systemd-standalone-tmpfiles-252-46.el9_5.3> M Mv ĉJ4!!%joLne)Ip-Bm5 ']ghreleng@rockylinux.org p-Bm5 ']LtX`ָ^{9.аH3!^?@ ߡRy@l1(u${!/38#MIvWw u7.LW·$c= 1 " /~#~TU½6ZDS7.!4`1e [(Qb`b8}ORlΈK\>3Bm&Pet۫}[ce_5&5qL5Q?zZyN0McY.l5g8,[`뮓 l=өaOACSܿr/s+^i5ӷ>00(k^$^ ˷KX_Yw˽)I>Ełx'|/:a Tδ>=W_NahQK${ [Xwp?D͕a?&GH|OIHJ7{sRiΐ_SGM}|gx940674ab116b6bb5c89f3885caff430de06d9d49a6d3083f49527b8721d95542c40ea4bece14e411aefa13903e67e511f6c0907f3*uq Uqy>=?}d" - g@Dx| &,4D L T d  4D%%%(W8`$9$:7$GHIXY\](^mbd+e0f5l8tPu`vpwHxXyh!8<Csystemd-standalone-tmpfiles25246.el9_5.3Standalone tmpfiles binary for use in non-systemd systemsStandalone tmpfiles binary with no dependencies on the systemd-shared library or other libraries from systemd-libs. This package conflicts with the main systemd package and is meant for use in non-systemd systems.gfgpb-6d602e8d-2d42-485b-80a9-a52f2687e8ae-b-x86-64Rocky Linux 9.5Rocky Enterprise Software FoundationLGPLv2+ and MIT and GPLv2+Rocky Linux Build System (Peridot) Unspecifiedhttps://systemd.iolinuxx86_64/AAggOggUggUggU9016340e1d1b613d620987a139bfddb0e0e64a3757798397a2b84ef1a83d9b64../../../../usr/bin/systemd-tmpfiles.standalonerootrootrootrootrootrootrootrootsystemd-252-46.el9_5.3.src.rpmsystemd-standalone-tmpfilessystemd-standalone-tmpfiles(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    @ld-linux-x86-64.so.2()(64bit)ld-linux-x86-64.so.2(GLIBC_2.3)(64bit)libacl.so.1()(64bit)libacl.so.1(ACL_1.0)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.16)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.25)(64bit)libc.so.6(GLIBC_2.26)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.30)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.5)(64bit)libc.so.6(GLIBC_2.6)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libc.so.6(GLIBC_2.9)(64bit)libcap.so.2()(64bit)libcrypto.so.3()(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsZstd)rtld(GNU_HASH)3.0.4-14.6.0-14.0-15.4.18-14.16.1.3g`@g@f4f@fѴ@f@f(@f(@f3ffaf@fr@fj@fM@fK;@f+@e,e8@e@e}@eԔ@ee6@eee)eeves@eRd@d@d-@df@d@Release Engineering - 252-46systemd maintenance team - 252-46.3systemd maintenance team - 252-46.2systemd maintenance team - 252-46.1systemd maintenance team - 252-46systemd team - 252-45systemd maintenance team - 252-44systemd maintenance team - 252-43systemd team systemd maintenance team - 252-41systemd maintenance team - 252-40systemd maintenance team - 252-39systemd maintenance team - 252-38systemd maintenance team - 252-37Jan Macku - 252-35systemd maintenance team - 252-34systemd maintenance team - 252-33Jan Macku - 252-32systemd maintenance team - 252-31systemd maintenance team - 252-30systemd maintenance team - 252-29systemd maintenance team - 252-28systemd maintenance team - 252-27systemd maintenance team - 252-26systemd maintenance team - 252-25systemd maintenance team - 252-24systemd maintenance team - 252-23systemd maintenance team - 252-22systemd maintenance team - 252-21systemd maintenance team - 252-20systemd maintenance team - 252-19systemd maintenance team - 252-18systemd maintenance team - 252-17systemd maintenance team - 252-16systemd maintenance team - 252-15systemd maintenance team - 252-14- Set support URL to the wiki - Set sbat mail to security@rockylinux.org- get rid of SELinux policy module (RHEL-76033)- add %posttrans scriptlet to make sure our SELinux policy module is actually installed (RHEL-46339)- version bump (RHEL-56019)- ukify: Skip test on architectures without UEFI (RHEL-56019)- build ukify without noarch- Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103) - fundamental: share constants for confidential virt detection (RHEL-50651) - efi: add helper API for detecting confidential virtualization (RHEL-50651) - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651) - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)- udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103) - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103) - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103) - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103) - Include if possible to get thread_local definition (RHEL-50651) - add APIs for detecting confidential virtualization (RHEL-50651) - detect-virt: add --cvm option (RHEL-50651) - detect-virt: add --list-cvm option (RHEL-50651) - unit: add "cvm" option for ConditionSecurity (RHEL-50651) - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651) - core: log detected confidential virtualization type (RHEL-50651) - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651) - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651) - confidential-virt: split caching of CVM detection into separate method (RHEL-50651) - confidential-virt: add detection for s390x target (RHEL-50651) - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)- fix applying patches- timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020) - cryptsetup-tokens: fix pin asserts (RHEL-36276) - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276) - kernel-install: check machine ID (RHEL-50672) - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672) - hwdb: Add Lenovo G580 (RHEL-5950) - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950) - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950) - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950) - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950) - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950) - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950) - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950) - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950) - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950) - Update 60-evdev.hwdb (#25704) (RHEL-5950) - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950) - hwdb: drop trailing space (RHEL-5950) - hwdb: add comments about matching entries (RHEL-5950) - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950) - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950) - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950) - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950) - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950) - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950) - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950) - hwdb: remove spurious whitespace (RHEL-5950) - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950) - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: Add mount matrix for Linx 1020 (RHEL-5950) - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950) - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950) - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update autosuspend db (RHEL-5950) - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950) - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950) - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950) - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950) - hwdb: add override for IdeaPad5 insert key (RHEL-5950) - hwdb: update database (RHEL-5950) - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950) - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950) - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950) - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950) - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950) - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950) - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950) - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950) - hwdb: drop redundant entry (RHEL-5950) - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950) - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950) - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950) - hwdb: Add support for "Passion Model P612F" (RHEL-5950) - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950) - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950) - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950) - hwdb: Fix rotation for BMAX Y13 (RHEL-5950) - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950) - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950) - hwdb: do not include '#' in modalias (RHEL-5950) - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950) - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950) - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950) - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950) - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950) - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950) - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950) - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950) - hwdb: Add override for headset form-factors (RHEL-5950) - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950) - hwdb: drop trailing white space (RHEL-5950) - hwdb: merge multiple keyboard entries with same setting (RHEL-5950) - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950) - hwdb update for v246-rc1 (RHEL-5950) - update hwdb autosuspend data for v254 (RHEL-5950) - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950) - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950) - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950) - Add alternate name for MX Ergo as found on some devices (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: run update-hwdb (RHEL-5950) - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950) - Update 60-sensor.hwdb (#28804) (RHEL-5950) - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950) - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950) - hwdb: keyboard: D330 FnLk toggle (RHEL-5950) - hwdb: Add Logitech G502 X (RHEL-5950) - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950) - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950) - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950) - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950) - hwdb: Bush tablet rotation support (#29268) (RHEL-5950) - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950) - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950) - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950) - add udev rule for micmute (f20) (RHEL-5950) - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950) - Update hwdb (RHEL-5950) - Update hwdb autosuspend rules (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950) - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: rename .html=>.csv (RHEL-5950) - hwdb/acpi-update.py: streamline python code (RHEL-5950) - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950) - hwdb: add Predator PHN16-71 (RHEL-5950) - Update 60-autosuspend.hwdb (#30131) (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950) - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950) - hwdb: update (RHEL-5950) - hwdb: update (RHEL-5950) - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950) - Add three Dell platforms to sensor accel location base (RHEL-5950) - Add Bosto BT-12HD series to hwdb (RHEL-5950) - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950) - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950) - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950) - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950) - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950) - hwdb: add resolution setting for GAOMON S620 (RHEL-5950) - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950) - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950) - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950) - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950) - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950) - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950) - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950) - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950) - Update USB ids of hwdb (RHEL-5950) - Added resolution for Huion Kamvas Pro 19 (RHEL-5950) - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950) - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950) - Fixed resolution for pen and touchpad (RHEL-5950) - hwdb: fix missing colon (#32108) (RHEL-5950) - hwdb: update for v256 (RHEL-5950) - autosuspend: update for v256 (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950) - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950) - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950) - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950) - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950) - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950) - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950) - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950) - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950) - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950) - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950) - Update hwdb (RHEL-5950) - Update autosuspend hwdb (RHEL-5950) - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950) - hwdb: add a vmbus id for HyperV Video device (RHEL-5950) - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950) - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950) - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950) - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950) - Update hwdb (RHEL-5950) - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950) - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950) - Add OrangePi NEO Scancodes (RHEL-5950) - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950) - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950) - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950) - hwdb: Add some HP IR cameras (RHEL-5950) - hwdb: add more AV controllers (RHEL-5950) - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950) - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950) - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950) - Update 60-sensor.hwdb (RHEL-5950) - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950) - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950) - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950) - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950) - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950) - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950) - add udev rules for trezor hw wallet devices (RHEL-5950) - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950) - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950) - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)- add Requires(post) on selinux-policy (RHEL-46339)- enable FIDO2 support (RHEL-36276) - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630) - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630) - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436) - ci: add support for rhel-only parameters (RHEL-30372)- tools: fix the file name that "meson setup" generates (RHEL-30372) - tools: explicitly specify "setup" subcommand (RHEL-30372) - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372) - fuzz: don't panic without a C++ compiler (RHEL-30372) - meson: use ternary op for brevity (RHEL-30372)- ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372) - libsystemd: link with '-z nodelete' (RHEL-6589) - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219) - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219) - string-util: pass ANSI sequences through unchanged (RHEL-31219) - cryptsetup: do not assert when unsealing token without salt (RHEL-38864) - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864) - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159) - Drop log level of header limits log message (RHEL-33890) - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890) - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070) - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070) - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070) - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070) - man: document that journalctl --user requires Storage=persistent (RHEL-31070) - fix: prefix of dmesg pstore files (RHEL-20322) - backport new mkosi (RHEL-27512) - test: Skip various tests when /sys is not mounted (RHEL-27512) - string-util: introduce ascii_ishex() (RHEL-27512) - sd-id128: several cleanups (RHEL-27512) - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512) - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512) - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512) - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512) - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512) - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512) - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512) - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512) - sd-id128: also refuse an empty invocation ID (RHEL-27512) - man: update documents for sd_id128_get_invocation() (RHEL-27512) - test-id128: simplify machine-id check (RHEL-27512) - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512) - test-unit-name: simplify machine-id check (RHEL-27512) - test-load-fragment: simplify machine-id check (RHEL-27512) - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512) - test: skip journal tests without valid /etc/machine-id (RHEL-27512) - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512) - test: Skip test-recurse-dir on overlayfs (RHEL-27512) - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512) - test-execute: Skip when /sys is read-only (RHEL-27512) - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512) - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512) - test-execute: drop capabilities when testing with user manager (RHEL-27512) - tmpfiles: Add merge support for copy files action (RHEL-27512) - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512) - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512) - ci: drop super-linter's shellcheck (RHEL-27512) - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512) - ci: backport mkosi CI configuration from upstream (RHEL-27512) - mkosi: explicitly enroll SecureBoot keys (RHEL-27512) - test-execute: also mount tmpfs on /dev/shm (RHEL-27512) - mkosi: fix UKI addons test (RHEL-27512) - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512) - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512) - mkosi: make shellcheck happy (RHEL-27512) - mkosi: use pesign for signing UKI addons (RHEL-27512) - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512) - ci: make the build dir accessible when running w/o privileges (RHEL-27512) - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512) - ratelimit: add ratelimit_left helper (RHEL-35703) - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703) - ci: define `runas` function inline (RHEL-35703) - Drop /dev test in test-mountpoint-util (RHEL-30372) - core/manager: export manager_dbus_is_running (RHEL-40878) - core: refuse dbus activation if dbus is not running (RHEL-40878) - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878) - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878) - manager: fix reloading in reload-or-restart --marked (RHEL-40878) - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878) - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)- spec: return selinux dependencies (RHEL-35732)- ci: update actions/upload-artifact to v4 (RHEL-30372) - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372) - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372) - shared|install: Use InstallChangeType consistently (RHEL-30372) - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372) - ci: update manpage deployment workflow (RHEL-30372) - bootspec: fix null-dereference-read (RHEL-36284) - units: don't install pcrphase-related units without gnu-efi (RHEL-33384) - kernel-install: fix uki-copy deinstall (RHEL-36505) - ci(packit): explicitly clone `c9s` branch (RHEL-30372)- execute: Pass AT_FDCWD instead of -1 (RHEL-31783) - ci(src-git): update list of supported products (RHEL-30372) - coredump: by default process and store core files up to 1GiB (RHEL-15501) - coredump: keep core files for two weeks (RHEL-15501) - ukify: make the test happy with the latest OpenSSL (RHEL-30372) - test_ukify: use raw string for the regex (RHEL-30372) - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430) - test: add a couple of tests for systemd-coredump (RHEL-29430) - test: don't expand the subshell expression prematurely (RHEL-29430) - coredump filter: fix stack overflow with =all (RHEL-29430) - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430) - test: add coverage for CoredumpFilter=all (RHEL-29430) - test: rotate journal before storing coredumps (RHEL-29430) - test: sync with the fake binary before killing it (RHEL-29430) - test: check coredump handling in containers & namespaces (RHEL-29430)- rebase rhel-net-naming-sysattrs to v0.5- bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952) - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952) - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952) - sha256: add helper than hashes a buffer *and* its size (RHEL-16952) - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952) - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952) - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952) - bootctl: split out setting of system token into function of its own (RHEL-16952)- resolved: limit the number of signature validations in a transaction (RHEL-26643) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643) - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133) - units: change assert to condition to skip running in initrd/os (RHEL-16182) - ci: add configuration for regression sniffer GA (RHEL-1086)- units: fix typo in Condition in systemd-boot-system-token (RHEL-16952)- random-seed: shorten a bit may_credit() (RHEL-16952) - random-seed: make one more use of random_write_entropy() (RHEL-16952) - random-seed: use getopt() (RHEL-16952) - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952) - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952) - random-seed: split out run() (RHEL-16952) - random_seed: minor improvement in run() (RHEL-16952) - random-seed: downgrade some messages (RHEL-16952) - random-seed: clarify one comment (RHEL-16952) - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952) - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952) - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952) - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952) - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952) - random-seed: handle post-merge review nits (RHEL-16952) - boot: do not truncate random seed file (RHEL-16952) - bootctl: install system token on virtualized systems (RHEL-16952) - boot: remove random-seed-mode (RHEL-16952) - stub: handle random seed like sd-boot does (RHEL-16952) - efi: add efi_guid_equal() helper (RHEL-16952) - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952) - boot: Detect hypervisors using SMBIOS info (RHEL-16952) - boot: Skip soft-brick warning when in a VM (RHEL-16952) - boot: Replace UINTN with size_t (RHEL-16952) - boot: Use unsigned for beep counting (RHEL-16952) - boot: Use unicode literals (RHEL-16952) - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952) - meson: use 0|1 for SD_BOOT (RHEL-16952) - boot: Add printf functions (RHEL-16952) - boot: Use printf for error logging (RHEL-16952) - boot: Introduce log_wait (RHEL-16952) - boot: Add log_trace debugging helper (RHEL-16952) - tree-wide: Use __func__ in asserts (RHEL-16952) - boot: Drop use of xpool_print/SPrint (RHEL-16952) - boot: Drop use of Print (RHEL-16952) - boot: Rework GUID handling (RHEL-16952) - efi-string: Fix strchr() null byte handling (RHEL-16952) - efi-string: Add startswith8() (RHEL-16952) - efi-string: Add efi_memchr() (RHEL-16952) - vmm: Add more const (RHEL-16952) - vmm: Add smbios_find_oem_string() (RHEL-16952) - stub: Read extra kernel command line items from SMBIOS (RHEL-16952) - vmm: Modernize get_smbios_table() (RHEL-16952) - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952) - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952) - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952) - ukify: use empty stub for addons (RHEL-16952) - stub: allow loading and verifying cmdline addons (RHEL-16952) - TODO: remove fixed item (RHEL-16952) - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)- test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086) - test: use the default nsec3-iterations value (RHEL-1086) - test: explicitly set nsec3-iterations to 0 (RHEL-1086) - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483) - ci: deploy systemd man to GitHub Pages (RHEL-1086) - doc: add missing `` to `systemd.net-naming-scheme.xml` (RHEL-7026) - man: reorder the list of supported naming schemes (RHEL-7026) - tree-wide: fix return value handling of base64mem() (RHEL-16182) - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182) - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182) - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182) - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182) - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182) - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182) - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182) - man: document the new crypttab measurement options (RHEL-16182) - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182) - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182) - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182) - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182) - generators: optionally, measure file systems at boot (RHEL-16182) - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182) - man: document new machine-id/fs measurement options (RHEL-16182) - test: add simple integration test for checking PCR extension works as it should (RHEL-16182) - update TODO (RHEL-16182) - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182) - boot: Simplify object erasure (RHEL-16182) - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182) - dlfcn: add new safe_dclose() helper (RHEL-16182) - tpm2: rename tpm2 alg id<->string functions (RHEL-16182) - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182) - tpm2: use ref counter for Tpm2Context (RHEL-16182) - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182) - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182) - tpm2: simplify tpm2_seal() blob creation (RHEL-16182) - tpm2: add salt to pin (RHEL-16182) - basic/macro: add macro to iterate variadic args (RHEL-16182) - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182) - basic/bitfield: add bitfield operations (RHEL-16182) - test/test-bitfield: add tests for bitfield macros (RHEL-16182) - tpm2: add tpm2_get_policy_digest() (RHEL-16182) - tpm2: add TPM2_PCR_VALID() (RHEL-16182) - tpm2: add/rename functions to manage pcr selections (RHEL-16182) - test/test-tpm2: add tests for pcr selection functions (RHEL-16182) - tpm2: add tpm2_pcr_read() (RHEL-16182) - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182) - tpm2: add tpm2_is_encryption_session() (RHEL-16182) - tpm2: move policy building out of policy session creation (RHEL-16182) - tpm2: add support for a trusted SRK (RHEL-16182) - tpm2: fix nits from PR #26185 (RHEL-16182) - tpm2: replace magic number (RHEL-16182) - tpm2: add tpm2_digest_*() functions (RHEL-16182) - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182) - tpm2: add tpm2_set_auth() (RHEL-16182) - tpm2: add tpm2_get_name() (RHEL-16182) - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182) - tpm2: add tpm2_policy_pcr() (RHEL-16182) - tpm2: add tpm2_policy_auth_value() (RHEL-16182) - tpm2: add tpm2_policy_authorize() (RHEL-16182) - tpm2: use tpm2_policy_authorize() (RHEL-16182) - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182) - tpm: remove external calls to dlopen_tpm2() (RHEL-16182) - tpm2: remove all extern tpm2-tss symbols (RHEL-16182) - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182) - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182) - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182) - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182) - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182) - tpm2: add tpm2_read_public() (RHEL-16182) - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182) - tpm2: add tpm2_load() (RHEL-16182) - tpm2: add tpm2_load_external() (RHEL-16182) - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182) - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182) - tpm2: add tpm2_create() (RHEL-16182) - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182) - basic/alloc-util: add greedy_realloc_append() (RHEL-16182) - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182) - tpm2: cache TPM algorithms (RHEL-16182) - tpm2: add tpm2_persist_handle() (RHEL-16182) - tpm2: add tpm2_get_or_create_srk() (RHEL-16182) - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182) - tpm2: remove tpm2_make_primary() (RHEL-16182) - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182) - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182) - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182) - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182) - added more test cases (RHEL-16182) - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182) - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182) - cryptenroll: fix an assertion with weak passwords (RHEL-16182) - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182) - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182) - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182) - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182) - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182) - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182) - tpm2: move declared functions in header lower down (RHEL-16182) - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182) - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182) - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182) - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182) - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182) - openssl: add openssl_pkey_from_pem() (RHEL-16182) - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182) - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182) - test: add DEFINE_HEX_PTR() helper function (RHEL-16182) - openssl: add test-openssl (RHEL-16182) - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182) - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182) - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182) - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182) - tpm2: change *alg_to_* functions to use switch() (RHEL-16182) - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182) - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182) - tpm2: in validator functions, return false instead of assert failure (RHEL-16182) - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182) - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182) - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182) - tpm2: simplify call to asprintf() (RHEL-16182) - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182) - tpm2: use strempty() (RHEL-16182) - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182) - tpm2: remove ret_ prefix from input/output params (RHEL-16182) - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182) - openssl: use new(char, size) instead of malloc(size) (RHEL-16182) - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182) - tpm2: use switch() instead of if-else (RHEL-16182) - tpm2: make logging level consistent at debug for some functions (RHEL-16182) - tpm2: remove unnecessary void* cast (RHEL-16182) - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182) - tpm2: wrap (7) in UINT32_C() (RHEL-16182) - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182) - openssl: add log_openssl_errors() (RHEL-16182) - openssl: add openssl_digest_size() (RHEL-16182) - openssl: add openssl_digest_many() (RHEL-16182) - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182) - openssl: add openssl_hmac_many() (RHEL-16182) - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182) - openssl: add kdf_kb_hmac_derive() (RHEL-16182) - openssl: add openssl_cipher_many() (RHEL-16182) - openssl: add ecc_edch() (RHEL-16182) - openssl: add kdf_ss_derive() (RHEL-16182) - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182) - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182) - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182) - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182) - tpm2: fix build failure without openssl (RHEL-16182) - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182) - tpm2: downgrade most log functions from error to debug (RHEL-16182) - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182) - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182) - tpm2: update tpm2 test for supported commands (RHEL-16182) - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182) - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182) - tpm2: cache TPM's supported ECC curves (RHEL-16182) - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182) - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182) - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182) - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182) - tpm2: do not call Esys_TR_Close() (RHEL-16182) - tpm2: don't use GetCapability() to check transient handles (RHEL-16182) - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182) - tpm2: add tpm2_get_pin_auth() (RHEL-16182) - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182) - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182) - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182) - cryptenroll: drop deadcode (RHEL-16182) - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182) - tpm2: add test to verify srk templates (RHEL-16182) - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182) - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182) - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182) - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182) - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182) - openssl-util: avoid freeing invalid pointer (RHEL-16182) - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182) - creds-util: do not try TPM2 if there is not support (RHEL-16182) - creds-util: merge the TPM2 detection for initrd (RHEL-16182) - cryptenroll: fix a memory leak (RHEL-16182) - sd-journal: introduce sd_journal_step_one() (RHEL-11591) - test: modernize test-journal-flush (RHEL-11591) - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591) - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591) - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)- spec: update rhel-net-naming-sysattrs to v0.4 (RHEL-22278)- spec: add new package with RHEL-specific network naming sysattrs (RHEL-22278)- ci: use source-git-automation composite Action (RHEL-1086) - ci: increase the cron interval to 45 minutes (RHEL-1086) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086) - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427) - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443) - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443) - udev: add new builtin net_driver (RHEL-22443) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)- logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757) - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757) - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757) - meson: Properly install 90-uki-copy.install (RHEL-16354)- Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436) - man: mention RHEL documentation in systemctl's man page (RHEL-19436) - resolved: actually check authenticated flag of SOA transaction (RHEL-6216) - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317) - man: environment value -> udev property (RHEL-1317)- meson: fix installation of ukify (RHEL-13199) - sd-id128: introduce id128_hash_ops_free (RHEL-5988) - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988) - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988) - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988) - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988) - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090) - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090) - manager: add one more assert() (RHEL-6090) - pid1: add new Type=notify-reload service type (RHEL-6090) - man: document Type=notify-reload (RHEL-6090) - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090) - networkd: implement Type=notify-reload protocol (RHEL-6090) - udevd: implement the full Type=notify-reload protocol (RHEL-6090) - logind: implement Type=notify-reload protocol properly (RHEL-6090) - notify: add --stopping + --reloading switches (RHEL-6090) - test: add Type=notify-reload testcase (RHEL-6090) - update TODO (RHEL-6090) - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)- udev/net: allow new link name as an altname before renaming happens (RHEL-5988) - sd-netlink: do not swap old name and alternative name (RHEL-5988) - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988) - udev: attempt device rename even if interface is up (RHEL-5988) - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988) - test-network: add a test for renaming device to current altname (RHEL-5988) - udev: align table (RHEL-5988) - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988) - sd-device: do not directly access entry in sd-device object (RHEL-5988) - udev: move device_rename() from device-private.c (RHEL-5988) - udev: restore syspath and properties on failure (RHEL-5988) - sd-device: introduce device_get_property_int() (RHEL-5988) - core/device: downgrade log level for ignored errors (RHEL-5988) - core/device: ignore failed uevents (RHEL-5988) - test: add tests for failure in renaming network interface (RHEL-5988) - test: modernize test-netlink.c (RHEL-5988) - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988) - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988) - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988) - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988) - udev/net: generate new network interface name only on add uevent (RHEL-5988) - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988) - udev/net: assign alternative names only on add uevent (RHEL-5988) - test: add tests for renaming network interface (RHEL-5988) - Backport ukify from upstream (RHEL-13199) - bootctl: make --json output normal json (RHEL-13199) - test: replace readfp() with read_file() (RHEL-13199) - stub/measure: document and measure .uname UKI section (RHEL-13199) - boot: measure .sbat section (RHEL-13199) - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199) - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199) - kernel-install: Add uki layout (RHEL-16354) - kernel-install: remove math slang from man page (RHEL-16354) - kernel-install: handle uki installs automatically (RHEL-16354) - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354) - kernel-install: Log location that uki is installed in (RHEL-16354) - bootctl: fix errno logging (RHEL-16354) - bootctl: add kernel-identity command (RHEL-16354) - bootctl: add kernel-inspect command (RHEL-16354) - bootctl: add kernel-inspect to --help text (RHEL-16354) - bootctl: drop full stop at end of --help texts (RHEL-16354) - bootctl: change section title for kernel image commands (RHEL-16354) - bootctl: remove space that should not be there (RHEL-16354) - bootctl: kernel-inspect: print os info (RHEL-16354) - bootctl-uki: several coding style fixlets (RHEL-16354) - tree-wide: unify how we pick OS pretty name to display (RHEL-16354) - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354) - bootctl: Add missing %m (RHEL-16354) - bootctl: tweak DOS header magic check (RHEL-16354)- ci: Extend source-git-automation (RHEL-1086) - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026) - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070) - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070) - systemd-analyze: Add tab complete logic for plot (RHEL-5070) - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070) - ci: enable source-git automation to validate reviews and ci results (RHEL-1086) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086) - ci: enable auto-merge GH Action (RHEL-1086) - ci: add missing permissions (RHEL-1086) - ci: `permissions: write-all` (RHEL-1086) - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086) - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)- doc: add downstream CONTRIBUTING document (#2170883) - doc: improve CONTRIBUTING document (#2170883) - doc: use link with prefilled Jira issue (#2170883) - docs: link downstream CONTRIBUTING in README (#2170883) - bpf: fix restrict_fs on s390x (#2230364) - udev/net_id: use naming scheme for RHEL-9.3 (#2231845) - core/timer: Always use inactive_exit_timestamp if it is set (#2211065) - timer: Use dual_timestamp_is_set() in one more place (#2211065) - loginctl: list-users: also show state (#2209912) - loginctl: list-sessions: minor modernization (#2209912) - loginctl: list-sessions: also show state (#2209912) - test: add test for state in loginctl list-{users,sessions} (#2209912) - test: add a missing session activation (#2209912) - test: extend test for loginctl list-* (#2209912) - loginctl: shorten variable name (#2209912) - loginctl: use bus_map_all_properties (#2209912) - loginctl: show session idle status in list-sessions (#2209912) - loginctl: some modernizations (#2209912) - loginctl: list-sessions: fix timestamp for idle hint (#2209912) - loginctl: list-users: use bus_map_all_properties (#2209912) - loginctl: also show idle hint in session-status (#2209912) - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226) - static-destruct: several cleanups (#2190226) - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226) - macro: support the case that the number of elements has const qualifier (#2190226) - shared/generator: apply similar config reordering of generated units (#2190226) - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226) - generator: teach generator_add_symlink() to instantiate specified unit (#2190226) - units: rework growfs units to be just a regular unit that is instantiated (#2190226) - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226) - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226) - test: add fstab file support for fstab-generator tests (#2190226) - test-fstab-generator: also check file contents (#2190226) - test-fstab-generator: add tests for mount options (#2190226) - fstab-generator: split out several functions from parse_fstab() (#2190226) - fstab-generator: call add_swap() earlier (#2190226) - fstab-generator: refuse to add swap earlier if disabled (#2190226) - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226) - fstab-generator: fix error code propagation in run_generator() (#2190226) - fstab-generator: support defining mount units through kernel command line (#2190226) - test: add test cases for defining mount and swap units from kernel cmdline (#2190226) - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226) - fstab-generator: use correct swap name var (#2190226) - fstab-generator: add more parameter name comments (#2190226) - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226) - fstab-util: add fstab_is_bind (#2190226) - fstab-generator: resolve bind mount source when in initrd (#2190226) - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226) - fstab-generator: fix target of /sysroot/usr (#2190226) - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226) - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226) - test-fstab-generator: extract core part as a function (#2190226) - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226) - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226) - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226) - core: use correct scope of looking up units (#2226980) - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521) - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521) - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521) - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521) - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521) - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521) - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521) - test: move TEST-23's units into a dedicated subfolder (#2213521) - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521) - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521) - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521) - test: abstract the common test parts into a utility script (#2213521) - test: add tests for JoinsNamespaceOf= (#2213521) - core/unit: drop doubled empty line (#2213521) - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521) - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521) - core/unit: update bidirectional dependency simultaneously (#2213521) - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260) - resolved: add some line-breaks/comments (#2161260) - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260) - blockdev-util: add simple wrapper around BLKSSZGET (#2170883) - loop-util: insist on setting the sector size correctly (#2170883) - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883) - loop-util: always tell kernel explicitly about loopback sector size (#2170883) - Revert "Treat EPERM as "not available" too" (#2178222) - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)- Revert "core/service: when resetting PID also reset known flag" (#2225667 - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)- ci: update permissions for source-git automation workflows (#2170883) - pstore: fixes for dmesg.txt reconstruction (#2170883) - pstore: explicitly set the base when converting record ID (#2170883) - pstore: avoid opening the dmesg.txt file if not requested (#2170883) - test: add a couple of tests for systemd-pstore (#2170883) - test: match all messages with the FILE field (#2170883) - test: build the SELinux test module on the host (#2170883) - test: make the stress test slightly less stressful on slower machines (#2170883) - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883) - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883) - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883) - core/transaction: do not log "(null)" (#2170883) - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883) - elf-util: discard PT_LOAD segment early based on the start address. (#2215412) - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412) - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959) - journal-vacuum: count size of all journal files (#2182632) - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632) - macro: introduce FOREACH_ARRAY() macro (#2182632) - journal-vacuum: rename function to match struct name (#2182632) - journal-vacuum: use CLEANUP_ARRAY (#2182632) - pam: add call to pam_umask (#2210145) - udev-builtin-net_id: align VF representor names with VF names (#2218886) - pam: add a call to pam_namespace (#2218184) - rules: online CPU automatically on IBM s390x platforms when configured (#2212612) - core/mount: escape invalid UTF8 char in dbus reply (#2208240) - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899) - udev-rules: fix nvme symlink creation on namespace changes (#2172509) - rules: add whitespace after comma before the line continuation (#2172509) - udev: restore compat symlink for nvme devices (#2172509) - rules: drop doubled space (#2172509) - manager: don't taint the host if cgroups v1 is used (#2193456) - core/service: when resetting PID also reset known flag (#2210237) - ci: drop systemd-stable from advanced-commit-linter config (#2170883)- ci: trigger `differential-shellcheck` workflow on push (#2100440) - ci: workflow for gathering metadata for source-git automation (#2100440) - ci: first part of the source-git automation - commit linter (#2100440) - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440) - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440) - Support /etc/system-update for OSTree systems (#2203133) - journal-def: fix type of signature to match the actual field in the Header structure (#2183546) - journal: use compound initialization for journal file Header structure (#2183546) - journald: fix log message (#2183546) - sd-journal: cache results of parsing environment variables (#2183546) - compress: introduce compression_supported() helper function (#2183546) - sd-journal: always use the compression algorithm specified in the header (#2183546) - sd-journal: allow to specify compression algorithm through env (#2183546) - test: add test case that journal file is created with the requested compression algorithm (#2183546) - rules: do not online CPU automatically on IBM platforms (#2143107)- systemd: Support OOMPolicy in scope units (#2176918) - systemd: Default to OOMPolicy=continue for login session scopes (#2176918) - man: rework description of OOMPolicy= a bit (#2176918) - core,man: add missing integration of OOMPolicy= in scopes (#2176918) - meson: Store fuzz tests in structured way (#2176918) - meson: Generate fuzzer inputs with directives (#2176918) - oss-fuzz: include generated corpora in the final zip file (#2176918) - unit: In cgroupv1, gracefully terminate delegated scopes again (#2180120)252-46.el9_5.3252-46.el9_5.3systemd-tmpfiles.build-idc7e57d51f81237c417e07e6fecbad5e493c426c1/usr/bin//usr/lib//usr/lib/.build-id//usr/lib/.build-id/c7/-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protectioncpiozstd19x86_64-redhat-linux-gnuELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=c7e57d51f81237c417e07e6fecbad5e493c426c1, for GNU/Linux 3.2.0, strippeddirectory!RRRRRRR R RRRR RRRRRRR RR RRRRRRRRRRRR#utf-8026cba77f0f377f7e05e63a039b9647030d2043d37a398dce93df2bb483c6779d4eba1de125f46bf2e9229266f93ccb08d2fb3242bc8e91de2dd5b56bfffd919?0(/h$ct;@j"hqf Y?[5%F p;)E [g%ktB鶖fd5NtCOF(AmL%H.#i$4L-<RY&cf51Bl'1y4bqHuډh I/64<L"y-T(@19FgDFJS|BOaƥN/WX"oygA%p1q@u=;#ЪĵJ'Ej>\HLdwҁHQ>GXy0ҪsvJ;o|Vz};̷s7۹VW;lYUg }\:o]K]N\Sه㶧jgξۦN?~YOa.7lO~M_Gp_^ʂñ׍Eru^4OW8P 1h :A%h%TUVQH"؇OLA%W1!@2&J y72ʬQ"4Q%ʴ@P ' 6<*4Kadib G62ybqPHfDJ"6S RFHLt~!M BJ0&!gfdjF\ުiboYe߳9w װ:~a8}9WxNu~AioSm_W~Ws]t_瘾ӘٕU7US^ n>o_Zv8y9m9[ j:vXeuݚ{8o:f\nigvONf1۲p}βpOr:v_wt{|/UX_/v}ef*\ϝ}8:}woLw ;Ȁ@N/gvooͧqHoww&<}%MOG=ptkygM̓iWMʇ1y F oͽ˓Ƈ}WC뼞Kz(VkTo#i>}wu}񎄏C'Cbhb#ZɓXC:u<̍ Y3^:@Ş@5$xbXuTgmzD^K#p3y,B_h]ݧ+ŇuyAmaA^ym[G%4@xt4O YW%*p%ѷ"U( 0/I$?n]0@V&vF6f&-E 6nbMY6@`[{3,rpy=,.HD(KB*Myf!V@b$ǰ1E3U*(q< k#p@l%Ak|v1meJte\PS|X'U b{CBb9}F?[Bp@8:6]s*Lԏv2L,tbaþoS"/JFtZ|m3aF>$uh, >l6(&?|v[ߣTgԛ|+]Tk9N.-@(5F0ӂSNg*oת qge:ǔ D쒨vHgY9U=7=2N''qhBknYΆ࿙8I$i.(. l@G0yoݫCP#=pL6/]ͷiV5KX7'ģ{.qi2 H'v`oSΘ76qeM-GUIjVh2QUT5]+E/]0X8`]*ʇ!\Bt ݴ]aKԜCsߘ`,+EeӆYvP0'<ۀwJQ$a;{ 3(D]X- ϋi]"DZdvܺHҺ'r!bŮ 9Ɲ0|#mba7:gkF&[tH'_ǗIF.υy=sZLSi~}%3a#_STbI{}V%B}?Q"BQdUK^˚ *MPE"bd˱_Ӝ#x1UV$>M*|_r~Jl􆄑6WD(4!-oJ@bHm!jLFyG%oPTe7\p YY3X}3t8/M :fChBWۉ^Y=זyVUv s6[d/<<~v,S+Iε4⛊tfkEDB }Xy }~wùf^``Jiu,TFbs-Ovmu_8[pKe6@ky00V: BFW>Gۢl/&sԲˆ.Xe! ]1 $H^Kzykb!\BKaaYjz8RzԞOLXbKhh񶏅7|8Ƴpc<&c ,it"`hp +MNȟ   (08@HPX`hpx !#$%&'()*+,-./0 1(20384@5H6P7X8`9h:p;x<=>?@ABCDEFGHIJKLNOPQ R(S0T8U@VHWPXXY`Zh[p\x]^_`abcdefghijklmnopq r(s0t8u@vHwPxXy`zh{p|x}~ȇЈ؉ (08@HPX`hpxȦЧب (08@HPX`hpx°ø (08@HPX`hpx߀HHџHtH5r%sh!쳵Ke3"a='@K!/ykI=Rϼy*{u2=gq9=NGcf6r8.qa/cOeohjlnpOvxz|~a|{/{GWgw:{+ڪ**ҧ7KDq5+(J}4!ml!\@9 \}_yƿ5k;^5k;OU'a y>j==}]Arft_~Ю}j=32êU|v`fAo5#*ʫ{"k ~EI-TYgRd$DCT _m5v! _m5v! _m5v롎=Zz-_ּ<\|==*H#!=WsQ4,m Dpat."'/7?GO_qأeklm͛wR4h 2p  k\' ;D0 %|xx()B=!D[1!pO np`n井2 BxК:~.B% 1(4p4I@D B BR0"N>g 3'T3Ռ]Ae몠phWJ|cLՋ Qޯ#Dž|vQH븲D{jZ {skKQ@7.v艅Dž-q뷹8-dpټDž߈- mE>%hMDitC iZH|$HBoe 9%=N͐$q8"U2 똞/ؑ6 o@18uй[ S!v7es:^nt>"1toYLLU@HJBU߼-.t'-yK$wG]j?[N11 =*bOPnyU7 / i4!G@481cwaQX17Z?IطghRvfY;Te:NU){L,6V6) |^v]}#X?yϭI8]hav&a 13G<eMuX=x35YB28jz.{p6 d?"~=_85I%b7AtL,p'0I|qnLx N RR|d\:Ocɦ ,ۻGVf X(/%ll̤KY%pkf{C n?tobXy\/Չ +_ng<`סI _KHOIK wPa|Y+;bcr>.[[7mr#>I)ϳ=@k#}~c1o 4]z;4Y$XXx5LW+޽ Py#X i+pZgC|' 8K fQUna=Q#γ歙A֕jCD4@ fȐ#L ֠& OG濘ȩǹT=47HnƷ(> *3rWIWrOq3FaRz[ ld9G'u0N-8֡orn͸tY\.9j(Wa‘Y \-DfBV;:s ?2nEvG3p#0h""Ֆ Bxnl%qnXF&V *W8"ZSt̜;{2s6Ef4rAզ(* FT^CT$_ctc:4&H}2P4*XSd aD9<⤆x d11`}uu'ļthAE4~gCà"U-^!p;AJ[W5V7ԥ|%^gS{=>] qn+כR:s֗*J#z_Q+h<V`/?G:C .ਘP 0WV_|WsObv]!G0L./;zn=xSvƕbEC^({86'Dsa(D @00؅1׌#<;O@& @XWXW\ًJ_RN{32oB;V˟ T/_'鬂2r-d|z -7w%.swj0OTUV+O :ΥITI,P)#ܰmh[ejL9c™rtM}m"szM9G94u1mnKS1M[fV$=Uc9`)b^euro6';t>&AgFt[dz͖VTqjDN+MR'ixr*{Z4u0z4M E#K,ĩ1,RѫNS)eHMFDsjhS7]94 TEb*ƕaHD`&$*deRsnk/1M FJx2=rIfD$IR$aV:ڦi RPRTjoK>Qolb進b)҄`w iˌ&?s2{^Lm[9#ƸfiVv(>Df*Nlay؍uШ,Rۉ MGh"uLjQGig'Ɏ; dɼB 1VSyjPvn2HMs `:KO5aJ19zQ Mb0Y54M,K&Vlxoo{~HI砎.-FG1u_&B>g`ڲe.{a~ L)ŎBM2 ;F:p\u24'6^L"^q !Jr2v<=l#^q(63);ba$;fCþ(+Ow1%[3;1ZP}oacdiC6:Wd`X$qvh Y5%qg*)X-r)Nmʝ" 0I^=ƥd 27Qp @J[bγ'cvVJ a ڎ%T#Rd5|ȯہl:0T5'PƼac7TsG'ț0(ASHݰH45x\& T]UR5i .WlGjT)pd}`珮Gs:N׵Z3SGN\_JCeB V5\4i==7dkHk#2 sL$٘b=FsY BfE k-,wd>DƼ BpPRDbFH XߍǻV d L3m0h4Pl=5q-ʝuu}QJSwJ`@Z& 4ehGmhElhFpb$?bR[J |k*Q2f}DlR&0Ւ, 7֤Lbwt{:˹3px۰=lފRR@'mˍ(hԵ(KvtE{rjXi֞'aQA{ZX$Ձu~ su]Qj!pLEg^W10f夊7}Zi}G?f5Kcl.J5>zDG% G,Zpd}% 4綑cFb|BEӗusp_N( ; ;  UW.V)0AkObxnx{[g9L<' 6+Ga ^k;¶) |_cˑ㩅i8\ 5(Ss[#2l&A]LՈO`1 /oGla|gU*`!da-;۬3k;輶gګ^+ "%7(uO,\= %P@\sBq.>Y 0T4wTES9Zr!b|z,CzʡGRƦuy4fqJQmK R¢9GYlx[#AX 0j÷tsMy kϳ/OGܢ*"#l,vdN65S ?92_ڽ[3W>5#bilYbWG:NJp>%؎LY(A.dlM ܄;J5Hh lE HGjym( 1a0?1G~ 1Y\⯯H$0Z4ɘT!u^BK?$PLG`JC9,㐑'}HRgf /LeC:#r^ XZy\lQUU 7]O532qd#!*G y^߼:69D]:GbvL3I0Njf'/QMt,iJII W,?1\!LIp ðDu@ێ$=aGq7- _cW/΍%{Nv_^{e9ܲIgZCg`4^FGm9'K7ITg#@;$Z{c;vࢅ2b7D]V Z>:ݳxbB鰒B9\ambHTP.z\'@tJeb̕6_/@B+'Xq1(tb˃ A&ROˌTPl!8zZ"|>JJ@ߐצwzzs\4T!Dߩ<̎.Y$8\ ";ebڦ XrJ!0>CP(qE=4գMW - 9u~~]4%&I4uQ\ծ.Z֑lř2`;HT3 `|&꣙w;p:uG36{#|:0 .SuѢ`x M75e=hePZ# .ϒ 2%}njcnكtB㹆Ɏ\ҔPU86!$%AQ-ȟFdu\|dQՕsYgl6%ކ|UzzO2mumя'QZW^gld~hBӦf֙J==+{\\$cpaxBJaGIj1dxLIx<˽^q|1#BڅzˁB ǬcSh܃D{F78[5VwI׹0a%'Bbkg *INF nЕ2ٸ%Ur] %h\ k4"%kD,e,+!)Kެd6FW𴭸OZ@ftڌk v Mڀ-=k7$BMؙ}x a)_]dlRVs77We݇;^7'Ֆ 0|^d:~Cu u %gIٕGh` e\xAA`:)go+GaW6vC[i47t_1F11UVjHGK <n k|&/h#gopU4pZH$&n]ֹda?jWQt:' .d0='n{(LoI&̟ ͼ}NpWumJpzF(,!lxO':@7~3>R~Ѐ{6NZ76<ڽ+?$kJ BWʤY$Hkvn)Zos ukwdZ܄G?b_ ȯ 0~sn2k2Ű͘ʆ!u^F_atEr~#a!>VDuTnT|WܣcbQm^fF2%.]!f г5m Ļ᛼?=_Ni9vqԛ %1 yhEBFng.fIE xtf 3I@\f]agX]d6IR]V(9ٓDnx(ELE)"£^7+H'j0U*?t@YdGJ %1`S4pw$3x+*ܰ>d /=*6:3 <ʌXD3 j z豜Y0.ֻ]q!%Ǽ+O#>xcAx=EMUb"nr2 >e9Q焴[]Oa^\1459`<6ى`~B3'XM G["Ibx`MݐG; l1y3]~ P:!|NXΉz]{%߄q?(E;C*2 k:a`x!σ=uGɡPڈG46zjܳt@2&v*rttGargF/A#$4}c,gud䁿0]yi,YirFVmlٓ(<- ?rjprhMX++ŖWg)t>2,ε$cc θCG\I2QW ߆̆ Q`5P=Z(^ u$ S:ixWHf$4^yɁ,Y2byD4\.WQ@x.TXEpu$ d#_~xI^|LtJsY94eCn'PSw3r.9=UKݸT u%7Tυp3+^GȹX0ȫi@+"Ce g"3Qx&B |K"z6e]^h*,+LF6vw3~'!>XֺjQ5;14j׻6i <)韯Հ=* ,S)*ͳT׳arEdE:nݽґ(]Whn_ũtAWDpaQU(٩ N݈Y&'WWfrM5ƳήɳR 7G|2`QN3œ|RY]1Cx.b';/ɺ H*߰sSJ">5_xm)eVñHpO-A,W^Q.setnj9)7ploL:*W5waXB?!c£Qڇ;#~nQ6\IXkli&YX8b拡-EO48>}kc}ާĖ=`8 _u-'*Ux%$U5_*@7m4hiWXRbsl{1 `*OWL˷ӂ|; D;,,a^e萍$T[^=Hm- J$Cgh3S)Um*>7x 0F7\~y`"(1#ґl`PcwTdl G{߭LE 4YW^v!{ - 6 >U_J,ݹwZ/).@Re,ʼO)0=%T$$Ěk\n'aX4ڕn}Y8ԷAKefg2ҴU1\FLJK'SP s8*8Ў]"sJ+QyjuҠ?!Zގ8O|?-P,EQ'JM/-.3޼1l5aI'Rz$!&l?BܠyDnmݦ .4[lT$H|&A؃@*sS 6 qf x4 |njYqBX34(n+iIgGzQ V,FDoS7N1~|N zOb?FK.@~Tˮ3(`i 2v: kUK ǭj$mîӷ9:#I;gϠ+{P*KV a7^ 3FGREa@c9`7sSpM97a̖(5;z鴢*.-Հ#Hj ?P1L'fĈcc]H9N?v>V`vT8.TZiֳNF@_( g'6aNk:,mo(jҹ8 zː)h4vn Ͻz tꂉn8`Z 3>B:aD&b\+[Y'NUbI*d C.Ś%2r' [m4P?-xzp #!x k1_4~ MˡA+Iƾ),ol?D󽎥@eotۦby, 4 EcI?<݋$3ƨPpvRjQ,KJFϽhF |[iJzo:\$Sy_dNouFG@?y`/h 7n:FLb|sI&(+4K YKT^rй#&*qW,%ƾF4t> 6s$tm.2~)`r.NK'ANdЀ/~yڀժC8׌~32-'F*Ux\ &XH#͘CQ;_%&Qv b[mg4eA_VV*\fkft˴Z:p=1MZN;xBe>xdZj5` aPؚ=7;ҹ/(g& ?c?izpy\֬SuxAfa []_M˦܈X0'xI DZIGߘ;V| 9a\Br!2`X:m  #k^/9l"z/կR}uNz)]42.k3npe8.# ^im?^+HQ#Wvz>*taɆh?M RxtN~LB]sMi]rda+9d-ݝ 0ק1jނvloru,, sSFf4TZkL$JKh5lIU 9Uut=,aN-fYqh:>Nax+.$ݸ—d|: @]R.S6 WlV:H:uA}?}S=l1܁Qaؽ_'T oSW(pn7G0ZcePb'pt;0RPZb?Ν[d 6 e>U9>7G؜*XP {M9"}Lh({."(]gBU(Ô u>9m!3R6~zp_5Dn euRo;%U*n>Z#tVAzA;#(υ?23a `ObԜr[C*ZO6p#<Ƽ:JSh&Dg&;&5 nS6=+zE~;Yp҈H-o*MM( lpm);)+ ڪ^^w`0iNI+J;bϜn-_&v#G&lhsTڀ_#gC$5!X5Bӓ;o;S[bS8[m:7l^k @sEk?D\$l;\{]cE.^܊>f2QV$[RV1V$L@# 3q#{P[37_gbKeAᕿ~~S <@WXCEsд2R+Mfds#T_KFZ$ K!caju Ei^ *1AʁĂt/v/@\FfE2$݀~\ua{q<[(I%i"O n9xnɌruX9Y ^ٴDd#ŕomʏ`YWILܭ7=7 Gk2zIvF}P/D_jEo9,`]Vw'6"?~A-0DFo0LU[ ?& 0lCaP"#6uL3 :j8 +"g"w5dT3Y22E8Fvq$ V~ n5{?Vu0q}t4ۋ"j׳%\Kk%:V%xMK4_ JgppU![`BFNR77U5hfAmD0#?@+Wh$!םҖm~oSSFW0ߢ釧Q (&66 g M(+wa1š`L|U?a&b{Y`)5 [3&3}ƺ87:.5e`{T&1(ƍ_VX"6p4A>GCLKجd=Hj-ۊ#Angh-yxj!EgiѳH!4`v,kLYvd ~}K gT>XfB3a: I#BSWb +\VAwtl(g7 ʵ5`[/H\ ЦcJ=M2(g{g7:̕S1jo0lڡmz,!?0 =yBT}:s)̘K+V{ 94W|d=jxpG ( &￧u) tî[ dC >\x=0JM= АH(qү-8X>N>ȭ_l}xfygo۞s|Yz #+֯ G h=|7@֥]IjiuY卋\ . 1au4]oC: GzoU%59Vo_Lv5-ok28Yh<4y2qkh1=+ȧ/'@ֹZ1x 3ڞO&yibV X*I%if;q`/ˬZµOm%|4k#B_KLo۩ד/ec)~蛐ȂJ5>g$5H; qĄCvmG6mJ6!8_QYJ a73k̀Q8q3CgNm̉ H{ma^2c,8@8Sתqr\_W] RhUvwskh۬LH<@."q*΁a7u=SGİ67mYmi긟z@8}!k,ʁco06I-.U8j W,d߸3PBaw=֩EԷ`;&5r y!aV: YX!ASvͫZ$ ll"x] cFH-!t4K.|'([WtHք>H'`~ÙcM.a<t6 nV\a.Lz#WziRF/!fJJ2C_ГGbpS!x4SUL*g@Oj8S,o'X[ߎy^9w ^E,˟x`P2Ttˮ. [:J:r[L%Y%-}2Rkw3X֌PҗVPcP+>6;P5TQ' erw=C f_v v4k4cV9cRk,vժ=X@5(Ɉu^^%aFM\C?@ÅzK318&~)ruފjfP3yDrxvL;&.v#Q7?,ql2A7}+Žr LUh x6i+#VvGIL.b%kW.c`8 ]]%oǽ>a`v6[F䓠^ 'J~]2q's g$^gIЁ >v6IC7] ' r2=Y\ٓ?&rE3 f}hKOMj\4GEEA0 =o't 1_ɏ6P;,xK$v̔,mgoph>Mh!)a' K'^SլBe)8 qmF7S̊;5NuMnJ,cO4`ZvY?ܮI[xɇFEr4o$ -76n+`-$wԡτᣊxoɝ[<>>ukdswKTwzrk3\%ruTT C;Y16uMT-FFZՎ{ꚯ^{,-yKo2 5a^ nU<'>$Z ͌ۖY,/PE?O- &ȈI5ʐOAyh7`j7-& ?SI--E $I y#Nm_'^x hjFMoo۶`D#^hͪ?iE.u27:j?mƟe+ԟq1)Z9kXfV VZg2 9R,Z\{Yg _؀/6k2E qV؟hfP赜y`];5?(!VZiGB]Cp^CqusM_>:AB-պϱhN_5.^W51lEܬ{?u7v%1RO| +?gp/fl*NHt}nؘNb7z•±F o({FI޳ě4 T6!Y:UwG;%{4rCDMvqI,)QŜ3f2N&`FA_#""m`Afw&Y`*oZM! ΉM`w@4=HKQd&( D'aiD~l3dd?b#G+䡤 !/. _ROC[9kݘF>R̂inXiYҜpӋf@#L`}G%߹ o#]nk֎mhBDdxA{(8u`թif=$7$%?tyLu?Exti|JH Ӓw݄DҦ6ƯlMHMN¢2ri4Ie$/].|1;sĞ?H.>:`fH;=ٛAϡ+sT"}">2Cxicә$s&F)^A$Ti{utEX0HDxq -6Bf'=xoBFl/$" 4&*|CCܣ)w.SAV$#܏"Ftȧ%.GI_qOގzy]^l퓧`eWWp5ͩ%E~X 8G3j!jU&~9d^= th;?XvTKErmoZSC]PXMﱜg]5ʱ暼s8SgŎȸ/l `EMo !\KȖFG]Xi]z=资"g>x* n?Iu97vB O8܃7Raw|˥8okh[o: gx7mA]D5pa"܊/mB儽-҇4hrJHm~ 7=Ũ-(:"pRI1F۱k&WB9nbc82|XooZz22.⦩mO?[,\M;ieX.\_N;oe{tJ|+g+dRoa1^Z'`X7I{vշ}n _%>iGc-}UY]Ĭ@#jE)@+,wno>X~ʵxGп!n8_}m% $[*rU&ɡ)YjbmOW(5d}NРq^vxoG{3ҔyYx缂h+%Ԑ~p4X5 \DpQZ9LjէU.OU3hTKu׃6 L:F%* <指O2 cz-Yo2Glqݹշz9s#щ) ]کL哛x2OOaɐn@ 35B'I1z|>Ռ,~$ z Pww`_GJ٨B84>5~*dsZEfyÀl* )Uʬ}w۵\&8pdzcȯ9"[CK@6G/G .xJotj+5[[+&jCn~pI!Wp'!Ajh<P¢ND8z:NOd2U-IaaI]y $W" F 0%b̤~; '0#DSo؇q/dP5kbH xCee7Ϥ<03rVGb'IɬI e76^TS@Ю 6h C^m438 N5Fz6xV:$ƩN> hX/rohyRzygۿoBD-nFU% 0H/mMoN&qAJϰUjGM tlmY;[Y3cy C{ ='V_r{ O1kzo-BG}[a)FAk~ζI߀o,Bhc3n=9YC=WͨYjq:gL tKXTP QIC9:gj=EIu? G8|=x$yN6&>43O&K_2ּtjCq͠<`S-Ђ7*!!&' yi[/BMFL@hnkX4fVߨH3˄ \M6II\519|;~k$xa# dq]rE}IY;]m+;K<( )pF`Tȫ=ԝmOmq#(Sb!۱f !`raKR7Nk5W8'6: AM _U`H!zIFLmT/pEuN|;݅ν - A߁̆^M|ݽ_h6MJ\0dpq6' ʸE+`)bƪl(e;q㐺̨ sBGGդFbրZ5$6X̶AYB%CH=zln>Eu2~1,{0}-Cxb׃zh [L\[w/~i-^EՆuwV>І5edl 5\ Eߦ6lw,: [n^gY/):2TO'~d\=pn[mCƪ7\??˞2'ƒL/L`PBa,$kމus)`H&[Ҝ7Gca^ iݐS cϗQT^_FZdE+߬*k_lWH@o3^^w!12 D8a);6zTvǪ#@['s}ˏp,^Xqk*Aq7ހDeQ& !W,BWs ;0%SFzgpA%2.~& o⽜B_>1E!$.˳@A;Z 0l|3Lbr#S(+ҍuWU|~ɗY"˸aM'wo;6Ťk"@Bi:fΊD 2=e/u6I4U1 ѻfY~U^{'҈/Uw}zgR{E7]ԣ`@kXiQGZxr׳w\JT* Q|ŧArG{iM_$M ܟtj: <3> L&K>RA̗M[7 Xa ,o .1oeYԻl9͡d."pFojn#^;SzˆM(6G@n.ARo>r$su,2Å~K^f '1}}I ϰEUX vn# N0$dxx}DY T+{7?H桬2ƅQv~#v뫠u-~V-pm" j6|B9Q,,;ΰ3nUMmŀ'uބ4OHO0}O4d<'b-{b '& l] (4*3T=ψ?šc^$SP.w0!F{PS@nqn83RR;WC 8S1`!*R.,8Inɚ+5Ks%m2 JW46H} J!Yrir eWp7IBcXQ"VJj]h/-Z+РN5 2~#/H1Zr'p_LL J0;V bV' ˸8eĄƷqQC >N^lw3ܘGh.|vfeIl#¥_О+)., D˳]:>g!YЙv qa|Vg{g=JI@c{غZ^#`Ծjor$"ҊvW?,VPjPvIB4OD>,]S=|X`3i5N): r7}͂h,sGhW?^:0僣\Atj|N+SȎ."h (; u;JťQZ5qzV(G籉< wwK><;aaaGB%X5. wj5Bx5MՍ7]B(_6-g`߱-h,æ þP qvPX6(&~9~1J#ޖTA~0J3X /ЁA?9(}Qa!4, "3M65'ݷ[&v?ĂE?qN+zV۬}.u~]PuvFp&4/Ryi ΆwQ7 !$>/w(MZM|Py.hn9=|QWԪM8zhDa;5ϲCVb؊x6>.B ?!ó f&";F#^};xpt4񄗻057}(јj3gFN?N 'Itn]:VhVg=Jt:>D7 fU]CS3& //M4 a{Fͷs[]# h6Xhad54b֢H0bK>tnCs^R6hO?;R Dy]b=?솼fܿ!#gٕf*]EIt}0/o p"#}{n3>X8=URKtof ~:}]5`֟z )d ;>|7C piJ/B`t Yjm\8^>&E>+8Ƶ|ʳAkEh:\4vfԍ`y;Mڲ t#;Z 8volfM( !IɇcQ o>U) x>o;X^;OcGPl @L\ `=>ڡ6-qN>29O[p>$"FH|ͼ8!'p=a$? A"ϳ;ӥjv5.6XU%eKdh%AiU:oLؼI\E4peYF qXs#TxxONV<#/Kd认.I QRlj!<m/ŐڳaV)XC8e R&Zge$fCݍ@/-cI*r]̡娊f2br@J5^-AG]o>8Q`3(1QiN4(k:wR":Q)37=92u.hlhI$AH:LZ(,I2P|17V ~e}<&a̠C 2Kl>vx*xBy 1qm-͓$@`6v= _g6EϘc'3FO:rx[;?U6HPr ^@ )@ #^؅58 by*1 Zz l jEb}+:I`P Z?eN(I~ZIraԙ7Ky>%ۡ}~Vص}ll&64zK=@M7Q7BsZk"k~1Lk|q)?QBJ7P"x'L .tKa5U ':#_&WV VN >ӵj/ybhz=ใiDL зavrBMm"6bW솳6Ӄ]u(1#PsZ$tj31y ]$[ui@ӣkxbw[6Q9G Rifƅ$P02B xВ.޻9aF˟8!W5~b|=ЀX| *R 0^8"VPdV҄ ~B6IA'% I=zK=Lb¸(ة  Ƒ&݀@?eԤP f rQJzS2TеY[3 ^ZqAdA 4@[x b;_vu_6 N+6rwF'|탬-7KovoFQ"N1s<<.q{,iu}puXc${_G^4}ߔnk;5:5 U(d`L0B {CЉxpvimۗ:ygUΖz/ 1  P2sM+. %Uͨ& h$b)FTOtzD FtGuT>2-fdDj'N44CHҁSwIm51ۘƞ#Gi2x_ N0. &>gR%ĵYz`)P_dk4*B aAY lQ,l&5AĵxnUL|p7BJDeܢH.vHY ;`̋XqH Z]LeT1(Ceb[He=k̟y'~9XU>V&χoWD̺7Yss/%$LpPt/r*-JHqQ$(̍a07qKSKgs8y(z WYk%l9Jo&m~xDfjuuC'`v:f3h~0?,+K[\‰xS+ ߈mgʢeĸ'֍᫝ yM"fM_ݵ9kP]zYJ҅BهO|:b | a+s)F,##us~<~p1ۜ₆mkCI耖=NlBS^ 7 W؞9ڱDpx{oLJ d&_)7eozk尿o6+=7 ef+}ch6VZOAt͇ky{0;n5y(IiEHa(Tb5&ҪkJE4BT#2ET6 2"0$p|a^FY -k: []̚A30uUCU{cQ<|bkӍJ|5^3OG˹s?W{In٭ .EͭW(6!Lj+ .k&'UDGpctL^N$o>S5ILCR׷qp)ܰ u*#3O X'5=Rc!wؼ\3϶@%X @ʕ(3,W_M C_ Y`kSny+EYS!lCiwKqW9Q+m (k}[ٳRzl.['ǧYWaڎ餪26XK5p'm:!yJ&B(_n L[@H/k(NMj0yoeL![bئ2&#+frTq}u qc FmeG QM'P5ɶ;b8`l2Ou3vԸͬx EuO.ÈI=09ȥ! _XkR"KE=hX[bQDzB:CMw0i?,le  ٧%uץ4|k_ Yk>xkO}o|eI5nB9QV{cYȓ(jU>Cd75#,W c⮜H{3<^ ::cG4; l*soQdPwU߻4 % :6 ;2h#SXHPn+<uDo#lJ`<93GnVL'ё0Β/PmuR p+y>slKK0] ) ZXx,M/bv㸫ߠF&Ȣ#4Bsn w'h𐡤*pݠbU5Z])Aь>DgM,be 3#W",猭%i=H-OLYUȂP]p7eo )E,|V<+Pw]5+X'NHV3j#5܈M\Z͙ GFhI3dIw/B~`K,ȪQL(w*/L xe5J#ӊűF͒/X~3F~.)^2kz#DXl6adId7#+z`ӿAp!؜i/ݟYZ?84n7h)ZpK`/yڂǑmͰ!] [?&R7L0dQA"Cŵ '*;F4XӠ YT*`e!ʪ#" rӴJQ@L\Jθ~#pli]]•/s$PY(q.e֔L}t!e'͚>H ȽVCu< &&Ϡ$+8$*%)YC]N6$XVƥ6vUVа9jl-зֺٽ qkd,7Oj*yr2b^|6-O]S.wR)diSVK DZjTtޝFMu<˖IeCkЧX4b~# @<`iCS6ADXl9y\^Mg"<ۍ>l4\]n!~ vV [ _`BD; ge"')8AFg=X<@~̍d1(vtCmPdz H\G]ظSAȀ G4Q Î%4 ݙ!/8ȍEOmtL3bSvQ68V*.ͮp0}=h2(ϓ]63&_v5VD^v?s$=;so>" 7҈*-U󻎂i/pF8%@D|i`9 $d^&w]{3"#!.D!ݚ1c+0ZCgT9f|yWȰAIJ2!KxlQONYe=L(5ҿq0x\\ȕ6KJD3[ ݪ^GO6 quj-qEr[+$]" N4 |8&7]s{UEñq?r1}TT ަ?scQ"H 1%g#d3Ƭ@/iREO c =YK7XBZt|e 1$nG=!M^!3#^'&-S LA 3Of!^%cU ~ Q!.v\8و8.<.;}UxPTX% =dK1پ&Ԓ)$ ywƉdOF6DaT.竦[ɞlS%Qs7"u2 My)3Og'NaO1m!U bIrw)@f3. exV`*TBEi?󑴟vVR҃xF-M*՘R1@[kO,7U7*7R>30jOccB+ꦀQpc:%4G$j^oQC1Quq(|k챽Xi=<*ersY@Q, /e /&Nn*[愮Y)ԥnHa9rp,B/.Дe8P =b®#̒$>Cl⣘L(x\KZ.[\d9ZIٴZPt$iGGU 6QPhg0vk!r0p''cUf_VkFSz48 j .քpA3ÂWPY8 " ",D%;A7|rWf"H =`l\ (@U 5?9n׀9h<T'd#/im@άvVSI=c>Cz+nkNY EA:/gTq@o"ԫey#c" gi6v#0;1%񧌎+w*|, Ͱ{|G 1,ik(89E\ j7"uuAw@\U޲ӛ'tݷ<ʜhèC^ )?a mA4H ԭ9 hI(oƨ)DG!ƶh&\Z52=бyӣ4p6ԥGDf 1i}]Yx[uIJP_;}<.eFtLBoHo""el!mʔ߈X1kH(@OԵ8-ҐjnJɵ5WW٭*4m([ut(eg]bTD)Eîb=Iã [f$)2pI 'I~×7pa.onG\T}R,KFԞ 8Un.k&niiWdDa@'|_lcuu eH&7o.̍xݺv#q0,ImԼ^0#.t΢>5{돼`G߸ibj*ߚ2rʵא 'lڙ8@?'f..kG3sQ3$r6N ½xxf^ .U'[aRh.j`j'wPmU(vØ2<&j_.-:'3joZ|eoS- ']w˸GDR88Fh 2ftc~p/ D]wi }|lZ0QgpGbwgX&ȋl 8DDDr.kH! e[΄ˈϵ.!—vI=^4<}]˒nhM,-⧚ n yo^uGJ ߡi"lcx=  /}n5cS F5iß:uS=M.]л`iZ7t/6So(7 ___78٤U%ڂ(?)QszPʊs3`#\g"ƣ13(H;TtL,ˡdtg͞4u䖌63A!|+ sm28 B$%,Ka\wlSY uyp>d/甁a@R#i<)/׹h1(na[Y>łU9ߚr* _Mdm (aT^kT 71iϲ&L7.͂uC0Zc!rQaPLxe;@K;H; &@JO%ɍUdebkpѾZtPDר3}㣇tsC55]YIT`\b,8Ok%_^̆4Źn;r\>?x(إL5 ~9p2ZU%gfnA Y?߿[kY-ǫu'/R&djtG(,#@{!J@&3mylNj ԋhYh3v@5wr#l04p2b^[ Ļf2YJAhP7u^ 9Y'Z.1 J ! B/7"[؅J m+вѴZp^,'m|ճ^Loj>R_'4M#yaB|+X0pr&ᙻ\ E^M Fw.iOtB `^d;FA_i.=n5]h8+ EտpmW[#%{)XbL^ὁ/XCdR2f^BYp(}6Hɒ zBHxts>e"m*6"tUX:a`QQG,d$hF-vV!} /$}4Ԛ^BZje?4\}-E>N-7Jiڛ2f8ʧ}M c*lJQgX3.Z[!Ĕk1 UV sFL`tyuR򼉆0GLd)W,ZABl#939G%=7mW-]qp#K7$rH0Rcm}0ct t8w;a: dè%+4t/j#qM8BO~5܊g$ZW$-H"GIߴDtzL.:,wu[w[E3LSdoW+x5jdݙ͏J8֨ɫ#A0*ѳ-Ec_ЗѾ=hiz'_%'V![%h ~Ʈ #rR$[k`.J=1M&Yh,C `EESal=Er~zGQ 1/ڬy쏸9ݪ*_93>dzSu9.Tq0ТK~'OvsQ -)On0u ^W>U%f rj(Nm OL*/c:{0z:W[qN!AqeǙSG`>[m+ӈГ jҘ7ʯK{^ߌ(W5>R`@]ǐ~'BǭaUO>\ehe){'m$=nk efS g;5crs _Yk4I^5i /F?]JN,ZCxtĕ U&w/!&=*FM-^w4W1קiQCƙ!4~טu-Z6/`Ll D77Kp;H6< Ac,eap3y'):8G e-Fw!&m!Ekm)_5qP݄[7c}NU0evtDm7<6j >dp"/0@ Q IDhøM!S9K3 pmLTD]]\ -b/XXO}V%Snqe2^ɫdv ,j/%(qrso2n("xfXw"9y(*!:GZDb˘3X Y|`б8NLr>PMQ{w4Vtl܀vYqW` A)jrbQJΪ; U#`#5 (+O]9~/XhLmzeNޟ/ 5qe]/]^{ h[ù=**Bg..>CDbPdF*~pHUv<IҼ(BXԞ%.r"SN#.x@G %9F F|uI7s.d)ݙRs-oVk\e@SkMix(+ 2sy25 S:}t5 v> f]4bܙ5tկBbBL,Gm0(lr t`좎gn/41TT)Sf`G8; q\}rcj7O\5cwGK ȇK;_>cPӿJ>-%-Ӣ.U̥J-8TՃMzp -L؉|'D:;ITy3D> $RU?JMR7YZ5Y 2 >T[@&Tfctzj%VbV >\!R77a?IA?q~֍pH: +ttQpɤh Aq-|hyX̾#HI;m)շYb:!o4-=jY)v}{_2y"XQ𧊡H^d8{+op\QbG5e6Ԟge5`ZN<t4B?}Ct)W) deFT{x5La)["/&X["SDfPQءtt ,sQwixS.毓u;{yIzf&Q!+QW_D1$5wJ RP=<x`fHQGrKkoOT4a=#)`RbƐ55zjt2sw}/ಣH۝g. .^զ&zhw5Gbȍd"a w8,%ٓ4LtֹfPojg̗c)#@lh|EoվNϳa+h|N+!SP*䂞%84XH>T* ?XC|BiFPXʮ~P:H zy`vx m[Z<|'j'S,C4#ӀgXN#M<.癍NHԸS&/LPwr%.GcfCcP8|XpپL#[Mtd F9) dwT8b7/'gaQ~I+{\u@12<\.J&Pkwd|S50QP),@ B<OzhS(fUh  Gtxh{`5_= D0FyJRWsSC*\$5mMB@/u[{5(َScHVkG0 m b0>Eุ dʖ2Rkf>?Gƚi\ '5N Y{/B(Zs3c3f@Ŕt5]ipb?>5oH [9=j-7#OE?zPkGC`׆8n7V g`0ېW)s;7sEH> RX&<كThD1n=QF D%օ>3'gNSL{ȱ ._d)V&iKcjo_VM֊k.$Oˈ\sA&E`$R q)*cА1 Nx CbH%`lZ礆O@8.cT5KbrOgmlQ3]wzNWt2u4&j5C/ ^q =^3N`L]$õKq8g$wi텾f+^Vg?1sQlT ,x.f-8}z}n[[?+3ְD(AgkF,5NVtK+G"yH@8ϣ{ՂW+&I_iv g4~> ȷ@ءA6а\ߵx~ܨ??+wYID'#F11Gc048],ںVMl_B쏁;)}=}!2KbD nAgD+XŝsJ`Gl>g#.fe]dЗDk2 % ׼ L8paGa!2~,630> SrZ3 4ha%g/cZ±Eyx\-qJ\QZ8>G+ ~Gc3geV-w0G>1iA&-# S.kUFG|I`#,kl;zvHzux[XsIһ1i2tqs u\u`Zs:ZLbC`ߌ r=x(D-){8]j##p8b4Pؽ .(U>Vik#4P .%p5 {7@.?byƵmZoE8q6%(^OɝH9Yn5wZ r !!5bH71K0 3΂G9v8+!놻 3Y(SC5;:tt 9e*s/nH|dzݤG:GIPG=qb,F}O4 z'#RfMx&H:Nf[X]x,}]cMzZ|6ٰƗ4M^ /ʠj$ 4x6ԴgG Aߋ3)= !nhKY+D9GE߃>qWJ|1,t}tj˭jV_^Ug%\b] Yx7˞KyP{} f;/N #Wk:{VxZT/}ۼs49]?Og !b[|B"ʶ;g9F$`B0+,3a1SrNWq`0~:b(& bU6R+:f¹Cf3 \_7BSIUI2K*ŊMDڍsO_H|oITV R\~et D'}[ [MB,;`*(A]^r$×q9^G 8KUO,ti|lkiK@ LbKCe`ƙF?{E~IJ.17PRy3`}N8)tEȤ &ViLwN!#i?e inPou03` 8vmK>h2i KOqau=1^j꛷܌V%Kqnu !}K^yϒ\$bYE/䮏A&Q`{?bJN:ꆌe.![[WI sny%zۍPٶৎA6Wtd)dfVoݾ.HА(ŠeٯV .0/r"Я`#Ňl܊1,Hp)f9B! AʩȘZaU^>KN"ↁ%d.kYrm{ n@.W_;d2_(>IDI^K2?Brx}洨qQ[{5(KۉS?3_wiƄj9d}$uN_bE8zVu,-.08et$iW jľK3L3~s\|EV/*b`ښ& )ڥI{{58IjOXJOPϷBO&?(85M-EޢD5za3g C| C6dEAĄ,B`rbOtTMw'(psHèC-Vyg ;_1lp/M=uFxKS7tIP+F=%*iB*V$ }#*%LxNcH]g A߻,BZ <&9,`0j>TY6ې0:OJa6haAx!G{ d3zQ# R"}ca?r8"х ƜM-OCQ#!қNC4 ))^/`?Qguo xwl>2{*/@fvVV^J&UٻVAD=*"/GUud'YvzcW~a6g* o}?Htx}zB nlq6c=<̆2γ>"+/x+c($r1J Y $QiڄKRP}-xSzv#dV6hyp 6Q2]R#lbA50#OxSSt 6gvIP+  J{(I3W@QƸer3ښQh,20!ieKVUjT!1iM<0 ͓q~Fi.<קoN:ڃbQ (OxJqsƥdZ^(OHNoQ.1]b)(tGXH;θIr$V kDS9j( kδ;)7vFT +5j_/ܨHD 6' z^$q;5j{; $|v릟2wO;ܣUjݺlgMOy~%$!F{)E*{:ܫ|wJ9~?\u7pIõSeo _qfMSz77K7]XSg5iCm4눌fН(ԶQu:o meWsH~NU.M~5Gx/ksA̼\ԖW[zwy$]7ױ]R)nld-BB.9 t2Fb'C4Է?)eV|<4xRkM3Ѐ s:1# tuqߚ;9 Q|#njG ީ{Ձ3@ 7[ o.rS^Ex_Qew-stH^P&/w/Ɲ&,+ŠrTMA˼A#eС3}/?^'>SvR{kXYbViQr4(k.W㣶_w<׌@EQ ,4/AM y>51Jf.jG҂ɛPZz298?QƱ&5# =P, c%QeÉK Ïlk5).0Q2T]ޢW樹I%KHXg ;נ!gf*;+Gj+VFTg_nvp_i=^x|ɎAh ]_DJ_uxw#@9^Z$լv<&vTMgb!qo#T?*1PeZ*2䄛:w߃* Smhugp#ɂ u_*2)~v8f1c$3:&6:rӏHI":S|D T'Dog͏Ľq8^BYK1..+TXSpKEёi;>o\T%+-h;$yj߼twЦ NJ r;An# ws9 rsih*l!{xkqu9P OsLQ4M/k}Qˈ$SZXNj$j .=}h/"7Xsϛ7Yp[: |E0ՍjPir6PE8mzppǙPΈ}vk0OlĨEQ>ex͈KgL>w4( _FV'*"椚*,M<{<=nzn_w/-BCN75}^zdƂph?u\"g) + X}j&vT uب 61AF85&Je<,}f+Ni^5'h'R GQw^)HYg7vW&׉:Mýc*@(z"r/1 7^/ G/,xlsnT33TX)+vvf7S5ܞB:Qcrt7-q3?hz3A< SmTK(ҲH= נ%8n_vx?jjԕљA[=u5m6YSVĩD^Khh AxYe<6I6?1yw&/\Sȑ3ޘLA-#ѨJJw9 nPVQX)4'B~p_\ٳGY$A ZO M~ie2Qdtw~LQ+In(@8VUT 4Z3$*IԼxd|1$-"TÇ>Φ+L9YUY6 ؒ-; Gh')L+ı~}!3ux U7ju~\QL,ء4 r74 Jpo~ wk.v5yα9Vy#E$Pz]89_RK'T*DS/ܖ{PDMؠHDnPXPًanSZ瑃 \Jɫ'!&͑i׆8$иc`Q/ms7$N)V"\A@eQ.]gSISrM~>W㐶3! Д IjXB?l6.| XPЃ f[)f5kpn+C^?..h ^[죥g,AVtsa;{Pjփ/@~*qQ(]@z}9^wͯ0jCL ľ vE䞊40.-F!j35=Eϻ~TeՆ1`-FmxHޜ g.gl_"eՙG7dHH}*T,S=tncajՠѤ-*ɯpGm#e-Տ1L,3u*3%c>>E$o-3͋ U?=J p 7ሦ !مŮsDw{z#fH\bL(nVKz. R[Ad]Y_8< n5ܪBϦ+W P#}FR~.hޕՄAkt0ِe,uφr +=]U߯uEUGA: Pu.;? }%é%8C|!G=2o#>n~TJ0Ғ7('A΄ɑVDcr,|JfYo5_+KWqyeR0]=Ɔλma`hV3$uAO:DPTy%#N@^b0lseLgHK`lӵҦX ف2dL-R C{A8cS̑= :oq$('Jԓ^`o WÑ`WT&WWӱ[;P rP+q'eaiS z6p$y#I$Hf<=&\#Ks@+i046Z,Zܰҗ9dF}A5)HvJ6H IKSʼߛz~]naYX ,xewvWzx) KHIm1ۼ\"; l67_&p#f!ܮGXx-BX\0XfdW`:P@e7G̅ұӮG~Qu;أS$dGwԏUUUUT4@u3TЗ;αzC}2[ L>-ևooHJQGY6s%;CЦZKl^%yJa>~>< rȄ;p.**>T.C%Btco<m:?Sf=kIf|y8dw,M3eE1opeNZ{$Jp_UX#8G ׾JZ_AHP`e-2U/Թ4j3k02 zY^UKo71bXiP{S9S>גa[/]/L}4^,_%-h`vtGZK0 K+%hx&r=9#iR 3OV"^;PQ%80F} )?*qؓ-w? A [3AƱ&%G{z` ur nLMyIς!%b]=g`KVn}?` a S\>HJxJNwzU[p`ɥxxQ!_ۏCsXPՑqs 8\-( B{4Gܠ !ᜡ7A&ms~nb鳛"T~DRSr)!ǖ1ƓβYi?/m{"/M2*cxI]);NdРykRH΍G3LݔS0FD:=h"syH$A@'x|SG` | .ǥ!XypkXl(*GUʾi4mòٙ$ بXKWhQG% 2a4⠏~`;'cࣆz_t+ǧ1\w6B'ܘwO+JXuͭvc)\,#"Ǟ@"f+ >( zH|@/O~miKB؏7fRWo""|Ij}~:2DIeg|,*B*Up nY%k6ҒҦkXPfew["8XrzRaRN4}̀,S8uyQ3ԫMpi.I~ؿ1"|۰xYs G E= e Y}rX,j=Hж;~ imO{½`]wx fY©a|糨+KV>XPI#4?]44HzHkW;XϑCnR&)ʏ_/Wk HEU/ HnM #ԸR5++vOwW;^-!$!%F\K[ HB8cf)׋<#)^͙G*ŵЙkp`nU7-]2T~R/bX5.ή%L"Q#]V/CmXuXը_Of̍1)ț)T%S_5RB5cٯ3.f2h_&X7≷$.w6MR,*0.* jr 7_ɬ7aD řE,?6bI'$">ԅ#$$@P+@KjBV"ca>}6A @[,C7`Irg㘺U9LY?r6GDjaad:Jw_6׸AÊdˑ&$JkuM?QiT7^ >o ,pTQV\b-bRŠeX Q08Y<&bn"`JPl/Gt`#n*Y:+%uGqduP^ٴ}_Ӫ7Xi_+tSЕnio"gfĽFiuWS|JeOD#&m2Zs(Y#(?45byVuO.\yxƊ+ t?񝸓o6Ibzbvj HBSʜ%JBOd6\T&HlVj} ($K 2`70UIG,BrZ&|X6ytIA`argKu'C8͊)(V;JT6`Kis0o.61^%4+v=: {kMFc*rO(_Lquqot}+rhꞸ' Z碨$J*#~KMqWW{?. ?(Yݮ湏vjؽ_{7R3|`QbJV-i]S,ѥՈHvN$p_vkۼnBjsXG$B n<7E d[Fu݌ez3&s#3]ܯd YTMMh] K0{Fj}0+8h\\_N T(-g5yPcxL {g?pAZV,TY@qr[A Q1pkqP|90|L !xp݁1~ԕ .E f%3,\bu {*l'z+,gmV"uk\zaz|DzNr$Q 姜_xt)G )k/j:`5eJLfCl#ז LgY8^2u3n4WkKgOz!֐%)Q<4g}o0?'8vtw0ROq &ἑh?' ^^R;˄Vvh՘W|1X!x=7@8TD6, _1X#[(UڇI5o VXJUmYiрd?bc(t>;* ݚ0>z@ѭ/ ݟ5~ۜKDZЉ&F+9`^BRƌ̒hk5gEZK(C)4V+N 'iK8Z7D:4$<2>=Yb9o*p*EدO05 C [ Táag8^$ G-, FWFj*֨hu Xv\t=2_1 $ƇAhi(p,?5-~2.9HUp rDP2[\I\f'65*o;^)$›NLE3dzV8+|)U%Oh0 :~8E@y6+Ͱq>Uon9%De>Ґ"бJM o%Cc]Cܗ#sO'$|X@($7WPc?JI#3 c8>#7'{u1iǚ86΀#Y7لKtQ7hU=Vj1G:u|f0Ŭ0!ƭUHzЀCDI3:V[B )`h=؋ܲGr!Sv82OpK69lryswAYv :6p8."EBm;gT'F52U)׊Ў0lf]!bkg FIՐ A%uD$h -ab.CI "Bx<ʭ,5tzO|Y3pWXl(eaVAmSO9Ϸo oja lKhZ:Uk:ݟ|@l^\P{s}8u7n 8$j`/O)HE뙅1btׄaw376tŰWפܝYGo-TVg]yX@Q|hq3đ) Q<Z/ v}B"w'+N؁)DJ&},J s(6DQ^?n>~SOz2>1t[{T$B?@4+C`V<ޯ{m4Ӥ_kՉA~+CVH;) ;]=^,~c/AZJ}vrG;儏Ę,!OE+opU!'%;EߌvOwm‡޸0W0ss!vi bR h~߭yd+tILdt!P ͻfM=?R˒к/|F&* - 2άhջ0sc}NUA"3ZW{1P[:uϼNvhBĶsƺw`£:Qqz4[#o" "EscRYE2 b%_6|rh}<bUmCA: cߤ\0d.yD[;d(4dL*TnN) 4 :bGq6"+:)F5P /dKm9?1\g~K0DH_/[aUJCP{\Gښ5w\I5TCD:I֔` {LH<ԹMP0RRI(]ǣ>Dl0 j&'!*%|Ub -Dp/(DjdµfXt9Ty]P'ìBjף;r %jENՖpD`ga< =C~fͺ 42@ì|riT5]Ѥ cv袏[ `kȌbڬ$g نN*J;qd*!x6hO@G+Fb:0˟ V^>]ʫ zXp$&ul>,*KQ sRe׀Cq'C휪˃hJFwrCC7o-E"".3zW^V;}Κǹy[!`#L*؋m\uǭ2 {O^t &䉌 2|oFЉ91|DxKZtX"KD]V]dO[iBNtԳBȪ5p_nfI SuD lYBa DCX. :}Of6J: Ӊ_cS =kƷ>kAؕ>jLy(|d ֽ_jP6xw&& Z@ 1uGo8Ul_*n}urXA7Wy>N?@[O  zےKs|~J/3`L٠`mέu~3UQ=ʨ!Ne)>a^"53Թ$'T9#mG+hN"$dHjBثo1y^PUYk@iEf- &TSC~CvqF/4=*99xB@V[\ 1&O~9>=|k W5g8ũiz|~wJKzrOӯ@j'I42{NI&JY&@½$tL` Rh-Z\11*5~|ǑP)}oP RJ6bcf怅>.f(&7gPLvLdifdȽ@.8Ue\MNYZۈwH1-U{`+}KjSEg(4#K Sij.l`HWՋgV%Di;es7;9TN&Л!8~`N01v1$0RsLByog!"lY|_ ЅxK=+w p!~{ܿ4,^ |}]͙y {^D}yDy("O*)*jI: v"sk f}fEnXSLPRբf5W%5.Bʅ ;NG D&'#h@iCC| 1 ckF&cQMFM0Fх% q#;qQtbҭT?kwQ_` /9C!ǰӦ =?ͩק"У E͟9ŤByԡ 722`!+{t.,cavĎ0!ZXˑʞ#&=93>& I>3(^+ XԈGsEF{z$vRWxI1e| 9 8#K@s(D@ĀQqSyܵUOF D.[`5Dgz"3EoKBL+7NU4[w2ۏiC>Gf <̰@ٙcuMˤr`| Vޥ P*V4{7X-^%짊FFB`l=]lSUNP]׮HAgn )aB|Lk6HLخtG!ͧA6]U~-keBLf0E$N,E<5QB] ?p$byU`ɄZ_2&YVrFE貘F* _0{8q.N[4?\m>48{pnKv(NaU—!bߒU&6_!igW~abxW„ "d# ԙv6`$oUk!ۅIAHOe_^P=@0 õPHidҧ`5p<@ouFK˴j)aM>iD1AxH'b˕rb0gH=*뤶{ʥH7K6&pK Q1tvu{^E]8>: B@R6ȯ!B2nWC>P=`v"Ϥ@&Dp1JEJLeOBV(ReCvU,5eqBA)T"*JMfNbx!IblZb=$Qó$wd֞✘c>z-RPlI{F@F:hz{\m4#»Q2y {/T AA**_\ophk\&S`tD[nh2޺Z xTrl\G`>݀p|-pmfniFIK!ViL+iC-ĹFr\-_ <[Kҭխؘq $S} F*~F4rrHe01-ieYle ij#2iFIP!d;AkE3|l0nNj=?gdd<='A&OD9{\Q 2tHi $:|*۱tU'#g;Y9] q_FdHpG7 6P_Fəda8#*(4lQx*LpL,ކaˌhyr|C1gE/:Áʷ^x^w6!>2\GN@n555aQ&4#[$(>~a Dwwyo:0e&z ~Zd'"Yc.B8wc!%' QL *€s@\_f`EN,bB+6!C.8pM+*Um%+={˺Q=?9;yyfr"B"3۳cU%->++ 24GQXrMHiۏ$l7LhoCw3jZntf8ҡĉPEB2]aCMc@żsoB҂ _Vj *BHܪ; '}ڃytȿITr=DG)H@4L;ӾI`G%è Ǹ/;DW2 _osHtIEK:Ʉt7X e0IoǮ-YZVc3FoIu{J=53z'i){!BB=eK:pu˾_C;b Gc@@N.'9HeWnD;.4i$b~l"vbHfhLZE@K}8 aO|.,h^X?^U=הBDSVK3&edzpQz;L nA+`KM{c Q^A BGO75" `jdcn}NaD|d&v,55LAT/ ӹ] RPaHfXIIE3;^eaO S'UfZ޲8/iL,C4YM: %*@EwRacэw8KwU,0I3NvIi@a?Bdo̅e\p Lw8N9gˣ&0ī1(NA9q(D) V&͘v zIOCd|W I5+tdAsd2z7)sԛVUH籈_YotVؖs*\($: pqx~Š4t|vrV|IhK G͍'n\-PøO]VQfES e <:O{\2 7_)(r6Y#/a@NVdA/.lX1wE!Rֻ_Hz 9~H-\Lva2|y]3C8(fq9<['sռ"Agf;ID(9K )^Q"}g`s2旜e ,]rkn*1qiH77}WԦ1`g)ƜbҰ>`ڝRX6Qb oebEGg8 @f:!5gB|^٪CQߐ4mck$ȶJb$+6"h?Q,YwV "_3\X Qn'+}f 8+7PM0|SmԌϦ 'u-fHqKĔ1/`p&q#oJDR+*׈zsYHYW+5 Q$LVNkdWqN-eLPU{ F/Ϳn( G: vKA#{cG ~:V ?_Xfwq+Z lFU/QozžNcԨN[N5#n|ly" u-ϛvpQٛz&,͂)OՀ{mŅ !g2)Gv2޽C pMpT-Y2 ikM~RvAYmlq%lAV0i|#9 HM2,Afv_qY] 2dEټi/t$d68pP?ҀkK߳Gx1_\Ẋ ].׷٩Bo6<:vGɷ6@a5ָ_UAgo^\1NWfXuo-Έ?B/Uf>UhjiV&ODR1Mh CJjӦc}%Ԭj7_ca[b̆.['&L:pz5Md\ZܯޭF8ÝgX͉<AnnKD R~>9UwLD bgp1ߠ4k*c~>;\7Oف$BfX^<#?G.EVY&)3`h,Xc7~Mm808!z$UaKEd#o躲0~ҴXxf*E2e3+y R)x(NuW:ŭd9fjx[O*RƊ*5wSlWggv+"[=@NaXVoDŚiW@ˈ6,sGB곾 TD#v?1 ^,O5Fl"ݳ[W cggg/" uee;18#U 1jĨ">+l.8LL@<4f4*#97ĵs>HỹG@w h&2;pkd .cV4`{ΰ(!NOk ErE_>)Rp,zYkZi|2XɌ ̂dU5kC"ӹyT3̟\Xfb(LmC@-P7 ߘʖ@?g%eRjZz)H'K.FBS0:S]\pGyo%iI009HPD"p<|Ǝ\ze_ 3)q~D ԂGv(.Ҥ9!T𛩼,TII:Qp"!Jv(J8dx4ïo]M@ 2X)\&դtUdtqN-@^ڻsGmBECh{ ?P2'v&'~ sQ΃+ާ`YQ10:xS2* ;oNޤ͔5-SQ]dBj2<`&`nH(_tPRjy7mgL(dCوzWu> 7} FC`Ni`d,Ȯv4#do>|YϾ4qFEGy'?jƮvt6$fd\{qkTF7D"8R'*!#4hy~IqA`Xi6CYht՗l=^Quʂ祃dz&6EPs2'%q$I}֫@c(6C63¦+cr{#(/alIy%dHgYKؓڞu*ZUo@ʸcEGfB $xsX pH(MVT'EÕ22& @Eey͠cCBh HD*_]z1,({joCK.q,u^IWjd4Tߞ3?dU]8<3rsllM5lu@Pa2$g'97 cm[1zdi KN$.& T/YKd]إ7klL{.r+ؕ'rFx`{;ݼ#>wcDφltV^qBh-fAo @ }C5pFt#8k_j@EzJ mS괵sJ9۹7Tw ʝs co`<&HrM8{k;D!+wSʙ'Whvr%*O l]T^#<gOxlm$ʚ[~3 \rdf"dN~?.L] Upu6״avX#uis g57u-PR'%(6 Зȗst{/dͬT:|*LM>lC\ rS$Z2"~?'Oǩ[`gd /ZM]75|(F=-P~ۼu<~H:N ;l^J;ټenoJHnvF5l Z`!>g`F%<' jҨY! ۼο{N0hYWﭳDQS "QzBC=|疣p31 SQʿMyZZWQK%QHUyk  OqE= ׷K3b'!V_gP&XB R P+f)}ӥ%/w c |Xh:\_^ ӓeDwiHS2GDo ^$00Go2y>3e隐`%r"*Z ?`㐠o>fliuBd5bftI[?q"0e3)U !Q&9 tvG U tVw#"/ڬbsmO3ŋ+9^l46eI-k2ߔ81S;&dD&Cv J A,l@v1B2ɐ\"d%6fʜLT#yX޶`y Bvh' f$u{Mg%!/3O4iwGi>jI-wU@؀(Ww#)=nQl?5yݔAֹzѡ2Ik)G@esq |>]=꬘A((z d$i2 lv,A`~ ?qM˞@׏  ZjO,֜faO?Y^ck %[::!FK&>B^)T? 7a5]˕AA4.+pH@֥O\Ǘ0Mpё\PΕbv{Y"]scmU013Ww\cC7ԴZ=1GXe洿%|j0 *>[`"C J^S!*vv+Xܿcm5Qc`2TBq^4zEK]S"f3NIs,mnpȓ~LfSێ[, hL3h2Mi_VϽ/|x‹ElPqZpՠKlڲI#p#*p]\6BQu]LʧP J*Bd1n ֽ[U/{[o$hLH8jp&@%59+d=NiO]<OAkH;vp4ez˻5HK5"s#uFBrQ?s[ј#v xBk`>0a/b_0k_->DY`+Z&{YSCLiEsNkM.yB#,BglYaS7 2GKwA?yn{qWםݍ$m ]\|㫮)P$=<+ GH=dOT @` F"eA9༩츰7Fҋ:z[%Pk{*|=xAmQ\Ek)z~4>b 8c1q}{WȢSI{o*zxw&d9 5J'6-JS*);ic*ɕrɒs2- vP; ulF3DU Ʈ\Oe+OǏ^o ˑ+T[F-/=Ѹ)ނ#|#tg;Zu5j4\ˡV% sT| b~k$bp^wV_̀ڑ]L 3cX͡~ת1y .PI &~B GXEUB0CMb1] nI V]Рt䛱GY@lo b֧t0] nkB5<@?C"t|<ƛ_7F}0^G2a&1% 8{\Fm fJqʀR__* 6<*,멋B]?Cm^;stٵM'] OhM`!Lg} Şu>ZF-3`WcP_yɵeSPq|'sG\}m zqɸ1>,v}g-N#"%gOC0Ln# 7q} w)`p"^13J'1c8pؑپ:'/AyTM컶`9|T?AN#[Jc4؈z (+"gKs]%__Q8tCW"`޴duUc*(?oYGFRWKb!{дO%gIblC-=C,pPq;FuS[1₊Աc¬3C% ]/S0d1UaIԎ4u>-j,z]?Q?YG!qP߃o%(DG<Bq} 儩7-Ct)QR2\ФWGc2gN#  LA "I&"zXPmyPR?J5sNuW;$D|$^eK6)j+8 _o4VFLd-hl؞H.MYv+Hbޅ>cn߶~ De~t tm yp gZhRQΥE@ұp=w*n gONM~xrS#6DWP/i=gsivp"C+^}?@Bd'1 :Y:yLz&HҥyLl 7qlɖAΫ/XG=)xYhu%{)FGT#|]$|Z{ >!\~xЇ1:dBi:YHjeH7Vo,x|Q(nrHT5/"'LA -(9 gn6N\۬ -B Xk}(:fe} `Ӭ3(OlP".ٿdB14/2Y}f+`}Ӳ TDUc;όEmw[$h/ GtY-r^>W3\žu[gyθa% ҈KB=l~نGKҳDڑ#naI{ۀ0IZ7իQ A .`& z=sQf9ur& * 6g Ͻ7aoѐ8vbuƷ#MW$h0V  䆹Q oGTBInX)!+ c Bnn^9_mN]r $%1I*clÃ.;ܲc%[lۮjc^SM|P |'\9U%!JqZio |0T:!+DO4[ɐ.uXA}EdZ*z<~}a<iF2`Ɣx_&1%U.‹g , +{Tr_`xGKvZD+)5Tq+R kQjDiVI?@"ѧ*sEwˍ9L".+~9J'ٙ e @{$me)X`QA g&N}r{&_aP'ssiIx@+NvvԇWjK-:* Q%3  ]"ߠ(JeբNБdR"I{`Ga9ċQգqp>_Z7G۞gQAPI t'B+pb7{tHw'U}I( TI3U0Ցߢ[)ʄ] 8+s ϩ;d}qpfC\u=8~ .6c=o7Dk ;|ys9cԲwl45ssύwp$alEbF|*ʀߦzPЧn<s{1GH+l0IoqCτg &xԇjH˩tETH4C"z%>h( I5 }V[.|=?XnCޕz `P )jG we \]y-&hn7PS_VFߺ6"B)h Ԣ |',geQCOBI-ɤfT\6 A4" ħM7;+Y!AZb+n &x O37zL:qe20>*K"uY^33_{9f8+ivf-}M11oJU!'9 ZC W #&1!-2 2SM!3E{1mYWs`(B9 ++Ska/i±@u74FvjզeZ6 !M]T42]tyIefȔҸRAFx+מ=Uz<#n^i'ﷆ<ByxFuAP2̃Ziz0{,9NG=kJD$oAXxG30QAi #0P*nj Ԭ\P+E!}v P|vZ<q Qݍ@ [si԰̑%np .MPQ?ܕq04mYԬ>)Xk^ܓOޫ](!HK 늟SL26涬ULM'h xʂy^`K'=€INSL[nC6LF<܏:@'K(~D2.t>!)MN(ǐ .BܙY~Z+nJ)j~= ^<_"w}(E㋂s!ɇl~ŕ72WhTїE@KnSn)vY#VntɔǶ1 $AL`}nE1&Z01'dQ\ `H1mƆ%*§) 3=İq(kD842Q>|mp1d" Ǻf?3`RMHC:-4Ie?" yؓJdL|J) rNk{wNU%|h ɭ\OZ>W";!ި$[Hl$92g,O5?6j)Hs.OsS9ցKsҚpkCD귈Zg@3JG|ń{Q-A3>o"9ڰoǺiUpN ИpMp_t_IMw)E̓:feiyb([i!*xt q,I72x4=gB-_g;oSAԨ;5Q @ۡ{C8-Ӡ!LIfo1`J-KR| ꮸ9BlO.i;=R{)5fg<{xkZ{ 7`:&C=i1.{?vDwD܅N3CUeSK" ok[u,7#nl;žW1t'ܝ|-[KY77 ޲޾S4-'@h23_ڰlYKGV.a&jv*A:D!g=H/ˎŴRC:v6Ä# imr U+Iqf{<>:F᠛/F&8V'N4ؖQɛc7{k]gP Z#n= 2r_Ո4][hAD@c15/ڣ -]WlFYjU™VNɮ%AG~qBoBQ1';IOVsUN\cvd:"TG*@Jaܨ!( 6h41$}H'xa~MdGhVh,wc>3Eu.X9p~NtUtCT"@Pɟ3tp"80_ðz=:,4'#t(_x܍-cDNʓxCH/kpLtU{BlK8u]=Jp&JwgQ"J'ፆSuby)V@ N G5kxr^WYqA` ZRV;)y]*&Bj#!.lI\+s s8LdC;yPE f16MJU9)48ouPZVɹ'G4 M\G'@.q6|<:T촷͒7xߏgGR7ij$/iG-Mv&HH: e~*A Xca{9lmHTKFŮ4T{XF&A ]Mh@nRָh0`L{JKir>obN^`abY0n8}Cvb;.Sh2k@]twG#)kZ0 3N^?1Ŭ^.tos/6kf@zyԙ"LN',%}m)'At9$q2{/N?a\v wa{C"Ro}}8@NFBF_M+{|s90wwp.wn| g 7xY.TuFZt4!=&`p?w؀YeXbC;`K,k3߸RiK~ .U*q"'?&,C ~PXNpe*X6js7?\:}PGxL/zn.?`?_ j9/6M"a5XK2Ӟ{JZZ77p1OZ\Zń[L F_V>!82&h /K?zc|a)Y([^@mI׬KWU xFn`@ʄh t+U+h8'Sᴓ3N/#=ZnH_Dh@G0ģ jf1drwfqH\9#̸7FALzN">16TFɌl-sTXI߀PPqyMԂ??P姊^|A^(J%]5bj+A6t_wѤV@y]2)p3ޡ/m}Pڦ۸1;DoZ Mu3+ ɳo{S h lMNٚ\ 5aߑPrr;٪W^&f02L #+_6RtPq^praFEHΚ7Ξ|#f'P iC<)Չ^9'<.ixCo]5Dvcf궁lQ\ iѤwJ/s&iT;\T;5ԢY1Anʏ/Iէa+Xr6S*浻m5@J:CM5T<СsƸ=*\p_3C%L^4ԬΉp4KAdOe$Ƅrk!a-i%!==iDDf0W6q3t4 uh (A kCLXƏ Ūjo{$JȣNa>Z9o`*EDlOWpͽE#rGLF 4(^! қDfF(r}iFp"Ze~H-&2}@RwC83K1kL? vYi-5~χA飤ԁ6AJeu2epi&=5}n=a'4~E'zZ]sp׈WHβlK0az: jluQ@NVBZAo>|ZQW+i,a~{1 .| _قWI\i,h{?Iu@P]Iz3(;)( ҥJ%6L./[VPJksIġ֛ Z ⚓&M 4 Z#<Z;% ;k?i.$GI]]6asџEhaZ o4LGsKlK?yV;C+}qzߔ,VOIw~/OK J8P>V,jב1 kNgQ`Ex"/ L-L)^UopBD =}B'+uZ{ [/#E퍴 ̸E YYʉ'[͆?=):[월۩$4WkKe۵c}B42. <z "" ɊCrЯ¬)VtSշe(Pool6ŭHB`^" hߺ]ua116L{ͣ-^%2>[gz3/1o|t?%F429?pB*-¥Bc-Bz KpK4Es9~>yF(K-ir]R}cU(8zdD"JIhPbWS_땋_m-S4sf>8P>+5%7is-jc )\ /=xU6P"oYH_[J }Ni6C='VǓ}(y1$ϫ|163C()6yG8-3.౛ujI/'ty~X$_*W(^)OZ_O,h,S|~zЁ,[wnBL&1ma]{l$խNc(VA6v#>X⾿ܒ'矂P"(/+ckΛ/*17('28Rp''DJLz#,r(KolQ};F(N6v/%~5C)!ߗ&J)w`Z'6 `kZp L1/se ::,(Du;I+0Z]8oQ\aÛXt8h,2jGwQ)ӨTuU~2ɏ#?wall\^ʖ6[{@cD;FIt%նش*J}ROR×'.0rށ] J PISH?zZ :*7֍haLH>Yco~R'MЅiĖ%yo7Цw+'_FfSǣbzja@\]QmI,ZD޳= &u^/]`o'j_p^q@f-yB1.8)Px k?ӧiQ%zp,U=` v`2:ov#r. ZLrk{+Le< FMw,V)nKtJgh *[4!k‘Zr셍Nt>#C6 O)Ju/36~ ,)!1Ȓ1v)N`6tLQ_aו7t!^jsb8Y3mffU_/R1j_vsjhil&^ZMʂ!Ⱥ 3e:!,iv|q`Xmml@) 9??dyV#=|ڑRPefbƌ, ̬ʫs/jy p޻7.#R!#+gPv+}Dc5"@*0AgZHV l9?&}bdNIFZaT.,"s G;˝윩C?X"ǁ|}QgS ;(@LBZi\"|Ozt!]iǦ >k0uo@wxȞffIyKH>Jmf*|r,s-tpwFdͽ)9R"[Y: /:4e}_7_^TmCڗME GzBgY*4[ѲV612c̭TF uT=x8u'J0"飬{8_rߑw`O:R) 9xqG+8 @X|ܥdN%XHN&Ymcf4VYkAgv|QD#94Hr';e\t8)5CU)UrNPoahܦkCuUf9\ uUI$`;OG}|0X!D#i<]n1JXE0 LeDϴLo-nVS3gM~H_}bEYn\4lck߆Ѹ6-^LEn˿xɬQ]l C_z4ne,M q=f]n44"kwp1Z[ٽ~}} F _rm,F47{$AGF-eot*ɮO8ڹE=QE\[IGnJЬ ad7HEf Tlv9)`W·_QR4 ϵ&L۹,^sQbkz,T L|t0J|f_cu [18X`)X RgZiX;G(7d3@_#aKȰ@ğvfKc4cGۗM}׸zt1$HӬ!1xrt[Z=kIFAEл;XΔ=g*ʶq?e#m|dpWIu4@~<^!^#T&="3Ai&`zUOW4ˌuѕփ4|c ډ&&Kn kX,n'ON}/u=BꛄS'\%\*:z7N"q')<5$/jэ OBF(ĕDSzg>bנoB 3E ;o_*T1{ӂF~5; 5 ȱH]dzGm W-- :FըoJ #Z*d< 6U,Qȱۭ5D"Ĩۺ,JRػ6R7L"qgQM<>_Rfp*^eeN]l4^:4 Ǔ-!?`D?˰utMa-q]ܾo*apcKk9JH#BNOW ( ~ :>ʻPh#!mN\1DY͝=H=q}Z|貟`=7c.H2 W@g1t O8ALMg*a/WmVk}nZKPKU>zo9]+-*q\ .ꖖ T07ة4m&niH{;X'c,4p8#n lվL2u:zM,p169wͪ7 lJK)vaflni Z|dOcWOXQJrNm"ˀ'{|Dh@g/!'T}F݌y9BCESFWM!/=  i^"h药"plhJQ(f3gS_l2jp-{PM=aĨUM5[sR*n<e=5T4qгS]XQǩ&DcBEoL Jߑ\|8LS*yi GƙȼQD.ALK|×VTȨV925@lsXG7L<p|1(.e=.Ze[s6,H!L15jNԶwT2fΞ>9p;U<r}6nb.!v]23CR,;S/^M&t VҤێ4n2q@yx +$pe>(ǂ0D|-!9DJf&Շ_Dn"*u `~zy˟-=!3aZxomXS +(K@#&^ȷ>GaH\.k K7`@L@ i bX SEcVZ@6n~ߴ ͳسA؂O׌\\O-9lRc$@&_7\Ƌэo2vOIw%bW p(92hg9H&]MW@g\35fX)3dHY'׀(?,ˡG=JBV>[(L/+6@O"tdFװ/YHr-මM,rrK\ZM?:bE4N1lsyĪ'Ae}68~bMO 0srG/rG ɑOq@Ǡjs>` 3FWQ 2ւ9G9\K0ZTC%g;4;(b;L <ҾۚC=>)j!RKtcu#tJl9JS}Ac3X( DyhkMׁPZ {|~K0extؾClj}>[tBո-!U7+4G+!{ +׋w, E<pT՚;~m]v$i+/7i_8ʁ)Cbu3a w\u`U#C>E?>>]Z ހ`mިY\d-@oCڀ(l#&9`&jz뚴s-ܽ{<ktY\'f+D'Д``@ N)E9J.ix48VAnAd'(xƬP-Bs1Psq A3M1(W'Le(1|\ߤt<$•iA2ٸ01iK Wc'@<7? Jz }SѣF(VQrERSњr朄S%fD5+zY$]x-+ug<__OTՐ`U}4 ,ȘӞa 1 "q{ZiX SDޜ[j`,Sz C5=y!6ǙnV :9)֚4z$J8IDR'8\<£Y;o `X\ȂkK{ȳZ~B=mt|퉷:#bwp2Eo˒ލO_TT;2KyP=l+O5d!Wk!'{O0ewՋi̴8ʊo .f]ꉑ'^6(q4Ϭy Fإxd>Fi  b0_y:@ ecB|Y3`F.yݼ+ݫp[Vt(.k+Q HbeѤM^12ٝV̇}C{J+REX[O=38+!qуN©lbt71`JHE_,󼆙pxNeMM\uЍh9Buس"ZqC6 !8żX\$PıⳎEք8Au!XCnv6V˜c?/nKNcS]藡'|~EN3qSCU}=qVPPB Juy-Io"0D-Ywr:X.e$ 6m#9} A)a*[5_=Qp9LsR\u}"we+ܡ,{*?n& (6[`ȴCy(M'PF@$>n6A;+&x:؉7 0ۿW0 =,f#ʗptg;JfjW ƅ'V\.\&D[_oqB,^B%7} 'IUN :=gtd :`bS:.ݧ_zY":Iϩ(¯$쌑c!,-ԙVxbT$"50 DL2)UĽXQ—ϑpeY] p>is܌Z{>W MQ=i JǬXZ4XD=6i2ݨp&6R*cy-HƬJOxPFXCA&^*?sYLA!K= P=J`5b6]:ş8<CCЇ;,i?d怊fM.T?]NrAÿ:k3KM X;`#x8!&ňгzS,[h8A3Olߢ0 =B19:ˋigSAA_Di->9zBlܕA*0E@2t`5 ?}XYvA$Cm:TAx-ˍ=6B =e?@c$\; "T;e1yhZGS`AKRneoEVnf M{kg_)C0º@Hˆ!DP1ig>ٷZϭ,D׾J \bםDP3RC7OTt'rTٸ&7^\NFY0>5܇,PPmW} 0nx #Jo5zMbmTfxV&0"*47uN1Ƃl.Xf9fyQ!S7r'qq{;<˫2`"{ozMd-ę!dpNQ<^Zٻ0 kw'/9Q)Yb)Iӛ⤕ $+Cu'srpH=xMS0ps#qi==fd}5B#~Jb Q27C"gE_yd_+q"@ -~ٮ9"(o]~<ֳ#Qc+>vQ'0 raKوXLT`%*nRR2uiӐASYܵxJ;[5 )vZUvU!,Ћmy0VfG9L2,Si'JKA4O#|6;!XIƃdT/#đ ltkz<;msy-QC98ex|t7ovSl*'6~B7,[Fc{DGojj,1߂TqImZ\w>Bq޾5+_JQ7.BKJd&qK%`ZU(b*F֨|){e9S;&%lYCm\.jsNt .kJ "{DqKRЙYDq ߭}u;;?|48D`gՒde:t\ŹɆ XFO?c?әfObB5ѷīlyԆ8$`q]F2S| Qxϓ C/\0 5>hy$QaC&a#WsQ pP[z.>qI;8;~2M~\= Rls5Ve_R*i҈bk>#S5CR|:{85a\ <8$:PkJc">@{9_ ctUtZm%!P_uėbߜV07ڇ.4iz@ !AqESBw%"ѻ mm%}bJcD5**k(0!hQEkY9a^f@a'}qҝ{qń[Yʂiʊ Pc5̕+p< =Pmf@y(bckT|k*Z&F4qGgZhKDH* S{wb]Σ#x?]"Q~+%\O+;m.+KTpa-MZNM 8"*?h"=:;iB*{q>LdAu8%ρS_]ek,> NTX=2Bנ)8ɵ i ;["Q@X*N3xegq#EϺB8XQqaww҈& |i폣F=XBu<iW}w=fӷDYV첫ƫ#5!,#[-ۿQ}UJ7e9̹^:scQX(]6+^QR* %U2?rº@;@V *lE/Q/hݖd#MZi!Թ&s]:5'ݍMzV75n._vB|_;:Oa_V+Rr3k&=)[z~$3R|`L9tT^Yo@RT!lc\,^Js$%$qiGw_)xhwO4;س~w8v›Z-Eaa&iPt=*Gi9n6q^Hu_,}~te̅[Gp^n~-MC;9+WLYs]ZS3mAv/w2:i,(ue/ϼKsSFwY5qV9fR뿹ds .^s peєxy 9Gt;*5zE ,j2%AFۗu][}0VͲKXnN?}jKureg'\]+ z6Y-qx+1:]qoBa, 7ILuce;k9SMTjneݶ<۝Yz^SS۲|vcu|՗XiմF-O"!,;7wvnK&cnz2ulmnw[6Owsg+Kƻ7g/|I;7l-i f" ,)\2P tYMX˚W!| RRP1L'Ҽ g .yD(ኔ+iyG~)(*\-)g'K*EO7ޠa&{{Lw:hCD|mf' K7 LJ"l\<.S7&PBW o9n Wad)^g]<$vY҉\l$gp](msO|6+7FG%Ob\tvzmG bYYyAǟax2MTr( ӧBNSĭٛlx%/-]A?rb;|i%Bz=K}X'OFkXS(!f'βynfİuwK (hAwV_X2ByYѿKo~Fa*h{+[]d] <)u?ｱWP7t֕#sy1^Xκ~*RZ?ו)&*{J¦h@.ww95v?Jtlή<5Xr󨑜,!džVFam'΃Br(E^o$!\lے>t umvٱRl3ʰ_yEOqؕI;4q7=׸Z /L}; ktܷSgLrkϡ dw-kNwOHrdUV/e# o< gڮ.0(bBdZfҵjISsiwߟLEK))l%[dz"8Rh!K6n3-9Eu]+~$~xF:a`]TǷtr;Z)%Ô7b5m*ēC5ba~ubC#"z jtLs%P#< }D4dCBӼmY[,͗Bഌ1gr{;Z:I@gW$>~1o3ϩȠ_l]VędȃPMvU@%WxË DK5C'4 'tXX(?'t!7xj__CPgZO=XHKיAٟs@7*P:}3ְU3| 8x> |%Kd쇀X=(=48}uIVZ|M@!aj$Rhiq/'Lp?Hri a|e'.U_|=x=1!c&ꛥ.Hx1O2<Jý~א{l݋E~T#fp'^lsUcqeY~ƗeUNmdJ0f#$ 30N@AfST]zBPF-*UED(jȱ4XX_b&/T u:ڮ]OkB5n% Ym%tO8954q1\bHȘyW?{5"==aA:ckN WNr>ODd-u`m1@Ҏ}, Iy(mY6m }iE\? EJ(A}Cz +Ԉs24/h;&,ĔO8Uj/ԇ;[7W?D44h^! %JXB6_G,(#% Z&)A3j!gWauNHK"M;jz9%W&M"Xy{귑Ҡ+-cOB J(2fa^=z 6oz9Oh<.@'F8]n}vJP܈GH("M Ti5@"ə_ءQq֊VMt6#Qsׅs6R%abzMI8IY槦6g~gz{e8% Js+bxhGifp%'㲒b5%*2LL Rԯ@;<(2!|;Wexqx IF ?EY 3ku)yJs1cpm58UcXNH&bu~j+ pw t6j0WUHe^Fxvz4Aڶnm 93wʀ ]{Nd+ᑥPf"'mepȳX6c4d=mH94`jQ&cC|4_ArRM5Bll y [O1c5۽PMpfKIhb?`AcĕwOIxuմ8M'F  AO3,Ȓ\8-jAɵOG8do.)/@S>LbH|XSt% 7@T&Le(x]W!m;?Dp X_׭{y(>ahU7o \כk@]~)6!GQ˛ZN&z3iN;N~7'sLS>.uzb$~Ե<Q*W 9396h;$ŲO;y&jj$preNv3 9G|*A@kD{QkB]zvS y1v7uqטtd,3LG[Bdz+gt(h3ާ(w峫J*:)F3T)Y [z\BiXD%GP>n̙Ʌhlĕ^8Y7w@iDSE CL)XjdTҫC40$K~kSv0vy~k"/C/7&lFnԠ ＋lϔ{1҅w !bXxfcim y$! {Z4U2rb[" Ճae94:*Uq312ՏE[[Rі[3CxyR4;K ٯ5S,ZnQVhᨺijDq/C|T ~`J#i#f0%})+y1ڤHp/i]Wmm+\b Db@uzBhgq4ۅ6/|fWo` PyU:pȜKU>s>qur&ʜTJT6WnVQ$I,2p7LxĘ#!Wm㝔ǺhCc̺8A-iCڠTD twŎgô(ʖlCϧ XO8KiHECLvl{Z~ f $w,U 5>ztg6cGeV$*.C<.{8a2bL2r㩾}Q.ҁҝ Kk~D5gYgFgʊyC,L{'nCo݅?w:=w{[ڋv`u+g|Z`ljYJ#ggi0PhHZwqU ~LK[0 r{Ѵƞ>2E@J[{ $#N ¸ 7 a1 g5Tmbϋ HH/[~0%̤%HBddTPFzkfԅEpȚ;֞e<Pڊ2MT|C}ӪcAȄ-D\3<*, UveR^,I=i zx,nb[ExgU]>tt%[sx|=Ҳ@Ė)Mֱ-Iެ-Z2(LbXU\!a |^b$kyuI3OC1PÈ0:8o >,ev!aU"c \Χ]|uշkJ%̥`.ˡ?{ua'D5WJDd^ڏJ. 8+MD)Vnom?#'嫺:t;z5hZ2nk f̮9?r*ub)T=h0L~1[so*O@G|ǧxj09uI6rWzi>s㪪"͙ȍgf_w頌dqVym9.s[52Xi3]}+ed|Ldnx{z̝t(ng\ta'|ߦD;i-F3Kވ?Ͻf(Q) pNCFx fɓ*09 O9\13mM"Cbpp8i0:0r/Ȭ pOɖ:I~$a6dxs*Way@fB"\"2m'>Ag 0R ɚ4E p9!ɛv (Xm I]ɣ"q.DDpCI-(a_f6>5~焪M~]-z?*ohq]w؆wqpZقk4GZ6isD+nlo[q.eN[kHN%]ued_jB t 88zĸmN]xx@?56BIBPp{亱EJq \˦iI4e{NːᙬɒZ%6#L˶ۍh.mi wϗV Q!NsχР(x$/o T=M͘iϰ4?Qi멻r[];@Я9f;9swɽ>`a}^ʶ숻){{f>Yzލصj=r]W>z]۞O~i1jGK%Z &bM1(B&\eӅTjRTAaX P`eBH~(:$I)` !TFkIòM< )fݛY,ۚJX'B:.\vE3a zQ"gDT :0m`+PM҈߯vAeOb2ʢRP1h6 SȎ" ؍"z`~u"L?zFbӍb54wAdtdl58mP1RR詛Vfo,8=idF*{W3 kg̋p!GTWSAZ$zUm!RYoo N~M֠an -0y=Ʃ%,k2od&tg35GCTB 岋aMru搬-Ivv3"`<6ukV?zsj$Ax11ue/vkHS JشJd·˜YVrVJɴ_+lXcR2O)<&:֗)˺?1ېc(94ţ89XNrAB`8 _dR߻F~ X:jV=!n{n O֞M(ДF|/ˣK t) ~>|T*(HݳIl?gkO'Nv` jf $bHSĉbf63,'tSQ]}Lj ^ŇW L7Uaf<@LCel>$l7Z}G熛wduzb_y4ٚ= ^lѨd}o Bk;̪D ~b=hި(ԫzJ; ;".F7ӝ.hWLj4}TQxaL۽B' (%T*UȔԀF*/jtZ6$[w^2[H, !:_/z wD:$Aj?g.5o-0V$els>U:d mZM88g@)"6&lfw g Cd)$#dDr2Nj;05 'C ?$+.9AQ{?5wo: Pj"lc^#ΖHCW@Y]sshڡ>tWf5aKG&*brDg{b0woc6H!} g[q1w_xիğ@i8x]DlO'^jE1x-ޜZRϹac]Vo.1fݕq&Ks2y0"U4~!ҳEX"IRCcN2Ke@B{Y/@ GJo~ʘzFp!jpOɟS&ngzjJnjaλPd!_0t/K|LV??X+M );9U;h<| 1PD0Y%LJuWU yulSpB}GGgX\V//D[9PPWr}6fjJ[P| 9VeCу&K}j6xbV·@)0ZQ,n⡍kUxVVL9iW]<^9cw{sYؖ|m1.&ӡpO(uF"(Q:Nl:%ݗ,(\*?#vk)Lo5΢{4Z nʨ>I_sa5 aqyhQ>f8>0!\ͭ.ˑo *sK1 CT (:j%$~ T+- ?3dUw&7PW;mb$wŒ#8M}ʶ/3qNӬRgyw`$}#!VמGa~R0:_kGkG٦F 3>hQzA4ul@ުk¶ 3=.V+m6.A0I:C9^yhCGFHcb3ԂFn:v(&sb[/G:mM`2r|c >%#$1.~6%:ۤRe(|6GߑHȥ߉)I(:1ÜQ$ NLjǹ ~Tw&ڹguͿڶp$<&(<yc'@|ìSyh9U [ E:b ̎YtG6l((>k3k葙:P.)VKa|0.OR-\ƞOi;d:"1=V=?v& 3e$oS:ˁfhF!+;%_sq2&Φvn  3 ?^ F ubn ϹɆTNrM񃜠|;>ĺ hVқWy^ ?d 7GSMs yG\(Tp|esPi5Dx;hr$Tc)MNO3C5,4@x0b3sҊyC7 Zi6k0Ub5zOnW((Jw䙰jl흛0Dk} _?fDak1L.x3bg{J+UMFjq Mj@mM3^N:o#PY3.>U<5nha%?@WZ/U7fҫw=N-26*p\([HcD\ezy44qW.^NrdQ屰iBE, ȭa8:MV_J23qYyBv1Z4#{"\ZEYYK`qK6$(5#ϗ<iio`~/ 6t)6c y`DZq($eE*u96u l*$R BÄk^_(\t!^8kT'P7'Z8^qJ\jmkTFo Uۊ7 NR4uR'5=+>-͢V{a(VVP5D ebO `é)4&:GTR]a=%d;ljs6Z,fBZV'Nz6Bm+餘eTcçx 6AbK5[ǜ3n szмYl$/q^1z4L*[n{vߓU1йmj9 da@`EM h/ 154JNzNfϳ nq{:XGGH5DcRtJU%CHS$O N;5f  4L{$}:@|:K*al?S/|L;}9|AU A~L CdSr;`jv[s ZsЀ1*,XFm$Erjvb fԙX*uvaD'=mm"ILmC9q¾PANQ!&LSɂ9^Z(I#nyX=NOM vţXoyQ\v7 խm蘬OB`{CCM^..VMf"6#e&L:D;1'&kY wYAKRqȈVm$Bhګrv_8^OGc>M.T:|`ޢq$aIjv)(7URG e!`#T7ՋA3ªH\ǵn;ʖ#$."7 <Spcs/%@>O:Qc1}{V*Yj_:l#\p߻SOK)n׾/)x1",%[ %7|Ŀ4xD5(]o>vwiw4KK)Nn$&yh[,H<}~S@{c"rxc vNיMg:,7!xprY0t^]Ɓfs aTknU`+$5(-|˶ Pd!??46(eGRY\E3~Ⓩk8WGbqI_cȥ;0v8Et#{ʯ^>$5^c9w!Fn܆iqD=,2֥Nύ|.:=~0*0]%?#  %)ɻHy P0B) 8}jB7G+0A!GIyf6h*`}@[}P [신0S92T7DwӚg!/ Bc{Tqy@FM-fE CTst;z|9ɏk)Z_ȕi>_FW VDkdD ꩤB`YoH Yx?u,꾷0_;fM,P^Ҙd>l'g5P]堎UXoyqk"w=KOzi' < r:yUGҋYʾZvH1)Knemftf6tgKM5wYLu4 kos{]Y f#o6Xowc{ChBtӒLd<嚰Y {W. Gk 謥;80Z8_ ͇N8[3.8F,7U Tb'ώ^LaCZ7듕V(\R3]\NϤm2BXk5G,խ vJլ够ɴYcMDYFtBe(?#^ve>#} NJ>|/QjZ8nj~K#~{J|@K.;Vx|Wk7) *5e\ @z qB/jxH\\}s[9 ?8ezyg{Ȇ-C<#;~65՝ MDt / f=A).t+\, c9> XK?",|vI P4Dks.̩ubVS=Zp}/' ib3,Tj-? aV~5 JX!AhyUk =7Czk[ls&sߥ4WjǹSn{XLSà] iTWH#;|%{\eVлb bF5²4|*eu :ɾV ~Fͫm[e㛚aA8Z} ~}y( }7mW q*5`"+\PtAٗ5O8\Ϭг  U<3pF`;5l;%JbT?A"I1YN}+<Ufp&1a糀H~b:pw[ }&uwmHC&B/lǗDU?t dH)  nH2jC H'}~dMTòp C)oFg_VŦa?M#B-G74/=W?܋scEhq̘3!'6h:TH=݉.īߌc.?Ӭu:Zʆ P Vn1΀A*ɴs-%QQ/(,(2 iPX,~܊z?b3 N-~(G;X|L+CײgAJiO-GF< k AБLkAUULcZvBS'eo+3Xz{r'N%Ξ(t[ {68߿f[LewPQe "9CI|o cOu8 6ˍ觧s" np?M#B&wnP>D#W! b~[,bv?5TFgd%JSme{mn 'r7 TLeޱ! !?&VwA)3z{}ɿp%kCLXI J` !0ޝ2%2c}Ju:RĖtg%AD:T] ZsDyvnGM|`.yk {PiĵaG WRyTk1fV/U0el4p4/săCoG:U'fX[=_{9^`%L?)[<>IȻ,@CubKAY%ev`=)@B.B2eeT NΘ^+9L~<&D4R1wld? 'M(l)>>[Eփ\+VՙQ9i `)zF%ޡo`-2ndXt?#&'UM,lQAORxn,f%F -\>a併 mkm {=f؋} GEfPg1s?"ޏM]=~ *3 ɲn_QMoTOTP'>#M(9u#oRj}r*{Ș#|[,l&i34c78o#e>B&$t'modN?f6+& !Q^M#~v"jґ6MGTFYHW`1\ U+LߡҦ_@.55b^[IG`K#,٬2YLʔ,cc6lg#aW]/KW^3Urv_``Ut;@o0^qr5łlAeU_=Om#!BYǷff7D&02[hRVakȵZ 8a]Jt:V56|O}kg)H+fA,.=l-dKjG|ӂ{ZDMߏװj@ԞdNvמlKٟ'HzjGʄ0I&ذ^"|@nog ^* "m6/xė{=/{4t`:AFBBRfuBA*%"H0~ȹZx o y>!ƚ ?!$w1ShIw>Rb Jb2"V|%-VC061$wix8dZ\!ZP4ֿhߝx%Y^K|p{443Z.4O 2؈3V"t b%M>>{~<땚d ĹE9]9rF $Hަ()4p1Ԇx]k됍1ސm-D ,v d,^6aءFcێXJL|r7hB2\jEQ&(:S3+Ӧ 7 S5 yp(#˦K+cSk_<qԦÚ$!A6 2!ύ{ezH|#t-9$a!OCԻ1X߁'aPX}OH+ q1b4XSS~xۥj9"|㠙LrlѮ&E"/|ZcH$W'nj1ŌƄ4yV=.Ѽ 4^*(Pw8xQC-ms4 m7 2y;Y^4}C(_tA_-79 ќ=C f9qЧWTɤx0d1U0X?Y=)#i(x9/|_c~yJ'V=݌hM[4Yjqn1ZT+əb GUǎ[ ߅3`)~c :6Ǿ~/EwUk7CaD$kx3g#Q0{7˗ja'NEϗq5uG?P˄]@O$s!p*3fr k2*?a%pN;F iT.)Á ź?./N?[ me &yJM߼~bu!5-ZV3uR_ȁH.ĶڹjKt{쒻FNbXu˧x`_qôڅ|>ZzI$ %g5>,t"8{ˁ'"Txg|:_ _g4'@wR@O r@TF6Yx~k2ju `>z]gɔo|ϋ/"W:^n3a=Vw<񶓾, 0ijhA)Y;i\\چfzʋ}m=Ow@(ÞbgE:/F.2'1,?p]M]ew DK~k!yǎBx$?-0 mSDs+6s4]>sYoށ=m$ey[Nc~=$ 5Dp3 "'NGh׹98k~͍Wl+xnX< 'Nΰ"xوykjŲoozҿ}ސ ca4TbFaȋ{0}sG} O%]:qUh׵EQܓtsnU0Lff|01ݮR>&+QZ/hwD.1Z箵 w,neOx- ~F Xq[((HO8#{ fZŕ<2:HI(ھfNQңD.$Ɖ2"Y91Xvfdxž- e̫1^e/f0u8]9=w',[p,{'upۙcW5'>o[OQ)xWS"%ѽ()vYE<"|һ=5 Nc6=z+36:}0s_pM¼}Sq@9fMoMr.-50ZW}eLZ2xU)YDzlihvuħ-~6د9߾"*OGK7rG姘{r5QѭTU2ˎ!E{\'2ZԱGos 7ldШѱъaͩVkisjqٳ0:ϼmj&<“܄4bAUFQ./r4z};gePB Bm }-ʻ p$l׿b^m;NDE]?_pQRhL6wl,c?R_ҋU 6ySMԜcy+u9Ω ahmHJ`lhԵπMJ#F_D2Vy5+F0#H#?>6Dc{ky? 9n9$6cN+Jawz9A@)ĪWM_U)?+ tSS]|̛s0qՠio`wM %S$8֜IAC|Yi_=~qS~(ǻ: :@ȨX?MC/X9458'dB!촷)M,zOi)N~ݜGɫ- ^\l\(du;EHFHʴ8"#-]d{t?hO8ihe~ :)[fnY ;.[r~ž_$.Rz:hDU㢞Ab)m?U]DROΌЏ]~ A7%RkWpGVIg;3)Y&'^<$STG3^Lx%s#F2\R*3S4$Q@^5ϯ$yj Yb嶈 [8?.\Ef;MpD"!fdhx`wcᥡ%ep֙Cj M 8mmuEPG. e& , BQt0PCYB M m.u\mǔjLGFqO` C!F[D]F=6.Es._\ء]R13,KSj11E_bmWA@R衐dVD5H}%X@Uo"Dź5-b&C$O; L;khs|[ )6%5ch.^gF$2$KѡPssg$'1qb!n+ +WSdN al`X'єc/745;e.JkБ"1 v;恧e*А?JhF݇s*LO-cFH/"Eãub$R4WJRDdUϏf0"23;Qnlb y83!]u:^Iy(&3]+܊``pԋ5WR̕S$RL#\3s@<y5.~K8kůpOdۑuGBrV~*J4+ՎsѕfJ[)VyW: ٌ|r 'XB#yF>$%F!"ACħtUЙK̜% Zx|sSˍzlb ^z3] wU,?"c~6^8Rظ 8+6FFA |laX X;Ƙd(V&'qx HLFWnZCf&ℝ~"ɶ0@dw7b1g~>@\ԟOIIzIde {.-DeNdLV'&C.0.|ӛ ݉hs0}mb6gљs.3e<2WZr d2.V\v2#8Ф5pX #C2 (l%<O{wv@NYO4zU UdL 'OODtfY#uwvrFB́8?`VVAOuWpNA71VoOUKϥjУeVrŚ3?ҟn:r |؊Ѷ D(YIW-ESw+(;g>z'2֌ji4: Iv WU2®5+G\P񨈞+Є)\zB75!}yONM+\yͼ0yr6n]s\T*xMܼc4TִF62 T 4*Mf_],~v:X77HĦ9&vzI,]:߹~_MnIkVTJt:8_P+"qoO]SW!G.{OP7T6md Ɣ%Frz'NqV)>=NItxnTj|n= #to^F8}taYYJ(pfDeڹE 9tGߜtvD2ѦШr)YA ͈$IICQHi;mB"b22"""" )H!"z[6)!iZ>2xA%wxs˧EbgB6OU, 78=XH3HTRkK"F.41L0UC<(\F!AN"ٲtL>c6ְ\,"ǽg!.|Ydٚ!`_L%ِe㿼E3\!= /u)*^sX*{3*tL,u6.ce5&%p|{0|=@oGaGLvKvI"4ShZjSy30OD@+cx^<_]f?o3ϨR:v2s`7p#>)]oT`4S(Q[gZoGx/  F@% J#JoIcBq3C͊Lr<(G7ng`BpY^h~4qTe80|1>Ua-)Xm[w6Xs/O*%JB\)9pB Ų5.}aW=Ɏxs"ƮsWrsIr!e{JQ.{E?5pd8}O}q̹owcUsFx]ZukA\PěVLa|[IaW(BX`Hopتn3K_`΀|)Piut#ާzH&21W7 j]W@L)) ) )))))(N1M#$y)?r%/( <D>)B52gI('( ' S(((C'M((N( ($%&K(''[TL0?>8  !*16;GLQXbjpwzKLdЌ7`㇓Z "\'.38=BGLPUZafloswh| Ce6J  $(,037;>BFJNRVZ^belqv{K4 \aelqw{ p -F")3>(9?DHPWI\Km}P(8@`E0⤖n0mMawj yD'x?#_-wuIe(˭qs:V+y;77Xȡ4)"g yA+%{R Q};F.Ҷ5 hobskgNbr"VC_:)'$~D]K5<)ȳV +ub -L14]-"ĥ2ZY)d"T"7ol; Kvh_CM)WK{صi6GIfu!Vjrf$#?8M(4 MEwZZP\}٥ڽ*J咷AB 4hܥf0G YZb[Kwt=?~VBQ昅.>fbm3Y݅Ng=~_Q1@gOA?p#T)J)AB -iIj{`2(xjY{ͤ!LY=EA[\;ooF!yr4^G RYhtSCۉ637c[ɵ/Ls%;2Rk}]f6 ć{ˬEFow[jy6ysԮFe+Wesx-% z#Q^D벫B([ X<0ZJ eڎ ڨ@AeWx:W;;zˠ >dt:~ ><yD+ׇ4q"q4/ !ѿޚz!<_6O_y< (> $5"P_ 9qUd z3c#1_AzGk@qP GZX Uҥk=j*-2VTBͭZ]&F+LZyZVm6S4c"%S|e7돤U״_ _*IYr\ _;u=v`VԠϽ"׺l<6Tr>*[re_DH:bƐk$B*` okEJ?'c`h Zk@ʃ/#0š'+u1;]QQqI"z?: ZH#3_. A/&ȦbT덢9nЙ]LhϧcTOܴ5&7ؔpL& $6zqlqܑs*S׹vv^sYj̳Mc׍\SL wLha(JɯXW_m4fGl<; zK`zt1|rmժJ$j.Φy(&l*'g8P< КU"+bmqf'WR/РKr EvHv/f/P7 1ȧt ^La/+Ce Gs0姎Ű'$g)nJ־<[SVdd'H;ze4߻:i"Azn- 1@:#VmN{7nx^l̳ian9s2FP 35o{^B}'R]K>eE|0v\܏x2t~mOQL(DSXagn´,禾FZTq#%ӓ7љ1cr-ӣ܄zTss~ Kx jeѮrHN43)\@9 C(DZ <3j4h;RYcaϏ~̩wsoPl I9T& R*lNL).B~ѶGH79EP_)˓u%pc%йZe l/(skӓ4VИ"ͥSTg)uL}k.:Wk!Nj%(2-qPj4F㊝[["#P!6\N0;5Ccr~6 Ғ5ѱry9V*Lڹ,?lJ+G˲o[FI(:eH؇sl+$7iV&@Fn?wa!L?{}I;zTR$2_ OHf©gZ+ӼEO6HM䕵%0J݋pòt@{+co||CE3jq伟Tzx6[\2|DP!&Б`nAT&YdH n mʅ'L|> l u_s}ahIT~|yR{㬋J"tES]6E|{?'֘+Tp5FI6*Zj!a$ÊACŖMJB!2:`KFID% bIuo'P ,"B|\b86[+dK5S3 qԯx]#uo++ؕ5zM[,Ek>ǰ;scNK Nݽ$keCZ#mk @q둧 E"'J 굺]g+˅J;Q*³Q4Grr>RPuj]R&h_.\(J},M$~}VUy[_b%nGrj蘟Qʺ )se+_je66(\I+7&V3I1%[@[ˬ9k+4~]));%zѩ4e1R/&Ε؃thei%@!INB{9Tkᘍgg|$TPI,ϑBdwo+wpYid~vaxW"C1LD]H&SSbcRo=@fexFe{`{n"7_$9|kΊ))>ܟns.DdV㽘b 0vՕ#>S1tRpvDxQ)Ajƀ":8Wk䮱=xZ T)Hme?]B4 ^w>28壘90(=% (W2eV74gYZ.sh.p.e.pyABI-tag.dyn_aplti...fo.erhdrccc_tbssaotEUCT._ &$9 GLQ 8PY aL%n('})B` n |< a@\0(L@P`$<x AIAAQR1bl1t8 &8B#""B#2 Mhb d¦]ޝm0UtѸV1H}AŢ "E -? r}Ǟö\it`XC8,rsS -z^nZw/RYFOXrPs&x}Pd,d!T>[zL95;hSRsWf<<)&Y4>yzXNM91;4RdVtX705x S| Pцaԡqaф&LD@:gY`ӷ"fP#$9tS$D@e!Ț(Z!pzb.t}_ʀn*hC0uuhb,Ȋs-ZV+#4dx&5-/x+loI!. ;DO#/}]ŀN)CɉB97ţD:ȒƆZjO ZFɾh PszRf!rC0dYpLak8YJ<;vͨ`-oBko)m?7j*ɍiUITؿm ?*D}C5w3yqO}9پy6do͠oO.8.ͷ^Y6;to]BuWzmo:=v=71nhF?NJK- qۘ|f$,漏1 oZ&68h~%>';`qMgnGuv9PUm BM9JSG$I涼Os#y*=N(~Wۂa, [ p補Fm }x8\' F&/AoK([&;e "g]r\Q;?Pwr4b ^s+ݐ_0@k[;b/ IyP Cl_3+Qأ8a =>V|핞M#\@3ʮ\o' lyshM z9 N$lOB@fPDEŰ#v#R^҅b'ױÄ}R