From 9c014a2d9100924b35b912f577df842be03298c9 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Fri, 7 Nov 2025 19:00:25 -0500 Subject: [PATCH] Release article: 4.76 (#35266) --- articles/fleet.4.76.0.md | 124 ++++++++++++++++++ .../articles/fleet-4.76.0-1600x900@2x.png | Bin 0 -> 52593 bytes 2 files changed, 124 insertions(+) create mode 100644 articles/fleet.4.76.0.md create mode 100644 website/assets/images/articles/fleet-4.76.0-1600x900@2x.png diff --git a/articles/fleet.4.76.0.md b/articles/fleet.4.76.0.md new file mode 100644 index 0000000000..74be376e43 --- /dev/null +++ b/articles/fleet.4.76.0.md @@ -0,0 +1,124 @@ +# Fleet 4.76.0 | Self-service scripts, JetBrains/Cursor/Windsurf vulnerabilities, and more... + +
+ +
+ +Fleet 4.76.0 is now available. See the complete [changelog](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.76.0) or read on for highlights. For upgrade instructions, visit the [upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs. + +## Highlights + +- Self-service scripts +- Vulnerabilities for Cursor, Windsurf, and JetBrains extensions +- Improved macOS, iOS, and iPadOS setup experience +- Android software inventory +- Lock (Lost Mode) for iOS and iPadOS +- New Fleet-maintained apps + +### Self-service scripts + +You can now create custom Linux and Windows packages that include just a script (aka payload-free packages). In Fleet, head to **Software** page and select **Add software > Custom package**. This is perfect for self-service utilities or bundling multiple scripts as part of your out-of-the-box setup experience. + +### Vulnerabilities for JetBrains, Cursor, and Windsurf extensions + +Vulnerabilities (CVEs) in all Cursor, Windsurf, other VSCode forks, and JetBrains IDE extensions now show up in the **Software**, **Host details**, and **My device** pages. Gain better coverage of high-risk developer tools. Learn more about CVEs in the [vulnerabilities guide](https://fleetdm.com/guides/vulnerability-processing#basic-article). + +### Improved macOS, iOS, and iPadOS setup experience + +During out-of-the-box macOS setup, if critical software fails to install during setup, Fleet now cancels the process and shows an error. This ensures end users run through setup again and, if they're still running into issues, contact IT before moving forward. This helps avoid misconfigured hosts in production. + +For iOS and iPadoS, installing apps on company-owned iPhones and iPads during enrollment is now supported. Perfect for instantly setting up kiosk devices, shared iPads, or Zoom rooms without manual intervention. + +Learn more in the [setup experience guide](https://fleetdm.com/guides/macos-setup-experience). + +### Android software inventory + +You can now see applications installed in the work profile on personally-owned (BYOD) Android hosts. This gives you visibility into the apps users install within their managed workspace. + +Learn how to turn on Android MDM features in [this guide](https://fleetdm.com/guides/android-mdm-setup). + +### Lock (Lost Mode) for iOS and iPadOS + +You can now remotely enable or disable [Lost Mode](https://support.apple.com/guide/security/managed-lost-mode-and-remote-wipe-secc46f3562c/web#:~:text=locked%20or%20erased.-,Managed%20Lost%20Mode,-If%20a%20supervised) on company-owned iPhones and iPads. In Fleet, head to the host's **Host details page** and select **Actions > Lock**. If a host goes missing, you can lock it down fast and protect sensitive data. + +### New Fleet-maintained apps + +Fleet added [Fleet-maintained apps](https://fleetdm.com/guides/fleet-maintained-apps) for Cursor, 010 Editor, and Linear on macOS and Cursor on Windows. See all Fleet-maintained apps in the [software catelog](https://fleetdm.com/software-catalog). + +## Changes + +### Security Engineers +- Added support for software inventory on Android hosts. +- Added support for npm packages in software inventory and vulnerability matching for macOS and Linux hosts. +- Added support for JetBrains inventory on hosts. +- Added vulnerbaility detection in JetBrains plugins. +- Added support for VSCode fork (Cursor, Windsurf, VSCodium, VSCodium Insiders, and Trae) extensions in software inventory. +- Added Santa tables to fleetd. + +### IT Admins +- Added ability to install software for iOS and iPadOS hosts during the setup experience. +- Added ability to specify VPP apps for automatic installation during ADE iOS and iPadOS host enrollment. +- Added the ability to lock iOS and iPadOS devices through lost mode. +- Added support for locking and unlocking iOS and iPadOS devices from the UI. +- Added configuration option to setup experience for macOS hosts to halt if any software install fails. +- Added `gigs_all_disk_space` vital collection, storage, service, and UI rendering for Linux hosts. +- Added new server config flag for specifying the cleanup age for completed distributed targets. + +### Other improvements and bug fixes +- Added link component shown in the host column to the host details page. +- Added flash warning when an unauthorized user tries to access teams settings. +- Added descriptive error in cases of manual MacOS profile download failure. +- Updated the MacOS setup experience to use the new web UI. +- Updated the UI for adding new scripts to the scripts library. +- Changed display logic for the organization logo component on the My Device page to prevent flickering. +- Improved performance of `/api/latest/fleet/os_versions` endpoint, especially for deployments with Linux hosts. +- Optimized MySQL queries on `/api/latest/fleet/vulnerabilities` and `/api/latest/fleet/software/versions` to improve performance for Fleet UI use cases. +- Optimized `/config` API endpoint to use the primary DB node for both persisting changes and fetching modified app config. +- Improved live query response times by adding a new server config flag for specifying the cleanup age for completed distributed targets. +- Improved query performance by using a lighter-weight query for checking if a team is enabled for conditional access. +- Changed license warning to only show one time during GitOps runs. +- Updated to allow setting an org support url to use the "file" protocol in the url. +- Changed the default name of Host Identity CA to 'Fleet Host Identity CA' to avoid conflict with Fleet's Apple MDM CA. +- Updated host details run script user flows to include a confirmation step. +- Applied singular word form to GitOps log messages when a single entity is referenced in the message. +- Updated the "Setting up your device" page to show status of setup script run. +- Deprecate `browser` in favor of `extension_for` in API responses and JSON/YAML outputs. +- Added migration to clear the `platform` field on all _builtin_ labels. +- Added migration to relink missing SCIM user data to hosts. +- Updated host certificate renewal flow for NDES, Smallstep, custom scep proxy CAs to support $FLEET_VAR_SCEP_RENEWAL_ID in the OU field rather than CN. +- Updated device mapping API to allow an "idp" source to manually set IDP user mappings. +- Updated styling to be more consistent in edit policies view for FireFox. +- Replaced outdated Firefox icon with a new one that follows brand guidelines. +- Allowed testing a new or edited policy query via live query while in GitOps Mode. +- Fixed missing "failed" VPP app install activities when installation is canceled due to MDM being turned off for a host. +- Fixed bug where uploading a software installer failed because it was "not found in the datastore". +- Fixed missing aboslute timestamp tooltips on script creation date in script list, query modification date in query list. +- Fixed bug with the ChangeManagement component where the GitOps checkbox local UI state was being reset due to GET request after PATCH request. +- Fixed MySQL deadlocks when multiple hosts are updating their certificates in host vitals at the same time. +- Fixed an issue where longer variable names ($FLEET_VAR_HOST_END_USER_IDP_USERNAME_LOCAL_PART) with the same base ($FLEET_VAR_HOST_END_USER_IDP_USERNAME) was not processed in the right order. +- Fixed UI bug where "Show disk encryption key" option was incorrectly displayed for hosts enrolled with a third-party MDM solution. +- Fixed WhatsApp and VS Code icons not displaying correctly +- Fixed bad software ingestion debug message and added filter for invalid software with missing names. +- Fixed a bug where a software installer could be installed in the same team and same platform (macOS) where an App Store app already existed for the same software title, and vice-versa (App Store app added when a sofware package already existed, this one was only possible just via `fleetctl gitops`). +- Fixed listing hosts with `populate_software` not returning hash_sha256 for macos apps. +- Fixed bug where batch setting MDM profiles could cause a nil pointer dereference when processing an invalid profile (e.g., cannot parse mobileconfig because it is bad xml). +- Fixed bug hiding the UI elements post install script output in Software Install Details modal. +- Fixed software title host count mismatch that was caused by including software installers in the count. +- Fixed a scenario where a wiped Windows host re-enrolled as a distinct host row in Fleet and the previous host's page could not be loaded successfully. +- Fixed an issue where a host transfer on `mdm_enrolled` activity would be reversed by orbit enroll. +- Fixed a bug in live queries that caused `livequery:{$CAMPAIGN_ID}` Redis keys to not be cleaned up or expire. +- Fixed inconsistency in GitOps for App store apps if no VPP token was found, so that both dry run and actual run fails. +- Fixed the software title counts by status to be consistent with the status reported in the host's software list and filter by status. +- Fixed outdated tooltip on dark background logo URL field in Organization info settings. +- Fixed `fleetctl generate-gitops` when MDM is not turned on. + +## Ready to upgrade? + +Visit our [Upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs to update to Fleet 4.76.0. + + + + + + + diff --git a/website/assets/images/articles/fleet-4.76.0-1600x900@2x.png b/website/assets/images/articles/fleet-4.76.0-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..e04666c2d208679bce599df04d23ff20f90bfe0c GIT binary patch literal 52593 zcmeFZXH=726E=DSQWO+;0OKp&r=f0Q!p`m%i}!VHUld^05RZ!xc*PO|^^qdg(n ze?H27fC&Hdk&4UrKcArbzg=tlvu;LlV_|6iS^zt*6{st|jilc^fAdDN zR_8D*hPStG!6NhOSJ%>_GOeM}V!gJ7^1`#s#5NFCZ_kDU;+re=2 zn{mj?Dgpbo+0FLv;jd1dx>dRA_+#oEt9KX=dWuFd_w!~C`SD)Z#R>keg9rygD*P_N ztMBv)_Wyi@T29LT_v0%X-~WF6mkT2J&*z&;|JR{L#0Tiaf4==Y@n2E@1()o9ECTv# zPJbQ9UzhneNc_hq$o>rye}lx|An_lIfc~<~zr6ZyCh<3E`;Slfo2LFv%>REZMMw}q zP~rsz{b8CiE|-Q%e@`P52ivO#<1kXQtl5u8wqEVEYRF{!)2+lx`qQoK6rBxjH;MB*`>Y&O0VnOK%^Gtr^kE+1DkbT>`E)PTM5v4 zU(1=92{dZjqY>(VTlAc*D$S8TBc_CRZ`V=7&WN_AsUzODkx$`*G4f87?Fraw(?e;; zU*+3RDQZeb=V#J+mmA2Ra9DWN(Dk51YBuxG?lKj=v@`L| z0NKw7KB-X4Puq{jpI+aazmZc`a#`tFr5bYT19AE=BCM|K3SQP`PK&&^Jx=WY8jrilTBaZrZUNlyuvJq`!i5^=Gs)Hw5!~O29D-A_(rHERjuS`f%VcS zKA&>tbImywrOuv9qie1L!V+g6(ylA6rf4aynx+F7VV^`^45yX-EhTfHayao7ZX?hB zFjLRth9&j0x_D+u1_UZEvhTeHwJ+_to7B&!GAE{)O71pc|o%2cGv1H#}VF}+>4pCsFU2oFTLU049$;HuiHLd6%7`jO> zaF(gfx+spvv}O7o4+Oozrrx(7O&3Vpw}sg@uFPg}M{%IIIU+bnzQzJ5Up{nOdtZKs zM^WvHpV!WzN7n6-kv#E$)iD-R#{<*!WW;C;eyr3>81Y8vQ+tEGQ~SN{Eoie1xqOiQ zvXtQoTaYbfC2dD2Ye;UI@rm5sA7#c{s2c9{mCwP(6RuTMtd3=W#AJaLlZE`@I@fUJ z+4dVVI+1&(meFJUj(RW+t$G-G&QCfsZz)T+gk8q|YgC+TXN~1;4ikul0aU5mS(EPlYY`6MjeQ&HoA!#A)9|Y|eg{EJFtB3M; zVecsZbfoqLZ!d@wvd}zVJA*DYCTzmbWq@(x*-IH73$iq-p-hUsWDs zh4H6dNsp(O)gY4v>vr;4n}!u}M5JA+eXHZ*m3M#KnEIyF!F8cDt0S7^9PeU@;D54h zM%n6IZNn~k&O|mDZTVS{@ZtwK!VaPiHqIv5SR~g=2h>ukevR5^q`>;hLgEAQCrbAe z2k(W3HH@7`&^v!~tsBi0#@B&;bFr@V39V{<jKcJvg07_K7#Z=IGH~Sn3ZCe1%y>8B!he!i(8g@E>0=f_1M{J{+uAew2=!-Bg>P#8Jmv>t8b<^Y@yv z3v7t*OqEUG_XfD9^%kb!li&L`8kTl+(3FAPv3eosX0v3t+z&UizN8BM9NAa5b0ao6 z@J%o{?vv<+wF@0miN!`ANCUnzDt_>;a6P(;$o#3<+9}ANd0S zVjmR|j3N@PU6hw{QR{a|6h-7+!llP4#+>>K4<9vL4wqsp|2;$cC*PLc$HJy?zr_wU zFlplHwZ#=V2%NdGk%fd?cb+k+&K>rLbZsyo15#U$qv}tO@t*Q^7*>9*}^RifF z62(HvCoFm11KPDY6w1@&CK(8p;hxIqKc4CeP9sY;+K~9$$o?HUk&ZA{iZI@(O=@43 z;pxqNR03WLETI_Li2VjwF5(U2HD>Sr5OXHX=F@vy0-)sHx5hbtN`S9l;+pQ9*DY$E zm93RE8<(rBJ{J{2&^*0)RyNGkLj8Yj1CNKz)mZqhS&DL}pKxG#iD5BGtFaL@AeX*TdK zH8tyb3aO%N>&OcJ8*XxpknMg7E4_!Y=p+k`3&lJpo_=>Q>r6896FUdCUPlcVB>!dR#80rlXOe|%ZGWjj7Jf3f^X9APZ(-16)HUS;Rmxhuu&V!0e) zPn>3TAVx7BgNcY+jk0Dd_x1N>^Jaz5#}4{Lon5#I?8e zu%@oXX)JIf@I(s2!+Grs=>I3^=Hk}5-6F3=90;h9_v@O5$08Wnagj&!CcwNye>AUP zxbXvb7pg9d4Dlkl-NKBOAx~@(#}B=4mlm=fpdaWZG0egr5~&@RFNHT^?NUq@mL&AiNrz+^k= za&lH{AxhQU$+`aVoqQjAj@M6)j5SC5`7#jr@l7va#=rldY%2hy2jLQz771J5T&AxF zz)VdB1gjf(eItTTyScrpilcYV>Y(u*Z{Ncx_mfJ7VTRuQA5_2mx!)>-$<{Ud^*WiI z^HRGWE^J3t3P&sU*B)dRT{+rt#^XrE3>R@PpEaPF<9$Hq+!dt%c8to@Wh`l>@1L7- zUe4QrN#B*;53@ejFXCPJv?|IMo;7wL&v!hvYyno`>N4m^TRDKlo*LWJBLhLQtt*c7 zTaB27`=@uTzRbI{Rv`k2dqs3+n8Z7D&ZbdUOxquqxP*0ym*lDJr^LsD(satU4vN3+ zs;Sa7Txv{Gc&t7M6#6S~PV2G!uMlU;Up=3LlUqyA?#Q7_(JXioXkdNMPYm#iT_ze+ z(=H$MHw=9im3y-#ETKc)T%KitdjGJV#{eZ~px&O#r`I3!Z(3?{7b{T}vSEH9b9NVx z;hu1e)^7d|YUt0`6ihP%7}PC0ysRq!c>DXyMc(<)Gz>*6&VVz~h3Eu{CDGkdzd|U^ zg7CU_h?lB*5O#?42Q8`hPu#DERUuGC$*sJ4GVsd7^@S^@-y2~KwYM}hcnHBz=le5* zSI!6jk;ZMGWrN3H1+qrWfi|%vHsOLg74xlNQ2MP^%#ulQPVr;q@@QX6Uel=zj5PgXAy3CC|6c2cewpmp8KIMx{hu_)%7CpBZe} zf^r$>-_s!0n2);V)B5eq-g8D6)tLN_&Z7AP%Qslq-!^u2)Edd1iWS%xis$w>S~gz( zxi}SsvP{ZShzb0Kmid;VPTh=w>l~0#DG2f=AtM#y3NVI{T=NVu$sdQ=i%IE4TzG}0 z-Ns<{^=)c|6-y}(N#JVe_XDNnaORF9%`27}WE_C*o^`cutGFbPoz7Xg^|G=UI5w*F zR?hH-HR;&yY`+io+cEP;TMPIBQzbC|L*=%AU91tv0)O|(2K9ym6clK}gFMGxyPy8_ zLZlOnp;@>f1^aL4QNmB2cv z&sxvefj)x)PfTVFTEhrWhimm-4#~#+W_z*goSV*ds>vo~_YbO1Wbm`7#s$pQfO{N2 zeLPMo47)u>d9n?@DILrXGm$i3yTsvH^9J4bk1%;l-tflOyg#V>fwjT&%Qh=P3FY}0T|(ep zrEs>OPUGI+2_fX3aMR_f6Wp5D0MByQHI5jZpGx)~U0;8nC$K5d)X_8l03_*jQ_5E1 zvr)=TPMiMdGP*mk(Z{@D22~T~^Ci<9mUvu3XlzYdU4OF^rFkOP*sJaP{xma;elC)B zku6khwkg;BveD!Rp9@TU+Vv^Nnn?%aBaR9Z*YAjHshSj(L`NKl?Cq9 zcXr;%WH;K~w5^05HmoJz)!HVdbBNw1ijYHD|5Ofuw4ll5R{ zZ_Zk|u>y{Ia_EJO%0&LcClS@2*d0I<<SiEG;LKi-SCm`%fI<%3^jSv>z37Hr7R% zQDe1ui(pa2-Sv@);MgkOCUq^~?ZSWcfdTi`ShUgd6neb8(izWcxZYyCAmqDi<+41b z$n3)cWPwlD>>MyA20?CGd6SCvbi0`M;HhrG`Wk5Boy`$S&%V2T@i`thoeH>l!pzqu zGuI2U$7%mFT&Mo=BEFExpw_}GnPX9?6udW{#)bxH;&hP@I;;5i?6!c63^i^(NR|!P zQM;xIfs8}b`BU2B4URn_4AUsF57efF&@)xR@Z&!00_5zNx56&nu6=(}I(AWveL}LQ zL&KHp(TB;ajo~YM_Lz27uVA-phD&R`ee%LJluGK~;*__C_a|uz z81D|Loa;Z_={NTB;=r^5kFN#R8$#;!FrUS;Ok#ZHAkpJ^ApX6zK7cR;GX$X<$IzrY z8sqM@tAQ|r5V!hwVN~am3Jc*Xkt0mv>i3>WIff{tKZR?1-Z$fL(pkUY$Qi(lcDwL| zz2&=Ff2CZzw?zNz(Zncq4=43z9-7b;TjQS^EP~F-_3U5nr8B5>o}msm^yMDe94tP4 z>D#WKYK|KM-?_>VmmySt5b72bb_7@r4i=hIjZUElpXjOPcwp9>=+jr~L z>fHr}^3@}1|8&X=#9%1 zNc@W)ck>x_R2`}ay0*x=#r0V}1g$4( zCLzh(B9xu)kV8SK?5e`iU=vZ$%Ie!}e8QBt`Az{0c>D9sOc-et!5f3oGCk&I9g9qu zWhJwxt5s<2&=GQAbHKYmGonifrOQnA{7pM7y{e9^)h#Ts=a9?ICr4z_e-~_H}pn5O)~VH7w(?nj`=)(pntqGDDD=aPUT7Il6T{(4~9Xs}*iCPOYB$J&E^@eLu0x#8?)Ltwp%;n&$|uaU?~JPeTJU3pJ8O8XOj(0j1dNWMktn{PqREc>;hvq(rET_l>ECOGhlAo|ka=2DE?W;8tHlILbZ z6-|z@rL5$LC&Je0DTU{i{e{!(c?n~z{T)@hf1<(;Csq%w0K0nRzUq1;x;}XeyQ(K8 z3mfABU|NTdkZzo@vWX2MHXau>v%mTfHE(b7hNHK;(K2gdqWBf<{(}`UXRLq(MyfOG zdRVh46Gc@OHH^W_+2RaW+my8`e?R;68~L!H4mP-vvlJ$uGo7B$y@z+Of$Z3|G?J&g z_FZR>n=T172p4r(3C$hKTM5i@ZR(r+wRW zKjMVEHq7PPWZSP7={B7$60m6tddX^!FIF4(pnlRC-Frc1}RJw zOI(&HIZ9qBT6Aqo?q09e<3zD|uZ6+XfBtk4^CDyi%GYuBKsKTD zJ-oDDKivs0THcRFoMPZTIvNHLw0Iu!)@vp}n+(JDFwgNcnSxNQj1JqdM$p*^QM9SX zw+{T40-YDrdr|gBR?S^ES`Evrfi1h++^e>mM;cUxq&?Vc zuuM*0#6(r>b0z^J{Z5hL6S8B*O;r_)wo4<-@&%8(X==)rP~J=K`@elZYQ7|%J^VwJa0kVST49l`SGR&SDYXR=-pL|BzfOkj8czq*LcB?M7(gLEF==Q2oOwb@1|IHJN| zX23HcFtlDaF>ykc;kE{uuTzKAA9MbQ^$PhPpqs|FwBOFjR}*MYwQP4N47SI(+uVKc zbsaBz+%6M+$F3Mc&q%I*;+NB39%nOk-Fcsar_%iSn8*#8TkWnAnTOuvE2lN>_pTAg z%ZY*qN8<Gw63bT&Q{4|? zr01shEMnn=doUahijyBpg8N-k)w5eR}(4e+#bJr>lh?BQ&00}M33VU zc?^p`nk$4|HoR%}UA5*MU~U9AK2{+VG2_zU5y9Z`B?~Z}LMlS>{9S~dI_-~VEj2Zv zVm7y{Ron`uPqXXkDdJ-Y|JGeyuxD%go&;L{2^Fg3#;_M%#8wca`v<7`Tqs($T4kX4 z_h;_B|LPXEZfk*+2WS@Ycgf^TVT|V>2RpzaBbn|enr*zqtQPz5v*3mom{cC8XBiMs zQ&6N1eaC-ZjK3-1<4=J8<95&)IUFvnN*IJ)h0LE!X7?s88m+CdQkmUp3?UN?}-gw&I<{6 zn}GO7a04=e)jHi{V_g#ZVrgg`D`o9$p5%lNT_NCSOCu*PLK*uK1sPL{EtLC51QvE`~kDZSe#OhTF0F zZWrbUUKjCwokeU+W`b-Y?O>z% z{F;ZIb>OK0R+i$?cr$_WUttGj;BpC1C+3i7d9M{7E|@O-=!2WS(<{K_{saL?8%OU# zRE-tuFVa`RCFDu;8#US21U+UE3-4s*Nc0`>(Dv2Dk*3d<8}ob3OUX$KGHyHXw4qP` zG_ueooB3Qw>xesY-7?&z&@=go>x{=b9dMc1p@K9g@p+m(v z)-Qfq7~h397`yPBj1kQu5os-JO_-H;87s>5hDaSv34jzJ*+OtjU|}4Qb(WBTX}GV7 z^SG<;M;v|Zdy*g_F^1+!PP()(8J?rpdz3QJ{3KfQ(ur4-;gO>WFR7dEok=56`G!mGEr{= zJzCia8SS^$3)TW>@u3_FN;)j+0=*?_70qB8F(sU$GbPm?&_Kq3{cN z$1gtSwNyD!W^DOdK0rp{2-(qlogM1Dcz|@RPY2<9>PvJIx`36)z&6_(UNtuU<*0IH zfeHSNwPL(qu_>ou^|VzJi=O9U^EAy^4yF2_N=EWkQ^V0uEnM+yJN->;hPViqxQSKB z=g4b8Q>ZQP^({)5`W2M4stKcJOTW(S?5mIbMjP$|3&kz#vv360PG#=JAe-rg_Lr(c zC@Cn>!T~yJNr`858~G&dyV}%Jo>Jy>xi2%xA6;&9 z5V2J;KHytS@c2?_BiNj?{yf^ELnkNfzIXdw@%3l#q`rO0IFHrd{1rlWKwrL=qm>mJ z#1q87^qt5BOiNWxFG{hg1)#FgC6pqm?~}m6FSPVd2J%t)e!2!V;9o%(45m`w1D(Po zq@l#`4zk|c9r3Be(tX*8!m}HD?bVxyK9b9DcJvyj_v&5&i*AC{{*3~|o4dqwOeQH* z3m?B$3KK2}kU`5}5LdF2$6Cs3O%bcR==7|;<)|`awecT?#McBP z1c9k)vzu;JJD#yI=x#&=Mb7CC^|8O0Acaf|Y>x7}cJmDC!#$A}A78qNdQwDta8Ji0 zJuD68AkRYoX{s^;mw@Y8aV&cs0pWopZ0V(McPO9t%rLbU^mx~}GvPQwq6yZ0|3pp< z8e8Z968Q^M7#c9isrmD)mSjuB>NB`^!bB5$g(O+7Yd1~KE-0MX(Hu^Uz8ynVaKGZ} zhtrt4_NLf|2{w!PB^+(7_$IYYE>m1LnV5=4!oDs=cyMmZ-YjIAK4>S{fmbCdGCaH1 zvK_U^-QSJ!d!dwvV6XSUMt5HaEJMGe zJ5#!9HZ6YdCw;bX@z|q<#fzdJ!#Ouswm%);;|scmS;hR#Rdkf#>o?}M7uieF8+fgvft|EZh|I{YVn{G!&9zO-qJ#0msts|;LF;h>FmwYm5XhnA z1^3q5ZN0O1n%CN<%01fKN%}9hdRSz7Ty6$Mw#U-g@G2V{LV?vzfX10rgYDn3ma&hv z`_d`14Aycw8bQU6WX4RoAbK0eXO^)%7=rlkQl!z}@wSuhP?Sm0-T3fOx#8UL&B9Eq zeSs$RC*VOm9k@|TN9jCM2Q<4QFRIQx;8tyAA72}@gup6cj#u9DFmovhDfxe=b{5 zd2Y@`Qkx7cxY9mwb3nm;iQfC@43ETlEz27R883)w|wanS4$1J=0S35u5=+5B6E=BC>F;b{d6Kjmxh-|Q+ z_5Sf<&XtO6QA2)wD=}QF#Hmaj^j)6A$Qz4xVh-ls-Q;`?;6_7;QZ(?vYFU@XSgx~U zhqW{0#7>{+e-gp3zEYAcYE$a|#7S_HGT?TA?7}tN!Gj^}cvxfWk*!y2q&L!{Zm`$F zD1^`9zIWp~{+<(zqAMYAg5$8pt_5nYAhN_E51T^+5~d=37#YsbB6#BG#dcyaKoPMh zUudsoJT7sbcfvSlz(W+jQl^t5_(uexpC`{n5R0PW&*2O%o3?vH)y_Ls*oDh-9jitn zXpJ=UH9>^u>SAb`_SUxKuSvxN!T=qRo9?wSzjZ@nIeB98F)Ud*1AB$(IxT<(v|DDM zQWTApc$vzko9s>T+3sm)w&2{cL?lj?ozxWR-AWpk@g#@$dxVQIXGY~u){TW`sY}fKeGR;0+zp%_&ddcCQ>gxQPS?SANnRBg)i|-uD z>9J_Rl2{0O6Xp6`G(#!UG^+8Zt+yzqy2UNA_{97w)3bg}r@f7X^5PWai&~OVK;x|C zbJx51dI@<=-^@)thF3^pmxil;0FBRFIqKV`P!qk#%q=76ZuG%>_M(9M#>oP|(Q+CO z8F-;}!#lf%|LZLe*uw)A;sr z(={(XCTj8D{w`o{kK^v^C_YYbwy`zVY%k3PX$EOB&2 zw~zy4iEh~}*Ara&zOKJSe_K`B2PJFK)S4|<^uv;SFa5{u;UI2O{R9;5jFoavOP|VO3@*mO(sfw)Ne%D=!eN13uE<5;Pujm&w@3-kEj>#DO3XiO-Zl3Lraq_1)x zeJ~rg*D>7RfVMWYblx*Y05Auk4-T@Y(okrFL-XA>0w`afi-g2MOgdHw)vt{9T+aDk zw}5P;x_QQC+@-B{h{}@-Y?PzeasSlfSB}Mt&c9+>7k7WmT*mqU2%KF5^>W88dyc=T z8ZQx$K@JTSlEB9@*-o@rx5dYS@fFS-%(AXXwg_wOs5_{5BLez{cbOzIkEVXbugrU| z4ZqP>zS!U6Jzn*B$I<0!d01XM)>%VoSfaxH#_FherJx|kYR)z(HJA9`*jxF2kgVku z;4Hf?3X(+aM#byThfE327#*U+k-bL2d{G;(ojGF z+HXjs7adfPeL80wGv3cBq_i1FTC=;4Iesfk8xqbRJGl&VzgxBQhS{QBP>$!s=F9jM z5Em;oTMRWMi8P>#{w(1(V^mcGrS22!CEn-4^(2WBGd83%-tXr8Zc+~UI>lALM46yV z9`GHt)`MA;`8ydveNXYlUiHaG&Tyw2RF!aMd0JcZoDj61E{320g+hdS$w>~=dCoc* zqnBZV2Q#ROaA89PD5uEvPIn$i6ZP+IZ_X;D1CJv&GYofN9o;?B0bb@k@SO!yug*n) zGQi8UE<(cm`y?_xYlmt%J4La^GqyhGmk69PtRz~kXEv)mke+#5_d-k5I%vrN=*6yM zxJ+VoD;p|xxcsr!;oS0~Q5ze25(Wj_?gf(=4t_hR(Ssvwwq*8}TiFt-bSgQte~*!- zv7(y!HQr=LbG~Vsi6liAzG~;*K1=00xiKHiY}C@B)v!mhjfW6>Q#R;T>0dr1 zSmPah@p?7V(Wf|L$47jXi?V0z23Q0G3nqFeeoOlYm6{$XTe#}Y3D~{b_D(p4%HF9w zD4FO?8<~&jcP(_tUsz3ZKq>|>ZAf%MT?5udS28Nl>h}tL)pK~r%oD83z>ynFy!wOx z_h6WgMp?Hs)ZWtgsVrXqG6m3p9Rt>xUDqyjH2z!*bH2_F@n20FK}FW}Yp_(a@orN! z=jSPfrtQxbX*(h<<=Mqm(j`b4QeR2?U|KZ>EtGEoU!?P7h^c`Y( z?;3b*#phss;M*wjGNAr7SO`9MT+M1<-<3qrXlyTvx>6i^F%v;zQsVVGy*reX;dOa@ zCpOTjx@7+{%LbGYe`;NZ^>t6SO}T)OrFwplh1gDP!5Y?dw2RhcR`PM$41f&XOcEx(@E19UkZD=s}vDOF*`8auDWpvwUB+n9D%ktj^X{G`lqb6Jsn4#sl z2nv7o7ElH;64NL+np#Nr$VlPL$N0lAV~u1r6 z4Y-#Yb|yXCO#20lBAw&M$%)}s~@>kFE@t2#Bl>(#07e z$3%ZIXQM5_QDnN2P7ScnQwWNWnELN0aK@JU6op#Ou{jbFU;*By=xkcrD=9Pr(PTh+ zgY$-lyHt8^e1N11@$2#B#e)-Y=u{fpiIT6Y=dNJ@hU2r(znOMq?IA(*P}oYfnHJW>rj$aH}Dip z@B?1zFr6UXZ z5_uLEN!;-0*Bvx|P|=WU{TbkjI}eX5+La1)WNMJ^9W8@intUZXZP{E^i&R1lS@)63 ztn9O>&I1A!y}=EqQDx1Z7)2lI{3CxiH5vumo$jqF$1Kd}>rdIzR z2(mM(E^xLacJ=WNA4Uz;=ls_Pd#;OWy@fk%emhGw&n-??ZfH1MX!#gY@hA8L({N6FqG?I_yfVZR~pE&fs3M~i=+6zM7h?#!G& zR(tBi;6a}hwe0px+{BzzafS#Ph3w;pWzKh&g=8_OD5*?XhilFD6Sd9;2YikID(^;n zO~8^b(>|)=M!JQZAaoYbz?@YDr*wIl}J2Rp0 zkNn93zmBKKD%Q)QQglEX8s{K@l>AVVh~1&e-P29P(2iO`A-Gkw{Dz0!wCI40hy_#C z(1>UUoXqn`qorRBq=0@M(T|Bzzfd50Rt``xWtBuurB?o><-4$7I|ip95Td{jfH1>0 zOkF=iIx_%O!=79=oNcNHos)nx| z5>$I$d9bN+Wq&^ntdCm~yLX;^U6zsTaW84e*PCr6vyoMzfR45)y7Iva`;WSc^eMYc zV1!${t1oif3Y^yE^PcW3RwhmpL$y}FzYT9knNnaDdRO9CtBqUlbz?sMy$$HiI+fJXi)oJ@XF1ymSEhHQX z`Yxmf!V8y&7$G};5R@R6DV`2Tc?FMlFLi3FumG11D4|0_ zxN{)m^xisLGg(y;`XuHcZCa=L5X0i{(d~cmQ!09dEG#~ZL{Ooi#EXoCB}dV{d%GYP z@5J3hD|FK)YCc!N%}xZZPpkEsUoI|ADeDQP(NLfD+uoX1>u8*OpyfvrA?2!eA%Tik zahG^TUpXDIBL~gAoeUSJZ&3)UzfZw9etEPW##qgj{3F1Iuebm;8Z>7 zd)iMC;<$wk#Y#S){6}r!RA^{c9!c&VKx30q`#pK8#8F(z6hU7>?SnGI zcBJR9`k-{X_knWv)dgD3L1yRp@4^nIkgAvHwzSE&k_LxruNB1~V)NPAUMQ`CYbe1O zpTqihC_jtC)$KB$3Xz~hpNbE=HMa@~4gj%c;Xll&0jKB3assn<*|vKuzu_OQ3bqIkCe~pJf$BAi7ot76OIyFZJ{+-Pl7l{-S|-659XR+e zI31u}wRr0GWL63+e7J9$IJ3aK@xufDOk`qJ4GZ!SL$L(P-epWvQ_ag2(my3)PyB_gKV5Ky;pAw?Ux8QlG|y zQaC>g3C%NxyE->jXOOkTFr-zr-Gg0q;p>4artb8}^WmANv@KV9gw8Oc67zcNPLlsv zkujlZm~8I6E`9etrN0SThT8P{_caX?c)-Fy-&2W{1cPAQyhk@4jJ8kjxM_nDlrpRBfT zH(of}uAV(|l9%#nm@}?rupR}1$iW!{`V(}n!`oO18+G1Na-&}Wr{>g^=2 z7Pd(E)y4oem{^b{>FsfzbV*!rur~6MpO;mN2bD>$>EhF6>uvDyx5lxE-JoC@ z)?gV4E-(wb85L%ho48rTtb6t*s+DNM2omcUH3J(-x)&bZyJkF0LY+paJqK`?J?aD$rtCehD`F{l34o{Hb%fA>MpUIvv9A1eN zSnVRk_=cOQrE=Tz@RoEeB1 zos$O!j`S|(3IUQ##IoSBoVahJ*N*JE$=(g5q9sp^0GF9^3{%{%LN4U5ECYJaPHARd zCSuOFhhBS6?>nZ%3(T)6g7O>4p9_p*C!d+k6o|SmykGz7XZ@|_IdONXWfcPCf0mOk zavyYU!bs^*&BkTZIfx*@HGcNww8N35-9N%RP=ovTVBN!|d@l{GMp*!lK8fOnM`3lF zgu5L#d)TE%$iDh&8O9h!;H&f{2MYL+-bVwSf6YVST0-P~XC`s)SNM;YO0S5v{7-V{ z4>_kO+cKaSeiXdwuipsQ>)Jx?YtKp_$Y%0P+VyCkB`L%t+9OdvUNEP$2MxmFhqhJ| zd=5VquXKEAvaZslF^%v`_iArXC54lCS_#P&?d5173;n8WRcS1xvP%jkH0O(}t8^CRS|)IYw;yTq@4U_b-;nPD&EH`s$z#}aLxqY?ds zGKjN|KG@8weA1_`7bWm$sdz{@GQ7RmThD-p->!Hv+*N1)Fx%({WpqOedMdVH*Wb(p zGMx!9kY}X0VE3k-#{Ejz)_@t=zu}MBQq1(nlg^Mo6XxsyS5aiCv0T7f=*jfJJAs1% z!vrhT-T+dD3hMlQ^=x$~bt++^)kfIn5M29mESbYZ?61A0Cv&1wTy=vefp?ZhV}Pt{ zO9mw0JMVAUfBJCWkxjRczgXqV#DhG)bPAR$Y_$=}YzbyzrrP|Ok{Em(s#airgP%Bx zGsjZ7sfJ;}!^m?~5az_C^MiFQE5C`z6UeXjLCNIBWf;%ZcNYk?IXhaMQxeAQswOSa z%^%S$C|iX9xHk1bYYh^UMv)%94-}#h>cRL1waJ)|XRz0>84E4t$eTT%5CBgaBnx43 ziFD<#{fN#wo!Ri%e<0sRLUT<7&7-fO0Ye1bjCBQ>LO`-#V#&#$W{aJ)W8z zuUg&1Aawrfpx3L@poY%>fTlFernsZ=9v?CEx`t9jiY{NF@Ggr*Cp<6~WM@~*Go|=K zO>SBgKfT|ck1!FN^yXj(HkdV1G=t6@%i%*>%bn>nGQLxlS7!qv+OyYGQPz>!`)?p7PaV8A*k@5-eV zdn|q0n|?9<0+alUNPy z%k25jA$si+O75L_AkjWLWQPgX*tGW43gjZQt$`A}|cnN#aI+X3k;lWe`97 zMZ0VUD(}_ZV7@wx5&+f0db{`1zo!F`4^jfN-%lZ<+B@XSMtbW@j(TnZN4jIq+`$ME zn?bC_*0vbdKS>S?OKV+gLR%i@gQKWm&ifpY}!B#l@EMG8L$qh|Tj7MAW%Fq9KTQ!yF&vf~mb^94)`Su@cpPGkNh-x5;HC zHgF_|zhU?oU~V13;%&ymtt#A9ev}tV4oy^-mZmYEAciL59KLxi_wm%MwR~J|fJr+w zPwY5*lN=5w0b^A_lSKygO#qewX*-lX+3)el)%+b=4Nf}Ixc1z*-0QPfy-|o4_XR4bbh{J?h z>=Engn*V8K;yNxOl0iXx?r8YN(Eun`bZX0+qniz{C%XiJ$}5utoKUR^)^C?!aFx1} z!6w{hu+uJKGmIW`FH#gG7XZ8icguuU`~S4}m2pvp-?}46C<7RXq@buEilT({5F)5Z zNT@U-NDVEWf`fvDii#*DN{7-NBHf(=N(>?0IcIIebMOEAy&ul`!Ixp+$DY04cfBi~ z^*oDXlB^qUIAg2rF@0j7RQswC(_MksC!M`)ukqy9W#^W*dz;NtSLGh&=uWBOBbnd2 z|MA6bpzSv*7tfNeYq7}0yw?}`h|jsd#&G424M*z-BfoK8$GVQ~4hHa|>bFpcb1OhA z_C2m!M2uFtyRD2R6oZO%gcP0_fR)9B(rXWs(@7Zup0Kq+O0tidJM_e@=_Qisd^7cZUx1z;^T9 zN(8ODp!v<<@^*dp@_GH3%Fi!{h)_n_otK}y=2pqe1JZ$SB8OC?s_kUmEe0x+Mn}v0 zO(%9@rdZj}?Uxrn+FF;np5W_qyA~5*!4$%Av-T!WDw`B*!Ry8=@L}zLKkPkbn$1e5 zlklY@NlB&h1syY?viZ>uf0?j5&QvIL!#C27s3;&{8<`ZR=<`mX6g7)Es+w%tHSO0I zJ*PIogzJy=-0jhyzVV3W(-zyCa~~Del=B%_hF}-39~L3>oTprQzwKG!e>QBinG0%N zROB1EQ?RmMULy?ZzWmAZo-D`46b@grt*RhjAlfk%rCcPQo#^hJpa=a{ZH)pi74 zpE?p)lyj06mbHw8sVn(sgjtTl`5sKmBDK88aOxxOUzXnwI5Ibgj@Jno4_ZxJt}I`q zmUG$IIOm?V9uYP}+(_*bcAHI=;=@CY>(Lc2PLX`$H?!DOXW*lF{AqnDi5Yy6(Xpd9 zz#$oHi7uDT%?#MPTTAN8389QfKVgKnJ%X+!wdX-<_)E477qsRVT1dNBk&)6GTdVn&Bet%9r- ze>#)y<+*PwuB;d77org14W0U<2uBl?6uv8Ej)+xJl78?BXY2Om3~Nibxfg;yee7i8 zwIXslcG4yU*`pOq;OaArMOTID-v*j}ybswFPU=MB$Z>7$4dKyE%lqfNZq+jlo!Zju z4JF^?wV|~Cv?;e?26vT#yKx50%zArkBOnz!K6h2yKVlnhZSq5EW$Hkm)jiK3vlRiP zIX|@OiCH0*WI=J)1+=4xq$YsB>koD2!AQ-#fO9MOUqC)4rjn*8Z&H6ezS$$bT?%JA z*`Sn&DoJ*VCH}p{wpZq&9LDWI(%72qt?#Hcd!+XBEhp}@;O`2q_P(soINd5&doyu( z;~JZRDWCDN2xG9Y^Y7K+9B^{=3Rx%C9;!l!1f!z)q*=rSvN}j=$}h8BFNfJ-dBBV{ zN-h|31gaGSh3>Op*Jn%|>=8q}^P8rr`=!_zk1$aF9%x%(Bd)=!WGn}^)v*$?v}U#l z3Kkzbn4uy)lKhtPD!s`2l`&s0Qe|Jm?_Cv?tYktJ(q~cDx{O&HasXPW?}&27IJ!q) zHc+D?s}TMNz~gek-Ow(n04fSO9hH`sQ4Kix2k1zK4XzJ;Pdy_o%GnilQ^lpFzu_%ovLxH3R6;g{HwhqU%11O~7q zAOIYaoY`;XK zM$GCTYS^)DZqt{s9_0X?KDrkLVlz(IsglOxEW6v6B3z|glUXTZ9#<|9S59Z?ER!U& z4Z?|OazhFA{Lf2s!wLDLeDljZY z&v|ciK~-X7*pbs@qf(dGBs3R_vybisf^!p;XSD?Ccl=IlP&iA^8phP3UYztH7f61ZApzSQV;7^UK4=v&rl#EK!y*hy>IZV_eooV2J2e40kJF~6CUzPPgy_nQAo|?wZ>AL;aRLB%oGoOHBLpl@d_!#kKs*} zyk;w3X1OudX(^;)h4#Oy%vEZ_jS3*c4n}rb2q4zI15EmB-3UgG(CCb^&ne44<8;We ze=Ht5CS>RmtmQ^UB*pHNe!PBl_2kO^++XoI*f82WyF|$inb2*|8)TbqI3B1`j+C8~ zV!g`OeKAc}-5x$bJoX<7JdU^|&Q+__eIh*;9VGbc#}*H$G)o|RV`=(x{SgtJPLs5Iz+fou0wmtRK1oibRF$lY0s}Zh18Sa|=+~IG-s4+a z!bC!)-+;N+jdl4og2Gk!x8~^s07#vyKzfkBAdAZ=Rhnm%mucdXjH1vI(`M1Fg2dfOCe*h9im8*a|(8J83JCJK~_E{4or)BK{oncWi`5$t! zFnmidI6@%}LCTDORNu(2hV>$s5(Ynj#9KVSKJ>o7S{Nu$sm5pwET$1PAraMCvJvBk zgj;x)G^JA-^lwGf8pI{qFPI!^y8#)htQXeL7(Zz~Iuizf2weVlMiR|}hoz zd{EC0l^hH&Y1-XhUPXf6!_4-$ZBNocO4f6ouhp1^%D4vR<@Qu21lXU8JtNQ?A;+d->og(GUaCZ`pvCYjA9aP5H_E|$IN$8yQ|KW-pmq; z#9fgQ7`_@+qWxoLW>rg|#x)NVvqgp>B1}$T`)Vf(*?Q}rpQT?_w9qN>lw+QeANRQe ziO)RJt-$Kem!PuU`miRbJ#Nj_pMUOutmYVlH`2h!JA({Kju%h^Hkvmjm* z$T53u#49I)FEx<39GtwxMj2Bb^`5oN()8?C>z2!v(#>X&VnKoAa;)^m5F<-*L4f0> zWHlr}?=m}|c8D(Y#rc};YgQK*z74Innv98u6jeah+^^Cdd~Sr=!wB_Dx9{B6;HbPP z8?BtMt!d}0O0{xaC;Gv03Hn~l9c@fKPRQ3XIaAofI>&7;zoPz3D~9{BukJb-V=>i? zFxe;%5Yvp#Am9o3-zGyXOLGI#j&zc1rV>`j#13M-k&McHIDH|&%~3kmp=@Q)b$f8C zD$Lbzt<%(P`GBbvt8{^~`{Ch3bICjy$0}FE|6jOxFC_Byn{QjuDevukRlH}*v$Xtm zqz?PccA8`RG_Pc$W_-GJo8!t)xxY;#wZiqb&55`!uLS){T4XoE@^4z&WQ=|NTDHtQeKdFhaFjr)v-^`h4z1kUm38eK_ zRtol(4hi$xi$ncl5zYmbR{E8sGjH^sT$lQz94K}%e8cZjxuq#DI$UkhC2!nwR_3b3 zGe?XgYr^NGDVE2W?oCbQWNK-}jzI|?e|kJK=3EbUea=7C3!hyK2LNzps3mq?)%V1f z5~n;Ed(ylyn0>z0?2a99Ae1TGKQn0}lyQVdd7hE8N^i4ZIibbw75<`o45yD>&1WDh zWxLlA`d;-o)%cga?zHRf1s-;BwjJeapT0ZZ6|~Nc(!95^eqdSH5G-^^JUekCs2jH=DP9AdgDg!VdAjmgjq1u+!8P z+KsY<6U39MFTDzG6)*ja+?vk!!)H81P0_?I{jRQNyI;ctc~24ePa3hQsI8aq0S2JNhL3v zs^9M)YTRp-X?D?gG0%6_%|Y+zuXMxj7s3+Axh{g8Z=tuLv?72kxQQa`jggTs&2lcA7DJXD@J1N(T|Puo4N%9`>A?K|iaenQF4<1np`1mV!{+A9d(iz)@c`0w8u?BF!wJ6JNftV%q2Zm-!`68N z_vOlPvr+L{gvK4y{ZWpOB2@iRvf=J05A|d1j@p0pIh8lPIDR|JeN&m{CnRK0P?*IU z+3T7*9i^m@HbdPAEb0f9$(uhxftPeedfSqy7Hmmy{&kDwYCX_?5m+;W3GoQybSBlj1_1=t?~t zO_}6Zhkh2{WxJ*iop#0dsE6Szh^@rc<~K-n!yE-3ES&*FvU+~ujP$5ee64igecy6? z5-IWrf{Mf^t(oT$p*;eq7Bj`TqiYu+F;vI?o#_z#1EljNAg2liO8koy{fbIND}ie) zTv@8naUTj`J4iM>Yt4UrIG1x{twt@Z?~1p|nI+v)gkox)EFt}>vwoBDEz_Kn`s|2n zGFLx=3fob)0Ez)MnPbEF)%Lr~ZBMv@q!tAi`|4&LV-c`_Dukx=DFS1SZ6h60yiPA| zeb?8*+%4Y}NWdYZQT1I8%*!W?%;n5|oQCj1dF<*^=A%M+D9Xy3ZsRb%o7(dL8y-t% z^fsb(wUrlHADlP(Vn#3;?J{>rW|*`WFiJ;udPgV?JMEv|DD>qO@nrl7v&;KMMdnwj z3>-KJNx(Qii!ki(P+xW*_v@reiv196k~S_){%{ph=UiB?uzwH-45G6^B07@$$U3%W z8sgO(FGO>^HnTUP zK~?LvJn?h|oI^FE2l6U7NC-Ij(%>E^@d=-U4kJ#rlZkKi{0sx8rbwK0I78KKYJHHw z0^;ZW(MSmKI8yDol)x|%M5JWOe$R5DMNcq=8q;!@f*z_mvtU)ygajcEEox7u8&V`Q znPZdoXk!?>q9N`C&V`HoyK|T;gqbtBV((z`)js2OGIr8nX`U$-!7-hzEN}Fj$ohjJ zlr)Y+{iot<&u5eJnBre<(gzioWwTyyLh?Ylq5&P&W=c?QnOS+n6Zk*ENoNub?g5tXAw)Ds{48f8wKyWRRKG>+^R^QNad$H^ z1;3o&t+IKmaesKJeOmu&-+bT0peQqZjMkMZ+t&J9y$q7TozbR<1ZK&t3!A?mak6Zh z4*&KuZ2yi`4aN&LW@mQiUi`?*r|WL7<=}{wEu>#Kp>^1P%gKQlr3xIs+RkD?v>qsV zS&C;VC*_%Kmwa<)RTCp5(wRUD_HZr6PFi_mbW&7Puz=8~;}Re5y3qA;6H`Pl!>J)| zPB75vb7+Y23hTb`%|(~FZsUec)JMaSyqcwUSyIyscP8kS@~xaeP`I|8jRD{?n0PXb z8?DLWVZOp@_i`k19Yk+Yw5W48Jx=P}DvC+_m@aR$FTU2srnFMbRFwHzO4Qob3-KiH zeXU=BP~{F=iwEGTaah$irmc^(@HG;T?3H5UguZM=o6nUre%r}}4agssOGlW~(b6YD zDfPoQT%i)`IELvDQ6H{ky0?v7?uQma*%pH60sn+B8B~br7f8;JpOvZ6^s%Wtibz5Sje)aAB;(4(*;2{#?5fEhc%CF%9D z6lSOI2rf^!eZJ%y_l^BtJWk015 zm&zMZ4M-OU;54XuAC+ByscuUZ)Bj9mu~Se}teNM0LdtegJmu$w;jr;2BQfWmHRkqh zrFVL7ftqBBl=MbxPv3PuVO}!1ZikyG-shezQpaS~hrhl;W~x4(F6jsUm(hPm0^)Hbf9dVh%>1YJub7^N z5pq+@5ghGZkpp(>+tJ~m?Lz8B(A2(}X_ytf7a_Hbh*%_j-d<5bIId%HQIk%u>)^z< zbttnxt(gz4Gfg+c3u~O3--;ZYG!_`%aOGdJl|-Fwv@s9M;TLZAzC2_?Tq8(BDIFxW zQlD{AB^j&;nnPB~1A)+txXZicY*P6rWMM$eeC^T0dqY1f*@@8rhs8amp{gv15K(-t zUj!gZrhbQ62`{Nl#(3I#%=K%(d4f?&S9BCwxUX$RF{y7hG0qnV%%7G8x~@M* zH}dvQG`|qZf(Dc8ufVf)VNMl#$qZhua zMOEpd*;xVo^*5Q^lBz^vP&k|7O`5MxbNrcg6;)}Ew{8N4Ltom-XijTN&<)!E9&r7G zY41=|WjHIJ4=5}>ZdE9S)J`wSFEti{sJCnK8eFI;pTo-Pe7Nvghq!)`HMkw}| zn<|#jr9&!?(5*A=p4la2D-T~zg>e{t+qFeT??kd30~Rz}yFSsgP{U2zwV)tOL2BHO zs0t?W^;2=epIBt6zK?p?n=c7}(dpwkpO+T^BLO@You}PTyY=&sBhAC$ zgSqpj7qk5C-3`~yNneE(P`v(cCC9jnX6K}7HDWEcK4(q z!UG~X$S$kDUvi7-P-z*T7cnSd%|kN*tgOyWlizFkaHfkT>0Dfmp6hw|nxAAEQ~{E&}3xft=` zt4muPYUZn|woicOS6+jU@I|OXRZ&zMlWrroY$93LWZ5_n;Ocrk1Le&_;xs^b`(Uf&@*2z*;A(4{U0T3b1QM(s zSCZIJjr^=978D7;jqVm{68)NTHo`&jR;LP8Azs}H;Q&7#(Uea9W&jf9W9FiinP~r! z#+s;+(E8+dy*RVza~k@JFQJ<+PeG1tm)nrRIuuFuVEVC$i$UPs(Qw=AeF9iDM4d!u z0>wX2I5NN9h~-m$7&kWGKT`=zqrk>+e*LOI3+;SIGYjW5g~>`*0|7IE6u>z>N_WwB zPW^$fwS3dttV~_oSW;uczUAuI7#iiX3Q3gT+#iAxRY$n5m@S*>dqe3W!meL`q+s+& z&|8E>uwVcRe(H@JY9F-flIF6bM3`6A&>iY~KXYBmdj}c^C9sV5ZoM9G5?f0i^>hjM zC-!f!+3rrIN(#G6cEW~hL?|IS(Q^t$kN6Lm_53bix&~%($W0X{5jxeK4K;J}=q$~7g68?q@JfMougb(u1dNGY4gr=6Uz*xI3d zpdjYVma((gP2N1wE2GoLZRx_|CzEYQ^%`?9`-)I4>@ZbJLQroi)@E7l^)Y`SJn4?PRQ^OUwgR9+AGZKfDTl*G}NsfJ*Ga{F^xw$h`BTv)h{KWRhbh=NPQpvI__5(j%(4;!lwsJ)a3VES|9reJ`<__ zfmi$-7FdyH7b!i%1;`XKF^$;wVruJC5{vUydh3X+NYNIlD~sA`s*I8AY}DX|)~9D_WJo#8 zH$D)YK}!GSj85*!$e;7-ZSxt8?=n0Tt~>DbVsMqc?VBOOV&iu7)u%hnq- zKA9a)n2LPtswZba4u9wQ@(a_HiOUWO8phF%v1X`dBFT1WuE+9+P@u{Tp!bJ7O4aV8 z1Sqi-9Vd!nww5h4>4ZS)Ep9|MgD0~C)ey;pxD23}x0Bi|97f@KAj*(4!1_Ji9ZX_N zBUP3mb*zl#F+D05#wL2GRWE&R9xs^>K?)F}gbQRg#{nupl_=&}soP(m>q4Gge)ri0 z1X(|nl}*2rPjs0&e-*gzAo9zbdizw8HRGD7oa)Gu?dOyT%vESJT#c-;7Pl`I#M$nn zW1zpNDI%2v0gi)g7wcsknYE-kOySAhCv=AC_ zmJi4Dr5oKB@593f?+jXl?5){4BnM>goj3!%xHg}5;pD^7iKZ?h^MeB>M0&CZ+?m2B z@s0ifcu~fsA&WTOV{UoeqwFR24wAsbQW)&aVgrU148gaY(e)`3DDl4M0wmQA<^pA16IwSZ>- zyFksX`OPh6cP)w-i8ltT$lWLLJwb`H`5D$d2g)pB05AR;0IEOD!hv8RoR{la_AZLL zY+?qHApSrgDY_&VmIfH`V>>)wX#DFq=BVQ1zs1J~_WeX9C*iu#w+2%dzrPFg|6!kb z8!ojONFFC2cbORpfW#ODmrQz=`gru|4dUP_YMg9MGd6U z7Q}@E{d*{{wGqh-Id?H!0q^xDCo##NaIg^!TDpEK$&^fS17x<0csscVa&suOBo$ZZ^hdWZQQh)N7UvFa(>pnexG%TnXHME4nvB19 zW&eY%=5w@kq@-~L2lOk;VVMJgI1Lm;kA&S!gYGkvdeM{xZ3pQiO76QK-ahH5+P8>) za!;Y%Q1qB`3g+Y?A!!_Dr#11!CXd*|ZHHg+0%v!CsJ9I&jYk$1@~@Nh>!EimH>{r)j>BG#RU zl412Rc;~W2Iz@8qrPqWYc^DT-x0?85d#^Y$@qwcl4DtkFGL}$C8xq|$FRDQ9E&s~? zna<;J7r5#fHH)o#-1W|aaIgh;&jn7ru#k1e+QK30BSFDchi5Hu;t(=&B_4PX)ecsIIXuUwti9T~ znEv0|7=_cMYSe}r@d7lqtY)?fCFX`B*LP~;mk(-LWmifZYchj-5qfL+15s6l@Y;Sd z0zW_xY0LLX!v?|NL88i{am*gGjIl~tb6*` z4&5NVL%wwi4CX*8kIvN&hg8WD#AXE;m1(1`0dF@e1HqkbEXPo_Y&| z#X6K3jW)+F6M{F%# zML8w5IN#I&;p}j`z)-QWs|@#qJ~V!nYJH}xWiPtr&p$Gb0!&l#WP^M| z*F%r)k7@<>-&!Wu2l2FH!$3Y&mp}z5l8RoL1>6Yj0T;G3LYlTf@Q@@Xf6O2*q)gSg zOj$r}bXmZ~aqF>;Wl9$HCzu>70y1f2vRM!Qyw_cejVit~veIny`@i*X%M!~XD$`nx zWY)&^aN?$rCaBy?ezpGH3`GQKf>Y~zUu9GdO$8`G2m4zcD|tmtKqjnr&p9MrnovUlSpAtV#7Se(9P(wI(p+KUy_ zHLH@e^^if2}uIL8|bSgoqa9nE4 zt2Dt!!fi9qHS}QrtCI4N+s84L5t3;4x9=mnXPA{+%_!$^LO0~g0( zFgvuRC=>9VmI7D)1eqEWmNK9+vTgHlN{Mh$SVOkW?^39$@L3r8gi@lGu(hW1ZcsBN zqwiXNw=c*^xC*EQS7rsiVh1{D=9i;K4@E|%RqKBbvC70FAQARx#ff9=%sjK3Awwoy zEc8gk+MS94`NTCU6NTIa_LLJ{cM6$LlbIyakXJ|807az&D((m3VR|-^OBrrZVtTa0 zxS$ldA$d|U!@~9uo8|klCTAkKmZ`mLO;!(1SUcp|v2Wf$svwlt&JRKYWcpq=3T|pGgLZLgl^ThnWV_o{{dI1V@iw(%w1`G(J5j-`Ui@)rhfHociLs} zGTm|4QkEAvdA4{-q*oNEaG$=CJykVr=t|9GJ!T-v+{;%)yEs-;nJ)h=oFmgvET4ab z!THyh>|*ekaQXP_f0&VTh04&P3UFIko{@h4bNwoX7h7jG9A}sX$Pvvnt>ZA1DdG4B zlT!r4u79`R&F&=aG1a+xxhb4@Y$ZTjkT!lTwh5VnlrjR2R6lGqu(Oo79nw8=H#=YA zrGNWF|K1Sma61yw0 zXA*lRf!cGXyGF1VIR2f6J(JioiM=4XYXf^h@}FDSGl@Nu*b9>XPQzZ1++B%1llXsY z5`$B{-;gVou)0qg|KSLPZ$thQ#2Ecg{6p|R@DJVp#6R}_ba!_=_LgaPCH72W&m{J| z#I6mX_MGYNO6-}$o=NNl$$vJm7bJIAV$US@Okyuc{