
-    'To allow the pipeline to pass, please remove the file(s) from quarantine in scripts/frontend/quarantined_vue3_specs.txt.',
+    `The following ${passed.length} spec file(s) now pass(es) under Vue 3, and so must be removed from quarantine:`,
+  );
+  console.warn(' ');
+  console.warn(passed.join('\n'));
+  console.warn(' ');
+  console.warn(
+    chalk.red(
+      `To fix this job, remove the file(s) listed above from the file ${chalk.underline('scripts/frontend/quarantined_vue3_specs.txt')}.`,
+    ),
   );
 }
 
@@ -75,6 +103,8 @@ async function changedFiles() {
 }
 
 async function main() {
+  const filesThatChanged = await changedFiles();
+
   // Note: we don't care what Jest's exit code is.
   //
   // If it's zero, then either:
@@ -86,28 +116,30 @@ async function main() {
   // If it's non-zero, then either:
   //   - one or more specs failed (which is expected!), or
   //   - there was some unknown error. We shouldn't block MRs in this case.
-  spawnSync(
-    'node_modules/.bin/jest',
-    [
-      '--config',
-      'jest.config.js',
-      '--ci',
-      '--findRelatedTests',
-      ...(await changedFiles()),
-      '--passWithNoTests',
-      // Explicitly have one shard, so that the `shard` method of the sequencer is called.
-      '--shard=1/1',
-      '--testSequencer',
-      './scripts/frontend/check_jest_vue3_quarantine_sequencer.js',
-      '--logHeapUsage',
-    ],
-    {
-      stdio: 'inherit',
-      env: {
-        ...process.env,
-        VUE_VERSION: '3',
+  section('Jest output (only useful for debugging the CI job itself, not the tests)', () =>
+    spawnSync(
+      'node_modules/.bin/jest',
+      [
+        '--config',
+        'jest.config.js',
+        '--ci',
+        '--findRelatedTests',
+        ...filesThatChanged,
+        '--passWithNoTests',
+        // Explicitly have one shard, so that the `shard` method of the sequencer is called.
+        '--shard=1/1',
+        '--testSequencer',
+        './scripts/frontend/check_jest_vue3_quarantine_sequencer.js',
+        '--logHeapUsage',
+      ],
+      {
+        stdio: 'inherit',
+        env: {
+          ...process.env,
+          VUE_VERSION: '3',
+        },
       },
-    },
+    ),
   );
 
   const { passed, total } = await parseJUnitReport();
diff --git a/scripts/partitioning/generate-fk b/scripts/partitioning/generate-fk
deleted file mode 100755
index 4f2dac1d61e..00000000000
--- a/scripts/partitioning/generate-fk
+++ /dev/null
@@ -1,3 +0,0 @@
-#!/bin/bash
-
-exec bundle exec rails generate gitlab:partitioning:foreign_keys "$@"
diff --git a/spec/components/layouts/page_heading_component_spec.rb b/spec/components/layouts/page_heading_component_spec.rb
index 2ac0b91e223..8b223e4a585 100644
--- a/spec/components/layouts/page_heading_component_spec.rb
+++ b/spec/components/layouts/page_heading_component_spec.rb
@@ -28,7 +28,7 @@ RSpec.describe Layouts::PageHeadingComponent, type: :component, feature_category
         c.with_description { description }
       end
 
-      expect(page).to have_css('.gl-w-full.gl-mt-2.gl-text-secondary', text: description)
+      expect(page).to have_css('.gl-w-full.gl-mt-2.gl-text-subtle', text: description)
     end
   end
 end
diff --git a/spec/frontend/sidebar/components/todo_toggle/sidebar_todo_widget_spec.js b/spec/frontend/sidebar/components/todo_toggle/sidebar_todo_widget_spec.js
index 7341614da40..d08e8509e2b 100644
--- a/spec/frontend/sidebar/components/todo_toggle/sidebar_todo_widget_spec.js
+++ b/spec/frontend/sidebar/components/todo_toggle/sidebar_todo_widget_spec.js
@@ -159,59 +159,32 @@ describe('Sidebar Todo Widget', () => {
         mergeRequestTodoSubscription,
         subscriptionHandler,
       );
-    });
 
-    describe('realtimeIssuableTodo feature flag is enabled', () => {
-      beforeEach(() => {
-        createComponent({
-          provide: {
-            glFeatures: { realtimeIssuableTodo: true },
-          },
-          propsData: { issuableType: 'merge_request' },
-          apolloProvider,
-        });
-
-        return nextTick();
+      createComponent({
+        propsData: { issuableType: 'merge_request' },
+        apolloProvider,
       });
 
-      it('updates todo button to have a new todo when subscription receives data', async () => {
-        mockSubscription.next({
-          data: {
-            issuableTodoUpdated: {
-              __typename: 'MergeRequest',
-              id: 'gid://gitlab/MergeRequest/1',
-              currentUserTodos: {
-                nodes: [{ id: 1 }],
-              },
+      return nextTick();
+    });
+
+    it('updates todo button to have a new todo when subscription receives data', async () => {
+      mockSubscription.next({
+        data: {
+          issuableTodoUpdated: {
+            __typename: 'MergeRequest',
+            id: 'gid://gitlab/MergeRequest/1',
+            currentUserTodos: {
+              nodes: [{ id: 1 }],
             },
           },
-        });
-
-        await nextTick();
-
-        expect(subscriptionHandler).toHaveBeenCalled();
-        expect(findTodoButton().props('isTodo')).toBe(true);
-      });
-    });
-
-    describe('realtimeIssuableTodo feature flag is disabled', () => {
-      beforeEach(() => {
-        createComponent({
-          provide: {
-            glFeatures: { realtimeIssuableTodo: false },
-          },
-          propsData: { issuableType: 'merge_request' },
-          apolloProvider,
-        });
-
-        return nextTick();
+        },
       });
 
-      it('does not subscribe to more', async () => {
-        await nextTick();
+      await nextTick();
 
-        expect(subscriptionHandler).not.toHaveBeenCalled();
-      });
+      expect(subscriptionHandler).toHaveBeenCalled();
+      expect(findTodoButton().props('isTodo')).toBe(true);
     });
   });
 });
diff --git a/spec/frontend/vue_shared/components/markdown/header_spec.js b/spec/frontend/vue_shared/components/markdown/header_spec.js
index e6460aeea63..be283ebfc63 100644
--- a/spec/frontend/vue_shared/components/markdown/header_spec.js
+++ b/spec/frontend/vue_shared/components/markdown/header_spec.js
@@ -23,7 +23,13 @@ describe('Markdown field header component', () => {
         ...props,
       },
       stubs: { GlToggle },
-      provide,
+      provide: {
+        glFeatures: {
+          findAndReplace: true,
+          ...provide?.glFeatures,
+        },
+        ...provide,
+      },
     });
   };
 
@@ -66,6 +72,7 @@ describe('Markdown field header component', () => {
     ${13} | ${'Add a table'}                  | ${'Add a table'}                           | ${'table'}
     ${14} | ${'Attach a file or image'}       | ${'Attach a file or image'}                | ${'upload'}
     ${15} | ${'Go full screen'}               | ${'Go full screen'}                        | ${'fullScreen'}
+    ${16} | ${'Find and replace'}             | ${'Find and replace'}                      | ${null}
   `('markdown header buttons', ({ i, buttonTitle, nonMacTitle, buttonType }) => {
     it('renders the buttons with the correct title', () => {
       expect(findToolbarButtons().wrappers[i].props('buttonTitle')).toBe(buttonTitle);
@@ -84,6 +91,11 @@ describe('Markdown field header component', () => {
     });
   });
 
+  it('does not render find and replace button when feature flag is turned off', () => {
+    createWrapper({ provide: { glFeatures: { findAndReplace: false } } });
+    expect(findToolbarButtons().wrappers[16]).toBeUndefined();
+  });
+
   it('attach file button should have data-button-type attribute', () => {
     const attachButton = findToolbarButtonByProp('icon', 'paperclip');
 
@@ -198,8 +210,6 @@ describe('Markdown field header component', () => {
     });
 
     it('shows all items by default', () => {
-      createWrapper();
-
       expect(findToolbarButtons().length).toBe(defaultCount);
     });
 
@@ -291,4 +301,65 @@ describe('Markdown field header component', () => {
       expect(findCommentTemplatesModal().exists()).toBe(false);
     });
   });
+
+  describe('find and replace', () => {
+    let form;
+
+    const createParentForm = () => {
+      form = document.createElement('form');
+      const field = document.createElement('div');
+      const root = document.createElement('div');
+      field.classList = 'js-vue-markdown-field';
+      form.appendChild(field);
+      field.appendChild(root);
+      document.body.appendChild(form);
+      return root;
+    };
+
+    const showFindAndReplace = async () => {
+      $(document).triggerHandler('markdown-editor:find-and-replace:show', [$('form')]);
+      await nextTick();
+    };
+
+    const findFindInput = () => wrapper.findByPlaceholderText('Find');
+
+    beforeEach(() => {
+      createWrapper({ attachTo: createParentForm() });
+    });
+
+    afterEach(() => {
+      form.parentNode.removeChild(form);
+    });
+
+    it('does not emit find and replace event when triggered from another form', () => {
+      $(document).triggerHandler('markdown-editor:find-and-replace:show', [
+        $(
+          '<form><div class="js-vue-markdown-field"><textarea class="markdown-area"></textarea></div></form>',
+        ),
+      ]);
+
+      expect(wrapper.findByTestId('find-and-replace').exists()).toBe(false);
+    });
+
+    it('displays find-and-replace bar when shortcut event is emitted', async () => {
+      await showFindAndReplace();
+      expect(wrapper.findByTestId('find-and-replace').exists()).toBe(true);
+    });
+
+    it('prevents submitting the form when Enter key is pressed', async () => {
+      await showFindAndReplace();
+      const preventDefault = jest.fn();
+      findFindInput().vm.$emit('keydown', { preventDefault, key: 'Enter' });
+      expect(preventDefault).toHaveBeenCalled();
+    });
+
+    it('closes the find-and-replace bar when Escape key is pressed', async () => {
+      await showFindAndReplace();
+      const preventDefault = jest.fn();
+      findFindInput().vm.$emit('keydown', { preventDefault, key: 'Escape' });
+      await nextTick();
+      expect(preventDefault).not.toHaveBeenCalled();
+      expect(wrapper.findByTestId('find-and-replace').exists()).toBe(false);
+    });
+  });
 });
diff --git a/spec/graphql/graphql_triggers_spec.rb b/spec/graphql/graphql_triggers_spec.rb
index 1d5bfa793e9..88d1e85f076 100644
--- a/spec/graphql/graphql_triggers_spec.rb
+++ b/spec/graphql/graphql_triggers_spec.rb
@@ -176,18 +176,6 @@ RSpec.describe GraphqlTriggers, feature_category: :shared do
   describe '.issuable_todo_updated' do
     let_it_be(:user) { create(:user) }
 
-    context 'when realtime_issuable_todo feature flag is disabled' do
-      before do
-        stub_feature_flags(realtime_issuable_todo: false)
-      end
-
-      it 'does not trigger the issuable_todo_updated subscription' do
-        expect(GitlabSchema.subscriptions).not_to receive(:trigger)
-
-        described_class.issuable_todo_updated(issuable, user)
-      end
-    end
-
     it 'triggers the issuable_todo_updated subscription' do
       expect(GitlabSchema.subscriptions).to receive(:trigger).with(
         :issuable_todo_updated,
@@ -195,7 +183,7 @@ RSpec.describe GraphqlTriggers, feature_category: :shared do
         issuable
       ).and_call_original
 
-      described_class.issuable_todo_updated(issuable, user)
+      described_class.issuable_todo_updated(issuable)
     end
   end
 end
diff --git a/spec/helpers/routing/pseudonymization_helper_spec.rb b/spec/helpers/routing/pseudonymization_helper_spec.rb
index 2eb6fc2985e..3021c0150b1 100644
--- a/spec/helpers/routing/pseudonymization_helper_spec.rb
+++ b/spec/helpers/routing/pseudonymization_helper_spec.rb
@@ -357,6 +357,15 @@ RSpec.describe ::Routing::PseudonymizationHelper, feature_category: :product_ana
         expect(helper.masked_referrer_url(original_url)).to eq(masked_url)
       end
     end
+
+    context 'with group admin page' do
+      let(:original_url) { "http://localhost/admin/groups/#{group.full_path}" }
+      let(:masked_url) { 'http://localhost/admin/groups/id' }
+
+      it 'masks sensitive parameters in the URL for group admin page' do
+        expect(helper.masked_referrer_url(original_url)).to eq(masked_url)
+      end
+    end
   end
 
   describe 'masked_query_params' do
diff --git a/spec/lib/feature_spec.rb b/spec/lib/feature_spec.rb
index 8675c191280..b2bc24970a1 100644
--- a/spec/lib/feature_spec.rb
+++ b/spec/lib/feature_spec.rb
@@ -560,11 +560,6 @@ RSpec.describe Feature, :clean_gitlab_redis_feature_flag, stub_feature_flags: fa
 
         context 'and feature has been disabled' do
           before do
-            # TODO: revert changes to .once when removing use_load_balancing_session_map feature flag
-            # We stub SessionMap.current since it uses a feature flag. Within this spec, all feature flags
-            # definitions are missing due to the stubbed Feature::Definition.definitions method.
-            allow(Gitlab::Database::LoadBalancing::SessionMap)
-              .to receive(:current).and_return(Gitlab::Database::LoadBalancing::Session.current)
             described_class.disable(:my_feature_flag)
           end
 
diff --git a/spec/lib/generators/gitlab/partitioning/foreign_keys_generator_spec.rb b/spec/lib/generators/gitlab/partitioning/foreign_keys_generator_spec.rb
deleted file mode 100644
index 77e14fa71ba..00000000000
--- a/spec/lib/generators/gitlab/partitioning/foreign_keys_generator_spec.rb
+++ /dev/null
@@ -1,129 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-require 'active_support/testing/stream'
-
-RSpec.describe Gitlab::Partitioning::ForeignKeysGenerator, :migration, :silence_stdout,
-  feature_category: :continuous_integration, quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/454333' do
-  include ActiveSupport::Testing::Stream
-  include MigrationsHelpers
-
-  before do
-    ActiveRecord::Schema.define do
-      create_table :_test_tmp_builds, force: :cascade do |t|
-        t.integer :partition_id
-        t.index [:id, :partition_id], unique: true
-      end
-
-      create_table :_test_tmp_metadata, force: :cascade do |t|
-        t.integer :partition_id
-        t.references :builds, foreign_key: { to_table: :_test_tmp_builds, on_delete: :cascade }
-      end
-    end
-  end
-
-  after do
-    FileUtils.rm_rf(destination_root)
-
-    table(:schema_migrations).where(version: migrations.map(&:version)).delete_all
-
-    active_record_base.connection.execute(<<~SQL)
-      DROP TABLE _test_tmp_metadata;
-      DROP TABLE _test_tmp_builds;
-    SQL
-  end
-
-  let(:generator_config) { { destination_root: destination_root } }
-  let(:generator_args) { %w[--source _test_tmp_metadata --target _test_tmp_builds --database main] }
-
-  context 'without foreign keys' do
-    let(:generator_args) { %w[--source _test_tmp_metadata --target projects --database main] }
-
-    it 'does not generate migrations' do
-      output = capture(:stderr) { run_generator }
-
-      expect(migrations).to be_empty
-      expect(output).to match(/No FK found between _test_tmp_metadata and projects/)
-    end
-  end
-
-  context 'with one FK' do
-    it 'generates foreign key migrations' do
-      run_generator
-
-      expect(migrations.sort_by(&:version).map(&:name)).to eq(%w[
-        AddFkIndexToTestTmpMetadataOnPartitionIdAndBuildsId
-        AddFkToTestTmpMetadataOnPartitionIdAndBuildsId
-        ValidateFkOnTestTmpMetadataPartitionIdAndBuildsId
-        RemoveFkToTestTmpBuildsTestTmpMetadataOnBuildsId
-      ])
-
-      schema_migrate_up!
-
-      fks = Gitlab::Database::PostgresForeignKey
-        .by_referenced_table_identifier('public._test_tmp_builds')
-        .by_constrained_table_identifier('public._test_tmp_metadata')
-
-      expect(fks.size).to eq(1)
-
-      foreign_key = fks.first
-
-      expect(foreign_key.name).to end_with('_p')
-      expect(foreign_key.constrained_columns).to eq(%w[partition_id builds_id])
-      expect(foreign_key.referenced_columns).to eq(%w[partition_id id])
-      expect(foreign_key.on_delete_action).to eq('cascade')
-      expect(foreign_key.on_update_action).to eq('cascade')
-
-      index = active_record_base.connection.indexes('_test_tmp_metadata').find do |index|
-        index.columns == %w[partition_id builds_id]
-      end
-
-      expect(index).to be_present
-    end
-  end
-
-  context 'with many FKs' do
-    before do
-      ActiveRecord::Schema.define do
-        add_reference :_test_tmp_metadata, :job,
-          foreign_key: { to_table: :_test_tmp_builds, on_delete: :cascade }
-      end
-    end
-
-    it 'generates migrations for the selected FK' do
-      expect(Thor::LineEditor)
-        .to receive(:readline)
-        .with('Please select one: [0, 1] (0) ', { default: '0', limited_to: %w[0 1] })
-        .and_return('1')
-
-      run_generator
-
-      expect(migrations.sort_by(&:version).map(&:name)).to eq(%w[
-        AddFkIndexToTestTmpMetadataOnPartitionIdAndJobId
-        AddFkToTestTmpMetadataOnPartitionIdAndJobId
-        ValidateFkOnTestTmpMetadataPartitionIdAndJobId
-        RemoveFkToTestTmpBuildsTestTmpMetadataOnJobId
-      ])
-    end
-  end
-
-  def run_generator(args = generator_args, config = generator_config)
-    described_class.start(args, config)
-  end
-
-  # We want to execute only the newly generated migrations
-  def migrations_paths
-    [File.join(destination_root, 'db', 'post_migrate')]
-  end
-
-  # There is no need to migrate down before executing the tests because these
-  # migrations were not already executed and we don't need to run it after
-  # the tests because we're removing the tables.
-  def schema_migrate_down!
-    # no-op
-  end
-
-  def destination_root
-    File.expand_path("../tmp", __dir__)
-  end
-end
diff --git a/spec/lib/gitlab/auth/token_expiration_banner_spec.rb b/spec/lib/gitlab/auth/token_expiration_banner_spec.rb
index 15acb6c7883..d5175e9d168 100644
--- a/spec/lib/gitlab/auth/token_expiration_banner_spec.rb
+++ b/spec/lib/gitlab/auth/token_expiration_banner_spec.rb
@@ -13,8 +13,7 @@ RSpec.describe Gitlab::Auth::TokenExpirationBanner, feature_category: :system_ac
     # for specs, we need to reset it each time
     before do
       described_class.instance_variable_set(:@show_token_expiration_banner, nil)
-      # TODO: revert changes to .twice when removing use_load_balancing_session_map feature flag https://gitlab.com/gitlab-org/gitlab/-/issues/496505
-      allow(Gitlab).to receive(:version_info).at_least(:twice).and_return(gitlab_version)
+      allow(Gitlab).to receive(:version_info).twice.and_return(gitlab_version)
     end
 
     it { is_expected.to be(false) }
diff --git a/spec/lib/gitlab/database/load_balancing/session_map_spec.rb b/spec/lib/gitlab/database/load_balancing/session_map_spec.rb
index 915aa1fcdec..e295a2ae8bb 100644
--- a/spec/lib/gitlab/database/load_balancing/session_map_spec.rb
+++ b/spec/lib/gitlab/database/load_balancing/session_map_spec.rb
@@ -12,29 +12,6 @@ RSpec.describe Gitlab::Database::LoadBalancing::SessionMap, feature_category: :d
       described_class.clear_session
     end
 
-    context 'when feature flag is disabled' do
-      before do
-        described_class.current(lb) # initialise a SessionMap
-        stub_feature_flags(use_load_balancing_session_map: false)
-      end
-
-      it 'returns sessions from Gitlab::Database::LoadBalancing::Session.current' do
-        expect(described_class.current(lb)).to eq(Gitlab::Database::LoadBalancing::Session.current)
-      end
-    end
-
-    context 'when feature flag lookup returns unexpected error' do
-      before do
-        allow(Feature).to receive(:enabled?).and_raise(StandardError)
-      end
-
-      it 'tracks exception and return false' do
-        # behaves as if feature flag is disabled
-        expect(Gitlab::ErrorTracking).to receive(:track_exception).with(StandardError)
-        expect(described_class.current(lb)).to eq(Gitlab::Database::LoadBalancing::Session.current)
-      end
-    end
-
     context 'when already initialised' do
       before do
         described_class.current(lb)
@@ -79,42 +56,36 @@ RSpec.describe Gitlab::Database::LoadBalancing::SessionMap, feature_category: :d
     end
 
     context 'when receiving invalid db type' do
-      using RSpec::Parameterized::TableSyntax
-
       let(:pri_lb) { instance_double('Gitlab::Database::LoadBalancing::LoadBalancer', name: :primary) }
       let(:invalid_lb) { instance_double('Gitlab::Database::LoadBalancing::LoadBalancer', name: :invalid) }
 
-      where(:runtime, :db, :error) do
-        :rake?  | :primary | false
-        :rake?  | :invalid | true
+      subject(:current) { described_class.current(lb) }
 
-        :puma?  | :primary | true
-        :puma?  | :invalid | true
+      Gitlab::Runtime::AVAILABLE_RUNTIMES.each do |runtime|
+        context "when using #{runtime} runtime" do
+          before do
+            allow(Gitlab::Runtime).to receive(runtime).and_return(true)
+            allow(Gitlab::Runtime).to receive(:safe_identify).and_return(runtime)
+          end
 
-        :sidekiq?  | :primary | true
-        :sidekiq?  | :invalid | true
+          context 'when db is invalid' do
+            let(:lb) { instance_double('Gitlab::Database::LoadBalancing::LoadBalancer', name: :invalid) }
 
-        :test_suite?  | :primary | true
-        :test_suite?  | :invalid | true
-      end
+            it 'raises error' do
+              expect do
+                current
+              end.to raise_error(instance_of(Gitlab::Database::LoadBalancing::SessionMap::InvalidLoadBalancerNameError))
+            end
+          end
 
-      with_them do
-        let(:lb) { instance_double('Gitlab::Database::LoadBalancing::LoadBalancer', name: db) }
+          context 'when db is primary' do
+            let(:lb) { instance_double('Gitlab::Database::LoadBalancing::LoadBalancer', name: :primary) }
 
-        before do
-          allow(Gitlab::Runtime).to receive(runtime).and_return(true)
-          allow(Gitlab::Runtime).to receive(:safe_identify).and_return(runtime)
-        end
-
-        subject(:current) { described_class.current(lb) }
-
-        it 'handles invalid db' do
-          if error
-            expect do
-              current
-            end.to raise_error(instance_of(Gitlab::Database::LoadBalancing::SessionMap::InvalidLoadBalancerNameError))
-          else
-            expect(current).to be_instance_of(Gitlab::Database::LoadBalancing::Session)
+            it 'reports error without raising' do
+              expect(Gitlab::ErrorTracking).to receive(:track_exception)
+                .with(an_instance_of(Gitlab::Database::LoadBalancing::SessionMap::InvalidLoadBalancerNameError))
+              expect(current).to be_instance_of(Gitlab::Database::LoadBalancing::Session)
+            end
           end
         end
       end
@@ -141,21 +112,6 @@ RSpec.describe Gitlab::Database::LoadBalancing::SessionMap, feature_category: :d
 
       expect(RequestStore[described_class::CACHE_KEY]).to eq(nil)
     end
-
-    context 'when feature flag is disabled' do
-      before do
-        described_class.current(lb) # initialise a SessionMap
-        stub_feature_flags(use_load_balancing_session_map: false)
-      end
-
-      it 'clears session from Gitlab::Database::LoadBalancing::Session.current' do
-        expect(Gitlab::Database::LoadBalancing::Session.current).not_to eq(nil)
-
-        described_class.clear_session
-
-        expect(RequestStore[Gitlab::Database::LoadBalancing::Session::CACHE_KEY]).to eq(nil)
-      end
-    end
   end
 
   describe '.without_sticky_writes' do
@@ -181,20 +137,6 @@ RSpec.describe Gitlab::Database::LoadBalancing::SessionMap, feature_category: :d
         # exact logic for ignore_writes is tested in `.with_sessions` test suite
       end
     end
-
-    context 'when feature flag is disabled' do
-      before do
-        stub_feature_flags(use_load_balancing_session_map: false)
-      end
-
-      it 'calls Gitlab::Database::LoadBalancing::Session instead' do
-        expect(Gitlab::Database::LoadBalancing::Session).to receive(:without_sticky_writes).and_yield
-
-        described_class.without_sticky_writes do
-          # exact logic for ignore_writes is tested in `.with_sessions` test suite
-        end
-      end
-    end
   end
 
   describe '.with_sessions' do
@@ -231,17 +173,6 @@ RSpec.describe Gitlab::Database::LoadBalancing::SessionMap, feature_category: :d
       end.to raise_error(instance_of(described_class::InvalidLoadBalancerNameError))
     end
 
-    context 'when use_load_balancing_session_map is disabled' do
-      before do
-        stub_feature_flags(use_load_balancing_session_map: false)
-      end
-
-      it 'returns Session instead of ScopedSession' do
-        expect(with_sessions)
-          .to be_an_instance_of(Gitlab::Database::LoadBalancing::Session)
-      end
-    end
-
     context 'when calling use_primary!' do
       it 'applies use_primary! to all sessions' do
         with_sessions.use_primary!
diff --git a/spec/lib/gitlab/database/load_balancing/session_spec.rb b/spec/lib/gitlab/database/load_balancing/session_spec.rb
index 05b44579c62..b83f175c0cc 100644
--- a/spec/lib/gitlab/database/load_balancing/session_spec.rb
+++ b/spec/lib/gitlab/database/load_balancing/session_spec.rb
@@ -3,47 +3,6 @@
 require 'spec_helper'
 
 RSpec.describe Gitlab::Database::LoadBalancing::Session do
-  after do
-    described_class.clear_session
-  end
-
-  describe '.current' do
-    it 'returns the current session' do
-      expect(described_class.current).to be_an_instance_of(described_class)
-    end
-  end
-
-  describe '.clear_session' do
-    it 'clears the current session' do
-      described_class.current
-      described_class.clear_session
-
-      expect(RequestStore[described_class::CACHE_KEY]).to be_nil
-    end
-  end
-
-  describe '.without_sticky_writes' do
-    it 'ignores sticky write events sent by a connection proxy' do
-      described_class.without_sticky_writes do
-        described_class.current.write!
-      end
-
-      session = described_class.current
-
-      expect(session).not_to be_using_primary
-    end
-
-    it 'still is aware of write that happened' do
-      described_class.without_sticky_writes do
-        described_class.current.write!
-      end
-
-      session = described_class.current
-
-      expect(session.performed_write?).to be true
-    end
-  end
-
   describe '#use_primary?' do
     it 'returns true when the primary should be used' do
       instance = described_class.new
diff --git a/spec/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder_spec.rb b/spec/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder_spec.rb
index 5cd0670148f..52b50bde52b 100644
--- a/spec/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder_spec.rb
+++ b/spec/lib/gitlab/seeders/ci/runner/runner_fleet_pipeline_seeder_spec.rb
@@ -28,14 +28,15 @@ RSpec.describe ::Gitlab::Seeders::Ci::Runner::RunnerFleetPipelineSeeder, feature
     context 'with job_count specified' do
       let(:job_count) { 20 }
 
-      it 'creates expected jobs', :aggregate_failures,
-        quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/394721' do
+      it 'creates expected jobs', :aggregate_failures do
         expect { seeder.seed }.to change { Ci::Build.count }.by(job_count)
           .and change { Ci::Pipeline.count }.by(4)
 
         expect(Ci::Pipeline.where.not(started_at: nil).map(&:queued_duration)).to all(be <= 5.minutes)
         expect(Ci::Build.where.not(started_at: nil).map(&:queued_duration)).to all(be <= 5.minutes)
 
+        expect(Ci::Build.last(job_count).map(&:trace).map(&:raw)).to all(be_an(String))
+
         projects_to_runners.first(3).each do |project|
           expect(Ci::Build.where(runner_id: project[:runner_ids])).not_to be_empty
         end
diff --git a/spec/models/work_items/widgets/linked_items_spec.rb b/spec/models/work_items/widgets/linked_items_spec.rb
index fb3001b286b..07e9fbce62d 100644
--- a/spec/models/work_items/widgets/linked_items_spec.rb
+++ b/spec/models/work_items/widgets/linked_items_spec.rb
@@ -22,4 +22,8 @@ RSpec.describe WorkItems::Widgets::LinkedItems, feature_category: :portfolio_man
   describe '#linked_work_items' do
     it { expect(described_class.new(work_item).linked_work_items(user)).to eq(work_item.linked_work_items(user)) }
   end
+
+  describe '.quick_action_commands' do
+    it { expect(described_class.quick_action_commands).to match_array([:blocks, :blocked_by]) }
+  end
 end
diff --git a/spec/requests/api/graphql/project/merge_requests_spec.rb b/spec/requests/api/graphql/project/merge_requests_spec.rb
index e222fdc7294..dc7cfacfdc2 100644
--- a/spec/requests/api/graphql/project/merge_requests_spec.rb
+++ b/spec/requests/api/graphql/project/merge_requests_spec.rb
@@ -59,7 +59,7 @@ RSpec.describe 'getting merge request listings nested in a project', feature_cat
       # We cannot disable SQL query limiting here, since the transaction does not
       # begin until we enter the controller.
       headers = {
-        'X-GITLAB-DISABLE-SQL-QUERY-LIMIT' => '206,https://gitlab.com/gitlab-org/gitlab/-/issues/469250'
+        'X-GITLAB-DISABLE-SQL-QUERY-LIMIT' => '221,https://gitlab.com/gitlab-org/gitlab/-/issues/469250'
       }
 
       post_graphql(query, current_user: current_user, headers: headers)
diff --git a/spec/requests/api/ml/mlflow_artifacts/artifacts_spec.rb b/spec/requests/api/ml/mlflow_artifacts/artifacts_spec.rb
index 4395593decf..7de6ce2e15d 100644
--- a/spec/requests/api/ml/mlflow_artifacts/artifacts_spec.rb
+++ b/spec/requests/api/ml/mlflow_artifacts/artifacts_spec.rb
@@ -53,6 +53,19 @@ RSpec.describe API::Ml::MlflowArtifacts::Artifacts, feature_category: :mlops do
       end
     end
 
+    context 'when the user has access and checks for an directory' do
+      let(:route) do
+        "/projects/#{project_id}/ml/mlflow/api/2.0/mlflow-artifacts/artifacts?path=#{model_version.id}/MlModel"
+      end
+
+      it 'returns an empty list of artifacts', :aggregate_failures do
+        is_expected.to have_gitlab_http_status(:ok)
+        expect(json_response).to have_key('files')
+        expect(json_response['files']).to be_an_instance_of(Array)
+        expect(json_response['files']).to be_empty
+      end
+    end
+
     context 'when the user lacks read_model_registry rights' do
       before do
         allow(Ability).to receive(:allowed?).and_call_original
diff --git a/spec/services/projects/import_export/relation_import_service_spec.rb b/spec/services/projects/import_export/relation_import_service_spec.rb
index 6c2dc49d460..fc0f0e6262a 100644
--- a/spec/services/projects/import_export/relation_import_service_spec.rb
+++ b/spec/services/projects/import_export/relation_import_service_spec.rb
@@ -2,13 +2,14 @@
 
 require 'spec_helper'
 
-RSpec.shared_examples 'returns failure response' do |expected_status|
+RSpec.shared_examples 'returns failure response' do |expected_status, expected_message|
   it 'returns an error status' do
     response = import_service.execute
 
     expect(response).to be_instance_of(ServiceResponse)
     expect(response).not_to be_success
     expect(response.http_status).to eq(expected_status)
+    expect(response.message).to include(expected_message)
   end
 end
 
@@ -52,6 +53,17 @@ RSpec.describe ::Projects::ImportExport::RelationImportService, :aggregate_failu
           expect(response.http_status).to eq(:ok)
           expect(response.payload).to be_instance_of(Projects::ImportExport::RelationImportTracker)
         end
+
+        context 'and the relation import tracker cannot be created' do
+          before do
+            invalid_tracker = build(:relation_import_tracker, project: nil)
+            invalid_tracker.validate
+
+            allow(import_service).to receive(:create_status_tracker).and_return(invalid_tracker)
+          end
+
+          include_examples 'returns failure response', :bad_request, 'Relation import could not be created'
+        end
       end
 
       context 'and the user has developer access' do
@@ -59,11 +71,11 @@ RSpec.describe ::Projects::ImportExport::RelationImportService, :aggregate_failu
           project.add_developer(user)
         end
 
-        include_examples 'returns failure response', :forbidden
+        include_examples 'returns failure response', :forbidden, 'You are not authorized to perform this action'
       end
 
       context 'and the has no access' do
-        include_examples 'returns failure response', :forbidden
+        include_examples 'returns failure response', :forbidden, 'You are not authorized to perform this action'
       end
 
       context 'and the user triggers an import before the last one finishes' do
@@ -75,20 +87,21 @@ RSpec.describe ::Projects::ImportExport::RelationImportService, :aggregate_failu
           project.relation_import_trackers.create!(relation: 'issues', status: 1)
         end
 
-        include_examples 'returns failure response', :conflict
+        include_examples 'returns failure response', :conflict,
+          'A relation import is already in progress for this project'
       end
 
       context 'and an invalid relation is passed' do
         let(:relation) { 'invalid_relation' }
 
-        include_examples 'returns failure response', :bad_request
+        include_examples 'returns failure response', :bad_request, 'Imported relation must be one of'
       end
     end
 
     context 'when the project does not exist' do
       let(:project_path) { 'some/unknown/project' }
 
-      include_examples 'returns failure response', :not_found
+      include_examples 'returns failure response', :not_found, 'Project not found'
     end
   end
 end
diff --git a/spec/services/todo_service_spec.rb b/spec/services/todo_service_spec.rb
index aab9e334956..5a385a43f0e 100644
--- a/spec/services/todo_service_spec.rb
+++ b/spec/services/todo_service_spec.rb
@@ -384,7 +384,7 @@ RSpec.describe TodoService, feature_category: :notifications do
       end
 
       it 'calls GraphQL.issuable_todo_updated' do
-        expect(GraphqlTriggers).to receive(:issuable_todo_updated).with(issue, john_doe)
+        expect(GraphqlTriggers).to receive(:issuable_todo_updated).with(issue)
 
         service.resolve_todos_for_target(issue, john_doe)
       end
@@ -1490,7 +1490,7 @@ RSpec.describe TodoService, feature_category: :notifications do
     end
 
     it 'calls GraphQL.issuable_todo_updated' do
-      expect(GraphqlTriggers).to receive(:issuable_todo_updated).with(todo.target, john_doe)
+      expect(GraphqlTriggers).to receive(:issuable_todo_updated).with(todo.target)
 
       service.resolve_todo(todo, john_doe)
     end
diff --git a/spec/services/work_items/data_sync/clone_service_spec.rb b/spec/services/work_items/data_sync/clone_service_spec.rb
index f884e107bcd..9d32462a53d 100644
--- a/spec/services/work_items/data_sync/clone_service_spec.rb
+++ b/spec/services/work_items/data_sync/clone_service_spec.rb
@@ -10,8 +10,7 @@ RSpec.describe WorkItems::DataSync::CloneService, feature_category: :team_planni
   let_it_be(:source_project_member) { create(:user, reporter_of: project) }
   let_it_be(:target_project_member) { create(:user, reporter_of: target_project) }
   let_it_be(:projects_member) { create(:user, reporter_of: [project, target_project]) }
-
-  let(:target_namespace) { target_project.project_namespace.reload }
+  let_it_be_with_reload(:target_namespace) { target_project.project_namespace }
 
   let(:service) do
     described_class.new(
@@ -59,7 +58,7 @@ RSpec.describe WorkItems::DataSync::CloneService, feature_category: :team_planni
     let(:current_user) { projects_member }
 
     context 'when cloning project level work item to a group' do
-      let(:target_namespace) { group }
+      let_it_be_with_reload(:target_namespace) { group }
 
       it 'does not raise error' do
         expect { service.execute }.not_to raise_error
diff --git a/spec/services/work_items/data_sync/move_service_spec.rb b/spec/services/work_items/data_sync/move_service_spec.rb
index d5f706dbb6a..dceb47a1498 100644
--- a/spec/services/work_items/data_sync/move_service_spec.rb
+++ b/spec/services/work_items/data_sync/move_service_spec.rb
@@ -10,8 +10,7 @@ RSpec.describe WorkItems::DataSync::MoveService, feature_category: :team_plannin
   let_it_be(:source_project_member) { create(:user, reporter_of: project) }
   let_it_be(:target_project_member) { create(:user, reporter_of: target_project) }
   let_it_be(:projects_member) { create(:user, reporter_of: [project, target_project]) }
-
-  let(:target_namespace) { target_project.project_namespace.reload }
+  let_it_be_with_reload(:target_namespace) { target_project.project_namespace }
 
   let(:service) do
     described_class.new(
@@ -59,7 +58,7 @@ RSpec.describe WorkItems::DataSync::MoveService, feature_category: :team_plannin
     let(:current_user) { projects_member }
 
     context 'when moving project level work item to a group' do
-      let(:target_namespace) { group }
+      let_it_be_with_reload(:target_namespace) { group }
 
       it 'does not raise error' do
         expect { service.execute }.not_to raise_error
diff --git a/spec/services/work_items/data_sync/widgets/milestone_spec.rb b/spec/services/work_items/data_sync/widgets/milestone_spec.rb
new file mode 100644
index 00000000000..59222f03699
--- /dev/null
+++ b/spec/services/work_items/data_sync/widgets/milestone_spec.rb
@@ -0,0 +1,95 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe WorkItems::DataSync::Widgets::Milestone, feature_category: :team_planning do
+  let_it_be(:current_user) { create(:user) }
+  let_it_be(:group) { create(:group) }
+  let_it_be(:project1) { create(:project, group: group) }
+  let_it_be(:project2) { create(:project, group: group) }
+  let_it_be(:milestone1) { create(:milestone, group: group, title: 'sample milestone') }
+  let_it_be_with_reload(:work_item) { create(:work_item, milestone: milestone1, project: project1) }
+  let_it_be_with_reload(:target_work_item) { create(:work_item, project: project2) }
+
+  let(:params) { {} }
+
+  subject(:callback) do
+    described_class.new(
+      work_item: work_item, target_work_item: target_work_item, current_user: current_user, params: params
+    )
+  end
+
+  describe '#before_create' do
+    context 'when target work item does not have milestone widget' do
+      before do
+        target_work_item.reload
+        allow(target_work_item).to receive(:get_widget).with(:milestone).and_return(false)
+      end
+
+      it 'does not copy milestone' do
+        expect(callback).not_to receive(:matching_milestone)
+
+        callback.before_create
+
+        expect(target_work_item.milestone).to be_nil
+      end
+    end
+
+    context 'when target work item has milestone widget' do
+      before do
+        allow(target_work_item).to receive(:get_widget).with(:milestone).and_return(true)
+      end
+
+      context 'when source and target work items are within same hierarchy' do
+        it 'copies milestone from work_item to target_work_item' do
+          expect(callback).to receive(:matching_milestone).and_call_original
+
+          callback.before_create
+
+          expect(target_work_item.milestone).to eq(milestone1)
+        end
+      end
+
+      context 'when source and target work items are in different hierarchies' do
+        let_it_be(:target_group) { create(:group) }
+        let_it_be(:target_project) { create(:project, group: target_group) }
+        let_it_be(:milestone2) { create(:milestone, group: target_group, title: 'sample one milestone') }
+        let_it_be_with_reload(:target_work_item) { create(:work_item, project: target_project) }
+
+        context 'when no milestone matches by title in new hierarchy' do
+          it 'does not copy milestone' do
+            expect(callback).to receive(:matching_milestone).and_call_original
+
+            callback.before_create
+
+            expect(target_work_item.milestone).to be_nil
+          end
+        end
+
+        context 'when milestone matches by title in new hierarchy' do
+          let_it_be(:milestone3) { create(:milestone, group: target_group, title: 'sample milestone') }
+
+          it 'copies milestone from work_item to target_work_item' do
+            expect(callback).to receive(:matching_milestone).and_call_original
+
+            callback.before_create
+
+            expect(target_work_item.milestone).to eq(milestone3)
+          end
+        end
+      end
+    end
+  end
+
+  describe '#post_move_cleanup' do
+    it 'is defined and can be called' do
+      expect { callback.post_move_cleanup }.not_to raise_error
+    end
+
+    it 'removes original work item milestone' do
+      callback.post_move_cleanup
+
+      expect(work_item.milestone).to be_nil
+    end
+  end
+end
diff --git a/spec/support/shared_examples/features/work_items/rolled_up_dates_drawer_shared_examples.rb b/spec/support/shared_examples/features/work_items/rolled_up_dates_drawer_shared_examples.rb
new file mode 100644
index 00000000000..4e736be4f12
--- /dev/null
+++ b/spec/support/shared_examples/features/work_items/rolled_up_dates_drawer_shared_examples.rb
@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+RSpec.shared_examples 'work items rolled up dates in drawer' do
+  include WorkItemFeedbackHelpers
+
+  let(:work_item_rolledup_dates_selector) { '[data-testid="work-item-rolledup-dates"]' }
+  let(:work_item_start_due_dates_selector) { '[data-testid="work-item-start-due-dates"]' }
+  let(:work_item_milestone_selector) { '[data-testid="work-item-milestone"]' }
+
+  context 'when feature flag is disabled' do
+    before do
+      stub_feature_flags(work_items_rolledup_dates: false)
+
+      page.refresh
+      wait_for_all_requests
+    end
+
+    it 'does not show rolled up dates' do
+      expect(page).not_to have_selector(work_item_rolledup_dates_selector)
+    end
+  end
+
+  context 'when feature flag is enabled' do
+    before do
+      stub_feature_flags(work_items_rolledup_dates: true)
+      stub_licensed_features(epics: true, subepics: true, epic_colors: true)
+
+      page.refresh
+      wait_for_all_requests
+
+      close_work_item_feedback_popover_if_present
+    end
+
+    it 'passes axe automated accessibility testing in closed state' do
+      expect(page).to have_selector(work_item_rolledup_dates_selector)
+      expect(page).to be_axe_clean.within(work_item_rolledup_dates_selector)
+    end
+
+    it 'passes axe automated accessibility testing in open state' do
+      within(work_item_rolledup_dates_selector) do
+        click_button _('Edit')
+        wait_for_requests
+
+        expect(page).to be_axe_clean.within(work_item_rolledup_dates_selector)
+      end
+    end
+
+    context 'when edit is clicked' do
+      it 'selects and updates the dates to fixed once selected', :aggregate_failures do
+        expect(find_field('Inherited')).to be_checked
+
+        find_and_click_edit(work_item_rolledup_dates_selector)
+
+        within work_item_rolledup_dates_selector do
+          fill_in 'Start', with: '2021-01-01'
+          fill_in 'Due', with: '2021-01-02'
+        end
+
+        # Click outside to save
+        find_by_testid("work-item-title").click
+
+        within work_item_rolledup_dates_selector do
+          expect(find_field('Fixed')).to be_checked
+          expect(page).to have_text('Start: Jan 1, 2021')
+          expect(page).to have_text('Due: Jan 2, 2021')
+        end
+      end
+    end
+  end
+end
diff --git a/spec/support/shared_examples/features/work_items/rolledup_dates_shared_examples.rb b/spec/support/shared_examples/features/work_items/rolledup_dates_shared_examples.rb
index 0dd715047cb..4af850e58f3 100644
--- a/spec/support/shared_examples/features/work_items/rolledup_dates_shared_examples.rb
+++ b/spec/support/shared_examples/features/work_items/rolledup_dates_shared_examples.rb
@@ -21,18 +21,7 @@ RSpec.shared_examples 'work items rolled up dates' do
     expect(dates_source.due_date_sourcing_work_item_id).to eq(epic.due_date_sourcing_epic&.issue_id)
   end
 
-  context 'when feature flag is disabled' do
-    before do
-      stub_feature_flags(work_items_rolledup_dates: false)
-
-      page.refresh
-      wait_for_all_requests
-    end
-
-    it 'does not show rolled up dates' do
-      expect(page).not_to have_selector(work_item_rolledup_dates_selector)
-    end
-  end
+  it_behaves_like 'work items rolled up dates in drawer'
 
   context 'when feature flag is enabled' do
     before do
@@ -45,42 +34,6 @@ RSpec.shared_examples 'work items rolled up dates' do
       close_work_item_feedback_popover_if_present
     end
 
-    it 'passes axe automated accessibility testing in closed state' do
-      expect(page).to have_selector(work_item_rolledup_dates_selector)
-      expect(page).to be_axe_clean.within(work_item_rolledup_dates_selector)
-    end
-
-    it 'passes axe automated accessibility testing in open state' do
-      within(work_item_rolledup_dates_selector) do
-        click_button _('Edit')
-        wait_for_requests
-
-        expect(page).to be_axe_clean.within(work_item_rolledup_dates_selector)
-      end
-    end
-
-    context 'when edit is clicked' do
-      it 'selects and updates the dates to fixed once selected', :aggregate_failures do
-        expect(find_field('Inherited')).to be_checked
-
-        find_and_click_edit(work_item_rolledup_dates_selector)
-
-        within work_item_rolledup_dates_selector do
-          fill_in 'Start', with: '2021-01-01'
-          fill_in 'Due', with: '2021-01-02'
-        end
-
-        # Click outside to save
-        find_by_testid("work-item-title").click
-
-        within work_item_rolledup_dates_selector do
-          expect(find_field('Fixed')).to be_checked
-          expect(page).to have_text('Start: Jan 1, 2021')
-          expect(page).to have_text('Due: Jan 2, 2021')
-        end
-      end
-    end
-
     context 'when using inheritable dates', :sidekiq_inline do
       def update_child_milestone(title:, milestone:)
         within_testid('links-child', text: title) do
diff --git a/spec/support/shared_examples/quick_actions/issue/issue_links_quick_actions_shared_examples.rb b/spec/support/shared_examples/quick_actions/issue/issue_links_quick_actions_shared_examples.rb
index 811b5ee4de2..d628fbd0ce4 100644
--- a/spec/support/shared_examples/quick_actions/issue/issue_links_quick_actions_shared_examples.rb
+++ b/spec/support/shared_examples/quick_actions/issue/issue_links_quick_actions_shared_examples.rb
@@ -5,6 +5,8 @@ RSpec.shared_examples 'issues link quick action' do |command|
   let_it_be_with_reload(:other_issue) { create(:issue, project: project) }
   let_it_be_with_reload(:second_issue) { create(:issue, project: project) }
   let_it_be_with_reload(:third_issue) { create(:issue, project: project) }
+  let_it_be_with_reload(:work_item_issue) { create(:work_item, project: project) }
+  let_it_be(:work_item_issue_link) { Issue.find(work_item_issue.id) }
 
   let(:link_type) { command == :relate ? 'relates_to' : 'blocks' }
   let(:links_query) do
@@ -36,8 +38,10 @@ RSpec.shared_examples 'issues link quick action' do |command|
     end
 
     context 'when linking multiple issues at once' do
-      let(:issues_linked) { [second_issue, third_issue] }
-      let(:content) { "/#{command} #{second_issue.to_reference} #{third_issue.to_reference}" }
+      let(:issues_linked) { [second_issue, third_issue, work_item_issue_link] }
+      let(:content) do
+        "/#{command} #{second_issue.to_reference} #{third_issue.to_reference} #{work_item_issue.to_reference}"
+      end
 
       it_behaves_like 'link command'
     end
diff --git a/spec/support/shared_examples/services/work_items/data_sync/cloneable_and_moveable_data_stared_examples.rb b/spec/support/shared_examples/services/work_items/data_sync/cloneable_and_moveable_data_stared_examples.rb
index 85e197f758c..e9d30e6784f 100644
--- a/spec/support/shared_examples/services/work_items/data_sync/cloneable_and_moveable_data_stared_examples.rb
+++ b/spec/support/shared_examples/services/work_items/data_sync/cloneable_and_moveable_data_stared_examples.rb
@@ -62,11 +62,14 @@ RSpec.shared_examples 'cloneable and moveable widget data' do
     work_item.reload.email_participants.pluck(:email)
   end
 
+  def work_item_milestone(work_item)
+    work_item.reload.milestone&.title
+  end
+
   let(:move) { WorkItems::DataSync::MoveService }
   let(:clone) { WorkItems::DataSync::CloneService }
 
   let_it_be(:users) { create_list(:user, 3) }
-  let_it_be(:milestone) { create(:milestone) }
   let_it_be(:thumbs_ups) { create_list(:award_emoji, 2, name: 'thumbsup', awardable: original_work_item) }
   let_it_be(:thumbs_downs) { create_list(:award_emoji, 2, name: 'thumbsdown', awardable: original_work_item) }
   let_it_be(:participant2) { create(:issue_email_participant, issue: original_work_item, email: 'user2@example.com') }
@@ -84,10 +87,32 @@ RSpec.shared_examples 'cloneable and moveable widget data' do
     users
   end
 
+  let_it_be(:milestone) do
+    milestone = if original_work_item.namespace.is_a?(Group)
+                  create(:milestone, group: original_work_item.namespace)
+                else
+                  create(:project_milestone, project: original_work_item.project)
+                end
+
+    original_work_item.update!(milestone: milestone)
+
+    # create milestone with same title in destination namespace so that it can be assigned to moved work item
+    if target_namespace.is_a?(Group)
+      create(:milestone, group: target_namespace, title: milestone.title)
+    elsif target_namespace.is_a?(Namespaces::ProjectNamespace)
+      create(:project_milestone, project: target_namespace.project, title: milestone.title)
+    else
+      create(:project_milestone, project: target_namespace, title: milestone.title)
+    end
+
+    milestone.title
+  end
+
   where(:widget_name, :eval_value, :expected_data, :operations) do
     :assignees          | :work_item_assignees   | ref(:assignees)    | [ref(:move), ref(:clone)]
     :award_emoji        | :work_item_award_emoji | ref(:award_emojis) | [ref(:move)]
     :email_participants | :work_item_emails      | ref(:emails)       | [ref(:move)]
+    :milestone          | :work_item_milestone   | ref(:milestone)    | [ref(:move), ref(:clone)]
   end
 
   with_them do
@@ -97,14 +122,14 @@ RSpec.shared_examples 'cloneable and moveable widget data' do
         widget_value = send(eval_value, new_work_item)
 
         if operations.include?(described_class)
-          expect(widget_value).not_to be_nil
-          expect(widget_value).not_to be_empty
-          expect(widget_value).to match_array(expected_data)
+          expect(widget_value).not_to be_blank
+          # trick to compare single values and arrays with a single statement
+          expect([widget_value].flatten).to match_array([expected_data].flatten)
         else
-          expect(widget_value).to be_empty
+          expect(widget_value).to be_blank
         end
 
-        expect(original_work_item.reload.public_send(widget_name)).to be_empty if described_class == move
+        expect(original_work_item.reload.public_send(widget_name)).to be_blank if described_class == move
       end
     end
   end
diff --git a/spec/workers/ci/catalog/resources/cleanup_last_usages_worker_spec.rb b/spec/workers/ci/catalog/resources/cleanup_last_usages_worker_spec.rb
new file mode 100644
index 00000000000..b7367b10624
--- /dev/null
+++ b/spec/workers/ci/catalog/resources/cleanup_last_usages_worker_spec.rb
@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Ci::Catalog::Resources::CleanupLastUsagesWorker, feature_category: :pipeline_composition do
+  let_it_be(:component) { create(:ci_catalog_resource_component) }
+
+  subject(:worker) { described_class.new }
+
+  include_examples 'an idempotent worker'
+
+  describe '#perform', :clean_gitlab_redis_shared_state do
+    let!(:old_usage) do
+      create(:catalog_resource_component_last_usage,
+        component: component,
+        last_used_date: 31.days.ago.to_date
+      )
+    end
+
+    let!(:recent_usage) do
+      create(:catalog_resource_component_last_usage,
+        component: component,
+        last_used_date: 29.days.ago.to_date
+      )
+    end
+
+    let!(:current_usage) do
+      create(:catalog_resource_component_last_usage,
+        component: component,
+        last_used_date: Time.current.to_date
+      )
+    end
+
+    it 'deletes records older than 30 days' do
+      expect { worker.perform }.to change { Ci::Catalog::Resources::Components::LastUsage.count }.by(-1)
+
+      expect(Ci::Catalog::Resources::Components::LastUsage.exists?(old_usage.id)).to be false
+      expect(Ci::Catalog::Resources::Components::LastUsage.exists?(recent_usage.id)).to be true
+      expect(Ci::Catalog::Resources::Components::LastUsage.exists?(current_usage.id)).to be true
+    end
+  end
+end
diff --git a/workhorse/cmd/gitlab-resize-image/encode.go b/workhorse/cmd/gitlab-resize-image/encode.go
new file mode 100644
index 00000000000..045c299e4ab
--- /dev/null
+++ b/workhorse/cmd/gitlab-resize-image/encode.go
@@ -0,0 +1,21 @@
+package main
+
+import (
+	"fmt"
+	"io"
+	"strconv"
+)
+
+func encode(widthParam string, r io.Reader, w io.Writer) error {
+	requestedWidth, err := strconv.Atoi(widthParam)
+	if err != nil {
+		return fmt.Errorf("converting widthParam: %w", err)
+	}
+
+	i, err := NewImage(requestedWidth, r)
+	if err != nil {
+		return fmt.Errorf("calling NewImage(): %w", err)
+	}
+
+	return i.Encode(w)
+}
diff --git a/workhorse/cmd/gitlab-resize-image/encode_test.go b/workhorse/cmd/gitlab-resize-image/encode_test.go
new file mode 100644
index 00000000000..d0883fb931f
--- /dev/null
+++ b/workhorse/cmd/gitlab-resize-image/encode_test.go
@@ -0,0 +1,27 @@
+package main
+
+import (
+	"bytes"
+	"image"
+	"os"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func Test_encode(t *testing.T) {
+	w := &bytes.Buffer{}
+
+	testFile := "../../testdata/image.png"
+	r, err := os.Open(testFile)
+	require.NoError(t, err)
+
+	err = encode("50", r, w)
+	require.NoError(t, err)
+
+	config, format, err := image.DecodeConfig(w)
+	require.NoError(t, err)
+	require.Equal(t, 46, config.Height)
+	require.Equal(t, 50, config.Width)
+	require.Equal(t, "png", format)
+}
diff --git a/workhorse/cmd/gitlab-resize-image/image.go b/workhorse/cmd/gitlab-resize-image/image.go
new file mode 100644
index 00000000000..14e57d90a0a
--- /dev/null
+++ b/workhorse/cmd/gitlab-resize-image/image.go
@@ -0,0 +1,54 @@
+package main
+
+import (
+	"errors"
+	"fmt"
+	"image"
+	"image/png"
+	"io"
+	"math"
+
+	"golang.org/x/image/draw"
+
+	glPng "gitlab.com/gitlab-org/gitlab/workhorse/cmd/gitlab-resize-image/png"
+
+	_ "image/jpeg"
+)
+
+// Image holds the source image, requested width and functionality to encode
+type Image struct {
+	Source         image.Image
+	RequestedWidth int
+}
+
+// NewImage returns a new instance of Image{}
+func NewImage(requestedWidth int, r io.Reader) (Image, error) {
+	i := Image{RequestedWidth: requestedWidth}
+
+	if requestedWidth <= 0 {
+		return i, errors.New("requestedWidth needs to be > 0")
+	}
+
+	imgReader, err := glPng.NewReader(r)
+	if err != nil {
+		return i, fmt.Errorf("construct PNG reader: %w", err)
+	}
+
+	src, _, err := image.Decode(imgReader)
+	if err != nil {
+		return i, fmt.Errorf("decode: %w", err)
+	}
+	i.Source = src
+
+	return i, nil
+}
+
+// Encode writes a resized and scaled image, typically to os.Stdout
+func (i Image) Encode(w io.Writer) error {
+	ratio := (float64)(i.Source.Bounds().Max.Y) / (float64)(i.Source.Bounds().Max.X)
+	height := int(math.Round(float64(i.RequestedWidth) * ratio))
+	dst := image.NewRGBA(image.Rect(0, 0, i.RequestedWidth, height))
+	draw.ApproxBiLinear.Scale(dst, dst.Rect, i.Source, i.Source.Bounds(), draw.Over, nil)
+
+	return png.Encode(w, dst)
+}
diff --git a/workhorse/cmd/gitlab-resize-image/image_test.go b/workhorse/cmd/gitlab-resize-image/image_test.go
new file mode 100644
index 00000000000..dc78debb1ad
--- /dev/null
+++ b/workhorse/cmd/gitlab-resize-image/image_test.go
@@ -0,0 +1,59 @@
+package main
+
+import (
+	"io"
+	"os"
+	"testing"
+
+	"github.com/stretchr/testify/require"
+)
+
+func Test_NewImage(t *testing.T) {
+	requestedWidth := 50
+
+	testFile := "../../testdata/image.png"
+	r, err := os.Open(testFile)
+	require.NoError(t, err)
+
+	badTestFile := "../../testdata/audio.mp3"
+	br, err := os.Open(badTestFile)
+	require.NoError(t, err)
+
+	type args struct {
+		requestedWidth int
+		r              io.Reader
+	}
+	tests := []struct {
+		name       string
+		args       args
+		wantW      string
+		wantErrStr string
+	}{
+		{
+			name:       "Bad requestedWidth",
+			args:       args{requestedWidth: -1},
+			wantErrStr: "requestedWidth needs to be > 0",
+		},
+		{
+			name:       "Bad r",
+			args:       args{requestedWidth: requestedWidth, r: br},
+			wantErrStr: "decode: image: unknown format",
+		},
+		{
+			name: "Good",
+			args: args{requestedWidth: requestedWidth, r: r},
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			img, err := NewImage(tt.args.requestedWidth, tt.args.r)
+			if tt.wantErrStr != "" {
+				require.ErrorContains(t, err, tt.wantErrStr)
+			} else {
+				require.Equal(t, requestedWidth, img.RequestedWidth)
+				require.NotNil(t, img.Source)
+			}
+		})
+	}
+}
diff --git a/workhorse/cmd/gitlab-resize-image/main.go b/workhorse/cmd/gitlab-resize-image/main.go
index 65718499043..decc3b9ff59 100644
--- a/workhorse/cmd/gitlab-resize-image/main.go
+++ b/workhorse/cmd/gitlab-resize-image/main.go
@@ -1,45 +1,14 @@
-// Package main handles image resizing by reading a PNG image from stdin and writing a PNG image to stdout.
+// Package main handles image resizing by reading a PNG/JPG image from stdin and writing a PNG image to stdout.
 package main
 
 import (
 	"fmt"
-	"image"
 	"os"
-	"strconv"
-
-	"github.com/disintegration/imaging"
-
-	"gitlab.com/gitlab-org/gitlab/workhorse/cmd/gitlab-resize-image/png"
 )
 
 func main() {
-	if err := _main(); err != nil {
+	if err := encode(os.Getenv("GL_RESIZE_IMAGE_WIDTH"), os.Stdin, os.Stdout); err != nil {
 		fmt.Fprintf(os.Stderr, "%s: fatal: %v\n", os.Args[0], err)
 		os.Exit(1)
 	}
 }
-
-func _main() error {
-	widthParam := os.Getenv("GL_RESIZE_IMAGE_WIDTH")
-	requestedWidth, err := strconv.Atoi(widthParam)
-	if err != nil {
-		return fmt.Errorf("GL_RESIZE_IMAGE_WIDTH: %w", err)
-	}
-
-	pngReader, err := png.NewReader(os.Stdin)
-	if err != nil {
-		return fmt.Errorf("construct PNG reader: %w", err)
-	}
-
-	src, formatName, err := image.Decode(pngReader)
-	if err != nil {
-		return fmt.Errorf("decode: %w", err)
-	}
-	imagingFormat, err := imaging.FormatFromExtension(formatName)
-	if err != nil {
-		return fmt.Errorf("find imaging format: %w", err)
-	}
-
-	image := imaging.Resize(src, requestedWidth, 0, imaging.Lanczos)
-	return imaging.Encode(os.Stdout, image, imagingFormat)
-}
diff --git a/workhorse/go.mod b/workhorse/go.mod
index 775cac30965..85f548a6269 100644
--- a/workhorse/go.mod
+++ b/workhorse/go.mod
@@ -14,7 +14,6 @@ require (
 	github.com/aws/aws-sdk-go-v2/credentials v1.17.41
 	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.25
 	github.com/aws/aws-sdk-go-v2/service/s3 v1.66.0
-	github.com/disintegration/imaging v1.6.2
 	github.com/dlclark/regexp2 v1.11.4
 	github.com/getsentry/raven-go v0.2.0
 	github.com/golang-jwt/jwt/v5 v5.2.1
diff --git a/workhorse/go.sum b/workhorse/go.sum
index 5a497f3afa8..5f0b6a32607 100644
--- a/workhorse/go.sum
+++ b/workhorse/go.sum
@@ -175,8 +175,6 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1
 github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
-github.com/disintegration/imaging v1.6.2 h1:w1LecBlG2Lnp8B3jk5zSuNqd7b4DXhcjwek1ei82L+c=
-github.com/disintegration/imaging v1.6.2/go.mod h1:44/5580QXChDfwIclfc/PCwrr44amcmDAg8hxG0Ewe4=
 github.com/dlclark/regexp2 v1.11.4 h1:rPYF9/LECdNymJufQKmri9gV604RvvABwgOA8un7yAo=
 github.com/dlclark/regexp2 v1.11.4/go.mod h1:DHkYz0B9wPfa6wondMfaivmHpzrQ3v9q8cnmRbL6yW8=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
@@ -546,7 +544,6 @@ golang.org/x/exp v0.0.0-20240119083558-1b970713d09a h1:Q8/wZp0KX97QFTc2ywcOE0YRj
 golang.org/x/exp v0.0.0-20240119083558-1b970713d09a/go.mod h1:idGWGoKP1toJGkd5/ig9ZLuPcZBC3ewk7SzmH0uou08=
 golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
 golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
-golang.org/x/image v0.0.0-20191009234506-e7c1f5e7dbb8/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
 golang.org/x/image v0.20.0 h1:7cVCUjQwfL18gyBJOmYvptfSHS8Fb3YUDtfLIZ7Nbpw=
 golang.org/x/image v0.20.0/go.mod h1:0a88To4CYVBAHp5FXJm8o7QbUl37Vd85ply1vyD8auM=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
diff --git a/yarn.lock b/yarn.lock
index c99a7703a4e..7050c16a13f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1253,7 +1253,7 @@
   dependencies:
     eslint-visitor-keys "^3.3.0"
 
-"@eslint-community/regexpp@^4.10.0", "@eslint-community/regexpp@^4.11.0":
+"@eslint-community/regexpp@^4.10.0", "@eslint-community/regexpp@^4.12.1":
   version "4.12.1"
   resolved "https://registry.yarnpkg.com/@eslint-community/regexpp/-/regexpp-4.12.1.tgz#cfc6cffe39df390a3841cde2abccf92eaa7ae0e0"
   integrity sha512-CCZCDJuduB9OUkFkY2IgppNZMi2lBQgD2qzwXkEia16cge2pijY/aXi96CJMquDMn3nJdlPV1A5KrJEXwfLNzQ==
@@ -1287,10 +1287,10 @@
     minimatch "^3.1.2"
     strip-json-comments "^3.1.1"
 
-"@eslint/js@9.13.0", "@eslint/js@^9.13.0":
-  version "9.13.0"
-  resolved "https://registry.yarnpkg.com/@eslint/js/-/js-9.13.0.tgz#c5f89bcd57eb54d5d4fa8b77693e9c28dc97e547"
-  integrity sha512-IFLyoY4d72Z5y/6o/BazFBezupzI/taV8sGumxTAVw3lXG9A6md1Dc34T9s1FoD/an9pJH8RHbAxsaEbBed9lA==
+"@eslint/js@9.14.0", "@eslint/js@^9.13.0":
+  version "9.14.0"
+  resolved "https://registry.yarnpkg.com/@eslint/js/-/js-9.14.0.tgz#2347a871042ebd11a00fd8c2d3d56a265ee6857e"
+  integrity sha512-pFoEtFWCPyDOl+C6Ift+wC7Ro89otjigCf5vcuWqWgqNSQbRrpjSvdeE6ofLz4dHmyxD5f7gIdGT4+p36L6Twg==
 
 "@eslint/object-schema@^2.1.4":
   version "2.1.4"
@@ -1653,7 +1653,7 @@
   resolved "https://registry.yarnpkg.com/@humanfs/core/-/core-0.19.1.tgz#17c55ca7d426733fe3c561906b8173c336b40a77"
   integrity sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==
 
-"@humanfs/node@^0.16.5":
+"@humanfs/node@^0.16.6":
   version "0.16.6"
   resolved "https://registry.yarnpkg.com/@humanfs/node/-/node-0.16.6.tgz#ee2a10eaabd1131987bf0488fd9b820174cd765e"
   integrity sha512-YuI2ZHQL78Q5HbhDiBA1X4LmYdXCKCMQIfw0pw7piHJwyREFebJUvrQN4cMssyES6x+vfUbx1CIpaQUKYdQZOw==
@@ -1666,11 +1666,16 @@
   resolved "https://registry.yarnpkg.com/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz#af5b2691a22b44be847b0ca81641c5fb6ad0172c"
   integrity sha512-bxveV4V8v5Yb4ncFTT3rPSgZBOpCkjfK0y4oVVVJwIuDVBRMDXrPyXRL988i5ap9m9bnyEEjWfm5WkBmtffLfA==
 
-"@humanwhocodes/retry@^0.3.0", "@humanwhocodes/retry@^0.3.1":
+"@humanwhocodes/retry@^0.3.0":
   version "0.3.1"
   resolved "https://registry.yarnpkg.com/@humanwhocodes/retry/-/retry-0.3.1.tgz#c72a5c76a9fbaf3488e231b13dc52c0da7bab42a"
   integrity sha512-JBxkERygn7Bv/GbN5Rv8Ul6LVknS+5Bp6RgDC/O8gEBU/yeH5Ui5C/OlWrTb6qct7LjjfT6Re2NxB0ln0yYybA==
 
+"@humanwhocodes/retry@^0.4.0":
+  version "0.4.0"
+  resolved "https://registry.yarnpkg.com/@humanwhocodes/retry/-/retry-0.4.0.tgz#b57438cab2a2381b4b597b0ab17339be381bd755"
+  integrity sha512-xnRgu9DxZbkWak/te3fcytNyp8MTbuiZIaueg2rgEvBuN55n04nwLYLU9TX/VVlusc9L2ZNXi99nUFNkHXtr5g==
+
 "@isaacs/cliui@^8.0.2":
   version "8.0.2"
   resolved "https://registry.yarnpkg.com/@isaacs/cliui/-/cliui-8.0.2.tgz#b37667b7bc181c168782259bab42474fbf52b550"
@@ -4176,10 +4181,10 @@ acorn@^6.4.1:
   resolved "https://registry.yarnpkg.com/acorn/-/acorn-6.4.2.tgz#35866fd710528e92de10cf06016498e47e39e1e6"
   integrity sha512-XtGIhXwF8YM8bJhGxG5kXgjkEuNGLTkoYqVE+KMR+aspr4KGYmKYg7yUe3KghyQ9yheNwLnjmzh/7+gfDBmHCQ==
 
-acorn@^8.0.4, acorn@^8.1.0, acorn@^8.11.0, acorn@^8.12.0, acorn@^8.8.1, acorn@^8.9.0:
-  version "8.13.0"
-  resolved "https://registry.yarnpkg.com/acorn/-/acorn-8.13.0.tgz#2a30d670818ad16ddd6a35d3842dacec9e5d7ca3"
-  integrity sha512-8zSiw54Oxrdym50NlZ9sUusyO1Z1ZchgRLWRaK6c86XJFClyCgFKetdowBg5bKxyp/u+CDBJG4Mpp0m3HLZl9w==
+acorn@^8.0.4, acorn@^8.1.0, acorn@^8.11.0, acorn@^8.14.0, acorn@^8.8.1, acorn@^8.9.0:
+  version "8.14.0"
+  resolved "https://registry.yarnpkg.com/acorn/-/acorn-8.14.0.tgz#063e2c70cac5fb4f6467f0b11152e04c682795b0"
+  integrity sha512-cl669nCJTZBsL97OF4kUQm5g5hC2uihk0NxY3WENAC0TYdILVkAyHymAntgxGkl7K+t0cXIrH5siy5S4XkFycA==
 
 agent-base@6:
   version "6.0.2"
@@ -7341,10 +7346,10 @@ eslint-scope@^7.1.1:
     esrecurse "^4.3.0"
     estraverse "^5.2.0"
 
-eslint-scope@^8.1.0:
-  version "8.1.0"
-  resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-8.1.0.tgz#70214a174d4cbffbc3e8a26911d8bf51b9ae9d30"
-  integrity sha512-14dSvlhaVhKKsa9Fx1l8A17s7ah7Ef7wCakJ10LYk6+GYmP9yDti2oq2SEwcyndt6knfcZyhyxwY3i9yL78EQw==
+eslint-scope@^8.2.0:
+  version "8.2.0"
+  resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-8.2.0.tgz#377aa6f1cb5dc7592cfd0b7f892fd0cf352ce442"
+  integrity sha512-PHlWUfG6lvPc3yvP5A4PNyBL1W8fkDUccmI21JUu/+GKZBoH/W5u6usENXUrWFRsyoW5ACUjFGgAFQp5gUlb/A==
   dependencies:
     esrecurse "^4.3.0"
     estraverse "^5.2.0"
@@ -7354,26 +7359,26 @@ eslint-visitor-keys@^3.3.0, eslint-visitor-keys@^3.4.1, eslint-visitor-keys@^3.4
   resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz#0cd72fe8550e3c2eae156a96a4dddcd1c8ac5800"
   integrity sha512-wpc+LXeiyiisxPlEkUzU6svyS1frIO3Mgxj1fdy7Pm8Ygzguax2N3Fa/D/ag1WqbOprdI+uY6wMUl8/a2G+iag==
 
-eslint-visitor-keys@^4.1.0:
-  version "4.1.0"
-  resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-4.1.0.tgz#1f785cc5e81eb7534523d85922248232077d2f8c"
-  integrity sha512-Q7lok0mqMUSf5a/AdAZkA5a/gHcO6snwQClVNNvFKCAVlxXucdU8pKydU5ZVZjBx5xr37vGbFFWtLQYreLzrZg==
+eslint-visitor-keys@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-4.2.0.tgz#687bacb2af884fcdda8a6e7d65c606f46a14cd45"
+  integrity sha512-UyLnSehNt62FFhSwjZlHmeokpRK59rcz29j+F1/aDgbkbRTk7wIc9XzdoasMUbRNKDM0qQt/+BJ4BrpFeABemw==
 
-eslint@9.13.0:
-  version "9.13.0"
-  resolved "https://registry.yarnpkg.com/eslint/-/eslint-9.13.0.tgz#7659014b7dda1ff876ecbd990f726e11c61596e6"
-  integrity sha512-EYZK6SX6zjFHST/HRytOdA/zE72Cq/bfw45LSyuwrdvcclb/gqV8RRQxywOBEWO2+WDpva6UZa4CcDeJKzUCFA==
+eslint@9.14.0:
+  version "9.14.0"
+  resolved "https://registry.yarnpkg.com/eslint/-/eslint-9.14.0.tgz#534180a97c00af08bcf2b60b0ebf0c4d6c1b2c95"
+  integrity sha512-c2FHsVBr87lnUtjP4Yhvk4yEhKrQavGafRA/Se1ouse8PfbfC/Qh9Mxa00yWsZRlqeUB9raXip0aiiUZkgnr9g==
   dependencies:
     "@eslint-community/eslint-utils" "^4.2.0"
-    "@eslint-community/regexpp" "^4.11.0"
+    "@eslint-community/regexpp" "^4.12.1"
     "@eslint/config-array" "^0.18.0"
     "@eslint/core" "^0.7.0"
     "@eslint/eslintrc" "^3.1.0"
-    "@eslint/js" "9.13.0"
+    "@eslint/js" "9.14.0"
     "@eslint/plugin-kit" "^0.2.0"
-    "@humanfs/node" "^0.16.5"
+    "@humanfs/node" "^0.16.6"
     "@humanwhocodes/module-importer" "^1.0.1"
-    "@humanwhocodes/retry" "^0.3.1"
+    "@humanwhocodes/retry" "^0.4.0"
     "@types/estree" "^1.0.6"
     "@types/json-schema" "^7.0.15"
     ajv "^6.12.4"
@@ -7381,9 +7386,9 @@ eslint@9.13.0:
     cross-spawn "^7.0.2"
     debug "^4.3.2"
     escape-string-regexp "^4.0.0"
-    eslint-scope "^8.1.0"
-    eslint-visitor-keys "^4.1.0"
-    espree "^10.2.0"
+    eslint-scope "^8.2.0"
+    eslint-visitor-keys "^4.2.0"
+    espree "^10.3.0"
     esquery "^1.5.0"
     esutils "^2.0.2"
     fast-deep-equal "^3.1.3"
@@ -7400,14 +7405,14 @@ eslint@9.13.0:
     optionator "^0.9.3"
     text-table "^0.2.0"
 
-espree@^10.0.1, espree@^10.2.0:
-  version "10.2.0"
-  resolved "https://registry.yarnpkg.com/espree/-/espree-10.2.0.tgz#f4bcead9e05b0615c968e85f83816bc386a45df6"
-  integrity sha512-upbkBJbckcCNBDBDXEbuhjbP68n+scUd3k/U2EkyM9nw+I/jPiL4cLF/Al06CF96wRltFda16sxDFrxsI1v0/g==
+espree@^10.0.1, espree@^10.3.0:
+  version "10.3.0"
+  resolved "https://registry.yarnpkg.com/espree/-/espree-10.3.0.tgz#29267cf5b0cb98735b65e64ba07e0ed49d1eed8a"
+  integrity sha512-0QYC8b24HWY8zjRnDTL6RiHfDbAWn63qb4LMj1Z4b076A4une81+z03Kg7l7mn/48PUTqoLptSXez8oknU8Clg==
   dependencies:
-    acorn "^8.12.0"
+    acorn "^8.14.0"
     acorn-jsx "^5.3.2"
-    eslint-visitor-keys "^4.1.0"
+    eslint-visitor-keys "^4.2.0"
 
 espree@^9.3.1:
   version "9.6.1"