From a4a9a3f79a2056e3b30fc6e037e0b619b8e5654f Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Wed, 13 Aug 2025 19:12:44 -0500 Subject: [PATCH] Release article: 4.72.0 (#31653) --- articles/fleet-4.72.0.md | 95 ++++++++++++++++++ .../articles/fleet-4.72.0-1600x900@2x.png | Bin 0 -> 51812 bytes 2 files changed, 95 insertions(+) create mode 100644 articles/fleet-4.72.0.md create mode 100644 website/assets/images/articles/fleet-4.72.0-1600x900@2x.png diff --git a/articles/fleet-4.72.0.md b/articles/fleet-4.72.0.md new file mode 100644 index 0000000000..e8831e1fda --- /dev/null +++ b/articles/fleet-4.72.0.md @@ -0,0 +1,95 @@ +# Fleet 4.72.0 | Account-based user enrollment, smarter self-service, and more... + +
+ +
+ +Fleet 4.72.0 is now available. See the complete [changelog](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.72.0) or read on for highlights. For upgrade instructions, visit the [upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs. + +## Highlights + +- Account-based user enrollment for iOS/iPadOS +- Smarter self-service +- More Fleet-maintained apps +- Linux host identity certificates + +### Account-based user enrollment for iOS/iPadOS + +Users can now enroll personal iPhones and iPads directly via the **Settings** app by signing in with a Manager Apple Account(work email). This makes it easy to apply only the necessary controls for accessing org tools—without compromising personal privacy. Learn more in [the guide](https://fleetdm.com/guides/enroll-personal-byod-ios-ipad-hosts-with-managed-apple-account). + +### Smarter self-service + +Fleet Desktop now shows only the relevant software actions (install, update, uninstall) based on the actual state of the app on each machine. End users see exactly what they can do—nothing more, nothing less. Learn more about self-service software in [the guide](https://fleetdm.com/guides/software-self-service). + +### More Fleet-maintained apps + +You can now manage these popular apps as Fleet-maintained software—no need to hunt down vendor installers or build packages yourself. Just select and deploy. Learn more about [Fleet-maintained apps](https://fleetdm.com/guides/fleet-maintained-apps). + +### Linux host identity certificates + +Fleet now supports TPM-based identity for Linux hosts. When you deploy [Fleet's agent (fleetd)](https://fleetdm.com/docs/get-started/anatomy#fleetd), it can automatically obtain a hardware-backed identity certificate (similar to macOS MDM). This certificate is required to communicate with the Fleet server—enhancing trust and tamper resistance for your Linux fleet. + +## Changes + +### Security Engineers +- Added support for issuing host identity certificates through SCEP (Simple Certificate Enrollment Protocol) that `fleetd` can use with TPM 2.0 hardware to cryptographically sign all HTTP requests. +- Added flag `--fleet-managed-host-identity-certificate` to generate `fleetd` packages for linux that use TPMs to sign HTTP requests. +- Added `sso_server_url` configuration option to support SSO setups with separate URLs for admin access vs agent/API access. When set, SSO authentication will only work from the specified URL. This fixes SSO authentication errors for organizations using dual URL configurations. + +### IT Admins +- Added support for Apple Account Driven User Enrollment for iOS/iPadOS when end user authentication is configured. +- Added support for MS-MDE2 v7.0 Windows MDM Enrollments. +- Added the following Fleet-maintained apps for macOS: iTerm2, Yubikey Manager, VNC Viewer, Beyond Compare. +- On the host details > software > library page and Fleet Desktop > Self-service page, show installer status and installer actions based on what software is detected in software inventory. +- On the host details > software > library page and Fleet Desktop > Self-service page, show user's when a software can be updated, allowing users to easily trigger a software update and see fresh data after an update completes. +- Updated VPP apps reported by osquery to retain their last install information when viewed in host software library. +- Switched to more comprehensive `UpgradeCode` based uninstall scripts when an `UpgradeCode` can be extracted from an MSI custom package. + +### Other improvements and bug fixes +- Added support for `fleetd` TUF extensions on Linux arm64 and Windows arm64 devices. +- Added a fallback to package install path for extracting app names from uploaded PKG packages. +- Added special handling for version extraction of Fleet-maintained app manifests that reference a download URL that isn't version-pinned. +- Improved `fleetctl gitops` type error mesages. +- Improved accuracy of auto-install queries for custom MSI packages by using a better identifier. +- Label created_at no longer factored in when scoping software packages by "exclude any" manual labels. +- Refactored `AddHostsToTeam` method to fix race condition introduced by global var. +- Changed `enable_software_inventory` to default to true if missing from gitops config. +- Modified backend for `GET /api/v1/fleet/commands` when filtering by `host_identifier` to address performance concerns and exhausting database connections when API is called concurrently for many hosts. +- Allowed users of Fleet in Primo mode to access Software automations and failing policy ticket & webhook automations. +- Update UI to support personally enrolled MDM devices. +- Removed DEB and RPM installers from installable software lists on hosts with incompatible Linux distributions (e.g. Ubuntu for an RPM). +- Revised MSI uninstall scripts to wait for an uninstall to complete before returning and avoid restarting after an uninstall. +- Added back software mutation on ingestion to fix non-semver-compliant software versions, starting with DCV Viewer. +- Increased timeouts on `/fleet/mdm/profiles/batch` to better support customer workflows with large numbers of profiles. +- Made consistent and update the Install and Uninstall detail modals for VPP and non-VPP apps across the Fleet UI. +- Updated go to 1.24.6. +- Fixed issue with package ids ordering causing software installers' scripts to be inconsistently generated. +- Fixed incorrectly displayed status in controls OS Settings page, if a host was only pending or failing on declaration for removal. +- Fixed bug with `mdm_bridge` Orbit table that caused panics due to invalid COM initialization. +- Fixed bug where a certificate Distinguished Name (DN) parser did not allow forward slashes in the value which resulted in parsing error. +- Fixed an issue where the detected date for software vulnerabilities was not being pulled correctly from the database. +- Fixed missing empty host lists on manual labels in gitops. +- Fixed an issue where two banners would sometimes be displayed on the host details page. +- Fixed missing webhook url in automations tooltip. +- Fixed an issue where using `ESCAPE` in a `LIKE` clause caused SQL validation to fail. +- Fixed error when trying to escrow a linux disk key multiple times. +- Fixed silent failure when passing flags after arguments in `fleetctl`. +- Fixed wrongly formatted URL for EULA when accessing from Fleet UI and when shown in the iFrame for SSO callback. +- Fixed stale pending remove apple declarations, if the host was offline while adding and removing the same declaration. +- Fixed a case where a vulnerability would show up twice for a given operating system. +- Fixed specification of policy software automations via GitOps when referring to software by hash from a software YAML file. +- Fixed cases where the vulnerabilities list endpoint would count the same CVE multiple times for the `count` field returned with a result set. +- Fixed an issue where SSO URLs with trailing slashes would cause authentication failures due to double slashes in the ACS URL. Both regular SSO and MDM SSO URLs now properly handle trailing slashes. +- Fixed an issue during the DEP sync where errors such as 404 from the DEP API could result in devices never being assigned a cloud configuration profile. +- Fixed server panic when listing software titles for "All teams" with page that contains a software title with a policy automation in "No team". + +## Ready to upgrade? + +Visit our [Upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs to update to Fleet 4.72.0. + + + + + + + diff --git a/website/assets/images/articles/fleet-4.72.0-1600x900@2x.png b/website/assets/images/articles/fleet-4.72.0-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..e847553fde871a9fc7d94d4fcca236fd13034af7 GIT binary patch literal 51812 zcmeFaXH-+o_Xc{9Dn(Ebr5O|zP>_xkfq)<=A|0elM~VnYFQJHq7L+C+MT+!ZrHUXy z5a}Qwz1PrNAh{=j_s|MoXDt^wIcH|}?0NRy&)ze6-?u7{mzCCVBUm1mCIDyvfUk5d@*YOEw-V8B>Xd}ScK!F#vHANE{1ATK z_rJGIr&<4d>u`$fKey12z^VV-(y;sf=MMPS^h6u~)P#q{KS=z8#6K^Aw}yYt^h6W? zAn^|p|AHhQ1OI~Li6;I*;vXb{e?jsD1pk60-WvWv;vXdb1<4Z({0owJx9|@V{~+-% zNaC&GUywY}#6L*y?eLPk29}5==gNY&3Dt=2QU7Q(@^|J z?BDmazW=?w$_^0x=U(B_|Jj-d{|FHM=P9cw!T;IEa6AR>k^H@Ur-@kq-hdze4g62l z|G@R%oxXqO^v{9(bD95w#DAmYzj*wQf&AlK|5)aKd;;_zul|=wK>q`Xe@WZFH1%I% z{{LSoV&D>JY)UEpuEJUdo-Py2UGCpw=QFwQ(B<9Hlj4aJ9XeOiQ}n#FsVRq>&&hVe ztMHmtNZ2pk7kLaJzY<3uukXqmuj`9Ado4qLMZA_bS?ztnJXX(c6_Oveb8%jue!$iB z9?Z^t%k@?Pre<$2C2Mg1LtH$(EB5x%0E+#y=~&axZ`=BKdw>26n<69^2aTt~mIfbt zH+pTINebN=8r(~6cCBds-Im8!_dH~U{-r*b+*((~Qzw0&5tS|5iwCitQ*%PjZfTeN znMaOlSf{Vt@P}X7sVu8!FW++c{%Td%OC|VnOMcOh-$IfM@}I{j@gt6QJN6yeK@O=n z0KnHwOe-v?D=q=MjF~S@CQPR! zoQgd5CS@UtoHF6>GKT2G`p4&bzEs^Nc~*5Te?J{AhYF&uV_e@9bN1pob7%i?P2J|; z_?&vKx2=(@`5z|(j9jqfubGyg3m%jkEu)QE;6Yy8<@@;>w(jsCPjvzzem;lQ)3uaB zdi1r)y6IGbk68YYhoaznn&~4OjXj53->(_Ut3T>dp{ zc{?8@htAauABZFCrh_3!IWk9|itXK|3&MG!e!tA$$rX`p%=>lyc6cuMcbb9NX>uf> z^DIp^=jKvsqjw!XKPDWkPAyVA9h+O_!TU<;h$qFS{fU_-5o^KWcT+wANqSkz-e|<# z+xfxmwK-REt`NDe$-^wE{)$JA6Hl->--pY5vM+jX%xKB#Kq$Pdeyix>L7!(TWsp$# zg}Tl54|lvc;s&EfHP@^43gG!Whi7|wm%Z*3&lL*c>vhQ+Lt5MV7;#Wd;re+<+r!Bi z%cUiVdC}oUMgN0lOu5kLoi4Al3i6iRKE^2frYe|+cBCBYTmAlGJTlWLNu-cHu8WXq zpy_V>0HV0RpCiEBE^j?p+mPOXWo3OT)gCW2R1;f%^xdi|@V<$j*Hy10Xbg)wJ8;zdUQ5N>O^9c1M2I{ zx^@8^u^`a==%i%nyLi?Y)OgnUbwoSHM>yKZaP>kJO87$CHEuq%<2GCP74#k=38mJX z&-{k}=9O^JSVa!H^Q}mX>KqLIc&|jMTI9sIHc9FAFu?>ou6(wbBRpBaS59>v~C~z{017dH$`hx@aD$+qE+xPiN|Dze3;Iu6Ul%Z za#&KIrm-Z>RDm{ho`lQE5%D|aUb}9XXGqlDr4yWoS!|1XD@A|)tinW-pMU^|No8Bzb>*((^-?m}~4kXJ}=RxvRfRbj%i83#;foYlSU zzKFmMd=DyGI76HWA`US*ovO2KFF{+|I1_9Hnlw}}$7I`V4P1ml+v=){x>sGfm#Q2L z{z@H%mD;K@2l>IibsL^kzMkkv%nJ%Txe=HeYv6=JJSaQW{c{NtEWDea4Z$}vzl!x| zjM=I5d~S$XE0>(tZDpq%M-a#`i-A#{n|^N(X)&!^k}J^;PE^uvL;h8F8h>rahe{*1!h@v4h_ zi_`cU-Lb*>}g7E9^%p)~z`kR9iN3ktt4DJnf8c>Yd-F3Bm;ap05(h90W1_j;RtNA)%%jt0Gei4iB z*6RqhAl}cZ0!CJRDtea)6WaWphHHk%@jECgmvGa$Tvbp86i4PdJnV43+tAIQpGtT0 z0+(I#^)S3EX}ycnmh7$=LCgM&otbJW2Ex}5wLtP=OClCSsyN)4U|)t8rG#ZWbZ)eXWJ?Z1Tjha!H4bbq>AGFY~lY`Q~Hh>8G8Pk@uJblOYI49r=z3S(GT0np}#C& z%(mk@<)FZh{`^Nf^LgKzn8Aqs)voD@cTb*XG{fbDPrcrZ7vuhabu0LiZ2IuJQRs_V zi_Zb+N_B}m;iCN9fN0WD1X>v%H)by5EY)P$9L}c5Ir$-yg0%ob9xV(8_rc|)kEf%{ zkyN{+Cqi&g+v|g(Q}OL*6Njfiyjpu({q-idzL{!n>PN9e9$;{{`2}{4bHZY#m+=eC zK@AE{1cZhQIkvDaiM4`Kd(3~WW|1mnFCN0Y8XNo)^6O)mH|;9b$tZZ7HM>+a|0yM# z)^Cm=VU+`a?lk=;tgiHC@es%cYlbC_|2hu-V>1g|-cs0jBp|P6GWlebcb2_6iF$Np z4_!mS+5tZe{WTNYMT^(F%JtE5aETaa*-wSLGALG|i{`fzq{w~xdnfKXEbcuvE3>iX z5BpieaF}a(500NcG}dhx{P~vEhoX@@zS{||D=BBsNRHCSwzoe-ylt|%5V|(hBNeiY z_PT1H+)bv;^#=|T=fCTBY^A&ho1|4VD?>DX-kK zd{lkmq#=~ky$365rpdO6SA~2;Y$`Y3#()26EQV}qU|k1MG?|KR7B z{ISLyTs6Tzqw;OElKNcc)uaUyM~$D22sqmg5Gf|xDT6UQLECWldtvy+g)-pS(krIn z5k@v;A$uaV@@=@xSs1h12257qW)IlR!ib;^H_t+cUeS)vE2&ORJx51VadH%`-GBzCvP5QY2SUL#+4LlcQlo;a)cZU zws5lc;xgo%07sMGVGiqx?dh_ut8#+<)#6F)je?XS_Eu-zAG+W4;Iuzf6{&+MGkYAo z?t17Vu@TBq0xs9ykwJm1!2Yk%MhCP17@q*v_`+NB?aL5HKM*F_r;?lpew*Q>e=@LV=Dm$)mC4IE@o&h{tp6DpN?qJpwSspg%ot+!p7MCj zF*$(pXD`nyb|7vlOVVquZ^xYZj()q4Sqx5PeQlEzZ>`DXxNgKutM#U4r1BmyuRkJ% z*az2&XK(L6Vu1u3z`fXJEwUNt=p5Qsr97`@&*q5l4zRtwAtrhoV&t)doNW0Sk6#NF zV!IrVd`tqUC573hx(bi&(TNh(YqSOQ6znXjavALGlUu#ATXsX|G}W3Q9o|be+Z|d$ z>Q0;MKi|-*A#(2iwSuxvI7Q^fY`XSuAV63eBm z0zZvwr*uN3f;u!bHG{Ey6z&2EfvTcSFO6On1zjr{HqIXBEJ3 z(>0_zS{7mPMv7h&>_{I?^LL3gag3uIUR9+kH$?O+5{RZoU$h z^8{(0#UduO39}!8>81mDX|X(OszAon*ik`kk-f=Z*Pg9_6(#c9Tkkx+suJ!4;iR`= zQL5xlJ>2URm@*0M3R=AIaJ+)`N%?2bve9C}b_R5q%5ZWoIlbZ-`+IxfBaqTbUm42EsQ(Onyp;U{%tIz(`sCf{!I!ArdVDO>Qq3F}e3GHrAzEOOq-8?J78n^l#I9s3 zwXW%OmT)ixqEW!142_UhkE`i-$A&^GAUtMb;y+l{7(}rdwb7MT$%Mh7fWpx&C0$qbixN z#bnE2@@wMWkKk%-<>mPV<%?Sd2-XTJ{Y!fEziti>Pd46&mfTT#h!Bu})I`f>+AoQp z2RacqkD9P3OVhqG%hcUhCEL7dspZcNU4@5i=6slM^h;PM-+Ndy#3+EcGU`@FCaKHi zt#2Yn*yghC6n4H0T;GaIZ$B!Y_4t_(_x4BQ>&f0dw}-Vp9M|ddGtR(?Vt#?8 z7YU*Tr2eG=qkaaE2QCgMG9d+7pU~S?&j5Kl|nJ|eAxZrw{$J}DZy3o$vAd$4%o&N1VFPfI`zmsP;d_m?2 z2HbEX*vblx*^7gA-}D!*1tD!!)h0bu1K)=l{4UlUv{o(`=Lc>M^FW2~?x|Y9Hd8N5 z4#1{90f6L3sY7Mz=GtLoNb$jF82gkFW*EbaQgI zKGhE&z1X<@J5@@U%AUscM73YfVNDTaZ7;qTBjjJ*ZYqb5sZmP=ElpbD-$1cpsS+@r zQn@|LG!+f6bEX@>KO;TP6~_HJW#A?=Q~An&7;Q*Vc(+~2d)&Df$H>Udsgk69jU$fy z6ASgFP{#Th;47(GuD91h1u`cI|0G!P_z9}Ka>oI=BW}9#HQ5KKdo4?>IZaC*erg?!*BDc3kk{fFDc1`39dwB-b2IR0;Z5nwjHqGey?% zG$=9&r`qIiO_1Y$02L~nR(*rc;q?!7#(F#exUoom$w%dHXXkNj8puq>s_Bo%W+;Ak z8Ue?Bnnff!M zhqH`EmFh=k=x6vdvYj->oUEvk<^3EP`py2L zOZ0SeRx;UA?B+3aw2$27U0}VPY$nsH_J$o#hHn-i`V9)?2Y3vFR})b=Nid=08~N2c z-6w+pV0s6d9!J^zRQ4tY1V$IRayp})d#x*pj>O$!v!mGVdleFqO_dYi*XQ#yT*Urc z;fLoN@A$SuQa$P<_h41GV6#zf8*>E~6>S46t^Su)gtLxJAENI62P>dDRm3=#9e(}Z zZ3=NkyYz23h;%0@OYzu2VmBtZXx_`P-b~!Dcw9UyE^YcyWV=Pg{;=@FwiNtM+E+xK z+ViV+NgpI{pu~u!>5rc4aV>pW87dY}rY!vn-!d{^a60L{prY2_an{ocG}mL2^(4=% z?ozgWyY>`SI~EreD2-nC3^q~U4Q^_Zm@lPcnJIb#~?T4|pNPpO7Vk;S!XB(0{gLZ|tl=qVJ z@1iddOLJUZ`D<(vr&vKS8K-y3TTfWIteL{BrNik?-Dg4#w}@$t8djQ(Z=hA!fs@|&9bevu4QV~`5W=2#PUMGWoaSPM+9rIg=fGUc-X}V-lHH5R|7|a(WN>ycehcf<+z&mX{OqXW+^;yHkV0hb_jc zM4Z4z;25gDxcPndK@*1mM%~U^^^~IzCUh!^;y#aeyx2cFnn5qM*UtVAby*i_ML@lz zr>`N}FO1PxGGlC11s6m!gu^@TtPTF|Ju=bwp>%;cW~m=ec;7h6{%Edioqf0dq7i1I z-1koG=cCkTOVz@4GvzjSkt_YHD_tYCY}HB6sy*v`hLgOfiU`y5?A$^aMN@Y7Z9O;l zdmnz}6`u9Bcyuz8ucKH)^wn2fVc>*<#x+@Pl{SYCRFq5#geDFimSpt9sZfBygz9?MLoE+BME5n+E9!mQDdG$hSNGlyW^Zw=VeC~qp1F%Z&WKFeA z#8y^BsRo)=>;~2e;;4ss-|TcyS<9@~FY|!3A{YeoicV z(*fAihNTN}>9;MX?DJ>^I|$5mH$Z3aZVx_?Y>8a~C*?T1>tmz!(c!Q_PAC0|B6(%x zeR7|)&msJJZVUIjKo8-owKxAWEYqKEr*gr`wOJHdeTRPZ$af9j&9WR$BT*odlZc_M zw}|y6*GJ*<45bhOk!Mxol^oUOsbO#S1=_5FXILw__6;J0^(G$#J!I%c1|%J<=|Lf~ESb+I9X$CG|EMKtVJ=eq@SUz? z{zn0xXI1Wg&3L{rAAnOb6Xzia1ZyEK{moApx<)wjCAsYd>Przqz8XI=ESYI(ABplO z>qv@~u(euy4>ZqLuED1!x){C=Vun2*{e!9(}z@-?UVN>^E58@z}%Ks>N zBYXZcMHq!u^n!ZZAW&?*J;ZhRPKNcQH57AINEq#K(16zlh!NRg)xJZ^ znO=dg#lcr3l%@Qyr7XOc59U`#&*Iy9JFI^Em{)rYhQ zcqso_e38-jE;}|#mTL43OYQ7n9j#pQ(Ug+*BglDPm7$?~O;`jzd{(vpi;D;!+?elR z)smd9wn- z-av+Os3XpV?wFF0+8<=zqa$f)TAz6e+@FB2uCm~R6tfskO7oyjmo8hZFX973$vf@2 zumP8%0xTZ0EGen1O5f5p%Q1i&LeV?_9nI}{G=7VrH&_c$ z7T>alq|RIolp2DwFn4mStgy>5aOu_Y|LvRx*SQQZ{S|}`*CSi;%NrKoIOR!5g(u8V zubX2Nk9F(HBQwza+qRz+IB>(`??oq=-KtcOIvpXhrtnwhJW#2iw+QT(-2JkC> z+zi^Y;^u7GS;11UN*0ukio)@_5V>?+8cCNp;#SN!o9X52A5Gj0ydQHOV0hk>f{BP37ot}#? zKkc_Q6WiW#Z}iUox10vQy#0M1LdJ>t@(EQl112mian}=8oJP6Ve+KVUh)jPE({`OL zCNL}Wy_?jJF>!^ml~yFt$(5IhgH@Q5CMqPy;Itho=lor7DU9LTu-e`{#Y)d-w9 zwz%sn`dBR`)9hoXK{xT~L+^{CLx#)YwGzb^@+U6=U!k-(>#zXXwn^WsKIsCbVZ)H~ zOB*A=doE84?X}O<(JpvE0hEHr&JN2o{SC+Vy6&nHxgIU`&-=`5vj!R)zRl;Z#xFQP z5{L7@YFPxb6bc3BJG`WVSOcZ%N?+K}I1E=*5D9jF=wio57re9?#8)Sol<&~RR~dz* zbe`%SMi(8%8sPB;w6o$Iw0@r+RM^gwuWr4mB1NIp_pc`blE2`Tq@U?Xq2RG1XN}3s za-?WUfjk@d>pr0Br+vZce+g%Vg6;3B3W0q7M;uc2EJ)RA?Ca<>d&*|Y_P(9_OI88F znBxG7*{emBKxL!6X8k(uz2iQZD0h3&{wwqSaJ23JnRy&8k!lGAZRgD}X5T*L#xXT_ zT_@ymx?tC;%a{EGOUSXz2EP!=gU5pFlo>mFEmZHy4s!4Ra4iND7+%zGc>JubKWyjb zoaRTy$NyEZE-tfaNwB}Oo|m}ti6aNQbUfa>ZK~JXk_OLj*6piBYLdhBH`0?VjW6H_ zvLeQ=A#02p^h%juq!Kv{JDX1$^`Oi7>*#P+ z%vyn-{Im~dW=V27z26|%wJNT%`w`t82%Wv;o2i`i1YDjOp8q1DWH^GBfO8 zQ7Na>$S2@&#V?^Ct3w{{QmxO&ZIqSaB~-bCv(EhOS5Qf&F}KN29NE1lYEf(QN?mtZ z4fG6y71676aZ>o#TS6N^e5e3M2dgpIq;U#M;OOp?=O0e(u6FoyX-3Gf=D^Txl?(n; zAZedG+!T%6oxKe{tJ z=1^7bx@9|TYU7IB?HTBBt_>fNIWK6!a?QYisbqMYX|!@>UrbNC{~S&t4V?Q@xd?(q zuE=C$cdA~W_x2-ZcbRD&@*Gg4x=Y}c^i<8^`GaS3jNF9i(dZw16Opd6quvWf70s3q z4^AN2w)^XT)4FMi-`42`mtLj{d&(T@Qo*l@<#aUej_p-$j@v`F^WK_OLcNcq(|i$6 zSJ*9WI0MDHhn_-4JcmP^OIGT4N7vInyVYhoWot$zSXk^H5+ zp+d1|n4PgEkaq{X!MYM~Me_H0Lrf=WF>RSv;)`!u;QmC>ufX)7n^pXa3WbtVTfch8(dntU za~t!Dx`+smM1)_Ob40%~d0<*uZ<(?Bj?i|NQ04S}>-U_+TZekJ&lc0oaZZOLNIK)A z!)PKn3yx&k;YV-cdFuFX+p)%%*M2CA1c z>hL4iNl`p)G)b3rI{PNiuYP;-fIquZVu8{k98Zt*`8WS?K{Y94HQMX^XqJu-QUu}h zAC6GE7KP!rcI;-x;S5MGn9HyNHp22ivaQF?|JU>Z;JoQYwinRj##(fs)qog`|L7 z1W8Xp)#Ri|fvLyCI9_3q7f;=e%IiPIkJQ_%TK=p*G7MNcudb*3l=eX64l18Lj}{n{knWxm$LioL0-j}&GXu6wZ{|G znDHwsqJ(BUl6kDVBV)&m6>5Wn7r4(1=E3@|?dgNuggh&A3+ncKm4<5l>P~&S(qL&Y z>tyeg+ff!L0B>@)??Fnz=zF_Yeengtm35Qro+dj#!;*jJX7m>y>nPb7>y^NZbK0(v5sovF!}`lwxMuzaRt?Vrej`t z%pRcL=|lvtNpGfmC+-|+YU|TQ-bM1&HuB*Jk}nAkG+>E$((T1M3rXxv zR${2u9Ur)5G1G=Z)D#<1gON07RwiB7Tg-{NgfG`fODvtu zsCfHnankiFV>2?apbpHA@Mc(6izQz#Ye)kEK5YkR54$eVzt?4L5yi;^Y@cZBx4ho) zb8cd06-Hg8z89|aoC&|qawhFI(T4kpyIRCCN&qN~8J$4ahb^eHlQJvl4Zo?hX;9+Z z9a0RaOZQH@|GKWXKcbTbC&-r4i6B(9+9~yNiUiJz6C{_z3FBQGnNhE+M30k0(TvRClKsbC6)^ zsN_M~-q!YJ>SDLpgC)+qn<8{Fthfe+FnOFNpn<1hog6Vg7vJ#w;lG{za4+B8HAIQ797?C2_QQ4bRqq7&QIX#uPajK+$gpYhfiE;b z?-PU%O4yL&-omBN;NFSCUVvY;46EkTTQuk=$s;ape?CY$JK|n}_Tf8HW74_+K1~M{ z&dab?jBK!fgHTphuhw+AlVIP3&fs4J#SlmbT9$QKRJAsreW0C766b!BjD-)+hClCVEx~lFH}B>gTTbtB{ta;Cfwp1&IN=ZHqI+zjt2Lirjl$Br zFqJZ{LyeYk++U7QiWV+rgiGPK!8%Lv^-vv1wIoPMWzRlVp6=V9d(@%p3|1hYFo$h3 z2{(K1y536!H(6@esMx^*^1ZWkGqo47-9V2~%aQOxb8m?T20c%4+XAH>MCH{O_F8oFUR(pSz-_hCXi!eFp{h_L{;P!E|t_=t3lY$L+2Hq0v zg7I^{de!2-lL3?Ic3jzD;WO=ya_8Zl#9^hPGEdK)4@Xp*89Ci>Yo>R03urLslk@D5 zR7Ta-&iRmw&>gjI6Rv>NB1j(X{&e-#uU&JAKK8r__JQ1`FW#563JhcNQrUa#I>f|2 zxcKqe=cbN2J3Dq%iSbK zmJYlwi{6Ryze;LdT=@A6mykIKK)Ir|)sr(ptq-uPz){9_@6vhsL~pg4soV(9@`%aI z-H(ahJa$L>GwM7b5772mD@k1W;wFSThyq&KklOmBXAG;X(SK}ss7514m%4pD>=bHa z)qY>Kqn4`TLWz}KNV~kUDgN1#a9Q`7N5>#t@duEeu-WHkRAdup*7?9Jy>gtMD$0nX z^0QuqbjOJmSSl$Yb<{QO$?nfBHFA#km+|4SmK=i16uR$EgiSz1#P8{gTpM-Rx$hh( zu`|bFne=hwbEiW4%`up8Ic)0f@9hA~DIxC5K)AS5!I#nv!p{5LTiD4u_Hn&SRAkgI zpejg$t(J08@_Sm8F1iBm>W``GOzP`L-l75QSrs;`hAFS}(trJc#(lS_W0%rYz30 zBm{Jk*bNL%E$09toyruar}S4j9yF?QQ@$VKQ44Nx9?;kQp%pGziVoD9ZO(-oK-`Tb zR$5MJaPGZhyd9K6PjY{0p1Pn?gu-9LPALJly0v^H+rxw#A3P)t22?sjav$a+c_d6x zU0$H~8>_t0QQh8me+02KkQ~_UyXib&$f&8oq|u=_jA-~>{hd|lq6Qz?dy@W5{?bHU zsoado{EVx4S@DvtmgSlbO6kx(EaS!vkZcs;Dn*pMZQ?txa^tQ2PjL3 zg(dA)^I5E8F0o1RUjuw+6}77hbf2(NWn|2TV7CoQhObcPAh`pf-QznM1xZO%McN=& z>Ilfm&FId}NDH#Lkx-BInYfXlgU2a@Q&UUoCGKF}zvnC+2+HoEp zXqCl5JhJ!Toj(Mto|c@m_2Sna?GLw=`T@`g>}Irv9Jx#y!K(7n!l4>>iaNCH=bJmfO;gV0=_0=f9$6&5g z9351gO_i4+9Au%0at8CRO#d4N8DI@rjqECMSnHp?_l(Z;J2mzi+aiSff?o6Y`K+gZ zU*tEFr4(Omy4b(zyy8=(^om7uw0;TrUXChbkr>|jUF(Tr+I4OEWx%s#8*j2y?mRe9 zKW~Ud4<$1;jwI8Bp&~X@R!r;9%SD{J+317H-P?zFUo#xrc>n;RLP&ubdyGQBP*R=np^mZ0CRQnLS^Ms{_txdr-HHA`VVx+l`b9yVMnP3fI^0Q@pC# zD~5G|uoeu$Rk%Faf1*Y%f?Le08b}e;^u;5LepDdT&=Y-u01#{j)9D8zMDNl%<;h`b zoK&(JgP3ysmtSq)Y8~DYm?9ftmqD zrHi;85?b7K>Xe{5xz|U>$y_DX^p}ADzwODYTw4FR}o{V_#`-mR3Qh2 zH>G%Xjh~sX#o%p9$Ac_LYaLi%`HIH*)Gq>yrgKeQ+VxVci&!U5tPl9!jnF;YI)uJ_ z=wQ{#cy2HHmHmIZf-y)^Mb_f zGXJ!DG}54b`Bva^KgXHK`dY5+$@!eI7-B=f_aMF8pa0AnIZW^#!(CP^T`n*8V-iWw z`nFvP2K>F=?ahEj*Qs`j2YtB$oqjixnTe!;4LO|Lc{sWMh}GuP+O3Uagb<8=tfc}#R>T-i-G^oKyp7l#Z3I;3~U+|-u36nMTA01x4Uravtc70(-1ci^o9Ca0YhV+$X&s%} zGF*!2s1rjE?0QLtNqyE&3I@!h8KEa|IAe#M>kKaVaNh>wxTVrX&8Tk>T_}(YGq<^k z1)R@e6wdPJnV zya97%RWs}cYxhfsF0vBKL?-ih{oUTdVga+9cPSLCBds-($vMJ|q>fT-d4Km!5VYE~ zj8CjHMa(u&yBcCsR&!h?So#xmp7g+=qBVi&qC`DC@KrA=KW{vEm!!RKq*emVAfR+3 zSlbKbUHSM!mEN3;jZTTa>P!9Jr})h>UugP6Nz|g7c1JWx00Bq6Lq>Y%80^9U7>^&| zb~~(Mv6x-cYJ{P30btbnKy>DGh&9G4A<$Lo@g9BnW{1R~-!|RnI6-6ENNHVVFuS0P zE1;Av?>%)YaxDCE<5X?^{{BVR133a{8F;Sc)+j2mg94kUrn3PcOiO>ZP?W)z71_vv zni1@Y5*;hBbN*7_w6*4m@`;B$s;Jl7y<(g#JJ093If^&M8GAAbr?naP68N^mM9>%g zczm;4B`H3SoXz++kMsc*?|zJuRD$W1u#4^*9X|Wu4unTkULF)BZ<9_Ro)Yi!fgr4y zC|hk4>{%D4y|CW>>L=K8=)B#Do~HjA$rsA|6Lk=xA$HUXfJ4`i_1$Lj5;ZxB+! zEvetP0hQD|-+Q1(<`hveqeVarS+lta!E=JU->En040ILcjFfwRxoZP60@l+a6V$-y ztbwHw%M{`W6cC_Gz-^$NlRquW+$sJ`I2izhdLEnuy0pR}6{CjBtiQnI4}Mn&Jii21 zt1ijK^mjMHZ&B&m4+i;@LO(~dn~`m`euLC=9uj;-*Md-%VFjl>ag4Y1uoC4nJIW#? zz^F#_#2*w|-ZGpzN2?$hi#H9^A!V^?8U%QfzzS1|^jYHMp&vC^z8=kA_K?8-mDDTB zTRy+f`uee9k3rzY3{Yk`zdUx94c;mYWLCYUZMJA!HBZiCm8z<)0MGt>m%J2lomn@0 zswV8ID!Bi;{|?LmL~dl4m!D1F|LB*k7z$Az^9}&d(Kv%u3@n^M6>#8k`s8bZzFT%{ zS@NWS#z@-x((`GB((jnqTdj2bNc$t+P9d5;bh z^+YLN>{`&Rymag){(kpJZEfe}aDK0TsAec+7v*rsH)9n-nCz^!XS!Hz-=doi>NV)3 z8qktZOgSz2rMb|#ez- z!(kl7e57aJ#|eI7UdkH%O3_~7bGK-0sdXckP?L9mIj4k#CXSuz1N@oP8VtD@^jovj z4?PtYEV5I{5tt;&!u{?S+(_!?WNrz`cL&7I$D5`egr^r!-uLI)+v3?0eLR$1>NPv+ z6}tDu+#krIK1fUGb$s!(9YcwN6x%1u)ktbRRifyV;@;;=oKHkR5EPm1vzzX&nqcBV z0?fg43^5m}dZGE@rC~!VAhWpVK{v3W-vEkl>)p^ON=gfWhgtOL46Hv~>=V8+oZNLU z)X`A->_-=C`4I7=l;kfKJ}*=rCb*1ae5PO{>c4>&QHg>je+p8$u5@Y43+A|)pCwm5 z*LbS943GL)NwFP$DOK`uMWU4pE(b!Rd4}02i(}~4_P&Nl4}S6ZBmF9>d#WcoO#Oi2 z$A&k?_a#c(tLE3{6%dowO|b_KKm1?XHW%=C3eB85ueb9Q=hldVZD#n z+wGU%Mk&jh_xVFYN5|C1ej_-aZ+1>f=&-&#VsaglTR;44UbH_G1;Q%)HZE%SfR#p@ z4$KvjB##$`Fd2S8W3cJ8X)0H9*S)FR4) zP?d%l<4Na})x#da3THp&4mCT6S_I*ehZ|WJP6650;HEQh;PRY`wV!TF?lJWSH?b6! z&~)kxNQrSUoy&;RJqxDf);S`Zxzg)Vo;yv-NnzcJesD!8NsiCp@8Ca|!!LMyE9V}n z7Q(moBTl`s=||ti+R%@);GmtS>b-QoPCyO!(Io_crm#h+wElcYW&oM*M~h09gKI>m z_P0ktnr4;X3+?=Q`NalXppT^UNV2Vs`5xPjyQF}HY*zZfKJ0LyKeu|Tx*$=2gW_<_ zW$ID=W5V;`oWxJ&bOUgNe&Yi)45}~d&kr<|dOTL|lv+^_R|aj{c&+?LH}BqS9?BaW z#4t6o%hU~U@Ai)dqcjS-P6LJm2h9nktAWtbXIRDpxo&_xq~MOr?RB5bnJUX4x)*{! zdV+#`1bwqNmQ|9<%O}8du&GIii`K6_(vo|#`)mkXV%Dd8q^$A<-$>d%R$;AnX*Rx( z@SK$={oec3;c@q-8@MyO;k`d2vEDtKh&giA?$~wN_JLV-ATNrQ-d^q;mE>p+c`LHR zN=VH~R9t7He7Lp15qg&jmgZemmt$#EPq*H!D1kzyk0Pm=hN=swogo=C3I~IV(L|o2 zV3zH0SQKHp*>;l<-1MWyg_USG@8O&4t-DE~$CRkLjt4jeqCb@R5)=dO+`tIJ`BvCT zI;D~%!lgJ5KOLohk@PZN(j$voFp8GVeO%7Iaf1qJBw?u{+&LD5h-N;pQ9z*J=$>RN zdw75r#pT??uEfXtvWGWbcGi#1#mC)Kn>Sl5Jk5W%W@N+=L;H^oM|JdR9=Gk*#rx>dg}to+7**>ii(=7R{pQc9XBdPZ!=iG0Y4!2KpSD>iZ*GxLF?z8O_#PO{CR z&3bU2fN!?gO79s^v5_QQ>SQkutz1y@?W5eRaP9@Wqxr?4XoZQFQOaAGgI_nE@EUJa zr{)V)jN3DMdhN0kzlr8r!0dt}RI4k0WCT0Q!zI6^fBFl2cnm##Y&2qbu;-1f{#Nf`&NF>U^iT?)BszrbD!>C~c~X zl5?+TOl;uPhD%0*$1_TXl&4_Swqn6)aRyuBs}aP!%goL*GWdi$B%4{g|zKE8U6P@>+VzJy;!To}9iW zFTu^a{V_(9-)wCSOeMoW*{#mw%=m(fzo#*rm>LVNT6u68}>Ri77v2ML#V`9NMz z4siIZD+?O`;fgVk%-e!9HTdeHFF!_X2ux*d_Rh54YxJmw)I zrT&>R=u@MA?Z-(03UHvyxPfjP9&W;d1}bV9H8+BZ$GUJQ>@-Fzdv1|~#>en+P?@6P z_62P=vvBt9a+qKVOG=+`Z`UdQ7glu5y$jn!UMUM|zh@URP(BaIVISQs3S)X73wdQ0 zN`S$O5oc!4(pa0KiO1e%|32tDU$nx6`w=HJDwI)F_!UDM%X3b%=M910QrCrON=?XW z7fWF^BfkT-4u+1Mjdd|B>u8An8XBoD+Y4g_XK8YCZyZ{Nj+M{?W<`7dD3 za^+DYHXZh%MqF;VN__U}mb$pVpX-XV_iM^-FePNXz9EB>-`^gninw$10&_XUuednO zhE6HA8>WzD9VX?1-32Z6$CXgU_2}Yo={iBggm(PbqA9tkC!f8Dk)xO7pp_9Vlf&q(Bp#Apo+TyC#l~2ag z#u3C9c8)&0rboU_+7SRAO{H6qtw2z&|4)108P(L*wHrE8grgA^kOUiDQRxZ+JW5k~ z4NXNl2-15~P*EfzMG-FK_!E6EL#_z=Urz}`)W;k2&C z^#Nt%wB*iS=pyrWVPT$TMXMT+N-#yKZ6A(HiT)tYZr(%qY-BxlF%-XrVFHwFryD2I zo}8RZ=t=6d+|umZBviicISg||9G)9nw+f5^i}0J>F>d%;8JWBBo4G$ys40KnLEKgM zLu&o#^5DIBN;5^m!a+|a|M~TB;fml)cPR#e%^2mw*E%dzFcT9A=z2!!o)XmH;1-9d zK@{hy|5@5Ne)<@!zaM*X0A&CM+axC$(%HQ_H+vu?iAU1SOk6x$^C<{r>k#08bg0l6 zZ?H~qq{v_{%`$%;=a?Wm>`0Uk1vB50Ci4j-NRJIEm%UG z)`xfZs$qhO==H11Ot7BfYJYzK7zIJF)a|QUEZpZM1p%qP&S@%g-G*WC%n~x(ebdoK zEw6v~MUt-}W%SjRhi7Ll*xaBLXXT5yjbcY-Irk>HeyxVG)z^Cmv+`b8@#7{1 zZpsxP5P4_T$mniE9Q+myY^JZ)Sp^nVVvx!b!rQ%j!4&|L#Y*!YSrmp~y=RQ!7iZ2V zz0}9=SWUfsETp#?{7sAX5KPv=juJgx?3-ayMIckK;#KnfDlC`4?Id3A)ldcNjeq(S z)c>TkB}y*MtU4Ee{`{W&sU>*Tj?0V&cCd|bkA`!q9pu}d@|xhjS1uDf=0a5G582PQ zfK7kN3^IYu_>Tx7`mTfo%VsUd>%pIU{(AN0CY|bu#RJ@mLkqy5A++w&UY-#Cl3S8s z>EmCsViY}jjyVR6>T)04=+~ox@h0AjV(1WGWxNJUJ#rm?AVdPq-G<%htQ$O|TlSBY zMi^J;ZfB+6TKi!wIIcFkUR=Y1h>EGAMK&>Q9g|wg1Z5j=Zowp4M!>&|oX!@pW^YwB63MJ+$AjwgE3 zNNBQzGKVPs@^E%dqiLR>lA1?E#U?VId-ry+=}N_2Em2FZa#b({dsuy5lVCV1um5?e zBMFcj{J?bcB`C{n__q08$a8l3XBqOb@I4-2OTCo=;e-`g1PBu}@RvALHV zLYy%~d5evP_8+}CX&aQ$6djC_Kme*0i8c_~XVmUw!tAmy40%sAbz~%+it+#sSy~{o zVWE`0?dZ(`q8N8B7N)0LzN4o__oa`0u3vE1me8hluYXyr@V-Gv5X9Q4>b* z`aHRPZg+zKXse)bXhIJI>5pN@_u8vgG!m+0sWf5OlI?oO;Rl~{aI&`>hUcCnUw*J> zU%Rw7B$aQB_r6V2jsixzyceRxEw$h*e8z@Af;HX;@gKS#mgwAtWO7C9Jamj78zd$Q z7KNL9UlHJJu>wZLtf}wWTBJU|wp|@g`U%4F&fX*Cn6+rSe1Q+KS1K}nwm=1F7x5C; zr{C_LOOiC`#8Cca5CxuilFDduvjq%`aE_2G@BN&=c`S#87|sf-!N!|qmrK2nIgy2J z-s+mL@t^EGT=xei0-0EK^Z${?pDovyr+JjehwFLPWf>x*wnZv&Q5gjRV3ywJz8+?U zZg2yeJ@Ffmzh$!--AR$TZKlXqfG(429w}dYNtc%id9)SlNtG=Qu5Vtm*i_H1Uuyi1 zKx}<~^|>BVdQ~Fhv^_9b z&(3>^aO$@Tri89o_3JQNbEvQ!Sve}|^Q9x8CHYce-CFcSOS-PEe=ELkwcaJBDSj^Z z8x&oH)a^|>Anz}aC;pHQIsLLc1Vfj5Ej8cK3jY0X8cyNtso4rpD2CBxU?(5qQZx$> zD6!g8WZt3@^(;Z9#){94PmlA#qxEVK>~-)$<_Q*apT_a{wuQ1|-U9uMC8 ze)zICBm5(#f!Gc$+8PoM+`oUK6akFweN1 z)~O(FrCncmC|BnPfUUT?c1wbV;LD-MSLF%5Y+#gIR3_wjS1Gs}RBVE{YURYuqNC|- zZHuq?w2yorj2wQ*AYsUI1Yi<%h_ZkIY_p{LxDJcl3eEwl9hpNjie?%j_W(!Jw%OyDwRQ41N7L;Qz{<+hL`1nvO)M9B0tBs8Scd5fs!^4q?~Y45rmjhhZ0OR-VvETzAk?Z3wFq-Q46eBDK@Z zBV2li_<%iwRB=ARzn*uzzbF}8Sn=uJ!2ygRwkTl8JZ!WNK*?y$ z1MlGmbCqyQBF3jw@_2z!C|(d`+MB*Zb<+v!;@p7B;c zT-OQ?UY*eYNH`S0h#l5xn)sQUnOqb*gp+s-(6T@#7Ts4PZ=OEj?b!X5?FSyhsIEq! zsw%x_lQlGx5mQqh(zASpzU`pXqjpIU2dVwBq%Go3vJT_4@D#-7RTPoeO*c#iGz4yK zFKfH`*T8#y*qsY1PWP=f=hvMFDWbH<8ORyFu8|V>5k1%b-26>grA8rQ2d^e-X_!2^aWV%7`fO>D?^(yKH830{ zko)1g>ytlno+U_=DX%Wb9tc_K8;VJM)b)ArfFv-zRtbno1D3Er>a9imXlD=Fb(k{s z3=&Ihya24wH}YktAU&?}u)z=wws?5hByly?LdAh#0*D?;K_It)Sl-|3AuTjeM220} zizlZqD@e4G_*|BWj)M;>H6E-$G2p*?jGt^Nrfl!hu5JZ?1&$pNlw-2-57yYjGFIJz zA~RdCi%8%$ZB}0g@s)%PSe9}#{}cT1c?461yU{PxL11q`I;gwFg4_7~OTc=qT)BDp z+C}@1?|{}gvthOEllR@Uu+mLKQfXKD%<1WV`@}EN==BT&%&jl%O%T3LM#B6Ib0~1d zjnMF(I)8F`cbwUl@YmU6QU#SlcT+1@{5RdjQN>tAwN5iHU;H2{TQeWE{UXsZk84+T z=D&)4 zOOf{B#T;yIclvNed?w&T2#LEwj&N-ncdE`!OTViqdFPR0#KHVUGj7$@huYX6VHsH3 z^*=cSn6hsogCG3ddgG3M0^;Qd1lf+aeyxCX+X-NJ4cYRb*?IEy*O_?zNkaTd)!Vu7 zY`G3UwVRjiYm)(iN=62Fd|1p^?7&}di<7G@m<97VEc+=R0vu`ut+rHHM9lon0}GGv zRGs7+GMS%zj7wRdtZHEoi5X~Zb!Y{1^L`*WPizj0fMEnsJq1ge6Wy$ugP7~JZNk*~ z?Go}BAf#(ee`J8Rm_fc~4BGTz9{N<_OL)9GfAlV&H(0mQ>zp&>yK1zU>2=o7x5cgJ zDKe>#0Yu_scRyBBZ2N+fF(o<>B%TbxWddFc&(!k;=sgTi&^!z6Qplz(zjq9Dd2_&} z(sQe-zt%JZK-V36`Z92U@B8LeDRWd z*rX~uLvHSfHemQi5I3(nMWsJb2>gUQpKw($( zo4v2i$>DvjwTRC`%E;VT$HQfiZ@J#b1tj1hp!LyfcjM6ziJGKD)~*ua&0p$;a`qbh znHO^zSRtR#g=d^llXF?9TF!2?(5l?Ac5!@4uCEgVmB}QCvhrX>c2|{DYK-@DR;+T^ zT2QG0SpR>H@{;|?PFR+7DmmXtC?I*7wF~1 zyLO%L`Uvh6K=t99(&xVvwOQ&{4h6Zi`&FH3J}X(v9Lko|Ga|kik)NRh*xWaf(>_Oh z<=Hc>MS{!{VXAJkVtpnl+s*CLVo}|iy^Q+H{V`vn#-0xzo}UloC_t^v=k%lo8w{e( zRo76&wWEGE?G^^4OY?RceGm!1&_($A78D>>84~;J;dgocw8M!6NZiT}rvGBkRSoGsOVbxr;vPlsvL-#-v9d2&W2ty2+{B-e47_#R3 zOULHk_!k7yH^+0Vsufjkatykk)}mJu^?qjYS-!W`vQM<&77Itki!Gv5?<<`k8E0gQ z>&Z8HZIptAciHQ7kVp;l1Y;%M);W0kGBJcJatp8@^FFsb`%2z%gt581V-sjG1XnJY z`jF{#4Dp<*a+C8KcE_LRUbD987=DaZ?TXKJB<)wD-F4L_}A*unQSJzF4us~@2%W1 zF0lXt%eqIS=0Li}a#6d!JOZdv1QyV)dfk0`ayDSOj&*!~k?xyW1~6Jkvh@7YFLyEI zxLI$+1WxnvyPr+c;q)_Ji}Da!Dc4to?G7H9(gv`7k7ocrc*S{k&C}#D2;Wi%7y(8C zd{sja;DN?9wiHOg0n>*EuY)czJHKk1>Ul{i zrcKsuZwkD=0xM3>DFuPBe@BO{IbNPzBa-_PWdKC!&|$#@;epNa4gBi!+?GXU1E(ZQ zGsiAkUFR*`qfVFE^pV$bDF;WfK~6&_-+^?xyln)UI)Gt8WY^$zrlUra4x`haLu(1{ zW&HCH2^G-B5+B6aqrQSxL{8c=iw;eq-?OdaZSmT@HSJ%Yy(FNg)dk@d9s)Be1r9-(aOZ?gk zTBI7w!Crstndy?In;Ovw_+{@ksgg{o7s=H_0bk#y{gu(g`|VeO8fvz}^l7jHNBN5H z>UOqUWhpS54X?lV)&_3O9Z@(Fw}sP6P6C2Pv2fPryfrz5d4LK(=ssotrS4K~L=qw& zo|l*Iaj(#48~YCU29y4r0$o=mLrl<8#?~0COL;e3$8TubC$5&=D!9(DWDQ3oif-AS zs3jEaJPN5W0q|MLlf@PkgsE%*U!aIzG%zRxrT4AT6yo~F zTc+MrD-3bVt4rm|(Q!nST`gz^#(uUiChP`)PcXpDV`d9xPrJZ3Ze-9E7AaT z03X|cn|0El+lKU~ATEhoSh&Ncn;p8MVT0u%dEOAYIWneLRJD{2M6C7~X07^~000d- zgE3^f|FTRtd)ig7OZHU-Jl;5-&`p^VH4{H8Pq8Q6IJc7;z%qYh*0<2tTq`QRtr0M# zK4k(1NMzSm7o?!7IDKMSz<-zTCjdbQoXHg@2FQ7?=VE(_wur~x&#NU;<3PMA6FbS+ zpVD)>%&`yqZX`_Uf`_q0YqyrlH~(m)Uab`1tY7xtxXcJ_8BMiip|6x5wf8~eGb6g- ztIj_1cNU62B3ld#zJ6D9a#oagw&n<&6G_g`#ZP3ne}B#JYUy;cz_JTPouIGlIV}_Q z8i+I5bYD44FA4k@ZL==%YpoIuh!?OI4+31!`$Lbits8$C_@N34aVsX6ic$?Rqyc-# zoQP?Lyr~#xX=S-hrI!n(*VeKxVrY=qH(l>d-X_oa^GNaiY)6QWzHD4xY*#o22puvJ zY(@8&0jqRZDgVma{Np$j@i3xJJo&-SBh103qU0C&=T|CD%P^Lo6)Vb{BN+rWGtFV_d}jzV|I2?uEdJMPSU>@Zg2O$>MyI{&Hut} z3VP27dC%r{`k5A=TjL`}mj`zd=EU_KGKA1p+Ss`u=SN(eX!R|o!dT^NmhW-Ww_@8q zm9<4is5eBP(OCPZUi3--`%5y+mn{d5y|G-|0KB#Gy+#cn9^)!#voNb)Fq3Q3FCjuh}ySj=XMeF2{8+7^@VuWpd=`OISHlD0oE zooc({sNFuyFowzO02^Rvd96u{Ifyqer9dpW1+-MuW~16)ZorII_lM0B9~nJ~{vmib|qn8s+bK{z-;v!vZy4}q@EUWr>7>~=JEk&yOZ>1iS z6TM^HF6A-xCVCj3Pil91?gJP&1I|W9F0URomie|c`*<~?pz6=>T0da<#uPP+_$a_+-pcs!sOb%+P+|V~%OVfylMpnL$WDuF~s}3}&N} z^jIYz+ZIf20-_;_2G_C&?FJlz54E zJ5OX&qE7m(cUmWUe!-Vxm-w=|nbC@ZmmgHZ%GEd7i0?J}LA$UoM}NanspVbbKLNv^ zVZ0a6|4nl8$vB(j9vPT#>_>eAr^a<+x~3R1mIz`Xo0~{j#|_BPQ6?hLcW;dUZukk) zcCa_DjWl{FK!i2Dk(w2HrSQ9Jp9r9I`Y-L2k?2Ed z*t!Ke6sbq)p?3cbgGM7l9nB$#Qw-E+DeS{n^D~#vCqJ^bYgdh;GjK6a#g}*17&yQ> zX_W^GP5fP?Ua`XHCaNiG;QMW07+dOkS~G`ssN1X7I*}|{LcnVlym%aWxpET-t{LtK z;=dQqe_;e2r(qJrW*irgbnOO#?iT-f2BC-u`?yl9w-C$?D6v9p)My^{Y>x(R&vz-j z4&E}NZ5Cyp%s$Hrv&#$)UT81|_5j`6n|kkwOqv0SD|5or5-qr*6a;hvmZ}$PF+a4) zk(`e8l|NAg`A3K#FIXm#>Zp1&omIQ&!h#{098)Bu~J*4)4lH00n44yOjF*-&c5m zU&>|p^=)~#73?cG)v^`A3LcB-9gbB-LUP0rZC^`;fZRCJVRwZ$4Be?;b(!yOP`2I| z`~_qnWj6Due~7j_rT{t+q+-1x(kllSgG;+w*?Ftro8kq#hSGrxZIB#=?x3L`Li4up z?DWqpa`u~hb(d1-D(;!Skql)Hg>@u=$^92ixeiu0k}B!Gb$;4m+WxVnI}MW+kRJjh zMv*1tm;&h*Xdpm{{Ja77>1|QrG%nf!fc{#+hBTpmg@SuzD{#2(beJjDcD;A&Ze?Z5 zC*KAa`27B8kgj5cLYAbysg{Jr=8ePmGFcuf!unGX1yu%nAKq)|1U^is+E^Mvki~dd z*gef11{G9%rmG_8(2*I^3hmtHd!(W$WhCq_SkY5;TRW(yBrMq*36_-i_mTpM3=i58 z?`N*q3Xt4%Aa8yS!N98;S9ebw4eG+6Twc%~u$Rvwn=%do!#z*0d?u6gOH5YEvsTjp zLppr}7TRpZk;#NW;I?4kn@Yd}fmkS7qC99JJUB@*OxqdM*h)pFEPYpN<`kG9nnVSM zOVx(v*4rNrvqB7ql2}{M&?_6k)N#(l(js%& zPctazV0+eHpjpa|Bt8RU`?`i()xSy51GG8qGbph23j!RJxR_~Dw|95mGgi zfu)L#`VAO;P*T0xB1G>tyc1!QpH9$4Zg>0G2V;TA9Y3r8cs2IC5dEDUogunhp%h_?>5$iGJ(n}zoj*RUxn%FSieq}b-+ic<6X|hgU4@VGK$MME@x9Yf=|$E}kP~axPUz*5006 zQd4^9;e>}vL`z|o)C&>0_8=Sv{D+Rf#-Xw7WsdLcRR%7W>*&!o9u z`(fHNb?jirYj##gIvT+u^z0)tC<}tGDpLd_1Yf_BO0f7jJxk)jisis%K)(~A5KI`d zToZjYWwU#Opck4YuH>gxGd;-wUfcahbLfiu(QPn>*jPZ=f$MP=B7pmeqt@&sI{LUg zcO85PBYqcpiu_V&nHYPQvnsIkN|6~ASP3<_=_Z>yTW*ZRmF+KM!JH_cB||075MGUj zXvi%1HWnt(P%zre4Z*k(-|mug)2Lgt*$&l zy^{eQNO;(ih<@s$JnW*q<>bWWNTADovD$OX{)Bwjdr`;EzcNpP zcGP*GT{Iv`MFLtT7f3}^MVLR_R(D3U%Tw&G)Z6gDYjHu8ayJe0{ zbLO(QGiYGD*5Cwjz>*X;ADD=!R&gj&9x8yl9Nbe}fz>$(7y;|~N<@z{t37vIgPJ^y z3>H<0E+8wlS52-|9SyJT(?e?@k_Y(BdZV4{zf8=-pyiAsA5rshDeri95*!FKxB+wwq)+1T%GMp8EX(ZH*II`1bH3TP1jY3A{z z1f<0_rXWvc@4m_4)mQxaaDsxBkeMO@<9fG z(}MbBAu_)Yjz15o`P<=B-#$L9NPV^UYyYFv*+A}36Llu`O=909_Pqqv2KJpPbs}K@ z&rRYObZ5mku)X+$ItosK5bCSFU;i9H{_nT7ZU(m^i|AtP){~LAr`roL_{zs{ExIaz%*0jHK{@B32 zm!QtXzDewx1Z@A1q#D8gA^B%F?3={CN$ekzR2$eoB>%XDeUsQXiT{g-B!iZy!j&v# Sn?`6>)vjs&U8H;~?Ee6yfGutS literal 0 HcmV?d00001