kubernetes1.23-client-1.23.17-150500.3.21.1 < > , hIep9| m rvE^9 'fƒozQ\ ilWԂt\T*ԓn#bP['d3k+b .u05GSTUH
˴5 -K|d\tb(j1&Z?:] 2\QSS*[-Lx&?}BA , N(rF
/?=Xu+{Du,!O2Y8r/TF0=aKb:M 필V4ו;)Uˬ A > ; O ? O d . F l p |
4 D
T t |
@ ` x ( 8 9 : F K G K$ H KD I Kd X Kl Y Kx \ K ] K ^ L6 b L c M d N
e N f N l N u N, v NL z Ot O O O O C kubernetes1.23-client 1.23.17 150500.3.21.1 Kubernetes client tools Kubernetes client tools like kubectl. hIeh04-armsrv1 h;SUSE Linux Enterprise 15 SUSE LLC Apache-2.0 https://www.suse.com/ System/Management https://kubernetes.io/ linux aarch64 h
; ,^ A큤A큤 hIehIahIDhIecchIec 2eaec60dadc679761182c4ae8be17e585b0c358d3376615393dc99ae999ff29d 639af1c94c39ded3a781d1f82c7075b6af898b7bb6d284ea0313278568c54231 8b6974720f4fb31199e971a20a4a21cf3987708b6dfa6a0a1f4775e381b970ee cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30 /etc/alternatives/kubectl @ root root root root root root root root root root root root root root root root kubernetes1.23-1.23.17-150500.3.21.1.src.rpm kubernetes-client-provider kubernetes1.23-client kubernetes1.23-client(aarch-64)
kubernetes1.23-client-common rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) update-alternatives update-alternatives 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 hH @ff@f@e}@e7@edd@d6@d!@d!@d d b֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com dimstar@opensuse.org bwiedemann@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com priyanka.saggu@suse.com rombert@apache.org rombert@apache.org priyanka.saggu@suse.com priyanka.saggu@suse.com jkowalczyk@suse.com jkowalczyk@suse.com jkowalczyk@suse.com jkowalczyk@suse.com jkowalczyk@suse.com rbrown@suse.com dmueller@suse.com rbrown@suse.com rbrown@suse.com rbrown@suse.com - add patch file: cve-2025-22872-x-net-html-properly-handle-trailing-solidus.patch
* fixes CVE-2025-22872, bsc#1241865
* Ref: https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9 - Fix for bsc#1229008 (installing kubernetes1.23-client also installs kubernetes1.28-client and kubernetes1.28-client-common)
* update `Requires` in the "kubernetes1.23-client" pkg to:
- `Requires: kubernetes%{baseversion}-client-common`
* Remove following `Obsoletes` from the "kubernetes1.23-client-common" pkg:
- `Obsoletes: kubernetes%{baseversionminus1}-client-common` - add new security patch to escape terminal special characters in kubectl output, bsc#1194400, CVE-2021-25743
* patch file - escape-terminal-special-characters-in-kubectl-112553.patch - add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin,
bsc#1222539, CVE-2024-3177
* patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch - add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793
* autoscaling-advance-v2-as-the-preferred-API-version.patch - Use %patch -P N instead of deprecated %patchN. - Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds - Security Patch Fix for CVE-2023-2431 (bsc#1212493)
* added patch: fix-seccomp-localhost-error-handling.patch
* this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field. - Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
* added patch: kube-apiserver-admission-plugin-policy.patch
* this new kube-apiserver component patch prevents ephemeral containers:
* * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
* * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728) - add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion - Stronger conflicts for completion packages - Split individual completions into separate packages - update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
* kubeadm-opensuse-registry.patch
* revert-coredns-image-renaming.patch - Update to version 1.23.17:
* Release commit for Kubernetes v1.23.17
* releng: Update images, dependencies and version to Go 1.19.6
* Update golang.org/x/net to v0.7.0
* Pin golang.org/x/net to v0.4.0
* add scale test for probes
* use custom dialer for http probes
* use custom dialer for tcp probes
* add custom dialer optimized for probes
* egress_selector: prevent goroutines leak on connect() step.
* tls.Dial() validates hostname, no need to do that manually
* Fix issue that Audit Server could not correctly encode DeleteOption
* Do not include scheduler name in the preemption event message
* Do not leak cross namespace pod metadata in preemption events
* pkg/controller/job: re-honor exponential backoff
* releng: Update images, dependencies and version to Go 1.19.5
* Bump Konnectivity to v0.0.35
* Improve vendor verification works for each staging repo
* Update to go1.19
* Adjust for os/exec changes in 1.19
* Update golangci-lint to 1.46.2 and fix errors
* Match go1.17 defaults for SHA-1 and GC
* update golangci-lint to 1.45.0
* kubelet: make the image pull time more accurate in event
* change k8s.gcr.io/pause to registry.k8s.io/pause
* use etcd 3.5.6-0 after promotion
* changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
* Add CVE-2021-25749 to CHANGELOG-1.23.md
* Add CVE-2022-3294 to CHANGELOG-1.23.md
* kubeadm: use registry.k8s.io instead of k8s.gcr.io
* etcd: Updated to v3.5.5
* Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
* kubeadm: allow RSA and ECDSA format keys in preflight check
* Fixes kubelet log compression on Windows
* Reduce default gzip compression level from 4 to 1 in apiserver
* exec auth: support TLS config caching
* Marshal MicroTime to json and proto at the same precision
* Windows: ensure runAsNonRoot does case-insensitive comparison on user name
* update structured-merge-diff to 4.2.3
* Add rate limiting when calling STS assume role API
* Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess. - Update to version 1.23.9:
* Do not skip job requeue in conflict error
* kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
* Bump cAdvisor to v0.43.1
* Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
* kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
* GIT-110239: fix activeDeadlineSeconds enforcement bug
* fix: --chunk-size with selector returns missing result
* Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
* Winkernel proxier cache HNS data to improve syncProxyRules performance
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
* apiserver: printers should use int64
* add missing error handling steps
* add missing error handling steps
* fix image pulling failure when IMDS is unavailalbe in kubelet startup
* fix: exclude non-ready nodes and deleted nodes from azure load balancers
* Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
Remove potentially conflicting BuildRequires: go >= x.y.z.
The plan for future updates is BuildRequires: golang(API) >= 1.17
minimum Go major version. - Update to version 1.23.8:
* Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
* test: update graceful node shutdown e2e with watch
* move the ignore logic higher up to the reconciler
* Ignore EndpointSlices that are already marked for deletion
* kubelet: Mark ready condition as false explicitly for terminal pods
* agnhost: bump version 2.39
* Update Go to 1.17.11
* add service e2e tests
* kubelet: add e2e test to verify probe readiness
* kubelet: only shutdown probes for pods that are terminated
* kubelet: Pod probes should be handled by pod worker
* Enable resize feature
* Reject proxy requests to 0.0.0.0 as well
* ipvs: fix prevent concurrent map read and map write for 1.23
* cpu manager policy set to none, no one remove container id from container map, lead memory leak
* fix audit union loop variables in closures
* Updating e2e test to check EndpointSlices and Endpoints as well
* e2e: services with evicted pods doesn't have endpoints
* e2e test for evicted pods
* endpoints controller: don't consider terminal endpoints
* endpointslices: terminal pods doesn't receive enpoints
* add pod util to verify pod is terminal
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
* Add test for checking ephemeral volume expansion
* Fix resizing of ephemeral volumes
* untangle fix with healthCheck feature
* Winkernel proxier cache HNS data to improve syncProxyRules performance
* Skip updating Endpoints and EndpointSlice if no relevant fields change - Update to version 1.23.7:
* Fix requests scope classification
* Update Go to 1.17.10
* authn: fix cache mutation by AuthenticatedGroupAdder
* GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
* Wait for cache to sync in job's TestWatchOrphanPods
* Fix OpenAPI loading error caused by empty APIService
* Test Foreground deletion in job integration
* Fix removing finalizer from finished jobs
* Don't mark job as failed until expectations are satisfied
* Integration test for backoff limit and finalizers
* component-base: replace url in rest client metrics
* fix broken find command
* Allow KUBE_TEST_REPO_LIST to be a remote url as well
* Disable JobTrackingWithFinalizers due to unresolved bug
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
* Correct event registration for multiple scheduler plugins.
* kubelet: rename closeAllConns to onHeartbeatFailure
* kubelet apiserver: be gentle closing connections on heartbeat failures
* fix: race detected in TestErrConnKilled
* Replace hardcoded kubectl with kubectl.Name()
* kubectl: fix hard-coded value in zsh completion
* kubeadm: add etcd flag for member data consistency
* Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
* ipvs: remove port opener
* iptables: remove port opener
* azure_file: try to get secret namespace from ClaimRef
* azure_file: add namespace tests for InTree to CSI conversion - Update to version 1.23.6:
* Update Go to 1.17.9
* Fix: abort nominating a pod that was already scheduled to a node
* Fix the overestimated cost of deletaged API requests in P&F
* omit enums from static openapi snapshots used to generate clients
* Drop enum tag from certificate request condition
* Addresses the issue which caused #109115
* Add test for indexer with multiple values
* Reduce number of pods in Job+GC tests
* Adjust validation checks to pass for both client-side and server-side validation
* Remove finalizer when orphaned
* Fix: Clean job tracking finalizer from orphan pods
* Add test for Background delete propagation
* Add integration test for orphan pods when there is GC
* Copy request in timeout handler
* kube-up: use registry.k8s.io for containerd-related jobs
* kubelet: If the container status is created, we are waiting
* e2e: Wait only for the service account
* e2e: Wait for kube-root-ca.crt to be created
* client-go: update generated
* default kubernetes agent for generated clients
* Include pod UID in secret/configmap cache key
* Move kubelet secret and configmap manager calls to sync_Pod functions
* test: Verify that nodes do not transition to Failed while ready
* test: Add E2E for job completions with cpu reservation
* test: Add E2E for init container pod deletion
* kubelet: Delay writing a terminal phase until the pod is terminated
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
* generated: make update
* polish comments of non-enum values.
* unmark non-validated types as enums. - Update to version 1.23.5:
* Remove apf_fd from httplog
* Update Go to 1.17.8
* cluster/gce: update konnectivity image tags to v0.0.30
* bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
* fix dryrun when ca file exists
* fix regression introduced by PR 100320
* Add unit tests
* Fix nodes volumesAttached status not updated
* Fix default config flags
* test/e2e/framework: include the new control plane taint
* kubelet: Clean up a static pod that has been terminated before starting
* Add an e2e test for updating a static pod while it restarts
* cronjob_controllerv2: do not filter jobs to be reconciled by labels
* kube-proxy: fix duplicate port opening
* increase Azure ACR credential provider timeout
* Updating EndpointSlice strategy to retain node name in topology until field is set
* fix: do not return early in the node informer when there is no change of the topology label.
* /test/e2e_kubeadm: adjust label checks for 1.23
* Ignore container notfound error while getPodstatuses
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
* Add PDB selector patch integration test
* Revert v1beta1 PodDisruptionBudget select patchStrategy
* test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
* kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
* wrap error from RunCordonOrUncordon - Update to version 1.23.4:
* Update Go to 1.17.7
* Use serializable struct for x-kubernetes-validations in openapi
* Make JSON schema round tripping test more strict
* ignore CRI PodSandboxNetworkStatus for host network pods
* set secondary address on host-network pods
* Deeply copy JSONSchemaProps.XValidations.
* Ensure the execHostnameTest() compares hostnames
* Revert "Fix comparison between FQDN and hostname"
* service REST: Call Decorator(old) on update path
* add namespace in azurefile volumeid
* fix: azurefile volumeid conflict in csi migration
* Mark device as uncertain if unmount device succeeds
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
* kubelet: fix podstatus not containing pod full name
* Fix bug with node restriction blocking pvc.status.resizestatus change
* Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
* Set max results if its not set
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
* Update k/utils to v0.0.0-20211116205334-6203023598ed
* [go] update to Go 1.17.6
* fix: remove outdated ipv4 route when the corresponding node is deleted
* fix: delete non existing disk issue
* Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
* fix containers order after applying
* generated: ./hack/update-vendor.sh
* upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
* Execute sync before taking the snapshot
* Correct the feature gate string for RBD migration.
* fix: azuredisk parameter lowercase translation issue
* removed unnecessary log line
* kubectl: add integration test for result reporting
* cli: let kubectl handle error printing
* cli: avoid logging command line errors in more cases
* Fix header mutation race in timeout filter
* clear pod's .status.nominatedNodeName when necessary
* use node informer to check volumes attachment status before backoff
* When volume is not marked in-use, do not backoff
* kubeadm: remove the restriction that the ca.crt can only contain one certificate
* flake fix: remove the error handler for cronjob integration test
* Fix the leak of vSphere client sessions
* fix nil pointer in create secret commands
* Fix order of commands in the snapshot tests for persistent volumes
* client-go: Clear the ResourceVersionMatch on paged list calls
* Improving performance of EndpointSlice controller metrics cache
* fix the error when cleaning up jobs for cronjob
* Update CHANGELOG to add missing release notes.
* apf: ensure exempt request notes the classification
* Enabling kube-proxy metrics on windows kernel mode
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
* add gce loadbalancer no-op finalizer and existingFwdRule tests
* disable gce service handling if has rbs forwarding rule
* add ELBRbsFinalizer
* add gce elb rbs opt-in annotation
* cherry pick of knp 0.0.27
* Remove JSON logging performance regression
* Re-introduce removed kubectl --dry-run values.
* Point flowcontrol users at v1beta2
* [go1.17] Update to go1.17.5
* dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
* mount-utils: Detect potential stale file handle
* Skip creating HNS loadbalancer with empty endpoints
* Add regression test for CPUManager distribute NUMA algorithm
* Add unit test for CPUManager distribute NUMA algorithm verifying fixes
* Fix accounting bug in CPUManager distribute NUMA policy
* Fix error handling in CPUManager distribute NUMA tests
* Add a sum() helper to the CPUManager cpuassignment logic
* Allow the map.Values() function in the CPUManager to take a set of keys
* Fix CPUManager algo to calculate min NUMA nodes needed for distribution
* Fix unit tests following bug fix in CPUManager for map functions (2/2)
* Fix unit tests following bug fix in CPUManager for map functions (1/2)
* Fix bug in CPUManager map.Keys() and map.Values() implementations
* Ensure we balance across *all* NUMA nodes in NUMA distribution algo
* Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
* Round the CPUManager mean and stddev calculations to the nearest 1000th
* updated deprecation messages from 1.23 to 1.24
* kubelet: set failed phase during graceful shutdown
* kubeadm: avoid requiring a CA key during kubeconfig expiration checks
* kubeadm: print the CA of kubeconfig files in "check expiration"
* kubeadm: validate local etcd certficates during expiration checks
* publishing-bot/doc: add component-helpers to the readme
* publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
* Changelog: mention kube-scheduler bits deprication
* rbd: initialize ceph monitors slice with an empty value.
* Direct v2betaX users to migrate to HPA v2
* DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
* Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
* [go1.17] Update to go1.17.4 - avoid bashism in client-common postinstall script (bsc#1195391) - Increase _constraints to 13GB - Restore & rebase revert-coredns-image-renaming.patch from
kubernetes1.22. Looks like it's still needed until all supported
k8s versions allow us to change how we publish coredns containers - Initial Package h04-armsrv1 1749655397 1.23.17 1.23.17-150500.3.21.1 1.23.17-150500.3.21.1 kubectl kubectl kubectl1.23 kubernetes1.23-client CONTRIBUTING.md README.md kubernetes1.23-client LICENSE /etc/alternatives/ /usr/bin/ /usr/share/doc/packages/ /usr/share/doc/packages/kubernetes1.23-client/ /usr/share/licenses/ /usr/share/licenses/kubernetes1.23-client/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:39219/SUSE_SLE-15-SP5_Update/1e00e43338c7bb13b3c41fe5f40545bd-kubernetes1.23.SUSE_SLE-15-SP5_Update drpm xz 5 aarch64-suse-linux cannot open `/home/abuild/rpmbuild/BUILDROOT/kubernetes1.23-1.23.17-150500.3.21.1.aarch64/etc/alternatives/kubectl' (No such file or directory) ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, stripped directory ASCII text *å8{WtFӏ} utf-8 021079342bada096cf10b56fe48612eea1b3510b635557b8db354ed6026b069c ? P 7zXZ
! t/n,]] "k%]{~msS$(Zz`>s=K*Dݏ0+4`_ C&g%f`TC-$SQ!Oچ q}oWX5ʳn͈峛W ʇ̜ YS *Q.h&GW&Mn%xOcYcFFcRCl'E02Jk>3als_g7a!Y8@?.6"rD#C= _G[PTbXiMJ< `pq}@ ]W-ch
f@LtE57Oj+~0bmS*ڻ)=?E(ͻR$+ @p}MZr {J(cQP1[ qY}zH{P1Pp9\;]@{! 2$;뿈{8#s﹋]D̑dmg_rp6),&:%20sh1oAԐ.P&;j5G4i&-XE$5#9#m`4 S(*$KXwnϔWTFrr[H#A9&Y/-q瞷cP ߐYTZeUjr
ĬʓH1u ۆ
H
+s@mrEra"bAj oDVcQԠLvlffo:P^ B
L远>wUrUV/o7"Yl4#[hwHgke9=/9C}^ Q$Nz*\X'o_Wf- ͇vNG &0MS1ҡmA
(5H"!?H7 jw y]QHzIR%YH\%#}8tHɨ>bw/0a9Bt)!Bd)l0^Ba\=7 Yvtb2 QAZ&Y~{Y@*} Qq߆ #h!u
_ʇnʵTvÅ/{UCb5ii\R's6V"$rGc߰oOeb+(RۂXc Le G^|hI=+Fsl'ܨ9Yq$Ҩ 2$f˶vh[Wh㾺v(D!MB9_t|Փ絒! @Qpq gK^ K[W?3U|j{H^/'@E; sl8Q/E!0J'Ǻ %Ll oW҆jq 8hȩ3m S$z©fTgd҅V _ze6Lψk*d$apf&rɘhDr?LQMҙ. L]lW^yKs Fd{.tti m
ɭ~įŴ.`v{%-^c#>cr*X7-;1c2fvlnD[Յ&qq 2f>6XQ74
O PM iΘ :JVv4lcg)"M+bnjXtrPT!x D$)"6ZĀ#^srOHv;H|skW2Rp j[>'2RtNHW{+tz& Ud|7 ӎaD[KĠPEhS\p)h>PR`Oxv<<ϩ-d8߳EF' yTCr5wI;vYu闅̛Gز2Z -<q]*^"y6/YɌT}oB awSg ~=9@ǡI[a }ODis2 I^6. ZzBdkkuŅKݗDi{%۵
s@O6xiP ia41V2&,/2c:cP|{ UWEcxt B+#Cu U)-P_ p;nLMh
nQEWz*|mDh, y:\~d% whiשj8l5sTrv[qU픡#HbU.CZs @<,x`Xff| 4hJE{i18ЫDp0hpTQzD+z9.PxfyNpR}F7L(f=ռch<{dx6& Ί:ugQh7 ضJ,oP=-ۈLph.7o; V(5/
t.ޠg;1mP[}NFPhF~ j;m5kK} U75iηYD>׳5(~jC3G[ԫ:s!͑97ξ/2W>{TS:hkJ:o/ P3#QCiXPpL8Y]r;c4/$e]&GǼ]D #EIb" 0U`&w˴
~(j0)ZX \^ߝ@o- u$RrJ聚U~i&Nߗ] /LT5ײXk{kVjUjR+B4 O>Lՙc6̇- e_p2澺dv{-YOfEA*,tQoc*{LyYQP-Tabu`df$רya(1 -H|&l ~JMW $ojג#wwH pK fǠ
]=t -͕5_-lK"vS^f"j
Bguwh%[[,UJEl-%|Ȼp_թBK&ܯ Q$@,&5]Ef^ ڼj~[5 xV ʬmbjQx% z@"GÚַo-vQi
XpUqf. \9xg3 _8 [ Bwך}b(^ R0- 'xǡ 牕Z:+n>irMy13 ?\fݺd4^艵N!,Ϋ)1a" ~zC\?
kk
=yF3cW8I*z5Gϸܛ?KjGNJp0=]}$:%=YFu-qAcKӕk눔ù }* 8X
A1 iy[G @h3|WK%j-|0֍ReH.6Hzq.~R믮e =PN\!,@gk?*u;Z3}tBe/}Zb}<'u'wO=ƍ*<'3R[qM 5g
:ڧEC/!iXH&EABJ 3$qgké~CԦ(M՞|8ƊɺVTZ0_55kOEQf|,Q
xkPVX&~Wn۳rmґ1'rhjx<7? ZPw )>sPB0Zn$DNw1 7$Jf!8hn?ݽ;wt#, Ix77AgYۖ9N̛֩%3HѸl,YR ZJfY!`=
5D`A.┋m ε TTrO Rh&9v+
Ϳqd]D=I'_"B噲_B
%)A[])aRn,*
bAX; js
<3EǽeKXVq{OƦ˿4 _VsrVBAFՋӴـm3_:IBfE56 9(IsI.]xE_
K773[ MKXlxDfRo(TK~]ٯdQH XhG^iCTfW6!ڍvf$dPfj7xYp2u4JC&.㠡nMi{q :Y40 ۊ7 Qt|
/ÑcfWz,鑴|^uY 彄L iI!98[g[ŢU BNGl~lu 3N[v&g\T"I_:&~D2n ^ɗ{ұL}VwG&5HNF eTjwԏfo q N6+7&Gwk?Oo.黊e-T{^C,g[<&m \R_lJkde^'Zb=dSщeG0
`!kZcLI[.
Bҋ$U4?f5MVIbځ ߽,
b?mНn F1d5U'B 6Kˈ%ͮM#ݨbѷ "23L[51 MFyy"SэC^={[: N!VTKwft -pf 6Fnv S
:^U:s.*}nlTY?Qf>'azĶ9/JC!& /.~j@E$,Z} v!_I*]YDm'0 86&P)w7φZ:l0lbH34|oj9
W۾Dw a*v{M8B${ZCSвuXN/V>sՑcϥ{;0$:U)tgذ Ιsv{}>M9uD{ЕP+V 3؎~" @mmt
N
J+p f(t*^ T<@`'w@ N+? 7KQa4A c2Χ簧t:0vĆ90 sΛ#4d,Ssq57L[ԯ̂ʹ]%<DTнuyҦ6h;<?Fb5pi Xso}2z, ePua3&i}p帊%֡"PeK3i#Z|cQ $!Wo\=6ğ )PJ`VzE+9Zl)Fc¥)uevX +,ewj5Nvp}Вi'bc)lBoy5豎^ZP'CJ1Z9e<"Hnxb/,;2@lU{%|2lb7Kxa QZa]|& iea'*eSGJ8ncSDU1iLVH#yD$y=C>5d/^5/ $-S"G6(Ex,3 S9Sr;<?]ӽ{{H1Ke3j)ոg#!~H>-%jn 5]r e oRq;Biw%]C"a&0W "
B\y
f:U>; xN&([(e5/c Wd X04DN}H/omxj6oW3?d(}Q2saï֓-v98")/Py`asށts/ c˧s T7=BCk>ez/yΖߓ8țmԕ6g9V$i|AZwnE WF?dQk\.~x61y`2F"k0Z\:U^#c9m0/|jkc3xWP+݈WWb l'/}F6`*< 7-|.NEH:b, Ўv5ZM k ,Y0z읦?U,दjWdHKJl1@=73;q@Kj}(]"{'t"ah]ƺ`֖5É_MN~fpBK}_Iy}DN : /j ;-W :>ޮgQ@dʣVi8T&XW ;p ,fSPH1,!hӏ56%B-`R6b IQ'TOoh0Bbq+&]QpԟtuIyBe Nfi/=xߘ J?`qz 9^>jP )%lgpaM5 n+"j+`)g{Wj{s
%6K[Qrd
a, #ϻ\Z"5 ؾQ:pYvOg?||*
c@: [ȳniQf3*Y1*_co4af, gT=xY&}o%i;%qv= Wo[ ?!Zktu|$[ ,弚 U۸_hs 6B.xS?/"~}j f| )A2@= _#cT%(
8MJ(S a]noLA=FS 7C.奊%3&˔sE tLסyQF
*vB kD'A"$k`s2k$A
mQc?;"FX MuZ!\15_wl:Nle{R
X; oS y#gEM_ ޘ{ 9J3si
>mYtO0tJeY& U*ʡ?n@ﵜjOJzܓcX܆Yy5eN W 3<}xfJj8a
=V@
| 1
νc`W _y g_261Is;$k\L|N}z|cvz%{oHZ
5BT{+R A+dWUJ*!GB]3k B%}v>J;/e3K0VM&p2h* *g.u# *VRY }1 JJmP;R\I
10荀O:.Xgo@IYTwdV)Z3IDa=\IQ!Y/˽@+v^/;?~, A_qFm~h#^ <ԓE+Ԅ=(ẽlI<K% sm1uɑV y%JǺ} ݁
Jb7(E9Όwz T#+4UmUU@6 z#Ǿ0b*ս S^)~|, @axhCL6#V'T
s,ެex )xwqt$6 f3ߊ<1 ??BV) ]" Xq^1L29G%MZÔCJ =Q2?2X)W,M[MN[.d<ƒE -ƥ\x!e=G(?^p~xMY> 4Z=_pkw 62\$\&ml.JL;} YsQ86 +#;b~vxw j4dG=!@\[ nK<ϵ
gWb=gSo|f.*D_ 87^N&#gF PæRG, | T~qFSϷ!c#߈ʄ=c3av6 ?ݑ3A>%8sTF1q]l Ȥw(Y!c~V:r@4( ټd#?ԲņhBMɗNN ; xkJSox 6i=o20c8`?]YmPQH -ٕ!)Qk|[Wvt;xC9(V'E~O;PrC5+@
է],A3O q [gޭ7
u-S[WiUa7rc v/E͞J(,N
1+~Vx+#D`~Nꙿ,}:M8a6ڪz33篥*Uר!zĢ3T̠/FHyxo4| h-n Uh-2|ȹK!R"δσK[B
dr&"zĒ>TxKޯd@b"2}z_НJ/d+wQ{
?'//z0oumu*z?8T5z 4yAKx^7 et[
83;nV2p ^q Mac;_S 3 a0)I;[Sۿ='
5) = 3\qicޢ·*@2yʘ"RO*
XB 9-*\Q]gaW-?ABI`5
8 pa+OVlhZ89!9i!b.@pj]A?:.sVaEA@f[Z%:Cu6jw8Q Ma'n){ wΥ Aۺ~fL/yC||0q6 8E
z\ [A +$(J/kOp/Wl'\]8`z̡ >q{ 'z(<חH i@ppɈڮ~5@_/[ʘwX"wwsLU躌7Z鵒1ѓ; }pN2S}m3!"NPdm8'c|Ϟ
ԒŇG 0 `F[~?@;]VS$vmj^ L6N9 \;V8@W||ƺp>kTz ) lpDzbB2k%TuG吨IioPW#7 vBtz|WۜhbSNyiJ '=!i 3U 3Y@Ual@YczO{ګXP
-?$BUs*t
sd拒A@yt[Cǧi9[N5×\etOdwȣS T C$Yq)}-J_T1\0hOKZJ^ 2Dv,bN{Wi]{P=y5(w5&sW:]rfQxR.
Bz5Aq]`ѳq2'7p|Qjȃ< u'{!M#CbԢ.oEEesXO"-WM `72'FsG {C [N9,sQCqt]vF@){۲ɗ5{XWR(CTgp< ~ڜܓC70 %vAm oC&uKw9o`N$( u:deo 5(c*h CBGm-[ mFv<,&2:ф#6JZAxvfE \۰oL c.¸3ߺdt`̀T15#^TWu߀)-(_5_-"mP'^ Lfb >_sQZ#1G#hJ
}ݏqtF/ZЎܙ1AP /bSL2A2`(u6:;C:aOHK}7d58`+PbĪ- g䗽*7 CYv Ý =g0Dϴ!_!u$"FcavAo~6rٴ'_2p1̟v
fgՄeX}0Oq@h8ogQ
4R̄шԿ['SAeuXe.3ޔI 6Y# UڪPhzAI3f - K16_ Hn G W8 d5KAלHbT⢹)$|Z
uz(> avzX^ 5?tbY[I1~Ƭa=Hv<&16dw
gL.ˌw)eV5p o iF c Zv8!\ǟM@&ܐ܉Hi6Xi@("q4+Og
rߎ,xsaĮWV\+O t/;"O3p&zd}μir84cS k<[loBQg SUOy^ښB|]nf~O>oPͩkL8n~ 誳#8Ih]"a1LW *)c*A}T}h
vYމ/4#[<8eFێS& ^AGLZww 䆯NξN.ty51 ` WR=P=xD?G|02Ҽ. xuXz?a ĈN֡.m[(xp9k}*pe {@Fp8"14f -+~bЋ'nL
s=w
^IF$[6Qor˞
~Ԍc >{ɠx;sY>۵$'$efaw^.-@@f0\!_بDt'#Uu6.!Qb2w:=ݔ'&LwD U
9n鯨ۈ!62Y47XgWG L`Y볢isr2MOی^=ಅk2&~{|kLWS7{]r (icnpB=;gHx%ӭ V$%<׆.F\6I+ Y6۩ wsɜ8?~ qM-y0x_o, ǚD2@g"&S,<1ܓM2 x?iCIIt9 5sɞ%sJAqKAf.\B+/'7QQ'E:sr8(M4RX FO\X9:L7;`xH xO~Tu>[Lv [pq.=ұ賍|'!V>B <h6ӖW PK~Y>YzjaeaHGNC:QR\cD Kf\.9[р%`zJrȯYU<3q8
h[Đ?*/g.¥~(к00S/@hqy
(̸P7:%ГH-k~Q->^ fQ95/IKup
*$xeLZjۃCm x275 VČ|d|NZ C1;9!Oy% ,u6
BD8'ܸ>
'HEtmw2.$q0|FNY˛!ΊOAq# 8IٯR/V-Gi21NxeR}nņBQLi_wiP8~ +֥Nf
FeD%_^/" ɖj4'͞+@ٵuO[ 8{Mc]sN9.sLkK4Bq g))\676]$)=:zN*Gq[kyth"ڐn@vC0%D j?QBI}6γ6=' @shd(0G$.u.n*M5πi??
1tCA\Qֹe+PawO(VZiS~8aQLk֚}
wIݸ}S%Z/l/C Q6GobUx@ ̽Hnc"CbzЈ R<Ŕb {nVb6BVFxw&1@*q29AǏߢ" l;߽bar`OI#FdI? ;/T_p$wG>BFO}4YJ<("ܙfrgJkh y|D%&xKZ}g؞l LX -+a64G ^%=˲8v{5_ : Ui-
xʫ+k&꩕ g3y2O[_; G8,3 r m@& 4NfSal0zٌoxol;BCZ 2jmpq= x7I-q
.D)\lR>IK
G&5iтʮX x$V>HB[{l`݀+T9 e>pnyL\
P발([ oUa|pu@Z7*4Ji%hOB 4mlVMi 7[U2< epXaz}[ůPL6$ ,GV9UN)#< pb)NN빊?<_\JzNO}Paңx:!6bϩnj￦T~2t E[`I)p7l1sYHUwޥYh_2pщ Lw%akE3 `hwҐ_x?{SoFПu.4_Kr wi{QIH+%
@O =S\XɌӻlLbK;%<=V:;
H
g vz>"zhbquoU2h;*R D|ULN[-]+놢 лbV4NEm
hoj6jd|>/ay0>1G`&_D'eo l
_7@R}Zc50Tp \w |EDkROnOκP]ʋeP6~7Ɓ9P7}MպhgT}9JQQV^=ٚ #[?_l=tHۿT~qrp (/!C=Q-O,N(}yd7@Vb4۴کs:vVWɬ++
PGd|2wD#[-
$Z*R:m 2t?7 meˠ`*!4O果6UsѺkaZv!+ BpGd8{0>l;IbN
b wZAcD?w:2Z!MYkOJ.uLFzb_{%s3mz4 .-XHBR~@^*t5 F9 ͷ۱Y jiX /Ό/I@ziZLXvi
:=QYuNGOSQ
~ m2`'nC͔eT g3B79OAlZS>:=d+P4j3yv\ y Pieja>>1"/;-ɊPd sC"g혽O[6&}d ގc
:} eT Dx{w# ̞=IZ<7
X;xGޏž'^Vǧ _`Tr NG.n0TG߶6hބ͒zEz, a3 qZ5zX ~햂)-uy+ܷQ09_gRz:t(N`m pq .n
Z/^nF#~oy &w+JP
+) "47<̥ Mt!{eãz$^W+B+GfDy':LLrn^]Zub92-_XeN/jrNmDU>Ղbkx=57(ۭͯf{J{PMs~T
cQD;p"m` zԯ4e3 ,n{!w}& /MbZgQIňfmOyy(~8 m/ q
k;ђ ٸ M}pIA~$bAhHS`Z忄Ɨ VVJ)JDؼG/'ѽ͵m{Df?ᦸznX#r\z'o^WkLV2D^hhUu{:C4qQV=s=C
I
N`&X1۞.Az/da7> *`jT`g3G @14 *g.P1zoОyi[ꯢU3iq!rl-Sʬ&0ҷ9l Mi/x4M2OyU3DžҹB! ISc\w6% y%Z 4
̖/YGt9+ & 0Ql/">]
*àUm N,2)K: n2{ܐ!U!UON`"+!ƠNhAVtՂ< {mmvW319%ϜoM)c]4<ŇUmM+z|Wpux |m=zxOMjE-/xgJM x,j ud`<~N\7{Sb %. A6yu|XdY܌z&.un&'fd_]tK 021(v|M@I0Cͧh]ٚB^=x2ԢrNZ 'R]#L7 w<ڶ=7!GH'~ g ID=Vk>CEtyUnkn 0UI5øT%Dza LP-4 0NJ(?KM
`>Hem j1#cE1܆LD,4<
y#KAPr3ѾLA9].dQ-dAY>
Ez7 hn_vZ_ ڮ)# ,'
XV`L12z~ޠz>MR;> ]iӁI J*mt<rޝI Z=@d7&+QKfۊn#Ϳ<섆)U~&=׀dKEEG}dI} 2ĮapAHva]l3.7j2e7JYJɧYSnFed}XIyw9> `Aȣۀ.@-?{oz,O^RI~ n=>q[S#zCm{k"2[uQ-Ї""L
2Lߔ~O\Q|/қK!оSS&.
dx̾;r ;mVN%J,A䣷ޯw3*d}A 0f&pO KLmw! Y$)sJ~fy>Z
F\^%vH2EV|>eskx ;v# l/QN)͋ b7wB+骨\kŐ}ʼnGH3ٓBb9
2X^o2K38oVlI}Q/X}q(0{p& Ө2A?ӷ+X+-`{Վ/Uk `#e f]yfywW;̞H.e"܌Q F6`qm xc< jFz*HA6\(A ꝸ!lh3=zhU 'K8|:y/q+&8
EYt݈}=?Y8ݷQ%VˠqOalxK 2~OW~K2xNPF3w_ 77d.,`\9%^ އ2uƴqhXG2~5눬lf4'%vC3DAaJrZ[M
"OP3=Msqq|ꆤ.D?1.#_' *4"HvEp\~ ^oOޮ}!,o}r=~D{.͏w:y
##Ao`yY Ԣ щ% û
YZ