From 62d12a8a8d24d89c4aa447b773cffabcd0d630d9 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Mon, 4 Nov 2024 12:16:26 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .rubocop_todo/gitlab/strong_memoize_attr.yml  |  12 -
 .rubocop_todo/layout/line_length.yml          |  15 -
 .../lint/useless_numeric_operation.yml        |   6 -
 GITLAB_KAS_VERSION                            |   2 +-
 .../design_notes/design_discussion.vue        |   2 +-
 .../javascripts/diffs/components/app.vue      |   2 +
 .../diffs/components/diff_file.vue            |   9 +
 .../incidents/timeline_events_form.vue        |   2 +-
 .../repository/components/table/index.vue     |   2 +-
 .../design_notes/design_discussion.vue        |   2 +-
 .../rich_timestamp_tooltip.stories.js         |  23 +
 app/assets/stylesheets/framework/common.scss  |   5 -
 app/assets/stylesheets/framework/tables.scss  |   4 +-
 .../page_bundles/design_management.scss       |   2 +-
 app/assets/stylesheets/page_bundles/tree.scss |  42 +-
 app/components/pajamas/avatar_component.rb    |  33 +-
 app/controllers/application_controller.rb     |  11 +-
 app/controllers/concerns/boards_actions.rb    |  10 +-
 app/controllers/concerns/creates_commit.rb    |   5 +-
 app/controllers/concerns/find_snippet.rb      |   5 +-
 app/controllers/concerns/impersonation.rb     |   5 +-
 app/controllers/concerns/issuable_actions.rb  |  21 +-
 .../concerns/issuable_collections.rb          |  51 +-
 app/controllers/concerns/known_sign_in.rb     |   5 +-
 app/controllers/ide_controller.rb             |   9 +-
 app/controllers/import/github_controller.rb   |   5 +-
 app/controllers/invites_controller.rb         |  12 +-
 .../oauth/authorizations_controller.rb        |   3 +-
 app/finders/autocomplete/users_finder.rb      |   2 +-
 app/graphql/types/merge_request_type.rb       |  40 +-
 app/graphql/types/milestone_sort_enum.rb      |  10 +-
 app/graphql/types/milestone_type.rb           |   6 +-
 .../types/namespace/package_settings_type.rb  |  12 +-
 app/graphql/types/notes/noteable_interface.rb |   6 +-
 .../types/packages/composer/metadatum_type.rb |   3 +-
 .../packages/conan/file_metadatum_type.rb     |  15 +-
 .../types/packages/helm/dependency_type.rb    |   9 +-
 .../types/packages/helm/metadata_type.rb      |  24 +-
 .../nuget/dependency_link_metadatum_type.rb   |   6 +-
 .../packages/package_dependency_link_type.rb  |   3 +-
 .../types/packages/package_details_type.rb    |  18 +-
 .../types/packages/package_type_enum.rb       |   4 +-
 .../types/packages/pypi/metadatum_type.rb     |   3 +-
 app/graphql/types/project_type.rb             |   6 +-
 app/helpers/search_helper.rb                  |   8 +-
 .../concerns/integrations/base/integration.rb | 821 ++++++++++++++++++
 app/models/integration.rb                     | 793 +----------------
 .../integrations/instance/integration.rb      |  27 +
 .../integrations/instance_integration.rb      |  12 -
 app/models/user.rb                            |  13 +
 .../concerns/users/participable_service.rb    |   2 +
 app/views/layouts/_page.html.haml             |   1 +
 ...autocomplete_group_search_optimization.yml |   9 +
 config/initializers/0_license.rb              |  29 +
 config/sidekiq_queues.yml                     |   4 +
 db/docs/instance_integrations.yml             |   2 +-
 db/docs/pipl_users.yml                        |  11 +
 .../20241016095329_create_pipl_users_table.rb |  19 +
 db/schema_migrations/20241016095329           |   1 +
 db/structure.sql                              |  16 +
 doc/administration/issue_closing_pattern.md   |  13 +-
 doc/api/graphql/reference/index.md            |   1 +
 doc/development/sidekiq/idempotent_jobs.md    |   4 +-
 doc/subscriptions/gitlab_com/index.md         |   3 +-
 doc/subscriptions/self_managed/index.md       |   4 +-
 .../project/merge_requests/dependencies.md    |  66 +-
 doc/user/project/merge_requests/manage.md     |   8 +-
 .../img/multiline-comment-saved_v13_3.png     | Bin 34361 -> 0 bytes
 .../img/multiline-comment-saved_v17_5.png     | Bin 0 -> 15226 bytes
 .../project/merge_requests/reviews/index.md   |  18 +-
 .../merge_requests/reviews/suggestions.md     |   9 +-
 doc/user/project/merge_requests/widgets.md    |   2 +-
 lib/gitlab/middleware/go.rb                   |   2 +-
 locale/gitlab.pot                             |   3 +
 package.json                                  |   2 +-
 .../integrations/instance/integrations.rb     |   7 +
 .../integrations/instance_integrations.rb     |   7 -
 .../finders/autocomplete/users_finder_spec.rb |  14 +
 .../notes/store/legacy_notes/mutation_spec.js | 507 +++++------
 spec/helpers/search_helper_spec.rb            |  65 ++
 spec/lib/gitlab/middleware/go_spec.rb         |   7 +-
 .../integrations/instance/integration_spec.rb |  31 +
 spec/models/user_spec.rb                      |  53 ++
 spec/scripts/internal_events/server_spec.rb   |   4 +-
 .../projects/participants_service_spec.rb     |  14 +
 .../workers/idempotency_shared_examples.rb    |   4 +-
 yarn.lock                                     | 112 +--
 87 files changed, 1788 insertions(+), 1412 deletions(-)
 delete mode 100644 .rubocop_todo/lint/useless_numeric_operation.yml
 create mode 100644 app/assets/javascripts/work_items/components/rich_timestamp_tooltip.stories.js
 create mode 100644 app/models/concerns/integrations/base/integration.rb
 create mode 100644 app/models/integrations/instance/integration.rb
 delete mode 100644 app/models/integrations/instance_integration.rb
 create mode 100644 config/feature_flags/gitlab_com_derisk/autocomplete_group_search_optimization.yml
 create mode 100644 config/initializers/0_license.rb
 create mode 100644 db/docs/pipl_users.yml
 create mode 100644 db/migrate/20241016095329_create_pipl_users_table.rb
 create mode 100644 db/schema_migrations/20241016095329
 delete mode 100644 doc/user/project/merge_requests/reviews/img/multiline-comment-saved_v13_3.png
 create mode 100644 doc/user/project/merge_requests/reviews/img/multiline-comment-saved_v17_5.png
 create mode 100644 spec/factories/integrations/instance/integrations.rb
 delete mode 100644 spec/factories/integrations/instance_integrations.rb
 create mode 100644 spec/models/integrations/instance/integration_spec.rb

diff --git a/.rubocop_todo/gitlab/strong_memoize_attr.yml b/.rubocop_todo/gitlab/strong_memoize_attr.yml
index 8cf4cf5655d..7309e1d9753 100644
--- a/.rubocop_todo/gitlab/strong_memoize_attr.yml
+++ b/.rubocop_todo/gitlab/strong_memoize_attr.yml
@@ -2,19 +2,7 @@
 # Cop supports --autocorrect.
 Gitlab/StrongMemoizeAttr:
   Exclude:
-    - 'app/components/pajamas/avatar_component.rb'
-    - 'app/controllers/application_controller.rb'
-    - 'app/controllers/concerns/boards_actions.rb'
-    - 'app/controllers/concerns/creates_commit.rb'
-    - 'app/controllers/concerns/find_snippet.rb'
-    - 'app/controllers/concerns/impersonation.rb'
-    - 'app/controllers/concerns/issuable_actions.rb'
-    - 'app/controllers/concerns/issuable_collections.rb'
-    - 'app/controllers/concerns/known_sign_in.rb'
     - 'app/controllers/concerns/wiki_actions.rb'
-    - 'app/controllers/ide_controller.rb'
-    - 'app/controllers/import/github_controller.rb'
-    - 'app/controllers/invites_controller.rb'
     - 'app/controllers/jira_connect/application_controller.rb'
     - 'app/controllers/jwt_controller.rb'
     - 'app/controllers/oauth/authorizations_controller.rb'
diff --git a/.rubocop_todo/layout/line_length.yml b/.rubocop_todo/layout/line_length.yml
index 07a492e1de6..0ef26bb32cf 100644
--- a/.rubocop_todo/layout/line_length.yml
+++ b/.rubocop_todo/layout/line_length.yml
@@ -122,22 +122,7 @@ Layout/LineLength:
     - 'app/graphql/types/issue_sort_enum.rb'
     - 'app/graphql/types/issue_type.rb'
     - 'app/graphql/types/member_interface.rb'
-    - 'app/graphql/types/merge_request_type.rb'
-    - 'app/graphql/types/milestone_sort_enum.rb'
-    - 'app/graphql/types/milestone_type.rb'
-    - 'app/graphql/types/namespace/package_settings_type.rb'
     - 'app/graphql/types/notes/diff_position_input_type.rb'
-    - 'app/graphql/types/notes/noteable_interface.rb'
-    - 'app/graphql/types/packages/composer/metadatum_type.rb'
-    - 'app/graphql/types/packages/conan/file_metadatum_type.rb'
-    - 'app/graphql/types/packages/helm/dependency_type.rb'
-    - 'app/graphql/types/packages/helm/metadata_type.rb'
-    - 'app/graphql/types/packages/nuget/dependency_link_metadatum_type.rb'
-    - 'app/graphql/types/packages/package_dependency_link_type.rb'
-    - 'app/graphql/types/packages/package_details_type.rb'
-    - 'app/graphql/types/packages/package_type_enum.rb'
-    - 'app/graphql/types/packages/pypi/metadatum_type.rb'
-    - 'app/graphql/types/project_type.rb'
     - 'app/graphql/types/query_type.rb'
     - 'app/graphql/types/repository/blob_type.rb'
     - 'app/graphql/types/repository_type.rb'
diff --git a/.rubocop_todo/lint/useless_numeric_operation.yml b/.rubocop_todo/lint/useless_numeric_operation.yml
deleted file mode 100644
index a45a71a1989..00000000000
--- a/.rubocop_todo/lint/useless_numeric_operation.yml
+++ /dev/null
@@ -1,6 +0,0 @@
----
-# Cop supports --autocorrect.
-Lint/UselessNumericOperation:
-  Details: grace period
-  Exclude:
-    - 'ee/spec/lib/gitlab/geo_spec.rb'
diff --git a/GITLAB_KAS_VERSION b/GITLAB_KAS_VERSION
index 8e3ba8944b0..385b9bcc0b6 100644
--- a/GITLAB_KAS_VERSION
+++ b/GITLAB_KAS_VERSION
@@ -1 +1 @@
-e8ecda472f3b2d7ea74fda18e64d9bf77e2e1487
+2bb6448d821d9436d6b74b064a4cb48965603182
diff --git a/app/assets/javascripts/design_management/components/design_notes/design_discussion.vue b/app/assets/javascripts/design_management/components/design_notes/design_discussion.vue
index a01c3a05a71..f272c5375d5 100644
--- a/app/assets/javascripts/design_management/components/design_notes/design_discussion.vue
+++ b/app/assets/javascripts/design_management/components/design_notes/design_discussion.vue
@@ -302,7 +302,7 @@ export default {
   <div class="design-discussion-wrapper" @click="$emit('update-active-discussion')">
     <design-note-pin :is-resolved="discussion.resolved" :label="discussion.index" />
     <ul
-      class="design-discussion bordered-box gl-relative gl-list-none gl-p-0"
+      class="design-discussion gl-border gl-relative gl-list-none gl-rounded-base gl-border-section gl-p-0"
       :class="{ 'gl-bg-blue-50': isDiscussionActive }"
       data-testid="design-discussion-content"
     >
diff --git a/app/assets/javascripts/diffs/components/app.vue b/app/assets/javascripts/diffs/components/app.vue
index 61eb9c55ff4..faeec1764f7 100644
--- a/app/assets/javascripts/diffs/components/app.vue
+++ b/app/assets/javascripts/diffs/components/app.vue
@@ -824,6 +824,7 @@ export default {
                     :can-current-user-fork="canCurrentUserFork"
                     :view-diffs-file-by-file="viewDiffsFileByFile"
                     :active="active"
+                    :is-diff-view-active="currentDiffFileId === item.file_hash"
                   />
                 </dynamic-scroller-item>
               </template>
@@ -844,6 +845,7 @@ export default {
                 :help-page-path="helpPagePath"
                 :can-current-user-fork="canCurrentUserFork"
                 :view-diffs-file-by-file="viewDiffsFileByFile"
+                :is-diff-view-active="currentDiffFileId === file.file_hash"
               />
             </template>
             <div
diff --git a/app/assets/javascripts/diffs/components/diff_file.vue b/app/assets/javascripts/diffs/components/diff_file.vue
index c3fdcfa6097..de5bec7bb45 100644
--- a/app/assets/javascripts/diffs/components/diff_file.vue
+++ b/app/assets/javascripts/diffs/components/diff_file.vue
@@ -104,6 +104,11 @@ export default {
       required: false,
       default: null,
     },
+    isDiffViewActive: {
+      type: Boolean,
+      required: false,
+      default: false,
+    },
   },
   idState() {
     return {
@@ -415,6 +420,8 @@ export default {
       'has-body': showBody,
       'is-virtual-scrolling': isVirtualScrollingEnabled,
       'linked-file': isLinkedFile,
+      'gl-border-gray-200': isDiffViewActive && !file.conflict_type,
+      'gl-border-red-700': isDiffViewActive && file.conflict_type,
     }"
     :data-path="file.new_path"
     class="diff-file file-holder gl-mb-5"
@@ -475,6 +482,8 @@ export default {
         hasBodyClasses.header,
         {
           '!gl-rounded-none !gl-bg-red-200': file.conflict_type,
+          '!gl-bg-strong': isDiffViewActive && !file.conflict_type,
+          '!gl-bg-red-300': isDiffViewActive && file.conflict_type,
           '!gl-rounded-tl-none !gl-rounded-tr-none': file.conflict_type && isCollapsed,
           '!gl-border-0': file.conflict_type || isCollapsed,
         },
diff --git a/app/assets/javascripts/issues/show/components/incidents/timeline_events_form.vue b/app/assets/javascripts/issues/show/components/incidents/timeline_events_form.vue
index 1f72c8bcbe0..288b8ffc90b 100644
--- a/app/assets/javascripts/issues/show/components/incidents/timeline_events_form.vue
+++ b/app/assets/javascripts/issues/show/components/incidents/timeline_events_form.vue
@@ -232,7 +232,7 @@ export default {
           :restricted-tool-bar-items="$options.restrictedToolBarItems"
           markdown-docs-path=""
           :enable-preview="false"
-          class="bordered-box gl-mt-0"
+          class="gl-border gl-mt-0 gl-rounded-base gl-border-section"
         >
           <template #textarea>
             <gl-form-textarea
diff --git a/app/assets/javascripts/repository/components/table/index.vue b/app/assets/javascripts/repository/components/table/index.vue
index 8a2393bdbb2..19f2814aa57 100644
--- a/app/assets/javascripts/repository/components/table/index.vue
+++ b/app/assets/javascripts/repository/components/table/index.vue
@@ -117,7 +117,7 @@ export default {
 
 <template>
   <div class="tree-content-holder">
-    <div class="table-holder bordered-box">
+    <div class="table-holder gl-border gl-rounded-base gl-border-section">
       <table
         :aria-label="tableCaption"
         class="table tree-table"
diff --git a/app/assets/javascripts/work_items/components/design_management/design_notes/design_discussion.vue b/app/assets/javascripts/work_items/components/design_management/design_notes/design_discussion.vue
index 705afd21b50..10c742b9788 100644
--- a/app/assets/javascripts/work_items/components/design_management/design_notes/design_discussion.vue
+++ b/app/assets/javascripts/work_items/components/design_management/design_notes/design_discussion.vue
@@ -108,7 +108,7 @@ export default {
   <div class="design-discussion-wrapper" @click="$emit('update-active-discussion')">
     <design-note-pin :is-resolved="discussion.resolved" :label="discussion.index" />
     <ul
-      class="design-discussion bordered-box gl-relative gl-list-none gl-p-0"
+      class="design-discussion gl-border gl-relative gl-list-none gl-rounded-base gl-border-section gl-p-0"
       :class="{ 'gl-bg-blue-50': isDiscussionActive }"
       data-testid="design-discussion-content"
     >
diff --git a/app/assets/javascripts/work_items/components/rich_timestamp_tooltip.stories.js b/app/assets/javascripts/work_items/components/rich_timestamp_tooltip.stories.js
new file mode 100644
index 00000000000..71740f1a0f7
--- /dev/null
+++ b/app/assets/javascripts/work_items/components/rich_timestamp_tooltip.stories.js
@@ -0,0 +1,23 @@
+import RichTimestampTooltip from './rich_timestamp_tooltip.vue';
+
+export default {
+  component: RichTimestampTooltip,
+  title: 'work_items/rich_timestamp_tooltip',
+};
+
+const Template = (args, { argTypes }) => ({
+  components: { RichTimestampTooltip },
+  props: Object.keys(argTypes),
+
+  template: `
+   <div>
+    <span ref="targetElement">example text</span>
+    <rich-timestamp-tooltip :target="() => $refs.targetElement" v-bind="$props" />
+  </div>`,
+});
+
+export const Default = Template.bind({});
+Default.args = {
+  rawTimestamp: '2023-10-26T14:32:12.000Z',
+  timestampTypeText: 'Created',
+};
diff --git a/app/assets/stylesheets/framework/common.scss b/app/assets/stylesheets/framework/common.scss
index f15baf284cf..35b21d34bcb 100644
--- a/app/assets/stylesheets/framework/common.scss
+++ b/app/assets/stylesheets/framework/common.scss
@@ -316,11 +316,6 @@ li.note {
   }
 }
 
-.bordered-box {
-  border: 1px solid $border-color;
-  border-radius: $gl-border-radius-base;
-}
-
 .tooltip {
   .tooltip-inner {
     word-wrap: break-word;
diff --git a/app/assets/stylesheets/framework/tables.scss b/app/assets/stylesheets/framework/tables.scss
index 27caf17e439..f48ba248b35 100644
--- a/app/assets/stylesheets/framework/tables.scss
+++ b/app/assets/stylesheets/framework/tables.scss
@@ -41,7 +41,7 @@ table {
       }
 
       th {
-        background-color: $gray-10;
+        @apply gl-bg-subtle;
         border-bottom: 0;
 
         &.wide {
@@ -53,7 +53,7 @@ table {
 
     .thead-white {
       th {
-        color: $gl-text-color-secondary;
+        @apply gl-text-subtle;
         border-top: 0;
       }
     }
diff --git a/app/assets/stylesheets/page_bundles/design_management.scss b/app/assets/stylesheets/page_bundles/design_management.scss
index 04919971a52..e861dbda482 100644
--- a/app/assets/stylesheets/page_bundles/design_management.scss
+++ b/app/assets/stylesheets/page_bundles/design_management.scss
@@ -178,7 +178,7 @@ $t-gray-a-16-design-pin: rgba($black, 0.16);
     .design-note {
       padding: $gl-padding-8;
       list-style: none;
-      border-top-left-radius: $gl-border-radius-base; // same border radius used by .bordered-box
+      border-top-left-radius: $gl-border-radius-base;
       border-top-right-radius: $gl-border-radius-base;
       @apply gl-transition-background;
 
diff --git a/app/assets/stylesheets/page_bundles/tree.scss b/app/assets/stylesheets/page_bundles/tree.scss
index 30a9e2d402e..0c4def48dfe 100644
--- a/app/assets/stylesheets/page_bundles/tree.scss
+++ b/app/assets/stylesheets/page_bundles/tree.scss
@@ -92,9 +92,10 @@
 
   table.tree-table {
     margin-bottom: 0;
+    @apply dark:gl-bg-gray-50;
 
     tr {
-      border-bottom: 1px solid var(--gray-50, $gray-50);
+      @apply gl-border-b gl-border-b-section;
 
       td,
       th {
@@ -102,28 +103,51 @@
       }
 
       th {
+        @apply gl-bg-subtle dark:gl-bg-gray-100;
         border: 0;
       }
 
       td {
-        border-color: var(--gl-border-color-default);
+        @apply gl-border-section;
       }
 
       &:hover:not(.tree-truncated-warning) {
         td {
-          background-color: var(--blue-50, $blue-50);
+          @apply gl-bg-blue-50 dark:gl-bg-gray-100;
           background-clip: padding-box;
-          border-top: 1px solid var(--blue-200, $blue-200);
-          border-bottom: 1px solid var(--blue-200, $blue-200);
+          border-top: 1px solid var(--gl-action-selected-border-color-default);
+          border-bottom: 1px solid var(--gl-action-selected-border-color-default);
           cursor: pointer;
+
+          &:first-of-type {
+            box-shadow: inset 1px 0 0 0 var(--gl-action-selected-border-color-default);
+          }
+
+          &:last-of-type {
+            box-shadow: inset -1px 0 0 0 var(--gl-action-selected-border-color-default);
+          }
+        }
+
+        &:last-of-type td {
+          box-shadow: inset 0 -1px 0 0 var(--gl-action-selected-border-color-default);
+
+          &:first-of-type {
+            box-shadow: inset 1px 0 0 0 var(--gl-action-selected-border-color-default),
+              inset 0 -1px 0 0 var(--gl-action-selected-border-color-default);
+            border-bottom-left-radius: calc(#{$gl-border-radius-base} - 1px);
+          }
+
+          &:last-of-type {
+            box-shadow: inset -1px 0 0 0 var(--gl-action-selected-border-color-default),
+              inset 0 -1px 0 0 var(--gl-action-selected-border-color-default);
+            border-bottom-right-radius: calc(#{$gl-border-radius-base} - 1px);
+          }
         }
       }
 
       &.selected {
         td {
-          background: var(--gray-50, $gray-50);
-          border-top: 1px solid var(--gl-border-color-default);
-          border-bottom: 1px solid var(--gl-border-color-default);
+          @apply gl-bg-strong dark:gl-bg-gray-100 gl-border-t gl-border-b;
         }
       }
 
@@ -151,7 +175,7 @@
 
       i,
       a {
-        color: var(--gl-text-color-default);
+        @apply gl-text-default;
       }
 
       img {
diff --git a/app/components/pajamas/avatar_component.rb b/app/components/pajamas/avatar_component.rb
index 91aef8a98b2..d37e0135b58 100644
--- a/app/components/pajamas/avatar_component.rb
+++ b/app/components/pajamas/avatar_component.rb
@@ -43,26 +43,25 @@ module Pajamas
     end
 
     def src
-      strong_memoize(:src) do
-        if @item.is_a?(String)
-          @item
-        elsif @item.is_a?(User)
-          # Users show a gravatar instead of an identicon. Also avatars of
-          # blocked users are only shown if the current_user is an admin.
-          # To not duplicate this logic, we are using existing helpers here.
-          current_user = begin
-            helpers.current_user
-          rescue StandardError
-            nil
-          end
-          helpers.avatar_icon_for_user(@item, @size, current_user: current_user)
-        elsif @item.is_a?(AvatarEmail)
-          helpers.avatar_icon_for_email(@item.email, @size)
-        elsif @item.try(:avatar_url)
-          "#{@item.avatar_url}?width=#{@size}"
+      if @item.is_a?(String)
+        @item
+      elsif @item.is_a?(User)
+        # Users show a gravatar instead of an identicon. Also avatars of
+        # blocked users are only shown if the current_user is an admin.
+        # To not duplicate this logic, we are using existing helpers here.
+        current_user = begin
+          helpers.current_user
+        rescue StandardError
+          nil
         end
+        helpers.avatar_icon_for_user(@item, @size, current_user: current_user)
+      elsif @item.is_a?(AvatarEmail)
+        helpers.avatar_icon_for_email(@item.email, @size)
+      elsif @item.try(:avatar_url)
+        "#{@item.avatar_url}?width=#{@size}"
       end
     end
+    strong_memoize_attr :src
 
     def srcset
       return unless src
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
index 54fed1d04a9..05b77ac0fa2 100644
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@@ -180,14 +180,13 @@ class ApplicationController < BaseActionController
   # (e.g. tokens) to authenticate the user, whereas Devise sets current_user.
   #
   def auth_user
-    strong_memoize(:auth_user) do
-      if user_signed_in?
-        current_user
-      else
-        try(:authenticated_user)
-      end
+    if user_signed_in?
+      current_user
+    else
+      try(:authenticated_user)
     end
   end
+  strong_memoize_attr :auth_user
 
   # Devise defines current_user to be:
   #
diff --git a/app/controllers/concerns/boards_actions.rb b/app/controllers/concerns/boards_actions.rb
index 188e77c8168..7252698ca6c 100644
--- a/app/controllers/concerns/boards_actions.rb
+++ b/app/controllers/concerns/boards_actions.rb
@@ -39,20 +39,18 @@ module BoardsActions
   def push_licensed_features; end
 
   def board
-    strong_memoize(:board) do
-      board_finder.execute.first
-    end
+    board_finder.execute.first
   end
+  strong_memoize_attr :board
 
   def board_visit_service
     Boards::Visits::CreateService
   end
 
   def parent
-    strong_memoize(:parent) do
-      group? ? group : project
-    end
+    group? ? group : project
   end
+  strong_memoize_attr :parent
 
   def board_path(board)
     if group?
diff --git a/app/controllers/concerns/creates_commit.rb b/app/controllers/concerns/creates_commit.rb
index f3f83306c04..c3e01de4cdd 100644
--- a/app/controllers/concerns/creates_commit.rb
+++ b/app/controllers/concerns/creates_commit.rb
@@ -127,16 +127,15 @@ module CreatesCommit
   # rubocop:disable Gitlab/ModuleWithInstanceVariables
   # rubocop: disable CodeReuse/ActiveRecord
   def merge_request_exists?
-    strong_memoize(:merge_request) do
-      MergeRequestsFinder.new(current_user, project_id: @project.id)
+    MergeRequestsFinder.new(current_user, project_id: @project.id)
         .execute
         .opened
         .find_by(
           source_project_id: @project_to_commit_into,
           source_branch: @branch_name,
           target_branch: @start_branch)
-    end
   end
+  strong_memoize_attr :merge_request_exists?
   # rubocop: enable CodeReuse/ActiveRecord
   # rubocop:enable Gitlab/ModuleWithInstanceVariables
 
diff --git a/app/controllers/concerns/find_snippet.rb b/app/controllers/concerns/find_snippet.rb
index 8a4adbb608f..1fdbf02430f 100644
--- a/app/controllers/concerns/find_snippet.rb
+++ b/app/controllers/concerns/find_snippet.rb
@@ -8,10 +8,9 @@ module FindSnippet
 
   # rubocop:disable CodeReuse/ActiveRecord
   def snippet
-    strong_memoize(:snippet) do
-      snippet_klass.inc_relations_for_view.find_by(snippet_find_params)
-    end
+    snippet_klass.inc_relations_for_view.find_by(snippet_find_params)
   end
+  strong_memoize_attr :snippet
   # rubocop:enable CodeReuse/ActiveRecord
 
   def snippet_klass
diff --git a/app/controllers/concerns/impersonation.rb b/app/controllers/concerns/impersonation.rb
index aac55af0bac..558d61e9b0f 100644
--- a/app/controllers/concerns/impersonation.rb
+++ b/app/controllers/concerns/impersonation.rb
@@ -53,8 +53,7 @@ module Impersonation
   end
 
   def impersonator
-    strong_memoize(:impersonator) do
-      User.find(session[:impersonator_id]) if session[:impersonator_id]
-    end
+    User.find(session[:impersonator_id]) if session[:impersonator_id]
   end
+  strong_memoize_attr :impersonator
 end
diff --git a/app/controllers/concerns/issuable_actions.rb b/app/controllers/concerns/issuable_actions.rb
index 47cc5a57da4..deeac362a82 100644
--- a/app/controllers/concerns/issuable_actions.rb
+++ b/app/controllers/concerns/issuable_actions.rb
@@ -166,20 +166,19 @@ module IssuableActions
   private
 
   def notes_filter
-    strong_memoize(:notes_filter) do
-      notes_filter_param = params[:notes_filter]&.to_i
+    notes_filter_param = params[:notes_filter]&.to_i
 
-      # GitLab Geo does not expect database UPDATE or INSERT statements to happen
-      # on GET requests.
-      # This is just a fail-safe in case notes_filter is sent via GET request in GitLab Geo.
-      # In some cases, we also force the filter to not be persisted with the `persist_filter` param
-      if Gitlab::Database.read_only? || params[:persist_filter] == 'false'
-        notes_filter_param || current_user&.notes_filter_for(issuable)
-      else
-        current_user&.set_notes_filter(notes_filter_param, issuable) || notes_filter_param
-      end
+    # GitLab Geo does not expect database UPDATE or INSERT statements to happen
+    # on GET requests.
+    # This is just a fail-safe in case notes_filter is sent via GET request in GitLab Geo.
+    # In some cases, we also force the filter to not be persisted with the `persist_filter` param
+    if Gitlab::Database.read_only? || params[:persist_filter] == 'false'
+      notes_filter_param || current_user&.notes_filter_for(issuable)
+    else
+      current_user&.set_notes_filter(notes_filter_param, issuable) || notes_filter_param
     end
   end
+  strong_memoize_attr :notes_filter
 
   def discussion_cache_context
     [current_user&.cache_key, project.team.human_max_access(current_user&.id), 'v2'].join(':')
diff --git a/app/controllers/concerns/issuable_collections.rb b/app/controllers/concerns/issuable_collections.rb
index 2cbdce1af54..c604e343dbd 100644
--- a/app/controllers/concerns/issuable_collections.rb
+++ b/app/controllers/concerns/issuable_collections.rb
@@ -59,37 +59,36 @@ module IssuableCollections
 
   # rubocop:disable Gitlab/ModuleWithInstanceVariables
   def finder_options
-    strong_memoize(:finder_options) do
-      params[:state] = default_state if params[:state].blank?
+    params[:state] = default_state if params[:state].blank?
 
-      options = {
-        scope: params[:scope],
-        state: params[:state],
-        confidential: Gitlab::Utils.to_boolean(params[:confidential]),
-        sort: set_sort_order
-      }
+    options = {
+      scope: params[:scope],
+      state: params[:state],
+      confidential: Gitlab::Utils.to_boolean(params[:confidential]),
+      sort: set_sort_order
+    }
 
-      # Used by view to highlight active option
-      @sort = options[:sort]
+    # Used by view to highlight active option
+    @sort = options[:sort]
 
-      # When a user looks for an exact iid, we do not filter by search but only by iid
-      if params[:search] =~ /^#(?<iid>\d+)\z/
-        options[:iids] = Regexp.last_match[:iid]
-        params[:search] = nil
-      end
-
-      if @project
-        options[:project_id] = @project.id
-        options[:attempt_project_search_optimizations] = true
-      elsif @group
-        options[:group_id] = @group.id
-        options[:include_subgroups] = true
-        options[:attempt_group_search_optimizations] = true
-      end
-
-      params.permit(finder_type.valid_params).merge(options)
+    # When a user looks for an exact iid, we do not filter by search but only by iid
+    if params[:search] =~ /^#(?<iid>\d+)\z/
+      options[:iids] = Regexp.last_match[:iid]
+      params[:search] = nil
     end
+
+    if @project
+      options[:project_id] = @project.id
+      options[:attempt_project_search_optimizations] = true
+    elsif @group
+      options[:group_id] = @group.id
+      options[:include_subgroups] = true
+      options[:attempt_group_search_optimizations] = true
+    end
+
+    params.permit(finder_type.valid_params).merge(options)
   end
+  strong_memoize_attr :finder_options
   # rubocop:enable Gitlab/ModuleWithInstanceVariables
 
   def default_state
diff --git a/app/controllers/concerns/known_sign_in.rb b/app/controllers/concerns/known_sign_in.rb
index 6bbdde19f23..957f868b3f8 100644
--- a/app/controllers/concerns/known_sign_in.rb
+++ b/app/controllers/concerns/known_sign_in.rb
@@ -36,10 +36,9 @@ module KnownSignIn
   end
 
   def sessions
-    strong_memoize(:session) do
-      ActiveSession.list(current_user).reject(&:is_impersonated)
-    end
+    ActiveSession.list(current_user).reject(&:is_impersonated)
   end
+  strong_memoize_attr :sessions
 
   def known_ip_addresses
     [current_user.last_sign_in_ip, sessions.map(&:ip_address)].flatten
diff --git a/app/controllers/ide_controller.rb b/app/controllers/ide_controller.rb
index 1861f0692d8..92162844361 100644
--- a/app/controllers/ide_controller.rb
+++ b/app/controllers/ide_controller.rb
@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
 class IdeController < ApplicationController
+  include Gitlab::Utils::StrongMemoize
   include WebIdeCSP
   include StaticObjectExternalStorageCSP
-  include Gitlab::Utils::StrongMemoize
   include ProductAnalyticsTracking
 
   before_action :authorize_read_project!, only: [:index]
@@ -63,12 +63,11 @@ class IdeController < ApplicationController
   end
 
   def project
-    strong_memoize(:project) do
-      next unless params[:project_id].present?
+    return unless params[:project_id].present?
 
-      Project.find_by_full_path(params[:project_id])
-    end
+    Project.find_by_full_path(params[:project_id])
   end
+  strong_memoize_attr :project
 
   def tracking_namespace_source
     project.namespace
diff --git a/app/controllers/import/github_controller.rb b/app/controllers/import/github_controller.rb
index 1973e03f8a4..7a826c421a7 100644
--- a/app/controllers/import/github_controller.rb
+++ b/app/controllers/import/github_controller.rb
@@ -154,10 +154,9 @@ class Import::GithubController < Import::BaseController
 
   override :provider_url
   def provider_url
-    strong_memoize(:provider_url) do
-      oauth_config&.dig('url').presence || 'https://github.com'
-    end
+    oauth_config&.dig('url').presence || 'https://github.com'
   end
+  strong_memoize_attr :provider_url
 
   private
 
diff --git a/app/controllers/invites_controller.rb b/app/controllers/invites_controller.rb
index 5922406ab33..16cd35c3643 100644
--- a/app/controllers/invites_controller.rb
+++ b/app/controllers/invites_controller.rb
@@ -56,17 +56,15 @@ class InvitesController < ApplicationController
   end
 
   def member?
-    strong_memoize(:is_member) do
-      @member.source.has_user?(current_user)
-    end
+    @member.source.has_user?(current_user)
   end
+  strong_memoize_attr :member?
 
   def member
-    strong_memoize(:member) do
-      @token = params[:id].to_s
-      Member.find_by_invite_token(@token)
-    end
+    @token = params[:id].to_s
+    Member.find_by_invite_token(@token)
   end
+  strong_memoize_attr :member
 
   def ensure_member_exists
     return if member
diff --git a/app/controllers/oauth/authorizations_controller.rb b/app/controllers/oauth/authorizations_controller.rb
index 7ae0f14fedd..c17b2ebc859 100644
--- a/app/controllers/oauth/authorizations_controller.rb
+++ b/app/controllers/oauth/authorizations_controller.rb
@@ -82,8 +82,9 @@ class Oauth::AuthorizationsController < Doorkeeper::AuthorizationsController
   end
 
   def doorkeeper_application
-    strong_memoize(:doorkeeper_application) { ::Doorkeeper::OAuth::Client.find(params['client_id'].to_s)&.application }
+    ::Doorkeeper::OAuth::Client.find(params['client_id'].to_s)&.application
   end
+  strong_memoize_attr :doorkeeper_application
 
   def application_has_read_user_scope?
     doorkeeper_application&.includes_scope?(Gitlab::Auth::READ_USER_SCOPE)
diff --git a/app/finders/autocomplete/users_finder.rb b/app/finders/autocomplete/users_finder.rb
index 16165d3ca73..2cb8dda7df5 100644
--- a/app/finders/autocomplete/users_finder.rb
+++ b/app/finders/autocomplete/users_finder.rb
@@ -34,7 +34,7 @@ module Autocomplete
         # Include current user if available to filter by "Me"
         items.unshift(current_user) if prepend_current_user?
 
-        items.unshift(author) if prepend_author? && author&.active?
+        items.unshift(author) if prepend_author? && author&.active? && !author&.import_user? && !author&.placeholder?
       end
 
       items = filter_users_by_push_ability(items)
diff --git a/app/graphql/types/merge_request_type.rb b/app/graphql/types/merge_request_type.rb
index dacdb9eee3e..67b6a254bc5 100644
--- a/app/graphql/types/merge_request_type.rb
+++ b/app/graphql/types/merge_request_type.rb
@@ -119,9 +119,9 @@ module Types
       alpha: { milestone: '16.5' },
       calls_gitaly: true
 
-    field :mergeable_discussions_state, GraphQL::Types::Boolean, null: true,
-      calls_gitaly: true,
-      description: 'Indicates if all discussions in the merge request have been resolved, allowing the merge request to be merged.'
+    field :mergeable_discussions_state, GraphQL::Types::Boolean, null: true, calls_gitaly: true,
+      description: 'Indicates if all discussions in the merge request have been resolved, ' \
+        'allowing the merge request to be merged.'
     field :rebase_commit_sha, GraphQL::Types::String, null: true,
       description: 'Rebase commit SHA of the merge request.'
     field :rebase_in_progress, GraphQL::Types::Boolean, method: :rebase_in_progress?, null: false, calls_gitaly: true,
@@ -163,7 +163,8 @@ module Types
       description: 'Pipeline running on the branch HEAD of the merge request.'
     field :pipelines,
       null: true,
-      description: 'Pipelines for the merge request. Note: for performance reasons, no more than the most recent 500 pipelines will be returned.',
+      description: 'Pipelines for the merge request. Note: for performance reasons, ' \
+        'no more than the most recent 500 pipelines will be returned.',
       resolver: Resolvers::MergeRequestPipelinesResolver
 
     field :assignees,
@@ -193,8 +194,12 @@ module Types
       description: 'Indicates if the merge request has conflicts.'
     field :milestone, Types::MilestoneType, null: true,
       description: 'Milestone of the merge request.'
-    field :participants, Types::MergeRequests::ParticipantType.connection_type, null: true, complexity: 15,
-      description: 'Participants in the merge request. This includes the author, assignees, reviewers, and users mentioned in notes.',
+    field :participants,
+      Types::MergeRequests::ParticipantType.connection_type,
+      null: true,
+      complexity: 15,
+      description: 'Participants in the merge request. This includes the author, ' \
+        'assignees, reviewers, and users mentioned in notes.',
       resolver: Resolvers::Users::ParticipantsResolver
     field :reference, GraphQL::Types::String, null: false, method: :to_reference,
       description: 'Internal reference of the merge request. Returned in shortened format by default.' do
@@ -240,11 +245,22 @@ module Types
       description: 'User who merged this merge request or set it to auto-merge.'
     field :mergeable, GraphQL::Types::Boolean, null: false, method: :mergeable?, calls_gitaly: true,
       description: 'Indicates if the merge request is mergeable.'
-    field :security_auto_fix, GraphQL::Types::Boolean, null: true,
-      description: 'Indicates if the merge request is created by @GitLab-Security-Bot.', deprecated: { reason: 'Security Auto Fix experiment feature was removed. It was always hidden behind `security_auto_fix` feature flag', milestone: '16.11' }
+    field :security_auto_fix,
+      GraphQL::Types::Boolean,
+      null: true,
+      description: 'Indicates if the merge request is created by @GitLab-Security-Bot.',
+      deprecated: {
+        reason: 'Security Auto Fix experiment feature was removed. ' \
+          'It was always hidden behind `security_auto_fix` feature flag',
+        milestone: '16.11'
+      }
 
     field :squash, GraphQL::Types::Boolean, null: false,
-      description: 'Indicates if the merge request is set to be squashed when merged. [Project settings](https://docs.gitlab.com/ee/user/project/merge_requests/squash_and_merge.html#configure-squash-options-for-a-project) may override this value. Use `squash_on_merge` instead to take project squash options into account.'
+      description: <<~HEREDOC.squish
+                   Indicates if the merge request is set to be squashed when merged.
+                   [Project settings](https://docs.gitlab.com/ee/user/project/merge_requests/squash_and_merge.html#configure-squash-options-for-a-project)
+                   may override this value. Use `squash_on_merge` instead to take project squash options into account.
+      HEREDOC
     field :squash_on_merge, GraphQL::Types::Boolean, null: false, method: :squash_on_merge?,
       description: 'Indicates if the merge request will be squashed when merged.'
     field :timelogs, Types::TimelogType.connection_type, null: false,
@@ -296,7 +312,11 @@ module Types
 
     def user_discussions_count
       BatchLoader::GraphQL.for(object.id).batch(key: :merge_request_user_discussions_count) do |ids, loader, args|
-        counts = Note.count_for_collection(ids, 'MergeRequest', 'COUNT(DISTINCT discussion_id) as count').index_by(&:noteable_id)
+        counts = Note.count_for_collection(
+          ids,
+          'MergeRequest',
+          'COUNT(DISTINCT discussion_id) as count'
+        ).index_by(&:noteable_id)
 
         ids.each do |id|
           loader.call(id, counts[id]&.count || 0)
diff --git a/app/graphql/types/milestone_sort_enum.rb b/app/graphql/types/milestone_sort_enum.rb
index 9f7dedb4c4c..e70bd07f791 100644
--- a/app/graphql/types/milestone_sort_enum.rb
+++ b/app/graphql/types/milestone_sort_enum.rb
@@ -7,7 +7,13 @@ module Types
 
     value 'DUE_DATE_ASC', 'Milestone due date by ascending order.', value: :due_date_asc
     value 'DUE_DATE_DESC', 'Milestone due date by descending order.', value: :due_date_desc
-    value 'EXPIRED_LAST_DUE_DATE_ASC', 'Group milestones in this order: non-expired milestones with due dates, non-expired milestones without due dates and expired milestones then sort by due date in ascending order.', value: :expired_last_due_date_asc
-    value 'EXPIRED_LAST_DUE_DATE_DESC', 'Group milestones in this order: non-expired milestones with due dates, non-expired milestones without due dates and expired milestones then sort by due date in descending order.', value: :expired_last_due_date_desc
+    value 'EXPIRED_LAST_DUE_DATE_ASC',
+      'Group milestones in this order: non-expired milestones with due dates, non-expired milestones ' \
+        'without due dates and expired milestones then sort by due date in ascending order.',
+      value: :expired_last_due_date_asc
+    value 'EXPIRED_LAST_DUE_DATE_DESC',
+      'Group milestones in this order: non-expired milestones with due dates, non-expired milestones ' \
+        'without due dates and expired milestones then sort by due date in descending order.',
+      value: :expired_last_due_date_desc
   end
 end
diff --git a/app/graphql/types/milestone_type.rb b/app/graphql/types/milestone_type.rb
index 36c7ee286e6..68a9299b387 100644
--- a/app/graphql/types/milestone_type.rb
+++ b/app/graphql/types/milestone_type.rb
@@ -27,10 +27,12 @@ module Types
       description: 'State of the milestone.'
 
     field :expired, GraphQL::Types::Boolean, null: false,
-      description: 'Expired state of the milestone (a milestone is expired when the due date is past the current date). Defaults to `false` when due date has not been set.'
+      description: 'Expired state of the milestone (a milestone is expired when the due date is past the current ' \
+        'date). Defaults to `false` when due date has not been set.'
 
     field :upcoming, GraphQL::Types::Boolean, null: false,
-      description: 'Upcoming state of the milestone (a milestone is upcoming when the start date is in the future). Defaults to `false` when start date has not been set.'
+      description: 'Upcoming state of the milestone (a milestone is upcoming when the start date is in the future). ' \
+        'Defaults to `false` when start date has not been set.'
 
     field :web_path, GraphQL::Types::String, null: false, method: :milestone_path,
       description: 'Web path of the milestone.'
diff --git a/app/graphql/types/namespace/package_settings_type.rb b/app/graphql/types/namespace/package_settings_type.rb
index 621cb091019..9a3ebc6d49e 100644
--- a/app/graphql/types/namespace/package_settings_type.rb
+++ b/app/graphql/types/namespace/package_settings_type.rb
@@ -10,13 +10,15 @@ module Types
 
     field :generic_duplicate_exception_regex, Types::UntrustedRegexp,
       null: true,
-      description: 'When generic_duplicates_allowed is false, you can publish duplicate packages with names that match this regex. Otherwise, this setting has no effect.'
+      description: 'When generic_duplicates_allowed is false, you can publish duplicate packages with names that ' \
+        'match this regex. Otherwise, this setting has no effect.'
     field :generic_duplicates_allowed, GraphQL::Types::Boolean,
       null: false,
       description: 'Indicates whether duplicate generic packages are allowed for this namespace.'
     field :maven_duplicate_exception_regex, Types::UntrustedRegexp,
       null: true,
-      description: 'When maven_duplicates_allowed is false, you can publish duplicate packages with names that match this regex. Otherwise, this setting has no effect.'
+      description: 'When maven_duplicates_allowed is false, you can publish duplicate packages with names that ' \
+        'match this regex. Otherwise, this setting has no effect.'
     field :maven_duplicates_allowed, GraphQL::Types::Boolean,
       null: false,
       description: 'Indicates whether duplicate Maven packages are allowed for this namespace.'
@@ -28,7 +30,8 @@ module Types
       description: 'Indicates whether npm package forwarding is allowed for this namespace.'
     field :nuget_duplicate_exception_regex, Types::UntrustedRegexp,
       null: true,
-      description: 'When nuget_duplicates_allowed is false, you can publish duplicate packages with names that match this regex. Otherwise, this setting has no effect. '
+      description: 'When nuget_duplicates_allowed is false, you can publish duplicate packages with names that ' \
+        'match this regex. Otherwise, this setting has no effect. '
     field :nuget_duplicates_allowed, GraphQL::Types::Boolean,
       null: false,
       description: 'Indicates whether duplicate NuGet packages are allowed for this namespace.'
@@ -37,7 +40,8 @@ module Types
       description: 'Indicates whether PyPI package forwarding is allowed for this namespace.'
     field :terraform_module_duplicate_exception_regex, Types::UntrustedRegexp,
       null: true,
-      description: 'When terraform_module_duplicates_allowed is false, you can publish duplicate packages with names that match this regex. Otherwise, this setting has no effect.'
+      description: 'When terraform_module_duplicates_allowed is false, you can publish duplicate packages with ' \
+        'names that match this regex. Otherwise, this setting has no effect.'
     field :terraform_module_duplicates_allowed, GraphQL::Types::Boolean,
       null: false,
       description: 'Indicates whether duplicate Terraform packages are allowed for this namespace.'
diff --git a/app/graphql/types/notes/noteable_interface.rb b/app/graphql/types/notes/noteable_interface.rb
index 3879f7be08f..e04da811b38 100644
--- a/app/graphql/types/notes/noteable_interface.rb
+++ b/app/graphql/types/notes/noteable_interface.rb
@@ -5,8 +5,10 @@ module Types
     module NoteableInterface
       include Types::BaseInterface
 
-      field :notes, resolver: Resolvers::Noteable::NotesResolver, null: false, description: "All notes on this noteable."
-      field :discussions, Types::Notes::DiscussionType.connection_type, null: false, description: "All discussions on this noteable."
+      field :notes, resolver: Resolvers::Noteable::NotesResolver, null: false,
+        description: "All notes on this noteable."
+      field :discussions, Types::Notes::DiscussionType.connection_type, null: false,
+        description: "All discussions on this noteable."
       field :commenters, Types::UserType.connection_type, null: false, description: "All commenters on this noteable."
 
       def self.resolve_type(object, context)
diff --git a/app/graphql/types/packages/composer/metadatum_type.rb b/app/graphql/types/packages/composer/metadatum_type.rb
index d28ee87b878..6da37617942 100644
--- a/app/graphql/types/packages/composer/metadatum_type.rb
+++ b/app/graphql/types/packages/composer/metadatum_type.rb
@@ -9,7 +9,8 @@ module Types
 
         authorize :read_package
 
-        field :composer_json, Types::Packages::Composer::JsonType, null: false, description: 'Data of the Composer JSON file.'
+        field :composer_json, Types::Packages::Composer::JsonType, null: false,
+          description: 'Data of the Composer JSON file.'
         field :target_sha, GraphQL::Types::String, null: false, description: 'Target SHA of the package.'
       end
     end
diff --git a/app/graphql/types/packages/conan/file_metadatum_type.rb b/app/graphql/types/packages/conan/file_metadatum_type.rb
index 3f6c4837796..fcc538ab245 100644
--- a/app/graphql/types/packages/conan/file_metadatum_type.rb
+++ b/app/graphql/types/packages/conan/file_metadatum_type.rb
@@ -11,11 +11,16 @@ module Types
 
         authorize :read_package
 
-        field :conan_file_type, ::Types::Packages::Conan::MetadatumFileTypeEnum, null: false, description: 'Type of the Conan file.'
-        field :conan_package_reference, GraphQL::Types::String, null: true, description: 'Reference of the Conan package.'
-        field :id, ::Types::GlobalIDType[::Packages::Conan::FileMetadatum], null: false, description: 'ID of the metadatum.'
-        field :package_revision, GraphQL::Types::String, null: true, description: 'Revision of the package.', method: :package_revision_value
-        field :recipe_revision, GraphQL::Types::String, null: false, description: 'Revision of the Conan recipe.', method: :recipe_revision_value
+        field :conan_file_type, ::Types::Packages::Conan::MetadatumFileTypeEnum, null: false,
+          description: 'Type of the Conan file.'
+        field :conan_package_reference, GraphQL::Types::String, null: true,
+          description: 'Reference of the Conan package.'
+        field :id, ::Types::GlobalIDType[::Packages::Conan::FileMetadatum], null: false,
+          description: 'ID of the metadatum.'
+        field :package_revision, GraphQL::Types::String, null: true, description: 'Revision of the package.',
+          method: :package_revision_value
+        field :recipe_revision, GraphQL::Types::String, null: false, description: 'Revision of the Conan recipe.',
+          method: :recipe_revision_value
       end
     end
   end
diff --git a/app/graphql/types/packages/helm/dependency_type.rb b/app/graphql/types/packages/helm/dependency_type.rb
index 9bf12d92004..dc513867c7e 100644
--- a/app/graphql/types/packages/helm/dependency_type.rb
+++ b/app/graphql/types/packages/helm/dependency_type.rb
@@ -9,10 +9,15 @@ module Types
         description 'Represents a Helm dependency'
 
         # Need to be synced with app/validators/json_schemas/helm_metadata.json#dependencies
-        field :alias, GraphQL::Types::String, null: true, description: 'Alias of the dependency.', resolver_method: :resolve_alias
+        field :alias,
+          GraphQL::Types::String,
+          null: true,
+          description: 'Alias of the dependency.',
+          resolver_method: :resolve_alias
         field :condition, GraphQL::Types::String, null: true, description: 'Condition of the dependency.'
         field :enabled, GraphQL::Types::Boolean, null: true, description: 'Indicates the dependency is enabled.'
-        field :import_values, [GraphQL::Types::JSON], null: true, description: 'Import-values of the dependency.', hash_key: :'import-values'
+        field :import_values, [GraphQL::Types::JSON], null: true, description: 'Import-values of the dependency.',
+          hash_key: :'import-values'
         field :name, GraphQL::Types::String, null: true, description: 'Name of the dependency.'
         field :repository, GraphQL::Types::String, null: true, description: 'Repository of the dependency.'
         field :tags, [GraphQL::Types::String], null: true, description: 'Tags of the dependency.'
diff --git a/app/graphql/types/packages/helm/metadata_type.rb b/app/graphql/types/packages/helm/metadata_type.rb
index 77062a48bc3..7d769a9ef5f 100644
--- a/app/graphql/types/packages/helm/metadata_type.rb
+++ b/app/graphql/types/packages/helm/metadata_type.rb
@@ -10,17 +10,31 @@ module Types
 
         # Need to be synced with app/validators/json_schemas/helm_metadata.json
         field :annotations, GraphQL::Types::JSON, null: true, description: 'Annotations for the chart.' # rubocop:disable Graphql/JSONType
-        field :api_version, GraphQL::Types::String, null: false, description: 'API version of the chart.', hash_key: :apiVersion
-        field :app_version, GraphQL::Types::String, null: true, description: 'App version of the chart.', hash_key: :appVersion
+        field :api_version,
+          GraphQL::Types::String,
+          null: false,
+          description: 'API version of the chart.',
+          hash_key: :apiVersion
+        field :app_version,
+          GraphQL::Types::String,
+          null: true,
+          description: 'App version of the chart.',
+          hash_key: :appVersion
         field :condition, GraphQL::Types::String, null: true, description: 'Condition for the chart.'
-        field :dependencies, [Types::Packages::Helm::DependencyType], null: true, description: 'Dependencies of the chart.'
+        field :dependencies, [Types::Packages::Helm::DependencyType], null: true,
+          description: 'Dependencies of the chart.'
         field :deprecated, GraphQL::Types::Boolean, null: true, description: 'Indicates if the chart is deprecated.'
         field :description, GraphQL::Types::String, null: true, description: 'Description of the chart.'
         field :home, GraphQL::Types::String, null: true, description: 'URL of the home page.'
         field :icon, GraphQL::Types::String, null: true, description: 'URL to an SVG or PNG image for the chart.'
         field :keywords, [GraphQL::Types::String], null: true, description: 'Keywords for the chart.'
-        field :kube_version, GraphQL::Types::String, null: true, description: 'Kubernetes versions for the chart.', hash_key: :kubeVersion
-        field :maintainers, [Types::Packages::Helm::MaintainerType], null: true, description: 'Maintainers of the chart.'
+        field :kube_version,
+          GraphQL::Types::String,
+          null: true,
+          description: 'Kubernetes versions for the chart.',
+          hash_key: :kubeVersion
+        field :maintainers, [Types::Packages::Helm::MaintainerType], null: true,
+          description: 'Maintainers of the chart.'
         field :name, GraphQL::Types::String, null: false, description: 'Name of the chart.'
         field :sources, [GraphQL::Types::String], null: true, description: 'URLs of the source code for the chart.'
         field :tags, GraphQL::Types::String, null: true, description: 'Tags for the chart.'
diff --git a/app/graphql/types/packages/nuget/dependency_link_metadatum_type.rb b/app/graphql/types/packages/nuget/dependency_link_metadatum_type.rb
index f410e62b56a..a51f78ad294 100644
--- a/app/graphql/types/packages/nuget/dependency_link_metadatum_type.rb
+++ b/app/graphql/types/packages/nuget/dependency_link_metadatum_type.rb
@@ -9,8 +9,10 @@ module Types
 
         authorize :read_package
 
-        field :id, ::Types::GlobalIDType[::Packages::Nuget::DependencyLinkMetadatum], null: false, description: 'ID of the metadatum.'
-        field :target_framework, GraphQL::Types::String, null: false, description: 'Target framework of the dependency link package.'
+        field :id, ::Types::GlobalIDType[::Packages::Nuget::DependencyLinkMetadatum], null: false,
+          description: 'ID of the metadatum.'
+        field :target_framework, GraphQL::Types::String, null: false,
+          description: 'Target framework of the dependency link package.'
       end
     end
   end
diff --git a/app/graphql/types/packages/package_dependency_link_type.rb b/app/graphql/types/packages/package_dependency_link_type.rb
index 8b1d4abf3ba..d49c467a53d 100644
--- a/app/graphql/types/packages/package_dependency_link_type.rb
+++ b/app/graphql/types/packages/package_dependency_link_type.rb
@@ -9,7 +9,8 @@ module Types
 
       field :dependency, Types::Packages::PackageDependencyType, null: true, description: 'Dependency.'
       field :dependency_type, Types::Packages::PackageDependencyTypeEnum, null: false, description: 'Dependency type.'
-      field :id, ::Types::GlobalIDType[::Packages::DependencyLink], null: false, description: 'ID of the dependency link.'
+      field :id, ::Types::GlobalIDType[::Packages::DependencyLink], null: false,
+        description: 'ID of the dependency link.'
       field :metadata, Types::Packages::DependencyLinkMetadataType, null: true, description: 'Dependency link metadata.'
 
       # NOTE: This method must be kept in sync with the union
diff --git a/app/graphql/types/packages/package_details_type.rb b/app/graphql/types/packages/package_details_type.rb
index 8b2600e10ff..a90b39b8f00 100644
--- a/app/graphql/types/packages/package_details_type.rb
+++ b/app/graphql/types/packages/package_details_type.rb
@@ -13,11 +13,17 @@ module Types
       field :versions, ::Types::Packages::PackageBaseType.connection_type, null: true,
         description: 'Other versions of the package.'
 
-      field :package_files, Types::Packages::PackageFileType.connection_type, null: true, method: :installable_package_files, description: 'Package files.'
+      field :package_files,
+        Types::Packages::PackageFileType.connection_type,
+        null: true,
+        method: :installable_package_files,
+        description: 'Package files.'
 
-      field :dependency_links, Types::Packages::PackageDependencyLinkType.connection_type, null: true, description: 'Dependency link.'
+      field :dependency_links, Types::Packages::PackageDependencyLinkType.connection_type, null: true,
+        description: 'Dependency link.'
 
-      field :composer_config_repository_url, GraphQL::Types::String, null: true, description: 'Url of the Composer setup endpoint.'
+      field :composer_config_repository_url, GraphQL::Types::String, null: true,
+        description: 'Url of the Composer setup endpoint.'
       field :composer_url, GraphQL::Types::String, null: true, description: 'Url of the Composer endpoint.'
       field :conan_url, GraphQL::Types::String, null: true, description: 'Url of the Conan project endpoint.'
       field :maven_url, GraphQL::Types::String, null: true, description: 'Url of the Maven project endpoint.'
@@ -26,9 +32,11 @@ module Types
       field :pypi_setup_url, GraphQL::Types::String, null: true, description: 'Url of the PyPi project setup endpoint.'
       field :pypi_url, GraphQL::Types::String, null: true, description: 'Url of the PyPi project endpoint.'
 
-      field :last_downloaded_at, Types::TimeType, null: true, description: 'Last time that a file of this package was downloaded.'
+      field :last_downloaded_at, Types::TimeType, null: true,
+        description: 'Last time that a file of this package was downloaded.'
 
-      field :public_package, GraphQL::Types::Boolean, null: true, description: 'Indicates if there is public access to the package.'
+      field :public_package, GraphQL::Types::Boolean, null: true,
+        description: 'Indicates if there is public access to the package.'
 
       def composer_config_repository_url
         composer_config_repository_name(object.project.group&.id)
diff --git a/app/graphql/types/packages/package_type_enum.rb b/app/graphql/types/packages/package_type_enum.rb
index 17145d8e000..8f0637aa6a4 100644
--- a/app/graphql/types/packages/package_type_enum.rb
+++ b/app/graphql/types/packages/package_type_enum.rb
@@ -11,7 +11,9 @@ module Types
 
       ::Packages::Package.package_types.keys.each do |package_type|
         type_name = PACKAGE_TYPE_NAMES.fetch(package_type.to_sym, package_type.capitalize)
-        value package_type.to_s.upcase, description: "Packages from the #{type_name} package manager", value: package_type.to_s
+        value package_type.to_s.upcase,
+          description: "Packages from the #{type_name} package manager",
+          value: package_type.to_s
       end
     end
   end
diff --git a/app/graphql/types/packages/pypi/metadatum_type.rb b/app/graphql/types/packages/pypi/metadatum_type.rb
index 8ccdb592c52..34500c06172 100644
--- a/app/graphql/types/packages/pypi/metadatum_type.rb
+++ b/app/graphql/types/packages/pypi/metadatum_type.rb
@@ -18,7 +18,8 @@ module Types
         field :id, ::Types::GlobalIDType[::Packages::Pypi::Metadatum], null: false, description: 'ID of the metadatum.'
         field :keywords, GraphQL::Types::String, null: true, description: 'List of keywords, separated by commas.'
         field :metadata_version, GraphQL::Types::String, null: true, description: 'Metadata version.'
-        field :required_python, GraphQL::Types::String, null: true, description: 'Required Python version of the Pypi package.'
+        field :required_python, GraphQL::Types::String, null: true,
+          description: 'Required Python version of the Pypi package.'
         field :summary, GraphQL::Types::String, null: true, description: 'One-line summary of the description.'
       end
     end
diff --git a/app/graphql/types/project_type.rb b/app/graphql/types/project_type.rb
index 1271060c5b2..1367c600c13 100644
--- a/app/graphql/types/project_type.rb
+++ b/app/graphql/types/project_type.rb
@@ -190,7 +190,8 @@ module Types
 
     field :only_allow_merge_if_all_discussions_are_resolved, GraphQL::Types::Boolean,
       null: true,
-      description: 'Indicates if merge requests of the project can only be merged when all the discussions are resolved.'
+      description: 'Indicates if merge requests of the project can only be merged ' \
+        'when all the discussions are resolved.'
 
     field :only_allow_merge_if_pipeline_succeeds, GraphQL::Types::Boolean,
       null: true,
@@ -658,7 +659,8 @@ module Types
     field :data_transfer, Types::DataTransfer::ProjectDataTransferType,
       null: true, # disallow null once data_transfer_monitoring feature flag is rolled-out! https://gitlab.com/gitlab-org/gitlab/-/issues/391682
       resolver: Resolvers::DataTransfer::ProjectDataTransferResolver,
-      description: 'Data transfer data point for a specific period. This is mocked data under a development feature flag.'
+      description: 'Data transfer data point for a specific period. ' \
+        'This is mocked data under a development feature flag.'
 
     field :visible_forks, Types::ProjectType.connection_type,
       null: true,
diff --git a/app/helpers/search_helper.rb b/app/helpers/search_helper.rb
index 14e6d868f37..cb13332bb1d 100644
--- a/app/helpers/search_helper.rb
+++ b/app/helpers/search_helper.rb
@@ -336,7 +336,13 @@ module SearchHelper
 
   # Autocomplete results for the current user's groups
   def groups_autocomplete(term, limit = 5)
-    current_user.authorized_groups.order_id_desc.search(term, use_minimum_char_limit: false).limit(limit).map do |group|
+    scope = if Feature.enabled?(:autocomplete_group_search_optimization, current_user)
+              current_user.search_on_authorized_groups(term, use_minimum_char_limit: false)
+            else
+              current_user.authorized_groups.search(term, use_minimum_char_limit: false)
+            end
+
+    scope.order_id_desc.limit(limit).map do |group|
       {
         category: "Groups",
         id: group.id,
diff --git a/app/models/concerns/integrations/base/integration.rb b/app/models/concerns/integrations/base/integration.rb
new file mode 100644
index 00000000000..61d0cf62e89
--- /dev/null
+++ b/app/models/concerns/integrations/base/integration.rb
@@ -0,0 +1,821 @@
+# frozen_string_literal: true
+
+module Integrations
+  module Base
+    module Integration
+      extend ActiveSupport::Concern
+
+      UnknownType = Class.new(StandardError)
+
+      INTEGRATION_NAMES = %w[
+        asana assembla bamboo bugzilla buildkite campfire clickup confluence custom_issue_tracker
+        datadog diffblue_cover discord drone_ci emails_on_push ewm external_wiki
+        gitlab_slack_application hangouts_chat harbor irker jira matrix
+        mattermost mattermost_slash_commands microsoft_teams packagist phorge pipelines_email
+        pivotaltracker prometheus pumble pushover redmine slack slack_slash_commands squash_tm teamcity telegram
+        unify_circuit webex_teams youtrack zentao
+      ].freeze
+
+      # Integrations that can only be enabled on the instance-level
+      INSTANCE_LEVEL_ONLY_INTEGRATION_NAMES = %w[
+        beyond_identity
+      ].freeze
+
+      # Integrations that can only be enabled on the project-level
+      PROJECT_LEVEL_ONLY_INTEGRATION_NAMES = %w[
+        apple_app_store google_play jenkins
+      ].freeze
+
+      # Integrations that cannot be enabled on the instance-level
+      PROJECT_AND_GROUP_LEVEL_ONLY_INTEGRATION_NAMES = %w[
+        jira_cloud_app
+      ].freeze
+
+      # Fake integrations to help with local development.
+      DEV_INTEGRATION_NAMES = %w[
+        mock_ci mock_monitoring
+      ].freeze
+
+      # Base classes which aren't actual integrations.
+      BASE_CLASSES = %w[
+        Integrations::BaseChatNotification
+        Integrations::BaseCi
+        Integrations::BaseIssueTracker
+        Integrations::BaseMonitoring
+        Integrations::BaseSlackNotification
+        Integrations::BaseSlashCommands
+        Integrations::BaseThirdPartyWiki
+      ].freeze
+
+      BASE_ATTRIBUTES = %w[id instance project_id group_id created_at updated_at
+        encrypted_properties encrypted_properties_iv properties].freeze
+
+      SECTION_TYPE_CONFIGURATION = 'configuration'
+      SECTION_TYPE_CONNECTION = 'connection'
+      SECTION_TYPE_TRIGGER = 'trigger'
+
+      SNOWPLOW_EVENT_ACTION = 'perform_integrations_action'
+      SNOWPLOW_EVENT_LABEL = 'redis_hll_counters.ecosystem.ecosystem_total_unique_counts_monthly'
+
+      included do
+        include Sortable
+        include Importable
+        include Integrations::Loggable
+        include Integrations::HasDataFields
+        include Integrations::ResetSecretFields
+        include FromUnion
+        include EachBatch
+        extend SafeFormatHelper
+        extend ::Gitlab::Utils::Override
+
+        self.allow_legacy_sti_class = true
+        self.inheritance_column = :type_new # rubocop:disable Database/AvoidInheritanceColumn -- existing code moved as is
+
+        attr_encrypted :properties,
+          mode: :per_attribute_iv,
+          key: Settings.attr_encrypted_db_key_base_32,
+          algorithm: 'aes-256-gcm',
+          marshal: true,
+          marshaler: ::Gitlab::Json,
+          encode: false,
+          encode_iv: false
+
+        alias_attribute :name, :title
+        # Handle assignment of props with symbol keys.
+        # To do this correctly, we need to call the method generated by attr_encrypted.
+        alias_method :attr_encrypted_props=, :properties=
+        private :attr_encrypted_props=
+
+        def properties=(props)
+          self.attr_encrypted_props = props&.with_indifferent_access&.freeze
+        end
+
+        alias_attribute :type, :type_new
+
+        attribute :active, default: false
+        attribute :alert_events, default: true
+        attribute :incident_events, default: false
+        attribute :category, default: 'common'
+        attribute :commit_events, default: true
+        attribute :confidential_issues_events, default: true
+        attribute :confidential_note_events, default: true
+        attribute :deployment_events, default: false
+        attribute :issues_events, default: true
+        attribute :job_events, default: true
+        attribute :merge_requests_events, default: true
+        attribute :note_events, default: true
+        attribute :pipeline_events, default: true
+        attribute :push_events, default: true
+        attribute :tag_push_events, default: true
+        attribute :wiki_page_events, default: true
+        attribute :group_mention_events, default: false
+        attribute :group_confidential_mention_events, default: false
+
+        after_initialize :initialize_properties
+
+        after_commit :reset_updated_properties
+
+        belongs_to :project, inverse_of: :integrations
+        belongs_to :group, inverse_of: :integrations
+
+        validates :project_id, presence: true, unless: -> { instance_level? || group_level? }
+        validates :group_id, presence: true, unless: -> { instance_level? || project_level? }
+        validates :project_id, :group_id, absence: true, if: -> { instance_level? }
+        validates :type, presence: true, exclusion: BASE_CLASSES
+        validates :type, uniqueness: { scope: :instance }, if: :instance_level?
+        validates :type, uniqueness: { scope: :project_id }, if: :project_level?
+        validates :type, uniqueness: { scope: :group_id }, if: :group_level?
+        validate :validate_belongs_to_project_or_group
+
+        scope :external_issue_trackers, -> { where(category: 'issue_tracker').active }
+        scope :third_party_wikis, -> { where(category: 'third_party_wiki').active }
+        scope :by_name, ->(name) { by_type(integration_name_to_type(name)) }
+        scope :external_wikis, -> { by_name(:external_wiki).active }
+        scope :active, -> { where(active: true) }
+        scope :by_type, ->(type) { where(type: type) } # INTERNAL USE ONLY: use by_name instead
+        scope :by_active_flag, ->(flag) { where(active: flag) }
+        scope :inherit_from_id, ->(id) { where(inherit_from_id: id) }
+        scope :with_default_settings, -> { where.not(inherit_from_id: nil) }
+        scope :with_custom_settings, -> { where(inherit_from_id: nil) }
+        scope :for_group, ->(group) {
+          types = available_integration_types(include_project_specific: false)
+          where(group_id: group, type: types)
+        }
+
+        scope :for_instance, -> {
+          types = available_integration_types(include_project_specific: false, include_group_specific: false)
+          where(instance: true, type: types)
+        }
+
+        scope :push_hooks, -> { where(push_events: true, active: true) }
+        scope :tag_push_hooks, -> { where(tag_push_events: true, active: true) }
+        scope :issue_hooks, -> { where(issues_events: true, active: true) }
+        scope :confidential_issue_hooks, -> { where(confidential_issues_events: true, active: true) }
+        scope :merge_request_hooks, -> { where(merge_requests_events: true, active: true) }
+        scope :note_hooks, -> { where(note_events: true, active: true) }
+        scope :confidential_note_hooks, -> { where(confidential_note_events: true, active: true) }
+        scope :job_hooks, -> { where(job_events: true, active: true) }
+        scope :archive_trace_hooks, -> { where(archive_trace_events: true, active: true) }
+        scope :pipeline_hooks, -> { where(pipeline_events: true, active: true) }
+        scope :wiki_page_hooks, -> { where(wiki_page_events: true, active: true) }
+        scope :deployment_hooks, -> { where(deployment_events: true, active: true) }
+        scope :alert_hooks, -> { where(alert_events: true, active: true) }
+        scope :incident_hooks, -> { where(incident_events: true, active: true) }
+        scope :deployment, -> { where(category: 'deployment') }
+        scope :group_mention_hooks, -> { where(group_mention_events: true, active: true) }
+        scope :group_confidential_mention_hooks, -> { where(group_confidential_mention_events: true, active: true) }
+        scope :exclusions_for_project, ->(project) { where(project: project, active: false) }
+
+        class << self
+          private
+
+          attr_writer :field_storage
+
+          def field_storage
+            @field_storage || :properties
+          end
+        end
+
+        # rubocop:disable Gitlab/NoCodeCoverageComment -- existing code moved as is
+        # :nocov: Tested on subclasses.
+        def self.field(name, storage: field_storage, **attrs)
+          fields << ::Integrations::Field.new(name: name, integration_class: self, **attrs)
+
+          case storage
+          when :attribute
+            # noop
+          when :properties
+            prop_accessor(name)
+          when :data_fields
+            data_field(name)
+          else
+            raise ArgumentError, "Unknown field storage: #{storage}"
+          end
+
+          boolean_accessor(name) if attrs[:type] == :checkbox && storage != :attribute
+        end
+        # :nocov:
+        # rubocop:enable Gitlab/NoCodeCoverageComment
+
+        def self.fields
+          @fields ||= []
+        end
+
+        def fields
+          self.class.fields.dup
+        end
+
+        # Provide convenient accessor methods for each serialized property.
+        # Also keep track of updated properties in a similar way as ActiveModel::Dirty
+        def self.prop_accessor(*args)
+          args.each do |arg|
+            class_eval <<~RUBY, __FILE__, __LINE__ + 1
+              unless method_defined?(arg)
+                def #{arg}
+                  properties['#{arg}'] if properties.present?
+                end
+              end
+
+              def #{arg}=(value)
+                self.properties ||= {}
+                updated_properties['#{arg}'] = #{arg} unless #{arg}_changed?
+                self.properties = self.properties.merge('#{arg}' => value)
+              end
+
+              def #{arg}_changed?
+                #{arg}_touched? && #{arg} != #{arg}_was
+              end
+
+              def #{arg}_touched?
+                updated_properties.include?('#{arg}')
+              end
+
+              def #{arg}_was
+                updated_properties['#{arg}']
+              end
+            RUBY
+          end
+        end
+
+        # Provide convenient boolean accessor methods for each serialized property.
+        # Also keep track of updated properties in a similar way as ActiveModel::Dirty
+        def self.boolean_accessor(*args)
+          args.each do |arg|
+            class_eval <<~RUBY, __FILE__, __LINE__ + 1
+              # Make the original getter available as a private method.
+              alias_method :#{arg}_before_type_cast, :#{arg}
+              private(:#{arg}_before_type_cast)
+
+              def #{arg}
+                Gitlab::Utils.to_boolean(#{arg}_before_type_cast)
+              end
+
+              def #{arg}?
+                # '!!' is used because nil or empty string is converted to nil
+                !!#{arg}
+              end
+            RUBY
+          end
+        end
+        private_class_method :boolean_accessor
+
+        def self.title
+          raise NotImplementedError
+        end
+
+        def self.description
+          raise NotImplementedError
+        end
+
+        def self.help
+          # no-op
+        end
+
+        def self.to_param
+          raise NotImplementedError
+        end
+
+        def self.attribution_notice
+          # no-op
+        end
+
+        def self.event_names
+          supported_events.map { |event| IntegrationsHelper.integration_event_field_name(event) }
+        end
+
+        def self.supported_events
+          %w[commit push tag_push issue confidential_issue merge_request wiki_page]
+        end
+
+        def self.default_test_event
+          'push'
+        end
+
+        def self.event_description(event)
+          IntegrationsHelper.integration_event_description(event)
+        end
+
+        def self.find_or_initialize_non_project_specific_integration(name, instance: false, group_id: nil)
+          return unless name.in?(available_integration_names(
+            include_project_specific: false,
+            include_group_specific: group_id.present?,
+            include_instance_specific: instance))
+
+          integration_name_to_model(name).find_or_initialize_by(instance: instance, group_id: group_id)
+        end
+
+        def self.find_or_initialize_all_non_project_specific(scope, include_instance_specific: false)
+          scope + build_nonexistent_integrations_for(scope,
+            include_group_specific: !include_instance_specific,
+            include_instance_specific: include_instance_specific)
+        end
+
+        def self.build_nonexistent_integrations_for(...)
+          nonexistent_integration_types_for(...).map do |type|
+            integration_type_to_model(type).new
+          end
+        end
+        private_class_method :build_nonexistent_integrations_for
+
+        # Returns a list of integration types that do not exist in the given scope.
+        # Example: ["AsanaService", ...]
+        def self.nonexistent_integration_types_for(
+          scope,
+          include_group_specific: false,
+          include_instance_specific: false)
+          # Using #map instead of #pluck to save one query count. This is because
+          # ActiveRecord loaded the object here, so we don't need to query again later.
+          available_integration_types(
+            include_project_specific: false,
+            include_group_specific: include_group_specific,
+            include_instance_specific: include_instance_specific
+          ) - scope.map(&:type)
+        end
+        private_class_method :nonexistent_integration_types_for
+
+        # Returns a list of available integration names.
+        # Example: ["asana", ...]
+        def self.available_integration_names(
+          include_project_specific: true,
+          include_group_specific: true,
+          include_instance_specific: true,
+          include_dev: true,
+          include_disabled: false)
+          names = integration_names.dup
+          names.concat(project_specific_integration_names) if include_project_specific
+          names.concat(dev_integration_names) if include_dev
+          names.concat(instance_specific_integration_names) if include_instance_specific
+
+          if include_project_specific || include_group_specific
+            names.concat(project_and_group_specific_integration_names)
+          end
+
+          names -= disabled_integration_names unless include_disabled
+
+          names.sort_by(&:downcase)
+        end
+
+        def self.integration_names
+          names = INTEGRATION_NAMES.dup
+
+          unless Feature.enabled?(:gitlab_for_slack_app_instance_and_group_level, type: :beta) && # rubocop:disable Gitlab/FeatureFlagWithoutActor -- existing code moved as is
+              (Gitlab::CurrentSettings.slack_app_enabled || Gitlab.dev_or_test_env?)
+            names.delete('gitlab_slack_application')
+          end
+
+          names
+        end
+
+        def self.instance_specific_integration_names
+          INSTANCE_LEVEL_ONLY_INTEGRATION_NAMES
+        end
+
+        def self.instance_specific_integration_types
+          instance_specific_integration_names.map { |name| integration_name_to_type(name) }
+        end
+
+        def self.dev_integration_names
+          return [] unless Gitlab.dev_or_test_env?
+
+          DEV_INTEGRATION_NAMES
+        end
+
+        def self.project_specific_integration_names
+          names = PROJECT_LEVEL_ONLY_INTEGRATION_NAMES.dup
+
+          if Feature.disabled?(:gitlab_for_slack_app_instance_and_group_level, type: :beta) && # rubocop:disable Gitlab/FeatureFlagWithoutActor -- existing code moved as is
+              (Gitlab::CurrentSettings.slack_app_enabled || Gitlab.dev_or_test_env?)
+            names << 'gitlab_slack_application'
+          end
+
+          names
+        end
+
+        def self.project_and_group_specific_integration_names
+          PROJECT_AND_GROUP_LEVEL_ONLY_INTEGRATION_NAMES.dup
+        end
+        private_class_method :project_and_group_specific_integration_names
+
+        # Returns a list of available integration types.
+        # Example: ["Integrations::Asana", ...]
+        def self.available_integration_types(...)
+          available_integration_names(...).map do # rubocop:disable Style/NumberedParameters -- existing code moved as is
+            integration_name_to_type(_1)
+          end
+        end
+
+        # Returns a list of disabled integration names.
+        # Example: ["gitlab_slack_application", ...]
+        def self.disabled_integration_names
+          # The GitLab for Slack app integration is only available when enabled through settings.
+          # The Slack Slash Commands integration is only available for customers
+          # who cannot use the GitLab for Slack app.
+          disabled = Gitlab::CurrentSettings.slack_app_enabled ? ['slack_slash_commands'] : ['gitlab_slack_application']
+          disabled += ['jira_cloud_app'] unless Gitlab::CurrentSettings.jira_connect_application_key.present?
+          disabled
+        end
+        private_class_method :disabled_integration_names
+
+        # Returns the model for the given integration name.
+        # Example: :asana => Integrations::Asana
+        def self.integration_name_to_model(name)
+          type = integration_name_to_type(name)
+          integration_type_to_model(type)
+        end
+
+        # Returns the STI type for the given integration name.
+        # Example: "asana" => "Integrations::Asana"
+        def self.integration_name_to_type(name)
+          name = name.to_s
+          if available_integration_names(include_disabled: true).exclude?(name)
+            Gitlab::ErrorTracking.track_and_raise_for_dev_exception(UnknownType.new(name.inspect))
+          else
+            "Integrations::#{name.camelize}"
+          end
+        end
+
+        # Returns the model for the given STI type.
+        # Example: "Integrations::Asana" => Integrations::Asana
+        def self.integration_type_to_model(type)
+          type.constantize
+        end
+        private_class_method :integration_type_to_model
+
+        def self.build_from_integration(integration, project_id: nil, group_id: nil)
+          new_integration = integration.dup
+
+          new_integration.instance = false
+          new_integration.project_id = project_id
+          new_integration.group_id = group_id
+          new_integration.inherit_from_id = integration.id if integration.inheritable?
+          new_integration
+        end
+
+        # Duplicating an integration also duplicates the data fields. Duped records have different ciphertexts.
+        override :dup
+        def dup
+          new_integration = super
+          new_integration.assign_attributes(reencrypt_properties)
+
+          if supports_data_fields?
+            fields = data_fields.dup
+            fields.integration = new_integration
+          end
+
+          new_integration
+        end
+
+        def inheritable?
+          instance_level? || group_level?
+        end
+
+        def self.instance_exists_for?(type)
+          exists?(instance: true, type: type)
+        end
+
+        def self.default_integration(type, scope)
+          closest_group_integration(type, scope) || instance_level_integration(type)
+        end
+
+        def self.closest_group_integration(type, scope)
+          group_ids = scope.ancestors(hierarchy_order: :asc).reselect(:id)
+          array = group_ids.to_sql.present? ? "array(#{group_ids.to_sql})" : 'ARRAY[]'
+
+          where(type: type, group_id: group_ids, inherit_from_id: nil)
+            .order(Arel.sql("array_position(#{array}::bigint[], #{table_name}.group_id)"))
+            .first
+        end
+        private_class_method :closest_group_integration
+
+        def self.instance_level_integration(type)
+          find_by(type: type, instance: true)
+        end
+        private_class_method :instance_level_integration
+
+        def self.default_integrations(owner, scope)
+          group_ids = sorted_ancestors(owner).select(:id)
+          array = group_ids.to_sql.present? ? "array(#{group_ids.to_sql})" : 'ARRAY[]'
+          order = Arel.sql("type_new ASC, array_position(#{array}::bigint[], #{table_name}.group_id), instance DESC")
+          from_union([scope.where(instance: true), scope.where(group_id: group_ids, inherit_from_id: nil)])
+            .order(order)
+            .group_by(&:type)
+            .transform_values(&:first)
+        end
+        private_class_method :default_integrations
+
+        def self.create_from_default_integrations(owner, association)
+          active_default_count = create_from_active_default_integrations(owner, association)
+          default_instance_specific_count = create_from_default_instance_specific_integrations(owner, association)
+          active_default_count + default_instance_specific_count
+        end
+
+        # Returns the number of successfully saved integrations
+        # Duplicate integrations are excluded from this count by their validations.
+        def self.create_from_active_default_integrations(owner, association)
+          default_integrations(
+            owner,
+            active.where.not(type: instance_specific_integration_types)
+          ).count { |_type, integration| build_from_integration(integration, association => owner.id).save }
+        end
+
+        def self.create_from_default_instance_specific_integrations(owner, association)
+          default_integrations(
+            owner,
+            where(type: instance_specific_integration_types)
+          ).count { |_type, integration| build_from_integration(integration, association => owner.id).save }
+        end
+
+        def self.descendants_from_self_or_ancestors_from(integration)
+          scope = where(type: integration.type)
+          from_union([
+            scope.where(group: integration.group.descendants),
+            scope.where(project: Project.in_namespace(integration.group.self_and_descendants))
+          ])
+        end
+
+        def self.inherited_descendants_from_self_or_ancestors_from(integration)
+          inherit_from_ids =
+            where(type: integration.type, group: integration.group.self_and_ancestors)
+              .or(where(type: integration.type, instance: true)).select(:id)
+
+          from_union([
+            where(type: integration.type, inherit_from_id: inherit_from_ids, group: integration.group.descendants),
+            where(
+              type: integration.type,
+              inherit_from_id: inherit_from_ids,
+              project: Project.in_namespace(integration.group.self_and_descendants)
+            )
+          ])
+        end
+
+        def activated?
+          active
+        end
+
+        def operating?
+          active && persisted?
+        end
+
+        def manual_activation?
+          true
+        end
+
+        def editable?
+          true
+        end
+
+        def activate_disabled_reason
+          nil
+        end
+
+        def category
+          read_attribute(:category).to_sym
+        end
+
+        def initialize_properties
+          self.properties = {} if has_attribute?(:encrypted_properties) && encrypted_properties.nil?
+        end
+
+        def title
+          self.class.title
+        end
+
+        def description
+          self.class.description
+        end
+
+        def help
+          self.class.help
+        end
+
+        def to_param
+          self.class.to_param
+        end
+
+        def attribution_notice
+          self.class.attribution_notice
+        end
+
+        def sections
+          []
+        end
+
+        def secret_fields
+          fields.select(&:secret?).pluck(:name) # rubocop:disable Database/AvoidUsingPluckWithoutLimit -- existing code moved as is
+        end
+
+        # Expose a list of fields in the JSON endpoint.
+        #
+        # This list is used in `Integration#as_json(only: json_fields)`.
+        def json_fields
+          %w[active]
+        end
+
+        # properties is always nil - ignore it.
+        override :attributes
+        def attributes
+          super.except('properties')
+        end
+
+        # Returns a hash of attributes (columns => values) used for inserting into the database.
+        def to_database_hash
+          column = self.class.attribute_aliases.fetch('type', 'type')
+
+          attributes_for_database.except(*BASE_ATTRIBUTES)
+                                 .merge(column => type)
+                                 .merge(reencrypt_properties)
+        end
+
+        def reencrypt_properties
+          unless properties.nil? || properties.empty?
+            alg = self.class.attr_encrypted_attributes[:properties][:algorithm]
+            iv = generate_iv(alg)
+            ep = self.class.attr_encrypt(:properties, properties, { iv: iv })
+          end
+
+          { 'encrypted_properties' => ep, 'encrypted_properties_iv' => iv }
+        end
+
+        def event_channel_names
+          []
+        end
+
+        def event_names
+          self.class.event_names
+        end
+
+        def api_field_names
+          fields # rubocop:disable Style/NumberedParameters -- existing code moved as is
+            .reject { _1[:type] == :password || _1[:name] == 'webhook' || (_1.key?(:if) && _1[:if] != true) } # rubocop:disable Style/NumberedParameters -- existing code moved as is
+            .pluck(:name) # rubocop:disable Database/AvoidUsingPluckWithoutLimit -- existing code moved as is
+        end
+
+        def self.api_arguments
+          fields.filter_map do |field|
+            next if field.if != true
+
+            {
+              required: field.required?,
+              name: field.name.to_sym,
+              type: field.api_type,
+              desc: field.description
+            }
+          end
+        end
+
+        def self.instance_specific?
+          false
+        end
+
+        def self.pluck_group_id
+          pluck(:group_id) # rubocop:disable Database/AvoidUsingPluckWithoutLimit -- existing code moved as is
+        end
+
+        def form_fields
+          fields.reject { _1[:api_only] == true || (_1.key?(:if) && _1[:if] != true) } # rubocop:disable Style/NumberedParameters -- existing code moved as is
+        end
+
+        def configurable_events
+          events = supported_events
+
+          # No need to disable individual triggers when there is only one
+          if events.count == 1
+            []
+          else
+            events
+          end
+        end
+
+        def supported_events
+          self.class.supported_events
+        end
+
+        def default_test_event
+          self.class.default_test_event
+        end
+
+        def execute(data)
+          # implement inside child
+        end
+
+        def test(data)
+          # default implementation
+          result = execute(data)
+          { success: result.present?, result: result }
+        end
+
+        # Disable test for instance-level and group-level integrations.
+        # https://gitlab.com/gitlab-org/gitlab/-/issues/213138
+        def testable?
+          project_level?
+        end
+
+        def project_level?
+          project_id.present?
+        end
+
+        def group_level?
+          group_id.present?
+        end
+
+        def instance_level?
+          instance?
+        end
+
+        def parent
+          project || group
+        end
+
+        # Returns a hash of the properties that have been assigned a new value since last save,
+        # indicating their original values (attr => original value).
+        # ActiveRecord does not provide a mechanism to track changes in serialized keys,
+        # so we need a specific implementation for integration properties.
+        # This allows to track changes to properties set with the accessor methods,
+        # but not direct manipulation of properties hash.
+        def updated_properties
+          @updated_properties ||= ActiveSupport::HashWithIndifferentAccess.new
+        end
+
+        def reset_updated_properties
+          @updated_properties = nil
+        end
+
+        def async_execute(data)
+          return if ::Gitlab::SilentMode.enabled?
+
+          # Temporarily log when we return within this method to gather data for
+          # https://gitlab.com/gitlab-org/gitlab/-/issues/382999
+          unless supported_events.include?(data[:object_kind])
+            log_info(
+              'async_execute did nothing due to event not being supported',
+              event: data[:object_kind]
+            )
+            return
+          end
+
+          Integrations::ExecuteWorker.perform_async(id, data.deep_stringify_keys)
+        end
+
+        # override if needed
+        def supports_data_fields?
+          false
+        end
+
+        def chat?
+          category == :chat
+        end
+
+        def ci?
+          category == :ci
+        end
+
+        def deactivate!
+          update(active: false)
+        end
+
+        def activate!
+          update(active: true)
+        end
+
+        def toggle!
+          active? ? deactivate! : activate!
+        end
+
+        private
+
+        def self.build_help_page_url(url_path, help_text, link_text = _("Learn More"), options = {})
+          docs_link = ActionController::Base.helpers.link_to(
+            '',
+            Rails.application.routes.url_helpers.help_page_url(url_path, **options), # rubocop:disable Gitlab/DocumentationLinks/Link: -- existing code moved as is
+            target: '_blank',
+            rel: 'noopener noreferrer'
+          )
+          tag_pair_docs_link = tag_pair(docs_link, :link_start, :link_end)
+
+          safe_format(help_text + " %{link_start}#{link_text}%{link_end}.", tag_pair_docs_link)
+        end
+
+        # Ancestors sorted by hierarchy depth in bottom-top order.
+        def self.sorted_ancestors(scope)
+          if scope.root_ancestor.use_traversal_ids?
+            Namespace.from(scope.ancestors(hierarchy_order: :asc))
+          else
+            scope.ancestors
+          end
+        end
+
+        def validate_belongs_to_project_or_group
+          return unless project_level? && group_level?
+
+          errors.add(:project_id, 'The integration cannot belong to both a project and a group')
+        end
+
+        def validate_recipients?
+          activated? && !importing?
+        end
+      end
+    end
+  end
+end
+
+Integration.prepend_mod_with('Integration')
diff --git a/app/models/integration.rb b/app/models/integration.rb
index 3a9a017f74d..c0b897fd5ce 100644
--- a/app/models/integration.rb
+++ b/app/models/integration.rb
@@ -3,796 +3,5 @@
 # To add new integration you should build a class inherited from Integration
 # and implement a set of methods
 class Integration < ApplicationRecord
-  include Sortable
-  include Importable
-  include Integrations::Loggable
-  include Integrations::HasDataFields
-  include Integrations::ResetSecretFields
-  include FromUnion
-  include EachBatch
-  extend SafeFormatHelper
-  extend ::Gitlab::Utils::Override
-
-  UnknownType = Class.new(StandardError)
-
-  self.allow_legacy_sti_class = true
-  self.inheritance_column = :type_new
-
-  INTEGRATION_NAMES = %w[
-    asana assembla bamboo bugzilla buildkite campfire clickup confluence custom_issue_tracker
-    datadog diffblue_cover discord drone_ci emails_on_push ewm external_wiki
-    gitlab_slack_application hangouts_chat harbor irker jira matrix
-    mattermost mattermost_slash_commands microsoft_teams packagist phorge pipelines_email
-    pivotaltracker prometheus pumble pushover redmine slack slack_slash_commands squash_tm teamcity telegram
-    unify_circuit webex_teams youtrack zentao
-  ].freeze
-
-  # Integrations that can only be enabled on the instance-level
-  INSTANCE_LEVEL_ONLY_INTEGRATION_NAMES = %w[
-    beyond_identity
-  ].freeze
-
-  # Integrations that can only be enabled on the project-level
-  PROJECT_LEVEL_ONLY_INTEGRATION_NAMES = %w[
-    apple_app_store google_play jenkins
-  ].freeze
-
-  # Integrations that cannot be enabled on the instance-level
-  PROJECT_AND_GROUP_LEVEL_ONLY_INTEGRATION_NAMES = %w[
-    jira_cloud_app
-  ].freeze
-
-  # Fake integrations to help with local development.
-  DEV_INTEGRATION_NAMES = %w[
-    mock_ci mock_monitoring
-  ].freeze
-
-  # Base classes which aren't actual integrations.
-  BASE_CLASSES = %w[
-    Integrations::BaseChatNotification
-    Integrations::BaseCi
-    Integrations::BaseIssueTracker
-    Integrations::BaseMonitoring
-    Integrations::BaseSlackNotification
-    Integrations::BaseSlashCommands
-    Integrations::BaseThirdPartyWiki
-  ].freeze
-
-  BASE_ATTRIBUTES = %w[id instance project_id group_id created_at updated_at
-    encrypted_properties encrypted_properties_iv properties].freeze
-
-  SECTION_TYPE_CONFIGURATION = 'configuration'
-  SECTION_TYPE_CONNECTION = 'connection'
-  SECTION_TYPE_TRIGGER = 'trigger'
-
-  SNOWPLOW_EVENT_ACTION = 'perform_integrations_action'
-  SNOWPLOW_EVENT_LABEL = 'redis_hll_counters.ecosystem.ecosystem_total_unique_counts_monthly'
-
-  attr_encrypted :properties,
-    mode: :per_attribute_iv,
-    key: Settings.attr_encrypted_db_key_base_32,
-    algorithm: 'aes-256-gcm',
-    marshal: true,
-    marshaler: ::Gitlab::Json,
-    encode: false,
-    encode_iv: false
-
-  alias_attribute :name, :title
-  # Handle assignment of props with symbol keys.
-  # To do this correctly, we need to call the method generated by attr_encrypted.
-  alias_method :attr_encrypted_props=, :properties=
-  private :attr_encrypted_props=
-
-  def properties=(props)
-    self.attr_encrypted_props = props&.with_indifferent_access&.freeze
-  end
-
-  alias_attribute :type, :type_new
-
-  attribute :active, default: false
-  attribute :alert_events, default: true
-  attribute :incident_events, default: false
-  attribute :category, default: 'common'
-  attribute :commit_events, default: true
-  attribute :confidential_issues_events, default: true
-  attribute :confidential_note_events, default: true
-  attribute :deployment_events, default: false
-  attribute :issues_events, default: true
-  attribute :job_events, default: true
-  attribute :merge_requests_events, default: true
-  attribute :note_events, default: true
-  attribute :pipeline_events, default: true
-  attribute :push_events, default: true
-  attribute :tag_push_events, default: true
-  attribute :wiki_page_events, default: true
-  attribute :group_mention_events, default: false
-  attribute :group_confidential_mention_events, default: false
-
-  after_initialize :initialize_properties
-
-  after_commit :reset_updated_properties
-
-  belongs_to :project, inverse_of: :integrations
-  belongs_to :group, inverse_of: :integrations
-
-  validates :project_id, presence: true, unless: -> { instance_level? || group_level? }
-  validates :group_id, presence: true, unless: -> { instance_level? || project_level? }
-  validates :project_id, :group_id, absence: true, if: -> { instance_level? }
-  validates :type, presence: true, exclusion: BASE_CLASSES
-  validates :type, uniqueness: { scope: :instance }, if: :instance_level?
-  validates :type, uniqueness: { scope: :project_id }, if: :project_level?
-  validates :type, uniqueness: { scope: :group_id }, if: :group_level?
-  validate :validate_belongs_to_project_or_group
-
-  scope :external_issue_trackers, -> { where(category: 'issue_tracker').active }
-  scope :third_party_wikis, -> { where(category: 'third_party_wiki').active }
-  scope :by_name, ->(name) { by_type(integration_name_to_type(name)) }
-  scope :external_wikis, -> { by_name(:external_wiki).active }
-  scope :active, -> { where(active: true) }
-  scope :by_type, ->(type) { where(type: type) } # INTERNAL USE ONLY: use by_name instead
-  scope :by_active_flag, ->(flag) { where(active: flag) }
-  scope :inherit_from_id, ->(id) { where(inherit_from_id: id) }
-  scope :with_default_settings, -> { where.not(inherit_from_id: nil) }
-  scope :with_custom_settings, -> { where(inherit_from_id: nil) }
-  scope :for_group, ->(group) {
-    types = available_integration_types(include_project_specific: false)
-    where(group_id: group, type: types)
-  }
-
-  scope :for_instance, -> {
-    types = available_integration_types(include_project_specific: false, include_group_specific: false)
-    where(instance: true, type: types)
-  }
-
-  scope :push_hooks, -> { where(push_events: true, active: true) }
-  scope :tag_push_hooks, -> { where(tag_push_events: true, active: true) }
-  scope :issue_hooks, -> { where(issues_events: true, active: true) }
-  scope :confidential_issue_hooks, -> { where(confidential_issues_events: true, active: true) }
-  scope :merge_request_hooks, -> { where(merge_requests_events: true, active: true) }
-  scope :note_hooks, -> { where(note_events: true, active: true) }
-  scope :confidential_note_hooks, -> { where(confidential_note_events: true, active: true) }
-  scope :job_hooks, -> { where(job_events: true, active: true) }
-  scope :archive_trace_hooks, -> { where(archive_trace_events: true, active: true) }
-  scope :pipeline_hooks, -> { where(pipeline_events: true, active: true) }
-  scope :wiki_page_hooks, -> { where(wiki_page_events: true, active: true) }
-  scope :deployment_hooks, -> { where(deployment_events: true, active: true) }
-  scope :alert_hooks, -> { where(alert_events: true, active: true) }
-  scope :incident_hooks, -> { where(incident_events: true, active: true) }
-  scope :deployment, -> { where(category: 'deployment') }
-  scope :group_mention_hooks, -> { where(group_mention_events: true, active: true) }
-  scope :group_confidential_mention_hooks, -> { where(group_confidential_mention_events: true, active: true) }
-  scope :exclusions_for_project, ->(project) { where(project: project, active: false) }
-
-  class << self
-    private
-
-    attr_writer :field_storage
-
-    def field_storage
-      @field_storage || :properties
-    end
-  end
-
-  # :nocov: Tested on subclasses.
-  def self.field(name, storage: field_storage, **attrs)
-    fields << ::Integrations::Field.new(name: name, integration_class: self, **attrs)
-
-    case storage
-    when :attribute
-      # noop
-    when :properties
-      prop_accessor(name)
-    when :data_fields
-      data_field(name)
-    else
-      raise ArgumentError, "Unknown field storage: #{storage}"
-    end
-
-    boolean_accessor(name) if attrs[:type] == :checkbox && storage != :attribute
-  end
-  # :nocov:
-
-  def self.fields
-    @fields ||= []
-  end
-
-  def fields
-    self.class.fields.dup
-  end
-
-  # Provide convenient accessor methods for each serialized property.
-  # Also keep track of updated properties in a similar way as ActiveModel::Dirty
-  def self.prop_accessor(*args)
-    args.each do |arg|
-      class_eval <<~RUBY, __FILE__, __LINE__ + 1
-        unless method_defined?(arg)
-          def #{arg}
-            properties['#{arg}'] if properties.present?
-          end
-        end
-
-        def #{arg}=(value)
-          self.properties ||= {}
-          updated_properties['#{arg}'] = #{arg} unless #{arg}_changed?
-          self.properties = self.properties.merge('#{arg}' => value)
-        end
-
-        def #{arg}_changed?
-          #{arg}_touched? && #{arg} != #{arg}_was
-        end
-
-        def #{arg}_touched?
-          updated_properties.include?('#{arg}')
-        end
-
-        def #{arg}_was
-          updated_properties['#{arg}']
-        end
-      RUBY
-    end
-  end
-
-  # Provide convenient boolean accessor methods for each serialized property.
-  # Also keep track of updated properties in a similar way as ActiveModel::Dirty
-  def self.boolean_accessor(*args)
-    args.each do |arg|
-      class_eval <<~RUBY, __FILE__, __LINE__ + 1
-        # Make the original getter available as a private method.
-        alias_method :#{arg}_before_type_cast, :#{arg}
-        private(:#{arg}_before_type_cast)
-
-        def #{arg}
-          Gitlab::Utils.to_boolean(#{arg}_before_type_cast)
-        end
-
-        def #{arg}?
-          # '!!' is used because nil or empty string is converted to nil
-          !!#{arg}
-        end
-      RUBY
-    end
-  end
-  private_class_method :boolean_accessor
-
-  def self.title
-    raise NotImplementedError
-  end
-
-  def self.description
-    raise NotImplementedError
-  end
-
-  def self.help
-    # no-op
-  end
-
-  def self.to_param
-    raise NotImplementedError
-  end
-
-  def self.attribution_notice
-    # no-op
-  end
-
-  def self.event_names
-    supported_events.map { |event| IntegrationsHelper.integration_event_field_name(event) }
-  end
-
-  def self.supported_events
-    %w[commit push tag_push issue confidential_issue merge_request wiki_page]
-  end
-
-  def self.default_test_event
-    'push'
-  end
-
-  def self.event_description(event)
-    IntegrationsHelper.integration_event_description(event)
-  end
-
-  def self.find_or_initialize_non_project_specific_integration(name, instance: false, group_id: nil)
-    return unless name.in?(available_integration_names(
-      include_project_specific: false,
-      include_group_specific: group_id.present?,
-      include_instance_specific: instance))
-
-    integration_name_to_model(name).find_or_initialize_by(instance: instance, group_id: group_id)
-  end
-
-  def self.find_or_initialize_all_non_project_specific(scope, include_instance_specific: false)
-    scope + build_nonexistent_integrations_for(scope,
-      include_group_specific: !include_instance_specific,
-      include_instance_specific: include_instance_specific)
-  end
-
-  def self.build_nonexistent_integrations_for(...)
-    nonexistent_integration_types_for(...).map do |type|
-      integration_type_to_model(type).new
-    end
-  end
-  private_class_method :build_nonexistent_integrations_for
-
-  # Returns a list of integration types that do not exist in the given scope.
-  # Example: ["AsanaService", ...]
-  def self.nonexistent_integration_types_for(scope, include_group_specific: false, include_instance_specific: false)
-    # Using #map instead of #pluck to save one query count. This is because
-    # ActiveRecord loaded the object here, so we don't need to query again later.
-    available_integration_types(
-      include_project_specific: false,
-      include_group_specific: include_group_specific,
-      include_instance_specific: include_instance_specific
-    ) - scope.map(&:type)
-  end
-  private_class_method :nonexistent_integration_types_for
-
-  # Returns a list of available integration names.
-  # Example: ["asana", ...]
-  def self.available_integration_names(
-    include_project_specific: true, include_group_specific: true, include_instance_specific: true, include_dev: true,
-    include_disabled: false
-  )
-    names = integration_names.dup
-    names.concat(project_specific_integration_names) if include_project_specific
-    names.concat(dev_integration_names) if include_dev
-    names.concat(instance_specific_integration_names) if include_instance_specific
-    names.concat(project_and_group_specific_integration_names) if include_project_specific || include_group_specific
-    names -= disabled_integration_names unless include_disabled
-
-    names.sort_by(&:downcase)
-  end
-
-  def self.integration_names
-    names = INTEGRATION_NAMES.dup
-
-    unless Feature.enabled?(:gitlab_for_slack_app_instance_and_group_level, type: :beta) &&
-        (Gitlab::CurrentSettings.slack_app_enabled || Gitlab.dev_or_test_env?)
-      names.delete('gitlab_slack_application')
-    end
-
-    names
-  end
-
-  def self.instance_specific_integration_names
-    INSTANCE_LEVEL_ONLY_INTEGRATION_NAMES
-  end
-
-  def self.instance_specific_integration_types
-    instance_specific_integration_names.map { |name| integration_name_to_type(name) }
-  end
-
-  def self.dev_integration_names
-    return [] unless Gitlab.dev_or_test_env?
-
-    DEV_INTEGRATION_NAMES
-  end
-
-  def self.project_specific_integration_names
-    names = PROJECT_LEVEL_ONLY_INTEGRATION_NAMES.dup
-
-    if Feature.disabled?(:gitlab_for_slack_app_instance_and_group_level, type: :beta) &&
-        (Gitlab::CurrentSettings.slack_app_enabled || Gitlab.dev_or_test_env?)
-      names << 'gitlab_slack_application'
-    end
-
-    names
-  end
-
-  def self.project_and_group_specific_integration_names
-    PROJECT_AND_GROUP_LEVEL_ONLY_INTEGRATION_NAMES.dup
-  end
-  private_class_method :project_and_group_specific_integration_names
-
-  # Returns a list of available integration types.
-  # Example: ["Integrations::Asana", ...]
-  def self.available_integration_types(...)
-    available_integration_names(...).map do
-      integration_name_to_type(_1)
-    end
-  end
-
-  # Returns a list of disabled integration names.
-  # Example: ["gitlab_slack_application", ...]
-  def self.disabled_integration_names
-    # The GitLab for Slack app integration is only available when enabled through settings.
-    # The Slack Slash Commands integration is only available for customers who cannot use the GitLab for Slack app.
-    disabled = Gitlab::CurrentSettings.slack_app_enabled ? ['slack_slash_commands'] : ['gitlab_slack_application']
-    disabled += ['jira_cloud_app'] unless Gitlab::CurrentSettings.jira_connect_application_key.present?
-    disabled
-  end
-  private_class_method :disabled_integration_names
-
-  # Returns the model for the given integration name.
-  # Example: :asana => Integrations::Asana
-  def self.integration_name_to_model(name)
-    type = integration_name_to_type(name)
-    integration_type_to_model(type)
-  end
-
-  # Returns the STI type for the given integration name.
-  # Example: "asana" => "Integrations::Asana"
-  def self.integration_name_to_type(name)
-    name = name.to_s
-    if available_integration_names(include_disabled: true).exclude?(name)
-      Gitlab::ErrorTracking.track_and_raise_for_dev_exception(UnknownType.new(name.inspect))
-    else
-      "Integrations::#{name.camelize}"
-    end
-  end
-
-  # Returns the model for the given STI type.
-  # Example: "Integrations::Asana" => Integrations::Asana
-  def self.integration_type_to_model(type)
-    type.constantize
-  end
-  private_class_method :integration_type_to_model
-
-  def self.build_from_integration(integration, project_id: nil, group_id: nil)
-    new_integration = integration.dup
-
-    new_integration.instance = false
-    new_integration.project_id = project_id
-    new_integration.group_id = group_id
-    new_integration.inherit_from_id = integration.id if integration.inheritable?
-    new_integration
-  end
-
-  # Duplicating an integration also duplicates the data fields. Duped records have different ciphertexts.
-  override :dup
-  def dup
-    new_integration = super
-    new_integration.assign_attributes(reencrypt_properties)
-
-    if supports_data_fields?
-      fields = data_fields.dup
-      fields.integration = new_integration
-    end
-
-    new_integration
-  end
-
-  def inheritable?
-    instance_level? || group_level?
-  end
-
-  def self.instance_exists_for?(type)
-    exists?(instance: true, type: type)
-  end
-
-  def self.default_integration(type, scope)
-    closest_group_integration(type, scope) || instance_level_integration(type)
-  end
-
-  def self.closest_group_integration(type, scope)
-    group_ids = scope.ancestors(hierarchy_order: :asc).reselect(:id)
-    array = group_ids.to_sql.present? ? "array(#{group_ids.to_sql})" : 'ARRAY[]'
-
-    where(type: type, group_id: group_ids, inherit_from_id: nil)
-      .order(Arel.sql("array_position(#{array}::bigint[], #{table_name}.group_id)"))
-      .first
-  end
-  private_class_method :closest_group_integration
-
-  def self.instance_level_integration(type)
-    find_by(type: type, instance: true)
-  end
-  private_class_method :instance_level_integration
-
-  def self.default_integrations(owner, scope)
-    group_ids = sorted_ancestors(owner).select(:id)
-    array = group_ids.to_sql.present? ? "array(#{group_ids.to_sql})" : 'ARRAY[]'
-    order = Arel.sql("type_new ASC, array_position(#{array}::bigint[], #{table_name}.group_id), instance DESC")
-    from_union([scope.where(instance: true), scope.where(group_id: group_ids, inherit_from_id: nil)])
-      .order(order)
-      .group_by(&:type)
-      .transform_values(&:first)
-  end
-  private_class_method :default_integrations
-
-  def self.create_from_default_integrations(owner, association)
-    active_default_count = create_from_active_default_integrations(owner, association)
-    default_instance_specific_count = create_from_default_instance_specific_integrations(owner, association)
-    active_default_count + default_instance_specific_count
-  end
-
-  # Returns the number of successfully saved integrations
-  # Duplicate integrations are excluded from this count by their validations.
-  def self.create_from_active_default_integrations(owner, association)
-    default_integrations(
-      owner,
-      active.where.not(type: instance_specific_integration_types)
-    ).count { |_type, integration| build_from_integration(integration, association => owner.id).save }
-  end
-
-  def self.create_from_default_instance_specific_integrations(owner, association)
-    default_integrations(
-      owner,
-      where(type: instance_specific_integration_types)
-    ).count { |_type, integration| build_from_integration(integration, association => owner.id).save }
-  end
-
-  def self.descendants_from_self_or_ancestors_from(integration)
-    scope = where(type: integration.type)
-    from_union([
-      scope.where(group: integration.group.descendants),
-      scope.where(project: Project.in_namespace(integration.group.self_and_descendants))
-    ])
-  end
-
-  def self.inherited_descendants_from_self_or_ancestors_from(integration)
-    inherit_from_ids =
-      where(type: integration.type, group: integration.group.self_and_ancestors)
-        .or(where(type: integration.type, instance: true)).select(:id)
-
-    from_union([
-      where(type: integration.type, inherit_from_id: inherit_from_ids, group: integration.group.descendants),
-      where(type: integration.type, inherit_from_id: inherit_from_ids,
-        project: Project.in_namespace(integration.group.self_and_descendants))
-    ])
-  end
-
-  def activated?
-    active
-  end
-
-  def operating?
-    active && persisted?
-  end
-
-  def manual_activation?
-    true
-  end
-
-  def editable?
-    true
-  end
-
-  def activate_disabled_reason
-    nil
-  end
-
-  def category
-    read_attribute(:category).to_sym
-  end
-
-  def initialize_properties
-    self.properties = {} if has_attribute?(:encrypted_properties) && encrypted_properties.nil?
-  end
-
-  def title
-    self.class.title
-  end
-
-  def description
-    self.class.description
-  end
-
-  def help
-    self.class.help
-  end
-
-  def to_param
-    self.class.to_param
-  end
-
-  def attribution_notice
-    self.class.attribution_notice
-  end
-
-  def sections
-    []
-  end
-
-  def secret_fields
-    fields.select(&:secret?).pluck(:name)
-  end
-
-  # Expose a list of fields in the JSON endpoint.
-  #
-  # This list is used in `Integration#as_json(only: json_fields)`.
-  def json_fields
-    %w[active]
-  end
-
-  # properties is always nil - ignore it.
-  override :attributes
-  def attributes
-    super.except('properties')
-  end
-
-  # Returns a hash of attributes (columns => values) used for inserting into the database.
-  def to_database_hash
-    column = self.class.attribute_aliases.fetch('type', 'type')
-
-    attributes_for_database.except(*BASE_ATTRIBUTES)
-    .merge(column => type)
-    .merge(reencrypt_properties)
-  end
-
-  def reencrypt_properties
-    unless properties.nil? || properties.empty?
-      alg = self.class.attr_encrypted_attributes[:properties][:algorithm]
-      iv = generate_iv(alg)
-      ep = self.class.attr_encrypt(:properties, properties, { iv: iv })
-    end
-
-    { 'encrypted_properties' => ep, 'encrypted_properties_iv' => iv }
-  end
-
-  def event_channel_names
-    []
-  end
-
-  def event_names
-    self.class.event_names
-  end
-
-  def api_field_names
-    fields.reject { _1[:type] == :password || _1[:name] == 'webhook' || (_1.key?(:if) && _1[:if] != true) }.pluck(:name)
-  end
-
-  def self.api_arguments
-    fields.filter_map do |field|
-      next if field.if != true
-
-      {
-        required: field.required?,
-        name: field.name.to_sym,
-        type: field.api_type,
-        desc: field.description
-      }
-    end
-  end
-
-  def self.instance_specific?
-    false
-  end
-
-  def self.pluck_group_id
-    pluck(:group_id)
-  end
-
-  def form_fields
-    fields.reject { _1[:api_only] == true || (_1.key?(:if) && _1[:if] != true) }
-  end
-
-  def configurable_events
-    events = supported_events
-
-    # No need to disable individual triggers when there is only one
-    if events.count == 1
-      []
-    else
-      events
-    end
-  end
-
-  def supported_events
-    self.class.supported_events
-  end
-
-  def default_test_event
-    self.class.default_test_event
-  end
-
-  def execute(data)
-    # implement inside child
-  end
-
-  def test(data)
-    # default implementation
-    result = execute(data)
-    { success: result.present?, result: result }
-  end
-
-  # Disable test for instance-level and group-level integrations.
-  # https://gitlab.com/gitlab-org/gitlab/-/issues/213138
-  def testable?
-    project_level?
-  end
-
-  def project_level?
-    project_id.present?
-  end
-
-  def group_level?
-    group_id.present?
-  end
-
-  def instance_level?
-    instance?
-  end
-
-  def parent
-    project || group
-  end
-
-  # Returns a hash of the properties that have been assigned a new value since last save,
-  # indicating their original values (attr => original value).
-  # ActiveRecord does not provide a mechanism to track changes in serialized keys,
-  # so we need a specific implementation for integration properties.
-  # This allows to track changes to properties set with the accessor methods,
-  # but not direct manipulation of properties hash.
-  def updated_properties
-    @updated_properties ||= ActiveSupport::HashWithIndifferentAccess.new
-  end
-
-  def reset_updated_properties
-    @updated_properties = nil
-  end
-
-  def async_execute(data)
-    return if ::Gitlab::SilentMode.enabled?
-
-    # Temporarily log when we return within this method to gather data for
-    # https://gitlab.com/gitlab-org/gitlab/-/issues/382999
-    unless supported_events.include?(data[:object_kind])
-      log_info(
-        'async_execute did nothing due to event not being supported',
-        event: data[:object_kind]
-      )
-      return
-    end
-
-    Integrations::ExecuteWorker.perform_async(id, data.deep_stringify_keys)
-  end
-
-  # override if needed
-  def supports_data_fields?
-    false
-  end
-
-  def chat?
-    category == :chat
-  end
-
-  def ci?
-    category == :ci
-  end
-
-  def deactivate!
-    update(active: false)
-  end
-
-  def activate!
-    update(active: true)
-  end
-
-  def toggle!
-    active? ? deactivate! : activate!
-  end
-
-  private
-
-  def self.build_help_page_url(url_path, help_text, link_text = _("Learn More"), options = {})
-    docs_link = ActionController::Base.helpers.link_to(
-      '',
-      Rails.application.routes.url_helpers.help_page_url(url_path, **options),
-      target: '_blank',
-      rel: 'noopener noreferrer'
-    )
-    tag_pair_docs_link = tag_pair(docs_link, :link_start, :link_end)
-
-    safe_format(help_text + " %{link_start}#{link_text}%{link_end}.", tag_pair_docs_link)
-  end
-
-  # Ancestors sorted by hierarchy depth in bottom-top order.
-  def self.sorted_ancestors(scope)
-    if scope.root_ancestor.use_traversal_ids?
-      Namespace.from(scope.ancestors(hierarchy_order: :asc))
-    else
-      scope.ancestors
-    end
-  end
-
-  def validate_belongs_to_project_or_group
-    return unless project_level? && group_level?
-
-    errors.add(:project_id, 'The integration cannot belong to both a project and a group')
-  end
-
-  def validate_recipients?
-    activated? && !importing?
-  end
+  include Integrations::Base::Integration
 end
-
-Integration.prepend_mod_with('Integration')
diff --git a/app/models/integrations/instance/integration.rb b/app/models/integrations/instance/integration.rb
new file mode 100644
index 00000000000..7c63c5758c8
--- /dev/null
+++ b/app/models/integrations/instance/integration.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module Integrations
+  module Instance
+    class Integration < ApplicationRecord
+      include IgnorableColumns
+      include Integrations::Base::Integration
+
+      self.table_name = 'instance_integrations'
+      self.inheritance_column = :type_new # rubocop:disable Database/AvoidInheritanceColumn -- supporting instance integrations migration
+
+      ignore_column :type, remove_with: '17.7', remove_after: '2024-12-02'
+
+      def instance_level?
+        true
+      end
+
+      def group_level?
+        false
+      end
+
+      def project_level?
+        false
+      end
+    end
+  end
+end
diff --git a/app/models/integrations/instance_integration.rb b/app/models/integrations/instance_integration.rb
deleted file mode 100644
index bca4e11e09d..00000000000
--- a/app/models/integrations/instance_integration.rb
+++ /dev/null
@@ -1,12 +0,0 @@
-# frozen_string_literal: true
-
-module Integrations
-  class InstanceIntegration < Integration
-    include IgnorableColumns
-
-    self.table_name = 'instance_integrations'
-    self.inheritance_column = :type_new # rubocop:disable Database/AvoidInheritanceColumn -- supporting instance integrations migration
-
-    ignore_column :type, remove_with: '17.7', remove_after: '2024-12-02'
-  end
-end
diff --git a/app/models/user.rb b/app/models/user.rb
index 6e4a39dadba..e6633a3e9ac 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -29,6 +29,7 @@ class User < ApplicationRecord
   include RestrictedSignup
   include StripAttribute
   include EachBatch
+  include IgnorableColumns
   include CrossDatabaseIgnoredTables
   include UseSqlFunctionForPrimaryKeyLookups
 
@@ -45,6 +46,8 @@ class User < ApplicationRecord
     on: :destroy
   )
 
+  ignore_column :last_access_from_pipl_country_at, remove_after: '2024-11-17', remove_with: '17.7'
+
   DEFAULT_NOTIFICATION_LEVEL = :participating
 
   INSTANCE_ACCESS_REQUEST_APPROVERS_TO_BE_NOTIFIED_LIMIT = 10
@@ -1305,6 +1308,16 @@ class User < ApplicationRecord
     end
   end
 
+  # Used to search on the user's authorized_groups effeciently by using a CTE
+  def search_on_authorized_groups(query, use_minimum_char_limit: true)
+    authorized_groups_cte = Gitlab::SQL::CTE.new(:authorized_groups, authorized_groups)
+    authorized_groups_cte_alias = authorized_groups_cte.table.alias(Group.table_name)
+    Group
+      .with(authorized_groups_cte.to_arel)
+      .from(authorized_groups_cte_alias)
+      .search(query, use_minimum_char_limit: use_minimum_char_limit)
+  end
+
   # Returns the groups a user is a member of, either directly or through a parent group
   def membership_groups
     groups.self_and_descendants
diff --git a/app/services/concerns/users/participable_service.rb b/app/services/concerns/users/participable_service.rb
index e18b7f5923f..a8e7d238414 100644
--- a/app/services/concerns/users/participable_service.rb
+++ b/app/services/concerns/users/participable_service.rb
@@ -15,6 +15,7 @@ module Users
 
     def noteable_owner
       return [] unless noteable && noteable.author.present?
+      return [] if noteable.author.placeholder? || noteable.author.import_user?
 
       [noteable.author].tap do |users|
         preload_status(users)
@@ -25,6 +26,7 @@ module Users
       return [] unless noteable
 
       users = noteable.participants(current_user)
+      users = users.reject { |user| user.placeholder? || user.import_user? }
       sorted(users)
     end
 
diff --git a/app/views/layouts/_page.html.haml b/app/views/layouts/_page.html.haml
index 2689a6916e0..a67c22148b1 100644
--- a/app/views/layouts/_page.html.haml
+++ b/app/views/layouts/_page.html.haml
@@ -21,6 +21,7 @@
     .alert-wrapper.alert-wrapper-top-space.gl-flex.gl-flex-col.gl-gap-3.container-fluid{ class: alert_class }
       = dispensable_render 'shared/outdated_browser'
       = dispensable_render_if_exists "layouts/header/licensed_user_count_threshold"
+      = dispensable_render_if_exists "layouts/header/licensed_user_count_threshold_block_seat_overages"
       = dispensable_render_if_exists "layouts/header/token_expiry_notification"
       -# This is needed by [GitLab JH](https://gitlab.com/gitlab-jh/jh-team/gitlab/-/issues/13)
       = dispensable_render_if_exists "layouts/header/account_notification"
diff --git a/config/feature_flags/gitlab_com_derisk/autocomplete_group_search_optimization.yml b/config/feature_flags/gitlab_com_derisk/autocomplete_group_search_optimization.yml
new file mode 100644
index 00000000000..df4a791a08a
--- /dev/null
+++ b/config/feature_flags/gitlab_com_derisk/autocomplete_group_search_optimization.yml
@@ -0,0 +1,9 @@
+---
+name: autocomplete_group_search_optimization
+feature_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/472011
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/170948
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/501202
+milestone: '17.6'
+group: group::global search
+type: gitlab_com_derisk
+default_enabled: false
diff --git a/config/initializers/0_license.rb b/config/initializers/0_license.rb
new file mode 100644
index 00000000000..e6b17a522f9
--- /dev/null
+++ b/config/initializers/0_license.rb
@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+load_license = ->(dir:, license_name:) do
+  begin
+    public_key_file = File.read(Rails.root.join(dir, ".license_encryption_key.pub"))
+    public_key = OpenSSL::PKey::RSA.new(public_key_file)
+    Gitlab::License.encryption_key = public_key
+  rescue StandardError
+    warn "WARNING: No valid #{license_name} encryption key provided."
+  end
+
+  begin
+    if Rails.env.development? || Rails.env.test? || ENV['GITLAB_LICENSE_MODE'] == 'test'
+      fallback_key_file = File.read(Rails.root.join(dir, ".test_license_encryption_key.pub"))
+      fallback_key = OpenSSL::PKey::RSA.new(fallback_key_file)
+      Gitlab::License.fallback_decryption_keys = [fallback_key]
+    end
+  rescue StandardError
+    warn "WARNING: No fallback #{license_name} decryption key provided."
+  end
+end
+
+Gitlab.ee do
+  load_license.call(dir: '.', license_name: 'license')
+end
+
+Gitlab.jh do
+  load_license.call(dir: 'jh', license_name: 'JH license')
+end
diff --git a/config/sidekiq_queues.yml b/config/sidekiq_queues.yml
index f59744997d2..9a941f85c0b 100644
--- a/config/sidekiq_queues.yml
+++ b/config/sidekiq_queues.yml
@@ -233,6 +233,10 @@
   - 1
 - - compliance_management_standards_gitlab_at_least_two_approvals_group
   - 1
+- - compliance_management_standards_gitlab_dast
+  - 1
+- - compliance_management_standards_gitlab_dast_group
+  - 1
 - - compliance_management_standards_gitlab_prevent_approval_by_author
   - 1
 - - compliance_management_standards_gitlab_prevent_approval_by_author_group
diff --git a/db/docs/instance_integrations.yml b/db/docs/instance_integrations.yml
index b799f7a5a5b..cb5047f72de 100644
--- a/db/docs/instance_integrations.yml
+++ b/db/docs/instance_integrations.yml
@@ -1,7 +1,7 @@
 ---
 table_name: instance_integrations
 classes:
-- Integrations::InstanceIntegration
+- Integrations::Instance::Integration
 feature_categories:
 - integrations
 description: Support 3rd party instance-wide integrations
diff --git a/db/docs/pipl_users.yml b/db/docs/pipl_users.yml
new file mode 100644
index 00000000000..57fc67b0875
--- /dev/null
+++ b/db/docs/pipl_users.yml
@@ -0,0 +1,11 @@
+---
+table_name: pipl_users
+classes:
+  - ComplianceManagement::PiplUser
+feature_categories:
+  - compliance_management
+description: Stores user accesses and notifications from PIPL countries
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/169769
+milestone: '17.6'
+gitlab_schema: gitlab_main_cell
+exempt_from_sharding: true # Not related to projects or groups
diff --git a/db/migrate/20241016095329_create_pipl_users_table.rb b/db/migrate/20241016095329_create_pipl_users_table.rb
new file mode 100644
index 00000000000..f3f59da6281
--- /dev/null
+++ b/db/migrate/20241016095329_create_pipl_users_table.rb
@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+class CreatePiplUsersTable < Gitlab::Database::Migration[2.2]
+  milestone '17.6'
+
+  def up
+    create_table :pipl_users, id: false do |t|
+      t.references :user, primary_key: true, default: nil, index: false, foreign_key: { on_delete: :cascade }
+
+      t.timestamps_with_timezone null: false
+      t.datetime_with_timezone :initial_email_sent_at, index: true
+      t.datetime_with_timezone :last_access_from_pipl_country_at, null: false
+    end
+  end
+
+  def down
+    drop_table :pipl_users
+  end
+end
diff --git a/db/schema_migrations/20241016095329 b/db/schema_migrations/20241016095329
new file mode 100644
index 00000000000..cd887c1990d
--- /dev/null
+++ b/db/schema_migrations/20241016095329
@@ -0,0 +1 @@
+a90f86f8f7ccc8bd9d1032a0ae161a413b6a4d6f2bd85e4198b224dca8483a68
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index 0159c21f62f..6ba199f264b 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -16584,6 +16584,14 @@ CREATE SEQUENCE personal_access_tokens_id_seq
 
 ALTER SEQUENCE personal_access_tokens_id_seq OWNED BY personal_access_tokens.id;
 
+CREATE TABLE pipl_users (
+    user_id bigint NOT NULL,
+    created_at timestamp with time zone NOT NULL,
+    updated_at timestamp with time zone NOT NULL,
+    initial_email_sent_at timestamp with time zone,
+    last_access_from_pipl_country_at timestamp with time zone NOT NULL
+);
+
 CREATE TABLE plan_limits (
     id bigint NOT NULL,
     plan_id bigint NOT NULL,
@@ -25820,6 +25828,9 @@ ALTER TABLE ONLY path_locks
 ALTER TABLE ONLY personal_access_tokens
     ADD CONSTRAINT personal_access_tokens_pkey PRIMARY KEY (id);
 
+ALTER TABLE ONLY pipl_users
+    ADD CONSTRAINT pipl_users_pkey PRIMARY KEY (user_id);
+
 ALTER TABLE ONLY plan_limits
     ADD CONSTRAINT plan_limits_pkey PRIMARY KEY (id);
 
@@ -31072,6 +31083,8 @@ CREATE UNIQUE INDEX p_ci_pipeline_variables_pipeline_id_key_partition_id_idx ON
 
 CREATE UNIQUE INDEX index_pipeline_variables_on_pipeline_id_key_partition_id_unique ON ci_pipeline_variables USING btree (pipeline_id, key, partition_id);
 
+CREATE INDEX index_pipl_users_on_initial_email_sent_at ON pipl_users USING btree (initial_email_sent_at);
+
 CREATE UNIQUE INDEX index_plan_limits_on_plan_id ON plan_limits USING btree (plan_id);
 
 CREATE UNIQUE INDEX index_plans_on_name ON plans USING btree (name);
@@ -37798,6 +37811,9 @@ ALTER TABLE p_ci_build_trace_metadata
 ALTER TABLE ONLY bulk_import_trackers
     ADD CONSTRAINT fk_rails_aed566d3f3 FOREIGN KEY (bulk_import_entity_id) REFERENCES bulk_import_entities(id) ON DELETE CASCADE;
 
+ALTER TABLE ONLY pipl_users
+    ADD CONSTRAINT fk_rails_af0eb8b205 FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE;
+
 ALTER TABLE ONLY pool_repositories
     ADD CONSTRAINT fk_rails_af3f8c5d62 FOREIGN KEY (shard_id) REFERENCES shards(id) ON DELETE RESTRICT;
 
diff --git a/doc/administration/issue_closing_pattern.md b/doc/administration/issue_closing_pattern.md
index df9a9ed205d..f20e8011abe 100644
--- a/doc/administration/issue_closing_pattern.md
+++ b/doc/administration/issue_closing_pattern.md
@@ -16,16 +16,15 @@ This page explains how an administrator can configure issue closing patterns.
 For user documentation about the feature, see
 [Closing issues automatically](../user/project/issues/managing_issues.md#closing-issues-automatically).
 
-When a commit or merge request resolves one or more issues, it is possible to
-automatically close these issues when the commit or merge request lands
-in the project's default branch.
+When a commit or merge request resolves one or more issues, GitLab can close those issues when the
+commit or merge request lands in the project's default branch.
 
 ## Change the issue closing pattern
 
 The [default issue closing pattern](../user/project/issues/managing_issues.md#default-closing-pattern)
-covers a wide range of words. You can change the pattern to suit your needs.
+covers a wide range of words.
 
-To change the default issue closing pattern:
+To change the default issue closing pattern to suit your needs:
 
 ::Tabs
 
@@ -108,6 +107,6 @@ To change the default issue closing pattern:
 
 ::EndTabs
 
-To test the issue closing pattern, use <https://rubular.com>.
-However, Rubular doesn't understand `%{issue_ref}`. When testing your patterns,
+To test the issue closing pattern, use [Rubular](https://rubular.com).
+Rubular does not understand `%{issue_ref}`. When you test your patterns,
 replace this string with `#\d+`, which matches only local issue references like `#123`.
diff --git a/doc/api/graphql/reference/index.md b/doc/api/graphql/reference/index.md
index db6e74ee445..7e6e872a96b 100644
--- a/doc/api/graphql/reference/index.md
+++ b/doc/api/graphql/reference/index.md
@@ -37582,6 +37582,7 @@ Name of the check for the compliance standard.
 | ----- | ----------- |
 | <a id="compliancestandardsadherencechecknameat_least_one_non_author_approval"></a>`AT_LEAST_ONE_NON_AUTHOR_APPROVAL` | At least one non author approval. |
 | <a id="compliancestandardsadherencechecknameat_least_two_approvals"></a>`AT_LEAST_TWO_APPROVALS` | At least two approvals. |
+| <a id="compliancestandardsadherencechecknamedast"></a>`DAST` | Dast. |
 | <a id="compliancestandardsadherencechecknameprevent_approval_by_merge_request_author"></a>`PREVENT_APPROVAL_BY_MERGE_REQUEST_AUTHOR` | Prevent approval by merge request author. |
 | <a id="compliancestandardsadherencechecknameprevent_approval_by_merge_request_committers"></a>`PREVENT_APPROVAL_BY_MERGE_REQUEST_COMMITTERS` | Prevent approval by merge request committers. |
 | <a id="compliancestandardsadherencechecknamesast"></a>`SAST` | Sast. |
diff --git a/doc/development/sidekiq/idempotent_jobs.md b/doc/development/sidekiq/idempotent_jobs.md
index fd9f6e467f5..1bea3083b64 100644
--- a/doc/development/sidekiq/idempotent_jobs.md
+++ b/doc/development/sidekiq/idempotent_jobs.md
@@ -46,8 +46,8 @@ specific to the worker in the shared examples block.
 ```ruby
 it_behaves_like 'an idempotent worker' do
   it 'checks the side-effects for multiple calls' do
-    # `subject` will call the job's perform method 2 times
-    subject
+    # `perform_idempotent_work` will call the job's perform method 2 times
+    perform_idempotent_work
 
     expect(model.state).to eq('state')
   end
diff --git a/doc/subscriptions/gitlab_com/index.md b/doc/subscriptions/gitlab_com/index.md
index 520cf7df438..f965514470b 100644
--- a/doc/subscriptions/gitlab_com/index.md
+++ b/doc/subscriptions/gitlab_com/index.md
@@ -158,7 +158,8 @@ Billable users count toward the number of subscription seats purchased in your s
 A user is not counted as a billable user if:
 
 - They are pending approval.
-- They have the [Guest role on an Ultimate subscription](#free-guest-users).
+- They have only the [Guest role on an Ultimate subscription](#free-guest-users).
+- They have only the [Minimal Access role](../../user/permissions.md#users-with-minimal-access) for any GitLab.com subscriptions.
 - They are a [banned member](../../user/group/moderate_users.md#ban-a-user).
 - They are a [blocked user](../../administration/moderate_users.md#block-a-user).
 - The account is a GitLab-created service account:
diff --git a/doc/subscriptions/self_managed/index.md b/doc/subscriptions/self_managed/index.md
index 51a62b3a5b1..2e869e36b4d 100644
--- a/doc/subscriptions/self_managed/index.md
+++ b/doc/subscriptions/self_managed/index.md
@@ -51,8 +51,8 @@ A user is not counted as a billable user if:
 - They are [deactivated](../../administration/moderate_users.md#deactivate-a-user) or
   [blocked](../../administration/moderate_users.md#block-a-user).
 - They are [pending approval](../../administration/moderate_users.md#users-pending-approval).
-- They have only the [Minimal Access role](../../user/permissions.md#users-with-minimal-access) on self-managed Ultimate subscriptions or any GitLab.com subscriptions.
-- They have only the [Guest or Minimal Access roles on an Ultimate subscription](#free-guest-users).
+- They have only the [Minimal Access role](../../user/permissions.md#users-with-minimal-access) on self-managed Ultimate subscriptions.
+- They have only the [Guest role on an Ultimate subscription](#free-guest-users).
 - They do not have project or group memberships on an Ultimate subscription.
 - The account is a GitLab-created account:
   - [Ghost User](../../user/profile/account/delete_account.md#associated-records).
diff --git a/doc/user/project/merge_requests/dependencies.md b/doc/user/project/merge_requests/dependencies.md
index 8dd98176549..602ebc388a8 100644
--- a/doc/user/project/merge_requests/dependencies.md
+++ b/doc/user/project/merge_requests/dependencies.md
@@ -18,16 +18,16 @@ A single feature can span several merge requests, spread out across multiple pro
 and the order in which the work merges can be significant. Use merge request dependencies
 when it's important to merge work in a specific order. Some examples:
 
-- Ensure changes to a required library are merged before changes to a project that
+- Ensure changes to a required library merge before changes to a project that
   imports the library.
 - Prevent a documentation-only merge request from merging before the feature work
   is itself merged.
 - Require a merge request updating a permissions matrix to merge, before merging work
-  from someone who hasn't yet been granted permissions.
+  from someone who doesn't yet have the correct permissions.
 
 If your project `me/myexample` imports a library from `myfriend/library`,
-you might want to update your project to use a new feature in `myfriend/library`.
-However, if you merge changes to your project before the external library adds the
+you should update your project when `myfriend/library` releases a new feature.
+If you merge your changes to `me/myexample` before `myfriend/library` adds the
 new feature, you would break the default branch in your project. A merge request
 dependency prevents your work from merging too soon:
 
@@ -47,23 +47,23 @@ graph TB
   C-.->|blocks| D
 ```
 
-You could mark your `me/myexample` merge request as a [draft](drafts.md)
-and explain why in the comments. However, this approach is manual and does not scale, especially
-if your merge request relies on several others in multiple projects. Instead,
-use the draft (or ready) state to track the readiness of an individual
-merge request, and a merge request dependency to enforce merge order.
+It's possible to mark your `me/myexample` merge request as a [draft](drafts.md)
+and explain why in the comments. This approach is manual and does not scale, especially
+if your merge request relies on several others in different projects. Instead, you should:
 
-NOTE:
-Merge request dependencies are a **PREMIUM** feature, but this restriction is
-enforced only for the dependent merge request. A merge request in a **PREMIUM**
-project can depend on a merge request in a **FREE** project, but a merge request
-in a **FREE** project cannot be marked as dependent.
+- Track the readiness of an individual merge request with **Draft** or **Ready** status.
+- Enforce the order merge requests merge with a merge request dependency.
+
+Merge request dependencies are a **PREMIUM** feature, but GitLab enforces this restriction
+only for the *dependent* merge request:
+
+- A **PREMIUM** project's merge request can depend on any other merge request, even in a **FREE** project.
+- A **FREE** project's merge request cannot depend on other merge requests.
 
 ## Nested dependencies
 
-Indirect, nested dependencies are supported in GitLab 16.7 and later.
-A single merge request can be blocked by up to 10 merge requests, and,
-in turn, can block up to 10 merge requests. In this example, `myfriend/library!10`
+GitLab versions 16.7 and later support indirect, nested dependencies. A merge request can have up to 10 blockers,
+and in turn it can block up to 10 other merge requests. In this example, `myfriend/library!10`
 depends on `herfriend/another-lib!1`, which in turn depends on `mycorp/example!100`:
 
 ```mermaid
@@ -76,12 +76,11 @@ graph LR;
     B-->|depends on| C[mycorp/example!100]
 ```
 
-Nested dependencies do not display in the GitLab UI, but UI support has
-been proposed in [epic 5308](https://gitlab.com/groups/gitlab-org/-/epics/5308).
+Nested dependencies do not display in the GitLab UI, but UI support is
+proposed in [epic 5308](https://gitlab.com/groups/gitlab-org/-/epics/5308).
 
 NOTE:
-A merge request can't be made dependent on itself (self-referential), but
-it's possible to create circular dependencies.
+A merge request cannot depend on itself (self-referential), but it's possible to create circular dependencies.
 
 ## View dependencies for a merge request
 
@@ -100,26 +99,23 @@ To view dependency information on a merge request:
 1. Select **Expand** to view the title, milestone, assignee, and pipeline status
    of each dependency.
 
-Until your merge request's dependencies all merge, your merge request
-cannot be merged. The message
+Until your merge request's dependencies all merge, your merge request cannot merge. The message
 **Merge blocked: you can only merge after the above items are resolved** displays.
 
 ### Closed merge requests
 
-Closed merge requests still prevent their dependents from being merged, because
-a merge request can close regardless of whether or not the planned work actually merged.
-
-If a merge request closes and the dependency is no longer relevant,
+Closed merge requests still prevent their dependents from merging, because a merge request can close
+without merging its planned work. If a merge request closes and the dependency is no longer relevant,
 remove it as a dependency to unblock the dependent merge request.
 
 ## Create a new dependent merge request
 
 When you create a new merge request, you can prevent it from merging until after
-other specific work merges, even if the merge request is in a different project.
+other specific work merges. This dependency works even if the merge request is in a different project.
 
 Prerequisites:
 
-- You must have at least the Developer role or be allowed to create merge requests in the project.
+- You must have at least the Developer role, or have permission to create merge requests in the project.
 - The dependent merge request must be in a project in the Premium or Ultimate tier.
 
 To create a new merge request and mark it as dependent on another:
@@ -136,7 +132,7 @@ You can edit an existing merge request and mark it as dependent on another.
 
 Prerequisites:
 
-- You must have at least the Developer role or be allowed to edit merge requests in the project.
+- You must have at least the Developer role or have permission to edit merge requests in the project.
 
 To do this:
 
@@ -162,13 +158,13 @@ Prerequisites:
    for each dependency you want to remove.
 
    NOTE:
-   Dependencies for merge requests you don't have access to are displayed as
-   **1 inaccessible merge request**, and can be removed the same way.
+   Merge request dependencies you do not have permission to view are shown as
+   **1 inaccessible merge request**. You can still remove the dependency.
 1. Select **Save changes**.
 
 ## Troubleshooting
 
-### Preserving dependencies on project import or export
+### Preserve dependencies on project import or export
 
-Dependencies are not preserved when projects are imported or exported. For more
-information, read [issue #12549](https://gitlab.com/gitlab-org/gitlab/-/issues/12549).
+Dependencies are not preserved when you import or export a project. For more
+information, see [issue #12549](https://gitlab.com/gitlab-org/gitlab/-/issues/12549).
diff --git a/doc/user/project/merge_requests/manage.md b/doc/user/project/merge_requests/manage.md
index d0375f9ea17..036da6418b9 100644
--- a/doc/user/project/merge_requests/manage.md
+++ b/doc/user/project/merge_requests/manage.md
@@ -25,9 +25,9 @@ To delete a merge request:
 1. Select **Edit**.
 1. Scroll to the bottom of the page, and select **Delete merge request**.
 
-## Bulk edit merge requests at the project level
+## Bulk edit merge requests in a project
 
-You can update these attributes on multiple merge requests at the same time:
+These attributes are editable when bulk editing merge requests:
 
 - Status (open/closed)
 - Assignee
@@ -48,13 +48,13 @@ To do this:
 1. Select the appropriate fields and their values from the sidebar.
 1. Select **Update selected**.
 
-## Bulk edit merge requests at the group level
+## Bulk edit merge requests in a group
 
 DETAILS:
 **Tier:** Premium, Ultimate
 **Offering:** GitLab.com, Self-managed, GitLab Dedicated
 
-When bulk editing merge requests in a group, you can edit the following attributes:
+These attributes are editable when you bulk edit merge requests for a group:
 
 - Milestone
 - Labels
diff --git a/doc/user/project/merge_requests/reviews/img/multiline-comment-saved_v13_3.png b/doc/user/project/merge_requests/reviews/img/multiline-comment-saved_v13_3.png
deleted file mode 100644
index cceab36e62b069b343c1c0c7ebec4abed2d99519..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 34361
zcmZs?bzECbyDp3rcXugHixe;Jw73-4;vRy#yHhA`MN28J!QI_0KyVN4c6gq5?|t^~
zJ74}-Yvh)>?)#cqE0am2iqaPhR8mwJ7#IxMuTp9-Fz{d)7`P9}@NX>}oHe;`w|AD}
zisCRZ)$wRg#t3h9SZB2_5-=6x<Ogr%d24lT7i~oa0aFKiHe)jf6LU5Xd*GWC42+P6
zz+2JY+{KvM!`=?yEZ`wb^RI-!Tlt@6b{gt`MO<u!X|xqps3jeo%&B?UxY<6@h@eta
zQwuqnSqP{}$^4i4TTPh8%EbjJz|QXO?#|}U#pd8-$<D#g&(Hpelbw^3^-Y4+*%RPm
z?7<3fru~nR|F$D#?riF04Ro<~08sy9*Vx3t)kT<w<{wA@^ZCy>%{{FDuP1=>f5CbK
z$o@|cI|th*_W!Z{rYiJLtAL8Nhq;}$l(oG%!1>LG2><8LLjTJDKRy4~<9{?YoXwpi
z9qiu}T|~Z_I+?#2uySzuFXjK;`Tte?*QL(?b;-lS{l8uQub%(X6k`7e`TvT<f5QB4
z>sy>fP=(n4Cubt4#Aw}gZ(M+?D5y(6JUp!8NUg4}o}HZ?Kc78bEU&DryuQ9Z-R(W}
zjjcZJe){yOqoZTsY`V9%_n~L>>G}ETW*0Uv@a6UOzGLvZqIrLR|9N(db|nMyL1RbW
z9tZ>mzy$pG@#E$B`Pe!3z$)k}zveVDXW!KCuBGp6vu$#6^0uz?`ugVX?(XdL?D+T?
zLa%mH-F_CAcU{u(u)DNp=p`g5xU;jftLd^OVR3bFwJB(F;+42gp|Jj5slUJfysTnR
z$3sd=64VGf^oeO{X&D_Iy>0Bi=^j~JTs*W7yUeNB;M9A#fB0SU2g0UZQBn1DzVWaz
z4}m}i2M2dlfjK!jv$L~|;4Elno~p9a^~Hv>v-9R>gNxd_<IqHCK-y(<lck0EfpcgE
zbo?UYFEk<ZJo)zyWa2b5^KNze>2fPRKBn?~xwEA*EiLWz1pIRUc(6M!CntOUqfk>*
zBPuHLzH9jW;$mCI=B(h4hlj^`*Wk^>;N#KiUUS#o(nNki{`c>O_t)El-L-|Mv)$d@
z*ZtiWO?}lrQbIz4AuFSgn|rsjqt_$-k0)yo4(;6Rq`&|_A0MBU`2h*Y@AId-rmDQU
zy1MJmHh{fNTYAo~z_9D*N2QH2Lmi#X&CS`#uBU^O$>K8ZwY=x68|XUp@f7mAFe4&7
zq^Z8-etF{wdhX-pd^<D^27@8hP0o95M#Y8Gf2Iw$Yl$Kvrbe3Xrk1B~4l-)<7-C}k
z68i4i1|&sAS6X|9`<s%A|GMYq_vaLhgW6M)lYFgg@789=H)d82mPZd)<6S*B9?pS=
z#w|WAi)A%w16?aEE0txxpit=c=(a{mTD5g`CSPXj>VSW9?b+T`z(G$WcH|9o{&#0Z
z-j}@C<Dn9blFgHgs?8Y!+s=lWF4muke<%BU7Z1d;Gei>-`|4ZfcaK9WR=N+zDknfc
zXn(kbdm1HAwO>IDRMaFwhGUA8evl(ud)k+L;qCw!fv>ho`?kN^o6i0S9RR19!@y9(
z$V!Q;dn_NPPsr<ykq$W1xDeuPW1owm=XiazQVL>a;6*{i!>w~r#@<w<Hp2-a!g+_%
zj)J2#BoSn04xy1yh0|%J10jFSyQ12c1N{Y<RuddwK%qAxT+V(Zrt5bN(er{vXE9vq
zp5votB9}s3)p?KRjgHUUAJ(sC^$_GLeU#_gqY4jC@|`L>BJ+J7hS$1dyu2md%N8!H
zQYc^OpQUQxJ9#m0+4Cig3^nGu2u@ShwZ1JZup71eH5+SCf!Q^7)-l2}k1XdFlyhG$
zjmW}(_KaOG7Bcx@eg^C7>yrc6*w`@nh=_>7Goz!Ud&c_uHg<u|j*g%v5a|C$qURX{
zlnZopd`^5g&+*>gV8tdPTEO~Oxo2!+cXJcy40>hX9;u?kJ;zv~!;XAcpX@r!c=kJ7
z&?Dml6Qz;nM+PM`!P%2NDEPb}=B_{{cd1#=A{v`n)FUSt<Mh|`)Ld^{@DONqC3x8W
zM>1>?eWM`H<mmROyVBsZO`&y7JlQtICdOg%ROU!DyV=*a2_n9$nG5rHx>TZ62Wk@g
z?+vsis#Y`UheANgBTE+hM%GY=%aqY*qDIoJP%0CFiBb0y@oT|`2b=4ULZZrEa}2S9
z@o>=ZLL#JS=<tm;@dFmrihT>@)wAm%-UM2!pN)5wt8WEmIy5O@^c|5-@rzohq;8SY
ziEH53vSA5NrtHRzni_{j1HDx|;VhAUR?u<VaQ8(mivkAThTJBpXuMl>Td>W4(-&F6
zHko`me9$UR$yj(QR04JtV2AX?C$!PHMC<a!M{!Ch=2a{?wf!Et8|m1GaGTcGf3{`T
z&-pbpqc|P=WS?PM8BQU{L6Ko97=(=)+7G*M)@Vc0Hh-JOwZTf~pU{8u1=jsT#Uf{%
zF+_9o203u0VA+oAd}AX{M<{VqG)O~v{wFc@M)t!y`O?1I$V4e8-l_h1gHK{L`Al-0
zvV*U@g<d`p+p_#Z=AjY&sb#7#m6KTZu+iq3hwdf34^cHm&N4{qIzk!;A4^nMQ`Xou
zONPbeO`G24{`da<Vq*cO_ZiAupd}SWE&V=b0nA*v-*la8W(Bh)oD}UP6@(fZ+=l2>
zS)41=C&(EV7<&1<(k5cn<DHNunIcKEKr-LscE=m+yFI>fHe7b|E7+=bpWF0K*6xD6
zC%Zszr1r0H?$LK33FB%_ChDd$8g-_@gyCz#;Itx@U;K9Vd>-e`Vj1q(%&F!NEUm-A
z7(cN_>XZVXVZj-!24ey|^LB}-PHmHiX~mMxp$wsVmwg*><@(f>&EH1$U4PT_9egAK
ze~V{eQHH5hD-%-Cu9zNHPk(;D!M3788x(`Ud|)WJIpBe-i8>W{ApdI?i>Jn$cn_a0
zg&J*Yef|NHtym@WbM$m|$n#?CUmD^b)x(4cYT+&qVXIC9f%C1Brb>`3eMviR-<=B2
zuQ@?TAAzXHY&ovPkZUxnqD~AvjF3q0B6@wU)sg;bF`zl<oZ|#8I1^(IjO%97M<;>l
zkNNmMC8Fn1nT`U0<(42jY-ZJA@(J}pYLnM2Z|((CA;wyM<glR*CGs)v7SkCKae_yp
zkPHz_m90)x2zkheMRS6b$u1!QclQkzLcBvTtC)odLiUiy(5Q*L<Z+G3$Jn5#5*T3u
z^ek$IIf>-1<CRuwK=D@nG~5vSK;pn+<Yy(a1y#R|`m>s`Ah-?mxd_(iOo#AaUTCg_
z?~EHGyMxZA`(nP$yszRnfB_xhAD%(;AvOigF!g+@{;cH-wP#t_Iq5+5dcpX2&}3wf
z(=-PV8V_Qlr8%pg03A4aQ^B-jlaI}4{@hH0A+1oD#O@S}peUq7;UTanTOD<x(-^q!
zO<bSH+PW+JCqX(M{}}oEqp|Bd(ZJB%2pib0Ay`~xr}oaFQrKHq%4-U}_+MuCwAE>s
z^k-Aq+H=tb1vxx*u3{U!_6L~(@m<-Ml*U`1JK{%l<y!t^-azIq0#O<{)St<^rg`nC
zF!fPV;x>NTrMAsU_Bf{o%$aF27*`T<;-i2$$hCZIfpuS_OX<B9YMNQ?B{n@;gwlB|
zAUREl3SU@(uYdQRCQoj@Zm*g~6ig_29Wpf4T;ghX@NSGla8Pg6E%m8I+@?rVCQv2>
zGv6aOhGLfD<=)8!w<sNmi}^=`7HS{Z9IKti%)@q=*je1&_!K~0^IWM@2NG7ztP8qK
zug$A|_o$&p^`W<9-@*>C@g)nmAjwkm#(DGls6Cc5V;Pgjl||QH<8z*Evc7GIeB3zz
zVN{TBb@ESI24Q6AsFgk`FN?A|2U~ic*{AHjBV2**WHZhdU&}7$NHY{~?EAtDDZQ#r
z%kMgXE?Flsu_61wBsDl~S*m;rC#1qIR;nB(V9*m+`lyB?D9_REHx+;?Z0~#x2K0w)
z2EuDkLNtO7<q=y5_!#z{g?aZ1a9B*MlEtyX8)jqYuCjzChB!qU#<bLu>!O7L;?hp6
zl{M?ccuDTe7PLsW0rWlC+v@ZXPD5V!Mgt2cI(?l_=DtX5%*TO$@o8ysdvrMZNeO^W
z7fwaov$Yt&k5{gW#w7JjIOtFg)Z0b!K+^BJgcjBy!Fj`C=3(~g(~otq6PA~~1~bk)
zq3#O7WSEeNJysxJm*(ncBD7;pmO5Foa6VKCZ?~>b6hWU%Hu+}lh{h#aVB90B&`yjU
z9LH`JrZ)`5(6(G_q&Yw<W11M`_je3amqw(3IT2FXzE-Tj%)3X>8-d*-!e?^yw7v*h
z|LnI`Y4z_C?iyI}4-y^i4jM0-G7M(v3W*~xW9kz|Inpd6|7F)5B6yHGC_G1)R+a|j
zLw2I|1+ENvx;y#8fIkv~6!m<8Jw2_M`tT8&a?)*?&DOt&Y)FA*l5>G9#f^?xZo=@Y
zogdcZsd9;dl4V(WxB876Y&My}zF3c}#^EV*_6NYnbiMh1SSiC9mkC^VsmwCi<KZ_n
z%AE-)bYCOD08Ncudp6phgR%Xo&9E0wn~1sufb6eO+}+GwGC|Vx-U8aXcRuqhz@r?&
zm`MjTLQrIR24J(T)2H+-h#L^fXO?G}`AH$^Z_NRQTUmH&$nQb7$uczio8}i?bSQlt
z_X3?8n(lYlyneO}Z<#CG9!2~JPfFxQd@>SDsM%~aQEm((;Q6o?b4^Om64tJb+Gcyu
zSD=&PH;^nxFL-6QQjFUV2}&X)$xJclA5C%GRDjvz%*P@MuEF%+5YBOsM8ceBZD>bm
zl(H))bnu2EKK<>4iZzQp*kNk$xqRl=0doah1!t}a=FO_~{9VG0{b;hJm$R}M7qqh2
ztTAmT3jS31?e8At=LMjYoF1ed=+-ihhTPt=xBa`a`r^Lc?Y<b{!0Py^0Hsl44;-?h
zVVWb@+wIh|(qQl|zmX^7-ZWL`fsr4Qj{yXcH43>KcCaFW^x*hE>IvO?_>CVn<w5&t
zI3e>2nZWpGc;Lw`__^MyQW0b>{u*m%v#A=gLpikNY!>#AEw~>`*Gj23ymv0WISd3o
z3T;cA_#bDVDB~@WcJjAO&6o{Z6o)W;>kdeW)(jGBoVG~d>yfX_qfRTTNKO4kEoH5d
z54O^$Mhk4NGRbcl>R)9@ify<G9$M~AyHjk-jkt}@xI=JWZ9#eM7k1#v{!`v?XlQgJ
z6sctCHO^(JG;u1lC*(XXSqUw)Pdj#{aN6?xZtdD7{w`o&WHRBy>(EkI92YaF0~_`4
z!dX^k7ltzGf-x!pN0CEX^^e;vA2+v{W5YI=<0FyEu{}PjH`-)O?Ied?j&o(XM$0d!
zw%#eL9OqiNPoNIhSD!&)yM4}>tbJ@RX$}m4hbN>qXqwB5!*z}=&qdI+#1&biMS4s1
zk3QZ@+^h3}*tk+N>G`)jBts|eUrXiG+-fu0J2Yz-fwuV(9&Ni$+!94a;>U#OUvm9Q
zk4y-HcEK%-Ls^-#Vkylscp=6!RZonMyGeRg$ZIvC>&wd$rp}KY4Gq}4dR8v&*LY8-
zySsRg#Y1{8rX2{-@o}q&&jolHL6C|FESic$4tl7l#b^_c>yNgQsA(KGM~Qwn{yHX8
zKK`<6la9~9WKd}VWH7<Gqp0IBMk2qvFH6WSc<aS%RL`Qb{IA6#TYsHfOb5qaMf@fv
zBP+p2S5$zu4&mH)dpbjSC4W+2V_ltklT%O&D!u&y)8~+vb))RZzg6(embl<h3&_~a
zVB)buF{Q=g39l!RV*h9eA8f*WnQ{cYMO|e8$w$84j>zn?zB;9O{3P4g0C67?Dy3_w
zYGik{Z=d{rXFQ~DS_hN+4K$I046Qeo)Eah`$y&gN&gLf?q)yEN3euVnyDhG;@ACTm
z8qb^$RU^qo6zpEa(an(Ho*~R#ZBh^@6Hb+>{g|ScMA6mH$)E@F!%f1+gX~EPL^WEU
zXZ3}?4~1i~r8u!PSEPgb3m~e4PY{N0fTz+UzGJRe3;^!>J*!z`wGiX@)!yX0TffE;
zboXv~{WW9(m6)&{C78*GMq(J13X-)8whj}&g>rS6rEmzPCBTW8^;>mgR+m8m9MyS>
zVB}tQ7l!E`%$e<{wRZtrHvfhelP1)+1nHb#12RAxz_2;1EZ-+*A0()QHT;Xn{Kl6Q
zvmS0iM=NJU*=YF3f*Lzg{id9&YjM57+<dqrKT9NOXl>=Z{csyMs{rS!xZ|-`GG?1P
zp@B|lay$k4oJsPE%MnYw&Cf5@S%wp!GK?toTfotvmwT~mfjxWz{#r?(9m40PLU#lE
zK?~aM=$e!oE9az}*&t|Gru|3;s2?qoB0TRalWTJ8E6u!t(fj;P)9j^>422yDQDH0#
zTdHct=XWEe7*jOIdI*eh0ap4W2_K@RXsO;U`<K`6<oeI(XLuiy&72<brHf4ZT3ldU
z@>Zb4HMaS$h{f?xPp8l}>+`cCD-{vc?lPC2TZAP4sNh&|FR8hyYra#m0Z&J^vfv0{
zc_@}*DZj`8wUpiVsz0=qpZGpAgwD)pI5hjbEDxPH_`XU$pEe;T@{egJPt^!lzsh@V
z29rJ!hn}KtT~y2ARKmS|Eo37H{J&Q=eGm{Nnub~!y{L~Qy_WV?y9`=MrL2rX95p#F
zt@&#2`)sSpCxxrSm9D;}UcE`$sw*oyyH?~Nm_%pWTAWsBBPbc1jP5f+hDU_yZU}sI
zFE;oETdUn#I;w^*dwf#!3w_$uRQ;jGg7c5eA6!TlUZtD}hL9imRKY6B8E**agWyo&
zPLM^7GQ69SmWS<T_r^FDAQrkmXSM&4^wY<B_Y?!nAANy;AbOPDe<TWaLQJUTZZHnk
zr&YAyhn8qs{bZs2W~0ZZL?C|Si6p?VrNW&0zO0hkJ0@xeyO%7L`uMkZfg6fOE05y_
za1WsoDL@3{LoiGU3hnn4rC;+Xz=V&)NCh9xNV^(|e{&?8sSP&dahkbm$TP8&Ef@T_
zOOwStVx#~NR-^gK4;&bLfFihk2aQw<)a-y%f7PBGA^m5_XaIi}hJ{Y)D&kYA`Dx@d
zX%zC?0d8_OTFmVh-4-05Xh%{-rsZEY=pzM?IvM_=yecz)7H0Ou@)wegd0MwF@#Z;p
zmkM+$WU%)GunhCbw^EE&wv6?BzBjZdn+WVN;X^_K$B3Lp2+~m2TA-#O(g9eZwih{<
z(l`5f6tIT25XZQ=dOG4`k)q1Wl#ci;ZCK#6B!m{PHKLN(GSdJVyQ)n@n_e6m!mH~-
z8X4Hgp{<ZL*o_jR6!$}%vQc2T*gXfG>J`C;Dpq?D)`<8FCDm?5w=X)RS1?vZ+rt~W
zzg7l3!f8qTl}7Gf)x{sEx3qEmm!3#K`z)^~=|91>Z}Mf=1CUnAQT+A}-rWA1uYOi8
z*J@i;o7mrEI^Rm{OZP{IiN&I61s3xdZ<>oFuS&Z#P3}jfaoM+#So0rJ>r5^)wSj=O
zjDJa}r^K+6ea5C8v&r9x^C`OjZ)pOaT%C6K3UWJw@xq!mIn>ccmOV^QwWSU_!#Vzo
z<Ov5Ye#)`(Ccis5i_8Num@cUzqbRCmr&?P<(x8(`;DbuE#$YuQ>6xvpsOQ%B3p7k}
zf2TYWEnJWtlnG-c=Q$D^pu=sLyxU{kpq7$}ur5L5BNmF|!uwTbyZ*yX3Zq%R6jmrb
z?cDX}LP{7BIKH96zZQSo63H62Iurxx;vTTbjnG!H1C;DQ?zJ66K&M!~f8s2ZntOQK
zR6wE?88Qm{HwL2DTo^hLq*~aE97@m5Id_h};cQ6sNxtKh@0Bjx0D98O@kZ2FYul09
zck5m#BMF%9Y<~=C5w2Jp_c!g|M*FA?{+u}aQU5B3?)A9|2)eKM#HRll{I>b?U)MES
z@XAGU$4+ife<)h2``fht@18d)s2y%r>e+iCQL1sCk;SJc{Ac`^P`*Vh34pRMe#gK{
zr|`{B%9Pw)RKAhwlcmL4zF@(Km3so)?6oJ6)89F|SRGv2RL?Z&>@4eO8RNUqRsDuS
ze{Ka##*pikySq=HuO}IV*X}4Ry+G&Nu;Z5=rd#h7pCPyWKiv$zW3|TR*15i)ps7HA
zmW$h)$Ye8Qs+7-Wsng}0)tKMO^Rfu@`5BhrV>zQd^Ua*u_3wZ)&N_~zNKU!X*Bj$<
zG|CB4LsjD9BLb5@u=2$O@xO<D%IT(&p#F*v%u7eOI#TlCtE~+8^R%{td-gX?bZe2g
z!wY>J9{byP?)Y-}G*_JknRkW=nK~fe)&Tn~^d6?1P9AY*WG^Gh>%M;b-G5P88dGYy
z+5_Fi?-)4>`mV;B3<?kRbT;bznPpY{`zBl&u#~fCw0J_c|BmAHojukuJ9N?EhsYpc
zfWaiLt4(2fdf_pR%`<|WEokA_-P}Uq?Y+jTC8Ec*h)4{!ZrorBx-i5qP9sR8F)kq<
zw(9VjhH1&#>qEgTEuqN7D~w9`_eWTdwl($hxU%BEpQD`TSYx=`Pz_2)5`J9ebn3#V
zDBz(P!G0?(_~k(Gt5<2RU^vw-RV)`TVXyRC7lI3@yTmZ}iF?D(?Q&R1#`XAc#{QDg
zDNt`BkZA%9P<z4!!IU%R<WB4ldIvq@Z18m!zm24>&N6n+B}EUjHy-+Go<uhd-Yfi7
zzlXs#voWuomYoq(m8VOZ$!RX`Ca~Y0b!atDmA=u=$g&cKq>%D#ahXK|9dKKT##jli
zQhewEWIkeX&JjDgq+$p*tonniJAF-8Wgt17nr1Y=C{d_C;(o^R8dNQ95hL4^HYq7W
zaa##c$h;c;(7;dRWtXT5ulB2z2Rq>tSQyqR`AHJEpd%QQ91ZLAISx-@w*0Fw^ISRY
zv@c4J;+V<N;5#Mr%mhs@1%&TK^QXkxe`>E2%+LWNCvjzR1MqcNhsH%kSk6DYR%axs
ze*7E+;mw(&kymo9qGZo>zs9%KdMXym!hd!pW-9r%Q{43K0;^6Ohm_WLSg|X(`NM|@
zD{PMK(0BMG2*%O{;@EBPluh5U2W}@sr+(k%^~iYV<YSp8YL@%3f5@9O`kDQ79BR?R
zChVpqd~N)kQ+fE=1mU|5YQvvW8IU<<;9RLq8Z@Y%EEM>4ViUU#nR-{pY?U04bue<;
z_@ue&6nCh2u(}1j1EuS+LHtNX0O;;bfqRPjo|x`AX2`Jh>G3!hl#npAbQ7U4G+4m$
zK#19F^WG38NzyGwEny2MoauLq0m6<eB_TG7F8jMXEGr8HnBslegal6?`<Sh!B1*A8
zD-e;^PCN;_;R6*f5_0H-UaOBOA7w)?aRcSu^~d1HiK9weAeAydxCPl$!Xx+DH3RM2
z%Ycnes}xR1r}~sZ;pK@}RH1|S;ih-XzDbTf=6m*nPl1buu^0WWS+l}ll~I3pCc%Tm
zQ^vR|#N$gs{{$wi1sTL8kQM#3f{)3n!~`-PDR>i$Py|-@2q)n1f2-dvF^`ugE+lG-
zCInv>6~S4n-M+W@%#*MI4@~;HsEFcDks}jOU6*6Jr7n!3W9QQzltGrsDOXB>{Ao&d
z<GU0sdnfCB<ULt4@efNaCh}eCSX^t^+dLrUh}lKMM!V++jN`Hwa%kqzOh53}l<!i_
zzw(&^yfuvOQ}80~Ck~UQ)5@`heZtY0O6j0=G4K%$+Vzx=&N`-BM*|VDX&j0**BD|k
z)CqW8{q1-+o<ZGi-*~Kc1*)O`TOUG{z9drKC7jC__xlFplSp0H>Yc|U48F5pWhLD#
z%c0+0KltKqenIpE$QKfvyFVuwAzjtH%F0e1pCV<P6{dV$g#pNjh$_)Q3ib=juV)F)
z3~PGdjnvKhr72^hzN-zZrVRUYCh?RFk_~-5g%$^-^jeJ^;r+50?N};22uBMWarOd^
zzryhMp<Jo1&1~xc+#z|El^rz$82Mf>Wk=?ZE-L!(slW5Sf}_2pyr4f5cx-ntUECLL
zwyb{{-~V07%XkzUV~w58`_^VvAqG>NA@>9WFpOTkjbuwz7=i4^VNOf5U489rLmd|8
z@SXwkIUtVxHVP6H^<E|iw1TL&FAzpB3K1;t;9_(TApmqu-<nS-c1f29E<VOnM5hzy
zQ?VNI-M&a1m+IGb**}c0Zs^7hDwdjO#-+8i2hy8XQzv5V{rC)my&ru9*j9p}+Utmo
z=uJ9JoA_JtVBog^vI?#BGg2^tqiiRe^OufrvIf4p4qAL{%4<$m@OI(&7~}Qcof7*d
z+ifln>}g!cBRZ)X8X#fr+c~o|{|4}p1TI_b-4~@)>aS6}VB+659QFi)EuZk=2T?#w
zZh?RyQX3eXSzM?J6y{c!K~MMh;>9EIW1oDQ&JdjTYDgD)CGdt7bi_m!>!q}4_c^tc
zap+G<jMpkE6kdy)RNC4Z0Z!lLP6H&(%EU}$G@#Nu(!QF7)CKuQ$+E$QbDlj=>;Pt^
z5)pYx)H7@zY79>rz}TP+5Cu1SE;4|DW8}QVHvV>7cdEx#6Yn?Qu?<rBGHDjbypj(P
zYO<p6m8@1L+laO&36Bp^rtQjzB15~JK}e$)R2FvCcTXOyP~G51p@!7TMb_J=>7W)z
z1jL7jn<&AZTk`dzkL{LB9>=#Z4-4U}DSWBGZyWEw!gU0bq3802T91d`^zfQH)A0TU
zGCGTd)nh>6lU0uLv5DFyAYr7B!|V$Q`&RDZ&))cFCJxjwB5C;q48-ogimOM=tkXOj
z%LH}gV|BX~oprK^b?i8_3g$I{T*-;O`#+g;Cb>Xg1_#BBoj3oQ-_V(7=dWfh{N5!z
zuO2pd3zh(0wjTlDz%5v7!j*RQdd>`y%C(y*V;p6NKQ?lXzK9Rw*6g!KDwW7H9C%Ev
zmYW5GH`tq$Wy~^M9FLfCJ8L3&$B&)m)+QdIMUks$)zHWp5Ab(h0GvD`-@m8*Uay^2
zsFd>E<3#Pw1S_9#JPHEPgTGo2I!8}ijm7cQ?Pe(PNJ0k2GHMsH6ZSDVsGVqCIdZ^o
zekXQ)a&mG#e`5J@mr#d16vbVdqfs(t#{%U$k+<&G3q`@iCKq?P<4J6Ab=MecPS6U{
z{181WU(y_>6T3D555Vk&0Zpj`Pv=<7!OWI;#uI|^W4EWX^07YbhA|U-4`6xBnXymF
zy#1CsjA#NVV{s?UtZ_-}txz62>0~U5BKV%t5|=WHyk+-J4}RZ?p2k+3$Is<UEecny
zw&ZX5#+8#Vj0VXoA*-J}GJ&GPyqWRJr<CErzb%{#3O+3b{hsA@9r<XUqGFpF$Btpx
zzY>rY)fB(NvTK;&W<Fk>J@L^|fxRDIz)B>1rA(TPU>cx;;GPM5u`na9?3~eQs-`g)
zBAFciK>>LG;F0C9Yyy>>wreCA_twwjUZ$`4Uj3S-@5EaB!IJZ)k;=?V1GHl#;=8sP
zc+>Oz>`VJ%j>blHzE`>P_%Vmo$bF=G5*;-un<944_u8r)ndLYfzEi4EuHJAws;Mok
zPSDuVFuAlQgp@T*HM?j=8IL8|t~)!*3Ofl7Y{-UYMh8ONFS2e#l~L>kGl13VLRth%
zHH7_!O`xB=HxD&h6rKnFS?Io?0gi{lCV(}%@{H)-qva&Rz+msyxYvN9zF4~-p<^1e
z(@etWZdN?@U98@THDDR0SRV`JPlui1wPIuXfiQU4-|deKg!4%Q5f%!nvT8I*r3JGw
z`<Q=1T~I;E^M_#`G+-xEy>be_R(_B}m<q$`8b(;p^p*@TlhqFaV9|QA?1)2WCdgK^
z1Ch~^YRDQ#xn~Ub#x-R=dGbytG74TP(=ds2ICISHQhWruhaTX(KORCCv0o7ae2~I|
zoHr%2ikjrd5r93}1OVN!TGX~DUxm5qA-s~%k2&1z{@bY^tG4v?j6^n0H`ts7^FCSM
z<A~;p%&8Ir&oAuwM+m&f@xdDDM3;jzdxdBu5j*|b#`pVW<25_D&{C?Vx3>zmk&u>#
z;Dj}eB`1_dX5H>Fspd{F38TQ_94!CMdQ;XP*b>!CN_(Kz?G&ulyAZIkUITdS+cN3k
z=fD*|M@|@JCp!>=$FRhAJit^E^T$<5uX)QGy0~{w8BK7oH~!NBCM74dzKr>#)kWu$
z_|&!}KE5`f0X7kl#)v_2WKgDfH9VW9!wm*ct<cN(f->1t8o%-fbH{N5oaWl6<Id`=
z_zssU&6h~KM-tB`X&i0JDu)Nem0I^S!Y}G{W`jqb^Zf($l*PR<%ctW;_VD9P{d^u)
zBsHsROFv#}<fLa(l#Kja23#aUS&pvbC4LxnUkOf?hM;D6$a%7AT?F4qlxxYAtLSy$
zuthnxJ_RY+>(q%1=9I~XEHHje%}@}E;Q8;f0QGQzA-K=ooQw0;22vir<fgFKbj1Fb
zz*nR-)>jAr^HZd{5iOHVGC>y=EvO{vD-M`_O(f}fa6*RrknbfY5`Wz9ZgCVj>v=^>
z{pO16Bv28=S8_eW{$tnyQ4sk03`}JoS!8a=C#hE~rLUEVeo28XD($d6?3n$=ck5rr
z{KB_Uj5(&{I80U#R&tE`Mh?o}#76=k0e*k(3tS0YVODa4xIx_h?J!B{IFq-XkZW4{
z>Cn$F+Pd5Myx=cs|BN){_d;g#YI5qMizmAVqd-N7`k=lxs*iYqpkRs|@sWQ_@qPGW
zQUof^hiN86&4>s@L|(cn>JSedA$pwFcZogvts%02_rK{9w&?D}8`d6X{7V(*&1yQb
zH?&;SVsteOctxHy-4`COBy)Z~Hg+lc)ov}UZ&2FVW2|}IvS2aiZ|RgN>{=R?4`+sb
zOrK|~tb}zuI)DzXEX?5<1o&NNR}@*TOIW1eySSqnxq6$O?KFxq7(Tk~`|<4@?v8Ep
zxTGcY+4@;$=uI%BdVNMe(xf}j_;8BM$CodRj)~b|8JyWTNcD3BT3EHfKbxqbt@qMA
z&1uuj;kSZGdbpi?$YR}6Y&4=eZ_D9(HK9l^oH<Z;BMg*Dws8*}sO_x(OX!C#gmc9R
zn_=ce^lPoY5@K3#U*JQ~LT9*TQmxZxYt<D@5sE5poj;e^XWODHPFQ(gWDO9`ER+1`
z6L`g=(^@?I*kvy`JA6;F;Z|l_nVB+zS?`>I+dZGQ;>O*8-HP#Q-_xxWFIlc3af0(s
z60h+OQ8}FbBB?~l>MoSKx+H5Me<z?PR&jJbBh%C7s+*zaViJw0LWcm6&vz!UC3fVD
zcM0_*3*%c%b1bXJ3`a+#!!d8UfdO2T)?jyniNqJ6Y`FI`0i->%Gkg#oEDQ&xi^?3W
z7~HstSg;FCXEE$id{|&KTnU*)(`nT-%8+d(wDcX`<l)Y}j$8=gR>ZA5*A+P@)inlw
z^m%Qw=3k(A;kDf+WJn2qd`#cC5t#kd85@f$p@;Z+)=qFa!91{j5WmhIoj#njGxjzq
zL357himuemr7dM(b|^?h|5t^vnCTkwrLNjGW#T?oq>*X10%d2Ng^TNR2mq84K58#4
z$<!dzOnKC_A*0P0{J|G0Y0InNJv)cKnm<{))Mu(2>@*U@As`&geI^DY#i|u3A3$dJ
z2fJy-%4yhEnSl)?yvf5xnAB&>L=-8Ok*wSrCK4#75V4SAO|!%{!GyQTlS9A|y`U0R
z47l&JRs1@B7PVk!o$;2?dY?@m*ham#lqthCX3;%#-}zwHi|>S~=uEZjik+ee>PmN1
z#a-LGeCzvO_><hGgkXfY9|jVaT+Xpva?@Z-J9uMfYG=12>#sS1^A@(vE3HmNUR9dG
z#+!1oQq|c<_@gWf-$t3Yy>bMvbG3TQlla0x;jp^XSRX_58Mo%X(l*NMK(aOKrhz({
zJj?_YK(+{C$<oGhD~-Ccl41avBj^XlEkR~07s&j4nenzxKVkuO`910hb%#eeOa|_k
z*03cO(0K8Veyc^#2|=ZFy_L|<n>VO#u=l;T5*ZAU3m&Yw9*UhOIF)}cxH_MK%DWdk
zeEhRtw=Ld3$edDAF|vnHlq)E)C_abT^dsvfN@CPM>;Nv5J5ydDN%RqQB`X8frh^o7
z>|%(<d^J~F%zNNpVQ-7BN>>^>Ajix=1ll-Bh%&XeO+oAI)4Fj781b5(yyfV$pH6j2
zYnWke2%LP0qyki0W7uJSx2aY-5c0VgT(2bt+oJ$3&v68SBbz)ZfMR`Xt3M3(w2=$g
zokzHp@7ci${{X_N%nSW=^ftrj_c>&6D^dO@XNZk-hTm9T(Sb9zwv-$*^6*yzvkljd
zr;;^_i|=HYCvlh@=^p5lLOu-TA<j4j<<cwEQL8Z@?KVwuahl`CjPMBa14%u7>&NS|
z!n$DfbLA*&N%%01b6e6$59gV_6u-belzav{s4mguT3s4PsTL5Ed~MtfU$NIMNOE$d
zIEj-2LS=<Bg$$6C*nNMr2=kkIM|ZJCFVKO~Juu4IZR9J^HY8dJ^HFKOwC;vxl2O|I
z!_m4yUb?s3*u-(368r~Dt*z`P4<a8$6zxB7oPgdGHdk3KCgcV1gcJx2G)@J^Wp-&b
zlCj;Z!9#rCA{b>mk4X!=h8&X-mDCR`k7X8}qWg!$1ADn8-b+F4g&hv}gq+B(OhFsm
zr9Wul<H7U?HvALIY_SP~PH3R_POk?ox=@aC*jD#Vyvg*-!RNc{qlHeA`*+?DKyJ?Y
z7o2lvfNX1juZiCqmE8lr;#TeuzRwZd<iX?{iELO^7?pV=)MR%Q<C`@yg@Cupzsto^
zJ>5C!<A=dF5Ie#fgfexHkHKBf3PDn9CXX-gjYRx2C1XotTf%gv<O!U?cxef#nnY=I
zdm|y5LwPdeNsR+k=<=NgrI=o_5_<Bd*$JJRB#mRL{np!|-g;CSdhhg{#toLJjoa5x
zll6g(yo0}aAZ-#8O{QCJJG=a#`%e_0ziqHP8HY<*n;hi^2n?yIsf5k#^#Cf_ZNfdU
zx*cZi#Zl+2JgDU5^ZR-wcx8yOGbE+gR)OUW0Pevijw_~TpRM-~SGSI+$OV;ZkY@PE
z!Mg!kyPh$7vl<W9(z$qC>s$}k#t?%=)bosl;<ucU0d!g$nitWBHhDDGZ~(?qWZmoO
ztvjs<PfK2XG=!;=u`&RVm$ZRR|6;${*K5lF6yM>1g*+Li`M-?tI7!vXQ`a4XvrYIt
zdR~;*=mrkg$1-Z$h$A@qr<A1rQ-62bGG1V>JoM0^<)wh*1*>wAthm#p<$^uPZjTFO
z{On84C*jO*;Np7QQcdst;`*U-=lZOku~AzFyz15W4~L_3;r~3YI4V8t8S|~3Grtm6
zmb)!-Bu6huJdp}^GkYYY1Z1uZnw^t|G5XG$pJ#aJr_veXO>@h>O}jT9OX#rDL@ua%
zu3O*hrRIu&MW602zA2n)tQ4`LOcV>w9xH!bt0+q)t@fVjq1&7y$OJraP=zHFrLzMT
z1xK~h>oVN<EK9A&S~u;5<9L*v_xd_TKw~t9Jt&O>q23dl;@*La(VILg|L`elecv|T
zqnwh(>ogSYoRll``Im=c@+&3O$jSabVg0_n>GMA0`k#qCD%l6GnGB!f+RXO1=a!ul
z_PS~-p_ivI_*JR37@`RjH1A|@$C7*8xxLslcpBiRcpcc}L1+x})>Tj!CDp(Of7tm(
z@OCRL$&U)sBhXM+1^)e~)Kwn!0TqDI_@R<nV#BQ>=d}=$5<T%!FTe1OCA?>BkIZpo
z9<A>PG1HKgs)(Kla*bNPka^W{?Ru&f?UAud$cOc37v{7Zbe`&^E9AnJ>?ULyd+qwr
zA>+kkAk{(*FMk?YF$BrKHrTI%wzsj^oLA5XFLH;HEYZYJZ`h&aZKhh2Oy(1kRd~-{
zeUvV!yUh0D-d-cQpcL!#?3h*%syQz#{QeCnUqq`{GtF%Yyi{57ZO3V};}=!V<+L*n
zqu0vAoD1TItDNKUDRkAWYob+;4_V-zm~^VDX}(u2V5`2O(hYBKoW`lw)U=<_wz9Y8
z`1;w(EvN%2)5_D@nz@8tYJsVoHB9!X>FZ})7nSXLsf9#wyNvD_yK^RD{Yj^r6rga4
z`LmJwEKSec?q-ha3@hsktnK*Fx>7HH{=;p6z2e1BoPy@t5s_4lu4ne{v3lLvK6)ub
zI=Q#w5yvN=*?6}gFduvSu*g367v!Rv6L*{Na5@Jo&iN3WH<}2Aked_ZdA#4f{y=Fm
z{W<DpP*A57xfem8-J(hoGVWXUZMgdnJ~oI%!h_PL4=t@ralvSJe)CJfh|lLZP`w?$
zojU~<?)YFM^|t_zkbKa>b|C&XN~`Svwajfm`KM^2MaLNX>Ixp@P{-;bkE-@W*Hhkk
zp32Z*SN!SuY}MM+8+)Xj??z&|BKez}HEk<d!qhh=LEWr~*qgzWm-vkeT2sZ46o}ze
zT~pW~8;z(5>wb`Typ&u7;5{qR)VvD5zWxy}IN=1JUrK@`Y#Jx;J|9qZkWpDy%!-(o
z#DkHT1nP|L|G-ArqnkaT_6|icqd{y<FLJynU`P?woxB`1Z_nmkFiy#gPQ9>cH1o7Q
z_KCHT1Q@Piz?9m>x8#JNSIRUnrj|n)@vN_+uZ0kiqa8_V;f$3K?W-L}Y2T0%^RnKD
z{LnJn#`6kKR<GX7k>vuyb&PS8Itp~M@GVq}7R6)O^Tf>gUYL0)`i*v`YXW;z019+`
zmmx9@+=sv^%m@B6Zb2)E1w@+hw!Rn{=25fd1xHGf8^tZoT!f^otRUPYI|mCF+z<PK
zr>2`czb2cchwB@fME8A#hZCnI2y@vhPC@M(s(f*{so1TLWr@7xH7m{x<7O>nIgB=!
zFJpVL@?<4P<Hxa$wcpf^A>QsvjIH9V{;ti7XlkkxhC&uiEeIc2wh;Dd8?qW2z@8(S
zW=5XA{XNE*IyF@PHbMWH-EPkNT9@_SG;vgk*R+}1TJ*qGqpkGCb<S2#bSyJ09ZxuL
zKb{^GJtaibKU@_v#zmN!8%K~<-5d1O-)FE?r!nwc+=|pDCbl!M5TiE75#7m3+{*-~
zb}ctoH7dTcY16B4#}(Csi`0lt_NQ1U8XXW)9dS~xPnLgIk(V~9@-F>-4+E`Oj|Q&;
z1{|me{#=ok4H~(+nPe|&;5M}z)Pe#I$_geH#?NHe3lK~hH^ZG&*Ugvf<tNe_28?`J
zfUGK_Ks_}F%@Pz9fWg^fm&xogHASCa@vC9n13FnF`(V-*7Z`S*lC&2+c^XaVcRYZ5
zPlUfL5N--cGA(2J9=Ve2>U*dEl->o@rkDI3uj;kYoPBkPhwTHuw0mUqY2XE?#RMoC
zTbOeR7u!!AMizAi_2A;7jU*M?WE4q_+T|1#EjZcVA;SuW$M{p0I;(~$$^?WB*13_b
zIBf)&{QS=AZ^JJ`rL+L<7<TVkeFv}#<Z4Td{)+-GU{QmqrW?=_3d=qzeCHl{y?p`W
z3+EoVu?<ppfg96m|6X-arh~+%0m#(06H?Z)hSk*)M=7SuPfFVQvGS!WTYLaeaKHAJ
zlihfkXdMfM%jOuekW!BTYW0CG7J$F;7MXz*I|DO5_usYi9zz`&vC<sNE(zt?hO|h6
zJTmPvz0G9396F5|7IT5g%n78zHyn#Uw|tFxh+^?g+!oE=Suv&04+f64v_-;cIbi$F
ziT3N)H9`DZhV6j?{reKN+8UZr`ZzWvLEMOlaB20iy&W#+E(|xgu>~9;-U;!!7pqLL
zbW6_r-@K<kor|qG{a=tlTRyd|hh^ZZfv@n$PHn>sCSiDZ+jqC#2{wz0lI}v4#P^Ob
z`V$pk{s%&A6u>yO3{FC+DexPbjD2*VpZ=5CYNFN10o|Vri}Tb3Ic*Qtg<^Hnn@Y;6
zoxG|c<Vj%c2R{A)<?~Yg9V70p!pn&-Y|HvUzQ7eD-N5J+5D32@?V9KwZ}+Q6J?hC;
z#*Ym506|OoyPV8gJAz$8`8H&LI7y00le%L$T~n9Rulqy@ZxnMwNJ@m8!kJfW@o7q_
zhJ0itOGTmSSILwr&AxX0m5WWal=6)@ALczHxxhn(dR?BME^8lvK(w4{PtA<}FPq}d
zUI@M<JNrLMqpL$gYn|+BbVFC<U!aB6YKgUlHbehH9P8bu3#O4HtUbOl!EC^rR<mKI
z2<aTG`eDOwOOL=f*H&DwI1uznUn8Y7S|_Fc-#Me0QVj<KaDsuV{DDE@^YxA5xJioU
zB?2o#2<vn&tUZH7Tl=GQ4=sa-EhuHW1VE<F3hLD3HP>*t3hzM(=4my%dvbJqi|5=%
zxL}<J3ygdUTEj|wf1UxVI;3j(e#SF#GVsjPiQ>y>TKe|e|0M+bz3yk6y0|n)FHc`p
z)KvQ)_z09<bhKh?&w)hYs!w{PXAaWiPNg!498m%4!k(#p7pl^_<chs%>E(LeLn;;K
zi(h%hx;^d|@K<bg$@m7(7zVZbtNy_v`BX0<8jwl;Nz6It_hul>b@_-<vz2q#Doa6r
zIsmfi)GByF-548>#>S>sCNs>|Q-jXPx9G@i#Q2q~a$z5>#<p;6^N2N8opxf8=DGdZ
zWBEPp+}Fhxegh$aAq(szoCFuEH!k)F%qI#(s?V@|oI8%VWO<N>C*c)@<BZY_-jJ@I
zK1H7OcSmbPgBsBVsXkiv?jm|KI(oLPDYxeZJr_Nefe~)m6O)57Rkif_lOS$=1X}vQ
zmdz+M01>zX<h0xAdtNJQ06M#GtNf>ZI34a*TC5>qqQj}{B<iCj61bxUk|0Qh24bBf
z(0ZA;$V767Z(x7A9v^@OY~51Pd85_SJyoXK)?cjT)M)%=y`;Ljki5NkWs;)X-u5B4
zi?ps^Uin)lECdf}|61}=@U)RO{*=5JyZ(6IqD58a#J*sIgm#*IINUEd>f4ERwCwC>
zEM%bVQOZzxtS>pT^H;D1_|*{JGx!wxf?;InUoj<pMUH_GzBbi1>B=tJ;KpxsOj3ds
z7KFjbjo~lDb6;SDWUVn5898IYBR|RQ3ncDL^8Ni82w#txz6)U<PpJ4-_#O^}kzb>S
z#n;LNF_?Fff5W*<QN#C}P>Q$rX2V|!|8OM{oL`iJ+n3aR%0$P<YBla0Bj#_1F?O0L
zRz%?;DUT=4d)w`g$aMZ?>d>BzqhYV2i|25-Tgj8+VvRK<Fxg`q=ihAIA4$sd2%y{u
z0jTH0anZx*<>J;-AS`(!(HW@i8F%`1d27Q{85e{Fg8ty0o)hW865$0ld#B2{2t7?M
z?0PtMt_Oy{z`U$4tpO!|zuIfXl@3v{Ut(dwGX?*cv5<}CO(-S~vWUXK!didZ^dl6q
z{mx{PgJ_U9k|HDjg=P|%D9JN!Bi^6IdyTXkU$aJaTz~IHd{klyhu!3!MeAiA^F^Nu
zFLkCiHNi67K#rHZv9Zy8&R}B8enS57!$WMa-uw~!c=qFF$n<lmlPyJ;@80^}#CqjZ
z2IM7mYo!XSj<v1Z_$L^bK&Xjc4Ybp1i+hoxQ0k>dRQsJ%S>6-v@r2Gwb`#5{NkJeb
z+tbKD(Ix0H>Wgn{K|Ax`2U{$4I}P6+@fR6=yh?Y{uC`nK9mq}C#;2o`qbmuLbGK^D
zQx@`T;8*=D5kvhe9fP#12DDj)JIm@Qx01W&ip$qFVc1HoFTn7&CykfNnMyQ@>*bIA
z8=sWYD3A{}nr$uy<Ofk@EPP8=Zhjl5)a_%0&S9>K*hlfK8Wh5VX}mrX&PX7mJ3lrP
zk<ZNO2+xY&5<!C&_Ub}Rb<t(SZc*pzW}Da5cyi|iejOgTxw^?|>A`N_WaXg10<HtC
z=53ZQ9QWH5c!D~gJ@({;TYlONR)E@ir0J%82s@wCVXmmirJvSRRh)nY;D_tZ=RJp?
zUmEdcv#eoQG_JAFzD;psI5)19TVtPHk33QDFwoigOP0G(*^sJlurl3-pWP_>si{fA
zQs|vQ;lDn~xHs<FE#KbE34kg+KxZtXml58uNVoL{tq3fgeUmUyjtc8{>Fcefk-5KZ
zv|L}BO8x4CrAdO-ihk=*^$^}67OdUK2zE4Bu2k3B8{1)4&f@g{T5s)DzWI~w%W#y5
zqZqgZ*W=hvF3t9iP<#(YoA^{^B_SjdWBDJ>Wp0$9#NAfku&v}4>zGx;XL0MC+EIYp
zF;`&$P5~^X*)h`O$X8u0svzglt1hRY59(SXbO!tDpb0}VwshBJ94pDW?EEeezAz$~
zMrqOED)M54;ke!t_K;#+h|PB3q<Q43v;_Q$qvI#Jlsx2j<DoSl^Vbp)T=VgDdq!E5
zznWdtKezLFSmyqf61*Pg`?`PR&~iHak?%?ei<-xKglrj>d(nFbVQ@SNL-_uT2~;1u
z)0UZ#*i%kw(ovI8_6u$*g%Rs^L@%6xcy9J0koNS^`|VJ{$cmtru(=&f;tD(SM9X4|
zw~&_OEHbpPU+)3OUyCT*A-9(GmV*mC)P3kmd_GLyRUWUuInW>i5|Xr|nT^+~rL++F
zqBpK9(bXgXTKaA^IrZm@OtH&i1mcrH`vzrwx$rg?I)@(5{T2dx-WPFRyqxI87w$2d
zXp#B3b-~W&Lx_bPsQrBkW`Z<Rb=Qjk-1WK3A|EDpma&Dc)mQsl_xc9+<<Isf(@0*A
zC-q}hB&SmAWieu8C73Z;Z~&2`j^k`aTQXVFfj>Ry%%lwwRtRO$Yosne%95)S9;lHt
zW9c`^=ZS*5h>Xz)x$MxpsVB`b3HdSJF_a-#oSVBDBjKG<Ds0xX`r!048eQNd{_W_V
zAGuW5YNU(D70UVEj5#$}T5;<ydObVh5Hh$h_h=T*hd&={<9Ita8qKC~v4uIsle7sv
zfBOOF$aAt~acOU}ek~cVZn0&6lXYQad)>eC)wy|R4eH-Y<S6Rf*5(UpYooaH|Mqm+
zS@S|r2QJ`go@nXc8o%vSOS)Y7D;ckZ?H(_G8?okO>*Y$nyY&pK#ToH9*i4RI0l3ff
zb?H@bu(SUjL8cElzjf!}r&KcCGa2gJg5DgYfx4*6fCV~#;-WMCM=U`KoHoPyi!4C|
zKWk0r6)ybwWW#y4tuP~3Hn2F2!2CHmhFK<b%%WOq-RRQ_=_xA+CZ^LWl=D^5f1kQo
zw3HYos)X{ib-`{mGJB*Y<@!?qo&{@KdPz()82*a{&Rz<}A{!o6oaUtF(M#?6vdWo<
zxF>=`%@M7?8a0uu2{`Pc6_eJRn$;fK<0C~eppg#K)jH5p`wqeb7dGU}Ra4POxi^uZ
zx5u*YdyTO^-<SQ~=i?=cO~jFB)7NX^@{|t3Wf3su<k9+5PmSNhhHR&k(K$+E25daQ
zSZ`~ZbA7@~mre0cU9nHxyn!wm#x}P>)MGa(h6m)?$F@A3t5Lqk$(t|Ngs(cunO`{x
z;KuF-Um0Y4ypskZ(FPQCayUA(o)$C7?>3Eb8!{5qqqfS1^d>64KXP>3>#M5wbwrb%
zII8D+k3soWZ+~d~czRVKu63Z$)su<!B5g_IhbHC-7a>~jSR#G%^hJH2ufb+vsyWkl
zSn7cUkRDy~w)hjBp8RNmbRTs&Mok9TV8QhxpY%3&gIGU-?5P4lV-&p*;XR<N^5?HF
zQ8fgUPFV9LQ}i3LpN<9_!R!tu1FgBak8Nn#V?Do3@6R<!uLihT{dX(N-wqb-yg0m$
z`JOnVjSkE(21a*uu-L!ut^4aObFwrxeo9PfvDF4Zbz)ik;}y~lvBXDwsn?JV)_y;>
z@2vg)#1vP7iT(!z)5p<$LP=@dbkEX6dZ%gj=A1E$)+fau<sNK9@MVNf6l-&wBt;Ls
zv-OTggdNE~nyD!D+hL}n9;~CKqGP4=Oa>o|J8g@dHng~^fNgFwtPp+^5U_JIf)_{c
zeAPGhRX+N$O_Ws&A%NW1QJ#Oea3^M|XxS;1sd(o?j-}$Lc`hTN#3nFCp;;{TUa&;H
z*bmlhnmGDPlAincgH5=a0iO}r#y;t~%=W&T3fR_CJn@|6em*p`q;kvV((oRd<I+bp
z6|`&w)m3=})xTcO51hU%y*k?39=TsOy}kr%t9U=F>p`QVKmH%a-ZCtXXXzW>ga8Sa
zkRSnqYj7tx1b2eFyDVWza0%`Xi$idCT?i7~-B}>OF3#d^5BZ<_+~-`+`+Rsm%+=E~
z-PKZE)xWOpsbN+?I9+07rJY~?@~x)h<J)%hNelOw=I}(I?`?0Zge>X4-*@ZWYP+bo
z+?fcRYZZ9eWa`mdr^lRolH{@P`RRlEa{T<(+EIeH_tGt6^D<FeNGmbnx`qP^Q+$s^
zefNPzM%0lby2&53XeZ{KTWHJRDX>V?I$rGyV^OuDFHR5WrZ-IM<7dah!E+4kb;TJ~
zC-z9(9j7sS`Ye8ZyID_1u}S63Z$mP)sS&r(Q{)G9Ff9%`=&VQKUA>=}%jD>$?BEeZ
z{TZ2*0o1O1Dt6IknxK>_tgLAx+=IE?6PTz$ZSD~FeK<62eb}S$zzF?oRtvKyf|w`M
zdFX~*n$Xlf&Zb(+%sB=BXY$ndJ)A8WxnDS~nqFU91wYllVO`cl>e|xar@-;R=S$1X
zxEQ_iygL|LIoh0HEE=i8y;vUeB59Zj-ubqAt1-{waQDt;4qX53<EE-f{jb-h@T3GL
z?O6s>9q%TK<rTtGxGlJcsnKO%BkZuOolJA+HEj2qOKH7BPua98n4%|=`7%;Z@gQR`
z+T|?p%9TNn6T7*s=`t^4oZXr;RPTK8t4!pOc~S`VJ~z49%*48)|6cl!<*jQ0nd4Vm
zQF^kQui!QnT1=>pg=u*z*rjk>igL=3C2gv1g(<$VY?bl#-n?_Y%oqVp+lKWxNDi|S
z9Ujaogg@g?zS65a-QQaOj7MwL1B|0hxv=%#p*!0de4gmUn0V`y+074*wtLC(i*K!F
ztC87b>f*@|CfdRQGGb+AcBF-5!Ya)`$LoxCHfAHKQ#?)}@?{IllU02TlbPp&`5U+3
z=HtpYbIYuBLA)#vuo$CH{{qOA;kI8j?YB*3Grj=06E^q2;GQ?DHjTQBv=Oyu>0z_l
z(kP|<b2Ta1eNKs=rR)7cW+uvLzgE*4dvm(GpT82<9_YssvQxObBlc#3`^VIJJ#H@C
zpcQxKrZG(2p7R^mNy+qd+2l}tCPt-Cvvs*ZN7^e?IuWmvXT*JFX5K5K$n;-cYQ*5~
zdZU|Z&<UiajbljiD^w7rTFkfwlP0t{hblH)EKeWW&Xyjp^nB%0+oDpOIa0YTkA`3E
z)bdAVJz%dteDBnHz037A;%vswvZ*&S@RV)2f@hD7b@sr7QEt)f-)8|tf3<WA9*<#J
zp(^QW@T78(GPm*vz&}9*T>6@mVzRP!4n)5|Il6B~NWKuSi~4xJBvtb#U2(A#9xFrX
zrfm6iQs@9%?~fOLyrHJt{VLL4tUNZFmvgPs@VhPh1S+Ma=pzdIc5>N-30u~bok$$p
z7IMMKIf@M9_u~>LM~ha6Vq1Jf`{G)+9t8;f67rb}Ar1W}V0q^vjvm&Tix%62v~CgH
zY9;T9Bs$g4d{JP>EwK%eh8of#Y#patj(ZCEe)I%>W&c5ud{p&@-Od?7phP(I4j;xG
zJgd3q(u0N^;LFwB<$@!^HjU_wx<{$CD?@(%nm{I8OPUht6Tx)(lvN{qhdoa<QZk++
z^_d{8!84X%LdA=tZHNppm!P%L$TF=v^II1Y=m|;zO-TLP^NIJK3^*}8$Y0rCzC8^T
zuT3N?w`JxqZ4A$=7La*{_f9^(Q@{E%23LS@qW;4XF|sm7J*zV#4sAChQDHr@F4<8`
zEN65eC;N|h<K?hCy)QAiP3Rti1fo3X?urHlo`q{>ucI>=<b|j{QUAO2#*YX}w|7V{
zO@>#j(6;e98?~f<cN9^iDKCoBr{u&wOONQW@7YihXC_M}XP0O13us6;>f=Z(;H$M?
za@1)2J}J#9SFxTv5bC&{MEeFEv|shP58S1$FVCzg=70~2cxH@=#k*l|am7(73!O-3
z^BUmA=K<w}u=?YP1f*O^G`tbWbFlfJE}I<z+u;~{#7H``9>Z1{w|O0385q3={OvN{
zeY#W5(sCi1pIbH5ZYV+#nNuQ7l_Fyj>)bu94s33yGH<&lPX?8AyBcNDP$XS8U&eOL
z1oCjGG*A(hRehFr!(}s+<`gqa?r;s;(;z&}uN1_tDXI7x$}r8mKz;p*CQ`f>2CQc8
z(Z|bU)z36y9Ih6Z=3uD=`8FkmZ(b`g0$?vOxC9$wIA--W6Pd^?F{X54U+*-NcVg%O
z;zmPfV_kB))=@&z@?vGeVeDmTFZoY8c_#ZMHRHPl(cPnJ;%nnwP}29aC!FTL=q#cM
z_SFP5m9w4cft8G}pwt1G9Fl`cxmy&DY3mvSm{cKw1#s$TNJD7u&uWPZntW^W=Zyx=
zUB#?O*$h81Y4)@JlH=`b-{k1MbA|vdn@GUKqIdlcbuvH~r1;*Gmp#-Uge+b}GFA+|
z3q$4w<As|^EsDM2A@Ba0oDE3MwJ0hU&EYjws9DP+hD8|bq+H6UY9_`@CX1p2I^}6T
z$v|H^#&fcxePu5q!XL~jrAbG36?2bkvJ@Sgs5MmzBYGN0k(pgloq%oLm8Nr@6|CH?
znmlzwrJxBXp*IMIai`cO1xE(|A1|t_nywqU8-FE=>u6_!b&N#^!6yE%TxC8-ZK{bt
z(Fh89m>3;KE(@smLM-*RTI)nl%fWJTGV+8&s>8gedOwkk#kUrlpHL?qB2QsGrDj%R
zae#V&MjxzP!;J@Unx?|zlIFB5EAGZfXOj=l=ZVXM?>&2CG5-7qYZ^W9N7F|_0^}!A
zR1gPqyvmCuPiL%47D9JNa9*UKIof_&5X;@F%B>m)R1I(=GvvOP95Z)AXQu7k<|Tc3
ziThU>6g1t+H8E4*yvMuD*-qet+aESW#-b!J^`Pv9{Ep2a1CqV}*#yZfdAQLi$$|1}
z4hO_@u3Ev0$q0*|fMF2~8Mix)FLo0Cs_(O7?PIMAPkH1A>kl2pL(C&2skk<HJ2_zJ
zIDTsx3c3uc0~UK+h}SW-(UHXaWz0^aey&qYyf|G1`3q0BcN`nWKx4%RG+z0NQ{09<
zw+AKl?|VHpQm))7B_C)Sbjx>3Zc25^E3(w45vW)lt?#4!3A4?dihl^0l0$n5(y&|`
zOe`^O-PKciZvvl>nZ4xLwjvvz4b*+ZGtrM?F~F%U?e24f|0MCW3<>tzklVeDjY(9R
zh<+A#pt~ZUY(=YYCjY|RqcFpy6N=-|gcC}D2b$nk*Fn&2RKY7EVA;93=g@G1D0=~O
zo0aOHpLV}d_RN`9hXR+VyGCp0&Vz=bH||!yGz*_S(DOLSHF-eT#3*ye-hJkVB;VjP
ztXtNt^@dEWH4G7b@y$<3LuT8EIL_B}?5(P--5;*&TI1G9n|e+*9B0=gQOBbO_(ag~
zHWK3#K~&^J4uQCpS#NIB?aF<J2ZK9e<ox`5X!|cpe1v80R$eaJnO;Oni^v$f(|(&5
zsZ%g8^K{L*>pr75#9qEevY@ia$g{L`v3$kg&1n2lMCZsMB-<_&le=h`@GO&P7(d)%
z@+0N<iQS#AJbT{>KZ`Xh;}(BX*d{(IDp+-*gwEGbZ!uC#lt~b3%k8Q{(Z;O06y9qs
zO6OMBsAAKTjagxE;dOTtaI9H8b^c_M{lzQP0!#J)0v(Z;wbmD8grKt6SBky5p^_-+
z@=^96p|Fdh)baioPoL$I9y*n7HU8Y%W?9(z^tEQI@SnCo18oX#M?kTeVom60>DD8K
z<4!_Q$QWdxyoN25!5!~e+sw>+Et~+{{Hv*6^2pD0x+ebA>RdCl20_;p6T{zR%hWW3
zZ&iwix&!!|-qY8Q8Ain_<l+VpwSaH7^__>@hsW#LrVE>JGbe)5SgWl1Te#OGk&hyJ
zmHo+3Eaf|yf(Q>8pmV5>z$nasl)4{pEF!ZPbFEXj*!KzlrxgktW`Z_)9pZlR_o>0*
z4cS|CQ0*e$ctK%7T4ME|Tb*_o7_@R{A3F7aZsl=hiH}`>-Riuz$8HD7y1afr*N@vQ
zzEH!h_5N&=2q@Xfr02HD@bdcIM4+uN(=&r&&jDO(v!XG+%~Ds)67`sFWnU;qa~glv
zxQ?YfR?g3oH^wwfMlWkm=snCcvV%;;_}@Q`l7%s3#cvGmQT$zh%(DD5iQs7>2$HWY
zCLDsa<=0g1qrv>`Utz4!H;9>$&@a9k<t|&x<%ja_MTOiC1m_EJ*Eb0@3j`bxX)5TF
z-MI+%Uy4Kd_{%I$N?Y?qrk~pNSBF;mvg#S8+?}gGb~pl3)|`Hp^wCbeBofK?+E|sD
zJIar%+Ylui1yZ1)=W$Q)68=-LcF}|X<Q(GfleLR~MI4H*Pw?r4@0Wsa<z8KSJXBro
z0?!LstA1yqgb$2*T@OpRC*5q&k|Oj2Jzf=+Ohuxl8CTcZocpq5+K$W$^)J+~lyEqV
zqgi*DxQBLj$5tD7zdN~~U9I%aacQEBH?Ho|z4yw~?5k{_ytD)0y|ZL&g8N`HI$!N&
zY`!45#cutei-lL(a_NG@T6N&d7mN{)r}Zp+2hA?1r=zyKQlyNuZ6R2$WM&s>CZm2<
zuz&e`L*f}wG!{KB{GxwHA7S^en&I&mewTf!nH4)R?9h=OC9k>hLUgpEw%lU3u9D!5
zZ_nB1Kvk*U9Kden-9r;-7tevw^7XQn)_%Ef&!31uL-WU#Pds|ToM06(bO2tO66yQN
zPYnW$y(2;2V~{b*^cT3HSOhdoRnPIJaOpr+Cxl&*=$ZCj$lKo=w!7d%ChYy_l5%AR
z`VxC2uzekez!fHX(9XoSl5^sJ)p0qH$UwdGlQuS9SLM(e1wDV&`%^Px2GB$uSpq)_
zfAf;4acH)MJVz~-ro+tcHZ@VKZ;#)}m&fVE>Z-|D{7NQVh&kcfCX3tSp*r5a2U7TN
z0(2mv_Q>a;tl(-)&Y(lOF%k){HZ1*v4L07Mku(P*n1;cKZQkf}Nj*aii$@aEefq9$
zN%<X^vMUey1s=yZfhO5lwsv|15xzhgCJ+4&tT;um`PRuE^1#<1)-<}UO?zH$4l2Jt
zFf!JI7h)p<{mjL4y4fyCIFMXW3SP1Fp^D}0*F#3=zWOuBBtufF;`8$yl5(9$HT$Bd
z=jh>I6#2#6V|;r?gUuXw@ZG$|gq@j!7C}v~FW~hVv;>&p$o2k<#gwLjE=Dp!6)H%l
z0s}-rJ$3Kidm2$3#rRB)&Nt?7{BhCQOW%-D`7W}T3<wXUpbfS$sz#a_ok=ySJ_!x#
zk*|Hlh(aVUUEi>h#4&<|M`V8Bv<QMVet2RPKui87N3lqzSnVf*PJ1_QG#+|o2aEf>
z1NLGpTICxiq2gUr?f`-<H5QX4o`4jBw<08Y8T)><pPMMPUD^Mr(^gQp@Qpez)wK>~
z9CWqTe&t|9fzjKpHV`42CS{sw`Jf}=FoCM7_wYI{^r7SNbZ}t_SiXpX(w&u#v4y$z
z4MO@eiDuE#E4)1nRjkH-t;1^X_2m+Cg{t3X#4!7vXhXy+ycUU~S9qqD`}R8rb90wG
z+)&}kk6tB;l1?Qn<AO{{Vq8_p0lGE{RrB%+IjZcx$L&5bSrW+`ft?#FtHl6FcteCd
zsR;fP-KZzA0Wi{xr>OnIRE#yeOw6@Sw16oaK1w`_7bx<tIPdYEK1SpNvu>nk+SZ!@
zqZER~o!_e$X3PfZDvlMq`2V8d5eN_B8ZndkH)k=zpFz+t#7F$i=7}&&63x~uJo-CK
z(x*=BstU0&urBpxP>?VUkdLWbiOkS!?VH>fGDzD#<r!DAE=dLxv4c|#=VE@INTq{M
zb%DgEX{$TuenxDcOnnk+o`g-{m8y9$AFZhQN2q5J3SMbeA+VePk4W?U8}Yn_SknSZ
z?b_@$>!DI0EpLt-X4JpNEg)Q*IglY{Yn)NB_pkgZR?KVB$LxCPO@;;&0jC_;rg(x_
z#T0X|f3kD;(TGv-CnbM6sAGmQeX$IQWS|4t7!b3r2dv~joUN^BHxb|=fz)5RXlGc_
zGmbo{Z7s+eu?aD0CT&z8h_GA~b|Q&tD6^|(1BrCaeKve0tF(0MSrqB<6XY8Vy}PMv
zS2es|OKp!r9S$92FY{k(H@_CvoAQ5;=g;A+J6Ldd`<ff-sc5uZ>)GU3B%vj5Gh%we
zKC5nk#Y6dm8|rRo-+~_0bLMDRR6|Y^X7;`jV8rG-n)lodYvc_r7Gr}CA?JI%c(n1!
z{U%L}#+}CGQ@Q{GQ1j~kEPeHdG=jIko3<LJn!iRrGw_WZVgQZo?BpnL@VF=OEd_fN
za=2*5F!0L~6g`I!MKswmGWKdI;l45pw`HCiwk^y~dDh&k%prz%f!nZ)v9>iScPG)l
z>QLgH65If;Zu9xgA1Ig*+!L`{+2wWH{LRPE-RncZCH322z?0T#p--&vv)vNB#9euU
zRMip5xV#=kKYC~mz^b+#CiNr=ZHi5o>0i-{Ei4e%23;wTLibG)9pM7$Ajc=g%E7@y
z|HMAKCMHId%t)o7xnbyw<P>kB)0r3K!`;gzsN|7ILfiyzU$u+N@c&k>Jt1DQnwOn#
z@}rm=x)99dYnA&iS$v6qu-VyZva!i%H<Ixcosm1)S@L&N)^s5s)Xp)VUU8__JqCl9
z`e#+Qa+kl^+&n#D<~P2K?hccLtd7{~BjCQ}4-;gqVRfWP!85rXEq{~ef3<4O&Rwzz
zv*wV`Ejd20!=$W#Ae&GtV%2G=`WaqY(RE&Np@cPeP|u48q~ckPW4elQq2vrREyjvz
zepS@q!Fc1z=RbO0@WrFScsYrHK)oY7Zm62?QQacn+!lIx&qO+3N;&VD?wiAw`-1NS
zzl+j~B-wxN*?ZctQ`t<76TfAhJ|bJFxBF)TaheI;#ufb+Pc7Fhv@rT{L)8X%4J(_&
z+VI3X?TxCxXkz+nTuhN<WU@1I+fL4$J~JfcsCtjVB_Qn_Sx$Hsu!Vv*b*Cj<#jYXx
zf~nJFb#3g5FzSz_&$Ptca3#{;xevK<j@lcYd9BUEk$SDbgYP|_se~fdOozz_ATM`^
z$(j~d%i!MzQ$fjQ7ANgq@;sF~D|8Qj<>LF_N{4r?pci?}q7v+c%!k{oBb2k~jFi1H
z?mz=g0&!Ic&a4V?sCn@zt(kVk&~2!CThqR`IU(EEY507IhYRTuZ78id_-8U-UiPNH
z(X@r@Q^2<qk+N}&tG~tipqB|ZC9)*fRB6@tF>>gZw+N$=raX2md!Mfh(j2)k2yc78
z!OI2d{^${E({pI+&)zg*E3OahsTr_FIyaZDuhX+qzj1?k8>mxtMPN#1r6BQn6fMa2
z;RtC-A$QKoeha)A!I^SUS(peTcMLj|Vn4tsC<U6^fk~UFSsXo*_@B^GEmXG+mr)}M
zk6pT9VVB%4L>P``jK$Pt63iN!`8=GMMCe30fA)EJV(IB(Rcjhi8Be^i>tnlpt(UAd
z&`IP(FeEKlJQa8z5zf#k?AatN*VIm?W!EBxiHf>0T03niw{3?H|8jrPL|!d%on(l+
zIp=hHGROFMwg>TQ^7@P5{$e;Gxu(a>aF({ak3;@z4=pThS0{yxLeRFW^{#`b$5&r(
z*TY%<iHE;#e2V|;@m+KVhm}3i((@`AlD2SLzmA_M%#)MSC(O?s^i1r=J3mK6q=Se2
zgBXd2DaDg%EwVog7;Wp$%OB$`4p7t{4dT>nzdl+|L^SVP{1na(k6~=~*pjU=DRf>R
zmNSmatmJH)Yy|@uz4*51WR-z0L?PJ!&kHX3=EeVBZLz}B)Wo}_u6fuAw?aerm02WA
zo3yymoPMCyy}G*z_9GEWI-bEuGT|C%D&z9G01PunV>mI0FkiR-e$4Qx7`TBtVl#xz
zV$Pwxa?{mq6@`{~Q}6Zy<#Mfb!L%%K+kO^2cz?bxaO3Xm{D3|f`4h@8pl_62%;i6O
za5;lknV4oZw|udCCHfl1jQmavaqGCLOu!g>+jv^*6mxsLFqf5;VfYjJa<DZHnhX9q
zzKa{WcI=CpiplLMgpFQ*-2lVzQ>L|0-aZD4N=Bdp>q5&qrS#*R<>3f?=}%{_G5&Bw
zh?3d+b*FYBrS8!HGM7lv=}~s=vKn6W<{d^0nD_D3`d0X<6w3qCueMK85bOjGTnM#>
zg3kHFPu(>V@(6W?h{hpGaEfiPz#RPDx}TpIBF3U!J><kXrIC=Ep^#V=;+8@;%y27@
z8l2HfH?CHpCALY!j|0+t{^hjRPs>@*AZAKiuNXpEi2VL9c`k_gY&v+H!W*0-DP9iU
zeEUMpsiC|!ReD{nLYeJ@Ucr+aAmo-gTI;?Ds8?cH*R4BiT{jw`-t+$I*!^)NNNcPW
zHU9fpaAB<$#bwU|M*@*3L^HOfyTGM7h$4h=n4;`iXO#F-hJ9sq=$1k<ye4P-Pz7k%
zy?`>5N6Y~VulPw{9lPabCrwkPKGQD`Yq<S#p{xj3w8S2|zrt_@eY~8jt#obt@I<u~
z5-*^mLY%FR`uzGWgvo;c$3DAQlK^F-YdM?XL2@jA1gwHX;#a-Qv`*UTMoNFiM(ogn
z8sZyXHMHFeIa2}deN5#{1ea7s;KDMGu&|#sY8es7I#;s9w@}ppi|O<SGt_#yVJqDv
zF>p}4FJ>iaeMI(KrYcK{#-84QZ^nhOP~T(`_VARtyB;+}pC$g)8+1QVCA~{*v<)aq
zLHgrSZ6F{(mx9L{8N9Tqvs*=MmYWq7t-b9`zSSm)KwDxBwqvX{?pvQp=`WAE0mjpQ
z6!D#r-C@L=hK`MnW&!AUp2$)05QGP7b-LdPgg(cuF6vZ;ST3e^&XalUR1sBOv4MMk
zIO?`40%tZOwq6#WxN2I%Xlh(Ts6Te?Q8tOoTULtzk1^1XNdMtOoX6&|>U~h3GRGn`
zCsk;+VEM{c$L0<vb@AE)zcxB+b_SyTrxyP5<Z<A>5g9HS6a10qL5RmsKpAq(Qccz`
zrZDs`x&2=m{cm}deDhRD45=96gCCiX94m<Or6lm_$zO5*zc0ua;EQWtctsKhZztW%
zahEtkIL^3vWB)ute=3Hg392IXaD|vkizf~(io5uNkah)<U8b#TF`EN#oKkHHsG`GP
zYXg;aRZk};D*5@Vr%Qs|DKArRs?)U{tt5pigtZ`C*R8Ih`(S2G8`mJR%UOGud%WDa
z<sN5zBE^;i&alRV+aa{2mBr=3)`y30(eekQv<#=$NskAAc>SQNQF9Jlp7*X3i+*pX
zn4viiBN`T3G`3>LczSpO64i%lz>U+*O#_p<x~%>TpL@Rc#|5n&|DDBrh`AF_W7WNW
zv^nmWr5R1xVA9s5?0Nn#k^1Z$H3fa1(lB<t)-lyhEk;{)J-o10eMGcWS~2uZWg+m;
zC-y=y3cRTQb2_yFbvk{ILDk36qsVZ1*iU`H(*73eQkK6e=OoZ>$8k_V-XHDHsVJ^Y
zJUVX{_?&|S+!i@<0PE&nk~M}4NocomZZxQ?rypj3U4*iR`vt$>!5`9EUl*pOWhI$!
z3gyR}gWhTD%v+qL+4lIUW8)fdan-V+B`t4T1)dI-IB&dx_5Dsp0R~%AyTK~o{DPNS
zntb^(dAj)PtwrUYt|;*9(iBs^SDMWoOMiLm>h0;7nWX_RWXXa1QQ!u*%%}Y-M{{*O
zc<Cs#cx}!3y)uW>cJLDF^5WX82<2?Hf_re}){+6OP12pey$_~%L3?91rOQ<qj{B05
zu6vE_Nu~qx*K;Q<hDs}(0VazgV0J<xnao1+Cn&jgV080(k(;NHoLRT)pV54P5CQ7Z
z2#;jI^o^&9KGs6A8WKsT*@nFtio#Vt`Ss2X-EXlTc{GW{(4yv1s6}|pMa(o(m!l`J
zOIr}b4=vrvxsvoXQ_8AZk4$ml68HAJ);xacVp9gR)BdVZYgH2{^C0zb-qJdi>i}Kx
zyv2jA2qfYgoN-(A<Z|@~eKgliNaf2%ZAk$B{!FBD!Mza3o$owNGCmO?l;p0PurMzA
z+AAJ--L4wgUFzxnUOAPTB!8(T7WxqL=?~2i4oY6<jk@M$dC<sU-U{hA1}No-cPXpp
zwkFb~*_%zL^!{OMcRi(GwfUkC?BVi_Y#`}S$3!|3*&}7gcdubhI(shs@};#T11MBx
zffnOr%VbM1t|ud3-e{9%!y46Z?M8AR?k%V7qA|zyN6i~xf-VepW72rY$#iJ-gdWJ8
zNk!}L*M^2X_b-wJ|5zD%E_<}IvXLrN%6SBQ_z~Y%4Mlk+vPt8W*q=dZ`;EtjR5|32
zKGW!Lmye!rL8H{v?(YlXq&un^YT4YERxx@qO}ds`TxJB3-{~<d{=6Wom_zj?U#0KD
zZb@|->(~FmHn|9oK||_8b#BJA6t_WgE;~VaY6=1EScMj&d&;Lg2W=*U5?87K+vWr8
z_L9A$w*_0V?&o+4x)Y)HU35LOp+Z?=;caRN1}~lgCMeD9dXrZY&omV;eWk=m#^ce>
zx5w{7VM~P$tMDn-Ho9;A$rUXU=hDhYxG--lj$Gs%>d%LM_4Lb8i|=G1xv|Ai$#3mt
z_~ZVr>PVkm^O~hvWXd~anP1wyf<(%aeTIb8V1fz4kdZo%ruDR`7EVEPyr(vk<|D-R
z9jcS|X4-<^5=w@TXuVz=AWS@CP|ZzVXV|m=UVVGXr?C{k(Gd-<h}W&AY{VZFggb)_
zw=OaUmnYWKEYm!$U9uFNSAHy0(5~`6YbkWMMgLGV9+FO;PE%<Cn^lDvPw7@eRnBp#
zpee=B@rgW6D+Tz<5Avh7!lQ@YIu#KAFcmLY+tkLK42G98`_Q*?U0X0&=csk|2j^X9
zM<)fN&S1$h+R}@++%XgsFj0xJPH<QtouB&if+{tfS1={xc={KNcYu#8F{A7XWTfO-
zYZ(hZ6`?e=v;#83*ZLBff(XQRuG4|n*#2-?TtC{EG}#pnp8iw2cBo`%l6gX+ff0?%
zSnSeA|Bq`LuH~N7fk?taOwoz6<uK3a?jii0bAOeo#M{ma9u5e80bIaN7sw(%G$j`I
zzF;*O+`fGgTmY|W>R8a<aLJkaWoRt_;-udSuf_D_G%m_|mK9Vd&PgAicTodnOsBC4
zZ5+p)C<PvDANf$*L#D(x4;*Vo;ysmslWhGGJX0z`0%;A<;cwTpBWJFIBP?8w)Z&9c
zf8Ia&@T5ChDpcy66GnmZ?p859$TGXDsjhL2%1DPV>1wtl26bD@Tx--Z;e41vBC{i$
z<RZ@f`w;ErI##`SFUZ3<Scf%rMAF}3Pnq9+;vjloc`0Kt<?^SA4p0j1o;!L8dkM(H
zk|oqaoS0*|Ud~AvHo5*iqmAN{W~2hwI!tZnIJT8iDsewMM)wyEe?dN!2H%6`vZ^$Q
zeU5(*e?fm~L=J9rC{6ITb>?NCE+(@z!>`-Ck#hQpq3`+PQ3<Y23cQzCj&SFpKf<3L
zJ9TAAu<o>e=^A%8k1^f->em)zseqQ1(3vmOUY_b2&p?*+N49SLg0MZ?SO^u~%b`|_
zU#qVvLA_g`%}!ZzgaT1a`ILdB9+n$t6AQEoXN6nl#fitx+pOdHb#q?SOwssm8f}vO
z*8~R({GSDsqJgvNNoRQZ68={(tTX0c+>sNt%!z{e32U)D%U=@cSd1(4^@L*6J|re+
z6i7Hbg{iPx1ZyFG5ce{tyX*Qumppglbc|9RGVC;<fauUezUmicoPl>KT{HAPdCxP_
zL0}HoddxIUZY(V^3?aNdj1G+xTkuh{QQo#6>+g+<7;Y+bs4h>HCCyJcd$E@!1ncrX
znoE2iRrqu|ySY4kQD(Aln!au_cBXDxboq$#@j8;$6MCeIIQ(jDSWbO+(sb`jY*V8-
zmme?NP6oAzt4b@}8ntKB*vT3+Z0K<j`}bLZ<GuZI%iyJUe#>Z#L`Hhfqhq#rQY9?%
zAG8}PQ{`BENF629?{FcOY2f8fdztxVhpc&^+}%v<-M!D?0r9X9s?)s;DKEVCde+Nl
z5VZi#ZaSPs-?^v>wI@G2$Qany%<uEgR*w0i-m$xIAI&mL=Hzs1zsX&3=s+!pFub(i
zq-Sw_B<Il@aK0379gY*Ak4Pu8kJN|MOr99J1bV~8b&^|=s`&1v(5VIsoq$qJ%iyJ0
zw-$09Kq-yOq^(}or^e0-VBk{v)S$>oh0m4EGc6_v^?mQbr?e)2EyOQT#?0lCs7kya
zxZzOWVxkOM&Cw&(+GUrZtd$n$Le>QIAL{W-JYhWzEvpt~lZ_{*p*!7(_o+}oSteA$
z1)ExC-C5UE6Z$c0_}k(#eSsiSl{@GbXzbLYRL)k|2}E$SWf*V~n6?A71R*k~y*hHm
z%bPw>$p%i>bk@+izRS%Gk<WinjHuxjC-bQo+zp$)*C-WlirKkoX(s``L_ZP}(u#O;
zZ0{Z(ikAYC11ILopnrUg0c8bHm2L931WLn}z;JFCv$G$0AAaB_rb$m-Y(M0!Lk^fC
z=wLw8uY>>w1|IUM;0Dg4r_=H8I-8)cvo@SPm#zi0bFjYGJiOWq?yG{K{eX&pOL;t5
zub*})^hn)E%jdl|J{QbV73k=Rc?Bu3Nkzog-oL)bYv}0=w$y5TF9P(X_gJ<l`!mn9
z+&^?Xxx&)u`T$T3jp4_>8h6O1nvE0O|H%jFxBs}DkWr76Qt#=HqYB?dzwGz`c{fu#
zf~T~+*IPX+`@Qa_`JI5r;sUsJXLSa5FP*r;2?D2BE_=5zAIG0csoQGzh2fNExRG<~
zBT@i-H?0+iyf}Qsor~2l&L>TMuO8&LkIREquOcguSN5Lf*0rDX2b80=kUrcIB30-T
zzY}ib0ph7EH!kn)VjZz4n&rAE=IWzT;FrSOI$nOzzg_?MEcG{B(QbSfWnh*O;(-~L
zeJh#LE2Fb_%+WQQVxCGcyT|CLwK`}Oc^!ARWNzP7zd*@f*YN!(y#K=3S}Yg}0NpOk
z#Melu_}G&qQ(lt1F4K<m=qo?4V~;DG)!pWgU>z}tnr^qHY0LoM!m*COexQbMNSXxC
z`nRj|!5qe88+UjevQ@n*s8$>3Wfy;r5D!v%*CF!YedcPY0LbGDDPV*C!3P!KE+IL@
z>zL{-zg}StoVh;9>ip1M6p`AGq?4y+$4S^@>S&U=xUo{M|B+<op8C4sv~JGo%*s>h
zgM+dZLIr2$nFzwAe>rzqZwmqyb=MfNa)@gI4z>EYc2wiJMe~D5ajvtdmJMiJ(hb6$
zMqTKXC};H`!Fxqm0MH`@`qAd7|3(i1Vv>B0PSH5|HkA)V6b_3D3l0h@YuRi5#F3(4
zA0p)s9N%Gwh^-Td%VQ10B%O#v5SN3*KU@FAUg#k(mR~Z<4wZgmFa*Jb7?AP%GYV%~
zDYu5f4Y8Va%N7Tp9t{=9hhQ}MIs)@EYDx$jrYs{%!M~lb8Vjzp{>CA7@L|b$WOsWO
zSC%L^3fiVW;w4)d-T*~uryGWiqCtiPs)!_HGqzGo1!ec{Ot4{=^=E&%w$A2vF7T=a
zglfx4IuDil4v4uGtQueEx7dv<MB1&LTZkiZTNV7YSvGvNNSD-chZe>5K=Vvq4LODg
z0DwFL{3qzgggpE4^cSgqOu&Bv5#Uo4h5`@)0{$xii2(s*JOBU)3E<rfeZ~6{aK#Ag
zP8!H~`3xWw->o^ogbDy;h2E)yP>+|9j*4GAsjL{Hr__*tZvI{Hze;?n!G9I4<pr5h
zmTiy@RJ)S}+~Gjp$++=B_=$1fhq8UAr+s&o4Y+y+a;l$6?q0lqo}~LmHJb+@ECSST
z!@gx|N%5$o-;;a9KRYvj|3eAJeo*Q?aCU9@2=J&RjaBsafyDEe#y2_3jsA|~yfOr(
zEG3Z#%~W?-c79IETpl=utv&+Q=3cL5?X?VLxQB?#_gQH;!oZ4(d4pm$#{@fX=t-~a
zK3i9|dHF82Q}Uz~v_qi9&fW28eYRWe{)3cHOzd$sqyYMlMK31-y_P6f)qtRfRydYm
zgeRyaDoagqWXX~0q>7c}b?&Bb`_H+g*~X(Zq4mZD-FCLazTD1VPyt|;Bx1=6cpr%c
zc?L6(fV?|l*)cPTT2k6@rUHFe{{xDKzks2{cp$?SOD6xs_93_(>{o@bsGdAX#j9F}
zw{I%E1tImfx`SxV_>s5lfjbvKJ>J-|Cc(B;X@mEMZ<@(@en6j=oq4;QRSMQ19{O}p
zi-e-Vd&d_2))}h5l;JS2X?MfYuhw@NoA+p@6fshgwe!UB<UCi6a78d~xZ>CEFpWaz
zO~In%r|IbF@Q6@lD2LAn{Mv6=wE?~&Z_Jz$x}g}Zue9i0i*OPMyW?HU&Xno>3ek45
z`}7lPenz9Rj1}VuT%n#F;W&`A;@r?)@pxLsSsgU!FYCA1-*~nEv`;0trOeP2&bp2b
zopN-8MqN9zoSYOtpn{|dt@8dH4wM@f7&0#D@)%Yaw2@u9{c@xXA=S=~)tyB0X*rE8
z{5A|}L&v%~{V7i*w+C-9SG-8squ&~r{*4C*s>*U0jwBhFPFP|_WuCgE3~{ZF7c8EF
z4tu;%-HzI(#V8sfTGpG<C64)0@u56OczaFy?Ey2En<ya5G?m|Au6|4dZA6gGz`?r<
zThNwLBc)3zuEWk+jIRCzvux#xW5AL;w)5$kKr)`{Zbn<PFZ9(z1(}izAHx#$gB*UY
zK-?iZM4eYA#Q62N)^Bc@5FWWdgWW@#_0}t6%fgf(+3v!^K5TNAieV?q9Zosfay96M
z!MF4rxLn+Tk3z=DJE>qpRqYyG1+R_BNgK04o;yQ{V~-M0l?H<7p0y4CErfJXpe1k#
zZNu3Gx-w~R*;EXrcFS6DuItYIt_XJG<z;|buqO%9ALds3*$-qCHctS3MyHT!<XjG%
z!`~lFEqj)b!z?}`?nq|JryEaE&J9|eVyl_rvim${Feq^s7rDlE*0yYTM-)r%hF~(j
z8W)7$TA?r+1GG?RL^ZseVz_k^c#6cHGL!71k>c{9Z$TVk!kHQq-W}&Q8CL~?mayvJ
zTk}39;M7``8Zm%0g${}H>8a%0+HbE&L3$Q>DH~Z>0Tb4-;8nF(*7`ABKJO<Mc^Is(
zksnhzrReQRic1Y&TC1eNCx4yrJeXrVIJQC;t`wwip!7VA8#NMJH$Vz`%>*SEW?j0<
zua7edsM8m2N23<C4Z|RI;S?|vc_Td!CFq$wuAQX_lf({B2I`???w9=74<pc{IyRrq
zA^Frdpsk`})ikxiUy|3iVNg_o@TYSwASxjZw~vC9y(>xK@o1rsLk#;B@%*Wb^<`E4
zg5QEfV>W@88MZ7;kDN|?=b0x*%_Ebb%-HbZUsNHkpuH23{_+8cUqqVt?}kZ`^I)W)
ze8ww`9FhiW|MWyR?Kq1-sLu6?0517VL($jkt{*yNjiS0aoVMv^QKKceDuQpZD&y1k
zB@C~ySF@q_`Aa7HIuT1F8yE5zMdkD5_VZiJM<V($ZqDyyPV4k2%*YB`Cr;urBs8!Z
z=C*_iwJE0R=FuWJ-Gq;R$Z{)$O(2SSbiDD}|5SKepYF!BkNM-zYr<&?a}I&KSsxFD
zHRxgJV{0;|<<RK(lS@I|hJC$Dzv8OB(672>7R4_3&Kyo05U!<J42V^UbL^14F4DrR
z03@D$E^{FtP6Y6w;IVDg=1^Vun9(~R;nruDr*#VRD0Y2&S=fn^a3ZOZ(--KJdbva^
z=pY2<SGq*AtW(Re3=}Ajd2wIkR0R|{`15InFDgj<$(7(lBMA#$^)NVG3+%i%8I%i0
zTB+rBJ8Yq&aQO^A_{KWMMAJbDGPy?S$m&-J)0@cP&c}@}TKy;pSD@F)uS>+*gxtFw
zwX)|MVjQYVChE4uv{1ulqf|M+%gkfKTMyCjdBldUlVC#8q{O6eLFC|{nZe>fujY`^
zjXk4l>yd*OLrRBu&S~upci#;4=F%1BK_}sELbePJfV%=H!?rg%hhJc9uWE4WYcavz
z_%EcJhcDj0GN|D4xk51XsZf$Qyz*biWMH(u?xM%*X>8eG*EqbA8?qJMe<&xC0$p?+
z|D@ZqDmK~!wV$~7AYeVBRyWWUrmQw-C(z+wa2>3q5q|CbILnl^In#Bl-YG7IO!^st
z@6&w=(MEC$S@v=mDXvOuQLtfK1=`I5$Xs5+qof;G3}h?jRjellG~7?wR73ciOGjG5
zqU^x{7*;Mci0=f5LgaSo`?0is`HMYNwRxTlTLhszNNl|lwpQEHLJN#f<@hkOJHPl|
z1Q9bxoU+nqlIwU7x|B0UOthZ;0ssouK!ogI9lD?AFAYUv2SQ!b-?(y+kkE3vHiFtu
z`(8<0jCg47FfUiI;FUW<j>$xhoXZ4We!WqIdtbhO9wDChD8#f;KdB8xXcH~3W4HYo
zS-;q&^en%;e!04H>l5HWHK~>)*PmQlb*rJ!t|lDUP;unydX%cC%`n1Zjrnl%T3Jii
z)JQPW`%noH607!|DQ2lwcWNdN`x)Tw?V&PI>9BZ|llihrm`Ev`8$c=nbc{|mD<LV!
z+o*iefg1O}=;!|hLZ0x?zkpBBziv7neWA#D9sr>ND1C(>pfc=614N{t=Ls-~EjZQy
zy%V!+dI0>wYZhIR2Ld`uvs<ZHU?_i(p8r1p)n9n^|G`sF=;{eh{Sg~rdItDBpaZGy
zK?bZXvtj>5O#cnho?<_s|KO$nf@uFxd_aPHA5asNm+9+y@h7+6o@!>tb(WMb!b(1?
zL<VW@-H+E~Jes<5IGfHNm>Wf=o<I|+2%^rNVNkGTA*Z3DAWNgJ!WjUl9864HNret9
zeTih;*YFz*o4jYa&Rx=c+ZDtE_{A*WEbAZxJQcz#MV72}Cu^MC`*`kg>Zl;s8HoDl
zJhtqh-@dszA1YvgO4@SHTZ*~d=WIw0L^|Rzxt!5}ff2zBAeIk@Gq?2vba*X32`Ptv
zN}gWMF9bn%mKK+-wgtdxeFxtAqX%F29HwH3ey|SO7iA@^G;xD`B9^M>&+EJ3B*iE&
z6tVyi?e~2Ct?DIs>%qXU(ktMYZF)1q${aBMDc8|}eUUfX=q+^6jJxC#hXoj2(KpB*
zQ5o=rWks}Lio2qyEd>#lVufP|c)Sn}m@~`S?B9Ij1LZc|jV;_Mp`xdX8En}7rd`4F
z<;72Lss_rH?uT1+E8T#7=}|))&clr!u}MnbpXl|&z-Jw+2v68YVyB8jKmP{-x~bl`
zPgOJnrG?{KJ`@pZx^t$uau`)dEuG70d09NjBSIkUGpn-1Z(7al)YONlC(r;eZw+AO
z&;dWR)aAn(w`#z$fZ*$bo&@*8$~MMEg9LL(|2u%(ef9QEN~AQ7jA#RQNy!j(-E#mW
zE9o|SxK_8RoE7NOcfhpl93&juVx^=#*>EkoF7svG1y0i&^!<|SUuo0W8h)t<K<1$K
z-Xb)$gr{Tlr%@Z9gkyE_PzsqwHlIPMG`=*rW!O<L=spmLj)D*VtcDOXx%V*|4~4!Q
zIO*4|;WBxMZasCgC$ipXlKK3?k>e!>1!{I~%z-Xu^Gh4Xqu)n<BhCA~eV8odXVl|U
zc$1H0aCqRw2>HtuRk~5~-n0GG9wU=Dk;r$oSG!b<34Q~|UKV-P@Vjr#=M~G|!kk|$
zIOAsMNQK9wbJ=Rm<l<q9thzE+Eh-n?y@a_~-5*+mU(EdO98e`Zd~DL{XSZ1YjR$}r
zK?a})OzO@RW8NDDeJ1FZx+Q8tk`JqtjYGo<ZBR$F>nj1LQ|76J=M0RCIg-EV88(SG
z+h3aYFh-x!3^B87vh7F(6Vq#NJ_aZAZdE;pv{_euE|GS?ax0;)8o|kZ#IHvyf$MNf
zIlKtujR$LQj<W~0qX8gZ5SOe&6wy?u_vKxy^bo#~;HrTK5xV|H^V8U3M@uis3h3if
z|Dp{BeWy$SF9oCRq<(mDBT!2b@fm>?9$$;+RD-j7--MVvz6JFykl35wssm*QiPeVc
zsp<z-x%GlIRE}Ka@6-YP2SfM3Kis5A4WFG=p%2|GMS=U=b+;AZF;(UR6#6CYIdh5p
zKT&6pc!|c2yI<*cYTVi?rpQTi#f*tAHONoDDTDB7YB&Z$1#T=iL=$tQA^tXypUa_h
zsiq|_AL^I@F}hGRqHh&X&Y3$`9($KJbG2tzq+4cS_m>dNczD2|%x1C#b0Yzme+aGM
zBb+AO9xTsRD@~Q~d4h?gMhx!~o=G%luk1G#=dCUcY}aA7VtRd$fFWLk^|Yek=M2fG
zxt&D?y%{R}O$PQ|o?Z6W+U!ZJ5vY}T@jXQ}2n*)yZwsuOmV`IVV?llu(`%!xqBv#z
z0TJ03@_h!*uqS+=KK?b>Z$qfGr%>=>2E?Q^<c9y_1`+eL2A^0fWalIO^*Si40%(ug
zr8JheJkS!HMHq1~|B;3{*4ifafNI$n`b$z8VU@~3&yzp%(I$m5vUq5}hO8G~Tf^yI
z$i)x09OwILEn`|9agVm>lBxWwCvL~-nie!jSAK+TYA$9>|3Uvjs)<;m11CFNUVuv~
z>~F<}H2vqj4*e<9?xK=RPZQE{7+J$QRe%QX7_~1_p}(kK-=MtS^Jil~fiEIYDGk-u
zB@(SUU`HJD>(~A4XDanaR$4s$_M(6-1e*G0<?;C+R4~7>3<R=lvLEINQ`Of$KJfk%
zJLWp+Bje9Pv6jSRM(#ayV0k_(TAHoXb+YOjab-1OIG8hk->;0vb%xv#&EVqsNiuTZ
zo3{69Q8!?3{=KJ>D4q+z>JO6Iv^8PQXA;Vf+c)c5d2syMn^1mVJ0rZ(%_v{{qJwde
zc<!R7%jkBUw@Rz&eD-1Y_tHF(e9X%Z`9b1^vg093OG_T8hDO#QqO!u+#uQ+ohUi~A
zWMH^OE#-l3dLa_^J?WkSI2c^0AoU&>&h~#Uj7-FtFYBY<`9T50aZm{CP`8=~sc{bW
zlPm7_2KCuzAizQf=sn<R{HD@$>BMnt=6>-!`Y7-zH5iJm8}F};a}KF%dD@<iF!CIv
z1^6JZZmSC2^P9Y4dVi81wnJnRluy0Rle%^ad3MEcrI9rzIDR{>f*I#=xm@VqwKQGu
zvYjV-9<w8F<Kiy!o(aA=7BWK1B??+;X7EuuV0sRq88p}pTJq6&ny~Bse@)aKJPG{K
zhS-2rYna9{|8pa}FHgn{;Sy*VTI;i9!Fo)%@zY$*G2jm}jY0=l#G}Fu+!=?WS52M)
zjz)Z+a0J3S#>4u0PrGyBX_4&?H+bOqV~5l)_z`kDld7fBvb?A{cz<2XvTLr(xM(OD
zMyp9{LQogi^AmTJ`v>%0T#GJq<Mqj}4|hknAVU;xhpQWKRuqm>&Q{yrQ)*F$bbA1V
zmeQpiimRwOM61>$hS=>R3ciZo{SNVH8)?m~JgB0xLof|#)V#0zrwX5ATiU0A;T^4N
zd#f{BKo_a#%J!<GlY!2@D(JFhQs<^~-EjSZe(UxCMdP)h(wI4eHipjH-zrz5+k8fF
zo5SIVWYFVT?J4{H)YPsr0ud}18=NF#G1=g9Ucy5cH<Cm;n)IJs){qvju$9Jsef#*U
z17~5+AIp!DxsT`)h{)GD!mY<)L%;N*+7`Dl!)YfpCzubNZp+QstO9E>$u9HY20A5)
zrH%df)pD&TKo@buu20T{&qXju%Fy#qQU_0tu;D9vL-D1qb(wD)J1ly@_C!XM@~;ig
zV3}pmt<Q)>SL^G_v4{Jb`=MH69q*Z^V{DTrz%!0H=j%Az4>%uRvp7Zi|EFU>b2f12
z@^-cSx?lPvwPW|yV=P7LQp`n;kvu~2H4pjhB(?q&?S9VJWwg2jCgW(9PipAZ08>R?
z#_c6U2@!K^`q)eU;C`<$ZwUgg-rk&)^*Mkt;(JA7m!L~m6#tt?=C$y_9P1s<kEio5
z5l<#FkRg&%;IpHQ!GA1pe-UWM>yMYYg=!f-cX-K#Z-2BKU#R}YkN<|HI77s9Z_kz|
zPd?hpL++X42>YJIO}-EcfygiBnG319#*Ic(HbQf*ZqE1Q-QR(bSTjI<98Or8GlLQo
z78V~MaJ+PrXV$!csZ{V51wv$I&NLt1#Z-3oq_&N0ZlS&<8VxZE1gCzf3H(`6Pe#82
z0|dp8RdhmHN|O#&$Mleb83#maz$;ntuRMzanFJr{AmK`1vxt7|BrYj_0(OSM;x#4*
zy8B}J=PBNf?TbE<&;)WQm{CgHAZYq_oltefRji*ZgRCRgZeMTRIil7I0iMwyQ#;=O
zF&O?E{{9c{{SN@Xx`ka>if@?qa^12y6-j_}yq!ED>SGOpVqe~7t}oO~+I|(#)^h;M
z8n{wcPFG1@sPL{6xrHqrkz7S`^5@@b5S>ka;|yDFvR4XK$uADV>ae*fPo@5{yw7<|
zi&|g+<fSCMhvlh8r-+RVnnBOj=RrK@n_t4gg@u_y;}tnhW)oH?lRGy?X(+hS2Wvtm
znFg8(&E946Hxo$hv2g|vhws783YqRqI^4iAczyZiAHbF4aqG<W8XSjuZugH8mV7I;
zi(uk}QE=7_6BO>b7&aU!Amx0Bt#PIo9-ueJK)p;Pxv5gjl`vGwNrc~(<Cv`(b^a9~
zw4N4clF8!YSNMFFPo}v|QCNG0k42|p?G?nylgptemx)WY75Y`_JGqNQCFdFX`OWWH
zA_M(H46L6EJ6|Dly7(hepEARu#xV<onUXki7E)lYpdlvb$zy46J;;D|#)G<|u6t?z
zlZzs0`4czt#-@^tY@SSSyY$^`GV7f}@4GT5NUP~$A?@e7#mNl_CAOi&xBN)ivkWQy
zl`zz`FvUHV&)OZxNw;c^iKh4NCcqH+4bE?XI|&noK_bFC{hlXB79Rk~LFhJZPz&x%
z?`cjs@E#6_lW74Q=cSU;xx4>!a`Tz*{2wN|b~pxna0X$~bQPq*s<+KCw?&CRE%NlG
zgf#|4bSAQiGc=gbEHc_fq#EV;xTYAWEL(FL8CQ@#l?2pUlk>DDmNfz~yQIG9bs@cx
z@jjwg8xD*{`>_Mo9ny+UY>9DXHy!mR<Zw;8U3X7Pvm9a)#HLqCF5e2$KT<5kj%vvN
zxpn(^F`C@-g(+;K1}TjuphKi29G;^{P?hre#3)SHoIK04+0)N6s@TrZc*pWhz|Y7x
z9~c=WU;61Ux**PJQWu6jQX5-L!H<<M<F~nz<h@s%qCjuiqa_+bN-yhndxxK#Vc>iY
zHZ$w6!&8PSG4L?e@`tPJveI~Y@v%XpSB4Y{f522GnW(%;xZcGameEq&gzV*chOrPg
zVMF>>H(5sGXT%WgAE|sCoA1|Ot{!}pRiua}F~MszLtAjO5A)lr(k{}54JMvsKoQJ%
zx+aj5xZv!N3Um9YFU%u}P~VrOjq)@5o);DF%<#<zp%p_dh#(%(!K>-RUy*MUX{hA;
zlCYp5&{f*_P!5BOnA^(3I#rMAM=iwdRzfUZOMmzRv&<wIYJG4reQNbPbC6m!U?sbW
zO47C#x1n~a-1F^ACtU^}>W<GHg6R5l^@Na~L1Hb&Y)$<QB#0D95Kr50i%Z>Iuq^y+
z<b`6ri<07NW8NlYNHp;TXSuCbh2*bK9H#Z#SGvY}xC81VcP}8cxEv|aX7n6Bq>6A@
zf=X7;upaKT9<$16!h!fG6DO|6E#t-gCp#D(ZzC<5iFeHWAv{V&@+1E$%D1-IcP3>Y
zU&Ks1rb-sR3a}o&DCP;f6B$*_FbBMEfc8aMEyFb^hi5udhWR(4r1{W35F!5Lc4kxA
zezYPeT-N1hmO2EM&#H+tBUwQg+;T#;Zq5;dUr6+HE<t0+W&Njc88kFv7Sa@xv3R}^
z*r>?scW?bX(~~5^xi9?W8FQd-+RLHJw)=#~2$axECb#oq^DKw@s|8iJcXIyvbL-RC
zXO?q958C*9yCcwgVQ&u)+fwLid(*w$b5%_P_C5v1Kha6I_)y&kLvwoJD+$t{NsG&c
zjgfkuZ~*LqW8&~Q1L^<X&iT*g$`7Tu7DR}}a7c@R;Pie{J~HIl`;xzn=CG_?V7xt3
zuEh@z<#^ij!%#z*O4X%IaWM*?E9)jN+F(4Tw9%^I%Na>;;W`96m13_OZ<alQAF&Zg
zG>Ct+cX!HSXXnc|5w9n^35G6kiQO_yffPcTUI=f}rN#R{V>s~q<l2>fPwqZ_7O&Rt
z4XUDe;@|1-eIj<o+RTH6;ZNPpQ1>lAn+>Jc|N0VOoObN+PmVv*3=)&>tWv(!B`1Hq
zwrYjsmmg<afcngJ)*HU-nYVrZtZd=!^O+24b{6Ji))Z&It!HSM{p9)jI}8nu;4u@l
zSuN-wjOc@6Lk0$h>z*!-At)1E%n5V7<34&i<P``S>+|hgnCV*hRq+>Z?dm8ixmBxn
zz0z=*>FM={U(tNWi?W%ap=Ao8>!vTc9`JA4-nsK^_CIqC`@i!0Jcck}1^%zs=CtWs
zQ}MP}*H7O~&xp?J{p|eBJ}rLAqwn&JPuRq-T~sp8wm-G$#Hkp!Q;}0wKbW~aIiqUo
zbJ68LBHx}ox~@I#g*5A_sW$>-PpuJP?$*)vx^-A%)tV*Z*IdIyb9b7mZjTF@%5&P^
sxwtTA){M}Qua5d{vK=SwBj42nXUD(%6kOPQ6zD|;Pgg&ebxsLQ0P#X>TL1t6

diff --git a/doc/user/project/merge_requests/reviews/img/multiline-comment-saved_v17_5.png b/doc/user/project/merge_requests/reviews/img/multiline-comment-saved_v17_5.png
new file mode 100644
index 0000000000000000000000000000000000000000..0d82a74bfd6fa4fdecd7e16169906182c5692249
GIT binary patch
literal 15226
zcmZ|01z20nvoIctyGt8dtXQ!kO>x)aZY^$s1a~V1in|tq71v?`O0nWl+)4;q+@-jc
zfBOF3@80|Wp8Mr_l5=);W_D(0XXebFO{9jJ0wLZLJOBVdsH7;X1puIf001;U9CQ@q
z^}yja>Vjb_r78sg)W+lAnPZ~bXl_~x(tt0cv^xO6BRsH<fxCgKim;^<l-u0O$-<i3
z8|sY00sut4g;BRqYj<;cZz#mkP1swE@gEFf)cs#D4<r3QDDDnoj0UP2^fFGa*7P9m
zm)tKI#qsFr=|x?wY=pIB<^Lr|wZs_h+})jpd3e0Mytuvixt&~Xd3c3{gm_-^@$m6+
zp)k1Id>q})y}2CSnEu1$|L~EucC&N^JG+CO9O?h^HMel`a2I1_{5#Npef}e-JJ{yG
zM{;!gS1pu+Jb!z5c)4Hl{BLB|-r)ZS+25Z3ko}|Ae})tN%S>3y+RX{#@mDHcN3gp%
zpXfhh{NLdJ7E<&tFJTR^w>88-77Vp^bVHGf3-X}||JR=XmD2FPDfwRu{ZGpO(ep2*
zD9_*7`X96RAJhB;McGCiPn74s>@1EK5=9L`nI6|!(a;S5z$gFvMFV7J(V!L<Ktn}G
z?)K*X;o)Kb{^WLNZ}Dz(VPR>1|LA6RAu=MiqoccfbA*kROIT3C!on^&Iqm-b-sGLd
z!=FFOO6vD__xAQqS+Lx_z5VO!>)YGgqvMmo!J(f&5gKaRF);}}J^kzJo1wwsAHyOe
zqhm%#$KSsXxwyEnvI2i?`sU{DO{o3C#l^F$v!~@-o1HCGR!Xt0?R!Cf(az4UtgIp|
zGw1a5Yz~2(nwlvpD)sjZ+PyvMTOAb=5<faRva@lR-CBS;xaevd<mBWhCZz1|A0{QG
zrln;xG<-ETwK6b#S6d4|U)#{rGv?!aeY3qQAui+O<hDLNTm7ZBzi%KuF4@b=H#Ox`
zRb_S9$H=wS_4)aQljUCr3rkhs>dW9?cIW1=Hn)ctCbq8j%gd`8x>^Q*O?(~bsIPCF
z-}@CF9<{Z(1xrX?93895E$A8_5Ec}h{5AXQ*J@N^96v8;?P9lmsJo*UzI?Qvnw8m5
zQeKdr*|O4aYH68KkmKzW&^!HOxwALFsx&P+KJH_rm7QH#S>@;+a_Gm%>B)(Yi|5Gj
zXb!y4&cfzfWi>V|b7Ep@d3mLzxZK?6ZEbraAr8)9b6ZVeNl{I?k&Z!-m+z-fS;N)g
z@t;y=`+rP!_tDco2f3=`mKKh7bg64<n<l&L-5piWd|N-;@ec4GoE=-Z-B4y{EFP)-
z0f(yz@z`c~|5D&M8=o?3YDj9!^K^0w2o07GH0(hRb&U0W>MV?GOke%I^^5OSKxM3z
zxeWygkz-C^vXwp~71>@`2;%&gv%TJG-@wZ8hPH}qi2wVU-%BfG1QN85uR2>xVL7`)
zV@nK-cc-Tip;s){;=J5!C$`T|OwHC*QPSxSX2$45*<Srb4sZRej|qKMT6}VSPH!go
z*og1sQz|PHt+gD;O;hQpt*)}O?lPG<ccAj%;ApBKXScCF{pV;E*tnwN%jEn*ov+ib
zv-4$L+1lH8zFi%O!Cr|n{P)`%pQ$O&3-j}T3^iuQ`IbetiqLmPa2$W~I2Csk0s!a%
zO0rTq-pKtdQ$=ILXZ`(I1Q{FHBH$P9bdyz7cnrioIQ8R|4y)aqsndm*pI;8eZoX(l
zC{1z{$Fd;wR1*m;yYhOJ@<>(Ke+Cmr@nL>eXHF7lYbP}L7LWh&@S=!VCilYYuw%gv
z?wKF=Z3|y@w0SFQS!nC#b^-Mp7U)v^`Hd-vww;@{?%pkZ{m7}Dr$bD?;`dzB@27(L
z@5*g>va4pchl_;6E_oWFcZcc*M@D*0A7scMD!CW$l0}gtyF+iP++eT#kd@EwF!A5o
zdE<}LS!*9JV-=5SVaD-1QKJK~8g}Fdhg;w6=RW*A9-*U13k>b3nIEYUdWxjMeWt5#
zJGc1f0O3DUV{TzFf$~}N?jH9$YH)G)ERMN_@CPIl@+IWcCmN873IR;GC)S1ac8p3f
zEaT`IF=W*L2`ttC(rsn*HV>H}c{WhnSIqgt8^dBJ_|TP#v-3dLa>u<k4L3LM`4{iq
zXKLQUPZ4c8dtmjphpUrE46T$FelujDW6x-p0QP)YY9&H_y;AZp()shf3sUW}x7_pl
z#>KsLRfEqYMiHT|WY6#c3DaWb1=raosr9m~_8Dx!`fBS#=W#4pqowb?(x-iqGVSph
zuQP@vUM7aNWzA>Y>`(j>b6wGY)Ug&59nxdN+1zlx_=!LRX%#g`t?DxWv$nSnh%-QZ
zX)VEX<^D3V?)`7`YsP+MQzcAT-hR9^%^cYy{O_1GS;QFYMkZw`)U7w(8ymQ+iQCC4
zzfGhXe-Yk13bt`|&A_oxtd~;uuAcr`vZvIMrn3J@dlQ}XnC_<+%Xu`YL7|LQd<8;~
z=aZ8jCf^~n6UbJe;}oBzYwy#>9u>Pn$bq=(67TDmGOO3%%lHX<sadDGwk1raQ|Cl$
z3`x3Lk=-J4PS%T?s*2N!C8MeWFmfw*1p?S_1`x-|04U-`Y!O2YfL`L`2!MwIwo1UT
ziXmy)TfrFTd0bHCLE7Wd<E|A7a-UYD5PeyYK~aL6!EOi22gkTDKpZe1q>D=M1bhY<
zgmjSdo43P$(rIah+q32P(&JAs`PCl@0XP&Yld3$Dx*r#D4mgZHN_)(Q6-!^-AaAc%
zCHLF)C@WZ1k?wQGt}vNFD_!SUf|wNU6ON+SalD{k2ITJsIhEB4-9B(=2@_`VB<Ax5
z@kknV+YAq4R#`JjY6Bc_I%%Ax+<n9i0vQgXEVBBeFs{($O7}l9l5A<)EV%T1RGf|$
z3lmbnkr|@NRe(?=%f@hsaLk285jLKykX5mI9JAM`;1|*qMeWpFUj>3A9|7&BEYasM
z)beS$Mk9s_X-?JqEZ$-QKbb_NB_``kSWK8R*?M)e%u`wV(~^Kb4@IBZ(ZeA5h@OM+
z$Iz}s#lm*$3xQsix5Glwa*iS(IYle<={2&C!OUgm{E06pw4jBO#`#;ip0r9)s$J5H
zOUgYs3~3sez=?1X>bH9omM-g7J{bwc9Cl0*;(`U4I<=b6QUn{c=>S?e;U4>n%p&=k
zUIAtg$&4WGtZ5vh7zu<r6_|%4_+|~@#v7+gVgiL)fFKp@Fx4)-BywiINbbo-B7WrY
z$3*F}KnM;PTJh~hx~ng}2Jrl4rC^nwgLJozR!?R4FrWikz-`VCQc4I5l9f~oClt;a
zQ+}jY>k@2{+@EPPh!t<xTNo8<FVown#E$%+`m7TCRv4?KOz<h_k!HTCT0CJK^8mT+
z^e<=lK~JB`rN{toY;-3c$TiK}4S|r|XJVQ9sc1I@|4@b_pGA7R$}6r^5vyvlDs#*z
zl)o~i=E}@HAe)@R4me~j?rxC>5(1@q<#$JwgDD~20~WLynyO^jj(*ZpnS>JZoVFIP
zA&Q;oqk?G~;0k62H(0`JEx6$Yq&qCEw68oFjvK?b33?2C$~s@8>5$lJ+G&&NQu`hv
zeh-6x6*GB}suF#%qqX`cjorZ%LDS;zPn>6YLh*ccfe6B=srLKiQ7#3hYcFk%%Xr&}
zFPvsmQIXSilZ8=M`<DmaQ*pm;MRmcfv5(!-q>LYNt=pK*wZo(_VVqVWLzIvRRwPYt
zr9~2_u`Lz7v<`5v@nx@3xBQM$lcK7S*YM5=j3?Jte6pUOx0W2nvd|;Q#`}zyjChTL
ze2+#$;zO)abSOQAf+VILEY6K{cb^=l-f^gcEK@0VpZoJJ4T}zT|9jx1w^%hmt7)^G
zxcF)EHsu{g5T?toN|F)f{yy(cmDXoL)Z0de5`wcuVzLyKlg5M;JR4nnpo3{$?a59_
z*$XGrXY?Pl3MnA|bLWq2bdx)2sqkeRI(@z;(o;fGa?X$^T4}BClLyCN897U@ds%ch
z{SZs+dTus+oK`R)dT7m3&8A?fizqd0NSn?iqCZSHG$KIokP_`GN{VSDcQjI|ug5zG
z;<Fv`TG>_vUhnAseA8gMecRZUyzbCA!$pq%ZK$>BN7&`-R+^Ilbs%P^=6p#Lq2%#l
zzs-RWL*g%&?})79<wD%r@0#w(lm#z6+0w2*Id2!3I$C+Zgal$^)*1d;k6Y>weE$7!
z+CjYJ%}z-c2qPq)V$F{|IX>4%C!fNl=>9hw6(X{(A3FQ)2LkFIAR*}Y^Iy(lKrI;}
zxk+~XOY<U*0`1?F&WG*%eZ0zV*=h~JiSNMB@_J*hYZil>M*ZyF{Z`|lp5$lDypU=?
z!FvghivyGLb9hPLa$8FXxi5kC%xtb_<r%M+_*2B4|6WCP=6leR;QK#!Rhzbb`ddzf
z0$xuUKr#mbd@KO;Zwem$Q4R_-o(}!pMl6oqPkVV_drwt)1V!#z!ZE5!#Lm{A-gjV_
zSXcncxeV!eZN<5w;h&vy#cn+nvFv`>?Lz~t_gl{)4~Vb&dl~Z!D=T>^HP^Fmg*C#A
zHrHvUA7qIhx$>anfdc9zzTMPDI@C}vgc!673$o3AV@mzfym>Zuk@G5KzUUR-@S@8g
z$oD3P;F~~lH%LZ(NTU}^K7Hny%vkxf-ky@gy`RWt%C*_{U~7Sx5O#U3Eg~z^&h0d8
zLQo_q64+#yka6EKarMo|{{eA#oR`x~XqF(g^~{}E!n0-e#q5!3vS=%5UeT=C_654A
z2N+RFg#NZyPuoB^lr-o^BsVcVrD@O5DVEHTOppU5nL@S=D%Z?W*-7a)Wf-r#$md0(
zd3xt%Kz8_Oo((&IgoT-H={){O&)bXXrnz&B$E|CCff*thvsm4eNfh@_Dp=+b!&%o9
z*@bPbf^WLjPC1$Fw$G=pCd{Xn=T-FiK!Xe(W1Hsei@1)nZ6#PCbD-D6*-t?6S%>ZY
z9AVGwObTAz6z6pizYDB#`bf3>k^QovUoq(YF-Ye^x?sG)Hvmy{p`7l}Xi4O^?<GR_
z_$^nwUM?djN(mR3O-Kpc&TIie#(lM>1L!#4ad)2*l`r9e){gqDAz@$iY~Vi^_j0XA
z?^?`G&p(^-yPq%zwg>*{M~hOmJ&g^pT>JB3clmtykTpv6^3-$dbnEZ{u@L6x<wAIg
zaX2z&j3oehW|EuR@qXr|y79#~aD$MHHQ}Yi#VAi<6=(d~LI^r<_*Cg$%v2e&&z?mI
zxL{*j;Z<j_+b9R70XIxhktsfTbs?og#`wGpqf+~u1|=QFPKd=?F5?w_!yl;u8HN=H
z(?Wu$w*oo_n_#+2^RedU%gx*j7F9?1;Sv6;%LUl-V1rQZpTG{cv1^a7nbvQj2c)sV
z=gzc1<xe);0>Y<ibL_0XV$w*!L3gZ?o%X&~m;A0wR~S;wJmpv^_@YvK2bZQhY=%s+
zw=c|Po{?ZPc@4UG^UV@_5oyW}Vs@&#1Vt0|cLaJ7tj7`(nmMv$KdmAUhMT?Wlj^ZN
zy}P@siBZk?2#U4CP$-fWBZX~QM@+7e<0uZWNDF*j%^rX@y2tQAN*x~K;RMKn{~e!b
zl12`UXze-${fPC;EMrCkme3T6IVs;|FHk1TXVF568>;90C6BEKX~ggvCM^#fYlGn`
z2%KM3t70j%_;hKuu5wP=)X|AAH#~glDPd-qz_lC<h&L|q*BVu#NSrFgrG^9_qetZM
zv>c)OP{18Ueo1gfjnt4lq;V=DPALcCDSpayX7XL$DRf~o6blThs%mLzvC?-qBKq0J
zIX8ZBC#;>`jd6Aq*UI95pe$(Tq}0t~1tsmfa&;f*Dv&fY>lt>1302Ha1c!0mbA1r*
zF;2(Yq;cm$jEd%T*G_LbAKweYMPKw8KLQ!G()Ra7w>bvT0<GYl2B<k8+u2fhD;QcR
zzUwHwe@1Qv=~0gwny^;8&0gxDyKQ=zyjlNTy?&84tkYksb%dQuTWL@y_5z6o4ZneV
z#N~@MHM8F<zssN)qc0JX^ofYGcq`=sp6jmN65N*s2*uLGPY$<ku|lZo_P6v}!!;_?
zBq<1uPwpfMV0>Y!)Q9nw<R)F8M$p_N5yxU~M97qH?oGX$`#s`Dr6Rcbf}mAa=8q=e
zjw!^g?bsjkVtsk8!NK7r5`s-~fn*ld(q0pj!)M{Wuh1zuF=U?Q3KFMg`T6yf#7)RR
zyV=XUT&I#VKh4+jd>(?@YSBgiS~wEhCw+!t?iR&FgvS=FMg{73P<?Xr;)gUvb#GMa
z;B?be$z0ljCe5fqkg8B+5O<Bg$q|Tv_ZSpJh=YL$lKiiW8Tum#07znnjsiAY7HGDo
zNk$gf?q8X$t-CcuAR(Z}Z|))OUD5&H<v;glvo~Ovs5vx<^<x2F=Zwx+VOX}xnsV%L
zOh=+YDDWn=>~U4jeQsU5ii;A6=X~hsVymQq5sVZULeAq`_)K&h81-zXi%UeTj~GBZ
zx;OoUexf#Eu~STrN|MhEaIg?;Z<SZh4U`-a>n+PHN+y;42FmZkFfH5ML>h~I=0ZYn
z3{3|0hmgZxh1*rMAQvm70`!n<sv2`;0ZRl%4L%mBS%DoFS~*j1UtO)Nf}b3$J5Hu`
zD6WBf){_>7nBjwX{klrysm&mT{Q^0^4vMX7z;Nv@1~g!3)wnQVH_EvzDt358Zh#o5
ztOpS|`kHgkqzh(TAQmGrh#&y4$N_gfOcl)@x6rKqgLl(ZESF8aAuKM|nKBiVWVbxR
zlHB1DC~tM7uxOf0aF-q`qxkzIOCY(g=9kM;*Hwlcdn|~2DG!ollIE0&6o@kl0Df#$
zeZ%!(@zBwiF`SI{dWKAp7AWB4scOv5+gdd2Xez5rb<5FuhYRW21Q~z-abXi@w7Jhz
zX(FG#I2tmG21%)AHY3mc!sP3?M%j4JB%r}XMO*{pJ%1cW1POfB@kFst-u@f%c!b@v
zt2Vssz4R{zj=p)E8ACGyG|-z_GQnrj4q8#zR!v0@#|nyQVlfN@P%~AdxH=4Tf)7n-
z5LXJiFkTD<07OrM0j4MM29n^^pg|-}g+aLU(|u0w^vk}4gHVfyP1%WGEhBR01`D;C
ztV2fRbb}$N1$MSW&lUOPW3wg|@K!^@zcVl28|FfqK4^48UoFU0gwYQ?((yW}sg1>Z
zuqDSS6a;CRXmgmmwK+2jdOF<L!y8vI!RC7c{@r<uW=z5`<RB6`*x9<MYJ?lNn51EP
z^2S-vh1kEF-ny1l4|jpA_7@hm(8O{mo_=r$+4f93I}+4@hET?O5!IAvDG<jYo06s%
zTwwLJ!MjDoXK%a?z1=cl6*0hX=jvFXMOlZ@p90!@_}vI#7R<3Em>-ZdeFkD@7W5^%
z^n76w+#L%Q_3zE&;Z{^;@2vgYuyMA)GDcs8DHDP90t@spn@o|t^TbF*1tz3|yKWd9
z5}uTimv6?TCP`d}yNzsR&C`D4jQF^@hl(>U79#(sq>bp$Rxl1`va9XF5KuIS2q;B6
z*t6o-e%(}@Ej(}WKgJB9=qtV}<l4aa5Jg$o*@s55&0q5YYEQ3mi1=P?_qRp*#yLnb
zkKjiPA@-vWL^HW5)S(@;B-_b|peD2rD9fPi^?@FB`+fee%cHC#m4Nl=e%S}MEMVBC
zdTRXa=i?ZuJRVBm$R}Z7EckcLv#IaSfQ^{gO+jq%?tV)8s~D_tTo@SuWpz%F?pj-i
z4&~jmoM}B5_3AX+_>mu@nYnE@uOC|2X-g#zIjv$<GaKGRZ82-m*eMHB$?};}-#^5}
zKW?2$xL$qi8VQ?tWfePu-)-D2{&X9^{>&`x_iFB|ec;j{)5E-o>4rsHojS1zYQ0&v
zj_|A_nGenD50zF2U9ZEhd`o8q)zuz^KpVP-*kC$BV~P|Hyzldv=Uw3uMr}9da&2;B
zQA{0C)0-A;;(H}O>Ck`)j0n+kTcRDw*#Q^oU5~9C*SAimmf0??@TAi1($|ZV$qv|F
zgQ-WKEbUp|t<mbA&Q=u19W~2K55$az+f3T+iVkrCV~Zch#;7_`ALMBkP31-c(;pV3
zGFi#6{z!-3FIeR;)T!f|eV*Yw=eym%yZII|BKDNQ_nK<$Crl*VxcZCcdus&BW8RpZ
zay2tN4OB1!Hmnm|24%HqsH?=jPw1yr7>M<hHsTRw)IB5QFWMTQ*H^cH0vo(n_8Pdn
z#2l(tnv%OuotplwxyC-pZF!oP<T38P7Inx|cY?|1)6!h`!h8jImo#PeC%A}NWY~uW
zBu5dNxUBKUesrjbrYUZ?oVcC}Zf$^)AvZ+znzbf_KD|ih{@w2Dvlqfwz_0Z&#hY&K
z)306LmVC)-Q8{$G5fRY)_WSjh_PQ*QJg0<UIF|em2_>Ee(G|gh7ms0jaTUzubuP(Y
zqWt(Y18G1NVW|jw<u`hveN-(p#FK@_q6Dz#4xO<9-q_8Ailk0%l8(yc_UnxI*NEo?
z7g*9Eb=o8D(^D%4<%w(Di9@=f?w+1WHecG4+fUvk$BbA@qYHRme28pc@=1vyJU9pP
zaRb#!riQP*KQ**Fz8wBiU1!ei6Zx@<IxNCh>KG&v*0UhrE;r%((XhJOsmPeW`qc9$
zF(N2s5UQdoja(L-kbJY#$@NYi@+4yCg)Wc&a%Rkk_HV*_A2ntJ*IDfvuvL!TThJy^
z=2@Xh9}8K=t4jGsjD9kuPc+&Um;`#Z<h6-TnsAc{S%NS{t5Xt(hWDQD(OB}N@XWOf
zEWfOR9&g16#H=3vwCxGwH?eN^(R~DZAo(V!%B_JvHO7t*Rq2rjiGS^Pp$5k#KPiMp
z)y@bHoiK&bebniFxOg|IlIb1|mNLpbkKd!yTXA7kWQXLq>-=%~!&^4%d{B5_!6Gck
zZ!x9jn8n3RYz29iw4^Le=cU?Ut3%Nt3pq?&q9dzKjB#*ZBY(9Xt^?5{aGEW>+w}^|
zju+YY8Oi+BixlY&7Wh5HVa&R2tkTP}c=LWgTNUzTp0eMA`mvN7k7=LT={rAB5;LrA
z^pF>v5bWfyI&y#TPV!-#oGqy@I&^2?demcGQ7_E(P2iqIdiE)Vc;(ZT-@FCVO5YA1
zbd4B))uO6a%Q11GNKw_RF8Af`whbn1Oz!hIGOhbHy5M&BGHW@@jVJH=wn3r`tMU2w
zv%ngu504WQOm3R34ConkG&i1r++IQ6@`2b0#G2^md)PrhcTA|B3AqNz>gbO&J4P*4
z%jcSoUBxyK0|r?L(OpYNb?8Gw)HDBs!~3!7fWX|Ov+9m_w<B~<aAnw&J|h`Gm2`LY
zRp+la2rnOlRF1HLUlT6%XXoKXL~#wXw?@c-hB5wF2Pdz?iN@DNKNW;F9ju7$)ejr}
zt5ig$eIv3f=e#CAEwO^=RQ4;fRH(^e(RbZw7k<EE{HWNAN0!}zi-SE;0xT@3`kTBv
z47LB;^KVi9jurwZ0J5;8LI2$V2C@_@3pSxDb_=g48w(4$C*)I@oRf$_6lCt-VjZnU
zlOMHTY|!|hy1te%HZsy0#UqUH-*Wy;yk^2PeB{8mnvOEM`u#d@O?`h)&CZMYl=jP0
zi`uK9SuOLXtC=RmwWS5Zy>ByIBqh^=x1+h)=jwMo4+6JUg%7KM`A{}BUutcRQ+@5A
z&b;1$P4qKzWb60!T}Q{=J{{*zZeoFn!(cIc(F$v?CGMx7rPae<EV?eQFYk6byAOEY
z_x~QT)~vbJAkLYq!*}w?(8;XOe^qWt{B`Qj=}_Usr_p%Tm9^ZvUEHE#jo}SC2{GTR
zRUT{+1}f(Vr|DMGovp%6K}VhMp<zib1T@(fUhFftL~LnW{hPP*^UEXD02pga&`4+J
zM0f6=hU5C1Lyw|LDS@hep~YI;(m7=9Oo;2ZiBEb@U_e$PEBw~zpcivbLKfO*2Ls0W
z5ff{5JFB{OCDHC{8C)XX4tTbz2a$N$=I>{x?c%(SxoalAJcT$pX+th90yWtuiA?Tx
zTs|i{_SIC97It?|J#8(v5DXlSMZ2l}GBN(k&aJ>YZ<2;5B91SBI&CX#eZD^1^zkH3
zq3cmkCbIdp@yfYZ(z5HXnzB)~eXAn&ENJ)J2+oG=#8z`KedxAr-9edwvq$DK9N$(K
zR<d}M?&Y5Bpd#7t69rdWRtmAIZ@aIoF+|M!wKvsY?r*I16Pr?dQte@h=TgRB`DfId
ztzBL-w>pbM{2v|RXS5wo3nw|LE^>cqnCZ9-86n$z_YjSk){<wGla6)Xd>z+aoJen_
zjP4R9s%L%$LBN$>kFeQ&$y96WXc53@#`?PRsG1zLe!knZ1dkB)ZW?m)Y!F@KN(30P
z?SrZxn}ySkG^S8|$REn1Y2f5$pqLeMQgoAg#tOw5X?Z@_5Tn7yyyGoH2^=s?77V`W
zQWE_pMVQk1e6+h^n1MN)0+z`UrTVrhFMVON_`{1LVzm7*c&XFE;#Nq-G8LmXUMJ>a
zLO3<8hRH~@iRRm{tBl+t(<ww!G~t&VYmAP>(m$8bl603NNxiV1{Nd%@!06^w*JEJ^
z=@L`GJ}NS@sEu3cxh)IayXC`URDIyY@6vrqk&5LrmQTQGOV;zi?k=&%Fe&8?&-2v!
zL@e9BtJ3xOm`-q{qV%=Q2!s*Xn!6^=^gSwY{Egys*~9H~wK(I<$1dqYql+Al4WkOd
zx)8qOG4qYD&MF#QK9*Q<^^Pt-3_lR-*6@miQUVd-mP{v-4b-oxy;|nS9G@gsPQv*n
zxf9_V1swJ|1McUX^#$6)P%8+L7m=G^^L_vI!bC-hsVENx(Y$$xlf`hsifWe1s+EMR
znLm2t4kr!qxw1FtBiAlN3==!2Kn-rl2~A@mb5<T!0nOgD7-O3FM^-|83g9;{3gr(s
zl9VT;R$inNZBHotKM1X6DTIcS^M1z882Ea$*Ap`=dj=uZx`-l$vwVY?e5QUJF(aUm
zMyfv9u9Xq0ibwV_Y=)ZQ)Gqs2{3Xs$F%8HeNr1&0MTfmZW8L1qn0ja7B%D~;1iWza
z*9x%%Vf}5~t!lNrYrStgO{W%*nV)+vPa--JdR(m1&qi@uZ_MrC96h3`tLqdpD*Cbx
zY_hZ&f&$nJjTk4c`6fckM*4C<gyff17KId$%di?m<7lp~&_6!62*KG)k-^(J92q>u
z6sU91YdE;>eEUMR08A7ZTYM0h`sR;AeaANofL6B3NThdLaw@!f9iojG+CYQ7J=|W|
zmTT8QfWt?gXNDQ5ucS~lA9F>xacEi4qTW(LI;ib|`0Y=-s0ut83esvb&Uq~M<>q3^
zT!YE6bL2E*(zj|U<o?*8cEZ>jKp%(BKfIWst_5qO@4Z=7;5VLOgwk#vSUqi?#3_4+
z_uYo1tQRd*FH+ATjL3~U1(OE8Dc;k<Fn>WTW5jexQazhbrj%zQwvL8rrhQ6piQXn^
zRd$%On<kEoiZyy2HpvSy=pLnSeF={d+t$XkN}X`|Zey~#k!g^PDbibFN2op_?gB3g
zQ9cSSyg#zgzOQth8R1Iqd;)S!v?+!?qKG!ZW@WL@)oC>PflwiLWQH_V_X+kAq>~T^
zE;-UY-wTRW0>pn2$--&oB&|5F8*SY=7`bEUKbub`7FyXuycK%}TXR!VuwNQ^gCt&!
z$HMy4dYj!X^L^9D@nL&rV#*29*v}H=`%;gC-ihAy<0Iy}sbRioemft|q#nV-Ml-N=
zCj$O_B|PspQO`^IwY<dQe#0mdgI$fq)EGhmGQoFrrCM}}9wJ;NjDheU`n4xocy;nO
z5qfgpS%MPq@mQHP3+yborL{`ci8G3bU1tR4c=q&rA_!0T$0I&!hB}@lnJtFI5XMl4
zn&@7p>en!&7}ZMQq3!q!S7R&GBMzJeYnCH;1E#w@0BgtqxUzN>&GRBZ8axfF$O0O%
z5JUgl5Hp#GnK!gm2%Q`va*=)^%dBl7Tp0Un@4Qt}>7b(xiqt-OGk&?~TJJ3KHrm&U
zk7i7M#>e%_%b+85Vt1NY>8gG$c)Dt>NzDXqPGP<}!h)I79WGo6o)0EFZJqj|&Sg{+
znLNF_YHG<9wGStJE6tF}(RuWNJsO?6!Sh=W1|sw&RX>+Ts+`~F@82|gi?cd|sG`iC
z9+jG*PsLJ<asz;D0L1jWL4@Frfqy{WkCUXymmi|tk?~zSeM#RvlAbcIJXXc!LSSIH
zSZF0a(jq6yKT5BC%;b+ysC}GXn~`0>LHOL@61BDp#<_GaV~fJ5AP{dF1<L3(rh(9>
z<as*`l?CzE-{s3w&C!%>xfGJvw7cblVnU^_euT44h7ATS^CW#2&Dcsas;MO}Ee0_X
zLXec;52=D%nF2wA-4W!RzSu7azxVO~rn?wDDyrfnUZD-M0**HK-8DwC=$%G?0;;}>
zO^AvFO~f#e#r_-~3MR%}?rNvX)qDFx5|T@0`g=V6V^@Mi-WZvpA^<@7>+e|rca6se
z+Z0(v5;lf6lcp42U@*tjXM)8=x5E)tM*-eH5t(Jn>SeE+x0a4xZTkPd&q;;>g%O{-
zSpt>H_Mav-z5r`CD00LL+f#sT^g1#eD8SZC7xs&OfawIr11E{r>pkLGr+22eUq|6S
zr-zG9hwI(OP4*7_Lx(v`op?~j=fQTxxL5Cn>^>w=f+5L_<j}Kogw&LxArK$zl_xk;
zOz}oJ2JVqijQvZ^5QfI>oP$rFEFLU;QwB;`M$!}S-RmDvBE2*8r;-N}Kkvl+v<znV
zmypKigX*z@x7kL_wJ<b+=EdB`Wh0}tgsur^Vug6|*b`K>T2&PG0;BnrpEPobRmojC
zX#6m;$>EBA$}qb`5T6vbva+mK9Wny_HbUW3$RV$AK@`qRu_cm+Ij46N;%HY^Ir4=a
zO+T+GS)Yxm8|^`$s_iD*v1sy#VXRC1a#8M(@GZpTFf3_{3r{^9uB!yw)qZ4Crat?L
zEYG9?PxaMJATMsis*KUprwsV?P*>GSE}i(pl~2I^Xmmr#L*UIpZp)Xg7JG-a*(52E
zleri0$i!OjOe%1C1P`CIKWfih`xB84{5jd#Ae>h<;inpiSp)Bt(t`ZAz5|=S!3L>O
zn%!{)s_dI4cbxj~?@rTiJhGxWf~T>XK|)`=I_07Tc($@(TWNCIRMcC1A$(BR1r?UQ
zVvIr@6VQBLv)k*i#a&_Kc%nfl^80UjBZq9`q8!e|>8$jh`2hz5>(hA25sS}lqU$q4
z+}7Wiip*@12~j&wd|m;oNbWh+<?6Sj@UqTIz$*pz!eyapsT|-q2i~-XxmRc-F3I|w
zXMF<wgkBt}LXK%)0!4a+-u<Wy*H<HSlW{3ZvaNRmfh&?gEi8E>zjsUD5VABj!ExsD
zMloDxHVX{h5+G|2249nj10L?Ty5jftcz*u5o^SGj{@#M;7lWRpJZ9_xn@`EgL8%7o
zLWKDXSsznel1}<6A)I1H3VkAfS{3cdmx3VJ>z~D-qe=s!z%%8~Y2Ae-$+8X47nnpy
zy1x?(u5K-H#~|h;d%hP9-3xE8UpbVPs>+VbQx}cVa!so6pFJinPrS$Di1Ut%ehEcn
z|AOH(d&iktFcn*bRtcnM&jJM<Cn9#i$&6>6vDXHxwdAYHwTv3dis4G1f-Y{oZCbvB
zB)sIBO!yMN_3m=pMVGwC>o7D~75qZAYnz(7@%IbZ`}igi>#O?Tf*kVZQV+Is#O<~W
zEq)c2zAg1RAdf1rVq)<eoBy8^I<G?tJi48+hLR3ZVlkEV13$XCU!_{4itmf77Gv$#
zM)h+(H2%<dLOvvydD=qUON_MgnqU7QV5}SXs-P4$Xb@PSZ@F;70d5pXB}E#1204Fk
za?><Ep~-wlOe}OKJ;fFvi4M^V{bQ*1Hj`YWxj3cj!o^iJT7cV0D%`HRgis{A%H#`p
zSP0x9?yJK_@l4G3%olpFft>2F%o^BIU#p*z#%%(^viD+I+xYecmkRW=*vHwX*Vf8&
z1cchiE!8)5M!i=gOI#b_hXF6POb+U@G*w~utwYT`(A`)li7&JL>CJgdiGx!h15Nnv
z#3}D6eb%&!*XyelPe~o-Po6DWOT?ABf$3b-7|#5TH?714gL;Uuro|5$Ol}jw!`Rp)
zH<E3if3^;o`d`1}dnoaD#XuvJar+h?9$)r!C<WkWVM>Wt{c!s(FhDG~|7@A;?3@Sp
zO5==IMH1itw4-5b_|ukPZtk$8I{N5y>~^(G7Jjju@7L>9-~=oHbmez2z}XqPGKo5r
zI)??21OkE>2?6x;0Dv7j^6w9zKR*@=js_S20mjdeh*n0!^>-w*XGQA=arn*Xy~%Qh
zwTxB=8g$)jO+HV@af7s{S>oh2N#mj&;FiBHFlog!M4!l+d*Nu_B;&kOB@np!T)$F}
zAkGE|E;4cjwM0KPk<`E5SrRjy{g{~Q8xGR;R*vX`PwYR?o<<q$X1g$luCR||*-=3m
zb7Vj1SsikR`gR%Ykr~UF6h_*)IGiMRv^BX*(k~G-%9A5E49NUwx3wauY|Ax(GhrLm
z6`XieEP_%n9ZTH6luQb!I)QC8w#Q=kfr)v>N|lIZk@V-h4G@v-kVtd2`$zbxBEhr%
z0+be;<5*)0t)Ipjw&;IbHvNd>*Sc~3W#{CeH2_>h6l8Y3_*_JH%FRmDOX!{YrAZUB
zCeqQde$59zx(ojKp~c0HJ(EVh6kkCL8EtW~+Z(bZCEA;IVxBcm%CWxNgGj)OP4#lM
z@bV`x?pfjWe=LkPPKzX%L=*G)=y}DCOq>x)E>u<S`Y?(e%J{>)sA#HpCm%$V(yNRU
zd*TZ15q|T9aKxCJEEA1Z#tt)jIhoW3^{lfQTEs2d%=D9D@}nqD)#`7x(ZVN>PgHro
z;y+*tqd8+hr(>sBdRYL&mEEwUvxY^TCzV#t+vV=rxE~n;fL>8Z4K6H$&D!{bD#EH-
zR3VQpLQPFwtMMxX(fMX*X8h2=+~|c#_qR#4QGvzd)fk$EXzV<4fWo-^)Hpj@M=7D}
z!n%tqeyUzmXzkSot=QK#2R&mMm;oVFwxH6xHiYr*`Cw;~B6u#nv`iJudSRRjA5_gm
zaZu$?)|>7#m$Ddq{sr`<W{|_YG}*CahYM~DBj9M4e-4$e0Q3I<&0zGLm0Hi5ek&$P
z_qA1pz7a`n_%H{^6Kcrlt&a*^U;-zreL{D15#&wY)_Ys3Rk(9}utZUe48@|}bRK7s
z&zKy9OWh>A5aD`;fBq|vQBh{9$U2ND&>pOfRGO5>Ikaz*Vg+O>!mQ09mbU2<(@IFr
z7)#pUc$e}!BYx(Zz>vy{f-;gE9Ie;ExWv0%<eWdYF-FIsu1O#w;y&CRdu=Y<n1Uzf
zkMZ>SekdV(N<ouq`5?{b7)Ra5geTwG9kdCPJ62W4KDb)Lbt@EKwDbH};(~H4E%_9U
zfZqFH$sD|<O!o++yjJT9xX8{J#|~nd#saikK?U*%0g{bqfbsu$XYD^NC;))+Nw!G<
zppFm_1OhnA!#^mOpaZOc0062lN&pZ9K?md!qWl*{P8$t+f+GKqSN{c|C;&*>H^9Y2
z(CjNVPQYCpoY!c$9NoN;=CZ-7*AsBe40fA?h}bpOX7C)@I$e7L#&wXisFz6%8zj^W
zO@<duUSJV`9XC`!VM@M4xQ9fx1i8FabO2ZxdND~fQ?Glw0EDAS0#TzvQ85LM1_i7L
zG+b}a>AOpIoc!TfM1${uws9wblEA#{h6w>9m_G2EK5V|aU49;xD=v!Y0AcOM<YZU^
zph5L%Q1Qj(yV*_4^Lk?9LkY<v3CdZd4u=Pvm!!?T8-N7ZzJXOQFL!j*)?Sk%|G@7t
zKC_PX%<xLzT>g}2iQZ?iL(js5f^tNc{GGkfKOY>7U^7Eo3)PJkfIi@2*2O$R=deCd
zM<Z0?&)B^L{Z#Tui^OM%rF;6yca3=$Z4JC6K5m1bAL_ltCBRT)+V>nh7mi7(s~^xy
zbS1S4Y2<uy@`(g6qten^X?k<BTMN<Mvd`n~1k_g4?s>AvS&3qsh08)-@2wE2kS8~W
zY>qB1VUylzl6*8yIAX2EzF4AVuOxOjIQT_thyKmN@$_)Txx=ocBQ8#yG(h}D)3LfB
z_6rM$TYsm-ofsMPWy0oRKrpe(pNFc0j8c6&4QX&)lusxF9G8>JbU90n%H19d>FA(d
z4iFb?Z2<XtG~pwI9Djh8i9Ep%E3$fa;R*`ax9-N!$~sPZ{@7=diCEuMfU1;sqa6|f
zX+rz`zql8TfE*ndpFApzx|0BQZqWUa=}n2=)4KiT_knW(wjFICH0~-~gTdmuN-U@(
zwH2&8na<t+>wDKi!E3!&PQSm}+lNSa1s~3A4z(L8a|GVpK`;B`Evx>7loNjuN|)>J
ze3ds81#gmdS}rqo@>;%ky8Ma;t&|aZCrq?~@h%-o@o@k9ypYWSZgFyJ8f(YYTiY&3
zLXVmqW!Pc>Smk8u&sO*1;&NO(aB7oE?a?uyVU8#8{sNXPFbOvn!$AhcP0Kr!gZkfO
zU_HZt0_s$|iGx9Tz=qBpOf-1sAO!6SJ4zr+_^BlDZ7F)td(;BWBQ&7}?AlwR-X;o^
z$6`SNsA>7@VW<=cMS06OR*<n>ffNvs@VE6hOTKJEL*>hVy8oi0yby)MJ%MGajlQxp
zw@C_Ek+-)y<pF$;oo1UnUIl3A15v(-ay=9pXj(o5^p7|GA8vVsaI`!jq-YmDR_3rl
z%}tIue3`tp1axwp0>~R|W!DMdzMMxAEq`rE1D(eyMZ?h0!(&2NEHNzZH%OvE{@1fC
zntRggqaUDNgwWmlW;gMmOB#64cbIF$;)cZ<*KC-b+1;TWvVg*s&`zm6GL;n+FxoiX
zx6{(UAiqM0#U+&@Gb|4+Bb>`4{Hv`b&<;IM)fW6$WhhE#I9LM~G)m>0$Bc||a&)B1
zSvbZ3{l-BbCxHHhfQ-cr*36kETFz6wt=*RLV!yO-8aPFQg!aBhT%Ft2AIi}L+1Mr5
ziC>Hb{&`8X2vPaH6`;#`j37kTRKPu4uJyFHK+U*}mod)L!0{K*I$2}hxYy;XoKqCg
zLctH4w!kvN^XNxnuTW>Q*tB=}=VJ_zjc}jjdh%Ew1rp+w9Av`hN!2T6iS*Bu6mbJ9
z+WG9i28%<|p15@k@dm`@{3dDOw^8_X6+bwzBsj6MCbh(Qi5$VW<R0Li?-spjj{}vP
zImCkSS5p&5V?#q#qNP8ze=^WUR^nd!LsuzI0EZQ-Dc$R9I^GfZ>#@UOv>{e1erc?X
z(Vj&kp;7mp`@JMeqMhw*ysTT~q^u(+tCcMa4s}DX2TP{A-57XgXNt9oUsWldMjecJ
zBo?<OxK)$Z%2`BiD~-aV1e!me5p|(0I61DJa@jIEB9jwspKA$-RZiHa+~_QBuDvQ!
z)%k<rvudGOq-dPjIVvVF%fXTBdZc6GgHVVU<I`9DIVGPlwGYw0Des}F!k-e*<{QG%
zRcRkHL=NLIy|^JETKS{=NUToHvSWEnxXO)%Wo^cNV3bwVVZ=0Si*5KYnt>8(lgfaW
zY5e&I5nK|&*U6)p9xGt14GU8HR)NU@CeP$&-Fi8+s!}V($Z4G3mIkWsDHg!~1vo5H
z?Q$GD2^(gKdmNdyR_Q~|SHJ(<sw6v|3u;p1XIE;kc%Bq=`xX|x^!S<Q$3oDUE?c<0
zz1!n?vG!t5s3SQE6P%r&D0Wa<wRAb%GgWWWCaFw<gm7ia4fy&tlCSPhNw5^1+F(1`
zguFqRaaKRqtC#_d`4=*d)0_FT3>9C|%3@#drA);LBfmN}0~W86ByTc!Hv?K5zcB^Z
z*~7T9BB4TKkDI1~NnHDtuA@h2CNPSHR^pT&@d|}s51dw*gR*lb8vJeI8%3u+j0`(~
zJKyNYy_ZG0iud@wjX>8<Z(zTSQ=?w}HqG*VZ1wc50`Q&FN6-sc&qk;X6IZDI=tPfS
zwZ<u|1YG+jOd~{F2&|`8z+C<GGumO{h@O>Z;2+^nZCD#(!)=)P#8bm=j`{Ti^qLaJ
z_-I=)6rJWvWp<~2x=tMnoJvr;#ZIF7i=?2@%4K`zs?Us7Q7dWZrkCKuNuvewhORF*
z!k&IR3L&rZT%hIS3(QPvV@v^+?!&Q*fdLVeiKDsulF?X0mpuLJsUZ$eCc+L&N3P#5
z>NmHMkXzzljSE1HMmJ=H&eJHtvjb4m1%cL`z@A6jvd|ZBD<wcsc-2UeqrWPlB+SM>
z1cLrI8jWwJJA_Q(2md^-QRj(Bo(oPp&QrIE)-DN2ThAnt@bDFbI)5e#!uMFQw+Add
z*xP&Bp-UDZ?NH%OzCr5$7d!#(MIe2>N%585zajH)NdZS&K^unpK0^aIVxS-tV8GoZ
zBOwpb-y#DQTal7LlrVpvWl-@F^^EiP=?4V^WERGLpe6|FizAD;xST_hnl8k?CWC_;
zea<S>#*K-$f{2%bE~fjgtV=?w$0TWwp4+KIA)}2mn>Uz>0K0g`5&45?!lUQ^72y6+
zGp)Z6739AB6Y7kN3o&1(Q|By+jY^!&>@L<}?j7XW0+B&#Q^g5p*a}wLYOP<NjL#Z7
z(wO-M{uD`i{^L|$3~FP7%D!ME!BO_)PENntR9OXDK-)$bn#3$i+6U0e2Yd32#D}l1
zV+ralgXB%>ZG-Kut@&18G$`)d1p84(U|A~1?E~jtGK<c+Csd*pvrg{~2yK*FIaz7O
zdHHAA$Pkg$z0TS?9vT=2H@~_|%5~EBR6MPoJNgL9TZ0>})^jx+tVQsA+LAI&3b1lL
z@?Wsme8<w_pX~p}O_auW(1ov9Y=}HjuI1JD^__$j{``JXUYHV1PZm*GL#uaiz=Wv6
z(sQ50H&x<lAH%;o*LIWm$+!_fCHt!iV@F=bmka7srcbasJ@>SFtFB84*7nI~yPU}4
z+%P$572s4`Uu)1x?5mF8OBU!e&nFg@&T7{w9Q>&x%h7O%d(A;s7X9=>jSN$49Ls&_
z&6Dg=qSKY;=a^FunQdF-X>}kYdQip+wZK-o7nu^@Q`g&2TV-Uah=mRw-~Q$8+;gIL
zlQyYroJ0IG_Ae_Ke0{>hUQH82C9&<9gp&EaHoiZ)<gT)<w&(Be{*o|hQ&c#jCavo2
z-CXy4<!LJWfCQ7_*YXjpiD)-y@V<u3=noNsa+F{wQ8GalhID076=p&!N2zj|YvmxK
z=BK5THlYQsyIpJPaG_Lf#!27(SMblnNpI}>dWnki)`wBq3G4>s+QX^-_|)*cY}x5K
z)3x+&zM?jly@>F;h`k4=BO)!bh*ba)|E)wQnVL=`FK%J*ccY!I)C1YlW1NOP63v#2
zXMN~C(S6epib!@ctac}+fh$jmB{zSkyR?ycm!=cnd36aM1DoUpU3K|2Z&PbGs#rB~
zSUOGIXuZdR>vt2;x3i06dH&IGBt4^11LS7A|JNC##Y;mQem~m_U!B;mxz?wGV=O+0
zHtAgAd}B5e#=+V0Z;6t1K_hxGPOfv$+aQI$H?LMq#4J{^1g!5Ilf}8z{2J@Q<@_Uy
zHZb+KsTJp3d<Qm%!ObB^B+KMxAMfNFt`WjdY6nUM{?P))LW!}bAbKD|6BJkWVGhfR
z3HYN)@zh(2O?2M-6BmVPp^v*T#b_U$$9H*<!~q!~Y77(vkwj4>5DxsszETDG)qTjH
zyJ{xqoRkD<piXLWHQLrkyYb<sBtTYp=5(ykZGcxt5OKiIT?oCT?3w%Df5j@vsmXqk
IHVgj$08PRH4*&oF

literal 0
HcmV?d00001

diff --git a/doc/user/project/merge_requests/reviews/index.md b/doc/user/project/merge_requests/reviews/index.md
index 93a9952ff7e..bcbba872d1f 100644
--- a/doc/user/project/merge_requests/reviews/index.md
+++ b/doc/user/project/merge_requests/reviews/index.md
@@ -37,8 +37,7 @@ To do this:
 1. Select **Code > Merge requests** and find your merge request.
 1. Select the title of the merge request to view it.
 1. Scroll to the [merge request widget](../widgets.md) to see the mergeability and
-   approval status for the merge request. For example, this merge request is blocked
-   because it hasn't received the approvals it needs:
+   approval status for the merge request. For example, the lack of required approvals blocks this merge request:
 
    ![The merge request widget displays 'All required approvals must be given'.](img/reviews_missing_v17_3.png)
 
@@ -134,7 +133,7 @@ To resolve or unresolve a thread when replying to a comment:
 1. Select or clear **Resolve thread**.
 1. Select **Add comment now** or **Add to review**.
 
-Pending comments display information about the actions that are delayed until comment is published:
+Pending comments display information about delayed actions. GitLab does not perform these actions until you publish the comment:
 
 - **{check-circle-filled}** Thread is resolved.
 - **{check-circle}** Thread stays unresolved.
@@ -179,9 +178,8 @@ the reviewer who requested changes should [re-review and approve](#re-request-a-
 
 ### Bypass a request for changes
 
-If the user who requested changes is unable to re-review or provide an approval,
-another user with permission to merge the merge request can override this check in the
-merge request reports area by selecting **Bypass**:
+If the user who requested changes is unavailable to re-review or approve,
+another user with permission to merge the merge request can override this check:
 
 1. On the left sidebar, select **Search or go to** and find your project.
 1. Select **Code > Merge requests** and find your merge request.
@@ -191,8 +189,8 @@ merge request reports area by selecting **Bypass**:
 
    ![A merge request that is blocked because a user requested changes](img/bypass_v17_2.png)
 
-1. The merge reports area shows `Merge with caution: Override added`. To see which check
-   was bypassed, select **Expand merge checks** (**{chevron-lg-down}**) and find the
+1. The merge reports area shows `Merge with caution: Override added`. To see which check a user
+   bypassed, select **Expand merge checks** (**{chevron-lg-down}**) and find the
    check that contains a warning (**{status_warning}**) icon. In this example, the
    author bypassed **The change requests must be completed or resolved**:
 
@@ -209,7 +207,7 @@ subject matter experts for the changes you're making. To decrease the number of
 review cycles for your merge request, consider requesting reviews from users
 listed in the project's approval rules.
 
-When you edit the **Reviewers** field in a new or existing merge request, GitLab shows you
+When you edit the **Reviewers** field in a merge request, GitLab shows you
 the matching [approval rule](../approvals/rules.md) below the name of each reviewer.
 [Code Owners](../../codeowners/index.md) display as `Codeowner` without any group detail.
 
@@ -313,7 +311,7 @@ For more information, see [Data usage in Suggested Reviewers](data_usage.md).
 
 Enabling Suggested Reviewers triggers GitLab to create the machine learning model your
 project uses to generate reviewers. The larger your project, the longer
-this process can take. Usually, the model is ready to generate suggestions
+this process can take. The model is usually ready to generate suggestions
 after a few hours.
 
 Prerequisites:
diff --git a/doc/user/project/merge_requests/reviews/suggestions.md b/doc/user/project/merge_requests/reviews/suggestions.md
index 2b02f9f0961..8ae3e1d0271 100644
--- a/doc/user/project/merge_requests/reviews/suggestions.md
+++ b/doc/user/project/merge_requests/reviews/suggestions.md
@@ -24,7 +24,7 @@ merge request, authored by the user who suggested the changes.
 1. Find the lines of code you want to change.
    - To select a single line, hover over the line number and
      select **Add a comment to this line** (**{comment}**).
-   - To select multiple lines:
+   - To select more lines:
      1. Hover over the line number, and select **Add a comment to this line** (**{comment}**):
         ![Comment on any diff file line](img/comment_on_any_diff_line_v16_6.png)
      1. Select and drag your selection to include all desired lines. To
@@ -73,13 +73,13 @@ When applied, the suggestion replaces from 2 lines above to 2 lines below the co
 
 ![Multi-line suggestion preview](img/multi-line-suggestion-preview_v16_6.png)
 
-Suggestions for multiple lines are limited to 100 lines _above_ and 100
+GitLab limits multi-line suggestions to 100 lines _above_ and 100
 lines _below_ the commented diff line. This allows for up to 201 changed lines per
 suggestion.
 
 Multiline comments display the comment's line numbers above the body of the comment:
 
-![Multiline comment selection displayed above comment](img/multiline-comment-saved_v13_3.png)
+![Multiline comment selection displayed above comment](img/multiline-comment-saved_v17_5.png)
 
 #### Using the rich text editor
 
@@ -87,8 +87,7 @@ Multiline comments display the comment's line numbers above the body of the comm
 > - [Enabled on GitLab.com and self-managed](https://gitlab.com/gitlab-org/gitlab/-/issues/375172) in GitLab 16.2.
 > - Feature flag `content_editor_on_issues` removed in GitLab 16.5.
 
-When you insert suggestions, you can use the WYSIWYG
-[rich text editor](../../../rich_text_editor.md) to move
+When you insert suggestions, use the WYSIWYG [rich text editor](../../../rich_text_editor.md) to move
 up and down the source file's line numbers in the UI.
 
 To add or subtract changed lines, next to **From line**, select **+** or **-**.
diff --git a/doc/user/project/merge_requests/widgets.md b/doc/user/project/merge_requests/widgets.md
index 6dc280695d0..7f519ecac7e 100644
--- a/doc/user/project/merge_requests/widgets.md
+++ b/doc/user/project/merge_requests/widgets.md
@@ -31,7 +31,7 @@ If an application is successfully deployed to an
 
 NOTE:
 When the pipeline fails in a merge request but it can still merge,
-GitLab shows the **Merge** button in red.
+GitLab shows **Merge** in red.
 
 ## Post-merge pipeline status
 
diff --git a/lib/gitlab/middleware/go.rb b/lib/gitlab/middleware/go.rb
index 04b03aea08e..b312f209307 100644
--- a/lib/gitlab/middleware/go.rb
+++ b/lib/gitlab/middleware/go.rb
@@ -31,7 +31,7 @@ module Gitlab
         )
         Rack::Response.new(e.message, 403).finish
       rescue Gitlab::Auth::MissingPersonalAccessTokenError
-        Rack::Response.new('', 401).finish
+        not_found_response
       end
 
       private
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 975e5335411..35b30b7460d 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -64271,6 +64271,9 @@ msgid_plural "Your free group is now limited to %d members"
 msgstr[0] ""
 msgstr[1] ""
 
+msgid "Your instance has %{remaining_user_count} users remaining of the %{total_user_count} in your subscription. When there are no more seats, users cannot be invited or added to the instance."
+msgstr ""
+
 msgid "Your instance has %{remaining_user_count} users remaining of the %{total_user_count} included in your subscription. You can add more users than the number included in your license, and we will include the overage in your next bill."
 msgstr ""
 
diff --git a/package.json b/package.json
index b626fa3dd66..2245a47da22 100644
--- a/package.json
+++ b/package.json
@@ -80,7 +80,7 @@
     "@mattiasbuelens/web-streams-adapter": "^0.1.0",
     "@rails/actioncable": "7.0.8-4",
     "@rails/ujs": "7.0.8-4",
-    "@sentry/browser": "8.35.0",
+    "@sentry/browser": "8.36.0",
     "@snowplow/browser-plugin-client-hints": "^3.24.2",
     "@snowplow/browser-plugin-form-tracking": "^3.24.2",
     "@snowplow/browser-plugin-ga-cookies": "^3.24.2",
diff --git a/spec/factories/integrations/instance/integrations.rb b/spec/factories/integrations/instance/integrations.rb
new file mode 100644
index 00000000000..28bff0b89ac
--- /dev/null
+++ b/spec/factories/integrations/instance/integrations.rb
@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+FactoryBot.define do
+  factory :instance_integration, class: 'Integrations::Instance::Integration' do
+    type { 'Integrations::Instance::Integration' }
+  end
+end
diff --git a/spec/factories/integrations/instance_integrations.rb b/spec/factories/integrations/instance_integrations.rb
deleted file mode 100644
index d70b7ecf889..00000000000
--- a/spec/factories/integrations/instance_integrations.rb
+++ /dev/null
@@ -1,7 +0,0 @@
-# frozen_string_literal: true
-
-FactoryBot.define do
-  factory :instance_integration, class: 'Integrations::InstanceIntegration' do
-    type { 'Integrations::InstanceIntegration' }
-  end
-end
diff --git a/spec/finders/autocomplete/users_finder_spec.rb b/spec/finders/autocomplete/users_finder_spec.rb
index e4337e52306..64ca17ba278 100644
--- a/spec/finders/autocomplete/users_finder_spec.rb
+++ b/spec/finders/autocomplete/users_finder_spec.rb
@@ -9,6 +9,8 @@ RSpec.describe Autocomplete::UsersFinder do
   describe '#execute' do
     let_it_be(:user1) { create(:user, name: 'zzzzzname', username: 'johndoe') }
     let_it_be(:blocked_user) { create(:user, :blocked, username: 'blocked_user') }
+    let_it_be(:import_user) { create(:user, :import_user, username: 'import_user') }
+    let_it_be(:placeholder_user) { create(:user, :placeholder, username: 'placeholder_user') }
     let_it_be(:banned_user) { create(:user, :banned, username: 'banned_user') }
     let_it_be(:external_user) { create(:user, :external) }
     let_it_be(:omniauth_user) { create(:omniauth_user, provider: 'twitter', extern_uid: '123456') }
@@ -50,6 +52,18 @@ RSpec.describe Autocomplete::UsersFinder do
 
           it { is_expected.to match_array([project.first_owner]) }
         end
+
+        context 'and author is a placeholder user' do
+          let(:params) { { author_id: placeholder_user.id } }
+
+          it { is_expected.to match_array([project.first_owner]) }
+        end
+
+        context 'and author is a import_user' do
+          let(:params) { { author_id: import_user.id } }
+
+          it { is_expected.to match_array([project.first_owner]) }
+        end
       end
 
       context 'searching with less than 3 characters' do
diff --git a/spec/frontend/notes/store/legacy_notes/mutation_spec.js b/spec/frontend/notes/store/legacy_notes/mutation_spec.js
index 8c35b8e12b1..943b62dff88 100644
--- a/spec/frontend/notes/store/legacy_notes/mutation_spec.js
+++ b/spec/frontend/notes/store/legacy_notes/mutation_spec.js
@@ -1,5 +1,7 @@
-import { DISCUSSION_NOTE, ASC, DESC } from '~/notes/constants';
-import mutations from '~/notes/stores/mutations';
+import { createPinia, setActivePinia } from 'pinia';
+import { DISCUSSION_NOTE, DESC } from '~/notes/constants';
+import * as types from '~/notes/stores/mutation_types';
+import { useNotes } from '~/notes/store/legacy_notes';
 import {
   note,
   discussionMock,
@@ -16,17 +18,18 @@ const UNRESOLVED_NOTE = { resolvable: true, resolved: false };
 const SYSTEM_NOTE = { resolvable: false, resolved: false };
 const WEIRD_NOTE = { resolvable: false, resolved: true };
 
-// eslint-disable-next-line jest/no-disabled-tests
-describe.skip('Notes Store mutations', () => {
+describe('Notes Store mutations', () => {
+  let store;
+
+  beforeEach(() => {
+    setActivePinia(createPinia());
+    store = useNotes();
+  });
+
   describe('ADD_NEW_NOTE', () => {
-    let state;
     let noteData;
 
     beforeEach(() => {
-      state = {
-        discussions: [],
-        discussionSortOrder: ASC,
-      };
       noteData = {
         expanded: true,
         id: note.discussion_id,
@@ -37,63 +40,60 @@ describe.skip('Notes Store mutations', () => {
     });
 
     it('should add a new note to an array of notes', () => {
-      mutations.ADD_NEW_NOTE(state, note);
-      expect(state).toEqual(expect.objectContaining({ discussions: [noteData] }));
-
-      expect(state.discussions.length).toBe(1);
+      store[types.ADD_NEW_NOTE](note);
+      expect(store.discussions).toStrictEqual([noteData]);
+      expect(store.discussions.length).toBe(1);
     });
 
     it('should not add the same note to the notes array', () => {
-      mutations.ADD_NEW_NOTE(state, note);
-      mutations.ADD_NEW_NOTE(state, note);
+      store[types.ADD_NEW_NOTE](note);
+      store[types.ADD_NEW_NOTE](note);
 
-      expect(state.discussions.length).toBe(1);
+      expect(store.discussions.length).toBe(1);
     });
 
     it('trims first character from truncated_diff_lines', () => {
-      mutations.ADD_NEW_NOTE(state, {
+      store[types.ADD_NEW_NOTE]({
         discussion: {
           notes: [{ ...note }],
           truncated_diff_lines: [{ text: '+a', rich_text: '+<span>a</span>' }],
         },
       });
 
-      expect(state.discussions[0].truncated_diff_lines).toEqual([{ rich_text: '<span>a</span>' }]);
+      expect(store.discussions[0].truncated_diff_lines).toEqual([{ rich_text: '<span>a</span>' }]);
     });
   });
 
   describe('ADD_NEW_REPLY_TO_DISCUSSION', () => {
     const newReply = { ...note, discussion_id: discussionMock.id };
 
-    let state;
-
     beforeEach(() => {
-      state = { discussions: [{ ...discussionMock }] };
+      store.discussions = [{ ...discussionMock }];
     });
 
     it('should add a reply to a specific discussion', () => {
-      mutations.ADD_NEW_REPLY_TO_DISCUSSION(state, newReply);
+      store[types.ADD_NEW_REPLY_TO_DISCUSSION](newReply);
 
-      expect(state.discussions[0].notes.length).toEqual(4);
+      expect(store.discussions[0].notes.length).toEqual(4);
     });
 
     it('should not add the note if it already exists in the discussion', () => {
-      mutations.ADD_NEW_REPLY_TO_DISCUSSION(state, newReply);
-      mutations.ADD_NEW_REPLY_TO_DISCUSSION(state, newReply);
+      store[types.ADD_NEW_REPLY_TO_DISCUSSION](newReply);
+      store[types.ADD_NEW_REPLY_TO_DISCUSSION](newReply);
 
-      expect(state.discussions[0].notes.length).toEqual(4);
+      expect(store.discussions[0].notes.length).toEqual(4);
     });
   });
 
   describe('DELETE_NOTE', () => {
     it('should delete a note', () => {
-      const state = { discussions: [discussionMock] };
+      store.$patch({ discussions: [discussionMock] });
       const toDelete = discussionMock.notes[0];
       const lengthBefore = discussionMock.notes.length;
 
-      mutations.DELETE_NOTE(state, toDelete);
+      store[types.DELETE_NOTE](toDelete);
 
-      expect(state.discussions[0].notes.length).toEqual(lengthBefore - 1);
+      expect(store.discussions[0].notes.length).toEqual(lengthBefore - 1);
     });
   });
 
@@ -101,13 +101,13 @@ describe.skip('Notes Store mutations', () => {
     it('should expand a collapsed discussion', () => {
       const discussion = { ...discussionMock, expanded: false };
 
-      const state = {
+      store.$patch({
         discussions: [discussion],
-      };
+      });
 
-      mutations.EXPAND_DISCUSSION(state, { discussionId: discussion.id });
+      store[types.EXPAND_DISCUSSION]({ discussionId: discussion.id });
 
-      expect(state.discussions[0].expanded).toEqual(true);
+      expect(store.discussions[0].expanded).toEqual(true);
     });
   });
 
@@ -115,24 +115,24 @@ describe.skip('Notes Store mutations', () => {
     it('should collapse an expanded discussion', () => {
       const discussion = { ...discussionMock, expanded: true };
 
-      const state = {
+      store.$patch({
         discussions: [discussion],
-      };
+      });
 
-      mutations.COLLAPSE_DISCUSSION(state, { discussionId: discussion.id });
+      store[types.COLLAPSE_DISCUSSION]({ discussionId: discussion.id });
 
-      expect(state.discussions[0].expanded).toEqual(false);
+      expect(store.discussions[0].expanded).toEqual(false);
     });
   });
 
   describe('REMOVE_PLACEHOLDER_NOTES', () => {
     it('should remove all placeholder individual notes', () => {
       const placeholderNote = { ...individualNote, isPlaceholderNote: true };
-      const state = { discussions: [placeholderNote] };
+      store.$patch({ discussions: [placeholderNote] });
 
-      mutations.REMOVE_PLACEHOLDER_NOTES(state);
+      store[types.REMOVE_PLACEHOLDER_NOTES]();
 
-      expect(state.discussions).toEqual([]);
+      expect(store.discussions).toEqual([]);
     });
 
     it.each`
@@ -145,69 +145,69 @@ describe.skip('Notes Store mutations', () => {
       const placeholderNote = { ...individualNote, isPlaceholderNote: true };
       discussion.notes.push(placeholderNote);
 
-      const state = {
+      store.$patch({
         discussions: [discussion],
-      };
+      });
 
-      mutations.REMOVE_PLACEHOLDER_NOTES(state);
+      store[types.REMOVE_PLACEHOLDER_NOTES]();
 
-      expect(state.discussions[0].notes.length).toEqual(lengthBefore);
+      expect(store.discussions[0].notes.length).toEqual(lengthBefore);
     });
   });
 
   describe('SET_NOTES_DATA', () => {
     it('should set an object with notesData', () => {
-      const state = {
+      store.$patch({
         notesData: {},
-      };
+      });
 
-      mutations.SET_NOTES_DATA(state, notesDataMock);
+      store[types.SET_NOTES_DATA](notesDataMock);
 
-      expect(state.notesData).toEqual(notesDataMock);
+      expect(store.notesData).toEqual(notesDataMock);
     });
   });
 
   describe('SET_NOTEABLE_DATA', () => {
     it('should set the issue data', () => {
-      const state = {
+      store.$patch({
         noteableData: {},
-      };
+      });
 
-      mutations.SET_NOTEABLE_DATA(state, noteableDataMock);
+      store[types.SET_NOTEABLE_DATA](noteableDataMock);
 
-      expect(state.noteableData).toEqual(noteableDataMock);
+      expect(store.noteableData).toEqual(noteableDataMock);
     });
   });
 
   describe('SET_USER_DATA', () => {
     it('should set the user data', () => {
-      const state = {
+      store.$patch({
         userData: {},
-      };
+      });
 
-      mutations.SET_USER_DATA(state, userDataMock);
+      store[types.SET_USER_DATA](userDataMock);
 
-      expect(state.userData).toEqual(userDataMock);
+      expect(store.userData).toEqual(userDataMock);
     });
   });
 
   describe('CLEAR_DISCUSSIONS', () => {
     it('should set discussions to an empty array', () => {
-      const state = {
+      store.$patch({
         discussions: [discussionMock],
-      };
+      });
 
-      mutations.CLEAR_DISCUSSIONS(state);
+      store[types.CLEAR_DISCUSSIONS]();
 
-      expect(state.discussions).toEqual([]);
+      expect(store.discussions).toEqual([]);
     });
   });
 
   describe('ADD_OR_UPDATE_DISCUSSIONS', () => {
     it('should set the initial notes received', () => {
-      const state = {
+      store.$patch({
         discussions: [],
-      };
+      });
       const legacyNote = {
         id: 2,
         individual_note: true,
@@ -223,20 +223,20 @@ describe.skip('Notes Store mutations', () => {
         ],
       };
 
-      mutations.ADD_OR_UPDATE_DISCUSSIONS(state, [note, legacyNote]);
+      store[types.ADD_OR_UPDATE_DISCUSSIONS]([note, legacyNote]);
 
-      expect(state.discussions[0].id).toEqual(note.id);
-      expect(state.discussions[1].notes[0].note).toBe(legacyNote.notes[0].note);
-      expect(state.discussions[2].notes[0].note).toBe(legacyNote.notes[1].note);
-      expect(state.discussions.length).toEqual(3);
+      expect(store.discussions[0].id).toEqual(note.id);
+      expect(store.discussions[1].notes[0].note).toBe(legacyNote.notes[0].note);
+      expect(store.discussions[2].notes[0].note).toBe(legacyNote.notes[1].note);
+      expect(store.discussions.length).toEqual(3);
     });
 
     it('adds truncated_diff_lines if discussion is a diffFile', () => {
-      const state = {
+      store.$patch({
         discussions: [],
-      };
+      });
 
-      mutations.ADD_OR_UPDATE_DISCUSSIONS(state, [
+      store[types.ADD_OR_UPDATE_DISCUSSIONS]([
         {
           ...note,
           diff_file: {
@@ -246,15 +246,15 @@ describe.skip('Notes Store mutations', () => {
         },
       ]);
 
-      expect(state.discussions[0].truncated_diff_lines).toEqual([{ rich_text: '<span>a</span>' }]);
+      expect(store.discussions[0].truncated_diff_lines).toEqual([{ rich_text: '<span>a</span>' }]);
     });
 
     it('adds empty truncated_diff_lines when not in discussion', () => {
-      const state = {
+      store.$patch({
         discussions: [],
-      };
+      });
 
-      mutations.ADD_OR_UPDATE_DISCUSSIONS(state, [
+      store[types.ADD_OR_UPDATE_DISCUSSIONS]([
         {
           ...note,
           diff_file: {
@@ -263,83 +263,83 @@ describe.skip('Notes Store mutations', () => {
         },
       ]);
 
-      expect(state.discussions[0].truncated_diff_lines).toEqual([]);
+      expect(store.discussions[0].truncated_diff_lines).toEqual([]);
     });
   });
 
   describe('SET_LAST_FETCHED_AT', () => {
     it('should set timestamp', () => {
-      const state = {
+      store.$patch({
         lastFetchedAt: [],
-      };
+      });
 
-      mutations.SET_LAST_FETCHED_AT(state, 'timestamp');
+      store[types.SET_LAST_FETCHED_AT]('timestamp');
 
-      expect(state.lastFetchedAt).toEqual('timestamp');
+      expect(store.lastFetchedAt).toEqual('timestamp');
     });
   });
 
   describe('SET_TARGET_NOTE_HASH', () => {
     it('should set the note hash', () => {
-      const state = {
+      store.$patch({
         targetNoteHash: [],
-      };
+      });
 
-      mutations.SET_TARGET_NOTE_HASH(state, 'hash');
+      store[types.SET_TARGET_NOTE_HASH]('hash');
 
-      expect(state.targetNoteHash).toEqual('hash');
+      expect(store.targetNoteHash).toEqual('hash');
     });
   });
 
   describe('SHOW_PLACEHOLDER_NOTE', () => {
     it('should set a placeholder note', () => {
-      const state = {
+      store.$patch({
         discussions: [],
-      };
-      mutations.SHOW_PLACEHOLDER_NOTE(state, note);
+      });
+      store[types.SHOW_PLACEHOLDER_NOTE](note);
 
-      expect(state.discussions[0].isPlaceholderNote).toEqual(true);
+      expect(store.discussions[0].isPlaceholderNote).toEqual(true);
     });
   });
 
   describe('TOGGLE_AWARD', () => {
     it('should add award if user has not reacted yet', () => {
-      const state = {
+      store.$patch({
         discussions: [note],
         userData: userDataMock,
-      };
+      });
 
       const data = {
         note,
         awardName: 'cartwheel',
       };
 
-      mutations.TOGGLE_AWARD(state, data);
-      const lastIndex = state.discussions[0].award_emoji.length - 1;
+      store[types.TOGGLE_AWARD](data);
+      const lastIndex = store.discussions[0].award_emoji.length - 1;
 
-      expect(state.discussions[0].award_emoji[lastIndex]).toEqual({
+      expect(store.discussions[0].award_emoji[lastIndex]).toEqual({
         name: 'cartwheel',
         user: { id: userDataMock.id, name: userDataMock.name, username: userDataMock.username },
       });
     });
 
     it('should remove award if user already reacted', () => {
-      const state = {
+      store.$patch({
         discussions: [note],
         userData: {
           id: 1,
           name: 'Administrator',
           username: 'root',
         },
-      };
+      });
 
       const data = {
         note,
         awardName: 'bath_tone3',
       };
-      mutations.TOGGLE_AWARD(state, data);
+      store[types.TOGGLE_AWARD](data);
 
-      expect(state.discussions[0].award_emoji.length).toEqual(2);
+      expect(store.discussions[0].award_emoji.length).toEqual(2);
     });
   });
 
@@ -347,51 +347,47 @@ describe.skip('Notes Store mutations', () => {
     it('should open a closed discussion', () => {
       const discussion = { ...discussionMock, expanded: false };
 
-      const state = {
+      store.$patch({
         discussions: [discussion],
-      };
+      });
 
-      mutations.TOGGLE_DISCUSSION(state, { discussionId: discussion.id });
+      store[types.TOGGLE_DISCUSSION]({ discussionId: discussion.id });
 
-      expect(state.discussions[0].expanded).toEqual(true);
+      expect(store.discussions[0].expanded).toEqual(true);
     });
 
     it('should close a opened discussion', () => {
-      const state = {
+      store.$patch({
         discussions: [discussionMock],
-      };
+      });
 
-      mutations.TOGGLE_DISCUSSION(state, { discussionId: discussionMock.id });
+      store[types.TOGGLE_DISCUSSION]({ discussionId: discussionMock.id });
 
-      expect(state.discussions[0].expanded).toEqual(false);
+      expect(store.discussions[0].expanded).toEqual(false);
     });
 
     it('forces a discussions expanded state', () => {
-      const state = {
+      store.$patch({
         discussions: [{ ...discussionMock, expanded: false }],
-      };
+      });
 
-      mutations.TOGGLE_DISCUSSION(state, { discussionId: discussionMock.id, forceExpanded: true });
+      store[types.TOGGLE_DISCUSSION]({ discussionId: discussionMock.id, forceExpanded: true });
 
-      expect(state.discussions[0].expanded).toEqual(true);
+      expect(store.discussions[0].expanded).toEqual(true);
     });
   });
 
   describe('SET_EXPAND_DISCUSSIONS', () => {
     it('should succeed when discussions are null', () => {
-      const state = {};
-
-      mutations.SET_EXPAND_DISCUSSIONS(state, { discussionIds: null, expanded: true });
-
-      expect(state).toEqual({});
+      expect(() =>
+        store[types.SET_EXPAND_DISCUSSIONS]({ discussionIds: null, expanded: true }),
+      ).not.toThrow();
     });
 
     it('should succeed when discussions are empty', () => {
-      const state = {};
+      store[types.SET_EXPAND_DISCUSSIONS]({ discussionIds: [], expanded: true });
 
-      mutations.SET_EXPAND_DISCUSSIONS(state, { discussionIds: [], expanded: true });
-
-      expect(state).toEqual({});
+      expect(store.discussions).toEqual([]);
     });
 
     it('should open all closed discussions', () => {
@@ -399,11 +395,11 @@ describe.skip('Notes Store mutations', () => {
       const discussion2 = { ...discussionMock, id: 1, expanded: true };
       const discussionIds = [discussion1.id, discussion2.id];
 
-      const state = { discussions: [discussion1, discussion2] };
+      store.$patch({ discussions: [discussion1, discussion2] });
 
-      mutations.SET_EXPAND_DISCUSSIONS(state, { discussionIds, expanded: true });
+      store[types.SET_EXPAND_DISCUSSIONS]({ discussionIds, expanded: true });
 
-      state.discussions.forEach((discussion) => {
+      store.discussions.forEach((discussion) => {
         expect(discussion.expanded).toEqual(true);
       });
     });
@@ -413,11 +409,11 @@ describe.skip('Notes Store mutations', () => {
       const discussion2 = { ...discussionMock, id: 1, expanded: true };
       const discussionIds = [discussion1.id, discussion2.id];
 
-      const state = { discussions: [discussion1, discussion2] };
+      store.$patch({ discussions: [discussion1, discussion2] });
 
-      mutations.SET_EXPAND_DISCUSSIONS(state, { discussionIds, expanded: false });
+      store[types.SET_EXPAND_DISCUSSIONS]({ discussionIds, expanded: false });
 
-      state.discussions.forEach((discussion) => {
+      store.discussions.forEach((discussion) => {
         expect(discussion.expanded).toEqual(false);
       });
     });
@@ -425,44 +421,42 @@ describe.skip('Notes Store mutations', () => {
 
   describe('SET_RESOLVING_DISCUSSION', () => {
     it('should set resolving discussion state', () => {
-      const state = {};
+      store[types.SET_RESOLVING_DISCUSSION](true);
 
-      mutations.SET_RESOLVING_DISCUSSION(state, true);
-
-      expect(state.isResolvingDiscussion).toEqual(true);
+      expect(store.isResolvingDiscussion).toEqual(true);
     });
   });
 
   describe('UPDATE_NOTE', () => {
     it('should update a note', () => {
-      const state = {
+      store.$patch({
         discussions: [individualNote],
-      };
+      });
 
       const updated = { ...individualNote.notes[0], note: 'Foo' };
 
-      mutations.UPDATE_NOTE(state, updated);
+      store[types.UPDATE_NOTE](updated);
 
-      expect(state.discussions[0].notes[0].note).toEqual('Foo');
+      expect(store.discussions[0].notes[0].note).toEqual('Foo');
     });
 
     it('does not update existing note if it matches', () => {
-      const state = {
-        discussions: [{ ...individualNote, individual_note: false }],
-      };
-      jest.spyOn(state.discussions[0].notes, 'splice');
+      const originalNote = { ...individualNote, individual_note: false };
+      store.$patch({
+        discussions: [originalNote],
+      });
 
       const updated = individualNote.notes[0];
 
-      mutations.UPDATE_NOTE(state, updated);
+      store[types.UPDATE_NOTE](updated);
 
-      expect(state.discussions[0].notes.splice).not.toHaveBeenCalled();
+      expect(store.discussions[0]).toStrictEqual(originalNote);
     });
 
     it('transforms an individual note to discussion', () => {
-      const state = {
+      store.$patch({
         discussions: [individualNote],
-      };
+      });
 
       const transformedNote = {
         ...individualNote.notes[0],
@@ -470,14 +464,14 @@ describe.skip('Notes Store mutations', () => {
         resolvable: true,
       };
 
-      mutations.UPDATE_NOTE(state, transformedNote);
+      store[types.UPDATE_NOTE](transformedNote);
 
-      expect(state.discussions[0].individual_note).toEqual(false);
-      expect(state.discussions[0].resolvable).toEqual(true);
+      expect(store.discussions[0].individual_note).toEqual(false);
+      expect(store.discussions[0].resolvable).toEqual(true);
     });
 
     it('copies resolve state to discussion', () => {
-      const state = { discussions: [{ ...discussionMock }] };
+      store.$patch({ discussions: [{ ...discussionMock }] });
 
       const resolvedNote = {
         ...discussionMock.notes[0],
@@ -488,18 +482,18 @@ describe.skip('Notes Store mutations', () => {
         resolved_by_push: false,
       };
 
-      mutations.UPDATE_NOTE(state, resolvedNote);
+      store[types.UPDATE_NOTE](resolvedNote);
 
-      expect(state.discussions[0].resolved).toEqual(resolvedNote.resolved);
-      expect(state.discussions[0].resolved_at).toEqual(resolvedNote.resolved_at);
-      expect(state.discussions[0].resolved_by).toEqual(resolvedNote.resolved_by);
-      expect(state.discussions[0].resolved_by_push).toEqual(resolvedNote.resolved_by_push);
+      expect(store.discussions[0].resolved).toEqual(resolvedNote.resolved);
+      expect(store.discussions[0].resolved_at).toEqual(resolvedNote.resolved_at);
+      expect(store.discussions[0].resolved_by).toEqual(resolvedNote.resolved_by);
+      expect(store.discussions[0].resolved_by_push).toEqual(resolvedNote.resolved_by_push);
     });
   });
 
   describe('CLOSE_ISSUE', () => {
     it('should set issue as closed', () => {
-      const state = {
+      store.$patch({
         discussions: [],
         targetNoteHash: null,
         lastFetchedAt: null,
@@ -507,17 +501,17 @@ describe.skip('Notes Store mutations', () => {
         notesData: {},
         userData: {},
         noteableData: {},
-      };
+      });
 
-      mutations.CLOSE_ISSUE(state);
+      store[types.CLOSE_ISSUE]();
 
-      expect(state.noteableData.state).toEqual('closed');
+      expect(store.noteableData.state).toEqual('closed');
     });
   });
 
   describe('REOPEN_ISSUE', () => {
     it('should set issue as closed', () => {
-      const state = {
+      store.$patch({
         discussions: [],
         targetNoteHash: null,
         lastFetchedAt: null,
@@ -525,17 +519,17 @@ describe.skip('Notes Store mutations', () => {
         notesData: {},
         userData: {},
         noteableData: {},
-      };
+      });
 
-      mutations.REOPEN_ISSUE(state);
+      store[types.REOPEN_ISSUE]();
 
-      expect(state.noteableData.state).toEqual('reopened');
+      expect(store.noteableData.state).toEqual('reopened');
     });
   });
 
   describe('TOGGLE_STATE_BUTTON_LOADING', () => {
     it('should set isToggleStateButtonLoading as true', () => {
-      const state = {
+      store.$patch({
         discussions: [],
         targetNoteHash: null,
         lastFetchedAt: null,
@@ -543,15 +537,15 @@ describe.skip('Notes Store mutations', () => {
         notesData: {},
         userData: {},
         noteableData: {},
-      };
+      });
 
-      mutations.TOGGLE_STATE_BUTTON_LOADING(state, true);
+      store[types.TOGGLE_STATE_BUTTON_LOADING](true);
 
-      expect(state.isToggleStateButtonLoading).toEqual(true);
+      expect(store.isToggleStateButtonLoading).toEqual(true);
     });
 
     it('should set isToggleStateButtonLoading as false', () => {
-      const state = {
+      store.$patch({
         discussions: [],
         targetNoteHash: null,
         lastFetchedAt: null,
@@ -559,110 +553,104 @@ describe.skip('Notes Store mutations', () => {
         notesData: {},
         userData: {},
         noteableData: {},
-      };
+      });
 
-      mutations.TOGGLE_STATE_BUTTON_LOADING(state, false);
+      store[types.TOGGLE_STATE_BUTTON_LOADING](false);
 
-      expect(state.isToggleStateButtonLoading).toEqual(false);
+      expect(store.isToggleStateButtonLoading).toEqual(false);
     });
   });
 
   describe('SET_NOTES_FETCHED_STATE', () => {
     it('should set the given state', () => {
-      const state = {
+      store.$patch({
         isNotesFetched: false,
-      };
+      });
 
-      mutations.SET_NOTES_FETCHED_STATE(state, true);
+      store[types.SET_NOTES_FETCHED_STATE](true);
 
-      expect(state.isNotesFetched).toEqual(true);
+      expect(store.isNotesFetched).toEqual(true);
     });
   });
 
   describe('SET_DISCUSSION_DIFF_LINES', () => {
     it('sets truncated_diff_lines', () => {
-      const state = {
+      store.$patch({
         discussions: [
           {
             id: 1,
           },
         ],
-      };
+      });
 
-      mutations.SET_DISCUSSION_DIFF_LINES(state, {
+      store[types.SET_DISCUSSION_DIFF_LINES]({
         discussionId: 1,
         diffLines: [{ text: '+a', rich_text: '+<span>a</span>' }],
       });
 
-      expect(state.discussions[0].truncated_diff_lines).toEqual([{ rich_text: '<span>a</span>' }]);
+      expect(store.discussions[0].truncated_diff_lines).toEqual([{ rich_text: '<span>a</span>' }]);
     });
 
     it('keeps reactivity of discussion', () => {
-      const state = {
+      store.$patch({
         discussions: [
           {
             id: 1,
             expanded: false,
           },
         ],
-      };
+      });
 
-      const discussion = state.discussions[0];
+      const discussion = store.discussions[0];
 
-      mutations.SET_DISCUSSION_DIFF_LINES(state, {
+      store[types.SET_DISCUSSION_DIFF_LINES]({
         discussionId: 1,
         diffLines: [{ rich_text: '<span>a</span>' }],
       });
 
       discussion.expanded = true;
 
-      expect(state.discussions[0].expanded).toBe(true);
+      expect(store.discussions[0].expanded).toBe(true);
     });
   });
 
   describe('SET_SELECTED_COMMENT_POSITION', () => {
     it('should set comment position state', () => {
-      const state = {};
+      store[types.SET_SELECTED_COMMENT_POSITION]({});
 
-      mutations.SET_SELECTED_COMMENT_POSITION(state, {});
-
-      expect(state.selectedCommentPosition).toEqual({});
+      expect(store.selectedCommentPosition).toEqual({});
     });
   });
 
   describe('SET_SELECTED_COMMENT_POSITION_HOVER', () => {
     it('should set comment hover position state', () => {
-      const state = {};
+      store[types.SET_SELECTED_COMMENT_POSITION_HOVER]({});
 
-      mutations.SET_SELECTED_COMMENT_POSITION_HOVER(state, {});
-
-      expect(state.selectedCommentPositionHover).toEqual({});
+      expect(store.selectedCommentPositionHover).toEqual({});
     });
   });
 
   describe('DISABLE_COMMENTS', () => {
     it('should set comments disabled state', () => {
-      const state = {};
+      store[types.DISABLE_COMMENTS](true);
 
-      mutations.DISABLE_COMMENTS(state, true);
-
-      expect(state.commentsDisabled).toEqual(true);
+      expect(store.commentsDisabled).toEqual(true);
     });
   });
 
   describe('UPDATE_RESOLVABLE_DISCUSSIONS_COUNTS', () => {
     it('with unresolvable discussions, updates state', () => {
-      const state = {
+      store.$patch({
         discussions: [
           { individual_note: false, resolvable: true, notes: [UNRESOLVED_NOTE] },
           { individual_note: true, resolvable: true, notes: [UNRESOLVED_NOTE] },
           { individual_note: false, resolvable: false, notes: [UNRESOLVED_NOTE] },
         ],
-      };
+      });
 
-      mutations.UPDATE_RESOLVABLE_DISCUSSIONS_COUNTS(state);
+      store[types.UPDATE_RESOLVABLE_DISCUSSIONS_COUNTS]();
 
-      expect(state).toEqual(
+      expect(store).toEqual(
         expect.objectContaining({
           resolvableDiscussionsCount: 1,
           unresolvedDiscussionsCount: 1,
@@ -671,7 +659,7 @@ describe.skip('Notes Store mutations', () => {
     });
 
     it('with resolvable discussions, updates state', () => {
-      const state = {
+      store.$patch({
         discussions: [
           {
             individual_note: false,
@@ -694,11 +682,11 @@ describe.skip('Notes Store mutations', () => {
             notes: [UNRESOLVED_NOTE],
           },
         ],
-      };
+      });
 
-      mutations.UPDATE_RESOLVABLE_DISCUSSIONS_COUNTS(state);
+      store[types.UPDATE_RESOLVABLE_DISCUSSIONS_COUNTS]();
 
-      expect(state).toEqual(
+      expect(store).toEqual(
         expect.objectContaining({
           resolvableDiscussionsCount: 4,
           unresolvedDiscussionsCount: 2,
@@ -709,77 +697,70 @@ describe.skip('Notes Store mutations', () => {
 
   describe('CONVERT_TO_DISCUSSION', () => {
     let discussion;
-    let state;
 
     beforeEach(() => {
       discussion = {
         id: 42,
         individual_note: true,
       };
-      state = { convertedDisscussionIds: [] };
     });
 
     it('adds a discussion to convertedDisscussionIds', () => {
-      mutations.CONVERT_TO_DISCUSSION(state, discussion.id);
+      store[types.CONVERT_TO_DISCUSSION](discussion.id);
 
-      expect(state.convertedDisscussionIds).toContain(discussion.id);
+      expect(store.convertedDisscussionIds).toContain(discussion.id);
     });
   });
 
   describe('REMOVE_CONVERTED_DISCUSSION', () => {
     let discussion;
-    let state;
 
     beforeEach(() => {
       discussion = {
         id: 42,
         individual_note: true,
       };
-      state = { convertedDisscussionIds: [41, 42] };
+      store.$patch({ convertedDisscussionIds: [41, 42] });
     });
 
     it('removes a discussion from convertedDisscussionIds', () => {
-      mutations.REMOVE_CONVERTED_DISCUSSION(state, discussion.id);
+      store[types.REMOVE_CONVERTED_DISCUSSION](discussion.id);
 
-      expect(state.convertedDisscussionIds).not.toContain(discussion.id);
+      expect(store.convertedDisscussionIds).not.toContain(discussion.id);
     });
   });
 
   describe('RECEIVE_DESCRIPTION_VERSION', () => {
     const descriptionVersion = notesWithDescriptionChanges[0].notes[0].note;
     const versionId = notesWithDescriptionChanges[0].notes[0].id;
-    const state = {};
 
     it('adds a descriptionVersion', () => {
-      mutations.RECEIVE_DESCRIPTION_VERSION(state, { descriptionVersion, versionId });
-      expect(state.descriptionVersions[versionId]).toBe(descriptionVersion);
+      store[types.RECEIVE_DESCRIPTION_VERSION]({ descriptionVersion, versionId });
+      expect(store.descriptionVersions[versionId]).toBe(descriptionVersion);
     });
   });
 
   describe('RECEIVE_DELETE_DESCRIPTION_VERSION', () => {
     const descriptionVersion = notesWithDescriptionChanges[0].notes[0].note;
     const versionId = notesWithDescriptionChanges[0].notes[0].id;
-    const state = { descriptionVersions: { [versionId]: descriptionVersion } };
     const deleted = 'Deleted';
 
+    beforeEach(() => {
+      store.$patch({ descriptionVersions: { [versionId]: descriptionVersion } });
+    });
+
     it('updates descriptionVersion to "Deleted"', () => {
-      mutations.RECEIVE_DELETE_DESCRIPTION_VERSION(state, { [versionId]: deleted });
-      expect(state.descriptionVersions[versionId]).toBe(deleted);
+      store[types.RECEIVE_DELETE_DESCRIPTION_VERSION]({ [versionId]: deleted });
+      expect(store.descriptionVersions[versionId]).toBe(deleted);
     });
   });
 
   describe('SET_DISCUSSIONS_SORT', () => {
-    let state;
-
-    beforeEach(() => {
-      state = { discussionSortOrder: ASC };
-    });
-
     it('sets sort order', () => {
-      mutations.SET_DISCUSSIONS_SORT(state, { direction: DESC, persist: false });
+      store[types.SET_DISCUSSIONS_SORT]({ direction: DESC, persist: false });
 
-      expect(state.discussionSortOrder).toBe(DESC);
-      expect(state.persistSortOrder).toBe(false);
+      expect(store.discussionSortOrder).toBe(DESC);
+      expect(store.persistSortOrder).toBe(false);
     });
   });
 
@@ -798,7 +779,6 @@ describe.skip('Notes Store mutations', () => {
       }));
     };
 
-    let state;
     let batchedSuggestionInfo;
     let discussions;
     let suggestions;
@@ -807,14 +787,14 @@ describe.skip('Notes Store mutations', () => {
       [batchedSuggestionInfo] = batchSuggestionsInfoMock;
       suggestions = batchSuggestionsInfoMock.map(({ suggestionId }) => ({ id: suggestionId }));
       discussions = buildDiscussions(batchSuggestionsInfoMock);
-      state = {
+      store.$patch({
         batchSuggestionsInfo: [batchedSuggestionInfo],
         discussions,
-      };
+      });
     });
 
     it('sets is_applying_batch to a boolean value for all batched suggestions', () => {
-      mutations.SET_APPLYING_BATCH_STATE(state, true);
+      store[types.SET_APPLYING_BATCH_STATE](true);
 
       const updatedSuggestion = {
         ...suggestions[0],
@@ -823,7 +803,7 @@ describe.skip('Notes Store mutations', () => {
 
       const expectedSuggestions = [updatedSuggestion, suggestions[1]];
 
-      const actualSuggestions = state.discussions
+      const actualSuggestions = store.discussions
         .map((discussion) => discussion.notes.map((n) => n.suggestions))
         .flat(2);
 
@@ -832,12 +812,6 @@ describe.skip('Notes Store mutations', () => {
   });
 
   describe('ADD_SUGGESTION_TO_BATCH', () => {
-    let state;
-
-    beforeEach(() => {
-      state = { batchSuggestionsInfo: [] };
-    });
-
     it("adds a suggestion's info to a batch", () => {
       const suggestionInfo = {
         suggestionId: 'a123',
@@ -845,85 +819,78 @@ describe.skip('Notes Store mutations', () => {
         discussionId: 'c789',
       };
 
-      mutations.ADD_SUGGESTION_TO_BATCH(state, suggestionInfo);
+      store[types.ADD_SUGGESTION_TO_BATCH](suggestionInfo);
 
-      expect(state.batchSuggestionsInfo).toEqual([suggestionInfo]);
+      expect(store.batchSuggestionsInfo).toEqual([suggestionInfo]);
     });
   });
 
   describe('REMOVE_SUGGESTION_FROM_BATCH', () => {
-    let state;
     let suggestionInfo1;
     let suggestionInfo2;
 
     beforeEach(() => {
       [suggestionInfo1, suggestionInfo2] = batchSuggestionsInfoMock;
 
-      state = {
+      store.$patch({
         batchSuggestionsInfo: [suggestionInfo1, suggestionInfo2],
-      };
+      });
     });
 
     it("removes a suggestion's info from a batch", () => {
-      mutations.REMOVE_SUGGESTION_FROM_BATCH(state, suggestionInfo1.suggestionId);
+      store[types.REMOVE_SUGGESTION_FROM_BATCH](suggestionInfo1.suggestionId);
 
-      expect(state.batchSuggestionsInfo).toEqual([suggestionInfo2]);
+      expect(store.batchSuggestionsInfo).toEqual([suggestionInfo2]);
     });
   });
 
   describe('CLEAR_SUGGESTION_BATCH', () => {
-    let state;
-
     beforeEach(() => {
-      state = {
+      store.$patch({
         batchSuggestionsInfo: batchSuggestionsInfoMock,
-      };
+      });
     });
 
     it('removes info for all suggestions from a batch', () => {
-      mutations.CLEAR_SUGGESTION_BATCH(state);
+      store[types.CLEAR_SUGGESTION_BATCH]();
 
-      expect(state.batchSuggestionsInfo.length).toEqual(0);
+      expect(store.batchSuggestionsInfo.length).toEqual(0);
     });
   });
 
   describe('SET_ISSUE_CONFIDENTIAL', () => {
-    let state;
-
     beforeEach(() => {
-      state = { noteableData: { confidential: false } };
+      store.$patch({ noteableData: { confidential: false } });
     });
 
     it('should set issuable as confidential', () => {
-      mutations.SET_ISSUE_CONFIDENTIAL(state, true);
+      store[types.SET_ISSUE_CONFIDENTIAL](true);
 
-      expect(state.noteableData.confidential).toBe(true);
+      expect(store.noteableData.confidential).toBe(true);
     });
   });
 
   describe('SET_ISSUABLE_LOCK', () => {
-    let state;
-
     beforeEach(() => {
-      state = { noteableData: { discussion_locked: false } };
+      store.$patch({ noteableData: { discussion_locked: false } });
     });
 
     it('should set issuable as locked', () => {
-      mutations.SET_ISSUABLE_LOCK(state, true);
+      store[types.SET_ISSUABLE_LOCK](true);
 
-      expect(state.noteableData.discussion_locked).toBe(true);
+      expect(store.noteableData.discussion_locked).toBe(true);
     });
   });
 
   describe('UPDATE_ASSIGNEES', () => {
     it('should update assignees', () => {
-      const state = {
+      store.$patch({
         noteableData: noteableDataMock,
-      };
+      });
 
-      mutations.UPDATE_ASSIGNEES(state, [userDataMock.id]);
+      store[types.UPDATE_ASSIGNEES]([userDataMock.id]);
 
-      expect(state.noteableData.assignees).toEqual([userDataMock.id]);
+      expect(store.noteableData.assignees).toEqual([userDataMock.id]);
     });
   });
 
@@ -932,38 +899,38 @@ describe.skip('Notes Store mutations', () => {
       const discussion1 = { id: 1, position: { line_code: 'abc_1_1' } };
       const discussion2 = { id: 2, position: { line_code: 'abc_2_2' } };
       const discussion3 = { id: 3, position: { line_code: 'abc_3_3' } };
-      const state = {
+      store.$patch({
         discussions: [discussion1, discussion2, discussion3],
-      };
+      });
       const discussion1Position = { ...discussion1.position };
       const position = { ...discussion1Position, test: true };
 
-      mutations.UPDATE_DISCUSSION_POSITION(state, { discussionId: discussion1.id, position });
-      expect(state.discussions[0].position).toEqual(position);
+      store[types.UPDATE_DISCUSSION_POSITION]({ discussionId: discussion1.id, position });
+      expect(store.discussions[0].position).toEqual(position);
     });
   });
 
   describe('SET_DONE_FETCHING_BATCH_DISCUSSIONS', () => {
     it('should set doneFetchingBatchDiscussions', () => {
-      const state = {
+      store.$patch({
         doneFetchingBatchDiscussions: false,
-      };
+      });
 
-      mutations.SET_DONE_FETCHING_BATCH_DISCUSSIONS(state, true);
+      store[types.SET_DONE_FETCHING_BATCH_DISCUSSIONS](true);
 
-      expect(state.doneFetchingBatchDiscussions).toEqual(true);
+      expect(store.doneFetchingBatchDiscussions).toEqual(true);
     });
   });
 
   describe('SET_EXPAND_ALL_DISCUSSIONS', () => {
     it('should set expanded for every discussion', () => {
-      const state = {
+      store.$patch({
         discussions: [{ expanded: false }, { expanded: false }],
-      };
+      });
 
-      mutations.SET_EXPAND_ALL_DISCUSSIONS(state, true);
+      store[types.SET_EXPAND_ALL_DISCUSSIONS](true);
 
-      expect(state.discussions).toStrictEqual([{ expanded: true }, { expanded: true }]);
+      expect(store.discussions).toStrictEqual([{ expanded: true }, { expanded: true }]);
     });
   });
 });
diff --git a/spec/helpers/search_helper_spec.rb b/spec/helpers/search_helper_spec.rb
index 270cb7d09b8..30c68b65da8 100644
--- a/spec/helpers/search_helper_spec.rb
+++ b/spec/helpers/search_helper_spec.rb
@@ -536,6 +536,71 @@ RSpec.describe SearchHelper, feature_category: :global_search do
     end
   end
 
+  describe 'groups_autocomplete' do
+    let_it_be(:user) { create(:user) }
+    let_it_be(:group_1) { create(:group, name: 'test 1') }
+    let_it_be(:group_2) { create(:group, name: 'test 2') }
+    let(:search_term) { 'test' }
+
+    before do
+      allow(self).to receive(:current_user).and_return(user)
+    end
+
+    context 'when the user does not have access to groups' do
+      it 'does not return any results' do
+        expect(groups_autocomplete(search_term)).to eq([])
+      end
+    end
+
+    context 'when the user has access to one group' do
+      before do
+        group_2.add_developer(user)
+      end
+
+      it 'returns the group' do
+        expect(groups_autocomplete(search_term).pluck(:id)).to eq([group_2.id])
+      end
+
+      context 'when the search term is Gitlab::Search::Params::MIN_TERM_LENGTH characters long' do
+        let(:search_term) { 'te' }
+
+        it 'returns the group' do
+          expect(groups_autocomplete(search_term).pluck(:id)).to eq([group_2.id])
+        end
+      end
+    end
+
+    context 'with feature flag autocomplete_group_search_optimization disabled' do
+      before do
+        stub_feature_flags(autocomplete_group_search_optimization: false)
+      end
+
+      context 'when the user does not have access to groups' do
+        it 'does not return any results' do
+          expect(groups_autocomplete(search_term)).to eq([])
+        end
+      end
+
+      context 'when the user has access to one group' do
+        before do
+          group_2.add_developer(user)
+        end
+
+        it 'returns the group' do
+          expect(groups_autocomplete(search_term).pluck(:id)).to eq([group_2.id])
+        end
+
+        context 'when the search term is Gitlab::Search::Params::MIN_TERM_LENGTH characters long' do
+          let(:search_term) { 'te' }
+
+          it 'returns the group' do
+            expect(groups_autocomplete(search_term).pluck(:id)).to eq([group_2.id])
+          end
+        end
+      end
+    end
+  end
+
   describe 'projects_autocomplete' do
     let_it_be(:user) { create(:user) }
     let_it_be(:project_1) { create(:project, name: 'test 1') }
diff --git a/spec/lib/gitlab/middleware/go_spec.rb b/spec/lib/gitlab/middleware/go_spec.rb
index 055f2528584..2f38c83bb1f 100644
--- a/spec/lib/gitlab/middleware/go_spec.rb
+++ b/spec/lib/gitlab/middleware/go_spec.rb
@@ -205,13 +205,10 @@ RSpec.describe Gitlab::Middleware::Go, feature_category: :source_code_management
                     env['HTTP_AUTHORIZATION'] = ActionController::HttpAuthentication::Basic.encode_credentials(current_user.username, 'dummy_password')
                   end
 
-                  it 'returns unauthorized' do
+                  it 'returns 404' do
                     expect(Gitlab::Auth).to receive(:find_for_git_client).and_raise(Gitlab::Auth::MissingPersonalAccessTokenError)
-                    response = go
 
-                    expect(response[0]).to eq(401)
-                    expect(response[1]['Content-Length']).to be_nil
-                    expect(response[2]).to eq([''])
+                    expect_404_response(go)
                   end
                 end
               end
diff --git a/spec/models/integrations/instance/integration_spec.rb b/spec/models/integrations/instance/integration_spec.rb
new file mode 100644
index 00000000000..83049fe6688
--- /dev/null
+++ b/spec/models/integrations/instance/integration_spec.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Integrations::Instance::Integration, feature_category: :integrations do
+  subject(:instance_integration) { build(:instance_integration) }
+
+  describe '#instance_level?' do
+    it 'returns true' do
+      expect(instance_integration.instance_level?).to be(true)
+    end
+  end
+
+  describe '#group_level?' do
+    it 'returns false' do
+      expect(instance_integration.group_level?).to be(false)
+    end
+  end
+
+  describe '#project_level?' do
+    it 'returns false' do
+      expect(instance_integration.project_level?).to be(false)
+    end
+  end
+
+  describe '.table_name' do
+    it 'returns instance_integrations' do
+      expect(described_class.table_name).to eq('instance_integrations')
+    end
+  end
+end
diff --git a/spec/models/user_spec.rb b/spec/models/user_spec.rb
index 6542d02b953..0ffefb3fbc3 100644
--- a/spec/models/user_spec.rb
+++ b/spec/models/user_spec.rb
@@ -5025,6 +5025,59 @@ RSpec.describe User, feature_category: :user_profile do
     end
   end
 
+  describe '#search_on_authorized_groups' do
+    let_it_be(:user) { create(:user) }
+    let_it_be(:group_1) { create(:group, name: 'test', path: 'blah') }
+    let_it_be(:group_2) { create(:group, name: 'blah', path: 'test') }
+    let(:search_term) { 'test' }
+
+    subject { user.search_on_authorized_groups(search_term) }
+
+    context 'when the user does not have any authorized groups' do
+      before do
+        allow(user).to receive(:authorized_groups).and_return(Group.none)
+      end
+
+      it 'does not return anything' do
+        expect(subject).to be_empty
+      end
+    end
+
+    context 'when the user has two authorized groups with name or path matching the search term' do
+      before do
+        allow(user).to receive(:authorized_groups).and_return(Group.id_in([group_1.id, group_2.id]))
+      end
+
+      it 'returns the groups' do
+        expect(subject).to match_array([group_1, group_2])
+      end
+
+      context 'if the search term does not match on name or path' do
+        let(:search_term) { 'unknown' }
+
+        it 'does not return anything' do
+          expect(subject).to be_empty
+        end
+      end
+
+      context 'if the search term is less than MIN_CHARS_FOR_PARTIAL_MATCHING' do
+        let(:search_term) { 'te' }
+
+        it 'does not return anything' do
+          expect(subject).to be_empty
+        end
+
+        context 'if use_minimum_char_limit is false' do
+          subject { user.search_on_authorized_groups(search_term, use_minimum_char_limit: false) }
+
+          it 'returns the groups' do
+            expect(subject).to match_array([group_1, group_2])
+          end
+        end
+      end
+    end
+  end
+
   describe '#membership_groups' do
     let_it_be(:user) { create(:user) }
 
diff --git a/spec/scripts/internal_events/server_spec.rb b/spec/scripts/internal_events/server_spec.rb
index f75936e0c73..b3b1693591a 100644
--- a/spec/scripts/internal_events/server_spec.rb
+++ b/spec/scripts/internal_events/server_spec.rb
@@ -162,7 +162,7 @@ RSpec.describe Server, feature_category: :service_ping do
         }
       end
 
-      it 'successfully parses event' do
+      it 'successfully parses event', quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/498773' do
         expect(response.code).to eq('200')
         expect(events).to contain_exactly(expected_event)
       end
@@ -206,7 +206,7 @@ RSpec.describe Server, feature_category: :service_ping do
         await { Net::HTTP.get url_for("/i?#{query_params}") }
       end
 
-      it 'successfully returns tracked events' do
+      it 'successfully returns tracked events', quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/498778' do
         expect(response.code).to eq('200')
         expect(response.body).to eq([{
           event: {
diff --git a/spec/services/projects/participants_service_spec.rb b/spec/services/projects/participants_service_spec.rb
index 226caf50936..ffaa955df67 100644
--- a/spec/services/projects/participants_service_spec.rb
+++ b/spec/services/projects/participants_service_spec.rb
@@ -73,6 +73,20 @@ RSpec.describe Projects::ParticipantsService, feature_category: :groups_and_proj
       expect(participants.count { |p| p[:username] == noteable.author.username }).to eq 1
     end
 
+    context 'when noteable.participants contains placeholder or import users' do
+      let(:placeholder_user) { create(:user, :placeholder) }
+      let(:import_user) { create(:user, :import_user) }
+
+      it 'does not return the placeholder and import users' do
+        allow(noteable).to receive(:participants).and_return([user, placeholder_user, import_user])
+
+        participant_usernames = run_service.map { |user| user[:username] }
+
+        expect(participant_usernames).not_to include(placeholder_user.username, import_user.username)
+        expect(participant_usernames).to include(user.username)
+      end
+    end
+
     describe 'group items' do
       subject(:group_items) { run_service.select { |hash| hash[:type].eql?('Group') } }
 
diff --git a/spec/support/shared_examples/workers/idempotency_shared_examples.rb b/spec/support/shared_examples/workers/idempotency_shared_examples.rb
index 88a72d1cba9..2f7e8dc06c2 100644
--- a/spec/support/shared_examples/workers/idempotency_shared_examples.rb
+++ b/spec/support/shared_examples/workers/idempotency_shared_examples.rb
@@ -8,7 +8,7 @@
 #   it_behaves_like 'an idempotent worker' do
 #     it 'checks the side-effects for multiple calls' do
 #       # it'll call the job's perform method 2 times
-#       subject
+#       perform_idempotent_work
 #
 #       expect(model.state).to eq('state')
 #     end
@@ -31,7 +31,7 @@ RSpec.shared_examples 'an idempotent worker' do
   end
 
   it 'performs multiple times sequentially without raising an exception' do
-    expect { subject }.not_to raise_error
+    expect { perform_idempotent_work }.not_to raise_error
   end
 
   def event_worker
diff --git a/yarn.lock b/yarn.lock
index b14e5c3b90a..49b51c2bebe 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2466,76 +2466,76 @@
   resolved "https://registry.yarnpkg.com/@rtsao/scc/-/scc-1.1.0.tgz#927dd2fae9bc3361403ac2c7a00c32ddce9ad7e8"
   integrity sha512-zt6OdqaDoOnJ1ZYsCYGt9YmWzDXl4vQdKTyJev62gFhRGKdx7mcT54V9KIjg+d2wi9EXsPvAPKe7i7WjfVWB8g==
 
-"@sentry-internal/browser-utils@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry-internal/browser-utils/-/browser-utils-8.35.0.tgz#92602f8dd2bb777af2994eb446cb3cf71bf0cfad"
-  integrity sha512-uj9nwERm7HIS13f/Q52hF/NUS5Al8Ma6jkgpfYGeppYvU0uSjPkwMogtqoJQNbOoZg973tV8qUScbcWY616wNA==
+"@sentry-internal/browser-utils@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry-internal/browser-utils/-/browser-utils-8.36.0.tgz#c6a1b6d7eb2ccfc2f9c189504d94b3996367ccbf"
+  integrity sha512-AVJ9GmQW7jYxaal6hjQnnktsDNype01ajVC4q1RyOn1SfzSnXg6mXwj4xm4ovuJV+aBI7fAZJ55vEX5ASuP0ZA==
   dependencies:
-    "@sentry/core" "8.35.0"
-    "@sentry/types" "8.35.0"
-    "@sentry/utils" "8.35.0"
+    "@sentry/core" "8.36.0"
+    "@sentry/types" "8.36.0"
+    "@sentry/utils" "8.36.0"
 
-"@sentry-internal/feedback@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry-internal/feedback/-/feedback-8.35.0.tgz#b31fb7fbec8ecd9cc683948a0d1af2b87731b0a1"
-  integrity sha512-7bjSaUhL0bDArozre6EiIhhdWdT/1AWNWBC1Wc5w1IxEi5xF7nvF/FfvjQYrONQzZAI3HRxc45J2qhLUzHBmoQ==
+"@sentry-internal/feedback@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry-internal/feedback/-/feedback-8.36.0.tgz#2cda799f921543522aa5cbf8f9c3300209b54825"
+  integrity sha512-aAMTm3uDBj8Ta7FwoohpLmJOpWzpWXvvtTbtmSgkeCtPJLUS8DZDCTZ9uCILUkpuYrv2savRUHsdPkxNjgL8FA==
   dependencies:
-    "@sentry/core" "8.35.0"
-    "@sentry/types" "8.35.0"
-    "@sentry/utils" "8.35.0"
+    "@sentry/core" "8.36.0"
+    "@sentry/types" "8.36.0"
+    "@sentry/utils" "8.36.0"
 
-"@sentry-internal/replay-canvas@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry-internal/replay-canvas/-/replay-canvas-8.35.0.tgz#de7849e0d4212ee37a9225b1fc346188d9b05072"
-  integrity sha512-TUrH6Piv19kvHIiRyIuapLdnuwxk/Un/l1WDCQfq7mK9p1Pac0FkQ7Uufjp6zY3lyhDDZQ8qvCS4ioCMibCwQg==
+"@sentry-internal/replay-canvas@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry-internal/replay-canvas/-/replay-canvas-8.36.0.tgz#557c8677f6c386cf79b5f8ab7485b31f4347a6cb"
+  integrity sha512-KJPLf+qYdrQdmouoAqIPZ2KeapIBlHWbzNdQqNxJFWLHFFjpLUtt0b+87ruvbA/q3NYy2fDwD7EB0tGS1RHBaA==
   dependencies:
-    "@sentry-internal/replay" "8.35.0"
-    "@sentry/core" "8.35.0"
-    "@sentry/types" "8.35.0"
-    "@sentry/utils" "8.35.0"
+    "@sentry-internal/replay" "8.36.0"
+    "@sentry/core" "8.36.0"
+    "@sentry/types" "8.36.0"
+    "@sentry/utils" "8.36.0"
 
-"@sentry-internal/replay@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry-internal/replay/-/replay-8.35.0.tgz#f71abae95cb492a54b43885386adbc5c639486c7"
-  integrity sha512-3wkW03vXYMyWtTLxl9yrtkV+qxbnKFgfASdoGWhXzfLjycgT6o4/04eb3Gn71q9aXqRwH17ISVQbVswnRqMcmA==
+"@sentry-internal/replay@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry-internal/replay/-/replay-8.36.0.tgz#8f5dccab0bcc3429650a461c46a01085f2f8b782"
+  integrity sha512-lbic98GsSkDeinQDix54tBFEgHUlmBtO+HjXECk9jIE0vOzR4As20/s5ta46t1rKMLlnxOtJuT5jKXeUYogBUw==
   dependencies:
-    "@sentry-internal/browser-utils" "8.35.0"
-    "@sentry/core" "8.35.0"
-    "@sentry/types" "8.35.0"
-    "@sentry/utils" "8.35.0"
+    "@sentry-internal/browser-utils" "8.36.0"
+    "@sentry/core" "8.36.0"
+    "@sentry/types" "8.36.0"
+    "@sentry/utils" "8.36.0"
 
-"@sentry/browser@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry/browser/-/browser-8.35.0.tgz#67820951fd092ef72ee1a4897464bc7c8d317d77"
-  integrity sha512-WHfI+NoZzpCsmIvtr6ChOe7yWPLQyMchPnVhY3Z4UeC70bkYNdKcoj/4XZbX3m0D8+71JAsm0mJ9s9OC3Ue6MQ==
+"@sentry/browser@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry/browser/-/browser-8.36.0.tgz#da8977b37e56e5436cf3ea2c2e4a098f480ab115"
+  integrity sha512-bLrQNe+wD4DkCfB8OD5TF3Rr8KA2+aTo5wF3t3Bf6KVn8//iX1ia1hhtptYiRnbRkG/0AEPxlqL6XfPZYVPQ5A==
   dependencies:
-    "@sentry-internal/browser-utils" "8.35.0"
-    "@sentry-internal/feedback" "8.35.0"
-    "@sentry-internal/replay" "8.35.0"
-    "@sentry-internal/replay-canvas" "8.35.0"
-    "@sentry/core" "8.35.0"
-    "@sentry/types" "8.35.0"
-    "@sentry/utils" "8.35.0"
+    "@sentry-internal/browser-utils" "8.36.0"
+    "@sentry-internal/feedback" "8.36.0"
+    "@sentry-internal/replay" "8.36.0"
+    "@sentry-internal/replay-canvas" "8.36.0"
+    "@sentry/core" "8.36.0"
+    "@sentry/types" "8.36.0"
+    "@sentry/utils" "8.36.0"
 
-"@sentry/core@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry/core/-/core-8.35.0.tgz#17090f4d2d3bb983d9d99ecd2d27f4e9e107e0b0"
-  integrity sha512-Ci0Nmtw5ETWLqQJGY4dyF+iWh7PWKy6k303fCEoEmqj2czDrKJCp7yHBNV0XYbo00prj2ZTbCr6I7albYiyONA==
+"@sentry/core@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry/core/-/core-8.36.0.tgz#34276354f0cd2298803c2f8d86ba571473435ff1"
+  integrity sha512-cbq1WQyRqc/+YpPhjwQxfniUM3ZxmO3Pm1oisTB8dw6mlbgQfGD6aznEIjXWWJY6k6acewJlMUx09N7DnprtBw==
   dependencies:
-    "@sentry/types" "8.35.0"
-    "@sentry/utils" "8.35.0"
+    "@sentry/types" "8.36.0"
+    "@sentry/utils" "8.36.0"
 
-"@sentry/types@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry/types/-/types-8.35.0.tgz#535c807800f7e378f61416f30177c0ef81b95012"
-  integrity sha512-AVEZjb16MlYPifiDDvJ19dPQyDn0jlrtC1PHs6ZKO+Rzyz+2EX2BRdszvanqArldexPoU1p5Bn2w81XZNXThBA==
+"@sentry/types@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry/types/-/types-8.36.0.tgz#b58397eb672d896b65b06103feb59dba74da9d39"
+  integrity sha512-K1pVFfdGHw115RzGHpwSOqoEPeayn4N1F9IfM0kxrYpQSbFT1X29eak88GBfC8gPiLEF0iFGlSaQ4ERmF7oRcA==
 
-"@sentry/utils@8.35.0":
-  version "8.35.0"
-  resolved "https://registry.yarnpkg.com/@sentry/utils/-/utils-8.35.0.tgz#1e099fcbc60040091c79f028a83226c145d588ee"
-  integrity sha512-MdMb6+uXjqND7qIPWhulubpSeHzia6HtxeJa8jYI09OCvIcmNGPydv/Gx/LZBwosfMHrLdTWcFH7Y7aCxrq7cg==
+"@sentry/utils@8.36.0":
+  version "8.36.0"
+  resolved "https://registry.yarnpkg.com/@sentry/utils/-/utils-8.36.0.tgz#e733042ae231fdeeafe6970e49283dcd9ac9700f"
+  integrity sha512-oJ3EDPj0I00z+AwC3EWBpSidXYUoKW0Id8MfMQP5Hflniz3gif7UEReblT+FJgPEVo6+6uNzAncY0MuNMxmDKQ==
   dependencies:
-    "@sentry/types" "8.35.0"
+    "@sentry/types" "8.36.0"
 
 "@sinclair/typebox@^0.27.8":
   version "0.27.8"