kubernetes1.23-client-1.23.17-150500.3.12.1<>,$fAp9|K=V'JTWA8Dž{0H'ߙJħz^J+4?mO֙ Q*ѦmC`&E`X>ϼKȬE[bU娳tMBƛ-"G}h]CŽ9 .MɊ&5f`Uϝj9G˫ȽY }m; ^hA5#]ɂ2hԬ~5z]h=!6 㣒幮FoxieIEړ 9{JJk( ee2MO>;L?L|d  . Flp|  4 D T t | @`t(89:FGGGHGIH XHYH \HT]Ht^HbIcJ,dJeJfJlJuJvJzLL,L0L6LxCkubernetes1.23-client1.23.17150500.3.12.1Kubernetes client toolsKubernetes client tools like kubectl.fAh02-armsrv2h;SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxaarch64h ;,^A큤A큤fAf=f,fAccfAc708e7f069fb52916a03d4d6dc8ec144588fefb76f7e4a0723f8a64a367b83a41639af1c94c39ded3a781d1f82c7075b6af898b7bb6d284ea0313278568c542318b6974720f4fb31199e971a20a4a21cf3987708b6dfa6a0a1f4775e381b970eecfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30/etc/alternatives/kubectl@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.23-1.23.17-150500.3.12.1.src.rpmkubernetes-client-providerkubernetes1.23-clientkubernetes1.23-client(aarch-64)     kubernetes-client-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives1.23.173.0.4-14.6.0-14.0-15.2-14.14.3f@e}@e7@edd@d6@d!@d!@ddb֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgbwiedemann@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comrbrown@suse.comdmueller@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.com- add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin, bsc#1222539, CVE-2024-3177 * patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch- add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793 * autoscaling-advance-v2-as-the-preferred-API-version.patch- Use %patch -P N instead of deprecated %patchN.- Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds- Security Patch Fix for CVE-2023-2431 (bsc#1212493) * added patch: fix-seccomp-localhost-error-handling.patch * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Split individual completions into separate packages- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.23.17: * Release commit for Kubernetes v1.23.17 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 * add scale test for probes * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * egress_selector: prevent goroutines leak on connect() step. * tls.Dial() validates hostname, no need to do that manually * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Bump Konnectivity to v0.0.35 * Improve vendor verification works for each staging repo * Update to go1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Match go1.17 defaults for SHA-1 and GC * update golangci-lint to 1.45.0 * kubelet: make the image pull time more accurate in event * change k8s.gcr.io/pause to registry.k8s.io/pause * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * Add CVE-2021-25749 to CHANGELOG-1.23.md * Add CVE-2022-3294 to CHANGELOG-1.23.md * kubeadm: use registry.k8s.io instead of k8s.gcr.io * etcd: Updated to v3.5.5 * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes. * kubeadm: allow RSA and ECDSA format keys in preflight check * Fixes kubelet log compression on Windows * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * update structured-merge-diff to 4.2.3 * Add rate limiting when calling STS assume role API * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.- Update to version 1.23.9: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * Bump cAdvisor to v0.43.1 * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * fix: --chunk-size with selector returns missing result * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs * Winkernel proxier cache HNS data to improve syncProxyRules performance * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8 * apiserver: printers should use int64 * add missing error handling steps * add missing error handling steps * fix image pulling failure when IMDS is unavailalbe in kubelet startup * fix: exclude non-ready nodes and deleted nodes from azure load balancers * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients. - Require only BuildRequires: golang(API) = 1.17 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.17 minimum Go major version.- Update to version 1.23.8: * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules" * test: update graceful node shutdown e2e with watch * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.17.11 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * Enable resize feature * Reject proxy requests to 0.0.0.0 as well * ipvs: fix prevent concurrent map read and map write for 1.23 * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * untangle fix with healthCheck feature * Winkernel proxier cache HNS data to improve syncProxyRules performance * Skip updating Endpoints and EndpointSlice if no relevant fields change- Update to version 1.23.7: * Fix requests scope classification * Update Go to 1.17.10 * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix OpenAPI loading error caused by empty APIService * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * component-base: replace url in rest client metrics * fix broken find command * Allow KUBE_TEST_REPO_LIST to be a remote url as well * Disable JobTrackingWithFinalizers due to unresolved bug * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6 * Correct event registration for multiple scheduler plugins. * kubelet: rename closeAllConns to onHeartbeatFailure * kubelet apiserver: be gentle closing connections on heartbeat failures * fix: race detected in TestErrConnKilled * Replace hardcoded kubectl with kubectl.Name() * kubectl: fix hard-coded value in zsh completion * kubeadm: add etcd flag for member data consistency * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config * ipvs: remove port opener * iptables: remove port opener * azure_file: try to get secret namespace from ClaimRef * azure_file: add namespace tests for InTree to CSI conversion- Update to version 1.23.6: * Update Go to 1.17.9 * Fix: abort nominating a pod that was already scheduled to a node * Fix the overestimated cost of deletaged API requests in P&F * omit enums from static openapi snapshots used to generate clients * Drop enum tag from certificate request condition * Addresses the issue which caused #109115 * Add test for indexer with multiple values * Reduce number of pods in Job+GC tests * Adjust validation checks to pass for both client-side and server-side validation * Remove finalizer when orphaned * Fix: Clean job tracking finalizer from orphan pods * Add test for Background delete propagation * Add integration test for orphan pods when there is GC * Copy request in timeout handler * kube-up: use registry.k8s.io for containerd-related jobs * kubelet: If the container status is created, we are waiting * e2e: Wait only for the service account * e2e: Wait for kube-root-ca.crt to be created * client-go: update generated * default kubernetes agent for generated clients * Include pod UID in secret/configmap cache key * Move kubelet secret and configmap manager calls to sync_Pod functions * test: Verify that nodes do not transition to Failed while ready * test: Add E2E for job completions with cpu reservation * test: Add E2E for init container pod deletion * kubelet: Delay writing a terminal phase until the pod is terminated * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 * generated: make update * polish comments of non-enum values. * unmark non-validated types as enums.- Update to version 1.23.5: * Remove apf_fd from httplog * Update Go to 1.17.8 * cluster/gce: update konnectivity image tags to v0.0.30 * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 * fix dryrun when ca file exists * fix regression introduced by PR 100320 * Add unit tests * Fix nodes volumesAttached status not updated * Fix default config flags * test/e2e/framework: include the new control plane taint * kubelet: Clean up a static pod that has been terminated before starting * Add an e2e test for updating a static pod while it restarts * cronjob_controllerv2: do not filter jobs to be reconciled by labels * kube-proxy: fix duplicate port opening * increase Azure ACR credential provider timeout * Updating EndpointSlice strategy to retain node name in topology until field is set * fix: do not return early in the node informer when there is no change of the topology label. * /test/e2e_kubeadm: adjust label checks for 1.23 * Ignore container notfound error while getPodstatuses * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 * Add PDB selector patch integration test * Revert v1beta1 PodDisruptionBudget select patchStrategy * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error * wrap error from RunCordonOrUncordon- Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4- avoid bashism in client-common postinstall script (bsc#1195391)- Increase _constraints to 13GB- Restore & rebase revert-coredns-image-renaming.patch from kubernetes1.22. Looks like it's still needed until all supported k8s versions allow us to change how we publish coredns containers- Initial Packageh02-armsrv2 17127606411.23.171.23.17-150500.3.12.11.23.17-150500.3.12.1kubectlkubectlkubectl1.23kubernetes1.23-clientCONTRIBUTING.mdREADME.mdkubernetes1.23-clientLICENSE/etc/alternatives//usr/bin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.23-client//usr/share/licenses//usr/share/licenses/kubernetes1.23-client/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33337/SUSE_SLE-15-SP5_Update/b3d79ff566f2129e54d173fc934fd546-kubernetes1.23.SUSE_SLE-15-SP5_Updatedrpmxz5aarch64-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/kubernetes1.23-1.23.17-150500.3.12.1.aarch64/etc/alternatives/kubectl' (No such file or directory)ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, strippeddirectoryASCII text-5"̌"utf-80c209c4fe5de1529c0a1d39cf03ae81c93f46df40a8d27ed89077006035d7472?P7zXZ !t/#]"k%]{~msS$(Zz`>vj&{6~a`KpB*˥AR;q *P+Z33BR1w#PE^{2RBfvuDEn?o)@*b6CbK.g)PMz ˩6Յ>: bԵܻ+b: \Bks#v[wډ6usi;j ;F>bl)i;h(@XlaZB7|-Z-v՚H>abASM? K"Ҙw?G |VUԩ^>qVe(uχGW[?A4R1uew-5BR3bڀP[ Mo%<җ6B[yۙsѵYY-|SV뢚1m6~7^ќl[Lvu@w8`s1+Cs+zTHĎ4K+zz<"[:0w|KaI0|fhazHpaQHPjk]*ﻶڡlrj{s yqINLϟ چޑ \jkf~άĥSmgװ@mo=%aqeW5 =:'_SO0*BSnf Oa :)KwGB$ʩFO%~D%갩-5usۡ{ q|3ք,\&Ƣ)%VaI¦̾#Om< &9b0|bgei Q81%uY'V0/W["pş33o #U]ywT u*#9PrtAui(&`dtZ~n0iZ({'59Z/q)T7sXrR#@.^׀yA]$5đ]:{~ # i+Ӝ 3r>"B)I+O$6M.Z۽PASS!l,ͅ<` @ƞ̣C||ょR#!j@;^fg\]YoL^$gTg^ tO"kR5Qϐ o4`߁1/<u/qWO9L$S|+rqJҌ&v:$?pg 㜒G A5wuL2Q7cs qtu0wC^g*72/ZxCU=QupXr8ZX͋<ݐb,3oE0+V <#\*-5qdǛ,ʋIҙ $EKme3?q@BXCP0@r[oj9~J\.:lۛkFSsF%==Ҥy}"Fe5o# @;7ݟ ~1d|Ocn$+!Ճ1]GӖe ͈*.V8$_@bx]p(?Ķ8D d4!kC PuxHT6nי5RYѺv;R\_*aKNGIC4=T١{a!I\c.YװECSe%TqpìٺYy{щP-`DIFߊd=)eP:]UxQfWc[ kG~&>=k {}nh;>H7-Q:wr4 3@#'[{f D)k1 än)f i]}mx,i%yV*JHYZ >8]̉&z`5hi\FY8BόM#Ka^nZjH1e0ME7~VB ,p] ,A+\h4,G Ih>L&6B9%AմӾ}VRnzx)2Һ<"l98G]::~H`Å#/Qlu3k8t&G- we)/s s*G7L(&N֩ *+549r'xz8HO|E^2bxN]~ gAQ8zM*v\2ˬљ(#,X\:-PfyԹa: $|xEmٲoJ}46㢐0-`00"S~OTuRդ,_hy9kؚdM__2;>0yg;,hJfpj- $߅?ym o&G/ 魾ϵ~=)P|6N~p' tOj2;8šZbRd(~ip_XZLV …R[SO'cͨH?lػjJ l]sXA1F j<'Byvb -1$q ckzuoe ̈́Gdŷ$9Ev;I+^ƮqN# Q,_bӳe+X %+N!xx Ļx$2lאd.`USPh_g%Ώ{}=x՜>y>d:]Em9*%8:.v^3(FiiԌ|#4[ nDל姕߾-wjB5v0~fnI('nAn."D"ž7."DI9`n}uc%h4j @MQ&u(D]w!D /2z<9 ?.}a^Y~?9|h C]C/y"T83hge,eFFʓ8m-}1RIwL󜓹Tf Jwm L &uD-h2?rOItpL 0e/;&Eg5۾i":8KJ>+5 Bz&; ĽI030| g*da+Lml.g\N2Gl'zqbc9܋ #5R\Z;[T:_Aʓ'U;&a]=@/퇉}c0Q!m>qŅR|d JdO@-EЃ˕("|&jteFUhUj30kSxK;`'Fsv*di|V5&~uvhʭo51,}+BB8“ #5ů]r-DÈ?L?.4He;8cubZZ*yQ [@:فučhzb>8OE:7 bUMBPPAgUR;4OWx00׵>ZOQ!]؁oKIkCAt(y2NWUX KnG:uamS*;mgiPilK(éo{Ԇ Yq'_*ȫ#1 0ֵvtc,Gǝa_|;%壳}0JqE>lq/ #ǃh+01iΠdXV«`j=A+bbn/$#D(W= ->| hX{ mt sG\|!:HA9ւ{00098LA՞/s^ҌWTwnJZC:ƌv;,kpZ1إ0z ;>$[ΊcRH oͽGKds5&:,Z퀍,epz1X\ U柜}]PHGw&jv|O\b 4ח+FtwO'M$, k}&zmEI9ٛl4ɪU:y%T!"`q!%ܰe|.-Z4p.{isccнF3nZs0(gx&cp`,&EN&XHݚLp[oCl^[S4?SSx嘎+r1I ppҝr$Ɵɲ4,( ]}S OkqW>I6ڒWY? GH9Uh|l8#iwL4gm@rF==5( H\ joA^$A 5UkXOezQtYdC>X# _Կw`sλaRd3inOAjYύ 'u ]STjy5|pP< $ Ze7J~֓汁<>׈C7%ڋ:֖}^eҞmGn1Iņj ^Y> f?JPS琻"x&7U&gY﹦nq%6fhH}oeeʩ+Y}xDmXy/+n\}Lֽ*etCd.~a)UO-n֧.2Z}qHwD޶iϳIkF#( E:qN=JƼ͇d}`/3|`'0Ihڮ:]z+-*]^~ڃRHj߉&*"wQwKW&$Pj1zиA%VOݳW<oyI&'Iyܖ^L^Vt|")μ\uJo,_ @6*tCR4D)=4ľm6fyvdv' EL 3;V\!=-ZI7?q%CswVNI}^f(I~-z^rf#iEXrl)4]:i%o-ֺXݻ嚐6[SmYFQZ1'JR9>Hp+練;m/z " [)fΌ{(E}]7qNYޡ,y l}?BMBW5P ]van4aCwQ-Ps+ߔ!}KV73vP>sM`]z’>],@ǝ[ ./Ռ3kU3XyUIGH6{3EHK5g\3 {g!ءtϡzPQoS$m*[ϊug;`~͚v3 ٟ ᖴƌxɓf*b%*b>FL(?Hv`pR0W)YV%2M\"ן &VmM*Emq\-:1Eܞi4]dչ!zLi̔zʥ8 ?s ᛷh){< 48?3wAbU(NP]uN^-;0rm76jVk4qB5&; j~ 7eA.1S= \6礠bl{t~e $BKsWH>& 颐3d{ݭW BOsWsr<)XM=˭"A-O^Y wFK=KCcad; sS õԃfH4-4N/^VqxrQ_te찬]N$#.R˒?x@) e9M {;_{Vyll[8 aT/>_aY&>]F˟yKZs}I n`UjJI/5tV ܿ?#fs  "R2wg?%H%Z"&h0` =HD0q#dPGp~ѸaB,K|bAĿʉ Grh̓kelͦ` z^O*<16Gjşem?+^OVhb'OIW^Ĭpsl:8 {#alR&Zu'ڡMZ/#ѿ $!UwP$fr6+|_w)ֱ!dݿ,}UrN PHIdBWqd*gw0&WHtۅON QK2%V2;Qg[!++bB&_kFv(gwkT ΈQ,Sel#,E\ln`d~lޞ"e@~ uCAi [;S/$&_8 vW63iyrLcymHo+E ;JCVhdɮHHNj.Xktq+Kj&bNс12b!{Ty(4 nR?VQ݈E;U){@̗>|o,L_9,x_)1Frp^/CZcux8:̳R^*LVAmAVA2= <Ɩ6 btr#[̥Zr )[] eB<~)RcB/mO=co=¢R \F?~Yy|iO?Y{܁&&P{9[:-owJ+Xfetzi.T~ z1R:Ӥ3 vꍖAG%.ENbCEFӎDYۚuE,_n%1hdly]X'ݧwJӨ{3?YU@r A(GUu 3Ch;YPS9O' } `#ؚE!{݇(;Qվ 2`y$E )7r-? t'6 EY#uX-9{:Vl) fk533Qy!q؍I( )͟.w^[}dr;A&L!e(uQ^"LXPjʠUȚbyNN;܄RcGYԈ[Vhkkjb(t&hDFć65tG.wEtLEp>#Rqwn\{wix`b‚{U'ȶ8/sж\t$UOĶjy>)HŜJyc;BE'\DAl+F_rF;YlPJK'F )*gm1<\" n>:>rk;Ar .;'S#厱c2ϸG")> ӹH흠4 ?4wEe{PNY#`1(\'dxREQaL&RR1f=cUzjf\aP(""Otm2LDlܘ0!Yh[d׎a'0nH̯ET17+ӌeDC/EA,5QXM Ϳ!էUXz}yG.*g4>ڪTCCbVǓdY*X$㩶16(p4#eV]ޘM.J.NܫE]sNnJw7PD`df}鯜Dt% ,2Ӣ8.JmU5d0Kv3Rr~ʐE&OL2f@w4iK sY1b~qa}3r$K:[!@9~|^G Qn t٦lajxNMihI^ؿl{g|JFL~6aV CYy⧥a,91]&  sc9~TTYY1`Mٻѻsǭs-Eρ#= ͵gx#2%(l!}sBTb 2̊̌ɭbԜ[2o+q(3A*¹k`K*˹TH_z|YuEܯ9T_ysQ%,&`!/yЩ5GD2ASK|r -CG~`ܖTgH?m{ أk*1 g<-d2cx76(Ќ{&5 * ٦ݙES]CMbQ2 \»;Dwi{gMEq1[0޳*>F'>#EvԟOr_nFHb>e`aAϸEdܴ<ǥ`=M{ëޞ_sdK>sLpkx;HpLt N7Ӳ%bΞ6lpze!L;Lcַ0Kw;K0[5J_K/4 4QV & IC4l!ڂHT.iyKbY\l _' pt AcEqV$j@310j ?b;wsq5e9|\n(xџħE@t$za;'|J/^ƙaA;˱ᠢxUv/v5.T6>%0z\a!k_k6qG't/_?#*=ڻs={u0>.ޥceTXߩGa_M?D]j=8ib(ErF֮юV8$-v֑pV?mR+kIYN\xnE3WVx%GwOo`/ߌ[dmk:>Mk=mG/S_&e2t)z!^Nc[ZhS]R&O;y'b׻Vw s`.19{5^d@0c "`k$>ؼJWDl|<Su"y`O('ZGGV-W3#pã?&8?HR@dÇBYJ:ֽ8ꢣccG!9U~Ǐh'wjW}6=ƹrS `c;},zKG蛋}YK &avV"B/NW2y)LΈ`.(RWX6UpN4koenБ֩@؄%=VvpM]p׼jοCB%;'5aZ>zMf-7s4jfSّ؈X8S,\lXUbdzi"!֣SOo'H}35aG ܙ :\N1 Yc>}YA*oۙ+%'T*)Ȳ/RÀ*yI&'WbC c4Ct~7?%c) I7*㞜ʀ\(I]{MU~uLe̯$gĺU$WnCHn=dY-ݲ#( [1FC>BJo-$#ũDcуp-X`n;kڂs\=_#eF|; _W@lL*9Rt^rldJG "tJ vHʿưS:XO / qw_Y_1aICe[+'ո&Ydy?O^?~ŵrwUW3 <*_e5j6vP.^P8,8~<"ET&|L.!Xu{c]`iP(A% 7#=ѽ Sjx@Ato/r*,YQYu 6Od; CIݲJ`H$ B됖2`$9J5 Z%Dz"{fc2bWsOR1b#@WӁ&uAU vƵ7хID[Cn+uq6L^PȪ^fd?vbay8[3OMJ!H"XJiC<Y4/L[K/(v!¥ O^pĚjF[$&?|IdF NUeC4< B[:+{^V0}ˤ*KVv,VIMf/d[jOP/He2M|gNDžCIP$jmט%3 u%JVDzXCYO*}r/ij @I0&x!g8ktT&&c|8G&~iQ#6Ljw=SX@\Jۻ|JC.O蝎)E, J$WX<9LDe1uh}.,7xwj`=rR.ڐ|ezќ;(~f;Ƨf8?z,+␻_C2&d0n'zc% du_?{8uBk M{"Q=55?iVkI msǭtW-1lWil7p²$2ܒ OX-\Uо= 8ҺqL8uWmRcvG-45QO}6[KU #: DCЎ7X<,Zyrj#Y"&X9z6_0s'_r%{}u~<⽥IYVboQY縑nshO}`Jl^bF=5 ξUz)`Kd~!x&&ť@z]h5K0Sim1V,B I|k{v|(ru H44,MufQQWu6Zg\A9$%Eq-{B$qFp+6^ҽH=&UWavfG ~2+%NsƇ9Kua`\F, 3 dF"=[O~{Plw\[~\V=-ءg.s1&K駲) w.DRi[RMF ] sIsZZ8/?DVeyp -KK; 7E{8r[Fn .1@9DG]yAҝ&  \XgLh۵EB 3Ep2M;@99/ t"0̨JB":٦gq &@€\Y"{[hsc@ Ni`禮ҹe+]'9U':P~ T8iBؔvh)k r] =f{U7 ikNUV^ds+^M*JDsI*c*AWdk&E6f<44wg/| 1 MH\lpr?qPD [TQ 9l?=4艗墴W!K5k¢De0n8g[sR77;SŁ/U|3b75W16'Oۆ`p ;%EP ;'sB={}28~^ RSHGi>0d}rQD4-K;FQr1A1yodKZ:ŘjrDyB A ;.yAaQC3qwwgOB%aH@/_b‰ UNbw)DLS}+)bb0aI!,$+xz}u,+ۙ:DFXo:c.f =5nZ޹1ܑG tY~.VQҍexa)A8ۖ||ct-iyU< 2dm sjvQSI!j D*vQSNQ+Wl2ۗwY.} n%GJH~HOa]ZB3Jsu Y4q`{dXF4ȑ7Nl1O]MTqS?C0NB?cPniyx'.EpIK+צ6rj98WXƍ3=4=~p^c3;&s#8=FP"xR!s/ʓd\|B !.M^Ym%x0;&G&= _,^y;cl<.&ơMdb(OF_VdW!"&1ެԊZ0P ONbF Hg-%?#ݔecT]1]cE9 M.4=E*F9"mB)ٚYF, `lE ڦnW @+M>`, |wT]E龌8NHӞfg7iLs`=˞ޟ|S5Acgs"shbhIdJ\ud(2oh?@=!~B>ckݫ?M{+0yb_-`ZOH$aB_?3Z;C6w,C$`:t 'ɸpnzawE&Ȭ3o1ZכMTTY-5xo@LT!߳x jlPI| :*Syܛ힋Ha21 B7Ɠu${\)}@ UDǴ;"=.G!HuMʛK 9%}r__vH)PÍʱ!I|RXuC`J?Kok:}V~ ʴFC>s|;jhRn\g@\ DCE#}o(kZ5:e,džy= *%Ֆb%LjA.%ꂶ{4,.pZC/P`"[SΘ9LlFV[Bƀ)UHMi p =!Gը'+lU `-ǖvj>%ƭ`lhTxyYϮM:Q.]=vi4aǺS(y[⟨`kY lu!En/5U3ђbcЛR?.)J6{kT؋^'Yţf4E ܈) hS6s^y5 Q ~8'd(CVs~ړ̬mX`a9[gDZj)8͑`{.wߗKy;:,3lEȴѹg jYMs ;l å!a xsO2N˪q06WIԴ;adO]*N*&&58L*E*/xSo ~xJ:prC/M0Cqf1snl-eB:~;I5(Wmovky]y~I &FZ3Z-y ,|/k.D&0L(goP8ʴEh~2=ɮ)*w+Ix;ڃ+*RTԅeD^&K3e'MRJ\}0#G|o{aT:J7Qۮ9#MoZ#h 8EpYɒsf(Dr.""ʼM:M$x rp&kY{JZXyL6sȮ# #9f3"5$Ufr? 0Іe-kpdNQą qA,XPHuz^i؋@CǃIm7>2X=E͘ D&"5mm6h|n[] w\7RJb6[? ./C L !]n4<9׌ \5{~ y&m *mW.+2r\"J@gkB  vJf99Ђ\~M1js6wP'&F騢XQWK.e?a7RhC2/+Ud~oj#{JwHs wf@G_a+;S.\g_}YvM)`҈@ɟGQv DjMKhP I!:5V4D (,gۡb?]*<[,r9Oؒ KL#Y7SEHH4I]{uV3| -Pi: -DyQ钋 f%:S,LcSJվ<1-%UhuU((LQni%H"ŽlS5-Ò2;[N 北2/]I>^f}+^{M=HxZٓ҉Efӹ\fT[dsb55oQJzh? w =<[dD8>5 u?#kSZcl??+\ UA-D  H\?`[W^(LeKwF}/ObsX$lM%\PP`rЭ|fn_k$̿1p` un'7Wɏ̗zY㺱L?ztu(Z22YұosuIKofpsETx]B'h6*)Y2(~l3BYX/)SFjިpطRU}X=t3ђP$y-0v*kO0ӀL~Ls)EפPo4hprՄPR7u^G('|,u`Hػh;!Y~='4GZ$e9"GB 2|52:՜Pt@TiLe]O,ڙ})d/+fW tikdXYU7 ?S1`k顦Mײl!Cٱb3&7(ۿx'kʘs+%5j4$43<4[8`RR,`)C SN(j&Iavey=ʼ\WT C'[~4Yo&>BAJ%A (!u:س]3 jmFUG`tTA'-"ڦqS}b(CB9Ι ~ JJH[>[ Yi4cQ~-^~vlòO蹯Ѵn2QOTf-993󬨞ޠqkbH 8JH ˑXuq#5ǜ zH iG˩pHIpI=؉IW{j0EjGeR ٣!`[!,@Bv@<-o9ݞ(!-s%/L*sc>Ņ"["矯+p#0 7! `fQB(,I܈RImRV菕76.Nj!zZ}OB,-؉]U 1)/'ߞk4=hCCY, A\HRLJȆJ.4)\Gwa]<ky -ĺ]Qbx,eADCEpʻP ,k!ZI(0b*R]he4$ JIYm¦,z^HG+ @qB SuTR) aƄZs:+z{6ʷL}ˣ\V( {Q{)Fcz<]8!F!fz8HE!+fhVA]r}~戬W_h鞙*qCOiѨYޚgex}0^b2ARk>2a5%0S!/L`E/{/ݚErpY Wasd?1$g ][PQASg`1BߧmUCͶ"1(# >O%c+^z#H:1\V54~j)zUʇ䱿$YvS&;HKSS'*;|Ȯ8m_T-3_OS# !!37YK(G*ڦLI._vxK_h:2ABLs7 |#X4ؖd+1L" a lVY>yI\ѐo \gje !&f!e1F+5e5T UJwIMRh#un>:j;t3Cf8CR $H47ߩ]H,[PBr6FcSө̪QVyiOSC0Zhh!KzkebO'N b|mkL ̙o,M=^~-9STRu<厦]d%5"WSƌB "M])R#5H- IaozG5ΰ͸ as '9i P>@yz.#rci+&N7|~ɤ- md4۵Kؓ7x^+Aei:DcAGO?VFtl]0xp Ih_Vfu cX;ῧC ^/4#;g\'6օ+?yL_Hu H/#*q"6=%G7A× 7ݧ}0bL:>)ir-̑lc-^^ lD>;h1gNl,HUaGVU`!!&?5;8*0FrO,{SwxuT؜+ 0بJQTnD5M(OYdLE tWY(6Lx"E~dE8s&%\ ImĺPR 7SC@{ /CsöV57$ !/+$#}LI㏒:s1sCt+vptU I}:`A-𔘉h#~q#;=].SpA´q.36vWs։!U&Ai`uYIU_!,Ƌ[.p{FWqq Dw9뭕ǂrۓԧQv :}Uy rJ} ྼN¾޲iz*Xjї"SJQ9ffj%Y`4Ń+P~L"^Mu*!K \+_\F sm"%(*'M vQyݒ&﯋> 2jBM";9]#ԮBIwek抡^XE60)`{J0I Mhkя@K&sަvGz8u3ɌҲ{",n5v\y6LzZ)2+.9h(89V7Tk\,vfψG%eS$$V"L-D1QǓ"(9R4:V)×n~G?ݹ(9@j[Ar}bD?4'څT6ͰE K N{sa;f/cćhcZQtHy`Ґ^]&uRrhM4kdmm_90)&\#gYALp?߉ 7DB9|U /2abߋAo,j&A `iO%'o7cӐp1-D^T;.¾XQhBaqטr4 yZaKC~໪r$JG!߫JlH&HB r",x?>GVcEs+`nY`p-':u9;dǛ}v7ԑtƪApXCCyV[?:q8ZGQ.u''*7@aHWmi8isn1=jA=`B8/.~L#hx>lPGnۥ#0 t, G FSgGQ$VV3?(K%(уv 5J%QjEC7T͹kK=9ٴ]56AgXEϮ ҈_ėL%*x_kt:=7wۺB&Ň]$Zט/_/ ,¿_x1 ,m:tiK{^>-fmu-IT,: _j$ 9&zzXj:(d j9 T EQ66|.TR-߼ T:ryND-ѪSzN+b{.XlZ7+dak-G$8j@]D&ilt4 R଄=Wq"N&r(ib/k|:Lfu%9<T9>!#l{]P3* p47l݁Ո-KhDZ ug$Q {zVα;l41c=Jn\n*P(CX(X`*.]t_x7A ~`PhT 9#͂5zY$0GcYD;N_֕9htBW %=S֐Qv ftać0G4:}V#}׉kS)U@b Z[%[pwO zp_r#/l_:Rfu@M@WSk`xv0wOz0P.C]G\e mYvPQL: h %ý7zaI.Tt`gí\cb b*А%6ŴGbڊfe?M QOcsf3QUJ[&HݙW y-p!sУlN(6 A9D1([yr!EEmnJ_Fp]gW*.*SZ^:}YFYt&ELCN3&8?:%Vp4B[}eD"?LL@g%uqL x`v@mb7C;9NH,MP|*nOXGcHٔ!8~hMZzg>)U DkUh9]L?Yﳬ_c5⧶^9ΙN*nP@WM-1-kRkKk0 ](q %r)^@PUQQjsGXB~+gH^USnlYh>Tڅ-~ qz407?1 M_P:̨8t=k e6Tm&mgkAp3oS&EQ!)F`twxY#έr69mU*U6{N¶n%&lYMߍNVB3eťH{N2sBs7R[.FdR()Tl>t݉ξ|U&J:=Y;ɸj!JDjueX7[Y{L^3]| hH>/z>Hۺѷ;5/׋@60F /v̇2 d(= C5#N|3G'a $b+K~<sz@\EK8ᩜP!}g2wYm`M妐xu:?d u= yHԊ}z1K59?<֓7e>li'+./E]9A⪅4N.)%?%ۛ\a5krth#amo'`*$XճHLE!:d(OhL H4Itb9J"pܽطW8PRKFv/,*f-$\(ߝ,dru?skӆtj Ҫ aEjK)ofAé`Kҡ8L toǦq=Ou)84JT{["Vһ)8]&w'4e|[@H¸A((-cjTl)>Quպm'iFh:YU톙Ogr/^l.(4 YC髿 և:#MJ\8=38+of .lPqEV{c+(J<6Zol64Att4F헹 8碈_+YC eWm[ݽߙʤ>ps0Nmg!%ͽH}eg:N"- ӎ,]]kU;%c*e`év$!A/mrx'^>51 V6* l/Bfs}j(Έ~ns|L3GkXR7n8V2l/a);ё.u1F0P<Nѹƴ7O}x/; ҫd+ Vk .'<.U}K S8E,r+`LQb!}P˦ e$ T@7VApe͹N_)`,7@t[k?L.#G(u9ޡV]~qp2LE U㧒#`&*g:n$AilQ$kP}AOQǩq. T4H`;PG a&ˢ}Ukxz=3xݷ-} VT|HrzR!9G}wWI3IUrd[e,A+b,_uզ9>x\̲Y 3!D31?R$G0fW,Rʓkx:+g|~ AKE-_G⛮!6OZ'@IA=XJB䣥a&P0,?j=4i2%Hrޅq^5>vοLr;͑u]xmYPzGxd%`y]]jg÷-$xp>X@"їT-_Hbpir2LWq.7YDmFd\Z~`/KxHt3LW5%6Rih̐%d;{ʘ3o0,0w7uee Tn3u=水i986Օ('TY.}B[O6q?az Z`7Qw jXD En1NEwkЯr0na%?q8ܭ|yzq猣[aؾBYnJL, 5&2qMxDQ&bC͌9PږhpJ%+b/֭9IILN4!em!ZтhAwimy5lkrYHgrĜG*f]fn2#xv YC~hd7 @ vaZ.M@Xe nT{cV71)x0ΩPwe4/aܨYM-;{qӁO nDc,􆘒y .u9`\wwJ/5( S/|70y\΁ChIì_D_7hOxқ.[mòiBȒ I,k^l7=N{ʶ Ԩ1'-C'8/v*o8ÇWW;T貍=Tz h ;uKHE5 %P.vdHd`(/dL} P[/ ]XUOp_ePwC@*:.lCi à7S5@hTGNhG^W j|:mcZAsM gBC Ԣ*0(+08jj0,fn>q$KeͣpzJ&. 94$SԚr7e ՅrD&u^̵dwa{L#IzݔfbhS@L^*b_R-Yi (\d ۴x42:U58B*k$!ڴs`[ˁxULLEjEz'E5vE1@Ǒb/pl7 RE#_^m4 ʤfF>/v 5 juLV:ӰZD(i!}}x?MA Op6Ѽ0^L*Qňo@Cr4ǬG nsg9O/֘< |}$]$]mN yB{ݭ%cN7)ː6j,Wo ޳8(5쎌i)>OmeCo!WV.шޑ"Q=L#V"o1GNVcp&VLN(2$~t?a_e7ܯlb0Y|#lҠ6(p+n  #`[=@6?8:aX,CҁO^_qt?Eز` QU11 8Ȝeb^/Aƿ,}B`1D>Gt1f^>tmSM ,{u˰<019zaR8tysUs(;waH)Uc_[WInKHb&M$X6ʛ>M獻!J(?›E[!<<>0']zѳFbM0y3 6Xp$)M_D:z%pFu(f S~a!i!wܑV[evct] %х̹k`fQ0a/6U4"u((I>Br ܴ[1kztKӱN뤇ŴD+n_ZBFZxA}c%rQ4Y7i{|ϊQS+Tdp?ie.C;a<;guSK 2_(!d.{e~:l @ ,=klCAöHnǞ@AjlZZFA- vR)o~@#PyG[^2$ ̩X^[Y؎:^ah bNZQAZBXkQBP<+vFU\@S ?t*Q38i^)`{[轞C$aTӞ '~w?RbN7o-_=Y,ӷ> ܫ]< sj>Эgi& ՊJ"iܺPKX&95 =|_LMlm*p Mi]*i.5^8ݱ o,YN'P-W-h}K%@U#E+fc6;HDA{8 `uYn_hܫ2ENbnMCL]k2Ρk%^>HMDS @UMQԭa+MMn +[.靱. ӚSA#.r6GD~^hc`yټ O‡~ݸ@f)%Ȱ: NVBhJ@uqYY6L8 iud7;Z sĴc0ڟܜMRͼc("^<P!m X{VB<WJkɯ$}&+fri #D| nijQ&D iZ9\D['Aws!ǣ1 ˣ{(~Mp(Ep)!w,ԿqKa!~pa#5}&kf+BV8I;/GHc &=ȁ'sh =0*nE:6ekb]كaTQHp)- ;s[ i7ojb?C}aֽmpXv:@s2XV->:E-& @zO8 u.] ѴL>Z)DadA1n0ypxZSAҪmZ52"y^̀ K(wKL.~N6r^4֓ĔH"Ue xEZ@x\PpI0cõ:$nO4t6RDC55#=WKhԬISu߉wб?F h)-E|>c\`oy;ʷ\Lcc؀u1fy-sO1p@ -[q!벸 Ye^PᎭ[?gDt\csvf!fwX{Cj$Vsy).oTS7oL>W:{s"V}Ȉsߗ[--tO(v"j[0 < be@63++-۷ *| /ݥjEEY- t +%inD7+Y{t2Jz[u|ѳkƳwBL.}KxϟAQu]%`gq=C-KKz u =gXmVr00wk15[gyHj9{NH`'{r.C+:ij@\g6oA1-$t\q k.m4 fҤ'¿MR=0-JE0.Y# 3} z`Aԩ`UB0Q~ԏ"ݿv`^`- AcL,/O0O|q<#hKlPO аVwƖttn;>ٶ8fκyWu6crzs pjq &ie܍U5)jp`B&Kxy.{--ܢċ#Q[>H8Jٰ*ΝwHzoBM[^M-4S 2=Ix4ksLDj6H#spo{q?ܞ,jw;X#w6LL |dJREn* AW3?KYH'ٵ:({з%7.I |,{C%KiR#wk(pAVyM[0誮MAђmՏ^oq]ƟV>v}-VȦ HG]ڝhOP}AAyv#켥DǺd&D#-!'3ż#>OZFnώGO.ܰ8 g_5;NJY-]%0ҋuƯ* 9iE?Ǧ**Kx >_ؑo BЙ ^kw;z y04"ï-Feo6q-"֣nG5Zwj6̀D--! RόŞPGiĦWJ-`d5wX1P$Կ+Rig{Gd&4X qX_;^1D>,id&OAcM2l O*8cAHȵƌv,H^^UDz")8GT˚(I#1Zca0u&r4 mC?x ->9cÏ?kL.?QES!mtޥj>01C5-6 k[^^ByF18W:  /@wʶNHDUN6پMPEHnˎ\->xڶY!:{QJ\I5xspn*d2m=քS$}}ݤ?*b$RI97+Ts)P(= A(Z sw Č%ȋ3?,|0;t}J$%ML_VF~iҡ dg%Gz+_3tؾgԗD'6J왹AZTS3' b;s/ ;0 U!69oTڝ$6%cj&0PL׿)jk@srVjkr-v9wf1̳< M벟^@H-j!!as GXE\u:BLisO䦀r-$wL&݄y_#thbhmvs}ݑ˖iU3+sfsvR%5w:ᯧ!0QEK%6V$ Z~/, 4-M3T]<,s"jBiJi>֡GgdQC_>|bC;NhB@3: _E0zT?kS 5$+E-X[O , 0 ߜ&ESfX haEN M\7: &s ݌ux4yGP#jׄP"&eԦbi',B}TeʥIOi܂DV d ģ"BRs4}x$m v:mV_l¾iA8<3=lqkGBӔqȟHt#,]yiwxB1sO~s!= PS^+Nzͺl̡̰^TkAPW^6kl4zl^w"%7HA5`#iUx)rߊ n$}rb~6nZ$y㏀],O)κg\sc'O]Y<8nr=P|擓22VpaA"N{57!ơ Q匯{~Ēշ*w4:*WX…؍4RjP8OiH{DȐedIGzb1ؼli}pm*l,""Xu0<YcT-^ p~3qث gU36Z|HxӟZdro, 1vye!8byQjSAndǐ Y2%K Pj(D'i|0"NYbp$hbj}lޜ.,%A6bf]@ {>|C08l&!a,hen c"t< Ёy)1͝/UOU9Y9\B>gTV]*^e孫Oc4 v<C="AROe'*B0;qYfz?>dv+~!4v+l(fd{ͲljX /܊( tD_%Hg6pD͈ t`m,A5&~O١ZF-<YM>l_([0gE^qyT;["%ƣnRQ{d_Rr6R,}~d:|ux!b቎=﨤jU.˥Yd*p>ύu'&Sҙs'~JM5"dm&m+ss7]c}(& wjB Dն>#ԥrׁ) Οe7trMvS\*WЊSFi,@@"c> }P$D*t.[Trx;}I<+mʿ&H2Ͻ4L<5T^~Z cVӏF,2`s0kk72:VEu]ul檐F33\R +A55TUx-@VT02LTAtj&]PVӋ$|9{iU8@*l -!܆]FVݻ0rH.೒v_jP5#Ki>1P+ۯ+c_/I5w3w=Gĝp mSA7kb yѶ,c2Qce F\7&\k{]P k"(QnT}ELՏfLv1#yQ[µvC. @>2Ev_Kkb$F9#Œ~b@b[ !ӵn\篊pQ4DM׷bSe{'(R17i %uARii6)pp$tH:L fHt' rP-h aA֒?>@Alr(wd<~ ,6©NW ]ݥČb?_<يW;׀so.d0}׬-fa1S-W߻H|w $-lAuu3t@E-1D0{-j&v?:+ LB*H?ULiF󚇥e7y2l8?D7'J \qBu8E@%Q24)fvskԅ&^YK"&JL&3=wwA ˵vhKUI{8_4>vXA?!& fW=: v?BkiC dUOLK\hIe$,~yv79sQh9\/!A0C7&q:xOpr@LLG2 @5i9bVz:|${"mWt% is }˭a@AJ}qCWWb'O#lsWTUBM) X6㷇8=vդol hvGG+ ĀY-t>!,ZR W01+ª+Zy0PFC  qS!#ۻu q!O˥')RBkaF&Ե~  {^HI7]6cHqazx!:pU^H˩8 &+'xukw f&!ryb (y { }M֍P@]8R[>~kntMobec0@MEG * g]C]AlOIwEUP@&;g"˵r^dҢKZҳKjpsj}4 E)}ݚJuY/YFVJʄfl%L-̹\RUfZP1~FU1' W@-jʀ0SL#Ƽ'SM@\$:VB^(;KbvjjbHח Y=6i'.pI@` 5(G8< &F3c깚D-Kt9{,'n"p6mM$,S%{ $rƩ)iJ75҃2Hԕi Oy%]O?Ɋ@5T4AI:8"F \֝ORZgz_B 鰾lމ CDé#NrkpQ9 ؍.@&Rޠw-],1!1rbX#_TVBIJ$?@0DˈRNjeW$6A^iZ.;7yWoy[Ģ+ɶ d"DUpy_;["}4+$TxLpl*Ozw9qSڗӉg,OB/LJ%'fV].:ڈ,&JPtڛ9h=Yu΂4wX|÷MTj  )qt~p>bOaAOϊE:QK+")`2kC|:zmVNVh琹 =\a~I`TgUe$ ۭ=^k|eڈm_1ƕ?-r|LHr p8+u?$e:p9cL#6\~xPMG2 ~!)D/ 9DN `E7"Q-᬴rQrKig- Tfg'D3٫,+;SZBj+EqX)zw2MqJʫ\]kڭڴ›jk=y"-Xd+T&?D#,]6%(0g]RBy/+ݜK^Q8%n/ijCe6{m3 /r>r>'jpy -4= sRtMҢ}8_j~ "|L'} D!BJ̎kQx y1Qk[ 9Mjl'w M1nm%f@h+Zu{0)n%:aF$2*25HQHOV+G+`J,ƎͺN>㺤/\8d7Y`E$XaV$Fz%" 8=A0;%8Pjx =ucYuS׉ˀNp&Xhsn2FXgFlܳE2(c"k0RgE@珰]XX}h Az|(3tk*iqq9b%pFt֪rv" ڢc 5n%WH%Xv+Ǘ^ V0ޫOHv'4кdD p<MBD.n$F ,=Ώ#+$mVoU?. }G~7-ۑl'==p$#enבڱzVM):8$Z,])G_sP?!uJx;K5$"?hd}1&cMl!&] 2}(R@ ROLg$R<#XɩIinݻ~D=j;aosr|^x.ʇOxvZDAh m>y d[]64PbU.2 kh Kx(/tŐ3hiܔ:f1̜3e;E}Flr_ׯF뚾J /Vm uOxo=)7}WlE,C71hUw @ f7꯮J,?]Ut djG+B͟4M83!#2)! 1P3er,ni,M(;c3l \i+j+QRjzC,yӄI^N>J鋱۶HSd9/8Y"Ya]Ȋ:.sWt'v h &))9VDjO H_%.P;B`3㊊{\˯!ӧ|f#QzT0GWʿfz.y%1 3'k{69p||Y)0ҝRˁLڕϦ{%k': >Tj%z=1Թxl#,/pc~6C[J(6Xt-TODw 4WL*eo\jb4AjWΪn˺xe ѺcwV ԞD 9uv>/0kUw+R2FGGF)+eUerɊ<24 2y讑M1O@ei BZ#/]Jg&{+t'u/-!tX*6;l JOyZ#Uƅ0L^A,B { VJwL4y|VvY`J:Iub =1]oY(|nxl"CU!=|VFvX61^Cx.s&ڟO!`MRSVJ0~AGG!dN4-U#k$Dz+[ nS@\Xd#!ؔ R Aad>e+劋45RѕQ| : LnBc$X*~b>D|} 4ڬt%ui]-R ԗVj " OKuAkoL^g$ X%5s5ccx ֏V|B]y:Yz"|Tv4hyhyhŮ8RK6.Ju k.r"w).ByD{8>E/u`0'{nE`JPXw`{`UtEeeY<| +?LT֊y:]r^d)I0'qws)!|.'r`)\SۺGjب#rs/ ?=36Byj8~"?_o-E_Mf;ſ,1$"M{ᠮi1羜|@E O<,"5&K[ʖwѐ%F , Em1~!D G%cArcKÎ} F6{(:>R*,&~Noєۦ ҋ&!|.FnGs$~(D+̱e )L[`v\$Qw@=(6*DES (gz{u㄰D>CL4`J>woP^8Ne`%^}X?بst*w%ɭ&9`sH)ucu)Ma->epyH)t#OO8a/RfEFb<uV3n 0k2#(>zxs%3a5Չhp}6LOR] @A!yO. u (ǜ$lHg+8v3 m&XЙc×ڴ7Qrą03Xaw_"|{(7cj#˒'Bԝ\z,՜'B?|H16ǭ1bZbS~$/x,l ;'v1)G ƙ 5-@$uhTΌGmxyQ9 b،tV҃EjovsTS\`ڜȧBN@(]`iH/5?7 6|RC0xw돓P-xa,.tkgV<Fe(jBeŸEwvq%HDfTk%82B|Zp0ΎDPH2KO2NT SjM,?|R6KXjcYo^}0%?qFɁ^MH#_3O=ugKk3>~r&]U ^ȀV ݃cMɣMk(ֆGh~GXvRHxc\FmaS)W2 N^|MYzGv.®2>8!ӓ(5cL4Z[%b1 /6ޟ'Xm%vvy7 @)_+|U;Z2)e 4c@hS3]!, exܙOIyQ#yac]7depF"H5uԵ?x{x<) PR^2Ä KW~sSf| wz-Vvo, QSa*:&GA{czs^59S٪S0@ixy_ .cOq!8ET>G:N LuCc@]?[\ N1}ab u sWDԪ{.0I$z",aEai<Ȩ+Z8 QB %Oh$ 9$Jw-t"#xo:dz_ׂ1vTyWy$(lHZv;gPƮ`}cl@8$s I# WS#J ->=^Tp[q7G-`aԙ$քLcS0!DU.[xظU2]}Sk'Qrfy87G}L`gH|$O+66ڠUw:yLef`׆>B%"xЧ9hl ,uFQqة,ɢ"eziu*R;; ՞C]|B{QSӑKtMB,H%LȦMFWHR&`xK^ kVCߣ7wAC_--ibk)}y#4N4RgaT ɭ7^sK@IJfoFuÖA<_v/:PK|d[N)?,+ZoN撗䯿)' Gua%dZ?Ip9\D϶t_. *{5Yְ} {*"ڍZ!y 8d#WY5 /Qp/GAP#_ՄҳҚF.+"AQYydb6k97gwlE}uYd8"EPW:$Ǡh]h'l@ध ϒc& My70tx$kLHHՀU8ֿʥ1̠֨=LW$ckt(Qwk! 1M Ra~Ǽ&rtֶו|0+ݮcQ3SO҅xlG=,=hpA|䶉 >M6ل{pTjn e7dA\۸J8kvpџ! }A 4TIJf.>K;jdW{ux>ԟH`؈?  T!y/EBGCK~"7ZC@-0ܜ(W0V7;q[/UPDe-5 鑕ԋpq4r7VYY曢t hΥz'fc["K%qhv ul])WJ$&Y}iXMWÈh}b|g-EЪVө.G5 Be@xfL9[KXdO` JZ],WHσi+rΫ>6Ie!8. B5 _PFp?q?Uϋ)-Y辎N{sr~3Z(;wtuIiM{"r$RII-Y8;Gɇom:ONf -mu? SdO[!?, Z>QNTA@}9Xϲ yj`X[ˁF^8$I y Բ G>7'O[uFvp q:;2ÈOg)՚=Z[ X';޷Ȓ{'1@Xc aXFJkp4Bѭh>6ð=!M2'5gFh qi3B F owX.q`8;"*vm/:UBMM $迪R89hr5B+f4-Ւ0i m)En~ Ok 1֛"ej>*8 GxcK\tnȮ)p˖LhЗ.@iswz$cG~OiIYГ ?'NKò<^EI!&";&*L^o8?+mh1yꇱ9qf{5Mx]ӆ76|VW&Sx˗ H$jT:,HWN/{jJEZ viC5(U2Ѣr1hlB$ f'uq_CNp=[>s>Ϟg/DJg/דKMC')[Tnp YZ