From f4d5fa8ccc4d703ca29d63deda6eb62c743b17ed Mon Sep 17 00:00:00 2001
From: GitLab Bot <gitlab-bot@gitlab.com>
Date: Fri, 7 Jun 2024 06:20:33 +0000
Subject: [PATCH] Add latest changes from gitlab-org/gitlab@master

---
 .../javascripts/ci/common/pipelines_table.vue |   2 +-
 .../ci/job_details/components/job_header.vue  |   2 +-
 .../components/sidebar/sidebar_header.vue     |   2 +-
 .../legacy_pipelines_table_wrapper.vue        |   2 +-
 .../diffs/components/diff_stats.vue           |   2 +-
 .../groups/components/overview_tabs.vue       |   2 +-
 .../components/integration_form_actions.vue   |   2 +-
 .../components/sticky_header.vue              |   4 +-
 .../projects/compare/components/app.vue       |   4 +-
 .../show/components/issuable_header.vue       |   2 +-
 .../work_item_links/work_item_links.vue       |   4 +
 .../work_item_links/work_item_links_form.vue  |   9 +-
 .../work_item_projects_listbox.vue            |   8 +-
 ...ed_projects_for_links_widget.query.graphql |  21 ++
 app/mailers/emails/imports.rb                 |   2 +-
 app/models/bulk_import.rb                     |  22 ++
 app/views/groups/_home_panel.html.haml        |   2 +-
 .../layouts/header/_logo_with_title.html.haml |   4 +-
 app/views/search/_results_status.html.haml    |   4 +-
 app/views/search/show.html.haml               |   2 +-
 ...ify_owners_of_finished_direct_transfer.yml |   9 +
 db/docs/token_with_ivs.yml                    |   3 +-
 doc/development/ai_features/duo_chat.md       | 106 ++++++-
 doc/development/ai_features/index.md          | 294 ++++++------------
 doc/development/cloud_connector/index.md      |   2 +-
 doc/user/okrs.md                              |   6 +
 doc/user/tasks.md                             |   3 +
 qa/Gemfile                                    |   2 +-
 qa/Gemfile.lock                               |   4 +-
 .../work_item_links_form_spec.js              |   4 +
 .../work_item_projects_listbox_spec.js        | 200 ++++++++----
 spec/frontend/work_items/mock_data.js         |  44 +++
 spec/lib/result_spec.rb                       |   2 +-
 spec/mailers/emails/imports_spec.rb           |   2 +-
 spec/models/bulk_import_spec.rb               |  72 +++++
 spec/support/matchers/invoke_rop_steps.rb     |   2 +
 .../lint_factories_shared_examples.rb         |   2 +-
 ...etes_container_resources_validator_spec.rb |   1 -
 38 files changed, 565 insertions(+), 295 deletions(-)
 create mode 100644 app/assets/javascripts/work_items/graphql/related_projects_for_links_widget.query.graphql
 create mode 100644 config/feature_flags/gitlab_com_derisk/notify_owners_of_finished_direct_transfer.yml

diff --git a/app/assets/javascripts/ci/common/pipelines_table.vue b/app/assets/javascripts/ci/common/pipelines_table.vue
index 1f1233ed37a6..579b691174e3 100644
--- a/app/assets/javascripts/ci/common/pipelines_table.vue
+++ b/app/assets/javascripts/ci/common/pipelines_table.vue
@@ -162,7 +162,7 @@ export default {
       fixed
     >
       <template #head(actions)>
-        <span class="gl-display-block gl-lg-display-none!">{{ s__('Pipeline|Actions') }}</span>
+        <span class="gl-block lg:!gl-hidden">{{ s__('Pipeline|Actions') }}</span>
         <slot name="table-header-actions"></slot>
       </template>
 
diff --git a/app/assets/javascripts/ci/job_details/components/job_header.vue b/app/assets/javascripts/ci/job_details/components/job_header.vue
index 8f8808d3c03a..5ef99bbb0a47 100644
--- a/app/assets/javascripts/ci/job_details/components/job_header.vue
+++ b/app/assets/javascripts/ci/job_details/components/job_header.vue
@@ -105,7 +105,7 @@ export default {
           <gl-button
             :aria-label="__('Toggle sidebar')"
             category="secondary"
-            class="gl-lg-display-none gl-ml-2"
+            class="lg:gl-hidden gl-ml-2"
             icon="chevron-double-lg-left"
             @click="onClickSidebarButton"
           />
diff --git a/app/assets/javascripts/ci/job_details/components/sidebar/sidebar_header.vue b/app/assets/javascripts/ci/job_details/components/sidebar/sidebar_header.vue
index 5b914b5620b4..9970f6781585 100644
--- a/app/assets/javascripts/ci/job_details/components/sidebar/sidebar_header.vue
+++ b/app/assets/javascripts/ci/job_details/components/sidebar/sidebar_header.vue
@@ -171,7 +171,7 @@ export default {
       <gl-button
         :aria-label="$options.i18n.toggleSidebar"
         category="secondary"
-        class="gl-lg-display-none"
+        class="lg:gl-hidden"
         icon="chevron-double-lg-right"
         @click="toggleSidebar"
       />
diff --git a/app/assets/javascripts/commit/pipelines/legacy_pipelines_table_wrapper.vue b/app/assets/javascripts/commit/pipelines/legacy_pipelines_table_wrapper.vue
index a333401232e0..d9c609c3042d 100644
--- a/app/assets/javascripts/commit/pipelines/legacy_pipelines_table_wrapper.vue
+++ b/app/assets/javascripts/commit/pipelines/legacy_pipelines_table_wrapper.vue
@@ -282,7 +282,7 @@ export default {
       <gl-button
         v-if="canRenderPipelineButton"
         block
-        class="gl-mt-3 gl-mb-3 gl-lg-display-none"
+        class="gl-mt-3 gl-mb-3 lg:gl-hidden"
         variant="confirm"
         data-testid="run_pipeline_button_mobile"
         :loading="state.isRunningMergeRequestPipeline"
diff --git a/app/assets/javascripts/diffs/components/diff_stats.vue b/app/assets/javascripts/diffs/components/diff_stats.vue
index 7de8eff78631..09116e814974 100644
--- a/app/assets/javascripts/diffs/components/diff_stats.vue
+++ b/app/assets/javascripts/diffs/components/diff_stats.vue
@@ -53,7 +53,7 @@ export default {
   <div
     class="diff-stats"
     :class="{
-      'is-compare-versions-header gl-display-none gl-lg-display-inline-flex': isCompareVersionsHeader,
+      'is-compare-versions-header gl-hidden lg:gl-inline-flex': isCompareVersionsHeader,
       'gl-display-none gl-sm-display-inline-flex': !isCompareVersionsHeader,
     }"
   >
diff --git a/app/assets/javascripts/groups/components/overview_tabs.vue b/app/assets/javascripts/groups/components/overview_tabs.vue
index ac9c16bae31e..37f84e30f45e 100644
--- a/app/assets/javascripts/groups/components/overview_tabs.vue
+++ b/app/assets/javascripts/groups/components/overview_tabs.vue
@@ -227,7 +227,7 @@ export default {
     </gl-tab>
     <template #tabs-end>
       <li class="gl-flex-grow-1 gl-align-self-center gl-w-full gl-lg-w-auto gl-py-2">
-        <div class="gl-lg-display-flex gl-justify-content-end -gl-mx-2 -gl-my-2">
+        <div class="lg:gl-flex gl-justify-content-end -gl-mx-2 -gl-my-2">
           <div class="gl-p-2 gl-lg-form-input-md gl-w-full">
             <gl-search-box-by-type
               :value="search"
diff --git a/app/assets/javascripts/integrations/edit/components/integration_form_actions.vue b/app/assets/javascripts/integrations/edit/components/integration_form_actions.vue
index 501765d39410..6b56aa03e6c3 100644
--- a/app/assets/javascripts/integrations/edit/components/integration_form_actions.vue
+++ b/app/assets/javascripts/integrations/edit/components/integration_form_actions.vue
@@ -70,7 +70,7 @@ export default {
 };
 </script>
 <template>
-  <section class="gl-lg-display-flex gl-justify-content-space-between">
+  <section class="lg:gl-flex gl-justify-content-space-between">
     <div>
       <template v-if="isInstanceOrGroupLevel">
         <gl-button
diff --git a/app/assets/javascripts/merge_requests/components/sticky_header.vue b/app/assets/javascripts/merge_requests/components/sticky_header.vue
index 46ee47612b52..11cc06b78167 100644
--- a/app/assets/javascripts/merge_requests/components/sticky_header.vue
+++ b/app/assets/javascripts/merge_requests/components/sticky_header.vue
@@ -173,7 +173,7 @@ export default {
           <a
             v-safe-html:[$options.safeHtmlConfig]="titleHtml"
             href="#top"
-            class="gl-display-none gl-lg-display-block gl-font-bold gl-overflow-hidden gl-whitespace-nowrap gl-text-overflow-ellipsis gl-my-0 gl-ml-1 gl-mr-2 gl-text-black-normal"
+            class="gl-hidden lg:gl-block gl-font-bold gl-overflow-hidden gl-whitespace-nowrap gl-text-overflow-ellipsis gl-my-0 gl-ml-1 gl-mr-2 gl-text-black-normal"
           ></a>
           <div class="gl-display-flex gl-align-items-center">
             <gl-sprintf :message="__('%{source} %{copyButton} into %{target}')">
@@ -243,7 +243,7 @@ export default {
               </gl-link>
             </li>
           </ul>
-          <div class="gl-display-none gl-lg-display-flex gl-align-items-center gl-ml-auto">
+          <div class="gl-hidden lg:gl-flex gl-align-items-center gl-ml-auto">
             <discussion-counter :blocks-merge="blocksMerge" hide-options />
             <div
               v-if="isSignedIn"
diff --git a/app/assets/javascripts/projects/compare/components/app.vue b/app/assets/javascripts/projects/compare/components/app.vue
index b40b28adab93..647fd6655201 100644
--- a/app/assets/javascripts/projects/compare/components/app.vue
+++ b/app/assets/javascripts/projects/compare/components/app.vue
@@ -141,9 +141,7 @@ export default {
         </template>
       </gl-sprintf>
     </p>
-    <div
-      class="gl-lg-flex-direction-row gl-lg-display-flex gl-align-items-center compare-revision-cards"
-    >
+    <div class="gl-lg-flex-direction-row lg:gl-flex gl-align-items-center compare-revision-cards">
       <revision-card
         data-testid="sourceRevisionCard"
         :refs-project-path="to.refsProjectPath"
diff --git a/app/assets/javascripts/vue_shared/issuable/show/components/issuable_header.vue b/app/assets/javascripts/vue_shared/issuable/show/components/issuable_header.vue
index dcfdd3a83010..4a3fb5768445 100644
--- a/app/assets/javascripts/vue_shared/issuable/show/components/issuable_header.vue
+++ b/app/assets/javascripts/vue_shared/issuable/show/components/issuable_header.vue
@@ -216,7 +216,7 @@ export default {
       />
       <span
         v-if="taskCompletionStatus && hasTasks"
-        class="gl-hidden md:gl-block gl-lg-display-inline-block"
+        class="gl-hidden md:gl-block lg:gl-inline-block"
         >{{ taskStatusString }}</span
       >
       <gl-button
diff --git a/app/assets/javascripts/work_items/components/work_item_links/work_item_links.vue b/app/assets/javascripts/work_items/components/work_item_links/work_item_links.vue
index d8676af6442c..df1d3a99cf57 100644
--- a/app/assets/javascripts/work_items/components/work_item_links/work_item_links.vue
+++ b/app/assets/javascripts/work_items/components/work_item_links/work_item_links.vue
@@ -153,6 +153,9 @@ export default {
     childrenCountLabel() {
       return this.isLoading && this.children.length === 0 ? '...' : this.children.length;
     },
+    activeChildNamespaceFullPath() {
+      return this.activeChild.namespace?.fullPath;
+    },
   },
   methods: {
     showAddForm(formType) {
@@ -307,6 +310,7 @@ export default {
             ref="modal"
             :work-item-id="activeChild.id"
             :work-item-iid="activeChild.iid"
+            :work-item-full-path="activeChildNamespaceFullPath"
             @close="closeModal"
             @workItemDeleted="handleWorkItemDeleted(activeChild)"
             @openReportAbuse="openReportAbuseDrawer"
diff --git a/app/assets/javascripts/work_items/components/work_item_links/work_item_links_form.vue b/app/assets/javascripts/work_items/components/work_item_links/work_item_links_form.vue
index d14abb59df55..a673e02376d2 100644
--- a/app/assets/javascripts/work_items/components/work_item_links/work_item_links_form.vue
+++ b/app/assets/javascripts/work_items/components/work_item_links/work_item_links_form.vue
@@ -16,6 +16,7 @@ import {
   I18N_WORK_ITEM_ADD_MULTIPLE_BUTTON_LABEL,
   I18N_WORK_ITEM_CONFIDENTIALITY_CHECKBOX_LABEL,
   I18N_WORK_ITEM_CONFIDENTIALITY_CHECKBOX_TOOLTIP,
+  WORK_ITEM_TYPE_VALUE_EPIC,
   sprintfWorkItem,
 } from '../../constants';
 import WorkItemProjectsListbox from './work_item_projects_listbox.vue';
@@ -109,6 +110,9 @@ export default {
     };
   },
   computed: {
+    workItemChildIsEpic() {
+      return this.childrenTypeName === WORK_ITEM_TYPE_VALUE_EPIC;
+    },
     workItemInput() {
       let workItemInput = {
         title: this.search?.title || this.search,
@@ -199,7 +203,7 @@ export default {
     },
     canSubmitForm() {
       if (this.isCreateForm) {
-        if (this.isGroup) {
+        if (this.isGroup && !this.workItemChildIsEpic) {
           return this.search.length > 0 && this.selectedProject !== null;
         }
         return this.search.length > 0;
@@ -342,7 +346,7 @@ export default {
           />
         </gl-form-group>
         <gl-form-group
-          v-if="isGroup"
+          v-if="!workItemChildIsEpic"
           class="gl-w-full"
           :label="$options.i18n.projectInputLabel"
           :description="$options.i18n.projectValidationMessage"
@@ -356,7 +360,6 @@ export default {
         </gl-form-group>
       </div>
       <gl-form-checkbox
-        v-if="isCreateForm"
         ref="confidentialityCheckbox"
         v-model="confidential"
         name="isConfidential"
diff --git a/app/assets/javascripts/work_items/components/work_item_links/work_item_projects_listbox.vue b/app/assets/javascripts/work_items/components/work_item_links/work_item_projects_listbox.vue
index 5d5ef9f5896d..de699a795f89 100644
--- a/app/assets/javascripts/work_items/components/work_item_links/work_item_projects_listbox.vue
+++ b/app/assets/javascripts/work_items/components/work_item_links/work_item_projects_listbox.vue
@@ -7,6 +7,7 @@ import { STORAGE_KEY } from '~/super_sidebar/constants';
 import AccessorUtilities from '~/lib/utils/accessor';
 import { getTopFrequentItems } from '~/super_sidebar/utils';
 import groupProjectsForLinksWidgetQuery from '../../graphql/group_projects_for_links_widget.query.graphql';
+import relatedProjectsForLinksWidgetQuery from '../../graphql/related_projects_for_links_widget.query.graphql';
 import { SEARCH_DEBOUNCE, MAX_FREQUENT_PROJECTS } from '../../constants';
 
 export default {
@@ -45,7 +46,7 @@ export default {
   apollo: {
     projects: {
       query() {
-        return groupProjectsForLinksWidgetQuery;
+        return this.isGroup ? groupProjectsForLinksWidgetQuery : relatedProjectsForLinksWidgetQuery;
       },
       variables() {
         return {
@@ -54,10 +55,7 @@ export default {
         };
       },
       update(data) {
-        return data.group?.projects?.nodes;
-      },
-      skip() {
-        return !this.isGroup;
+        return this.isGroup ? data.group?.projects?.nodes : data.project?.group?.projects?.nodes;
       },
       debounce: SEARCH_DEBOUNCE,
     },
diff --git a/app/assets/javascripts/work_items/graphql/related_projects_for_links_widget.query.graphql b/app/assets/javascripts/work_items/graphql/related_projects_for_links_widget.query.graphql
new file mode 100644
index 000000000000..060cc6c4d01b
--- /dev/null
+++ b/app/assets/javascripts/work_items/graphql/related_projects_for_links_widget.query.graphql
@@ -0,0 +1,21 @@
+query relatedProjectsForLinksWidget($fullPath: ID!, $projectSearch: String) {
+  project(fullPath: $fullPath) {
+    id
+    group {
+      id
+      projects(search: $projectSearch, includeSubgroups: true) {
+        nodes {
+          id
+          name
+          avatarUrl
+          nameWithNamespace
+          fullPath
+          namespace {
+            id
+            name
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/app/mailers/emails/imports.rb b/app/mailers/emails/imports.rb
index 452fc5e846f7..bb6262bfa3ee 100644
--- a/app/mailers/emails/imports.rb
+++ b/app/mailers/emails/imports.rb
@@ -15,7 +15,7 @@ def github_gists_import_errors_email(user_id, errors)
     def bulk_import_complete(user_id, bulk_import_id)
       user = User.find(user_id)
       @bulk_import = BulkImport.find(bulk_import_id)
-      @bulk_import_entity = @bulk_import.entities.find_by(source_type: 'group_entity') # rubocop:disable CodeReuse/ActiveRecord -- Move this to BulkImport model
+      @bulk_import_entity = @bulk_import.parent_group_entity
       @hostname = @bulk_import.configuration.url
       @source_group = @bulk_import_entity.source_full_path
       title = safe_format(
diff --git a/app/models/bulk_import.rb b/app/models/bulk_import.rb
index 3e3cf74831fd..e9795c6fd4b9 100644
--- a/app/models/bulk_import.rb
+++ b/app/models/bulk_import.rb
@@ -54,6 +54,10 @@ class BulkImport < ApplicationRecord
     # rubocop:disable Style/SymbolProc
     after_transition any => [:finished, :failed, :timeout] do |bulk_import|
       bulk_import.update_has_failures
+
+      if Feature.enabled?(:notify_owners_of_finished_direct_transfer, bulk_import.user)
+        bulk_import.notify_owners_of_completion
+      end
     end
     # rubocop:enable Style/SymbolProc
 
@@ -100,4 +104,22 @@ def supports_batched_export?
   def completed?
     finished? || failed? || timeout? || canceled?
   end
+
+  def notify_owners_of_completion
+    users_to_notify = parent_group_entity&.group&.owners
+
+    return if users_to_notify.blank?
+
+    users_to_notify.each do |owner|
+      run_after_commit do
+        Notify.bulk_import_complete(owner.id, id).deliver_later
+      end
+    end
+  end
+
+  # Finds the root group entity of the BulkImport's entity tree.
+  # @return [BulkImports::Entity, nil]
+  def parent_group_entity
+    entities.group_entity.where(parent: nil).first
+  end
 end
diff --git a/app/views/groups/_home_panel.html.haml b/app/views/groups/_home_panel.html.haml
index 61926c2ad0f4..93735f8ff213 100644
--- a/app/views/groups/_home_panel.html.haml
+++ b/app/views/groups/_home_panel.html.haml
@@ -35,5 +35,5 @@
       .home-panel-description.text-break
         .home-panel-description-markdown.read-more-container{ itemprop: 'description' }
           = markdown_field(@group, :description)
-        = render Pajamas::ButtonComponent.new(variant: :link, button_options: { class: 'js-read-more-trigger gl-lg-display-none' }) do
+        = render Pajamas::ButtonComponent.new(variant: :link, button_options: { class: 'js-read-more-trigger lg:gl-hidden' }) do
           = _("Read more")
diff --git a/app/views/layouts/header/_logo_with_title.html.haml b/app/views/layouts/header/_logo_with_title.html.haml
index 66614bdb21e3..9788582f1629 100644
--- a/app/views/layouts/header/_logo_with_title.html.haml
+++ b/app/views/layouts/header/_logo_with_title.html.haml
@@ -1,5 +1,5 @@
 %header.navbar.fixed-top.navbar-gitlab.justify-content-center
-  .gl-display-none.gl-lg-display-block
+  .gl-hidden.lg:gl-block
     = render partial: 'shared/logo_with_white_text', formats: :svg
-  .gl-lg-display-none
+  .lg:gl-hidden
     = render partial: 'shared/logo', formats: :svg
diff --git a/app/views/search/_results_status.html.haml b/app/views/search/_results_status.html.haml
index f46f282c7fc2..e7cf0ab9962b 100644
--- a/app/views/search/_results_status.html.haml
+++ b/app/views/search/_results_status.html.haml
@@ -1,4 +1,4 @@
-.search-results-status.gl-sm-display-flex.gl-items-start.gl-justify-content-space-between.gl-my-4{ class: ('gl-lg-display-none' if @search_objects.to_a.empty?) }
+.search-results-status.gl-sm-display-flex.gl-items-start.gl-justify-content-space-between.gl-my-4{ class: ('lg:gl-hidden' if @search_objects.to_a.empty?) }
   - unless @search_objects.to_a.empty?
     %div
       - unless @search_service_presenter.without_count?
@@ -17,7 +17,7 @@
           - link_to_group = link_to(@group.name, @group, class: 'ml-md-1')
           = safe_format(_("in group %{link_to_group}"), link_to_group: link_to_group)
   .gl-flex.gl-gap-3.gl-mt-3.gl-sm-mt-0
-    = render Pajamas::ButtonComponent.new(category: 'primary', icon: 'filter', button_options: {id: 'js-open-mobile-filters', class: 'gl-lg-display-none gl-flex-grow-1 gl-md-flex-grow-0'}) do
+    = render Pajamas::ButtonComponent.new(category: 'primary', icon: 'filter', button_options: {id: 'js-open-mobile-filters', class: 'lg:gl-hidden gl-flex-grow-1 gl-md-flex-grow-0'}) do
       = s_('GlobalSearch|Filters')
     - if @search_service_presenter.show_sort_dropdown? && !@search_objects.to_a.empty?
       #js-search-sort{ data: { "search-sort-options" => search_sort_options.to_json }, class: "gl-flex-grow-1 gl-md-flex-grow-0" }
diff --git a/app/views/search/show.html.haml b/app/views/search/show.html.haml
index ec4f362dde3a..bc0aa538d641 100644
--- a/app/views/search/show.html.haml
+++ b/app/views/search/show.html.haml
@@ -17,7 +17,7 @@
   - page_card_attributes("Namespace" => @group&.full_path, "Project" => @project&.full_path)
 
 #js-search-topbar{ data: { "default-branch-name": @project&.default_branch } }
-.results.gl-lg-display-flex.gl-mt-0
+.results.lg:gl-flex.gl-mt-0
   #js-search-sidebar{ data: { navigation_json: search_navigation_json, search_type: search_service.search_type, search_level: search_service.level, group_initial_json: group_attributes.to_json, project_initial_json: project_attributes.to_json, } }
   - if @search_term
     = render 'search/results'
diff --git a/config/feature_flags/gitlab_com_derisk/notify_owners_of_finished_direct_transfer.yml b/config/feature_flags/gitlab_com_derisk/notify_owners_of_finished_direct_transfer.yml
new file mode 100644
index 000000000000..38a8f0054f5a
--- /dev/null
+++ b/config/feature_flags/gitlab_com_derisk/notify_owners_of_finished_direct_transfer.yml
@@ -0,0 +1,9 @@
+---
+name: notify_owners_of_finished_direct_transfer
+feature_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/458115
+introduced_by_url: https://gitlab.com/gitlab-org/gitlab/-/merge_requests/155262
+rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/465487
+milestone: '17.1'
+group: group::import and integrate
+type: gitlab_com_derisk
+default_enabled: false
diff --git a/db/docs/token_with_ivs.yml b/db/docs/token_with_ivs.yml
index 027685040736..6ed3ba59a914 100644
--- a/db/docs/token_with_ivs.yml
+++ b/db/docs/token_with_ivs.yml
@@ -1,7 +1,6 @@
 ---
 table_name: token_with_ivs
-classes:
-- TokenWithIv
+classes: []
 feature_categories:
 - system_access
 description: TODO
diff --git a/doc/development/ai_features/duo_chat.md b/doc/development/ai_features/duo_chat.md
index 876a0f28a886..06a2382a0281 100644
--- a/doc/development/ai_features/duo_chat.md
+++ b/doc/development/ai_features/duo_chat.md
@@ -47,7 +47,7 @@ you find a solution.
 | Problem                                                               | Solution                                                                                                                                                                                                                                                                              |
 |-----------------------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
 | There is no Chat button in the GitLab UI.                             | Make sure your user is a part of a group with enabled experimental and beta features.                                                                                                                                                                                                 |
-| Chat replies with "Forbidden by auth provider" error.                 | Backend can't access LLMs. Make sure your [AI Gateway](index.md#set-up) is set up correctly.                                                                                                                                                                                      |
+| Chat replies with "Forbidden by auth provider" error.                 | Backend can't access LLMs. Make sure your [AI Gateway](index.md#set-up-the-ai-gateway) is set up correctly.                                                                                                                                                                                      |
 | Requests take too long to appear in UI                               | Consider restarting Sidekiq by running `gdk restart rails-background-jobs`. If that doesn't work, try `gdk kill` and then `gdk start`. Alternatively, you can bypass Sidekiq entirely. To do that temporary alter `Llm::CompletionWorker.perform_async` statements with `Llm::CompletionWorker.perform_inline` |
 | There is no chat button in GitLab UI when GDK is running on non-SaaS mode | You do not have cloud connector access token record or seat assigned. To create cloud connector access record, in rails console put following code: `CloudConnector::Access.new(data: { available_services: [{ name: "duo_chat", serviceStartTime: ":date_in_the_future" }] }).save`. |
 
@@ -246,7 +246,6 @@ To run the QA Evaluation test locally, the following environment variables
 must be exported:
 
 ```ruby
-export VERTEX_AI_EMBEDDINGS='true' # if using Vertex embeddings
 export ANTHROPIC_API_KEY='<key>' # can use dev value of Gitlab::CurrentSettings
 export VERTEX_AI_CREDENTIALS='<vertex-ai-credentials>' # can set as dev value of Gitlab::CurrentSettings.vertex_ai_credentials
 export VERTEX_AI_PROJECT='<vertex-project-name>' # can use dev value of Gitlab::CurrentSettings.vertex_ai_project
@@ -254,10 +253,6 @@ export VERTEX_AI_PROJECT='<vertex-project-name>' # can use dev value of Gitlab::
 REAL_AI_REQUEST=1 bundle exec rspec ee/spec/lib/gitlab/llm/completions/chat_real_requests_spec.rb
 ```
 
-When you update the test questions that require documentation embeddings,
-make sure you [generate a new fixture](index.md#using-in-specs) and
-commit it together with the change.
-
 ## Testing with CI
 
 The following CI jobs for GitLab project run the tests tagged with `real_ai_request`:
@@ -363,9 +358,108 @@ We therefore need to broadcast messages to multiple clients to keep them in sync
 1. All complete Chat messages (including messages from the user) are broadcasted with the `userId`, `aiAction: "chat"` as identifier.
 1. Chunks from streamed Chat messages and currently used tools are broadcasted with the `userId`, `resourceId`, and the `clientSubscriptionId` from the mutation as identifier.
 
+Examples of GraphQL Subscriptions in a Vue component:
+
+1. Complete Chat message
+
+   ```javascript
+   import aiResponseSubscription from 'ee/graphql_shared/subscriptions/ai_completion_response.subscription.graphql';
+   [...]
+
+   apollo: {
+    $subscribe: {
+      aiCompletionResponse: {
+        query: aiResponseSubscription,
+        variables() {
+          return {
+            userId, // for example "gid://gitlab/User/1"
+            aiAction: 'CHAT',
+          };
+        },
+        result({ data }) {
+          // handle data.aiCompletionResponse
+        },
+        error(err) {
+          // handle error
+        },
+      },
+    },
+   ```
+
+1. Streamed Chat message
+
+   ```javascript
+   import aiResponseSubscription from 'ee/graphql_shared/subscriptions/ai_completion_response.subscription.graphql';
+   [...]
+
+   apollo: {
+    $subscribe: {
+      aiCompletionResponseStream: {
+        query: aiResponseSubscription,
+        variables() {
+          return {
+            userId, // for example "gid://gitlab/User/1"
+            resourceId, // can be either a resourceId (on Issue, Epic, etc. items), or userId
+            clientSubscriptionId // randomly generated identifier for every message
+            htmlResponse: false, // important to bypass HTML processing on every chunk
+          };
+        },
+        result({ data }) {
+          // handle data.aiCompletionResponse
+        },
+        error(err) {
+          // handle error
+        },
+      },
+    },
+   ```
+
 Note that we still broadcast chat messages and currently used tools using the `userId` and `resourceId` as identifier.
 However, this is deprecated and should no longer be used. We want to remove `resourceId` on the subscription as part of [this issue](https://gitlab.com/gitlab-org/gitlab/-/issues/420296).
 
+### Duo Chat GraphQL queries
+
+1. [Set up GitLab Duo Chat](#set-up-gitlab-duo-chat)
+1. Visit [GraphQL explorer](../../api/graphql/index.md#interactive-graphql-explorer).
+1. Execute the `aiAction` mutation. Here is an example:
+
+   ```graphql
+   mutation {
+     aiAction(
+       input: {
+         chat: {
+           resourceId: "gid://gitlab/User/1",
+           content: "Hello"
+         }
+       }
+     ){
+       requestId
+       errors
+     }
+   }
+   ```
+
+1. Execute the following query to fetch the response:
+
+   ```graphql
+   query {
+     aiMessages {
+       nodes {
+         requestId
+         content
+         role
+         timestamp
+         chunkId
+         errors
+       }
+     }
+   }
+   ```
+
+If you can't fetch the response, check `graphql_json.log`,
+`sidekiq_json.log`, `llm.log` or `modelgateway_debug.log` if it contains error
+information.
+
 ## Testing GitLab Duo Chat in production-like environments
 
 GitLab Duo Chat is enabled in the [Staging](https://staging.gitlab.com/users/sign_in) and
diff --git a/doc/development/ai_features/index.md b/doc/development/ai_features/index.md
index 369953a7c32a..21067babd9af 100644
--- a/doc/development/ai_features/index.md
+++ b/doc/development/ai_features/index.md
@@ -6,42 +6,56 @@ info: Any user with at least the Maintainer role can merge updates to this conte
 
 # AI features based on 3rd-party integrations
 
-## Get started
+## Local setup
 
 ### Access
 
+Access to both Google Cloud Vertex and Anthropic are recommended for setup. 
+
 #### Google Cloud Vertex
 
 To obtain a Google Cloud service key for local development, follow the steps below:
 
-- Create a sandbox Google Cloud project by visiting [this page](https://handbook.gitlab.com/handbook/infrastructure-standards/#individual-environment)
-  and following the instructions, or by requesting access to our existing group
-  Google Cloud project by using [this template](https://gitlab.com/gitlab-com/it/infra/issue-tracker/-/issues/new?issuable_template=gcp_group_account_iam_update_request).
-- If you are using an individual Google Cloud project, you may also need to
-  enable the Vertex AI API:
-  1. Visit [welcome page](https://console.cloud.google.com/welcome), choose
-     your project (e.g. jdoe-5d23dpe).
-  1. Go to **APIs & Services > Enabled APIs & services**.
-  1. Select **Enable APIs and Services**.
-  1. Search for `Vertex AI API`.
-  1. Select **Vertex AI API**, then select **Enable**.
-- Install the [`gcloud` CLI](https://cloud.google.com/sdk/docs/install)
-- Authenticate locally with Google Cloud using the
+1. Set up a Google Cloud project
+   1. Option 1 (recommended for GitLab team members): request access to our
+      existing group Google Cloud project by using
+      [this template](https://gitlab.com/gitlab-com/it/infra/issue-tracker/-/issues/new?issuable_template=gcp_group_account_iam_update_request)
+      This project has Vertex APIs and Vertex AI Search (for Duo Chat
+      documentaton questions) already enabled
+   1. Option 2: Create a sandbox Google Cloud project by following the instructions
+      in [the handbook](https://handbook.gitlab.com/handbook/infrastructure-standards/#individual-environment).
+      If you are using an individual Google Cloud project, you may also need to
+      enable the Vertex AI API:
+      1. Visit [welcome page](https://console.cloud.google.com/welcome), choose
+         your project (for example: `jdoe-5d23dpe`).
+      1. Go to **APIs & Services > Enabled APIs & services**.
+      1. Select **Enable APIs and Services**.
+      1. Search for `Vertex AI API`.
+      1. Select **Vertex AI API**, then select **Enable**.
+1. Install the [`gcloud` CLI](https://cloud.google.com/sdk/docs/install)
+   1. If you already use [`asdf`](https://asdf-vm.com/) for runtime version
+    management, you can install `gcloud` with the
+    [`asdf gcloud` plugin](https://github.com/jthegedus/asdf-gcloud)
+1. Authenticate locally with Google Cloud using the
   [`gcloud auth application-default login`](https://cloud.google.com/sdk/gcloud/reference/auth/application-default/login)
   command.
-- Open the Rails console. Update the settings to:
+1. Open a Rails console. Update the settings to:
 
-```ruby
-# PROJECT_ID = "your-google-cloud-project-name"
+   ```ruby
+   # PROJECT_ID = "ai-enablement-dev-69497ba7" for GitLab team members with access
+   # to the group using the access request method described above
 
-Gitlab::CurrentSettings.update(vertex_ai_project: "PROJECT_ID")
-```
+   # PROJECT_ID = "your-google-cloud-project-name" for those with their own sandbox
+   # Google Cloud project.
+
+   Gitlab::CurrentSettings.update!(vertex_ai_project: "PROJECT_ID")
+   ```
 
 #### Anthropic
 
 After filling out an
 [access request](https://gitlab.com/gitlab-com/team-member-epics/access-requests/-/issues/new?issuable_template=AI_Access_Request),
-you can sign up for an Anthropic account and create an API key.
+you can sign up for an Anthropic account and [create an API key](https://docs.anthropic.com/en/docs/getting-access-to-claude).
 
 Run the following in a Rails console locally:
 
@@ -49,23 +63,36 @@ Run the following in a Rails console locally:
 Gitlab::CurrentSettings.update!(anthropic_api_key: "<insert API key>")
 ```
 
-### Licenses and feature flags
+### Configure GDK
 
-1. Ensure you have followed [the process to obtain an EE license](https://handbook.gitlab.com/handbook/developer-onboarding/#working-on-gitlab-ee-developer-licenses)
-   for your local instance and you applied Ultimate license.
+#### Licenses and feature flags
+
+1. Follow [the process to obtain an EE license](https://handbook.gitlab.com/handbook/developer-onboarding/#working-on-gitlab-ee-developer-licenses)
+   for your local instance and [upload the license](../../administration/license_file.md).
    1. To verify that the license is applied go to **Admin Area** > **Subscription**
       and check the subscription plan.
-1. Run `rake gitlab:duo:enable_feature_flags` to enable all feature flags that
-   are assigned to AI Framework.
-1. If you are running GDK in SaaS mode, you need to enable Duo features for a
-   specific group. To do this, run
-   `GITLAB_SIMULATE_SAAS=1 RAILS_ENV=development bundle exec rake 'gitlab:duo:setup[<test-group-name>]'`
-   Replace`<test-group-name>` with the group name you want to enable GitLab Duo
-   features. If the group doesn't exist, it creates a new one. You might need to
+1. Enable all AI-related feature flags:
+
+   ```shell
+   rake gitlab:duo:enable_feature_flags
+   ```
+
+1. If you are running GDK in SaaS mode (recommended), you need to enable Duo
+   features for at least one group. To do this, run:
+
+   ```shell
+    GITLAB_SIMULATE_SAAS=1 RAILS_ENV=development bundle exec rake 'gitlab:duo:setup[<test-group-name>]'
+   ```
+
+   Replace `<test-group-name>` with the name of any top-level group. If the
+   group doesn't exist, it creates a new one. You might need to
    re-run the script multiple times; it prints error messages with links
    on how to resolve the error.
+   Membership to a group with Duo features enabled is what enables many AI
+   features. To enable AI feature access locally, make sure that your test user is
+   a member of the group with Duo features enabled.
 
-## Set up the AI Gateway locally
+#### Set up the AI Gateway
 
 To develop AI features that are compatible with all GitLab instances,
 the feature must proxy requests through the [AI Gateway](../../architecture/blueprints/ai_gateway/index.md).
@@ -77,91 +104,42 @@ the feature must proxy requests through the [AI Gateway](../../architecture/blue
    Gitlab::Llm::Chain::Requests::AiGateway.new(User.first).request(prompt: [{role: "user", content: "Hi, how are you?"}])
    ```
 
-### Verify the setup with GraphQL
-
-1. Visit [GraphQL explorer](../../api/graphql/index.md#interactive-graphql-explorer).
-1. Execute the `aiAction` mutation. Here is an example:
-
-   ```graphql
-   mutation {
-     aiAction(
-       input: {
-         chat: {
-           resourceId: "gid://gitlab/User/1",
-           content: "Hello"
-         }
-       }
-     ){
-       requestId
-       errors
-     }
-   }
-   ```
-
-1. (GitLab Duo Chat only) Execute the following query to fetch the response:
-
-   ```graphql
-   query {
-     aiMessages {
-       nodes {
-         requestId
-         content
-         role
-         timestamp
-         chunkId
-         errors
-       }
-     }
-   }
-   ```
+#### Environment variables
 
-If you can't fetch the response, check `graphql_json.log`,
-`sidekiq_json.log`, `llm.log` or `modelgateway_debug.log` if it contains error
-information.
+The following variables should be set in the `env.runit` file in your GDK root:
 
-### Optional: Embeddings
-
-[Embeddings](glossary.md) are necessary for working with Duo Chat documentation
-questions locally. They are not necessary for other AI Features.
-
-To set up embeddings locally:
-
-1. Ensure you have access to the `ai-enablement-dev-69497ba7` [Google Cloud project](#google-cloud-vertex).
-1. Login to Google Cloud: `gcloud auth application-default login`
-1. Follow the instructions to [set up the AI Gateway locally](#set-up-the-ai-gateway-locally)
-   using GDK
+```shell
+# <GDK-root>/env.runit
 
-#### Use embeddings in specs
+# for running in SaaS mode so that you can skip CustomersDot local setup
+# if you need to test something specific to self-managed, unset this and follow the
+# section below on CustomersDot setup
+export GITLAB_SIMULATE_SAAS=1
 
-The `extract_embeddings` Rake Task populates a fixture file with a subset
-of embeddings.
+# point your GDK-hosed GitLab Rails to your GDK-hosted AI Gateway
+AI_GATEWAY_URL=http://0.0.0.0:5052
+```
 
-The set of questions listed in the Rake Task determines which embeddings are
-pulled into the fixture file. For example, one of the questions is "How can I
-reset my password?"
+The following variables should be set in the `.env` file in your AI Gateway
+directory:
 
-The `extract_embeddings` Task pulls the most relevant
-embeddings for this question from the development database (which has data from
-the `seed` Rake Task) and saves those embeddings in
-`ee/spec/fixtures/vertex_embeddings`. This fixture is used in tests related to
-embeddings.
+```shell
+# <GDK-root>/gitlab-ai-gateway/.env
 
-If you would like to change any of the questions supported in embeddings specs,
-update and re-run the `extract_embeddings` Rake Task.
+# for AI Gateway requests to Anthropic
+ANTHROPIC_API_KEY=$SEKRET_KEY
 
-In the specs where you need to use the embeddings,
-use the RSpec `:ai_embedding_fixtures` metadata.
+# for AI Gateway documentation search
+# You must have access to this Google Cloud project to perform documentation
+# search questions locally
+# Issue for documenting how to set up Vertex AI search for a different project:
+# https://gitlab.com/gitlab-org/gitlab/-/issues/461393#note_1935931455
+AIGW_VERTEX_SEARCH__PROJECT="ai-enablement-dev-69497ba7"
 
-```ruby
-context 'when asking about how to use GitLab', :ai_embedding_fixtures do
-  # ...examples
-end
+# skip OIDC auth for AI Gateway
+AIGW_AUTH__BYPASS_EXTERNAL=true
 ```
 
-### Working with GitLab Duo Chat
-
-View [guidelines](duo_chat.md) for working with GitLab Duo Chat.
-
 ### Optional: Test with OIDC authentication
 
 In the production environment, AI Gateway verifies that the JWT sent by client
@@ -169,19 +147,14 @@ request is signed by the authentic OIDC provider. To test this authentication
 and authorization flow with scopes/unit-primitives, you can take the following
 optional step.
 
-Apply the following configuration to AI Gateway:
-
-```shell
-# <AI-Gateway-root>/.env
-AIGW_AUTH__BYPASS_EXTERNAL=false
-AIGW_GITLAB_URL=<your-gdk-url> # e.g. http://gdk.test:3000/
-```
-
-Apply the following configuration to GDK:
+Assuming that you are running the [AI Gateway with GDK](#set-up-the-ai-gateway),
+apply the following configuration to GDK:
 
 ```shell
 # <GDK-root>/env.runit
-GITLAB_SIMULATE_SAAS=1
+export AIGW_AUTH__BYPASS_EXTERNAL=false
+export AIGW_GITLAB_URL=<your-gdk-url>
+export GITLAB_SIMULATE_SAAS=1
 ```
 
 and `gdk restart`.
@@ -190,6 +163,7 @@ Try requests from GitLab-Rails to AI Gateway. Example:
 
 ```ruby
 gdk rails console
+
 # allow the local requests since your AI Gateway is running in localhost.
 Gitlab::CurrentSettings.update(allow_local_requests_from_web_hooks_and_services: true)
 
@@ -207,15 +181,15 @@ Here is the underlying process happening per request:
    Required scope varies per endpoint (e.g. `/v1/chat/agent` requires `duo_chat`, `/v2/code/suggestions` requires `code_suggestions`).
 
 If you want to test OIDC auth as a self-managed GitLab instance, you need to set
-up Customer Dot as described in the below section.
+up CustomerDot as described below.
 
 ### Optional: Set up CustomersDot
 
 CustomersDot setup is helpful when you want to test or update functionality
-related to [cloud licensing](https://about.gitlab.com/pricing/licensing-faq/cloud-licensing/).
-Otherwise, it can be skipped as long as your local AI Gateway has
-`AIGW_AUTH__BYPASS_EXTERNAL=true` set in the `.env` file so that licensing
-checks are skipped locally.
+related to [cloud licensing](https://about.gitlab.com/pricing/licensing-faq/cloud-licensing/)
+or if you are running GDK in non-SaaS mode.
+Otherwise, it can be skipped as long as your GDK has
+`AIGW_AUTH__BYPASS_EXTERNAL=true` set so that auth checks are skipped locally.
 
 [Internal video tutorial](https://youtu.be/rudS6KeQHcA)
 
@@ -231,6 +205,7 @@ checks are skipped locally.
 ### Help
 
 - [Here's how to reach us!](https://handbook.gitlab.com/handbook/engineering/development/data-science/ai-powered/ai-framework/#-how-to-reach-us)
+- View [guidelines](duo_chat.md) for working with GitLab Duo Chat.
 
 ## Tips for local development
 
@@ -554,85 +529,6 @@ Gitlab::Llm::Anthropic::Client.new(user)
 
 TODO
 
-## Embeddings database
-
-Embeddings are required to be generated for chat documentation tool to work. Documentation tool works on Saas only at this point.
-
-Embeddings are generated through the [VertexAI text embeddings API](https://cloud.google.com/vertex-ai/generative-ai/docs/embeddings/get-text-embeddings).
-
-Embeddings for GitLab documentation are updated based on the latest changes
-Monday through Friday at 05:00 UTC when the
-[embeddings cron job](https://gitlab.com/gitlab-org/gitlab/-/blob/6742f6bd3970c56a9d5bcd31e3d3dff180c97088/config/initializers/1_settings.rb#L817) runs.
-
-The sections below explain how to populate embeddings in the DB or extract
-embeddings to be used in specs.
-
-### Set up
-
-1. Enable [`pgvector`](https://gitlab.com/gitlab-org/gitlab-development-kit/-/blob/main/doc/howto/pgvector.md#enable-pgvector-in-the-gdk) in GDK
-1. Enable the embedding database in GDK
-
-    ```shell
-    gdk config set gitlab.rails.databases.embedding.enabled true
-    ```
-
-1. Run `gdk reconfigure`
-1. Run database migrations to create the embedding database in the `gitlab` folder of the GDK
-
-    ```shell
-    RAILS_ENV=development bin/rails db:migrate
-    ```
-
-### Populate
-
-Seed your development database with the embeddings for GitLab Documentation
-using this Rake task:
-
-```shell
-RAILS_ENV=development bundle exec rake gitlab:llm:embeddings:vertex:seed
-```
-
-This Rake Task populates the embeddings database with a vectorized
-representation of all GitLab Documentation. The file the Rake Task uses as a
-source is a snapshot of GitLab Documentation at some point in the past and is
-not updated regularly. As a result, it is helpful to know that this seed task
-creates embeddings based on GitLab Documentation that is out of date. Slightly
-outdated documentation embeddings are sufficient for the development
-environment, which is the use-case for the seed task.
-
-When writing or updating tests related to embeddings, you may want to update the
-embeddings fixture file:
-
-```shell
-RAILS_ENV=development bundle exec rake gitlab:llm:embeddings:vertex:extract_embeddings
-```
-
-### Using in specs
-
-The `seed` Rake Task populates the development database with embeddings for all GitLab
-Documentation. The `extract_embeddings` Rake Task populates a fixture file with a subset
-of embeddings.
-
-The set of questions listed in the Rake Task itself determines
-which embeddings are pulled into the fixture file. For example, one of the
-questions is "How can I reset my password?" The `extract_embeddings` Task
-pulls the most relevant embeddings for this question from the development
-database (which has data from the `seed` Rake Task) and saves those embeddings
-in `ee/spec/fixtures/vertex_embeddings`. This fixture is used in tests related
-to embeddings.
-
-If you would like to change any of the questions supported in embeddings specs,
-update and re-run the `extract_embeddings` Rake Task.
-
-In the specs where you need to use the embeddings,
-use the RSpec `:ai_embedding_fixtures` metadata.
-
-```ruby
-context 'when asking about how to use GitLab', :ai_embedding_fixtures do
-  # ...examples
-end
-```
-
 ## Monitoring
 
 - Error ratio and response latency apdex for each Ai action can be found on [Sidekiq Service dashboard](https://dashboards.gitlab.net/d/sidekiq-main/sidekiq-overview?orgId=1) under **SLI Detail: `llm_completion`**.
diff --git a/doc/development/cloud_connector/index.md b/doc/development/cloud_connector/index.md
index 4b9e4d28e99f..712b08134309 100644
--- a/doc/development/cloud_connector/index.md
+++ b/doc/development/cloud_connector/index.md
@@ -281,4 +281,4 @@ and assign it to the Cloud Connector group.
 
 ## Testing
 
-An example for how to set up an end-to-end integration with the AI gateway as the backend service can be found [here](../ai_features/index.md#set-up).
+An example for how to set up an end-to-end integration with the AI gateway as the backend service can be found [here](../ai_features/index.md#set-up-the-ai-gateway).
diff --git a/doc/user/okrs.md b/doc/user/okrs.md
index cbcce17ba90e..58b1f5fb0664 100644
--- a/doc/user/okrs.md
+++ b/doc/user/okrs.md
@@ -301,6 +301,8 @@ below an objective's description.
 
 ### Add a child objective
 
+> - Ability to select which project to create the objective in [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/436255) in GitLab 17.1.
+
 Prerequisites:
 
 - You must have at least the Guest role for the project.
@@ -310,6 +312,7 @@ To add a new objective to an objective:
 1. In an objective, in the **Child objectives and key results** section, select **Add** and then
    select **New objective**.
 1. Enter a title for the new objective.
+1. Select a [project](project/organize_work_with_projects.md) to create the new objective in.
 1. Select **Create objective**.
 
 To add an existing objective to an objective:
@@ -324,6 +327,8 @@ To add an existing objective to an objective:
 
 ### Add a child key result
 
+> - Ability to select which project to create the key result in [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/436255) in GitLab 17.1.
+
 Prerequisites:
 
 - You must have at least the Guest role for the project.
@@ -333,6 +338,7 @@ To add a new key result to an objective:
 1. In an objective, in the **Child objectives and key results** section, select **Add** and then
    select **New key result**.
 1. Enter a title for the new key result.
+1. Select a [project](project/organize_work_with_projects.md) to create the new key result in.
 1. Select **Create key result**.
 
 To add an existing key result to an objective:
diff --git a/doc/user/tasks.md b/doc/user/tasks.md
index 2bd03ff0e7f1..23db6a46251d 100644
--- a/doc/user/tasks.md
+++ b/doc/user/tasks.md
@@ -49,6 +49,8 @@ the task opens in a full-page view.
 
 ## Create a task
 
+> - Ability to select which project to create the task in [introduced](https://gitlab.com/gitlab-org/gitlab/-/issues/436255) in GitLab 17.1.
+
 Prerequisites:
 
 - You must have at least the Reporter role for the project, or the project must be public.
@@ -60,6 +62,7 @@ To create a task:
 1. In the issue description, in the **Tasks** section, select **Add**.
 1. Select **New task**.
 1. Enter the task title.
+1. Select the [project](project/organize_work_with_projects.md) to create the new task in.
 1. Select **Create task**.
 
 ### From a task list item
diff --git a/qa/Gemfile b/qa/Gemfile
index d4d91e651762..a469b265ee38 100644
--- a/qa/Gemfile
+++ b/qa/Gemfile
@@ -3,7 +3,7 @@
 source 'https://rubygems.org'
 
 gem 'gitlab-qa', '~> 14', '>= 14.10.0', require: 'gitlab/qa'
-gem 'gitlab_quality-test_tooling', '~> 1.27.1', require: false
+gem 'gitlab_quality-test_tooling', '~> 1.28.0', require: false
 gem 'gitlab-utils', path: '../gems/gitlab-utils'
 gem 'activesupport', '~> 7.0.8.1' # This should stay in sync with the root's Gemfile
 gem 'allure-rspec', '~> 2.24.5'
diff --git a/qa/Gemfile.lock b/qa/Gemfile.lock
index 16c21b4df978..f2b314bcb1a8 100644
--- a/qa/Gemfile.lock
+++ b/qa/Gemfile.lock
@@ -139,7 +139,7 @@ GEM
       rainbow (>= 3, < 4)
       table_print (= 1.5.7)
       zeitwerk (>= 2, < 3)
-    gitlab_quality-test_tooling (1.27.1)
+    gitlab_quality-test_tooling (1.28.0)
       activesupport (>= 7.0, < 7.2)
       amatch (~> 0.4.1)
       gitlab (~> 4.19)
@@ -380,7 +380,7 @@ DEPENDENCIES
   gitlab-cng!
   gitlab-qa (~> 14, >= 14.10.0)
   gitlab-utils!
-  gitlab_quality-test_tooling (~> 1.27.1)
+  gitlab_quality-test_tooling (~> 1.28.0)
   influxdb-client (~> 3.1)
   junit_merge (~> 0.1.2)
   knapsack (~> 4.0)
diff --git a/spec/frontend/work_items/components/work_item_links/work_item_links_form_spec.js b/spec/frontend/work_items/components/work_item_links/work_item_links_form_spec.js
index 2f57e19ccb58..aec71f6e3776 100644
--- a/spec/frontend/work_items/components/work_item_links/work_item_links_form_spec.js
+++ b/spec/frontend/work_items/components/work_item_links/work_item_links_form_spec.js
@@ -26,12 +26,14 @@ import projectWorkItemTypesQuery from '~/work_items/graphql/project_work_item_ty
 import createWorkItemMutation from '~/work_items/graphql/create_work_item.mutation.graphql';
 import updateWorkItemMutation from '~/work_items/graphql/update_work_item.mutation.graphql';
 import groupProjectsForLinksWidgetQuery from '~/work_items/graphql/group_projects_for_links_widget.query.graphql';
+import relatedProjectsForLinksWidgetQuery from '~/work_items/graphql/related_projects_for_links_widget.query.graphql';
 import {
   availableWorkItemsResponse,
   createWorkItemMutationResponse,
   updateWorkItemMutationResponse,
   mockIterationWidgetResponse,
   groupProjectsList,
+  relatedProjectsList,
 } from '../../mock_data';
 
 Vue.use(VueApollo);
@@ -61,6 +63,7 @@ describe('WorkItemLinksForm', () => {
     .mockResolvedValue(projectWorkItemTypesQueryResponse);
   const groupWorkItemTypesResolver = jest.fn().mockResolvedValue(groupWorkItemTypesQueryResponse);
   const groupProjectsFormLinksWidgetResolver = jest.fn().mockResolvedValue(groupProjectsList);
+  const relatedProjectsForLinksWidgetResolver = jest.fn().mockResolvedValue(relatedProjectsList);
 
   const mockParentIteration = mockIterationWidgetResponse;
 
@@ -79,6 +82,7 @@ describe('WorkItemLinksForm', () => {
         [projectWorkItemTypesQuery, projectWorkItemTypesResolver],
         [groupWorkItemTypesQuery, groupWorkItemTypesResolver],
         [groupProjectsForLinksWidgetQuery, groupProjectsFormLinksWidgetResolver],
+        [relatedProjectsForLinksWidgetQuery, relatedProjectsForLinksWidgetResolver],
         [updateWorkItemMutation, updateMutationResolver],
         [createWorkItemMutation, createMutationResolver],
       ]),
diff --git a/spec/frontend/work_items/components/work_item_links/work_item_projects_listbox_spec.js b/spec/frontend/work_items/components/work_item_links/work_item_projects_listbox_spec.js
index d225a6820c14..306fbdddcdd9 100644
--- a/spec/frontend/work_items/components/work_item_links/work_item_projects_listbox_spec.js
+++ b/spec/frontend/work_items/components/work_item_links/work_item_projects_listbox_spec.js
@@ -6,12 +6,18 @@ import createMockApollo from 'helpers/mock_apollo_helper';
 import waitForPromises from 'helpers/wait_for_promises';
 import WorkItemProjectsListbox from '~/work_items/components/work_item_links/work_item_projects_listbox.vue';
 import groupProjectsForLinksWidgetQuery from '~/work_items/graphql/group_projects_for_links_widget.query.graphql';
+import relatedProjectsForLinksWidgetQuery from '~/work_items/graphql/related_projects_for_links_widget.query.graphql';
 import { SEARCH_DEBOUNCE } from '~/work_items/constants';
-import { groupProjectsList, mockFrequentlyUsedProjects } from '../../mock_data';
+import {
+  groupProjectsList,
+  relatedProjectsList,
+  mockFrequentlyUsedProjects,
+} from '../../mock_data';
 
 Vue.use(VueApollo);
 
-const projectData = groupProjectsList.data.group.projects.nodes;
+const groupProjectsData = groupProjectsList.data.group.projects.nodes;
+const relatedProjectsData = relatedProjectsList.data.project.group.projects.nodes;
 
 describe('WorkItemProjectsListbox', () => {
   /**
@@ -32,20 +38,22 @@ describe('WorkItemProjectsListbox', () => {
   };
 
   const groupProjectsFormLinksWidgetResolver = jest.fn().mockResolvedValue(groupProjectsList);
+  const relatedProjectsFormLinksWidgetResolver = jest.fn().mockResolvedValue(relatedProjectsList);
 
   const findDropdown = () => wrapper.findComponent(GlCollapsibleListbox);
   const findDropdownItemFor = (fullPath) => wrapper.findByTestId(`listbox-item-${fullPath}`);
   const findRecentDropdownItems = () => findDropdown().find('ul').findAll('[role=option]');
   const findRecentDropdownItemAt = (index) => findRecentDropdownItems().at(index);
 
-  const createComponent = async () => {
+  const createComponent = async (isGroup = true) => {
     wrapper = mountExtended(WorkItemProjectsListbox, {
       apolloProvider: createMockApollo([
         [groupProjectsForLinksWidgetQuery, groupProjectsFormLinksWidgetResolver],
+        [relatedProjectsForLinksWidgetQuery, relatedProjectsFormLinksWidgetResolver],
       ]),
       propsData: {
         fullPath: 'group-a',
-        isGroup: true,
+        isGroup,
       },
     });
 
@@ -53,87 +61,175 @@ describe('WorkItemProjectsListbox', () => {
     await waitForPromises();
   };
 
-  beforeEach(async () => {
-    await createComponent();
-    gon.current_username = 'root';
-  });
+  describe('group level work items', () => {
+    beforeEach(async () => {
+      await createComponent();
+      gon.current_username = 'root';
+    });
 
-  it('renders projects in projects dropdown', () => {
-    removeLocalstorageFrequentItems();
+    it('renders projects in projects dropdown', () => {
+      removeLocalstorageFrequentItems();
 
-    expect(findDropdown().text()).not.toContain('Recently used');
+      expect(findDropdown().text()).not.toContain('Recently used');
 
-    const dropdownItem = findDropdownItemFor(projectData[0].fullPath);
+      const dropdownItem = findDropdownItemFor(groupProjectsData[0].fullPath);
 
-    expect(dropdownItem.text()).toContain(projectData[0].name);
-    expect(dropdownItem.text()).toContain(projectData[0].namespace.name);
-  });
+      expect(dropdownItem.text()).toContain(groupProjectsData[0].name);
+      expect(dropdownItem.text()).toContain(groupProjectsData[0].namespace.name);
+    });
 
-  it('supports selecting a project', async () => {
-    removeLocalstorageFrequentItems();
+    it('supports selecting a project', async () => {
+      removeLocalstorageFrequentItems();
 
-    findDropdown().vm.$emit('shown');
+      findDropdown().vm.$emit('shown');
 
-    await nextTick();
+      await nextTick();
 
-    await findDropdownItemFor(projectData[0].fullPath).trigger('click');
+      await findDropdownItemFor(groupProjectsData[0].fullPath).trigger('click');
 
-    await nextTick();
+      await nextTick();
 
-    const emitted = wrapper.emitted('selectProject');
+      const emitted = wrapper.emitted('selectProject');
 
-    expect(emitted[0][0]).toEqual(projectData[0]);
-  });
+      expect(emitted[0][0]).toEqual(groupProjectsData[0]);
+    });
 
-  it('renders recent projects if present', async () => {
-    setLocalstorageFrequentItems();
+    it('renders recent projects if present', async () => {
+      setLocalstorageFrequentItems();
 
-    findDropdown().vm.$emit('shown');
+      findDropdown().vm.$emit('shown');
 
-    await nextTick();
+      await nextTick();
 
-    expect(findDropdown().text()).toContain('Recently used');
+      expect(findDropdown().text()).toContain('Recently used');
 
-    const content = findRecentDropdownItems();
+      const content = findRecentDropdownItems();
 
-    expect(content.exists()).toBe(true);
-    expect(content).toHaveLength(mockFrequentlyUsedProjects.length);
-  });
+      expect(content.exists()).toBe(true);
+      expect(content).toHaveLength(mockFrequentlyUsedProjects.length);
+    });
+
+    it('supports selecting a recent project', async () => {
+      setLocalstorageFrequentItems();
+
+      findDropdown().vm.$emit('shown');
 
-  it('supports selecting a recent project', async () => {
-    setLocalstorageFrequentItems();
+      await nextTick();
 
-    findDropdown().vm.$emit('shown');
+      await findRecentDropdownItemAt(0).trigger('click');
 
-    await nextTick();
+      await nextTick();
+
+      const emitted = wrapper.emitted('selectProject');
+
+      expect(emitted[0][0]).toEqual(groupProjectsData[1]);
+    });
 
-    await findRecentDropdownItemAt(0).trigger('click');
+    it('supports filtering recent projects via search input', async () => {
+      setLocalstorageFrequentItems();
 
-    await nextTick();
+      findDropdown().vm.$emit('shown');
 
-    const emitted = wrapper.emitted('selectProject');
+      await nextTick();
 
-    expect(emitted[0][0]).toEqual(projectData[1]);
+      let content = findRecentDropdownItems();
+
+      expect(content).toHaveLength(mockFrequentlyUsedProjects.length);
+
+      findDropdown().vm.$emit('search', 'project a');
+
+      await nextTick();
+
+      content = findRecentDropdownItems();
+
+      expect(content).toHaveLength(1);
+      expect(content.at(0).text()).toContain(groupProjectsData[0].name);
+    });
   });
 
-  it('supports filtering recent projects via search input', async () => {
-    setLocalstorageFrequentItems();
+  describe('project level work items', () => {
+    beforeEach(async () => {
+      await createComponent(false);
+      gon.current_username = 'root';
+    });
+
+    it('renders projects in projects dropdown', () => {
+      removeLocalstorageFrequentItems();
+
+      expect(findDropdown().text()).not.toContain('Recently used');
+
+      const dropdownItem = findDropdownItemFor(relatedProjectsData[0].fullPath);
+
+      expect(dropdownItem.text()).toContain(relatedProjectsData[0].name);
+      expect(dropdownItem.text()).toContain(relatedProjectsData[0].namespace.name);
+    });
+
+    it('supports selecting a project', async () => {
+      removeLocalstorageFrequentItems();
+
+      findDropdown().vm.$emit('shown');
+
+      await nextTick();
+
+      await findDropdownItemFor(relatedProjectsData[0].fullPath).trigger('click');
 
-    findDropdown().vm.$emit('shown');
+      await nextTick();
+
+      const emitted = wrapper.emitted('selectProject');
+
+      expect(emitted[0][0]).toEqual(relatedProjectsData[0]);
+    });
 
-    await nextTick();
+    it('renders recent projects if present', async () => {
+      setLocalstorageFrequentItems();
+
+      findDropdown().vm.$emit('shown');
+
+      await nextTick();
+
+      expect(findDropdown().text()).toContain('Recently used');
+
+      const content = findRecentDropdownItems();
+
+      expect(content.exists()).toBe(true);
+      expect(content).toHaveLength(mockFrequentlyUsedProjects.length);
+    });
 
-    let content = findRecentDropdownItems();
+    it('supports selecting a recent project', async () => {
+      setLocalstorageFrequentItems();
 
-    expect(content).toHaveLength(mockFrequentlyUsedProjects.length);
+      findDropdown().vm.$emit('shown');
 
-    findDropdown().vm.$emit('search', 'project a');
+      await nextTick();
 
-    await nextTick();
+      await findRecentDropdownItemAt(0).trigger('click');
 
-    content = findRecentDropdownItems();
+      await nextTick();
 
-    expect(content).toHaveLength(1);
-    expect(content.at(0).text()).toContain(projectData[0].name);
+      const emitted = wrapper.emitted('selectProject');
+
+      expect(emitted[0][0]).toEqual(relatedProjectsData[1]);
+    });
+
+    it('supports filtering recent projects via search input', async () => {
+      setLocalstorageFrequentItems();
+
+      findDropdown().vm.$emit('shown');
+
+      await nextTick();
+
+      let content = findRecentDropdownItems();
+
+      expect(content).toHaveLength(mockFrequentlyUsedProjects.length);
+
+      findDropdown().vm.$emit('search', 'project a');
+
+      await nextTick();
+
+      content = findRecentDropdownItems();
+
+      expect(content).toHaveLength(1);
+      expect(content.at(0).text()).toContain(relatedProjectsData[0].name);
+    });
   });
 });
diff --git a/spec/frontend/work_items/mock_data.js b/spec/frontend/work_items/mock_data.js
index 0b1de55b8086..5b53ebbc5950 100644
--- a/spec/frontend/work_items/mock_data.js
+++ b/spec/frontend/work_items/mock_data.js
@@ -4101,6 +4101,50 @@ export const groupProjectsList = {
   },
 };
 
+export const relatedProjectsList = {
+  data: {
+    project: {
+      id: 'gid://gitlab/Project/1',
+      group: {
+        id: 'gid://gitlab/Group/33',
+        projects: {
+          nodes: [
+            {
+              id: 'gid://gitlab/Project/1',
+              name: 'Example project A',
+              avatarUrl: null,
+              nameWithNamespace: 'Group A / Example project A',
+              fullPath: 'group-a/example-project-a',
+              namespace: {
+                id: 'gid://gitlab/Group/1',
+                name: 'Group A',
+                __typename: 'Namespace',
+              },
+              __typename: 'Project',
+            },
+            {
+              id: 'gid://gitlab/Project/2',
+              name: 'Example project B',
+              avatarUrl: null,
+              nameWithNamespace: 'Group A / Example project B',
+              fullPath: 'group-a/example-project-b',
+              namespace: {
+                id: 'gid://gitlab/Group/1',
+                name: 'Group A',
+                __typename: 'Namespace',
+              },
+              __typename: 'Project',
+            },
+          ],
+          __typename: 'ProjectConnection',
+        },
+        __typename: 'Group',
+      },
+      __typename: 'Project',
+    },
+  },
+};
+
 export const mockFrequentlyUsedProjects = [
   {
     id: 1,
diff --git a/spec/lib/result_spec.rb b/spec/lib/result_spec.rb
index 2b88521fe141..388d573bacc2 100644
--- a/spec/lib/result_spec.rb
+++ b/spec/lib/result_spec.rb
@@ -160,7 +160,7 @@ def self.triple(value)
         it 'raises TypeError if passed anything other than a lambda or singleton method object' do
           ex = TypeError
           msg = /expects a lambda or singleton method object/
-          # noinspection RubyMismatchedArgumentType
+          # noinspection RubyMismatchedArgumentType -- intentionally passing invalid types
           expect { Result.ok(1).and_then('string') }.to raise_error(ex, msg)
           expect { Result.ok(1).and_then(proc { Result.ok(1) }) }.to raise_error(ex, msg)
           expect { Result.ok(1).and_then(1.method(:to_s)) }.to raise_error(ex, msg)
diff --git a/spec/mailers/emails/imports_spec.rb b/spec/mailers/emails/imports_spec.rb
index 441967cda767..770cbbc21bca 100644
--- a/spec/mailers/emails/imports_spec.rb
+++ b/spec/mailers/emails/imports_spec.rb
@@ -37,7 +37,7 @@
     before do
       allow(User).to receive(:find).and_return(user)
       allow(BulkImport).to receive(:find).and_return(bulk_import)
-      allow(bulk_import.entities).to receive(:find_by).and_return(bulk_import_entity)
+      allow(bulk_import).to receive(:parent_group_entity).and_return(bulk_import_entity)
     end
 
     it 'sends complete email' do
diff --git a/spec/models/bulk_import_spec.rb b/spec/models/bulk_import_spec.rb
index a5d979206ddc..1e2c748a6928 100644
--- a/spec/models/bulk_import_spec.rb
+++ b/spec/models/bulk_import_spec.rb
@@ -144,4 +144,76 @@
       end
     end
   end
+
+  describe 'completion notification trigger' do
+    RSpec::Matchers.define :notify_owner_of_completion do
+      def supports_block_expectations?
+        true
+      end
+
+      match(notify_expectation_failures: true) do |proc|
+        expect(Notify).to receive(:bulk_import_complete).with(user.id, import.id).and_call_original
+
+        proc.call
+        true
+      end
+
+      match_when_negated(notify_expectation_failures: true) do |proc|
+        expect(Notify).not_to receive(:bulk_import_complete)
+
+        proc.call
+        true
+      end
+    end
+
+    subject(:import) do
+      create(:bulk_import, :started, entities: [
+        create(
+          :bulk_import_entity,
+          group: create(:group, owners: user)
+        )
+      ])
+    end
+
+    let(:user) { create(:user) }
+    let(:non_triggering_events) do
+      import.status_paths.events - %i[finish cleanup_stale fail_op]
+    end
+
+    it { expect { import.finish! }.to notify_owner_of_completion }
+    it { expect { import.fail_op! }.to notify_owner_of_completion }
+    it { expect { import.cleanup_stale! }.to notify_owner_of_completion }
+
+    it "does not email after non-completing events" do
+      non_triggering_events.each do |event|
+        expect { import.send(:"#{event}!") }.not_to notify_owner_of_completion
+      end
+    end
+
+    context 'when notify_owners_of_finished_direct_transfer flag is disabled' do
+      before do
+        stub_feature_flags(notify_owners_of_finished_direct_transfer: false)
+      end
+
+      it { expect { import.finish! }.not_to notify_owner_of_completion }
+      it { expect { import.fail_op! }.not_to notify_owner_of_completion }
+      it { expect { import.cleanup_stale! }.not_to notify_owner_of_completion }
+    end
+  end
+
+  describe '#parent_group_entity' do
+    subject(:import) do
+      create(:bulk_import, :started, entities: [
+        root_node,
+        create(:bulk_import_entity, parent: root_node),
+        create(:bulk_import_entity, parent: root_node)
+      ])
+    end
+
+    let_it_be(:root_node) { create(:bulk_import_entity) }
+
+    it 'returns the topmost group note of the import entity tree' do
+      expect(import.parent_group_entity).to eq(root_node)
+    end
+  end
 end
diff --git a/spec/support/matchers/invoke_rop_steps.rb b/spec/support/matchers/invoke_rop_steps.rb
index af0012aaf13f..30f6bd31ec90 100644
--- a/spec/support/matchers/invoke_rop_steps.rb
+++ b/spec/support/matchers/invoke_rop_steps.rb
@@ -213,6 +213,7 @@ def set_up_step_class_expectation(
       value_passed_along_steps: value_passed_along_steps
     )
 
+    # noinspection RubyNilAnalysis -- We ensure this is not nil
     expected_return_value_matcher.call(block)
   end
 
@@ -249,6 +250,7 @@ def set_up_step_class_expectation(
   chain :and_return_expected_value do |value|
     validate_expected_return_value(value)
     expected_return_value = value
+    # noinspection RubyUnusedLocalVariable -- TODO: open issue and add to https://handbook.gitlab.com/handbook/tools-and-tips/editors-and-ides/jetbrains-ides/tracked-jetbrains-issues
     expected_return_value_matcher = if value.is_a?(Hash) || value.is_a?(Result)
                                       ->(main) { expect(main.call).to eq(value) }
                                     else
diff --git a/spec/support/shared_examples/lint_factories_shared_examples.rb b/spec/support/shared_examples/lint_factories_shared_examples.rb
index 31266379d4be..b356701fed85 100644
--- a/spec/support/shared_examples/lint_factories_shared_examples.rb
+++ b/spec/support/shared_examples/lint_factories_shared_examples.rb
@@ -34,7 +34,7 @@ def self.lint_factories_for(example_group)
 
       return if without_factory_defaults.empty? && with_factory_defaults.empty?
 
-      RSpec.describe "Lint factories for #{described_class}" do
+      RSpec.describe "Lint factories for #{described_class}", feature_category: :shared do
         include_examples 'Lint factories', with_factory_defaults, without_factory_defaults
       end
     end
diff --git a/spec/validators/kubernetes_container_resources_validator_spec.rb b/spec/validators/kubernetes_container_resources_validator_spec.rb
index aea561bafb9a..4e8565ab241c 100644
--- a/spec/validators/kubernetes_container_resources_validator_spec.rb
+++ b/spec/validators/kubernetes_container_resources_validator_spec.rb
@@ -17,7 +17,6 @@
 
   using RSpec::Parameterized::TableSyntax
 
-  # noinspection RubyMismatchedArgumentType - https://handbook.gitlab.com/handbook/tools-and-tips/editors-and-ides/jetbrains-ides/tracked-jetbrains-issues/#ruby-32041
   where(:resources, :validity, :errors) do
     # rubocop:disable Layout/LineLength -- The RSpec table syntax often requires long lines for errors
     nil                               | false | { resources: ["must be a hash"] }