From 885275c832d7c76b7290b38190a6cf31438d3898 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Wed, 15 Mar 2023 21:14:36 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .gitlab-ci.yml                                |  16 ++--
 GITALY_SERVER_VERSION                         |   2 +-
 .../header_search/store/getters.js            |  10 +-
 .../components/import_actions_cell.vue        |  25 +----
 .../import_groups/components/import_table.vue |  18 +---
 .../components/related_merge_requests.vue     |  14 +--
 .../components/details_page/tags_list.vue     |   7 +-
 .../components/details_page/tags_list_row.vue |   9 +-
 ...et_container_repository_tags.query.graphql |   1 +
 .../details/package_versions_list.vue         |   5 +-
 .../shared/components/registry_list.vue       |   2 +-
 app/helpers/search_helper.rb                  |   4 +-
 app/models/concerns/has_user_type.rb          |   2 +
 .../application_settings/_realtime.html.haml  |   4 +-
 app/views/devise/confirmations/new.html.haml  |   5 +-
 .../projects/feature_flags/index.html.haml    |   2 +-
 .../projects/pages/_pages_settings.html.haml  |   2 +-
 .../registrations/welcome/show.html.haml      |   3 +-
 .../development/cache_client_with_metrics.yml |   8 --
 ...4623_schedule_migration_for_remediation.rb |  11 +--
 ...alize_ci_build_needs_big_int_conversion.rb |   8 ++
 ...lumns_ci_build_needs_big_int_conversion.rb |  57 +++++++++++
 ...071242_delete_security_policy_bot_users.rb |  21 ++++
 ...31_reschedule_migration_for_remediation.rb |  32 +++++++
 db/schema_migrations/20230220102212           |   1 +
 db/schema_migrations/20230309071242           |   1 +
 db/schema_migrations/20230313150531           |   1 +
 db/structure.sql                              |   4 +-
 doc/.vale/gitlab/CodeblockFences.yml          |   4 +-
 doc/.vale/gitlab/Substitutions.yml            |   1 +
 doc/administration/gitaly/troubleshooting.md  |   2 +-
 doc/administration/pages/index.md             |   2 +-
 doc/api/license.md                            |  32 +++++++
 .../metrics/index.md                          |   4 +-
 .../blueprints/object_storage/index.md        |   2 +-
 .../blueprints/rate_limiting/index.md         |   2 +-
 doc/ci/examples/index.md                      |   2 +-
 doc/ci/testing/test_coverage_visualization.md |   2 +-
 .../gitaly_touch_points.md                    |   2 +-
 .../backend/create_source_code_be/index.md    |   2 +-
 .../documentation/styleguide/word_list.md     |   9 +-
 doc/development/fips_compliance.md            |   2 +-
 doc/development/gitaly.md                     |   8 +-
 doc/development/gitlab_shell/index.md         |   4 +-
 doc/development/go_guide/go_upgrade.md        |   2 +-
 doc/development/go_guide/index.md             |  10 +-
 doc/development/secure_coding_guidelines.md   |  32 +++----
 .../uploads/working_with_uploads.md           |   2 +-
 .../advanced_search/elasticsearch.md          |   4 +-
 doc/operations/feature_flags.md               |   6 +-
 .../coverage_fuzzing/index.md                 |   2 +-
 .../reduce_container_registry_storage.md      |   2 +-
 doc/user/packages/go_proxy/index.md           |   2 +-
 .../img/saved_replies_dropdown_v15_10.png     | Bin 0 -> 23623 bytes
 doc/user/profile/saved_replies.md             |  61 ++++++++++++
 lib/api/files.rb                              |  14 +--
 ...remediations_for_vulnerability_findings.rb |   2 +-
 locale/gitlab.pot                             |   3 -
 package.json                                  |   2 +-
 .../header_search/store/getters_spec.js       |   7 ++
 .../components/import_actions_cell_spec.js    |  39 ++++----
 .../components/import_table_spec.js           |  46 ++++-----
 .../details_page/tags_list_row_spec.js        |  36 +++----
 .../components/details_page/tags_list_spec.js |  24 +++--
 .../container_registry/explorer/mock_data.js  |   3 +-
 .../shared/components/registry_list_spec.js   |  17 +++-
 spec/helpers/search_helper_spec.rb            |  15 +++
 ...iations_for_vulnerability_findings_spec.rb |  12 +++
 ...schedule_migration_for_remediation_spec.rb |   8 +-
 ..._ci_build_needs_big_int_conversion_spec.rb |  43 +++++++++
 ..._ci_build_needs_big_int_conversion_spec.rb |  60 ++++++++++++
 ...2_delete_security_policy_bot_users_spec.rb |  24 +++++
 ...schedule_migration_for_remediation_spec.rb |  31 ++++++
 spec/models/concerns/has_user_type_spec.rb    |   2 +-
 spec/requests/api/files_spec.rb               |  21 ----
 .../api/issues/get_group_issues_spec.rb       |  30 +++---
 .../api/issues/get_project_issues_spec.rb     |  42 ++++----
 spec/requests/api/issues/issues_spec.rb       |  60 ++++++------
 .../api/issues/post_projects_issues_spec.rb   |  90 +++++++++---------
 .../api/issues/put_projects_issues_spec.rb    |  62 ++++++------
 .../api/pages/internal_access_spec.rb         |  68 ++++++-------
 spec/requests/api/pages/pages_spec.rb         |  12 +--
 .../requests/api/pages/private_access_spec.rb |  68 ++++++-------
 spec/requests/api/pages/public_access_spec.rb |  68 ++++++-------
 spec/requests/api/pages_domains_spec.rb       |  40 ++++----
 spec/spec_helper.rb                           |  10 --
 yarn.lock                                     |   8 +-
 87 files changed, 893 insertions(+), 552 deletions(-)
 delete mode 100644 config/feature_flags/development/cache_client_with_metrics.yml
 create mode 100644 db/post_migrate/20230220102212_swap_columns_ci_build_needs_big_int_conversion.rb
 create mode 100644 db/post_migrate/20230309071242_delete_security_policy_bot_users.rb
 create mode 100644 db/post_migrate/20230313150531_reschedule_migration_for_remediation.rb
 create mode 100644 db/schema_migrations/20230220102212
 create mode 100644 db/schema_migrations/20230309071242
 create mode 100644 db/schema_migrations/20230313150531
 create mode 100644 doc/user/profile/img/saved_replies_dropdown_v15_10.png
 create mode 100644 doc/user/profile/saved_replies.md
 create mode 100644 spec/migrations/20230214181633_finalize_ci_build_needs_big_int_conversion_spec.rb
 create mode 100644 spec/migrations/20230220102212_swap_columns_ci_build_needs_big_int_conversion_spec.rb
 create mode 100644 spec/migrations/20230309071242_delete_security_policy_bot_users_spec.rb
 create mode 100644 spec/migrations/20230313150531_reschedule_migration_for_remediation_spec.rb

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 79f99211bb1..c3087716b13 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -106,28 +106,28 @@ workflow:
     # For tags, create a pipeline.
     - if: '$CI_COMMIT_TAG'
       variables:
-        <<: *ruby2-variables
-        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_TAG tag pipeline'
+        <<: *ruby3-variables
+        PIPELINE_NAME: 'Ruby 3 $CI_COMMIT_TAG tag pipeline'
     # If `$GITLAB_INTERNAL` isn't set, don't create a pipeline.
     - if: '$GITLAB_INTERNAL == null'
       when: never
     # For stable, auto-deploy, and security branches, create a pipeline.
     - if: '$CI_COMMIT_BRANCH =~ /^[\d-]+-stable(-ee)?$/'
       variables:
-        <<: *ruby2-variables
+        <<: *ruby3-variables
         NOTIFY_PIPELINE_FAILURE_CHANNEL: "releases"
-        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_BRANCH branch pipeline'
+        PIPELINE_NAME: 'Ruby 3 $CI_COMMIT_BRANCH branch pipeline'
         CREATE_INCIDENT_FOR_PIPELINE_FAILURE: "true"
         BROKEN_BRANCH_INCIDENTS_PROJECT: "gitlab-org/release/tasks"
         BROKEN_BRANCH_INCIDENTS_PROJECT_TOKEN: "${BROKEN_STABLE_INCIDENTS_PROJECT_TOKEN}"
     - if: '$CI_COMMIT_BRANCH =~ /^\d+-\d+-auto-deploy-\d+$/'
       variables:
-        <<: *ruby2-variables
-        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_BRANCH branch pipeline'
+        <<: *ruby3-variables
+        PIPELINE_NAME: 'Ruby 3 $CI_COMMIT_BRANCH branch pipeline'
     - if: '$CI_COMMIT_BRANCH =~ /^security\//'
       variables:
-        <<: *ruby2-variables
-        PIPELINE_NAME: 'Ruby 2 $CI_COMMIT_BRANCH branch pipeline'
+        <<: *ruby3-variables
+        PIPELINE_NAME: 'Ruby 3 $CI_COMMIT_BRANCH branch pipeline'
 
 variables:
   PG_VERSION: "12"
diff --git a/GITALY_SERVER_VERSION b/GITALY_SERVER_VERSION
index 2d5269488e5..97fadac1f9d 100644
--- a/GITALY_SERVER_VERSION
+++ b/GITALY_SERVER_VERSION
@@ -1 +1 @@
-71dbaa115c10ae08292a7df74d3f8297ab38f208
+705e00092a936f0233fe16339aba3a1c65db36b0
diff --git a/app/assets/javascripts/header_search/store/getters.js b/app/assets/javascripts/header_search/store/getters.js
index 3da9d2cd961..3dec857930d 100644
--- a/app/assets/javascripts/header_search/store/getters.js
+++ b/app/assets/javascripts/header_search/store/getters.js
@@ -36,6 +36,10 @@ export const searchQuery = (state) => {
 };
 
 export const scopedIssuesPath = (state) => {
+  if (state.searchContext?.project?.id && !state.searchContext?.project_metadata?.issues_path) {
+    return false;
+  }
+
   return (
     state.searchContext?.project_metadata?.issues_path ||
     state.searchContext?.group_metadata?.issues_path ||
@@ -54,7 +58,7 @@ export const scopedMRPath = (state) => {
 export const defaultSearchOptions = (state, getters) => {
   const userName = gon.current_username;
 
-  return [
+  const issues = [
     {
       html_id: 'default-issues-assigned',
       title: MSG_ISSUES_ASSIGNED_TO_ME,
@@ -65,6 +69,9 @@ export const defaultSearchOptions = (state, getters) => {
       title: MSG_ISSUES_IVE_CREATED,
       url: `${getters.scopedIssuesPath}/?author_username=${userName}`,
     },
+  ];
+
+  const mergeRequests = [
     {
       html_id: 'default-mrs-assigned',
       title: MSG_MR_ASSIGNED_TO_ME,
@@ -81,6 +88,7 @@ export const defaultSearchOptions = (state, getters) => {
       url: `${getters.scopedMRPath}/?author_username=${userName}`,
     },
   ];
+  return [...(getters.scopedIssuesPath ? issues : []), ...mergeRequests];
 };
 
 export const projectUrl = (state) => {
diff --git a/app/assets/javascripts/import_entities/import_groups/components/import_actions_cell.vue b/app/assets/javascripts/import_entities/import_groups/components/import_actions_cell.vue
index ed7c9e7abe9..d91f314a86c 100644
--- a/app/assets/javascripts/import_entities/import_groups/components/import_actions_cell.vue
+++ b/app/assets/javascripts/import_entities/import_groups/components/import_actions_cell.vue
@@ -1,16 +1,9 @@
 <script>
-import {
-  GlButton,
-  GlDropdown,
-  GlDropdownItem,
-  GlIcon,
-  GlTooltipDirective as GlTooltip,
-} from '@gitlab/ui';
+import { GlDropdown, GlDropdownItem, GlIcon, GlTooltipDirective as GlTooltip } from '@gitlab/ui';
 
 export default {
   components: {
     GlIcon,
-    GlButton,
     GlDropdown,
     GlDropdownItem,
   },
@@ -18,10 +11,6 @@ export default {
     GlTooltip,
   },
   props: {
-    isProjectsImportEnabled: {
-      type: Boolean,
-      required: true,
-    },
     isFinished: {
       type: Boolean,
       required: true,
@@ -46,7 +35,7 @@ export default {
 <template>
   <span class="gl-white-space-nowrap gl-inline-flex gl-align-items-center">
     <gl-dropdown
-      v-if="isProjectsImportEnabled && (isAvailableForImport || isFinished)"
+      v-if="isAvailableForImport || isFinished"
       :text="isFinished ? __('Re-import with projects') : __('Import with projects')"
       :disabled="isInvalid"
       variant="confirm"
@@ -59,16 +48,6 @@ export default {
         isFinished ? __('Re-import without projects') : __('Import without projects')
       }}</gl-dropdown-item>
     </gl-dropdown>
-    <gl-button
-      v-else-if="isAvailableForImport || isFinished"
-      :disabled="isInvalid"
-      variant="confirm"
-      category="secondary"
-      data-qa-selector="import_group_button"
-      @click="$emit('import-group')"
-    >
-      {{ isFinished ? __('Re-import') : __('Import') }}
-    </gl-button>
     <gl-icon
       v-if="isFinished"
       v-gl-tooltip
diff --git a/app/assets/javascripts/import_entities/import_groups/components/import_table.vue b/app/assets/javascripts/import_entities/import_groups/components/import_table.vue
index c9d1d1c56ee..2e6e7cddf8f 100644
--- a/app/assets/javascripts/import_entities/import_groups/components/import_table.vue
+++ b/app/assets/javascripts/import_entities/import_groups/components/import_table.vue
@@ -1,7 +1,6 @@
 <script>
 import {
   GlAlert,
-  GlButton,
   GlDropdown,
   GlDropdownItem,
   GlEmptyState,
@@ -50,7 +49,6 @@ const DEFAULT_TD_CLASSES = 'gl-vertical-align-top!';
 export default {
   components: {
     GlAlert,
-    GlButton,
     GlDropdown,
     GlDropdownItem,
     GlEmptyState,
@@ -165,10 +163,6 @@ export default {
   ],
 
   computed: {
-    isProjectsImportEnabled() {
-      return Boolean(this.glFeatures.bulkImportProjects);
-    },
-
     groups() {
       return this.bulkImportSourceGroups?.nodes ?? [];
     },
@@ -707,11 +701,11 @@ export default {
             </gl-sprintf>
           </span>
           <gl-dropdown
-            v-if="isProjectsImportEnabled"
             :text="s__('BulkImport|Import with projects')"
             :disabled="!hasSelectedGroups"
             variant="confirm"
             category="primary"
+            data-testid="import-selected-groups-dropdown"
             class="gl-ml-4"
             split
             @click="importSelectedGroups({ migrateProjects: true })"
@@ -720,15 +714,6 @@ export default {
               {{ s__('BulkImport|Import without projects') }}
             </gl-dropdown-item>
           </gl-dropdown>
-          <gl-button
-            v-else
-            category="primary"
-            variant="confirm"
-            class="gl-ml-4"
-            :disabled="!hasSelectedGroups"
-            @click="importSelectedGroups"
-            >{{ s__('BulkImport|Import selected') }}</gl-button
-          >
           <span class="gl-ml-3">
             <gl-icon name="information-o" :size="12" class="gl-text-blue-600" />
             <gl-sprintf
@@ -804,7 +789,6 @@ export default {
           </template>
           <template #cell(actions)="{ item: group, index }">
             <import-actions-cell
-              :is-projects-import-enabled="isProjectsImportEnabled"
               :is-finished="group.flags.isFinished"
               :is-available-for-import="group.flags.isAvailableForImport"
               :is-invalid="group.flags.isInvalid"
diff --git a/app/assets/javascripts/issues/related_merge_requests/components/related_merge_requests.vue b/app/assets/javascripts/issues/related_merge_requests/components/related_merge_requests.vue
index af06884bbb4..92d1a2ffc22 100644
--- a/app/assets/javascripts/issues/related_merge_requests/components/related_merge_requests.vue
+++ b/app/assets/javascripts/issues/related_merge_requests/components/related_merge_requests.vue
@@ -68,7 +68,7 @@ export default {
     <div class="card card-slim gl-mt-5 gl-mb-0 gl-bg-gray-10">
       <div class="card-header gl-px-5 gl-py-4 gl-bg-white">
         <div
-          class="card-title gl-relative gl-display-flex gl-align-items-center gl-line-height-20 gl-font-weight-bold gl-m-0"
+          class="card-title gl-relative gl-display-flex gl-flex-wrap gl-align-items-center gl-line-height-20 gl-font-weight-bold gl-m-0"
         >
           <gl-link
             class="anchor gl-absolute gl-text-decoration-none"
@@ -82,6 +82,12 @@ export default {
             <gl-icon name="merge-request" class="gl-ml-3 gl-mr-2 gl-text-gray-500" />
             <span data-testid="count" class="gl-text-gray-500">{{ totalCount }}</span>
           </template>
+          <p
+            v-if="hasClosingMergeRequest && !isFetchingMergeRequests"
+            class="gl-font-sm gl-font-weight-normal gl-flex-basis-full gl-mb-0 gl-text-gray-500"
+          >
+            {{ closingMergeRequestsText }}
+          </p>
         </div>
       </div>
       <gl-loading-icon
@@ -110,11 +116,5 @@ export default {
         </li>
       </ul>
     </div>
-    <div
-      v-if="hasClosingMergeRequest && !isFetchingMergeRequests"
-      class="issue-closed-by-widget second-block gl-mt-3"
-    >
-      {{ closingMergeRequestsText }}
-    </div>
   </div>
 </template>
diff --git a/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list.vue b/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list.vue
index f128e77da62..863d1c2629b 100644
--- a/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list.vue
+++ b/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list.vue
@@ -87,6 +87,9 @@ export default {
     tags() {
       return this.containerRepository?.tags?.nodes || [];
     },
+    hideBulkDelete() {
+      return !(this.containerRepository?.canDelete || false);
+    },
     tagsPageInfo() {
       return this.containerRepository?.tags?.pageInfo;
     },
@@ -98,9 +101,6 @@ export default {
         sort: this.sort,
       };
     },
-    showMultiDeleteButton() {
-      return this.tags.some((tag) => tag.canDelete) && !this.isMobile;
-    },
     hasNoTags() {
       return this.tags.length === 0;
     },
@@ -186,6 +186,7 @@ export default {
       />
       <template v-else>
         <registry-list
+          :hidden-delete="hideBulkDelete"
           :title="listTitle"
           :pagination="tagsPageInfo"
           :items="tags"
diff --git a/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row.vue b/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row.vue
index 38b601ac3ec..8e89128a382 100644
--- a/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row.vue
+++ b/app/assets/javascripts/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row.vue
@@ -109,9 +109,6 @@ export default {
     isInvalidTag() {
       return !this.tag.digest;
     },
-    isDeleteDisabled() {
-      return this.disabled || !this.tag.canDelete;
-    },
   },
 };
 </script>
@@ -179,16 +176,16 @@ export default {
         </gl-sprintf>
       </span>
     </template>
-    <template #right-action>
+    <template v-if="tag.canDelete" #right-action>
       <gl-dropdown
-        :disabled="isDeleteDisabled"
+        :disabled="disabled"
         icon="ellipsis_v"
         :text="$options.i18n.MORE_ACTIONS_TEXT"
         :text-sr-only="true"
         category="tertiary"
         no-caret
         right
-        :class="{ 'gl-opacity-0 gl-pointer-events-none': isDeleteDisabled }"
+        :class="{ 'gl-opacity-0 gl-pointer-events-none': disabled }"
         data-testid="additional-actions"
         data-qa-selector="more_actions_menu"
       >
diff --git a/app/assets/javascripts/packages_and_registries/container_registry/explorer/graphql/queries/get_container_repository_tags.query.graphql b/app/assets/javascripts/packages_and_registries/container_registry/explorer/graphql/queries/get_container_repository_tags.query.graphql
index e57ac2a9efe..a0a80600603 100644
--- a/app/assets/javascripts/packages_and_registries/container_registry/explorer/graphql/queries/get_container_repository_tags.query.graphql
+++ b/app/assets/javascripts/packages_and_registries/container_registry/explorer/graphql/queries/get_container_repository_tags.query.graphql
@@ -12,6 +12,7 @@ query getContainerRepositoryTags(
   containerRepository(id: $id) {
     id
     tagsCount
+    canDelete
     tags(after: $after, before: $before, first: $first, last: $last, name: $name, sort: $sort) {
       nodes {
         digest
diff --git a/app/assets/javascripts/packages_and_registries/package_registry/components/details/package_versions_list.vue b/app/assets/javascripts/packages_and_registries/package_registry/components/details/package_versions_list.vue
index a06b2cadd6e..3d5ac528920 100644
--- a/app/assets/javascripts/packages_and_registries/package_registry/components/details/package_versions_list.vue
+++ b/app/assets/javascripts/packages_and_registries/package_registry/components/details/package_versions_list.vue
@@ -122,11 +122,8 @@ export default {
         @next-page="$emit('next-page')"
       >
         <template #default="{ first, item, isSelected, selectItem }">
-          <!-- `first` prop is used to decide whether to show the top border
-          for the first element. We want to show the top border only when
-          user has permission to bulk delete versions. -->
           <version-row
-            :first="canDestroy && first"
+            :first="first"
             :package-entity="item"
             :selected="isSelected(item)"
             @delete="setItemToBeDeleted(item)"
diff --git a/app/assets/javascripts/packages_and_registries/shared/components/registry_list.vue b/app/assets/javascripts/packages_and_registries/shared/components/registry_list.vue
index 7485f8282ee..1c8f80972df 100644
--- a/app/assets/javascripts/packages_and_registries/shared/components/registry_list.vue
+++ b/app/assets/javascripts/packages_and_registries/shared/components/registry_list.vue
@@ -125,7 +125,7 @@ export default {
         :select-item="selectItem"
         :is-selected="isSelected"
         :item="item"
-        :first="index === 0"
+        :first="!hiddenDelete && index === 0"
       ></slot>
     </div>
 
diff --git a/app/helpers/search_helper.rb b/app/helpers/search_helper.rb
index ca5436ff019..d62dc038388 100644
--- a/app/helpers/search_helper.rb
+++ b/app/helpers/search_helper.rb
@@ -204,7 +204,9 @@ module SearchHelper
 
       if search_has_project?
         hash[:project] = { id: @project.id, name: @project.name }
-        hash[:project_metadata] = { issues_path: project_issues_path(@project), mr_path: project_merge_requests_path(@project) }
+        hash[:project_metadata] = { mr_path: project_merge_requests_path(@project) }
+        hash[:project_metadata][:issues_path] = project_issues_path(@project) if @project.feature_available?(:issues, current_user)
+
         hash[:code_search] = search_scope.nil?
         hash[:ref] = @ref if @ref && can?(current_user, :read_code, @project)
       end
diff --git a/app/models/concerns/has_user_type.rb b/app/models/concerns/has_user_type.rb
index 752be378ab0..0b1c6780db8 100644
--- a/app/models/concerns/has_user_type.rb
+++ b/app/models/concerns/has_user_type.rb
@@ -14,6 +14,7 @@ module HasUserType
     migration_bot: 7,
     security_bot: 8,
     automation_bot: 9,
+    security_policy_bot: 10, # Currently not in use. See https://gitlab.com/gitlab-org/gitlab/-/issues/384174
     admin_bot: 11,
     suggested_reviewers_bot: 12,
     service_account: 13
@@ -27,6 +28,7 @@ module HasUserType
     migration_bot
     security_bot
     automation_bot
+    security_policy_bot
     admin_bot
     suggested_reviewers_bot
     service_account
diff --git a/app/views/admin/application_settings/_realtime.html.haml b/app/views/admin/application_settings/_realtime.html.haml
index 6a7ec05d206..2b8b023baea 100644
--- a/app/views/admin/application_settings/_realtime.html.haml
+++ b/app/views/admin/application_settings/_realtime.html.haml
@@ -1,4 +1,4 @@
-= form_for @application_setting, url: preferences_admin_application_settings_path(anchor: 'js-realtime-settings'), html: { class: 'fieldset-form' } do |f|
+= gitlab_ui_form_for @application_setting, url: preferences_admin_application_settings_path(anchor: 'js-realtime-settings'), html: { class: 'fieldset-form' } do |f|
   = form_errors(@application_setting)
 
   %fieldset
@@ -8,4 +8,4 @@
       .form-text.text-muted
         = _('Multiplier to apply to polling intervals. Decimal values are supported. Defaults to 1.')
 
-  = f.submit _('Save changes'), class: "gl-button btn btn-confirm"
+  = f.submit _('Save changes'), pajamas_button: true
diff --git a/app/views/devise/confirmations/new.html.haml b/app/views/devise/confirmations/new.html.haml
index d3bd1d58d21..4b586b2f580 100644
--- a/app/views/devise/confirmations/new.html.haml
+++ b/app/views/devise/confirmations/new.html.haml
@@ -1,7 +1,7 @@
 = render 'devise/shared/tab_single', tab_title: 'Resend confirmation instructions'
 .login-box.gl-p-5
   .login-body
-    = form_for(resource, as: resource_name, url: confirmation_path(resource_name), html: { method: :post, class: 'gl-show-field-errors' }) do |f|
+    = gitlab_ui_form_for(resource, as: resource_name, url: confirmation_path(resource_name), html: { method: :post, class: 'gl-show-field-errors' }) do |f|
       .devise-errors
         = render "devise/shared/error_messages", resource: resource
       .form-group
@@ -13,7 +13,8 @@
         = recaptcha_tags nonce: content_security_policy_nonce
 
       .gl-mt-5
-        = f.submit _("Resend"), class: 'gl-button btn btn-confirm'
+        = render Pajamas::ButtonComponent.new(block: true, type: :submit, variant: :confirm) do
+          = _("Resend")
 
 .clearfix.prepend-top-20
   = render 'devise/shared/sign_in_link'
diff --git a/app/views/projects/feature_flags/index.html.haml b/app/views/projects/feature_flags/index.html.haml
index 53fe30422ca..a6eaeacc61f 100644
--- a/app/views/projects/feature_flags/index.html.haml
+++ b/app/views/projects/feature_flags/index.html.haml
@@ -6,7 +6,7 @@
   "error-state-svg-path" => image_path('illustrations/feature_flag.svg'),
   "feature-flags-help-page-path" => help_page_path("operations/feature_flags"),
   "feature-flags-client-libraries-help-page-path" => help_page_path("operations/feature_flags", anchor: "choose-a-client-library"),
-  "feature-flags-client-example-help-page-path" => help_page_path("operations/feature_flags", anchor: "golang-application-example"),
+  "feature-flags-client-example-help-page-path" => help_page_path("operations/feature_flags", anchor: "go-application-example"),
   "feature-flags-limit-exceeded" => @project.actual_limits.exceeded?(:project_feature_flags, @project.operations_feature_flags.count),
   "feature-flags-limit" => @project.actual_limits.project_feature_flags,
   "unleash-api-url" => (unleash_api_url(@project) if can?(current_user, :admin_feature_flag, @project)),
diff --git a/app/views/projects/pages/_pages_settings.html.haml b/app/views/projects/pages/_pages_settings.html.haml
index e60cdf754da..11e105d349d 100644
--- a/app/views/projects/pages/_pages_settings.html.haml
+++ b/app/views/projects/pages/_pages_settings.html.haml
@@ -27,4 +27,4 @@
           = s_("GitLabPages|When enabled, a unique domain is generated to access pages.").html_safe
 
   .gl-mt-3
-    = f.submit s_('GitLabPages|Save changes'), class: 'btn btn-confirm gl-button'
+    = f.submit s_('GitLabPages|Save changes'), pajamas_button: true
diff --git a/app/views/registrations/welcome/show.html.haml b/app/views/registrations/welcome/show.html.haml
index f4e9a597fe2..2796f0c0a7e 100644
--- a/app/views/registrations/welcome/show.html.haml
+++ b/app/views/registrations/welcome/show.html.haml
@@ -38,4 +38,5 @@
                 - if partial_exists? "registrations/welcome/button"
                   = render "registrations/welcome/button"
                 - else
-                  = f.submit _('Get started!'), class: 'btn-confirm gl-button btn btn-block gl-mb-0 gl-p-3', data: { qa_selector: 'get_started_button' }
+                  = render Pajamas::ButtonComponent.new(block: true, type: :submit, variant: :confirm, button_options: { class: 'gl-mb-0', data: { qa_selector: 'get_started_button' }}) do
+                    = _('Get started!')
diff --git a/config/feature_flags/development/cache_client_with_metrics.yml b/config/feature_flags/development/cache_client_with_metrics.yml
deleted file mode 100644
index 433b9729df4..00000000000
--- a/config/feature_flags/development/cache_client_with_metrics.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: cache_client_with_metrics
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/111210
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/392622
-milestone: '15.10'
-type: development
-group: group::source code
-default_enabled: false
diff --git a/db/post_migrate/20230118144623_schedule_migration_for_remediation.rb b/db/post_migrate/20230118144623_schedule_migration_for_remediation.rb
index af9b7d65a55..ed95ecfaad3 100644
--- a/db/post_migrate/20230118144623_schedule_migration_for_remediation.rb
+++ b/db/post_migrate/20230118144623_schedule_migration_for_remediation.rb
@@ -9,17 +9,10 @@ class ScheduleMigrationForRemediation < Gitlab::Database::Migration[2.1]
   BATCH_SIZE = 5000
 
   def up
-    queue_batched_background_migration(
-      MIGRATION,
-      :vulnerability_occurrences,
-      :id,
-      job_interval: DELAY_INTERVAL,
-      batch_size: BATCH_SIZE,
-      sub_batch_size: SUB_BATCH_SIZE
-    )
+    # no-op as described in https://docs.gitlab.com/ee/development/database/batched_background_migrations.html
   end
 
   def down
-    delete_batched_background_migration(MIGRATION, :vulnerability_occurrences, :id, [])
+    # no-op as described in https://docs.gitlab.com/ee/development/database/batched_background_migrations.html
   end
 end
diff --git a/db/post_migrate/20230214181633_finalize_ci_build_needs_big_int_conversion.rb b/db/post_migrate/20230214181633_finalize_ci_build_needs_big_int_conversion.rb
index 1ac7b447457..63b6148df6b 100644
--- a/db/post_migrate/20230214181633_finalize_ci_build_needs_big_int_conversion.rb
+++ b/db/post_migrate/20230214181633_finalize_ci_build_needs_big_int_conversion.rb
@@ -8,6 +8,8 @@ class FinalizeCiBuildNeedsBigIntConversion < Gitlab::Database::Migration[2.1]
   TABLE_NAME = 'ci_build_needs'
 
   def up
+    return unless should_run?
+
     ensure_batched_background_migration_is_finished(
       job_class_name: 'CopyColumnUsingBackgroundMigrationJob',
       table_name: TABLE_NAME,
@@ -17,4 +19,10 @@ class FinalizeCiBuildNeedsBigIntConversion < Gitlab::Database::Migration[2.1]
   end
 
   def down; end
+
+  private
+
+  def should_run?
+    !Gitlab.jh? && (Gitlab.com? || Gitlab.dev_or_test_env?)
+  end
 end
diff --git a/db/post_migrate/20230220102212_swap_columns_ci_build_needs_big_int_conversion.rb b/db/post_migrate/20230220102212_swap_columns_ci_build_needs_big_int_conversion.rb
new file mode 100644
index 00000000000..de98847fad4
--- /dev/null
+++ b/db/post_migrate/20230220102212_swap_columns_ci_build_needs_big_int_conversion.rb
@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+class SwapColumnsCiBuildNeedsBigIntConversion < Gitlab::Database::Migration[2.1]
+  disable_ddl_transaction!
+
+  TABLE_NAME = 'ci_build_needs'
+
+  def up
+    return unless should_run?
+
+    swap
+  end
+
+  def down
+    return unless should_run?
+
+    swap
+  end
+
+  private
+
+  def should_run?
+    !Gitlab.jh? && (Gitlab.com? || Gitlab.dev_or_test_env?)
+  end
+
+  def swap
+    add_concurrent_index TABLE_NAME, :id_convert_to_bigint, unique: true, name:
+      'index_ci_build_needs_on_id_convert_to_bigint'
+
+    with_lock_retries(raise_on_exhaustion: true) do
+      execute "LOCK TABLE #{TABLE_NAME} IN ACCESS EXCLUSIVE MODE"
+
+      id_name = quote_column_name(:id)
+      temp_name = quote_column_name('id_tmp')
+      id_convert_to_bigint_name = quote_column_name(:id_convert_to_bigint)
+
+      execute "ALTER TABLE #{TABLE_NAME} RENAME COLUMN #{id_name} TO #{temp_name}"
+      execute "ALTER TABLE #{TABLE_NAME} RENAME COLUMN #{id_convert_to_bigint_name} TO #{id_name}"
+      execute "ALTER TABLE #{TABLE_NAME} RENAME COLUMN #{temp_name} TO #{id_convert_to_bigint_name}"
+
+      function_name = Gitlab::Database::UnidirectionalCopyTrigger.on_table(
+        TABLE_NAME, connection: Ci::ApplicationRecord.connection
+      ).name(
+        :id, :id_convert_to_bigint
+      )
+      execute "ALTER FUNCTION #{quote_table_name(function_name)} RESET ALL"
+
+      execute "ALTER SEQUENCE ci_build_needs_id_seq OWNED BY #{TABLE_NAME}.id"
+      change_column_default TABLE_NAME, :id, -> { "nextval('ci_build_needs_id_seq'::regclass)" }
+      change_column_default TABLE_NAME, :id_convert_to_bigint, 0
+
+      execute "ALTER TABLE #{TABLE_NAME} DROP CONSTRAINT ci_build_needs_pkey CASCADE"
+      rename_index TABLE_NAME, 'index_ci_build_needs_on_id_convert_to_bigint', 'ci_build_needs_pkey'
+      execute "ALTER TABLE #{TABLE_NAME} ADD CONSTRAINT ci_build_needs_pkey PRIMARY KEY USING INDEX ci_build_needs_pkey"
+    end
+  end
+end
diff --git a/db/post_migrate/20230309071242_delete_security_policy_bot_users.rb b/db/post_migrate/20230309071242_delete_security_policy_bot_users.rb
new file mode 100644
index 00000000000..0a9ace2574c
--- /dev/null
+++ b/db/post_migrate/20230309071242_delete_security_policy_bot_users.rb
@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+class DeleteSecurityPolicyBotUsers < Gitlab::Database::Migration[2.1]
+  restrict_gitlab_migration gitlab_schema: :gitlab_main
+
+  class User < MigrationRecord
+    self.table_name = 'users'
+
+    enum user_type: { security_policy_bot: 10 }
+  end
+
+  def up
+    User.where(user_type: :security_policy_bot).delete_all
+  end
+
+  def down
+    # no-op
+
+    # Deleted records can't be restored
+  end
+end
diff --git a/db/post_migrate/20230313150531_reschedule_migration_for_remediation.rb b/db/post_migrate/20230313150531_reschedule_migration_for_remediation.rb
new file mode 100644
index 00000000000..ebb6e53341f
--- /dev/null
+++ b/db/post_migrate/20230313150531_reschedule_migration_for_remediation.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+# rubocop: disable BackgroundMigration/MissingDictionaryFile
+
+class RescheduleMigrationForRemediation < Gitlab::Database::Migration[2.1]
+  MIGRATION = 'MigrateRemediationsForVulnerabilityFindings'
+  DELAY_INTERVAL = 2.minutes
+  SUB_BATCH_SIZE = 500
+  BATCH_SIZE = 5000
+
+  disable_ddl_transaction!
+
+  restrict_gitlab_migration gitlab_schema: :gitlab_main
+
+  def up
+    delete_batched_background_migration(MIGRATION, :vulnerability_occurrences, :id, [])
+
+    queue_batched_background_migration(
+      MIGRATION,
+      :vulnerability_occurrences,
+      :id,
+      job_interval: DELAY_INTERVAL,
+      batch_size: BATCH_SIZE,
+      sub_batch_size: SUB_BATCH_SIZE
+    )
+  end
+
+  def down
+    delete_batched_background_migration(MIGRATION, :vulnerability_occurrences, :id, [])
+  end
+end
+# rubocop: enable BackgroundMigration/MissingDictionaryFile
diff --git a/db/schema_migrations/20230220102212 b/db/schema_migrations/20230220102212
new file mode 100644
index 00000000000..a4432c7b517
--- /dev/null
+++ b/db/schema_migrations/20230220102212
@@ -0,0 +1 @@
+7df50689f7e9311ee8e5bd2513f4361be0fceef3962344d2d16bf511132c7a33
\ No newline at end of file
diff --git a/db/schema_migrations/20230309071242 b/db/schema_migrations/20230309071242
new file mode 100644
index 00000000000..dd29a8006b1
--- /dev/null
+++ b/db/schema_migrations/20230309071242
@@ -0,0 +1 @@
+094eb5044e841050288c7362cc58c1b63ce4a349fe49a4c5ebee6b83a05feb56
\ No newline at end of file
diff --git a/db/schema_migrations/20230313150531 b/db/schema_migrations/20230313150531
new file mode 100644
index 00000000000..94625561f6b
--- /dev/null
+++ b/db/schema_migrations/20230313150531
@@ -0,0 +1 @@
+e2f19bbc322127e439fffc4c1e2718288538aa6cb2d50a5248f12470b1c9491e
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index 49f713c691d..64b05803829 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -12896,13 +12896,13 @@ CREATE SEQUENCE chat_teams_id_seq
 ALTER SEQUENCE chat_teams_id_seq OWNED BY chat_teams.id;
 
 CREATE TABLE ci_build_needs (
-    id integer NOT NULL,
+    id_convert_to_bigint integer DEFAULT 0 NOT NULL,
     name text NOT NULL,
     artifacts boolean DEFAULT true NOT NULL,
     optional boolean DEFAULT false NOT NULL,
     build_id bigint NOT NULL,
     partition_id bigint DEFAULT 100 NOT NULL,
-    id_convert_to_bigint bigint DEFAULT 0 NOT NULL
+    id bigint NOT NULL
 );
 
 CREATE SEQUENCE ci_build_needs_id_seq
diff --git a/doc/.vale/gitlab/CodeblockFences.yml b/doc/.vale/gitlab/CodeblockFences.yml
index 9d5efe7f60a..27159f7e72e 100644
--- a/doc/.vale/gitlab/CodeblockFences.yml
+++ b/doc/.vale/gitlab/CodeblockFences.yml
@@ -5,9 +5,9 @@
 #
 # For a list of all options, see https://vale.sh/docs/topics/styles/
 extends: existence
-message: "Instead of '%s' for the code block, use yaml, ruby, plaintext, markdown, javascript, shell, golang, python, dockerfile, or typescript."
+message: "Instead of '%s' for the code block, use yaml, ruby, plaintext, markdown, javascript, shell, go, python, dockerfile, or typescript."
 link: https://docs.gitlab.com/ee/development/documentation/styleguide/index.html#code-blocks
 level: error
 scope: raw
 raw:
-  - '\`\`\`(yml|rb|text|md|bash|sh\n|js\n|go\n|py\n|docker\n|ts)'
+  - '\`\`\`(yml|rb|text|md|bash|sh\n|js\n|golang\n|py\n|docker\n|ts)'
diff --git a/doc/.vale/gitlab/Substitutions.yml b/doc/.vale/gitlab/Substitutions.yml
index 675abc6ef6d..225e4e74880 100644
--- a/doc/.vale/gitlab/Substitutions.yml
+++ b/doc/.vale/gitlab/Substitutions.yml
@@ -23,6 +23,7 @@ swap:
   params: parameters
   pg: PostgreSQL
   'postgres$': PostgreSQL
+  golang: Go
   raketask: Rake task
   raketasks: Rake tasks
   rspec: RSpec
diff --git a/doc/administration/gitaly/troubleshooting.md b/doc/administration/gitaly/troubleshooting.md
index 52d307790be..596348a3177 100644
--- a/doc/administration/gitaly/troubleshooting.md
+++ b/doc/administration/gitaly/troubleshooting.md
@@ -720,7 +720,7 @@ This error occurs when `praefect['database_port']` or `praefect['database_direct
 
 ## Profiling Gitaly
 
-Gitaly exposes several of the Golang built-in performance profiling tools on the Prometheus listen port. For example, if Prometheus is listening
+Gitaly exposes several of the Go built-in performance profiling tools on the Prometheus listen port. For example, if Prometheus is listening
 on port `9236` of the GitLab server:
 
 - Get a list of running `goroutines` and their backtraces:
diff --git a/doc/administration/pages/index.md b/doc/administration/pages/index.md
index 609862dba83..efeb19a8d5e 100644
--- a/doc/administration/pages/index.md
+++ b/doc/administration/pages/index.md
@@ -863,7 +863,7 @@ Incorrect configuration of these values may result in intermittent
 or persistent errors, or the Pages Daemon serving old content.
 
 NOTE:
-Expiry, interval and timeout flags use [Golang's duration formatting](https://pkg.go.dev/time#ParseDuration).
+Expiry, interval and timeout flags use [Go duration formatting](https://pkg.go.dev/time#ParseDuration).
 A duration string is a possibly signed sequence of decimal numbers,
 each with optional fraction and a unit suffix, such as `300ms`, `1.5h` or `2h45m`.
 Valid time units are `ns`, `us` (or `µs`), `ms`, `s`, `m`, `h`.
diff --git a/doc/api/license.md b/doc/api/license.md
index ca9d9cf386d..39da6af30d4 100644
--- a/doc/api/license.md
+++ b/doc/api/license.md
@@ -233,3 +233,35 @@ Returns:
 - `204 No Content` if the license is successfully deleted.
 - `403 Forbidden` if the current user in not permitted to delete the license.
 - `404 Not Found` if the license to delete could not be found.
+
+## Trigger recalculation of billable users
+
+```plaintext
+PUT /license/:id/refresh_billable_users
+```
+
+| Attribute | Type | Required | Description |
+| --------- | ---- | -------- | ----------- |
+| `id` | integer | yes | ID of the GitLab license. |
+
+```shell
+curl --request PUT --header "PRIVATE-TOKEN: <your_access_token>" "https://gitlab.example.com/api/v4/license/:id/refresh_billable_users"
+```
+
+Example response:
+
+```json
+{
+  "success": true
+}
+```
+
+Returns:
+
+- `202 Accepted` if the request to refresh billable users is successfully initiated.
+- `403 Forbidden` if the current user in not permitted to refresh billable users for the license.
+- `404 Not Found` if the license could not be found.
+
+| Attribute                    | Type          | Description                               |
+|:-----------------------------|:--------------|:------------------------------------------|
+| `success`                    | boolean       | Whether the request succeeded or not.     |
diff --git a/doc/architecture/blueprints/gitlab_observability_backend/metrics/index.md b/doc/architecture/blueprints/gitlab_observability_backend/metrics/index.md
index c5bd2440b0c..82d1596bc90 100644
--- a/doc/architecture/blueprints/gitlab_observability_backend/metrics/index.md
+++ b/doc/architecture/blueprints/gitlab_observability_backend/metrics/index.md
@@ -93,9 +93,9 @@ Additionally, since we intend to ingest data via Prometheus `remote_write` API,
 
 We also need to make sure to avoid writing a lot of small writes into Clickhouse, therefore it’d be prudent to batch data before writing it into Clickhouse.
 
-We must also make sure ingestion remains decoupled with `Storage` so as to reduce undue dependence on a given storage implementation. While we do intend to use Clickhouse as our backing storage for any foreseeable future, this ensures we do not tie ourselves in into Clickhouse too much should future business requirements warrant the usage of a different backend/technology. A good way to implement this in Golang would be our implementations adhering to a standard interface, the following for example:
+We must also make sure ingestion remains decoupled with `Storage` so as to reduce undue dependence on a given storage implementation. While we do intend to use Clickhouse as our backing storage for any foreseeable future, this ensures we do not tie ourselves in into Clickhouse too much should future business requirements warrant the usage of a different backend/technology. A good way to implement this in Go would be our implementations adhering to a standard interface, the following for example:
 
-```golang
+```go
 type Storage interface {
   Read(
     ctx context.Context,
diff --git a/doc/architecture/blueprints/object_storage/index.md b/doc/architecture/blueprints/object_storage/index.md
index 4a8eeaf86a9..6718705a7c8 100644
--- a/doc/architecture/blueprints/object_storage/index.md
+++ b/doc/architecture/blueprints/object_storage/index.md
@@ -53,7 +53,7 @@ This has led to increased complexity across the board, from development
   [we no longer recommend](../../../administration/nfs.md) to our
   users and is no longer in use on GitLab.com.
 - Understanding all the moving parts and the flow is extremely
-  complicated: we have CarrierWave, Fog, Golang S3/Azure SDKs, all
+  complicated: we have CarrierWave, Fog, Go S3/Azure SDKs, all
   being used, and that complicates testing as well.
 - Fog and CarrierWave are not maintained to the level of the native
   SDKs (for example, AWS S3 SDK), so we have to maintain or monkey
diff --git a/doc/architecture/blueprints/rate_limiting/index.md b/doc/architecture/blueprints/rate_limiting/index.md
index b466a54e922..92364040962 100644
--- a/doc/architecture/blueprints/rate_limiting/index.md
+++ b/doc/architecture/blueprints/rate_limiting/index.md
@@ -375,7 +375,7 @@ hierarchy. Choosing a proper solution will require a thoughtful research.
      - Implementing a separate Go library which uses the same backend (for example, Redis) for rate limiting.
 
 1. **SDK for Satellite Services (Owning Team)**
-   - Build Golang SDK.
+   - Build Go SDK.
    - Create examples showcasing usage of the new rate limits SDK.
 
 1. **Team fan out for Satellite Services (Stage Groups)**
diff --git a/doc/ci/examples/index.md b/doc/ci/examples/index.md
index 6738c55b6fa..b05c872d624 100644
--- a/doc/ci/examples/index.md
+++ b/doc/ci/examples/index.md
@@ -76,7 +76,7 @@ choose one of these templates:
 - [dotNET Core (`dotNET-Core.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/dotNET-Core.gitlab-ci.yml)
 - [Elixir (`Elixir.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Elixir.gitlab-ci.yml)
 - [Flutter (`Flutter.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Flutter.gitlab-ci.yml)
-- [Golang (`Go.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Go.gitlab-ci.yml)
+- [Go (`Go.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Go.gitlab-ci.yml)
 - [Gradle (`Gradle.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Gradle.gitlab-ci.yml)
 - [Grails (`Grails.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Grails.gitlab-ci.yml)
 - [iOS with fastlane (`iOS-Fastlane.gitlab-ci.yml`)](https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/iOS-Fastlane.gitlab-ci.yml)
diff --git a/doc/ci/testing/test_coverage_visualization.md b/doc/ci/testing/test_coverage_visualization.md
index a54b1f2a610..1b29304d1af 100644
--- a/doc/ci/testing/test_coverage_visualization.md
+++ b/doc/ci/testing/test_coverage_visualization.md
@@ -33,7 +33,7 @@ This format was originally developed for Java, but most coverage analysis framew
 for other languages have plugins to add support for it, like:
 
 - [simplecov-cobertura](https://rubygems.org/gems/simplecov-cobertura) (Ruby)
-- [gocover-cobertura](https://github.com/boumenot/gocover-cobertura) (Golang)
+- [gocover-cobertura](https://github.com/boumenot/gocover-cobertura) (Go)
 
 Other coverage analysis frameworks support the format out of the box, for example:
 
diff --git a/doc/development/backend/create_source_code_be/gitaly_touch_points.md b/doc/development/backend/create_source_code_be/gitaly_touch_points.md
index 6ee2c7f0e51..c689af2f150 100644
--- a/doc/development/backend/create_source_code_be/gitaly_touch_points.md
+++ b/doc/development/backend/create_source_code_be/gitaly_touch_points.md
@@ -8,7 +8,7 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 ## RPCs
 
-Gitaly is a wrapper around the `git` binary, running in a [Gitaly Cluster](../../../administration/gitaly/index.md). It provides managed access to the file system housing the `git` repositories, via Golang Remote Procedure Calls (RPCs). Other functions are access optimization, caching, and a form of pagination against the file system.
+Gitaly is a wrapper around the `git` binary, running in a [Gitaly Cluster](../../../administration/gitaly/index.md). It provides managed access to the file system housing the `git` repositories, using Go Remote Procedure Calls (RPCs). Other functions are access optimization, caching, and a form of pagination against the file system.
 
 The comprehensive [Beginner's guide to Gitaly contributions](https://gitlab.com/gitlab-org/gitaly/-/blob/master/doc/beginners_guide.md) is focused on making updates to Gitaly, and offers many insights into how to understand the Gitaly code.
 
diff --git a/doc/development/backend/create_source_code_be/index.md b/doc/development/backend/create_source_code_be/index.md
index ba0ed2a2867..d894a14b006 100644
--- a/doc/development/backend/create_source_code_be/index.md
+++ b/doc/development/backend/create_source_code_be/index.md
@@ -39,7 +39,7 @@ To learn about the reasoning behind our creation of `gitlab-sshd`, read the blog
 
 ### Gitaly touch points
 
-Gitaly is a Golang RPC service which handles all the `git` calls made by GitLab.
+Gitaly is a Go RPC service which handles all the `git` calls made by GitLab.
 GitLab is not exposed directly, and all traffic comes through Create: Source Code.
 For more information, read [Gitaly touch points](gitaly_touch_points.md).
 
diff --git a/doc/development/documentation/styleguide/word_list.md b/doc/development/documentation/styleguide/word_list.md
index d6096b32795..1ea95367d01 100644
--- a/doc/development/documentation/styleguide/word_list.md
+++ b/doc/development/documentation/styleguide/word_list.md
@@ -741,7 +741,7 @@ Do not use **limitations**. Use **known issues** instead.
 
 ## log in, log on
 
-Do not use **log in** or **log on**. Use [sign in](#sign-in) instead. If the user interface has **Log in**, you can use it.
+Do not use **log in** or **log on**. Use [sign in](#sign-in-sign-in) instead. If the user interface has **Log in**, you can use it.
 
 ## logged-in user, logged in user
 
@@ -1154,14 +1154,17 @@ Use **setup** as a noun, and **set up** as a verb. For example:
 - Your remote office setup is amazing.
 - To set up your remote office correctly, consider the ergonomics of your work area.
 
-## sign in
+## sign in, sign-in
 
-Use **sign in** or **sign in to**.
+Use **sign in** or **sign in to** as a verb to describe the action of signing in.
 
 Do not use **sign on** or **sign into**, or **log on**, **log in**, or **log into**.
 
 If the user interface has different words, use those.
 
+You can use **sign-in** as a noun or adjective. For example, **sign-in page** or
+**sign-in restrictions**.
+
 You can use **single sign-on**.
 
 ## sign up
diff --git a/doc/development/fips_compliance.md b/doc/development/fips_compliance.md
index 45668b6be0c..f0634107ba5 100644
--- a/doc/development/fips_compliance.md
+++ b/doc/development/fips_compliance.md
@@ -446,7 +446,7 @@ irb(main):001:0> require 'openssl'; OpenSSL.fips_mode
 
 ### Go
 
-Google maintains a [`dev.boringcrypto` branch](https://github.com/golang/go/tree/dev.boringcrypto) in the Golang compiler
+Google maintains a [`dev.boringcrypto` branch](https://github.com/golang/go/tree/dev.boringcrypto) in the Go compiler
 that makes it possible to statically link BoringSSL, a FIPS-validated module forked from OpenSSL.
 However, BoringSSL is not intended for public use.
 
diff --git a/doc/development/gitaly.md b/doc/development/gitaly.md
index e7d04a6677e..addab512f89 100644
--- a/doc/development/gitaly.md
+++ b/doc/development/gitaly.md
@@ -257,13 +257,13 @@ Here are the steps to gate a new feature in Gitaly behind a feature flag.
 
 1. Create a package scoped flag name:
 
-   ```golang
+   ```go
    var findAllTagsFeatureFlag = "go-find-all-tags"
    ```
 
 1. Create a switch in the code using the `featureflag` package:
 
-   ```golang
+   ```go
    if featureflag.IsEnabled(ctx, findAllTagsFeatureFlag) {
      // go implementation
    } else {
@@ -273,7 +273,7 @@ Here are the steps to gate a new feature in Gitaly behind a feature flag.
 
 1. Create Prometheus metrics:
 
-   ```golang
+   ```go
    var findAllTagsRequests = prometheus.NewCounterVec(
      prometheus.CounterOpts{
        Name: "gitaly_find_all_tags_requests_total",
@@ -297,7 +297,7 @@ Here are the steps to gate a new feature in Gitaly behind a feature flag.
 
 1. Set headers in tests:
 
-   ```golang
+   ```go
    import (
      "google.golang.org/grpc/metadata"
 
diff --git a/doc/development/gitlab_shell/index.md b/doc/development/gitlab_shell/index.md
index 9dc8d8e01c5..3a1af0fc9e9 100644
--- a/doc/development/gitlab_shell/index.md
+++ b/doc/development/gitlab_shell/index.md
@@ -21,8 +21,8 @@ Ruby to build and test, but not to run.
 GitLab Shell runs on `port 22` on an Omnibus installation. To use a regular SSH
 service, configure it on an alternative port.
 
-Download and install the current version of Go from [golang.org](https://go.dev/dl/).
-We follow the [Golang Release Policy](https://golang.org/doc/devel/release.html#policy)
+Download and install the [current version of Go](https://go.dev/dl/).
+We follow the [Go Release Policy](https://go.dev/doc/devel/release#policy)
 and support:
 
 - The current stable version.
diff --git a/doc/development/go_guide/go_upgrade.md b/doc/development/go_guide/go_upgrade.md
index b3ec0a15c37..f71fe7b8dac 100644
--- a/doc/development/go_guide/go_upgrade.md
+++ b/doc/development/go_guide/go_upgrade.md
@@ -26,7 +26,7 @@ by Distribution:
 
 ## Supporting multiple Go versions
 
-Individual Golang projects need to support multiple Go versions because:
+Individual Go projects need to support multiple Go versions because:
 
 - When a new version of Go is released, we should start integrating it into the CI pipelines to verify compatibility with the new compiler.
 - We must support the [official Omnibus GitLab Go version](#updating-go-version), which may be behind the latest minor release.
diff --git a/doc/development/go_guide/index.md b/doc/development/go_guide/index.md
index b1e37ddbde8..6092a05afff 100644
--- a/doc/development/go_guide/index.md
+++ b/doc/development/go_guide/index.md
@@ -216,7 +216,7 @@ When comparing expected and actual values in tests, use
 and others to improve readability when comparing structs, errors,
 large portions of text, or JSON documents:
 
-```golang
+```go
 type TestData struct {
     // ...
 }
@@ -291,7 +291,7 @@ easier to debug.
 
 For example:
 
-```golang
+```go
 // Wrap the error
 return nil, fmt.Errorf("get cache %s: %w", f.Name, err)
 
@@ -462,7 +462,7 @@ allocations.
 
 **Don't:**
 
-```golang
+```go
 var s2 []string
 for _, val := range s1 {
     s2 = append(s2, val)
@@ -471,7 +471,7 @@ for _, val := range s1 {
 
 **Do:**
 
-```golang
+```go
 s2 := make([]string, 0, len(s1))
 for _, val := range s1 {
     s2 = append(s2, val)
@@ -494,7 +494,7 @@ If the scanner report is small, less than 35 lines, then feel free to [inline th
 
 The [go-cmp](https://github.com/google/go-cmp) package should be used when comparing large structs in tests. It makes it possible to output a specific diff where the two structs differ, rather than seeing the whole of both structs printed out in the test logs. Here is a small example:
 
-```golang
+```go
 package main
 
 import (
diff --git a/doc/development/secure_coding_guidelines.md b/doc/development/secure_coding_guidelines.md
index d41f1d76994..4f644dd018e 100644
--- a/doc/development/secure_coding_guidelines.md
+++ b/doc/development/secure_coding_guidelines.md
@@ -542,11 +542,11 @@ print(p.join('log', '/etc/passwd', ''))
 # renders the path to "/etc/passwd", which is not what we expect!
 ```
 
-#### Golang
+#### Go
 
-Golang has similar behavior with [`path.Clean`](https://pkg.go.dev/path#example-Clean). Remember that with many file systems, using `../../../../` traverses up to the root directory. Any remaining `../` are ignored. This example may give an attacker access to `/etc/passwd`:
+Go has similar behavior with [`path.Clean`](https://pkg.go.dev/path#example-Clean). Remember that with many file systems, using `../../../../` traverses up to the root directory. Any remaining `../` are ignored. This example may give an attacker access to `/etc/passwd`:
 
-```golang
+```go
 path.Clean("/../../etc/passwd")
 // renders the path to "etc/passwd"; the file path is relative to whatever the current directory is
 path.Clean("../../etc/passwd")
@@ -601,7 +601,7 @@ Go has built-in protections that usually prevent an attacker from successfully i
 
 Consider the following example:
 
-```golang
+```go
 package main
 
 import (
@@ -620,7 +620,7 @@ This echoes `"1; cat /etc/passwd"`.
 
 **Do not** use `sh`, as it bypasses internal protections:
 
-```golang
+```go
 out, _ = exec.Command("sh", "-c", "echo 1 | cat /etc/passwd").Output()
 ```
 
@@ -646,15 +646,15 @@ And the following cipher suites (according to the [RFC 8446](https://datatracker
 - `TLS_AES_128_GCM_SHA256`
 - `TLS_AES_256_GCM_SHA384`
 
-*Note*: **Golang** does [not support](https://github.com/golang/go/blob/go1.17/src/crypto/tls/cipher_suites.go#L676) all cipher suites with TLS 1.3.
+*Note*: **Go** does [not support](https://github.com/golang/go/blob/go1.17/src/crypto/tls/cipher_suites.go#L676) all cipher suites with TLS 1.3.
 
 ##### Implementation examples
 
 ##### TLS 1.3
 
-For TLS 1.3, **Golang** only supports [3 cipher suites](https://github.com/golang/go/blob/go1.17/src/crypto/tls/cipher_suites.go#L676), as such we only need to set the TLS version:
+For TLS 1.3, **Go** only supports [3 cipher suites](https://github.com/golang/go/blob/go1.17/src/crypto/tls/cipher_suites.go#L676), as such we only need to set the TLS version:
 
-```golang
+```go
 cfg := &tls.Config{
     MinVersion: tls.VersionTLS13,
 }
@@ -678,9 +678,9 @@ response = GitLab::HTTP.perform_request(Net::HTTP::Get, 'https://gitlab.com', ss
 
 ##### TLS 1.2
 
-**Golang** does support multiple cipher suites that we do not want to use with TLS 1.2. We need to explicitly list authorized ciphers:
+**Go** does support multiple cipher suites that we do not want to use with TLS 1.2. We need to explicitly list authorized ciphers:
 
-```golang
+```go
 func secureCipherSuites() []uint16 {
   return []uint16{
     tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
@@ -692,7 +692,7 @@ func secureCipherSuites() []uint16 {
 
 And then use `secureCipherSuites()` in `tls.Config`:
 
-```golang
+```go
 tls.Config{
   (...),
   CipherSuites: secureCipherSuites(),
@@ -920,7 +920,7 @@ end
 
 #### Go
 
-```golang
+```go
 // unzip INSECURELY extracts source zip file to destination.
 func unzip(src, dest string) error {
   r, err := zip.OpenReader(src)
@@ -1016,7 +1016,7 @@ end
 
 You are encouraged to use the secure archive utilities provided by [LabSec](https://gitlab.com/gitlab-com/gl-security/appsec/labsec) which will handle Zip Slip and other types of vulnerabilities for you. The LabSec utilities are also context aware which makes it possible to cancel or timeout extractions:
 
-```golang
+```go
 package main
 
 import "gitlab-com/gl-security/appsec/labsec/archive/zip"
@@ -1041,7 +1041,7 @@ func main() {
 
 In case the LabSec utilities do not fit your needs, here is an example for extracting a zip file with protection against Zip Slip attacks:
 
-```golang
+```go
 // unzip extracts source zip file to destination with protection against Zip Slip attacks.
 func unzip(src, dest string) error {
   r, err := zip.OpenReader(src)
@@ -1118,7 +1118,7 @@ end
 
 #### Go
 
-```golang
+```go
 // printZipContents INSECURELY prints contents of files in a zip file.
 func printZipContents(src string) error {
   r, err := zip.OpenReader(src)
@@ -1186,7 +1186,7 @@ You are encouraged to use the secure archive utilities provided by [LabSec](http
 
 In case the LabSec utilities do not fit your needs, here is an example for extracting a zip file with protection against symlink attacks:
 
-```golang
+```go
 // printZipContents prints contents of files in a zip file with protection against symlink attacks.
 func printZipContents(src string) error {
   r, err := zip.OpenReader(src)
diff --git a/doc/development/uploads/working_with_uploads.md b/doc/development/uploads/working_with_uploads.md
index 6955f9c31cd..5575297ad6b 100644
--- a/doc/development/uploads/working_with_uploads.md
+++ b/doc/development/uploads/working_with_uploads.md
@@ -95,7 +95,7 @@ They consist of:
 
 Example:
 
-```golang
+```go
 u.route("PUT", apiProjectPattern+`packages/nuget/`, mimeMultipartUploader),
 ```
 
diff --git a/doc/integration/advanced_search/elasticsearch.md b/doc/integration/advanced_search/elasticsearch.md
index 0b97bfd945a..389c79a281c 100644
--- a/doc/integration/advanced_search/elasticsearch.md
+++ b/doc/integration/advanced_search/elasticsearch.md
@@ -227,8 +227,8 @@ The following Elasticsearch settings are available:
 | `AWS Secret Access Key`                               | The AWS secret access key. |
 | `Maximum file size indexed`                           | See [the explanation in instance limits.](../../administration/instance_limits.md#maximum-file-size-indexed). |
 | `Maximum field length`                                | See [the explanation in instance limits.](../../administration/instance_limits.md#maximum-field-length). |
-| `Maximum bulk request size (MiB)` | Used by the GitLab Ruby and Golang-based indexer processes. This setting indicates how much data must be collected (and stored in memory) in a given indexing process before submitting the payload to the Elasticsearch Bulk API. For the GitLab Golang-based indexer, you should use this setting with `Bulk request concurrency`. `Maximum bulk request size (MiB)` must accommodate the resource constraints of both the Elasticsearch hosts and the hosts running the GitLab Golang-based indexer from either the `gitlab-rake` command or the Sidekiq tasks. |
-| `Bulk request concurrency`                            | The Bulk request concurrency indicates how many of the GitLab Golang-based indexer processes (or threads) can run in parallel to collect data to subsequently submit to the Elasticsearch Bulk API. This increases indexing performance, but fills the Elasticsearch bulk requests queue faster. This setting should be used together with the Maximum bulk request size setting (see above) and needs to accommodate the resource constraints of both the Elasticsearch hosts and the hosts running the GitLab Golang-based indexer either from the `gitlab-rake` command or the Sidekiq tasks. |
+| `Maximum bulk request size (MiB)` | Used by the GitLab Ruby and Go-based indexer processes. This setting indicates how much data must be collected (and stored in memory) in a given indexing process before submitting the payload to the Elasticsearch Bulk API. For the GitLab Go-based indexer, you should use this setting with `Bulk request concurrency`. `Maximum bulk request size (MiB)` must accommodate the resource constraints of both the Elasticsearch hosts and the hosts running the GitLab Go-based indexer from either the `gitlab-rake` command or the Sidekiq tasks. |
+| `Bulk request concurrency`                            | The Bulk request concurrency indicates how many of the GitLab Go-based indexer processes (or threads) can run in parallel to collect data to subsequently submit to the Elasticsearch Bulk API. This increases indexing performance, but fills the Elasticsearch bulk requests queue faster. This setting should be used together with the Maximum bulk request size setting (see above) and needs to accommodate the resource constraints of both the Elasticsearch hosts and the hosts running the GitLab Go-based indexer either from the `gitlab-rake` command or the Sidekiq tasks. |
 | `Client request timeout` | Elasticsearch HTTP client request timeout value in seconds. `0` means using the system default timeout value, which depends on the libraries that GitLab application is built upon. |
 
 WARNING:
diff --git a/doc/operations/feature_flags.md b/doc/operations/feature_flags.md
index 8c7033f318d..968649e94b2 100644
--- a/doc/operations/feature_flags.md
+++ b/doc/operations/feature_flags.md
@@ -297,11 +297,11 @@ For API content, see:
 - [Feature flags API](../api/feature_flags.md)
 - [Feature flag user lists API](../api/feature_flag_user_lists.md)
 
-### Golang application example
+### Go application example
 
-Here's an example of how to integrate feature flags in a Golang application:
+Here's an example of how to integrate feature flags in a Go application:
 
-```golang
+```go
 package main
 
 import (
diff --git a/doc/user/application_security/coverage_fuzzing/index.md b/doc/user/application_security/coverage_fuzzing/index.md
index eb00764f002..4731e09474c 100644
--- a/doc/user/application_security/coverage_fuzzing/index.md
+++ b/doc/user/application_security/coverage_fuzzing/index.md
@@ -40,7 +40,7 @@ You can use the following fuzzing engines to test the specified languages.
 | Language                                    | Fuzzing Engine                                                                                       | Example                                                                                                                         |
 |---------------------------------------------|------------------------------------------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------|
 | C/C++                                       | [libFuzzer](https://llvm.org/docs/LibFuzzer.html)                                                    | [c-cpp-example](https://gitlab.com/gitlab-org/security-products/demos/coverage-fuzzing/c-cpp-fuzzing-example)                   |
-| GoLang                                      | [go-fuzz (libFuzzer support)](https://github.com/dvyukov/go-fuzz)                                    | [go-fuzzing-example](https://gitlab.com/gitlab-org/security-products/demos/coverage-fuzzing/go-fuzzing-example)                 |
+| Go                                          | [go-fuzz (libFuzzer support)](https://github.com/dvyukov/go-fuzz)                                    | [go-fuzzing-example](https://gitlab.com/gitlab-org/security-products/demos/coverage-fuzzing/go-fuzzing-example)                 |
 | Swift                                       | [libFuzzer](https://github.com/apple/swift/blob/master/docs/libFuzzerIntegration.md)                 | [swift-fuzzing-example](https://gitlab.com/gitlab-org/security-products/demos/coverage-fuzzing/swift-fuzzing-example)           |
 | Rust                                        | [cargo-fuzz (libFuzzer support)](https://github.com/rust-fuzz/cargo-fuzz)                            | [rust-fuzzing-example](https://gitlab.com/gitlab-org/security-products/demos/coverage-fuzzing/rust-fuzzing-example)             |
 | Java                                        | [Javafuzz](https://gitlab.com/gitlab-org/security-products/analyzers/fuzzers/javafuzz) (recommended) | [javafuzz-fuzzing-example](https://gitlab.com/gitlab-org/security-products/demos/coverage-fuzzing/javafuzz-fuzzing-example)     |
diff --git a/doc/user/packages/container_registry/reduce_container_registry_storage.md b/doc/user/packages/container_registry/reduce_container_registry_storage.md
index 7a991d384ac..9419451fd5d 100644
--- a/doc/user/packages/container_registry/reduce_container_registry_storage.md
+++ b/doc/user/packages/container_registry/reduce_container_registry_storage.md
@@ -281,7 +281,7 @@ Here are some other options you can use to reduce the Container Registry storage
 
 If you see this error message, check the regex patterns to ensure they are valid.
 
-GitLab uses [RE2 syntax](https://github.com/google/re2/wiki/Syntax) for regular expressions in the cleanup policy. You can test them with the [regex101 regex tester](https://regex101.com/) using the Golang flavor.
+GitLab uses [RE2 syntax](https://github.com/google/re2/wiki/Syntax) for regular expressions in the cleanup policy. You can test them with the [regex101 regex tester](https://regex101.com/) using the `Golang` flavor.
 View some common [regex pattern examples](#regex-pattern-examples).
 
 ### The cleanup policy doesn't delete any tags
diff --git a/doc/user/packages/go_proxy/index.md b/doc/user/packages/go_proxy/index.md
index 1a089cd82be..f0e10d73d08 100644
--- a/doc/user/packages/go_proxy/index.md
+++ b/doc/user/packages/go_proxy/index.md
@@ -74,7 +74,7 @@ go env -w GOPROXY='https://gitlab.example.com/api/v4/projects/1234/packages/go,h
 With this configuration, Go fetches dependencies in this order:
 
 1. Go attempts to fetch from the project-specific Go proxy.
-1. Go attempts to fetch from [proxy.golang.org](https://proxy.golang.org).
+1. Go attempts to fetch from [`proxy.golang.org`](https://proxy.golang.org).
 1. Go fetches directly with version control system operations (like `git clone`,
    `svn checkout`, and so on).
 
diff --git a/doc/user/profile/img/saved_replies_dropdown_v15_10.png b/doc/user/profile/img/saved_replies_dropdown_v15_10.png
new file mode 100644
index 0000000000000000000000000000000000000000..50313f71f4aeb7a9ae24038f3ef2bf560f9f12ce
GIT binary patch
literal 23623
zcmZ^~1yEhjvNwve@r?%8;O=f42<{Nv-QC^Y-Q6L$LkJMuCAhmoaOd$q=iKk!ci;D>
zs%vI?`qwhk(^ae1S`i9z;z;ng@L*tINRkqwN?>4+!C+wEr~t@M4n}dt^k)ZUCM+uq
z238-3@M-}4IR|%A5(k0(n8ZH@1A|zwP*HbQmzCi$va?|@Ft#%^VQ{yx|C9m)<8$Zv
z9NL&T8xXtOSlc@Bxbu_#OM>Tf{12Ovl=xpF&Q|=S>aq&NB6f}@#2gGv3{0c~@WjN#
ze2&JZJW8V9{saG<@spZ6JKOUxGP=3BF}SfZ*g2XpGIMitGcvI-vary9O3*ub*g6}y
z)7v_c{aeX@=@B(?GIF%Aceb#zCH_aRfuWs?Ge0TmKZgEK`?sGa?iT-T$=2yVVSNV3
z_|FO>GXoRj{|)ABVfz0A`)B3fuz$t%Z*zSADC1GEa5u457qzf4v32@%O@Nt;jfL-D
zcK$z0|Ly6&p{h<Mjv{t8pGao`Wg|zEPYvdF&i?`b&&B@@{FhCQ|F+4_&h<Y{{*RUa
zf&3>19wieeJ8PGJ_E6Q<!dc+c)BhX$f1@=18z#W{Uzq>N{NDie{~O?cGXFO~-qGT7
z7YzP!On~`6PW?~bf8_ZX|2g^pkqQ4!vwv|v^GpDqkMaNHtN?s%X_D7x8pGL3XgGm^
zA)x<5;9!~A*q@gKOhHCP?BnC(`Ln&gKRi6WzrFA5?C$RFy}!S|Jiooaf1Lk)j;cEV
z3tV}AdVG6*dwP1>-QC~b-hF<4xxat7y?^y6*?E3?VvAaRdVCrg8Gn0w{j~P-^7{Vv
zvADSW@&3UUx$IT8^YZ-k`uft{Gt$~Q^fhed=H~Y3<YIJml09hh_V&&$e|v5J{^at>
zI&BKfV|i?JvZUwu6Y+5WbaC<b@!|3M>g@93GO6hR%y0Sm>0x7I>+jX|+1dHQ{^7*L
z^y|y};lbg@$NSCo&FSgc{oVb`+sDMj)W_RLWJJvQ`Nhu8UTtmt`r7)=_RiJi)#=Hp
zUH;bc^2+SYY*=XI$?@sJpT(N$+K%?l-roN4@yY)F0qeBM>%Z4?v$KT-#YTqa$4AEv
z^^L!JdVhBJ?C<TDmX;3=3|W}l3=It@CZ=R&=0r!wb#->f#wNtaC$+V<XQXFURo0}Y
zW&{U?7Z;U|43BQCZ#+G|<Yeb<ZEZ`4%f7vS<mDB-e|$JOy1BS`=<AuJB&U^^SI*D<
zF*CKAoSe3{w&x6*IyyYMzkk-zF>GmRo1UKW_X`RP2w7ZM^z`ttvvuO)6qJ=wn%}%}
zuy+|9olsTL5CKVEUH#S6)Z5<LU0q#sck^;{8!$5)xPN+8SJVD8zaYRb%FM*=>*KGe
zph`!>KKSRdxvAyg?BVkE#oNp8>hk7$^ju?O^Y-yQn9r(d@`9JAFF7g0(!v}8F4gGB
z7&HV<V);b>%vng$^z7Q-z~WW+ycG;olKO!oiI5pEuT@{4posESFvszU<;#_w8;8ur
z_?nIG@son~o%8d*ULO7w-jknY`r-MV&37uRY3ugxsp97@l<VZ`>IRt2IGE`unBH*j
z)JfaO@yGl7<iynT^OJ|WFPQS+-<#*Nt0&i@E%vbaZ;2af>6^Pd2Vg>d4-XIYG3#JH
zYe0|5=H|7u&Xd=d*YeKA=B9SAfMwjURVw!h@ozn$h108>2in>_kqrm_ksq-i&mYh4
z&#zD5&Y?J9V8mdOqQWZfD`(m|GI-0F0;%KL39|L*^EK?O4Jnh5Dbqg+rDQEmf$Vpl
zWQ`P}zu~YE>WqH9F6k5d|B~XT@W;%!It{_blFkBBHb*9Z7bUGEC08PRPA*ejZ6&s8
zPFV|E5A!*ZzKs4j$Ke%>FU@+9BwTfyT=Tl%KI}YPvqA%d_<yx%DMJW|zz_0805lw6
z1J{?azgPalJ=ouW>*{Zb3}LnRYp;AP8W4!j^YdeIj%;A04(;db{oah9uaJ<C{SnvS
ziOru+UGX7YD84Uo=y5#@U5^R)dzZ-_E=*jv;8M{~g<TwszWU0PT*j}rRf7C)??>Wd
zS-*!U<-M)bPfF)4Y3|U7yGjI<D^QX%N7vA5M_~SD-lP-fK2x+Pk4TrIyJ!ZFj+*Q#
z>+Id9T1cRLD+wL<V_0^G&F49+cNRS9qD`46o%@C<g)zz5N~^K&^sUHoBAuO4by`r>
z+L(q`rCO^uT8TjUgtV$;Lf&Mx!FEKISFJNz|7Q>D;FNQgDy<cK<Y>4_a}f*Ye0!1{
zZGzdoF>MO^*JU^*=zxmvW<k<9muxgP3N%*B)@)^Yqvs5GqbJpV71i$=VTUxOlQDsO
zJxVI?+5?w)6@t7)k7IfAuN;?5O=trA4!2JIo0xmkk^WosTV~37Z-;w&2)J>tFGG5M
z1z@7%B0^VK`9EIzN6Mgk5PV-x^(-dANP95RfcOIDOON~FlzzH0eVgSG4gkOgO!5^1
z2m}G~Z~EV(K+Z5ZaqFvC9vBi(pBt`(kcJ?sibke!d1UEv>zz23dwJy|(W!pZo^Byt
z=9sXgM{t=aQDTtAnf^L>LcA$7JvZ`0nQ^=Ehc?bY%9&erHR2E|d?X>LTt<{cGeTj6
zSeW`p>X{g&s7U*g*ywdV{S>(azwnNP`??S@Wsp+5Dl8t1ym;8l^oXc^WN4pH@J9UW
z?N~K(xNi_SEP*<O=*Z7mf|Eqiy-{kR;qL+r(_<0^XlStvT0zypzv#$wK-@738psW-
zr^&_Hk8FjF@wtejm<jpnjt)Z^Iv5I4Chi@Y!|#39Uuhxo&1;#z25fRaeXv2m9;MpE
z((^kdADqy7K8{14w$<ofFRM`&IEaMQvcotyHXD9aMqz67OKJ7$mxs`~G?HWLcG<Gw
zYdc(jj0#U=|JiqpQA<XC=9%gmJGom(3y+K4V*L<+Zr}#*7M03RS>ne`D{%Jd7xwvB
zX~fJD73{c178BCpR;Cb%KuXJ!wzS4?X+}`gc2xSCbL0#E+Sf)G#su35!uk;MictNL
z7+MNNrPn_|z&yvliB<<I1j5Z0pcL}5-iP_+xfC5GiF`ZGP@Z`=6mpWq@S_8D4RHd7
z1J-V9Gyt7%Y=#XBZBZQSNQ>f?f{${6(6HS_-Q|fF9&2*dXSJ#-L02teX<y%x2}_+h
z1OJ-MMw5_*V_*#~Luk%ztK9bQ;I2dMa!EXDA#~hKe~^OXNZB^}28f-@&MK<JJpHsf
z2*=4=fI<H~QdR>$87Y+^eKefUTvlSK1b4;Tsrdjl5a`Q}p;bm<oOe+L8N_*!lNYCV
zO!ck?%T>JaZS@LmaWO2d{qIuw8hi-%QU{N(#qsy5@h%5*(qgdl^aFNB5~PS+|DGoy
ziQzsTbX6hP{x+~@oVX=(_i32HD_nn?PLg5Pps@N_FHk||+Nf4nz@m(^1FZ=cgInX3
zZ-V{KeX;Ae(@dm=l+1ScKYwqs3zarzw7O%!IE&JRI>7MT;q`S0S=wbq>JyY_3q<>w
z&oo7*OHL|N5HphJp*OxhIyvTZF-~taC~s;1-fdfdbZHJtT>@UX^yV}T=bJROsBhw3
zB<SN$YRLqtTTdJFXjx~kRLu-mV&bPlkL?t$qIGGoQNM=!QBcy#1)+^NTwP4WY?ro?
zr;L@{w_~qA3@&A3W6^Fkgc&@xaGt<hq67!4P7`X@1f`10!w@_0IvS8()SXvoHb-Jn
z%+4a6WiRhi6$2rx)D?1Z!hS~FP2!ffZOkDOxyk~#8&FzG?cFtMxnu0dZwTsixS}bt
zFENoc%CDN?iSAn#rRf_0_z)w;1^yl82tvvs2X5KM_)Tr#6_x0uY^vHRUpuM1D20mN
z5=RBRwPQoL4lg?5Ad$N#B`bK8Zblp=P?9B7tcpoj<|37KNFgJ1RTkAc>s(k!(Mp-u
zkdaz*CieygJo2NIz%-q+#J_2F-8{}VtWxK|K_hSEv0hOaeWV+oZMVcY5ymZg<ZO0L
z9uPKBiRGn4s11bIa@Tt>WdP-WO=ySiQ&xeCGV{r>G)9l~B65++laBK^vmiEB(oX{d
zoK%_ge<5_QHrf{D*4HwB-}+*~g-Ph2<Ey~Hx7^;-$HC&My^;x*@#?=pi$)mb9)fbS
z-LCZ2xOdDBEK17yfd}Hyk<%3VVM0Xg)ChGlj6#0fe~;asZs~(WMba@o#QoRNl}ax`
zH8W*})N<r`Ur2)&C?t0*YQ@k6o!_P{R+Y`VDbLmp%)V7BKECC5>B~#l8SNuaHwy)h
zrgLPFZH(I-Nr@MEpsAZ3F%U3u?Y-4Ovc6%B{%Ux|CaFbJ^jjMnUBNDS?}V0U+<wbg
z(~1a5$B3bt)wFG}y7`atIMA7ItqYOE^jF*6v|f%Nf=r*yYs;iLiN2lx^D?0}=40jR
z1yN9xd{Z4O{DGFNe%opAA1?O{q2|9om45=Cg%cHs>{|!B`F($?a7SK7yOJ&^$>-zM
z*h~^%YPQ~UlgrU3WdNz-#wZG>7RE8*kM*s}U=QhSJCw_HuqZi=;kB@_Lk=WZtGA_;
z1Nl9tV6xpbZK%hGot5k+!n5c65z|heMM=^c<w=8G=<IXvGdE<th__ai89WQF(lG`5
z+=QDeUF*t5%ax)fFW^Fcd#ml`Q+neRv+gf1oxi<N4UP&B<w~qpkr_gl6W-$OA%D1x
zC~tH`?um0@qve`?J51-NpX2PK+m;D`c!q$pYB>i}%dk4kHYlx+59Tnnry7+JaRI7H
zOOJQCQcsT8yWbIAS%G~4SiR<CN&h6)-Ze0AZ_${V?@{Y9tD9~^yAt#M8NaS^ZCn~k
zlvd+qp1*s)^uvU{t_%J2JdwPBy{+!$_338+&CHcmO{PBK4_sGs?Ik~@_0>dM<@VQa
zJYHg)m$hO+Ir)O*4k{8sPK|ikukTK%yjDhucLcC*sYSejzpq*SdQ=jH0EgO^0e&s7
z-rQK-p5GlW()wZ)X4ZX7D~m##_0h1bGyX0%b8L(BXtZU%l-viaV{SfM1Oz1@j}VaL
z8jl@ZSP$ExjDPcZ(Ot0JHAr(XpCCzlLZwgC&7g}$IU4fRCR^&a9W?N61BTD*qn#vu
zeKqDyRybq1AMQ5M)l-k%LF8U;FAKyK<oG>aL?D2@+6`IStNDWIzhA#Q<2Ccq;KnX!
z^Ht-u8B2L*2df3cWrg1RNQB56H->Fzx<Nd(KE4}D%R7`fFlSo-8XS%*AG_eUzi@Rw
zXbBLWz)Ch8IU|wan64Pg>nDWlHDNjB6Mn!po7+-pV}$3nihZVmwg}m|`lq(4N^kMf
zM@3c5MsU*`zIAgj_JD|SQ-<UFSTtCDH>Ff-wKbof6Ygd^Knt!UTOWTrpElq6VmP3#
zpNZnOO=m@~P9$suId<R>{@1s1q7PhT*%LkhAzu%l|NEP&dM0#`ZC`>ZRue+|a7iX4
z%w!|G_vmavTHJzUUvLVdvS3w}SN31*Oq?@Zc}V-8O2D1Uj|N(EB|{(iMJ>$5-4~wJ
zc-X(j-d}m{*83MNn3#eqU<;as+g}Es_a@)%LUJyh{&F(*f7@0rjj5-H-X9dv(f^G|
z=lkjs6L9pm9;J>qlY+PlcCr-?EYAjwdzLoVPzSU&6YX|PPRz%50bZ4<Wbm-Oqlvh6
z83ojUNR{*u=5hZLunj%_M`FWVfFiiv&l%Uv$ie>btAYmaNC8RFvjQ6WNq)RmB%6pD
zhFVNP5lJ`hNPkf<`Y-Zf1SgoHL7Ji9uYI0Ws*!Mi&5pi50kM7&CH81#`taQ$p=|uj
z;<=!@l>SN@F+Ax?iWc#8$mNO@<Yj1LEspC&OY7$BQ@2TSrEeh9NjcXmDm?XdBP0Ai
zNcfZr<?WIi+qYZw`^BFi1^;!F7L#AStKw%j(T1DKjlmT~adAsJtDOhAkY_}BF>rcT
zB1A02$*vsS*q+Cs3FYV1Fj}_)e6P(&otkbA<3?T(r!9V?G3*`Rz~*R?g6Va<T4O93
zJ%oH1M-RvXKWu?p+tPwZt+A7jU{5B>bPF`KQO}rVa7$i|hR!g=>DaSDXg~UX;%tdA
zk*7_3W0rGbgq7o7AUM5<9q2G=m8*@cl#!2gtj1*BzW$x*GXG;`=GNW-Y+|=RxJ2uZ
zSR;BTEO(}7@gmQ&befiJ&Shuq@Or5RzqC1w{9e|^?}G&V*f`wq)GPsqctucrE*CG)
zFUzAgI41kOoJS`0jZ*F3XwP4)yTO=O9cW{xBFNd6>twr(8j*UVCro*BsVoQxcn|9A
zf$r$6ZQ7$VVZ}DtBxS(v4;Wr{d7Br(Z6=5V>#AQN_liY#=%u?pW4rRHW_sO?feCuM
z*18@X=I~MbLQA+OzcW21Y^JlXeR2IZY{NiS2y?oSVqro^R9=w3ScQwLfbQ-){juBL
zO0}{SX0(2hy*Wh+q@q*~Tdb!TrbaDqSE{MxiQeB?<e&pyCT>^krW=XkfT`|XT8Eyl
zS43-wZnTkxi8_$0M&zhOKbEE_Mka5gv2GZSsfe`M&E)wU(;5ghF`{|k^wy00n~dwp
z|EzMkqv>09TG^C?oLvg)i?&Upi8uBK3vD<Zz^dUoDGg5}iQ+q*^ows36B8x3`>7qr
z8+i^F5R3YD@_Jog>-Hn)Q*Iflxp@8RdSU7#fWEDMb#8TO-fNcO!s#9<;ns|Ns4*cy
zceitU+uOZVcKUJz)W5b@I#$oW^SJMte#gFY81&I2WxJ%eSz9M!OcHsqVJyaQOHD>5
zNZn|Szzf_NZD^B9L0I^0#B~MrC&$3CU1PmUCrgrIXT+E#cIM~t>}j=MqqM6jD-vr*
zP0><A7x%GD4;MB&S}o3N|Him^A(~CVX!&AG^P@@}X8r*&+u0^FHjOPKmd!RYjnY^8
z>HHuGMdGD^5o+uqOR8qV3qXhXsNlrBIUidt4e#$4e3WD-bC(IAQTL4KPOQ2^zLSPy
zby$hizEFi>n0k+cA|SM}>0-tT<J%>v@vtn5@V7&JI^0|I&@XPJmxLOl&2l$~X$Bi;
z7nHd~E(^VArn-C<PtG)H%2&iH-<gd|+((0@WOyL*osjh)#`Rr!P_chHE+zVT9qoMS
zZLgZVkDMBby*Bn&yv|h4xX#zsX;(==wRS=E{LA`|>%D1d-m@C<U5MS6FnjJ2(aEJX
zxa1r*g@~*pKJq<s#21-bW!9d(hOc>>dx&05L;e=tur<l=Jg47tgR3%$_&DoMFNeO#
zuToI1p62m66tnQ=C#JU3S0$j5CD??@0_%GZIy4En6h?3|l_KzyYZjv<8y*;sCbsn@
zqTe$xeiHN&BBYQtF0&^s$ryuXM^%B)7q8g|6GmJ+5lySm!G|hr>aWfT^nGciIcEHL
zPF=X6jTMFvR`R1m>{q`cGU`p<B-hJeyC&;2m@GDKZ}y|e8{Lzq;#*G?OdHX@b><vX
zR!9t_OW#>*Flof_zV4B~F`<KobrNraT+ZT>ZDE2IGlsXVDyNgFccvS+nB?lA1F~Z;
zKnK$U1U~*6x!m>><ynaJ>@e+lG!EBgbKs$ui~%!vqKu$tyaQALm0;U(f+~_9Z_!Yx
z1<vddCd`l3-^0qfH*2V*SWCuGQww;p<MFX$@l$P}kBg$(izd@6nrSK%b7u3T>(lAR
zZjNi(JNum$4-bAQci<bK${}yA+el9twGSHZi+(Jsvubgr#&C?YSqp{t3x7kZmKnt7
z!xWbtrkjv&iYZ4#My!HIr~)@A9qYB7I*+d*kQ2POR=Q8maaGjzL5!{TtyMCZkH_z%
zC6p5(IWNpt!3hc!YqniS`xUKenQSFurNdHTo&-3#Yf3?fitfXL2T5TH4?Dgk$>skv
zr;mVr$WCfX{JtBn1mvIshzTpy*wB*Z4CN0J8*|#~D@zDV9P@?7E0!Q-$WbU6jX>Pu
z^Qe3SQUj=S`th1eZK+kT*vp<`P_10vsh|yt0;l^tAUol0`hK)ie<j|d`%DU&(BQ&+
zOX6Y`E8u7qHKRB^Nr@D@7y=x@c_#x+6pugC)_`z9Mqs>>hqU>Ekb6#G9Ru-KdRD(&
z@;$u5wBxEyX$a85$(1s20Wvt}{0_2!W4TzzkKgX6Ez<g*J?-76GliKfgA~05Q9Wz`
zIecG-|JBQLfP$X`aNCl-wxGk9I=f8zMf${U>{cNg+F)7JiNWrd0uI@{Ju${97zpZ=
zg$ubR9@(Fx3?}1DgMeUP!i#ga?#j4b;%nr<ROFW^wS;kI;>MPNCt}A!4)L(T41N+f
zXx*zyZ$&I<M6pvF67cz^yspwwGlqoDCXTnEjM3yLw29*3y{K0T%E*D;H|_2!mK}q=
zzxiO=Q#~kN^J}tfCanj7f7pr%Q2<9WIL$d|_1dyPUCsXK5K(yH;YGq=K1A6Fn-^w=
zOa^y`AXXY2?<K!Yr%aW--W(5q?oig~Bj>CD`QGERYa1$jobfL=U-s7s*C!}UzQ9rH
z$?_P2%tljd`JTiEm>*X-d}bc7kH;UU5GBS?yeSR(QfZ4)8~OE8pFV~&ydTF)ZmQ%9
zs!S0Yh@G+gfdNa)kSo!w;pRw+^Ql#XD?wd$0e98$sy3N&^RZ-IW<!YWY~at7Z+pHY
zaP3YW^ko6M<0gxf=E>=Ggv1yHW|qdBzDwIqfz2UF?vL|*4vE3F&%B%W<4|ZCW$G!9
zq|xg5X5X2cc|_?0QifBz55xk$_#1T{P}oS~cNXXT(sV}&dizys?~K?5>ZQNdRn<EC
z#w4wc3PWE1w!sii(?MbJN6gus)kPXj(btD-gJz2@>W>Vz1k7+GLZ72+Hrb^@lp}sN
zCJt66*QChkS7tn)ZN$LtSj3<^zq6bPdE6J=p`Nc;voXID*Nzak>D24&T{tKixN?6}
zSq$=GL6Q-Nx<L_a?ET5#mV)I$LLD$CtKoN5w6T$qQP*}lyP#9gdO^t^WUo4ShkU@%
z`^C{+RoY(KiV!sZYy1Y!H}CMt*RP0g6t$x|qa8EmFp^_`o(+KM#Q!Qhw{H3I1`WVD
zdLQ;lT>CLMs4B%~dYG(dciC>CKYZK5uJI5PvA8BxhC9*6I`JV{awhzUv{z0DZcEWY
zJLS|Ll+hvY?8$VL<ZZx{M3O64I*^Y0T>5o?$hH}~p+tG4-S%N9FF#VsFjv6cl#Kp>
z$Y2_iIy6ohW?anBB~2adKHHF^0J<<izrpw$F?~rf_F-Fv0wM&aBF!`^I(?Zs+XLW8
zP&!o;s(^CXY=^I&NkNJNU214XYP5attkWasXG(sUeSEK!u8iFg^G=aFh=B|wtShzJ
zkrd4A%F<P+T;nnFMRj-}8KM9thg=a}X>d9;De>zA!@JaMMqF6LuAYaY65*F8eNCQx
zpAGAlFQ@AvS7P|emT^8ZsF<>yvk6Wne+hMjSIcV-Oy0&uqtYwN9fSPTZ8cHrw0<p>
z>N~TETWFPO@{$2!(%IBoA<`L^hDq>cCRh27w7jgfTi${lE`LABZF7c9htITmv>a`G
z;VpI5cFpU|Pb4bcZK9oa-Uktd-Ycv}SNbr|xj+~*EhA@US%u~vd9`t9Vd8l$b#QSM
z@22`P2)d!trvfG4ymf2sT!9Jq=O6&?A!t4UtvU6;x}gEJW}AZAts#-WNgDn0#-D~q
zaO$C5q0ptJA*M7$^OGE^8qPU9QQNh{sW@J1WS#a%A>N++ZpSQYCs$9h=>OXe8K9G?
z{j>vV+=326WY%txR6Z6?%|Jh2kdy^djPu3BhYv>7)^^d`W4}rjOn<t`$ddB!$-_V@
zXeMF8oM}lZ>T~G2vJ)v`hP!*JZXeLNoEAj#0q+wy`mUULp4NGWfb;S`WS1M)>*D!H
z0eG7KU?9tBki=voA`?HghKkL}DY}cG=?wSa=nKDei#3+nTe=HzvmIS<;zc+s+&)_G
zOg25UH^{lGQoJX-_r+ki2YV(0`a%cyU=`hoQYFu*2eW1xAeD4r%%-t+F0|bS%jLna
z_b!CUapngJ5MBr@ieB##`G8+pz_8ljDTT_-s!ZUr8W<mz;SnGx1}LDJr<7mCLkCGY
zKd?m;o*<0&mmt>fLt4K-{SZeaC({499ZFf^PZ^+5psBi7Fs0~&6vZD>jV<2F1kNpP
zUY3K63gfRY7N@@gX!bi96tyInFs#;GQj=4t#ZJjICkEhPw`)||oEwa{NLs<rt<St|
zd`}dCDwXA}!<g$OKVka&JC@0W2H~8|w_@>{An-~|=_XhfV~J&_+DMEEb}4*vsM5x|
zeXG9PL#rQ>&ybV9Cb2#P9($?lLXZ2a`V9`Pyns)QO}(^M+%nR0eBoKk!^R1%Re;N)
z+=o45L*LuA^sqJhJ^{kBpU@*F0xONc)L5@NMCmuobieYYqWI!9!Ju~3U&JbMBxrx>
z@o#DJdMPnE%{r%4pRguGXW4MdP)ql~m2|BfZw)dl=tyh`hb_uN3<dh&Jg-oBL~Ju}
zE3m~DC-4j=6RzN%Z?FFPmu(%lJh%+__KH^ecXJK2cu$AzhpSsR>7#P^BW<V3PCPzm
zi`pv}MxKxNuW-z@gy;HVBYvT<6YjfFgIwgg!Eg~2RxbkbEn5pD>frU-1;+3Db?(DK
zv)+!PDlbcj0l!VtAQw7e3F(CI-N=U}m(20bW}o&5yMG)*Tur5MnQmU|LeP29)kRPj
z!sdJtlaj&qc{iiR_qR<=lY>r{<6rAw9{B#aSWWNs2-a9F1H@VitE;aK6lmeP$rX^e
zP;k4}ycx4x`2Ah~bsMhd01F!J{Cmx8Zoj+H?x+zfeDLT4-47rm!4c~K<TA5<yRW#Q
zwG~5H41ym-!3jKwU-(F9);1=tqfw>=dF0hxnU^HE>e^QpGM7oiVjO5byK~p^K^{!2
z1IWo6JSZG>f-dmZAUKqN45E$*`yOB)KId#hjW{xJ2K$RXroWtcj(D|STxEDKCa<Qz
zl;w!BHA28lw}g$3)1DpPPaE;O$!ZsT-RQP6*>p;gsR8`6R4zz;CGlaXiHkv(p5PC8
zr#1n$_!QozDmT1eyF6JJ%--2pk!ku}bKsB9_o;-R4+dkr+(|=rZny-#>>2L8y}d2p
zS<UgUz3m;oxi5z`N&|{iPy}C5Q3zX8ht#EvM?}W71S5jYgcq*5t7hyFw)Jqw&ncpN
zqfoF9D>*wV6}osBpZLULznh0vgmpIGs5?X})uL^bQAZvtA$iLLStJ%ML&mW+C>m$O
zVfd*z1$8*Fm{YJv=<p<F7D*jR`cQ}u{n$6ZQU-`n^AAF0<lpK3(4S=IF}~CEKVqE-
z*C^%GjjGiyG_T@D>tv>^rY!dN$#~hK9XFGt9Ns;dB0R|$L)0hs6Yt*%_3sr&EWHod
zjyiF%Rl_nJf0Ri3)nrlBHWY3D)buEwfIxcQ!-*KQYo}<H|LgS<^EmB`DWETe9VTXI
z98Hj}@z~260d_fpz634ytc##Dp;B6R4378y?5XZ)ii_to%x=8AuH{`+RLy{sLa+W_
z8nB+O&uv3&g14%X!`Y)}<eGQh`|Ibjs?Wn_>0eor;wm-u8ZxJ*xNe(=5&(fiNU`gZ
z*tkrq^!61Yeyyfz1l~ErxOMWW>&E5D$Xra>j~L@g$kh;KIdb0d2tG%FdaBzb5A@RU
zRSFfyiDd+-T-58#gEIE50QvNqs!jyf74@#Vrfz8Cn^xY;x#7h?)jU7I!c87^OWcy+
zlzUpPF<V{pYP}%}$TR8;WhQ~oP|8*JEGWX71O3C`^3^a);)3gaY=mi4x_bVEeZ6_7
zGcz@8Z+i>;sTZDdtff#CZgB9cL-lVG*KEPTr$g*LVor-hgh&a9LVgJDr{W;=#RF%w
z8esQ(5;D8eCQ$xd#08^5Dc(^6x<ct?VcGBf3nT|eaN^~cox91&@yY0i#-5Dz<+q%}
z0~T(@B&WEfBAoait&A>WTBRL@ufbdCQje*yRJYTu94TAfKjaHJR|MAcLYdfiNsI#X
zQYh4>5T~pGY}_<c#`yuuEh&#@)R|dz+DAzD%Wgf=-?2e|NpoI;XHxR!8kXGNvQrWb
zH{aq~)P5Umpy!~M%xTWKI2^R1axfwzMQ}b<DC|vZnqEFcFl%-&=n7KiZu>yz4SV5|
z{5@&jT;>Ya3*VfdE9TPD;Uu%|y6c`%L*D-B4od)Et1NP;!M*41{j-rC-|mq22MR1t
z*04J%&UTf>QS^I+#MJ`a`M93!V6$j(Qjr)zfaoFEv7H9qvlriPU{BU(MRLU*{)rk9
z-5HJq8zCpx@o4ATM2|0F!423ulK=XJTdAOTEfXQCzRj*Z7x#H;G&P=G+^`^~)?=#H
zY^8l6(Z)w9Yfh<bcp(E|PbTprM#AtME<rHe4(`o2VsvHCTWi%@U#N2b)%%+6I4D8_
z?~>Xs3=KU3Gxf*0QdZ2kZ%@WTCuxGo7b4ehRmnfhe2CH1<L~vuiSA@h+%|DBero9H
zNmIX{YP6HIe)H)n(%06wxFAuhbv9TOcokwXx^MmqEikKtBY2u|VB-eDMPG#-I=vIE
zc}JH{qvMM$X$>=561dPKUFCcu`~XX6e1N)iv--Y-{9oS!guj3rcmN&8`o$%9e8GIG
z*5lY0=ZDc7Wv*o+EptOQbd#JKH|!N~xlJo3e>fY*z);AuS7UwE>V?I-PE3AT8|7oM
zAT4CUWGLeZrJ)Bgu)vfx(KcJpA~|+?H>Ts9EEq+cg^w{eIu<SKtBkJL7YoH611Z|S
zlrvkI%uqKgxy~4kcdSs$XJcH`6x<h`%NHZtU>-+wznJP0Oju2f7ycr+Kf{rxqs28@
z`18kSr?{oXS=o9S(n&&(J$UM8Y2B_`QI}mZUI6BXOfu)x#BCuUL`r{D!!G^Cwq@Rw
zfGpO_7p-CRxf=h^TNeCcqGEwmU7(4#sm&%6AcLh}P6u!u2-kj>0NTg#h_)b_l_elF
zO>8lCpv|$UxVz0vRkq|fTY<b(^Zo-IEtSl_-4**2=_k4msvw@w++}uN?lkRq1^fAf
z4mu|>f%v0*?Ke$oJRHwCrHX7h!{S6tM@LcUtdlrTs>iM5a&yFZ^McVScWTo@KE9&n
zU^M2WVwP^EmUO#5Pcs^~Jkl`jD4${u1En~7p_26dAV@v`BBQ-Y(<V8fE#f>ndoxgm
zpNt0Xe)Q~OQ6FwIHFRaylR4PjO-Nla1AC*UT?+``E@CPKkOrJrl0yai10nuHK#)K1
zUjzXH0RK%w001}%aqtErfcBt{Fi{H&2qFiWi)g86`vYm<`ZT}a{YF%klfR|A`;>|d
zv!8j`ivIvp;eP7u4C=0d1t(FV3+`{3LKgHysZ961I=bMUTdxaNm;v&1e7w}6wBX{c
zj|v`>sd=xTfA3+l+{Bv$zZk4;dY#HyPS#LWqMmU~qJ84597%C$)r@u4wWY7E2DY}?
zxowm>qq$K$R2P=cnVj<^(JAw@H}EFWC@Y=!=VT3^f6uf#4eIpMvVaIys0R{W`aG{c
z^n4wxG^w||lh&N&`Fy5LZQ85u5MuZ<0Naq`WkQaz+um-qZ7u!|jq8s&p1PmHQ5Jn`
z^{_C<`x)p4+Wq@qPQQd~fKUo**wJO2pC7Cds2mFLar0<IGxA$#DkawU&P)i9Vh$%r
zu~t)??yHFeAo<+9e+Zle>OVvrOan{OZ>0%N(lnMjP5uP%+vXL?K(2uY6u=8n?eU_S
zQoxHP+tr2n13mA6G~zJ~tFXvqe%Zs;#b0ivGW@?o2P-TCPbBPg>TD0WldolG?Ya0i
zq;Q5fAe7S@Sh<#y;@CCCO<_LGsUQbO<Jad+AP&eK@U-G(1AZ{P7;O|)>amu3Mk(_<
zRX9w^s1|5^3K9lKxAb((o_5?`IVumv<VPspv?pj5hDI1{(AJzcOQIs>hA6K=EfDg3
zm!F^8=9Xwmch=y=y?+i-`3xAkKxl?!B&mJ3h-20y1}>{7y;C$1#k6vH318<f!@_f%
zccno{)o7$1Y<ck8kl~AYy$K6TiZwa-XM!D(lk9~>y9GfNWu&S(;Tzsu99jE?h14R(
zUX(q{qJ$iHQSGrKl##XY9IAKqCL&Jv?dSXI(=-h+7D9l^=>QQ7j(`c%lgyETX-@g|
zk-4&<ajw~(jos_}r2I`+s4~RyRpEIDyPOBrnx-8WG?$6F4UUk{<80(z;h6uOmOAl1
zJ}nmze;YfE8Ruij!2N{?E|H863y=5QSXY1)Kif#vh0oA!T#|jp9f=q!SOEvfGilet
z+2mDQGMvs%f&Y`fr<8ZYB5wV}!ji{iIu2@Og4z~NtBu^7$t9Swd2T1$7_Oh^GXo0J
zLgTf%17-@ce2k3f@0+OEm^EKb#>jiEvrY>4;V5y2;&8uzi6}%1UPEiK4L$OjVXBF?
z2NW6nYnS#(_V(Ddc^dWW)^Z!nF{HkjehYlqxyb@YSVphPDXMy*a%RT=Ys<6T4;{PK
z*DZ8CXNr5z0bG{?1AQJ4WPv2~up@6Gbb(zWpRit7(ymJ#Z%2!qid#|D@&R*$XIj%b
z?)4?5W3l^}1&#@Tnm9Pg?KSYaH-`;YRy_5-nz?|@O=X)I(sa<(G{hj3lQ?)Z%%0NZ
zS{WmdM_8*Pj4^%BD}d*mTZBTMNc95c;)#+Tj6{V5VA3~hiJO0WBfFB8y^Dat4Gt>b
z0Ul(C3Bdpg)`Jx~q`|>K=A0zKVE?%upH~I^)8XzCU>_}d7mIMG4II%&gg!j&;tx?j
ze?L$;1|aT1;O*h%L)1w{L9e67%d-p)2oe*adaCxj6;R=}dAnosUJxM{T4M7)Y3$b$
z44^4}Xu0_5bQTZ&kKAK{ox}OBxPsB+Uj?u~b)(@5c1X0dI2PV^#TE8%FHnsv>oHS-
zG`M}N98F>a?Ca4NR4RPIf_yam%mCFo6P$l83vRG}U7suhpg`%r9RExVAn|7qpZ!0T
z6!@?HpDMbd1IT#h*!)7ox8G%{;v>s6<`|&v-BH+Vbr}vBJpGYHzV`NTcrzDp?9r9%
z-Ul8$ed-@S^X%EaN8rqrVh2*zafk?>edW)PZmK<dqJ;n48czTY&JZM|H;zm;IjfOW
z7_-?33YvvMX>L_sZIayjU=vrd*ka!wBkeNV)KmzZ=l-Dz%d0>x>dT~RpYO{#nc1MU
z2<mecea+1jGR$12%Kbu_@h0Xf3ifcHG05oT4(pV;)8s&=KRcGkv(N`0@)|WSC&q^y
z%c_4;`&#OYD||ldk_EtJkB`!Kf?gtTDa8)*x+dhb>gIGH9U*l&{(jTAozZogSuxut
zb(l$c71Qi}QvKc%*MCyz&y96r{ChH434>gfFx@4i%^L=X4cX!k-N%74LYty^WdJMA
zH(Lp0J1~-49=Za9Z`#{o>tYV^mTBW3Mwi~MXk#r*?->|kp0lEoG{Is=;E*umw1|Kl
zATcHYURY(CDja^;Pjn2hjb%teQXT@rU|Rs=21&?RDnR8t0R(z|z`nh~xDj+d$J&+I
zS^mz<7UA+bcS(F(J$+e%{Bc;l18SOjV?a+UCRf8uD;sCCIh5|6)N4Pe-sR?vPOOh+
z-08<vRy|H07vek&mTUMCP)UPxlg?fA*laD`cf?~A<5NuCP@4GjhkG2+B9>gcZRo(O
z@5jTUC|av@wWJqs&2}7o|2uZwiRkN}9~CFjO*D<0JRe#eYvioyZ7MF9Oj)H|K_k(s
zwz-+dTC8RVltWrFbx~E?E<O8_HL3Lm+jq64^Zkw4paMNlxEq8F7hBe3C)+nGR0{Sl
ze-G5DxJ>*+66A=pe+vdMfrh&5dz9Tx=l^mZpV5yO2q=0Z929XROa!;Kpu&-)Bi}H5
zy>`wh!BA3h&(E@{Gj4LzEWn~CP%CeCp=GOVI~TyAZxOhA*sJpj=P}^AnM&kg4{PcJ
zRNAkve4`#%VA>L!PdY&&P&%>!6?H>k(>#SvAg9%=nmA}IscyI3DaEp%?>bg2o&Wg&
z8P%wH!fn@++`bL7KN2j6yBN(Od02jRzKHixAeC`B(zKY*dh=C@n*0800#*UPqKl=}
z{2Mv1E@U<%Y@W*Hrp99u*P87HPQ^;6x9Cle-~g&m@->fmEw@l{w@X&Bdb)&DPSSdM
zLNXat$#q^ztD<)_cS1L_tVW8mGhePkWfy>m5H{bAQBFjyJntc|hCS`JbR>XU5J#m%
zv6R2;@W5@>g?*RUTAONr{w=UA#>K+S9})VT(m6`h=sW7ynx@zMj&3-zKXa#yB3F8S
z*NM&qts~TSErOkqH9fu+8I)PV0<=(@IteHV7&ojc>fdaQ?e1O34Nj78yOhs<$x<|K
zrB$s$S1ZozW8oPv)oR)x(_)A)2SYkqSG=mU62-%1VQ|1&;N0X8tj`yt%k5Bt9vS~Y
z+DswlwQlD-)p*O+$SNxymJ}M>4w(Fi-*k5?VP(%#6H!T)cEg#bO3}w=KT-IlUW$^5
zCYEAAL)*0{p7^5UZ}{Ad(!tK7a+-vZbf~vB-oIQcL#zzsQ6^4NX~2{v)7;~^#*5b?
z(eoXZydlIfmU6dr?Mg7ZMC9eiaTlqZV&muqIo`qImH8|*E@$4Ug`C6u48=*Is(h==
z;7}QD?J7ZxGqcoV+-@`A$;qskZv2M-LKAvv6uzl7F~NoJVBFIPaS-`edMxgHbY6Ix
z0l#;)`{%*20cZ;;f2*y0M~!0T6#K3ki(tv5FbJ<$TNh#<b)>AIaW0_I;QSRL!EkzZ
zdciz~x1e5xn{I}4O-Y$qeBf<mj)#z!Z?Isk*z}$IBb)hQI7Zo%sqwcFJfW+<iZ<lL
zHdqTCTjmDExb(h|*U_M(n=?+TA&*dioe_RE33?cQC}mW&*8mXy2NCd{*Dj2d#=D)m
zMWEtV-lga&{CK;gLb09emBGDzq@B0XV=fKiwP=0CgkJx<TWz~G(ja)=>on5i?o|$1
zib>p3nm*!3Myg2-{zj_QrsS0?bAUaXAT&re1Rp5uIj>+uWJ#lYIa7vW(a|>e{*4K=
zubORp;X>WE;XN~yE*RW~PH_zN4CaGH(q-@~mMbcghsUB=j~FYnvh%lM9=rj3aGY9~
z)#Qc~^3W~uGacrF*h|WeOyvQbHTi|y1kxEip4JN;r9qBa2)s;%o30WdrwE8jK#XH@
zE{+O9V3R_|Z;eqHgiQ2Yr%y0kyrjZSKwr>tPOR!Qi;)mzkyLrj5yR+sIqBdHn=4H!
zTNFaQqPBHEq)v%{4^+WOH{wQIvW7PZs^#V9vRd`)NBvi6@sD4f1!spLa<ym@@U_Lp
zE)Ii63DHR1;PqkOJn<iG4Jlm7{p!~&zQUBi`B#RcMT@fS9o!(sw7wtMaXdZD=|LzU
zcQMIpv$srYpqTsEVLdVD@3eWUOAScVkmR|haLt3ON8gd13M09MR%3e`3V;IqM%`;s
zv+Ps+P3n>IOv;V<R3%9A${Ks)sXx5{F=lNk*z$bL8ShNqv!4d`Bot@)LOuRRw0g<6
z62gTj)@!i~GTf0ZN@c*JQ2vsJE*A%+%7~1up0wggS9_zOp4l6LpYvNjXxdjEzmFpO
zHxs?mp=Z*!bpiH$%fi9<t|c<dIr|PN<K6%v`7anlI3kDEjXBA^r1q3_3gJT>+UYh*
zbCXK)_;c#U=>rO^P0l9yEMqg9#nq4=>lqyrjZWWg)&^DiO6u9hzlyIVSnl;)`kKyV
z#N5vfizd^#pwNB^eCO|<aBA~ad6(dec|~~YsY45Gm(&u9J)!d?D{%EAXv>E_5P&pi
z!H~Y582Z95@)(sklf&Y+0zM_%PS@)e=l*=Xw`{SbQhrYpo7F(jKt-TI*%K?bQzkS#
zHq_P7<krVx@15w{w{z8<WMiCq(Ury0MSveHP(`e>76I+V<OR#K<fC>E<<_@fq7lvc
zv*rfWZ0p-7;<Fb@-d2DqkI!nj!7I*T4wPSuHPof(<Fd!j7B|RnFD1D|{0({Y*1dE)
zO828JP7)oaOMdm$Dhoj!Y0xMSJcAJjN#5Z71jTfW+3ZMd+hm+><FwnHLrd!7RDQ54
z<Ou)ocn;TQLmdB_-x6<Y9!CRj?1v2Oq$iO~<3$kr?h?w)7OWLfWqArwS8+p^aR~Y^
zmPII3re6IEAjH>F7zl7iQX#BP?da$xeSl$<rUg28`D~<*#UE9gl1LiWbsg39)@GH8
z58<hdC>sf4APCLQS5G5%tbKC)>G6S=)y%t)0D4~izDX@*c30EttA1OSG?_)^s`wYc
zBab?~rqLKFySIseCle-d8cOL#Aq+o~3slr#c|XDrfneZW2Qid@(^D7L*UIx~jp*kE
zb?fx?9LbnyNu>CM?`KG;Cq)+%Y))KkUP9aI5#Y5U(bn4;7&r)aOepzwjVclJ3wJHe
zcTJx6dwIH7FM}s_0hPyH;a!HBxYSkb&sY+JT)5Q!esVtmBqvQIPzf#Eq%<P*&9_m9
z%Nz-AvkJP&WI#eoL8A?mP9#y2UnP;)ct7BH2uGm{Muu^J%E^(H{ehS&fk_Q4NJbhj
zrbxKb_H3fYtE9&qmXx+gGK*U%>X&a3>12o3v&c5d56_N7!bx#Ms}OD0RH9>NOq4pd
z(ZMImAbJSU6p;P(_nHxTrbOc#K(Q7Y)C^t*tC!``Y~vVNuoZ5o^Ef)jZsj>J9UrZj
zAqAy8#&2@Os%WFc<J7QdIV;;Z3$@&$V)+e}Ys6cj!NRw4(qdLR$);jyT{6v2UPfwB
z(ltAn@MFnP%?V*yci%7mLG>a1l7%F=93ABDeC~pUVx7QP9_Bs{^OIApPw_9MCqY7Z
z?ejcoaQPxM$=w-%`;4HcUqtVx%wNnN$Z<R|nm}M-0}3c}Z2QJKZ<OdPsny5U?(?{K
zNJL43se*z3=|X^{|I9*wg>n$vT7I3(W0Q2Ca2}4}VPZ|tJYL9jz~N2`tv|3Z7JQrW
zlIvQb_IqrEMH)1TC;?_)h(B|LXUQxcKe{=b;!$iNZ{%nx9xK!o%tpF!w+3LsodXD(
z&kFfRI}r4bNq{1N1pc!_{ha+T<|~}=FxkHy>z>$g87%%2N@gkt*|(XDg&W;r^m=?U
zL&Ao8ttg0!llTm>nrB}Q1m;2nBj{??G%MusA!1*%05f|rhkXcWM#OSDCZQni1JcW?
z9j>|U7R=TZh>zi7<O<pe`vggr5e)MGR#I~4qd-mK&;MqG@y*TikeVUzQR5BCEdCSX
z)2Hkpu90_ztpf_a%IRjlxh(1tbHHV&dP=_b(IWmWj#2(a#C>{QaiRpyM3=>%cEVa$
zkdUHN=XyLdxVY?Ic_F2QM_AJ`v1wevh9|ka5e%1yFMm*>=a07J1k}}6+I1yYw|SG9
z!`*eo`7w~hR&Jf8N?9vCZo;7et+acwB<tLpNF%P#C6qrJ8=JMna+PXLu7;E_3!;_d
zv681DdqeBt$dpTIVpbyxs42KSNqDJ|%UwJZdo?ZX%&JVfOx*5z^_XF$-11yN_kikT
zeoxMFSs<$$?3ZS5(2rk|YHLcObuiv^oH<jv2wOi&s-7hYAG^@_y#=8%4bx0YvNU+#
zcVA~&pYlg&nZd#_yC!tu^Jyy~IkRkZFWF6(J3j#1St;BvBwx2=v>7gofA2q>585HR
zfy>mw--zu(<`;dhWk&OJr=^yC-)LIL)98^iuz|B1WDKCrMu_dz0&}5#vId<jdGoEE
zLJf^SKR3X2aF}lxDaW6!tRoJ9b+PtYUOK{NL9Di~<Ki|QnW1O(dtCiJ?|7aVh6raB
zHqR=vs66pQA_awerqPk0uy+o=6VU!jo#w;Auno8zsrE8p%^f<(&ci=zL<Xdlyzitl
zeOIJk3mVNq9%DD?18xM$L-mBxae!m@)~(q_gwzVzH>+=Q1JDEU;CEH0@kU(I#Mz7m
z_?VdJnwS9e?>S=|D5E0e(EYnx@RuCC-$Eppeu_CYikzPlUzx)_=yalIqsA(;Y~RBg
zW4y_1f!l;f@Oox2UhG)4C+S(`{IN*bbDqUCBN-6@fVYT~bZj6_?hAA<Z$KkCNEy43
zrfGnf;a|m-eb9ns$Jo4^aYx_28LDdpEI5|q;xjme(F(JH*fvVRgTS+4m|VZY54dw`
zV@g?t;1UxWOwgv6x4!J*2G!ZOgXgPLk+FdyOx&WLi-T0_)?pSZPMNxK@<qvl>uPas
z#CxWv*ly<+@n)t2*vZ8!Q=X>v@-Md`hX!s0G!BnPpQ3C9R*AoEVVYJ|5vB%tbt5J+
ztsr;fb$F-8F5v{*ySP^BwlV0eZox2Gg8YKp2U4E5hw0chk()T0Tw3XPOE!$84Sh^-
ziC6aYbTuPE(<uB-TgwD+Pa=PPm6u=&o8KAi=g}Az!EVD2LGKCcEM|czD;iLZ{9v+o
zXOMiL^bB7AZ+wnZhZ(rqTYD^_j`z)v2w!EX-L@q>q6*8=_1s;WuA;Is28gg@Fkija
zQIW&(7l@pBeXE8M&5j?uz7#FPkf6AQT*I=Got7+wO*m)WBM13<POGIt5Jz4~nA0}~
zpL_+Jwp2`9+X<VuwVlNtBXS*dn0B+1aR$<T@wBjf5wBR!>eM^8U5*Ah^fj#j2n)RQ
z3ulwMZt5U@dGuszfKKPxGkd0ws5{MQn$GE_l?3siS15zk_h#-(tXYH0khh;Ib6du~
z5ufZ5gWONBrKEGy2+2lP8&)ghA`j*X{j-PUorI*NpDwD1h{JXPHy?mB$S;H+VlWB2
z&R1naiDtuV63rO&UgN(NkxDeBY;~Bh&yGv0s^M{L8<LaFO^PNmw#V$$Ta;Y&{Du}(
z7*%O>bbfvWp$fdRR)r|hItCa?hN`!5xIAXgdJhoj%Qu)OC>2<bSR(9rAgp=EolszC
zyJk(T2kUt>B7!{Cm5Xjyo0q}K?nt3>Z-sj7F{5+fh=Q2hvtauZ&teyB6aXSf(`*vx
zx*9>Rgarsvt|2U*KB83Ja&i2GO=nGDYwI;39~1KQom)j*cN_>+G0?n5U<9B>M3Qr(
z4!37;>pxxe4kA#z=X9~R5ZI%OBFMq^mvP1$L4~olep>GWylI5G68FwOY3wR~KpFhl
zI?Q{2<Q*otdKdh-32`*t59j`P3sXX`EX$+u;%3k0+m**P@T@qwSSU&DmQRy-#tz@P
zNA`KE>99K*t1VV)u7J{P_I8&V`PexQb3{^twtQe<-#VjNvfGh70Z<3Wt~4HE2MY$(
zRKT}+T%2t-Ab|)Mg0Z!5kd&*~XE_<11AUFkez2kv>H`O1IG+zf@}UfB^FZ!BaMtfv
zOVvVtK)ew8I#IL|3}MvlD3q*7^M^W@iXT2|`GmsF(;|&Mq~p;8iwOBrN0wR`xFvY3
z29`kTghr#RgkoB>yko6AX^=uWOgZWb@#*{Lk8>o&Wjdbbdmaj4kXT^S%p|T+ZoP7=
zd5czWd%B6u;+K7ziSG;hJhVnFKc7rj%ze-)o+PI>Kb~vt)LB37hXh~qx*MY`Xk>RE
z^CG`{lAyK`ufu=oHg6~%hc@kp-u)5nUl9d@+NVV(Jy8+E|B2zSX9NRu`}Wh&gauu)
zveUZGC6+QwQYN$I7>>V$Uec(3-8Vkw*M>QWg;V?TCKt<u!mAmsbIv$(`l0JE`{(78
zyYJ=AYn~Hw7;H6%pwA&)1)uAHID?_S0BkK^6-}DZ=T`%j8M0WJHcHdMqm`{IyOrlQ
z^E+qOjvtf!*z^=MjF^{r6DgZbWsy@_cOlcKFAnp?fdf*s$8WCJy|zTBs^oT2eLpQL
zg`n?-TR@EP99Gb^U{#EYjGod3c|4Q;qo%78_m#gpVRoY$0*Cg`nDS;eJl!fCh*-7u
zcL%$#hedz~tN<?*%!%(i=8B5G@St=z5?K$S7-bh8nHIdvcS+=v-HwWm?NCb(`x*<P
z9>>4R9&SYO$;x`!P?eq?ouQIwX{x$`*HS@z3>6NAjrS)^^k>;tgm0nNg>6nmS_*Tz
zTH<Cht85#JbM~1Us-`}0yp)Wqh$%cOn-(YD@0c|T3$GAVZ|gFn+<ohzb&W4ZrVq#a
zL1rUUvQ`a)wf|25wHZq0wU19<04_{5&kb~)03OU57CNd?+I?f7erEB_Tq9=YYG=E2
z>?oTBQ6#L)&Imzh+YAJQHdsV1yz)v2!4mkF!t9jB1i=f~!dyVGLU0o~Q63&iZwffQ
z68&r&!r^-f2UObK-93I11s#Uk_9}M1mc+2=4aebdSHQYy1GhqPs3ZoR>u|cE;)EQQ
zi?s-n7zrt0bx2&;g^(ov-eQR?A;%eD^?nEE6s6@1=!LPdfG6P~)#x)kf7EntfXq^N
zezaimZtcW0sTpmZas1vhW_jAuV={z?G5PgBC@@Vy2zLY(@3roZ=O~o_LGo{>-{eOk
z((#M<Mg4O@t^9ecwB4ri{d#3To@8?pRZZQU>=e65xclMg{l&rh)461WgHM5{1mU7F
zFL&neHK_dS^~}D3W?UM1rmbG=z;`3J%d*j0TZ)2_R+P2xO+dITP}t`Ymqi{v_kOrV
zypDKzjY9NWgI+UMqW0d^H7E43kcJ;~A{0Q5xMst$m|<FTzqV}plINBnG}b)Mo781Z
zbd~EaKg!k`W=~~nZ~$hGD_nQKorjwsR0ZM;LerY7cS&-=xl+M##304AHi1W6(!;%J
zstAR7cpWP61ffsTzgk_h!x8mlxz>0%MP&Ix$wQ;Xtv64#Xzt3y%t(Q5VCrCY>%&uM
z8aRWzN5eD%Bq1y+LbKs;ib9CwRXHYl$^7NpAK68EZIT|Xtbsp}q)aS_Ru<;U9Vu~b
zVlGPvXcKp$Dz_Vu8)1#_NV>}lvQS2nGT95x4E?Pk^%&gs#LSt`4YP)`C|_Wna8{$4
zA|-(4YpCm{a%M2Qb>RRodH#g%Q6J4X-j;@Qk9v+Ig_W6GU6uObc9^z!m=){1TRiYO
zY-e=(I5!1<K_(5o0+zR^w8si9QJx<YmNT3_%x_ZExZ*vK7;3e6dfw39Homvy33*?g
z@c|6=a#99%$wb>O#S;*ct0n9ma)7Ic!|UM8i3T!W<yc&j-7KwA#Z(9f;mwD6bJS0D
z(vA)%Matv?9n#W%^yhDD!s4m>6pl~dN7rQ>yZ4eM51*mC`P_->?hYn|5)kge55`vP
zFG@`a^LO~dbam2Esg>^?AEPJ#7ujN^`hzyl&;QWH`-MAwV|sFBR^;#Wsnl{l{&1x#
z!7R%TRh~r(zOH8X@0iK%>zF?FZkCSD<bXyqP=jpLx1;kK%5i$U`q^FNqI&Suv8fW8
z_{>oJ2~JN;KffZMID*g`v*$!TeAEK_M?oRXDb@paq*H+U*2Szojy+iAmNU!%02S6r
zL_t&$;B!)0NREkft-9yEcEJxnXGuV)Q6@d%-V@a=%9o4kG;QwH>&o_4WGZP_{NhGN
z`fG8OAk=I_$c4~bM7!sUt@-4O_Zism1voBZvIISN%^GyL&EyF!ytIT~gt&f!Qn?|<
zVR1ylJ{1mV)8%x~9~T}|G0<3kFAv{MpGI!RS3U0*+iuj}Fub77-$VG>NGVH`$`C5m
zDdq`(MaGO&WN>#iA+*EnWp?j|hP4ZMz^Bt%%^+zabbg6C1C<Zn9IIz#-$;w@O$piT
z&Gsxt%-)74$C(2n2;p?N0$7Tu%$rU<R>u^t$=yJ~`TVgs6k9IFgMbx|B~xO0EOSnO
zj@Rq8Bq4MrMLIz^E$`n0V>yuf<|f)MG8vJMd5SHuzUc?c!l)z}La&3?%vtYu2%cDo
z6e0c69q{z>0Z$IC0Brn4_Jn$gw?;i|3%qh&CDOwF!g$cBNEm|#EpzwjyRPTDp&Z|l
z{{?PTrY}^Mw;U<c$=Oi`Vec1*+HQYwXdA+m3rGLYpPlzZsI{s1c>V4|h%d*Fs5MRB
z_hGRov+Bl_CTo1E8YM$bsC+nzb8R<p`pGDM>gq-ndBQX_PG3UxwHBnEzs?Xbb1rzI
zTOoL)byYM@)*j4Q56Td(VuhG<Y!y-z>V#))9%iTbiYh@K?zbxyh$lQDe)`jqL^wLF
zWA{cKyLSO-cv7q;Pe|f{$v{U%f9S0ZD_eZVGPNVDAWkAr#W78Y5KX36pn@V!tj0VL
zI2CMT)U!aEFs!G#nIvQ!P6pxFJbW}PxW^Qq{FyxiKoA;hsGEa}Lp1hO4YcVnc_$B*
zi@C^rmiIm!J&c1xqw@7a8N$iEzd`ulep2(1-(613T$&iT+dkB)#?03f2E%k()<mtL
z!+13lFN{~O&JFfKT|d%eSh$5!<4LmFvhnXn)7nOEPZ*9s*$;Cdgd8zu!94x>B3>aD
zJi5+&k0Q8?enC=g1UJ2$NN#XB>fkn)0IMWc!1b1R^=}e{J`OEEw#pEWep@bY)1<NE
z_Q*{Xbbrnuq&=`jIYErrzy~E!h}j_e(C>>ngQO{mynZ*aPL9nM5xfB!2l%moGwRO4
zycFRrF%v97(H-&0vJe}jESJ~3LO70+xjgwMklecuzfmLY?za>X6pz=|b_`wCqTs5r
zd5Sc!HhGDn7xlA0V2=!8Sy}G++rLU<`t4sH{tqBj?@D5(YP7zogiYOQ$Scl6+QRXY
z3ynIU^55)T`)?D;9sh<nSug0~Jm{TS?Ck0ML+Y3SVMCg$@^a2GG(0X*atQ(Kl4lbR
za)cZY6MUhliQ_a$FN!!Gfgl|m;%F#^s?|}Uh|;S>5J9?AgQx_E>PpMW_Y30wfX?jO
zuYkb`Cd|j{^~`*~^PSo8es*SOW@kTHGtgLpdzy#Z(J!Q>XW%}s`o{I(^VDu#!#C|$
zjpHG?aa6}#|1B)M`_C&A<EsqU@!;S1B?{)>9fPIUCMU*_0)1}s+9mu%=fnioK9909
z?&9O-4wecTsS#VIDQ#_gQA=@ez0^%GF?ny|k2e7>-MhJT9M!B@0N-Ajy!Ri$*uuM6
z{6x|5$!l5sFyyt{*H@ud=V!OaKF8^dU7NgO5LCatJ_efc+qWke@SH3ao@jNp{1W|k
z>_EHnKM!^Peo%*~X}{clxm*}0v>Ca0a31Wy-7<K*@K!Z7loHD|Az5Q)Mo3sZ^Xrbv
zi)85zbPJA-eSX6~nverd>U(X~G)_7&iZq|4OBU18E^z6up!9fS^ZtG_r~^;1BTl4|
z=hX-fTAmuC%+;aQ$qejN2E1r}V$TtL8Q?pBfl}qgROAF#Je2G{0WJ=~1#9|Z{GO1I
za3)DOGfz=qYBR!&PCS29cK|O&f~tiLJ3$r*zcMEodFWN35o(v>lr-X(mIX9)p|c;)
z`{W~PB;wIHq)YTE3!I2Q(iBtax<H|j^WK|S!1DGbbBa^U8J;8BrJAA2XGJ40QDD6|
z3I?#pBk~m|-`>9k*MB3!qvCT{8sR9>Cn3ek8d<lS<zZyG_4TpZzeiC?goHCpLT09h
zC{!e%K+~K7431V<4I0W{L9R2|&{?6WfJZ54r7Du^sAsrW53;U-Rax`Z^&8?^usKO8
zrKnVfUBP+`txBzEREO0Ki9U(?@|B^qxGKG-CVdp`FwzIBY%zPL@Fe7yJS2<%&d@y}
zGh0vA&*a*$F915~1*>*ZVRTHRwNDT(J`pg`wiaTUgb#d{yd%woHBs-=-RmizMG{is
zs-rnZLBHCaqQYKw49@bAa=Zz!#qQ&%_?|G%XDQ#*`AQCm$8<#ql~p5lM8YJp#tgyq
z*A<h=ptsn%yORhBqY4eg4W?&U^tf}BknrVP1^pT(Yz&i-F{SG58Hp`<uiEkvF%Aam
zx0YD!y3{C;@W*%cMdABL2*TbFuww5~Z1;Ci!Wf0Ee6ZLACJhy}!+(uI^R0Z)Evgw2
z7vQFzow*l&HW5U^^FKUXdO}ZHDs#C#YKY6VII9;8>PTrs5ow!NmpbkGh=vIflJm|j
zzvo9n8t4T-AGh4mlQNyVBov10M@lwrO->^h+bFd~?VT-y^$}Nu0QCt|3%<?@4E=2R
zk}*quB6*YFTzx@dN@r(h{%B?T>Egz=&5N?l2-)ak&dwG#0cO=skO?0tP!Wkj(VwkI
z#b2{*QzbJ?5%|rlSTzUe3%QeGnpOFek`{F2<jwxM7xN(b&Ds9Bkxj@)Alg>!ipOtO
zYpU!C1-NKq?MBb(^vcnERJtiC&-!O1rt}%^Enl$8zcorj*NT5FIk!~*K=&rWT!i?t
zUgt<&X<q^+Bf*OUkuR~nG;hRaNyD${edhn-!FO3Je*EE5@J;5t6<`19(N75GE*@fB
zy?XV=jT_4ZI2_9y%Vao&5dO=19b%|MR&WS=UQ3DXkgfSSRHoIsf<Yl6hobKYv?a%I
zNa?EcDGHX!TfmV>HXWizbUOT$rCd22(t*lHCY6P{V3e|u4;7UqDp6dp5&acQ-dg@B
zD|mHkR54Dx`{*r#Ig7V>{1?NEkcqZTwDIuDUpd4pg^PP{rlOvyist9=h7x%LM45g`
zWClyU!J6K{4EU$$oi?^#)M>I95Zfze(ko`wt7Ka&D+Ingg`$n%zxdz7n+wBqxWeZP
z3Fa=QroKZcxUllpty@1Ohz3weuDmcG7wgniME}LSX~sPW<~H8DPcf#)@4TVY>vMg+
z+*}{}$iRL+&?ozO1;Nkze4>C4<Tpu4B@|pfl|NS<CRmfx@cAT}k_|D5Tv=0&<5LC5
z8vZ-~q~si8NI8|afP?cXiL1&&ZBL9LgzELWH{LNZ40Zp#$p4BiayGt}gUk5s1tx>R
z5U0~2781NLbh@}WRGubALy>td1kXBHh-rv<h?tlf3ZX;8B0}}Kg*d((O}Hwg$iOQ>
z1T5rfh=?e1k>Gh@!URMN#1tePB#4lP!b`OXq5z>d$!SIKJTxST8ptU{@LW7(yVx#z
zx--j9NVC{a)4?iqkgCef1_}fG*dQGuIdyzR8a}(MN`Yp>s-n>QA&iId&;gki6Jh0$
zE~<+q3?v{RARr)^Yak1O5fBg%5WHN(`JxW}G%{V_ZLPsJ;vDfufxojLNU9Dk2oWo+
zxll?4{t5-W&pF~GPdgLL4m5=+$!nvHy`9M^VTFCEei?8MZt@hzB0OfYa5cfKpzws<
z8fCbxB?X`jCv}x1t6ow8mOUx4S~MdqedPQgn0e^m&%rOAjV4m9T*-y-My<xR^1AUf
z!20x<eUk&^Ws`*h31%MlWH*-@T@rFuuBiMMu5e<Pv7%6Uof9=w0R}`yp^H@9vmh=j
zC<pUP46=ArmKy|B6d@KXh$IzWSF*y2hFNi~LRK;;M5gHgn=GDWa)jI#63hw-wb6!E
zTQp5g$Qi3kRV1vbj@@->sYQf@1g|IwxyVSEL`X<LNJvOXNJtPfBy`2QxR*&n#$>{+
zQ;H!ZBzQeZ$Z;%y)%6^mF|O2TkWk<r!@jicQp)cQ<b;F-vra<J4KAA<A|JEhtYD1-
z32|te5BE%(;zG?RjcAr>q*GE^2zogvAtAwRlaO<32X}7YQR`$;v(&}8T)1j<@h;x&
zlAu-OqTf<t=U$kEC@}w{*4~dx09JpJ29$|mO!$r6;xA)jOpH`vB{3)veUT@L;lqVJ
z)@1^fkxOliK?;10hj(IZKAeKIdY}4*y@Z4Wvr9rwYi#P@xA95q&I~r*h-7ZQb&7uR
zp3};1HWe{Rkn=W-IZ*Mb6S$BhL^S4j&OVids4d$4*Pe?FM~`(v!!a9}Bo(Ea1b#R}
zUB^-40Eeg~@lH_=5GZ`7RElD793&hr1f@kvNJuctB#ejkbxkPf`$KI;nCfn<(YlQ#
zcPd(H9%o$6zQt;b_7-j)vfB1!uVh_pPIu#|*6kiGX>RGxVOKWP4OE7#2~k58P<`n}
z`=^o61eUYELuAo?F$^19EdaKb_ED@;-Pl-<V+;*=bcjueca<dxwfRupwpxc`rR`~7
zkD_;1SJtLMY178M`~(2Q>h^REXppjQsJf;x4JsO&>TxQGwVQq2c~H}g67o1v0c@`A
z#NnN_EjGy8_SL?8MxiPpA;GMYkki7tvUsp-p}WeRv*qN62iE04%kZ|c;f9W~Uw`C;
zw!^#s@$YpT%7(WUf^AFd2R#iru;tT_KkV&bPwYCmYakQ}IX8E@%IY?{JSVKyr;@Pc
zOfwiBLuV5-)j6TC_w3;>+Ymka>-x`lfazFV_th>NYIcII?Ckb0`hT;%XYsGz1m}S-
z`xiF=^c?KzwKVTP)Y^M$9oTn#Q}@ljRMg4@=kTezKj_{+w*TmvDnLmbKUMY@4;<_O
zShKhWDq7F<|7`$;AL`wIsx<%T{zDCnJbQqUkYIL6=rVFUH@K}X)CRS}K<^!H=y(h4
zIaHj}bnIe$WnD4U9^K?>JNAT2Z#@DHAM`=Za24!s9nx++{yn4*=f{U4VLW8~zrFMM
zNh@pP_}AD9v(cd@Z+y8IS-4=q%3No{0<jn%6ReIz(E`o2fFRat)v7=NgZPUW6yKtu
zRtgKMVkXhJ&{%g}%pcIjBwf9G<7)ncITx^Mr&=d5;``=&@o?^sa}F-<=RVK5=Q-z^
zgI<(dwkNbQ?n(%WH~Khw0ygi4TI>pJWgT@ErUT3UkUn+d*+ClaTr27A;ZO5NUyYgZ
zVB}K;UWC{2;Yf|SU|Us<J;^I385dfEdd#kPQAf;cB&&wbJ}JekT$zHIR;-URov=R!
zR7V{!XIKm!m@0##Pz~DfAvb$2fQLdzb;}US8^-oRAx`Vpq9H>p5N6Eq?#tnbO5mTi
zV8j?gTjocU8=r*Y6AMj}!~`a10L7LKP05yT_6a$0=tFkSYsp1xW#aEb_%d8@HwlC(
zR?qa1jns1tA9NbX){AVj`+hi8NqTN|Tdx2oA=Y$wzxtrBsY1;>Ms^QSGiu_+Zo3d$
zcDUQ#8ij72GDUps`A@xWQ!mrp^JyKBkd~ta!j^5dfobh>FEPI%5|h*r{L|Sc3L#bL
zAPmVSC$y}gA=GFv?RRQ*a&IQ&9rtUGlRoeRBUl_3qkBh!pUj?e<L_hRW9CInwsKlN
z{%@$0kG?%bL0a`h=2GDfXt}H1QMnY(h!RySSPh2O*z|!(bb{$P_~GqCqe^66c^ym4
z4d@70>{cJSMPzvVderO)&P5}cm<u^_->|J{q*aEwk)PL6;YiZ{Qc4QzVphPl(cf>+
zq$+w-O17?jdmeMdq^b^lI%X<rPxf07nEJRmqrlQyErpP(bPs0yuqN|FJRkaF---~N
z%Xqfz$8o|3-GBv)FT|*QEkUE%qup^D^qQ_+ylNGL|Ggf8u;!Adqj?H<&KSI^PnbUX
zAZ)a5!5V{uc%ndJntZj-r{XXtYBVjH^?RfoyEOq~Hg&jv=vEw!RJXKuRU<nhSi&^1
z%m*%MZmdkN(kMW@TScrF@E*=qx2PP%r_}*X#2rnLK4BLV&@tA3IokEa(n>Y1kA3J~
zYo-uVl@h|;WwZMaelIvnuJC3Y6Z7I3=kQ}v4TS(9v4pk65;hLH@Y1Zu?nF0%kOd#F
z$8qH0WrOwQa;~H4jKRwxBp3ex(|K~@WhRK_G9j8!!p6LZaS<3^MK4o<x;~5Wtc8se
zOZak%K)8}dJYztMIe@H%aNM7(a11cLc>0zHKROR7fiOZW;d+qN=o~C-XZjvgy<nCw
zy3xWLiSruX5}{(y#P8c+SRE#}0S_G~q$(YRgu-KE|KLu-7LxPRQ?C*e3RuH_NV1=y
zGw;DUF2?)*0CwYh*d4QvhW8~Hp3#C&c+oJLo#8GStS^jGTw}0a3f(Xhi7^v3XghqX
z)UU3^Nna06CK}mzgR)5`llwR?JeXml&w-~g9Rf@@G_k||!$=FZ_lS+uB$-^CxSF~+
zv$Yvi3lQoyEW{qZKMZD==^6|%_SDqoF9>XJruIqSup+m)!$cKQBlCLI9)QBk^wFoI
zRHcKEBd+D_6Wf9;<VT}zXvrW8nLdjv6&<|HuWpt%`^2){v<?lv1(}?G=z7>FlLg%3
z%JQ^EEBonT=VcIzIihQZt+BO3y*@eF@_7`{yPQ2j!M2g1Uj=t{-f7k6$Ja&bW?;d`
zqWV8d;;cT|vsD8fCZW}n`wJ(DR-pQs)63^a`q>VRK$Y9FSo>enO4{jhtj?3_PkzyL
z@PMj!Z;7DB_WWiQ<{I<X9uXZUq$(MN;$j30aUD5f;<=3DWFSl-MDUc8Lqc$Ah!{3G
zmp@PTAs35T$b|B^i2&|mCOX^s0>p*DnX@p@b1^R>NQa-6Ra%L8EW6O8=t3=&ZQ3q|
z;ry*}3L#agAS50srxoWT%s8=DT*xm=q+nt5%ds1n%9IcLyjP?`TF8YYJ(r(CbDE@u
z*%$dUo{hJw+k2v7{c{+L?iCZ+Q?ASl=L$0>inXPuKSCj-DlvqFkq4(%@jJ^oeRZDW
zZe~*Nd7~uy+E9Iaijzom7EP+Et!*xZhJIc6tYN8J7<W9aR6KtAnhz13ML|_+2>%~u
z)_;FG;`Qb^Q3$Chg#R4BYrQ+}x^sppgjD~t5YpAwsHpx4gj()~7yr$#J1X~I4&lXh
zN4vn@ffqB$ziCzJx}#LLpsGj8n_hvNSi-AT;0}c(iql{J0Z@16v%6>qp|{Z$xT$VI
zs(|8l-O+M))49MfoV@vbN3V2|-eaQI2h}a;hjz)McaqbOL`Xtb{C@W(|8h|HJAe3{
zu=_5bB>7Y1;|oXvg@VNj#aj8itM0--pqzbE|K={LzMe8jbxW!&yKz0Z;vD<8+dxhA
wozzJky*8+*sHmu@sHmu@sHmu@sBT<;0oxlgt0@JSEC2ui07*qoM6N<$f{IsHr~m)}

literal 0
HcmV?d00001

diff --git a/doc/user/profile/saved_replies.md b/doc/user/profile/saved_replies.md
new file mode 100644
index 00000000000..302daceb31d
--- /dev/null
+++ b/doc/user/profile/saved_replies.md
@@ -0,0 +1,61 @@
+---
+stage: Create
+group: Code Review
+info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/product/ux/technical-writing/#assignments
+type: howto
+---
+
+# Saved replies **(FREE)**
+
+> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/352956) in GitLab 14.9 [with a flag](../../administration/feature_flags.md) named `saved_replies`. Disabled by default.
+
+With saved replies, create and reuse text for any text area in:
+
+- Merge requests, including diffs.
+- Issues, including design management comments.
+- Epics.
+- Work items.
+
+Saved replies can be small, like approving a merge request and unassigning yourself from it,
+or large, like chunks of boilerplate text you use frequently:
+
+![Saved replies dropdown list](img/saved_replies_dropdown_v15_10.png)
+
+## Use saved replies in a text area
+
+To include the text of a saved reply in your comment:
+
+1. In the editor toolbar for your comment, select **Saved replies** (**{symlink}**).
+1. Select your desired saved reply.
+
+## Create saved replies
+
+To create a saved reply for future use:
+
+1. On the top bar, in the upper-right corner, select your avatar.
+1. From the dropdown list, select **Preferences**.
+1. On the left sidebar, select **Saved replies** (**{symlink}**).
+1. Provide a **Name** for your saved reply.
+1. Enter the **Content** of your reply. You can use any formatting you use in
+   other GitLab text areas.
+1. Select **Save**, and the page reloads with your saved reply shown.
+
+## View your saved replies
+
+To go to your saved replies:
+
+1. On the top bar, in the upper-right corner, select your avatar.
+1. From the dropdown list, select **Preferences**.
+1. On the left sidebar, select **Saved replies** (**{symlink}**).
+1. Scroll to **My saved replies**.
+
+## Edit or delete saved replies
+
+To edit or delete a previously saved reply:
+
+1. On the top bar, in the upper-right corner, select your avatar.
+1. From the dropdown list, select **Preferences**.
+1. On the left sidebar, select **Saved replies** (**{symlink}**).
+1. Scroll to **My saved replies**, and identify the saved reply you want to edit.
+1. To edit, select **Edit** (**{pencil}**).
+1. To delete, select **Delete** (**{remove}**), then select **Delete** again from the modal window.
diff --git a/lib/api/files.rb b/lib/api/files.rb
index 06f3b55b742..1850413caa6 100644
--- a/lib/api/files.rb
+++ b/lib/api/files.rb
@@ -57,15 +57,11 @@ module API
       end
 
       def cache_client
-        if Feature.enabled?(:cache_client_with_metrics, user_project)
-          Gitlab::Cache::Client.build_with_metadata(
-            cache_identifier: 'API::Files#content_sha',
-            feature_category: :source_code_management,
-            backing_resource: :gitaly
-          )
-        else
-          Rails.cache
-        end
+        Gitlab::Cache::Client.build_with_metadata(
+          cache_identifier: 'API::Files#content_sha',
+          feature_category: :source_code_management,
+          backing_resource: :gitaly
+        )
       end
 
       def fetch_blame_range(blame_params)
diff --git a/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings.rb b/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings.rb
index 7a2f4dab742..9eadef96db6 100644
--- a/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings.rb
+++ b/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings.rb
@@ -150,7 +150,7 @@ module Gitlab
         return [] unless parsed_metadata['remediations']
 
         parsed_metadata['remediations'].filter_map do |remediation|
-          next unless remediation
+          next unless remediation && remediation['diff'].present?
 
           remediation.merge('checksum' => DiffFile.checksum(remediation['diff']))
         end.compact.uniq
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 9fc511d0d17..c3123b0c1e1 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -7732,9 +7732,6 @@ msgstr ""
 msgid "BulkImport|Import is finished. Pick another name for re-import"
 msgstr ""
 
-msgid "BulkImport|Import selected"
-msgstr ""
-
 msgid "BulkImport|Import with projects"
 msgstr ""
 
diff --git a/package.json b/package.json
index 32c436fce74..5f2c81e591d 100644
--- a/package.json
+++ b/package.json
@@ -56,7 +56,7 @@
     "@gitlab/favicon-overlay": "2.0.0",
     "@gitlab/fonts": "^1.2.0",
     "@gitlab/svgs": "3.24.0",
-    "@gitlab/ui": "56.4.0",
+    "@gitlab/ui": "56.4.1",
     "@gitlab/visual-review-tools": "1.7.3",
     "@gitlab/web-ide": "0.0.1-dev-20230223005157",
     "@mattiasbuelens/web-streams-adapter": "^0.1.0",
diff --git a/spec/frontend/header_search/store/getters_spec.js b/spec/frontend/header_search/store/getters_spec.js
index a1d9481b5cc..7a7a00178f1 100644
--- a/spec/frontend/header_search/store/getters_spec.js
+++ b/spec/frontend/header_search/store/getters_spec.js
@@ -241,6 +241,13 @@ describe('Header Search Store Getters', () => {
         MOCK_DEFAULT_SEARCH_OPTIONS,
       );
     });
+
+    it('returns the correct array if issues path is false', () => {
+      mockGetters.scopedIssuesPath = undefined;
+      expect(getters.defaultSearchOptions(state, mockGetters)).toStrictEqual(
+        MOCK_DEFAULT_SEARCH_OPTIONS.slice(2, MOCK_DEFAULT_SEARCH_OPTIONS.length),
+      );
+    });
   });
 
   describe('scopedSearchOptions', () => {
diff --git a/spec/frontend/import_entities/import_groups/components/import_actions_cell_spec.js b/spec/frontend/import_entities/import_groups/components/import_actions_cell_spec.js
index e813c9eab11..1a52485f779 100644
--- a/spec/frontend/import_entities/import_groups/components/import_actions_cell_spec.js
+++ b/spec/frontend/import_entities/import_groups/components/import_actions_cell_spec.js
@@ -1,4 +1,4 @@
-import { GlButton, GlIcon, GlDropdown, GlDropdownItem } from '@gitlab/ui';
+import { GlDropdown, GlIcon, GlDropdownItem } from '@gitlab/ui';
 import { shallowMount } from '@vue/test-utils';
 import ImportActionsCell from '~/import_entities/import_groups/components/import_actions_cell.vue';
 
@@ -8,7 +8,6 @@ describe('import actions cell', () => {
   const createComponent = (props) => {
     wrapper = shallowMount(ImportActionsCell, {
       propsData: {
-        isProjectsImportEnabled: false,
         isFinished: false,
         isAvailableForImport: false,
         isInvalid: false,
@@ -22,10 +21,10 @@ describe('import actions cell', () => {
       createComponent({ isAvailableForImport: true });
     });
 
-    it('renders import button', () => {
-      const button = wrapper.findComponent(GlButton);
-      expect(button.exists()).toBe(true);
-      expect(button.text()).toBe('Import');
+    it('renders import dropdown', () => {
+      const dropdown = wrapper.findComponent(GlDropdown);
+      expect(dropdown.exists()).toBe(true);
+      expect(dropdown.props('text')).toBe('Import with projects');
     });
 
     it('does not render icon with a hint', () => {
@@ -38,10 +37,10 @@ describe('import actions cell', () => {
       createComponent({ isAvailableForImport: false, isFinished: true });
     });
 
-    it('renders re-import button', () => {
-      const button = wrapper.findComponent(GlButton);
-      expect(button.exists()).toBe(true);
-      expect(button.text()).toBe('Re-import');
+    it('renders re-import dropdown', () => {
+      const dropdown = wrapper.findComponent(GlDropdown);
+      expect(dropdown.exists()).toBe(true);
+      expect(dropdown.props('text')).toBe('Re-import with projects');
     });
 
     it('renders icon with a hint', () => {
@@ -53,25 +52,25 @@ describe('import actions cell', () => {
     });
   });
 
-  it('does not render import button when group is not available for import', () => {
+  it('does not render import dropdown when group is not available for import', () => {
     createComponent({ isAvailableForImport: false });
 
-    const button = wrapper.findComponent(GlButton);
-    expect(button.exists()).toBe(false);
+    const dropdown = wrapper.findComponent(GlDropdown);
+    expect(dropdown.exists()).toBe(false);
   });
 
-  it('renders import button as disabled when group is invalid', () => {
+  it('renders import dropdown as disabled when group is invalid', () => {
     createComponent({ isInvalid: true, isAvailableForImport: true });
 
-    const button = wrapper.findComponent(GlButton);
-    expect(button.props().disabled).toBe(true);
+    const dropdown = wrapper.findComponent(GlDropdown);
+    expect(dropdown.props().disabled).toBe(true);
   });
 
   it('emits import-group event when import button is clicked', () => {
     createComponent({ isAvailableForImport: true });
 
-    const button = wrapper.findComponent(GlButton);
-    button.vm.$emit('click');
+    const dropdown = wrapper.findComponent(GlDropdown);
+    dropdown.vm.$emit('click');
 
     expect(wrapper.emitted('import-group')).toHaveLength(1);
   });
@@ -81,10 +80,10 @@ describe('import actions cell', () => {
     ${false}   | ${'Import'}
     ${true}    | ${'Re-import'}
   `(
-    'when import projects is enabled, group is available for import and finish status is $status',
+    'group is available for import and finish status is $isFinished',
     ({ isFinished, expectedAction }) => {
       beforeEach(() => {
-        createComponent({ isProjectsImportEnabled: true, isAvailableForImport: true, isFinished });
+        createComponent({ isAvailableForImport: true, isFinished });
       });
 
       it('render import dropdown', () => {
diff --git a/spec/frontend/import_entities/import_groups/components/import_table_spec.js b/spec/frontend/import_entities/import_groups/components/import_table_spec.js
index f664f4a4fe7..205218fdabd 100644
--- a/spec/frontend/import_entities/import_groups/components/import_table_spec.js
+++ b/spec/frontend/import_entities/import_groups/components/import_table_spec.js
@@ -49,12 +49,12 @@ describe('import table', () => {
     },
   };
 
-  const findImportSelectedButton = () =>
-    wrapper.findAll('button').wrappers.find((w) => w.text() === 'Import selected');
   const findImportSelectedDropdown = () =>
-    wrapper.findAll('.gl-dropdown').wrappers.find((w) => w.text().includes('Import with projects'));
-  const findImportButtons = () =>
-    wrapper.findAll('button').wrappers.filter((w) => w.text() === 'Import');
+    wrapper.find('[data-testid="import-selected-groups-dropdown"]');
+  const findRowImportDropdownAtIndex = (idx) =>
+    wrapper.findAll('tbody td button').wrappers.filter((w) => w.text() === 'Import with projects')[
+      idx
+    ];
   const findPaginationDropdown = () => wrapper.find('[data-testid="page-size"]');
   const findTargetNamespaceDropdown = (rowWrapper) =>
     rowWrapper.find('[data-testid="target-namespace-selector"]');
@@ -70,12 +70,7 @@ describe('import table', () => {
   const findRowCheckbox = (idx) => wrapper.findAll('tbody td input[type=checkbox]').at(idx);
   const selectRow = (idx) => findRowCheckbox(idx).setChecked(true);
 
-  const createComponent = ({
-    bulkImportSourceGroups,
-    importGroups,
-    defaultTargetNamespace,
-    glFeatures = {},
-  }) => {
+  const createComponent = ({ bulkImportSourceGroups, importGroups, defaultTargetNamespace }) => {
     apolloProvider = createMockApollo(
       [
         [
@@ -104,9 +99,6 @@ describe('import table', () => {
       directives: {
         GlTooltip: createMockDirective('gl-tooltip'),
       },
-      provide: {
-        glFeatures,
-      },
       apolloProvider,
     });
   };
@@ -130,7 +122,7 @@ describe('import table', () => {
       expect(wrapper.findComponent(GlLoadingIcon).exists()).toBe(true);
     });
 
-    it('does not renders loading icon when request is completed', async () => {
+    it('does not render loading icon when request is completed', async () => {
       createComponent({
         bulkImportSourceGroups: () => [],
       });
@@ -241,12 +233,13 @@ describe('import table', () => {
 
     await waitForPromises();
 
-    await findImportButtons()[0].trigger('click');
+    await findRowImportDropdownAtIndex(0).trigger('click');
     expect(apolloProvider.defaultClient.mutate).toHaveBeenCalledWith({
       mutation: importGroupsMutation,
       variables: {
         importRequests: [
           {
+            migrateProjects: true,
             newName: FAKE_GROUP.lastImportTarget.newName,
             sourceGroupId: FAKE_GROUP.id,
             targetNamespace: AVAILABLE_NAMESPACES[0].fullPath,
@@ -269,7 +262,7 @@ describe('import table', () => {
     });
 
     await waitForPromises();
-    await findImportButtons()[0].trigger('click');
+    await findRowImportDropdownAtIndex(0).trigger('click');
     await waitForPromises();
 
     expect(createAlert).toHaveBeenCalledWith(
@@ -294,7 +287,7 @@ describe('import table', () => {
     });
 
     await waitForPromises();
-    await findImportButtons()[0].trigger('click');
+    await findRowImportDropdownAtIndex(0).trigger('click');
     await waitForPromises();
 
     expect(createAlert).not.toHaveBeenCalled();
@@ -472,7 +465,7 @@ describe('import table', () => {
       });
       await waitForPromises();
 
-      expect(findImportSelectedButton().props().disabled).toBe(true);
+      expect(findImportSelectedDropdown().props().disabled).toBe(true);
     });
 
     it('import selected button is enabled when groups were selected for import', async () => {
@@ -487,7 +480,7 @@ describe('import table', () => {
 
       await selectRow(0);
 
-      expect(findImportSelectedButton().props().disabled).toBe(false);
+      expect(findImportSelectedDropdown().props().disabled).toBe(false);
     });
 
     it('does not allow selecting already started groups', async () => {
@@ -505,7 +498,7 @@ describe('import table', () => {
       await selectRow(0);
       await nextTick();
 
-      expect(findImportSelectedButton().props().disabled).toBe(true);
+      expect(findImportSelectedDropdown().props().disabled).toBe(true);
     });
 
     it('does not allow selecting groups with validation errors', async () => {
@@ -530,10 +523,10 @@ describe('import table', () => {
       await selectRow(0);
       await nextTick();
 
-      expect(findImportSelectedButton().props().disabled).toBe(true);
+      expect(findImportSelectedDropdown().props().disabled).toBe(true);
     });
 
-    it('invokes importGroups mutation when import selected button is clicked', async () => {
+    it('invokes importGroups mutation when import selected dropdown is clicked', async () => {
       const NEW_GROUPS = [
         generateFakeEntry({ id: 1, status: STATUSES.NONE }),
         generateFakeEntry({ id: 2, status: STATUSES.NONE }),
@@ -554,7 +547,7 @@ describe('import table', () => {
       await selectRow(1);
       await nextTick();
 
-      await findImportSelectedButton().trigger('click');
+      await findImportSelectedDropdown().find('button').trigger('click');
 
       expect(apolloProvider.defaultClient.mutate).toHaveBeenCalledWith({
         mutation: importGroupsMutation,
@@ -675,7 +668,7 @@ describe('import table', () => {
     });
   });
 
-  describe('when import projects is enabled', () => {
+  describe('importing projects', () => {
     const NEW_GROUPS = [
       generateFakeEntry({ id: 1, status: STATUSES.NONE }),
       generateFakeEntry({ id: 2, status: STATUSES.NONE }),
@@ -689,9 +682,6 @@ describe('import table', () => {
           pageInfo: FAKE_PAGE_INFO,
           versionValidation: FAKE_VERSION_VALIDATION,
         }),
-        glFeatures: {
-          bulkImportProjects: true,
-        },
       });
       jest.spyOn(apolloProvider.defaultClient, 'mutate');
       return waitForPromises();
diff --git a/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row_spec.js b/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row_spec.js
index 2d08cba5f7c..bfefe46c09b 100644
--- a/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row_spec.js
+++ b/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_row_spec.js
@@ -278,26 +278,30 @@ describe('tags list row', () => {
         textSrOnly: true,
         category: 'tertiary',
         right: true,
+        disabled: false,
       });
     });
 
-    it.each`
-      canDelete | digest   | disabled | buttonDisabled
-      ${true}   | ${null}  | ${true}  | ${true}
-      ${false}  | ${'foo'} | ${true}  | ${true}
-      ${false}  | ${null}  | ${true}  | ${true}
-      ${true}   | ${'foo'} | ${true}  | ${true}
-      ${true}   | ${'foo'} | ${false} | ${false}
-    `(
-      'is $visible that is visible when canDelete is $canDelete and digest is $digest and disabled is $disabled',
-      ({ canDelete, digest, disabled, buttonDisabled }) => {
-        mountComponent({ ...defaultProps, tag: { ...tag, canDelete, digest }, disabled });
+    it('has the correct classes', () => {
+      mountComponent();
 
-        expect(findAdditionalActionsMenu().props('disabled')).toBe(buttonDisabled);
-        expect(findAdditionalActionsMenu().classes('gl-opacity-0')).toBe(buttonDisabled);
-        expect(findAdditionalActionsMenu().classes('gl-pointer-events-none')).toBe(buttonDisabled);
-      },
-    );
+      expect(findAdditionalActionsMenu().classes('gl-opacity-0')).toBe(false);
+      expect(findAdditionalActionsMenu().classes('gl-pointer-events-none')).toBe(false);
+    });
+
+    it('is not rendered when tag.canDelete is false', () => {
+      mountComponent({ ...defaultProps, tag: { ...tag, canDelete: false } });
+
+      expect(findAdditionalActionsMenu().exists()).toBe(false);
+    });
+
+    it('is hidden when disabled prop is set to true', () => {
+      mountComponent({ ...defaultProps, disabled: true });
+
+      expect(findAdditionalActionsMenu().props('disabled')).toBe(true);
+      expect(findAdditionalActionsMenu().classes('gl-opacity-0')).toBe(true);
+      expect(findAdditionalActionsMenu().classes('gl-pointer-events-none')).toBe(true);
+    });
 
     describe('delete button', () => {
       it('exists and has the correct attrs', () => {
diff --git a/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_spec.js b/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_spec.js
index 8501cbc2bae..09d0370efbf 100644
--- a/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_spec.js
+++ b/spec/frontend/packages_and_registries/container_registry/explorer/components/details_page/tags_list_spec.js
@@ -69,10 +69,10 @@ describe('Tags List', () => {
   });
 
   describe('registry list', () => {
-    beforeEach(() => {
+    beforeEach(async () => {
       mountComponent();
       fireFirstSortUpdate();
-      return waitForApolloRequestRender();
+      await waitForApolloRequestRender();
     });
 
     it('has a persisted search', () => {
@@ -94,6 +94,7 @@ describe('Tags List', () => {
         pagination: tagsPageInfo,
         items: tags,
         idProperty: 'name',
+        hiddenDelete: false,
       });
     });
 
@@ -182,12 +183,23 @@ describe('Tags List', () => {
     });
   });
 
-  describe('when the list of tags is empty', () => {
-    beforeEach(() => {
-      resolver = jest.fn().mockResolvedValue(imageTagsMock([]));
+  describe('when user does not have permission to delete list rows', () => {
+    it('sets registry list hiddenDelete prop to true', async () => {
+      resolver = jest.fn().mockResolvedValue(imageTagsMock({ canDelete: false }));
       mountComponent();
       fireFirstSortUpdate();
-      return waitForApolloRequestRender();
+      await waitForApolloRequestRender();
+
+      expect(findRegistryList().props('hiddenDelete')).toBe(true);
+    });
+  });
+
+  describe('when the list of tags is empty', () => {
+    beforeEach(async () => {
+      resolver = jest.fn().mockResolvedValue(imageTagsMock({ nodes: [] }));
+      mountComponent();
+      fireFirstSortUpdate();
+      await waitForApolloRequestRender();
     });
 
     it('does not show the loader', () => {
diff --git a/spec/frontend/packages_and_registries/container_registry/explorer/mock_data.js b/spec/frontend/packages_and_registries/container_registry/explorer/mock_data.js
index e5b99f15e8c..cd54b856c97 100644
--- a/spec/frontend/packages_and_registries/container_registry/explorer/mock_data.js
+++ b/spec/frontend/packages_and_registries/container_registry/explorer/mock_data.js
@@ -177,11 +177,12 @@ export const tagsMock = [
   },
 ];
 
-export const imageTagsMock = (nodes = tagsMock) => ({
+export const imageTagsMock = ({ nodes = tagsMock, canDelete = true } = {}) => ({
   data: {
     containerRepository: {
       id: containerRepositoryMock.id,
       tagsCount: nodes.length,
+      canDelete,
       tags: {
         nodes,
         pageInfo: { ...tagsPageInfo },
diff --git a/spec/frontend/packages_and_registries/shared/components/registry_list_spec.js b/spec/frontend/packages_and_registries/shared/components/registry_list_spec.js
index b821352922f..a4e0d267023 100644
--- a/spec/frontend/packages_and_registries/shared/components/registry_list_spec.js
+++ b/spec/frontend/packages_and_registries/shared/components/registry_list_spec.js
@@ -107,10 +107,21 @@ describe('Registry List', () => {
         expect(findDeleteSelected().text()).toBe(component.i18n.deleteSelected);
       });
 
-      it('is hidden when hiddenDelete is true', () => {
-        mountComponent({ propsData: { ...defaultPropsData, hiddenDelete: true } });
+      describe('when hiddenDelete is true', () => {
+        beforeEach(() => {
+          mountComponent({ propsData: { ...defaultPropsData, hiddenDelete: true } });
+        });
 
-        expect(findDeleteSelected().exists()).toBe(false);
+        it('is hidden', () => {
+          expect(findDeleteSelected().exists()).toBe(false);
+        });
+
+        it('populates the first slot prop correctly', async () => {
+          expect(findScopedSlots().at(0).exists()).toBe(true);
+
+          // it's the first slot
+          expect(findScopedSlotFirstValue(0).text()).toBe('false');
+        });
       });
 
       it('is disabled when isLoading is true', () => {
diff --git a/spec/helpers/search_helper_spec.rb b/spec/helpers/search_helper_spec.rb
index c7afe0bf391..ba703914049 100644
--- a/spec/helpers/search_helper_spec.rb
+++ b/spec/helpers/search_helper_spec.rb
@@ -829,6 +829,21 @@ RSpec.describe SearchHelper, feature_category: :global_search do
         expect(header_search_context[:project_metadata]).to eq(project_metadata)
       end
 
+      context 'feature issues is not available' do
+        let(:feature_available) { false }
+        let(:project_metadata) { { mr_path: project_merge_requests_path(project) } }
+
+        before do
+          allow(project).to receive(:feature_available?).and_call_original
+          allow(project).to receive(:feature_available?).with(:issues, current_user).and_return(feature_available)
+        end
+
+        it 'adds the :project and :project-metadata correctly to hash' do
+          expect(header_search_context[:project]).to eq({ id: project.id, name: project.name })
+          expect(header_search_context[:project_metadata]).to eq(project_metadata)
+        end
+      end
+
       context 'with scope' do
         let(:scope) { 'issues' }
 
diff --git a/spec/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings_spec.rb b/spec/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings_spec.rb
index 84259505683..b75c0e61b19 100644
--- a/spec/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings_spec.rb
+++ b/spec/lib/gitlab/background_migration/migrate_remediations_for_vulnerability_findings_spec.rb
@@ -57,6 +57,18 @@ RSpec.describe Gitlab::BackgroundMigration::MigrateRemediationsForVulnerabilityF
     end
   end
 
+  context 'with remediation with empty string as the diff key' do
+    let!(:finding) do
+      create_finding!(project1.id, scanner1.id, { remediations: [{ summary: 'summary', diff: '' }] })
+    end
+
+    it 'does not create any remediation' do
+      expect(Gitlab::AppLogger).not_to receive(:error)
+
+      expect { perform_migration }.not_to change { vulnerability_remediations.count }
+    end
+  end
+
   context 'with remediation equals to an array of duplicated elements' do
     let!(:finding) do
       create_finding!(project1.id, scanner1.id, { remediations: [remediation_hash, remediation_hash] })
diff --git a/spec/migrations/20230118144623_schedule_migration_for_remediation_spec.rb b/spec/migrations/20230118144623_schedule_migration_for_remediation_spec.rb
index d22aeeaa254..f6d0f32b87c 100644
--- a/spec/migrations/20230118144623_schedule_migration_for_remediation_spec.rb
+++ b/spec/migrations/20230118144623_schedule_migration_for_remediation_spec.rb
@@ -10,13 +10,7 @@ RSpec.describe ScheduleMigrationForRemediation, :migration, feature_category: :v
     it 'schedules a batched background migration' do
       migrate!
 
-      expect(migration).to have_scheduled_batched_migration(
-        table_name: :vulnerability_occurrences,
-        column_name: :id,
-        interval: described_class::DELAY_INTERVAL,
-        batch_size: described_class::BATCH_SIZE,
-        sub_batch_size: described_class::SUB_BATCH_SIZE
-      )
+      expect(migration).not_to have_scheduled_batched_migration
     end
   end
 
diff --git a/spec/migrations/20230214181633_finalize_ci_build_needs_big_int_conversion_spec.rb b/spec/migrations/20230214181633_finalize_ci_build_needs_big_int_conversion_spec.rb
new file mode 100644
index 00000000000..638fe2a12d5
--- /dev/null
+++ b/spec/migrations/20230214181633_finalize_ci_build_needs_big_int_conversion_spec.rb
@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe FinalizeCiBuildNeedsBigIntConversion, migration: :gitlab_ci, feature_category: :continuous_integration do
+  describe '#up' do
+    using RSpec::Parameterized::TableSyntax
+
+    where(:dot_com, :dev_or_test, :jh, :expectation) do
+      true  | true  | true  | :not_to
+      true  | false | true  | :not_to
+      false | true  | true  | :not_to
+      false | false | true  | :not_to
+      true  | true  | false | :to
+      true  | false | false | :to
+      false | true  | false | :to
+      false | false | false | :not_to
+    end
+
+    with_them do
+      it 'ensures the migration is completed for GitLab.com, dev, or test' do
+        allow(Gitlab).to receive(:com?).and_return(dot_com)
+        allow(Gitlab).to receive(:dev_or_test_env?).and_return(dev_or_test)
+        allow(Gitlab).to receive(:jh?).and_return(jh)
+
+        migration_arguments = {
+          job_class_name: 'CopyColumnUsingBackgroundMigrationJob',
+          table_name: 'ci_build_needs',
+          column_name: 'id',
+          job_arguments: [['id'], ['id_convert_to_bigint']]
+        }
+
+        expect(described_class).send(
+          expectation,
+          ensure_batched_background_migration_is_finished_for(migration_arguments)
+        )
+
+        migrate!
+      end
+    end
+  end
+end
diff --git a/spec/migrations/20230220102212_swap_columns_ci_build_needs_big_int_conversion_spec.rb b/spec/migrations/20230220102212_swap_columns_ci_build_needs_big_int_conversion_spec.rb
new file mode 100644
index 00000000000..1c21047c0c3
--- /dev/null
+++ b/spec/migrations/20230220102212_swap_columns_ci_build_needs_big_int_conversion_spec.rb
@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe SwapColumnsCiBuildNeedsBigIntConversion, feature_category: :continuous_integration do
+  describe '#up' do
+    using RSpec::Parameterized::TableSyntax
+
+    where(:dot_com, :dev_or_test, :jh, :swap) do
+      true  | true  | true  | false
+      true  | false | true  | false
+      false | true  | true  | false
+      false | false | true  | false
+      true  | true  | false | true
+      true  | false | false | true
+      false | true  | false | true
+      false | false | false | false
+    end
+
+    with_them do
+      before do
+        connection = described_class.new.connection
+        connection.execute('ALTER TABLE ci_build_needs ALTER COLUMN id TYPE integer')
+        connection.execute('ALTER TABLE ci_build_needs ALTER COLUMN id_convert_to_bigint TYPE bigint')
+      end
+
+      it 'swaps the integer and bigint columns for GitLab.com, dev, or test' do
+        allow(Gitlab).to receive(:com?).and_return(dot_com)
+        allow(Gitlab).to receive(:dev_or_test_env?).and_return(dev_or_test)
+        allow(Gitlab).to receive(:jh?).and_return(jh)
+
+        ci_build_needs = table(:ci_build_needs)
+
+        disable_migrations_output do
+          reversible_migration do |migration|
+            migration.before -> {
+              ci_build_needs.reset_column_information
+
+              expect(ci_build_needs.columns.find { |c| c.name == 'id' }.sql_type).to eq('integer')
+              expect(ci_build_needs.columns.find { |c| c.name == 'id_convert_to_bigint' }.sql_type).to eq('bigint')
+            }
+
+            migration.after -> {
+              ci_build_needs.reset_column_information
+
+              if swap
+                expect(ci_build_needs.columns.find { |c| c.name == 'id' }.sql_type).to eq('bigint')
+                expect(ci_build_needs.columns.find { |c| c.name == 'id_convert_to_bigint' }.sql_type).to eq('integer')
+              else
+                expect(ci_build_needs.columns.find { |c| c.name == 'id' }.sql_type).to eq('integer')
+                expect(ci_build_needs.columns.find { |c| c.name == 'id_convert_to_bigint' }.sql_type).to eq('bigint')
+              end
+            }
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/spec/migrations/20230309071242_delete_security_policy_bot_users_spec.rb b/spec/migrations/20230309071242_delete_security_policy_bot_users_spec.rb
new file mode 100644
index 00000000000..4dd44cad158
--- /dev/null
+++ b/spec/migrations/20230309071242_delete_security_policy_bot_users_spec.rb
@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe DeleteSecurityPolicyBotUsers, feature_category: :security_policy_management do
+  let(:users) { table(:users) }
+
+  before do
+    users.create!(user_type: 10, projects_limit: 0, email: 'security_policy_bot@example.com')
+    users.create!(user_type: 1, projects_limit: 0, email: 'support_bot@example.com')
+    users.create!(projects_limit: 0, email: 'human@example.com')
+  end
+
+  describe '#up' do
+    it 'deletes security_policy_bot users' do
+      expect { migrate! }.to change { users.count }.by(-1)
+
+      expect(users.where(user_type: 10).count).to eq(0)
+      expect(users.where(user_type: 1).count).to eq(1)
+      expect(users.where(user_type: nil).count).to eq(1)
+    end
+  end
+end
diff --git a/spec/migrations/20230313150531_reschedule_migration_for_remediation_spec.rb b/spec/migrations/20230313150531_reschedule_migration_for_remediation_spec.rb
new file mode 100644
index 00000000000..00f0836285b
--- /dev/null
+++ b/spec/migrations/20230313150531_reschedule_migration_for_remediation_spec.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe RescheduleMigrationForRemediation, :migration, feature_category: :vulnerability_management do
+  let(:migration) { described_class::MIGRATION }
+
+  describe '#up' do
+    it 'schedules a batched background migration' do
+      migrate!
+
+      expect(migration).to have_scheduled_batched_migration(
+        table_name: :vulnerability_occurrences,
+        column_name: :id,
+        interval: described_class::DELAY_INTERVAL,
+        batch_size: described_class::BATCH_SIZE,
+        sub_batch_size: described_class::SUB_BATCH_SIZE
+      )
+    end
+  end
+
+  describe '#down' do
+    it 'deletes all batched migration records' do
+      migrate!
+      schema_migrate_down!
+
+      expect(migration).not_to have_scheduled_batched_migration
+    end
+  end
+end
diff --git a/spec/models/concerns/has_user_type_spec.rb b/spec/models/concerns/has_user_type_spec.rb
index 87dacc71ca3..03d2c267098 100644
--- a/spec/models/concerns/has_user_type_spec.rb
+++ b/spec/models/concerns/has_user_type_spec.rb
@@ -6,7 +6,7 @@ RSpec.describe User, feature_category: :system_access do
   specify 'types consistency checks', :aggregate_failures do
     expect(described_class::USER_TYPES.keys)
       .to match_array(%w[human ghost alert_bot project_bot support_bot service_user security_bot visual_review_bot
-        migration_bot automation_bot admin_bot suggested_reviewers_bot service_account])
+        migration_bot automation_bot security_policy_bot admin_bot suggested_reviewers_bot service_account])
     expect(described_class::USER_TYPES).to include(*described_class::BOT_USER_TYPES)
     expect(described_class::USER_TYPES).to include(*described_class::NON_INTERNAL_USER_TYPES)
     expect(described_class::USER_TYPES).to include(*described_class::INTERNAL_USER_TYPES)
diff --git a/spec/requests/api/files_spec.rb b/spec/requests/api/files_spec.rb
index c9341934ec9..ed84e3e5f48 100644
--- a/spec/requests/api/files_spec.rb
+++ b/spec/requests/api/files_spec.rb
@@ -157,27 +157,6 @@ RSpec.describe API::Files, feature_category: :source_code_management do
         head api(route(file_path), current_user, **options), params: params
       end
 
-      context 'when feature flag "cache_client_with_metrics" is disabled' do
-        before do
-          stub_feature_flags(cache_client_with_metrics: false)
-        end
-
-        it 'caches sha256 of the content', :use_clean_rails_redis_caching do
-          head api(route(file_path), current_user, **options), params: params
-
-          expect(Gitlab::Cache::Client).not_to receive(:build_with_metadata)
-
-          expect(Rails.cache.fetch("blob_content_sha256:#{project.full_path}:#{response.headers['X-Gitlab-Blob-Id']}"))
-            .to eq(content_sha256)
-
-          expect_next_instance_of(Gitlab::Git::Blob) do |instance|
-            expect(instance).not_to receive(:load_all_data!)
-          end
-
-          head api(route(file_path), current_user, **options), params: params
-        end
-      end
-
       it 'returns file by commit sha' do
         # This file is deleted on HEAD
         file_path = 'files%2Fjs%2Fcommit%2Ejs%2Ecoffee'
diff --git a/spec/requests/api/issues/get_group_issues_spec.rb b/spec/requests/api/issues/get_group_issues_spec.rb
index 0641c2135c1..eaa3c46d0ca 100644
--- a/spec/requests/api/issues/get_group_issues_spec.rb
+++ b/spec/requests/api/issues/get_group_issues_spec.rb
@@ -74,7 +74,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     let(:base_url) { "/groups/#{group.id}/issues" }
 
     shared_examples 'group issues statistics' do
-      it 'returns issues statistics' do
+      it 'returns issues statistics', :aggregate_failures do
         get api("/groups/#{group.id}/issues_statistics", user), params: params
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -346,7 +346,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         group_project.add_reporter(user)
       end
 
-      it 'exposes known attributes' do
+      it 'exposes known attributes', :aggregate_failures do
         get api(base_url, admin)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -355,7 +355,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       it 'returns all group issues (including opened and closed)' do
-        get api(base_url, admin)
+        get api(base_url, admin, admin_mode: true)
 
         expect_paginated_array_response([group_closed_issue.id, group_confidential_issue.id, group_issue.id])
       end
@@ -385,7 +385,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       it 'returns group confidential issues for admin' do
-        get api(base_url, admin), params: { state: :opened }
+        get api(base_url, admin, admin_mode: true), params: { state: :opened }
 
         expect_paginated_array_response([group_confidential_issue.id, group_issue.id])
       end
@@ -403,7 +403,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'labels parameter' do
-        it 'returns an array of labeled group issues' do
+        it 'returns an array of labeled group issues', :aggregate_failures do
           get api(base_url, user), params: { labels: group_label.title }
 
           expect_paginated_array_response(group_issue.id)
@@ -486,7 +486,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         end
       end
 
-      it 'returns an array of issues found by iids' do
+      it 'returns an array of issues found by iids', :aggregate_failures do
         get api(base_url, user), params: { iids: [group_issue.iid] }
 
         expect_paginated_array_response(group_issue.id)
@@ -505,14 +505,14 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect_paginated_array_response([])
       end
 
-      it 'returns an array of group issues with any label' do
+      it 'returns an array of group issues with any label', :aggregate_failures do
         get api(base_url, user), params: { labels: IssuableFinder::Params::FILTER_ANY }
 
         expect_paginated_array_response(group_issue.id)
         expect(json_response.first['id']).to eq(group_issue.id)
       end
 
-      it 'returns an array of group issues with any label with labels param as array' do
+      it 'returns an array of group issues with any label with labels param as array', :aggregate_failures do
         get api(base_url, user), params: { labels: [IssuableFinder::Params::FILTER_ANY] }
 
         expect_paginated_array_response(group_issue.id)
@@ -555,7 +555,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect_paginated_array_response(group_closed_issue.id)
       end
 
-      it 'returns an array of issues with no milestone' do
+      it 'returns an array of issues with no milestone', :aggregate_failures do
         get api(base_url, user), params: { milestone: no_milestone_title }
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -688,28 +688,28 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         let!(:issue2) { create(:issue, author: user2, project: group_project, created_at: 2.days.ago) }
         let!(:issue3) { create(:issue, author: user2, assignees: [assignee, another_assignee], project: group_project, created_at: 1.day.ago) }
 
-        it 'returns issues with by assignee_username' do
+        it 'returns issues with by assignee_username', :aggregate_failures do
           get api(base_url, user), params: { assignee_username: [assignee.username], scope: 'all' }
 
           expect(issue3.reload.assignees.pluck(:id)).to match_array([assignee.id, another_assignee.id])
           expect_paginated_array_response([issue3.id, group_confidential_issue.id])
         end
 
-        it 'returns issues by assignee_username as string' do
+        it 'returns issues by assignee_username as string', :aggregate_failures do
           get api(base_url, user), params: { assignee_username: assignee.username, scope: 'all' }
 
           expect(issue3.reload.assignees.pluck(:id)).to match_array([assignee.id, another_assignee.id])
           expect_paginated_array_response([issue3.id, group_confidential_issue.id])
         end
 
-        it 'returns error when multiple assignees are passed' do
+        it 'returns error when multiple assignees are passed', :aggregate_failures do
           get api(base_url, user), params: { assignee_username: [assignee.username, another_assignee.username], scope: 'all' }
 
           expect(response).to have_gitlab_http_status(:bad_request)
           expect(json_response["error"]).to include("allows one value, but found 2")
         end
 
-        it 'returns error when assignee_username and assignee_id are passed together' do
+        it 'returns error when assignee_username and assignee_id are passed together', :aggregate_failures do
           get api(base_url, user), params: { assignee_username: [assignee.username], assignee_id: another_assignee.id, scope: 'all' }
 
           expect(response).to have_gitlab_http_status(:bad_request)
@@ -719,7 +719,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     describe "#to_reference" do
-      it 'exposes reference path in context of group' do
+      it 'exposes reference path in context of group', :aggregate_failures do
         get api(base_url, user)
 
         expect(json_response.first['references']['short']).to eq("##{group_closed_issue.iid}")
@@ -735,7 +735,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
           group_closed_issue.reload
         end
 
-        it 'exposes reference path in context of parent group' do
+        it 'exposes reference path in context of parent group', :aggregate_failures do
           get api("/groups/#{parent_group.id}/issues")
 
           expect(json_response.first['references']['short']).to eq("##{group_closed_issue.iid}")
diff --git a/spec/requests/api/issues/get_project_issues_spec.rb b/spec/requests/api/issues/get_project_issues_spec.rb
index 6fc3903103b..915b8fff75e 100644
--- a/spec/requests/api/issues/get_project_issues_spec.rb
+++ b/spec/requests/api/issues/get_project_issues_spec.rb
@@ -99,7 +99,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   shared_examples 'project issues statistics' do
-    it 'returns project issues statistics' do
+    it 'returns project issues statistics', :aggregate_failures do
       get api("/projects/#{project.id}/issues_statistics", current_user), params: params
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -317,7 +317,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     it 'returns project confidential issues for admin' do
-      get api("#{base_url}/issues", admin)
+      get api("#{base_url}/issues", admin, admin_mode: true)
 
       expect_paginated_array_response([issue.id, confidential_issue.id, closed_issue.id])
     end
@@ -526,7 +526,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect_paginated_array_response([closed_issue.id, confidential_issue.id, issue.id])
     end
 
-    it 'exposes known attributes' do
+    it 'exposes known attributes', :aggregate_failures do
       get api("#{base_url}/issues", user)
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -607,28 +607,28 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       let!(:issue2) { create(:issue, author: user2, project: project, created_at: 2.days.ago) }
       let!(:issue3) { create(:issue, author: user2, assignees: [assignee, another_assignee], project: project, created_at: 1.day.ago) }
 
-      it 'returns issues by assignee_username' do
+      it 'returns issues by assignee_username', :aggregate_failures do
         get api("/issues", user), params: { assignee_username: [assignee.username], scope: 'all' }
 
         expect(issue3.reload.assignees.pluck(:id)).to match_array([assignee.id, another_assignee.id])
         expect_paginated_array_response([confidential_issue.id, issue3.id])
       end
 
-      it 'returns issues by assignee_username as string' do
+      it 'returns issues by assignee_username as string', :aggregate_failures do
         get api("/issues", user), params: { assignee_username: assignee.username, scope: 'all' }
 
         expect(issue3.reload.assignees.pluck(:id)).to match_array([assignee.id, another_assignee.id])
         expect_paginated_array_response([confidential_issue.id, issue3.id])
       end
 
-      it 'returns error when multiple assignees are passed' do
+      it 'returns error when multiple assignees are passed', :aggregate_failures do
         get api("/issues", user), params: { assignee_username: [assignee.username, another_assignee.username], scope: 'all' }
 
         expect(response).to have_gitlab_http_status(:bad_request)
         expect(json_response["error"]).to include("allows one value, but found 2")
       end
 
-      it 'returns error when assignee_username and assignee_id are passed together' do
+      it 'returns error when assignee_username and assignee_id are passed together', :aggregate_failures do
         get api("/issues", user), params: { assignee_username: [assignee.username], assignee_id: another_assignee.id, scope: 'all' }
 
         expect(response).to have_gitlab_http_status(:bad_request)
@@ -646,7 +646,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'exposes known attributes' do
+    it 'exposes known attributes', :aggregate_failures do
       get api("/projects/#{project.id}/issues/#{issue.iid}", user)
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -686,7 +686,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'exposes the closed_at attribute' do
+    it 'exposes the closed_at attribute', :aggregate_failures do
       get api("/projects/#{project.id}/issues/#{closed_issue.iid}", user)
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -694,7 +694,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'links exposure' do
-      it 'exposes related resources full URIs' do
+      it 'exposes related resources full URIs', :aggregate_failures do
         get api("/projects/#{project.id}/issues/#{issue.iid}", user)
 
         links = json_response['_links']
@@ -706,7 +706,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'returns a project issue by internal id' do
+    it 'returns a project issue by internal id', :aggregate_failures do
       get api("/projects/#{project.id}/issues/#{issue.iid}", user)
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -738,7 +738,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(response).to have_gitlab_http_status(:not_found)
       end
 
-      it 'returns confidential issue for project members' do
+      it 'returns confidential issue for project members', :aggregate_failures do
         get api("/projects/#{project.id}/issues/#{confidential_issue.iid}", user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -746,7 +746,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(json_response['iid']).to eq(confidential_issue.iid)
       end
 
-      it 'returns confidential issue for author' do
+      it 'returns confidential issue for author', :aggregate_failures do
         get api("/projects/#{project.id}/issues/#{confidential_issue.iid}", author)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -754,7 +754,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(json_response['iid']).to eq(confidential_issue.iid)
       end
 
-      it 'returns confidential issue for assignee' do
+      it 'returns confidential issue for assignee', :aggregate_failures do
         get api("/projects/#{project.id}/issues/#{confidential_issue.iid}", assignee)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -762,8 +762,8 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(json_response['iid']).to eq(confidential_issue.iid)
       end
 
-      it 'returns confidential issue for admin' do
-        get api("/projects/#{project.id}/issues/#{confidential_issue.iid}", admin)
+      it 'returns confidential issue for admin', :aggregate_failures do
+        get api("/projects/#{project.id}/issues/#{confidential_issue.iid}", admin, admin_mode: true)
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['title']).to eq(confidential_issue.title)
@@ -829,7 +829,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     let!(:related_mr) { create_referencing_mr(user, project, issue) }
 
     context 'when unauthenticated' do
-      it 'return list of referenced merge requests from issue' do
+      it 'return list of referenced merge requests from issue', :aggregate_failures do
         get_related_merge_requests(project.id, issue.iid)
 
         expect_paginated_array_response(related_mr.id)
@@ -898,8 +898,8 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'exposes known attributes' do
-      get api("/projects/#{project.id}/issues/#{issue.iid}/user_agent_detail", admin)
+    it 'exposes known attributes', :aggregate_failures do
+      get api("/projects/#{project.id}/issues/#{issue.iid}/user_agent_detail", admin, admin_mode: true)
 
       expect(response).to have_gitlab_http_status(:ok)
       expect(json_response['user_agent']).to eq(user_agent_detail.user_agent)
@@ -936,7 +936,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         )
       end
 
-      it 'returns a full list of participants' do
+      it 'returns a full list of participants', :aggregate_failures do
         get api("/projects/#{project.id}/issues/#{issue.iid}/participants", user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -945,7 +945,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'when user cannot see a confidential note' do
-        it 'returns a limited list of participants' do
+        it 'returns a limited list of participants', :aggregate_failures do
           get api("/projects/#{project.id}/issues/#{issue.iid}/participants", create(:user))
 
           expect(response).to have_gitlab_http_status(:ok)
diff --git a/spec/requests/api/issues/issues_spec.rb b/spec/requests/api/issues/issues_spec.rb
index 078f00334c3..33f49cefc69 100644
--- a/spec/requests/api/issues/issues_spec.rb
+++ b/spec/requests/api/issues/issues_spec.rb
@@ -78,7 +78,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   shared_examples 'issues statistics' do
-    it 'returns issues statistics' do
+    it 'returns issues statistics', :aggregate_failures do
       get api("/issues_statistics", user), params: params
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -109,8 +109,8 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
       context 'as an admin' do
         context 'when issue exists' do
-          it 'returns the issue' do
-            get api("/issues/#{issue.id}", admin)
+          it 'returns the issue', :aggregate_failures do
+            get api("/issues/#{issue.id}", admin, admin_mode: true)
 
             expect(response).to have_gitlab_http_status(:ok)
             expect(json_response.dig('author', 'id')).to eq(issue.author.id)
@@ -121,7 +121,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
         context 'when issue does not exist' do
           it 'returns 404' do
-            get api("/issues/0", admin)
+            get api("/issues/0", admin, admin_mode: true)
 
             expect(response).to have_gitlab_http_status(:not_found)
           end
@@ -132,7 +132,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
   describe 'GET /issues' do
     context 'when unauthenticated' do
-      it 'returns an array of all issues' do
+      it 'returns an array of all issues', :aggregate_failures do
         get api('/issues'), params: { scope: 'all' }
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -162,14 +162,14 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(response).to have_gitlab_http_status(:unauthorized)
       end
 
-      it 'returns an array of issues matching state in milestone' do
+      it 'returns an array of issues matching state in milestone', :aggregate_failures do
         get api('/issues'), params: { milestone: 'foo', scope: 'all' }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect_paginated_array_response([])
       end
 
-      it 'returns an array of issues matching state in milestone' do
+      it 'returns an array of issues matching state in milestone', :aggregate_failures do
         get api('/issues'), params: { milestone: milestone.title, scope: 'all' }
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -273,7 +273,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when authenticated' do
-      it 'returns an array of issues' do
+      it 'returns an array of issues', :aggregate_failures do
         get api('/issues', user)
 
         expect_paginated_array_response([issue.id, closed_issue.id])
@@ -532,7 +532,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       context 'with incident issues' do
         let_it_be(:incident) { create(:incident, project: project) }
 
-        it 'avoids N+1 queries' do
+        it 'avoids N+1 queries', :aggregate_failures do
           get api('/issues', user) # warm up
 
           control = ActiveRecord::QueryRecorder.new do
@@ -553,7 +553,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       context 'with issues closed as duplicates' do
         let_it_be(:dup_issue_1) { create(:issue, :closed_as_duplicate, project: project) }
 
-        it 'avoids N+1 queries' do
+        it 'avoids N+1 queries', :aggregate_failures do
           get api('/issues', user) # warm up
 
           control = ActiveRecord::QueryRecorder.new do
@@ -639,7 +639,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
           expect_paginated_array_response([])
         end
 
-        it 'returns an array of labeled issues matching given state' do
+        it 'returns an array of labeled issues matching given state', :aggregate_failures do
           get api('/issues', user), params: { labels: label.title, state: :opened }
 
           expect_paginated_array_response(issue.id)
@@ -647,7 +647,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
           expect(json_response.first['state']).to eq('opened')
         end
 
-        it 'returns an array of labeled issues matching given state with labels param as array' do
+        it 'returns an array of labeled issues matching given state with labels param as array', :aggregate_failures do
           get api('/issues', user), params: { labels: [label.title], state: :opened }
 
           expect_paginated_array_response(issue.id)
@@ -917,14 +917,14 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         end
       end
 
-      it 'matches V4 response schema' do
+      it 'matches V4 response schema', :aggregate_failures do
         get api('/issues', user)
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(response).to match_response_schema('public_api/v4/issues')
       end
 
-      it 'returns a related merge request count of 0 if there are no related merge requests' do
+      it 'returns a related merge request count of 0 if there are no related merge requests', :aggregate_failures do
         get api('/issues', user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -932,7 +932,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(json_response.first).to include('merge_requests_count' => 0)
       end
 
-      it 'returns a related merge request count > 0 if there are related merge requests' do
+      it 'returns a related merge request count > 0 if there are related merge requests', :aggregate_failures do
         create(:merge_requests_closing_issues, issue: issue)
 
         get api('/issues', user)
@@ -1013,28 +1013,28 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         let!(:issue2) { create(:issue, author: user2, project: project, created_at: 2.days.ago) }
         let!(:issue3) { create(:issue, author: user2, assignees: [assignee, another_assignee], project: project, created_at: 1.day.ago) }
 
-        it 'returns issues with by assignee_username' do
+        it 'returns issues with by assignee_username', :aggregate_failures do
           get api("/issues", user), params: { assignee_username: [assignee.username], scope: 'all' }
 
           expect(issue3.reload.assignees.pluck(:id)).to match_array([assignee.id, another_assignee.id])
           expect_paginated_array_response([confidential_issue.id, issue3.id])
         end
 
-        it 'returns issues by assignee_username as string' do
+        it 'returns issues by assignee_username as string', :aggregate_failures do
           get api("/issues", user), params: { assignee_username: assignee.username, scope: 'all' }
 
           expect(issue3.reload.assignees.pluck(:id)).to match_array([assignee.id, another_assignee.id])
           expect_paginated_array_response([confidential_issue.id, issue3.id])
         end
 
-        it 'returns error when multiple assignees are passed' do
+        it 'returns error when multiple assignees are passed', :aggregate_failures do
           get api("/issues", user), params: { assignee_username: [assignee.username, another_assignee.username], scope: 'all' }
 
           expect(response).to have_gitlab_http_status(:bad_request)
           expect(json_response["error"]).to include("allows one value, but found 2")
         end
 
-        it 'returns error when assignee_username and assignee_id are passed together' do
+        it 'returns error when assignee_username and assignee_id are passed together', :aggregate_failures do
           get api("/issues", user), params: { assignee_username: [assignee.username], assignee_id: another_assignee.id, scope: 'all' }
 
           expect(response).to have_gitlab_http_status(:bad_request)
@@ -1088,7 +1088,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   describe 'GET /projects/:id/issues/:issue_iid' do
-    it 'exposes full reference path' do
+    it 'exposes full reference path', :aggregate_failures do
       get api("/projects/#{project.id}/issues/#{issue.iid}", user)
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -1106,7 +1106,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'user does not have permission to view new issue' do
-        it 'does not return the issue as closed_as_duplicate_of' do
+        it 'does not return the issue as closed_as_duplicate_of', :aggregate_failures do
           get api("/projects/#{project.id}/issues/#{issue_closed_as_dup.iid}", user)
 
           expect(response).to have_gitlab_http_status(:ok)
@@ -1119,7 +1119,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
           new_issue.project.add_guest(user)
         end
 
-        it 'returns the issue as closed_as_duplicate_of' do
+        it 'returns the issue as closed_as_duplicate_of', :aggregate_failures do
           get api("/projects/#{project.id}/issues/#{issue_closed_as_dup.iid}", user)
 
           expect(response).to have_gitlab_http_status(:ok)
@@ -1131,7 +1131,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   describe "POST /projects/:id/issues" do
-    it 'creates a new project issue' do
+    it 'creates a new project issue', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user), params: { title: 'new issue' }
 
       expect(response).to have_gitlab_http_status(:created)
@@ -1140,7 +1140,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when confidential is null' do
-      it 'responds with 400 error' do
+      it 'responds with 400 error', :aggregate_failures do
         post api("/projects/#{project.id}/issues", user), params: { title: 'issue', confidential: nil }
 
         expect(response).to have_gitlab_http_status(:bad_request)
@@ -1155,7 +1155,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         end
       end
 
-      it 'returns and error message and status code from the service' do
+      it 'returns and error message and status code from the service', :aggregate_failures do
         post api("/projects/#{project.id}/issues", user), params: { title: 'new issue' }
 
         expect(response).to have_gitlab_http_status(:forbidden)
@@ -1177,15 +1177,15 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         travel_to fixed_time
       end
 
-      it 'allows admins to set the timestamp' do
-        put api("/projects/#{project.id}/issues/#{issue.iid}", admin), params: { labels: 'label1', updated_at: updated_at }
+      it 'allows admins to set the timestamp', :aggregate_failures do
+        put api("/projects/#{project.id}/issues/#{issue.iid}", admin, admin_mode: true), params: { labels: 'label1', updated_at: updated_at }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(Time.parse(json_response['updated_at'])).to be_like_time(updated_at)
         expect(ResourceLabelEvent.last.created_at).to be_like_time(updated_at)
       end
 
-      it 'does not allow other users to set the timestamp' do
+      it 'does not allow other users to set the timestamp', :aggregate_failures do
         reporter = create(:user)
         project.add_developer(reporter)
 
@@ -1268,7 +1268,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'with valid params' do
-        it 'reorders issues and returns a successful 200 response' do
+        it 'reorders issues and returns a successful 200 response', :aggregate_failures do
           put api("/projects/#{project.id}/issues/#{issue1.iid}/reorder", user), params: { move_after_id: issue2.id, move_before_id: issue3.id }
 
           expect(response).to have_gitlab_http_status(:ok)
@@ -1295,7 +1295,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         let(:other_project) { create(:project, group: group) }
         let(:other_issue) { create(:issue, project: other_project, relative_position: 80) }
 
-        it 'reorders issues and returns a successful 200 response' do
+        it 'reorders issues and returns a successful 200 response', :aggregate_failures do
           put api("/projects/#{other_project.id}/issues/#{other_issue.iid}/reorder", user), params: { move_after_id: issue2.id, move_before_id: issue3.id }
 
           expect(response).to have_gitlab_http_status(:ok)
diff --git a/spec/requests/api/issues/post_projects_issues_spec.rb b/spec/requests/api/issues/post_projects_issues_spec.rb
index 265091fa698..a17c1389e83 100644
--- a/spec/requests/api/issues/post_projects_issues_spec.rb
+++ b/spec/requests/api/issues/post_projects_issues_spec.rb
@@ -75,7 +75,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
   describe 'POST /projects/:id/issues' do
     context 'support for deprecated assignee_id' do
-      it 'creates a new project issue' do
+      it 'creates a new project issue', :aggregate_failures do
         post api("/projects/#{project.id}/issues", user),
           params: { title: 'new issue', assignee_id: user2.id }
 
@@ -85,7 +85,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(json_response['assignees'].first['name']).to eq(user2.name)
       end
 
-      it 'creates a new project issue when assignee_id is empty' do
+      it 'creates a new project issue when assignee_id is empty', :aggregate_failures do
         post api("/projects/#{project.id}/issues", user),
           params: { title: 'new issue', assignee_id: '' }
 
@@ -96,7 +96,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'single assignee restrictions' do
-      it 'creates a new project issue with no more than one assignee' do
+      it 'creates a new project issue with no more than one assignee', :aggregate_failures do
         post api("/projects/#{project.id}/issues", user),
           params: { title: 'new issue', assignee_ids: [user2.id, guest.id] }
 
@@ -122,8 +122,8 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
     context 'an internal ID is provided' do
       context 'by an admin' do
-        it 'sets the internal ID on the new issue' do
-          post api("/projects/#{project.id}/issues", admin),
+        it 'sets the internal ID on the new issue', :aggregate_failures do
+          post api("/projects/#{project.id}/issues", admin, admin_mode: true),
             params: { title: 'new issue', iid: 9001 }
 
           expect(response).to have_gitlab_http_status(:created)
@@ -132,7 +132,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'by an owner' do
-        it 'sets the internal ID on the new issue' do
+        it 'sets the internal ID on the new issue', :aggregate_failures do
           post api("/projects/#{project.id}/issues", user),
             params: { title: 'new issue', iid: 9001 }
 
@@ -145,7 +145,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         let(:group) { create(:group) }
         let(:group_project) { create(:project, :public, namespace: group) }
 
-        it 'sets the internal ID on the new issue' do
+        it 'sets the internal ID on the new issue', :aggregate_failures do
           group.add_owner(user2)
           post api("/projects/#{group_project.id}/issues", user2),
             params: { title: 'new issue', iid: 9001 }
@@ -156,7 +156,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'by another user' do
-        it 'ignores the given internal ID' do
+        it 'ignores the given internal ID', :aggregate_failures do
           post api("/projects/#{project.id}/issues", user2),
             params: { title: 'new issue', iid: 9001 }
 
@@ -166,8 +166,8 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'when an issue with the same IID exists on database' do
-        it 'returns 409' do
-          post api("/projects/#{project.id}/issues", admin),
+        it 'returns 409', :aggregate_failures do
+          post api("/projects/#{project.id}/issues", admin, admin_mode: true),
             params: { title: 'new issue', iid: issue.iid }
 
           expect(response).to have_gitlab_http_status(:conflict)
@@ -176,7 +176,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'creates a new project issue' do
+    it 'creates a new project issue', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: { title: 'new issue', labels: 'label, label2', weight: 3, assignee_ids: [user2.id] }
 
@@ -189,7 +189,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['assignees'].first['name']).to eq(user2.name)
     end
 
-    it 'creates a new project issue with labels param as array' do
+    it 'creates a new project issue with labels param as array', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: { title: 'new issue', labels: %w(label label2), weight: 3, assignee_ids: [user2.id] }
 
@@ -202,7 +202,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['assignees'].first['name']).to eq(user2.name)
     end
 
-    it 'creates a new confidential project issue' do
+    it 'creates a new confidential project issue', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: { title: 'new issue', confidential: true }
 
@@ -211,7 +211,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['confidential']).to be_truthy
     end
 
-    it 'creates a new confidential project issue with a different param' do
+    it 'creates a new confidential project issue with a different param', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: { title: 'new issue', confidential: 'y' }
 
@@ -220,7 +220,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['confidential']).to be_truthy
     end
 
-    it 'creates a public issue when confidential param is false' do
+    it 'creates a public issue when confidential param is false', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: { title: 'new issue', confidential: false }
 
@@ -229,7 +229,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['confidential']).to be_falsy
     end
 
-    it 'creates a public issue when confidential param is invalid' do
+    it 'creates a public issue when confidential param is invalid', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: { title: 'new issue', confidential: 'foo' }
 
@@ -242,7 +242,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(response).to have_gitlab_http_status(:bad_request)
     end
 
-    it 'allows special label names' do
+    it 'allows special label names', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: {
           title: 'new issue',
@@ -256,7 +256,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['labels']).to include '&'
     end
 
-    it 'allows special label names with labels param as array' do
+    it 'allows special label names with labels param as array', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: {
           title: 'new issue',
@@ -270,7 +270,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['labels']).to include '&'
     end
 
-    it 'returns 400 if title is too long' do
+    it 'returns 400 if title is too long', :aggregate_failures do
       post api("/projects/#{project.id}/issues", user),
         params: { title: 'g' * 256 }
       expect(response).to have_gitlab_http_status(:bad_request)
@@ -313,7 +313,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'with due date' do
-      it 'creates a new project issue' do
+      it 'creates a new project issue', :aggregate_failures do
         due_date = 2.weeks.from_now.strftime('%Y-%m-%d')
 
         post api("/projects/#{project.id}/issues", user),
@@ -336,8 +336,8 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'by an admin' do
-        it 'sets the creation time on the new issue' do
-          post api("/projects/#{project.id}/issues", admin), params: params
+        it 'sets the creation time on the new issue', :aggregate_failures do
+          post api("/projects/#{project.id}/issues", admin, admin_mode: true), params: params
 
           expect(response).to have_gitlab_http_status(:created)
           expect(Time.parse(json_response['created_at'])).to be_like_time(creation_time)
@@ -346,7 +346,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'by a project owner' do
-        it 'sets the creation time on the new issue' do
+        it 'sets the creation time on the new issue', :aggregate_failures do
           post api("/projects/#{project.id}/issues", user), params: params
 
           expect(response).to have_gitlab_http_status(:created)
@@ -356,7 +356,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'by a group owner' do
-        it 'sets the creation time on the new issue' do
+        it 'sets the creation time on the new issue', :aggregate_failures do
           group = create(:group)
           group_project = create(:project, :public, namespace: group)
           group.add_owner(user2)
@@ -370,7 +370,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
 
       context 'by another user' do
-        it 'ignores the given creation time' do
+        it 'ignores the given creation time', :aggregate_failures do
           project.add_developer(user2)
 
           post api("/projects/#{project.id}/issues", user2), params: params
@@ -397,7 +397,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when request exceeds the rate limit' do
-      it 'prevents users from creating more issues' do
+      it 'prevents users from creating more issues', :aggregate_failures do
         allow(::Gitlab::ApplicationRateLimiter).to receive(:throttled?).and_return(true)
 
         post api("/projects/#{project.id}/issues", user),
@@ -437,7 +437,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect { post_issue }.not_to change(Issue, :count)
       end
 
-      it 'returns correct status and message' do
+      it 'returns correct status and message', :aggregate_failures do
         post_issue
 
         expect(response).to have_gitlab_http_status(:bad_request)
@@ -476,7 +476,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     let!(:target_project) { create(:project, creator_id: user.id, namespace: user.namespace) }
     let!(:target_project2) { create(:project, creator_id: non_member.id, namespace: non_member.namespace) }
 
-    it 'moves an issue' do
+    it 'moves an issue', :aggregate_failures do
       post api("/projects/#{project.id}/issues/#{issue.iid}/move", user),
         params: { to_project_id: target_project.id }
 
@@ -485,7 +485,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when source and target projects are the same' do
-      it 'returns 400 when trying to move an issue' do
+      it 'returns 400 when trying to move an issue', :aggregate_failures do
         post api("/projects/#{project.id}/issues/#{issue.iid}/move", user),
           params: { to_project_id: project.id }
 
@@ -495,7 +495,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when the user does not have the permission to move issues' do
-      it 'returns 400 when trying to move an issue' do
+      it 'returns 400 when trying to move an issue', :aggregate_failures do
         post api("/projects/#{project.id}/issues/#{issue.iid}/move", user),
           params: { to_project_id: target_project2.id }
 
@@ -504,8 +504,8 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'moves the issue to another namespace if I am admin' do
-      post api("/projects/#{project.id}/issues/#{issue.iid}/move", admin),
+    it 'moves the issue to another namespace if I am admin', :aggregate_failures do
+      post api("/projects/#{project.id}/issues/#{issue.iid}/move", admin, admin_mode: true),
         params: { to_project_id: target_project2.id }
 
       expect(response).to have_gitlab_http_status(:created)
@@ -513,7 +513,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when using the issue ID instead of iid' do
-      it 'returns 404 when trying to move an issue', quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/341520' do
+      it 'returns 404 when trying to move an issue', :aggregate_failures, quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/341520' do
         post api("/projects/#{project.id}/issues/#{issue.id}/move", user),
           params: { to_project_id: target_project.id }
 
@@ -523,7 +523,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when issue does not exist' do
-      it 'returns 404 when trying to move an issue' do
+      it 'returns 404 when trying to move an issue', :aggregate_failures do
         post api("/projects/#{project.id}/issues/123/move", user),
           params: { to_project_id: target_project.id }
 
@@ -533,7 +533,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when source project does not exist' do
-      it 'returns 404 when trying to move an issue' do
+      it 'returns 404 when trying to move an issue', :aggregate_failures do
         post api("/projects/0/issues/#{issue.iid}/move", user),
           params: { to_project_id: target_project.id }
 
@@ -562,7 +562,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
     context 'when user can admin the issue' do
       context 'when the user can admin the target project' do
-        it 'clones the issue' do
+        it 'clones the issue', :aggregate_failures do
           expect do
             post_clone_issue(user, issue, valid_target_project)
           end.to change { valid_target_project.issues.count }.by(1)
@@ -577,7 +577,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         end
 
         context 'when target project is the same source project' do
-          it 'clones the issue' do
+          it 'clones the issue', :aggregate_failures do
             expect do
               post_clone_issue(user, issue, issue.project)
             end.to change { issue.reset.project.issues.count }.by(1)
@@ -595,7 +595,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when the user does not have the permission to clone issues' do
-      it 'returns 400' do
+      it 'returns 400', :aggregate_failures do
         post api("/projects/#{project.id}/issues/#{issue.iid}/clone", user),
           params: { to_project_id: invalid_target_project.id }
 
@@ -605,7 +605,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when using the issue ID instead of iid' do
-      it 'returns 404', quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/341520' do
+      it 'returns 404', :aggregate_failures, quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/341520' do
         post api("/projects/#{project.id}/issues/#{issue.id}/clone", user),
           params: { to_project_id: valid_target_project.id }
 
@@ -615,7 +615,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when issue does not exist' do
-      it 'returns 404' do
+      it 'returns 404', :aggregate_failures do
         post api("/projects/#{project.id}/issues/12300/clone", user),
           params: { to_project_id: valid_target_project.id }
 
@@ -625,7 +625,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when source project does not exist' do
-      it 'returns 404' do
+      it 'returns 404', :aggregate_failures do
         post api("/projects/0/issues/#{issue.iid}/clone", user),
           params: { to_project_id: valid_target_project.id }
 
@@ -635,7 +635,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     end
 
     context 'when target project does not exist' do
-      it 'returns 404' do
+      it 'returns 404', :aggregate_failures do
         post api("/projects/#{project.id}/issues/#{issue.iid}/clone", user),
           params: { to_project_id: 0 }
 
@@ -644,7 +644,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'clones the issue with notes when with_notes is true' do
+    it 'clones the issue with notes when with_notes is true', :aggregate_failures do
       expect do
         post api("/projects/#{project.id}/issues/#{issue.iid}/clone", user),
           params: { to_project_id: valid_target_project.id, with_notes: true }
@@ -661,7 +661,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   describe 'POST :id/issues/:issue_iid/subscribe' do
-    it 'subscribes to an issue' do
+    it 'subscribes to an issue', :aggregate_failures do
       post api("/projects/#{project.id}/issues/#{issue.iid}/subscribe", user2)
 
       expect(response).to have_gitlab_http_status(:created)
@@ -694,7 +694,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   describe 'POST :id/issues/:issue_id/unsubscribe' do
-    it 'unsubscribes from an issue' do
+    it 'unsubscribes from an issue', :aggregate_failures do
       post api("/projects/#{project.id}/issues/#{issue.iid}/unsubscribe", user)
 
       expect(response).to have_gitlab_http_status(:created)
diff --git a/spec/requests/api/issues/put_projects_issues_spec.rb b/spec/requests/api/issues/put_projects_issues_spec.rb
index f0d174c9e78..6cc639c0bcc 100644
--- a/spec/requests/api/issues/put_projects_issues_spec.rb
+++ b/spec/requests/api/issues/put_projects_issues_spec.rb
@@ -80,7 +80,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   describe 'PUT /projects/:id/issues/:issue_iid to update only title' do
-    it 'updates a project issue' do
+    it 'updates a project issue', :aggregate_failures do
       put api_for_user, params: { title: updated_title }
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -109,7 +109,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(response).to have_gitlab_http_status(:ok)
     end
 
-    it 'allows special label names with labels param as array' do
+    it 'allows special label names with labels param as array', :aggregate_failures do
       put api_for_user,
         params: {
           title: updated_title,
@@ -135,42 +135,42 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(response).to have_gitlab_http_status(:forbidden)
       end
 
-      it 'updates a confidential issue for project members' do
+      it 'updates a confidential issue for project members', :aggregate_failures do
         put api(confidential_issue_path, user), params: { title: updated_title }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['title']).to eq(updated_title)
       end
 
-      it 'updates a confidential issue for author' do
+      it 'updates a confidential issue for author', :aggregate_failures do
         put api(confidential_issue_path, author), params: { title: updated_title }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['title']).to eq(updated_title)
       end
 
-      it 'updates a confidential issue for admin' do
-        put api(confidential_issue_path, admin), params: { title: updated_title }
+      it 'updates a confidential issue for admin', :aggregate_failures do
+        put api(confidential_issue_path, admin, admin_mode: true), params: { title: updated_title }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['title']).to eq(updated_title)
       end
 
-      it 'sets an issue to confidential' do
+      it 'sets an issue to confidential', :aggregate_failures do
         put api_for_user, params: { confidential: true }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['confidential']).to be_truthy
       end
 
-      it 'makes a confidential issue public' do
+      it 'makes a confidential issue public', :aggregate_failures do
         put api(confidential_issue_path, user), params: { confidential: false }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['confidential']).to be_falsy
       end
 
-      it 'does not update a confidential issue with wrong confidential flag' do
+      it 'does not update a confidential issue with wrong confidential flag', :aggregate_failures do
         put api(confidential_issue_path, user), params: { confidential: 'foo' }
 
         expect(response).to have_gitlab_http_status(:bad_request)
@@ -209,7 +209,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect { update_issue }.not_to change { issue.reload.title }
       end
 
-      it 'returns correct status and message' do
+      it 'returns correct status and message', :aggregate_failures do
         update_issue
 
         expect(response).to have_gitlab_http_status(:bad_request)
@@ -246,14 +246,14 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
   describe 'PUT /projects/:id/issues/:issue_iid to update assignee' do
     context 'support for deprecated assignee_id' do
-      it 'removes assignee' do
+      it 'removes assignee', :aggregate_failures do
         put api_for_user, params: { assignee_id: 0 }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['assignee']).to be_nil
       end
 
-      it 'updates an issue with new assignee' do
+      it 'updates an issue with new assignee', :aggregate_failures do
         put api_for_user, params: { assignee_id: user2.id }
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -261,21 +261,21 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'removes assignee' do
+    it 'removes assignee', :aggregate_failures do
       put api_for_user, params: { assignee_ids: [0] }
 
       expect(response).to have_gitlab_http_status(:ok)
       expect(json_response['assignees']).to be_empty
     end
 
-    it 'updates an issue with new assignee' do
+    it 'updates an issue with new assignee', :aggregate_failures do
       put api_for_user, params: { assignee_ids: [user2.id] }
 
       expect(response).to have_gitlab_http_status(:ok)
       expect(json_response['assignees'].first['name']).to eq(user2.name)
     end
 
-    context 'single assignee restrictions' do
+    context 'single assignee restrictions', :aggregate_failures do
       it 'updates an issue with several assignees but only one has been applied' do
         put api_for_user, params: { assignee_ids: [user2.id, guest.id] }
 
@@ -289,7 +289,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
     let!(:label) { create(:label, title: 'dummy', project: project) }
     let!(:label_link) { create(:label_link, label: label, target: issue) }
 
-    it 'adds relevant labels' do
+    it 'adds relevant labels', :aggregate_failures do
       put api_for_user, params: { add_labels: '1, 2' }
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -300,14 +300,14 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       let!(:label2) { create(:label, title: 'a-label', project: project) }
       let!(:label_link2) { create(:label_link, label: label2, target: issue) }
 
-      it 'removes relevant labels' do
+      it 'removes relevant labels', :aggregate_failures do
         put api_for_user, params: { remove_labels: label2.title }
 
         expect(response).to have_gitlab_http_status(:ok)
         expect(json_response['labels']).to eq([label.title])
       end
 
-      it 'removes all labels' do
+      it 'removes all labels', :aggregate_failures do
         put api_for_user, params: { remove_labels: "#{label.title}, #{label2.title}" }
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -315,14 +315,14 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       end
     end
 
-    it 'does not update labels if not present' do
+    it 'does not update labels if not present', :aggregate_failures do
       put api_for_user, params: { title: updated_title }
 
       expect(response).to have_gitlab_http_status(:ok)
       expect(json_response['labels']).to eq([label.title])
     end
 
-    it 'removes all labels and touches the record' do
+    it 'removes all labels and touches the record', :aggregate_failures do
       travel_to(2.minutes.from_now) do
         put api_for_user, params: { labels: '' }
       end
@@ -332,7 +332,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['updated_at']).to be > Time.current
     end
 
-    it 'removes all labels and touches the record with labels param as array' do
+    it 'removes all labels and touches the record with labels param as array', :aggregate_failures do
       travel_to(2.minutes.from_now) do
         put api_for_user, params: { labels: [''] }
       end
@@ -342,7 +342,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['updated_at']).to be > Time.current
     end
 
-    it 'updates labels and touches the record' do
+    it 'updates labels and touches the record', :aggregate_failures do
       travel_to(2.minutes.from_now) do
         put api_for_user, params: { labels: 'foo,bar' }
       end
@@ -352,7 +352,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['updated_at']).to be > Time.current
     end
 
-    it 'updates labels and touches the record with labels param as array' do
+    it 'updates labels and touches the record with labels param as array', :aggregate_failures do
       travel_to(2.minutes.from_now) do
         put api_for_user, params: { labels: %w(foo bar) }
       end
@@ -363,21 +363,21 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['updated_at']).to be > Time.current
     end
 
-    it 'allows special label names' do
+    it 'allows special label names', :aggregate_failures do
       put api_for_user, params: { labels: 'label:foo, label-bar,label_bar,label/bar,label?bar,label&bar,?,&' }
 
       expect(response).to have_gitlab_http_status(:ok)
       expect(json_response['labels']).to contain_exactly('label:foo', 'label-bar', 'label_bar', 'label/bar', 'label?bar', 'label&bar', '?', '&')
     end
 
-    it 'allows special label names with labels param as array' do
+    it 'allows special label names with labels param as array', :aggregate_failures do
       put api_for_user, params: { labels: ['label:foo', 'label-bar', 'label_bar', 'label/bar,label?bar,label&bar,?,&'] }
 
       expect(response).to have_gitlab_http_status(:ok)
       expect(json_response['labels']).to contain_exactly('label:foo', 'label-bar', 'label_bar', 'label/bar', 'label?bar', 'label&bar', '?', '&')
     end
 
-    it 'returns 400 if title is too long' do
+    it 'returns 400 if title is too long', :aggregate_failures do
       put api_for_user, params: { title: 'g' * 256 }
 
       expect(response).to have_gitlab_http_status(:bad_request)
@@ -386,7 +386,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   describe 'PUT /projects/:id/issues/:issue_iid to update state and label' do
-    it 'updates a project issue' do
+    it 'updates a project issue', :aggregate_failures do
       put api_for_user, params: { labels: 'label2', state_event: 'close' }
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -394,7 +394,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
       expect(json_response['state']).to eq 'closed'
     end
 
-    it 'reopens a project isssue' do
+    it 'reopens a project isssue', :aggregate_failures do
       put api(issue_path, user), params: { state_event: 'reopen' }
 
       expect(response).to have_gitlab_http_status(:ok)
@@ -404,7 +404,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
 
   describe 'PUT /projects/:id/issues/:issue_iid to update updated_at param' do
     context 'when reporter makes request' do
-      it 'accepts the update date to be set' do
+      it 'accepts the update date to be set', :aggregate_failures do
         update_time = 2.weeks.ago
 
         put api_for_user, params: { title: 'some new title', updated_at: update_time }
@@ -436,7 +436,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
         expect(response).to have_gitlab_http_status(:bad_request)
       end
 
-      it 'accepts the update date to be set' do
+      it 'accepts the update date to be set', :aggregate_failures do
         update_time = 2.weeks.ago
         put api_for_owner, params: { title: 'some new title', updated_at: update_time }
 
@@ -448,7 +448,7 @@ RSpec.describe API::Issues, feature_category: :team_planning do
   end
 
   describe 'PUT /projects/:id/issues/:issue_iid to update due date' do
-    it 'creates a new project issue' do
+    it 'creates a new project issue', :aggregate_failures do
       due_date = 2.weeks.from_now.strftime('%Y-%m-%d')
 
       put api_for_user, params: { due_date: due_date }
diff --git a/spec/requests/api/pages/internal_access_spec.rb b/spec/requests/api/pages/internal_access_spec.rb
index fdc25ecdcd3..3e7837866ae 100644
--- a/spec/requests/api/pages/internal_access_spec.rb
+++ b/spec/requests/api/pages/internal_access_spec.rb
@@ -35,39 +35,39 @@ RSpec.describe "Internal Project Pages Access", feature_category: :pages do
 
   describe "GET /projects/:id/pages_access" do
     context 'access depends on the level' do
-      where(:pages_access_level, :with_user, :expected_result) do
-        ProjectFeature::DISABLED   |   "admin"     |  403
-        ProjectFeature::DISABLED   |   "owner"     |  403
-        ProjectFeature::DISABLED   |   "master"    |  403
-        ProjectFeature::DISABLED   |   "developer" |  403
-        ProjectFeature::DISABLED   |   "reporter"  |  403
-        ProjectFeature::DISABLED   |   "guest"     |  403
-        ProjectFeature::DISABLED   |   "user"      |  403
-        ProjectFeature::DISABLED   |   nil         |  404
-        ProjectFeature::PUBLIC     |   "admin"     |  200
-        ProjectFeature::PUBLIC     |   "owner"     |  200
-        ProjectFeature::PUBLIC     |   "master"    |  200
-        ProjectFeature::PUBLIC     |   "developer" |  200
-        ProjectFeature::PUBLIC     |   "reporter"  |  200
-        ProjectFeature::PUBLIC     |   "guest"     |  200
-        ProjectFeature::PUBLIC     |   "user"      |  200
-        ProjectFeature::PUBLIC     |   nil         |  404
-        ProjectFeature::ENABLED    |   "admin"     |  200
-        ProjectFeature::ENABLED    |   "owner"     |  200
-        ProjectFeature::ENABLED    |   "master"    |  200
-        ProjectFeature::ENABLED    |   "developer" |  200
-        ProjectFeature::ENABLED    |   "reporter"  |  200
-        ProjectFeature::ENABLED    |   "guest"     |  200
-        ProjectFeature::ENABLED    |   "user"      |  200
-        ProjectFeature::ENABLED    |   nil         |  404
-        ProjectFeature::PRIVATE    |   "admin"     |  200
-        ProjectFeature::PRIVATE    |   "owner"     |  200
-        ProjectFeature::PRIVATE    |   "master"    |  200
-        ProjectFeature::PRIVATE    |   "developer" |  200
-        ProjectFeature::PRIVATE    |   "reporter"  |  200
-        ProjectFeature::PRIVATE    |   "guest"     |  200
-        ProjectFeature::PRIVATE    |   "user"      |  403
-        ProjectFeature::PRIVATE    |   nil         |  404
+      where(:pages_access_level, :with_user, :admin_mode, :expected_result) do
+        ProjectFeature::DISABLED   |   "admin"     | true  |  403
+        ProjectFeature::DISABLED   |   "owner"     | false |  403
+        ProjectFeature::DISABLED   |   "master"    | false |  403
+        ProjectFeature::DISABLED   |   "developer" | false |  403
+        ProjectFeature::DISABLED   |   "reporter"  | false |  403
+        ProjectFeature::DISABLED   |   "guest"     | false |  403
+        ProjectFeature::DISABLED   |   "user"      | false |  403
+        ProjectFeature::DISABLED   |   nil         | false |  404
+        ProjectFeature::PUBLIC     |   "admin"     | false |  200
+        ProjectFeature::PUBLIC     |   "owner"     | false |  200
+        ProjectFeature::PUBLIC     |   "master"    | false |  200
+        ProjectFeature::PUBLIC     |   "developer" | false |  200
+        ProjectFeature::PUBLIC     |   "reporter"  | false |  200
+        ProjectFeature::PUBLIC     |   "guest"     | false |  200
+        ProjectFeature::PUBLIC     |   "user"      | false |  200
+        ProjectFeature::PUBLIC     |   nil         | false |  404
+        ProjectFeature::ENABLED    |   "admin"     | false |  200
+        ProjectFeature::ENABLED    |   "owner"     | false |  200
+        ProjectFeature::ENABLED    |   "master"    | false |  200
+        ProjectFeature::ENABLED    |   "developer" | false |  200
+        ProjectFeature::ENABLED    |   "reporter"  | false |  200
+        ProjectFeature::ENABLED    |   "guest"     | false |  200
+        ProjectFeature::ENABLED    |   "user"      | false |  200
+        ProjectFeature::ENABLED    |   nil         | false |  404
+        ProjectFeature::PRIVATE    |   "admin"     | true  |  200
+        ProjectFeature::PRIVATE    |   "owner"     | false |  200
+        ProjectFeature::PRIVATE    |   "master"    | false |  200
+        ProjectFeature::PRIVATE    |   "developer" | false |  200
+        ProjectFeature::PRIVATE    |   "reporter"  | false |  200
+        ProjectFeature::PRIVATE    |   "guest"     | false |  200
+        ProjectFeature::PRIVATE    |   "user"      | false |  403
+        ProjectFeature::PRIVATE    |   nil         | false |  404
       end
 
       with_them do
@@ -77,7 +77,7 @@ RSpec.describe "Internal Project Pages Access", feature_category: :pages do
         it "correct return value" do
           if !with_user.nil?
             user = public_send(with_user)
-            get api("/projects/#{project.id}/pages_access", user)
+            get api("/projects/#{project.id}/pages_access", user, admin_mode: admin_mode)
           else
             get api("/projects/#{project.id}/pages_access")
           end
diff --git a/spec/requests/api/pages/pages_spec.rb b/spec/requests/api/pages/pages_spec.rb
index c426f2a433c..0f6675799ad 100644
--- a/spec/requests/api/pages/pages_spec.rb
+++ b/spec/requests/api/pages/pages_spec.rb
@@ -3,7 +3,7 @@
 require 'spec_helper'
 
 RSpec.describe API::Pages, feature_category: :pages do
-  let_it_be(:project) { create(:project, path: 'my.project', pages_https_only: false) }
+  let_it_be_with_reload(:project) { create(:project, path: 'my.project', pages_https_only: false) }
   let_it_be(:admin) { create(:admin) }
   let_it_be(:user) { create(:user) }
 
@@ -19,7 +19,7 @@ RSpec.describe API::Pages, feature_category: :pages do
       end
 
       it_behaves_like '404 response' do
-        let(:request) { delete api("/projects/#{project.id}/pages", admin) }
+        let(:request) { delete api("/projects/#{project.id}/pages", admin, admin_mode: true) }
       end
     end
 
@@ -30,13 +30,13 @@ RSpec.describe API::Pages, feature_category: :pages do
 
       context 'when Pages are deployed' do
         it 'returns 204' do
-          delete api("/projects/#{project.id}/pages", admin)
+          delete api("/projects/#{project.id}/pages", admin, admin_mode: true)
 
           expect(response).to have_gitlab_http_status(:no_content)
         end
 
         it 'removes the pages' do
-          delete api("/projects/#{project.id}/pages", admin)
+          delete api("/projects/#{project.id}/pages", admin, admin_mode: true)
 
           expect(project.reload.pages_metadatum.deployed?).to be(false)
         end
@@ -48,7 +48,7 @@ RSpec.describe API::Pages, feature_category: :pages do
         end
 
         it 'returns 204' do
-          delete api("/projects/#{project.id}/pages", admin)
+          delete api("/projects/#{project.id}/pages", admin, admin_mode: true)
 
           expect(response).to have_gitlab_http_status(:no_content)
         end
@@ -58,7 +58,7 @@ RSpec.describe API::Pages, feature_category: :pages do
         it 'returns 404' do
           id = -1
 
-          delete api("/projects/#{id}/pages", admin)
+          delete api("/projects/#{id}/pages", admin, admin_mode: true)
 
           expect(response).to have_gitlab_http_status(:not_found)
         end
diff --git a/spec/requests/api/pages/private_access_spec.rb b/spec/requests/api/pages/private_access_spec.rb
index 5cc1b8f9a69..602eff73b0a 100644
--- a/spec/requests/api/pages/private_access_spec.rb
+++ b/spec/requests/api/pages/private_access_spec.rb
@@ -35,39 +35,39 @@ RSpec.describe "Private Project Pages Access", feature_category: :pages do
 
   describe "GET /projects/:id/pages_access" do
     context 'access depends on the level' do
-      where(:pages_access_level, :with_user, :expected_result) do
-        ProjectFeature::DISABLED   |   "admin"     |  403
-        ProjectFeature::DISABLED   |   "owner"     |  403
-        ProjectFeature::DISABLED   |   "master"    |  403
-        ProjectFeature::DISABLED   |   "developer" |  403
-        ProjectFeature::DISABLED   |   "reporter"  |  403
-        ProjectFeature::DISABLED   |   "guest"     |  403
-        ProjectFeature::DISABLED   |   "user"      |  404
-        ProjectFeature::DISABLED   |   nil         |  404
-        ProjectFeature::PUBLIC     |   "admin"     |  200
-        ProjectFeature::PUBLIC     |   "owner"     |  200
-        ProjectFeature::PUBLIC     |   "master"    |  200
-        ProjectFeature::PUBLIC     |   "developer" |  200
-        ProjectFeature::PUBLIC     |   "reporter"  |  200
-        ProjectFeature::PUBLIC     |   "guest"     |  200
-        ProjectFeature::PUBLIC     |   "user"      |  404
-        ProjectFeature::PUBLIC     |   nil         |  404
-        ProjectFeature::ENABLED    |   "admin"     |  200
-        ProjectFeature::ENABLED    |   "owner"     |  200
-        ProjectFeature::ENABLED    |   "master"    |  200
-        ProjectFeature::ENABLED    |   "developer" |  200
-        ProjectFeature::ENABLED    |   "reporter"  |  200
-        ProjectFeature::ENABLED    |   "guest"     |  200
-        ProjectFeature::ENABLED    |   "user"      |  404
-        ProjectFeature::ENABLED    |   nil         |  404
-        ProjectFeature::PRIVATE    |   "admin"     |  200
-        ProjectFeature::PRIVATE    |   "owner"     |  200
-        ProjectFeature::PRIVATE    |   "master"    |  200
-        ProjectFeature::PRIVATE    |   "developer" |  200
-        ProjectFeature::PRIVATE    |   "reporter"  |  200
-        ProjectFeature::PRIVATE    |   "guest"     |  200
-        ProjectFeature::PRIVATE    |   "user"      |  404
-        ProjectFeature::PRIVATE    |   nil         |  404
+      where(:pages_access_level, :with_user, :admin_mode, :expected_result) do
+        ProjectFeature::DISABLED   |   "admin"     | true  |  403
+        ProjectFeature::DISABLED   |   "owner"     | false |  403
+        ProjectFeature::DISABLED   |   "master"    | false |  403
+        ProjectFeature::DISABLED   |   "developer" | false |  403
+        ProjectFeature::DISABLED   |   "reporter"  | false |  403
+        ProjectFeature::DISABLED   |   "guest"     | false |  403
+        ProjectFeature::DISABLED   |   "user"      | false |  404
+        ProjectFeature::DISABLED   |   nil         | false |  404
+        ProjectFeature::PUBLIC     |   "admin"     | true  |  200
+        ProjectFeature::PUBLIC     |   "owner"     | false |  200
+        ProjectFeature::PUBLIC     |   "master"    | false |  200
+        ProjectFeature::PUBLIC     |   "developer" | false |  200
+        ProjectFeature::PUBLIC     |   "reporter"  | false |  200
+        ProjectFeature::PUBLIC     |   "guest"     | false |  200
+        ProjectFeature::PUBLIC     |   "user"      | false |  404
+        ProjectFeature::PUBLIC     |   nil         | false |  404
+        ProjectFeature::ENABLED    |   "admin"     | true  |  200
+        ProjectFeature::ENABLED    |   "owner"     | false |  200
+        ProjectFeature::ENABLED    |   "master"    | false |  200
+        ProjectFeature::ENABLED    |   "developer" | false |  200
+        ProjectFeature::ENABLED    |   "reporter"  | false |  200
+        ProjectFeature::ENABLED    |   "guest"     | false |  200
+        ProjectFeature::ENABLED    |   "user"      | false |  404
+        ProjectFeature::ENABLED    |   nil         | false |  404
+        ProjectFeature::PRIVATE    |   "admin"     | true  |  200
+        ProjectFeature::PRIVATE    |   "owner"     | false |  200
+        ProjectFeature::PRIVATE    |   "master"    | false |  200
+        ProjectFeature::PRIVATE    |   "developer" | false |  200
+        ProjectFeature::PRIVATE    |   "reporter"  | false |  200
+        ProjectFeature::PRIVATE    |   "guest"     | false |  200
+        ProjectFeature::PRIVATE    |   "user"      | false |  404
+        ProjectFeature::PRIVATE    |   nil         | false |  404
       end
 
       with_them do
@@ -77,7 +77,7 @@ RSpec.describe "Private Project Pages Access", feature_category: :pages do
         it "correct return value" do
           if !with_user.nil?
             user = public_send(with_user)
-            get api("/projects/#{project.id}/pages_access", user)
+            get api("/projects/#{project.id}/pages_access", user, admin_mode: admin_mode)
           else
             get api("/projects/#{project.id}/pages_access")
           end
diff --git a/spec/requests/api/pages/public_access_spec.rb b/spec/requests/api/pages/public_access_spec.rb
index 1137f91f4b0..8b0ed7c59ab 100644
--- a/spec/requests/api/pages/public_access_spec.rb
+++ b/spec/requests/api/pages/public_access_spec.rb
@@ -35,39 +35,39 @@ RSpec.describe "Public Project Pages Access", feature_category: :pages do
 
   describe "GET /projects/:id/pages_access" do
     context 'access depends on the level' do
-      where(:pages_access_level, :with_user, :expected_result) do
-        ProjectFeature::DISABLED   |   "admin"     |  403
-        ProjectFeature::DISABLED   |   "owner"     |  403
-        ProjectFeature::DISABLED   |   "master"    |  403
-        ProjectFeature::DISABLED   |   "developer" |  403
-        ProjectFeature::DISABLED   |   "reporter"  |  403
-        ProjectFeature::DISABLED   |   "guest"     |  403
-        ProjectFeature::DISABLED   |   "user"      |  403
-        ProjectFeature::DISABLED   |   nil         |  403
-        ProjectFeature::PUBLIC     |   "admin"     |  200
-        ProjectFeature::PUBLIC     |   "owner"     |  200
-        ProjectFeature::PUBLIC     |   "master"    |  200
-        ProjectFeature::PUBLIC     |   "developer" |  200
-        ProjectFeature::PUBLIC     |   "reporter"  |  200
-        ProjectFeature::PUBLIC     |   "guest"     |  200
-        ProjectFeature::PUBLIC     |   "user"      |  200
-        ProjectFeature::PUBLIC     |   nil         |  200
-        ProjectFeature::ENABLED    |   "admin"     |  200
-        ProjectFeature::ENABLED    |   "owner"     |  200
-        ProjectFeature::ENABLED    |   "master"    |  200
-        ProjectFeature::ENABLED    |   "developer" |  200
-        ProjectFeature::ENABLED    |   "reporter"  |  200
-        ProjectFeature::ENABLED    |   "guest"     |  200
-        ProjectFeature::ENABLED    |   "user"      |  200
-        ProjectFeature::ENABLED    |   nil         |  200
-        ProjectFeature::PRIVATE    |   "admin"     |  200
-        ProjectFeature::PRIVATE    |   "owner"     |  200
-        ProjectFeature::PRIVATE    |   "master"    |  200
-        ProjectFeature::PRIVATE    |   "developer" |  200
-        ProjectFeature::PRIVATE    |   "reporter"  |  200
-        ProjectFeature::PRIVATE    |   "guest"     |  200
-        ProjectFeature::PRIVATE    |   "user"      |  403
-        ProjectFeature::PRIVATE    |   nil         |  403
+      where(:pages_access_level, :with_user, :admin_mode, :expected_result) do
+        ProjectFeature::DISABLED   |   "admin"     | false |  403
+        ProjectFeature::DISABLED   |   "owner"     | false |  403
+        ProjectFeature::DISABLED   |   "master"    | false |  403
+        ProjectFeature::DISABLED   |   "developer" | false |  403
+        ProjectFeature::DISABLED   |   "reporter"  | false |  403
+        ProjectFeature::DISABLED   |   "guest"     | false |  403
+        ProjectFeature::DISABLED   |   "user"      | false |  403
+        ProjectFeature::DISABLED   |   nil         | false |  403
+        ProjectFeature::PUBLIC     |   "admin"     | false |  200
+        ProjectFeature::PUBLIC     |   "owner"     | false |  200
+        ProjectFeature::PUBLIC     |   "master"    | false |  200
+        ProjectFeature::PUBLIC     |   "developer" | false |  200
+        ProjectFeature::PUBLIC     |   "reporter"  | false |  200
+        ProjectFeature::PUBLIC     |   "guest"     | false |  200
+        ProjectFeature::PUBLIC     |   "user"      | false |  200
+        ProjectFeature::PUBLIC     |   nil         | false |  200
+        ProjectFeature::ENABLED    |   "admin"     | false |  200
+        ProjectFeature::ENABLED    |   "owner"     | false |  200
+        ProjectFeature::ENABLED    |   "master"    | false |  200
+        ProjectFeature::ENABLED    |   "developer" | false |  200
+        ProjectFeature::ENABLED    |   "reporter"  | false |  200
+        ProjectFeature::ENABLED    |   "guest"     | false |  200
+        ProjectFeature::ENABLED    |   "user"      | false |  200
+        ProjectFeature::ENABLED    |   nil         | false |  200
+        ProjectFeature::PRIVATE    |   "admin"     | true  |  200
+        ProjectFeature::PRIVATE    |   "owner"     | false |  200
+        ProjectFeature::PRIVATE    |   "master"    | false |  200
+        ProjectFeature::PRIVATE    |   "developer" | false |  200
+        ProjectFeature::PRIVATE    |   "reporter"  | false |  200
+        ProjectFeature::PRIVATE    |   "guest"     | false |  200
+        ProjectFeature::PRIVATE    |   "user"      | false |  403
+        ProjectFeature::PRIVATE    |   nil         | false |  403
       end
 
       with_them do
@@ -77,7 +77,7 @@ RSpec.describe "Public Project Pages Access", feature_category: :pages do
         it "correct return value" do
           if !with_user.nil?
             user = public_send(with_user)
-            get api("/projects/#{project.id}/pages_access", user)
+            get api("/projects/#{project.id}/pages_access", user, admin_mode: admin_mode)
           else
             get api("/projects/#{project.id}/pages_access")
           end
diff --git a/spec/requests/api/pages_domains_spec.rb b/spec/requests/api/pages_domains_spec.rb
index ba1fb5105b8..ea83fa384af 100644
--- a/spec/requests/api/pages_domains_spec.rb
+++ b/spec/requests/api/pages_domains_spec.rb
@@ -41,14 +41,14 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
       end
 
       it_behaves_like '404 response' do
-        let(:request) { get api('/pages/domains', admin) }
+        let(:request) { get api('/pages/domains', admin, admin_mode: true) }
       end
     end
 
     context 'when pages is enabled' do
       context 'when authenticated as an admin' do
-        it 'returns paginated all pages domains' do
-          get api('/pages/domains', admin)
+        it 'returns paginated all pages domains', :aggregate_failures do
+          get api('/pages/domains', admin, admin_mode: true)
 
           expect(response).to have_gitlab_http_status(:ok)
           expect(response).to match_response_schema('public_api/v4/pages_domain_basics')
@@ -74,7 +74,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
 
   describe 'GET /projects/:project_id/pages/domains' do
     shared_examples_for 'get pages domains' do
-      it 'returns paginated pages domains' do
+      it 'returns paginated pages domains', :aggregate_failures do
         get api(route, user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -145,7 +145,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
 
   describe 'GET /projects/:project_id/pages/domains/:domain' do
     shared_examples_for 'get pages domain' do
-      it 'returns pages domain' do
+      it 'returns pages domain', :aggregate_failures do
         get api(route_domain, user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -155,7 +155,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(json_response['certificate']).to be_nil
       end
 
-      it 'returns pages domain with project path' do
+      it 'returns pages domain with project path', :aggregate_failures do
         get api(route_domain_path, user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -165,7 +165,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(json_response['certificate']).to be_nil
       end
 
-      it 'returns pages domain with a certificate' do
+      it 'returns pages domain with a certificate', :aggregate_failures do
         get api(route_secure_domain, user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -177,7 +177,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(json_response['auto_ssl_enabled']).to be false
       end
 
-      it 'returns pages domain with an expired certificate' do
+      it 'returns pages domain with an expired certificate', :aggregate_failures do
         get api(route_expired_domain, user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -185,7 +185,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(json_response['certificate']['expired']).to be true
       end
 
-      it 'returns pages domain with letsencrypt' do
+      it 'returns pages domain with letsencrypt', :aggregate_failures do
         get api(route_letsencrypt_domain, user)
 
         expect(response).to have_gitlab_http_status(:ok)
@@ -258,7 +258,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
     let(:params_secure) { pages_domain_secure_params.slice(:domain, :certificate, :key) }
 
     shared_examples_for 'post pages domains' do
-      it 'creates a new pages domain' do
+      it 'creates a new pages domain', :aggregate_failures do
         expect { post api(route, user), params: params }
           .to publish_event(PagesDomains::PagesDomainCreatedEvent)
           .with(
@@ -279,7 +279,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain.auto_ssl_enabled).to be false
       end
 
-      it 'creates a new secure pages domain' do
+      it 'creates a new secure pages domain', :aggregate_failures do
         post api(route, user), params: params_secure
         pages_domain = PagesDomain.find_by(domain: json_response['domain'])
 
@@ -291,7 +291,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain.auto_ssl_enabled).to be false
       end
 
-      it 'creates domain with letsencrypt enabled' do
+      it 'creates domain with letsencrypt enabled', :aggregate_failures do
         post api(route, user), params: pages_domain_with_letsencrypt_params
         pages_domain = PagesDomain.find_by(domain: json_response['domain'])
 
@@ -301,7 +301,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain.auto_ssl_enabled).to be true
       end
 
-      it 'creates domain with letsencrypt enabled and provided certificate' do
+      it 'creates domain with letsencrypt enabled and provided certificate', :aggregate_failures do
         post api(route, user), params: params_secure.merge(auto_ssl_enabled: true)
         pages_domain = PagesDomain.find_by(domain: json_response['domain'])
 
@@ -376,7 +376,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
     let(:params_secure_nokey) { pages_domain_secure_params.slice(:certificate) }
 
     shared_examples_for 'put pages domain' do
-      it 'updates pages domain removing certificate' do
+      it 'updates pages domain removing certificate', :aggregate_failures do
         put api(route_secure_domain, user), params: { certificate: nil, key: nil }
         pages_domain_secure.reload
 
@@ -399,7 +399,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
           )
       end
 
-      it 'updates pages domain adding certificate' do
+      it 'updates pages domain adding certificate', :aggregate_failures do
         put api(route_domain, user), params: params_secure
         pages_domain.reload
 
@@ -409,7 +409,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain.key).to eq(params_secure[:key])
       end
 
-      it 'updates pages domain adding certificate with letsencrypt' do
+      it 'updates pages domain adding certificate with letsencrypt', :aggregate_failures do
         put api(route_domain, user), params: params_secure.merge(auto_ssl_enabled: true)
         pages_domain.reload
 
@@ -420,7 +420,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain.auto_ssl_enabled).to be true
       end
 
-      it 'updates pages domain enabling letsencrypt' do
+      it 'updates pages domain enabling letsencrypt', :aggregate_failures do
         put api(route_domain, user), params: { auto_ssl_enabled: true }
         pages_domain.reload
 
@@ -429,7 +429,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain.auto_ssl_enabled).to be true
       end
 
-      it 'updates pages domain disabling letsencrypt while preserving the certificate' do
+      it 'updates pages domain disabling letsencrypt while preserving the certificate', :aggregate_failures do
         put api(route_letsencrypt_domain, user), params: { auto_ssl_enabled: false }
         pages_domain_with_letsencrypt.reload
 
@@ -440,7 +440,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain_with_letsencrypt.certificate).to be
       end
 
-      it 'updates pages domain with expired certificate' do
+      it 'updates pages domain with expired certificate', :aggregate_failures do
         put api(route_expired_domain, user), params: params_secure
         pages_domain_expired.reload
 
@@ -450,7 +450,7 @@ RSpec.describe API::PagesDomains, feature_category: :pages do
         expect(pages_domain_expired.key).to eq(params_secure[:key])
       end
 
-      it 'updates pages domain with expired certificate not updating key' do
+      it 'updates pages domain with expired certificate not updating key', :aggregate_failures do
         put api(route_secure_domain, user), params: params_secure_nokey
         pages_domain_secure.reload
 
diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb
index 44564224193..38e622714e0 100644
--- a/spec/spec_helper.rb
+++ b/spec/spec_helper.rb
@@ -362,20 +362,10 @@ RSpec.configure do |config|
       ./spec/requests/api/deploy_tokens_spec.rb
       ./spec/requests/api/freeze_periods_spec.rb
       ./spec/requests/api/groups_spec.rb
-      ./spec/requests/api/issues/get_group_issues_spec.rb
-      ./spec/requests/api/issues/get_project_issues_spec.rb
-      ./spec/requests/api/issues/issues_spec.rb
-      ./spec/requests/api/issues/post_projects_issues_spec.rb
-      ./spec/requests/api/issues/put_projects_issues_spec.rb
       ./spec/requests/api/keys_spec.rb
       ./spec/requests/api/merge_requests_spec.rb
       ./spec/requests/api/namespaces_spec.rb
       ./spec/requests/api/notes_spec.rb
-      ./spec/requests/api/pages/internal_access_spec.rb
-      ./spec/requests/api/pages/pages_spec.rb
-      ./spec/requests/api/pages/private_access_spec.rb
-      ./spec/requests/api/pages/public_access_spec.rb
-      ./spec/requests/api/pages_domains_spec.rb
       ./spec/requests/api/personal_access_tokens/self_information_spec.rb
       ./spec/requests/api/personal_access_tokens_spec.rb
       ./spec/requests/api/project_export_spec.rb
diff --git a/yarn.lock b/yarn.lock
index 22b9598215b..2b5aa3bad87 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1237,10 +1237,10 @@
   resolved "https://registry.yarnpkg.com/@gitlab/svgs/-/svgs-3.24.0.tgz#bc8265919aa04b06cd08be91637471bad195936d"
   integrity sha512-R4s5qJUFUIbPflknpw1aI/PchiNq65vY7LVsJZnQkY+vi+AgmsETdut/AdferbGWmeWMU0q2wuVu9phE8lDUgA==
 
-"@gitlab/ui@56.4.0":
-  version "56.4.0"
-  resolved "https://registry.yarnpkg.com/@gitlab/ui/-/ui-56.4.0.tgz#35e2ee19fff9ff803f8737300d957b6a9f6ade1f"
-  integrity sha512-L+0lf5jXrE34RruiibeDOb4wiziSsUhB+d3CHTQIjtm6qdqcwgYT03AoNTgc/E/YVLshEKywTJnnyakreecAlw==
+"@gitlab/ui@56.4.1":
+  version "56.4.1"
+  resolved "https://registry.yarnpkg.com/@gitlab/ui/-/ui-56.4.1.tgz#bdf6284053b092608f6f0b70c6abeb36fd352aa2"
+  integrity sha512-WlEryaV/pwaJkHa+ioCcyB9slE+2RoPs15cmS+OtA9XsmWKqZTI1S00uZG9GcnA9hDKZM+HP2Apy7ku+myzLDQ==
   dependencies:
     "@popperjs/core" "^2.11.2"
     bootstrap-vue "2.23.1"