From d00599dae860008a057d47e0054397d6b456fcfd Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Thu, 3 Jul 2025 15:10:10 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .gitlab/ci/qa-common/variables.gitlab-ci.yml  |   2 +-
 .../redundant_source_range.yml                |  15 --
 .rubocop_todo/rspec/change_by_zero.yml        |  25 --
 GITLAB_KAS_VERSION                            |   2 +-
 .../boards/components/board_list_header.vue   |  14 +-
 .../boards/components/issue_due_date.vue      |   6 +-
 .../homepage/components/work_items_widget.vue |  63 ++++-
 .../work_items_widget_metadata.query.graphql  |  24 ++
 .../issuable/components/issue_milestone.vue   |   6 +-
 .../javascripts/lib/utils/websocket_utils.js  | 105 ++++++++
 .../notes/components/comment_form.vue         |  15 +-
 .../notes/components/discussion_notes.vue     |   8 +-
 .../notes/components/note_form.vue            |  12 +-
 .../notes/components/noteable_discussion.vue  |   8 +-
 .../notes/components/noteable_note.vue        |   9 +-
 .../notes/mixins/discussion_navigation.js     |  13 +-
 .../notes/mixins/issuable_state.js            |   6 +-
 .../components/gitlab_duo_settings.vue        |   7 +-
 .../shared/permissions/gitlab_duo_settings.js |   7 +-
 .../components/notes/placeholder_note.vue     |   6 +-
 .../components/notes/system_note.vue          |   9 +-
 .../components/work_item_type_icon.vue        |   2 +-
 app/models/concerns/packages/downloadable.rb  |   9 +
 app/models/merge_request.rb                   |   2 +-
 app/models/user.rb                            |   9 +
 .../oauth_access_token_cleanup_worker.rb      |   2 +-
 config/initializers/1_settings.rb             |   4 +-
 ...otected_branch_unprotect_access_levels.yml |  23 +-
 ...rotected_branch_unprotect_access_levels.rb |  16 ++
 db/schema_migrations/20250630200458           |   1 +
 db/structure.sql                              |   3 +-
 doc/development/advanced_search.md            |   8 +-
 .../policies/pipeline_execution_policies.md   |  10 +-
 .../policies/security_policy_projects.md      |   2 +-
 .../model_context_protocol/_index.md          |   4 +-
 .../group/epics/img/epic_drawer_v17_4.png     | Bin 69657 -> 0 bytes
 doc/user/group/epics/manage_epics.md          |  83 +++---
 .../build_and_push_images.md                  |  21 +-
 doc/user/project/issues/issue_work_items.md   |   5 +-
 doc/user/workspace/_index.md                  |  23 ++
 .../topology_service_client/base_service.rb   |  12 +-
 .../service_ping_default_enabled_spec.rb      |   2 +-
 rubocop/cop/gitlab/const_get_inherit_false.rb |   4 +-
 .../cop/gitlab/documentation_links/link.rb    |   2 +-
 rubocop/cop/gitlab/http_v2.rb                 |   2 +-
 rubocop/cop/gitlab/httparty.rb                |   4 +-
 rubocop/cop/gitlab/json.rb                    |   2 +-
 .../cop/inject_enterprise_edition_module.rb   |   2 +-
 rubocop/cop/project_path_helper.rb            |   2 +-
 rubocop/cop/rspec/before_all.rb               |   2 +-
 .../rspec/factory_bot/inline_association.rb   |   2 +-
 rubocop/cop/rspec/have_gitlab_http_status.rb  |   2 +-
 spec/features/admin/users/users_spec.rb       |   2 +-
 spec/features/boards/board_filters_spec.rb    |   5 +-
 .../work_items_widget_metadata_query_mocks.js |  49 ++++
 .../components/work_items_widget_spec.js      |  59 +++-
 .../lib/utils/websocket_utils_spec.js         | 251 ++++++++++++++++++
 .../notes/components/comment_form_spec.js     | 232 +++++-----------
 .../components/discussion_actions_spec.js     |   3 -
 .../notes/components/discussion_notes_spec.js |  34 +--
 .../notes/components/note_form_spec.js        |  10 +-
 .../components/noteable_discussion_spec.js    |  55 +---
 .../notes/components/noteable_note_spec.js    |  99 ++-----
 .../components/notes_activity_header_spec.js  |   3 -
 .../mixins/discussion_navigation_spec.js      |  31 +--
 .../components/notes/placeholder_note_spec.js |  24 +-
 .../components/notes/system_note_spec.js      |  18 +-
 .../api/entities/merge_request_basic_spec.rb  |   3 +-
 spec/lib/api/helpers_spec.rb                  |   2 +-
 .../backfill_user_details_spec.rb             |   2 +-
 .../cache/ci/project_pipeline_status_spec.rb  |   2 +-
 .../checks/matching_merge_request_spec.rb     |   2 +-
 .../batched_migration_runner_spec.rb          |  10 +-
 .../partitioning/list/convert_table_spec.rb   |  24 +-
 .../gitlab/database/tables_truncate_spec.rb   |   7 +-
 spec/lib/gitlab/git_access_project_spec.rb    |   2 +-
 .../pull_requests/review_importer_spec.rb     |   8 +-
 .../importer/releases_importer_spec.rb        |   4 +-
 .../ci/catalog/resource_seeder_spec.rb        |   2 +-
 .../seeders/ci/variables_group_seeder_spec.rb |   5 +-
 .../ci/variables_project_seeder_spec.rb       |   5 +-
 .../project_environment_seeder_spec.rb        |   5 +-
 .../base_service_spec.rb                      |  10 +-
 ...t_from_project_saved_replies_table_spec.rb |   2 +-
 .../concerns/packages/downloadable_spec.rb    |  26 +-
 .../slack_workspace/api_scope_spec.rb         |   2 +-
 spec/models/user_spec.rb                      |  19 ++
 spec/policies/ci/runner_policy_spec.rb        |  25 ++
 spec/requests/api/merge_requests_spec.rb      |  18 +-
 spec/support/rspec_order_todo.yml             |   1 -
 90 files changed, 1069 insertions(+), 619 deletions(-)
 delete mode 100644 .rubocop_todo/internal_affairs/redundant_source_range.yml
 delete mode 100644 .rubocop_todo/rspec/change_by_zero.yml
 create mode 100644 app/assets/javascripts/homepage/graphql/queries/work_items_widget_metadata.query.graphql
 create mode 100644 app/assets/javascripts/lib/utils/websocket_utils.js
 create mode 100644 db/post_migrate/20250630200458_add_multi_column_not_null_constraint_to_protected_branch_unprotect_access_levels.rb
 create mode 100644 db/schema_migrations/20250630200458
 delete mode 100644 doc/user/group/epics/img/epic_drawer_v17_4.png
 create mode 100644 spec/frontend/homepage/components/mocks/work_items_widget_metadata_query_mocks.js
 create mode 100644 spec/frontend/lib/utils/websocket_utils_spec.js

diff --git a/.gitlab/ci/qa-common/variables.gitlab-ci.yml b/.gitlab/ci/qa-common/variables.gitlab-ci.yml
index 0e22dc4b907..29fc40b8a52 100644
--- a/.gitlab/ci/qa-common/variables.gitlab-ci.yml
+++ b/.gitlab/ci/qa-common/variables.gitlab-ci.yml
@@ -18,7 +18,7 @@ variables:
   # Helm chart ref used by test-on-cng pipeline
   GITLAB_HELM_CHART_REF: "6cdb0e1cd4ceb7c9fd01ffa2f62c4a7a4c77a23b"
   # Specific ref for cng-mirror project to trigger builds for
-  GITLAB_CNG_MIRROR_REF: "df7aafcccafdbab732a7cf757efb3b7b74c851dd"
+  GITLAB_CNG_MIRROR_REF: "8c4bbd04b509dc6cc3cb0469066ef053db028607"
   # Makes sure some of the common scripts from pipeline-common use bundler to execute commands
   RUN_WITH_BUNDLE: "true"
   # Makes sure reporting script defined in .gitlab-qa-report from pipeline-common is executed from correct folder
diff --git a/.rubocop_todo/internal_affairs/redundant_source_range.yml b/.rubocop_todo/internal_affairs/redundant_source_range.yml
deleted file mode 100644
index 14c0623fc30..00000000000
--- a/.rubocop_todo/internal_affairs/redundant_source_range.yml
+++ /dev/null
@@ -1,15 +0,0 @@
----
-# Cop supports --autocorrect.
-InternalAffairs/RedundantSourceRange:
-  Details: grace period
-  Exclude:
-    - 'rubocop/cop/gitlab/const_get_inherit_false.rb'
-    - 'rubocop/cop/gitlab/documentation_links/link.rb'
-    - 'rubocop/cop/gitlab/http_v2.rb'
-    - 'rubocop/cop/gitlab/httparty.rb'
-    - 'rubocop/cop/gitlab/json.rb'
-    - 'rubocop/cop/inject_enterprise_edition_module.rb'
-    - 'rubocop/cop/project_path_helper.rb'
-    - 'rubocop/cop/rspec/before_all.rb'
-    - 'rubocop/cop/rspec/factory_bot/inline_association.rb'
-    - 'rubocop/cop/rspec/have_gitlab_http_status.rb'
diff --git a/.rubocop_todo/rspec/change_by_zero.yml b/.rubocop_todo/rspec/change_by_zero.yml
deleted file mode 100644
index 9ba6adcc8d7..00000000000
--- a/.rubocop_todo/rspec/change_by_zero.yml
+++ /dev/null
@@ -1,25 +0,0 @@
----
-# Cop supports --autocorrect.
-RSpec/ChangeByZero:
-  Exclude:
-    - 'ee/spec/controllers/groups/todos_controller_spec.rb'
-    - 'ee/spec/lib/ee/gitlab/scim/group/deprovisioning_service_spec.rb'
-    - 'ee/spec/lib/merge_requests/external_status_check_changes_auditor_spec.rb'
-    - 'ee/spec/models/ee/project_member_spec.rb'
-    - 'spec/features/admin/users/users_spec.rb'
-    - 'spec/lib/api/helpers_spec.rb'
-    - 'spec/lib/gitlab/background_migration/backfill_user_details_spec.rb'
-    - 'spec/lib/gitlab/cache/ci/project_pipeline_status_spec.rb'
-    - 'spec/lib/gitlab/checks/matching_merge_request_spec.rb'
-    - 'spec/lib/gitlab/database/background_migration/batched_migration_runner_spec.rb'
-    - 'spec/lib/gitlab/database/partitioning/list/convert_table_spec.rb'
-    - 'spec/lib/gitlab/database/tables_truncate_spec.rb'
-    - 'spec/lib/gitlab/git_access_project_spec.rb'
-    - 'spec/lib/gitlab/github_import/importer/pull_requests/review_importer_spec.rb'
-    - 'spec/lib/gitlab/github_import/importer/releases_importer_spec.rb'
-    - 'spec/lib/gitlab/seeders/ci/catalog/resource_seeder_spec.rb'
-    - 'spec/lib/gitlab/seeders/ci/variables_group_seeder_spec.rb'
-    - 'spec/lib/gitlab/seeders/ci/variables_project_seeder_spec.rb'
-    - 'spec/lib/gitlab/seeders/project_environment_seeder_spec.rb'
-    - 'spec/migrations/db/migrate/20240806100120_remove_records_without_project_from_project_saved_replies_table_spec.rb'
-    - 'spec/models/integrations/slack_workspace/api_scope_spec.rb'
diff --git a/GITLAB_KAS_VERSION b/GITLAB_KAS_VERSION
index 604d6f290bc..a478b6cd13f 100644
--- a/GITLAB_KAS_VERSION
+++ b/GITLAB_KAS_VERSION
@@ -1 +1 @@
-42fc100c92311d4989681df8c62b91cd18edb886
+79d381bd3d4933427e3f3f08821b0e81310764d0
diff --git a/app/assets/javascripts/boards/components/board_list_header.vue b/app/assets/javascripts/boards/components/board_list_header.vue
index aedc1091714..6846363939a 100644
--- a/app/assets/javascripts/boards/components/board_list_header.vue
+++ b/app/assets/javascripts/boards/components/board_list_header.vue
@@ -349,7 +349,7 @@ export default {
       class="board-title gl-m-0 gl-flex gl-h-9 gl-items-center gl-px-3 gl-text-base"
     >
       <gl-button
-        v-gl-tooltip.hover
+        v-gl-tooltip
         :aria-label="chevronTooltip"
         :title="chevronTooltip"
         class="board-title-caret no-drag btn-icon gl-cursor-pointer hover:gl-bg-strong"
@@ -377,7 +377,7 @@ export default {
         }"
       >
         <gl-avatar
-          v-gl-tooltip.hover.bottom
+          v-gl-tooltip.bottom
           :title="listAssignee"
           :alt="list.assignee.name"
           :src="list.assignee.avatarUrl"
@@ -411,7 +411,7 @@ export default {
 
         <span
           v-if="listType !== 'label'"
-          v-gl-tooltip.hover
+          v-gl-tooltip
           :class="{
             '!gl-ml-2': list.collapsed && !showAssigneeListDetails,
             'gl-text-subtle': list.collapsed,
@@ -432,7 +432,7 @@ export default {
         <!-- EE end -->
         <gl-label
           v-if="listType === 'label'"
-          v-gl-tooltip.hover.bottom
+          v-gl-tooltip.bottom
           :background-color="list.label.color"
           :description="list.label.description"
           :scoped="showScopedLabels(list.label)"
@@ -521,7 +521,7 @@ export default {
         <gl-button
           v-if="isNewIssueShown"
           ref="newIssueBtn"
-          v-gl-tooltip.hover
+          v-gl-tooltip
           :aria-label="$options.i18n.newIssue"
           :title="$options.i18n.newIssue"
           size="small"
@@ -532,7 +532,7 @@ export default {
 
         <gl-button
           v-if="isNewEpicShown"
-          v-gl-tooltip.hover
+          v-gl-tooltip
           :aria-label="$options.i18n.newEpic"
           :title="$options.i18n.newEpic"
           size="small"
@@ -544,7 +544,7 @@ export default {
         <gl-button
           v-if="isSettingsShown"
           ref="settingsBtn"
-          v-gl-tooltip.hover
+          v-gl-tooltip
           :aria-label="$options.i18n.listSettings"
           size="small"
           :title="$options.i18n.listSettings"
diff --git a/app/assets/javascripts/boards/components/issue_due_date.vue b/app/assets/javascripts/boards/components/issue_due_date.vue
index 2fe5ec01179..967a51cf49c 100644
--- a/app/assets/javascripts/boards/components/issue_due_date.vue
+++ b/app/assets/javascripts/boards/components/issue_due_date.vue
@@ -98,13 +98,13 @@ export default {
 <template>
   <work-item-attribute
     anchor-id="board-card-due-date"
-    wrapper-component="span"
-    :wrapper-component-class="`${cssClass} board-card-info gl-mr-3 gl-cursor-help gl-text-subtle`"
+    wrapper-component="button"
+    :wrapper-component-class="`${cssClass} board-card-info gl-mr-3 !gl-cursor-help gl-text-subtle gl-bg-transparent gl-border-0 gl-p-0 focus-visible:gl-focus-inset`"
   >
     <template #icon>
       <gl-icon
         :variant="isOverdue ? 'danger' : 'subtle'"
-        class="board-card-info-icon gl-mr-2"
+        class="board-card-info-icon"
         :name="iconName"
       />
     </template>
diff --git a/app/assets/javascripts/homepage/components/work_items_widget.vue b/app/assets/javascripts/homepage/components/work_items_widget.vue
index aae4c34c41c..45616f7e522 100644
--- a/app/assets/javascripts/homepage/components/work_items_widget.vue
+++ b/app/assets/javascripts/homepage/components/work_items_widget.vue
@@ -1,12 +1,16 @@
 <script>
-import { GlIcon, GlLink } from '@gitlab/ui';
+import { GlIcon, GlLink, GlBadge } from '@gitlab/ui';
+import timeagoMixin from '~/vue_shared/mixins/timeago';
+import workItemsWidgetMetadataQuery from '../graphql/queries/work_items_widget_metadata.query.graphql';
 
 export default {
   name: 'WorkItemsWidget',
   components: {
     GlIcon,
     GlLink,
+    GlBadge,
   },
+  mixins: [timeagoMixin],
   props: {
     assignedToYouPath: {
       type: String,
@@ -17,16 +21,49 @@ export default {
       required: true,
     },
   },
+  data() {
+    return {
+      metadata: {},
+    };
+  },
+  apollo: {
+    metadata: {
+      query: workItemsWidgetMetadataQuery,
+      variables() {
+        return { username: gon.current_username };
+      },
+      update({ currentUser }) {
+        return currentUser;
+      },
+    },
+  },
+  computed: {
+    isLoadingMetadata() {
+      return this.$apollo.queries.metadata.loading;
+    },
+    assignedCount() {
+      return this.metadata?.assigned?.count ?? 0;
+    },
+    assignedLastUpdatedAt() {
+      return this.metadata?.assigned?.nodes?.[0]?.updatedAt ?? null;
+    },
+    authoredCount() {
+      return this.metadata?.authored?.count ?? 0;
+    },
+    authoredLastUpdatedAt() {
+      return this.metadata?.authored?.nodes?.[0]?.updatedAt ?? null;
+    },
+  },
 };
 </script>
 
 <template>
   <div class="gl-border gl-rounded-lg gl-px-4 gl-py-1">
     <h4 class="gl-flex gl-items-center gl-gap-2">
-      <gl-icon name="work-items" :size="16" />{{ __('Work items') }}
+      <gl-icon name="issues" :size="16" />{{ __('Issues') }}
     </h4>
     <ul class="gl-list-none gl-p-0">
-      <li>
+      <li class="gl-flex gl-items-center gl-gap-3">
         <gl-link
           class="gl-flex gl-items-center gl-gap-3 gl-rounded-small gl-px-1 gl-py-1 !gl-no-underline hover:gl-bg-gray-10 dark:hover:gl-bg-alpha-light-8"
           variant="meta"
@@ -34,8 +71,17 @@ export default {
         >
           {{ s__('HomePageWorkItemsWidget|Assigned to you') }}
         </gl-link>
+        <template v-if="!isLoadingMetadata">
+          <gl-badge data-testid="assigned-count">{{ assignedCount }}</gl-badge>
+          <span
+            v-if="assignedLastUpdatedAt"
+            data-testid="assigned-last-updated-at"
+            class="gl-ml-auto gl-text-sm gl-text-subtle"
+            >{{ timeFormatted(assignedLastUpdatedAt) }}</span
+          >
+        </template>
       </li>
-      <li>
+      <li class="gl-flex gl-items-center gl-gap-3">
         <gl-link
           class="gl-flex gl-items-center gl-gap-3 gl-rounded-small gl-px-1 gl-py-1 !gl-no-underline hover:gl-bg-gray-10 dark:hover:gl-bg-alpha-light-8"
           variant="meta"
@@ -43,6 +89,15 @@ export default {
         >
           {{ s__('HomePageWorkItemsWidget|Authored by you') }}
         </gl-link>
+        <template v-if="!isLoadingMetadata">
+          <gl-badge data-testid="authored-count">{{ authoredCount }}</gl-badge>
+          <span
+            v-if="authoredLastUpdatedAt"
+            data-testid="authored-last-updated-at"
+            class="gl-ml-auto gl-text-sm gl-text-subtle"
+            >{{ timeFormatted(authoredLastUpdatedAt) }}</span
+          >
+        </template>
       </li>
     </ul>
   </div>
diff --git a/app/assets/javascripts/homepage/graphql/queries/work_items_widget_metadata.query.graphql b/app/assets/javascripts/homepage/graphql/queries/work_items_widget_metadata.query.graphql
new file mode 100644
index 00000000000..7bbea70612c
--- /dev/null
+++ b/app/assets/javascripts/homepage/graphql/queries/work_items_widget_metadata.query.graphql
@@ -0,0 +1,24 @@
+query WorkItemsWidgetMetadata($username: String!) {
+  currentUser {
+    id
+    assigned: workItems(
+      assigneeUsernames: [$username]
+      state: opened
+      sort: UPDATED_DESC
+      first: 1
+    ) {
+      count
+      nodes {
+        id
+        updatedAt
+      }
+    }
+    authored: workItems(authorUsername: $username, state: opened, sort: UPDATED_DESC, first: 1) {
+      count
+      nodes {
+        id
+        updatedAt
+      }
+    }
+  }
+}
diff --git a/app/assets/javascripts/issuable/components/issue_milestone.vue b/app/assets/javascripts/issuable/components/issue_milestone.vue
index 95efafcad94..7c849df8923 100644
--- a/app/assets/javascripts/issuable/components/issue_milestone.vue
+++ b/app/assets/javascripts/issuable/components/issue_milestone.vue
@@ -73,10 +73,10 @@ export default {
 <template>
   <work-item-attribute
     anchor-id="board-card-milestone"
-    wrapper-component="div"
-    wrapper-component-class="issue-milestone-details gl-flex gl-max-w-15 gl-gap-2 gl-items-center"
+    wrapper-component="button"
+    wrapper-component-class="issue-milestone-details gl-flex gl-max-w-15 gl-gap-2 gl-items-center !gl-cursor-help gl-bg-transparent gl-border-0 gl-p-0 focus-visible:gl-focus-inset"
     icon-name="milestone"
-    icon-class="flex-shrink-0"
+    icon-class="flex-shrink-0 gl-text-subtle"
     :title="milestone.title"
     title-component-class="milestone-title gl-inline-block gl-truncate"
   >
diff --git a/app/assets/javascripts/lib/utils/websocket_utils.js b/app/assets/javascripts/lib/utils/websocket_utils.js
new file mode 100644
index 00000000000..c4dade11183
--- /dev/null
+++ b/app/assets/javascripts/lib/utils/websocket_utils.js
@@ -0,0 +1,105 @@
+/**
+ * Manages a Websocket Connection
+ * @param {string} url - WebSocket URL
+ * @param {Object} options - Configuration options
+ * @param {Function} options.onOpen - Open handler
+ * @param {Function} options.onMessage - Message handler
+ * @param {Function} options.onError - Error handler
+ * @param {Function} options.onClose - Close handler
+ * @returns {Object} WebSocket connection object with utility methods
+ */
+export const createWebSocket = (url, options = {}) => {
+  const {
+    onOpen = () => {},
+    onMessage = () => {},
+    onError = () => {},
+    onClose = () => {},
+  } = options;
+
+  let socket = null;
+
+  const close = () => {
+    if (socket?.readyState === WebSocket.OPEN || socket?.readyState === WebSocket.CONNECTING) {
+      socket.close();
+    }
+    socket = null;
+  };
+
+  const isConnected = () => {
+    return socket?.readyState === WebSocket.OPEN;
+  };
+
+  const send = (message) => {
+    if (isConnected()) {
+      const payload = typeof message === 'string' ? message : JSON.stringify(message);
+      socket.send(payload);
+    }
+  };
+
+  const connect = (initialMessage = null) => {
+    close(); // Close any existing connection
+
+    try {
+      socket = new WebSocket(url);
+
+      socket.onopen = (event) => {
+        if (initialMessage) {
+          send(initialMessage);
+        }
+
+        onOpen(event);
+      };
+
+      socket.onmessage = (event) => {
+        onMessage(event);
+      };
+
+      socket.onclose = (event) => {
+        socket = null;
+        onClose(event);
+      };
+
+      socket.onerror = (error) => {
+        onError(error);
+      };
+    } catch (error) {
+      onError(error);
+    }
+  };
+
+  const isConnecting = () => {
+    return socket?.readyState === WebSocket.CONNECTING;
+  };
+
+  return {
+    connect,
+    send,
+    isConnected,
+    isConnecting,
+    close,
+  };
+};
+
+/**
+ * Parses JSON message from WebSocket event
+ * @param {MessageEvent} event - The WebSocket message event
+ * @returns {Promise<Object|null>} Parsed message data or null if parsing fails
+ */
+export const parseMessage = async (event) => {
+  try {
+    const data = typeof event.data === 'string' ? event.data : await event.data.text();
+    return JSON.parse(data);
+  } catch (error) {
+    return null;
+  }
+};
+
+/**
+ * Safe socket cleanup utility
+ * @param {Object|WebSocket} socket - The socket to close
+ */
+export const closeSocket = (socket) => {
+  if (typeof socket?.close === 'function') {
+    socket.close();
+  }
+};
diff --git a/app/assets/javascripts/notes/components/comment_form.vue b/app/assets/javascripts/notes/components/comment_form.vue
index db2daace95f..c6c572ca3e6 100644
--- a/app/assets/javascripts/notes/components/comment_form.vue
+++ b/app/assets/javascripts/notes/components/comment_form.vue
@@ -1,8 +1,7 @@
 <script>
 import { GlAlert, GlButton, GlFormCheckbox, GlTooltipDirective } from '@gitlab/ui';
 import $ from 'jquery';
-// eslint-disable-next-line no-restricted-imports
-import { mapActions, mapGetters, mapState } from 'vuex';
+import { mapActions, mapState } from 'pinia';
 import { createAlert } from '~/alert';
 import { STATUS_CLOSED, STATUS_MERGED, STATUS_OPEN, STATUS_REOPENED } from '~/issues/constants';
 import { detectAndConfirmSensitiveTokens } from '~/lib/utils/secret_detection';
@@ -19,13 +18,12 @@ import HelpIcon from '~/vue_shared/components/help_icon/help_icon.vue';
 import { trackSavedUsingEditor } from '~/vue_shared/components/markdown/tracking';
 import glAbilitiesMixin from '~/vue_shared/mixins/gl_abilities_mixin';
 import { fetchUserCounts } from '~/super_sidebar/user_counts_fetch';
-
 import { badgeState } from '~/merge_requests/badge_state';
+import { useNotes } from '~/notes/store/legacy_notes';
 import * as constants from '../constants';
 import eventHub from '../event_hub';
 import { COMMENT_FORM } from '../i18n';
 import { createNoteErrorMessages, isSlashCommand } from '../utils';
-
 import issuableStateMixin from '../mixins/issuable_state';
 import CommentFieldLayout from './comment_field_layout.vue';
 import CommentTypeDropdown from './comment_type_dropdown.vue';
@@ -80,16 +78,15 @@ export default {
     };
   },
   computed: {
-    ...mapGetters([
+    ...mapState(useNotes, [
+      'isToggleStateButtonLoading',
       'getCurrentUserLastNote',
-      'getUserData',
       'getNoteableData',
-      'getNoteableDataByProp',
       'getNotesData',
+      'getUserData',
       'openState',
       'hasDrafts',
     ]),
-    ...mapState(['isToggleStateButtonLoading']),
     autocompleteDataSources() {
       return gl.GfmAutoComplete?.dataSources;
     },
@@ -220,7 +217,7 @@ export default {
     });
   },
   methods: {
-    ...mapActions([
+    ...mapActions(useNotes, [
       'saveNote',
       'removePlaceholderNotes',
       'closeIssuable',
diff --git a/app/assets/javascripts/notes/components/discussion_notes.vue b/app/assets/javascripts/notes/components/discussion_notes.vue
index ab012ca3db8..78953a62733 100644
--- a/app/assets/javascripts/notes/components/discussion_notes.vue
+++ b/app/assets/javascripts/notes/components/discussion_notes.vue
@@ -1,12 +1,12 @@
 <script>
-// eslint-disable-next-line no-restricted-imports
-import { mapGetters, mapActions } from 'vuex';
+import { mapState, mapActions } from 'pinia';
 import DuoCodeReviewSystemNote from 'ee_component/vue_shared/components/notes/duo_code_review_system_note.vue';
 import { __ } from '~/locale';
 import PlaceholderNote from '~/vue_shared/components/notes/placeholder_note.vue';
 import PlaceholderSystemNote from '~/vue_shared/components/notes/placeholder_system_note.vue';
 import SystemNote from '~/vue_shared/components/notes/system_note.vue';
 import { FILE_DIFF_POSITION_TYPE } from '~/diffs/constants';
+import { useNotes } from '~/notes/store/legacy_notes';
 import { SYSTEM_NOTE } from '../constants';
 import DiscussionNotesRepliesWrapper from './discussion_notes_replies_wrapper.vue';
 import NoteEditedText from './note_edited_text.vue';
@@ -57,7 +57,7 @@ export default {
     },
   },
   computed: {
-    ...mapGetters(['userCanReply']),
+    ...mapState(useNotes, ['userCanReply']),
     hasReplies() {
       return Boolean(this.replies.length);
     },
@@ -88,7 +88,7 @@ export default {
     },
   },
   methods: {
-    ...mapActions(['toggleDiscussion', 'setSelectedCommentPositionHover']),
+    ...mapActions(useNotes, ['toggleDiscussion', 'setSelectedCommentPositionHover']),
     componentName(note) {
       if (note.isPlaceholderNote) {
         if (note.placeholderType === SYSTEM_NOTE) {
diff --git a/app/assets/javascripts/notes/components/note_form.vue b/app/assets/javascripts/notes/components/note_form.vue
index 93d73f12a8a..28574b6fd25 100644
--- a/app/assets/javascripts/notes/components/note_form.vue
+++ b/app/assets/javascripts/notes/components/note_form.vue
@@ -1,14 +1,13 @@
 <script>
 import { GlButton, GlSprintf, GlLink, GlFormCheckbox } from '@gitlab/ui';
-import { mapState } from 'pinia';
-// eslint-disable-next-line no-restricted-imports
-import { mapGetters as mapVuexGetters, mapActions as mapVuexActions } from 'vuex';
+import { mapState, mapActions } from 'pinia';
 import { mergeUrlParams } from '~/lib/utils/url_utility';
 import { __ } from '~/locale';
 import glAbilitiesMixin from '~/vue_shared/mixins/gl_abilities_mixin';
 import MarkdownEditor from '~/vue_shared/components/markdown/markdown_editor.vue';
 import { trackSavedUsingEditor } from '~/vue_shared/components/markdown/tracking';
 import { useBatchComments } from '~/batch_comments/store';
+import { useNotes } from '~/notes/store/legacy_notes';
 import eventHub from '../event_hub';
 import issuableStateMixin from '../mixins/issuable_state';
 import resolvable from '../mixins/resolvable';
@@ -136,10 +135,9 @@ export default {
     };
   },
   computed: {
-    ...mapVuexGetters([
+    ...mapState(useNotes, [
       'getDiscussionLastNote',
       'getNoteableData',
-      'getNoteableDataByProp',
       'getNotesDataByProp',
       'getUserDataByProp',
     ]),
@@ -191,7 +189,7 @@ export default {
       return null;
     },
     markdownPreviewPath() {
-      const notable = this.getNoteableDataByProp('preview_note_path');
+      const notable = this.getNoteableData.preview_note_path;
 
       const previewSuggestions = this.line && this.diffParams;
       const params = previewSuggestions
@@ -267,7 +265,7 @@ export default {
     this.updatePlaceholder();
   },
   methods: {
-    ...mapVuexActions(['toggleResolveNote']),
+    ...mapActions(useNotes, ['toggleResolveNote']),
     shouldToggleResolved(beforeSubmitDiscussionState) {
       return (
         this.showResolveDiscussionToggle && beforeSubmitDiscussionState !== this.newResolvedState()
diff --git a/app/assets/javascripts/notes/components/noteable_discussion.vue b/app/assets/javascripts/notes/components/noteable_discussion.vue
index 557a6612b5a..8d65585f760 100644
--- a/app/assets/javascripts/notes/components/noteable_discussion.vue
+++ b/app/assets/javascripts/notes/components/noteable_discussion.vue
@@ -1,7 +1,6 @@
 <script>
 import { GlTooltipDirective, GlIcon } from '@gitlab/ui';
-// eslint-disable-next-line no-restricted-imports
-import { mapActions, mapGetters } from 'vuex';
+import { mapActions, mapState } from 'pinia';
 import DraftNote from '~/batch_comments/components/draft_note.vue';
 import { createAlert } from '~/alert';
 import { clearDraft, getDraft, getAutoSaveKeyFromDiscussion } from '~/lib/utils/autosave';
@@ -14,6 +13,7 @@ import TimelineEntryItem from '~/vue_shared/components/notes/timeline_entry_item
 import UserAvatarLink from '~/vue_shared/components/user_avatar/user_avatar_link.vue';
 import { detectAndConfirmSensitiveTokens } from '~/lib/utils/secret_detection';
 import { FILE_DIFF_POSITION_TYPE, IMAGE_DIFF_POSITION_TYPE } from '~/diffs/constants';
+import { useNotes } from '~/notes/store/legacy_notes';
 import eventHub from '../event_hub';
 import noteable from '../mixins/noteable';
 import resolvable from '../mixins/resolvable';
@@ -86,7 +86,7 @@ export default {
     };
   },
   computed: {
-    ...mapGetters([
+    ...mapState(useNotes, [
       'convertedDisscussionIds',
       'getNoteableData',
       'userCanReply',
@@ -209,7 +209,7 @@ export default {
     eventHub.$off('startReplying', this.onStartReplying);
   },
   methods: {
-    ...mapActions([
+    ...mapActions(useNotes, [
       'saveNote',
       'removePlaceholderNotes',
       'toggleResolveNote',
diff --git a/app/assets/javascripts/notes/components/noteable_note.vue b/app/assets/javascripts/notes/components/noteable_note.vue
index bb04b199f9c..367e3fbc743 100644
--- a/app/assets/javascripts/notes/components/noteable_note.vue
+++ b/app/assets/javascripts/notes/components/noteable_note.vue
@@ -1,9 +1,7 @@
 <script>
 import { GlSprintf, GlAvatarLink, GlAvatar } from '@gitlab/ui';
 import { escape } from 'lodash';
-// eslint-disable-next-line no-restricted-imports
-import { mapGetters as mapVuexGetters, mapActions as mapVuexActions } from 'vuex';
-import { mapState } from 'pinia';
+import { mapState, mapActions } from 'pinia';
 import { getIdFromGraphQLId } from '~/graphql_shared/utils';
 import SafeHtml from '~/vue_shared/directives/safe_html';
 import { confirmAction } from '~/lib/utils/confirm_via_gl_modal/confirm_via_gl_modal';
@@ -17,6 +15,7 @@ import { __, s__, sprintf } from '~/locale';
 import { renderGFM } from '~/behaviors/markdown/render_gfm';
 import { detectAndConfirmSensitiveTokens } from '~/lib/utils/secret_detection';
 import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
+import { useNotes } from '~/notes/store/legacy_notes';
 import eventHub from '../event_hub';
 import noteable from '../mixins/noteable';
 import resolvable from '../mixins/resolvable';
@@ -129,7 +128,7 @@ export default {
   },
   computed: {
     ...mapState(useLegacyDiffs, ['getDiffFileByHash']),
-    ...mapVuexGetters(['targetNoteHash', 'getNoteableData', 'getUserData', 'commentsDisabled']),
+    ...mapState(useNotes, ['targetNoteHash', 'getNoteableData', 'getUserData', 'commentsDisabled']),
     isEditing: {
       get() {
         return this.note.isEditing ?? this.isEditingLocal;
@@ -274,7 +273,7 @@ export default {
   },
 
   methods: {
-    ...mapVuexActions([
+    ...mapActions(useNotes, [
       'deleteNote',
       'removeNote',
       'updateNote',
diff --git a/app/assets/javascripts/notes/mixins/discussion_navigation.js b/app/assets/javascripts/notes/mixins/discussion_navigation.js
index a900767ab1e..7a8b1a46fd7 100644
--- a/app/assets/javascripts/notes/mixins/discussion_navigation.js
+++ b/app/assets/javascripts/notes/mixins/discussion_navigation.js
@@ -1,8 +1,7 @@
-// eslint-disable-next-line no-restricted-imports
-import { mapGetters, mapActions as mapVuexActions, mapState } from 'vuex';
-import { mapActions } from 'pinia';
+import { mapActions, mapState } from 'pinia';
 import { scrollToElement, contentTop } from '~/lib/utils/common_utils';
 import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
+import { useNotes } from '~/notes/store/legacy_notes';
 
 function isOverviewPage() {
   return window.mrTabs?.currentAction === 'show';
@@ -85,17 +84,15 @@ function handleJumpForBothPages(getDiscussion, ctx, fn, scrollOptions) {
 
 export default {
   computed: {
-    ...mapGetters([
+    ...mapState(useNotes, [
       'nextUnresolvedDiscussionId',
       'previousUnresolvedDiscussionId',
       'getDiscussion',
+      'currentDiscussionId',
     ]),
-    ...mapState({
-      currentDiscussionId: (state) => state.notes.currentDiscussionId,
-    }),
   },
   methods: {
-    ...mapVuexActions(['expandDiscussion', 'setCurrentDiscussionId']),
+    ...mapActions(useNotes, ['expandDiscussion', 'setCurrentDiscussionId']),
     ...mapActions(useLegacyDiffs, ['scrollToFile', 'disableVirtualScroller']),
 
     async jumpToNextDiscussion(scrollOptions) {
diff --git a/app/assets/javascripts/notes/mixins/issuable_state.js b/app/assets/javascripts/notes/mixins/issuable_state.js
index 704e7e53c30..2366fa06d6e 100644
--- a/app/assets/javascripts/notes/mixins/issuable_state.js
+++ b/app/assets/javascripts/notes/mixins/issuable_state.js
@@ -1,10 +1,10 @@
-// eslint-disable-next-line no-restricted-imports
-import { mapGetters } from 'vuex';
+import { mapState } from 'pinia';
 import { helpPagePath } from '~/helpers/help_page_helper';
+import { useNotes } from '~/notes/store/legacy_notes';
 
 export default {
   computed: {
-    ...mapGetters(['getNoteableDataByProp']),
+    ...mapState(useNotes, ['getNoteableDataByProp']),
     isProjectArchived() {
       return this.getNoteableDataByProp('is_project_archived');
     },
diff --git a/app/assets/javascripts/pages/projects/shared/permissions/components/gitlab_duo_settings.vue b/app/assets/javascripts/pages/projects/shared/permissions/components/gitlab_duo_settings.vue
index 28eaf29c44e..5dde64b1e66 100644
--- a/app/assets/javascripts/pages/projects/shared/permissions/components/gitlab_duo_settings.vue
+++ b/app/assets/javascripts/pages/projects/shared/permissions/components/gitlab_duo_settings.vue
@@ -154,7 +154,12 @@ export default {
     </project-setting-row>
 
     <template #footer>
-      <gl-button variant="confirm" type="submit" data-testid="gitlab-duo-save-button">
+      <gl-button
+        variant="confirm"
+        type="submit"
+        data-testid="gitlab-duo-save-button"
+        :disabled="duoFeaturesLocked"
+      >
         {{ $options.i18n.saveChanges }}
       </gl-button>
     </template>
diff --git a/app/assets/javascripts/pages/projects/shared/permissions/gitlab_duo_settings.js b/app/assets/javascripts/pages/projects/shared/permissions/gitlab_duo_settings.js
index 16a81b926f5..6cbf601c086 100644
--- a/app/assets/javascripts/pages/projects/shared/permissions/gitlab_duo_settings.js
+++ b/app/assets/javascripts/pages/projects/shared/permissions/gitlab_duo_settings.js
@@ -1,4 +1,5 @@
 import Vue from 'vue';
+import { convertObjectPropsToCamelCase } from '~/lib/utils/common_utils';
 import GitlabDuoSettings from './components/gitlab_duo_settings.vue';
 
 export default function initGitlabDuoSettings() {
@@ -10,7 +11,9 @@ export default function initGitlabDuoSettings() {
   }
 
   const componentProps = JSON.parse(componentPropsEl.innerHTML);
-
+  const componentPropsParsed = convertObjectPropsToCamelCase(componentProps, {
+    deep: true,
+  });
   const { targetFormId } = mountPoint.dataset;
 
   return new Vue({
@@ -18,7 +21,7 @@ export default function initGitlabDuoSettings() {
     name: 'GitlabDuoSettingsRoot',
     render: (createElement) =>
       createElement(GitlabDuoSettings, {
-        props: componentProps,
+        props: componentPropsParsed,
         on: {
           confirm: () => {
             if (targetFormId) document.getElementById(targetFormId)?.submit();
diff --git a/app/assets/javascripts/vue_shared/components/notes/placeholder_note.vue b/app/assets/javascripts/vue_shared/components/notes/placeholder_note.vue
index 920fc286f5a..84fabd1caba 100644
--- a/app/assets/javascripts/vue_shared/components/notes/placeholder_note.vue
+++ b/app/assets/javascripts/vue_shared/components/notes/placeholder_note.vue
@@ -17,11 +17,11 @@
  *   />
  */
 import { GlAvatarLink, GlAvatar } from '@gitlab/ui';
-// eslint-disable-next-line no-restricted-imports
-import { mapGetters } from 'vuex';
+import { mapState } from 'pinia';
 import SafeHtml from '~/vue_shared/directives/safe_html';
 import { renderMarkdown } from '~/notes/utils';
 import TimelineEntryItem from '~/vue_shared/components/notes/timeline_entry_item.vue';
+import { useNotes } from '~/notes/store/legacy_notes';
 
 export default {
   name: 'PlaceholderNote',
@@ -43,7 +43,7 @@ export default {
     },
   },
   computed: {
-    ...mapGetters(['getUserData']),
+    ...mapState(useNotes, ['getUserData']),
     renderedNote() {
       return renderMarkdown(this.note.body);
     },
diff --git a/app/assets/javascripts/vue_shared/components/notes/system_note.vue b/app/assets/javascripts/vue_shared/components/notes/system_note.vue
index 560d4d4a888..2de4075fbfa 100644
--- a/app/assets/javascripts/vue_shared/components/notes/system_note.vue
+++ b/app/assets/javascripts/vue_shared/components/notes/system_note.vue
@@ -18,14 +18,14 @@
  */
 import { GlButton, GlSkeletonLoader, GlTooltipDirective, GlIcon } from '@gitlab/ui';
 import $ from 'jquery';
-// eslint-disable-next-line no-restricted-imports
-import { mapGetters, mapActions, mapState } from 'vuex';
+import { mapActions, mapState } from 'pinia';
 import SafeHtml from '~/vue_shared/directives/safe_html';
 import descriptionVersionHistoryMixin from 'ee_else_ce/notes/mixins/description_version_history';
 import axios from '~/lib/utils/axios_utils';
 import { __ } from '~/locale';
 import NoteHeader from '~/notes/components/note_header.vue';
 import { renderGFM } from '~/behaviors/markdown/render_gfm';
+import { useNotes } from '~/notes/store/legacy_notes';
 import TimelineEntryItem from './timeline_entry_item.vue';
 
 const MAX_VISIBLE_COMMIT_LIST_COUNT = 3;
@@ -72,8 +72,7 @@ export default {
     };
   },
   computed: {
-    ...mapGetters(['targetNoteHash', 'descriptionVersions']),
-    ...mapState(['isLoadingDescriptionVersion']),
+    ...mapState(useNotes, ['targetNoteHash', 'descriptionVersions', 'isLoadingDescriptionVersion']),
     noteAnchorId() {
       return `note_${this.note.id}`;
     },
@@ -123,7 +122,7 @@ export default {
   },
   methods: {
     // eslint-disable-next-line vue/no-unused-properties -- These are used by the `descriptionVersionHistoryMixin` mixin
-    ...mapActions(['fetchDescriptionVersion', 'softDeleteDescriptionVersion']),
+    ...mapActions(useNotes, ['fetchDescriptionVersion', 'softDeleteDescriptionVersion']),
     async toggleDiff() {
       this.showLines = !this.showLines;
 
diff --git a/app/assets/javascripts/work_items/components/work_item_type_icon.vue b/app/assets/javascripts/work_items/components/work_item_type_icon.vue
index 70e798af6ae..056caa11786 100644
--- a/app/assets/javascripts/work_items/components/work_item_type_icon.vue
+++ b/app/assets/javascripts/work_items/components/work_item_type_icon.vue
@@ -64,7 +64,7 @@ export default {
     data-testid="work-item-type-icon"
     :title="workItemTooltipTitle"
     :aria-label="workItemTypeText"
-    class="!gl-cursor-default gl-border-none gl-bg-transparent gl-p-0"
+    class="!gl-cursor-default gl-border-none gl-bg-transparent gl-p-0 focus-visible:gl-focus-inset"
   >
     <gl-icon :name="iconName" :variant="iconVariant" :class="iconClass" />
     <span v-if="workItemTypeText" :class="{ 'gl-sr-only !gl-absolute': !showText }">{{
diff --git a/app/models/concerns/packages/downloadable.rb b/app/models/concerns/packages/downloadable.rb
index ad9bee6901d..723756ccbc0 100644
--- a/app/models/concerns/packages/downloadable.rb
+++ b/app/models/concerns/packages/downloadable.rb
@@ -4,6 +4,14 @@ module Packages
   module Downloadable
     extend ActiveSupport::Concern
 
+    class_methods do
+      def touch_last_downloaded_at(id)
+        ::Gitlab::Database::LoadBalancing::SessionMap.current(load_balancer).without_sticky_writes do
+          id_in(id).update_all(last_downloaded_at: Time.zone.now)
+        end
+      end
+    end
+
     def touch_last_downloaded_at
       ::Gitlab::Database::LoadBalancing::SessionMap.current(load_balancer).without_sticky_writes do
         update_column(:last_downloaded_at, Time.zone.now)
@@ -13,3 +21,4 @@ module Packages
 end
 
 Packages::Downloadable.prepend_mod
+Packages::Downloadable::ClassMethods.prepend_mod
diff --git a/app/models/merge_request.rb b/app/models/merge_request.rb
index 58a8284a534..efbe65fd142 100644
--- a/app/models/merge_request.rb
+++ b/app/models/merge_request.rb
@@ -414,7 +414,7 @@ class MergeRequest < ApplicationRecord
     preload_routables.preload(
       :assignees, :author, :unresolved_notes, :labels, :milestone,
       :timelogs, :latest_merge_request_diff, :reviewers,
-      :merge_schedule,
+      :merge_schedule, :merge_user,
       target_project: [:project_feature, :project_setting],
       metrics: [:latest_closed_by, :merged_by]
     )
diff --git a/app/models/user.rb b/app/models/user.rb
index aafa8c2e60b..d40ea340a33 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -2111,6 +2111,15 @@ class User < ApplicationRecord
   def owns_runner?(runner)
     runner = runner.__getobj__ if runner.is_a?(Ci::RunnerPresenter)
 
+    # NOTE: This is a workaround to the fact that `ci_owned_group_runners` does not return the group runners that the
+    # user has access to in group A, when the user is owner of group B, and group B has been invited as owner
+    # to group A. Instead it only returns group runners that belong to a group that the user is a direct owner of.
+    # Ideally, we'd add a `min_access_level` argument to `User#authorized_groups`, similar to `User#authorized_projects`
+    # and that would get used by `ci_owned_group_runners`, but that would require deeper changes
+    # from the ~"group::authorization" team.
+    # TODO: Remove this workaround when https://gitlab.com/gitlab-org/gitlab/-/issues/549985 is resolved
+    return Ability.allowed?(self, :admin_runner, runner.owner) if runner.group_type?
+
     ci_owned_runners.include?(runner)
   end
 
diff --git a/app/workers/authn/oauth_access_token_cleanup_worker.rb b/app/workers/authn/oauth_access_token_cleanup_worker.rb
index df9d25452f5..022f6e600fb 100644
--- a/app/workers/authn/oauth_access_token_cleanup_worker.rb
+++ b/app/workers/authn/oauth_access_token_cleanup_worker.rb
@@ -6,7 +6,7 @@ module Authn
     include CronjobQueue # rubocop:disable Scalability/CronWorkerContext -- does not perform work scoped to a context
 
     idempotent!
-    deduplicate :until_executed
+    deduplicate :until_executing, including_scheduled: true
     data_consistency :sticky
     feature_category :system_access
     concurrency_limit -> { 1 }
diff --git a/config/initializers/1_settings.rb b/config/initializers/1_settings.rb
index 4288a64721e..80e0f343532 100644
--- a/config/initializers/1_settings.rb
+++ b/config/initializers/1_settings.rb
@@ -775,7 +775,7 @@ Settings.cron_jobs['import_placeholder_user_cleanup_worker'] ||= {}
 Settings.cron_jobs['import_placeholder_user_cleanup_worker']['cron'] ||= "0 0 * * *"
 Settings.cron_jobs['import_placeholder_user_cleanup_worker']['job_class'] = 'Import::PlaceholderUserCleanupWorker'
 Settings.cron_jobs['authn_oauth_access_token_cleanup_worker'] ||= {}
-Settings.cron_jobs['authn_oauth_access_token_cleanup_worker']['cron'] ||= '0 9 2 * *'
+Settings.cron_jobs['authn_oauth_access_token_cleanup_worker']['cron'] ||= '5 6 * * *'
 Settings.cron_jobs['authn_oauth_access_token_cleanup_worker']['job_class'] = 'Authn::OauthAccessTokenCleanupWorker'
 
 Gitlab.ee do
@@ -1144,6 +1144,8 @@ Settings.cell.topology_service_client['address'] ||= 'topology-service.example.c
 Settings.cell.topology_service_client['ca_file'] ||= nil
 Settings.cell.topology_service_client['certificate_file'] ||= nil
 Settings.cell.topology_service_client['private_key_file'] ||= nil
+Settings.cell.topology_service_client['tls'] ||= {}
+Settings.cell.topology_service_client['tls']['enabled'] = true if Settings.cell.topology_service_client['tls']['enabled'].nil?
 
 #
 # GitLab KAS
diff --git a/db/docs/protected_branch_unprotect_access_levels.yml b/db/docs/protected_branch_unprotect_access_levels.yml
index c623de9774a..12d115ab648 100644
--- a/db/docs/protected_branch_unprotect_access_levels.yml
+++ b/db/docs/protected_branch_unprotect_access_levels.yml
@@ -8,24 +8,7 @@ description: Stores access settings for protected branch unprotection
 introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/5103
 milestone: '10.7'
 gitlab_schema: gitlab_main_cell
-desired_sharding_key:
-  protected_branch_project_id:
-    references: projects
-    backfill_via:
-      parent:
-        foreign_key: protected_branch_id
-        table: protected_branches
-        sharding_key: project_id
-        belongs_to: protected_branch
-  protected_branch_namespace_id:
-    references: namespaces
-    backfill_via:
-      parent:
-        foreign_key: protected_branch_id
-        table: protected_branches
-        sharding_key: namespace_id
-        belongs_to: protected_branch
+sharding_key:
+  protected_branch_project_id: projects
+  protected_branch_namespace_id: namespaces
 table_size: small
-desired_sharding_key_migration_job_name:
-- BackfillProtectedBranchUnprotectAccessLevelsProtectedBranchProjectId
-- BackfillProtectedBranchUnprotectAccessLevelsProtectedBranchNamespaceId
diff --git a/db/post_migrate/20250630200458_add_multi_column_not_null_constraint_to_protected_branch_unprotect_access_levels.rb b/db/post_migrate/20250630200458_add_multi_column_not_null_constraint_to_protected_branch_unprotect_access_levels.rb
new file mode 100644
index 00000000000..94c63a30d28
--- /dev/null
+++ b/db/post_migrate/20250630200458_add_multi_column_not_null_constraint_to_protected_branch_unprotect_access_levels.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+class AddMultiColumnNotNullConstraintToProtectedBranchUnprotectAccessLevels < Gitlab::Database::Migration[2.3]
+  milestone '18.2'
+  disable_ddl_transaction!
+
+  def up
+    add_multi_column_not_null_constraint(:protected_branch_unprotect_access_levels, :protected_branch_project_id,
+      :protected_branch_namespace_id)
+  end
+
+  def down
+    remove_multi_column_not_null_constraint(:protected_branch_unprotect_access_levels, :protected_branch_project_id,
+      :protected_branch_namespace_id)
+  end
+end
diff --git a/db/schema_migrations/20250630200458 b/db/schema_migrations/20250630200458
new file mode 100644
index 00000000000..4f39cadd8ac
--- /dev/null
+++ b/db/schema_migrations/20250630200458
@@ -0,0 +1 @@
+550036e67e6a0956e8c53d6a6e262a9cbc9ca249a898360e0cf578c9d1dc634e
\ No newline at end of file
diff --git a/db/structure.sql b/db/structure.sql
index 02d98b13a2c..91aa535a9c9 100644
--- a/db/structure.sql
+++ b/db/structure.sql
@@ -22192,7 +22192,8 @@ CREATE TABLE protected_branch_unprotect_access_levels (
     user_id bigint,
     group_id bigint,
     protected_branch_project_id bigint,
-    protected_branch_namespace_id bigint
+    protected_branch_namespace_id bigint,
+    CONSTRAINT check_a5a558921b CHECK ((num_nonnulls(protected_branch_namespace_id, protected_branch_project_id) = 1))
 );
 
 CREATE SEQUENCE protected_branch_unprotect_access_levels_id_seq
diff --git a/doc/development/advanced_search.md b/doc/development/advanced_search.md
index 7bab66ccb72..3cfbdedaacb 100644
--- a/doc/development/advanced_search.md
+++ b/doc/development/advanced_search.md
@@ -483,7 +483,7 @@ end
 
 override :as_indexed_json
 def as_indexed_json
-   # a hash containing the document represenation for this reference
+   # a hash containing the document representation for this reference
 end
 
 override :index_name
@@ -509,6 +509,12 @@ The logs show the updates. To check the document in the index, run this command:
 curl "http://localhost:9200/gitlab-development-<type>/_search"
 ```
 
+##### Common gotchas
+
+- Index operations actually perform an upsert. If the document exists, it performs a partial update by merging fields sent
+  with the existing document fields. If you want to explicitly remove fields or set them to empty, the `as_indexed_json`
+  must send `nil` or an empty array.
+
 #### Data consistency
 
 Now that we have an index and a way to bulk index the new document type into Elasticsearch, we need to add data into the index. This consists of doing a backfill and doing continuous updates to ensure the index data is up to date.
diff --git a/doc/user/application_security/policies/pipeline_execution_policies.md b/doc/user/application_security/policies/pipeline_execution_policies.md
index 8f2a8a401a6..f7aa4eb3c66 100644
--- a/doc/user/application_security/policies/pipeline_execution_policies.md
+++ b/doc/user/application_security/policies/pipeline_execution_policies.md
@@ -23,7 +23,7 @@ Use pipeline execution policies to manage and enforce CI/CD jobs for multiple pr
 
 - <i class="fa fa-youtube-play youtube" aria-hidden="true"></i> For a video walkthrough, see [Security Policies: Pipeline Execution Policy Type](https://www.youtube.com/watch?v=QQAOpkZ__pA).
 
-## Pipeline execution policies schema
+## Schema
 
 {{< history >}}
 
@@ -45,7 +45,7 @@ the following sections and tables provide an alternative.
 |-------|------|----------|-------------|
 | `pipeline_execution_policy` | `array` of pipeline execution policy | true | List of pipeline execution policies (maximum five) |
 
-## Pipeline execution policy schema
+## `pipeline_execution_policy` schema
 
 | Field | Type | Required | Description |
 |-------|------|----------|-------------|
@@ -297,7 +297,7 @@ the policy configuration is not as well protected as when using the `allowlist`
 
 {{< /alert >}}
 
-### Policy scope schema
+### `policy scope` schema
 
 To customize policy enforcement, you can define a policy's scope to either include, or exclude,
 specified projects, groups, or compliance framework labels. For more details, see
@@ -416,7 +416,7 @@ If you don't see the **CI/CD** settings, go to **Settings > General > Visibility
 
 Pipeline configuration strategy defines the method for merging the policy configuration with the project pipeline. Pipeline execution policies execute the jobs defined in the `.gitlab-ci.yml` file in isolated pipelines, which are merged into the pipelines of the target projects.
 
-### `inject_policy`
+### `inject_policy` type
 
 {{< history >}}
 
@@ -579,7 +579,7 @@ Special cases:
 
 {{< alert type="warning" >}}
 
-This feature was [deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/475152) in GitLab 17.9. Use [`inject_policy`](#inject_policy) instead as it supports the enforcement of custom policy stages.
+This feature was [deprecated](https://gitlab.com/gitlab-org/gitlab/-/issues/475152) in GitLab 17.9. Use [`inject_policy`](#inject_policy-type) instead as it supports the enforcement of custom policy stages.
 
 {{< /alert >}}
 
diff --git a/doc/user/application_security/policies/security_policy_projects.md b/doc/user/application_security/policies/security_policy_projects.md
index b5888efdfa4..2300df30ec6 100644
--- a/doc/user/application_security/policies/security_policy_projects.md
+++ b/doc/user/application_security/policies/security_policy_projects.md
@@ -160,7 +160,7 @@ To unlink a security policy project, follow the same steps but instead select th
 the dialog.
 You can link to a security policy project from a different subgroup in the same top-level group, or from an entirely different top-level group.
 However, when you enforce a
-[pipeline execution policy](pipeline_execution_policies.md#pipeline-execution-policy-schema), users must have at least read-only access to the project that contains the CI/CD configuration referenced in the policy to trigger the pipeline.
+[pipeline execution policy](pipeline_execution_policies.md#schema), users must have at least read-only access to the project that contains the CI/CD configuration referenced in the policy to trigger the pipeline.
 
 ### Viewing the linked security policy project
 
diff --git a/doc/user/gitlab_duo/model_context_protocol/_index.md b/doc/user/gitlab_duo/model_context_protocol/_index.md
index 22818d599ef..d70b5a4633e 100644
--- a/doc/user/gitlab_duo/model_context_protocol/_index.md
+++ b/doc/user/gitlab_duo/model_context_protocol/_index.md
@@ -8,7 +8,7 @@ title: Use Model Context Protocol with AI-native features
 
 {{< details >}}
 
-- Tier: Ultimate
+- Tier: Free, Premium, Ultimate
 - Offering: GitLab.com
 - Status: Experiment
 
@@ -62,7 +62,7 @@ To turn MCP on or off for your group:
 
 To specify the MCP servers you want the AI-native feature to connect to:
 
-1. In VS Code, create an `mcp.json` file in `~/gitlab/duo/`.
+1. In VS Code, create an `mcp.json` file in `~/.gitlab/duo/`.
 1. Populate this file with the MCP servers you want the feature to connect to.
 
    For more information and examples, see the [MCP example servers documentation](https://modelcontextprotocol.io/examples). You can also find other example servers at [Smithery.ai](https://smithery.ai/)
diff --git a/doc/user/group/epics/img/epic_drawer_v17_4.png b/doc/user/group/epics/img/epic_drawer_v17_4.png
deleted file mode 100644
index db9ea07f8dfc17aea0b86b10356a0f6ebc6f2825..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 69657
zcmeFZbyQp3wmuw+w<Wj~QXGoA1d0}i;_mL2;8vhm&`{h<DNwvX3x!hLDaF0T5-3h_
zw=eB`&bjZo_xFu&+%dl2e<x#PXRo#9eCAxwnsctb!wxYTY6^JwDenUS06Zl{SuFqn
z1B`mh<DjE@w$}C^qCPO}rB$T?fZD_d*Or*5HkzlF!ZX18VbCV3aUP&!;H72hOAGOE
zw{vu{rS<ZM*wWhiIobgLe&4+{=kU6CaBl2l;TGWumbn5-#crbqalCH8GTAlYKHzlZ
z3Nuly6sK6o(pF7gE)HoGTO_T%E<(Dl#^~mKg@knyN_lFIfY5qaKIPDa$fd}qh#lD%
zl&$vE1z@BT-L4O{0b@M4Nr*Mz!^Ur7pG9=#cbQph={b@+P?fL`9I){Ut~xC(Mn{?t
z4IX4)SA$f);MprUe)?7Q9T3r|{mv#=vDaqOyr8FuawOdvtoWR}$RZ4sck<!L(y6t-
zoiO~zy^*W)fna1Pc1FrL;r{odw;>x3A2a)$-&?5-P|=J`n*jiTwvH$c3{;<sTD!Y)
zS=zW;*>d^0LQv!Y0AiAU5KC)kTQ6EGTYE=0ar(V4ZS=H`HsbX9f~q{K5E)wsN5udS
zTkQZf9qRyRYY`iINs0SnexfJ<S6eSjT0d78H&0PNar!^FqNwxV-Q4uFe?+{T#pw-H
zHE3nrJ#1+OxCFR(IOY5tefa1l?$e5S*w~3`$;$r&0@V_yckuFph;noL`ucMD@^iU+
z*mLuWh=_3W@Nx6;aiSzRJ^kIhEd4m$JQ;pN{DmQF>uK%b2=Q`scccA{X=&x|?Ili6
zj~b`_r+=;xRn>pNyLtYD1r#6LewGk!UM?PPS6A-8Yj}Fe`Jh1l;n4q4!&3(pO59qu
zp6=cr*0yp!wr*Ywe}}NK{+B+)+r#D0bZo4-ZCz|#QKFtGtGxea@^?`FOXJ@x{vP?`
z<lo^HlvFkTCH|W+dq-EuA0w!>`8QxMN4x(Q;NK(v0~n?LFWi4~<DXRh@d72Kswyh$
zZteYhHcGPM^uO(k+PGUg+KB#j$|oRf&1=ca$;)Faz$w6E#m6Zk0=DB6;TI9G65s&~
z^N85~4NA$))63G$+V(dT3Y^Okg~M+tBrITU$<N6vWNF7KAYfz7X~}14#mOTmBE)AS
zAR=NbBK$W9bq_~W5L>$Z-K*bFHYg}CpOv+hkTA*{VF47B5ZIPe#D<5LQ_$9mhmYTu
zU%*a~{|}UnwWz$ihpQ!O^&MR;?QOXsZuWl$ey@V4hNGXYi-D{oYSNylfD@<Z7Z4Em
zZ^MRv8|D=e7Wy;%d$~lVHI&5Z`M7xgt4G7d(#sBIPMrR^qno$ie+}rMOlW&q{$2}S
zVLl;VK@nkL9w8AhKmT8D{=w6;_4vyRJ}zD!E`IPI_1}vsilPFwESA5M0tN7=AH{^I
zjEAkIm%E3KySs}x{ci}`-<tm#Rz>Bmjir~RtfiMN%26IZ0Z|?iQC>bBUa+Wuh$ue~
zI}e{I&)?+TZ5-|V|G%VvXDY4OUjd`&=!vrL|EKG(^wqY7{?+=c>Eie&Z)s`&WT2>}
z^<Pu)wDhsH`Qs-F>#ree2TM15TU4p~N3j31-|_ztNFvsDVAS$ka|-g>iEs+=^9gZ+
zdF|{th3)vPc&!8l!IqYm|BmkIZs+A|>0v8vkKz%<6)L#@a7D}VXQ5dCUE0^d7RB>#
z!Z>+EIR7VM-2a#`_wNGr&l!tx|4&ZD{zRFsr>%#KyX)`F`WsWyF8^r#ld0d;P1FU&
z0xDxTZEWo<y<NQMCA6(QY*Eqa;O-^%$DE7f-;MthM2!3YWa%%Bzg1L}>R)}RN{uS~
z-2bZle_{SEvHv$;|A>YEn<i*!|6}BT#qWRU`VU?ID+c~o!vBe`|IqcnV&H!z{GaIh
z|BbHu|8?(Z>xQ}t^F`emp3U*tqV6hjA&Q2c000@&?>Cx~7UMpulgLZX!0R6uHGu!R
zM!6!aK;7M=12mrN$lcxDU0vQ>US96(?A_kp&Cf4(bab#h;kv%LIX^$YxVXH!y58O0
z_4M#XB3G>}9qh8cot>TU?*7`?*gQTyX>02`JUHCm{<XULvukZ=VPSE9|3DNhIXyks
z-`~Hsw!XBqyuQA^v9UceJhr{HyT5m^_H$!&bmF;+=Gp1_@zKe*l?y-Lz{A6%jrFZB
zP0e^FRX<nPw>Ec9PEKuXoR*i6tu1Zm=a-wCTLW8>jt*{ld2g((9QJ<g$HpZ1`@gun
zxPif9dwcqZheqBO6g7Nm%*lS8nVFNH|Mpd4a!7DkQQ<phXUL17(5cDk?{h!AJpCdg
zq7xEc`FIC>`!-xz`Tk{SgtnIc;MZ^VcFw6O8NYV-KQ}gYc6Nt{MM+D^>+2Z@ubsNP
zdDho8Y;SL;r)ACmSm5I1S69>S?fn`U5TdB?ysWe$IVqK$jaNea*}%XcVi_qXt2917
z85altP+M11{o!44X+?RZs|$2?c5Y{9_wM$#y}iTO$P5DUe*eDa<H!2$?w%jt=bws7
zArULyUjBT%!b^+G(^E6&XIGOGQ>7*4^YaTrf=?ILkIhUiEi7#M`UXx<&W}#7D%zKJ
z4$k+FE{2Y;SGJB~HqL0RYVM}3jt)=HZ?5|$H)oLtqd#`nc2B9j2d{7McCT&^_K$g;
z>OS_Zd_TKJUfg8YeQzIHZ8^An)3lhib$)YuJG_(h<DmB9>IU|1+&y=!V)s0*a_)9W
zK4|8rm`B6puQ%7XXT}k27Z=x*FqO|ETj#CZ1N#$Od#3?~Qw|B;S2wq(*N2)fns?8C
zw5<$mmou&$cPYchJJ)wNPshByeBUl@EoYG*UamCGcZTK;q*sh}u6?VSYD)N&B@{ez
zezEP9+RJG7bYXsJYX5j)etC0!gMys8=v$4VUz1B=u=Xp5_W8rK&cdZb<nGz_;MSyi
zm|63W7uS1>;y&tLUjBo@v>i)Pe$}z8{zKF24f`FwgUC0Co#E@5nBL_SR!7OJ`Qn3-
zVqQ17o7IN*wefcV04+dCR$9mJ`_96hI;B5#-@(Y7;iLAS&uk6p-RnQ;zMSMY4M;t&
zcake|sxXx^CDdw*5M7A3swnG4^KNv|Ca#q{o4E=+<!-dOOS$?+d*8uW6;9t!t)SJ4
z+tocFc9n%+$cF_e*8h3DR1LayV;6cPHCJEttK~goU=lN$G2WZz%0Nd?xvCn!FH4C-
zSQ=(mRaV7SAFL^JP(y0XX~L|;9kutR{BIa7^3VVX0AMEq2OHq?ECL;XXctAN1$`r`
zmH`8njh+^qC;MDXJs4MFW#~i$EY0E?2l{aZ&)dBOnnnfOS7)#P?&5ZXnSQ*v{d^Hg
z+%N0i;ao{wJ>z;kZD?m#-RImC<d1{hj)xC>i!adR;ajmd-qKv%)YtU^lwZSdm+|w*
zx3+KQS2|7{M#yx5S0TQ!j045-@7kKkPO2FNlOC-O1~Qw13z`p5PBso8Ai|9sQy(^W
zS~D(3+BSBJTc<V~wjSIbl}+H$Q$3-wM)M%yJa~0q4cEM2YU*|v<K{9gZPw$n7Wx$b
z;XP~Va?abW(s&49e&-@gm;{lb@M0|v;a7rH-xaNtZToGhKl@hh>W4pq;1egAy%5Ni
zEbdGU^u1V;y2`RL5??Q~syNm>fFnJ7UR!J|La5XsP*&9lOg0gGv!KekDT&Ek$M`dy
zIRbroElP&OK+9PwDw`|H+K!P5hsoO3R8yK>t8b)>4wzD2zHI~!D@xYUCIEg?3y&XT
zY^yJ9u`*wS$v!AipDPi+`JPO%jG#bPzy9g$4dc$YVy^yLO-hKOpcWCW?vOFTAR8kE
z1wVIM-y99QTR}MZOI^jSBOFSo2c^ZD`n%}xi(h<L<-mcx${c#2P*t%#)3jK+=f%=x
zp0=&`%48evU!UjNN3;zWsW<gvv{hh`2LXhIK_uf`i2*U9VLb?lhB6f?h??3hs~$o!
z1fAbo*JePU{Mt3vw<qsVPYZHkP9=wD)b&cbKN_&XCQ`v&pZkJQ?^~zPmsNHmB3Y>v
z!PAGP@d#m238Ul&l}~PcxdBUdL+VY5fObdtF1;HOFl)7($v22jNPK)gtV_{yx4=~7
zX$p~|z<Oj?CwHPb&hvSR%x!IZ0$`{zZeJc9;u%=hRVy_=9bp&~$c5YIVZwCLLJiy%
zJe_~*fq>xU!Mc=Mp3|h+jBp#jy75Pp4n@g4l#A)a!It_N5pH@4-3iYOwy{hnSz$sb
zHUaajQc%kC6U>xsI0~`l7f8uN<DAt}dZoZ0Is#9TrG@sFCtiL#Vj#i*Bj-wGS`Z+O
z4EW=|xMW*{LQ4==r+|v|3y)Nq5tO?OVhnsoHPmoM8pY@3Fn<J(kgWYVcHP(1_V4fu
z_NWUJoQjwPn{{v{|Ky1K<HolO>j;C<^k9WG1WwZLC7nae7Km->-0H(()@0bkE#@FQ
zT1!CuzHooHaLmb2?$psPx=3wqCFpu5uVnsnjpy5g9O7H?J^tYNzT?v@M%SPBNDF7R
zl8Hu+fV!^-p-XnDeqf35Nk$1cCMsnzRaU*bNI7OLdrl}qAo^E#cZB#b??@7A-~x%~
zQKA)J!esj=7Csr0!`FFz9g;sD$80>}RU`0L(|%w*v=@W4wpTgDxcDgVT&F#&l(W}=
zO^1ViU7+(eoQ6u(VWJk5+zEIvlE)WYG&D7HN7_~#;HZ7C^;TxDA8q>qp1QwSPqRB&
z1ocTJ^-aFr>@pRS!q@=9V9@cI+%-K7pmAD_g<bv{iwDrSsAjO;T@AzlTn}pk+SQ^V
z0E;KGU;qKIlE2;j<*0jkqc<5LFqE%isk~9wOsvBWorQZu{fyluVWFCH)&*cIp;z`|
z;ZlZ4Bpwv~yM0G9uVt>ZwKHq;`)l(5di~VE1VB`GumPdYRw08&5rNm|2QYQ&D^7ka
zYrq@+DKb2;6Dq>68+JX9Oi>l_Jtc4v??w9<%A<DO&VyAB(B18YC26ZM;1vyU`}=Ic
z$~eSfVHB<t3`NBWs_)KA(09a)1U~<;?@3O})q6|?Aha1`pkLu#_3i;;6dM#2yVCH*
z8C7vtBMaYOrrv#kG)lg>bZI+D453FMki%b^fX6dnUA<jneti*pWPn^)AssoqDGqV|
z2G(`qIf(YV76bcICLput^DL-_J{~NX2sUKB*Lqh2M479I>dM1|p`*^WBUc*CL3h%q
zzqz1VL{VLZkzHY^nFw}4XFi~6VY^`G!JPjC)L3<-weWhL8$()lZqUbzx{r8EoPcvJ
zu%0I+C8e60+1c5ioKMhhIF(RP17KMN0cOAnV~Jg3E1a^ccI+G}2LMohpyq_)AQS~_
z&I($)vjxw$3Ue+6X{BK2U@qT11-<2FWfH}zJ{8uVXDD*ZTgnq7do+j<_u3}0m8ixP
z@U<H`xInqhZ3uq;Vv-Q2x#X2!nyyocu+<`Qcz2)-anA^404xDpgX>Gw>z!(H39aJf
zNQP(HVXs4nDk{gdzYn)vMM3~lj}j<*>nql=x}*m>lVU#CvpXAns!jYl9GEd)hR3><
zaxkl$y`;fh(y6TOlL{^BCy`uS)RQ=TDq&m216qka9llYHV1k_+yW5%cshE*zf`Z<>
zEuwJN4DMsbWD#E}wM?(oV{Ov=AOi25cWaY!=8%e^GpE6Oz`^Ou;i5QBKN2>-V*EDa
zvPkYsjl0-qKKQ=F3Y`(xLxqZfM02%nxp(^tYm<mmKtj&rEg-R(Mzzo<kxpjJb6~eb
zmrDytwLQ~=K2bb7chIN=K1^ujk+Q+uAkW?B^zaR=kxsFY4g7)hr#hd9X30Ad@rR;1
zN<ju4U5Fx03FWL}UUz|kW<)&WhXRUs&(T^FCBo@6%{$d~jU2fG8LD8``AbH{-WA`y
zy}asZf(Jj=4AKOUFWmZoXG_0#3ON|z!xFWEaIGgtXj~WdUU+q;LS58C_X?*haB7L7
z7*thuj*pU`ih&ZYr|IhNlnkr=$m(i1Ojtp|-lJlL(E(r~wG5vAEeG!mv8-2-WHlma
zt?I&zjy*LxosekWo>Fcm86Rr6ZLnuHmdhm6d?LsZOcpcJT$4!N*%7?s&0HtC52>4Y
z(~7}uT`O#gKWhV~6}Aq%7leO>J43h4`!KHfDVobm=8Iu&E`t0V9EU!p&OJ@`98H(+
z;R_j2T^vW2k(rZSmOn@Qa*U@Lhcrd0;4mlr{4t2$QNzyW+d!AQww(o2b#2Fc?FSz<
z)^j`CG2}1;2uNO~mv*C>hJ}V5mUr$O(e}IshsKxMhH6?efHlZXa+L<n_JXk5&@xgW
z_2kSOk<3*0#vUiP?0cjPNtDzT$BvSf$(`SE9fMrdYq{@o8zlM`Ly~8R&p8%e<s~4i
zw>?sbY9WlDC#lqF>cA?<W5}#C)?nTVR+)5*(W@8Z7gGvdbW;^WpO{N<`q1lzH7RTK
z{6oZ3oMzOSPC&Yjp7CC}6UVOkY`Qx}oZ3_O%rutyDL&n8i2$kexo6~lrFvQ$x0M6M
zr(mR&dV6?fP9K$)%m^jxeju9>rKlw}z)e!itE+gj7gJdAxzH)nz+N-aKSQ?!sImy@
zHuWjpYLv*?Zf2Wy6rGYc(_H3f;W_jFF}ez0&6s~E4x83{R6g}OvzKpgIC1hDXRu(Q
zJ4q+FR{AZ4WB`?l-lJ+d+T9EHzF5e9(7lLo2p}2)wp)uA%LgE44_*eL>NntbFRCh_
zYC|U)sx;7oeqUw+q<+_SKm>Zb!~=zlk;jQmO-*Y_Nr&%zux>DF9Kqu+%-Vt%W`w6^
z!Rcc>L5?*)IzM7se1u#NtRs8kLT+<<4$rPbGOZGyoYt1z`vd#mEz~^ignq>VG_8(y
zjrjrqUWP8^01KLbd4UrDrx#xYLARb_mzT{9*b-So&Ut|b{U0$yHHXpuc=%6e|Ka^V
z&HNdgJ&9+v<og-2pCpj|so9?h0XU_wU4xuA#i3`sqTX54zK`lj%~IB$rP)45ehu{~
z!Zr-^aB_=<00Nafd=Gto`B;rE#a<7*Suvw{q8fodD+BbV_~hA;=@tU!GY;prJXh#M
z+o5}6)Zp9Jb<kQixwG6b3`VhG`TY8oa7bUb4e#CqixF5?i0NEW5o262kH}qWS>^id
zN^eysFH6Wq=Iu(G*Jg@bGk2&s4cs7~K>@xRgxd2qiS3C-sQdfX?hAvy?yF`&01*ti
zkj(cBX}H)@V4<m6I#3LzOsi5Snk*}b>`a|5lA%!cmg_!3!(-;>W-SlRp+J`!ICKOA
zuY~Ff7pQ082}Y8@(GH|v>|b;d&Jt8m$Nl2FQCG-HfdHNo0w>y@;q_sv3r_|pWtTUt
zKy(`-34k{%qC`^=o6SI3_q8}k>B0euzfPb+lXn951Jmj2&S3k*$rK7@@T7CAXNQwG
zW^D-uzCy$K8=yQt=&Npv>3R|0XG2MP6>w-x*I3D7EiPv3(KGf*?XMy^(rmsFB=Gxp
zHf9atbllpw)WE^d<yNfOi2ms>W9~`FCh;i-P`gkk?|Q!4t*Eekgp9Hh@9L+g9-dwI
zVX0I|2_UPeg6?$v24de`hY+}&(#bpHPE$V9HD;JCu&M+5c3>G<2%%qz!%?VM#LIXF
z4$Z^qtLYLI20M`>Ac^eOobXy+83V+tXJUyf$tqkiR^W%k0bm!@3?-OAH(Uiq$=O3?
z$*F|_oph0Hi43cd4SQ4Z1T%2(<QHBNb#SQqeb{yp#5`HKdh_Tep8yWim%)XxNt6z0
zK2V5XcNr6jLGk*b?5(%bYkvMuG;kxqRLI79u)P8&=wpEJyCYoe8h*q^^P4?1ifBJ@
zd{vscf-8+eP#HBGhVsFO8Dx6Op`?7gyF#I9O-}-3%~sGo{y4IF;Ma*3WCfNV^u8F+
zoX|9N_6_KQn!ASBL_Y_2*O+QPfUUp!diHx3ydY<f?zJ{UU1z7spn+W?DiVfr24Q+c
zX5H8K4w2Ssdr`)8p!VSx1FEb*5I~$&<ow;&&<n(>sOkeI(B;`|wd@lRubVi?Tqy!Q
zdTnN_qS6TvC|$Y^mEDB6gi9=EFuaBU#vb=S;bINd#AO0?A;Z5Dq(Kb6UEc45-G!js
zM3cep6_8MxOL_rn7{QMshZnvkY`c$|cw!%DYL(qGQf6$r7eNbZZ+)mRaWgsl(RAX_
zPhZbx=4b8VCBHq^HkW|D+hh2>7OFhdgih_j-PFT0lwvY?Bj0UcDy>;YB_s0-m+_OW
zg`M0~!Si&%*?m{{W{(gojo!ZWwL`3l5`Hczw%dwFh|SHXuEML-W@Z-pkurw(3drJR
zVfV}!8?c8*>&fm40ivJm3QS~d|1OvrBvq8joVGj9*)Sf`@ZsyS3dJ{+TqS1){|%zi
z-zZ`QcB-~5fB?|TJ)(x=-<kEok58CZ@vvE8hm6K3$?l(cM%Rc;G6mgX)j=8J1{`bx
zUM2r<{xXEpPL9jN(gdb2)`Lto^=8WH^pD`(9){Ep9x8k>$qrr)M5Xd*LDUY9E$E>=
z?#C=F*0%_-Dc$>P%I$O&QNEc@sHx9mhZ-UvAO|KB^mA3&r7{@jG}%}C=X){E3RI<D
zLzI^8q71_url!OPBtpz2J&z#^^-n)}5RZ_B;+Q@q1EARcXMOxf&HsA|g(v!-8qdBy
zpa)!ug1-Kc9Pd2sGag6VS%QfDP!pOS@7M<HOhB%gKh)OLHS@K7xIXmH+_Wf0pDjTU
zEEr^;`8QCkDZ|`Zu~f7>vk#w}J+`QZt+;;g9K5&?<|Z2_d(F)`Qr(Q>nb-9t(;7Ee
zuvwI<XFd?bQ{qMQleHrQ1P>`GZpkt?tLQ-@I}fivwBbH*H)}PyPX_N<nn_Q2z5IoC
zYBwT3ZYE@CEZ^ra<gvNS+&=%$fE3>?3->X_QWdsugbc$YWH&^^h2&(q?x*VORnx}X
zGPCN2!Y10Dt1W{r=?kgo)FQ>_3^P=T>|A<&Io26bD~3kj<3j7>dwP72_L?U~^v!S9
zL#orspZzdUQr|b_e<xMxHP3!DOi^F*^rB5oxWV<I!eByuOxD5eZMsH=mjSWNux}=R
zr~k2y=LPd!vQ4_}`Xxca$HP%rL#fvk);B}9c&vCob2@z&6Pt?bZRy3e*<!@GxGU6O
z!Xje>iH!C2u{@a?@9Z4ZAMBVGc}Uf1>7smIad^?CS)IojqXmxL`|9&KumYm^HPCvV
z{iQQ;1iHBqcro^I;a-&v2iH*B!Sm+x>f5u<FZv_o`b!+u@3%a;_4M@3x!$!Hm>L<L
zEN$;bL85(MgmKb>23nZD%f8GU{33X(8rg{DGlt2VV#MZ_VxnEHDt2g^$NauYhuyzi
zk+m2<z_c(K;S)1$$R7M6d^dk(g_K__$4)3iNKrY#IA>oh)KzEOC1*dX%P#gPlA->1
z%zMZ+r|I2i?roZ}u!`(2Dq^u^lhXo=hE<BB*>f*sB367_^gNc%Y;4SZ9hWwr(jZ4d
z3iEP7FIcEAf|B&cKT*T6^Na>_i@Z)_4Q1rY+<VH6S~b~?PXvy29zLwokA<+TOdr!L
zXa*?6ST`%Xv>WCWF;-k1Y~0N~&3G-8%n8WQh;xF_($hwuKawKG$HuU-w4r+_i}8>*
z@mnSuB|UZ}pa2HLjj(@9akxyB8v0PuLhlIum!!qslqu~?ax)V-g9us?A{9n2^^@?~
zmvpj}37LZzWCdkhzQT{s);-m9zg&f>Wu={`{@`$Sc`>ga7|ywTHqK7f^EKe+($7g*
zyGH$F-sa;<uFO+;wnXM9>*l=a)hztFDNM(`Pq-q%5|)wH+y!<ov*JG0P>s<iK8}A%
z-#51Jwu+8LhmGi3k=ceRa)2b@Zhh-)F-Sk#+jlXArkfmlkykFH5`p%U7Fgj<CW0@=
z!izP%o18ideA9EcGJOf=Kj2N8+kw7ey6F=?H#FcA2sG^w@Tov+`pT~TWfDuD>W#>+
zXH&<O_Y>9BVp-w18b+5YX|d8f8Q=C#x^C3GJBD2V_|4vsMAy0sZu2+b_Dxs*!pvua
zU{eYF>PI<|J~NrIfv@^%LOA2UMuAheJ^6LFIEBdC(_PG~v-~R$4t;aUqxZ3^&k6+T
z;DU?7$n}(z7w5CFq&g~;>}xWEEAHSW3){i#HZ9hW39-)bGFKM(7Vzo&RcEH{pz91J
z>Q|x)VEl(4uH4W4XhyD*ialF*_86c9AuV9FSBy&OoasfW@s&Hyk(g!cF1=28?#%GQ
zh=)*F>ww}FoF2jlh7I^WRR{*J0R&pCH9mi?!G?N|<)&)}vYW7bWc{H%nrG-^$>}TY
z)@X)D@&_LtMEfxFVe`_iP`{Ukrds*|sGG$~c=AepOL#uvum+TWpf_nJW211!vkGho
zNC!tTrK9UMQe@hGz&DKwY>Pt@6g(q+FQ7#_Z&F^ZDml9ze(?-A!9lZCQw;1$0^&8k
z)f*D*Mw5%LDz7@kvH+ZrEIzv8L<V_>db(UCT&)|l(!oW`a*p&w6e`DhIx3Ps%rq(x
z!{+<0=Gw!)7^v&+<c|E9^HiT=Q!!l`Io2s=Ocdr{L#)iPz)#kXKRw|}00V`q%wuGn
zXBWlqZ$5euD>EtLgI_sT7#<!z%NvW1`N2N6E5Hb}Soh?hXKW<an9BYFjSZw^g^&et
z?)!OrPoXE)54-ix#GwfhD78Hhh1wE&MN2vk)P}YQKqsYzKRwmeqqp+c3%cQeTHNvi
z-cpN5_HH4VxK`O*8xizL20H!kz}*@eN7n<7nrad9Y2IP|`dAtuHv)X@U~DcK5L!Xz
zqLg85d4DDLH;>YkqlcTK__4V?Fe>NKo`ZO$6bcu`!Jsh`>~v0^lChqGL&A0Exk~68
zaNQI8feW~iWVSr9LTi3uZt&XeGm<{%fEnTpIZ!?iQW4~_z()^<$i~S^$UcOEdMn3P
zYL?ldxp1)7UT!?C15&Xqyg0@%%dnZPbm#<%^aF@47}+N}b+ZaVR@(Lw(txKa3TPTU
zF{9nQ?sYR82U6pOAG^m`-(O>yg1B6-%3ANw@4ql<(&y|WR}indeDpyW3lPQvd{Pt_
zuF=eaCrfILONj@47)P^5N<|gf>9tFXN%ow*sY%M@yIVYutfe+FwwrB4q5ooTbQd>0
zjSOf9H=XyqKi4JJTG6E(v!UlRD{vB%t>GcfZj1`?@%txSG2qoiD>8*JuuuF_16=OH
zlb!5ABt3R!xoqL|KJR^N`zM;9A0=^xc#fDHP_R&2vx*AQ>f1Akew)zzp-iaPhrm~c
ztcqiz>e8ysV6!k4V@GwZv<#IGT_g(Rl@7aFT=A9-@muaO)-sba23d#O7s$-0-ZYMP
z(a|fyyjo$^<><Vw+hiP+NCR?7rx$aXSS@}9*@e{Ajnc%<NQw9|d2U9aUC69f$IZn7
z(%@(F!GLQ%D;y-*#}HJZ0Ad6p$7Mm_J7@lE9$o91O8*^dOI87&I%_;RxR0+-?R&yl
zIbR>Ev1)qw&BPHH%di=|dP^#1=8$%Ojpr>3%${QPhn&>dK(monP3>E9nn5&9h8CLP
z=^kD*>)EB#Q4hTC=J#Z(AOm9m(kZg0gIJ@zjy6uyn{=?2uI9({N5tveNWX$yA_dlE
zvC6(iSpKBlgA^4_kYub8RuuWj5GA(Sk8;hx<V?9;N0pDc4@)j%54`SR*rWHG&E6x(
z3HzirZK80PUoUU(^(S+|zcl0bnM7%TPJ%vbeX2TOj_VmXa#93!+Y<HdSs@+3mKwGb
z$Ngp;M1-DQ&yu<v7{j`1z`!_8;}|5^`rd3CA8`-i&VhtuUpYEFnM75;3-8*+o!$Ky
z(UYfHE<nQBdBP~ZT74wwUDw`J85cfOjxP$DDbUa(-FsT1sOv)ToSMb#tbRUZudBR(
zJnC_r#CbY+7WBL&`=o3Rirfh8O{nfhga)!tpcTB6Q_Q)nOejxf8~!CdWeqQv+K%5Q
zBr}vllh5N<7lyb7EAX9hGhv=<;F~Cdl-SNru>4;q4DA<8yP1N7MQGkrk(b?1*9lkE
z;-fLDrbe2@bW58sLoJf5*(rr-<Jy8){axH0-Eay7K0Q0&?A<!g(M9&~GWW%xS9iU2
zs??}6Ffc^dV=m`0d6h$gBSwNNHN+#d!0R6OWh}0(K7*p{KD@is0Mv15i<T}JgfEL*
zPXkfxnT}t0=K<L+oGq}lM64ForEfh@i9y!XEk77%Gt32lh3J2NjEn3)T((q;L;sXo
zav~spVi}f_;L4NkG`vFL+{wjV&&a*}kt*;7Ta>Zf1mjn_me`}$`p-cAP2k1*&~Fwu
z0tvR=aSSO7*?l|joaC$ot8$;l2||m8IgbjkrFo?$20q7zZLI`>N_JDg(JD;9ixdh4
z-d`p7md%6`f`TMH(BXK`mEOykx~QPMvhhysz|W>{zR0#ZK9ubj@|>#ggQir^wQqko
zpRui?^p5CkkYCWDCcy1Hn(197xhlVTR#I^eU7Jy5`lQ|RAz_FtPNwM{vvYXe2$37(
zfMAnBSh)S35+z0Beu!0Xx!Js>ZPt?`WlqdB8$1#7`AloWY{j<?PoZ<&bmgEQ$ly!-
zX?)n&&=CJGryuY<2KWolr{=%luIGLEKbEVBQeY!FiCj}oh20oX-JXNK)<*p4Yf<=K
zbJ=a2aHjaeo5TDNk1Of2`%>%q`Hf%h3yif?bnBAA$UK)h*#Z$QEqgcjYSgdpO6-Lf
z5FYc%!^TUN1!uI-`ks#9I~KRNg~d<f<k&<QF)MG87I*1qZD$YSBwx%waV6+ZBg57c
z?Z1a1jXXDl5}-b4|2pD?bxRXq#Dvr05MfIbFarNNhS4g5Fr;6Bal-y4hNS)P!oS5B
zf&V7lz4Yy=Jysq@%DgfPDt8}UV)p6wH$lPR*Fl0K1N@`BH0VN@hPM7PGqX}alv#oA
zBI~{*CJcC7t0qI99{GW57;ByiF#oK15w_ZKIur)Zs#r+qmy@1&jxRk1=QM%q(-ZQ^
zJqO8C-zVxCnmwe*!k9yIAt{9Ti*i_DNgeYbE-Wh<0;n-sIQBi@nyB=f2(QLyM!ulr
zWqm&dMMYU8ulfbEXSplPj`<_MrVpuA-W|I4CDywy+v}cXTklDuesBf=xfFfo-!ziW
znWlbjsrvQSg+yCpb+}Rsl9npG+<4W~8=@f(sWJMp3LI{9#sx7FwH{E(_eqh4)?gr=
z4m$*_<!%nn2G%_6rs`fWSM@B7RDG^fJJpCwaNe2*{BpYTeU>m{JenO{9y3WS@VZ1m
zaM5+>DWop3b*A|qXiTQz6X1LL^JUs38=y=wR-VJ{{g?ulc(!lYUlv(*L@NR4I}TWj
ziJe@PHDsf-K!Oaz3$n>;QFQUys>#SMk{w`;bm$rnMcb3=c1>~ZiP^^bxMjuOp9-)C
ziMd2C!)42-2yhwpb?ktlxV=r&?`A<_HYZ2U#rHsZkEtg=5Kt_KlJ9UyJ<5S$V}8T6
zsF+yhv|e~sBXn=x{>Os)Atq>mr97^d?nP3q6;FEyOP@5oZN%eN9V7IXbXI<VYa+*a
zWOi621Uq2$9*CN!HAoj7B)Cy9+0On6vrMBOpGU6|P^-ZL_)@$J7_g_}8zhG~6tZCS
zZB!aeqo_<4(JDjR*p8#(jdBHUvzO~zO+@k9kjwe5CH(VQfaMxAFtn`{4Q|&w*FXUB
zdsQ&>wUT#5GoZ#WntIi^G&w#de+UCeG{9*5X<deBB76EnZ~MLH$c5n1S^OIAc3#ZU
z=*YA);r66^<}t6j_|bDZXS>A8);F@S3NNtWr7Fk!7$}<f9EmN|(`{YY#Atj683XaW
zL?oQF#~&X*!2lP58DmSL5Ln;<%L<+H?@o?Y>Y;5?0f$~amrlop^lgz@LFfuL<ggDq
zs~#X%3ns`b#f_)k#qle=j&qoTaA{@Uz))`zJiNkkEfIA7#-CVVBkxfpE}}TTqthga
z`~iRFN+wkvntN;L%4UrQ;k!^`PVoT{*lIcOgkN8G2QC@hj<<zb<USQb%U^1uZ21b&
z0mcMEK?-!!x&`j)eC>2;ehv4+6A3}$qxPZJTJbCG&GHua6X)e8ODpv392F)v=zLp4
z85nY3kH1Gh=90-n1Nu@iZiV20^@51yzewDk>{2bZ@%GQ~kqD@B)yyzpd<g??VHfSC
zXz9Lc>56Up=Jv5!UV_E*T|sKE_>z&!fPqKB6JwQ&^_FHaR=u1@q`xj{h|B9BW-LI*
z&AUq<{Oa><e1@yOq1)vA6-j;(?y&^*%cVG(x6r4UxY<vxWJ;zQ_TQ*qm_e2gcFvY9
z_)Hnc@1*5e5g#k6Hv>1Z!wZw#*V=0jgoxa-hFv`>ftb@+nBXE@^E*En&NJpf^jcoo
zu*uEsJ@HQG^<9%hftuG80gt(#uA#3yCffcfhRhI^+tHpQ243-Uee7m#c!79r)#O&R
zmu@0-8ng_|gVEr@59!QaqbV$WaCUv+P$U-kqDjF>FVL3&bZ9hsSDxX{f9hf5%135m
zGflS0_h==P8X@iO5Q7IpJ#{qwiR=)wWKK2$_PU1Pwlm>&?xf+R1-mvqL(-IYMq(?I
zVv!hHpU$>ggH0#{35cLpNywpWZ5tfffY+hP6-2c5V9>>$+O&s@ik<MAg=rTK+?Eja
z*upZHr;m8mgIR}gc>~wVu{hb60Sq>}Th@8RoP^55ampp3c7z}s`-1!@l0b3tsVX2w
zAHT%@#nJlkWA>vaJ)@paurTyWKo;FbGNwX~jSFitR$rxgP_|T!R18PqNf`cUBtz06
z2I%=g)b2eH8v4DQppjWVY7$x&S%}4Wrv^Ja^;(dFwq=*t**U@O;RA3~<jI2&PduPR
z)&((@GDgXIjiZ?=Ib8NDIi!Y3Vlnb2s8p`fa9t?<Ky2$Fcfq|ge*__sw31~wj#88V
zCQSz+!8BWS6Bdk}QP1E1@yqaISJ9{HG&JU*e3Ky2;uNTJ2c7uCCRydq$l!<<FnjrN
ziYYQ7_%h^>ua3>-+g4C`51B;wuS02*iAPOnK(ny1xVSHbAoxRYKv!c`@RLp)P?395
z(A4Cl*Y(RhYfr0!BdBpl$1l$$q8A@m9#@=V=VftXCP`V(i7G%?T5na211$`FzH~mG
zsK6mPbGftYi5Lta1|^xN2l$~|<28GZ0Qvxly1rgVGZ?^e;r;+<&--ln$f%gRsEF;8
zbuTry$6!8IjZ+pDC)TT*+y>QEc{kN7Fupq$`#v6UB@;oRV2$fL>mL_9@c6k8L{gqH
z=;Q%-Es2j|8*Drx@r@xFfF1Y?8AO(EP$er%at!Ali)6U5P4yV}>Y?bAVM#a#yEVP}
z=<&t8pOKt98zl3&Sxk5zdF$m9u@}WTm{yjYV;%f+k)k4RSj~|2Yq8X-9904>(~G#G
z6lRRRxq}!*Hxt2PNm_6;=;Df57!63YdDZdKKcPY$Cysa(OUMxoPRyQ1aSuD@xTJ{$
zcTB|wa~wJEFn$k2Z$tN!0bIoU#FTX0_X!w-4bE%y`8n0Jh!8oJgxjz6MJf*7*XJH3
zNOyhH*d>#ts<XwG_l*~944+%NnspF#kkMVmOT%NO(Xiqi)DOF2*FHO_abtqrR=<i8
zmA@}HZ5*ynzw>_rCCetK>GouO`dNXrFC%MRZEA$+c}Qo$DG_+Xhw+9Zc?4by%#nAi
z!6y%++9CN^^p?#TtIvS1)zpCRZC}ydePH6{{`T^QUXBV|qQKBK53S>vn14>Y^fK*@
z?0h>T_OvBGy098I{}49E@at@v3#8(tj+J%3E;%7ccklaP{Qdkdmm5-Ihn6AgP>DXo
zh&G;68}Ulk<<@EOJ$^9ItGY(4EJSJN^#OBT@e5}BR0_}2ANZ-{*dh=PiM@8*YoL9a
z0gLBX)NZq>7uHqU^=^cp8b&b)%_gH(xSYg*OP@sBzIOhcxJ)rEC>U=6)|e`y<hD)k
zds))-{=ISn<@-6CVagY3dlg@>U;;UrU&VyAUvyLIBr(J&WO+od<o?Vo-)`mPd;pZ>
zVtUO3V}9-Ll1QD5+H)7=mFPtRk_VvCxf^LoD+H10b+{n*OYgPu>Rw4>>n&0C=ZtJs
zQvo;~1q!K`I$BACx^24YE6|+gDlYSI84=JxBwy{)%R*yQuA1Uw4zS*F=8JN5XWPN^
zU?aU!cOtN2(T`H~zR%@fKWnOpv?{O1eth>qnPbf99(Di?<^Un+eY8Mrp8^4DZx4wt
z3(Nw+bhyg7VMB-HkV*NE7Y_{amM~yUl<jB?OioxJIVJMbJS*?a$7SGae}gJ|)P~rg
znPD#yl-Zsn#N2OYw)b;J`1x{;?dLbCu2(;f`*45=jqBdUx!a<oDzxi}JXb6OacM&p
zn;>In5sH>Iv&L><=~!6UITjm^G~*jQayldP3i(koVOJyKZS(Qdikn4&xmBUf5UAvC
zJ|v%?|83Q-k8kz%&#t4Z&=sEWXLiA2>muu7_WIc~$%Ro1eI2>0W4hgzY{2sM?{vTm
zSx^*dYg3CFvBKWhNe<c;l5fteV{8eyEI^Dh`CtV4kbg$ycOCyK0bLT$<~CpGWUyh?
zHLVauof#<sOoFr6C)wEqRH#fXOAG^>M%~P*AbEPV=yRQ!g&eQ=p)6H|meQmO#v<&V
zSZ_-6CWW+LGyX>Y8ojc(-5|E8(fL47<T5rVToMXRjkM<oHFo~=0QyZOhgp-ng&uCY
zIm(!P%mgJ67JKr`ue-*Ei3_($^>{EFoPNRaOPmvFV8Tj4y3CypyC)|ei!NR6eLa)&
z@hGU5z3OSYx<}wp$@^UEon#=b@#of0(-1mf28L-}%7cua+I~#_CmqqF3w-3*6IfY3
z<Z(g;x@=Y5pY`QsKeWD$mHAe+6Nje~3zm=J?Rf(`b(riS4^`$S$N6m}<>N=??gKq4
zz&m+RHMjaJ!Jt<LEX=mX1Cd~-jG03f=bwW}o}!{q)eP028R;3)AcRM$s`wIF+G;c-
zXS=F3TUsB(ptDhRtha&@%i!Px*}kHh*@I-#usM#A7;0s9G7{`C9oD`23$_ecE<0NP
zmAW#{eOQ?T+qXXJAu|7&9WOOn{J1%tkzoKYaDS^Ip-1=GrPUa%W6|7Xu!WHVnRwaJ
zCd)#2nFBAIc)04eL+s+627MELbG2MU+PsG>`5P!w$xv|+=HT`GaaNO<lm-Y#tC+<w
z+P7LVYZZ%0<UQ9zmdy7LS4ejBpDb-JWA=Q#RVkr3dF#ej<z{xAPT`l(q_(+wZP8K0
zB=kBp@V9yk9gMHQY%}eq^rVXo>vNLhNoTL}qK_oRwkX3^GTT)ON~<_U-zp-EO~N4&
zSdq25h?n+wcfMcw!4vF!Z2m0U@3OyPdU9C_dw(RxN=^E$tSMvPf2&5)R-@lNSBs-H
zMX|(Aiaw%az27>Uc-Nth+4GWi>3kXnocpN%wJuG#d57hFWf)TG)l$b7bBtp5$g{5C
zYvEvORJdKdh?YNCplXc8JiIUY5XCO7E;BGZikfHcv7Ki_y?gDh0}%?XU%%&IL8QTb
zsr4u^Klt*;Lfg#k(bYR2;$S13us2}Ty(AQMV~CU@z(5KAjsyadzB@MfJ8!t&eE;S1
zo&B5r$U<h($^71xE8-VRx9jl4+tEP6nO*bmrb~-@bDx4fe0#DfR$ApEDN?ucGn7`C
z4TzXAz^f^{pxez<#7}yn|Bm#jy^gzI-e<3&h6ltX*C9JCqu;rA&8(<Mja~494!OlS
z+;l&|)Y%42D}f=WM5lh@W^6cz<k8j<iI4d8y6HABJw*3Op%49?yy0aBIfSs~m^_MB
zdidba{O-83^`YQX$`?D2P&yvFGQ*MPBW*=A-3*I2b=JHt!>eLc#NDlr?>9=Z1i14p
zmd6zSq@WIC`uQ#|K1Wf8;#t~7jha`aOowP|tRLNGLn-oH-!J(XOD2-;<mV8K>MI@6
zGUTobfw8k6)rqS~+;^)uZmcepv7FIT<5R6(BQpJdgH4Ngo|?dz{>y;YNS;*Ls8S{2
zgE_N9ChQQ#BJsBjoD8NnN1f8Ca%!qcG}vGI-}=7UjvO89u`vi-hu-N>eAT_W_ud5G
zOav!(MYNl@lN?T<crz?N68&ViQKgEw%lbW8pF?*>$(5|+qBod*BI~I7>=(B6kFR>1
z5xDAQE+i#F{pC;c`-_K)1|IDw{W6dSbv6<I8q*l}Ue<97MsnMl5SC))ygJH??o<D^
zX|pEhVonSb%XzdX9IW2)sNw^qbhJlyk+lVxvC!)QTkLLmpAVmPIItSj#5$=1m9Y%Z
zdA`B>B_@PxUX2VHxlW)q5xXaeLA{`bd5)+Ze=^^s1qX|dlFoE)Lf)eh`oJ(`BM_=F
z%zL0NBVj2+2piY&m#|~D$)Wtt!YJCnh6KNz<a81~<xz?sz^AejB92UZa(o!C7WFMW
zQvw6}TnmRSx&+%vy#jV7L}XdYh{J0@-}mfhRU{I#t3^kr2eDEuCL>R$g$tYN?tLtT
zy&Z2HJ&Va3eh?97{Thdrh2h7yCQ@k8&MM5|DS02EGfB6Prek>~LaY?pq7X6nR@$+=
z$Oi3}ojcl^usVkgo6BT%gnqshjFpcLv|I^o5a8-Y#E~Ko80*E}0iS_Lp&J}I!=dG2
zoF!1&6cg8ilX?MABDvLj340dm#6f8-#Xi4Ese2yaiK?4|N4{_5$(&e^Q=@5tZN!W3
z@+35RI?!KkT8{H$GVQES60gnHp0EVOWtu(93gqkTL36K74VNdX(C(J*(0d}m1ym3s
z6`dqh1yw<s7s=ry+CVNiu-6%xm>T^wQrND3;^OgP$>z1>DmbD;#xM6XLEjFX8*TD4
zOC9K#6bd-Y+lp<A8}=z#*c$?St8bD?esUanv?^(@_!6l78pu0x(bxOB;zCOVe5^=D
z&4vtpr);uD`F2DHy3=XRrS{!nVmdYbl!F(}F{|FFG;acWTn>KifQ;_Qdh&=1XhnTr
zwy-`MOe^ceQrvuGrVH|=m`Q#bg{n@@>hPv3IeI_tZcFx;ZIl5$M)wDX?NmYjt>?Ze
z%)p6Bi-_lwUM;i>B&`#XWM7n`m>)Q9Ge#0ll$t0UlcDoI|B@D!uuhVGnOacB$1WAn
zt**uzL7!M=NQ#|nfAWoZTvDR+<YB{y=L!n2IKfBG%@&#C?y+6LHjLh5=tL1c(xlMb
zL+fx8(6($eR|ip75)-N(npkTW<JP?LrktVC&;@zc>UF&?ajxcOj>|jr+C4g2bqMR-
z&UQ2k?7+)@BKwZ#+9^|rie}8aKjt_Zw+3)rj<Xp&u5^QZG4j#_@|{}@`s_o8LQ0n!
zLEl^Z8ehRR)P=|J>EbAb7XqYRe{c_TbLz{r?Q6fePZHh1+9370baAu}xiHo5q)<?8
z^D7Hh*vo{|B<j;nN_&1(_5QrJy76E`qS%Wq$)_$945F$jytP;M^nD|D$e%E0qYFZA
z0==6?a<qh~9UA)z94(InOFe-?LgJ~v;uwL?{G`I4eM}iQtWPOgP!bO&fYpl6FL8Ap
z`KqLHZ3;pe#RL}m_16kTs*1IUHP8zv2tPgA{)!*1o<-WtJKQtoO9y1?v)mc@uv7UG
ztn6Y;h;0x)rof7wHSz&?Kq&Tu1GO=%a<e>kn7!f-Tt6Gv`+&Vq7cs2lQ7vvnIyTXy
zQZMgVjXy_v&_`C`=B~f}!70a}F6on#eg(8}Mz_LnhNdyjwXlZ<2d(f}x(1^I>jg`X
z#fHk_VRp$74Z*$~0m<Gs5vAuw?w;Al(_SNI=*;W-YpZ=(iTq1h{GRh=Y+0u`gJcgo
zQlr!=edWB7ah@p=uihh}1`3>O(0zz5U0cbkZt%GtMK@z4hNn*FOC|e3_1H{tI0d(!
zxCML(eCHT3L6;WQ`sEqL6DmOKDzCyI*4MjAS4B~O`<sL)_Wg-_fan!dqUwy?DwQi5
zrs%CxopW0>KsWT>Lmesrpc@SUh(`Ta76R<Qj;QahfB=9L2mlC0Jv|J7qTa}V9RDs1
z0GRVUL`MPuFSCbzOAemz?gY70k4TDE6rI!;dEdt{8JjKBxb+N0LjkBuybiKgVeYlw
zqxQyfW?IvZ|ACY867ARbgEW&u3H*g7&sgNEuAlcq!AKJjdFONt`23|SS3_PlSj$;n
z`|X=R`XI6mm8Mdy3q9)B$~Q2$n`rgRT&71*9#(y-+p6UrUa*N*T7HJfw7E{k2u62-
zOLLHWL{c_5vo$$~SO?THlh%ND?!)OxiL?lIR90^x!ZbW-T3xXr5g8egOZgfew?J3M
z5*U0t1A`A!fQBL}nFyh!tsNNFqNK1G4%KAGXDTI|pQ5y+L0SA>s-`TQP>0xl-+~z;
zC<P63`Hz}_HJ$FHykx?k3YNWGSPDEDcOu2Hd}-5{D>}nxvXr_!&I06z=>pxFVuo5~
zo>@5bDawTd5mPoqo-X6!Gb?P;Ack23b5HjV>Xb;9U^QBPYQ1GPIV+mA9%!s?+H3d1
zTaNOvH=e1g17q(xuT27SEmrA<v9amgm5R#WepTbD>NJg!1=$3QS2ykJko{8b?;l0L
z!oX}b65_h7X%q@Gj0NNc?sg7Q&QEQj{n}O(B8^WC6eo*hX)LPnrzLFYwUj6$n^BY2
zaXJ}k!hnw6kv(p_yVnasvwp-4r{VoYIkT9oB7?e5xW}63yU(Adn(q_Cz!WvB<y+$~
z&dYSE^OgH?9K+#QvFfXaB0Bif#)?uToE9kR+(?+X!Q*!E`Yl0NVb;xrDFwL-dvC!l
zTtX-uECp)EMJnp71V^~xB56HI^7|U=Ybp}zsvL$TX?01H9f>@~$5tx#1eb1ydNf_>
zdw{Auy<?caqfrOc7^%TAfgGMJQ<4TX7Hg^N9-#M%I1V*Z{#^c~{Emz&pV{G{4#oH@
z1<TRuMj;Uq3Q$Yj6Ax(+Es&Px=sA6|@OKD|7T8L9N|}XjFt`^Ot0NyjLG;k8ic^{r
z>1X$bgx;1=h%&$as)sik?_GBzA<TZsgX9Z1N=yO!Dv)gORx=gp_iAZ2!yF&^iX=;v
z`tT#Zo<vjTy9r*(Jg%qqjCbTs`r1p9T52V@s@v3@vSlX>Z5j58Naq2vR<g%QvWJo7
z*D<_#57W#UpBg<lOoK82^SeHHlf;38t`sCjI?{VS{Pb}VF_9UIW<WfFmlTRULggyU
zd$$TnO^^&Qu7@ZbEVlYHo%7bxcV>4n@a6z%aUa~(UdWs3sUW#nc@GMZx{gCn;%Fmp
z{h7GuK5yS0YrRC&j_`<hSG>`tnaiaNnmKvr*?E!71|~)&KhhlJuB3_JaZzCsc0-mQ
zb;qoDk5U<PHT?MLfjKU!-zn(3@nAKnN7Egg^Vq{91q<cQ0T*y7-FBPSs|&r$U3s#*
zp8st(g0P%5=w+8`IOyv3v2T1A%a>@CI2Iu03@AVYa|Ts2Lc!#)+_kHlQO*_<cK_x<
z(pbX2(QVHAoDlFl7q+3-c_QWBPbM$Px8Q(AssdP%2NnS~pt}Jab$Z^}IgR>hX%fM-
zj$ms4#m=>kiEd;-m-G)E5TnqR$LAYfI6tUmOt!Epjs^bXaoqrCe%-wN!rP%^xp}$Y
zAXQ+oD{O^lUY#BK!V&jX-flj*^l}VRHi390b_*(!MlvFiDxll(L55%KP6eB5(MX;#
zHBJw~&ol^0lShU#&_YykjMj%f#O%uE!p=X4<ftC|G+N>rr3pp8+9jITd1R@ZW(98x
zZ|$Ja1ep-tkmwevd6uOEsrn!nzg4wSm-b;pbZ+B!Vao>@;O~({3W@zdi_iD7V)5ge
z&TX!B)1J(~*&u?^?_^TH$L*#Ql$gj2^$>|>SR;b%HQq(W;cM+&Sc8JpV_B1Ufs4|L
z(oXEanSzm(qw_#G&=Zs18pJI4c)TQco@b$3LFuZ|g8-Il@Y?f3{(~#_ABXp%SF~fo
zb@*^#FZI%Jlbx~}_0rmN`WL)KObU$OQ<P$kAGaxxC=|Ywm!bR&v%gS|v&vQhKozk*
zpBx!>C3-rdcN2aAI~auReg1j4H^gU>UiKb}zESuKe)74i=cQ9$etB~J3NB$!QhVAc
z|6REre$hci9!@viBX^e&%16=S3!R7W@@!}9q(Qvh;8H$NkXTBhliS60;AJC>KkB1D
z4L8tyBdX8IZ4Gh$h)`T%5FCv2-3ISPp!N5IX9O^t=Gw2pdQjTqdz`aH*6=&^imwu7
zg|AKtI=MJKb_T-GUoC}<r@piz!B&18>=B~Dg)}2IeC#V;GaryRL5I@sq}o|0!+vS_
z>EovcT6k$s!K~-mW9o6``w7sX^Wbwuq{ZnxmvF2HZGKFk$)1i6m-6t=1l3-bs#~(9
zL>N#=_=axibC2!+L)KfzwH0)Gzj)B#9-QJ*JV1d`B)GI#1us%G!QG1!N|EA}qQzZ`
zYl=gW;smF-d*P<fIp@9Sz4xz~J+nsk{MKi(ck-Q;yYyE{;G_?vZ?#PLs`rH>*>1D*
z{MM&p6n+thDvBF(6_R!?wzNd(#-k~}s9yK6jDTgX2PiTF2S~nutFfTWHdG~aC!bS{
z%A4l3D5Iy}%fyEDdcAFXCvbM{C#&tSMsqt9VL>BxyjLPcE@7Nf5klIT-xF?}4^CO0
zeO<jqL(T?QN~sS4%XX#avB%}+&h~>CUOe66BGC-%`M{xO)IcVYDls>*$socV>5y(%
zZfyc8-4ff||KXiM9pUQTcmLUHB)>w)#)PeM9!QRmyA9+OU|##QH&_9G|J9y<BSgEE
zwCUpeO$Fhm{@C$Q<*XzLfY5-@FRIn+&)5ZhOc_JD^Jlt&!n1>n<k!t{^|=?`yp#w~
zO^qTbrc@6!8Ydx5u=B)T*~5d1zuM#GWidF_qi4i7HBuo05b%_aV$;NBqR<z!ent3b
zddki@MsBbg@88C5>K54}WpC;qvo-4-ZanYRH*fPh3T$vw6785prJiE_v1E|vruL|8
z(u#B5$h=W?fJG6cxy;y0K@Owwp*^3H?ypN={P<)H!?3Mn>27#0=g|LSF@7)l8e02%
zSedZa-r!&~xnnJFU9J^T`P?`iC4z6hIwG>CRm;GH)ZU@BZr}@zhX)H^|3qowmsG=>
z`m2_Q2mB*8y+8ai+YG>L!T2+~zcB<%ze9N4Va2i^!7i305Sd6!FKtkUt&`1MctaEw
zl>wI6bzkt-&2|vjL)><O&wJ^9O}&4#tfZl*cS5VkKK+!(zSX@gOfBi7t8%lMc7Lm#
zbL~~(FD3@}5U^s5f?@Qx92;3~qcz)TpI=aKPXjaEC#=bJpr7voZ7_s@9v%_Zk}IQ$
z7D4X8NlzORCIx}DXGAb%9gw;Ur(=eD&B7k9wFgYziGUnIu2J#byz=FyBm3|9z&Yv0
zLXHMLw4=eOiqXEX3>9-;D1|DQ@C;#^%9EhJzZRXCDi{<j+&W~<>?Cnt33r$?RdN^Y
z;IFo=HZnO&{i@ZtSNNFj(a)&EO@-|}G4LYQy7@Wwe0SV9vkuP>+d7tg50<jrf(K+8
z;137p3^OAf)(d<ITXMRwY&fuCL&TE7_td3_Gf8uP&gJs=(hW?Ce6b^eSH(6W-=R-L
z_TKhAi1~hLIB{;jPcILAU^mqwh_RG8h`Yb~1eRUrbe=tp_>EzpCca@CZy4*iPXfuk
zyVXlzvIJfEi<JaXGgZewzGLu~Qk3+l`5DfrewG8%W{3ZcR?v4HBl-PcWoTWgm{NEM
zN9b?sY>p^%b6WD7o{Y?^nvY;4m*;PxzKfQZ!wozRrfhvU#^=Qi41h;smNHec!}7~J
zjJ11cczg#izXh78_qeBc#;wy3I61+;fe95dGM;ved`Hx8XP?9jvBUjiLI<cy#`;4o
z`9yp`&dOid+RHbToD0@w_9YBEq`C5Hk{9>g?f3gLu1tMX`ul&&Ee#@@SMN=Q9?AzV
zS|mOkRVIKh1>xhnFeusET$kkYd)@<fCzo~Ixj1*_wMbPERsxvMIWq{nZ0<bj?5z3^
zm4a*@l*U<71DHx479h(1kO?_~KoDHg<S=nlJLksumgx_k8OknVYx8bBU~A{@qA|7?
zg;oSW10LP{4ri~AeQwzDiZT=bZ;;}Dc#Hp+y7<2kivNZ)U{DyYZt;8Jf)}QCT&-D&
z>L~tVt#s}BLyYV8sPV(XnB3#$ps84(ocroasRF8h@CNH^?uV$z42ypdhu%6fF6%&V
z?%+>0)Ps(A-)5o#==F_Zp)l?m*UxAADo?~D`*Mdz9so}`V2baC#tIcx)L`$ef34(^
zLLj-}znHmE=-->%UQ*VLmvro#pUz%kJb3~O%lyXv4+)71{db@L=nvFb|1$p&5*TU<
z|8SE36n+B#hYjidN0I!;2B>mbOK?*A)C4ppEAnr7$q@0epN?!9o>5AK#@L{aPO1d`
z>y#`!v*k9_@vGOR@P9^85$YcVmSwB|>otn4?+p+9b*r-Y|F8g<IpWD|EPX;&!d9z8
zA%8>}b9Ee}cQnst4e09E_$U2%vS9Vxy)%=phiQ5xQOd!+^1Z!t<a513k?Z1}`hFk6
zzXn&k$r&}srC~d}K`&X{!nfaG7H$O6=<^0q!-l$t6wJ6T`K_vU(a8V_xNABCVdRb_
zWkIw>QUgr32`X_4Px)(P`g94bS+ILyFobY)C?0;l+9FB|^j_Vf&}4E-1m<x{4Yy!W
zLbWo9kgtHaxW_60J28=l!~lD@=ws)5DQbw;fugJ><`U9RHuc5Yr^@O0cUx;-<E826
zUYtxn$=`xr>^)xkylqJJ?iAG>OT-20?N0X}7Ms(CZoXP=UOt@d69S;MadN{UXz{7o
z252=KQnr>36oI6Kf9Cj)wW>qR-`P^<6824O^?C!=U(u*Az_@tP7cX5XB3AM|eYzys
z*x_J3ZRyO1J%ZV<bfR<wjRM#rA;YtdxRn+{;psU=CxjwO-}w&Nxt&CmH}VCzc%Sh1
za>4Onhj#D(bT1mjs~3rQz>Y0uY4fnKE?A-!h@fwdyV##sr2BSZ^u&!FjI*MgS%eu5
zzkN;yAQZbcPrZ24HJ6rgzedCLoQEbOtf6d;@l$VtttREPr4#JfK-i#H`z2Riu&z$f
zm7iA@PnBw=JsQ6CMO<$N>)_t}^L$*I`pp^8=?jfDoohzfeQ7?J#=3VPRUX#7->w2-
zvCr2w3}iQ9>=ITJiV5iwpn%dffnA!_W}mBo7$r+rUAf8Dk=42;tmOjF-uPQYTVj3P
z-5L=;_E3&efV&6F^s)%{q-^snMvBPuq}La!V7|Tca@1R3VH4_Qg&S1cb_=4;Y*hZ*
z{GN_dYQn<v!f1^oVy#cpKbFiEP-PF)2B9y~@eS-E+c6ghd7EIR?${xA0>I(8^=o>C
zwPHjd`P&fc@2v0vc`U(_A8PIUYKpM@J0#(lOfph$?fY)Y`D}ER^zb5e1<ZE-fEaPx
zy;dxgLD_+ZH6p3;LD*Lf#KU1UGEJU+3VD4|aVWJI(689h*6ecyXUDYCqh+gicpcLa
zK2TcsMTM|BGEcY2nX<VFyS9VnIEK7WSG=gyzh*6l4Dq!?MeQ7(t8fTU)_?J;-kD>2
zyf@(>+@#pT%E?$d9PIK`ZGKpCtPh5VhH0Tz$qs)*5s@mjHX98ilsNfg#~R&(<%AtL
zJ$1pO1M2!pZ$?^)#mj<XwAqxgJdHp!>s%K|=~0_gdgR6WLI}PYuw(6y=lVJ87@jMm
zpvK{%YA{vSXOv5c6<;j1ayn_eRkete2MGs8FgLaw$4*B*_A0vNg6;YY`U!t<!8W`V
z&tbQLY>tDKkv%#_bTQ!f;!W{Hpb6K9s@`0;uBQ~$7IN3-!B;;GEEgoDjYs>0xcD`D
z1YmAOpHa^`6N6+m--Xe87Rs?HAdm)YARXIUF*c2e5wjYoKtw0!iH2`zdYJ%WbRO94
zRhkymIz=)!Y|}DR{gHjPotNWHg};uEF+D?<Ais0hpC<>jWD109Pos=%=#S0sdbtda
z+bJj_)HgK0WbYKJeOwAm$Rd^AT%khb6T6`VAiLFDy!5IeRt23>5!P-9c}t=(#xG)C
z7QKjXN`Hb4iI6Yr)=Fkrqe0)!+n*wZgnGW<ac6;vDk!Z*_FxF;CxK7X#)<t&VYA+x
zw7{vTNH&V~9n8J8H5m!8-peZ^db9Ft$?!G=`r#B!`|Ox^M!g_UJ4;kvSfhVk$7dP~
z5=h4E?`0EK3#KnCoK`{<h)hw58n*s~+LFC({m;%Zm;_Iz4opD@I<$j4#!kQQS=?7G
z_Q}@|%E<HRz5c2lZNqMn(>k6Gz$18DZJh!rof+xQ|EEuAf35g+Uu<KG?*JVYg03k%
zDT);iU{(_Y%2$5L0}J1{7d&BwGas)xE${<Z3B#(2^JhKD2g8k(U^{Q2VB#c2#F+3I
z^z&V*P?Az|Xs&6o1icXTs2xO=@Qyk{L&8!)(Uj^f=?xUf2&#{HrbO?71KBq0?eq-I
z>k)EC7|2h~l=W;&vBPNiQWC~v@|*V)N@Rzy`%n4fyu8#V69rfzzsv<;3wA}nA(*K<
z6w|~0{5Q;=kEP14z^N|IBaQFRem_<v^zuB3BN|*aSsJc-a!_#Q8`%T62jtB01HJK5
z3+|xVhhzZD^#ewU*}TiI)2AO+m!RKl6<+F!Sq>@fj0=3CK|NP+TGYFxQ8`!BuZhkt
zN3YqERiDYH&P|uPH1FKC@zk2o%<R7fNqp<pg~KhIq{SQW5}3<^GhEQrds{5akpa=c
zUJOZry6ew>f9b3Wri_&C3l`gyu8O8FJ>Xw_0{<AU%yAxaMF4YH5ak1Ijlc1Am}l9A
zFLi+5OX>bV?g-6RxOr!<)JJi_Z<^COQ3q@m3Pn@+;FE?|YM<$}3tmjI!kS5gLxf*`
znowOW=8|O%F5a;^UUf1Tr8M+3hlHl9iT;p9b28zp^xoT^)BbdtxBn-NR49r*anYe^
z;KmRYPfB!2rl=)wa%o&fuIMnJ|97?AQjKxtveiXBxx4erQ}d-~(?KOzhz{sfF_-op
zRMDLjR3G8~9phnF+2r1LbA!v{b>N=Q>9PLO7RE#V!4e}tS?Jl_ZZ}z^dZ+m=A({sG
zJG2rA_kGl`gSalpF{Y;XwRk4~#)Z#6m>w->fgTRx8>KGUel$Pq9_yGCLDZ8E5eajO
zZlH$OnnyuBNit;_PdQhn{_<BD<G~}E(odQPZmB`ckM2F^KyU?Tg0OaSdGxi!>YL48
zZCVgV?TV(--A&Bm@WoZEv!>H~6F(CQ;ys4xwghed<N!+NjaR<@f4<PSMm}YImO5g6
zFsA3b4jeT#u|E{IFY-Y%v2<oQi8FNim~CrglQZ#{HmteZ*EdgJ<rPrFIanuK@Wue)
zAyY1$&(Mhr(*IGm{0xgSJ%5^89}_My`@v5W$qd!o3jn=cuG!lCE-FXaYDxs^U<G^N
zg0O(|Ket<^4ym=Vy>I1q{%-e3^{JxFNx<#ubC#xbq4W2v?XlbKX<J~FG5qM&)#O{#
zsqHF7a^jr}Tr404f*1n)eRv=^UUA#0_@9O<96o<UqdMhL*aa?#9Ro4F0i%pv_ZMbF
zQI5!_bm5S%ZR~wKMgv}0K(gTVK_m?)YBUurxHc9d^{Ej~gpKFwil59z;)A_<?XAR5
z>)*(CymQI_`g?~4IUBF(L4)`k*^>KIStEe`<6@6t&bJ@o%K>lL)RD}jV4g1XMp={g
z+~D;sw^_TFzOc8GsZagK&QIl<_|K*`#<mW#5mVdD|K^sA#7(ot{(=KHW*PL<p}r&q
z-CwwnUjqxp+uMpYRT8aGfG7q68~O~q<KNvS#NImY*9z8KT_7NePdCApnR94R|M~fU
zj8aoL4B;f8Qj9>;=vPJ%=;B1z>QraKh|fUHf9{hNtYP_rGi1H_nBa$N$X^ghPR0aD
zd5=Sz^6$=C3E+S>04`h_(9`5=H+DMW3QheSf2_$fBTN1Izbr6;uT-8xr)0?s0gRf;
znv_T{u-u&3saIM+yw<-PAH9HXs@$dh?jMvHjZf%9Z(rA$499--y~zkSEhF?SpVayI
zA59*-P^fQvN%8l99ONgOsPl_|s(n&HNeTET&_C%>7yroJf4%;9mi1pL`#+2SqbuP5
zNQ|;Ym6HB*kpFKx)KLE^McMuvrGy5QP4~-Y=&ZbJB5A^}AolFnEpkAVM!@jdm~gwu
zW17Fri<sZH<)se(L&>2y+ZKj+DPy7rnf1Q`a@GYk!T~)Ku$JI@o6*)7+W72tnTL-O
z3#qU`QR28G@0+W@_-*BWWf>sqrK`S+LJrLA_rX8%#ZTssgyJ}kHV?~@z$C(RVea%B
z@t<5J<=1k_ZBmwIw`%3&aNg0+0Hr0hHl|1RSQ;SquQI@Ce;Toy+2*U7UU+(C`cnC#
zuZgAEoh_sI@)@0q*gbG7+#9tT3IM>ADJ7_^hsPfcbofr17f)dY2NZB}Sri=VIQO89
zJeGJXiw5*?i!L{6vU6f%4Gz_dL#jlP-w1<K)+*A@>>G3z>83hYV;~GWq_5J@;e}p1
z8-yUG=`9t-Eqzc=6G0Tn*+O=j%-`DT(AGzrpoYn%KF8Bj;l%%0(iDyjM#}@ESi5I-
zVNY@-_KnhVg6+#E)~`Zm&NXx#&!4<$3Vha|v1S0#jbl5xZ&{0+AL*LNJ<WYC>qBK2
z!;8XaOzVnI*bYBwt@Ct5fsW|Cr+O1w#z*r*I;1yF=^N>H#}OuWK7Rs(dJ-njI)4~P
z6_`m5N2S|(*dxK!_MS1yPdkMy<E4j?k^Ifm^^re5j!rg};t&(rjp)81s+p`Sd9scG
z?U^r?u$Fpd$lEU-R-z$3yx@o7D9K2M{h&}U_Nl(vk9snI7NIxZZCe)Iq9z4~ud&ow
zw09Di2}Z~}?nWs&W>tU5yP{-wvJQCj{Oykna)AizrxE-U`N3?duk3L_a?ijs%3mkZ
zB7BM72X)WA4^qb=#o@z+vrDBgwEDUjV?v+|XyOP$=yhM0HR*FnYoa!qV;Di@LJZBT
zR!EAun#G|diB%PSBEXV4x{75L7hvf<kp5mn)X#$bNAD!a*^I&KV>KmLHFh((8E?FI
zC(ZmTFYoe<YN!kS`ZCewS=a#xWOBU5`KFIs<{S1WN}6tI10}bzjWk~h3S6XvhTX^N
zbX*Q8s$*eoX5JWP3r^-pbSp3TL2Eq`xvB|1{4biaXt1M;X_pFBjLqK|3LkCDyN@S9
zxcCjteAjMJiesuic}!4Od;1}-^=;55<SBzw3Jsry2EDWwo$~ER#o^BZ^yT>B?`*n+
z>KgZXLh}d|v@9mIoWjk8ceYL(){v0&&q~-ePDCL2%1qI%7dXe0t4dga`D|)}+PXN)
zoyZW034l1~vv@P**ojwiTXb<zo=0KmTeO=n%P6TnhR*2juGP=Kqp{#jj3ED;Wfffj
zLg;;qCAU)Geoba;TVM@tBPpoH?sd?KD|CNg_4ZH<42Te|Z8I9K%}>3|N6(`V{e!a|
z{A<e=4`4?^`YOBMQHi(>9yeOU)9_8O^>RafA=rA1k8tmU2c&@@<#kyWB{JywPu5Lu
zvkx3-BToclS-@W_yQp>EoXJkSO#*}2t%!0S=#|fgqt*-7go?}9ap=^INvs5OYiG0R
zes>88bnsnZLZO{WN*^Ikmj;LRBf~u)OY)~i_+14^m9F*z@>)*3g}@q+!mpp+Y7K9<
z%qZ#kHIf^iyM5`>CB%Bi=-^=m#fmY0QT<bDbyk;&<cbs&>;ZWhR*;B3T>X~jsDW@u
zmmey``pp=y(HGv>rZz+iW{y+FZ+T6|%CI=gTQK?jefTEHyKH?GTcpt^&e+q-LGpk{
zFf-Vx2fFvruwzkribuse+LhUfj)5`5?;9<2F^LY|SqyjV_b`hg>d_kb$e{@BgmaE{
zky5iU(v^^aZ}Y)rTaw_+W84f#n{Dg_L;_aFOvGqT<QoUy)T<_hi$Cbu*-8T<WD%sH
z?$5G%sDyDO;gMjb?OCHtxsiE)pHq0_HQ{pi9&IPpur+$l<&Erk2M*2J->k0^Jo+J)
z@T*s5fJZs<FUKw~32TngWi^e*^@I@Bq+B(h$tH4Yl=cX740bFGjCv~c`n#3U<@W3+
zI&<yxc7Atu(LZSA_kJeb4{Tx5M1{aXYy0&jcpXdpOygEi+U9Xm{Bu97@VqzMz`RcX
zslK6%!KWay0>vsEb#ev55du|0mM|B0wY)@9x1o>5JSL|v%e!Nc^CVerBV#vWf&CBM
z`j1Jz+0_i6De@0?^B0V*18_Zr8OLJ(`rSWUu^HANcuFu4{#k_I=0hZbd<@MHKbP%d
zs3R1#j%!zK4>h8LOrpI@P)%(W1y;OhM3>`JTNK_G%SAZG^}Owe+<#=N${$x^hn#W^
z(9)3o;W`F&zQ2<TAz1AxRZ^E{dw)kyggHyp9>Xn0ghP2d0`kV6eB05g(fyrz^~ZKD
zLa8VEM^edRY9Y5&-jjE4Ix^QBoiV`CDgD)>!U4H3Tqqh?Ma4uOs-aUSUz1QBVD8;V
z3b|T!ed{cVJbsnv+u4Q$=T_T_zWGL;63`gML|K&$D+$jw0ow&_n~9SJajZbq)pWt^
zKg=Zu)s#Ko&jO)Ml3=Qn*i$?`tzWdb`es+8GDm0#%B2vSL-m&6=HxGZRzH;Qkr|m;
zzn{K0FTnG&#zY;JwtsJ=4E;)aIK<z5&TlJ?WVJbu{hAYyfk?<3s*UgRaPz?jl+hZr
z2C6V5pykYVX1URW?Cbh$ssW%6be*}Fg}=P|wMFrzRBytjz9K3;=@`~_s-k6B1$G;|
z61HaU(>F@cLR8a(tfMIkI|)L8Y#(h?1|J%RGdkr63hR1WlrIIM3M1-nesW&`<*yKu
zM~%e{0?L1o(Gz3e>g^a9F_@4U0mtG9E5`0$B?66MV4lvdE+LC?ZZw4J-i+4l4W)ZK
zZz)*^PQ>p)TgHo!JQd>>qs!Ih?0qyqTDqtFlv4s*`QTg}ApjwHC3MZw0(kd0i@Smb
zG^GbE*aaE3vkqL_Aa!Uirrqx<Qc7xg)6k$KAEY~XcyLAcyc1dJ&_PPkYi1q6NUsl}
z3d!D+sypJ*c#}&=C=Af4;JKP$LL53Mq@+jJkD0;`WoKxqt>M{YK&BdsW#b&8Bhanx
zW7Y4g1BrlZ@z{hvkSM}B;tF^EbROBcT-0T{hE#c#*hr3v@w0RwGaC7+^gwTxONltT
zSMvk*_~04u(}SVt0PzahbYf9t74!B-nIO^&Gv2-BnD`gNwSAO=67SAnX$Y;P^wtKn
z2(*ZhMsK{%YKtc)H4!s{TQx^isP~}Q!m8f{a4wlMb6uY<`MRy2C5~WUhsE-&#xC6=
zrvSpDXz?-n8K@)f@_H^K^qENE!JtGC=C_Zu4Q6*@c(--m&)LAp_M=Kyh++bcAuRy%
zN&4<p9XUwfFs6|RPW`4|i5eWu(^%rJK5;xk6r4lymF>3-=Yrd=ICR6S`_4)bY`w!G
z*FHl4+&PIMAszw6V{)Wc5}eE-!AKi$Rp-RF3=e72+u2H6nm^;I@6$bYErA~ZU#61;
zb}+7F%mP)GbE!@K7J%5=ke|+VgyqFCNpYDFP2^JevN4#zT1xA63{apEv?*)t>Mlp+
zSK~6kStc<we);i2BDm)Zx=fB}+Os%`@q~+^C_*x&z>C*{U^h4NPS5tw(w(cG=uRdy
zXJ$$^)hCQltTV=>%klz^GcWot^GGkP7-rhAXx9{Y#2l8hS@XoVRSt*qp!Mh(dqv)S
zKL+H}@$O-g<rSBZ42l%gz6vZ$P_w{zg`rTdg5g7NLl>g(3-hQ>qSP1({>;MsszE|k
z6ELS6g$b?`Dr$C52asAz<;k)WyS}wWvRoh1Jk{ZAc7)(R&nx5i!vP9@!Y!M8b$|uI
zzdcb;?PAy51p0I)$Ub}SnQxZWjNjvFa}lAEos<XL5M3L6I)DL~(|ob=%Xb^C()?T2
zsZIe_b39Ru$h?3QAJcQtbc+7h1weC96>f_t|DPAz1pv@S6(L?`beZK=U$1g@@XBfs
zo3`xtVYbc_2sXrb<o5Wu%Ergd&Bf0Sx+NHoXum<dDzZsg>&p)E)uE|<Z_{!M<-jk|
z{ezAWSjsqSnd(VRI6#Z2dEOX^(>!s(r`7Y47|b~7z@6*F<zZmOk}fol41%%;wr;)G
zM^hb0tP%>NAA<GlqepyxDFG**5MDrj8g${)6y{?med5<9yVu-GIwFLIV9!f<(&Ghz
zPi??(re0?2O9oN!jSOWWkGK9T>(WNi6!^ei1E9~zY(_^}5c*<?x|^EEI2dj%W+i5e
z>Y}yDxk5whL5sVms%UW?1RzdPSEWl^u*DClu4+{g_k(V;gb+g7H7BU32Gwhe!nU9G
zQBH!NA^HuX+S_6PP{s3HwY_vAIIpoF)$}O=v)+~{%McY92@;9{F}@l-82Iu@KTUY!
zIz7EB(uP`W>UBF;5jBXi#GdAQ_186Vjfuvurb<lEMsqrp0J`W7bzr}4)Fr2k8+<Z(
zm44u<Cmh?{IaHBKV-Zn9HuqFa*#9*n+h6a(oI@Las8@-6SsA8}Y*H>dn)Uz|tqYah
zFOFv$z!D8p=)BCtYmb$8oYWkFeM+T!W$*6$9(1Grl-+`ege+3_-WFy!q>Hud_~tym
z3mHW0IOVyw_fYj?`h>MsrY9DwFedC-m6v6Tv*-%#|GId(<)AfGmWi=I@HOTalUi#4
z`W}kY!20Dwsl4`fGHsyTlFFyaG6YXrO6c5WrjI5Eur{_g+{Y3mv*M6LdSxPQKAGCA
zpf!H|dr&=yA*(ztW9FAAKl+=3hJ1xvH{s!PedwtN6zZ&z+Gl_^JXbq(e*AT*Bxx!)
zz$f_+-ZoM4XYWG{ZfYU=Eqq(LLWxkjUEQ>D*<KEf%)HnS(i$Sr>{>RYWOl;l&70~R
z&3A^@7Eq}V7SG5;7Y06~y=*qxRKJ{AjV|;mz>hZ-f-i|kV1o~(z&~PG-3#XLH4ji^
zXx+5~kq%}@rK&`GP=T0q`=#nqxp@8?ME2X7mhV$eb_1Lj@E7*aUEjo^o@1nzU)oDj
z{=Gb__VC~7gH&J~UbT*F6E;rNh}Xg4JR>Ozjmou4uA4J3w^6E-z?81@>Fc`1%(?xN
z!&hYllae3alur21EjEt8|N558;6G9e2v@2SoxEv7L*z8+S#KVg+7rJ1y>|B(EsM0W
zJLVC=(g{O!!F~!)cF+lbt*Kh#HQ&PkVSqdtKw>M@vDzm${$l34|0!VveZz%DvUajW
zqeXB%x<b9Oge4@dkOx%=5vfz?am!#BsvHCKEi%x6@1F@OiwmtAGJ6X4Ws+#e!wG$8
zuMSMQ%}4HMNnAC`mo7G5afV#A3kdi>`PU~vuq!w?*nd%_tKZDj4;j&Zgk!Q~<bK)Y
zV$)eI{PdVD$?$6b?@}=5L(aqBug)iWK?)S;KmyR&@zwH*B-k$(&=}G~Q@p|gy)U<C
z>YTWuY;B|Sy70w7m?<nCf4hI|JkdTMdF<;tX?nUBWNE|g)?fNe3J%FR_cy)$fRw{_
zHeFHiZ#l<mH{mO5)l}kHOq286eZcF2J-WB<$U{Mp4uSh)%hl_LBWw`mkC_voqUEov
z0*M%D0_T7}7gL{9n>Vv*Xo$|hxt6P<{8KsjIuqel=&#k-^7M79`aXI%ujS_z9Fj_0
z+~WL~BqrgkX9DSJl3QzsHMTPj3uAxhbEfyN<ZjyK0D|M^SxIrCelj*{y?JqK-o28Y
zcV~5JS5a)qLg<j#3^<Y`LSXS-pXl3KH*-`BA9|S5=j5nHUa{DV(_HKy*O3hjBuuAC
z+fP7!;-fZ4Ls*FUS3T##IRW3B`Jk=w`D3o>iDQ5H_Nj#Ee~Y;<YZGKt<)8!Gsa7Y`
zzrAixM2BQn8gVSUye?h$`##pvY9Cn%owW8Q+Ae>K-fo};J$6D6ZYw#2YR5R1r~8Gh
z>+-vYRx2IyI^wxt!-qVIKa(P#uTa4M$c#FR!5-Kd;A>yj!ust;c`qfMEq2L9CM4my
z0j52o1dB>gJ$u^f8WYhTOSigiZ%5fKmeDwY$vLJmLWXo20Z!DrQORZ41ZfH@lO8b9
z;WDMPf=Dep_xc3qpi6NU0#0&YXhVN=w6r%<Df=Y6O(548m)|pSh#%qTw&+ss{%ccp
zDc<{2YMsoN%%i>ym&dc?HV>iGo@ILz&7Usa<x)oHKCSe#s})Z{47GlKArfEmd(2a}
z2pGrSjzUVTZ%$3yPQI~$4X!!JBe<<^$*s#u(;xMuMlzBeO}EKG<dxjts$OSGS&Muj
z1E#;HPsSu=(@cLEC%q9|<GCrHxZw1P!zn7<<3O2-D28Cb`Yw!{rUCK9>er#s&nEl7
zHx%%NrR+G!*}2+921g>ls7qawHnS~=;#I@;26vu}*~9Z3TRK7|Y0Md|wn0Z@KG*xl
zxkj$XRkP4Vn=M~#T4>qv7lm(JEz-v+qb^?Y$m_(2o!Y|_w62LkqtGDBkB<cor9%i;
z5P`tS)xr=#1WgTX%1QxH|Aj@$7C=>tpJ$e%|F99k_-i`Z0=fgI0eikhaUhYw?L9?M
z5RPrWUd9D&*Q&Ja%6yT=R^#{=AM;#@^QEoNvX5Py@TQIu;p}eIYTtn&Es!B+bMgr-
zlwxVSL%8t!t`4=KyHIG%8516yzrSozJ%WehQ0`;TaguYSBhjv3n1c9(?i=)uR%lbQ
zJI2B*DA=PfV1>J=-;x1qIARbvqVv^+kgQU5<aZ(6-8)h2D=aw6BV_PB2UrWo{$ikK
z5TALl*J&v~r@>S^?!XXfR3l)XG)ftfXPY+aRice7-fT_0xt{;wv8Q<!PrN*QY0qzg
znA;2<T<ef*6a~T<Wj-n#Y!g)09ZHONo{<6(!myhjA&^4rUQJhZE+J8cN|$+t8h?dJ
z%Dh?XOzqV?F)lm<15S+r=g`jxH4t0UjIcD+x_Bs54a7%4tO|l7)fyEE%GK~enw-!&
zCEGOM6<{A`NCQ+B7_KG<(*+cr<@U9$vCPcj8E6q_lJFf)Vb+OZYr$j&T<`(Br`!t<
z>4wAzf#JxVf-=D`n!ys;Y~X-3k+Z%pG;p&Q1$?L=$)EFzghiFEgoIb2IN~VmP_&?H
zLT0)!e=sOd`Slm8i1D1=|6u`itwa`3A>sTn05VyYf-b_X^u}V~%dB%IyI|MnBcfW{
z?lVXEt~q<7U9g$zn_-(jMf`Oc@;PV0UM?T}2J{hASptEItqXtZL}pe!IB0n(7k1B3
zfCuHM-uYtE-spGaHM};=k^dLKgEav@gojvJV`dk4kfO=+R3etx!QI4jOvXdB8r|4F
z`^y-iRHlBLGs_8exQI+<aW6rW87t#V!HLjd+Q}pG&7XKVEsc38)hb0*eY7)OO$*(5
z|GO#IUV>!dZO!~Err!h0&9d|dw`ovN`oSGJ2YSRnfuSTuzo%3p#T%x4@={vp&lFhE
z0OyP|FTHG%_G;At><!|ixozNs@yow_^=n?((62{?aJk<3XIPLHqX)#f&h%mOX6NdO
zy%7g0gig`f4hW%z4|msh6f~wUQb-Psd^SC~kz0U-u)h}X8x&ccJ^pzr^5cl?AjRrK
z#JE?oRPFqX8Ubzm^&b&FCcVayv7zb(bl~~l(RJJJ)Ha}b*}^5voe6)B^6}e1xGgDy
zR>q<rA^TD~XZZ0T@dy+P;#ZwX9ll2@oM^whgGj1$&6;%vKmEzc0NmFK!bAsl2BQIx
zKVfmcM6+3F01OcBzakPO8t7jo7MKM2{J%38sFGY~d`L`yvG-lf1NHs}ssdh1nViqL
z=2)N?l?8$_cfzc}enFW3GFspU_B%Wff8vQ`y3Hu#5#?WNQ+<vZ+w*viz3N9yRM*1D
zV%p3jsSt(j<Tp<i#4XwIB#hI2hK&*u1>CN_v!J0yW+MXnySTMK56<g7s(fGh!|{zc
z>y2|Y6Pa>9M?Z%c(U>wU=ig`vK!_ZHswO_j_t#V7S{@}lc)pR0)u$QEugSzl<#qVz
z0#xuHFYlf57TrG$W5D5xo^3&vI`ak<Lcem=LXBuU`x>4s%*>=H&4-{-6Cl>{hshz$
zd)7)+(5l~-5vn0<Tv6ED^aVsAc|6#Vy!X-+?k|F3J}P9i;z;VicfE7?MsR>zDY00H
zLOsZrh$nx!LD+fmy@FooXia9|RPi@O3S68@1ky$ZP&YSDTzE-XXn?%$wz}4;nY>{6
zn86==)Ubqr$s_}oq{KIMe9~Z}4n=73Hv41e{j98dXkLKb@ERx!aW)|c0)`3bdRh+t
z(Hl|RPdT<^UJH<S=CxS+RP>5ZqoZvH+FySyj}8n&>4sABzY~<8C}COtcM^ojf)e+|
z|4z^VFL0sEVW?!sH#|?x@O7k)K=kssnf8b_c&dKDWwD8i^E;6)!;IaqHuw#`&<Dm%
zK27ZZT=5K^<S8}}k;trE^8ePEsrOR=^9TvjZJyc|kjRDJzjLGG1nUT3qCAMD6CM1|
z&Hm#gDAz;H3#A__gPIDI8TGHafd6thx9}-be}#X>knGZl3%knwSWVet-fLxCG?ae|
zxKdgTh;$sP_*=d-CH&W@>9l@dEYrqy#Ea#h@2(FT8o9O~v>2cRP?v`757DmKWZeHI
z0DX6Jz8w~d^6~^GD9ww~j#ZB~GqA^@D>2IO5eTe5d{=8N<{tOBM!%c*9dEJ96dS$+
zy)7G~7K95<D|VnE@V6InQPUEKil)kZhurXj13!EGO}go_>FCd&t8`fD^_H2Wun~*Z
zspY=nNYwH^Q7nO%l#neB&voS*m%{Vg78d>dK8##qgG=z>G^kPMI$>V~i)1&cwg=8v
z<QQ-Ff6s1+D6JjHZZ8Z=x(a4E+w{<}`-uYWe@{?mnU{WWV`y|WfKELuw-yfI1KGyz
z$JY38lMtv?P>BegwjpeMBm?a}{xV_OID73U;UQ_Ov!CExP(dS}b`a{)gel=B4(%;f
zm_C{EN1X_@tHywIX|uGUVi(iQ+^LU6J$JL7dALAc_sn`X5M7!6s2m?@anx}4i+JbE
zhYAC9)t;oBf<V9L8@jePTM+nW$>%7B)B5~F8G~{EuVQpkJ$A3CZxvkFT(M-4G@=uy
z0bP3IzxJi~&xXkzrrQS|v=ms=M~W4B;ScSB&qHk+{coTGOGWM#9;?>K@c_7T-b6-v
zMhyLs^b4iC?AFz%I2a$h{l0eo{?)+$9!UZU_GaMqKgfv;zkcbEqo!&|1#f=-wUD@@
z8biFWg8oFjY~9qGzN*|glSWVej~i_aMLJ_+<I3eU#_Rk!4Q!jsn>>w?J|1jZSCu1`
zuxCgerCojc48I}q%b^n)dyLhm**{@(vXkEHZ9Mu9X^GB$c^jAz^8Bj%=GNN?Q<0(a
z*ozk%=#I-@(1bLu&yq3D#%<wDo>f^JM4cy_5BTv+a^erC=YMMFJE$Mli||8bO~F-h
zJ#2iPgkk8*1R$V0MK?B|8{u~fcDghq_Wc};3W)jKp1vE_I?Q)XgHzer`YE!Hc^W7b
zB>HNA1diy0!Qh8f4)Q|C-Gmy=TRL64US;wRA&NgS;Zoi)O5{c^I&ZBabQV~Dix|Hb
z<Qn$gR9_vpbNl_`t2M{wq+{o4TsLXxf!wWzOlvo`d%Y|dm}jg_8JrpfF;=(+_K;TC
z*N40tT{Qw!J(Uls{-hfcAPzv<U4*$JxtKymI{sW)9m{k#{BjCo)7On5W-4JfGSe3_
z5~L-L_rnG>#GL2R9<|h5MF<lyKXEYpyd#?U3|YmgSM~z_tz((xT`&X}L7w)--tkK}
z>ARq~y-wX?P;VUn_wtNTg$x{;s5JqjY!93hUW58%6H$#6A#o>9@js~?=^<Tp9|T5x
z1M6PZwzayw%+exwmAH2cK#Q2)dMD%pZU`xHV^3LrxuOrQ3Vxsriy?tmJdMRK0~4;d
zv>c)7<$dZts$T_xg&je_V_y$XiLcbFJC?(E<Wkm{<5T@#D=XH!`C9DLD7n8U_0PT3
zy_EU;JSH9alN{J}*Iu$4l{qf*DwF9QUD$f)a7J^C;73bh_1IU25tb8zyfTitDb9Zl
z7@<i>;pb&(ac4H(QDTCfzCkCanh&>i_?~haTzEy`m2E#d&3oLZaj%F*t{8!Fl<GIj
zufo_!g+_YKtQDF{p?qiGp<><WpSu6LQrCPqc-5Z$&9qA>>2D`)cXfAZp3!Q*EOnbx
ztn+#BVg;T1%Xy2um&7ybE_5xTp=1q1bouCHtGCeopJ`sHADkl;$SQ4^uA-B^4<S{M
zm$YrdAQtDvFKIk;LD?B03dvYdXZ!f>>eYh)uz)<+!noEok3>~#<awosH1=VBcu%ej
zc4eDjEG2zd&k-ovzh&^eD8jOZqP9O?+`ihIiUNG-rT>H)`01jIgt@qPBMeKBHV_-a
zd7Vt$+KdKxW!TXtg1wR1ovi9pZoT^(n~!@l(<}dQ<KSEE%Ou4nagbf3L-m}4jEl6$
z69cc9XDMI<E3Kca1y6uwG2My0J-Wm>?G&!!77~m7t6|%A))>bupr&{v?F%nwJ&F5l
z$8{tWgt346mpGafj?a-9bP*r{U)!QTUjH%vIDmw%o;He<4-aYH4H(yJ&OynySFf|2
zr+n@S_NdlTTkLW@K?vaMzJqmT!El8>HFR4b6k=zelZ4U7-d(>su1LY4$4S7k)QM5C
zE84Bg2C2f8aN`E0_ptq)UI3R6j1@{#In%&NRqE@_E$_s;NjF4qI3VH{RcV+Au4A}$
z*{>;9Q2aIZ%xv37%R0hPPTncrjPXE;)gS?h{xeF@D<ho{iEeupc7Br`>S#39gC<8;
zB<_nreRDg^4s3dP2WsRjAhph2{++9Mt-PwY?!=6#zY~i?#^;R(73OzLz?@8O9ESny
zGA9<H)<2uuFr&4E)osqG(UyRO1zJ!BbNope8>p2o>~2zZyHgTu&^bgufTl(YciF%1
zKtTPR){S=7<BL2gfKQfi5l%SpH$VthrNwx|^S12Q)!$i%$3}Tl(Ic-yP4BSb%KN!l
z*3$tdrGKWfA{5v(PVHHC{Ut>*lAp!qTt5jH;QRQaJ`DU50NnGl*56&6HPW4UDpVu&
zY($3EA;Yxxhd^kaU-`8_XTk=4o%xf79zN8L-94L&D5C}Ui$Ixa!G5~Lva%p>b|aFd
z^hcsTWmjetKBwET!wi?RxpOqF|M>cyhM`FNRPp(hgkhPu{cxXJ-pA;`$Uo|GYZXQ1
zx8<=NZyjdNR^%<+tVP<L1n%`*oxFz~(H8<!7H~$~_E!d{tL>(@ah}L~ek`@j^PRPS
z=vhq-9`WzOSk3o%mRx*~0U_=Qc+fP_ay~AW1QlYZf_Eju1umgTXo&iU=)ukjVg};#
z8lU=jQ_2PBe1%7?cLrmEE(8xya1|l?$6c#}Md|WE1AU)rLV^Hb1m=o~-Ve*|HMQ-m
zUG&as<o0VzG5YG1l=Waf6jO8XOLqJOT*CW>KhAAqg$TS`InCfp0M(oIb}aeOKrF2q
zkj>zN<*q?r-?4!`Ke5`lpziU$+`H7-C2(N0#Uy^dDB?@C$~(Kp^**h=%R=8D-Y1W*
zLI8tocjpdQKa9tI-G{_t6xF6FqvdT7LssJm8Egp@@;?cb+PJy%b)7t|@fu;lePjA}
zrO~}yiH8n77Rd}|R1?inb3R$e0(8kk7stXJm>82y#qQ*M-TqUelj?EU$h(43;}j<p
z5{k0tiaj*YW&v|y0X`zXl7J{eLSL|eae??BQFW-KOaA|^YnB8LFR2frvBoXA^@;wg
ztw>eU)jKqP%aJlM$cE|%k-SR7`k$sSO|U^Pk{V1$@L60o)%|DD$+;d6+YD~F8G0Nw
z1ge7zKZELlx1?*J6hHcKCZee~yn*{*v2Zh6AJ{i@h^BqYzZpqFX@G!jeSFYub+y7}
zH34AgD$?@NsvQ$Vb8OrL*AaO(tM)&ZZnYfMTEUi(4a+!qObqI?DU;3v`4{c8U+SCc
z&oleP;h`^@r#H|cXYyYXdR9qps#xyUC=B%NuCvf@XVY!no8JLpAF-~xp!c`b_?wrX
zi9!3e?EaBZjp+OAcl8!zt6XE9y1eair$#DhsD*-NMue6}YT_blUdnrO(~Tl^h;Wiy
zG)U3@EoKvL#P>b4RW8ZYKG^T_vs)4HY(D*hQXrl1r~j%)1MH#xE9!z1R^}OyAF|m=
zn$8HTBOaZ++4<KTtiHEHzA0K+KEdiIJeyUa?<c^p+1TB1d{<ZA=6a6fj)nF=+Pr|G
zbVDiiFZnM`|CgAkW&U4c{+G#%{}lfJn)?xhlr6XB&P({Vjn8VSB`bdzI-3jLT}}E0
zo_&Fr2K@4xdluk-Ip+LWwf-lDcVzSR$kp(ZJBiqpYM#f7!s9ibTYHbSJ_&=Fb;P6P
z@BIKWn;&S|ct`x%8TjF0pPHD1X>jwOzl^4sQQ9mupsJ}arKVAtv1OGvV43@>{?yN_
z{+;VkPW_3t_o&8OC1d|Z|Fd@Q(=Zb=X;<s5;ks>!?aT?=TkaY(1nSo@H26li2_1UC
zsK%(*LMGwLll)b$_1|nncY&P0zB1!)nUcfYP2A!w1{Ue3n(}a}+j-l{vSP{Ta=e>k
zT&5ojY0nH@iSt%n)isabR*HTB)Wu)eOePsF+f|J~j^HLUj_ctIGB;L<Q`th-wS@#w
zzRnXWXj#$u%bY8xigUuPF5P|7n#$Iby;Y?16JjNN;Hp@{!tTBjw9L6(J}%Dnp8Ivd
zmwNJX4^gka{I||nfTZm#5ZD(8EN=VtPGv&YBZunFvk^61=GFIw@wg2AnFUjET|%fv
zYv@NrH5wui9i9MUm7Q~Pl{(-6`?cl#7&fz-l743+ZT6l|`y^iJk~n=QR5AU6ROAa>
z#7vRd(&&rOi%6n=hNX{J;0W{%jVp640p%Tobc)R!3eexRpn5n_x(t5F^ewxvwIfJ6
zq%k;9L8<7k{O{!4eRCvIN<juU&AlJE&-y$$eL$eBOeEfdl^P$M`+52|Z}==${b&;l
zX+|!CmX-l;4R)8%0mVprw7OmkBl#CGvO1Su4s8reLN>Bd^POxW;or{RSUt9(n~b39
zmTK~C8gQrqG2q<oTxu$RuIgD(&jDWzDhi9CC!G()dx8*4)_4U%R{_rHo*4&Tm(H-r
zXV!Zl7Zp!8x+!<NSS#{FSt(aN`zH3K&>lm<%K~3$SaeU7)>2FLzC>3whdrA&k!jn|
z3iqz%Tm(alW&?jGYW?WD<UN&IZtM9m+}xnob|lkQ_-TraK`WejL?pqL<YXU(m-(I7
zv_Ty^qLHjvX=Ps^1NOqvmdR?4BiV=+s{Dy!uh!C82fZ~g6$N}}9V;yvo$<%dsJ%;^
zoq(TG(MV-K46iil>*8<=Bnnmh0bZ0I*zsL~0FgmF3B4b1srjtFS^&ge4)SuPDGxYb
z6W&#GFtjK=nb}z)Cc2D=^)po?In7Mpl3QS>JAui1Hoo>I02R^OKe3h%#}R5{Y3;BQ
z?YOn~yFqPVBbDmqwG>IPfoy1HL)W-zjO&^=j37-A;hW;I4}VfihN!TwMbY<U4OYq2
zelwqbijn+q^HDxS+~Xw@ci^?)i4)-BQ^T?H4lOOwbAV;BMax%t_#tEa(<aa#<R{tn
z&}-5?KknN%tWw~^uk;Pi!@ZbING{w9eYQh&-UV5r!&fjOyv%7!UNe9)sz4%LEFXMd
zJ1SQo2aSg<DM&v$nf=k(+zfirA-p=}xT5<SdPMMC=}dirq_M-<)27$>Bhw+(8^IG!
z?8?8m4NuBh?eNI3bQ^wms^^1~>I;9!vi$D!y%4pqXkj@0#2iSsYo&SiX*E>5n1d7q
zwW}o1r^nmwi!W`2$}96I3ud6<35Rhk7>OxOIOJognW<8K`I+?wYHu|$RF|<!_Cjr4
zG)U8zEnYJ7xtL(32{TVyS;Pj*51B5~5QWwT*IbVeRdm#o9N;N!57S6NNrP8aWucbp
z_hpjLX*3zC%2X@t>f6(MeyEbQziB__02_qmi$DcT*ucyylY}x9acpS5rHAZCkb4F|
zoqy!@yCr|)SKnT<FgQigG;egyHy%aVUN5YbTN%~&A9k%$CE6b<Om4L3I4bfStD+zS
z!*?zQ3?w-iRxz1^LeTS43A}Hi3bAi*4|q6oPW?onU4s8S*Eu9FC}S>}M;E%-4S3c5
zX~GqRKHH-?6+>@HAv>A52ypujYayKA^c=hTq;yO`8-?$XD9E}rYL5$N{^|_RsaX06
z8;1}vU}Zcv{ww-(BRzh28~h9!iY~8GzT=ZLvA_(+3CRm%EAS?`;rrETO>m?|V9Q4d
zd+x#fEN7jBPcMck%(dd>h5eW-Xor!R*iiK~u5P_PcY<8s0e$=K3x=lNm8Kwgt0oCM
zCP;<g^J?|*m!<KpYVo9E<A`$*qP!}66lbu-YyLhI56)-C+{Z1!=EBp&v<)s^{@}1j
z`;C~YTgmq)%&$m2(kmH;M#y+K&T1Y&PrVtjO7;?ZpZ`X~=M^T%_?@J>>`*5QgN=|B
zO#Y=^=aZ5f0VySDlbUK~H4uot7tj2>qF7=e`5$}wmg+Z?=|dnDxEK#&9*&$1Kk%g`
z2OWK->LYOER$EVF`MVm1$$Ai7Z_OqCC176!;mL~64soR3oWyE$ZKZI?4^=4W^7SMh
zb6qnEKsVfw%1H$vK0CE-8!yql&lVgqPhbDa$zmz`E9v<rF;e=atp~uSyOEoM@d>15
zs<dcJ%)PZkDr^u11wOSE8-PErCuio%3Vl1jjoQ0yM->Mq)hPLJz_u@Rk)cK@^}EPV
z7%rltZ1XhWQEcO78D)FUe4C&iV#ixfF0G$`q^@W{jvh51$+M@&1PF>xF~Q<zqT4!Q
z_U|-ygUp<Xey*aK#szSL`5eI)mk?`s=%y^eQw!vHXsvN-8{kYsl{-p9i~;1!SH7uK
zZfoqc3gdeQU%>)MO}tMF#=NdL;s%dCADQHhVE&{DElxGT<qg3V`-2WLxyL^l3{5hB
z3RZx=4-y;g$dT61MS1}+cq?VFA&T108}t3>F^%kKej-}>(YWyU*_NIVnhMmJwwluO
zLlIWjA|Bh1?Vq{yYCA9xDd<3@sd`s4Q>Lbh4|NP*n}<Vmn=OLay8W;W^rpK=v1Ogx
zgt~NvHrPJwK1tB;=@j!n7KPe=OWZEv@y9~o7YdXNK#;Q?xqmdIGm$T8oOvwD(oR3E
z9~WUUQmkkFxpfYT2v+da&|+!jOQ$u##%gK@0Q8T@+iT+R&4H*un*`8%ZgBbs70v9R
zJUlD7NqZ5J`LoSIQUMJSG)yQrGJ{i3HKwS#hcaXxtFX*{9}kRiytH$H2Y%5xYRucR
z_1$*(<xxo#0J>jHMRn%K{(0Jm5mEk(hdlrf?g&<ieO4K4*)f=etdh4X0v<61TlV;v
zdK1G1oXxEWK|=LpscH}ou*VNn@brGmCMPMd-`8J^Z%U4=pc_*^Y&O=myI{P-G`@0j
zL3zYO4nYH$U}&>~w5aNEXKt0Ny{-k4WOg7L#q!;#=>e>k64yGOVMD_II*;67fF4bt
z_uDA?ik{9_@)8X`FQj~9M@jDEq8xw$kN1`Pe!;)D9S;qan+b_XKNtS4V5d)K=0kkf
z%NMx+?HL<)>O&tY{G%u;{G%US)YHgwA=HyJuA&8pZx)B;N2pi<Kc>N;dJF~E@6(r>
z&3pnc4GVt881g#J^r2UlQbsZ1mM4;YrfcU5a}IldvVM>Gx9TJwN!&D+mX<>G6UVtm
z)oS!CH|y-z<fKQoY0g>Zc4i_v(6txcy{L4|Cd6{sQBju{km3$Fe0f1xauV0%MGs==
z9bm-@G5dN2n~~aySxyvA?9NI<;s&o!$e=@0RgNfNzfWnAJ6#ZO3U|$JNOoO#a~~fx
zmK2z7TrvqkN8}&S?R+JF7(O9<!(O4zRt^3!a6iF*xT$L%n6nuxhsHFWd<qjKX-dJt
zOwoYG0{Cc=(E1@hEa)?$Qp&;OVr)E<!(nl7Y$m{ueQdX~unYEW59`FT_{@wH_^j3N
zFLIJ4*9_PgJU)cIX|e;?UeV0Vqts@jl<quX1G*FR1mMF%3E<~=%Rdx2^`U;74nIy8
z&j*lIQjv>GMDXtCgNK|*uh<rz2`p+5{TYDQBZzH`?nM7B+b-HdXsPr#L#gl27<&0Q
z2sjn@fPHr=w$0xdtSCCRTASY$98jmsI5vAep#g2}US-q+of}3tXqH4X^kuP`zXe+s
zlMz`SeM<IK!cY>TZ3jT5itA|ag%*%I$aI03J9H2-r_6wlZR)3Fj$^2TZC$<b_hbcO
zLh(7abaY@>*T)L1pAJ98!BjHGadl*k(5E}1(=P1;^1Nw$9(#yyFX%<Luq%m7<1Z{j
zZz;gTjEg&UI9-@1c%Nk3VGakO1S)pe_&P)-SYcQQ;}cjE714@~5(VqTNDFVBl`b=3
z05P|j?6=D7{G5BEjRpQ6y50h+jp*MR#hu_D+#QMqFH+not}X5acXvu~E3U=eDK5c^
zmr`hv;1t)=A}{^l@2-2__tsm<nv9$?Gv~~l$@=ZtzrAt#ZPTIB2{jBMc4R#0<ah1?
z7IBX#)?z+uwq`SE=s`|7JD-Vx=w!ecK@iIti967Z*7vUl@WI;M(ny0sCK~ea*BZ3|
z-F=YT0moyLJslANAQ0s~_#_5-cU80;F1n~2MKdaz5Q26f*DY2M-V^CAPzs2{IZWHU
zaI{)4c!dNQ!ju6poggne{HThE1hI<K+0r9)-j<8^9gi$WyGZ;IhydGhAbl7>;&uCg
z1p27wo-z+$#z1xrd2chf^>%{z<GpO?(iTGSXcx)|(8-sHgzFFW&5}kBR%lx>`#wIK
zdb0BmP#4U_eZoAvRG3Yo22EKF*6U%aoP&~kF`BkLyK3@IwjCgM<5GZYoaYwxhp8%J
zAer8kff|a)r(eq3<G8q0g&~`4Eq6%fF8&&b-m$Sg7+?ZaGg7P!u&>Y7jEoEldxfz~
zE|Ha>kJ?%aio5iiiY9P4Y~7|)mTX<)vd7{O`N9b?$_XP~PPvZlqQ}c=WfSpBQj@#3
z*?!Jq{ZIEEkdIV6#`iwVOe#M`g@=_je9_wZD{cTKB}|m%n?3J-ZL{#XwvsaX0y&rP
zP<xmY>-1QOf$~d0_k5ptm$*ue@rOhTnVpEAZLKSx&3;cmSB_<{o=l0D__S4&m!;mB
zou~867=N-e5QC;OSaJMVd_P-bVSmutUnRLVd8XJV{&UHz|2xgk2Zo{k>uk2Eghi2B
zx6$;KmDB3;1#8~N#7#qhZT&ba8wkJwYIuU~IUYN^z_T$M&b_8cq1~keWWbjqa`%Ia
zBIf!(!*ez+eqLSv$$KnoDeq2lo=avetV*{)gIj)LUrd)Yf3e&+9N6<jAnOOYuUZJ)
zerKDb7+8;Q<6vys9XuA5BkQKNPmFwbC3){j1GH?T6;P0-{n@-q*512KU|~Hc@DU#s
zDuV_k&j1B=;{iD0&JYx$BO<X#;6ok(0{<ti(sI{&5OmKmak69k&%$?fP`_=VWNcc?
zfmlIFrvWNdnn%}Nt7NNKHd(P)c1Y%5byRc`EC9z_Hjp3y@Jw!Gr7h62*&D^Hq@`CP
zJ5=KBo&##Z#5r5LcS$oXtC5A*`1gU=LWMpL4jBk1efwQnRSraVg3tr++B<tDAVFl5
z#*8k^O^3CWi`Bj*5}#OMT^%BzEUYvg7+#m5p*o8J+#;&{x2*><i8GJt<X1As`t~nI
z?A`HnwPDtMhT$#u?)0g~q%>F+d*9yv6-0qp#KZ&y6y{fA6>={SAzl497XUASSo!qI
zVA1nX)h;*$628NBGX6EW7Q6OrU6wJi3Ds>2j7-x;r|b9m`@y!<a8|MD!Mq%?$J__M
zr?J3rD;X}OI_G*UHXfDuD5ft%WBM`-F-%I0@slDd?dts9pV?XHoK$5G)nz=m>6xuC
z;!E4I3@r!^i1J`8x0{aeM7BCE89Cd1@a6>B8k!>Z^adIQsJs&WyXSsUf3rZ}y(b1x
z;iNsK^@ECz9Eqeeo^GNlJ+^QK+kOO6SfsP|$WTlt*|F+90yMu%2>mXqD+*TYiNbh}
z07SLkBxlDwiXztxN7ku*|3P9##u2lm)5M)Qtxg116HPo?{l@_d$V>Z^(sDpFH}!%0
zuWstf(4~t$<>1gRvf4Dd2mI`=`d1Y|WXh<qavNH`V}zr+dU|^1wav2M?;E^>xZK=m
zp%GoA$OPHSu(9#VE`%*Q1jB5pLGfoq2UMV?-38|0)Hx<UixMF(tCf=4@Yl3192c(g
zW1R&wP>7A!rY264$RI#EXiV=(V8kn<75P@PxM}w5eCgprO6@_D!ca-=FSmaA!R=q-
zf&uB&w?`hRK&vYP$^8|rO3yYN&Agve=H<`WBvbULpCrfwIUXbjo9Q`PVm9hs;$c}h
zfbY%p^;2k*e_h<^kN|#heObaJhoh-gyPPfZUo}m(5V|K?&?@)1DB7dEl6I@pCwW=t
z-ceuMNOyPn8mDjlF3qw*ckM@U|IzEv6Oz~W%qDFxxPTr>yjt(^IRG7`<{DI}R9zf_
zd`YV)_LT_V#~2t-Cckl6YvOeI?b5}a$v2$Q1^hV+gD0ejnG}7ph{SGBVZZ8+0|2PY
z_4j1LyJLU*u<^tlPRh(Vn!syG4l3(hwYB|dQ_y$XDK3NxN!_8tBe#vK=N9ZWqyUNv
zzkOh%9Tdhnh_Q}Degs-`o{NtuAu6^Ja;57?bfLqI1Fe_oo$Ii55Scd5r(s(*cCjf@
z<<8*IQ4+tP)@F^bnx0#HttWhCy(neBH&-3UpxRhm?{cK>EMj?EI&sxP`ZY{uwHW|0
z%^P8J!Az_};UBvfrWt|x+FU4o)C(@|yGKqu=E2U`hQ#ixPwI_4y<5NccQkdOI4sgL
zgt>C9u&Lo;bbbIS)Y)0Mn>P`;Pf4Yfs@B?`AriShyuF2f=vP*nS63;wJGo&;wCG7K
zb?ia{7G#O*Z{B8TR$s{3B7*ouOUHRi<=~|s)~-{G=r6h>Dp5=b16h6>LD;FogR(S8
z#l{^688k1CJKpi^`W5zCbMR<8w(Mufc3}-w7OTyt(G~F<V;`5W9w^q9zYScex@ie!
z$g(mXfs&d1O?NBDBz(LaR|ll3r=`2qHPWKHPjwO+`6Qyd6}F)2k5Jx`!v9v9((=2o
z`X7+1P#QE_6cfP5!m_OUL5(Cx-+uL>Ha8IGI)<Zrb@bfzJx_zY|E1f`u#_ub1*$4n
z;ogEDQRpW@1tBfft@)?FG=WbSDAR>39HkM+A5t*+7L!=UZ@wZ|VgyCKEHi+df4r=U
z-+vNJlL+%|CbISF=++6+TB9?fEk;%S*{x{A(G!Q1pvhnfdNcid3khuu-I0fh<Ku2n
z#^rPKU+e~sm&uSo6hTb?E+co%fg)Pl0NViaoU;ct-?@3*q!NxxO%8~3hJ_ok$#~*v
z;Q(}-CMX*}TgY0CI2+|$06$jQRNrY@zS%@~V_HlvuhD`w<Ka#7lT^Y8_Z`s{11p67
zQt{D5G6FWyCrT-RIr@<}du|jbu8hQ3%tvWYbTe%}J(}&aB6|YzeN9bT{*DCemxH;U
z-Z`HZm?4Q=mIpDq$N5;v{X<Z7mode8m*m%0ki+#*Uq{I%-o25_XJ}|?B(C22cGB{n
z-~dFmgWge<xDk<UaCI;V6HOSd0F9=20`gEOl%ah21yVn^hy&sXt*Sr$-TlT6D4+)y
z4JAgu5(Ph|ly!7;9Jxt9-FQyJC2m5C-Q>Y^aM9DT@c$Hnt4+gYvEfs=@^k|7Sopt1
zHUM0)^*`$qklE`&YaWL6E0lhCGulS$3&s9?#&DHcc%6O^$bawQd0_P2Bi_DCx!+^&
z*|=!$cOgm7KS@vVG(8`tKF>xeu+@V;8i$PiNFq);=%Lzo+7=w0X|1EB+^;-A6?-mv
zcujzK{5F8*=h+*^41KuKoiv{><5+1;!)eSzPdM`m#?d<(*?=Wf4_Dvca^QKsgdO2g
znW=98Zwwt`LA)B*kByrxW+Bq8po(z&6B1%xYi|yOg1~fSs-tVM!cm%YipInd@rKF7
zvhjYAv0tEc-I}L9tBNk2{sCX@m=3lGP@J{*TLvWp_vHzZ*>3?pY4yc3{I+MTYo4TE
z_{d+tbizZgoV3SFg%`b_tu%nD%ilke#1<|xiXpzqcb`Y5m&yv<!*8G8qCYOhfD7<S
z6Sy4AwEWWgF;vU3*wmdmQIISHJmHP)u2Hd5NGFP2(KyY9%`aF+eh%18Rmus_lTF}B
zS=spHz3V>8yY2r5Oy`@2#X8NjSztRRV{N_wQg#O$Ub_JI^kg-Fc+r`P*a@IQpiH0A
z#ex{VBFX)P;P(nV`n05uEr)+~sbe>&Rckzx${Lo@)L)tFv9E&uq}Y#-5Rxfor#FgL
zpb^q+7s+ZW(Vj*CLPQQx3*W+TM7Vp257Qgq71l5F?*I>Qjx;0S)oU|TU?Fb*zT_$6
zHa&)5BxrfL^NZ-XKmzRbnV<>59^#o+j~am@QR3_R-Q7f(eXt6d3~*i3U$?G+#v<N|
zdQG(W!D4*rUvXic@uHY2q8&oan6*hH&yn98N1R|U4|ZVhbVGb35Rx1TqI58%6Y3-V
znh6rCB0{6ay!i~h{?CzI2z+Qx)VzkRh)isyc>1h|Xj&gsfQguixP{9!=47$UZ)AWG
zNg94!#6B~Lk%!zv&wT3J|LF;!Ljc&GdC=3--*O&X2>;V{CSn3LOJhs-@hENV_H+wx
zxd!UT2en(r^z-U7U$^UnwmV50{wA!YPS&$!DXAoQZ~k9u>~LZC{|t_Q14!oIxPgy=
z{}yfkpTdJhO~w#)X8D)Lkr9zTq0Enwlxp7a(HPvOuF=1cky0V`)K23(_053RUge8x
zJHbmXyrKQIpSKsWnP(Z&tsWS$%91)4@bm*MkSibi$YL9ycSloVFGPsCJ5=);S&u0z
zxj~DaUw+J<mc1j?eFh}T@gn6mj#8PBj%ohUS(79hb5TojvvjVziOxU1Gi@q6_qpNu
z^20q=#m&*}d~D5NhkNy&H`LIZYQNruNHHN%?g!Ur?H!Nq-zlWLbP0PqNnpe8nAfCn
zZ<DL9m_>OrpK}ag_J0nzpH7ac#x34+rM`2PziwYru1=jxt|q-+sgGx@kK6Iyj^Uzp
zhVA$tTadAV58;AWu@9v3uin)ZgZeFi!Se21RwW&c30ATS;2#a3jE`7NcW=NLJ-=&?
z)9c5Vqd&md8bEE>-$*&yI+-94zhaeD5*0dtWtvRv$kNlJy;OfG*V$&86fu;heQ!*=
zd$0WxGM9wBXdUW}noL*Qr}>d@okSNXD^Fa+9n#T|Mg%330sl|}>hSedpu`kYZ9Lr^
z(E3U2@><DnnyKD1E#W&w-cZBv^&=NX^JDMvTvez%MZ#`mN>~zN9+N^Phtle4DxX0K
zawa%nCC|D-9D!$n?^tiM)43*RE^v`OWAZ^8euX^NW8fdyR;uFSgCe9NrxkK^A8JT2
zZuDQU1<Wr;7br=_T2ZS!<vqV^@2C#giX$pvwh&@o+J1;@HKU4`|1*WgNN`}|(>B!7
zOvA!M2)UTj@MY5REaBp;H^5JT%lneX3T5ROAdQ3^X5>{%b*4LSggb2YEOdS*VVWs?
z2?1l=$@g$>2v9}rn%Ss6VEeRbu}4053?;3)ay}Ftq<6$Bm6F5g68Vs1&4GFco(dix
zqrm#Z6eb$LUhf^M76yn);!9tXI9$uD_}O+FhT$lF_Nh$Pvx{u~X9635(ex%+na{!&
zAFV|%+wP*=TbN49i6-)h^BsAm%6@9`<c`|>5KLbxZS`G*GTx+6*BXBTR-#py3!fq)
zSc&6n#b?w^tOR=5Xn%73iC4~A#~Ao&dO@c0^)n+X@<%Z+Lo4kNQ6bxznmW*LZQijV
zyjq}A%EKiy^|g6OfBDCk3O%@+(hG-2cgEj_nvy6Lo(K@m#g{8sQ>(Ue+Q}p56kK<)
zP;I2j#T1Af#7FW<&YKRR(j~}X&OrTTkVauGj-t^ImJ_QQWae-0A?h`@(wdK+r6^5`
z&c8b|NLH|G1%4Z*VVkMxkC`Z@_9+6E@?{^5^idwTxNp_!Z$78Wl&W<S)ND#L)ijTV
z2}rA-C$<PaW0v#O@r}u~s0oN6L1m|MWq|yyOXHGF_-d9=CPkifdU9E-W0;#*@ONv?
z`S#P711V(}Tdr~mty8RKwW@4jtk0zF#7cn#^WTDn`K}Iz49gPNqhvDZ%`G8RxGb4Q
zGGNBGp%Z+l{I$y_JdsiDL3aSzF}4PacB|hmRd8Mj1l%Y#+~+O?k#1qdrVf6y6ozI`
zr{R0#shMph8)Z%pCNh9WGLChCNXw>K_22cA$c(^UIFfw#6gW0h*GA^^RY;MK5sfh<
zq)_&CrsTAh<T3tC^6y2;bIS62MYng|Mh5F49%r(e_EF1ot{4*gY~SB4E`zAtm64sP
zU4Jhangf_>Oj#DUdU+Gd#DjC`#Rz$c!5A;<e)l4T7YlnK`|EfD<cRg0-F6sue<%x^
zQnB}b&Q&CO*>B2Iem5bsQ!eT;8e#cUX&1}MBPKvr``{IluC>wNJ~QxW4xW*VS0ji;
zfW-+|<a=I}fF_O>?%3k2qC41kme(6bOG?fVXNhe;m&RLR@!Vprvj3ri+Zbjjbf9jT
z<xBY>cj(HiasB)VilNH@IzdE<nb}YyOw~Sb;ZiKW6@(B_<EVVj6d8@z_fom0+RvU*
zHNSSRsoV!2OB95HSI%7V5pk^)h%{F2U;A2N<M#fwI&WV=v#ImInPxqC3mH@y@ppeq
zihenW6vCJoIDQSTXMp5yRUy7-UZ3BPB0mze6d)mkp1qaC{B(akb~)(!j<)@&JSpHc
zLOLgl=r|&bj{YK^FU#HzmSP3WygUFps2o^NC{`=dIg;I)u|wozKi4JSs=%tsF7Qq9
zNBLFzxa<jb;;d-$+wSN@#_1t)n)0MjLFdZFc{ihv^X4DGGtRnvv2XHKLP|j&h(ney
z*`x1w@J9(MPJZaLr%Qk_Lcl1am&Vq?Y@MJ$9>A@p$xMmu<6(~|7_|M-j#Z5~3%Mx@
zGEQ|Q5^NXA*`JOCz8OM-{ZOn+l))OK&mU^q2WYn%)&laXt3X|%u~-e055wf>2495%
z@z|Th;@jP7?iulAsWByGNK%stkx}o_S`<A?GlzqEV!Q0)dUb%8tQ25BCNS3`QI;Sg
zxURzD?EGBOUMN@X{Oum9qUY$);@#i23UxLdh-1f+{-TVc6u9aYwOhEHo0U~MU0hkZ
z)DqEbE{H)dy#olwuh&HZO8~>Vs-{F$X2*u2V=SR(`ZG5_b3o2o%Cm|V{Xw}=HnN&t
zO*u=X%1{m%en&+^40Xq!#JI@i!H;>%5h1dxDq~{=mCcqH?9tdar6Aiv7P>S9n0tZw
zL=7Lf4cZxPJ)FV`iMeU=;YrO)b--JMdT9rGf7p3TQR6&bp9YF4=Q~A<W0bX_oTMg0
z5h4AW9TzG3ruVDtj`&Yhqs%XmQLE}54;L^~M-g*Xq-5-apycz6C@QTkuGh?WnP4Q~
ziBbb-f{+MZgbR(##Kg&SR7Q-|gp6#ACx6S|3bwlEdBo_ueW%uC3e+L~ssgm6Q0E6X
z(a*7?mq2I-M)Wy&AQ-rak;?(vz#r@`wO=V^fT<|iynq&!+POmPZrD8ZTk_$Uf9x^c
z>4Twrn*jilMv#I=q=*nv?(96TNV<rdhvNe(*nWetY0d)xbv*YO{?Jc>)YHt}ju(+a
z_i5&BGxomio+fo@wu0Wg$Xa_NnFs%Dc=dCogIUiPlf;DUtyhL=Qj39}$<U(Y`RYuM
z`Y&(`0qgB%K1j+G9}4;uzD}B%pGMTh0JD$SD}PY*57K1=RP*YPWXDP>5r8qQbY$PG
z#^g$C_T+$W7N08HkX@hX0K7k=+YS!PmF+3!;*d)z(wK8V=33PwuAjoYA62d5gVcbr
zN4nT~cA8KxI!K5|MhqUf1bcKrQ+IxAn~&9RbBIFW6KK6V_G+~G1u3SLCQedq@v|Hs
zFjz$&m7NHj6VgQocqWMFbRdFBNd^LWh|#eVXSs)+ja9+mrb8$l)w3ld37H~l=H^GO
zKLid1c`IE<RT7>)bdoJ6c}QS;lTS!Vh{v!AqkwuN(pX{AY_1{rFynMJ{H9r9wmU}_
zcDmR+I2^=))|VxA955}Ji={p|Se<MS-3i~1UKN9i8Y^tz>PYi1M0M6wfjAZ;Rco8O
zuug7=r=Glz49nF<hg81!F2DNKBqdYlE<P@mZn*pw6G92UJ%laEktSED={14p8Ftd?
zPOrt9Qxg*8{M7ckS>37&1jk`$!CDFFvLALtE1JJ?G1%v5E>+VI1r?2nc$wj&$G`n<
z$*NOGxCnpPqHEww&7V1C<YWKTq)Q>N%pMq5?p0cns94v=;z!m)c;>@wKg1JbQ~$j^
ziU~D*EzAjEjI&B=kqJKnX)J95Rlu1!sAHGy@p9DD%6To6I0ONUO@_2*K25`b6lCm=
zVhZNJT43`KW!scjcNE~Zp(`(IgJVxkrBL%BVGf(Lyg@?4@5ggfH8Zik2jLzIn?fXi
zMW{KSiAM!I`jlPw|K{d!)FSTLItpkyiE0%#^y{;~6Ef8&tEti3Z*DVzoANjjDH45n
zOPCw4R)_Y%jiFj37d%ZR9Dbz4!SvKEzzHCH@7tDQ3O<=;q;WVj<F1z)6z<t}xINy(
zemC)w>~O2(A6FKe^tMIr?aE|W&yWrC8NZKGi+{FA<^jwy-NbJW6^!p6l1O}&wcmQd
z;#`(TqPRrt-Bt!lnPY&A$H&K~pR7nZ_t{YEcf!+H>b2RoV8=gJI=IsjpAA_zcVhHJ
zKYar@p|_~7YV4mp3QG$w;3kd`n(Jpvh_Aro=KdQu(QmKKV;q~~d9EBE?&eZII-fSs
z-}<Xia=AMD6DvBnGtO`4K$VgFbDVBEpEC5$>bM1oiVoJBJ}9nU?J+^bQ&&m`X&nnh
zDNhVVe(Zz4>awqbBe>tXQ+#rCYp1GQ_shK&63(j@yR9FvP6U(7nb|NyCM@MblMNfi
zO)bdpHjd9PD9STtIE1wjBkBW7_eqtxE$n}5Sk>%zfJKT$rd|W<)COXb%De9t7-a&R
zbSr8xR$cw8bV9{Cp6H`bBkA@S0C!(l7*yjtA}HSjsl@Lq$e}0okb2Q1<H$=~6n0wh
zpeeJPfiUO~-|t}*7&!#z-Kj_fU3P+1#tvFK1^6(ShiJM+@GrVHJc2UifQ0wQgvTa;
z1Q9=}D?@2u*|~HW9@U@#B%h)*J?#e{fFU*XX2XsRK@Pt>KcY-dV^6g!>YKFCn)6rN
z0$)izvX!0QXu1g-SW_Ib$9`cTbAtF_OvB=R(2sC_c$mi1xPu><n2~?~bz2KnCPj6u
zS?J~>F=sc1PKhGkYJ=ln2**C>aQpug%>5r9F7${X?VOhwQ!0Ufwp=Iw6YRlFy_g~U
zA3%VA;a~<E1f2rB`d_nv+q9D;8(et#6vDBR7G-V7yH>2Ra5|-Gm{zVvPm<mu<$rAh
z1OELw#W9)$1e|a5#lAe=t%pkdX*jkBb+cdDhBxlNyukhweMVhwT7=*KmV$?%<z5>v
z9N}&#aI8jUpX?uIGqD%)>PT|aQBwokUwj6Ft}dF#qqt{rQP<ACP5JUwBER+B-Dh36
z6S?Vgp|50v7UtaiXXfj}7V6^+>MR-H%fr+CW=3yxjJ;Rca+zym)#x=9J1^LsvVH#;
z+dll@;riFU)QjiynTdo@z8fZZBe>s2!j&^f{`&IrDVh44`!AsyZIDIw=Ta9Z7Hiw$
zSa)_GK3-Dn(PptGW8GoKKk~V*{!42`10#hka&vz-A7Np?-S$ZC5;Q&?E@b(v3Lvxk
zg)rJM1GWS2UXE+wI=IpoE48EaY9|M-g@&HOkB<S{jB9@V54K|^M5pexWN}T4dZxhH
zg|q-cb8&ovH+z02WvI|epF@H-p?z$CcnWY`f;og~%m^NRqbA5r6i3%+XDZYS9Gz3z
zI%=v6?6z%A?{^Oa(WNVqA0cgymyOO}UxDkstA8=`5jr}%dXbsn?1j_fPcx|yHHA*R
zozJ5<MJQWF#z<YZtADcne%fCyj>)MsU~oUE#h>eJ81h~xGg2NVsXuO~jWNqjtULER
zl_yoaKh7$D?U~0q*(0dXSX1h&902xBFSIS_#99%%mw2%{cMe<|Zvlnu83Kv!>1-w#
z-cnL_s4pofC{1(KObKe!D8&h&v9g4J(J~fNE@4+LK}i!nZhP%ytgSU|M}CU_U6YUZ
z{?xI5qR@$z=_o^cQ+;}ww<*4{s3ADy{zV$9a)v?L&rnTahYhqcTE;?d7)}lBbtY!u
zcApWUG~o`D;5sak&5&e6QLsx?%QvwoYDF0{Z8g7dM!&tKak|1^NP9aLQOGr)CYZ_5
z75E3^@)ULEWd$vkJn?cL<kWb!b9Sa49zq|~@;a>|R8+{O^{Hy%B0s_^qL}I7Tc?OP
z&4rEQ@^D_DIH@<!z_xsT-07cw)RE33&5*sIAI+h)0l_2Szb7m*gVSG+$+=x5(W)BU
z-6g_*bA(N)&%m5W!=Z8-VeTYbX+_PwO>+{O_Ig6>o1Z9V?&S1PyPDf4Ua-3vf;tX~
zcY>aGIr4%~IuWu?Mk=&KQiffJK3HLRzJa}=(3A91s+}pWwhT&((2_w_WpROFYS+?H
z&|1Wx1$mF5LGvT3T$0Fj$6j$Wak(q?ik<qeC|H}ynVHz3&Xh@UebfGyny!X@Oh5C3
z-~KwWfX3a)K9Q|4CdMa8h(u8PT;GTv2b*!=>0sbf!iYxbRzsiGYsdUOa{tKdlS&2F
zMjE4{GH(SSP}X!{co&pK;yGNI$5%^5nRV!aPV8u)bEi~W;jo@^U?Lcl_iXC^xI540
z_YDZRtRroB6F2GfdTKKm!KwNP{#4bsb3#C0x>QYZj<ga=4M6>f3n1BWv)*pD+eY^j
z1UDB!2q2=kgA=nHK-_-hsvBiokdmO(U}@f<wmS6lO7w|ki3Qgdp~>J!%^-V)iI8QU
z)=J8ZICl2z&l*Q)^abn0eKw9H^Bn3Cissh6e=-E{p{}*ETZb(i+QHC0uEW#EM8Xb+
z&MUm}yC%M)wQcwLDMe>&_8Aemb1^f%@V$=yE&Z{~l}(iq(VcyVNRi*aSa_j6k#c^0
z#8XL~6IME<tS(U~Eqr81Dz0I;2ZsR)mlaE*at1P6hedl18EjH^vv0>@*28)j<9yvC
zCmn7}e;bcTvY@uxId@f}&MtUL!h&6X`ZwOE8+Z?`lZFmg8vOYc^%u8MvK`rTo>O@t
z?srAl$hMz~Oz;Ifi_kclvlL5O=>*?0aomv#*s9hb8{Z84k!`$X&zBW01lNHo#?UD)
z*r9V@uD6Ra{VEyP?g6}iU2%x8%IKb9teD4TSC@vu4sc!+`sC8gtHRFlqg;*W!v{>C
z2m(&i>{VjGe7k0}^+Mf(E_1bABqI^AymkXKT%<^mFcWw$mMIv{IEELNL5bPuC1x<@
zy@Cpmej{R~ZhA%vyn=4AeYBtH3=~Q)zFXh-C5*{IPkhV(hwY`eZH@B5*+vbD-13s=
z@wnP)w`Rv!Jbp2lz>z3|SD>yS2!k~efNLqJMl|pf=m)E3@9VVFeU6~T@&~dWrvT@W
zcPA2F)4<jA`9A|VJN-MyHa@#A41@fz9EL~&&qps7&@l0?35DTpGb+L>01XxJ?VV|q
zS%^hZ$B@j~Pdr~2cfpCs$DGeAi0F-_U6jZ7$zh|3xDe!LJ3`BtL2dh@<W~y?z)UB3
zVo}2BPu@v`B`MB!YdF;*{k<$knS?B=6*`nZrCi-|G9;*g3US8!a*n(pHg<t1(hf?o
z)4agMlwn-svo>@eEs~z0=2-m*S;>mY9GUU`?BqduA>MDd1$R8eV1ox*8W)|5^LJxn
zdl=K14kb}NZ<h_`Yj8Dd0=T{ZSQGogD3VSz5dB}-{a9tx@IV)e${ZjEU0pnV-|`!V
zw$6GL)$Uv)Kz_cHil=suL(bUK(I3EYzYzzricg11|IIcVH!#`7Zed0sM7$OTl>&j$
zH10rfP21phP{U8=>y}U~K*KKrfVtYHI4YDwOLoyFvh1leZtnLwbPNAFr-&lSWUFfd
z4L!NMvVZg{r(iq%ulVkJnVNiDfG+n%)^y)i@%7ca{Lqv)&By@w*SFg#>|m>_%mg_3
zbv<svayZ2ErVJQc2P^N}l?i>tLUk@oO!jLedxd?j)pX4`CpEE0`&Ip?&|N0|@h-Em
zr%x0$(#e!Spy>=A0f;5VP6IhdqH_yFp3yTaEags7q)UU<T`3mBX#pDu{7axIp3G|w
zDU=|};S9jk(LQeeQju;)nEsS#DUTe^20hPX!z2OIiS_UXM{ki!CY>dw9)iLnA2wAM
z@V-`AJR<cck37@YyS|S4{NG%F5`k}j5ku5JEzu$%nPllzhXO$5Frj$P46g7Us4yu1
z>#-9{f9H_QdZUc2^$0?+*%n6Bp#aNIFW*6a2h3YTI6r}_l}}OM=9{e2K>8#aZA<iz
z?^_tLsJ*g(`9Vx$H8U(8C+S;$5PDxcQ0a;)wQFDStQ8AQi}@J6t4Wz1O=HI@p-N3i
zmY$ARTCC|FA8U1%b(%Ed4xv$I_c}+K6cN(r@p5!yhxZ!})_M(e+3&8)_4n)L++ef*
zs8DiTk&A1-g-24_dKePA;)`VeXT`0YithK*(*AjP4lg~D`g@$g4SYou>1WWO=acaE
zC8i`}q`9q;rOQS#piaRt4y`#psIX3*#$ek|`wwCNgyM7O$UXWgCqmG&1U=6O1c{GR
zH1JNzhkh;o#Xb0Hy;64CR~S^z;kT;ls>g%CBs_)!{G9(c*EN6)WEf*Vn00ds0HI)!
z`;_}e%FVFT9L<+k%CYdajeEXQy?muu2Onena2nSP`7)ghW{Ok+!miGzP;@}R=KEQx
z{ZE72OU=K6JMfu3e%Rw^4->ARn=j8Jy~YC#qbWzC+qb!ak>j!Ds?z(qr*!Mz*GZ@?
zmyN))`}Oo3C~LT8IZ!g$N6_?0tGA@oT}Jc4Z2oG;=rY{8t8Z^EJy8L1^UH8mpB(~I
z%^%T$8XdC9N|ajwbhzw--pDlypi9Fv&M5B`IYSqrVqK<YKH6-(JpNkG{)ScgFa}+G
zD-Nj+-%ZDY7ld`u?|+MGxMdm9%z<GsBofwb9!`>gSQFWVJL`AaS~tZbL%22KLRu`|
zx7fmQUlM@x`88u7E81;uL=ab%xiws)E^Eekqi(`Xzv8`)Bf~dbfG~M!w%|8*D82cD
z=cVB6g>`u$CRM!$*Pi|j6EE~C$jZ++f59noRt$|O;p|BgWJ-av!guzE2~>&Sd$Zc6
z{ryv?uq+A5I&Y`+Yi#;HQHc7NDpYmvroNvhZ`pQwA|4OT-*DRSsTyQ|jf`*McMg{W
zK1su2#`N(H^b3;wF0{j|C>31o>N7)B%oubHmU8(xy3!`@GNp>FM6hFfsXlx0S4){+
z-1<9b=&MEVLLpDf-=0>Xg`b`XW<znSRuiEoODykSq-ouA*5BK#xUB@saI5Psiwh3^
zAo-cI^~wK4n}_V#^P9itNyATZp{d8=Q$oc|P-j$l+sp`d<r0j6p&~K+7wAg<B}Jq5
z)0n@n?YEL@W9U1vAN0di=06)&z@~8{L)fd-R0GRJAdN+YW!pFP7lnrn2|Ja`;0p=g
zktMft!AzA*eMLofO_b@ax<!4CxN_5oAn#(7NPZTTv?k*zs!<(GM-4M~;>qk{j@_?+
zCM+Y!6u&sN+N?V0_VROgbKk3O0qb80R?*MCcDE)t4)l6he4}~R4}<*?#wd;N<c*V>
z2qi!3;{+;D3XSUQHgI3j)AgBwbwe|<(S@hB!^GIixtmG(9_BpI6{;_)3?hiRN2f9S
zF3q<93j=Z7DhH|hyNa$#j@7T1y7~=wbsTpknG!w&cU9po87l1~7RKdB#HwPM?ZZX}
zuexH&8zGRV>&AiSx{yF$af^@z1JA-D^om95T|*<?M^k_?Z4?H>G>goSRFdjEFVIRx
zd@JWUn-e690WWQc(5=PaKh8JP{n^KRCoF>+#kL#t%1bPJy5M!C?0`0oY~<#J4fwUN
zYe7ft<q}pw%y_v~2?yYE@SuZt3C|)98Ee%|a!kMEc{Ftz`66zv7B^_+4<Yo6yx*--
z@YnN{qW4~PmK{}ny2%qR<sA?!NPofZ2f3f*UtCW^c>sR#d$lmS^U$5I6wNiD;_~#u
z*_F7+PmN%60Sk#>Y^dmQXH}XW)e}uAs9#QnvZ=SCslfXMcn!v&`J2*adq8dC+6~e;
z>IyIOf1SOfVD^Ut{94`PKqA<PAa-8EO1S>O6j<Ph9!B9^oKea9e(%j;010#jClqa8
z3%D6B{-AyL+w3I?Yw5g3MCvI{^`5hgi@3jFql*bbvUWyf5}GG!Sn;=3%L)xfUVg0(
z!&iS<3^W3&_^ee>l$=TsN&hG*DB~Q>+=s<2=Gx){dx_(}go8+zOnkj*{&a+l@xMaP
zG%>UD29_<y!G4E!`Ey?ng#NiXk`8?ol)hJtlQY$EQhuqA{EQxq89K6yzef9)`FG1@
z3rI|}_(9%<+bFDHu2@J|{cGtIoihzZh#pif90a)ky7T^)6>{_~-?b$#7d!fnwHC&<
z6ssEmkM)*x+cauy+l(KUQJr$VV(t_BJU`C%px4a@QRj8~V4SISJUVamOhQdG^%FR_
zHCw(rNa-&9v}nyeSo`+fnaxuD@*P$#*IUM9oBbVTPMiXd0^3%Tte!;D)^?<~d3ha+
zxw7+)OeUI^ihKg!;jm81^kKo*nM@g9Da+WvJx(I&!`c0Ug-e5`yGM+qfJ(oOl+vXY
z|9p(uHHjGW$TuV?GD^Wbi1D!3aFWJ9JOLiN|6i|^|Dh89*ckt&|2zDLzpF=Hknq#@
z@25TFdj$s?JS6pPzK=?q?CF2_XFP7I3sf_k!^%2T0K<2&y9UeAF=(iclUom1on$R)
zqCPa+*SnP=RomC68YhAunkRlFAN!~V##d>Hn#-Ky$4ZFXBq@xbdmHC}Ct`9q8Yc_)
zRj&teDRQw^!RB|Z2U;g=-x!{xy~+PoN3f4&-Q3R-*hXdb57!WaU0^42l_u<v?C1uH
z@7m(WM)O7@PD{oNJBn6f|EEYhjLzk%Dk*WKo@de@Vfurjb>SEWBt=*_PmKkcD~3NB
z-j%AbFy;Xg9tgp>lZ<o=Vf;zE-sr;U=VZ|layX8R(#-`RY#Traf3{M;2#x9+z>f`Q
zKVIT_uT}zYt^l~}#0MYBdnG1VhVwm%3`Vz8NGcl;W58bt@2aa@kWyMWC<=)RLn4b=
zhY_-a>L!zV>ieIK9<#0$L-IE@)PqPLs(%jEz_t>5a!)?sZo#v`;NTBclJ?7<tgZ2f
ze>ltkx>o<7p8t?%;M4zet;&X5t*^$$vgo_HgM0=XB+S?6rG%F5s6!fRe-(YuSmpaR
zZfF426S=rI--!q(vj}Q0HT9OAi*i%+{4y{0l=s_|@s=GhwBmk$%tTq1Azb9<J)b^@
z=R2SNoX8z4p2^d}kZ{h4sh~~s*yygl`XXZ|Lw{KP$OwPxIwYzX08OkVzjc+07z93m
z&UZoY$@-}g;!pjJE<RFcsc}K(gmkiD_=Um<289<WqYHkSpwZE?HFeK^TdSP@=c(z!
z#RghV0J3K&E%;_-pJtT5fgtI6J$CcpKGTqVEc}NfIIc#7vd|o?FlX8uyT)1ZaoF<5
z=vXQn`Aj4;wZEWg*c<);ESq{mHZR(`%m+e>a3o^Aw)Jf!VyX^JhaStAf?3SY81jV3
z#0#6`JRMD>o9iHO6NZ~xpN_ql813_KiLF&Qmq07Nw$b$yZ)jsQ6?=6&XXA2)bNZC6
zOIo(Pal#&EdwR=i1(T2-SVFbw?ImMe+2*#^!3Jxv&Y%bV=dWQSdIXBCj7{1Pxk;F<
zAJY%PY{^?iUrH|x9hkuwjW1fE7Klrt%#EG)^!p?<JF(&NtS>i0?V?Oe-=jyYgr!b~
zO}f8o6R5~lGMspmZu1OBr3vc0W+?%S;^n$FF%(6VAv@PwLdrG+0jPG`qKhPWep0R#
zT<w+&uU+Fn&ba8IyqZ2jru=0)7zN)erhj0FJE&wUc7a;Fz(tFuG*=8JwDHOP&I{UN
z?P^Es81xQ3a>fEpPX31Z;do+o71N?Bfkj1E_520Np=!rbzK;S+n)wueViu35eG4W7
zanKAj<ws^_b?}>#@ToG%=!~Mvc4$wW@mZRL{EafY%iL8C*sfa$FbZ6-SUQ6xv<RS_
z<Yas8ZEs>fYa0dEDoPEGWzB|E46kn3=OkLa$+Fpxk?;AENFFK1;5?GcWzVF@#WF1g
zGm0WNR2gcA7Vz+%c&6VXPI!-!=d;JlUjQb3{O2r80-7hwWQAT3OG2P4gE4$Wg<u3E
zZrbWx>bvmz_!^KGf7ULMlR{aYR;Iu5hKZ%FWidKChIdNl5S=K7%#COz(yndXj)Pnr
zD=g;ICRc|O>rvB&$~z>M5zH@;PZ}IB!@HnjFV~YxDKjx5sE7SyR1619X~BO|T@y}X
z|KstqE;{h@rG43r1?D}_ObC@-o&A0IY_#pcQ5)%Kv&2q3Jn`IUhHjKDSG{Sul5X-m
zzA0mkxgk1VX_#xZ)_25G1#Ic17`ICQT~w~n7S@T5nwD}MlSSauT{Uc;@@1KPmveQn
zl6<pPL;BlT)|wY48q9vf^B$9r>I`mExS8G2A_yr`p1u3A8xUpKsYJc5BJQ1O?J@Kw
zYT5MtPT#}AveSDVk<~Wmnp5lL+{NEkiak^&AKRCWvP-I!%;kgAUnk;ByuxonQAy-I
zQ2(n!O8SVrueo~gBd=Vn*G%l^8Au?opLaLFGqk|HNVAakK#I&;JNb<}nnsE4$5+X&
zPBI9wKhRz;49T!kcQCCs64day-`MAB#A4H6Kt0N7i*UxAy=fb^&qE$UgtCdcKSZ^m
zWp7xW5BHyoMQwzwB&^xbv+&G|;{e~MNy_smu%Ji~@tGsJOYF9kFv1<aLLNx_$-;<C
zkiQfBI8+ugSW*i9T#x&$Bx1z5A3-7br*jA+h_Z451CY9jdB{LNq9wpTSn~e$7?T41
zRiG)VB0eKtw{_SK8s@tnPDCGo=wXphH70BHS6wO*Ux83sOlt}<%m=K&?M7o+-w9mR
z_pz9Rh?quBNIhRa8oCqWtZMOLzrmpY6*UJrOe$3<PDD<0&u@u4byjpbqyvrfwSsYc
zu<gddU&t%6pID<1fS6boB!xJJR7OQE&e4}z`h<?Hh@cx-JODyGD*Im8sXh{U`Xquo
zUXZIfNMYco_TT<}Ar&VI`h`<PS?d{BS(@b4szBmzhpe(71aWM3Tx3w?5t8X!Wa=;>
zmYu665-H&dg$1K24?$l<;OU>Tec#;k;f%?vl|Iv0EJ*SUGQMTi%g{~^(=M#I=<$J^
zk_E+hQi^X7@%e=r$w({uQKl*ax%BtaZUQ2Nj$Y)wYF`xqkcHYLruUcGQi%i@`VM%^
zVof}#UF+Vlrsy=efbl_AExCDjEJCC%T1<O>b}_94F{6aLCmuqV$uVTfr`Bu2?xe#0
z8!uvH^25iq6p>%iUu4^UV)Q?roD)hqwdfjB<4gdwE6!%(;<yC0C0~&LyrBlxaiRz=
zN*bdp*18V+aba(DeR-W;Z%{lIXrWMD`^Ww_q4$S*aKJB0kkCPOQNag@G2ttdiN$@=
zkHQ=8(KOTpddlu39-1u_;Q}<j05)TL<_OR?!Gop3*3RxmPCIvl-Z@)MxnCq34xzTt
zJYoBO4V;Gs40`t|Ff#Cf0+fb6h<F)ff(z`JDUw3gw1p>iuJjqRd<)I%hubcABXtfW
zr7(qA6{EFGq(149paJR@FMimYqAPwvgj5xN%b$Z3D<2nFiU~L7weUSO{wrZ1zv(z!
z#Sy!6a*iYE6t5NR-9}}^8)zjs|4n(x+Z|_Rh<`lG_GnTJ)F2~nmLkia#oKzs_#Ii-
zAgk^8@q<FZ@To%lWJmy7(tKA)%R5yr8&lk{$e#8@1=3}b(sTvXgYruDB}orL>gvdy
zHYrQzM(w1|_HD6Uk2<-=n$P~@E8MaTh2p*dkAk1nQAPnbE`#CXy(nI>DQsaovbaFl
zGVzU{m;pM}%@UKEdG}7r-D{F(MyxZ(JaR-fm*`b5E$}IYHmuMCzlOX&mX7YyM7nm4
z=~)tFYklWr?&Mb+g>p9w2q68$X2L8BNss30bQr)dah}%rh3G!IdPjd;1qTOY^-(dm
z$;B`L;EV^_Ez>pwXu8&xI=$pFx<e{&m6Q?@p(N)1ri|sHEEy!4!7hb{X~^&cJ8xMk
z8fgtvNi~i58YrwRb>r(uKEErPsdOr)<%(46_q%-xbu4-SNQ_t(B0_NWO;e%qGcJg$
z$lQR-7xTh0CTQg@6%jy$9P5eY&X1RwMT+yC@W71i)66+Cx`xvQLm|ZZN(kgUQ|P*O
zA1Q|uHGWx)vt|EBKisLPAj(?BC-u8I36SOZJ01l6EkO$VnMed8Yk?&%AkyM;nmB?Y
z(WHHY@(&hV<M-Nfck3#Mi_=dUWSD73P)CY4xvB&~W4t%id|5aTms4tz^1E(!t`89)
zS_sf?Bn=;qW1DX3*z}}qAZ)1hX5(q9nNt5~uOP`!ev8p(6DD_N`-~sd?fMX&3iOtj
z-6BFelKj{1MD~LfPI=#C6MBM(0K-+;O^&y@kqp=wj)B^nu~B|CB~z%cZs{M02jBHz
z*%+#laUP~r|Fx$DrMSGJ@_jS>R{{Wp_yt!FhPW3ih<|>+j9r3t_DQbQRV-;iy2V%m
zi1~IX{H=Q53nh@RWQoYDwda#m75_(?M7EiyqO$Gp@;>C=s8yv3yZ%hS?ZtAi@+G&x
zOl|I_R_9nBW2%(lz9e`_f2$WCB;AY4Tvy*_i90e$X`Tu%7c8c_>!h0{ke<oQUWkYC
z*}g31K*2~Vpsbt|%EWSTd!U=Mk521IcAy~I8^b<epg?9sn<8E(QbQ3sNTa%jzuQ4p
zZ%}0k(;~eFYobDyf24M}@t2D?0Ix=+v$$rfu(JxEzH4>Sz^deiuvWY9o;9en=GBNt
z7gAx!C#)>nYuxDiDkour1i2e4a5eR<K!*lr10tI^&0JU@9Zp!i*Bsl%HpGGRc&;h@
zOOs39`3=`yvp?|AOUrE03Fq2#YO$J82uZYbWBUw;GZCPm?u^xAkn0zAth+&Sevr5z
zMOyefLsVF@RCMP`z4b@!)(yM1rM%VK(0Ln#4dui8_L&;bZ#NWsLm#T7YZvpiO_fPE
zn;cxLn2qz)*CfP#srS3?oyWB#rEA}*7vG7F^$u3H83k_DZAl8s)BB9f9x^yib$y;(
z;}2;s*Jx{{u;aV^BDy*{7(Q;NcYZK1y52KAb31zs(}X_rB_;p5=0Ok5Z+*b~#r;0%
z{+4I!>CqrPQCk0nCQ7n;CO#V9<xh0v2=82h63Yqh<Ng6`%a7KvNNFLg@m^6Z&*>~B
z#-D|<l->Y);JzCK+Q@#^WHGz$-ZO<`x~BiH$^U1?|7@4Gad&>4r>2QN58?qwZz{p-
z#bQ8M*B@ZhxA%MvLJmZd#>gQjeHGf$Y0r1Ftm|1cSK{%BkvmO;^b%P<p53Rg@la_V
z`g@$cDU5oR<PF!@M$hSUjcUSy)GiPRfD7b&FtA{3Yez>*))!H&6Y$^rz9v#@zXRSw
zm5pxC1e#!G)r59w`x^&D%wO5sOs@_g@Qiz)l5+g&y0LdL;NXTQusbTPa@5zk>K8YD
zaomn1>=OEwhicex7)Yw+K+<fLxrHTF6_$7PA^3vJfImMzmU+LsP7mdV&j5*ZdvR)w
z#S~nPQq)MYO4_Zyib9rEw7-HHVg&}fKe`R32EN~AFqaJOQ&|j7`g+UVmdksPIDPo;
z*}t2ukK;^<mmr|OU^Cr^rnEkLQKP#n0qeozl0See^E%M!&vS3n0;dDDi&8Xqb(2v>
zhidJjYcrRma2M0*FrrVVRzsKWOrIZnb6LI07Ec|qXGDhFFlRN_P`JUB`{#(LEsnbc
zo2OOYDbYbgFd5m^*n9q1`J?W(NR_cZj}Yo$<Z_ePukLK`0>uXyPp_yFe-)h+oVpPy
zQVybTn%e?>86V<QMores>3z&0eFD*OoH9(zh-Y*$Q8}eZ3#b^1bQo+Edlgz|Ve<*(
zT}j+d(!bwiuISXU=>*BPSpO>bVhlaW{;k{pwk0EUr|`R(xUgtLi69wkNC@r8&)eAs
z3W))U>zUO^m>~_=n&jD6EKQ#@4gW>Q_U1sGiR(>nUG=LtD+7*tKjpVqM7V4AOtqMZ
z6A=@~s`hL6G*RVr$_@&u)VdVPwXIB*Sag8a+R}>Ey41)E)#B0=F~kTY?9pZX_`yj}
zOsXHV(_;i#?<4ZzR0D9ifb}aY3|IX~ITg!-j|41Gz3(g)Po_-PEJS;-3(ia8o3_tf
zxk-b!$iF9LwSdzMkT@(ClUWYb2So1F^#ogbz=J;4B$nX1AEg+QPMm$KL~zYi)Z}x@
zM<$t7rpvm`^CCVh4OJN<O4agLlt%c9Id&?@F(A6DE}|l4E36v>7$tEKyLwC}My@Ue
z8MF%vcBMkV15xIISc@^`{e;lT%jGh4*{q$%qEq3$HI&8uQ-TpUQoG3@KAz^DoDrpr
zhceczCJG3Z%~eurj$j0{lLe2ar#LEA%jCu~`-82wGMiwk4mG80l_0`2h&C5Rkx~GO
zMZo9Rz?77@-O(X8;lij1d0MQ6%fA(DUM?79v03{sj_f(fAS4H6b;@evtfcf&lw3ZQ
zXct1w@QIJ*m3^i_8A;4q8$-efic&aKLk#s`RxB|h^_M&MLC75ylZ2)Ck7~04Ht6GP
zJl^8|Wo<VdO-&KCO=HTXG5It)Nc3U`l=#Lk4yTPY9HF9K$q8rWFer@j+b96v6}pF~
zvoH>g*7={F3~U>}V;@%KmjmMOMiCi<NB@)JGc8^NQz!M0EKgHeJxClT#+eW<526H>
zz}fOSsDvN+vNEGntP>c^M=L8|fp?JJp=u=7x=WFvgJMV$<uKujtgY3F$R0p}s~@UT
zS?Pr&aj82Pm6b~l46LtOc-d3mijD7z>H^J~u}yU2yCf)7r+PrU)?O-ws+6LT524?p
z2xY+;Xn6`@wVkMS@eHPnXx#x14pGfSr^AhmkjJ@lx7DWY5$Tnc=a6;U8mT|0Sz>>$
zG!ax~a2VL<Kiu+!6Vi>rCOFbEZ04i3+f5<JG1``HGi=h#GL(V{u!S)Kt@7+Kn3C)y
zlfbCVzMsrtx*Cf=O;lp!qvelG3*7}eSkB&Gnd>hV4-P4G(N><eqa_v$mB}?xzc0yU
z;Agg;#H=8mz06`LcV2i^mBqNfSWD{p!r)R(OZ^;{-)Qm^Mpyls54ipEoeLjZ<C@id
zL{QL1zc<l-C)F^;PUdmj5CtHHECHVU+<f8He?Ov$`$$w;Va#@j9r*35?A4-v?<~F|
z2p{`A0{17QFk96eAP;aMzA~K2+Sg1c&4e;c&`rwX<!4p$i1Ny!UdkPaIlk5Z=XP7-
z>GVoOsWNGY>Nge67VsvMEcO7YEhSwwSI5eCzF?05;^r9UG8_Sl`go7&Kx4WG`(0$e
z<7TkIOQLBz5P9l^o4CV|QIcdHZu4iwx6Q&Xz!cnjj96Fw_hM}2)4YdqzyM?Cnj8P(
zYDje9Nfj3!*!c@9gK)=vM;J(Hgka@wP*<mnVJj>r&;-o(&RKhp31BEe{9Jl=(EPAZ
z+0Vkpg%=R<bN8>AzK-JGUdvxJ7Lc69q4hmxz@42T+wFrSKC~UXVd0(F@jEAdU`J=c
zq|1n@k$-$y0id@-XU)?xL+St)HWn>@Hmouh8*{{rk6!Wgjjiu_$l>r?khz&TjJ$Ym
zLlir))f0?wGFSYi!>5-61CFcU41_+nh8#Edd;UUX)I4+-N(PyZKI0h=CBe2~AcnVi
zi?c0L;17j}JVc8-_Vnc&#8ApPFx><dqy}fm7*@~fdRI{5g%`Jj#wD(Cw9(NaEH-g`
zNCIk3rs3cO1E~-!&2F(jJ@msf<luMSYV!`SBJHpaEM@CLLSVGnf;Pp=4-|NOh@bCQ
zH#3_0tHx9uO6yw&!Y>CwhjI#u#FdJ^nTYI<Y0Dk?b1JgAfrFk5{P5A>{I?c1Q8<_R
zzGZyLAB-V>n0)@-)o*Pg0#rw{_H}AX6_|~#NwAnY4F*;w!NE^<eDn|Fh5nBqUch2N
z46Ag^Iayrf?V$Tf>>fSjxe;_*?r48;Q39pW1tNRhD^tPq_X0U2p1QyMg*X+h_)FyF
z(+1uE;(u+-YlWf<GR#4nz8#4w#I@Q@G}i-bY!abcTsPkf%{+e`UcF5}==B!@N#v=>
z0jWYFi_FWJEN2b&&ke~!Gq|%_YDtHT$gMJFB>v?Jrg;1@erjX@gd&7W;=%Kx{&#ki
z(Gv{L;)g?{m*cRD(*K@$zsK;Obi@CFwrkCSOaJPD|DVFXGOn%W2{*V0hZcgnOOfDS
zytsSuVhP2)xCVDA#oe{IhPF5@P~4?RaV>E3{_pR8zR8E2?C#mwnR9kdvODuU|3ag;
z{cFr@MkE(%?I-qCYU1@6VSfYZ;=xJj+f@g3n^Tk{35Kt$*|!`JYttNTz($;rMhXVR
zIGT#Kz-(>%BUZtFHsLR8^4o7sjxwtK_7y7pE?UrzDz8$C)zu9<$FO6qf9yxGt3w3}
z$X2&(Ip|g;P_`JLG@Ll!T>D2y2x}^|i4_s+?ll!)ieBPnR5MV9kavEwtT<e$o%MOu
z*R)%8%zo>9v}#ZB+VH<MX*L4ID2Vd${0P)+N9v?!wTF5bN+rtnC`q?7tqvBTpSMy+
zn4m-xWRv;`VIYTp9@bwa5>sx^je2E<q1@wBS5)*~S{x>*r@fVxhXfs0dw)&O!3uOA
zl;|IUYVO2E{$pHYSxppry;VVUTd)@pDyS#BmDHn-ZZ5@*pIDOzR<fVMA%HVAVz+gT
zkmGDM#GyQt=Ub_#$Ad4Hrq8WN8910>^Lus#aKGD3-uT(yraiPk_nH$k**2;>Os6XO
z;ekh11)uVUlw?vO3}0G=|KJ%8e0*GKpqL8<7nnOgZ&7+*{%t5zVRUDp{(rFm@*wp%
znUAzD-qc?y?}(R=_K5p$x>j8!scO2S;)*Z%#eWKPtv;Ulb28Bbzf@vPd`hFv_^`Yc
zF|J9;!~ipuvXvC&ljIZnd{k>G$bbm#Z5<PFVPsU$Vq|m8VF<mBr)7mLSi#C2QurmM
zq@*%3h%WoOo8Lb+^+0&rx0!(_^kWDL^}NfsD_0{~DFwl+h0YN}o6y}`W2yp!sGsd~
z6aLr&P1$Q^i%yjv%mNhj^=zLy+ZQ1oY}F}J2VzdHPbZ7Ty&4&!pGvFoS0f9-Yla~6
zIWnG0#~G}V<62Hvtw+{Us{5YXgM;d=iY5PsX%sW5-mZp^AwjKoH??Wc#|HR*xtS@1
z%WOI3qD)=|6bFYUMIuY`c^cvW>nxIivD8vpK__AVXVICZ$DPxXt+S}vJR()etK1SQ
zf~NFI?6nkb?mL#|&O7S$P_>R<yWvR#OA1mE_TVo~#<ZcUyP;vnbfr9Z{w*D*UJ_2H
zEqZ&Yhh*ie8RSuxo=cwTSdc}B<Md8EO6Q%C8FYr{otWiC;+lWB9DUMEJg&{lTzfe0
zs*{MLB4}*VN0V26?6uynaz5m{c$K3`1t8{M)(k0O`Y6sYAM@+Ys28c@{J*LuMig-T
z?6|34K3@%WIBI7yMnz{huw#{;2;aB-`Q>yu^cJqi(At*sDtP!+bzR%9%C^Na(Q&oc
z-~0JFJ2bO|n}5h!#Z4bJ@jTkCbD`j%^sY)-eg612LEWXjxXX6*L~@<{hWXYWcpLB_
zzJBTSGSF^WfyI2CQ!$Di$&U)okX!hZ`la;Ogbgmov93eQ3K6!TUN8lYB@-of{(F(r
zg3#%CWE|@jqMRSt3h!{4^5>IhLcdL5&x>It)l9w5Y-7fGyUqU*81W|~)lT!{<cT{X
zdu}6XUsu726u^4b*;0Wg?26BB>_I3@MqySLN6H5IIUdc86kz;fiKB1nTX}LfonQ>)
zfOVNl&KODmnI`dkC)971@ZnzV6q9{`a*t=iStlK$8?Ng0nW#Y3A*--<%WOq}KUIEX
z5e43!=>5Y>o1J4h=v+T_$QbV=`!llFUTPR1dFLxY5trF|Ve{c)N3@?S()8O8WJ8|l
z5KML1hVP<)fNNf@pRpTRf2W4?3EbaWnXQKI{7T>oDUkW`0T<g3uvb!r$!IkTfSYlx
znQVEBctFOmg8FQPrs?>^+>Y3Bag7%{TlZ3MGo|84JAam)_5w88HC^j%DbGWf6Sm9l
zjDcdXxmm&RUwny_7_QCX-agC&M>a^XSyl^a_PYEA7N0&s4Z+LJI@w)GYx}{0%F4G9
z%ZpouU6sOh5`_zi@*BJZ=R4=8so&F{O>eFgpO*I@VG|r7L7l_`G5JUp))%BGpzG{T
zz-Pl9E=}!?4$Efq5I+=<+=ji#^IpKvwlu`q3a#(>uigAB-7M-ToXEUmp?>60>*ldx
zUEX6$&i3m!RG_(Tyyghh$r0Z8^sL&+F(K{;0^k|x{JDmhbzJ?Y;y4R|+BlKkv7FTa
zz^9L~OvtVD#viN=?m15>_d79x%Oik-siL5N&F_cVF3?BWw5z`x=5u5=Hs>vuY^biZ
zSKw*4$<jkg6hIawy81U)CxnVp(w({(bR3s}jl~g!0*hQ77(@r*gWb-dD5;-tF<)<V
zV4b<EWh_#I^{=Zs7wfSfUTtK_hd0atNHJk1Y-((obK_cx23KO-yA#gw96Ds(E9@F8
z3g_X+ZX}8cC7*^iJ^zYyh|9Uw#5g&Fk8N^pPzs2y=>pLq#hL3eka)-d-u!sr+=bhX
zIIQLu8M(c4gL(k=M-w*kc`Q{{->YW?zjQF4S;Bg`FGwtXy$=t>Uq*9zSsc=-!ULG!
z7DES%BZG#(IUA&4-h%e>{^Uga{;wJB7(lH)dnxoUBw%I$OUm$NBq4}v?}P$b-4Q{?
zd64>({nY^px=&$Xqzgpu*48_}Ag>!44plc<@pra}VuHBEW<E~u^J-`rMs<4P4-9k$
zsV?J94tbW2D)&h8Sm+RdjAaAj-Ax+#g4NtYnCln_!D^6WSGT{t$nekX-dDj=!B5j&
zmhA6GqPJm~>_B87^KvEyUzQR^lrF%9snuYX9$3>g@^*OU!i^rNW#!T>N8s!yjk8mG
zks<ztz0)ia{BYCXSiyGh2&<bK`cdyU1;za!z-5xB4NE&eU@;*CWj-KBLaj`cAbka!
z;Ev@27C{DZKoOy`w*2r6%gwm<FoJcwL01aKlD>WlwO$z4{k|j2pKjg6*$&vzKoQ6!
z^QJ}xwVmy}?j*4Una!$~|3Z*IFwWGPDnh^j{-!MC;@={IfExjbA^J%0>2G7=BOqp?
zoWQ5?t&XDzGNW;YLskn)`NZOGW_%ai;W=mla@53$XztA-wVQvMh}pBC^Q%sfG>Sr1
zww;1Gq4EmbIMH5(+<8&z*V%-w(5f}t9V9qDnN(<T*s|^KI)BhV@wIn!i3n2i=>_c>
ztMj{a@=AHzu8Wf}y^Jr4S9a3YEwUGb@=7fw)U;cgw7-c7pGJjv^$&S<(q9FbO0a2@
zQcBBsl9_+x=SSMsrT|0O$y<Zj4_qv%*Gw5b&w9(|TkWt;Vv_wcNtrM{rr#~5eZQPJ
z)OFQEz3rcwq;xCP#w&j}sVd(@7ilXDS#a_1B6oxS7UQ3zr%;vuc+3YIbr9h7uS>W1
zImNbHcj_vPFjH&mhNbinN<Ozso5giO`F}oQky5wsap9y7>$CNKVxmqEy!Y9n9N;l0
zV;o7RPx?6|OEH9jK5v>11!Uj>F;s&LqtZ|}pueE@Pe*dD=q!Hc?}u`u640P}Pz%#*
zZrI=~zREpr;6+t@S)=+}nfKW6rKOw7zMy68%zZ6hE9~Pdvlz+l=#`x<Qxk$WLK~kZ
zP}m?HxR3O|n8M6Vhq5im<jX>-^tL<7(Q%lZ$b^gR6M{h6I25m11M}*c#)Ik?20Pl*
zapoB*j!s)+GV;14Cx3DKJt8>a%jzE;4)D{{mo=c_$LrqX(Cfd{Lt1~pXWQQu5S%u1
zbbSxpyQE6+2s$>iiQtdpvBzUVUD2`j(7l{EpKq;u^-Vtu-UV8V9So5y<V+=9;_vsG
z>9sn3%N`Pt8JS935!Z3Ua@V}|Ao{d@z1ipx+k1CDaw}G;(c;=O&CBDl=Wz~BM~&$}
z|N7&cikbbf>}4siSb6tFPY+5x?~|0Ht%M4D^2-QCQ}=i-<6N+_d#9y}jc9H+etx|9
z{92Jli!L?DH9biFAyMxkuBQ5;%gub3RrZP~Rfz-&3IVMLc9OdUT*mJW(<A%~M(Wiu
zp&h415ciu88gz()c>QXYWP}xnVmv(h=|*ccH&YM-hZI0lj!!~FG5t_Oh$dow5rSE_
zXp@zs<c7~pkTGK9H^7`=YRM8w5F<h@NG<ym&406y5DcV&{;vn%e~suNNlJ|W9XtT~
z&q+zS|2vHl-1}cKDoiePoA6VZhrIdu?5#kqt{#w-`BT^xo$5`w?tp9L@ykT1%D>x$
zgu}6nbd`*LnTI5cqn}lKysU|X{ayGs@VNCxVI-5$QS@+!SU+Tp!!Q_l6b{!5X*)mX
zYrFfc!I@*v$@GxAVR<_lP*`e9X(r0QardyJ>=&rqSMmXHWh+tq2fs#>YSP=qET!(l
zFTug{21f4gV_~0^sF3pq!vs-(PTtUJOblU4$}2fnZ?CncEJP%4703Rs4pN?s{cHn+
z5hQqE?#FVy>(iGY<yzT)2l5~msUm|+50ZYuPi#WK+zz4phda^!aLP<GBQhhko?ewR
zqekES`!6h5-1aQoPQatr2jM~Vy@@-2HXNd*HBX5uRZs&K&M5@rJ-5-2$icS+;58Po
zGb(Ua3mM}lo;=_ohor-tn*%a3Cx#m6hsTO!xFijcwtpML(kbcXNbu+NrHpgstpP+Q
z#2QM1ygQDHF%Aqb%xUzE=B$k;0<Q^!B_9NPzLpfDz?89GhF>{_#;m*ntm5G{zr6qZ
zFKEfI4lLPZkcVX7flUyOiCV-&VDc8W6OBlmMSFz;#BrjG-*$2)xg6rl`aDY4$xj!)
zQHbg)E!^`*Csnc~@IbCq@;3NDb-n5t?}^yYZUKE=vqN`6k2tG7JbN`i``Xn@Dh~nm
zjk=aT3`XXK!_^quFJn<I!uRM@ly)sc?W`^c<E;~r!L#9412s0r01W&rYzQU<)65dV
z_6$WqM7)GY<nli--~Z!uenACc^U$oVO?{jy1%{A?6;}wkqr$XsgEt0jdj{2!fJneE
zKahbQ@4lL{PGLcI0BfCo1Ry0;CoC|<A4xPtVrj0;fcvTeD=lG7<;A@|A$MeutZaGM
zHfcXQ-Rb5eJ@`-ThLQ|9lPV@~3E*V-yFkIf7V1V5kfG84i4>hxl*>XG>~KK+0cGo7
zCI#sR0g)&bNIvXjZ63wPM%Of4w*vr^@mb&>G9z7?bc<{sC{L^!Yd+f`h9nUHe~6nB
z)FBuzr%REdJhgA7{v^a|Gz5$Q;JmUZLSzIW=F#e70|a<;KvMlb#G?yE{FHoyV1wYR
z;h!|yz}UO0fQX;py24G9qoBQ+oYrT9Z1%#tTk@9|ZN0E1Ki}|7i~UhQ4jXD5&+oZL
zukHO>F3JpSeQ&?6yls3VOmWu~|E8b)#_Ommp`-FY2Ii#c&NQ*HRt<&gyXgP>{r)Os
ziZ3E!46P$A8wU+Yk*+EnMZ9H1`Vea4*d^TM;#N$)p>52}(MJuricjnlJ8iTL2rGzo
z5lpM`DvN{obnn*GJ>ZvA*45oHxz$fd>9GF7tEk%VzV%yNXIpE+VULNnz5YxN+I4OI
z?YHMLQJC-TtSvC`T)t5ee83@LeY;8&kJ~?&D&dvkb%#@7#=#g~*;Z|x%h&Z7FyUuZ
z?K2dP3Z5)B?s+mg)KWrOL0>RJfWLaMufFtc7}}rQCHzJ(izWf!`>1feW|3s5V0Lh@
zUplJVo@K;P(R<O?G=Ad)P~qRsi7c5pzuyxj^XIHM2s5QxdD<ed%Rj6$<|=m{1&QCc
zFEB>VtGM^jiv)pNTw2FzhWA^j`D1a&$)nUteoK-|ooT**V!q$GFXH=NaQgRbnM<Bp
zSFVn15}?7F{*5m7;i>p_X;;{SZ@#|VlX{jPU7KL-gYbQw-pcORm<Ysr*$2OROc)%v
zhDJFpT$Ak?6pCy9-SAlK{T3pV{8N+bNT0b?h@8rBgF1K8MIz~)5(~Os>*p>p*G!FT
zp%KVCne-o-*zvLU+6PUc+ZiHpbo(v$%R2d_e)#;mc;e-hBiG~S0R>^!X!={tNqx&9
zukndG;-QUXZ~9OE)&qR7Vun<E!AreJ&0JyP*|J3-VwV24R+@_?#$yY|A!UhnQk`AU
z@jAK>oydM65)0;^@=K>Ly;w`*^qm!}7IJFlw#}SPVeqe6O+v|bclzxgvh#*u&v0rS
z*P9MQvW2(kb0UiDb_^|29g>?%R;8UB_KVtdT}(uksg2C<m$WK9d9(VTr!S1&qnPA!
zT5oL>+8XQA+d2n1CP?s}exu}?)!B>F(mrjq|M5U7B+HKc$C%sFjRe1Rnh7oHxA<^s
zan?k6Xt5V15oThNJY-ecxM@YOpU=0I)Ur6#bwi*R8O*%Qb?f_p0)#1>&K=ui+Yaf;
zKp1Ca&m=$7W`I3NOi4*o1oL>`AfS%<LJsXG?qVNF@}?M^s7eyQBxq4v>tVvE;}aj{
z$cVJ^qhs@ds2IkS8EGn&Q?MUd`mLx&wwGYDX$x!^g`l2wT3w@k2~Vky64OPwLA%Po
z*RrIiQ3^&>p~a_3zGv@n@1~cse5_YeZSf20!t}QA>j)rKm@tey;rXN~_5zhJKd^x9
z*<!@0_J$xZ)g9U4ey<8oKSwXS76yi$xys-xKZ3I~vVOkr9B@1c?m$pkCYdz|6K3}0
z_FNk?#yP5r3mKj<q;m}cqQVW&J%ZBVT8oxU>>X^S-aaf-i%zI;k_@1cg2>UR^$$t>
z&@g`-l-Sl(+p7nSG4aQD^%lsm7X9!PWmToQ0^f<*$9k_VJ@fa(21x=<oMblhksD_p
z=Kcj(bDCMW%a#0rplfYnT?A4&hkx)pjPz0!PnXRk1_@nqczU^CUmdWHq&Z2_?71z|
zTfqpLoI_CZqoB`Q{)q#P@Jw=&{uyz2CVq*F;>HF_KGnn5Fa`+c8QCKDr;P(KWJOG=
zn=Cr=36INsoh9nfVvs6-ZVo#L*Rs`0vPTihP41;moH%N6cm&_z^~Hf<8`v!Em{i&8
zQ1@XyzOh+mCwU+M#a~~7_$E26W6MVzba$KHWXM8%tOG8YC_7{K=T-H#DoMWPZ4|op
zJhhkGrCM+^*Y~N<Z1wl8n(QNEeCe^qrXVieNFt+~*17$M30fBCoAU&~u^>MiqjRhC
z%SeHtwyRqevs^$9KWV*xmM45**Cv@_N#7rLA1WUhAi6cpP1|u$R=t|po;O97Egr^|
zbIVHAoK@sCm_Yce<ym#Sqd!?>Z(LR4cXJ#V+QA-2@PW6SYEz61IB{|Zvp_`p=9|s|
ziFCWTkqhL)R%**tkLwxVeyg|<vC?XQMl=SH^Cv(NM?iCHoN}XI{%*=@#nBh{Y!4Oe
zpgAA|T-uf|N79hTFk%TUPRQh4mh~S04i{DFmpKu0fKAs@;Cj4wMbF_5l~ZwWVj{oP
z*u&GVD&d=#VHW81pfin0p7phfc#Nb5aowJmb*(5t*@UR*YD~P%ZE%xobhLl)juH;g
z$aejtIM)qQez=Ce1iDx3Zr3B6u_AE!H4;$vR4(Pk>DVgA@PUL(Xq0>s1$Zb@!+Ptp
zC>I&g^*gkhDC*0p@@duLbcmMv6mQ1`Z=$mPyO1#4=CK1_nhVyy+6!-c#_8z5+E~6h
zJ-ghp8*jG-aA?B9x_{29CJ=h4aGKp*uOaE9DyEe_6wOo=J6M#yLe~+>jwN@-VGn#`
z^oTO9T8W1n)s?Is0B&2|ucoiFe9z<bSBQEDkeg-HyzSlS<AvVyOd>l(fqk9ucF|h7
zyT&3q=u#r+-{xf09PH(OC{bz|ZXx+kdhAi`<qp?kKMFr1?uCXwUt|}gsO=u12^T{k
zeTVqqW57WcMdFSj+sQ!S93NQUGEx@~NfZ7p=bJ;?VPO?w?L<ghg8YCb!7**g#BW!y
z_L&>O9eJQJKzCj83g?2n`AtX!>h4hEg21TIz3#P;c!!RiY+`uWcFcPwZNrfdD?d6!
z#tdt?3;~M4bU|9jPiV0GBx4uzM4a;Tev{s-ulP96X5X>^^Bt+o`P`!d23Ea}_QL4m
zMFF6Zy)o3HA1g~0!+|$WTY*n%eq@r|Q8-_YZ-!p%^aj^oVrghze5zW{w)1Zh+WtNL
zN5;|na`u}0K;y;kuXFIy*HduNd)GZDOhZ>~qKO~cOUW1<oCXn1(UH1eT$C_bnRK-b
zsj-ce<~R>?%Cys1B9a=lxUyTnPZ<p24>l)EgxRP>Fcm9vkJV56Ak`;Lmmr9;rL6is
z)+1rWH@;CS+Ivhkp6rplT{()Iidz4hw@vx&UrwAg;&JItBhjh#g$%cg3`ME2%ZqOE
z9*-uD;JcrG*UzG+pSN$rxtLV)henF(%K3jyx)}si%Kw{^x&GS+Ikc?%Bz+J2nNE7j
z%kBS7Gv%f+(7Ju8NLe@1o`=JpjZHqvf@Qex;4`Odi&vFYaOD(#C?n(eB(&6W8*N4;
z*<&edf~_h1<E&#_L&co4&IfG;oJ2s0k$qaD`n!+sTQ#BvIMDJv3L_H4gteN}9<uKF
zJObY}yRl(4Rj4lq{=5G6lbZ$Kp=felE9PD1tF)C#`snTSkm2)``VB%0B0F~Owa~iW
z-tJ;4PcbRzKU!sNTA2t!^D`slD{Gk0F(>!ASuf*LqHNSbcnJymJw8kGx2tWqo}{9=
zpE}tDNlr&8tsXAABOLekZ65Zwb6vqVZq`ZeIa#@%mkUI-DM+%6V$X2S8$0|&qfxdt
z99&6-seUJ37ab))o*t+qEP{$f<{@8TaoaPS)l~l4TL*^@qJgSI*tv&CXo~882=yK3
ziId-Z{n@f=7UpHiVM(#GPyu}`P@*Nf?Lg6h8yV&Z`tOD~Txwgb6r|A?{EjG5==S=$
z$*Pb8cctoCnqUC7+X&)RfstMRhJ&Jg_DV3Vo11=Fr*COpH`vTN6(mb|;LR4YaH>z=
zsc;@%kAE{KiV}B%jeQ&!VO1E{LYT^O|3~oqlCuK@4fIy-?NP$%R=v}80Nc7Ee$`*$
zL$TkdRS$J=y(+L;!a|>ab7S1$71#chh3-pwI8+<0`1HhX{jy>3NI3you~pc2_2$ap
zvk@Bw1ikVxvNDB#lrYVgfC#_h+xHj@j38)EZ-+<8ALC3YG+vGrj(I4ZW9zI9oTFyf
z98aNmER+~OZG-q?spTbi51NLQ3%ZAV7-jR!#<Gk@2}!U|?2UiQoIi@zYuVW|A%epn
z1+S*9^gx68E&_U9X~Qxo6^K}O<q=axA}sAef@Bo^&k+&~z~oiRWJeBq9SW=S&LO04
z)v?yh(oqU2E9@kY7B9Y=j35><cT*)wklx7Vo(Z9()*IFDm~&eCy&5rK){@2<ks2bY
zdc~%<seEhB(oI>u*m4CFQDDF##MMH8qHpfDLCnv1tDFv+w}pRSty;?db#m`X53USK
zd#5X9`6n*|djw5}LKjm$BPNV1c1V@yhX(mDU#95f4@!}5Q=_qoO$;=Rq+4fYG1fw!
zx|+4N#a6`M-)8CQmqAJg&dV#YC7ZP|wg4Mw4XX8Ld}x%dRp8#utvgv#MPK!y&in~e
zkbwH*UYPDMpVMYM$D7xuhR&_ga+qW0U9S*0K}!8)pmN-dC-tez)Qktg5vz3i?^<!z
zWI|K85oG#oUrezTKpN=_T*$*n{W!(dcA4L7s`|diRvjd#CMtpOa|Nz&QT0F;$?C(l
zTUqfVj@&CEM<lfj+v2?hzt!9ohBq@#$k@2gvPpTG&p7Gn6(X}=0TF;u)eeTch0pm+
zP{s~+{n#OvDNXKeylRfI00#4d!uTXGbCI)79xfsTE^+E@0U<`>2etnOFiP7ZaQ5t(
z`j%3ZLQ1^zMU$n=)U&&$Sr3s$C1<Z9c0ColU0@Pxgu(P%ZLW!U;IAY7jk)0iUy4<{
zwJbIUi_Kab3SYHZUJ?S_INomyHmdPiz?3ut5#Pa5yQKn6qE8v1`59wi97=&1j$!Tb
zp_&nnkt%K$%e<RxX}UF3fwOg{)F|`l`lKF>xZ5^k%#DQDgJuVAsOFEVdAw#Z9jl+i
z6sy3)aKFI0rsyy%S7WvFv_1aV!GKz{1nngjMnv*VRKom6#+MNZX~m9g+sLXY9gbTM
zs-OH!ig8;64w1i_)j)hiQA&@cSSD2&EX>M$JfB;XH66o+Gd6~(N#L9@VZytsRWD@!
zU2u7t(#m&chF?i`DOKM5Bq6T+TOdzd*@*F@EM9%dr7}bQ2XB44l8Lz$yIGq+#aPPy
z*P@sfa#S&?YYC?i?!l%8j>drGnGyv{ig+jhQ1EGZ!2HM!E(-$eOh_O+6@b=F?cIN$
zA)8p11Q-Co762d(0sx{>002aLS|H-!zv};AVZ*6|$42LjG-yMxv<W0Gyi5xO0JKQ~
zfMFy+2>609%BRx)4WP5pnnsj;cz~~4Pd{eHDTxw&d$0DOk^p0bQusS`U*<G=wY39_
z0OQSRe*%VYVBS|KJ}t2An#fgr48!WpDbg?!G$h~?IOusRnj&D%I`7aopJod{fHB-C
z^nCdFl%jk|q<EA|XYSc58bumJpy*WwFB^Ui+S^z=xQrUUZ*-IzMnb5>fYa94h%_&?
zv$gl?<Ql(KEK<(e`jP-61WXIltLzq&nqD~i;O2b|6nj`?ji4$afUjaB{ZCGEwoB%o
z*$G`i8G>Uv?qxx8df&Sfy^WF%2!Kk1vM<xvVg;9cbBe%W%hr}Dv!qMH`5|D04WKst
z?+f-jv4o?x@LYjqKE;7!n^!U*CprrD4^w12{l9}<O?K(jLnn0$bckC?(FwNz^&#MJ
zW0WJD1ol16o|#j3*0opeSNs!Zgj-`lFCJ+3nmJ$AadMjP1sXL%!2PP^@SltQNk4v_
zp50#a%`3iX)O}SZ>n8PjSddpp2p4KIWSGRl5lltu+m`ecXYE<*;%{<fu|ehVd<+;q
zUy89#*|YKun2{1ysf-P_9Fr2I(8f`@A)>&M0U2#2T!eO4n$Ev<T;s|!lQ8oQP^dn;
z=9>`h8Hu7X?Mptn4xaw~l@7L`4${#XdY0r@><i;3@idRf2#GLl!HxGHn%XO0kO6&l
zoAZym+u6U!LLV?Z106iq`-JKA#)^39IaUKr>!#CJ+<rYb+MBIy37#x0wWV;9c9d0F
zWPts?&kDt!rpe;+D1myUNN>9CKq^w|eGgA^+{WCZJBS~W+MlMHr+1Fig4LmU6_xix
zv-1Xm<(UTHB8l|2R-J0WGATkSIUWMfh~H~HUw%5&OxHr=Vg)FlO?Ww1E>dpS%x1dQ
z{lzjvzBpL@g%uQ>o^<9gT%y!^8lU_n|Nb|)v)%m~r+%z44h!CraQyG{tzBpO3o|s&
zND4}_`m$qSFhx>HDeM%DagAYA7OeE?bc_0At;G!9isvNII||1}Aen&_GVekT07uu&
z1XzO_#O$2%-;{Ys)6fp;lAz1RTfBjFzuLH63jFulE2qDlC@qUt{>quv-f1J|$gOeZ
znADLr#s&aDUCQz@x?~ccUD>!@JI@?%Ogy%76Q0we-AYdHx*koc=N_-KKcb<zwa?ei
zpUkcGBvFvB25sGZkrTWY$z`w}gUT#-cUaWSt(jjB;s@Q7udHo8e!g5ke&V#V)TsM+
z9ogZ!#VZi>O)hKukA7y3_fwCn?MOyjl!xm{Izpe838$8z-jg;=XiXG&@9zZ?@Vmyp
zahYCBylF{{OmxyTJ*v9r*!!18Z!ZZ)52sh=P-e+uk1RteYlRl$zECE&(nwZWR4G6s
zcBp<)H0^r@q;`u!6US<<dPk-<MRoieE&sxpLw}o#=TCtv&!6&p5TN4o05Yyv$6Ce7
z0dPMqnq95a>QrET_8u~vUwVb74;Pe@GcGx<Z}W~bPKJ!-FPgK(${z!tU1yh}NeU_2
z&SRE~i5FLhKzZ=Fir#qU?^-cM0#N8P_NkrKAGUhC{<VW&S7xLjE+ffFf-L?n1u0W`
z{YuI~gBqRpZeNN=Fx=hcD!((%OQf$^{wZbvoA=IOSpI?MW>WVf*E!MTb*>xM`RB1)
zsk!68jsWm>Hy_*YQ5uRgj+O4w^P~0`SoOLxIUpiV9bg|QdE2cM!H-IY)*=6S3R?K#
zmLB}Gz;MX2u-^8YX!*!;B$qt7QZ`&qT(pf}UP)cRSQguFA3pvt80rhsDpGZyI!JPb
zIjzkmjF<}%Z*xm_zFkzweYD&F($yF386C-}B%18c#1$vo<iAf~(*C@3l#(peQ!7R<
z^w*zw$(6@zA}DC_=d-`YU}f#S>GnbYpuFqK5Qc=md7@>@I(b@Y?;3h!WxKa13pKx5
z7sIiC#!4UW_A|>?6QctZ-%h4k*A@4T+F`$(-8a_M>tnS$l}1eV_S<_E$}Ghr4HoD6
zl;dwH-;B2-$D`ipogNQ4op?E1sI33x8je*$Mdlq_B>{_;j~8t&WuwEH>CA!-n3(Pv
ztQ)_H5Be7UI#Pec{z*5p^qqCJYoIf5LmtJOYe^YfoWVQqv_9ePlSr78a{y_gw|tKV
z7lzvpr74n-5gF|Cy~g{0MJAAc$l&L<#A%vRR|i=+#o&cJ(7Rx9$$$J$yK`3pc)F5m
zFZn1SQ{*ectijmG>%yB5cGM`6z(7vR_aPh|sx^g7ZyIvXFz99!Bw!f6SZ5k&U+ODj
zRJ4rnh7o*i$ADngXj}^Uo}4p6N6=YxncW5ImQ0q)^T&rxgPj3vH*6lV)<lwIqad3#
zrtSHt3H=CQdi=1^76sK|2EqQ=S?tAaL3o`<Y0-tU;MD8A^fPK2M|064c9Xl_LSKoh
zoO=5!WGQf+|L~nI)g{l=QG_o08@6ciI~`vB;yB#mX>mK;s{968+#EDry1!^66(34X
zC#%KhOL4+T+tCbimwOgB+Z-o1Z|o&3YLTLI4lcIbGow#1@FjYd3p-kv{)AR9fZ*=d
zyomgf3;b7>o&>n}U&2xWLJb?}^t4%b%|PTaJU}qW5=8<gGmAd3N-OmBHrz8tv75n$
zaHWOn!X{0KgE%hn3~ikY9E1f@0)F@inmsgka0!q>3bljx;X8uFo;Hb>K%M=KXfgA`
z1oHc4_?CHEvP7VFo>Im%BjzDFBw*=sS5!mt0XmE^x7J6+#X9Kp+C(+dnJx(eQmx6~
zQzpyNEUK}K$-CTAlPh2D#}QWlsq=UGxrasm>Ore*QYN!*ssSrG8}&0D#+o#m35LM#
zPun+lK{x0s=~vyg4P_~OY^R??84&+Zeq;;A=}Nl#>Gsw%y^)m3kd(Wf?2DL9@z5^T
zx6{+=D~_$@Kgx)*vMTCcE3FEyIiG*yDQh_Cw40d)qWdH57Lp5F)OD)0$B4q4Rn@z-
zeQ~nX;C*}YOH$KR6x?;5a8pkTG8G;twFxOEFLae6_`vFfQIS4PplCL|8`;~HhY5o&
z)@pXiWFljXD?6=f{?c#5Bfe$dT6`dDtgQ?L{K>!+s8nSKF#lkGqKatWxO0U3i`dAL
zESr;;DrricI>Zx2!c`daaD{jbb%`qjzG58$NZAkW8NuwzR>&s0%`|^zH~Np&KG{*C
zVH8N{Sd(YofC)f&@AIMdV@FY=C2%VYX{0|91fkn4_#_uNHt(;HHXlfsYU+pw_~OEf
z=hW8!i14^<cO7Ox8}8Bjlb;7L%=<pDQoa23g%nzRpb2&+Z)lc^<>KvyaWZ3kBm<Fg
zSQ{uCOu#lTvWP#0U#nI&wA930-Q2+ZcLV;~p0aiqp1v0(>hAbTD!d*dT1{7nc1vwG
zh*8MiIlLa-77N=R+nq!tw>H*n3zW$~Jj5h|3g7vD+nYx2uL%cAI3|XL%3;f-8RVuq
zj>sgg0t`pvdQEPxyBcCQFrg*5p3vFt{x(N`XZLn$I1dL*t_u84egx{{o~8>@WKl%K
zAx>fexd9)OF=1l1jDWbiVPhgtha2W}mr4j70sx9?GzpUgl%i!kZ1^mW7G<G^TsEA{
ziw0AED3HhNm-tlKQd6+WqKrRbRYl4qU#$Qs#29o`2=k0u?;KJ*(3kA>v5wvDRVY;5
z5eH9$1mmT+smdSE;^L<UO)J3W*zeJ_*>Ei>E?3&kD}5s$7;F6Gf21*mS(*)$noV+K
zo5qGUT#=sVS`>mYjgSoZEd+-Y>@dUt;t$cLQeLA!GG)ZABArk%qI|Mwvnyj?oL*b8
z<PN)F!*1>SzeH)uh{8w*KCSnWdA}DH*dlbo1afvRAvdI>VmKA4YcO=7!KcEuKii7~
zKftJqE6>mGKF)3zZXQFqAv@&}fBpGcj7vtVLr^qMRY+rPg@{2)u_t5hdK4f(tqPz_
zl1+%*gp_KiT%t4YqxOd3mtlI(e?jDKB_=&za{-Fqw>7bOq9P+navn(sk%ycy?FSm^
z#I3T><M@d|Qa&JUs}Aay8XeDB`x%!f!jE`w$~Tg*D7VaCZ;b6h!;w9nxMhs1Ry>@7
zZr9LsdCNn8qztd1SxjJ&>2o^u?tSIAbL2J;PN2q!ix|PVpaR|GyoZ(gV#X^J*r7xr
zZP^cea>2Pi*6{=(k5Ww}ZuHXx@`aNrKOvkDm!8P|S!Pz1nhpdsqq}RUrstrNE2byI
zpc=Mnho6KelvTxIt8Rc4B|iHND%VmNGczrT1<WfQBlK<3g~kz&RAF@?TW4>uZcz<8
zaWm#Qmb6B!tAvJ~=xPRJ-DP)M$)oFks~e;QD6;GEWgi+dhi6xmo=?z*S_cLkSW$p>
z>nb*(<qerwu<pxB>_L0zMWvR)_M)xKrDCV*+zS;5|NegWK`;>!eDPbG)FjWi2#BdG
zL*qI|L~fUewrALsIZE`~+c4@?gb54l(pZA|&gk{y=A+GEnh5*+kR9Lc6hKjf2*e~4
zoAeLGgaY)AOo8X;SYcJPlI(sz9}C?F#bCmy-p6@_Da@fD*XN^fcAUH?&j8WH?K@%-
z(Sg37f=?GBaB<iK7@Q)fTV(qNRUPH;2K$ELAaTutOhuBzmp?90B9IEEtCsRo^iXtP
zvuHh~SAvjK!2>RYz)9+{Zy^1{wo`AQ`a%vW#(m;o3y<E#6c%6iGXj~1d`>q5exB-Q
z?e+pv`VxkoA%%{!T()Xg#&8~6Dnm$!ik%MRSCJ<i#eTc+U|(rx$J-<Z&Ckx7a4yH6
zu$z51%dC!+%8b{YZHY+#*i6P~(nuBDj0jiqSy~rqPcI_TGL3Yd;!$z)f0<tUcz2bz
z{@1&=?^9D0iVqJevCGI_{@C`S_k)n{-JH^D!F$!yLs;{WKQ>qA^=GF3#(m9?uBV3@
zHzgqqyDrK^JXHV4_V=jo#m+rez$VT1Q!%F2$e;x)vP(zr)0twFN0r*qi3>2bszuUo
zh4kW8*5dZB7x|y1dDOQ%?#$KUFtXQ6MvxGOD}1kpGU0wc+8$&606H{~*WoWQia#Ki
zBo&@@rh-IN@Pkv{(`<bw%0fxI3asXH)k>OqbszF`%Z>HP?6WpH?8F8}grSJ)+rx-~
zd#?;26Nn?uE~eX}{^eXCf=#U^Y9er@+9%U)iFv1IfDMk7hx}B@A4><o69snj{)Wnx
zTHp<#_1E(Sgq`XR)?6*^ucrcolNpPv`gxe2IIh0vLSEHk%%IqNFAQ<}<As|boR~Y#
zD8uy*<xL88lghWuc{+(_ny8h#_ROK+9G`zCAF%x_e%K!pjdr%Gf<CM=y0tXeuFi=E
zSqootDXZ|37UN@J*koLU{k?M248DnT@|L0ozhmC(feH72c?NwQ9U+12NVj*&4-61{
z8@((nAuLc$*AP4qVMFF~KN#V;A*~N_Efgy`db*dqggT>uG^{UZ(^-IiI`dVi7WI0E
zzWc_c>F*R3C-RIj`jl?XvQ>(77|hGV>S~$0eu|>a{%P4^;#Zo_P6{n}|DA0nseLpX
zJ8Ea^UD6Bdx6CAB%WCmNNNw{9fL#0FXMNNjdu}n{+#Q(4i^<|c{6x8>hVRNg!X*dA
z5y5~i&4!7!>hC_0wYyW+>iP04gJ03#hYq(91%G<d{(aLAz0Yyss16)+U-^=l>0U>y
z9>1gHAWS6oZ*z0#s`8!UI%zo<rM65Tty$rQ8j~ZGG!JcK!y{c}r}#4G2!EG3AJ<%X
z<{4{WIW3+0fa6hBz<9X7vFBG~@6Mma0!>-Z78c}eOTwQhXLm}~)>2jJhg74og5@HY
zkBNevp@`K&i@$y|f&HYhvp$@cQ!0r;%Law)UDxD?H0|04!d&3!-)%eVcV-6gUR!2S
z58JjOKhS{EB90%ZceNJ&<pg5Mn@eb0LJiMd_w4JvB^^IZC2$R<176nyogH1y&WS1e
z)=<5?ohpGY+BpIP{mGu#maZuPGHkyd9m#s(gGf9c=Q|VuBu<K+cFKqVpg8+_pV->B
zN0`V(TRouc_Z6PtVj}3*Us|18i+?lS{v`d3H$v!9R7g?6UjZ9uNiUzm_Z$){M6fr>
zreuFk2`CEFd>m`96^SL;yPc)B$tfQ9`t<!?qi4945XrS$UxcQ#nf#S|_yt+k_xrBh
z*mhQ}=iPc{1<?m*qg~Tc-O20|*jM(YwFWpPk}E3hX9g_;v_E{;ck~icl!j)ccDNv1
z5M_=inQXE=Q@eCg3g!N7p>&>}yY*;4Lbpj=sfrc11z7sA|L6xezx9UYhLRIcI<!I`
zpTd$>L+yvu*T7E|7c9e7zux@c$~+#j1h!C*ud>+hx=3+m?v~BL=)nI;soe9Yc$_GW
znQ?F~86%B*6vlk$!2!v6mRGfzrWT&^IVm6-z6Judue5GBshP+ulB8D8vL*%w^85Y7
zP9?iXG(zf|^=&pRGY&VTl>?)B=KijLK=_bW5Q4Po6*$X<5_HK?pP`?*xqfwdwXPfF
z86PzBbfF>DHJ6P8o3y)A&znnTt@Oay6HTnP`ZuufsVT3z@`l@tj;sEIly9m=h@8nn
ziELF**mb&cRBXwGdqOgIj-JrZS4`gDtvLF=dKE?s`jUN;Yi#Q15a5d~izpq@^UO&T
z4*n;cNs&h5M~3^|XZ**hXIZG6tiIc~F5(gDYTknwp%7DY(J;3neH_<OGU<pa^rPB&
z?t;)Tw}s52B4g(T6G|fT!@;(<E9kHk+3AJ;NkWF?y#XQTN=uglu8k~HbFC>H>(mAj
zE;XfCeS6^?<1n!oM=)wp2a?+&SBxV0;>08;gao8v78p3<$IQkq9<t*X7opgypSlG7
z9d9}*MBq7xe||ySkrE<z)bdHzmxX(qvAudEPWR{OZiqnsSj_^>h96}k;k79GWe3WH
z5T4W3F#!IrdL$EbVseIMn^(uk%rxkT*8EZ~8dF_{Hc1?{oL=f^adnav0*1zFd+|x8
z>*hj4@83J&)M+OE9QrZBp8iK%|GbU6Rz+_*fU@7p8IHfvan$i4zdL-8H#`@>l31}k
zj46o!pk(AOK1?CO(Lc~<OtLrK%}a-fd}Eo(YUsGwlj$3dMh|90jR+o#M#)h0dA8kH
ze43<%h&Ph<u0^IO)!UZe7`N;%?Z7UAxAi@+;`Hm(oTarq?|!Qp8>1Bk!!%MZ7x`I!
zuZB!oHzlG#@`i0b|Mn^n^wSR+>So0J_%W1LjleZ2iciKcy{A%2!N8h`Fvu8^#3<(f
zehMLpkp`ag_q%g@z49B9E%-IcKTA02u`J73=k~BEg{hpdbQ#HVE^n<YcNnsK$J@Lr
zQ2XyGi7_Myt~LLK02265tqra<wa6%i1Z96?6K+Eml0JanZUo~_<mQ9qHEnjv?bmO9
zYJ+%&3wSG-7y;ed1Fk;kqKe7CXY-2ciks#|3JRB9!Z!9CM&zd#E#G!q6M%=PLdZtp
zx-R-z)ma;$Z)S)nrJs=l=~_q|KH+^xdNUsZFjbG)S=n;I@#pn{^8i9kJ|Q~Hxi_d3
z)*rV+d2uL@RzS}O$VSOnKdO?1Noes44Ke&Y&%s@ruQ7pU46ba*sxaw4yxa&pOLR}s
z)YX)F{-1}oyf+6w9ZhQAQs}WcwB>5T<FH)@s5ti$^tPk;<pe|I+_4R=B^!~zxCw%G
z*Fh_W{S*>7{pap6YVSrP9K-D}h5IGg)!q$dZR@FMdeQAM_2MOkV#>(y5i9^@sB|=@
ztD~C(V7RDo-}vj{l*;1LJCe%aPv6vvmE4@#EGs@tdRwW!@j4h5hq;?_u#L>yNt_Z;
znNal9&dk28YCL?)+or$dfD}#$j~?n@5~u9{B9M@fP;~CtB*8E}hTWk!plIAe*40I>
zqd-4~7wY+3h!KnAYq=CUsHr_}Mq=$Pe%ZhIhnVXSo+3UO^;x9oNY}`*rlj&!O7G)P
zL^xC6FqJmCBBk-)%zZ|xEewu?_3VeS_^A4^8HkNT=!IDIce9#r%}5|@ri7t)aZEEK
z{}R4wS&o%>ae;WewGLlNu|02-#UXvdCWR((?=<$Spg({m%akJ%&!ag8Gz@j@iNU%#
zosBX34tccJ?vZMS(~R+8y9j7Dzi+%7T_i1#GL%q};4Nh#>Lv>VkSP60F(7vJ;usy{
z@30F>Scl1v9MRnVFXnXAGvA<A8DQalh1j<PaGCC6;vTlae{@7qc;Q1x?JVNESQv5z
z1eIRLaq_RhO(2j`P%mZss&-?>Br{~?aVjM#x@w%r6(C}nI%*L9iv)5N{-5XvDF^lq
z1Pw<@DRuPsNdF?|Zz^qJDDe{p&91|Zvi^%8d9A%+$g%iY*j`f6t}X;MI+H;_VXNVj
zCO_yXkr#q^|9A`GtRGw=QKF<W!GTXk?_`;oUP9$p&3W+PUq>LE^0uo4u<J)z=c>W}
z0ZyC&zAjer&&9oX@<}pt3g5C&+A^n&DKN0(HVqLcL<XMnVn04fxGJo`T}4nZnw?QF
zg!@?I!wjrJrIFTfCE!EwvRL~<TP+wy6JBA<cB#prtJ7Fkb}mY(MuS@0v?1emB&341
zY}lmQUiPM1k*@UQreW!5aXu+6Ic<>Dh~|O!j|?{5Cz(P4w}|jwpR6Y&U;L{P0_~fY
zkBnly%CWy#<?H%BOM8m7?SB55IHkUyCM={Q0da&W4ATLpBdGd?gfjFEe^vYjItjv?
z{%Bp)nBImsYkjt!Xl!n&8ghn}*0S4uJU;&XDh;s>WX1~nXAEQE;EWqsvdWg`bR#$&
z(dPO!H+wOp^6~iJzp%%+M7uq5BSav($94!<+F%bHj@x5Ko+a{OqOoOTu>43d&N#@_
zW}-3i;Lp(S?9k4_sqd2+)7zje!0Nr>Q_j6l&3)4MW)=>8s>6Qi&Td_|OxYL-B@K+{
z96p+A9^Qm$3fSyACU_X>>qpwpo^v3MJyywaP|dPKHXgHKqMyA7^z@mtmZo&gN7t}`
zl52d5vX5bn0OMeuPf?ijqxc()b0hvsN-jAJqE>mut-@cF_=l<NXrlKUrdF-duA_*S
z=FlDg_mn7h)y}q@4cA#~Dbc|>Cbrw?lhf$G6@(1W=fuX`q(Oz%`+7zkQo&9A#<q_B
z-}_!9)*Ev5J!CjZcRRB&;+)5~e)*S5$)i#t6qBHvn~n2$XGY0d&vBl2o+wwe`<|~j
z{jDMm`Sx3=CsJc17_bK;_26nQ(6?RlEW6SZT817{i{{9I09%Wku$^xiI;9N5R2;C>
zdW(bNRy{?YckAM%4ePO&at2K_?`xz&e*d8ZDncP)UrfG0WrKkE5|_KfEFMz}U)ra-
zKOXYi?Vuob$u=2b2aDbex}bB-jLCF<1VroRtjQH|Vr0;O0`h<Lw6JHnS!H(M$s6Wa
zhA)XRyrfo=Sb?A7P!XGEVKGApxY6lFAKQ~B$Lf$ldvnSm#+i_JsIdg7=Ahg&aURT+
z;RsuWlNc(JK;kGwUop|G7o%5&o&TQahldGG8KlP;WeIqpue2FVV#C@k&Ju8*E?Yj*
z7nkocIq#l%469Lg^4H{cO}+3+1oHjPs>sJ*4>At&cZ3!N1y?G|OBu3!A0C*Is{E?-
zn7TbZ=eQsCbi>e0)oVK`C?OfZrN7FQVCs+Wg|R~`OTgK&2U1+&feuT=Z9f>OfjTwZ
zZW_6M^U^3kIAW4xB~@d}ct<l3F680c9e-q4;F&YB8nSQJS6Dpx0e6Hcbvz<*6VYyC
z%JdH>I}%0hrGf>>p~ubSaJS#WG5l!~K{@U)CAr_;eTb3zBP065{7<tTFBMSL<v?B_
z-`)x&{tC||kDgJ`$NO$jkp-Fn7$y{lUJ1m=U4PMws2lt6UBu;`Q*m2XqwvhzqOy;)
z)E~Zh3%bAqDrxf^NC@%fpN<tk-K~lBAcoe7`5r92+I2>}n41q?{;TT{mRlmJTd(m$
zZ{57&=#LGj_S{^&W|+u2s3s+CW6(3b!!x0{rLunp2pPss+f?T7>;JlSAb=wG<WW98
zxY17zh-$F|2QJ>`ZaEN(q`OOI>1(}3EjW<FMAnBBl2a%@Fu)+QyU;ry>`xd42MU;>
z5hW*~V1Z~9pCM^XWM*KiGALGKOOxb(yQ~;adYiQmdQKx=0|sPjAeiGX8#!a1zehO^
z<+EGz-cRz6Vq8V_4=(hjjQS!Up0i&LxVO##q*0eLg5OX!B7(wc4V6CVNCDeHioJgd
z#7%Z;N#8f;?k67lt?CPE?J`xCtg0^gS>)Dw5%0FEUAfbo?gn~a4~gBYo(#DV)hx@a
z2$Jd%J^zG4V!|&6N?`o-XT#=*PBB&Dz{BjD5W@`OuPM6Qooi$D&oKxz(-7fV#C08^
zOI>4cG_2vFNO(J1|L)ythvb&yxYj!_<vJDupA9TLI!pv*5*gGPDD|D6it|UZnxg>x
zJmKIo*anr_2RSeyj2R}M3Lbopmcx$9$7e?DcO!Oy3q}avZhT^yw&iu$O3EFkOF>~~
z5dL`*Ek|IM@`C{544oMnF9$rRP9-MaR6cmm<{LFk7zqwx@o5=CGXt%Zfp7jfILm=R
z`xz6PguWX{Kq)~P;-~|9m|P17{9SZdG(A1OIB5l8cu1UF6)`-<C0Z_JC0J&V9&kb!
zDI99xvtv38Eu@E)ENvTsLK}WT0ZXV%%NsFrABdtfSzyb8&{xT979&UiAH9(;Mu_|-
zAV4|{obwXAFbo|eurLRS4<kt%#8~%z8;~@siD7V&XOW0S+0_PoRR-aiO*$&VV!_=B
zaIJh2WWbq9PO)v5Imiy5S3$Y-O(PUIfDBlS3ri|cckeVE<&9r^MU`s(g6FY>3;>@?
YX*$0ZDAKY!0w7+>3h(6WWGzGg4<q)gpa1{>

diff --git a/doc/user/group/epics/manage_epics.md b/doc/user/group/epics/manage_epics.md
index 530bb1d515e..2133d5dfa57 100644
--- a/doc/user/group/epics/manage_epics.md
+++ b/doc/user/group/epics/manage_epics.md
@@ -151,41 +151,6 @@ To update multiple epics at the same time:
 1. Select the appropriate fields and their values from the sidebar.
 1. Select **Update selected**.
 
-### Open epics in a drawer
-
-{{< details >}}
-
-- Offering: GitLab Self-Managed
-
-{{< /details >}}
-
-{{< history >}}
-
-- [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/464063) in GitLab 17.4 [with a flag](../../../administration/feature_flags/_index.md) named `issues_list_drawer`. Disabled by default.
-- Feature flag [changed](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/170066) from `issues_list_drawer` to `epics_list_drawer` in GitLab 17.6.
-
-{{< /history >}}
-
-{{< alert type="flag" >}}
-
-The availability of this feature is controlled by a feature flag.
-For more information, see the history.
-This feature is available for testing, but not ready for production use.
-
-{{< /alert >}}
-
-When this feature is enabled, when you select an epic from the list or epic board, it opens in a drawer.
-You can then edit the epic or create comments.
-
-To open the epic in full view, either:
-
-- Open the epic in a new tab. From the list of epics, you can either:
-  - Right-click the epic and open it in a new browser tab.
-  - Hold <kbd>Cmd</kbd> or <kbd>Ctrl</kbd> and select the epic.
-- From the drawer, in the top-left corner, select **Open in full view**.
-
-![Epic opened in a drawer.](img/epic_drawer_v17_4.png)
-
 ## Prevent truncating descriptions with "Read more"
 
 {{< history >}}
@@ -429,6 +394,54 @@ the epic's [confidentiality status](#make-an-epic-confidential):
 - Confidential epic (regardless of group visibility): You must have at least the Planner
   role for the group.
 
+### Open epics in a drawer
+
+{{< history >}}
+
+- [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/464698) in GitLab 17.4 [with a flag](../../../administration/feature_flags/_index.md) named `work_item_view_for_issues`. Enabled by default.
+- Ability to toggle between drawer and full page view [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/536620) in GitLab 18.2.
+
+{{< /history >}}
+
+{{< alert type="flag" >}}
+
+The availability of this feature is controlled by a feature flag.
+For more information, see the history.
+
+{{< /alert >}}
+
+When you select an epic from the Epics page or an epic board, it opens in a drawer.
+You can then view and edit its details without losing context of the epic list or board.
+
+When using the drawer:
+
+- Select an epic from the list to open it in the drawer.
+- The drawer appears on the right side of the screen.
+- You can edit the epic directly in the drawer.
+- To close the drawer, select the close icon ({{< icon name="close" >}}) or press **Escape**.
+
+#### Open an epic in full page view
+
+To open an epic in the full page view:
+
+- Open the epic in a new tab. From the list of epics, either:
+  - Right-click the epic and open it in a new browser tab.
+  - Hold <kbd>Cmd</kbd> or <kbd>Ctrl</kbd> and select the epic.
+- Select an epic, and from the drawer, in the top-left corner, select **Open in full page** ({{< icon name="maximize" >}}).
+
+#### Set preference whether to open epics in a drawer
+
+To configure how epics open on the Epics page:
+
+1. On the left sidebar, select **Search or go to** and find your group.
+1. Select **Plan > Epics**.
+1. In the top right corner, select **Display options** ({{< icon name="preferences" >}}).
+1. Toggle **Open items in side panel**:
+   - **On** (default): Epics open in a drawer overlay.
+   - **Off**: Epics open in a full page view.
+
+Your preference is saved and remembered across all your sessions and devices.
+
 ### Cached epic count
 
 The total count of open epics displayed in the sidebar is cached if higher
diff --git a/doc/user/packages/container_registry/build_and_push_images.md b/doc/user/packages/container_registry/build_and_push_images.md
index bc5f8524587..c87f0d65d6e 100644
--- a/doc/user/packages/container_registry/build_and_push_images.md
+++ b/doc/user/packages/container_registry/build_and_push_images.md
@@ -157,16 +157,15 @@ build:
     - docker push $IMAGE_TAG
 ```
 
-In this example, `$CI_REGISTRY_IMAGE` resolves to the address of the registry tied
-to this project. `$CI_COMMIT_REF_NAME` resolves to the branch or tag name, which
-can contain forward slashes. Image tags can't contain forward slashes. Use
-`$CI_COMMIT_REF_SLUG` as the image tag. You can declare the variable, `$IMAGE_TAG`,
-combining `$CI_REGISTRY_IMAGE` and `$CI_COMMIT_REF_NAME` to save some typing in the
-`script` section.
+In the previous example:
 
-This example splits the tasks into 4 pipeline stages, including two tests that run in parallel. The `build` is stored in the container
-registry and used by subsequent stages, downloading the container image when needed. Changes to `main` also get tagged as
-`latest` and deployed using an application-specific deploy script:
+- `$CI_REGISTRY_IMAGE` resolves to the address of the registry tied
+to this project.
+- `$IMAGE_TAG` is a custom variable that combines the registry address with `$CI_COMMIT_REF_SLUG`, the image tag. The [`$CI_COMMIT_REF_NAME` predefined variable](../../../ci/variables/predefined_variables.md#predefined-variables) resolves to the branch or tag name and can contain forward slashes. Image tags cannot contain forward slashes. Use `$CI_COMMIT_REF_SLUG` instead.
+
+The following example splits CI/CD tasks into four pipeline stages, including two tests that run in parallel.
+
+The `build` is stored in the container registry and used by subsequent stages that download the container image when needed. When you push changes to the `main` branch, the pipeline tags the image as `latest` and deploys it using an application-specific deploy script:
 
 ```yaml
 default:
@@ -227,8 +226,8 @@ deploy:
 
 {{< alert type="note" >}}
 
-This example explicitly calls `docker pull`. If you prefer to implicitly pull the container image using `image:`,
+The previous example explicitly calls `docker pull`. If you prefer to implicitly pull the container image using `image:`,
 and use either the [Docker](https://docs.gitlab.com/runner/executors/docker.html) or [Kubernetes](https://docs.gitlab.com/runner/executors/kubernetes/) executor,
-make sure that [`pull_policy`](https://docs.gitlab.com/runner/executors/docker.html#how-pull-policies-work) is set to `always`.
+make sure that [`pull_policy`](https://docs.gitlab.com/runner/executors/docker.html#set-the-always-pull-policy) is set to `always`.
 
 {{< /alert >}}
diff --git a/doc/user/project/issues/issue_work_items.md b/doc/user/project/issues/issue_work_items.md
index a76cffbf4da..33c562e1acf 100644
--- a/doc/user/project/issues/issue_work_items.md
+++ b/doc/user/project/issues/issue_work_items.md
@@ -42,12 +42,15 @@ Find a bug or have a request? Leave feedback in [issue 523713](https://gitlab.co
 
 The new issues experience includes these improvements:
 
-- **Drawer view**: When you open an issue from the issue list, board, or child or linked item list, the issue opens in a
+- **Drawer view**: When you open an issue from the issue list, the issue opens in a
   drawer without leaving the current page.
   The drawer provides a complete view of the issue.
+
   To view the full page instead, either:
   1. Select **View in full page** at the top of the drawer.
   1. Open the link in a new tab.
+
+  To always open issues in the full page view on the Epics page, in the top right corner, select **Display options** ({{< icon name="preferences" >}}) and turn off the **Open items in side panel** toggle.
 - **Issue controls**: All issue controls, including confidentiality settings, are now in the top actions menu.
   This menu stays visible as you scroll through the page.
 - **Redesigned sidebar**: The sidebar is now embedded in the page, similar to merge requests and epics.
diff --git a/doc/user/workspace/_index.md b/doc/user/workspace/_index.md
index 912f6cd378c..5275246564f 100644
--- a/doc/user/workspace/_index.md
+++ b/doc/user/workspace/_index.md
@@ -416,6 +416,29 @@ see [Create a custom workspace image that supports arbitrary user IDs](create_im
 For more information, see the
 [OpenShift documentation](https://docs.openshift.com/container-platform/4.12/openshift_images/create-images.html#use-uid_create-images).
 
+## Shallow cloning
+
+{{< history >}}
+
+- [Introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/543982) in GitLab 18.2 [with a flag](../../administration/feature_flags/_index.md) named `workspaces_shallow_clone_project`. Disabled by default.
+
+{{< /history >}}
+
+{{< alert type="flag" >}}
+
+The availability of this feature is controlled by a feature flag.
+For more information, see the history.
+This feature is available for testing, but not ready for production use.
+
+{{< /alert >}}
+
+When you create a workspace, GitLab uses shallow cloning to improve performance.
+A shallow clone downloads only the latest commit history instead of the complete Git history,
+which significantly reduces the initial clone time for large repositories.
+
+After the workspace starts, Git converts the shallow clone to a full clone in the background.
+This process is transparent and doesn't affect your development workflow.
+
 ## Related topics
 
 - [Troubleshooting Workspaces](workspaces_troubleshooting.md)
diff --git a/lib/gitlab/topology_service_client/base_service.rb b/lib/gitlab/topology_service_client/base_service.rb
index 2ff7ae8e96f..b0f9fcf7d71 100644
--- a/lib/gitlab/topology_service_client/base_service.rb
+++ b/lib/gitlab/topology_service_client/base_service.rb
@@ -23,9 +23,11 @@ module Gitlab
       end
 
       def service_credentials
-        config = Gitlab.config.cell.topology_service_client
+        return :this_channel_is_insecure unless topology_service_config.tls.enabled
 
-        ca_file, key_file, cert_file = config.values_at('ca_file', 'private_key_file', 'certificate_file')
+        ca_file, key_file, cert_file = topology_service_config.values_at(
+          'ca_file', 'private_key_file', 'certificate_file'
+        )
 
         return GRPC::Core::ChannelCredentials.new unless key_file && cert_file
         return GRPC::Core::ChannelCredentials.new unless File.exist?(key_file) && File.exist?(cert_file)
@@ -38,12 +40,16 @@ module Gitlab
       end
 
       def topology_service_address
-        Gitlab.config.cell.topology_service_client.address
+        topology_service_config.address
       end
 
       def enabled?
         Gitlab.config.cell.enabled
       end
+
+      def topology_service_config
+        @topology_service_config ||= Gitlab.config.cell.topology_service_client
+      end
     end
   end
 end
diff --git a/qa/qa/specs/features/browser_ui/14_analytics/service_ping_default_enabled_spec.rb b/qa/qa/specs/features/browser_ui/14_analytics/service_ping_default_enabled_spec.rb
index 65fc7af76b0..af07d4c86b3 100644
--- a/qa/qa/specs/features/browser_ui/14_analytics/service_ping_default_enabled_spec.rb
+++ b/qa/qa/specs/features/browser_ui/14_analytics/service_ping_default_enabled_spec.rb
@@ -3,7 +3,7 @@
 module QA
   RSpec.describe 'Analytics' do
     describe 'Service ping default checked', product_group: :analytics_instrumentation do
-      context 'when using default gitlab.yml config', :requires_admin do
+      context 'when using default gitlab.yml config', :requires_admin, :skip_live_env do
         before do
           Flow::Login.sign_in_as_admin
 
diff --git a/rubocop/cop/gitlab/const_get_inherit_false.rb b/rubocop/cop/gitlab/const_get_inherit_false.rb
index 16fbfe89f0b..1b64b70de19 100644
--- a/rubocop/cop/gitlab/const_get_inherit_false.rb
+++ b/rubocop/cop/gitlab/const_get_inherit_false.rb
@@ -22,10 +22,10 @@ module RuboCop
 
           add_offense(node.loc.selector) do |corrector|
             if arg = second_argument(node)
-              corrector.replace(arg.source_range, 'false')
+              corrector.replace(arg, 'false')
             else
               first_argument = node.first_argument
-              corrector.insert_after(first_argument.source_range, ', false')
+              corrector.insert_after(first_argument, ', false')
             end
           end
         end
diff --git a/rubocop/cop/gitlab/documentation_links/link.rb b/rubocop/cop/gitlab/documentation_links/link.rb
index 09acce362a3..c9d10fb9ff6 100644
--- a/rubocop/cop/gitlab/documentation_links/link.rb
+++ b/rubocop/cop/gitlab/documentation_links/link.rb
@@ -110,7 +110,7 @@ module RuboCop
                 path_without_extension = path_without_anchor.gsub(/#{extension_pattern}$/, '')
                 arg_with_md_extension = path.gsub(/#{path_without_extension}#{extension_pattern}(\#.+)?$/,
                   "#{path_without_extension}.md\\2")
-                corrector.replace(node.first_argument.source_range, "'#{arg_with_md_extension}'")
+                corrector.replace(node.first_argument, "'#{arg_with_md_extension}'")
               end
               path_without_anchor += ".md"
             end
diff --git a/rubocop/cop/gitlab/http_v2.rb b/rubocop/cop/gitlab/http_v2.rb
index 001bd4d184e..0a84558a95e 100644
--- a/rubocop/cop/gitlab/http_v2.rb
+++ b/rubocop/cop/gitlab/http_v2.rb
@@ -34,7 +34,7 @@ module RuboCop
 
             replacement = "Gitlab::HTTP.#{method_name}(#{arg_nodes.map(&:source).join(', ')})"
 
-            corrector.replace(node.source_range, replacement)
+            corrector.replace(node, replacement)
           end
         end
       end
diff --git a/rubocop/cop/gitlab/httparty.rb b/rubocop/cop/gitlab/httparty.rb
index ab5dfd23f56..d1c483f737a 100644
--- a/rubocop/cop/gitlab/httparty.rb
+++ b/rubocop/cop/gitlab/httparty.rb
@@ -35,11 +35,11 @@ module RuboCop
 
               replacement = "Gitlab::HTTP.#{method_name}(#{arg_nodes.map(&:source).join(', ')})"
 
-              corrector.replace(node.source_range, replacement)
+              corrector.replace(node, replacement)
             end
           elsif includes_httparty?(node)
             add_offense(node, message: MSG_INCLUDE) do |corrector|
-              corrector.remove(node.source_range)
+              corrector.remove(node)
             end
           end
         end
diff --git a/rubocop/cop/gitlab/json.rb b/rubocop/cop/gitlab/json.rb
index c178d583ae3..f462e71ca71 100644
--- a/rubocop/cop/gitlab/json.rb
+++ b/rubocop/cop/gitlab/json.rb
@@ -24,7 +24,7 @@ module RuboCop
           add_offense(node) do |corrector|
             replacement = "#{cbased(node)}Gitlab::Json.#{method_name}(#{arg_source})"
 
-            corrector.replace(node.source_range, replacement)
+            corrector.replace(node, replacement)
           end
         end
 
diff --git a/rubocop/cop/inject_enterprise_edition_module.rb b/rubocop/cop/inject_enterprise_edition_module.rb
index 5ecb8baf82e..9813c5289ce 100644
--- a/rubocop/cop/inject_enterprise_edition_module.rb
+++ b/rubocop/cop/inject_enterprise_edition_module.rb
@@ -84,7 +84,7 @@ module RuboCop
       def corrector(node)
         ->(corrector) do
           corrector.insert_after(
-            node.source_range,
+            node,
             " # rubocop: disable #{cop_name}"
           )
         end
diff --git a/rubocop/cop/project_path_helper.rb b/rubocop/cop/project_path_helper.rb
index fdf452ccbae..69bd06b735a 100644
--- a/rubocop/cop/project_path_helper.rb
+++ b/rubocop/cop/project_path_helper.rb
@@ -29,7 +29,7 @@ module RuboCop
 
           replacement = "#{helper_name}(#{arguments.map(&:source).join(', ')})"
 
-          corrector.replace(node.source_range, replacement)
+          corrector.replace(node, replacement)
         end
       end
 
diff --git a/rubocop/cop/rspec/before_all.rb b/rubocop/cop/rspec/before_all.rb
index 3fbb9447bc6..06b4cbf96af 100644
--- a/rubocop/cop/rspec/before_all.rb
+++ b/rubocop/cop/rspec/before_all.rb
@@ -37,7 +37,7 @@ module Rubocop
 
           add_offense(node) do |corrector|
             replacement = 'before_all'
-            corrector.replace(node.source_range, replacement)
+            corrector.replace(node, replacement)
           end
         end
       end
diff --git a/rubocop/cop/rspec/factory_bot/inline_association.rb b/rubocop/cop/rspec/factory_bot/inline_association.rb
index edcc94dc837..29d7e1b4293 100644
--- a/rubocop/cop/rspec/factory_bot/inline_association.rb
+++ b/rubocop/cop/rspec/factory_bot/inline_association.rb
@@ -90,7 +90,7 @@ module RuboCop
               receiver = "#{receiver.source}." if receiver
               expression = "#{receiver}#{type}"
               replacement = node.source.sub(expression, REPLACEMENT)
-              corrector.replace(node.source_range, replacement)
+              corrector.replace(node, replacement)
             end
           end
 
diff --git a/rubocop/cop/rspec/have_gitlab_http_status.rb b/rubocop/cop/rspec/have_gitlab_http_status.rb
index 19b9f6d06d8..b86a8713463 100644
--- a/rubocop/cop/rspec/have_gitlab_http_status.rb
+++ b/rubocop/cop/rspec/have_gitlab_http_status.rb
@@ -93,7 +93,7 @@ module RuboCop
         def corrector(node)
           ->(corrector) do
             replacement = replace_matcher(node) || replace_response_status(node)
-            corrector.replace(node.source_range, replacement) if node.source_range.source != replacement
+            corrector.replace(node, replacement) if node.source != replacement
           end
         end
 
diff --git a/spec/features/admin/users/users_spec.rb b/spec/features/admin/users/users_spec.rb
index ac7b5f0dd7a..aac89e6710c 100644
--- a/spec/features/admin/users/users_spec.rb
+++ b/spec/features/admin/users/users_spec.rb
@@ -436,7 +436,7 @@ RSpec.describe 'Admin::Users', :with_current_organization, feature_category: :us
       let_it_be(:user_username) { 'Bing bang' }
 
       it "doesn't create the user and shows an error message" do
-        expect { click_button 'Create user' }.to change { User.count }.by(0)
+        expect { click_button 'Create user' }.not_to change { User.count }
 
         expect(page).to have_content('The form contains the following error')
         expect(page).to have_content('Username can contain only letters, digits')
diff --git a/spec/features/boards/board_filters_spec.rb b/spec/features/boards/board_filters_spec.rb
index 0260aa1ec04..d620c3631d9 100644
--- a/spec/features/boards/board_filters_spec.rb
+++ b/spec/features/boards/board_filters_spec.rb
@@ -142,7 +142,10 @@ RSpec.describe 'Issue board filters', :js, feature_category: :team_planning do
         expect(dropdown_nodes[4]).to have_content(milestone_2.title)
         expect(dropdown_nodes.last).to have_content(milestone_1.title)
 
-        click_on milestone_1.title
+        within('.gl-filtered-search-suggestion-list') do
+          click_on milestone_1.title
+        end
+
         filter_submit.click
 
         expect(find('[data-testid="board-list"]:nth-child(1)')).to have_selector('.board-card', count: 1)
diff --git a/spec/frontend/homepage/components/mocks/work_items_widget_metadata_query_mocks.js b/spec/frontend/homepage/components/mocks/work_items_widget_metadata_query_mocks.js
new file mode 100644
index 00000000000..69b49171fc2
--- /dev/null
+++ b/spec/frontend/homepage/components/mocks/work_items_widget_metadata_query_mocks.js
@@ -0,0 +1,49 @@
+export const withItems = {
+  data: {
+    currentUser: {
+      id: 'gid://gitlab/User/1',
+      assigned: {
+        count: 5,
+        nodes: [
+          {
+            id: 'gid://gitlab/WorkItem/20',
+            updatedAt: '2025-06-27T19:25:04Z',
+            __typename: 'WorkItem',
+          },
+        ],
+        __typename: 'WorkItemConnection',
+      },
+      authored: {
+        count: 32,
+        nodes: [
+          {
+            id: 'gid://gitlab/WorkItem/619',
+            updatedAt: '2025-06-25T15:52:05Z',
+            __typename: 'WorkItem',
+          },
+        ],
+        __typename: 'WorkItemConnection',
+      },
+      __typename: 'CurrentUser',
+    },
+  },
+};
+
+export const withoutItems = {
+  data: {
+    currentUser: {
+      id: 'gid://gitlab/User/1',
+      assigned: {
+        count: 0,
+        nodes: [],
+        __typename: 'WorkItemConnection',
+      },
+      authored: {
+        count: 0,
+        nodes: [],
+        __typename: 'WorkItemConnection',
+      },
+      __typename: 'CurrentUser',
+    },
+  },
+};
diff --git a/spec/frontend/homepage/components/work_items_widget_spec.js b/spec/frontend/homepage/components/work_items_widget_spec.js
index 8e0d1884fee..b081f05f8ce 100644
--- a/spec/frontend/homepage/components/work_items_widget_spec.js
+++ b/spec/frontend/homepage/components/work_items_widget_spec.js
@@ -1,17 +1,42 @@
+import Vue from 'vue';
+import VueApollo from 'vue-apollo';
 import { GlLink } from '@gitlab/ui';
 import { shallowMountExtended } from 'helpers/vue_test_utils_helper';
+import waitForPromises from 'helpers/wait_for_promises';
+import createMockApollo from 'helpers/mock_apollo_helper';
+import { useFakeDate } from 'helpers/fake_date';
 import WorkItemsWidget from '~/homepage/components/work_items_widget.vue';
+import workItemsWidgetMetadataQuery from '~/homepage/graphql/queries/work_items_widget_metadata.query.graphql';
+import { withItems, withoutItems } from './mocks/work_items_widget_metadata_query_mocks';
 
 describe('WorkItemsWidget', () => {
+  Vue.use(VueApollo);
+
   const MOCK_ASSIGNED_TO_YOU_PATH = '/assigned/to/you/path';
   const MOCK_AUTHORED_BY_YOU_PATH = '/authored/to/you/path';
+  const MOCK_CURRENT_TIME = new Date('2025-06-29T18:13:25Z');
+
+  useFakeDate(MOCK_CURRENT_TIME);
+
+  const workItemsWidgetMetadataQueryHandler = (data) => jest.fn().mockResolvedValue(data);
 
   let wrapper;
 
   const findGlLinks = () => wrapper.findAllComponents(GlLink);
+  const findAssignedCount = () => wrapper.findByTestId('assigned-count');
+  const findAssignedLastUpdatedAt = () => wrapper.findByTestId('assigned-last-updated-at');
+  const findAuthoredCount = () => wrapper.findByTestId('authored-count');
+  const findAuthoredLastUpdatedAt = () => wrapper.findByTestId('authored-last-updated-at');
 
-  function createWrapper() {
+  function createWrapper({ workItemsWidgetMetadataQueryMock = withItems } = {}) {
+    const mockApollo = createMockApollo([
+      [
+        workItemsWidgetMetadataQuery,
+        workItemsWidgetMetadataQueryHandler(workItemsWidgetMetadataQueryMock),
+      ],
+    ]);
     wrapper = shallowMountExtended(WorkItemsWidget, {
+      apolloProvider: mockApollo,
       propsData: {
         assignedToYouPath: MOCK_ASSIGNED_TO_YOU_PATH,
         authoredByYouPath: MOCK_AUTHORED_BY_YOU_PATH,
@@ -38,4 +63,36 @@ describe('WorkItemsWidget', () => {
       expect(link.text()).toBe('Authored by you');
     });
   });
+
+  describe('metadata', () => {
+    it('does not show any metadata until the query has resolved', () => {
+      createWrapper();
+
+      expect(findAssignedCount().exists()).toBe(false);
+      expect(findAssignedLastUpdatedAt().exists()).toBe(false);
+      expect(findAuthoredCount().exists()).toBe(false);
+      expect(findAuthoredLastUpdatedAt().exists()).toBe(false);
+    });
+
+    it('shows the metadata once the query has resolved', async () => {
+      createWrapper();
+      await waitForPromises();
+
+      expect(findAssignedCount().text()).toBe('5');
+      expect(findAssignedLastUpdatedAt().text()).toBe('1 day ago');
+      expect(findAuthoredCount().text()).toBe('32');
+      expect(findAuthoredLastUpdatedAt().text()).toBe('4 days ago');
+    });
+
+    it('shows partial metadata when the user has no relevant items', async () => {
+      createWrapper({ workItemsWidgetMetadataQueryMock: withoutItems });
+      await waitForPromises();
+
+      expect(findAssignedLastUpdatedAt().exists()).toBe(false);
+      expect(findAuthoredLastUpdatedAt().exists()).toBe(false);
+
+      expect(findAssignedCount().text()).toBe('0');
+      expect(findAuthoredCount().text()).toBe('0');
+    });
+  });
 });
diff --git a/spec/frontend/lib/utils/websocket_utils_spec.js b/spec/frontend/lib/utils/websocket_utils_spec.js
new file mode 100644
index 00000000000..c907ce8f8ea
--- /dev/null
+++ b/spec/frontend/lib/utils/websocket_utils_spec.js
@@ -0,0 +1,251 @@
+import { createWebSocket, parseMessage, closeSocket } from '~/lib/utils/websocket_utils';
+
+const TEST_URL = 'ws://test.com';
+const INVALID_INPUTS = [
+  ['null', null],
+  ['undefined', undefined],
+  ['object without required method', { someOtherMethod: jest.fn() }],
+];
+global.WebSocket = jest.fn();
+
+global.WebSocket.CONNECTING = 0;
+global.WebSocket.OPEN = 1;
+global.WebSocket.CLOSING = 2;
+global.WebSocket.CLOSED = 3;
+
+const createAndConnectSocket = (url = TEST_URL, handlers = {}) => {
+  const connection = createWebSocket(url, handlers);
+  connection.connect();
+  return connection;
+};
+
+describe('WebSocket Utils', () => {
+  let mockWebSocket;
+
+  beforeEach(() => {
+    jest.clearAllMocks();
+
+    mockWebSocket = {
+      readyState: global.WebSocket.CONNECTING,
+      send: jest.fn(),
+      close: jest.fn(),
+      onopen: null,
+      onmessage: null,
+      onclose: null,
+      onerror: null,
+    };
+
+    global.WebSocket.mockImplementation(() => mockWebSocket);
+  });
+
+  describe('createWebSocket', () => {
+    describe('initialization', () => {
+      it('should create connection object with default handlers', () => {
+        const connection = createWebSocket(TEST_URL);
+
+        expect(connection).toHaveProperty('connect');
+        expect(connection).toHaveProperty('send');
+        expect(connection).toHaveProperty('isConnected');
+        expect(connection).toHaveProperty('isConnecting');
+        expect(connection).toHaveProperty('close');
+
+        expect(typeof connection.connect).toBe('function');
+        expect(typeof connection.send).toBe('function');
+        expect(typeof connection.isConnected).toBe('function');
+        expect(typeof connection.isConnecting).toBe('function');
+        expect(typeof connection.close).toBe('function');
+      });
+
+      it('should create WebSocket instance when connect is called', () => {
+        createAndConnectSocket();
+
+        expect(global.WebSocket).toHaveBeenCalledWith(TEST_URL);
+        expect(global.WebSocket).toHaveBeenCalledTimes(1);
+      });
+    });
+
+    describe('event handlers', () => {
+      it('should call custom event handlers when WebSocket events occur', () => {
+        const mockOnOpen = jest.fn();
+        const mockOnMessage = jest.fn();
+        createAndConnectSocket(TEST_URL, {
+          onOpen: mockOnOpen,
+          onMessage: mockOnMessage,
+        });
+
+        mockWebSocket.onopen({ type: 'open' });
+        expect(mockOnOpen).toHaveBeenCalledTimes(1);
+        expect(mockOnOpen).toHaveBeenCalledWith({ type: 'open' });
+
+        const messageEvent = { type: 'message', data: 'test message' };
+        mockWebSocket.onmessage(messageEvent);
+        expect(mockOnMessage).toHaveBeenCalledTimes(1);
+        expect(mockOnMessage).toHaveBeenCalledWith(messageEvent);
+      });
+
+      it('should call onError and onClose handlers', () => {
+        const mockOnError = jest.fn();
+        const mockOnClose = jest.fn();
+        createAndConnectSocket(TEST_URL, {
+          onError: mockOnError,
+          onClose: mockOnClose,
+        });
+
+        const errorEvent = { type: 'error', message: 'Connection failed' };
+        mockWebSocket.onerror(errorEvent);
+        expect(mockOnError).toHaveBeenCalledTimes(1);
+        expect(mockOnError).toHaveBeenCalledWith(errorEvent);
+
+        const closeEvent = { type: 'close', code: 1000 };
+        mockWebSocket.onclose(closeEvent);
+        expect(mockOnClose).toHaveBeenCalledTimes(1);
+        expect(mockOnClose).toHaveBeenCalledWith(closeEvent);
+      });
+
+      it('should call onError handler when WebSocket constructor throws', () => {
+        const mockOnError = jest.fn();
+
+        const constructorError = new Error('WebSocket constructor failed');
+        global.WebSocket.mockImplementation(() => {
+          throw constructorError;
+        });
+        createAndConnectSocket(TEST_URL, { onError: mockOnError });
+
+        expect(mockOnError).toHaveBeenCalledTimes(1);
+        expect(mockOnError).toHaveBeenCalledWith(constructorError);
+      });
+    });
+
+    describe('connection state', () => {
+      describe('isConnected', () => {
+        it.each([
+          [global.WebSocket.CONNECTING, false],
+          [global.WebSocket.OPEN, true],
+          [global.WebSocket.CLOSING, false],
+          [global.WebSocket.CLOSED, false],
+        ])('should return %s when readyState is %s', (readyState, expected) => {
+          const connection = createAndConnectSocket();
+
+          mockWebSocket.readyState = readyState;
+          expect(connection.isConnected()).toBe(expected);
+        });
+      });
+
+      describe('isConnecting', () => {
+        it.each([
+          [global.WebSocket.CONNECTING, true],
+          [global.WebSocket.OPEN, false],
+          [global.WebSocket.CLOSING, false],
+          [global.WebSocket.CLOSED, false],
+        ])('should return %s when readyState is %s', (readyState, expected) => {
+          const connection = createAndConnectSocket();
+
+          mockWebSocket.readyState = readyState;
+          expect(connection.isConnecting()).toBe(expected);
+        });
+      });
+    });
+
+    describe('send', () => {
+      it('should send string message when connected', () => {
+        const connection = createAndConnectSocket();
+
+        mockWebSocket.readyState = global.WebSocket.OPEN;
+
+        connection.send('test message');
+
+        expect(mockWebSocket.send).toHaveBeenCalledTimes(1);
+        expect(mockWebSocket.send).toHaveBeenCalledWith('test message');
+      });
+
+      it('should stringify object message when connected', () => {
+        const connection = createAndConnectSocket();
+
+        mockWebSocket.readyState = global.WebSocket.OPEN;
+
+        const message = { type: 'test', data: 'value' };
+        connection.send(message);
+
+        expect(mockWebSocket.send).toHaveBeenCalledTimes(1);
+        expect(mockWebSocket.send).toHaveBeenCalledWith(JSON.stringify(message));
+      });
+
+      it('should not send message when not connected', () => {
+        const connection = createAndConnectSocket();
+
+        mockWebSocket.readyState = global.WebSocket.CONNECTING;
+
+        connection.send('test message');
+
+        expect(mockWebSocket.send).not.toHaveBeenCalled();
+      });
+    });
+    describe('close', () => {
+      it('should close socket when in OPEN state', () => {
+        const connection = createAndConnectSocket();
+
+        mockWebSocket.readyState = global.WebSocket.OPEN;
+        connection.close();
+
+        expect(mockWebSocket.close).toHaveBeenCalledTimes(1);
+      });
+
+      it('should close socket when in CONNECTING state', () => {
+        const connection = createAndConnectSocket();
+
+        mockWebSocket.readyState = global.WebSocket.CONNECTING;
+        connection.close();
+
+        expect(mockWebSocket.close).toHaveBeenCalledTimes(1);
+      });
+
+      it('should not close socket when in CLOSED state', () => {
+        const connection = createAndConnectSocket();
+
+        mockWebSocket.readyState = global.WebSocket.CLOSED;
+        connection.close();
+
+        expect(mockWebSocket.close).not.toHaveBeenCalled();
+      });
+    });
+
+    describe('parseMessage', () => {
+      it('should parse JSON string message', async () => {
+        const event = { data: '{"type": "test", "value": 123}' };
+        const result = await parseMessage(event);
+
+        expect(result).toEqual({ type: 'test', value: 123 });
+      });
+
+      it('should return null for invalid JSON', async () => {
+        const event = { data: 'invalid json' };
+        const result = await parseMessage(event);
+
+        expect(result).toBeNull();
+      });
+
+      it('should handle empty string', async () => {
+        const event = { data: '' };
+        const result = await parseMessage(event);
+
+        expect(result).toBeNull();
+      });
+    });
+  });
+
+  describe('closeSocket', () => {
+    it('should call close method when socket has close method', () => {
+      const mockSocket = {
+        close: jest.fn(),
+      };
+
+      closeSocket(mockSocket);
+
+      expect(mockSocket.close).toHaveBeenCalledTimes(1);
+    });
+
+    it.each(INVALID_INPUTS)('should not throw when socket is %s', (description, socket) => {
+      expect(() => closeSocket(socket)).not.toThrow();
+    });
+  });
+});
diff --git a/spec/frontend/notes/components/comment_form_spec.js b/spec/frontend/notes/components/comment_form_spec.js
index 374030bde28..9f45b0c9ffc 100644
--- a/spec/frontend/notes/components/comment_form_spec.js
+++ b/spec/frontend/notes/components/comment_form_spec.js
@@ -2,8 +2,6 @@ import { GlAlert } from '@gitlab/ui';
 import Autosize from 'autosize';
 import MockAdapter from 'axios-mock-adapter';
 import Vue, { nextTick } from 'vue';
-// eslint-disable-next-line no-restricted-imports
-import Vuex from 'vuex';
 import { PiniaVuePlugin } from 'pinia';
 import { createTestingPinia } from '@pinia/testing';
 import waitForPromises from 'helpers/wait_for_promises';
@@ -13,7 +11,6 @@ import {
   shallowMountExtended,
 } from 'helpers/vue_test_utils_helper';
 import { useLocalStorageSpy } from 'helpers/local_storage_helper';
-import batchComments from '~/batch_comments/stores/modules/batch_comments';
 import { fetchUserCounts } from '~/super_sidebar/user_counts_fetch';
 import { createAlert } from '~/alert';
 import { STATUS_CLOSED, STATUS_OPEN } from '~/issues/constants';
@@ -24,13 +21,13 @@ import CommentForm from '~/notes/components/comment_form.vue';
 import * as constants from '~/notes/constants';
 import eventHub from '~/notes/event_hub';
 import { COMMENT_FORM } from '~/notes/i18n';
-import notesModule from '~/notes/stores/modules';
 import { sprintf } from '~/locale';
 import { mockTracking } from 'helpers/tracking_helper';
 import { detectAndConfirmSensitiveTokens } from '~/lib/utils/secret_detection';
 import { globalAccessorPlugin } from '~/pinia/plugins';
 import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
 import { useNotes } from '~/notes/store/legacy_notes';
+import { useBatchComments } from '~/batch_comments/store';
 import { loggedOutnoteableData, notesDataMock, userDataMock, noteableDataMock } from '../mock_data';
 
 jest.mock('autosize');
@@ -42,7 +39,6 @@ jest.mock('~/lib/utils/secret_detection', () => {
   };
 });
 
-Vue.use(Vuex);
 Vue.use(PiniaVuePlugin);
 
 describe('issue_comment_form component', () => {
@@ -65,26 +61,6 @@ describe('issue_comment_form component', () => {
   const findCommentButton = () => findCommentTypeDropdown().find('button');
   const findErrorAlerts = () => wrapper.findAllComponents(GlAlert).wrappers;
 
-  const createStore = ({ actions = { saveNote: jest.fn() }, state = {}, getters = {} } = {}) => {
-    const baseModule = notesModule();
-
-    return new Vuex.Store({
-      ...baseModule,
-      actions: {
-        ...baseModule.actions,
-        ...actions,
-      },
-      state: {
-        ...baseModule.state,
-        ...state,
-      },
-      getters: {
-        ...baseModule.getters,
-        ...getters,
-      },
-    });
-  };
-
   const createNotableDataMock = (data = {}) => {
     return {
       ...noteableDataMock,
@@ -116,12 +92,11 @@ describe('issue_comment_form component', () => {
     userData = userDataMock,
     features = {},
     mountFunction = shallowMountExtended,
-    store = createStore(),
     stubs = {},
   } = {}) => {
-    store.dispatch('setNoteableData', noteableData);
-    store.dispatch('setNotesData', notesData);
-    store.dispatch('setUserData', userData);
+    useNotes().setNoteableData(noteableData);
+    useNotes().setNotesData(notesData);
+    useNotes().setUserData(userData);
 
     wrapper = mountFunction(CommentForm, {
       propsData: {
@@ -132,7 +107,6 @@ describe('issue_comment_form component', () => {
           ...initialData,
         };
       },
-      store,
       pinia,
       provide: {
         glFeatures: features,
@@ -144,7 +118,8 @@ describe('issue_comment_form component', () => {
   beforeEach(() => {
     pinia = createTestingPinia({ plugins: [globalAccessorPlugin], stubActions: false });
     useLegacyDiffs();
-    useNotes();
+    useNotes().saveNote.mockResolvedValue();
+    useBatchComments();
     axiosMock = new MockAdapter(axios);
     trackingSpy = mockTracking(undefined, null, jest.spyOn);
     detectAndConfirmSensitiveTokens.mockReturnValue(true);
@@ -160,20 +135,17 @@ describe('issue_comment_form component', () => {
       const note = 'hello world';
 
       it('should request to save note when note is entered', async () => {
-        const store = createStore();
-        jest.spyOn(store, 'dispatch');
-        mountComponent({ mountFunction: mountExtended, initialData: { note }, store });
+        mountComponent({ mountFunction: mountExtended, initialData: { note } });
         expect(findCloseReopenButton().props('disabled')).toBe(false);
         expect(findMarkdownEditor().props('value')).toBe(note);
         await findCloseReopenButton().trigger('click');
         expect(findCloseReopenButton().props('disabled')).toBe(true);
         expect(findMarkdownEditor().props('value')).toBe('');
-        expect(store.dispatch).toHaveBeenLastCalledWith('saveNote', expect.objectContaining({}));
+        expect(useNotes().saveNote).toHaveBeenLastCalledWith(expect.objectContaining({}));
       });
 
       it('tracks event', async () => {
-        const store = createStore();
-        mountComponent({ mountFunction: mountExtended, initialData: { note }, store });
+        mountComponent({ mountFunction: mountExtended, initialData: { note } });
         await findCloseReopenButton().trigger('click');
         expect(trackingSpy).toHaveBeenCalledWith(undefined, 'save_markdown', {
           label: 'markdown_editor',
@@ -182,11 +154,9 @@ describe('issue_comment_form component', () => {
       });
 
       it('does not report errors in the UI when the save succeeds', async () => {
-        const store = createStore();
         mountComponent({
           mountFunction: mountExtended,
           initialData: { note: '/label ~sdfghj' },
-          store,
         });
         await findCommentButton().trigger('click');
         // findErrorAlerts().exists returns false if *any* wrapper is empty,
@@ -205,20 +175,15 @@ describe('issue_comment_form component', () => {
       `(
         'displays the correct errors ($errors) for a $httpStatus network response',
         async ({ errors, httpStatus }) => {
-          const store = createStore({
-            actions: {
-              saveNote: jest.fn().mockRejectedValue({
-                response: {
-                  status: httpStatus,
-                  data: { quick_actions_status: { error_messages: errors } },
-                },
-              }),
+          useNotes().saveNote.mockRejectedValue({
+            response: {
+              status: httpStatus,
+              data: { quick_actions_status: { error_messages: errors } },
             },
           });
           mountComponent({
             mountFunction: mountExtended,
             initialData: { note: '/label ~sdfghj' },
-            store,
           });
           await findCommentButton().trigger('click');
           await waitForPromises();
@@ -234,21 +199,15 @@ describe('issue_comment_form component', () => {
 
       describe('if response contains validation errors', () => {
         beforeEach(async () => {
-          const store = createStore({
-            actions: {
-              saveNote: jest.fn().mockRejectedValue({
-                response: {
-                  status: HTTP_STATUS_UNPROCESSABLE_ENTITY,
-                  data: { errors: 'error 1 and error 2' },
-                },
-              }),
+          useNotes().saveNote.mockRejectedValue({
+            response: {
+              status: HTTP_STATUS_UNPROCESSABLE_ENTITY,
+              data: { errors: 'error 1 and error 2' },
             },
           });
-
           mountComponent({
             mountFunction: mountExtended,
             initialData: { note: 'invalid note' },
-            store,
           });
 
           findCommentButton().trigger('click');
@@ -268,20 +227,15 @@ describe('issue_comment_form component', () => {
 
       it('should remove the correct error from the list when it is dismissed', async () => {
         const commandErrors = ['1', '2', '3'];
-        const store = createStore({
-          actions: {
-            saveNote: jest.fn().mockRejectedValue({
-              response: {
-                status: HTTP_STATUS_UNPROCESSABLE_ENTITY,
-                data: { quick_actions_status: { error_messages: [...commandErrors] } },
-              },
-            }),
+        useNotes().saveNote.mockRejectedValue({
+          response: {
+            status: HTTP_STATUS_UNPROCESSABLE_ENTITY,
+            data: { quick_actions_status: { error_messages: [...commandErrors] } },
           },
         });
         mountComponent({
           mountFunction: mountExtended,
           initialData: { note: '/label ~sdfghj' },
-          store,
         });
         await findCommentButton().trigger('click');
         await waitForPromises();
@@ -312,15 +266,10 @@ describe('issue_comment_form component', () => {
       });
 
       it('should disable action button while submitting', async () => {
-        const store = createStore({
-          actions: {
-            saveNote: jest.fn().mockReturnValue(),
-          },
-        });
+        useNotes().saveNote.mockResolvedValue();
         mountComponent({
           mountFunction: mountExtended,
           initialData: { note: 'hello world' },
-          store,
         });
         const actionButton = findCloseReopenButton();
         await actionButton.trigger('click');
@@ -377,13 +326,10 @@ describe('issue_comment_form component', () => {
         });
 
         it('should resize textarea after note is saved', async () => {
-          const store = createStore();
-          store.registerModule('batchComments', batchComments());
-          store.state.batchComments.drafts = [{ note: 'A' }];
+          useBatchComments().drafts = [{ note: 'A' }];
           await mountComponent({
             mountFunction: mountExtended,
             initialData: { note: 'foo' },
-            store,
           });
           await findAddCommentNowButton().trigger('click');
           await waitForPromises();
@@ -394,12 +340,8 @@ describe('issue_comment_form component', () => {
       describe('edit mode', () => {
         it('should enter edit mode when arrow up is pressed', async () => {
           const noteId = 2;
-          const store = createStore({
-            state: {
-              discussions: [{ notes: [{ id: noteId, author: userDataMock }] }],
-            },
-          });
-          mountComponent({ mountFunction: mountExtended, store });
+          useNotes().discussions = [{ notes: [{ id: noteId, author: userDataMock }] }];
+          mountComponent({ mountFunction: mountExtended });
           jest.spyOn(eventHub, '$emit');
           await findMarkdownEditorTextarea().trigger('keydown.up');
           expect(eventHub.$emit).toHaveBeenCalledWith('enterEditMode', { noteId });
@@ -407,57 +349,56 @@ describe('issue_comment_form component', () => {
 
         describe('event enter', () => {
           describe('when no draft exists', () => {
-            const store = createStore({ actions: {} });
-
             it('should save note when cmd+enter is pressed', async () => {
-              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' }, store });
-              jest.spyOn(axios, 'post');
+              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' } });
               await findMarkdownEditorTextarea().trigger('keydown.enter', { metaKey: true });
-              expect(axios.post).toHaveBeenCalledWith(noteableDataMock.create_note_path, {
-                merge_request_diff_head_sha: undefined,
-                note: {
-                  internal: false,
-                  note: 'a',
-                  noteable_id: noteableDataMock.id,
-                  noteable_type: 'Issue',
+              expect(useNotes().saveNote).toHaveBeenCalledWith({
+                data: {
+                  merge_request_diff_head_sha: undefined,
+                  note: {
+                    internal: false,
+                    note: 'a',
+                    noteable_id: noteableDataMock.id,
+                    noteable_type: 'Issue',
+                  },
                 },
+                endpoint: noteableDataMock.create_note_path,
+                flashContainer: expect.anything(),
+                isDraft: false,
               });
             });
 
             it('should save note when ctrl+enter is pressed', async () => {
-              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' }, store });
-              jest.spyOn(axios, 'post');
+              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' } });
               await findMarkdownEditorTextarea().trigger('keydown.enter', { ctrlKey: true });
-              expect(axios.post).toHaveBeenCalledWith(noteableDataMock.create_note_path, {
-                merge_request_diff_head_sha: undefined,
-                note: {
-                  internal: false,
-                  note: 'a',
-                  noteable_id: noteableDataMock.id,
-                  noteable_type: 'Issue',
+              expect(useNotes().saveNote).toHaveBeenCalledWith({
+                data: {
+                  merge_request_diff_head_sha: undefined,
+                  note: {
+                    internal: false,
+                    note: 'a',
+                    noteable_id: noteableDataMock.id,
+                    noteable_type: 'Issue',
+                  },
                 },
+                endpoint: noteableDataMock.create_note_path,
+                flashContainer: expect.anything(),
+                isDraft: false,
               });
             });
           });
 
           describe('when a draft exists', () => {
-            let store;
-
             beforeEach(() => {
-              store = createStore({
-                actions: {
-                  saveNote: jest.fn().mockResolvedValue(),
-                },
-              });
-              store.registerModule('batchComments', batchComments());
-              store.state.batchComments.drafts = [{ note: 'A' }];
+              useNotes().saveNote.mockResolvedValue();
+              useBatchComments().drafts = [{ note: 'A' }];
             });
 
             it('sends the event to indicate that a new draft comment has been added', async () => {
               const note = 'some note text which enables actually adding a draft note';
 
               jest.spyOn(eventHub, '$emit');
-              mountComponent({ mountFunction: mountExtended, initialData: { note }, store });
+              mountComponent({ mountFunction: mountExtended, initialData: { note } });
 
               findAddToReviewButton().trigger('click');
 
@@ -469,10 +410,9 @@ describe('issue_comment_form component', () => {
             });
 
             it('should save note draft when cmd+enter is pressed', async () => {
-              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' }, store });
-              jest.spyOn(store, 'dispatch').mockResolvedValue();
+              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' } });
               await findMarkdownEditorTextarea().trigger('keydown.enter', { metaKey: true });
-              expect(store.dispatch).toHaveBeenCalledWith('saveNote', {
+              expect(useNotes().saveNote).toHaveBeenCalledWith({
                 data: {
                   merge_request_diff_head_sha: undefined,
                   note: {
@@ -490,10 +430,9 @@ describe('issue_comment_form component', () => {
             });
 
             it('should save note draft when ctrl+enter is pressed', async () => {
-              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' }, store });
-              jest.spyOn(store, 'dispatch').mockResolvedValue();
+              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' } });
               await findMarkdownEditorTextarea().trigger('keydown.enter', { ctrlKey: true });
-              expect(store.dispatch).toHaveBeenCalledWith('saveNote', {
+              expect(useNotes().saveNote).toHaveBeenCalledWith({
                 data: {
                   merge_request_diff_head_sha: undefined,
                   note: {
@@ -511,13 +450,12 @@ describe('issue_comment_form component', () => {
             });
 
             it('should add comment when shift+cmd+enter is pressed', async () => {
-              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' }, store });
-              jest.spyOn(store, 'dispatch').mockResolvedValue();
+              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' } });
               await findMarkdownEditorTextarea().trigger('keydown.enter', {
                 shiftKey: true,
                 metaKey: true,
               });
-              expect(store.dispatch).toHaveBeenCalledWith('saveNote', {
+              expect(useNotes().saveNote).toHaveBeenCalledWith({
                 data: {
                   merge_request_diff_head_sha: undefined,
                   note: {
@@ -534,13 +472,12 @@ describe('issue_comment_form component', () => {
             });
 
             it('should add comment when shift+ctrl+enter is pressed', async () => {
-              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' }, store });
-              jest.spyOn(store, 'dispatch').mockResolvedValue();
+              mountComponent({ mountFunction: mountExtended, initialData: { note: 'a' } });
               await findMarkdownEditorTextarea().trigger('keydown.enter', {
                 shiftKey: true,
                 ctrlKey: true,
               });
-              expect(store.dispatch).toHaveBeenCalledWith('saveNote', {
+              expect(useNotes().saveNote).toHaveBeenCalledWith({
                 data: {
                   merge_request_diff_head_sha: undefined,
                   note: {
@@ -730,10 +667,8 @@ describe('issue_comment_form component', () => {
       });
 
       it('renders checkbox when hasDrafts is true', () => {
-        const store = createStore({ getters: { hasDrafts: () => true } });
-
-        mountComponent({ store });
-
+        useBatchComments().drafts = [{}];
+        mountComponent();
         expect(findConfidentialNoteCheckbox().exists()).toBe(true);
       });
 
@@ -785,16 +720,13 @@ describe('issue_comment_form component', () => {
         ${false}
       `('when checkbox value is `$shouldCheckboxBeChecked`', ({ shouldCheckboxBeChecked }) => {
         it(`sets \`internal\` to \`${shouldCheckboxBeChecked}\``, async () => {
-          const store = createStore();
           const note = 'internal note';
           mountComponent({
             mountFunction: mountExtended,
             initialData: { note },
             noteableData: { ...notableDataMockCanUpdateIssuable },
-            store,
           });
 
-          jest.spyOn(store, 'dispatch');
           const checkbox = findConfidentialNoteCheckbox();
 
           // check checkbox
@@ -806,7 +738,7 @@ describe('issue_comment_form component', () => {
           findCommentButton().trigger('click');
           await waitForPromises();
 
-          expect(store.dispatch).toHaveBeenCalledWith('saveNote', {
+          expect(useNotes().saveNote).toHaveBeenCalledWith({
             data: {
               merge_request_diff_head_sha: undefined,
               note: {
@@ -839,31 +771,26 @@ describe('issue_comment_form component', () => {
   describe('check sensitive tokens', () => {
     const sensitiveMessage = 'token: glpat-1234567890abcdefghij';
     const nonSensitiveMessage = 'text';
-    const store = createStore();
 
     it('should not save note when it contains sensitive token', async () => {
       detectAndConfirmSensitiveTokens.mockReturnValue(false);
       mountComponent({
         mountFunction: mountExtended,
         initialData: { note: sensitiveMessage },
-        store,
       });
-      jest.spyOn(store, 'dispatch');
       findCommentButton().trigger('click');
       await waitForPromises();
-      expect(store.dispatch).not.toHaveBeenCalled();
+      expect(useNotes().saveNote).not.toHaveBeenCalled();
     });
 
     it('should save note it does not contain sensitive token', async () => {
       mountComponent({
         mountFunction: mountExtended,
         initialData: { note: nonSensitiveMessage },
-        store,
       });
-      jest.spyOn(store, 'dispatch');
       await findCommentButton().trigger('click');
       await waitForPromises();
-      expect(store.dispatch).toHaveBeenCalledWith('saveNote', expect.objectContaining({}));
+      expect(useNotes().saveNote).toHaveBeenCalledWith(expect.objectContaining({}));
     });
   });
 
@@ -887,15 +814,8 @@ describe('issue_comment_form component', () => {
 
   describe('with batchComments in store', () => {
     describe('start review, add to review and comment now buttons', () => {
-      let store;
-
-      beforeEach(() => {
-        store = createStore();
-        store.registerModule('batchComments', batchComments());
-      });
-
       it('when no drafts exist on non-merge request, should not render', () => {
-        mountComponent({ store });
+        mountComponent();
         expect(findCommentTypeDropdown().exists()).toBe(true);
         expect(findStartReviewButton().exists()).toBe(false);
         expect(findAddToReviewButton().exists()).toBe(false);
@@ -903,7 +823,7 @@ describe('issue_comment_form component', () => {
       });
 
       it('when no drafts exist in a merge request, should render', () => {
-        mountComponent({ noteableType: constants.MERGE_REQUEST_NOTEABLE_TYPE, store });
+        mountComponent({ noteableType: constants.MERGE_REQUEST_NOTEABLE_TYPE });
         expect(findCommentTypeDropdown().exists()).toBe(true);
         expect(findStartReviewButton().exists()).toBe(true);
         expect(findAddToReviewButton().exists()).toBe(false);
@@ -912,11 +832,11 @@ describe('issue_comment_form component', () => {
 
       describe('when drafts exist', () => {
         beforeEach(() => {
-          store.state.batchComments.drafts = [{ note: 'A' }];
+          useBatchComments().drafts = [{ note: 'A' }];
         });
 
         it('should render proper action elements', async () => {
-          await mountComponent({ store });
+          await mountComponent();
           expect(findCommentTypeDropdown().exists()).toBe(false);
           expect(findAddToReviewButton().exists()).toBe(true);
           expect(findAddCommentNowButton().exists()).toBe(true);
@@ -927,12 +847,9 @@ describe('issue_comment_form component', () => {
           mountComponent({
             mountFunction: mountExtended,
             initialData: { note: 'a draft note' },
-            store,
           });
-          jest.spyOn(store, 'dispatch').mockResolvedValue();
           await findAddToReviewButton().trigger('click');
-          expect(store.dispatch).toHaveBeenCalledWith(
-            'saveNote',
+          expect(useNotes().saveNote).toHaveBeenCalledWith(
             expect.objectContaining({
               endpoint: notesDataMock.draftsPath,
               isDraft: true,
@@ -944,12 +861,9 @@ describe('issue_comment_form component', () => {
           await mountComponent({
             mountFunction: mountExtended,
             initialData: { note: 'a comment' },
-            store,
           });
-          jest.spyOn(store, 'dispatch').mockResolvedValue();
           await findAddCommentNowButton().trigger('click');
-          expect(store.dispatch).toHaveBeenCalledWith(
-            'saveNote',
+          expect(useNotes().saveNote).toHaveBeenCalledWith(
             expect.objectContaining({
               endpoint: noteableDataMock.create_note_path,
               isDraft: false,
diff --git a/spec/frontend/notes/components/discussion_actions_spec.js b/spec/frontend/notes/components/discussion_actions_spec.js
index 2bbf4203e45..19e8a9a2f2d 100644
--- a/spec/frontend/notes/components/discussion_actions_spec.js
+++ b/spec/frontend/notes/components/discussion_actions_spec.js
@@ -3,7 +3,6 @@ import DiscussionActions from '~/notes/components/discussion_actions.vue';
 import DiscussionReplyPlaceholder from '~/notes/components/discussion_reply_placeholder.vue';
 import ResolveDiscussionButton from '~/notes/components/discussion_resolve_button.vue';
 import ResolveWithIssueButton from '~/notes/components/discussion_resolve_with_issue_button.vue';
-import createStore from '~/notes/stores';
 import { discussionMock } from '../mock_data';
 
 // NOTE: clone mock_data so that it is not accidentally mutated
@@ -23,11 +22,9 @@ describe('DiscussionActions', () => {
   const createComponentFactory =
     (shallow = true) =>
     (props, options) => {
-      const store = createStore();
       const mountFn = shallow ? shallowMount : mount;
 
       wrapper = mountFn(DiscussionActions, {
-        store,
         propsData: {
           discussion: discussionMock,
           isResolving: false,
diff --git a/spec/frontend/notes/components/discussion_notes_spec.js b/spec/frontend/notes/components/discussion_notes_spec.js
index 7b2b4603e29..29203bfd0eb 100644
--- a/spec/frontend/notes/components/discussion_notes_spec.js
+++ b/spec/frontend/notes/components/discussion_notes_spec.js
@@ -6,7 +6,6 @@ import { PiniaVuePlugin } from 'pinia';
 import DiscussionNotes from '~/notes/components/discussion_notes.vue';
 import NoteableNote from '~/notes/components/noteable_note.vue';
 import { SYSTEM_NOTE } from '~/notes/constants';
-import createStore from '~/notes/stores';
 import PlaceholderNote from '~/vue_shared/components/notes/placeholder_note.vue';
 import PlaceholderSystemNote from '~/vue_shared/components/notes/placeholder_system_note.vue';
 import SystemNote from '~/vue_shared/components/notes/system_note.vue';
@@ -28,7 +27,6 @@ const DISCUSSION_WITH_LINE_RANGE = {
 Vue.use(PiniaVuePlugin);
 
 describe('DiscussionNotes', () => {
-  let store;
   let pinia;
   let wrapper;
 
@@ -37,7 +35,6 @@ describe('DiscussionNotes', () => {
 
   const createComponent = (props, mountingMethod = shallowMount) => {
     wrapper = mountingMethod(DiscussionNotes, {
-      store,
       pinia,
       propsData: {
         discussion: discussionMock,
@@ -61,10 +58,8 @@ describe('DiscussionNotes', () => {
   beforeEach(() => {
     pinia = createTestingPinia({ plugins: [globalAccessorPlugin] });
     useLegacyDiffs();
-    useNotes();
-    store = createStore();
-    store.dispatch('setNoteableData', noteableDataMock);
-    store.dispatch('setNotesData', notesDataMock);
+    useNotes().noteableData = noteableDataMock;
+    useNotes().notesData = notesDataMock;
   });
 
   describe('rendering', () => {
@@ -178,20 +173,27 @@ describe('DiscussionNotes', () => {
   });
 
   describe.each`
-    desc                               | props                                         | event           | expectedCalls
-    ${'with `discussion.position`'}    | ${{ discussion: DISCUSSION_WITH_LINE_RANGE }} | ${'mouseenter'} | ${[['setSelectedCommentPositionHover', LINE_RANGE]]}
-    ${'with `discussion.position`'}    | ${{ discussion: DISCUSSION_WITH_LINE_RANGE }} | ${'mouseleave'} | ${[['setSelectedCommentPositionHover']]}
-    ${'without `discussion.position`'} | ${{}}                                         | ${'mouseenter'} | ${[]}
-    ${'without `discussion.position`'} | ${{}}                                         | ${'mouseleave'} | ${[]}
-  `('$desc', ({ props, event, expectedCalls }) => {
+    desc                               | props                                         | event           | shouldSelectPosition | shouldIncludeRange
+    ${'with `discussion.position`'}    | ${{ discussion: DISCUSSION_WITH_LINE_RANGE }} | ${'mouseenter'} | ${true}              | ${true}
+    ${'with `discussion.position`'}    | ${{ discussion: DISCUSSION_WITH_LINE_RANGE }} | ${'mouseleave'} | ${true}              | ${false}
+    ${'without `discussion.position`'} | ${{}}                                         | ${'mouseenter'} | ${false}             | ${false}
+    ${'without `discussion.position`'} | ${{}}                                         | ${'mouseleave'} | ${false}             | ${false}
+  `('$desc', ({ props, event, shouldSelectPosition, shouldIncludeRange }) => {
     beforeEach(() => {
       createComponent(props);
-      jest.spyOn(store, 'dispatch');
     });
 
-    it(`calls store ${expectedCalls.length} times on ${event}`, () => {
+    it(`calls store on ${event}`, () => {
       getList().dispatchEvent(new MouseEvent(event));
-      expect(store.dispatch.mock.calls).toEqual(expectedCalls);
+      if (shouldSelectPosition) {
+        if (shouldIncludeRange) {
+          expect(useNotes().setSelectedCommentPositionHover).toHaveBeenCalledWith(LINE_RANGE);
+        } else {
+          expect(useNotes().setSelectedCommentPositionHover).toHaveBeenCalledWith();
+        }
+      } else {
+        expect(useNotes().setSelectedCommentPositionHover).not.toHaveBeenCalled();
+      }
     });
   });
 
diff --git a/spec/frontend/notes/components/note_form_spec.js b/spec/frontend/notes/components/note_form_spec.js
index 9d13d1370ef..1e4fdbffb67 100644
--- a/spec/frontend/notes/components/note_form_spec.js
+++ b/spec/frontend/notes/components/note_form_spec.js
@@ -3,7 +3,6 @@ import Vue, { nextTick } from 'vue';
 import { createTestingPinia } from '@pinia/testing';
 import { PiniaVuePlugin } from 'pinia';
 import NoteForm from '~/notes/components/note_form.vue';
-import createStore from '~/notes/stores';
 import MarkdownField from '~/vue_shared/components/markdown/field.vue';
 import CommentFieldLayout from '~/notes/components/comment_field_layout.vue';
 import { AT_WHO_ACTIVE_CLASS } from '~/gfm_auto_complete';
@@ -22,7 +21,6 @@ jest.mock('~/lib/utils/autosave');
 Vue.use(PiniaVuePlugin);
 
 describe('issue_note_form component', () => {
-  let store;
   let pinia;
   let wrapper;
   let textarea;
@@ -31,7 +29,6 @@ describe('issue_note_form component', () => {
 
   const createComponentWrapper = (propsData = {}, provide = {}, stubs = {}) => {
     wrapper = mountExtended(NoteForm, {
-      store,
       pinia,
       propsData: {
         ...props,
@@ -63,13 +60,10 @@ describe('issue_note_form component', () => {
   beforeEach(() => {
     pinia = createTestingPinia({ plugins: [globalAccessorPlugin] });
     useLegacyDiffs();
-    useNotes();
+    useNotes().noteableData = noteableDataMock;
+    useNotes().notesData = notesDataMock;
     useBatchComments().$patch({ isMergeRequest: true });
 
-    store = createStore();
-    store.dispatch('setNoteableData', noteableDataMock);
-    store.dispatch('setNotesData', notesDataMock);
-
     props = {
       isEditing: false,
       noteBody: 'Magni suscipit eius consectetur enim et ex et commodi.',
diff --git a/spec/frontend/notes/components/noteable_discussion_spec.js b/spec/frontend/notes/components/noteable_discussion_spec.js
index e9d81895bff..be8e86c8621 100644
--- a/spec/frontend/notes/components/noteable_discussion_spec.js
+++ b/spec/frontend/notes/components/noteable_discussion_spec.js
@@ -1,7 +1,5 @@
 import { mount } from '@vue/test-utils';
 import Vue, { nextTick } from 'vue';
-// eslint-disable-next-line no-restricted-imports
-import Vuex from 'vuex';
 import MockAdapter from 'axios-mock-adapter';
 import { PiniaVuePlugin } from 'pinia';
 import { createTestingPinia } from '@pinia/testing';
@@ -18,7 +16,6 @@ import ResolveWithIssueButton from '~/notes/components/discussion_resolve_with_i
 import NoteForm from '~/notes/components/note_form.vue';
 import NoteableDiscussion from '~/notes/components/noteable_discussion.vue';
 import { COMMENT_FORM } from '~/notes/i18n';
-import notesModule from '~/notes/stores/modules';
 import { sprintf } from '~/locale';
 import { createAlert } from '~/alert';
 import { globalAccessorPlugin } from '~/pinia/plugins';
@@ -26,45 +23,26 @@ import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
 import { useNotes } from '~/notes/store/legacy_notes';
 import { useBatchComments } from '~/batch_comments/store';
 import {
-  noteableDataMock,
   discussionMock,
   notesDataMock,
   loggedOutnoteableData,
   userDataMock,
+  noteableDataMock,
 } from '../mock_data';
 import { useLocalStorageSpy } from '../../__helpers__/local_storage_helper';
 
-Vue.use(Vuex);
 Vue.use(PiniaVuePlugin);
 
 jest.mock('~/behaviors/markdown/render_gfm');
 jest.mock('~/alert');
 
 describe('noteable_discussion component', () => {
-  let store;
   let pinia;
   let wrapper;
   let axiosMock;
 
-  const createStore = ({ saveNoteMock = jest.fn() } = {}) => {
-    const baseModule = notesModule();
-
-    return new Vuex.Store({
-      ...baseModule,
-      actions: {
-        ...baseModule.actions,
-        saveNote: saveNoteMock,
-      },
-    });
-  };
-
-  const createComponent = ({ storeMock = createStore(), discussion = discussionMock } = {}) => {
-    store = storeMock;
-    store.dispatch('setNoteableData', noteableDataMock);
-    store.dispatch('setNotesData', notesDataMock);
-
+  const createComponent = ({ discussion = discussionMock } = {}) => {
     wrapper = mountExtended(NoteableDiscussion, {
-      store,
       pinia,
       propsData: { discussion },
     });
@@ -73,6 +51,8 @@ describe('noteable_discussion component', () => {
   beforeEach(() => {
     pinia = createTestingPinia({ plugins: [globalAccessorPlugin] });
     useLegacyDiffs();
+    useNotes().noteableData = noteableDataMock;
+    useNotes().notesData = notesDataMock;
     useNotes().saveNote.mockResolvedValue();
     useNotes().fetchDiscussionDiffLines.mockResolvedValue();
     useBatchComments();
@@ -137,9 +117,7 @@ describe('noteable_discussion component', () => {
           localStorage.setItem(`autosave/Note/Issue/${discussionMock.id}/Reply`, 'draft');
         }
         window.gon.current_user_id = userDataMock.id;
-        store.dispatch('setUserData', userDataMock);
         wrapper = mount(NoteableDiscussion, {
-          store,
           pinia,
           propsData: { discussion: discussionMock },
         });
@@ -193,7 +171,6 @@ describe('noteable_discussion component', () => {
       const discussion = { ...discussionMock, expanded: false };
 
       wrapper.setProps({ discussion });
-      store.dispatch = jest.fn();
 
       await nextTick();
 
@@ -201,7 +178,7 @@ describe('noteable_discussion component', () => {
 
       await nextTick();
 
-      expect(store.dispatch).toHaveBeenCalledWith('expandDiscussion', {
+      expect(useNotes().expandDiscussion).toHaveBeenCalledWith({
         discussionId: discussion.id,
       });
     });
@@ -266,16 +243,14 @@ describe('noteable_discussion component', () => {
   describe('save reply', () => {
     describe('if response contains validation errors', () => {
       beforeEach(async () => {
-        const storeMock = createStore({
-          saveNoteMock: jest.fn().mockRejectedValue({
-            response: {
-              status: HTTP_STATUS_UNPROCESSABLE_ENTITY,
-              data: { errors: 'error 1 and error 2' },
-            },
-          }),
+        useNotes().saveNote.mockRejectedValue({
+          response: {
+            status: HTTP_STATUS_UNPROCESSABLE_ENTITY,
+            data: { errors: 'error 1 and error 2' },
+          },
         });
 
-        createComponent({ storeMock });
+        createComponent();
 
         wrapper.findComponent(DiscussionReplyPlaceholder).vm.$emit('focus');
         await nextTick();
@@ -300,10 +275,8 @@ describe('noteable_discussion component', () => {
     describe('user is logged in', () => {
       beforeEach(() => {
         window.gon.current_user_id = userDataMock.id;
-        store.dispatch('setUserData', userDataMock);
 
         wrapper = mount(NoteableDiscussion, {
-          store,
           pinia,
           propsData: { discussion: discussionMock },
         });
@@ -318,11 +291,9 @@ describe('noteable_discussion component', () => {
     describe('user is not logged in', () => {
       beforeEach(() => {
         window.gon.current_user_id = null;
-        store.dispatch('setNoteableData', loggedOutnoteableData);
-        store.dispatch('setNotesData', notesDataMock);
+        useNotes().noteableData = loggedOutnoteableData;
 
         wrapper = mount(NoteableDiscussion, {
-          store,
           pinia,
           propsData: { discussion: discussionMock },
         });
@@ -336,10 +307,8 @@ describe('noteable_discussion component', () => {
   });
 
   it('supports direct call on showReplyForm', async () => {
-    store = createStore();
     const mock = jest.fn();
     wrapper = mount(NoteableDiscussion, {
-      store,
       pinia,
       propsData: { discussion: discussionMock },
       stubs: { NoteForm: { methods: { append: mock }, render() {} } },
diff --git a/spec/frontend/notes/components/noteable_note_spec.js b/spec/frontend/notes/components/noteable_note_spec.js
index e9da36b005e..65c234bcddc 100644
--- a/spec/frontend/notes/components/noteable_note_spec.js
+++ b/spec/frontend/notes/components/noteable_note_spec.js
@@ -1,18 +1,14 @@
 import Vue, { nextTick } from 'vue';
-// eslint-disable-next-line no-restricted-imports
-import Vuex from 'vuex';
 import { GlAvatarLink, GlAvatar } from '@gitlab/ui';
 import { clone } from 'lodash';
 import { createTestingPinia } from '@pinia/testing';
 import { PiniaVuePlugin } from 'pinia';
 import { mountExtended } from 'helpers/vue_test_utils_helper';
 import waitForPromises from 'helpers/wait_for_promises';
-import DiffsModule from '~/diffs/store/modules';
 import NoteActions from '~/notes/components/note_actions.vue';
 import NoteBody from '~/notes/components/note_body.vue';
 import NoteHeader from '~/notes/components/note_header.vue';
 import issueNote from '~/notes/components/noteable_note.vue';
-import NotesModule from '~/notes/stores/modules';
 import { NOTEABLE_TYPE_MAPPING } from '~/notes/constants';
 import { createAlert } from '~/alert';
 import { UPDATE_COMMENT_FORM } from '~/notes/i18n';
@@ -23,9 +19,9 @@ import { HTTP_STATUS_UNPROCESSABLE_ENTITY } from '~/lib/utils/http_status';
 import { useMockInternalEventsTracking } from 'helpers/tracking_internal_events_helper';
 import { globalAccessorPlugin } from '~/pinia/plugins';
 import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
+import { useNotes } from '~/notes/store/legacy_notes';
 import { noteableDataMock, notesDataMock, note } from '../mock_data';
 
-Vue.use(Vuex);
 Vue.use(PiniaVuePlugin);
 
 jest.mock('~/alert');
@@ -51,7 +47,6 @@ const singleLineNotePosition = {
 };
 
 describe('issue_note', () => {
-  let store;
   let pinia;
   let wrapper;
 
@@ -61,24 +56,11 @@ describe('issue_note', () => {
 
   const findMultilineComment = () => wrapper.findByTestId('multiline-comment');
 
-  const createWrapper = (props = {}, storeUpdater = (s) => s) => {
-    store = new Vuex.Store(
-      storeUpdater({
-        modules: {
-          notes: NotesModule(),
-          diffs: DiffsModule(),
-        },
-      }),
-    );
-
-    store.dispatch('setNoteableData', noteableDataMock);
-    store.dispatch('setNotesData', notesDataMock);
-
+  const createWrapper = (props = {}) => {
     // the component overwrites the `note` prop with every action, hence create a copy
     const noteCopy = clone(props.note || note);
 
     wrapper = mountExtended(issueNote, {
-      store,
       pinia,
       propsData: {
         note: noteCopy,
@@ -100,6 +82,9 @@ describe('issue_note', () => {
   beforeEach(() => {
     pinia = createTestingPinia({ plugins: [globalAccessorPlugin] });
     useLegacyDiffs();
+    useNotes().noteableData = noteableDataMock;
+    useNotes().notesData = notesDataMock;
+    useNotes().updateNote.mockResolvedValue();
   });
 
   describe('mutiline comments', () => {
@@ -306,17 +291,6 @@ describe('issue_note', () => {
         '<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" onload="alert(1)" />';
       const alertSpy = jest.spyOn(window, 'alert').mockImplementation(() => {});
 
-      store.hotUpdate({
-        modules: {
-          notes: {
-            actions: {
-              updateNote() {},
-              setSelectedCommentPositionHover() {},
-            },
-          },
-        },
-      });
-
       findNoteBody().vm.$emit('handleFormUpdate', {
         noteText: noteBody,
         parentElement: null,
@@ -346,7 +320,6 @@ describe('issue_note', () => {
   });
 
   describe('formUpdateHandler', () => {
-    const updateNote = jest.fn();
     const params = {
       noteText: 'updated note text',
       parentElement: null,
@@ -354,26 +327,10 @@ describe('issue_note', () => {
       resolveDiscussion: false,
     };
 
-    const updateActions = () => {
-      store.hotUpdate({
-        modules: {
-          notes: {
-            actions: {
-              updateNote,
-              setSelectedCommentPositionHover() {},
-            },
-          },
-        },
-      });
-    };
-
     beforeEach(() => {
       createWrapper();
-      updateActions();
     });
 
-    afterEach(() => updateNote.mockReset());
-
     it('emits handleUpdateNote', async () => {
       const updatedNote = { ...note, note_html: `<p dir="auto">${params.noteText}</p>\n` };
 
@@ -435,7 +392,7 @@ describe('issue_note', () => {
 
     describe('when updateNote returns errors', () => {
       beforeEach(() => {
-        updateNote.mockRejectedValue({
+        useNotes().updateNote.mockRejectedValue({
           response: {
             status: HTTP_STATUS_UNPROCESSABLE_ENTITY,
             data: { errors: 'error 1 and error 2' },
@@ -462,27 +419,14 @@ describe('issue_note', () => {
 
   describe('diffFile', () => {
     it.each`
-      scenario                         | files        | noteDef
-      ${'the note has no position'}    | ${undefined} | ${note}
-      ${'the Diffs store has no data'} | ${[]}        | ${{ ...note, position: singleLineNotePosition }}
-    `(
-      'returns `null` when $scenario and no diff file is provided as a prop',
-      ({ noteDef, diffs }) => {
-        const storeUpdater = (rawStore) => {
-          const updatedStore = { ...rawStore };
-
-          if (diffs) {
-            updatedStore.modules.diffs.state.diffFiles = diffs;
-          }
-
-          return updatedStore;
-        };
-
-        createWrapper({ note: noteDef, discussionFile: null }, storeUpdater);
-
-        expect(findNoteBody().props().file).toBe(null);
-      },
-    );
+      scenario                         | noteDef
+      ${'the note has no position'}    | ${note}
+      ${'the Diffs store has no data'} | ${{ ...note, position: singleLineNotePosition }}
+    `('returns `null` when $scenario and no diff file is provided as a prop', ({ noteDef }) => {
+      useLegacyDiffs().diffFiles = [];
+      createWrapper({ note: noteDef, discussionFile: null });
+      expect(findNoteBody().props().file).toBe(null);
+    });
 
     it("returns the correct diff file from the Diffs store if it's available", () => {
       useLegacyDiffs().diffFiles = [{ file_hash: 'abc', testId: 'diffFileTest' }];
@@ -494,17 +438,10 @@ describe('issue_note', () => {
     });
 
     it('returns the provided diff file if the more robust getters fail', () => {
-      createWrapper(
-        {
-          note: { ...note, position: singleLineNotePosition },
-          discussionFile: { testId: 'diffFileTest' },
-        },
-        (rawStore) => {
-          const updatedStore = { ...rawStore };
-          updatedStore.modules.diffs.state.diffFiles = [];
-          return updatedStore;
-        },
-      );
+      createWrapper({
+        note: { ...note, position: singleLineNotePosition },
+        discussionFile: { testId: 'diffFileTest' },
+      });
 
       expect(findNoteBody().props().file.testId).toBe('diffFileTest');
     });
diff --git a/spec/frontend/notes/components/notes_activity_header_spec.js b/spec/frontend/notes/components/notes_activity_header_spec.js
index d5068218e2a..97b451f6ee8 100644
--- a/spec/frontend/notes/components/notes_activity_header_spec.js
+++ b/spec/frontend/notes/components/notes_activity_header_spec.js
@@ -5,7 +5,6 @@ import { createTestingPinia } from '@pinia/testing';
 import NotesActivityHeader from '~/notes/components/notes_activity_header.vue';
 import DiscussionFilter from '~/notes/components/discussion_filter.vue';
 import TimelineToggle from '~/notes/components/timeline_toggle.vue';
-import createStore from '~/notes/stores';
 import waitForPromises from 'helpers/wait_for_promises';
 import { globalAccessorPlugin } from '~/pinia/plugins';
 import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
@@ -26,8 +25,6 @@ describe('~/notes/components/notes_activity_header.vue', () => {
         notesFilters,
         ...props,
       },
-      // why: Rendering async timeline toggle requires store
-      store: createStore(),
       pinia,
       ...options,
     });
diff --git a/spec/frontend/notes/mixins/discussion_navigation_spec.js b/spec/frontend/notes/mixins/discussion_navigation_spec.js
index 4815c63cef6..df8f1b87f86 100644
--- a/spec/frontend/notes/mixins/discussion_navigation_spec.js
+++ b/spec/frontend/notes/mixins/discussion_navigation_spec.js
@@ -1,16 +1,14 @@
 import { shallowMount } from '@vue/test-utils';
 import Vue, { nextTick } from 'vue';
-// eslint-disable-next-line no-restricted-imports
-import Vuex from 'vuex';
 import { PiniaVuePlugin } from 'pinia';
 import { createTestingPinia } from '@pinia/testing';
 import { setHTMLFixture, resetHTMLFixture } from 'helpers/fixtures';
 import createEventHub from '~/helpers/event_hub_factory';
 import * as utils from '~/lib/utils/common_utils';
 import discussionNavigation from '~/notes/mixins/discussion_navigation';
-import notesModule from '~/notes/stores/modules';
 import { globalAccessorPlugin } from '~/pinia/plugins';
 import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
+import { useNotes } from '~/notes/store/legacy_notes';
 
 const discussion = (id, index) => ({
   id,
@@ -30,14 +28,11 @@ const createComponent = () => ({
   },
 });
 
-Vue.use(Vuex);
 Vue.use(PiniaVuePlugin);
 
 describe('Discussion navigation mixin', () => {
   let wrapper;
-  let store;
   let pinia;
-  let expandDiscussion;
 
   const findDiscussionEl = (id) => document.querySelector(`div[data-discussion-id="${id}"]`);
 
@@ -60,20 +55,9 @@ describe('Discussion navigation mixin', () => {
 
     pinia = createTestingPinia({ plugins: [globalAccessorPlugin] });
     useLegacyDiffs();
-
-    expandDiscussion = jest.fn();
-    const { actions, ...notesRest } = notesModule();
-    store = new Vuex.Store({
-      modules: {
-        notes: {
-          ...notesRest,
-          actions: { ...actions, expandDiscussion },
-        },
-      },
-    });
-    store.state.notes.discussions = createDiscussions();
-
-    wrapper = shallowMount(createComponent(), { store, pinia });
+    useNotes().discussions = createDiscussions();
+    useNotes().setCurrentDiscussionId.mockResolvedValue();
+    wrapper = shallowMount(createComponent(), { pinia });
   });
 
   afterEach(() => {
@@ -88,19 +72,16 @@ describe('Discussion navigation mixin', () => {
 
       ({ vm } = wrapper);
 
-      jest.spyOn(store, 'dispatch');
       jest.spyOn(vm, 'jumpToNextDiscussion');
     });
 
     it('triggers the setCurrentDiscussionId action with null as the value', () => {
       vm.jumpToFirstUnresolvedDiscussion();
 
-      expect(store.dispatch).toHaveBeenCalledWith('setCurrentDiscussionId', null);
+      expect(useNotes().setCurrentDiscussionId).toHaveBeenCalledWith(null);
     });
 
     it('triggers the jumpToNextDiscussion action when the previous store action succeeds', async () => {
-      store.dispatch.mockResolvedValue();
-
       vm.jumpToFirstUnresolvedDiscussion();
 
       await nextTick();
@@ -153,7 +134,7 @@ describe('Discussion navigation mixin', () => {
           });
 
           it('expands discussion', () => {
-            expect(expandDiscussion).toHaveBeenCalledWith(expect.any(Object), {
+            expect(useNotes().expandDiscussion).toHaveBeenCalledWith({
               discussionId: expectedId,
             });
           });
diff --git a/spec/frontend/vue_shared/components/notes/placeholder_note_spec.js b/spec/frontend/vue_shared/components/notes/placeholder_note_spec.js
index 6d4745e8e3d..dffc2eea1ca 100644
--- a/spec/frontend/vue_shared/components/notes/placeholder_note_spec.js
+++ b/spec/frontend/vue_shared/components/notes/placeholder_note_spec.js
@@ -1,26 +1,24 @@
 import { shallowMount } from '@vue/test-utils';
 import Vue from 'vue';
-// eslint-disable-next-line no-restricted-imports
-import Vuex from 'vuex';
+import { PiniaVuePlugin } from 'pinia';
+import { createTestingPinia } from '@pinia/testing';
 import IssuePlaceholderNote from '~/vue_shared/components/notes/placeholder_note.vue';
 import { userDataMock } from 'jest/notes/mock_data';
+import { globalAccessorPlugin } from '~/pinia/plugins';
+import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
+import { useNotes } from '~/notes/store/legacy_notes';
 
-Vue.use(Vuex);
-
-const getters = {
-  getUserData: () => userDataMock,
-};
+Vue.use(PiniaVuePlugin);
 
 describe('Issue placeholder note component', () => {
+  let pinia;
   let wrapper;
 
   const findNote = () => wrapper.findComponent({ ref: 'note' });
 
   const createComponent = (isIndividual = false, propsData = {}) => {
     wrapper = shallowMount(IssuePlaceholderNote, {
-      store: new Vuex.Store({
-        getters,
-      }),
+      pinia,
       propsData: {
         note: {
           body: 'Foo',
@@ -31,6 +29,12 @@ describe('Issue placeholder note component', () => {
     });
   };
 
+  beforeEach(() => {
+    pinia = createTestingPinia({ plugins: [globalAccessorPlugin] });
+    useLegacyDiffs();
+    useNotes().userData = userDataMock;
+  });
+
   it('matches snapshot', () => {
     createComponent();
 
diff --git a/spec/frontend/vue_shared/components/notes/system_note_spec.js b/spec/frontend/vue_shared/components/notes/system_note_spec.js
index 0c06dc6d9fc..bb21f5596be 100644
--- a/spec/frontend/vue_shared/components/notes/system_note_spec.js
+++ b/spec/frontend/vue_shared/components/notes/system_note_spec.js
@@ -1,30 +1,38 @@
+import Vue from 'vue';
 import MockAdapter from 'axios-mock-adapter';
 import { mount } from '@vue/test-utils';
+import { PiniaVuePlugin } from 'pinia';
+import { createTestingPinia } from '@pinia/testing';
 import waitForPromises from 'helpers/wait_for_promises';
-import createStore from '~/notes/stores';
 import IssueSystemNote from '~/vue_shared/components/notes/system_note.vue';
 import axios from '~/lib/utils/axios_utils';
 import { HTTP_STATUS_OK } from '~/lib/utils/http_status';
 import { renderGFM } from '~/behaviors/markdown/render_gfm';
+import { globalAccessorPlugin } from '~/pinia/plugins';
+import { useLegacyDiffs } from '~/diffs/stores/legacy_diffs';
+import { useNotes } from '~/notes/store/legacy_notes';
 
 jest.mock('~/behaviors/markdown/render_gfm');
 
+Vue.use(PiniaVuePlugin);
+
 describe('system note component', () => {
+  let pinia;
   let vm;
   let props;
   let mock;
 
   function createComponent(propsData = {}) {
-    const store = createStore();
-    store.dispatch('setTargetNoteHash', `note_${props.note.id}`);
+    useNotes().setTargetNoteHash(`note_${props.note.id}`);
 
     vm = mount(IssueSystemNote, {
-      store,
+      pinia,
       propsData,
     });
   }
 
   beforeEach(() => {
+    pinia = createTestingPinia({ plugins: [globalAccessorPlugin], stubActions: false });
     props = {
       note: {
         id: '1424',
@@ -43,6 +51,8 @@ describe('system note component', () => {
     };
 
     mock = new MockAdapter(axios);
+    useLegacyDiffs();
+    useNotes();
   });
 
   afterEach(() => {
diff --git a/spec/lib/api/entities/merge_request_basic_spec.rb b/spec/lib/api/entities/merge_request_basic_spec.rb
index d0a056547f7..0650fcc7f8b 100644
--- a/spec/lib/api/entities/merge_request_basic_spec.rb
+++ b/spec/lib/api/entities/merge_request_basic_spec.rb
@@ -51,8 +51,7 @@ RSpec.describe ::API::Entities::MergeRequestBasic, feature_category: :code_revie
         entities.to_json
       end
 
-      # The current threshold is 3 query per entity maximum.
-      expect(batch.count).to be_within(3 * query.count).of(control.count)
+      expect(batch.count).to be <= control.count * query.count
     end
   end
 
diff --git a/spec/lib/api/helpers_spec.rb b/spec/lib/api/helpers_spec.rb
index d3a5bc0968d..5d9de7505ee 100644
--- a/spec/lib/api/helpers_spec.rb
+++ b/spec/lib/api/helpers_spec.rb
@@ -1271,7 +1271,7 @@ RSpec.describe API::Helpers, feature_category: :shared do
       it 'does not destroy given project' do
         expect(project).not_to receive(:destroy)
 
-        expect { helper.destroy_conditionally!(project) }.to throw_symbol(:error).and change { Project.count }.by(0)
+        expect { helper.destroy_conditionally!(project) }.to throw_symbol(:error).and not_change { Project.count }
       end
     end
   end
diff --git a/spec/lib/gitlab/background_migration/backfill_user_details_spec.rb b/spec/lib/gitlab/background_migration/backfill_user_details_spec.rb
index 0935b02eaf0..4da9c7abee7 100644
--- a/spec/lib/gitlab/background_migration/backfill_user_details_spec.rb
+++ b/spec/lib/gitlab/background_migration/backfill_user_details_spec.rb
@@ -49,7 +49,7 @@ RSpec.describe Gitlab::BackgroundMigration::BackfillUserDetails, schema: 2024071
       it 'creates only the needed user_details entries' do
         expect(user_details.count).to eq(3)
 
-        expect { migration.perform }.to change { user_details.count }.by(0)
+        expect { migration.perform }.not_to change { user_details.count }
       end
     end
 
diff --git a/spec/lib/gitlab/cache/ci/project_pipeline_status_spec.rb b/spec/lib/gitlab/cache/ci/project_pipeline_status_spec.rb
index f97bf6ca922..37099771cca 100644
--- a/spec/lib/gitlab/cache/ci/project_pipeline_status_spec.rb
+++ b/spec/lib/gitlab/cache/ci/project_pipeline_status_spec.rb
@@ -95,7 +95,7 @@ RSpec.describe Gitlab::Cache::Ci::ProjectPipelineStatus, :clean_gitlab_redis_cac
         end
 
         it 'makes no Gitaly calls' do
-          expect { pipeline_status.load_status }.to change { Gitlab::GitalyClient.get_request_count }.by(0)
+          expect { pipeline_status.load_status }.not_to change { Gitlab::GitalyClient.get_request_count }
         end
       end
     end
diff --git a/spec/lib/gitlab/checks/matching_merge_request_spec.rb b/spec/lib/gitlab/checks/matching_merge_request_spec.rb
index cd69ccacff6..bc13c8120d0 100644
--- a/spec/lib/gitlab/checks/matching_merge_request_spec.rb
+++ b/spec/lib/gitlab/checks/matching_merge_request_spec.rb
@@ -73,7 +73,7 @@ RSpec.describe Gitlab::Checks::MatchingMergeRequest, feature_category: :source_c
         it 'only increments total counter' do
           expect { subject.match? }
             .to change { total_counter.get }.by(1)
-            .and change { stale_counter.get }.by(0)
+            .and not_change { stale_counter.get }
         end
       end
 
diff --git a/spec/lib/gitlab/database/background_migration/batched_migration_runner_spec.rb b/spec/lib/gitlab/database/background_migration/batched_migration_runner_spec.rb
index 9e59ab581a7..8cd067d9a02 100644
--- a/spec/lib/gitlab/database/background_migration/batched_migration_runner_spec.rb
+++ b/spec/lib/gitlab/database/background_migration/batched_migration_runner_spec.rb
@@ -212,7 +212,7 @@ RSpec.describe Gitlab::Database::BackgroundMigration::BatchedMigrationRunner, fe
             expect(job_record).to eq(previous_job)
           end
 
-          expect { runner.run_migration_job(migration) }.to change { job_relation.count }.by(0)
+          expect { runner.run_migration_job(migration) }.not_to change { job_relation.count }
         end
 
         context 'when failed job has reached the maximum number of attempts' do
@@ -223,7 +223,7 @@ RSpec.describe Gitlab::Database::BackgroundMigration::BatchedMigrationRunner, fe
           it 'marks the migration as failed' do
             expect(migration_wrapper).not_to receive(:perform)
 
-            expect { runner.run_migration_job(migration) }.to change { job_relation.count }.by(0)
+            expect { runner.run_migration_job(migration) }.not_to change { job_relation.count }
 
             expect(migration).to be_failed
           end
@@ -240,7 +240,7 @@ RSpec.describe Gitlab::Database::BackgroundMigration::BatchedMigrationRunner, fe
             expect(job_record).to eq(previous_job)
           end
 
-          expect { runner.run_migration_job(migration.reload) }.to change { job_relation.count }.by(0)
+          expect { runner.run_migration_job(migration.reload) }.not_to change { job_relation.count }
         end
       end
 
@@ -252,7 +252,7 @@ RSpec.describe Gitlab::Database::BackgroundMigration::BatchedMigrationRunner, fe
         it 'keeps the migration active' do
           expect(migration_wrapper).not_to receive(:perform)
 
-          expect { runner.run_migration_job(migration) }.to change { job_relation.count }.by(0)
+          expect { runner.run_migration_job(migration) }.not_to change { job_relation.count }
 
           expect(migration.reload).to be_active
         end
@@ -276,7 +276,7 @@ RSpec.describe Gitlab::Database::BackgroundMigration::BatchedMigrationRunner, fe
             expect(job_record).to eq(previous_job)
           end
 
-          expect { runner.run_migration_job(migration.reload) }.to change { job_relation.count }.by(0)
+          expect { runner.run_migration_job(migration.reload) }.not_to change { job_relation.count }
         end
       end
     end
diff --git a/spec/lib/gitlab/database/partitioning/list/convert_table_spec.rb b/spec/lib/gitlab/database/partitioning/list/convert_table_spec.rb
index 9c2acb67ab6..8563980a5f8 100644
--- a/spec/lib/gitlab/database/partitioning/list/convert_table_spec.rb
+++ b/spec/lib/gitlab/database/partitioning/list/convert_table_spec.rb
@@ -42,12 +42,12 @@ RSpec.describe Gitlab::Database::Partitioning::List::ConvertTable, feature_categ
         it 'raises UnableToPartition error' do
           expect { prepare }
             .to raise_error(described_class::UnableToPartition)
-                  .and change {
-                    Gitlab::Database::PostgresConstraint
-                      .check_constraints
-                      .by_table_identifier(table_identifier)
-                      .count
-                  }.by(0)
+            .and not_change {
+              Gitlab::Database::PostgresConstraint
+                .check_constraints
+                .by_table_identifier(table_identifier)
+                .count
+            }
         end
       end
 
@@ -105,12 +105,12 @@ RSpec.describe Gitlab::Database::Partitioning::List::ConvertTable, feature_categ
               expect { prepare }
                 .to raise_error(described_class::UnableToPartition,
                   starting_with('Error validating partitioning constraint'))
-                      .and change {
-                        Gitlab::Database::PostgresConstraint
-                          .check_constraints
-                          .by_table_identifier(table_identifier)
-                          .count
-                      }.by(0)
+                .and not_change {
+                  Gitlab::Database::PostgresConstraint
+                    .check_constraints
+                    .by_table_identifier(table_identifier)
+                    .count
+                }
             end
           end
         end
diff --git a/spec/lib/gitlab/database/tables_truncate_spec.rb b/spec/lib/gitlab/database/tables_truncate_spec.rb
index 352c2fff779..aa684296121 100644
--- a/spec/lib/gitlab/database/tables_truncate_spec.rb
+++ b/spec/lib/gitlab/database/tables_truncate_spec.rb
@@ -219,10 +219,9 @@ RSpec.describe Gitlab::Database::TablesTruncate, :reestablished_active_record_ba
           let(:until_table) { referencing_table_model.table_name }
 
           it 'only truncates until the table specified' do
-            expect do
-              truncate_legacy_tables
-            end.to change(referencing_table_model, :count).by(-5)
-               .and change(referenced_table_model, :count).by(0)
+            expect { truncate_legacy_tables }
+              .to change(referencing_table_model, :count).by(-5)
+              .and not_change(referenced_table_model, :count)
           end
         end
 
diff --git a/spec/lib/gitlab/git_access_project_spec.rb b/spec/lib/gitlab/git_access_project_spec.rb
index f7c58f3d8bc..9870ac8f92c 100644
--- a/spec/lib/gitlab/git_access_project_spec.rb
+++ b/spec/lib/gitlab/git_access_project_spec.rb
@@ -78,7 +78,7 @@ RSpec.describe Gitlab::GitAccessProject do
       it 'does not create a new project' do
         expect { action }
           .to raise_specific_error
-          .and change { Project.count }.by(0)
+          .and not_change { Project.count }
       end
     end
 
diff --git a/spec/lib/gitlab/github_import/importer/pull_requests/review_importer_spec.rb b/spec/lib/gitlab/github_import/importer/pull_requests/review_importer_spec.rb
index 431cd48bed5..d24b643df82 100644
--- a/spec/lib/gitlab/github_import/importer/pull_requests/review_importer_spec.rb
+++ b/spec/lib/gitlab/github_import/importer/pull_requests/review_importer_spec.rb
@@ -129,8 +129,8 @@ RSpec.describe Gitlab::GithubImport::Importer::PullRequests::ReviewImporter, :cl
 
           it 'does not import second approve and note' do
             expect { subject.execute }
-              .to change { Note.count }.by(0)
-              .and change { Approval.count }.by(0)
+              .to not_change { Note.count }
+              .and not_change { Approval.count }
           end
 
           it 'only pushes placeholder references for reviewer' do
@@ -315,8 +315,8 @@ RSpec.describe Gitlab::GithubImport::Importer::PullRequests::ReviewImporter, :cl
 
             it 'does not import second approve and note' do
               expect { subject.execute }
-                .to change { Note.count }.by(0)
-                .and change { Approval.count }.by(0)
+                .to not_change { Note.count }
+                .and not_change { Approval.count }
             end
           end
         end
diff --git a/spec/lib/gitlab/github_import/importer/releases_importer_spec.rb b/spec/lib/gitlab/github_import/importer/releases_importer_spec.rb
index 227ee21f136..2a2b4079016 100644
--- a/spec/lib/gitlab/github_import/importer/releases_importer_spec.rb
+++ b/spec/lib/gitlab/github_import/importer/releases_importer_spec.rb
@@ -95,7 +95,7 @@ RSpec.describe Gitlab::GithubImport::Importer::ReleasesImporter, feature_categor
       it 'is idempotent' do
         allow(importer).to receive(:each_release).and_return([github_release])
         expect { importer.execute }.to change { Release.count }.by(1)
-        expect { importer.execute }.to change { Release.count }.by(0) # Idempotency check
+        expect { importer.execute }.not_to change { Release.count } # Idempotency check
       end
 
       context 'when the body has user mentions' do
@@ -324,7 +324,7 @@ RSpec.describe Gitlab::GithubImport::Importer::ReleasesImporter, feature_categor
       it 'is idempotent' do
         allow(importer).to receive(:each_release).and_return([github_release])
         expect { importer.execute }.to change { Release.count }.by(1)
-        expect { importer.execute }.to change { Release.count }.by(0) # Idempotency check
+        expect { importer.execute }.not_to change { Release.count } # Idempotency check
       end
 
       context 'when the body has user mentions' do
diff --git a/spec/lib/gitlab/seeders/ci/catalog/resource_seeder_spec.rb b/spec/lib/gitlab/seeders/ci/catalog/resource_seeder_spec.rb
index 42a0ca477f6..812cbb6a329 100644
--- a/spec/lib/gitlab/seeders/ci/catalog/resource_seeder_spec.rb
+++ b/spec/lib/gitlab/seeders/ci/catalog/resource_seeder_spec.rb
@@ -100,7 +100,7 @@ RSpec.describe ::Gitlab::Seeders::Ci::Catalog::ResourceSeeder, feature_category:
       # We call the same command twice, as it means it would try to recreate
       # projects that were already created!
       expect { seed }.to change { group.projects.count }.by(seed_count)
-      expect { seed }.to change { group.projects.count }.by(0)
+      expect { seed }.not_to change { group.projects.count }
     end
 
     it 'creates as many projects as specific in the argument' do
diff --git a/spec/lib/gitlab/seeders/ci/variables_group_seeder_spec.rb b/spec/lib/gitlab/seeders/ci/variables_group_seeder_spec.rb
index 6dcca8b2841..c2c1de5422a 100644
--- a/spec/lib/gitlab/seeders/ci/variables_group_seeder_spec.rb
+++ b/spec/lib/gitlab/seeders/ci/variables_group_seeder_spec.rb
@@ -64,9 +64,8 @@ RSpec.describe ::Gitlab::Seeders::Ci::VariablesGroupSeeder, feature_category: :c
     end
 
     it 'skips seeding when group name is invalid' do
-      expect { invalid_group_name_seeder.seed }.to change {
-        group.variables.count
-      }.by(0)
+      expect { invalid_group_name_seeder.seed }
+        .not_to change { group.variables.count }
     end
 
     it 'skips CI variable creation if CI variable already exists' do
diff --git a/spec/lib/gitlab/seeders/ci/variables_project_seeder_spec.rb b/spec/lib/gitlab/seeders/ci/variables_project_seeder_spec.rb
index 4875f1e3cab..ff95c92b1a2 100644
--- a/spec/lib/gitlab/seeders/ci/variables_project_seeder_spec.rb
+++ b/spec/lib/gitlab/seeders/ci/variables_project_seeder_spec.rb
@@ -64,9 +64,8 @@ RSpec.describe ::Gitlab::Seeders::Ci::VariablesProjectSeeder, feature_category:
     end
 
     it 'skips seeding when project path is invalid' do
-      expect { invalid_project_path_seeder.seed }.to change {
-        project.variables.count
-      }.by(0)
+      expect { invalid_project_path_seeder.seed }
+        .not_to change { project.variables.count }
     end
 
     it 'skips CI variable creation if CI variable already exists' do
diff --git a/spec/lib/gitlab/seeders/project_environment_seeder_spec.rb b/spec/lib/gitlab/seeders/project_environment_seeder_spec.rb
index e1335a624db..342e4b440ba 100644
--- a/spec/lib/gitlab/seeders/project_environment_seeder_spec.rb
+++ b/spec/lib/gitlab/seeders/project_environment_seeder_spec.rb
@@ -32,9 +32,8 @@ RSpec.describe ::Gitlab::Seeders::ProjectEnvironmentSeeder, feature_category: :c
     end
 
     it 'skips seeding when project path is invalid' do
-      expect { invalid_project_path_seeder.seed }.to change {
-        project.environments.count
-      }.by(0)
+      expect { invalid_project_path_seeder.seed }
+        .not_to change { project.environments.count }
     end
 
     it 'skips environment creation if environment already exists' do
diff --git a/spec/lib/gitlab/topology_service_client/base_service_spec.rb b/spec/lib/gitlab/topology_service_client/base_service_spec.rb
index 163f90745df..d0afaa61af1 100644
--- a/spec/lib/gitlab/topology_service_client/base_service_spec.rb
+++ b/spec/lib/gitlab/topology_service_client/base_service_spec.rb
@@ -41,6 +41,8 @@ RSpec.describe Gitlab::TopologyServiceClient::BaseService, feature_category: :ce
       end
     end
 
+    let(:tls_config) { { tls: { enabled: true } } }
+
     let(:config) do
       {
         ca_file: ca_file.path,
@@ -52,7 +54,7 @@ RSpec.describe Gitlab::TopologyServiceClient::BaseService, feature_category: :ce
     subject(:service_credentials) { base_service.send(:service_credentials) }
 
     before do
-      stub_config(cell: { enabled: true, topology_service_client: config })
+      stub_config(cell: { enabled: true, topology_service_client: tls_config.merge(config) })
     end
 
     after do
@@ -161,5 +163,11 @@ RSpec.describe Gitlab::TopologyServiceClient::BaseService, feature_category: :ce
 
       include_examples 'insecure credentials'
     end
+
+    context 'when TLS is disabled' do
+      let(:tls_config) { { tls: { enabled: false } } }
+
+      it { expect(service_credentials).to eq(:this_channel_is_insecure) }
+    end
   end
 end
diff --git a/spec/migrations/db/migrate/20240806100120_remove_records_without_project_from_project_saved_replies_table_spec.rb b/spec/migrations/db/migrate/20240806100120_remove_records_without_project_from_project_saved_replies_table_spec.rb
index f35357bca44..58140797046 100644
--- a/spec/migrations/db/migrate/20240806100120_remove_records_without_project_from_project_saved_replies_table_spec.rb
+++ b/spec/migrations/db/migrate/20240806100120_remove_records_without_project_from_project_saved_replies_table_spec.rb
@@ -22,7 +22,7 @@ RSpec.describe RemoveRecordsWithoutProjectFromProjectSavedRepliesTable, feature_
 
       migrate!
 
-      expect { migrate! }.to change { project_saved_replies.count }.by(0)
+      expect { migrate! }.not_to change { project_saved_replies.count }
     end
   end
 end
diff --git a/spec/models/concerns/packages/downloadable_spec.rb b/spec/models/concerns/packages/downloadable_spec.rb
index 0598c096f00..77f56a8de7f 100644
--- a/spec/models/concerns/packages/downloadable_spec.rb
+++ b/spec/models/concerns/packages/downloadable_spec.rb
@@ -3,18 +3,28 @@
 require 'spec_helper'
 
 RSpec.describe Packages::Downloadable, feature_category: :package_registry do
-  context 'with a package' do
-    describe '#touch_last_downloaded_at' do
-      let_it_be(:package) { create(:generic_package) }
+  context 'with a package', :aggregate_failures do
+    let_it_be_with_reload(:package) { create(:generic_package) }
 
-      subject { package.touch_last_downloaded_at }
-
-      it 'updates the downloaded_at' do
+    shared_examples 'updating the last_downloaded_at column' do
+      specify do
         expect(::Gitlab::Database::LoadBalancing::SessionMap.current(package.load_balancer))
           .to receive(:without_sticky_writes).and_call_original
-        expect { subject }
-          .to change { package.last_downloaded_at }.from(nil).to(instance_of(ActiveSupport::TimeWithZone))
+        expect { execute }
+          .to change { package.reload.last_downloaded_at }.from(nil).to(instance_of(ActiveSupport::TimeWithZone))
       end
     end
+
+    describe '#touch_last_downloaded_at' do
+      subject(:execute) { package.touch_last_downloaded_at }
+
+      it_behaves_like 'updating the last_downloaded_at column'
+    end
+
+    describe '.touch_last_downloaded_at' do
+      subject(:execute) { ::Packages::Generic::Package.touch_last_downloaded_at(package.id) }
+
+      it_behaves_like 'updating the last_downloaded_at column'
+    end
   end
 end
diff --git a/spec/models/integrations/slack_workspace/api_scope_spec.rb b/spec/models/integrations/slack_workspace/api_scope_spec.rb
index 92052983242..bd701f80e64 100644
--- a/spec/models/integrations/slack_workspace/api_scope_spec.rb
+++ b/spec/models/integrations/slack_workspace/api_scope_spec.rb
@@ -12,7 +12,7 @@ RSpec.describe Integrations::SlackWorkspace::ApiScope, feature_category: :integr
         .to change { described_class.count }.by(1)
 
       expect { described_class.find_or_initialize_by_names(%w[baz foo]) }
-        .to change { described_class.count }.by(0)
+        .not_to change { described_class.count }
 
       expect(described_class.pluck(:name)).to match_array(%w[foo bar baz buzz])
     end
diff --git a/spec/models/user_spec.rb b/spec/models/user_spec.rb
index 65241d1aa44..d3407435111 100644
--- a/spec/models/user_spec.rb
+++ b/spec/models/user_spec.rb
@@ -5768,6 +5768,25 @@ RSpec.describe User, feature_category: :user_profile do
 
       context 'when owner is a non-owned group' do
         it_behaves_like 'group member'
+
+        context 'when access is provided by group invitation' do
+          let_it_be(:invited_group) { create(:group) }
+          let_it_be(:user) { create(:user, owner_of: invited_group) }
+
+          it 'returns false for owns_runner?' do
+            expect(user.owns_runner?(runner)).to eq(false)
+          end
+
+          context 'when invited_group is invited to group' do
+            before do
+              create(:group_group_link, :owner, shared_group: group, shared_with_group: invited_group)
+            end
+
+            it 'returns true for owns_runner?' do
+              expect(user.owns_runner?(runner)).to eq(true)
+            end
+          end
+        end
       end
 
       context 'when in an owned group' do
diff --git a/spec/policies/ci/runner_policy_spec.rb b/spec/policies/ci/runner_policy_spec.rb
index 83243b2cbbe..aef311660e0 100644
--- a/spec/policies/ci/runner_policy_spec.rb
+++ b/spec/policies/ci/runner_policy_spec.rb
@@ -81,6 +81,31 @@ RSpec.describe Ci::RunnerPolicy, feature_category: :runner do
 
           it { expect_allowed :update_runner }
         end
+
+        context 'when access is provided by group invitation' do
+          let_it_be(:invited_group) { create(:group) }
+          let_it_be(:user) { create(:user, owner_of: invited_group) }
+
+          it { expect_disallowed :update_runner }
+
+          context 'when invited_group is invited to group' do
+            before do
+              create(:group_group_link, access_level, shared_group: group, shared_with_group: invited_group)
+            end
+
+            context 'as owner' do
+              let(:access_level) { :owner }
+
+              it { expect_allowed :update_runner }
+            end
+
+            context 'as maintainer' do
+              let(:access_level) { :maintainer }
+
+              it { expect_disallowed :update_runner }
+            end
+          end
+        end
       end
 
       context 'with project runner' do
diff --git a/spec/requests/api/merge_requests_spec.rb b/spec/requests/api/merge_requests_spec.rb
index 6035a8203f1..2da72fdf758 100644
--- a/spec/requests/api/merge_requests_spec.rb
+++ b/spec/requests/api/merge_requests_spec.rb
@@ -79,7 +79,7 @@ RSpec.describe API::MergeRequests, :aggregate_failures, feature_category: :sourc
     end
 
     context 'when authenticated' do
-      it 'avoids N+1 queries', quarantine: 'https://gitlab.com/gitlab-org/gitlab/-/issues/330335' do
+      it 'avoids N+1 queries' do
         control = ActiveRecord::QueryRecorder.new do
           get api(endpoint_path, user)
         end
@@ -100,6 +100,22 @@ RSpec.describe API::MergeRequests, :aggregate_failures, feature_category: :sourc
         end.not_to exceed_query_limit(control)
       end
 
+      context 'when merge requests are merged' do
+        it 'avoids N+1 queries' do
+          create(:merge_request, state: :merged, source_project: project, target_project: project, merge_user: create(:user))
+
+          control = ActiveRecord::QueryRecorder.new do
+            get api(endpoint_path, user)
+          end
+
+          create(:merge_request, state: :merged, source_project: project, target_project: project, merge_user: create(:user))
+
+          expect do
+            get api(endpoint_path, user)
+          end.not_to exceed_query_limit(control)
+        end
+      end
+
       context 'when merge request is unchecked' do
         let(:check_service_class) { MergeRequests::MergeabilityCheckService }
         let(:mr_entity) { json_response.find { |mr| mr['id'] == merge_request.id } }
diff --git a/spec/support/rspec_order_todo.yml b/spec/support/rspec_order_todo.yml
index e947da47b38..141e3827d80 100644
--- a/spec/support/rspec_order_todo.yml
+++ b/spec/support/rspec_order_todo.yml
@@ -1332,7 +1332,6 @@
 - './ee/spec/models/project_ci_cd_setting_spec.rb'
 - './ee/spec/models/project_import_data_spec.rb'
 - './ee/spec/models/ee/project_member_spec.rb'
-- './ee/spec/models/project_security_setting_spec.rb'
 - './ee/spec/models/protected_branch/required_code_owners_section_spec.rb'
 - './ee/spec/models/protected_branch/unprotect_access_level_spec.rb'
 - './ee/spec/models/protected_environments/approval_rule_spec.rb'