kubernetes1.23-client-1.23.17-150500.3.12.1<>,$fAp9|g|P@gqӻ?Znewb.FӐLMb_*x!^:cM/R5҉nsKWYøGgogؔ\yPck\5aJ^[7$S3ٷe ;OYPש1Bo뚡zAZoY0%63 蛆#EjESAѥ"6NV[5d? Z1 UZF"`U>>;L?L|d  . Flp|  4 D T t | @`t(89:FGGGHGIH XHYH \HT]Ht^HbIcJ,dJeJfJlJuJvJzLL,L0L6LxCkubernetes1.23-client1.23.17150500.3.12.1Kubernetes client toolsKubernetes client tools like kubectl.fAh02-armsrv2h;SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxaarch64h ;,^A큤A큤fAf=f,fAccfAc708e7f069fb52916a03d4d6dc8ec144588fefb76f7e4a0723f8a64a367b83a41639af1c94c39ded3a781d1f82c7075b6af898b7bb6d284ea0313278568c542318b6974720f4fb31199e971a20a4a21cf3987708b6dfa6a0a1f4775e381b970eecfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30/etc/alternatives/kubectl@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.23-1.23.17-150500.3.12.1.src.rpmkubernetes-client-providerkubernetes1.23-clientkubernetes1.23-client(aarch-64)     kubernetes-client-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives1.23.173.0.4-14.6.0-14.0-15.2-14.14.3f@e}@e7@edd@d6@d!@d!@ddb֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgbwiedemann@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comrbrown@suse.comdmueller@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.com- add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin, bsc#1222539, CVE-2024-3177 * patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch- add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793 * autoscaling-advance-v2-as-the-preferred-API-version.patch- Use %patch -P N instead of deprecated %patchN.- Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds- Security Patch Fix for CVE-2023-2431 (bsc#1212493) * added patch: fix-seccomp-localhost-error-handling.patch * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Split individual completions into separate packages- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.23.17: * Release commit for Kubernetes v1.23.17 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 * add scale test for probes * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * egress_selector: prevent goroutines leak on connect() step. * tls.Dial() validates hostname, no need to do that manually * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Bump Konnectivity to v0.0.35 * Improve vendor verification works for each staging repo * Update to go1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Match go1.17 defaults for SHA-1 and GC * update golangci-lint to 1.45.0 * kubelet: make the image pull time more accurate in event * change k8s.gcr.io/pause to registry.k8s.io/pause * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * Add CVE-2021-25749 to CHANGELOG-1.23.md * Add CVE-2022-3294 to CHANGELOG-1.23.md * kubeadm: use registry.k8s.io instead of k8s.gcr.io * etcd: Updated to v3.5.5 * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes. * kubeadm: allow RSA and ECDSA format keys in preflight check * Fixes kubelet log compression on Windows * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * update structured-merge-diff to 4.2.3 * Add rate limiting when calling STS assume role API * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.- Update to version 1.23.9: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * Bump cAdvisor to v0.43.1 * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * fix: --chunk-size with selector returns missing result * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs * Winkernel proxier cache HNS data to improve syncProxyRules performance * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8 * apiserver: printers should use int64 * add missing error handling steps * add missing error handling steps * fix image pulling failure when IMDS is unavailalbe in kubelet startup * fix: exclude non-ready nodes and deleted nodes from azure load balancers * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients. - Require only BuildRequires: golang(API) = 1.17 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.17 minimum Go major version.- Update to version 1.23.8: * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules" * test: update graceful node shutdown e2e with watch * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.17.11 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * Enable resize feature * Reject proxy requests to 0.0.0.0 as well * ipvs: fix prevent concurrent map read and map write for 1.23 * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * untangle fix with healthCheck feature * Winkernel proxier cache HNS data to improve syncProxyRules performance * Skip updating Endpoints and EndpointSlice if no relevant fields change- Update to version 1.23.7: * Fix requests scope classification * Update Go to 1.17.10 * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix OpenAPI loading error caused by empty APIService * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * component-base: replace url in rest client metrics * fix broken find command * Allow KUBE_TEST_REPO_LIST to be a remote url as well * Disable JobTrackingWithFinalizers due to unresolved bug * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6 * Correct event registration for multiple scheduler plugins. * kubelet: rename closeAllConns to onHeartbeatFailure * kubelet apiserver: be gentle closing connections on heartbeat failures * fix: race detected in TestErrConnKilled * Replace hardcoded kubectl with kubectl.Name() * kubectl: fix hard-coded value in zsh completion * kubeadm: add etcd flag for member data consistency * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config * ipvs: remove port opener * iptables: remove port opener * azure_file: try to get secret namespace from ClaimRef * azure_file: add namespace tests for InTree to CSI conversion- Update to version 1.23.6: * Update Go to 1.17.9 * Fix: abort nominating a pod that was already scheduled to a node * Fix the overestimated cost of deletaged API requests in P&F * omit enums from static openapi snapshots used to generate clients * Drop enum tag from certificate request condition * Addresses the issue which caused #109115 * Add test for indexer with multiple values * Reduce number of pods in Job+GC tests * Adjust validation checks to pass for both client-side and server-side validation * Remove finalizer when orphaned * Fix: Clean job tracking finalizer from orphan pods * Add test for Background delete propagation * Add integration test for orphan pods when there is GC * Copy request in timeout handler * kube-up: use registry.k8s.io for containerd-related jobs * kubelet: If the container status is created, we are waiting * e2e: Wait only for the service account * e2e: Wait for kube-root-ca.crt to be created * client-go: update generated * default kubernetes agent for generated clients * Include pod UID in secret/configmap cache key * Move kubelet secret and configmap manager calls to sync_Pod functions * test: Verify that nodes do not transition to Failed while ready * test: Add E2E for job completions with cpu reservation * test: Add E2E for init container pod deletion * kubelet: Delay writing a terminal phase until the pod is terminated * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 * generated: make update * polish comments of non-enum values. * unmark non-validated types as enums.- Update to version 1.23.5: * Remove apf_fd from httplog * Update Go to 1.17.8 * cluster/gce: update konnectivity image tags to v0.0.30 * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 * fix dryrun when ca file exists * fix regression introduced by PR 100320 * Add unit tests * Fix nodes volumesAttached status not updated * Fix default config flags * test/e2e/framework: include the new control plane taint * kubelet: Clean up a static pod that has been terminated before starting * Add an e2e test for updating a static pod while it restarts * cronjob_controllerv2: do not filter jobs to be reconciled by labels * kube-proxy: fix duplicate port opening * increase Azure ACR credential provider timeout * Updating EndpointSlice strategy to retain node name in topology until field is set * fix: do not return early in the node informer when there is no change of the topology label. * /test/e2e_kubeadm: adjust label checks for 1.23 * Ignore container notfound error while getPodstatuses * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 * Add PDB selector patch integration test * Revert v1beta1 PodDisruptionBudget select patchStrategy * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error * wrap error from RunCordonOrUncordon- Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4- avoid bashism in client-common postinstall script (bsc#1195391)- Increase _constraints to 13GB- Restore & rebase revert-coredns-image-renaming.patch from kubernetes1.22. Looks like it's still needed until all supported k8s versions allow us to change how we publish coredns containers- Initial Packageh02-armsrv2 17127606411.23.171.23.17-150500.3.12.11.23.17-150500.3.12.1kubectlkubectlkubectl1.23kubernetes1.23-clientCONTRIBUTING.mdREADME.mdkubernetes1.23-clientLICENSE/etc/alternatives//usr/bin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.23-client//usr/share/licenses//usr/share/licenses/kubernetes1.23-client/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33337/SUSE_SLE-15-SP5_Update/b3d79ff566f2129e54d173fc934fd546-kubernetes1.23.SUSE_SLE-15-SP5_Updatedrpmxz5aarch64-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/kubernetes1.23-1.23.17-150500.3.12.1.aarch64/etc/alternatives/kubectl' (No such file or directory)ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, strippeddirectoryASCII text-5"̌"utf-80c209c4fe5de1529c0a1d39cf03ae81c93f46df40a8d27ed89077006035d7472?P7zXZ !t/]"k%Nۯ]{~msS$(Zz`>s=JCϩ{4X_\XCW?'{dBN E[MQfiH(AY1[3wew7Ku!"c+}N`1z-dVWt :F{ZfItR- P 1[\RA}i^iL,O"ጚf*[|E-=!ߒWwU+r)lgkpk/HT6TC9~$%p{M,fI IDžsL\"'\YRBd7(?8y[ z"*'1fXVupX(S*͏~eX^=բYCHʛ'޾8{@2J~M: DyF5fA`A:tnQK{'8-Iu,Ԥ^M_uBBrYY[)dNQo<ᩜ&ZܲƩu~s0䕃 tDWt %[$3AOjvv0znY,|eoixt*ń5YEkt=&e 8,NzO>8i^?whuZ7\ vLv۞^%B@g?8g C(5hΜ+3M*0DEeX>6Ȑ@ ֭[֔~ G,"ęʿ:TDkJ!mF…j^ń}n⍘bG2(>2XN,ZҌS;hinZ/YvܛA\'Zezj0B ?1_W6)@QZp\ ˅~SD0+V J4kݛmC~#UB$ݏegOM+: UDQ]׀Sur|qv;me:y Iw'Iv-ЄA -КGfdhN3j\&8[ۮjT5$y#d;#(hy*I85u<6b+E0d&D4xŸeVn 7'z'u-^j՚cB&pM[S;MAzîL4kل?(*Dk v>Q[(4:Nt\8GKӮܽ|9GqMrЁ^zw b;y؏CG<+;G]ӰÛ&vo5gj]O3TvHUo2lxWڲ |)<]Mk6xgKХK>Љռ S1\U_sC؝mU݃Mr mJ{t78j#|Xl+ ̑(((W6 $@ c!s7 `V~ee,ݖ/yFIcTa> K|rf16᫩lH-4I\e> *T1 =^bv6 XvBdZtD+ CHo7v[ `=M>bAr*NXw60]SĒv%r)á kd͕.Q6nA 7DQz/ J7Lnk7erbN Fq$5^+qc_О!`{ H1W\RaZJ qIAӓYŸwDqSnl 7 H+U0;z$  íhESH更((4:^wy'k\}+iN' )0tޤqb@ТNmBYbwC22ZG|Ooȳ}H;3=S/"tdV>S?dp?9v6.]a9Hh)Oe1J U'G:MKh|ueX݊FbBIXRpeef60(U6;9DO{fGyIIAZc35R; jB4x=7n<ʭm.;j`|/7xh.o*PlhLX!o8>aIޯRL-)j*%D)}%xX35i 6L{eWQ-Zg`_c4Nc` j#\߻$ثͰZ; c[H#g*/V0( GEXʵ*0ɳ=[fqhþ~~mAD_F hmQ>)'r_l }G tOFJ1r g紟äc t?:"jiz;/VI0ɍ8e_v,0Ml1MpGКQWB0*ihU$AsQ3UFc"?eS_vBʏ|.ɝѪ;vQDͨ_TN+ Z^ի> ) S>xwc%vef4+=t]C TH,!Ԓhx m0TVI8򏜬={5X 42ղ&~Dj$9$b⇰ _& _NjGcL^ "Ư0'3sAQAsvyr 񝠻$ҩȻ ԆȋN(F2:_ʡ  †fǔߓ.ECMؗ 묷5n ȏැ,/c$Ɗ=L<<s^ W9؟J}v=E e^n̜f{*b@kV3>R<ڋ j 1KٿHqo<Bn( phW<@A&NLFcO1iX­)ɩ}ҭV >Bq(n{ g=,pOI!Vt$.pzh>z_.LMxNɪePص?NVW}-`Ū"D=Ƴ%hWmWF[̀nN4rnIةLY05}Zt; #ZݡUU.e.kMF-FZjśb4K FIIu©;@x)opٵ^$c(~,E%apjʭEL> a 3B> 7-ݿye ͟C@AnY)IoJsPVs4GA) Y_vֺ5*{e?v Ge]uFݏZ7i73{Ŀ;$Es9ږRHp/~cSByͿkǐ40i \ :sӊ;B됭de@}ݘ:&K@E(uF!P,o*pZt%✅08jhXT]-+>t`U+ej/,){_IrrX_#^bZVZ #ҵq)?&A{kAJQt#-q2/ZF^P/h{P0{.Fud0p޻'BkSoԽ`7 zG/T:6wJS(W/FfR61kJ?v0<[}s.Tf+T〦{ 5,lvVx=*99ap '5THTޠ`݋G`(fø'KDΎ2rO.f%$bmwJ}jSi9;Gff|L*E3igʤk 5؅}Bc *<\?u"_|u.5,Mt}מLE,vkH1%UG {2r{9WNMXAj柙d|HEVQr(ܬm*Ny11rut-,Fr v$߰Gm& p+VAEmPжM l{@J<"YTX$DdMXa$E/mAOPt=t݄C'CH#+S^mk"Q*QgYM2>16hUf^Ľ=pX~>bqIx8Ί/Z4k5on?\b36Xr 9i_"01vw>0R58%+VS*#gL8 Y A'G& }օғtE/UJZ5T _bẸ%19 k=IQDw/Q3a)Skl,/1DŽ$9R*Cbr ,ڀa2dž;؈rb?Y>rp$ ]\l5sgo[<Й;aGۄ!"  'uT.*5|Ni_lBc Xu V RK12dŊ P}}d$|B =CvwU}/ɍǔpU䝔Iy:d&P$V0u[InGvXឭ끽L"l*+=-q2Mr?ϯH5$~#fjĠzmb -7ЊeɞB"\ϧh 7 J/KddI8]-8 i_@F_^MP/zu+KM:e5/wrx@@`7~. #)4x*պxIgɸR wWIȼzsz=4_K$)EWEZnćY\G"! z^&nSFP@]XY8|pSC\( 6O%6[PvOwASG݆pZIBOA 8ංb't3ಎ;B9J}`_Ģ*P,] wk:Zw^Mnx,ˣ`r5 A\=4lx`"Ģ5dⷨ ;Ĵ_dOCk! ~ H%7Xے䉺Z+.Q<Ew`m+U#`uӲ?cB|H᰺s=QIU]t"9R(V2 z8ƊK8' o1cJ:R1tAz PQ8^v8jI4*>v"|yt|@kn{E4~EvK2tzߌXsX۞;ElNUW }r;YX%M ^ XG,\rXuAnP5As1]l(FT=0F=YrZ 38q& f@Jkg*¬(ѳb]"5YהdW PշBC˒D6O.dKaİ5U}M$@-՛)Vsu hk<.UyS'`ܻj:f^ ?[qR~[u ߂.(;WbFeU+Q^v:yz4N Iv-7jޟ(# aYUG78c%aOJ\^V>.2,S'ӹWode/-c>6a,A!RF6:`>;@N ]ЧE'3`G8XcFi$2,~YQs4UHe/1rؽ}0>4|:W  <} 97ܤBYX8) B>HHfԪCZŨSX0wVc*eҹg,Ҥ?4⺸kYF-j{u]` 31)O$|UkLl=ƽ,VقWAUݻ%O5S  Z-gaA2kVsr+ }/JZXWxCwi0(2p]C?BOٳGg𴀩^eOkw^Fx/($ٯ5b>Ȕ&}: _i& aD.K^(V'QEegK57 3mm<4⍑GX29L`s?47 (ZTsűw~a7J2yh(;Tt#mK ƣijd]jְ'#d\0;D'|z߭ 8QC!g  KxJKbpm\{2N*hY1t/Z=<+(;p:m5 /A"ӄN]^|Uc 3ٶӱ_{Z*h)cz2IuFD4ִ>5^]tF%AVG4Tg;&Z rqU:?$\+xŐ!-RQ{ɨڝo}9v2/m3x^Djb\gJLrCNgUHaIhcT!`bBS(T%il~AjbbIFTPPkfB*Z|KX!ME\fe8l7;G&=Nk0wnhdrxI{~ #<+*]^w)ߍ( >G(# 7"*<( u4ѵݛ/WsifK:[F7GcM5XxS*?^{30e/F~J>u%G .?j"\d͂ !R:'Wv]?φӹ(a{̉\-4I |9@"$x~_[TUgFπyRiB^f#v/څ72>%|$-1o ]s~NwĹ]nyx߄6/\ё94gL-,Bd-`Wvb f[4btfGC r1n3%\":wP"gt"$51!Z71? h"jX耖#FwK[OA&Cc_A!Y 7@sye%҃t˙"^@q6b8X :,Lu}#"~Bg|=I5Mge :[TO?pUpO!ffaNM*FFc$4ʓH@wȏ g'S MW\ER7NW{XSG5âN?>skse'MynK VyæJDxBė+Y~}2Em kܜQEt4+Y{*}iHGYFs%*EΏ 1=NC4O4k%Z|j~Jf0Q0kzyR8-(qem_7M毌QI|Z/2p! O1|!FPeyQtf+˛ gCGёaL^JI,$n"rGkEE?ƱY؛SODoű@"RKiNj rOsq3'tM{F<-kDzRm`1& qN!No%.h$j-c8bilkq J@~4#/hBٗgsp-*n2Rq+#- sQbq.8u#hEH Gt;}ހG[HL&3$FJ@eq cl0uзB̹u)D H5ٗ1Z/X)m)i5745wSϐA+p (2n&Y9`TXu;k8g/k\jP8FAǟ2D{kWbڍs~MDVJ/"fzr8739sF=!B\UKhؚi`Z q;5] /t~뒜}UGI.UI 0qݵVmL_ jæTfLٙJR~IԣY^UM:6*;3C4KCނk|Sijkh?焷.aMF56"xw FQ˻+c'9WD46]jɄeITO5ݠB/. ‘&$F!N{\3fcl)Di4=@OǔR} b/>WvLP6g^2,A2f"L.Htٴ ϒF 7/y?$V ^e̩+y'Ȧh=(ozՕ>9H9*6?=#6"< C$#S;ҍP1A*yD;(v(IMza+s0d'cÏgrR{{J^&N3<󷞗mg1{pإLw3Ϗ< OHy!vP̕ߠK츯T^~xa{šrgmXM8no ;Uh}_Ո &AD[w4Ga}?27 >\iiQ no~ /zT:1|H$GDqu, n?Tl9^Dմ>93fn^S3띔 *.HR߼#I07Vͥ9Moiz> !H9DF,ZⶺCo3P=+Q+LaLU4O38NYq)ú[ e&5}(Jl H=QgQ*Ha*,S)K%csi Cy>_(:`'?ؠ]/+ ,B9`[J+,7Üom슎EBYNm<S@ihf7*abRlf&!]y B$oЍ6}|#A ,3C. ~]!"7α5' ԧVc]B*wXJG{P r/L$@ DGyHxDWP4kCd-Ǔ4jg2WEz.a+y0S㻶mmH\-HB]9!@bjٻCh MP΋y b>м̴ƴn|f0{fCPa8KjdSX3 =gPn;cU|v_:2`^@teM Pؖơ1MG.-BQ/⩷ƢAɩG NO؆n@Os"x%ӚjžAaĒh2[蝓Jќc]q!eza6C&\z)_S/M-'D _mg$hi3&'LEA;%iB%`U*e%JnCWUdC7aGVC"5(pW߭O}NØ"QcSE5|쉜7~MyNrQl!@JߡBR;FGzj|jkE28?ݪՋdFLӻYb M #Hf3̐q"kD4zGuuUާb6Tn<:nKwD;8 yp[(hY&Ƈ=B%E mCL(ȶmkݟ B;N_OgBNro!ZBKY7i;-i%ݨ<~Jof>elޯI%7$ |72xnKKS$(A{]:HsQ#Iփ,nU f}ӣ5< •D~Bo<H 6'i^ԡ d*BobEzK8Q\^X?~/SBARNۧ#C߸c.?_%ݙG~$xaV dnp7 =_J^ED[9xjfaX{l UTjmIyOdC7eNW˝dÍAR4׫Ն~%I̤2g Kfm`ew1ĺkRDymrI>캫>FyC"78 ؿ$Rk؟gިJy?/} n*Kܵj+{;E1bT%z&YWN,͞)ÃirZ.zQz,a\ ݈W7G +7jW|m|¦d(E 8"UɥB 9Ã)/ {Oiϴ#Sizf@8oMTv!)kNӋ,CPRik3~ȟl,w`O{W9Rw ]1U`S쭋yI1s#wV܁qT{W& 5k!jнAk M&:d~*ymi`r\whrY& D6#~$@h,s2sɚMb 9hd)/,*kF*tKnP?^1whðڶڦT[:!4GoYfn8 Ay.g*|h% tMr4V*G;ࢅYa5GV5!6´|$S̎+ȈȺX .$YT9r!brNXw蝹]Ŭ&74ۿ}}9<(d pYZ!jq'·P"`4':enЮ8 "mւn̄ewwNAk8}p J"@VKEf&d %g1= 7g.}iO)>qSc;E1H&kWDaESh*XA@5XXO#لH:炌Z ^햏53"]p_Hkݍꀠ^[>_"_'ݏ~L j6hCiī B(9͍! λJQp=v5xXu8b5p!5{IYΤcJK=0 _fԷ#V'Οu Td_ :2`B]+-3옪_kMdd  .|mrژ8Lw]ތ$Dbkw̼|5:0AkI&IqZ<&oVuE}'U~CA={coePڏ6\C4`4. 1hEqyu}ǣ yc"kLEb\Wdc 1-]~))d#_*kfm87 o8؎K QbܠoЀ\s8BИZ( 'd'ȁO^P٧ &Uܲ?m|fXq/oT՘?<ѿx6k[5i-aa|gr%ԌLHae<=eH1,`ў;ho.+"rҖr< ޏ[54 )C0UTwy=NጬzƲ O5UȺ|A/vJ:KZ{b{m29ATd/Z4az7KP Țnt|6'/ 5MX@֙O[գy?|FP7z xAoCY*O]|'`G(b1LF)O 7@B}Py a߆ea^i=a'MO@bP($QnEyy&ȰlSܔnO[/+@{DFa#n nygp.j'EaLoq^ˮ ^2,,[g7Nr!^@}n@k)U=P.Oџ"Sꩂ!JwbLlv"@o2Y$"/1k[_{ӿʬJ̅#H.BҢY~L W^2g 1Ǻl3e*;wצMB 8M v&`:YJN } 4h E@8A{:$o=r.0,Ÿ|S&ToDP^BoW]:EmKw&#wf ԑdvo&bzI [z {G3/}练;/ w̄IfaIyгl\3Nog<=gtKo1&Gk-> ZD_֐a-bYq- i M[fJ MdƀH)slOMm&fq$Zf/\tQ ?!dmʇ !V˨71 ڹLq7"r9&s{IBHQEܑ<␢4\n*:݃g0t mL39a5QMHP$e؝Ahkao6e%KE-OS?+BM|F6DA*D2ŽHERTٌsc,ȋ3H8o;Bzn>sgX&+VG\*68M_m$ ]o`dzBu<0\׶lxN/ LQOG=2M&ې~쬺c Z4#=є&znZ)stY"+{JZ62v[|#Ehh)>^/)FWSK 6 ̀] dFK\PH 6߽vZBq*73US5 awmV.+4KT5vv.N3l$8Vx/k*@y,h1 7E!q469w_5 :t[W֜h(&ٞ3bRa9!U3c V@WuA6(FP8.aӿhG\rQś}މW pM ]B61(zVZI:Cωn8Ġ 0o 3a < 9|cWz8SU A'ͻc%)#-:1 /T% }Lĭ1i$My(Rn c bd5mk=/p1Nᢣ$zEY`8u5Yc^TCC*}ȨB}*wRB'bpԣ^qQł`>k^FJT-1f+rTUV\FԼR^+lٱ&MA_]kF_^3o98Bc!&|` `*A2SmgJO!Os@JR)ae$vLb¬/G}K7`tLnk@wǟmM1e5!GҢu$ %6i5gT519;+jo\e868@H☯=jեWuyBʮW78}4g=6;Н͟EԦNϵ.lbʟ("̈ݤrg\՗a HGFj$a/co! */nenlV}XuWn4*U^1`3ݸOu! 2M%!?J2X+IѺgeݍ bTcS}7D"'L٪C^W ]=]p2ygA70Džt2==._q#&(.\CùLi;w0E`{@#۱OR>Yn2VȦ `O*PR1 Ϡ<"#xr4Ad~5za=cPW\dRq8_#fO3Iղc&a^I 9^۪BD䫃sjJx4:)2P3chXG ozgOt%<de ܃1ƅ#_Vm P0DGCV4F;֣;VIMSPI3$3/M0iF[lpo txcr'֪!a 7;h$XK֩̚dbq;C!A&ٽ"Q|rRxrl} p {Q]϶ԨsR9NշB$+fZD[A`؞sXGTg ;8_^-EntgGz(0ƍ\&h.ǻ>?9=Lج9(?Y[ÈZeGh$DdLaO Jg9*.SvqMe 6=`VÄWA.UZ/zR~6tj*#ǹ75Y+~H6|"Dh2Ο 9Bǖ8]m2ƕJ<3܀iEVv~\OAkwo_1Yh$9C?0QۏW&A{l{)~!SѝI-!ҷMXÎ,ӫ =i$ P\M+~h"ȝV/P I:aiO';)fH{u1|&\)XO52Ĭ,f"V")_?۶8Hd1EY/^Am(3dncE0OD'Vy\VWsӃYA@ X8607R% !OBK2ߖ&3a',軽 ǭ*؅Lҿ$x.M)3ebcs <966H֙Jȡ-frYJgi)"/fߕrnU0u[vU7[oJbLje*qt [a VIe3iLaQ~[JL1)\~Uex3FayX"auCzkwsYKQPC;;pϗlqZNo#Cyv>H$2vxOk w?C=.1yQ:o'زJt#,9y3EEOQ8u3;l6xmURA!4BN&hr/+ሬGW|}>uڲ'|1 }1hx3o7VU%t7j0i? #nŦ}^q=L̨n=S`O(QDcBYU/hijpPOb^*v0|\RƸi~ƙJRTlx3ox6 Gc zأ> SZE6ǩC{fӷުSD "܋e?Q4tS5g6ʹJ۲)3 l Aw4hlpl`t"M ]@g2,2c"N05bIWgaeڦFkGgIAJX[^r6S K˵l6M3҉x/X֨d ~Y<_FgŬwb=5 ֓gK֞2=G(IyjdSE5)}!rIGjUm%ec~ͦRW2r E"WnRXvDS|Uj»WY۬TJJ ;{.WUԮ.' 2ý`{ZjD^ڮl4ͳeKњ*6q;}"1 W$T]2FOFwjMeo[+X iXK#W{|_ e`> KN&c{;rfőd>D[9S@W ڿK 7;E$]#Pе+J}AsSԲbH\s@rT9N)bNoJr0Yc?Ps>p8^TǓ7n$ĵ[hk8e-ALTkZpxjW|XV{ Ur $,lKLw韚glK7L 6KStC`h܎`AM0ݹrBܽR^h1-.NoGxr6qh=j j3H%«.t@Ny݊9\L8h͛KbYDu>Rrзa^g7%572a*{e̥6%<<=iC,g!1rePcXi ~0O^H$´$z|eIo*|U9(j 3|_@9O]HdyB >4l1z!W`ulK®p*8}3pNKŐWA@{xK5(cs bD ][T '鱪N ?Ys`Rڽѩ Ɉc-ϖ^E8wDPf[E(e6y*+Iqemp1CT@.|Xh<cZa uN}׼4z.r Rf`OG(hqz9 8(2%fBמlۛ9U-d&G!Wvv~@, piWu<2a\A3zd߳ұ!QO,m^}dVnnva8rIq$,qbe];Kĵt;K"ܳ (.ʮ lX=2 :2vo-_#Hv:X9g.E x@s]~4 5>^ɺm:F=CūR dR&;;BGq;(<Hiؼu\whҨd)gmd75/qL56m-Wn,)ă˼hƲ8ˊ#=9ZL5XT pgb9‡Xlu4SQFbUՙs+~R? <笟l !SZ,aㅹEUJFUQֻ*x#gu.E@94f}*=8jT2oVˤ Dz<U ߢxl4z=nK—: &&9<#]7`.8^Ԭ) =F!ۃZy%nCb**b2vv"}qɬ zi?շh㴦לدNa]NEݯTL|ͤlCéO,{#ƥx2)I^R"!얿W"dg%>]2Yvr^Z)ЄE'nj SF3Kcr-H>z^m* .^T!gG%tzG50n0P)dzGO5łZϴd\mOM$}/_/OPCs24ImLjr GNJ3 \unSB3v'/!I.+p3o5&8QT?І=Z7G>*ö%K1pʙ"HspSTC:ᴏJ3="VA4ܞZx]DzǪ 6QUR'E mB5Ze,5r`d}Έ\[3Hh)p+guK|UdlANOgRLZ>㨠"b]_AKoa޼k%|v$NiX[e nB+I[g/!U` pTWpc R< ܻtE:SD2`_Ի߉@Gr4 [!jtOiD8D%}_ h 3mh,ꒄ8?$Jr2Ǣ< pK^T#K)·я&TV-[ ,b^`΅bǥ5.o-? 1`.VuK*Zs_YA.C/B:ȚG+a#X 1`Rn23eA bL=M#LqƋ_` <`@r-Fi^/G+6176dWrՄrIa)LTlV <Ţ J`#Dn`!?:ZLXNC\#B%l譜:d)i8tvC7)J:>cSA{GKN5 ~ W+!˦6xPX]X-l+/qu̓A *J`E "w*.t6"Y%&ci'xa_;QRVF&OfC=w_y|kS'MGB)DC*G&=μh<4 :^4u CikN^9+cdrh.ækXj"3n6Xg3wmU8혆*LuYTPcs R'Wj 0-:HJ=2fA"K* DUN89Ԫ(+?̂q\欧 Vw'\Qf*v,\D߶QscJa |Lr֧-01Q&)9k}O5(%CVL?@{䒋;%=%(Ƨ_μw0@M):o\Pk!}>"|%{0E.. W =[*dtKhP79s,1@bÈ;XB :h;$36T[aH3M7|-=UPG} IM1|QX07fmMGvbѱ$>.sS[1gg&`k>0^M=@wUQ΢U`(]x%ق(,g9w2!w4]~S_bеIdeL8S'.Kq~ZGvTin6B%~8<ܸR&:4RhKlvRY[+;9n.°nk[xFGYeޱi{ kQIM'7@gIggZqLYo:R'ƃF2;*-o.L'K "W(3>0!zAk)&w ئUdKTL`,u4A)/GY'0`3^$rͩ I}wowm̺ɔ\.B6bB'{Rmh0JAvt _h1΋U+2Q b+l 0, irx.O!J-R S5u 7CНKupM$wÖ |?*u&1`>xl"`Gr%S*\C7$;S~lXlsĕd@/Kf6DO<*׶J;P׽͈8(SGU^ pmPӯQxoU\ j&4 4[ߨH1ҔɆEbEq >ߨl}}ggvH"׼+y7|[SO8gJ'ʋ1 KݚEo̭Y`#s>lӈ 6\?\`+3 s?~%]fiOɒOgв~@ ~)ձi@7Ns Y"ₗo5s=f9Zf%(7 šկLx'40 AVO,~%4+yqUxh w[~_(J:t26z* qDUvTZ k&+'yCSQ撏}BKOTP7~eb*~~z p|Q ie6i--cfU>ne<8Kl`WPUrb#AFY @J TV{QXdx`!34}NJ%`{lf'#|lZ_$dO+%dw3Q7}JMVkuГ2s:M2$j4o q$jdSu9`W>oX!oj?C![@9E o!L;_Yc6Iĸ\ȴ/5XEW(AJGC>zN| OinL/SY͂}FEy3Pc-b4ѥATgZKrvΖ( riZCƄc.ۿϾҴl ڿ\3VL\f^ ltQ|D9oeT^DaAkk%&TJEIk/NS NkF{^Y8Z>-2 >^+]( mp+4 '3c.)|ENQ\&b[IPtM[JkXU { 4O^&3t69LVSrCbӖgBLze0ZFLz? G [Lɪf)K۟Qab<{YZwSRnש,>)=0Rޔ+:eA&*@]"[ !cc.,ȡv gꅁIyaO(@Iģe]P,z4A{5>"U#3m^x[Ls$_.āwAcc)Kw+3Qa{rPjHֆSgfcYyϴ%eO+e2ՔN$`.x3X3Ķ Z҇kfՠܾE"PWVh',"*UzS73$Ƞ0)gʲ"njm4#g*F*=/yLI>fէߜ5Xuf6^VXצVcQ\ |1q୸w,BʠTS:XLAb ?#U[Xroh=栀A2tni k=Фdsp2bqyh'ױ_-$+חZmUsA?ԓC/Sϧu9Yj8uIcc9/3"8t.*lWdĖ(,Ip{@J|[Kꓦ]QT!?gH~W c,6qxZA&oqC/!˰JH("_tOdk"2Ƥ# W.PQI ԆBQ)Oţ:d*'Ƶ:_tKYniX== MaGcҨ`KaĿ];ոgEG=4HgLqvXk߳0zIrYi_GޖEj?wɇCf s+}*뒚3&SW#mthyƊu)lS±{5m>C2dY Ӆ8D wd;,Po3Q#G]e°𾴻 m^xN!4(`8Lw^jhH׌A~{5H,OmP糛A? oBldrj /3igA^LN (:5^LM@dmȄoyVʜwPhCޑqX*I@jeQY@h54j>qeаa}Ŕ6n^`ـHِؒp eR2)n^hZ4'RFmдLf@<=+<HL]K$DCl\;k^#hDo3*c9kh*Q?h 50넩A3r^Khx*^vhzEzm^6P줓 +T@TR6%˰e<,T83`'z6.*.x'ur%R+6t0V%09*ԉ\}L} kYI< \X;y8NMEr3 %H}fɊ_3w{uN.I_jm+~= r! ÇyCSVPn{zͮH݀ B UpWyx@wET{P ×gRP6˃7(}ܫѫ\zGZ $SŐ{V6ĄR%|D~5̴ų׌dQ ;Xl.>Р㓶uH;9,q!2 J}kf ;'c}&~Qwξa&h\mOO/q@[8b SUےVo";kfymI]J d~Txz!ˌ <,;j&wŢoN2E/T[P/NH^Lx>j[:Qʙ|iSͻIc#ZiiQBR-5A]s/FW]5 ׃kUԪ'?~Cu庰7j (OֶiW_&R#~]-breaⲘ\z֠S_/ྣ0[a+fIBUh5cAU{0p0'`62dj<ȇAF x*S"Ӂ:<8n%f _zo0q5O+?1!lk+o$QRЫEݒ,Qʙ)0uhu6ְs09>\\P_B0(jQǟ,]U2X yD9bysM&_)I? yp a\BIp$=]cqQTR^9QG!ŵ~'ڴJT׻\_)/k6J+Sܾ, 4s.!lwjf~+M rC1 ‚`X>l`IfUW ^L^2plsBSS/ H[T!>] F:{[՗j$YY9W&@.ں=0hbMukZA(=Q)[Ks2M5Q`z3b)+0Xƽt. G+EKKfVJ1)Z45ڷC( s 0_TSu3o+ qҿb;{T-f N5/x!fDS7diB()_4J*vE҉ta^Y=;w$.&8Ċ> .1Zj4ѰPhDt'IdPT)RQ SsGO"7ON .N >(L.\3~3ʧYiQQt.qxcQ8=!,_AD婆t8=\Y)7ij+ 1oɒ8 |NRQ >AP{QѨP..aG|zw4]ъwQf"s`n˨4R~Aocڟy̅‚a*jK )DaI4 Etx(럾+ Cm;Gr)Gbc0XqKZ(d,91&g/0'̋~w=+V 0>Ժ9C|6}:6(&> E>jߴeXRq%1wy#K!IXE QEﹳ{NVpP>k`,0e}A`h#^e*J/7j+ĸ0C^jILcy;є0Oۏ"goȷQJHes: 徯~m j&>Rvt"G{#U sW_ }tqi3akbӉ+"E.<vi^ #qo#بz'KΖ=u ۾ҍt }E=ǟqAW|u)cTBw teeYGč1f_VA. 7v: ]:}`G$34,L3םo4kcJUQqnSF}= ՈmXkHA+)%Fs0l\ASeDbaFͥgVYM}-)˜Bb,b봨SD`䄵S= #Y63dٚ9']6OX{ 3>TUoGшH[ $tfQL pr1Cü*)dq)g8rƅġ7z ;pbb!huFvFo[ W 8|nRBrW)aڧ_d34r;rj+]b23V3kXTS$ ,2  vl#y53z:'ABޫq0,i +PPDde$aw$xTx88쒵")\Xڄ{6szl09` @7 /L>bRÒnוgqFqD{ńQ1L$&xC2˫g8x%#xTM7kfV@l%eWK zxs ؉=xove4kӮ+g+%zAXzτFRfHWr}z C\ k~FUQ#H._Bo FQ_V dJ稬s<"83{0ٖsUB$=]?>Ra[dZ]1Nv[;cM<Qp4ښY$^l~ ,q(N܃y)؊)Evjcd B$|b!xH1X;bv׃W;Rl52U0X|ϫFJ܀VjA—/涔\@،kI6kR?݈6K0[VWsw*kmב0:+<ȜƜ\DqnS#\g $|(C tMrLW zAJ%nB (Ѭ7˘)Yr8d9j( QDUXiw1)X'zh3<&k(!P"c'V&vG}/k  C6᧣_´.Og6|;Q7t Na\şa ~?8x2v5OL?_Dzyp?78%*<0<Y v18vcY52+f$3#pllmz-\=G}='yLO=ydiU)Odbzm}-<ףI.fPѻ]_ 4>0;̄ &Ҥ]EF3#,ն\ѫlu"dN4/R։ЕkHQ5xq*4mjRBa^.87r9/!V ʰ5嘽8n;i+nNߪgGpkʌ6$ɍ=~Fɢ\pq4dǕi[19"->_#B~ c X/&@#*j/GH$I}iW.žN͝1&.X-p'Ed?aeO%f~wag8G©qXh@J[֞x'_HB$W/X*B,R»b==]΄j$J̣zKT (aFXQn kQJBDTz<8cJ GF4d- glVS7吙hGҒU t.wcSOT^\ [/髶IE7̹H/;}IZw 9X>@uD`0'1pX<\& IS+Jlq!_hw+PPҢ:FE]âPh&0a^=Esgz6+:Sej^,>8{;$q[0ƺ洴BZ2;9"3~:ŌԷdӦU@ $+aܜ?L  P培HhpV]9n_1KB$zh7. @P3YL|m!ΪRь{eL"bbd"/zt|Wwy,CŜY ȶkyËyzrp֊4TϷMT]!nhnTV MAm (}~V&@~Fjf*īwSiG4Gq(SR_ʠS{DzD"e֙DLH ?HY֣R Em*5Cy4XsPPD߾J/#0MIvUE>rx_"N <+Xi7\cG2!>eߣ+L*ٖ(7RIH@;-o*QҢ%w%/\ a -{1fKbgJ{nډG?؁DO$J!u#`dU2!Rα;I{;Ӣ\0ILG^$,-Y>7P#Z0}XL\(Gjv<ՅXЂQwm-S ̺yԵ_=AԱ vP¡QqRZg!+Om̿2>؃h{s,C8m;2.+swQwO\"@R2=}.nx&Ice(+!_%#cZ@RS =<ȗ٤ޤw~֟CVd%0dqtKԌuҬ-;쪅,T FƷHŽ;7IvRSw VEtm2A‡3쥓2Ym:izxnƇiswI]߫U:ld*gx@p 50c' RdRLoMAQCꟓک #LȀ{d4|#%\2y+sg6|k$1-~<y5m~_z-̅f)#RE1++hi }5l0f{tr\x%,}0in1߽JJ c!ϯ/8'\׵앥Xss\\Ec_]yCrE%Ca[Ow_76Xt<ԵK*QkvOuPf+V/ZT\yQnHF_vrܛ)9,T4|Edž՟ԍ2: A*(wD%%~NAςڣ;"@bOH+8/G$D7+a$zxs2%ax:WIۘ}.ncV3*DH8э"8dd#?2v䣤K+X #l 9_QͤB2ᑳzOCUOjC8&ȃJsyu 66a? ]v Z2lkYz$V.F+|$$#(A%K~DRV-lrֆ:=)>\HeTkBǢk}yykBc,͂NoF1}]v VٷɌ% 3yR(C]fb B.|F H>dPtB6a`ӅM- "#βem[;WX@]$c7k>hep“r0,h>3iy=CT͏vYx%| *!0)9B-_-F,뜝[YOنa{^%rEb?_ZSXXbwO'-۶9 f|EB{oMR ܑr4R͂g}1\sjNKagݗ<eo^yp݆澛\ԁM%Hc얳cJ$hœo(8vU$Hb Z#ڢ-Mv=Rv6 D% =va(WgUnb2PcYU*N #AN"vdff{iI}$v э ` t "(vj! n@WbVb#i8&G>hRqaGa%yտ>!jbPA-ݞF[2ɣĤ&B9ϟgUIOfdKxQ7v|U2?p6DvrѮYv9`1ֳTY_םs-~e~LsgovN CAc?fXzǥ}Zq(0%X  ?+; C#p~b36<ҳ(95\Ĥe*^CZzAo{#q6Js)yZk&%޼Kuҽ 73#U/$ZT7Z![T%e&#j3#ϡJ̙G)H;yV8r6[Pߪm @R0qRQ?R%Rt@\-m_%i G@^geyq2k)O1e%y^̤`ثq砈I&'O߮B^}SkΓQҼ.n'>TD& T1„!XoX {/3wMkC6^;:݉P+:ᶀfn-t*bF Lܳd[-|ec{TP|CXs][a {5N+F0 mմ!ǣlmsYY+N{חm173Tmp? al VM}I2͟*#ܨ㍑H#cd䉋v;.ԃ:H~_X+F: moџfa؈XXw&X$zBgދBZ168XjEo9߄28T<(tFe M{9JLcV^Wl'crک.ЀLzgq_pAPN3P bxqL{F٠ԋa5/LV~+|%b'Qj-0r6JuLJN$:5[Z$aEP WCo 4* {ɜ#hqS.d:bHΒ-!I ]٨3M5Eiw7%DLMnmJoZW_3 cҘ1?Ndk tG */YB`C{e9PXq,.8Ä K_?y 8qݪ@OA" (.15R""_iQYXF9{8@jF?8uэ!V"s41rVObCā^!k: 0 eRq!cvu`/,7&M˿)CAkhqIE@'< D1T<Ǩ*r}31¬xrK_-7f y.3d |Ų'^`c*,sqfF›4-MUZ8oYYOFz t5+؝ NLr"|a,}+ k ID9&+C4T2W I+뮅٪onw pWMha֜&!ͨOaЊJ)\{azTz-٢0P#P%Lrj,C۽nh!;3cm b0q&R{A䧥Zp#9]mh8\TvC/V\ IZ5܉۩R+]iլr/ƔD4=mA!\gG;/}/8 rE Q`Ӝ~B=٬.>˕NZ"O%_*cŀL^l0YS:ɖo ViL8{;$5A5+/GZ! Z<:L6ȋ1 ȴ)DzŮm Ct˄P93H>jˈ2Ѽ;[)3l^(UQRu,]IXz\2sƚQ4H0l+R3N&-G7ꏭNw]gduLKGߋ*}ىLĒ[9}j&:!@;ʲJ ^HF1z!z%F:d:m2؏eRtp6c16{{kS]V-Ǿg:ٜmq#`pX&g)$~B k]6wIFA,D.#)r#02;DmM%BvY+-ܲGwc+m|d,7pZk{>saR7FG÷B =j!ڼ9(ȈHYV}e% ݘa #{MI烶ft,+V_jpp$}Ba,c@6KJ*efЙ7ҕ+xd}/ @SItv}M[p#bQo6=[/YxG18'c~}AF;TDGAvfc'ӂ2vm.~0XoǮGibr<`xvW43Kg^5.1)"](՘0H\H~2[mBj ('YXyg|4s i# ;88ݍ <Q@U ~@%-jH>>-].fDM; v[eyG#u ʦW霦ky/zd9ja!TuMۭGaeyvy`LaBߜo CD4@G ~,/@ܩD[YBDPQ*t)a9'v\#+'Wj5-qς0b+q垹`v.y#ՋkoD CR@agcúopķ#su&3 GK)¸0Kw0` }[:RP+|:-'_6g1,%Қ8BuP)䉘wSېFit5*.DY|oj%d+]e2)k5D)^g9p Z4mit̾}uzqt33 *i &k4@x.9ˈv |f[Bgo[) iBՆʟ,ekgdr2"-1VN$ 0 )ZD:{}59|Ӯޞes#dYsgi/KoBW)#KnO&UIX&Wӛ- VsB}3Y )c¦t&嚫j fעH7OȘmo(W!-NWQE#CMLcgj_%u }{ Y|؄䍵޶R ON'Pro/9a$:oeML)*dA f Cqߟ2E ;eS1ek $0oh I&Iwf.DB_ӆ6hbjC!c菝R3 u膞FzsKy3R2qR MVS_-{ (DeөzegU~hV#H;;aG'=$6C`➠R͛l:>!dj*?Tgɔ ތft!SAZBҜ)Žga nPZ^a@B h  ;!?!dFlJ$  qoōOW.a Ĥ.;\*MX_"bYb6s8颢Q/i3z:j G'J/*2*ґ= l>K*IR&#}懡V+ ɍC /*Qr">PB5w0xFWKcT(Td2ŖLDVek&*\ ?fm$OK@l |kBi_`5N^ \κg*ʩŗ7.gޔ5j@%2%f&=P;.!>~\â%( Y1׈\5*+rnTnP|1έU\-Ʀr}Ս1 Ϝ×Nıtk<%rF͏ %\؏ {wnMQ 3QCq_ET"l=$ ybJ/ t nZgjd ?]ͽq>5zTw޹׌'cI 1ulWg0(]JW$KzҸ "sLL(إs6uaD.8"0ޔ?e![bV ⧹HN-:&9klȠ k1C(# jK1/W9DNzt>C+3T '(il  0md >Edp[!n1eWsiLxDIl볅l,%x{Cʨz  R*(`Y=/9<8(2D7T:7G\XӖmYدʟP_x}PV;V6j{$$w]zk.'pU~{KBt`$w LgM$*w̰N {hq z:/Amw[Wۖ9S~aSk ;x5( zzsUXhy-X,{H.uw|0gHYq'k! 5VI#[ɪʺݷ#c3ytg&?K`NXThhTN-~IߊāD3)J@Ɩ]p2=1avi֘!4[yֆIAx~͗o#//蕍Hd{Uy9x]Zзx54vUv-TH1O("S QOV]g \T !Ig+faXRA/<>"+ p(@nGz(FѺ c'rI"L* ZhkyR!S3bi}6 kSa!";-J^l«?:C d(78Nb1 eB* ^|Q @iOwy&MһF<7k.,hXS T?2_'!7L@>e. eu~tb} ]MaD3fKUj"x4?{uY5aS`sCO,$[!+hS,=[tXTB6+KUM -;@y;Gl\j@%shz 4 ̕0ij'ΔJBOl$/2ɸz IPrϢ Ƭ> .*) QG`Ds9hU"sIGxH_8I;^Ì#{XN5E`Ki8 '+`K¤1  N*5 8&@ T.% f!wJoVY;BJ2Dȼ5eZ 3sZ+^F{_yBՀmE9%":;t1q+&6C PJb65зЈqjPb% F:.FrITÕZQqܡ3W7fVaT"ݙ 4b ޷mLQ˚Ř{t(Q_RsK\XŲf}8 Y\T,%M3llvd9}Q$;oа]WEjwxs]jU/ s=HY?5y7Kzp : VlLt.4lz }:\X2h>oL&=ňY A@Xgёbpx LG-p6KK w/OUQIl Ёv/?T@K[o*"HzxeQef}:8< MLmƍD+o 0!<#Yl!G䯬^r_`I4*p]n2&cp0q5nώ 7ҎL2j`NrB=Ol αj"~n$n@#'SaK.NVp?Ke?2]^k(|ʙsF۽j mC %as{HFTDM=$:H"$-u+(BWKPة?,AcKvcJ WM >))ngguoޢ4q["aZɓ4^^J>Ӓgѥl8[-{2Uv&'Jg~-)b"<ݞU-9]J HO9(0Byqzd:&E$<f/UyԼun0JtCWiJh!w{1WG%&]Z߽uh^[ğq&ajtYGsheFߊgAxS85FH4|s߾YIšoPU~ƥ'ĴtN/CHѠJP.i hpѱ/4q:W^~g. xclT5ZvMl wn_ sdI~2ǧ:!c;AN\T D)y:<ʣ8;2"@ş+aR޳T+~`U~` ;V π&0C^MW@o 9f^oc?;çv7EFʖɊ>-H_g(B2B͟4[5W$JVb2C#VQ .UD D֗ooPـeouh6XI-|? aIS(kT_w);b\w+e^ۄG'IX`L g[U`W&Rm}Hm9Z*2L>唙ISO7Ǧ2x̍LrK)?zǣtxu9}=#c }쑬l!1*V3kf,%Ew"57j\4h4.)Tq ۈPE<ɻY1PV|OտO?Jȅ)>ZRGWb\gp£NV*=oYsV\‘i*EAxc^ Opc&G0%iC U)]Q=͎u9FZNtbb0ANh[ࡇ~V ϵI'-5E`js6(B!Ɠ\᛼?ضQDGiflinti/c\]s{ DM" kR_+]*xp pGee i(WZQ]6_=̄K tÜ}N0;JxNgS{]rƃUFa`&8ăj5Q;Kk"_ Z_cZ `֦)SIxmsA Ѕt %V 9?}]O.cy_SE&ü}&4;Xai&946UEG3P"R<E_*#/Cq% ģ"CNwdT1 [DX#myZIC[^~ȜUni(HE^a #-ZsT?Ve8%w tN=\ydr?B`|حGEd0Ô y8njM?̲ old ZdG#'hF߄䊜"(=ɖzj Tdkư auM}Q$q80xLͦ3>ŧ V;Y`p-upE ]epMOlɫ΢H[)>Xi<x&# F0[~ hۓ;R5<33kzt]:LoS dT7[y@xwaqz ~?ssjPF,S>ŸǀZ#&9@qtG*osNݷgb}OBwSSyUw|@]Àȯ6}iA?޴؍i}( M>.)/":~N՗T k{nE<+ 'ɩc䞑 <"y..#No,&πZ61&Hˋ\eC>By &qF߇Dn :R}KfC< +0RY7;ar!$'U4+Ll/m80N_$wTlC*f `wC)]lVb^jҎMA}2fRYu}^yTDfa>hԥ1q؋7T} %g; g$nL)gC!<5H#3ȬT^jrPZ(~@N^pU-}-{b丄$lj߾8`@g׻eRA43QEcYWljwس_r>LAܠδo(믇[ضq_UhV~@lT$Hy޸P1D-Sn>|ueD]N'D["r >N28LׂPԀlj-DpvW醅0jT0FTSG) 9Q"fB6w.ۂ%oR@~ }z^pt`a՜ZܩX]ώ_LO|-<ʈ, ([-qƥ1l (_W&ga$z۴m.Z )3kf[䈾;; [!*C+O2l,tߊE3Z8F3?Aj;CR~&$+h1,^:[rͥ)38O7,uQԌCtVx& BPm34ޮ -c Q8=0g 4`bl{h>>K~ ;Eu(r'< PؕN7X+dg;@g_*5`5%>a6'm#L>>_~a63o,U _JA_ icZ]3ΫƄ"F0S6d8 hӉN"/^p_ h. d:V;:nÉU3lW(XKpĈs?Q^ _"V! UM2+9'߼l9wج%vے'mg9\@{xa'f S0,X ݔʓ,b`;:` ]sgGG K:3bu;Rg><'/ 0}e! U^3 'ŗSK^Inޤ.Ҝ,hWGZ2rb18wYi'* z>4g1XnXѐoB-^ ,ܳ~iS23ņvf k_U? %+YsrS%7|~=r"$ʸ$^ڣxnpI'PMb{Y,$fQ}N.9?9ur /Y̹)nwNfZg%ǘ;`Ng?Ƶ3ݟ^d_Mi?dӰ[ X\EmrvD#g ߎ--$vpY:e^LM=v\r7 㐌 6u0k~O3mR;J5=/P{@O{˃L fPf9!" Vw6ܯ8ܪw'w;( _сC5_I͞ պ1>ebO]\TʶOhl=l(q}a5&ו0yCX fyYB@_A㊶>Ah Y ]qDmNl ` |1J`[BTCz;4Ր,Kj5PfP~>~ &zjtR3e߂W/dt9l_Y+ ޾eb kKȕ  jDIӼsh,KH= qjC9_z Ou9zmBt]}4j:~]5/v=YdսX@4jĸX{~ݥ^vSXI]G RXI:<\l0d֚כt)TaD |B b"(>bD^5+F< ,Sl;(oԉ*4m!a:yDLyי.?T. X;81X cb>8ĥKb,<,N= /7-bq2q b>3wPȁ)X';_TvvNm3:/ 0+$vnB(M%hз0L ;e[bCrEl AbJS[qݷW$|D)))v<!uւp% rsTu϶ YZ