kubernetes1.24-apiserver-1.24.17-150500.3.16.1 < > , ! fp9|FᚙSonD\Glw+ !߯#=&D*oHPq2 #Gu
Fo@iZ bR{dNj3$`Qqi B 3isX|S4~hQoͷ2@=} 9% t8QGЇb}p_"Y*xcT4/0 (z1K@?,0Ho=ap픆7l瞇1h`j m@]ܥfr OE36 > A Y ? Y d # 1 Z % < B L h v
/ R ( 8 9 P : } F Tl G T H T I T X T Y T \ U ] U$ ^ U b VH c V d Wz e W f W l W u W v W w Y x Y0 y YL z YT Yd Yh Yn Y C kubernetes1.24-apiserver 1.24.17 150500.3.16.1 Kubernetes apiserver for container image This subpackage contains the kube-apiserver binary for Kubic images fibs-power9-15 SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 https://www.suse.com/ System/Management https://kubernetes.io/ linux ppc64le s0
[ ,^ 3A큤A큤 ffd旿d旿fd旿fe2aa8e38ae8b0d13838d1619f07794cc314fbfae669fc34712d35757284543de 639af1c94c39ded3a781d1f82c7075b6af898b7bb6d284ea0313278568c54231 ecd8ae86f67b8215c9e99d6d69d3645ab4527673c167e3f1f199d3c98b17994a cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30 5c13ea4d4aa41f02bde11257335685133e9454050007ccdaed4d26c2b53b7b1e root root root root root root root root root root root root root root kubernetes1.24-1.24.17-150500.3.16.1.src.rpm kubernetes-apiserver-provider kubernetes1.24-apiserver kubernetes1.24-apiserver(ppc-64) @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 kubernetes-apiserver-provider 4.14.3 f@e}@e7@eL@e
e Rd
dd@dddJcd7d6@d!@d!@d@d@d @d d b֜b@bbs@priyanka.saggu@suse.com priyanka.saggu@suse.com dimstar@opensuse.org bwiedemann@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com rombert@apache.org rombert@apache.org priyanka.saggu@suse.com rombert@apache.org rombert@apache.org priyanka.saggu@suse.com priyanka.saggu@suse.com jkowalczyk@suse.com jkowalczyk@suse.com jkowalczyk@suse.com jkowalczyk@suse.com - add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin,
bsc#1222539, CVE-2024-3177
* patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch - add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793
* autoscaling-advance-v2-as-the-preferred-API-version.patch - Use %patch -P N instead of deprecated %patchN. - Add kubernetes-trimpath.patch for reproducible builds (boo#1062303) - fixes for bsc#1214406
- update `Wants` directive in [Unit] section of `kubelet.service`:
* add: `containerd.service`
* remove: `docker.service`
- updating container runtime prerequisites:
(Refer: k8s.io/docs/setup/production-environment/container-runtimes/#install-and-configure-prerequisites)
* update `90-kubeadm.conf` to add below iptables rules:
- net.bridge.bridge-nf-call-iptables = 1
- net.bridge.bridge-nf-call-ip6tables = 1
* update `kubeadm.conf` to add `overlay` kernel module
* update .spec file to:
- add post-installation scriptlet for `kubeadm` package to enable iptables rules defined in `90-kubeadm.conf` using sysctl
- add conditional checks to load kernel modules (br_netfilter, overlay) in `kubelet-common` package post-installation scriptlet
- update `kubelet-common` post scriptlet to correctly update `KUBELET_VER` var in `/etc/sysconfig/kubelet` file based on fillup template
- add below to `kubelet` subpackage to recommend installing correct version of package providing `kubernetes-kubelet-common` :
* `Recommends: kubernetes-kubelet-common = %{version}`
- add below to `kubeadm` subpackage to recommend installing correct version of `kubelet` and `kubelet-common` packages:
* `Recommends: kubernetes%{baseversion}-kubelet` - Update .spec file to bump go version build requirements:
* `BuildRequires: go >= 1.20.7`
- Update to version 1.24.17:
* Release commit for Kubernetes v1.24.17
* Use environment varaibles for parameters in Powershell
* Use env varaibles for passing path
* Fix capture loop vars in parallel or ginkgo tests
* Update protoc check for verify-generated-kms
* [release-1.24] releng/go: Bump images, versions and deps to use Go 1.20.7
* Update CHANGELOG/CHANGELOG-1.24.md for v1.24.16
* kmsv1: attempt AES-GCM before AES-CBC on reads - Update: `BuildRequires: go >= 1.20.6`
- Update: `BuildRequires: golang(API) = 1.20`
- Update to version 1.24.16:
* [release-1.24] releng/go: Bump images, versions and deps to use Go 1.20.6
* Fix the converts an empty string to nil.
* Only declare job as finished after removing all finalizers
* Fix deadlock in ready test
* deps: Bump to cAdvisor v0.44.2
* Fix the git-repo test error caused by the correct use of loop variables
* kubeadm: remove function pointer comparison in phase test
* test server side apply patch
* don't process unsupported loadbalancers with mixed protocols
* make MixedProtocolNotSupported public - remove: kube-apiserver-admission-plugin-policy.patch
* patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio - v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires: go >= 1.19.10`
- Update to version 1.24.15:
* Release commit for Kubernetes v1.24.15
* update-vendor: update vendored go.sums
* [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
* kube-proxy avoid race condition using LocalModeNodeCIDR
* Add ephemeralcontainer to imagepolicy securityaccount admission plugin
* Switch to assert.ErrorEquals from assert.Equal to check error equality
* kubeadm: Make etcd member removal idempotent
* kubeadm: Add etcd client unit tests
* kubeadm: Use internal etcd client through an interface
* update webhook test to go 1.21
* Test APIService safe handling at startup
* Fix waiting for CRD sync at server start
* kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
* Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
* vclib: Modify x509.UnknownAuthorityError unwrap check
* vsphere: Adapt to govmomi version bumps
* *: Bump version of vmware/govmomi - Update BuildRequires: `go >= 1.19.9`
- Update to version 1.24.14:
* Release commit for Kubernetes v1.24.14
* [1.24] vendor: bump runc to 1.1.6
* benchmark test to evaluate the overhead of podMatchesScopeFunc
* Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
* releng/go: Update images, dependencies and version to Go 1.19.9
* Fix directory mismatch for `volume.SetVolumeOwnership()`
* use case-insensitive header keys for http probes
* add log includes pod preemption details
* fix: the volume is not detached after the pod and PVC objects are deleted
* Bump konnectivity-client to 0.0.37
* Do not look at VPC-related resources outside the cluster's network
* kubelet: Do not mutate pods in the pod manager
* Logging, remove LookPath in detectSafeNotMountedBehavior
* Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
* Add test for detectSafeNotMountedBehavior.
* Add test for CanSafelySkipMountPointCheck
* Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
* Skip mount point checks when possible during mount cleanup.
* Return error for localhost seccomp type with no localhost profile defined Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
* added patch: kube-apiserver-admission-plugin-policy.patch
* this new kube-apiserver component patch prevents ephemeral containers:
* * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
* * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728) - Update `Requires` in the "kubernetes1.24-client" pkg to:
* Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
* Obsoletes: kubernetes%{baseversionminus1}-client-common - Update to version 1.24.13:
* Release commit for Kubernetes v1.24.13
* releng/go: Update images, dependencies and version to Go 1.19.8
* wait again on pending state
* cacher allow context cancellation if not ready
* Drop development dependencies from test targets
* apiserver cacher: don't accept requests if stopped
* Clear front proxy headers after authentication is complete
* Make prerelease tag optional in CI versions
* Annotate CI version regexes
* Drop unused regex grouping
* Delete unused version regex function
* kubelet: Fix fs quota monitoring on volumes
* fsquota: only generate pod uuid is nil
* Change where transformers are called.
* Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
* client-go/cache: update Replace comment to be more clear
* client-go/cache: rewrite Replace to check queue first
* client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
* client-go/cache: fix missing delete event on replace without knownObjects
* client-go/cache: fix missing delete event on replace
* Bump konnectivity-client to v0.0.36
* test: demote service ClientIP affinity timeout tests from conformance - add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion - Stronger conflicts for completion packages - Add proper obsoletes for completion packages - Update to version 1.24.12:
* Release commit for Kubernetes v1.24.12
* One lock among PodNominator and SchedulingQueue
* releng/go: Update images, dependencies and version to Go 1.19.7
* Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
* Re-enable label selector
* Add integration test for diff --prune --selector
* Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
* scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
* Remove check for CSI driver running on node for CSI migration attach operations
* Simplify construction of /metrics request
* Move CSI json file saving to SetUpAt()
* Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
* Invoke gimme from kube::golang::verify_go_version
* Defer builds to test-cmd and test-integration targets
* Carefully compute request path for metrics - Split individual completions into separate packages - Use upstream fish completions and obsolete external package - update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
* kubeadm-opensuse-registry.patch
* revert-coredns-image-renaming.patch - Update to version 1.24.11:
* Release commit for Kubernetes v1.24.11
* releng: Update images, dependencies and version to Go 1.19.6
* Update golang.org/x/net to v0.7.0
* Pin golang.org/x/net to v0.4.0 in 1.24
* kubelet/client: collapse transport wiring onto standard approach
* apiserver: remove 34s from DELETECOLLECTION rest handler
* update prev succeeded indexes for indexed jobs unconditionally
* use custom dialer for http probes
* use custom dialer for tcp probes
* add custom dialer optimized for probes
* bump honnef.co/go/tools to support go1.20
* Fix issue that Audit Server could not correctly encode DeleteOption
* Do not include scheduler name in the preemption event message
* Do not leak cross namespace pod metadata in preemption events
* pkg/controller/job: re-honor exponential backoff
* releng: Update images, dependencies and version to Go 1.19.5
* Explicitly call rand.Seed() method
* Improve vendor verification works for each staging repo
* Bump Konnectivity to v0.0.35
* Add pod to dsw if termination is not completed during reconstruction #issues/113979
* integration: migrate taint tests
* integration: migrate scoring tests
* integration: migrate preemption tests
* integration: migrate plugings tests
* integration: migrate extender tests
* integration: scheduler: migrate PDB from v1beta1 to v1
* Fix issues in volumesnapshot test for ephemeral storage
* update golangci-lint for go 1.19
* golang: Update to 1.19
* Adjust for os/exec changes in 1.19
* Update golangci-lint to 1.46.2 and fix errors
* Windows Kube-Proxy implementation for internal traffic policy.
* Fix a regression that scheduler always go through all Filter plugins
* Fix SPDY proxy authentication with special chars
* Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
* change k8s.gcr.io/pause to registry.k8s.io/pause
* Update golang.org/x/net 1e63c2f
* image pull event include duration with waiting
* kubelet: make the image pull time more accurate in event
* update structured-merge-diff to 4.2.3
* regression test for exponential recursion bug on CRDs
* Fix endpoint reconciler failing to delete masterlease
* kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
* use etcd 3.5.6-0 after promotion
* changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
* upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
* Introducing LoadbalancerPortMapping flags for VipExternalIP
* egress_selector: prevent goroutines leak on connect() step.
* Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
* Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
* Add CVE-2022-3162 to CHANGELOG-1.24.md
* tls.Dial() validates hostname, no need to do that manually
* e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
* test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
* StatefulSet: Cleanup the complex defer function updating the status
* Be sure to update the status of StatefulSet even if the new replica creation fails
* added retries to winkernel proxy rules deletion
* added backend hashing to winkernel proxier
* kubelet: fix pod log line corruption when using timestamps and long lines
* kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
* kubeadm: use registry.k8s.io instead of k8s.gcr.io
* add GetAllocatableCPUs test in cpumanager
* fix GetAllocatableCPUs in cpumanager
* e2e: restore volume lifecycle checks for csi-hostpath driver
* kubelet: fix volume reconstruction for CSI ephemeral volumes
* NodeLifecycleController: Remove race condition
* kube-proxy wait for cluster cidr skip delete events
* kube-proxy handle node PodCIDR changs
* kube-proxy: gate topology correctly
* service update event should be triggered when appProtocol in port is changed.
* filter out terminated containers in cadvisor_stats_provider
* Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
* Bump konnectivity-client to v0.0.33
* Fix list estimator for lists that are executed as gets
* kubeadm: allow RSA and ECDSA format keys in preflight check
* Limit redirect proxy handling to redirected responses
* Make sure auto-mounted subpath mount source is already mounted
* Call SetupDevice only if Volume is not globally Mounted
* Fixes kubelet log compression on Windows
* Add zone field to vsphere test cloudconfig
* Reduce default gzip compression level from 4 to 1 in apiserver
* exec auth: support TLS config caching
* Add an option for aggregator
* Update go-runner to v2.3.1-go1.18.6-bullseye.0
* Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
* Fix problem in updating VolumeAttached in node status
* Call queueSet::boundNextDispatchLocked enough
* Always log APF InitialSeats and FinalSeats values
* Marshal MicroTime to json and proto at the same precision
* Windows: ensure runAsNonRoot does case-insensitive comparison on user name
* Tolerate sub-microsecond eventTime changes on update
* Improve kubectl display of invalid errors
* fix unmatch reason when updating pod status
* fix nestedPendingOperations mount and umount parallel bug
* client-go/rest: check if url is nil to prevent nil pointer dereference
* Revert "client-go: remove no longer used finalURLTemplate"
* Skip "instance not found" error for LB backend address pools
* Update cel-go to v0.10.2.
* fix a memory leak problem when calling DryRunPreemption
* Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
* Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
* Remove volume from found during reconstruction if mounted
* Add unit test for verifying if processReconstructedVolumes works as expected
* Fix code to process volumes which were skipped during reconstruction
* Keep track of each pod that uses a volume during reconstruction
* allow namespace admins to use leases to encourage migration off of configmaps
* Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
* Fix `kubeadm upgrade plan` issue with FQDN nodes names
* Add rate limiting when calling STS assume role API
* Fix kubelet panic when accessing metrics/resource endpoint
* Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
* Add retry logic for Unix Domain sockets on Windows
* Execute the Run function of kubelet, no log output after failure
* Prune defaults for CRD serving - Update to version 1.24.3:
* Do not skip job requeue in conflict error
* kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
* endpointslices: node missing on Pod scenario
* fix metrics for placeholder slice
* fix a bug on endpointslices tests comparing the wrong metrics
* kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
* GIT-110239: fix activeDeadlineSeconds enforcement bug
* kubeadm: handle dup unix:// prefix in node annotaiton
* fix: --chunk-size with selector returns missing result
* Fix unnecessary recreation of placeholder EndpointSlice
* kubeadm: fix error adding extra prefix unix://
* e2e: add storage capability for offline volume expansion
* add missing error handling steps
* Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
* apiserver: printers should use int64
* fix image pulling failure when IMDS is unavailalbe in kubelet startup
* e2e: ensure single image for populator containers
* fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
Remove potentially conflicting BuildRequires: go >= x.y.z.
The plan for future updates is BuildRequires: golang(API) >= 1.18
minimum Go major version. - Update to version 1.24.2:
* move the ignore logic higher up to the reconciler
* Ignore EndpointSlices that are already marked for deletion
* test: update graceful node shutdown e2e with watch
* kubelet: Mark ready condition as false explicitly for terminal pods
* agnhost: bump version 2.39
* Update Go to 1.18.3
* add service e2e tests
* kubelet: add e2e test to verify probe readiness
* kubelet: only shutdown probes for pods that are terminated
* kubelet: Pod probes should be handled by pod worker
* cpu manager policy set to none, no one remove container id from container map, lead memory leak
* fix audit union loop variables in closures
* Updating e2e test to check EndpointSlices and Endpoints as well
* e2e: services with evicted pods doesn't have endpoints
* e2e test for evicted pods
* endpoints controller: don't consider terminal endpoints
* endpointslices: terminal pods doesn't receive enpoints
* add pod util to verify pod is terminal
* Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
* Add test for checking ephemeral volume expansion
* Fix resizing of ephemeral volumes
* Winkernel proxier cache HNS data to improve syncProxyRules performance
* GCE Windows: Copy the CNI binaries from the right folder - Update to version 1.24.1:
* kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
* Fix requests scope classification
* Update Go to 1.18.2
* Integration test for openapi scale & status
* Remove warning log for merging meta and scale type
* authn: fix cache mutation by AuthenticatedGroupAdder
* GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
* Wait for cache to sync in job's TestWatchOrphanPods
* Fix ServiceIPStaticSubrange assigns duplicate IP addresses
* Fix OpenAPI loading error caused by empty APIService
* kubeadm: only taint CP nodes when the legacy "master" taint is present
* Test Foreground deletion in job integration
* Fix removing finalizer from finished jobs
* Don't mark job as failed until expectations are satisfied
* Integration test for backoff limit and finalizers
* Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
* Do not wrap lines if we can't read term size - Initial package ibs-power9-15 1712760779 1.24.17 1.24.17-150500.3.16.1 1.24.17-150500.3.16.1 kube-apiserver kubernetes1.24-apiserver CONTRIBUTING.md README.md kubernetes1.24-apiserver LICENSE kube-apiserver.1.gz /usr/bin/ /usr/share/doc/packages/ /usr/share/doc/packages/kubernetes1.24-apiserver/ /usr/share/licenses/ /usr/share/licenses/kubernetes1.24-apiserver/ /usr/share/man/man1/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:33338/SUSE_SLE-15-SP5_Update/2bda4ea84471d0fcd53df813f37b0877-kubernetes1.24.SUSE_SLE-15-SP5_Update drpm xz 5 ppc64le-suse-linux ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=ae6d729ae2e8ea734dab0559cd8ab669a4adcb89, for GNU/Linux 3.10.0, stripped directory ASCII text troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) R R g !7*f utf-8 db7c1c2632520b0f7a33f673771df42984f42e2c0b3832e82f6ddbb2edf9ac40 ? 7zXZ
! t/] "k%ˮ]{~ޜڗ9}_oi5.qw2b
LԽߌ
$n7rOR+A%X& C8E;%*Hy u_(:I@B \ph9kCRKe~Si+[,ȅA8 02Y022Nn 4E;, yU)A"#Jn(;+:c X3|ILT$-cY oD s+1xZBb0
X 6*r#_}WO.2}!Ob1H81/O>{,yYyM0Ån:-֯?iUf{b
?)i T4l{IB'Ra[AM%kT_Ox4@S |*_*(9MT|PcPr~J~#e~GXX[IJwKvqS4) })w GU d?"@ZfXvZ2l#w?`w|JT] {F, j(A$\ڻ;7́_!-#M "u
$
pa J̚ U
̢ǚa NyP:K7+~)z.'(%<焵ŀǡ B;,fﲰpĈC?猆9T/{?&x.L{JWb~w}I3dM3`
p_F 5A-,$/[LZ\"%v]vKimt@+ _cn8|ܡݹ em;dק=;&-iSuVr,Zu{ /NU} >pcxt1 <5\> ,z U nGEoDƓ?r|B)χwwhR,*/p6~_6E4VWtA߅ '!m;.2(Am|:{P bo5q(xUW@1qV+!@`F}\{U^4 iV\[ `0M dcqG@vV}lrDd`mo۰7ݰɀk$͢S- c?u/f֕ l_~_!Py=ٰiL7ޖg=$3F>:Ps4l zV OAH߳өq$>uƼ PHx]ihM! T /*pɑ-?W~(('# xuT? 7ѰCSv$и(2;A$"l ssvI!G`v ,G,c)_Ά-)#H{ɘcb]y(;!^
[T7
-ɷr.Hǀ$C(-+L ?9)xR#P3Sޣո܌+'ʆG;T{=Ɏ Տci {h7'(@:|2,Io)@HP1.
+2aD㬠y ȹ:@NB}
Bt5Y˼-SB}-%3! Пh"P2#:OsW'ۈ< ~+TSe&:C[N {mꕼ٢M"
$r z[>L܃6un/?btV/&eEputdg2Ry8%Yz͆jtvПQ[?shg Cef@H(ؓπS=>1X)f玄Ty.LFN}y^rF
+֓s蔂jp jGlT~IU;S#Ztg<7k1|Ë XNa, * / -mCx 7:A=^9"
f<
C9),{#t+ u2wK|pwSgRsञ:Fli
O +w=zq3ㅮ6gdH[61k_G݇On.!3̯uW#
gU#i9>;H~c_:'0 i خ-\S($ac:d
x{9K젽ki˰|]TIބ 8U9qv͆D8 J n= e8;k MAzcTT 3R+m;qAe 4o/p_"H:B9fuٽ
W
V O[T@c?D^[l-qz発0~8}ZNB+ LCkk^ Gq 1ĸ2Ds jhN
"p$k9q>{T!
T?b-0@!6 6n :nYk6ʂs,GYP 9Dgɩ:L9gak P%6 ;Cm/=ĮR!h?6
p(l:&,['E]1 ?
CڄwձH D lmDWp GWv}Ǚo %(1\^-
#*+8T"[S !/C :dD# =TȍwZ`*v*ۀvö'*SΏ*ںȇ9@;*
d)j6[j.? n 3g2ɝm%SW;7`0v3ksP?Xd~!#@=*.%D K^Tq0ft?oWkH
, ۋ|xkZJ u8I؉= T#j˿[ R;? SJq- 5 15 ^_ rXC&26Q - qaL9j+q}az bת'
R= lqۍ&!Rf'1Ok-=i*1>-JD;R-xwhN=!y RCa3
g&'l
OyPq :#/udR
, B[Y+,s|r^rV ˷|7z5KN_ꯑ_Zlwݢ%a$ͷG<)60{aO- `
2=-u$p|S麺+QYt<5
R، .(_E0RqY] ?\I&N3?t8ӹ$7Kz[yћ~cDX9 *254> m&3Bs1
gG4u:yRKi0[vЎT%fnV!8
ʲS,6U,ߞ:v\KV*{@ dpslmN_E5
M } kCy ,#̡O\)UY>EeK
F,3d m U8lWh|q%[*2&-uⲂUi;}̳}\a"?4=uh&ŹG[0Lxbp'&6_`@": P>Tm1ƾTř|v ޑM]
ߦaAMOH9 n_uRSP
U-_(/[πF; s P] Lbʌs+
5@?LV_ ^D4BC4m_$ 'Na T ju*蹳Ӓ;bk)粓wp~Vث^axŅ` L4L- 9? 1+ ׁC~%B 8aߣVGC;]2Yy)ذ ?8vkvS᪆6 D $*D|TQs;05y};)Wi ,%) \ \ӄG?xOy HUvd8qy$#eʺqd*d6D
:#Qǿ PO MD GϙقV h=d`8䤓+6ǡ纫;)pTndO]l3$/D~/RL]NqrW\S3v}b^
EVz)͜ge>?竛)16ym]~R*`M)_dy(
dL^5HO' 3|GVMQfZpI4bJ
-AN7`)F6X9 ` Ֆ2Ջ7 5hm n#g,μ繧gA N
x ywLKKxrRSyj/`ӓ+z7~ wֻNWJ<]D<{Bm;XaR<$qK:xJu蚸)JQ .r+`&r=)X*`{k!f-`uP by9~g"2 dR[C(jC"26hC sMΓ[dsHΨ=YO0:oޜfPنE,j֓VҷU3 ~ܪ$K(=Ţ8QhPW`>ߠko՛]6s$d:Au
;EfqnSPƖ|ܫ& ?/~_٩qIYi؟\)ms"/kAWe .^v@,ȿ-^А*5^S}h3
w>Ԍ8vֺ &JXwɐuV&_TBU(OLKY+?KHTb3Mһp-knIcLv7 }6,(fpONP16"W
|MJd{/y5NY:5͢G|-6` ʏ(,2pD lFפA '"gIsZlk7 C'@!ɻpRe@U 6cM[|LjZ VZY5% i^W6z9z9*h/I *m-E`[d a{ JmJÏ髭.ǣI VJlI_a\4 >UÅAd,șsQp][Һ 77_v$*{;SM
B9% x٫Q5W* *Ľp
|/ZuUZoʖPM}]B ?AԌ W˕϶Ik3 "vF)UpPt)G b2qNNX9 r8t.w%K;
6\xx9fL|F2E|E& !dFEIۿY "沩Жpw Vr I]\X X'YAG~]Ӟ.ȀCx[Ĉ> GY_:_V#H)SZ|hs+VrWO F-6fו?v ~Ow-;yf3
ԂPR|9ꤗ〒e5
06-"4{aj2-,IQ=\!{Q
Iޞ:m Ҙuw;4~ bOH>=?D+rw8`iXiNCȹlo M[$$h]{!MŤ4iI B<
^+ KfX{I {=w1ZIL
uDDOK5_a6`c}in0MY囷TAw 7` fJv]tGp1_IY]D{-Z̡#NJwh\]CpMq*hyf~&d9#QQA G-BZ 0+'ȣSE*W%2UP_'vg,l
lMD:YKvENGJ!h ^75Huoank.1AvT
aAΤ\ g5rЊXu H\ݭa" 37{s
2nb-m|I߶Ր8Za!ڽBnyK",'D RbΉ/Gm
w]I ލ@a^0O%ւ'I
vcrZɽ 9 ĩ|j/PxFڌoлtL[Z]"v*ǻpm䡆`.X}|vњ`.ܛ;C*Tѳ3!NY-;>Ҋ{ !HN^fuꇳC:}0\ _r_ 7h2rk`"ɼDle1a)gH@Y1d]t k"W}6LXZeYt۶{
2S Ōke+ ״L l!}5|N6pka M0Oۿ Eb<`7+$Vz&̻"ѡP 4ahk4>(!p"_IeRӨܕO )0ZoX*'bݼ40B#"D1tA\ؙ 6˵Oz&X@h5Nt/[.}-rzSq3˖?K` XL[f TgR7itч^S|$wJXϪ5$fl)%N.b@{ {>COKr~ݦ#@ ,RW@(
N2A =Xu|ppdʹB$xv'N_ܛ9=E#!i>+Nڜ-S|Sj}On2.p{e>1 fpilSn 3M_DzB@n paoq /+U%S# HeJ/F}$ P>jbJҝpξw
Yް |}
1VҒʃ"L1DHL grf$Е8%bOt=ZĴ הșާbgeQoI2pW5Z 7fX^ 翗Hnգdx q,'vPZD4>P
qnY)i[*Z;נWx > 3ĩ$' Ĝ`onNêx|T@4P] n-0slrіEfN y'mρ8|]{
Ubk,ՍXfg
fbP!
d]ԟh vuS_ض*^_ڡ"ɉ;Ԕyn'We:1䁢1HsPe>TOҖsIO?M23jv7 J;̅xPSolSX
!$E ?؟7.M szN*tUeUioҙJ̛ܻ aZ>p('+f@[` :vp588]XN}xQZN *S!8yFu鷱' =T 4\YoUb!7Vq#? aHθ}d-}(^S2y $@ni7sMB|+ ڭ41~Vʉ/%RЦCevj?r? ~ [F GTXkK8 ƺ/Qz[bTy " UH} Jp$ LҶAgחITеnVˌUeĞCѓ( ;+l 0{Wqn=z h[).%٭9*LmIQcV*e # {z_YjIPX3Hz_(TfV-h!}.n9/UV 1hK"p/2Bc
vc$ wV o5t&&
]/s^o >ߜfeɯPQ@]Skch%1T-Rq:ZUT FSW
4θԚ_I} hľ~[ Vtp E2À|2y| ,Vbҷ4xm,Ť '\Pc {Ky>% E8}b"lfS8!Cԍ, mKYvvl~b߈
E; ؒ)OFbuneZpRvз8Ja4=A[bVYCݯ U4 C@,Pp\mQKzl#k=M`n9f&V66hY<*a[0ձb|p%{Amgۧ&>(_TQ({""3 }W' -}!9l8$t*
3e 4dTLKﰢUt
KK1:akХ& Ըó>ΏuJj W]eP %>$)Nޝ 7[Z,)_iFU-8.Adg֔7oqB`S y: 1Hrgz,Ka;JeRf)wO+
n K힛 X%ڼK1nSsBEck +r0,Mச a,c$-
ΨbǐFDgw3=m|l%7/=?1霪 <_
.A RbvhNbc8[(S@%^N 2ԓ4i^I y#[{xW? ]@ uPo^FP \$&1 /qciT21,AAQAwhoگ ϻ!5u_U%U)8Bcn?1+GI2bOz`mĪF,#;{<^,'[cmM`7ɰ0Pv n$yk|.U`./}BǧD`$ Nɝ793zPR XmFifi{G= ʹq S{ _!-uS|"+|7QRH;(3f8Vj6 EC;n%2\>>4*zQX[z;PZA`agכ ﺻKh) ʋNu+'A \۪nc'6,4Np .Xm ЃVf
-akv
kY؉pc0Jy.m+lu*_ng3P#>Ѫ" {M5یrF ipdؠf%N&sy +3Zf Id8 *$ <ݱ-M=-5@ǡa[ !H e[L.I{S}ӟ` kp욲BeKHGl3 ,TOcp$R4m-q,ښ<>ʄsB*5c|{ DY_š{j(6,3S;
A Mshq Mz-}N_$ oQO J,|=܂d^)!pTuCb: wX\mJP}m"|yXToQeY"l4
5~{m3>fHg{Ţ@̛> _ *+_47bX Z~' zE{ejv[e@B:,MpLSBsk1pM: ƤXmg9q|WI
b~sɭ rXmցC `%>DX{v !?$N)\' F5M3gom${:l'sē,Zt 9s9'Pd_Cr! D~9,-;%n bP'R6dY<\;
Ц_]?@vSXg(gzvS8q" N[PQS`k7@ʤT4D)ȶ豹,KPmQ|K/ ,hʼywZU_~Yro ͚$5gFd%]ʪ^
*[9uI6\+P3i{̊^}" c5LD< 99Xiڢ@H'0ډfœ9Ds r8J^mpOus^yq:S {d
;Yw}<`s롐ȡ:V& r~S$,_)10T{CkΦNQ_Ѷ!静S}/E*z$^ӆ)? )ZDdP4DӍ} Hؐ y^IJ'eҰC"ԈlTzWA;!bqo_ZKaћ$hz q14W, HZ' ( ˴v(GjHZ J br /GXOmoꆯjOeQzqp
Ļk̜11I; +אV Oj4 =? 3|Ti)9 -{# LJZ re
@ƽ"N o͙`fb]{[Tw5CI[
͆C1I"Fϕ\^
0B@7 ZY( }_ک&vሟZmwq2 xOS
2caieF'xG
Q=(' Kh~5 ']4PR岪A8oMH[|܌/X661)2|MgS d?xEteiw>7-q9^J5@b:
\y4)b|?6crX>ӥ7r &f\a 6ߞ-)>-x'%|lT%0M:a MFWقsAf7-a͇}w%dKnȓA@O ԴR=IސwsyBmF-5@ 5_iG`]O٦ta]<_Od5p"v =C;ؔhH<3+*sRyGqUK 4b~@RѪ|TPRl* [IEL7$9AsvTvV&]\FhD&ԇ!-a#i 9g ֮L#d ir}]MKjH WvR~Nkԍ"O-P?Թ~=,Æ/T.Ph HFe<:4>p#5lM
Q ;i<$4822)M+V3,Kv)T)y*9Lc텤w 6TY(bVuPJdWĮU)@p+%)xsV_+u`;0ýl8dj
sx}͐vzXPU8pZv!g4; X7c7!: |6wS ޭ,[3<ϲ17
[`%$A jQFC68JPx}Igv\@ e>s&D[Wv=:|vvBTsKꗢZAn1#;#P$2, 1C(bPbi<Kf>'K^0\.&(IŒU 8+37C~νT䡵;h `` Ɇ32 L۷IP6E{ V[=H958,!SkG! ^vn=u~0)8T , K/ǂ j Eh51c [Fs4] GN}=yX4?4imA
jCU i{Eg }#,XZSb a^8G(*OnAR!آ~6Dp@3F q}ums<tYLGCfB Rժ[H зP5>n2*w'_?c>.Q)13(7[ !uF'p= Enh1V.,,eFg2v˴ Ĺ=IȜbet,\Ztl&]$u{:΄ Q!As}|t4MFjH\g ØqUMFH5h fl4
7F"Z9kJF7bd
9īO0+@-{KG
Hl;Ϻ\у\ li Esm ulSBr4}ӊ'8[NFq $nEԛ/Rv%~,x[)a7$NYc'DD8̣2^"?^Tce I^ $oE@Zs "_qpu O5&&B'gA .V0u
\Kg UyDFq765ɁE5LϧC
W*E {ׯѕWE
D?| 2HRϊ[S@yauG :EKn`k2{L@İ50 g9Uǖ .q&r$iqh #m6ƤQEd2{ މ/8Kk HvF>eDbw9g- *D\h2ޯe*iD{0sn!W 5P`
D8nM# G%ϒ?h|d0Iv
̗{h1GL=L>BvX'˷4Y.}~bU)sй.QD*E'U;"cfYJA=/1UwZY%z c+>'SO
v-[yƀЮ^`rP^;}UZ 4-]oX@tSXa ,T}r/Q;@7aL5]"n(- I.nC}LCzX>S@B. (-"vi=1f҆΄.~ ;7% Cx+Ay_B?u;1 U 'ܠ31,]ׄ2 -m Sӧdig٪`g,brƅ}m(WA)5#v:1r_ArS);:+ 4)VAɪSĝ/a< rG$>Q,Xwb&`Ѣ~?D{ig 8+>ϞTӴ
&<_>S[I Q<鉑Yj:,b}!,i^2''U=H"_ɒ*(d)H.[KJS8Ѫyq- ݉0"D!vqQWfvaBPT9~!SNy]*jЀؓ;akK {$ef0~g4`ZjY%8.)LIKEeL{c-g6EHt6.t,m?ҵ=%!);>W| z7/JoxR{JUJG+%tP{nrUw@):Ťۣ]/m L,պ03R̹uULDj
gD3`eR t
-Xp/=*L}Xy,4ڹybIZo dK-1rWK^ci+'
gNV"rH#Pn}-,Pm[7T|+wzT͔ܡ^m\`2mhfE o:!,[C0S%)Qϒz
: tnҕc#~ZYd+&! Ns~u .QP3KO#'X%IHѵ ؝5f}a%<< A ᬾD*X6lyzXΖx
vw$;,:G8"6Pj'}ppm29
maT3 Bp&CdžրkD;%=̌?}uc6bRj%y()i5}I;I${S)
YW՟ ƶ9tP ù֍
F,x_R?S;5
Z>;ц # 5] R؆g-(2+>N%]CV>JjO?-Ix QݏaKs]3gíf>j;v ^7hJI"3
gHsG%iy_Vx',& E6n6ϴL ,rW1R iʞhrECۚX]6#;
a?r@HvS?^XݨfR
y.[3+AJfÓ eg W@CsC̋/9>%hwm,]\^z* qu 9pX87,db7q AnKC >ʯ>o{K$*` ,B[*W
Mfl; 'ѢZ., Ӧ %fJukp tiz!++Q ~;[B$Sh=sQڻE-=u
A&Uգ9kE+%#v2 5 ij V<Lh-vƭD#hg +mIgrӜd#"շ[^ӁbX4tKH[. uGL^.~
?b]o9LG]嘴5H t6 > ;y &qסi}6q3YޥJT5
r"S@5UwǙvr@#`UMn$? m]^3-QXؤ!]Ҷ@Y Ck*yP/@:F *M> ?3L ,^sL&>@k
5v,@y%))|KIp5RiӞz e5XGvzznc Mt&|,!7oĭ+K}3jqG{/ITn
ܸW6<} 忰 Lu@1YUP,T̠҂Aӥ]U8s͡L('1R9·u ;="m~r&eۍz]7j;IZR[0l3wC״t9""mr ȟ@,Z8IF1^ j'HjbkRX)o%8m9ϣA&ߦC&>h n@ߐrS$il;'d#Z EŔǥ!^LO4R j/(b!tL_]#{ 8H:fr' - DYAN͆v o4G9&O[gcmv*L%*jм\ 9.'kZ ?z|Q5rYOI;p8);~pґeMȈ璔 UszA>=$
{,ey^ջ~E+ɮ6\ $흹S;ϒ0fZMElbIe4XlLd"T Z0NbhٲP~>*Q$+jr4 @1G:eǫ>抽6(88ȃ#1h<#ޅ(_<u"
4u$ڑU56-Qx:\3=@J{cesp"?fФ}ti{X-yF ӖV&
QZ(0Y'oJc^~O _M )*lʫ_5QDVxaM$4GQgIHq 12Zg xDe/F!, %sI >b0$z+jE fd5L{]<+_ ֯ MNVp'rD8#ܑg^|$TXK2Z#ٶ=VLӆdqRt[u1:Bx}tQgU ~ #uO~P4t^
TCY=Z}Ә*穫S~8lNS:E;ޅQhb[
zeIb[Ǒ$iֹHEp5\\u=mS[y(d : p,3XWS ? ěH=0>Ԡt2o l+cY~duп'% ޔk u(=R HbZ$]2T,Zw 6up \rBֆhsVC /@WY
S*]%0PF^[wLOŨ Dw ďks**l _O1CBnϬ_1tތ=Zi+rCx`PQ Uη$[iZ1첪#(A%OB~$5!HRLV!%%ԹotȤh{zX*rC"iڰS^ IdI@<;s QlꔓM@K.IU nId 5:,0/#r]\;dd6u븏NjƵU%Z:mN
*Pb8jˌv<:B!zC ʌ+RwJ؞+3A
AyX -d]K >+D ߃S4[:|jOB?ThX/OɞyY!-J:[S;f.˗9?-,k"ZB85;vn5_$ķ/r{}=)WCh =Kd!ieFuzUq{!}Ne 7%QUz!(ec{ywg )`7$=%uF&C,[ &I`RJ i9^PZFKS}R%c".%3 _lk.7:~5=PmAl[HJ
x[ GTFӼH8!cqy:h3O=Ҩk:F߃Skk pg8ԫY>ǽ4OkLsgېmbd(k³ttele/n,/W8J/Ph 2˒" 4W͑ՈGὍU+ O܈vvtq/c"sԈ
FjXz9CH1^3uj3؟dփ^ e8Ѩ /*rSUdߩ$V[D ea<٭9
O'^. "@4(L>Bs8Ѣxlk.i $[o,X:%H 8 bh3&SԜS{pgp: >9@iBkD:IB|=Z pӔA>^Or5ү ڳ7ŴK0MNSXD
^ٚ_ф̟``I
ctpًyژPV
0dui1$.ų+l6k*$bUF<&-WK1M5|W_pO8bk+^ԑ#纊 ᲱņC&
ꊪȴ@g|z(x7=m*,.1uia25e./t;W!&F /]mC?
7+3[C !aPl):?9Y2:*c R;~^SWft%u}p #%7r_$w/V?GV?7YK\O-HMr-#:zk(蔤
;-8(?& N~4e~Z CŃIAmo~Z9]ioNL)vA[I6ƔVXp zMs"ےQ0_x?vD6c8ueuNVYA,5 UO IJASzXܤ2[{G;G,w3pWIJ:WW 7
/)t
v'ޖ oeP,סZg
[$yfR|Bɥ(zϊ攌:5 ͉Ao :AlZzw4CJ6lLo|u FA !S;Y}7Bx 3bPxУ& n%
w X$$0֗21G͗Oғ34 $%T+'qbhםNJ% q W3hwGIcI]^Bt~.ܯskZ.LI.PU QOСOO_z(AyXC'PQtE"l P)lZDi\U )!ldCwYmS-Mwm 7UI L>s,xo>ϗ6{F)8T1
,2d4Ϛʖ,6Pz7 vs3`!F)z9vNr 1!sg#y5vކF}KuӠN){=Ae-Nk;rmY%M9߅Dq*(#";OzmJ=@F& E@ wވV椝f@|86*# +LV7>4yֳ
81$7o!qۓxCNvBDZ0SE° Ii.j+ 'JM@{f +"Jٞi-Ӭܱct$}ƤGGe'roem␐x Bp^4ĎcV_|o5 6 8ZRw#n[w<c4ls||5獕l"N9} 7T$h`T-L $m|Dya'UHpˀ_y`J^ΐ\5^O 5~DQ _",8~W^/G<9Q`5S%K!n?;8|e<0pe{ZK;J6پKqaFYH.nPE7qf1njf(Yp:+i-(8'=X m6E[
Dxg
s3K8Ri .v5i *p'v;r'QD`{Qwv8KѠ2 M0 ?vt#ܪ L]f'rO=1w mĉY^8EL)ia+͙ yfznYM!K- ?[sS T2bQFH=nAt*ouv6XȂ~YEܾKLcH 8zE ԒBU5~S7hd,m ZJFlh>+ΙɺL\IX8@{@?bAH̰"j^Fh?=YǶC -]8c]k_@&
8 h{U V9Hԡ
<9 O
#9\0J3_C}ngHa}◶.2` `, yK" [a5[r&fKT Hd-4f))`Dm30 ͑;wi} DǞ 3*ǻ!=ZVa`^#{̗f|c=&]^Ή!hkLg ?hTu Yʼ=,=Tְ(BoȬUf7$\y"_S&C=S\ >c
@v=BT>0|Ja- !U0r'H_M[kXQu4˳I uEM8.Yb5vTnAm}fe69j;8?`>˛Qˏl:u9i/B jh5 f>].ʕ ھfI\A1A£ijDk:d)DI)Fnn♣r"v13}_dev%p*x0*$V ߦ(3") s>qEjqN WO]Onrd.ߐQ>O -QZj 2҉䂜Gpꪔ꞉ } VP s0/nBDOtt,Vkט SJ,'Fa` _^C=f#e
S?b{DʭE
-uB D&Y@} ~ச D t 2]5M;)5n(n"üQp7,)B|f{(rhbE`~-Q_Җn5\vmŋ or^1I!vL1Kna)]iU qw:Gb&<\(WԖmz iVE)qT'˖]e^R$+RZlF6nBmlb1"&yEL$ fG_3 a\s:0߽ZH~PQ疛
6 ()
' 0 C{DH#e"ugV">)[m( ;Dj@*Z(hr[uu_!Up:z;+SR2AI(sۢSFFQ g}X`:/}ݻ2y=Dmy=IG]⁛Fאj`.q G=ؑx4 Mve
c C ! YNhFEaMw?Xs֩y wV N$N`qf\ tQ6Ew;o9GwLþ6e(*D^Yu.[[|^cWBg sO>'ҁW|S+6'j8kZjS,lD( ] 퀀6牠;2у/Sc0ر7K|%K] Iڔ%-P,RpCs6S+h'7_^Z =5}o
><m힂:1vtnGHm}ZwNJ!r%ee8(I|ղ3L[˺&*ei[WApoWVރ! iHE8Me"
O8}VHe*'HxLJZO݀ v1(yc=5Ӎ|9QZhOM^C^w?7CcZP )h9p({FmO-rrV`@
lFn:Ⱥtja[k( 3#TVŠ
鵲ig=np8^m"I6V^'[ eP vuu,
>lj,g?bv.ivQz%\
y IB
'^:uF K5d쩨r|iY
{_VCOL1}+.pZ7
6(Z z2`PCE8Ǣ\pOn3U z}𞴵m Ly|- F9,R
jՍbq_E%)@w Ax#~~ !meZ|z(8cWA(rݦ I_jJɲL )gG3 4 QhJ#ax ӑ q
4*v1d@pzLZY 2֯U<eɻm %f$ |-Bݐ Q!͇>[sB^3;B X@20b`. $;`ɘA#zafGіPh !VCt-(sڨJѥ:an'K4tҢ3C_qE?cp]I0-Fnx|zŇ$#z.ۮKZF9! $]3:*.|6wzx\>"]ޤ^kX{ÞqTE.-Bњ_> 0IvS~gi)vLchO(+@[ArtI4*|E en{ )M+㤨7>pjw׳F3vӔ52:R 3
@3<5VHȣ_#q1D
[?PW^)S,wawܤߢrG {5 Kj2AHMDl;g{`IykBe
\Xi]: #8V@;,15XtFF1l&-~gD_BZ:2ʽN#RKi@ҹi%gr[#H[~N?NvH*Baq gF C6+cBr v fŎ~E
8>b{؈]b-:єs*o8 8^@7cKcR@ | *% gj0`D7og$銢63l Ť _[sq 36XYBF,zy" LLvmv
@TWR My|f&KxƬo
N]Uvޠfs VP: l-O)iym15
ePr^RƘ$hXO*%c" (
&Kcי9'*W^ 26, {Hm^Oh*xzt 21÷oRpu1AoL/ @W&@b+T a ĕ!qYG t(.5HAHp[ޖ ٩A^O$鲘?1 '%8xnk2 B1Nyd){HnBv 6o|E6QR@] _eu'Zft1v'ΔFkPaa1
]<,߬{CMVGV/;ÊZ3#^HJ
V* I m7K
n; #ܖgX7~)9 !r{JV-ݎ?fuZtX'Nj)ql`Sz #0o9 kHMI4UtӼLh}
Ek UPWIt ]|8+ȶ;ƍ= %me/[g$sXl[`Yts; 1|$pa0NtBA
wB
5 lI:nR S /T01T/I wӬm]=xY GV0Z] z3@.ڨWj_!苾'3^fEa%h";aXퟸ[3! b@g,/{],8r!4cWdo)xe`oHE
BY)a$+GP>{^`? a}uh5V4N;[E _ÈP@(Iܡ(%(74OmȠi_Up[$ Ѫ?gq/P=<믨͞(KPv=q2<fۈ0hN w0/-sֺFm|e o
=7&7X[>:n'M3űv*n_8Tst'ȶp,BT oX* qX2t Om(hmb5GbMɝVoa |R<D[lGxôԦ ߒBb4dRlN4:^p#rp8sPhhd -s$C7W4ꑒ6`4FGh}Nb-0STk l'
^&MDyk8*(Ĥtѧrh\0?,LL3 2-'zɡNּp6f47 iR=}8 jWξޗI -28ua^9/l%U]H=]Y||qZq(NjȘ.G }1 փjޭCmm/,hZe *mJ ۟s -aP;Ř'UrE ϊi?-+{$-{AQ@e_']_&kfj1W BK`. d! W]x`F`]NHS̀&MK^pEPqxa蛀ۮ0/.%3p]t2
ߒdw5VfLF&u|TFD_n~zL,;p'ʺ סf̗T,P-M]A=AG=荜p^{ OM^eDlXcYnv]BJ&3Za67uݨ}M4W #`Σv#l j"ZN6ϸ@_T't~.)z"GmN7k$e1)BIs$k͞^!wY/ MUjY#md3ո'3U DU[$,^AMݝ
cN$V334"E-I0퓰tap
Dԕ|Ţv0DBʼ}G$93 ^c|m_*S-۪y<}9 5gzX Z;4?XXf£ A8?v=
J [#5:l݈fy!eDtxtU7$,˱d\$G 8Q7.DۭyX %+T:@tS[ pĢ@ȝ
<~jz8)?itaF9kS٩q"B 3\[V"|K%ZT:2.91 (G Û# @Ȝ_у'L5S#f[Q!4?E4 Cq*mVvҵs=:: !g54` @
sWxR7 B록7 ۏR~%r l.HXly> L9N7fC-yn zl$x.
?J}ji+Jw[IӆЂX RߔM4 v J(Cgw}ѝ)drིjD_6(<5Z6Yv^K S LfꑡN:CN:HբC:K$*nz`@n^3I$47Q36"@L?~t(OԵe!sbjb:(4.nwc[@4O~X}?[TCg9v ~%g1,sh ː/'m]| 8y !W^`K|x4&CO@Vޏ$JEz9 o4cHNWX>ћJ״>D4g in$M9$.L썮Vh/- #@ cu}qV䡘 J<^4cpu} )i*k-hl`{ﯹw-YH];YҌVUmƂŜ 1w7m t*d g1Ų[x~Y@sjMYldX1Va3Xd]3^?g S1MI )|Eڐo}3X:DCFZQY
^6Uh
~nF}:b] $ #}O2Jj~l/R;VlhWBGV1aa5" +V[?s,(˙(φE:?k[
KZts{V ejP @vwh,hz#qO50;@Ԍ tIHu
8{Vn?4%тJuT uSĒM(7 n p=, n`duժDhBb]MbEDٰΘ:, B8v m6xNpnҷ!㿭==/Ex-je @i~}
Y14Qؚ wk n~
H
G90t53gR:`
Ta!{שiOi a8;FF^V ٝi6ń̜(QĉY_-^EcaF/oKܰ|Tr J> FȌB
O^ wr0p\^>_5) ҸODiXbD-tTf\a
AӫJ ƯZ*b; \f='cd䡋쑼z
ԠC.Ơ
=G$&]9W XP)t \[Qx]Ǔ<3+WM >RI(&78`ΉƨiKi n $~|:&_"*NNٚ{r?hJגx'm(U]q3iˋQ c4(Y/O Z;' hqb|0 UIdjڶ|3 x7=!ob [
XRfJXgR8rR|GuF#S'9A u%{Z]$=0apl0cl|.YHEFYSuQFb [KYd뵪JFYO8B4ڔ
/ש`xjL)X$/Ğ ėx/es(BV |c^M~sAD;S
|&k6=ZC1JD2%# p8`oG 9LWJ 8s~qH ' >& ~+슬xĒ*\\E/Oe˥ -[eJ _bT+jOdq1YosӜ0Jm?Pe ^B|)E֊LIs 3P҇l(*_3`DzMڞݐxhw+F/U6W,0*aN͍m5!pydC~1CIOV6LM-ƐrC ~ V/jJ{n<|/%iQ)T P~LCWƷ_j δv+Z;5-;dW eQd
L V_uR[x:&}ÉOyU^)UĬd¥-,ߝ&L£:/ײ/rs'2G Zt)-&Wڰt$ l? }BemޜHO 5}"RL͊N#:`Ӣ "uU>IL4gq,ǬI/
.v!$3w*9p{]!%3:jtf@ Y$[0.2aP@c?9x6&u%8̈́3 Z gcDI8t qMlؽ;JI?d8N~m yE >*.oj#j}l cvpP"@NFRKUo]bxX54N$DUREb fp]x
ѦSLmf@+D>}T)iN' U6欸3o$I_h[þm XOD] ͡^w1EI|WLԅvئ-
sī\ `(ۜ>Nil6R"kaJ yYM kP }E$1xaM.
Z,9xDz
+Ww|bWiq>sN lu}/>BI(nzo1 ?/p8s0ˮ% nd7"'AeۍPj&l,(jg\77\NS[6Ro0K+ã4.pw>^{6nsV*X%QTXѐYGXy~ՙٻ 5mM-/; S mi&CDY#BAy
}!;uv]P !3 #ԲKB
{ŰAT kq
4$N;p#+ia48\$*N
L]%QJCV/ w ~͓Hsav
V/*קѽ|K]"ZSj'r+ٵ$E
# S@#i"Kqˏ
>4;9<=SE0(Qj?;&Jqe>17EK'/f*_~TDG?,ʄ|L#f8fmZ [ ,<4>.yKJ
^Mcfa |(AIc>/?\ uQɩKXpZ7uHA'p5P=M!vڱ q7)J z'G f]Ӑ3da4C,EťZ~LۛyŚ_黛/=VDF0h#A}?W &+]fC x,:ǡi `$|R⸕QcVj\x)X Hc/w\sKY\KwڨSk,Ԯl}c赟Ն=1ٳuIKG+D(t ٲ b(Y3
YKjg) Z#uPNooUșMV#m -\+/M px@N5'L3`B
j%B".*S-7kr$|H>nvQjkFFĩB`Msu>fl!Z=m=
<+R* W l 86u~T^/^&oQZ(A[20V@|=C >d
iY~iaL1"^" /.V1s0V\]j "|`J[CO)#hM/
xFjqm(j d~M_?~bWԭF\(?=rs mZ!~x m r
;v(ݜFt* IwӺYV.R&_8]J86*)'Fmn2՞Ͼbf \y V EIZ̻Bǥ;
;U M,jry5{ ˈpSpk/|>ҪO2j.Ӷ~ +: Kegޑ-C+0M/E7 4IS<.FW {*{&@@\Ɗ>UsKϨUe[wtd~D Z- ?s[:LX
&43\eAw5&(H896w $YpFf BI6 ֆlЦ& PC QN vaYQPO2P
V#JB<'
7?ASpW͡(&#a-?T½T}^&#bS+tlu
e̚*Kg8>.4ȡD\ &!'=M>Vb} /KORw`M<*ʷ(Ԁ298ھHJs8 WUAB߰> =}I 5[f]cTa=nu- Cp_
ɵ^Ma7g_Gl+spFqY 4T*oG@l5@ V ']z3_({@`=
o_ l BBs]#̪
}ګ6+Z~7nk'tc?HdF6
1 G{#M vg;VVw
uHGΉ GL
E<"жl`~EA66Ӂ 4-l4))NFc12݇{$0m@oszse-NZJf|OUؠHS
TϷQEA ɵ\ &)&3{}N~f)24: PO||5+P@PG-]q{L !ά{Q3 6B Go~B
fײ)J_ $X*E*T1OY"p- R1&1No}$ ,
mJ^OKb \5n;J$[Zf! =T3M4 D sNj @?
t
Echfs,whDF _L
ORqg,.<\fXoXXOwk$/} cC| 'VGk1KjX>YDjP6k6vGR 55t ̭ ¡!3Vs~8ޓcm^DI6)bىFVg wzз(ɬ#ZFSӄo2 l
=GM o4hX I7ĝBy) {4N:wBN5o\Ni JMZxz;6 m`xʼn8Z9|8|E3KW~3X8Ϣأ*9VU^6l
P{*Zeu2$H52ppC
Ura}6j }+ 84QRmec1v{+,t&=[Ugvj#Y9ϳ +M6̓k6 qv0 W 귕Z뎴LGs:3s"xy^7}}2
Lft s.N+cy&MxyHZt>_Kڴ˘[j7w 7 !DVy$G(/zIRmg>Cיfp =GJMG\ E :N8ΏUc5- ll{oƣt/ YhL5)*xҸ︮pcE9iED _*ⳡ'0{h|f FHqmL%'\NrEM