kubernetes1.23-client-1.23.17-150500.3.18.1<>,fa0p9|?QA@] N̤eߴj>==e],w5o ?ʯE!OU\ | .JbҀ%%(`U7B5T}X")`MBw-%J㬋B33a#q)n⡳/bRT^-k`iV`n9~+ޚad*^VPtʃ-A]ï=G|O£;N?Nd  . Flp|  4 D T t | @`t(89:FJGJ0HJPIJpXJxYJ\J]J^KBbKcLdMeMfM!lM#uM8vMXzN{NNNNCkubernetes1.23-client1.23.17150500.3.18.1Kubernetes client toolsKubernetes client tools like kubectl.fa0h01-ch4atۦSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxx86_64t ;,^A큤A큤fa0fa,f`fa0ccfa0cee8f7221ca5891412856d29653f0388b006cd304acfc11d12fe80e6d5b0605a1639af1c94c39ded3a781d1f82c7075b6af898b7bb6d284ea0313278568c542318b6974720f4fb31199e971a20a4a21cf3987708b6dfa6a0a1f4775e381b970eecfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30/etc/alternatives/kubectl@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.23-1.23.17-150500.3.18.1.src.rpmkubernetes-client-providerkubernetes1.23-clientkubernetes1.23-client(x86-64)    kubernetes1.23-client-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives3.0.4-14.6.0-14.0-15.2-14.14.3ff@f@e}@e7@edd@d6@d!@d!@ddb֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgbwiedemann@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comrbrown@suse.comdmueller@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.com- Fix for bsc#1229008 (installing kubernetes1.23-client also installs kubernetes1.28-client and kubernetes1.28-client-common) * update `Requires` in the "kubernetes1.23-client" pkg to: - `Requires: kubernetes%{baseversion}-client-common` * Remove following `Obsoletes` from the "kubernetes1.23-client-common" pkg: - `Obsoletes: kubernetes%{baseversionminus1}-client-common`- add new security patch to escape terminal special characters in kubectl output, bsc#1194400, CVE-2021-25743 * patch file - escape-terminal-special-characters-in-kubectl-112553.patch- add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin, bsc#1222539, CVE-2024-3177 * patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch- add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793 * autoscaling-advance-v2-as-the-preferred-API-version.patch- Use %patch -P N instead of deprecated %patchN.- Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds- Security Patch Fix for CVE-2023-2431 (bsc#1212493) * added patch: fix-seccomp-localhost-error-handling.patch * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Split individual completions into separate packages- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.23.17: * Release commit for Kubernetes v1.23.17 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 * add scale test for probes * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * egress_selector: prevent goroutines leak on connect() step. * tls.Dial() validates hostname, no need to do that manually * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Bump Konnectivity to v0.0.35 * Improve vendor verification works for each staging repo * Update to go1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Match go1.17 defaults for SHA-1 and GC * update golangci-lint to 1.45.0 * kubelet: make the image pull time more accurate in event * change k8s.gcr.io/pause to registry.k8s.io/pause * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * Add CVE-2021-25749 to CHANGELOG-1.23.md * Add CVE-2022-3294 to CHANGELOG-1.23.md * kubeadm: use registry.k8s.io instead of k8s.gcr.io * etcd: Updated to v3.5.5 * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes. * kubeadm: allow RSA and ECDSA format keys in preflight check * Fixes kubelet log compression on Windows * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * update structured-merge-diff to 4.2.3 * Add rate limiting when calling STS assume role API * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.- Update to version 1.23.9: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * Bump cAdvisor to v0.43.1 * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * fix: --chunk-size with selector returns missing result * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs * Winkernel proxier cache HNS data to improve syncProxyRules performance * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8 * apiserver: printers should use int64 * add missing error handling steps * add missing error handling steps * fix image pulling failure when IMDS is unavailalbe in kubelet startup * fix: exclude non-ready nodes and deleted nodes from azure load balancers * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients. - Require only BuildRequires: golang(API) = 1.17 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.17 minimum Go major version.- Update to version 1.23.8: * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules" * test: update graceful node shutdown e2e with watch * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.17.11 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * Enable resize feature * Reject proxy requests to 0.0.0.0 as well * ipvs: fix prevent concurrent map read and map write for 1.23 * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * untangle fix with healthCheck feature * Winkernel proxier cache HNS data to improve syncProxyRules performance * Skip updating Endpoints and EndpointSlice if no relevant fields change- Update to version 1.23.7: * Fix requests scope classification * Update Go to 1.17.10 * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix OpenAPI loading error caused by empty APIService * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * component-base: replace url in rest client metrics * fix broken find command * Allow KUBE_TEST_REPO_LIST to be a remote url as well * Disable JobTrackingWithFinalizers due to unresolved bug * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6 * Correct event registration for multiple scheduler plugins. * kubelet: rename closeAllConns to onHeartbeatFailure * kubelet apiserver: be gentle closing connections on heartbeat failures * fix: race detected in TestErrConnKilled * Replace hardcoded kubectl with kubectl.Name() * kubectl: fix hard-coded value in zsh completion * kubeadm: add etcd flag for member data consistency * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config * ipvs: remove port opener * iptables: remove port opener * azure_file: try to get secret namespace from ClaimRef * azure_file: add namespace tests for InTree to CSI conversion- Update to version 1.23.6: * Update Go to 1.17.9 * Fix: abort nominating a pod that was already scheduled to a node * Fix the overestimated cost of deletaged API requests in P&F * omit enums from static openapi snapshots used to generate clients * Drop enum tag from certificate request condition * Addresses the issue which caused #109115 * Add test for indexer with multiple values * Reduce number of pods in Job+GC tests * Adjust validation checks to pass for both client-side and server-side validation * Remove finalizer when orphaned * Fix: Clean job tracking finalizer from orphan pods * Add test for Background delete propagation * Add integration test for orphan pods when there is GC * Copy request in timeout handler * kube-up: use registry.k8s.io for containerd-related jobs * kubelet: If the container status is created, we are waiting * e2e: Wait only for the service account * e2e: Wait for kube-root-ca.crt to be created * client-go: update generated * default kubernetes agent for generated clients * Include pod UID in secret/configmap cache key * Move kubelet secret and configmap manager calls to sync_Pod functions * test: Verify that nodes do not transition to Failed while ready * test: Add E2E for job completions with cpu reservation * test: Add E2E for init container pod deletion * kubelet: Delay writing a terminal phase until the pod is terminated * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 * generated: make update * polish comments of non-enum values. * unmark non-validated types as enums.- Update to version 1.23.5: * Remove apf_fd from httplog * Update Go to 1.17.8 * cluster/gce: update konnectivity image tags to v0.0.30 * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 * fix dryrun when ca file exists * fix regression introduced by PR 100320 * Add unit tests * Fix nodes volumesAttached status not updated * Fix default config flags * test/e2e/framework: include the new control plane taint * kubelet: Clean up a static pod that has been terminated before starting * Add an e2e test for updating a static pod while it restarts * cronjob_controllerv2: do not filter jobs to be reconciled by labels * kube-proxy: fix duplicate port opening * increase Azure ACR credential provider timeout * Updating EndpointSlice strategy to retain node name in topology until field is set * fix: do not return early in the node informer when there is no change of the topology label. * /test/e2e_kubeadm: adjust label checks for 1.23 * Ignore container notfound error while getPodstatuses * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 * Add PDB selector patch integration test * Revert v1beta1 PodDisruptionBudget select patchStrategy * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error * wrap error from RunCordonOrUncordon- Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4- avoid bashism in client-common postinstall script (bsc#1195391)- Increase _constraints to 13GB- Restore & rebase revert-coredns-image-renaming.patch from kubernetes1.22. Looks like it's still needed until all supported k8s versions allow us to change how we publish coredns containers- Initial Packageh01-ch4a 17241459681.23.171.23.17-150500.3.18.11.23.17-150500.3.18.1kubectlkubectlkubectl1.23kubernetes1.23-clientCONTRIBUTING.mdREADME.mdkubernetes1.23-clientLICENSE/etc/alternatives//usr/bin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.23-client//usr/share/licenses//usr/share/licenses/kubernetes1.23-client/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35296/SUSE_SLE-15-SP5_Update/d46d6d7920f61cfa98dec478e009a2c8-kubernetes1.23.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/kubernetes1.23-1.23.17-150500.3.18.1.x86_64/etc/alternatives/kubectl' (No such file or directory)ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, strippeddirectoryASCII text5|[ښutf-84c42bb5da3320f49eea55f952a87263974767ed8e197860d35060762cba64a3d?P7zXZ !t/vg]"k%]{~msS$(Zz`>vj&NqIy:9] k*=~G0-)ݥiP0;§3AUZͧgL\ N;1_jGPVUaICĿHܱO]+NXιsG@d_Рr*&jM/SkE3Za6f,ah7L_]|bæч17G!Bh%!T!0 ֚;]%l%`@}Bs4޼FҊ&Lj]/Ăm pS -[a 0޵эںU( ?Pܯ,8%VD@ }BNM>>Y揞-ZX4V]pnA Og֯#|&]_u]mdyZ+H=:`uLݺC/bEbhu+ãLp 5+2%Fi+ %Lh :\mPj`%V'#Lzw&D(y PD)1Brz>/~Nt;ꊟ8vYʡcq{q5@+kAj,{#ANoI"W#KG z@$!x偖R/}*ZS+ @t׻i7LXuJ6>f[?== v*g,[Xܶl}:=2A/5y1"[k],-| m8[0ye.fyMM*"##NER Lzƻ3=COAupo{}y ^9o K+P22!0k C4lϋ(٭+!wג0ota~HMTl~q9]yu,)\ Ya$lch)ݬ+ry+Nd:;txzT]!S3hɡUYXycs(NH,Nge>~NoS+d&?>ؘaIH8'4nBEJSG'Xs އ,sNEE<~1 LqaUi!te[8A0΋ HϖeykUp˽NĜ?Ĵ1wM໯7S*THҌ9#lE1LYGc9@NQre6OGxg ´x`rD;!(G't| Oz Hk0Î 9Vpȣ<bv ω?(悞DVw}dyYC xjs&*q"}MGWe%I"O.z~vO;"ngY+l.8" uݏ#"w/$rndU*AYA]"4CbD%M'HYgAl®ĩ.,s㯟/Ǟ=OOJ(J%`q۠:lQP=[t0\Q}Л5` 0bVh:ujƀe{D:gF"}aHEw2wg z}qK^|l ڤojh OT#${f6"޿L}f=yͺ&p6u94{ @{v;p~yqy2( d1rD'Sh:Y{#/F(r0E³v`3 T5z"mY( 81w)ϼ~Ftͥ?`H{#ìCKɮ&~n$e}VY0Fൖ Pu  v8)E/*DU#$4a'!bYq1ʌE0q#J<' b6)Q:  1`M4<ӎwF㈍q#x7ّ*,1>zWƚrSoL,ieP=:翼FRť/2H(!y/m髷)k}?&sTG/ V jqw홋KUg ;M^ NLVGu/\_!lSnW㊦Ko,r Z ; + F _AdLET'qI[H9s.y6;E,}r$R= ѕUR>Xub}iv_f3%%ܩ8eh XM[-.(3 ~n{<ZcfPZH12n_]ՁSfLm_7j/ uTFF\Ѐ;aQ[c3۷[BVB\2N1.ԧ%7|3t~1]bU>ht92iOP:PSB,oEn)St!v-ELS+3C)on'hxH|3f1c*{\0'릦Z$ԓ)@:_夼 9;ѕ@N~o(hظMsEw6›c(QW+bsb&Ugheǿ#5oJΐQ '/ 9fOq}oTEIghN֭|JDThMaؽv;njUNVMpFj٧4k뼀ַت{3HWsX@OM8!wRLup:#LY*HCu6>tqm盥5Dq%M=}$[H|9:!ޤ/Z%9dO*09?:ތKEFヤ'ȍ,C2E^h_"*+~m0jeNIBr``|4C s2)Hʪ4uG~yKp/]n#Yרx'Oep_Du! #+cHtY&H"/3Dg84]}  O}4ËUSCX$Nyk 񶏥xr*u%!*|շ, /VOv-uLY7y@';0=moXc({Y~[2_L.%u6U0 .%hĠ-G */̪#%)H,NF녋o2hԌ'a1Cn;8C}Tavuȍ@BjJ Q>^ \\eE9K MsqI*yےхW_!ti&]#ڗ 0Gc+}  m6nxm\H?lEc ю؟Ta;_"7 $>,E eMꏖ! 3όyaY{!֖9١_"Q|ҫ 2(vs^?Ֆz=Kczk,A|Z#asuTV=ƐDtPjێh6ݹY'j/tM̨ppMG{ݶ~9PhXc?<}.h $z3Uq]B˝9mnXA$&l;n\ HL}D$fu$I{ޓ0Fy5O$^H-^ }|LLg(a]ĉ|!Frwu<"!b 6ٝ^4)9oOhr-ZVLqS QwCDF"̒"5iQhut~Ih-^)XqVD|ײLLtƍkj5Y#<;e-|љSr݅$Wn"PuhDaRDD\U:+ʇrNc@i gxWT*a^PtuӺ^Pvk;by@lC:TE[ܤQ?% wu(Tq~X0YvtȠ|bf@F]Zi',&e#yϮ$I!0=љ7BLj':v--VցL|e gYIךYC*T kJIp-rv["J Yo)U"z;:eh4ߙcċVFuT~fe EYy6eC(1%1)ّ;sNɖD*m&^2ٔ Їp4pmGGζMY9Η:N!yS\VCsgę-KQ"fOWs/4!Q䐖lY!TD!؀(h &+qaAYmԜ3s̲Pqz .*oVp#`E:]2XVw^CT;ArϹ@hfjy\NT$]96Vڨ!1X9 xbhlNRRŴDLG}p2QZut5KSw߯41m$)h;" 1)@ qéf`B yt:xϏ?g>*n[3O~='UJP_q4Ar )g,=m.NS׏:VcMB|(k3 $7UC2.L7r7<Aw$."T1)홲bŊH?"?6GeoǼ,0> GsgGƭ57U[FK)FkF[eτ r] >{;ngMTDCuٙ\;WDAfԣmLj8P%q}|M-QvN0<уaT4 % SelJkZcc%Ijoz~l7ϳn'g4= 3X(tb]ǍI3=F8)H$lStVge[ n I?;?P}r-ҢBb]3TЀp 9x Y~l>]+Bj b`k7B\&n ehgsxW%rIl~gVq%bЃZ=C0*M@ gA"]LH4Drn/'4D8@dj!swakN\\3_c0&?e$r@4+^q4EHmEHMh8ݵ0=b:f%<:gvg 5FLHB{4?>gsL{RXS-`5Y|* Jh縌. me&]2>=M-$Y^ǖ$ZS[ O|?gK:֢ uG-p:iNe.psK3و"eRg4[7Νl2y1_EVL6 !#J{./249"%,[n]}[`hcp34qUYr&a}>8l:6b2~gٺkPR9}w#/`?64ikC_.&u!!U!ı;(Ij+nfTQ#@ NF's)KRma_/1kUp1PҦ7:@HsKa5u/U~R4 6s_UDzTpCm5sMo:{#2 `(.wvĴ}%ih+OzGtKAzj4]>-'ýbH7 RR{ʔ+MzE?/[E9{)\S@?!]f bbwWsnըUurр4M 5@5Ib/_pqȨwx ]1luEqMx^l%sИB C33(Ҳ!/*zS<PK}D *glN?41L m,6"aTtڮ<Se^gȱ;3(!_Q'i q+̜V{1ₑi8@݃VlV|0\ꯡ&a-S6j7^*Y=Z]_=҄ `J1 H%j^`>s@ gVb %>qW_C7h%FQ#Bޭ~a/~zd':ҿ:@'q@Y aF:_{+`7y^Gz!g?լxdF3[ɬ@{vJ?&Hq&F E 8IDkZ]3aP?Ub=.[ck=qmݡ1+[6F_Ȫ5HO M;I#CTVe8I`Q:h3EF]0Fxʤ;u1K@g語&vj*a~RGtJ&xF^.A[*mKsSf;y@jzr&hWM5ؼ.?^2I*\Iu QD!q8EwSe^.ꆏA! t'<)Vk>L>jZjӠ>es7jx,(]uÅ VJd:'qغ!Ԗt2I_{ePQ6'$_-Jfu)zGÀsM9ACFP.5ϿI ?-z#A(,xd_p:@IQ W<&rpicS\TV25&U[nK4`J6+'2CYfe'0ܝD,ݼbwRy+z"ț"IF\U zc? ܚ @!_âMD~{ z#kMGq[aryIcYΓ61rLV H>9тa0OkpK4BIOc[mT{Lj\ֈ`d^ԓ>|zHr_LYɫT2t 5ĪDnAiڗ74Ɉ*6gw Za?#~>uGh}^m3b^fUSEQWt4؇iA8XZVWKdDKrTEhG:v 9|t/Vi r;o0jy3n5|t9RPizx6XW!z~r!FZZ]*y2->v)c60z?`)_^8ӑ,{<[,i BH諍fn+?md{Młcy/4I3^w;*A"*L.i27ީLl+Q3'kC771j|t1'tj-Q/5M?hAre<6濗{^grT3ݞxk$\k},vB1QXw8] (dle4w>'8GYP RƠwwԄg8J ɢ"{ATړlʭ)`#Nf'F wY鷭"҆~.5=r ĤfE I{ZK(깋,HJh1 k?n*ǀf΅vonDk#t-'X9T!fxqBM_.˭:Q֔Pwrs[DС3bC5[ZtbR@Nj)&4{Ҳ|BT[UfLR칷;>@nb ŔCP*_hbKRLkz(C?R'HU1g5(g pl?pA!BTIbGs{O ni?;[})qhy}N< !\v_ g-Lv H"lj;l>~6*IQY_]Q"0LXkRS1o8-'JjgHe/s%5(F*֐/ih?AGHIWoM۷Ⱦ?Oؿ뷣tf*y̬!`}T)I}z&Gޕ[%&zFOP&LJ&0!R:on(~3ـLT_pf$-[od=m,8q&[w&$ l~ qoYJì׫(i6vK+3Q;2HQ#mٔU;=XPqN=Ou>լV56y}0n7a_H2|u88Xvu@ҹ+)sI p$C__iXۀFKWH@FNcE= Ofqg[Luj!=.fW4nGQt4 X&F0~#h@sGp؟^>c@7GH%{bִ bT%Jl=.Vѯ ImǍJN@I܊QFYsxE/1f8:9+ k]mF j\9&nQhK !)j~A%JpcŒ.92W̙w~FG] :ty#1g;*6 eڄF(Dڻtyjpnիu4 ^F4!7帊lڬN<+IG!-}=`u[-/$%Fk^,{aL%J`^RBo1gWr(Ar#RϵCGTs;8nt߶-mIݼp!I+ 1q8|ҢJ*! T+sӄ5dG6r$zS϶cn|ZSG 93]6nA3nDd3xy`.˛ŎQzr(n[^&3Qꕎ lM}AȚ堗1 MFb} CǑ2-x]f72\ UF*1aA@`yVIP3oFk->8GugKGqpcWotFQe!xd-cN+fC5N-IXAfqzr9UWFFfw+v @hN_C3Oq7tYކX^M/24i>n|wfptG%M7J58Q>8pV*?{qQ^!X s\m<,zn\M+\ē&Ǧ3Kdk6A.^R8[j7=a$73goњbdߧ3^vhE˨LՍR/8b#j녲D|fIGJ707ќȑ$d \;R){⵫RoK" 彿U }o('2 Hs4N*ňhIQ-^_\/ %\I9xEoWĨ RtFXT|+Xa5!oi`[=Him\P~\2õr $pY~^'tZs5'o{X"Cn Ó,Mmy_ǡ`n~ŮxQa<}vwF87iDKqaz\ I +? &95<[1lNuE<@$0ռ21&g,J`ȂÛ]z0]ԦJ0jAPj@4\x iV{Xjd]hkw*vu}6lpLbf\, X%(W^zYnED$2sMѲ#+ juFnszhZZ:HPZ)B`c3X:+:/_G} dZ#gbe &I~rUQرGŵ[I?Db8AӅx_/[&]NhTg95-'K%npf.T#fINqPm'!㫸Z P*ºgq<*nQ=/k#9+5Ռf^o\W3v5k &O4#8nE(_. |00w62c0j v$%,^fK_qHiʃ +# Gw!UyC-p(qǼ GΊ3' k6I}`q&S ;2i`R $P[$x $R@7x aJؐ|Vbͫ_zs铮lje[lIS:rLlYެ'YwHɲ+B0fA+wuҢ;%t_ybKwGRb4:sFξԵ^[0?UWI*TT9DL4wxrRXNwrtD}oOk጖bMs],s؜UDp/TyV:bܳxBTFԂe| t`#nIu7 ~EIEH\I}bma!p*4.5AKtS@Q@ v/ӫB']TR#=Pq&#Itvb2ĕɿݺ8`+l{jA#pԲ1 G5;7Qȷi닼n p4QoK~f_n=$aL5xLZrVv gN0Ycvc~,s˽:eqcנtʪ/.)K}%VE'2ef߾8G"yFvB{gdv't*TzȘ}b5ng6eMD qrck_*݉ NsM;͙UZo ON"Njx, DeS*U- Qj4Gݔ‘Yt0)lL ]p8v 3y$f^f)׻64^41Rbا+&rLjsx&rtD{/|pBc_Qk1) 9Xv5IFem0h!9"ABCO!psѢ+97 YߜPA  r`"}p[LrTϗrm_dQCD#y(ԁ\,C%,jow%X 0@L(q|nU^y[jyfa+j{lv6o1| ||f9LR~R/ugmS<4/C=3᧬Ǩۡ PϗF`61F)tT>Qn݈?*/9gb,]m#ck`[Y_5PY|!1&9H?3kwoZz!/+\nY[(B5P %PR4}1>)7^bez(1 bH ͥ{kH5".Iwa-h)kZyQ14EPayi99\$_of}I 9yj2qjFr$qfk1Q@8@Eyywb!P[SXO~֟.Ɏb9W~þ1#^\*0z]H W8)fZ'sedE|ؒ6+Cnsl~=621Y,.hיVkT(Iy za .^mk-JFB +.w򊘆Uݺ˞$)g;^W#F|tL|`//4A"9n6Bjw"x(]U>6<#9Q2qJ1TPa |cٜ߭V1 P?wAPpۚ&Jy@0*zPؠ> t o[oyny֜{qN==O,gM}> H?*0\۝l^l(´ޓuaDBŖ }lK f RO]si̯o] ?v^~Tn|\ڽ5OAQyJ><2鞨~fJNW{{ 8 i~wy>9L$L05 kyi!G_L]+sIs1 nSKXء7+#M0xRW-*RNѰ0IiQ/dC ++Ne@~-wsو3/cHiJ=L{ܴ!!j) #tI+9<2GG4襚U?ˠlHZ<ڄm:E[@ |<Õ:VΏP1SSseV9㺒`')gLu`AJ08_ \ _|k _p&f( `[ wvHzA/h3".>XLv$ND_C@`'WiWF'uoI>U&0Wit!pV#lZ)uL ?ލTE$NVJ = "K6h`2L6׬ӹ-?ݎ+={45Y≻U/BB4SJ:M+3Zswz ĶU*8=4>E^5 1,w|\JqzgƦtH?ڎK.ômw&l{gHo/juW=~Ż sb-ijbdg!$`+c8(t}xmg 7ZE39mf| *<OԂv} Y>6Tt*T/53qn$v[q~ճ^xuCWz!N(@^P/G(tĩD>|^ d[rs)"B18by="ny 3-ՖsO7 1lV\E-q fRaC=/;ڗ.]isGnЂNP8*~*S9E%CE,#F\qs EMۋxmͱ=s-!{ahiqj]lmrrNVE4xnz6L`x7%IOQ {"ȍT`pϞVhALv&389xv 0eK=ƾf)WEԩQYa$!`4#PuVam嘂 G"6J].@$4+6\BhVEPb\~EmA~eqBX<("L^CBQ8l4X0c߂n`([.(ɒOC_ ;vŕ·. ayv-2"\Y~K *ICNM#lu;aLķNȨW)W#)tw ےl-JP7].S't~<JzMbHY3..|TwC|]&7?I`MyªXSz@wyP_ g{w 19ؚ9d1sgF [6A bCT2 p6L_!Nl¬hV(?V7?fi)ԫR`s {A% aN?R+FǙ]9ȾN2kzmx֭%Zh.΋', J4¼LDZF;8E'|gbES Y2 ![GwՓu)X$o]6xZTcZ$Ko+% 8QX(XT0e ^/$.Dt^ F$5ݐV/K[EH :v5FRJXuIKPxYb,W ٴ;.vSMAn~HTJĮe jR~O)COIU.j&a)qk@@8h} ;^~Ex>Pfh7%w=ղܟ$Lɥ\ytyܴ+WP W\5S]"$`½' OРv1;Zܹà#2O<ms$%2f]ɄM5^|fBO׃r6ݩ[ϿyUi7_Z |J< 8'?'[qQƎZA'ck$ h-yp8y=5*VˊJr)(~'\[LRX# ]%3el zRZ^ ʜGCQA] V1Zr3%5i_[ʀiEg߈T;͟|N#Z~ܒҖ-w[Q:i"gTxk[j2,У1hfQ]fm~zǻޤrNq6g J_nh7}ߧ Kn *eAYT^w ;W  t wh(ovv29>44UTvCw4_Ny\F5Σ TȸL=  fY5sVkBw) hbDa~0ܯt~r`Zn Al>[Z؈rp s# 抲~=DLt)[ r5Xw'T>R35yuy9 gCbH/yK`!_y9u]]̪sXVS;^&uPas.+DUH$t.::sv4y;ڨ.{K+5~hob&W572$c q:I&g'JݺzH("7YmF`>\[MU(>ll,!m/Y&Oτ(&([(۞}q'$NYNF djW7زYUٕmmwZN6n:]YIXVvw\!jz<MߋfhQi$D!xcɹgyO.3 q@b[NW4D~Rjfs.#ؑJhцAG2j#t50H )ivDj,WV3- ÖYtrEjFGijTmbJ6P'Nח(hw߿TF4@=NJS Ex):G2z=2uNpJXlR͂2ޫX1'%}: sy-`;E1v6Z!0gC ۟9z9m5$ҺQ]zv8f5ڈ- '.zzMW "`=bU4HiK.=䃠cu'%+B^i2 E=05,O[ECD+/טUj~XZ o"Xb$6Ӛ ol ϵn+¦N{1,}8|s{*E,>v[Ux=_ZͮIci:>+&*9f?Z Hy}PO&vcW]O[ -0GEA擺:=Sw B'w#}\f|/ůvgŴFLKq~Hjp:e0g)LՠBLx ̙6Vf'PߵMh`w ׸6%fGrom;gqƄ6DaF/\xe1~ oJT#8sQyR3x]h;cpc/ OgצDhR}Yo(*@xqtk1o'RdZ`%2K b6#!'JV6a+;OZɺa S$Tl@7 %9O_n;us=B$H^瞥r=f"<9*_ + bKfPg8S=Gx~yBdmJ~`L|wUeW^hgpص壃*)y:nzd^ZQN idB-ӭ4CE;H\zkd#WQ\\}U,,sՄV\ O;J;!hviD:ayvFKm,@cXN/&؆x#I _;\K=b"qf:Ö-Cx1ֻYRy~15}3߀!DrRmNľ,[οi 4.Vst7&є܊.0^_)M1;C"W "z\#84e3w#=ɨ5J2]SHDc?$]/ɨnƯ;ZSvJJMaV7!8 tuaJDDJ.ծBE\Mět]$zk w;.Λv 1YLm*8wDA7-Brkf] "Fg)݀y v,!:⮀d6b5" Vv,Ue*OmdHU5v?fA>Ȋ vI- ޞE~p!ܿ=jˎ*l 9lW"mk#uU[,^} kVItLbpŽ"}֞ qxdc*Ґ)']K t:ywh$*bV㺐i^k]} f@ Hnu( w'8Υ'VᎻszK+/)3,w4 L2Y1@Ҡ z$MQbXC@@`do鰗U5B8<TVcДY1$nXIf;>KR5&Ͽr9KX߇# e @hD'B;wh@\yeiv$~FVG T4?l͂5{򒝼Zu |ܩs>c c76EVGmiW"Tt!sWLDZ#H$'*n:RYɛpzKt*dJ.։ Ax%dgȯp3c JRo#eU4#aƭ RxQ!P3EG#PGtt2`dZϲmQ`T[R`.ꖧ(Hu ވQxmE'P^ !JvDIv!yK3_ Fo;E8U8sfTv!3^eq~w V?ȅ$Tp(%3-!b藃  $r=cS颌^^`A˨"=8w֐|2E5H r(QA?rLOauKKe0OF`+c-sȿ}R|I^{L!ϸоrҩ.GwQ:&%w4P9}bYUY2O\="Ȍý,Y[]}w̿P!P[4!vlu$KN?B!e*lyܜ7 q΋rhsr})%ruڼ[S3jiy4O> ;i֒QWZg}x̆8/ +GGf¹/  åtNS~/:Z6cLg] wqJ$ҎԘw Ezƺ!)-/w[֫8[_VoE[µܢg\&vj WVзPy'awRVm0FKUv7aoR>5Q|s),le$`PTزk0^}_hІg0h4.[;o}5$ 5Nzaus"?Km}Qs{mZcgn8$fGjnW*Y @7 eeH)>2(Ku8CAp13$~~@?PnuV!y;~0  YZ