kubernetes1.23-client-1.23.17-150500.3.18.1<>,fap9|d❎/ţX[OzʸD%>ʆiM0M;`R<^@}C\W3ɛR Wyo'gn{^GJ=SA?[w+aFKҟ&l&KnI4S ?T። ')_k)6yx#4M>v0kfW`Xn!o 'à@ hWR7nZS*p-;AjP4i ?HCE>;N?Nd  . Flp|  4 D T t | @`x(89:FJ GJ8HJXIJxXJYJ\J]J^KJbKcLdM!eM&fM)lM+uM@vM`zNNNNNCkubernetes1.23-client1.23.17150500.3.18.1Kubernetes client toolsKubernetes client tools like kubectl.fah01-armsrv3h;SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxaarch64h ;,^A큤A큤fafaf`faccfacb6436996e2b8d1021b1b37d714524c5f1949180e7271d42599daad7ae3aa2879639af1c94c39ded3a781d1f82c7075b6af898b7bb6d284ea0313278568c542318b6974720f4fb31199e971a20a4a21cf3987708b6dfa6a0a1f4775e381b970eecfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30/etc/alternatives/kubectl@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.23-1.23.17-150500.3.18.1.src.rpmkubernetes-client-providerkubernetes1.23-clientkubernetes1.23-client(aarch-64)    kubernetes1.23-client-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives3.0.4-14.6.0-14.0-15.2-14.14.3ff@f@e}@e7@edd@d6@d!@d!@ddb֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgbwiedemann@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comrbrown@suse.comdmueller@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.com- Fix for bsc#1229008 (installing kubernetes1.23-client also installs kubernetes1.28-client and kubernetes1.28-client-common) * update `Requires` in the "kubernetes1.23-client" pkg to: - `Requires: kubernetes%{baseversion}-client-common` * Remove following `Obsoletes` from the "kubernetes1.23-client-common" pkg: - `Obsoletes: kubernetes%{baseversionminus1}-client-common`- add new security patch to escape terminal special characters in kubectl output, bsc#1194400, CVE-2021-25743 * patch file - escape-terminal-special-characters-in-kubectl-112553.patch- add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin, bsc#1222539, CVE-2024-3177 * patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch- add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793 * autoscaling-advance-v2-as-the-preferred-API-version.patch- Use %patch -P N instead of deprecated %patchN.- Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds- Security Patch Fix for CVE-2023-2431 (bsc#1212493) * added patch: fix-seccomp-localhost-error-handling.patch * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Split individual completions into separate packages- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.23.17: * Release commit for Kubernetes v1.23.17 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 * add scale test for probes * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * egress_selector: prevent goroutines leak on connect() step. * tls.Dial() validates hostname, no need to do that manually * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Bump Konnectivity to v0.0.35 * Improve vendor verification works for each staging repo * Update to go1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Match go1.17 defaults for SHA-1 and GC * update golangci-lint to 1.45.0 * kubelet: make the image pull time more accurate in event * change k8s.gcr.io/pause to registry.k8s.io/pause * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * Add CVE-2021-25749 to CHANGELOG-1.23.md * Add CVE-2022-3294 to CHANGELOG-1.23.md * kubeadm: use registry.k8s.io instead of k8s.gcr.io * etcd: Updated to v3.5.5 * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes. * kubeadm: allow RSA and ECDSA format keys in preflight check * Fixes kubelet log compression on Windows * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * update structured-merge-diff to 4.2.3 * Add rate limiting when calling STS assume role API * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.- Update to version 1.23.9: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * Bump cAdvisor to v0.43.1 * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * fix: --chunk-size with selector returns missing result * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs * Winkernel proxier cache HNS data to improve syncProxyRules performance * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8 * apiserver: printers should use int64 * add missing error handling steps * add missing error handling steps * fix image pulling failure when IMDS is unavailalbe in kubelet startup * fix: exclude non-ready nodes and deleted nodes from azure load balancers * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients. - Require only BuildRequires: golang(API) = 1.17 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.17 minimum Go major version.- Update to version 1.23.8: * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules" * test: update graceful node shutdown e2e with watch * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.17.11 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * Enable resize feature * Reject proxy requests to 0.0.0.0 as well * ipvs: fix prevent concurrent map read and map write for 1.23 * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * untangle fix with healthCheck feature * Winkernel proxier cache HNS data to improve syncProxyRules performance * Skip updating Endpoints and EndpointSlice if no relevant fields change- Update to version 1.23.7: * Fix requests scope classification * Update Go to 1.17.10 * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix OpenAPI loading error caused by empty APIService * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * component-base: replace url in rest client metrics * fix broken find command * Allow KUBE_TEST_REPO_LIST to be a remote url as well * Disable JobTrackingWithFinalizers due to unresolved bug * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6 * Correct event registration for multiple scheduler plugins. * kubelet: rename closeAllConns to onHeartbeatFailure * kubelet apiserver: be gentle closing connections on heartbeat failures * fix: race detected in TestErrConnKilled * Replace hardcoded kubectl with kubectl.Name() * kubectl: fix hard-coded value in zsh completion * kubeadm: add etcd flag for member data consistency * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config * ipvs: remove port opener * iptables: remove port opener * azure_file: try to get secret namespace from ClaimRef * azure_file: add namespace tests for InTree to CSI conversion- Update to version 1.23.6: * Update Go to 1.17.9 * Fix: abort nominating a pod that was already scheduled to a node * Fix the overestimated cost of deletaged API requests in P&F * omit enums from static openapi snapshots used to generate clients * Drop enum tag from certificate request condition * Addresses the issue which caused #109115 * Add test for indexer with multiple values * Reduce number of pods in Job+GC tests * Adjust validation checks to pass for both client-side and server-side validation * Remove finalizer when orphaned * Fix: Clean job tracking finalizer from orphan pods * Add test for Background delete propagation * Add integration test for orphan pods when there is GC * Copy request in timeout handler * kube-up: use registry.k8s.io for containerd-related jobs * kubelet: If the container status is created, we are waiting * e2e: Wait only for the service account * e2e: Wait for kube-root-ca.crt to be created * client-go: update generated * default kubernetes agent for generated clients * Include pod UID in secret/configmap cache key * Move kubelet secret and configmap manager calls to sync_Pod functions * test: Verify that nodes do not transition to Failed while ready * test: Add E2E for job completions with cpu reservation * test: Add E2E for init container pod deletion * kubelet: Delay writing a terminal phase until the pod is terminated * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 * generated: make update * polish comments of non-enum values. * unmark non-validated types as enums.- Update to version 1.23.5: * Remove apf_fd from httplog * Update Go to 1.17.8 * cluster/gce: update konnectivity image tags to v0.0.30 * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 * fix dryrun when ca file exists * fix regression introduced by PR 100320 * Add unit tests * Fix nodes volumesAttached status not updated * Fix default config flags * test/e2e/framework: include the new control plane taint * kubelet: Clean up a static pod that has been terminated before starting * Add an e2e test for updating a static pod while it restarts * cronjob_controllerv2: do not filter jobs to be reconciled by labels * kube-proxy: fix duplicate port opening * increase Azure ACR credential provider timeout * Updating EndpointSlice strategy to retain node name in topology until field is set * fix: do not return early in the node informer when there is no change of the topology label. * /test/e2e_kubeadm: adjust label checks for 1.23 * Ignore container notfound error while getPodstatuses * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 * Add PDB selector patch integration test * Revert v1beta1 PodDisruptionBudget select patchStrategy * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error * wrap error from RunCordonOrUncordon- Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4- avoid bashism in client-common postinstall script (bsc#1195391)- Increase _constraints to 13GB- Restore & rebase revert-coredns-image-renaming.patch from kubernetes1.22. Looks like it's still needed until all supported k8s versions allow us to change how we publish coredns containers- Initial Packageh01-armsrv3 17241460691.23.171.23.17-150500.3.18.11.23.17-150500.3.18.1kubectlkubectlkubectl1.23kubernetes1.23-clientCONTRIBUTING.mdREADME.mdkubernetes1.23-clientLICENSE/etc/alternatives//usr/bin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.23-client//usr/share/licenses//usr/share/licenses/kubernetes1.23-client/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35296/SUSE_SLE-15-SP5_Update/d46d6d7920f61cfa98dec478e009a2c8-kubernetes1.23.SUSE_SLE-15-SP5_Updatedrpmxz5aarch64-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/kubernetes1.23-1.23.17-150500.3.18.1.aarch64/etc/alternatives/kubectl' (No such file or directory)ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, strippeddirectoryASCII texti&(fYutf-8591ea31e32f1b3e85852678aabf78a085b25729f80a678a7a5549ce9ff72f83e?P7zXZ !t/n]]"k%]{~msS$(Zz`>vj&NqI%v0W#mXKgҽjg >HE"-7Mk[y 'PZ&ÌNɧzmsr6, Q5*+i^S͓BJH G4׫ŷAL(+HMC}c>9p4YkIRsFQ]a_m3[DR lߞp-thgY w8c&Ox+;Wڝzp>JS~۰p@_.-H4p|0lC a6os뽴_2}93nOnAh4n1Թ82$#O(cDWa4PGKo嫎qvgak e'bO!Y)n:+`6M!6YQDDܟ7`߼9)>Wyh>ob{~=CkLtC5r4MS3t>2pe;U2@H4=)mdVl Mĥ ;V3cSjs~̝ 9wedږ&LDc`@`a4Bê` Jڥ:lT9 oɶ:aݦK!rӝ- :A=Po|(PDO\3rىnыBbNdZC/n0yf Îm!{ naXa)crGϐui֐>ǥ vO-Qr"AU=KXdW&-b[NRWlzoAPviQFC x6k5JR`\ԞXo~x鬘Ka!}kuiUdܕ C)-9J "BA7;pk9,oLM`?1@3PB{)CI)t2vhL<2YƏFf]L从 Nѭhss˙_,43c}cR73*riO._ޮM"GJq&U_a9}z`zqrD{, -4Cщo[Z5]Y_@0H7o154Ykdھt<* &E^u7ExNen$ Mp 9̯hV]溈73YDYr'Ln;oP_r2<^YV g'I}L'9Վۃb| :K\o]gS2$"uӝJ2m+pZD!YkK~l% oYV:Iw.چj[b{Zǁ!=ne(Ɵ,mMDAu,a-/e?k?Tɫ;^\_XEvpoRmn?Nr8G|͞Q)74S6:g28[vON.g9~8!I]kӱ^J(-ąIO1_iG׆4{|\q $e#j 4btolO^3eHsfR!OYy+<;-]5*}M>1+5SiI$E`ԪhޡeӤ@'ښCg"X/-(BT֒b/ׁ;)ZS#%T"L%uNBk|tWԢvQRrSIoI$XȶP 渰~b8Oo-'2L:ZgfEOw|O vLPbZ:ʐkA}Gfx*C:%:>#i/OFki9 `< bMd;m#1N0U. $>Sl M^aS\09{ xRU3xSjƘkC.; Fi=1᐀F9aJAR!V ]DBcEe L;*Vz"Ls)T'[STtsڮ<?2@aFfF['?t?huD7r%-:6:Ybt=`Ho''򕏨i+ Fp Mf~g/N&PP(s᳧>EjsG\k?B!K!@^WQ|(wIcx|BȐ;%է1 "C"٤dEhB'}NK4M= Iv=nXo]b]25*p-?Oi#1mUѸ?lq]Pp%55Zճ6$>tcq#E#h%xH?bJ}9 SR7VDW":X\<4y~3g: @u/ Y׏Eq " Q1 IAj]x~5_rkaP+$DՒbQ=Y~wɜwQrr9 .B-,Fuo|:DF@e aeϐ 2|aѲ)Y*;1ÒEVM)#s LQaOZs99+\Rby|$*,[(BgD5#ڙpŲ:1{9,Rr!PU'Psܟd/C y{cb]hoCy6c,s3>Z_gFxbQHϡQ~cePӰ4D3Gz-ɓu88fRW)WV~Vm(q<[)la8tп?8}tkD1qC괶AUR|WJ9!/}TY3y=k==&j,]qv:xnuגn(d]jQ3Xνիh"2ԖXȝm(2i:Hmo9 AEmNTʃz |_-W;Av¦*wSnw %ccꛤHx\&?1Fk  fE pBV4Zjo^6P%)Y䙿rkZsU!,ϐ+>m&˿nlYāOjo񘄠|Еi4y[;|=mfqW/GbL\Olׇ+hz>5`̑yMH =ia/R75Z449J!~ɥVP8%_5e#4JqךQ3_5ܸճ vi|XU(?qAjMj֚&9Q|p ިL:Oa|8 wϠ$8x ϩps#P&Z0/_Zě jҵRQ 7-%!0e'xk]\Uj>{LU=X줹hg d)EsPg(cvnIl֠,7[m!yR>YB8O'}ʷIa{rsk@Pbshj$-Ep<&q$Xv;<pkY7{fBZFA1?G˫{1mȞ@ڏ˚;4Qi^5!B ocspryVʓ0t2b%șH=Mf"VPh$cĄ%t.~^,~qZ2NN<0l@.JB)$ɟ#g NM=ƅGg^g;zM1h_aRbFy ~hrAFm'wJv!jݞHKUoPhBҗ0 tB118*X=W CE&{&QNRpf*)=RK,gNtOTw4MVҥӅ@jԗS Z*nIu&ETC;El/zs o{RP6T[CI%'+1w%}n&-97]a֛~[J=)f aFr+`'DRhjtڶ//Ι(ֳPX 12Dt#Ġsa: })lUIj.G<0tZ=U>H=Zf7֗^h&DHBu$ſw5 Z<ɗw{`P; )a``%Lvk2kG +;E^hڥHi-V3\ZDiA5.BcqS{LS#Ks'GDŷQ?>yX?V&vrYNIGf6VEDsuÚ[Nd$ij/.`,#̂+j<' Pv[z@r%Rp{Y!T`t,j*̷v&~^9nH /ok: 1=n@#igfV"7xf~8$(Qm\UA B=^X}E7XB7&qR)\}bZ0`Sf/O\g4 ]ՠ%;Rd5..uBoE/\F#=3߳!}*MH-t1O ,>^pS,UنO9gqhV2#JHP<2~{U]u_6FpIG ihֲ].MƉwrxݦ",cUUK/vt0ҥ8Av͌,1T.x~ ͵ƒcGu&'v".I$99S–-񨛹2ߤGZҒMT a'50 2|:LjCKD',d39{?|SKv аL޸=-|\&T5%haA)Xp'͂Q8髡a^P)7;fsPJr4؅)7XXfidšď8ri_ၺ%0Ďe7pHl nbOvMBÈgG/}J x:qC+zC*RCJ]So *o!{ 1yR?_h?mͮ)yyhpmiK{\hK$g\2DҰe&X% Znɟo/}e+Toce]BT:A0F qe/r(ƙv~+lQƣSAol c\ngӘPA9NM".>B}.%`ݳ=89pd܈7O\?t,Y /m3}o&t4rA4}Ŕ)&=\=@D/ZOV>`nZ3"9OD&brO":F(LB"ԝMUk\D*?eSN<_,?UjCwuYE"'o<p:$f EN>1派on:S#oK.S ?ǧrHgjP/J" ,^,6a>X#rxSW;X ds@S V2Ƨ{~w$(ylls3^dCj V2헄? ۸xNѢmgdD.y fit9<5g++y1RBML%[8-|ZhŊ|MAd /Tu)%0y%yJΩbל=@WV-JoK84JG0`L[g Ink޳rMV}c/uS6Ո6h{jP/X CrbV1rn4A"IL/&u2{RQUoNEX%AkvOrAґBLfL2 B/ԯf'c5K+5={B l H杸*=S2ZJOUbd0&blK,9hQCЫq;nFDT$ -$ϯas;zl[Mo`ZXsLրv͙G4nX ܲ6Wr g+7O*` {r6 n&@!%`v֥B\䭡fǒ*bGp/g ;e5$V<,8Taȫ_~yƐS"6yHb{~Fw=hTe.T7LeS(TӪOeѠ(֏gr 宑h<+ttzǣ|‹B ]uu6c>lc+ ᗍDbGL^5K@a%"zk 6jYBGr_;<'[;ǥL$ID9-`Tin9^X{Bwg 9 pb GqU]3<ۢ 60'=zϼIy_IiCDU;Cʖьr0(Ի7u8sY]^rb2Uu6hٞ"uddv\|$1?FW]G_O`-ihUr`.x^M7ǨRQ"#MQY-h`Eʔ=٦w`BJ%B`],ŅQq49릏" shgg` <ྦྷIReT`v(b;U@b2&@L*m`*j}@ai+`k#yT)&vJWVIUDiDZawypM[X:`QH'Jl+kʇASby8MwjitlpomSϽ3 2=D:^s= /38vʨ#Z\8b %Å3 k4ѐG#xҩ£¨b~m=,).,KP 2^_ *Ih%ML`hZHb<^4vh5Q6k~"Ip0^) &G'<ច2'/*~[W^6%ۄ?Fd<-z܀kǾ[B^}/8g$QP wY.e\$4v%}?Gާ8JU\LɣɊ3)V.npcП1W4,twBP+ҷPfҥ! jInG9Ț9 O ݼYiVQx{R/ߛ<͛Ȥ,5m̻Ņd) 5ro;rӼO u9N)/5?Rt! +=PC>"$("s$ 5~+A7cs|%8="- )R'>6|Ri$TyvHBp' x+97&Pq{~3s ;$\wb`.ƞs[C=N`-\w#/SI ÿU"}C3}pԓ 2 d=sí+v'I,2U5i E_GDt)p>aV*(Imt3(&ټX&Hr9 ڊ<,"Pv spc\Gk Q†p~~G՞[!K}~8n#ov59W9%c2b:uYɣ}x6o^A^Ky: 7l :b,>ZohiND<՛#*,'zr61#`'D;lҸ'd*GvsSۻ]EdU@˹`|.zH@}*~fPЃ{&Q]LȰ[R$!-.u) BF-ӴHekN4T/>|H-xh$f,c6G>Pk?^Fmg+C IځE' mp|4/V}0B4x*Φ=E2W"diYO ׶DzHZ'|etsQnT-0SSn0RRZ_=NQx4mBM3šjAHG33:ae`Vگj`Uh}uo7'/3ì0r<׻#&ޱHm?^*J(Elη j[fcD٠%NDlKԺFtjm`/Rj$hAWD\1K *{h6 [?VVHمVUU뙽9DSd(^@um],KUp,ߓfʺ]p+\Z<)`#)rꯁǐ[SɢQ̥+khug0r@9'kNVX.OAfy}RkǏY?Ҳ?'2#ov yYryDؚe B]p(4iVe_"exoOf2FڇD7$4 @X z {'w+04_T rKT!'1gּo !g͆G׽Uf9% a4>$d05? +I 8h)J!8RS gO0? l aݢ |"z roUG[[稀3#jH,i'M<Ġn3Em7hgB=@H9.%2nlvhsqbl,@bu_Aqe(,=–fUD;YX E"9_ordaN((s I8]'M4Mr0&eN/>/[,~ v驟oEy:߳?z]MrgZRl (śG(gl˿^FD"v<2 G9@Q g{U__!L Jw:_nŦ^z)ńܦn= 'Ҷvo' 믇QRN? 7B7bnWG:ii.[8j ¶  N7 lz3yz* OsPm!i|SB[%:Yι*\@'ROh!䵗۷xYXa05Tm]dhÄCO,>n$Q>q^~uIj Τ?▞5U:WGCo>*k R)FG`Jc󶠺 _kf8՗ XJM@(6\+QU˱}Uw"δGn d9RqYد@ZX9؅.0>s70hRH{`&Gj.hanlqsCo9djPRE-&3bQco#*A`ԜbgBWun#)ߋmRήu*#˹,jkkmel :OM!J{ryq](?FHJ*幊Òq}4=HvP&3x/|1nv|(ڱA ,]ْo&/_X `29_aX`vuLSgKg|! *f$|b=J*ۉg3 2ٖή*skirrHkUqbV`[i'YQ0tOy|JWebZ%!0}<~O$X=a7I1⒤|;]n0wQ!Wa+ju31|>~NKvIXQGCVEN1BIgHpāFJ=cHL=ljK~os8eL%asΏZgw2?<"?v ^>1hK"S#ЋNh^;b3_"RL"H)t<ҊP-i;3OgWZaDAyvBYT3|{;Zvnj[v]6s@Sq.Z62⏿Uoh\hfbn\ Y9(%NA|߄7i$4wLd$w`nJ!6pXpb&6 agݞ ^~/oIlx2%kU{HoI n:'{]>6b{/Pfuf8xO'*V+ `qӁ4?iFFJcTǨg =A 3z#;V\{dwTE/]ot,ZD~+*e)+~ڐQ|M-ZгTx ^p,l_ptCmzaٖ#6Ѵ g.hMZY>P7!R`XGOAkmjoKO;7Π{y\.avr+.=r w o ؍(I WbxzÇj'njCȊŬ2Ri.'N/muv; nck"y޹#EЙGSΜIM?dqv=h.9`toZ@t\RNB9i\^B8(t.nƌY~M r| @#"@ydHxJPEφ4(cD݋Ael?>br2涕ϘA7IV2_7˫sxBYv7#dE܍.e(}-I OOwk Q{>.YW:0,VA,XZM.>_5:bOjrjrN e|j0;-gy}luUT,i.4 JJq;,/J:t5YoX8$̙LAkUVۃvvsקsB6Ayo{V@I4+"q tT^A~BN 1'lنY7)6RIu%z@y+N/ u>BL3gbj ּ`3$>0PdpRد 5x9J-g[IytD7:R$lQB*Mnu(gKՒAXZQU ^4njS'2,yjm:l h- 1y0@}ppАqY=o}7Mm ρʂ OD!@/9/՞Ƨ! T H pxP5+r 9ekFFjA;Rw2.)HS]t@9\y_q*ɹ9#=t1)VjCC!ꐚlP(JqIkf1AB-O tAb,yZPRCI5倠DD<Љxh3|# I[AO`D) ٲ?"ncut`]lRHZM ηJ N9Lv(v)G1Z*yQ-P||./AN#2%O[=#-P  'Wz'w)Sai.iA"Gtp8.C)H OUߋ%CC0[pYJ85]h=g$=X:sn0|r{| M40~BôՊ{D".A%'8^ ԇajV薏^t%aGmS.+\\! *M ޙQiγYuq+M2 vm;^)ty-SCzI*'؝+%}ʯOqˑkg^rJ#YJfyq= Y{f"_}*r$X,iafHLUnBWxv'B|ģcק9ȱJYl=z^bٽd -%Jsܸ t/I0S҆ )90g`,*եNİd*3K J 84Ȟ4@B-%>]݆ijT(@y-& \*=5MϹ2ؑ}BQI"N]1JFg_ `KrC=VXt"NqMb̓=^Tf.Do5t2*,w;U/,PWU#u]& kojT6lS.OרtSLWni9din  xk]":aՅ8 eX9 ϥ<"L8_AsX,Gf;9*"=M}M9:c14Ȼ6e]V4$ >E/KXtʿFam]fϰl@_L.7R4UCrEr&UoJɬCa\/܀jDe>$z:^u{y;.^_R⥗`<[$ʹ pa5tVdb]dC;cKg@,"W+X߹'EsGZN21_T]FzPEZ'GN Eq~CT: in Y #DnGd{ - aq5/䷱Q5 |R'^Яg&zBREuoߗjƽ{bh/S3I itxFr+_N˯ox0QWwhXbK PzLr9lիt}" WysJoplKfLjehͨ"Cz;tlhq4ZQ|y&$8 ~d34CEKcܻ?r .EϺvpXnC΁kNv}a[x 鵦pPAM;?MAJ04Y3YzEKap]lu~ D뚉I0r(wǘE~oT"yJS~1 ]4, ΀WeѾFbeF_5ۧ:AIv: 0~u\VujET PEEʥp?\xj}_|߂UڮFF!'py@!h%ɝj?GI#e-iezIV)vtc3,a~s:?RKZw6s= PooR$ '7<bJ;>*(!ЧԗWPYRI_,˟ bYM;vu6JY8gp3%x1{vH";iZ>brA uTn:уd&Gq}@.y[F{ ![/=Jpڱa%'!!nOB'_W.l*Gѝd$*֘|P<-nF\dyv #=κi i_Q!5y]Rn2moϯ({&#oc'G2_ˬF$SC䖇Giƽ;J GḀ~B:{p>|JSJOA|mשQksFS{JdANpG+hO6 ɻY8:6B۷0\1jV0_P`DZ3Z9}=g<&5 &h_]SS.})-먨'BمN=Sni*@C1$tW#nq շŶQP={"s> 8>_-*I}aM(ܴ_XSrg/7 .9pm#U&y i5SK^+xґ +T l`kWKdw ˁ ZGp)C*FO8Bz"Q#rYU5dz@U*w{%ϢB<:7͹'E;QP]x%oo dfL8fW #ā#{v-W5k(CDhYdFr~J~$$m00-UJ,^LFåR L@`ŭIjR_U5=A L4qELJV6fjDIDg1|ke7YhB8y|tиQLLSR: wg6t`QA4h{K+2c2E c3WtSo1FDn+T"1`vqd/Һ*7C܆&+Bm%^A(z䙁kg:- ;k(c`+rOeּI+_DMiOI|i8(a(5ӒJdaWltABJc]'X=Ae|͡ZytF"FK`d+rU8elXLt9vUv]D YX Q iQi%Ep" e8SڵkzaڒnÒ }TjَG~RB*]i+i6yrP\svGz<0 FǖO]s ljQBيkqt8W`܆˙1,[V02$<]VGyFdyE+ЖNoPāk$%;)\y7|# >#sHH;mUg;4H{ׄB,9!QUgNM/|XZkWF6T[TJoNaDGQOQ$^,fnLRf4-x [is=/uA.|چtG[E&]Yˮ5ZvѲ|JfHuIIYhʄ'ƕb&K -NsP,~#+.0:sGaX$=4x?X}= Ah\aI7X^6am^{SVؐUsu3 @?\(3Q 4$א HKX xW2|PUrI%N9=Q4pJu{B؇o9x &V?2ClRQj;\anA;5I{'L%d8#{?V IiaIpyxp#H2%} 񝩛s5_& j;d'yD ># en݊ͦf~@}7µ';AFf-6x`qG|NJ@TjXJ9\IV__;C -C{J˵_yh:~lõ2iNJ((RxR;٫XaVduE<3yxo2xCFZ}k_nm(DtǠC3^qLVa*tVO)Xp( :R~vU@z94e,׼jix{@m}(73+15YCf>]"pRſWrX?JL?s9`8'i 2yځ䧭C| }6zlB2OkKx`r$z6"̞> }t餠X`*hZhХ`UkLExATb]P?JI?xmVR2 f#R{X!OuyiGOz4잶2r$slQt^-آWDqzHXBoEТÃ{KAF,(]޷li-tu̫\RWgY]v;c0OxiݻMAّlemP)JM2@bc\`9{9 UPJ`ED9 G0#؜3)j:0&d'5&IŴwwl `)IG-OJ&w^$W$ {𷤶 ^r-C gY3pDt^YdgAZ)ܢ@뎥{pqZo&# iC𖄾?}|ѵb [O0vſqrPF+ë˅ht%k.5sHqr+/n>Y3>-8p.8l|+i Qcx^>5 #"kq\o?5UˡHNZh!d`%B[<2V |F=I[`!t0(FE- iKrlL9ytIN+02kau]}(g="#F!]CZWo&  ^V" k<\ e3C$e6+8 Q=~\ݼ@>2먋{ohD\[RصO6K_g7̊ѻj YZ