kubernetes1.23-client-1.23.17-150500.3.21.1<>,ЉhIp9|5<n@5B粇4+M+h۴2c T~<{aiw`a b1&$P\^`UJU`'ܵR*v)^Xliouz n$ cE.=Ҡ!jlJ$2Zޭ֧]_ݭ~"T 8 cy;NӞw,0J7QKdvܔJaIaW 7`;O?Od  . Flp|  4 D T t | @`t(89:FKGKHK<IK\XKdYKp\K]K^L.bLcM|dNeN fN lNuN$vNDzOgOxO|OOCkubernetes1.23-client1.23.17150500.3.21.1Kubernetes client toolsKubernetes client tools like kubectl.hIh03-ch2dtۦSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxx86_64t ;,^A큤A큤hIhIhI%hIcchIc19e4a13a1f9fe1c7d652ae8a38babf4be6a8e771042deccf7cc00937e963145b639af1c94c39ded3a781d1f82c7075b6af898b7bb6d284ea0313278568c542318b6974720f4fb31199e971a20a4a21cf3987708b6dfa6a0a1f4775e381b970eecfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30/etc/alternatives/kubectl@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.23-1.23.17-150500.3.21.1.src.rpmkubernetes-client-providerkubernetes1.23-clientkubernetes1.23-client(x86-64)    kubernetes1.23-client-commonrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)update-alternativesupdate-alternatives3.0.4-14.6.0-14.0-15.2-14.14.3hH@ff@f@e}@e7@edd@d6@d!@d!@ddb֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgbwiedemann@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comrbrown@suse.comdmueller@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.com- add patch file: cve-2025-22872-x-net-html-properly-handle-trailing-solidus.patch * fixes CVE-2025-22872, bsc#1241865 * Ref: https://github.com/golang/net/commit/e1fcd82abba34df74614020343be8eb1fe85f0d9- Fix for bsc#1229008 (installing kubernetes1.23-client also installs kubernetes1.28-client and kubernetes1.28-client-common) * update `Requires` in the "kubernetes1.23-client" pkg to: - `Requires: kubernetes%{baseversion}-client-common` * Remove following `Obsoletes` from the "kubernetes1.23-client-common" pkg: - `Obsoletes: kubernetes%{baseversionminus1}-client-common`- add new security patch to escape terminal special characters in kubectl output, bsc#1194400, CVE-2021-25743 * patch file - escape-terminal-special-characters-in-kubectl-112553.patch- add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin, bsc#1222539, CVE-2024-3177 * patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch- add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793 * autoscaling-advance-v2-as-the-preferred-API-version.patch- Use %patch -P N instead of deprecated %patchN.- Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds- Security Patch Fix for CVE-2023-2431 (bsc#1212493) * added patch: fix-seccomp-localhost-error-handling.patch * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Split individual completions into separate packages- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.23.17: * Release commit for Kubernetes v1.23.17 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 * add scale test for probes * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * egress_selector: prevent goroutines leak on connect() step. * tls.Dial() validates hostname, no need to do that manually * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Bump Konnectivity to v0.0.35 * Improve vendor verification works for each staging repo * Update to go1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Match go1.17 defaults for SHA-1 and GC * update golangci-lint to 1.45.0 * kubelet: make the image pull time more accurate in event * change k8s.gcr.io/pause to registry.k8s.io/pause * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * Add CVE-2021-25749 to CHANGELOG-1.23.md * Add CVE-2022-3294 to CHANGELOG-1.23.md * kubeadm: use registry.k8s.io instead of k8s.gcr.io * etcd: Updated to v3.5.5 * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes. * kubeadm: allow RSA and ECDSA format keys in preflight check * Fixes kubelet log compression on Windows * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * update structured-merge-diff to 4.2.3 * Add rate limiting when calling STS assume role API * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.- Update to version 1.23.9: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * Bump cAdvisor to v0.43.1 * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * fix: --chunk-size with selector returns missing result * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs * Winkernel proxier cache HNS data to improve syncProxyRules performance * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8 * apiserver: printers should use int64 * add missing error handling steps * add missing error handling steps * fix image pulling failure when IMDS is unavailalbe in kubelet startup * fix: exclude non-ready nodes and deleted nodes from azure load balancers * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients. - Require only BuildRequires: golang(API) = 1.17 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.17 minimum Go major version.- Update to version 1.23.8: * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules" * test: update graceful node shutdown e2e with watch * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.17.11 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * Enable resize feature * Reject proxy requests to 0.0.0.0 as well * ipvs: fix prevent concurrent map read and map write for 1.23 * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * untangle fix with healthCheck feature * Winkernel proxier cache HNS data to improve syncProxyRules performance * Skip updating Endpoints and EndpointSlice if no relevant fields change- Update to version 1.23.7: * Fix requests scope classification * Update Go to 1.17.10 * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix OpenAPI loading error caused by empty APIService * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * component-base: replace url in rest client metrics * fix broken find command * Allow KUBE_TEST_REPO_LIST to be a remote url as well * Disable JobTrackingWithFinalizers due to unresolved bug * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6 * Correct event registration for multiple scheduler plugins. * kubelet: rename closeAllConns to onHeartbeatFailure * kubelet apiserver: be gentle closing connections on heartbeat failures * fix: race detected in TestErrConnKilled * Replace hardcoded kubectl with kubectl.Name() * kubectl: fix hard-coded value in zsh completion * kubeadm: add etcd flag for member data consistency * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config * ipvs: remove port opener * iptables: remove port opener * azure_file: try to get secret namespace from ClaimRef * azure_file: add namespace tests for InTree to CSI conversion- Update to version 1.23.6: * Update Go to 1.17.9 * Fix: abort nominating a pod that was already scheduled to a node * Fix the overestimated cost of deletaged API requests in P&F * omit enums from static openapi snapshots used to generate clients * Drop enum tag from certificate request condition * Addresses the issue which caused #109115 * Add test for indexer with multiple values * Reduce number of pods in Job+GC tests * Adjust validation checks to pass for both client-side and server-side validation * Remove finalizer when orphaned * Fix: Clean job tracking finalizer from orphan pods * Add test for Background delete propagation * Add integration test for orphan pods when there is GC * Copy request in timeout handler * kube-up: use registry.k8s.io for containerd-related jobs * kubelet: If the container status is created, we are waiting * e2e: Wait only for the service account * e2e: Wait for kube-root-ca.crt to be created * client-go: update generated * default kubernetes agent for generated clients * Include pod UID in secret/configmap cache key * Move kubelet secret and configmap manager calls to sync_Pod functions * test: Verify that nodes do not transition to Failed while ready * test: Add E2E for job completions with cpu reservation * test: Add E2E for init container pod deletion * kubelet: Delay writing a terminal phase until the pod is terminated * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 * generated: make update * polish comments of non-enum values. * unmark non-validated types as enums.- Update to version 1.23.5: * Remove apf_fd from httplog * Update Go to 1.17.8 * cluster/gce: update konnectivity image tags to v0.0.30 * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 * fix dryrun when ca file exists * fix regression introduced by PR 100320 * Add unit tests * Fix nodes volumesAttached status not updated * Fix default config flags * test/e2e/framework: include the new control plane taint * kubelet: Clean up a static pod that has been terminated before starting * Add an e2e test for updating a static pod while it restarts * cronjob_controllerv2: do not filter jobs to be reconciled by labels * kube-proxy: fix duplicate port opening * increase Azure ACR credential provider timeout * Updating EndpointSlice strategy to retain node name in topology until field is set * fix: do not return early in the node informer when there is no change of the topology label. * /test/e2e_kubeadm: adjust label checks for 1.23 * Ignore container notfound error while getPodstatuses * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 * Add PDB selector patch integration test * Revert v1beta1 PodDisruptionBudget select patchStrategy * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error * wrap error from RunCordonOrUncordon- Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4- avoid bashism in client-common postinstall script (bsc#1195391)- Increase _constraints to 13GB- Restore & rebase revert-coredns-image-renaming.patch from kubernetes1.22. Looks like it's still needed until all supported k8s versions allow us to change how we publish coredns containers- Initial Packageh03-ch2d 17496552421.23.171.23.17-150500.3.21.11.23.17-150500.3.21.1kubectlkubectlkubectl1.23kubernetes1.23-clientCONTRIBUTING.mdREADME.mdkubernetes1.23-clientLICENSE/etc/alternatives//usr/bin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.23-client//usr/share/licenses//usr/share/licenses/kubernetes1.23-client/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:39219/SUSE_SLE-15-SP5_Update/1e00e43338c7bb13b3c41fe5f40545bd-kubernetes1.23.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxcannot open `/home/abuild/rpmbuild/BUILDROOT/kubernetes1.23-1.23.17-150500.3.21.1.x86_64/etc/alternatives/kubectl' (No such file or directory)ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, strippeddirectoryASCII textiifo/ȅ@bjutf-8afd0c657a4043731677eef96ebc2221188807ca249396ef04dc4483036b8e4be?P7zXZ !t/vQg]"k%]{~msS$(Zz`>s=K*D{ :=N 4{ D Ԝ]նCԢC C.&ٍ0Rc#dPb@YaULk}'ez$ Ը~=Kw~\|JQM@ 'h4wڶ}.Z % s$}EuB*Q4 @.:S;*0 C[ks|nWZ!-p-3iqWO.ժſT= sJ{ZK_)E-!ڴM@s'n'> |zbt=fͬU|(G:.eP]uK: ЬVf>zjQ **M<.A q;t:kk'M9 #?z4G_Ğ +xpf0#3o=VcpҘ,(2kG7DbB52ɑ@*#VUHӨriqWӱX0!ߒ3T|bJTC::. jBP9/$rjeִݭ9Sѡv@GypM2>u@ۅ%䷥s =|C%lԌ2B4nӫԀc?UK7$; ##\F;{N1QpBҞƁM"j/0)'k$j>ޭNF+`; Yѯ]en-f|TXe+@zCQÄ@'N[_ah&t]{֊Q'Eȥvq_X5!$ Dp7o:,==)6N4PC׏dW9\1/h1|caǢ|O.&\XnN5߽uBMVӸ#pf56,;k\7u5;;"Yj51̍tp;D:5+&1³̸nt"֝R2nSVpdiBh-ƽMSϸwk%Q2Z僬HmWO ovaL\ƽ2%90:<J^̨?کgտ[(z(āw!/ϝ{1$sf \X<ߓ̓?FU>6;ul& yڳ;ԝR3+aHC}(j ď>yk +] [7c|cKAC~tet٩NFQ%D@e>?@ړ'V&? nʌXoK` 8(ZVOJ~ DOoJk cW.zFDG10eW> 1 Pa, #Y9d WJ3\ ˋ?@:o"7)TGSԼĀF\g*69ejJVKGDqdH؀o5(7`B/qC+B Mkn4v*O0IzAp:,}:Kq1=B}CN ffc/v1;)./ϔYC;Xqmr[^4-6aP)8ȗ;D6ý0e5dÙ%[%_83$ITtz.kيr$qPhHz݋]f+_qZԚȦ"{2LGBԫw@iE"WF F3]vcV,z_}*Γ/rB#ʱ:~fV1 Eqke5e;$tpŅoѪ[p^B=kOz*|SMasmOXҒR[MtbpdJO8HHc8 Sb-/ qCb繅%*kJbtMmM㑁(]F08 ju_-Gji^̅(YaYCĈ=H|`/ :/a( ! W|3߱ ab1n=鸟r, g96\Ȓ{ds/A_iBDˎBVaCn;/zNnEn][P myo ҍEQӖ G1>-IA1e785n;ar$=E5BOYca胝sDCUԧf~/\rV-jOWҊ?3(yj^cNp@(uz]N޴wBi"aLֱ4>a՘ڊͿk|gن2Б jA=gqry"eju,>llo c"s2 "d*_ j^Zk9nhט3WZ`T40,I;ף6thMTUXFh"iK5ҳ5T= }wft5J>ڮ[]rvcFtkjxKe Iܵ…L!q =}7w["k}705'"@Ltkψ/ dҫTM鬠YLaWP(Ó5 ёkTތ.>t{}ô*v3=l*fC ן١h/@Lpw{^AGeo.҂5"p3 د3 QQZ_IZֆvoʓD&uk٢7D~&\2S9nWUuL2و'g@k%A(A}]g% ru\hVmx{TKѡIwܵNvz"UsU Xtͤ w.(X'>.~o܁OG] NbaM7{DȜ%%FO=6җ,xtU?!~1IO%ik'OWOpD0aHky:A)9IW`1VVPa>;:\+lĹbW4D{sX!\eRtcRN |Q^8..xu~ta:>RQr>l9Ľ\KXۥRt*I72l0)F7ȇsw _ ۔Ն$'kY7=IDٗ ՚e2 ?'kԠ2=mPoJeBCGǶDA]RK+Fؓp.ǕT__'V IS^`D'0>`.F 7M z}yݢn:}xq'nÏ>v8۲kX%du@8)v &mD ҍ@aq+zN ]a)&P'NM3xvJoݜKL\yp*uoMnMI/UO/r>""zs\Jp]N=l{LCf]U]m_촞 tX؇kBhz7sDέfcЫp7ܨ]j9 D QsスGk>,oKVlMe y3tR=uY |n~:'C ^hJQ"L0?MvNq/MotL,rd\d9e,"xc~7K^8+|?yuZiʕS(>ִڰ/PǴ{G `nm Ů%"&<#L^p:p`=@4Xdj4#ceƏAK.ٻ8"9͆t-qЂӻʽkQ.*@jT(}'jQ;0#X, 593~?'Q޳O 8XL=qpٰ-f1hv a <7֏w}RyG2<ٻ90 fIk9-&QF)$6&8k?[QZ1s@kKJl!#ج8_8[\tWU]9vTbr9#&`$F[ y%b97M[$ԭ&\tHeFIO6U73'Ǎ&ٷ0B 싅tj$ XQŁ:| yinSLB#tkr2H');={iL 2-L.ڝif!xrraJ6= ҡ [Ld|n9/k_3-\8*$|(h2ɬ#W#yGmvᎣv\@gNEMHLt,<)[ {fāRsBkʂ֛iHQ6CYjˀd\kvQ%cûdljZv giپm6Yw\&27Y]9^q:PFt,q;YʾYKG1WyC ?Sy?*g u@5cCVBn뤧|R]kױ`4DZSS>un*\S?|*%wX4 W0'fxwc$ <ܱM_< ^&Mh~IuJ ‹}C!bX7i~Ƣ@ɚ9ﭾ ^]U4hgzQ/;6v",/4Hǁ U p/&Xњ|/ >S!q ]ab5%)(֗a=J[4s<:tHa.∰3bl~݌]䒬' gdjջ}R ,j\hqaw-hMw70ԃ>R62]я3n~꡷$Q1~p+ >ɣvEuV9?)%Ҩ`pvrf?j M.DmWoc3+ł'u+tH[7W? GE |x#Pa@ [~6+{ȂVl%̻芳oy`*}{.l 5xI%Svz * 2/CJaoqF]Sd7iE! K]0 hLFޱ' 7W=9f}y-Ө0_H;شe hl62j@]/ŏ6?"7UZ<;[3IQ[uxg ꠦ ,~#e pJWΠ5(;Q@ ?K&ճzwD5{Lp RZ2 ޞ- 5xͱEڪb/tc y#UtU'.Wsv2byK+-^(=(0/y8>Wy02ÈInj-Gi-6r(?#fl_Z_E1@MnV#x q# f~FTRz`śT uY򣞍xc$dRxf#OunRe\G֧T\umb7r!<-puG)gեHKwԺYfAmM1O)gvLv7&vO_s7mZmUq,|TAMNltj- %A' C?Gh)\vo?;8G7'`bI:mSEKAo 6ړ=3M6,:o>C8DHXUeI;iU^8,Xy\RmFod9I @5ktC+9dkp5TXi]#Reڕ/П"AbIΠ5$E/Rre 'dՒ Quޞཨsw M~l-.L>zxΓ_ kV$m',NpIB4oM*m9L:10h-$e [W1ݖl#'[Z5\@|~w$#I٭-z:W"Ƅa}*O~=ӋhUB(~h] 3Ozbq';jXTs43ԿOZ]32[W V^)ג6p,]JQlBQDYz1vz/5IMDb)x,0B*U>wwAY%I c81aY@%{VMӴƶ>̍2yuUqZ#DZ\MZ0= :.ѫ>pX}!.?`zg.]A|&+KJeV+PD<PV6<=u>0y'*_xE֬:pB CY wa6r!@UE@;A|e^:Rji5K< '^ޣU(M@P(!4+ZK#f܂EyXcN_* n^{*!/𮱻s+>&|OV`(grŐ_>-lg63 AuO-a $ӖuJ=l>bRw+ P4(*<-tڿy.rRxK*CAic*U +8Ne? XKiV sICΜ {Np40q= bgmC\ $phQf0!fzu)$KnInLlJR~kwV }W?>wl!4zHw\ nH##86)@12օOX Avk7H2PXPYܻ'oWXf˽UmbCi:'~[epErEUZ5h3hRuk֥Fmb/ dwCVm3Y߭y-dOrS`w @dUTqp:e9>T[1%i1vY|E߻@p4&qŬǩ[͉eլ"sY,FA6?.,߽X#krN:JZECH`ST3saC/3I8kcAS $I2m$Q3h2S"I&u~/m:)0y}@Ԙ_ib/dus嘻BQ._<{4o(Z,=C"O^H Ry!ʘ->8.O80+6y"\nZIAO.Rcɔpc)߃Zm& KRK9ڵ5!"^"l=֔i[r*wU(5"xkxG5=˜! O,pJsь=-XcFMFf g$!OH\P|g-4BSgb0}?*I!V2b-'YE /,EVNp1:@bI4 ԇr=*< {#_Lj#.pH2~QZcDXMskֵx {bjŚJ11 .-.{l9[Wbo) KV'cbWG@J NUziC4e#*L\:/DKQ 4iO|jⱝgDu8x~mZgm5TjbMf7~F*=WM@b7LOgϔ/\v;Vr"j_-Rayu(YAs*Ql^Br@|y=k*ؙ)7iJoֿ'!tBApNҲ,ΰQyTmxɰ9g ZGWpi$78@gU[cnq,<*'j򢒪º׸v9Kksq7z~3 r7| L¦ӴS"t=ЈՋ[ w)Hn=!  !Ơ7 e4V!QVdd^m# ,uӓB#8M`{* {uE` ]y'ğR8H<-4'G!TkZ$E)ÒY=7d洑l 8PAh˦|Q|kaone4#؍.(xc|~JD&mV7 peĢd먐z :*qg{+ňF#+iX,o[UW['˧m"J'#' XR ~YxaRrE`&m MK o-/2Ba @ ^Oܮ>+ѝUe2]8 Q,Q@$JN7VzPd.w*~A9lHFd =i#p` GEfˆ|uh;+["fWpʿpViF`~G8q'W"zgIн:=ydp0=ر Xi73pT;V=<A C2[E%v! 29aC}'!DҴ(h~[n ԁky5:dt,"}fSN_Q h ,f&j_=h" cA&9NqMX?D!*CC*j}Z}2lz_ V/ϝlŭݯX7<}v3g."jHnKA"sK@;>3w؞//Dx [l:F4_:W"2<&8ZS,Ǻ@er0Q;Gˆ`)鬁γQEZg.g=m!{jeF?u?n[5n2VX:\}MtL"؇1pU J1 l(*6Z"/1\LaHe~%UQyh&EťJYDsTbu, FCalx; %־T"m`ⶰ `{v@- s$t0j݂H93ܗ}[J*ܧ9TXY—byi r~Z1t8%kCG sW bۨ xu7J9> +`yR(^j;ܑK7etзͧg'1EmDBXjӹRQqz2@l)]wOO?NՁaR0|;RyR.nls3s+gJZGl `!{ū]m&O0h$,hr er $3`"+$KsMƧqycV?ǀ%އMLfk-&N^J-ƨbl&O3p/a~pKB:ER.Гb`rFKeet2܌ Ѷ6l۫sHz:b=szڒ.GI]Ы8ǹ'9dZs~P x \B:v\C'e&VM?cVWl5jP?'oOT>ZKgcvf -:bcs"^ {Ff9GZakA؍Kқe̸0;Cv|Queˍ0v|dYe!+/Ԑo{l#wq12y_ ^tq N|޴CʐwDAD3N":N08Z$<~ZVg?矄t(⎩_d (`I) '!LvH'vz}w+A;YUƁήx@)F8CA/2H}EüQdY̡ѬʑY6v&w}>BΑ5\Ynmv,5COa "PvB][>x u!bY:Y1k]R|W\aFڰle41 $u%S6eg*bƤ7K3]"QTHE#Df# QzCV*K-,8\2걪\KRDU>V?gy]%c,?:<|n!oK>c$%( J"Sdxqw)@ _Dݪ"G;Ӡe8E;!w4ݱ^j(гjFpr_|ɇehm="?9T햖%Dh=7V`wSEt'mN]s|t7c Hf;.J  rڒ%:\;s6P: =kmfUJ" mjg;]_8kPJ-u|_ZC뭪tHqI"n 2=%ySm"~9sR63uXJJn$gcK.Ѹg<|nQ]s<ٍ1a0C ۦ5NX{$xLɸk34 YձZ FaT'dR37OK bE d*^SF!EóB8t:Tg.&EѮ+fb#ƣ9̨3g6DCN%o@zH1J wI׹U@ccEkigJk0|5^s}зʟ@,Ũ2"[[0DO&EjK-G[yeVB W><qX:K ^{xQˮY)Jtj T+*$)MW{9ݼ<+'|?[/NRc%& Q; sa X=`g_@df 트+im~slq;j;Rէ;0O2n`5=TFud79IxʂF+ݕ-͆~][$ɲ G\O;=CFP@wv-SE6N}te49 iJr {fr*gN960OTߥe416`㿝i, Ay^bʝ% S9Keʄ W@J Rp¼^;HW *lU-=jp㼏YSCv1C+gNV;8z]9[F&P6+E| 3 #P ^[RpHB0vC2yE[ټ@‰^_ޓ"Q7[_= \NF{ޔsr%.<vbϰ̐)Bs/L1ֻuS_ Zׄ6F<0fHx8d6Z (f6h7Hy*ZHlY16"=Mks[ѳUwC#\[8E "Usbug>wߪ99qE-,QZ Z9_tiT+2#NU4E% mjٶA nѰh˾h81:ZƒY9 #N)TA'1z|g6OJ m设1y-qY瞩Ncqv  ]%V#qa&%krnٵT#M1R{{$4߁V 5pֵ;xON!ÉueRPkg?.^ a RwF٭ztO v4'lQ>_$KZD!Ig^S~l8>mHlYt!|eG, j;:ø@cN}H@w% vtpb;;jŵIqyǪ|2g!3"b}Vݻrj=}ɋ<ȹl:`aY$6o趕)S.%)_fPuixJJfn7P5h+%K60Gf[Gkwr$$.E5ܷٜ 5ď@#`4S׹b&@7;M}> \k#B aɡrmRù[i3f̀o瞸l5OHǤg3KFt:V~D.ElPv #N@&Q^ԌZj%B"liuO+JeC?wr VI]jNdZ%-477<3{MyK+<ŽuevĆ<&%}`giF)ܝ\\%4]L j @Ɖ7<럑фEd6oF냃 fD@a/\)bm&ZE a *4@[q/t<5)RCf"$#&⽮+ <`*8"d=Ȍk뷫Z 7j| V:FVI\|ӚMȎrEn%Du <nqb؊$_^ӹe"j9/OhJ}6%MZc8Zbcfp(졫ϰ@P%Jem+.E٬b߀D~xT^JqD\+WI=ퟧЄ+ߝZ"{J+S$_ ˷3_ׂXhff3>D}%4D .ay3uz)awxJFItېi[ɦf(tDT#&DxHP PU3Bމdz|G]B.~5O#rL1D/}a+ QZB3sKpeD%4*jJ˱U2UxdiovBq7 p4mdq=CErr ؾ*{dyeDq$UBY28g c{<}Fާї(UDv,iSi/vƤOB֙X/΃#CR-7fU"ŕ ·<[ (q9SHu=-eR|ͤ]] D b9Ryۉ}t8 aw R?t%_IEMl*f ϏN2ݽC{KY 8YV̑vkHB"0= "IDz-Vi_ mſ\T^1}|[#`^n lCR?ZZ"tmM%h3f&؜aWO*YX][L퓍d.*Y& Y֌ #`IH/ jEɠF~OIQ+G3vu//(DҺGvK[̣.Ng*py 6LGnִ^ާ_G3{ڸ*cNj+90 85͂=8LR8ȫy^YiݳoEN]zd((aH<p'd<{RDXGXG oX&Hٕ-㹁%ZJ2O %))&ۿtm(_-q\+[$0D^5Ǣ.H( {yt[;Ϗmo5-E.6 ķl~"357"0(]ޕDfm.!YZ5lV#'XBZPHu@~ %'D pyD;G3SQ|Ԕ ͊Y?RK~+&c+%=O_ o%y$cVQ6Y F}PWA֜rIIκiLPgl(`6K.) ħoBgpI>MVGL.,z]5)H u-][{tp Ϛϴ)hK?'돈cCl ]zVdu݋oy[%fx`η͛A/pQ 8o]RmoerMD>u`UEY/«AŎ&?NobSEcvQ׍b-;@jkJQ>RBpxe7g#@0 Gj&#nfǪl:2k vK:~wc| L I NuTJh^̽+X`.6i%n[Exn y:Z}3nS9Ƞ]tHi:Zg|/]QpfF+3ۣBI T'_ [~0glkUA93.ԙ$#ꓷ2?rRug1?9GХݹ>%Hy0NͰ~ g wWp|ӭpZ{UvH@3x{`b=R=7Ea}ޖ%у{C h)"=sj A xT%(d0q NznS*pO[uOc\8#Ǣ!΅wTQDw2-.s;hTde,Z';Șb/̨fʔa|Fj/=p?h/ Gɗ^$9Xf+oL-R`ƈkmȆS_ 4R5JQH+躊E`8͡-)NsdB[QJbmՈB?GHygs-G/B/ҎA 6⯀g5 l_?eQeeu͸*P_z4lk%Ҋ~rbWdž6SmBga 59CJTeeD覤 ǰCx^0M!(-SK1P2*ܸ?#H rm'a_r۔e|~Lxeo[Lc_,\,ft&pSFg=!FUGW5wiu97}QryB=b@aOO'sV6%8ulfseۄzt`Z,4sP!lǙrD k}䋾^AD߀*lM>>}EKqH"\osӶS#BNV-wo Io~S"`sK+II\ԨܸHOs6Ti#*Z} \OK# ZiBp^7G\8)}#h\=6.TJ ۅ,x`ܛ5fW?>:Q7U"?@?#(4ɵU۵w|3؀X2xr>o4GvFdP{xr.*95Lʮ{?$şmz7PG=*[Ōf-% A0A.}2L<t-ZK]#ڊ G / kZ~8-EɆ[x*>l;bLE -6MaDIϝ Ήda(C)1ݞ_t(8€(5W怀B\tYeQ}1(ILTҋ3ӈ=/{H4qt/} [Rc&Y*.A K@*Y|f~l% 8 8{ hF $~}] x"O9W%]2e!gIh"Kk:UeƋΦǂga(1H6*!h~0+Adw BJ"B yuU#iFH'}5rs9pɌ~+:WcTlG]mc6/S\v0qX?.Bѳ(LC=2溸}m]V4Yѷ4уk9KVuczHЪ8 ^S ~Izv&t yWF1 PCBXfAd͖b:uVSЮOmUkA}X䦊X󇇝(#ǿz~gv[|_orHI9A asdMqE.3b)u^gFvQz$\h[@ypa~+ŀ`eZ 3ijBId6Eo؈=}'dz1lSSԥA;UZ\9K\yJd/u/G1Ojr鿐4d J U%*Tw0j %DOSh" h2.oZ@-`8AK&$!9AsB,f(L4&3D&MpٶS0PYi$>zXX,0͕|RIaIr%M 6 ɿ(xI Zw?pX/{7IŢ_c0 @ !pa=/D-"j'@ ꛧq`swP"̧<.bb 2wS@+a0Tfšh'hȐ ?pyӸj>Vj_R8~O8m=^]?Knp?bx͈W}'F_>?_}J]syЍI.Sb,b螣,{^ݦR]p r1B`2cͷ)Jsː3ů,oɦb4Mcl@p›7Y@%Ф-Oj6f.SP0"N Ug9f{f>N'} yi:g 0'%q ј0Y&GV@t,E|2'ɺ˨G~#m6ͣx_BUn YUKƎܳG&N8WDIUg`p? FkP;erĤ^ǣo!"gެ,q Rq0cڂ39ێP^c'1WG8֞x]Ѕ9>OW~3c utl}3h=)g<h,)T>5~Wbʃx2ɖS46)-륔5H 5~oD%d#$rR|!uR-G0GFh$I=}c$v) +?ytF:zw9l'@y8n86$(HIX֔RbS9>&;Kѯs+p@HǭWջM Wdܒf^5%*a?p`c4$PHQ1'R`}nFDmKl$/b YZ