From 6d9c4dc2ef4c63bee8e9ca095dc2f0ed683a34f5 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Mon, 16 Nov 2020 18:09:15 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 GITALY_SERVER_VERSION                         |   2 +-
 .../javascripts/jobs/components/log/line.vue  |  50 ++++--
 app/assets/javascripts/jobs/utils.js          |   4 +
 .../notes/components/note_actions.vue         | 118 +++++++--------
 .../components/note_actions/reply_button.vue  |   2 +-
 .../pages/groups/clusters/destroy/index.js    |   4 +-
 .../pages/groups/clusters/edit/index.js       |   4 +-
 .../pages/groups/clusters/index.js            |   6 +-
 .../pages/groups/clusters/index/index.js      |   8 +-
 .../pages/groups/clusters/new/index.js        |   4 +-
 .../pages/groups/clusters/show/index.js       |   6 +-
 .../javascripts/pages/users/user_tabs.js      |  17 ++-
 .../pipelines/components/dag/dag.vue          |  21 ++-
 .../pipelines/pipeline_details_dag.js         |  13 +-
 .../stylesheets/framework/calendar.scss       |  14 +-
 app/assets/stylesheets/pages/groups.scss      |   2 +-
 app/assets/stylesheets/pages/notes.scss       |  23 ++-
 .../alerting/notifications_controller.rb      |   2 -
 .../projects/avatars_controller.rb            |   2 +
 app/controllers/projects/jobs_controller.rb   |   3 +
 app/controllers/projects/raw_controller.rb    |   2 +
 .../projects/repositories_controller.rb       |   2 +
 .../alert_management/integrations_resolver.rb |   2 -
 app/graphql/types/issue_type.rb               |   2 +-
 .../http_integrations/create_service.rb       |   2 +-
 .../http_integrations/destroy_service.rb      |   5 -
 .../http_integrations/update_service.rb       |   5 -
 .../projects/alerting/notify_service.rb       |  13 +-
 .../_package_registry.html.haml               |   2 +-
 .../application_settings/ci_cd.html.haml      |   4 +-
 .../groups/group_members/index.html.haml      |   2 +-
 .../projects/pipelines/_with_tabs.html.haml   |   4 +-
 app/views/users/_overview.html.haml           |  16 +-
 .../235436-add-header-fuzzing-docs.yml        |   5 +
 ...e-vue_group_members_list-ff-by-default.yml |   5 +
 ...ting-jira-tracker-data-deployment-type.yml |   5 +
 .../unreleased/249145-update-blank-dag.yml    |   5 +
 changelogs/unreleased/283924-user-profile.yml |   5 +
 ...ache-raw-endpoints-for-logged-in-users.yml |   5 +
 .../sy-ff-removal-multiple-http-endpoints.yml |   5 +
 ...integrations.yml => ci_job_line_links.yml} |   8 +-
 .../usage_data_static_site_editor_commits.yml |   8 -
 ...data_static_site_editor_merge_requests.yml |   8 -
 .../development/vue_group_members_list.yml    |   2 +-
 ..._backfill_jira_tracker_deployment_type2.rb |  32 ++++
 db/schema_migrations/20201028182809           |   1 +
 .../geo/replication/configuration.md          |  23 +--
 .../replication/version_specific_updates.md   |   2 +-
 .../graphql/reference/gitlab_schema.graphql   |   4 +-
 doc/api/graphql/reference/gitlab_schema.json  |   4 +-
 doc/api/graphql/reference/index.md            |   4 +-
 doc/ci/directed_acyclic_graph/index.md        |  16 +-
 doc/development/README.md                     |   9 +-
 doc/development/cached_queries.md             | 139 +++++++++++++++++
 doc/development/database/index.md             |   4 +
 .../database/maintenance_operations.md        |  46 ++++++
 doc/development/fe_guide/droplab/droplab.md   |  88 ++++++-----
 .../fe_guide/droplab/plugins/ajax.md          |  22 +--
 .../fe_guide/droplab/plugins/filter.md        |  23 +--
 .../fe_guide/droplab/plugins/index.md         |  14 ++
 .../fe_guide/droplab/plugins/input_setter.md  |  32 ++--
 doc/development/image_scaling.md              |  96 ++++++++++++
 .../img/performance_bar_cached_queries.png    | Bin 0 -> 27039 bytes
 .../performance_bar_fixed_cached_queries.png  | Bin 0 -> 8557 bytes
 .../img/performance_bar_members_page.png      | Bin 0 -> 8437 bytes
 .../merge_request_performance_guidelines.md   |  25 +--
 doc/development/migration_style_guide.md      |   6 +
 doc/development/performance.md                |  34 +++++
 doc/development/sidekiq_style_guide.md        |   5 +-
 doc/integration/akismet.md                    |  31 ++--
 doc/integration/auth0.md                      |  37 ++---
 doc/integration/azure.md                      |  39 +++--
 doc/integration/bitbucket.md                  |  66 ++++----
 doc/topics/autodevops/customize.md            |   4 +-
 doc/topics/autodevops/index.md                |   4 +-
 doc/topics/autodevops/quick_start_guide.md    |   4 +-
 doc/topics/autodevops/requirements.md         |   4 +-
 doc/topics/autodevops/stages.md               |   4 +-
 .../upgrading_auto_deploy_dependencies.md     |   4 +
 doc/topics/autodevops/upgrading_postgresql.md |   4 +-
 .../analytics/instance_statistics.md          |  24 ++-
 .../application_security/api_fuzzing/index.md |  80 ++++++++++
 .../backfill_jira_tracker_deployment_type2.rb |  86 +++++++++++
 lib/gitlab/middleware/read_only/controller.rb |   4 +-
 locale/gitlab.pot                             |  36 ++---
 .../alerting/notifications_controller_spec.rb |  12 --
 .../projects/avatars_controller_spec.rb       |  34 +++--
 .../projects/raw_controller_spec.rb           |   9 ++
 .../projects/repositories_controller_spec.rb  |   4 +-
 .../projects/pipelines/pipeline_spec.rb       |   4 +-
 .../frontend/jobs/components/log/line_spec.js | 143 ++++++++++++++++--
 .../notes/components/note_actions_spec.js     |  20 +--
 .../integrations_resolver_spec.rb             |   8 -
 ...fill_jira_tracker_deployment_type2_spec.rb |  65 ++++++++
 ...fill_jira_tracker_deployment_type2_spec.rb |  38 +++++
 .../http_integrations/create_service_spec.rb  |   8 -
 .../http_integrations/destroy_service_spec.rb |   8 -
 .../http_integrations/update_service_spec.rb  |   8 -
 .../projects/alerting/notify_service_spec.rb  |  19 +--
 ...ackground_migration_job_shared_examples.rb |  23 +++
 ...ad_only_gitlab_instance_shared_examples.rb |   1 -
 101 files changed, 1357 insertions(+), 534 deletions(-)
 create mode 100644 app/assets/javascripts/jobs/utils.js
 create mode 100644 changelogs/unreleased/235436-add-header-fuzzing-docs.yml
 create mode 100644 changelogs/unreleased/241194-enable-vue_group_members_list-ff-by-default.yml
 create mode 100644 changelogs/unreleased/243607-background-migration-for-setting-jira-tracker-data-deployment-type.yml
 create mode 100644 changelogs/unreleased/249145-update-blank-dag.yml
 create mode 100644 changelogs/unreleased/283924-user-profile.yml
 create mode 100644 changelogs/unreleased/cache-raw-endpoints-for-logged-in-users.yml
 create mode 100644 changelogs/unreleased/sy-ff-removal-multiple-http-endpoints.yml
 rename config/feature_flags/development/{multiple_http_integrations.yml => ci_job_line_links.yml} (69%)
 delete mode 100644 config/feature_flags/development/usage_data_static_site_editor_commits.yml
 delete mode 100644 config/feature_flags/development/usage_data_static_site_editor_merge_requests.yml
 create mode 100644 db/post_migrate/20201028182809_backfill_jira_tracker_deployment_type2.rb
 create mode 100644 db/schema_migrations/20201028182809
 create mode 100644 doc/development/cached_queries.md
 create mode 100644 doc/development/database/maintenance_operations.md
 create mode 100644 doc/development/fe_guide/droplab/plugins/index.md
 create mode 100644 doc/development/image_scaling.md
 create mode 100644 doc/development/img/performance_bar_cached_queries.png
 create mode 100644 doc/development/img/performance_bar_fixed_cached_queries.png
 create mode 100644 doc/development/img/performance_bar_members_page.png
 create mode 100644 lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2.rb
 create mode 100644 spec/lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2_spec.rb
 create mode 100644 spec/migrations/20201028182809_backfill_jira_tracker_deployment_type2_spec.rb
 create mode 100644 spec/support/shared_examples/lib/gitlab/database/background_migration_job_shared_examples.rb

diff --git a/GITALY_SERVER_VERSION b/GITALY_SERVER_VERSION
index 4862ceb7a20..f9ae25d2fb7 100644
--- a/GITALY_SERVER_VERSION
+++ b/GITALY_SERVER_VERSION
@@ -1 +1 @@
-40d58655a42f71b6180a3cbaf369cc20b60e695a
+2ecaa5afbef22c84b4ce31fcda2a246753a966a3
diff --git a/app/assets/javascripts/jobs/components/log/line.vue b/app/assets/javascripts/jobs/components/log/line.vue
index e68d5b8eda4..c6fb3aeed1a 100644
--- a/app/assets/javascripts/jobs/components/log/line.vue
+++ b/app/assets/javascripts/jobs/components/log/line.vue
@@ -1,4 +1,6 @@
 <script>
+import { linkRegex } from '../../utils';
+
 import LineNumber from './line_number.vue';
 
 export default {
@@ -16,15 +18,45 @@ export default {
   render(h, { props }) {
     const { line, path } = props;
 
-    const chars = line.content.map(content => {
-      return h(
-        'span',
-        {
-          class: ['gl-white-space-pre-wrap', content.style],
-        },
-        content.text,
-      );
-    });
+    let chars;
+    if (gon?.features?.ciJobLineLinks) {
+      chars = line.content.map(content => {
+        return h(
+          'span',
+          {
+            class: ['gl-white-space-pre-wrap', content.style],
+          },
+          // Simple "tokenization": Split text in chunks of text
+          // which alternate between text and urls.
+          content.text.split(linkRegex).map(chunk => {
+            // Return normal string for non-links
+            if (!chunk.match(linkRegex)) {
+              return chunk;
+            }
+            return h(
+              'a',
+              {
+                attrs: {
+                  href: chunk,
+                  rel: 'nofollow noopener noreferrer', // eslint-disable-line @gitlab/require-i18n-strings
+                },
+              },
+              chunk,
+            );
+          }),
+        );
+      });
+    } else {
+      chars = line.content.map(content => {
+        return h(
+          'span',
+          {
+            class: ['gl-white-space-pre-wrap', content.style],
+          },
+          content.text,
+        );
+      });
+    }
 
     return h('div', { class: 'js-line log-line' }, [
       h(LineNumber, {
diff --git a/app/assets/javascripts/jobs/utils.js b/app/assets/javascripts/jobs/utils.js
new file mode 100644
index 00000000000..28a125b2b8f
--- /dev/null
+++ b/app/assets/javascripts/jobs/utils.js
@@ -0,0 +1,4 @@
+// capture anything starting with http:// or https://
+// up until a disallowed character or whitespace
+export const linkRegex = /(https?:\/\/[^"<>\\^`{|}\s]+)/g;
+export default { linkRegex };
diff --git a/app/assets/javascripts/notes/components/note_actions.vue b/app/assets/javascripts/notes/components/note_actions.vue
index c2f40b2d21a..fc131f548b4 100644
--- a/app/assets/javascripts/notes/components/note_actions.vue
+++ b/app/assets/javascripts/notes/components/note_actions.vue
@@ -1,6 +1,6 @@
 <script>
 import { mapGetters } from 'vuex';
-import { GlLoadingIcon, GlTooltipDirective, GlIcon } from '@gitlab/ui';
+import { GlTooltipDirective, GlIcon, GlButton, GlDropdownItem } from '@gitlab/ui';
 import { __, sprintf } from '~/locale';
 import resolvedStatusMixin from '~/batch_comments/mixins/resolved_status';
 import ReplyButton from './note_actions/reply_button.vue';
@@ -14,7 +14,8 @@ export default {
   components: {
     GlIcon,
     ReplyButton,
-    GlLoadingIcon,
+    GlButton,
+    GlDropdownItem,
   },
   directives: {
     GlTooltip: GlTooltipDirective,
@@ -170,6 +171,15 @@ export default {
         name: this.projectName,
       });
     },
+    resolveIcon() {
+      if (!this.isResolving) {
+        return this.isResolved ? 'check-circle-filled' : 'check-circle';
+      }
+      return null;
+    },
+    resolveVariant() {
+      return this.isResolved ? 'success' : 'default';
+    },
   },
   methods: {
     onEdit() {
@@ -233,24 +243,23 @@ export default {
       :title="displayContributorBadgeText"
       >{{ __('Contributor') }}</span
     >
-    <div v-if="canResolve" class="note-actions-item">
-      <button
+    <div v-if="canResolve" class="gl-ml-2">
+      <gl-button
         ref="resolveButton"
         v-gl-tooltip
+        size="small"
+        category="tertiary"
+        :variant="resolveVariant"
         :class="{ 'is-disabled': !resolvable, 'is-active': isResolved }"
         :title="resolveButtonTitle"
         :aria-label="resolveButtonTitle"
-        type="button"
+        :icon="resolveIcon"
+        :loading="isResolving"
         class="line-resolve-btn note-action-button"
         @click="onResolve"
-      >
-        <template v-if="!isResolving">
-          <gl-icon :name="isResolved ? 'check-circle-filled' : 'check-circle'" />
-        </template>
-        <gl-loading-icon v-else inline />
-      </button>
+      />
     </div>
-    <div v-if="canAwardEmoji" class="note-actions-item">
+    <div v-if="canAwardEmoji" class="gl-ml-3 gl-mr-2">
       <a
         v-gl-tooltip
         :class="{ 'js-user-authored': isAuthoredByCurrentUser }"
@@ -261,7 +270,7 @@ export default {
       >
         <gl-icon class="link-highlight award-control-icon-neutral" name="slight-smile" />
         <gl-icon class="link-highlight award-control-icon-positive" name="smiley" />
-        <gl-icon class="link-highlight award-control-icon-super-positive" name="smiley" />
+        <gl-icon class="link-highlight award-control-icon-super-positive" name="smile" />
       </a>
     </div>
     <reply-button
@@ -270,72 +279,57 @@ export default {
       class="js-reply-button"
       @startReplying="$emit('startReplying')"
     />
-    <div v-if="canEdit" class="note-actions-item">
-      <button
+    <div v-if="canEdit" class="gl-ml-2">
+      <gl-button
         v-gl-tooltip
-        type="button"
         title="Edit comment"
+        icon="pencil"
+        size="small"
+        category="tertiary"
         class="note-action-button js-note-edit btn btn-transparent"
         data-qa-selector="note_edit_button"
         @click="onEdit"
-      >
-        <gl-icon name="pencil" class="link-highlight" />
-      </button>
+      />
     </div>
-    <div v-if="showDeleteAction" class="note-actions-item">
-      <button
+    <div v-if="showDeleteAction" class="gl-ml-2">
+      <gl-button
         v-gl-tooltip
-        type="button"
         title="Delete comment"
+        size="small"
+        icon="remove"
+        category="tertiary"
         class="note-action-button js-note-delete btn btn-transparent"
         @click="onDelete"
-      >
-        <gl-icon name="remove" class="link-highlight" />
-      </button>
+      />
     </div>
-    <div v-else-if="shouldShowActionsDropdown" class="dropdown more-actions note-actions-item">
-      <button
+    <div v-else-if="shouldShowActionsDropdown" class="dropdown more-actions gl-ml-2">
+      <gl-button
         v-gl-tooltip
-        type="button"
         title="More actions"
+        icon="ellipsis_v"
+        size="small"
+        category="tertiary"
         class="note-action-button more-actions-toggle btn btn-transparent"
         data-toggle="dropdown"
         @click="closeTooltip"
-      >
-        <gl-icon class="icon" name="ellipsis_v" />
-      </button>
+      />
       <ul class="dropdown-menu more-actions-dropdown dropdown-open-left">
-        <li v-if="canReportAsAbuse">
-          <a :href="reportAbusePath">{{ __('Report abuse to admin') }}</a>
-        </li>
-        <li v-if="noteUrl">
-          <button
-            :data-clipboard-text="noteUrl"
-            type="button"
-            class="btn-default btn-transparent js-btn-copy-note-link"
-          >
-            {{ __('Copy link') }}
-          </button>
-        </li>
-        <li v-if="canAssign">
-          <button
-            class="btn-default btn-transparent"
-            data-testid="assign-user"
-            type="button"
-            @click="assignUser"
-          >
-            {{ displayAssignUserText }}
-          </button>
-        </li>
-        <li v-if="canEdit">
-          <button
-            class="btn btn-transparent js-note-delete js-note-delete"
-            type="button"
-            @click.prevent="onDelete"
-          >
-            <span class="text-danger">{{ __('Delete comment') }}</span>
-          </button>
-        </li>
+        <gl-dropdown-item v-if="canReportAsAbuse" :href="reportAbusePath">
+          {{ __('Report abuse to admin') }}
+        </gl-dropdown-item>
+        <gl-dropdown-item
+          v-if="noteUrl"
+          class="js-btn-copy-note-link"
+          :data-clipboard-text="noteUrl"
+        >
+          {{ __('Copy link') }}
+        </gl-dropdown-item>
+        <gl-dropdown-item v-if="canAssign" data-testid="assign-user" @click="assignUser">
+          {{ displayAssignUserText }}
+        </gl-dropdown-item>
+        <gl-dropdown-item v-if="canEdit" class="js-note-delete" @click.prevent="onDelete">
+          <span class="text-danger">{{ __('Delete comment') }}</span>
+        </gl-dropdown-item>
       </ul>
     </div>
   </div>
diff --git a/app/assets/javascripts/notes/components/note_actions/reply_button.vue b/app/assets/javascripts/notes/components/note_actions/reply_button.vue
index f19b7667fb2..acbbee13a6d 100644
--- a/app/assets/javascripts/notes/components/note_actions/reply_button.vue
+++ b/app/assets/javascripts/notes/components/note_actions/reply_button.vue
@@ -13,7 +13,7 @@ export default {
 </script>
 
 <template>
-  <div class="note-actions-item">
+  <div class="gl-ml-2">
     <gl-button
       ref="button"
       v-gl-tooltip
diff --git a/app/assets/javascripts/pages/groups/clusters/destroy/index.js b/app/assets/javascripts/pages/groups/clusters/destroy/index.js
index 8001d2dd1da..487e7a14a16 100644
--- a/app/assets/javascripts/pages/groups/clusters/destroy/index.js
+++ b/app/assets/javascripts/pages/groups/clusters/destroy/index.js
@@ -1,5 +1,3 @@
 import ClustersBundle from '~/clusters/clusters_bundle';
 
-document.addEventListener('DOMContentLoaded', () => {
-  new ClustersBundle(); // eslint-disable-line no-new
-});
+new ClustersBundle(); // eslint-disable-line no-new
diff --git a/app/assets/javascripts/pages/groups/clusters/edit/index.js b/app/assets/javascripts/pages/groups/clusters/edit/index.js
index 8001d2dd1da..487e7a14a16 100644
--- a/app/assets/javascripts/pages/groups/clusters/edit/index.js
+++ b/app/assets/javascripts/pages/groups/clusters/edit/index.js
@@ -1,5 +1,3 @@
 import ClustersBundle from '~/clusters/clusters_bundle';
 
-document.addEventListener('DOMContentLoaded', () => {
-  new ClustersBundle(); // eslint-disable-line no-new
-});
+new ClustersBundle(); // eslint-disable-line no-new
diff --git a/app/assets/javascripts/pages/groups/clusters/index.js b/app/assets/javascripts/pages/groups/clusters/index.js
index 9f466e0d60a..3b92c244346 100644
--- a/app/assets/javascripts/pages/groups/clusters/index.js
+++ b/app/assets/javascripts/pages/groups/clusters/index.js
@@ -1,7 +1,5 @@
 import initCreateCluster from '~/create_cluster/init_create_cluster';
 import initIntegrationForm from '~/clusters/forms/show/index';
 
-document.addEventListener('DOMContentLoaded', () => {
-  initCreateCluster(document, gon);
-  initIntegrationForm();
-});
+initCreateCluster(document, gon);
+initIntegrationForm();
diff --git a/app/assets/javascripts/pages/groups/clusters/index/index.js b/app/assets/javascripts/pages/groups/clusters/index/index.js
index 744be65bfbe..3b71517f017 100644
--- a/app/assets/javascripts/pages/groups/clusters/index/index.js
+++ b/app/assets/javascripts/pages/groups/clusters/index/index.js
@@ -1,8 +1,6 @@
 import PersistentUserCallout from '~/persistent_user_callout';
 import initClustersListApp from '~/clusters_list';
 
-document.addEventListener('DOMContentLoaded', () => {
-  const callout = document.querySelector('.gcp-signup-offer');
-  PersistentUserCallout.factory(callout);
-  initClustersListApp();
-});
+const callout = document.querySelector('.gcp-signup-offer');
+PersistentUserCallout.factory(callout);
+initClustersListApp();
diff --git a/app/assets/javascripts/pages/groups/clusters/new/index.js b/app/assets/javascripts/pages/groups/clusters/new/index.js
index 876bab0b339..de9ded87ef3 100644
--- a/app/assets/javascripts/pages/groups/clusters/new/index.js
+++ b/app/assets/javascripts/pages/groups/clusters/new/index.js
@@ -1,5 +1,3 @@
 import initNewCluster from '~/clusters/new_cluster';
 
-document.addEventListener('DOMContentLoaded', () => {
-  initNewCluster();
-});
+initNewCluster();
diff --git a/app/assets/javascripts/pages/groups/clusters/show/index.js b/app/assets/javascripts/pages/groups/clusters/show/index.js
index ccf631b2c53..5d202a8824f 100644
--- a/app/assets/javascripts/pages/groups/clusters/show/index.js
+++ b/app/assets/javascripts/pages/groups/clusters/show/index.js
@@ -1,7 +1,5 @@
 import ClustersBundle from '~/clusters/clusters_bundle';
 import initClusterHealth from '~/pages/projects/clusters/show/cluster_health';
 
-document.addEventListener('DOMContentLoaded', () => {
-  new ClustersBundle(); // eslint-disable-line no-new
-  initClusterHealth();
-});
+new ClustersBundle(); // eslint-disable-line no-new
+initClusterHealth();
diff --git a/app/assets/javascripts/pages/users/user_tabs.js b/app/assets/javascripts/pages/users/user_tabs.js
index 9d66c784750..2485853afc7 100644
--- a/app/assets/javascripts/pages/users/user_tabs.js
+++ b/app/assets/javascripts/pages/users/user_tabs.js
@@ -5,7 +5,6 @@ import Activities from '~/activities';
 import { localTimeAgo } from '~/lib/utils/datetime_utility';
 import AjaxCache from '~/lib/utils/ajax_cache';
 import { __ } from '~/locale';
-import { deprecatedCreateFlash as flash } from '~/flash';
 import ActivityCalendar from './activity_calendar';
 import UserOverviewBlock from './user_overview_block';
 
@@ -63,9 +62,9 @@ import UserOverviewBlock from './user_overview_block';
  */
 
 const CALENDAR_TEMPLATE = `
-  <div class="clearfix calendar">
+  <div class="calendar">
     <div class="js-contrib-calendar"></div>
-    <div class="calendar-hint bottom-right"></div>
+    <div class="calendar-hint"></div>
   </div>
 `;
 
@@ -214,7 +213,17 @@ export default class UserTabs {
 
     AjaxCache.retrieve(calendarPath)
       .then(data => UserTabs.renderActivityCalendar(data, $calendarWrap))
-      .catch(() => flash(__('There was an error loading users activity calendar.')));
+      .catch(() => {
+        const cWrap = $calendarWrap[0];
+        cWrap.querySelector('.spinner').classList.add('invisible');
+        cWrap.querySelector('.user-calendar-error').classList.remove('invisible');
+        cWrap.querySelector('.user-calendar-error .js-retry-load').addEventListener('click', e => {
+          e.preventDefault();
+          cWrap.querySelector('.user-calendar-error').classList.add('invisible');
+          cWrap.querySelector('.spinner').classList.remove('invisible');
+          this.loadActivityCalendar();
+        });
+      });
   }
 
   static renderActivityCalendar(data, $calendarWrap) {
diff --git a/app/assets/javascripts/pipelines/components/dag/dag.vue b/app/assets/javascripts/pipelines/components/dag/dag.vue
index 6267b63328c..85171263f08 100644
--- a/app/assets/javascripts/pipelines/components/dag/dag.vue
+++ b/app/assets/javascripts/pipelines/components/dag/dag.vue
@@ -1,5 +1,5 @@
 <script>
-import { GlAlert, GlButton, GlEmptyState, GlSprintf } from '@gitlab/ui';
+import { GlAlert, GlButton, GlEmptyState, GlLink, GlSprintf } from '@gitlab/ui';
 import { isEmpty } from 'lodash';
 import { __ } from '~/locale';
 import { fetchPolicies } from '~/lib/graphql';
@@ -17,11 +17,15 @@ export default {
     DagAnnotations,
     DagGraph,
     GlAlert,
-    GlSprintf,
-    GlEmptyState,
     GlButton,
+    GlEmptyState,
+    GlLink,
+    GlSprintf,
   },
   inject: {
+    aboutDagDocPath: {
+      default: null,
+    },
     dagDocPath: {
       default: null,
     },
@@ -89,14 +93,14 @@ export default {
     [DEFAULT]: __('An unknown error occurred while loading this graph.'),
   },
   emptyStateTexts: {
-    title: __('Start using Directed Acyclic Graphs (DAG)'),
+    title: __('Speed up your pipelines with Needs relationships'),
     firstDescription: __(
-      "This pipeline does not use the %{codeStart}needs%{codeEnd} keyword and can't be represented as a directed acyclic graph.",
+      'Using the %{codeStart}needs%{codeEnd} keyword makes jobs run before their stage is reached. Jobs run as soon as their %{codeStart}needs%{codeEnd} relationships are met, which speeds up your pipelines.',
     ),
     secondDescription: __(
-      'Using %{codeStart}needs%{codeEnd} allows jobs to run before their stage is reached, as soon as their individual dependencies are met, which speeds up your pipelines.',
+      "If you add %{codeStart}needs%{codeEnd} to jobs in your pipeline you'll be able to view the %{codeStart}needs%{codeEnd} relationships between jobs in this tab as a %{linkStart}Directed Acyclic Graph (DAG)%{linkEnd}.",
     ),
-    button: __('Learn more about job dependencies'),
+    button: __('Learn more about Needs relationships'),
   },
   computed: {
     failure() {
@@ -222,6 +226,9 @@ export default {
                 <template #code="{ content }">
                   <code>{{ content }}</code>
                 </template>
+                <template #link="{ content }">
+                  <gl-link :href="aboutDagDocPath">{{ content }}</gl-link>
+                </template>
               </gl-sprintf>
             </p>
           </div>
diff --git a/app/assets/javascripts/pipelines/pipeline_details_dag.js b/app/assets/javascripts/pipelines/pipeline_details_dag.js
index 3e9bdae96dd..d37c72a4f2a 100644
--- a/app/assets/javascripts/pipelines/pipeline_details_dag.js
+++ b/app/assets/javascripts/pipelines/pipeline_details_dag.js
@@ -16,7 +16,13 @@ const createDagApp = () => {
     return;
   }
 
-  const { pipelineProjectPath, pipelineIid, emptySvgPath, dagDocPath } = el?.dataset;
+  const {
+    aboutDagDocPath,
+    dagDocPath,
+    emptySvgPath,
+    pipelineProjectPath,
+    pipelineIid,
+  } = el?.dataset;
 
   // eslint-disable-next-line no-new
   new Vue({
@@ -26,10 +32,11 @@ const createDagApp = () => {
     },
     apolloProvider,
     provide: {
+      aboutDagDocPath,
+      dagDocPath,
+      emptySvgPath,
       pipelineProjectPath,
       pipelineIid,
-      emptySvgPath,
-      dagDocPath,
     },
     render(createElement) {
       return createElement('dag', {});
diff --git a/app/assets/stylesheets/framework/calendar.scss b/app/assets/stylesheets/framework/calendar.scss
index de767ac3fe0..5b7f1a3f38b 100644
--- a/app/assets/stylesheets/framework/calendar.scss
+++ b/app/assets/stylesheets/framework/calendar.scss
@@ -14,14 +14,11 @@
   .str-truncated {
     max-width: 70%;
   }
-
-  .user-calendar-activities-loading {
-    font-size: 24px;
-  }
 }
 
 .user-calendar {
   text-align: center;
+  min-height: 172px;
 
   .calendar {
     display: inline-block;
@@ -42,12 +39,9 @@
 
 .calendar-hint {
   font-size: 12px;
-
-  &.bottom-right {
-    direction: ltr;
-    margin-top: -23px;
-    float: right;
-  }
+  direction: ltr;
+  margin-top: -23px;
+  float: right;
 }
 
 .pika-single.gitlab-theme {
diff --git a/app/assets/stylesheets/pages/groups.scss b/app/assets/stylesheets/pages/groups.scss
index 1647bf9c7ce..e73b6b18afd 100644
--- a/app/assets/stylesheets/pages/groups.scss
+++ b/app/assets/stylesheets/pages/groups.scss
@@ -337,11 +337,11 @@ table.pipeline-project-metrics tr td {
 }
 
 .user-access-role {
+  @include gl-px-3;
   display: inline-block;
   color: $gl-text-color-secondary;
   font-size: 12px;
   line-height: 20px;
-  padding: 0 $label-padding;
   border: 1px solid $border-color;
   border-radius: $label-border-radius;
   font-weight: $gl-font-weight-normal;
diff --git a/app/assets/stylesheets/pages/notes.scss b/app/assets/stylesheets/pages/notes.scss
index 6578b5ed337..e23ec25a2f3 100644
--- a/app/assets/stylesheets/pages/notes.scss
+++ b/app/assets/stylesheets/pages/notes.scss
@@ -801,7 +801,7 @@ $note-form-margin-left: 72px;
 }
 
 .note-role {
-  margin: 0 3px;
+  margin: 0 8px;
 }
 
 /**
@@ -892,6 +892,15 @@ $note-form-margin-left: 72px;
   outline: 0;
   transition: color $general-hover-transition-duration $general-hover-transition-curve;
 
+  &[disabled] {
+    padding: 0 8px !important;
+    box-shadow: none !important;
+
+    .gl-button-loading-indicator {
+      margin-right: 0 !important;
+    }
+  }
+
   &.is-disabled {
     cursor: default;
   }
@@ -899,16 +908,22 @@ $note-form-margin-left: 72px;
   &:not(.is-disabled) {
     &:hover,
     &:focus {
-      color: $green-600;
+      svg {
+        color: $green-600;
+      }
     }
   }
 
   &.is-active {
-    color: $green-600;
+    svg {
+      @include gl-text-green-500;
+    }
 
     &:hover,
     &:focus {
-      color: $green-700;
+      svg {
+        color: $green-700;
+      }
     }
   }
 
diff --git a/app/controllers/projects/alerting/notifications_controller.rb b/app/controllers/projects/alerting/notifications_controller.rb
index b7ea33e47b2..a3f4d784f25 100644
--- a/app/controllers/projects/alerting/notifications_controller.rb
+++ b/app/controllers/projects/alerting/notifications_controller.rb
@@ -46,8 +46,6 @@ module Projects
       end
 
       def integration
-        return unless Feature.enabled?(:multiple_http_integrations, project)
-
         AlertManagement::HttpIntegrationsFinder.new(
           project,
           endpoint_identifier: endpoint_identifier,
diff --git a/app/controllers/projects/avatars_controller.rb b/app/controllers/projects/avatars_controller.rb
index f228206032d..fb113df137f 100644
--- a/app/controllers/projects/avatars_controller.rb
+++ b/app/controllers/projects/avatars_controller.rb
@@ -3,6 +3,8 @@
 class Projects::AvatarsController < Projects::ApplicationController
   include SendsBlob
 
+  skip_before_action :default_cache_headers, only: :show
+
   before_action :authorize_admin_project!, only: [:destroy]
 
   feature_category :projects
diff --git a/app/controllers/projects/jobs_controller.rb b/app/controllers/projects/jobs_controller.rb
index 3ceb60a6aef..07e38c80291 100644
--- a/app/controllers/projects/jobs_controller.rb
+++ b/app/controllers/projects/jobs_controller.rb
@@ -14,6 +14,9 @@ class Projects::JobsController < Projects::ApplicationController
   before_action :verify_api_request!, only: :terminal_websocket_authorize
   before_action :authorize_create_proxy_build!, only: :proxy_websocket_authorize
   before_action :verify_proxy_request!, only: :proxy_websocket_authorize
+  before_action do
+    push_frontend_feature_flag(:ci_job_line_links, @project)
+  end
 
   layout 'project'
 
diff --git a/app/controllers/projects/raw_controller.rb b/app/controllers/projects/raw_controller.rb
index 49bc337d241..d8ba7e4f235 100644
--- a/app/controllers/projects/raw_controller.rb
+++ b/app/controllers/projects/raw_controller.rb
@@ -6,6 +6,8 @@ class Projects::RawController < Projects::ApplicationController
   include SendsBlob
   include StaticObjectExternalStorage
 
+  skip_before_action :default_cache_headers, only: :show
+
   prepend_before_action(only: [:show]) { authenticate_sessionless_user!(:blob) }
 
   before_action :require_non_empty_project
diff --git a/app/controllers/projects/repositories_controller.rb b/app/controllers/projects/repositories_controller.rb
index ba3ab52e3af..fb6a09cff65 100644
--- a/app/controllers/projects/repositories_controller.rb
+++ b/app/controllers/projects/repositories_controller.rb
@@ -8,6 +8,8 @@ class Projects::RepositoriesController < Projects::ApplicationController
 
   prepend_before_action(only: [:archive]) { authenticate_sessionless_user!(:archive) }
 
+  skip_before_action :default_cache_headers, only: :archive
+
   # Authorize
   before_action :require_non_empty_project, except: :create
   before_action :archive_rate_limit!, only: :archive
diff --git a/app/graphql/resolvers/alert_management/integrations_resolver.rb b/app/graphql/resolvers/alert_management/integrations_resolver.rb
index ff31d933bf2..4d1fe367277 100644
--- a/app/graphql/resolvers/alert_management/integrations_resolver.rb
+++ b/app/graphql/resolvers/alert_management/integrations_resolver.rb
@@ -8,8 +8,6 @@ module Resolvers
       type Types::AlertManagement::IntegrationType.connection_type, null: true
 
       def resolve(**args)
-        return [] unless Feature.enabled?(:multiple_http_integrations, project)
-
         http_integrations + prometheus_integrations
       end
 
diff --git a/app/graphql/types/issue_type.rb b/app/graphql/types/issue_type.rb
index e53fbfec624..7973cca24ba 100644
--- a/app/graphql/types/issue_type.rb
+++ b/app/graphql/types/issue_type.rb
@@ -75,7 +75,7 @@ module Types
           description: 'List of participants in the issue'
     field :emails_disabled, GraphQL::BOOLEAN_TYPE, null: false,
           method: :project_emails_disabled?,
-          description: 'Indicates if a project has email notifications disabled'
+          description: 'Indicates if a project has email notifications disabled: `true` if email notifications are disabled'
     field :subscribed, GraphQL::BOOLEAN_TYPE, method: :subscribed?, null: false, complexity: 5,
           description: 'Indicates the currently logged in user is subscribed to the issue'
     field :time_estimate, GraphQL::INT_TYPE, null: false,
diff --git a/app/services/alert_management/http_integrations/create_service.rb b/app/services/alert_management/http_integrations/create_service.rb
index 286b191d032..576e38c23aa 100644
--- a/app/services/alert_management/http_integrations/create_service.rb
+++ b/app/services/alert_management/http_integrations/create_service.rb
@@ -14,7 +14,7 @@ module AlertManagement
 
       def execute
         return error_no_permissions unless allowed?
-        return error_multiple_integrations unless creation_allowed? && Feature.enabled?(:multiple_http_integrations, project)
+        return error_multiple_integrations unless creation_allowed?
 
         integration = project.alert_management_http_integrations.create(params)
         return error_in_create(integration) unless integration.valid?
diff --git a/app/services/alert_management/http_integrations/destroy_service.rb b/app/services/alert_management/http_integrations/destroy_service.rb
index 208b2dc67e9..aeb3f6cb807 100644
--- a/app/services/alert_management/http_integrations/destroy_service.rb
+++ b/app/services/alert_management/http_integrations/destroy_service.rb
@@ -12,7 +12,6 @@ module AlertManagement
 
       def execute
         return error_no_permissions unless allowed?
-        return error_multiple_integrations unless Feature.enabled?(:multiple_http_integrations, integration.project)
 
         if integration.destroy
           success
@@ -40,10 +39,6 @@ module AlertManagement
       def error_no_permissions
         error(_('You have insufficient permissions to remove this HTTP integration'))
       end
-
-      def error_multiple_integrations
-        error(_('Removing integrations is not supported for this project'))
-      end
     end
   end
 end
diff --git a/app/services/alert_management/http_integrations/update_service.rb b/app/services/alert_management/http_integrations/update_service.rb
index b47bf966ebf..220c4e759f0 100644
--- a/app/services/alert_management/http_integrations/update_service.rb
+++ b/app/services/alert_management/http_integrations/update_service.rb
@@ -14,7 +14,6 @@ module AlertManagement
 
       def execute
         return error_no_permissions unless allowed?
-        return error_multiple_integrations unless Feature.enabled?(:multiple_http_integrations, integration.project)
 
         params[:token] = nil if params.delete(:regenerate_token)
 
@@ -44,10 +43,6 @@ module AlertManagement
       def error_no_permissions
         error(_('You have insufficient permissions to update this HTTP integration'))
       end
-
-      def error_multiple_integrations
-        error(_('Multiple HTTP integrations are not supported for this project'))
-      end
     end
   end
 end
diff --git a/app/services/projects/alerting/notify_service.rb b/app/services/projects/alerting/notify_service.rb
index b04a4962d25..ab8f53a3757 100644
--- a/app/services/projects/alerting/notify_service.rb
+++ b/app/services/projects/alerting/notify_service.rb
@@ -25,7 +25,6 @@ module Projects
       private
 
       attr_reader :integration
-      delegate :alerts_service, :alerts_service_activated?, to: :project
 
       def process_alert
         if alert.persisted?
@@ -115,19 +114,11 @@ module Projects
       end
 
       def active_integration?
-        if Feature.enabled?(:multiple_http_integrations, project)
-          return true if integration
-        end
-
-        alerts_service_activated?
+        integration&.active?
       end
 
       def valid_token?(token)
-        if Feature.enabled?(:multiple_http_integrations, project)
-          return token == integration.token if integration
-        end
-
-        token == alerts_service.token
+        token == integration.token
       end
 
       def bad_request
diff --git a/app/views/admin/application_settings/_package_registry.html.haml b/app/views/admin/application_settings/_package_registry.html.haml
index 257a90252cc..8c956a43e22 100644
--- a/app/views/admin/application_settings/_package_registry.html.haml
+++ b/app/views/admin/application_settings/_package_registry.html.haml
@@ -3,7 +3,7 @@
     .settings-header
       %h4
         = _('Package Registry')
-      %button.btn.btn-default.js-settings-toggle{ type: 'button' }
+      %button.btn.gl-button.btn-default.js-settings-toggle{ type: 'button' }
         = expanded_by_default? ? _('Collapse') : _('Expand')
       %p
         = _("Settings related to the use and experience of using GitLab's Package Registry.")
diff --git a/app/views/admin/application_settings/ci_cd.html.haml b/app/views/admin/application_settings/ci_cd.html.haml
index cdb69d33b12..b05e8621d07 100644
--- a/app/views/admin/application_settings/ci_cd.html.haml
+++ b/app/views/admin/application_settings/ci_cd.html.haml
@@ -17,7 +17,7 @@
   .settings-header
     %h4
       = _('Continuous Integration and Deployment')
-    %button.btn.btn-default.js-settings-toggle{ type: 'button' }
+    %button.btn.gl-button.btn-default.js-settings-toggle{ type: 'button' }
       = expanded_by_default? ? _('Collapse') : _('Expand')
     %p
       = _('Auto DevOps, runners and job artifacts')
@@ -33,7 +33,7 @@
     .settings-header
       %h4
         = _('Container Registry')
-      %button.btn.btn-default.js-settings-toggle{ type: 'button' }
+      %button.btn.gl-button.btn-default.js-settings-toggle{ type: 'button' }
         = expanded_by_default? ? _('Collapse') : _('Expand')
       %p
         = _('Various container registry settings.')
diff --git a/app/views/groups/group_members/index.html.haml b/app/views/groups/group_members/index.html.haml
index 66e082501bc..2a87b42ef13 100644
--- a/app/views/groups/group_members/index.html.haml
+++ b/app/views/groups/group_members/index.html.haml
@@ -3,7 +3,7 @@
 - show_invited_members = can_manage_members && @invited_members.exists?
 - show_access_requests = can_manage_members && @requesters.exists?
 - invited_active = params[:search_invited].present? || params[:invited_members_page].present?
-- vue_members_list_enabled = Feature.enabled?(:vue_group_members_list, @group)
+- vue_members_list_enabled = Feature.enabled?(:vue_group_members_list, @group, default_enabled: true)
 - current_user_is_group_owner = @group && @group.has_owner?(current_user)
 
 - form_item_label_css_class = 'label-bold gl-mr-2 gl-mb-0 gl-py-2 align-self-md-center'
diff --git a/app/views/projects/pipelines/_with_tabs.html.haml b/app/views/projects/pipelines/_with_tabs.html.haml
index 40a52f76641..8955b568741 100644
--- a/app/views/projects/pipelines/_with_tabs.html.haml
+++ b/app/views/projects/pipelines/_with_tabs.html.haml
@@ -9,7 +9,7 @@
     - if dag_pipeline_tab_enabled
       %li.js-dag-tab-link
         = link_to dag_project_pipeline_path(@project, @pipeline), data: { target: '#js-tab-dag', action: 'dag', toggle: 'tab' }, class: 'dag-tab' do
-          = _('DAG')
+          = _('Needs')
     %li.js-builds-tab-link
       = link_to builds_project_pipeline_path(@project, @pipeline), data: { target: '#js-tab-builds', action: 'builds', toggle: 'tab' }, class: 'builds-tab' do
         = _('Jobs')
@@ -81,7 +81,7 @@
 
   - if dag_pipeline_tab_enabled
     #js-tab-dag.tab-pane
-      #js-pipeline-dag-vue{ data: { pipeline_project_path: @project.full_path, pipeline_iid: @pipeline.iid, empty_svg_path: image_path('illustrations/empty-state/empty-dag-md.svg'), dag_doc_path: help_page_path('ci/yaml/README.md', anchor: 'needs')} }
+      #js-pipeline-dag-vue{ data: { pipeline_project_path: @project.full_path, pipeline_iid: @pipeline.iid, empty_svg_path: image_path('illustrations/empty-state/empty-dag-md.svg'), about_dag_doc_path: help_page_path('ci/directed_acyclic_graph/index.md'), dag_doc_path: help_page_path('ci/yaml/README.md', anchor: 'needs')} }
 
   #js-tab-tests.tab-pane
     #js-pipeline-tests-detail{ data: { summary_endpoint: summary_project_pipeline_tests_path(@project, @pipeline, format: :json),
diff --git a/app/views/users/_overview.html.haml b/app/views/users/_overview.html.haml
index 294af53e35b..1367d80cf54 100644
--- a/app/views/users/_overview.html.haml
+++ b/app/views/users/_overview.html.haml
@@ -1,12 +1,14 @@
 - activity_pane_class = Feature.enabled?(:security_auto_fix) && @user.bot? ? "col-12" : "col-md-12 col-lg-6"
 
-.row
-  .col-12
-    .calendar-block.gl-mt-3.gl-mb-3
-      .user-calendar.d-none.d-sm-block{ data: { calendar_path: user_calendar_path(@user, :json), calendar_activities_path: user_calendar_activities_path, utc_offset: Time.zone.utc_offset } }
-        %h4.center.light
-          .spinner.spinner-md
-      .user-calendar-activities.d-none.d-sm-block
+.row.d-none.d-sm-flex
+  .col-12.calendar-block.gl-my-3
+    .user-calendar.light{ data: { calendar_path: user_calendar_path(@user, :json), calendar_activities_path: user_calendar_activities_path, utc_offset: Time.zone.utc_offset } }
+      .spinner.spinner-md.gl-my-8
+      .user-calendar-error.invisible
+        = _('There was an error loading users activity calendar.')
+        %a.js-retry-load{ href: '#' }
+          = s_('UserProfile|Retry')
+    .user-calendar-activities
 .row
   %div{ class: activity_pane_class }
     - if can?(current_user, :read_cross_project)
diff --git a/changelogs/unreleased/235436-add-header-fuzzing-docs.yml b/changelogs/unreleased/235436-add-header-fuzzing-docs.yml
new file mode 100644
index 00000000000..bef6992fb6a
--- /dev/null
+++ b/changelogs/unreleased/235436-add-header-fuzzing-docs.yml
@@ -0,0 +1,5 @@
+---
+title: Support fuzzing HTTP headers with API Fuzzing
+merge_request: 47727
+author:
+type: added
diff --git a/changelogs/unreleased/241194-enable-vue_group_members_list-ff-by-default.yml b/changelogs/unreleased/241194-enable-vue_group_members_list-ff-by-default.yml
new file mode 100644
index 00000000000..e5b490c0cca
--- /dev/null
+++ b/changelogs/unreleased/241194-enable-vue_group_members_list-ff-by-default.yml
@@ -0,0 +1,5 @@
+---
+title: Enable `vue_group_members_list` feature flag by default
+merge_request: 47427
+author:
+type: changed
diff --git a/changelogs/unreleased/243607-background-migration-for-setting-jira-tracker-data-deployment-type.yml b/changelogs/unreleased/243607-background-migration-for-setting-jira-tracker-data-deployment-type.yml
new file mode 100644
index 00000000000..12f9de6cfb3
--- /dev/null
+++ b/changelogs/unreleased/243607-background-migration-for-setting-jira-tracker-data-deployment-type.yml
@@ -0,0 +1,5 @@
+---
+title: Background migration for setting Jira tracker data deployment type
+merge_request: 46368
+author:
+type: changed
diff --git a/changelogs/unreleased/249145-update-blank-dag.yml b/changelogs/unreleased/249145-update-blank-dag.yml
new file mode 100644
index 00000000000..73a77fd2620
--- /dev/null
+++ b/changelogs/unreleased/249145-update-blank-dag.yml
@@ -0,0 +1,5 @@
+---
+title: Add new text and tab name for DAG
+merge_request: 47415
+author:
+type: changed
diff --git a/changelogs/unreleased/283924-user-profile.yml b/changelogs/unreleased/283924-user-profile.yml
new file mode 100644
index 00000000000..e674944c43a
--- /dev/null
+++ b/changelogs/unreleased/283924-user-profile.yml
@@ -0,0 +1,5 @@
+---
+title: Refactor and UI-polish around activity calendar on user profile
+merge_request: 47797
+author: Takuya Noguchi
+type: fixed
diff --git a/changelogs/unreleased/cache-raw-endpoints-for-logged-in-users.yml b/changelogs/unreleased/cache-raw-endpoints-for-logged-in-users.yml
new file mode 100644
index 00000000000..2c3b7863b7b
--- /dev/null
+++ b/changelogs/unreleased/cache-raw-endpoints-for-logged-in-users.yml
@@ -0,0 +1,5 @@
+---
+title: Enable HTTP caching of repository raw, archive, and avatar endpoints
+merge_request: 47430
+author:
+type: performance
diff --git a/changelogs/unreleased/sy-ff-removal-multiple-http-endpoints.yml b/changelogs/unreleased/sy-ff-removal-multiple-http-endpoints.yml
new file mode 100644
index 00000000000..837ae024b7e
--- /dev/null
+++ b/changelogs/unreleased/sy-ff-removal-multiple-http-endpoints.yml
@@ -0,0 +1,5 @@
+---
+title: Expose GraphQL API for managing HTTP alerting intergations
+merge_request: 47687
+author:
+type: added
diff --git a/config/feature_flags/development/multiple_http_integrations.yml b/config/feature_flags/development/ci_job_line_links.yml
similarity index 69%
rename from config/feature_flags/development/multiple_http_integrations.yml
rename to config/feature_flags/development/ci_job_line_links.yml
index 5bd0d4ea038..458c0afb6d2 100644
--- a/config/feature_flags/development/multiple_http_integrations.yml
+++ b/config/feature_flags/development/ci_job_line_links.yml
@@ -1,8 +1,8 @@
 ---
-name: multiple_http_integrations
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/44485
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/255509
+name: ci_job_line_links
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/47532
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/281727
 milestone: '13.6'
 type: development
-group: group::health
+group: group::continuous integration
 default_enabled: false
diff --git a/config/feature_flags/development/usage_data_static_site_editor_commits.yml b/config/feature_flags/development/usage_data_static_site_editor_commits.yml
deleted file mode 100644
index d933413bb56..00000000000
--- a/config/feature_flags/development/usage_data_static_site_editor_commits.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: usage_data_static_site_editor_commits
-introduced_by_url:
-rollout_issue_url:
-milestone:
-type: development
-group: group::static_site_editor
-default_enabled: false
diff --git a/config/feature_flags/development/usage_data_static_site_editor_merge_requests.yml b/config/feature_flags/development/usage_data_static_site_editor_merge_requests.yml
deleted file mode 100644
index e6a647fe44d..00000000000
--- a/config/feature_flags/development/usage_data_static_site_editor_merge_requests.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: usage_data_static_site_editor_merge_requests
-introduced_by_url:
-rollout_issue_url:
-milestone:
-type: development
-group: group::static_site_editor
-default_enabled: false
diff --git a/config/feature_flags/development/vue_group_members_list.yml b/config/feature_flags/development/vue_group_members_list.yml
index 4125968fd51..d864f904992 100644
--- a/config/feature_flags/development/vue_group_members_list.yml
+++ b/config/feature_flags/development/vue_group_members_list.yml
@@ -5,4 +5,4 @@ rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/241194
 milestone: '13.4'
 type: development
 group: group::access
-default_enabled: false
+default_enabled: true
diff --git a/db/post_migrate/20201028182809_backfill_jira_tracker_deployment_type2.rb b/db/post_migrate/20201028182809_backfill_jira_tracker_deployment_type2.rb
new file mode 100644
index 00000000000..63a0554433c
--- /dev/null
+++ b/db/post_migrate/20201028182809_backfill_jira_tracker_deployment_type2.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+class BackfillJiraTrackerDeploymentType2 < ActiveRecord::Migration[6.0]
+  include Gitlab::Database::MigrationHelpers
+
+  DOWNTIME = false
+
+  MIGRATION = 'BackfillJiraTrackerDeploymentType2'
+  DELAY_INTERVAL = 2.minutes
+  BATCH_SIZE = 1000
+
+  disable_ddl_transaction!
+
+  class JiraTrackerData < ActiveRecord::Base
+    include EachBatch
+
+    self.table_name = 'jira_tracker_data'
+  end
+
+  def up
+    queue_background_migration_jobs_by_range_at_intervals(
+      JiraTrackerData.where(deployment_type: 0),
+      MIGRATION,
+      DELAY_INTERVAL,
+      batch_size: BATCH_SIZE,
+      track_jobs: true)
+  end
+
+  def down
+    # NOOP
+  end
+end
diff --git a/db/schema_migrations/20201028182809 b/db/schema_migrations/20201028182809
new file mode 100644
index 00000000000..6747bd58d72
--- /dev/null
+++ b/db/schema_migrations/20201028182809
@@ -0,0 +1 @@
+c51bf825045ef80714f3903f25321785883da3d612725f6fa67ec3ddd12d5808
\ No newline at end of file
diff --git a/doc/administration/geo/replication/configuration.md b/doc/administration/geo/replication/configuration.md
index 52f6e556dc4..43a422c4bc3 100644
--- a/doc/administration/geo/replication/configuration.md
+++ b/doc/administration/geo/replication/configuration.md
@@ -232,16 +232,7 @@ that the **secondary** node can act on those notifications immediately.
 Be sure the _secondary_ node is running and accessible. You can sign in to the
 _secondary_ node with the same credentials as were used with the _primary_ node.
 
-### Step 4. Enabling Hashed Storage
-
-Using Hashed Storage significantly improves Geo replication. Project and group
-renames no longer require synchronization between nodes.
-
-1. Visit the **primary** node's **Admin Area > Settings > Repository**
-   (`/admin/application_settings/repository`) in your browser.
-1. In the **Repository storage** section, check **Use hashed storage paths for newly created and renamed projects**.
-
-### Step 5. (Optional) Configuring the **secondary** node to trust the **primary** node
+### Step 4. (Optional) Configuring the **secondary** node to trust the **primary** node
 
 You can safely skip this step if your **primary** node uses a CA-issued HTTPS certificate.
 
@@ -251,14 +242,16 @@ certificate from the **primary** node and follow
 [these instructions](https://docs.gitlab.com/omnibus/settings/ssl.html)
 on the **secondary** node.
 
-### Step 6. Enable Git access over HTTP/HTTPS
+### Step 5. Enable Git access over HTTP/HTTPS
 
 Geo synchronizes repositories over HTTP/HTTPS, and therefore requires this clone
-method to be enabled. Navigate to **Admin Area > Settings**
-(`/admin/application_settings/general`) on the **primary** node, and set
-`Enabled Git access protocols` to `Both SSH and HTTP(S)` or `Only HTTP(S)`.
+method to be enabled. This is enabled by default, but if converting an existing node to Geo it should be checked:
 
-### Step 7. Verify proper functioning of the **secondary** node
+1. Navigate to **Admin Area > Settings** (`/admin/application_settings/general`) on the **primary** node.
+1. Expand "Visibility and access controls".
+1. Ensure "Enabled Git access protocols" is set to either "Both SSH and HTTP(S)" or "Only HTTP(S)".
+
+### Step 6. Verify proper functioning of the **secondary** node
 
 Your **secondary** node is now configured!
 
diff --git a/doc/administration/geo/replication/version_specific_updates.md b/doc/administration/geo/replication/version_specific_updates.md
index 55e91029566..9ea5283812e 100644
--- a/doc/administration/geo/replication/version_specific_updates.md
+++ b/doc/administration/geo/replication/version_specific_updates.md
@@ -325,7 +325,7 @@ In GitLab 10.2, synchronizing secondaries over SSH was deprecated. In 10.3,
 support is removed entirely. All installations will switch to the HTTP/HTTPS
 cloning method instead. Before updating, ensure that all your Geo nodes are
 configured to use this method and that it works for your installation. In
-particular, ensure that [Git access over HTTP/HTTPS is enabled](configuration.md#step-6-enable-git-access-over-httphttps).
+particular, ensure that [Git access over HTTP/HTTPS is enabled](configuration.md#step-5-enable-git-access-over-httphttps).
 
 Synchronizing repositories over the public Internet using HTTP is insecure, so
 you should ensure that you have HTTPS configured before updating. Note that
diff --git a/doc/api/graphql/reference/gitlab_schema.graphql b/doc/api/graphql/reference/gitlab_schema.graphql
index 5bb1dc0eff6..a88cf665eba 100644
--- a/doc/api/graphql/reference/gitlab_schema.graphql
+++ b/doc/api/graphql/reference/gitlab_schema.graphql
@@ -7646,7 +7646,7 @@ type EpicIssue implements CurrentUserTodos & Noteable {
   dueDate: Time
 
   """
-  Indicates if a project has email notifications disabled
+  Indicates if a project has email notifications disabled: `true` if email notifications are disabled
   """
   emailsDisabled: Boolean!
 
@@ -10185,7 +10185,7 @@ type Issue implements CurrentUserTodos & Noteable {
   dueDate: Time
 
   """
-  Indicates if a project has email notifications disabled
+  Indicates if a project has email notifications disabled: `true` if email notifications are disabled
   """
   emailsDisabled: Boolean!
 
diff --git a/doc/api/graphql/reference/gitlab_schema.json b/doc/api/graphql/reference/gitlab_schema.json
index 6614396da72..7684b9dec3c 100644
--- a/doc/api/graphql/reference/gitlab_schema.json
+++ b/doc/api/graphql/reference/gitlab_schema.json
@@ -21191,7 +21191,7 @@
             },
             {
               "name": "emailsDisabled",
-              "description": "Indicates if a project has email notifications disabled",
+              "description": "Indicates if a project has email notifications disabled: `true` if email notifications are disabled",
               "args": [
 
               ],
@@ -27886,7 +27886,7 @@
             },
             {
               "name": "emailsDisabled",
-              "description": "Indicates if a project has email notifications disabled",
+              "description": "Indicates if a project has email notifications disabled: `true` if email notifications are disabled",
               "args": [
 
               ],
diff --git a/doc/api/graphql/reference/index.md b/doc/api/graphql/reference/index.md
index 34d30e8c7f1..71e4479eafb 100644
--- a/doc/api/graphql/reference/index.md
+++ b/doc/api/graphql/reference/index.md
@@ -1272,7 +1272,7 @@ Relationship between an epic and an issue.
 | `discussions` | DiscussionConnection! | All discussions on this noteable |
 | `downvotes` | Int! | Number of downvotes the issue has received |
 | `dueDate` | Time | Due date of the issue |
-| `emailsDisabled` | Boolean! | Indicates if a project has email notifications disabled |
+| `emailsDisabled` | Boolean! | Indicates if a project has email notifications disabled: `true` if email notifications are disabled |
 | `epic` | Epic | Epic to which this issue belongs |
 | `epicIssueId` | ID! | ID of the epic-issue relation |
 | `healthStatus` | HealthStatus | Current health status. Returns null if `save_issuable_health_status` feature flag is disabled. |
@@ -1541,7 +1541,7 @@ Represents a recorded measurement (object count) for the Admins.
 | `discussions` | DiscussionConnection! | All discussions on this noteable |
 | `downvotes` | Int! | Number of downvotes the issue has received |
 | `dueDate` | Time | Due date of the issue |
-| `emailsDisabled` | Boolean! | Indicates if a project has email notifications disabled |
+| `emailsDisabled` | Boolean! | Indicates if a project has email notifications disabled: `true` if email notifications are disabled |
 | `epic` | Epic | Epic to which this issue belongs |
 | `healthStatus` | HealthStatus | Current health status. Returns null if `save_issuable_health_status` feature flag is disabled. |
 | `humanTimeEstimate` | String | Human-readable time estimate of the issue |
diff --git a/doc/ci/directed_acyclic_graph/index.md b/doc/ci/directed_acyclic_graph/index.md
index 19da0496f8a..04f27c584b7 100644
--- a/doc/ci/directed_acyclic_graph/index.md
+++ b/doc/ci/directed_acyclic_graph/index.md
@@ -79,26 +79,28 @@ are certain use cases that you may need to work around. For more information:
 - [`needs` requirements and limitations](../yaml/README.md#requirements-and-limitations).
 - Related epic [tracking planned improvements](https://gitlab.com/groups/gitlab-org/-/epics/1716).
 
-## DAG Visualization
+## Needs Visualization
 
 > - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/215517) in GitLab 13.1 as a [Beta feature](https://about.gitlab.com/handbook/product/#beta).
 > - It was deployed behind a feature flag, disabled by default.
 > - It became [enabled by default](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/36802) in 13.2.
 > - It became a [standard feature](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/38517) in 13.3.
 > - It's enabled on GitLab.com.
-> - For GitLab self-managed instances, GitLab administrators can opt to [disable it](#enable-or-disable-dag-visualization).
+> - For GitLab self-managed instances, GitLab administrators can opt to [disable it](#enable-or-disable-needs-visualization).
 
-The DAG visualization makes it easier to visualize the relationships between dependent jobs in a DAG. This graph will display all the jobs in a pipeline that need or are needed by other jobs. Jobs with no relationships are not displayed in this view.
+The needs visualization makes it easier to visualize the relationships between dependent jobs in a DAG. This graph will display all the jobs in a pipeline that need or are needed by other jobs. Jobs with no relationships are not displayed in this view.
 
-![DAG visualization example](img/dag_graph_example_v13_1.png)
+To see the needs visualization, click on the **Needs** tab when viewing a pipeline that uses the `needs:` keyword.
+
+![Needs visualization example](img/dag_graph_example_v13_1.png)
 
 Clicking a node will highlight all the job paths it depends on.
 
-![DAG visualization with path highlight](img/dag_graph_example_clicked_v13_1.png)
+![Needs visualization with path highlight](img/dag_graph_example_clicked_v13_1.png)
 
-### Enable or disable DAG Visualization **(CORE ONLY)**
+### Enable or disable Needs Visualization **(CORE ONLY)**
 
-DAG Visualization is deployed behind a feature flag that is **enabled by default**.
+The needs visualization is deployed behind a feature flag that is **enabled by default**.
 [GitLab administrators with access to the GitLab Rails console](../../administration/feature_flags.md)
 can opt to disable it for your instance:
 
diff --git a/doc/development/README.md b/doc/development/README.md
index 2da047dbf96..75ea6ae5f3b 100644
--- a/doc/development/README.md
+++ b/doc/development/README.md
@@ -134,17 +134,20 @@ from:
 - [Feature categorization](feature_categorization/index.md)
 - [Wikis development guide](wikis.md)
 - [Newlines style guide](newlines_styleguide.md)
+- [Image scaling guide](image_scaling.md)
 
 ## Performance guides
 
 - [Instrumentation](instrumentation.md) for Ruby code running in production
-  environments
+  environments.
 - [Performance guidelines](performance.md) for writing code, benchmarks, and
-  certain patterns to avoid
+  certain patterns to avoid.
 - [Merge request performance guidelines](merge_request_performance_guidelines.md)
   for ensuring merge requests do not negatively impact GitLab performance
 - [Profiling](profiling.md) a URL, measuring performance using Sherlock, or
-  tracking down N+1 queries using Bullet
+  tracking down N+1 queries using Bullet.
+- [Cached queries guidelines](cached_queries.md), for tracking down N+1 queries masked by query caching, memory profiling and why should
+  we avoid cached queries.
 
 ## Database guides
 
diff --git a/doc/development/cached_queries.md b/doc/development/cached_queries.md
new file mode 100644
index 00000000000..812e5f88754
--- /dev/null
+++ b/doc/development/cached_queries.md
@@ -0,0 +1,139 @@
+# Cached queries guidelines
+
+Rails provides an [SQL query cache](https://guides.rubyonrails.org/caching_with_rails.html#sql-caching), 
+used to cache the results of database queries for the duration of the request. 
+
+If Rails encounters the same query again for that request,
+it will use the cached result set as opposed to running the query against the database again.
+
+The query results are only cached for the duration of that single request, it does not persist across multiple requests.
+
+## Why cached queries are considered bad
+
+The cached queries help with reducing DB load, but they still:
+
+- Consume memory.
+- Require as to re-instantiate each `ActiveRecord` object.
+- Require as to re-instantiate each relation of the object.
+- Make us spend additional CPU-cycles to look into a list of cached queries.
+ 
+The Cached SQL queries are cheaper, but they are not cheap at all from `memory` perspective. 
+They could mask [N+1 query problem](https://guides.rubyonrails.org/active_record_querying.html#eager-loading-associations),
+so we should threat them the same way we threat regular N+1 queries.
+
+In case of N+1 queries, masked with cached queries, we are executing the same query N times.
+It will not hit the database N times, it will return the cached results instead.
+This is still expensive since we need to re-initialize objects each time, and this is CPU/Memory expensive.
+Instead, we should use the same in-memory objects, if possible.
+
+When we introduce a new feature, we should avoid N+1 problems,
+minimize the [query count](merge_request_performance_guidelines.md#query-counts), and pay special attention that [cached
+queries](merge_request_performance_guidelines.md#cached-queries) are not masking N+1 problems. 
+
+## How to detect
+
+### Detect potential offenders by using Kibana
+
+On GitLab.com, we are logging entries with the number of executed cached queries in the
+`pubsub-redis-inf-gprd*` index with the [`db_cached_count`](https://log.gprd.gitlab.net/goto/77d18d80ad84c5df1bf1da5c2cd35b82).
+We can filter endpoints that have a large number of executed cached queries. For example, if we encounter an endpoint
+that has 100+ `db_cached_count`, this could indicate that there is an N+1 problem masked with cached queries.
+We should probably investigate this endpoint further, to check if we are executing duplicated cached queries.
+
+For more cached queries Kibana visualizations see [this issue](https://gitlab.com/gitlab-org/gitlab/-/issues/259007).
+
+### Inspect suspicious endpoint using Performance Bar
+
+When building features, you could use the [performance bar](../administration/monitoring/performance/performance_bar.md)
+to list database queries, which will include cached queries as well. The performance bar will show a warning
+when threshold of total executed queries (including cached ones) has exceeded 100 queries.
+
+## What to look for
+
+Using [Kibana](cached_queries.md#detect-potential-offenders-by-using-kibana), you can look for a large number
+of executed cached queries. End-points with large number of `db_cached_count` could indicate that there
+are probably a lot of duplicated cached queries, which often indicates a masked N+1 problem.
+
+When you investigate specific endpoint, you could use
+the [performance bar](cached_queries.md#inspect-suspicious-endpoint-using-performance-bar).
+If you see a lot of similar queries, this often indicates an N+1 query issue (or a similar kind of query batching problem).
+If you see same cached query executed multiple times, this often indicates a masked N+1 query problem.
+
+For example, let's say you wanted to debug `GroupMembers` page. 
+
+In the left corner of the performance bar you could see **Database queries** showing the total number of database queries
+and the number of executed cached queries:
+
+![Performance Bar Database Queries](img/performance_bar_members_page.png)
+
+We can see that there are 55 cached queries. By clicking on the number, a modal window with more details is shown.
+Cached queries are marked with the `cached` label, so they are easy to spot. We can see that there are multiple duplicated
+cached queries:
+
+![Performance Bar Cached Queries Modal](img/performance_bar_cached_queries.png)
+
+If we click on `...` for one of them, it will expand the actual stack trace:
+
+```shell
+[
+  "app/models/group.rb:305:in `has_owner?'",
+  "ee/app/views/shared/members/ee/_license_badge.html.haml:1",
+  "app/helpers/application_helper.rb:19:in `render_if_exists'",
+  "app/views/shared/members/_member.html.haml:31",
+  "app/views/groups/group_members/index.html.haml:75",
+  "app/controllers/application_controller.rb:134:in `render'",
+  "ee/lib/gitlab/ip_address_state.rb:10:in `with'",
+  "ee/app/controllers/ee/application_controller.rb:44:in `set_current_ip_address'",
+  "app/controllers/application_controller.rb:493:in `set_current_admin'",
+  "lib/gitlab/session.rb:11:in `with_session'",
+  "app/controllers/application_controller.rb:484:in `set_session_storage'",
+  "app/controllers/application_controller.rb:478:in `set_locale'",
+  "lib/gitlab/error_tracking.rb:52:in `with_context'",
+  "app/controllers/application_controller.rb:543:in `sentry_context'",
+  "app/controllers/application_controller.rb:471:in `block in set_current_context'",
+  "lib/gitlab/application_context.rb:54:in `block in use'",
+  "lib/gitlab/application_context.rb:54:in `use'",
+  "lib/gitlab/application_context.rb:21:in `with_context'",
+  "app/controllers/application_controller.rb:463:in `set_current_context'",
+  "lib/gitlab/jira/middleware.rb:19:in `call'"
+]
+```
+
+The stack trace, shows us that we obviously have an N+1 problem, since we are repeatably executing for each group member:
+
+```ruby
+group.has_owner?(current_user)
+```
+
+This is easily solvable by extracting this check, above the loop.
+
+After [the fix](https://gitlab.com/gitlab-org/gitlab/-/issues/231468), we now have:
+
+![Performance Bar Fixed Cached Queries](img/performance_bar_fixed_cached_queries.png)
+
+## How to measure the impact of the change
+
+We can use the [memory profiler](performance.md#using-memory-profiler) to profile our code. 
+For the previous example, we could wrap the profiler around the `Groups::GroupMembersController#index` action.
+
+We had:
+
+- Total allocated: 7133601 bytes (84858 objects)
+- Total retained: 757595 bytes (6070 objects)
+- `db_count`: 144
+- `db_cached_count`: 55
+- `db_duration`: 303ms
+
+After the fix, we can see that we have reduced the allocated memory as well as the number of cached queries and improved execution time:
+
+- Total allocated: 5313899 bytes (65290 objects), 1810KB (25%) less
+- Total retained: 685593 bytes (5278 objects), 72KB (9%) less
+- `db_count`: 95 (34% less)
+- `db_cached_count`: 6 (89% less)
+- `db_duration`: 162ms (87% faster)
+
+## See also
+
+- [Metrics that would help us detect the potential N+1 Cached SQL calls](https://gitlab.com/gitlab-org/gitlab/-/issues/259007)
+- [Merge Request performance guidelines for cached queries](merge_request_performance_guidelines.md#cached-queries)
+- [Improvements for biggest offenders](https://gitlab.com/groups/gitlab-org/-/epics/4508)
diff --git a/doc/development/database/index.md b/doc/development/database/index.md
index 120e83f3bbc..617a1c5de18 100644
--- a/doc/development/database/index.md
+++ b/doc/development/database/index.md
@@ -63,3 +63,7 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 - [Database case study: Filtering by label](../filtering_by_label.md)
 - [Database case study: Namespaces storage statistics](../namespaces_storage_statistics.md)
+
+## Miscellaneous
+
+- [Maintenance operations](maintenance_operations.md)
diff --git a/doc/development/database/maintenance_operations.md b/doc/development/database/maintenance_operations.md
new file mode 100644
index 00000000000..c84ec31471e
--- /dev/null
+++ b/doc/development/database/maintenance_operations.md
@@ -0,0 +1,46 @@
+---
+stage: Enablement
+group: Database
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
+---
+
+# Maintenance operations
+
+This page details various database related operations that may relate to development.
+
+## Disabling an index
+
+There are certain situations in which you might want to disable an index before removing it:
+
+- The index is on a large table and rebuilding it in the case of a revert would take a long time.
+- It is uncertain whether or not the index is being used in ways that are not fully visible.
+
+To disable an index before removing it:
+
+1. Open a [production infrastructure issue](https://gitlab.com/gitlab-com/gl-infra/production/-/issues/new)
+and use the "Production Change" template.
+1. Inform the database team in the issue `@gl-database` or in Slack `#database`.
+1. Add a step to verify the index is used (this would likely be an `EXPLAIN` command known to use the index).
+1. Add the step to disable the index:
+
+   ```sql
+   UPDATE pg_index SET indisvalid = false WHERE indexrelid = 'index_issues_on_foo'::regclass;
+   ```
+
+1. Add a step to verify the index is invalid (this would likely be the same as used to verify before disabling the index).
+1. Verify the index is invalid on replicas:
+
+   ```sql
+   SELECT indisvalid FROM pg_index WHERE indexrelid = 'index_issues_on_foo'::regclass;
+   ```
+
+1. Add steps for rolling back the invalidation:
+   1. Rollback the index invalidation
+
+      ```sql
+      UPDATE pg_index SET indisvalid = true WHERE indexrelid = 'index_issues_on_foo'::regclass;
+      ```
+
+   1. Verify the index is being used again.
+
+See this [example infrastructure issue](https://gitlab.com/gitlab-com/gl-infra/production/-/issues/2795) for reference.
diff --git a/doc/development/fe_guide/droplab/droplab.md b/doc/development/fe_guide/droplab/droplab.md
index 6648ecf4dbf..fe0f07b3019 100644
--- a/doc/development/fe_guide/droplab/droplab.md
+++ b/doc/development/fe_guide/droplab/droplab.md
@@ -10,19 +10,20 @@ A generic dropdown for all of your custom dropdown needs.
 
 ## Usage
 
-DropLab can be used by simply adding a `data-dropdown-trigger` HTML attribute.
-This attribute allows us to find the "trigger" _(toggle)_ for the dropdown,
-whether that is a button, link or input.
+DropLab can be used by adding a `data-dropdown-trigger` HTML attribute. This
+attribute allows us to find the "trigger" _(toggle)_ for the dropdown, whether
+it's a button, link or input.
 
-The value of the `data-dropdown-trigger` should be a CSS selector that
-DropLab can use to find the trigger's dropdown list.
+The value of the `data-dropdown-trigger` should be a CSS selector that DropLab
+can use to find the trigger's dropdown list.
 
 You should also add the `data-dropdown` attribute to declare the dropdown list.
 The value is irrelevant.
 
-The DropLab class has no side effects, so you must always call `.init` when
-the DOM is ready. `DropLab.prototype.init` takes the same arguments as `DropLab.prototype.addHook`.
-If you do not provide any arguments, it will globally query and instantiate all droplab compatible dropdowns.
+The DropLab class has no side effects, so you must always call `.init` when the
+DOM is ready. `DropLab.prototype.init` takes the same arguments as `DropLab.prototype.addHook`.
+If you don't provide any arguments, it will globally query and instantiate all
+DropLab-compatible dropdowns.
 
 ```html
 <a href="#" data-dropdown-trigger="#list">Toggle</a>
@@ -37,8 +38,8 @@ const droplab = new DropLab();
 droplab.init();
 ```
 
-As you can see, we have a "Toggle" link, that is declared as a trigger.
-It provides a selector to find the dropdown list it should control.
+As noted, we have a "Toggle" link that's declared as a trigger. It provides a
+selector to find the dropdown list it should control.
 
 ### Static data
 
@@ -60,8 +61,8 @@ droplab.init();
 
 ### Explicit instantiation
 
-You can pass the trigger and list elements as constructor arguments to return
-a non-global instance of DropLab using the `DropLab.prototype.init` method.
+You can pass the trigger and list elements as constructor arguments to return a
+non-global instance of DropLab using the `DropLab.prototype.init` method.
 
 ```html
 <a href="#" id="trigger" data-dropdown-trigger="#list">Toggle</a>
@@ -102,12 +103,13 @@ droplab.addHook(trigger, list);
 
 ### Dynamic data
 
-Adding `data-dynamic` to your dropdown element will enable dynamic list rendering.
+Adding `data-dynamic` to your dropdown element will enable dynamic list
+rendering.
 
-You can template a list item using the keys of the data object provided.
-Use the handlebars syntax `{{ value }}` to HTML escape the value.
-Use the `<%= value %>` syntax to simply interpolate the value.
-Use the `<%= value %>` syntax to evaluate the value.
+You can template a list item using the keys of the data object provided. Use the
+handlebars syntax `{{ value }}` to HTML escape the value. Use the `<%= value %>`
+syntax to interpolate the value. Use the `<%= value %>` syntax to evaluate the
+value.
 
 Passing an array of objects to `DropLab.prototype.addData` will render that data
 for all `data-dynamic` dropdown lists tracked by that DropLab instance.
@@ -132,8 +134,9 @@ droplab.init().addData([{
 }]);
 ```
 
-Alternatively, you can specify a specific dropdown to add this data to but passing
-the data as the second argument and the `id` of the trigger element as the first argument.
+Alternatively, you can specify a specific dropdown to add this data to by
+passing the data as the second argument and the `id` of the trigger element as
+the first argument.
 
 ```html
 <a href="#" data-dropdown-trigger="#list" id="trigger">Toggle</a>
@@ -155,7 +158,7 @@ droplab.init().addData('trigger', [{
 }]);
 ```
 
-This allows you to mix static and dynamic content with ease, even with one trigger.
+This allows you to mix static and dynamic content, even with one trigger.
 
 Note the use of scoping regarding the `data-dropdown` attribute to capture both
 dropdown lists, one of which is dynamic.
@@ -191,12 +194,13 @@ DropLab adds some CSS classes to help lower the barrier to integration.
 
 For example:
 
-- The `droplab-item-selected` CSS class is added to items that have been selected
-  either by a mouse click or by enter key selection.
+- The `droplab-item-selected` CSS class is added to items that have been
+  selected either by a mouse click or by enter key selection.
 - The `droplab-item-active` CSS class is added to items that have been selected
   using arrow key navigation.
-- You can add the `droplab-item-ignore` CSS class to any item that you do not want to be selectable. For example,
-  an `<li class="divider"></li>` list divider element that should not be interactive.
+- You can add the `droplab-item-ignore` CSS class to any item that you don't
+  want to be selectable. For example, an `<li class="divider"></li>` list
+  divider element that shouldn't be interactive.
 
 ## Internal events
 
@@ -204,26 +208,33 @@ DropLab uses some custom events to help lower the barrier to integration.
 
 For example:
 
-- The `click.dl` event is fired when an `li` list item has been clicked. It is also
-  fired when a list item has been selected with the keyboard. It is also fired when a
-  `HookButton` button is clicked (a registered `button` tag or `a` tag trigger).
-- The `input.dl` event is fired when a `HookInput` (a registered `input` tag trigger) triggers an `input` event.
-- The `mousedown.dl` event is fired when a `HookInput` triggers a `mousedown` event.
+- The `click.dl` event is fired when an `li` list item has been clicked. It's
+  also fired when a list item has been selected with the keyboard. It's also
+  fired when a `HookButton` button is clicked (a registered `button` tag or `a`
+  tag trigger).
+- The `input.dl` event is fired when a `HookInput` (a registered `input` tag
+  trigger) triggers an `input` event.
+- The `mousedown.dl` event is fired when a `HookInput` triggers a `mousedown`
+  event.
 - The `keyup.dl` event is fired when a `HookInput` triggers a `keyup` event.
 - The `keydown.dl` event is fired when a `HookInput` triggers a `keydown` event.
 
-These custom events add a `detail` object to the vanilla `Event` object that provides some potentially useful data.
+These custom events add a `detail` object to the vanilla `Event` object that
+provides some potentially useful data.
 
 ## Plugins
 
-Plugins are objects that are registered to be executed when a hook is added (when a droplab trigger and dropdown are instantiated).
+Plugins are objects that are registered to be executed when a hook is added (when
+a DropLab trigger and dropdown are instantiated).
 
-If no modules API is detected, the library will fall back as it does with `window.DropLab` and will add `window.DropLab.plugins.PluginName`.
+If no modules API is detected, the library will fall back as it does with
+`window.DropLab` and will add `window.DropLab.plugins.PluginName`.
 
 ### Usage
 
-To use plugins, you can pass them in an array as the third argument of `DropLab.prototype.init` or `DropLab.prototype.addHook`.
-Some plugins require configuration values, the config object can be passed as the fourth argument.
+To use plugins, you can pass them in an array as the third argument of
+`DropLab.prototype.init` or `DropLab.prototype.addHook`. Some plugins require
+configuration values; the config object can be passed as the fourth argument.
 
 ```html
 <a href="#" id="trigger" data-dropdown-trigger="#list">Toggle</a>
@@ -246,14 +257,13 @@ droplab.init(trigger, list, [droplabAjax], {
 
 ### Documentation
 
-- [Ajax plugin](plugins/ajax.md)
-- [Filter plugin](plugins/filter.md)
-- [InputSetter plugin](plugins/input_setter.md)
+Refer to the list of available [DropLab plugins](plugins/index.md) for
+information about their use.
 
 ### Development
 
-When plugins are initialised for a droplab trigger+dropdown, DropLab will
-call the plugins `init` function, so this must be implemented in the plugin.
+When plugins are initialised for a DropLab trigger+dropdown, DropLab calls the
+plugins' `init` function, so this must be implemented in the plugin.
 
 ```javascript
 class MyPlugin {
diff --git a/doc/development/fe_guide/droplab/plugins/ajax.md b/doc/development/fe_guide/droplab/plugins/ajax.md
index 88e83eb57e6..3ac876ad062 100644
--- a/doc/development/fe_guide/droplab/plugins/ajax.md
+++ b/doc/development/fe_guide/droplab/plugins/ajax.md
@@ -4,20 +4,22 @@ group: unassigned
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
-# Ajax
+# Ajax plugin
 
-`Ajax` is a droplab plugin that allows for retrieving and rendering list data from a server.
+`Ajax` is a DropLab plugin that allows for retrieving and rendering list data
+from a server.
 
 ## Usage
 
-Add the `Ajax` object to the plugins array of a `DropLab.prototype.init` or `DropLab.prototype.addHook` call.
+Add the `Ajax` object to the plugins array of a `DropLab.prototype.init` or
+`DropLab.prototype.addHook` call.
 
-`Ajax` requires 2 configuration values, the `endpoint` and `method`.
+`Ajax` requires 2 configuration values: the `endpoint` and `method`.
 
-- `endpoint` should be a URL to the request endpoint.
-- `method` should be `setData` or `addData`.
-- `setData` completely replaces the dropdown with the response data.
-- `addData` appends the response data to the current dropdown list.
+- `endpoint`: Should be a URL to the request endpoint.
+- `method`: Should be `setData` or `addData`.
+- `setData`: Completely replaces the dropdown with the response data.
+- `addData`: Appends the response data to the current dropdown list.
 
 ```html
 <a href="#" id="trigger" data-dropdown-trigger="#list">Toggle</a>
@@ -38,7 +40,7 @@ droplab.addHook(trigger, list, [Ajax], {
 });
 ```
 
-Optionally you can set `loadingTemplate` to a HTML string. This HTML string will
-replace the dropdown list while the request is pending.
+Optionally, you can set `loadingTemplate` to a HTML string. This HTML string
+replaces the dropdown list while the request is pending.
 
 Additionally, you can set `onError` to a function to catch any XHR errors.
diff --git a/doc/development/fe_guide/droplab/plugins/filter.md b/doc/development/fe_guide/droplab/plugins/filter.md
index f3b1ebc6d2b..9ab4946d21d 100644
--- a/doc/development/fe_guide/droplab/plugins/filter.md
+++ b/doc/development/fe_guide/droplab/plugins/filter.md
@@ -4,18 +4,19 @@ group: unassigned
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
-# Filter
+# Filter plugin
 
-`Filter` is a plugin that allows for filtering data that has been added
+`Filter` is a DropLab plugin that allows for filtering data that has been added
 to the dropdown using a simple fuzzy string search of an input value.
 
 ## Usage
 
-Add the `Filter` object to the plugins array of a `DropLab.prototype.init` or `DropLab.prototype.addHook` call.
+Add the `Filter` object to the plugins array of a `DropLab.prototype.init` or
+`DropLab.prototype.addHook` call.
 
-- `Filter` requires a configuration value for `template`.
-- `template` should be the key of the objects within your data array that you want to compare
-  to the user input string, for filtering.
+- `Filter`: Requires a configuration value for `template`.
+- `template`: Should be the key of the objects within your data array that you
+  want to compare to the user input string, for filtering.
 
 ```html
 <input href="#" id="trigger" data-dropdown-trigger="#list">
@@ -45,8 +46,10 @@ droplab.addData('trigger', [{
 }]);
 ```
 
-Above, the input string will be compared against the `test` key of the passed data objects.
+In the previous code, the input string is compared against the `test` key of the
+passed data objects.
 
-Optionally you can set `filterFunction` to a function. This function will be used instead
-of `Filter`'s built in string search. `filterFunction` is passed 2 arguments, the first
-is one of the data objects, the second is the current input value.
+Optionally you can set `filterFunction` to a function. This function will be
+used instead of `Filter`'s built-in string search. `filterFunction` is passed
+two arguments: the first is one of the data objects, and the second is the
+current input value.
diff --git a/doc/development/fe_guide/droplab/plugins/index.md b/doc/development/fe_guide/droplab/plugins/index.md
new file mode 100644
index 00000000000..d44670bfb3c
--- /dev/null
+++ b/doc/development/fe_guide/droplab/plugins/index.md
@@ -0,0 +1,14 @@
+---
+stage: none
+group: unassigned
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
+description: A list of DropLab plugins.
+---
+
+# DropLab plugins
+
+The following plugins are available for use with [DropLab](../droplab.md):
+
+- [Ajax plugin](ajax.md)
+- [Filter plugin](filter.md)
+- [InputSetter plugin](input_setter.md)
diff --git a/doc/development/fe_guide/droplab/plugins/input_setter.md b/doc/development/fe_guide/droplab/plugins/input_setter.md
index 41010944a1b..ab8a5cebd08 100644
--- a/doc/development/fe_guide/droplab/plugins/input_setter.md
+++ b/doc/development/fe_guide/droplab/plugins/input_setter.md
@@ -4,20 +4,23 @@ group: unassigned
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
-# InputSetter
+# InputSetter plugin
 
-`InputSetter` is a plugin that allows for updating DOM out of the scope of droplab when a list item is clicked.
+`InputSetter` is a DropLab plugin that allows for updating DOM out of the scope
+of DropLab when a list item is clicked.
 
 ## Usage
 
-Add the `InputSetter` object to the plugins array of a `DropLab.prototype.init` or `DropLab.prototype.addHook` call.
+Add the `InputSetter` object to the plugins array of a `DropLab.prototype.init`
+or `DropLab.prototype.addHook` call.
 
-- `InputSetter` requires a configuration value for `input` and `valueAttribute`.
-- `input` should be the DOM element that you want to manipulate.
-- `valueAttribute` should be a string that is the name of an attribute on your list items that is used to get the value
-  to update the `input` element with.
+- `InputSetter`: Requires a configuration value for `input` and `valueAttribute`.
+- `input`: The DOM element that you want to manipulate.
+- `valueAttribute`: A string that's the name of an attribute on your list items
+  that's used to get the value to update the `input` element with.
 
-You can also set the `InputSetter` configuration to an array of objects, which will allow you to update multiple elements.
+You can also set the `InputSetter` configuration to an array of objects, which
+allows you to update multiple elements.
 
 ```html
 <input id="input" value="">
@@ -58,9 +61,12 @@ droplab.addData('trigger', [{
 }]);
 ```
 
-Above, if the second list item was clicked, it would update the `#input` element
-to have a `value` of `1`, it would also update the `#div` element's `data-selected-id` to `1`.
+In the previous code, if the second list item was clicked, it would update the
+`#input` element to have a `value` of `1`, it would also update the `#div`
+element's `data-selected-id` to `1`.
 
-Optionally you can set `inputAttribute` to a string that is the name of an attribute on your `input` element that you want to update.
-If you do not provide an `inputAttribute`, `InputSetter` will update the `value` of the `input` element if it is an `INPUT` element,
-or the `textContent` of the `input` element if it is not an `INPUT` element.
+Optionally, you can set `inputAttribute` to a string that's the name of an
+attribute on your `input` element that you want to update. If you don't provide
+an `inputAttribute`, `InputSetter` will update the `value` of the `input`
+element if it's an `INPUT` element, or the `textContent` of the `input` element
+if it isn't an `INPUT` element.
diff --git a/doc/development/image_scaling.md b/doc/development/image_scaling.md
new file mode 100644
index 00000000000..270c2dbcae2
--- /dev/null
+++ b/doc/development/image_scaling.md
@@ -0,0 +1,96 @@
+---
+stage: none
+group: unassigned
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
+---
+
+# Image scaling guide
+
+This section contains a brief overview of GitLab's image scaler and how to work with it.
+
+For a general introduction to the history of image scaling at GitLab, you might be interested in
+[this Unfiltered blog post](https://about.gitlab.com/blog/2020/11/02/scaling-down-how-we-prototyped-an-image-scaler-at-gitlab/).
+
+## Why image scaling?
+
+Since version 13.6, GitLab scales down images on demand in order to reduce the page data footprint.
+This both reduces the amount of data "on the wire", but also helps with rendering performance,
+since the browser has less work to do.
+
+## When do we scale images?
+
+Generally, the image scaler is triggered whenever a client requests an image resource by adding
+the `width` parameter to the query string. However, we only scale images of certain kinds and formats.
+Whether we allow an image to be rescaled or not is decided by combination of hard-coded rules and configuration settings.
+
+The hard-coded rules only permit:
+
+- [Project, group and user avatars](https://gitlab.com/gitlab-org/gitlab/-/blob/fd08748862a5fe5c25b919079858146ea85843ae/app/controllers/concerns/send_file_upload.rb#L65-67)
+- [PNGs or JPEGs](https://gitlab.com/gitlab-org/gitlab/-/blob/5dff8fa3814f2a683d8884f468cba1ec06a60972/lib/gitlab/file_type_detection.rb#L23)
+- [Specific dimensions](https://gitlab.com/gitlab-org/gitlab/-/blob/5dff8fa3814f2a683d8884f468cba1ec06a60972/app/models/concerns/avatarable.rb#L6)
+
+Furthermore, configuration in Workhorse can lead to the image scaler rejecting a request if:
+
+- The image file is too large (controlled by [`max_filesize`](- we only rescale images that do not exceed a configured size in bytes (see [`max_filesize`](https://gitlab.com/gitlab-org/gitlab-workhorse/-/blob/67ab3a2985d2097392f93523ae1cffe0dbf01b31/config.toml.example#L17)))).
+- Too many image scalers are already running (controlled by [`max_scaler_procs`](https://gitlab.com/gitlab-org/gitlab-workhorse/-/blob/67ab3a2985d2097392f93523ae1cffe0dbf01b31/config.toml.example#L16)).
+
+For instance, here are two different URLs that serve the GitLab project avatar both in its
+original size and scaled down to 64 pixels. Only the second request will trigger the image scaler:
+
+- [`/uploads/-/system/project/avatar/278964/logo-extra-whitespace.png`](https://assets.gitlab-static.net/uploads/-/system/project/avatar/278964/logo-extra-whitespace.png)
+- [`/uploads/-/system/project/avatar/278964/logo-extra-whitespace.png?width=64`](https://assets.gitlab-static.net/uploads/-/system/project/avatar/278964/logo-extra-whitespace.png?width=64)
+
+## Where do we scale images?
+
+Rails and Workhorse currently collaborate to rescale images. This is a common implementation and performance
+pattern in GitLab: important business logic such as request authentication and validation
+happens in Rails, whereas the "heavy lifting", scaling and serving the binary data, happens in Workhorse.
+
+The overall request flow is as follows:
+
+```mermaid
+sequenceDiagram
+    Client->>+Workhorse: GET /uploads/-/system/project/avatar/278964/logo-extra-whitespace.png?width=64
+    Workhorse->>+Rails: forward request
+    Rails->>+Rails: validate request
+    Rails->>+Rails: resolve image location
+    Rails-->>-Workhorse: Gitlab-Workhorse-Send-Data: send-scaled-image
+    Workhorse->>+Workhorse: invoke image scaler
+    Workhorse-->>-Client: 200 OK
+```
+
+### Rails
+
+Currently, image scaling is limited to `Upload` entities, specifically avatars as mentioned above.
+Therefore, all image scaling related logic in Rails is currently found in the
+[`send_file_upload`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/app/controllers/concerns/send_file_upload.rb)
+controller mixin. Upon receiving a request coming from a client through Workhorse, we check whether
+it should trigger the image scaler as per the criteria mentioned above, and if so, render a special response
+header field (`Gitlab-Workhorse-Send-Data`) with the necessary parameters for Workhorse to carry
+out the scaling request. If Rails decides the request does not constitute a valid image scaling request,
+we simply follow the path we take to serve any ordinary upload.
+
+### Workhorse
+
+Assuming Rails decided the request to be valid, Workhorse will take over. Upon receiving the `send-scaled-image`
+instruction through the Rails response, a [special response injecter](https://gitlab.com/gitlab-org/gitlab-workhorse/-/blob/master/internal/imageresizer/image_resizer.go)
+will be invoked that knows how to rescale images. The only inputs it requires are the location of the image
+(a path if the image resides in block storage, or a URL to remote storage otherwise) and the desired width.
+Workhorse will handle the location transparently so Rails does not need to be concerned with where the image
+actually resides.
+
+Additionally, to request validation in Rails, Workhorse will run several pre-condition checks to ensure that
+we can actually rescale the image, such as making sure we wouldn't outgrow our scaler process budget but also
+if the file meets the configured maximum allowed size constraint (to keep memory consumption in check).
+
+To actually scale the image, Workhorse will finally fork into a child process that performs the actual
+scaling work, and stream the result back to the client.
+
+#### Caching rescaled images
+
+We currently do not store rescaled images anywhere; the scaler runs every time a smaller version is requested.
+However, Workhorse implements standard conditional HTTP request strategies that allow us to skip the scaler
+if the image in the client cache is up-to-date.
+To that end we transmit a `Last-Modified` header field carrying the UTC
+timestamp of the original image file and match it against the `If-Modified-Since` header field in client requests.
+Only if the original image has changed and rescaling becomes necessary do we run the scaler again.
diff --git a/doc/development/img/performance_bar_cached_queries.png b/doc/development/img/performance_bar_cached_queries.png
new file mode 100644
index 0000000000000000000000000000000000000000..f5bdc6ffd8460169250282951297d087252a0f61
GIT binary patch
literal 27039
zcmZ5{V{|0l8g4N0#1q?2CKKDXZQHhO+sVY%#I`54)p62sa`S!XoV(V&e|GQc)oa)D
zK6rQ4s_F=NSuuE6Y*-Kw5O@i3VMP!SFdzsBC<-+A*Ea=V1~^|I-^>JL1VBLQ<KW&5
zAij=4ofO3cL29OPPrv4C^3uv8pP!#JG&H||{{{kq@$vD(!ou(G?_a-!g@whyz{tzX
z8yXr)PELM$dcw!YUs_rsBO_B$Q3(tTl$V#6kdSzLdz+Y;u(Gle6&0<ktGl_miHeH)
z`SWLNY^<!TtgWr>?Ch+Tme#|=gS)%?>FMeH{r&d#_Q%J^^YgQsn%d6Jj=8zHqN3vK
z>#Liao42?3^z?LPWd$=c^WVRJ`}+EFa&j~@G<te^&d<*W1_mA<A9;9qnwy(1E-q$f
zX3oyes;a8m+S(c$8#gyMOG--O;^I6!JffqcBO@aN0s`vm>#M7)kB^U~q@;3lb4^T4
zVq#)aQ&R^A2iMov_xJY?4i0K+YJ7ZrMn^}pva%8r6AcUuA|fJmbaZTNY<72djf{-C
zx;oR+(wv-}T3T98PEG&-z~$womzS5nzyIFe-pI&EQc}|R`1tDDDhCILzP^4~SXgOk
zX-Y~;adB}_P|(rQ5kEhFMn;CSv$MUuy|1rtdwaW?nc2d^!rk57)zwvge*VVB#_;fP
zczAeGQBit&dQ(%=+}xati%UpI$jZt}K|w)gW@d13@Si__%F4=aZ*LC|4?8+KEG;b)
z5)ujv3tL-T=jZ2_mzT%J#vB|ROifKaJv|-J*rY)~2tg!-1(e;_0O`+qC|W;y5rZZ(
zKur>me+ckPu&O~%K|4t>&5ch^mWa^VFf}tPou`y$lrX&i^{PG0^EsaG<v+aLI)3)u
zfBWfvmF?B?n$rOtpOk$-O2IKEA?uj<|4%=4O5Z*k!F^jLK782gc_H#`v^*8=uVSPf
zZRtS~FeFfP?W-mRu@^vG9$RaE^g&v+>o#H#XzL{lC@iaaTIxyPtKb{HK;WbkS`Dz~
zW)je(x>5C}=XQB@R~O5_eaoMPe{(h{pkvv~7;uT|ikjQT11U2CM!6N}#1^JJ96vO<
zBe-%BY`4DJLTx*w`X<G*@=SMLG%3;4U39yl{Dw68E8d2kAsTVvx!xx$JsjZkx==8*
z_4}DGNy>|Y#y6ba+xGy(yxJ@ivii-GB87gzcCmEwS({fSt91B&#KND=ao2je=7@l|
zwqm%v^IDs4BDVA_pz`gc57;;G9bXsIpQkEKfiZNRjL-DuAu<HesxfMpej_wg!sKwN
zhjTMy4$0!+2aVCSrC4{auEzt}wI#D6?0{}Jz*CFWrCY&wg3OkzK;oX1Yg^EWL4jDF
zxAWkcx418kgad*uUnEpXAY3eQoiD1|9*O{60Geq2867ho{(+=xa3##d@)m$q<+vAS
zS_@&;DO5#pPWs*_J2K?ckyVc^6JJNmE0cwg)SAW_Es%gf#)P1ROYD<kS08Ahe5eP+
z2Mh+i`dyyR4$`xH`nEUiYuxw=5{2&-D_T3;2QSlLcCjg)hRS0j2QOH#%~@Y~RzXmv
zz%85kgonvlYZ~$QLV|9~yWW6cUjLm7q67ZRMIsZ-^TIGo$-xNySSlWt*Q-fI?v$My
zzXVdQT{rGU`HE&x@7bt(-<+uLK+<*oY#K3L3=a(#!&%d;ct{vTV<Ap^V!tn<T|PP(
zJJjMi>ykrDt@R@4vZc<v7QXCZn!_4FwZl^t3YUj_AOp0Qrc8HPonA3YE$Z*Cs3zIv
zGSTAtwAI~flItktQ#JKOgGx?zJ(rGK(?yAEwyC9b!UcQ`w~6~hdrpg~I|X4U0e94v
zVa1iZptjTyGLOcr0*Lke(O6~h$XGTr1HCrX7S=p7QW}nO8^lXU4DSlNu0tggo14IW
zGeBdb!u})9{$ZV{h`51V+*2@Ts72U(1`2R>?Lj;#CFDH`&Hq}Atj9U{dG~G&!J<&l
z<dqzuH<w&c^u~u3SW2kYi3A_IzNqMeMzLPpucqIwWBxo!U@T8BEdqD{O{iBx)ZEH@
z!=or6EsF4JyUzj>(|YA&yABF7u|95LYlE=%ZkM-CT!wRhBm{EhA(JynENd2aFFQuX
zD`bDGJm1z{I}R~#VH?65^3{<y#3yQJfJqtjt-BmBGL+Cd{4;sakz$QsZ5ZqBz#>k#
zhyW9~*t4&U!`fKxhghgG%Q;)2&%h0q-VDY)w1Y|z6u;kg#tamQef_4T4ln;>w7>iM
z?93U|^5xqk4Y~*Tu%&#KMV!$UZmeK=2F-a%c*TeF&Uk6N?GBjVHdI8zQ=Ro1UJOE=
zwcdkhKIE7uYVP-fX4vojh0*UE0}=?%?6?AtzvwO`Wi8i(Ow%-=EVldqNSN6q(~lRJ
z803wcvS9n<L~Muo0KDQp1G}>6C*DzgPAve9&FA%^*~)cnlWNm_ggM8->4|yRyNX8A
z*3R3i%;L-{_v$0JNJ~3H5MIwIpq0L2cWvfsQZ84Jk^`dw5Ir6Br-VU{2E<pVO3@#o
zbaC0Wvic(5%MOWu`iV4!v$N2X)KHO81n)_c$KiO%;N`Hb5HpcN`17_ulU+yjiu}?0
zM8!e06#fe#h?!6fkM?RPQE@(Uk3}EDQ(WH~IzguC_sE$|IUfPx`CAg#QVJp$WB6*1
zr)!Z)j*B>REYtt#$23t&FT-E|-)t1EInTEMnO$-lVix5pV@5-^n0Qi&tl=$62~>ND
zB*z-VnPL#P-9)tEpY<k7d?QQJUbv`rXrPTEdO=Agf*@dlwj@p{YOw*tBEXzZ1>?LO
z6e&CSb-|U$R#D4JYGo6h^!^%GeJg5;=8FQK0=oUIX?pnKH@A#y#g(!KqW07XKbabu
zk_RTB<DUkg^-+9MwN9L-jJ<M^r$U|Dt(2H}*%%S6^_~iuK~()Xuz|B<h1`fC3Uqz7
z(5WwjKIKHOh{dWDofaA7Zae_;(1$PNeZrP*(Lmg;DkUnu{{tOQO)J?(<&w&vkjEBK
z?M#zhFw{CIfuS|QwxSd8Ee9vFJIXDVRlyhI2?clkIKF6z%(JTtNCV_$WqJDA0<n3a
zF;?Iad1fPT1&t@;3}tk6bz4}pFnCLU=@~_G5!Q6;INNfknAK))`mG3zxPg(oFumeA
zir&y~?o0aieSBZBo5jvCpN(hJD&>iVaJHsKq5Zo_!Vr`4$l~nvB%r9yS%hu`TI~c5
z*t#VP)}za-=fio0jm(9e%N&=m@v_hKRx$Ms+P7eIeY5u47K%krgMlD|Miu2_`FMJc
zZ(OTT_OOFJn=Q7SSWyBUq6L`wV;D;MW<bL*F{GL}{+u^L_vrr!)|edrpsnWrc{Z6$
zEo_E@XRtkSbig0<3y5)YjSrEf^#hlYv<syjnhMZ^gkYqx;v^l5@yY}KJ%xkYxzYM>
z9iGV02LsN@rdXDH*qs@}-XhW&Pp&IipJ}7T`Aycye$dR*(hqdq&&YR?dl{Z#io<^4
z8JFbR@T0o&3XC6s_u;<5p&A0-!UaPlFl?g+Mp>!uwoHES5`Dxy&hoi-Ud$^yH`N5c
zxDlb(o7kx(ggqHcey-G2O@}vrKvH1&_B%VyYmMCznZ4A^@CJptaCeCtLMLq;wZ%J@
z6cA6f(0B#S3_7~jNd5ckS8S=^ULoU#zGH2Fz->a9C_;L5OdTmSJ|lbC8|iLJt(mYp
zXI$>mp?PuWl=9Fte72s19Ko(t&9A`%uW^}HX7;meqN$!uh=ZL5AdW*UA0Wdga_Kwe
zLeEbEgUtN;c$F%cfltfiu2)vq%4tIQ-eb=uSVhZRsF2J&y_ZUlSH?y&a3uIvkgxoV
zNrN{A1T?{-b9%OD*SMSa@<@~4y=);$g~LU&qpUuAhqnRQ?^>u5C?hnX(o_Dy*C@J%
z{ZfRa$l5IW>H^5Z{0hQ-X<Gcq3ODR>+TOB%wY;wn)qR{FoPAbxK3C5#&vG-Qx4car
zUCVsse=R8KsJ!Q7<c?ABSml3`Pu`rnk$8O=u(I@i=7c_=52}2~UbPDWeXO)mSn6hi
zJj2=u<YJ9p7^59mw}US|r7uwAlmvlaMy&6*%|lE@eg{-oZG?%D5t{hbWa^oB+2>3-
zR1nC2HWR1A8IlKLYtJkA&3HzbjDMhH_w<?IzqZ!2uJPJEEu`ZI7Qmh8AtU#x;L%`6
z45vt@t}A<6y-1~-@jR!h!~4RM9~U?c0!n;?d4}yXCbB1IrrP|=ZR=h_LBU^N=vEs?
zU6^qGET-Rtk*}Bnkt%Ya^`Gd{8!%3%8CT^ZwD`?&AIwy(&;cMxT}$R;ACZVSG5f#x
zm;_mGG3z8tx(r6xL^ND!I}KhJKeVX48kL<Cfs6RoF^A6V5y?h2AQW{pYvFIEe%$_x
zL<-+nS_$rVbZ}q(FkC%Lq~9Uj2DGAGsBh`i+eLK=vGh=$Or>)iJ`)$wSt()21}yJT
zC{d=e^=gIm#EP@KQQ!)EQy~lVz#WPUiJXDV$r;4+8R7Mw?38j=@2tL7qwb4d@(4<N
z7P$*X(LQ@0-DsdT=TyFe-2YpmCR{r9vQ=XURJ2~*^|eu(mGlDfl-%Te!?K=GHDzo?
zsA)gSwEEw$M({U~s1>s29j1yMk6H`*^4_Z-=PH)+gBjTZ@?wf1Kjkm1b{m}|KjWnE
z19kW_s)vEc4}seAEijp1tsu@SU49r->pGC{+U&6?o_!sZb;bgwcBi`*HeJHI-Ux+n
z4%W6Fwl!o~B;DNBVaa?VKkoT%4!y=#9_W9Oi8|ZiM#hymZ3J7WO{Qfov7;BI_hh1t
z92moa?o1)?<mLW+Ug$;r-3#H~D^VjMo1jb?n(<o~hH-%6w*Qv0@bhf}BGcG*xAQW1
ztL*TcKFF6I7s_e)g6@SScJ({hlc>9<!S`^~Jtw5YxS$_1`qO&$#!iFp=KmK*sIR0q
znOa#HeARb!0;%IR7_OLR%RH7?5vrqF>Q|jHM|O_y-)7e0bwE?sOt$Ml`h0T2Xy{g3
zLwDI<4B$lRR<qpYbog(1Dv;0#s_a#u7^ErfL~iA$822n}4snLAhq}gGFta2`N60gC
zB?&l82p(%a4aWHx+|{q<&Q>|%CAPLRE@QRsog8d6#<$#J<FxS3Y)D^qSIC5Sg_EgD
zH^Li6Ct@j;Y{+`NSUK8+h`S06)|)fg&VQlUD*3QGy*&7=%-s%TG?pyVbUEtbuc8*?
zX5-tP%@jt%kfrL{zISz>VY<7iU1cXaNUoylO<Nwq!LGg%wn0JtRUb}#%zq7aRx#fY
z_SGa?y5|>?@|2D)8qD-#TZQAihl=hO#)i&qj@JQ`BIBcOTL_2R+D$^pCj3a=eqc=Q
zjJ&uSG2m+9^>PiK&}E#=J|hdyXq`L=L903234uAJ8@O&J+p~Z<M9Y~uKkc$%hh(uj
z{2f<g80ekeWQTgJ)lpu_x{>bzdTb!}P|Xrbo;0|G0BAiqF5LL#G>kX3+jXc){`#U^
zL~eq(2-;17s*uWfD4Oh{OT<-3YgzfUc@OheYm6f@u&7*qToE0trG;8k<%jCuvpdTw
z3!j(#`onNz@{Ug|$Wm||zC6?ke@X%iRg$*LnG~nrZ6~2yAtMp<@sy-cXe<rqn3327
zv8yeA*fAkTElmCoHM1>oPug<bnP*3jGrHc5L$Z3K;+z)#%e|?U9(CZ32HYxH-CtX2
zpp5nHdEU>~;A=DQPS4TCl(DV-yO4H3gaLU)8lkC^tL1GUteVSpfADSUE)Nug^%gG9
zvLL%&Y|+nPlY@bc&8g=lrTa&4S5IXkUlR9~UJ~;W%?x9n!5D=oU;1%6sSeXYghn}+
z9Hq7b<4<9>SJnh$EG1jvjN?Q8WKiRbk)M#YI5Ml-L26G(wk#9klM=FY2r6_;eWC?L
zTitPa=-hr1XIk;M8yTwHJH`K6qG^o|@P-&I2xxVTRC<Z`Zg+5EOO;p^>c#b>@^bw0
z0wo{gm<9p&v@9uWEP9Tt96$H{(NvlbwC4O*5E8zEz-gRU^-aCS7_su<kE&u^Tp!06
zQN?oRK|BDB(qgy5RTmTb@X%QwK{tKEx7AlvE_vUfE%0?Ttlca3uG;Co6(fuAZ_Ugt
zLf{J|U_>B;6lcV~QiKoVICYF0_s6+GgISVyj&Us(uM{wHD)}GDMRYU5fBpWIW{Bh(
zN;W@%qk2uy5)eI@+;#LheTQnj5M;k-v^`=nbGL0ao=bQb#o56@V6QkFjFN=my1=P8
z<9&fFXG1J|8u#Q#?v>713|POZBYX8=?MYE~>~lbUc38dYkGPTmepPD*iP+`ZXu=oL
zN?@qj--zBIrC;v;ouOR5;S;gjoIeX7cEf_oMUzkFWtbjumV)Gz3ZT<w3Bn*xPD^8e
zV!+MSFm}WE1anHN*o-(o7>GVVIM$*#3?uhmVCgqgkcNUQ_xcoMAcJ|jQ()C4f7edd
zO1)yP^KxLU8#W=3BVN9@<73_HvtFG@cO)6-X22=jpv||@IMRArpm$xTC{|<s-ie>t
zPDFwX4^__!-RR3bT(iJ75l#Kddl`G|*O%DkpNvDZerDZ}7KS7#tvg<COb-ZnoIqRf
zWf+p6C)JxaA^7DU&_7jz&t39oA-Z|QhqC-Ya9{NKVg&xGX-jn+x89-Y#MvOs{RD%}
zC)5xBeV-2HpB4a<8d?5bCMArguG@d&!D^}Ca}aX&9*g%i=itdV<UeFIQh5zQX|-8G
zes#gxrwc7shEBtc9XpJVzKzL~VXcVHqiIU#fCnu}d3!G?dIDvMSg7l&<-)uur-}Yt
z9PD0$=-jJsZHCbxax^UZE@njIKfbK4abQ9;zU~alJpPOCZYKvE<rEG6aVfu6P?VT<
zxHSIy$0|qTlwJ&5D&RG{l<*KAT&oShL}erxQIf{?yHP^+6&n&^oPF$vo^7`A{2_$k
zUn|-+?A%j8g4#bR|J4IQ>yy%tMefBLOP=%5p_!~3GnX>pxp|>7TKPV562Y)ga^wvs
z=S!E&2E|a-N2MpZ&jv53)eL6u@^|<gs43ABxF7Z)(tbEIO~X)_Jxb}M{SCbp&lYTm
zfqi~`=<bpAx}2>8KE+QzS>wC?-)I333G<dM6oT%PXlra5PTNGe7UyCg*?`Z;(#Q9H
zNx<ocF;v3mNEHRgJQrChIHzAIL-iYqZcjAEGHYL;-_2WdTP5hSw$l{Le+J$SLzq^`
zJe$|e%#VPJ+d3n6!6x0LDeQw~vsRAl68|N6Qbou6h8107(9PaB4mPQyCiZ?yxXFeN
zl4+kvgG2M{*|89eJ(Y~e7DIM%D@d_G?~82?7s9zg(@F+$RJVO#v`$rN2G$DW9sq@k
zIAcW8N-?O}+<~%TFyb;_6YHhGW2IwM%8SV<+}z~UI~DQe19Re(q*7LlBw-X57ofE4
z|6O8r{ByB-8}w?^#+cJLv%Wk@*az=fQ54pEGq#c?JWz<f!Jqy}H&mnFZ3tOaOFy-Q
zBK!5nq}p*1IQv!w-!Xx5lUAK}6*GxEOtUU3Wu|)bOCqy_HSJvvYNdrKq-!*Lhj660
zY5h1$`4E(5Q(KPTGoSxf^x}RS1U!Oxg=q^B3XRlpv-j-dh`KC+hKuCG)Fd}ltuKM2
z__*rFR6I|8xx7R3U3|+-?Q-AUYir_^eAY(oiTs>n%Zwkqbbd<On{#?psIeVg`nftT
z=C!bxSelQHwxEhl1BMov{<>d*MZQq=Z>gGZ<uqVLtSCO@EG#kG(&0X=tA1gOlw7z_
zG;7`s6koW<<xnv+ui4pT-mGr@06DK}sLSXhZYW7S;4HymoyCG+u+ZPWc|^ofSL>F9
zL(oveRXh;)H$xDpT+b=?iJ?_%E?2Dh0dt*z9wxtbQ8cw3)qo77yT%R2lWZAD*SkqW
zfx`ibr<I#AFl|0@Q{~N2o!>-pPrH;ihmE!qvsFiLLn4lfTmdCXn%YDb4#O*thDP;R
zrg+4@4P%-pQ&IT`qaXF9x*15T<S~TCn!~xQUQs6O8DeQvKqZOyUuWD%d^KY|zGb50
znIAH>c5;%e5Ad;iy?k8#0Sx)18U$Q0%WEun)Uru)a1`MA0ji9L%L#mJ5IUB@?f4u&
z^Bc7TJLnkb3n~&h$Z#_@C55dK%?$9qHV+vGMKxwoBhr^i8s$aoL8U#nNCT64y8$3Y
z)1dsOX?Rz0#NzL0=9|oZBfrci?xn-K=e8$w2BAgDEF~*McbI5)0=bWncUmCooJ0(5
zp2aZuIQpb#imatWNbwMs5#O8(*7^O<b0mkiUse*#Jp=+{T~A6hvWkMgWv~TCn<9B^
zTEH;8u0eH5S9&sr68VPOYawtp4O<v!R`yV-tX}veVOX2NgzDB9rU%I+*ikFvcqIyi
zq;7_MQ-vX#A~|?MNi1<R)6Y}D!D9vSK5RW47QX!vhJqt@1=;4$i0s<<k?^OJ5!<L}
z2I@~w^inA;0Xu~{=j9IbQ0|{8BrgfnN(C&7J(iG>59a#tcj`g70%HS6tEcQtp4q7E
zkPi7P-EYzL-jv23vgytyH@agIbT#o!>`DNkrzfP`rGYA;!KrziL}Aoq?~?2(3q-Qu
zwPIxSjA=u;ESa5hP%*Gc%Y+4m^ESKZb#J#94K@F~l<vETWVaW#_HdagC)eL5zqo|o
zpMG2w&lWUiQ_;-xSEetJ|GnaG;`mDg1-StU^IcPSgE@eHt}ig$XG|CBk_)9LC5u=w
zjfH$f{p5~8_PHSo{k2@keutetu+NU>i5n5Y(}=;skcFB=rnB^VC664vo)2ts=z47`
zYH?!4i_s8R<zJ!7pC&R(IKgyF@P`sOFCkNpF~7&<4bcOy)mhIs>Sm^j*oc74CS@m%
zLYHqmZ3XT&cN;v)Y7tDd(4#iX&dd^{laQtYfD_F*!Sl_3Y^oc1MaS3Akt^<8=ou5S
zKGW*_iNX$FJ%{BRo<BnenuTCv?<y;!(t!-obUD<y^-Ee%6VT<T-`k5g<1l}_R|?}i
zR4qLC5sq=EBevJtL?v-{J8T{u!kf0Ih_e*Atx=yhf|z7d4~_ZOLNManJvP1n`m^Ug
z{0B8orh3e{IBG2w_cTB1`3gg!muP2lIu8;FyQp?R7u2c}bkIVZW&Gja6)6gqAzkq(
z65H4LLvzezEX|V?jUlMA(!iD4(ABU}ooQVZyj4}gf&*CGt*g$mVEHWO{`gaFAd2Rt
z>ownPgYLl(J@m52;70GV2s(mpjH{!rgj?B9a*X=&c#K|mFiYIvKGJ2R9>^?&izCQ&
z1MXUX)mV%X+jKu7#(wQMT+F&L2Zoh@w5(}U5p2@qkWC}G(Q2n6cJVM`9u~|a(NR}X
zq46zSZZ&|8X~f{UQI+Bflna@|lY!QKs{e1L(x|m$+`zI3zU!4oeitSwk~~h<GE>A8
zrDbYb@gE$Q8PGf3q22uABonHDcKVF$zk89%=sj^Hyc^)DSeXp))HmeI5q>pa1)F!W
zdr2^tO~FXYW;<se6QT;*L?VYuhf&l7rfT7`Ry((gdPj0CRveC?F=m@w#W18iiHvi-
zXXzx$q>NgPH+Ts-oA<lDqQ_^E&o*B!$@5)dzOfp_ur*QZok*fD6Kh<UDE+B;7C*3?
zntKTuv3k>yyzGP9dJ*`uX6Q4W0aFD0YCNXT&#qw}7)Ph;wreC2M@}>a#(%)^&@7X#
z_hu2g*m9>{z$g1}CO>t4scpg5Sb3PKZ_ufExu3uCT^b#^_;GqQI`d%MY9CUowU4XR
zIHpwoJ6)T6;Y;K?&Ns`W*4($^W`mcIF|y&aXL1aJl6Vj>=R-K0q?Wm~R@0ih%Ug{b
z7+ZTpIxS-GTDET#ZR`O*c{<&EkR*{jdT?=mAV0s|=mCYC7C2T6zj{7qu#g^Ntlab~
z9v6id&jn3q{bgvRPfof{xY217!B11t%%7h;_s8a?br<hi9Wb$nF8;22rG~cNY$0xm
zZRN$s$;yg;OIXeeeKAsytx+<OBlEB)NHon4)uOfw=YAR)R|o%CGz&1e)Ug$QtUxD=
zqEO_Z9VFZv%-?DUz3g!v*_UPJ6{zXzZ(F?NQw%YIB%J|~#=)v*{E3=qgJiqaBAlNx
zujzYU_fwNk#0`O=ui5?k{>>jcq*oJ+hDW435&zy4rFi8iRMwLU3<;G?!(2Hy2|R2x
zKE(uOg5V_~4jOe;omMI{%9pBBVeCWc3%qC3<=PbcJ6`^UD`6q6emzcs;;|eVpH&#5
z7H|_=sh~y>wHpgd086G0!G%;W3GQN{@s7JR62e{q!XQ>`GEBaxH$ycW(C#P-3LhAG
z6fTz<X>dwa+Bm%;e2rJ%U*3NJ6~g7^4A6V0b}&VM{d2=WtE~=bjz^|htdHa&T7}#_
zvXT0>c8qgQV$1$*b3^xc&!1P++IGXyEul#xB6|}YiDnLipc>Bv<+0_+6&zAD$#El<
z*G};YM8WfdY&6=+n)PI+V21*(7)Ns9w$68nCK%Dxmx<FK8;x{tXz*Ve(9ziqoY$)(
zPBuidHU?c;OT~1FHlAPO0HZp5G?ORQAZTU7u5TxFF8W~6v1ovEUk_&e!@JxEi=Bw0
z1?F&X#^#%;d4@XA>aIEd1fl_9lX@JpTmVvuC}uT%W)~sw==9QFQznCwF4CQif(`Kf
zQ|qbFO$wS(D^5i&c+-s&>m*tfz>6_>&v1wuYm#zS3hS6V!t%u0luG1~VnK=BSCgu*
zV_xWLN|}H3(fiT|+U;3>y0EKuHIgcv2+eDn$19}g)X_|8qQi?`a|^M)XJxD~=g^aw
z1&BT6OWIpe;EzrQj^xAcRpjC8L8<ZG6~Ks#!1dCJ;vm<nf$z2SRRkxnUr8D<!`~9!
ztE`VkdOB=5z0Qci{s=o-CB#}g9hk}BsHi-GJ;n;%YMzB;Uec6We=K^AEE8{&veNj-
zg>#F9`VV@l?7EvR&v<2+n(-AHQZ!(v!SNg@V&YlQtRevI(n4S3Pp%+`Q#xagBl?9y
z;X9=+UXF<sKz1*;tAE?My>afgyE<6B3fr~5OvJ0m{cxv@51!46nJf6Qt+7oZDsku)
z40!8NgsAtnqdXP#Ni0T7oTD{6VC08Hnn#N^Ft0>=gom@!M$_FiNFsfyUsl1%1q?i|
z>Z7dDB(`c_<_5N$VKV<ODn95OMB4i2`6*&w0+_h5?GV+lQ#<^}Q4?P00*YjMmFOHO
z5+O%NtvT$c0*dcQYso7(>Z(Iqh1nv21xho)U?UlbsUUltG*$UQUY(~bdN)?hEw2kN
z%WK%EwR$IaRAS10qaD)_Q$!&aTPv?{KXZkKC+L7KjB&BnZir`1b|XLmttum_k(_sf
z@^`8AdiUzyeSt8;D`av+Jp62kyp^~Ocv9Mb_@4;3S*#cMpMMlJ)lyPZLyPBL@OY`r
z9no850e4S5X(s1H2pE#u91#DcV!!KwupC8u$R|Fq*mXlBmZFTf+!vaTL5RajT~+tX
zM$^}&O4EP0t_fXvf+`I*4s*$A8q}W7N!*rPT#@Rdx{#)c5LkMlb1_<fAfsFT?_B`P
zHjRSSXL*i6PBS@JGD%2Yn7lCthzzF{>ozVGKszxu_Q*q!bPJ^I%}V1DX`b{yfk%H}
z?mUl_s<N;6`HTmoJ6%B}C!5v|@|xi^`ENX0&Q=J&(vEI}3Ra!G^fnUCtjREpe03Yg
zt!I<461FiymA6|nAvCGef}+-vpqzzjx-W<;(RJDGC)(XY(LhAX;x(RO%f8dqivF=i
zYEvp!UCf2QHv`xnU##Y}cQPM_+j0GK{(3&Q-<kUU^4S|Mhu$cjyXUcWaQ2?CIppLR
zP9|-7e0U+61aO+1lEq%x$osMM<#n#aRjaxVGpqOZ3NE|G7H@x&^47-o5sH9fQ;B&|
zT{Pq7=L?bdb8I(u|4XNyg~sb2P##G=+5)(5j6UL8{$4Ii!i|l?A<OHoHI5ID6}Nut
zF>VL6H~-zQJ{#OF^<+pjaBE59*Wpo6Q2LGf`H}8c!a09a!tR4q{`RL0)7Z?RB%VZe
z(}Bv{(aKO6zKMx*F?}~{t+>3nlyrm295Fu3-XK^Lo!5EXdMTYR;Cn8`J){)l`1pPD
z3g+}ejI}pUzW68-ReEpS6q0GnZ7Jl}9PNuUt=>bp^Ei(Gyx;>`23%}udPBnSWA|!&
zzg+hm22Su%Zu(NSRL%}r!RC&zY)a1Ry3Mc?*hU<yCa{j`Wo&b=Z_nQXiBUhBa5n+P
zw)icHiUt<rl2~V^H!};b$J}vZ3;l8S<-{x>=b*fxcr#jl#-%t8J0Fwo<G*#WMR0l<
zaj-1S*ZP1G!|qpSF$y91-|)z=tcZ(zWUK@S*ig`&T5rsQl1=V$6gK*ipQhpt59nqf
z=`y6J{lK4Tota$Wyi<^5m~;r)YzVLZ)CywMQn}*~B4PNqif&RA1nGo$u(s%Lk*7S%
z{M>vb{NBUJGwCO3=cu^wCnXtHN=bEGexaa{V)bg1Ev__#V7ICei`Y#+9YSzTHa8-`
zx7Bh)beC8q?i(2B2o?OT=kFt%+n>ToJe6$Z^E)rw&dI?t5z(Q1wJ`A8Z2%sSDp)8S
z%-CF>8KAM%%9Da>Yg>nx-kN-h#XU_$b*8202WAu&h;a^W`T*h`6+61|@-A;0j~*H?
zO+zigiU)8%u{f;DzcqyNW~_b*!*n^z^v88-o0bqzEWby0zp(~UqhSO>m2Wz*0Bgc>
zCijPHWTGP1!~5lBfOXhlQxw^d$xISwR|i?k57Hi^RVo!=xU^gtx)=>YL1QCs>dJ}T
zUD6E84AVeaNUXgjvv0X>o7c;(nJc|@{x(+IFlXLixu+2D_GlHVTON0=VzBGpqmr>%
z!*9R3Yjq<(2qI2;QDh5K`Oi>bWrJVWD1KKYYl=J&h2;UPjv5yb-$GXkbtS}wb8eba
z#}n529#SD)q({%jr;O?sE!#U*`P`Z8v%J;CAWXxhHvsTw2O@Kuc`Cy(3n{be%nyOv
zpMoEd@&G_Pn~Mg8;NlsLxA&BKwf1af23yVt?d*>SxSnbyK3Id_ef`SPZ`{^+O3mIs
z9&IHI$|$LtmAZvRpcUt#+tn4df!yV_JC}^%Mca(7kqwDLM8A08pRH!2rl<eH2|yDB
zpU};6&wS5A=M>D<oJ`689T9xeQ!=EHgKoU9y%p?x6+F}P4O7K#R2OVyx5{19S+gOn
ztO~smC3gu2m)89oZ>wOO1-4DyPI9<$l~KnE*@Zh<8V_}e@Ghvn3dhPdYHDEH+=giC
zQIC=dLyRv8QFkcyTfI3iiZ6U%-EQ??5L^4PYYSPcj&xl#eBX=}Q{SuBV5@f1Z~xX_
zFeqdl4<et~1+!JLQ62s#<i<LVxA(z3z6TyDY6$G@P%Owk^0YwRdYFz1ko@)dOKER_
zWIzyz7)2q{upB60gZ&;0$3+H~VA0q6LZ8ssh=~qku=|}SqT%rulecCv$w4F$<r!O>
zpB=q(z&kd|dp67L)nO6LEXD6H?NQj5zLU<z^H>r<hGacO1b=DneA9V}RXS%&+h(7N
z*kyX$4v@me2T=_Ps$Nc2C%E4ZGc^d&$}py_@8So}-!K<iaD*tSZtu^E$iA_^4X(Rr
zdWY_!EnuXfqsZB*H^|)%Eu<x3mOx!Eg`(scVic&Qd{s)lLD#je<&Nb)OzWh5(A09O
zRN>Y6Ro@S?66XqZU>!jSAnu1;r18uhf{jp*ky#m120Fo*^@hmww4pj_a0t^q%#ZrC
zjNOGoTp|+&O3Mssf|(av%J&4ms2Tpu*{kUUS)d@-u4{tQSZ(misbv@-?m8tZM}}Sf
zdh~bxI^BXf1>CfW-b~)dR7q+VhQG?LzS$rAt-#)I8y{@pY4eW*^Py|>uc41SYES#6
zz8wHWy!l4jeK>dm_DQX31|TT6qVZK&1uTDv2Z)^wrGuJx>)_x;L!P>PyB6|A@A4XS
zS~1zH@Ynl`9qBhB?!)&IA4yt@D^!w_r^=e2p85zTdd%g5t8o7*O>{NsU)gqHp4>T#
zJ#w*l>CTW1Yrcu_kO5@}QvM1?^NF0-1mk1c4qmKHj&46iF{&~|7ltS`eT#jss|1Gn
z%Wj%n>GzRbpJK3EWQcNU*gGUJrG#&jtd?0ym3Se7RQC6kI{swqT_Ft?O{#Ka{%!_F
z`pTyv+M{jzsNcUAM>A#TnHEg<8e2=a{5-KU;{-y~?RpXgkbqD!CTPn^k3RegDnuup
zaKv5a2f-cPg+d<KKX#2)==P-Rhl_ek5w_7L?8}&4o|nT6q?b@A`}q~ondvD!j0Qe+
z?s766QnFiwO~M`{u`elgQ5v>o|51`Sn1<O#`i}d{r+-Oc?FbJ*s0n_xz~@^H^7m-e
zA~tOhRp`zS$-%HA<Q^{n-oGU_6Ha*-NbJgih!ggy^9eJ-zA)~Cz<T%kfp2~Sfw!tc
zyy(|M+#4Bf2?{0kw?-Y~>8@2&B>F;zg}&(gJSv9w{6pgP?0AACG$9b<T2&z8c^m_v
z47%43{kOJ53F51>7%Re_y#k&?Ce@DEialh<OO&{hx2d;g#i8LQOc0rZVl-J}?PIVz
zGtiJyY0+Oc6`G_no>Q_8diMdo<2A9%M|735At+<KUH_tBL;woFX(1YRdNQ+t9q7z@
zBktG?x5m9Q4)+fwDk^MeaXPc4kW&4#?%M8i@~7W@hbRr6${B?ILvNq0?YCc9iEd*_
zh9#jylDtg+?Cj$Tv5v__Uz>c`vuZb>uj9dp#!FC2PZzFsbN!Z!>Gy&_L@JPJDR0#J
z7cAhcPwMZ5>DoIrg;qu#kblGzK`qKm_xEJ)t@FoU;*Y9u@_s8Aw{^oL-7R)V0E_B<
z@JIi^lcZk1)g58<MLg#_D^@`J!L~-1oq3~zz8a!#KO)=0r5eZTcyKcm=aN&KCik77
z31n%RQx|==a)xy9vSMO~O}zwz9WFQ!o5n-X4sDghqv888p}t}n06Dye@9~<q779WY
z*%ap=bd}><6Y?@+mr2nsZ#2LgMw<i=kvg=T7@LOLsTUQ_r9u-tXWG)@3WE=V7#9-b
z8)?xQ^Qvh3W)l)?O>VyH#v_2q2Ai>+C+8zS>-cw6gG$`{*kQ+?IL)|1K*t^MRae)$
znlnNhSa%^zdt^EDs?{Qjd({M<z2<ETJg^JGvt(n2^h%ffUI^$$cnH^r9kMgk!r%Cz
zk|7n-{ah`xDu*4yTE@D_)*@y`1J&u!=awtw^Y!R-=lMpAWGS&zCRr$Mn3~-C=rJkC
zSgO{+GEv7F96%WQJzfl&B{6-5EI>C1UT8#}27-r}5l4EACc+p#lrI#9`d;)IA)Vp=
ze?WPN$emPEcnw+=wFA}Xi)AH%X5VE^Z7A(Q`>llnqP(s>2_kte`5?OXOkcclY$LuX
zQsKl|FT#fWFGE#KCHfl#4~$Lj!*tj*B)_V-x0>9$zmrrWudy-6Km*`=7kK-63jV?2
z`Gq4nrVH1X+|fC9^O>RvjZ<99rG@~Ueh(&wrS=4-ON7CZ^PBazIQTDeJ_p-Wb#P#{
z{eP~@?-b&9PQJ=}=>xFumta4YL$wV5A!gs?tFiuet_p$YJW)53oV$(?B@l`-+eobc
zMLe*y|HVlDhq6_nj}q|Ubc2SI$1EK>>oDJqIaO$NWn$N?Fkt&kW!JeNs7dAcg;C#4
z&b;DZI!IsDZk`B1OUv?&fD~=E@@1s2cB522G5;gQ^BR)IvJ2rMXh{L0>-0LT?@eU`
z<&L^<={qM*R2!z;x`|wzvawy65gyed|Il-AT)_~N?VLJRf&qkC3vI65X{Sq@-8g=q
zZYpk0&cgs<#uuu1H)iyZe^C*O9gpOHia5lp`ftYQ_ns2x&Z;{p$em<9-J&OU6-$&s
z|Ky<s_|O<Zx{SMuuSU(tjH;8sRuNCK{%HFRWyeJ8fp?~Zaq#SXKbYT;+A`Wnyb?J*
zOq}W+iHlI-TqQE`FINNt`xqSN|M4{Ke}P#&Go=C7ze~Y<^UB)&qpqSkD!f7s)m2oF
zJ2|Wy%Z`dLnb?oD=KK#Zc!ORM?t=QG!rWP#*}fL<AM$0JN`EI=3VUJuJF#7?8hTlB
z!!%j(apYSf4;vy{x2m0R9KIZri!!l8W<NY08vSKjgdd({H1NugpCeoCej*OW4xOQM
z?L2i%zrct`r9i`wks-iQhFTpk?%VK}#YpF%6=p28jhM~cG^SoSbCcRkSu$~x-Wu0k
zuBvO!&T`F|f+~Id_&X|Jfz^MuGb~Jby(xB1t7L*tIiL3y7_V&?STx^zpzE~2A+-ll
z*Rt9zOsXMgHqoy%a5dzTtO#MX`%0)oE!K0HEeojA^?uZ~GH-42>$6qG=f!pP<cYB%
zLC6lj3F0~oB8&as0eu<gHq9+sIV@qZ(E)KQgL2=!Gm-yt;JVhbG8sNreS+rAR`|v{
z%OU00F{bJu5d_qfM_9*=mG8(_vD?QcB4=q$42%t=jj%$bx>=ksic#idvtn4XUidZf
zB5X1sv*$R1-m6LhVZ=4rfm>ICkj;zH*{#Id{;wu*xAEe@XrJ0-I-pb$0!l|R?KN1q
z!ffX#TufDIl!1H6bXN37Nw^D8oRqPY1L_&&|5?>{orz<KvT|8|)k-#{ZN9=^dr$dY
zw<8gQbyXW{q`=If^jdzBF8XJPw2=U-yU~>WPlf64phlj?rZ+IH_EOnAd=Gj40G8y5
z487=<3qJY|P(OUU9Ok<xebd$Y`u>UjAeX?E6CVvR;>B}de}4=CLBv5#%MDZE{@&Qf
zdpT~CoYb;`VSPk9@JGn=RV-Y6k%rP>D!_^?!X%T)R={kV8^tK=im6qG!+P~RLJ4gP
z2+~RG&2?b0Z~h9S39ST#mfj~;aLi@{W;fQC)PFa!ZZ@uU*FI8?ps9u(C6iseU3))n
z8avucsbN=Q68cH8M({Ia@~f7ok<4BFejW?H5;0TsWo(3~Twyz4{jtmBu{ouhNjE#_
z`$P@?rqa5>%IJPjMhS-<q^2Cj%eVTuBr8-Xk=NMD3HvM0SA?6t9;sR4E;7zOx#B($
z=bx^iq3J{9N19`~w{Cp{Job7@gKIBrC=#>_-ya6p5Z#(0;p~IkZFDtQ`GDBv<kKqd
z>)^9%>wlIOL}%1Cn~;=AYA8S#+QgHykLbLnS6AjS?aDjrhdFWA3piBvBrCxjVIm&9
zE@Y`>Q|i^PM5?a@*t88`S8?GgOCZ_R$8;~t?nfsZ01N|7>`yD*`A~-ylSO-!(Jli-
zpvOZ<Z_A^o{uxZy;>_TUbM8s|XI*fd2Yl5dL)Ug#4$m8exbbWpHGqu&7GM|9?m>Yn
zi5ylfsX|)cIkpNSwzRFf!FpI%yDO7jdEElF)7_ETD2cNjLi-JL;oy(-n8Q}Xaq^Uz
z1t6x{)?7dCUqc-z)75SYL`^*y_e^jce_6>oHsr4&9IkXS(?!`mR%uQNVEd0|2TF2R
zA*#!f4q>7q&}tCf{MYR_ebaU~{PY;$MEAh6IDY+!H{aP<u7-7>TnfMgOH>RaRhUu)
zw}o0IVNelR4k(Mjn6z<<^#?2tw!_+a_4+jA22^X}^o0=WXKJT0a!hFfvl}u}hdlv0
z2|NxZiy-Zj<u6^XP-tc2>a?OW{Vr}tt7LsY8W@kvf<&tAe=1Ek<;`a`$Z^1d+mL#J
z&p-SqW};c8uzd$nbII)#_}pSKk+W{XoZ0%Bd*Rp9b!o`Dnuc>04BmK6dpiCFv*!zB
zDPEg}{Ge(=!uJrwzEFf44Rl#b+bl<UP(BEg85PWiJnYeC>@{fmFZ$Y6{;T<SDI*?J
zxyHE$wQOpK5*5()!Sa_**Bkz%si7zG_vSa8hb%#bQP0U4$fz$17iN3#m5Q0FZmttZ
z_Wtq-=>$Esq+Fixo+Vn1<2;p{;?DfoJTMjq>PfCL;qdJE3s)R#uXcP|`+!u34LM`8
zcF^etnx1k>)3P!y(|U;@$8nq{3m|KWh!RJHd2I;g1yw2?wNOFv>iPR7smf(ne5tMv
zL+*<6U(jDhJ*M-LUHt-WG?{sHHWdEOs-;1=JX3yDEnQxGq^z{ZU`3%QO#}y?2X7W+
z<sXFBvTjf+MzSZd!Bo1%UHN^!d7PP0=X{^iuqfm+m(xN!QS5fBFr^^8lCl9Tk)142
z=T;6hVx1L%7p}mRjp~&I-BF6Q30XbddtNVJ^DH?{247;djgcJt#C~JvC%cN-m6ixm
zmVzE@dUUwY<H2;Qo4G>dU?jT7-vm2+=HseOj2CRKb0p(8yc3blBB8;0>V!y{g#B=m
zSoXbthbKbA7Gw<?vOKli_?Dk1pJtVNXpx+~-4l7g^@?g@usZV0WUf_X7ZE{OIWMgk
zlWJW#O#`!RvwqrIkhg$gE)&O)J#%XZ>>N1INaJf^-sdzeVmmRBZd%UuxkP`hqclz~
z<x5&?gd$DP|L-dJLEUaAPey`Vcuai+9ONnL*a%f1!_5-=K8>m@BK<tJA!9~xLEYR&
z&BGhtC0aGpjk`<;V7SRw+;nz*Z5QxO0xBJ}hGofaCmNQGkdgEYtz=e{B<g4rWIW~s
zFb(v_P2+2mW7W0W=`wcS;nIAe$F~9<MqnRX{OTX(fty4>>9GiK8r&LdXeL`fAFwr0
z%V1mUu)&-d0T#9=d>(GXDDwiV=gsB0+)I!P2YnmO!4tJpQSD0NA{`BOAB9>v#jWoe
zXFkb3&e!R`N6=3=QnzYo?OALmR?3BaHGrP9U|`bD)d3(hN%~FVsZNAY2EhSTSpwaP
zoQ4jEKnTn=aGUKwqyDz^#Xtw9c=n6l%$QSUkm0U?;SuuasO`~9*<)f2RJUG(s?c8T
z?^c;(xi{qLNk2s5xtFYzcs#1$OUHuR*%H$JL3Q_+s<_Z8M`m_U$M_lb(M4b7bca)v
z^jdwaTck6XZX9fRzy^j(<Unonz}?7IIRFIeL=(uJO4dNdzzIFE4m)m|_%Bzf@7$dz
zX@Pq4HhpbaY8Yi}gJ|jSy=}(c){x^LY7u6IEcMBaonv!<?esGV<Orq^8URt%GIR&^
zW<O={C%a%eD;X!F4#}0~+G!^%iP<>HlN+D5K6G*Zk*yVie3K%PsHJzYjn1Gf{H+1-
zpq}5HLedNRCsjJIUN{q+16ry;fi=my#CdS9fnTpT{Yfbt@cy%=)Ajh+P;`7N)M4yt
zCG{P2Zd-I|kk%{crMc|c&TN0dnQ^tUxjcj$nC&_ilwo3*jxixqTIdwZM13zJ3`8XG
z2UJ4EVF7IdlwRewRMFe8Tgd=F67*8L@CT+ck@SOVOm0(n;!Gl#p&XG?fBrOM8dZ}N
zqos$t|NiF9G||9-u%Fq`s;~Wvw{*QtC>1c5sXnezIF|W!`gYJ<z&9nJft3=R2Vg9h
zJ6&gW;*jmX6ihE)E_OvxuGV7XX{)V@fyBXlL13$UjA;0W0;4jN=aN@*r|;VwzhOX^
zoU4iT#z@su#hvt_3}C>OScAL|ok#b^<E5{$M>s?p7(n;Ot@K_pjqL{7%)O=KQnJUX
zp<Y^({t=`~RH+BZtfVx%Ak?s};%#F|7{?Q2ajVaJRI#e#JJ5;QA)ws!N^{Y(6YYj9
z;5&H*iKjjC8=qVB;IEJF1ZEgco6Y#XT}JamQ5#Jd2t_rAy$=;b7O|e514rVJ$(?b*
zilzcr^m+lp2_@);150E`OKHZ9T@9`Wu5P%2E-l+##vX=;-sw(wJ(I#m()7=zmbn#+
zBuKr4A$TGK9MFA8jgxru!L{V$Jhc)Thre`&=xqP%I{&mDZ-cDY;o<JNJt55=6`}m1
zpb_-NKR7KK%2ul*F?N^uEr1vm>j-Z<yK<`3UAG6jKQVnJQB!1pF*U-r$=Ol9?q9Eo
zU?xf{_oV*D22Zpl0UtZ(@kL@!cIri%5oTP11E9$I<@RNB8b+vFgmtCUG7YhOm!lwe
z=ZB6^ETgLi>`-wdB!)Skka{p2(9(Y6!K68O3~%2_dNuuOi2H`GrF>o+q5;l6toDn!
zjZ9AaW9%6}M($!7hne1J;=VTxi9S}NVfngN2VnSOqIZWLH`%3x1Pz|mz{jS$Gw#dT
z^E}ZH(_(IlsXkqu+tzfNE^Tq0+^Pg#zWvE4$~zlQLtw)vFn03Y6D)<W*#s4L3|?a_
zH^N%m{!-#_#R)?EDPX}T?vDoEA2xUU<-{|O-r)9bWIXPc-%D`ziy*P}dg9ng6!h=+
zxA3w3zCpt#)*6rkZS1BR#8yws^sdOVTLClN=B}>{o6z7)+mmmX4EV4<v~Y2&m8r6Q
z?Ohcl^fsL2O4!_FevVh%+NK2Nq#niPKgkA|jFH4`R=<fk3Jr5=uc9W%z)ka%<9gMA
zz-+VM&~j0W{|m@Y@PS*uf5SigAD$}LS>bW-q%ufj#!%CIE4*<;czrhV9ne~6!HG8N
z_{8S_A&Gc0@`~aM5a~C_tpj@#HvQI>!?9f1g7!t^Gz3hDJF0b%Oo&(hB0!H4$uQP8
z#jvLmQAeR^7i!`x^lUFh>(~IPWU+p^HpEVH@kCB%yK8+l;KrRj>XGLJFPOWvLN%?|
zz;wE}(d}SK9(CR;=L(bgY+E$l1R*q=HZU@<DM}|e+C7ssf0gh%;Bt}j-ipf0Vy;SG
zKU)jW;nZK@XWp&Dl8=8qBC}H#cj1hFJf|`cc_ZE_N80!<&`B<GiqSqoGX5IW0lKDu
zGkR;MuLe+lEFztbL-vZ@YZPVavR)cs#O?pz^AmLDhS5OAOsxFcS|bULGWz`hUmMua
z`h|h-1IP!Q9;&urhTAWzzL4OTj86qqq{?xmQb7_H6&CC37-f%4(@7|dLYS^%`t>KW
zX0NxR3PW`SZpQuD?6HH~LVTY8oOb%iCl^cRj*Me_Y@L~zPp`>~+<eJDz@+{_1ux{o
z6z)SxnE6iTX@h%ro}9HkdC<6i%;`djna(jk<l-570UfM3m9dW=Yp&8TaZCn*qCsR}
zh{K>&MYqljgH#(|a6-k7?27LQVSht>J<7=z*5Cu&M(>N|0!^wxE07W8KxWg7w!Kep
zzg-3RnJ{VQn%>k5IjrD`CB`iM;kvG1zv>}+(bxJ<e}SV+eSHmD9~H5J<M0v>VWw^2
z$tiGp8`C5y3F)IOK(AViWb0@EdRxOvMtulKxrub0l<0j$y0M{`tZ`ImlvBT|M_;Z^
zyuC;GLea|Sk2bDorvXR;*ik3j{`yY}O`*N|DYxxjfz3dFt=tHjM2FLl(T6fg0^7Pi
zuyGcL0gz+cs%mvSNLCCQg_E*-NqXYUh0=DkkrKR>gXW!i<0K&TyWC6w{f0&*z|cTw
zDHGXdg47MO_T;$uyLg*#_@*t|xawO3k{nLea&dd{#e}Q;<!!-?{AN^dahQUu`Q@>G
zlG+h}hs%wVi7?LbpjnL1^X=h88iQW9_t&Hn&=5H7E7Gl6Jxn@>wvr+JAxZ#$wHE(s
z@;#sPIe?a1y5UM`<5a<IEv*7Nw}YB&8YjO|=%fw?mzBC_qT80w-tr9Xy)oOnQc0u%
z6ufNo1|8IQZT7?8kQ#pA+8_9aaPcM&ZGN5<#;ttl|CE^&Q`zl?qj(L=KO*?i4|hC(
zrrz6y^oOltJE^w3U=74qy7aU&w`$!!M>gBW;u+_600;c`fCj`Xn)f#z_lT;>-JXTT
z9DJ8DpYq6^_DV&WevlkI!7v$+0Nv-A@Fb8|`+FMn5GC2!nR4P)|NZm;tWIzWGa}^D
zeJ#R*uRp;@yBJz)E4T(#B$T+S)9hKrx|j60t$K*}(I6oj*<kj#eqAX-Y`_tD6-8FI
z<zZXa1@Q?iSRyf0X|3m#`u!FoLdgl_&J9@((EVkm_=v@9ZCBzGW8$`^*6QQ!em-<4
zBHAMgNzY;zwgeD5$qH~frm?h(9Kl*2x$ATDCgApIC6w04l!nTQ82g3#$^kR=<E;Dw
zpDAeI&jka5XswcD1sb(WP>Otley|QrBK%62kOPDmKab%GFD=)01bov2xtphu_eE07
z2&4md$~*M`>FYg%qKLY#QAH#wAUPvQkeqXpASh8pavlUhV90R@3X(GdLyi(8&X5si
zKr)g+V1}IIkYNZz`0#n|{oc3kkJ~>^b#+(uS$plhPghs(wGV%d6M$4pf?se4@0RG$
zQN2aC<td>H5E&{;*}&B9$eT?mx7i?1Q0-3Sy0zPmCY1IXoS<ENdCm+;X+5Q$ko|+=
zMVJmaX>aRr?>X?aOu#=pQDo?GI1u0<jf@ZIcr<~)#Z3erk!nL-X)1i<xMsuOEb`*%
zrm{~cY?90ERc<e_ikMth^_lJczqJ5{Mitwln>_0NVx%{_&<91$epE<#Gl0JXJ_WuC
zqMilz5Z1e}3iEb8e8F09-$UUc0K`lE1X$P*6kYvl2q(n(tgMw8j_&VCw{4YVYQlXh
z%EGP_aZ-#E$$pWar~dcgFR&9U%f!nnmiw}^)&I`sxPL0r?84g$RN5JK_8C;*o>vfT
zO!so6R8w%GFh;rjFY_wduo{MTfYHvP%vAQ3NblA(sCKl<d{i^lb~hrJT#tqQ1%_n1
z<+0Tt+wX#-lA*@BeHw}ms(EMDDHNb$@!X4oc$Lm6&6kF8QP?j`TUop&(_~W^-i1dF
zkWv$cQvg6Q-2mpPOB%QDWU<}Fr(+8w7PwJq3u`>(iFBE3tOTwL8jr@fp)T)3RNlYp
z`8ogVF?J)WgEo4^*uRFVjV){@=XvdV!^o2S)VZdXyBgcM+w#jx%o7#A<b?4Gpztg_
z0WF#;I|~26yXMBwC-?+Xgp>CZM9bgV*!5A3zRI<tELdU{qGm6j4mTkwb`+y|A*V~-
zP0UUzRfS4EN3)~Scer;TngTE?FQy!RrPsmF_>7<FG7a;ELgWa!fo_yxhxpXul5^;s
z{{WwXlQAVQjbE_xNH~Z2_hGMd%0_)+ab~pc`@hiL_wqI23Qmh<KReJ0`&DQD&TU_`
z`=2h#>#82%9^>Qo_E8KCqqESWvkQr6(ZX_t3dEPWk545axIs~+?%KH9^=JA;f1qVz
zGV~vs`jxMM3TZX5{XMpi>_fhVX^WTfD=Sf=(o2<)GP3g(D*G$F<&ke_xJYAMj-pD(
z-vC`4`slhL0lHi%Y7@gFrS|VmKH3-UnLWFw-3M=XWo^9ZYnC$eaAq0DFILJK0sYJ8
zQacFXJXY|(u<5q>=;0?7fg7>cKO&kOIy`+-AW}K8*e2W0Ke%JN6#@L(C*<2JR>CPc
zE9QrF7-fY~oS8QC$`2UY`n(0yl}lYk9kai_;lolV&?5Q%+QBtU`0ViDFqJdqAf)7g
z@*Ai6_w77)0_l;L`1i&%Nd67`9V|;0pt-y}aRDC1hS8_wv;4-Rs*bQvMz}oe*KYUy
zj6q?qZF@q2Nr=EF;Qkx7#9Q0bunVboU6q<2w@6_d5pSE8Tb(JouEgW^#CY19ZK$Tw
zg2>|5UbO+-lBV1u%=ey6eoyCL16^Olw?scZ(!yknPX5`f)_zF{ure`SByNuQfM191
zyn#;5&<K7jImqZpwismwp?2`Q&r+`2aU>k|Ciz~fzRr5)Rar`J{Ah*l>o$;fW`yHm
zm4q`U+jsR~%B#AH#KQJ_`siejUzcm9oF0V7Cv56gDpca?<PWoqMsqBYtD?J^fs|~i
z3F!Vo<^u}yZCal(XKyRsn%9&E`0AHlytwwcx@#?P^Ebt4o&3)`XaG!g!zr*kP8Kig
zuy9LQog!^t8j_u|7GArCnA!OIoJ2!~PMxGdFnvzIZSq6wceQ~-(Ya;8-t_T4@(5cC
zT7CWl9G^Pu$?z3NO;4fWV#{k?Z!wMlL!ss)wZ8mlTS<YL*B#(JHi6w&A?M~5@+mn!
zC?g#Zf#<qb0}xwJ@=;G=g5GCtZ_$!iHoV!$TEVV|7lSnLurb*U362i>h`_g0evr(7
zO~x)Rv`0Dawr;Z4>NEM=@AOk4NcO*4uf}wj+wG|EEgHb>6-RmZGw9BOlYIu2e3f3*
zQ*kI@;|ZrVI?ISZC|<Irosv$-4qshm2%cTvMLESUOVq<6mM4|IU9zJRl5TC@wkI?*
zn&eP<63n{K7zRWBN`J~MNEG^bQDfj+vXrSlgmM2@dbv-L_C88>Q-W+(`1zHcbgeA9
zc_wG%Em2{4qqVs>WQ;@o!i^wkU}1P`w8`m0XtkRc@Ax+Yf5Gq>zUG;mf-P&%?*@L^
zqqOj2Mjf%9zY%ZV7d^r~^b$80eatigS$M)2j>uZ_>XxFho6~?AqE9z1*-CviNN0Bi
zTUnG10ga~#0Dc*KYFiLD*0gdqE{!v@oi%=k(1B@*wt)KZ;d&kK?q9wc&d0;VSTCi2
zC%;EY_NF7uaSI~jTmBxHIr49?hC?UoX}3xgiA@^5@t3?)|7?{o+GKViwAo#WcYLO@
zU?@jcYzXdqGt~@S9Skty;`|5pbA0~O-5-1X?LYn8oMvs<ziev`r#7p!@-&$dGR&z$
z5yAik*knk`+Gl=%k4*#w@r~jAcpDG?#Z$RpX-=JzCWzZVQU|3wUj~`JWa|XO{z!`k
zS2Hs^StPtiiT0)++mlD!ew~#g?=$ykfTew>@6ngnJq_3ns0rgQIeeJjLKHh2%I|JI
z7yMivd%;lnH~nrBO@G6u{pgwi{K#IOWbrDV4s-gIhaL1AdnMdM*aGzd@ork%By&}v
zL~so#;_W<IplXGJrjvW(L-)PQ|Iyf#v2rTJo~Az9L;B5Tp+Db$AT?=uz<fRXiWnGz
z=|YP?FF^6U;Y4SwYB-L3vBU95GSV-k{et6%D=+n{0}aq}qc&sE=?vSm$*ou(;5>dN
z`NauG1TN&CezHP|?aOr7lYzhSkIM#mcZ(l;2Dv^wioPX&Oba~;cqAJF2itP%u=EGT
zR<Ky=Y^>jVl;gi$;sMZ-r?cW^O{zVIe<pgxm&3_H%WvEFW?CMt3KwX(o~_hDv8|+`
zfahQDYz|CYGv3q)1WG5&0VTpLJ9M!gCQ@6zd!>WTbU}|h+F5$hPPHO2ELDpKXYlmE
z^>2a4wX9gQ=y{g^;?8Eb|2DJ)Ty*d9cyDIrc>va8yIgmm!#9fyuWkYhoq5aX0@Gc{
z?)+m-YE7eVE+o{EgwLfYnUS@;A+RV-nT+mQ$ClP#8BcFCJ<sHvw91Uc1AV6=K<+jN
zVisCf7G**>L?Ss3aE;a`LWPB=$%fgMw$b#*Z_rh9;%pcj3C8c7&L+58wb$RjLhO7H
zA{N0~4+v`)@LO@BW`_zwYCCDIM+91VoO~F_tY%)*zelrVf5DJZS0${H=i6C7?l8C9
z>_^1Jg86zo4d&F-gC7+mKXs%Ch#9Na{0Hudr8><+<><vn2Uh2*w8)*CZ~<cu6NFf_
zubjtG2vC$`GDd!`wzogyI|umEji3bbiBMv+Dg09CXa$LP?3EBXiMKJvx1D$`f9BL>
zAi+3c^o4vf$?J@qQzz#)eY7m&e&m<Ez1>G<p283}@YAJJmdxa)o^5$J)}iM{qhP?a
z$CcgK3>Dhd%eGne)4P@z1LcLF_jD6gI~!^IWc*dkeM@Q;D#p0OuR@hho`~VfZJwab
z#!n^;*_ar=bp#swUP=U6L#5vCIx}POh($aP#$)+^26&?3(V~_9B$adZ^IHpm{iywI
zX+#bpc+X8qH8t|xB$2245wX1a>)G0dPdv+3rq6EdIhE3xm1Z!wqAcJizV6pPcYdc*
zR7++$r^Z%)i2R<C{LD5xP6m_b1T<Z4_I>>*ge1<~hh`|BD}1zUGOV$n^~jKak7!uN
zJu`}p;~^_6Vc2=^F{b4=Y13w7x<w`TiBkreoPU3IcgEoPK-<1AbF~*UT{zv$x*An5
zO`z*F>ad@y-?qld&nbg(IT?wEx&Z+6awpfHsvfmM)uOmSOy->j2R-3TXtK!6$29WD
zzm05_w)F|VrinCK*KVOBEhvEOSj8{Y<0gO3tB-XaxO2BfUV9NT70;uzvrr(-nxHFL
z|G~QJEThs)QpO(6tUXiy>aYI(x{C`M<?R6Pcu~2Z;JNC3B~$St9}APTKMB)&y}OFl
z_)uOhzdc?|>sEcAgP5P0YrT6=7a>ePttP}gdNJza$Ixp}M+5t^G)O8=MlLqw=V%<p
zqo|{bDJ)OUJr?*KH6Z_!YC7mSGD6hjD+JUUJQBqUdYFB6M7u9U94g3~r$_a%6|R)w
z1~rOwu;UnpoY>iD;tfRFrhF@tApbf5b_uq43xA<I?V`=7PtyHVMM$mY4xAnsaWi`u
z|08kZ-W2+a$z-Zfaay%P1Um#VlT$KAg#T(suIsJR5uD&qFRWEEu$AxBI0KuC3^x4O
zhcJISd79_+N;XG2_71IBO;L=>n{K}}&aIQIj$7r@q<G<ApTV@J@o0Rmgj<ijq}Yh9
zYSbwy;7>=~P{9~ymOv(=*%6S;3-nDI90%|n2KYQxtx$5w8n~^a6RHXo0cn75u+HCC
z#;icXF@j$Q=J=<Y2oiVR&5?w&4WDBHLu6So0SH_DVfwOltm4;NqV%lAO|h|`(*|yz
z#XxqxL6rL!j+kvh+pYW(VXX^+twf(SBlfsdt2wKUwmcb9+dJg=|Ai&3-;J<z<<*ZN
zU(YN~-R?f)j15)ki7$131(3Sz)yr>mi&}Z9B=u%9bXuD;>l8}>xDPjY%$XXnVeas>
zn)78*Q=5e^d#31+rQjGOX@ONhD#}|)m!3<rwsYXd@XNq8>C1XEl6ZzH(JrgVlbaaM
zv}6a&R^?Xe*9#g|wA07wzUmb?4WB#Gok#4kl22%p#e8_$UeOU;CYiaqk*RtpORdYR
zzHpl5AMA9a#|vBa9m%4nzaF>TjBj*w&E(XSrq!huUycpejB0)6a`?#pVye}M!<id-
zZlQdXnc^pglthai{7@KC-rD9WM&0;4o$lI+OG23?2nN#kyd_3X`*$U51e%H~S36*t
zvLma1j}ty+1+DnM*ih!;yO(C`^7efg!XA{35k;0%_P{1sK@pxGJmS>$4bJcRwQsF{
znIy7yhF<mjto45hKEss>7?fBEHRskaQmw9(Y`c#NBF%J71O1qaBKyEP;iqp-{A@pg
z@VOUjE{qlD8mJ^S<Jag0a4~*WH9Y~QGBA?gm9KB8C&H%>wKHSrOwko;MhUJyB4Hfr
z_j>X+7o>A|v6kGy;!)aaAU(T*3Klrm4OtzoZC3-<a5ZF!3V+f%vTW??#rRFf3rE@#
zkJx&uF-cZNUi?NDEPG$@y!sL?`=3M|M34Jej6U&&-S{y4%^;bbj5CjJwJn^s!4Yfp
z$-iGzrp9*NUGMR0OKGNSgSk|u#zo}uEu$aWn~zjnlj>K!LYHYb>aMKrIas5?(hiz~
zbxJ8I*j}kK4|)$j2<ipR-J9T#^fp1g{)$6WdooIk%R79t@P;>}{BOEm<D-SG(fY1S
zw~gsS;Yp3rmJtgrpy{We2OQy8QOZ;3TQw=Ma5MAREzyy3LYNl+L)d<Ig){c`*oH$^
zREk~8m<3nehTI-))Hy`#*nP$PL{Rw&`u6a(la4mp{(iA*c~WQYhr$Tp8`&KlztH}q
ze6Vn@+gr_eqs($IxV2m_sZ$%>t#P`mr#MMET0;(8e;<>7emnxO7@df(bq?^G?AxMK
zA;vnD`rj`GeWi-5d1sfRtVx>a)sjEq;BEn#rMtbX&7kk`mxZ(H(zbD5oo2Y1el7(C
zt+pOWV~*Q%y(BBY>;1`~z8)Rbif-IJxGx7Bmzcj+X?=8g#cdguwYc91c?iL=R9BQ1
zabj{u)3jgMd|7ry{AuI9OfHyP*ob80dYIGl!^OiGZgYZjFoNwSUB!rt$gV)<ZbpSr
z^gl+QC*r=y7A9GsBUWs8uP8Nm%@dc)Rb3@LG_;%7;|K)81L`HihK6J$IW$nhN7}O^
zT5{vD=^GoLENO_XFO1M3s;H?7bsNnmfp&H+-Mk_l)Y`jQz(Cda+!jHP2NO<aZz#PK
zC*OQ{Yv(MwXT1=u&=sRFla<dcVokG-Hk4*(*Ko%*6m000*EE6KxHmA=GBh*9cl$=N
z1DcxlTS7y%*@!3^@pfawmH)wurUtG|x!#(6YnuGX4{t3?Y@=?bD7+h4#rJVOMbv=f
zN99`c61S3HfF_Om%!PixrzTxyD>Hbir2tVwJNXD;)n2r3cqpWkE}~iyUU2v5z2owR
zO7B=3UcVr$^hq23y=eTR$>Nb0x%1Uc;So->Kd}7HIaKT@Gf-4Q@mAAam*6-QuIqgZ
zs6`38PXp%WRoANM>fvV7=7AdIIuO-alWxM-XbW#I*O<NNuem@Gr4wr-#h3At=Ooo7
z58KCE5+_j-LP#q5h-8>z`@H_&*H6S<cO~xl6z4wI+{u#r5sAveVAUc>I{FVeovHN5
zk#NNqtsYE+iwwx}DMfS=eku<HK=XLA9H->D;TV?0yQXMiTz-m@ffhDhfc0S4xG{Hu
zY2c(--0+f7rM#l8O%N6bdycNq#PDf%!U^&w3WR5t;!=a{M;BOGVr2IK&FMHFcVuE0
ztej@Wp#`@`;ZH)>jE|<PE!>g4iut47rc_KvyoTxTwhBv)8f<C@<`LmGwGdOWeTDI;
ziq$hF-KKhawWyJ8dIo|gzLnZJkNA0Dv#surrn=KnghW5G;Lz`QK5-PDIySkQb5g@?
z(PWKkXxYdvnZGXMO5b6Z!8geGO39jPO;)km?=_K7F;#R~eFE%bu+1B!dKnl8{P;K4
z9)Y9TsEzwCp()4;eQf8C)qAhGa<p!ZT@Bb2zD0Yqi3M<Cu)NyT(EbSoTLEiU0)rn%
z=95OGy}AWtCw#s4?Wm-m8S6{XZ`AZEv*?TuEBx6-^^<6_7Ne%T^5^z@<ajc>SvJ2@
zq?-@q$nuWrluOgr+O50$af=Uvc%1Aa=zXlV=QmtDVnx4&gyJgZlejo@?*RJcGMhYk
z-cfM?Px#zAuFr#~1q(DlX3<&2$=%>!NFfDF1*A;0KPS!71dX+v@}ZhGD;mSw>q;aI
z)5)rOfl(-x>^0Z&mf~xx8_J1wPhGGeqSK@np0C!<{b<p?5B?W_k4`sep9mw}8`nBB
zP@ixPC!K9O&H9YiWN12kT_`14L3%G6TcE@Pw#*nW|Mmr&O5yUQvV3V;cjSrW&w45D
zu{h#FtHl2}g-0;6;tt}y@2qKRPcKi>Fa5{?5B!bmcNaCEk-|fMo?wbDE;+zhxM%sh
zci_~Q#`(rJXNgs3zvSx88$MIqA!QGIN75zT`@0LCA$^11u?uJUj;u-dvtAy)rFuf?
z{7sE{>6U9psCU8oc1U}Ui`dzdOLQgjMzAS`HZ(f5ZaV5ljVtAM%RW_mFU(j%tcwX}
za*7-T2)23F!Tr;`Trw8Zy;B-Nze~47e3>+H*0a!X{Ra_WrR@B9)fZ{kk+$vSbhX1$
z0{KVG=W!fASg;i%2H(e%6R_nSid=a7a;gE4`=;o<{a|-N`o^@Ye?J|lalQ%LMwk;^
z&T<`RALbxx3j>PuFuH1Org?_LeII!2V63)faij@UssG0Ux9)|vb2A%@*Iktx%kzrU
zf)@bo9=YqN#Viezar0)C>tR;mOe0lgnPZs^6Ql|8Z<QkU2ICjsz@`5&g2L1L;q&*_
zuD`rcZPvok)b6v#>H~=|h_^Cbyf4D;Cx7wm-gY!s8HNpznNj!EyxP(yG`EcIiM46;
zjocDgAX)_xck_g??&4l=7#Q`O`>CZ_1;RUd0B9Oqlb$@Fedy>MC(^#s3Ka1&xZsA*
znlN}g@rQW8ryEwSV-8B~UKH?P&sn@SyXDGm;x&Z&N``lgFPyezn_wIjP$mw`d~WG1
zH%&i{&nsFTJ&fDTfQDuJ1}km(X%5qjzXfzDSBQgpQ}P^%YUi~4Y5H?T#I6=EXBhmZ
z82dwt+ALlu1lZQ^d$g^NG2c3S&gU|Ift=<AUuAJU&kG^oD$NW2?@(4}+){n+HY}cC
zd`H|Cu`_`QgoXIOTdXEt<nm}c>u1?(IcpsbjIJ3=;+e`CXym4$la$10wC<LObVZHm
z3pC#NR(I-~&W<004-|dlra@jeSbp^7sTqhK$zI->0x&>dxYt~%@m^T>x2w3v+bqb}
zSD5Zu(<Nl}VniKos-Xj!OkHVOeS6#i1R%o)j)9vc=Qn=1mw9jtCOCy>TTp1m{|AGn
z9_j)8qODB#<09ta^MF-86IbGoWF!pMuZjIQ&4{IPBUajuU#$3GjZ(tMYcnL#86reX
zR4?OS$KDaCP!2ZpH%|TTm=d0$WmQL#d|M-rtV@VmHKY(xu}b3X`lSKo*9pY9`nTOe
z`L{3>Egn~a!eBa!`J<DYtHa8RMwU`Da!^CBmuoGjPYx_+tl22zCuQCgYQ*uJ<pspR
zIvu)Td(f0MAcOvtmogdCAZ(&^UreZFB3QK_M#J4+zAcq?^R?oycnv4z$bQh(K-U9}
z?1Ecp7oh3Rw1&=lv3|8+rawJ>*h&`7aQI^P7t<%S4lw@752V=zj(m6#ao8m7B0|0U
zh=l$ll)dj|*VQU`;N0Zhe;}*9HT`t}_S!zYsVQ36i6RXA$Km9Xud(C1J(H}8=uAz8
zIyU2O5n!sV+D+7I>T0?Sc1*i@rVZtU>{A-BdwMUN&W~xlQUB#rS2&`@u^Zs2lnf;v
z^?X8<l=4f~FWGF%CRSSLZIfU4RWE6@sLLrs%pqb#8Q$pSRzQa4+@J&Pee;f2BnL|U
zp^=D;=YHgevX6B}6|MN-`jug<8Wk%BKCu09o{su2%3G>^C>^K#Vl~*=Q%$83IzQ(~
z06f_{cbKaPXH121K&EZe^-yNRHs8=I6F8<n5Z}WjEKp_*0O%F;>0w2&!!wXok=!$<
zcp2qZqUz5gXlg2FKB$*_l0tH>@n??cj(ToFP{5HM)*wFgmFgwm(r(-lfh@YNM;`q{
zg0c4`{jTgD5hW&Rt<j<9ockYfQ!GteyO^`%%2JG85cvS=AEqez%2TDxo*}=jW%{g7
z7LUHdqy~7b58U`p5S!@Qfbh_4eftQC+`Ty1fPPGQXYtLXYWcQtm-&{j>eBrmZs;`9
zI!0EW+YrF<h%84K#BnlO*$sE7h`!-!f9091<U+WIFj7TzXV6`Qf1}GApaJ=v+V@nK
z{R|T)fbxM*g#SZWgQ`WG2Jh8nV8Dg`iQLFilJqMeQ0y^C*Hg#Vz1G}M!jbRp(*st7
zL+v0Jnr~Am{-(`x9aC(V2H^j1x}G~9UErO}M1d^V$0#MXVsCP{X5wV&1n3@X$UZqr
z>tS47Vc%j}D<Sz{{;d(Ml?BzNtF<m!rVY(3Jz{m-G7np1fKoYh*dD-661mt*?8LfP
zIg2EKAw3zJ8;XX^Q#R27Z;xk1SO1$h7`ptjsgd*D&PFZqCF|(c54Hcvo3zk{c`5PT
z{BR`Mqhf_%80|nzJr+%gI}N{$;=}{OfK#rxe`u#H_uU5_xO*mHO6Vga&1n{NhuTnl
zhx<d_M)o{?>v&f|Gv_ppjwgOnI9!TTT6KurbpzfI3QNaD4oX&0xNnwslo2om+BnsU
zB!JBItdS=ci1BnE`N9oFN5}y;_+=uOl|J6ne$`snCR&U9`{U~vn<7l0&N-b>K#s<I
zn}#KXseN`?#+XR#SDw4?>Y|J|gW<Y`c3aT297XY0a`V_|Gbom{PRbF9Q~srY!mRDc
zyc1{KZ12>fcv+R?BL7Yxrffi9ex&M8v;o+{^*WL(&+LD%y`KX<98QB3Dnq%9_$rVt
zqI{EKkubPL_gxuy&)qDlr#{?P+PN$=9%m-ijXLX{M`%cxqAcVyU__SkHXoj28^$VF
zj<W8=JKq19Zxcxp{ii-_TC8P${Me+;Kge4`XKAQw3-^M+Z&7fL`jYcU$Slt_c#rfL
z@HpVW-rg5tzG%;RKe4^Se<$Ypt5qUG+xEd|ya_#uik-ozVmqn7<RGs^=2CNZeIVO-
zDUGAaui(G-7rQe?kAYn&^|DgL=ItHbl*6l)iJ3u!gCavfrA2ol*3g;`Wt+ie+;UG}
z?(h4i^?adsE1x1G`d)6$#!ThU*xmHN$(tb&uvd<c!L*q&IoI#oyGU`+v9hk6`8i?P
zWXn=^C{QM>*0f*j6aTZNLF*CHBzzMFyYkkaz`V+)6k7^9RF=%oimtznBy`cfqkZq~
zG_+~@L<$)V<8O}GdIERy5p?On(CUnhl3#EmN8%*TH*^iY$=zr-MjPm4;*W}Ms}yf4
zCk0&tC{?FgQ<|3ow0d7h+bP_yJBakohToD_zD0jjJa;#G&zDh8?)=_AJcia^5d?gm
zx(CJEQ34(R@X~%Eo_qtmfFD7s#QkY@s<XldQCOHq8+a~qp2_kZB&c6%qx!zFH?K@w
zxrcU$5f4|#P1ORvBd9l-RZ|tMc>o!qjE28EWeBF9gHoDKi~0Q;zY%ub@?5t<hMLm_
zaue0ZD|s5gCoiKb<5+Dp!&BH*Oh*6ep}HZYe8pz(P{d!4Jj@-t;<GND!aIVH35g0`
zn*D`|l+obOz&mBVBva~W5);=%cQn)N(gSmP@|EyNx;RFwN^ZI%mhj$N(ipZ~)}@%t
zxsn4TL$?1RH-+A^I7;@6H?-HEQKUx6jwj8w*ZcY5%dWV9hu5Y(2yd<SPAq7fV?*3=
z=N5v8YqZXptMw0HR@Cg3QH9RbF=V{Uj?ii69cMU&3-sE^e63EO2v3r;CAZY~8-i%L
zt-=cQ%eDMzfHg|^aKbMx0N>5ZRg-J3nHm#B8{eplB0TKudfFQ!yEBv1E9WRDAojN1
zi0w-yZCyRA$9$C1Ii>c`6m-Fr6O|J1{V;7LL}e<pr%R;8I@jLDU5}6)6nF-tx2;X|
zTKL1QjpBCE3YfBO`t?+0vUy*ha&~<F`VSzxrnr-fL&d~SH(X7!;!E`Uh!EO7a3zPt
znez}VGP-#6-~q1uzdZsl>Tg5uY$0Y%*8PQo=oEA=sIrZViz+n%s_dAkKK~wUzXH|P
zSSL8_Ori^Hd?!tVzZV|P%n0(DUmM}YmWT!$1rJ#8+Btw?VR@Brh=z7VW$wi>tf(S*
z(LHjdxC;E(NPBi!2m=Py-u0$Hw+AjeuxWtLTTgXCcwDS3!$|y0G3Fq;eczPtm!s2E
z@*6#a_QmbLZ$Qc2#;BW=Zht8$8(v~=O%2B}EA8xFa~%X8)j)1#be8SPj&_ED{)H#3
zE2u3@W1qmZer;?+<689vG{-dw;AZuhh71sG`Z*Wh#2599eRzae9oXbVQy}xZ_FZhw
zqA_ClJ~HC<@2i{|jYp@@v>=6lG0b&NMA=gWF+ghqtg~=q@6oeO@SL`Dp@&ceZ9Vo)
z+;OzTcUit^q1wvKM;VEEKEWga_|?yTehn4oO0m`QSe2a$%3rd703gZunl$arpuKF2
z_N+d2SQ|;IwG!ET#V>gfMeN@Z>e7Gul*ye;%PJp-;V5${!d#4`r!@Bn3ZLh9uv$7y
z1HVx3Vq+{e-Q%(magSc#cU#9?lSo!M#m$RHewPWfuB}+NN|9y<_w7sFyNA%EuiMSI
zCr}>nxza&4hQY4*HghfRR8=qi*e*rTvo10!ef3W$LlSg^r#9vL<&9M)xg(k5Q=3K$
zBl#mkhVvpjkVZ44Iit-}WI~OnmtmNQFV)B)ov=xI<B-AD#jMu-4KIhL>PY7c?|xW~
zp*!Qda))`x1zII<;M6?*!g6NcR@+jmkDT{#kc-W2Kq}WV7Vrca3&=YjluFl<IaM#b
z!@A#HWNFYRE2l3hFy;{!pVE%*lz1<k+>MwZ;Sd*ICFykcrmrzt$zLJMdi4k}Ze#oU
z`JT|X{Hv?0P34)X1(Q|x@m3<|szVf_b=I+Y9BO>5{XPp)M`>~ayUo5JOfOr}4vlIY
ztlV~Kw7XunC?3B`8PwL*k`NR8dTmCsiSUsr{59xk=?Z4{U@IxUU22=SjtOe)?%zG!
z$jFTwY8gu9W+-QqCwbgIHMPQHb1coNo}K<D6Nj$LU=TJN`<C+aTDiQ=>!YUt3m>Sw
z-s;h~ztg$^&EsB*#d_ka3bks}g&5e}b%$rcu#n^)BgiIYu?Lx#Q^h98QQgT+iYis!
zw=;7LqHbGUa5_)oHpVRv>(1kWj&PW{v(&EH@ixc^^}1PCw}~(cbQY>pKdR=WgLdD}
z(-&=yCpSeSES{G*%K#l>l?~od(jP!T-%-xx<J@3zYkqMitKD3vo@8b3LdEEryNzUj
z_1unS<>%6jVj6?v*8#49;RbjkacUpsPy7oZ<HnPpPLc+UPQwo_^PZ?*z1%jAX<AT<
zn_3BwQ+C~cJqRYlB&<|gGpnMkPocc%@bI6_oy|v`LC-MJ8y{kO;X9-^ZN`-Js%hX`
z8VDCGb^Q!6Fw~34X71)M;r+yHRmG!v(ZT6?+sH_KR%>=cV<B_2>Fu-b@D)ai9BHr@
z`62K4UW~sv3&yJH(?fauX4)3TP}xo4A8`y*2BHRnm7EI<=%E~{s3S*<S5W!atFAA7
zTBfYY>A{@W{<FoWw%}=N=ZhXEC*9hfI#IN#5#KWOyjS`Z9Pc5zJEhC{<oKGXItB(K
zO?QYEJwMg_;b<<j$V(bh)4gE!OAK&e#~aumZkWx1ZgYf10Qu<2Kv}a?mMHB7AJnHJ
z;sVCPB_FV690=aP1w*d;qMj~F<U=@m>e$e<2B{9djfxsb!_U!47EW!Fq)SZe^vj1c
z*17ebLkN@Bk8l&s4q-};{S_{-|9CwONY&x!InzpvEV`yFtyiuaK?}H(kGkQcjlTm#
z1t#5_v}@%UW0bOhI<70qfV+klT*YkTfWW~DtbI8<&I!Hb#dsWOyl{i1Qss??{hLoh
zXiEO{14{f6LzxdTx!K;}s>h8o|3W8ct{;)9*S&uKDN>kB*(AER31u3Nl$C4bH`H42
zskr3fRx6n<JKY(`l>HSq<Z#JvC7`k3a@A!Zxn?*@#4qW13qoYAvYVNxUN6V-!i!)Z
zvYg|A596t|i0;$&|L+LZxU0Fj-8693cr{jQWZ%|C-X-|3TV(=V>m6C_z||WGgwI4w
z*lzC91`Ib^%*T;U4xw(M5Fr31UG|d6uSI1{i>yDHN86bGirvdsR;K^*vqXVa%q!WS
zf!;Z?o(i9<dam)db+*boKhw0!1S#_aS(5?+`sJrnh%!`A3Q!%l*hT%)X>hu?bDvD3
zb2XpuF9^iN`uVHBU+yPaP0T=>IrxBH;cx5_Ru)x>4IsoHzvs1aC5W@nj*xvR)gb#d
zCAFBZUiAnKC&H$(*XhbZ%l>wdQ}f`gy}vK#U$9qY0RQdeI_x~=^6h^UanK)xHGO;G
T<E8iW-{rTjwUnzAErb6LXVkrf

literal 0
HcmV?d00001

diff --git a/doc/development/img/performance_bar_fixed_cached_queries.png b/doc/development/img/performance_bar_fixed_cached_queries.png
new file mode 100644
index 0000000000000000000000000000000000000000..3f4232fb88fb3f7b5051bf54e7429a545eae382b
GIT binary patch
literal 8557
zcmY*;Wl$VlxAkBHK>`E_4g&;t*Fi#H@WFx;T*E+cclY3Kfe<V>!QBGE-QC^EpkMMl
z?|r{}`$yM4tJhw8@2;*>b$W#>D?zZ(NzefR0G6!GJ5>Mx!TC>2g$Dd{r%Mvf0sxSS
ztt2ItKT1L*?QHBE)IJ%Rm_f{J%^a*uR3UEx0D<V}_xhG(@9{;O9W7|yjHuc01UnUp
zVbNkGXz=9KHu)|u^VufL@-0yBnckd?qz;S-a5q2ZL8X+vI1e)Ld)n*$Kn&N|i=wsc
zN$9i-Qy>P>+TVf7dy$2QX~NuTR!vnaW+z^kS*O{aCyf@TD0_`1TFG(v2(Q!2SqZr|
z97AKnz|5b6LURd$d73KZ%=*O&h<s2C*E-!*$u3WW`RV1SobUD0<OCplO5>WHB8;$D
zgtKq&f4Lxd+{ICf9q3Tp81L0{iubU4G_0G<b~}ptL|d6}v209+p}beK4oks_9qRop
zjd{;mIb)EkXnk0+xBbO9!+ANk>eH#wQx2@tGWZhK{cSWYM>OcvNbjDRmv(nurANLb
zK1cciZQ~=%`v=+DVsb_tt{Cw1(n@+oA@1ory|P8rlD3?J?{yJWKD$ADmn<8sVWa%J
zgKC{~r6mcynVl{@^}IS47sALL;Z3^f=lu@%FtzN9-R%S3^k1It?;h@2++}XO9dZPZ
z_r3NmgOXWMAHJp}1`_lHhWX}6OWf>kJXI~p;UE!PlWfcSvc>1W)Mek)hZXLP%3~7p
zPf^OhKD_f+&3%4X6Y1brp$#lmiHe3Uur?kX!c}@l2)%N=g854QecP~VUZ60fa)h>`
zD{3L(nlgw3S6|Or76-lra^Zi+Cyp@4Gbbe7?GU*Ts!bd2Z0kyV`uWo!5Z*9S%VZiV
z8t}TB<RPZ)^`zN(X|SFNo|q2{KcW~NG3eEN;OGY~*_$|fE(B`#2oc4b1hQ&8)6=^-
zIUA`DBK$LtEm7R6g&9)Ig0;=LhR@tg3VLd@Wh^g$gwXtAyhqV*edsf&(%Wa@SNX9)
zoYkZ`0ylskK5*SIKUf#6`EF^R*E{s<3^i9PbRXGhIl8_lfdMyPpN*&WhWC<R+MjP}
zVoUoZ52Wo@T<MEw+p)crE=xhVvxaLBD@DI6y9&Gttz~JY_hxwPYaR9;^d9ye@$S?|
zj1&Hqwb{1L_KDKbpzp@|l0;|K^R+usy~Td=$1*u88XE$N*A88L>ncWE7xb8DCT~^d
z{FA>Q-oMUa&jypfG@;!2cCXjQrhyQCUxj$3`1Jn0`u?XxMsf{1MS(U6yr?&lrcsG}
z>bDJ=mwD7l&}~&K95rDzyyB`U3GC3CLYG_^;{5~pbg^x<>cND`iZ`P6q>$|))-Zvq
z{6vB=Nd+HMa{9quSP@akPlXsuwa^8a4k^m%%2n)D23IpSo-P|C^B%LKP3-*Wo^2zh
z7LZKl=ig6bOEfx&x`HBb8MIKn*hwBI<At#{b$fKve#hnJ^EkD?)Z<vT%j#FhFPzoB
zdg?SID*jvwu!#0W$j$M3kEDlj`e)bBwo=z}(o$3qGO>fP8JXG{o3XjUKK<E5000p;
zp+6za%*hDk2D7ns6mkPo|HBaa6aR(TsX_lxoIZl7wG@>>l6DSeAYL{eHV$f0bPxz6
z;$Uhnr20<!Kk0u~U}{Szr%yuc?5?h^Y_8mFb`BQooPvUa>>OO|TwJVw7_5%&woXQF
zthSCc|BC#N&O0+l69=nLPF8ldpuf6C#&*t5U~1~Wh5mc}+ozM2`TwtE>-e9s{tU?e
z_X#^E8wdM;wg04w{6&SJ4pwG=D*x3N<rMjc`G2tg)DdC-Tl{}D^Y5hppnpacMHgZJ
z?`so9SLmYG1^`G)WZy}syCEFwqq^x$Cy8?BkIUrq9W2LBml-$emJ==dnSg3>!WavK
z;%~lwe*3C=K7HBFwf)G}Pf<5s{MBy|T`EqzA?e~=AIf}kX_L+M%AsWev8?A4_hlb+
zVn}8#pse-OD`%(G_0+pQ({<H%<nh$~hb>IzC$iNSEAdIcLIg#m*&yK6Y!5@NgeA!s
zPwrpTQXI({M*Z({jby?PcrZKGJr(kw46La-!GCCl{vTzKNQw+3vDHW;{wk#dd6Z{&
z{t-<FmQ!I_=K5fP6<`d1aI8OS;`$kXDSyI-5T0EBJKigfy1aj@7%GW_VZG>b+AUhO
z#MwAdjG6E4EW_zT5{b=L-0MXHN4%fwY{{kG(2YEW#8z$fPuItKo+uDK3{Ye$;CYBu
zERb<)Tk`M(_dQCsB*PiF$#%33GJKhDxd%RS?=4!Q-Huz{=<IY`>{)`~KoW%|j$;jo
zA^!Sl1*03=SR^Z#t5UPS#rHkWF2jvW=)|X?ctMy6Uy^%HoY(D)omZffm)9+PcYssq
zpqyPq)PF|o4vpM%+w7pM^c%{o0o24rcsdI#Uqzgj*a=dz->PhWuz?~<N-}s4TU!^G
z<>DTW+1TAHZ)+?&viF*rE3cPUsCp_6*LtQbc`(z~_zPY3*B9sgeyDxGPWas9#JIic
zby=WW1_rCU9^mUUuw*9s&=P9T>O*{_eGhD{)17%sPg+Bbe`^<;HB`hZJ)g54SX-*o
z8;rxZuZ|r^G8Y^3O~jjGNE~w#%L~Y#buUg!lO6rsTxa+WWL6GN%-<d2MwEF4W70gv
z^O>XP-?WUX7;I6yru|I5Wh^<8nuyl-h+Rsf93L=zu(nog4xJDlQTm8rxRQN|cHLLz
zuq#zdo*;T~tRYK^QK>xb{Cqs3nPb}CoW%})#-Qo0`c=euuOe6E(d+%oQj3I_?T#rL
z_)ad}y)uT{`dOiq6|!t5T8`)EA>ZeXuXam_zQ>eRV-D$>_`32&m!BAwbii7>V|J0@
z@=SApV~N+|ct|}Cs*IX@pQcc|p_cOn`-A7Ps=m-}_td^}*NZ#6&1}lEuNhCVnT<1a
zfQ;hY^4UX1`}Mc`MO;6a59`##IDGQE`OwkOzrdL_l}E7nmF+%867?{bKBJ%PSnLuJ
z=jFG1r#X3$Yj14M=a%R3V%vU05_=ZJa&a|~*w#G#4%nKJGRQ;lp#p~^?nylI;;&Rj
z9_=7oXZWH<bI<i>d4I6oS8CS<fPd^@o01fLZ7awqVtx_=K2k&!Evy$W#J+)ntWk&|
z_e6$;r1#0a1__+fwG>}-V-ifGwPf_eGu+AOB7`q<CUQ7UQps3h{R2yy#Rr=LIi5bN
zRRLB59$}a-NrQQgTxalzWT#P{8Fo3Hed+KH%bAarto43N$!)g5v8Rd;+FX=qN?lbA
zrc@6Gm!vs&eIBZ?hUkm(3C~u(OinPk8?|YUI&XgyQ+x^hj%Rn0Ib*++(teGn?z0AX
zpCcms0^{}BwFX!EFi+o#@8dqVdbRIr?fqvz0*Mtx{&-p{|06!qx@65Uxa;lM@43`O
zsD5?gga*N9LF#~zrlz8eF)C{|_FJtKA$w!vfUbmiBGbSDKAydi^nQvvbq;<Ya6<KF
zg+@(P#*Ra|zt@^+zCI<y!*g3y%-2`PepVkpEq!pUh~903e$_4TPFQH^`o`61qG(#~
zY|}$W*XmFWs-mD1LOLb+<x9^epp^7P&u;<e>1mbm5&i*DA!_HL#8cZaD5j6}!r43o
zz6U||IggZOW^oqG%>UkY!zX*P?Q>oCV*s6nlU`Fpr{3!_L)~`=lXhz-o>3rm1-_2m
zSQc|XxS7Qt>r{r#9Qgc#;#Az?+Z6XClw$JZWil%*(&6xk5aUW~M!Nbaizu`FPN*1Z
zhke<TQkKhTY}!t@0&JAdHwrA9AsC|yeZ;t?*MlzGA1>8LqXb2Uz7&VDJ+ujfE9;}I
zh<u;8Ux~vQL_%4}=@}lnPQOO2exkqreuoepRQT&Uj5ce*A;&PkGBl){tC-z`7UkBU
zU~huZQXsyQcUxlu8fE{~j2SiJYO*AjdY3k_7t080ZV!Gd9Pv}N9U}796{1ehp(L4i
z$yjo(uat$^@e-&_#0v0HIDh{1BQQWGcCwN-(jz}b<((xH{C0MtVL+BN_y;Ae<Du;P
z;}s|jS8yX5QqwsZEx2oE7vWf!?y$4USh<<GWOGnTEj%f@V%mix4&HZF5j*TVp_Ds2
z$}jmqt9FXg*lQG%_w;54^)|%<9Q?yqJWmnz=jg)8U~HihaFR;?2T@67`D9DFM-t|d
z6f;-eq#CsETX85>xm8187pZG;-vGYq1n@w1<?YNGKKjNkUN4BeNaq@}mq6Kd5GJyM
zR$WUNA9tu6>1%+6qNQ6T?1CjlY(U-WEp(3~$eyNQ*Bq;K;uZKB)|#e3Ma9D<06J~2
zz5pr_c<p>ZkB%l7Dq|B-vd5@Kj+Dc0`DUv+VzD)KpRQZ9@5RabwDleTCzeM%z-L{N
zs&ld$uqJQY9=%Xff;`rF&(?l#JHfp+^{F4=WL2uEa?+<bc_Nj@i@gMuz?|E@Uri7K
z052~HWwqtK$hKD<xUsM?#~Q^R)B4C>>bUG?nPQ@)YRpa{6EWSNahR3sb2Bmrf~PeI
zIzW!oU<EZ(bJgK<JY+Lzi-O56R{q9Q-TO5p{H$yxaCEdt;oAT<^xqV9d)Gh&?I>U3
zLnKw#yF@aSAWBb#zImq;k!v2FFkJoS$4>2Sd8%3LsF#3cG76<&VVB>?PS@UpjVq&q
z<c3!uzzQ4%#gvq+pyU>NQs7Xl@0WC2XfeeVAq=+m)ZH-rMo?k$D`#uSZp?11MN5>X
zf82o52;n^^^PB_+QMCG_1l9GA+Mf?$zkYtMZu{q3=UeRnh&<1^im?4U?i}%s!~xoz
z^|H#hOR)aRrt>t6YB_4MZ*FNQhP3sroYb7qLG&|S0D)r2UZuPY;fxWZ@w}L83s7%d
zclGv-`>DiB0b<CV9z2$dl7ju#$s7z)m+MgG4z4GAUD3pQ`r=2`$aF5g>f_v8rFcM7
zCa7d^!!xrjv$HezSDz$qtBIBpM1RwXNOIdFDwZ5W45G-~J~}n|D0+)_<X`0wD;AhW
zt-+^<BL-|OKSC|8T01SGKW5{)&}wnthrtbUUHEJPSB5jBQOcVe-+C+q5I=sna30{V
z@#odfC<0%*9E^NwbH(#PP_Mr@4c6fjD8m<+0(C6Jwd(K3lQrY<T`)y*240KdWGi07
z4QP~=KKpMeKCootAfbD}!mu2c<L$;}+>*BzsjG{ro|%mW#-$+>udPSC#4o1A5G0kD
zCKp8mC`X-JP?^(S|KLpK%?3m0fai7C;H|!DXKb-|M)vko15Wn3(<p;2wyl5`-_P31
ziT7U8P;%PQmP^8jfx!aa+g0ejyOk(uc$%2Ohq)V!_v%+Ox(@OqJHyBwbC3Cy;q_S9
z-j};#qa9W8h1z6nsIm1G-<O9gAeF9Ih81APbQb#;suuez-WxE!q$E{!>p>pqqOQTm
z$Os1SYip*JX3aZOqpv7BEKVD@cFH22g%OFZ^*M`_g%TfLh(A0;CsunkW}?<~zKD!W
zneNk`!7ZpOiPt35We7V|-72i`(iTiI+3u9Ig^Iy?9kdaO1fL#Qbs3WQbJp`Payhj;
ze`$)CmT}C8)#^ueucv%SuiGtiVoBE|(UOqh07~8Ir0<VKvJaSXRJ`G6Jcv*lZ(MGE
z^S!DdRpYWHbyTQW$VH)Xc#{)0&7?hWbiWU!Z9iH=XxiTY#+VU(7q|M9?7+VY+V{-%
zj)|_-A4ysDL9IYn4Pv_Fr4-?FBMt}pbhd_f<5Ow39?j1Woo@uMqn(HdG5AyeGRSse
z=3^wi6lLG1VujFcXTXDVT#xK51MJ~l*J60s{B?UdjJeGUeDfXsFCnZ(b}hj`y$3IK
zc!jK(kW42mc*_vmK4AaVaw<%<wSg$Y0mzo>!Bn^n=WNGdU+!D6wOfGc&DvKxJO;9z
zIXAf3l_`KYM76RE%K)=adtVbTI&Vczu;&_;&;WY48S_?{q{%*^eGdULVxrVAXU-yX
zGWUqqLwPfMY^NF0*31W(zKvnKqL8xSi^C%D;|G$M4?V!zRB>3(1(Cw?$hn}#W5Oa0
zMMSVGrSu$4nBb^eFLT^TCZs5*7$;OvXFr*&X2mnWa7etg?weP9Sy}z(zQCz;`}VDG
z6!&aKN<q9Q-$?kHz%41SX4Pa{F*iOpL<;{@edHr;GAz-)te7Y_ZSZ*r)d_Eqg&6Ww
z_#8}WCyeO+8r<KaTuH1goOtE_4aaXnM_bCgFFt*<AEi_|x9*Ex=B6w`5t}*6!P%J7
z(Qoqa%TG9+i>mEcB~44;0I316#U4_&rSm3Xa9FDl%PheiGV!sE`wn+7*Yu=h+DV}~
zLgXI2c&nd6K%8&}b3$G9ErwWCFrUa15rSK~{4Y~pzk5KC7H-j3(_0Eopq$QiI9_6-
z514j)M+FIKG5~9KoI{Q2k$hx3L$$oQDqI}0wd{rj*-q8&Tz^{wq6`5{=xI<x9t;!C
z$0~eiX9uqY?{9K`igsmsd_wCrH&>pyCjGfe_EUYL+1TD_Pbk$vr68D+M11)bDZfb@
z;=vfz9%U^G6AD)Xg*fZ-%@DU-jYF9!y1XK}L`8&_8ywZDxFK;y+kjn~GwS|8{>*DV
zu47Uec@({tIEn_jluM7<FQ%4yrQv<gte5hjS1n{09k`aP@f++ei)-XywCsz<YElfx
zyWCOIdHLw)s?q+?Jn?mE@|h2-B|umSW6dxU{R$B<Ii*Xxt;m+`9@XlB*5c?^o`m_7
z>k`m3qW0+$m%o=PIFa(EM`Az7Ddl3YvvI%JbRbTGt!m3cz4>Z!YEWGEw+RAT0Mi(E
z*jsVJAm<d0@8=Yg+>~J{OD$Jc=hg`2*$l*<euxKP)zCZohWgAe@*hA^^&dOE%W9y?
zl+RKc3Vb0kpj{D+V-Z@v7$FXg2S(!)5r_sK8xrQsrgWhSJWags5z#79Q{r>(4c-@n
zOh{7eJC&<fN`lmkGBHM3QiyvEXh)2+#>%drp8MULIr>&a3utaR1p`X_=ibKClN;eQ
z;_}rZnOfb8_q{>U6O+!EH0%W2$D6yz5$v0?0O<T|t8Q*&9USMsx|UyWNDXKXLct^G
zQ}%cr=<-PKe#`;c&d1c4)ypBFAwi)ir&yyTh-3B~(301*CBP|v9dUV^$2+xnWNVYp
z?)x3eyAC+vYZ<O$_bg`I9Q|D2fMJM@&&ktx4NpghvTL=BewK|w37&MC&%SvHjmff(
zwUGyd5I9hd*!0`rb*z{Y)%f_->Wp;YS~Pq;gp=s4lR~LDnM){H>tpSQ7EmJ6#YZKA
z@el}Q92%*gkY7yB=d;DZ$Cx-3K@<zHTAKqlT_<v&>Bx@a)K5I*5H~t-uEM@3y~SZ=
zw6cXH80+?y`Td|uD?&NHz_-XOek}q7_Sh$=w~t(#Lr+a8!>Fz-Wld~+4BQcI&`<jE
z4filA^mfQOozgP~=d3hhcH07G@)=C4$I~K?GPS<V$L1+5QorRmsv^D%w^|-AF2bgr
zBna$CQ9}As08wupQAe?BqO;lfp)r`ld2B1^`CM8+np0LYKIV=nM>Ry_iFZZ6`E%AP
z)rxXx9{}WK_U!M;wI#EU;Vw7_cz#D+dJl4-uRSjEYXXne;PTI9T|&sIU)&*;`i<>K
zp0tHj#vvBPI%w^w6I;ZPeYt(b7~~y^L6(HH7QD`-o#Afc@)N6PEB&KKVYgR!wiTWf
z-Tvo&ax^~A$53`bch2k6N?dZ6<&C3!kEDVlss{9*Mp0NVd+>7Dh|6<iPx0HKBd!sv
z#F;gFk8JDtF}HPvCy$LKaouGS<X=ZmJVK4rLI%|A2M-1l9RWkxyV?2CP!S0XyA`?R
zVa2J{l@Y)3{uzr4Q*mzq(63C8MWHx=-<)tz-sdcsa4CCpn9R61Obm&c4+$aaccl4&
z+4Uo~vV)K4G?#&Xi(Q54)M3@Z8Lp1=Dxc2L7xDu)HD%VbGK9Tc`9z%I=^S`ebJ)f-
zz4<O$e-!2z+r9#~-kFrtnVj^f9tp(|z^<t8d<E&Zi<!wAABi8e{vtKBLl$il#GjtX
zd8eywm<>OWjLS*3SRKk^qe*@@BC-DQC5oR)I0bIIYYh+)=y1!O+>diB#UNdF8__CG
zq!ij?3xWGJB2-<-F-GNoQqCd5P?Fbe3)roj+@o4v^!ki0x<R>VSW^q|A!uQ>^nY;^
zf!gIryWF8CfSi$t^(zP0g9iR^iT`FL(^P*3djXI`*<qB_$=csT3j6i^3ZlW1hbvz=
z#(NO)T?OtyJf~l#)aF#q9rkS~qA+Zb{Ozh?LVYNI2-TA};r3kIz4rP^l~q~L)BM}X
zH&D(`4taN+P2yuCPJwS9Q$3kcreMjK<^7E%<m-xhVL87N-oNi8jTwRaDUO8=&I){d
z+i>*Mqln)%E@ToSj&L@Yp4CF!nh+gNd0k;}P~K(fJfg@<TGrw6&4^THL5A<ci(qaT
zcS1uBjo9W{q@92!Mj3Zc9``V)zWcLZ8_A9ZyHQ%E7(>R7gpc*j8aQhFD)cGTa;AN`
z`9Cz`s|>;#Md#+FT45tqZ+5mCk(hB5*5pO;i%c55y!v12+@5u}9XRchdv6mooktp&
zE|?1+Z)@FRKw{8Y5i8r>u84YfO@F;YBCS&U8p=q32B@xTNS#P^g}BjnP$Dk8iQP}(
zy5U)L6O2#X&HOpDLNSmt3>6Lpb=|#sy~FAHp6bJw1w?8M3X_=8VWSS%T3C|PJpTKG
z6O&W&L`9}sEF*t?1*xqSw|tvV9b*jf9U!c`UVO_!t(7_;_Nty9wc-12X7n;2^pn;U
zrd8h@#QDl$gT{DG$wy>zEqAq9&9(_3ix3@(Q`9u%ZV<7_ZKFZhlTAtdaBeOE(u3P2
z_T9U+S_pB^nC$bkLbJcQnwz6@v!cjOffPK52wu3Mx=&Ac8k`ULO2lWPdBOHvNS~8v
z$*3$uBtMW1e%qV(xgMTtyPGc*N*ME5WDMjyw63Frjn@V2H92B*onXe~P*iC2dkL_E
zMGvKjUCD}x%Eg(r!^f5<&&j`I<Rmgg1r4UmACiJf5hG}pCl5%&bm(BDs3hOEWf3cI
z9^6>gj$mZ-xLs7yNGiX+j;cg^3cl@;r9yGe!Be)=`Ar*Pvm}{M))sCFa;ro*qVjx&
zqI^syQ6QuB$Tm)FymMSAGZVP1sMcYU!!#$-YmL@d<1>ui;A>GNY@eS%4?&LPd}q5K
zsSgDfri2KPsfGJOq?JEX;fB87&_xtJ#U^qO4tAW{x7e29A$;Vj)4%0Cq%XXIt$4LY
zlce~@vaq5GM9{^0m|!qGb(K~(k}f#NL@{-7(WHjfS68VqfLy^|#+$9L(WrC1WG6PH
zHhy-*{W4}E3b2$Y%Zv+Y?WqhB_;8M`hJUJg_bMm%Wj`f*na-NxOpd7H<?n71=j?mE
z_hc$BgWEk78{FOn0k$OJy~A4VG098z&FYIP`id5-?vN4o>CQYC%+%qb4EpNbtXj)B
zzZZM2-ld3_L@HhMbMGg%S|up6YqfPKD@21+x(+DKF#vuMhAdVsM(7p#tax~vUrdRj
zkD^J<2mnoA{KYD}`eh>w73Rd1%s_psIH$z;$4mPcJXyzEm)26a?^Zw;`5Q$wV4|3W
zmeb0ka$$FrTB(RmWwOoKd=U4av+R?KlcviV05V#j$`%^nGBX=ak;Ih{GuF)#<h>>P
zHKy&Mx(wK{E{T)uadADnoR>E@#mSk4xLI^1E111l7s=QNg73Yc6s02f(Cku{P<u}%
zz~K4vmmm}H&X$oiX(0NC*D&f=EDe!}k?=i{sbG%Y7lq4!R{%yCtzD}K#(UbFsviQ_
zajZBtGe+FXxPI%V%9{Hcy!2mN4oUoCqT2*^zBF^4=I@lD(vsFndQC=d@lVms4vwZW
zs&{ZyTdfwjmv1rmE58gSGqY>rcggw$mx;Am5DQ-gT2N5_PWNl)(y;kJ_xd^2if*^$
zT`^QJ{qE!T)XsuaZ*b>~<ZnL=N=mBNA11U2&k5M8?HN)IWyM5pkPFKe;7D|3(m1MN
z=X5+zs(h?f_Al65x#6$JLs8bVT1XK0Hi&cWE};)dbz5LY9)g1y!#3fT8`c2`G1{oI
z;9#uo^GNO40lz!1d3@39pb+CFz+L5nzN$#k_b}r?SBI;iZ#`ouj$w2FN=jZv>h<q7
zsh=wNy&26ux_@OIp;{sRFut(~2}TD$9IlRCG@s;#6_{RN6D3=U8Q6rMR9sU+0~d&b
z>4%WcXwT5Fj`C=b$1@b7`ENB&<R&bvkx2c|ge182%70%<v-sICot91UtF@_~Yzi2+
ztTlqY;iW()sCOs#^{y{^SKoQV3i4&Q+LO&rV7<^T7r9aR%a>+6Q8$Bh^LjJKrEGv+
zWcKT%v+iQE&<zdyqU99E?Im9o5YlK=7c+*i-Aw@S{HCtdv21)OG`6~bzBhHR0Ms(Q
zoOa3Ke1WP-{6PCP(UouudqqGx`-L%AWq+B832(wrw=|NApR$gt^lohKhx`W={MCV-
z%t!`iUN`=WM3>kXF9-LKPI>(!GMK_lAaf=c@ZBw8zhZbpj3RWC=n7W*OfMD}CJ+=&
zqoB*03-bJJA{B%yS@~+^A(;JV37OK8`uTn_lvN~UHv5AX^cv}^-y0xwqT(yQRUFeO
zlTnOiC;nix&^OqZ^5>7{;Y#C3w_9uU{4uYm75=DG;qED`FW+USe2rszlp^P*VRz<?
zV8$RoX`|JX(Z+1_weiIkf@f2x|FpmsG6r;B#xZ6ZBWZKJ@GM;ny@=*DxM_>9<P{$G
z1Wrkp1JmYpwNV5?)JVPexeaC^-^OA3;@Q4gKK4<VB0<lDYk^%t5uMw0O;WL6%>CJD
z`qqUgouxGg+WGwa#;_*_)l;eaK@E9<hSDD!$$$PMAe&Ld-QfJDrsDWQ{tM+?m{if~
zv;4XRN8fW>Om;if*;X&Jki;h$l2hL#M~15IYm~<LZ)E2ZW;^M1Z~18i3hKTD1WG8$
zgMw70y{E+WzhfQi{cBKZHUh6S-Jk1DKK_qECHKd6DoxDGvi=8Hv!4B9QEA@eP2E-e
zYicF^F`_gXC55N|@v}On%Mq}qDsJeDt_}WGWcp)Gm8*uhl>9^YFV+8RV;w`458MB>
ovDE*XRbMfW)&J8#Gw_M<wCzeH2T6qbuK_A6rSz`+tzp3b129f(PXGV_

literal 0
HcmV?d00001

diff --git a/doc/development/img/performance_bar_members_page.png b/doc/development/img/performance_bar_members_page.png
new file mode 100644
index 0000000000000000000000000000000000000000..bc81cd645e556305f6c35b2eae76ce216ef6ff07
GIT binary patch
literal 8437
zcmY*;WmuG5*S2&@2*Oaq(9OUgBQbO%(j`4KQZj>d#}E?IAl)qz(jna-qI5{7Al>ll
zeLv6peed;SA1lsvuD$kgT>Hm9Bh*zD9^+HvKYH}&v67;!=A%bw!GCOeT<kw9Rzq&q
zqeqxjb}};R_A&}G&JNB9tv7HBD+MbjD}<eerh@dNM?%rjI>xrNI^^OlNE;^RF)fE@
zp{^wok69ik=swG>YxZAUggPZFLFX8^Ezb|eQU}L`1X}KL)#TKD_;=IEdpa5dK<sD4
z^Wt^jBz%^+?;v*Zy31ho?RQ0cX`%vYcFomGRtG*OnTJ{42TeAISldly`pI$RXcQkl
z@=!unkzujnVqEV-!g46FbM-XnxQt6x(4lGs?w<{pWxBjgXMZf-XID1J(>(>b(3{t8
zmJo!;qWvz`8FoYSx{jll*fjv2n{PMpOZI@h8dof)yOH94(RSAB+^dt}SUOs-!&69N
zM|v;i32*p6O_}Dre7#q;y^&|0{&q2^`pqHyKHIU=HuS`?yLdb;TRh|tZgj&X$g;Jf
z(et7#K3o14ch%m}x1RRrd~$jmsRZ`>g{2QwMWlzaMiuioW$oDom7gOS{I)`%C)}$%
z;p5M@hO|0o%F7aZGdkUR8UziFk3})RL^K<IIO<2-IBI1bZ*A-fei-)ll)b%f^;A6f
zMPv*A+VR;w2}$O`xh+gd41U@Z9PXbhFLl1PdSAVuOoBo6ntDUYpEo|A$Pm0{>{zrt
z{(_M5`FHvk6noc!nmG@$weJuCRj;tiHKL-`=6ITR_pUU0$0&WWeL|t-f&T4}Yw@ty
zQ~AQ$@L%d<kXo`!VlPw7*p>zpVME9($*CeubFC?9w!XlQMe5Q<JKMVw?*|4<gRdIL
z>NqXK#DgemsBdE`C?>6r%0rDT$Rzx@pQB5#Qh}b#29KLSl+NQ^AZU!9k+7HN3A8n2
zmWS6f$_{cSu;){Etx*D+Md@;j!gVb<W)A|KDn?q<72HJiD5hbK8!Y3t+dk83qaE(&
z8uhDGnaz4*SEg5cw~%wL+t&p@{nz!58W8;kBP}&5-TMyuNOv7-N9;9<-xF!Q5xsOL
zE=TKn#PWX0gK1k;r^c{X&b&nO6)9NPudj5eRHJ1pPJ>Uw>bTq3eA(~%+D3hcd`Er9
zd^?TN<3xuu*V<Qj-_RpX`_5mVP#Y|JQ+NUzY<80EE0h_S9G(Ix5M9s}4LIbOjS$yD
zT4N?KxpMD@A{(3~Mn_~pzgc`^)XuAm7I9OJe){rWM@M_-O(F-KuJcQwb}6zbW*N(<
zM5y*fquxm_W0Km2rX7ivs1{ji^>-=au-YQG97pt<Te=^mPBogl-z=7V(O*r9IPE<i
zed_+=TY@=t6_hji!|rx?2>>;q5@V|sHs@$SgLSxc8he@!X(1*v<W<PHA^g%VakPKK
zyBbsXD48}Ou%F2ZFg}E{ge7zmGFLO-Nf)Q+L-6za#r}E6HN?a3?)%O{53*v5C*bpQ
z(aetJL)R&B$%pbsHqriQIoUos7)At#e{PLecG~)``Y%;PESw#A;g-(kR=ggLZ~j~&
zj~>B1ME;nLR<3Z6hogfNQp7`y@gIc9ANy|@%n14i;%YC(sQ*$OB;$;*0txay<K<%%
z#|MExFodPGh^DOkf6D)OVvM$~u5U!ZV0U+SUUvarXM_!yUszZe%m)EOAUuB%JV;L`
zSGWg{6O!p)lK=9^S|KeEc5htmoSi^_dEw^HZ(YS08UHr=-|ydjy4qR)zfMlb|BUr#
zK=9uTn4gyq{J-3PN@0JaB5DXbt3RFp@{9As{z3kq*nj%Kz<-<nf1CMt(to0VMis}0
zf&cf|#PL<S*j_z)L<3QhmD2V=`(=#hYPgYf&-}{7ayb4%Y>BS_h4kt^USP;0r5tX@
z+={|XilWKT<Zpq=V;S|ulapzxlsTDj1EIt;>A<hjxrr5)EO@hI{V!<2NA1qXoUdxc
zF7DMjxCi4anOSW%*B6l$7fTPz5B`UX7ac7=7wxjObG8{F%4L|^cqLENS>C*SA?f{c
zxy|e3zY!2~4mHMGhQG-iWyz#R+7>yy=sM{CNk<1ZWB*&3qx`6hU!5|L6YW3AK1pMY
z|B^^PQAc9$LjI));6(cYD6yAJ`eXdXejoTh$VP`$cKaR80<Zyd2p}mV<jQ`^Bw131
zaD`pJ1Fcnu;|<<=<*VTB#KbQ+Msj22ZymFH=F)JX<|C;wN|j4hJ&ohQI22yngP>?B
zfsRKI)9u)alDmHX34E|M`s3tprEJchSFh@mN9L8FN@%fH9eqOajoJfmH7Q{>DNrCS
z$0lvGVR+|v8opGw$&69DZCR<MsPrtKC)BSO&h|{Z`JtP;G0Mt)b6`I-1rzV5i;tsI
z{ktCn8s;b7oO3@xAmU_(N_W31@ZL+hcQHl}n0$WXNLgk^Lq+5|!*W#FxMk9_wfS><
zuPXm!wb#y~s^u57APz2ivSd1;?dD|gQ25M}+azjrG+hi8b$XV&@}1*5t=R5_9}AA>
zv}r8Jm(R=406ojPx9tLym6aqKZNM#bx74z2_u9?5J@0O~seV{^#pq+Ek}+;GKE0fC
zm-2LBPaU1C_M$1tvu`U7lV1s1upEUiT0BOK`$<jDMQ!QwKi1z@h<?rTt=gOU?u)Gv
zO%JLo?)u>-=;l>(*r_NhqH;E0oaqGP#?B;Y$9yp&{rik1^Zx2t)=JM)Th4owZLIxV
zOzKIM>Y7UkTb}i22-LOUF;&>T3w3O{6j{i5UcVW^OG(v9r-_ls&()WPycA6qyBu=g
zO0%&>nEH*Qe@U*2oc8lb$qq|x_Z7RYCuMju&M;5usO*`95H{oqUPu+ho-tLdttY8?
zD_Im%VL&n6%AclpoY1LllxW=JF-4<<1McggLh_a7%QtM5C4k;^r`{{y8+G?p%=oSG
z;<cAwX$S#q7?U2?ghLlT+hQuTwG$kzo=hWygR3HQ<9aI#A2U+{^ptm0(>(H1ksExn
z3KosUI662)IcK+?*~lhpj{CHXjGoAw!~Tz3Sz&KI27dGoiGFU>rycg53=4(xQ-!CV
zy4t=Kas4rsd)vJTI5?#Ak?QQ!_qtdN9~=mfFUR7#A@jc%z;13XF^wCKvB~b883_Nm
zbp;hW!VKcLE}dynsH3v5s6L&{miJI0WMyOhI{7sq!MOwDCY2}0uXFu&0&A!G;IJLn
zSe@j&?KD1&)O`y>O!Q`(z5ZcW@1wQdI(T0K6m>=6br5Yc25QQA#6U_qbB^?z5Ol3{
z?Ks(#k~s$K{OWaSUhX__nuZDdBG+7h?mTF|t?1+yuQVG&XY1l^t>o!x?u!`~W)Vae
zrB!UaXHkE~H|Ys3tODOm;?|sl{4bd5^!qwZOn;zK_$7xR-Vf6~+GqBDXypvRCVF48
z<_X}$RO2pN<EMMMb=rHPAk_R|c?)UGdv@Zi<aitPj&-VaS}#pN^4O|>KoV@daaSUb
z>jF*46&}uFMYH6GX?zuH##aW|9E*iJUDBM&IIhB`X3PnhD??f8F;RgcfEG1|8hCSj
z$_4C$dXUtKPeG=)$wI8dmgBs6v#uf7{PpsazAtTRv(qHw4Le5f;!LhzJmbEF3Ucku
zWv1j4L8I&n$MZk`<lp_)<gPaFY;?s0&p;6S&{2owi8_!{1%WSqPUqHg9;RG;k@P5v
zj>w8V;D(_32)Ajw`5Ne-pp0dP(z7dBECf*bl#zS<?m#KaJ+zQh9ns>6@U5AYdW};W
zR642ggE*ssSf;VJrHII+Gh3FnY}}gJ>jkBYuUwk|;%IrbB@E`}y`0QX3^jY0=4B1i
z_Ik7?-j>uNNcuiSONuDp4ZhC@$Sj)hie+qXTf)IRyn^g2_mH=lZ_k<z9a#I@5aYlC
z@GEo+pVqIHIyV;tnOs+ZPI!Ojve;D08Jn7U=k?j8Wb1VNi`nat2<}QpTVXwvT*ESo
zFMk3Va>AZSE*H*kZa~j<zjts+E>c$BE61Oxahx_T`66<6b;3eg%DU1hFo<Sajb<2D
z4)l4nQm{RKILozZ#saDG$o(nE#**hTY#l{Jly`d90bf}865nzVB>v2G&S>fJK3Xl~
zh;iFcK9|i8&bk&3)&nCKV$ZKlO^qJ=Lc7}^)(|xsuEV1rUCQabNL*%Tx9y#ZyhZSn
zdlA%Yss@#+>^AKWEX>43sLA3UUG_t;uhN3eiyh%pK|uyyE`oA;KlXoq2)IQr>I=!!
z(0s#&>*tsU!3*b~rG}oESq%2PV?|ye^uti<zQ37N-beM`eLFkTAn%$U-ZD^_9+!84
z8b}iGzhjhuM%~_CQGpql013&QC`eD^X>E3>YL&ubzd~q2=N=P3o5Jt0I-s@aMd7J}
zsR!Ndb0usfEJWH(lS1V-UVwkU8wGMLn6$!e6w7N#eEunn>r+^@C%rk>LwaHm7MT<r
z5N#UNxs47$Q5%u=>FdMfyR;^ZPK8_xX#2K%ZPY%&XJgF@-E>XF2A}7FPk6T$I7&=!
zpP@#sx@=W;Pi;rNaS1st^BExKD!FZwbcHj!&q?%-AkWq!rO&f0gy3m>n1hxTK`7C-
zmfq@a5;j6Kg{LcY{XWMY(AOd68_>+r)m=nLYH#~!V(@urY<}gsHvlxNrb*7gK>{2c
zp06GtG~&Lpfs|eG5l$sQfC@H!bO7ZhlTT;si?MDH@^uDHZP$3qHsB~hhuqg3#8{x`
z^Zd{}R#Kg}*(e@niqTM0(%-o^o*yDR@I*TU$mU4k<ktfA;Z9KK8J8b--U#k67N%j#
zL;`|LWcxl9U{V3T3e=}`U`OpN(NKtST(8GwO;II?aZ5p8&SQs$<b-GJo5=unI5()s
zmk<Q20=1aV(ry%&sS(R!e*KY7Z91)Mc@uj!%Bv=HHub&%m#sz>UO&<HuYNhVdHK@!
z*;q$Xw$&C<vn~7T@$t-jlJeNt=csibC+$R4`Gk^>LA3Yh_k>BsXwN_K&}H%tu!{)l
zcqE<KsCH+ha$j<}`QyH@!7<?EB1w-^B|3Di>P4DwgjbrM4<)hBw;38G2=kM|tp#Ep
zcE%MM)$}!4JP+&RGzjBZtnl%tnA!?t_Z8mfLReTMwl}#4!%N$)(d7ghKpC6yt|x2D
z?_11=vl^nfYm$@0!@KF~Ig7%QrF1ixuyb*h25<IKfWpfcbK?@+Q9}w<txrA`^Mbi~
znPfcHeMT-ogWskiF*^L^Xyw({%^8ISGhm_L=;q}Nk)Bk#-<k)Q)3oV@8N;p?tSj{y
z7>kKbJ)}<c4wl1s)Wkx45ZFX_E5z(GIcE8y9Og9cGgxYabncqu(k7HrUILXk*=(&{
zeY%?R`x*jr?mkf^a}B-s9wkZ+XX_d*TJL=&X%WwUs@}b7Na(t%ur<GA-Z%v>wDkHZ
zZ}@k9^+U(lX?Tx#fJrOb70^CVLSSB`NvEtI8E|*yW>nIGB+7m<$^N*-E6VBUq}IY+
zocUQNEQe9~F0io>m%fArxN*HebtW@<5C*()IGy7Vf#=&Wt4+fdPq$NW7FA2Q54y^0
z?D~Frgfn*h4t&>BEChsoA+2Z?h%Sg?;{E}EY;-*_4p03}-jme9yh#|Mz$fB=E#O4v
z&9P;Qs<w*_$NZ4uM}McZ*W=<b{tDnV4Bv+F<gwn_J{N%;GN)0zr}QJDQw;~-Y+vNi
z+cL^z2NkiX!P)Hu^KfX4iX*EY2vjJSakkQU7k;CAB{<2d{MZAi8Y#(lg<M{DFg9Pm
z>>QuSZ3IW+I&L~d;e^IBh(!0)j%z(Ii$u0Z-iK^_Y&y%we`d#qW68Rz=sjKK&!o?J
zanPGwoL!`7M%O0#cA&*CGtV0jFBNne`1Wvg`BFqWI!?U!)ShsL3D$o0@>o}b`21iY
zDYPn0pP#4WP<+Lge(^f_9ZN>5BI+sgNH<;P55WQElK%Nx%dDkj-CWC6hyaN!P=d>z
zOAcLyXJf;1)~T}@Og5#2U;a5yQ<feU^ORiybfDdC!8Q}FSSIR6+hjk@_&JB<Wx?0Y
zsuo~A<{hCchpztd8MFapC549nd`ULK5rc4(9Sz4tf`+7MY6wxiLEkq|+<IFh6oahK
zy4$<?G+#k32#9;19t`u6bm$!aH5WP%f_e158J9Z#yY5>P00vTewc_p@;1eNL(JJz+
zq2XPrbpnQrZnoDZm8U^<o1}U=x(mlBx1N%9vu;s+S!w-2pS;T*Yx7iEcs5u8o$j=i
z<*0V`O;R)`nL?ls_hYn%%mP|eLE2RCdfKp~_9QgqBH5hJEkeMbFXHmsLx6P`gQ|d3
z<XmO}4%dy9ss6YyGZ{0#G^$YIBj!s>%T2nQTmn|J_OC#>qR!xGb3k^=Qw$lZih(eu
z+Cjq~j1|Qyr?p)*@4Ld8onb+sLNfxcsU6GbMfg_alXVteTiiU!QHH%UiO2rP#o7xJ
z8kVA0E-XeqdXg4PckMC#nWU28T7yc!w$B6^^x=giDiYsiHPWbl?D;V<=5NnQ;BB*$
z0EOwDsi@5%u9>8U$u@Hn^x?kuczc||NoEC0tv3SzIs6jTJX=tgoc2KEhiC>Gbk@5!
z1T{o{TKg>zfM(T586GMtD55(qEj6daEGkd5D0e2bu1e?=H24@O+_h%p*cX$}Y|)Dr
zxewci69&mYE$#+#3Pz?P=G54vX5#f%h)G@T--r~p((Uh)qa=@AjY=5$-6CM8GuMLH
zBfZKWuN+Dhi41YVVA$6p02&~LkigotCSGj~f`n*a6~aGC5+=&;Q?oO#7S4(?Lp3*(
zQV3i10@Rj|7LWsMp;?lAV?pUojC<~4Zm=6#Y^B_18S228jM@(4PQ#5OK&NaQ=HPn8
zt7vFY^=b`LU214H-Rbf;1s?UTTT&s6gxAg}RWSl$hkFl4%skxy5&7KKO;0r<uqo9t
zdz!(1Qp}~ZfKNfpj+_WAL`gT4)r~44yV5iUZfg^txEJ)8d{Z;A2ipfK%%|2Hrrh2K
z|D4-WN}7*>fl#i_%t$?6s1vb@m~n(s5^o7zUbkguzw2!39?wz|ceW9D3XGDHxk6*z
zgg1^;j@AQxqMN=!&%ZwwLPIWkmzdrOKyb@R=v0*l)0hAR(S=&J+iG!fnV;ZAAj9mL
zq3rkf2ER?2#RJ42;I4&>k#UW^z{Xk>f($4NIg=AHl-Qub?ap@R;$A;;ADidC*W~h3
zP#VFQL`BI{MnHon!&NMPPk!Nx2v95W|DM5i&nzpTveXRS0!FGVNrP9`Ro1i%zo+C2
znN>)pdEv1=*Qi;bc}T%?Yw_Flwe~}OUx+yTv7qz@ev2=pI0aJ!!48lE3!&O|S-#|0
zU@s%)0AWfJ>(aoiJhpPFz^hARn{TR|hxr%!7Z#NkyP02ARgPYSF{Coa{M6{3NHo+v
zPSA)Xf-|uU`ex5tVx^89uw5gGT!oNP2q5n+oQ`pzUzBrMY4ET;a{|D(Hv4P-z2qB>
zTpH^G@xTR}-nx^kEtj?Y*gV@4*3<fWvw(_k+X104V>ROVEsM~up;<G?Ajf-MZRW)8
zdrDJR&$0~WIC2&Iw1k2R^($};C@+Z^7XD26(KH#*R9<Omw&XfrCQ-4S_#Ljj#p@i)
zQqgL*ag-#hc9ZkQmiU%=oQACOJ$hg+5~o{c7BlSo2xgl4dI8Hw3{#1e@-sF~r_d9;
z8ftbszjh&<3#ySKs+*18H>&x2=9vKw$z%ujM>Ni6sqwP{gMpO8azVrBES?>MS6Cri
zToX8Jx2+}EEiKj=C<4+;VWg$&{TDw<a21XTjS3TaT3USKRY+WJeMNjB<MB@m@z{<t
z5Nm31_K~{4uI^n%YbUgT?uK;76QWv>vOzF*6_B$+L>UDau)&i9KZ!e1wymOfc%t`B
zR-d0Mc_g;u9Y_;f1@an@FT1uuqIa*N9xvQ{%~Q60g;7y0mnd_|%RTt~@)>q;qUDrE
z5Y!{*=$mS>3nwY{k2ueUe*H0*nQ!Ky`~dgl?{3Aa8xyH%kELy{DFBA0L)dq~wYP~G
zHZ}4E9(B`IS1fXjaRcI~m^0m*jA8JhXuh33ZgU#kSTooA5TfT1w=sgR#R=)ydNSIY
zE+Y2c71_#bqmwcx4UK;&Dc?TiSl7#ug37D-bhPr$0Qh@)*JN-RKXBNAvA?N(s=elR
z{Y12Bz%sO9Gk_8dkCORaa=a9!z79I!VH%^2&FBUe$zpmH^T+*Kn#Yuu9s9Mg^V(Wb
zuWMc=WI&d5WK1<Fs+COX;yV9TG+NkMf4x)h2L<5K^Du>*m1&dizAC?@pM_!7=|fuf
zM06CtAJat4bt}BD1DSpSW#pU}i3j<m>Q_Tkk{I3{<7Y6#^E-Qft1@)TCaur9eV=0d
z{7Jtq_SD<UDsN((*uswJ7?JP}e?oPmVn3;Qi?*>f=}@@T42@%#wa3Qlon>{#nDhj?
z%nK@4N9sy!G0Ze_hXwZd8HXHZmIQ=NDm(K?K**IR<M>wtUEah6xk$4{a`&sYi`A~q
zU|go))Fub2PB?}cRg`*-cafhb(fL@*?p|n=@Z6wDJ?-cI*rw(!^RN{*E;%Bj&O(-6
znE4Ln1c1iBowz6olNdtFeu93m<(TWOYOGJlYwyTWPNG4@b@`z?42y=XG{yJ8q{4rn
zU&FWWE7|f3VV*ar@YLH%oC#qZiQBGPhM#=d<+g;{i~O%YfS-gf0Ou+zex#x<_+_60
zd3s}+>Ro71J6P5Zsl#Z6Pa;4A!CQ7F$InI*ed-h3=M!qAjI1nAmWG?>_}5@@X3t2+
z=w^=@<Og2Z;1?FuJ$FIGlNC>7Tw3S5;T2FdFgPFP1DX0t%!}IBvq>gv!g4YsBHI%a
z9+dG+dV`Zkj5K<`4z=blhfOJ%e|XGzfqdc@ABC!5g`8*PmDrIPP)LL-mgP`KzT&og
zy<e3V(qgWHu@X1kX^1>=LK}4fGREXUVwSGgl1VGhC~Ye-$no?O7cl(~zl^gfDRI9O
zwlx;G?R{@_7nu!ewxTzlls-}sC}HFv!7nx<WA7Z-n37cwDOuPZC}5;krmz8C@lvsS
zDU?P=y~FI2UgN-bQ7PZ85k(4KllG#WxSOCRgsX;eiBh&tT6#kPDmv={m0rIY0_*E^
zvWjbt9njit(uYqXo>1bH)zrumnIC>WI<<4zUfP=5l2TnQi_3RzM-$_4`S{7Mvh0Zt
z2WcXp?O;rleP}>N&zNq^X`WSHWt3kkVvVRy(*zU>^Ho)s?_<N&4@&}SEe?`tZ@zlx
z!x`Nim#83p?*ljU@f8JO570{suG20sABN^*x_`*XAj#sUp^4EK+WlGJMCSWqMb+VV
zh!hBG%o869WLx%|$Gc&lHc*)$)f1^cGM5{iz18H5voa4x1|4$}*1oCFPN=AOL)>v~
zAbA%Q;a9NFd2vW4oQTdjC@9SDH@H@9C5$PFDen1(&hJbIjm0G<s4AuErpM5^N!gVu
zoseOsf3al9o@=q)80LK64nHz>51K|BHcrM6$k6@l+)<*=najxp6>)s}l#%k;yx03J
zP^Y)i;RY>pk~o2Gy^;I)M*O}Q0!tmS<7|{AHtoZvcNeR9Cj%BeffSJL>H0f=^v0<k
zZIN~TvP}Jn!EB>@Bjwl|E4tOBI8{)<n6L7VPuUd#K_rsPl2I|L5}gR=v1|TjrSa@m
zSy{}opGuF76&$-z_S}0)ghIj|D)NH!nM=RS+Ik$bk5Ttx4_#1v^h^@oaQ4VH*Y1z9
zt5K2_ohYyjWngWpWe_;m1y%1$L@1DwD9F|xHL@0Demy`cmij2kDiDr8PCp)CcL*zm
z(=66vDCu-i_I2=ViAR0CTHRaLLWx$*tMq|By0q{qJCF;lDwTOoZjcY`eV9|tG?tkj
z8I#+LpeI=Ce-G4)bkWh6OEV4M4rA&&t?eM6?oYDLPs~x}@rS>DGFPj~n8{&j*4#-+
zH%9MPKSKVh)@kGTTakdxgvUqi)8h-X;w4WUXc?j9vp(q<x-Fc$xXsu1^aF&QQPo>7
zR~}S)fF&_ecqu{G`CotIra+GSk%hl%GlR(r93rTQnvC#^Fa_5xml~Thoa_At-39A?
zI%pBs*Fx_f2fh%#X$1Hc-DZZq9gx5t+UwTy2kmwCbAZbu7|>MB5rr{hL!`yU@O33B
z!!1r4x(z(b#m0-l#tPR3k{9@{D(f`*c%xV@v*lxbkPJU#nEyo(I7jp?)1Ozi(fkl3
z@0f2PQmD&ZqxSq2#Il8h_;+N#E17nlFpwIHXE8mh1_sy$kpRc}mD4^sIfVCYBxSE$
zZBq>zp|*s!NRt|3aKcREXoWS`7DC-sC540K*RfltNo16N*k_YrFN>P4`ehp7YF67f
zNMh*gMMuYYZ0p|3_p7{j5)(dt5@am5Y;bg;arkgre4rI^_X?h8$Mi9$bNbzZy$F<o
zOaOomT)SUMtrFhMbF4>RYW++>I9<U%bnw@n-OyYp)t%g3w``>mqL~s%OwML?blgi$
zbsH^$r@ypJciwzRVTer|67Y=ross#2y?wKB0h;M(hRQt+b-jgX%tGeHM)(HVrh0)c
zFki*#G(Vb=b<Yz8ulTxxPgl;Y_#ypBnCFhu@-vTfj`4w((X~{<OO-V-k2_iqE-y7G
zXV)9Qkj<r~^tTN{QO(;?`U|3W`#0Zoh&aFhJj92TV7As4QE1q4gexn(?NnUSGX62}
z<z{`i`mf4@<U)&i{S0%*_7@XU^oVw}PvfcHkS#~&uX)3)e6l-<EYw3LV<eTeU`(j?
z%fXHFnu>*K9yawXkne<fs#bi7Z9c*1>4fdxm2xbubc|MXU}8wK&Od_C7eVeoJG^y!
zeTv=6@_$64pC6I}UK4(tRj68O{8!;A`lBHQbG$0?{#Orbv}XC^+n-OAKmYhgQVQS<
z<iIQGGgGG6&H5Mr@zo#y=Lg@@-ROTQ&6Ls0_*3IUn~VR&+v}n~5ZI|6h4#Xw&Hf6J
NN^+{QAEnKL{s%0h4GaJP

literal 0
HcmV?d00001

diff --git a/doc/development/merge_request_performance_guidelines.md b/doc/development/merge_request_performance_guidelines.md
index 402ce7e3b69..60c6ad2dad1 100644
--- a/doc/development/merge_request_performance_guidelines.md
+++ b/doc/development/merge_request_performance_guidelines.md
@@ -162,30 +162,11 @@ query. This in turn makes it much harder for this code to overload a database.
 
 **Summary:** a merge request **should not** execute duplicated cached queries.
 
-Rails provides an [SQL query cache](https://guides.rubyonrails.org/caching_with_rails.html#sql-caching), 
+Rails provides an [SQL Query Cache](cached_queries.md#cached-queries-guidelines), 
 used to cache the results of database queries for the duration of the request. 
-If Rails encounters the same query again for that request,
-it will use the cached result set as opposed to running the query against the database again.
-The query results are only cached for the duration of that single request, it does not persist across multiple requests.
 
-The cached queries help with reducing DB load, but they still:
-
-- Consume memory.
-- Require as to re-instantiate each `ActiveRecord` object.
-- Require as to re-instantiate each relation of the object.
-- Make us spend additional CPU-cycles to look into a list of cached queries.
-
-They are cheaper, but they are not cheap at all from `memory` perspective.
- 
-Cached SQL queries, could mask [N+1 query problem](https://guides.rubyonrails.org/active_record_querying.html#eager-loading-associations).
-If those N queries are executing the same query, it will not hit the database N times, it will return the cached results instead,
-which is still expensive since we need to re-initialize objects each time, and this is CPU/Memory expensive.
-Instead, you should use the same in-memory objects, if possible. 
-
-When building features, you could use [Performance bar](../administration/monitoring/performance/performance_bar.md)
-in order to list Database queries, which will include cached queries as well. If you see a lot of similar queries,
-this often indicates an N+1 query issue (or a similar kind of query batching problem).
-If you see same cached query executed multiple times, this often indicates a masked N+1 query problem.
+See [why cached queries are considered bad](cached_queries.md#why-cached-queries-are-considered-bad) and 
+[how to detect them](cached_queries.md#how-to-detect).
 
 The code introduced by a merge request, should not execute multiple duplicated cached queries.
 
diff --git a/doc/development/migration_style_guide.md b/doc/development/migration_style_guide.md
index b446f83d2b3..84679a78545 100644
--- a/doc/development/migration_style_guide.md
+++ b/doc/development/migration_style_guide.md
@@ -478,6 +478,12 @@ For a small table (such as an empty one or one with less than `1,000` records),
 it is recommended to use `remove_index` in a single-transaction migration,
 combining it with other operations that don't require `disable_ddl_transaction!`.
 
+### Disabling an index
+
+There are certain situations in which you might want to disable an index before removing it.
+See the [maintenance operations guide](database/maintenance_operations.md#disabling-an-index)
+for more details.
+
 ## Adding indexes
 
 Before adding an index, consider if this one is necessary. There are situations in which an index
diff --git a/doc/development/performance.md b/doc/development/performance.md
index 6ba7a17041e..e20633a05f6 100644
--- a/doc/development/performance.md
+++ b/doc/development/performance.md
@@ -349,6 +349,40 @@ issues in our code.
 
 ## Memory profiling
 
+We can use two approaches, often in combination, to track down memory issues:
+
+- Leaving the code intact and wrapping a profiler around it.
+- Monitor memory usage of the process while disabling/enabling different parts of the code we suspect could be problematic.
+
+### Using Memory Profiler
+
+We can use `memory_profiler` for profiling.
+
+The [`memory_profiler`](https://github.com/SamSaffron/memory_profiler) gem is already present in GitLab's `Gemfile`,
+you just need to require it:
+
+```ruby
+require 'sidekiq/testing'
+
+report = MemoryProfiler.report do
+  # Code you want to profile
+end
+
+output = File.open('/tmp/profile.txt','w')
+report.pretty_print(output)
+```
+
+The report breaks down 2 key concepts:
+
+- Retained: long lived memory use and object count retained due to the execution of the code block.
+- Allocated: all object allocation and memory allocation during code block.
+
+As a general rule, **retained** will always be smaller than or equal to allocated.
+
+The actual RSS cost will always be slightly higher as MRI heaps are not squashed to size and memory fragments.
+
+### Rbtrace
+
 One of the reasons of the increased memory footprint could be Ruby memory fragmentation.
 
 To diagnose it, you can visualize Ruby heap as described in [this post by Aaron Patterson](https://tenderlovemaking.com/2017/09/27/visualizing-your-ruby-heap.html).
diff --git a/doc/development/sidekiq_style_guide.md b/doc/development/sidekiq_style_guide.md
index ff4606923b1..f2584c97968 100644
--- a/doc/development/sidekiq_style_guide.md
+++ b/doc/development/sidekiq_style_guide.md
@@ -27,7 +27,10 @@ After adding a new queue, run `bin/rake
 gitlab:sidekiq:all_queues_yml:generate` to regenerate
 `app/workers/all_queues.yml` or `ee/app/workers/all_queues.yml` so that
 it can be picked up by
-[`sidekiq-cluster`](../administration/operations/extra_sidekiq_processes.md).
+[`sidekiq-cluster`](../administration/operations/extra_sidekiq_processes.md). 
+Additionally, run
+`bin/rake gitlab:sidekiq:sidekiq_queues_yml:generate` to regenerate
+`config/sidekiq_queues.yml`.
 
 ## Queue Namespaces
 
diff --git a/doc/integration/akismet.md b/doc/integration/akismet.md
index 8be410e97b9..d290ffa92b9 100644
--- a/doc/integration/akismet.md
+++ b/doc/integration/akismet.md
@@ -6,12 +6,12 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 # Akismet
 
-GitLab leverages [Akismet](https://akismet.com/) to protect against spam. Currently
+GitLab leverages [Akismet](https://akismet.com/) to protect against spam.
 GitLab uses Akismet to prevent the creation of spam issues on public projects. Issues
-created via the web UI or the API can be submitted to Akismet for review.
+created through the web UI or the API can be submitted to Akismet for review.
 
-Detected spam will be rejected, and an entry in the "Spam Log" section in the
-Admin page will be created.
+Detected spam is rejected, and an entry is added in the **Spam Log** section of the
+Admin page.
 
 Privacy note: GitLab submits the user's IP and user agent to Akismet.
 
@@ -23,11 +23,11 @@ In earlier GitLab versions, this only applied to API and non-project members.
 
 To use Akismet:
 
-1. Go to the URL: <https://akismet.com/account/>
-1. Sign-in or create a new account.
-1. Click on **Show** to reveal the API key.
+1. Go to the [Akismet sign-in page](https://akismet.com/account/).
+1. Sign in or create a new account.
+1. Click **Show** to reveal the API key.
 1. Go to **Admin Area > Settings > Reporting** (`/admin/application_settings/reporting`).
-1. Check the **Enable Akismet** checkbox.
+1. Select the **Enable Akismet** checkbox.
 1. Fill in the API key from step 3.
 1. Save the configuration.
 
@@ -35,23 +35,20 @@ To use Akismet:
 
 ## Training
 
-NOTE: **Note:**
-Training the Akismet filter is only available in GitLab 8.11 and later.
-
-As a way to better recognize between spam and ham, you can train the Akismet
+To better differentiate between spam and ham, you can train the Akismet
 filter whenever there is a false positive or false negative.
 
 When an entry is recognized as spam, it is rejected and added to the Spam Logs.
-From here you can review if they are really spam. If one of them is not really
+From here you can review if entries are really spam. If one of them is not really
 spam, you can use the **Submit as ham** button to tell Akismet that it falsely
 recognized an entry as spam.
 
 ![Screenshot of Spam Logs](img/spam_log.png)
 
-If an entry that is actually spam was not recognized as such, you will be able
-to also submit this to Akismet. The **Submit as spam** button will only appear
-to admin users.
+If an entry that is actually spam was not recognized as such, you can also submit
+this information to Akismet. The **Submit as spam** button is only displayed
+to administrator users.
 
 ![Screenshot of Issue](img/submit_issue.png)
 
-Training Akismet will help it to recognize spam more accurately in the future.
+Training Akismet helps it to recognize spam more accurately in the future.
diff --git a/doc/integration/auth0.md b/doc/integration/auth0.md
index d53fa6efc29..339d97cb00f 100644
--- a/doc/integration/auth0.md
+++ b/doc/integration/auth0.md
@@ -12,31 +12,30 @@ application.
 1. Sign in to the [Auth0 Console](https://auth0.com/auth/login). If you need to
    create an account, you can do so at the same link.
 
-1. Select "New App/API".
+1. Select **New App/API**.
 
 1. Provide the Application Name ('GitLab' works fine).
 
-1. Once created, you should see the Quick Start options. Disregard them and
-   select 'Settings' above the Quick Start options.
+1. After creating, you should see the **Quick Start** options. Disregard them and
+   select **Settings** above the **Quick Start** options.
 
-1. At the top of the Settings screen, you should see your Domain, Client ID and
-   Client Secret. Take note of these as you'll need to put them in the
-   configuration file. For example:
+1. At the top of the Settings screen, you should see your **Domain**, **Client ID**, and
+   **Client Secret**. These values are needed in the configuration file. For example:
    - Domain: `test1234.auth0.com`
    - Client ID: `t6X8L2465bNePWLOvt9yi41i`
    - Client Secret: `KbveM3nqfjwCbrhaUy_gDu2dss8TIlHIdzlyf33pB7dEK5u_NyQdp65O_o02hXs2`
 
-1. Fill in the Allowed Callback URLs:
+1. Fill in the **Allowed Callback URLs**:
    - `http://YOUR_GITLAB_URL/users/auth/auth0/callback` (or)
    - `https://YOUR_GITLAB_URL/users/auth/auth0/callback`
 
-1. Fill in the Allowed Origins (CORS):
+1. Fill in the **Allowed Origins (CORS)**:
    - `http://YOUR_GITLAB_URL` (or)
    - `https://YOUR_GITLAB_URL`
 
 1. On your GitLab server, open the configuration file.
 
-   For Omnibus package:
+   For Omnibus GitLab:
 
    ```shell
    sudo editor /etc/gitlab/gitlab.rb
@@ -49,12 +48,12 @@ application.
    sudo -u git -H editor config/gitlab.yml
    ```
 
-1. See [Initial OmniAuth Configuration](omniauth.md#initial-omniauth-configuration)
+1. Read [Initial OmniAuth Configuration](omniauth.md#initial-omniauth-configuration)
    for initial settings.
 
 1. Add the provider configuration:
 
-   For Omnibus package:
+   For Omnibus GitLab:
 
    ```ruby
    gitlab_rails['omniauth_providers'] = [
@@ -87,10 +86,14 @@ application.
 1. Change `YOUR_AUTH0_CLIENT_SECRET` to the client secret from the Auth0 Console
    page from step 5.
 
-1. [Reconfigure](../administration/restart_gitlab.md#omnibus-gitlab-reconfigure) or [restart GitLab](../administration/restart_gitlab.md#installations-from-source) for the changes to take effect if you
-   installed GitLab via Omnibus or from source respectively.
+1. Reconfigure or restart GitLab, depending on your installation method:
 
-On the sign in page there should now be an Auth0 icon below the regular sign in
-form. Click the icon to begin the authentication process. Auth0 will ask the
-user to sign in and authorize the GitLab application. If everything goes well
-the user will be returned to GitLab and will be signed in.
+   - *If you installed from Omnibus GitLab,*
+     [Reconfigure](../administration/restart_gitlab.md#omnibus-gitlab-reconfigure) GitLab.
+   - *If you installed from source,*
+     [restart GitLab](../administration/restart_gitlab.md#installations-from-source).
+
+On the sign-in page there should now be an Auth0 icon below the regular sign-in
+form. Click the icon to begin the authentication process. Auth0 asks the
+user to sign in and authorize the GitLab application. If the user authenticates
+successfully, the user is returned to GitLab and signed in.
diff --git a/doc/integration/azure.md b/doc/integration/azure.md
index 2964b93055a..a9660e1d716 100644
--- a/doc/integration/azure.md
+++ b/doc/integration/azure.md
@@ -6,7 +6,7 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 # Microsoft Azure OAuth2 OmniAuth Provider
 
-To enable the Microsoft Azure OAuth2 OmniAuth provider you must register your application with Azure. Azure will generate a client ID and secret key for you to use.
+To enable the Microsoft Azure OAuth2 OmniAuth provider, you must register your application with Azure. Azure generates a client ID and secret key for you to use.
 
 Sign in to the [Azure Portal](https://portal.azure.com), and follow the instructions in
 the [Microsoft Quickstart documentation](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app).
@@ -15,15 +15,19 @@ As you go through the Microsoft procedure, keep the following in mind:
 
 - If you have multiple instances of Azure Active Directory, you can switch to the desired tenant.
 - You're setting up a Web application.
-- For the redirect URI, you'll need the URL of the Azure OAuth callback of your GitLab installation (for example, `https://gitlab.mycompany.com/users/auth/azure_oauth2/callback`). The type dropdown should be set to "Web".
+- The redirect URI requires the URL of the Azure OAuth callback of your GitLab
+  installation. For example, `https://gitlab.mycompany.com/users/auth/azure_oauth2/callback`.
+  The type dropdown should be set to **Web**.
 - The `client ID` and `client secret` are terms associated with OAuth 2. In some Microsoft documentation,
   the terms may be listed as `Application ID` and `Application Secret`.
-- If you need to generate a new client secret, follow the Microsoft documentation on how to [Create a new application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#create-a-new-application-secret).
-- Save the client ID and client secret for your new app. Once you leave the Azure portal, you won't be able to find the client secret again.
+- If you need to generate a new client secret, follow the Microsoft documentation
+  for [creating a new application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#create-a-new-application-secret).
+- Save the client ID and client secret for your new app, as the client secret is only
+  displayed one time.
 
 1. On your GitLab server, open the configuration file.
 
-   For Omnibus package:
+   For Omnibus GitLab:
 
    ```shell
    sudo editor /etc/gitlab/gitlab.rb
@@ -37,11 +41,12 @@ As you go through the Microsoft procedure, keep the following in mind:
    sudo -u git -H editor config/gitlab.yml
    ```
 
-1. See [Initial OmniAuth Configuration](omniauth.md#initial-omniauth-configuration) for initial settings.
+1. Refer to [Initial OmniAuth Configuration](omniauth.md#initial-omniauth-configuration)
+   for initial settings.
 
 1. Add the provider configuration:
 
-   For Omnibus package:
+   For Omnibus GitLab:
 
    ```ruby
    gitlab_rails['omniauth_providers'] = [
@@ -66,16 +71,22 @@ As you go through the Microsoft procedure, keep the following in mind:
    ```
 
    The `base_azure_url` is optional and can be added for different locales;
-   e.g. `base_azure_url: "https://login.microsoftonline.de"`.
+   such as `base_azure_url: "https://login.microsoftonline.de"`.
 
-1. Replace 'CLIENT ID', 'CLIENT SECRET' and 'TENANT ID' with the values you got above.
+1. Replace `CLIENT ID`, `CLIENT SECRET` and `TENANT ID` with the values you got above.
 
 1. Save the configuration file.
 
-1. [Reconfigure](../administration/restart_gitlab.md#omnibus-gitlab-reconfigure) or [restart GitLab](../administration/restart_gitlab.md#installations-from-source) for the changes to take effect if you
-   installed GitLab via Omnibus or from source respectively.
+1. Reconfigure or restart GitLab, depending on your installation method:
 
-On the sign-in page, you should now see a Microsoft icon below the regular sign in form. Click the icon
-to begin the authentication process. Microsoft then asks you to sign in and authorize the GitLab application. If everything goes well, you are returned to GitLab and signed in.
-See [Enable OmniAuth for an Existing User](omniauth.md#enable-omniauth-for-an-existing-user)
+   - *If you installed from Omnibus GitLab,*
+     [reconfigure](../administration/restart_gitlab.md#omnibus-gitlab-reconfigure) GitLab.
+   - *If you installed from source,*
+     [restart GitLab](../administration/restart_gitlab.md#installations-from-source).
+
+On the sign-in page, you should now see a Microsoft icon below the regular sign-in form.
+Click the icon to begin the authentication process. Microsoft then asks you to
+sign in and authorize the GitLab application. If successful, you are returned to GitLab and signed in.
+
+Read [Enable OmniAuth for an Existing User](omniauth.md#enable-omniauth-for-an-existing-user)
 for information on how existing GitLab users can connect to their newly-available Azure AD accounts.
diff --git a/doc/integration/bitbucket.md b/doc/integration/bitbucket.md
index 52bd7aaecc5..3dc6983355c 100644
--- a/doc/integration/bitbucket.md
+++ b/doc/integration/bitbucket.md
@@ -8,33 +8,22 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 NOTE: **Note:**
 Starting from GitLab 11.4, OmniAuth is enabled by default. If you're using an
-earlier version, you'll need to explicitly enable it.
-
-Import projects from Bitbucket.org and login to your GitLab instance with your
-Bitbucket.org account.
-
-## Overview
+earlier version, you must explicitly enable it.
 
 You can set up Bitbucket.org as an OAuth2 provider so that you can use your
-credentials to authenticate into GitLab or import your projects from
+Bitbucket.org account credentials to sign into GitLab or import your projects from
 Bitbucket.org.
 
-- To use Bitbucket.org as an OmniAuth provider, follow the [Bitbucket OmniAuth
-  provider](#bitbucket-omniauth-provider) section.
+- To use Bitbucket.org as an OmniAuth provider, follow the
+  [Bitbucket OmniAuth provider](#bitbucket-omniauth-provider) section.
 - To import projects from Bitbucket, follow both the
   [Bitbucket OmniAuth provider](#bitbucket-omniauth-provider) and
   [Bitbucket project import](#bitbucket-project-import) sections.
 
 ## Bitbucket OmniAuth provider
 
-NOTE: **Note:**
-GitLab 8.15 significantly simplified the way to integrate Bitbucket.org with
-GitLab. You are encouraged to upgrade your GitLab instance if you haven't done so
-already. If you're using GitLab 8.14 or below, [use the previous integration
-docs](https://gitlab.com/gitlab-org/gitlab/blob/8-14-stable-ee/doc/integration/bitbucket.md).
-
 To enable the Bitbucket OmniAuth provider you must register your application
-with Bitbucket.org. Bitbucket will generate an application ID and secret key for
+with Bitbucket.org. Bitbucket generates an application ID and secret key for
 you to use.
 
 1. Sign in to [Bitbucket.org](https://bitbucket.org).
@@ -42,26 +31,23 @@ you to use.
    settings (**Manage team**), depending on how you want the application registered.
    It does not matter if the application is registered as an individual or a
    team, that is entirely up to you.
-1. Select **OAuth** in the left menu under "Access Management".
+1. In the left menu under **Access Management**, select **OAuth**.
 1. Select **Add consumer**.
 1. Provide the required details:
 
-   | Item | Description |
-   | :--- | :---------- |
-   | **Name** | This can be anything. Consider something like `<Organization>'s GitLab` or `<Your Name>'s GitLab` or something else descriptive. |
-   | **Application description** | Fill this in if you wish. |
-   | **Callback URL** | The URL to your GitLab installation, e.g., `https://gitlab.example.com/users/auth`. |
-   | **URL** | The URL to your GitLab installation, e.g., `https://gitlab.example.com`. |
+   - **Name:** This can be anything. Consider something like `<Organization>'s GitLab`
+     or `<Your Name>'s GitLab` or something else descriptive.
+   - **Application description:** *(Optional)* Fill this in if you wish.
+   - **Callback URL:** (Required in GitLab versions 8.15 and greater)
+     The URL to your GitLab installation, such as
+     `https://gitlab.example.com/users/auth`. Be sure to append `/users/auth` to
+     the end of the callback URL to prevent an
+     [OAuth2 convert redirect](http://tetraph.com/covert_redirect/) vulnerability.
+     Leaving this field empty
+     [results in an `Invalid redirect_uri` message](https://confluence.atlassian.com/bitbucket/oauth-faq-338365710.html).
+   - **URL:** The URL to your GitLab installation, such as `https://gitlab.example.com`.
 
-   NOTE: Be sure to append `/users/auth` to the end of the callback URL
-   to prevent a [OAuth2 convert
-   redirect](http://tetraph.com/covert_redirect/) vulnerability.
-
-   NOTE: Starting in GitLab 8.15, you MUST specify a callback URL, or you will
-   see an "Invalid redirect_uri" message. For more details, see [the
-   Bitbucket documentation](https://confluence.atlassian.com/bitbucket/oauth-faq-338365710.html).
-
-   And grant at least the following permissions:
+1. Grant at least the following permissions:
 
    ```plaintext
    Account: Email, Read
@@ -75,8 +61,8 @@ you to use.
    ![Bitbucket OAuth settings page](img/bitbucket_oauth_settings_page.png)
 
 1. Select **Save**.
-1. Select your newly created OAuth consumer and you should now see a Key and
-   Secret in the list of OAuth consumers. Keep this page open as you continue
+1. Select your newly created OAuth consumer, and you should now see a **Key** and
+   **Secret** in the list of OAuth consumers. Keep this page open as you continue
    the configuration.
 
    ![Bitbucket OAuth key](img/bitbucket_oauth_keys.png)
@@ -125,16 +111,16 @@ you to use.
 
 1. Save the configuration file.
 1. For the changes to take effect, [reconfigure GitLab](../administration/restart_gitlab.md#omnibus-gitlab-reconfigure) if you installed via
-   Omnibus, or [restart](../administration/restart_gitlab.md#installations-from-source) if installed from source.
+   Omnibus GitLab, or [restart](../administration/restart_gitlab.md#installations-from-source) if installed from source.
 
-On the sign in page there should now be a Bitbucket icon below the regular sign
-in form. Click the icon to begin the authentication process. Bitbucket will ask
-the user to sign in and authorize the GitLab application. If everything goes
-well, the user will be returned to GitLab and will be signed in.
+On the sign-in page there should now be a Bitbucket icon below the regular
+sign-in form. Click the icon to begin the authentication process. Bitbucket asks
+the user to sign in and authorize the GitLab application. If successful, the user
+is returned to GitLab and signed in.
 
 ## Bitbucket project import
 
-Once the above configuration is set up, you can use Bitbucket to sign into
+After the above configuration is set up, you can use Bitbucket to sign into
 GitLab and [start importing your projects](../user/project/import/bitbucket.md).
 
 If you want to import projects from Bitbucket, but don't want to enable signing in,
diff --git a/doc/topics/autodevops/customize.md b/doc/topics/autodevops/customize.md
index b2ab228e68e..95b6241583f 100644
--- a/doc/topics/autodevops/customize.md
+++ b/doc/topics/autodevops/customize.md
@@ -1,6 +1,6 @@
 ---
-stage: none
-group: unassigned
+stage: Configure
+group: Configure
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
diff --git a/doc/topics/autodevops/index.md b/doc/topics/autodevops/index.md
index a3450713dad..e68253ad423 100644
--- a/doc/topics/autodevops/index.md
+++ b/doc/topics/autodevops/index.md
@@ -1,6 +1,6 @@
 ---
-stage: none
-group: unassigned
+stage: Configure
+group: Configure
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
diff --git a/doc/topics/autodevops/quick_start_guide.md b/doc/topics/autodevops/quick_start_guide.md
index d9f4ab0ee88..3531035eb67 100644
--- a/doc/topics/autodevops/quick_start_guide.md
+++ b/doc/topics/autodevops/quick_start_guide.md
@@ -1,6 +1,6 @@
 ---
-stage: none
-group: unassigned
+stage: Configure
+group: Configure
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
diff --git a/doc/topics/autodevops/requirements.md b/doc/topics/autodevops/requirements.md
index 8144d2c88a2..acec7b79d6b 100644
--- a/doc/topics/autodevops/requirements.md
+++ b/doc/topics/autodevops/requirements.md
@@ -1,6 +1,6 @@
 ---
-stage: none
-group: unassigned
+stage: Configure
+group: Configure
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
diff --git a/doc/topics/autodevops/stages.md b/doc/topics/autodevops/stages.md
index f87f19c386f..f2d3b78e2b0 100644
--- a/doc/topics/autodevops/stages.md
+++ b/doc/topics/autodevops/stages.md
@@ -1,6 +1,6 @@
 ---
-stage: none
-group: unassigned
+stage: Configure
+group: Configure
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
diff --git a/doc/topics/autodevops/upgrading_auto_deploy_dependencies.md b/doc/topics/autodevops/upgrading_auto_deploy_dependencies.md
index 1aefb6b34df..16536e5b586 100644
--- a/doc/topics/autodevops/upgrading_auto_deploy_dependencies.md
+++ b/doc/topics/autodevops/upgrading_auto_deploy_dependencies.md
@@ -71,6 +71,10 @@ The v2 auto-deploy-image contains multiple dependency and architectural changes.
 If your Auto DevOps project has an active environment deployed with the v1 `auto-deploy-image`,
 please proceed with the following upgrade guide. Otherwise, you can skip this process.
 
+#### Kubernetes 1.16+
+
+The v2 auto-deploy-image also drops support for Kubernetes 1.15 and lower.
+
 #### Helm 3
 
 > [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/228609) in GitLab 13.4.
diff --git a/doc/topics/autodevops/upgrading_postgresql.md b/doc/topics/autodevops/upgrading_postgresql.md
index 5ca61ab8582..a3c9f562f5e 100644
--- a/doc/topics/autodevops/upgrading_postgresql.md
+++ b/doc/topics/autodevops/upgrading_postgresql.md
@@ -1,6 +1,6 @@
 ---
-stage: none
-group: unassigned
+stage: Configure
+group: Configure
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#designated-technical-writers
 ---
 
diff --git a/doc/user/admin_area/analytics/instance_statistics.md b/doc/user/admin_area/analytics/instance_statistics.md
index 4539f428cb1..0d62d30435d 100644
--- a/doc/user/admin_area/analytics/instance_statistics.md
+++ b/doc/user/admin_area/analytics/instance_statistics.md
@@ -6,7 +6,10 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 # Instance Statistics **(CORE)**
 
-> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/235754) in GitLab 13.4.
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/235754) in GitLab 13.5 behind a feature flag, disabled by default.
+> - [Became enabled by default](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/46962) in GitLab 13.6.
+> - It's enabled on GitLab.com.
+> - It's recommended for production use.
 
 CAUTION: **Warning:**
 This feature might not be available to you. Check the **version history** note above for details.
@@ -36,3 +39,22 @@ in the categories shown in [Total counts](#total-counts).
 These charts help you visualize how rapidly these records are being created on your instance.
 
 ![Instance Activity Pipelines chart](img/instance_activity_pipelines_chart_v13_6.png)
+
+### Enable or disable Instance Statistics
+
+In GitLab version 13.5 only, Instance Statistics was under development and not ready for production use.
+It was deployed behind a feature flag that was **disabled by default**.
+[GitLab administrators with access to the GitLab Rails console](../../../administration/feature_flags.md)
+can opt to enable it.
+
+To enable it:
+
+```ruby
+Feature.enable(:instance_statistics)
+```
+
+To disable it:
+
+```ruby
+Feature.disable(:instance_statistics)
+```
diff --git a/doc/user/application_security/api_fuzzing/index.md b/doc/user/application_security/api_fuzzing/index.md
index eedad0aaedb..57c5f8bc1fa 100644
--- a/doc/user/application_security/api_fuzzing/index.md
+++ b/doc/user/application_security/api_fuzzing/index.md
@@ -638,6 +638,86 @@ variables:
   FUZZAPI_OVERRIDES_INTERVAL: 300
 ```
 
+### Header Fuzzing
+
+Header fuzzing is disabled by default due to the high number of false positives that occur with many
+technology stacks. When header fuzzing is enabled, you must specify a list of headers to include in
+fuzzing.
+
+Each profile in the default configuration file has an entry for `GeneralFuzzingCheck`. This check
+performs header fuzzing. Under the `Configuration` section, you must change the `HeaderFuzzing` and
+`Headers` settings to enable header fuzzing.
+
+This snippet shows the `Quick-10` profile's default configuration with header fuzzing disabled:
+
+```yaml
+- Name: Quick-10
+  DefaultProfile: Empty
+  Routes:
+  - Route: *Route0
+    Checks:
+    - Name: FormBodyFuzzingCheck
+      Configuration:
+        FuzzingCount: 10
+        UnicodeFuzzing: true
+    - Name: GeneralFuzzingCheck
+      Configuration:
+        FuzzingCount: 10
+        UnicodeFuzzing: true
+        HeaderFuzzing: false
+        Headers:
+    - Name: JsonFuzzingCheck
+      Configuration:
+        FuzzingCount: 10
+        UnicodeFuzzing: true
+    - Name: XmlFuzzingCheck
+      Configuration:
+        FuzzingCount: 10
+        UnicodeFuzzing: true
+```
+
+`HeaderFuzzing` is a boolean that turns header fuzzing on and off. The default setting is `false`
+for off. To turn header fuzzing on, change this setting to `true`:
+
+```yaml
+    - Name: GeneralFuzzingCheck
+      Configuration:
+        FuzzingCount: 10
+        UnicodeFuzzing: true
+        HeaderFuzzing: true
+        Headers:
+```
+
+`Headers` is a list of headers to fuzz. Only headers listed are fuzzed. For example, to fuzz a
+custom header `X-Custom` used by your APIs, add an entry for it using the syntax
+`- Name: HeaderName`, substituting `HeaderName` with the header to fuzz:
+
+```yaml
+    - Name: GeneralFuzzingCheck
+      Configuration:
+        FuzzingCount: 10
+        UnicodeFuzzing: true
+        HeaderFuzzing: true
+        Headers:
+          - Name: X-Custom
+```
+
+You now have a configuration to fuzz the header `X-Custom`. Use the same notation to list additional
+headers:
+
+```yaml
+    - Name: GeneralFuzzingCheck
+      Configuration:
+        FuzzingCount: 10
+        UnicodeFuzzing: true
+        HeaderFuzzing: true
+        Headers:
+          - Name: X-Custom
+          - Name: X-AnotherHeader
+```
+
+Repeat this configuration for each profile as needed.
+
 ## Running your first scan
 
 When configured correctly, a CI/CD pipeline contains a `Fuzz` stage and a `apifuzzer_fuzz` job. The
diff --git a/lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2.rb b/lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2.rb
new file mode 100644
index 00000000000..61145f6a445
--- /dev/null
+++ b/lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2.rb
@@ -0,0 +1,86 @@
+# frozen_string_literal: true
+
+# Based on https://community.developer.atlassian.com/t/get-rest-api-3-filter-search/29459/2,
+# it's enough at the moment to simply notice if the url is from `atlassian.net`
+module Gitlab
+  module BackgroundMigration
+    # Backfill the deployment_type in jira_tracker_data table
+    class BackfillJiraTrackerDeploymentType2
+      # Migration only version of jira_tracker_data table
+      class JiraTrackerDataTemp < ApplicationRecord
+        self.table_name = 'jira_tracker_data'
+
+        def self.encryption_options
+          {
+            key: Settings.attr_encrypted_db_key_base_32,
+            encode: true,
+            mode: :per_attribute_iv,
+            algorithm: 'aes-256-gcm'
+          }
+        end
+
+        attr_encrypted :url, encryption_options
+        attr_encrypted :api_url, encryption_options
+
+        enum deployment_type: { unknown: 0, server: 1, cloud: 2 }, _prefix: :deployment
+      end
+
+      # Migration only version of services table
+      class JiraServiceTemp < ApplicationRecord
+        self.table_name = 'services'
+        self.inheritance_column = :_type_disabled
+      end
+
+      def perform(start_id, stop_id)
+        @server_ids = []
+        @cloud_ids  = []
+
+        JiraTrackerDataTemp
+          .where(id: start_id..stop_id, deployment_type: 0)
+          .each do |jira_tracker_data|
+            collect_deployment_type(jira_tracker_data)
+          end
+
+        unless cloud_ids.empty?
+          JiraTrackerDataTemp.where(id: cloud_ids)
+            .update_all(deployment_type: JiraTrackerDataTemp.deployment_types[:cloud])
+        end
+
+        unless server_ids.empty?
+          JiraTrackerDataTemp.where(id: server_ids)
+            .update_all(deployment_type: JiraTrackerDataTemp.deployment_types[:server])
+        end
+
+        mark_jobs_as_succeeded(start_id, stop_id)
+      end
+
+      private
+
+      attr_reader :server_ids, :cloud_ids
+
+      def client_url(jira_tracker_data)
+        jira_tracker_data.api_url.presence || jira_tracker_data.url.presence
+      end
+
+      def server_type(url)
+        url.downcase.include?('.atlassian.net') ? :cloud : :server
+      end
+
+      def collect_deployment_type(jira_tracker_data)
+        url = client_url(jira_tracker_data)
+        return unless url
+
+        case server_type(url)
+        when :cloud
+          cloud_ids << jira_tracker_data.id
+        else
+          server_ids << jira_tracker_data.id
+        end
+      end
+
+      def mark_jobs_as_succeeded(*arguments)
+        Gitlab::Database::BackgroundMigrationJob.mark_all_as_succeeded(self.class.name, arguments)
+      end
+    end
+  end
+end
diff --git a/lib/gitlab/middleware/read_only/controller.rb b/lib/gitlab/middleware/read_only/controller.rb
index 18566859285..c239336938e 100644
--- a/lib/gitlab/middleware/read_only/controller.rb
+++ b/lib/gitlab/middleware/read_only/controller.rb
@@ -10,7 +10,7 @@ module Gitlab
         ERROR_MESSAGE = 'You cannot perform write operations on a read-only instance'
 
         ALLOWLISTED_GIT_ROUTES = {
-          'repositories/git_http' => %w{git_upload_pack git_receive_pack}
+          'repositories/git_http' => %w{git_upload_pack}
         }.freeze
 
         ALLOWLISTED_GIT_LFS_ROUTES = {
@@ -96,7 +96,7 @@ module Gitlab
         def workhorse_passthrough_route?
           # Calling route_hash may be expensive. Only do it if we think there's a possible match
           return false unless request.post? &&
-            request.path.end_with?('.git/git-upload-pack', '.git/git-receive-pack')
+            request.path.end_with?('.git/git-upload-pack')
 
           ALLOWLISTED_GIT_ROUTES[route_hash[:controller]]&.include?(route_hash[:action])
         end
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index b156ae50d96..9b14d4951a8 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -8356,9 +8356,6 @@ msgstr ""
 msgid "CycleAnalytics|stage dropdown"
 msgstr ""
 
-msgid "DAG"
-msgstr ""
-
 msgid "DAG visualization requires at least 3 dependent jobs."
 msgstr ""
 
@@ -13985,6 +13982,9 @@ msgstr ""
 msgid "If using GitHub, you’ll see pipeline statuses on GitHub for your commits and pull requests. %{more_info_link}"
 msgstr ""
 
+msgid "If you add %{codeStart}needs%{codeEnd} to jobs in your pipeline you'll be able to view the %{codeStart}needs%{codeEnd} relationships between jobs in this tab as a %{linkStart}Directed Acyclic Graph (DAG)%{linkEnd}."
+msgstr ""
+
 msgid "If you did not recently sign in, you should immediately %{password_link_start}change your password%{password_link_end}."
 msgstr ""
 
@@ -15829,6 +15829,9 @@ msgstr ""
 msgid "Learn more about License-Check"
 msgstr ""
 
+msgid "Learn more about Needs relationships"
+msgstr ""
+
 msgid "Learn more about Vulnerability-Check"
 msgstr ""
 
@@ -15856,9 +15859,6 @@ msgstr ""
 msgid "Learn more about group-level project templates"
 msgstr ""
 
-msgid "Learn more about job dependencies"
-msgstr ""
-
 msgid "Learn more about signing commits"
 msgstr ""
 
@@ -17930,6 +17930,9 @@ msgstr ""
 msgid "Need help?"
 msgstr ""
 
+msgid "Needs"
+msgstr ""
+
 msgid "Needs attention"
 msgstr ""
 
@@ -22663,9 +22666,6 @@ msgstr ""
 msgid "Removes time estimate."
 msgstr ""
 
-msgid "Removing integrations is not supported for this project"
-msgstr ""
-
 msgid "Removing this group also removes all child projects, including archived projects, and their resources."
 msgstr ""
 
@@ -25644,6 +25644,9 @@ msgstr ""
 msgid "Specify the following URL during the Runner setup:"
 msgstr ""
 
+msgid "Speed up your pipelines with Needs relationships"
+msgstr ""
+
 msgid "Squash commit message"
 msgstr ""
 
@@ -25761,9 +25764,6 @@ msgstr ""
 msgid "Start thread & reopen %{noteable_name}"
 msgstr ""
 
-msgid "Start using Directed Acyclic Graphs (DAG)"
-msgstr ""
-
 msgid "Start your Free Gold Trial"
 msgstr ""
 
@@ -27826,9 +27826,6 @@ msgstr ""
 msgid "This page sends a payload. Go back to the events page to see a newly created event."
 msgstr ""
 
-msgid "This pipeline does not use the %{codeStart}needs%{codeEnd} keyword and can't be represented as a directed acyclic graph."
-msgstr ""
-
 msgid "This pipeline makes use of a predefined CI/CD configuration enabled by %{b_open}Auto DevOps.%{b_close}"
 msgstr ""
 
@@ -29582,6 +29579,9 @@ msgstr ""
 msgid "UserProfile|Report abuse"
 msgstr ""
 
+msgid "UserProfile|Retry"
+msgstr ""
+
 msgid "UserProfile|Snippets"
 msgstr ""
 
@@ -29693,15 +29693,15 @@ msgstr ""
 msgid "UsersSelect|Unassigned"
 msgstr ""
 
-msgid "Using %{codeStart}needs%{codeEnd} allows jobs to run before their stage is reached, as soon as their individual dependencies are met, which speeds up your pipelines."
-msgstr ""
-
 msgid "Using %{code_start}::%{code_end} denotes a %{link_start}scoped label set%{link_end}"
 msgstr ""
 
 msgid "Using required encryption strategy when encrypted field is missing!"
 msgstr ""
 
+msgid "Using the %{codeStart}needs%{codeEnd} keyword makes jobs run before their stage is reached. Jobs run as soon as their %{codeStart}needs%{codeEnd} relationships are met, which speeds up your pipelines."
+msgstr ""
+
 msgid "Valid from"
 msgstr ""
 
diff --git a/spec/controllers/projects/alerting/notifications_controller_spec.rb b/spec/controllers/projects/alerting/notifications_controller_spec.rb
index 6acd68b419c..b3d37723ccf 100644
--- a/spec/controllers/projects/alerting/notifications_controller_spec.rb
+++ b/spec/controllers/projects/alerting/notifications_controller_spec.rb
@@ -89,18 +89,6 @@ RSpec.describe Projects::Alerting::NotificationsController do
                     make_request
                   end
                 end
-
-                context 'when multiple endpoints are disabled' do
-                  before do
-                    stub_feature_flags(multiple_http_integrations: false)
-                  end
-
-                  it 'does not find an integration' do
-                    expect(notify_service).to receive(:execute).with('some token', nil)
-
-                    make_request
-                  end
-                end
               end
 
               context 'without integration parameters specified' do
diff --git a/spec/controllers/projects/avatars_controller_spec.rb b/spec/controllers/projects/avatars_controller_spec.rb
index 16e9c845307..35878fe4c2d 100644
--- a/spec/controllers/projects/avatars_controller_spec.rb
+++ b/spec/controllers/projects/avatars_controller_spec.rb
@@ -3,14 +3,14 @@
 require 'spec_helper'
 
 RSpec.describe Projects::AvatarsController do
-  let_it_be(:project) { create(:project, :repository) }
-
-  before do
-    controller.instance_variable_set(:@project, project)
-  end
-
   describe 'GET #show' do
-    subject { get :show, params: { namespace_id: project.namespace, project_id: project } }
+    let_it_be(:project) { create(:project, :public, :repository) }
+
+    before do
+      controller.instance_variable_set(:@project, project)
+    end
+
+    subject { get :show, params: { namespace_id: project.namespace, project_id: project.path } }
 
     context 'when repository has no avatar' do
       it 'shows 404' do
@@ -37,6 +37,15 @@ RSpec.describe Projects::AvatarsController do
           expect(response.header[Gitlab::Workhorse::DETECT_HEADER]).to eq 'true'
         end
 
+        it 'sets appropriate caching headers' do
+          sign_in(project.owner)
+          subject
+
+          expect(response.cache_control[:public]).to eq(true)
+          expect(response.cache_control[:max_age]).to eq(60)
+          expect(response.cache_control[:no_store]).to be_nil
+        end
+
         it_behaves_like 'project cache control headers'
       end
 
@@ -51,9 +60,16 @@ RSpec.describe Projects::AvatarsController do
   end
 
   describe 'DELETE #destroy' do
-    it 'removes avatar from DB by calling destroy' do
-      delete :destroy, params: { namespace_id: project.namespace.id, project_id: project.id }
+    let(:project) { create(:project, :repository, avatar: fixture_file_upload("spec/fixtures/dk.png", "image/png")) }
 
+    before do
+      sign_in(project.owner)
+    end
+
+    it 'removes avatar from DB by calling destroy' do
+      delete :destroy, params: { namespace_id: project.namespace.path, project_id: project.path }
+
+      expect(response).to redirect_to(edit_project_path(project, anchor: 'js-general-project-settings'))
       expect(project.avatar.present?).to be_falsey
       expect(project).to be_valid
     end
diff --git a/spec/controllers/projects/raw_controller_spec.rb b/spec/controllers/projects/raw_controller_spec.rb
index 083ec3e8df6..43cf1a16051 100644
--- a/spec/controllers/projects/raw_controller_spec.rb
+++ b/spec/controllers/projects/raw_controller_spec.rb
@@ -226,6 +226,15 @@ RSpec.describe Projects::RawController do
         get(:show, params: { namespace_id: project.namespace, project_id: project, id: 'master/README.md' })
       end
 
+      it 'sets appropriate caching headers' do
+        sign_in create(:user)
+        request_file
+
+        expect(response.cache_control[:public]).to eq(true)
+        expect(response.cache_control[:max_age]).to eq(60)
+        expect(response.cache_control[:no_store]).to be_nil
+      end
+
       context 'when If-None-Match header is set' do
         it 'returns a 304 status' do
           request_file
diff --git a/spec/controllers/projects/repositories_controller_spec.rb b/spec/controllers/projects/repositories_controller_spec.rb
index 97eea7c7e9d..e7f4a8a1422 100644
--- a/spec/controllers/projects/repositories_controller_spec.rb
+++ b/spec/controllers/projects/repositories_controller_spec.rb
@@ -122,7 +122,9 @@ RSpec.describe Projects::RepositoriesController do
 
           expect(response).to have_gitlab_http_status(:ok)
           expect(response.header['ETag']).to be_present
-          expect(response.header['Cache-Control']).to include('max-age=60, private')
+          expect(response.cache_control[:public]).to eq(false)
+          expect(response.cache_control[:max_age]).to eq(60)
+          expect(response.cache_control[:no_store]).to be_nil
         end
 
         context 'when project is public' do
diff --git a/spec/features/projects/pipelines/pipeline_spec.rb b/spec/features/projects/pipelines/pipeline_spec.rb
index 99e4084ef12..ac3566fbbdd 100644
--- a/spec/features/projects/pipelines/pipeline_spec.rb
+++ b/spec/features/projects/pipelines/pipeline_spec.rb
@@ -346,7 +346,7 @@ RSpec.describe 'Pipeline', :js do
       it 'shows Pipeline, Jobs, DAG and Failed Jobs tabs with link' do
         expect(page).to have_link('Pipeline')
         expect(page).to have_link('Jobs')
-        expect(page).to have_link('DAG')
+        expect(page).to have_link('Needs')
         expect(page).to have_link('Failed Jobs')
       end
 
@@ -893,7 +893,7 @@ RSpec.describe 'Pipeline', :js do
       it 'shows Pipeline, Jobs and DAG tabs with link' do
         expect(page).to have_link('Pipeline')
         expect(page).to have_link('Jobs')
-        expect(page).to have_link('DAG')
+        expect(page).to have_link('Needs')
       end
 
       it 'shows counter in Jobs tab' do
diff --git a/spec/frontend/jobs/components/log/line_spec.js b/spec/frontend/jobs/components/log/line_spec.js
index c2412a807c3..6154dbbdcc2 100644
--- a/spec/frontend/jobs/components/log/line_spec.js
+++ b/spec/frontend/jobs/components/log/line_spec.js
@@ -2,21 +2,26 @@ import { shallowMount } from '@vue/test-utils';
 import Line from '~/jobs/components/log/line.vue';
 import LineNumber from '~/jobs/components/log/line_number.vue';
 
+const httpUrl = 'http://example.com';
+const httpsUrl = 'https://example.com';
+
+const mockProps = ({ text = 'Running with gitlab-runner 12.1.0 (de7731dd)' } = {}) => ({
+  line: {
+    content: [
+      {
+        text,
+        style: 'term-fg-l-green',
+      },
+    ],
+    lineNumber: 0,
+  },
+  path: '/jashkenas/underscore/-/jobs/335',
+});
+
 describe('Job Log Line', () => {
   let wrapper;
-
-  const data = {
-    line: {
-      content: [
-        {
-          text: 'Running with gitlab-runner 12.1.0 (de7731dd)',
-          style: 'term-fg-l-green',
-        },
-      ],
-      lineNumber: 0,
-    },
-    path: '/jashkenas/underscore/-/jobs/335',
-  };
+  let data;
+  let originalGon;
 
   const createComponent = (props = {}) => {
     wrapper = shallowMount(Line, {
@@ -26,12 +31,25 @@ describe('Job Log Line', () => {
     });
   };
 
+  const findLine = () => wrapper.find('span');
+  const findLink = () => findLine().find('a');
+  const findLinksAt = i =>
+    findLine()
+      .findAll('a')
+      .at(i);
+
   beforeEach(() => {
+    originalGon = window.gon;
+    window.gon.features = {
+      ciJobLineLinks: false,
+    };
+
+    data = mockProps();
     createComponent(data);
   });
 
   afterEach(() => {
-    wrapper.destroy();
+    window.gon = originalGon;
   });
 
   it('renders the line number component', () => {
@@ -39,10 +57,103 @@ describe('Job Log Line', () => {
   });
 
   it('renders a span the provided text', () => {
-    expect(wrapper.find('span').text()).toBe(data.line.content[0].text);
+    expect(findLine().text()).toBe(data.line.content[0].text);
   });
 
   it('renders the provided style as a class attribute', () => {
-    expect(wrapper.find('span').classes()).toContain(data.line.content[0].style);
+    expect(findLine().classes()).toContain(data.line.content[0].style);
+  });
+
+  describe.each([true, false])('when feature ci_job_line_links enabled = %p', ciJobLineLinks => {
+    beforeEach(() => {
+      window.gon.features = {
+        ciJobLineLinks,
+      };
+    });
+
+    it('renders text with symbols', () => {
+      const text = 'apt-get update < /dev/null > /dev/null';
+      createComponent(mockProps({ text }));
+
+      expect(findLine().text()).toBe(text);
+    });
+
+    it.each`
+      tag         | text
+      ${'a'}      | ${'<a href="#">linked</a>'}
+      ${'script'} | ${'<script>doEvil();</script>'}
+      ${'strong'} | ${'<strong>highlighted</strong>'}
+    `('escapes `<$tag>` tags in text', ({ tag, text }) => {
+      createComponent(mockProps({ text }));
+
+      expect(
+        findLine()
+          .find(tag)
+          .exists(),
+      ).toBe(false);
+      expect(findLine().text()).toBe(text);
+    });
+  });
+
+  describe('when ci_job_line_links is enabled', () => {
+    beforeEach(() => {
+      window.gon.features = {
+        ciJobLineLinks: true,
+      };
+    });
+
+    it('renders an http link', () => {
+      createComponent(mockProps({ text: httpUrl }));
+
+      expect(findLink().text()).toBe(httpUrl);
+      expect(findLink().attributes().href).toBe(httpUrl);
+    });
+
+    it('renders an https link', () => {
+      createComponent(mockProps({ text: httpsUrl }));
+
+      expect(findLink().text()).toBe(httpsUrl);
+      expect(findLink().attributes().href).toBe(httpsUrl);
+    });
+
+    it('renders a multiple links surrounded by text', () => {
+      createComponent(mockProps({ text: `My HTTP url: ${httpUrl} and my HTTPS url: ${httpsUrl}` }));
+      expect(findLine().text()).toBe(
+        'My HTTP url: http://example.com and my HTTPS url: https://example.com',
+      );
+      expect(findLinksAt(0).attributes().href).toBe(httpUrl);
+      expect(findLinksAt(1).attributes().href).toBe(httpsUrl);
+    });
+
+    it('renders a link with rel nofollow and noopener', () => {
+      createComponent(mockProps({ text: httpsUrl }));
+
+      expect(findLink().attributes().rel).toBe('nofollow noopener noreferrer');
+    });
+
+    it('render links surrounded by text', () => {
+      createComponent(
+        mockProps({ text: `My HTTP url: ${httpUrl} and my HTTPS url: ${httpsUrl} are here.` }),
+      );
+      expect(findLine().text()).toBe(
+        'My HTTP url: http://example.com and my HTTPS url: https://example.com are here.',
+      );
+      expect(findLinksAt(0).attributes().href).toBe(httpUrl);
+      expect(findLinksAt(1).attributes().href).toBe(httpsUrl);
+    });
+
+    const jshref = 'javascript:doEvil();'; // eslint-disable-line no-script-url
+
+    test.each`
+      type           | text
+      ${'js'}        | ${jshref}
+      ${'file'}      | ${'file:///a-file'}
+      ${'ftp'}       | ${'ftp://example.com/file'}
+      ${'email'}     | ${'email@example.com'}
+      ${'no scheme'} | ${'example.com/page'}
+    `('does not render a $type link', ({ text }) => {
+      createComponent(mockProps({ text }));
+      expect(findLink().exists()).toBe(false);
+    });
   });
 });
diff --git a/spec/frontend/notes/components/note_actions_spec.js b/spec/frontend/notes/components/note_actions_spec.js
index a79c3bbacb7..f01c6c6b84e 100644
--- a/spec/frontend/notes/components/note_actions_spec.js
+++ b/spec/frontend/notes/components/note_actions_spec.js
@@ -1,5 +1,5 @@
 import Vue from 'vue';
-import { shallowMount, createLocalVue, createWrapper } from '@vue/test-utils';
+import { mount, createLocalVue, createWrapper } from '@vue/test-utils';
 import { TEST_HOST } from 'spec/test_constants';
 import AxiosMockAdapter from 'axios-mock-adapter';
 import createStore from '~/notes/stores';
@@ -14,9 +14,9 @@ describe('noteActions', () => {
   let actions;
   let axiosMock;
 
-  const shallowMountNoteActions = (propsData, computed) => {
+  const mountNoteActions = (propsData, computed) => {
     const localVue = createLocalVue();
-    return shallowMount(localVue.extend(noteActions), {
+    return mount(localVue.extend(noteActions), {
       store,
       propsData,
       localVue,
@@ -61,7 +61,7 @@ describe('noteActions', () => {
     beforeEach(() => {
       store.dispatch('setUserData', userDataMock);
 
-      wrapper = shallowMountNoteActions(props);
+      wrapper = mountNoteActions(props);
     });
 
     it('should render noteable author badge', () => {
@@ -178,7 +178,7 @@ describe('noteActions', () => {
     };
 
     beforeEach(() => {
-      wrapper = shallowMountNoteActions(props, {
+      wrapper = mountNoteActions(props, {
         targetType: () => 'issue',
       });
       store.state.noteableData = {
@@ -205,7 +205,7 @@ describe('noteActions', () => {
     };
 
     beforeEach(() => {
-      wrapper = shallowMountNoteActions(props, {
+      wrapper = mountNoteActions(props, {
         targetType: () => 'issue',
       });
     });
@@ -221,7 +221,7 @@ describe('noteActions', () => {
   describe('user is not logged in', () => {
     beforeEach(() => {
       store.dispatch('setUserData', {});
-      wrapper = shallowMountNoteActions({
+      wrapper = mountNoteActions({
         ...props,
         canDelete: false,
         canEdit: false,
@@ -241,7 +241,7 @@ describe('noteActions', () => {
 
   describe('for showReply = true', () => {
     beforeEach(() => {
-      wrapper = shallowMountNoteActions({
+      wrapper = mountNoteActions({
         ...props,
         showReply: true,
       });
@@ -256,7 +256,7 @@ describe('noteActions', () => {
 
   describe('for showReply = false', () => {
     beforeEach(() => {
-      wrapper = shallowMountNoteActions({
+      wrapper = mountNoteActions({
         ...props,
         showReply: false,
       });
@@ -273,7 +273,7 @@ describe('noteActions', () => {
     beforeEach(() => {
       store.dispatch('setUserData', userDataMock);
 
-      wrapper = shallowMountNoteActions({ ...props, canResolve: true, isDraft: true });
+      wrapper = mountNoteActions({ ...props, canResolve: true, isDraft: true });
     });
 
     it('should render the right resolve button title', () => {
diff --git a/spec/graphql/resolvers/alert_management/integrations_resolver_spec.rb b/spec/graphql/resolvers/alert_management/integrations_resolver_spec.rb
index 910da77ad48..36e409e0677 100644
--- a/spec/graphql/resolvers/alert_management/integrations_resolver_spec.rb
+++ b/spec/graphql/resolvers/alert_management/integrations_resolver_spec.rb
@@ -28,14 +28,6 @@ RSpec.describe Resolvers::AlertManagement::IntegrationsResolver do
     end
 
     it { is_expected.to contain_exactly(active_http_integration, prometheus_integration) }
-
-    context 'feature flag is not enabled' do
-      before do
-        stub_feature_flags(multiple_http_integrations: false)
-      end
-
-      it { is_expected.to be_empty }
-    end
   end
 
   private
diff --git a/spec/lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2_spec.rb b/spec/lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2_spec.rb
new file mode 100644
index 00000000000..7fe82420364
--- /dev/null
+++ b/spec/lib/gitlab/background_migration/backfill_jira_tracker_deployment_type2_spec.rb
@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::BackgroundMigration::BackfillJiraTrackerDeploymentType2, :migration, schema: 20201028182809 do
+  let_it_be(:jira_service_temp) { described_class::JiraServiceTemp }
+  let_it_be(:jira_tracker_data_temp) { described_class::JiraTrackerDataTemp }
+  let_it_be(:atlassian_host) { 'https://api.atlassian.net' }
+  let_it_be(:mixedcase_host) { 'https://api.AtlassiaN.nEt' }
+  let_it_be(:server_host) { 'https://my.server.net' }
+
+  let(:jira_service) { jira_service_temp.create!(type: 'JiraService', active: true, category: 'issue_tracker') }
+
+  subject { described_class.new }
+
+  def create_tracker_data(options = {})
+    jira_tracker_data_temp.create!({ service_id: jira_service.id }.merge(options))
+  end
+
+  describe '#perform' do
+    context do
+      it 'ignores if deployment already set' do
+        tracker_data = create_tracker_data(url: atlassian_host, deployment_type: 'server')
+
+        expect(subject).not_to receive(:collect_deployment_type)
+
+        subject.perform(tracker_data.id, tracker_data.id)
+
+        expect(tracker_data.reload.deployment_type).to eq 'server'
+      end
+
+      it 'ignores if no url is set' do
+        tracker_data = create_tracker_data(deployment_type: 'unknown')
+
+        expect(subject).to receive(:collect_deployment_type)
+
+        subject.perform(tracker_data.id, tracker_data.id)
+
+        expect(tracker_data.reload.deployment_type).to eq 'unknown'
+      end
+    end
+
+    context 'when tracker is valid' do
+      let!(:tracker_1) { create_tracker_data(url: atlassian_host, deployment_type: 0) }
+      let!(:tracker_2) { create_tracker_data(url: mixedcase_host, deployment_type: 0) }
+      let!(:tracker_3) { create_tracker_data(url: server_host, deployment_type: 0) }
+      let!(:tracker_4) { create_tracker_data(api_url: server_host, deployment_type: 0) }
+      let!(:tracker_nextbatch) { create_tracker_data(api_url: atlassian_host, deployment_type: 0) }
+
+      it 'sets the proper deployment_type', :aggregate_failures do
+        subject.perform(tracker_1.id, tracker_4.id)
+
+        expect(tracker_1.reload.deployment_cloud?).to be_truthy
+        expect(tracker_2.reload.deployment_cloud?).to be_truthy
+        expect(tracker_3.reload.deployment_server?).to be_truthy
+        expect(tracker_4.reload.deployment_server?).to be_truthy
+        expect(tracker_nextbatch.reload.deployment_unknown?).to be_truthy
+      end
+    end
+
+    it_behaves_like 'marks background migration job records' do
+      let(:arguments) { [1, 4] }
+    end
+  end
+end
diff --git a/spec/migrations/20201028182809_backfill_jira_tracker_deployment_type2_spec.rb b/spec/migrations/20201028182809_backfill_jira_tracker_deployment_type2_spec.rb
new file mode 100644
index 00000000000..658b26b1c49
--- /dev/null
+++ b/spec/migrations/20201028182809_backfill_jira_tracker_deployment_type2_spec.rb
@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require Rails.root.join('db', 'post_migrate', '20201028182809_backfill_jira_tracker_deployment_type2.rb')
+
+RSpec.describe BackfillJiraTrackerDeploymentType2, :sidekiq, schema: 20201028182809 do
+  let(:services) { table(:services) }
+  let(:jira_tracker_data) { table(:jira_tracker_data) }
+  let(:migration) { described_class.new }
+  let(:batch_interval) { described_class::DELAY_INTERVAL }
+
+  describe '#up' do
+    before do
+      stub_const("#{described_class}::BATCH_SIZE", 2)
+
+      active_service   = services.create!(type: 'JiraService', active: true)
+      inactive_service = services.create!(type: 'JiraService', active: false)
+
+      jira_tracker_data.create!(id: 1, service_id: active_service.id, deployment_type: 0)
+      jira_tracker_data.create!(id: 2, service_id: active_service.id, deployment_type: 1)
+      jira_tracker_data.create!(id: 3, service_id: inactive_service.id, deployment_type: 2)
+      jira_tracker_data.create!(id: 4, service_id: inactive_service.id, deployment_type: 0)
+      jira_tracker_data.create!(id: 5, service_id: active_service.id, deployment_type: 0)
+    end
+
+    it 'schedules BackfillJiraTrackerDeploymentType2 background jobs' do
+      Sidekiq::Testing.fake! do
+        freeze_time do
+          migration.up
+
+          expect(BackgroundMigrationWorker.jobs.size).to eq(2)
+          expect(described_class::MIGRATION).to be_scheduled_delayed_migration(batch_interval, 1, 4)
+          expect(described_class::MIGRATION).to be_scheduled_delayed_migration(batch_interval * 2, 5, 5)
+        end
+      end
+    end
+  end
+end
diff --git a/spec/services/alert_management/http_integrations/create_service_spec.rb b/spec/services/alert_management/http_integrations/create_service_spec.rb
index c83e6114b1e..ac5c62caf84 100644
--- a/spec/services/alert_management/http_integrations/create_service_spec.rb
+++ b/spec/services/alert_management/http_integrations/create_service_spec.rb
@@ -38,14 +38,6 @@ RSpec.describe AlertManagement::HttpIntegrations::CreateService do
       it_behaves_like 'error response', 'You have insufficient permissions to create an HTTP integration for this project'
     end
 
-    context 'when feature flag is not enabled' do
-      before do
-        stub_feature_flags(multiple_http_integrations: false)
-      end
-
-      it_behaves_like 'error response', 'Multiple HTTP integrations are not supported for this project'
-    end
-
     context 'when an integration already exists' do
       let_it_be(:existing_integration) { create(:alert_management_http_integration, project: project) }
 
diff --git a/spec/services/alert_management/http_integrations/destroy_service_spec.rb b/spec/services/alert_management/http_integrations/destroy_service_spec.rb
index 4e64ad9145b..cd949d728de 100644
--- a/spec/services/alert_management/http_integrations/destroy_service_spec.rb
+++ b/spec/services/alert_management/http_integrations/destroy_service_spec.rb
@@ -38,14 +38,6 @@ RSpec.describe AlertManagement::HttpIntegrations::DestroyService do
       it_behaves_like 'error response', 'You have insufficient permissions to remove this HTTP integration'
     end
 
-    context 'when feature flag is not enabled' do
-      before do
-        stub_feature_flags(multiple_http_integrations: false)
-      end
-
-      it_behaves_like 'error response', 'Removing integrations is not supported for this project'
-    end
-
     context 'when an error occurs during removal' do
       before do
         allow(integration).to receive(:destroy).and_return(false)
diff --git a/spec/services/alert_management/http_integrations/update_service_spec.rb b/spec/services/alert_management/http_integrations/update_service_spec.rb
index 7917e32915a..94c34d9a29c 100644
--- a/spec/services/alert_management/http_integrations/update_service_spec.rb
+++ b/spec/services/alert_management/http_integrations/update_service_spec.rb
@@ -39,14 +39,6 @@ RSpec.describe AlertManagement::HttpIntegrations::UpdateService do
       it_behaves_like 'error response', 'You have insufficient permissions to update this HTTP integration'
     end
 
-    context 'when feature flag is not enabled' do
-      before do
-        stub_feature_flags(multiple_http_integrations: false)
-      end
-
-      it_behaves_like 'error response', 'Multiple HTTP integrations are not supported for this project'
-    end
-
     context 'when an error occurs during update' do
       let(:params) { { name: '' } }
 
diff --git a/spec/services/projects/alerting/notify_service_spec.rb b/spec/services/projects/alerting/notify_service_spec.rb
index 786280e8250..4674f614cf1 100644
--- a/spec/services/projects/alerting/notify_service_spec.rb
+++ b/spec/services/projects/alerting/notify_service_spec.rb
@@ -253,23 +253,6 @@ RSpec.describe Projects::Alerting::NotifyService do
       end
     end
 
-    context 'with an Alerts Service' do
-      let_it_be_with_reload(:integration) { create(:alerts_service, project: project) }
-
-      it_behaves_like 'notifcations are handled correctly' do
-        let(:source) { 'Generic Alert Endpoint' }
-      end
-
-      context 'with deactivated Alerts Service' do
-        before do
-          integration.update!(active: false)
-        end
-
-        it_behaves_like 'does not process incident issues due to error', http_status: :forbidden
-        it_behaves_like 'does not an create alert management alert'
-      end
-    end
-
     context 'with an HTTP Integration' do
       let_it_be_with_reload(:integration) { create(:alert_management_http_integration, project: project) }
 
@@ -284,7 +267,7 @@ RSpec.describe Projects::Alerting::NotifyService do
           integration.update!(active: false)
         end
 
-        it_behaves_like 'does not process incident issues due to error', http_status: :unauthorized
+        it_behaves_like 'does not process incident issues due to error', http_status: :forbidden
         it_behaves_like 'does not an create alert management alert'
       end
     end
diff --git a/spec/support/shared_examples/lib/gitlab/database/background_migration_job_shared_examples.rb b/spec/support/shared_examples/lib/gitlab/database/background_migration_job_shared_examples.rb
new file mode 100644
index 00000000000..20f3270526e
--- /dev/null
+++ b/spec/support/shared_examples/lib/gitlab/database/background_migration_job_shared_examples.rb
@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+RSpec.shared_examples 'marks background migration job records' do
+  it 'marks each job record as succeeded after processing' do
+    create(:background_migration_job, class_name: "::#{described_class.name}",
+           arguments: arguments)
+
+    expect(::Gitlab::Database::BackgroundMigrationJob).to receive(:mark_all_as_succeeded).and_call_original
+
+    expect do
+      subject.perform(*arguments)
+    end.to change { ::Gitlab::Database::BackgroundMigrationJob.succeeded.count }.from(0).to(1)
+  end
+
+  it 'returns the number of job records marked as succeeded' do
+    create(:background_migration_job, class_name: "::#{described_class.name}",
+           arguments: arguments)
+
+    jobs_updated = subject.perform(*arguments)
+
+    expect(jobs_updated).to eq(1)
+  end
+end
diff --git a/spec/support/shared_examples/lib/gitlab/middleware/read_only_gitlab_instance_shared_examples.rb b/spec/support/shared_examples/lib/gitlab/middleware/read_only_gitlab_instance_shared_examples.rb
index c24e6050684..4d6442879d2 100644
--- a/spec/support/shared_examples/lib/gitlab/middleware/read_only_gitlab_instance_shared_examples.rb
+++ b/spec/support/shared_examples/lib/gitlab/middleware/read_only_gitlab_instance_shared_examples.rb
@@ -128,7 +128,6 @@ RSpec.shared_examples 'write access for a read-only GitLab instance' do
         'LFS request to locks create' | '/root/rouge.git/info/lfs/locks'
         'LFS request to locks unlock' | '/root/rouge.git/info/lfs/locks/1/unlock'
         'request to git-upload-pack'  | '/root/rouge.git/git-upload-pack'
-        'request to git-receive-pack' | '/root/rouge.git/git-receive-pack'
       end
 
       with_them do