diff --git a/app/assets/javascripts/ci/runner/components/registration/cli_command.vue b/app/assets/javascripts/ci/runner/components/registration/cli_command.vue
index e9e9f5e15fa..848722b1196 100644
--- a/app/assets/javascripts/ci/runner/components/registration/cli_command.vue
+++ b/app/assets/javascripts/ci/runner/components/registration/cli_command.vue
@@ -47,7 +47,7 @@ export default {
     <pre
       class="gl-w-full"
       :style="{ maxHeight: '300px' }"
-    ><span v-if="prompt" class="gl-select-none">{{ prompt }} </span><template v-for="line in lines">{{ line }}<br class="gl-select-none"/></template></pre>
+    ><span v-if="prompt" class="gl-select-none">{{ prompt }} </span><template v-for="line in lines">{{ line }}<br class="gl-select-none" /></template></pre>
     <!-- eslint-enable vue/require-v-for-key-->
 
     <modal-copy-button :text="clipboard" :modal-id="modalId" :title="buttonTitle" />
diff --git a/app/assets/javascripts/clusters/agents/components/show.vue b/app/assets/javascripts/clusters/agents/components/show.vue
index 9d4a720c416..f29bc09b70b 100644
--- a/app/assets/javascripts/clusters/agents/components/show.vue
+++ b/app/assets/javascripts/clusters/agents/components/show.vue
@@ -8,9 +8,13 @@ import {
   GlSprintf,
   GlTab,
   GlTabs,
+  GlButton,
+  GlModalDirective,
 } from '@gitlab/ui';
 import { s__, __ } from '~/locale';
 import TimeAgoTooltip from '~/vue_shared/components/time_ago_tooltip.vue';
+import { CONNECT_MODAL_ID } from '~/clusters_list/constants';
+import ConnectToAgentModal from '~/clusters_list/components/connect_to_agent_modal.vue';
 import { MAX_LIST_COUNT } from '../constants';
 import getClusterAgentQuery from '../graphql/queries/get_cluster_agent.query.graphql';
 import TokenTable from './token_table.vue';
@@ -24,7 +28,9 @@ export default {
     tokens: s__('ClusterAgents|Access tokens'),
     unknownUser: s__('ClusterAgents|Unknown user'),
     activity: __('Activity'),
+    connectButtonText: s__('ClusterAgents|Connect to %{agentName}'),
   },
+  connectModalId: CONNECT_MODAL_ID,
   apollo: {
     clusterAgent: {
       query: getClusterAgentQuery,
@@ -49,10 +55,15 @@ export default {
     GlSprintf,
     GlTab,
     GlTabs,
+    GlButton,
     TimeAgoTooltip,
     TokenTable,
     ActivityEvents,
     IntegrationStatus,
+    ConnectToAgentModal,
+  },
+  directives: {
+    GlModalDirective,
   },
   inject: ['agentName', 'projectPath'],
   data() {
@@ -85,6 +96,9 @@ export default {
     tokens() {
       return this.clusterAgent?.tokens?.nodes || [];
     },
+    isUserAccessConfigured() {
+      return Boolean(this.clusterAgent?.userAccessAuthorizations);
+    },
   },
   methods: {
     nextPage() {
@@ -107,7 +121,19 @@ export default {
 
 <template>
   <section>
-    <h1>{{ agentName }}</h1>
+    <header class="gl-flex gl-flex-wrap gl-justify-between gl-items-center">
+      <h1>{{ agentName }}</h1>
+      <gl-button
+        v-gl-modal-directive="$options.connectModalId"
+        :disabled="!clusterAgent"
+        category="secondary"
+        variant="confirm"
+      >
+        <gl-sprintf :message="$options.i18n.connectButtonText"
+          ><template #agentName>{{ agentName }}</template></gl-sprintf
+        >
+      </gl-button>
+    </header>
 
     <gl-loading-icon v-if="isLoading && clusterAgent == null" size="lg" class="gl-m-3" />
 
@@ -162,6 +188,12 @@ export default {
 
         <slot name="ee-workspaces-tab" :agent-name="agentName" :project-path="projectPath"></slot>
       </gl-tabs>
+
+      <connect-to-agent-modal
+        :agent-id="clusterAgent.id"
+        :project-path="projectPath"
+        :is-configured="isUserAccessConfigured"
+      />
     </template>
 
     <gl-alert v-else variant="danger" :dismissible="false">
diff --git a/app/assets/javascripts/clusters/agents/graphql/queries/get_cluster_agent.query.graphql b/app/assets/javascripts/clusters/agents/graphql/queries/get_cluster_agent.query.graphql
index 7be524f92c4..8b7695fba01 100644
--- a/app/assets/javascripts/clusters/agents/graphql/queries/get_cluster_agent.query.graphql
+++ b/app/assets/javascripts/clusters/agents/graphql/queries/get_cluster_agent.query.graphql
@@ -15,6 +15,10 @@ query getClusterAgent(
       id
       createdAt
 
+      userAccessAuthorizations {
+        config
+      }
+
       createdByUser {
         id
         name
diff --git a/app/assets/javascripts/clusters_list/components/agent_table.vue b/app/assets/javascripts/clusters_list/components/agent_table.vue
index ea8716c78c6..b8dc4bb63f2 100644
--- a/app/assets/javascripts/clusters_list/components/agent_table.vue
+++ b/app/assets/javascripts/clusters_list/components/agent_table.vue
@@ -9,20 +9,30 @@ import {
   GlPopover,
   GlBadge,
   GlPagination,
+  GlDisclosureDropdown,
+  GlDisclosureDropdownItem,
+  GlModalDirective,
 } from '@gitlab/ui';
 import semverLt from 'semver/functions/lt';
 import semverInc from 'semver/functions/inc';
 import semverPrerelease from 'semver/functions/prerelease';
+import { __, s__, sprintf } from '~/locale';
 import TimeAgoTooltip from '~/vue_shared/components/time_ago_tooltip.vue';
 import timeagoMixin from '~/vue_shared/mixins/timeago';
 import { helpPagePath } from '~/helpers/help_page_helper';
 import { getIdFromGraphQLId } from '~/graphql_shared/utils';
-import { MAX_LIST_COUNT, AGENT_STATUSES, I18N_AGENT_TABLE } from '../constants';
+import { MAX_LIST_COUNT, AGENT_STATUSES, I18N_AGENT_TABLE, CONNECT_MODAL_ID } from '../constants';
 import { getAgentConfigPath } from '../clusters_util';
 import DeleteAgentButton from './delete_agent_button.vue';
+import ConnectToAgentModal from './connect_to_agent_modal.vue';
 
 export default {
-  i18n: I18N_AGENT_TABLE,
+  i18n: {
+    ...I18N_AGENT_TABLE,
+    connectActionText: s__('ClusterAgents|Connect to %{agentName}'),
+    deleteActionText: s__('ClusterAgents|Delete agent'),
+    actions: __('Actions'),
+  },
   components: {
     GlLink,
     GlTable,
@@ -32,11 +42,15 @@ export default {
     GlPopover,
     GlBadge,
     GlPagination,
+    GlDisclosureDropdown,
+    GlDisclosureDropdownItem,
     TimeAgoTooltip,
     DeleteAgentButton,
+    ConnectToAgentModal,
   },
   directives: {
     GlTooltip: GlTooltipDirective,
+    GlModalDirective,
   },
   mixins: [timeagoMixin],
   AGENT_STATUSES,
@@ -47,7 +61,7 @@ export default {
   configHelpLink: helpPagePath('user/clusters/agent/install/index', {
     anchor: 'create-an-agent-configuration-file',
   }),
-  inject: ['kasCheckVersion'],
+  inject: ['kasCheckVersion', 'projectPath'],
   props: {
     agents: {
       required: true,
@@ -68,6 +82,7 @@ export default {
     return {
       currentPage: 1,
       limit: this.maxAgents ?? MAX_LIST_COUNT,
+      selectedAgent: null,
     };
   },
   computed: {
@@ -131,6 +146,9 @@ export default {
       const nextPage = this.currentPage + 1;
       return nextPage > Math.ceil(this.agents.length / this.limit) ? null : nextPage;
     },
+    isUserAccessConfigured() {
+      return Boolean(this.selectedAgent?.userAccessAuthorizations);
+    },
   },
   methods: {
     getStatusCellId(item) {
@@ -198,6 +216,31 @@ export default {
 
       return null;
     },
+
+    getActions(item) {
+      const connectAction = {
+        text: sprintf(this.$options.i18n.connectActionText, { agentName: item.name }),
+        name: 'connect-agent',
+        modalId: CONNECT_MODAL_ID,
+        action: () => {
+          this.selectedAgent = item;
+        },
+      };
+      const deleteAction = {
+        text: this.$options.i18n.deleteActionText,
+        name: 'delete-agent',
+        action: () => {
+          this.selectedAgent = item;
+        },
+      };
+
+      const actions = [connectAction];
+      if (!item.isShared) {
+        actions.push(deleteAction);
+      }
+
+      return actions;
+    },
   },
 };
 </script>
@@ -342,11 +385,32 @@ export default {
       </template>
 
       <template #cell(options)="{ item }">
-        <delete-agent-button
-          v-if="!item.isShared"
-          :agent="item"
-          :default-branch-name="defaultBranchName"
-        />
+        <gl-disclosure-dropdown
+          :title="$options.i18n.actions"
+          text-sr-only
+          category="tertiary"
+          no-caret
+          icon="ellipsis_v"
+        >
+          <template v-for="action in getActions(item)">
+            <delete-agent-button
+              v-if="action.name === 'delete-agent'"
+              :key="action.name"
+              :agent="item"
+              :default-branch-name="defaultBranchName"
+            />
+            <gl-disclosure-dropdown-item
+              v-else
+              :key="action.name"
+              v-gl-modal-directive="action.modalId"
+              @action="action.action"
+            >
+              <template #list-item>
+                {{ action.text }}
+              </template>
+            </gl-disclosure-dropdown-item>
+          </template>
+        </gl-disclosure-dropdown>
       </template>
     </gl-table>
 
@@ -358,5 +422,12 @@ export default {
       align="center"
       class="gl-mt-5"
     />
+
+    <connect-to-agent-modal
+      v-if="selectedAgent"
+      :agent-id="selectedAgent.id"
+      :project-path="projectPath"
+      :is-configured="isUserAccessConfigured"
+    />
   </div>
 </template>
diff --git a/app/assets/javascripts/clusters_list/components/connect_to_agent_modal.vue b/app/assets/javascripts/clusters_list/components/connect_to_agent_modal.vue
new file mode 100644
index 00000000000..0a8bd546e72
--- /dev/null
+++ b/app/assets/javascripts/clusters_list/components/connect_to_agent_modal.vue
@@ -0,0 +1,130 @@
+<script>
+import { GlLink, GlModal, GlSprintf, GlButton } from '@gitlab/ui';
+import { helpPagePath } from '~/helpers/help_page_helper';
+import { s__, __ } from '~/locale';
+import { isGid, getIdFromGraphQLId } from '~/graphql_shared/utils';
+import ModalCopyButton from '~/vue_shared/components/modal_copy_button.vue';
+import CodeBlockHighlighted from '~/vue_shared/components/code_block_highlighted.vue';
+import { CONNECT_MODAL_ID } from '../constants';
+
+export default {
+  i18n: {
+    title: s__('ClusterAgents|Connect to a cluster'),
+    notConfiguredText: s__(
+      'ClusterAgents|You can connect to your cluster from the command line. To use this feature, configure %{monotypeStart}user_access%{monotypeEnd} in the agent configuration project.',
+    ),
+    configuredText: s__(
+      'ClusterAgents|You can connect to your cluster from the command line. Configure %{linkStart}kubectl%{linkEnd} command-line access by running the following command:',
+    ),
+    learMoreText: s__('ClusterAgents|Learn more about user access.'),
+    buttonClose: __('Close'),
+  },
+  learnMoreDocsLink: helpPagePath('user/clusters/agent/user_access'),
+  kubectlLink: 'https://kubernetes.io/docs/reference/kubectl/',
+  modalId: CONNECT_MODAL_ID,
+  components: {
+    GlLink,
+    GlModal,
+    GlSprintf,
+    GlButton,
+    ModalCopyButton,
+    CodeBlockHighlighted,
+  },
+  props: {
+    projectPath: {
+      type: String,
+      required: true,
+    },
+    agentId: {
+      type: String,
+      required: true,
+    },
+    isConfigured: {
+      type: Boolean,
+      required: false,
+      default: false,
+    },
+  },
+  data() {
+    return {
+      visible: false,
+    };
+  },
+  computed: {
+    descriptionText() {
+      return this.isConfigured
+        ? this.$options.i18n.configuredText
+        : this.$options.i18n.notConfiguredText;
+    },
+    agentIdNumber() {
+      return isGid(this.agentId) ? getIdFromGraphQLId(this.agentId) : this.agentId;
+    },
+    command() {
+      if (this.isConfigured) {
+        return this.glabCommand;
+      }
+
+      return `user_access:
+  access_as:
+      agent: {} # for free
+      user: {} # for premium+
+  projects:
+      - id: <current project path>`;
+    },
+    glabCommand() {
+      return `glab cluster agent update-kubeconfig --repo ${this.projectPath} --agent ${this.agentIdNumber} --use-context`;
+    },
+    commandLanguage() {
+      return this.isConfigured ? 'shell' : 'yaml';
+    },
+  },
+  methods: {
+    hideModal() {
+      this.visible = false;
+    },
+  },
+};
+</script>
+
+<template>
+  <gl-modal
+    v-model="visible"
+    :modal-id="$options.modalId"
+    :title="$options.i18n.title"
+    no-focus-on-show
+  >
+    <p>
+      <gl-sprintf :message="descriptionText">
+        <template #monotype="{ content }"
+          ><code>{{ content }}</code>
+        </template>
+
+        <template #link="{ content }"
+          ><gl-link
+            :href="$options.kubectlLink"
+            target="_blank"
+            rel="noopener noreferrer nofollow"
+            >{{ content }}</gl-link
+          >
+        </template>
+      </gl-sprintf>
+    </p>
+
+    <p class="gl-flex gl-items-start">
+      <code-block-highlighted
+        :language="commandLanguage"
+        class="gl-border gl-px-3 gl-py-2 gl-w-full gl-mb-0 gl-mr-3"
+        :code="command"
+      />
+      <modal-copy-button :text="command" :modal-id="$options.modalId" category="tertiary" />
+    </p>
+
+    <p>
+      <gl-link :href="$options.learnMoreDocsLink"> {{ $options.i18n.learMoreText }} </gl-link>
+    </p>
+
+    <template #modal-footer>
+      <gl-button @click="hideModal">{{ $options.i18n.buttonClose }} </gl-button>
+    </template>
+  </gl-modal>
+</template>
diff --git a/app/assets/javascripts/clusters_list/components/delete_agent_button.vue b/app/assets/javascripts/clusters_list/components/delete_agent_button.vue
index 4088d5c79f7..ead87d93f22 100644
--- a/app/assets/javascripts/clusters_list/components/delete_agent_button.vue
+++ b/app/assets/javascripts/clusters_list/components/delete_agent_button.vue
@@ -7,6 +7,7 @@ import {
   GlFormGroup,
   GlFormInput,
   GlTooltipDirective,
+  GlDisclosureDropdownItem,
 } from '@gitlab/ui';
 import { sprintf } from '~/locale';
 import { DELETE_AGENT_BUTTON, DELETE_AGENT_MODAL_ID } from '../constants';
@@ -22,6 +23,7 @@ export default {
     GlSprintf,
     GlFormGroup,
     GlFormInput,
+    GlDisclosureDropdownItem,
   },
   directives: {
     GlModalDirective,
@@ -53,8 +55,7 @@ export default {
       return this.loading || !this.canAdminCluster;
     },
     deleteButtonTooltip() {
-      const { deleteButton, disabledHint } = this.$options.i18n;
-      return this.deleteButtonDisabled ? disabledHint : deleteButton;
+      return this.deleteButtonDisabled ? this.$options.i18n.disabledHint : '';
     },
     getAgentsQueryVariables() {
       return {
@@ -145,28 +146,33 @@ export default {
       this.error = null;
       this.deleteConfirmText = null;
     },
+    showModal() {
+      this.$refs.modal?.show();
+    },
   },
 };
 </script>
 
 <template>
   <div>
-    <div
-      v-gl-tooltip="deleteButtonTooltip"
-      :tabindex="containerTabIndex"
-      class="cluster-button-container gl-rounded-base gl-display-inline-block"
+    <gl-disclosure-dropdown-item
+      v-gl-tooltip.bottom.viewport="deleteButtonTooltip"
       data-testid="delete-agent-button-tooltip"
+      :tabindex="containerTabIndex"
+      @action="showModal"
     >
       <gl-button
         ref="deleteAgentButton"
-        v-gl-modal-directive="modalId"
-        icon="remove"
-        category="secondary"
-        variant="danger"
         :disabled="deleteButtonDisabled"
-        :aria-label="$options.i18n.deleteButton"
-      />
-    </div>
+        :aria-disabled="deleteButtonDisabled"
+        category="tertiary"
+        variant="danger"
+        class="focus:!gl-shadow-inner-2-blue-400 !gl-justify-start !gl-px-3"
+        block
+      >
+        {{ $options.i18n.deleteButton }}
+      </gl-button>
+    </gl-disclosure-dropdown-item>
 
     <gl-modal
       ref="modal"
diff --git a/app/assets/javascripts/clusters_list/constants.js b/app/assets/javascripts/clusters_list/constants.js
index 043d1117d0d..81832db9007 100644
--- a/app/assets/javascripts/clusters_list/constants.js
+++ b/app/assets/javascripts/clusters_list/constants.js
@@ -283,3 +283,5 @@ export const DELETE_AGENT_MODAL_ID = 'delete-agent-modal-%{agentName}';
 
 export const AGENT_FEEDBACK_ISSUE = 'https://gitlab.com/gitlab-org/gitlab/-/issues/342696';
 export const AGENT_FEEDBACK_KEY = 'agent_feedback_banner';
+
+export const CONNECT_MODAL_ID = 'connect-to-cluster-modal';
diff --git a/app/assets/javascripts/clusters_list/graphql/fragments/cluster_agent.fragment.graphql b/app/assets/javascripts/clusters_list/graphql/fragments/cluster_agent.fragment.graphql
index 31897b50407..4174bbc29ed 100644
--- a/app/assets/javascripts/clusters_list/graphql/fragments/cluster_agent.fragment.graphql
+++ b/app/assets/javascripts/clusters_list/graphql/fragments/cluster_agent.fragment.graphql
@@ -3,6 +3,9 @@ fragment ClusterAgentFragment on ClusterAgent {
   name
   webPath
   createdAt
+  userAccessAuthorizations {
+    config
+  }
   connections {
     nodes {
       metadata {
diff --git a/app/assets/javascripts/code_navigation/components/popover.vue b/app/assets/javascripts/code_navigation/components/popover.vue
index 79b8f62fdab..2dd76e05016 100644
--- a/app/assets/javascripts/code_navigation/components/popover.vue
+++ b/app/assets/javascripts/code_navigation/components/popover.vue
@@ -103,7 +103,7 @@ export default {
               ref="code-output"
               :class="$options.colorScheme"
               class="border-0 bg-transparent m-0 code highlight text-wrap"
-            ><doc-line v-for="(tokens, tokenIndex) in hover.tokens" :key="tokenIndex" :language="hover.language" :tokens="tokens"/></pre>
+            ><doc-line v-for="(tokens, tokenIndex) in hover.tokens" :key="tokenIndex" :language="hover.language" :tokens="tokens" /></pre>
             <p v-else ref="doc-output" class="p-3 m-0">
               {{ hover.value }}
             </p>
diff --git a/app/assets/javascripts/environments/environment_details/components/kubernetes/kubernetes_overview.vue b/app/assets/javascripts/environments/environment_details/components/kubernetes/kubernetes_overview.vue
index a2508252cd3..9ee340fdb6e 100644
--- a/app/assets/javascripts/environments/environment_details/components/kubernetes/kubernetes_overview.vue
+++ b/app/assets/javascripts/environments/environment_details/components/kubernetes/kubernetes_overview.vue
@@ -1,9 +1,18 @@
 <script>
-import { GlEmptyState, GlSprintf, GlLink, GlAlert, GlDrawer } from '@gitlab/ui';
+import {
+  GlEmptyState,
+  GlSprintf,
+  GlLink,
+  GlAlert,
+  GlDrawer,
+  GlDisclosureDropdown,
+  GlDisclosureDropdownItem,
+  GlModalDirective,
+} from '@gitlab/ui';
 import CLUSTER_EMPTY_SVG from '@gitlab/svgs/dist/illustrations/empty-state/empty-state-clusters.svg?url';
 import { DRAWER_Z_INDEX } from '~/lib/utils/constants';
 import { getContentWrapperHeight } from '~/lib/utils/dom_utils';
-import { s__ } from '~/locale';
+import { s__, __ } from '~/locale';
 import * as Sentry from '~/sentry/sentry_browser_wrapper';
 import { helpPagePath } from '~/helpers/help_page_helper';
 import { getIdFromGraphQLId } from '~/graphql_shared/utils';
@@ -20,8 +29,10 @@ import {
   HELM_RELEASES_RESOURCE_TYPE,
   KUSTOMIZATIONS_RESOURCE_TYPE,
 } from '~/environments/constants';
+import { CONNECT_MODAL_ID } from '~/clusters_list/constants';
 import WorkloadDetails from '~/kubernetes_dashboard/components/workload_details.vue';
 import eventHub from '~/environments/event_hub';
+import ConnectToAgentModal from '~/clusters_list/components/connect_to_agent_modal.vue';
 import KubernetesStatusBar from './kubernetes_status_bar.vue';
 import KubernetesAgentInfo from './kubernetes_agent_info.vue';
 import KubernetesTabs from './kubernetes_tabs.vue';
@@ -38,9 +49,15 @@ export default {
     GlLink,
     GlAlert,
     GlDrawer,
+    GlDisclosureDropdown,
+    GlDisclosureDropdownItem,
     DeletePodModal,
+    ConnectToAgentModal,
   },
-  inject: ['kasTunnelUrl'],
+  directives: {
+    GlModalDirective,
+  },
+  inject: ['kasTunnelUrl', 'projectPath'],
   props: {
     environmentName: {
       type: String,
@@ -205,11 +222,14 @@ export default {
       'Environment|There are no Kubernetes cluster connections configured for this environment. Connect a cluster to add the status of your workloads, resources, and the Flux reconciliation state to the dashboard. %{linkStart}Learn more about Kubernetes integration.%{linkEnd}',
     ),
     emptyButton: s__('Environment|Get started'),
+    connectButtonText: s__('ClusterAgents|Connect to agent'),
+    actions: __('Actions'),
   },
   learnMoreLink: helpPagePath('user/clusters/agent/index'),
   getStartedLink: helpPagePath('ci/environments/kubernetes_dashboard'),
   CLUSTER_EMPTY_SVG,
   DRAWER_Z_INDEX,
+  CONNECT_MODAL_ID,
 };
 </script>
 <template>
@@ -217,7 +237,7 @@ export default {
     <div
       class="gl-display-flex gl-flex-wrap gl-justify-content-space-between gl-align-items-center"
     >
-      <kubernetes-agent-info :cluster-agent="clusterAgent" class="gl-mb-2 gl-mr-5" />
+      <kubernetes-agent-info :cluster-agent="clusterAgent" class="gl-mb-2 gl-mr-5 gl-grow" />
       <kubernetes-status-bar
         ref="status_bar"
         :cluster-health-status="clusterHealthStatus"
@@ -231,6 +251,26 @@ export default {
         @error="handleError"
         @show-flux-resource-details="showFluxResourceDetails"
       />
+
+      <gl-disclosure-dropdown
+        :title="$options.i18n.actions"
+        category="tertiary"
+        icon="ellipsis_v"
+        text-sr-only
+        no-caret
+      >
+        <gl-disclosure-dropdown-item v-gl-modal-directive="$options.CONNECT_MODAL_ID">
+          <template #list-item>
+            {{ $options.i18n.connectButtonText }}
+          </template>
+        </gl-disclosure-dropdown-item>
+      </gl-disclosure-dropdown>
+
+      <connect-to-agent-modal
+        :agent-id="clusterAgent.id"
+        :project-path="projectPath"
+        :is-configured="true"
+      />
     </div>
 
     <gl-alert v-if="error" variant="danger" :dismissible="false" class="gl-my-5">
diff --git a/app/assets/javascripts/issues/show/components/incidents/incident_tabs.vue b/app/assets/javascripts/issues/show/components/incidents/incident_tabs.vue
index b820a6dcc1f..3f516db4995 100644
--- a/app/assets/javascripts/issues/show/components/incidents/incident_tabs.vue
+++ b/app/assets/javascripts/issues/show/components/incidents/incident_tabs.vue
@@ -129,7 +129,7 @@ export default {
 
         lineSeparator.classList.toggle('gl-border-b-0', !isSummaryTab);
 
-        itemsToHide.forEach(function hide(item) {
+        itemsToHide.forEach((item) => {
           item.classList.toggle('gl-hidden', !isSummaryTab);
         });
 
diff --git a/app/assets/javascripts/layout_nav.js b/app/assets/javascripts/layout_nav.js
index 1f58065a505..9ccf4acbe77 100644
--- a/app/assets/javascripts/layout_nav.js
+++ b/app/assets/javascripts/layout_nav.js
@@ -16,16 +16,12 @@ export function initScrollingTabs() {
   const el = $scrollingTabs.get(0);
   const parentElement = el?.parentNode;
   if (el && parentElement) {
-    parentElement
-      .querySelector('button.fade-left')
-      ?.addEventListener('click', function scrollLeft() {
-        el.scrollBy({ left: -200, behavior: 'smooth' });
-      });
-    parentElement
-      .querySelector('button.fade-right')
-      ?.addEventListener('click', function scrollRight() {
-        el.scrollBy({ left: 200, behavior: 'smooth' });
-      });
+    parentElement.querySelector('button.fade-left')?.addEventListener('click', () => {
+      el.scrollBy({ left: -200, behavior: 'smooth' });
+    });
+    parentElement.querySelector('button.fade-right')?.addEventListener('click', () => {
+      el.scrollBy({ left: 200, behavior: 'smooth' });
+    });
   }
 
   $(window)
diff --git a/app/assets/javascripts/lib/utils/text_utility.js b/app/assets/javascripts/lib/utils/text_utility.js
index aa8b0731e83..f4350391e56 100644
--- a/app/assets/javascripts/lib/utils/text_utility.js
+++ b/app/assets/javascripts/lib/utils/text_utility.js
@@ -103,7 +103,7 @@ export const truncate = (string, maxLength) => {
  * @param  {String} options.chars string of chars to use as a basis for calculating average width
  * @return {Number}
  */
-const getAverageCharWidth = memoize(function getAverageCharWidth(options = {}) {
+const getAverageCharWidth = memoize((options = {}) => {
   const {
     fontSize = 12,
     fontFamily = 'sans-serif',
diff --git a/app/assets/javascripts/lib/utils/vue3compat/vue_router.js b/app/assets/javascripts/lib/utils/vue3compat/vue_router.js
index daea9815d60..a7ebfe57c4f 100644
--- a/app/assets/javascripts/lib/utils/vue3compat/vue_router.js
+++ b/app/assets/javascripts/lib/utils/vue3compat/vue_router.js
@@ -36,7 +36,7 @@ const toNewCatchAllPath = (path, { isRoot } = {}) => {
 
 const transformRoutes = (value, _routerOptions, transformOptions = { isRoot: true }) => {
   if (!value) return null;
-  const newRoutes = value.map(function handleRoutes(route) {
+  const newRoutes = value.map((route) => {
     const newRoute = {
       ...route,
       path: toNewCatchAllPath(route.path, transformOptions),
diff --git a/app/assets/javascripts/streaming/rate_limit_stream_requests.js b/app/assets/javascripts/streaming/rate_limit_stream_requests.js
index 04a592baa16..3036d109db2 100644
--- a/app/assets/javascripts/streaming/rate_limit_stream_requests.js
+++ b/app/assets/javascripts/streaming/rate_limit_stream_requests.js
@@ -40,12 +40,13 @@ export const rateLimitStreamRequests = ({
     unsettled.push(consume);
     return promise.then((stream) => {
       const [first, second] = stream.tee();
-      // eslint-disable-next-line promise/no-nesting
       consumeReadableStream(first)
+        // eslint-disable-next-line promise/no-nesting
         .then(() => {
           unsettled.splice(unsettled.indexOf(consume), 1);
           res();
         })
+        // eslint-disable-next-line promise/no-nesting
         .catch(rej);
       return second;
     }, rej);
diff --git a/app/assets/javascripts/vue_shared/components/blob_viewers/simple_viewer.vue b/app/assets/javascripts/vue_shared/components/blob_viewers/simple_viewer.vue
index 251231c34ad..771dd07803e 100644
--- a/app/assets/javascripts/vue_shared/components/blob_viewers/simple_viewer.vue
+++ b/app/assets/javascripts/vue_shared/components/blob_viewers/simple_viewer.vue
@@ -169,7 +169,7 @@ export default {
       <div class="blob-content gl-flex gl-w-full gl-flex-col gl-overflow-y-auto">
         <pre
           class="code highlight !gl-p-0"
-        ><code v-safe-html="content" :data-blob-hash="blobHash" ></code></pre>
+        ><code v-safe-html="content" :data-blob-hash="blobHash"></code></pre>
       </div>
     </div>
   </div>
diff --git a/app/assets/javascripts/vue_shared/components/file_finder/index.vue b/app/assets/javascripts/vue_shared/components/file_finder/index.vue
index 28f0a81e8dd..d5af79eafe2 100644
--- a/app/assets/javascripts/vue_shared/components/file_finder/index.vue
+++ b/app/assets/javascripts/vue_shared/components/file_finder/index.vue
@@ -139,7 +139,7 @@ export default {
       this.toggle(!this.visible);
     });
 
-    addStopCallback(function fileFinderStopCallback(e, el, combo) {
+    addStopCallback((e, el, combo) => {
       if (
         (combo === 't' && el.classList.contains('dropdown-input-field')) ||
         el.classList.contains('inputarea')
diff --git a/app/assets/stylesheets/page_bundles/clusters.scss b/app/assets/stylesheets/page_bundles/clusters.scss
index bf8a1294b05..7e79620aa57 100644
--- a/app/assets/stylesheets/page_bundles/clusters.scss
+++ b/app/assets/stylesheets/page_bundles/clusters.scss
@@ -22,10 +22,6 @@
   }
 }
 
-.cluster-button-container:focus-within {
-  @include gl-focus;
-}
-
 .select-agent-dropdown {
   // stylelint-disable-next-line gitlab/no-gl-class
   .gl-button-text {
diff --git a/app/graphql/types/clusters/agent_type.rb b/app/graphql/types/clusters/agent_type.rb
index f23efc4f21b..2caef74a752 100644
--- a/app/graphql/types/clusters/agent_type.rb
+++ b/app/graphql/types/clusters/agent_type.rb
@@ -61,6 +61,11 @@ module Types
         description: 'Recent activity for the cluster agent.',
         resolver: Resolvers::Clusters::AgentActivityEventsResolver
 
+      field :user_access_authorizations,
+        Clusters::Agents::Authorizations::UserAccessType,
+        null: true,
+        description: 'User access config for the cluster agent.'
+
       def project
         Gitlab::Graphql::Loaders::BatchModelLoader.new(Project, object.project_id).find
       end
diff --git a/app/models/clusters/agent.rb b/app/models/clusters/agent.rb
index 1ec46589113..395c24241fc 100644
--- a/app/models/clusters/agent.rb
+++ b/app/models/clusters/agent.rb
@@ -86,10 +86,14 @@ module Clusters
     # As of today, all config values of associated authorization rows have the same value.
     # See `UserAccess::RefreshService` for more information.
     def user_access_config
+      user_access_authorizations&.config
+    end
+
+    def user_access_authorizations
       self.class.from_union(
         user_access_project_authorizations.select('config').limit(1),
         user_access_group_authorizations.select('config').limit(1)
-      ).compact.first&.config
+      ).compact.first
     end
 
     private
diff --git a/app/models/repository.rb b/app/models/repository.rb
index 5cac814fd5a..43cc84a2783 100644
--- a/app/models/repository.rb
+++ b/app/models/repository.rb
@@ -359,16 +359,6 @@ class Repository
     @branch_names_include = nil
   end
 
-  def expire_branch_names_cache
-    expire_method_caches(%i[branch_names branch_count])
-    @local_branches = nil
-  end
-
-  def expire_tag_names_cache
-    expire_method_caches(%i[tag_names tag_count])
-    @tags = nil
-  end
-
   def expire_protected_branches_cache
     ProtectedBranches::CacheService.new(project).refresh if project # rubocop:disable CodeReuse/ServiceClass
   end
diff --git a/app/workers/post_receive.rb b/app/workers/post_receive.rb
index 3480a3b397f..9c0f4e4a97d 100644
--- a/app/workers/post_receive.rb
+++ b/app/workers/post_receive.rb
@@ -119,7 +119,10 @@ class PostReceive
   end
 
   def expire_branch_cache(repository)
-    repository.expire_branches_cache
+    unless Feature.enabled?(:post_receive_sync_refresh_cache, @project)
+      repository.expire_branches_cache
+      return
+    end
 
     # Consider the scenario where multiple pushes happen in close succession:
     #
@@ -132,24 +135,23 @@ class PostReceive
     #
     # To avoid this, atomically expire and refresh the branch name cache
     # so that tasks such as pipeline creation will find the branch.
-    if Feature.enabled?(:post_receive_sync_refresh_cache, @project)
-      in_lock(lease_key(:branch), ttl: cache_ttl) do
-        repository.expire_branch_names_cache
-        repository.branch_names
-      end
+    in_lock(lease_key(:branch), ttl: cache_ttl) do
+      repository.expire_branches_cache
+      repository.branch_names
     end
   rescue Gitlab::ExclusiveLeaseHelpers::FailedToObtainLockError
     log("Failed to obtain lease for expiring branch name cache")
   end
 
   def expire_tag_cache(repository)
-    repository.expire_caches_for_tags
+    unless Feature.enabled?(:post_receive_sync_refresh_cache, @project)
+      repository.expire_caches_for_tags
+      return
+    end
 
-    if Feature.enabled?(:post_receive_sync_refresh_cache, @project)
-      in_lock(lease_key(:tag), ttl: cache_ttl) do
-        repository.expire_tag_names_cache
-        repository.tag_names
-      end
+    in_lock(lease_key(:tag), ttl: cache_ttl) do
+      repository.expire_caches_for_tags
+      repository.tag_names
     end
   rescue Gitlab::ExclusiveLeaseHelpers::FailedToObtainLockError
     log("Failed to obtain lease for expiring tag name cache")
diff --git a/config/feature_flags/development/compliance_pipeline_in_policies.yml b/config/feature_flags/development/compliance_pipeline_in_policies.yml
deleted file mode 100644
index 427f3dde4b4..00000000000
--- a/config/feature_flags/development/compliance_pipeline_in_policies.yml
+++ /dev/null
@@ -1,8 +0,0 @@
----
-name: compliance_pipeline_in_policies
-introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/126457
-rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/424185
-milestone: '16.4'
-type: development
-group: group::security policies
-default_enabled: true
diff --git a/danger/ci_tables/Dangerfile b/danger/ci_tables/Dangerfile
index 422b77d337a..7540679cf0f 100644
--- a/danger/ci_tables/Dangerfile
+++ b/danger/ci_tables/Dangerfile
@@ -18,7 +18,7 @@ def check_database_dictionary_yaml(database_dictionary)
   markdown(PARTITIONING_COMMENT, file: database_dictionary.path, line: mr_line.succ)
 rescue Psych::Exception
   # YAML could not be parsed, fail the build.
-  fail "#{helper.html_link(database_ditionary.path)} isn't valid YAML! #{SEE_DB_DOC}"
+  fail "#{helper.html_link(database_dictionary.path)} isn't valid YAML! #{SEE_DB_DOC}"
 rescue StandardError => e
   warn "There was a problem trying to check the database dictionary file. Exception: #{e.class.name} - #{e.message}"
 end
diff --git a/db/docs/batched_background_migrations/fix_namespace_id_for_work_item_parent_links.yml b/db/docs/batched_background_migrations/fix_namespace_id_for_work_item_parent_links.yml
new file mode 100644
index 00000000000..2e0abeca6c4
--- /dev/null
+++ b/db/docs/batched_background_migrations/fix_namespace_id_for_work_item_parent_links.yml
@@ -0,0 +1,11 @@
+---
+migration_job_name: FixNamespaceIdForWorkItemParentLinks
+description:
+  This fixes a bug where the namespace_id for work_item_parent_links got set to the issue's group ID instead
+  of the project's namespace_id.
+feature_category: team_planning
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/160264
+milestone: '17.3'
+queued_migration_version: 20240722144720
+finalize_after: '2024-08-20'
+finalized_by: # version of the migration that finalized this BBM
diff --git a/db/post_migrate/20240722144720_queue_fix_namespace_id_for_work_item_parent_links.rb b/db/post_migrate/20240722144720_queue_fix_namespace_id_for_work_item_parent_links.rb
new file mode 100644
index 00000000000..f27127c9f3d
--- /dev/null
+++ b/db/post_migrate/20240722144720_queue_fix_namespace_id_for_work_item_parent_links.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+class QueueFixNamespaceIdForWorkItemParentLinks < Gitlab::Database::Migration[2.2]
+  milestone '17.3'
+
+  restrict_gitlab_migration gitlab_schema: :gitlab_main
+
+  MIGRATION = "FixNamespaceIdForWorkItemParentLinks"
+  DELAY_INTERVAL = 2.minutes
+  BATCH_SIZE = 10_000
+  SUB_BATCH_SIZE = 100
+
+  def up
+    queue_batched_background_migration(
+      MIGRATION,
+      :work_item_parent_links,
+      :id,
+      job_interval: DELAY_INTERVAL,
+      batch_size: BATCH_SIZE,
+      sub_batch_size: SUB_BATCH_SIZE
+    )
+  end
+
+  def down
+    delete_batched_background_migration(MIGRATION, :work_item_parent_links, :id, [])
+  end
+end
diff --git a/db/post_migrate/20240801070404_update_max_total_yaml_size_bytes_value.rb b/db/post_migrate/20240801070404_update_max_total_yaml_size_bytes_value.rb
new file mode 100644
index 00000000000..8ddcb49df69
--- /dev/null
+++ b/db/post_migrate/20240801070404_update_max_total_yaml_size_bytes_value.rb
@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+class UpdateMaxTotalYamlSizeBytesValue < Gitlab::Database::Migration[2.2]
+  disable_ddl_transaction!
+
+  restrict_gitlab_migration gitlab_schema: :gitlab_main
+
+  milestone '17.3'
+
+  def up
+    old_default = 1.megabyte
+    new_default = 2.megabytes
+    max_int = 2147483647
+
+    execute <<-SQL
+      UPDATE application_settings
+      SET max_yaml_size_bytes = CASE
+        WHEN max_yaml_size_bytes = #{old_default} THEN #{new_default}
+        WHEN (max_yaml_size_bytes * 1.2)::bigint >= #{max_int} THEN #{max_int}
+        ELSE (max_yaml_size_bytes * 1.2)::integer
+      END
+      WHERE max_yaml_size_bytes != #{new_default}
+    SQL
+  end
+
+  def down
+    # no-op
+  end
+end
diff --git a/db/post_migrate/20240801072839_update_ci_max_total_yaml_size_bytes_new_default_value.rb b/db/post_migrate/20240801072839_update_ci_max_total_yaml_size_bytes_new_default_value.rb
new file mode 100644
index 00000000000..152ddb16355
--- /dev/null
+++ b/db/post_migrate/20240801072839_update_ci_max_total_yaml_size_bytes_new_default_value.rb
@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+class UpdateCiMaxTotalYamlSizeBytesNewDefaultValue < Gitlab::Database::Migration[2.2]
+  disable_ddl_transaction!
+
+  restrict_gitlab_migration gitlab_schema: :gitlab_main
+
+  milestone '17.3'
+
+  def up
+    execute <<~SQL
+      UPDATE application_settings
+      SET ci_max_total_yaml_size_bytes = CASE
+        WHEN max_yaml_size_bytes * ci_max_includes >= 2147483647 THEN 2147483647
+        ELSE max_yaml_size_bytes * ci_max_includes
+      END
+    SQL
+  end
+
+  def down
+    # no-op
+  end
+end
diff --git a/db/schema_migrations/20240722144720 b/db/schema_migrations/20240722144720
new file mode 100644
index 00000000000..1d424817533
--- /dev/null
+++ b/db/schema_migrations/20240722144720
@@ -0,0 +1 @@
+cb0d171cba56117448bc907d8a93770a523cb47a6a0f1744874ea175a203abc8
\ No newline at end of file
diff --git a/db/schema_migrations/20240801070404 b/db/schema_migrations/20240801070404
new file mode 100644
index 00000000000..c9b3ff99004
--- /dev/null
+++ b/db/schema_migrations/20240801070404
@@ -0,0 +1 @@
+a72528f5e2bfd537b817638c91b0e6a8f15f46a5a09366f743648b476ac4a7b3
\ No newline at end of file
diff --git a/db/schema_migrations/20240801072839 b/db/schema_migrations/20240801072839
new file mode 100644
index 00000000000..9e536021fce
--- /dev/null
+++ b/db/schema_migrations/20240801072839
@@ -0,0 +1 @@
+44dc4fcd81a1e7b2451cb86645cd7e2aa5f09939167b46f3dfd4e15b7198c7b3
\ No newline at end of file
diff --git a/doc/api/graphql/reference/index.md b/doc/api/graphql/reference/index.md
index a08161a2d64..601261a86de 100644
--- a/doc/api/graphql/reference/index.md
+++ b/doc/api/graphql/reference/index.md
@@ -18938,6 +18938,7 @@ GitLab CI/CD configuration template.
 | <a id="clusteragentproject"></a>`project` | [`Project`](#project) | Project this cluster agent is associated with. |
 | <a id="clusteragenttokens"></a>`tokens` | [`ClusterAgentTokenConnection`](#clusteragenttokenconnection) | Tokens associated with the cluster agent. (see [Connections](#connections)) |
 | <a id="clusteragentupdatedat"></a>`updatedAt` | [`Time`](#time) | Timestamp the cluster agent was updated. |
+| <a id="clusteragentuseraccessauthorizations"></a>`userAccessAuthorizations` | [`ClusterAgentAuthorizationUserAccess`](#clusteragentauthorizationuseraccess) | User access config for the cluster agent. |
 | <a id="clusteragentvulnerabilityimages"></a>`vulnerabilityImages` | [`VulnerabilityContainerImageConnection`](#vulnerabilitycontainerimageconnection) | Container images reported on the agent vulnerabilities. (see [Connections](#connections)) |
 | <a id="clusteragentwebpath"></a>`webPath` | [`String`](#string) | Web path of the cluster agent. |
 
diff --git a/doc/development/advanced_search.md b/doc/development/advanced_search.md
index 33e81eb343c..da130c5101c 100644
--- a/doc/development/advanced_search.md
+++ b/doc/development/advanced_search.md
@@ -591,48 +591,3 @@ cluster.routing.allocation.disk.watermark.high: 10gb
 Restart Elasticsearch, and the `read_only_allow_delete` will clear on its own.
 
 _from "Disk-based Shard Allocation | Elasticsearch Reference" [5.6](https://www.elastic.co/guide/en/elasticsearch/reference/5.6/disk-allocator.html#disk-allocator) and [6.x](https://www.elastic.co/guide/en/elasticsearch/reference/6.7/disk-allocator.html)_
-
-### Disaster recovery/data loss/backups
-
-The use of Elasticsearch in GitLab is only ever as a secondary data store.
-This means that all of the data stored in Elasticsearch can always be derived
-again from other data sources, specifically PostgreSQL and Gitaly. Therefore if
-the Elasticsearch data store is ever corrupted for whatever reason you can reindex
-everything from scratch.
-
-If your Elasticsearch index is incredibly large it may be too time consuming or
-cause too much downtime to reindex from scratch. There aren't any built in
-mechanisms for automatically finding discrepancies and resyncing an
-Elasticsearch index if it gets out of sync but one tool that may be useful is
-looking at the logs for all the updates that occurred in a time range you
-believe may have been missed. This information is very low level and only
-useful for operators that are familiar with the GitLab codebase. It is
-documented here in case it is useful for others. The relevant logs that could
-theoretically be used to figure out what needs to be replayed are:
-
-1. All non-repository updates that were synced can be found in
-   [`elasticsearch.log`](../administration/logs/index.md#elasticsearchlog) by
-   searching for
-   [`track_items`](https://gitlab.com/gitlab-org/gitlab/-/blob/1e60ea99bd8110a97d8fc481e2f41cab14e63d31/ee/app/services/elastic/process_bookkeeping_service.rb#L25)
-   and these can be replayed by sending these items again through
-   `::Elastic::ProcessBookkeepingService.track!`
-1. All repository updates that occurred can be found in
-   [`elasticsearch.log`](../administration/logs/index.md#elasticsearchlog) by
-   searching for
-   [`indexing_commit_range`](https://gitlab.com/gitlab-org/gitlab/-/blob/6f9d75dd3898536b9ec2fb206e0bd677ab59bd6d/ee/lib/gitlab/elastic/indexer.rb#L41).
-   Replaying these requires resetting the
-   [`IndexStatus#last_commit/last_wiki_commit`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/app/models/index_status.rb)
-   to the oldest `from_sha` in the logs and then triggering another index of
-   the project using
-   [`ElasticCommitIndexerWorker`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/app/workers/elastic_commit_indexer_worker.rb)
-1. All project deletes that occurred can be found in
-   [`sidekiq.log`](../administration/logs/index.md#sidekiqlog) by searching for
-   [`ElasticDeleteProjectWorker`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/app/workers/elastic_delete_project_worker.rb).
-   These updates can be replayed by triggering another
-   `ElasticDeleteProjectWorker`.
-
-With the above methods and taking regular
-[Elasticsearch snapshots](https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshot-restore.html)
-we should be able to recover from different kinds of data loss issues in a
-relatively short period of time compared to indexing everything from
-scratch.
diff --git a/doc/development/internal_analytics/internal_event_instrumentation/local_setup_and_debugging.md b/doc/development/internal_analytics/internal_event_instrumentation/local_setup_and_debugging.md
index f7c68f6729d..f707efa61e3 100644
--- a/doc/development/internal_analytics/internal_event_instrumentation/local_setup_and_debugging.md
+++ b/doc/development/internal_analytics/internal_event_instrumentation/local_setup_and_debugging.md
@@ -13,7 +13,7 @@ Internal events are using a tool called Snowplow under the hood. To develop and
 
 | Testing Tool                                 | Frontend Tracking  | Backend Tracking    | Local Development Environment | Production Environment | Shows individual events |
 |----------------------------------------------|--------------------|---------------------|-------------------------------|------------------------|------------------------|
-| [Internal Events Monitor](#internal-events-monitor) | Yes | Yes | Yes  | Yes     | Yes, if running [Snowplow Micro](#snowplow-micro)    |
+| [Internal Events Monitor](#internal-events-monitor) | Yes | Yes | Yes  | Yes     | Yes    |
 | [Snowplow Micro](#snowplow-micro) | Yes | Yes  | Yes            | No    | Yes    |
 | [Manual check in GDK](#manual-check-in-gdk) | Yes | Yes | Yes            | Yes     | No     |
 | [Snowplow Analytics Debugger Chrome Extension](#snowplow-analytics-debugger-chrome-extension) | Yes | No | Yes            | Yes     | Yes     |
diff --git a/doc/development/pipelines/internals.md b/doc/development/pipelines/internals.md
index 59a1899c03b..33bfc0a282a 100644
--- a/doc/development/pipelines/internals.md
+++ b/doc/development/pipelines/internals.md
@@ -546,7 +546,7 @@ scripts/my-script.rb
 
 ## CI Configuration Testing
 
-We now have RSpec tests to verify changes to the CI configuration by simulating pipeline creation with the updated YAML files. You can find these tests in the `spec/dot_gitlab_ci/` directory.
+We now have RSpec tests to verify changes to the CI configuration by simulating pipeline creation with the updated YAML files. You can find these tests and a documentation of the current test coverage in [`spec/dot_gitlab_ci/job_dependency_spec.rb`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/spec/dot_gitlab_ci/job_dependency_spec.rb).
 
 ### How Do the Tests Work
 
diff --git a/doc/integration/advanced_search/elasticsearch.md b/doc/integration/advanced_search/elasticsearch.md
index 449f36e6ee2..dbdad0f487a 100644
--- a/doc/integration/advanced_search/elasticsearch.md
+++ b/doc/integration/advanced_search/elasticsearch.md
@@ -1262,9 +1262,35 @@ search" behaves as though you don't have advanced search enabled at all for
 your instance and search using other data sources (such as PostgreSQL data and Git
 data).
 
-## Data recovery: Elasticsearch is a secondary data store only
+## Disaster recovery
 
-The use of Elasticsearch in GitLab is only ever as a secondary data store.
-This means that all of the data stored in Elasticsearch can always be derived
-again from other data sources, specifically PostgreSQL and Gitaly. Therefore, if
-the Elasticsearch data store is ever corrupted for whatever reason, you can reindex everything from scratch.
+Elasticsearch is a secondary data store for GitLab.
+All of the data stored in Elasticsearch can be derived again
+from other data sources, specifically PostgreSQL and Gitaly.
+If the Elasticsearch data store gets corrupted,
+you can reindex everything from scratch.
+
+If your Elasticsearch index is too large, it might cause
+too much downtime to reindex everything from scratch.
+You cannot automatically find discrepancies and resync an Elasticsearch index,
+but you can inspect the logs for any missing updates.
+To recover data more quickly, you can replay:
+
+1. All synced non-repository updates by searching in
+   [`elasticsearch.log`](../../administration/logs/index.md#elasticsearchlog)
+   for [`track_items`](https://gitlab.com/gitlab-org/gitlab/-/blob/1e60ea99bd8110a97d8fc481e2f41cab14e63d31/ee/app/services/elastic/process_bookkeeping_service.rb#L25).
+   You must send these items again through
+   `::Elastic::ProcessBookkeepingService.track!`.
+1. All repository updates by searching in
+   [`elasticsearch.log`](../../administration/logs/index.md#elasticsearchlog)
+   for [`indexing_commit_range`](https://gitlab.com/gitlab-org/gitlab/-/blob/6f9d75dd3898536b9ec2fb206e0bd677ab59bd6d/ee/lib/gitlab/elastic/indexer.rb#L41).
+   You must set [`IndexStatus#last_commit/last_wiki_commit`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/app/models/index_status.rb)
+   to the oldest `from_sha` in the logs and then trigger another index of
+   the project with [`ElasticCommitIndexerWorker`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/app/workers/elastic_commit_indexer_worker.rb) and [`ElasticWikiIndexerWorker`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/app/workers/elastic_wiki_indexer_worker.rb).
+1. All project deletes by searching in
+   [`sidekiq.log`](../../administration/logs/index.md#sidekiqlog) for
+   [`ElasticDeleteProjectWorker`](https://gitlab.com/gitlab-org/gitlab/-/blob/master/ee/app/workers/elastic_delete_project_worker.rb).
+   You must trigger another `ElasticDeleteProjectWorker`.
+
+You can also take regular
+[Elasticsearch snapshots](https://www.elastic.co/guide/en/elasticsearch/reference/current/snapshot-restore.html) to reduce the time it takes to recover from data loss without reindexing everything from scratch.
diff --git a/doc/user/gitlab_duo/index.md b/doc/user/gitlab_duo/index.md
index 26c5f9bff5f..d22fe1ed08d 100644
--- a/doc/user/gitlab_duo/index.md
+++ b/doc/user/gitlab_duo/index.md
@@ -117,6 +117,18 @@ DETAILS:
 - LLM: Anthropic [Claude 3 Haiku](https://docs.anthropic.com/en/docs/about-claude/models#claude-3-a-new-generation-of-ai).
 - [View documentation](../application_security/vulnerabilities/index.md#explaining-a-vulnerability).
 
+### AI Impact dashboard
+
+DETAILS:
+**Tier:** For a limited time, Ultimate. In the future, [GitLab Duo Enterprise](../../subscriptions/subscription-add-ons.md).
+**Offering:** GitLab.com, Self-managed
+
+- Measure the AI effectiveness and impact on SDLC metrics.
+- Visualize which metrics improved as a result of investments in AI.
+- Compare the performance of teams that are using AI against teams that are not using AI.
+- Track the progress of AI adoption.
+- [View documentation](../analytics/value_streams_dashboard.md#ai-impact-analytics).
+
 ## Beta features
 
 ### Merge request summary
@@ -202,18 +214,6 @@ DETAILS:
 - LLM: Vertex AI Codey [`codechat-bison`](https://cloud.google.com/vertex-ai/generative-ai/docs/model-reference/code-chat)
 - [View documentation](../analytics/analytics_dashboards.md#generate-a-custom-visualization-with-gitlab-duo).
 
-### AI Impact Dashboard
-
-DETAILS:
-**Tier:** For a limited time, Ultimate. In the future, [GitLab Duo Enterprise](../../subscriptions/subscription-add-ons.md).
-**Offering:** GitLab.com, Self-managed
-
-- Measure the AI effectiveness and impact on SDLC metrics.
-- Visualize which metrics improved as a result of investments in AI.
-- Compare the performance of teams that are using AI against teams that are not using AI.
-- Track the progress of AI adoption.
-- [View documentation](../analytics/value_streams_dashboard.md#ai-impact-analytics).
-
 ## Disable GitLab Duo features for specific groups or projects or an entire instance
 
 Disable GitLab Duo features by [following these instructions](turn_on_off.md).
diff --git a/doc/user/project/merge_requests/approvals/img/approval_and_merge_status_v17_3.png b/doc/user/project/merge_requests/approvals/img/approval_and_merge_status_v17_3.png
new file mode 100644
index 00000000000..daef3973f47
Binary files /dev/null and b/doc/user/project/merge_requests/approvals/img/approval_and_merge_status_v17_3.png differ
diff --git a/doc/user/project/merge_requests/approvals/img/reviewer_blocks_mr_v17_3.png b/doc/user/project/merge_requests/approvals/img/reviewer_blocks_mr_v17_3.png
new file mode 100644
index 00000000000..12a47b9c9a3
Binary files /dev/null and b/doc/user/project/merge_requests/approvals/img/reviewer_blocks_mr_v17_3.png differ
diff --git a/doc/user/project/merge_requests/approvals/index.md b/doc/user/project/merge_requests/approvals/index.md
index ddfe47599f0..79622987116 100644
--- a/doc/user/project/merge_requests/approvals/index.md
+++ b/doc/user/project/merge_requests/approvals/index.md
@@ -32,7 +32,52 @@ group-level settings for merge request approval rules is tracked in
 
 ## View approval status
 
-The list of merge requests for your project shows the approval status for each merge request:
+You can see the approval status of a merge request both on the merge request itself,
+and the list of merge requests for your project or group.
+
+### For a single merge request
+
+When an [eligible approver](rules.md#eligible-approvers) visits an open merge request,
+GitLab shows one of these statuses after the body of the merge request. To see it:
+
+1. On the left sidebar, select **Search or go to** and find your project.
+1. Select **Code > Merge requests** and find your merge request.
+1. Select the title of the merge request to view it.
+1. Scroll to the [merge request widget](../widgets.md) to see the mergeability and
+   approval status for the merge request. In this example, you can approve the
+   merge request:
+
+   ![You can approve this merge request. It needs approval before it becomes mergeable.](img/approval_and_merge_status_v17_3.png)
+
+   The text shown in the widget explains its approval status:
+
+   - **Approve**: The merge request doesn't yet have the required number of approvals.
+   - **Approve additionally**: The merge request has the required number of approvals.
+   - **Revoke approval**: The user viewing the merge request has already approved
+     the merge request.
+
+1. To see if your approval satisfies the Code Owner requirements, select
+   **Expand eligible approvers** (**{chevron-lg-down}**).
+
+To see the individual review and approval status for each reviewer, check the right sidebar
+of a merge request. Each **Reviewer** shows the status to the right of the user's name, like this:
+
+![This reviewer has requested changes, and blocked this merge request.](img/reviewer_blocks_mr_v17_3.png)
+
+- **{dash-circle}** Awaiting review from this user.
+- **{status_running}** The user's review is in progress.
+- **{check-circle}** Approved by this user.
+- **{comment-lines}** User has requested changes, and
+  [blocked this merge request](../reviews/index.md#prevent-merge-when-you-request-changes).
+  (If needed, you can [bypass this block](../reviews/index.md#prevent-merge-when-you-request-changes).)
+
+To [re-request a review](../reviews/index.md#re-request-a-review), select the
+**Re-request a review** icon (**{redo}**) next to the user.
+
+### In the list of merge requests
+
+The list of merge requests for [your project or group](../index.md#view-merge-requests)
+shows the approval status for each merge request:
 
 | Example | Description |
 | :-----: | :---------- |
@@ -40,14 +85,6 @@ The list of merge requests for your project shows the approval status for each m
 | ![Approvals are satisfied](img/approvals_satisfied_v17_1.png) | Approvals are satisfied. (**{check}**) |
 | ![Approvals are satisfied, and you approved](img/you_approvals_satisfied_v17_1.png) | Approvals are satisfied, and you are one of the approvers. (**{approval-solid}**) |
 
-When an [eligible approver](rules.md#eligible-approvers) visits an open merge request,
-GitLab shows one of these statuses after the body of the merge request:
-
-- **Approve**: The merge request doesn't yet have the required number of approvals.
-- **Approve additionally**: The merge request has the required number of approvals.
-- **Revoke approval**: The user viewing the merge request has already approved
-  the merge request.
-
 ## Configuration options for approvals
 
 Use [merge request approval rules](rules.md) to set the minimum number of
diff --git a/doc/user/project/merge_requests/reviews/img/reviews_missing_v17_3.png b/doc/user/project/merge_requests/reviews/img/reviews_missing_v17_3.png
new file mode 100644
index 00000000000..c4a679510d0
Binary files /dev/null and b/doc/user/project/merge_requests/reviews/img/reviews_missing_v17_3.png differ
diff --git a/doc/user/project/merge_requests/reviews/index.md b/doc/user/project/merge_requests/reviews/index.md
index 49b8158cab0..83b974563e2 100644
--- a/doc/user/project/merge_requests/reviews/index.md
+++ b/doc/user/project/merge_requests/reviews/index.md
@@ -29,6 +29,28 @@ To review merge requests, you can use:
 For an overview, see [Merge request review](https://www.youtube.com/watch?v=2MayfXKpU08&list=PLFGfElNsQthYDx0A_FaNNfUm9NHsK6zED&index=183).
 <!-- Video published on 2023-04-29 -->
 
+## View the review status of a merge request
+
+To do this:
+
+1. On the left sidebar, select **Search or go to** and find your project.
+1. Select **Code > Merge requests** and find your merge request.
+1. Select the title of the merge request to view it.
+1. Scroll to the [merge request widget](../widgets.md) to see the mergeability and
+   approval status for the merge request. For example, this merge request is blocked
+   because it hasn't received the approvals it needs:
+
+   ![The merge request widget displays 'All required approvals must be given'.](img/reviews_missing_v17_3.png)
+
+To see the individual review status for each reviewer, check the right sidebar
+of a merge request. Each **Reviewer** shows the status to the right of the user's name:
+
+- **{dash-circle}** Awaiting review from this user.
+- **{status_running}** The user's review is in progress.
+- **{check-circle}** Approved by this user.
+- **{comment-lines}** User has requested changes, and [blocked this merge request](#prevent-merge-when-you-request-changes).
+  (If needed, you can [bypass this block](#prevent-merge-when-you-request-changes).)
+
 ## Request a review
 
 To assign a reviewer to a merge request, in a text area in
diff --git a/doc/user/project/repository/code_suggestions/index.md b/doc/user/project/repository/code_suggestions/index.md
index 8dfe43495f4..f4523827067 100644
--- a/doc/user/project/repository/code_suggestions/index.md
+++ b/doc/user/project/repository/code_suggestions/index.md
@@ -22,26 +22,31 @@ GitLab Duo Code Suggestions requires [GitLab 16.8](https://about.gitlab.com/rele
 
 Write code more efficiently by using generative AI to suggest code while you're developing.
 
-With GitLab Duo Code Suggestions, you get:
+With GitLab Duo Code Suggestions, you get code completion and code generation.
 
-- Code completion, which suggests completions to the current line you are
-  typing. Code completion is used in most situations to quickly complete one
-  or a few lines of code.
-- Code generation, which generates code based on a natural language code
-  comment block. Write a comment like `# check if code suggestions are
-  enabled for current user`, then press <kbd>Enter</kbd> to generate code based
-  on the context of your comment and the rest of your code. Code generation requests
-  are slower than code completion requests, but provide more accurate responses because:
-  - A larger LLM is used.
-  - Additional context is sent in the request, for example,
-    the libraries used by the project.
-  - User instruction is passed to the LLM.
+## Code completion
 
-  Code generation is used when the:
+Code completion suggests completions to the line you are typing.
+Code completion is used in most situations to quickly complete one
+or a few lines of code.
 
-  - User writes a comment and hits <kbd>Enter</kbd>.
-  - File being edited is less than five lines of code.
-  - User enters an empty function or method.
+## Code generation
+
+Code generation generates code based on a natural language code
+comment block. Write a comment like `# check if code suggestions are
+enabled for current user`, then press <kbd>Enter</kbd> to generate code based
+on the context of your comment and the rest of your code.
+
+Code generation is used when:
+
+- You write a comment and press <kbd>Enter</kbd>.
+- You enter an empty function or method.
+- The file you're editing has fewer than five lines of code.
+Code generation requests take longer than code completion requests, but provide more accurate responses because:
+
+- A larger LLM is used.
+- Additional context is sent in the request, for example, the libraries used by the project.
+- Your instructions are passed to the LLM.
 
 <i class="fa fa-youtube-play youtube" aria-hidden="true"></i>
 [View a click-through demo](https://gitlab.navattic.com/code-suggestions).
diff --git a/doc/user/project/settings/import_export.md b/doc/user/project/settings/import_export.md
index 46b061e73a9..8c1073f75c2 100644
--- a/doc/user/project/settings/import_export.md
+++ b/doc/user/project/settings/import_export.md
@@ -13,6 +13,11 @@ DETAILS:
 Migrating groups and projects by using [direct transfer](../../group/import/index.md) is recommended. However, in some
 situations, you might need to migrate groups and project by using file exports.
 
+## Known issue
+
+Because of a known issue, you might see error `PG::QueryCanceled: ERROR: canceling statement due to statement timeout`.
+For more information, see [troubleshooting information](import_export_troubleshooting.md#error-pgquerycanceled-error-canceling-statement-due-to-statement-timeout).
+
 ## Migrate projects by uploading an export file
 
 Existing projects on any self-managed GitLab instance or GitLab.com can be exported to a file and
diff --git a/doc/user/project/settings/import_export_troubleshooting.md b/doc/user/project/settings/import_export_troubleshooting.md
index 029bf5efa6e..d10b1be14e9 100644
--- a/doc/user/project/settings/import_export_troubleshooting.md
+++ b/doc/user/project/settings/import_export_troubleshooting.md
@@ -220,6 +220,15 @@ Validation failed: User project bots cannot be added to other groups / projects
 To use [Import REST API](../../../api/project_import_export.md),
 pass regular user account credentials such as [personal access tokens](../../profile/personal_access_tokens.md).
 
+## Error: `PG::QueryCanceled: ERROR: canceling statement due to statement timeout`
+
+Some migrations can time out with the error: `PG::QueryCanceled: ERROR: canceling statement due to statement timeout`.
+One way to avoid this problem is to have the migration batch size reduced. This makes a migration less likely to time
+out, but makes migrations slower.
+
+To have the batch sized reduced, you must have a feature flag enabled. For more information, see
+[issue 456948](https://gitlab.com/gitlab-org/gitlab/-/issues/456948).
+
 ## Troubleshooting performance issues
 
 Read through the current performance problems using the Import/Export below.
diff --git a/lib/gitlab/background_migration/fix_namespace_id_for_work_item_parent_links.rb b/lib/gitlab/background_migration/fix_namespace_id_for_work_item_parent_links.rb
new file mode 100644
index 00000000000..58ce92a247c
--- /dev/null
+++ b/lib/gitlab/background_migration/fix_namespace_id_for_work_item_parent_links.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module BackgroundMigration
+    class FixNamespaceIdForWorkItemParentLinks < BatchedMigrationJob
+      operation_name :fix_work_item_parent_links_namespace_id
+      feature_category :team_planning
+
+      def perform
+        each_sub_batch do |sub_batch|
+          sub_batch = sub_batch
+            .joins("JOIN issues ON (work_item_parent_links.work_item_id = issues.id)")
+            .where('work_item_parent_links.namespace_id != issues.namespace_id')
+
+          query = <<~SQL
+            UPDATE work_item_parent_links
+            SET namespace_id = issues.namespace_id
+            FROM issues
+            WHERE issues.id = work_item_parent_links.work_item_id
+            AND work_item_parent_links.id IN (#{sub_batch.select(:id).to_sql})
+          SQL
+
+          sub_batch.connection.execute(query)
+        end
+      end
+    end
+  end
+end
diff --git a/lib/gitlab/tracking.rb b/lib/gitlab/tracking.rb
index 2bc37bc04a5..185c671e1e7 100644
--- a/lib/gitlab/tracking.rb
+++ b/lib/gitlab/tracking.rb
@@ -42,9 +42,7 @@ module Gitlab
       end
 
       def snowplow_micro_enabled?
-        (Rails.env.development? || micro_verification_enabled?) && Gitlab.config.snowplow_micro.enabled
-      rescue GitlabSettings::MissingSetting
-        false
+        Rails.env.development? || micro_verification_enabled?
       end
 
       def tracker
diff --git a/locale/gitlab.pot b/locale/gitlab.pot
index c6f2a1458b2..aff58159ae8 100644
--- a/locale/gitlab.pot
+++ b/locale/gitlab.pot
@@ -102,6 +102,11 @@ msgid_plural "%d Approvals"
 msgstr[0] ""
 msgstr[1] ""
 
+msgid "%d Custom role"
+msgid_plural "%d Custom roles"
+msgstr[0] ""
+msgstr[1] ""
+
 msgid "%d Module"
 msgid_plural "%d Modules"
 msgstr[0] ""
@@ -662,11 +667,6 @@ msgstr ""
 msgid "%{count} %{scope} for term '%{term}'"
 msgstr ""
 
-msgid "%{count} Custom role"
-msgid_plural "%{count} Custom roles"
-msgstr[0] ""
-msgstr[1] ""
-
 msgid "%{count} LOC/commit"
 msgstr ""
 
@@ -12253,6 +12253,15 @@ msgstr ""
 msgid "ClusterAgents|Connect a cluster (deprecated)"
 msgstr ""
 
+msgid "ClusterAgents|Connect to %{agentName}"
+msgstr ""
+
+msgid "ClusterAgents|Connect to a cluster"
+msgstr ""
+
+msgid "ClusterAgents|Connect to agent"
+msgstr ""
+
 msgid "ClusterAgents|Connected"
 msgstr ""
 
@@ -12346,6 +12355,9 @@ msgstr ""
 msgid "ClusterAgents|Learn how to troubleshoot"
 msgstr ""
 
+msgid "ClusterAgents|Learn more about user access."
+msgstr ""
+
 msgid "ClusterAgents|Make sure you are using a valid token."
 msgstr ""
 
@@ -12471,6 +12483,12 @@ msgstr ""
 msgid "ClusterAgents|What is default configuration?"
 msgstr ""
 
+msgid "ClusterAgents|You can connect to your cluster from the command line. Configure %{linkStart}kubectl%{linkEnd} command-line access by running the following command:"
+msgstr ""
+
+msgid "ClusterAgents|You can connect to your cluster from the command line. To use this feature, configure %{monotypeStart}user_access%{monotypeEnd} in the agent configuration project."
+msgstr ""
+
 msgid "ClusterAgents|You cannot see this token again after you close this window."
 msgstr ""
 
@@ -32416,7 +32434,7 @@ msgstr ""
 msgid "MemberRole|Actions"
 msgstr ""
 
-msgid "MemberRole|Are you sure you want to delete this custom role? Before you delete this custom role, make sure no group member has this role."
+msgid "MemberRole|Are you sure you want to delete this custom role?"
 msgstr ""
 
 msgid "MemberRole|Base role"
diff --git a/package.json b/package.json
index 46085603b38..4bb4b06cfae 100644
--- a/package.json
+++ b/package.json
@@ -246,7 +246,7 @@
     "yaml": "^2.0.0-10"
   },
   "devDependencies": {
-    "@gitlab/eslint-plugin": "19.6.0",
+    "@gitlab/eslint-plugin": "19.6.1",
     "@gitlab/stylelint-config": "6.2.1",
     "@graphql-eslint/eslint-plugin": "3.20.1",
     "@originjs/vite-plugin-commonjs": "^1.0.3",
diff --git a/qa/gdk/Dockerfile.gdk b/qa/gdk/Dockerfile.gdk
index 42e36a108f4..069b635a34b 100644
--- a/qa/gdk/Dockerfile.gdk
+++ b/qa/gdk/Dockerfile.gdk
@@ -1,4 +1,4 @@
-ARG GDK_SHA=9cfec203c9368829f22005db66f921716111d27d
+ARG GDK_SHA=b897d678ba98b2ae38bd680c6c8486a5da7917c3
 # Use tag prefix when running on 'stable' branch to make sure 'protected' image is used which is not deleted by registry cleanup
 ARG GDK_BASE_TAG_PREFIX
 
diff --git a/scripts/internal_events/monitor.rb b/scripts/internal_events/monitor.rb
index 83ea3edf539..e3db2b90fba 100644
--- a/scripts/internal_events/monitor.rb
+++ b/scripts/internal_events/monitor.rb
@@ -20,6 +20,8 @@
 
 require 'terminal-table'
 require 'net/http'
+
+require_relative './server'
 require_relative '../../spec/support/helpers/service_ping_helpers'
 
 Gitlab::Usage::TimeFrame.prepend(ServicePingHelpers::CurrentTimeFrame)
@@ -110,17 +112,6 @@ def generate_snowplow_table
   )
 end
 
-def generate_snowplow_placeholder
-  Terminal::Table.new(
-    title: 'SNOWPLOW EVENTS',
-    rows: [
-      ["Could not connect to Snowplow Micro."],
-      ["Please follow these instruction to set up Snowplow Micro:"],
-      ["https://gitlab.com/gitlab-org/gitlab-development-kit/-/blob/main/doc/howto/snowplow_micro.md"]
-    ]
-  )
-end
-
 def relevant_events_from_args(metric_definition)
   metric_definition.events.keys.intersection(ARGV).sort
 end
@@ -157,9 +148,9 @@ def generate_metrics_table
   )
 end
 
-def render_screen(paused, snowplow_available)
+def render_screen(paused)
   metrics_table = generate_metrics_table
-  events_table = snowplow_available ? generate_snowplow_table : generate_snowplow_placeholder
+  events_table = generate_snowplow_table
 
   print TTY::Cursor.clear_screen
   print TTY::Cursor.move_to(0, 0)
@@ -176,12 +167,13 @@ def render_screen(paused, snowplow_available)
   puts "Press \"q\" to quit"
 end
 
-snowplow_available = true
+server = nil
 
 begin
   snowplow_data
 rescue Errno::ECONNREFUSED
-  snowplow_available = false
+  # Start the mock server if Snowplow Micro is not running
+  server = Thread.start { Server.new.start }
 end
 
 reader = TTY::Reader.new
@@ -192,15 +184,18 @@ begin
     case reader.read_keypress(nonblock: true)
     when 'p'
       paused = !paused
-      render_screen(paused, snowplow_available)
+      render_screen(paused)
     when 'q'
+      server&.exit
       break
     end
 
-    render_screen(paused, snowplow_available) unless paused
+    render_screen(paused) unless paused
 
     sleep 1
   end
 rescue Interrupt
-  # Quietly shut down
+  server&.exit
+rescue Errno::ECONNREFUSED
+  # Ignore this error, caused by the server being killed before the loop due to working on a child thread
 end
diff --git a/scripts/internal_events/server.rb b/scripts/internal_events/server.rb
new file mode 100644
index 00000000000..b09065807f0
--- /dev/null
+++ b/scripts/internal_events/server.rb
@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+require 'webrick'
+require 'json'
+require 'base64'
+
+class Server
+  attr_accessor :events
+
+  def initialize
+    port = Gitlab::Tracking::Destinations::SnowplowMicro.new.uri.port
+    @server = WEBrick::HTTPServer.new Port: port, Logger: WEBrick::Log.new(nil, WEBrick::BasicLog::ERROR)
+
+    trap 'INT' do
+      @server.shutdown
+    end
+
+    @events = []
+  end
+
+  def start
+    @server.mount_proc '/i' do |req, res|
+      @events << extract_event(req.query)
+      res.status = 200
+    end
+
+    @server.mount_proc '/micro/good' do |_req, res|
+      res.status = 200
+      res.body = JSON.dump(@events)
+    end
+
+    @server.start
+  end
+
+  def stop
+    @server.shutdown
+  end
+
+  private
+
+  def extract_event(query)
+    {
+      event: {
+        se_category: query['se_ca'],
+        se_action: query['se_ac'],
+        collector_tstamp: query['dtm'],
+        label: query['se_la'],
+        property: query['se_pr'],
+        value: query['se_va'],
+        contexts: JSON.parse(Base64.decode64(query['cx']))
+      },
+      rawEvent: { parameters: query }
+    }
+  end
+end
diff --git a/spec/dot_gitlab_ci/job_dependency_spec.rb b/spec/dot_gitlab_ci/job_dependency_spec.rb
index ada2e197478..bef096b87fe 100644
--- a/spec/dot_gitlab_ci/job_dependency_spec.rb
+++ b/spec/dot_gitlab_ci/job_dependency_spec.rb
@@ -4,16 +4,48 @@ require 'spec_helper'
 
 # ***********************************************************************************************************
 # The tests in this file are recommended to run locally to test ci configuration changes
-# The test runs quite slowly because our configuration logic is very complex and it takes time to process
+# The tests are slow because pipeline simuation takes time given our current pipeline yaml size
 # ***********************************************************************************************************
+# TEST COVERAGE
 #
-# HOW TO CONTRIBUTE
+# GitLab.com gitlab-org/gitlab-foss Project
+#    Master Pipeline Triggered by Push
+#    Scheduled Master Pipeline
+#
+# GitLab.com gitlab-org/gitlab Master Pipeline
+#   Default Master Pipeline Triggered by Push
+#   Scheduled pipeline - Nightly
+#   Scheduled pipeline - Maintenance
+#
+# Merge Request Pipeline (and merge train pipeline under the same contexts)
+#   Unlabeled MR Changing GITALY_SERVER_VERSION
+#   Unlabeled MR Changing Dangerfile, .gitlab/ci/frontend.gitlab-ci.yml
+#
+#   MR Labeled with pipeline:run-all-rspec Changing app/models/user.rb
+#   MR Labeled with pipeline:expedite pipeline::expedited Changing app/models/user.rb
+#   MR Labeled with pipeline::tier-1 Changing app/models/user.rb
+#   MR Labeled with pipeline::tier-2 and pipeline:mr-approved Changing app/models/user.rb
+#   MR Labeled with pipeline::tier-3 and pipeline:mr-approved Changing app/models/user.rb
+#   MR Labeled with pipeline:run-as-if-foss Changing app/models/user.rb
+#
+# Automated MR
+#   MR Created from release-tools/update-gitaly Source Branch Changing GITALY_SERVER_VERSION
+#
+# Stable Branch
+#   MR Targeting a Stable Branch Changing app/models/user.rb
+#
+# Fork Project MRs
+#   MR Created from a Fork Project Master Branch Changing package.json
+#   MR Created from a Fork Project Feature Branch Changing package.json
+# ***********************************************************************************************************
+# CONTRIBUTE
+#
+# If you think we are missing coverage for an important pipeline type, please add them.
 #
 # For example, ci rule changes could break gitlab-foss pipelines, as seen in
 # https://gitlab.com/gitlab-org/quality/engineering-productivity/master-broken-incidents/-/issues/7356
 # we then added test cases by simulating pipeline for gitlab-org/gitlab-foss
 # See `with gitlab.com gitlab-org gitlab-foss project` context below for details.
-# If you think we are missing important test cases for a pipeline type, please add them following this exmaple.
 # ***********************************************************************************************************
 RSpec.describe 'ci jobs dependency', feature_category: :tooling do
   include ProjectForksHelper
diff --git a/spec/frontend/clusters/agents/components/show_spec.js b/spec/frontend/clusters/agents/components/show_spec.js
index 8a40c528c1d..400b0ecbaa4 100644
--- a/spec/frontend/clusters/agents/components/show_spec.js
+++ b/spec/frontend/clusters/agents/components/show_spec.js
@@ -1,18 +1,21 @@
-import { GlAlert, GlKeysetPagination, GlLoadingIcon, GlSprintf, GlTab } from '@gitlab/ui';
+import { GlAlert, GlKeysetPagination, GlLoadingIcon, GlSprintf, GlTab, GlButton } from '@gitlab/ui';
 import { createLocalVue, shallowMount } from '@vue/test-utils';
 import { nextTick } from 'vue';
 import VueApollo from 'vue-apollo';
 import { extendedWrapper } from 'helpers/vue_test_utils_helper';
+import { createMockDirective, getBinding } from 'helpers/vue_mock_directive';
 import ClusterAgentShow from '~/clusters/agents/components/show.vue';
 import TokenTable from '~/clusters/agents/components/token_table.vue';
 import ActivityEvents from '~/clusters/agents/components/activity_events_list.vue';
 import IntegrationStatus from '~/clusters/agents/components/integration_status.vue';
 import getAgentQuery from '~/clusters/agents/graphql/queries/get_cluster_agent.query.graphql';
+import ConnectToAgentModal from '~/clusters_list/components/connect_to_agent_modal.vue';
 import { useFakeDate } from 'helpers/fake_date';
 import createMockApollo from 'helpers/mock_apollo_helper';
 import waitForPromises from 'helpers/wait_for_promises';
 import TimeAgoTooltip from '~/vue_shared/components/time_ago_tooltip.vue';
 import { MAX_LIST_COUNT } from '~/clusters/agents/constants';
+import { CONNECT_MODAL_ID } from '~/clusters_list/constants';
 
 const localVue = createLocalVue();
 localVue.use(VueApollo);
@@ -34,12 +37,17 @@ describe('ClusterAgentShow', () => {
       id: 'user-1',
       name: 'user-1',
     },
-    name: 'token-1',
+    name: 'cluster-agent',
     tokens: {
       count: 1,
       nodes: [],
       pageInfo: null,
     },
+    userAccessAuthorizations: {
+      config: {
+        access_as: { agent: {} },
+      },
+    },
   };
 
   const createWrapper = ({ clusterAgent, queryResponse = null }) => {
@@ -54,6 +62,9 @@ describe('ClusterAgentShow', () => {
         apolloProvider,
         provide,
         stubs: { GlSprintf, TimeAgoTooltip, GlTab },
+        directives: {
+          GlModalDirective: createMockDirective('gl-modal-directive'),
+        },
       }),
     );
   };
@@ -79,8 +90,10 @@ describe('ClusterAgentShow', () => {
   const findEEWorkspacesTabSlot = () => wrapper.findByTestId('ee-workspaces-tab');
   const findActivity = () => wrapper.findComponent(ActivityEvents);
   const findIntegrationStatus = () => wrapper.findComponent(IntegrationStatus);
+  const findConnectButton = () => wrapper.findComponent(GlButton);
+  const findConnectModal = () => wrapper.findComponent(ConnectToAgentModal);
 
-  describe('default behaviour', () => {
+  describe('default behavior', () => {
     beforeEach(async () => {
       createWrapper({ clusterAgent: defaultClusterAgent });
       await waitForPromises();
@@ -126,6 +139,24 @@ describe('ClusterAgentShow', () => {
     it('renders activity events list', () => {
       expect(findActivity().exists()).toBe(true);
     });
+
+    it('renders connect to agent button', () => {
+      expect(findConnectButton().text()).toBe('Connect to cluster-agent');
+    });
+
+    it('renders connect to agent modal', () => {
+      expect(findConnectModal().props()).toEqual({
+        agentId: '1',
+        projectPath: 'path/to/project',
+        isConfigured: true,
+      });
+    });
+
+    it('binds connect to agent button to the proper modal', () => {
+      const binding = getBinding(findConnectButton().element, 'gl-modal-directive');
+
+      expect(binding.value).toBe(CONNECT_MODAL_ID);
+    });
   });
 
   describe('when create user is unknown', () => {
diff --git a/spec/frontend/clusters/mock_data.js b/spec/frontend/clusters/mock_data.js
index f3736f03e03..e9ab822832d 100644
--- a/spec/frontend/clusters/mock_data.js
+++ b/spec/frontend/clusters/mock_data.js
@@ -202,6 +202,7 @@ export const getTokenResponse = {
       clusterAgent: {
         id: 'cluster-agent-id',
         createdAt: '2022-03-13T18:42:44Z',
+        userAccessAuthorizations: null,
         createdByUser: {
           ...user,
         },
diff --git a/spec/frontend/clusters_list/components/agent_table_spec.js b/spec/frontend/clusters_list/components/agent_table_spec.js
index d8357d1d0ef..1ca75e5289b 100644
--- a/spec/frontend/clusters_list/components/agent_table_spec.js
+++ b/spec/frontend/clusters_list/components/agent_table_spec.js
@@ -1,10 +1,21 @@
-import { GlLink, GlIcon, GlBadge, GlTable, GlPagination } from '@gitlab/ui';
+import { nextTick } from 'vue';
+import {
+  GlLink,
+  GlIcon,
+  GlBadge,
+  GlTable,
+  GlPagination,
+  GlDisclosureDropdown,
+  GlDisclosureDropdownItem,
+} from '@gitlab/ui';
 import { sprintf } from '~/locale';
 import AgentTable from '~/clusters_list/components/agent_table.vue';
 import DeleteAgentButton from '~/clusters_list/components/delete_agent_button.vue';
-import { I18N_AGENT_TABLE } from '~/clusters_list/constants';
+import ConnectToAgentModal from '~/clusters_list/components/connect_to_agent_modal.vue';
+import { I18N_AGENT_TABLE, CONNECT_MODAL_ID } from '~/clusters_list/constants';
 import { mountExtended } from 'helpers/vue_test_utils_helper';
 import { stubComponent } from 'helpers/stub_component';
+import { createMockDirective, getBinding } from 'helpers/vue_mock_directive';
 import timeagoMixin from '~/vue_shared/mixins/timeago';
 import { clusterAgents, connectedTimeNow, connectedTimeInactive } from './mock_data';
 
@@ -13,6 +24,7 @@ const defaultConfigHelpUrl =
 
 const provideData = {
   kasCheckVersion: '14.8.0',
+  projectPath: 'path/to/project',
 };
 const defaultProps = {
   agents: clusterAgents,
@@ -44,6 +56,10 @@ describe('AgentTable', () => {
   const findSharedBadgeByRow = (at) => findTableRow(at).findComponent(GlBadge);
   const findDeleteAgentButtonByRow = (at) => findTableRow(at).findComponent(DeleteAgentButton);
   const findPagination = () => wrapper.findComponent(GlPagination);
+  const findDisclosureDropdown = () => wrapper.findComponent(GlDisclosureDropdown);
+  const findDisclosureDropdownItem = () =>
+    wrapper.findAllComponents(GlDisclosureDropdownItem).at(0);
+  const findConnectModal = () => wrapper.findComponent(ConnectToAgentModal);
 
   const createWrapper = ({ provide = provideData, propsData = defaultProps } = {}) => {
     wrapper = mountExtended(AgentTable, {
@@ -52,6 +68,9 @@ describe('AgentTable', () => {
       stubs: {
         DeleteAgentButton: DeleteAgentButtonStub,
       },
+      directives: {
+        GlModalDirective: createMockDirective('gl-modal-directive'),
+      },
     });
   };
 
@@ -125,9 +144,39 @@ describe('AgentTable', () => {
         },
       );
 
-      it('displays actions menu for each agent except the shared agents', () => {
-        expect(findDeleteAgentButtons()).toHaveLength(clusterAgents.length - 1);
-        expect(findDeleteAgentButtonByRow(9).exists()).toBe(false);
+      describe('actions menu', () => {
+        it('renders dropdown for the actions', () => {
+          expect(findDisclosureDropdown().attributes('title')).toBe('Actions');
+        });
+
+        it('renders dropdown item for connecting to cluster action', () => {
+          expect(findDisclosureDropdownItem().text()).toBe('Connect to agent-1');
+        });
+
+        it('binds dropdown item to the proper modal', () => {
+          const binding = getBinding(findDisclosureDropdownItem().element, 'gl-modal-directive');
+
+          expect(binding.value).toBe(CONNECT_MODAL_ID);
+        });
+
+        it('renders connect to agent modal when the agent is selected', async () => {
+          expect(findConnectModal().exists()).toBe(false);
+          findDisclosureDropdownItem().vm.$emit('action');
+          findDisclosureDropdownItem().vm.$emit('click');
+
+          await nextTick();
+
+          expect(findConnectModal().props()).toEqual({
+            agentId: 'gid://gitlab/Clusters::Agent/1',
+            projectPath: 'path/to/project',
+            isConfigured: true,
+          });
+        });
+
+        it('displays delete agent button for each agent except the shared agents', () => {
+          expect(findDeleteAgentButtons()).toHaveLength(clusterAgents.length - 1);
+          expect(findDeleteAgentButtonByRow(9).exists()).toBe(false);
+        });
       });
     });
 
@@ -165,7 +214,7 @@ describe('AgentTable', () => {
 
         beforeEach(() => {
           createWrapper({
-            provide: { kasCheckVersion },
+            provide: { kasCheckVersion, projectPath: 'path/to/project' },
             propsData: { agents: [currentAgent] },
           });
         });
diff --git a/spec/frontend/clusters_list/components/agents_spec.js b/spec/frontend/clusters_list/components/agents_spec.js
index c86f973e1d2..3cfaf01d046 100644
--- a/spec/frontend/clusters_list/components/agents_spec.js
+++ b/spec/frontend/clusters_list/components/agents_spec.js
@@ -98,6 +98,7 @@ describe('Agents', () => {
         name: 'agent-1',
         webPath: '/agent-1',
         createdAt: testDate,
+        userAccessAuthorizations: null,
         connections: null,
         tokens: null,
       },
@@ -107,6 +108,7 @@ describe('Agents', () => {
         name: 'agent-2',
         webPath: '/agent-2',
         createdAt: testDate,
+        userAccessAuthorizations: null,
         connections: null,
         tokens: {
           nodes: [
@@ -126,6 +128,7 @@ describe('Agents', () => {
           name: 'ci-agent-1',
           webPath: 'shared-project/agent-1',
           createdAt: testDate,
+          userAccessAuthorizations: null,
           connections: null,
           tokens: null,
         },
diff --git a/spec/frontend/clusters_list/components/connect_to_agent_modal_spec.js b/spec/frontend/clusters_list/components/connect_to_agent_modal_spec.js
new file mode 100644
index 00000000000..d3e436d9d73
--- /dev/null
+++ b/spec/frontend/clusters_list/components/connect_to_agent_modal_spec.js
@@ -0,0 +1,126 @@
+import { GlLink, GlModal, GlSprintf, GlButton } from '@gitlab/ui';
+import { nextTick } from 'vue';
+import { shallowMount } from '@vue/test-utils';
+import ConnectToAgentModal from '~/clusters_list/components/connect_to_agent_modal.vue';
+import ModalCopyButton from '~/vue_shared/components/modal_copy_button.vue';
+import CodeBlockHighlighted from '~/vue_shared/components/code_block_highlighted.vue';
+import { CONNECT_MODAL_ID } from '~/clusters_list/constants';
+import { stubComponent } from 'helpers/stub_component';
+
+const projectPath = 'path/to/project';
+const agentId = '123';
+
+const glabCommand =
+  'glab cluster agent update-kubeconfig --repo path/to/project --agent 123 --use-context';
+const yamlCommand = `user_access:
+  access_as:
+      agent: {} # for free
+      user: {} # for premium+
+  projects:
+      - id: <current project path>`;
+
+describe('ConnectToAgentModal', () => {
+  let wrapper;
+
+  const findModal = () => wrapper.findComponent(GlModal);
+  const findModalCopyButton = () => wrapper.findComponent(ModalCopyButton);
+  const findCodeBlock = () => wrapper.findComponent(CodeBlockHighlighted);
+  const findDocsLink = () => wrapper.findComponent(GlLink);
+  const findCloseButton = () => wrapper.findComponent(GlButton);
+
+  const createWrapper = ({ isConfigured = false } = {}) => {
+    const propsData = {
+      projectPath,
+      agentId,
+      isConfigured,
+    };
+
+    wrapper = shallowMount(ConnectToAgentModal, {
+      propsData,
+      stubs: {
+        GlSprintf,
+        GlModal: stubComponent(GlModal, {
+          template: '<div><slot></slot><slot name="modal-footer"></slot></div>',
+        }),
+      },
+    });
+  };
+
+  describe('default', () => {
+    beforeEach(() => {
+      createWrapper();
+    });
+
+    it('renders correct title for the modal', () => {
+      expect(findModal().props('title')).toBe('Connect to a cluster');
+    });
+
+    it('renders link to the docs', () => {
+      expect(findDocsLink().attributes('href')).toBe('/help/user/clusters/agent/user_access');
+      expect(findDocsLink().text()).toBe('Learn more about user access.');
+    });
+
+    it('renders close button', () => {
+      expect(findCloseButton().text()).toBe('Close');
+    });
+
+    it('hides the modal whe close button is clicked', async () => {
+      findModal().vm.$emit('change', true);
+      await nextTick();
+      expect(findModal().props('visible')).toBe(true);
+
+      findCloseButton().vm.$emit('click');
+      await nextTick();
+
+      expect(findModal().props('visible')).toBe(false);
+    });
+  });
+
+  describe('when the agent is configured', () => {
+    beforeEach(() => {
+      createWrapper({ isConfigured: true });
+    });
+
+    it('renders correct description for the modal', () => {
+      expect(findModal().text()).toContain(
+        'You can connect to your cluster from the command line. Configure kubectl command-line access by running the following command:',
+      );
+    });
+
+    it('renders code block with the correct command', () => {
+      expect(findCodeBlock().props('language')).toBe('shell');
+      expect(findCodeBlock().props('code')).toBe(glabCommand);
+    });
+
+    it('renders copy button with the correct props', () => {
+      expect(findModalCopyButton().props()).toMatchObject({
+        text: glabCommand,
+        modalId: CONNECT_MODAL_ID,
+      });
+    });
+  });
+
+  describe('when the agent is not configured', () => {
+    beforeEach(() => {
+      createWrapper();
+    });
+
+    it('renders correct description for the modal', () => {
+      expect(findModal().text()).toContain(
+        'You can connect to your cluster from the command line. To use this feature, configure user_access in the agent configuration project.',
+      );
+    });
+
+    it('renders code block with the correct command', () => {
+      expect(findCodeBlock().props('language')).toBe('yaml');
+      expect(findCodeBlock().props('code')).toBe(yamlCommand);
+    });
+
+    it('renders copy button with the correct props', () => {
+      expect(findModalCopyButton().props()).toMatchObject({
+        text: yamlCommand,
+        modalId: CONNECT_MODAL_ID,
+      });
+    });
+  });
+});
diff --git a/spec/frontend/clusters_list/components/delete_agent_button_spec.js b/spec/frontend/clusters_list/components/delete_agent_button_spec.js
index afb12d9c856..8436e50b7e6 100644
--- a/spec/frontend/clusters_list/components/delete_agent_button_spec.js
+++ b/spec/frontend/clusters_list/components/delete_agent_button_spec.js
@@ -117,13 +117,11 @@ describe('DeleteAgentButton', () => {
 
   describe('delete agent action', () => {
     it('displays a delete button', () => {
-      expect(findDeleteBtn().attributes('aria-label')).toBe(DELETE_AGENT_BUTTON.deleteButton);
+      expect(findDeleteBtn().text()).toBe(DELETE_AGENT_BUTTON.deleteButton);
     });
 
-    it('shows a tooltip for the button', () => {
-      expect(getTooltipText(findDeleteAgentButtonTooltip().element)).toBe(
-        DELETE_AGENT_BUTTON.deleteButton,
-      );
+    it("doesn't show a tooltip for the enabled button", () => {
+      expect(getTooltipText(findDeleteAgentButtonTooltip().element)).toBe('');
     });
 
     describe('when clicking the delete button', () => {
diff --git a/spec/frontend/clusters_list/components/mock_data.js b/spec/frontend/clusters_list/components/mock_data.js
index 161ea4566e1..aea70e1b6f2 100644
--- a/spec/frontend/clusters_list/components/mock_data.js
+++ b/spec/frontend/clusters_list/components/mock_data.js
@@ -26,6 +26,11 @@ export const clusterAgents = [
     webPath: '/agent-1',
     status: 'unused',
     lastContact: null,
+    userAccessAuthorizations: {
+      config: {
+        access_as: { agent: {} },
+      },
+    },
     tokens: null,
   },
   {
@@ -34,6 +39,7 @@ export const clusterAgents = [
     webPath: '/agent-2',
     status: 'active',
     lastContact: connectedTimeNow.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -58,6 +64,7 @@ export const clusterAgents = [
     webPath: '/agent-3',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -79,6 +86,7 @@ export const clusterAgents = [
     webPath: '/agent-4',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -103,6 +111,7 @@ export const clusterAgents = [
     webPath: '/agent-5',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -127,6 +136,7 @@ export const clusterAgents = [
     webPath: '/agent-6',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -148,6 +158,7 @@ export const clusterAgents = [
     webPath: '/agent-7',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -169,6 +180,7 @@ export const clusterAgents = [
     webPath: '/agent-8',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -190,6 +202,7 @@ export const clusterAgents = [
     webPath: '/agent-9',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     connections: {
       nodes: [
         {
@@ -211,6 +224,7 @@ export const clusterAgents = [
     webPath: 'shared-project/agent-1',
     status: 'inactive',
     lastContact: connectedTimeInactive.getTime(),
+    userAccessAuthorizations: null,
     isShared: true,
     connections: null,
     tokens: null,
diff --git a/spec/frontend/clusters_list/mocks/apollo.js b/spec/frontend/clusters_list/mocks/apollo.js
index c0e25d174ae..55839ac36de 100644
--- a/spec/frontend/clusters_list/mocks/apollo.js
+++ b/spec/frontend/clusters_list/mocks/apollo.js
@@ -4,6 +4,7 @@ const agent = {
   name: 'agent-name',
   webPath: 'agent-webPath',
   createdAt: new Date(),
+  userAccessAuthorizations: null,
 };
 const token = {
   id: 'token-id',
diff --git a/spec/frontend/environments/environment_details/components/kubernetes/kubernetes_overview_spec.js b/spec/frontend/environments/environment_details/components/kubernetes/kubernetes_overview_spec.js
index d0330b23d07..611a496389a 100644
--- a/spec/frontend/environments/environment_details/components/kubernetes/kubernetes_overview_spec.js
+++ b/spec/frontend/environments/environment_details/components/kubernetes/kubernetes_overview_spec.js
@@ -1,10 +1,18 @@
 import Vue, { nextTick } from 'vue';
 import VueApollo from 'vue-apollo';
-import { GlEmptyState, GlAlert, GlDrawer } from '@gitlab/ui';
+import {
+  GlEmptyState,
+  GlAlert,
+  GlDrawer,
+  GlSprintf,
+  GlDisclosureDropdown,
+  GlDisclosureDropdownItem,
+} from '@gitlab/ui';
 import { shallowMount } from '@vue/test-utils';
 import waitForPromises from 'helpers/wait_for_promises';
 import createMockApollo from 'helpers/mock_apollo_helper';
 import { getIdFromGraphQLId } from '~/graphql_shared/utils';
+import { createMockDirective, getBinding } from 'helpers/vue_mock_directive';
 import WorkloadDetails from '~/kubernetes_dashboard/components/workload_details.vue';
 import KubernetesOverview from '~/environments/environment_details/components/kubernetes/kubernetes_overview.vue';
 import KubernetesStatusBar from '~/environments/environment_details/components/kubernetes/kubernetes_status_bar.vue';
@@ -12,8 +20,10 @@ import KubernetesAgentInfo from '~/environments/environment_details/components/k
 import KubernetesTabs from '~/environments/environment_details/components/kubernetes/kubernetes_tabs.vue';
 import DeletePodModal from '~/environments/environment_details/components/kubernetes/delete_pod_modal.vue';
 import { k8sResourceType } from '~/environments/graphql/resolvers/kubernetes/constants';
+import ConnectToAgentModal from '~/clusters_list/components/connect_to_agent_modal.vue';
 import { mockPodsTableItems } from 'jest/kubernetes_dashboard/graphql/mock_data';
 import eventHub from '~/environments/event_hub';
+import { CONNECT_MODAL_ID } from '~/clusters_list/constants';
 import { agent, kubernetesNamespace } from '../../../graphql/mock_data';
 import { mockKasTunnelUrl, fluxResourceStatus, fluxKustomization } from '../../../mock_data';
 
@@ -30,6 +40,7 @@ describe('~/environments/environment_details/components/kubernetes/kubernetes_ov
 
   const provide = {
     kasTunnelUrl: mockKasTunnelUrl,
+    projectPath: 'path/to/project',
   };
 
   const configuration = {
@@ -72,6 +83,10 @@ describe('~/environments/environment_details/components/kubernetes/kubernetes_ov
         fluxResourcePath,
       },
       apolloProvider,
+      stubs: { GlSprintf },
+      directives: {
+        GlModalDirective: createMockDirective('gl-modal-directive'),
+      },
     });
   };
 
@@ -83,6 +98,9 @@ describe('~/environments/environment_details/components/kubernetes/kubernetes_ov
   const findDrawer = () => wrapper.findComponent(GlDrawer);
   const findWorkloadDetails = () => wrapper.findComponent(WorkloadDetails);
   const findDeletePodModal = () => wrapper.findComponent(DeletePodModal);
+  const findDisclosureDropdown = () => wrapper.findComponent(GlDisclosureDropdown);
+  const findDisclosureDropdownItem = () => wrapper.findComponent(GlDisclosureDropdownItem);
+  const findConnectModal = () => wrapper.findComponent(ConnectToAgentModal);
 
   describe('when the agent data is present', () => {
     it('renders kubernetes agent info', () => {
@@ -117,6 +135,34 @@ describe('~/environments/environment_details/components/kubernetes/kubernetes_ov
       });
     });
 
+    describe('actions menu', () => {
+      beforeEach(() => {
+        wrapper = createWrapper();
+      });
+
+      it('renders dropdown for the actions', () => {
+        expect(findDisclosureDropdown().attributes('title')).toBe('Actions');
+      });
+
+      it('renders dropdown item for connecting to cluster action', () => {
+        expect(findDisclosureDropdownItem().text()).toBe('Connect to agent');
+      });
+
+      it('binds dropdown item to the proper modal', () => {
+        const binding = getBinding(findDisclosureDropdownItem().element, 'gl-modal-directive');
+
+        expect(binding.value).toBe(CONNECT_MODAL_ID);
+      });
+
+      it('renders connect to agent modal', () => {
+        expect(findConnectModal().props()).toEqual({
+          agentId: 'gid://gitlab/ClusterAgent/1',
+          projectPath: 'path/to/project',
+          isConfigured: true,
+        });
+      });
+    });
+
     describe('Kubernetes health status', () => {
       beforeEach(() => {
         wrapper = createWrapper();
diff --git a/spec/frontend/lib/utils/ignore_while_pending_spec.js b/spec/frontend/lib/utils/ignore_while_pending_spec.js
index b68ba936dde..b176dfc5d42 100644
--- a/spec/frontend/lib/utils/ignore_while_pending_spec.js
+++ b/spec/frontend/lib/utils/ignore_while_pending_spec.js
@@ -10,15 +10,12 @@ describe('~/lib/utils/ignore_while_pending', () => {
   let subject;
 
   beforeEach(() => {
-    spy = jest.fn().mockImplementation(
-      // NOTE: We can't pass an arrow function here...
-      function foo() {
-        return new Promise((resolve, reject) => {
-          spyResolve = resolve;
-          spyReject = reject;
-        });
-      },
-    );
+    spy = jest.fn().mockImplementation(() => {
+      return new Promise((resolve, reject) => {
+        spyResolve = resolve;
+        spyReject = reject;
+      });
+    });
   });
 
   describe('with non-instance method', () => {
diff --git a/spec/graphql/types/clusters/agent_type_spec.rb b/spec/graphql/types/clusters/agent_type_spec.rb
index 4bae0ea5602..ae4722d39ac 100644
--- a/spec/graphql/types/clusters/agent_type_spec.rb
+++ b/spec/graphql/types/clusters/agent_type_spec.rb
@@ -3,7 +3,10 @@
 require 'spec_helper'
 
 RSpec.describe GitlabSchema.types['ClusterAgent'] do
-  let(:fields) { %i[created_at created_by_user id name project updated_at tokens web_path connections activity_events] }
+  let(:fields) do
+    %i[created_at created_by_user id name project updated_at tokens web_path connections activity_events
+      user_access_authorizations]
+  end
 
   it { expect(described_class.graphql_name).to eq('ClusterAgent') }
 
diff --git a/spec/lib/gitlab/background_migration/fix_namespace_id_for_work_item_parent_links_spec.rb b/spec/lib/gitlab/background_migration/fix_namespace_id_for_work_item_parent_links_spec.rb
new file mode 100644
index 00000000000..c0412189fdc
--- /dev/null
+++ b/spec/lib/gitlab/background_migration/fix_namespace_id_for_work_item_parent_links_spec.rb
@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.describe Gitlab::BackgroundMigration::FixNamespaceIdForWorkItemParentLinks, feature_category: :team_planning do
+  let(:work_item_parent_links) { table(:work_item_parent_links) }
+  let(:issues) { table(:issues) }
+  let(:namespaces) { table(:namespaces) }
+  let!(:work_item_type_id) { table(:work_item_types).where(base_type: 1).first.id }
+
+  let!(:author) { table(:users).create!(username: 'tester', projects_limit: 100) }
+
+  let!(:namespace1) { namespaces.create!(name: 'Namespace 1', path: 'namespace1') }
+  let!(:namespace2) { namespaces.create!(name: 'Namespace 2', path: 'namespace2') }
+
+  let!(:parent) { issues.create!(title: 'Parent', namespace_id: namespace1.id, work_item_type_id: work_item_type_id) }
+  let!(:issue1) { issues.create!(title: 'Issue 1', namespace_id: namespace1.id, work_item_type_id: work_item_type_id) }
+  let!(:issue2) { issues.create!(title: 'Issue 2', namespace_id: namespace2.id, work_item_type_id: work_item_type_id) }
+  let!(:issue3) { issues.create!(title: 'Issue 3', namespace_id: namespace1.id, work_item_type_id: work_item_type_id) }
+
+  let!(:correct_work_item_parent_link1) do
+    work_item_parent_links.create!(work_item_id: issue1.id, work_item_parent_id: parent.id, namespace_id: namespace1.id)
+  end
+
+  let!(:correct_work_item_parent_link2) do
+    work_item_parent_links.create!(work_item_id: issue2.id, work_item_parent_id: parent.id, namespace_id: namespace2.id)
+  end
+
+  let!(:inccorrect_work_item_parent_link) do
+    work_item_parent_links.create!(work_item_id: issue3.id, work_item_parent_id: parent.id, namespace_id: namespace2.id)
+  end
+
+  let(:start_id) { work_item_parent_links.minimum(:id) }
+  let(:end_id) { work_item_parent_links.maximum(:id) }
+
+  describe '#perform' do
+    it 'fixes the namespace_id for work item parent links' do
+      expect(work_item_parent_links.where(namespace_id: namespace1.id).count).to eq(1)
+      expect(work_item_parent_links.where(namespace_id: namespace2.id).count).to eq(2)
+
+      described_class.new(
+        start_id: start_id,
+        end_id: end_id,
+        batch_table: :work_item_parent_links,
+        batch_column: :id,
+        sub_batch_size: 2,
+        pause_ms: 0,
+        connection: ApplicationRecord.connection
+      ).perform
+
+      expect(work_item_parent_links.where(namespace_id: namespace1.id).count).to eq(2)
+      expect(work_item_parent_links.where(namespace_id: namespace2.id).count).to eq(1)
+
+      expect(work_item_parent_links.where(work_item_id: issue1.id).first.namespace_id).to eq(namespace1.id)
+      expect(work_item_parent_links.where(work_item_id: issue2.id).first.namespace_id).to eq(namespace2.id)
+      expect(work_item_parent_links.where(work_item_id: issue3.id).first.namespace_id).to eq(namespace1.id)
+    end
+  end
+end
diff --git a/spec/lib/gitlab/content_security_policy/config_loader_spec.rb b/spec/lib/gitlab/content_security_policy/config_loader_spec.rb
index 9abea9f1281..b0bec6481a2 100644
--- a/spec/lib/gitlab/content_security_policy/config_loader_spec.rb
+++ b/spec/lib/gitlab/content_security_policy/config_loader_spec.rb
@@ -479,16 +479,6 @@ RSpec.describe Gitlab::ContentSecurityPolicy::ConfigLoader, feature_category: :s
         it 'adds Snowplow Micro URL with trailing slash to connect-src' do
           expect(connect_src).to match(Regexp.new(snowplow_micro_url))
         end
-
-        context 'when not enabled using config' do
-          before do
-            stub_config(snowplow_micro: { enabled: false })
-          end
-
-          it 'does not add Snowplow Micro URL to connect-src' do
-            expect(connect_src).not_to include(snowplow_micro_url)
-          end
-        end
       end
     end
 
diff --git a/spec/lib/gitlab/tracking_spec.rb b/spec/lib/gitlab/tracking_spec.rb
index 43dcfc585b5..c04fd6e4d5e 100644
--- a/spec/lib/gitlab/tracking_spec.rb
+++ b/spec/lib/gitlab/tracking_spec.rb
@@ -221,35 +221,23 @@ RSpec.describe Gitlab::Tracking, feature_category: :application_instrumentation
   end
 
   describe 'snowplow_micro_enabled?' do
-    where(:development?, :micro_verification_enabled?, :snowplow_micro_enabled, :result) do
-      true  | true  | true  | true
-      true  | true  | false | false
-      false | true  | true  | true
-      false | true  | false | false
-      false | false | true  | false
-      false | false | false | false
-      true  | false | true  | true
-      true  | false | false | false
+    where(:development?, :micro_verification_enabled?, :result) do
+      true  | true  | true
+      false | true  | true
+      true  | false | true
+      false | false | false
     end
 
     with_them do
       before do
         allow(Rails.env).to receive(:development?).and_return(development?)
         allow(described_class).to receive(:micro_verification_enabled?).and_return(micro_verification_enabled?)
-        stub_config(snowplow_micro: { enabled: snowplow_micro_enabled })
       end
 
       subject { described_class.snowplow_micro_enabled? }
 
       it { is_expected.to be(result) }
     end
-
-    it 'returns false when snowplow_micro is not configured' do
-      allow(Rails.env).to receive(:development?).and_return(true)
-      allow(Gitlab.config).to receive(:snowplow_micro).and_raise(GitlabSettings::MissingSetting)
-
-      expect(described_class).not_to be_snowplow_micro_enabled
-    end
   end
 
   describe '.micro_verification_enabled?' do
diff --git a/spec/migrations/20240722144720_queue_fix_namespace_id_for_work_item_parent_links_spec.rb b/spec/migrations/20240722144720_queue_fix_namespace_id_for_work_item_parent_links_spec.rb
new file mode 100644
index 00000000000..924a332b8a5
--- /dev/null
+++ b/spec/migrations/20240722144720_queue_fix_namespace_id_for_work_item_parent_links_spec.rb
@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe QueueFixNamespaceIdForWorkItemParentLinks, feature_category: :team_planning do
+  let!(:batched_migration) { described_class::MIGRATION }
+
+  it 'schedules a new batched migration' do
+    reversible_migration do |migration|
+      migration.before -> {
+        expect(batched_migration).not_to have_scheduled_batched_migration
+      }
+
+      migration.after -> {
+        expect(batched_migration).to have_scheduled_batched_migration(
+          table_name: :work_item_parent_links,
+          column_name: :id,
+          interval: described_class::DELAY_INTERVAL,
+          batch_size: described_class::BATCH_SIZE,
+          sub_batch_size: described_class::SUB_BATCH_SIZE
+        )
+      }
+    end
+  end
+end
diff --git a/spec/migrations/update_ci_max_total_yaml_size_bytes_new_default_value_spec.rb b/spec/migrations/update_ci_max_total_yaml_size_bytes_new_default_value_spec.rb
new file mode 100644
index 00000000000..8d1de2a86cc
--- /dev/null
+++ b/spec/migrations/update_ci_max_total_yaml_size_bytes_new_default_value_spec.rb
@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe UpdateCiMaxTotalYamlSizeBytesNewDefaultValue, feature_category: :pipeline_composition do
+  let(:application_setting) { table(:application_settings) }
+
+  describe '#up' do
+    it 'updates ci_max_total_yaml_size_bytes to max_yaml_size_bytes * ci_max_includes' do
+      application_setting.create!(max_yaml_size_bytes: 2.megabytes, ci_max_includes: 50)
+
+      migrate!
+
+      expect(application_setting.first.ci_max_total_yaml_size_bytes).to eq(100.megabytes)
+    end
+
+    it 'caps ci_max_total_yaml_size_bytes at 2147483647 bytes' do
+      application_setting.create!(max_yaml_size_bytes: 50.megabytes, ci_max_includes: 100)
+
+      migrate!
+
+      expect(application_setting.first.ci_max_total_yaml_size_bytes).to eq(2147483647)
+    end
+  end
+end
diff --git a/spec/migrations/update_max_total_yaml_size_bytes_value_spec.rb b/spec/migrations/update_max_total_yaml_size_bytes_value_spec.rb
new file mode 100644
index 00000000000..3b32df78f01
--- /dev/null
+++ b/spec/migrations/update_max_total_yaml_size_bytes_value_spec.rb
@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require_migration!
+
+RSpec.describe UpdateMaxTotalYamlSizeBytesValue, feature_category: :pipeline_composition do
+  let(:application_setting) { table(:application_settings) }
+
+  describe '#up' do
+    it 'updates the default value from 1MB to 2MB' do
+      application_setting.create!(max_yaml_size_bytes: 1.megabyte)
+
+      migrate!
+
+      expect(application_setting.first.max_yaml_size_bytes).to eq(2.megabytes)
+    end
+
+    it 'increases non-default value by 20%' do
+      custom_value = 5.megabytes
+      application_setting.create!(max_yaml_size_bytes: custom_value)
+
+      migrate!
+
+      expect(application_setting.first.max_yaml_size_bytes).to eq((custom_value * 1.2).to_i)
+    end
+
+    it 'does not change values that are already 2MB' do
+      application_setting.create!(max_yaml_size_bytes: 2.megabytes)
+
+      migrate!
+
+      expect(application_setting.first.max_yaml_size_bytes).to eq(2.megabytes)
+    end
+
+    it 'sets the value to max integer when 20% increase exceeds max int' do
+      max_int = 2147483647
+      custom_value = (max_int / 1.2).to_i + 1
+      application_setting.create!(max_yaml_size_bytes: custom_value)
+
+      migrate!
+
+      expect(application_setting.first.max_yaml_size_bytes).to eq(max_int)
+    end
+  end
+end
diff --git a/spec/models/repository_spec.rb b/spec/models/repository_spec.rb
index 443b5114d18..f0bfcf2bf30 100644
--- a/spec/models/repository_spec.rb
+++ b/spec/models/repository_spec.rb
@@ -2699,16 +2699,6 @@ RSpec.describe Repository, feature_category: :source_code_management do
     end
   end
 
-  describe '#expire_branch_names_cache' do
-    it 'expires the cache' do
-      expect(repository).to receive(:expire_method_caches)
-        .with(%i[branch_names branch_count])
-        .and_call_original
-
-      repository.expire_branch_names_cache
-    end
-  end
-
   describe '#expire_protected_branches_cache' do
     it 'expires the cache' do
       expect_next_instance_of(ProtectedBranches::CacheService) do |cache_service|
@@ -2739,16 +2729,6 @@ RSpec.describe Repository, feature_category: :source_code_management do
     end
   end
 
-  describe '#expire_tag_names_cache' do
-    it 'expires the cache' do
-      expect(repository).to receive(:expire_method_caches)
-        .with(%i[tag_names tag_count])
-        .and_call_original
-
-      repository.expire_tag_names_cache
-    end
-  end
-
   describe '#add_tag' do
     let(:user) { build_stubbed(:user) }
 
diff --git a/spec/workers/post_receive_spec.rb b/spec/workers/post_receive_spec.rb
index cb3211ca235..ec4daa80ceb 100644
--- a/spec/workers/post_receive_spec.rb
+++ b/spec/workers/post_receive_spec.rb
@@ -23,9 +23,10 @@ RSpec.describe PostReceive, :clean_gitlab_redis_shared_state, feature_category:
   end
 
   let(:job_args) { [gl_repository, key_id, base64_changes] }
+  let(:worker) { described_class.new }
 
   def perform(changes: base64_changes)
-    described_class.new.perform(gl_repository, key_id, changes)
+    worker.perform(gl_repository, key_id, changes)
   end
 
   context 'as a sidekiq worker' do
@@ -450,9 +451,13 @@ RSpec.describe PostReceive, :clean_gitlab_redis_shared_state, feature_category:
           end
 
           context 'with post_receive_sync_refresh_cache feature flag enabled' do
-            it 'refreshes branch names cache' do
-              expect(snippet.repository).to receive(:expire_branch_names_cache).and_call_original
-              expect(snippet.repository).to receive(:branch_names).and_call_original
+            it 'refreshes branch names cache in a lock' do
+              expect(worker).to receive(:in_lock).and_wrap_original do |method, *args, **_kwargs, &block|
+                expect(snippet.repository).to receive(:expire_branches_cache).and_call_original
+                expect(snippet.repository).to receive(:branch_names).and_call_original
+
+                method.call(*args, &block)
+              end
 
               perform
             end
@@ -472,8 +477,8 @@ RSpec.describe PostReceive, :clean_gitlab_redis_shared_state, feature_category:
               stub_feature_flags(post_receive_sync_refresh_cache: false)
             end
 
-            it 'does not expire branch names cache' do
-              expect(snippet.repository).not_to receive(:expire_tag_names_cache)
+            it 'does not expire in a lock' do
+              expect(worker).not_to receive(:in_lock)
               expect(snippet.repository).not_to receive(:tag_names)
 
               perform
@@ -502,23 +507,27 @@ RSpec.describe PostReceive, :clean_gitlab_redis_shared_state, feature_category:
 
             perform
           end
-        end
 
-        context 'with post_receive_sync_refresh_cache feature flag enabled' do
-          it 'refreshes the tag names cache' do
-            expect(snippet.repository).to receive(:expire_tag_names_cache).and_call_original
-            expect(snippet.repository).to receive(:tag_names).and_call_original
+          context 'with post_receive_sync_refresh_cache feature flag enabled' do
+            it 'refreshes the tag names cache' do
+              expect(worker).to receive(:in_lock).and_wrap_original do |method, *args, **_kwargs, &block|
+                expect(snippet.repository).to receive(:expire_tags_cache).and_call_original
+                expect(snippet.repository).to receive(:tag_names).and_call_original
 
-            perform
-          end
-
-          context 'when exclusive lease fails' do
-            it 'logs a message' do
-              expect(snippet.repository).to receive(:tag_names).and_raise(Gitlab::ExclusiveLeaseHelpers::FailedToObtainLockError)
-              expect(Gitlab::GitLogger).to receive(:error).with("POST-RECEIVE: Failed to obtain lease for expiring tag name cache")
+                method.call(*args, &block)
+              end
 
               perform
             end
+
+            context 'when exclusive lease fails' do
+              it 'logs a message' do
+                expect(snippet.repository).to receive(:tag_names).and_raise(Gitlab::ExclusiveLeaseHelpers::FailedToObtainLockError)
+                expect(Gitlab::GitLogger).to receive(:error).with("POST-RECEIVE: Failed to obtain lease for expiring tag name cache")
+
+                perform
+              end
+            end
           end
         end
 
@@ -527,8 +536,8 @@ RSpec.describe PostReceive, :clean_gitlab_redis_shared_state, feature_category:
             stub_feature_flags(post_receive_sync_refresh_cache: false)
           end
 
-          it 'does not expire tag names cache' do
-            expect(snippet.repository).not_to receive(:expire_tag_names_cache)
+          it 'does not expire tags cache in a lock' do
+            expect(worker).not_to receive(:in_lock)
             expect(snippet.repository).not_to receive(:tag_names)
 
             perform
diff --git a/yarn.lock b/yarn.lock
index 138105a8ce5..48c7c0b3f6d 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -289,7 +289,7 @@
   resolved "https://registry.yarnpkg.com/@babel/helper-string-parser/-/helper-string-parser-7.24.7.tgz#4d2d0f14820ede3b9807ea5fc36dfc8cd7da07f2"
   integrity sha512-7MbVt6xrwFQbunH2DNQsAP5sTGxfqQtErvBIvIMi6EQnbgUOuVYanvREcmFrOPhoXBrTtjhhP+lW+o5UfK+tDg==
 
-"@babel/helper-validator-identifier@^7.15.7", "@babel/helper-validator-identifier@^7.22.20", "@babel/helper-validator-identifier@^7.24.7":
+"@babel/helper-validator-identifier@^7.22.20", "@babel/helper-validator-identifier@^7.24.5", "@babel/helper-validator-identifier@^7.24.7":
   version "7.24.7"
   resolved "https://registry.yarnpkg.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.24.7.tgz#75b889cfaf9e35c2aaf42cf0d72c8e91719251db"
   integrity sha512-rR+PBcQ1SMQDDyF6X0wxtG8QyLCgUB0eRAGguqRLfkCA87l7yAP7ehq8SNj96OOGTO8OBV70KhuFYcIkHXOg0w==
@@ -1319,21 +1319,21 @@
     core-js "^3.29.1"
     mitt "^3.0.1"
 
-"@gitlab/eslint-plugin@19.6.0":
-  version "19.6.0"
-  resolved "https://registry.yarnpkg.com/@gitlab/eslint-plugin/-/eslint-plugin-19.6.0.tgz#988413bc8f1ecea5815c08f7e0d2706850279dc1"
-  integrity sha512-fD85FlMAOKirfRMKuzJGrQwUGdxuYFsszQ5O8cKsn8wqDevQyjp2jT/tOUAPv0UUQTG93iM/DW2ZntLjbakQ5g==
+"@gitlab/eslint-plugin@19.6.1":
+  version "19.6.1"
+  resolved "https://registry.yarnpkg.com/@gitlab/eslint-plugin/-/eslint-plugin-19.6.1.tgz#1e59cb0d83e2f8522945b1b5f01d1fc284b7e729"
+  integrity sha512-VA5eH9U6qr3PH24/hhwNKS4AF3jPB78ZaBmuQipGsn0DlyOqOdg2JnuX7C5tR4yM1D7uK2FcAdrW4AGovEQ7Xw==
   dependencies:
     "@typescript-eslint/eslint-plugin" "^7.14.1"
     eslint-config-airbnb-base "^15.0.0"
-    eslint-config-prettier "^6.10.0"
-    eslint-plugin-import "^2.28.0"
-    eslint-plugin-jest "^27.2.1"
-    eslint-plugin-promise "^6.0.1"
-    eslint-plugin-unicorn "^40.1.0"
-    eslint-plugin-vue "^9.17.0"
+    eslint-config-prettier "^9.1.0"
+    eslint-plugin-import "^2.29.1"
+    eslint-plugin-jest "^28.6.0"
+    eslint-plugin-promise "^7.0.0"
+    eslint-plugin-unicorn "^55.0.0"
+    eslint-plugin-vue "^9.27.0"
     lodash "^4.17.21"
-    vue-eslint-parser "^9.3.1"
+    vue-eslint-parser "^9.4.3"
 
 "@gitlab/favicon-overlay@2.0.0":
   version "2.0.0"
@@ -3213,14 +3213,6 @@
     natural-compare "^1.4.0"
     ts-api-utils "^1.3.0"
 
-"@typescript-eslint/scope-manager@5.38.0":
-  version "5.38.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/scope-manager/-/scope-manager-5.38.0.tgz#8f0927024b6b24e28671352c93b393a810ab4553"
-  integrity sha512-ByhHIuNyKD9giwkkLqzezZ9y5bALW8VNY6xXcP+VxoH4JBDKjU5WNnsiD4HJdglHECdV+lyaxhvQjTUbRboiTA==
-  dependencies:
-    "@typescript-eslint/types" "5.38.0"
-    "@typescript-eslint/visitor-keys" "5.38.0"
-
 "@typescript-eslint/scope-manager@7.16.0":
   version "7.16.0"
   resolved "https://registry.yarnpkg.com/@typescript-eslint/scope-manager/-/scope-manager-7.16.0.tgz#eb0757af5720c9c53c8010d7a0355ae27e17b7e5"
@@ -3239,29 +3231,11 @@
     debug "^4.3.4"
     ts-api-utils "^1.3.0"
 
-"@typescript-eslint/types@5.38.0":
-  version "5.38.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/types/-/types-5.38.0.tgz#8cd15825e4874354e31800dcac321d07548b8a5f"
-  integrity sha512-HHu4yMjJ7i3Cb+8NUuRCdOGu2VMkfmKyIJsOr9PfkBVYLYrtMCK/Ap50Rpov+iKpxDTfnqvDbuPLgBE5FwUNfA==
-
 "@typescript-eslint/types@7.16.0":
   version "7.16.0"
   resolved "https://registry.yarnpkg.com/@typescript-eslint/types/-/types-7.16.0.tgz#60a19d7e7a6b1caa2c06fac860829d162a036ed2"
   integrity sha512-fecuH15Y+TzlUutvUl9Cc2XJxqdLr7+93SQIbcZfd4XRGGKoxyljK27b+kxKamjRkU7FYC6RrbSCg0ALcZn/xw==
 
-"@typescript-eslint/typescript-estree@5.38.0":
-  version "5.38.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/typescript-estree/-/typescript-estree-5.38.0.tgz#89f86b2279815c6fb7f57d68cf9b813f0dc25d98"
-  integrity sha512-6P0RuphkR+UuV7Avv7MU3hFoWaGcrgOdi8eTe1NwhMp2/GjUJoODBTRWzlHpZh6lFOaPmSvgxGlROa0Sg5Zbyg==
-  dependencies:
-    "@typescript-eslint/types" "5.38.0"
-    "@typescript-eslint/visitor-keys" "5.38.0"
-    debug "^4.3.4"
-    globby "^11.1.0"
-    is-glob "^4.0.3"
-    semver "^7.3.7"
-    tsutils "^3.21.0"
-
 "@typescript-eslint/typescript-estree@7.16.0":
   version "7.16.0"
   resolved "https://registry.yarnpkg.com/@typescript-eslint/typescript-estree/-/typescript-estree-7.16.0.tgz#98ac779d526fab2a781e5619c9250f3e33867c09"
@@ -3276,7 +3250,7 @@
     semver "^7.6.0"
     ts-api-utils "^1.3.0"
 
-"@typescript-eslint/utils@7.16.0":
+"@typescript-eslint/utils@7.16.0", "@typescript-eslint/utils@^6.0.0 || ^7.0.0 || ^8.0.0":
   version "7.16.0"
   resolved "https://registry.yarnpkg.com/@typescript-eslint/utils/-/utils-7.16.0.tgz#b38dc0ce1778e8182e227c98d91d3418449aa17f"
   integrity sha512-PqP4kP3hb4r7Jav+NiRCntlVzhxBNWq6ZQ+zQwII1y/G/1gdIPeYDCKr2+dH6049yJQsWZiHU6RlwvIFBXXGNA==
@@ -3286,26 +3260,6 @@
     "@typescript-eslint/types" "7.16.0"
     "@typescript-eslint/typescript-estree" "7.16.0"
 
-"@typescript-eslint/utils@^5.10.0":
-  version "5.38.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/utils/-/utils-5.38.0.tgz#5b31f4896471818153790700eb02ac869a1543f4"
-  integrity sha512-6sdeYaBgk9Fh7N2unEXGz+D+som2QCQGPAf1SxrkEr+Z32gMreQ0rparXTNGRRfYUWk/JzbGdcM8NSSd6oqnTA==
-  dependencies:
-    "@types/json-schema" "^7.0.9"
-    "@typescript-eslint/scope-manager" "5.38.0"
-    "@typescript-eslint/types" "5.38.0"
-    "@typescript-eslint/typescript-estree" "5.38.0"
-    eslint-scope "^5.1.1"
-    eslint-utils "^3.0.0"
-
-"@typescript-eslint/visitor-keys@5.38.0":
-  version "5.38.0"
-  resolved "https://registry.yarnpkg.com/@typescript-eslint/visitor-keys/-/visitor-keys-5.38.0.tgz#60591ca3bf78aa12b25002c0993d067c00887e34"
-  integrity sha512-MxnrdIyArnTi+XyFLR+kt/uNAcdOnmT+879os7qDRI+EYySR4crXJq9BXPfRzzLGq0wgxkwidrCJ9WCAoacm1w==
-  dependencies:
-    "@typescript-eslint/types" "5.38.0"
-    eslint-visitor-keys "^3.3.0"
-
 "@typescript-eslint/visitor-keys@7.16.0":
   version "7.16.0"
   resolved "https://registry.yarnpkg.com/@typescript-eslint/visitor-keys/-/visitor-keys-7.16.0.tgz#a1d99fa7a3787962d6e0efd436575ef840e23b06"
@@ -4437,15 +4391,15 @@ browserify-zlib@^0.2.0:
   dependencies:
     pako "~1.0.5"
 
-browserslist@^4.21.3, browserslist@^4.21.5, browserslist@^4.22.2:
-  version "4.22.2"
-  resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-4.22.2.tgz#704c4943072bd81ea18997f3bd2180e89c77874b"
-  integrity sha512-0UgcrvQmBDvZHFGdYUehrCNIazki7/lUP3kkoi/r3YB2amZbFM9J43ZRkJTXBUZK4gmx56+Sqk9+Vs9mwZx9+A==
+browserslist@^4.21.3, browserslist@^4.21.5, browserslist@^4.22.2, browserslist@^4.23.3:
+  version "4.23.3"
+  resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-4.23.3.tgz#debb029d3c93ebc97ffbc8d9cbb03403e227c800"
+  integrity sha512-btwCFJVjI4YWDNfau8RhZ+B1Q/VLoUITrm3RlP6y1tYGWIOa+InuYiRGXUBXo8nA1qKmHMyLB/iVQg5TT4eFoA==
   dependencies:
-    caniuse-lite "^1.0.30001565"
-    electron-to-chromium "^1.4.601"
-    node-releases "^2.0.14"
-    update-browserslist-db "^1.0.13"
+    caniuse-lite "^1.0.30001646"
+    electron-to-chromium "^1.5.4"
+    node-releases "^2.0.18"
+    update-browserslist-db "^1.1.0"
 
 bser@2.1.1:
   version "2.1.1"
@@ -4494,10 +4448,10 @@ buffer@^6.0.3:
     base64-js "^1.3.1"
     ieee754 "^1.2.1"
 
-builtin-modules@^3.0.0:
-  version "3.2.0"
-  resolved "https://registry.yarnpkg.com/builtin-modules/-/builtin-modules-3.2.0.tgz#45d5db99e7ee5e6bc4f362e008bf917ab5049887"
-  integrity sha512-lGzLKcioL90C7wMczpkY0n/oART3MbBa8R9OFGE1rJxoVI86u4WAGfEk8Wjv10eKSyTHVGkSo3bvBylCEtk7LA==
+builtin-modules@^3.3.0:
+  version "3.3.0"
+  resolved "https://registry.yarnpkg.com/builtin-modules/-/builtin-modules-3.3.0.tgz#cae62812b89801e9656336e46223e030386be7b6"
+  integrity sha512-zhaCDicdLuWN5UbN5IMnFqNMhNfo919sH85y2/ea+5Yg9TsTkeZxpL+JLbp6cgYFS4sRLp3YV4S6yDuqVWHYOw==
 
 builtin-status-codes@^3.0.0:
   version "3.0.0"
@@ -4619,10 +4573,10 @@ camelcase@^6.2.0:
   resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-6.3.0.tgz#5685b95eb209ac9c0c177467778c9c84df58ba9a"
   integrity sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==
 
-caniuse-lite@^1.0.30001464, caniuse-lite@^1.0.30001565:
-  version "1.0.30001576"
-  resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001576.tgz#893be772cf8ee6056d6c1e2d07df365b9ec0a5c4"
-  integrity sha512-ff5BdakGe2P3SQsMsiqmt1Lc8221NR1VzHj5jXN5vBny9A6fpze94HiVV/n7XRosOlsShJcvMv5mdnpjOGCEgg==
+caniuse-lite@^1.0.30001464, caniuse-lite@^1.0.30001646:
+  version "1.0.30001649"
+  resolved "https://registry.yarnpkg.com/caniuse-lite/-/caniuse-lite-1.0.30001649.tgz#3ec700309ca0da2b0d3d5fb03c411b191761c992"
+  integrity sha512-fJegqZZ0ZX8HOWr6rcafGr72+xcgJKI9oWfDW5DrD7ExUtgZC7a7R7ZYmZqplh7XDocFdGeIFn7roAxhOeYrPQ==
 
 canvas-confetti@^1.4.0:
   version "1.4.0"
@@ -4703,11 +4657,16 @@ ci-info@^2.0.0:
   resolved "https://registry.yarnpkg.com/ci-info/-/ci-info-2.0.0.tgz#67a9e964be31a51e15e5010d58e6f12834002f46"
   integrity sha512-5tK7EtrZ0N+OLFMthtqOj4fI2Jeb88C4CAZPu25LDVUgXJ0A3Js4PMGqrn0JU1W0Mh1/Z8wZzYPxqUrXeBboCQ==
 
-ci-info@^3.2.0, ci-info@^3.3.0:
+ci-info@^3.2.0:
   version "3.8.0"
   resolved "https://registry.yarnpkg.com/ci-info/-/ci-info-3.8.0.tgz#81408265a5380c929f0bc665d62256628ce9ef91"
   integrity sha512-eXTggHWSooYhq49F2opQhuHWgzucfF2YgODK4e1566GQs5BIfP30B0oenwBJHfWxAs2fyPB1s7Mg949zLf61Yw==
 
+ci-info@^4.0.0:
+  version "4.0.0"
+  resolved "https://registry.yarnpkg.com/ci-info/-/ci-info-4.0.0.tgz#65466f8b280fc019b9f50a5388115d17a63a44f2"
+  integrity sha512-TdHqgGf9odd8SXNuxtUBVx8Nv+qZOejE6qyqiy5NtbYYQOeFa6zmHkxlPzmaLxWWHsU6nJmB7AETdVPi+2NBUg==
+
 cipher-base@^1.0.0, cipher-base@^1.0.1, cipher-base@^1.0.3:
   version "1.0.4"
   resolved "https://registry.yarnpkg.com/cipher-base/-/cipher-base-1.0.4.tgz#8760e4ecc272f4c363532f926d874aae2c1397de"
@@ -5043,12 +5002,12 @@ copy-webpack-plugin@^6.4.1:
     serialize-javascript "^5.0.1"
     webpack-sources "^1.4.3"
 
-core-js-compat@^3.31.0, core-js-compat@^3.33.1:
-  version "3.35.0"
-  resolved "https://registry.yarnpkg.com/core-js-compat/-/core-js-compat-3.35.0.tgz#c149a3d1ab51e743bc1da61e39cb51f461a41873"
-  integrity sha512-5blwFAddknKeNgsjBzilkdQ0+YK8L1PfqPYq40NOYMYFSS38qj+hpTcLLWwpIwA2A5bje/x5jmVn2tzUMg9IVw==
+core-js-compat@^3.31.0, core-js-compat@^3.33.1, core-js-compat@^3.37.0:
+  version "3.38.0"
+  resolved "https://registry.yarnpkg.com/core-js-compat/-/core-js-compat-3.38.0.tgz#d93393b1aa346b6ee683377b0c31172ccfe607aa"
+  integrity sha512-75LAicdLa4OJVwFxFbQR3NdnZjNgX6ILpVcVzcC4T2smerB5lELMrJQQQoWV6TiuC/vlaFqgU2tKQx9w5s0e0A==
   dependencies:
-    browserslist "^4.22.2"
+    browserslist "^4.23.3"
 
 core-js-pure@^3.30.2:
   version "3.35.0"
@@ -6230,10 +6189,10 @@ ee-first@1.1.1:
   resolved "https://registry.yarnpkg.com/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
   integrity sha1-WQxhFWsK4vTwJVcyoViyZrxWsh0=
 
-electron-to-chromium@^1.4.601:
-  version "1.4.623"
-  resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.4.623.tgz#0f7400114ac3425500e9244d2b0e9c3107c331cb"
-  integrity sha512-lKoz10iCYlP1WtRYdh5MvocQPWVRoI7ysp6qf18bmeBgR8abE6+I2CsfyNKztRDZvhdWc+krKT6wS7Neg8sw3A==
+electron-to-chromium@^1.5.4:
+  version "1.5.4"
+  resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.5.4.tgz#cd477c830dd6fca41fbd5465c1ff6ce08ac22343"
+  integrity sha512-orzA81VqLyIGUEA77YkVA1D+N+nNfl2isJVjjmOyrlxuooZ19ynb+dOlaDTqd/idKRS9lDCSBmtzM+kyCsMnkA==
 
 elkjs@^0.9.0:
   version "0.9.1"
@@ -6575,10 +6534,10 @@ esbuild@^0.21.3:
     "@esbuild/win32-ia32" "0.21.5"
     "@esbuild/win32-x64" "0.21.5"
 
-escalade@^3.1.1:
-  version "3.1.1"
-  resolved "https://registry.yarnpkg.com/escalade/-/escalade-3.1.1.tgz#d8cfdc7000965c5a0174b4a82eaa5c0552742e40"
-  integrity sha512-k0er2gUkLf8O0zKJiAhmkTnJlTvINGv7ygDNPbeIsX/TJjGJZHuh9B2UxbsaEkmlEo9MfhrSzmhIlhRlI2GXnw==
+escalade@^3.1.1, escalade@^3.1.2:
+  version "3.1.2"
+  resolved "https://registry.yarnpkg.com/escalade/-/escalade-3.1.2.tgz#54076e9ab29ea5bf3d8f1ed62acffbb88272df27"
+  integrity sha512-ErCHMCae19vR8vQGe50xIsVomy19rg6gFu3+r3jkEO46suLMWBksvVyoGgQV+jOfl84ZSOSlmv6Gxa89PmTGmA==
 
 escape-html@~1.0.3:
   version "1.0.3"
@@ -6627,12 +6586,10 @@ eslint-config-airbnb-base@^15.0.0:
     object.entries "^1.1.5"
     semver "^6.3.0"
 
-eslint-config-prettier@^6.10.0:
-  version "6.10.0"
-  resolved "https://registry.yarnpkg.com/eslint-config-prettier/-/eslint-config-prettier-6.10.0.tgz#7b15e303bf9c956875c948f6b21500e48ded6a7f"
-  integrity sha512-AtndijGte1rPILInUdHjvKEGbIV06NuvPrqlIEaEaWtbtvJh464mDeyGMdZEQMsGvC0ZVkiex1fSNcC4HAbRGg==
-  dependencies:
-    get-stdin "^6.0.0"
+eslint-config-prettier@^9.1.0:
+  version "9.1.0"
+  resolved "https://registry.yarnpkg.com/eslint-config-prettier/-/eslint-config-prettier-9.1.0.tgz#31af3d94578645966c082fcb71a5846d3c94867f"
+  integrity sha512-NSWl5BFQWEPi1j4TjVNItzYV7dZXZ+wP6I6ZhrBGpChQhZRUaElihE9uRRkcbRnNb76UMKDF3r+WTmNcGPKsqw==
 
 eslint-import-resolver-jest@3.0.2:
   version "3.0.2"
@@ -6675,7 +6632,7 @@ eslint-module-utils@^2.8.0:
   dependencies:
     debug "^3.2.7"
 
-eslint-plugin-import@^2.28.0, eslint-plugin-import@^2.29.1:
+eslint-plugin-import@^2.29.1:
   version "2.29.1"
   resolved "https://registry.yarnpkg.com/eslint-plugin-import/-/eslint-plugin-import-2.29.1.tgz#d45b37b5ef5901d639c15270d74d46d161150643"
   integrity sha512-BbPC0cuExzhiMo4Ff1BTVwHpjjv28C5R+btTOGaCRC7UEz801up0JadwkeSk5Ued6TG34uaczuVuH6qyy5YUxw==
@@ -6698,12 +6655,12 @@ eslint-plugin-import@^2.28.0, eslint-plugin-import@^2.29.1:
     semver "^6.3.1"
     tsconfig-paths "^3.15.0"
 
-eslint-plugin-jest@^27.2.1:
-  version "27.2.1"
-  resolved "https://registry.yarnpkg.com/eslint-plugin-jest/-/eslint-plugin-jest-27.2.1.tgz#b85b4adf41c682ea29f1f01c8b11ccc39b5c672c"
-  integrity sha512-l067Uxx7ZT8cO9NJuf+eJHvt6bqJyz2Z29wykyEdz/OtmcELQl2MQGQLX8J94O1cSJWAwUSEvCjwjA7KEK3Hmg==
+eslint-plugin-jest@^28.6.0:
+  version "28.7.0"
+  resolved "https://registry.yarnpkg.com/eslint-plugin-jest/-/eslint-plugin-jest-28.7.0.tgz#8ff262c26520242492f85f9268995bbf624758a4"
+  integrity sha512-fzPGN7awL2ftVRQh/bsCi+16ArUZWujZnD1b8EGJqy8nr4//7tZ3BIdc/9edcJBtB3hpci3GtdMNFVDwHU0Eag==
   dependencies:
-    "@typescript-eslint/utils" "^5.10.0"
+    "@typescript-eslint/utils" "^6.0.0 || ^7.0.0 || ^8.0.0"
 
 eslint-plugin-local-rules@^3.0.2:
   version "3.0.2"
@@ -6720,42 +6677,45 @@ eslint-plugin-no-unsanitized@^4.0.2:
   resolved "https://registry.yarnpkg.com/eslint-plugin-no-unsanitized/-/eslint-plugin-no-unsanitized-4.0.2.tgz#e872b302cdfb5fe1262db989ba29cfcc334b499b"
   integrity sha512-Pry0S9YmHoz8NCEMRQh7N0Yexh2MYCNPIlrV52hTmS7qXnTghWsjXouF08bgsrrZqaW9tt1ZiK3j5NEmPE+EjQ==
 
-eslint-plugin-promise@^6.0.1:
-  version "6.0.1"
-  resolved "https://registry.yarnpkg.com/eslint-plugin-promise/-/eslint-plugin-promise-6.0.1.tgz#a8cddf96a67c4059bdabf4d724a29572188ae423"
-  integrity sha512-uM4Tgo5u3UWQiroOyDEsYcVMOo7re3zmno0IZmB5auxoaQNIceAbXEkSt8RNrKtaYehARHG06pYK6K1JhtP0Zw==
+eslint-plugin-promise@^7.0.0:
+  version "7.0.0"
+  resolved "https://registry.yarnpkg.com/eslint-plugin-promise/-/eslint-plugin-promise-7.0.0.tgz#2d54cf6e92213cb2915be62abf338b64c089431d"
+  integrity sha512-wb1ECT+b90ndBdAujhIdAU8oQ3Vt5gKqP/t78KOmg0ifynrvc2jGR9f6ndbOVNFpKf6jLUBlBBDF3H3Wk0JICg==
 
-eslint-plugin-unicorn@^40.1.0:
-  version "40.1.0"
-  resolved "https://registry.yarnpkg.com/eslint-plugin-unicorn/-/eslint-plugin-unicorn-40.1.0.tgz#48975360e39d23df726e4b33e8dd5d650e184832"
-  integrity sha512-y5doK2DF9Sr5AqKEHbHxjFllJ167nKDRU01HDcWyv4Tnmaoe9iNxMrBnaybZvWZUaE3OC5Unu0lNIevYamloig==
+eslint-plugin-unicorn@^55.0.0:
+  version "55.0.0"
+  resolved "https://registry.yarnpkg.com/eslint-plugin-unicorn/-/eslint-plugin-unicorn-55.0.0.tgz#e2aeb397914799895702480970e7d148df5bcc7b"
+  integrity sha512-n3AKiVpY2/uDcGrS3+QsYDkjPfaOrNrsfQxU9nt5nitd9KuvVXrfAvgCO9DYPSfap+Gqjw9EOrXIsBp5tlHZjA==
   dependencies:
-    "@babel/helper-validator-identifier" "^7.15.7"
-    ci-info "^3.3.0"
+    "@babel/helper-validator-identifier" "^7.24.5"
+    "@eslint-community/eslint-utils" "^4.4.0"
+    ci-info "^4.0.0"
     clean-regexp "^1.0.0"
-    eslint-utils "^3.0.0"
-    esquery "^1.4.0"
+    core-js-compat "^3.37.0"
+    esquery "^1.5.0"
+    globals "^15.7.0"
     indent-string "^4.0.0"
-    is-builtin-module "^3.1.0"
-    lodash "^4.17.21"
+    is-builtin-module "^3.2.1"
+    jsesc "^3.0.2"
     pluralize "^8.0.0"
     read-pkg-up "^7.0.1"
-    regexp-tree "^0.1.24"
-    safe-regex "^2.1.1"
-    semver "^7.3.5"
+    regexp-tree "^0.1.27"
+    regjsparser "^0.10.0"
+    semver "^7.6.1"
     strip-indent "^3.0.0"
 
-eslint-plugin-vue@^9.17.0:
-  version "9.17.0"
-  resolved "https://registry.yarnpkg.com/eslint-plugin-vue/-/eslint-plugin-vue-9.17.0.tgz#4501547373f246547083482838b4c8f4b28e5932"
-  integrity sha512-r7Bp79pxQk9I5XDP0k2dpUC7Ots3OSWgvGZNu3BxmKK6Zg7NgVtcOB6OCna5Kb9oQwJPl5hq183WD0SY5tZtIQ==
+eslint-plugin-vue@^9.27.0:
+  version "9.27.0"
+  resolved "https://registry.yarnpkg.com/eslint-plugin-vue/-/eslint-plugin-vue-9.27.0.tgz#c22dae704a03d9ecefa81364ff89f60ce0481f94"
+  integrity sha512-5Dw3yxEyuBSXTzT5/Ge1X5kIkRTQ3nvBn/VwPwInNiZBSJOO/timWMUaflONnFBzU6NhB68lxnCda7ULV5N7LA==
   dependencies:
     "@eslint-community/eslint-utils" "^4.4.0"
+    globals "^13.24.0"
     natural-compare "^1.4.0"
     nth-check "^2.1.1"
-    postcss-selector-parser "^6.0.13"
-    semver "^7.5.4"
-    vue-eslint-parser "^9.3.1"
+    postcss-selector-parser "^6.0.15"
+    semver "^7.6.0"
+    vue-eslint-parser "^9.4.3"
     xml-name-validator "^4.0.0"
 
 eslint-scope@^4.0.3:
@@ -6766,14 +6726,6 @@ eslint-scope@^4.0.3:
     esrecurse "^4.1.0"
     estraverse "^4.1.1"
 
-eslint-scope@^5.1.1:
-  version "5.1.1"
-  resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-5.1.1.tgz#e786e59a66cb92b3f6c1fb0d508aab174848f48c"
-  integrity sha512-2NxwbF/hZ0KpepYN0cNbo+FN6XoK7GaHlQhgx/hIZl6Va0bF45RQOOwhLIy8lQDbuCiadSLCBnH2CFYquit5bw==
-  dependencies:
-    esrecurse "^4.3.0"
-    estraverse "^4.1.1"
-
 eslint-scope@^7.1.1, eslint-scope@^7.2.2:
   version "7.2.2"
   resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-7.2.2.tgz#deb4f92563390f32006894af62a22dba1c46423f"
@@ -6782,18 +6734,6 @@ eslint-scope@^7.1.1, eslint-scope@^7.2.2:
     esrecurse "^4.3.0"
     estraverse "^5.2.0"
 
-eslint-utils@^3.0.0:
-  version "3.0.0"
-  resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-3.0.0.tgz#8aebaface7345bb33559db0a1f13a1d2d48c3672"
-  integrity sha512-uuQC43IGctw68pJA1RgbQS8/NP7rch6Cwd4j3ZBtgo4/8Flj4eGE7ZYSZRN3iq5pVUv6GPdW5Z1RFleo84uLDA==
-  dependencies:
-    eslint-visitor-keys "^2.0.0"
-
-eslint-visitor-keys@^2.0.0:
-  version "2.1.0"
-  resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-2.1.0.tgz#f65328259305927392c938ed44eb0a5c9b2bd303"
-  integrity sha512-0rSmRBzXgDzIsD6mGdJgevzgezI534Cer5L/vyMX0kHzT/jiB43jRhd9YUlMGYLQy2zprNmoT8qasCGtY+QaKw==
-
 eslint-visitor-keys@^3.3.0, eslint-visitor-keys@^3.4.1, eslint-visitor-keys@^3.4.3:
   version "3.4.3"
   resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-3.4.3.tgz#0cd72fe8550e3c2eae156a96a4dddcd1c8ac5800"
@@ -6857,10 +6797,10 @@ esprima@^4.0.0, esprima@^4.0.1:
   resolved "https://registry.yarnpkg.com/esprima/-/esprima-4.0.1.tgz#13b04cdb3e6c5d19df91ab6987a8695619b0aa71"
   integrity sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==
 
-esquery@^1.4.0, esquery@^1.4.2:
-  version "1.5.0"
-  resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.5.0.tgz#6ce17738de8577694edd7361c57182ac8cb0db0b"
-  integrity sha512-YQLXUplAwJgCydQ78IMJywZCceoqk1oH01OERdSAJc/7U2AylwjhSCLDEtqwg811idIS/9fIU5GjG73IgjKMVg==
+esquery@^1.4.0, esquery@^1.4.2, esquery@^1.5.0:
+  version "1.6.0"
+  resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.6.0.tgz#91419234f804d852a82dceec3e16cdc22cf9dae7"
+  integrity sha512-ca9pw9fomFcKPvFLXhBKUK90ZvGibiGOvRJNbjljY7s7uq/5YO4BOzcYtJqExdx99rF6aAcnRxHmcUHcz6sQsg==
   dependencies:
     estraverse "^5.1.0"
 
@@ -7458,11 +7398,6 @@ get-package-type@^0.1.0:
   resolved "https://registry.yarnpkg.com/get-package-type/-/get-package-type-0.1.0.tgz#8de2d803cff44df3bc6c456e6668b36c3926e11a"
   integrity sha512-pjzuKtY64GYfWizNAJ0fr9VqttZkNiK2iS430LtIHzjBEr6bX8Am2zm4sW4Ro5wjWW5cAlRL1qAMTcXbjNAO2Q==
 
-get-stdin@^6.0.0:
-  version "6.0.0"
-  resolved "https://registry.yarnpkg.com/get-stdin/-/get-stdin-6.0.0.tgz#9e09bf712b360ab9225e812048f71fde9c89657b"
-  integrity sha512-jp4tHawyV7+fkkSKyvjuLZswblUtz+SQKzSWnBbii16BuZksJlU1wuBYXY75r+duh/llF1ur6oNwi+2ZzjKZ7g==
-
 get-stream@^6.0.0:
   version "6.0.1"
   resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-6.0.1.tgz#a262d8eef67aced57c2852ad6167526a43cbf7b7"
@@ -7598,13 +7533,18 @@ globals@^11.1.0:
   resolved "https://registry.yarnpkg.com/globals/-/globals-11.12.0.tgz#ab8795338868a0babd8525758018c2a7eb95c42e"
   integrity sha512-WOBp/EEGUiIsJSp7wcv/y6MO+lV9UoncWqxuFfm8eBwzWNgyfBd6Gz+IeKQ9jCmyhoH99g15M3T+QaVHFjizVA==
 
-globals@^13.19.0:
-  version "13.19.0"
-  resolved "https://registry.yarnpkg.com/globals/-/globals-13.19.0.tgz#7a42de8e6ad4f7242fbcca27ea5b23aca367b5c8"
-  integrity sha512-dkQ957uSRWHw7CFXLUtUHQI3g3aWApYhfNR2O6jn/907riyTYKVBmxYVROkBcY614FSSeSJh7Xm7SrUWCxvJMQ==
+globals@^13.19.0, globals@^13.24.0:
+  version "13.24.0"
+  resolved "https://registry.yarnpkg.com/globals/-/globals-13.24.0.tgz#8432a19d78ce0c1e833949c36adb345400bb1171"
+  integrity sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==
   dependencies:
     type-fest "^0.20.2"
 
+globals@^15.7.0:
+  version "15.9.0"
+  resolved "https://registry.yarnpkg.com/globals/-/globals-15.9.0.tgz#e9de01771091ffbc37db5714dab484f9f69ff399"
+  integrity sha512-SmSKyLLKFbSr6rptvP8izbyxJL4ILwqO9Jg23UA0sDlGlu58V59D1//I3vlc0KJphVdUR7vMjHIplYnzBxorQA==
+
 globalthis@^1.0.3:
   version "1.0.3"
   resolved "https://registry.yarnpkg.com/globalthis/-/globalthis-1.0.3.tgz#5852882a52b80dc301b0660273e1ed082f0b6ccf"
@@ -8304,12 +8244,12 @@ is-buffer@^2.0.0:
   resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-2.0.5.tgz#ebc252e400d22ff8d77fa09888821a24a658c191"
   integrity sha512-i2R6zNFDwgEHJyQUtJEk0XFi1i0dPFn/oqjK3/vPCcDeJvW5NQ83V8QbicfF1SupOaB0h8ntgBC2YiE7dfyctQ==
 
-is-builtin-module@^3.1.0:
-  version "3.1.0"
-  resolved "https://registry.yarnpkg.com/is-builtin-module/-/is-builtin-module-3.1.0.tgz#6fdb24313b1c03b75f8b9711c0feb8c30b903b00"
-  integrity sha512-OV7JjAgOTfAFJmHZLvpSTb4qi0nIILDV1gWPYDnDJUTNFM5aGlRAhk4QcT8i7TuAleeEV5Fdkqn3t4mS+Q11fg==
+is-builtin-module@^3.2.1:
+  version "3.2.1"
+  resolved "https://registry.yarnpkg.com/is-builtin-module/-/is-builtin-module-3.2.1.tgz#f03271717d8654cfcaf07ab0463faa3571581169"
+  integrity sha512-BSLE3HnV2syZ0FK0iMA/yUGplUeMmNz4AW5fnTunbCIqZi4vG3WjJT9FHMy5D69xmAYBHXQhJdALdpwVxV501A==
   dependencies:
-    builtin-modules "^3.0.0"
+    builtin-modules "^3.3.0"
 
 is-callable@^1.1.3, is-callable@^1.1.4, is-callable@^1.2.7:
   version "1.2.7"
@@ -9141,6 +9081,11 @@ jsesc@^2.5.1:
   resolved "https://registry.yarnpkg.com/jsesc/-/jsesc-2.5.2.tgz#80564d2e483dacf6e8ef209650a67df3f0c283a4"
   integrity sha512-OYu7XEzjkCQ3C5Ps3QIZsQfNpqoJyZZA99wd9aWd05NCtC5pWOkShK2mkL6HXQR6/Cy2lbNdPlZBpuQHXE63gA==
 
+jsesc@^3.0.2:
+  version "3.0.2"
+  resolved "https://registry.yarnpkg.com/jsesc/-/jsesc-3.0.2.tgz#bb8b09a6597ba426425f2e4a07245c3d00b9343e"
+  integrity sha512-xKqzzWXDttJuOcawBt4KnKHHIf5oQ/Cxax+0PWFG+DFDgHNAdi+TXECADI+RYiFUMmx8792xsMbbgXj4CwnP4g==
+
 jsesc@~0.5.0:
   version "0.5.0"
   resolved "https://registry.yarnpkg.com/jsesc/-/jsesc-0.5.0.tgz#e7dee66e35d6fc16f710fe91d5cf69f70f08911d"
@@ -10765,10 +10710,10 @@ node-libs-browser@^2.2.1:
     util "^0.11.0"
     vm-browserify "^1.0.1"
 
-node-releases@^2.0.14:
-  version "2.0.14"
-  resolved "https://registry.yarnpkg.com/node-releases/-/node-releases-2.0.14.tgz#2ffb053bceb8b2be8495ece1ab6ce600c4461b0b"
-  integrity sha512-y10wOWt8yZpqXmOgRo77WaHEmhYQYGNA6y421PKsKYWEK8aW+cqAphborZDhqfyKrbZEN92CN1X2KbafY2s7Yw==
+node-releases@^2.0.18:
+  version "2.0.18"
+  resolved "https://registry.yarnpkg.com/node-releases/-/node-releases-2.0.18.tgz#f010e8d35e2fe8d6b2944f03f70213ecedc4ca3f"
+  integrity sha512-d9VeXT4SJ7ZeOqGX6R5EM022wpL+eWPooLI+5UpWn2jCT1aosUQEhQP214x33Wkwx3JQMvIm+tIoVOdodFS40g==
 
 nodemon@^2.0.19:
   version "2.0.19"
@@ -11435,10 +11380,10 @@ postcss-scss@4.0.9:
   resolved "https://registry.yarnpkg.com/postcss-scss/-/postcss-scss-4.0.9.tgz#a03c773cd4c9623cb04ce142a52afcec74806685"
   integrity sha512-AjKOeiwAitL/MXxQW2DliT28EKukvvbEWx3LBmJIRN8KfBGZbRTxNYW0kSqi1COiTZ57nZ9NW06S6ux//N1c9A==
 
-postcss-selector-parser@^6.0.0, postcss-selector-parser@^6.0.11, postcss-selector-parser@^6.0.13, postcss-selector-parser@^6.0.2:
-  version "6.0.15"
-  resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-6.0.15.tgz#11cc2b21eebc0b99ea374ffb9887174855a01535"
-  integrity sha512-rEYkQOMUCEMhsKbK66tbEU9QVIxbhN18YiniAwA7XQYTVBqrBy+P2p5JcdqsHgKM2zWylp8d7J6eszocfds5Sw==
+postcss-selector-parser@^6.0.0, postcss-selector-parser@^6.0.11, postcss-selector-parser@^6.0.13, postcss-selector-parser@^6.0.15, postcss-selector-parser@^6.0.2:
+  version "6.1.1"
+  resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-6.1.1.tgz#5be94b277b8955904476a2400260002ce6c56e38"
+  integrity sha512-b4dlw/9V8A71rLIDsSwVmak9z2DuBUB7CA1/wSdelNEzqsjoSPeADTWNO09lpH49Diy3/JIZ2bSPB1dI3LJCHg==
   dependencies:
     cssesc "^3.0.0"
     util-deprecate "^1.0.2"
@@ -12075,10 +12020,10 @@ regex-not@^1.0.0, regex-not@^1.0.2:
     extend-shallow "^3.0.2"
     safe-regex "^1.1.0"
 
-regexp-tree@^0.1.24, regexp-tree@~0.1.1:
-  version "0.1.24"
-  resolved "https://registry.yarnpkg.com/regexp-tree/-/regexp-tree-0.1.24.tgz#3d6fa238450a4d66e5bc9c4c14bb720e2196829d"
-  integrity sha512-s2aEVuLhvnVJW6s/iPgEGK6R+/xngd2jNQ+xy4bXNDKxZKJH6jpPHY6kVeVv1IeLCHgswRj+Kl3ELaDjG6V1iw==
+regexp-tree@^0.1.27:
+  version "0.1.27"
+  resolved "https://registry.yarnpkg.com/regexp-tree/-/regexp-tree-0.1.27.tgz#2198f0ef54518ffa743fe74d983b56ffd631b6cd"
+  integrity sha512-iETxpjK6YoRWJG5o6hXLwvjYAoW+FEZn9os0PD/b6AP6xQwsa/Y7lCVgIixBbUPMfhu+i2LtdeAqVTgGlQarfA==
 
 regexp.prototype.flags@^1.5.1:
   version "1.5.1"
@@ -12101,6 +12046,13 @@ regexpu-core@^5.3.1:
     unicode-match-property-ecmascript "^2.0.0"
     unicode-match-property-value-ecmascript "^2.1.0"
 
+regjsparser@^0.10.0:
+  version "0.10.0"
+  resolved "https://registry.yarnpkg.com/regjsparser/-/regjsparser-0.10.0.tgz#b1ed26051736b436f22fdec1c8f72635f9f44892"
+  integrity sha512-qx+xQGZVsy55CH0a1hiVwHmqjLryfh7wQyF5HO07XJ9f7dQMY/gPQHhlyDkIzJKC+x2fUCpCcUODUUUFrm7SHA==
+  dependencies:
+    jsesc "~0.5.0"
+
 regjsparser@^0.9.1:
   version "0.9.1"
   resolved "https://registry.yarnpkg.com/regjsparser/-/regjsparser-0.9.1.tgz#272d05aa10c7c1f67095b1ff0addae8442fc5709"
@@ -12392,13 +12344,6 @@ safe-regex@^1.1.0:
   dependencies:
     ret "~0.1.10"
 
-safe-regex@^2.1.1:
-  version "2.1.1"
-  resolved "https://registry.yarnpkg.com/safe-regex/-/safe-regex-2.1.1.tgz#f7128f00d056e2fe5c11e81a1324dd974aadced2"
-  integrity sha512-rx+x8AMzKb5Q5lQ95Zoi6ZbJqwCLkqi3XuJXp5P3rT8OEc6sZCJG5AE5dU3lsgRr/F4Bs31jSlVN+j5KrsGu9A==
-  dependencies:
-    regexp-tree "~0.1.1"
-
 "safer-buffer@>= 2.1.2 < 3", "safer-buffer@>= 2.1.2 < 3.0.0", safer-buffer@^2.1.0:
   version "2.1.2"
   resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
@@ -12489,10 +12434,10 @@ semver@^6.0.0, semver@^6.3.0, semver@^6.3.1:
   resolved "https://registry.yarnpkg.com/semver/-/semver-6.3.1.tgz#556d2ef8689146e46dcea4bfdd095f3434dffcb4"
   integrity sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==
 
-semver@^7.3.4, semver@^7.3.5, semver@^7.3.6, semver@^7.3.7, semver@^7.5.0, semver@^7.5.3, semver@^7.5.4, semver@^7.6.0:
-  version "7.6.2"
-  resolved "https://registry.yarnpkg.com/semver/-/semver-7.6.2.tgz#1e3b34759f896e8f14d6134732ce798aeb0c6e13"
-  integrity sha512-FNAIBWCx9qcRhoHcgcJ0gvU7SN1lYU2ZXuSfl04bSC5OpvDHFyJCjdNHomPXxjQlCBU67YW64PzY7/VIEH7F2w==
+semver@^7.3.4, semver@^7.3.5, semver@^7.3.6, semver@^7.5.0, semver@^7.5.3, semver@^7.5.4, semver@^7.6.0, semver@^7.6.1:
+  version "7.6.3"
+  resolved "https://registry.yarnpkg.com/semver/-/semver-7.6.3.tgz#980f7b5550bc175fb4dc09403085627f9eb33143"
+  integrity sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==
 
 semver@~7.0.0:
   version "7.0.0"
@@ -13708,7 +13653,7 @@ tslib@2.3.0, tslib@~2.3.0:
   resolved "https://registry.yarnpkg.com/tslib/-/tslib-2.3.0.tgz#803b8cdab3e12ba581a4ca41c8839bbb0dacb09e"
   integrity sha512-N82ooyxVNm6h1riLCoyS9e3fuJ3AMG2zIZs2Gd1ATcSFjSA23Q0fzjjZeh0jbJvWVDZ0cJT8yaNNaaXHzueNjg==
 
-tslib@^1.8.1, tslib@^1.9.0:
+tslib@^1.9.0:
   version "1.14.1"
   resolved "https://registry.yarnpkg.com/tslib/-/tslib-1.14.1.tgz#cf2d38bdc34a134bcaf1091c41f6619e2f672d00"
   integrity sha512-Xni35NKzjgMrwevysHTCArtLDpPvye8zV/0E4EyYn43P7/7qvQwPh9BGkHewbMulVntbigmcT7rdX3BNo9wRJg==
@@ -13718,13 +13663,6 @@ tslib@^2.1.0, tslib@^2.3.0, tslib@^2.3.1, tslib@^2.4.0, tslib@^2.4.1, tslib@^2.5
   resolved "https://registry.yarnpkg.com/tslib/-/tslib-2.6.2.tgz#703ac29425e7b37cd6fd456e92404d46d1f3e4ae"
   integrity sha512-AEYxH93jGFPn/a2iVAwW87VuUIkR1FVUKB77NwMF7nBTDkDrrT/Hpt/IrCJ0QXhW27jTBDcf5ZY7w6RiqTMw2Q==
 
-tsutils@^3.21.0:
-  version "3.21.0"
-  resolved "https://registry.yarnpkg.com/tsutils/-/tsutils-3.21.0.tgz#b48717d394cea6c1e096983eed58e9d61715b623"
-  integrity sha512-mHKK3iUXL+3UF6xL5k0PEhKRUBKPBCv/+RkEOpjRWxxx27KKRBmmA60A9pgOUvMi8GKhRMPEmjBRPzs2W7O1OA==
-  dependencies:
-    tslib "^1.8.1"
-
 tty-browserify@0.0.0:
   version "0.0.0"
   resolved "https://registry.yarnpkg.com/tty-browserify/-/tty-browserify-0.0.0.tgz#a157ba402da24e9bf957f9aa69d524eed42901a6"
@@ -14058,13 +13996,13 @@ unset-value@^1.0.0:
     has-value "^0.3.1"
     isobject "^3.0.0"
 
-update-browserslist-db@^1.0.13:
-  version "1.0.13"
-  resolved "https://registry.yarnpkg.com/update-browserslist-db/-/update-browserslist-db-1.0.13.tgz#3c5e4f5c083661bd38ef64b6328c26ed6c8248c4"
-  integrity sha512-xebP81SNcPuNpPP3uzeW1NYXxI3rxyJzF3pD6sH4jE7o/IX+WtSpwnVU+qIsDPyk0d3hmFQ7mjqc6AtV604hbg==
+update-browserslist-db@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/update-browserslist-db/-/update-browserslist-db-1.1.0.tgz#7ca61c0d8650766090728046e416a8cde682859e"
+  integrity sha512-EdRAaAyk2cUE1wOf2DkEhzxqOQvFOoRJFNS6NeyJ01Gp2beMRpBAINjM2iDXE3KCuKhwnvHIQCJm6ThL2Z+HzQ==
   dependencies:
-    escalade "^3.1.1"
-    picocolors "^1.0.0"
+    escalade "^3.1.2"
+    picocolors "^1.0.1"
 
 uri-js@^4.2.2:
   version "4.4.1"
@@ -14273,10 +14211,10 @@ vue-apollo@^3.0.7:
     serialize-javascript "^4.0.0"
     throttle-debounce "^2.1.0"
 
-vue-eslint-parser@^9.3.1:
-  version "9.3.1"
-  resolved "https://registry.yarnpkg.com/vue-eslint-parser/-/vue-eslint-parser-9.3.1.tgz#429955e041ae5371df5f9e37ebc29ba046496182"
-  integrity sha512-Clr85iD2XFZ3lJ52/ppmUDG/spxQu6+MAeHXjjyI4I1NUYZ9xmenQp4N0oaHJhrA8OOxltCVxMRfANGa70vU0g==
+vue-eslint-parser@^9.4.3:
+  version "9.4.3"
+  resolved "https://registry.yarnpkg.com/vue-eslint-parser/-/vue-eslint-parser-9.4.3.tgz#9b04b22c71401f1e8bca9be7c3e3416a4bde76a8"
+  integrity sha512-2rYRLWlIpaiN8xbPiDyXZXRgLGOtWxERV7ND5fFAv5qo1D2N9Fu9MNajBNc6o13lZ+24DAWCkQCvj4klgmcITg==
   dependencies:
     debug "^4.3.4"
     eslint-scope "^7.1.1"