From c6ee7ef0f577e0155740d022babdc1b2b0e28d87 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Thu, 28 Jan 2021 15:09:06 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 app/assets/javascripts/api.js                 |   4 +-
 .../components/diff_discussion_reply.vue      |   9 -
 .../diffs/components/diff_line_note_form.vue  |  10 -
 app/assets/javascripts/header.js              |   6 +-
 .../components/issuable_item.vue              |   6 +
 .../components/issuable_list_root.vue         |   2 +-
 .../components/issuable_tabs.vue              |   7 +-
 app/assets/javascripts/notes.js               |  13 +-
 .../notes/components/comment_form.vue         |  11 -
 .../notes/components/noteable_discussion.vue  |  41 +--
 .../pages/projects/blame/show/index.js        |   2 +-
 app/assets/stylesheets/framework/diffs.scss   |   4 -
 app/assets/stylesheets/framework/files.scss   |   6 -
 app/assets/stylesheets/framework/filters.scss |   9 +
 .../stylesheets/framework/variables.scss      |   1 -
 app/assets/stylesheets/pages/issues.scss      |  12 +-
 app/assets/stylesheets/pages/note_form.scss   |   6 +-
 app/assets/stylesheets/pages/notes.scss       |  26 --
 .../groups/import_export/export_service.rb    |  48 +--
 .../groups/import_export/import_service.rb    |  50 +--
 app/services/jira/requests/base.rb            |   8 +-
 .../quick_actions/interpret_service.rb        |   9 +
 app/views/discussions/_notes.html.haml        |   2 -
 app/views/shared/notes/_edit_form.html.haml   |   2 +-
 .../shared/notes/_notes_with_form.html.haml   |   3 -
 .../292391-quickactions-usage-ping.yml        |   5 +
 ...84402-remove-avatar-from-comment-forms.yml |   5 +
 .../jira_issues_show_integration.yml          |   8 +
 .../usage_data_track_quickactions.yml         |   8 +
 doc/administration/file_hooks.md              |  27 +-
 doc/administration/git_annex.md               |  18 +-
 doc/administration/lfs/index.md               |  86 +++--
 doc/administration/pages/source.md            |   2 +-
 doc/development/code_review.md                |   7 +-
 doc/integration/README.md                     |   4 +-
 .../gmail_action_buttons_for_gitlab.md        |   8 +-
 .../img/oauth_provider_application_form.png   | Bin 12553 -> 0 bytes
 .../oauth_provider_application_id_secret.png  | Bin 15280 -> 0 bytes
 .../oauth_provider_authorized_application.png | Bin 14657 -> 0 bytes
 .../oauth_provider_user_wide_applications.png | Bin 17526 -> 0 bytes
 doc/integration/jenkins_deprecated.md         |   2 +-
 doc/integration/jira_development_panel.md     |  56 +--
 doc/integration/oauth_provider.md             |  82 ++---
 doc/integration/omniauth.md                   |  27 +-
 doc/integration/openid_connect_provider.md    |   3 +-
 doc/push_rules/push_rules.md                  |  58 ++--
 doc/topics/git/troubleshooting_git.md         |  21 +-
 doc/topics/gitlab_flow.md                     |  80 +++--
 .../import_export/group/tree_restorer.rb      |   2 +-
 lib/gitlab/import_export/repo_saver.rb        |   3 +-
 .../known_events/quickactions.yml             | 326 ++++++++++++++++++
 .../quick_action_activity_unique_counter.rb   |  88 +++++
 .../migration/add_limit_to_text_columns.rb    |  31 +-
 rubocop/migration_helpers.rb                  |   2 +-
 .../application_experiment_spec.rb            |   6 +
 spec/frontend/api_spec.js                     |  22 ++
 .../components/issuable_item_spec.js          |  17 +
 .../notes/components/comment_form_spec.js     |   9 -
 .../states/mr_widget_pipeline_blocked_spec.js |  26 +-
 .../import_export/group/tree_restorer_spec.rb |   1 +
 .../gitlab/import_export/repo_saver_spec.rb   |   8 +
 .../hll_redis_counter_spec.rb                 |   3 +-
 ...ick_action_activity_unique_counter_spec.rb | 163 +++++++++
 spec/lib/gitlab/utils/markdown_spec.rb        |  38 +-
 .../add_limit_to_text_columns_spec.rb         |  18 +
 .../import_export/export_service_spec.rb      |  10 +
 .../quick_actions/interpret_service_spec.rb   |  18 +
 spec/support/gitlab_experiment.rb             |   9 +
 68 files changed, 1129 insertions(+), 475 deletions(-)
 create mode 100644 changelogs/unreleased/292391-quickactions-usage-ping.yml
 create mode 100644 changelogs/unreleased/84402-remove-avatar-from-comment-forms.yml
 create mode 100644 config/feature_flags/development/jira_issues_show_integration.yml
 create mode 100644 config/feature_flags/development/usage_data_track_quickactions.yml
 delete mode 100644 doc/integration/img/oauth_provider_application_form.png
 delete mode 100644 doc/integration/img/oauth_provider_application_id_secret.png
 delete mode 100644 doc/integration/img/oauth_provider_authorized_application.png
 delete mode 100644 doc/integration/img/oauth_provider_user_wide_applications.png
 create mode 100644 lib/gitlab/usage_data_counters/known_events/quickactions.yml
 create mode 100644 lib/gitlab/usage_data_counters/quick_action_activity_unique_counter.rb
 create mode 100644 spec/lib/gitlab/usage_data_counters/quick_action_activity_unique_counter_spec.rb

diff --git a/app/assets/javascripts/api.js b/app/assets/javascripts/api.js
index 7043da5017d..e8d433d36c9 100644
--- a/app/assets/javascripts/api.js
+++ b/app/assets/javascripts/api.js
@@ -179,9 +179,9 @@ const Api = {
       });
   },
 
-  groupLabels(namespace) {
+  groupLabels(namespace, options = {}) {
     const url = Api.buildUrl(Api.groupLabelsPath).replace(':namespace_path', namespace);
-    return axios.get(url).then(({ data }) => data);
+    return axios.get(url, options).then(({ data }) => data);
   },
 
   // Return namespaces list. Filtered by query
diff --git a/app/assets/javascripts/diffs/components/diff_discussion_reply.vue b/app/assets/javascripts/diffs/components/diff_discussion_reply.vue
index 531ebaddacd..a7a6b38235b 100644
--- a/app/assets/javascripts/diffs/components/diff_discussion_reply.vue
+++ b/app/assets/javascripts/diffs/components/diff_discussion_reply.vue
@@ -2,14 +2,12 @@
 import { mapGetters } from 'vuex';
 import NoteSignedOutWidget from '~/notes/components/note_signed_out_widget.vue';
 import ReplyPlaceholder from '~/notes/components/discussion_reply_placeholder.vue';
-import UserAvatarLink from '~/vue_shared/components/user_avatar/user_avatar_link.vue';
 
 export default {
   name: 'DiffDiscussionReply',
   components: {
     NoteSignedOutWidget,
     ReplyPlaceholder,
-    UserAvatarLink,
   },
   props: {
     hasForm: {
@@ -36,13 +34,6 @@ export default {
     <template v-if="userCanReply">
       <slot v-if="hasForm" name="form"></slot>
       <template v-else-if="renderReplyPlaceholder">
-        <user-avatar-link
-          :link-href="currentUser.path"
-          :img-src="currentUser.avatar_url"
-          :img-alt="currentUser.name"
-          :img-size="40"
-          class="d-none d-sm-block"
-        />
         <reply-placeholder
           :button-text="__('Start a new discussion...')"
           @onClick="$emit('showNewDiscussionForm')"
diff --git a/app/assets/javascripts/diffs/components/diff_line_note_form.vue b/app/assets/javascripts/diffs/components/diff_line_note_form.vue
index 463b7f5cff4..e4c64bb0e07 100644
--- a/app/assets/javascripts/diffs/components/diff_line_note_form.vue
+++ b/app/assets/javascripts/diffs/components/diff_line_note_form.vue
@@ -6,7 +6,6 @@ import { s__ } from '~/locale';
 import noteForm from '../../notes/components/note_form.vue';
 import MultilineCommentForm from '../../notes/components/multiline_comment_form.vue';
 import autosave from '../../notes/mixins/autosave';
-import userAvatarLink from '../../vue_shared/components/user_avatar/user_avatar_link.vue';
 import { DIFF_NOTE_TYPE, INLINE_DIFF_LINES_KEY, PARALLEL_DIFF_VIEW_TYPE } from '../constants';
 import {
   commentLineOptions,
@@ -16,7 +15,6 @@ import {
 export default {
   components: {
     noteForm,
-    userAvatarLink,
     MultilineCommentForm,
   },
   mixins: [autosave, diffLineNoteFormMixin, glFeatureFlagsMixin()],
@@ -174,14 +172,6 @@ export default {
         :comment-line-options="commentLineOptions"
       />
     </div>
-    <user-avatar-link
-      v-if="author"
-      :link-href="author.path"
-      :img-src="author.avatar_url"
-      :img-alt="author.name"
-      :img-size="40"
-      class="d-none d-sm-block"
-    />
     <note-form
       ref="noteForm"
       :is-editing="true"
diff --git a/app/assets/javascripts/header.js b/app/assets/javascripts/header.js
index 9f9708bf879..bcafb09bc66 100644
--- a/app/assets/javascripts/header.js
+++ b/app/assets/javascripts/header.js
@@ -106,7 +106,5 @@ export function initNavUserDropdownTracking() {
   }
 }
 
-document.addEventListener('DOMContentLoaded', () => {
-  requestIdleCallback(initStatusTriggers);
-  requestIdleCallback(initNavUserDropdownTracking);
-});
+requestIdleCallback(initStatusTriggers);
+requestIdleCallback(initNavUserDropdownTracking);
diff --git a/app/assets/javascripts/issuable_list/components/issuable_item.vue b/app/assets/javascripts/issuable_list/components/issuable_item.vue
index 23471c250e0..df303665538 100644
--- a/app/assets/javascripts/issuable_list/components/issuable_item.vue
+++ b/app/assets/javascripts/issuable_list/components/issuable_item.vue
@@ -139,6 +139,12 @@ export default {
       <div class="issuable-main-info">
         <div data-testid="issuable-title" class="issue-title title">
           <span class="issue-title-text" dir="auto">
+            <gl-icon
+              v-if="issuable.confidential"
+              v-gl-tooltip
+              name="eye-slash"
+              :title="__('Confidential')"
+            />
             <gl-link :href="issuable.webUrl" v-bind="issuableTitleProps"
               >{{ issuable.title
               }}<gl-icon v-if="isIssuableUrlExternal" name="external-link" class="gl-ml-2"
diff --git a/app/assets/javascripts/issuable_list/components/issuable_list_root.vue b/app/assets/javascripts/issuable_list/components/issuable_list_root.vue
index c5475a34d3c..30078903b85 100644
--- a/app/assets/javascripts/issuable_list/components/issuable_list_root.vue
+++ b/app/assets/javascripts/issuable_list/components/issuable_list_root.vue
@@ -230,7 +230,7 @@ export default {
       :initial-sort-by="initialSortBy"
       :show-checkbox="showBulkEditSidebar"
       :checkbox-checked="allIssuablesChecked"
-      class="gl-flex-grow-1 row-content-block"
+      class="gl-flex-grow-1 gl-border-t-none row-content-block"
       @checked-input="handleAllIssuablesCheckedInput"
       @onFilter="$emit('filter', $event)"
       @onSort="$emit('sort', $event)"
diff --git a/app/assets/javascripts/issuable_list/components/issuable_tabs.vue b/app/assets/javascripts/issuable_list/components/issuable_tabs.vue
index d9aab004077..57da030e22e 100644
--- a/app/assets/javascripts/issuable_list/components/issuable_tabs.vue
+++ b/app/assets/javascripts/issuable_list/components/issuable_tabs.vue
@@ -32,7 +32,10 @@ export default {
 
 <template>
   <div class="top-area">
-    <gl-tabs class="nav-links mobile-separator issuable-state-filters">
+    <gl-tabs
+      class="gl-display-flex gl-flex-fill-1 gl-p-0 gl-m-0 mobile-separator issuable-state-filters"
+      nav-class="gl-border-b-0"
+    >
       <gl-tab
         v-for="tab in tabs"
         :key="tab.id"
@@ -41,7 +44,7 @@ export default {
       >
         <template #title>
           <span :title="tab.titleTooltip">{{ tab.title }}</span>
-          <gl-badge v-if="tabCounts" variant="neutral" size="sm" class="gl-px-2 gl-py-1!">{{
+          <gl-badge v-if="tabCounts" variant="neutral" size="sm" class="gl-tab-counter-badge">{{
             tabCounts[tab.name]
           }}</gl-badge>
         </template>
diff --git a/app/assets/javascripts/notes.js b/app/assets/javascripts/notes.js
index 857e5a34db6..78e89f28542 100644
--- a/app/assets/javascripts/notes.js
+++ b/app/assets/javascripts/notes.js
@@ -904,18 +904,7 @@ export default class Notes {
     // DiffNote
     form.find('#note_position').val(dataHolder.attr('data-position'));
 
-    form
-      .prepend(
-        `<a href="${escape(
-          gon.current_username,
-        )}" class="user-avatar-link d-none d-sm-block"><img class="avatar s40" src="${encodeURI(
-          gon.current_user_avatar_url || gon.default_avatar_url,
-        )}" alt="${escape(gon.current_user_fullname)}" /></a>`,
-      )
-      .append('</div>')
-      .find('.js-close-discussion-note-form')
-      .show()
-      .removeClass('hide');
+    form.append('</div>').find('.js-close-discussion-note-form').show().removeClass('hide');
     form.find('.js-note-target-close').remove();
     form.find('.js-note-new-discussion').remove();
     this.setupNoteForm(form);
diff --git a/app/assets/javascripts/notes/components/comment_form.vue b/app/assets/javascripts/notes/components/comment_form.vue
index b52053168b3..46b8db0b955 100644
--- a/app/assets/javascripts/notes/components/comment_form.vue
+++ b/app/assets/javascripts/notes/components/comment_form.vue
@@ -18,7 +18,6 @@ import { refreshUserMergeRequestCounts } from '~/commons/nav/user_merge_requests
 import * as constants from '../constants';
 import eventHub from '../event_hub';
 import markdownField from '~/vue_shared/components/markdown/field.vue';
-import userAvatarLink from '~/vue_shared/components/user_avatar/user_avatar_link.vue';
 import glFeatureFlagsMixin from '~/vue_shared/mixins/gl_feature_flags_mixin';
 import noteSignedOutWidget from './note_signed_out_widget.vue';
 import discussionLockedWidget from './discussion_locked_widget.vue';
@@ -31,7 +30,6 @@ export default {
     noteSignedOutWidget,
     discussionLockedWidget,
     markdownField,
-    userAvatarLink,
     GlButton,
     TimelineEntryItem,
     GlIcon,
@@ -301,15 +299,6 @@ export default {
     <ul v-else-if="canCreateNote" class="notes notes-form timeline">
       <timeline-entry-item class="note-form">
         <div class="flash-container error-alert timeline-content"></div>
-        <div class="timeline-icon d-none d-md-block">
-          <user-avatar-link
-            v-if="author"
-            :link-href="author.path"
-            :img-src="author.avatar_url"
-            :img-alt="author.name"
-            :img-size="40"
-          />
-        </div>
         <div class="timeline-content timeline-content-form">
           <form ref="commentForm" class="new-note common-note-form gfm-form js-main-target-form">
             <comment-field-layout
diff --git a/app/assets/javascripts/notes/components/noteable_discussion.vue b/app/assets/javascripts/notes/components/noteable_discussion.vue
index ef946cf3c4f..527b38663e4 100644
--- a/app/assets/javascripts/notes/components/noteable_discussion.vue
+++ b/app/assets/javascripts/notes/components/noteable_discussion.vue
@@ -267,14 +267,6 @@ export default {
                   :class="{ 'is-replying': isReplying }"
                   class="discussion-reply-holder gl-border-t-0! clearfix"
                 >
-                  <user-avatar-link
-                    v-if="!isReplying && userCanReply"
-                    :link-href="currentUser.path"
-                    :img-src="currentUser.avatar_url"
-                    :img-alt="currentUser.name"
-                    :img-size="40"
-                    class="d-none d-sm-block"
-                  />
                   <discussion-actions
                     v-if="!isReplying && userCanReply"
                     :discussion="discussion"
@@ -285,27 +277,18 @@ export default {
                     @showReplyForm="showReplyForm"
                     @resolve="resolveHandler"
                   />
-                  <div v-if="isReplying" class="avatar-note-form-holder">
-                    <user-avatar-link
-                      v-if="currentUser"
-                      :link-href="currentUser.path"
-                      :img-src="currentUser.avatar_url"
-                      :img-alt="currentUser.name"
-                      :img-size="40"
-                      class="d-none d-sm-block"
-                    />
-                    <note-form
-                      ref="noteForm"
-                      :discussion="discussion"
-                      :is-editing="false"
-                      :line="diffLine"
-                      save-button-title="Comment"
-                      :autosave-key="autosaveKey"
-                      @handleFormUpdateAddToReview="addReplyToReview"
-                      @handleFormUpdate="saveReply"
-                      @cancelForm="cancelReplyForm"
-                    />
-                  </div>
+                  <note-form
+                    v-if="isReplying"
+                    ref="noteForm"
+                    :discussion="discussion"
+                    :is-editing="false"
+                    :line="diffLine"
+                    save-button-title="Comment"
+                    :autosave-key="autosaveKey"
+                    @handleFormUpdateAddToReview="addReplyToReview"
+                    @handleFormUpdate="saveReply"
+                    @cancelForm="cancelReplyForm"
+                  />
                   <note-signed-out-widget v-if="!isLoggedIn" />
                 </div>
               </template>
diff --git a/app/assets/javascripts/pages/projects/blame/show/index.js b/app/assets/javascripts/pages/projects/blame/show/index.js
index 80d0bff92fa..fa22c11d1d7 100644
--- a/app/assets/javascripts/pages/projects/blame/show/index.js
+++ b/app/assets/javascripts/pages/projects/blame/show/index.js
@@ -1,3 +1,3 @@
 import initBlob from '~/pages/projects/init_blob';
 
-document.addEventListener('DOMContentLoaded', initBlob);
+initBlob();
diff --git a/app/assets/stylesheets/framework/diffs.scss b/app/assets/stylesheets/framework/diffs.scss
index 499b9c00116..e30caeb1dfb 100644
--- a/app/assets/stylesheets/framework/diffs.scss
+++ b/app/assets/stylesheets/framework/diffs.scss
@@ -1136,10 +1136,6 @@ table.code {
       display: block;
     }
   }
-
-  .note-edit-form {
-    margin-left: $note-icon-gutter-width;
-  }
 }
 
 .discussion-body .image .frame {
diff --git a/app/assets/stylesheets/framework/files.scss b/app/assets/stylesheets/framework/files.scss
index 27a439651e6..103d59382b4 100644
--- a/app/assets/stylesheets/framework/files.scss
+++ b/app/assets/stylesheets/framework/files.scss
@@ -444,12 +444,6 @@ span.idiff {
     .user-avatar-link.new-comment {
       position: absolute;
       margin: 40px $gl-padding 0 116px;
-
-      ~ .note-edit-form form.edit-note {
-        @include media-breakpoint-up(sm) {
-          margin-left: $note-icon-gutter-width;
-        }
-      }
     }
   }
 
diff --git a/app/assets/stylesheets/framework/filters.scss b/app/assets/stylesheets/framework/filters.scss
index 5f56fa3be86..07d59847829 100644
--- a/app/assets/stylesheets/framework/filters.scss
+++ b/app/assets/stylesheets/framework/filters.scss
@@ -475,6 +475,15 @@
     }
   }
 
+  .sort-dropdown-container {
+    // This property is set to have borders
+    // around sort dropdown match with filter
+    // input field.
+    .gl-button {
+      box-shadow: inset 0 0 0 1px $gray-400;
+    }
+  }
+
   @include media-breakpoint-up(md) {
     .sort-dropdown-container {
       margin-left: 10px;
diff --git a/app/assets/stylesheets/framework/variables.scss b/app/assets/stylesheets/framework/variables.scss
index 7db172c55a1..4bf9236407f 100644
--- a/app/assets/stylesheets/framework/variables.scss
+++ b/app/assets/stylesheets/framework/variables.scss
@@ -627,7 +627,6 @@ $search-input-xl-width: 320px;
 $note-disabled-comment-color: #b2b2b2;
 $note-targe3-outside: #fffff0;
 $note-targe3-inside: #ffffd3;
-$note-icon-gutter-width: 55px;
 
 /*
 * Identicon
diff --git a/app/assets/stylesheets/pages/issues.scss b/app/assets/stylesheets/pages/issues.scss
index 1caf62067a6..1c1e9d93909 100644
--- a/app/assets/stylesheets/pages/issues.scss
+++ b/app/assets/stylesheets/pages/issues.scss
@@ -203,15 +203,9 @@ ul.related-merge-requests > li {
   }
 }
 
-.discussion-reply-holder {
-  .avatar-note-form-holder .note-edit-form {
-    display: block;
-    margin-left: $note-icon-gutter-width;
-
-    @include media-breakpoint-down(xs) {
-      margin-left: 0;
-    }
-  }
+.discussion-reply-holder,
+.note-edit-form {
+  display: block;
 }
 
 .issue-sort-dropdown {
diff --git a/app/assets/stylesheets/pages/note_form.scss b/app/assets/stylesheets/pages/note_form.scss
index 254ad96bb57..ffbfa47f9bd 100644
--- a/app/assets/stylesheets/pages/note_form.scss
+++ b/app/assets/stylesheets/pages/note_form.scss
@@ -212,8 +212,12 @@ table {
   }
 }
 
-.note-edit-form {
+// Snippets are the only non-vue form left
+.snippets.note-edit-form {
   display: none;
+}
+
+.note-edit-form {
   font-size: 14px;
 
   .md-area {
diff --git a/app/assets/stylesheets/pages/notes.scss b/app/assets/stylesheets/pages/notes.scss
index 141e401a17a..8dc2e2e9455 100644
--- a/app/assets/stylesheets/pages/notes.scss
+++ b/app/assets/stylesheets/pages/notes.scss
@@ -1,6 +1,5 @@
 $system-note-icon-size: 32px;
 $system-note-svg-size: 16px;
-$note-form-margin-left: 72px;
 
 @mixin vertical-line($left) {
   &::before {
@@ -54,16 +53,6 @@ $note-form-margin-left: 72px;
     &.note-form {
       margin-left: 0;
 
-      @include notes-media('min', map-get($grid-breakpoints, md)) {
-        margin-left: $note-form-margin-left;
-      }
-
-      .timeline-icon {
-        @include notes-media('min', map-get($grid-breakpoints, sm)) {
-          margin-left: -$note-icon-gutter-width;
-        }
-      }
-
       .timeline-content {
         margin-left: 0;
       }
@@ -529,21 +518,6 @@ $note-form-margin-left: 72px;
 .code-commit .notes-content,
 .diff-viewer > .image ~ .note-container {
   background-color: $white;
-
-  .avatar-note-form-holder {
-    .user-avatar-link img {
-      margin: 13px $gl-padding $gl-padding;
-    }
-
-    form,
-    ~ .discussion-form-container {
-      padding: $gl-padding;
-
-      @include media-breakpoint-up(sm) {
-        margin-left: $note-icon-gutter-width;
-      }
-    }
-  }
 }
 
 .diff-viewer > .image ~ .note-container form.new-note {
diff --git a/app/services/groups/import_export/export_service.rb b/app/services/groups/import_export/export_service.rb
index b45deda6855..5a1b695dcd6 100644
--- a/app/services/groups/import_export/export_service.rb
+++ b/app/services/groups/import_export/export_service.rb
@@ -12,13 +12,13 @@ module Groups
       end
 
       def async_execute
-        GroupExportWorker.perform_async(@current_user.id, @group.id, @params)
+        GroupExportWorker.perform_async(current_user.id, group.id, params)
       end
 
       def execute
         validate_user_permissions
 
-        remove_existing_export! if @group.export_file_exists?
+        remove_existing_export! if group.export_file_exists?
 
         save!
       ensure
@@ -27,25 +27,29 @@ module Groups
 
       private
 
+      attr_reader :group, :current_user, :params
       attr_accessor :shared
 
       def validate_user_permissions
-        unless @current_user.can?(:admin_group, @group)
-          @shared.error(::Gitlab::ImportExport::Error.permission_error(@current_user, @group))
+        unless current_user.can?(:admin_group, group)
+          shared.error(::Gitlab::ImportExport::Error.permission_error(current_user, group))
 
           notify_error!
         end
       end
 
       def remove_existing_export!
-        import_export_upload = @group.import_export_upload
+        import_export_upload = group.import_export_upload
 
         import_export_upload.remove_export_file!
         import_export_upload.save
       end
 
       def save!
-        if savers.all?(&:save)
+        # We cannot include the file_saver with the other savers because
+        # it removes the tmp dir. This means that if we want to add new savers
+        # in EE the data won't be available.
+        if savers.all?(&:save) && file_saver.save
           notify_success
         else
           notify_error!
@@ -53,32 +57,36 @@ module Groups
       end
 
       def savers
-        [version_saver, tree_exporter, file_saver]
+        [version_saver, tree_exporter]
       end
 
       def tree_exporter
         tree_exporter_class.new(
-          group: @group,
-          current_user: @current_user,
-          shared: @shared,
-          params: @params
+          group: group,
+          current_user: current_user,
+          shared: shared,
+          params: params
         )
       end
 
       def tree_exporter_class
-        if ::Feature.enabled?(:group_export_ndjson, @group&.parent, default_enabled: true)
+        if ndjson?
           Gitlab::ImportExport::Group::TreeSaver
         else
           Gitlab::ImportExport::Group::LegacyTreeSaver
         end
       end
 
+      def ndjson?
+        ::Feature.enabled?(:group_export_ndjson, group&.parent, default_enabled: :yaml)
+      end
+
       def version_saver
         Gitlab::ImportExport::VersionSaver.new(shared: shared)
       end
 
       def file_saver
-        Gitlab::ImportExport::Saver.new(exportable: @group, shared: @shared)
+        Gitlab::ImportExport::Saver.new(exportable: group, shared: shared)
       end
 
       def remove_archive_tmp_dir
@@ -94,22 +102,22 @@ module Groups
       def notify_success
         @logger.info(
           message: 'Group Export succeeded',
-          group_id: @group.id,
-          group_name: @group.name
+          group_id: group.id,
+          group_name: group.name
         )
 
-        notification_service.group_was_exported(@group, @current_user)
+        notification_service.group_was_exported(group, current_user)
       end
 
       def notify_error
         @logger.error(
           message: 'Group Export failed',
-          group_id: @group.id,
-          group_name: @group.name,
-          errors: @shared.errors.join(', ')
+          group_id: group.id,
+          group_name: group.name,
+          errors: shared.errors.join(', ')
         )
 
-        notification_service.group_was_not_exported(@group, @current_user, @shared.errors)
+        notification_service.group_was_not_exported(group, current_user, shared.errors)
       end
 
       def notification_service
diff --git a/app/services/groups/import_export/import_service.rb b/app/services/groups/import_export/import_service.rb
index a0ddc50e5e0..b62d91366e9 100644
--- a/app/services/groups/import_export/import_service.rb
+++ b/app/services/groups/import_export/import_service.rb
@@ -3,7 +3,7 @@
 module Groups
   module ImportExport
     class ImportService
-      attr_reader :current_user, :group, :params
+      attr_reader :current_user, :group, :shared
 
       def initialize(group:, user:)
         @group = group
@@ -26,10 +26,10 @@ module Groups
       end
 
       def execute
-        if valid_user_permissions? && import_file && restorer.restore
+        if valid_user_permissions? && import_file && restorers.all?(&:restore)
           notify_success
 
-          @group
+          group
         else
           notify_error!
         end
@@ -43,37 +43,41 @@ module Groups
 
       def import_file
         @import_file ||= Gitlab::ImportExport::FileImporter.import(
-          importable: @group,
+          importable: group,
           archive_file: nil,
-          shared: @shared
+          shared: shared
         )
       end
 
-      def restorer
-        @restorer ||=
+      def restorers
+        [tree_restorer]
+      end
+
+      def tree_restorer
+        @tree_restorer ||=
           if ndjson?
             Gitlab::ImportExport::Group::TreeRestorer.new(
-              user: @current_user,
-              shared: @shared,
-              group: @group
+              user: current_user,
+              shared: shared,
+              group: group
             )
           else
             Gitlab::ImportExport::Group::LegacyTreeRestorer.new(
-              user: @current_user,
-              shared: @shared,
-              group: @group,
+              user: current_user,
+              shared: shared,
+              group: group,
               group_hash: nil
             )
           end
       end
 
       def ndjson?
-        ::Feature.enabled?(:group_import_ndjson, @group&.parent, default_enabled: true) &&
-          File.exist?(File.join(@shared.export_path, 'tree/groups/_all.ndjson'))
+        ::Feature.enabled?(:group_import_ndjson, group&.parent, default_enabled: true) &&
+          File.exist?(File.join(shared.export_path, 'tree/groups/_all.ndjson'))
       end
 
       def remove_import_file
-        upload = @group.import_export_upload
+        upload = group.import_export_upload
 
         return unless upload&.import_file&.file
 
@@ -85,7 +89,7 @@ module Groups
         if current_user.can?(:admin_group, group)
           true
         else
-          @shared.error(::Gitlab::ImportExport::Error.permission_error(current_user, group))
+          shared.error(::Gitlab::ImportExport::Error.permission_error(current_user, group))
 
           false
         end
@@ -93,16 +97,16 @@ module Groups
 
       def notify_success
         @logger.info(
-          group_id:   @group.id,
-          group_name: @group.name,
+          group_id:   group.id,
+          group_name: group.name,
           message:    'Group Import/Export: Import succeeded'
         )
       end
 
       def notify_error
         @logger.error(
-          group_id:   @group.id,
-          group_name: @group.name,
+          group_id:   group.id,
+          group_name: group.name,
           message:    "Group Import/Export: Errors occurred, see '#{Gitlab::ErrorTracking::Logger.file_name}' for details"
         )
       end
@@ -110,11 +114,11 @@ module Groups
       def notify_error!
         notify_error
 
-        raise Gitlab::ImportExport::Error.new(@shared.errors.to_sentence)
+        raise Gitlab::ImportExport::Error.new(shared.errors.to_sentence)
       end
 
       def remove_base_tmp_dir
-        FileUtils.rm_rf(@shared.base_path)
+        FileUtils.rm_rf(shared.base_path)
       end
     end
   end
diff --git a/app/services/jira/requests/base.rb b/app/services/jira/requests/base.rb
index 098aae9284c..bae8298d5c8 100644
--- a/app/services/jira/requests/base.rb
+++ b/app/services/jira/requests/base.rb
@@ -18,15 +18,15 @@ module Jira
         request
       end
 
+      private
+
+      attr_reader :jira_service, :project
+
       # We have to add the context_path here because the Jira client is not taking it into account
       def base_api_url
         "#{context_path}/rest/api/#{api_version}"
       end
 
-      private
-
-      attr_reader :jira_service, :project
-
       def context_path
         client.options[:context_path].to_s
       end
diff --git a/app/services/quick_actions/interpret_service.rb b/app/services/quick_actions/interpret_service.rb
index de1cd7cd981..ea90d8e3dd8 100644
--- a/app/services/quick_actions/interpret_service.rb
+++ b/app/services/quick_actions/interpret_service.rb
@@ -164,6 +164,7 @@ module QuickActions
         next unless definition
 
         definition.execute(self, arg)
+        usage_ping_tracking(name, arg)
       end
     end
 
@@ -178,6 +179,14 @@ module QuickActions
       ext.references(type)
     end
     # rubocop: enable CodeReuse/ActiveRecord
+
+    def usage_ping_tracking(quick_action_name, arg)
+      Gitlab::UsageDataCounters::QuickActionActivityUniqueCounter.track_unique_action(
+        quick_action_name,
+        args: arg&.strip,
+        user: current_user
+      )
+    end
   end
 end
 
diff --git a/app/views/discussions/_notes.html.haml b/app/views/discussions/_notes.html.haml
index 7db318f83b1..beac4946fd7 100644
--- a/app/views/discussions/_notes.html.haml
+++ b/app/views/discussions/_notes.html.haml
@@ -19,8 +19,6 @@
 
   .discussion-reply-holder
     - if can_create_note?
-      %a.user-avatar-link.d-none.d-sm-block{ href: user_path(current_user) }
-        = image_tag avatar_icon_for_user(current_user), alt: current_user.to_reference, class: 'avatar s40'
       .discussion-with-resolve-btn
         = link_to_reply_discussion(discussion)
     - elsif !current_user
diff --git a/app/views/shared/notes/_edit_form.html.haml b/app/views/shared/notes/_edit_form.html.haml
index 79d42bd5f6d..63c895a5a03 100644
--- a/app/views/shared/notes/_edit_form.html.haml
+++ b/app/views/shared/notes/_edit_form.html.haml
@@ -1,4 +1,4 @@
-.note-edit-form
+.snippets.note-edit-form
   = form_tag '#', method: :put, class: 'edit-note common-note-form js-quick-submit' do
     = hidden_field_tag :target_id, '', class: 'js-form-target-id'
     = hidden_field_tag :target_type, '', class: 'js-form-target-type'
diff --git a/app/views/shared/notes/_notes_with_form.html.haml b/app/views/shared/notes/_notes_with_form.html.haml
index 1b03225d48d..f7f5c02370d 100644
--- a/app/views/shared/notes/_notes_with_form.html.haml
+++ b/app/views/shared/notes/_notes_with_form.html.haml
@@ -12,9 +12,6 @@
       .timeline-entry-inner
         .flash-container.timeline-content
 
-        .timeline-icon.d-none.d-md-block
-          %a.author-link{ href: user_path(current_user) }
-            = image_tag avatar_icon_for_user(current_user), alt: current_user.to_reference, class: 'avatar s40'
         .timeline-content.timeline-content-form
           = render "shared/notes/form", view: diff_view, supports_autocomplete: autocomplete
 - elsif !current_user
diff --git a/changelogs/unreleased/292391-quickactions-usage-ping.yml b/changelogs/unreleased/292391-quickactions-usage-ping.yml
new file mode 100644
index 00000000000..64050f281bb
--- /dev/null
+++ b/changelogs/unreleased/292391-quickactions-usage-ping.yml
@@ -0,0 +1,5 @@
+---
+title: Track monthly active users for QuickActions
+merge_request: 52398
+author:
+type: added
diff --git a/changelogs/unreleased/84402-remove-avatar-from-comment-forms.yml b/changelogs/unreleased/84402-remove-avatar-from-comment-forms.yml
new file mode 100644
index 00000000000..5662f79a071
--- /dev/null
+++ b/changelogs/unreleased/84402-remove-avatar-from-comment-forms.yml
@@ -0,0 +1,5 @@
+---
+title: Remove Avatar from Comment Forms
+merge_request: 52180
+author: Lee Tickett @leetickett
+type: other
diff --git a/config/feature_flags/development/jira_issues_show_integration.yml b/config/feature_flags/development/jira_issues_show_integration.yml
new file mode 100644
index 00000000000..dd89ace22be
--- /dev/null
+++ b/config/feature_flags/development/jira_issues_show_integration.yml
@@ -0,0 +1,8 @@
+---
+name: jira_issues_show_integration
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/52446
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/299832
+milestone: '13.9'
+type: development
+group: group::ecosystem
+default_enabled: false
diff --git a/config/feature_flags/development/usage_data_track_quickactions.yml b/config/feature_flags/development/usage_data_track_quickactions.yml
new file mode 100644
index 00000000000..57f698f7031
--- /dev/null
+++ b/config/feature_flags/development/usage_data_track_quickactions.yml
@@ -0,0 +1,8 @@
+---
+name: usage_data_track_quickactions
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/52398
+rollout_issue_url:
+milestone: '13.9'
+type: development
+group: group::project management
+default_enabled: false
diff --git a/doc/administration/file_hooks.md b/doc/administration/file_hooks.md
index 5de2e4aec3f..cfaeda546cc 100644
--- a/doc/administration/file_hooks.md
+++ b/doc/administration/file_hooks.md
@@ -19,19 +19,20 @@ directly to the GitLab source code and contribute back upstream. This way we can
 ensure functionality is preserved across versions and covered by tests.
 
 NOTE:
-File hooks must be configured on the filesystem of the GitLab server. Only GitLab
-server administrators will be able to complete these tasks. Explore
-[system hooks](../system_hooks/system_hooks.md) or [webhooks](../user/project/integrations/webhooks.md) as an option if you do not have filesystem access.
+File hooks must be configured on the file system of the GitLab server. Only GitLab
+server administrators can complete these tasks. Explore
+[system hooks](../system_hooks/system_hooks.md) or [webhooks](../user/project/integrations/webhooks.md)
+as an option if you do not have file system access.
 
-A file hook will run on each event so it's up to you to filter events or projects
-within a file hook code. You can have as many file hooks as you want. Each file hook will
-be triggered by GitLab asynchronously in case of an event. For a list of events
+A file hook runs on each event. You can filter events or projects
+in a file hook's code, and create many file hooks as you need. Each file hook is
+triggered by GitLab asynchronously in case of an event. For a list of events
 see the [system hooks](../system_hooks/system_hooks.md) documentation.
 
 ## Setup
 
 The file hooks must be placed directly into the `file_hooks` directory, subdirectories
-will be ignored. There is an
+are ignored. There is an
 [`example` directory inside `file_hooks`](https://gitlab.com/gitlab-org/gitlab/tree/master/file_hooks/examples)
 where you can find some basic examples.
 
@@ -52,23 +53,23 @@ Follow the steps below to set up a custom hook:
    in any language, and ensure the 'shebang' at the top properly reflects the
    language type. For example, if the script is in Ruby the shebang will
    probably be `#!/usr/bin/env ruby`.
-1. The data to the file hook will be provided as JSON on STDIN. It will be exactly
+1. The data to the file hook is provided as JSON on STDIN. It is exactly the
    same as for [system hooks](../system_hooks/system_hooks.md).
 
-That's it! Assuming the file hook code is properly implemented, the hook will fire
+That's it! Assuming the file hook code is properly implemented, the hook fires
 as appropriate. The file hooks file list is updated for each event, there is no
 need to restart GitLab to apply a new file hook.
 
 If a file hook executes with non-zero exit code or GitLab fails to execute it, a
-message will be logged to:
+message is logged to:
 
 - `gitlab-rails/plugin.log` in an Omnibus installation.
 - `log/plugin.log` in a source installation.
 
 ## Creating file hooks
 
-Below is an example that will only response on the event `project_create` and
-will inform the admins from the GitLab instance that a new project has been created.
+This example responds only on the event `project_create`, and
+the GitLab instance informs the administrators that a new project has been created.
 
 ```ruby
 #!/opt/gitlab/embedded/bin/ruby
@@ -97,7 +98,7 @@ end
 Writing your own file hook can be tricky and it's easier if you can check it
 without altering the system. A Rake task is provided so that you can use it
 in a staging environment to test your file hook before using it in production.
-The Rake task will use a sample data and execute each of file hook. The output
+The Rake task uses a sample data and execute each of file hook. The output
 should be enough to determine if the system sees your file hook and if it was
 executed without errors.
 
diff --git a/doc/administration/git_annex.md b/doc/administration/git_annex.md
index e21a8ac7e84..07b7b1730e3 100644
--- a/doc/administration/git_annex.md
+++ b/doc/administration/git_annex.md
@@ -38,7 +38,7 @@ very fast file copying tool.
 
 ## GitLab git-annex Configuration
 
-`git-annex` is disabled by default in GitLab. Below you will find the
+`git-annex` is disabled by default in GitLab. Below are the
 configuration options required to enable it.
 
 ### Requirements
@@ -60,7 +60,7 @@ sudo yum install epel-release && sudo yum install git-annex
 ### Configuration for Omnibus packages
 
 For Omnibus GitLab packages, only one configuration setting is needed.
-The Omnibus package will internally set the correct options in all locations.
+The Omnibus package internally sets the correct options in all locations.
 
 1. In `/etc/gitlab/gitlab.rb` add the following line:
 
@@ -148,15 +148,15 @@ To example.com:group/project.git
 ok
 ```
 
-Your files can be found in the `master` branch, but you'll notice that there
-are more branches created by the `annex sync` command.
+Your files can be found in the `master` branch, but more branches are created
+by the `annex sync` command.
 
-Git Annex will also create a new directory at `.git/annex/` and will record the
+Git Annex creates a new directory at `.git/annex/` and records the
 tracked files in the `.git/config` file. The files you assign to be tracked
-with `git-annex` will not affect the existing `.git/config` records. The files
+with `git-annex` don't affect the existing `.git/config` records. The files
 are turned into symbolic links that point to data in `.git/annex/objects/`.
 
-The `debian.iso` file in the example will contain the symbolic link:
+The `debian.iso` file in the example contain the symbolic link:
 
 ```plaintext
 .git/annex/objects/ZW/1k/SHA256E-s82701--6384039733b5035b559efd5a2e25a493ab6e09aabfd5162cc03f6f0ec238429d.png/SHA256E-s82701--6384039733b5035b559efd5a2e25a493ab6e09aabfd5162cc03f6f0ec238429d.iso
@@ -167,7 +167,7 @@ repository.
 
 ---
 
-Downloading a single large file is also very simple:
+You can download a single large file with these commands:
 
 ```shell
 git clone git@gitlab.example.com:group/project.git
@@ -185,7 +185,7 @@ git annex sync --content  # sync Git branches and download all the large files
 ```
 
 By using `git-annex` without GitLab, anyone that can access the server can also
-access the files of all projects, but GitLab Annex ensures that you can only
+access the files of all projects. GitLab Annex ensures that you can only
 access files of projects you have access to (developer, maintainer, or owner role).
 
 ## How it works
diff --git a/doc/administration/lfs/index.md b/doc/administration/lfs/index.md
index 2546556560b..862c26abac8 100644
--- a/doc/administration/lfs/index.md
+++ b/doc/administration/lfs/index.md
@@ -12,11 +12,11 @@ disqus_identifier: 'https://docs.gitlab.com/ee/workflow/lfs/lfs_administration.h
 > - Support for object storage, such as AWS S3, was introduced in 10.0.
 > - LFS is enabled in GitLab self-managed instances by default.
 
-Documentation on how to use Git LFS are under [Managing large binary files with Git LFS doc](../../topics/git/lfs/index.md).
+Documentation about how to use Git LFS are under [Managing large binary files with Git LFS doc](../../topics/git/lfs/index.md).
 
 ## Requirements
 
-- Users need to install [Git LFS client](https://git-lfs.github.com) version 1.0.1 and up.
+- Users need to install [Git LFS client](https://git-lfs.github.com) version 1.0.1 or later.
 
 ## Configuration
 
@@ -25,9 +25,9 @@ GitLab is installed on.
 
 There are various configuration options to help GitLab server administrators:
 
-- Enabling/disabling Git LFS support
-- Changing the location of LFS object storage
-- Setting up object storage supported by [Fog](http://fog.io/about/provider_documentation.html)
+- Enabling/disabling Git LFS support.
+- Changing the location of LFS object storage.
+- Setting up object storage supported by [Fog](http://fog.io/about/provider_documentation.html).
 
 ### Configuration for Omnibus installations
 
@@ -43,7 +43,7 @@ gitlab_rails['lfs_enabled'] = false
 gitlab_rails['lfs_storage_path'] = "/mnt/storage/lfs-objects"
 ```
 
-After you update settings in `/etc/gitlab/gitlab.rb`, make sure to run [Omnibus GitLab reconfigure](../restart_gitlab.md#omnibus-gitlab-reconfigure).
+After you update settings in `/etc/gitlab/gitlab.rb`, run [Omnibus GitLab reconfigure](../restart_gitlab.md#omnibus-gitlab-reconfigure).
 
 ### Configuration for installations from source
 
@@ -58,14 +58,12 @@ In `config/gitlab.yml`:
 
 ## Storing LFS objects in remote object storage
 
-> [Introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/2760) in [GitLab Premium](https://about.gitlab.com/pricing/) 10.0. Brought to GitLab Core in 10.7.
-
-It is possible to store LFS objects in remote object storage which allows you
-to offload local hard disk R/W operations, and free up disk space significantly.
+You can store LFS objects in remote object storage. This allows you
+to offload reads and writes to the local disk, and free up disk space significantly.
 GitLab is tightly integrated with `Fog`, so you can refer to its [documentation](http://fog.io/about/provider_documentation.html)
 to check which storage services can be integrated with GitLab.
 You can also use external object storage in a private local network. For example,
-[MinIO](https://min.io/) is a standalone object storage service, is easy to set up, and works well with GitLab instances.
+[MinIO](https://min.io/) is a standalone object storage service that works with GitLab instances.
 
 GitLab provides two different options for the uploading mechanism: "Direct upload" and "Background upload".
 
@@ -78,26 +76,26 @@ This section describes the earlier configuration format.
 
 **Option 1. Direct upload**
 
-1. User pushes an `lfs` file to the GitLab instance
-1. GitLab-workhorse uploads the file directly to the external object storage
-1. GitLab-workhorse notifies GitLab-rails that the upload process is complete
+1. User pushes an `lfs` file to the GitLab instance.
+1. GitLab-workhorse uploads the file directly to the external object storage.
+1. GitLab-workhorse notifies GitLab-rails that the upload process is complete.
 
 **Option 2. Background upload**
 
-1. User pushes an `lfs` file to the GitLab instance
-1. GitLab-rails stores the file in the local file storage
-1. GitLab-rails then uploads the file to the external object storage asynchronously
+1. User pushes an `lfs` file to the GitLab instance.
+1. GitLab-rails stores the file in the local file storage.
+1. GitLab-rails then uploads the file to the external object storage asynchronously.
 
 The following general settings are supported.
 
-| Setting | Description | Default |
-|---------|-------------|---------|
-| `enabled` | Enable/disable object storage | `false` |
-| `remote_directory` | The bucket name where LFS objects will be stored| |
-| `direct_upload` | Set to true to enable direct upload of LFS without the need of local shared storage. Option may be removed once we decide to support only single storage for all files. | `false` |
-| `background_upload` | Set to false to disable automatic upload. Option may be removed once upload is direct to S3 | `true` |
-| `proxy_download` | Set to true to enable proxying all files served. Option allows to reduce egress traffic as this allows clients to download directly from remote storage instead of proxying all data | `false` |
-| `connection` | Various connection options described below | |
+| Setting             | Description | Default |
+|---------------------|-------------|---------|
+| `enabled`           | Enable/disable object storage. | `false` |
+| `remote_directory`  | The bucket name where LFS objects are stored. | |
+| `direct_upload`     | Set to true to enable direct upload of LFS without the need of local shared storage. Option may be removed after we decide to support only single storage for all files. | `false` |
+| `background_upload` | Set to false to disable automatic upload. Option may be removed once upload is direct to S3. | `true` |
+| `proxy_download`    | Set to true to enable proxying all files served. Option allows to reduce egress traffic as this allows clients to download directly from remote storage instead of proxying all data. | `false` |
+| `connection`        | Various connection options described below. | |
 
 See [the available connection settings for different providers](../object_storage.md#connection-settings).
 
@@ -131,10 +129,9 @@ end
 
 ### S3 for Omnibus installations
 
-On Omnibus installations, the settings are prefixed by `lfs_object_store_`:
+On Omnibus GitLab installations, the settings are prefixed by `lfs_object_store_`:
 
-1. Edit `/etc/gitlab/gitlab.rb` and add the following lines by replacing with
-   the values you want:
+1. Edit `/etc/gitlab/gitlab.rb` and add the following lines, replacing values based on your needs:
 
    ```ruby
    gitlab_rails['lfs_object_store_enabled'] = true
@@ -151,17 +148,17 @@ On Omnibus installations, the settings are prefixed by `lfs_object_store_`:
    }
    ```
 
-1. Save the file and [reconfigure GitLab](../restart_gitlab.md#omnibus-gitlab-reconfigure) for the changes to take effect.
+1. Save the file, and then [reconfigure GitLab](../restart_gitlab.md#omnibus-gitlab-reconfigure) for the changes to take effect.
 1. Migrate any existing local LFS objects to the object storage:
 
    ```shell
    gitlab-rake gitlab:lfs:migrate
    ```
 
-   This will migrate existing LFS objects to object storage. New LFS objects
-   will be forwarded to object storage unless
+   This migrates existing LFS objects to object storage. New LFS objects
+   are forwarded to object storage unless
    `gitlab_rails['lfs_object_store_background_upload']` and `gitlab_rails['lfs_object_store_direct_upload']` is set to `false`.
-1. Optional: Verify all files migrated properly.
+1. (Optional) Verify all files migrated properly.
    From [PostgreSQL console](https://docs.gitlab.com/omnibus/settings/database.html#connecting-to-the-bundled-postgresql-database)
    (`sudo gitlab-psql -d gitlabhq_production`) verify `objectstg` below (where `file_store=2`) has count of all artifacts:
 
@@ -204,17 +201,17 @@ For source installations the settings are nested under `lfs:` and then
        path_style: true
    ```
 
-1. Save the file and [restart GitLab](../restart_gitlab.md#installations-from-source) for the changes to take effect.
+1. Save the file, and then [restart GitLab](../restart_gitlab.md#installations-from-source) for the changes to take effect.
 1. Migrate any existing local LFS objects to the object storage:
 
    ```shell
    sudo -u git -H bundle exec rake gitlab:lfs:migrate RAILS_ENV=production
    ```
 
-   This will migrate existing LFS objects to object storage. New LFS objects
-   will be forwarded to object storage unless `background_upload` and `direct_upload` is set to
+   This migrates existing LFS objects to object storage. New LFS objects
+   are forwarded to object storage unless `background_upload` and `direct_upload` is set to
    `false`.
-1. Optional: Verify all files migrated properly.
+1. (Optional) Verify all files migrated properly.
    From PostgreSQL console (`sudo -u git -H psql -d gitlabhq_production`) verify `objectstg` below (where `file_store=2`) has count of all artifacts:
 
    ```shell
@@ -233,7 +230,7 @@ For source installations the settings are nested under `lfs:` and then
 
 ### Migrating back to local storage
 
-In order to migrate back to local storage:
+To migrate back to local storage:
 
 1. Set both `direct_upload` and `background_upload` to `false` under the LFS object storage settings. Don't forget to restart GitLab.
 1. Run `rake gitlab:lfs:migrate_to_local` on your console.
@@ -241,17 +238,18 @@ In order to migrate back to local storage:
 
 ## Storage statistics
 
-You can see the total storage used for LFS objects on groups and projects
-in the administration area, as well as through the [groups](../../api/groups.md)
-and [projects APIs](../../api/projects.md).
+You can see the total storage used for LFS objects on groups and projects:
+
+- In the administration area.
+- In the [groups](../../api/groups.md) and [projects APIs](../../api/projects.md).
 
 ## Troubleshooting: `Google::Apis::TransmissionError: execution expired`
 
 If LFS integration is configured with Google Cloud Storage and background uploads (`background_upload: true` and `direct_upload: false`),
 Sidekiq workers may encounter this error. This is because the uploading timed out with very large files.
-LFS files up to 6Gb can be uploaded without any extra steps, otherwise you need to use the following workaround.
+LFS files up to 6 GB can be uploaded without any extra steps, otherwise you need to use the following workaround.
 
-Log into Rails console:
+Sign in to Rails console:
 
 ```shell
 sudo gitlab-rails console
@@ -282,6 +280,6 @@ See more information in [!19581](https://gitlab.com/gitlab-org/gitlab-foss/-/mer
 
 - Support for removing unreferenced LFS objects was added in 8.14 onward.
 - LFS authentications via SSH was added with GitLab 8.12.
-- Only compatible with the Git LFS client versions 1.1.0 and up, or 1.0.2.
-- The storage statistics currently count each LFS object multiple times for
+- Only compatible with the Git LFS client versions 1.1.0 and later, or 1.0.2.
+- The storage statistics count each LFS object multiple times for
   every project linking to it.
diff --git a/doc/administration/pages/source.md b/doc/administration/pages/source.md
index 0aebeaf2ebe..d1a8b703860 100644
--- a/doc/administration/pages/source.md
+++ b/doc/administration/pages/source.md
@@ -407,7 +407,7 @@ Pages access control is disabled by default. To enable it:
    ```
 
 1. [Restart GitLab](../restart_gitlab.md#installations-from-source).
-1. Create a new [system OAuth application](../../integration/oauth_provider.md#adding-an-application-through-the-profile).
+1. Create a new [system OAuth application](../../integration/oauth_provider.md#add-an-application-through-the-profile).
    This should be called `GitLab Pages` and have a `Redirect URL` of
    `https://projects.example.io/auth`. It does not need to be a "trusted"
    application, but it does need the `api` scope.
diff --git a/doc/development/code_review.md b/doc/development/code_review.md
index 04b8c66888e..be655e105bd 100644
--- a/doc/development/code_review.md
+++ b/doc/development/code_review.md
@@ -177,8 +177,11 @@ warrant a comment could be:
 
 Avoid:
 
-- Adding comments (referenced above, or TODO items) directly to the source code unless the reviewer requires you to do so. If the comments are added due to an actionable task,
-a link to an issue must be included.
+- Adding TODO comments (referenced above) directly to the source code unless the reviewer requires
+  you to do so. If TODO comments are added due to an actionable task,
+  [include a link to the relevant issue](code_comments.md).
+- Adding comments which only explain what the code is doing. If non-TODO comments are added, they should
+  [_explain why, not what_](https://blog.codinghorror.com/code-tells-you-how-comments-tell-you-why/).
 - Assigning merge requests with failed tests to maintainers. If the tests are failing and you have to assign, ensure you leave a comment with an explanation.
 - Excessively mentioning maintainers through email or Slack (if the maintainer is reachable
 through Slack). If you can't assign a merge request, `@` mentioning a maintainer in a comment is acceptable and in all other cases assigning the merge request is sufficient.
diff --git a/doc/integration/README.md b/doc/integration/README.md
index 1070655cc6c..0a6f9a7277a 100644
--- a/doc/integration/README.md
+++ b/doc/integration/README.md
@@ -65,7 +65,9 @@ Integration with services such as Campfire, Flowdock, HipChat, Pivotal Tracker,
 
 ### SSL certificate errors
 
-When trying to integrate GitLab with services that are using self-signed certificates, it is very likely that SSL certificate errors occur in different parts of the application, most likely Sidekiq.
+When trying to integrate GitLab with services using self-signed certificates,
+SSL certificate errors can occur in different parts of the application. Sidekiq
+is a common culprit.
 
 There are two approaches you can take to solve this:
 
diff --git a/doc/integration/gmail_action_buttons_for_gitlab.md b/doc/integration/gmail_action_buttons_for_gitlab.md
index 93e8820300f..af9972e825e 100644
--- a/doc/integration/gmail_action_buttons_for_gitlab.md
+++ b/doc/integration/gmail_action_buttons_for_gitlab.md
@@ -15,20 +15,24 @@ If correctly set up, emails that require an action are marked in Gmail.
 To get this functioning, you need to be registered with Google. For instructions, see
 [Register with Google](https://developers.google.com/gmail/markup/registering-with-google).
 
-*This process has a lot of steps so make sure that you fulfill all requirements set by Google to avoid your application being rejected by Google.*
+This process has many steps. Make sure that you fulfill all requirements set by Google to avoid your application being rejected by Google.
 
 In particular, note:
 
+<!-- vale gitlab.InclusionCultural = NO -->
+
 - The email account used by GitLab to send notification emails must:
   - Have a "Consistent history of sending a high volume of mail from your domain
     (order of hundred emails a day minimum to Gmail) for a few weeks at least".
   - Have a very low rate of spam complaints from users.
 - Emails must be authenticated via DKIM or SPF.
-- Before sending the final form ("Gmail Schema Whitelist Request"), you must
+- Before sending the final form (**Gmail Schema Whitelist Request**), you must
   send a real email from your production server. This means that you must find
   a way to send this email from the email address you are registering. You can
   do this by forwarding the real email from the email address you are
   registering. You can also go into the Rails console on the GitLab server and
   trigger sending the email from there.
 
+<!-- vale gitlab.InclusionCultural = YES -->
+
 You can check how it looks going through all the steps laid out in the "Registering with Google" doc in [this GitLab.com issue](https://gitlab.com/gitlab-org/gitlab-foss/-/issues/1517).
diff --git a/doc/integration/img/oauth_provider_application_form.png b/doc/integration/img/oauth_provider_application_form.png
deleted file mode 100644
index c4546d8b3f5d8ec9a61e3b560aeaf5dcb350e475..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 12553
zcmbVzXIPWn(k`MXqJRpDg(5{DK}34*{h@~d(ou?pDhMK7kzNH7KzhjoB=p{kf*>6t
zML<9)Lg>Ah6MXmH-~P_|cmAv^Gi%MPS#9Q?NfM%|u1HRHpNxozh+J7o4n{;o0uT{h
zuqM4o;8X(K!9+yFhnlKz`NM;Q*Urw|MHZ{8t1N7s^Y|54S62>R@w2ltUNJ>#8rrqB
zji#oil9Cb{TE?&alZ}myJUl!MERR_^`59O^yu9CUZf<j7&8B4`zES9s(sCz{z>NHw
zV|!LrbvRtt@aC=CJ3BkUArX-uW4n8LkF!{hj*ou-p02H}{gjxJmY#`9&u{oPY+`0n
zTvEQYv@|n2>*wcpdU|?ra2T6{{g{|jQCTA>3829o-DgIA;R!h0;OFi!VQE!;LsNcn
zMMVvR{r!Vy&+Ysp6D?obwSH~SFDy+?N$2F3V&UN3+}xB?eYUl=jf_j)+uI9@P6-YU
z4hfC4wsEkte>F5TETNz^H8o}S+^X_(uj?DnoYJOu?*sb!`<t4-L?(d#0m0F+aZaz@
z%A2}d`z8(#kEE2fWmR<N=KdHOzZm&3`lY2cI|u6>80+E_s;Xm#$1g4{;CuUUf<i*!
zk<ol&ibhsWPlaSk>O1e#KJ4o1F+;e(jS(4{=(_r*rp_Psj<0|IoDh*wvvYlq!4{<C
zR9ILds%snC+B>*;1=rWtSs_nrS_aC?D{E?MqEm}cPEMYiTUS-rt*or}ulxjy8WNMz
zKYjWX79Lqt+peW=QBY8nU)kEw*vu;`pN6ekTv~hU;oZ^EIXX68TvFE4+vn~Vm7ANZ
zq@=_zu9S!_scZYLtfG;eoE$ZnXX)S(9+w#xmmn%85fYnb?d0u`%uUbC(bm?E&n)5*
zk*jOPwf2omNXctz>B&mUnA^G4D{>VT6~o~AW@ct`a&iHZ!b__g2918=<@WqS;`6&J
zpW$3vM|-2P&|k4obxj?w?&PO=FPi83JA9u!=Hj=pvHd-_xNXbk&>o|&A-%l3;_mLg
zwzs*2faFXxOia&*e#*C$kVur~?=X1M<G?v#$I%8n8Q++dkyjoLdu-Jjew4-f!Bk{1
z9uho|y_Le2;mYqRDN-cMty1&0YNn&YhdXt&azBHu9Y5sa;?mI2fOsYm>maz41UX1&
z6GZyg5D`5jQkIj3za3jn@m8fm(6{g5-U>2%h_6PXCt4WOISr)!4~g~AX0Ljf<~{sK
zNaUYUYYjV-F|vnxzI(v@P(@X*mC6;xpVXGnaGzPXME{_j$oB?+K4Yj~$b}h|QtrCi
z_@BJI-dT>wJ&2cN$ag$%-}m)ccZsdzKknIH+wJ#0uU#NABR(L7k`NK)QWIKI8PNBn
ztNbMe5s~T*k1{|K%n_$P|Lp4rTp%KX1`t|J2%L=Q9gsnI*6;oov$-|XE|Fgi0Xswj
zju>MU)=?TH+9y`4`OaVZla&F6h^{>;%-gJ65hTcZz0)UEyOD)6QO?Vo)>Y;r==A!~
zU$2ch#K=u2chOA5C{4<MM9qSvJu0Y56_zJF$AY(%>+TbbY?QV(!IbMUIiY@6#Y~&z
zQWNc8&Tt1|F;jKl)*VYg4TAb#5B&c`0HenyOztyGO?#iOGo+A7fu!~}@XkMb1YK1|
zPXC@#6B0iqYPm0XfXmT@5Uoe_1+ngJJqT*QD~2u4O^N^WfaXBFV?8Xp4v2RU0Og!K
zRT4<Im5ES?2G&}fBjgo$tyB&Y0IZ<Ohe<TK8OR<E8~qfW&`C^5p_X0=(Tb1(jW~$X
zaT|<pf7e*8e3P|B0$^a=bLdbEK(APU*HDU>p}xKQwj9bozjv$SV~(6-Vmr1m?sr{y
z6Y_aN?|Ki1k#SW_!lPtrZDTB4w5c~iz|`CntyJMqqf11p3Le}(Tqp`Wy7Mtn*zXz>
z*QU=b7X)P1K|r<4l%Mh|ptAKOtZi*o9^NL8QpDgq@1#yv<P3F>b9evtWi(;CfqIfY
zdo#`Di8E@7H|TL)FZ6am5cMAu(r=|)yoJT~7jC2iTU}&xJ45agIk;KH=!~ld-Z~4U
zI`@UbSsJwQu~&ve>5UeZ!3jFb`3<qy9~<39`^7U2Y_D(o7wq0d-P%nuGQ!A;V_Ya>
zTPH(H9Pf1J7du?Ikq*qS?q&z9!w)&w2K*Im6?0)>EDULP!vN5}GIZ6Lps~o(_>OJm
zxaye0hHd<E#p|Sf2H-_YuSp4Zd+kccpLf;IenBT%f^#1sGQ-o!VpRNFKMBObUj#(6
zoYlF9Z9;plg<S1?YKqJH#5_Fvfh*E#DQCm*b>6!9_{{X_C)LH|K7nXwoI<&8Jm#2P
zL@0p_HJlumw8xWmd#Ifq>!Ut8X5;KPY~fR(D}QU+%KIw}Yh`Ow{-WyRiy!nI5&GNF
z%y7IiQ%CZS{rk%`Nn|LPsLkt%yz*gK$GRCcbme2mVfUC_1!lWu2wh5%BYZqvyhP67
zc4v0En7aJ9hYg;1n>i=$E-$?E5|rx+Gt*m*dB(2X!E9W8^^Jn5AwHjnSnfc_IbX@)
zX-x;QPR9e?lu-~sIo*^uUd}g3V~|LrC1oFBrNc^HxuTr`D`*r(iQ4jNjLci<%4yNS
zmp;r7-#{tk%{l{MKRdrWyl0H0M#WWygt{dKnf4=|yfzxMEq#qm@<Vy+%DdO3KC3!5
zd9%GBJ$#Haw!>tH@Fe~mH=fZ6|6J*}F#b{6wY&sX`OI2kh+3uYZNPou`C~Zj^HWu;
zt?<%tfzxMoXwR5ZugpPV)Ir=CVDY6(4ryFc2He|q>HeW~Y8jjIofS4vO`7sR6$N0-
zn-*_dY(qvyVg)Uajq{kvGGUq8uud*fjJ}dU&nMzgX;0I5)eah6PTFXI;clek?`1df
zx3oIY0@@Nl@`hfg$*z#qzL(F`R*d*!!f)T<(%0Xr%O2`JzLPT!ubsig6&H8DUA1m0
zEiV4Lbcy>zT3ku9ha?>Fvp25jd9NrIjtIAky5wc<a9<~J2q9vww=4rLvpGa%<i4J>
z$ob;pSHEOL9lA=Mtprk|>UG?raf?EHEIDHa86zDB<5>nN-`*5$_qsEZMC<P;#p~$o
zs4SAgMY<lMCWVY_bH!7CRjQkFzE@ej`hGLy9tvw(T#9UX^=-Z9K-}$BdP_zRhLZwv
zJeiS&Yk2?FwC#$3iB*)qog$lW!WFQ)S0yZU5aO>Rykq;kR&sG3fo!eAhf0|x{kqHQ
zpft5B@<2dHGTG<^LuDGzo3u6X`7<>JxqV=T)r{|6E7CF=w0R8Wq%H(7{iRCYJ!{z2
z9FGFnFdBvkqe)xoDUW^rcn=U2LM1xJPd-STa@%O9)wy5ST?PnK1V8wZwftkdazC^m
zzKDQ(^k5G3x^)dpuApFZbJ?wATk>2@VoG836xmW>vXn{^1WeV7F>>=yF1dp;00MGh
z6gt4ri5Hj7SnHF#_{sD(WpL?)w1QrBal-_%hI`-0cuyjJYL9%Kb>$6+n`6P8eTe|{
zOh$*_KJyyqSt(aO{?rc#Ed9&207h=vRg_P+1CPL1&pIZ?ea31mwBl!skIzy%ZqZq#
zj_T*fJuwfV1TWO(r4g2ntsgIycy1>e4UmMwke%1op1}bWR0fp+{f$KeYM&T>rvT&i
zf_RpEj)ntXHdUWR%+QmjHQ%pv`=fY`IaKnj=>&$ak)`368Mi3)oK7vQUhNgs_<l>z
zF9tfE559o|ADNx*CHnXCI9xXUr0d2Ckw)FUVaXv8{pN}AmwH!Cd_}p;sXMm6miKdq
zp1It@Z!<ClFo2)z1mR#5KbG&vn$yT?VCwxDi_7h{K0!ph(*eNHdX@E)R59*XeIAiP
z!0Wctaw_p}!m)-J-@dph$=SfXqRS~uXE*9vvH*_nf&<&qNx;lk5<hK>t1+eli0%BK
z^v0yxHy$w~xsPZ(EZuxK(<Yj)SMU`pXKwtoiC~k4w9|ES;Ml*@INCn+nvfp_MfS1@
zUX^sEc3UBmZ=x#-;Udb>*CP2rLt<q;H|;Z<vV>qmYvJJ9Z=Eso8m+_3arvG7mhnI=
zU+P2|W_!@pBN*Tcq3jLk8ol;BUaDZK#jNqF6c~HMfOD;}!=hSpGT%qsEY-uNVs<ZI
z`HD%M&*>?!JROKydJ=MGA2&Cb+^n`_2Q~J|damQdoP+D@6UaYY`#r}ya|FmA|JW1z
zP!vY2iD&U2-jz$_?U3w#1qJbYO&u0zOM)-=`}Qjini_H@yigsJ_QEAodXtqBedUL6
zyN>uPt+X%kbYU%xrj>iIb-_n@8f|~5jZ*JHQ6rY~Y%D7jl)*B6m(MlF9ltI0P57+?
zoc;J(Kv?LO=No&Uk*IP?9#qp-@QQ2pde4xviyaY4y|2Gs6Qbt(md$hH)#U3ZO}>nt
zd(vvMe*uZTKh!clVYlSoX_>omZ<z95xRE>f09C4@dZZLM^<D5+eZo1KYJ3kgz#wXr
zjmy5L^=ESr|1FP%f=x>{4I@MUW^6-GqC8${o|F63|H4aCaELJ+j($P_Uh5E~T3I$k
z4Vcn_L})>Xh{Bb@Mhc(Ne}OhBkbqnM!DjytLW7f`h>3{)w&^eeQhMlx>P;0t>hn$5
zC1hb{ehEo2F+8&H&?QzPqO9`)L?{C4`UedD)BczCzsT>u@!$XGCHkxVzl8r0`@e<%
z4I9~H!RXTmuUIdfOU$I>$d4K~;4c$e2r~~V>WnQnX~>$uPp8QDn$R128V}S#{iC1P
z)ruB>6pa5J)2_34=KE%KB?n{oe&((Ew_+M$-qkYtw<T(ccZhAqWuu|xGBuR+58p{e
zCm|s;U<>$?<Ixvkb_xnc8{}1Hn%i6-n5^a6(2Fdp*N?AB9K?6mr&R2Mg0Cn(#B1$)
zQ*}+&*;Y}0_bDBoyv}c!wJl<t;XQ8jE2rPptNR8qDC(gLv{%X@G;7t%DwXldnxQw?
zCq|LkDxaxQxZ3^O_<enu#w=Sq)*2b_&8^Pnt!-Bt$?kz|apRA}iROZNd>SXIB#>{t
zkK9a)3fI~4SURD)X@#C;(3&S*IpK6~S%eceuF8=jeRh%Rk8oGWKw}OgF}zrb79@>N
zTSQ(-Og#U(S7$c*+9208_Ad4Va{+#!uV~Z!+JQwJR)ZBs3ZUG67p17r_3T{tx^$Bm
zG|boT4iU~Akv}`8%4r<Y$EX?570n?F2lT*urno6mce%cpC0M`oH<1%*<EiiP>5MZi
zc5fXgixiI+1l=RnPe&KbW5*e6R;{)R2HO4iktB_W<#~nM++fA=@|8AjfSXgE6iK!^
zr!pGxVW2(IM*-Out81Xs&c2cbT-Tv&P>-y`A&j8p(3#Z@^0fLd8uQLEOUF`!*#P1`
z*s&NE-`6G?vwz!<6gU#f^slz&7@wn|yt5!dFn??ZS-ZqB@jfGtT`cXBBr|ZP5WaNF
z^p_h3$+OdlF5*CAixyBt3&_ewJrRuYjg-0BHiykCyF7E9!dsg_T4P8iQrzAmDTGf;
zTvVy(7jtlbVa}jf?M8wF6(CxvfoQ*yjjYeatIA4(h%pzK0bN$pcy3PUlm~2h54gf7
znX`YL|4ppqzAVS?!-9<iLvwbWm!K`*RV33Tpu*t<mTrH0*wiMvC(n-RtL)7qnJ;~J
zielY=*jCm*wm71xAI-8P)D%j;cJ&U^BnCBn_)XKVfWJZ$G%<!@K;rT!LNp%JxfBSr
z>{c7cJ&A6MR{YH0!A`l9x!GpEIQ{TR_`Ng6ftcJL==~y(#q`fsGZXFpO51zar$lnf
zKW*6LYo@*#sHok%h@`&&lD>x(hz%4tjLwTFEXQujOd%pC1vTDSz2T)yBX3-&*uJ(}
zIqA<v=XVN|ZpK?$P+Wf`b^tzh@e=|1HTo{e<oIX;9ra!T<+?Rhje3p8kbARrfNf{7
zuKV3H$yB@LT%&#^Cc(1(aGkai{l+{E?G9Tk=X!(}rb)xyz&pObNc}y`UkW3GsATU&
zhNSqtVy%<P;(O7g-F?k;-D{FltbD<FD8ReuuI8Qn2=QpHX2q+AsR`PWv>=PgK?6>3
z3AQdx_PeRHk1K{gdmF>Ee6u0HaI_{qBqT2n@3a{zUao&=AW|^>V`m&&{)f5Mw5&AM
zCqNsBA;%qBuIvFbdXL&UhylWlFS+KmrYim5O!$>F!2n++G3?ufJi~lPbKAYrIB-t&
zQ@<FuUdFcj^My<H)ROcfJ5-0SS@AA5v1<M|*u8_s)x-L316!>W(n_R#0P}9wKI_){
zLb*44PJrp<+r0@Z14xR6aw?gueW#T{jW8TmP2i?X`ZgUqXBl<vMc%l3pT!n?g$LP9
z9}JOOq=x)-^pco%xcQnsl%(pgA>d1R+00kxOJJ;f%>);N4V!h=U_g^IlwF>5#Tp1u
zKZ5O&S4K*<I5tOp3*wm%T!}tfmG9a%dlT7T=7O=T(fpS0h0u2if;31X2Id1yrRYFS
zYzi50Q${oqc8q`NPjFGBjF$juhzu#x4@OuJ$zS^Bf0LT$<4KWB|LXlqrc?i=<w+U;
zhm?X4%wp8+43j0zaQi#n3QVW|Z|&!kZ8Ne@l)db0y7k6uKPuwJmwf87f6x1`iT-29
z|ET`QuK%G4Q=JTUR-cf_EEKK0xy*j@vu+|%nMlUhX{AaUKR-#cf0ub1;Y}%hZqj=g
z!RrzeOgVpre>sGu{)_e3I>MNLIE2;zV=%t$eyM<DYPH*v`AwO%6kPL3$AGlvVTX3&
zu*blVX7}6UxQ`zo%Tl=0Dy>9|r_ZSRZdpE-S;*3~xuZ{WdR_m*(JM>ys)q}%hWC4e
zR-XW|*aK7KLED}LM6Is6si;91kF9^b^@BmXHZ5Eu`H+6<lD`B!=xzin@!4Xd40*Bp
zZcDd&z_dY_QV@3kl}8X;(3c~{iXdYpjO%WLwnsNr$=3HX5c#o7m${LQ)SC~uW&w;7
zCuti%E^Xd7d=dF336(a06xmsoY7#F$>dqHmZY1%6b!=4csUiZ*B~<_T1bzO9*7E4H
zXwY^3NXNxpgKhtUv=Zv=tXGHEi3!A{>3Bmi$#5jKu`L}N`tTBChwd9#$vixbCo{9v
z0EzN*q?8%Ya$!l*9%HYMfJrYfL<%pKJ1XEK7Q!xxl<gK@gPb^=X$RmwzCKbde7#3O
zW9%tkX)$~m&?fi3S=M*)W*P46&U~8WS5mcngutZB4;f_4;#CQO9;d#y-!;?)(Q)eK
zu^3k0pLkKd7G&yDXTJh%SeR{MbJdlM6)ot(nA`yF=n9hJ2{-?_gRCN3;;NV>-5b5y
zkgRpOCZ7Q|8k%%5)DA$>vS=|DA1FE~H=myH9u-$f-4Ia>y7yD|3yI^d^=L1+JuYOM
zqKf!dvp7Z;yQFAd!fdZ%WuIOislCW^*G5pYlh+b+?Kp7sDJaha&JCyikeRZ|oe8qL
ztWYq(&yc-sn;G${IOq?nm*<VKJK$b}<lf%G;k*NNz5V+s&z27M<kYLAyETzFk7l*p
zb+KADf>Gh!9a{t4Uj??pZ-`9KQo#<S=@;q9gc|(%7reO3`IxH5J*ZM$mW_b2Z+6<&
z?~8=prkTc_=tg7olOC@pS<(x_Y>snszG-E`Y!12Q5CJn&o7{#=8^as!L0(NZlb@}=
zp{<xyA(G1Xp8rZ|Io~hMLw{2?y4;shEzFKJD|{0ztSN`|((F{D<y)$6q**}A(Hg&}
zd^zE(_6S1?x{wUy$<pnM7r3LG3?82QVYf|U$uJ8z+th}<sGd=4YALH@M}9<AideQ1
zpvDMj_ohf}?&<DuQVcJXYaQ-vc<tySH-6yZAJl48U&ZtRu^lyQSA}iKC-SD5X{%KN
z`YRzRRI>QV%I1+LVRy<m3f^CfMnVM(vMV-t?PbTJBanYWYW!+8zkdAM^UOitp!a77
z@|LM=EZ3MY3di}WA{v%d!BWsLjMc2I${x&x88}!MRvWfXO{=GHFB#MT`2FW2R}buM
zDfhS1)Ng8J7HpTMB_!h7V(-I(JG7(6(qY)hr=N}w6z%qRAC}VrXYG@tCw$SXPRD+!
z-3bi|VX>3J!sdp=IZ~A9`U+|eYkku3f{c3Ya=4kHWuMHKai^Of1#dsP89{$ri$iHz
zrL^`{Nh3?rPH*1pmZ4LUBgbU-)K4!(0;B<M_LaTZ?R)Nj1e>OKTMuU4t;S*)v=JTZ
z&;n}oql1ineZ*Xy^c|Hco}okDr2##>$I^ZSW3BJgA|X)6CQ6~#R*Xg)A=8U<5A%7O
z{*?||@g44}uxGrf;H8y3M`LKkIXK)f5L}{P$Q4>iRKxi2>##nJ-Dl!S+a0;bRd1=>
z{n8lKG-Ow$f-+%`zQiw8kv#dmc;Vqy)Nq?Bw0jv1d*Yalf2Qn7NcXz2gL{U3>+J6D
z24f|4cAsv2<sOa|h6%6>8lWa)9Xlqu*4($C6*`?<VK`#bon!?tMCe-D=PSRYdH_Rn
zsPVWK_+j?yDN7F4#il;U^O=u;Z=l2(LrO<q8fNyH#%R{Yi<$wfi>uL%&9EtCibv8}
z{Z$59LYY{J9F=-kOYU%0>AOVzRvG?%`C(eUgn!>JLXLxu0rox}ajjCu7c?!rKd&UG
z<7PW(G1i=gt%9<IqOlaXA0tjkMhG?O|5b7R4~vjT;660ZI2;RJ{&ns9$z7=U0=4+*
z1EODDo7Lyl?00=+go5(_ld2FBq5mHyZuavYiul!fW6^eHKLyIi_?O}Kh5hN}MZ@i&
zK2^G+8*Nb<4cGvniGIB*g=oLCu!Ropp>P9wN%}1tsqG=}FioAN9p`zn^f3-<Omlb1
zqb{kpGKw|7bVuyG?Ea8b=P+MpK}6W4R3%rauuAmxN_&OBPTbY=Tnr5Y<KWPVGQtyf
zV>4=@U@gdpiQ`yMGBP|~%seTG&9Ep<xXp>V>DA8=uSn5S6EUCNOKw<|8^C!+_HJ7n
zqCZNhJkGdDnX=>km2tJU{0o;u(c`51x`I(2tYMBLZE%k_F4f16+fnAa=N49$;hYhM
zPe_fKMO1d@Y4>a*j?{BmBr!=0LJq~#a;o4b+P&DP*Z-P^0cuLgeorheEQ)4KC#;I9
zKbjm)UC8YFGenM1%$|lDKxl)`j~Ax{O6F;-`;O>Oxv4q-T;I0_*Xa(lCbnPwWJKtC
zIMSUT^E+T}4|S{dQpU5F-o8oY?zTU-m?e>xyTxjgs^3dub`74a9kg`5i2!&NJ1=LP
zFOCn6e>G_nTi%vtbg~lBdw4p9KAE#$Dbp@EcodsldXGh89Xzm^`>>%nrjIzks(&||
zTn9)Kze>4&@0bNb-Sm5$_9z`T^II;G!>0Iqw&%ka6FSm6wB@e1@;W*fZ>Xe){Kyy_
zHnL#w#NYnZ{)n=X0@Vn45C~8;Gli=AI_~PCb{7N3QQr>3(Bvt@EXB`abs;@AeUpEx
zuj$qZuYB5CRR<e@VKm(1GuC&v<WgcV9bn%>g7UkV3G?bO@q<=uPIQqs7{Y7GRdx*F
zowt^yK|T(ZhJX<|=b2oM>0@hxEYRh{GnyT&fgDS`1|`u%U@^$~d08j#-zz$`nK>}w
z&-8GhtkBLJ@RY6kIZMIf<ipW{MaG?2l=j>lkH>Y8ponw%cHoEh$a!ymfhguA!G_5F
z*N;%Ru6mKXc<sYH+SA~#wyvR>@`@mfG!HZ-4r}}ip(|XmQ9Qa*^yeVS$F2Ay<s2YA
ze|a`rkL=m*(AzsA^T><?a8q9ZALN@jLDdDO21p|HU7s?AW`-qS?CRX=vKp6(FeWRE
zh8jg*oQs_vLXU}|AB!qL&@8c6I2BoRL*<|qgWjqjaD7Sd3k&M7vZkGw2!7~_E&s+}
z_hswi&b@o@lf1n7#OBSQDMEU!hgZg&7aagz*#><~^22+mUWtO*h55Psa&CcYY+SN1
zNw4L1SW`Z%-5q2s!_~b%4S&Bt?rx0*P9h}Ajv_H*`cmHmZM+KO3`?=jqj0DE+C|tb
z8K(caf%6@l)Es*7+(0JLz}qpgkPq26Lr_f70H-U1Hs)5#A?oRj*PH$q?Ut13xQp9A
zl*>8C4rFpd=0%C06A~dkfNRUqeb`j#@YCA9T2zX)9~ut5w;%Hitpm|ttK{^s=U}}<
zy$Ov#<7BjM#de$^DLAuX`1J2(u%K~yif^pu_I1S_j+e@03m#5UIm8J*#t3M9dmzec
z0(Pb=%lUz5rQK_TtJ*aCo3E54ukrR8X6|QQB!Y@-mf<)muc!J#Z?PJ^s8j%hhE8*O
zA2>l*>SYZ|c`UESH0UKVCko^ZdIfPU+cBy*IL`<)-&Y1TQY^BEUuj2v$Ci&VyZ$J(
z=$pbg%aaKl^lTTUx9d~oJ<Ldk8^Pj&bS>Ij^WgXRB9wBeLoAx4RwQ&lSU9flOSn(g
zR9GIp6nJIP1kudY@fi{G()wfrs&n{S&Rsd#HjeTrOU>rgCD8opE*i$GqUNzoF2|Ma
zaRB)aKx|o1e}bR$yzh=7=X3fr&$W=dUCPGeB(L07YNc_#x)Gm0plil<J03a5czekF
z8KY~kMZb&c)$;=>sP<ld^tIS$*Ha+SD^lHP=X@8SoGt<YFY{|(R9^q2RWJL(U@ja#
z|Do+m?SaqfD_J_7rL<^-w)E3nwc;x%9O1&;f2|rx;%M&RJG4}{ZGtI@(!1|mG)T*y
zP*!fqA$#r6c}xI<q~#fSuJ`?W{(HnE$D94sx4|u$J!oQbxH^#ZZ^PV!JJazAx1jRO
za|VkNkjO^l-3rrtx7?R!JHGtADm$0XUa%+a%^ljmSMf4^%A>V1OfYTFK>TJGXJhX|
zqe_(M%W`*-rShx0>99nUfI=Ae3%fr{`PVAVE(}c2emcbkVh82uD_^q9c3rKxNGAea
zi3rZLZ&o})48z<KOzl2Z^yAGOk?{2Qoyv$<sQYZ_@?Bje`b;rvVWw!9Ga44Q!t6Br
zHSqijZ(8MU(Nh(A5}~Gf_eJxNBPd&1mGAk=35_4o>4s$*yF9}w9JpYAV8vmZ5Q8=G
z^Lm(rTei3U7^#@MP0YoeHiWy*hw?FH!0H}|6CD-cvJ|6E+dpoi>wwtj;Ae5qDtFUf
z1cS=os$K~8pJF1RHhEq*B$OcuA>%)V%Kyds7xAAG;{Pr3>vi6s>7m8p#lLC@8+EAY
zxboQ;;OMe@%4e{%XFo#uHymLBS?B%;f%fJ=hj+HCV{f1*YjLZ#EV?-i=kY}efzoX!
z*4y4~qO7}9sfD2!;C{S*9-K5m;gV*FhLb;E*K(-z5aNFWwGZ^<D1o&ftoq`{FVsOM
z*(IiXn*vd_X*;9-L+^0l7wwjnP~p97$Ms{em8Qjou4e~2q1<tYU+6zD-gtub`6qOv
zfu<<YeBZp~NjKAmH+k}~7m@bN9y6A9dAa4~8w?B=A6z!Ko*7-TAQUyp8_$0W@B#DL
ztXe3$`x%$y!O}=lp>1IPt1bn#AM2A(Od?K6{w@;@2%dD5<`*m-*?f5JWT4+KXfR!g
zTY7XR$?wu}UmLGtQo1>`s(*j){nY+KK~pG+1e{DN6kEP<wmf01s;y7lyfIWNtT&(0
zk!Ve95d(#g8MBalCh8pVLu>No$(x~ErC-U*PuvW7D)dZ~OoTDl;<<uLd$i8OZ<&nm
zSdzSn!$TPEQJIq#-DmI`Q2pb&)^I|6&AKGF{LJ*r${f9tTJBl$_wn7{<Ays?k9;zn
zpMAH}SeWeLb(kwEQ#itVkB^0Cwe_qb$D$O^<WFi$I_?ZU__@7x3GxVhXPUj;);-1R
zp1&56B`w`FyQ&-egSO#KTfy;81zLiwKY66q^WigfguksWwCImLx34n@KP{|8A!A_8
zT-vodk~4d|1Ys(ay}h^QvmYas<cU{D>}Mp7GMl_K)>_Bnsc`z^X;B>z;|CJYwWCZC
zv~<DaL(8i8sV47(F3Kfk2!!OA2b4B+Ty{J8_1=}9t4-rrVf2o5V$1aI!Wa6^1DBtt
z{5xP`M~JMVD~-a3VSe$Z^|EAKh&E=)_~rVCD}Kq46d`m6gy9j0re5zudTc2SxSMEn
zdaf%&q=0k%=j}W2BTT{~3Q3Gc5=<u|w8Rg=^Y$<Oj=+PFH5)GRpR>$#0fNN3`%26g
z?Q{8ctz9Me^NwfXB&VGyj<biy^bnF?u|p^HcuCyeeHZ{-c*=1;{k~me{Fg2CHP|x>
zi1B9O%KXN4FV_1Iex1qLRwHIm#kjj->f(NV;n$BaqIC$2j0ipWe5gBYpTCF+BvQh}
zixmdmA5;Y{e8fdP#y{qqiz0uA?5(Oz+lk1`Q-Tn|4xM6QeF%uJ9TD1v{<W9S)qfU8
z)TD&p^)#sR9B=3}{QaC!Mpg;(?wtm{0r|EH=}AA6G}vb4Eex?=-RDk0_A+i&vkVDt
ze!L>#4pbn%H(~}ovbV*lhBQ)fK!Lzh*!}nnJ4!mEL1gXPZ1Siby`5dO+wP|6<#h>g
zWux$9AN%MdE<Jq(?b3*RvaUYsw-`l!DhIp|0QpKAx=Rd)>4n_@*@EbtagO{0W<~$p
zV7_p)C=b?4KP>issWLuB1H(cm`Hw(jUXH><9v&Y$(tB!z0F%41k-Zt{?b*d!VbzA>
zM$dCyz(E+SWcm#RVqA`7rAW-;!<}wcl3HGPqRc&abKJ(&S;(!z;cj<qb_6>_r^)JG
z2rs3H8(l}e&+`u*yx{X4H1#txKpy;ESpQlt()?Jg3?`gZwKbQ*;`ug+q7LTKbt9&m
z*mnbF!^03JY#n1T<5HU|H}}jIsXSufh~&AFwR7(SuKcDRAg*{hYmb4?)P=s|r<c@P
zO><PFkUC-2*>LzQ8<KT4CwLDmuYESjjSiXpxOyDpvPUdgmzyJ*ihQCAXpcwc05NTk
z9lvC;SZXl$srLM~;fqS#S-t57yrhd>)DVuc2y}nE-edJT$(eA`uBl>*uis<hoR-y2
z9HKWY1FZ?)_X^#-rviBA>#B{JrLY)_jp!ylaL~1jqYOxj=#<J#Y!CYb-}@Gh^oUfV
z=}b{f*1*=T$vv?)PKrblGepBiAjgydp3~morDX{-NN$|ToZ(WPhCCdL@NkbcKLxzs
z@D=XVjJhNI!~U>Z>L$)#&-R?1KsNHepcPvcn^wgfsU!UqQkcQ!FE9gV)~+5HPrJ&t
zw$<bHsO@B~MK|=IM=hVvQE<liCI)7Zd+bSZMGDZXN&)yuy7IOz&SjtI8GzN*tls4c
z#wf*4F7u0q$)A%2ZtZ*zN2)*Q==Mq-tL7YWZ~cU$olnUn8A_o12s4w0OrTR7sMbE8
zIn#c#3(M_6p?@}vkNK&=RNKr92en)y7sWoTk!E|cXr&gbYhXNCwv4O{|0s00x9(se
z^C>^BB|7B>5cX3Uv!MEBX;yak7&THPMDj}qI9PZIBYUU`>m*TDBKV0KReHknvdrJ8
zdCN=qaCN=?^10g}I)B?A3BKXq9)p^Q;5CVq2wveoUFXi@Z})$?{v-JgDdJ5+6vpy)
zzBlDU3~uT|Gn0Ok-6+q$^zDDqPTZN=Zn=%7CX!$RQ!)$+Dp^{qv^c&yFoHzH?BLb0
z!r9XPn9+GKseBBL^;d_H5gbAi4%=mOSZk$$f8)dh76+fZvaM_v7Tw9@LDp^*j1j8g
zNmoHI`r${IfjN7*K>_2~<*sB%!RpQ1(Sgw}?jr`tgCFgu-Wa2p^Ej!PniO2J=hL`i
zX6_kGc#oA%M`j4UM-r2wk*o;1)$WSsqJ3`Zp9S=VPvK-L%3njr!CiZKTyeGbU8Yiv
zH0lyPmA+P!-dh<fbZqjobEW$&Xlkj4;GjOte!wUvWh}}9b0iz|l~Y!!^p)M$13oRC
z3C?_3Cc{t3sY(D<h9WXYS^I4vVPC!7-gBu?;Cs2E_4Y^Q#ZNXO?R{n5EENB?K<l7U
zx${N&Onh>|_wDbTJ3aA#Jq#uHQh0K3xT{^>wF2YJ3@fxM+FB*xSw=T7hqU6DBKTSK
z_5^Ygm+h*1Cnqe@ANTw8*^w?wn!~~k#X#)r#<$B|acTkjHh}!^{(CAnAtX1HAe=5p
zm)$*4VVZqKk6xOcoUr{B=0JxqZ;n<S**Gyq9iM4`=gVi|#W{mGd+Q=~g6k$6l~?jr
zqK`Otn27N1+lV4D`lQ*COOG$q<as}eM~+2^o2-gPwZ9D~R!K*TWJMK9y%?N}fuXom
zpjF5#ko7r3`|Z)8<nTOYj7@}wc5UDlNbx1uVhhJiG~pNt_wQe~@SiyK4^80x&;2Cy
z6X*tIJSfp;&gJt6l==m_>{X$+KWK|cxSIOnZ$n6kA>eP4EGmsHB@Csuh%3HlzpQF2
z2fndDh$6=<;P0%npSk0-(tvjYj;3g;sabD38rEzIJDgCzv)`zWAE$8~96ySR<MQ2=
zQpXQcHI(||E4)N^J)BE5dX|t{F_Q#HzyQORSqkmmiYE_WwT{lxH+|Y)r$?_pBC6HT
zf`4=U=g%BA&_rDCFlnPB4-aWLvpLr4O7J+6ljJ}Bwy%(aQRn73w`Iis3azJPEB@9M
zn>pmJz#pIQ9LgkyMS?@^N+iDH)f>xA${4qo>+O^Gr_@z2rOmzrIg=8J$i1B+CCD#5
zh`4oFYU7ycOViG^QgC>b0;;%q`aA|5UWOhVr;%;oX-xctW7FP6PR8#sh%pmD5XjeF
z(JUx0)_@p)u7ODDfjii0MaGR&Qz~Qhu6bGV9w>>Q%mVlm2^iVFJpkrRLB{VWpB1NX
z95nreG&tmGUtY8mPJXk=13J>z(=+&rA6Om4PPMh0utOU71WuP`s}+Hx)u^ag0%(F6
z2o|qpuKLzRuo?!gcB;7nV2W?I?V<0{o3&VlyF_MUuI^6Oj`((>urP|B{Rzx0)Jy>s
zXqM8!z^DC}{Zuw;*;#RBj3V4JF!F)&4_C(&Laz_;Jx8k<EexVpcet#Lx;E^^lkP{u
z-}+p1Tc7N5ao?OYULEpoiI@w)yJ?W;F(~6Di-4vyTKZJDf&x^sop(nEU)23Po5z_I
zH07C@Qi43a0pYJVd2)wAocpeXmxPaJ4hI;OMn~gY&lld{ZffLh_IAV754lMp@oo#&
zDY{Q^VCQ}@@DVuI5V%j0csrQvruHofd(TNB2+311i0cpVa+BiA!CRq260he9)5Ln<
zak7#1COqP3>gImXMa7`VQ3V%c0?gG&!VGu>-7>8v&Nx2RG+%jY2Z=bi*puR-%LP`Z
z%;J&v4Kd}AT3>4x!gNo-I#^AEn2sx~c5d7j?b5QMafR*+O&m+u(|cca?G+2`zxudv
zKkv9U^q8Sq{$)MCbOHb{&E8_VU0U>(01Bm55yK3&Q+%8YXud>b$_^5m6pfDAAx)}W
z9E4#CfQo`!uMD)gwG77e=12zaIjTJknC3QA>h>QRm>?xAEErPJRbvFyZGGw*eeD6c
z{hEVG^NtBZH`u*yNfl^_Df8aWv1S8Tu8x&psk^$`Fg~Wg^gI)BP&UXba+t_yS&X{L
zLvXC@s2tl?F~4tH3yBCY8ZCVlP*D_y;f1&cJkU7J2_HW#u8YO(URrsU!}qBEbBbR@
z6NFHV2ZzYmAnRvI^h-J_Z0*@xakx7t$WXA^s^(71*w=&HUhE)b$nl-WFtVEY2MV|A
zuM61P!pm?|NO~RYo(E_kJk3H<_&&(Za}KV|l?IDOb;%^?S<%M5Q@l%4u$8lla!9f&
zXj3wAwtwtz1F?^)V&&7WbqHIgIZTETEuflm_$E-W@4^tBik#!Ev5N=j8^b;R&QQ=j
z&9su`>rZu&XRq8M&V_7t=)R5f5>EPIwoCfd=PUm^bUq~1pa0915kf8X-vE2geD_%u
xUod`gjg`nKdcFrq@%{nPs{jHLHX3t`iCFq^cHG@Y_=^LPvb?%np^TZ|{{cuIX#oHL

diff --git a/doc/integration/img/oauth_provider_application_id_secret.png b/doc/integration/img/oauth_provider_application_id_secret.png
deleted file mode 100644
index 21e442b5d048b2d9428c840bd7a135b15e0c0984..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 15280
zcmbWeby(X=^EaH9DwJ|sC=@?Mg1dWLiUfiMcPkRyT}mmXMGL{Tlpw*K;zd)u1oz?u
zhXBEOLeG7_KYO0n_+u}w+3(KI?99&2es=O%RauS@p8_8M01$%Y-#`F>yC4AImi+^~
z8%i0aFaU5Hs|wbT;mDlW**kD|cR%DcKRr0)6PIIP;y61!W#f~$zP@&Kap6zuB_X5Q
z+1c6M-EV1WDK9TaGAff%z3BWkw}#%PWnkmw<<-#AZ*Fb|atN%j>!HhkEK0KkM#F!y
zsGaU%$}6g}it5118h-vk&ORTzIW+nQ1~2S^y}Y_7+j~!*KEtkW1xF@_hJJeg{{1tM
z`9(Hx>EP_s=SXR=cE7l3cTcZ?gxt}>YJGiuTt=a7<MQz``uyTzVR0!YHDBa4`0DD~
z#MBZ6am8Y>46M9c^~kjJ%o(qk?bg1w{^{i8R15}#Kon~08XX-S4S^k+kfSTBYerVC
zabHWfwzfG0Ug{f~&HBan3L1Qh$v_Q{tYnnU1tkedDd?EmTUy&4jLx2(o@T>y*VobY
z9Yeyx!oS15%Bkp$jgOmKK%<g!GQWP?ADkGFwtS74dH4R~_qqM~`S~%^z-iaWm-6bb
zUP+fV{IqcJq4UTZ(eVrjg-OV$o?Ki-MZ>(j{lO)3Ej<%?6)i_Ii|P5*eImw(bIXgc
zyqeYl9ua9<I|m~pBU`t3?jAn+mA@w)Kd<H0mQ3z~HBH<C!sO)TE1P@8a;I^BRn;|v
z=;Qs<%aW3^+S<C-MNDI33kB8R=%R+4+<Xl~Xj^-GOl;iO;cd*+Z*g&n%Zp1p2baB`
z5%(V}^C4+DqdUp)^7w=#?yr*<P5m1io8b{rCmTBngIl8pzMWlNo5vT?eVad-RC)PD
z%xV|abl(bOPvw+071ea?@9(RsX@C5Q?$qQAO+a|Rk9KnLnAkqCw6vVxJ3W%Ht!e3h
zFD0U?qP)4YA0D6eL!Rq$aO%9QeeLl4UB}vytc!+*#xcbAH;i@PmT6L&RX%&@EVp5u
z(?BDCcuzm5*PrwH@Oa$f{b|TIb}oTK0gJPkBCJi+DwHMVm4FfC<yJED7vz$Kq-2E*
zPnwGW_AAp^IQu&z(FvQ6{Z<@<a?tOAJo`u3j=r%8Xvl;;`|HfX6ZeE1#d}x);BNrv
z%_|MBsjYNld3{|P<n~LaUDQYg`U@w+*KtNng*z(j1;=NlpHI1Ed01cLX_?(I$E&_|
z&8{^|O8cgUXnSO6%;U#YhywJ!L0Dzkz=Vb^hkHk;x3&Ml5UVDebnPK@P(<iDLWt+{
zwZq|gkkRnG1a<@DB8A0@t<5nkse}fV0stmt-S0rR04DdrXGfVtqPhS;nZC|l*p-sU
zuLWFht?)zGZ2$m_k84dJNhAOOtPKtTB#{8`{;T}~=Vk#k1Q#B3+{!`4%K}FQHapsJ
zB<MS+Am;0FQ4?=ESX7FhG$VPu6%K&kV)`ZUFi8XZN`Q$pQ{5jo_dADQ)g3M<ENi^{
zi}@l*@eerQrO>*bnFzX3fe|t{n6H7>o?A+~&COC@BL%$t3i%w5Wn;Lwg_EHE)%a6x
zL=*{@ZpEK3vN`l0W^cfvD(NEhkeNJF?`U)UAMo|5=A<}MEFDadjs4%_Y6Mx>c7)=w
z{jU!t!1w?+*s&oWl}H7#r(!1`y76}(dCa2ZWzYF?CdCrrO4(<Lo>ewy`P)hSv-Or|
z23aNRf}M_W*;?9LC7_VS0Cn${rw;;!*MaHvYT|8#3Bu~!EYtXaBsVMOQP0Ow4D;2_
z)p`=A-r=&(;A%5z)xNP+`AgpiyGWEMn0K;!&R1XNrZ}uLS?>~fWnfbs55v=|!%pp1
z-$dtwW{D^-Rv#O`{ki#&V^Rws-v_5@aCdSmglJ_l)+q}g_#8BEu*jp}Kq4L!MYL9N
z4KF&C6S=ij6v8^5lmgNQ-fqnN{QJ`2UA%o9cAn*c(F{Up^_={-y;-Nkwe;SCC9J34
zY9`sgE|1Rq%6EYgfZ{_SHw870#ZUwA&UA0t-cRmRNpF=?DnsardqGUpSs!6t8sPfF
z<5{8G#03umi0;fc8HO>H)Kr8+%^<HsjhDr@!>v%Su0$l#WgN76<_S1%efbKCCSt4z
zIRyK}ij1J3N+|d(xs-_L8W^m=s=XmR8#Mtm9Ob-|BSK4x_ERk-m>TV$9x-0$VC{uk
z0R3Mk1m=Xh$kcTxiT>=Zv#V@WgEED5BtKmtgviZcU_F8IU-C^L^|?Gw0R=1Puj51i
zqJeMsxAB(6pH8&L#`1L@V!<q+G&}m;`~wxVvtRHfH)77=fjDZ!=N!bTn!Hkd3=_(q
z6R~l3Npt;WDdckY!m8L)Ucuih2?-&!HNqExmRbnP*?$`Ps!07Rgsld|_C69w-JN<^
ztVP);wblkqfACr3++!HHGS1pnkUHg)`abAe3p@lwsrbmCrez3S;S?3y6@z+}5{2V6
z0gsC1+cB3)3CWvY6S8{9rNX>rKAB(k$WB1>x64`gXN`8O{#hUOTbZ4>hLihZQI2J_
zKzIH75?h9a<oSIg6G{e|!w{dew27l?<=`M!AAiow;9-4%WZ6`;*Z#tieKu|CHE^(v
z3v<%>$VNgEdi7pZhamL38aTd-A04YzXn0<MXe3HH?4{79Hk?~aOt&!4TMG^<4CCiU
zv@YbhDo%>0GT0PV{2DKUyTL$|zCTlcsm62Ip^Fv@ZB`84=ybpjXD4)|uasi$<0+ti
zIkuM*9{0j$%3*?B-4cXaHo1DHyp4m3V1-_WV9oEpKU^Y9VpM5mee62ZUP%?J^uVLK
z>o>sxDvF-J;2R}xmFg8V5QLB7W#h1~O`MZUA~|=tNLC!3Ec9buXRSX@twOIH*;*JL
z*=_5X>gvig^RMnu3S^b5CSJdYj6S$K1av>OMW@UJ-XHY38`;RqM#pXjsYiw~QjLp%
z=Tm#+mIDJo>07M}ye!CPM3ek!(_MQ{rXNif3kGxZZ`5?RFTwHdLN-2F)(?Bw_?)q+
zECL16|L(S?Zpx?{cv?B+bvH=!_ybk@&N7@9!B$O++psScSc@V!clAr;EYfQQSK+lT
zJ%i(G5u58%`v(~FCXP{5{!ZN&(26*5cIXLr58TD*Z?pP2?Iq99_Hu9m!>*EK!-%@f
zz~xM~Z~FzI!Hc`N<y-z#OKe3-5G~h~^2C@TDUNS!b#mv@xgMEZ213Y>+H`7(3EE3|
zswj!pMLMHu!3jZGsLzo=!(U-3RqJ+sFnn`F7*BnIWo~hp79!cLH_Z(%+fPfF3JISX
zDXVxPJhht)sds)C?9a`Du?k9e)eV8wwT{U#JmZIQv&z8m>1`y2B{J?PiT2KDC;l)Z
zPHCv6dI1;qY#~9QRJ{ko&be;IaDGm%`l4|--^mSi-^|&!)yQlUhQb!#kAQmww1!x6
z_{^5z0#D{SR@q6x1rI}Kw-f?Q$t_S<h~FO3I&J#z@Tj($K#IlLgM^QLHa~T3_Qny1
z`w%?Z3Hl1EyIneD;ifPSPs__QXW)SWIZ+bdGpbIBF)IgVZ@i_R&@hY!OdYo7aI`#-
zGEc5*&S}_g?JNToK1*b<g3zZo)MCyEU9n8wwE9bx&uu4XntErP4(d85zu4l3(k6?A
zv*GnJ!^To(+YB|DKNg`DX%&}+f3!+2!yTH&ZLD<Dt$r!2#rXw~T{V9JDGlgNzf)-g
zu81FW6r9tCz+j)l_!oTBz|UYTb4v{R#svMMN*|QYq8JNpH&dsLnQg*sQF*i478UnR
zVPkAl3|6RLNAMV+za)5Vc9vSRhhmy%Oksyw>&*6EzLvD9Rb)$+hK_7<6-2ia)01+G
zvocUYH+DL7iE?XN7;U;frS5K6S})c*8-dJ-ChK}R_v=orFC})i*R6K4?`hM^Ys2r~
zt%BjSfzP1Ef!ioq*x0a~DXd03-kuw+*csfukMPM`?<Xe}BMP~l<VI94JKQHEc1@s!
zNYTh0F1{D4u=bvXg&19MB7rTIu|gJLj9IV9opN@R21YN+Km?mz1BuZDz-<b#d7t7v
zCqGGq!B0N|FTa;0??BkEww17k7pRkt>jcYm2dM7%mw|L95FgOhK|Om{UgAvsVQzj=
zp@7@=WoN>-xxy8E*~B8mx1ypwQa<Qzr*W9iv|DI9{NqQK=#|qiBI6(MD1X3xe^p;^
zUusV8D=BFB_y+ZhazJ350hp*y?h7^Sgp-4bejftv7+clcLJHs{fZO_JR@s?CJZgt2
znqCG*<-lpHZ3{)oapyQVtc1}D;sZs$H$mOCzZgUX-{b@)sOS8Fs4L~3^Uk|5;qs;s
zz*ov7{wJ`Wx0}7;uEgQJo4hxJ-GWPUEFrVoDz3zt0r9wO<t7g)0LG);HaACklStlG
zeM7mc`mV-~Y3DIHKyHKaU+S5<Xl4k1?W;$j;83E+tWLs)VR-;x2ri}KX2G$12f|JE
zulBzuQU58G`jbTcR!urwAIdhqUieCXAMkE=(Mx4;fg5@c0N5f8ygt^y$-e%34)$jt
z;Gg#Y->m-#`(H#JM#1w28Ba7AXPl5H<NeFEr^v!%*O<Wlx$9BfT%ky~P{^)UQ(79x
zSVkaVKQp4gHO|y`Iv12_aC&Nm6En$e&;>OfU7HS*^sa$%$sW!@c+l}yl-Fi|I=R4S
z)9J_O^Hy&Sno(D0E$jh1%3`j+980HmjiXLjywK;Vo`F73tfh&kk^Ek#J+s4H>jN|d
zV)UequMg(L$jJvY?qIQ7c?~K$^~_rfhjrtg?_2m?9D{zXoNr%S?amlY^&AV++(}Mv
z11sWf9y-5YR3|}w1;YhMiSAa%^G6Zki&oXEvEK=?ekDQNdEZ?8mVHE|{bLO_@4vXJ
z;<6(W!&Ix{e%%ib9NcoB_T3&Co3ks%T)sQ6INq%tbC~rzDXz}W<(q+vJ2Njhy&ba<
zoDb8X`B6ilyjDccy7S$tb^R?zP$)GZ>2MibPe$0n%bsK;Z%@VjaK`~YHXcEMwq_m9
z-l|JPB|B9?y2|js2rB13wGC%aa9?$@qk29Zu$w^N#B7#bIkcxQ$hq74U^X_mpy_k2
zn+j_^63qHEhsL{RqC$t}?>1{%Z{V!3jypr6*VwIhAQcafma1iWs$YomG<?U;cSkzD
zwAWy@fFB_W5!_I-pUi@u*uH`F(JX8J;mY#P_Q;97twq*eVu><`;#U@q-&lMY8LhB%
zYU?pp;T+K`x9GMWz(gbJ-A!)|iUPRN-6<ogV|2c^I>Wm5Fo#8aJ)9rXS*GXo>wbod
zJ)sBpP_T{n4KOFyHf%N!Q2JWh(N%WMF@L79&Zp8qEAeak6uUz*m=Awec51;ffM$sv
z_$Dk$J81@Q&pdTx4S%`%d-(Rbio66a_>aBC6nL`4JOvh~xlbI=^$_X>r0}%CDQ%Qk
zFKQ(xVV`ox$@+B6GXh@rs?6b)g2wIWD^lE)NJ{j3D49}(8(ML*oQ~C7&GF5mB;Vvi
zQG0ra&uH8M$_UW?dAE_M4_o$1QUxIGVMPRq?E`H&^+5#4w{1wm9Kw#}pV6<Yw@TaT
zNy_OPBejQb!taL*!hpv{#iEU9g~|CYAK^YDIEF?i|GCDt5`VD|8RQ|?CWs+7v4%8s
zOr~by;KnlfAQ|Qc^W*5gw;AfjEuEOhKM;KA-#QqRVT0QKbnFFgcJwB;8dMWo$G_|!
zV3Oo^@XU9T6HCy@nd98R3#=D996R2b<3*TrEIEOVCSxx{d_P*AnlbJM>1sYII0mLX
zMQ8Q7HY@iK3pGkB5^VBLPbrri0G`Myu}Y(<hq>e!IX>fpk8(EXGJCh?8LcVm=UOVi
z%Qv9Jy;D#h-`?lG9tm+YAWa!YI#$z7Kd2)oq;6E%yHWrdsBRN#AEuEGRgY|a9PKR0
zV<@&UJi`@fNk6>}rOJ4$OZ}7C)7o2@PTds6Wg$=<YD4l)-3FyR{#7?k_V$&%U@!J$
zd+o~Jc=KIWyKmOSh?6{}o6@tnaO<6@nu#A(rhQj+ZNAl#e6QY+Z>RF`Jp*1sJggG;
zzT!FAC{YYm=_T3@uN@>mV--NS?6|t?g{Md2>B*FRf8Do{XTT%bKwDSp@iLnqd)cUQ
z!O0Bxk(@ExGH2&H<bVBvAK@aoX0s?-#B4<4N>1!)>{-?jPhK^w*{W2(#Y6m-#9l}p
zw<td*1rRljeM&uH>bfw&Ff+|D_><iB+^d4Rm$jh}CyXtGpn>IJ?riG@@J%SUnuIrh
zwc@TJpBbT$yN{<yZ)aHby`@@Jf)@Jdkw?SrXC*alHRCk)!^EGP_Vt0YJ4Mge^S?ag
zRp>kOX2qQX!o9#zKh4%DGUAN}-{Mh;E$u=2-qtHs`<D&#Lqql&sm1-&tt+p3;as)B
zJIaN4Pdb%Y|A?t8$Z~b|0Dud+IN<C*Zr=Zn`u}f<z{}92k%s^PQ)kZm+y7sWkrO(Y
zQKQ%Xe25jbU*Ro4K1l7qVgZ2v9YF9uh*y<hJz0g8BhMwVM-OoaqRI?B=d6;blgjl}
zy<N%#r9y?14;DZPJAUf2?FBQEJljy9#!jy+T}Mx6t{gVIa##whG`(6xCLi8=@kWZh
z>1>D|2V0;V?NOq!j4D#D1^yw2{#$|0-U-~R+Xz}Hgmrj+FYPt}mZ1fs*>GRpw@Nu2
za|Skjc{aJN`;@D6vaT|4I>V<5lsTzHQR;AQ9JQ{!|Mlj3W!S)%eNM?HE_w_b=u!`K
zWr`Sq`a&U6Z~==`FF{2vqcLdtNuYBbc2H8{>RnFUd_P(UdMtTbm_n$o5KCB)W>H`U
znPh9a>UiGN$%`m2R)Mrs!~}3EZtQy>eeBCZf~Yw>yB`s9)TQ<bCbc%*)xFdc$#BPM
zL(Gj1Q~Lr0i4i}qOr6W{WL6R#mYa?h7zll1z)lwiYB)JeM@LZu9oYn+5QH!EJGdHb
zb8KU<7TQz*N_St*{T}1*QP*4l!qz$!wDe)Q&x9s>@VDuG0Pyk*D8Zl|`F{Vg5IQ6!
zfk7zGg;{7^z65SMm%kA}%hhsuNKv=rHh^IfZJ=V>pG)7=(33r0`sngnVdSnR%FLKM
zX)tqEzlj1E@KTPeGWqZc=s;siyZs`}MSAR)AS|~2%!f}{nPz83QU!mn3=d~ZcicKk
z+f;wAqtlb4JRm}^B67OULhshK<gb&!By;Gp+kDK@63SUMyk!oFU#z%=sr<Y;2iqJK
zL<GcvB6(e}+qjfBKgMO*10~kn3R)u=XgqLBRO*0wW}2iAF(FbiWeIf~mXVhjWHGI@
zIWSHIMfSSAsQN_md5g*$9x*KEKxGao)V6SAd>gVekz?HB_Du>Q=qOJ<WeKS%Gr8Li
z$L%Yox2QDkK0`!?Rc=|FbUjqa7DYv#=@=Mmh4QEd`j5k9806-sY8&U_TBSYfT0fOh
z>$)4xYvT-crgL9-4@D?6N>fJg1H#s*aHstn@RW?3-hkoS060O&0ClR6<E^8RNSYk)
z5ZfO6(Ip$il;|+Xguo~~N){N=*@Pc?qJ8qsAehME2<2l%8yn6f;4?%5sMx4i{#cy)
zvIGh_X2~z|y4ECaDIea;b2gd#BH+eScY0pz-w9W6YFs%U-IQARW8NvCe;XOG@54G)
z<78Sv;n8+vmC?$M`7S2%ht#LEP@!Msr;atA*u?Y#P`}D65!yXFQJMx$NGEcqQaJ~=
zMh=iG*6YUnfVETaI(M8!*L2^G@gm6C%>p{xAOFDeLWg^|hkhmVL!-n^&ZTpEzkO?N
zuE<O->uXP!I=p_s)=zR+9&K3@ZFSy5qqZiZc$LFMyVpC~)U}dImNr0d3uzy-07+1`
zsMD8XG<tE1Y4Nt1xmPX`IO=+lCsT()-&a|Sr>yu`QlhwVZg{t6Ywl5Qrig@}-(4ax
zz<e(}AhES0?|EUj)QmXqSLn`SG=5&z{H0J5vy@&OR$UeV*y{vt!|B{3sr}1)RtnOO
zNmi@pe5v!j#^L2b<L%R~VU8=SaY<E&pQHhR6IP(TIncc`N)TE(HX?#b9~b?-=Gy?0
z*pX+~ut1M-3FR%;Zs0Be?}+))CLGVupN=JAHhR{=rK7HJknx1}gRn~%JY3uxs0US>
zNyA$aM9KWt@_bd|R4j)P?r!(15@p*+s+ljtyx*JS+0hvvwIQuei*hC(6qr$xu4d#@
zWH=1-&##va3Faw*$D_{n#^nG2t9Ce-am&M5uE%x8RZU2EIfBd$R29gVdn!kN>)M03
z5R?Ndya@WiTqvubcx}0B7nt(%SU5xJ-tJ+@9C%g65%uBqSNJo(;0KCcB*81DLAMjF
z@bf>EJm3kxlT8T!^jaxWR(htR--xj*pC={1wWDLbc|qX1{fa;c+v)E)n3g=>mpuHU
zzE`t;?~>urEx?r~AWun3#47jQ-1)0&dcTDpTCdTg$iq>0O+!vaM=)>{9w4-PAdWlX
zCdhzIc6Qt2;}g=Xb?wx7A-;Cqx?a)6Ozt&deYVuZN<NL%5KSSizA4YVBYQEr<haY3
z(P4j|_mghm;)rM3t8Ia_w*c?1gFyuDsf+0zST~RxSSW+z?HgDMwvaUc>b`$4-6T+H
zJ>KR>)rY<-&EHQ{kQxX00?ymuJV^LaCLa`st?R*ndfTP)`%JbHBrKab_lMxg)g$ju
zZ2{h+M>tH{L@KFj@Cl;%Km=CM#Mb@s%wkOx-9s9FG>|70;VXwJ2aA__RRqy>66}j(
zUh$*fdy5=PPx|>ZP~gDkt#AQ!iaBa~FlD6P(=nAFmSR<YG=blOX(@jiUd*5o)<K{?
zx*BYaDvm2bZVc~dbx-s%{IfLF`eou%dPx`e=1;%@X8PC5%i3oGfsLbpcM?2kp;hTE
zX=8EX)EjNM(V4kkS?<N6S$|;m!_ouVecUPk&(#h+mvSfu08HG)sRA%j`fr&0|2T4Q
zIQ$=oJ3<+(0A`gJ0yrRlmhj61?sp?MH%lOnGq|2hNl)W9X4Yrf-y!e2OzrgpaKW7x
zmrH~6`?wn{jVg>Yz39>fCOEcZhw2op?8!*t|3cer7RQmYdhpU!e$!>K|5Pu4kIl*<
z^Z>8K2O?J3k}xkMkp0baZ%!n2c8-ea%iu;Nv%(uF`ssO=@DXNDVpp)R*&w<rOZb&{
zH|Cp%+tx_-I5OW{>yePyW%u@jp5C5u@5rs=!?Od}vG>{$FDCl}I>-Mwo`me&6}u$r
zaZomIe4~juteM7`b+Q#sbD`Jls*(W0S}G}++4}78n*FWE+QsI;EX1l)H~IA8azh_W
zb>&%Vu^H!sausf0Bh7`hejCR~^D0(D&A60Ra;2@%#Sx;)zZ|*76E}y1Ntl?qyp2Yp
zqSAfdp9pNqy>yUMHHs?*3OY44TY_O{*%!=#8=+lUv5O^Faa-f*QPo9QGMv${6Y#sG
zG}ZofAOe?BcuMt~(^-zs`HNwpbPC*WIcmYg%|{Ma)cyEl&&i!MKP~%4v=>H&l?*Kl
zAGKq?Z2FFbFDp808%<&sx7WSKW-(E~_-Tu#zs#D=_%})rpi8xY*H?|S6mri8*|X=o
zyOAle0+R51u$^L1qVkMT4OZsv3iZ-%2kJt^{n+x_tYJ66`?`BLvRSZYzQwvrB|0;(
zFGBb5((L-=;WRwG^bE=6=L^%?v(GHQld_Om@$<*;BeBZ&{zYE=U%>{vQs3#X1;&I7
zr+)vK-trhRmM`myC(SZ0Y!ZK5I<+F66YxQJH+26ZO73#YXI0q4&qT0ll5RO(fUA<4
zT3w<i`w)^JUdk&?F|RC!ajwmFzGIbgDhb6mW_6z$ZbTTLi?2AYF!hCFrI#LfV}y^G
z));B0mm=EWA`YnNvx8P{^k&pR7pA@M)8I#y%XZ_nxC9WH<7oBufzW*EuJY`zRa>K~
zL$UU}fw<>MKT6$r=wvUMV5tT)&+dNh;judg4+=~jl+7!k3o6@x_?C7*RN3#F?auL?
zQt}Kw$xn%TbU8uR9%AEqC_g>TCnSTZ+bhmVh8bY!q%Gvdz`5y89et<3?u}-RvY+`w
z(;6$*ENZgNl~Ou>gv*Z>#81NfoF#WW_@nrU_>Ap0^!lwwpemT$fDlZhRL@{?;v`Yz
z(z1OQLP~_|G^s1=j2o()QspSBK3R~*$~WzQJ`cZ3=HIMsKjv^XhNs;fuyG+Zso6Uy
z3M|HWR^GLidsyl@AK1kUtyS|U^2922p*F+58Ptx+5HFDBw1z4-qU&6WyBlu{pSA79
zJ)!M$STlt*ce@STsB!yr>S(CW4u<dST1lZxsNmdRnIZ7FlWDari!BAFecagR;l`fI
zZ_w^T!f7e`$2eObwVI~{#sYr*O9#t9t$^dkq5x|uF-JD#%Wj;v@jo671-YW&!}W6o
zn9LWuM;ptu+;+xMscxUQ$1m-C2XUA7Db0$^r!A+w^yzoWke7MXu!IxJNm%MU#>f3i
zxfkAkH6<ayB0*WilPPqKJlPW2cY5<MMUir)xO{mkj`IOTtQHh}Y&k08Sc9ct`krhL
zdEwwNWjylpUm7%M719auYa1OjdWng8Y<Q<?Bt;ieN16*&9SA(qVoi!$<wzM3RXG(S
z(-TVnBRd}r{A#&z*_=YoYxYI;3?EdMiPtC(w%JQ*Y**1cT4#?MzY09_vpNf{dqU|*
z`dy*<xQMS{R8pTx^5Ep~u`L7%cfWEKF-5IwlmVUe)o8RdSR6xalPYr*5YBZRqQuMC
zFm1V#yG>JSfiI5B{Rbp>swQ(WBSti9Ak~Mmw3ewOpHnX*`jV`c&s-!ZLKlPkW0J{I
zk`jIY2``p3YPMu^`~t0x31S#`+%Cy~v0}SbkasWbn146FtRa))FHU9V9dC%#P5i4p
zhaJR5L#Y-nLq=Q%;dZvAiAQnen$Vna^x}4*G)|>ODj{g=)A`!k)3C4&(ZLM6+TL)f
zB(W=Vnb~crOj~SXnkdfzSZ}YW35M+DYL=|<D%9eIE)^fNm(uPAfg%l;sU*xd<JXT`
z6@?yYeng8>L{}ODThw@m4>J;5N5l433*^KKrL+R~M2!t*7c#X)Rd5cs`r1&5{+Nt5
zJz(qmsLD@Kj(?&kk;aErOC1>|E^K2yHTCpSk+^~*rRPWfoDGj8?J`W_wC<9skybNB
z%P>Z(e0sRCIA9wyLc1b&I@}m?;RSMTkYeFNPmm+M17B39@u4eTK(u({yYQO?u@at<
z+x}-8J_XIOVT~2l-ROIohAl+}<~*7leIt2e$dMN{WyOOQFir_>n(Kgy8td}>mUSje
zmBNdh>{R`VCi}*~{j%NGZcMZ>59~^7Wd9>lEYcSn>K_a8UyC}D@*NMFcfNf>ormWL
zG1s4O@1a@xj9hINP)UC~eSWs`MtoRK=BUR{`UokBgl|&zm4lHY&A{rc-RPY?3DnHp
z$G5nl10|r+iUU?+^m}B$Wln(u5dwMi!C6;c;|Bon-1?>#;4K+aQ=rtnj|W;_FgH4U
zgCLur@O;ww=L%{a?Cr{t_XZtPc!B3#ZUNeJoDs;7h+g=^rl&XA0odoI(v<mpL(5iq
z-8ifuMcJMqLNnh~u`o$!91hNPfE_QEZulGSC1wP@Z#hhZ0n=-gHp;)UUs;PEKSpp7
zL?gr35bK5@!4WPjqKOOhwD&zIoNUn>mumd}oy>386#rKLe0i+53b}ekbDgsO)_CQY
zUV$V+@9u1ail0L9CtH-4X~9jNL?sS8m{vYxy6E@A<tp)@;eCEw76fSEWx0wbzJW4s
zvX}omtQuv&kM_jXArP40pz|LoH>C!D2ARw!-{9ldqE+*)`h@=zRKNNBAH4lPA?^Q#
z7@+ijN_)_f{OFTGrhvV6I5*-IH!|YMMfl2n7>xl;lGlcx<~(?Sl|{;J9Vxi$D%N?8
zoIAbZkI!)yPc=|<q_dG0^nCQt;)kGpfg|fD%6vtZmZ}TOJd;}l+n@eUlBME~Vo7#?
zHg3&dLYyl9Neal?74i9b$^^J#Cw!s*ij4RwxW9SA(|4e0t!{13l>on@ce@XxH0A0$
z;F_^kr{XG=F+BZ^P+pHWemyPP(Q;@)Rh+?Httn4#o0H5tqj?j-%*8ziStzjP>1Qw9
zGmIG#kv+{hcG!;<p!j^%kw9^x7vYU?E-Fb%pW~GX*!_08>G4Iy`z{X^>z7Q%46XY=
z@1G?bOFSGaMMAGFGzH!XbJL!AUxL@N*YMoQHvb;c7gv!sT6JFRUfNhaC7+iX`>a|?
z4H}<Fj}YsQKYH&Lwre|g8<e`OghFhL=-B5v6Nl%RJc)@D->_L%8)oxqoZ8_kW#%?=
zm9AGaPeB;|paX5{<r*f8M%$VPni159a}iI}u_cZQJ<EztX;J(c>hq9Y9@3PQS?EOl
zH|_fU7L!MpzqejfXXS<>gHC@9Zdysw{v_Jq9D7w%>y;tSh54>AN6KB#(-bHVNsZ-4
z_CF?}$lQ($75W=`tDkGq*R!SOgeSb`+uvxh%WsqvU&9lOe-~i1AB=NTV^0`sk^F;<
z&l-OdxYrf!|Hz!6uqyNhaYES`avCh6pUq7TmsNe1cBMW!eNA&A(3f>73L^ZF<7^^%
z=o(lOxsfy0q)II)toAdnY+ew<zI6IGXj=glKEtkQEq=1Dfy{%sb*?h>7abMY!vzw&
zP=CwC)|w^f8>EXpRfHPmk;ruav{kPGLJezeo!+%>D~K6}DOD2mNgUGp=n_3LYViz;
zu8mjBPJD#18QJEjW6l&h<-7|%PDu?S$k62Fa_Syd(l#^`-(#wYMdmnWBd9xW1^%T{
z8=MeH+*Hp*z7@f+U9-y66)d`b`ceu*u!eW}7t)*oDwIidxkoX8gm7tjmOnPpHpxgK
zsxnKTXrb^4_&xqb>UF;*gT(i@+~H(XbI3$7^zj^}LD*plx&C(f+!ST^Ds>N}iXZLd
z))==^G?l56tH5UbSL#NmykpyfJT_{DW=j$zMWyzhI4++pCkHJf;>tu~$R1Oe$kg@K
zHmn3>uZ&XMzIs_#<A5l1hV}n$`5k-QuL>ZH9zX5%_w%drUERrt(&)pYj0<TU_$F=f
zj$&IvOy2&kZgFU}h`f(;>J9I^wZpI4FJ6fUr;k-Qw}tt3HU7Ajg~B)|3P|zLjI@3s
z>XrUS-}_F4|Cnp)tzwhTY^SJ`n6uHlAQC;-^b5Q@$<f~bp|M4UqOPuxeynF)>~@n7
ziBV>tZl}I1s`GP!pU<pXQ%#8*hZvQ*qFs|uqsMXQzE@@YG$pXiy-$$!^i)@DrlI8|
z_(1ltyGM705H+OgnfDPrc|CvZl%MBrwqnw&W^em%rK4h`NA0EEn4@>z!_$Wf^<!^S
zkY#R>eb4zP3-Pk~BnO|lEEh5@mE7J>k}4N?8Dw8jP4=5;@w1rU^TZ1R2XiA6O{0Z+
zNpbUjm5BT9+{@W3tru-L+jiVCdrg%@bUBkLs9QufVpxP%OT1d{cc_&=oWJY-<1%S2
zuO(1C@Iy+!d<rk6PjTvbTKj%}@b)SbZ*GEk!7}TtTOb<~G#>mljVoDW`|3sMS~i<^
zgCBv->(9Q=3M@*$U24JWW7F!#G)Wi?S2FX<`wIg=E!m3Itv;CVgIsm~x!!5;pjWV_
znpVSn%slrOjR>5f#(t-)<TL?rKFPomp;)@9<V`O1(ydevQ`t3aL~$^Li#&LrM*==&
zKN&9mv$-#!uuh*>f2?Fm(<|o~B3gZsT9L7qH%<<+(T|NvCN$PN#%>6GR7e$gzY}O?
z(`{a%)=-{Fv<is?DWke&rzjN)Jv3eB)HF{QeoW3XK|e?`W*`VuD;{gU76s{Qt9@}Z
zT~C>=^0pW^o37GtBAXH1DdB4AMRMJN|F}CW-rPV-%ROa_7tC>m9zVpqs!1hT3X&?f
zr=YbE%6`Em``0SbVi0u|w<LdYKS0cBZ-%38nnwRdpGSX!mHpX{&St1E&HGX9JKBHU
zUzL`^=A}pLaOF4X+;_0bxPSVRZ4B+Klz!-tw01vW+R4*VKh`HC`Uywsxoicaar6g)
z_aEQqCX|9wxi~)>YXCb1&^oV~SiGyNzHc%pg;Wm73pT1ezNc=!|HThpFO;H$U<fJc
zS+P!>m11(|8adG-TOVpNz3Nv0r8xMM&b@nBWk}oT790&TESxGG%x?HiegNLJZseP&
z6r)`c$Vi5|{PkUN*XcX^P4F9=Jt`M_$<D>`_+)qqr{!OR?G7J;sF(Sc&<+%_MW?!p
z<)SYoe+^!2thJvV33mkS`G`fE3v*Q)W03=LfBY`Edw`qhAV@2p_%yFqPKrrjHLt1E
z=Sm*Z5W{bIMRP{kyDF)inJ7wS<fz$P&0ktu?N~*9&9@uu=OoCbvg(-g02G|%XS97y
zCv;9HHuQ)gQmMa0O0@ah7UC#Ms%*?)JB)b4eyJLjq0qsbLjlqq58W7e)&L_3X(5%F
z+|pO&as2EsmRjz2U#j_AfMQkEWa^QJclR0bl-qKUM|AU&z4mbkedVsoB;E(Ol`TDT
zvgy2bs>wGJZY8FWJ!rYTF9KB~Ab<Zlb}9z0f9k#toTu-cpQQ(>$wL@eVo5+@uVcS`
zfuAI1sI^cp82fPQ#V#6;N@uCwbmND-egTSsGn3$h!Wd-!FIp@eNbP@5`@=6wHB$!F
z<cqzUJGCWi9=-Xpewg8s8pqB5<Chz5A-4Z8|A*1P2FXKk9j{~YMXj%{&r*o~%n|Em
zTXE5n7iIZJme>Fqd4jJb^ES8-8D`(w8t;u~-Tz0tGhIc<=C^-$=}=yDKmBLO4V#hD
zckn!w1m|?|CdT^9Q~f+luk_7qNBT_YZdZDPHD$dnmHbbaJ(3LeSLof)8<ss<3>;$S
zUe39F3aDsy_3K@RbapoB*l()LsWEO2Z=`6F*>1;*QssHZ!bjsT)U1UY7K+SJsj{xN
ziGChE4tc9ts?$K|^^BT_ms?4od2E1p!*xU5d97o>rBEIwAaHOzlw1bAbc|)XcBzt=
zPwDw!j#hmF(@?9CWEwHGvlVMcQxCpXguarb#ndOyTJ94J;t^NRa?fv%kcBX~Cq!P%
zU^FCrrZ5<J-GxEW`2(JoYv^D!6A|quTf;`<40il{{s_&`q~{ShxZ)TV3~yRMpyZEV
z@|1!W6jUB;1AE>?+FNZ~$tdgamN%bt_<<F4s2_S{Qnh>ybogeM!WBzWEfFhv?&AOp
zo|f<*h*27Ye@IDmMCof#c%HY6f_#eBewCX|&fX7}X=%_Fv=$nBgBoEKBMv-g2=Nn?
zDvh4Br)t>~XJFX~1Vh#?Q$t%s{4i-4bB676CXscKC2@~+WU58z>CV;qX$FQ~<`qgl
zFOgc}QCC}W<h|IMdt$^QbF`qju$Uae7trMaV$p@M0Nvw{pG|R~c6A{`B-45UZ;|T0
zmf9i=<A|O!1Tl=~FI<SH#>`n+6ZbVQbRW1>1Pz2Yf3~PH<nU%z5IlBb=}Ig%&ujDa
zLI0MvpC{ONTdm?mqMQ#FxBX6(KIG~03W(GN>PDL%7Ovo7s=m)~iAj}B%lf&~bc8w+
zfLb#mH;=3C$*Yfe$Zs@G%?}5To+217ZFV|_r80!RjG$*Qp~N^fz8oY_bF9!2q1}sN
zZj;kTGFI}tgEJ3h$P^!dC{a@UDf0E=JT(orsJHN%%3o9b<6rb+RwfkMb++L#@M`r{
zt<*0DaVzYGjV$O(L-V3kNHH&2Mvwc(f*y=9rYOc>F@>8|sN=eKZZf1QKKIsl#Rr$X
zs0t^}+pfd+q_e<2JcJ(!vq5kED$;~ZKY08+S@~t3(Zp-+ulArW0(I1DdS0>b91+vE
zdbw*RIkx&q(<!a~Zu%>our9y&Q@)U^6xnuX2F$hjVqzjapIRLwo`k_YOs|<7>;<fe
z4H>zwEyfQNZg&n}Y<AK{3ssXYk(>(*v|BSRk(Rc9m&`Ug+CTE(4R|r24C^_Q_0DRp
zKHnc_#yftCYFobC<wYnyObH$&ghg?MSw+d4bzi<pI;=nHMP*%$QfHrw4Ig-gAJy~J
z2YPLO&*_5?hf35t&Y9BG?bK8uWQB(<sLv1@cPl-W<8Uq_JzMaGe@SmTEVP(W>Yj8u
zX>ar{_hb&HxG7SPpc=cAWj665Tc14dSE(~i#q2atpky##+ud(+;FIyE%3-*yzb@yd
zeo-`y$)o%^xOotrc|)HtORz=udABMvyDRD~J8GWnU@-Dh4H#*=##b)~^Uz;eZ$3ZV
zdspor3L32KU9u{wtOwnvaP&+_J#-_SVTvzZMOE9N#x6J_*oKQ4k7%nBOLIVCIiT=R
z{{~#`j517s47+=A`W6Ffe`}uu+^&l2WI41=3$<ffN-&JB_G;EdazV98^WKB1&ngVY
zYIXEKa%DZrAA{56kVNNeK3<>x)_zLPl$mon)IX>qIb#Z$-@aKg%|J-OeqK#sG)7-9
z7p0*H+_tfi9M-9*$$(yAl|~;J2bvDaA<x#Y!l$*_b2i)7uc`)x{Hr^-43(Isdcg&?
zjxFo9shk2a5msA7{sE0E`nCa8GydhXkg1YNv?)*2mUhOCkff#3f!#i%U0l$_XyZ?q
z<8?`6<AmNb8+7~vt@Aw%D8$s`84vAgOTjqme7n2meq^)qW^zsLt)pOmKea%Cx%xT(
z>gr0T3xlPcffoPdOlOLpYvpT$)zvdGK<Z{MFS=?9bvh-(rfXCzQ(cV_t+fWGNT29l
z(OE=)dgD+o*ZTIdo~@lkUaq_L{d<SxOy=)%5Sv=z&DobEQ?`7P99r2%AcMMjw+8GC
zqy1)Ptsa-3TEz62B=_OTn-|Ji#@;ltV&t_|^B0O^g@VmEg?fc6nl;Tv5?3mkCGooA
zh&60cqUVZ(9BaP5p)FccPQ}thw1r(4zT-I;h5OU`O_Af_NHMNQhjZdFf%qG=c(Z!#
zne`tDvVDtXiq%frcPURQ?3$RS9xJoAV8wejG@k?-k3V!;R_Y0)olFH0y{|zpNH<lq
zM-e%F0QUrToL^^OVcV2!cSCBV8_RCURX8%PLJoW;_oI{oS8|8L3cz8wcNCZz4h+D-
z4(~ubxMv>-?!P3GKV=Iz>c9Jcz;8++V5FzSfFF`K6&A}kg#Y022dC)7Jp$hF7>Neq
zsUfXz-dwh3;g+f2%%pVkM4oX0@4h?ZK}hSmiP$Tw6pdsvQ>#DbyOH9I6BgCC)?ceL
z3HPVteokbLt2%-2@<M+Wb3P3-7lPpr5f@HDpWq~Oe~U`i5l;qB#qXETDs7M<dau5$
zPAzL7zpEQ_PK`Y6Wa;RL;1&bEHXTi`$*9xmXe3E>!QmSD^e_+Rd$^s#AEWpD*-*wC
z)-n37xHu7tp+rQ~hxPF35I)kscJ@DwOVIvR6JzyoA;a@H8n-UEaSAc43$vDKvOv7k
z?cVIRmD+|6<s?~OpQDqByG0g8AnLAisuRF!eR%K;6Hb?UbGOpPia{moT1dKS;P-hQ
zPLZ^l4^j)tVP9i2>lN@*4L^}H-u#RN)@*_L@yV)-azI5Pd6vd}l30Z^Y(M#n`XkmS
z^i0*ZPa~-kKq|KZja<r7K2<8P`nazmCo?ZHMCd*<);5!rOq}rXhzNZnyg(uwGrazG
zggj~4q9&jX14ZNE##|i?$u*?%b1K;cj;{yslHeDLKm(0`N(tq1g_ND**@za5GWX5e
zroUOepqHS=*>VF3mwOn1duIE8_JW(AxBS~nfH<S$`~~M5xYharuQo@`??{T&kY&tV
z7Eg2|suO8xskp|K_dnkG0jG@x?b6szP$G9o#dLk4qVh&1|E6d1Z^bipDnHhO7btj3
z-!?%Jb;FUzb|~{sWl2dBSU?};)0-K<_&4JHXUDy9OxSIlJpaX0agK?TE2%2NI&%R0
ztS2lQ|A`awtm?>NMZgiIoj^t?6^MI5G`R*Ic`%C-2jS;rAU@O^d`h6gf1Vp5iLGZP
z=Tq$kHsSE2JkT&{@7Y0Wx}1;@56jEh6gM^R+`L=`6-L+@lV=kDhM=JAY`nUGCr9*7
z=`7nINZ`u1MGsbzR6)5(DHi1b#|>&q;pcubF7!0(Q~~II(zF7sR#X>dWgEU~O+Fl#
zNE&%Nr8gKyJBxdRbhkz2KjmP^L*N4qxAaj;HXh&)ZAL?R%wcj9TQ=@8AcSqq^Yk!p
z13LFfT9;2|b#{N-fmG~Rncuh+n9u040sZ}VySSwCftRb}AAKdmSM-j6{U>utyoH-8
z+CoZ{DprZEY&JsB;e*seAI{3N!x4qCs&AV5hPd~8xp_DyWIB5;DyKHQJ=^HoWDfq%
zhWMqf)*m<ZvF5nr{yFT{lWh>(OyZjkC*?%0rN(3!52Hnttj(e%8cRrsZSg)j6Ptw-
zN^P+)2}sOx=L}D79mtN=CQSZJ)~Zf(JFVP~U};M0%}o??)f+o=qlDe2@`rhxkdekt
z84iYoM1|msp!1Wc$oBJ{SZySsI}e&IAbGqx`TpKj)~MHb#SRLf?-w50{SiCHx<=^i
zbN{5nEm;RG&6Q&pOMgYm^-bU`Z?a25T1v%$Lu!H$*wzYXwI4%52tiv~g&fN&@{5=-
zpc44*S~gw2bpw5OEto>%5I$y+nW{=910$udcEA5D(dpym!W9J%I*^_4Tmaft+ms&o
z*Ka;`&Zd&bs|3K=W9ae4+xA1t$*TGuf5<yg9t6AsB%|UdUQo|%whT|~RT9l#b_}>D
zE6z7pW(mn|{Pi+LW7gF-N?EzSI-`3H?#+vK3rTas*zLdsZai857IvzmL0uOe?JcqY
zt}Oa6wRZ<LFqw9F{OM0hqX{GJvA}DG4^qW+#5QPIrUf)#FLnyF!&?H*&fJewUiCZV
zQ=$zl#cG>UdW+yn`k5BI-mnx@@1)&Xp_2WN>u0W5z>x_`^)tvG7Xfof)^=oCI956N
z5QUC(tK`J6ELELe5Wz}Fo$oCC(*MQvjE=o{@^!&N=OtxkK%le`dehOtpzx~O&mPE9
zdFJNt&C%duBatp(k!Uqs58^Ads;={ev4}O`uytG|h~Mtj%VrL}Qv&75Np|2}+zxf4
zoo|@$gKK;7(&Bb8>N3gATp}Ika=5Kav*!5f7T{*Lz5`v4J5Wyn9^jcim&tzc@LqdI
z`ukg=LpkOqPd=SN-gNuoU2Ghz#F3~%7&Re(nwOw>5>*r#V}CzmzdM6yB0m)aGg_We
zsaORaw;_*CMKM2q8s`R&HDXcWaH-$;sb;pz)U)vSE07#3%ez=smalLHd}c)KZDy92
u^RXq<^Be$Uk<8eu`A2&%81H&*-pkG79lC7JSi;o?06;RzZ%SU9y#HUjI9w<I

diff --git a/doc/integration/img/oauth_provider_authorized_application.png b/doc/integration/img/oauth_provider_authorized_application.png
deleted file mode 100644
index ebff8529b4ed4927f1d70d7edd15e2ca8ba4d812..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 14657
zcmbWecQ{<#_wYUGK}7WE5kZXJqeo}-F+=p|o#>rJOAy@<oiLcudnclI87+tsee^PV
zd&YhL-rx0o%Jsg__5O1%&YW3$?Y++4>$A#)sjJH4<5J=R004YN1sN~^@Bjn=+>v{H
z4|^wK3pxY<+&x!UhRB|uo$c=KlaNzmcuZe0v%9&uahIC0@`~Nu-0+IZ@9gZfwzgJR
zSCdoI^YHMjp||N?v38EkaU$Qhw6p{S1eBMTD=8^4vGe!z^y=#BE=seUo}5Co^j6q(
z=jY}LiAV#Yb1&_gc6WC#FE23|Om<PdvMMA!J>9{<!O1&xe{b(HhiPSH^=m|gx9`Wn
z!J*jL*tNB_!-Ip|T=<u;NDB*#hK7d1!osMiC{It%+1c5FfdNJ!_qT7!rlzKw8yjWi
zRr&b^pFfBFU08@sEig7VhGiA;i^-3Vk7s3O9v>e!H@CF(Oh_wh3rQ)bq@?})`Lm?7
z9F0cT*4AxpZNXqkL6OOA1Jiwd{U{VlPfyRt$jHFJKu}OHJ3GhL)^=ogcxh=VK0aY*
zd;9m~@3XTr5fKq-X_?N>uIcIN=+VN%y?u86w+adh!&@`OMa6;=puoUDV^gc}u&|Ed
z*^i$>f<r=Uehg{r7+Tpl*x1;(d-{sWX|%U@e2&dX&#%_edv9m&{La|U+1WYjTb`bQ
z$y-HD!}sPsK0X!A{psmhWu>JO5|WWov6R#=R8>{2tgOr}Y_G4c-&?za!B9C>oznVl
zZXxN0&e8meR!1i{KmR}%zp#j}F%Sdmm{^#Bg>z+Pm0xHauZV0<ceh59pSgp#v#Te@
zFgPkYJ_44b41LeTFDzN}K|w=5HlwWW=ZLzFnT<<;ySw|==9b5&$mE<d;YwS0Y172s
z->Z=sd-uT2?R`-(@jwZoCOJ<1)?h6yt+ut1PHm2cmHzap8U-bF+pd@+G25fd)54ne
zkKsw^lO4aojH{XDl|&#LC;#b(_$g`N{Nn1~8RiCaa<zA;XXY^Vm6f~1>@No0w>gQi
zWk$@k9)aA}IrMeZBuf|C&ts5XN*w0m;_iLlw)YMPeAx#b*tcw6Up5WE|1@Q|@P`-+
z)hzX#`lsi<<y*1_UKF<-t9k9GzlKQ*Oxdxu2XS`y^jg0YzeewrgL!H{a##8B5O9;+
z1pr<E6lEkKp3__DM#`ExwA~`9-^64ERhP<G?WLdN)fSE2(PfEp2+^&All6V%;8DH*
zkdl!qhfDYUvpYe!5lp<gkwKM<>-Tw0zbk!DRZRSG&vEM>j_4Bt@fd~6c!if?QMMKW
zQ$EAZSJHY`EX7ytC-EQZ#ZJ<EcIz>|r&mMG4}Q^UJ+Q^<5%?twyGuWUvawePF6=IV
zNCv)p!}3c94*(#PLPO9-9br%J06so0zXN;#02Gj5uW#Y%EC2v71at>`eE@i7LS>kl
z^<>6G8eU64bwx@=APon+dfNWI<BE}x3dpY-b;?Sc%qNAt`DF7~bq{jv4J*x&wm2{y
zE8(N#NcD>xR1z4GsefGtIVZvjY>}J{{0d@*gC!`gzd$GhD8xhY0P5BW5Mfr>dH<gL
z)S^xS3E=dh0Uii$=fBI`-ueU968x{M_mIAo6Mvpd!V<n69^WVAfGpH{K|=rTmDy=d
zl_%MMNmobPZYZN4NSygynx8)Bz|N@Ub%rQTJM;HME%YnSLBfAOp*P5svY-p4_y{7d
zx23SQK4B;Vi?^Qi?it~BRu;;_&&fuKpow$10LXa>m#q)xLI2M5RaI3LW6s2?Lrs?i
zPPuXj5=`Hkq{`8=$N9J%iE)!Ez<`NOaiQ?f%IYi%qOgfI)}#4HeO}eJrX|G4E}M&#
z0h+&B)-K&+dwXSH3*V4_2L;d&dx|Z#ZEAcn(vJBXz{(Ov2-6Zecgtovjl%sZ8S?>H
zERj%HpqC#m0z>*x+L}M;6P5l3ofcauc|#fwisT)Q7GI`__vT_E5l``NOsIFz8R`fD
zofzHZY7(Y^MkxwNUS)vdXM(H=eSov6+Wj2nVtrhNeD=R{79p=S&=E!Xs<x^PD#B>Y
z=4cUli+xGjPH~mllLpB7B-Pep#j?c!67owY+oUcbYtOf>lkBYIkzrvP$SX7P=EKCV
zz6KY~YZ|ZqBYi2pr=i9}czRGhy=D7L|2e94yQvga1)`ZOqX-S$MP>N3>Co@*a+*yJ
zy!39i1T2%~yH@t&Cw)LEWp7)5_Fsv~e4X3nW1okq(7C}C+@3J^T(1xFHFcm}5!S0W
zq=6vjii!-JX==AZOnHB<4zak3f6W$!u>X$Mu8?J0m_&CSh=5Bmck?C8BA})?8v$Le
z-hf!|Oo=>n(V?dgt+CVb(wk&-kCcPE79v-c?^R|@DN*f~L4}HfeaDPS=2D~o(Q*aU
z9M)I0`YyeI>4wO<ATBw6D(h__0{mJ5>V#y6%2xH+X%v?Tgr1KiDQfl@Oe{cCYCbYY
z6prO2+Drk{dri(dncK+^E{y7mc@0%SY(DFk)`-f5gjW;LhU&-|-}<kbFQ}~I7?c|)
zk(%&hvZK5A9F4M2@s{R)2+BJLT9)SwnDua+*14o4sgVhGbGGajIcgylQGVHf9m5<s
zEueiX?{GP|7=PmVsXRH#&eF|i!nMy3r~q!is{t8(s7UkNN&kCzc6Es3Q0NgFa4yq(
zS7#2HpzvzY0hTCw*=2&RldpYBs>9|3`d$o9z7!G2bybWnpeWo0)|LrzG_2mAe$=o$
z5FiG%ae4C0X8xYk(kHUxh;m9UImt^zLJWq-K!9aZ<F{ZrlFbOAxi^}#((vj;-+I35
z-G+>cVf0W&Qf(JW6{vf+a%4G!QJOHjz%?b_e4<J_lymvyr(7wMcI$q)$S%iM(5}TF
zw&pl)hvk~6c{ZAjW^d6xph3U-mTCa-+nsr+Lu`jtFcY$LcyrVC%|!zgXjg2BcOTX_
zMFVl=_SoPC-Ri?1l(D=KEVHHH<SvO_&-w<HawOPf<aaS?ve$UtdngEJwPrM$HJKIe
zl<(5uYG>?!lQ6$3rlYG<RRv;6VwC=)#UVhG@I+1r&Rpu!uSRVn`KdmQxLMo!Pw$gA
zscG6SD7zCXm;*+gWo^RWODL4(3nwgZl!Z;KoW+ZgrDz5R;f5U3p^N~+A>|y!1ht?+
zwRcj@K@v-7uy&~0;e}<OqU9x`>Wj(-9mjXnQqb%YS+Dt;KANQ$y^eIPG^N4kGx%jD
zKKj;I3%!`5$~&Jou6iGq$Qx2pk2?G_+gj{eGDZqRc~fyKOX?%|47_BD)t%@h5G<;s
z_9pU@`*&m=GBx35^5tz>dZdj&#=L>Fzz;~*&S6+M=VdhR;dqn$tr}<AuI-NE0X>)v
zwab%Eh<9o2*+gV!y?TN++DXyF6{_2|CuwR+RrvP8T`&3a5m0_|;~^6?#vIwC!q_*5
zd_gXvX+LF<1|n6lM_-&4S6|ZjvO5)yjZ{sfwX`zgw3BpbLsAOGaz*8qgyRhn!xr-w
z-YXvX956#9>RmL2$vb$iI7<<Z|8w!}R~b1&xoR8H^@kVouHP}^X^vN;u(d>pwfrGV
z`Dv&g{N&Y5SP5vR;dD2^@|cuo+dhh^IS@HkjogW2y)Q!PUj3$Ff~Ci&aXI})VFdzG
zE{<ZV>~?`a`tlhhOL}!Mw2A*5{(^Q5q^&X8Mc&LhOdLAA5aD<es~hhFz7Z-#tqp~t
z&=e9!yHIyd2%5CFHUrpv&bfaVCZ6!;OR|I|xaZZG&I15Yb~5nA4~bXx_P&49IB48f
zPsVaNF9WXq%bbTt_E`xSZ^+E7?S|e!7qzT^RcE78mmqLv;ZV>ccG<<}V6?bIA=dM(
zPxnEA0+jQrd)OJ{oQa*-T^H6a%3de*&hD)C+0q1+eBK+@FWzErX3KW{GQ3@`&)VP<
zsA;{MoC)-Cq`*4vEEF^gtd%D}Kf-*JdH9cn)SSgP_p#0n7?}Z@`r#Ti=k2Y0c!8FU
z_qmiN0xVD!K$?P;ESV}YoPabJdx+ikT&zpq!-r75gI_Y_4X?scXO=px2G6jb{D<JW
z?rR`v#2V8ookT|FH{uBFkPB3<>@u+M=oShZA6|yge|_%=)O+TQpe4zz`+w11BeR`s
z|7HRL6qpmZ_5H6Z{vP4<HJ&q;KY?|LV4d#&0VZydLY)PI`=3DaFP3D1u`V9~!wUKc
z%|gwWH{D#wFyjCKFJ+u9ELMRUh!aObLI9xXBb4&?q5q$<|NYwk_T_(6`rj18s>CNF
zu0R$hK5;r<^X}~Dgt0|=Q0R%e<j$ZMPiR8m3lHinivfcjM)$1~-@sNPtTo(Vt6Qp;
zNh_IT^6GFNm#lIXTTcQ>-RG3`7p>=8OYYZMu7W}nq}I7@Ej}mY2-j+6HL~@NoFY_@
z{!Yf_3sukk{_+Hn_FmA_^a5%Upo$r6hs`vpSEM};EMZl9-$udKv-as9JB@gMb7*p<
zi`mX>kuv<~(P8`sU!zbG66sTMFa5Ode!VEHrLuqaxiWK-mr(F^$aRq69Sxz^kdz+a
z?C}F~Ub~1~(8b*r+lx#5ww9RrExoO|MxA63l}p_U#}0^b6VvdPnfBv!7F3ri4#eP6
z?;>#D>1Tfvwbae|cjIbtEG6QXf-ZPAWkP9L3&Ep_>0Tg#xQi^4nYMw*oymt6Z3zhp
zl(D+?hf4U77=8ZuTIwQ>!^@!n1b^})m$<ZX*UY@!<&lF{mezrb%TE`NNyjs%>ebZ>
zVp{`hyPeLYVo&DuBXxLA!et&^4-cJP^OeJ$F1PU5oM#m`?v`7l$Z-iNACqXZnIrzn
z<H^3gm-JFSD=@IAPT@t&vyuCcS=yF~3?9T$<yiS<<J_qy5}+dXE9cxfe`L24Q0X!>
zAmoxqQ@61qZ`_(0tZI3l=8|#fx*E@G&;R3s@N9PbwV+v!TTUSa<K$Gu>p1QDWzB?J
zRZjk^gQ2|3*u@_aH_THbx~a4`u|TJ0WaZmT2iwAPsk$WS4+Fw2oWi@mT+EGw-{JQ&
z5H$WFZQhXfD76}}rRE?aRum^>>!%ORkB1!Y7g)xcM$`(d=2tKNYHTfTH1CS&iT~A~
z?HKpH+T=?m-dp%ZE~<Z)J+}f5g<7MJ;`G`?HhL$B`_V(Z$F&@Z9ZiG5r?{!9@<U~*
z47ADQto74>d1}t9w^<KQs>dSAxQq%<<#1E{oS5m_Mm5%2`jo%RvcXcj@HaO@gXcWG
zyZG}@7!D3aaC6=C-s!?9!^rEce|FI`BrQ8Vq@ita5<)6Uj%{Pe6a!<4nZdFao6e`M
zrk}hQ)7VUUNxBLHnsRYvhG8LuCj4yCqFc@vBC{RI+OH@NlaYI2uQDGet~_fWRkTrp
zMhkZ7DIJ;?dtzuEH#w5`UmloYocB~rsto73wBYJ!@j_Rw_}ruF4Z+i#q^iOXBeCr#
zn>0a4)nP(yj3~V<Llb@UEA#fe;`6od?73Y2_L}5`9#v`4F@*Y}rLxw95qVB$y&1n#
z6Egh0tgfD)al_<jqK;p|n3x=>d7Kq#<+Uq~R3vQEVkW|6Jf4R|fSwR@8(7ZS5~aGL
zCXqD$$2j!E{4T#S77FbLJ<^=D4R#D}N~*u!ff3?_5yWjs>aM-^Ca$4arAzy`HF>?T
z_1XD}S)TZa0;ZfKX*;5vqgqm+m;lheN|2GdcTmu=H5)C7g|=o|MhJYZvWr=S!-hGv
z-^p-`+>kZwfmm+ZT&9qPHG@#xS3^Gg@z#T<+jw-eU8VNho`w<6+n`(9SHJ3Nh`Yws
zjyvW&zqvB^oO2(HI_~+zK~uifxhgEjiAFUB`Hk`w&n<MLpBq{RihTXL4EloBI#&p>
z`1vg-11ES5=vVZO3u_jPbNr?g(T)J65^$W^#OdWbSUX?S@dqKpVZHvtoMIWwj^m~S
z)+8If>nmLLMBmX>*{B?C^w>;f%{cR_sdTpvJYvoo30^DWbcg@0`_}2-Z?;zCJ--~?
zaJH+ktYB%FXkB=HM#G``tz5Z5QTwr=nG)$aQK`KPZ`@ewtCA_O)KGc9{&sgyGz6+s
z$j9P@em2}`ljfAT?3wL7jF{V4b0rIlEr#^5(&y<tbM-NhdjR>gr;iU~dWzjW&3|(J
zdtriBd;&Jgn6P(gkF{2~@P}zP?v5|=#jWO-f{xb3<|YhyM*nN)u;pZ<64cRST|tQK
zH5VqY791K&nD<>F2%IA7pt02FYlP0$aH4Ht#?N1=Lfqc|l(EUzhe=HoCL&-&bxB{*
zPCxLOv5uFYgS)S5$Dxu_a(wg%EyrtX^U0boG2P~m6v2*hb#jF}=lyqOcIB7l^*=>q
zq#bAFfhQvKz&X*UFO+`2dF5PA*-e)#5ek-#A+-!CSYSvcvUFG`HO7<oYcR|Gu3Q;b
zX;(EhT6nvALOb=sI?G-jjP$Dj3sJetXUf%?JZ1lGpP0}21UpUOrQ4ZS6Ln5s+0Qca
z8o*yt6jS?}lB!gi204TncjahWuNxnf`{Kcd0$M?91ln*C?;wdS1K<vf`sWF&2u;+-
z(%?V%C->zXepwOfq)`k|^VL`iJ623kOfm&^4!$hntQ^hv3s7lQu_t4|7#uz<{4FT_
zQi?W-=9OY|Z@AJXH4DMBW;zB5@b;nH=#Z5*_h#O=IYtf&KS-C(&o2G1`fOc<62GE3
zQO$*h`QjBqPA{RshI76R%g7~o3m0nv?vSc{>7ITv=w64-J6f;x6{d{!?+K!rEYhh8
z2Vw7Zo_cwne@Je5MAKBwCouscv5l@B7v^oLTEo7RBZ6AL_(TL=L%f55e*6OMnX*g*
ztKSZ3zfNuQqgu8xGoc}0HrhS1Lt$SUZv3;ijdR#fg1q0^r&Hlnvo~=GFKE=O)llVm
zj*gvu&Us+HVFLF;AJIzKiIxQfd2XFXfz0guY}X#?JE&C&$rh$IBum2Qck=R&S;|Gz
z9g$PUg6FX@UJ_Nj0RbvUe=nH(cPR~j=XK4c`|~>X&wkUnuE+u&P92Uqc2UaS69b90
z)U&1JMS(V(wvYVapHkJ)p9-oRFI7Q^F*Jvr%HVXKgM~W!q`);DSvBY|Z&xLV>>sY7
zC;?js%(Xc9E>P%JjteYLZU`Q49-D7J3^)q<b0@N5<vMMIPxe|QzO!jP&T;Q?k|MJ%
zeCOD4=kjg;RZ`Y)dP=p*>_8Su;zN)`xe%{hE#7WD2!6G8Oh5R!`iy|NYs}{)--Xq2
zmp4SbdeR0s8};R(XgDpo%6{h79e`>X$bM!f1(Z3x*7^NF=?e(FC5XyL5`4}W7j;aD
zC{t6D=C^=xEFV668BV*Vf(64LVOrLv(q=YZmByoF-fzYsm3`t=g8}Y0RZXpwHYq8U
zg5%SchF2ahO=i9haJJ%80B3bd4fGHz_?`*=OQrm`1c;qMO;-x6=H^n#K%H{__x!Lu
zUhjqG4E}IN75|jK;nX)Ds`A-@GE|wEd4a2aKE226`rBv}q%ZXr4~dJxmz?MSMS%bJ
zC`ZDKP0Rh0)B2wQ^dFdXrGuO^0|2M@-eS?Rtn~K!4~zb%`2Xc*8a3=%XQeb>P1v*Y
z4&WWk1p5C<wf~po`LV4ub13g_rvL3abtkD=24HF9(*2ki%gk?Da)T8SO1DPf)<Pr3
zZgX?kR2`aI!@9=#DYMuuz&6kU-5%1a1gKypyYAdhfd!5#Kq1BUU0JU0X<9daPuM0M
z*Z%Xfrj`5=7Q!{b@JX2b(N>t+l<*Iz^@rVYi$;f$`G|X1!3eLQU3DOuX)TAx(=`*O
zYRZkxgLxN0&x7LpBxhY&E79`#s3dGyaYF#4IWIfh>+OZ0mxlY2F&Mm)1ig)+kk0o3
z0aXVAdilWc&klGbAq@f-rsoT0H_dq7yeIshDRq$O3W-@#y7hB?uQn4kO+<^A{`6tN
z=HW{BDs9Qr*I$VUnb#ymnuMH7H}f6r7k+J(e5%9KCi)19&IU=l!%pVE7iFh}J}R^o
z&~v!f4jCO`IDgm*aT+l<rmfD`cF`TP&jvG2l)k<hp@JUU#&Ytj9lMt|S9O#5#DN@#
zZHoH_#LQT5fcz`jw1s2Bxg3LMVPf0ocam;LNC#zt<EI6SjEc%<X2@Qa5=FHnTOn1n
z&<9CjHR)?{AI{ndkr0E#E))$Y{hY7Fm)d=;>d9*{Eg;R~s`;H!s>l=VItOyh>wD8m
zpf&vb?);G>dsId)$_c)ivgUramJ}ui*`xAhA4+(%UA7cDN(y;MJ4*1f!gPrBuN?sg
zBLKF87jQF!(7d^<J+f`2xiN$dalxY4^$Ibc?5+IVIR38dD$JxnDSOj({WVNa1v==W
z4m{xOeOr9-6YR3}ssv*!5GzIC_6s>GK^GgvR@9Io(nRpE5;S5mtd20!2%XyY0TWoj
zQVvh)eAX^dU5Q=$E%m%h4nkZWh41bg{dvug>OX!|Y){^(F#4O0yLPMj+jPpzw16TN
zk&1PlRQbcAFWG^eNR8JfZlmOh3Q#^$78wmGz82y{V9Q=eDee{3@qjW@@~e0oTNV3@
ztGBDmX}m7ZB!_>!hI(bD1?Za&#H2Rf?1&4I(A@<TK-zry6rv0JDT)P~52~Ryd^o^u
zOI}2R`6GOm;&EYq7{}17^xX0O&!q^kiXfUS#9byK)2i(P2!!?`N?94yb~w28c*Z&w
z$&$wlqGO6s%U&Ii`0(OIRV@f(?q(rTUku8Om|!i3^7-u)5aiE;KMqAOn^{pu&m%&Z
z_-4+8uYkD~Wr>6Dtc}^{^#`T*BXOhu+DI?OeCyvNE9|h%O|<ZiQx*M^Pa3`XWR5Jc
z_~7v>?fdR#CN-$Qj{CG)k7jn0q<=hRU+~H(A8eJ`0OEQuS*gl0kkI%v!YRi_g$=Yk
za|b1-pk;j^x_D2xx3%CTljv}%|1szeB&7s(!uly%7JeKV61iPC)`AC2x1**=8+%H|
zS!1S-*d1Raf*S9Biyrrx{@Nh;lp6?xBC+onEjO*3O8t?kT@zgQu|j8%C(`3b?XvmQ
z^~T>%;tVs({;<Oeb}HbwYfL{l_#Hie+N*TE0t~9O+#rWXmb`gUIW*;6N4FXky$-zh
zP(h0&pJnq^$JyQ8R{&Vvp0Tm1bT}wzGj{!MrTQ>eYFei8cQBW5GleeUxR7O-15gP~
zsQ*QG^`5d7M@7XD7nK3EAZK-{ytcTy{3PeF{P(}<1sHgl>V}_6bY9+*8P(=^zI8T#
zRR&N-SFBJT85~ro3}X{nh#jJ}cZ=@O14BS`IZeZD(ctv!=wd!A)=F1`mdHOU;UKD-
za1j4m*jau>YJjLR*qVkuz^tJ2`{2P72D2|9DpU^mQ|fly$2%WEFb%ZS3nHQ%)LH%8
z_k*;k`^k~kB1_SaZ416;YH1hXZfdu;t#AZ<|B7(+pQbB&l)N(d{<ReTg+B*b`B3rM
zy~9zA7az4R-E0^r;_S_|GEPeq+w>w?hF3QX2ooswUODXkbI)0+0pxQE(wg6*;!?Lh
zsXC6Vt3aR_mV+UgFCM*dpo`rJ0BfR2O+=V`wGpU?ivtki2+dr9_Qxv+28HF-;1y96
z6!=Gb<Wnv7q|t=-{hkai7%R<|H1kw>wzjdFl7<`=mwT+&8Jt0>rGxsMiN`%4g1*RI
zBO?MH;W^o>6O#?&IknLgjK!!U99Ut;d-m2E*3lyJ;@X!zkR{%Fb45<N1R#wg-_g_X
zD<N+K0jT$<m>b*`nwJwI3LIkYH0m1YOfZR8kw_j&pF3yw6#>Ks2R8BSrN6DBw)Mv2
z?v+TU{iX!3R|w49yh+3(vZf>eBn63j&!-HfBvX55E--ho85FyaR`pz%ov)+=B3zpR
zLCM!CQ8K<aif}Jxh5)NeL48LqpN6#&494KON*G9|Ils4HQ>_T*&19Y0GAQ`M?nO0)
zg?>A)pIp7{%w}KgQxNPJq*P%#Zr?)aCjjkBXL8J>CKexN*^z?945b8$Fv`fnFBH3H
z1C5;14|EY{kn|M`b}t{k;t7?ES0x<us}VOfV`&BBxnDno#PmN1p*(9^_IeHVW*gRW
zay6R0pWLa3^A>ImG*8T*OzeahzIT~!`B4<2eYtq;M_&DY<fUv<1?37jN<1X-?88F4
zcW8mDJkXqq7)Ub(h6|yd`s>4a^90=Mrfv7WT-@BF4Qk`<>tio5i8mB}4HcGYe;?%V
zd;E{(H=8~rXr=LMNm#Z~i>r}FG8Wrqy-YHT1@ch8*%h?ws-}aTEs<4Pls7UOeUB;k
z<5I>N({r(!B83=_zLhQ(-_Jt1!gxkw%_(h%&Vr03h|7vXth`%+D<`8S8!c^PlNa~!
zSU-8z*F4iBhPyRN{0Iq3)j)zTY+ih8(rPe;)p(k|bR!ou{~MpF62W&N*g`w7s4dYC
zT;ao?ES|9KHtjuJ30jSc!~4Szqq)4H{*cnx9}VpgJsbXGYcYf7EvGinVHLF!PpI=Y
zdO&mIUBcvce@7q3zEtr~P-&X{fi614J%38T>Cx>mfkg0i;E0^=<`CLw<cYuJD^faZ
z{<g|l%5`*j6ziSMt2NDzn$UbNMtSz^{T3@LU2p-Px})M$+k82wa^T(kw|4%y$wXP$
zPK>BCzbQT-h7sofGx9s#nJC%=!{{^YqY`<pajXZn_V1#^@>}PPdmuI$i7jVh(}e{j
z^WO=uCCw}po$P<61hK4yEp`5Pme3a;)-prP<o5{sXp6Cw&rkTS|5HgUNjfGetgkh{
zeSH`E!4L8WSe*J#-uv(R=l|W!_cK7h_7iMs6tH&&bgLSIq<Cts41BqVmHKg5)0%ZS
z)icB6(6`dNWBLRq+zm^UAL+pGrKW*8U61(M0PNR&5TCKoCy@)XcHb?bEpi{FHY(N=
z;TdbPhgsi39{~d8pE9dGT9LAb-)VDpwZKZ>euD3%(g3P|{;%88*;Puk=Pt9`uNzvh
zH%^@uEe*Prm;nkI@Q+Ch`biACoJ(kL$)ji~Y3=4;iot8nA1v@$QYaV`S<pKG(*>kz
zSkw02fLpgzomXsIL;(w|a&V<8{Y5Vi>~`KUo{F`o38y2q+5aAH?xM_&1GCX_PdM=#
z2C~1I*|*Y$HVl&gKK259v_mGiC3~KX{D?^vq<~5|fzU2hb)C&;p7hksOIRZL%X*Rr
zQX_KKs9rjbov$rLQA(-qB0;s@cf4w5(jEg|Gy?s|=Gy`gar2F-?<OoM*9jNZC6mg(
zV_ktycRaMAiX18|Iq-=0_dbSM2EOJY0-RlZusr49@)GcI3t0s{C^(ObJ&yb^CRnN2
z3FWX))n6A=kuzuw8dt+V!LUM*+iojc{4m3cjAqFp#F6MZ3CtmWR*%&$_&v$T<|1&W
ze?{2pX;&{xCdmIr|FX_1GpC~dR~BzY`Ag=Sp!rIxgV#A=?Q+G|Nyxc~5Jd7R;;2cX
z0JD*FZtk(00y4r{cgq|W?k>Fg2LK>FzU>9@QM+99@FBQ1bzY-RCe0)xbcVbpApZWB
zW9CZ_cbmDOlG;kL$W21Yh^UZb^@P^DSHsOKJ7QJB{Be66anCJ-4=HVm9W%Qs><9OC
zD!1RxVk0S~01<_5Ar^eo72Fy7)hXOakP6tkXkFMVr(INU0wyYjvO65Lv|icR5n0L1
z!boOJO&ETW@B>s}C)j_|jI8R}A~EUwiG>xSkhH$EMVDVPvdp<r(_qC9g2lnEF1^6&
zxz)PB&oWNGyb!aA>eeC9jR1OlmwvVh{|zvL1!CjHX5c356`VV@S~yVglR8sbBmZ>l
z(&KXbUW@_EzuTyyHdAz=PA^wf1x~G<p|GcTGOHA_7N)|bC*n1uu8V1m{1bC-XKBk;
z3$yl=6lBTiyu;%I#~epI<(9H%UJW-2zy75{1ib3kHMA1)4f@T8QqphL{eU5%zku4{
z!meenhv%lQs$$cfPOA=p3~%KlDIdqmLn@m2s+-&|2~$7fL|6kkclzE3g)0s$?ioL;
z?rHe6SY5$`jL|OA<N`6UlgL6?>0cEJ>bt~JaU6#?Ub6a3CG+yuberazoxLl)@*xow
zKXmf7Sl!!ev9w6D8WEp7InJsG^*`!yFlR+CW0M_0EYsY@bf-n_Q7r`62uTsx%o-JR
z-dT3w2TUh1ZIlI>QVX)qjHo471e@oY$Q(K<8%4PG(<lC^`fT49sHUj{vB@AbqB-RI
zS#wMQ{~Ia~1u?>o!3_f_4;6eHn2oNNa=6bPoR7~=X7UjL*!&76{9TCUwZ3mDh*3#S
z)^gU=+ce`Mj@=eo+Tn)!17MbGQ1t>F<8()k*4llj>?6JGUWsL{eVgOL53)N*Xc>R4
zj+C6$RblNv{-HSk@&&ev)T|7v8Px;75b}QtW3r;__LB@k=@T?-I;gKi3Q5j_>k3Ec
z$#$G{VJUwyMU@qd^D3%CIwPS<cFsxsRl4{a6BAa9GxwGRBCi=fW?>Iz3<`1{ve;OB
zh{SNyB&;?}2~fhsv*vrsO?1Yi6CNS^Ai|enzT-WbHPvATm!-NU@r(JkHtMxCa;#Id
zALNF~;9>V%{jdjnzXn1`mt=11vmCr1nuFrn{?HS5oFKl&>huFr3|?ZOyz1c<JBESa
z+@Nlogk`JB)^~`8P)ZGSg#eH=`8qVQmH->c8@`42W3n-!<_p0U^rLa0=)wXFZ8PVf
zn1$&*QXu|H!pxb^x;%VX2PyzWxCVE92K7OaI(cEbi~?vvdBehqEC>5YEi!1IQ!(G?
ze~iomoYgv5a8G=+X4SaY;GzUZXx6*t5XEMqb~}Hv!SN_zJ9eyp^G~Z^&XY@Ys~|G%
z`HUdw1QJ<c!(O1hCB;>ur(<Fs1dLE;y_krjaWVg|H4N$`^V)m=G@TB+hC~oyY3qV-
z=!?$ZuB_iPNjaZW=#0tVJLfPpS3dce;k)^4_xGPwJ|Io5V}!qO-l1wEH{a=($NM{E
zDpec!i(*INpcyL%Nk=QS*QW4a8NdHvh`miF6AXVjMs}(-DCK1056JFFaBGdJ|C-(?
zCOP@>i;%7={&)H17jmqpZO#ITfnG6p<%=!)DQ|JVPzywi^<?0NLy!=!D60zD9Mq@9
zk-}%#-UoQCkkiNu=bv*D(;UdLv9{HY%pM?&PLlF3AAIS6RdbaYTzsNJ$`7fk@n-E5
z<2qJQ`cAxlflV<aWurbHG-nPV!)T)L{)DaWoYyPnfgRR&E-y_ZK|)IhOJ`?_Yt;D~
zXf}3D7E95(%m{~BQ#A+Ya=rcaLYAdb6zSy%HjfQ$HB~>(E%xJ~3>aaZgc@!%5MTMB
z<9o99(9tuIFn&l)jSVYYY%d`GOINhzucJG4uCQy>h0F%Ie1EmT^ZtB}{lWqOwgrh7
zQB`SytvX`i0h`#kO%&bY#lNLVfe5TG{g2$yfAm!S`^0}YTK(X}W=}rkf4+6+3wMF$
zM!c;{7jLbn^o7$U-udYipJ8QZX+XVS7n>=IoD3s3SWJ#5z}Br6HQM^MeV3Vv@cRG&
z$B#2;gSxI$)$~E#Y-Uk53i$4x8*Cwm0RSkGhfBjrrN<K+6EDQpv=Mk%#^B2YIX>#s
z!f5yJF>KnJggUxBz#PvWATTa9*1taE35zdqy=fMXj$NAmeHq9*c7P5m8#46#9XE;A
z+H%3mztxByI$g@6roh_xhQ(7a_{lt3e+E1<AC4$Om9;jOIp<aGWbC(Z3eQ5`M!lOQ
z-Y53xD6E{S477LKr)i0a!jjL&P>8icF>R`VsnG~pPRv<qR|2dOlBrqJSZ8BfmW$F<
zEpz^~Jmp<lR~gs~eH%ysuu_K&A;wL|a!(1JYT8&?s>Ts1xDsbH=mY<@>SxnVi4fpm
zbaB~{YJK1i=7*^8E$vZ);R4m(11XpO%=x3~=y>I@xo=ARr2Y*;0!$0rxRz>9(^fRB
zrS>-UTMEG0B#-|~v91E}a2-=?^q0~*(L)xS9QW}<7BSsUEa(7kKi$1fJpGCoTpXZV
zC+-7*n_7u3wV(c_-%*i>)2RZg+vUv#xl!m@8}!GnT3q(DoTdnP+W)nVFV-8$7d04X
z&SgCcy4P+mG#l%+^&X;bovpT;Sh_%<puNWkBYTLSM=pfL)sb(&tC&Z!^DYwB>Ec1r
zQU6n0UKZ-%X`GlV*6{z&JBJ|;ajWVZkhX*+OJ4$>l79rH>cBZQnf|)fR-;7}goX6A
zPy{!8Fi`dS=Y2enqi+I-$yNB>cYwvjFbB^p@Es-KthSbGqYa`87!F#|{XMY|K2@cw
zjCbKp{kWh?9MX`CF9{F+8YR-*A0eRvcV^E~NAs8Yd^82XCSpO4F1i_E=YCUW>ZeqW
z_}E(Sb&#)f@-um^)J&UjJO1Vca+gEM$Cx2D^qSW-WBF6@Sp_$u3X%cl`Nt(yQAG~#
z?zc{dz%R3%KMX8UAyjnWU~C+)5bjkk(vcU1fLOG`T@&T}lE)Nyj|^_L*?3}3o(yVd
zh?<Igkj<L+QmI9GWG}Eb#!vfo)#SvJv#S)H%qmhSNI(aYlJ>za@3GT%r__bDSb2%O
zvU7nAxmF@U6ss7Y03!l|FelbP^K;eoUF3zJ{Tn>;1|jZ=c25Q8XGHzTZ<j}vaF|vo
zf!KFGAz|X-ffT*zrY`R@RP7{o6kK|>ZdNFeI!tG7tP}57w6T5QJ2B8i>3r(TgEopq
z@(7$3FdoEPY=Cy(Q6b6m?qim8#{K&=-YNOJQgF8%uqKk1y<m*1A#N=wj#W+uW+B4d
zp`2*s7<y^=M}uB)vY;wSP<d|=9tlasDD@eNqK#kDQBz6iLlC!O4P-o1UA@1Yvz-MF
zj(P;R!>)A~1O+M64+|2iXm_gP{vP?w{D{?sH!m6;Tm1MrgX3goXC}s0IHnD@E`7fH
zjW-=@v&x^;XA7?T+_Lb_e~hj}WOPv6?3;8d=az^;{K`W&s$0__AenPkjO>>kC@I5Y
z@Zw=7bxjFV&+e$5r)k=$R+2Zt16Wka@N*Iv(R{f1d!sMXq_7lChZ<p#H|NquJ<c5v
z-J%eC{F20X$L}rBqssuD>ZgNM-5|@}Y1?n08a|cz5YVOqyki&-r-eCL)LSzf1;<*!
zu?FYh!hD}UhI(gqa7*PekY=X8E*!{z|FAdb84GfZAur0dudTeup{Vs8)$7vR5x%v+
zBDeZp(z9QkMJ64ibf#+^-i1sJqCB!u!Wt}q$j-CfhY$Zbmj8|UZkt#CX)vLZhu4nZ
zgk_!x{PVBGv%#BC<l#S2AtsQic=6v;y@j)}^gL_b{-5p>L$=rBq5n3&`VsKAwBB~u
z{L>7ZMGrYYI!tBE2)L5;zSxlvbnv}=bi1W7K)>sGOUCOX{mRSef%1T2I#|oa-(k8;
z>^L7A!015_^AHcgYT%W`rwwe|BIfgGWx&nV6Rg}Z7|2M1wI$%V;TnoO#J#yj`KiLL
zv7Pm|2mg8gWM;pkM8H++@epTjv03zzOKks`1i3>U8%f;xv$#hQGRp8kdnXmfSiWo9
zTEz>Z^X><oKR{fOZB>e|!d_$OS;ws??QN}z4RT@7@D|R$WXtF37g}xdM!4JksC<!l
z7gcAw9Q*B(!C$+NL|qP2d+&ViWj;*pRUBw6gtS_@e;qFMUOHh(7o1si*T}habm}0q
z68lk&s*IB0VtoK08851GWD!pnOO4_@Lg1Fd#NYQ(dx<x0mFabzU%5Kjnamx($Oi}9
z_@d+2?;tTpr?)M=>iR%9fnCIwS!{2)W3&#-=qfR%h|}Xmeu+NBm`Py;_43ne$GOSh
z?sowssUURViTT)$K~|<F`nfj3{);a1?wr4mcv~xZ)bJ6_H_-6I)ji|afVcaIg!4gx
z%1nO*$Y5!3)ZRE5#KO)mNcRoY&Ut+s^oOg%>)9_k!3bG?zKdyABwv|K=1dN;%W4o9
z;dd$MD?<lRHv?{;G#;FKTzt81rop+sI<4GGD?mZzt9DiY)NDz-fVF5%Q3GMLSj&;b
zgHoZ+Dc0qIRPuKKvPEEF+g{!X&Z&EVk5>gGMpsV&0C`#XsU#5~;fI{fVaN4vW&5}A
z(_~QqKstSzZHki_tj^-!L;?6Q)vB1Rl#MdMwq7q>IN$y6>J(Pz{}X{o!RPb9?a`Tt
z-45IPB&2F;lGy6ci6+`0(&C3l-#G;g>4IOv{5dG2PYsH!0iK(mW~zTEi+E<w^ITZ<
z%aPMMPqg7<{O6Rx4^1L}tI}>{;HtXy+%pKx%9ghRFGwxt%`mVkq{q|cbHuo-BvPG;
zKm4o;x9yIyx3k36Jsih2l}!P~<XzdbH8VBPXyN_kCLhfA{lA=<NWMv_Sl5sS?^F{x
z9#fkp8U)h{CBEQ-{R#gzyif`+Th4|V&ze}<jV1-8^TQ8q7NVDGj~(%q{XtK76Nn;d
zcW2%7!#dGrHKaFn+d~~q4`rd3Q1+99r^mfk$ul6jRFy4EC=;p{{{5ZiJ*a8CgLZ!5
zVVZDyVUkU-yNHx8i1v(^&T~M7SA$-Be+e(PJM?pguZ9A=9y<jMIO8U(IyxI_ef5IA
zd7Jx0nSov|pYt2r5^&p`BEH=3&1zMKX_)0PbWY@h9N2m^@=LUNC3~K+M`Oye?(5%q
zZHa}1S^~*3_a<!moMC5_a}JgY1|pOjgO7wWDt-z{XGFzCb96A6xAf78)qjrx9r`^v
zmZA3EGMFX7xRLB0_+{%@+pLWDU2GQ@X`gvvOZ^_Z!MFtw1kN?TAXTti*d}>=kWC!5
zU7b$0DX`ibwWTrJ8DSU74;&Jr;v0_x&1!$m5trg{d*1kR_SK|ReZoc2>=xZi(uco3
zvbWE+{7s&-Gj9p4ouOzbaysd`JKi?a(CrYf3`d1{n&pLk_#7@v4_m!>z7@uYd6G@J
zWUUg!1M%MaUAoJ|m|P99@C#8>tDUzHn6sF3Xfg)QPLr`_fkPZbtV1`)bHOed`32fQ
zele54Oxm&7zB}ynmPA4t$IH;ZF8d@oX0xjyX>7mV>`LGhIuNj!qVCT-vGoBTUcL62
z?I#G^O$PjmxAL#!+?mXATDGLRrG<CY%U>6uXbUj?f2BDKNAizwlVKJDo>9X_5mbzH
zbCv@4T}qnRy{eBksStO8(A6T0`|?YAZ9X>W%NE>hvnAfdJy`i`<^*E6mWx~->S1J}
zm53O(O5*_(sgw&RX;$TXKMY9qH+(KS=>0aeu(xK0Vo}_V`M|PLCtouUyf1Z`E&n@D
z@bQBHX3$|ik&%Zg9Q&gCyu@!Vl2X|QDel#3Irqc$^c?45%aDdH3pibAjugC4m-Q&O
zo@}ZJW47lRR7RolM6-E_0>$-WOC}m5LZ7h}CY%qpeXTRvW6y=$Y9?}X9_dM9nc6~W
za#E_3qfK<o0v|_oNJWmQ(t;0bGcZqLB~sV_@bkd>I6I!@=a}r{8R-_UG;`XEteijJ
zs;^<k7ZWELZ&8I8@EsaAzp5;Ud1V5<T5ASrEAI!SGoK>jU~c8u<tYHMJ}N1%byIUQ
zbshmZPz=pq{uQ2g=jn<fjz>3?=f$~(I@nYy`N0U+cDqI&R_CI424QnM&#8u|$olxv
zD<f(;NnVtW@;0*f;xt1yHZ>Qun$#Jp<3l)JQMz^q@t=L%fw*leOR?**!Z=>Zh=Z-|
za~1Xcl-`g-QZ`M?$m_E$x%jNocX;3hRc5yAjoVc<Lrghakecm;^BBV0_h@H9B)>>z
zhSnutC(p>8gREXJ^@<DPr930DL8a;%n@Q9r+;$(9_xDRaYv#ga<1Cs&Afu9<M5&(X
zP1dg`aq+$H*Rf3Ibv&zDl+#|$^vg;ra!i#B#UB!=xl-|Q933@~fOByq!U<7_=Q46r
zE6pb$_$IsGtL0`}Dp0<>%y`ULK;j|tm(~{$o?z1Ynd0`4{WpIMe1Ii|a|7rGWu=7f
z$J^izEm+{HRSHI&7hdZks*%&!h%O7okc&z}GAb3ewC*)k>A;=8{<gf$#**)`OUyMP
zKER?{dytNZGSII2<WIBbSpVRA2XWQt$_xJh>q?z6mO644gn`e09FKz|uuwoP>8+W{
ze5`0Ajs2-WjY<g*<jzeAkS1c(tCHQpGCzVL>TTf%eH3pmQkUgObyTPEMCV(trbLb1
zVbai)+!i)YlaI|jxfw8NTG?iWY^aC*nUaMQAKv&Wl6Nz$+7lGC2DD%lA#a96nAX#K
zq0=@l8ZIxUCoX@=9xV+s7o5pf?Gj>nNL|z@8{C_V+;f;wT~aF9sy`#F{*7dVh@vc|
zU48A6OE^Zg#D&=1o@iY8Wz2BCFTQQg^-o*iWrN;vl<42v4Ow#WTXfnnFZBN@U~CAN
zzG@omc{#4FAzbW?O|4_I7n-n!uGIXQpT6Y@i7Ba_OTU*li13xWb1)e|;1H;=PBsTS
z7Xa`I0w)_E*|IH77q69PULE)ut4sZ94Rd|)c=+nxb<L`xwietK^=I|=H%A|Ha#4!E
zazl1K;)pIU_AUPkiEK9#*Ro%PFu=W2BRI@z3qf!iUw^`z3VYvyJ6JCo6$9FLWBOm3
zIb@4b0RU{<GXVR*4<lUcYW!zd|4;aZ4Z{9EZ~idWM7Li1{YGHpxYjV2I1quv&3){j
hgtsW!l6-To_ovgjTYCq#5gGtclvR}}k$NBaKLEB7WoG~Y

diff --git a/doc/integration/img/oauth_provider_user_wide_applications.png b/doc/integration/img/oauth_provider_user_wide_applications.png
deleted file mode 100644
index 9cc12555574ea71a1b2183ab070bbf1fd5ebd035..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 17526
zcmb`vby$>L+c%0Rq9CFIA|N8okW$j6<j}*=Dd~{XNFya6Jwu1YMTfM2fP!=n9Ro-@
zba#A%_x(KY{k;3#``F)ie1FUw$2!+qXRq`8T`?1)q9j9rM~;Vug+(AID+$5E!U1Dp
zVawjRiJ|!3XQ#!&x{0Nt0F`3l79l2mO8S(#s;Y{Pk<HoJnX}aN>gwwB<b+#Trm3lE
zb8~ZRYln-At94+ev9WOly<z{HhKi1rqrixcg-b_A$H&J<US6Jojkm0<tfQl2{x!%a
zGCQNF*4{nn;Uf|g6VsWQnWMu)Rvxj>pFbNI81!^^`}z8Q3JW{8VQA<WeXXErVPRoo
zV-uB>EAUF8x34cEB0@n4y1li<D<bowdtz^Iud=f8Jc}VUHI+{cytK4*d3E{WQ^K#g
zx!~wjU0vO*tZX;8_iJlwyE{AU>+8``QO8He&CSgx$H!tas$7DSv8e@)ULWo3-X$a?
z*0&BJ(u*!GE&>7q5C}wkX6eDfK~7FC%+eBx9EypJeZl{#`g@;OP)tNZw$U5o+S=O9
zjg7*>!Y^f&BO{{$5lO#SeoHH9_peXsTQ~>{3;*m#t)kH>ITeeGi<(AOwJigoAt9};
ztqST!Cnu+8=jWxRrPI^X0|NsseN*Ok9_jhj5^~UwA>rTZ>)qWw%D#0)4HqUSCl^)!
z%=ywdK0a=2<q``24Ap<j&(H7R;9zBC#Q=J-FhB3`oT|8}I5;@Cw649n<|{8RZ$)E|
zq@<*Tn1r0FUVeUlc1gXfU%0lht+BDOEj4vs#dkM)8d+IcBO@d7r_Y5Ym91SqY;A5@
zI{Iw&`a;w+d_&{ZHT6U)Z9+L1{g`M?Xc<+tO`T}zqtm{)xVSdRzG!c6Z-ufeD=TyH
z3dt)dsWo_yZ_n2*cE4uj@$~fku`;-^wVNu;&QoUY-jl4Mp|OZy4v5XOYKuypsMc=^
zh=`0Gh3iSn$ZT6O1&9gcq8e7Jon*c`d;12ar>Apq3Wkbs9Go9%FtV1)a<aX6i9XsC
z5Pt2+0TO#96Q{~=XYVrcn)zEpQ=bFd_R0Q>LgVlHg1?qlLlO#0=UVnA{M&7%77x~p
z)WjNnUj!KotZnRk90XAFD<|h?!y&AwEQ>iy<_tT2HZI|VbVgHA(RvRx7g3?6rXP(>
z-@(e7TU*<$9X(=qtWB`6o@2>LN<iHv*HLx~L@?}j`>jv!bta${wT^_k90PYYX_z7a
z-8{{ctmgOZQmV|i0qh@9#kpa`d7%k3Z2=Dk--V{tuA6Vg7|cGn|GxGI>Gp@GjlO!u
z#>8=?yVB2t#9wSKIqdZ~onHC;P}({2QeAV(ak5-#*;Bx`Jw9L@WC(bm)AG_667T>U
z_)JVqcONWvg>tv!es!l<Rl^TCD?8?Ki#lL5j}0>!AP!=Zy5k2?3H@s^X8h{Eh8b1G
zus3UhHW{D{Ca=%CHP8brI1T(x2!6`Q1w*tfyfMXl({5)E9sij)<JMai7e!)tV?5!h
zt}xRT7Wm-@zVWJUCUue6?yGqVcaHcbEa1)$igld?xKj6$xA}4Z((cdXUkjgKeI~Ad
z%m|+CUb-|t_Ftbr!szAZua6%Faq;GeKl`S8<;(7M`!9a)n1DTxS+d5}oBD#q*njbR
z0!N-Sq?29Z+wOQ^?D+PhBv1mx*L0NlOKdJ)^d@Fea=<L_-u5>0`IFc0z`5^v8bn{8
z`WYs@<v!0#OV?R`abNnD-6N;5`&vrj_o1nG8j<${jg7)VODjjB>C|4ow9YTpGKP&x
z@yo&6x(~5|vRs}^(-%^WR+M;w#-opnfg3Ks=d95JZI|%w0Ml<_amXwFp8b?xO-`TG
ziEM(XexGUJsgbe)LTln6FdbOvtSBfq=7H`LzA#(H%KEx4J~KcD45O5v>kU=03e2or
zolg!73^aCW9dsR3O*%5}7+hPiZFuIiPZLCT$ybh|$*4rW1R`BN*wshUlF&Z@QgIHJ
z_b96F%H-F1X}XqmCgq1kAt|Y&?nNRe`1(lvwa7mqYr+-`cL+LB<PNM)soqm4lvI$#
zKl*@-C2}3=8C2Ez;R}Jw!WrTNDguw0P%#s|29Il2q-FDc7lj;I;mnWqSZ-JIJOR3s
z$Rv7Ud|(_yQr_;yDLsC-p&0v(f>@;3K-g_<|F<CCmDw>ar+F1!eIE0g8j|<=0DLzs
zsSRnZUzB=Pm{>l=xH^&85dJ2?vb}h++EbU>M=U+Hv)@jQD27MFCYftqOFA=S*iG{V
zP-Wz>K>e!Ej=clb(Wnt#tnA1#akuP;&XD3KdS{&2aO26~*rjQ?yK5zPKwdv-CJOb&
zImtgFt?+7YCt<4zJ}=@qWxxZ=@F>aSdf@`x<h>vJ83@R7PxngFH$<3OznmK^!fh>L
zWYJH8m!U3d@?EfyF?B!WX(cGNJUi}z{u`IF{4e`h9^n)ShZ@TbA}R3AJ?<L&x@@F5
zz3CKO?!u8E!i<g_tXLZ)sDv0@-isM+yqOI^@)gXRP!#ygz2*>sL}s~>M<%w_*}AiA
znO<+%ml%RYMmw0iXcx9A)Ti(9&+WhEe*u&ru(inpkTvAt=4PE1L0g}lV1W%29zjh)
z3r}1xol3vV$s~@0Y^)fw+YA)$n&Kv9M}v0im{lfCH0y2R`m)_s1fw++uJSj)ho$?x
z{Psx?lApD6J|Y23uO6={x$MLGMEWm*&mVP1xjG?W3uSY`7l6qa#k!PX;m5-t!+<7H
z1?SL{hk%_l$5r^y7POTaQt<T&C(vDlNQ$=KB5O4Hai?L#Bgki<eClR*#p6T;jit=}
z(*<2JGE$CrHHTE)9sG?#Gw{b#P3FOHC7w>|wp9;=0nbER%E~SBcJM}znk$&H<|Wq@
zB}L@KU4a%YXa1Pz1SWb({mgy_1`*P;-Ql?5#ns+(v}&wqr*lc=`}zczOx_Cp+1SL|
ze0FSbO$0NsnZV7goAF^cONKbVzXUTLSqt@8@i6OWYgs;SFh73X90IwoQ>wU$+9h{2
z*m;UDct8B*s5$FCNkdiE8#|w^hHw08r}!=E?8h+kHqTOI7+ucyvXGY*b)^-E)wRrF
zdn-m0Cu`3jVE^X@WZ5v4KMtdzS>%Z*q|{ZRjGVDTF&`T^IK40i;J@*@irbJqC3Rmw
zD6rVQf~Y|I*<ar_c*whJA-2<?6n4tpY$xf3cu05I9DH|0&Fo@dL-1t-TRpi2n33VD
z8t2O@|L^XWnMdmG)NcY*(UMh3nP`dppDt~VP%sFnR+>=cPl(oHTEbG?qJ6}o95XTb
zO14Hk{|odJ+(F&k%*8oK4vozSBh#h_hXqgE{vb=fua{pB^pRbDt<Sc*P^}A29TvMU
z4x1Tqq!cKhYOY0QmHY1i`%yNud;?Aq3|0wB^Nxu6@wlAD8UfVnr|_f%ot0Xo<>_OS
z<c4N1XjgF!B`)`)y8uaTcyN!-sXu+OkQ)8j#MqH(U2UWGXL$D3uv{HWt2`*bTM$D0
z4EUBE-)X5rezpQO?6o)AwG$zzBLLUdr0^uwYR>3Rd;Yv4`-lwYE9{#&VWAA&g)evZ
zwZ<dQ?uoq>M)f_?nxO%e?b$60m0rdV3Vczhs=3mRL76j{!15I*063Bew6WT9UX0qO
zJQrQQZLeA&e*(PnLZ$`ylZBW;b?l}SJ>n_GM#zf1Ce{lljV|h1<<Nc_{s$#WKjATb
z+1m`qEjKGFet}OPdQZwRryANf9`Gz?!hO17W;3oA{&8y(pav~xD09O?=6=R{`VLU}
z1%AaHFQC`W^LP?++Vd3XD+~s2m<LDHVJa3{n){@vH?2uo21Jj@wE=;*`Vn|=@TT&_
zE~CynR$BX1mJ4E+4R~e|pPn3=aMcjsrGC$1+cEQ!%rk%gOzKUj*k;nKWB22x?TXWu
z6vs5UL6p~m61qVRLI|en-u$>cmN?8M=UqZ`3ru7;_FKGSbwM;i<w`NlQu~XO$`iN)
zBRKxzisQYeW5m&lz8mXV{Y`oGk%+8%efTD5ZFXwlhwAA@)n$XG<DsmSB>Ih*CZ=bF
z)L6AtQ0XF7;9&LXdgXm5bd*0bk!15C2dk-Tu`7*Pexh}%kMNgaodx=$Orp(M(S6@d
zdZLVF76SI*K$Y*Osrx|!#L)#?I<57Q7e=pCnbjN4y(5J51^fE9&>_fLA9<n|Dxu;a
z7dBfsL~%v)H{$_rtpqyL+)SHZKNwDP%kGPnm3)3^>SF&kyzlLYD@&2<ZhZsrbLY)X
z)Q;(nH$V4GAiiEG4%32P$_a{<^YB;laB(0$Kmz6nT-cbwXc>i-+ri6?QGZk1!RiHL
zdmI>;lM!H<0c+UQ9(rXA>GJ8quz?%RS?lM9tR+jD!od=MV9no%=+>Vh9K!<xdhSsF
zW5|T_XZ-Nho$J}CJkSNn)C$F@huj_NN@;ovGczw5xVsN&^z#6fdtRAY|AtNfVDSfY
z{bT$$%WDPxNc=Na!2|y-<H3K8KVy^*`0ry3J_|3m>3k%Y@#D(IFV4fZp$q3Uv+xXP
z{>Jy~$8T?4;$_NUEj1@)*C?UGGq+|Rh6hX}LV!$K-bDB5c_(l7eq@(Q`^%c3BkB&e
zPwX3=J(bOmF2fvL9e<J&(WZ(hr+LPA>Dwr)2D#7K=Q!D<ZKj_#yM6adk1&F_Z4**@
z*`H*7b`nubY7V89Q_|)IUpOsvt57&tx!F;=SNO)5>r|0U$b{;<5>WuDV#DVP-+tY#
zf=-R3QLg&6-!?UcdspVx3#X)h+D5-yH{8D(;3SUczyptQ180p{CP7|SaxljZO`D3Q
z*IxuyNzdY!X0AEaM+|g7J5``xBREwdJil5`nNlY1eAdp`{*LKoZZNL0$%`NN;%{L4
zzaV?!|NBk{&2tCsARz}%--k;%(Gp|6J5Tlf9%yfo8pnN2SRlH~dDa%o!LSl;dWC%z
ztu~^suFpO6`K#XTzN6R|BB=9%Rn4Z&%WU`C7kGQKMaYva2)Ykm&$UDGXvSFJ_?+Re
z*^)>F1g&dePVHEu^{euL0v8kP%J#esB<>CJ?`4WF#D`)^)?%|W$44~Gg&%izELtDw
zA?kR2&duJ-Bf4pd8lht>;R__KHfa$Rqjw@#rWJ2YQbm3xURQ17C5-8qF*N}{YiQus
z&!kE;l!E2ZQ&dotKqh2%z6x!*k5fm7_40QEvDSNo8@c^QV`mdYqErIH_L<O3%Qvt9
zWxglbO<G$onCA+&5_NO2f7Oz|2^c3}p>eIBKA_wOieA5b%xl0AMHJHbz`C0{*djLj
z<Q}q6){vyQ_$0Ada=$ItIjcwVp%mA*r=CP4HjiH$=wmUX7!U@`YxKpzAE1Dm`sJC(
zFo&EY&gCazE1#;b#z<b-k9=p7RYkAcTB1J|CGRUEa&&aP?L4|)dj;#5j@M}wx>ZP*
zywB|qc?brdd4&YY_1sZ5AOE`MiFz=YEZbkV;wHw`6lIWEG&PD)&quiV*%k17ep>Dj
z@+|l$z5rJ?WJ+@bq;e~ZL1{R2|E$%CQJ*cluK2qwg9qET2^q<q{*gPhKW()h)=n+m
zXFHK~Ht@4%H3vWZFC%&43;fgM26YnC2f>nd4mx}t3dE{(E#1^FqX)k=u4y4&0aJy@
z_zb#7W2B3O#|vi5`fi3tVHb}@B%R&ix28p3;gw6iekj*P6=;K2_N`KB{@FnJnVm+|
zHRs8j_x8;e(uog=-YkTMiInrvi+Fn^TxgvHIx*j?DXEdk=i#zni$cin^XmcBN!|`b
z)IUyTUA02G!NN2SbtCVoI!$$}iWJ1fSR54HiCwthZ=@DW;*;5@WPPRtCbU#R=^uLo
zjWq9D9m{0C7|}MH=gHqQDK`BpQo}SzQ#XM{2Ck%ZjXbB>Jf5*cDto#mtz#E_MOO%5
zda%I%hWUV=uL|)vnN+u6Gxlua=sY%zo-S4-9bHirO)l3K)>6ICSTTIwEE5poAyfeu
z^^UG<cL*51uemL=HWTqA-f%s-A>_r9+`#Ylu1K-DeyKu?MN3gV^zKg$^LG^05cPoy
z6`aDbhnruxAS~3mXGr-~MWV;QVL{@OC0*^I4_iVz^f~zQlNiXzG)$xbPnwscAM^#9
zgZK>D6>~#ISI@Or$QpKFC?;-I$+UYM!PDcC6|mQUM=8=3Wg=x)8bAqFp6zE&-G*`^
za(dnI`&_j6DyFw=bd!L7#eCZ`Yy7aH68Za6NUCa2wHB^pg1CZy-EKPDd}|K;UKQIP
z+vaoyd{TN94FOMiZ5<~g5mee*D$t}i`8>=RJ33lzQy6GFbF5E$1Y|$@<cmk7yvc&7
z-W5PaKTBssa1gH$_<hu4LrCApoT7&5?AF*M(sFWLUWWg&!{Ai^#(Of*9=A^CZ$+iG
z+lf0gp_s57x4ldvp}onBvO<i0O3g<<6?w+cKNWta4fvNl&Ow@qRLn1=ICFPjO!Qdp
zdF<@GzoM%bE$+yUD($IYtx@FY9mSXPYg~Lt7N<A1!W|LGhe#=ARVJdXER8(&Z);$q
z9kvhm|6|$$K1u!(d-GZJNwja_*KELR5Sl+2o)0OE<mG;|7S)3>abUiCsgaBM!y<3i
zg9GEmFFy(RLPMY6%ZTd7s2kc&X4iS1>&W3^&JrT97$>Cn3zx%Kx1tW|JbbZLp;yf8
z1;ZmR>hZYOlxYpet2ss8vWe*v;Kx=ALv<47dH@$$#ZzMw(%y3J+xoq}WJgLsc*|fr
z`*_}d-%;Uy-(~^)$Fps!T497lE46Wxv)q{e3?8IRbj7l+Khw<A3~3DMn0)5YPf;Ad
zRdoQp-}R-DwPx)6GRZ61T`^+7wZG!4k>@?ozwA}Fx8Gzv9cVi%+oiox+D+-&eC&o?
z&q2Dqs5yPB&;6)+*?7sA`~KZBvBBJ$y~$fs^8494(Je%bV5#v9wjB9K2SlE4UY38+
z(p(Z{aWD(c(f?CC)|MFjH}BHF=Ty7tNHa+K!A4;C*F-nH%YCqvm6^9Ri*}KsQlXc*
zF^nVT*U}tC{oA-y&flwoJzp)DMSQHF-za{Quf0rhT`m}UuQ%aJcOJ91&vWoAye%c@
zMxD3URpnd$vFP2TXWp;X1qZbD_d`egK7!v5=s{_d+WN$vvW4uGl^TfI?gobo9ojuO
zqMTI?SsE#JX>3_~=0w=`*4c!QJI`s&wr;)X*OsMENoVOr&CX|^I!@1~osra7(tJWY
zF@7J~mC&r^)$o8R-UxWvU>~7!KG#+R!*nBpg<_jYrmK`CwH&sdS2;T}gB)8U_XE31
z0$z$^CSU;8xNc-U`qG8lAKWAZa3p}kQu+{j7VP@okHhg0%xA7C97Tk}$sB@sj_kzc
zxM%o9?{iOluMVpwZ-jAqQ;qUSUkb&B2)ZWoRR(uw-z<h0p2Z2x4mvO%x_OmpPmTB9
zW4^#AJl1E)(wxBF-}K0Um|bOXqxRqYD*IJZc+&|qg&Oces{A&y$jC=7-<S}WEL$iC
zUB-%FeZQfRpH({nMVqZqR_A%P9E$RA$#q@m9mbu$xEPxZK0)1V%gqh1dc&;P<e|V5
zrMmw0Egk|J>wYEJ(ed_-bID>6KY6g#Ze((L__KNsE{O?cpQ#kXp^Y96r-(G4A>KJH
z0e#0yQYoO+fY`vAiI_kVp071S%#4He^esZr!HOdE^1!2x_Qz@4<zl~7)v9;zyS`G*
z&|S(>infTMgXK<c0)dt-R)m2kB6hc#8sq4_ABH@E;2T)DI>52v{tYY)UclTf|MTq&
z&cNI-hh8iA8Inhg_4hZX0bya~UCR^)R6y*v{$t6%Ca+nlpkL<gQ(<9kllo#tM!J5O
zZ!G3NGuJ}?Vt+mL4<bK5^999H`dwVg6l*Lj4M6MP!vAo_`WOGdg#W$sAN&8I^FK5<
z+F4oQ2tG>VNWTie$UBSgH@tj??|E_$!~Kw>><wh~+P*J70#9j~MXre$d!2mp_CLB1
zlZsqBqmGhUWX0Y4LN~LC_x`o<;UGj^)#nrQ?U2WloCqaLofC6aFUrX9jj?%*_h1SI
zm0*uF^KUzrg+gDM^`||nCi)0YtN1a#B2Okft{d%oc}cx-Ipd|F6WGdx@l>M*ns72Y
z*(o-ow{0sGtSk;-or~pF?j02V!o^hsaz$am^9y#D=B!|!q~B!Z4mFPs!yYSAm`*)X
zG$|3`BKB#r`CXIzEpaPNlxJa+*I9r#UGTzsS#3@ErAH3<WO;aadM{BqUMcV>>Uce*
zEicO6@>x;KNzql`dGwq6!rqIW6;;q_IShUZX0~yH%-Bh3r&dW>%osTFLn6G?`0-I$
zcH6l;sciUb2_hmvNS>O0X<%|OD(51Y&t1S&I_-tX1gFV*Yijv~8We2atFiP;gf1DA
zX+cX8kyS~QT=Az@FJ}7AeRc1O17}J=e4<>c$zhZ5rqfKF$EoMfL0tWlz(MAX^8xk!
z)r@IHWl|20JV+gD>Zh?P?^72Yiln@^@6Q#IE7Z`AnnLI^Dvy=3A<63YUve*N0;f|Z
zNcq4#(I4;FhBos;dR-*677XNcH6}f9P}uGv;xIFNUZy+0AU86|7u++xG`AT&mqe1%
zEw*WqClkjYe+KX*?@P_j<3E~taOp4Pm^0)uneQZpx4I%{uGAkXAVR*<d6dGf)<Sw=
zS(^~MgQA^(P|y)}j<3jgmui+_(HMHF%;nhxqV+*5coLGf-fbLE;=141vU^S|pc#@C
zVED0P_3OKZ$RdVmFc$L#Q-Td%Yje4$e)%q;I*dX+e}t|S$<@X)YDlH2WAOlz50+1d
zDYBjFaeDMWPjlI;MOrQXVq-48@rwEQ!&(5T&IfQecjj11u9Aq&FV-H-3ozpzVW)bc
z9u#oBTiaqWN#q_?02RDnVx4wnzPXx?=rUQ<t;6;e!g${P>uZA<?=ZRInlG!0`hdaK
z{XD0FSWUDeLn4?gM~YHYryyPpHd~pk3P=cV<bcCDf(=zOE+m&^*xVGP0WQbYZ{r<m
z@5Am{&~*+j8k%-8&H6(Dq`jnI<(~g}8Y}g49B~amV#-6E{0`f3Odd2ys$Z!HVXmvK
z;d~~-?4{DGz4wE@N@GmRqoVO+{sQ~gUMskmQ+UCoAbIHHLy`fjfEcb4Rcetz^I-G+
z)#$rHpttId^UsXUrH6}g&~8&`mRIb1Xj%tDrnhtP%0y6RRA}ku$?~@DtF)g`dp0UY
zj9LN5g5s|TAqa5$L-aOV=L*eax9Ra4Wg%NSECfTIlNs-}C}MInZVaNCZ-WaJG!Po+
zN<$$>_@b>p_|)6Qsr?!fAj;Z8K1QE8!l29rP&+2()y$o|<(QEd?UG>di7!0u?NBuJ
z(E6PgVU7_3bwy5{wT&K+NvFJFez1GMogKc6&%xhjUI8+V4_!XUzE&V{ZAH-uBz=2u
zru<u?0D|VHp;X#sRwt)0c({9bZxf?dTcOi?8%33TNBSo^hwRC<;}A52>D8+jbzgq3
zSR9)tTX0uCNyZCyeD5{10X-J^F+x&m9G)yu7r2WUC`fj!eBVNO@1!~l>2WRy+fv*t
zN{g9wfrwGAeCT_P(39+Rus6-AW77a|Qd{p0jnY>>E36rn0nbCbC{2nwe@55~rW%E+
zBU)kZxU&+ra+yd*T`6EgGvtDUfKp5^E^nWcT8yqUFsnCA&RzBqLNr<u_y86VoVhnt
zh^gZA%mlaep@6OObEBE<8X*!Zd<s0xDE8>vFH>jKl>(QY(;WwYhvvLN)RF4-5tJI6
z45A4gyo%hK9~QPhz4Mjy8=hlFySB3s^M)}klp%R8tUJ?2!<%MSh^P?qW@t5k+`CVZ
zE{?9CGLg;vo>?6=3FF4{X@R?<p!zAHgH}g>>;>5D_QM&U7&RD<eG17UMIn-L(Wd;V
zqEgH^IuSkMSsh>_dqEZox-$5|WJ`bTZ0H;AJ!WV7`|8I%cuFa2Vb5BF7`aSVS~LVR
z48O=hHs66RqSJ)CRS|W^Uq@@vSsUlzt(VY((1OZ$EQpsCC{L*1!$Rb8pF$a%mubPF
zpB9(Z1LZR2)O>X@n~a0R+g^g|?x|5%J7}zo6IBOaq4@Q9RkSK~sPGk65%Q*!^i}9N
zO>9^}rT>Fd1)t9R<7bu~Tb#_{6v2|fO`j#PGzPkxM~{5L3+k%`C;W)hxBkwplcC+~
z_uNG&n$OcX7R`^L8EGVPU6hTFe#9sxGeXNBspqRSHcCv@!utp{VYb8B)@vHfX7`FG
zGn*5tkR|pd>yR4Q$64`J4Mi)b33VxBIhRrfHU8FueHaBQGl^wn_4ZH!WJ%yuc!d{N
zpl?MfYD|;;UdnSW=8MozGj;D)zh{5d5cJ%&mzH@}#zVho5F^yqF(UTpY><LXGh&5o
z!9DMJiy>7fjC4w_9pjrl?TDnDPwjiAcWW?)5J3yH^j<is=BqxKnQv|@Z(i4R9z5}q
zdrq$JK4udG{UmzwsD@+CK<*L3Rvu8Wfdc-z1w3lwKO*y-bWpv&!7@;Nr>mx7b-<F+
z<mV&BcpZ)uV|ATeb8Un{E~pSvr39!0Bf){GpB>0gDYMgqDHw><byB6)r1zScz1Y5e
zfMzIk^tNv*q;?UViWyLj`9~WdAHJWG<BHHikSpWy9(rDvW<_Xzb5E(GyD)ohf9u_W
z^_As=wdV5~h1^Xmyo!k>Jp*UyAv1f$;iXEP6ma?w={(d@*HsX(0;V)zx^`OGslk;n
zw_UZV_TI}}%%hW?+;k}f^Hln`FXP=!gvx0ihZ8bB-%42HCw?@Q`5-TM=h3sxY3FBt
z4)qJusO_gBFXJovy~W&}r4`d!V_d&Knf2dYzZ<sHijWoR<j=MO#%2}n3oYZmW4w_E
zRRX-}Q9lTA1i~B)4jc}3L*6gL>_@Czk^{Tm)s=y)MFhrPNw|u?(bab@wU6iTO|}<0
z#;BQ;SeV2OGcTwUOEnzqr#X>x#Pa3I-&g*|begszCzeGuQMj%?w%VScEC=AmE?*<T
zOFKpkIKp5a407`Y@35SzfH1i00`hMNhe3!KNO%nf|3&)FzHJ+sw@--~A3N=A5yUs{
zy#}y+mE%8Op=MpuT`!+wX0WJ8{wGk0k@WvWn*Srw7p{K#X(Jc|=;m6~Eeq1wH7Zu;
z(WiRX3`7-x1J<cdq=`y(V-vG;>+&*2MPCjGz+KewNw3N!yNS&Vf#Sx%tZQOxYEe}g
zFxchtxLe(VaFigYs2q&pvMp7xUz=n`QCk^prXIYwe8g6BLe^MPqN%U-RF2%rZj_W$
zVM`<^QH8T7gRH^b^aH4(+?x8@=v`=6|GMti%D}7V+)bJm%QH`npLqFHm`@VR)m2KJ
zUQXwMWr7qcXz!_=!lVK1#kuy=Zf_}Om%X(cSoKd3eGX{WZXFM^<)h+z-25HHUrapN
zV~AfUV2XGF(mIIDL@~Vr%<=RY<_QtA;toE<78gr47fhzeIHk=8ZBGrusOtGe2Qg(1
zc<jYwyGmyw&8yw)3Mzx6vdT%WF40Z-g_ZtMjzR^<;zseOHla6fU}b9pgfv3Ogr>_!
zS>ZyS|9Tf-6cognADnc;4<9q*M=xg~?=GW1L4gVnRba2>(5sw8Q<4!NMqD-ysiGen
zK96|W>W77eEJV8h$kK=#>F(J|-?3<UK6F|n9$QR8^t!M*?~7PGryi15EK(JQDM5~<
z`THL)wrL$SN^<7=^LV6OY>O+ge=uQrXafu_$MB?$6!NC**!NkLF{11`2wgpmLgp0X
zW;t^=+@@M()X3v32&Nh|jX~YRJ#}Aic8{cl6!2V`T$nXYb0X3(R~+Nr%z%gT`d<Gb
z<$18_9IJLFRpDLO{Lt1Nn5Or}69(ax_wmjtVu@xxBnA-PnOe)T#SzmxX%$Sk?79q7
zIKM6=nx}z{-SxQcUlT4Ky)me=tCig+h_t$<e&han2A9}9s$j4DHl|o2D7g~Y{aN^A
zJUKX9L{{2E#TFhJ*+6o2E7!Y|+~r&64>2z+WDz8_ZNIjla`Mv0rEi%rd?S1TAJ!-7
zh$PXO)}za0eeM?{Zu|T;D~V<d)~{BA)yOZ;e@Z@z3QtP-D*pWCqq|}3+a(I|IS*f!
z)LH6{*nZ*+ziMv?n-#EFzQ^4&FwWvtdw9aY9lUp#VzIi7cI->ccx}>3MgUfPL`;@4
zskzQgtJ=)2p@pKEV}AdsKZ+a}aSmVwO>ZrBe(68apaM3&X>F187HMd2CK@v4is!#$
zI@E#cs=OB}UN9?X7Fwu%;Po`vgX-348IxDDSUF!%&4bW|kGFw4Ql~_oo~o5SrrUSv
zr=Io2zYbX-(j!{aS+4w2k`ff$zkOSdVJCQLpsr?Q+B~&D&UIeEFX0oC@1*0?T;Z?S
z82+DVJ^qzuHwBDT*gd`@$L49=t<QlU-OXGF<ew%iXub%`W&YKSx#P0w_27<*APu}^
zz<Gd`fTbx2i4}4<@UkuW4y7zlk8uzygz;X{TU$;~n+5#IyBo%&Yd=3I_sdZM8O|Cp
z?IfdTicme<j^B%?O!T7g33tD?599zjM?cO9-ttbmH4c{T-~59L*f^P{FPXtoU=2`(
z2HDJ$m1S+z*Sd#EZN-`&tMS43Uo^-My^X?>1%-|^%oamJzk=>{mIXXPK3A#ye5kPi
z%;SAHzIiMA`Ge0+a3<bga-310#IOKOo)5)48<zyu&_{5eJI>qeij<zXc*=w0t|Tzk
zr17f6(iftTeTLV3L5o`RMiHypDjq^V<y~+9V%uk%adUmRepo=(D_Hp6=KKw&4V4Gl
z_PVU7RuK_6`@B3z1DfF7ZI}o7JZwzl`eD48c`MZ@`KnGJE@gL+_wn$|{hb*78=<y(
zMxIN7x>UEY;Ssli&76DR{Bbj(5l0bDSx6J%rRe7kgH()CqzWTUY-aBcCZv~~!GXxz
zZKc7B*>AaNDAaYIJVF#StZy@#vcxL_KF=`$IlTjqE7LyzZa#;7vj7`d5oFSz*YBH{
z{Eh|2XS>fr>OD%u7_{Nfq~FGf@3rW_Epu$C6+zElw_9K(v9a-hL+B!&pv@ltui!p{
zPuj<nCL-Uz!%yy*5CdiMgv_pf<_X*JND}z|HBTbn@V=O;jwPdFg?*fJK^IdhNmj=|
zVgQ6FdC+jcqJpPZ6wLCZ!s7H|Qv%=8F4(QJWX|Y=_r4M9_g+Hm8(<k<<N*Ww$Mjc<
zU4poqKnt!@OWx1S#%0HD1=x!mT~lT2lGKlWIpl!cxy162Kp(Cn@al{W^w9k)x2-+n
z-o*;I{axV`mt;ZD;!3pT9TJwl6`opdy@)Q_;<;683E8RQ!5jEDXI4GrN}uyM$MoC{
zcSMtLJh*d<$%_s=bskMko?iFcQ32W;e*ZPBQpOP>0cYr$pSLu6<&V@<Z`=iEb_MKL
ztA(+XXSb5Za)HQz5K!4Db4Dd&<A=&mJhhHXeQ@2$zH-LftoPgsx9A%_<jK3!TK#=8
z@Zd>+h1f%{w|NVUMD`|CRWVXGf*_T19V^O1Nr*P&Agq!6&VAuTWwED5IAGObD?4?L
zxbfuVJkIx!hJ^5vL)UHm*wj_+pF?r{Xdavb#;~avHZ$8cE!0*d9bNIsw-I8>$``+j
zOXBBAOgV&lWA|=;J&^buowZMx*>q1?ziE?7;$lIK_8i1~ZSqB`il7J&E;c4>eIeo?
z3<U>{4VJ(h3St$!YibkzKS#b0%qHyrT=6&UgZRHTUEX9;q*S&`xpBSo_d_N{<jYIG
z**k125kI2Be~%Hc;KDzMf6fg>au{d*HXd-!3d^mmzkCNDUAtzrPmx(UZub^h*tBQX
z`&y+StHC2-&R_iV>;nM*A_%A9G&QTEtwpu&CKHaIcoP-aaGHhO{J{Je)-EL2;<`B<
z>}3egcbh&(<5Rg3Y;B5c8leUvXm}XnaPf(*>gjDnDRn(T{=Z_CnGUf4jDB*NJeih>
zL(Q8?$9n0{xjijt9V<vT4%F@f?Gy1RWsZCChPHjI_x-8eIHZcK99?Uy&~-o1-P3w!
z_gpVs(~ma)#U<Bvb+~Ul?Dp&TuagEW#0nq|`vdZ|Xt6Ud_~C;L2hA@PE*8IY)+W%G
z4n&^mgBK&G@3-DwJ*Yc8oSfYx<ISETB;dgH6Q6wue5ix%2by~;hjrddr{3SnW~L8D
zaoBFTx`yKTe2IjVdF~NejlI@?-A}>g?86Ucj9uh0U=eu=#LC<`k*Adbai27(cHO>#
z@v_(rK*@P1%G`UaiT8<Zvw6_Z)8z<e`gZxBqqkPMtrB%PB+x~ems-f~r3b=4L0(Or
zRZ&Giawk3v%un)30-Ue%?Z-M)yA(vHXKtzpT0g*qhe(B71=rfX_gqx5|A^vt?w*<J
zEDAA%{>qOwEZMIUa@99&%3rzzb|pu#vs|rQpf>EQ`&2CnW>9b+VesJm6Yx|Z_0<aj
zN~2<S+QlU%N{WeD-$c)^4bx4p@<}mCcR>dqz1b)F){}~ta3NQJ|J&~pp-7gyEAk(d
zLE(X=PZ;VqKA5eKZVz5eTG23V^aYOnbZGSF$gG@l@rd(jt{&PC_2~{^t>E=Y`QBNk
za8q65O^E4J32asa-llq|)#se<Up^e(lwM$_9eoIs?7DAljxk#5_cN6BQ|*%8D!MZc
z*@C&$qlIkNCz_+Ow4n^OBJX?VM`3<O_9)rPjtz%?_+h)XhKy>odn;{<Q%Z@u8#n9$
z2U2f1spZt1sPWG8fuq-Gz6PdK#EP8Hi0k%6f0qlsLo41U(4F@PD3LQ{lJjjXT&9Fk
z|9&8Z^B!th`lWoOb=$?9+^iRSHy8P~lb7?MN!V=&&epegN#fozQraytrhn9ExhWC)
z!f>i$n*B%t=0i{UjF9IvKL80d;PfXw=fmGs5AX|fCmFB)L^>CSg{h@i2lp?_ckbAb
zd)=WgBEbQBwc%9LfHYOHZ76Vf!6atYbi1WJ8P>f`FvaK4kewT{fz$82Nhz~4yU2OL
zt>zb;-Ja!}>B=;n>_^rEqLVCz5C>~=i>PukD%0&uVY`OA$K<}^zDSwR!zR<x2&_c9
zECeqOc&P2s%{V=&{Gk^NJWPPu-K}JuIr5Aw`pR@k5<yD7XUN;%KJc*`WEwpHS@AH@
z_d-oVb9W6wrk2tOCS|Iv)WH$p=LO`S2s3N*q^F+}{vf?^>l8=j)bJv@;g$rfCE<04
zv2$jNegslcN79#GGhfA0Eu+%uE8M01ZUG)ySc4zA#<TfOl5dWnk$0?lmd77^vWFFT
zbDjt!$vpv0TuV7BbyEikJpPni@Z<QoASvP<+qDpExF{ab@z`U@fZi|NrW>hc%5<<b
zF<m-;OY0jr1hN&%m?56uu2t4EQUd#N`HTSHMu57$lg1$b)#mh!V7&30{GiAVg<bP5
zPIPBESA=POxdr%a4?iRuMVnhjYu{5Wmu^w?oG%ua>}%e-HT6?J)HRqn#k?O`qGm1Q
z@oSpA@Z*$HU~x_GR<Ug@I0QNHZ3IY}i{Cip4?i6!-$_VelL!{5R;1X*tKF*`VY%OJ
zb#2=>qt8!b)4H6@sped2Ev_uKYz>Izwy+|uu)U%KSE6434toV*_2XjlD-gf66T_NO
zK<ECT`Lw+A$H$N35)LY7&sB$8^lnKEx5|gj<wu@q#zpziM=={tZI-*bySu-e+QQ9Q
zE$enLkGkB2A~*=CuBHq<uhtBojrv@iZmp&I9Gx|J9&Koz)o)zI$Xw-%ov-oDUM)nP
z(_m%qGwwb+Z}Per(G_0b#K}+J2`s^qMJML$r#GE$q|Yw;xpH(~O;ceWH^9>j!B_hz
zKD)h4S_obgMD&yl3q+5(aK&8K!eby<E3wG*T5t9(O68YW5HR>g6a<3zXW}`KP5fu2
zEC_@n4(^{l*oi;(`pN)c1mSzRojT`V&wH84dFgb;68OSJU7fbhqzA38w>R2CPM!WH
zFZ^7IkAh%j!{OL&q##9}VF}uu%x}GWG(R4IaNg~JY(AOb0&TGy(at7SdvfStiCkIm
zjTBAr$oh})ME4{lRbrm^4!jRe17P*B0WIU+Ppz(QLEN1Y&;Jn6Z`_3L5f0_5k?ZC3
zzVV8dr<YoViKq|1Bs;idl`-d40N>Di2R0cRHWDGv&f#40DXCm%sPMA0=*d(qnU<@t
z7(3V%1vG$XZ*{VXztiVJyH1gmtSJ7rv_wSRg!S^YU+rBxh9>3w3`T<c+c)&wz-B4B
z+B?%)-mHKK2XLzJNrhJv^z8n&d?1us8Y9dFyu_ZByR~SdRzQ#{QMvsbpz*7GjhS!*
zAH{ErF#|yb6BW}hf#Uq>cD8!uKkBi#PX5qe`YFFJFN1qLG^}XK$D*H5Qzi*6o$<<t
zyEORphr+S>bK%m%uOH6%6Jl{F=a0Af^#-rs_@0{$kMzFnD=!B!l*RUi@AAIKk_8#g
z+`|MR67GE~&H9h${~b(mupH?BGtQXlf2Y88%>L~BD+T_s6RT7?f0Sjp9g_kE(GZVJ
zctL=u-EcEACV})+z?znp0sbUc?_rYp(n7YenBebEz^m)m_7yMGlA_kX>S97Ci>?4E
z3T)C8YUDzgAukP|R_Q|U=3*d%11n*zG}#5NjB1neaw5gKp-CMMrW!5DOO;E~8i7&{
zH_O6mlRr@O8*!NE_%(`#V%W#SA!;@U%9L|sLM*Vu^*V#cg%CoX;@<L^FMt@K+;~su
zP<f`3X6)RyC=0sNhV|O%5U?w~dLU7JYR@mIZY1}6&i!oaDZoW7)}@v?>{CEPC+vHX
z+zT}2RHT3=CZk0~zq^uUSe8JDK_rmCahD0hK*s7cMUHHZ9pfnj@C!OF74qw2lAZ&l
z5cGeW@tfc#%%Yyvl~fHj0;z#OYG#U@s+C~l^%9sPhHMA%LVMGeLLI1T)*CCdL*Hm@
z(I>*{r-sy7$ane>b)b>u#5{G3m)JqTo{ika>{g}F_w*cFn$04fI9c>aeJ>;%u;S8~
z5y7r!IiB&?Quoq&DF^b!2ZN|Au>UjS*RlK0h+l{GA1C|ou>Lvp|Bm=yCE_0u|DS5Y
zKXYY^4QRM*o5Sf%T9GP`NZcOHt-g*-EHW?ur9)Cb<}K<qcA<tAWgeU4E(3PUV>-vC
zR5<q66u8pJg*yr=(ga@}k^$M|)cAW&9_=K-uFskdxPosFWi%g;bYpf;K`yc*?A!S)
z<S=<M4{=ZUq@<2w1coGiVj=Yj^&m-lRaIu1A5n`a36y?Vs$KHK*MADZ{V7)=*>~uK
zti(TgggN9M3TV1`R65VbSvC*VNc$RGkd0;4i8sWfLWu)0Q#7nAgo0Q{Bh33t*31N~
zXEz=^B`7b9)<U>{hDAfLwm1QTh9PZt3sE7;3d~ExiPfevv0of4;5RA`>3}!9GqXam
zV%bhj{;soSUF7b_IV`I0XA1eQ8<#l-RBmHC!HuBa2y;~0F!K!J<ZxFG%ts;lR}F#G
z&HkvjlOuyLXX9~VjBLnpY8L~L$u;h__v{+vmK8K2Av%yXqR*29WRm!{VArW5p>@dW
z3|I(bRA3G?`L{^4(@3avT~feg+4sR(<SN}$eC_LUlah?QI7Ho_g3tU_a=vxLXM|<Z
zKg9sZQOPcDHR+-W+mHY_Ke_`QEtH7KGfcKNdDXPM1pd^ZzpVa-ONA*d*Gc}5wD`Z0
zYZsup%XbF@!GHCR0ejgoPE3cAMYG7S4neLf*nVx+8H?E1pN50V-bYu$87VNmrwt*7
zagzeXGH@P08IJuuHy5g_4u`a0fpC1474w(#+IrFo20{YNGzA>F_={-oZsn%-q8ccY
z)J7Uj!9Gk0EgqQtMUY9TCA)Fqd`Lhmqek`m+p~jMxKeN%X)59{)n{z~3e&w-;7Hp7
zTMLvndRMYpFl^yq0p7QdBo+C7m9aBhSg7#vPkCN_7+nY9%k4u*3;tR-um{V#Pf(0Y
ziNuec;<$cg{*!)oaO4$wlLq}4Po;uqOiUwHt-B)n<lRu@5#i{=s%pjjp_gN{jFjQk
zk4?CrPv)7culnU2NP{RVQBoCBnBJ%c?k3>-R9kB~Ay>5<KK@k&^mMen0)k*)Q;mMt
z@*uy8?kn6~i5v4ujXCZyCN;=%plv5^925z8pAiuIt4}D++h-W<gsP!uwo+r<BfqXD
z>OICJt8Zg1<hoHL-&`S-O+rh53?I5<yoLKV8mw3&`+(C3@%G_I$wEJI@$#@T*^jq)
z$i9Bl$Frgc>#%*e4p|@l#cq9+miX4CoRjbDWJcf1o7MiXhfZ<sSBgN^!!u|55)Zv`
zSvyH@G`3GT9Q(K!;?AKGKebl2upUb^Q*l;%5j@5ybX>d<$7DS_YuRf{;-Whf*-hs&
zQXT8uTutOV%LCZTYd%tz*Wp&C4H<EIdw9wNWU7+TR2X!>^nbNDcC^39ORmi0tq#5-
z(p`DOgw<pPmeQ)(hk>PPO_PApm9bn9L1Hq^LlK@r5^AMtwO5kHunMPU+Ec8!7Z~2j
zV&vb5)+Eo#zu6Oir;3I|9}mWm`}N$WD#tadRXc5Q=~?7BgA!x#)AyKcxY(a&Yq5)E
zG^o}^Wp`T~e8q8WcJtqT_Wx4V#YndNX(ej!kI8Pn+)C4&iwIc|mZu{)ELz49N_JUb
zY!<8W>AFj+am8?r-JA7k`evlqwSjs&zcc5}PW%V0y%tgg;crSht|Y?SB&*eD-GmeR
zzkJ6P2YZ3^V?DH~AF02;)B^{OS3V<@j=er(2f#4XS9<+uqz#%Igi^*YD{r!GB`WRF
zo9Q40il(VfgIl|_k%FFCK04lGI{0De-xC??co;B=p9-N?qP<a*Z7aXRvCZO9SI&YP
zuN~bJ@M=WOPD4;+pRn}l%ZioYQ)t5jfz<G}FvNGI6gallI(&I)Ct4Fy%j+}MDd=YN
z8=ezz$2K^SNfQO{yMNKbQuwOU^d*z-rmK=ni#c--Hr4kJx%+ye<L<V8TMk0nhwMV{
z)C7h03G3T&$k<66WU$S%0>k&E12DXQ!@KNcVQ++9Ot~aco(AWF*krdxe_KO8iZjT8
zZ?HOnv(g*9LBL;mG}C}YXZW}!K~x3tq%{_X2D{%14`TZ8V*#M`>#ta^Q`_8jkfJ1E
zuVt$|dVfGnSRTe7$33Q$lNGHs$(o8e)%Yn$-V@o7qq&=yfI;b+MQ@0j5@I#d0-gr{
z|B%&xwBY~4G&%?~3>9A;2WuV?K=80;<B>xf!x{U~7DI}n&-X$Wgs+RZ1!&}9Z|Y;_
z_wpJm{qk$Dg+w^{5Rnz8@fe}i>S!e;^la-(9XGL_j&?gjRwp~JF+5ag2vo)VN?Ouj
zbY%oq6>aCq2~E!7!4#z^h~`@v{8~_Pr?Jb-sdvSE$+qhO{2&}8`T5N=X=kvehEx&L
zQW6IcqFGx^KsjO5iS)9?WQ=?)5|oN8f-^df9%+0ZxAazmE$2P%oXv$wQuTvlN8FgS
z`F`5-3@W6*V8QvK2ND^K?fCLhJ~5%9k>l>*TjA_V2Hm404D8}z@^?pCA}TiN+wEjQ
zzVyimX_`0GySr{Pr!!tk;L`0}kPUdD79JP28Faas*nxST8mkTR1;8+1RZ&`ZYS*dn
zv@tI^p(<&9u16lGGAf$8f36C~-^}+tkWN`D@>i@*#bQ+l6E6Pn7Ea(Y^Xe-ZT8%#A
z9eR*>Ao**YxNXOssgY9=y=qH0SFf1_YJF|xjQOPwfy?#{)~O<=wM&#zdxijGBxL4h
zHZ1Flg?e{RT25S#zv7xG5M6-Shpc*^#obYG-QJ6Xn{#1MBC9G`YEhUm%%gB39bR#q
zmR68vZG-VxHypxtMijpokM6c!WYwnyu;N$&F?GwaE_&T*7EEAIqC~JTDf{2rH1U7-
zZr}e70WsnIZ^aAmKYRPXE*Srvpa1(<0D9);b#Rzj3_Y9Q7~#b<=`9SF4J;o~JX@AV
zjaS!w#a!cUhl56_ouTcjU88$QC7FCNo}BaY8|PM_i(`$NiiJ<O4UOI#%56&RF2hri
zm}1rV5*Q<`%eI_G?+2r7U58bPEQ&PGR_Bv26>|(2W`nJm3u|0#dT7>+m9;M<_oa_R
zyeF_OQ{mpj^v+M~ZCs`G``-?)RjE(eJIRY-{CgY<cR!L-_c*Wda$QrBm+^mNcp+lT
z;<|@s!)P3@=Dsw;xZyOMjiR#L3U+M~(p6-ru8Ev&yw=?qjACPy2~Q0fdN$K|H9#35
zdM~(I1pUdT-HQQp1@~PZbie>8wI@#R-$rfzZW07e4eMRG?WeW#A)42hQnL9+PvLbi
z<@FynHB(-$LQfjEX7ar)kc~S^`j`M6ufPoo&)}1>jShU<2MWWepRTtXw84lgzdUP2
zpH7}-DQo)E-8&$hFHxX_(WA`<$cS3Y=I7b>V=lw*c%D>xm@Elv|B5HXv=E5k7G>59
zw$F6MmUL>GjZnJ#)~5UB@`aPes?Rga^y`k&Kh3Njf!Zomj%^B}5>>Rd^PpY2H|zvi
zZPF%Z1H(cU)_LN+&F;L(zTX>TuuD;>s~b*B+2?Lx2%p&r?_sCLR84+hLmTWYxG~j-
z+L%Kz9%znvA%`2qfXT*gH4M=9Onv(}`Bl*<e#medH3aS8HoKp@|HjniF2;gmkh+r0
z!HE7<i%NLVVX!Xm+V5#N!$EulTs8s6E6U2OcL?p^9fu5#o}kBI9IkBW#HL!dSE|aC
zi<nXAkuu163-N48O3Hl(YWgb-F8b-bv_Z%voCY6@UzkZV`(c{a)VlgZ1rze*HQM=$
z8^#uIGR7%GGy`IVN+;(ZV1vi|B-|?QS-+`h9fdvSpw|6}dZ~+xoxf>5n%XP9^{$2H
zP5TzD-x4S4dt{B>Ok+NKG-R$`7FPR0hdm*}Ur?X%0u1JB^B2;z^^8NJWt~Id*v?8Y
zp`Oqs!wP|uCyj3FaJ|_yIds=)^3Gh>GF2>G^b#aTUZ|T(J3<e^8x{b9e-*I?_4nEa
zxi{20dL$tiH~S+ur<pQOj6GKR4ti+-J44$dl-_I-*|qS`jUbWDv|jU`-KZ6dcJrFw
zd<I1`O(Kf0h2F!{J<Zn2{U57CnuKBRN<<8NE>|jw6Qfrjfp9E^Sx{n%=G=#`3P&hN
zBq;m(6ysOvy!a@-`ofh+<@W}kul?M;_dB6=)QJDM6o7zmviE%mC-A8$?hB<RAQ)HD
ze?AfN|CLAbv>f+^Cb%00o3SPk(muF%H6)!U!70Dt{Pg193uSN^3|30iKD$z}oLdYm
zoV=|V>yER9FazIPvz>O6zVT1wrsqgWzSh`aIY<)reGk!T{3ZZxazBltO6?JDINCM$
zt%W45N2brOTr?2ka%T5Bm0sBoQ(Z0QH>Asgz6*m=E1ft#ooXi{qk^(fORV{DY|=R7
z&YRQv;sND7l^`dMoFxeQmp$f`?&a{v)osLHs<IkJk0}g!Yn<2A%VFp%vM}WD<yHkA
zp$<GbHx?|c8)Vo23(zd__;pV_S2hGs&l((-(75)j+7*AJWz!q^79+S;Es3t(&@&3+
z>zGq{d)itY3=l_MdkG4@as2@yApasA>wq~(N{WY5lL=%o>S2ucg@ZxYpXUGs?{5;;
z-{gOh{;~3!bp09T1!^wcIWW7~wU9oe*~C#uGZqX(UU{^g@@NqP8&a2G=yRot5w2ee
zG@Y|uubhS`Z)3*8L5#<~@X1U<OoRA`r2n^(${5_BLBlovMq{*xI(Tgh*VhhnbMEmW
a$F@zHy`HO)I_CdGu;iqaBuicyefVE?T8!)f

diff --git a/doc/integration/jenkins_deprecated.md b/doc/integration/jenkins_deprecated.md
index b5d68e3183f..2ed87456ea1 100644
--- a/doc/integration/jenkins_deprecated.md
+++ b/doc/integration/jenkins_deprecated.md
@@ -50,7 +50,7 @@ Now navigate to GitLab services page and activate Jenkins
 
 ![screen](img/jenkins_gitlab_service.png)
 
-Done! Now when you push to GitLab - it creates a build for Jenkins, and you can view the merge request build status with a link to the Jenkins build.
+Done! When you push to GitLab, it creates a build for Jenkins. You can view the merge request build status with a link to the Jenkins build.
 
 ### Multi-project Configuration
 
diff --git a/doc/integration/jira_development_panel.md b/doc/integration/jira_development_panel.md
index a49e2a74259..d91e03de45d 100644
--- a/doc/integration/jira_development_panel.md
+++ b/doc/integration/jira_development_panel.md
@@ -62,8 +62,8 @@ self-managed GitLab) set up the integration to simplify administration.
 
 ### Jira DVCS configuration
 
-If you're using GitLab.com and Jira Cloud, we recommend you use the
-[GitLab for Jira app](#gitlab-for-jira-app), unless you have a specific need for the DVCS Connector.
+If you're using GitLab.com and Jira Cloud, use the
+[GitLab for Jira app](#gitlab-for-jira-app) unless you have a specific need for the DVCS Connector.
 
 When configuring Jira DVCS Connector:
 
@@ -79,13 +79,11 @@ create and use a single-purpose `jira` user in GitLab.
 
 1. In GitLab, create a new application to allow Jira to connect with your GitLab account.
 
-   While signed in to the GitLab account that you want Jira to use to connect to GitLab,
-   click your profile avatar at the top right, and then click **Settings > Applications**.
-   Use the form to create a new application.
-
-   In the **Name** field, enter a descriptive name for the integration, such as `Jira`.
-
-   For the **Redirect URI** field, enter `https://<gitlab.example.com>/login/oauth/callback`,
+1. Sign in to the GitLab account that you want Jira to use to connect to GitLab.
+1. In the top right corner, click your profile avatar.
+1. Click **Settings > Applications** to display the form to create a new application.
+1. In the **Name** field, enter a descriptive name for the integration, such as `Jira`.
+1. In the **Redirect URI** field, enter `https://<gitlab.example.com>/login/oauth/callback`,
    replacing `<gitlab.example.com>` with your GitLab instance domain. For example, if you are using GitLab.com,
    this would be `https://gitlab.com/login/oauth/callback`.
 
@@ -97,15 +95,15 @@ create and use a single-purpose `jira` user in GitLab.
 
    ![GitLab application setup](img/jira_dev_panel_gl_setup_1.png)
 
-   - Check **API** in the Scopes section and uncheck any other checkboxes.
+1. Check **API** in the Scopes section, and uncheck any other checkboxes.
 
 1. Click **Save application**. GitLab displays the generated **Application ID**
    and **Secret** values. Copy these values, which you use in Jira.
 
 #### Jira DVCS Connector setup
 
-If you're using GitLab.com and Jira Cloud, we recommend you use the
-[GitLab for Jira app](#gitlab-for-jira-app), unless you have a specific need for the DVCS Connector.
+If you're using GitLab.com and Jira Cloud, use the
+[GitLab for Jira app](#gitlab-for-jira-app) unless you have a specific need for the DVCS Connector.
 
 1. Ensure you have completed the [GitLab configuration](#gitlab-account-configuration-for-dvcs).
 1. If you're using Jira Server, go to **Settings (gear) > Applications > DVCS accounts**.
@@ -114,37 +112,39 @@ If you're using GitLab.com and Jira Cloud, we recommend you use the
    (We're pretending to be GitHub in this integration, until there's additional platform support in Jira.)
 1. Complete the form:
 
-   Select **GitHub Enterprise** for the **Host** field.
+1. Select **GitHub Enterprise** for the **Host** field.
 
-   In the **Team or User Account** field, enter the relative path of a top-level GitLab group that you have access to,
-   or the relative path of your personal namespace.
+1. In the **Team or User Account** field, enter either:
+
+   - The relative path of a top-level GitLab group that you have access to.
+   - The relative path of your personal namespace.
 
    ![Creation of Jira DVCS integration](img/jira_dev_panel_jira_setup_2.png)
 
-   In the **Host URL** field, enter `https://<gitlab.example.com>/`,
+1. In the **Host URL** field, enter `https://<gitlab.example.com>/`,
    replacing `<gitlab.example.com>` with your GitLab instance domain. For example, if you are using GitLab.com,
    this would be `https://gitlab.com/`.
 
    NOTE:
    If using a GitLab version earlier than 11.3 the **Host URL** value should be `https://<gitlab.example.com>/-/jira`
 
-   For the **Client ID** field, use the **Application ID** value from the previous section.
+1. For the **Client ID** field, use the **Application ID** value from the previous section.
 
-   For the **Client Secret** field, use the **Secret** value from the previous section.
+1. For the **Client Secret** field, use the **Secret** value from the previous section.
 
-   Ensure that the rest of the checkboxes are checked.
+1. Ensure that the rest of the checkboxes are checked.
 
 1. Click **Add** to complete and create the integration.
 
-   Jira takes up to a few minutes to know about (import behind the scenes) all the commits and branches
-   for all the projects in the GitLab group you specified in the previous step. These are refreshed
-   every 60 minutes.
+ Jira takes up to a few minutes to know about (import behind the scenes) all the commits and branches
+ for all the projects in the GitLab group you specified in the previous step. These are refreshed
+ every 60 minutes.
 
-   In the future, we plan on implementing real-time integration. If you need
-   to refresh the data manually, you can do this from the `Applications -> DVCS
-   accounts` screen where you initially set up the integration:
+ In the future, we plan on implementing real-time integration. If you need
+ to refresh the data manually, you can do this from the `Applications -> DVCS
+ accounts` screen where you initially set up the integration:
 
-   ![Refresh GitLab information in Jira](img/jira_dev_panel_manual_refresh.png)
+ ![Refresh GitLab information in Jira](img/jira_dev_panel_manual_refresh.png)
 
 To connect additional GitLab projects from other GitLab top-level groups (or personal namespaces), repeat the previous
 steps with additional Jira DVCS accounts.
@@ -252,7 +252,7 @@ resynchronize the information. To do so:
 
 You can integrate GitLab.com and Jira Cloud using the [GitLab for Jira](https://marketplace.atlassian.com/apps/1221011/gitlab-com-for-jira-cloud) app in the Atlassian Marketplace.
 
-This method is recommended when using GitLab.com and Jira Cloud because data is synchronized in real-time, while the DVCS connector updates data only once per hour. If you are not using both of these environments, use the [Jira DVCS Connector](#jira-dvcs-configuration) method.
+This method is recommended when using GitLab.com and Jira Cloud because data is synchronized in real-time. The DVCS connector updates data only once per hour. If you are not using both of these environments, use the [Jira DVCS Connector](#jira-dvcs-configuration) method.
 
 <i class="fa fa-youtube-play youtube" aria-hidden="true"></i>
 For a walkthrough of the integration with GitLab for Jira, watch [Configure GitLab Jira Integration using Marketplace App](https://youtu.be/SwR-g1s1zTo) on YouTube.
@@ -285,7 +285,7 @@ For more information, see [Usage](#usage).
 
 #### Troubleshooting GitLab for Jira
 
-The GitLab for Jira App uses an iframe to add namespaces on the settings page. Some browsers block cross-site cookies which can lead to a message saying that the user needs to log in on GitLab.com even though the user is already logged in.
+The GitLab for Jira App uses an iframe to add namespaces on the settings page. Some browsers block cross-site cookies. This can lead to a message saying that the user needs to log in on GitLab.com even though the user is already logged in.
 
 > "You need to sign in or sign up before continuing."
 
diff --git a/doc/integration/oauth_provider.md b/doc/integration/oauth_provider.md
index 2302ab2d853..8f1c625d142 100644
--- a/doc/integration/oauth_provider.md
+++ b/doc/integration/oauth_provider.md
@@ -1,82 +1,74 @@
 ---
-stage: Create
-group: Ecosystem
+stage: Manage
+group: Access
 info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://about.gitlab.com/handbook/engineering/ux/technical-writing/#assignments
 ---
 
 # GitLab as OAuth2 authentication service provider
 
-This document is about using GitLab as an OAuth authentication service provider
-to sign in to other services.
+This document describes how you can use GitLab as an OAuth 2
+authentication service provider.
 
 If you want to use:
 
 - The [OAuth2](https://oauth.net/2/) protocol to access GitLab resources on user's behalf,
-  see [OAuth2 provider](../api/oauth2.md)
-- Other OAuth authentication service providers to sign in to
+  see [OAuth2 provider](../api/oauth2.md).
+- Other OAuth 2 authentication service providers to sign in to
   GitLab, see the [OAuth2 client documentation](omniauth.md).
 - The related API, see [Applications API](../api/applications.md).
 
 ## Introduction to OAuth
 
-[OAuth](https://oauth.net/2/) provides to client applications a 'secure delegated access' to server
-resources on behalf of a resource owner. OAuth allows an authorization
-server to issue access tokens to third-party clients with the approval of the
-resource owner, or the end-user.
+[OAuth 2](https://oauth.net/2/) provides to client applications a 'secure delegated
+access' to server resources on behalf of a resource owner. OAuth 2 allows
+authorization servers to issue access tokens to third-party clients with the approval
+of the resource owner or the end-user.
 
-OAuth is mostly used as a Single Sign-On service (SSO), but you can find a
-lot of different uses for this functionality. For example, you can allow users
-to sign in to your application with their GitLab.com account. You can also use GitLab.com
-for authentication to your GitLab instance (see [GitLab OmniAuth](gitlab.md)).
+OAuth 2 can be used:
 
-The 'GitLab Importer' feature is also using the OAuth protocol to give access
+- To allow users to sign in to your application with their GitLab.com account.
+- To set up GitLab.com for authentication to your GitLab instance.
+(see [GitLab OmniAuth](gitlab.md)).
+
+The 'GitLab Importer' feature also uses OAuth 2 to give access
 to repositories without sharing user credentials to your GitLab.com account.
 
-GitLab supports two ways of adding a new OAuth2 application to an instance. You
-can either add an application as a regular user or add it in the Admin Area.
-What this means is that GitLab can actually have instance-wide and a user-wide
-applications. There is no difference between them except for the different
-permission levels they are set (user or administrator). The default callback URL is
-`http://your-gitlab.example.com/users/auth/gitlab/callback`
+GitLab supports two ways of adding a new OAuth 2 application to an instance:
 
-## Adding an application through the profile
+- As a regular user, for applications owned by an individual.
+- Through the Admin Area menu for instance-wide apps.
 
-In order to add a new application via your profile, navigate to
-**Profile Settings > Applications** and select **New Application**.
+The only difference between these two methods is the [permission](../user/permissions.md)
+levels. The default callback URL is `http://your-gitlab.example.com/users/auth/gitlab/callback`.
 
-![New OAuth application](img/oauth_provider_user_wide_applications.png)
+## Add an application through the profile
 
-In the application form, enter a **Name** (arbitrary), and make sure to set up
-correctly the **Redirect URI** which is the URL where users are sent after
-they authorize with GitLab.
+To add a new application via your profile, select your avatar in the top right, and then select
+**Settings > Applications**. You can then enter a **Name**, **Redirect URI** and
+OAuth 2 scopes as defined in [Authorized Applications](#authorized-applications).
 
-![New OAuth application form](img/oauth_provider_application_form.png)
+- The **Redirect URI** is the URL where users are sent after they authorize with GitLab.
 
-When you click **Submit** you are provided with the application ID and
-the application secret which you can then use with your application that
-connects to GitLab.
+When you select **Save application**, GitLab displays:
 
-![OAuth application ID and secret](img/oauth_provider_application_id_secret.png)
+- Application ID: OAuth 2 Client ID.
+- Secret: OAuth 2 Client Secret.
 
 ## OAuth applications in the Admin Area
 
-To create an application that does not belong to a certain user, you can create
-it from the Admin Area.
+To create an application for your GitLab instance, select
+**Admin Area > Applications > New application**.
 
-![OAuth administrator applications](img/oauth_provider_admin_application.png)
-
-You're also able to mark an application as _trusted_ when creating it through the Admin Area. By doing that,
-the user authorization step is automatically skipped for this application.
+When creating an **Admin Area** application, you can mark it as _trusted_.
+The user authorization step is automatically skipped for this application.
 
 ## Authorized applications
 
-Every application you authorized to use your GitLab credentials is shown
-in the **Authorized applications** section under **Profile Settings > Applications**.
+Every application you authorize with your GitLab credentials is shown
+in the **Authorized applications** section under **Settings > Applications**.
 
-![Authorized_applications](img/oauth_provider_authorized_application.png)
-
-The GitLab OAuth applications support scopes, which allow various actions that any given
-application can perform. The available scopes are depicted in the following table.
+The GitLab OAuth 2 applications support scopes, which allow various actions that any given
+application can perform. Available scopes are depicted in the following table.
 
 | Scope              | Description |
 | ------------------ | ----------- |
diff --git a/doc/integration/omniauth.md b/doc/integration/omniauth.md
index cd582c2edc3..54fa5b0a732 100644
--- a/doc/integration/omniauth.md
+++ b/doc/integration/omniauth.md
@@ -66,7 +66,7 @@ earlier version, you must explicitly enable it.
 NOTE:
 If you set `block_auto_created_users` to `false`, make sure to only
 define providers under `allow_single_sign_on` that you are able to control, like
-SAML, Shibboleth, Crowd, or Google, or set it to `false` otherwise any user on
+SAML, Shibboleth, Crowd, or Google. Otherwise, set it to `false`, or any user on
 the Internet can successfully sign in to your GitLab without
 administrative approval.
 
@@ -168,8 +168,6 @@ omniauth:
 
 ## Configure OmniAuth Providers as External
 
-> Introduced in GitLab 8.7.
-
 You can define which OmniAuth providers you want to be `external`. Users
 creating accounts, or logging in by using these `external` providers cannot have
 access to internal projects. You must use the full name of the provider,
@@ -215,7 +213,7 @@ from the OmniAuth provider's documentation.
   sudo service gitlab stop
   ```
 
-- Add the gem to your [Gemfile](https://gitlab.com/gitlab-org/gitlab/blob/master/Gemfile):
+- Add the gem to your [`Gemfile`](https://gitlab.com/gitlab-org/gitlab/blob/master/Gemfile):
 
   ```shell
   gem "omniauth-your-auth-provider"
@@ -240,25 +238,28 @@ from the OmniAuth provider's documentation.
 If you have successfully set up a provider that is not shipped with GitLab itself,
 please let us know.
 
+Share your experience [in the public Wiki](https://github.com/gitlabhq/gitlab-public-wiki/wiki/Custom-omniauth-provider-configurations).
 You can help others by reporting successful configurations and probably share a
-few insights or provide warnings for common errors or pitfalls by sharing your
-experience [in the public Wiki](https://github.com/gitlabhq/gitlab-public-wiki/wiki/Custom-omniauth-provider-configurations).
+few insights or provide warnings for common errors or pitfalls.
 
 While we can't officially support every possible authentication mechanism out there,
 we'd like to at least help those with specific needs.
 
 ## Enable or disable Sign In with an OmniAuth provider without disabling import sources
 
-> Introduced in GitLab 8.8.
-
-Administrators are able to enable or disable Sign In by using some OmniAuth providers.
+Administrators are able to enable or disable **Sign In** by using some OmniAuth providers.
 
 NOTE:
-By default Sign In is enabled by using all the OAuth Providers that have been configured in `config/gitlab.yml`.
+By default, **Sign In** is enabled by using all the OAuth Providers that have been configured in `config/gitlab.yml`.
 
-In order to enable/disable an OmniAuth provider, go to Admin Area -> Settings -> Sign-in Restrictions section -> Enabled OAuth Sign-In sources and select the providers you want to enable or disable.
+To enable/disable an OmniAuth provider:
 
-![Enabled OAuth Sign-In sources](img/enabled-oauth-sign-in-sources.png)
+1. In the top navigation bar, go to **Admin Area**.
+1. In the left sidebar, go to **Settings**.
+1. Scroll to the **Sign-in Restrictions** section, and click **Expand**.
+1. Next to **Enabled OAuth Sign-In sources**, select the check box for each provider you want to enable or disable.
+
+   ![Enabled OAuth Sign-In sources](img/enabled-oauth-sign-in-sources.png)
 
 ## Disabling OmniAuth
 
@@ -325,7 +326,7 @@ omniauth:
 
 You can add the `auto_sign_in_with_provider` setting to your GitLab
 configuration to redirect login requests to your OmniAuth provider for
-authentication, removing the need to click a button before actually signing in.
+authentication. This removes the need to click a button before actually signing in.
 
 For example, when using the Azure integration, set the following to enable auto
 sign-in:
diff --git a/doc/integration/openid_connect_provider.md b/doc/integration/openid_connect_provider.md
index 6161f463b99..4455ace3e1f 100644
--- a/doc/integration/openid_connect_provider.md
+++ b/doc/integration/openid_connect_provider.md
@@ -17,8 +17,7 @@ OAuth 2.0 protocol. It allows clients to:
 - Verify the identity of the end-user based on the authentication performed by GitLab.
 - Obtain basic profile information about the end-user in an interoperable and REST-like manner.
 
-OIDC performs many of the same tasks as OpenID 2.0,
-but does so in a way that is API-friendly and usable by native and
+OIDC performs many of the same tasks as OpenID 2.0, but is API-friendly and usable by native and
 mobile applications.
 
 On the client side, you can use [OmniAuth::OpenIDConnect](https://github.com/jjbohn/omniauth-openid-connect/) for Rails
diff --git a/doc/push_rules/push_rules.md b/doc/push_rules/push_rules.md
index b80d65a62b5..37880f22ffe 100644
--- a/doc/push_rules/push_rules.md
+++ b/doc/push_rules/push_rules.md
@@ -10,16 +10,16 @@ type: reference, howto
 Gain additional control over what can and can't be pushed to your repository by using
 regular expressions to reject pushes based on commit contents, branch names or file details.
 
-## Overview
-
 GitLab already offers [protected branches](../user/project/protected_branches.md), but there are
-cases when you need some specific rules like preventing Git tag removal or
+cases when you need some specific rules. Some common scenarios: preventing Git tag removal, or
 enforcing a special format for commit messages.
 
-Push rules are essentially [pre-receive Git hooks](https://git-scm.com/book/en/v2/Customizing-Git-Git-Hooks) that are easy to
-enable in a user-friendly interface. They are defined globally if you are an
-admin or per project so you can have different rules applied to different
-projects depending on your needs.
+Push rules are [pre-receive Git hooks](https://git-scm.com/book/en/v2/Customizing-Git-Git-Hooks) you
+can enable in a user-friendly interface. They are defined either:
+
+- Globally if you are an administrator.
+- Per project, so you can have different rules applied to different
+  projects depending on your needs.
 
 ## Use cases
 
@@ -32,24 +32,24 @@ Let's assume you have the following requirements for your workflow:
 - every commit should reference a Jira issue, for example: `Refactored css. Fixes JIRA-123.`
 - users should not be able to remove Git tags with `git push`
 
-All you need to do is write a simple regular expression that requires the mention
+Write a regular expression that requires the mention
 of a Jira issue in the commit message, like `JIRA\-\d+`.
 
-Now when a user tries to push a commit with a message `Bugfix`, their push will
-be declined. Only pushing commits with messages like `Bugfix according to JIRA-123`
-will be accepted.
+Now when a user tries to push a commit with a message `Bugfix`, their push is
+declined. Only pushing commits with messages like `Bugfix according to JIRA-123`
+is accepted.
 
 ### Restrict branch names
 
-Let's assume there's a strict policy for branch names in your company, and
-you want the branches to start with a certain name because you have different
-GitLab CI/CD jobs (`feature`, `hotfix`, `docker`, `android`, etc.) that rely on the
+If your company has a strict policy for branch names, you may want the branches to start
+with a certain name. This approach enables different
+GitLab CI/CD jobs (such as `feature`, `hotfix`, `docker`, `android`) that rely on the
 branch name.
 
-Your developers, however, don't always remember that policy, so they might push to
+Your developers may not remember that policy, so they might push to
 various branches, and CI pipelines might not work as expected. By restricting the
 branch names globally in Push Rules, such mistakes are prevented.
-Any branch name that doesn't match your push rule will get rejected.
+Any branch name that doesn't match your push rule is rejected.
 
 Note that the name of your default branch is always allowed, regardless of the branch naming
 regular expression (regex) specified. GitLab is configured this way
@@ -64,7 +64,7 @@ which already limits users from pushing directly.
 > Introduced in GitLab 12.10.
 
 By default, GitLab restricts certain formats of branch names for security purposes.
-Currently 40-character hexadecimal names, similar to Git commit hashes, are prohibited.
+40-character hexadecimal names, similar to Git commit hashes, are prohibited.
 
 ### Custom Push Rules **(FREE SELF)**
 
@@ -77,7 +77,7 @@ See [server hooks](../administration/server_hooks.md) for more information.
 
 NOTE:
 GitLab administrators can set push rules globally under
-**Admin Area > Push Rules** that all new projects will inherit. You can later
+**Admin Area > Push Rules** that all new projects inherit. You can later
 override them in a project's settings. They can be also set on a [group level](../user/group/index.md#group-push-rules).
 
 1. Navigate to your project's **Settings > Repository** and expand **Push Rules**
@@ -88,11 +88,11 @@ The following options are available:
 
 | Push rule                       | Description |
 |---------------------------------|-------------|
-| Removal of tags with `git push` | Forbid users to remove Git tags with `git push`. Tags will still be able to be deleted through the web UI. |
+| Removal of tags with `git push` | Forbid users to remove Git tags with `git push`. Tags can be deleted through the web UI. |
 | Check whether author is a GitLab user | Restrict commits by author (email) to existing GitLab users. |
-| Committer restriction **(PREMIUM)** | GitLab will reject any commit that was not committed by the current authenticated user. |
+| Committer restriction **(PREMIUM)** | GitLab rejects any commit that was not committed by the current authenticated user. |
 | Check whether commit is signed through GPG **(PREMIUM)** | Reject commit when it is not signed through GPG. Read [signing commits with GPG](../user/project/repository/gpg_signed_commits/index.md). |
-| Prevent committing secrets to Git | GitLab will reject any files that are likely to contain secrets. Read [what files are forbidden](#prevent-pushing-secrets-to-the-repository). |
+| Prevent committing secrets to Git | GitLab rejects any files that are likely to contain secrets. Read [what files are forbidden](#prevent-pushing-secrets-to-the-repository). |
 | Restrict by commit message | Only commit messages that match this regular expression are allowed to be pushed. Leave empty to allow any commit message. Uses multiline mode, which can be disabled using `(?-m)`. |
 | Restrict by commit message (negative match) | Only commit messages that do not match this regular expression are allowed to be pushed. Leave empty to allow any commit message. Uses multiline mode, which can be disabled using `(?-m)`. |
 | Restrict by branch name | Only branch names that match this regular expression are allowed to be pushed. Leave empty to allow any branch name. |
@@ -108,8 +108,8 @@ GitLab uses [RE2 syntax](https://github.com/google/re2/wiki/Syntax) for regular
 > [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/385) in [GitLab Starter](https://about.gitlab.com/pricing/) 8.12.
 
 Secrets such as credential files, SSH private keys, and other files containing secrets should never be committed to source control.
-GitLab allows you to turn on a predefined denylist of files which won't be allowed to be
-pushed to a repository, stopping those commits from reaching the remote repository.
+GitLab enables you to turn on a predefined denylist of files which can't be
+pushed to a repository. The list stops those commits from reaching the remote repository.
 
 By selecting the checkbox *Prevent committing secrets to Git*, GitLab prevents
 pushes to the repository when a file matches a regular expression as read from
@@ -117,9 +117,9 @@ pushes to the repository when a file matches a regular expression as read from
 as your GitLab version when viewing this file).
 
 NOTE:
-Files already committed won't get restricted by this push rule.
+Files already committed aren't restricted by this push rule.
 
-Below is an example list of what will be rejected by these regular expressions:
+Below is an example list of what GitLab rejects with these regular expressions:
 
 ```shell
 #####################
@@ -204,13 +204,17 @@ Example: prevent a specific configuration file in a known directory from being p
 ^directory-name\/config\.yml$
 ```
 
-Example: prevent the specific file named `install.exe` from being pushed to any location in the repository. Note that the parenthesized expression `(^|\/)` will match either a file following a directory separator or a file in the root directory of the repository:
+Example: prevent the specific file named `install.exe` from being pushed to any
+location in the repository. The parenthesized expression `(^|\/)` matches either
+a file following a directory separator or a file in the root directory of the repository:
 
 ```plaintext
 (^|\/)install\.exe$
 ```
 
-Example: combining all of the above in a single expression. Note that all of the preceding expressions rely on the end of string character `$`, so we can move that part of each expression to the end of the grouped collection of match conditions where it will be appended to all matches:
+Example: combining all of the above in a single expression. The preceding expressions rely
+on the end-of-string character `$`. We can move that part of each expression to the
+end of the grouped collection of match conditions where it is appended to all matches:
 
 ```plaintext
 (\.exe|^config\.yml|^directory-name\/config\.yml|(^|\/)install\.exe)$
diff --git a/doc/topics/git/troubleshooting_git.md b/doc/topics/git/troubleshooting_git.md
index aace979004f..0724e503923 100644
--- a/doc/topics/git/troubleshooting_git.md
+++ b/doc/topics/git/troubleshooting_git.md
@@ -14,7 +14,7 @@ with Git.
 ## Broken pipe errors on `git push`
 
 'Broken pipe' errors can occur when attempting to push to a remote repository.
-When pushing you will usually see:
+When pushing you usually see:
 
 ```plaintext
 Write failed: Broken pipe
@@ -45,14 +45,13 @@ set to 50MB. The default is 1MB.
 **If pushing over SSH**, first check your SSH configuration as 'Broken pipe'
 errors can sometimes be caused by underlying issues with SSH (such as
 authentication). Make sure that SSH is correctly configured by following the
-instructions in the [SSH troubleshooting](../../ssh/README.md#troubleshooting) docs.
+instructions in the [SSH troubleshooting](../../ssh/README.md#troubleshooting) documentation.
 
-There's another option where you can prevent session timeouts by configuring
-SSH 'keep alive' either on the client or on the server (if you are a GitLab
-admin and have access to the server).
+If you're a GitLab administrator and have access to the server, you can also prevent
+session timeouts by configuring SSH `keep alive` either on the client or on the server.
 
 NOTE:
-Configuring *both* the client and the server is unnecessary.
+Configuring both the client and the server is unnecessary.
 
 **To configure SSH on the client side**:
 
@@ -67,7 +66,7 @@ Configuring *both* the client and the server is unnecessary.
 
 - On Windows, if you are using PuTTY, go to your session properties, then
   navigate to "Connection" and under "Sending of null packets to keep
-  session active", set "Seconds between keepalives (0 to turn off)" to `60`.
+  session active", set `Seconds between keepalives (0 to turn off)` to `60`.
 
 **To configure SSH on the server side**, edit `/etc/ssh/sshd_config` and add:
 
@@ -125,7 +124,7 @@ MaxStartups 100:30:200
 ```
 
 `100:30:200` means up to 100 SSH sessions are allowed without restriction,
-after which 30% of connections will be dropped until reaching an absolute maximum of 200.
+after which 30% of connections are dropped until reaching an absolute maximum of 200.
 
 Once configured, restart the SSH daemon for the change to take effect.
 
@@ -140,7 +139,7 @@ sudo service sshd restart
 ## Timeout during `git push` / `git pull`
 
 If pulling/pushing from/to your repository ends up taking more than 50 seconds,
-a timeout will be issued with a log of the number of operations performed
+a timeout is issued. It contains a log of the number of operations performed
 and their respective timings, like the example below:
 
 ```plaintext
@@ -154,7 +153,7 @@ and provide GitLab with more information on how to improve the service.
 
 ## `git clone` over HTTP fails with `transfer closed with outstanding read data remaining` error
 
-If the buffer size is lower than what is allowed in the request, the action will fail with an error similar to the one below:
+If the buffer size is lower than what is allowed in the request, the action fails with an error similar to the one below:
 
 ```plaintext
 error: RPC failed; curl 18 transfer closed with outstanding read data remaining
@@ -163,7 +162,7 @@ fatal: early EOF
 fatal: index-pack failed
 ```
 
-This can be fixed by increasing the existing `http.postBuffer` value to one greater than the repository size. For example, if `git clone` fails when cloning a 500M repository, the solution will be to set `http.postBuffer` to `524288000` so that the request only starts buffering after the first 524288000 bytes.
+This can be fixed by increasing the existing `http.postBuffer` value to one greater than the repository size. For example, if `git clone` fails when cloning a 500M repository, you should set `http.postBuffer` to `524288000`. That setting ensures the request only starts buffering after the first 524288000 bytes.
 
 NOTE:
 The default value of `http.postBuffer`, 1 MiB, is applied if the setting is not configured.
diff --git a/doc/topics/gitlab_flow.md b/doc/topics/gitlab_flow.md
index dc320192717..97135e421f8 100644
--- a/doc/topics/gitlab_flow.md
+++ b/doc/topics/gitlab_flow.md
@@ -16,7 +16,7 @@ It combines [feature-driven development](https://en.wikipedia.org/wiki/Feature-d
 
 Organizations coming to Git from other version control systems frequently find it hard to develop a productive workflow.
 This article describes GitLab flow, which integrates the Git workflow with an issue tracking system.
-It offers a simple, transparent, and effective way to work with Git.
+It offers a transparent and effective way to work with Git.
 
 ![Four stages (working copy, index, local repository, remote repository) and three steps between them](img/gitlab_flow_four_stages.png)
 
@@ -28,7 +28,7 @@ After getting used to these three steps, the next challenge is the branching mod
 
 ![Multiple long-running branches and merging in all directions](img/gitlab_flow_messy_flow.png)
 
-Since many organizations new to Git have no conventions for how to work with it, their repositories can quickly become messy.
+Because many organizations new to Git have no conventions for how to work with it, their repositories can quickly become messy.
 The biggest problem is that many long-running branches emerge that all contain part of the changes.
 People have a hard time figuring out which branch has the latest code, or which branch to deploy to production.
 Frequently, the reaction to this problem is to adopt a standardized pattern such as [Git flow](https://nvie.com/posts/a-successful-git-branching-model/) and [GitHub flow](http://scottchacon.com/2011/08/31/github-flow.html).
@@ -51,7 +51,7 @@ The development happens on the `develop` branch, moves to a release branch, and
 Git flow is a well-defined standard, but its complexity introduces two problems.
 The first problem is that developers must use the `develop` branch and not `master`. `master` is reserved for code that is released to production.
 It is a convention to call your default branch `master` and to mostly branch from and merge to this.
-Since most tools automatically use the `master` branch as the default, it is annoying to have to switch to another branch.
+Because most tools automatically use the `master` branch as the default, it is annoying to have to switch to another branch.
 
 The second problem of Git flow is the complexity introduced by the hotfix and release branches.
 These branches can be a good idea for some organizations but are overkill for the vast majority of them.
@@ -65,28 +65,32 @@ For example, many projects do releases but don't need to do hotfixes.
 
 ## GitHub flow as a simpler alternative
 
-![Master branch with feature branches merged in](img/gitlab_flow_github_flow.png)
+![Branch with feature branches merged in](img/gitlab_flow_github_flow.png)
 
 In reaction to Git flow, GitHub created a simpler alternative.
 [GitHub flow](https://guides.github.com/introduction/flow/index.html) has only feature branches and a `master` branch.
 This flow is clean and straightforward, and many organizations have adopted it with great success.
 Atlassian recommends [a similar strategy](https://www.atlassian.com/blog/git/simple-git-workflow-is-simple), although they rebase feature branches.
-Merging everything into the `master` branch and frequently deploying means you minimize the amount of unreleased code, which is in line with lean and continuous delivery best practices.
+Merging everything into the `master` branch and frequently deploying means you minimize the amount of unreleased code. This approach is in line with lean and continuous delivery best practices.
 However, this flow still leaves a lot of questions unanswered regarding deployments, environments, releases, and integrations with issues.
 With GitLab flow, we offer additional guidance for these questions.
 
 ## Production branch with GitLab flow
 
-![Master branch and production branch with an arrow that indicates a deployment](img/gitlab_flow_production_branch.png)
+![Branches with an arrow that indicates a deployment](img/gitlab_flow_production_branch.png)
 
 GitHub flow assumes you can deploy to production every time you merge a feature branch.
-While this is possible in some cases, such as SaaS applications, there are many cases where this is not possible.
-One case is where you don't control the timing of a release, for example, an iOS application that is released when it passes App Store validation.
-Another case is when you have deployment windows &mdash; for example, workdays from 10&nbsp;AM to 4&nbsp;PM when the operations team is at full capacity &mdash; but you also merge code at other times.
+While this is possible in some cases, such as SaaS applications, there are some cases where this is not possible, such as:
+
+- You don't control the timing of a release. For example, an iOS application that
+  is released when it passes App Store validation.
+- You have deployment windows - for example, workdays from 10 AM to 4 PM when the
+  operations team is at full capacity - but you also merge code at other times.
+
 In these cases, you can make a production branch that reflects the deployed code.
 You can deploy a new version by merging `master` into the production branch.
-If you need to know what code is in production, you can just checkout the production branch to see.
-The approximate time of deployment is easily visible as the merge commit in the version control system.
+If you need to know what code is in production, you can check out the production branch to see.
+The approximate time of deployment is visible as the merge commit in the version control system.
 This time is pretty accurate if you automatically deploy your production branch.
 If you need a more exact time, you can have your deployment script create a tag on each deployment.
 This flow prevents the overhead of releasing, tagging, and merging that happens with Git flow.
@@ -109,10 +113,10 @@ If this is not possible because more manual testing is required, you can send me
 
 ## Release branches with GitLab flow
 
-![Master and multiple release branches that vary in length with cherry-picks from master](img/gitlab_flow_release_branches.png)
+![Multiple release branches that vary in length with cherry-picks](img/gitlab_flow_release_branches.png)
 
 You only need to work with release branches if you need to release software to the outside world.
-In this case, each branch contains a minor version, for example, 2-3-stable, 2-4-stable, etc.
+In this case, each branch contains a minor version, such as `2-3-stable` or `2-4-stable`.
 Create stable branches using `master` as a starting point, and branch as late as possible.
 By doing this, you minimize the length of time during which you have to apply bug fixes to multiple branches.
 After announcing a release branch, only add serious bug fixes to the branch.
@@ -128,11 +132,11 @@ In this flow, it is not common to have a production branch (or Git flow `master`
 ![Merge request with inline comments](img/gitlab_flow_mr_inline_comments.png)
 
 Merge or pull requests are created in a Git management application. They ask an assigned person to merge two branches.
-Tools such as GitHub and Bitbucket choose the name "pull request" since the first manual action is to pull the feature branch.
-Tools such as GitLab and others choose the name "merge request" since the final action is to merge the feature branch.
-In this article, we'll refer to them as merge requests.
+Tools such as GitHub and Bitbucket choose the name "pull request", because the first manual action is to pull the feature branch.
+Tools such as GitLab and others choose the name "merge request", because the final action is to merge the feature branch.
+This article refers to them as merge requests.
 
-If you work on a feature branch for more than a few hours, it is good to share the intermediate result with the rest of the team.
+If you work on a feature branch for more than a few hours, share the intermediate result with the rest of your team.
 To do this, create a merge request without assigning it to anyone.
 Instead, mention people in the description or a comment, for example, "/cc @mark @susan."
 This indicates that the merge request is not ready to be merged yet, but feedback is welcome.
@@ -147,7 +151,7 @@ Also, mention any other people from whom you would like feedback.
 After the assigned person feels comfortable with the result, they can merge the branch.
 If the assigned person does not feel comfortable, they can request more changes or close the merge request without merging.
 
-In GitLab, it is common to protect the long-lived branches, e.g., the `master` branch, so that [most developers can't modify them](../user/permissions.md).
+In GitLab, it is common to protect the long-lived branches, such as the `master` branch, so [most developers can't modify them](../user/permissions.md).
 So, if you want to merge into a protected branch, assign your merge request to someone with maintainer permissions.
 
 After you merge a feature branch, you should remove it from the source control software.
@@ -169,10 +173,10 @@ GitLab flow is a way to make the relation between the code and the issue tracker
 Any significant change to the code should start with an issue that describes the goal.
 Having a reason for every code change helps to inform the rest of the team and to keep the scope of a feature branch small.
 In GitLab, each change to the codebase starts with an issue in the issue tracking system.
-If there is no issue yet, create the issue, as long as the change will take a significant amount of work, i.e., more than 1 hour.
+If there is no issue yet, create the issue if the change requires more than an hour's work.
 In many organizations, raising an issue is part of the development process because they are used in sprint planning.
 The issue title should describe the desired state of the system.
-For example, the issue title "As an administrator, I want to remove users without receiving an error" is better than "Admin can't remove users."
+For example, the issue title "As an administrator, I want to remove users without receiving an error" is better than "Administrators can't remove users."
 
 When you are ready to code, create a branch for the issue from the `master` branch.
 This branch is the place for any work related to this change.
@@ -189,20 +193,20 @@ Start the title of the merge request with `[Draft]`, `Draft:` or `(Draft)` to pr
 
 When you think the code is ready, assign the merge request to a reviewer.
 The reviewer can merge the changes when they think the code is ready for inclusion in the `master` branch.
-When they press the merge button, GitLab merges the code and creates a merge commit that makes this event easily visible later on.
+When they press the merge button, GitLab merges the code and creates a merge commit that makes this event visible later on.
 Merge requests always create a merge commit, even when the branch could be merged without one.
 This merge strategy is called "no fast-forward" in Git.
-After the merge, delete the feature branch since it is no longer needed.
+After the merge, delete the feature branch, because it is no longer needed.
 In GitLab, this deletion is an option when merging.
 
 Suppose that a branch is merged but a problem occurs and the issue is reopened.
-In this case, it is no problem to reuse the same branch name since the first branch was deleted when it was merged.
+In this case, it is no problem to reuse the same branch name, because the first branch was deleted when it was merged.
 At any time, there is at most one branch for every issue.
 It is possible that one feature branch solves more than one issue.
 
 ## Linking and closing issues from merge requests
 
-![Merge request showing the linked issues that will be closed](img/gitlab_flow_close_issue_mr.png)
+![Merge request showing the linked issues to close](img/gitlab_flow_close_issue_mr.png)
 
 Link to issues by mentioning them in commit messages or the description of a merge request, for example, "Fixes #16" or "Duck typing is preferred. See #12."
 GitLab then creates links to the mentioned issues and creates comments in the issues linking back to the merge request.
@@ -216,12 +220,12 @@ If you have an issue that spans across multiple repositories, create an issue fo
 ![Vim screen showing the rebase view](img/gitlab_flow_rebase.png)
 
 With Git, you can use an interactive rebase (`rebase -i`) to squash multiple commits into one or reorder them.
-This functionality is useful if you want to replace a couple of small commits with a single commit, or if you want to make the order more logical.
+This feature helps you replace a couple of small commits with a single commit, or if you want to make the order more logical.
 
 However, you should avoid rebasing commits you have pushed to a remote server if you have other active contributors in the same branch.
-Since rebasing creates new commits for all your changes, it can cause confusion because the same change would have multiple identifiers.
+Because rebasing creates new commits for all your changes, it can cause confusion because the same change would have multiple identifiers.
 It would cause merge errors for anyone working on the same branch because their history would not match with yours. It can be really troublesome for the author or other contributors.
-Also, if someone has already reviewed your code, rebasing makes it hard to tell what changed since the last review.
+Also, if someone has already reviewed your code, rebasing makes it hard to tell what changed after the last review.
 
 You should never rebase commits authored by other people unless you've agreed otherwise.
 Not only does this rewrite history, but it also loses authorship information.
@@ -229,7 +233,7 @@ Rebasing prevents the other authors from being attributed and sharing part of th
 
 If a merge involves many commits, it may seem more difficult to undo.
 You might consider solving this by squashing all the changes into one commit just before merging by using the GitLab [Squash-and-Merge](../user/project/merge_requests/squash_and_merge.md) feature.
-Fortunately, there is an easy way to undo a merge with all its commits.
+Fortunately, you can undo a merge with all its commits.
 The way to do this is by reverting the merge commit.
 Preserving this ability to revert a merge is a good reason to always use the "no fast-forward" (`--no-ff`) strategy when you merge manually.
 
@@ -247,8 +251,8 @@ Often, people avoid merge commits by just using rebase to reorder their commits
 Using rebase prevents a merge commit when merging `master` into your feature branch, and it creates a neat linear history.
 However, as discussed in [the section about rebasing](#squashing-commits-with-rebase), you should avoid rebasing commits in a feature branch that you're sharing with others.
 
-Rebasing could create more work, since every time you rebase, you may need to resolve the same conflicts.
-Sometimes you can reuse recorded resolutions (`rerere`), but merging is better since you only have to resolve conflicts once.
+Rebasing could create more work, as every time you rebase, you may need to resolve the same conflicts.
+Sometimes you can reuse recorded resolutions (`rerere`), but merging is better, because you only have to resolve conflicts once.
 Atlassian has a more thorough explanation of the tradeoffs between merging and rebasing [on their blog](https://www.atlassian.com/blog/git/git-team-workflows-merge-or-rebase).
 
 A good way to prevent creating many merge commits is to not frequently merge `master` into the feature branch.
@@ -274,8 +278,8 @@ You could also use [feature toggles](https://martinfowler.com/bliki/FeatureToggl
 
 NOTE:
 Don't confuse automatic branch testing with continuous integration.
-Martin Fowler makes this distinction in [his article about feature branches](https://martinfowler.com/bliki/FeatureBranch.html):
-"I've heard people say they are doing CI because they are running builds, perhaps using a CI server, on every branch with every commit.
+Martin Fowler makes this distinction in [an article about feature branches](https://martinfowler.com/bliki/FeatureBranch.html):
+"\[People\] say they are doing CI because they are running builds, perhaps using a CI server, on every branch with every commit.
 That's continuous building, and a Good Thing, but there's no *integration*, so it's not CI."
 
 In conclusion, you should try to prevent merge commits, but not eliminate them.
@@ -289,19 +293,19 @@ If you rebase code, the history is incorrect, and there is no way for tools to r
 Another way to make your development work easier is to commit often.
 Every time you have a working set of tests and code, you should make a commit.
 Splitting up work into individual commits provides context for developers looking at your code later.
-Smaller commits make it clear how a feature was developed, and they make it easy to roll back to a specific good point in time or to revert one code change without reverting several unrelated changes.
+Smaller commits make it clear how a feature was developed. They help you roll back to a specific good point in time, or to revert one code change without reverting several unrelated changes.
 
-Committing often also makes it easy to share your work, which is important so that everyone is aware of what you are working on.
+Committing often also helps you share your work, which is important so that everyone is aware of what you are working on.
 You should push your feature branch frequently, even when it is not yet ready for review.
 By sharing your work in a feature branch or [a merge request](#mergepull-requests-with-gitlab-flow), you prevent your team members from duplicating work.
-Sharing your work before it's complete also allows for discussion and feedback about the changes, which can help improve the code before it gets to review.
+Sharing your work before it's complete also allows for discussion and feedback about the changes. This feedback can help improve the code before it gets to review.
 
 ## How to write a good commit message
 
 ![Good and bad commit message](img/gitlab_flow_good_commit.png)
 
 A commit message should reflect your intention, not just the contents of the commit.
-It is easy to see the changes in a commit, so the commit message should explain why you made those changes.
+You can see the changes in a commit, so the commit message should explain why you made those changes.
 An example of a good commit message is: "Combine templates to reduce duplicate code in the user views."
 The words "change," "improve," "fix," and "refactor" don't add much information to a commit message.
 For example, "Improve XML generation" could be better written as "Properly escape special characters in XML generation."
@@ -315,12 +319,12 @@ In old workflows, the continuous integration (CI) server commonly ran tests on t
 Developers had to ensure their code did not break the `master` branch.
 When using GitLab flow, developers create their branches from this `master` branch, so it is essential that it never breaks.
 Therefore, each merge request must be tested before it is accepted.
-CI software like Travis CI and GitLab CI/CD show the build results right in the merge request itself to make this easy.
+CI software like Travis CI and GitLab CI/CD show the build results right in the merge request itself to simplify the process.
 
 There is one drawback to testing merge requests: the CI server only tests the feature branch itself, not the merged result.
 Ideally, the server could also test the `master` branch after each change.
 However, retesting on every commit to `master` is computationally expensive and means you are more frequently waiting for test results.
-Since feature branches should be short-lived, testing just the branch is an acceptable risk.
+Because feature branches should be short-lived, testing just the branch is an acceptable risk.
 If new commits in `master` cause merge conflicts with the feature branch, merge `master` back into the branch to make the CI server re-run the tests.
 As said before, if you often have feature branches that last for more than a few days, you should make your issues smaller.
 
diff --git a/lib/gitlab/import_export/group/tree_restorer.rb b/lib/gitlab/import_export/group/tree_restorer.rb
index dfe27118d66..925ab6680ba 100644
--- a/lib/gitlab/import_export/group/tree_restorer.rb
+++ b/lib/gitlab/import_export/group/tree_restorer.rb
@@ -6,7 +6,7 @@ module Gitlab
       class TreeRestorer
         include Gitlab::Utils::StrongMemoize
 
-        attr_reader :user, :shared
+        attr_reader :user, :shared, :groups_mapping
 
         def initialize(user:, shared:, group:)
           @user = user
diff --git a/lib/gitlab/import_export/repo_saver.rb b/lib/gitlab/import_export/repo_saver.rb
index 5db99f9b431..0fdd0722b65 100644
--- a/lib/gitlab/import_export/repo_saver.rb
+++ b/lib/gitlab/import_export/repo_saver.rb
@@ -37,7 +37,8 @@ module Gitlab
       end
 
       def bundle_to_disk
-        mkdir_p(shared.export_path)
+        mkdir_p(File.dirname(bundle_full_path))
+
         repository.bundle_to_disk(bundle_full_path)
       rescue => e
         shared.error(e)
diff --git a/lib/gitlab/usage_data_counters/known_events/quickactions.yml b/lib/gitlab/usage_data_counters/known_events/quickactions.yml
new file mode 100644
index 00000000000..bf292047da0
--- /dev/null
+++ b/lib/gitlab/usage_data_counters/known_events/quickactions.yml
@@ -0,0 +1,326 @@
+---
+- name: i_quickactions_approve
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_assign_single
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_assign_multiple
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_assign_self
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_assign_reviewer
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_award
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_board_move
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_child_epic
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_clear_weight
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_clone
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_close
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_confidential
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_copy_metadata_merge_request
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_copy_metadata_issue
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_create_merge_request
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_done
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_draft
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_due
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_duplicate
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_epic
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_estimate
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_iteration
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_label
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_lock
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_merge
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_milestone
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_move
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_parent_epic
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_promote
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_publish
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_reassign
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_reassign_reviewer
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_rebase
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_relabel
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_relate
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_child_epic
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_due_date
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_epic
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_estimate
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_iteration
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_milestone
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_parent_epic
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_time_spent
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_remove_zoom
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_reopen
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_shrug
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_spend_subtract
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_spend_add
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_submit_review
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_subscribe
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_tableflip
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_tag
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_target_branch
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_title
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_todo
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_unassign_specific
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_unassign_all
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_unassign_reviewer
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_unlabel_specific
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_unlabel_all
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_unlock
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_unsubscribe
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_weight
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_wip
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
+- name: i_quickactions_zoom
+  category: quickactions
+  redis_slot: quickactions
+  aggregation: weekly
+  feature_flag: usage_data_track_quickactions
diff --git a/lib/gitlab/usage_data_counters/quick_action_activity_unique_counter.rb b/lib/gitlab/usage_data_counters/quick_action_activity_unique_counter.rb
new file mode 100644
index 00000000000..f757b51f73c
--- /dev/null
+++ b/lib/gitlab/usage_data_counters/quick_action_activity_unique_counter.rb
@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module UsageDataCounters
+    module QuickActionActivityUniqueCounter
+      class << self
+        # Tracks the quick action with name `name`.
+        # `args` is expected to be a single string, will be split internally when necessary.
+        def track_unique_action(name, args:, user:)
+          return unless Feature.enabled?(:usage_data_track_quickactions, default_enabled: :yaml)
+          return unless user
+
+          args ||= ''
+          name = prepare_name(name, args)
+
+          Gitlab::UsageDataCounters::HLLRedisCounter.track_event(:"i_quickactions_#{name}", values: user.id)
+        end
+
+        private
+
+        def prepare_name(name, args)
+          case name
+          when 'assign'
+            event_name_for_assign(args)
+          when 'copy_metadata'
+            event_name_for_copy_metadata(args)
+          when 'remove_reviewer'
+            'unassign_reviewer'
+          when 'request_review', 'reviewer'
+            'assign_reviewer'
+          when 'spend'
+            event_name_for_spend(args)
+          when 'unassign'
+            event_name_for_unassign(args)
+          when 'unlabel', 'remove_label'
+            event_name_for_unlabel(args)
+          else
+            name
+          end
+        end
+
+        def event_name_for_assign(args)
+          args = args.split
+
+          if args.count == 1 && args.first == 'me'
+            'assign_self'
+          elsif args.count == 1
+            'assign_single'
+          else
+            'assign_multiple'
+          end
+        end
+
+        def event_name_for_copy_metadata(args)
+          if args.start_with?('#')
+            'copy_metadata_issue'
+          else
+            'copy_metadata_merge_request'
+          end
+        end
+
+        def event_name_for_spend(args)
+          if args.start_with?('-')
+            'spend_subtract'
+          else
+            'spend_add'
+          end
+        end
+
+        def event_name_for_unassign(args)
+          if args.present?
+            'unassign_specific'
+          else
+            'unassign_all'
+          end
+        end
+
+        def event_name_for_unlabel(args)
+          if args.present?
+            'unlabel_specific'
+          else
+            'unlabel_all'
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/rubocop/cop/migration/add_limit_to_text_columns.rb b/rubocop/cop/migration/add_limit_to_text_columns.rb
index b2e37ad5137..126e4e21f22 100644
--- a/rubocop/cop/migration/add_limit_to_text_columns.rb
+++ b/rubocop/cop/migration/add_limit_to_text_columns.rb
@@ -20,6 +20,10 @@ module RuboCop
           (def :down ...)
         PATTERN
 
+        def_node_matcher :set_text_limit?, <<~PATTERN
+          (send _ :text_limit ...)
+        PATTERN
+
         def_node_matcher :add_text_limit?, <<~PATTERN
           (send _ :add_text_limit ...)
         PATTERN
@@ -111,20 +115,31 @@ module RuboCop
           limit_found = false
 
           node.each_descendant(:send) do |send_node|
-            next unless add_text_limit?(send_node)
-
-            limit_table = send_node.children[2].value
-            limit_attribute = send_node.children[3].value
-
-            if limit_table == table_name && limit_attribute == attribute_name
-              limit_found = true
-              break
+            if set_text_limit?(send_node)
+              limit_found = matching_set_text_limit?(send_node, attribute_name)
+            elsif add_text_limit?(send_node)
+              limit_found = matching_add_text_limit?(send_node, table_name, attribute_name)
             end
+
+            break if limit_found
           end
 
           !limit_found
         end
 
+        def matching_set_text_limit?(send_node, attribute_name)
+          limit_attribute = send_node.children[2].value
+
+          limit_attribute == attribute_name
+        end
+
+        def matching_add_text_limit?(send_node, table_name, attribute_name)
+          limit_table = send_node.children[2].value
+          limit_attribute = send_node.children[3].value
+
+          limit_table == table_name && limit_attribute == attribute_name
+        end
+
         def encrypted_attribute_name?(attribute_name)
           attribute_name.to_s.start_with?('encrypted_')
         end
diff --git a/rubocop/migration_helpers.rb b/rubocop/migration_helpers.rb
index c06d69a4359..dffceb2b2c8 100644
--- a/rubocop/migration_helpers.rb
+++ b/rubocop/migration_helpers.rb
@@ -19,7 +19,7 @@ module RuboCop
     # or through a create/alter table (TABLE_METHODS)
     ADD_COLUMN_METHODS = %i(add_column add_column_with_default change_column_type_concurrently).freeze
 
-    TABLE_METHODS = %i(create_table create_table_if_not_exists change_table).freeze
+    TABLE_METHODS = %i(create_table create_table_if_not_exists change_table create_table_with_constraints).freeze
 
     def high_traffic_tables
       @high_traffic_tables ||= rubocop_migrations_config.dig('Migration/UpdateLargeTable', 'HighTrafficTables')
diff --git a/spec/experiments/application_experiment_spec.rb b/spec/experiments/application_experiment_spec.rb
index ece52d37351..2a908a83f5c 100644
--- a/spec/experiments/application_experiment_spec.rb
+++ b/spec/experiments/application_experiment_spec.rb
@@ -5,6 +5,12 @@ require 'spec_helper'
 RSpec.describe ApplicationExperiment do
   subject { described_class.new(:stub) }
 
+  it "naively assumes a 1x1 relationship to feature flags for tests" do
+    expect(Feature).to receive(:persist_used!).with('stub')
+
+    described_class.new(:stub)
+  end
+
   describe "publishing results" do
     it "tracks the assignment" do
       expect(subject).to receive(:track).with(:assignment)
diff --git a/spec/frontend/api_spec.js b/spec/frontend/api_spec.js
index 76d67195499..6bfc4a7b7c8 100644
--- a/spec/frontend/api_spec.js
+++ b/spec/frontend/api_spec.js
@@ -260,6 +260,28 @@ describe('Api', () => {
     });
   });
 
+  describe('groupLabels', () => {
+    it('fetches group labels', (done) => {
+      const options = { params: { search: 'foo' } };
+      const expectedGroup = 'gitlab-org';
+      const expectedUrl = `${dummyUrlRoot}/groups/${expectedGroup}/-/labels`;
+      mock.onGet(expectedUrl).reply(httpStatus.OK, [
+        {
+          id: 1,
+          title: 'Foo Label',
+        },
+      ]);
+
+      Api.groupLabels(expectedGroup, options)
+        .then((res) => {
+          expect(res.length).toBe(1);
+          expect(res[0].title).toBe('Foo Label');
+        })
+        .then(done)
+        .catch(done.fail);
+    });
+  });
+
   describe('namespaces', () => {
     it('fetches namespaces', (done) => {
       const query = 'dummy query';
diff --git a/spec/frontend/issuable_list/components/issuable_item_spec.js b/spec/frontend/issuable_list/components/issuable_item_spec.js
index 3c01bf2d319..65e52d05084 100644
--- a/spec/frontend/issuable_list/components/issuable_item_spec.js
+++ b/spec/frontend/issuable_list/components/issuable_item_spec.js
@@ -257,6 +257,23 @@ describe('IssuableItem', () => {
       );
     });
 
+    it('renders issuable confidential icon when issuable is confidential', async () => {
+      wrapper.setProps({
+        issuable: {
+          ...mockIssuable,
+          confidential: true,
+        },
+      });
+
+      await wrapper.vm.$nextTick();
+
+      const confidentialEl = wrapper.find('[data-testid="issuable-title"]').find(GlIcon);
+
+      expect(confidentialEl.exists()).toBe(true);
+      expect(confidentialEl.props('name')).toBe('eye-slash');
+      expect(confidentialEl.attributes('title')).toBe('Confidential');
+    });
+
     it('renders issuable reference', () => {
       const referenceEl = wrapper.find('[data-testid="issuable-reference"]');
 
diff --git a/spec/frontend/notes/components/comment_form_spec.js b/spec/frontend/notes/components/comment_form_spec.js
index 002c4f206cb..8394d1d0ab2 100644
--- a/spec/frontend/notes/components/comment_form_spec.js
+++ b/spec/frontend/notes/components/comment_form_spec.js
@@ -9,7 +9,6 @@ import CommentForm from '~/notes/components/comment_form.vue';
 import * as constants from '~/notes/constants';
 import eventHub from '~/notes/event_hub';
 import { refreshUserMergeRequestCounts } from '~/commons/nav/user_merge_requests';
-import UserAvatarLink from '~/vue_shared/components/user_avatar/user_avatar_link.vue';
 import { loggedOutnoteableData, notesDataMock, userDataMock, noteableDataMock } from '../mock_data';
 
 jest.mock('autosize');
@@ -64,14 +63,6 @@ describe('issue_comment_form component', () => {
   });
 
   describe('user is logged in', () => {
-    describe('avatar', () => {
-      it('should render user avatar with link', () => {
-        mountComponent({ mountFunction: mount });
-
-        expect(wrapper.find(UserAvatarLink).attributes('href')).toBe(userDataMock.path);
-      });
-    });
-
     describe('handleSave', () => {
       it('should request to save note when note is entered', () => {
         mountComponent({ mountFunction: mount, initialData: { note: 'hello world' } });
diff --git a/spec/frontend/vue_mr_widget/components/states/mr_widget_pipeline_blocked_spec.js b/spec/frontend/vue_mr_widget/components/states/mr_widget_pipeline_blocked_spec.js
index 8847e4e6bdd..bd77a1d657e 100644
--- a/spec/frontend/vue_mr_widget/components/states/mr_widget_pipeline_blocked_spec.js
+++ b/spec/frontend/vue_mr_widget/components/states/mr_widget_pipeline_blocked_spec.js
@@ -1,25 +1,27 @@
-import Vue from 'vue';
-import mountComponent from 'helpers/vue_mount_component_helper';
-import { removeBreakLine } from 'helpers/text_helper';
-import pipelineBlockedComponent from '~/vue_merge_request_widget/components/states/mr_widget_pipeline_blocked.vue';
+import { shallowMount, mount } from '@vue/test-utils';
+import PipelineBlockedComponent from '~/vue_merge_request_widget/components/states/mr_widget_pipeline_blocked.vue';
 
 describe('MRWidgetPipelineBlocked', () => {
-  let vm;
-  beforeEach(() => {
-    const Component = Vue.extend(pipelineBlockedComponent);
-    vm = mountComponent(Component);
-  });
+  let wrapper;
+
+  const createWrapper = (mountFn = shallowMount) => {
+    wrapper = mountFn(PipelineBlockedComponent);
+  };
 
   afterEach(() => {
-    vm.$destroy();
+    wrapper.destroy();
   });
 
   it('renders warning icon', () => {
-    expect(vm.$el.querySelector('.ci-status-icon-warning')).not.toBe(null);
+    createWrapper(mount);
+
+    expect(wrapper.find('.ci-status-icon-warning').exists()).toBe(true);
   });
 
   it('renders information text', () => {
-    expect(removeBreakLine(vm.$el.textContent).trim()).toContain(
+    createWrapper();
+
+    expect(wrapper.text()).toBe(
       'Pipeline blocked. The pipeline for this merge request requires a manual action to proceed',
     );
   });
diff --git a/spec/lib/gitlab/import_export/group/tree_restorer_spec.rb b/spec/lib/gitlab/import_export/group/tree_restorer_spec.rb
index 2794acb8980..d2153221e8f 100644
--- a/spec/lib/gitlab/import_export/group/tree_restorer_spec.rb
+++ b/spec/lib/gitlab/import_export/group/tree_restorer_spec.rb
@@ -21,6 +21,7 @@ RSpec.describe Gitlab::ImportExport::Group::TreeRestorer do
         group_tree_restorer = described_class.new(user: user, shared: @shared, group: @group)
 
         expect(group_tree_restorer.restore).to be_truthy
+        expect(group_tree_restorer.groups_mapping).not_to be_empty
       end
     end
 
diff --git a/spec/lib/gitlab/import_export/repo_saver_spec.rb b/spec/lib/gitlab/import_export/repo_saver_spec.rb
index 3887ee7294e..52001e778d6 100644
--- a/spec/lib/gitlab/import_export/repo_saver_spec.rb
+++ b/spec/lib/gitlab/import_export/repo_saver_spec.rb
@@ -25,6 +25,14 @@ RSpec.describe Gitlab::ImportExport::RepoSaver do
       expect(bundler.save).to be true
     end
 
+    it 'creates the directory for the repository' do
+      allow(bundler).to receive(:bundle_full_path).and_return('/foo/bar/file.tar.gz')
+
+      expect(FileUtils).to receive(:mkdir_p).with('/foo/bar', anything)
+
+      bundler.save # rubocop:disable Rails/SaveBang
+    end
+
     context 'when the repo is empty' do
       let!(:project) { create(:project) }
 
diff --git a/spec/lib/gitlab/usage_data_counters/hll_redis_counter_spec.rb b/spec/lib/gitlab/usage_data_counters/hll_redis_counter_spec.rb
index b8eddc0ca7f..59c601f54de 100644
--- a/spec/lib/gitlab/usage_data_counters/hll_redis_counter_spec.rb
+++ b/spec/lib/gitlab/usage_data_counters/hll_redis_counter_spec.rb
@@ -39,7 +39,8 @@ RSpec.describe Gitlab::UsageDataCounters::HLLRedisCounter, :clean_gitlab_redis_s
         'snippets',
         'code_review',
         'terraform',
-        'ci_templates'
+        'ci_templates',
+        'quickactions'
       )
     end
   end
diff --git a/spec/lib/gitlab/usage_data_counters/quick_action_activity_unique_counter_spec.rb b/spec/lib/gitlab/usage_data_counters/quick_action_activity_unique_counter_spec.rb
new file mode 100644
index 00000000000..d4c423f57fe
--- /dev/null
+++ b/spec/lib/gitlab/usage_data_counters/quick_action_activity_unique_counter_spec.rb
@@ -0,0 +1,163 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::UsageDataCounters::QuickActionActivityUniqueCounter, :clean_gitlab_redis_shared_state do
+  let(:user) { build(:user, id: 1) }
+  let(:note) { build(:note, author: user) }
+  let(:args) { nil }
+
+  shared_examples_for 'a tracked quick action unique event' do
+    specify do
+      expect { 3.times { subject } }
+        .to change {
+          Gitlab::UsageDataCounters::HLLRedisCounter.unique_events(
+            event_names: action,
+            start_date: 2.weeks.ago,
+            end_date: 2.weeks.from_now
+          )
+        }
+        .by(1)
+    end
+  end
+
+  subject { described_class.track_unique_action(quickaction_name, args: args, user: user) }
+
+  describe '.track_unique_action' do
+    let(:quickaction_name) { 'approve' }
+
+    it_behaves_like 'a tracked quick action unique event' do
+      let(:action) { 'i_quickactions_approve' }
+    end
+  end
+
+  context 'tracking assigns' do
+    let(:quickaction_name) { 'assign' }
+
+    context 'single assignee' do
+      let(:args) { '@one' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_assign_single' }
+      end
+    end
+
+    context 'multiple assignees' do
+      let(:args) { '@one @two' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_assign_multiple' }
+      end
+    end
+
+    context 'assigning "me"' do
+      let(:args) { 'me' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_assign_self' }
+      end
+    end
+
+    context 'assigning a reviewer' do
+      let(:quickaction_name) { 'assign_reviewer' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_assign_reviewer' }
+      end
+    end
+
+    context 'assigning a reviewer with request review alias' do
+      let(:quickaction_name) { 'request_review' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_assign_reviewer' }
+      end
+    end
+  end
+
+  context 'tracking copy_metadata' do
+    let(:quickaction_name) { 'copy_metadata' }
+
+    context 'for issues' do
+      let(:args) { '#123' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_copy_metadata_issue' }
+      end
+    end
+
+    context 'for merge requests' do
+      let(:args) { '!123' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_copy_metadata_merge_request' }
+      end
+    end
+  end
+
+  context 'tracking spend' do
+    let(:quickaction_name) { 'spend' }
+
+    context 'adding time' do
+      let(:args) { '1d' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_spend_add' }
+      end
+    end
+
+    context 'removing time' do
+      let(:args) { '-1d' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_spend_subtract' }
+      end
+    end
+  end
+
+  context 'tracking unassign' do
+    let(:quickaction_name) { 'unassign' }
+
+    context 'unassigning everyone' do
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_unassign_all' }
+      end
+    end
+
+    context 'unassigning specific users' do
+      let(:args) { '@hello' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_unassign_specific' }
+      end
+    end
+  end
+
+  context 'tracking unlabel' do
+    context 'called as unlabel' do
+      let(:quickaction_name) { 'unlabel' }
+
+      context 'removing all labels' do
+        it_behaves_like 'a tracked quick action unique event' do
+          let(:action) { 'i_quickactions_unlabel_all' }
+        end
+      end
+
+      context 'removing specific labels' do
+        let(:args) { '~wow' }
+
+        it_behaves_like 'a tracked quick action unique event' do
+          let(:action) { 'i_quickactions_unlabel_specific' }
+        end
+      end
+    end
+
+    context 'called as remove_label' do
+      let(:quickaction_name) { 'remove_label' }
+
+      it_behaves_like 'a tracked quick action unique event' do
+        let(:action) { 'i_quickactions_unlabel_all' }
+      end
+    end
+  end
+end
diff --git a/spec/lib/gitlab/utils/markdown_spec.rb b/spec/lib/gitlab/utils/markdown_spec.rb
index 23cd770d168..acc5bd47c8c 100644
--- a/spec/lib/gitlab/utils/markdown_spec.rb
+++ b/spec/lib/gitlab/utils/markdown_spec.rb
@@ -53,33 +53,23 @@ RSpec.describe Gitlab::Utils::Markdown do
     end
 
     context 'when string has a product suffix' do
-      let(:string) { 'My Header (ULTIMATE)' }
+      %w[CORE STARTER PREMIUM ULTIMATE FREE BRONZE SILVER GOLD].each do |tier|
+        ['', ' ONLY', ' SELF', ' SASS'].each do |modifier|
+          context "#{tier}#{modifier}" do
+            let(:string) { "My Header (#{tier}#{modifier})" }
 
-      it 'ignores a product suffix' do
-        is_expected.to eq 'my-header'
-      end
+            it 'ignores a product suffix' do
+              is_expected.to eq 'my-header'
+            end
 
-      context 'with self modifier' do
-        let(:string) { 'My Header (PREMIUM SELF)' }
+            context 'with "*" around a product suffix' do
+              let(:string) { "My Header **(#{tier}#{modifier})**" }
 
-        it 'ignores a product suffix' do
-          is_expected.to eq 'my-header'
-        end
-      end
-
-      context 'with "*" around a product suffix' do
-        let(:string) { 'My Header **(PREMIUM)**' }
-
-        it 'ignores a product suffix' do
-          is_expected.to eq 'my-header'
-        end
-      end
-
-      context 'with "*" around a product suffix and sass modifier' do
-        let(:string) { 'My Header **(PREMIUM SASS)**' }
-
-        it 'ignores a product suffix' do
-          is_expected.to eq 'my-header'
+              it 'ignores a product suffix' do
+                is_expected.to eq 'my-header'
+              end
+            end
+          end
         end
       end
     end
diff --git a/spec/rubocop/cop/migration/add_limit_to_text_columns_spec.rb b/spec/rubocop/cop/migration/add_limit_to_text_columns_spec.rb
index 97b9d0d1ee2..149fb0a48eb 100644
--- a/spec/rubocop/cop/migration/add_limit_to_text_columns_spec.rb
+++ b/spec/rubocop/cop/migration/add_limit_to_text_columns_spec.rb
@@ -28,6 +28,15 @@ RSpec.describe RuboCop::Cop::Migration::AddLimitToTextColumns do
                   ^^^^ #{described_class::MSG}
               end
 
+              create_table_with_constraints :test_text_limits_create do |t|
+                t.integer :test_id, null: false
+                t.text :title
+                t.text :description
+                  ^^^^ #{described_class::MSG}
+
+                t.text_limit :title, 100
+              end
+
               add_column :test_text_limits, :email, :text
               ^^^^^^^^^^ #{described_class::MSG}
 
@@ -57,6 +66,15 @@ RSpec.describe RuboCop::Cop::Migration::AddLimitToTextColumns do
                 t.text :name
               end
 
+              create_table_with_constraints :test_text_limits_create do |t|
+                t.integer :test_id, null: false
+                t.text :title
+                t.text :description
+
+                t.text_limit :title, 100
+                t.text_limit :description, 255
+              end
+
               add_column :test_text_limits, :email, :text
               add_column_with_default :test_text_limits, :role, :text, default: 'default'
               change_column_type_concurrently :test_text_limits, :test_id, :text
diff --git a/spec/services/groups/import_export/export_service_spec.rb b/spec/services/groups/import_export/export_service_spec.rb
index 6b78822de04..d6ce40f413b 100644
--- a/spec/services/groups/import_export/export_service_spec.rb
+++ b/spec/services/groups/import_export/export_service_spec.rb
@@ -71,6 +71,16 @@ RSpec.describe Groups::ImportExport::ExportService do
       service.execute
     end
 
+    it 'compresses and removes tmp files' do
+      expect(group.import_export_upload).to be_nil
+      expect(Gitlab::ImportExport::Saver).to receive(:new).and_call_original
+
+      service.execute
+
+      expect(Dir.exist?(shared.archive_path)).to eq false
+      expect(File.exist?(group.import_export_upload.export_file.path)).to eq true
+    end
+
     it 'notifies the user' do
       expect_next_instance_of(NotificationService) do |instance|
         expect(instance).to receive(:group_was_exported)
diff --git a/spec/services/quick_actions/interpret_service_spec.rb b/spec/services/quick_actions/interpret_service_spec.rb
index e668bace116..c0452e18f52 100644
--- a/spec/services/quick_actions/interpret_service_spec.rb
+++ b/spec/services/quick_actions/interpret_service_spec.rb
@@ -1793,6 +1793,24 @@ RSpec.describe QuickActions::InterpretService do
       expect(text).to eq(" - list\n\ntest")
     end
 
+    it 'tracks MAU for commands' do
+      content = "/shrug test\n/assign me\n/milestone %4"
+
+      expect(Gitlab::UsageDataCounters::QuickActionActivityUniqueCounter)
+        .to receive(:track_unique_action)
+        .with('shrug', args: 'test', user: developer)
+
+      expect(Gitlab::UsageDataCounters::QuickActionActivityUniqueCounter)
+        .to receive(:track_unique_action)
+        .with('assign', args: 'me', user: developer)
+
+      expect(Gitlab::UsageDataCounters::QuickActionActivityUniqueCounter)
+        .to receive(:track_unique_action)
+        .with('milestone', args: '%4', user: developer)
+
+      service.execute(content, issue)
+    end
+
     context '/create_merge_request command' do
       let(:branch_name) { '1-feature' }
       let(:content) { "/create_merge_request #{branch_name}" }
diff --git a/spec/support/gitlab_experiment.rb b/spec/support/gitlab_experiment.rb
index 1f283e4f06c..45f733201e2 100644
--- a/spec/support/gitlab_experiment.rb
+++ b/spec/support/gitlab_experiment.rb
@@ -1,4 +1,13 @@
 # frozen_string_literal: true
 
+# This is a temporary fix until we have a larger discussion around the
+# challenges raised in https://gitlab.com/gitlab-org/gitlab/-/issues/300104
+class ApplicationExperiment < Gitlab::Experiment # rubocop:disable Gitlab/NamespacedClass
+  def initialize(*args)
+    super
+    Feature.persist_used!(name)
+  end
+end
+
 # Disable all caching for experiments in tests.
 Gitlab::Experiment::Configuration.cache = nil