kubernetes1.24-kubelet-common-1.24.17-150500.3.10.2 >  A e1Xp9|Ml, ?PgsYCuv_j/4N+m(*'b"#NRѴx>mfD& *skV!45 52]"o͌y(,MIZ sF lIk tݹZ:1R|qSX4! -18Twd ˊrT`۵1$Ru:]2J /Kk^rؑ:ή?|&y31Zf62ae468120e99839c8c24c65adf9c45b5851f0dbdbe066ffa43d2c334120f12a173e111712f61479609f37445f2c14ac6b86d8e(e1Xp9|#k@T>+jR?A+Ṱ*<T WsXBKṮ[!ېpeǗ_*p:;b׷#ϩi7$n<ϵmK{L{wD*i4meK,M>j*Qɻhtj)TZ_H;[wVpIm?md ( 6 P  +=TZb 0x    Z tpH t " HLf(g8p9:=f>f?f@fFfGfHgIgLXg`Ygl\g]g^ibjOcjdkekfklkukvkwlxm ymTzmXmhmlmrmCkubernetes1.24-kubelet-common1.24.17150500.3.10.2Kubernetes kubelet daemonManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubelet daemone1W"h02-armsrv3z>SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxaarch64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in kubelet.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=kubelet SUBPNAME=-kubernetes1.24 SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # Check if /etc/sysconfig/kubelet exists if [ -e "/etc/sysconfig/kubelet" ]; then # Extract the value from the fillup file UPDATED_KUBELET_VER=$(grep '^KUBELET_VER=' /usr/share/fillup-templates/sysconfig.kubelet-kubernetes1.24 | cut -d '=' -f2) # Update the value in the sysconfig file sed -i "s/^KUBELET_VER=.*/KUBELET_VER=$UPDATED_KUBELET_VER/" /etc/sysconfig/kubelet fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in kubelet.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi if [ $1 -eq 1 ]; then # Check if modprobe command is available [ ! -x /sbin/modprobe ] || { /sbin/modprobe br_netfilter && /sbin/modprobe overlay; } || true fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/kubelet.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable kubelet.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop kubelet.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in kubelet.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart kubelet.service ) || : fi fi$D34 [,^AAA큤A큤A큤A큤AAe1We1We1WbXe1We1We1We1We1Wd旿d旿d旿e1We1Wd旿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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.24-1.24.17-150500.3.10.2.src.rpmkubernetes-kubelet-commonkubernetes1.24-kubelet-commonkubernetes1.24-kubelet-common(aarch-64) @    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shcri-runtimekubernetes-kubelet1.24rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-kubelet-common4.14.3e eRd dd@dddJcd7d6@d!@d!@d@d@d @ddb֜b@bbs@priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.com- fixes for bsc#1214406 - update `Wants` directive in [Unit] section of `kubelet.service`: * add: `containerd.service` * remove: `docker.service` - updating container runtime prerequisites: (Refer: k8s.io/docs/setup/production-environment/container-runtimes/#install-and-configure-prerequisites) * update `90-kubeadm.conf` to add below iptables rules: - net.bridge.bridge-nf-call-iptables = 1 - net.bridge.bridge-nf-call-ip6tables = 1 * update `kubeadm.conf` to add `overlay` kernel module * update .spec file to: - add post-installation scriptlet for `kubeadm` package to enable iptables rules defined in `90-kubeadm.conf` using sysctl - add conditional checks to load kernel modules (br_netfilter, overlay) in `kubelet-common` package post-installation scriptlet - update `kubelet-common` post scriptlet to correctly update `KUBELET_VER` var in `/etc/sysconfig/kubelet` file based on fillup template - add below to `kubelet` subpackage to recommend installing correct version of package providing `kubernetes-kubelet-common` : * `Recommends: kubernetes-kubelet-common = %{version}` - add below to `kubeadm` subpackage to recommend installing correct version of `kubelet` and `kubelet-common` packages: * `Recommends: kubernetes%{baseversion}-kubelet`- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.7` - Update to version 1.24.17: * Release commit for Kubernetes v1.24.17 * Use environment varaibles for parameters in Powershell * Use env varaibles for passing path * Fix capture loop vars in parallel or ginkgo tests * Update protoc check for verify-generated-kms * [release-1.24] releng/go: Bump images, versions and deps to use Go 1.20.7 * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.16 * kmsv1: attempt AES-GCM before AES-CBC on reads- Update: `BuildRequires: go >= 1.20.6` - Update: `BuildRequires: golang(API) = 1.20` - Update to version 1.24.16: * [release-1.24] releng/go: Bump images, versions and deps to use Go 1.20.6 * Fix the converts an empty string to nil. * Only declare job as finished after removing all finalizers * Fix deadlock in ready test * deps: Bump to cAdvisor v0.44.2 * Fix the git-repo test error caused by the correct use of loop variables * kubeadm: remove function pointer comparison in phase test * test server side apply patch * don't process unsupported loadbalancers with mixed protocols * make MixedProtocolNotSupported public- remove: kube-apiserver-admission-plugin-policy.patch * patch included upstream in the v1.24.15 patch version release - remove: kubernetes1.24.13.obscpio- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) - Update: `BuildRequires: go >= 1.19.10` - Update to version 1.24.15: * Release commit for Kubernetes v1.24.15 * update-vendor: update vendored go.sums * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10 * kube-proxy avoid race condition using LocalModeNodeCIDR * Add ephemeralcontainer to imagepolicy securityaccount admission plugin * Switch to assert.ErrorEquals from assert.Equal to check error equality * kubeadm: Make etcd member removal idempotent * kubeadm: Add etcd client unit tests * kubeadm: Use internal etcd client through an interface * update webhook test to go 1.21 * Test APIService safe handling at startup * Fix waiting for CRD sync at server start * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14 * vclib: Modify x509.UnknownAuthorityError unwrap check * vsphere: Adapt to govmomi version bumps * *: Bump version of vmware/govmomi- Update BuildRequires: `go >= 1.19.9` - Update to version 1.24.14: * Release commit for Kubernetes v1.24.14 * [1.24] vendor: bump runc to 1.1.6 * benchmark test to evaluate the overhead of podMatchesScopeFunc * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope * releng/go: Update images, dependencies and version to Go 1.19.9 * Fix directory mismatch for `volume.SetVolumeOwnership()` * use case-insensitive header keys for http probes * add log includes pod preemption details * fix: the volume is not detached after the pod and PVC objects are deleted * Bump konnectivity-client to 0.0.37 * Do not look at VPC-related resources outside the cluster's network * kubelet: Do not mutate pods in the pod manager * Logging, remove LookPath in detectSafeNotMountedBehavior * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath. * Add test for detectSafeNotMountedBehavior. * Add test for CanSafelySkipMountPointCheck * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code. * Skip mount point checks when possible during mount cleanup. * Return error for localhost seccomp type with no localhost profile definedSecurity Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- Update `Requires` in the "kubernetes1.24-client" pkg to: * Requires: kubernetes%{baseversion}-client-common - Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg: * Obsoletes: kubernetes%{baseversionminus1}-client-common- Update to version 1.24.13: * Release commit for Kubernetes v1.24.13 * releng/go: Update images, dependencies and version to Go 1.19.8 * wait again on pending state * cacher allow context cancellation if not ready * Drop development dependencies from test targets * apiserver cacher: don't accept requests if stopped * Clear front proxy headers after authentication is complete * Make prerelease tag optional in CI versions * Annotate CI version regexes * Drop unused regex grouping * Delete unused version regex function * kubelet: Fix fs quota monitoring on volumes * fsquota: only generate pod uuid is nil * Change where transformers are called. * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute(). * client-go/cache: update Replace comment to be more clear * client-go/cache: rewrite Replace to check queue first * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests * client-go/cache: fix missing delete event on replace without knownObjects * client-go/cache: fix missing delete event on replace * Bump konnectivity-client to v0.0.36 * test: demote service ClientIP affinity timeout tests from conformance- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Add proper obsoletes for completion packages- Update to version 1.24.12: * Release commit for Kubernetes v1.24.12 * One lock among PodNominator and SchedulingQueue * releng/go: Update images, dependencies and version to Go 1.19.7 * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node. * Re-enable label selector * Add integration test for diff --prune --selector * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim * Remove check for CSI driver running on node for CSI migration attach operations * Simplify construction of /metrics request * Move CSI json file saving to SetUpAt() * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode. * Invoke gimme from kube::golang::verify_go_version * Defer builds to test-cmd and test-integration targets * Carefully compute request path for metrics- Split individual completions into separate packages- Use upstream fish completions and obsolete external package- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.24.11: * Release commit for Kubernetes v1.24.11 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 in 1.24 * kubelet/client: collapse transport wiring onto standard approach * apiserver: remove 34s from DELETECOLLECTION rest handler * update prev succeeded indexes for indexed jobs unconditionally * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * bump honnef.co/go/tools to support go1.20 * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Explicitly call rand.Seed() method * Improve vendor verification works for each staging repo * Bump Konnectivity to v0.0.35 * Add pod to dsw if termination is not completed during reconstruction #issues/113979 * integration: migrate taint tests * integration: migrate scoring tests * integration: migrate preemption tests * integration: migrate plugings tests * integration: migrate extender tests * integration: scheduler: migrate PDB from v1beta1 to v1 * Fix issues in volumesnapshot test for ephemeral storage * update golangci-lint for go 1.19 * golang: Update to 1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Windows Kube-Proxy implementation for internal traffic policy. * Fix a regression that scheduler always go through all Filter plugins * Fix SPDY proxy authentication with special chars * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669 * change k8s.gcr.io/pause to registry.k8s.io/pause * Update golang.org/x/net 1e63c2f * image pull event include duration with waiting * kubelet: make the image pull time more accurate in event * update structured-merge-diff to 4.2.3 * regression test for exponential recursion bug on CRDs * Fix endpoint reconciler failing to delete masterlease * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24 * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check * Introducing LoadbalancerPortMapping flags for VipExternalIP * egress_selector: prevent goroutines leak on connect() step. * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25 * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80 * Add CVE-2022-3162 to CHANGELOG-1.24.md * tls.Dial() validates hostname, no need to do that manually * e2e: use custom timeouts in GetSnapshotContentFromSnapshot() * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine * StatefulSet: Cleanup the complex defer function updating the status * Be sure to update the status of StatefulSet even if the new replica creation fails * added retries to winkernel proxy rules deletion * added backend hashing to winkernel proxier * kubelet: fix pod log line corruption when using timestamps and long lines * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io" * kubeadm: use registry.k8s.io instead of k8s.gcr.io * add GetAllocatableCPUs test in cpumanager * fix GetAllocatableCPUs in cpumanager * e2e: restore volume lifecycle checks for csi-hostpath driver * kubelet: fix volume reconstruction for CSI ephemeral volumes * NodeLifecycleController: Remove race condition * kube-proxy wait for cluster cidr skip delete events * kube-proxy handle node PodCIDR changs * kube-proxy: gate topology correctly * service update event should be triggered when appProtocol in port is changed. * filter out terminated containers in cadvisor_stats_provider * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP * Bump konnectivity-client to v0.0.33 * Fix list estimator for lists that are executed as gets * kubeadm: allow RSA and ECDSA format keys in preflight check * Limit redirect proxy handling to redirected responses * Make sure auto-mounted subpath mount source is already mounted * Call SetupDevice only if Volume is not globally Mounted * Fixes kubelet log compression on Windows * Add zone field to vsphere test cloudconfig * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Add an option for aggregator * Update go-runner to v2.3.1-go1.18.6-bullseye.0 * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0 * Fix problem in updating VolumeAttached in node status * Call queueSet::boundNextDispatchLocked enough * Always log APF InitialSeats and FinalSeats values * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * Tolerate sub-microsecond eventTime changes on update * Improve kubectl display of invalid errors * fix unmatch reason when updating pod status * fix nestedPendingOperations mount and umount parallel bug * client-go/rest: check if url is nil to prevent nil pointer dereference * Revert "client-go: remove no longer used finalURLTemplate" * Skip "instance not found" error for LB backend address pools * Update cel-go to v0.10.2. * fix a memory leak problem when calling DryRunPreemption * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes * Remove volume from found during reconstruction if mounted * Add unit test for verifying if processReconstructedVolumes works as expected * Fix code to process volumes which were skipped during reconstruction * Keep track of each pod that uses a volume during reconstruction * allow namespace admins to use leases to encourage migration off of configmaps * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * Fix `kubeadm upgrade plan` issue with FQDN nodes names * Add rate limiting when calling STS assume role API * Fix kubelet panic when accessing metrics/resource endpoint * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess. * Add retry logic for Unix Domain sockets on Windows * Execute the Run function of kubelet, no log output after failure * Prune defaults for CRD serving- Update to version 1.24.3: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * endpointslices: node missing on Pod scenario * fix metrics for placeholder slice * fix a bug on endpointslices tests comparing the wrong metrics * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * kubeadm: handle dup unix:// prefix in node annotaiton * fix: --chunk-size with selector returns missing result * Fix unnecessary recreation of placeholder EndpointSlice * kubeadm: fix error adding extra prefix unix:// * e2e: add storage capability for offline volume expansion * add missing error handling steps * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2 * apiserver: printers should use int64 * fix image pulling failure when IMDS is unavailalbe in kubelet startup * e2e: ensure single image for populator containers * fix: exclude non-ready nodes and deleted nodes from azure load balancers - Require only BuildRequires: golang(API) = 1.18 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.18 minimum Go major version.- Update to version 1.24.2: * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * test: update graceful node shutdown e2e with watch * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.18.3 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * Winkernel proxier cache HNS data to improve syncProxyRules performance * GCE Windows: Copy the CNI binaries from the right folder- Update to version 1.24.1: * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24 * Fix requests scope classification * Update Go to 1.18.2 * Integration test for openapi scale & status * Remove warning log for merging meta and scale type * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix ServiceIPStaticSubrange assigns duplicate IP addresses * Fix OpenAPI loading error caused by empty APIService * kubeadm: only taint CP nodes when the legacy "master" taint is present * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0 * Do not wrap lines if we can't read term size- Initial package/bin/sh/bin/sh/bin/sh/bin/shh02-armsrv3 1697732386 1.24.171.24.17-150500.3.10.21.24.17-150500.3.10.2 kubernetes1.24manifestskubernetes1.24kubeletkubelet.servicekubelet.service.dkubelet.confrckubeletkubernetes1.24-kubelet-commonCHANGELOG-1.24.mdCONTRIBUTING.mdREADME.mdsysconfig.kubelet-kubernetes1.24kubernetes1.24-kubelet-commonLICENSEkubelet.1.gzkubeletvolume-plugin/etc//etc/kubernetes1.24//run//usr/bin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.24-kubelet-common//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/kubernetes1.24-kubelet-common//usr/share/man/man1//var/lib//var/lib/kubelet/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:31127/SUSE_SLE-15-SP5_Update/730d7a6fed346e7b6e340ecf8892b238-kubernetes1.24.SUSE_SLE-15-SP5_Updatecpioxz5aarch64-suse-linuxdirectoryPOSIX shell script, ASCII text executableASCII textexported SGML document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RMO@sutf-8efdce02cf99cc434231764c8fa87cdb465493d284b3bc35066084bab084bfaf9?p7zXZ !t/^G] crt:bLL Jz:ZqPm2L!6p{?WQS!J֫7b5`۲7~/#Bf2 ^]gr;rB C){X;PxoaM~89_+FjUS^J6E"L Ikbt ޽6xEblGE77FˍC<8+ɣ Z[@<,Mzj]Ⱥa$Քm;a`jHP& iܢI3Sپ EPG͞wMXpl~);Rr"XJս;ƚd"}m] `e!H|||Tu?C+ȐEJ:yugpc9^Ood.EZNA"b<>Mʭj&`ot]?"E508E/vUC5C~@j%ԐSer-{ׂpbL/ Ub4tٶe9ĿF撽t]> ,DXO%[}: aGAd掉R˰nJ8PO+1ltlBx 3*??219mIiJ:z>߂>odlȔO^x$՘jx Vό&p/PyWxz>d$5b(%~Xӈݫa=lZY=|v`3ýSR4=5*hK9cPXI#p+9%b>v Oa.Ek df%u[?d/<*W0S-to2U8Mu^_apȬ ui$s JnS~ُǪP(+f"g]~#~Gs&E6O҆6RGڽG1YWH[7:YM">=x;l( r4k:j}dMMS(;%N;qIʦ5Zz޼$~/zNjB57׾B֒(Xۃє[yEN7_i1Gg7 Ń5t&pF]BK]ܳg0&S z{KM\erL4M+E5B 2:˙@Vifb;eC}]{ZMMO7/E EG^XKF)xqLuy|/<|ʹs/S9Gd&rPqґ>.82>ߗ->^f@SԥcB6ІmQkO82; ~Cauy,"0Flү*3BHGrQꀮIwX rGwSة+0Eo 4$KKPL=fubFl[ 4<,TR#Kc׻]vH\C{S&X0[Pi}~BNr wz1tf󓦌P@SOדd,:^]V$ś͔Kie# [MLY3z[uxMz:yk{fJ;'} k䢔e>f-JYsü;XI~?gx^aqPw bК}l"D()6K[ͻMr}LV^ KM}(1>ݙK^)n9]נy{DXu|P\NӁ3 'WR5y/~bn{/rc![,+ƮUz*rI0vG{sa:[~}@>wJ[cLxjAx[|)ؓ#TvlJAtNfFxmGC A ;` 2ܢDƂ&"tZ>W. rs8@ [Nk VQ^siͬa2^Y?<.cnheS?VZvټ+sT#dԱp0]jlx~ s!ʰ 'iJXTF:֮cp1Y{~:zH6z!3f h㊳M Oli77D!&2F=ѻI_w{D_{*;sw9{zW8cY]iAuRq[nro<0FJ jg70ako>F}л2D\\j8'Ō ҇Y:i꾝 .q]91#0fx V>K.F ~i:OO&?WV2jmy%L7OUKٴWp1<^0eڻi !V9eqJw=RPΫ 2=0(0Rbw_-A\B¦QuY6 ޜ,yĻ< '*.eVL*ؒlW / B5T<9]]inyL^ pExWt8.=;JyXuwN'was ;FA_d.DFM}$D ߯z-s3& Tc&AZ,d`k2T$0- bŽgX6.ĨƩxdҡlXbmqI%6Y)/_fb=Coi02 !0l qrm= 7Q2ȎtB>Cʍwa㹻~ \׼Ɲ#eS9UMW_a'9 Ytj!{i 1@\sϠ1@rV6«1ƔZmtiTkpJIvh~]8;Ү/dlB1ځXwQF{m G?lqBPnYF< C>޷`b!v(-U'-gq #KeKW:t߲֗b,„ErDRU|>RN*)W&UX8ussxڼfrƹK5- ^FZ @#i9~frE+ꩢ(a]9hEsaI6L 7Bo{[);FHYof\2ViA̅)vx/.֌[+@nm Y EuZ:("A_ܱv' ''{'olRW?:([glsh> Rubh~:$Ur}v3BCʐ3Ef;g#ܮQx`CͨȌ9 nȉM( 1lZh' :櫈 w B%<Y)a_-lPC'p 3{4[3ETAJa%OTKM3Ռ9'V CSߊmxspQV~uQ9\Iq *ߣFϓ *8v| uFgJZRiBcMb<*y?sթ.|,0N'<*T V8Ut`ܾ7a B~)Oy/_flPG)ςV-h2EI┾1_,Iĝ |ӊǖdlq0 ' S`9K}C҈6̚< %&uSW,N?gY@Őp4j=;=/\z5` "`` Q 3_5 m_t()GjbM[ER}&V *_b[v94\K4@}^ 7\ѱ|r/+Ꭱ\:ZyEIiMËTriwAi-A"tC'e t7V胜)4)W˙"\0/SU],83[":\V */۩7ٮocTY5r:m(J_je ׁKw#FevLjb{ޱSTZ$piWN Vw_#^E 4o G*|P"nf憬9s,KV[V $PSbwwMc/"+ jR~B70agxGivZ&:LnP2)%P5zVVy u#ޅ.ҘibAd۫%ힿQʁ3HXn74A-MYk};g*:ȸ4|T+r5 q!rZQH}sϵqL_b iv~wpcffidB 1ȪÀ|_#/dDkoxL+iYZ+i3tAQ?kk?ԜyIVJ yJJ/z-Рh[Q,J]מתpG^wk1[+1- î/! )i<\Tǀ])]C.HiqO,=q_ăI츃UI6VVh׍@tݑ`6\'2X|5ab A8F\PZ:ԇW eV>CixM@Gh88lC;A7VL: #:Xɨvң„o(a/ϴ&*NaJ?ƯlmxmfnW ̵{BRSEΌd< " b78Hq:b. F拫-ob=`mO{87sgBQ [iɚu<8Qj ޡqR=VJ2הqxsqzfAj]ɚqHQ"!^ Ad0t $e`ʜj{-䷈4{Trjq:J\" k@N*bty{fɆ֞nSiJ0P4Hf[O9)x̑]Db碧nq]tj"m?U^%RLHJhuxkWGOĤ.;UU% y&Ur5o+(:6\DegC/ j\!0 fQQErWRs)ӶݴծLH{-wzѢDV&Lѣ(o :BZ%xp>=6zL,иeդw)BQb@oII{36V1U&yT/~؊^ o?X>),dyC< wOɉP(߻6),5_k_S<Dw+'Wir34 W0c(rfXȦ>y kO4 Ar[T/E N(WT|p֞QYu;cK+ɞ)_#EJqi2 2n oL1[=71V*[ITa]8+l! IkvA͋".)܄=Uv֒NNp7OrpA*6|.מ&Y[)PUm}8`4PV",UVF=!~9/,dp[ s!k9 x燠3wچ4* 3CaSCkakolxJU9њvt)? Y' 7J- b֩3Ã7A dX}m{ Xe(24vN8]Q>jðT*O?)0Τ|M8clҐWr\R*qNXZ!z¦\ya,REHg| =tcf~9wPۛ)/NE6TJܻ^`R%%a8gE?T= (Cs:7^G}Kڙ h'ƜoA1kPIT~Di*.smriH06n;RWb!Ռ$hUC 7=npIوWpeuS;c2v yjM@#W%Lt^ty!ݴK(b\qyI 6yT$3с xauFZa‘Дնnxmrq&˧ea4›1NR^%^4P8UZ&T6yC?B/xz⬟_oy%:r,ޝJ`;}P#V^&Yݵ.Z4jH!g#S|#af:Edi>; h]Q%^ZE~F3E(7Dtw7SZ}ʇ^tЊŶ+ `+`@٤ wU#1V[Sr4=43P 4h(<į.4Fyj{ǃ#U{N^_\un桀=?6i,\Z.䱌0}~EDUZFgW. +v. hTAlʮ\RWcuC JwyQ.=+$%> xKk"QdbR8c>gDww(',4UРD 8 w"71z4@Dլ(K1:~ QJ8zyO E-Կ85*nW`9`@8%-t! !o4@ ! pUoFo#}k%7:DDC Gp]!- "5kNf'Yʐcݼc &d&p^rSŻ)+˴{|pyLmjsS♷0=7?rC{W}X OЙsIG #[Pyi^_hUt+/8TEqVs*dƦop 4+Eh^x zq ЏC{pbDC\q"ro273T=@E([4qhѢxp287!+ol;3ioNMoH 6|(9A ֕ls^ f`nhOEŬ2JkD^k QDӵpXzkINJ|Z}ިëkX$VwHm}wK;D P I܄ "Iu>+]T.6ME0ؚL)$|GC[)k0iMo4g` [\.fV{ѩH4-ݪ?(ZMo |KqAO5r3!s!iM@R0/iKu"!Θ循k!Hl[/ ,u?_ħ%'AC4" k>*|oS${N:D a|K8PHN! <-6zL<(U{Ԫ,zh/ԁx24BLx^DmHT27_tv_`7æ5o֯xCZug)Y ?N;I-{;lTqf/:_S[#MR,ЋrDBeگ>ߴ!uS>2v#p"1, *7= %Ŵkpap;_(.>|%/#5ۚXrHXK:LXm1ZpEʡmV#4-3%M5+Wga +H~3a:L>b9ԴNszfҙ%z|՗czWh6}O6SɊπt'.mТV=;[a8::j "]XUZVaO5Z9UtɧNL)"|4 PO n3O*PrROhNkryxb'7 1UtS0Z,miUYc[ 5HR6+/ʱL &NqdVgwȈ1zݩr9B&ӔSG,%9zoȏ|l ڛ;55J)}fCK|:cO7ӴРU#zrER gd#c,Na+&+bH ñ a$m"Y8 "Y7z3ilłhXn& icf9ZzEX2D"a0nɎ$'E#%* C(j`7[|{ꃄWxs(7=I^H˼pxLr;j&~VsKN8A {kZu;gXwwVI/ļ!TGvRGPA e({=i{3 ]sI;8WJ r⧺%|WηI ޑ>{%җIl4g#FYf1UUfƳ93A\툁A/2Y3YI+7hHx× ip^xd?g9 8 I }< XPuϫzyaT!6͎7R߀FYFq; Dj?#tߓcuIJ7=5{JnrZݿV!)e˧GтCсClth#xU,-XD>ADيER0DR -^[bɎB>V& :Ͻu<,o]YBTm岨 LU_?EpRh &cr:)](LDP'MΦ\]rb>Rݦ"5i7 쎝WKdm'[\;Kx'&p0Y b㏖xOd"e[q7vHf>ݑ+޹ac@h 0[!pl+Ŗ(y x_e9G|zcZ5/^*i5REaU:E̕WduKBHbΌ، OE}uAv}WRIs2>²mjK"9sU@~s4#ۨ_Aa;GPǿU/yHt(m*Dcaߚyꔸbb S2,kg]ʘe,:|t@JyR+#)emXQMW_]/K3@6m*[A SRC5x;n)I4<𻹨&'Y\ Y2vֶ<<в,D "2_BHgzgÑl0:Y-ԟeFչo-W4Nݰ2-ߦȿ=:t  KHH{czјcHPbxyHQLSnVSYyqi_5<NV$g}ҭ.a"P@6ZU> Z>fD8v5:6]/[x$]@kg',?]/Jo{>W!j㟈'Y\<'߈n?1hզDӡx`f/Xk#%=l1r MhKŀ KdkFq]g6v䋩dc3paukYeFsש_񌽢n7K22 e&yㆢ:YHN0cp4O=MEV'PȎ $, ]jdlSum{DsL3Rr;)%j.?aY0O̟3(l7"\Ԛ]<[BzVid9ۂ#hvLj,2z-2s pO?(mAEzgh_0!2sOwz xJ$pWp\ExMx!gL~6 J*e/Dmk/aI [=²&5\*s(5cr#qKKCPAoAbR ^HG˾Χ~xa\JγW5t~ǕHA"1em2T*Pn1N|@Ggq4yYF 6,cumKn6Qw[/ |&pmm֧PE?eBJ 7tɑolXL:|7xi!0z4uaU'QX;RS}y&~Ì J|zdt$k<o?—HȲ_M C}wpuȃZ8-gN/3֑LV3xT.{dQxrJep a`wѝ:Q T[ŘiٲLG-HО[5#VB4JFبsk4*OYZv% Q1|g[% `"8nZ9b11uo0NNi 3;a WkǰQ^;~>av4ϿGҲU1bAl-(JЀ=JKdg83m]o>ֹ&`'<`')2ʷ@ 2WDrSR\jh5^SPFfHv0|N-`絜C4.C R)欔mݑ?z1-)GFf/"=5݀] 4<:$}Z{EȬ n`,v: Z:nb:߼%%\,RRoc0eV+@N+M箛h/+a)f+y ó)8Q98 a%;4n"p W+g 9)XxAEy P_P`͝dm]V۾^@N{r^: tmGϭc`.YDaZV-F 4Gv/F+>6g,; ܛw3SqF(Xqj Cm :fut9p$gWMc \Ak^X1K?w ֖M\T$Ilpљ-wT\~t_x F/xmCb??R4E۽eV˧4'KVCqᇴӼ؊wHF+11r!AM ;SR?2;3c[)IUЊ+6V gfȂjU(:ۅ֧B a@4@o|%)ТK^$iRE AhbHr DS8qegǢ}T[JR2 _\T>w`& WzăbsH&T?Q33Y][) ¢/Pg8ODQӥRfz}z%qvq,@WҖuDbW81P̍`Pӂ]о>p$^nz[+8:UgsU_|T"uuFAoPڠcuU >I;q %҅ZNJu ElԪʣK%lqFEdX\G{Ku4*?\%,-cr_ON'#SV`uuMB$Ysh~1h)_"f]+賯 hX c;&5RvH'dLeey? xR"Y!s;ԏ<3ٚ-njR)B{'S<j) _DIl)N'ot8h).xhYwO9VhB.9F56 :O;fqْycA-$ tiMj`v]R^2* vB.)piv2_ԂhSٓ9p'jxR`Dz8Ha j~܅c]B~4*R_#|e$A`/3r6p+2=70] ;Vُ֟X#<:7;[='(K 1"1YDSFL`g-XqvRO~뷞3S8@,ΩF {ݓ cHa s4yZiZjƗ&R!*h[/8m۪aSiBK؋ N 96NSrCW%\:N3o1f| e)yS}WYE*@ٱv[h- Oq<,a!DL6*pRG]o6'rh3%Jj"%nH3HQ~#-1]aˇ}^<4jqmc#P<#=bߝ*Z6ƥOPUWQ\^m_hfNl0)E|T 2Ô;EE\$1ӳw~Pin{Wv鈢TUoݠ5S?%ťD؃w9[f\L,`5e͆MB CN-߲ }tIƹOW|w/7 GvUČKʣ5dcTDN7汢ɪ&ww$Ҹ/×zUxǛV1d$6Ȫ|z'젊v^&7l-# 58O'ReėLiY !VSTx)9r⨦[-v{\ \ZhlI8(giSp`h`l|~LK**(Ίuڭ I2jfcŧM#laa u9-dqEiva,e4K'b\㙶5 5c_sYѴ}guJ*C u#7˰ppɀ sniKj֋aj;]2xFZܻ$R4R͖^:E1@lSNk`wfT SIug+qDx5N>\kDFOQz/-3F էSād!7bև¦zq)e l!'pu# IPqHVBV]uVxK#G)ƗhIJbm o>cr%i^2mkӞZ"!2imݼj&A3FvG+gxC&@XbgnyFZL~~gOB~EqoemW{J AHҖs [/)4w$x^J!iV791j7cVNfju~yi~߾J-n0PToW;v,ı4yNs+M1ZGQoRjqJ?'>"l[X󰓭VB6~yCj OK *Y8QX;bl+B ĂX\{wR%@>Pe:K ݆`r-Ɩdl@sSASG)4lݬ#Ә[%;Fdg !̚$}TTB'-*տVr1Aփ( 7 l&}| MwG ǮNlxɾʟGŌNէѲ+j4>7X!pC8aٗۙЀPC\.aa=瘘! iBF5YٰVU`Z`$}F c p<]и^z-j#%(\5 S7O+y73+ylXDAz΃SQH%nqrQ@2FqWg;|EKFX5Wr- I=Ʌݢ/x6)`iwSriukz,qYxPB08Cs=g8{OCq~27(4w|ӄ,:p{~>ER)cDc/o?h,3vx6wHQ(kvdź- X z"tCX}1{P&:~aoza>[cQݳj]\ {W5 2_N,Z^䲊Ň`d`/n` oz*t~pf`:Q Q%|V3d۶W$|4bbm @9{ ~eQ=4$sG9$8O̦FCJU =IXWhUO^1![-+G' {}*ϐ850:i9ѫWJQM\Y[YIkDۄ~1.sW IXA(`e'_/ e`Ɣer +>bAbA;SRP">KË|Qr8]?1o *#1XQa y],tF ],ZGQ813%ҍjZAub`NVVd)gؘ7Q@+fjoa!Z#Mտ kX.j>(1M-!Lq,$ ΓC=0 ~UPgEv0o"5Ol?v*g?(q%M6%cf\_Uo+/ vx+GLzo^St-R9k J-S~wBXxG,21T9 o M"( v^~;M_vޏ)q@١JY?ik]oE.ZK@Wʓ4YSCwH?ZE5H-*-]ΑB*}Cwb9"Iޞͨ;&Y Y^UUrQ<}~lZd*0zˉ[7au +ʸ0e3! wE霧s {c${sbD |o^7E=|a@G?&R|)L'.V0qܝce͚TXo0xgh4LgZ1#|rkZ@ϓ>GW,&:+DR# Ȱqn@ $f"%2͎2yl\Jx-Awu_ v8g $i|x\ȗVxqehМ~m,}oIiBII(Nޱ35zSIe ! C4'᫟,Gpwb=nE&ըyMٵg:<=`}}GFV?IIrz#5Qƶ*G$/ / ;;_oិ]ȥ n_uyMG48pإ2䤳⅓*R~Bl4`]TlWTR [F>nCj)ꥳ$c#t sI  CT4iN3yP-%XymO;KyC#޺" *pLZ.JpvrR0oDtU$tsJ/?me) 'R'p o }C냧fp{I ,M] )IV Y 9gw(>RJY$x>N<@'#ի7O+1mv/>_&cْيe2 y!B |`Sc7UtV-7H\ X$n ۾q*G.H'-S# *X3]Kԩ [C^|3 .rlS+Hs{pA@.ݽc'+"yg>i%IŒتJEnZ<=b$kPG^bU3Fx IP U=td,:ŅF,$;&Gy-+5{8Х^ޞyn, b><;̝CzShsL 0.F?K?OqHW5M*2Ϊ}}4k-?K|ևl_0Z8f<\TC ok@$J_{ c͊lVSVFthۣ7"3XƇȼz{Ja7moZ婕3`*!> : 76H"Gbp&T&b/Iր 젘^=Q"=*L> QyMo56ȁ?n=}fwdt_.5^?B#Ws|R.tIy9%1TKNX6B(PJ!2 ?:QfF(<.vlÝN^kz(;Vet!ߢQĭKpN%z:Z vң9gp&$X^ȍNḷ@E_UT璗tUR!)O6k$>?dL9C"Z+AZ K1M^/=?Wd.'Q?eC`[OdlR"} j8_mG TcZ󖱧lZPk]xF5#Ԍ"j<_Hiˀ6`Ā%CJ禴\4wYer6wuz >0x iq.ha`>JZ4MF ͈#+>vn>ES;zՍyKCW&RREhp~qWhZXdWC:|*AE8wM@W!:0MjՆt@38[$x)Sb#Y6fg0HeyS ?`^7?rfWiϵ9COIg nhb!Ǹ%n5;\8irщ<I@aDM?[Fb\bS|mߦnw3Sm}emNLqF2pe,gZ9|-c25#=IA.%[Hm?BJdO>5AD~}2ni}:`MWu=ԄCQm\fDRUFϊ1"YT +snޠ 6hͬ#[сU_*0v[̢#Y9uIk6ȅEċEsae#TA~)ȉEǴO'#JkO5BpH78#w%pb(y.E$۷0>c"oπ+Caa>E#{ǶmEKV&z['e~ 6Q[as]C~z: KV'c,L0w%&΍%E7]p V8:95jb莡5KĦ:Y`w!^/|`g=ֶ )N8~׳W+]`):GTwZg=*HVM19Z} }p!fS]1NJ6$ K\]+ df^ZsIoϟ#D {y:-źM?PCk[N!{`:*7npvĮhn1UqKJ{6Io1#`BvPԧKx8E0 }Enl3ib4w7V#gW0owAs:8KVa?'\[z#+ ќ@뎜6yϞ_i~Uci=5I`{ v `#찬5)=Vc]=T#F_Z tAg3Xf AF\bͣ3Z!(+)PUlE6L[Jso$ bu?ebԒ[<2F#c ԁZgpjBd@ԝ}&sҢOlm6/I>Rã3EE7߬i'"uy8xyr{6mgoN Mdqc߻Kݴj{ˏ8's^E6U( J(2|{fGOp@/oE^O{~4e&F15 A8zC+ۚL̇JkDkR->vˠ,w $,y?I . pmVg˒t6*"J.dحi4Xi JnnD>oyۜsnfg%q΋Y-ÖMʢ^:MoO\I|ʎx26[<^5,KQ;>к/EO '5Yyˏ|4;g24+I*ɖ=4JQm3Uo \铓!*ۮ/Eقa[)srqXQ#Hk3]^O@{55YdK) ɮ4Bvq&j5/cP^x_)YpT?7Dq.byMO`$[UOᩎBlޟLsLc)GȿǖZh"U $_tO}wq`.;P~uN1ID O7#UlS3L6lzESSY 4+<qmT)m1I}{IԪ7r|NhR{jIe):-b#L?KκwW+aNfV^HcI:t4+nS9Ghn|ZTxe^<5 =&!?לO =[ f.t6Qe-(Nݦʡ vfb0 %~Y4X.A! yt[=)G{{zQc,& 3Q-@ai~d>503֜| gá_,@$d堻.WDm0"VoML.mMBL"N]+sk}TZrJĀ>xXe3A] @*djfZWgzHzq/eWr)e5;Яk!*t$ G$U:@BIԊD%.-}f>@-,rQ+=k]*@&ƺ )b~IfYk[UL }][L8iJU:Lr:`ʰ0ե8Z4,T<i'Rer{- PpM3R`A,=z #&ަʮ|Xt J8JYtEOb_-qbDDQC.02<'{;Yf#k`1TxG 3ET6- GEM+S"768Utm% nt@JEBS5^R a1`|Iފ=>\nC]2{85QzPKZ~VO^6Gq0!!Xu^=sRqoඝN&ju%FQz%e7I."q\t:OlB$ps&; Wiz)Ȕϻu&'oD2/%H{v}j"8/mNq1B-eOvۆSwsi%RU:#O#&&j;[Ut~11%"L ZVVڈ)z]Ho86yNEw(gjPe@;a HjWhiS }Qq"@[בt솥crkXiBCҟX/"k@ebZ0"4pʬ>SZ?vt˫ڜ> lHdQ?VՅZJm)@>>{g$ҳ~HT`u-Y8#m6⾳JX{"\/Ҟ; #̩+ؕpE3 z-qDTh_v~ۭ<.lT"pW} KL^"fv+FuŴ{HE "?!LY^F35j-hNGd%$Kc]]~F;5u^JTztBu;"dN0(7kL:qnt2g".ےƧYn`L`,!g!z(ޟl,cN6(0YpldvƦ9:wӯr0IɁIfmNZ fDgKX Ga\ҝG:dZ,V+ YGPhS[]OP|ep[zY<-QH?Mh~!3hBIι31BB>ckjU9 5Y&}%n=JnZ-amRv)iz蔍\p-W* cl|,qRϦVl^L~c!qĽHۃyl%|qD^aܵ%! [+EړQ5Վzԋ3i IpdZwGP3.^ }bnFWMf$~2[Y57]_^+/1/LkpԯŚ_y4Ik_ H#Z {8cU;Xb3 TN׵ u *¿.e[R٫#O31i1C-QcH8ul.rXR%,5}aVs31tY/(1pMRjc/zl-r|EOםij3Lۀbg CbAf8u{:'zMe8_77iFQG }{ "%Bu7D=P XKßSI,O;O=XRn(aIX87f@׍W );G. @C'rya(#zVS{6دM@vYx鶩|y``$gdã%GSqTqlc.ţoWW=H̛.(F6gn &q/hɪ(l9A,h4ѥ.^@4֬ᇹf)͕blQX⽋~/ =P2:OA/]rrh4M`}e V v#U#!H_0]?Yn"] Ve!rQ!6{Ma'F.(KvQr{ 0XkUXf,;]Ƙem(`%n*cn@O{UEPF(Ϣ0T0rMY$#hxQRN㽎Go '!ד!`K%GHq NI{TZpGL3 ^pJ"O24dpCx4}҃ȪL0{&3&gD0UV}B("1uyS7̍&49#5M:SB ^uR!⌈$!̋no!IB"Grfg75M8 ӌKu r3gj#JSӛ}HԾ*V-ox09G'QRmukZ2$+<е$sށJ2|vm)h 5 /w(y YUt{+ i;n5DOHt(SJjywL]kk.2O@;`v|5+Maj9ce$lK"D؎U3].>yM :W74.v\ުݞ=;(J~pXXńP޳֚;tKS9 \-X UA2_`Q%s%df[TVCW6T>Q p#7,ڪK gW;EkRP Y(5E۔j-sXSVgވ8ҡKַ0_ ͤ*c@VV)bfe+O\JY&`)NlsPyx&3N80ϒA`i]f6oU -fF8l_ B(Is" 9OaVJyJW=lB2@y7EF2P$K NYAniw[K| QՋ}\ YԖc.5N1gF]ӭ/)%"iM؊-CCh2HHΊطXe3QꩂO!PR(>E?pt}Jm2 9(U~:v般mN웟"Pߦ1/–l,%Gwa I'>$GcKK]c Dh❡!g`yjCw}r_n=Wr\!gӳXKXΤ ,Qw ^^ YR2P-&?}R 8Kg%c4j)a¢!FVjdQ/'B("\F@o |.v 3s-[Ƅƌ-Xuܣs)3=r<4bDzq7\fp?_LxT쬔+jްW.3eSf(b93npǀ`'c0NhrjR5+bu.=.'ӓ 3(u8'$UTAOk_,ÚF/H י h]^*52{Wq0{׬d Z3:P??} ' 4Rs2P7S|QRZ~rZ"8r@l*w[rd|Eϲ]9#pS{h:)15Hdycf,k&tę*O\6K2;0ŧ1ۓo@n宗*U;biQR|4k-#<|r+vNDS tϖ|ۮ?Wvop@lDC/9殴AuT@<tD݅dtu,762rzM7 bXU_7[Jɥ]z/6ѕI$\QmHAZьNt{E JfcKlm'Ӆ5S[U3UL'ʓ9Z~i?! O]pʀ+Qd>;~_LTR' `U>.MpNI[@s)B/'>GDka]C@vp^ ta߬7xn^1yZvp#:L`* sg` ;CH>:$D'Y͛ԋ2*{|7a2^;];*/i/y/gްXmv?Y%{qi%9N-50af*;g3?x}So/uD8egJ+]^I0RS< {0Ƿ ^p?*'W;2JUcQ8ul_APjt6NJ0kq741>S k*<4B (wyH)jT`D20W@c4}*)1H2 'abY_ 9tpOhY=zPU]d,BM>nΥX2Y|wesq0եŌl/HkR6^e^)gv}Z LtEсDLie4Qx 7ȧ|,aC)[ ҄7{u~.?VlI&Y>Lhޞܨnnsl,|#bdt𰔀)S'8dgauӭ]Ѣ[$ r"Jo ymZRn%_Ϥ~LPvr:U{K[aMejx}`bswBeo)0'|YV+6ulXū)bҒj%q.wt} zHkFnV\Qct |l_<1ӱ"5O_ƣ /!b͛-4dnY7$\j|-ް) 5;v8#zz91XU X3W|2>px"fUא+."/pߎO c ̫(Lg44|˫4IdT'RKEDEmLs"cB 5\㬂y>& 9uPx5ߣҮ7WQPU ܑX] Iwgd_'m2#9]\,:]xsK')wbMS¿̢WI"y uĄ 889d]cdvwryk*O Ѥ6sҶtDWQp',2ҕ5~Hp ΠLt7`}+y1S%BwM`;mϛRږe'x0 ptW@UY!r\!mR+';GHeǨ _6Qkrzx !V؛?!{{ H.$1P~Ú (,ʆ|fwHyq5q B}=~L00}1۩e-+AoI9ϋJ|OR~#/ŰԀI (׋t ٲx0/踇|_hg͞~#Yk#7= K:=>u9;pm=;/A\Kڞ7b]b^7 +yy$a5bn]\jBHp4JvD|9'k苙oOZZ )<,*=Ȧ|5NC%ǩlsdRax6aaյ֧8cZ8x&O|nz^4o9V'ݾZ'bLt[_ѳ:Cn9Ɗ%}"l<0)rK$է~3ym܃ƈ$ @tD:f`%~v@;8[pRHvR:*S.68hzfT69:e,<2#Q;Hܫdwvph 8逾_5m&s^YдìQMϙOA"h;- xeW-27xխP@ֻzWEjbk[$xCىw`A&wN!zPfw| [V5|irI7Ω].?̞C9@ewACF 'xW[sDh Gfm:AI,%|ژ)a vVzotpQٚ:.GhzügQe5ϙd-"*T2a={s;,Gm0E(g_xΈ"lU)s[8a# /5fD JaXD9)`I2ho+avF#އH;tiᆤ T=I eBtw굪kl;-`W*+,V7J'뗱qVhW_t c +9 z5 W_D("%q.e}{zB4_s11ګjLSz SlDq_ MkW?~0t>]ܱ5!@BLg9b7߲'5}LGS>.nK] PݞqjYIĽlLaMGh[x[vj6/dvx^PaS!.>l }]!Mw y9kkzv@`s;EgeŞ=QUΦ u5kKGǑ2.KCOvU꺺?NZX$EeO`6kӶ;SA2/5oY#{'cºrdbM('~h2Ճ]N&)ke/D4?'XJv%rԲ `^T8/ŪEKID2@-jVt̆BOANB/79Lo[ L=41&RQn+y|.NVY q".8bq n/c^m|4~#zYʰaDX2a;k[RWp7Zzm 1EEķo/AhYgN40ɳ.L~yt|fDt$lc.\SnA7P#dAIq/&]jІc0&۽u΃v*TpR%Mkkg'şu_4u(Q6R_3GŤ).@`OYQjO +- GP- O/@V1q;v} O2><L#^7KpΕmK&@EˎS%˺Mo<[ҧFX;=. Q#H"qP{nEGUnݔ9v[f6ǐ@yC@B3~eJwbmg>S.jcv&̇r4eFͮ f8uw-N [ φy*xX+#%jf89X`ҏ1 P=W@ ]MQo^{䟕! )~]#ud{ʱo=SK$x3{G%G ѽ΀5^ᡌ^72Co*K@D%`x\:=sVRHY@ĘubVCr|ڰqsQKX6+#3ΚfJ_:ZF{(ΐڨK+s0T> 8 Iy*BrƮS -s[I-DyI Zv̗䄀 ۥDN~s@ v]txMf.vLmJr[-\]ll̲/Wؘo,oʅgLis|G@Ant;ؼm`{ݓ;9*% BŨ\apAl_YVMVw^0GX:vxsXJH5K2 ;} `mS"2+; O~V)la`O[oRTa>=e; O&5&04im$J j"~$yd.z-n3q%vP{8 Wd6>[)0 7>!c4L͟r;ef3S:ī'l'@H X"l%b# ɴc #@ʄ[pQ H7o ԭ5Adj'hܝ$= vAgX/D4laYs/\zӍ<$@Z`OvA!\LolĀ^0ʇrawOpco^}68 Ȓ%ۀ[jeEc sّX"ŴRo:ss 47G5xi;FCyzb$e/; -ɂUO:c߳   ȧZneìqAtIbEҳ6lI(xzQMſr]۲^VtH(^;EE1 i~)|QiMa0ׄ2-NU 8'xN+'CѡGb isZ3hTFPywI (m J5{cy#6؈#Ed.20D>CJaf (TC@ŗӣ9|=4#]`9 UYnലH!"xNEg={LYwEgxB&huKVҚ G `??&oL`.!uh'Q^`R@"G9~ 8 s㦛8>5ɲ@EY12GjQ LN2e,, rT8Nք[̗]<6><)'EyYa~K$2Mf}~˻ԆO6l,N{px Y~CFhaep)ZRZh b h;6ˤxytI>`exnvKA~Nlf>hz> qL:s#eQ>נrJBʳ MwO%&yqÇ?}> Kci[IO M !6|j5mv6F{%5pX [ad 1sUVq~Jx>r +ك`E +1?M컒q}|ϸ ʳַ&ZuSsKw,:QV5e詟*M2 !Ȳs'Wr E,d*GMZqx]줾@(T~Q0r_Qڹğ⳴ 5u6Ev<7pkEmOnT>ӏHrib&&,$Dƚ rKK޲\ ~{R4eW&媎آw8x8CÜRYGYQGq'k!=TLG@jsjwQ٪$#? {;6o7\wsοA^|&y$pY|™g);O"]w[{MZ%)8bZqO,OEY=y?C Q;' j9Up_.+d>T,)m)s^sD;r+DCl3)f0vlk5lS;s@8Y(*X \FrJ.B]c?@ ֙wG-5Z5Mͣ(Bƞ/G.7"FZVz:?mh)YqBYG?7M2p5I `~AWQ'&|aol4R;=pFD=RPvT}TBcTHVy &h}hϐ1Nx=D KRk6 Qe3f^_2oIu/y ]VPG O(QLړ .ø#%JQ B8A)KDnpԞʌكgx鳓@ ,ϻ~m5E]{}՚?K,ƬV֒/  A1Dd2j ǻ% /|WB4,n#!4)ĴWj#5 챂f}O~027E}Ktߕ\ |zݬk;PB1`z"p= V!^b,{\%/Unb]dB6-{pO),\ߢ q&2-ߑ eK-DT:Yn93oIdeMw̟p |BE Wbm]z{Rc=fKբ/MhY?D/5FGڴ8?$D -'_7x0^cU"IoFEh#RTNI9O<\&)[cdY~Bۛr.Y>^U uǭwCY6gx~vx[H>m,#hD4O4ETBOz9Wl44yPw$ylDV_N>O q%8k|(I`sCd=S?&= "(\QޑQkTP>'Ug<sHVI\q1]hﮓ\do%9{8dDW[`-W!Hhz:>/5dl}u8G1;qtMşRU8.>Ʃm)o*0yc" 8}p;Y;m p=*$y9t}Dd0Tk݁s@h e[rDHJ=f!xO['D oFVQ:xOs?ߣ- .\aS5_m+L /ނ¬xiLMmP[OdwC=]CԂ<>XS0$.'a5[ G௜x-A"pE#6]zր&u>ϖHIǬf8.?6^!+t !D \=7Vc /X|Bv/0#X_cbp_B)q 09<:JV~9qxxS۠QlYTsPx9|MhTnA𑘟@U0g(0ߖٽPU73qdY 7#y1 F]E,FFT^(5S@w%bIW>B}N0*!s aȫvГu~tv !5}fDF ו6dzT(7cKa&dxv\I~,KSan,#*5%b_@ė%P0@O&3j&!C|H^T{mb֯袗B@?z5 h⚓.97k)`%(6Dx&7-+)%k'W z.#D1gyfx"mKt0UvK_FG|o`>ESNܷR~^1.nlKZ!w5?5q4lZbclzRb >5t'iz9<J!C+EAk"­1k# s>s벀fMM3;R'bؽZ̻:/7d1tkozd{'w4ԞuEC;a IAhc4¶hs:1.G685)1%4~=cRo=^_)!O//YgŹu4NFפ:ΡA~1LGr} OFc&J򝯛%b#GP%>˂׈1d9O=>FȎ) uhu]HWV 2f(gd&Iy]_\Ae"4IQdlz w':Ԏ#/d!8(EXs U"6 ^J:4DŢPJ#WUX ?'O}:tf55=W_;,MΛB#TI)xmȠ;X(q=@?6`i8߬Rs-2Q*KxЬz|AmpVdjcw&x?9&Dx\Yw;іUɐQ5hu'GO ?RС*,Z qt4ymh0LFA'irKe9v_e Qʏ[OP,*-NuĈH%2Qu5jjM|M&f"^&r{KT-/\HyCGR#T Б-pC:B?~:7B%+4jҵ@A#G\glkĻevVU(FEtey(v_9p-7^$tey*7:Ԅۃ8=#Fxqpk2BjEU[[~NҠfSb3J 9Fm)O4ѓ5/=h+)#Z(yp'BA 54q[$#p\UDՍ3ϗYZW.#YY}CI)2HlP\I66={?/plz _&aYkr ^2^eaoB5cX2q"R2 Yc9tFB9% 0 JaN[x) X51m<'aɮ*A&,2̇}] FDmsFe6`)@K+hȹGץ>1|ISarحGT;nnݕ R3ߘDsi͠PG 3مk٥é'׌b6Mm1DMr*r&)m/;02[$NphErR# D7X/M;rߥ2SQ ', S%TV>|Sbd:Hz|P;;?UO?0[f>{"l{LNxh |pوS[:1<*krBGc0aϭD]e-eV=i5&0FC~^a2HHr@di(܈l+C4fd" lgTL:eBz譏Ǫxw *?e2w9Y?bU6)k%0fsd/! +H!IX*0.$SM_\S.(EW~|@g4! 4Q GK8"W(c ZlW%cu2|YT'V͗yt xaPb,Pj< ;@BQLRٙeC vk;*B1J·W82KĠPdr3S`3Uꧭ@!q6;֜qR崶Q~%({NND%? g4UhF5.yม7s?>:cw` S'&F%[,o1D`Tj(@ɨG!UBBik;J]rbŨ:jGC:\& iw9KMB$GP0&m3p Dp=>q`)ùjr0 Uw:ņ9 DJJ%p.q: ,9^^ƔEw$UvDwI={¡̾1U.v}y 4N#lw)QJ?2 mBEtHv:|[ԡݎ?#Ծg^3dqK؝hu*0+a -6H&sӜLeo0?c8HR`z6G_%.f6WPX֛8tv@ï; RSLz,i72Xv3ܞA @bv<1ȤuN"#½_Z ?TBb+}SH,ۿYJ/PVm2.,msn~v6՗oԊlU?u)9WK$J =mV-co2YϬ B1w@+lQ 0ptN}]:Xf!S$ `ߺxy-&!Q+_b+GMux.eĤtZ[]vPE[98v/$SQm%bhc8(4cWyrU0USc~m}𮜹wjҘ_1jqC>TժeL eN`XL8Cu.(Qк)0 Q÷kx.>#F97{ ^t Gdܱ,[3:5fAUhR]G5h=&‘%@V;=e&"srhsͿH>Q:=[)!YGs~xDֆhu}C{p2h }LXɐ`ұpD2vV5M+Y~FYyP,7?L}GP: 9ݺ 3I%p׎4U~C. E,NKL|Sa%݈> Ҷ k c$6m߰KaF\J eb9 XM4ej4-Im(W+6[+#jq(uO00ifuɁ]E_x\$MVL`6="]EwEjAJv c{ǧW@DB}2ml |.X˝d%]s.<a,Sؿ8q[VBtb%PF/t> $mάf}S\s!Ri,.ٜ?%2IC*UҭK*Q*ʍ͠˭h؏j6#*ݔ/x{u{bxJ`bHx1bۜg4Q{QCwQ$w3lxI:k$m6dkl#90("/$B "gHmgJPqX#<B&|W!?R tƓѡ%7UUSv3^+!Q֞9)Wxj) r<3SR)u ˸:_htTć Ϡ(]Xl"0g4ouq1v> lk* ) ,#$V(x0UD2^2=)$, 0d}{ *j OmbMeA/lˌ{ NEwxXP!^t j-Ā9ZcEh!w/1[B?:Xh|VR)Q)x3B¡:0y6 _qѵQz?M_n Tlm5s_;6P~gMJc  ǜn L`Zܞ 1 Pf6%J%;KBݒ8Aʺc]%!?Or^4<ŸN_I7{PPq<5ߺx1K2i^:(X ;]%3 ,͆+shQBIm;6a]7>\3Hny0vSl+ SO+6n.@8/JX%B MJg 4`1bhDނeKFV6ŽF~ 4_+\~ D]kE(79}E6M kȃG!㼞m߃BqY hHB~'ˋ7STN% \/w* RF02. 3< I}^;~ly+-Uvn1f]تk6Rvh:wp|wQ_.[C]G$S\$ 2jڵ ?n8$Rxŗ{Z|sB>`OXErcI")& F0$ܢOPf:7bDHJR{.ai BGGFOr‰oDi8뛃j뚚x\)D4A˃<&Cn&`tm@*S8iz ,O %\X*? {pN:%6̙ރET)H!zoeb1?ŭKt>D5Zn4 T^7~:0.^_p1OΔ>GD_k[ +߄ejţ? 6"ݴ>3nY\\l4nĘ D|Rg] \+xS -Ԁv}[>Bn{ h=ws"f0Zt*iAwSKO?!K@GhٚrcTy^KWf̟p9 G ē54U^!XK#[ ҢR rг5m%87t * r  HMF٭K:fƣP ![Icbx!rw =LeX=NOQʇ!X [[ !#5{}ȬizHw=ݨ19^fȉ\|7 [P;x~QL{ Op~-48H{KZqF `[B1!l* o5T01wZ8<=Q7='pa4r)ح+g9<;>3qVu-/ (#V,ÁȗBsZUgRinȷ1\Rv>-ܧqyȹ /vBocM{.]N5tŀ1.v,^fw4 {m#\?Z$ >[/4WI3"Ow-``81˅A]Pgy!Wd|US8bw%V KNϘDFЇI zV}a[ݽ_fqsgovr!H蚰vJ50-7oز +&YJdo6:0Nz~uIlfBP0k͋&:W_w qR^J93H !:16(>X;^nnN2%/P'pm_jO?ڇ_bn^om_a[Q9aOx&ypC>zV~8I))RA3͛zr>(Q!WG[$ 첔&{_: O̱}rl^?>S<9g7`JtШ =J-PMtqB\4*I$3l2Z~oq $QrQ$@3EJ$~3c`eJ蔫iZFg4FUEOBg mvvBʔ,BS8=_:E+ܡh%w֎ >}׬Ȑ9t!QPO%7{JPH  Sʶf$e d9SQ4E̮Ebb"EفobhT)Rl>yԔq?唸O u2XADn-Z$Г^^/Y\O3,ux{/zhip@; ,IlmFʃ(>a2R3q6FZ:J녉ާ>'&f+m)P}UMkمw3 *'a;d5߂\ڨSh)3v$[ZC>YLQs}#7qIGܗmp"!ꅪ+ogMܸHH>͏{0qبW(3M@qvQSdTJ'.[>&EMa23Vk`o8 s'= C3NP. AD7Ȍ=`dZT5uRl;@ h?Gt1=t*(;:C0 `l_T!hcX(h F`z]D,A Iѽû 5)-y]e"NNaz+S\tiU1D21);_lOcL1`uJpBxR"ꘜ|Oe ћыP[߳sF%Ns;ZD.WsѬ2`]&Jn;NvC>ΡK&6OF#@GTFaq$(7Ιg\Y ㇭ڷ;HLȣr*ĕmfUЈmb~!m〞zV0 u'G5YR9@_zuL^:J\9}2_/4/{mC5 ߕ.Pkr4__E;_F(ա p LJjڿo|8@HX:7%Ql"ϔsz8&բD_NLqS-uY:VF>g9H))J~(dDK-W */ɔՎN14%ZF3K>^:7 z]j%dt%;2#z.?uNO~Gb6$?JlZ8~ܻL'Hx&IDw:Bg:GA(:4QA0VݕrvIL$#)rpv-.zú`e'0}ʊ(}S"fd,o}?gP'hN| %rf)Q':bh_=އ3SMzviGGͽ,+ڎ?KlQuQyCA4;4< ۜcs#ERZ3]H%w5 <*oy?qe- kq8]Jl۱aMg dy)+7ZX=W#\d~nvkp|iG#dwґ!A|hjm\0ɸ(.ԝLzV;0ʳyG܍,+WԘIDqZb {yTZDt_"( V'ќeLQ5)lS }"/p34 |RJ>IQ.&x*0jؑ+^tklZA9 [#N8ySrJ \"M2@2H*.v6X Ɍ:n>DQ15TncYypLuC<3z4ȝFd07 dJ@K J}[ ]|%CTgp'2@ wP:Cs4Ǻ]5,6\4/*=Ax'=Dp_'Йf7\ZUE+7FM[0EKat.ɏti_BUvjMRjy7yK@xr2Pf*Uʴ0"k7'L}%zyͻ]Ӣo !B Xa/L 10'ޗ9VZԂ~\@">*'a{0|d7TGmnnF7-ӷК>sEenwu?yyژM1,g)bt{xxDFfsh`-UChkGc2ԼQ[.S%iʵ3Zވs} ~C;K%AoV} "tw-etiO*rd:Ty=k>]/W_KF.KTFHuB!6lCf#@Y4?7c?.Z!3ڰ!3@!.v I2 q>"IhaՊzF!\Ev1Eg3@fPj^ȳv0֟ZwD¡)APM9أ< N[ J]Dcxc @v)*H2eRn˪y,(ӑ՚(XSPoiE:$(~I2fSʭ&vcFbBI(cR% Dڻ"v#_U-N7rõD.Hw^>]N2A_j@N{i*2?}T&-J.R'i8NB1#p S kOLSQ(b蹿h'9|Dw.eBR.7| ,G7QiV#8zՑd!4e fN eL^pnF =fADIF: y(h 80CLw}n9Pq4LdFj6.cwur~k+| { pǽqͩ٨͖8VRcCA qqxi|e*m T Tt.颦}ϻsH8<:C'X U`N4f}#X q'1X,U}6d޴(2 U=y:}c$#ܲ=1M,L<#xyfݕbL}2VM*jt6ZDp17b:T-At58K,w|.x -fB!=_e.l>_5?=6]>4 c ΙL :/JW@R+[ ̀nq)Gՠ+k8&i{8a*:bm NE̓O<ˬbe; Bjο,(%gIU[g`C5cm?}@oXБoMBnW/4S=xom޻V% ֨b-lŏoK? TL?M_T3?-pYϓ {U%(E"G72P.-* ~l..EGyhK"Qs|ҹtwUm3&22 TdG:1JtԞ/^!a eZ1 zS\6lQҕ W~ε)fA~mآNwu|`;4hG]IdVEi':rpiTg y{ǩG_*;̮@;\S;z o mWzoM˧*:-ڂp#ڗ7ڝ٠V0_n~kb !:SQeЌf*_~lM"*JQ_)R+m? &<5X< $̥zldvF,IF@Ƣf9bɵo?FzoY_:kRCJԆ4;^ MhCXǛ\p߸,o2g.zx\{1PgX+;bJݷXO) W<!wqH! hár:6`j0hw&vMS]oK9Hc#tZ+dV]X3U~.$[c8^.|ܐ^\0{n"p9_ih аx"JDEE'C@eK n5'ZƧ_C:P }e8Lsac eRTJfGgg敉\Tc~Jv6zY+5i< $',U}H50}>k9b: iTF#}b\ RrCOHMrMa5_`VgZu,]`n~~pi,bH݈ %WQ;F=%qv.b;fPVsm#jHb̫o hT\{9)50e.#1 \g4v0sD2k"eB_m}ӧ7(Lza h&ȪwPxx}ƭwj xm Ko2aa|.ZRNt qQJF #E+ʞqr@CP\LO#WDX#!" 2K)2SJ ["ui]~'>,m~^ Ly8Y&Рo65N ᤔj(F=K8űЇ:՘7ztSk۶e(d!6T_jrhClK1j uz 1۱r.I6ix^ 5qŵj`@o0}'ZWj~a>XWOA UWV'uʿK\bHٍkC3[yU!qxkJi1K!Ø_P!Yrf(~u++'s\j6N'[B{^BrDV,.e 2Z 7]ܟ?2G\{P,^R҈cA'Q*ƕ3~%*ar<SS4 M xȗ@}DBVHہzw?H9f.[0u}֛_1o6GdShj'JA'S*.s4ѝ[tB{V%EF>;ᬕI͔ Alw1$$!0&۽o݊٦#R]yryA9*GXӶ[.qw@l*M5fc h21䌞x4%h^!2"H6 S#yEqgCOb -U8/tْ/;<ɰjKW2U،ϡ67/="uh]L4Tay/r|6+݂|?$ɱzA5 a3GBN8 |q]|kqTjp*e9"1;tq84rJysRK۔!o-Q!㩳{S! |3tv:)<Տ]'z+&nQE[d&r:O 0#x)wM$ g888u/<,&g(ɍqz&Ag9Z#|(KWSyEtGAgG]Jj1vxzV Ւ^J; iށlriA~c[!ezxcE}$$&bX&p)vR [ \c>j2K? }3- $M6 CM ɉZՋH'빃€7]̗^qX6*Ěsfg6Ghw¡kḀ1J=PKBOB_`Q5=}sE" y1latV)y#QP^"ɋe\ybcdSDRJp{6~ռKDSil!'ùw5F")x\I<ܶsFmATj]hGBe`; gtI) eg?U]y{*4ُ#R5SؖVS jRe Odϼ/V#8%Q )Ag,_Fbg1kK<_I$NyJ*s-)`DS8)>G4fTBgumV<IFTfC[Vٷ7l҉Yy:uQ?ZJ!si74D(8x AQ]XKj8D+}-䴪QM.D/ zM#^tB*ք R- N={YZޥ\aWsomv)} f>J SϨ7 'ŢXZ?ͥz(z'#,P^)H? & I'|,SCC! ",O$X*֝ to*U^>.+2r{;>Ydhds.+\V8#ؚ(=ث W`m^Bvn#(|v| NKhG}ojtj -qu_B|<7m?0p^6e O*_X>C;haᅢW`b9z6U=U/|&L]N3 Iz VTrr(]sǒ9QQ9*U_9Qʮ2.́kSq؟-r:U yWI`,`Թ* gi[ Î\,o<,_zck63L3,MeB[E@~x4uE cMb2?T}l{7\Ϋ$̚ܛ}u"ĥD_!4`L0y9ԗJI;ݪ5,UAse7 9ϿŵfO 3.r[)\:Fpi2ܱOw&SՖjJiï+A pQ~EHt8ʍko8X6|sVǿy]mc$~ 0Pv0å~Z*cb?tayNk޼iG"cm^S71I)Ma!6 +D"!vڐnשUʤU:/?'VcmJںtGM,$trS\1M;L+}G}f\7wiq_$no3siT֪&/Lbu匄` ;QڂklczLUqf[u$CU̱i W-6`}4W1ZL7INlM!i̾6*] {->Dq(N>;C:\Ds+)[R5gDvf-jк p ѽÛ43６¯ǾƑ Kk[K omv&"O]b󁴵~A9PZ]Ȁ5Pe>:8kR Pm2!rKv=2Hp^XZͯg"}z6w=m8yd_h0:#ӗK#A'n_]o$ymfL:. ɼ#[H͂|P–*}tبP63/^'|w;LΤ.[ȳ7|7LyInkj|-٦^A_^#rg:MlDHw&,+g*:~/76,**\%mԄ:v2els2IOطQ/]Xf~D"dg?E0>ŞyR;,.(QZr#~S? Tym`O QgTdؤ9}Ή#|Ȭ:@RB|1@6˺l9&| 'IG= :9.Eu(=c2%%2!π;3uijy%@j|I`R~WXH__&_$xO/<)߂O%wE Ll~7l0"UD 7ym{N sMW#Yp[!fgO<ܡa˓wZMj P|zK+o xB2SaYZwsKlj`~LG٩BX< {1sɱd]q3>.EĸSݗ3)DQ6G:}0{tS &lAS.5Vmhu ѯl&Y}짝=!vЧ "<=  5JM |>{+6YQa@ߛ ~2VRI"w|׏M;- e)Z?k*]w-qXi痵&f\l[ +ƒXO:4' `fjMN\v7seZ)n-n'$lYoW)z48$g B!$_mDlM^}"LY).3QT8Y PFŋXS@i#sBWf|Au~W&k%+?t "zx/όŎ6zeMXAia¸&FO`}-9E?~۷;ķSFQ#B[9^T#sRSlLVK,8!'qDE<[鹴*!=ͤ"J{OW*`c5꘏0)C@\ tgl>TD gХ'5vJ>`O"cw^փE  k]Ha۵f# D ѷn 8P\}}((ҋCtq7pAD5o0NPof TS ]*HZkOy!NJ&|SD?R,H~3Bߓ+[)1>clF!iT*N\M`QɶP՘b ls9o~4yd FJo+Tn@oq~y H bJ-os+KR!5`e h0uYr//K5N,vOIRm'QU{ߘ>*/| 9*u `(+FWaKBu$D@2#wnJ|3 : B6ڂ &fPĺZ2߮T/ب?2βK_ !(kZr/ ʀ*/}_ +*`n`\~eR;#:rAM.]nAerʳ5GĪeTyaK%~Ojr R!X'5ߓ3[c?T{OZ#^-E8̚4ޖvLgR 4LpAQ!. (c=# Y`' JN}*󔓑J`vW77|2 ڥWSYsNMAN Gu=]0>!l}~%@+&q9)X{)ٰO%)iFi Е;"(o in 2Wi"OZ#>unt0 &vm:GRd.l @" Aln4W~P&3*M۳%҂+)l@FT|_B ƒcr2MX:nмbzMLYF 3D'h}q;9>`֏N>3&}JWޖ &XPcȓw";|[g~0b(rH'ʓN6JOHD8oי3{q)RX?s+e"G7-H=X8 fA7C:qm-5eXqiwFF,_@zRҌ}_/"5LIʑ @Y }qѿM SYmF Lr~wF hzXn;? N.*oN?B*`N :"&3 v.#O3i1⵵ƕX~'ez6{SMA.7Vv_s2uX \_;BtƓQKuE,"<7fa(&Mڂ :B!ςZ5zi!Z$e „#B|SBtl)sVNtݐ}.8Jgv bN2rB]_J/?*ri4x?d?^RGx&?ܶx_ jV5TsgLo"qQ-=|Y<mǸې0ͲTf }-dw@+(4V0zXMoG =7me+"(zuuKUue!=B,Tɾaz!.e4^~B- /Be:4,l+*6^ac;ka}ݿG [Τ7%>m;zi=^9MOhC4>\vm8dW#CEGU,̴@WqSuN'GfUN 뽠oCcDb 4o浏✘ewR/L2#1)TAчU T{_^#{ޔ9w ]YȍYt{Α%jVJR,v#Vdͥ*ܫYDYF:O>H_ű׺4_H8\@;-l"cKv) }wv"JoL!> I(56Hv cs2)ҮCGGNKcOLpR'G0Ym|8:wp\):68P(T蟻(ބ=Pcwo-nӃFȏܢL'[T͎_ ߑ G#!l lOX,i ۮ_&Twՠ~ԧkRM@9w*/ˡ5qxVAB2(_i'] *NJň\& _^Rr0D|TjZN,ɓ=4-_jCWy!=U6@?epxs\Qg&sK:oug\' ׈vP6v6,s߿0!)P &ǣy.~(V0\ӒDְd󊅈ʝ8w$ŎiM瀢+VIǢBy8 |ʵ&[JXZ3mR18i pkPIKemhxʌHm)Jx[vPY5 VߋZ9vVǟʖ@ڒϬ& D7z=}Bv-;Wzk.s*\hG_WlPѲ]>NzF?fS,š05򤻕S|8~PzAN*ݍm:eBLg 5+yC[d Wh$izD3 UYt䅧'|p&ƳU=Fpځ]lVk9\wimzCxŚ)oZsZm27)K!/+@Hl=-RAϦ_M92̚!b NBX+\wK)7 w0LJŚu[sl!!EJρK ;GǾ dqLOW?/\`B#37+u2U-/v1x\;m]ʳ'/j^؎c+nAEKNkZ2_`dIP#ȓA2WOgYS=VAp>EtY*3dMKQgG956 #{?.M;]h7 0lcQ/Pr[ߔ|M=g~ۼa=2=ꋿl0ZmMgTxٕ STeK$>'\e>՚'R0d@ۄZtJVS,hmdf5#8%ns|P=wjm s ^E _\+[8<'c0=O$ rJ”tƉ|> 7mqȽ3l1|8PA0kjb^׉׈gQc'9<$6֝&ԃ0iC2t{j&9x4Y\P2Hhz2qeZGd3'L"֠`;e 4'Dk M)89`2}Ə{ z^tHB]25xf34ZmޠO?x1,u@ &jَph< ߕJ$VP/5bDn_Q=C[M:ey4O 8FH lìqL ti^^etTjW8ijPpZL;O<\5\1D"żJR]:2D꘷ yOGTTⷍMs'Ǵ"Cz ̚h~DBrFwXBL<,ݹJ7t se4I-m\Iz ŀL@Q&hVJ]3̘bܳ[ Iwf33O' Vs?EhosZ5afsP]&pbjEr*d/k}@\& ޡbѲ%hPe0՝*lf3EiOM.B&wWsx/eRF^ZT1WO61l¯!i5)M`Tm8բ]4iz",[Ǹ'[3F[*4V~ma{o.n0D[*Z8%VlO{bH|p;/̪ԜzOvM9)R) ٌi'̥0JG65Bclr | S; -UMqʹ#Yf!pԕ3Jv%AY 8sV鮬jIJDv2I>O* PvfP'Ƀ)3<ҳ sΩ)EnʷHHq\N?0DVwd 2Dĭ͑6sr\s}G0ek%(=A,Δ恻{=Ϫi%fԾxlG&(Qž;jXZN"m~>EWJK{nR!%?pp;fTB8>D]9\;Iî߄[ -9^$tz|sF3c+5XD.HoXLGonE;v*%NPq}WZu }u *k3!RR!v}_y}D]`ePņTa .j ?&㺡 St-<hSnm\׸ _vaW1RQz1{gReUH@^NNXZ8?UorGJx#yޝ7O:([[&DRZ~+LӒOՉag #=g~Oʨ)pg"r_pnV7>EFC ( h.TCJ؊%2ůBU1桨 b;N^>nbw<3)yܓt??^7$ ۍjh v`5#;^, 3Lc5?rE4֞0ga}2=59>Rv=dw'oQ$’/BNӓ]l_ϒw`#/t$$jBm/yU4orkȳ1<^!*LWiӾ|+KQh`&XIJ(mV2,"7vu"8XKWW6u0FЕг<~Y)kSU .' 5l vtLu"|nVAM!绗4m~8XPcORTdwRT622[Y X  !VWL+ouW-~*y0bvbʇͯIJ +ד! T SSϤ"sdTq#Va\qFgK2u-Ry.989a=2ZA׶ fOMIz 0K RBN|Oh@q s\-Vv ,bi&[X?5;ɧbTAj3h=z5 _4\5 E5j z_~b ! Z+ДUɴ G_s]ͫ ( yUj'?Hm)歼JI@մte⽸f6cDaЕ<)Av.F}rL-qyb=sQX/b!ʼlR^(cGjY|*όD b,j0wwHPRbs13'&+ T 1#YpE0n*cBei5=jnĞ+aL?< 7IA;Mȱ>ѝ _#8{ sɎ"_zvT"0+| rQVUHOȇq sȭhl"o!ۮܶ(ֹUIk˼ Ⱥ f׌u"^23}%VώpT](ׄb^}{qLi0 ,:K YlȐSOY(F-nY.wAd>~-r9NVg_CVjPṪErr~n2*Pa>l>iY᭵ ObBS$PŁza@J֕yMM rdx$oDl0qYU?yҠy/ &ͷ;lj$>C1e xik^nw2G:$Fb- O.\D>jg5/qunȲ%甆hgVo͠BVi]Vlŀ>&R&9DƉ _~O2夀V'MtCgk=r~ICʼn(*2g [0]ZL:2>{ҴU {sFbn1_ؕ0aئ䪭 S0+YVFW-X/5cϏ-Y3貣XD-kr&] g#[De-ꕩ@t [ DowF'gZ^sLj8n5*Q%LiZ=yyM-h! ^V&بCY7jG-H>R]KŬ3C6 ɾ1iz'q}aD%; Qw 3oD~|qJ@ן[$(^Gdp͒BK*OܶkMF\: iRVs]/i`>]ܱj؂HqoDWF30B;bc|ICS=;մn'4F&oGU)%:ZhEsC{yv2ܸ(̶2 ^FSkJ,c'I 쮁;nK[đ8<׆mE u|`#iOfJ& #7Hr]z >d:qϙXL14k(]_0zG)?氘.L0'#¯ĸ P'?k-گ^-%^efZTCIQeue!=Ll6\PG2. yIE'?7w# s !A%C I\?_Z?&3|͡2"Q#Q_J MWu(UE>^ݐ)HmTN+_  @vxDa)m o(ٖ25ТH囋EJ/cp^qN''r3mjڝDkȥ,N֞υYϗ"M/ݺ.+=QŤI\LEp\}nuid [<:5Jj"AtvqYO/-@"/@>J:Y1{(<xvyc\VP;pYY[qw'IӺlYѸ(m88M1f+Yv> c+J!/}H‚K;\[=I9g j~ F,7na/sz"^OKqA1M!Ah i020 x`B[p'(:q~}(Vm=11[~(ƃ%k O 1cE Q£?<8_PX.,EPq3z%mN*rFC%-'B-D1^q -%h92GJQ/nXGMqp U_*Gv_84 ,Y[JcLP%nc_17֤K*6+8$jk#gjnZ P] w׫2aĖEvG|>p_Tm#=Ry)sS>ˢ׻D27AAW@$rܱa띦.Ʈ|5R+$NJ$'_{gܑnf/Z*"sM7@ͬuI*$S2_4R5SЀ[GZ*9ELDo0nlMzn rE*b֙\9zńc}CRhW$L}ʴ8Rm26{~uxkaT>@L~˲YSshgv~)5H?aod$Ӂ@EU"4=mUy7d0Ge6hm _vЫ{W1V\ClRh~^刖%ڻMiKR:T̤-"8qfkQctkOUk?^ZFlϛm}T}\8G†_uEۑX10C7 nvo(RHG6>.Ӽ}& D@X +>埏vi|8ݎVCp;z aU_Jhz gnx$'khG"R-0YZ;Lu/Ru"4 &u14#Z|@a_IA;s ʨο ya_,Ϻ(>eڃZ3p!!ÙE e-f7WaE+qص̬컩H[;G_$5Xt.ߢ{S: #4],W33z4,eyKGp2?>0*jqSjl@thΣxhsBU[`Qt @↖N!:W-I M) q_EΙ5uڟ+K#tjҟ'c8(1[DT a=}o=ov԰2 ZlcיDn*5bm^}-͆ұviƀpnz"ogD1K+3Iy1EM[-6̎mTH*@dM{D X׌pm.oSFU:wZ(P'E `}a$e}|YY6!b'-ɫG6Yi#|n>ϸdBB,+_W_5?=k*Q mJ}N`8!2xF4 Ÿ[6+#|>,TTP--Y |m E1.N>J,arŋLrLPlk4Ȭ^Ru^CT/>奌pjB2#o[sJAHٮцA#*Ik yW%a8DD+n5By3 !la_IƏy}0bjXlH'{b[ç8q7rquIKu^ .qBY(Yjɛo^tdiOLĂHiDy ݾ y緩gRZ;l]  jwx/ 2ePloAyGXa_Q[YÍB*.HbppŅ 7"nk.NhZٰV|`D2]=k_ۮr\Syy'y * mfd~ݻ; U&&k *5XwW'+4 nd###=7;v/ݲ)ȓ"mɂ{L;ڦe :.3:kN58xɆ.8-o\PnC0',HbCj·vX6j4!Dr_2,o,FAҮbl[kByI̦Bgƃڦ >ǫJM3?=rTJ; d[u\r!``j(ͧI7=zoG#;giB.9ěY,Z') ZةkU\+^znhiԑON\9mscB]UXTVYc π|rʖp._'mMeFxiē!&f u$:MC{F9΅.0rqjmo-ߒZ1_.\I vލOMKˊ9:/lҶx3ofQɲ,#oy@H9-Hdh sxy+lRX/i#} RS,U, tNGP }`knFIXL B%NEb2U1>\}:ЖƟ*Ԭ#X(1CR[q3+,tMP.Ru=œhW˥ Q;k{fO&/nXF.pg9ϻ{[Wb\I9Q c i_d-Բjv/XA1!<&H:e|_QJQ;2hNhܕKb,פ 2"4h$;|[ڪcW`-1d<4Jћpcn%  ľGӻ\Cpw]/m 8ѩ#/ja!6Rg9i'8f$[$'谨k%SvKcl\kg̤ ?ٱt~@\|9B>Gk9*}c<*]5p5- ֹZ8g&ZRS!+oy]G8{q=+ \5I-"\Ļa\V° /փ1G&ԡӉ {<su.5GsK}/y\ *)0曬VГ@55T%fΌH,5>/1跑n]Ss5iE6 l1ץ F@Zfg) I(SPNXwX]6꘎PZb 7ˠb?7,# v8뻕2:^H4 j|WFE6+z/zB9y\a=Ҝ)0%&Ν&l pae&%qjH[][Qe"f.(ENRĿidȪVu܉Asښ̔V*dj3-r)e4"^FvqH*'ta '!6/ uO7ZՎ9M6Zd)YWofu@F՘D+Q',aM(>n;If]#nHo4(Kcs{AR*5e#Ѓ״SB+Y#wZG1v xs0h0R t|5 BgTM><$Nn86Q-O9o R%/8r|6?#)"(T.)5{{MʀK4ۤd׹eQ5E~ۥjW}|\H}dյKd9h>9Z!RlLdIRe@f6_8ROc%\~_hIOh<0`9ח'fZrt"ѐEj+iEr)mT6~Y(бCC~`uGL;\פf.f^ Hj# ͋O햭py&OMDƶ-9[GjͶ`5i :t/Md\ِ'W\^ ?jWR8?giQ"EgvHL4霢!"#p 3ke壷;wL6^v f]0;Dr10'\&_&ztx޳W /DZY 57<=WWN z]ݡMMj5ifGqd8~2w(VH*ĕMu +V_>#=v)z}{y4>]Ռe:Gʔ\4Na:P=&j'p㌧Ґ_!^0z@-LAY/gn X;{-Qk"jmȗ3(6E`oopAJX<4 ٬D1 jGf%Gf/rNً֞嫍kFr@ 䨸E7$x,210*$Y#TS7rCU6=U+",gجЊ-iJ+V} AF8LC OCt1uFfͳ=nA.8}+Fx] ?PB1%#h7-C=΅HVoG$Bxx|9JOj$9:!?{M{{`P![*U>jl`H!Jmeް^ v#Q+ l@&f„{Q$oEhUqECq! 00H.?rzJ0 V$}5Po4|