From ea1dcaef18edf97b3ac73892d64ebaf5eecd7f68 Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Wed, 31 Mar 2021 12:08:55 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .rubocop_manual_todo.yml                      |  20 ---
 GITALY_SERVER_VERSION                         |   2 +-
 .../javascripts/clusters/forms/show/index.js  |   2 +-
 .../javascripts/diffs/components/diff_row.vue |   9 +-
 .../javascripts/diffs/store/mutations.js      |   7 +-
 .../compare/components/revision_dropdown.vue  |  59 +++++---
 .../markdown/suggestion_diff_header.vue       |   9 +-
 .../concerns/runner_setup_scripts.rb          |   4 +-
 .../groups/settings/ci_cd_controller.rb       |   2 +-
 .../projects/merge_requests_controller.rb     |   1 -
 .../projects/settings/ci_cd_controller.rb     |   2 +-
 .../resolvers/ci/runner_setup_resolver.rb     |   6 +-
 .../project_services/jenkins_service.rb       |   1 -
 .../_gitlab_integration_form.html.haml        |   4 +-
 ...ption-or-any-custom-merge-commit-messa.yml |   5 +
 ...-remove-batch_suggestions-feature-flag.yml |   5 +
 .../324612-tag-not-visible-compare-page.yml   |   5 +
 ...102-deprecate-runner-install-arguments.yml |   5 +
 ...40-fix-rails-savebang-presenter-module.yml |   5 +
 .../rails-save-bang-auth-controllers.yml      |   5 +
 .../rails-save-bang-spec-features.yml         |   5 +
 .../development/batch_suggestions.yml         |   8 --
 .../sentry_processors_before_send.yml         |   8 ++
 doc/api/graphql/reference/index.md            |   4 +-
 .../site_architecture/release_process.md      |  73 ++++++----
 doc/development/i18n/externalization.md       |   2 +-
 doc/development/usage_ping/dictionary.md      |  48 +++++++
 doc/user/discussions/index.md                 |  29 +---
 doc/user/project/integrations/github.md       |  45 +++---
 .../integrations/img/github_configuration.png | Bin 12258 -> 0 bytes
 lib/api/entities/project.rb                   |   2 +-
 lib/api/internal/kubernetes.rb                |   4 +-
 lib/gitlab/ci/runner_instructions.rb          |  31 +---
 lib/gitlab/error_tracking.rb                  |  10 +-
 .../processor/context_payload_processor.rb    |  12 ++
 .../processor/grpc_error_processor.rb         | 136 +++++++++++++-----
 .../processor/sidekiq_processor.rb            |  71 ++++++---
 .../known_events/epic_events.yml              |  18 +++
 locale/gitlab.pot                             |  27 +++-
 scripts/review_apps/base-config.yaml          |   6 +-
 .../oauth/authorizations_controller_spec.rb   |   4 +-
 .../omniauth_callbacks_controller_spec.rb     |   8 +-
 spec/features/calendar_spec.rb                |   2 +-
 .../clusters/cluster_detail_page_spec.rb      |   6 +-
 spec/features/commits_spec.rb                 |   2 +-
 .../user_sees_error_index_spec.rb             |   2 +-
 spec/features/groups/clusters/user_spec.rb    |   2 +-
 .../groups/members/request_access_spec.rb     |   2 +-
 spec/features/profiles/emails_spec.rb         |   8 +-
 spec/features/profiles/password_spec.rb       |   2 +-
 .../profiles/personal_access_tokens_spec.rb   |   2 +-
 spec/features/projects/clusters/gcp_spec.rb   |   2 +-
 spec/features/projects/clusters/user_spec.rb  |   2 +-
 spec/features/projects/clusters_spec.rb       |   4 +-
 spec/features/runners_spec.rb                 |   6 +-
 .../security/project/internal_access_spec.rb  |  12 +-
 .../security/project/private_access_spec.rb   |  14 +-
 .../security/project/public_access_spec.rb    |  12 +-
 spec/features/users/login_spec.rb             |   2 +-
 spec/features/users/show_spec.rb              |   6 +-
 .../components/revision_dropdown_spec.js      |  41 +++++-
 .../markdown/suggestion_diff_header_spec.js   |  20 +--
 .../ci/runner_setup_resolver_spec.rb          |  77 +---------
 .../lib/gitlab/ci/runner_instructions_spec.rb | 116 ++-------------
 .../context_payload_processor_spec.rb         |  87 ++++++-----
 .../processor/grpc_error_processor_spec.rb    |  90 ++++++------
 .../processor/sidekiq_processor_spec.rb       |  96 ++++++++-----
 spec/lib/gitlab/error_tracking_spec.rb        | 110 +++++++++++---
 .../ci/build_runner_presenter_spec.rb         |   4 +-
 spec/presenters/ci/trigger_presenter_spec.rb  |   2 +-
 .../packages/conan/package_presenter_spec.rb  |   2 +-
 spec/requests/api/internal/kubernetes_spec.rb |   8 +-
 workhorse/config_test.go                      |   2 +-
 workhorse/main.go                             |   2 +-
 74 files changed, 809 insertions(+), 645 deletions(-)
 create mode 100644 changelogs/unreleased/232957-include-merge-request-description-or-any-custom-merge-commit-messa.yml
 create mode 100644 changelogs/unreleased/320755-remove-batch_suggestions-feature-flag.yml
 create mode 100644 changelogs/unreleased/324612-tag-not-visible-compare-page.yml
 create mode 100644 changelogs/unreleased/326102-deprecate-runner-install-arguments.yml
 create mode 100644 changelogs/unreleased/issue-220040-fix-rails-savebang-presenter-module.yml
 create mode 100644 changelogs/unreleased/rails-save-bang-auth-controllers.yml
 create mode 100644 changelogs/unreleased/rails-save-bang-spec-features.yml
 delete mode 100644 config/feature_flags/development/batch_suggestions.yml
 create mode 100644 config/feature_flags/development/sentry_processors_before_send.yml
 delete mode 100644 doc/user/project/integrations/img/github_configuration.png

diff --git a/.rubocop_manual_todo.yml b/.rubocop_manual_todo.yml
index 173bbafdf41..92dd20f484c 100644
--- a/.rubocop_manual_todo.yml
+++ b/.rubocop_manual_todo.yml
@@ -182,8 +182,6 @@ Rails/SaveBang:
     - 'spec/controllers/groups/runners_controller_spec.rb'
     - 'spec/controllers/groups/uploads_controller_spec.rb'
     - 'spec/controllers/groups_controller_spec.rb'
-    - 'spec/controllers/oauth/authorizations_controller_spec.rb'
-    - 'spec/controllers/omniauth_callbacks_controller_spec.rb'
     - 'spec/controllers/profiles/emails_controller_spec.rb'
     - 'spec/controllers/profiles/notifications_controller_spec.rb'
     - 'spec/controllers/projects_controller_spec.rb'
@@ -197,16 +195,10 @@ Rails/SaveBang:
     - 'spec/features/admin/admin_sees_project_statistics_spec.rb'
     - 'spec/features/admin/admin_sees_projects_statistics_spec.rb'
     - 'spec/features/admin/admin_users_impersonation_tokens_spec.rb'
-    - 'spec/features/boards/sidebar_spec.rb'
-    - 'spec/features/calendar_spec.rb'
-    - 'spec/features/commits_spec.rb'
     - 'spec/features/dashboard/datetime_on_tooltips_spec.rb'
     - 'spec/features/dashboard/issuables_counter_spec.rb'
     - 'spec/features/dashboard/project_member_activity_index_spec.rb'
     - 'spec/features/dashboard/projects_spec.rb'
-    - 'spec/features/error_tracking/user_sees_error_index_spec.rb'
-    - 'spec/features/groups/members/request_access_spec.rb'
-    - 'spec/features/issuables/close_reopen_report_toggle_spec.rb'
     - 'spec/features/issues/bulk_assignment_labels_spec.rb'
     - 'spec/features/issues/gfm_autocomplete_spec.rb'
     - 'spec/features/issues/issue_sidebar_spec.rb'
@@ -217,9 +209,6 @@ Rails/SaveBang:
     - 'spec/features/issues/user_filters_issues_spec.rb'
     - 'spec/features/issues/user_sees_live_update_spec.rb'
     - 'spec/features/issues/user_sorts_issues_spec.rb'
-    - 'spec/features/profiles/emails_spec.rb'
-    - 'spec/features/profiles/password_spec.rb'
-    - 'spec/features/profiles/personal_access_tokens_spec.rb'
     - 'spec/features/projects/features_visibility_spec.rb'
     - 'spec/features/projects/fork_spec.rb'
     - 'spec/features/projects/jobs_spec.rb'
@@ -236,12 +225,6 @@ Rails/SaveBang:
     - 'spec/features/projects/wiki/user_updates_wiki_page_spec.rb'
     - 'spec/features/projects/wiki/user_views_wiki_page_spec.rb'
     - 'spec/features/projects/wiki/users_views_asciidoc_page_with_includes_spec.rb'
-    - 'spec/features/runners_spec.rb'
-    - 'spec/features/security/project/internal_access_spec.rb'
-    - 'spec/features/security/project/private_access_spec.rb'
-    - 'spec/features/security/project/public_access_spec.rb'
-    - 'spec/features/users/login_spec.rb'
-    - 'spec/features/users/show_spec.rb'
     - 'spec/frontend/fixtures/issues.rb'
     - 'spec/frontend/fixtures/merge_requests.rb'
     - 'spec/graphql/mutations/merge_requests/set_locked_spec.rb'
@@ -369,9 +352,6 @@ Rails/SaveBang:
     - 'spec/models/user_status_spec.rb'
     - 'spec/models/wiki_page/meta_spec.rb'
     - 'spec/models/wiki_page_spec.rb'
-    - 'spec/presenters/ci/build_runner_presenter_spec.rb'
-    - 'spec/presenters/ci/trigger_presenter_spec.rb'
-    - 'spec/presenters/packages/conan/package_presenter_spec.rb'
     - 'spec/requests/api/ci/runner_spec.rb'
     - 'spec/requests/api/commit_statuses_spec.rb'
     - 'spec/requests/api/conan_packages_spec.rb'
diff --git a/GITALY_SERVER_VERSION b/GITALY_SERVER_VERSION
index 1ac9f38e3db..10800cff591 100644
--- a/GITALY_SERVER_VERSION
+++ b/GITALY_SERVER_VERSION
@@ -1 +1 @@
-79003389aa5098a6ef37e73298cafbad4d9e6b79
+67a362bf7aaab3aae021d19fda728c24b7723d7a
diff --git a/app/assets/javascripts/clusters/forms/show/index.js b/app/assets/javascripts/clusters/forms/show/index.js
index 47a3016c777..3cb4376f41a 100644
--- a/app/assets/javascripts/clusters/forms/show/index.js
+++ b/app/assets/javascripts/clusters/forms/show/index.js
@@ -3,7 +3,7 @@ import IntegrationForm from '../components/integration_form.vue';
 import { createStore } from '../stores';
 
 export default () => {
-  const entryPoint = document.querySelector('#js-cluster-integration-form');
+  const entryPoint = document.querySelector('#js-cluster-details-form');
 
   if (!entryPoint) {
     return;
diff --git a/app/assets/javascripts/diffs/components/diff_row.vue b/app/assets/javascripts/diffs/components/diff_row.vue
index f8da3ad14ec..9f0f7d46804 100644
--- a/app/assets/javascripts/diffs/components/diff_row.vue
+++ b/app/assets/javascripts/diffs/components/diff_row.vue
@@ -1,5 +1,6 @@
 <script>
-import { GlTooltipDirective, GlSafeHtmlDirective as SafeHtml } from '@gitlab/ui';
+/* eslint-disable vue/no-v-html */
+import { GlTooltipDirective } from '@gitlab/ui';
 import { mapActions, mapGetters, mapState } from 'vuex';
 import { BV_HIDE_TOOLTIP } from '~/lib/utils/constants';
 import glFeatureFlagsMixin from '~/vue_shared/mixins/gl_feature_flags_mixin';
@@ -21,7 +22,6 @@ export default {
   },
   directives: {
     GlTooltip: GlTooltipDirective,
-    SafeHtml,
   },
   mixins: [glFeatureFlagsMixin()],
   props: {
@@ -256,7 +256,7 @@ export default {
           @mousedown="handleParallelLineMouseDown"
         >
           <strong v-if="isLeftConflictMarker">{{ conflictText(line.left) }}</strong>
-          <span v-else v-safe-html="line.left.rich_text"></span>
+          <span v-else v-html="line.left.rich_text"></span>
         </div>
       </template>
       <template v-else-if="!inline || (line.left && line.left.type === $options.CONFLICT_MARKER)">
@@ -345,7 +345,6 @@ export default {
         <div
           :id="line.right.line_code"
           :key="line.right.rich_text"
-          v-safe-html="line.right.rich_text"
           :class="[
             line.right.type,
             {
@@ -360,7 +359,7 @@ export default {
           <strong v-if="line.right.type === $options.CONFLICT_MARKER_THEIR">{{
             conflictText(line.right)
           }}</strong>
-          <span v-else v-safe-html="line.right.rich_text"></span>
+          <span v-else v-html="line.right.rich_text"></span>
         </div>
       </template>
       <template v-else>
diff --git a/app/assets/javascripts/diffs/store/mutations.js b/app/assets/javascripts/diffs/store/mutations.js
index d06793c05af..a93cacc49d8 100644
--- a/app/assets/javascripts/diffs/store/mutations.js
+++ b/app/assets/javascripts/diffs/store/mutations.js
@@ -77,15 +77,10 @@ export default {
   },
 
   [types.SET_DIFF_DATA_BATCH](state, data) {
-    const files = prepareDiffData({
+    state.diffFiles = prepareDiffData({
       diff: data,
       priorFiles: state.diffFiles,
     });
-
-    Object.assign(state, {
-      ...convertObjectPropsToCamelCase(data),
-    });
-    updateDiffFilesInState(state, files);
   },
 
   [types.SET_COVERAGE_DATA](state, coverageFiles) {
diff --git a/app/assets/javascripts/projects/compare/components/revision_dropdown.vue b/app/assets/javascripts/projects/compare/components/revision_dropdown.vue
index a175af2f32e..d0b69344c12 100644
--- a/app/assets/javascripts/projects/compare/components/revision_dropdown.vue
+++ b/app/assets/javascripts/projects/compare/components/revision_dropdown.vue
@@ -1,10 +1,12 @@
 <script>
 import { GlDropdown, GlDropdownItem, GlSearchBoxByType, GlDropdownSectionHeader } from '@gitlab/ui';
+import { debounce } from 'lodash';
 import createFlash from '~/flash';
 import axios from '~/lib/utils/axios_utils';
 import { s__ } from '~/locale';
 
-const emptyDropdownText = s__('CompareRevisions|Select branch/tag');
+const EMPTY_DROPDOWN_TEXT = s__('CompareRevisions|Select branch/tag');
+const SEARCH_DEBOUNCE_MS = 300;
 
 export default {
   components: {
@@ -38,19 +40,11 @@ export default {
     };
   },
   computed: {
-    filteredBranches() {
-      return this.branches.filter((branch) =>
-        branch.toLowerCase().includes(this.searchTerm.toLowerCase()),
-      );
+    hasBranches() {
+      return Boolean(this.branches?.length);
     },
-    hasFilteredBranches() {
-      return this.filteredBranches.length;
-    },
-    filteredTags() {
-      return this.tags.filter((tag) => tag.toLowerCase().includes(this.searchTerm.toLowerCase()));
-    },
-    hasFilteredTags() {
-      return this.filteredTags.length;
+    hasTags() {
+      return Boolean(this.tags?.length);
     },
   },
   watch: {
@@ -59,13 +53,34 @@ export default {
         this.fetchBranchesAndTags(true);
       }
     },
+    searchTerm: debounce(function debounceSearch() {
+      this.searchBranchesAndTags();
+    }, SEARCH_DEBOUNCE_MS),
   },
   mounted() {
     this.fetchBranchesAndTags();
   },
   methods: {
+    searchBranchesAndTags() {
+      return axios
+        .get(this.refsProjectPath, {
+          params: {
+            search: this.searchTerm,
+          },
+        })
+        .then(({ data }) => {
+          this.branches = data.Branches || [];
+          this.tags = data.Tags || [];
+        })
+        .catch(() => {
+          createFlash({
+            message: s__(
+              'CompareRevisions|There was an error while searching the branch/tag list. Please try again.',
+            ),
+          });
+        });
+    },
     fetchBranchesAndTags(reset = false) {
-      const endpoint = this.refsProjectPath;
       this.loading = true;
 
       if (reset) {
@@ -73,7 +88,7 @@ export default {
       }
 
       return axios
-        .get(endpoint)
+        .get(this.refsProjectPath)
         .then(({ data }) => {
           this.branches = data.Branches || [];
           this.tags = data.Tags || [];
@@ -90,7 +105,7 @@ export default {
         });
     },
     getDefaultBranch() {
-      return this.paramsBranch || emptyDropdownText;
+      return this.paramsBranch || EMPTY_DROPDOWN_TEXT;
     },
     onClick(revision) {
       this.selectedRevision = revision;
@@ -119,24 +134,24 @@ export default {
           @keyup.enter="onSearchEnter"
         />
       </template>
-      <gl-dropdown-section-header v-if="hasFilteredBranches">
+      <gl-dropdown-section-header v-if="hasBranches">
         {{ s__('CompareRevisions|Branches') }}
       </gl-dropdown-section-header>
       <gl-dropdown-item
-        v-for="(branch, index) in filteredBranches"
-        :key="`branch${index}`"
+        v-for="branch in branches"
+        :key="branch"
         is-check-item
         :is-checked="selectedRevision === branch"
         @click="onClick(branch)"
       >
         {{ branch }}
       </gl-dropdown-item>
-      <gl-dropdown-section-header v-if="hasFilteredTags">
+      <gl-dropdown-section-header v-if="hasTags">
         {{ s__('CompareRevisions|Tags') }}
       </gl-dropdown-section-header>
       <gl-dropdown-item
-        v-for="(tag, index) in filteredTags"
-        :key="`tag${index}`"
+        v-for="tag in tags"
+        :key="tag"
         is-check-item
         :is-checked="selectedRevision === tag"
         @click="onClick(tag)"
diff --git a/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue b/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue
index 7c28e74e256..4faa0e17d63 100644
--- a/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue
+++ b/app/assets/javascripts/vue_shared/components/markdown/suggestion_diff_header.vue
@@ -1,13 +1,11 @@
 <script>
 import { GlButton, GlLoadingIcon, GlTooltipDirective, GlIcon } from '@gitlab/ui';
 import { __ } from '~/locale';
-import glFeatureFlagsMixin from '~/vue_shared/mixins/gl_feature_flags_mixin';
 import ApplySuggestion from './apply_suggestion.vue';
 
 export default {
   components: { GlIcon, GlButton, GlLoadingIcon, ApplySuggestion },
   directives: { 'gl-tooltip': GlTooltipDirective },
-  mixins: [glFeatureFlagsMixin()],
   props: {
     batchSuggestionsCount: {
       type: Number,
@@ -59,9 +57,6 @@ export default {
     };
   },
   computed: {
-    canBeBatched() {
-      return Boolean(this.glFeatures.batchSuggestions);
-    },
     isApplying() {
       return this.isApplyingSingle || this.isApplyingBatch;
     },
@@ -118,7 +113,7 @@ export default {
       <gl-loading-icon class="d-flex-center mr-2" />
       <span>{{ applyingSuggestionsMessage }}</span>
     </div>
-    <div v-else-if="canApply && canBeBatched && isBatched" class="d-flex align-items-center">
+    <div v-else-if="canApply && isBatched" class="d-flex align-items-center">
       <gl-button
         class="btn-inverted js-remove-from-batch-btn btn-grouped"
         :disabled="isApplying"
@@ -142,7 +137,7 @@ export default {
     </div>
     <div v-else class="d-flex align-items-center">
       <gl-button
-        v-if="suggestionsCount > 1 && canBeBatched && !isDisableButton"
+        v-if="suggestionsCount > 1 && !isDisableButton"
         class="btn-inverted js-add-to-batch-btn btn-grouped"
         data-qa-selector="add_suggestion_batch_button"
         :disabled="isDisableButton"
diff --git a/app/controllers/concerns/runner_setup_scripts.rb b/app/controllers/concerns/runner_setup_scripts.rb
index c0e657a32d1..ccae15b824f 100644
--- a/app/controllers/concerns/runner_setup_scripts.rb
+++ b/app/controllers/concerns/runner_setup_scripts.rb
@@ -5,8 +5,8 @@ module RunnerSetupScripts
 
   private
 
-  def private_runner_setup_scripts(**kwargs)
-    instructions = Gitlab::Ci::RunnerInstructions.new(current_user: current_user, os: script_params[:os], arch: script_params[:arch], **kwargs)
+  def private_runner_setup_scripts
+    instructions = Gitlab::Ci::RunnerInstructions.new(os: script_params[:os], arch: script_params[:arch])
     output = {
       install: instructions.install_script,
       register: instructions.register_command
diff --git a/app/controllers/groups/settings/ci_cd_controller.rb b/app/controllers/groups/settings/ci_cd_controller.rb
index 242bc07fe46..e79d43dba93 100644
--- a/app/controllers/groups/settings/ci_cd_controller.rb
+++ b/app/controllers/groups/settings/ci_cd_controller.rb
@@ -52,7 +52,7 @@ module Groups
       end
 
       def runner_setup_scripts
-        private_runner_setup_scripts(group: group)
+        private_runner_setup_scripts
       end
 
       private
diff --git a/app/controllers/projects/merge_requests_controller.rb b/app/controllers/projects/merge_requests_controller.rb
index 4f9d88da503..e1f2c0ec7a9 100644
--- a/app/controllers/projects/merge_requests_controller.rb
+++ b/app/controllers/projects/merge_requests_controller.rb
@@ -30,7 +30,6 @@ class Projects::MergeRequestsController < Projects::MergeRequests::ApplicationCo
   before_action :check_user_can_push_to_source_branch!, only: [:rebase]
   before_action only: [:show] do
     push_frontend_feature_flag(:file_identifier_hash)
-    push_frontend_feature_flag(:batch_suggestions, @project, default_enabled: true)
     push_frontend_feature_flag(:approvals_commented_by, @project, default_enabled: true)
     push_frontend_feature_flag(:merge_request_widget_graphql, @project, default_enabled: :yaml)
     push_frontend_feature_flag(:drag_comment_selection, @project, default_enabled: true)
diff --git a/app/controllers/projects/settings/ci_cd_controller.rb b/app/controllers/projects/settings/ci_cd_controller.rb
index 04a2d6229fc..1a465406660 100644
--- a/app/controllers/projects/settings/ci_cd_controller.rb
+++ b/app/controllers/projects/settings/ci_cd_controller.rb
@@ -62,7 +62,7 @@ module Projects
       end
 
       def runner_setup_scripts
-        private_runner_setup_scripts(project: @project)
+        private_runner_setup_scripts
       end
 
       private
diff --git a/app/graphql/resolvers/ci/runner_setup_resolver.rb b/app/graphql/resolvers/ci/runner_setup_resolver.rb
index 4189a081e3c..9166999b400 100644
--- a/app/graphql/resolvers/ci/runner_setup_resolver.rb
+++ b/app/graphql/resolvers/ci/runner_setup_resolver.rb
@@ -21,19 +21,19 @@ module Resolvers
       argument :project_id,
                type: ::Types::GlobalIDType[::Project],
                required: false,
+               deprecated: { reason: 'No longer used', milestone: '13.11' },
                description: 'Project to register the runner for.'
 
       argument :group_id,
                type: ::Types::GlobalIDType[::Group],
                required: false,
+               deprecated: { reason: 'No longer used', milestone: '13.11' },
                description: 'Group to register the runner for.'
 
       def resolve(platform:, architecture:, **args)
         instructions = Gitlab::Ci::RunnerInstructions.new(
-          current_user: current_user,
           os: platform,
-          arch: architecture,
-          **target_param(args)
+          arch: architecture
         )
 
         {
diff --git a/app/models/project_services/jenkins_service.rb b/app/models/project_services/jenkins_service.rb
index 3a68e7efb47..cdd6338f9bd 100644
--- a/app/models/project_services/jenkins_service.rb
+++ b/app/models/project_services/jenkins_service.rb
@@ -29,7 +29,6 @@ class JenkinsService < CiService
   end
 
   def execute(data)
-    return if project.disabled_services.include?(to_param)
     return unless supported_events.include?(data[:object_kind])
 
     service_hook.execute(data, "#{data[:object_kind]}_hook")
diff --git a/app/views/clusters/clusters/_gitlab_integration_form.html.haml b/app/views/clusters/clusters/_gitlab_integration_form.html.haml
index 87af74a398f..b6d6dcdd7a9 100644
--- a/app/views/clusters/clusters/_gitlab_integration_form.html.haml
+++ b/app/views/clusters/clusters/_gitlab_integration_form.html.haml
@@ -1,3 +1,3 @@
-= form_for @cluster, url: clusterable.cluster_path(@cluster), as: :cluster, html: { class: 'js-cluster-integration-form' } do |field|
+= form_for @cluster, url: clusterable.cluster_path(@cluster), as: :cluster, html: { class: 'js-cluster-details-form' } do |field|
   = form_errors(@cluster)
-  #js-cluster-integration-form{ data: js_cluster_form_data(@cluster, can?(current_user, :update_cluster, @cluster)) }
+  #js-cluster-details-form{ data: js_cluster_form_data(@cluster, can?(current_user, :update_cluster, @cluster)) }
diff --git a/changelogs/unreleased/232957-include-merge-request-description-or-any-custom-merge-commit-messa.yml b/changelogs/unreleased/232957-include-merge-request-description-or-any-custom-merge-commit-messa.yml
new file mode 100644
index 00000000000..dc5b454452b
--- /dev/null
+++ b/changelogs/unreleased/232957-include-merge-request-description-or-any-custom-merge-commit-messa.yml
@@ -0,0 +1,5 @@
+---
+title: Fix issue where merge description not showing when merged with merge train
+merge_request: 57787
+author:
+type: fixed
diff --git a/changelogs/unreleased/320755-remove-batch_suggestions-feature-flag.yml b/changelogs/unreleased/320755-remove-batch_suggestions-feature-flag.yml
new file mode 100644
index 00000000000..523163a3cef
--- /dev/null
+++ b/changelogs/unreleased/320755-remove-batch_suggestions-feature-flag.yml
@@ -0,0 +1,5 @@
+---
+title: Remove batch_suggestions feature flag
+merge_request: 57745
+author:
+type: other
diff --git a/changelogs/unreleased/324612-tag-not-visible-compare-page.yml b/changelogs/unreleased/324612-tag-not-visible-compare-page.yml
new file mode 100644
index 00000000000..fe390607661
--- /dev/null
+++ b/changelogs/unreleased/324612-tag-not-visible-compare-page.yml
@@ -0,0 +1,5 @@
+---
+title: Use search param in refs call to filter revisions
+merge_request: 57442
+author:
+type: fixed
diff --git a/changelogs/unreleased/326102-deprecate-runner-install-arguments.yml b/changelogs/unreleased/326102-deprecate-runner-install-arguments.yml
new file mode 100644
index 00000000000..155984ef9b5
--- /dev/null
+++ b/changelogs/unreleased/326102-deprecate-runner-install-arguments.yml
@@ -0,0 +1,5 @@
+---
+title: Remove groupId and projectId arguments to Runner install instructions
+merge_request: 57720
+author:
+type: changed
diff --git a/changelogs/unreleased/issue-220040-fix-rails-savebang-presenter-module.yml b/changelogs/unreleased/issue-220040-fix-rails-savebang-presenter-module.yml
new file mode 100644
index 00000000000..0351ed00e44
--- /dev/null
+++ b/changelogs/unreleased/issue-220040-fix-rails-savebang-presenter-module.yml
@@ -0,0 +1,5 @@
+---
+title: Fix Rails/SaveBang Rubocop offenses for presenters
+merge_request: 57888
+author: Huzaifa Iftikhar @huzaifaiftikhar
+type: fixed
diff --git a/changelogs/unreleased/rails-save-bang-auth-controllers.yml b/changelogs/unreleased/rails-save-bang-auth-controllers.yml
new file mode 100644
index 00000000000..7bd27e0791a
--- /dev/null
+++ b/changelogs/unreleased/rails-save-bang-auth-controllers.yml
@@ -0,0 +1,5 @@
+---
+title: Fix Rails/SaveBang rubocop offenses in auth controllers
+merge_request: 57886
+author: Abdul Wadood @abdulwd
+type: fixed
diff --git a/changelogs/unreleased/rails-save-bang-spec-features.yml b/changelogs/unreleased/rails-save-bang-spec-features.yml
new file mode 100644
index 00000000000..34f86ee424f
--- /dev/null
+++ b/changelogs/unreleased/rails-save-bang-spec-features.yml
@@ -0,0 +1,5 @@
+---
+title: Fix Rails/SaveBang rubocop offenses in spec/features/
+merge_request: 57907
+author: Abdul Wadood @abdulwd
+type: fixed
diff --git a/config/feature_flags/development/batch_suggestions.yml b/config/feature_flags/development/batch_suggestions.yml
deleted file mode 100644
index 6a13094f0ab..00000000000
--- a/config/feature_flags/development/batch_suggestions.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: batch_suggestions
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/34782
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/320755
-milestone: '13.1'
-type: development
-group: group::code review
-default_enabled: true
diff --git a/config/feature_flags/development/sentry_processors_before_send.yml b/config/feature_flags/development/sentry_processors_before_send.yml
new file mode 100644
index 00000000000..19e88699b66
--- /dev/null
+++ b/config/feature_flags/development/sentry_processors_before_send.yml
@@ -0,0 +1,8 @@
+---
+name: sentry_processors_before_send
+introduced_by_url:
+rollout_issue_url: https://gitlab.com/gitlab-com/gl-infra/scalability/-/issues/849#processors
+milestone: '13.11'
+type: development
+group: team::Scalability
+default_enabled: false
diff --git a/doc/api/graphql/reference/index.md b/doc/api/graphql/reference/index.md
index 263cd4391a7..5e03a504ade 100644
--- a/doc/api/graphql/reference/index.md
+++ b/doc/api/graphql/reference/index.md
@@ -281,9 +281,9 @@ Returns [`RunnerSetup`](#runnersetup).
 | Name | Type | Description |
 | ---- | ---- | ----------- |
 | `architecture` | [`String!`](#string) | Architecture to generate the instructions for. |
-| `groupId` | [`GroupID`](#groupid) | Group to register the runner for. |
+| `groupId` | [`GroupID`](#groupid) | Group to register the runner for. Deprecated in 13.11: No longer used. |
 | `platform` | [`String!`](#string) | Platform to generate the instructions for. |
-| `projectId` | [`ProjectID`](#projectid) | Project to register the runner for. |
+| `projectId` | [`ProjectID`](#projectid) | Project to register the runner for. Deprecated in 13.11: No longer used. |
 
 ### `snippets`
 
diff --git a/doc/development/documentation/site_architecture/release_process.md b/doc/development/documentation/site_architecture/release_process.md
index 7bdf3fbdcf8..2a6c6e32a2c 100644
--- a/doc/development/documentation/site_architecture/release_process.md
+++ b/doc/development/documentation/site_architecture/release_process.md
@@ -6,14 +6,15 @@ info: To determine the technical writer assigned to the Stage/Group associated w
 
 # Monthly release process
 
-When a new GitLab version is released on the 22nd, we need to release the published documentation
-for the new version.
+When a new GitLab version is released on the 22nd, we release version-specific published
+documentation for the new version.
 
-This should be done as soon as possible after the GitLab version is announced, so that:
+We complete the process as soon as possible after the GitLab version is announced. The result is:
 
-- The published documentation includes the three most recent minor releases of the current major
-  version, and the most recent minor releases of the last two major versions. For example 13.9,
-  13.8, 13.7, 12.10, and 11.11.
+- The [online published documentation](https://docs.gitlab.com) includes:
+  - The three most recent minor releases of the current major version. For example 13.9, 13.8, and
+    13.7.
+  - The most recent minor releases of the last two major versions. For example 12.10, and 11.11.
 - Documentation updates after the 22nd are for the next release. The versions drop down
   should have the current milestone with `-pre` appended to it, for example `13.10-pre`.
 
@@ -31,23 +32,30 @@ For example:
   [stable branch](https://gitlab.com/gitlab-org/gitlab-docs/-/tree/13.8) and Docker image:
   [`registry.gitlab.com/gitlab-org/gitlab-docs:13.8`](https://gitlab.com/gitlab-org/gitlab-docs/container_registry/631635).
 
-To set up a documentation release, follow these steps:
+## Recommended timeline
 
-1. [Add the charts version](#add-chart-version), so that the documentation is built using the
-   [version of the charts project that maps to](https://docs.gitlab.com/charts/installation/version_mappings.html)
-   the GitLab release. This step may have been completed already.
-1. [Create a stable branch and Docker image](#create-stable-branch-and-docker-image-for-release) for
-   the new version.
-1. [Create a release merge request](#create-release-merge-request) for the new version, which
-   updates the version dropdown menu for the current documentation and adds the release to the
-   Docker configuration. For example, the
-   [release merge request for 13.9](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1555).
-1. [Update the three online versions](#update-dropdown-for-online-versions), so that they display the new release on their
-   version dropdown menus. For example:
-   - The merge request to [update the 13.9 version dropdown menu for the 13.9 release](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1556).
-   - The merge request to [update the 13.8 version dropdown menu for the 13.9 release](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1557).
-   - The merge request to [update the 13.7 version dropdown menu for the 13.9 release](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1558).
-1. [Merge the release merge request and run the necessary Docker image builds](#merge-release-merge-request-and-run-docker-image-builds).
+To minimize problems during the documentation release process, use the following timeline:
+
+- Before the 20nd of the month:
+
+  [Add the charts version](#add-chart-version), so that the documentation is built using the
+  [version of the charts project that maps to](https://docs.gitlab.com/charts/installation/version_mappings.html)
+  the GitLab release. This step may have been completed already.
+
+- On or near the 20th of the month:
+
+  1. [Create a stable branch and Docker image](#create-stable-branch-and-docker-image-for-release) for
+     the new version.
+  1. [Create a release merge request](#create-release-merge-request) for the new version, which
+     updates the version dropdown menu for the current documentation and adds the release to the
+     Docker configuration. For example, the
+     [release merge request for 13.9](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1555).
+  1. [Update the three online versions](#update-dropdown-for-online-versions), so that they display the new release on their
+     version dropdown menus.
+
+- On the 22nd of the month:
+
+  [Merge the release merge requests and run the necessary Docker image builds](#merge-merge-requests-and-run-docker-image-builds).
 
 ## Add chart version
 
@@ -135,8 +143,12 @@ Do not merge the release merge request yet.
 
 ## Update dropdown for online versions
 
-To update`content/_data/versions.yaml` for all online versions (stable branches `X.Y` of the
-`gitlab-docs` project):
+To update `content/_data/versions.yaml` for all online versions (stable branches `X.Y` of the
+`gitlab-docs` project). For example:
+
+- The merge request to [update the 13.9 version dropdown menu for the 13.9 release](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1556).
+- The merge request to [update the 13.8 version dropdown menu for the 13.9 release](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1557).
+- The merge request to [update the 13.7 version dropdown menu for the 13.9 release](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests/1558).
 
 1. Run the Rake task that creates all of the necessary merge requests to update the dropdowns. For
    example, for the 13.9 release:
@@ -146,13 +158,12 @@ To update`content/_data/versions.yaml` for all online versions (stable branches
    ./bin/rake release:dropdowns
    ```
 
-   These merge requests are set to automatically merge.
-
 1. [Visit the merge requests page](https://gitlab.com/gitlab-org/gitlab-docs/-/merge_requests?label_name%5B%5D=release)
-   to check that their pipelines pass. After all MRs are merged, proceed to the following and final
-   step.
+   to check that their pipelines pass.
 
-## Merge release merge request and run Docker image builds
+Do not merge these merge requests yet.
+
+## Merge merge requests and run Docker image builds
 
 The merge requests for the dropdowns should now all be merged into their respective stable branches.
 Each merge triggers a new pipeline for each stable branch. Wait for the stable branch pipelines to
@@ -160,7 +171,9 @@ complete, then:
 
 1. Check the [pipelines page](https://gitlab.com/gitlab-org/gitlab-docs/pipelines)
    and make sure all stable branches have green pipelines.
-1. After all the pipelines succeed, merge the [release merge request](#create-release-merge-request).
+1. After all the pipelines succeed:
+   1. Merge all of the [dropdown merge requests](#update-dropdown-for-online-versions).
+   1. Merge the [release merge request](#create-release-merge-request).
 1. Finally, run the
    [`Build docker images weekly` pipeline](https://gitlab.com/gitlab-org/gitlab-docs/pipeline_schedules)
    that builds the `:latest` and `:archives` Docker images.
diff --git a/doc/development/i18n/externalization.md b/doc/development/i18n/externalization.md
index 779b203fd73..12aef403da8 100644
--- a/doc/development/i18n/externalization.md
+++ b/doc/development/i18n/externalization.md
@@ -625,7 +625,7 @@ This also applies when using links in between translated sentences, otherwise th
   ```haml
   - zones_link_url = 'https://cloud.google.com/compute/docs/regions-zones/regions-zones'
   - zones_link_start = '<a href="%{url}" target="_blank" rel="noopener noreferrer">'.html_safe % { url: zones_link_url }
-  = s_('ClusterIntegration|Learn more about %{zones_link_start}zones%{zones_link_end}').html_safe % { zones_link_start: zones_link_start, zones_link_end: '</a>'.html_safe }
+  = html_escape(s_('ClusterIntegration|Learn more about %{zones_link_start}zones%{zones_link_end}')) % { zones_link_start: zones_link_start, zones_link_end: '</a>'.html_safe }
   ```
 
 - In Vue, instead of:
diff --git a/doc/development/usage_ping/dictionary.md b/doc/development/usage_ping/dictionary.md
index b4eacf01bec..587e8139ab6 100644
--- a/doc/development/usage_ping/dictionary.md
+++ b/doc/development/usage_ping/dictionary.md
@@ -10124,6 +10124,54 @@ Status: `implemented`
 
 Tiers: `premium`, `ultimate`
 
+### `redis_hll_counters.epics_usage.g_project_management_users_updating_fixed_epic_due_date_monthly`
+
+Counts of MAU manually updating fixed due date
+
+[YAML definition](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/config/metrics/counts_28d/20210329043548_g_project_management_users_updating_fixed_epic_due_date_monthly.yml)
+
+Group: `group::product planning`
+
+Status: `implemented`
+
+Tiers: `premium`, `ultimate`
+
+### `redis_hll_counters.epics_usage.g_project_management_users_updating_fixed_epic_due_date_weekly`
+
+Counts of WAU manually updating fixed due date
+
+[YAML definition](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/config/metrics/counts_7d/20210329042536_g_project_management_users_updating_fixed_epic_due_date_weekly.yml)
+
+Group: `group::product planning`
+
+Status: `implemented`
+
+Tiers: `premium`, `ultimate`
+
+### `redis_hll_counters.epics_usage.g_project_management_users_updating_fixed_epic_start_date_monthly`
+
+Counts of MAU manually updating fixed start date
+
+[YAML definition](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/config/metrics/counts_28d/20210329043509_g_project_management_users_updating_fixed_epic_start_date_monthly.yml)
+
+Group: `group::product planning`
+
+Status: `implemented`
+
+Tiers: `premium`, `ultimate`
+
+### `redis_hll_counters.epics_usage.g_project_management_users_updating_fixed_epic_start_date_weekly`
+
+Counts of WAU manually updating fixed start date
+
+[YAML definition](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/config/metrics/counts_7d/20210329043402_g_project_management_users_updating_fixed_epic_start_date_weekly.yml)
+
+Group: `group::product planning`
+
+Status: `implemented`
+
+Tiers: `premium`, `ultimate`
+
 ### `redis_hll_counters.ide_edit.g_edit_by_sfe_monthly`
 
 Missing description
diff --git a/doc/user/discussions/index.md b/doc/user/discussions/index.md
index e53476a6385..9020c6e0b91 100644
--- a/doc/user/discussions/index.md
+++ b/doc/user/discussions/index.md
@@ -486,11 +486,9 @@ introduced by [#25381](https://gitlab.com/gitlab-org/gitlab/-/issues/25381).
 
 ### Batch Suggestions
 
-> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/25486) in GitLab 13.1 as an [alpha feature](https://about.gitlab.com/handbook/product/gitlab-the-product/#alpha).
-> - Deployed behind a feature flag, disabled by default.
+> - [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/25486) in GitLab 13.1 as an [alpha feature](https://about.gitlab.com/handbook/product/gitlab-the-product/#alpha) behind a feature flag, disabled by default.
 > - [Enabled by default](https://gitlab.com/gitlab-org/gitlab/-/issues/227799) in GitLab 13.2.
-> - Enabled on GitLab.com.
-> - For GitLab self-managed instances, GitLab administrators can opt to [disable it](#enable-or-disable-batch-suggestions).
+> - [Feature flag removed](https://gitlab.com/gitlab-org/gitlab/-/issues/320755) in GitLab 13.11.
 
 You can apply multiple suggestions at once to reduce the number of commits added
 to your branch to address your reviewers' requests.
@@ -540,7 +538,7 @@ You can assign an issue to a user who made a comment.
 
 In the comment, click the **More Actions** menu and click **Assign to commenting user**.
 
-Click the button again to unassign the commenter.
+  Click the button again to unassign the commenter.
 
 ![Assign to commenting user](img/quickly_assign_commenter_v13_1.png)
 
@@ -562,24 +560,3 @@ To disable it:
 ```ruby
 Feature.disable(:confidential_notes)
 ```
-
-## Enable or disable Batch Suggestions **(FREE SELF)**
-
-Batch Suggestions is
-deployed behind a feature flag that is **enabled by default**.
-[GitLab administrators with access to the GitLab Rails console](../../administration/feature_flags.md)
-can opt to disable it for your instance.
-
-To enable it:
-
-```ruby
-# Instance-wide
-Feature.enable(:batch_suggestions)
-```
-
-To disable it:
-
-```ruby
-# Instance-wide
-Feature.disable(:batch_suggestions)
-```
diff --git a/doc/user/project/integrations/github.md b/doc/user/project/integrations/github.md
index 1c0309cab87..4f5640d9fff 100644
--- a/doc/user/project/integrations/github.md
+++ b/doc/user/project/integrations/github.md
@@ -18,38 +18,39 @@ and is automatically configured on [GitHub import](../../../integration/github.m
 
 ## Configuration
 
-### Complete these steps on GitHub
-
 This integration requires a [GitHub API token](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token)
-with `repo:status` access granted:
+with `repo:status` access granted.
 
-1. Go to your "Personal access tokens" page at <https://github.com/settings/tokens>
-1. Click "Generate New Token"
-1. Ensure that `repo:status` is checked and click "Generate token"
-1. Copy the generated token to use on GitLab
+Complete these steps on GitHub:
 
-### Complete these steps on GitLab
+1. Go to your **Personal access tokens** page at <https://github.com/settings/tokens>.
+1. Select **Generate new token**.
+1. Under **Note**, enter a name for the new token.
+1. Ensure that `repo:status` is checked and select **Generate token**.
+1. Copy the generated token to use in GitLab.
 
-1. Navigate to the project you want to configure.
-1. Navigate to the [Integrations page](overview.md#accessing-integrations)
-1. Click "GitHub".
+Complete these steps in GitLab:
+
+1. Go to the project you want to configure.
+1. Go to the [Integrations page](overview.md#accessing-integrations)
+1. Select **GitHub**.
 1. Ensure that the **Active** toggle is enabled.
-1. Paste the token you've generated on GitHub
-1. Enter the path to your project on GitHub, such as `https://github.com/username/repository`
-1. Optionally uncheck **Static status check names** checkbox to disable static status check names.
-1. Save or optionally click "Test Settings".
+1. Paste the token you generated on GitHub.
+1. Enter the path to your project on GitHub, such as `https://github.com/username/repository`.
+1. (Optional) To disable static status check names, clear the **Static status check names** checkbox.
+1. Select **Save changes** or optionally select **Test settings**.
 
-Once the integration is configured, see [Pipelines for external pull requests](../../../ci/ci_cd_for_external_repos/#pipelines-for-external-pull-requests)
+After configuring the integration, see [Pipelines for external pull requests](../../../ci/ci_cd_for_external_repos/#pipelines-for-external-pull-requests)
 to configure pipelines to run for open pull requests.
 
-#### Static / dynamic status check names
+### Static / dynamic status check names
 
 > - Introduced in GitLab 11.5: using static status check names as opt-in option.
 > - [In GitLab 12.4](https://gitlab.com/gitlab-org/gitlab/-/issues/9931), static status check names is default behavior for new projects.
 
-This makes it possible to mark these status checks as _Required_ on GitHub.
-With **Static status check names** enabled on the integration page, your
-GitLab instance host name is appended to a status check name,
-whereas in case of dynamic status check names, a branch name is appended.
+This makes it possible to mark these status checks as **Required** on GitHub.
 
-![Configure GitHub Project Integration](img/github_configuration.png)
+When **Static status check names** is enabled on the integration page, your
+GitLab instance host name is appended to a status check name.
+
+When disabled, it uses dynamic status check names and appends the branch name.
diff --git a/doc/user/project/integrations/img/github_configuration.png b/doc/user/project/integrations/img/github_configuration.png
deleted file mode 100644
index 5798b826681172e7860d2de90cf1b639a8f0b35f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 12258
zcmcI~byVA5(<i0n*FstfEs&N1#kGXuE=7yG6auukOK^uG4ekVYcZcA`AxLqD0tqg~
zA=uLAd3N{gp7ZYe*WQzS@0^)?XFhZ9%p@n7U?l~q7dXT?7#J8Yq(6(RU|>7}V_-Z|
zeD?T(Bele6{xD(Neg5KrfdP2^_x%VXIrR+&#$ya6IW>v<`+E=wbaQiadv|+{THV>%
zA&UHrMx%*~)mK(ltem`1C=>+^!`<Ee$;rt(^ZKow-Sdl!>+9?0=H`bzpFVx!=jV6w
z3XF(PSz20N+&bmv=H5Rzn3<Us5)$(854pU&+SuIE)Bn1>ygWC*aCLQsM4}cK7bPU6
zLc+rL4-SjUYYYqx{~R4x)i<4;o!Pqjy12MNgF{NI>h0aXgV?wN0s=HOH9b8&rDbHS
ztgUNn>s)=IG78GQ1H<XL#cl2FF^TB`p)r%wv+KwWzu-t?Q}dqQ-qqDr7oQ)Fo&l4S
zQ-_C#QBl!su5AMY1F*!Tl+@Iuj64+;mFD&?b}qhmB^n9}3dJQQ`2_{l)iucd3twN~
z=$P2D@^Z7((e3RWM;EuVtDBsn@`#8C3hPE50bw(9i}$5pKCrM0eUkV!K9P``?cwD+
zI5fJux6kO%Y-4Ayq^hyHjvO8tp=Dss$;n+`U)Rym`5y3tm6esnxg|IX#=*f+-_#a6
zTLFPU#KgoduWxNK$7t=FwzjtNODd5Yn|mi$f(^DmJ3Hw=d>q`HP0z^W;^pV4HT#1;
z-Mc(0EGm*}b_uGO4U0{Z4es6ga|v;D{stR%_3-);8BblV+rdGquBGE06yDy|8y6Sv
zQ!-suRdsZ6&F9rIg*@(+{5bmSS7j|+J!(K3te3h_=a@T@z0?#wRa^&e4T(t{J6KW*
z>#J{Q*xTD1)|L{5JA9}z?4I2pTRoBp?24#coI6^dwAB;#>l`ytYlJub-aYs85A5n2
zbQ(%ZY*|6yUKg&kt9AG;g?j0C2WRG&wodNOppK7v+bh?)yM^excP3m5CNE|u=D#}}
zU!QMY?DzB|iu;iHrB%qZ=(V$*n#PvBhB9y*0=|I=t(o`vmAQPfc{Vn9aEi|9TC4xH
zHK;6@nVDHNw1HSU3>wcnzq!2ry?C`a^EO9$t2EnoFs^NLbk@V_W_RoE;yk1;hbcw-
zcXU8T$7=O@Z}}i9JTAFue7jGIeVh;m#K0iOkQV=><~qNZwjld%fvj&voEi$pqr<Nc
zHpm%!Mx+dFpnOgcmPs4(dCJ|q2T&KMeKcP7Y<Vy`L<s8Yfmc68Y2#V#Rk%cMon?ET
zr|88fG&?+Z`%>opNOBS<jM}1(t{^e>aFb$S2whf3YsvP0#uoJX*+XLfH=~1)PP4y<
z90Mc!<><+qfWmd`WwYqU)r+qj7)Z?QAmJ^8C%122;PF#C#T$jWFG;8f#b&b<p?Fem
z7~+|pm#Gc%QW00H&r!pnhvdn%)G|*_{DYYvHZZ+u;t6yXolkr1sH;AnmJx+;^1G0Q
z9G!GJJ-6a8AH*L3CAHK|1dL%+iL&;EE7UUA3(BCjCQ+<?$`w3~!3abT?Vn<>>mvu4
z*?20=_^zF!F{dGiNEjZnu}`|1q#K+2keODP0rshwAe0&im>MDv;wpv|fyzM6Jhav1
zKs@$1ha72qCLc)<sF)DIpJka<!TDx^elTx-pWdElaViP`efwPDK-nxNj)GR^mGmlv
zVRLY+k2=DV2*swSAG5QiZc0BTkf9J)BC&mp37sFxn_RV9eDyEg)DSR?KI|POi$Zj$
zOaRzO5^Fj}KfUzQ?MU1F#prrWQH1c1&JnwJL;w&Sa16Bn<-r<hA;U(``wHq1`!68u
zf0BvbKK}>O2A14?T0_(a*TII!VvdHws;s5gz;uC|SkKD`yLfGz>*Ho5`w@YA2##Ok
zWh(PDX;Zr0cHa||;I%;r8f2>M1Ut5AE;!c#q)P(J8|=xv{T2ikr6s$vj-Ma*Utw9o
z7&T?Ji=>2RIe;SP`leM;kaJ$3GzhbA;3_gHUt)gpo^PB|@F0JW0>F8d6WG?A3o+~0
zl#=6(mvFoUen%=88|q)bByQ|w;gaPzQv8@oE=j-1v$_U33PSXZ+JEBBPTs7OB64tR
zBQ`AgP3-=;Wfbc6b;$r>%nno?2^C^Lx}c8o6EHkqe5v5$0S<l+OlQWd!mRVBdcy!a
zo<NFH34DW?uk!$9D;-@%f-fd$46F!=xSuf;Q*S#YX=@t|4xH{sol(YkMViF=OdH0D
z+)(J9Z(Ccw2RT|m%zvlymtU9L!EaL5Wn2OTPyq*PvEBLh`!Za^p|e!YWWv?iQKkLj
zZ>yhqiL(H!@0!P83QuAq$AgqHkA76Cx00*n_U9>RTj9b&5d)Y`u<TaerjrjXO2+I9
z#ZMN+3JOf<XVwSy+?-F+Z`8K@U8=#~1x2ys>AbMtP~ufA+P0z`x#Vt?B?#cTlbk&4
zi=y46P4L!;$-dB@YH)}~>-vixqOvq2J*u}|#p7xe40&u>l%r-XitN-4Wg>B*@PaTC
zF$QC|qzy122;0}ePSDumsQKd?;wzPr^^BS@HLi2yyN6GqUTtL%^(eI-I?M7MlZ`<l
z22W%_>d%6kiJwMtr;q-d6#svUp+xyBYpXi5W#+T-7+`F)+^ffOprD@b0QF|2)LYrj
zJlPS`9alHnKUX3p_vrUWXH##Gm>ud}TSuitZUU0DFc@GCSnQnDIM?w*7M6;b-mTND
zF+ZHhMa%X@0WdUEn%$~mh^)(#>H;HE9vG|?u&Fk<XXqtM*yi<t+pWsM#7Qr|$iaiB
zb+2Rg&ehdyq8MX86@MGVW>DXqy@p}l%1T|cUpHV^E!RK269Omb_3t^7e-xBOVrh^2
zv@Esq%l0oUC86rP%w?y$2m0r^X-><g6#7qN!2SjYLQ3^>?jB{$&G)UeK$>a3)+OPk
zw=UQ8#?;upOhcas-5^Om$CVWkGE^>G-ko(nV!(2dG1f-pqltnr1;%Mz>0JuQSiFVP
z-t-0CXqlyL!}$d@T#MhvMTW)5$9>nx8rBam7$}&F?J_hFT3kebWJaJetdr40rSw_F
zAG?X;7N!~I{g!NqbWGTRB>@VcLro3mi!}uh710g;6V11X{+Hv~PhE;QB!iYK@2PC@
zW{g*IxUOo1yb67z@|ECbdD^55EW9`3{nxr*K;~9UKWrGGg!PgPb9>}ZrwK*d`XNcl
zyyPpwB@gDbiceZnqAJvANcrHN$=M{^NKr%m;qIk!+0F`J_nM+wtZXzruv7DN=$$(J
z8SVQ#c`fpSfxrj%a&tVA22rw!;E4L3wWJCP$W@6yN$}<aqyLol>PGs-3m779i=rro
z76z?__O{j8d;(#BKf&>0grW)_Dk|NubX*bwS|rH=)F__fRRxXqZ1<Ns(SSkY?h+s=
zzqur4&eO6pYH^U!#U%+m_3H*^$5cY-k+<llt0qQRTy=|_LwVryS`*?GYrOTv$^v(>
zcmUJXPAUWN<XF$tw2v4Y2KaKvW4vMnsfv_$G0Re2TFJ*fcY;Xo>dWlP>BOR{Yx$>&
z1|-67ZPJ%k0>BuJ-ys8YW-Xg-`GbKEdBml$NUgXiRN>(tl|ZI{SIqbyphkIyA1WIN
z8DR0Fw+qd3AfpL%1CdPIQ?&4|Dagq9u=4tBqm&x9=~rdAlxIe?&`R{?ng<Jxfu|#^
zoJ@3Udzs&lni?W-evQN=hZRzcd_}(Wn3atJ_=2;$en#IS|AgMmwcPI9f91aE9{%;0
z4;r0W>X^+>GnRPda1-8yw%V#lkZr#1%=+g5xQmF-XhN@e#p|~XVEEjZlkC)Fjm5~?
zz`JxR5^_~i!P9e6Ml3G=QD5`Al);&;IykEAA*z$}JJH1nGm4OZvZplpmbQlztz>_#
z=_T;l)NQY6HCqT+N-fFcdFuxE<zxLgm*23BpGu}`$I%&14vPw1%$Zl!TE~C{D<T09
z<rvv1Bp{N>QM2B4*mN*2FV~OkwCj_h{2~8->r`6m;>XfyjYzdTfr4Fz*if+k_G!;o
znS=)EaCTUnc8ttM9Z#Mvjh>~{@`Jf=K<uSwx+`5Y11^g`;+}-YoR(~05c(Uw2aY9)
z2<Yeo3|0aFlz^l`!-BkfNs9gz)BKyxx(1_!E)oQrGigb(jU?MN+_OU+S*@YFP1;lQ
z6jH?`nl!S0Q!_5w+PS^AT*=Z<rTiX-eTyUYVsKm;!LA}ymE~5_%!|&|<(c&8#~?4l
zrJdplWcG?^Re>t;(<s@NL1V)ym5E&<)Nv<FVU|7PAJyxw<m!3ZJ>I^En{=&o<!MSU
z88Z3&3EzRqSMxgv(H{+QQFN^%|5UN4Xvq@5TNoymn+L7`acS0G=!j3qBO=;bPbARt
z%2Q27VJ};7+89lWaYxh?+RHR+w=e?DnZDev*>4)95D(QS)g|rbn#c0iX<te1l@yk!
z!z<-Y)-%uOFLF7`U%d7Ouc?FP98Nzs8lr)$FJ5BruxE_7LM86M9nKpT^NnBH9de2f
z!d-1qS-(*RRc3Ag3#Y1QnA)Dlv%d%m)%?RF)$!ESIO2PxIL=<?G)`4EO8yy3G@Fis
z{xdv(`P5wYGsO}9l9gz4qdYbBeC}<|lA9;{W-4L|^ZUyiZ=Y1S=|+m}hNr`(i|L5q
z=JnuHA&9EyE0-U=zoa$Q_rh?}x~mgR$GRwgaIpuOsY^INo#H8>xB7-p19QW&kpRUy
zoK7ay@tfq&%2v%2WiZpwuu4ese!@}G=agY|K~vAirzUVOefzR;Qf~3|bmy24{zq>R
z?TNzdtRBsDc(hsn-OWzoSVgU#61Y`e>7OMr7SkfSB=?LOHYNi)nXZnsWDLIFfOAjr
zXQYBdo_+#-6Y|lv(ifT{C6qDM8WKz3ysoC##`{buwzQ{;Ja=t_RVtQI$AIgHAiLYE
zEe$ot-8cbL8y;cCS(3a${>EN&^g3>-Wg%lIB9p*>?uJdP9$*n83E?6v5?%@*^5<R&
zd@nw9Ry+gc3B#cvf70j7AqgVzpK{PKQBY3T>V;hlBG(^RlnZ@Gai<?Qq(!%KMZy6$
zTbPsn)$~|s&j;W6T@D*mz9_QzyQnVGcNR_ZjDVYw4BZGW-_M$G)p$ZM<|t!Ekmmgf
z_e;v?WSNym4)XGO!kKYS3-vg)6pK|sOsxBh;~20wi?Np^NaYRsgVXWt%dG47jg*Z9
z@z&J9dE>w5v>c;SJ`~`3)^7|QseQWhX8|&M6ciO&zuidHCJ>rpf}mw;IpH;fP_Skw
zmF%Z-Fnn%{(&LC-!cHSa>1<QRie9x>gx2$){t&wyq+u+K$$&bBDZZh=&1f*P7E%QU
z5F?*+8+`FHQ(GMWip)knyXxDNQP`eB<&iB%6p!{x;D}}9DeO)<?TwVZF8{0-GQ<@P
z*srejU#7H`X3#VdZE;6tr+yQDF%i;g{CsltB2i4)C)c)i@fUNFgV~uqKX<s(0g>yb
z!yhD@?YXF_z28JqLw8xL*c9(2X`mv`-T?`)YJ=Gx4Wdl=o@8TM<p=J}CnHK>{A^0Y
z*O`yP|FW>=@C9&f(WG}E4f;ht@U~>`HQg?R_fU)IbMopvk)Iwz#VOQT&FjcE8ZStQ
zDNUzXrjwQhrkM-Es&<0l>n1oWF^kG(f|Ib1LTp0Yd=g&!w_BYgu%22g3wu2~>Gx9m
zom>+Y<+AzYpK2dfp^^0qx7YqSTWY!R@}&%3X|<mt-!EPukA)T*8uu8PrJp;-*93+Z
zTF>dV@!REBfG*%nP;Yk~{VS*>GcQ(oM>ng?2>K&Sp+&l1K%CxI?)c;Vesn50_v7i8
zdU*(r3D9yUWHJwGRixtdW&V+NK*IAu3D&j1*w8=TUVDh@UjBf%bc+u<_Q{{0&LK4n
z_s^IH-`0<H)jQ_NN7uQXgrRoc;>NG`ta8tJI_!r*_<8Pvh@I~R#}OBa$6}VkfjiL6
z+b?e<n&qE*Khjf#tS(pVMugp$*9JdXWE60|s}SewPuH5yCOpv8TL~kp&ttN#8;=^b
z+hT&<;kKLWb*EPdVfC#j`A3Jku8A!;E*?NT;}MnRy!cSqXV8$F^S-O-$O`4&iDF(d
zBuW>pe@^`*Ds-TWt8rWdoSnY<(K=Ls#QUV>#nZCRI_}9#B&C<{d&l+qX9HNQP5r0^
zU$zj-R4~qC?<m~r0b5Pja&a`$;JlI<Y|g}{G-{XF-_y0qJ?eq*sj}OD!ATGQ{QkG)
zQ92+7U=SBAE1Tr1@w!Dv_URl)LD2z}8d&qgdR0az>Zg1cI|*A?N|$YVgH^a|t=M!X
z5>wH0NPm5@genS*m*WTS)fZODkr$BfXs$cXTgom2+kfKg;_{d!DzD|uS9I<!G37A|
z;{LJHeQ#*JzS4jViGDEN@%sHVe8SUfCU_^oI+_Rk83dil0Qa}IEmo~tyvD{joc>MT
z{3nCo;$F8f^;?R7l|Pep+nUzxCe8o6q@#PQvn)z|yPFrBvoCc2JW`0AVr^?_@;Wmn
z0Z{|Hx2{5PX+y4+z~&wv=RLR{3{PSJm;-@^^yRg!(Xt<69{k1}=<%h1kDp6|Ousyn
z`j=edAS7r_W&r^Ipylr)Km{lN!xZBBWj4finL^Kewjuk4o+?j6gao<XH>(~Iz_TZq
zej?;}|HqUL5EiZqf0KR_b}m7_tYuRbP9LR<2jwPIluQ7pX9hl8cG%CBX7mltP49qW
zJ$^5gc;7!Ni{Qm1$FuHdU2g4s@NX4{YEhwQ=LFO+(?qNRtRu=*p=f?CZ~eBJ28nf0
z8yLbGIP?yR>ERl%b$Swm@Mj+tdQSm4;<!{A=n;!#dvI+{f|B84+cryzuJzxm3o)0s
zXX3yDFND+}M{IVCfCshTGigja#(6z;H<VwcTz}j6NAx_%RMRwSF(BZ#XHpM&HLp=3
zKmM75c*pCk10!g2^*u*I`if$IU|yY*JRf%lgNt=B9i?-+5_tqcew3Ts&q!H-vA+s`
z586|d_HxWyLh5z<g?Pbj+kl+j;jaNy@A?KBEu>>Rb4Xg&%BAC=`BITzhkwLT&;Zla
zrjm;PzQ@F}!gQ;8u1NyUXWM34Q&-2xD*^iY#=}CUi!t7JRe{T>K&mtPo1yl3-XdOQ
zL!sG=wv41y6Yh5c&R))FG+xeXUSbhFMG*zhR9REU!Zx?v_=lUCkKy#3;e42^rL&0`
zRT-t;MWJ2;c|5Y>$3iNs5}^wI`uzO{zE*7!z8_sEcSs{mpJpAXL7VxneHs-mIGLI1
z4o7#9lnQlCfC5d0IBYX~9FcHsxUW$0Zy#fMcmK?^+o1P(yA^x7;(!bhQ~Xk}Lhn5L
z$qVH8m=wHw+C8Va=8Tmlcx9nErTNm$W0ZvtUd!p?+)%g66kp#awJ&&a>L3l0!R?oL
zBgyYRv(K+U`?b*?n^3z{mxMQ^fR6XP6z7pgXoyDpi}TCVP!oU6l{(u+!1FZ<lMmUN
z#3}VMAtL<gkLiX*9VehF6NOZGT_N^-@LyMW(Q>2Xm$_ljfh$g82}21f1VkGO;;rj#
zQxb*zs?cUt%BZdeS@~vS_j$EJQW`N#?Ep+@BHe(*4%MUfgu8t4@cH%E2GU&vvbmHJ
z69a*ILrdzt@c{kANmWs^!%XTilbW-%D#2o(uQf}%V;4Me9B6C*H%YD(z)@>_PC0S5
z3*5|CHjR}55~q;vXo{{#$j}T$=dx0?j{>^a=nwQsgZZH$9y?)G3pO?}^sf)5lt3F|
z`ZE%zCkB^a<)I&=5T5N{Lv)enV|&P#JuYe{tRnT)z<+u1+V7p~zr3(?MBi&^>S*W3
zhVl@qF#659QEH^~$Uv0+PBCRF(p9o$_{HXDu8Y&=s_e(Q#X*~4$W9oYfrsh}LOQ#3
zd0KZxUOHcl4z^ssLDnXZ$+m5IP*~AEmI00<i3<HVbR*|Y`TFDH&FfV<W;>%fhHep1
zHsyT_)0EMltJR=)OeU<V_z0anAWNTQ?K-brIuc?-7?&(b>i0%Zynwi$hDz(^375E5
zFD6_hfmJ645wHFB3^%*8QpqJB&&3g~Z+=t0L6-*pT^r0S0+ln`6ToLuBnxIRB3puz
zGFh^6(hs1{(Yno_cb;x5`-p?m!sK|Q1&mRhM$Z>Am(d=r^<0nPA2}m+UO>KsJ3hXh
z^CYByZQSSuTbqpDlTFNy1*maE113wpLORIF40<WO^OWa;s=n>JK2HTg{8ZNeM$2<4
zcZ)zn#kSsdlj&2Q0<MvxPx)O*itR<4<DN@VJ+?L?Ty#ME4czSI;AgG^lW7dyq-l39
z#ELWE9Ha_kw(`#+=d=FHWTK?c%-~1jLxvxNh79*kEz?Y_lwv{!DI7?6J-#1=%ziLP
z^TvVCYU?z6Tq6ZxeS7J$rXGqZtLd`(rrdPl&h>uTMyJ2W9_vw#SnCd_?VD=<+o$<p
zp3po|+OIsafg1`-Oc5;&Q)3FUuc82IYDj~Rjhuq>=B+Gmy2XaH#BaFF&ZDRqF#o#8
z7ODWMChRKIiKVpTBM%~M+f=ChvDM9X+qxJRxAWZ8!j8`{I_yteXjBii@q>fU9O$x_
zkKnjj2VoQkTc;IYl+S(64`}nlPb1bZ4V(K1*~q5y*KLgW9~pKSk-FLMVknr+$pfW0
zCv%^D!V89mggqaSRO-N1XN)3N$Nc%I=vB6g2K^7oLC!hZm-5N#73#U=YUb+ud9c<7
zSUO*YH%$PL4)4+%_vQJ}z1zmo&}G39;17@)e0R=&E9|S|a*y7(^*-8vc`SUY9QJ7F
z+v#p%wog()VCe4XJ=1a~A!zOOSs?U!Ju=KRT4;MFAoSdP?4&&<gXlKrc!F|&BI|zZ
zqTM^si|=$eLr?G??Y4T?-tKt@ZiX;SdR4ggr8YZl?=gGa{b*Ys@p9eXY#4c0CNy`_
z;C(qqXVRERda|n0()CX0_OeF*Ew+lDMy-tJA4CmIs9J|+!+8)F?A<`n*#p+`oLn+3
zaOL{_jOP!~W+mRbJ@pvH{p0$@Qib!`*?j&|>6#@IIrtgu`^sIdMP#JiqgBY~yKCnz
z<HL5s+ubNZ^tNUI;7{8RMD(=>s6dF<<6O$Q6U+7R2)6ZK{`}VRE`5>V_cMf>YeHKA
zgzXwbDk;_QeM^Bt6`+FwCxV1W;%D?@9tmCuMgct!<TnA96z*>VRR5#Y?BD%<ssznb
zG}7b9oe|FSv#k-VIp1joE5e}Nrp5*;Q~v&MAGWO;>?M8ecwenTa-<ddU@oO@^+d1A
zW?X=v4Le&Ja6MOPFEskwg<ogh$ML(pIv?*ga<GDAqZvb`+hMp<!{I&%JhXcL7UZR)
zQInPh)W|tuVwT(&>iYNcdv=uLT+ED+3LdDB25i&Ytu^`^`GR6YPocNK_$;`xs=j^|
zXyC;5P64L~ZfXNswq>p})eA6nM^8osAJzkaPK{nch`_`ttMyZ_hB<<*x@!QeI{JJs
z^VY>RmmC}+(HJ(nggEj|G<OQpz!cTCcKw6Q$9u_*Tn^4OOG<%oEGl>PG(uQm^Lg9a
z7d_GxNGo}_#>B3DUN9e@*K3HuYTHHeGBi-Dpg~?9ex<OYq>VdM#CaQP;y|-zsrY0{
zp-!@F>?&j!BrcVq+q!AZzC!IjogctIX_?9;VXi7R#!n{1p6<Ekp<)@P)<T}udZ3fa
z{d%yO6B$~#%GZRnei`RnDxJDb;wI)}i9XM3%4(k8FkVQUnoESSdOREpCzx6qhb2@=
z!^=bn&PaVWczZ%9WhUX}93kC4I^1ekC}Gm5CA+U3&(BXohQ*{u^tNkX5WLZMlcpJ3
z4z@aZ*-J^9ZBK!6{e96bx|8i!Ah}K)GQdpg-l$clz3JIF6d5idd8VxEB4ymbH}my}
zr#D}=-sI3lkk!O6#BTCUk?YS11<ns%qXD{k<!_EIa0?^pP|mvayRH{a1wFu7csr+8
zb6MH6wY44qm{Y^aQvML&hIiFwB?zjfyvCg-GEkk0?L}_-+nVfhrkb7F&K~XJAEC3*
z;PiLB<Vj!3UW{!1SeQX%!$^Bpvq6cihh}<P&RVDo;~ebSbZk~I3CR5cX5q!SP^)ae
zX2q=;yduaTyzG-cXQm!csbpAm2(ZzMfpwh9#F}ftw<^0%{ylY3++^M5<gj?#!e4l;
z9rG>3AQMvuy#T-}WU;GfqK-zzex0|pN0N^TlgWnS;PcB#8owkBL9kxPjS3Ywf&H%Z
z3i##wt;Or`f|IU&CU7sJD{p$5scE6>M4=UF(P@=HsQebRPO}<Qv(2t^KoI!8tq)z?
z9633HZ<rf{MY>LTRCpPl;>`&TI&}9km3jDLucv-La$B~&i#5G5Wyi{&azgoVQ0rtM
z%DPv79P6i>wT&pk8xI6p=)mkL2V0Jjb_%@N!Sc*tgHJA#+7<z!Ue;9KaL3cU96^&4
z>TeW04ts1|NIrtYb|aNMGW5oU47mKTE}U1#t@txu!gB3Vul~4&0p8U4uW)I^V9kG~
z0mOW3R|ElIj;5gw^&DVKJt=R#ihWyoeU?hDilETBxm4h)Xd}tB9sas*I(YQ=*BN69
zd828`DW<@xZfz4)qT!cMYkvO23<jD0b6uJz*$9QH+||qi+2;mQS|z&74_iMAdf>v2
zp!^mb^`Ri2N_AJ2h^@6k!D-55;G}8!GV~m9mY#?Yk}O-E+t#tgc`{|^wsR~Tj9nIK
zm^r#GXKvftm}4Cr^Wm2iBlgqg@hbYkPE>Cc*r$#IEb!RttX$G<^KSa|4Ab(&qA@XT
z*zIl2(^UxD=K>e~lrV1f{r;rYS6V9dVZHTlG(bEO)=Ee60>6ZqwbPUkr;@`whf3Yg
zfH~7!p7sO$W7DSkiF)JiI~gB2=|(=tyNVBIzaop5trmG-L`@<-G_6YplDA&Ys<u<^
zQ;R$A_<M2hGD1^QW|n_(^68w6o4)J}v}0(fyCRAN_cW-R=#)w}kO|E80;o`Vt@7%-
z?MpE0+K2is+Srn0$#w<m%9Fb{n0oJVZ+3=$4GI99zXxq|_E7}NGH!2^YE_(zxj5yQ
z%=k2KE6%y|{(J@`K}RnzfK8}mWlDGMRcOn2if4RMw&}b)xx^cNsh-+}K#&*;%67<q
zmG};Z!M`Q`q0axi#P@hG(AB)OiyPoQ|LHLp%a29!jrZl~L&L>?F*<^$<Jx$#n-i@J
zY%vOxjpl7-=;q#G6r1Eq!Xk1lC1?NAjbC0{=o7mO3@u|Qan2BPz7Anqb`5WRlo_%b
zv-4S3DXvGd6HA1%i-u5bo{%Py5{#jCF_<T&9G7+QAmDjx!8NVX$tu+YxpuD|T+Ply
zg#TqzkSXMj3hEJNpSgcaa=xC^F05{BF?$&_rMCTMW@Sp(wBm7}eyq{m_5Q*I4j|MP
zHmg2%zOzFt@8q=S{QJqXm5F-^o6$vZi@ue~8ar%wL8YcJNiU_vJg!W^q-!7~n<+*Y
zno`y~pVly;)Zi`84ZiSg#ZATVOOk81(uK-N=;kO6J#4ZxQFU(EQfGEhjR@i=d?=}j
zmM(4L$1{mHH#Ycol#S^l&vAizs1FsWE}BXeTSC-^9*?+j^jpw|HU@p20Jkx+7cJ*$
z{P8_#DK;>sseGuoCcEGLi%}_-FPkoR_dZONnoewFv~JP0=m!E-T7W!LwUkg+*qQ3;
z(E?z&9q-rr?76pm>i&MPWv5kssOccqTox3XQ!=%kI*v$HjW9EK&<AH*iF2Q|D4(4f
z<Hf*u?)kSD0L!;!SxeKol8(F^HS|?~!cm|U738dQT}wa1o*2Bv;*$Ix*TnxtyaZK}
zt5MDr81R3^fCyFE@_uIn;^^na#gfZHxyPGBy7z4-KblkI4~$`I2^vSANIUNytyWv6
z``oVf=`W&_>~1D*{6RjRrFB^~Qo`V4)n!?=wxZG1K*aqVe@<dyIY-2MQx!NRyPvet
zM_+cUDtbOB+hosg%4f}ltR>L(dgX~Ad46>w6?5H*ucp`JPeK7k2IC)I=grYk{gj#R
z04SC`!h9L@boPxLRDg4=d&{3Td?4Lp)a5{sJ%Xn&v*-TMkN+a|(0c_AOMia>{!?Ei
z)bP!ZYO_esjsU|}4rDG^=Qc9gM7wc{to)wwIyMv^xOqZ}ps6nvLIxgp8m`IT&N_gp
z;d01$7CU4UctaS+mzx%bsKd21RaG{Cu&%9n>KVbQ!RJmD90sAx5#Z_N0bAY6ulj5B
ze-1<s`{l2WE?=gk?M(=i@p%tffDuA>H;)AeHCk-DUbZ6)PLIJlNA;sGt@&M!5TPxw
z2<hLXO}IWayntg%0AR@}0h}DOA2tP?jooE|)3s0*UZ^-pltV4g)Ed;-*4ZUO^o|Vc
zOHWk<M|qV|wx12#<^|QmH4GV>R|gut?;r51-$CeNzd<IHbjPAt^}h%iC8^3&QSKce
z(gk5P8R(3S6owx2WWQb!I)QX-x*87!HQkT0A$DWE_&xM0{eht1c<y47@D85z5v~#G
zV0sjvE2%jLE<SidX-PGOqWvYhe@ag#?|mTe<5yyBRNSbWx%~C(xq)zLxUf-5xaGZS
zs&&AeN(ARr++HlpXkA|F=%~Wg+Tlp(y@8_~<>9Yk#rmWB;(g~ILc3cdG;<=+vK6D6
zAaA~WA})SU1^k(o<*Fj^jatFyovG2)PHWp&_tC>IoiwJZEV1fId{X8T-8<8|O22wQ
zavWr_^xdEz;pXstD~sX8iVyFrhl=v?@jYjC=3^{tTHZDc4^ac(7RD-P)aPkLf=Z;>
z{yJ*13|Gpfmw<H-zEf9-5E0f(wN8!Arr+g*a-dlW7OB1y!V6n17%^Unwoz&7Kf2wo
zS!B7|Yln1L37idsBq6J}3vFyd8P^4~%&QGdPs=~@(MG#$)nC2U=}}k7@6Q|SnJeoL
zR9qHl$4^&poXPs|`m`>V61amxUg~Zn|919@$Z&zpB!zS1xTF*zDRa!eCw((e-Qv{5
z8)ZQJ_~5{3PTx6O_FH&$chJ~G6{PVsLcjg~b2;n0ku**Nk+3`KTl0i9nD{_Rf~u5=
z>ATHb`oSh#6Ji{joUiJjqEUIQj?n1Ceoo}kTzQ<qh;q$QO4_|T5^~CPbqqGVpoSs(
zG~bZM_VYW&#(1GO_|-w9A3{}}yr3S3OM>ZoDbVYcK#Tiydbm;rnTD~TT_d=ie{T3{
z#OlKy1Domqc8?T!m)W{9nPNA~|3cf^VR{`7N%|5WN@j*zi>AtvPssga2Jin|L(onw
zqgR*8hsn3#N+)4zp!bwrUd}EIyq1SaPJ!fy1cJ|r7IKJ3eY8C(Wk3(Pp$>9<E{h~>
zLb;?f!Ag<L`Cv%Nut%CDmL&Kfk7R){8ATx7nmTCFObL@|penAK*|agys7&2sle0<&
z%#_5^>HRC@rN!`ftP0}nk>eYi=T5ZOVO(EgI&)BzRKsN6(s3;oyiQLX>+Ka}(u3Vd
zhd2lpC4V08jQ6kWzsGnb@^J0_J?hnCyZsJ~;ROow>hNC(hld9%cB@!}x#Fi{?mCTr
z6vQoNCMI;)r%OHQCu)4lPKc1{l}=5U&a_4MZ5HFOdf#TyT@q!Hrq9N>>em`hS@<jy
z4me_xBd@BV=NlGcK;helNi4#f&akZ-%?=za%FTM_RIfV71F;8N${#08g_wO&iRg$6
z)svGPUngCUp?8~t>^$4DT2CdA_%icTj%uRb3NjbMhP?O`A)vtMfxm2m^XmI@G!ruW
zkaQldV_thGkT)2pmtHa$7$Ln!+SE3U<D(co5ha^faB7Ou91ACN=@R#At(;bEl3r}w
zG>y~Xz6|5hOllU*K=rax#<+)f1gR+cha)?WEoEhO7~>_SWGe`*6rA7Ea`6%ds-L|*
zNkEC^r^*nAK(z~$22D|&p2m6U(;Tn-J}`7L!{7AKkJHnz1jlPK7ex5}ttQHGkg=g=
z8k}>^#*#tye*-V(7{!)*he6bVMrlF(2sd;tf8R%AW4N0CQNzN(fIoD#J#@DHe;Hav
z%a1XrapR(Sq%nNE{n#E1kpug&F#53|k1!yQ9vVra07%S-7PSWu@CWXH1b$!)U+@F>
zKLQaD#>4CHj(-XMrKA!MF5q1a`ErD0rS0aIAD)|H8J;8VM{y3Kj{Kj_SFiniJc~+m
zMx1H>`80m^AUGR94X`-?8W69CDqRw5Dsmrt^B|Ask<}_X&ZXVYJ$`(-wKy^4e1P)T
zmLK@R$^-THpZ>py|6=`%@_~B5@Ic+rq98Sf6l0~NkVm0RFv1dYm;?+F2G#n7oWbO#
ziUPRGqN?w<&WB>C6#7x&2%0y~BZ4krTSdf8#I~64%FwW^?N9w!Eol&Yvc)4O`SVBo
z$YZV#p^{>wa#MG0uCHg!!dI~1z767_cP>1YAKVd0HjV|s3#EyJ5xEzU!x3SQOYG<{
z-5qvq3E=K?N8Pk$VcuNx{aDq<HKc6gcE22FM6}o+^SzgUAxsH}lH-3wApU7GhWKac
zEV1W+K{*Z=?<EXQ`bBp{D1dlWKo1ixFTP_h^tqLZ?ESXg#>R)<a$DV+)r+v!21DHe
zx+ui>pfNcCNsI8T&?{U=+@uD&S|)THKM({ww=*+KWQh*CrrggVWmBOe8AH=@vVYC=
zDQs;Qlc&S%HRZ6j;v<jUbv%`#yeSV{+9yeF2B!SLk$6b}c{B#O+R_1f&8KW!+OgM^
zT~e29{8k*YM?=}InGFjfn~ocO$YC^bh~H`=6SRlU5n)eD>l8)yRP@8ZjaZ@$wIAQH
zX$U%!vvQRU`2LKBf{Cz7$;t5ca4c^r*x^D!*Pk4|ObQdnN)d&S(Lc08qN;avQtD0$
zIKdz=)w_o3MY)RQ7}!8F_dO>3Lms$yUpKX6{<33eDf8@W&uqNcXg_L)*}5f#tO)wJ
z=W#;$^-}WNk7WW5_@5|6-t7aNUnB>fE%WXs$(nI+y(IjP4FmpIsf;@apP)lp6ymOI
z4;(z^Y9qmCDvYd-gJ8Q1yz~3%7locoI2>$qg(%y|ojyKm4o~{|JCP=^l2GImL5Hnu
z?~kcYZCA$3ej3`y4+Mfr{aD=szi$7$H@M!6Y00f%h8vj@Bl7kfk1TTu55+*Tw6G34
z`ocP?@2eun8E<Bex2$(D5_>8cW}IzWkg<Qz-+#8@hD=7f@c^-xYjW}4902|i6$Md3
zF*&SFF3Z2nYH_^?`2MppPF9ZW3%z^hL!aZV`swQX3%(O?dlLS=Q?g2=fpFt!d@T%)
zdvL<H>{89%Ob*NQ$XwuESQ5lL*xO2XpDYS2Xbum=*$)vKv+z_#j`J>Xa?epvIr%T{
z5NqUp<Pl)wW<*kcr}qVPFPjq)jT)IW7re)k235HgDxLm24inC2_D#7+?8{e@y|tnN
z*I)aZ4%_XHhLbrLYUZwne8fQQ!NT`GKQpSt6Eg8067ly65wjG0@!Bc)E`0n1@aZ9C
zk=2XHS7ZR(7b{@Qsv-Snf3q2eqJ>orY;U*yzF%lIe24Lg+&7z)VC36CVpzA85})sw
zX!zKAD^}qF-HaVeH|mDM9v^5Q+(>jaiuITJ1n!mqcmHn^5BP8H9Rcvi7IqH>`mj5%
zz|2W{DL}ro_MKpV85H4QKj4+CBsp4wp8^Lt!AlS3DM2o4m?W{!?H@gCe$epfL9NJx
x)(6!hV7z~G{tEuXd6=;N_tO8PJ#eGu(Y1aSSEqzX=-;|6EukP@F8cNR{{Yf?{5b#s

diff --git a/lib/api/entities/project.rb b/lib/api/entities/project.rb
index e332e5e40fa..161cdb68170 100644
--- a/lib/api/entities/project.rb
+++ b/lib/api/entities/project.rb
@@ -127,7 +127,7 @@ module API
         # as `:tags` are defined as: `has_many :tags, through: :taggings`
         # N+1 is solved then by using `subject.tags.map(&:name)`
         # MR describing the solution: https://gitlab.com/gitlab-org/gitlab-foss/merge_requests/20555
-        super(projects_relation).preload(:group)
+        super(projects_relation).preload(group: :namespace_settings)
                                 .preload(:ci_cd_settings)
                                 .preload(:project_setting)
                                 .preload(:container_expiration_policy)
diff --git a/lib/api/internal/kubernetes.rb b/lib/api/internal/kubernetes.rb
index 40b3bdb8eed..af2c53dd778 100644
--- a/lib/api/internal/kubernetes.rb
+++ b/lib/api/internal/kubernetes.rb
@@ -13,7 +13,7 @@ module API
 
       helpers do
         def authenticate_gitlab_kas_request!
-          unauthorized! unless Gitlab::Kas.verify_api_request(headers)
+          render_api_error!('KAS JWT authentication invalid', 401) unless Gitlab::Kas.verify_api_request(headers)
         end
 
         def agent_token
@@ -51,7 +51,7 @@ module API
         end
 
         def check_agent_token
-          forbidden! unless agent_token
+          unauthorized! unless agent_token
 
           forbidden! unless Gitlab::Kas.included_in_gitlab_com_rollout?(agent.project)
 
diff --git a/lib/gitlab/ci/runner_instructions.rb b/lib/gitlab/ci/runner_instructions.rb
index cc92dfe7806..365864d3317 100644
--- a/lib/gitlab/ci/runner_instructions.rb
+++ b/lib/gitlab/ci/runner_instructions.rb
@@ -51,10 +51,7 @@ module Gitlab
 
       attr_reader :errors
 
-      def initialize(current_user:, group: nil, project: nil, os:, arch:)
-        @current_user = current_user
-        @group = group
-        @project = project
+      def initialize(os:, arch:)
         @os = os
         @arch = arch
         @errors = []
@@ -77,7 +74,7 @@ module Gitlab
           server_url = Gitlab::Routing.url_helpers.root_url(only_path: false)
           runner_executable = environment[:runner_executable]
 
-          "#{runner_executable} register --url #{server_url} --registration-token #{registration_token}"
+          "#{runner_executable} register --url #{server_url} --registration-token $REGISTRATION_TOKEN"
         end
       end
 
@@ -108,30 +105,6 @@ module Gitlab
       def get_file(path)
         File.read(Rails.root.join(path).to_s)
       end
-
-      def registration_token
-        project_token || group_token || instance_token
-      end
-
-      def project_token
-        return unless @project
-        raise Gitlab::Access::AccessDeniedError unless can?(@current_user, :admin_pipeline, @project)
-
-        '$REGISTRATION_TOKEN'
-      end
-
-      def group_token
-        return unless @group
-        raise Gitlab::Access::AccessDeniedError unless can?(@current_user, :admin_group, @group)
-
-        '$REGISTRATION_TOKEN'
-      end
-
-      def instance_token
-        raise Gitlab::Access::AccessDeniedError unless @current_user&.admin?
-
-        '$REGISTRATION_TOKEN'
-      end
     end
   end
 end
diff --git a/lib/gitlab/error_tracking.rb b/lib/gitlab/error_tracking.rb
index dfed8db8df0..47d361fb95c 100644
--- a/lib/gitlab/error_tracking.rb
+++ b/lib/gitlab/error_tracking.rb
@@ -16,6 +16,12 @@ module Gitlab
       Rack::Timeout::RequestTimeoutException
     ].freeze
 
+    PROCESSORS = [
+      ::Gitlab::ErrorTracking::Processor::SidekiqProcessor,
+      ::Gitlab::ErrorTracking::Processor::GrpcErrorProcessor,
+      ::Gitlab::ErrorTracking::Processor::ContextPayloadProcessor
+    ].freeze
+
     class << self
       def configure
         Raven.configure do |config|
@@ -97,7 +103,9 @@ module Gitlab
         inject_context_for_exception(event, hint[:exception])
         custom_fingerprinting(event, hint[:exception])
 
-        event
+        PROCESSORS.reduce(event) do |processed_event, processor|
+          processor.call(processed_event)
+        end
       end
 
       def process_exception(exception, sentry: false, logging: true, extra:)
diff --git a/lib/gitlab/error_tracking/processor/context_payload_processor.rb b/lib/gitlab/error_tracking/processor/context_payload_processor.rb
index 5185205e94e..758f6aa11d7 100644
--- a/lib/gitlab/error_tracking/processor/context_payload_processor.rb
+++ b/lib/gitlab/error_tracking/processor/context_payload_processor.rb
@@ -9,9 +9,21 @@ module Gitlab
         # integrations are re-implemented and use Gitlab::ErrorTracking, this
         # processor should be removed.
         def process(payload)
+          return payload if ::Feature.enabled?(:sentry_processors_before_send, default_enabled: :yaml)
+
           context_payload = Gitlab::ErrorTracking::ContextPayloadGenerator.generate(nil, {})
           payload.deep_merge!(context_payload)
         end
+
+        def self.call(event)
+          return event unless ::Feature.enabled?(:sentry_processors_before_send, default_enabled: :yaml)
+
+          Gitlab::ErrorTracking::ContextPayloadGenerator.generate(nil, {}).each do |key, value|
+            event.public_send(key).deep_merge!(value) # rubocop:disable GitlabSecurity/PublicSend
+          end
+
+          event
+        end
       end
     end
   end
diff --git a/lib/gitlab/error_tracking/processor/grpc_error_processor.rb b/lib/gitlab/error_tracking/processor/grpc_error_processor.rb
index 871e9c4b7c8..419098dbd09 100644
--- a/lib/gitlab/error_tracking/processor/grpc_error_processor.rb
+++ b/lib/gitlab/error_tracking/processor/grpc_error_processor.rb
@@ -6,60 +6,126 @@ module Gitlab
       class GrpcErrorProcessor < ::Raven::Processor
         DEBUG_ERROR_STRING_REGEX = RE2('(.*) debug_error_string:(.*)')
 
-        def process(value)
-          process_first_exception_value(value)
-          process_custom_fingerprint(value)
+        def process(payload)
+          return payload if ::Feature.enabled?(:sentry_processors_before_send, default_enabled: :yaml)
 
-          value
+          self.class.process_first_exception_value(payload)
+          self.class.process_custom_fingerprint(payload)
+
+          payload
         end
 
-        # Sentry can report multiple exceptions in an event. Sanitize
-        # only the first one since that's what is used for grouping.
-        def process_first_exception_value(value)
-          exceptions = value.dig(:exception, :values)
+        class << self
+          def call(event)
+            return event unless ::Feature.enabled?(:sentry_processors_before_send, default_enabled: :yaml)
 
-          return unless exceptions.is_a?(Array)
+            process_first_exception_value(event)
+            process_custom_fingerprint(event)
 
-          entry = exceptions.first
+            event
+          end
 
-          return unless entry.is_a?(Hash)
+          # Sentry can report multiple exceptions in an event. Sanitize
+          # only the first one since that's what is used for grouping.
+          def process_first_exception_value(event_or_payload)
+            exceptions = exceptions(event_or_payload)
 
-          exception_type = entry[:type]
-          raw_message = entry[:value]
+            return unless exceptions.is_a?(Array)
 
-          return unless exception_type&.start_with?('GRPC::')
-          return unless raw_message.present?
+            exception = exceptions.first
 
-          message, debug_str = split_debug_error_string(raw_message)
+            return unless valid_exception?(exception)
 
-          entry[:value] = message if message
-          extra = value[:extra] || {}
-          extra[:grpc_debug_error_string] = debug_str if debug_str
-        end
+            exception_type, raw_message = type_and_value(exception)
 
-        def process_custom_fingerprint(value)
-          fingerprint = value[:fingerprint]
+            return unless exception_type&.start_with?('GRPC::')
+            return unless raw_message.present?
 
-          return value unless custom_grpc_fingerprint?(fingerprint)
+            message, debug_str = split_debug_error_string(raw_message)
 
-          message, _ = split_debug_error_string(fingerprint[1])
-          fingerprint[1] = message if message
-        end
+            set_new_values!(event_or_payload, exception, message, debug_str)
+          end
 
-        private
+          def process_custom_fingerprint(event)
+            fingerprint = fingerprint(event)
 
-        def custom_grpc_fingerprint?(fingerprint)
-          fingerprint.is_a?(Array) && fingerprint.length == 2 && fingerprint[0].start_with?('GRPC::')
-        end
+            return event unless custom_grpc_fingerprint?(fingerprint)
 
-        def split_debug_error_string(message)
-          return unless message
+            message, _ = split_debug_error_string(fingerprint[1])
+            fingerprint[1] = message if message
+          end
 
-          match = DEBUG_ERROR_STRING_REGEX.match(message)
+          private
 
-          return unless match
+          def custom_grpc_fingerprint?(fingerprint)
+            fingerprint.is_a?(Array) && fingerprint.length == 2 && fingerprint[0].start_with?('GRPC::')
+          end
 
-          [match[1], match[2]]
+          def split_debug_error_string(message)
+            return unless message
+
+            match = DEBUG_ERROR_STRING_REGEX.match(message)
+
+            return unless match
+
+            [match[1], match[2]]
+          end
+
+          # The below methods can be removed once we remove the
+          # sentry_processors_before_send feature flag, and we can
+          # assume we always have an Event object
+          def exceptions(event_or_payload)
+            case event_or_payload
+            when Raven::Event
+              # Better in new version, will be event_or_payload.exception.values
+              event_or_payload.instance_variable_get(:@interfaces)[:exception]&.values
+            when Hash
+              event_or_payload.dig(:exception, :values)
+            end
+          end
+
+          def valid_exception?(exception)
+            case exception
+            when Raven::SingleExceptionInterface
+              exception&.value
+            when Hash
+              true
+            else
+              false
+            end
+          end
+
+          def type_and_value(exception)
+            case exception
+            when Raven::SingleExceptionInterface
+              [exception.type, exception.value]
+            when Hash
+              exception.values_at(:type, :value)
+            end
+          end
+
+          def set_new_values!(event_or_payload, exception, message, debug_str)
+            case event_or_payload
+            when Raven::Event
+              # Worse in new version, no setter! Have to poke at the
+              # instance variable
+              exception.value = message if message
+              event_or_payload.extra[:grpc_debug_error_string] = debug_str if debug_str
+            when Hash
+              exception[:value] = message if message
+              extra = event_or_payload[:extra] || {}
+              extra[:grpc_debug_error_string] = debug_str if debug_str
+            end
+          end
+
+          def fingerprint(event_or_payload)
+            case event_or_payload
+            when Raven::Event
+              event_or_payload.fingerprint
+            when Hash
+              event_or_payload[:fingerprint]
+            end
+          end
         end
       end
     end
diff --git a/lib/gitlab/error_tracking/processor/sidekiq_processor.rb b/lib/gitlab/error_tracking/processor/sidekiq_processor.rb
index 272cb689ad5..93310745ece 100644
--- a/lib/gitlab/error_tracking/processor/sidekiq_processor.rb
+++ b/lib/gitlab/error_tracking/processor/sidekiq_processor.rb
@@ -8,39 +8,66 @@ module Gitlab
       class SidekiqProcessor < ::Raven::Processor
         FILTERED_STRING = '[FILTERED]'
 
-        def self.filter_arguments(args, klass)
-          args.lazy.with_index.map do |arg, i|
-            case arg
-            when Numeric
-              arg
-            else
-              if permitted_arguments_for_worker(klass).include?(i)
+        class << self
+          def filter_arguments(args, klass)
+            args.lazy.with_index.map do |arg, i|
+              case arg
+              when Numeric
                 arg
               else
-                FILTERED_STRING
+                if permitted_arguments_for_worker(klass).include?(i)
+                  arg
+                else
+                  FILTERED_STRING
+                end
               end
             end
           end
-        end
 
-        def self.permitted_arguments_for_worker(klass)
-          @permitted_arguments_for_worker ||= {}
-          @permitted_arguments_for_worker[klass] ||=
-            begin
-              klass.constantize&.loggable_arguments&.to_set
-            rescue
-              Set.new
+          def permitted_arguments_for_worker(klass)
+            @permitted_arguments_for_worker ||= {}
+            @permitted_arguments_for_worker[klass] ||=
+              begin
+                klass.constantize&.loggable_arguments&.to_set
+              rescue
+                Set.new
+              end
+          end
+
+          def loggable_arguments(args, klass)
+            Gitlab::Utils::LogLimitedArray
+              .log_limited_array(filter_arguments(args, klass))
+              .map(&:to_s)
+              .to_a
+          end
+
+          def call(event)
+            return event unless ::Feature.enabled?(:sentry_processors_before_send, default_enabled: :yaml)
+
+            sidekiq = event&.extra&.dig(:sidekiq)
+
+            return event unless sidekiq
+
+            sidekiq = sidekiq.deep_dup
+            sidekiq.delete(:jobstr)
+
+            # 'args' in this hash => from Gitlab::ErrorTracking.track_*
+            # 'args' in :job => from default error handler
+            job_holder = sidekiq.key?('args') ? sidekiq : sidekiq[:job]
+
+            if job_holder['args']
+              job_holder['args'] = filter_arguments(job_holder['args'], job_holder['class']).to_a
             end
-        end
 
-        def self.loggable_arguments(args, klass)
-          Gitlab::Utils::LogLimitedArray
-            .log_limited_array(filter_arguments(args, klass))
-            .map(&:to_s)
-            .to_a
+            event.extra[:sidekiq] = sidekiq
+
+            event
+          end
         end
 
         def process(value, key = nil)
+          return value if ::Feature.enabled?(:sentry_processors_before_send, default_enabled: :yaml)
+
           sidekiq = value.dig(:extra, :sidekiq)
 
           return value unless sidekiq
diff --git a/lib/gitlab/usage_data_counters/known_events/epic_events.yml b/lib/gitlab/usage_data_counters/known_events/epic_events.yml
index 2465dc0f1f1..e682def2a1d 100644
--- a/lib/gitlab/usage_data_counters/known_events/epic_events.yml
+++ b/lib/gitlab/usage_data_counters/known_events/epic_events.yml
@@ -21,6 +21,8 @@
   aggregation: daily
   feature_flag: track_epics_activity
 
+# epic notes
+
 - name: g_project_management_users_creating_epic_notes
   category: epics_usage
   redis_slot: project_management
@@ -39,24 +41,40 @@
   aggregation: daily
   feature_flag: track_epics_activity
 
+# start date events
+
 - name: g_project_management_users_setting_epic_start_date_as_fixed
   category: epics_usage
   redis_slot: project_management
   aggregation: daily
   feature_flag: track_epics_activity
 
+- name: g_project_management_users_updating_fixed_epic_start_date
+  category: epics_usage
+  redis_slot: project_management
+  aggregation: daily
+  feature_flag: track_epics_activity
+
 - name: g_project_management_users_setting_epic_start_date_as_inherited
   category: epics_usage
   redis_slot: project_management
   aggregation: daily
   feature_flag: track_epics_activity
 
+# due date events
+
 - name: g_project_management_users_setting_epic_due_date_as_fixed
   category: epics_usage
   redis_slot: project_management
   aggregation: daily
   feature_flag: track_epics_activity
 
+- name: g_project_management_users_updating_fixed_epic_due_date
+  category: epics_usage
+  redis_slot: project_management
+  aggregation: daily
+  feature_flag: track_epics_activity
+
 - name: g_project_management_users_setting_epic_due_date_as_inherited
   category: epics_usage
   redis_slot: project_management
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index 2a19be4ca52..a44ca4fb093 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -7832,6 +7832,9 @@ msgstr ""
 msgid "CompareRevisions|There was an error while loading the branch/tag list. Please try again."
 msgstr ""
 
+msgid "CompareRevisions|There was an error while searching the branch/tag list. Please try again."
+msgstr ""
+
 msgid "CompareRevisions|There was an error while updating the branch/tag list. Please try again."
 msgstr ""
 
@@ -14447,6 +14450,24 @@ msgstr ""
 msgid "Gitea Import"
 msgstr ""
 
+msgid "GithubIntegration|Create a %{token_link_start}personal access token%{token_link_end} with %{status_html} access granted and paste it here."
+msgstr ""
+
+msgid "GithubIntegration|Obtain statuses for commits and pull requests."
+msgstr ""
+
+msgid "GithubIntegration|Repository URL"
+msgstr ""
+
+msgid "GithubIntegration|Select this if you want GitHub to mark status checks as \"Required\". %{learn_more_link_start}Learn more%{learn_more_link_end}."
+msgstr ""
+
+msgid "GithubIntegration|Static status check names (optional)"
+msgstr ""
+
+msgid "GithubIntegration|This requires mirroring your GitHub repository to this project. %{docs_link}"
+msgstr ""
+
 msgid "Gitlab Pages"
 msgstr ""
 
@@ -16706,9 +16727,6 @@ msgstr ""
 msgid "Integrations|This integration, and inheriting projects were reset."
 msgstr ""
 
-msgid "Integrations|This requires mirroring your GitHub repository to this project. %{docs_link}"
-msgstr ""
-
 msgid "Integrations|To keep this project going, create a new issue."
 msgstr ""
 
@@ -34336,6 +34354,9 @@ msgstr ""
 msgid "What does this command do?"
 msgstr ""
 
+msgid "What is repository mirroring?"
+msgstr ""
+
 msgid "What is squashing?"
 msgstr ""
 
diff --git a/scripts/review_apps/base-config.yaml b/scripts/review_apps/base-config.yaml
index 5b4b557c305..01a94fcee21 100644
--- a/scripts/review_apps/base-config.yaml
+++ b/scripts/review_apps/base-config.yaml
@@ -136,11 +136,9 @@ postgresql:
   metrics:
     enabled: false
   resources:
-    requests:
-      cpu: 550m
+      cpu: 600m
       memory: 1000M
-    limits:
-      cpu: 825m
+      cpu: 1300m
       memory: 1500M
 prometheus:
   install: false
diff --git a/spec/controllers/oauth/authorizations_controller_spec.rb b/spec/controllers/oauth/authorizations_controller_spec.rb
index 2df94a06b3e..21124299b25 100644
--- a/spec/controllers/oauth/authorizations_controller_spec.rb
+++ b/spec/controllers/oauth/authorizations_controller_spec.rb
@@ -54,7 +54,7 @@ RSpec.describe Oauth::AuthorizationsController do
   shared_examples "Implicit grant can't be used in confidential application" do
     context 'when application is confidential' do
       before do
-        application.update(confidential: true)
+        application.update!(confidential: true)
         params[:response_type] = 'token'
       end
 
@@ -96,7 +96,7 @@ RSpec.describe Oauth::AuthorizationsController do
         end
 
         it 'deletes session.user_return_to and redirects when skip authorization' do
-          application.update(trusted: true)
+          application.update!(trusted: true)
           request.session['user_return_to'] = 'http://example.com'
 
           subject
diff --git a/spec/controllers/omniauth_callbacks_controller_spec.rb b/spec/controllers/omniauth_callbacks_controller_spec.rb
index edd587389cb..4a47a4a2a53 100644
--- a/spec/controllers/omniauth_callbacks_controller_spec.rb
+++ b/spec/controllers/omniauth_callbacks_controller_spec.rb
@@ -60,7 +60,7 @@ RSpec.describe OmniauthCallbacksController, type: :controller do
       let(:extern_uid) { 'my-uid' }
 
       before do
-        user.update(failed_attempts: User.maximum_attempts.pred)
+        user.update!(failed_attempts: User.maximum_attempts.pred)
         subject.response = ActionDispatch::Response.new
       end
 
@@ -233,7 +233,7 @@ RSpec.describe OmniauthCallbacksController, type: :controller do
           before do
             stub_env('IN_MEMORY_APPLICATION_SETTINGS', 'false')
             settings = Gitlab::CurrentSettings.current_application_settings
-            settings.update(disabled_oauth_sign_in_sources: [provider.to_s])
+            settings.update!(disabled_oauth_sign_in_sources: [provider.to_s])
           end
 
           it 'prevents login via POST' do
@@ -299,7 +299,7 @@ RSpec.describe OmniauthCallbacksController, type: :controller do
           before do
             stub_omniauth_setting(enabled: true, auto_link_user: true, allow_single_sign_on: ['atlassian_oauth2'])
 
-            user.destroy
+            user.destroy!
           end
 
           it 'denies sign-in if sign-up is enabled, but block_auto_created_users is set' do
@@ -381,7 +381,7 @@ RSpec.describe OmniauthCallbacksController, type: :controller do
 
     context 'sign up' do
       before do
-        user.destroy
+        user.destroy!
       end
 
       it 'denies login if sign up is enabled, but block_auto_created_users is set' do
diff --git a/spec/features/calendar_spec.rb b/spec/features/calendar_spec.rb
index cc04b3b645b..0b73226268d 100644
--- a/spec/features/calendar_spec.rb
+++ b/spec/features/calendar_spec.rb
@@ -64,7 +64,7 @@ RSpec.describe 'Contributions Calendar', :js do
       author_id: user.id
     }
 
-    Event.create(note_comment_params)
+    Event.create!(note_comment_params)
   end
 
   def selected_day_activities(visible: true)
diff --git a/spec/features/clusters/cluster_detail_page_spec.rb b/spec/features/clusters/cluster_detail_page_spec.rb
index 6fe6c099d80..84a18a45d35 100644
--- a/spec/features/clusters/cluster_detail_page_spec.rb
+++ b/spec/features/clusters/cluster_detail_page_spec.rb
@@ -23,7 +23,7 @@ RSpec.describe 'Clusterable > Show page' do
     it 'allow the user to set domain', :js do
       visit cluster_path
 
-      within '.js-cluster-integration-form' do
+      within '.js-cluster-details-form' do
         fill_in('cluster_base_domain', with: 'test.com')
         click_on 'Save changes'
       end
@@ -39,7 +39,7 @@ RSpec.describe 'Clusterable > Show page' do
       end
 
       it 'shows help text with the domain as an alternative to custom domain', :js do
-        within '.js-cluster-integration-form' do
+        within '.js-cluster-details-form' do
           expect(find(cluster_ingress_help_text_selector).text).to include('192.168.1.100')
         end
       end
@@ -49,7 +49,7 @@ RSpec.describe 'Clusterable > Show page' do
       it 'alternative to custom domain is not shown' do
         visit cluster_path
 
-        within '.js-cluster-integration-form' do
+        within '.js-cluster-details-form' do
           expect(page).not_to have_selector(cluster_ingress_help_text_selector)
         end
       end
diff --git a/spec/features/commits_spec.rb b/spec/features/commits_spec.rb
index 1622979812d..2dafaedd262 100644
--- a/spec/features/commits_spec.rb
+++ b/spec/features/commits_spec.rb
@@ -140,7 +140,7 @@ RSpec.describe 'Commits' do
 
       context 'when accessing internal project with disallowed access', :js, quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/299575' do
         before do
-          project.update(
+          project.update!(
             visibility_level: Gitlab::VisibilityLevel::INTERNAL,
             public_builds: false)
           create(:ci_job_artifact, :archive, file: artifacts_file, job: build)
diff --git a/spec/features/error_tracking/user_sees_error_index_spec.rb b/spec/features/error_tracking/user_sees_error_index_spec.rb
index a4b15432ef3..074aca4c152 100644
--- a/spec/features/error_tracking/user_sees_error_index_spec.rb
+++ b/spec/features/error_tracking/user_sees_error_index_spec.rb
@@ -41,7 +41,7 @@ RSpec.describe 'View error index page', :js, :use_clean_rails_memory_store_cachi
 
   context 'with error tracking settings disabled' do
     before do
-      project_error_tracking_settings.update(enabled: false)
+      project_error_tracking_settings.update!(enabled: false)
       sign_in(project.owner)
 
       visit project_error_tracking_index_path(project)
diff --git a/spec/features/groups/clusters/user_spec.rb b/spec/features/groups/clusters/user_spec.rb
index 97f8864aab2..2a7ededa39b 100644
--- a/spec/features/groups/clusters/user_spec.rb
+++ b/spec/features/groups/clusters/user_spec.rb
@@ -97,7 +97,7 @@ RSpec.describe 'User Cluster', :js do
     context 'when user disables the cluster' do
       before do
         page.find(:css, '.js-cluster-enable-toggle-area .js-project-feature-toggle').click
-        page.within('.js-cluster-integration-form') { click_button 'Save changes' }
+        page.within('.js-cluster-details-form') { click_button 'Save changes' }
       end
 
       it 'user sees the successful message' do
diff --git a/spec/features/groups/members/request_access_spec.rb b/spec/features/groups/members/request_access_spec.rb
index 307cb63ec8e..827962fee61 100644
--- a/spec/features/groups/members/request_access_spec.rb
+++ b/spec/features/groups/members/request_access_spec.rb
@@ -15,7 +15,7 @@ RSpec.describe 'Groups > Members > Request access' do
   end
 
   it 'request access feature is disabled' do
-    group.update(request_access_enabled: false)
+    group.update!(request_access_enabled: false)
     visit group_path(group)
 
     expect(page).not_to have_content 'Request Access'
diff --git a/spec/features/profiles/emails_spec.rb b/spec/features/profiles/emails_spec.rb
index bdf1f8b022a..6b6f628e2d5 100644
--- a/spec/features/profiles/emails_spec.rb
+++ b/spec/features/profiles/emails_spec.rb
@@ -43,7 +43,7 @@ RSpec.describe 'Profile > Emails' do
   end
 
   it 'user removes email' do
-    user.emails.create(email: 'my@email.com')
+    user.emails.create!(email: 'my@email.com')
     visit profile_emails_path
     expect(page).to have_content("my@email.com")
 
@@ -52,7 +52,7 @@ RSpec.describe 'Profile > Emails' do
   end
 
   it 'user confirms email' do
-    email = user.emails.create(email: 'my@email.com')
+    email = user.emails.create!(email: 'my@email.com')
     visit profile_emails_path
     expect(page).to have_content("#{email.email} Unverified")
 
@@ -64,7 +64,7 @@ RSpec.describe 'Profile > Emails' do
   end
 
   it 'user re-sends confirmation email' do
-    email = user.emails.create(email: 'my@email.com')
+    email = user.emails.create!(email: 'my@email.com')
     visit profile_emails_path
 
     expect { click_link("Resend confirmation email") }.to have_enqueued_job.on_queue('mailers')
@@ -72,7 +72,7 @@ RSpec.describe 'Profile > Emails' do
   end
 
   it 'old unconfirmed emails show Send Confirmation button' do
-    email = user.emails.create(email: 'my@email.com')
+    email = user.emails.create!(email: 'my@email.com')
     email.update_attribute(:confirmation_sent_at, nil)
     visit profile_emails_path
 
diff --git a/spec/features/profiles/password_spec.rb b/spec/features/profiles/password_spec.rb
index 039966080d8..c9059395377 100644
--- a/spec/features/profiles/password_spec.rb
+++ b/spec/features/profiles/password_spec.rb
@@ -119,7 +119,7 @@ RSpec.describe 'Profile > Password' do
     before do
       sign_in(user)
 
-      user.update(password_expires_at: 1.hour.ago)
+      user.update!(password_expires_at: 1.hour.ago)
       user.identities.delete
       expect(user.ldap_user?).to eq false
     end
diff --git a/spec/features/profiles/personal_access_tokens_spec.rb b/spec/features/profiles/personal_access_tokens_spec.rb
index 9e56ef087ae..c85657c89d5 100644
--- a/spec/features/profiles/personal_access_tokens_spec.rb
+++ b/spec/features/profiles/personal_access_tokens_spec.rb
@@ -95,7 +95,7 @@ RSpec.describe 'Profile > Personal Access Tokens', :js do
     end
 
     it "removes expired tokens from 'active' section" do
-      personal_access_token.update(expires_at: 5.days.ago)
+      personal_access_token.update!(expires_at: 5.days.ago)
       visit profile_personal_access_tokens_path
 
       expect(page).to have_selector(".settings-message")
diff --git a/spec/features/projects/clusters/gcp_spec.rb b/spec/features/projects/clusters/gcp_spec.rb
index d34dde6a8f2..8c497cded8e 100644
--- a/spec/features/projects/clusters/gcp_spec.rb
+++ b/spec/features/projects/clusters/gcp_spec.rb
@@ -119,7 +119,7 @@ RSpec.describe 'Gcp Cluster', :js do
       context 'when user disables the cluster' do
         before do
           page.find(:css, '.js-cluster-enable-toggle-area .js-project-feature-toggle').click
-          page.within('.js-cluster-integration-form') { click_button 'Save changes' }
+          page.within('.js-cluster-details-form') { click_button 'Save changes' }
         end
 
         it 'user sees the successful message' do
diff --git a/spec/features/projects/clusters/user_spec.rb b/spec/features/projects/clusters/user_spec.rb
index 748eba558aa..5b60edbcf87 100644
--- a/spec/features/projects/clusters/user_spec.rb
+++ b/spec/features/projects/clusters/user_spec.rb
@@ -84,7 +84,7 @@ RSpec.describe 'User Cluster', :js do
     context 'when user disables the cluster' do
       before do
         page.find(:css, '.js-cluster-enable-toggle-area .js-project-feature-toggle').click
-        page.within('.js-cluster-integration-form') { click_button 'Save changes' }
+        page.within('.js-cluster-details-form') { click_button 'Save changes' }
       end
 
       it 'user sees the successful message' do
diff --git a/spec/features/projects/clusters_spec.rb b/spec/features/projects/clusters_spec.rb
index 6da66989b09..6b03301aa74 100644
--- a/spec/features/projects/clusters_spec.rb
+++ b/spec/features/projects/clusters_spec.rb
@@ -58,7 +58,7 @@ RSpec.describe 'Clusters', :js do
         before do
           click_link 'default-cluster'
           fill_in 'cluster_environment_scope', with: 'production/*'
-          within '.js-cluster-integration-form' do
+          within '.js-cluster-details-form' do
             click_button 'Save changes'
           end
         end
@@ -149,7 +149,7 @@ RSpec.describe 'Clusters', :js do
         before do
           click_link 'default-cluster'
           fill_in 'cluster_environment_scope', with: 'production/*'
-          within ".js-cluster-integration-form" do
+          within ".js-cluster-details-form" do
             click_button 'Save changes'
           end
         end
diff --git a/spec/features/runners_spec.rb b/spec/features/runners_spec.rb
index cc024ab8f35..21eef64e345 100644
--- a/spec/features/runners_spec.rb
+++ b/spec/features/runners_spec.rb
@@ -92,7 +92,7 @@ RSpec.describe 'Runners' do
 
       context 'when a runner has a tag' do
         before do
-          specific_runner.update(tag_list: ['tag'])
+          specific_runner.update!(tag_list: ['tag'])
         end
 
         it 'user edits runner not to run untagged jobs' do
@@ -370,7 +370,7 @@ RSpec.describe 'Runners' do
 
       context 'when a runner has a tag' do
         before do
-          runner.update(tag_list: ['tag'])
+          runner.update!(tag_list: ['tag'])
         end
 
         it 'user edits runner not to run untagged jobs' do
@@ -450,7 +450,7 @@ RSpec.describe 'Runners' do
 
       context 'when a runner has a tag' do
         before do
-          runner.update(tag_list: ['tag'])
+          runner.update!(tag_list: ['tag'])
         end
 
         it 'user edits runner not to run untagged jobs' do
diff --git a/spec/features/security/project/internal_access_spec.rb b/spec/features/security/project/internal_access_spec.rb
index 2440b738db3..9dcef13757a 100644
--- a/spec/features/security/project/internal_access_spec.rb
+++ b/spec/features/security/project/internal_access_spec.rb
@@ -356,7 +356,7 @@ RSpec.describe "Internal Project Access" do
 
     context "when allowed for public and internal" do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:admin) }
@@ -372,7 +372,7 @@ RSpec.describe "Internal Project Access" do
 
     context "when disallowed for public and internal" do
       before do
-        project.update(public_builds: false)
+        project.update!(public_builds: false)
       end
 
       it('is allowed for admin when admin mode is enabled', :enable_admin_mode) { is_expected.to be_allowed_for(:admin) }
@@ -396,7 +396,7 @@ RSpec.describe "Internal Project Access" do
 
     context "when allowed for public and internal" do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:admin) }
@@ -412,7 +412,7 @@ RSpec.describe "Internal Project Access" do
 
     context "when disallowed for public and internal" do
       before do
-        project.update(public_builds: false)
+        project.update!(public_builds: false)
       end
 
       it('is allowed for admin when admin mode is enabled', :enable_admin_mode) { is_expected.to be_allowed_for(:admin) }
@@ -436,7 +436,7 @@ RSpec.describe "Internal Project Access" do
 
     context 'when allowed for public and internal' do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:admin) }
@@ -452,7 +452,7 @@ RSpec.describe "Internal Project Access" do
 
     context 'when disallowed for public and internal' do
       before do
-        project.update(public_builds: false)
+        project.update!(public_builds: false)
       end
 
       it('is allowed for admin when admin mode is enabled', :enable_admin_mode) { is_expected.to be_allowed_for(:admin) }
diff --git a/spec/features/security/project/private_access_spec.rb b/spec/features/security/project/private_access_spec.rb
index 9d3109b92e6..5a200bea80a 100644
--- a/spec/features/security/project/private_access_spec.rb
+++ b/spec/features/security/project/private_access_spec.rb
@@ -319,7 +319,7 @@ RSpec.describe "Private Project Access" do
 
     context 'when public builds is enabled' do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:guest).of(project) }
@@ -348,7 +348,7 @@ RSpec.describe "Private Project Access" do
 
     context 'when public builds is enabled' do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:guest).of(project) }
@@ -375,7 +375,7 @@ RSpec.describe "Private Project Access" do
 
     context 'when public builds is enabled' do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:guest).of(project) }
@@ -405,7 +405,7 @@ RSpec.describe "Private Project Access" do
 
     context 'when public builds is enabled' do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:guest).of(project) }
@@ -414,7 +414,7 @@ RSpec.describe "Private Project Access" do
     context 'when public buils are disabled' do
       before do
         project.public_builds = false
-        project.save
+        project.save!
       end
 
       it { is_expected.to be_denied_for(:guest).of(project) }
@@ -440,7 +440,7 @@ RSpec.describe "Private Project Access" do
 
     context 'when public builds is enabled' do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:guest).of(project) }
@@ -448,7 +448,7 @@ RSpec.describe "Private Project Access" do
 
     context 'when public builds is disabled' do
       before do
-        project.update(public_builds: false)
+        project.update!(public_builds: false)
       end
 
       it { is_expected.to be_denied_for(:guest).of(project) }
diff --git a/spec/features/security/project/public_access_spec.rb b/spec/features/security/project/public_access_spec.rb
index 28a1f1cda7f..8ceb6920e77 100644
--- a/spec/features/security/project/public_access_spec.rb
+++ b/spec/features/security/project/public_access_spec.rb
@@ -164,7 +164,7 @@ RSpec.describe "Public Project Access" do
 
     context "when allowed for public" do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:admin) }
@@ -180,7 +180,7 @@ RSpec.describe "Public Project Access" do
 
     context "when disallowed for public" do
       before do
-        project.update(public_builds: false)
+        project.update!(public_builds: false)
       end
 
       it('is allowed for admin when admin mode is enabled', :enable_admin_mode) { is_expected.to be_allowed_for(:admin) }
@@ -204,7 +204,7 @@ RSpec.describe "Public Project Access" do
 
     context "when allowed for public" do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:admin) }
@@ -220,7 +220,7 @@ RSpec.describe "Public Project Access" do
 
     context "when disallowed for public" do
       before do
-        project.update(public_builds: false)
+        project.update!(public_builds: false)
       end
 
       it('is allowed for admin when admin mode is enabled', :enable_admin_mode) { is_expected.to be_allowed_for(:admin) }
@@ -244,7 +244,7 @@ RSpec.describe "Public Project Access" do
 
     context 'when allowed for public' do
       before do
-        project.update(public_builds: true)
+        project.update!(public_builds: true)
       end
 
       it { is_expected.to be_allowed_for(:admin) }
@@ -260,7 +260,7 @@ RSpec.describe "Public Project Access" do
 
     context 'when disallowed for public' do
       before do
-        project.update(public_builds: false)
+        project.update!(public_builds: false)
       end
 
       it('is allowed for admin when admin mode is enabled', :enable_admin_mode) { is_expected.to be_allowed_for(:admin) }
diff --git a/spec/features/users/login_spec.rb b/spec/features/users/login_spec.rb
index d6057c55b77..e60d9d6ab69 100644
--- a/spec/features/users/login_spec.rb
+++ b/spec/features/users/login_spec.rb
@@ -239,7 +239,7 @@ RSpec.describe 'Login' do
           expect(codes.size).to eq 10
 
           # Ensure the generated codes get saved
-          user.save(touch: false)
+          user.save!(touch: false)
         end
 
         context 'with valid code' do
diff --git a/spec/features/users/show_spec.rb b/spec/features/users/show_spec.rb
index a8372800700..56d2aaea203 100644
--- a/spec/features/users/show_spec.rb
+++ b/spec/features/users/show_spec.rb
@@ -33,7 +33,7 @@ RSpec.describe 'User page' do
 
     context 'work information' do
       it 'shows job title and organization details' do
-        user.update(organization: 'GitLab - work info test', job_title: 'Frontend Engineer')
+        user.update!(organization: 'GitLab - work info test', job_title: 'Frontend Engineer')
 
         subject
 
@@ -41,7 +41,7 @@ RSpec.describe 'User page' do
       end
 
       it 'shows job title' do
-        user.update(organization: nil, job_title: 'Frontend Engineer - work info test')
+        user.update!(organization: nil, job_title: 'Frontend Engineer - work info test')
 
         subject
 
@@ -49,7 +49,7 @@ RSpec.describe 'User page' do
       end
 
       it 'shows organization details' do
-        user.update(organization: 'GitLab - work info test', job_title: '')
+        user.update!(organization: 'GitLab - work info test', job_title: '')
 
         subject
 
diff --git a/spec/frontend/projects/compare/components/revision_dropdown_spec.js b/spec/frontend/projects/compare/components/revision_dropdown_spec.js
index 69d3167c99c..aab9607ceae 100644
--- a/spec/frontend/projects/compare/components/revision_dropdown_spec.js
+++ b/spec/frontend/projects/compare/components/revision_dropdown_spec.js
@@ -1,4 +1,4 @@
-import { GlDropdown } from '@gitlab/ui';
+import { GlDropdown, GlSearchBoxByType } from '@gitlab/ui';
 import { shallowMount } from '@vue/test-utils';
 import AxiosMockAdapter from 'axios-mock-adapter';
 import createFlash from '~/flash';
@@ -23,6 +23,10 @@ describe('RevisionDropdown component', () => {
         ...defaultProps,
         ...props,
       },
+      stubs: {
+        GlDropdown,
+        GlSearchBoxByType,
+      },
     });
   };
 
@@ -36,6 +40,7 @@ describe('RevisionDropdown component', () => {
   });
 
   const findGlDropdown = () => wrapper.find(GlDropdown);
+  const findSearchBox = () => wrapper.find(GlSearchBoxByType);
 
   it('sets hidden input', () => {
     createComponent();
@@ -85,6 +90,40 @@ describe('RevisionDropdown component', () => {
     expect(axios.get).toHaveBeenLastCalledWith(newRefsProjectPath);
   });
 
+  describe('search', () => {
+    it('shows flash message on error', async () => {
+      axiosMock.onGet('some/invalid/path').replyOnce(404);
+
+      createComponent();
+
+      await wrapper.vm.searchBranchesAndTags();
+      expect(createFlash).toHaveBeenCalled();
+    });
+
+    it('makes request with search param', async () => {
+      jest.spyOn(axios, 'get').mockResolvedValue({
+        data: {
+          Branches: [],
+          Tags: [],
+        },
+      });
+
+      const mockSearchTerm = 'foobar';
+      createComponent();
+      findSearchBox().vm.$emit('input', mockSearchTerm);
+      await axios.waitForAll();
+
+      expect(axios.get).toHaveBeenCalledWith(
+        defaultProps.refsProjectPath,
+        expect.objectContaining({
+          params: {
+            search: mockSearchTerm,
+          },
+        }),
+      );
+    });
+  });
+
   describe('GlDropdown component', () => {
     it('renders props', () => {
       createComponent();
diff --git a/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js b/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js
index 5364e2d5f52..c5aeb6ec029 100644
--- a/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js
+++ b/spec/frontend/vue_shared/components/markdown/suggestion_diff_header_spec.js
@@ -16,18 +16,12 @@ const DEFAULT_PROPS = {
 describe('Suggestion Diff component', () => {
   let wrapper;
 
-  const createComponent = (props, glFeatures = {}) => {
+  const createComponent = (props) => {
     wrapper = shallowMount(SuggestionDiffHeader, {
       propsData: {
         ...DEFAULT_PROPS,
         ...props,
       },
-      provide: {
-        glFeatures: {
-          batchSuggestions: true,
-          ...glFeatures,
-        },
-      },
     });
   };
 
@@ -211,18 +205,6 @@ describe('Suggestion Diff component', () => {
     });
   });
 
-  describe('batchSuggestions feature flag is set to false', () => {
-    beforeEach(() => {
-      createComponent({}, { batchSuggestions: false });
-    });
-
-    it('disables add to batch buttons but keeps apply suggestion enabled', () => {
-      expect(findApplyButton().exists()).toBe(true);
-      expect(findAddToBatchButton().exists()).toBe(false);
-      expect(findApplyButton().attributes('disabled')).not.toBe('true');
-    });
-  });
-
   describe('canApply is set to false', () => {
     beforeEach(() => {
       createComponent({ canApply: false });
diff --git a/spec/graphql/resolvers/ci/runner_setup_resolver_spec.rb b/spec/graphql/resolvers/ci/runner_setup_resolver_spec.rb
index 3d004290d9b..13ef89023d9 100644
--- a/spec/graphql/resolvers/ci/runner_setup_resolver_spec.rb
+++ b/spec/graphql/resolvers/ci/runner_setup_resolver_spec.rb
@@ -8,12 +8,11 @@ RSpec.describe Resolvers::Ci::RunnerSetupResolver do
   describe '#resolve' do
     let(:user) { create(:user) }
 
-    subject(:resolve_subject) { resolve(described_class, ctx: { current_user: user }, args: { platform: platform, architecture: 'amd64' }.merge(target_param)) }
+    subject(:resolve_subject) { resolve(described_class, ctx: { current_user: user }, args: { platform: platform, architecture: 'amd64' }) }
 
     context 'with container platforms' do
       let(:platform) { 'docker' }
       let(:project) { create(:project) }
-      let(:target_param) { { project_id: project.to_global_id } }
 
       it 'returns install instructions' do
         expect(resolve_subject[:install_instructions]).not_to eq(nil)
@@ -27,77 +26,9 @@ RSpec.describe Resolvers::Ci::RunnerSetupResolver do
     context 'with regular platforms' do
       let(:platform) { 'linux' }
 
-      context 'without target parameter' do
-        let(:target_param) { {} }
-
-        context 'when user is not admin' do
-          it 'returns access error' do
-            expect { resolve_subject }.to raise_error(Gitlab::Graphql::Errors::ResourceNotAvailable)
-          end
-        end
-
-        context 'when user is admin' do
-          before do
-            user.update!(admin: true)
-          end
-
-          it 'returns install and register instructions' do
-            expect(resolve_subject.keys).to contain_exactly(:install_instructions, :register_instructions)
-            expect(resolve_subject.values).not_to include(nil)
-          end
-        end
-      end
-
-      context 'with project target parameter' do
-        let(:project) { create(:project) }
-        let(:target_param) { { project_id: project.to_global_id } }
-
-        context 'when user has access to admin builds on project' do
-          before do
-            project.add_maintainer(user)
-          end
-
-          it 'returns install and register instructions' do
-            expect(resolve_subject.keys).to contain_exactly(:install_instructions, :register_instructions)
-            expect(resolve_subject.values).not_to include(nil)
-          end
-        end
-
-        context 'when user does not have access to admin builds on project' do
-          before do
-            project.add_developer(user)
-          end
-
-          it 'returns access error' do
-            expect { resolve_subject }.to raise_error(Gitlab::Graphql::Errors::ResourceNotAvailable)
-          end
-        end
-      end
-
-      context 'with group target parameter' do
-        let(:group) { create(:group) }
-        let(:target_param) { { group_id: group.to_global_id } }
-
-        context 'when user has access to admin builds on group' do
-          before do
-            group.add_owner(user)
-          end
-
-          it 'returns install and register instructions' do
-            expect(resolve_subject.keys).to contain_exactly(:install_instructions, :register_instructions)
-            expect(resolve_subject.values).not_to include(nil)
-          end
-        end
-
-        context 'when user does not have access to admin builds on group' do
-          before do
-            group.add_developer(user)
-          end
-
-          it 'returns access error' do
-            expect { resolve_subject }.to raise_error(Gitlab::Graphql::Errors::ResourceNotAvailable)
-          end
-        end
+      it 'returns install and register instructions' do
+        expect(resolve_subject.keys).to contain_exactly(:install_instructions, :register_instructions)
+        expect(resolve_subject.values).not_to include(nil)
       end
     end
   end
diff --git a/spec/lib/gitlab/ci/runner_instructions_spec.rb b/spec/lib/gitlab/ci/runner_instructions_spec.rb
index 34fe56bfe68..f872c631a50 100644
--- a/spec/lib/gitlab/ci/runner_instructions_spec.rb
+++ b/spec/lib/gitlab/ci/runner_instructions_spec.rb
@@ -6,7 +6,6 @@ RSpec.describe Gitlab::Ci::RunnerInstructions do
   using RSpec::Parameterized::TableSyntax
 
   let(:params) { {} }
-  let(:user) { create(:user) }
 
   describe 'OS' do
     Gitlab::Ci::RunnerInstructions::OS.each do |name, subject|
@@ -37,7 +36,7 @@ RSpec.describe Gitlab::Ci::RunnerInstructions do
   end
 
   describe '#install_script' do
-    subject { described_class.new(current_user: user, **params) }
+    subject { described_class.new(**params) }
 
     context 'invalid params' do
       where(:current_params, :expected_error_message) do
@@ -106,117 +105,18 @@ RSpec.describe Gitlab::Ci::RunnerInstructions do
       end
     end
 
-    context 'group' do
-      let(:group) { create(:group) }
-
-      subject { described_class.new(current_user: user, group: group, **params) }
-
-      context 'user is owner' do
-        before do
-          group.add_owner(user)
-        end
-
-        with_them do
-          let(:params) { { os: commands.each_key.first, arch: 'foo' } }
-
-          it 'have correct configurations' do
-            result = subject.register_command
-
-            expect(result).to include("#{commands[commands.each_key.first]} register")
-            expect(result).to include("--registration-token $REGISTRATION_TOKEN")
-            expect(result).to include("--url #{Gitlab::Routing.url_helpers.root_url(only_path: false)}")
-          end
-        end
-      end
-
-      context 'user is not owner' do
-        where(:user_permission) do
-          [:maintainer, :developer, :reporter, :guest]
-        end
-
-        with_them do
-          before do
-            create(:group_member, user_permission, group: group, user: user)
-          end
-
-          it 'raises error' do
-            result = subject.register_command
-
-            expect(result).to be_nil
-            expect(subject.errors).to include("Gitlab::Access::AccessDeniedError")
-          end
-        end
-      end
-    end
-
-    context 'project' do
-      let(:project) { create(:project) }
-
-      subject { described_class.new(current_user: user, project: project, **params) }
-
-      context 'user is maintainer' do
-        before do
-          project.add_maintainer(user)
-        end
-
-        with_them do
-          let(:params) { { os: commands.each_key.first, arch: 'foo' } }
-
-          it 'have correct configurations' do
-            result = subject.register_command
-
-            expect(result).to include("#{commands[commands.each_key.first]} register")
-            expect(result).to include("--registration-token $REGISTRATION_TOKEN")
-            expect(result).to include("--url #{Gitlab::Routing.url_helpers.root_url(only_path: false)}")
-          end
-        end
-      end
-
-      context 'user is not maintainer' do
-        where(:user_permission) do
-          [:developer, :reporter, :guest]
-        end
-
-        with_them do
-          before do
-            create(:project_member, user_permission, project: project, user: user)
-          end
-
-          it 'raises error' do
-            result = subject.register_command
-
-            expect(result).to be_nil
-            expect(subject.errors).to include("Gitlab::Access::AccessDeniedError")
-          end
-        end
-      end
-    end
-
     context 'instance' do
-      subject { described_class.new(current_user: user, **params) }
+      subject { described_class.new(**params) }
 
-      context 'user is admin' do
-        let(:user) { create(:user, :admin) }
+      with_them do
+        let(:params) { { os: commands.each_key.first, arch: 'foo' } }
 
-        with_them do
-          let(:params) { { os: commands.each_key.first, arch: 'foo' } }
-
-          it 'have correct configurations' do
-            result = subject.register_command
-
-            expect(result).to include("#{commands[commands.each_key.first]} register")
-            expect(result).to include("--registration-token $REGISTRATION_TOKEN")
-            expect(result).to include("--url #{Gitlab::Routing.url_helpers.root_url(only_path: false)}")
-          end
-        end
-      end
-
-      context 'user is not admin' do
-        it 'raises error' do
+        it 'have correct configurations' do
           result = subject.register_command
 
-          expect(result).to be_nil
-          expect(subject.errors).to include("Gitlab::Access::AccessDeniedError")
+          expect(result).to include("#{commands[commands.each_key.first]} register")
+          expect(result).to include("--registration-token $REGISTRATION_TOKEN")
+          expect(result).to include("--url #{Gitlab::Routing.url_helpers.root_url(only_path: false)}")
         end
       end
     end
diff --git a/spec/lib/gitlab/error_tracking/processor/context_payload_processor_spec.rb b/spec/lib/gitlab/error_tracking/processor/context_payload_processor_spec.rb
index 0db40eca989..2a4478ded6b 100644
--- a/spec/lib/gitlab/error_tracking/processor/context_payload_processor_spec.rb
+++ b/spec/lib/gitlab/error_tracking/processor/context_payload_processor_spec.rb
@@ -1,45 +1,66 @@
 # frozen_string_literal: true
 
-require 'fast_spec_helper'
+require 'spec_helper'
 
 RSpec.describe Gitlab::ErrorTracking::Processor::ContextPayloadProcessor do
-  subject(:processor) { described_class.new }
+  shared_examples 'processing an exception' do
+    before do
+      allow_next_instance_of(Gitlab::ErrorTracking::ContextPayloadGenerator) do |generator|
+        allow(generator).to receive(:generate).and_return(
+          user: { username: 'root' },
+          tags: { locale: 'en', program: 'test', feature_category: 'feature_a', correlation_id: 'cid' },
+          extra: { some_info: 'info' }
+        )
+      end
+    end
 
-  before do
-    allow_next_instance_of(Gitlab::ErrorTracking::ContextPayloadGenerator) do |generator|
-      allow(generator).to receive(:generate).and_return(
-        user: { username: 'root' },
-        tags: { locale: 'en', program: 'test', feature_category: 'feature_a', correlation_id: 'cid' },
-        extra: { some_info: 'info' }
-      )
+    let(:payload) do
+      {
+        user: { ip_address: '127.0.0.1' },
+        tags: { priority: 'high' },
+        extra: { sidekiq: { class: 'SomeWorker', args: ['[FILTERED]', 1, 2] } }
+      }
+    end
+
+    it 'merges the context payload into event payload', :aggregate_failures do
+      expect(result_hash[:user]).to eq(ip_address: '127.0.0.1', username: 'root')
+
+      expect(result_hash[:tags])
+        .to eq(priority: 'high',
+               locale: 'en',
+               program: 'test',
+               feature_category: 'feature_a',
+               correlation_id: 'cid')
+
+      expect(result_hash[:extra])
+        .to include(some_info: 'info',
+                    sidekiq: { class: 'SomeWorker', args: ['[FILTERED]', 1, 2] })
     end
   end
 
-  it 'merges the context payload into event payload' do
-    payload = {
-      user: { ip_address: '127.0.0.1' },
-      tags: { priority: 'high' },
-      extra: { sidekiq: { class: 'SomeWorker', args: ['[FILTERED]', 1, 2] } }
-    }
+  describe '.call' do
+    let(:event) { Raven::Event.new(payload) }
+    let(:result_hash) { described_class.call(event).to_hash }
 
-    processor.process(payload)
+    it_behaves_like 'processing an exception'
 
-    expect(payload).to eql(
-      user: {
-        ip_address: '127.0.0.1',
-        username: 'root'
-      },
-      tags: {
-        priority: 'high',
-        locale: 'en',
-        program: 'test',
-        feature_category: 'feature_a',
-        correlation_id: 'cid'
-      },
-      extra: {
-        some_info: 'info',
-        sidekiq: { class: 'SomeWorker', args: ['[FILTERED]', 1, 2] }
-      }
-    )
+    context 'when followed by #process' do
+      let(:result_hash) { described_class.new.process(described_class.call(event).to_hash) }
+
+      it_behaves_like 'processing an exception'
+    end
+  end
+
+  describe '#process' do
+    let(:event) { Raven::Event.new(payload) }
+    let(:result_hash) { described_class.new.process(event.to_hash) }
+
+    context 'with sentry_processors_before_send disabled' do
+      before do
+        stub_feature_flags(sentry_processors_before_send: false)
+      end
+
+      it_behaves_like 'processing an exception'
+    end
   end
 end
diff --git a/spec/lib/gitlab/error_tracking/processor/grpc_error_processor_spec.rb b/spec/lib/gitlab/error_tracking/processor/grpc_error_processor_spec.rb
index 797707114a1..4808fdf2f06 100644
--- a/spec/lib/gitlab/error_tracking/processor/grpc_error_processor_spec.rb
+++ b/spec/lib/gitlab/error_tracking/processor/grpc_error_processor_spec.rb
@@ -3,73 +3,83 @@
 require 'spec_helper'
 
 RSpec.describe Gitlab::ErrorTracking::Processor::GrpcErrorProcessor do
-  describe '#process' do
-    subject { described_class.new }
-
+  shared_examples 'processing an exception' do
     context 'when there is no GRPC exception' do
+      let(:exception) { RuntimeError.new }
       let(:data) { { fingerprint: ['ArgumentError', 'Missing arguments'] } }
 
       it 'leaves data unchanged' do
-        expect(subject.process(data)).to eq(data)
+        expect(result_hash).to include(data)
       end
     end
 
     context 'when there is a GPRC exception with a debug string' do
+      let(:exception) { GRPC::DeadlineExceeded.new('Deadline Exceeded', {}, '{"hello":1}') }
+
       let(:data) do
         {
-          exception: {
-            values: [
-              {
-                type: "GRPC::DeadlineExceeded",
-                value: "4:DeadlineExceeded. debug_error_string:{\"hello\":1}"
-              }
-            ]
-          },
           extra: {
             caller: 'test'
           },
           fingerprint: [
-            "GRPC::DeadlineExceeded",
-            "4:Deadline Exceeded. debug_error_string:{\"created\":\"@1598938192.005782000\",\"description\":\"Error received from peer unix:/home/git/gitalypraefect.socket\",\"file\":\"src/core/lib/surface/call.cc\",\"file_line\":1055,\"grpc_message\":\"Deadline Exceeded\",\"grpc_status\":4}"
+            'GRPC::DeadlineExceeded',
+            '4:Deadline Exceeded. debug_error_string:{"created":"@1598938192.005782000","description":"Error received from peer unix:/home/git/gitalypraefect.socket","file":"src/core/lib/surface/call.cc","file_line":1055,"grpc_message":"Deadline Exceeded","grpc_status":4}'
           ]
         }
       end
 
-      let(:expected) do
-        {
-          fingerprint: [
-            "GRPC::DeadlineExceeded",
-            "4:Deadline Exceeded."
-          ],
-          exception: {
-            values: [
-              {
-                type: "GRPC::DeadlineExceeded",
-                value: "4:DeadlineExceeded."
-              }
-            ]
-          },
-          extra: {
-            caller: 'test',
-            grpc_debug_error_string: "{\"hello\":1}"
-         }
-        }
-      end
-
       it 'removes the debug error string and stores it as an extra field' do
-        expect(subject.process(data)).to eq(expected)
+        expect(result_hash[:fingerprint])
+          .to eq(['GRPC::DeadlineExceeded', '4:Deadline Exceeded.'])
+
+        expect(result_hash[:exception][:values].first)
+          .to include(type: 'GRPC::DeadlineExceeded', value: '4:Deadline Exceeded.')
+
+        expect(result_hash[:extra])
+          .to include(caller: 'test', grpc_debug_error_string: '{"hello":1}')
       end
 
       context 'with no custom fingerprint' do
-        before do
-          data.delete(:fingerprint)
-          expected.delete(:fingerprint)
+        let(:data) do
+          { extra: { caller: 'test' } }
         end
 
         it 'removes the debug error string and stores it as an extra field' do
-          expect(subject.process(data)).to eq(expected)
+          expect(result_hash).not_to include(:fingerprint)
+
+          expect(result_hash[:exception][:values].first)
+            .to include(type: 'GRPC::DeadlineExceeded', value: '4:Deadline Exceeded.')
+
+          expect(result_hash[:extra])
+            .to include(caller: 'test', grpc_debug_error_string: '{"hello":1}')
         end
       end
     end
   end
+
+  describe '.call' do
+    let(:event) { Raven::Event.from_exception(exception, data) }
+    let(:result_hash) { described_class.call(event).to_hash }
+
+    it_behaves_like 'processing an exception'
+
+    context 'when followed by #process' do
+      let(:result_hash) { described_class.new.process(described_class.call(event).to_hash) }
+
+      it_behaves_like 'processing an exception'
+    end
+  end
+
+  describe '#process' do
+    let(:event) { Raven::Event.from_exception(exception, data) }
+    let(:result_hash) { described_class.new.process(event.to_hash) }
+
+    context 'with sentry_processors_before_send disabled' do
+      before do
+        stub_feature_flags(sentry_processors_before_send: false)
+      end
+
+      it_behaves_like 'processing an exception'
+    end
+  end
 end
diff --git a/spec/lib/gitlab/error_tracking/processor/sidekiq_processor_spec.rb b/spec/lib/gitlab/error_tracking/processor/sidekiq_processor_spec.rb
index da7205c7f4f..20fd5d085a9 100644
--- a/spec/lib/gitlab/error_tracking/processor/sidekiq_processor_spec.rb
+++ b/spec/lib/gitlab/error_tracking/processor/sidekiq_processor_spec.rb
@@ -94,28 +94,37 @@ RSpec.describe Gitlab::ErrorTracking::Processor::SidekiqProcessor do
     end
   end
 
-  describe '#process' do
+  shared_examples 'processing an exception' do
     context 'when there is Sidekiq data' do
+      let(:wrapped_value) { { extra: { sidekiq: value } } }
+
       shared_examples 'Sidekiq arguments' do |args_in_job_hash: true|
         let(:path) { [:extra, :sidekiq, args_in_job_hash ? :job : nil, 'args'].compact }
         let(:args) { [1, 'string', { a: 1 }, [1, 2]] }
 
-        it 'only allows numeric arguments for an unknown worker' do
-          value = { 'args' => args, 'class' => 'UnknownWorker' }
+        context 'for an unknown worker' do
+          let(:value) do
+            hash = { 'args' => args, 'class' => 'UnknownWorker' }
 
-          value = { job: value } if args_in_job_hash
+            args_in_job_hash ? { job: hash } : hash
+          end
 
-          expect(subject.process(extra_sidekiq(value)).dig(*path))
-            .to eq([1, described_class::FILTERED_STRING, described_class::FILTERED_STRING, described_class::FILTERED_STRING])
+          it 'only allows numeric arguments for an unknown worker' do
+            expect(result_hash.dig(*path))
+              .to eq([1, described_class::FILTERED_STRING, described_class::FILTERED_STRING, described_class::FILTERED_STRING])
+          end
         end
 
-        it 'allows all argument types for a permitted worker' do
-          value = { 'args' => args, 'class' => 'PostReceive' }
+        context 'for a permitted worker' do
+          let(:value) do
+            hash = { 'args' => args, 'class' => 'PostReceive' }
 
-          value = { job: value } if args_in_job_hash
+            args_in_job_hash ? { job: hash } : hash
+          end
 
-          expect(subject.process(extra_sidekiq(value)).dig(*path))
-            .to eq(args)
+          it 'allows all argument types for a permitted worker' do
+            expect(result_hash.dig(*path)).to eq(args)
+          end
         end
       end
 
@@ -127,39 +136,62 @@ RSpec.describe Gitlab::ErrorTracking::Processor::SidekiqProcessor do
         include_examples 'Sidekiq arguments', args_in_job_hash: false
       end
 
-      it 'removes a jobstr field if present' do
-        value = {
-          job: { 'args' => [1] },
-          jobstr: { 'args' => [1] }.to_json
-        }
+      context 'when a jobstr field is present' do
+        let(:value) do
+          {
+            job: { 'args' => [1] },
+            jobstr: { 'args' => [1] }.to_json
+          }
+        end
 
-        expect(subject.process(extra_sidekiq(value)))
-          .to eq(extra_sidekiq(value.except(:jobstr)))
+        it 'removes the jobstr' do
+          expect(result_hash.dig(:extra, :sidekiq)).to eq(value.except(:jobstr))
+        end
       end
 
-      it 'does nothing with no jobstr' do
-        value = { job: { 'args' => [1] } }
+      context 'when no jobstr value is present' do
+        let(:value) { { job: { 'args' => [1] } } }
 
-        expect(subject.process(extra_sidekiq(value)))
-          .to eq(extra_sidekiq(value))
+        it 'does nothing' do
+          expect(result_hash.dig(:extra, :sidekiq)).to eq(value)
+        end
       end
     end
 
     context 'when there is no Sidekiq data' do
-      it 'does nothing' do
-        value = {
-          request: {
-            method: 'POST',
-            data: { 'key' => 'value' }
-          }
-        }
+      let(:value) { { tags: { foo: 'bar', baz: 'quux' } } }
+      let(:wrapped_value) { value }
 
-        expect(subject.process(value)).to eq(value)
+      it 'does nothing' do
+        expect(result_hash).to include(value)
+        expect(result_hash.dig(:extra, :sidekiq)).to be_nil
       end
     end
+  end
 
-    def extra_sidekiq(hash)
-      { extra: { sidekiq: hash } }
+  describe '.call' do
+    let(:event) { Raven::Event.new(wrapped_value) }
+    let(:result_hash) { described_class.call(event).to_hash }
+
+    it_behaves_like 'processing an exception'
+
+    context 'when followed by #process' do
+      let(:result_hash) { described_class.new.process(described_class.call(event).to_hash) }
+
+      it_behaves_like 'processing an exception'
+    end
+  end
+
+  describe '#process' do
+    let(:event) { Raven::Event.new(wrapped_value) }
+    let(:result_hash) { described_class.new.process(event.to_hash) }
+
+    context 'with sentry_processors_before_send disabled' do
+      before do
+        stub_feature_flags(sentry_processors_before_send: false)
+      end
+
+      it_behaves_like 'processing an exception'
     end
   end
 end
diff --git a/spec/lib/gitlab/error_tracking_spec.rb b/spec/lib/gitlab/error_tracking_spec.rb
index a905b9f8d40..2e67a9f0874 100644
--- a/spec/lib/gitlab/error_tracking_spec.rb
+++ b/spec/lib/gitlab/error_tracking_spec.rb
@@ -7,6 +7,7 @@ require 'raven/transports/dummy'
 RSpec.describe Gitlab::ErrorTracking do
   let(:exception) { RuntimeError.new('boom') }
   let(:issue_url) { 'http://gitlab.com/gitlab-org/gitlab-foss/issues/1' }
+  let(:extra) { { issue_url: issue_url, some_other_info: 'info' } }
 
   let(:user) { create(:user) }
 
@@ -42,6 +43,8 @@ RSpec.describe Gitlab::ErrorTracking do
     }
   end
 
+  let(:sentry_event) { Gitlab::Json.parse(Raven.client.transport.events.last[1]) }
+
   before do
     stub_sentry_settings
 
@@ -133,8 +136,6 @@ RSpec.describe Gitlab::ErrorTracking do
   end
 
   describe '.track_exception' do
-    let(:extra) { { issue_url: issue_url, some_other_info: 'info' } }
-
     subject(:track_exception) { described_class.track_exception(exception, extra) }
 
     before do
@@ -195,6 +196,55 @@ RSpec.describe Gitlab::ErrorTracking do
       end
     end
 
+    context 'when the error is kind of an `ActiveRecord::StatementInvalid`' do
+      let(:exception) { ActiveRecord::StatementInvalid.new(sql: 'SELECT "users".* FROM "users" WHERE "users"."id" = 1 AND "users"."foo" = $1') }
+
+      it 'injects the normalized sql query into extra' do
+        track_exception
+
+        expect(sentry_event.dig('extra', 'sql')).to eq('SELECT "users".* FROM "users" WHERE "users"."id" = $2 AND "users"."foo" = $1')
+      end
+    end
+
+    context 'when the `ActiveRecord::StatementInvalid` is wrapped in another exception' do
+      it 'injects the normalized sql query into extra' do
+        allow(exception).to receive(:cause).and_return(ActiveRecord::StatementInvalid.new(sql: 'SELECT "users".* FROM "users" WHERE "users"."id" = 1 AND "users"."foo" = $1'))
+
+        track_exception
+
+        expect(sentry_event.dig('extra', 'sql')).to eq('SELECT "users".* FROM "users" WHERE "users"."id" = $2 AND "users"."foo" = $1')
+      end
+    end
+  end
+
+  shared_examples 'event processors' do
+    subject(:track_exception) { described_class.track_exception(exception, extra) }
+
+    before do
+      allow(Raven).to receive(:capture_exception).and_call_original
+      allow(Gitlab::ErrorTracking::Logger).to receive(:error)
+    end
+
+    context 'custom GitLab context when using Raven.capture_exception directly' do
+      subject(:raven_capture_exception) { Raven.capture_exception(exception) }
+
+      it 'merges a default set of tags into the existing tags' do
+        allow(Raven.context).to receive(:tags).and_return(foo: 'bar')
+
+        raven_capture_exception
+
+        expect(sentry_event['tags']).to include('correlation_id', 'feature_category', 'foo', 'locale', 'program')
+      end
+
+      it 'merges the current user information into the existing user information' do
+        Raven.user_context(id: -1)
+
+        raven_capture_exception
+
+        expect(sentry_event['user']).to eq('id' => -1, 'username' => user.username)
+      end
+    end
+
     context 'with sidekiq args' do
       context 'when the args does not have anything sensitive' do
         let(:extra) { { sidekiq: { 'class' => 'PostReceive', 'args' => [1, { 'id' => 2, 'name' => 'hello' }, 'some-value', 'another-value'] } } }
@@ -211,16 +261,20 @@ RSpec.describe Gitlab::ErrorTracking do
             )
           )
         end
+
+        it 'does not filter parameters when sending to Sentry' do
+          track_exception
+
+          expect(sentry_event.dig('extra', 'sidekiq', 'args')).to eq([1, { 'id' => 2, 'name' => 'hello' }, 'some-value', 'another-value'])
+        end
       end
 
       context 'when the args has sensitive information' do
         let(:extra) { { sidekiq: { 'class' => 'UnknownWorker', 'args' => ['sensitive string', 1, 2] } } }
 
-        it 'filters sensitive arguments before sending' do
+        it 'filters sensitive arguments before sending and logging' do
           track_exception
 
-          sentry_event = Gitlab::Json.parse(Raven.client.transport.events.last[1])
-
           expect(sentry_event.dig('extra', 'sidekiq', 'args')).to eq(['[FILTERED]', 1, 2])
           expect(Gitlab::ErrorTracking::Logger).to have_received(:error).with(
             hash_including(
@@ -234,28 +288,44 @@ RSpec.describe Gitlab::ErrorTracking do
       end
     end
 
-    context 'when the error is kind of an `ActiveRecord::StatementInvalid`' do
-      let(:exception) { ActiveRecord::StatementInvalid.new(sql: 'SELECT "users".* FROM "users" WHERE "users"."id" = 1 AND "users"."foo" = $1') }
+    context 'when the error is a GRPC error' do
+      context 'when the GRPC error contains a debug_error_string value' do
+        let(:exception) { GRPC::DeadlineExceeded.new('unknown cause', {}, '{"hello":1}') }
 
-      it 'injects the normalized sql query into extra' do
-        allow(Raven.client.transport).to receive(:send_event) do |event|
-          expect(event.extra).to include(sql: 'SELECT "users".* FROM "users" WHERE "users"."id" = $2 AND "users"."foo" = $1')
+        it 'sets the GRPC debug error string in the Sentry event and adds a custom fingerprint' do
+          track_exception
+
+          expect(sentry_event.dig('extra', 'grpc_debug_error_string')).to eq('{"hello":1}')
+          expect(sentry_event['fingerprint']).to eq(['GRPC::DeadlineExceeded', '4:unknown cause.'])
         end
-
-        track_exception
       end
-    end
 
-    context 'when the `ActiveRecord::StatementInvalid` is wrapped in another exception' do
-      let(:exception) { RuntimeError.new(cause: ActiveRecord::StatementInvalid.new(sql: 'SELECT "users".* FROM "users" WHERE "users"."id" = 1 AND "users"."foo" = $1')) }
+      context 'when the GRPC error does not contain a debug_error_string value' do
+        let(:exception) { GRPC::DeadlineExceeded.new }
 
-      it 'injects the normalized sql query into extra' do
-        allow(Raven.client.transport).to receive(:send_event) do |event|
-          expect(event.extra).to include(sql: 'SELECT "users".* FROM "users" WHERE "users"."id" = $2 AND "users"."foo" = $1')
+        it 'does not do any processing on the event' do
+          track_exception
+
+          expect(sentry_event['extra']).not_to include('grpc_debug_error_string')
+          expect(sentry_event['fingerprint']).to eq(['GRPC::DeadlineExceeded', '4:unknown cause'])
         end
-
-        track_exception
       end
     end
   end
+
+  context 'with sentry_processors_before_send enabled' do
+    before do
+      stub_feature_flags(sentry_processors_before_send: true)
+    end
+
+    include_examples 'event processors'
+  end
+
+  context 'with sentry_processors_before_send disabled' do
+    before do
+      stub_feature_flags(sentry_processors_before_send: false)
+    end
+
+    include_examples 'event processors'
+  end
 end
diff --git a/spec/presenters/ci/build_runner_presenter_spec.rb b/spec/presenters/ci/build_runner_presenter_spec.rb
index bc09b9db5f1..9cb00781e99 100644
--- a/spec/presenters/ci/build_runner_presenter_spec.rb
+++ b/spec/presenters/ci/build_runner_presenter_spec.rb
@@ -223,7 +223,7 @@ RSpec.describe Ci::BuildRunnerPresenter do
       let(:build) { create(:ci_build, ref: pipeline.ref, pipeline: pipeline) }
 
       before do
-        pipeline.persistent_ref.create
+        pipeline.persistent_ref.create # rubocop:disable Rails/SaveBang
       end
 
       it 'returns the correct refspecs' do
@@ -261,7 +261,7 @@ RSpec.describe Ci::BuildRunnerPresenter do
       let(:build) { create(:ci_build, pipeline: pipeline) }
 
       before do
-        pipeline.persistent_ref.create
+        pipeline.persistent_ref.create # rubocop:disable Rails/SaveBang
       end
 
       it 'exposes the persistent pipeline ref' do
diff --git a/spec/presenters/ci/trigger_presenter_spec.rb b/spec/presenters/ci/trigger_presenter_spec.rb
index bac1c94e0b7..b86684707b9 100644
--- a/spec/presenters/ci/trigger_presenter_spec.rb
+++ b/spec/presenters/ci/trigger_presenter_spec.rb
@@ -35,7 +35,7 @@ RSpec.describe Ci::TriggerPresenter do
 
   context 'when user is a trigger owner and builds admin' do
     before do
-      trigger.update(owner: user)
+      trigger.update!(owner: user)
     end
 
     describe '#token' do
diff --git a/spec/presenters/packages/conan/package_presenter_spec.rb b/spec/presenters/packages/conan/package_presenter_spec.rb
index 4e8af752f3e..dad9460c8eb 100644
--- a/spec/presenters/packages/conan/package_presenter_spec.rb
+++ b/spec/presenters/packages/conan/package_presenter_spec.rb
@@ -146,7 +146,7 @@ RSpec.describe ::Packages::Conan::PackagePresenter do
         before do
           [info_file, manifest_file, package_file].each do |file|
             file.conan_file_metadatum.conan_package_reference = alternative_reference
-            file.save
+            file.save!
           end
         end
 
diff --git a/spec/requests/api/internal/kubernetes_spec.rb b/spec/requests/api/internal/kubernetes_spec.rb
index 9740a27c190..47d0c872eb6 100644
--- a/spec/requests/api/internal/kubernetes_spec.rb
+++ b/spec/requests/api/internal/kubernetes_spec.rb
@@ -38,16 +38,16 @@ RSpec.describe API::Internal::Kubernetes do
   end
 
   shared_examples 'agent authentication' do
-    it 'returns 403 if Authorization header not sent' do
+    it 'returns 401 if Authorization header not sent' do
       send_request
 
-      expect(response).to have_gitlab_http_status(:forbidden)
+      expect(response).to have_gitlab_http_status(:unauthorized)
     end
 
-    it 'returns 403 if Authorization is for non-existent agent' do
+    it 'returns 401 if Authorization is for non-existent agent' do
       send_request(headers: { 'Authorization' => 'Bearer NONEXISTENT' })
 
-      expect(response).to have_gitlab_http_status(:forbidden)
+      expect(response).to have_gitlab_http_status(:unauthorized)
     end
   end
 
diff --git a/workhorse/config_test.go b/workhorse/config_test.go
index cf33e5bb7ca..f9d12bd5e2b 100644
--- a/workhorse/config_test.go
+++ b/workhorse/config_test.go
@@ -85,7 +85,7 @@ func TestConfigDefaults(t *testing.T) {
 		DocumentRoot:             "public",
 		ProxyHeadersTimeout:      5 * time.Minute,
 		APIQueueTimeout:          queueing.DefaultTimeout,
-		APICILongPollingDuration: 50 * time.Second,
+		APICILongPollingDuration: 50 * time.Nanosecond, // TODO this is meant to be 50*time.Second but it has been wrong for ages
 		ImageResizerConfig:       config.DefaultImageResizerConfig,
 	}
 
diff --git a/workhorse/main.go b/workhorse/main.go
index 28162a00fae..47ab63a875a 100644
--- a/workhorse/main.go
+++ b/workhorse/main.go
@@ -102,7 +102,7 @@ func buildConfig(arg0 string, args []string) (*bootConfig, *config.Config, error
 	fset.UintVar(&cfg.APILimit, "apiLimit", 0, "Number of API requests allowed at single time")
 	fset.UintVar(&cfg.APIQueueLimit, "apiQueueLimit", 0, "Number of API requests allowed to be queued")
 	fset.DurationVar(&cfg.APIQueueTimeout, "apiQueueDuration", queueing.DefaultTimeout, "Maximum queueing duration of requests")
-	fset.DurationVar(&cfg.APICILongPollingDuration, "apiCiLongPollingDuration", 50*time.Second, "Long polling duration for job requesting for runners (default 50s - enabled)")
+	fset.DurationVar(&cfg.APICILongPollingDuration, "apiCiLongPollingDuration", 50, "Long polling duration for job requesting for runners (default 50s - enabled)")
 	fset.BoolVar(&cfg.PropagateCorrelationID, "propagateCorrelationID", false, "Reuse existing Correlation-ID from the incoming request header `X-Request-ID` if present")
 
 	if err := fset.Parse(args); err != nil {