kubevirt-virt-controller-1.1.1-150600.5.3.2<>,P$fp9|ȭn@A@ʧ`oep@ fg2c,6f mfaˍ3Iw ~oNs޼/S]ql׀HҢY&žQBhɾ; 7Po`R|%ɒ;W>F\?FLd! . F ,2<P Z d x = DXq $  (188F9PF: ;FFBIGB`HBtIBXBYB\B]B^C(bCcDidDeDfDlDuEvEwExEyEzEEFFFHCkubevirt-virt-controller1.1.1150600.5.3.2Controller for kubevirtThe virt-controller package provides a controller for kubevirtfh03-ch2a66SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Packageshttps://github.com/kubevirt/kubevirtlinuxx86_6468,WA큤A큤ffefebe4c87edfb2a68a7d29d87534c8b60520866af791c3ce0d2e6ea3403665e894efd977f9ca5015046c8e79e7acbc809b29e50bb7d0671d927fbace3ba48a990e35febf914b9f9eed690207764788b0660d5a6ceefdf6f9fb2d8e47bdac3ffefa3rootrootrootrootrootrootrootrootrootrootkubevirt-1.1.1-150600.5.3.2.src.rpmkubevirt-virt-controllerkubevirt-virt-controller(x86-64)@@@@@    libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.34)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.3ftf"@f De)eeL@eSa@e/ddP@dccc@cIO@cD @cM@bbc@b(b@bbbb@b~aa*@acapa9@a6`` @`Z`@````~@`~@`}p`}p`x*`m`?z@`*b@`@_@_u@__/@_:_Q___}_ts@_`_[f_ @_*@_@^@^@@^^@^ϧ^>@^vasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comcaleb.crane@suse.comcaleb.crane@suse.comcaleb.crane@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comvasily.ulyanov@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjzerebecki@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comdmueller@suse.comdmueller@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.comjfehlig@suse.com- Collect component Role rules under operator Role instead of ClusterRole (bsc#1223965, CVE-2024-33394) 0005-Collect-component-Role-rules-under-operator-Role-ins.patch- Improve the OrdinalPodInterfaceName mechanism (bsc#1222699) 0004-Improve-the-handling-of-ordinal-pod-interface-name-for-upgrade.patch- Fix test of secure migration with TLS (bsc#1221431) 0002-Update-tls-error-string-in-migration-test.patch - Fix volume phase condition in migration test (bsc#1221430) 0003-tests-Expect-PendingPopulation-phase.patch- Fix test with initially invalid DataVolume (bsc#1218174) 0001-tests-Adapt-VM-phase-expectation.patch- Update to version 1.1.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.1 - Drop upstreamed patches 0001-Update-google.golang.org-grpc-to-1.56.3.patch 0002-virt-launcher-fix-qemu-non-root-path.patch 0003-cgroupsv2-reconstruct-device-allowlist.patch 0004-seccomp-Use-Names-field-to-define-the-syscall.patch- Fix seccomp profile for post-copy migration 0004-seccomp-Use-Names-field-to-define-the-syscall.patch - Set ExclusiveArch conditionally depending on the distro - Remove SLE15 SP4 from the distro check (end of general support)- Update to version 1.1.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.1.0 - Drop upstreamed patches 0001-Fix-qemu-system-lookup.patch 0003-Virtiofs-Remove-duplicated-functional-tests.patch 0005-Support-multiple-watchdogs-in-the-domain-schema.patch - Add patches 0001-Update-google.golang.org-grpc-to-1.56.3.patch (CVE-2023-44487) 0002-virt-launcher-fix-qemu-non-root-path.patch 0003-cgroupsv2-reconstruct-device-allowlist.patch- Update to version 1.0.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v1.0.1 - Drop patches: 0001-guestfs-flag-to-set-uid-and-gid.patch 0002-network-Use-JSON-syntax-for-slirp-device.patch 0003-Vulnerability-fix-limit-operator-secrets-permission.patch 0004-TSC-frequencies-add-250PPM-tolerance.patch - Add patches: 0001-Fix-qemu-system-lookup.patch 0003-Virtiofs-Remove-duplicated-functional-tests.patch 0005-Support-multiple-watchdogs-in-the-domain-schema.patch- Add registry path for SLE15 SP6- TSC frequencies: add 250PPM tolerance (bsc#1210906) 0004-TSC-frequencies-add-250PPM-tolerance.patch- Use recent golang compiler (bsc#1208916) - Limit operator secrets permission (CVE-2023-26484, bsc#1209359) 0003-Vulnerability-fix-limit-operator-secrets-permission.patch- Use JSON syntax for slirp device 0002-network-Use-JSON-syntax-for-slirp-device.patch- Fix libguestfs pod startup error 0001-guestfs-flag-to-set-uid-and-gid.patch- Ensure RPMs and containers are built against the same distro - Be more strict when discovering the registry path: error out if the distro is unknown, instead of falling through to 'opensuse' by default- Update to version 0.58.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.58.0- Update to version 0.57.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.57.0 - Drop upstreamed patches: 0001-Bump-the-version-of-go-restful-to-2.16.0.patch 0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch 0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch 0004-Update-libvirt-go-to-fix-memory-leak.patch 0005-Improve-non-root-path-handling 0006-topology-spread-constraints.patch 0007-Fix-containerdisk-unmount-logic.patch - Build new packages: virt-exportproxy and virt-exportserver - Update SP5 kubevirt registry path (bsc#1204140)- Fix containerdisk unmount logic 0007-Fix-containerdisk-unmount-logic.patch- Support topology spread constraints 0006-topology-spread-constraints.patch- Update libvirt-go to fix memory leak 0004-Update-libvirt-go-to-fix-memory-leak.patch - Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516) 0005-Improve-non-root-path-handling- Add CVE fixes 0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528) 0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460) 0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch- Update to version 0.54.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0 - Drop upstreamed patches 0001-improve-kubevirt-update-test.patch 0002-use-semantic-equality-comparison.patch 0003-Avoid-to-return-nil-failure-message.patch 0004-only-create-1MiB-aligned-disk-images.patch- Increase storage requirements in _constraints - Pack nft rules and nsswitch.conf for virt-handler - Only create 1MiB-aligned disk images (bsc#1199603) 0004-only-create-1MiB-aligned-disk-images.patch- Avoid to return nil failure message 0003-Avoid-to-return-nil-failure-message.patch- Use semantic equality comparison 0002-use-semantic-equality-comparison.patch- Drop kubevirt-psp-caasp.yaml- Allow to configure utility containers for update test 0001-improve-kubevirt-update-test.patch- Update to version 0.49.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0 Includes the fix for CVE-2021-43565 (bsc#1193930)- Update to version 0.48.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1- Detect SLE15 SP4 build environment - Update to version 0.47.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1 - Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch- Pack only kubevirt-{operator,cr}.yaml into manifests - Include manifests/testing/* into tests package - Use disks-images-provider.yaml from upstream - Allow overwrite the default DNS service in tests 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch- Update to version 0.45.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0- Update to version 0.44.1 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1 - Drop patches: dont-build-virtctl-darwin.patch dont-use-bazel-in-build-manifests.patch fix-double-free-of-VirDomain.patch fix-virsh-domcapabilities-error.patch (bsc#1185119)- Generate meta info for containers during rpm build- Add REGISTRY variable - Use registry.suse.com as the default fallback for sle - Rename macro registry_path to kubevirt_registry_path- Do not package OLM manifests- Install virt-launcher SELinux policy (bsc#1185714)- Include release number into docker tag - Add kubevirt_containers_meta build service- Set default reg_path='registry.opensuse.org/kubevirt' - Add _constraints file with disk requirements- Fix virt-launcher crash fix-double-free-of-VirDomain.patch- Fix issue when calling `virsh-domcapabilities` fix-virsh-domcapabilities-error.patch- Package node-labeller.sh along with virt-launcher- Update to version 0.40.0 Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.40.0- Disable changelog generation via tar_scm service (too verbose)- Drop csv-generator- Update registry path- Update to version 0.38.1: * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false * Expose field name 'ipFamily' for k8s < 1.20 * Bump k8s deps to 0.20.2 * verify that VMIs can be started with images not owned by qemu provided by FS PVC * change ownership of the image provided by a filesystem PVC to qemu * virt-launcher's FSGroup functional test is obsolete * virt-controller: Remove FSGroup from Pod * cloudinit.GenerateLocalData: defer removal of temp files * rpm: update `make rpm-deps` * launcher / handler rpm: add tar as pod dependency * cloudinit.GenerateLocalData: drop ineffectual assignment * tests/config_test: fix ineffectual assignment to err * pkg/virt-handler/migration-proxy/migration-proxy_test: fix ineffectual assignment to err * tests/replicaset_test: fix ineffectual assignment to err * pkg/virt-launcher/virtwrap/access-credentials/access_credentials_test: fix ineffectual assignment to err * tests/vnc_test: fix ineffectual assignment to err * pkg/virt-handler/isolation/isolation_test: fix ineffectual assignment to err * pkg/virt-controller/watch/migration: fix ineffectual assignment to err * tools/vms-generator/utils/utils: fix ineffectual assignment to err * tests/vmi_gpu_test: fix ineffectual assignment to err * pkg/virt-handler/cache/cache_test:fix ineffectual assignment to err * pkg/virt-launcher/virtwrap/manager_test:fix ineffectual assignment to err * multus, tests: assert error does not happen * Bump bazeldnf to v0.0.15 * pkg/virt-handler/cmd-client/client_test:fix ineffectual assignment to err * pkg/virt-operator/creation/components/secrets_test: fix ineffectual assignment to err * tests/infra_test.go: fix ineffectual assignment to err * tests/vmipreset_test: fix ineffectual assignment to err * func tests, multus: getting the kubevirtClient must be done first * func tests, multus: execute BeforeAll before BeforeEach * document the interface between hostdev device plugins and kubevirt * Refactor methods to reduce their Cognitive Complexity * Define a constant instead of duplicating literal * Refactor method to reduce its Cognitive Complexity * Define a constant instead of duplicating literals * Refactor method to reduce its Cognitive Complexity * Add a nested comment indicating about an empty function * Define a constant instead of duplicating a literal * Refactor methods to reduce their Cognitive Complexity * Increase subresource pod test execution timeout * Add Nvidia as a KubeVirt ADOPTOR * ipv4, network tests: refactor the masquerade test table * controller, virtinformers: Define the unexpected error once * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false * Converter: Handle 'float' memory * Tests: Ensure cpu/memory in requests/limits allow int/float * virt-launcher: Support (non-)transitional virtio-balloon * rpm: Bump libvirt and QEMU * tests/utils: fix ineffectual assignment to ok * tests/utils: fix ineffectual assignment to err * tests/utils: fix ineffectual assignment to scale * pkg/container-disk/container-disk_test: fix ineffectual assignment to path * pkg/virt-launcher/virtwrap/network/common: fix ineffectual assignment to err * tests/vm_test: fix ineffectual assignment to err * tests/vm_watch_test: fix ineffectual assignment to cmdName * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to err * pkg/virt-handler/hotplug-disk/mount_test: fix ineffectual assignment to res * tests/reporter/kubernetes: fix ineffectual assignment to err * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to err * pkg/virt-launcher/virtwrap/access-credentials: fix ineffectual assignment to output * pkg/virt-handler/vm_test: fix ineffectual assignment to err * tools/util/marshaller: fix ineffectual assignment to err * pkg/virt-handler/device-manager/mediated_device_test: fix ineffectual assignment to err * tests/restore_test: fix ineffectual assignment to restore * removing trello reference as its no longer used * Adjust e2e test which checks for the scsi controller * consider scsi controllers in virtio version decisions * Bump kubevirtci, now hosted on quay.io * network: BindMechanism receiver name consistency * MacvtapBindMechanism.loadCachedInterface fix arg name * Clean error message for not migratable VMI * Fix detection of previous release version in operator func test * Alert when less than 2 KVM nodes available * Fix a datavolume collision * Remove danielBelenky from reviewers * KubeVirt is now released on quay.io only * [virt-operator] load new certificates earlier * Keepalive function for travis to prevent timeout due to inactivity on stdout * Fix limits/requests to accept int again * network: rename NetworkInterface and PodInterface * network: drop NetworkInterface.Unplug * network: eliminate mocking of SetupPodNetworkPhase2 * network: make SetupPodNetworkPhase1 into a constant function * network: rename {Bridge,Masquerade,Macvtap,Slirp}PodInterface * network: rename getNetworkClass * network: rename getNetworkInterfaceFactory * fix review English phrasing * virt-api/webhooks: test newly-renamed function * virt-api/webhooks: simplify and rename ServiceAccount-matching function * split sync resources into multiple functions and files * tests: Test guest restart after migration * Normalize DNS search domains to lower-case * Revert "Fix typos in log output" * tests: After migration test is not invoked * virt-launcher: [masquerade] pass a MAC to the vm accroding to the spec only * virt-launcher: [masquerade] Stop filtering dhcp reuqests by vm MAC * Example code for gosec fix * Update gosec.md * guidelines for using gosec analysis tool * docs/devel/networking: unbreak URL * Add virtctl image-upload usage for WaitForFirstConsumer DVs * Add error message on virtctl image-upload to WaitForFirstConsumer DataVolume * bump bazeldnf * Fix typos in log output * Extend isolation test to cover IsMounted method * Wrap mountinfo parsing common code into a function * start virt-launchers with a non-default log verbosity * change virt-controller log verbosity on relevant config changes * change virt-api log verbosity on relevant config changes * change virt-handlers log verbosity on relevant config changes * add default log verbosity values to cluster config * allow registering multiple callbacks for config changes * add a logVerbosity struct to set KubeVirt components log verbosity * Remove travis-ci logic for pushing to quay app registery * Make mutating webhooks required * Bump bazeldnf to a version with its own ldd implementation * Add tests * Fix typo * Fix some typo in docs * Add alert for insufficient number of nodes with KVM resources * Remove dockerhub-related travis jobs and credentials * Make `make build-functest` work without nested bazel invocation * Compile template-manifestor with bazel * Invoke shfmt from bazel * Add gofmt to our vendor tree * kubevirtci, Bump kubevirtci * Bump bazeldnf to 0.0.10 to better deal with bad repomd mirrors * Allow setting user local bazelrc settings. * Update Quay credentials in travis config * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false * tests: make client in hello world job UDP wait for response * wait for host responding to ping, in some cases the first two pings fail, now instead we wait for a specific amount of time * Increase time to wait for failed connection * virt-controller: increase the number of VMI controller threads * sriov, tests: xfail vlan test * network: simplify getNetworkInterfaceFactory * network: drop long-unused plugFunction * network: drop long-unused qemuArgCacheFile * network: rename constant to primaryPodInterfaceName * network: drop global podInterfaceName variable * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false * add vi-minimal to base packages for containers * Additional hotplug functional tests * Add unit test for PCI address parsing * Escape dot '\.' in PCI_ADDRESS_PATTERN * Move ParsePciAddress function to hardware utils * Bump bazeldnf to fix rpm verification * Drop references to kubevirt-host-device-plugin-config cfgMap * Check if block devices are ready. If not ensure that the block device major and minor is allowed in the virt-launcher pod. Enable functional tests that were failing due to permission issues * Reviewers update: Adding EdDev as a code reviewer * virt-launcher/handler: move Macvtap discovery of MTU and target * virt-launcher/handler: Macvtap shouldn't use vif cache * Fix Open Shift SCC permissions to allow attachment pods to use host network. Fix selinux to be on container level instead of pod level. * Use the array value instead of a new variable when possible * eliminate the usage of interface address in decorateConfig() * allocate new variable and don't use the originsl s.domain.Spec.Devices.Interfaces * fix some tabs/spaces mess * Fix memory aliasing in for loop - taking the address of loop variable is dangerous * ENV VAR for client-go scheme registration version * Give kubevirt pods more time to become ready * Fix PV selector for windos and rhel PVCs * Make storage tests fit for parallel execution * Use the new nfsserver library in the migration tests * Create windows and rhel PV within the corresponding tests * Prepare our framework in utils for parallel storage test execution * Move nfs server rendering to its own package and adjust memory requests * Add a ginkgo matcher library especially for kubevirt * Prepare image provider for parallel execution * Code Review edits * Bump kubevirtci * Stick with virtio model on the ballooning device * Tablet input device only exists as virtio 1.0 * virtio-serial controllers need the model set too * Add virtio-transitional e2e test * Extract converter into its own subpackage * Unit test for choosing virtio-transitional * Make the converter aware of virtio model preferences * Add a global VMI flag to the API to fall back to virtio_transitional * tests, xfail: Change XFail API to wrap the expected failure * Don't override the e2e kubevirt config by default in the e2e tests * virt-launcher/handler: remove the tap device from the VIF cache * Use virt-handler image as base for multus tests * Explicitly build libvirt-devel tars * Remove no longer needed go_library definition * Allow qemu to bind to privileged ports for slirp * Docuement how RPM verification can be done * Add a RPM verification target * Bump to bazeldnf with improved RPM verification * fix logos dependency * Add GPG keys to repo.yaml * Update RPMs * Avoid dependency flipping * add ps binary * Update dependency update documentation * Remove old libvirt-devel dependencies in WORKSPACE * Prepare binary containers for bazeldnf built content * Start using bazeldnf RPMs for building and testing * Add RPMs * Add repo.yaml files * Add a script to resolve RPM dependencies * Document new kubevirt handling of WaitForFirstConsumer DataVolumes * Fix support for camelCase userData and networkData labels * virt-launcher: Remove unused arg from GetDomainSpecWithRuntimeInfo * Extend VMI count metric to include osinfo * fix: change url and label name for "good-first-issue" on CONTRIBUTING.md Added patch: dont-use-bazel-in-build-manifests.patch- Add building of virt-tests- Update to version 0.37.0: * Remove travis-ci logic for pushing to quay app registery * Update Quay credentials in travis config * MacvtapPodInterface.setCachedInterface: fix arg name * make generate: 2021 edition * tests, dhcpv6: verify connectivity survives after migration * tests, dhcpv6: use python server instead of nc * tests, dhcpv6: start dhcpv6 client, config d.route & prefix via console * tests, dhcpv6: use fedora vms for masquerade ipv6 connectiviy tests * tests: split masquerade connectivity tests to ipv4 and ipv6 * tests: remove libnet.WithIPv6 from ipv4 only dhcp test * dhcpv6: unit tests * dhcpv6: Extracting the build of the server response to a separate method * dhcpv6: Add the request iana to the response * dhcpv6: reply to dhcp solict with rapid commit * add ipv6 address to VIF.String * dhcpv6: run only for masquerade * dhcpv6: introduce prepareDHCPv6Modifiers * dhcpv6: Allow dhcpv6 server to run without CAP_NET_RAW * dhcpv6: handle requests from client - adding DUID and IANA options * virt-launcher: vendor dhcpv6 * virt-launcher: introduce dhcpv6 * Extend version functional tests * Set --stamp as default build flag * imageupload: improve nosec comment * cloud-init: test that GenerateLocalData can run twice * cloud-init, GenerateLocalData: simplify staging replacement * tests, ping: increase default amount of packets * cloud-init, GenerateLocalData: drop redundant diskutils.RemoveFile call * cloud-init, GenerateLocalData: drop ambiguous comment * add use case Signed-off-by: xiaobo * add use case Signed-off-by: xiaobo * add use case Signed-off-by: xiaobo * add use case Signed-off-by: xiaobo * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false * Document dependency update flows * Newer curl version don't allow headerless HTTP * Build all test images in kubervirt/kubevirt * Add managed RPMs and remove unmanaged RPMs * Add repo.yaml files * Add bazeldnf dependencies * Add a script to resolve RPM dependencies * virt-launcher, converter: Extract SRIOV hostdev creation * virt-launcher, converter: Refactor network indexing * virt-launcher, converter: Refactor iface multi queue * tests, vmi_multus: test Sriov with Vlan * Don't overwrite user-provided GOFLAGS * Handle btrfs subvolumes when parsing mountinfo * Add mount info test cases * Add testdata for mount info tests * Cleanup duplicated code * Refactor containerdisk mount code * tests,sriov:make createSriovVms recieve network names * tests, sriov: remove un-needed function. * tests: sriov: extract NAD creation to a helper * tests, utils, delete vmi waiting: assert on err * Preapre build environment for bazeldnf * use placement api for assinging virt-handler pod * virt-launcher, libvirt: Free (all) domain resources * Generate release manifests using quay images * Add maiqueb to code-reviewers list * Update vendored dependencies * Update versions of some dependencies * only validate status of vm, vmi, and vmi migration objects * This fixes a race condition between unmounting a file system volume and detaching a disk from the running VM. In certain conditions it would attempt to unmount before the disk was fully detached causing the unmount to error and preventing the VM sync from fully detaching. This moves the unmount to after the sync, so this race never happens. * smbios, sidecar hook, tests: assert the hook version is advertised * smbios cmd: set the version parameter as mandatory * examples, hooks: correct the vmi-sidecar-hook example * add kubernetes os nodeSelector to injectPlacementMetadata * virt-launcher, converter: Set SRIOV device as unmanaged * tests, sriov: XFail IPv4 connectivity test * Append rootfs mount to containerdisk base path * Narrow down watcher select which waits for object states * Fix Eventually which used the time out as description * Remove unused functions: GenerateSelfSignedCertKey and GenerateSelfSignedCertKeyWithFixtures * use filepath.Clean for two fixed path parameter functions * virt-launcher, converter: Remove vCPU dependency on queue limits * add Kubermatic to adopters list * manager_test: add err check for ioutil.TempDir * windows_test: remove duplicate code * cleanup tempfiles for manager_test * cleanup tempfiles for common_test * Functional test to verify vmis are migratable after update to from latest KubeVirt official release * update libvirt base container to rhel-av 8.3 * Unit test to verify evaculation controller generated migration object fields * evacuation informer should only observe the creation of migration objects it created * cloud-init: Allow populate networkData alone * tests, sriov: XFail IPv6 connectivity test * dev guide, networking: net_raw cap is not required by virt-launcher * Revert "dev guide, networking: no capabilities are required" * Make sure to use all supported versions for status subresource * Update csv gen logic for v1 api * Update hardcoded references to v1alpha3 in unit tests * Update unit tests to account for aggregated api server registration for v1 API * Update functional tests that had hardcoded references to v1alpha3 * Add functional tests to verify vm creation using all supported API versions * Add v1 api version * Revert "linux capabilities: remove CAP_NET_ADMIN" * Revert "libvirt, mtu: do not perform any network config on the launcher" * move kv update validation webhook to operator validation configuration * Fix test id for io mode test * update listtype markers for kubevirt pci host devices * Fix gosec unhandled errors in delete.go & create.go * Cleanup k8s jobs from test namespaces * If the fedora login expecter is stuck, retry * tests, multus: Change 3rd network SRIOV vnic name * tests, sriov: Centralize SRIOV network names * tests, multus: Fix IP address configuration * tests, Use RandName for creating random VMI names * Fail detection and handling when EFI without SB is not available * Add unit test covering GetDomainSpec fallback behavior * Reject --access-mode ReadOnlyMany when uploading an image. * Consume nightly build images from quay * Run bazelisk run //plugins/cmd/uploader:uploader -- -workspace /home/prow/go/src/github.com/kubevirt/project-infra/../kubevirt/WORKSPACE -dry-run=false * Fix failing unit tests for new GetDomain logic * Remove race condition from GetDomain check * Fix timed domain resync * fix patch for removing infra and workloads from KV * add webhook to validate kubevirt CR updates - only allow updates to workloads key if no vmis are running * tests, sriov: Retry ping if it fails * tests, libvmi, vmi: shorten random vm names #2 * tests, gpu: Do not mount /sys/devices/ for SRIOV devices * VMI configuration test: fix disk cache modes testing * fix gosec g204: Subprocess launched with variable * Removed unused function readProcCmdline() * Enable and fix tests * Fix gosec issue of: Potential file inclusion via variable Dropped patch: fix-goflags-overwrite.patch- Update to version 0.36.0: * Functional test to verify vmis are migratable after update to from latest KubeVirt official release * update libvirt base container to rhel-av 8.3 * dev guide, networking: net_raw cap is not required by virt-launcher * Revert "dev guide, networking: no capabilities are required" * Revert "linux capabilities: remove CAP_NET_ADMIN" * Revert "libvirt, mtu: do not perform any network config on the launcher" * Fail detection and handling when EFI without SB is not available * Add unit test covering GetDomainSpec fallback behavior * Fix failing unit tests for new GetDomain logic * Remove race condition from GetDomain check * Fix timed domain resync * Update ADOPTERS.md * tests, utils: shorten name of random VMs * Move some datavolume tests to the ceph lane * Old kubevirt released don't support CDIs WaitForFirstCustomer * Let virtiofs consider WaitForFirstCustomer setting of CDI * Use Immediate bind on negative PVC Datavolume tests * Enable WaitForCustomer CDI feature gate by default * Generate v1beta1 client for CDI * Don't try to hotplug waitForFirstCustomer PVCs * Fix access credential unit tests * Ensure that our service accounts can always update the VMI status * Update to a libvirt image with a newer seabios. * adjust pci address tests to consider the new virtio-iscsi controller * Remove AfterEach cleanup so we can capture VM/VMI state in overal aftereach cleanup instead of losing it. * Disable complex tests for now. * HotplugVolumes feature gate * Set grace period on attachment pod to 0 to have faster removal of the volumes when not removed by the controller. Added functional test to ensure the VMI goes into failed state when attachment pod is deleted. Added functional test to ensure the VMI is no longer migrateable after a volume is hotplugged. * Added functional tests with block volumes. Fixed functional attachment logic. * Added VMI attach/detach functional tests. Increased timeout on tests. Fixed typo in reason message * Fixed bug in how device names were calculated. Added functional test that adds a bunch of volumes, removes one, add a different one, and expects the device name to be the one just removed. Then adds the removed one back and expects the device name to be a new one. Added unit tests. * Improve error messaging during hotplug subresource add/removew * Fixes issue with VolumeRequests validation on the VM * Fix some issues pointed out in review. Fixed functional test with 5 adds and deletes. Added new functional test to test various adds and deletes. * Addes abilty to watch for libvirt device add/remove events for hotplug volumes * Updated and added functional tests. Added storage directory for storage related functional tests similar to networking. Fixed various issues found by the functional tests. * Attach disk to VM * VM controller unit tests for volume hotplug * Ensure we only add/remove volume operations are only performed if needed * Volume add/remove subresource unit tests * VolumeRequest validation unit tests * Validation logic for VM VolumeRequests * Hotplug VM Functional Tests * Add VM controller logic for handling volume add/remove requests * Add hotplug subresource api endpoints * Implemented virt-handler changes: Bind mount File System PV into virtlauncher pod. Expose block PV in virtlauncher pod. Added volume mounter struct to keep track of mounts. Added unit tests for volume mounter * Change phase/message/reason from hotplug struct to main VolumeStatus struct. Address some review comments * Automatically add virtio-scsi controller to all VMIs. * Updated vmi controller to separate sync and status update to follow KubeVirt guidelines. Updated unit test tests to match and added some extra unit tests for the new status update function. * Updated update-admission webhook to include verifying the structure of disks and volumes as well as call the create admission verifier to ensure nothing else slips through. * Added attachment pod life cycle functions to vmi-controller. Added unit tests for new functions * Attachment POD life-cycle code, including updating VMI status. * Update VMI admission webhook to allow modification of the disks and volumes section of the VMI Spec. This modification is needed to allow for disk hotplugging to happen. Only internal KubeVirt Service Accounts are eligible to modify the spec. Once we have the appropriate sub resources, users can call those to have it modify the spec on their behalf * macvtap, migration, tests: add a test w/ traffic * tests, network: Remove vmi Status ip normalization * tests, sriov: Use cloud-init to set IPv6 by MAC * tests, multus: Use network-data at bridge-cni test * tests, libnet: Add Match feature and expression builder to networkData * Update feature gate setup to new CDI version (now on CDI CR) * Reuse datavolumes already found in listMatchingDataVolumes for increased consistency between sync and updateStatus * Update test_id:5252 to run with WFFC enabled * check PVC if it waits for first consumer * Remove API phase "Provisioning" * Handle the DV in WaitForFirstConsumer phase by starting the "consumer-pod". * Remove sysctl binary dependency * Bump atlassian/bazel-tools * tests, network: Fix race condition GA test * virt-handler, status: Do not include the IP prefix consistently * Allow to run subset of rules for gosec * tests, dual stack: split probes tests to test per IP-Family * bump kubevirtci * Add ADOPTERS * make generate && make deps-update * bump cdi to 1.26.1 (from 1.25.0) * dev guide, networking: no capabilities are required * Increase CDI deployment timeout * expose, tests: fix early shutdown of `nc` TCP connections * Fix misspellings * Fixes race condition in func test * Properly handle failures when starting the qemu agent access credential watcher * Ignore warnings during vmi startup in access cred functests * Update access credential documentation and openapi markers * access credential sync events * Remove authorized_key file merging. * Report access credential status as a condition on the VMI * Revise access credential authorized_key file merging * Provide list of users for ssh auth instead of files * Make the authorized keys files list required for qemu guest agent propagation * Add unit tests to validate secret propagation watching * UserPassword access credential webhook validation and unit tests * unit tests for agent access credential injection * functional test for user/password credentials * Addition of UserPassword access credentials * Functional tests for access credential ssh key propagation * Reload dynamic access credentials based on secrets using fsnotify * Introducing the accessCredentials api for dynamic ssh public key injection * virt-launcher, agent-poller: Start poller with short intervals * virt-launcher, agent-poller: Refactor the Poll method * tests, login: Remove tests/login.go * test, login: Remove LoginToAlpine from login.go * tests, ipv6: Configure VMI IPv6 through console only when needed * test, login: Move loggedin expecter to console package * virt-launcher: Improve libvirtd debug log filters * tests, login: Move login.go to console/login.go * virt-handler, sriov: Add network name in VMI interface status * fix gosec issue of g204: subprocess launched with function call as argument or cmd arguments * Fix for flake CI test * Use the correct emulator prefix for qemu cleanup steps * Fix hardcoded qemu-kvm occurance in a migration test * Remove in some tests the assumption of hardcoded qemu emulators * Explicitly set virtio-scsi on the scsi controller * WORKSPACE: Update libvirt container * Switch to use anew global close() function in pkg/util Fix typos and remove extra comments * tests, console: Remove VMIExpecterFactory * Fix double migration during node drain * test, network: Add bridge binding + ga test * networking, tests: also check the MTU of the tap device * tests, libvmi: Remove interface,network config from NewFedora * linux capabilities: remove CAP_NET_ADMIN * libvirt, tap: create the tap device w/ the same user as libvirt * mtu, tuntap: set link MTU when creating the tap device * libvirt, mtu: do not perform any network config on the launcher * net admin: disabling tx checksum offloading on virt-handler * Add a log message if we pick up a new CA bundle * Increase rotate intervall * tests, multus, sriov: Refactor tests * Update bazel files * Switch to use named return errors to allow updating the error from defered function * Fix gosec issue: Deferring unsafe close() When deferring a close() we don't have a chance to check the error returned from the close() call itself. For RW files we treat the error similar to a write() error , for RO files we only log an error message * Mirror PVC struct * Add function test to validate IO mode settings * Set IO to native also for pre-allocated file disks * Switch to use a common function GetImage and remove GetImage from manager.go * Use qemu-img in order to identify sparse files and get image info * Set the IO mode to 'native' when possible for better performance * test, cloudinit: Use "json" annotation instead of "yaml" * tests, multus, sriov: Fix flakiness due to race between ga and test * tests, multus, sriov: Add validatePodKubevirtResourceName * tests, multus, sriov: Add missing error check * tests, multus, sriov: Fix checking for the same network twice * image-upload: wait up to 5 min for PVC and Pod * Remove domain label from kubevirt_vmi_memory_unused_bytes * gosec - fix CWE 326 * virt-launcher: drop CAP_NET_RAW from compute container * virt-launcher, dhcp: Avoid using SO_BINDTODEVICE on the dhcp server * agent-poller, test: Extract AsyncAgentStore tests to new file * agent-poller, test: Rename agent poller test * tests, console: Require at least two batchers for the safe expector * tests, console: Introduce SafeExpectBatchWithResponse * tests, console: Replace some NewExpecter usages * tests, console: Change NetBootExpecter to not return an expecter * tests, login: Replace the Alpine login helper * tests, login: Replace the Cirros login helper * tests, login: Check privileged console prompt * tests, login: Replace the Fedora login helper * tests: Use LoginTo* helpers in waitUntilVMIReady * updated the technical description * Add enp0s3 to approvers list * Change file permissions on binary directory * docs: Fix documentation for useEmulation flag * virt-config: Fix tests for KubeVirt CR * virt-config: Drop stopChan * removed the word place-holder * fix gosec sha1 week cryptographic issues * Fix gosec md5 weak cryptographic primitive * Fix shell formatting, fix entrypoint path * Disable Virtio-FS Metadata Cache * Add Igor Bezukh to test approvers * Fix permissions tests for VMs * lock device plugings maps during device controller shutdown * dp: verify that host devices topology is being correctly reported * update the API fields so it be complient with API rules. * testutils: remove unnecessary changes to the config mock * tests: move the soundcard test out of the GPU module * Add a "GPU" passthrough functional test * update unittests to use kubevirt CR and remove remove hostDevConfigMapInformer * remove the hostDevConfigMapInformer, get host devices from KubeVirt CRD * request host devices on vmiPod as well * make sure that permitted host device config is working as expected * add unit tests to veriy host devices assignment * device-manager: clear permitted device list before parsing * device-manager: added mdev tests + misc fixes * device-manager: improve the PCI tests * device-manager: misc post-rebase fixes * add GetInitialized to pci and mdev device plugings * add HostDevices feature gate * device-manager: add static tests for PCI device discovery functions * device-manager: few cosmetic fixes * make sure that vmis can request only permitted gpus * tests: return hostDevConfigMapInformer as part of the NewFakeClusterConfig * device-manager: mock PCI device info getters for tests * Fix device controller static tests to match the new API * Move the check for permanent device plugins to list creation Instead of always adding them to the list and then ignoring them later * Add a lock to ensure device plugins won't be started/stopped multiple times in parallel Also fix some typos and avoid an active loop * close device plugin channel is a safe manner * introduce a ControlledDevice struct for the device controller to keep dpi stop chan * Fix ignored static DPs, fix typos and remove defer Stop() in Start() * Refactor permanent device plugin code * dynamically start and start device plugings for permitted/banned devices * propagate hostDevConfigMapInformer to device controller * virt-launcher: handle allocated host devices using a single map * reject specs with non-permitted HostDevice and GPU resources * convert HostDevices and GPUs to libvirt hostdev for pci and mdevs * collect PCI and MDEVs made available for assignement by the device plugins * add alias to libvirt hostdev struct * separate ResourceNameToEnvvar to utils * add device plugings for permitted devices which are present on the nodes * add a device plugin for mediated devices * add a device plugin for pci devices * add virt-config to device controller * add a HostDevices api schema * add TopologyInfo to out device plugin api * rename the device manager controller for kvm controller * introduce a new hostDevConfigMapInformer * handle the kubevirt-host-device-plugin-config config map * Add PermittedHostDevices type to support a new kubevirt-host-device-plugin-config configmap * Revert "Merge pull request #4470 from oshoval/fix_sriov" * tests, Fix CDIInsecureRegistryConfig logic * tests: LoggedInCirrosExpecter can return a nil expecter in case of error, with these changes we call Close on the returned expecter if the error is nil. * tests, sriov: Do not mount /sys/devices/ for SRIOV devices * virt-launcher: remove redundant cidr from dhcp server address * tests, sriov: Fix the helper that waits for a vmi to start * tests, Fix SRIOV UpdateCDIConfigMap panic * add unit test * Enhancement #4365 [virt-controller] Remove redundant initcontainer when there is no ContainerDisk defined in VM * Consolidate shell script files into functions * Create main shell scripts to call from the ci-config * Fix comment typos * Add scripts for nightly master deploy * Move code for downloads and test execution into scripts * ensure the virt-handler killer pod has gone * audit the usage of unsafe pointers * Set leader metric after controller is functional Add a unit test for this * Define side effects class on our webhooks * Improved the Technical Overview description * changed: VM has only one VMI * Included a figure to illustrate the components architecture * Included a little bit more details in the virt-launcher description * Included a little bit more details in the virt-handler description * Included a little bit more details in the virt-controller description * Make the name of components bold * Improved the Technical Overview description * Fixed typo- Fix -buildmode=pie fix-goflags-overwrite.patch, dont-build-virtctl-darwin.patch- Update to version 0.35.0: * sriov lane: skip flaky tests until their issue is resolved * add an independent claclulation of required vcpus for mem overhead calculation * adjust memory overhead calculating by adding a static 10Mi * move guest cpu topology modification to vmi mutator webhook * Ensure that we restore the cdi-insecure-registry configmap in tests * Add test_ids_cnv_2.5 * dual stack, expose, tests: remove batchv1.Job duplicated code * test, waitvmi: Add context mechanism to WaitUntilVMIReadAsync * dual stack, expose, tests: skip on non dual stack clusters * dual stack, expose, tests: port VM service tests * tests, multus-tests, SRIOV: configure IP based on MAC or name * Catch goroutine panic with GinkgoRecover in tests * tests, multus_tests: make helpers return an error * dual stack, expose, tests: port VMIRS cluster IP service test * dual stack, expose, tests: port UDP services test * dual stack, tests: ping first on helloWorld{UDP|HTTP} jobs * dual stack, expose, tests: port the VMI service test cases * Bump kubevirtci * make generate and make deps-updateand update test import * Bump CDI to 1.25.0 * Reduce the cluster size a little * dual stack, expose, tests: get the IP addr from a DNS name * bump kubevirtci: get latest sriov provider * Infra test made invalid assumptions about cluster composition * Fix panic when endpoints were empty. * dual-stack, virtctl: expose ipv6 services * Remove 'string' from json tag to preserve type information in our API * automation: cancel CDI insecure registries cehck on sriov lane * Emit an event if we detect terminating pods * tests, pausing_test: change long process test * test, infra_test, Adapt tests to support dual stack * tests: remove `IsRunningOnKindInfraIPv6` * fix wrong logic in SetDriverCacheMode log message * Revise functional test to verify 440 read only image * Build container disks with 440 mode and 107:107 ownership * Add e2e test for replacing terminating pods immediately * Bump kubevirtci * test: Remove all the usages of `IsRunningOnKindInfraIPv6` * Disable service links on virt-launcher Pod * tests, infra-test, Remove unneeded vmi creation * infra_test, Refactor tests to use a DescribeTable * infra_test, Add validation of errors * Fix flaky timezone test * Let VMIRS react to terminating pods of VMIs * Let the VMI indicate when Pods are terminating * functests, macvtap, migration: successful macvtap VMI migration * functests, migration: move some asserter subset to common helpers * functests, macvtap, multus: use libvmi Cirros VMI factory * functests, macvtap, multus: schedule the VMs in the same node * tests: update the `StartVmOnNode` method to return the started VMI * examples, macvtap, multus: add example for macvtap VMI * macvtap, admitter: macvtap requires multus network * functests, macvtap, multus: add connectivity test between VMs * macvtap: feature gate macvtap feature * functests, multus: refactor `configInterface` to allow sudo * functests, macvtap, multus: add test with a custom MAC address * tests: remove all net-attach-defs on test cleanup * automation, macvtap: restrict macvtap func tests to multus lanes * unit tests, macvtap, multus: introduce macvtap * macvtap, multus: add macvtap BindingMechanism * improving PCI configuration tests * Template the cdi namespace * add dev registry as insecure registry to cdi * Update testing infra to cdi 1.23.7 in order to bring in registry import fixes * Datavolume container registry import test * CONTRIBUTING: point developers to kubevirt-dev slack * rebase * Remove incorrect listtype * fix 1.19 lane * Propagate error from patchValidation * rebase * reduce scope to vm/vmi * Remove +listType=map from tolerations This marker also requires //+listMapKey which can't be resonable set at this moment. (All fields are optional and missing default) * update builder * review * Add missing markers * Test verifying kubectl explain works * Adding test verifying crds are structural * Use controller-gen to generate validations for crds * test if crds for operator are correct * adding tools for generating correct validation * cleaning generated desc. and nullable fields in status * adding patching of crds for operator * adding markers for controller-gen * tests, restore tests: check on successful commands * Fix gosec issue: week random generator * Bump kubevirtci * It is not always bad for VolumeSnapshot to have an error * Fix artifacts in gosec target * tests, infra-test, Refactor node selection * Do not change vnc socket's permission to 0444 * tests, infra-test, Fix node updates * tests, infra-test, Add missing break when selecting a node * tests, pausing test: increase time for long process * tests, login: expect fedora full prompt * tests, migration, stress-test: remove doubled `\n` * tests, re-factoring: use safe expect-bathcer and prompt Expression * tests, infra-test, Add missing check on AfterEach * tests, infra_test, Add missing assign when removing taints * Don't parallelize cluster-sync dependencies * hack: Print cluster-* script name when complete * Point to kubevirtci for new providers. * Update documentation to refer to scripts having moved to cluster-up/ * Update docs that refer to kubevirt-config ConfigMap to use kubevirt CR * tests: Add missing asserts to the vmi-configuration tests * Adapt conformance tests to support migration. * automation: remove ipv6 lane * Set read only for our demo container disks and verify their mode does not change at runtime * Attempt to use whatever permissions a container disk has applied to it without mutating the file * rebase + fix compile error due to another PR * set the label for downwardAPI test in the test itself * Move AddDownwardAPIVolumeWithLabel to be public, add downwardAPI disk to the migration test * add downwardAPI volume in the test instead of in the helper * delete commented out line * Adding function tests (for make functest) * remove rule violation * support DownwardAPI volum source * Fix typos and formatting * tests/utils: remove 'IsIPv6Cluster' function * tests, iscsi: remove iSCSI PVC tests IPv6 cluster skips * VM status to report whether volumes support snapshots. * tests, network: Relocate VMI/POD IP validation w/ Guest Agent * Fix pull-kubevirt-apidocs * tests: Render pods in the test namespace * tests, iscsi: change 'CreateISCSITargetPOD' to return pod * Lift the e2e test parallel run restriction for fedora guests * Give the CI nodes two more GB of memory * Adjust bump script to use tagged kubevirtci releases * tests, console: Rename functions to fit the new package * tests, ping: Move ping under libnet package * tests, expecter: Create a console helper package * Bump kubevirtci * Mirror new dependencies * update builder image * tests, networkpolicy: Wait for VMIs readiness in parallel * Exclude .git and _ci-configs at bazel's goimports * multi-queue: cap the maximum number of queues * Add 2.x QEMU Guest Agents to the list of supported versions * Update to fedora 31 as base image. * Add test_id for post-copy migration with Guest Agent Test * dual stack, services, tests: enclose test setup in a `By` clause * dual stack, services, tests: really check connectivity exists * dual-stack, tests: skip IPv6 test on non-dual stack clusters * dual stack, services, tests: unify the `Job` cleanup solution * dual stack, services: provide more explicit info on test execution * tests: test the masquerade bridge has the correct mtu * virt-handler/launcher: Set the pod iface mtu on the bridge * restore backwards compatiblity with api group/version on DataVolumeTemplates spec * Add short readme * multi-queue, tests: assuret we can request a VM with a single vCPU * api: update the API description of the NetworkInterfaceMultiqueue flag * tap-device, multi-queue: enforce single-queue tap * Delete kubevirt service accounts from default privileged SCC * Added helper function to return all kubevirt service account users * Removing redundant tests related to SCC users modification * Added unit tests for SCC users modification upon upgrade. * Remove kubevirt service accounts from default privileged SCC * tests, nfs: avoid failures in afterEach of a skipped test * test, nfs: Change CreateNFSTargetPOD to return a Pod * tests, dualstack: don't stop nfs tests cleanup in case of an error * tests, dualstack: use IPFamily instead of boolean to mark tests * tests, dualstack: introduce SkipWhenNotDualStackCluster * tests, dual stack: Adapt tests using NFSTargetPOD to support dual stack * docs: Fix the ginkgo flags usage example * Properly exit if kubevirt does not get ready on cluster-sync * Rework logic so it is easier to understand what is happening * fix restore controller memory corruption * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated. * Save a nice cluster-overview to the artifacts * Disable goveralls debug output * Take time in cert tests after CA generation * Use coverage merge tool for goveralls * Introduce a tool to merge coverage reports * Enable atomic count, race detection and fix races * Move coverage reports over to bazel * Use a proper cc_library for libvirt dependencies * Auto-generate Help message from /metrics endpoint to docs/metrics.md * tests, libnet: Relocate validation to libnet * tests, libnet: Move cloud-init net and dns to libnet * Fix flaky rename test * Run Travis CI only on selected branches, remove sudo flag * tests, infra-test, Solve CI flakiness due to update conflict * Fix flaky unpause tests * Refactor .json files to go file * Mark networking conformance tests * Fail only when new issue comes up * Fix high severity&confidence issues * Add gosec to project * Fix display of virtctl help text for other usages * tests, libvmi: Introduce CloudInit NoCloud Network Data * functest for PR #4132 * Fix coexistance of scsi and sata drives- spec: Add rpmlintrc to filter statically-linked-binary warning for container-disk binary. The binary must be statically linked since it runs in a scratch container.- spec: Generate the registry path for kubevirt-operator.yaml at build time. Prjconf macro 'registry_path' can be used to override registry path to the KubeVirt container images - spec: Add kubevirt-psp-caasp.yaml, a PSP based on CaaSP privileged PSP, to the manifests subpackage - spec: Don't add component name to DOCKER_PREFIX passed to build-manifests.sh- Add package with built YAML manifests used to install kubevirt- spec: Remove needless use of chmod and build-copy-artifacts.sh- spec: Fix typo in date command- Update to version 0.34.0: * jsc#ECO-2411 * Add mirrored dependencies to WORKSPACE * Mark networking conformance tests * restore backwards compatiblity with api group/version on DataVolumeTemplates spec * Revert "move all tests to use kv config" * Revert "update config message to specify which resource type it is using" * Revert "test usage of configmap configuration" * Revert "update build file" * Revert "convert postcopy tests to use KubeVirt CR" * Rework logic so it is easier to understand what is happening * Allow PVC as volume source with a DV populating the PVC. Before this was not allowed because we could not be sure that the PVC was fully populated. This commit checks the DV to ensure the PVC is fully populated. * vmi, sriov: Enable to set the PCI address on a SRIOV iface * Don't discard bazel platform cache on virtctl cross-compilation * convert postcopy tests to use KubeVirt CR * fix autoconverge test * remove using BeforeAll in vmi configuration tests * generated openapi spec * clean up * start prom server earlier in the virt-handler process so health check returns without EOF error * change kubevirt config type MemBalloon * dump kubevirt cr in ci artifacts * cpuRequest can not be type string since when the resource is patched it will fail to parse the units * change bool to pointer to know unset vs value set to false * update build file * test usage of configmap configuration * update config message to specify which resource type it is using * move all tests to use kv config * virt-launcher, Add mechanism to guard add/delete events channel * Generated artifacts * Add functional tests for missing subresource RBAC rules * Allow admins and editors of a namespace to [un]pause a VMI * Add dummy status to DataVolumeTemplate objects to maintain backwards compatibility * Add functional test to validate api compatiblity during update * changed migration test to use table * only log event if migration is stuck during post copy migration * change api from MigrationMode to AllowPostCopy * switch to post copy migration if not completed with in acceptableCompletionTime * update openapi spec * add NFS migration test with postcopy * remove vmiHasLocalStorage function * fix migration tests * remove reject postcopy for storage test * remove nested vmi migration configuration * change usePostCopy to migrationMode * move when mode is set * allow for postcopy migration * maybe fix flakes test * vendor in 1.23.5 CDI to hand golden namespace use case * Validate network interface name * tests, utils: Check events watcher type before casting * Add readiness and health probes to virt-handler * Removes unusable fields from vm DataVolumeTemplates * virt-launcher, Remove unneeded log * virt-launcher, Remove double domain event sending * virt-launcher, Fix Guest Agent updates causing an event handling deadlock * selinux: always build KubeVirt with selinux support * Run make generate * Adjust ceph-rook focus for e2e tests * wrong apiVersion used for VirtualMachineRestore owner references * update init container unit tests to validate container-disk pre-pull * add container disk images also as init containers in order to guarantee they are pulled before virt-launcher starts * add '--no-op' option to container-disk entry point for pre-pull logic * Make the nogo check pass * Make kubevirt compile with bazel 3.4.1 * Update builder image to bazel 3.4.1 * wait for vmi-killer pod to start before moving on * Document basic parallel-test execution needs * Integrate the junit merger into the parallel functest execution * Add a tool to merge partial junit results * Don't set the namespace in the VMI factory * Run most of the VMI lifecycle tests in parallel * Run kubectl related tests in parallel * Hugepages are limited, run the relevant tests not in parallel * Make version and vm-watch tests execute in parallel * Don't check terminating pods if they pick up config changes * Run container disk tests in parallel * Run expose tests in parallel * Run probe tests in parallel * Allow running VMI Preset tests in parallel * Run most of the cloud-init tests in parallel * Make subresource tests part of the parallel test suite * Adjust subresource access tests to new test service accounts * Reference the default namespace directly * Add a skip check for a migration tests if enough nodes are available * Make access tests parallel executable * More parallel tests * Resolve test-namespace name in the test * Allow VM tests to run in parallel * Allow console tests to run in parallel * Allow the headless service tests for VMIs to run in parallel * Allow tests in vmi_configuration_test to run in parallel * Make it possible to set the number of parallel executors * Increase slow test threashold to 60 seconds * Ensure that --skip and --focus flags are only passed onces * Change build environment to execute ginkgo in parallel * Let the ginkgo reporter log where it will dump artifacts * Split setup and teardown code between parallel and synchronized steps * Consume the ginkgo binary from the vendor folder * Mark all tests as have to be run in serial * fix typos * docs: Update for k8s-1.18 as default provider * Add option to log BIOS output to serial and use it to test for bootable NICs * Migrate VMI when its pod is marked for eviction * Intercept evictions on virt-launcher pods * Support testing kubevirt on RHCOS * Update kubevirtci to latest commit * create tap device: add multiqueue support to netlink * set vmipod cpu request based on guest vcpus and cpu_allocation_ratio * allow to set a cpu allocation ratio in kubevirt config * Test IDs for Node Placement tests * only focus on tests that require rook-ceph for rook-ceph lane * When filtering or aggregating metrics around the state label, having it exposed as a human readable state makes it a lot easier to understand, and thus, easier to get the desirable information. This PR changes kubevirt_vmi_vcpu_seconds' state label to a human readable string * libvirt: disable PXE rom on interfaces with no boot order Except for virtio interfaces for which a rom is implicitely loaded * Keep conformance artifacts on the top level * tap device: use netlink instead of songgao's water lib * netlink: update vendor folder * bazel: update netlink dependency * Release func tests on every release * Add missing test ids * Fix sync of generated client-go to master * flaky pause test: make long-running process longer and quieter * switch virtiofs tests to use datavolume * test that vitriofs file written in the guest is present in the pod * functional test to verify that virtiofs is enabled * update generated files * virtiofs requires virt-launcher selinux policy changes * enable virtiofsd debug logs be setting by setting virtiofsdDebugLogs label * handle filesystem virtiofs devices * vmis with virtiofs require memory backing shared access * allow CAP_SYS_ADMIN when the experimental virtiofs is required * add a filesystem device schema element * add a memorybacking access schema element * Adding feature gate for experimental virtiofs support * selinux: allow creating VMIs on nodes without selinux * examples, vmi-masquerade: correct userData script * tests: change hostdisk tmp path to /var/provision * Bump kubevirtci to start testing k8s-1.19 provider * Fix ACPI doc string * Add functest for KVM hidden * Support hiding KVM MSR from guest * add snapshot APIGroup to aggregate cluster rules * tests, networkpolicy: Add ports 80/81 tier1 http tests * tests, vmi_servers: Add `HTTPServer.Start` and `TCPServer.Start` method to bypass LoggedIn * Bring openapi spec in sync * Fix logical error in affinity copy logic * Add optional validation marker for new fields * Update functional tests to match new object layout * Fix unit tests for new object layout * Fix injectPlacementMetadata to accept ComponentConfig objects * Generated Artifacts * Introduce ComponentConfig to contain NodePlacement * Functional tests exercising placement logic * Unit tests to ensure correctness of injectPlacementMetadata * Merge Affinity, Tolerations and NodeSelectors from NodePlacement to podSpecs * Generated artifacts * Define NodePlacement for workloads and infra * Port NodePlacement from HCO * tests, libvmi: Add ports to InterfaceDeviceWithMasqueradeBinding * Add conformance automation and manifest publishing * SELinux: merge .cil policies and add a lot of comments * vnc: use generic VNC client on comments * vnc: remove unused FLAG const * tests: re-enable couple of certificate functests * network, tests: check IPv6 probes on dual stack network configs * probes, tests: provide a TCP/HTTP server running on an helper pod * network, tests: move the HTTP/TCP server creation to a separate file * probes, tests: create ready/not ready asserter functions * probes, tests: encapsulate VMI creation into a function * probes, tests: have probe creation helpers * tests, network: correct the string length * probes, tests: exclusively use cirros VMIs on the probes tests * network, tests: delete the leaked Jobs on the test tear down * network, tests: ping first, then connect on helloWorld jobs * network, tests: use assert / failed connectivity checks * network, tests: add dual stack masquerade binding service tests * network, tests: prepare for multiple binding / dual stack configs * network, tests: move services functests to dedicated module * tests, libvmi: provide a minimal CirrOS VMI via the libvmi factory * fmt updates * Adjust timelines and verbage to reflect feedback * Fix release scripts git email and name variables * New release documentation * Replace outdated release announce script with new tool * We introduced our `Pach` type which collides with kubernetes type. By default kube-openapi takes only last part of type/model definition. So type "kubevirt.io/client-go/api/v1.Patch" ends up -> "v1.Patch" & "k8s.io/apimachinery/pkg/apis/meta/v1.Patch" -> "v1.Patch". * dual-stack, tests: actively check the cluster for dual stack conf * dual stack, tests: check if the cluster is dual stack * Add creation of bazelrc for running unnested in prow * virt-chroot: use sysfs node for getenforce instead of less-reliable go-selinux * selinux: print reason why getting launcher context failed * network, tests: add a flag to skip a test asserting dual stack conf * Addressed comments * fix virtctl image-upload ignoring custom storage class * Add unit tests for Service patching * use informer for VirtualMachineRestores in restore webhook * staticcheck updates * don't allow creation of a VirtualMachineRestore if on is in progress * make VirtualMachineRestores owned by VM * wait for PVCs created from snapshots to be bound if not WaitForFirstConsumer * Correctly check VM run strategy * check running/runstrategy before restoring and one additional functional test * tighten up functional tests * initial functional tests for VM restore * restore controller generate events on completion and error * updates from rebase * add source UID to VMSnapshot status and verify source matches target when restoring * fix apiGroup handling * VM sestore webhook * restore unit tests * restore controller implementation * snapshot controller waits for no VMIs or pods using PVCs * add VirtualMachineRestore type and CRD * remove include/excludeVolumes * update VirtualMachineRestoreStatus object to include timestamp and error * add VirtualMachineRestore type and CRD * Fix overloaded 'v1.Patch' api field * Prevent delete and replace of service endpoints with ClusterIP == "" * Fix validation for self-signed cert and addressed comments * Add support for camel-case spellings of "userdata" and "networkdata" * tests, net: Add dual-stack checks for post migration connectivity * tests, net: Remove post migration connectivity workaround * Enhance operator functional tests to validate pods are torn down after kv cr is deleted * test: set kubevirt.io/memfd = false for k8s 1.16 * Add annotation kubevirt.io/memfd * Unit tests to validate finalizer functionality on kubevirt objects * Restore ability to set finalizer on kubevirt objects * Unit tests to verify operator injected labels remain consistent * Restores operator managed by label for backwards/forwards compability during updates * Add mhenriks to approvers/reviewers list * introduce retryOnConflict to certificate infra test * tests, Make network policy tests dual stack compatible * make generate after git rebase * deps-updae && generate * Workaround for a not accessible CDI dependency bitbucket.org/ww/goautoneg * Update cdi in client-go and manifests/testing to v 1.21 * Run make deps-update * Bumped CDI version to 1.21.0 * virt-api: allow update of VM metadata and status during VM rename process * Rename option --allow-intermediate-certificates to --externally-name * Add unit test for cert-manager * Add option to allow client's intermediate certs to be used in building up the chain of trust in cert validation for virt-handler and virt-api * Add options to allow users to configure certificate and key file paths for virt-handler, virt-controller and virt-api to accommodate varying rules around certificate validation. * Limit CriticalAddonsOnly taint to a single compute * Add test-id's for VMI migration and lifecycle testcases * Add event for vmi failed render * test, masquerade: Add dual stack vmi to vmi ping * tests, Fix Network Policy Flakiness * tests, Add waitForNetworkPolicyDeletion * tests, Add skipNetworkPolicyRunningOnKindInfra for NetworkPolicy tests * tests, Remove SkipIfNotUseNetworkPolicy * tests, expecter: Centralize expecter helpers under expecter.go and login.go * Add unit tests for to make sure it won't accidentally break passing monitorNamespace and monitorServiceAccount parameters * add test_id to functional test * add openapi listType=atomic to patches * add func test for custom patches * add custom patches to kubevirt resources on creation * Fix issues of using default monitorNamespace and monitorServiceAccounta when those properities are not assigned * update: fixing and adding unit tests * test: add reserved hugepages * tests, skip migration fail test on kind ipv6 provider * test: add test for source in memorybacking * Add source in memorybacking * Set NUMA to use memfd * virt-operator: on update, roll over daemonsets first, then controllers * virt-operator: fix a copy-paste error * Add functional test for custom-port flag * Make use of stdout cleaner * Added functional test * Add option to run only VNC Proxy in virtctl * Keep a single go_test_default rule * Document on how to use the conformance tests * Add the first conformance test * Add wrapper binary for conformance tests * Detect the kubevirt install namespace dynamically * Fix issues that virt-operator cannot extract MonitorNamespace and MonitorServiceAccount from JSON. * tests, network: Test connectivity pre/post migration * tests, job: Convert WaitForJobTo* to a non-assert version. * Generate deepcopy for NUMA * add a NUMA schema element * Removal of unnecessary output * Added e2e test for unused memory metric * Fix virtctl build for linux-amd64 * Adds new metric kubevirt_vmi_memory_unused_bytes- Preparation for initial submission to SLE15 SP2 jsc#ECO-2411- Update to version 0.33.0: * Enhance operator functional tests to validate pods are torn down after kv cr is deleted * Unit tests to validate finalizer functionality on kubevirt objects * Restore ability to set finalizer on kubevirt objects * Unit tests to verify operator injected labels remain consistent * Restores operator managed by label for backwards/forwards compability during updates * tests, migration: Validate dual stack VMI and Pod IP/s * tests, make primary_pod_network dual stack compatible * tests, Create ValidateVMIandPodIPMatch helper * Turn off modules for staging. * Fix verifying make targets * Give migration kill pods a name not based on their node name * Fix another flaky ertificate related unit test * Fix matching of Makefile vars to env for goveralls * Output what the new error is when an api violation occurs * tests: adapt test-id:4153 to dual-stack cluster * sriov-tests, checkMacAddress: remove sequential expecter cases * sriov tests: Add CNI version to sriov NAD * removeNamespaces: add informative failure reason * cluster-deploy.sh: cancel cdi deployment on sriov-lane * remove version from go.mod * Use PingFromVMConsole for ipv6 instead of trace route * tests, make test 1780 dual stack compatible * refactor virtctl image-upload args * tests,libvmi: Append passed options * Rebase on Goveralls * Export -mod=vendor to always use vendor * Update ldflag to point to right package * Increase memory limit for iscsi pod * deps-update to reflect state after rebase * Fix test to properly work with TLS 1.3 * Update kubevirt builder image to use go1.13.14 * Add required dependencies for functest image build * Check if new api rule violation was added * Pin bazel for builder * selinux: relabel /dev/null to container_file_t * selinux, virt-handler: relabel the clone device * selinux, virt-chroot: provide a command to relabel files * Add gradle install for builder to reenable swagger * Set libvirt to virtmaint-sig/for-kubevirt 5.0.0 * Update builder image to include new goveralls version, remove ppc64le * Move coverage from travis to prow * Support VMI scheme multi IPs list in case of dual stack * Improve stability of fedora VM's login expecter * tests: Use new image for sriov tests * tests/containerdisks: add fedora-extended image * kubevirt/BUILD.bazel: push to cluster registry * containerdisks/ WORKSPACE, BUILD.bazel: add new image * containerdisks: add doc about container-disk images * Unit test to veriy migration target is cleaned when VMI is deleted * Unit test to ensure an error is returned if multiple container disk directories for the same vmi exist * Add unit test to verify stale clients are handled during pre migration target setup * abort migration if the vmi is deleted or in the process of being deleted * Add better logging to container disk mount/unmount * wait for virt-handler to come back online during migration fail func test case * ensure we detect the correct pod environment during isolation detection when migrating * ensure only we're mounting/unmounting the right pod's container disk during migration * gitignore: ignore files ending with ~ * Ensures stale local data from failed migration target is cleaned before attempting to migrate again * Functional test to validate migration failures * Domain XML to be logged on info level * Fix the test default SMBIOS testcase * Add custom PCI tests * Fix bug in virtctl upload when using PVC without any annotations. In this case in code the annotations map is nil, and we attempted to set a value in that nil map causing a crash of virtctl. * Allow podman for normal build steps * Makefile: Control timestamp addition * Makefile: Add timestamps to make targets * Makefile: Use realpath instead of shell to calculate path * export local provider variables to the correct location * no need to verify the number of depoyed nodes for local provider * Use proper namespace in functional test * Fix doc string * Add --security-opt label:disable to bazel server version check On Fedora 32 with moby this fixes an selinux issue in the imega/jq container. * Fix tests binary release * tests: Add phoracek to approvers * create-tap: improve code readability * selinux: update the default launcher selinux type * create-tap: prevent FD leaking into the tap-maker * selinux: run virt-handler without categories * selinux: networking requires escalated selinuxLauncherType * selinux: create the tap device using launcher selinux label * create-tap: add a new cmd to virt-chroot * network: have the launcher pid for future tap device creation * Create tap devices w/ multi-queue support * masquerade/bridge binding: use pre-provisioned tap device * Create tap device on virt-handler * functests: Refactor VMI helpers * tests: Update the vmi instance after creation * tests: configureIPv6OnVMI remove unnecessary vmi parameter * tests, dual-stack: configure ipv6 on dual stack cluster vmi * Add all the missing test-ids * dual-stack: IsIpv6Enabled use podInterface addresses. * fix typo * Rename managed-by label to be literal * Don't add empty values to KubeVirtDeploymentConfig * Use more consistent config access function * Functional tests for product related labels * Add ProductName and Version labels to KubeVirt objects * Fix flaky certificate expiration unit test * tests, job: Rename RenderJob to NewJob and expose new args * Bump kubevirtci * tests, job: Use status condition to detect success/failure * use status updater to abstract enable/disable of VM status subresource * have to call UpdateStatus as well as Update otherwise status does not get updated, duh * UpdateStatus was not sufficient for certain snapshot controller updates * tests, console_test: use safe expect batcher * A low value of timeout in test setup causes failure in Azure. * Remove hidden `make generate` invocations * tests: change ping to use RetValue and PromptExpression * Test improvements: Use job instead of pod and fail fast while waiting for job. * tests: utils.RetValue no need to pass prompt * Remove domain label from VMI metrics * network: Add network-reviewers group * network: Move PodIP status test to network package * Fix clock timezone * set schedulable to true to test node-controller will respond to out of date heartbeat * add e2e test for virt-handler schedulable=false * virt-handler mark node as unschedulable until it is able to talk with kubelet * tests, ping: Extend the ping helper and generalize it * Check if the socket exists and not if the base directory exists * [virt-hanlder] test probing of cmd server socket * [virt-handler] test contanerDisk readiness checks * tests: [test_id:1778] remove redundant `sudo` and wait for prompt * tests: ExpectBatchWithValidatedSend error on BatchExpect other than BExp * [virt-handler] wait for containerDisks to become ready * [virt-handler] let virt-handler probe for virt-launcher readiness * [virt-launcher] Replace --readiness-file logic with socket moving * [virt-controller] Remove readiness probes and --readiness-file flag * Remove exec readiness probe on the containerDisk container * tests, ping: Use tests.PingFromVMConsole directly * tests, ping: Move the ping helper to the tests package * Add test approvers * Let prow run make generate instead of travis * tests: avoid line wrap on fedora console * tests, Fix test 1780 of vmi_networking_test.go * Unit test for ensuring local cleanup of vmi does not occur on non finalized vmi * Do not perform local cleanup of vmi until vmi is in a finalized state * network: Add dedicated network tests module * Add support to configure vmi disk I/O mode options * Add openapi validatior unit tests * tests: Remove redundant string declarment in RetValue arguments * tests: Rename tests.Retcode to tests.RetValue * test: Fix flaky test for "A long running process" * test: Removing redundent \n send from test_id:1779 * test: Fix falkiness in guest memory failing tests and skip failing one * tests: Add missing `\n` to expect.BSnd to test_id:1753 * Shorten the release job exectuion time on travis * k8s-reporter: get all config-map * tests: `GenerateHelloWorldServer` use `ExpectBatchWithValidatedSend` * tests: Avoid squential expect.BExp in test_id:1778 * tests: Remove un-needed \n send from "Checking console text" expecter * tests: using `Retcode` to check the result of "echo $?" * tests: Changing `retcode` to contain the prompt * tests: Using ExpectBatchWithValidatedSend instead of expecter.ExpectBatch * test: Configure console on login * tests: Intorduce safe ExpectBatchWithValidatedSend * Bump kubevirtci to support dual stack on k8s-1.18 * Let virt-operator roll out the status subresource activation * Enable the status subresource feature for the CRDs * Let virt-controller use the new UpdateStatus client functions * Make use of the /status subresource in the virt-api subresources * Add validation webhooks for /status updates * Add status updater helper functions * Add UpdateStatus and PatchStatus to the kubevirt client * vmiMetrics struct was recreated with better attributes * tests: Create containerdisk sub-package * tests: Create flags sub-package * Give the VM rename operation more time to create a new VM * Expose guest swap metrics * Use 'kill' instead of 'killall' for libvirtd in func test- add license/readmes - Update to version 0.32.0: * Shorten the release job exectuion time on travis * libvirt expects memory value in bytes to be provided with correct units * Bump kubevirtci * flaky-finder: fix leading pipe bug * tests: skip dmidecode tests on ipv6 lanes * code inspection changes * Add unit test to verify domain resync period * Add resync period for syncing domains in virt-handler from each virt-launcher * tests: fix string equality tests * tests, vmi_config: Fix expecter false positives In these tests, BExp-ecting "pass" always worked, because the command line was matched. Splitting the word in 2 on the command line ensures the match to happen (or not) in the result. Also removed unused 'fail' echos. * virtctl cli error handling * Re-enabling test pointing to #2272- spec: Add 'ExclusiveArch: x86_64' since currently kubevirt only builds for x86_64- Split out container-disk to a separate package since it is used by virt-handler and virt-launcher- Update to 0.31.0 Dropped rename-chroot.patch since the upstream variant is included in this release- Rename chroot utility to virt-chroot- Add container-disk to virt-handler package- Update to 0.30.0 Dropped build-fix.patch since the upstream variant is included in this release- Add building of virt-launcher- Add building of virt-handler and virt-operator- Add building of virt-api and virt-controller - Fix build build-fix.patch- Initial attempt to package kubevirt 0.29.0h03-ch2a 17201692341.1.1-150600.5.3.21.1.1-150600.5.3.2virt-controllerkubevirt-virt-controllerREADME.mdkubevirt-virt-controllerLICENSE/usr/bin//usr/share/doc/packages//usr/share/doc/packages/kubevirt-virt-controller//usr/share/licenses//usr/share/licenses/kubevirt-virt-controller/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:34483/SUSE_SLE-15-SP6_Update/2d9e6503002b4233ea605c8885deb14a-kubevirt.SUSE_SLE-15-SP6_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, strippeddirectoryASCII textRRRRRI LaV~mutf-8a9fc8610c2a2e4bc39051cd571da9b470ccf1dd507472b16b7035e7387625a91? 7zXZ !t/]"k%9[\JYTɭ!2[h>. c-0/ kjԐPjwC;*ṓwcHtst[xOBn*(aBofO}iϋEhA^B))`o=jK_yNyh0<մ"xZkRLa*%.3>IB"((|;it ):s.v5 _feۢLH!;I/b df!5C[֞ȡ "_QfW[ѵ[7Jeq3}W0U{IԴ',V"m%XmZb6!x"7=M Fc8`;q+ow H5qa·Pz㿟TsX|P3>5f:L87plG! .b, I5? A>K>_}, UƋCgH9p@U?+? JPπȻ.:joryͺ)C~C##AI Ix TElnRe}E;^\D o35asdF`sa0VQE#,ߡG}Q5y'6PS8Z_>iDȉ0ސm"ϙOl0wC/{|IA}: 2H݋,+&i qoo@JeCvފ t8Ƅвެr A'>%@&1Ta;i݃/,.M<_!#bS .JɌ.?pTY?W5)<*œ̤M`~XV DFBFkRuT2,M6Y?:~wx٠(+Rw.N59 UD !й#Lka(`#$j $LdJ(4C_ :WK"9t# KZPh;V _6.Rw}QO.sm3IV#.4ogy{ >Xp=6!IPY6Nw܁ /5vܟxJwY4CVrX> |!aB GńZ90HDIP`9 %Pvq!sA{8,2|C4~yW?HųpD2R n>5ITWǧQEa)Zyܰ⌔Wrۍ ?J*?[2tNOVsˎG<1nL]Cnvz+8+vX8G9\S+ǹ_p^ dJa^oo'4r^WZ<(R㡛.ǬY]@ƨէ$&dW M1%{(%8 &5de~Co@.Mpcg圕-({;c64jrdY^i} \WvzbMnd;ͺyv˓YX8 ^C+D,\KIm[ )G>.tmmZs˼9`^lGE8AxeЍfTWQ#$r)^k 0֜j-dۿձC.֎9BH$:!yQA hz(.!E$ 6Y U0m 1NCXSY+ ! a/ ;uy @4&q1r' oaCp$:(^cZbtxE r }𞁣)? zUET8 i{ݤGg26"Mp?эE(ۚο ?W;ђ' ˺$&U} ~[!W=M5Rb6r^O \%{[~ҘC`&3aCW?13'KoF~=$^چI.H,4Wvl#_r釹ֹwjAE#IWX峉*B10Ӣy) wЕc9CTa!}vu|(q띕n밺Yz7Akq<eX5]\kpByN?#85bדc#>Z>F<x g:u8%F"rqM4+ ͪ }{LjZ`po,}D}FIEI̮{QtZlKb3 JGP Zi3U ȡ]~M Mq[oSꬔ҇G \C*d.Iwk.q(/(U|B㥥w/D ;9jO(7 y=Np5)d^!'N8'Pw&#QH`?D߂@v`'IJ;.;Az${YYT?f3yBkTgK *)B{$'v/8hķ%c6ڔ/I+JxRg˭&ތ!36oH+ HAj#=&;dK{ -n {n4t5TA~Ze?qcę= 1{㴊٨̢IwGtwU4&A%a?ku]ѧuBN:#/CWZwB >*0qY^dk.y?Ij\XYĘZ\Th}&{T&*tD3D,YRX+Nܾs}?hyB>5^5uk%|x6y*B(H;_WOܒ,N8V{Cjzo1fJLW]#1PG59ZMIL/H@ۢ>Ƚ:/%NgBL i9<@K%T#wT}'av;J"\l@-9C-0նA{_fѫ2iݳYtiC+ԁ⁊? ۱FV=lhrܳ|B7,BcKO?ߧXIs)V5C/.-S{]LF?{:#VdK jϕzFh]@A7{i 6|# PB_M_Dа)ʉ;xvdiEw 9G\MZme4" ˚Tp#fdcHq WL!"ԡ x?#Q Tz?i+0֣P9!3x 0tL 7f|lPw,ϝʺdkȨjZN|bɋ{w*Qrƈ\[8Ϗ~?r*NQ~ iOCkFNb!$C ͥ_&AD5ݓxD[gtK`dW7{4+QڎR Ҙn\]y/RT>ݪChZ`V}FT`Oe+}bމbcP\(NzP _@~?dx1HpD v;l23( '9qR> B붼+w X0)ivn'Y#QTƞxuv8^t [  ϔHKeh+˥)fnջ_%T4G.{>ZΞw9ՈqIu 4&.J`{8PB3 ڲ~uSP;(JRڟI;wI0Ff.f#€ޝ_1G.HG4:*]\.OCϵ&* VJHdvPMX%|3&d͌.pBȸ A%#[qahbfd(<вV`d!a |̲Y<*avQ5'.apG&IvMCF_Ah"t.PG4[.gGx` bFwlE\Cxd+Dͼֿ)`^GN62Xsߌ-KjbRMO׍`UsEOzIk|߀Vǃvޣ=YaRqf%@)@)S&v=O$W6X?\gEE`<~bB_򤈖JV?y|4@*d^MתGB> 84&0gfOÕ8s&k7{`s_Ü?QZ aBׄu2I8uh$>ËLh3&pdL'U;D &]MPpUY`3nrV8gQȃ]Vth>3iy??ocR\aӪJQG.tTZ’L ;iq]=,M TDISh,~ ~:ISbdq aU1[tΪla'ϔ37]r{:y.ޟ\oYn#}w-Qj&nl,$^4Wg|BkC(2E]_҇T1c-Bxe;ېszFˣ#.Z`@c#躙lbq(ct͡C퐫Dq@IETZn7M0ދNMڋTHVc丑{<5YcdN Crc6lRh'_C6HΡʼL=fmrZ[J|$/iNvH0۵5 'E ;@V>nL=b9J\7\ }Q#Z{ݹXOb^Pw(?NX{bm= LsޫSWKN0Y5fݳ~}.O7C:E4A6/4ǽ !&9ٯ;/"1캴=ty˩f-Rk$V9ʹ" =+>m-pT3SѦ Z Uu*, <6Vm΅獞:ƵƢO|a;p+j\YRk F ='UL0&>h#7YH`}P԰fF'T~bZ{%hhc**H xЏ?ыʁu,%S~z1D-.JV!t\x 頹`-o技/mWRfa(|چ9l$7i/,^#ZָZ^C! 57b9˕!aX m:b[GI gڀ%]Kw@rvUh*QCel*X~ѻϦ)mpj{򫗐czY#&U۴ap޶I?H Wx.iʨn٨tɆڂwfIQUJڴ$ N̠{1nד޹Nz#\+J{=j#{[r6h39x\uY368ׯ|5O3`V1AQ!!#1NTΒ a0|S&N.e-Np.y%b2(?{)K_\Ρ91>)4hs-{BIA@ҺQE}%3!S^(r˶p!KV^RUs,/}!ȶŨn`q}avh5:ةhX?LCl'J2lq9rQ8 $~!$ڏּ)PH\vb)ݘh&d0`zm5z6\bWT/sr7B?=_JǭN(jʳU;V;FkFP[n,^:rO:g;.5N4c,<3O}FeIx3PI$j=E2#J*V3H{ oqB0GC߶/a5 DGߋD%P+,e|.QLLXtl Gg`6(dZ=:z*@ mn4SӺWat ˋT>g{T^&⁆u"u;$ ɨ`EW^栞dγ%I¾jR"8kDlބDD~Tjz>ZhHV7`OfWrkYvdDSΪ'Q"f9#Zoq#jlZ}g8&%H'sA[HKP4<:+5~3+_o3BU F#~`Þ;܇ԽV"yn2祿W(i7(39)/f,{p͈(hx\t'Duw/}![y,n(R}GƄB]qkIZB9)"+<4vA4eP ɗ#-%wK1Ӌ"hF)bDԄh!_M^op O{]s_c.B=m=ak|2er<^@K5s8UǿA?s>!gx2S=U pr鶩b]qy^ P yYt!qaHr*n k(Ѥ̷1hssW{n-DV8pc!pa,P+A)pyC;:gV=!W,Pޕ,CE׵XF`I/R^ͦ%NY(ua1\I>^Qk11@7('w[N4=(G2H^w",Z<#pwkX`kB'& hֻ3rhT v-QaIC3˸2B+0LUbTxjW7k|\7I5BJy/eBq3G@U`1긍_аt不;ywy1벟bJ)t1LaMa\q"|11"U"!pg# {l]-Th'.8;6| 4(mX)Ĵ)o0j߀ 1,Ga1P:Fj`RH ,/7㴐A&ajý~fʙICC茱(zNU HBo%d}Ga[Ͻ 0Ǩ"^/b97U-劖Јiw$[c"c.2^S3Qp,@E%o@E xCMA:ueY=QBݪ}G#-N__ςi2[\ S|qhe๷y>C',s idgaq9i}B~X<2 ˪VƯņi1=p {gg" Lt7?QrW" #ʩ%/LPnR#XK@wtëG~n2 J0Gnmi{\ߓNbv9whӱ8 gY\Ǧ4Hxi6,x1Yqjՠ vbT ]Y"ȲNv hC;faVJj_K0odJn~6Eu:cڼ6i)/<w72@Wc೘昽mB84H2pnmJGg- x5vBI]* ƶAjiYWJیRzd.$NEw_Ԏ81慅eEbh:gֿgA=>hIgV_3rg?j3E ! 0cnى7$4% ܐF\6%7"& P{ŸҼVC(!xƻůZ5sY<eme@I*3>GEAJK_E$V(E1(vs[LJk{h64L+Q-HY ʑa*-baBder#ӐדKD8YT6%fÜ3>}v~?w)/+帏~v'^VV=f!%dDWλ"<z[8FPlR ^XoG%žwy@2kOXp99kڨ|+pfhQ3ǁUL>R&,3?nR\L;o8?nnƚaYP/Xp?ujئb^"Y؋>zat ZM%/F˴ 1>𐗖=C73Ebn >)Pc=m5ِR ^O*о-l[7 ^ʊX%L`DK I6]";|ed L>l,ȃ^kIɁ쀲`2`ؤAn+ n7&N7wUio~/Kgpf9uf-)d[pG;1 :\=>:ì_"ˌ?C0a,H'C8OC3bc\IqQgEU uױfvX C:baDl&4-gT2842(鶒MktWpذNjhˣitO" ɿ_ƁNױTQ{O ~aFԘ"O@~ [d0 i:5N +m"${p9MUݚiEߤr1.nvԶTfr,r[2yY6+pxai͟7dvgsWS(3.ӰdeoWplX2hp}MĆ[g&UvبІF?a9'oc']lJMQT"+^(pDRȨ&OAml]Ckw@>ߙP#: /z'ȤG9DΏƋom-;*Zv\.A9 Ď)9ոV}%&q}36Hsy #-\7(,fG``![8f6>zF]`Qn #5eF 7F^5LPB~F[%@~Azqpm-[ 0i͚?tܙ/#6^p ctv 1+z2>6[*_hfK0͗!3$5M TޛԓP;7q")5عZ##Kn2vڞR6>A7 E--mڂOѶC5c(feA߄r}K1Cf}Vge@XVj-}jm`_x~f\wSߦggi+8рD$z8~L!&6]ڐrT< u_90`،@bvˍ\imK*{axlKx^^u o3"r@֡^AK?']ý(vnZzJNS)v>W|_ÚNbs1V4,˯K8=o=TX:Lѭ٣aE{I @hԩӰ^J/J2h9Aߐ=v+*ΑZe?A%Rxvf2d麆Gq$a>'>)53 heáJgDqqY^}t#~OX0)h{  ߋ yDxO9O =4ՉErUNA`_K.,Ń'@g'tfv iv"QUE98)4xi7`bnܲa.5 ŽRRv&,?A+ 93DqaBDZl`f˳Tʀ6ezJGҾIn>&J[Uv*T6DxNwwe=0Ү#OE֍TFGēcEQGly^ _^` 1}}-&4pF2dة@L z5t>zՏJ,SY,M? O/ 07aRn?4^ާX+'Fg8g$/[Pw6J J^aC "Ew%d݇$&5uI}K 9P-iqw[|vXA(s׭kpƭi[6_[n<%wtwW_*' ]M0kVjk%z0ؼCOW,Ie-n ELNM92^n[+ 7)7)]&Pm h}R[UNYoIAVIJcWX[ dz1G7^"h׀6ZJ6Ws;2mtbW8*Q\'IVzCAHW_U?SڱQ; `O%sd)QۤvQyq!?[AAAx?R! {?_Et'I^yLcG -Zs&=dsR*9+Cӂh?w=҂5QVshI_?جZZ_+3n#q$B@6AnGA>I Cm'k8+Zł$KI~84c1#*V6V9ko"6H A]8.Md] A~į/-Eo~J^Y`.NWql4{zQŋ7J/dUrpM 򺸰0ʨ^VndOBAv"{]{l:v&A]t;({Lud62l6 R-/ vP1Rw ]2mvRGM#\#W;r2s;A2U0SqyF#A+)׍w)ŋ~<@$eͰ ELhxäF)@$5w&:i-RM"FP/ Q"q:Čk& ^mhԸS|EIՔ3.|4t8 T2RV[IJZ&,_i@"ʩ [wa̶&H$Lx(WeeJp-q"Mt LKgi!ِ`DonbaԶ][ub38.tFȴc% E:m2+Y^Yt1iw.uRcg?gB se<7.pq;V>!LRԝ>F/a<;tWh`5ǧpmoE c4#O!x1M^Q}ig藽 lA\ =Hl܅fc}" 䊾 aJkmH0~V=xc!F.G:V,}dW(+$I9Xh|XKs)TEٴiNutmo e: i3Zpl/w3痄^e>ֺzw!7/4D ..Vp0a/MG& ?a6鴳)*xľ?3a̺9(6`;9`%d0O_*Bx7aJ2+%+VJ+Zu|ۀ$Iȣ\Y ܟ viy7VgbpF2 TfQn,S4+l~>sWs_yM7ĥJ*BYzK&}GX1XR&%$30NW,F%ZSܑ-kͩu1]kSJkxNsټ + ɓ1%hdQHH.[Y r^ً~R5jVUF/ˆ:w$7$)Dݺ4{AgU6r={F`h)K@].mN`@=f޲yHn& _tH#/ׂ_ GK&shB/7V!SdݙQSs7wuWՓ-/oxpZmm%x&@Z`)hHJlа$ O!d"_Rw_ ح|yWt K 4Q$=]8&Lj~ri+#dlet,c%N0fju4+ϒ9ԼE?aI o剮(ΣPͥ@ zb@Sw5K=J,-0m鳍BJߥIsJSOc͵a߃P_SW7,:sqMRMq*`LT/*'XqzBH]{$ $l|fVDiN!1@/,.h${o {+IA~o]$ks|J=M<~[~9Y%ZkIޣ G3SZ?_pJ"8wc}ܼaA l%{O/}YĊDد̤ ]D<@~ek*"khn O7/mr$axs~sDy~iڷ,?c汢AL?+t oi{X!tvdoWU4}2\|hm#)L $P}$F7Hqi=I9vc|<X:.Kƽ}+LwJϕN,#+|oKBmPl?}EW,WhD(ۦ5ܽ2;Ü7[)XߜƷϧTw'@Rq\ W-0U-1ʷjN0pإgS],q)6}-D;`x\^3gqONMDS eou!ۮ61v7Qnjs7=U"' d- DeT Ȓ~|g<6V?y9v 9c)8$??klsyZ;!ʕ聎idT kVS>\7|b'[UKL+i܊X$61L:ߗxfg7"@v55TCܱA?PU>Tf*FQed;B 4@H%HjD ٽWn;t M+,7/fDs=ֲ '+ 0/ 㦻ls?8?`ZSв ~35*p @B05JxmLf l3M.5bl7ؠQj0S֑iDtޢnf^}*NO+ o"RK1>,P'mLHWY$,H-1ODiϥuoqo`^pV!z/p单naT#*|jI.!) eia!a%?RU,OF]I՜$]2>& 9",U[7w՗&0W,Ďf9Ovs.[t<uѭ\7Fyg\_%H, b6fA jÝ{3)!G]ɈžT dSPbs{,gwDQM+_6V+yynĵ6j',FWyr#fo LdkM)ͱQ7o״U=y>@C-N° yplsᘵaxME9d=a^wBI:GuV2TLƠBYW0SJϥ>[Ȧ}\\c3<᤾$A*ݔX r9; 1BAUtV: fKg07:P0܎sD 5NO)$P/]gE*G)\]cAAOOSNÛһ vAd~nC8`1ǽ)gaa~1FuXGо#3P?!BjSsBTNٔvEh0#XzZyXӁz t{vފ_ʤ5 CHX]Amea&Qu)g˜x4⩘g8aHn0;zπi#Tufg pE ghV2>P*>T4`=N%G`:$!C_mbR/(B`>r2+ߣxN[ "F G\d@ Zؿ0ÿt2Ovds*5C 0fܵ#ee"留R<AS8|d/2~۰rBN-6U& = 1U)Gbf +d^>2`ej=yL[1`i dkӾ(?4rLG4':Z/>CoUq=ˊ%U-4*zD&V.Eֱ9Ӫl<@iwVbEU&$![ 2NB@Erq[%<0˅;XG27i!hp lT-ҁl] ަ@stϬKrfX)״'_U?jH s̄% >XvC3O / yg{m8 +~\ 7E}]{yeUcY`hEO[TM$F!/f*"D#V ȼm!Lma Iz'PMA]PN9֎`KZ͔k+;l+~ )T:!!Tiw_u[lK&RVR^p=ׅ[i$ZĞ6ZSl$DmM'>9F"\qZ_plC2# IdjQpA脾=>T;X[Ht] C M>xI},FOxWĀԸE )(-1!)y{/T!yߕJ.mkwdx?"}g9u`׺ԏJ?ћS(Z J <<Ь>=Jm>__SUOUwbZ- O![<.ɔ,?+7 mA垘*~dZWB.ăd:Is\\S C^%7,[ Q>u9Z QxWS:µeXqѦc7.&KI΁lr-N9kWm~mu/3ZWr*-a~0LՒW!GT^-"‡h眏g/冼spwJm~q>|jhŶ)MY $γYu"jZw_ C&Gܝr]=Xi6T:ʣ^ʷ3޳Qi7jW`i8KY)r5=ToqMLJȮhmR1vjHٜ21뛗rPSy0Jxm9=-i_1ǽ F70ԏeQşr<p !حY>8 v\hQbNi?;!aNW ~{Dk,mT$V"6バKB|C@@."aEFMDbתL(zz\V?|qg留=]*:`7y ~v l{@H:{gKgSn8Υc4e{g>1U@S+ija 6oYJF &|;_Xv6$Ck[iav_ck&LFf2~h[ +XOW;JfAch jOsWk2CVb2ͧi'amڳ,-M)SWNP  ;=yk6M 5)a\Qԗ~de$O8|ڊr!|XVyS[C+'iV5*‚sдٖWv`N"FXǰ}rIkuFWO&GDYç@#aR[>bYԇ=XFjCljlcXfʜOP3ԇ(6HS嗂ck[wk**- g\y,t(4+k-|wY^Uΐ 0EHWϔg0{afi9ԚJL-7dO|~Q):+RBH'qpڻ _ G024nXnO[,i}f|9ٱI΋a4)$l;:S `K($V YSY\\YY՜^z gۦnF5Ҏ*ҜEb*m@] Lؖ4c%"/&{VVD ! %pń5VԞȂ?W(lS5٥Uzv N>zIc`3.,8SoIrOG1Q|ӮxnA6Wc˂艐j-G2;$7k)%ݚW71{{6~R{RṠ,ha򂛾>Y,<ᮌNuEHd3hY`3qWӮ |63YU7¢x&ڲYدio͙lm('NDN-?AgU, \zAD ƹ2,snP^MQ-<*!ǟ'޿ }Zʙ[z&Bsqy:{v)wmZodh&o̒80.kZ"ݾƹp ?O#Է)zr΁S&ˣmmPGD>=aD;XDi&v@_&@^9uC>7󭦮^5_LuwLIN᝗݂lm'[B_XmkD@V,Fe nڐRDUi6z.ḃ?/È~UtuE Լ&g w#d;,f4?=_F*>h;Lr)ぞmܤHy-b x{Y%WjTu-fot Yqc2 h>)1GL\|9ϤZ-Aa OK(ϵ0p-;?^51aFX1S[2WYO|Sr ,%,⚨LkQlV_<m(rI:w\1|/ihpkf2Lb ` aHm`I|O#_WA5!hw[-eJG?nRsaTT˧$:ۀd%]y{=T<5| ק ICyL/9s0] ]$2,s{R#aS'%`P3&ƼFj)֦P8 nChv&&t!:qjOBNtmqDerz@?w1+@WFÕ700;$oD.h3C7O9bLcYS#EU~tHZ$}?W5gsp^57[%l_(BzsޭH wxH {Vm7~MB >E`u:5N.Pat *nrK 2_3IϖKkJNf'ȦT;NwX>k>JYSO&u8±ց[ǣ~#>cku_e2Lpv3Ǧˎx H')W2ؽm/,ҔE^Wi]X4-9qNlVJ 3bQfDe/D|Wcڲ!B~VSa '=ߏ;Ԯ% /k;e>XQU-)T #C&دoȏ8+[BcP}Պ\y9hJ7 ˼^~lּ)Gz`*^<XSA-=Tevn&~J($s8 ?GK1m?И;']WD8|THOaapLS؟ R+N) җ .nf( |ѵ QvN ,m k';ï^p ½ޙ9l谪B:Ki |ێ%IW*^VEvh`s7Hn,0]4uG2xTv{aM{q1rplj9 HI}Л/Ɇn}|!Rbڇ l)P{\;Ԡ2KEЅ9 ɠ_=6<̫꜓,(I-"Pu;oQJ)w2JuJ'âeS>a셐A+?)\W 6qwt1JI~b2>8gz4튟xbf3>6t rbup.=1@baF'^3*UZ܊HlIZn|,98FsR5Ȑnk\Xz?4 iN3ɧ ꠏi^<i^0zX/,|]5yFZfkE<)+r"Xܠ!=]0P|h*|CcUcG,܋mcdT:EdLR5Hj:|JJ2E,r\)3UDOwqxDe>nk{upAr94mߍ"Ӑu>H"o('4&s;UhPw"^/۽(5)n"\a r8`/VG{,@JgwT3˂m 4g2Ý<*is8F-ξycs;vV~#Q4JniZv[ђNkjgȒ\Wqٸ!d1<:Q\;ZCW3ZP05:Gs,qʍm~ue iΘp`|A648P~c) Z.K3RJ̓h7_ &Z'K{EjSBqpa3 x"_-eEX3dIi֑R]3jڵD/ '@ږbD:wՓDݕXkfg,fy1du)hK٫ti6s-\ytx\ȉeO'dgagTYs!07)p PJri>,[`iu\^T*8F4NGz5p[S`݃)4;!C_D;?T)X-.F/"-FEk0dF nf7=t;xjBb<+όl'wTO9f(^!bʈ˶p :8.|B6t dzH|=xal0e-U\vX8w?>q`D3yiԺ/cэ -\rܼ":,.Ǽi&@"(Nk.}$rc&L+{O4ܔF ug8;jp]uT.I%Y۩Bq2N ʙr4hDQ[ag u *>÷*DB?/4q6;>%A -L"1ܛEI6wlaa)m~%7Logt,&Cw-{QzE׎q~C? J[$?H5yؔц=8UEE0G9bRDmS;dweIδs}ZVx1p>.T5~`5*9UP6'Ci`~D# 9IpC8#䈬U,f3jМrd[Oh:9}lL=m ч!M9y5u"_*LeGvW>BTfWؤRqiek+Ş*U \:5;-lW% *Y >[Ak̲E7WgPw_"|ɲH]2Sl|A8Uc%}81Q>!8̜);ZOxY*~>t .4>P< {CPiC_wC3xI~q4KoO+^?"0iz}!8tYDxnT5Krfs^=`Iն?HGFg1(_eq 3o?!F a'  ;Vc/h⍊9ZO(>}DJ5(H!r/l5V2UH-~w&1*Vg`/Q{%9[?;_Ȥdl/<+tEzm`viG Q3Q rȨi|; eE!27Ȃץ ūofN SyWyj˝R4xȶLJƭ+jvO1AYvKJ?},&v4PjrkRHD%jg4\7[wH~n-|3MÍ} 2PR&1_ajK)a97ip_fg;f,PJA_Hoz(i#i7+IP]=7fD? ԧ2~Jٯ뗽^.wg;Ϗ) $ǷY6G<,} ׅOX!u.pZ5?<]$_l=XԸd_WOw2GS{߼ K=%4جPD&eP)XP(,G  +B*zZևUvDu5}E2rǶT0B Bn/z[`0(&cÆX7@i{[RS=p9څ~\r4N|b{ۛv9_&xS h*f@ػ~Ѝ |Et~{:^^ʹ2Vx8m ZHqc@xwbp؊ 2 ĆӠLGj0M|crF՟&-wHvY#V I` . HοKX<4IԦ܊Cma~5hbڄ]-_p~S|\<A$"gHB6ӞH޹N^m߫){%\J3;2_+]zиlߏHkZtJS~V^UDyc7&+n P]9\A\y:":V}6gaFWRh#NR6̔~Mf7W ' Z܆oė':4?&Ղ(#{ڎV8k]A7`$JB2$x`g!)k;M@HRXb*"+R  ##z`Y@PbѵfYA@cM3nzyŧIeF?`$;,B+I*̿gV.ʌDZ3ìc[r :CLcFWeݺ;Fy3/ӛz- tdRCr6?3㏞]FdίrUQ/{Jruzj0"30 Ev3No (twhj}א=m(GZXnH(Nna$S!tQTDKg!Ңٗ ] Oj^_iR?U^MU IsДBRf{:Vb)SUˡꧢ3,TS7b`6h fVBb0%cQ~?nUibO"Ǚz+2 dcdOV3˳3i4gU ]:kghS+ބQ'E,aaܴ'3j r@:LywmێZįLX -g}*|O)C` _9׎@}g8L(${kО@ldO"".FWoMCr/5f0k$t=Ar+'W0aep\O7ȧ;hd׷pOjt[DͺקXn}Qh`ąVJećWBjn,r?;&Ȟv!Aq^A Yz2S8[7~mmq 4tJ.Zc{tf^1&~Y@VM)$H 'Rg?Tڠ:XT0d$ 0 Xp佳xgBu4w׮i<9k.ҳCȧ S꞊a"sJU}GQ-hs]^Fټ9ʹԛ8 Qs:}wEYRcBcjPBO};~W! J͍z͞ī;q(쩺8 u’\R!¯ f;md횐3{.nUXz$BJI(,Vٳu5׼`QoPu%13S#ѓl.mn酽R{:Jmk= aXJCP/ÆN3f_t!n <},C7c١KP WC6PUE |ޗB:'1;6< Bi6k,2dy<:(lUWJ3*G|GީMjeG~42#pkm#r>MIFBSG c6,ŚoTO[U;Nlqjy>KQ:]~w)+^UcDun(f47& 䠽)Jܑ\Ŝяf`0530u⫱tuójÍ"yb*-6fmM΃˟ E[5q+(i_Gݿc$04.Ҙso;U94#p#Yr&F_] ZYJgMpgUAn>Έ~M1teu달Ű* j, n8ͱŨ%MkMIfs(E;e#?_-wu4M0 L_v+h3slTK&ںR;‘?T'wM,ۢ!yyCPv+3ةsH,n q=g~.TgU<ݷqe{HӅlOl‹ò +DXT0 baoj4s0q!MWq}xmSTcb!3TyE% G;aٿAZ-3Kj_c@QL'8!* | bV >9T5biϽ q< d9!XH%f`֩&pY,ʕZu.gE(0MxRka.$w߮%}ۍ~8ω!-ӊEhU)^;J/oЩ__LS[.! |ڠx~@xrDy-_J#cqmr$M dB_BU;D`;Qm5ɆVW0Rc}YI dl<9';nT11-Gו`;HKʼٯ9+-J>44MBδ)M?oO\P=@Oդ~`8ձbM_8* >]Ðw]anVH+#4x}6~(dMj$ iՌm-4-q⽻PSn1'f`--'oxFYyPϞ<4o]?\I|pgԾ_6*6Unڪ%*4,bkh@<_4yRFzPN5_ 'D]<T2U¹8 u$1g)SN!я|~=_-\fQ;j9ޒ5ѽYW~ՃVPcD A jk&l7Rx:" ҼsY#\aK~b7i-H)W,zhc ə⊓<-Fr@A]|gIP]0S/@cܣ;y'8g纘˕"j]pם jX6̏S]/xx^Yt"O*?&~?dPJE3{f%ԉ`+lF2N!f12De`SؾA&TգG$&ުWhl֏ucΘgׅ'҇~ZUGF 6%oPػ)b xKRX_R&Qj؅"nY}y W ,YP 2}"XfD*3=W}"jޔbb|S`x%yu\'^;x]⺖ [SI{ns7#ĊUc'&FM'| nvGǿ'3NE$PJ!Kl=̈__ۼePģE:5Hd*%L0Z0r6M:{hɬ6]z,E˙H 1^|$DE, Ӿi~KATg+ޡbL6XD sk$"qgK5O=c:=x9(( .=blsoAZJ7eL茵y6~PC[{͓myYgVӴsxɠhqACtv\aaA?BX4i=~5x7uFWڙYAa}.k0O9i2 %BMw`Z땯rA @nNDbc®Cg=U ;!* ])HKNQ!_qmϲHo$iϠ!#㙾u9R="SZAm}dm--CInӆ*=4gOtu#<+& o3Ԩ9Eܼij_S\) @//nY3$ք,OD}Tө>/`=1r2A&Cf%"8/$$hLv-٦K{A*kfU#&F7Ē$I;qo1?j画$Vãx^xOo*셕]KWPli$MV ߑI}PfC46 <53p6G~xDnoO+CZ̦ ԯ}Hv P8 kggk wX]R iOxtc^gQ(Jldzi~sx˓5BBkhnUU-#^܉گR z6V]a1Y_c1 (D.5 O˚v'ۇpj$YZᆹ{H0Qb),,3VJi*oQS "@|יҕCBKӟ}3m(m$Όя~z+g0q`z` !G3`íq7gjc+uky3(]Q&s0+xEP=+JA8 ηkCbe8Yژw^fsiB hsX§2wrw,uBl.vю+Hf8f0A[9p ϗN";yQ 8bʽ 6VLSMs#xx+ | Eisр{g2g\:|nxdxxLE;aKE{lUW# 3 ~vԫW#\իJ<_OM:G6S;?^Zq&6,߿#[eoƃ/ wf]'(`??;\[ihc/T(pdêYzep+nLJߺ}Vu\Q:V>cN1.a8v& יLX8?bQ zkŚ.hA&yWkg8f&{S AWhȑeVond${!jXձ!:-wQײ! 48&f>sG)d[7\e]S+M>p'W-r" /U3.}Rbif|NC2#F6iGA">HAPrb&ڵ~Vaip>33 nxOKt4Yj>)rh8 L;D0"xE%u! Q\SlR4N1CSۮ<-ݖ9?JN!%'J 6QכX NjwRNmdWB N_brrḑ?-ͷIad ZenxvC$1&_K< j_v/^DgOii{Fߵ{}k#߆F~g[˴`}/pF-p;*o2%FL%V yqa90L9^-\LWƸ“b2{fb+⩗+|l\a 1H! N` D̏.>3]w|s #ZFp"m42So0& ;Ue˙$8X2&kJS#AX(Ss,% o+i yk ޹}ܾl*;1T٪0Η7R;); M?bpֺ Aio5%]wVoj>uf d:R H.V>PiByc/ð,zmPήg94^ӆ/`bD(* VzD@N(jukBfUz3nHiΗ\0V]|,2KrckHPCjFL !ߜw3L*Tb_N}Cj?; ?4Aï̊_nRP݇ F!2K(!~Buc6t?t^L#\?x1nBpTl*:rqrw>С0@n϶?L[w^F ]K6/n4^LUaկI~q=đoll9P^7pY9.?&5ā%ONUHĂ?8R(D.xyx{v^x䲸, pEIT]cQUʑraU DiZ)g'1͜Wo;0'Y8l:2戶z[C 5Mu0GEؔT|e`@U*8HAVf] "jmqy.C@-Ƈ":Ù*: $`5o׀#!nce},{Ђ=~|JU?h͛F, s/ ʍȄOX3PY}9H;0$ RPzN^G\͵|cƅV+B}OhZiLd;3=YkN24_5LE9 0C _ݸ5$Zz{{FUFD~dI8yb0Z+P[_ӕ,w!^,8!E ffT7/$$.0+K\rEkb=Vg`=^f˹nL3& ʯ0rMa~Rb`aht _yPBsfeWվx?D8&.Ñom؄"jDLΓDPucT,TEB9I^~BeP)R!j~.%$/2~Ӿeu v"a,.r5 +o'U.h9(Q4Yǿ kL,JxtMZ8ܨɒ.c;[\>vK4Յ,Hk"9]f^Lsvc>ݨztTw ]ECtJۯd+}z4[mp*4wbme/y zŋ5s*_#6;b~8;dM똝_X'*sXgu3}n%MoݑY;% pג@t+nKyd\T-e|:]0 oW_J'ᙠ&rLӊTNZ=[/8}B+KZ+Y 7cЄ!`|:X?Lo\]Aw:Qzfn0 R1iUx:qk=>+ pO_HhBBTs:wrrN}x־ky5K/haN69!^ -e ջ 5ηۅϦ^ّZG[2.cy:Iy3Hxw'Ru2>WykF13 NOJ_ZU|Hם)5̀-ΏH!FS4d<$e #C,&|U̶9 7Ixh{خ "%{"aۋNPSDgaҸ7us>p-05#b)9fctaLuʺV"`i+/{fca+ZKRH^Í +R}) hG{uX?G^E8wޔ;cWzaDlm͌2 >qyIxc|Z#F P/i, 9io ~-ʦsh)L^|{kBk%lѕ *ꪦ>zA=z`7BdM3,?&(nʖ[L_sۇJa A .p'w"Ͱi8gUXwVZxJc.{h0_-t & e9m0i{.G6;\>-6ZPtZ\!;dӴsGӔ=n8U^NK!uw~zNJ~`}+P:jZf\EHFtIOZ佗؅F{"r<]ewvRžoE_kbl].EgQ$`Y]dVpZ7N M:XNE#e?aWyk;M]u 5Qn!&: f>: !xyI"P*Ť(r~n0_|:s9"E.vDhe]Ru*ʞv;t9J͝(yr,`h>T*\`i4]5o5yqj+9O^I8\òn.7]dygyG?,ŧBe%p]:BɔkQ{P>ɐ 0!>}0> wNpeSɚDۯY2G+.8>x7m&<\1fdZC hIvQO! GB1L6 rOQ]_Ca4jٮ7Eφ72aʷ  oպ_8Uwd 6p[_ڐ2Nl3؈k1CANpJJ́LsB/3h&fJd)a;@t}kZzv'9&qQ6.ݸd?su V!iW֯TċfPдM7Rr/ijti8=+pِ-o`ڞ%Dq/Lʤ5-P^ a gXgW롻!O7v< Oj@ơț1:>of&_ɷ 8oE 5@%9ToI}GS׺2F*$@mZZ zww SDK⹺U77Xr9r˗Lv Nge=\ED7FPk& ^awƜzt7vTYF۲E&8ѯ'd뷫 2Sދ:2@~K+y)Ɲ0_ ]5tcT"n+eGrmm0yUwPtAX4Fz loG4 E .+HjWCۃx&R;^4R: ~'~N jvԾ7/WjP|4 T C3?P%B0XN,J鿥R-lq^E>+u]z*EQ!Qqb>g7 bͥT3H1Gɰ7qnڠ|]@#\L9JCϾ~xpy$t1p+~ZgSrh݅A?ALb,Z6K!6Q#Gj"җZ9*q aĢW:$('J}z%3"NzeOH8dCw4⣇i2J.fZUgMqM:Hr5'V Q~|(b-HJ;S-%C)$d-8k Qc ,Dg4&VܛȊr^rLQ=}Sac(9ίTM"fvUw0ȃʐK#pWcX7SLfNsYsWɸJM}lQaÇG {i/a-ø5(tGg ' %eVvlnqq|:ztl_Q)F.P[4 `9s-k%mDMYt8R_,ȠUÏb>\T^ԭ@2 B41wt\=p@4纆B^QQ4Xu[bיmg gT+l 28NUhQ.gČx62G\|EOY&B9G,PWoP1JɄxݮ2QDFޟAg 5f : 'g3kLxjQCg2,0qgBAa'"!J9*UHIi[dTd¾2^*8y -W'Y ^3~}$bܠ]'귇x>[7F9Иkf; a`eŷȪ#V?'y@Ԫ~,;KyKEm\ȷ8m^ opq 9ϾʑZ[`4wo*ǑV߼N}1|Wh| %[pǎo4ܬƬBRmZs#(ajYDm{C/I4#cajd\ [ q2ЧF~U1gJ"Vͫ)L|; ytM;|4ZAotFp])kBȯC| MSQ36SMH)rZb bW =*"GCF5 a x W5jUReaH~ӮQ[$o᛭]o" ԑ>.=C؂oflj_t!>aO[*-7SNOB21hDk z3W X M*c:Ѻ*o2=4_ XG##'hD|wN*clm?0=Wh1q܉I35KdةG ķLӇo[ @7繄Z!Wu+a?$ KW^<+iAPJ?wS<M~}z8wzr:OXhVŘ5Oge[t/-T?o=:cf"yBĥ(ϩ?/˷2xԅ8c3~cلWaP@yO>⻟Zma )thh Wq+~_\mFw{&thlfiDs옶a$$sm|{d S'p)'>3M.3kYCYҖg`i]M u+}hy{| $$VܺnثE|(mu $qy38:+]l͢w pևE,iV-,jD"jv6NNN anjZ ]Z,5 >B~RxU$|G5.7:Fi[Xb# <[r޽&5(2 g(V21=sYMDxC+QѪs.b(S\:i͊ j4>ScrU({]DurV;Μ ?TE[,Jf6`NW^ZOAnc'I`y$b>zɗ^}C9vC&Ib% d?Pʛ-˴%41ГhoJ 6ɓϛL$j/k9&mRR3ǩWFFrLCᣝ_>QE}\k}7Lhq 7t{ y~a[oj[ )Zp X#뽵M ޳dXaZI `C]F Sk_oS-#SvI abzU~ӓvQqkrw4|3V wEǧx23äru:xyLf^P͂3{J[P[ ^3vo 7@C*D1iBoR9cq%/2qġ)&:}$ʀ|7 `1DW.C69;?[ujyS[ipw0M#rIBdތj#JxuKPmѱ PYJj` 5mC.4 mO=9>Bk*аJꉩ T`a'tSLkro8(m j5Z10<}p6ͷpUAZ@ZXY'/3]H@/v0=iW)6\ke mlNȧ{8.}sd@mV:;@BʗQ#@o8 +x?,6CIV%[a9/#mW/ĸqb4v椉ePH5B g+s"o#:S.bv$O4֎*lzTϕޭoHH Cib'|[@$p:Xp&^8x|DݮpjhwץYi-EbIsG&kRqc\̯]{bNG)-1$ZR-ΆIH\h ]c8ԨIPOO"!jYGH"SzlEtwڛJڹ#IBt_XCRZ>]t9[ E&->G.qYZ7ǗOݤB1K|oju_M UzBXhjʘsV,B#}{J5*%@o|;O4Ɣ#ϱ^~ѣwr<7|XHpKXwŇfDwRE1'yY*!GI~_#N"g*Ժ$hTJL9:2o 3^{dAqNэ&"8.F3v [+PLS3mSxWR5޶Lvo4=},wG#(J_W9-^e$;׭Db A_ۚr T SreS&Bdwov=17-+ک)?A`4cEk T#=bf+Tg'599G`%[5}U ͘&1yZ`ۘߛc:%Y?Pkz8M2vܾ E-`o>qW|S&>O4T^fF= ˢ/M HhM nF8֍Wc [:lFYR\,@j7 7&kN\mlyΡxRGt,GgBJ%փ!7"'&SƻK ;H =0('vbx謴6"ï:!'AWObۃ g@$x҄aԝg Vp۹O^ asnƦj+4%ޤy[="pkBΞ8YA*~r%d v2 $]0J8(_NTH)Ce>86k_oDO͈zϗQL1n)zz6#=Uȏ}'`?\3SABn(`F/sOM8KSmiL&2o J 8 SWn. XZH՟)tM8:hah*d'",R&b5vR:|.Tw?AĖ*?o$x2UEKClzSF]NԜ L-l_*Q4mK߯ r] rO*0X.V}ؘ-O@ױ <"3SdH^@Šr]_wZs_ w(PnZ Dk~n T>q y/xt4Y|@b1LcbH blM!Jy<3Xm)M7SLkoTߔQj"qPZ&[o pqfQ YIL8t"IJn*t@4yҵVmN[' <4 DJ3w^@(oiK'))M-x?1K]qpt(#K+DE8$Ć`lV= xd#*c3z/4%wBVq.J%[ѓ#m#HϐPiljxC~!mҳ[FrkLt+ /yNjȩGH?mx5W#7awj nlyLZD'Oן(˗T,ə=/Z%-būuD>C ~IxLΊG̈́?2@Wde].^f%b E "=.KO iYuw(\˸R{ W+suF@|| @ό-pVνL E喤ݓ'݁) ufL:ӿUK&QJo w0,o"z79Vr; ]V^Bhm-܎5CX9sq'@'X=;@ys E*fl4ϻ ¬G%|9yVAV УyhDi6K#v^\ϝd4.b|!A$\1;FOn Ț6+<ǘ{qNF.4M2/7+oTeđł@BaM<\9r Y׭x)G9dh(hQ:Lu.|/!-RQB6k8}1kzfRZ8/ެ,e[[/5(G *r8Ys Scl^V7r8תib{3 4 ̯cPfȖ;sY5(B} ϜhU˙ZckcUqmXI2t9kRQ4 ab bO8f<:St"WRGw&Tm [0L_n_fG)` Ƕ? ZMfbT!~~yMwԄ\Bc0/O%*ɢJ%0g]A= XxD9&𫘬۝(;yl8&8GWU}*PJz;:ÎU;^⢗V1)L:N=y7=JskF7f $gqu @HQ8'o?b_VJ3ss|O.|RMyſ~]%"HKUBАɑpBatjP.mX\Z/<9F$s'5JbG>*]5n%c$B3BcC) Nw~3oqYK`ЏUa'>֡m1H@A 1j0P1\L~䝴l~^nyci%dz8_t_~,Q*v_O}g/5:2ZeByq$ﳝ ܂~r9gjno1g|7AY>$7_lGA8%'bp΍2_Je{7(VBRYEQ򇘮Y7{vreg^ED ߷# 723GF a"S ݷ JDŽ]AyFUQ&H \S|5nIr*_ >F,݅אP% ،C~&"05s70'qzهo9@ jz3O@$rݺa'\:T{0[!F/ѓĵj}cqpmgq\NlH͞ ᤰkܫS+y\zZg)5C,eCK6ڧ S )TP1 :8ɥ!FPNsHxkF ~̕qteu,~jDMjQrg#^=2[vMpB+Vs!A`)y.MG[ BiZe)(xp b&"$";?{I{/ucg廓4?'uS7LJndXP)~1f'0$\{Jwo݃HPh%ӒsZCx,- P  ~ 9Q_D ~<+ٳĀB#Xѹy8Fi~vL(yxMreM[R-1T#=YBzt>/)#moy a=^PjMnA$ĦF )wȬz>g&u\:3q%XCT|+ˢDp=jܮa5cDn$?ۆƦyw3I8UcD"H7V?XY* =@.GN:7%@|GNelsbf7ޫ|@:ڧGTO`XC1>=&Ώ>]!c,# 5fKYH>MC KDvbRhSHH6 z)${]Gf #3;$(YƠ {.+wipKԢtcȴ;i3|3Nf"E~ ๫|p˱-)`ashW0ǚ^CջfʜN?EZ6:j>b}]}G:.`jxYA%:=UŐ|d;AafiՁ0:ob1>SkjY_o~ 4s?`eַJIW\' Ig17Y9imym^!#;҄>yMX|J"MS:{X*jŎMX\CdS<9X>7p7Z!afK[gS؂lh eX\m)Qɴ0ݤ|8%abGt "DWE_ݸQnT T{vcZ!<4\Ȅ3 ۍHRF@$s4.) u-Fztčx3-0%+tw (Q@3]>ۚ2*s =@w?r)A4sC1f(MD\nQ!{۴iꗩpR7)^4{Gtt:GUMTц~)l.]-^p(C@5h_s*NaW9h~%=j:.Ww&%qᅊ;M,@a-`hg4YazX|/1E;?Uo /(mitaK$6əLgK?^y"I X;2p`#Oy%6 >/91Zn#}{C@! 5roa/lRF}?5I|G_OTbQԪ( '8jH$ \RSyrϤL33)v zOT~?!>kչ<ٱ0)CiRH%螴9lLzoÉƛWF#oq8l n>屐Lho7Ul$JqxH9j"i1}1eV^c֢%!zh,=zQpTE@tz"HɫLL#7>[x 9u@2r<Y8@rGƥfH=ppG?%#I6׉Iq4ʋ(.u\wjVŴju Lp8FV^Wz|S[p~nv;M4))6Pe69.'[)<חbI@H_?&ǡh`FDe^c(,C$h!ڙ I#`uʙ~G*nME*Wg|$$II?׶cX4˂0|<;k7@ʙSΔ&~Gv]-5qD`SuԍUm&2ú0LiHNV7Sͯ Wa NMAOP"%qUM1))Fv#+@_:1Z'>S{8O@)JA. ˑ:" 5!,?;)&2bU%J\~eilY#we/"}IRo|㑶uH1W@ߎ9G3V߿w31=b FUu͓D0 ա@ SS(r=z7FyE:Wiy/~` l4.y9/bd'YD&s8r $$RQ$BA}k{#Y Gb8}uG|FaBj T4V#JyL#Z3Yj9{Eq%Q{QhKq9?O76MmaU2B=^L%?KbA;x͓獯jdKO5ɏ,x_LbRXT\Pe"的9z7=&;{/ P<H(@(A$ %*=ّtiF"]\_! a{ U3$ q?NG3;x"iJ"q؍84uMqJQO7خ~ /Rˁ{M=dQ}`&t|0֢F#/%-،zdr4V;朏2 h8y{O]Ej>oJ+]+:яNߗNLZsǤ#@Se]+Dt>DۜҒ5i8+4 tbq v!Z`lt]L\0`˜FտFd&FpRB-3 (@e[7M`6%CY7wχgp~ u5L +~z_k)ޑI@cB $&젒!a# 6?HgAN ]?ޞd[n ?t~&03 S^ rnfYV D!Ǩh{ !% &u,^%}x?0ah=Ro-"N:"%1e)DR+LRK2l؟R΅ su4֫QKE"pMÃĔ ;t69/DJ>צ?>laS3eJ% 9„я7+ "ri6tj&EIBqavV#@DȠ0oZvv\ Œ0.z?1}@㼂BgRX @g)q.xю$mX sC1aaXjlJIIW=2Yn!!waUp[,> ƂשœXl!—"E7?gmЧ!,yB |PAHRǔŅA1f4of}q{i]?e YҤi:P`1^IH!NǞAQxS|Sԕ/s3#u |=שloZ) C4hJ7eHg]KʫpK̊1%L6 DZc%^Į;oL9t/ģn)n'aXEc kfeDQHq۰JgIy0Y 4M,R⬢A=a[.]' k  UnwԜ. V'W؇;: l)hUrӄqVDu%ARe8XLfaMC+-ܞaO Y|nilcb/e(iPvbLJ&y13u#؍&[w4R Y̨m3 96{@|=O" &Gjmq;ͫvUa`JbcK@0C\>yuIYLЛāu29 hͧAZ8z/ńW#EHߐd l\x8Q~@~ \F\$&sFj׀АyXSI:s0u)(q*hj6,r5q}/tf^ D hz; ^\xju@cSrNu{NL5H ~'#l_Nrrч_^ǣmD,K!dg˽ҿ ,-^DFF&EE1"T>ݴVm9w-YmY$G=OD{60o7+H$)[NIT;IHp#mJ9~z6 ]󦯉vvJkk9gM=ͼNRz+hWɀ'D'i^(a1҇]i0փm0:ti6mPB`Z;X:[tնxV@LW܁s;?!0'7s֕tB0,,/%kMI #,_ He.+~e1#/r.k@@7Ty5F"@0qm_ w Hy3}Pzs920[&M0:cEC7/3**r?'Fej$P Tٓߋ? e|$ k*ٕshNDg3q(ёЃi"߹8NGƬr@pJB圮0>Tf]e/blQwEQ+nnS39DE(ߦ'^xi"?=i ^,}-!2`,m 2(.o٣Si[CY }iL31c % ..*dﴗcl>'2Aؒ*&=hq,f' j{ԄQSڻCHZ5gÉ#~D4'Oha:=X;KtYcj @T|o:n$ΨvIP̳$ovOFӀd_m@?Y$R2p0y {;N""\qS|ڏg/vrf{58!j'3)Y2#[]~M_6^[ ^BJw{wr/Vfi"#?J%~ٵuU2UU1)$cc ^) (9wKyϮwTW{Cϥnu18u¸ k/Lǫl|܎%fy$O4ϲ q9Jg*Ri٫S(6+NzN15Ѩڵܑ6G"ِE͗>56EOC]iAS]bX?j$yYy_u11Bzi澨 lk?ڌco%OK"o/E99LLApx_?®+Sh^2hpM׳g-=l9aNV[qxӶ&d"br>SD+7"L+s\ue-̠kX/D(۸N!^E0/U_#{YIfiZ]TZAl!ǨTsV!>+d16[]n) ,J_jtFJ6i r|:fZD|h6iI5iIIͤK2f9@+ X1BTɕB+H I<+%&fc=m#mcm +ƞLJD4w{G];qig+cpH:}c@@̥jۆ Fr$#xmڸ5 ug좗.C!"))yh I17DN#PVs;Vx/[wan< ڿs9idH_ ,`&4nY>'H~6+B E&ookǝ6"tJ 1\5݊]Ĺb/O6`ND;w>m*UMc+(]O|pWk ((lA9ɣḓ(Pp0ϥw`` )I"G{&co+>x,A9V{;Č&cl0P)}qDudw32 kR7xS;2MKC0Mp+Db"Qx@/E1\`vjuaH8(sP8͍o;#d(&gl{{omu)fR=/э9_| MPOGi^Vsm5{+𻎪J˄UUDAS6 d4SdQDS$""EU"1T|Ϗ_ނhxe\RQ]ɷ[ CS̚qDX雝N`ⴕmMYg-ܵZRl&z\y 7b(7U*_3}0"LjqRYJעOGUI$ B $-^MoBi|gzuCengabC @!@I(I! +  AYq\\AжUj/ZA]*xڐ>u;ۨTҒXRn8 PLPQoAt^*Juj'3gV4V,?ȭ{+^K83)9K{jo]mT(\ +h{d r,˳$zd@d.eȄY mzS)m 2 2,\\ r8Z``誅WA{]1d`Y2…VlkH`h&#IG&IE?ȾC<  y8Ov[TfrلxUq(~>k׶R!;q~{`0>>ҍQ"W=+Iަ6=>+Ad2jDp_Nљ_c A"OAFNˤ620›¡J7Q(Rqy!Җ{f 𺴩^q;Іv*Ss20ˡd_WVX)@^\Z wͣ~j@RiJeSCձXxoʾg%+{|~{y[.|sk[o]2]s2{Q̉=)gY+Ӳ-ih&c_&m`Vqv̑Ψ d})l_&ʪi656}&ڃO1#,ߨwҺW\|U˽p.P<*f"h@Sq̾Č,d2qyRD"00(mb\m+dLzQM>/*TeǺuTb\˟GYwnGS/n7}jS lIbP,A_Q|K޳LO2"1Պ{iTiu9PuG 3RDAJFdij* jQ$␄~+! :yS]ex8P Q9$p Sb0'OAQ*PӘ2rɺl "^H ۽L]sN-Dqį5 pEAꖾ*ICV>u 6qtJj)+@sUt0(PHAA,J)!IH$+TD4Ttݖ}7s ( BC?[Z/8!FLB y 2ݳY^/q b}41\!!=F4+mkQChR# N\C ."a̲iݴњ(逴M$\nr$qWnp<.pJ cK_|e:K";ʉJzyjpUU-\{>#u:΢ oC]>v0Me{?6'O`frKv:l||- 9si2Dz@z@ҶD`aPUQf:p!c2ŖBY5L:ϳ3 ssӲưgx8hZq`q T0RRu4ģ>4A6yHwyf?,P;3 kV$mDPX*Y^'>.KQ+ʃQQ];?Y [:=Wj1C@((> %^-;+zfUU:&HN6YpL58ل A8v(Cu2CD"~vޅ1LMuMSc43%}Gߌ^% /;|a)$sn{?]&"ɒy6{B!  % O~- 6PHK+gt@Ld ]3\zxʡi=-Y،W wQjVLc%0(<𼦋R{:Z 0 $tij@ܹZ؆7}lVe8v4S:0Q(a_.K͌H3mz! Q u(^X/ ȱFCt3v1pJ>qJa<ˍƑ i^p,6M  b_]}l{ &^kw?3 QALb9|-䶱XYLGeͥV,PR 2OQ>ͫM_ +̿,)'W-Z8SGrD2o05!dgG5RuaeA\QʴM8H\6-#BDlveY]\zs5ۓ0$1 jbz_I~Mcc<)MJo'gn uݕzlr5C(*1EXMMڎЙ6Th,VF_Rn%7 h4~K1@:Ǘ(*⺘>\.!gK@H#i>с'z'6@Wp%s/@rK~}@NqkfI$&%g QeՐ=MngkR6qL28P]i"XKZ?0P_l` C7Tb 6_HEƱ4 ,cK&g a! ф7#6Y݇~WL~*[Bv-{= 3tz(Ei>)%ȲV:ىRAbLݦ38q`gef7Eᰥr`ü&{90<ŹGIwV뱢e [&OnLJoxcB7[`#G(\:(9C_8YfCSqOow6@i| GTc(I1夳=⮬d<܇'j&}rYC7>*SsxX&]&=j+F~Y$j+=/f&3fXֹ[Rm QLI Y^*S}O_?|d b R,cnf<3aQϰ0mZi4=9^nZR֝\dّBs\c9U~tXH\SH3_C R QX4> @Ǖ Rj"kCy'Kh;2J<[W:'&Jɵ H5,//pj_} V qlZc asOտ3fΎ=.7*+ӾavpkaFxMH 21t6Rb,˰kQ3lkrMJ̮jQlp7D*FB2:dht}PV⿯y{SYI F"Li"j^VIjqĶ'_@ʹi7sF&?+09QP%̚oDR+N@Mn0gk?k jFxf(lQ9%O/%kre۳cbZU2= 柳tuЭ.VQlJ:qXPbVk@ΘL{/D`@cn|WY: Br3!6=c ǂPَfCxm17vf%iNᑷU lYG}WTAW<_WBP&,u#"FAe f6źи́J ڗy/@@%)PJ<6]I]߯gAܽe%bZ&N'Kc!}'۲o T+69?麮qz M(a #Ca?^ P񤹉XŗOM_*>FQA3@;JȽ*ve*&UL*32sjO<(Aڳk՝ }@#' d ] O1&f*\rQ Ą8i [p 8)bJ t 7E:E{3}+뱾ĜfmhfrTÛ|dL|b*P4Ӊ]~ؔCS 0ʏ)ḲΜouOMNf5?n2 Qu7KhwA.!h|V2(/M ~?fF@^(em0ѴYD.!)*N/9@Oat!Q8`~o{UdłygcrmDs )0`"8l @HL!7F^=~lQu(//pb?Cy|j%KWBJ9g#m,~9((أ [T0u8 ȭKQgreOJ(C/s\ǧ\]ȯvRS^~ּItDDd4P$J#s nÖ^Cy46_H@bWL;"R?{pylu(L?JBt$9ZS5awW|~vk83ɨ9k'kuW3E1X؋Nb<:K& [|w?Hٙ2f]9Y6ݢLSSPl߁GԬ-ƍF{SLnOStVR>G BSl\Qۻ lV7a feͭkvck#R5Ga]͎|ԳwUhuMѠҋfw`EWC]f;كP0 ܨ|!Ժ Q+.P\9YSsӮ埱ՎM.|iY]gOrIŎ[R\mA Ci qWBA@A9H)z5}#Q ҭrX-h"c`mw0Vд.y^*f.LJsANф-}sXn{gcvv) 1l2@$A NpS6닜-∅WeiC& 0*}Vv]DȝӋS> 6:4ш=Ya"c캣OBY2 dr7ʇ GN .](Pa<fһȣ%㕞 MTU!tDؗB둼m^P;P @NLx]ՙ ]^(_(U{e 8vj܊: xXtяc3n7p0Ro$S6&osZU YR$Oc;@(Ay{s֗@3N\XjOq?9`3үFcOduԑr\CoT=B"տEh !ݪ&wSz0ݫPB˺N%ßecA_. nHg!$4T!%Cii*"J Ji)J P(ZO B9!M R!EKJU!ICMR-AS$'8D+a6-Ol|!x{J*i@/J ̨J$'.`CH[`n~Q2 Ys}tYs5هh3%@F6zӴ^'`syܝK2%4*F1%[eaQaLn1HL*B*m-5`jS*I#H3/oVNGuO"AWp @Pc߾]MU"|3gB,E@XbAUxʂVD-h1F(tDɢr)Rb"bRZ0KaTL7d`'̑CD!!QDq\QLJ֋mM–$YYRPUq!IE"ato7@/r/E4~|v]:ӽPtTdm<Ǘ`Rq˳)c7qYӅ}{j?QӲsy隡A,(`CJL.N2AfUKO;AޢvڅdZ\`QCDrd!PDD1!E.$daU.&AACM B*E,.(̴Km`Yg3! c5RZĊh[ABɌƦf4%PAET:u\?g)&~ܐBo.(l& ?0ХR1`ShCQ!C%c oCu!B4CA0 dXd8z/n7L9)tOOmb]~] IVTXRCZ`z&# <$Bm\PF\Qx4W|k'`Rtܲަ"( BN$2ʝ=_ -xz0{^T L4DH|h==|qJAan":}n>9QEVbP"r/z*B*@@-.9EWInXb:poYyFn1Q k,?s(9M(Qb!T@4Rji350fa6 k.bf(Z+O;QϠPU[\^7g!zzN|O|/;mzuB,RO:MaGЪ֖`e9Qb-"® :2U_xnQ\c=i$}=+!I&Z{&UBQD((.]=7!l7&}_{NU$> A@y@G>+2L%]TNg4B_+20Ȝ&DXˢ-ڙEJd#) E0r ֗Y:.qB>ج&htߟńQ2)S̉R܎}~O)!M!=ؘGDb0$#zȳsV0b} ?>޼~ީgڮje1@@zO7?73]Tub}p>M>=_+HT3 lTD Y,ĕ@8wƽu 8B#@rp I{M\[Ɯsw/|lT:/lHd`_ffC"4Ah懡_ ʦ:zPHx_+0Cs"!OaJx_(vsqz|S8T +>8);eeUw?'!Fz݇fWFqu~ PyVq{WslmM1j>@ !*aB嘬Dejwl1 )CpB R(,P+MmS!G)BQGgAX e9!Dz//AE!WաfGXS=IJ-9! MrW XhJ*&Nx =K>lrtq~.DQ B_s>Oͭm(kZqb1Pʩ]0R% &$(a)MWZJ^dou @/& )PR PRA A%Fv(fGsbn}{*$Zx/섽Q^E׌X15Ĕ#A9ԮnTbU| D9Lb(6E NmfI"Id6l/(m.\Vy~N~xN9ʹd^].- $EPR.eL׼$b8Uu,TjUߨ5_y{~7}?;;!2H Hvi AO`2KOձnP $@J {ҥ ]3#vÛ[K+/ni=a4[;mƺ6!Ď=l fxuȹ>4^MMt5ښd'uwhI^_R]ln 2!/mn s#DŽRz/)\ O3<7cY(Ύwn k_tC?F%Ii\9|0VXM &z?i䂲FiHEU|ȷl F=X55i!maF:}\1;}tLd"9`>Xנw8zHW7x<fɢozP[Zv׋hNTE0IʴehM3vƍKce}؞C!X#`%;݅j.u\ם螶IiˎBMilp?{[Mfƽ6#śa}y2=~LCv:?cd=TS3?V}w6Kϻ+b$PIx;\{0+_m"L.:ٚ=:hX%>-O' $rNc ?ה+ʨ5N@/.-(r=?B v-!b"zڢ;)ji}4U.EŬo;p;YBk})O;^CymSNފaadUMAK촔++*w޾W.Y!B%+faJ]UCelZ.(q[2ir=]n1`Xu;뜍DJ^r +7PuUBy|WZ G4g4 p@;{!4>wL gm]gGY~JP) b}'jT$?Ы3>[|7ⴿl):_7eux ( w=` [4p j}:gG+trs%8PPkQk}*Se,g%NCbU{eҟjyn'ϊ9$g^d2 Fؓ鬌`@=:\mC zSBdp#xp m($EX! eDAM~sӽ6^8/rm^Oفpap/,9n!`cGGW(̇G'X"]ѣE )V2r}Nbe7LS_Qi7X65I) [uowsWgBPio蒬&-Ňؖ"Pwks~kypд&1dB vS}&V <}ɱH6CvYk+Oyk˱?a^GϕYWw{ @ !B)4ȝ_BQ8C JTa(0ݖ'-Ak ;BkvMՆfٛ}\#]dݢʥDHYQ\Ƈ> れ|oܟcyG&e9:M.I,W%9'!TiNRqD)IPZ?ts-ԺoF^?  m?Ǟ}H35UhV{I5)㗨@ᅬOG֐8n=4bӟxcݷ2xd \k!I|b@Tĥ=l:a_婗/aU,tD|   {;S h& ~3߳iVlsw(:7/,t=c[vfWч8ӷ!6e.Ѩ0=.B|kMUZ'v};(B&Y[g%2:R2<ل+n^o;Л kr1K"C :5ڠ0u mv;ρ[ (G ƙ"hD:IP)7G!F$zN2'C U=:pq;Iy* XpNCȎP.8 ls\MPvA)2 pI6lC#lf>:>cl\AlsHf=ABB^ Z&I|{W,'ýԠZiPo{ FUUmd*!- T1?# PɆm@ dך֫EB]X,?D,:~[z؎'ﺓ=l39d(Mѿ5>g~SJyF 86:wAʗYo]jJnmxQ.[ZNpM9'Ў[eEOP1v)bv4GL?"ep2e-v-x'13o{>7d-E=+)T5=|E~ۇ=xV'W2?lf&|0w䑀nKѾ'UnHɽP2+U^s0l.Aj⇇4"C]p5ZFNp|Z9-̴A ,;0,ןv}d7JRMra qͺ#8ـvayHrNϖ*g9̾x)Q2dK@V_݂HaQ[Qz%.aG=ݑIԑe+ kTz^j'~zA@aK(̂0p;MmCJQ4KF߿{HkGQ w7ѾC璾F(tu!y0=K3֧l׍P=~`29RMdxXsk y'cxs>ߠbma{{ -B9#-Goh <}2IB Ly/e>a`Jh!EYX-@F(* Q/ܳr @#"q(B8)?NGKJ :?v7475Zxϑ@GМ){DH_k 2E(&8^;nV2z.\15<6Hm#'7 jQLyZMp%愓oy i=\|^2Lg'e {rł_Us絵 'lÈjNirzf.(d/ПXgb" _01Sx{3 @71@$p~꿟8u؉(2H"b/| T()u#q@VNs;}t4|8P&NHSۈ1U/rcNz"_؝ PzGG4B[ܗq~hOm'i;-iOLgB̞3v0@C'W!zWCCq}+㾣I'a&k$!=``~nx>Cp}J&^Q|v*WB"П/tZo'P"gGe%R}|;W.}B J\u[`Dyq]k8N4Ia0;NBXqR5~}oS?@P{3{G'}D'-("9r N@? GzI:iJĉd> 寲BAA>bBz͕`hNT3 , )zJԀJ/ÐI0*~ w)^G0 0Iثt"* ЧB>& zh(ur*ẁ@*젂Br i]\d 5zxa+)6 q V~N.!Ь3()c~:p 12D"w>!'G]Q2jhҋq8w!7)h֎oHyIHxXڶMZ]\?sAR<-&gTi7U‘EË;3osOor]gbQ w]6Q C$S)B\8>lP/v+#JWJR/Wt$|ct(-XTrk(J*nkBt.e/ J3/^_X/Wp|GӄP PRu:iJ)Pdk:{ awJ% M%.IBY&E4є3L0xm<EVWDleHʯezk)Vl Q$\~I([&6l;zʛߤ&ȡ6<hCQLt b)d5w B?#g ӱ+Qdh(D<;t`tB|Ϙcd qQs FH*- 2@Ma%@)niJXHA&HY@ɐ(3Y'쒄QcxᔒE-8*)8eI% u9T@ 2Y!`1@! [ÖHP5!bC|+-ЁHJG!&E$KINt% R4BJ*崡Rnj,XJ vߥ,HO$2B  P HLI*@oi|e 't" ТY- S[z5 hCb !S$)P#wVJ"v @඀(ЫBJ)5I!ğ0Ǭmk$&0&Jn2Si5 )D)NA*C|)MҩB)2QGP(!rhCZF}R K dN(D)5PK%%"СI K0G Թ % RDJR1AY&SY#af႞|>l>̀zsX5YmjfiuVkn@nw2`a B: .#F"kZa37eGuà!T(f J )[bBUAFF)E (4((TTR@В@ P ((l! :d$ڮJ4ecvhh]|_U 8vC#@k6( 4RvT)- U>%89}4 9(FDB **^zXY^vwk>\vp:.o+J>3Bm x>]ƚUshHo.>P=!{: 4:@ ٪@3urw`}o(<̲HSCNP=.ww`! (A=4 :hZk{6Nw^@t P|#}}M޽5+wqր}`׾n}[אr}7A h@44 Lh#LLF@4*OT 4 4d4 C Mh4F0FCFMOC hL`ѩ 46F1ljfSDDDI"I@@$SH &LPySڧMyyOS4zS#ji34=CbFFh )4jmGO҃C@B@IiOh4b2izy4i3 ژA0#M1l#SbfH z2銞4OG% @A. nQQReTRR$ 1RеNۊ=ip3W̓`셲 JAs= 4Pb !,Gz@?<0&o"dW*Qam9&i$I1#=sc>=v^/nvd'T',ˈψXc\ *[%@C\ ^2X)jS{z$K-bi[7˼;PQRCd+Vԁ $AY0CDH,W-0*E"$bw.#[[m9y^u= WsڵμksrgNF=}7f Rܳ"|ѮU`R2TĮJ<qV/k<.3V1NW9%{ޠTS3/A;,! V F( {rXUVHd=i!uorKf0d%@2s !o s1a&@,XΗBqL#I)Zv!b邩Q"eHl֡1*P2ț$2 ̢$rh-l#l!Y ,"X@B>$4c* pBYG ^7n8@d!VJʅ-/wCBPPCH9 k ڇ - E /ۓ DZxH E3$c#1xJJYLg[1Nַ Rn&$ÙJ$2V,q`hk;ל%xi)8e(")ZM(R%jG tT@#7Jqh\.H6B(qpИC -X\ JPu4 :ޫ }8E1^(id)E[r䐉 LY(P Qe(SJ䁹NvO) f)Hdِ;%)p0Y*;Yq f2eyzwysMֆn6<3 d@ӛs7ӷpŚg !ӆ'>/ ep γմRT-罿 ݺhڐ穢,z₴ 4V M !!)2RUK1;Ѝ !@ҰM֌ EB(J)H@9SnሊE!eR *B]vT*P4R(A$UKP%<#Ԡn)MIf{9Nv 6$?0GvD ^`w25Bm^P+ k2h8 5{a'r8r],lLO['XfQPҊnck4ܘU IR)BBr\aLBHu C ) 0t3.cm\qS-.yD`ꅧ;50$F(A2R<+ځ%(P!(hR$H )C>Cu3YR"72]\1-Fҕ.5}~[r+.jp5}"%NSxݹEւ2Wmɛe[^3戜f%v N'x0/_pn<;%_9$#94NfTRIIc#E/xB,`L=X*TX)Kf Ŧs NΕbdn!nN5ZXT28p276e)SShg."[E,vQ7y;2幙g6Nݼ2yq⛴17ۖ^e3{2ʹsnsJsoww(un[W je98 Dnm7,/9rnaw+9mtLjc+c)n.ݘ1Ûl˶Cf96i5^rv񳕩[YܸeMduL9snq.qy779xWy57/&fJ[wL 55ps]yL-˦3yn'/+m7;iyy-vr7.U!M5ʶ6;Eݦ&M2nb6\Jrͮ9 eo^r 73+$$[s]>\kƏ b" ,ETAV *(TEXAej")kq3+uxkTUEMj(#V+DWL'2s ,Yb =DTDTiW #Z٘\73vy .PFWܲbB&Ư Hf-#B4 C! P(8%J* Om sBsC6A13]fg`Cy_/-]ofO LƗ%,J^Xi Dԫ`j@LM&\5%*$J@dn͕ Lh&hJop }pzcK+;Ep54?m;reҦ37nf333nh\0feaA"!L7KӪk:r7d̯ e`ח.s*%@E xM*@UWKb:R0a 4 Hl ̲`+8TY!lqO9a1SDH߰Vs1׽j%(wf435^e;_8_84\riխ.#Ll)^5F[Чyq4C*mNrb(NKxR`{‰qpm'"b`(ey"@Byd GjXAIEHS1$a/JԚD&.H~ 96,18rs{d'{a/ 5ga C>Vz<k$ ݒJ'=6B&=#42!zтRSŒW 2-Ӥ{H#]N 5wZ7JX"#z [f Ɯ1 mn=D;Dctq> 0+\ )VZYy 0o.=ߜ׽[d!*l pxD`V 5Td"[QAQR ERrg&}tۃ(I܆ߐʖх?00ʟe6s9n$3B$ R3Y96Ka[*6Rסe$-eli+s tB=okY]|N b,R w*LhUây<B6Q`d.:5!Pzgr@q`Um%]v^#Ŀ B:ԜLP^"ii%<4|o;wڼ8 "Zʀ# ;-d99VJȽ2r8XQ&a4[[NRS?k3^.pNK)mr˂i9D(`\L)q+*ZAe&QfAn+mr4)oe|/ypwxB\ s!;ဆw a$B,To,@8˯ q-x@m\;<.$":(k0NjJ%5h+L 5I:o08.ZH";)%ǿ#AQ` % H d+:(UgNgGd2o+4b]TP;Ϳ}{HI!+ G{&v7T~gr{̘ͷ~*RB(BaDP>gH}MHJC92y1+VLAP+,[0 28Nn!!k=9˺$$T?0T e_{Vx= )dd ʊJTG.^t7 ?.|0;" 5 ?%uǍ/e8S01rfx9ϘL'w'k69d|)aTʐDPeJ"i.Piq;4PN 44<ԡ2z ,Z5ZK Yd@§6D!*QG!YٗM)MX83xR$b L Vڪ<@^; ě.R`!%qKw,rRSM(Qo$TONwHfrArLġvHfy|{zb*JB%vt  E0Q dTb"ٸ{f0R"QxBb|IB1L) d:ô)}AUdPkR( ,8DoY5b"CIl1++$(5j@*퐟]0u1+j*x$ZR4P:fL ғ1+ ;M%\/8pVhXrQ̡ BldŊ ?3V.̫UCL\@@5QD' BCvRfXC;OMQL5CXÒUR0"/NVqr1 cX[̥D -**D[ L2B 78UhR8Ǘ2Q"eJW 3p@@@`Mk']@GYk&h:;"RLRAD$%q\< /VB!Rn P+,f&1LіABLx܈PxR 3%]C̸$ TCpI*//yKٗ?O|X"J*XTD(TrxJdlZ0SAbJPjԂR* BIeSP-(Рnr@%HxWZ]̞ûvWׯ}#(4+m71c;|z,Qb m$Qgb]1F-Ή+::/O7m {%+DUr{ǝ2;5kΗ~D@R*(($i4o.fq +$2H,"lxRVƳ-*$$2J]f fȓSfi39Id8Hq!(0Žc.;\fJ_̄$/.FVF*R)+5$_JM쨆3U/vPL3A9R^)SOM!V51d7䠈[{B cP8 vat`qjpNJ$SHa!fCe0IAd+I *H:嘇\pcrΰw)Szzxى*a= $&( U8l>A+1FwkVjq)EfĀbJPB11ˌRDiNJlK}|d' QBV!ÃS#EmE- @ m!j2LkFE7 P >M*N3ܾ0i)jc9*Ac3ԍ e^F&R̕m%rxrۘ~ӆq+!s0FSڳj;h/`dU) !e%FӨ0ou<_Xɬ>wԤeb; Q꼹nͤ˾i'F(SFDƺI1Ups(ۆ Jq!c3l7*WZ dq~.HsOTOբ$8RH}6 F5KPс2ԳQb bd'9Hc8L3,Jsye s|ɉ3y2{g 3W/;os1[s g`AHxCWQв1R-R<> T ,5hnv R͞ʞ%~sr @[5UD>!+ZdSh BtH`1zKT͹=" _/u*/o20(xj\9KN$rfswn/X^ǿspZ-iy 3OF!XZ33sIAŰny/>=`al+3 hI@)+$ RP5 5ߜ}R""1d 8ǜ̧nXn`TexbUb"Xđ3;d Ϙ/ Wf0 |\bQ`x"UCߗMO5$UI8TJ^n ofC-D4ͤN.ek!0pAe+m ~{t5R,c7x&xa|YTbCg_mmc%QF֯eGMg&}V,2QD>{x00-Sp.Bk !X#&q7owng%/<Īqxp.xe㉉$ R\Cw}ױ | =H`zO*F7KCZH^uE r;EgH`$egKϡ#L-Q:3 b_Y2dGX^ "QE9!U%d Ь f,*:²b ^$u"&1'2C}o9z ((,PAC( zrIYEsCF|$W䏃dP9Ի4k Ui0pDl% 0@vCLBiq@0dK{S419^}g$ZR}%RSXVUzX`k4JXQP`|||B6kޖnG7mhrЄfH BdIQd3x&7v (@0VEʋQ~ m؝@QӖ׉d({ΐ $P-1 )-陔@lyWϞE@Xt2%τ)d0aM%HX.Hqy^w~zHhq!2wǴ.̶FWO+>|"Ň r/bM%*6(l Jڊ St=PeG%|voL`u&X~uO6! `A+ bLNĕg0|Rc(Llk+&G4)!5m_ءb~@Tٞk =T Yrk1pTeԁDc%kҚ_yReRw:A$l lhp H0Usߏ {<7W̝w .T`1mӵx8>?T?Hg,t1 IgRE9_$4y@f#QAX+yJ"PrA)*,Rgц r/хU$+A7cUbm0*`g6Ȧ`)e#7wqQQ\2!C%Mjf4- "INp u0~aHLڅYQ-qHHHcj, md+1LB&?=>a1{fwm$~*vY8k>*ٴͰ$!B "ԡ,$ BgX=µޟK񸲫\4\$H9dy`tpߓԨ=fQXl0L֒l!%s2;meD07 +0o,}e]!Pc Ø5]7{CJk1rԾ8r|X[$;~0+"-4k3\&`78NÓp 'XTYd&[&r/dEGx  ,umELL 3Ceqh c\cHl,RczϪEBo";LI-X2pbd ZsUܞbX~I1X%n~ Ou"OOXK,\T2211.3l|> wT3 52f NѺ%) OSvtd{F*m> ۍQs -͛;]TőT AB% }J":0~ RZa|>,G;*$#H fy4R*T]\1ʤjI-ObzQdfɉgG7: edYY8ms)O)I bb$Ap 730̐F r[aD5>A4n@~2F V!Z6 RYndQ$K0߉br$6PF8=ց 0BU1̊XE$ glUǮפv~lzۊ!&W$)ǼELW (5"zKpBJL֧mǶ3*HC ̔Zs0 @N>΅ q(3p$2d`)HHs(V6(Ied2C(Ab6 $(QPUsMBy|‰$c!QbBc=1:^C9*`+" $ E"31IhԢg!J<2CIݐ+BH]pZ  Mř>3%B`QL慱BGlҔŃ%B04j  $Ե#Pw*s[H O$BeI|ɿ/\wbӗ(IVOsO`Mc[b vQ1(pr5P%.Kb0 TXi%!'JG-TX rP!P!uK 0JnTLs PZ+li=jHeحo!퇆3͂%abc# I^58 jsBM0!R9BMOkbuOY 1!`DQ;NQne\z~ކ$ς 0rBm#VTw`QG2wȐ =8̡Vq1IarҶ"6#yb95]c7.㌒BVB4H2IC0owL,s}Nl)*VrJrR^ɫjIZTla C5+w!t( `c\I+ _|7]W'OSFq/s d>`O`b"2 @dT!imҊ#%`|H`l5"D`"h!#{N=1DE eU˗eO 2]={,YencWĿ);jlRkX47Ӿ@NC(4-,[XAւךɗ(2$,X(WQZ=2a$p>oæ%CDjL9-vI'zzB{F71EVLJ[+}u/ , (+#D ewm3ZY Ko~S}>?nz}Nach H iF46L;ŎRZIieҪh@PaDuii .60up9 '"qnxݾZHAUdmH/ 3;YBQcX+w{O(D(2yhLB mp,H(r,\Z"eF# g=qEu`!+2؎mZm{s -̸w&2#-\C.Mi/or}Ӏ(1!"1@BxŒ_,ryKK+3U C4Rc2:KKGLqo=;6M0=:l1nՈ4k&" #yhBI"! 8vю%o8y0&2yo6slSRG yB,T 96aٗysܵ-l@lqW2^0^e"+b1-̈́2"Fe2Y|TrTb"Ɏc~nzoRAh/[ ,>P1Q/iWpe<}At(Z.q/<,Ňe\ ag6IkEAKfAiK@ӑu#|t#̦r2]J)%1(~ 9c-\~|rS%FOs3$ dEO P$EfS&a'U2PBS@`\<8~ ?Ib'P OJcon2V4p{Q'-,>e=L ׹u~}3&8ѐKjvc[$l72c,lj*.2$A lүܖà82jw +jP3(s͋6'yWiWmp6z::o9ie5%msy!xLF){0ÍQHEUb3MSmd8ѥYWbƲlWk!˟ )$Fw{')vyW=1Ct|,!<`çt X+^ӶN+3^50;'̰n1#]ȲH _-c:2`iq<2C`qFe`Y1l! % [m `#W*tޗͱc̈́8 -qSƦE[l94|rñ{MrljbJ@T JRs1!x x㿯rSUENsob(2;LE@Z`ݛ1!Pˆ7$h߸dDd>RfT Tznz:D81Mp"rt|IyK Y\n" G*#{tEO~>g wR"yJ>_?'uahKX[OlMv\v1:喽{;':Pfe 9ԨԢK ǔN`^Sݠ*O;L۞_<"μQUS2j8pf)Db @Xۇm,UƥobX+A Ned!Mze䱭9n :[6Pyjo9u{~v!jQm*rnW|0qC0㗗u2!-eb"Yj3(:O>d`Kj)w\E@P]O\+gCXX) ^梨 f l LQ&ZiЇgmU?@0߹-壔!ez9Z[vէӚnL3xzQOs|{'8O p䄆0уЍ/&ZX8iagSmUMŧ\Ym* \+f'{< 8N9Ȝ.{?,qGmBL11 3aBW9 Cl| b*I.@e# m;D(lף&11 Pu$%gvhFezBJ(?)Ck ϙ>: I_>aX{heDrB!dĩ{f*&ҥqneU#-0=hlY,EfRptܶ Y 1$ QB \,Ŗ9E LŹplԨ)Rfxs 6("HA h"МXEA5;ǖS10'-UM(l.c[샱:*NN} ᅰڨ[ _ (@ݸXm+Ƭyhp-\jq]6F%YT=øWh,@ɻd$SǞ曮!~5,FA@ 1q=K DuĮ~WVeLk,Y>2D6.@iq G-!fg-r2)f amh{B,V%J#` Dҕw w) s$ԋg€0^ՅˊErtܻ-juDT̖Ug{8-(G"<`NAd|mhq׻/rD8O۹UI .٨INV(1ĶPXZZʠE"f0){ĮT*uv֐2jkd6Uت>Y @DE%&cwcC5 ghX5ڹk yT)Lu+",Ĭ5xrS/z0$fZpQr͵bY>)UBWE-e}Vy> Jͼ@Vr4Mn>SɻcixحkK#pPԩ9MX[b0-wrj:訤DP*ak\si@ư,>ERAI`ݸ11%PW2dPZ'YqST+v15/,~ > T"Z(!4(Z |JMq@ÌԎ{Qv1 BTaFOzQ|J IVBH¶0^$(ٮF" J/-C-*k7 9kݸ51ma2ij 3 Υ03N-5%!!JZi#2J{J!.p xS)9*QdPPUIURQ9 d50Le`ZږIMBPjL5@Lk5$PRA@Ziue0hhԃ̭!MҩRJD"E)r[Ne:r(u)*Nq  (x޳ DC$CP 2DW) ;Hjr ʋJ\SpjL ȎJQDCr(d T7(% (-(@)"ʆS$T{.iT)@hUZa$DDhB  Tu@<@dR)J*IH"""gL@ Y0O8m)1Nr?m =b$F?:.# K*ox~_w^>+! JNJlAM7eVASKBZf  H*'USPvdU%P ENPUNVA@dW" *)*xP(*1j$ B!!Z)h( )J(&"a)H)$ a( bR($("))J( e*b(h (( J&J b)"@)$ (J(*"hH h(HiF$)&BZ*$ IH Rj(hHZ ""D*((( e ( ))iP"%"dVh6$\""(qAFAGE)2D%L5E-TLKQ{, ,3m"*T""HU@T9P!@ P P )A@rfL%3$E*2HER*2(RP `0r"i̓9SXQ;JY "&[g32VJԪ!-6X"c0I `Dx\EMX AiE?}MRbB""A<@P> rAE8:A~PDEZPiD TU2i(Q)JEu("B ; @*,vBǝ't*җãFV7krE)Z{I״&6ځZ3f6t=^z^`HV@TE$a/ f&ya,X$PI()"&f  r'& )abb0Rh )AZFAa4\tO7 ڞo'=>Da`(I%J=rҎB2ԈT)P,HT1DLP14 (- JI#*%+ۏ]p8ćH9>!,= u0]3$9ÀZQ%y9+P f]q5۹\)b ֤!P}1|\+ 4c0B쇋!2,0 iPYbK"w0'2ą} |(.SjG"$Sb.)B%JC'A"P (ؕ8GD *Q)TB5 I@9 ی22\ģ#:́5)'6&Q- +!۵rGBt(DBx׋V#PcD#+$* FԀ6'/UozˎJBg▴?_пx<ޮUWQ} 2fQz9'<:fep zPbmډ qAzѼPNۓ 7IW?ZeO൘ > s֛uŃ)BcezI!Ζ5S wd4v ɜ^KaEBb[x,nLVըB!o[V9 Wme0yLa`BBphE=Z :"TU`z] X,N3 ])F5oEQh#5s:\Q4F@nМ1 gYM"Kai{ʆ׋x}_F$|ud" 3"lCc~p>$ }@"8D 4Dkr=WC e܆ chǡ~ Nrz0e"$ʰ{rî^HiQY?*ޜoaEmi6i#QXrێ6w{9H,QH]bM3}N#!c'Wf{9b s>}o)ëʔQ4IH us`4!;=Λ*` N:A( JR)  lH`!ATH#B:!&!b&$eA?M!S6ׇ/򺎴b!TRVuBB,}n% t\V.64>a&J'k.Hh24  $dMҪxyKۆwՔЄH`Ɗ#rE6q¿RV ɳs}/g]2 j$!#C2%OX#ݺiJz5fH'7\|{K'@E\+9T;=x\wE34D@f)!5D_^$O&,$dvfAD#{91rڼ0޽ylE ׌z'mz8 [mcޏp{0)Q;>ҁMqzXҕ05!bʼn/ @mbHmQ xPbtyE|`9c?TF~P:|][=m+8Eu(yi߁s"^n7RY~pBGOAD&KerO飓;4Z{S`k3 t!կ# gI n\@I+c|\B˚Tf8`;B ֟bw8 p?7tɷ۾P~9Lv0 _djZR/i0ᐉsZFh7 |h '\(cՇwI0VU7\@wx&oH^EGOy~;v;軺vSfSuns8n[x/]_di6~7ahxhoOK? 7bRnkkyUc/QȮʦ7 w7SWc_Ԡ?W:2x Fi* ҥͦ/{ 'e1lV|3yUX;P; =I5тN#\/iz,6zoss> } Lj7Z/(OמGRO.wJ:饢p|-KC/I_{~h t ̱iy'!SJ| _b?o !=;ڹ\,{3g} O C3@/:DEJJQr=OW\Qr߱CQIr+b_i}lc;"sZ?\BtX}SouD~/BrtqlUgx"fwI/2zsu~soq?/vcn/zt (} %Q?UT;S|jQYIR85c`/i @P'{/SWsv4k:h0Д ˎ"DMob_WS\3; %o%Tǒ0) ;&Fc LW>'Y}KxKQ _>K˳ưZ*' GΨ] Nf?tvOӲ@&+xh;p1?LYY,-@b E-JQXx8PWw(BN `o-&~PH:~: }Ӧ7: mS6up7匐J|1X7yweAm5eC ~ ~~s x<9Mي!%1>u_wÆx7 7G6RIw HH"@.Dy;A0Cs ΅ qwqZFUTB.s° Vv塜8oK-APm|T|(Ou-ߨ`p@qF\/?q fe]oڪUqhy4L598(0 X[1[|,"]N,A{&{4r !譴m0ٟnkȾPP;x@#vM`rD{^W?ߔ;wNl>$qn[b]!n]y7HzVp"%S~-3יhGv\/@6=@u2*w[{zxL I:@V~eGUĭyrc:9tW@Mc5lµI3še[=@'$  gy4S@acsMc`0+3>Rvun`rb3#0PlcoHFw3Brw RwOY56@ލS\K:;<0?|B{JbEN030t0OB7|J$ǽ;|ޝx穧֌PCr&ğgqJ~:JkM,ړٞq`NLtlnP!^Jb2M*ClG56D!aHV  N5.w>}} }u>y܈[ q$ct#fU7Sk؁Q2r\ȷ}R NnP;!;D!Fn:rꀯ7OP3ncMe3Jg` }96~w@)";M[mɳ,8 IԞIa(SĊhQL* Nž]=&9#ƉIB`UA?CZekq¿4[dlXK|# g2=5Hcʞhi:[RC:\]V!M#s=wZܝB5@gQOK^f A-O/(LaT}ւ*p$\j˖+`͇׹^ p9;hQLJn+Z׀@wS}s$Q!mZ0óC 1!8[u,!X*6vtH$P$C=y06̺7.[%|,1gw ȱTɑk.C9P\h?9URY [qB8zc0 s{s}bqEYTAJa][ZNz aAo3UoLm($s rc\~ p0$%SZP[܊>d+UBc{V+>#:BŠL+ 8!,e?)y$ꐰP*Y$d(@i^ m(d%E%[r8Eﺛ)V l7 ӻ kdCzIX#bj9QU0u *JK[PP* &*2 Υ61 pw tnCȏΩ{](O8;'e}I%uK2N6+oivClXOs[޻WɞT2O ϋ԰|F:gV:<&IA αLq.Jy9[&4 # TZDB+󸀵|lbRP FFa5ۙhwVa\,[w#@գs,Z9y; +O_s:tW2kt:m?Ţś_`>ӻT 6e_o'4`VK1 7: @ fߙd oٍ7,lvQkB6je(IV+r"%˽@o`8.备iZXuR=+mn W.y VkNӋ/"kK'YĞ} [9s6t17n"jֶO'dLi Vj:R1j)_5Me\%cǹ6ZA]xEs6 .zu:{4]rsg% ǗsJsqy"3gX";˯$IE@[|->MI)nɂ[l:/ ѥYA\/'dj/Β+#G*޳cjN0 ͵A3rLTS[ wjA5ÓiDݪ_.P u]̥S5y?Y1fgȞqrH]\2cIٯqzDPn-'eruuW\J`~ז;o\hEHk&Y%/+usC> 3i]S^Rio4 '[8E9<WK3t3&.pRgxXMZA !WD?j[hTJ۬[NYuɿo8kvKڹl#ػ:0]C8)k @^'.p^8*CojhǾKCUJ1S/8tX nqxK Sm4Yf ĩWJ^"!|Oks3Ha16.E ?x<7^\z߹$A[-ZzC8k f3ecX92ŠJR Wb} isc+,:2vazyM=gh/3S,iP2rfiu/z'C غncag u1.׋ӓlrGs<%ʦ9^7~ZC4A6Xf -JBEf[돣ܺοY᭾s6vO0>,lˠ/eHcuU^OA qn,A]X@17v4'zOd`騇}{)Ǯdb<%$KBfe]{MlkSAH>!2;V|u*1rǰ&k>aп$ >㴨] eu| m~:~7ۧg3e@$(As}8/ ?Uv-ԏ.z-L&{7эs}-ex[a I$*`()=HI$%N(KaTV`.5 jRAwsuf'~pi]T >q|/yXIxKLhi;R73MI"`kɿy@wJe%'[pddr6:cAsL;03B{⩏zxvYXApnqRhzqqR2g5w.?WW >W1L @f`f<'{FS~~U-!įǁG5<#Kd3 zgU$D #]>幤v @ 2@du4jۑM.p? *f%},-;q +%"%J zG.8xZU)d~8 v%SFaCV!~fI6xNW|oOdJWƴԓ6Yk]'},*z)~_ʋ _ۃBXk_BjDT%`aA ` MGۥ-F:A0DZyv3xo;ECHxx0#Q#!2i/#i*r̡I ]r<n=<LȤ]: ƴ2En; 'z9ï;=F׹ ba pRKavw2QRI( 'UF4YGtUo e+·/\Eev[;-ܚ Fz1H; BXKC<5q5DP2t=*5;džD "%bo0Ȅ *"(8 kql) =,ӨծHxE6@=f"u cjId I/)1(8 ;W!pߖkwp=<|e;Egb{v;ZX)!1sMil0ϽbFT|+W6{R/OOh֔F&"*FMYzfL40݁gy L“g-c,18DRfqVj F~,Y7Ye<[0]j| qٮ.ۛD8v\O#fռ/əއv K$|D ܖYsacM6)#4ai^{:Q|$@SKRp"鞉Mi(rv3 E L" \-,kZp`# n9QtW臑4ҖElw@ 2J`.P6X"Ǔrh6sVϠgg%G`cR2Il{ǮJY^]^\Ӟ ((vjGڐ8٦5`N`xY/J7:E$ jB[P$0$ٽڅd5#F&yߦj<͖IUP2[12C"5v}(ob{Ztnu<,8Ɨ4ϫ08TIUh\ "EFk4A'Q/͚_3#-׻h1khWhI&2!eOS{:Jaښ6pvYMiӤL'v{ׄP00XE80kf!EMVT6kOQVuYi eubfAÆ.pho"CJz5ma6LM:J=mHUBX?5~5u1Qw5D`D DG$TKOgsiZ;[nG=6}@'EPd$R2FPޥyX$׭^oq 7F ;y kRB"8g y9%+zmi,PTH]49RCwNq)Q_NĂĐ[l(6qVOڿGIElJ84 ]OAOm#ђ̬jthFhk7˘07FΖl>,n_6,kn0Yv ^ieD@ d2sbCCҀKY4'+!\'^c͌\~l\sݲwy$NY3=:f]jw2an,BC|ZuL?ϹZ7 =6\A(`Ohuvç~]flz5nso|6k;nmO%J@`UHbNμcE3†:ؚ*,E;>l]zxqjŹi^hցuXz!r"2^Z+ɢio[mj`:*(jm'6&do/t7 !3qha&!h Ow a22$uJAa`ǑՋԨ8NZ)#ȬpyoyOzrW^S1Ws hBlQ곴{-BA6`nE9>v܉,#,d %5qok%,?{w 8Ċ{Ż¼b<_G3\M b(lsC8p]X*0$s٫~(W85mI%vp .<[,}[nomCCdLZmRn 6iIKD󣢻LơzJNS[xvV!LQc6QhXӼJS GNEխDŧgsxPݚH>!_oZ)N& L y[)Gdu FoLYeX:R6LߖԶteL,\_'{ G(zWp^I(z(DQW@HNd-G{j rmGfϚD:;IK'4QJ59]bilga~sEpN;N=y[Tg̈Q#oS6y|0dX\х d[5PWPmY5cxj2B= j ی oNj7 ׺jsY(6mS뤞@@ Qp'y׻ZA+-U?Fwʐн \,T˛֍缈_. x֐{ϹqT+`c[ᚹi4yD%9r" Eڷр:c'4sB HqyAcʁL27hQOnutAx&4 H?:+ p%MF"pJn aQ"b#An>oK&WD*a'xPL*|8MڥWl޶3H ᢁvUBo.\m܆J bMd$f¾_ 6w.Y%bIG}nQuO5cEC87;ۉfAIw,⤙̤Ev.7ε@ue](C #MB# h (,tKW-_SH}4:q#pzi,0UQ1%;i%#Bg䁘$3Ͽ»b9UBJ$W޸j?%@'R;4ͫaԐn~Z9r#~lO0N~Қ)E{ip@$\%S(UzVv?|Oο;ZV  vg|Y/Ȫ3/p߁k?6eՋ>Z5D0 /2V>GNEў+[VN]%ظɶ _\Kn5|3h6.UΊ-)  km =|}e S_E`SVJ"M;}JWt42J@PM3 +uM]`M3j$Q@|"E   JC?6{_I@H[ E%Tj$,tF X뜗W6+Ѽ c+W%{L/#!ЊO!(Mêxa"ƔI$0gz'>$n,!o#SIçLrmc 000[d0(Yν$f{o O>( c]Z=7dHu?^2Usx&G:=G=ܕ 4Uhw BU/@Y`L ?_ob,02CC$A&Re1,1+*Kn;xH< )ïz-lg֫z0?h;{-;K哠LzAͻ,mW'ᅫy |N6Z? VMߡ@` -߼E@>QB'yZ8:d n.#H}jg7^__^&5Κy'IcWYYNq7BA!eVҞYC+LÕ8/NRF 9&@ ِ؞xm>ͮIn#eZ wUQSB!3| e*, b_w^ 7i;OuBJN ס"(Yx}n++/VE蜽' Bcv'˲!Dؠ-D}q<4uj\>;s Obv֢F9 e2@ %)ABR%D#]bGsR+U% !T* MjjX?>lsߛ@sķ*frf_EcUà:A G+,8X>|lQbm11_.M7ә7`>n?&"BhJiJ( " 2|-nz캨{dd -,'B i 3\~{[ל@--tyDҥ#T-!EPsk3ws{;z?WZw-Dԏ^ ჲ :_򛏦Oz2q;r kCRT6akRuϰyϗv*O{J(f)*ojP6LZ-I?}6I+c?'Ře @QءS9Eеze@Ģ 'f YAA:$OH`whk"aA%y {#7E@M!OZ!DI@ V.3b2@@dfE)%u_D|}^~{G,#'ZB3t;}Hkϴm^-,>{uX&B+i U 7:Eȩ"!kY1~4ߝhX@A!h1~r>w!PML\FFeA-02ADw 'l5͟nZ%)`8)¢.]셑#{#+֑R |iM >]g+BN@ZEB f漦n광 G =C㭨K~ၸQ!Vg;yB{p֭G˦`%1@摮x(ki@K2!xo=m|G6W9}~IGޢ5{-B@x辟{m~m9 4RvWoMHLDQ]BAW%IZ@A(W)TÿDA56kg~<^豩jn%5_IDŽ1q8*{ĆMnMϰm;unN΍FCFaʨ3Hfn}Df\=(k ߖu%"OL3Jg5-i_>m||wIc,pR^ja:oxEi NOT@{Z# !aF ǧ6t:y]rA~HQ|E.}oy?F$h}fw`G't$^YU@Y/b=wW!B#39$DBx&ᄦkj{?㵶5P5KuПvM|>q[6) ըChc>vv]!A1FM1ďB1S!?k!#8c W6M6}OضJV~4L>lu{r wZg/_{A%5C#~m޿{v{t]O?T# ȋح]&S\ QN!Ք 1+ 3;`W0 F8/ \v|ֳk˟S<ܣ"T 4H f@4ΫȆOGs7&ڡ G(B){\r [rܵT=~cTR@X=)xgU/< !M+ەPƚEcҴ9ۀ? 'Aw/}U hg ~8]{@@b-@|<2G֐"TU2~s%B 8-b&Z/2|a"Q{&E(WpSik<(#8"v#ĽqQklB`R)(#HȐcLNLD,>̯.2/ЯAsꀀja17E}~$A(iJ#A $M2l=LX lKK(""{su_S޿1Rv Ly err3rDR7:m8ᠧpl1 v=f`9eO4pfз zPˣI14wu>6VnN8 HE)B 5FOgO-[h:)J0M(B!-iN[Y?~=HLD cba;ʑ#hZe e V2p"T<Dzv \UYRQJeQ;]*q9ԓLM } IxObcnp9fjpi8%CN&&|3q'u=vFq[$<)QBG1a^iܳmP̧1x׬c,nV~zuv !h{/xtn?Ϋ$̙=߮t :H30 X[vJ{ x ]Z2%=zc;[3.*1ӭGz4)؏6_"PlM-bM@K )̗zoX(Fƭ[D 1U~S<x.S׿n-0(4S>kmLf4 ^4:fI}@-(@E.>I\^Cg簐;f@pp4Z Hsɟp7 !)ut8si!LHvVjM3̹gP0zo)f7^rTQ df_Բ.̑4ŅkJ Xh(P%@X EE@p36ܧVq) !jZ&%epF@) NjҔ.KZ8hV`ա+m '!CÛ-1:!!~\4X֍*:7+1}hJ@_Vw4' 5 ]KNBddIΓHtd~ w-$2 N ZǼTc*)*230tIؕ5k2 d/c)ulR, ~KӺ((E((JPPiP?}SGNLI뵬 8iY*!dqTH 4IC5u!YD~ӓ~V#l<|b0HCs麬obxꧡ,AɻTّ:)PtMP7 c#"`$U$K.wkJ V.85 q2< 'ԴndC|x^NYk30?Ӕ:Y9pPÑ@ri(wen8ߵw\nҀ?#>n}@&h4U _*~GmOoU%BR: jHBj@UF1N__Ǿ^7g櫅0>u%Ђ. UBQ(r@e ET{ӘHL ڶ0 )^W.j^ چq3 Eu/j?t( Rg q$jYZ$/T jv7r1 ~G?f1Ԏi6ﰦFy)Zp$ICh)"TNNmW1$ nw̎'?:-o]Q'kLo9t۾'\Pyz1C>o>|9s0%DAJdTq )pkyS5/UJIR ЀMˊ8U l. B [,"zc sWġ:3)b4 e-͟) jFmѓyhtTզ=@NmUV\ԟ]չ7J: +%e-( R+H$bMniqk tHr5P[,-r |iDs>ol?t_:mٱ)rj(|?`6NJAh% v0TY$&Rz/Az s"k|ANRbmhk6fRIq1V.ж$/j}< 'SO;矜3hjC%¿y'G*ͽu3W ul{4b%gs1U|)PMر=_cXNokL+I[`X6Xj(IH m8g\G = ))fmSNCmu{i if!-X DH !]ZQOjT@G}[WrՀ"/Mhv !HٽMXpMuNO8,i~f[f\1D@Bw6-QqOjCHAsOb6|ލcJ*6L2UX̅5k%9(5GGZale,) ja,VT!2KO}=@Ej%1U8aad_nӦR&)rNU,c=Y[ڴUg+Ox,(~zmOAEd,!HUJ$Ytٚ9q"F e 4g:_-6D;Y' m}BS4PBB҄EҔ4 (Ҵ PR*RҔP -P4侻鱧JSӚ^9h:ȷJ[51 j"3 aXG'ݟ]ʜ{/Cg;ϯۭ6[?t 9#|XQ3E.XtD(@ U2ӳMa*=XraQQPQ&B `jA,2"֒O$",[9qt"Ȟ!8 Dpi'cu(0YH@ F?'ʹɂٞTٞOWpt0@rDV\}.v#2+r7] $H39sc9S=㘋fRioQmVOwǦ^!d*o;W|r3!p>+b/p5AX aNBHڃa_Yϳվk bf 2A5OdEy 3םB?+ t9&L`A7~~uSx*9&ȅTK xs2iX6c\%+s+_,Ž93Q#̌e}(K.$z/[167,HI茒 7o q-oT j(:3r^i]lfE6Bu'bT6&Z 02g3، !iDqb]l6teb`h ;D$e?*j0j8_#YoجWsc9ޝq[<޷E >,I*#]c /#c?0ZêK:N!0C>gP‹)ꆁMSD-f4dա\| ?qóV吊C0RQ70`33ӱ섔2r;uj3Xjgܱggud8:C:&fC_I[m{`ڃ5|z˯8Z=4f 3@nMwy|/+:v̆0w:R|۝^{^17n6U51q_@2fD(@G;#1LP$?oH}]{])ꊴB߆x/prB~+k?Ba`cX?~W!p#ȓ-#DeE5xcf;<C;NgCgQrT.Y-XHDY p4#sb/Эm_QRlH$OxK0?vbpPCUX;@k?ܬ 3L`VG\0nI&Y9 RʟYݸ 噥_33` ı j2)!D$A' .&=J%S1 )+.äo(s0*n?j(Yֺ3# تH )md_uH YG<, IVtwi-AUjndw12/.I L=m!A^И a <ш2Rℊ:L@a9#; {eQLCM =L \o}>ccD}Wp`V+%iCvc>׮Vb=nqK^rLz@l_W(':#xM $doI!+^14tFvFÍ/5dAgPRqP v-2]m /pwjYet*5kV %T i%HsbъCｎx2:=gծL>d޶$(q8'IHɝ1F\kF0H0Y-J?껠\*V Df@233/] P}nh n{"`1 `r̃0)55ﷄaK"?EOCTu#:M/sT Au&=ws(\>)[s"񇆠NRlO'?s8! qD$}Ch@#]|GvKGnEuDմDɇe@P{RI^:SY됦s1}JhT(t-2싄3=`<_^h`ga+tEX0fIRvMنO~ts> gzNɳsK$u|uGUPlhY^yabL z LɬP7=U܀px ⥡'s 5<,! o>lz h, C[ kfS  SA_' xR/hE R77_VT4xC~h)j*j% DKM}"誌CT=IEІE!UPj.m Iy;G:3 ',N:~#R3$&vSHȡ͐H- B ב%9oQ-iPOL8 A&^0+Vt+גRgt@FG[+H|{Ş*52;kZ\f8&K&ӀE\V%W-#qP 4CZ nG*J PmF.dN}W H*ht٬^9*:cCÓB nq,dN*@G>ik>B."5!3a = "maۃ|x Ml-:ƚ+\ x'+3zUXn7< 4bCC!:Mۓ-J#=iտ,;c?{)-|=7wK<S +7}QZ2B\*_iUhZnqm_Y6!.6Lez|\@O޶ʐ}0qxUYLn X*(tNi*gU[Q$35MSƨ~碌,+z!S)jyR ᑉVL0FbF:0`@m !/|_ ~/EnTEq2w 'G 3I:WlU5G('d(Ғ_ d@:Ŏ B[nCl'mMc,QZ~U0[E_IU\32ok)_05%%ۚ{e w$@ TH4}ʢ,B4~%_m?o}y߼ˤrGS6*X\N!0wP,Jny5b`dfK*_˦ &go}rrUWux\ /X[%@%5Lw \>S] p[_|#_#ab#0~'XSʰ$`PAф0C[e-s'DB!aTP9LRR$8rÖrGʎ6#rsrҴGYFrQo -IJSRl=Y~1J``O Te笾W|cEb B۠f9!֢ ( *r;Z A\8$~u+?v!nP,7} -a?'L0"8;]G~(f0rw""̜F1tS(!ה)J4N)Ņс<?^g#CUC <&Q5 2Ĭ+,d={0ԋXԖ'7x?SC޿XNԾl8m[̶k#5'-SufKcGE @W!Z_sz.sPA㔐 ǩ6 7'X\{.˙t7lu}Cə0pHu{1@0t yY%ܱZ3#6]^Y r>:2c$:\s+~txgZ'q(OnMY %;5?gDSAӿ*pS , F@wD| վˍ4GB xfLL^Aie͘`a 9[{bV%:T,@$y@B5o<04iBQ',.9^ZP[1vV.afjP \ֿP7)]gb}' Î[vﱿIVMN|!+覛~l Bd3BHZi(3o?(k?%u8f]A {B~B29;׸{صCt }cѷyrg $En.U:"_U܎=r/QH;fYk,z5/޾_n3+$kD6*H %FXSJ2_o|0twgeg3eP'M,~Skwv;:=,U}5cf~Ld^$;A40`Ȼ6+NlPՙf~`%# lXmWwڽAL"q8"OQbo<"xـ0VH+!Ӟ_Jv0'S{ $Bި=g2n۹2?(Owuy[ʋLkM0U0 qńOcK}Z93{ZlX{zm(~j[~j47;giJCso RxXȆW,`ys)w ExkPX=34(dr7D+6R1 A 潢-r tFвGO?3k zcnrǁN} ;R-FB`PYa1#`$bEVà¦< \=ܠ2jVYUn3 J)P oҤD Pcc#V\ ૎"˃R'ܒ:6/Kݻ 7~kp&-uH͎+#-56X8)Ed5,y\0[V P`܊esSmZլZϲ[bHiSy'$矁,2z1(ap(r+2! (`eD!@Qg2JG l]hd)lH䕭:XUbr&7Rj0^VtK)5KLPLK 2K)HZ£C|>E׎bԶ^cUhhlK}{?V sX!R=CeQ$@3E 'SAAAT{FD!9n{DQը)XkqZ2$hu0!  @TA P1`1,|$e;{XLG%|π!XTfcX2Pu42ۆH-"1f !~I 1T3z 3J [X-}fjS/Vi]4N{h p) YͪlW9(fZY(Hs40N,0VO?qq-B56uZ.)2+3ŌebPQ*Ma%k=3Ե8G:-XOqٕb~:kɻ&́^-1F tmŠ)l{Cy !dcbip;=wT`*"EAlMqO:AN0M-wLFgVH-G!43nVKuvkXDּ2405kia<:'@#4qBp\8Y7uaG2aX| aIv-PҲE~R>I<{kT;mki U÷kXh1./ߔ>TCXfVgw qHl݂? Aa@TnT\"\BIZ8TB(pe׆@PH 1PPC ܙah-;‰A"Re XA{lHlF0خ*11C`C5aQ6=1w'5RԚx\ V1㇆awᒾoQGmb|O?j4&DO|u"ȡ{X.v`ZFFQfɴ]gcb{\D*tlRhG _n~OW"3#~ۆi()eJy HkE#.aqԴ>eeƘ\3P (x^\FFE+(TaS! bٗeׁAL6&5ix2\60vGHqMjAkXd* Į5sUTa TaFOyݨt_dA- /CRCИ#R̐F5ܛΑi*jJ>C;-1T(gPLDnitRZwŎIc؆Q}k6>#~o396ͽvqaxY?ҫ1-l,Tp5mCIV Q{\ۛFo#`T' ,xWw ax>Q>A#+|C@erf̜HYjK莇 4=ų{S;M&˰03jmcŃMg3=iM=(&|v:^^.t__PH1t߈Tl,a/fڭ3Eo[PxL!a= =-g0&|k_Bw'q7܁)磁9Gޣo;ύߺ:af٬WH4}%_dˠk ^&Wмdٷq*e{sY8հ@2BVebZlR0Rq-`9O1l87 30ei}׸v!t "ar8=x@ ˦Wͼ@f ~>+ֵ" :3[9|ZogNЯE` _(8B._@uuЅ5<缁yBkq~]zHes r﷍ $N?S)Hh7V@ILs d^6Fzfbܻ!3`̎Bfsc^;?/g_4ﳢgQqgcvɌfιaWa#IlU(G ܡ+8Du wxC@jM Vj3YX:*h39*Y7.B%~Jim6@Zc1klFd`ͥz?z_⅗a| b_e$>UE&ab֭b *hSvS.*R?Q{#L;}߹/WY/ga7z;\Q6>&>?9):UMbZsX.d|`3 Z =_1{_]2](ͦwDƿ3=n-M1($@7 [;[ xe8Jf3tǬ|7n,CCMλF&8]xk:҆wӬZ7B/XOrL2,+ٯ[d??mskWow,h>llMZ#l=Ls+7풂0iL0IwxzI|oXMk}?k0gاQ;.7H0f CKx5O^'k[|7"+S[]/lklq̞2>Ɖ6}5k\tq̓hBqF(z#`r(V Qh>p1þh\k߇~]O'8O~պ]x?WѸ{ѪAg e;~oиoX#W~wϜ̔b蠔bV?C]RA9&<@B\GnյQ-psD``d#0@YC%R_p_,]{Xg?Mͯyv W<;g dDEGAXd@M!pN_+eZ'z*jCNM[D[smE8ԂgqUhaQq; ƶfg ib30XN՗%|/=p sG?۬X*v(O½?R{:7lgK"\t~X4Zrjw73q TT=t?1=`M[O{iXߺua~pp3ۧTq'ѫ:;eGPRa dFfff [`0 kQ90fW;bG/xLt'4 Xc0 ̹ޯ!um 2Uf9Ayvѽ)u\!,[#?vL]:1 c D99ϵ)4^1iG_k Q Bn 904\6'm%%RP^y_s~ClhDe dP{9m>'2Sޟwd(Z[-P v廞Q.{9S7bݺsK]XGj(l4?~xS z7 $H4~ngZ&,+b \$խPvr $ }"GU"JPcSTfv,$jYsOkgU< K{YN|.z%e} ufr7aJp{Oި!C<ޛASp&!|*$~/SՁۿEvx;]q1WZ}V:m(VTuwF`ݬHc'Q-}L֮OI|_](2{k0OqQPt}/`P[yvqaS W{)(mܢ35 W3G3 [V1]m MN٩'קC^I՜Eu;yk緷e)p`',y$Xfw~8V"M-ڂ ~P)JP)mq&QJ//Ѳ{OJ:M mڟStT(v=_bￒO潐=vΘ!)utuF)>t BB RGʔKηm7=;w<\-24xfϿ$5#!_Oocx/ofZr{4NA<.dFۭ!\PRG_-Z h }nkV'9/+R4k!_ &NJԓuYIunɡB1N:ZY\"rk&չjwٱ[J{cjGYAiwmgeW u1MZc7~Tt:̽={>Y#  Zȹy^(υ(VuEyRi!Ye\ddMr~#j s^i`C%pm"ڒ=AhD -LyAQs 1hgM"QM6Zt/0;$c/lW:4O&0ɾhe+wedb0^EZ]amU2ޢl r?C?6 U!̷q~)4!Ŀ0r'0AeX@വ;(0mwJv ?,$Q&&%KTb.& <Ć㮁 WPsx5V.(4o]Qtˇ5엔)΂V2KzwWC #71鯖u4$OOOgQpß(.݈͂j\dھەK dH0ddfF`>t5v5Ia"3 yᐩ0z?mzX0/3ΏOdǡ33an"H@I =UcQٶK&[e0Rul@eˏ- f3>ܰl;!gĈX6`@$Wa5_ɋ<0 f6E! TVr!x˺Zo]i$cۗL*F ,I+4pZYnj-ЄEd_\UIM">l/GG\̜{S+M=|rt6'vP3,lO% J_pGm}ݎ[o@ɼ`FhL;LetvBX$BqX DEI0k`/{ ȝmc37OU;6&[;XNpѲ5Nf"ir+"r5j(pkQ^[t_\xxސ`P.Yp CY$bpY :$!$y"dK{[(Df}6Wᅤ1u'p|t$SXp-Q\ _'#:媼yö? VC195/sqCy5JS/9HggJPBD}2ed.@2!m\k9ca6oj1>˜BV|Y2tB#KKKxݬ@`0 HPi朌X`$b$dfT8% PeZHCᶉ@ԼDOɶN=]0|.gh B"A nΦ`b f !}- ڑ/  x[n'ܿlMb5-8nA"O4 ?:ObQJyDYdI/^" *8Sn-wz98S9حWP۷DNj+a 5}CT쐪 ϣ= /]ieYiksZ#D ^*W/=fWO~ᐅ[s go"*pYrDh֤DXNUéx r@Z:.M>b6"\J+ zu @ޑy~` b M/66l\&!ǻ9R{Gw{چuD`咿Q22m2kutB'~#.h4H /-gn3L*Rzzpi(iH 5;ԇ5."\D`dF v  EV,m6?6/rGD1d?3C |n!'O_5q#@ %᮲I/=^gV6>tppp/޲(hXLp^/bȅ%3d z8-?U{ bV϶ZWeݻ~ `˾!X]r<j_A̭[ Uf|2 ) 03ra.=''8Eyπ~v {)hb?boY?Gi^VdW9{&W㔋bVuLH@I&9;FFZ!?w0ǧJ~zE(ZUlrA_&l0H׭g47c9AhYuȋG^Av;9%ϘD$AuHʑ4?mD=`@lE_2#"] ^; H~{bJo7!LbڔDX_`oG`6/gvKRMץ^q 03f4o~ *a݊$noߗhW T+} 'r!*% }ڵ7of7Lѯm,^N=쯯&֭΀ȵf'*;6We_[u9CRǑdZ$La.ĵ[:7|en|)|CM D)vLÌ/KW֙Q'HJ1A{Kj{ȕmiArߏx͌ضCByߍ7>)BOS?CAznEأn،=67pјNb/jghwl \ߍvr*p/ԁ7DBvDx{ :)vM̠Gs:LQ%' 跼bb*FIwxMzv&l;|}l6l(=>oV^k;13EpF8VanP*B)R;bM t˜Saҟ-9xA&%Olxې/2he|s~M|;ẏ {\<Ǭ tyI hym uO {Jr#/D#1 iX0+Xk7h-/ʘzf.fl_rƑ:n/|h^ˇ\E s̉ p 00Cs-X+nR_m2v*f}5CVŸYUN`pxؾmh][R鏹/JlXRt"dE)`2OeUh0S}ZNrs}de pT &̙"dfD} ̘X\c,L1 Qqja;!@ dAjrPف{ʁ'abd_ TC|lLʚ/$H8S 댗d@fC'8:{G|nGҺ:o7«zm~ . H 8N[\鏧)%`j|VRzOQ,#̌`X|7X3 W}HPw~8AԉC01$n@HL~<eeelR lC3PF8fHClox3*Tl+Jḍo3J3j]$FƯq!0S{9:$LK8vQHvk8}G-w`|u㹸ҷ N 5u 7w'3|ko[/:wz "Rg>km3?>4)9?ѓ DJSۣҝJLS'cl1PuuZ͙&#;W?u pgL˨ zn|;g̸nv >'wHc: T1WUS^;`8ݨuC-_l/uduݝ5yei ~I3^+%f' E$HDQ/+ j 9@4\$Fd xD ,eT.1VUyu|R]\r~/C !OONҜ)UIO|rLJYH\$A$ H(GFm3D@`wE-+QE4瑧s HJCV@3/-" %f0gF"䵟 z ǐ;! ᤠ8 rQ38ey=ԯBaV,ʴ+Р#~#b *""ٌP\O~[H%5(EgMZk$_PgY&χ8Ԉ'6WGࢭpֹBvDo!F #30:!DkYϾ~a[ʺe*U.u, 14Cl9 ooa֩cٴW/ 5RTE-MíQ.FwF:4=1~mze5m'TGgK[= ɣp~ Ww"z^߬0" ]dK9R)*P`MfѺy/v k?NFhOq3;x8J[L3–zO': m=c"0f`0f@/fZ 8kR hp￟?+8mC8s~;?dt$ vgYT88[+PvmedSt513d,`e<+ˮSb+D'Ė>0ڋŻ4x*zCFy%}{劬`uXE%uT) sho-0ī@R+N#rtz5)p^'$܇آ.D|G, &Чm`\oB .]\nL=O).\>Lwa,}uX*4˹R_ j2qw]7qp dœ;Li;cP2x+ Aeƫ(I&LmH vHx/>\+15m‰_2/)8}S$fW4E"0@́3fdff GYBpuQ5.:gYe/|Ѐ!u@A||%A M׋?'u&SSwkQ]dɑ`"v`Wqjkxl@LOET~E~*7k:t4GD-UQV9Tc}ض_7]uPC^ gШ%Iv'&u} KQH*K f3kLĔD#723sR+Q˄3@pL rā#<_$̌ۈ6]?VGH}ujd= s/ԼsWedBI UAb0Ձ)"K LDĩq̕Oeevnf+S턶e-\NּWY.A@7ؽVu0|=Hva2G^mH"(uy7G0;+!p!cg$5ۄhŒXn5sܛ]X6у}Mj 5xcAD@3#=s%ӨsN=_KSgׯ&?w)k*?=s2>zEqf RLsSYN:uE>d 35gU }~&6T!l8 ]"fkkzb+oyH0/ zѾ۟fI77? No0 _)Qh1t7dpOpf{ Жb&۾t#d1@}1fO%/.>oC% }0|h3zDMb5ç>NƩwSdq卢rZqP{_LuVo͖@ FlѤqEFuoᐿb%y:7<֩tUBKlG#uL)'_ 0?}߇4޴@@F\l\W%rp6.dF۔@OV cA`ޛI-,HCihWL K ;ƛ.BMѾUS̙f;f`xh8+2YVMd59g}>zPzÌ`D!H 3 H 4g)  &Cۏ?_ cr8(IGCH; o>NlqNfmne{n_c.ac s}uۏK姵9u񞷭cCa{U _Ia$X;{7#wwZ?( v /ū׷mçJ@ _J nߗêgWK$6%>LF+>{zSyY:wz-0y7cEG;>C`sFEC줶JPā>J@:KNTjW蟧FT|x*,q|z͎- o5FAE5?(Oscr.^Q9kO̲{{Tib!*He-k { _Ny3oBw!PІA5~n-q JBrk1î2 r̄|5kË4f tLq" ~k3)аgll㠈Hф Y sP}5#Sp0n"ElX 5W}l BYv z\.O:R ܥ/*~cA+ f^Yq3FDTq|Op=;;Pay[o}vq+,8͙RV\΅1MW UnRr1&e0 Lbİ߄7-Ťusf Հ?P}#hܷH\S?F?,vtu}uP!oIcP @kl0MZZɅ(nNWN )œC즕@I5-YXO1W A.AsO~+m^2 2* =9U(m1[@x)QtXt^{ m9:w YؼUK!YYob@)96R 1`ӳtIl3c}D'Q$z>d &,ӭH1O␻ɖ@v6C[*~O+"Y )Y 0coz).dy8UAQx{~ߌ"Po ,~3v(HЍ #B9?K:OJr!^՜{)+fkH9Ѿi㴔k ">M+ Id ٪`eUroͬE#qO|# D}}rw,ncE,کIgN40t1 In(0yj>ͤE3,&3<da5 BIDDdzlt!CoWw;|m ģBhYR`;СB<%|]V6ἰZ|; ̇ctS|ar/v|wLf~Mh" D`;Uiu=_ũml/5)sub_A'/f]3_o7>m6K֑b'kR`W KXb\Xn4?'qwx`N)Os9u3Y X /VCnrG>ނMB"ڛ&p;GKX,,oLYIrTQe:]/y- iݕYZiTͫ`Xo*rV1LԴf S9ͱ5Rx}afm!ȠNn1L$ ۿY5kNrg%ȴwtmQ`FfG=9v_vӶRw9f,1#M]|S괝H@ٻTmNW̍;X>1j5)0bk~6,4~Z?c}wXU:$ͫS۬YvіyGƚO̤K:4 :n2ZRKhi+]S~˅ qAB H7J* BP^#o~@+??55tH'v0b:I9ܣs`#$ůQqft;\˘n(NUs58U*z3T{rH 2yOwW'hhaC2(%TWT\ []ĈA&)]}e>$|:DzI@^J P mШYD 5@c-csJ@Mwpr.bbmYNk$T:S`aDyR`tp=bϰsGIR}mR[ [d6 0'tm:E$Bq yܾLX))m?w9ݟyӧ$RDPT(O>ӯhk E7TDa#DD_ T>+*heO|_?i"FC,NE}7S_tJJ/ش Z tWtbf,A,ak:s}{IBzI*@(`V&>N}#y^wuC#u9~ۮ.)\c 1Bq BIQD́ ~&`TСa&yeU%'4{PxvўI 孠<#)$jڈH"@Ec&`Gsm[eW,gr?/Ib'4\ i徤.'=RP@0;p/|<6x`n vY~8zg0ꍫV77wJT sThĮwN+hoggl>, xj/S?'|z񺿍Yf@fP(PBv(oʼqi$OG{o^шY{ +KvV6,Dٱ lQd; 0&?&lÊْr(d,\xZkN7a;84\>{>{" ̔! *&M{SW2bÚ>YW=4WVsA mN_& ^rH NЉ F%jdzFYcf{}sҳD͇jIϪGh4LB3,[TYne`9VyfH 6["u܍1PHD Cz\^)"SnML=7F6T&=T^G؂r}jN}D0; x"C;8lU{gvrPxg_799nsWU8;ҹcddZ.LB!HDB2hdR8?TF/}irXɠhh{8y8Nj-rxY`!>OS .f3ցD5-Cr1QzYIĴ8ܭxpLS@A5U@ QӫON@ ᠤZŵz{\x!PP\txW'3eynt[XQFvƁB%P UqK_#G9zpDcj'b w璎T=VmѶ1&,(&$|&8y[Gȁ>#V~[ &P1&V{S b?ȾE_ S1 ,< _[9}+7y S8rDrAݾ]KmH)E6âB3imkH$k@` ,Le@UPŃCMHA@?^R@S9{x{Az" 򘼚1nb01Rv s^6 OTz6,k=KÔXqb350mc!7zvvy:K'&a@aZ; niabˣzg(wVKqe\Sk^VmT%mֶC$]BXEspZU F_t_[fG.7;Qv;V8c9)AЀ _X# p|!2qrnӵQl ӨzlrW}g-OlLȿqo ohIt_pяw_A|M>K9_ZF*.-Pg 82dz\,E a $GuiWgzAfj >L +8dd^~yo'~T[!QOQ{xԸLЄvIm9u^pFpG(B}j98/d OņO-9#+ޣ-gv| ׹M}9@[7Wt[k ;rҫk/ߔJwVԟ!iuU˧fG{*tXm 5|/O+@m 4{iH a=aCQ=Q~H.UOicT++:޵_Y_w?9p+5*B~޽NRGmy#Y3,9u'_ G!qZ(}yHCA6j|>x=I?a׵AX՘%oKWA,2ز,MPB +귔c|p̰ 9aн'y cg~l1̪{ߛE&ͻRrE9B]v*ll,1bic_>!`!!g΁7_%?|0 ']]K?I+j|o o&E"W\ReߎPsş`w6ZGda);jH=ky7N/B=[p% ή3UT"=0`-2Ǭj@sMqwg],01@ kk[4w:x>)fҨt>RCsaL( O}6τDs(qL.÷sO{xzPNH{f{!-"5fޕ o$28q.ZfdF.g'g+޻6Xؤ[Y$ +O&j} KNJbBM.fᘁ P{tn893ɷ&5^ _D/:W Ari`9ϗ*"8W +(N.OSrt~^ਬc4E//йa]^RH_ yO=%k ;6n`kv\}'9/4bNfIxVw>oHyP :rnM"ꋲ"@b푘3y^?!v=de(/I]oka5JK8NZ/ayMP2>L ֙|80 O!wT?DO_[a]Ǹa#".ѹkIaO\1PAW MN#cHx2=1L9D$*/ѓ- uQ^% "i@/eIX! $ ָ27)}>Vvta'mM9u]]Bt`uj!`Y$=ζe(|~" hNE[0p0` fl1_`R=oXlJ E&ʈ%<G>~?( mk;sLxEFfdf KȏO nKkvU%SǨғ-ޚ^d`]e H1y0)S#ϗC~Z˕ܱ}{ו4 ;q~ݼ$K{dżOц>.yD ed)QD/y&IFNۺ[m 旘cpWFT?u5@FC ?j*ģ}aVP,  ʆv^*@>|߅`T*Xb߆BT=5eB ;+ցXER|+Ks6!_zO1գA`% pRBP8^vr?:mai*˻z>O)}_0=qQ k4V_/%cYDiYg df+^gi`=>~vO?W|~e3tZ,;4|cn@OءH|s N#0>`4pCBFDCu?L3Pgg"r [ =lt0dS`ʬOMCn,.ܝxE@r4^qfyzsz=mfc+Dee!& ylpL_[b|MXG&b(Ka@A\xf7d C?L7 ?<~ƫ7ȂY"vW0H7w3!o4@sWe` $oYuQELs.0@(E`Q;QsEծ{ "C-ֿNFǟ[3B 0 BfjPoh|]((RʸNY3r }!c 0E'lA,ʎrfc.2y^hhfȏr Z_B{H&-ȴXı(ƚ~ra,dWe bAG6*d@gR!Nnr93,i}L>.p`&[@ gc]zˣU]qp ;+(RDZ^c6IϒiVy]67[Ճ6y=VàƏj"7+]Q׹ְSA  NGq~S )\h&"D@R*xQz!E LPU5I|S5w;> Kܰf13eFBn b v;|ۛlYaĈL:f9fS ,d%U- J IFcb"&%ḆVVJĭ %7 E4й"j"#6FnxT,r+R30-eq\tU0ĮX*rj @ih n?߽; *2YPE qLbDSXTRT+G71Df#mqJ04dܖjAAJ*"((PYx0lbLh)F)U`%+Jȱ-A$YP.fcDDEiIr,P\xXb\`iq˜2LZ*Z*1QVbXbVTJ Qa[hm,kFkF X((EX)9YŊY@ TP4=?OGܜ9lF"KAd .`m ꬟U-꽸0B Z$7Í|3(B|0K0 C:6'@ɉIV=ͤ|5aHGև^s}{DٷxvOg?+sJlcj%I!YPG7Ng_An'd&*BQiV4@QTAekhDMŚ@,1Yb1*ڽp)==0v4DaLM\>B,#ș. HHrd0"RѷGΦbpVA~gؐ8+HRv&w%9<w&# 2:O{-Asϖd.CЦޢcL&%x酷BÛwLjX_`}GG`Xhuы@"3,PQ2zlz%K??:SpooBMyA;n!FO.]B@%w)?T5ZƸ;u8쾝~›-H-(scփ"|4#2-z0Dl%4^ -J H?ĠֱJЂ-G9p Lk-ȰC/}QHO3{ ?NS {;J0E\kfcCƑ1[HedRw}qi-I&sm6&ffF@r=oL 0_Nv0F`[ž7dQ1AEEaqTsgxy6}9'G vBƗ-޵1ռRs\)M8 ( ߏ 돓M\>m_uɖ^ m(E*UkFߍqyUy PjFZơr??ja{2unu7fsίifYUAKTDa`TU V'P/GyᇾqfM͓˫XW6,OCQNІU>3&D1"uQ4cg ̮:p6c|ć⎚:HQAk7%rF6QOV(@P%P1^f ,`ޓ?>;<^ gLnO:4 0y:T]>8u3ˁoD9}\hrLJѠP M~uլi1j`"~`02 nw@˗6iS|f?j\ 2@|Fu{}> םO!2[%-i m>YhBl~'2ѿ(V9AC8iג,ée*4'@xje/0w^(Ԭ-S([mh%`(*l󘄓 1+uU#0:;܏X?dXBe.C,\y&i9yT|V^\m=ik궐]Q%֝\.(.0F fCjg]s&$A()Y&7>D2BABaS22Z+vqðsʫV`BXՂT +d!U*Vf=a\/ s!+3&ò/+!4N2ȨCX4;lDEvb;j)oBß:0:YWcWUf;v̼OLI.7vgыw|q3`ܥh9KQG@ɉQiF( RY-`( m2,ī6Pnt\30k,2hi4~qQ˘&9aOZroHGlCjnAڜBgr&!2i:I9W~ymU-Lc.~7]bVs՝c!v^Sx:^ߒ{&)>{$Sҩ]70%AD~8-k}{T/``.6j.}rT!~Nk ]oS0rb pĆO7/o| Xl-fƋ#&˗Qj"c䞟}ͭ\Jpbyy-,+V(,:Yꡠ7FxC3A@;MxF[[obf_ɆXt#LsRՏ엝 둟'Of`:/Hy'7Ӳ{bl ܨ2tHЖ"hu[[ i|20ljeu"[9KHqQws.dG6@ >:d p0SW7s:zo3pB-ߍIͮ}@ W KK@z\ =~:Fu 'aV QkHk <7٨p.D.#հ=2 on X0^{ۿmk;^r3?gccuѸ"!߿#Sa!bw 5<հ&rO}}܊&mÁ!xlk 6mJT EF_Lp1'J:WO?:;_[bU̶25;Ak՜,ռNR|9'K(x)+Z ɬ=LEYy:K{eBոpUj[;4!kw pAx gH($:Ms|޷j}.F2<o]?/zGFB<4<A5?A D O.Pa@RNIdS*;5EO9,M Ѓ _<=8KNPJ,S/;,_pЪ/k,ȑACed1Y7cHT4FЕ %Bc l12 &RdQSeɈw Yj9*ܺrRRu =O֪ŽQ5*,`TR{Cka[i4ćY" X H(%4%$joci\?钙JtEDlAuVaȌ b۴{3cĤGCA.ursx5m+  2ݵDI%tRRu|>׳[C aM25W}nAf}vN@>)'KuvMPps7QA%NuRɳWNZLf%CID4\$ ]H|k 6"i֠N(\NsoPSwqaAW!Ip@HG@0nvB!eJ) BWpy&9>? 9 uY1&4xGJ&˳gZd({t"uGi5?OQa)WĆܥ[^HãuAëkWb?鄅͍@~_vR90JW1q;XTMy|h?b2\~{ Q}{Zwb](A4/qc]2Gxa_9gCoGR.[X<>_^wQZ4 9tͅ礞eO\V iDB)A0gW.L$p?~A6WVY=̍ +}űԇ'Qy~29+u30 ξGGQDܞ8raEwSFp> ]#%9< ;戇l?A_Kݐ@я cӁD{Cm{c`Ayj_ NVQgȇׇ/܅S!K52Q *z3Nxdzzr &UF@u+k|+$MD#T /X!a쉐̧pP0h*}逆Lg(NHrjapbGE ;U3W#ܳ2hhIr@؆N4 '"'7ôQa:D">(B.a@o#8s Él]e`@=Kh{D2hH&d 4T ViHdg{7^ thw*c"Ȃpf`Q&ziu~lU6"p A Hg/.:jt_+$D۰^CeDxm[GfŞN~4%#>乓8 (HdfpKq@̑񓨄[Dwyt*+Ǖb>{^M(A>Əl(OpTҒ`*y /8ɝ-xOw'9~~z-A3ĕB)Qos @Ī#*!&J@4DQ^p̙+=7O_u4?Cj N:$^?=f{'T 6Hh>ԖFY} ފH O8`D$&"Gf 3 f@LL2f_d:`ڟˊ~ceªL{JG $%ܛ[P " FSح" ׎[JH*5Gg4F@.Uh^v|\-~N>%`tI}1D~ > خ;¿Qqg18BҘ$EFfH e4  "|0(oQ'J.hp!ZPhZ4!((0A.B#E)&&MH  j%(h#2q3"aӎF@ↈ-Rfa,~q@Q=`?]1Y2\L%l6Cu%[$G֪[~s}Ɔ+5˾(^¸ .N~N9:7Bgt=B@Ai fH?L4FR~3C+LfCc!UPM;}KPw"gF6 ^hm8V DmƺBTϛMې?`ynW^~R #3 xg;`̈>Uk1[?OJ]{O}cǑµ"^[Fa 5跋XFL^;$K@1_ ]j_ĩot!pA@|׬;1ȲH Ϧ^9R+Ʌ|wo6b ,LߴD0%@4 EH HKjEPY(8Z[϶b%`>FWڭ{|<TflIAb3?mmD8a?u`2mmAPF@Ogr*]͈@Xl?f|I`c6.?9:?+!FE{.rds]Ћy|yd8#6h-toEvpΪCh9;:TwgfYsmQb%A5WNt5ĬimTe'!~yT1ʭf㓸jX4mPZF$  yU4`Wv}Sik֩IzBS ֽ?:+d<) $Apt `\ $@̀̂qj DB~s9~RNdIngӋ 5P U 3Zlkx!c峝d 9tiu**2gk;fOHfc%'@sniE #!rônR@ "(P$ ;~I'sRI)1 w7s\9u9N:Pw&w RuACjS3(d@`Re)k8DXJ4a0@+(S9.a:`D )IDCyh0c2e;ɤ$Rr CRRH$JZ$&xT% !CBC Hdh2iJ %J@L"S5M#K-FN6a.P9 C)Pu H$%HSP7:eLMJv"q\ Azu=BEJJaOR!A@M7i5#CJ4Rd<%"HH/RjJz5 E&@ h9#JZ V"A Qir]&@H@&& %[x"c+KJ-#2 Q ' @w*)H2 @$(#ZХ#@/P#AM((aH+Ÿ ơu TfM*Ȋ EJY^7+W?u M+R*Q"@vR`{Q]NCu8UHqۙ$*af{ @I"e( 2ϷP-"m|w94)IC 0jԠ)(g $5A0X^/^.px}n%PlNuvszܪKU m^=ލ4]b;174s!E0=˦ڻUvɺ7=8j}7>:{^m׽`+I @{' ;v.ލp 2A4 MhQyM=@4 @44i$! '驲4zB=@ h4=@4h4@)2 !Li2d024 1A!11M`0'RE5)fz@ 44!I)IST&Ѩ =COI@z'z#zh4Ph&Q4d$TB =@ѡ   v~&bo`QFmhQUj*ZT<wk"ZWlӚ|Mg3Tfg<77<{9x Z©Ssy+q39-cWu:usHIؽfQ$rUDEfۻ\ @W^\# n#bر\7hڂscmCduP3&)3Ӣ"ō k/l8s )ɦ [wׇj;C2th)Xw5k6P98nC4z׺y<.t2n0ܗX똖r/(i@I75X% bJoz=qACf\'|/@=MP`jFQcQGlNLݚ8̭hCw wL ԀD21Pwq v^oc|J*;Q*wGc@Of"Q 3S10O]gȵ^|N9s,甘⦰GR{ӼѮz6  PW$P 5$ޗ|ݞ-3:s^p!끪+6Şqc;|z,QAJpLb(":9 2׍UHVֲIR`}Kl'{m7wU5!R^B vzw5q)/J=Frt#ѫi-s fVRUr@.1؛Gd>Y9 w)<]/4?4d5RW?.١Hc2>䴊e>n!dTϬ=f9F}~MM[OnP"HaQ7?t\^Ra$P<-{\Bvqpg2Ne*'Vt*z]) "pv`BǻӠO0;@"nM$7#_^EƄ: 7/Ԧʊ.P{c~nEpq]٢ 8'@(*lӭUJ tu_Jbje㜺H= jC+UsFN&R:ދGUUw';Esb>Sͽ#?xA*8(c{w牊.S {5h*qj2R_lb|W7CK3FMp;vJ `'V q `bSJ4 sMѼ&?˘(=2S| WRց2Spu}ە$=;dG% ;$]Qsk@M#3v콟 HUL^<}/_o겖K(aj⯱F)gbW4s,\Mkg['>R_PFBku XHb{J7m{5os|0QrF%ry1?YsH&!EDBܐ&b~MEET!c0XܬvF&I-r 9vElF"?X L5 pم=beDΧ%5:'?LG>Ky0jK1ǝ4.:vX%$%;v0#+×/XR]WIBsZ'fީgU']_4/WO?%f% hFRK2by^!-Z5g)O'dÔ,V֔,x,N#)יִ ub\ wg[N#33d4! XAC.JA@Bdֺ}%~{p6QG"|ZRjXPJk-}Unw"X䷔ݾ*dR1bc7t%AF\#$ǟ90HK(2.kN1y)nt[ V)jgJKCJ"Z&fdœӜSsL.Z{/nBdǤ AkuΈyhʧ*,+_Rk ΐD^ߏCLɖ^x5ec̊/VE7ܚu d}ܩb A8(U5t1r ^w ձ[=#yL>g9x2;;ʻQoߤC(ە~vhC)A$lh:ZFOV+M(ϖJR_!00FOp\DBO0u'~ Η1*$> c啹 rwRYc[{r5Trkm!,D L%.ه5VS=ʅ:4*=۬+J,I XH^{͑N#Rq{{Q@*b!7ELT&'Ak2N`7Z=;f{kHm*qR2[FyPR1pаM?;5}?X+83wWD&$@?J=_BM R~az}KeRc&8ji_LjnM>cNa z?MXV=܆U2?H4< LK]=eg@tzX@rꐙ>W ~ҎL[eQnXǬˈfjTZÙbBnAYRƦ)SLj{xq\Y3<[MG8ܾ sp Qcm o7(ϋd6~)ZEzlvH%b{!w9HC8 кor|mxr/#],wYԍadzf;*WC|Кt{u7%it}Z[p`td{Iu"Ben,,1O<H%t OiFnKA%/25±(uV0*.D!Pw Lbo"*ůot<cGˑ*r[XM~CqAnTtca!ƒw!'L{ R6W Zfr='u~B{OI:/)O 踖NF3\vǧbtbrc\8-V`Lre0UV, P$sR3T4 %LgY[Gj/+0FG 5hUc.b zG9ه}zmJ]?wo<,3(N&6h|c\'izUQgUAuӮPM%`~K$Q"=\F0 V nC&zpT;-J*Ilיo u6(VL>ͿP9`zT)2qM^.2'Tө" s,lEQ5SJ %j8{&R.埁(d݃xgSeF_K݀Fm|~(دi}cʄ}H6 4E&Q_{"j`hfY`YAE5Y4͓ `0uEۄygaxym2 2cl31$`it|E|nMΰ]XU,Y=qݥG=z䈎%=;eec K*'xOyy.A}a4]ltHvr2r\w Ga jDt+B凜5ODi7. &l[TvD[va0?uػ #&U†V_Zp +$0vS{i~11a2DS5!ՠ%Bxg珋r}0k2ĎT\r %KQkK ;T(EFa`˖dЯ GGL6FGhg-h[K0FS,~M2XTu#+' `Wzzz˫|5C)oh7}L2t;ykVRGCxE|1hYJ9$Q {-_ڠoqWLt^l.@h]bE&}CV;쉣1O2n8K?;*nK %RarI(-:.o~0fB=|}|$^[O,bٞu)0\%3]얚%!q puܗkv$\B)ݘ|~PNA!ert[.usX7(>Vf]ϦI~)TmSF0U[ž:<]0̴XgM #୫LOD/,-  I# B^[%zԂbw)BAǦo>қ>"kZE:1f \ub,Vj>o P$7JzbCf+\SZ wlVK,v+~Uʟ2eVfp{U+?SM~2:0lj}AQ{+H LGGVZ=^%q\n~C!vq>ܻ6?]30W>^fPIp7OPFahw<,h'A6Xqp񍻊$K!GHX74*:;;'+8~tJ" w Juڣ#td2=0/Vb fa*؈4 s<",W[, a߂rb[I9 TlNC]g QD7g-=Ar0u3top˂A<pC,V,rPPL7QS\ J70ׄ#6.( V^ 0@!VYU"%&<켍 .h@|00+wб &s>]tlqݑs߈aC$, "fEީwRۦWA$^ ~>h = U +j'Z-_1Z>BYL\?-J1,mo*eUN,Leڎ ,PBcZ(>bH&]h-*)WSMvcץcUqAmZv^XKmqeȩytH#CCv~Nq4?|<'|N*L|-ӆe&p6R˳qK/GknyWa*.WÛDHnKgKrc-z{ B4e}P_ 8kTyYX 9| )`#6ѸCT sãFot-ңDihR*lL(c>D֞u vC-;wlzjx0R N"`_I%|`=u3HNv[ X+PbOQd*Q"K=C*{cCDl:>cMh)1rr҃ !'@HlQLKzd: .H;4}S#{v"X]#<Oj/Ϊ")B1_2 }(OXuCɛGu0-P#7E&QO1)ͩTC0lԃo:0BtlR>q;u.*Zkt?躞1M; !Bfl󑐕]vC&o-6a!FH H  ,ib9<sGjnW(eaفXmGT* /Kmrnb9"pKPlrr>3 `9q%[ ј^r*K\ 틶gU7cFq%A0{)Ÿh::D9 'h_feA*gdiWG)LQӖM:JK^#5ж=|ymxLWaJVTNyRJ&["փ .b@AbvMIvȥ1'a0|7k%h#[sP%'`(Y#v.-{ǒ ъ%uځyUg3c1VKT:4+=| >8LG,t1"CQ\xnaƳfk:%w]qcA|Z u퍄R)dlO)GDei-4"5EoT[Ϋ>T%AAFYv !F?P G9@卸 ey2Yn/{gh+U@HeV]hG?^0݊'҅1٧J{sxǼfqdgvh^/F]y/RٳTiWԦ#$۠)L ^ âe.¤qtމ=kQظkY+A髯b:8j"LO ~UΔZxPZϤe(­E@3r[FEœBx"!h->YB4~k;DN2lMӺ$`iS3aà7|V: <颼,SǶO xwq3VWH߅_Z#uYE@%8 ` [&:D/P sDވd{>S)lsg7AJbmPIˑb9yze/6Fk*aA|jq<=Z7v7'y~D,:@͍ Qzk 2E-ӎr+$5$ȫ& S\(w-`c>fK巰#lF ofU@l5-N ]I]`T I`qXbղT C `Q+؋Y/Jn {& Kb,~v9%c*G׏*$pz~u|nVnES0uAdHO$tiRx3, rAGTWar Mi)(V֞ĕ.hP+ 3uTf 8dc3")/YߤdKSjUI(RWV?XnL"8I)}KSf$iDx'z8#&!!{X+=ǯ qJikcCR=*Č{QujyX\ZP9,ӭ,mn0>\N]$ y+LM$ʨ.9DmnI9aU^ltw`S哼F43A r־DS眦)9QbSv"#~'-%~u$wjK/Te9ufI\jeWi N sxbN@=Ǫ5#| )ou,wHi8D4\ɩjHOzSe1I E|L֠硌t?ֈO[|!^N$19c2XP~K;@M03B HlcX9pF{ lscL8o~cFʕQ.OK3 w)q.6sqYYωϐ]^,6" F$E"8~Yv=T'$Q[1++?X{T<H~u9\+4DveJ+=a>zWv:_T!ǍZ܎R3?trbb͓)N 1]]{ h=˔MRu{yY7FqT1oeiw VPnj4QB(;o1~!c[Yq9 1`?sDQ 8fPu$Bl09o)/&WkPz:>T{v2SքzHlH DjSڔՍHb8ĥ ijbK"#*{aIB.0A2ߒ,FNOQx#WZ>? m' 3|2#H>!̸W>RPU%cًt_Х 6_l+Â55mYy Z 4D aNj*WGEyhAr9i8?!Ȝ<-w$PN;!t jc[)"_f/跳"NI]7i3)I[P. =q0XҶj_ GzJl`Y$\xMV@Gz\&|'1ՊeJ\n̜B{z5OUJB$)׬"#=IAūG{HHGUzmKpڰ{A\FtqnH mVFv-ޮɧMNf=>3,jbl7a03W2Ew%s3a!/jU|Dihz1 :sq9 S[3nزr/<"N.Sۻ Jͽ"6U2~ #-K:A,A`BSyZ,cVpJ+qAVFFxb!5RF`̫C m bO>o,o~";} D_G9<1o TjxJKg#b>mJF-D1mQ_qujdLtƤ1q0R 5.l\my|%@a[:7ΑiA|e_ISK=~ hwLiPkl-a WX|gcv2kϝ;,kOŠ9*}Ps#2RF'[F;S],[es$B[3Ss9 ۩Z:Dðc׏jzsROpUSfa閅 ^7 GbPwJ?d#TؖҋVh>ѫ9j5NP*HzM8񫣛GiUqRU0hH~TCN&igpA57%.τ~\J>3"-d+ǘ`Z_:-С״\Y0n㘸&~5MW$a6V\jFt$^&sO٣ k=omťJ#'`8'P ޞ1f3FEP.c<hS(p ^^V)h^+JKb.vBMK $Z2*\+qDiDjRtrzS6\'GPR}r m4(X,,1J|$3d.$`\E`+d(r2aƆ]Gk j֓3DW?;9ޖI}fUyXJ0BX FNv+*TWb.#TWi4Yڳ%1n~bjT@$i,:>1}OZ~6MȩL"|ę+ D$t" YœgoАJ>n,y>%= >u U5J7+_UNsQ 1|QQƞ* .:{R-*^8ۚg NQ kǰ&3 ߧ&mkN sb^Z0# '֣Ө]Tcx[(O$'RQAks 7)I^%E"~x=f=lg px|<7|P7M= {>:~7hŵ0*VMub4rE|.}Luba "`I'm<ؽ/f Cj.J$b>AϪ_Gb-5pTJ S`WU̳9GG9+a;'$О%!ZQ8ښ*+%PQ\E+43і~F&>h빯>3, d"k6MP{ʄz }yn0~ bx)QڊmqʋhT@yan[ZؿӹKSTv<{҃rM9l7ZO)U^+˭?^l 'tn@pZ{R v_6Hz , ߧ Lv YZ