From d10f9e9d5a2e569787e28ec1cd72bfc57cc6f059 Mon Sep 17 00:00:00 2001 From: JD Date: Wed, 10 Jan 2024 08:53:28 -0800 Subject: [PATCH] Article Fleet 4.43.0 release (#16011) Article: Fleet 4.43.0 release https://github.com/fleetdm/fleet/issues/15743 --- articles/fleet-4.43.0.md | 107 ++++++++++++++++++ .../articles/fleet-4.43.0-1600x900@2x.png | Bin 0 -> 52473 bytes 2 files changed, 107 insertions(+) create mode 100644 articles/fleet-4.43.0.md create mode 100644 website/assets/images/articles/fleet-4.43.0-1600x900@2x.png diff --git a/articles/fleet-4.43.0.md b/articles/fleet-4.43.0.md new file mode 100644 index 0000000000..37828c734d --- /dev/null +++ b/articles/fleet-4.43.0.md @@ -0,0 +1,107 @@ +# Fleet 4.43.0 | Query performance reporting, host targeting improvements. + +![Fleet 4.43.0](../website/assets/images/articles/fleet-4.43.0-1600x900@2x.png) + +Fleet 4.43.0 is live. Check out the full [changelog](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.43.0) or continue reading to get the highlights. +For upgrade instructions, see our [upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs. + +## Highlights + +* Enhanced user-device association +* Script library for Linux +* Disable scripts +* Osquery version + + +### Enhanced user-device association + +Fleet introduces a significant improvement regarding the management of user information. This update allows Fleet users to set the end-user email address directly within Fleet without depending on external sources like a Google Chrome profile or an Identity Provider (IdP). This enhancement simplifies and streamlines associating user email addresses with their respective devices. Administrators have greater flexibility and control over user data by enabling direct input and managing end-user email addresses within the Fleet platform. This feature represents Fleet's ongoing commitment to user-friendly and adaptable device management solutions. + + +### Script library for Linux + +Building on the existing feature outlined in the[ announcement of cross-platform script execution](https://fleetdm.com/announcements/introducing-cross-platform-script-execution), Fleet has now extended this functionality to include a script library specifically for Linux hosts. This addition effectively rounds out Fleet's capability in remote script execution across different operating systems, offering a more comprehensive and versatile toolset for administrators. The Linux script library facilitates efficient and streamlined management of Linux-based systems within the Fleet environment, enhancing the platform's overall utility and adaptability in diverse IT landscapes. + + +### Disable scripts + +A feature to fully disable remote script execution across an organization has been added in this release. This feature aligns with Fleet's value of ownership, as it gives administrators greater control over their Fleet environment. For organizations that want a "read-only" Fleet, this ensures they can tailor the platform to their organization's specific security policies and operational requirements. + +Implementing disabling remote script execution reflects Fleet's commitment to adaptable and secure device management solutions. It acknowledges different organizations' diverse needs and security concerns, offering the flexibility to opt out of this capability if it doesn't align with their particular security posture or operational strategy. This update is a testament to Fleet's dedication to providing a versatile, user-centric platform that prioritizes its users' unique needs and preferences in a straightforward, no-frills manner. + + +### Osquery version + +_Available in Fleet Premium_ + +Administrators can now specify the version of `osqueryd`, `fleetd`, and Fleet desktop to be used on an endpoint, offering options such as "stable," "edge," or a specific version number. A fallback version can also be specified if the preferred version is unavailable. This provides greater flexibility and control over the deployment of Fleet and aligns with Fleet's commitment to delivering tailored and efficient device management solutions. + +By enabling the specification of versions through server overrides, Fleet demonstrates its dedication to openness and ownership, empowering users with more personalized and adaptable tools. This feature is especially beneficial for organizations that require precise version control to meet specific security, compatibility, or testing needs. The ability to choose between stable releases, cutting-edge versions, or particular version numbers ensures that Fleet users can optimize their endpoint management strategies in alignment with their unique operational requirements. + + + + +## Changes + +* **Endpoint operations**: + - Added new `POST /api/v1/fleet/queries/:id/run` endpoint for synchronous live queries. + - Added `PUT /api/fleet/orbit/device_mapping` and `PUT /api/v1/fleet/hosts/{id}/device_mapping` endpoints for setting or replacing custom email addresses. + - Added experimental `--end-user-email` flag to `fleetctl package` for `.msi` installer bundling. + - Added `host_count_updated_at` to policy API responses. + - Added ability to query by host display name via list hosts endpoint. + - Added `gigs_total_disk_space` to host endpoint responses. + - Added ability to remotely configure `fleetd` update channels in agent options (Fleet Premium only, requires `fleetd` >= 1.20.0). + - Improved error message for osquery log write failures. + - Protect live query performance by limiting results per live query. + - Improved error handling and validation for `/api/fleet/orbit/device_token` and other endpoints. + +* **Device management (MDM)**: + - Added check for custom end user email fields in enrollment profiles. + - Modified hosts and labels endpoints to include only user-defined Windows MDM profiles. + - Improved profile verification logic for 'pending' profiles. + - Updated enrollment process so that `fleetd` auto-installs on Apple hosts enabling MDM features manually. + - Extended script execution timeout to 5 minutes. + - Extended Script disabling functionality to various script endpoints and `fleetctl`. + +### Bug fixes and improvements + - Fix profiles incorrectly being marked as "Failed". + - **NOTE**: If you are using MDM features and have already upgraded to v4.42.0, you will need to take manual steps to resolve this issue. Please [follow these instructions](https://github.com/fleetdm/fleet/issues/15725) to reset your profiles. + - Added tooltip to policies page stating when policy counts were last updated. + - Added bold styling to profile name in custom profile activity logs. + - Implemented style tweaks to the nudge preview on OS updates page. + - Updated sort query results and reports case sensitivity and default to sorting. + - Added disk size indication when disk is full. + - Replaced 500 error with 409 for token conflicts with another host. + - Fixed script output text formatting. + - Fixed styling issues in policy automations modal and nudge preview on OS updates page. + - Fixed loading spinner not appearing when running a script on a host. + - Fixed duplicate view all hosts link in disk encryption table. + - Fixed tooltip text alignment UI bug. + - Fixed missing 'Last restarted' values when filtering hosts by label. + - Fixed broken link on callout box on host details page. + - Fixed bugs in searching hosts by email addresses and filtering by labels. + - Fixed a bug where the host details > software > munki issues section was sometimes displayed erroneously. + - Fixed a bug where OS compatibility was not correctly calculated for certain queries. + - Fixed issue where software title aggregation was not running during vulnerability scans. + - Fixed an error message bug for password length on new user creation. + - Fixed a bug causing misreporting of vulnerability scanning status in analytics. + - Fixed issue with query results reporting after discard data is enabled. + - Fixed a bug preventing label selection while the label search field was active. + - Fixed bug where `fleetctl` did not allow placement of `--context` and `--debug` flags following certain commands. + - Fixed a validation bug allowing `overrides.platform` to be set to `null`. + - Fixed `fleetctl` issue with creating a new query when running a query by name. + - Fixed a bug that caused vulnerability scanning status to be misreported in analytics. + - Fixed CVE tooltip bullets on the software page. + - Fixed a bug that didn't allow enabling team disk encryption if macOS MDM was not configured. + + +## Ready to upgrade? + +Visit our [Upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs for instructions on updating to Fleet 4.43.0. + + + + + + + diff --git a/website/assets/images/articles/fleet-4.43.0-1600x900@2x.png b/website/assets/images/articles/fleet-4.43.0-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..c830f670e78a7a58f6995ef3ec54536b5d72747e GIT binary patch literal 52473 zcmeEuX*iT^-1o?uh)RT*krG7+5iyofsq6`%$i6H4GE!t83YA^RPWGK7OR|%FU$Pt9 z*k`=w4AXNz$NTX;-fvyUao^2yUFZ2)LVpSOAJJWvi!0zmq8BRi(va-d^K;-0iLulJDF`GNd1C(= zDFo6SeD}7LniJ9DpcD~=76RcfSP7FmxZPdS&|~l-ZV$Kg-%Hc{?@RC^gv0Z{Z+{$z z{r9cyF^d1Zm5hcQ`_Eh2%bx#v2l@Btku?5^iC`B0OyZwO{6h(XH~a(BBT4)-iGL>X zFGvz>;9rnDlEgog_-7K3e?jud2>u00f;ap#iGL>XFGwEQz`r0#fQ5f1@y{gw1xbQ8 z{0ovtlK5v5{|_b+SGgC^vQUK*!%oBR(p>8NViH+!zyF<~snFTS^_kbO8jdfP8i|IE z9dra0x>Lujsmh0@RQ_N-7XJ6F#I()#6 zT{GhOsdwl6!tSeFy!1}Rp7n#hen6gqf=kuRtsI7xvGcR{+7!#ih+3ndNA!D6k-!M7 z;Qsx2T=Ktf-<|RN@7s%)Aw>Uqf9K)<8dZcuLrDJfE$k-I|C(#q9Ro9yzt_Kw|B3pa zas6|r|IRx90mwhd{1+r(e`6$g@h?dH3ljf=#J?c%A58d{SO2Rd{uOPK|M3XOzcTe- zVgCQG6=6;Tfp~Is^gD8tWsASqWKu4lc=_^WtUITc#}^MBKKGFBe)KN%z*IK_yFoPQypYHQJ!9nb&hWkG|a<=rQv zIsw?$sd>sqyy%tq$m%87&qUh}mv z8*!4GdFz*?8fDc;pt6g$+6cv=4uq!o?sh!AbO=l0nOp;l3nvw0s0bU5blUwM;DPQ_ za{@6u7mbMX6WWRmeifxC-y7Lw%TITeO_nxq&#&mC=moN!ul}8NFH3p6LF{Y>th~7Jgw)7e z{Z#{uwa4}B0XK8OceGO&bG2>TYjqcVX$c)I6FFRE5+5cS!7$$7mbtU-_FRSAYk#U^ z^P_0z>59Pt*X8o504Pe9!p@_3YwO3%jqKo81MeC?KPGXWK!^4fSzkP&021kq>yvTD zU|UiQx{PN&R|=pe@8^=`xoR7HIDLJt%!SWKVkbu*m``Imh2$o-?mfTw4W`>vFRumh zj+AiRKs(4jlBHN{M0%J}|0RzSPo7|2wgihN*EL$mz!ZA7W*)I;KWN z);)*&=Wo%rEPffu-mY!wZSddRKh-t0=yt1WAzp~ko{L`_D09g^cn#>ilbw&czd!%M zXkh_rn7gr7+;guUn=SN^)w+rzDY1vKIuGrr-vX}|Zu*Q_9Nn4MUd|kaBHT3u6W{jc z`14w6F)L_kCsIWe6xQeHI%{UmnjoQ2X90pF((mECHmTQrNqe=yUwxXHZ}Bm!ZHskt z!=jqPc|_KE-flgL!thGlu4*i17IT?7G0>&QGF2~%=h#kV!tYhyoa!r0CaK2GL;N<* z`@a)%MeGOqxQ`dkN1Jo;5h1nYn>>MQil6@Obb|EdI!12*! z@y^ysb@(w&Uw8z1L+SaCL&yDw${DLg{v5lRVg|QU2_U&6&seRfukm^nUjb2#ob(B4e z8EK#ICy7hCpEcXq<0mmn+=Y8_?Et=mKGLIfvNI*S)v3^QDSp|ENm+k*{m z^^H0hwh(`r=6@k%cF;*xt>0(V1qO8Cn_f~`eVKLO>y>niUr((qbW~fu5unOM0>4f; zT6;!+x_vIS?1BxK^oJ{)-;sq|LkulXXJ5Td1U6(S++HduQEY23_gin`FpHmkVeXHu9-{dE~B)y`>`J86vQo}{wY{!d=vg4%5nW&GMOm8Wc6JT-~8=pg#1nrLeYmP(oF06pN{Hi8-Y=;tfJ<)1Bzo(ya2)tWrgtFV1Q z*gGs7hY%(u8K`LMCNwgx7>l(d1b1Kep!&hz$3pRs zr2=);h$+hFYu{AMJ{z*IT*VuyMPb`?gGWxc#@P*dAVkPs&qu1Vjngo#oV#_TqD z32j9fkS3Y`p8ukE@Yv>o-!a->4Axw&&t&Db|LziWxC>hQ*D3KQl(JM^xwjBh`DM2| zYU>_ldTxZleENY*sk$RbtpArlNgOTb==e0WefOc0wA2VS*ok49kF$M?4)qknPgWISrf ziygr|@kd8avv-)WVz6vk3qan9qkTN{Xg$G8>JE3y)<(A1nYPV&;Sp3{I3-5BDj{DTL&G%(T7VX3y+ZXZS>(>(RBxLy{>Xgdd%7(%|`~ z9X2O{&8RN?a+J`~pe74g&qiTNJH{Wb1r2%9Bm0nrNS))c>-DbwMKgV*M|bq0OnMl<40c~iDo4h_%zvc z{%0MWso<|eFoKM94K=?!`UnCEV#mesG4YlMiloy5*X^%79s)s(@O2nIzLre=c}RkK zcH@~f+p(L~Ap4Rkz2EwGy5+fs*TsjSw6ut^{V&KrVu_`n=APOzw#}>*kcO-?ev)7$ ztY^rE+wEHE9Q(15t?RBAMj2ZIHA_U|KIJBc27Mdf=TOwd-GINEWbj7*hGJ@;V^dzV zs{yD(z}7@0@8+#bkehMhXH*GyD&gf7&nBmb7Rmc~A^2wr2<&gRxv#mWJ zqfWny{`I&MlH?1|^o$-1)o{4|NUWa2%hA=eyObcB=?gf{nf|OeATOc>K_*EFjh#JcSIdlNTnCv0F^aPz(B%9AO2W9%V zkFRX}9AglN+i?^2X!9Cwz$Y`4r=S4r`9QbOPk)_1jhZQq9b5Gc>H%k_|3V=oc-q z93R=-Sm_|_$jNN2g(FjFKeOQ->0a!W22HvenOqX-9|=pmKbmv*7nte>>ViA`VEWH@ z!}1A_-TN7ZBUI*W27`f^c;tPkso!|DRls%52_$iwCJ|Q!w)wp>J#tCnT(tOGo&SO0 z%hsB>-HP}8?B38YsP?yx1EX&IAz1;qCeQ3 zFY;#q(u2Lp0%TTIMF!S_?;9MTfwf(i2{0AkjNkl<7^@|+G%dn}OzfZ_i}h95aP|SZ z@*}9ETE@`Ev4Oy~l^w+7F6$3gg_@AHASZgIVU1w5SvbFEgD6rH2Kr&FZHb?s#d-$P6C@I zP?YLblpVWp00Zye-NX)PSGs`mE%n_hrtbS)d9{u-zf}>To2>54*8W$xCXftJj2xz1 zy#>^Rw-DP-L;US$u8O9gxy17WY90OYFM6iq!OS$MQY(uB_$wBLSoZD8=TTOFPyTkn z9H#CkNk4&{5K~wGeIeumc6&f!Prsq>Hi0BHeE7SQb>&p!O1|Z4C&C=rf97`(oL=qH zF;gFqeyU#x@t&qxB{-FmEDq^ml^2eEit?WwRBNSpKB{WDy5=}=wQ_&;p)85rRQQJp ze`@B$N|4>XaBItUTJ5l|Py4xQLT`wal>4GshuB7xPZqAG5lBeAfHP<%$_732pwK1D zj^a5GxREM2W3AqcTgr9Sb`?xiJu_)L70zNiT_1Jt?5p!m%WuJ+2d>evQ9(wkw_%Dj z(4b3}S^O_|{5b>kS0}FyZv9}sY(xko@#%Oannt_jUy{?c$RdXg_x{l({v^?P8jjVH z545ljGP)rwphI)Tf9ZX!J@bY9(z!IJo$}F}ds~=aCPpa_6@wIlwyj1TG&mI12g?tFLXCSFq^I@vj-wwgkld^?)~LWTDAwoZ zYtR=PuJ}7S)uzwp@c7Az@e4x{`%SN$T((UJY7oRndnFfHiad`6H>#2TkF-e?a0l^@ zN7ZXsI&+viw4bhb2+K@;TObxt1GRGpy z0xJ2OQN8;wRC#i@$g}wOEu!j>G-;1XH0{^3YF$JP);wNi}G!7UVdp%bUGK9N?3u5~I%dDF$4AQ4u0xSBM-WC^Y z?Uhh~)&tPuH4~~lTKDsyB;8+}X5kkWIQv9|xG))gZff(@ugNd@z0*sUtIy6VKy!i= z>(<{Q8@g%}d;S)B*jG6CNUaE-HvYUYAkg7j`^n{8XNU7<*`NCbjbp`{~A$Vm8qT`}(}_O7xwnC;sgQRz{*6Cs}r38 z^%7R!HloOS{^Ye7`{5WgZBliSV0LvTJ#pbB^j;n4{sjJXS>b1K9f?kV3w3QB36OBA zenhh=|2uqIEEpN*E8K8-VT;^H{upF?#XpX?X@C9U>UzyDv8}_@jUgCEx`~m{aX9mjBl>@s}eUO9K%s1~YR-pd} znG_QKg)~jF8_E)&X5-JYB1Sd{Md zxXdaKF(3#jZ3P?$Ga&KuAG9jvx5CV7$4%gNz+Ky8IA;dwB%kc8a;DqRUhbei`Y8hU z5$yM^iQ>vDI&-MrHimowBv$xqY~r*h?!`(K zPo_JL#mC}(gmY5glJQ9($T@l5Kl(EbLe ze~s$>ey6cw6d|I(;CQwq-)jO9jP7h|Ot8x=5HOCD{P4>&AV8rITMOu`N2DvUX5sdf zRHY?oLelv#( zCUbN*<)=tw8tIGunZx5=B}}S$-|U=R{nDOu9{5?%J`O>%4gR^p7`mf!CR8 z7{0HVtwgwD&4*5%GTP*G-PAQ-YMUwRDcs^4{8R}_<685M>I>`Jno5m8TM_)N|%oCq4VK~bVHvrt_9t-yiD*hCEa5% z+&!cbUQjN)5OD9pq9C|hP4X2_mDMxc2e@nc@}ZEFK0FyZHRD)7up=c8b|Cb4zd&(2 zi)cRVwnzecdt{HNAA_;%$4W1{8ET-41Y%uQ=N2RC%~;%T7X z=`ra-Hn>$mKj=_RKMY3*xwxQmT$jT=jci-gKM?3_KTjeFm{y76x7CXF7|PigWQHL^YYcyF=nsZ$|~_?6bEp3_|qMXwvhNtA6Z)EsmbE~JUC{%F(v zX;pq>xz&qJ=|&pHKxNR6;39(LM7UPXOO?LK#h=D?Lyr4KJ!|}QbJdD)UQ6glG?tt8 zoir>XZnxNJ@uxLeA;0U|M-#aF%jScFKzQc225k>rRNK8l`I-BTRS%^?3`a*>W$cf=z7jQ441r-7GerSmeDd*?Fg1V8Ns zZ#^G0fbV{RHNu(?(5tIyrSiQ=O9m^|u1|`RABD*N(xW9w2>HKOx#}&UazeiHHI!WS zxK|SGodJ=O{`U>fYmnns`>Ap+Cl3~omrY3$Y+6w!y?<+q2X}CY#2I}?3yD;$+Cu8r z|1b>|<_fv)IPW@9gxDFxsU==?3Bg=qtY;Tcg#a`{N zYm|5^14`IAe+s-LeWwMNaQtcff)Sf4@@#+AwoA6x_!;f47Q70pH(&=oH4$@pKD2^0 zFqliej2?lW4be#3F=$=<^jD`)yiRHBS#REu*v%eoE6SBGx_v4M(m3O>br2^MA((;0 z&KzG2N5)2za{G@BrSbHy$2hEo5;+&lzW*Q7i}vS#1uR^!kPcfi_jzGrW76Z2KZp2C zH`&_Uo^>FPIPYzN(s3_?7sI=@oLre}=!5J0Sf`y6tG`j!G>z{amZ0i`-IY5Jiig`a zhpiU+Pl=0*z(1~FNQqEW zlZM6ZHpSIP#4>yiY@)-a-eC(_&dRCRsIC@|S5{eXi0&6i>`w}5(1?IDAzx-UN&oec zX1tF)+0EbLy`sLIsDHo_lIJZcfgVXzV8EtsF922_XzK-Kr#O%cevi(Ny1E}aAc4g$ zljp6x{X&Q+voCG~rly)v*!q1DOo^Uf-o2U#IvcL{IE8Df%6;Og-1q_PM@^F5ZDk_Z zgp6y^w$^yrH-8ip`q*U)^PND>SG*0uH2yqvSEPql7%EY4nwO~mq(Gwj&OVi18DiCjYr^8Tj_<>2d4ld-!iuv z0{yx^&sMENnwQcWI*7A7U#*w9G6$lrbJ+LR2QcbA~hee`NabHtOOiWzS73*Clj&ZzEfw!bON zYkcq#d?HYcP-}K?aMfQ7HAv)C*^|##U^~YHqbi4z<1v%eaV|M9s@jx7`zOtx#08qBe4>^crD1rUfQH8KLZJ?ic2qIc1C~A%B3+xIJ+?5Mhr|k}P0zc@8Z3WmMVgS&KTLD@P5x^AyVQ8lIcx3jU_k z;Z?|n%UA?&Q{J>Oxg6N02YLS84ng(S#v6a)u+cGVyD`MaJ1PQso2_^ ztc{L=k{#Wkq|M=kduf-Hm9Qs# z)YYT$T4tdLksA74*wbPZ7nyOF?b!oGtbz}_I`;&QKxzr6`e_JEJ9DAFoeNMlO*0keR&3pNyxXl1K>fow6>xl zjR_lz&Mnwiy{7n78LaL(erOUu=7UD5Pg*VIFI+(OU>3v2#$wxprGr2mCM@as8lPA( zO{6iz1;^wpQjT27AqwfX>p*wMj%BgB+Zjvp+&5uiJ|Y@I&W^XWAFUb=^|+wyluzgX z(;RY96WzT$mQ}XMV3t%!0t7Q01&j=TrHUUq@+0egs}&<$YT1~d9mFJgvbz%f`|;Kg z?=iDy(hDVo4Mffz-p;z$A^aME1t*7)&P(x2Bze{Hu|t1H6?{V^l7LO0{+*^)eBRX- z0Xo+6K|5BEyN|>R#hhw&uDTNHIEW8E&u>>c*oZNdip#-_C2)G-60%ufO(Ea;TtB-m z`~@q|aSl9(YG#m*W1Yrm)zP2}cgB&tnM3rqhjw$ciOozqf1DvOH}>?9j;>>;R|^}U z{4MjUUBV}A z$xd@#fcdfl#h%=I*x<)o`5J$DnU}@cK%;jzWDU2W(fa{7tLs{n@@=mD+>+zkd}YN| zOmVIj=7eP>#SdfPs^X|-Ea`>FpDCznet(Pptz!9JRoBm-hIadUW=G0|3HQgx;yD@u z_Sjmoq=&r`SqFDF*0h-8@)(=;ca3Y);*YG!L!o?gJP?Fd14Od&aFe{ve*0B#>(MiY zTYbo?Po$Df@y2cDxhBp#QQ9hvhO4i62|frB^uh;MF`O(a2W6BW;RUn3$&h%zEOvk; z0P4oobj2HfZRdMi-dBRP5}s1vf`tx9HgR~vCEO2!a@WISly5j@4bjK#^=2vG;M%aQ zgIfhJXSoue>wD8<`xiuF@mp#iEG1l8#d%L&>Kiz&0x`5-Fwj;wd+g_T=$2KmJ>2z@ z=REKc>LZ!NZyt)|9uH$&)qy~=3FsED$jfRF4<^rNvpsd zajX)Zx*5M|1h~IL1_mbJE#IM$ge(Wr7!V4GQ-bILz6}6yO*kS9Jm~IHX76`7Mi@&) z7`>N4yo+s3Y8T0po&r zzq#i!Sj5tij|r-t+}K!L9Cr9o6k7#X)Pr|n+#F7{#M3Wu&Ml8b4_moxq6bHE^6d?I z@G_F@!lx6Ilep3h=db(yqyZCeRvYAFlfO2>-Dfg@kyo>}EOuOWtS_6<^GmLFRJkv< zV;SnGx2-ogQU6w#62ciJXd~f1KV<=P*D8xy*qBJeVeFU32L_Zm)PikL1$ z5VC4v%K(?oITrwXvmLC)T3XCGv-!@B?3(TOAW*>>GpsC7Oxu~y_8X@{h39Tw)51!> z1gHRsZ|wBkjRuW`B*7#JOFR0tJH!ifZOo zNvkgPyUbU@E$`__vtsTpILV>bMZyZKI(P4ax-z0HZup)11N$q~*PP!)KKJJqKak6b zGBfSROVeNf$Iq0wVqU-nl*KOYZ_e6^tn4^tZremf{OAD1-I{XFjG}B4shickl ziK4;;DcTwuh=2O&ZIPTr@$%7GBjoryUF`w-W)x@&5HDtw_55Hz$ZLX#35E8wTH81K zZT1V~kI8HHs`OBH?=f{nEJ7*L1eXszrVbye=yc77?hJxDVS+e+1Zu1(adrL~h*}f5 zPqcBd7vnw*lr}4x=xo0!fC+DV{>A~=>MnK*kNYn!_6%U)+RQ?3}4ZM-?`ST5(boQ|3T9d*j zIQJAQx4YsWtCYxmBlgU@vqW;jBZa*c?iehEe)e??P5)Z(tH&?PEv6^DrF4(BYvCnI zuC08UHj-Bx-G7N4hGr8g90MRl5WQQ2G?#ETb@;WSu;<*m7)71^Aq=gi7Y^D(8aig; zhrst5--`i%JvBoxz6w~Aanv*PZU$9$4z@=;cWfd!zArPSKJQ3pwm6-E%g0X&?UqKB zoiZ7^tjaz2QB!e;jp8s+qYs;i5G4aI=uSlNT_&w+^dDI-7-{=}=nZ-udsBzz%#{6p zIEDTp0pC{e*(;dAgj&$SVWmogbX#LqM$-fvBkLjbl@sul>}=C9wL z^&ymWUfgzmV!Pw5`95Gp3X|*}yNSUyXv1Vi`74L{Npb6YG99*WA?K3lw)s+Zb<=WT zq^>F%C(z2rRZRmp<9d2*`&TQ0Y=Ut(2^0`|v;pjiZNKd5tp6bOb>UZZ5KT;$>-mLe zVVg^dOcx@*d+o4jHp-Wu#6NRbDuT_fsA;j$>p2>>-|DnQJ+XD=E-7J8&7%8q?}2EV z^4mZ0I)}-+kI{4dbL}~T@mO!M>|Td>Cujvp$J z=OE*o+>KiH{ac@^$>X3C)CX`Cg_^{xRt#7evzFsEst3tL(%Y{|*TwS4&Mh1c8PbnT z!Gm;y}M+!u5!+d(gG=^Al zP3YepNwo1dJUct98NKxTnm~dXXc6rmA@>@=RK9YeRi{203ES#g#eS6)Z0Z?sU1g zKzZ^l?V<6UA3B9M-1Z-D;HlvXe;j|{TK6sYw_j`BWed4?bOd=8UtxfHHVgFcDG^Gl zE$5G&!p8T!k;KzA)^fmV&8VR&sq{CO_%e==! zq+u>sbnM@iQPgAf_uN_YxzR(LX0u~PCeu3jtWi`P}zX7`pUm;QXUJe^PC3uxokovvd4?xI zQs4+1?pcGbug`DO)aybF&xyBtbr{<@KQyCgXYr61&xOyyA&}$LXDqn z+`bK+=B37CK}FkT-kK$cox@1KLoZV@`&H%k;zq$qXPdfd2Kus6m^VE0^4bOOy{7i` zLm>T4*xbBB{R7jZ%Z~mox?g5uwC=-rJ4MUXYY!QD@chuF!rDPI_BruFh;UZcWFAM* z4z%osi;IKYsmF>_zjtO@e`?uBj9?_G>b@8YHvq6^S8PRnRNeM@4+_Ra3YQ{=$x8fy z=SYd1F)!7(&8afp8>HPe=(r3&FFf>8ekum7#!O88-TbPk8&~v(%}hF*H}xZjte-`< zG&iTu;9BF#YI9D}m}TT)R4F{NsIb=0in?YW%kHJUn)tNblDqtqy8o+{BdW-9FL-2- zCpXJje)HpNYW0+iPDK-z50-P-B)`jY+9(Ody~?aD4@wa_OcT0x$^RE`pgh*laM`Do z=DE1~<*fIYV~6@&_uMkIi}|(X6_W->>;*r5`EWNUC$Y-jUIkSq%JxMuM*jhty>Q-b z`H!q-#vyKj(@MZG+QZ~x?9?2@*3g6gy+x?yVO_tBsM<$ z(e{f7TaIm zGLLbwTQM>)rpYKgU<7gI8F%I0 zt3wyb!>j(@lJ9EbWTSv$U~!DC3d%u0P-3BAv90q)h~ED84mVZaj4OO;IMz=iFK3HH ziPgD!LX^*GE`28;yG+nY#wACAcs`sB?Q-wg`vUR(+4RMQZru={f;QC0_m%@xyRH3n zd5;0cuv=%Q2xpL_R+Uu_)il&UfZRpJ_TA6$SAd$I$as zI~xV=eaoyp=}vXgTk6WIkbCEzyQ0V-f+M)Oh1X6C^Tj)_=S(HVsnZ#f$5T&}-Cbfx zs~d|{)QuEk5{wcoz?Mca)a}#gFgrgJUur(4W-6XsAM`o(jZ~-TE|@1ZdBIwWzJToL z;ikvuIXnn?UdL;Wl9v=7yxZqG(%r306VBJDtWhQA;W1N8A_a+m)#m_ywKyZVx5lST`g5%w?Dxa=Ji71$JC9h_t^0e4l%?} z9_YGpl75ISA4R@*DRy}a-xOX8OPnaFt7dus2vihU;{0Qf)asYXdqyXylEyc>qgRR84zSI|I$H#8l%<@euy{59_}dKejt; zH^NbVeg|7;si{5Ar=BLciRJYWE2n{U%L|;`9VxEJ4|_eoCr~g_GV?X{Cuoc;KRF9V z0=o0)up}X&1DW3X&T^=)QAq1#x6z@d3@_kpi0+;l=1vVVG26{?>UYU#?Agl)!*2^; zK_p|i!C+W0fbPv5;vtQLpYK#?(ot>gE-{FM%Tbs2l{FPV=#`e3O3TgJkF0zW%d=7M z*Lwjv%b6`?c+#8js7UwY4NXi8DO`p4&WQSeWamL3z#^sxxXSTGF8-HWxs~(?J#KEPl!KK{D+f%Jbo+tCxi4 zxtH8WO?oD&rn>t0FW0|WeQ(g6YTI#r_l?OMrpyjL%)yiRYtNA-zHhUtEZ=ePlrB1k&!YE8 zL}KoGU6%QTvG$|mZ-BO`I&jHNh=D8(m@3|yP8HcfNkk7HgA^)nZh`^Xu=V3gr~=9b zCi=&{qF`@^hPRw^-n0f4Cbl2?UCmHJ&*#e0hZn9}ii}apS9oBM+Uacrqxx>HYK9ks z;OO68Ho{j=Y`sYY9d>e@#*;XSBWZ(m2N8|#7s=VetifALI9zE!#{JX=mmPTyT~XLh z{CxV@P5u2@P^WxZT!P}#THJ_D>Y!<8Hl!8R-K3l|s{UsaNoRIv#*fVRm5%$;yG2Zj zh02LLjDudD^^8Jh7WBI!sNsVU>g&}8P09V?%S5RUe|W9VfxO-l`elEukg%K{$j;iI?0*>Y>=Qdw(2|sEy4r7)a`t?{ByF+jax@&vP04 zblH%I0W!7%;8%BGlV%)QtJ*_*#|*-_OdoQ+81Y!~E$>n>PQ!+IV-ssdLy+2x&P{&n zCzKL^Il8ej2xZQRKsZDVa;@-nDLWpMAI-ZAmQ}_qJdcB z8`e|x9S`VzMS#LZaG(hBoDa{&AtH;zPJtKi2aVvL}#8Nk@}<%bOpez?`t zIl?CuEt8af%QIZN*5bmnEO}PRt=eV4+Y1W0seat6*{vZQx64spYsUscO4*uthlO06 zy%tUhE!g^#FH=DKd;9 zvh?_5>ebO00Lu`}URLmCr%vhc*WHz!ro2`V$-xi*K+T)IQyLcu|I-}HXlMuK+#n6Q zYj)+zFBj3A#3xeHPfg^4n3x6HDz0OZ`4Y?xEIQe3vYyu!sA1I-2FlHr)jGH;xBVsF zg?yM_^q6X%k;}g~P6Par?`vM+S?-nwz#g9;%ZG=yin~B#6mK?zJ}F!F_Fh(SMt`V%C!{H%3shg@BTdI{cUVHpC5ruM~JfBoFArEFL?8)*Ug08S)7;cE(Np=IKHFNri# z5{O92byCS??Ge+*m8~jbw-wu3IrBgT1n@E})ti(7_)Ta}r~5C_*SlOYC+?VqrK`tN zat7;(FMYS*>-#-U)MVb>n7g_lKwsDF_yjl3F}wr;(MPbkQ8oB9q+ijDh|#?#hXk@> zlx%)=d%sf39lf#Wo9s9Wm30Iiy+rzfHlSQ(A3o`h=Lu2Mbu`1#Iiw_!P0a#1fqDzW zolp57)56o;bh~>fX)q<1JS>W+1$HyLyo8zeqKt7%gJTDZPu2G1Cvmy%_hQdz#Bw`% zkLpLW`huUzWTxV{(Pp+huIfWXeDWX)*l1&9$1HFL9Lw&>e>F zhqUue&X^vEgvilBoHA&1hfWzLU=nSc+K;{a&MaeD`$_flCe1>ctxCuenA|EqpKXajH)MnxLc!~1Z35P&-!?Lm@ z_v8(d=|eu7L-joqxnHGs?>`e4>KSEl6E7?ZUck70IxTrK`IVlAJ2{L|$j+kKV+OsN zF%S=ye0R8{e&9+2ThI=2lNzFCay32zz&+(jy8ewcnG?6e4aYF3gM{s8v7Z&p(`Faa zFpGL8;@vm`<1XwIebe3__@sdkNkDC~hX)mYn6SN-0f0;8aT>_UWfs+IXO97} zr&PrIhA%F#+t_^PhphO_T{68|0(!RKC)WppZSTivy+aoaxikeN zJ2I5}CEw>!{l+|wRAvu=I*>fwrT{?km(0fZmr2MSK?d0mGn>th3A@86d!}dx1Y-Y)#5!uFQ;*hp#uql>v1`CP5!bP%{k%B*i zD2uN?1mBQ_V1q!ohj%%lSiJIOZ|WQN)+g5t ze$VUYq&V=vl$^NsaYht1d`z;?W2yP-WPu+FOu0Ni|{jiVDf5L$|DUslE2Ox#z`*EU|n#TN&>7A`!EITpM zd_BQ_D4rE=ptaiDot`ZuC21~G%ERF6oG!m^e?nV~GRodCrDaQF>}tx5O{cCvZ>=|F61~}V z*<*Z*jg?v-5ZUaLdCT!GE)zL)x6S!arf<<*c9-Ij8N_`(&IG2p=({tmyXd{V-c1X~ zAK5xJY)Kf=Tps-%G1o17?NN-`roAJ|V`(I;HLeO{k#&-rl*+iR>>BIB?(M~4?L~wD zz`bcaYIhHh%oLGgTrKym5I=A($=c{D3_myDID0Ev;3K3Fr!2*^XZm2kZ}D0y zim%3*RMrNFmVdh7#Oqy`gNjqOH5D?5gPOB@6A5Q)Xp>-d>b-%DRy5ORPHf4tCh;jz zvPFxR?|yBlN$QO(Dvsly_<$(-Lw+iwY}2rKgK-}F@L6a6j(5Mqgv-gMb?DS;)Qh+DyXP949lu!K?onB7 z_y2Q}3nY`Il{2!4C9$`AFH~p$VAdBWU){$gGFHFRomQuDzc>#O#^8Whi9TvY4h$PI5g3B<1|ZrV=n&N78p@h|?=e>MB#e(T(U?XJ-33v;~*`A(#vr+To`fbGPVuJX!1XA3h5(M2IJ>*F+t^V?zvnOlynS(7O4 zcN;tJkNEJ3dfU0$Ph~_EJz00ckn~Oz+FXoyzzs6+SlW zEIPyYn<&!t3&Nf2JAKfgMlTAPTvrX$!Jl%miDUo+9&;_DVt>#t%v7}XCV!0I$-2l} zEqHi;GO0Ole(%ax(K~H97_w`v3B*0?CB?8KdE?n z+hTr1!{7ah!koa|Al?lg9@3Z(dWUBrHzg_Sl5D6Tf&xLLN@8cg2$GVM6#h^=nLRa* z4gwDMQRP$!Wj5>amCUFfcfW;wT}$)qrQ?>RPR3@X$4K&+GJ0m@E&Te0Z187gianp~ z*UWFZQ+f=!wpFFe+&F6rN6f{(wAL$%<4v^-N^##G#oFmPRLmuUY!=e^o*kfByi^gQ zss*+4wc1+{{W6#AmoO|wK)qs#qlB5hJXOd*YFLfX0P7iJu)t09N4iUq}yue4tYN6yVCbH&g=XFImHXN$=s?jc}m(vrY~~7bXFzkh#_fCK!M>6p+u`hJ@t`G3n8Qr#}KStzfltM(3uKJ*) z*2QbyL#!9}vw(#s#_cs5N8YG6ABRa(E zxGeSMq!oFg8EG@@tkzi}VX$M(Egl$o=P@AQsaN<;w~`okXVnQr3#lJH)q9U15Ywl_ zwAa)UBMbG#rR+KG(?)nz@IBGiOAG&;eCeDVS1Lf<#w;PYZ}A%<70#(@%yd;ITT-lw z$auikV#a)~F&!V|`j<$^x6-STI+Wil zc8A)Cfj`G<;y_^&DVkp7=UMw<6ZIDU?ttFA0gDdelQfG>)mQ-0rv2yc6|c+I@IVjG0~P~ zTv9jBPMx5~mvhi?zK^nIjG8X*=P!xn`FYoC2*-w%8;WWf=D)wyyeTT;jNZ~X^~K4i zuBy!2TBZH@7NlC?M5A_$OH(PoS=bj@KsSEy?CAsIZLE{&Pxg+?B6sJ)O)%0S%Stge zhDd5A{XtF!$1-*|sP}HbePhX1G}QUuv?bu;ZRw{&IK z?`9=`ZP`U*;2c6(YU}$^cg-@H#N_%|0i@%P2f&0?X!RFjMgxsbJcjzgztd(VOmGsm(_+)68-zpPZ8%INGkTI9*G&&UC*#*Dc#c z$g}W*O{U-9-+64|NW1T zN=|N->~!a9T}TpU4@<=Kh_&-;=S!nUr((B%?wWiQQh$`$-PcsLUmnOXAogt*sn z8FVh3DO4!y{5{J4Tb$2T!y_VI5tH*WOu1Q_GjA6PUWdGkl<%Qg*;6esy|3^!4rfk@ zazS9M;OT;&Y}#EWWxv5&#(UykSd00fo-?Kpa|`16dI1z>z!Tm^;M>ruUgKT8_c{(B zE@sIlQxF$M5P5qXW>G0@d)n6h3~I(3A74TLPkUef4rTxTJ$6~5JJ}1lD?%kBBn&G1 zzLb$I+1Ds*3=vu^DH5_|COg@SEFs*I-N?S)WF7lp%*^w?q|f*H`~%DotKcUFtxsQa+Ed;_?h-QTy9t0@rEyZ0M`zhax2d`Xs5zGR3{PO`^vR^}GW z)mr_#%D4F3?Hapbwu^paLOh9YeNE$=wA;`iZJ_36!-ahb;P!HFh`U8^c&Bv7~BSCD_xr7v_DJAQF^rK4!G z-R-8HGhuCB^iwRQC=9XbSB_&!yHb9{kRrxOiqgV=0AWX?Lb9~pI_ zfz{ofFJuuXY)fu`dF@|G93vbT$(tD_?ldsYWEVL~{!0+tIM**3aRTP+^*VjPN>5AV zn=(>3O!SE}t>bN9)rQtIH1X}$0^(Vz1sy}sw8Kf`^*d*^AzkQ_01@E;^IESK$(=Ma z!hVssnemzNF&Z1aG3*sE)l327O*sWp6Nx_B8?dxvXG8Px*&^F9m-G=)e5cYb=@1h951tDE+9f)DQ&y z0N|~&^chg-aeY%$a(y_KP77_$Ei?SzT>Crno(0FhgnMBnNvpwHTbeF88IJ8259vjIVL4Q0`Ric9EhHEGy218vG8|xhjh9*gz57$CNNK*c&axq3< z^tg&6I|XcB#BB9Trd?(eW!B60EHA0PO?xH>zc}fsq|4(FLrVS(Y)|oPr~qL_h4$zG zn>hN??Y=8se~XC;7PG%#3r&y~-W@^FmH6Kp`%H*zejn3h$mRaebF(VCK+P_s);z}M zg)VSrx(fTw%wXqRbSjEC+Cu@G?w1%zvWB{(_e83&*YPDufV^Xw=yB!Yo2hG>P7Gn+ zj{};8u0@!QlOS_%rlk_9(s*fMyouKbM7SyF7mn%0xBL3WWXYSlp_~SFq?!yL9iCnZ#-2F4r`UQIuLTX3$ap zmAVPH6S9eEFJYuAB$ji(1KfK6rHPSEs!WZ3pCsXL3qi;2OSMK!-!pyC67v#ag}Grb z52h{ZZj|Z2_=OkGj+;EU5F)^tWp$=Z3SCE8CSDbAeR%tg;AHC)!O11iq6T9xR!H`c z5U#D>TjfE-av>2d!M&$DN2+C>xmLpHwLbh>@X}A32;|hJqB&lw&tx`O%h9$#7H28w z{CJtywnk!d-f6d<-^GRE$t90oh+mPl&p3e+2hfa+0$4V^2eZ|Ma{MgD1?IAf_B`QK(Oi$gq ziTaGVBbrth*pmD~@9vJ@2kJ-~08OHA2|0&7QEOzkTl!Depkvmv83<&<_D+(q><#VY zm;&OrpUz7RiwlS6_5P5-MQ)cU;K&KndXftt^S-i!Q-^gxH8?1h(v5Qa8zB}}3k22! zjb&?_TdPAHLgiW`9V%SOW8&w)T!O2U3808-k2opeW-Yn6tNC^GMQ&&)P)!LZtfX1i z$9y5ah+w3pAGr3jQ6Oo7{AgwAa`Tr{!}d)1Novzp~7(hn1of_Ff(%%71X`s~Htb#7=}>JWu|igS|yU*WD*0LXzB9^!Jw zz8&H?f$2AM4NI^3s_yX${oYoDKvM6=wV1HDM77|Uiz7Y#=VKpB_GO(#zvAf2Yj#wE zW>FvaVZJ~k-gKX6@K?XIHwc(jPGUhfMU=D7=VxkMV9$9kgB~~TD$}|q9yF+$Pe(MV zm7j!M%be5uUqIOy2AH0g>WC=DyvhApn=Ny1d06O)xY$dcW?tD9YjZ!f@8AXwicJ{o zb6N4is!#|7$3S8$0}Q1jZ{&AoQU=SdFKJP`tjZ5Les{m zxfDFswvJ1u_*-p3E%)e;$ypk=`b2RT514WfmK}5+NqiY`cYoy^8MubF!d%E<4hALc zs43zZdwkXhihKP9QI- zbzCD(JGq=Z2m420Dd3?>XKj3ZL^M&4oX=*K3(T``->(SASguqD>eEj@H!2-WmXI0~ zQ zC4cysPn{YJVMBS_F5FV*i!pvS0czQAe2XX;S%6uDdG*!iv4ws-If0FoAS2@8gf9S& z&6nY$;rbo(a`vMRnH`eAX0`v=ETMI+T`1(ii4A~L6iRz}N?0!!!pm{%dfC`7y_I)S zulu?fP{u1THWAA$-2QfmY<-GNle3rwb?-X1)I-SOCs9!#DNJo5DLDE5&FR5{5hAKK z5gX~3{UP!?Yj~}rq@~GBhKw-j$!;uQxz<%r$FfyOhwO>y1X3B1GoLbEnV8Fs$in9BJ=tU ztLk?cGymLe`gbRX3*_W`pj7z)f$ZV(?>t|;t)*O9kiA$-Apn05`oCzp`4*Zl0&?JW zlRMUO{~9w?9r?mMa$Lvt#e0p^fO;fvTl+6 z>vy7pt)@l|5`Gk}OQpJ&D`PLNMkvb9CpV)JN9oS>g5w;K!v(-=LF zih6qyB1XkLCYoyVNIn;<+${2hb)MdR;5NwN;zFz?IkxxRoEwF&SfAB;c6(&J_5w2i z(NtDRPV%-EjC^x*0Y>(0KYs(xxcV}4-nrB&U%dxy1RsY)t!J*F`){%>s1~yDPQ*1D zunQ_m(;pXl7d-n`J!@_4Hw^-%vt^XUUoe#>+31VGqme>n%EY7n9zyr z@lRi^4Qa397C`1=QHLp-c$P!SZxm{h*mofx^p_AP|3v&ZwAk-(cp_~E2fzU-PGPJe z%r2@Y6--T^gM}k6Ox?^46Jr`l=ku@Hyo|cVVASP97p8DtUv;+YL`Cht9ogDkSSMsA z1jMf+c`c3d`dge}pllVRx$T9UCyV!mUJM)JvO79_SrF!7uM`O`{hN0OoZhYS;LT|O z8WlClRXcXl@pkpyuX|Cy?yO2-c#*aLmV16CzfPg+6|FFes#0-u$^JmJlddK%5uu^d+E8&U-B9_P1ymt$ z>uXw2mJOCwgcgIRlwDSLVwJ}_4K(nhO#zHvo#O%kI$38UAIA0$o;K{`ba;pUXvpBp zwDGBG`HO%Pb-JI<>%U=dqiR{{>HJpz<)cLm81(?7rlR5(eiW-DM4TJ#MMYrVx(pSG zZ!P!PgW%X34V4#AkqGj_*RGaw%nct{={JpBwyjaZcif$xQp#o<&5C@N&2SFQna8MGsVqc;x3gjW>gc9c(e{{&qxu z1sAxt3S2UfKDg8$U&01JeYogiwMd%h3e}ggqI-2?5*d!#tvmu!R%EH19S{UA+xff| zHPy`Ked&p4Dza%LD;3yO@fl9h@?f~|)8hM}XB-s;M}kPao{M$h!m=J>G=|th99ca3 z$IQ%S=eeYy6-L$v`YORD>!kUI2H|SAzVXv%ARaOb&v3r&l$>NCb&3WEfvK;?A zRP#~RVzmxAoR~-?`Ue=gW=TQy7zhTJQf^liy{1}FJM;4{y`K-7X!?Ccch>}(MDn;+ zmUJq&RSbK%;ruFPTF**W(+4x9_Ktr96q5{NfRWYWpYu6F!#kYQry!~YLjzRoqlu`6 ze4W5KfRSs;&a|h>Q4Jx1Jo3h=FDP?{pbdqOq!7?r2{*o;j#k{dIPxkwAi2$zPkh{Z zZR62GcB1VwHXmUn>GWKYyQIe?J_-M=2p{(w0S)Z9RH>DnOyX3heuUmWh0P6`ZULJM zMh9;e=R8ymZW%n{TJ78Qaj_r%;++yLn93Up>l$Gx7S-wR2{E7e0^#?u@IAekNW|4! z!znb1KDhwI&1w^ioqewpD9t}G(>m9wn@t3+l2_c4@w%YlaqVBDhA-ST86M{GrHxo? zYBbVtFzqEeVG;p^?&CiO*4m?AJ{fHT{m42-^ppvR`s zB+;iX1{@)5^B{R;YabgUB3_$tM^pofgCqyjS3ub@?EgxB(DsZQetWPgrFD=p7ChOJ zos&x@362n$o<*4Rbf zc}3;sJ=2UKL=Kn;7)PF_K?D{DjC~yCa+2v4wH)+vYRuF=!8SG(T0J zhLb&j$WIl>x@8gk)SL4>zb!QkO6$X;AH<)nfAtx(jbH~ujsv(lmd~?R1OYv zj0nSiQqe`mU^X>LG5)!-4)S;%MM6Vdl)q%NR2k~ahQ2%fke73t(hKNxS1yC^0G{&U z^2d|{UUS9(rA5srGV3JKFlyW2PIjS0ZB{ zYeI2SS=k<a4am-bG5nhH~bB@GxGB*n^`tLWsZ4ISr~h#VE7w1 zQS$CS*8JIeQ>%O%%LMN&@~4`hrikrsIc4%Yg2qHN;|%j2*h-O#?Dh}aYZy(klj(jY^$bqP=hfU=Ci zcA9w)$I!f8D~>Msw5JrQS`Af}%gbx#HdphtQXl?U05i!?&#v|kw0Ylr;V?%QkKG&Go!pdypJI~#HY#a8j|?#``TrweL?y$*RZGoDsNcTrMpTIGt$+Ba@Goz`D6 zOGd!HL-xBPFxZpV0C0R_BIz4IMGqjhKzMvCA6Fh(`Xk}WnYFWWnWs;d*d8%DGdB!) zMa32L%r_YV(ZtnvZUN%$3Keo|A3WM14{L90ffL22rFT@$Y_)k7ppS08rsU|$p;lxc zgP*R_ns|u>82b*Wb-~!YN7F}c17>C!Y-*wJZZmKzm+>|l(UwZ|WpL#UWSw5JyUt#q zMyTW#zVj+kUAmN`g5d%XYUDa!6CW`bwcmGu-{E!^-TgSUA12JWxfOtp>s_ClpT>(7 zj;)O1$@u8vhZ5-z@4!PguJ(L>Y3}KbkKe{eCcWpv;J@>L=mz}4o`rCYM_VkYg|DYn zueDyBjI-D~-R_Gw=@QlV*F@?pqzoriqa<@R{P17LMz`z+KKo6-bbEeHc2>^r8{o4v zwT^CXw2Js=4D7x4j*OS%)$<+GY~Fb~S~ej16@D5(uQ~0KYxrBD;qbsFE@C)!cg(gs z)3XjgyX!;fc}j+cP2Tx4%v&te=~ncz=&k7BC|vN(NcHA3lX)dK8$ZuR{*u!coJ7C6 z+4%I_RzRVRCc`}6Uai(d6c#(WKHpYDmakqOBX&k4TnT7QtN$A?=oiEYck#=d#iBuL zqw`yey8&Z9qK+S`s&JgifxC6J3QI$!r|hA0=-B z^>3sk-H;uflS`|{6Zvrq4$^2mfh|HcQq1N}l;>dLeU~e_AYQi>WCcRKWzIlh!|svl zi-Bak%00!vE}7RGUwT$6CyN;~1|DIev`l?Gk3SxkYFc?^$w_!y69cTF+3_`<>kvMs+ZUCj}I#8Og5MT`= zsu`Fc2}C)tUSV!N>kve)`S%^fv;Q?G+{ACgty()h={W^JkKNSrNB@ObVSqps4Kdyz zC-?=_v+qPmAK(JP4KLfjmSR3O=9H$8RO}`mi_h&;q{@|Sgscgd_KXsc>y;^vV(-EM zfaC=izye9A<1}VdWzP-8K4?q*Mf9%&)o7cme>tv=l*iTnqhr*jA^q+zB>pTL z8WRVOziEGp1U^T@>YrI$vsW*ghe_&zSx5{%;wi6}S)IwGPB>U<5 zXnzWGvs4ek%0>>;@whb3%#p$Y3u_53mK>}yq7)!#IC+_NL|FuGJyaO-Hr=@zP@9P- z45Z3c?Zl9YmPb;Ve$*-u5dfIQ{eS2?0nD4SwZ1CPF>YQbrR%{wOk;SBd(;%?0> zXn1tN&kH2y7IGbH=H+QP|3o`J;GxBXd@#sh#bB8;YJ??rwD92+{ft(%-^ zHzCO~uDmW<0dxd3^K1125PZ{WLwFH4cEVcT+xmu)C2wB7eGFT5$e7R|p?LgFvcO z7~=r7{UE~eBsJi&H=i2fAg_z(^M#Z-bXI0rCw5@p<#;8NxX$vqv~3qmd~ z$8~;H1ys-R=jR#>X?xr`nqHjJ%^GN;%rCsL4GdoL_k;fU*bh##r!Qr%{O>GH7yVmKl^z^qDBfopDxp0931hk^*6xvSM@B_ z{92CkDX+R89J-OXRzvRJOLHUW&P2Av zzmjwEML%uqtXZVXl$m3G45ITuu3LjafVnQ-B_L7oV~=Vakr>&$xZr2HK2-~WjK4^q z-VYh-XPFx>00?~0d)0<{Usn;;^qencuj@4cJSxnd}e)c zD~`mTuuQ%PsMdzrzdk3mXAMp<{fCN-7S7w*4=q(UlSaP?iL!7|gIU^dXgaZtCGc3)cgmyv^Rx{q0EL@z5BpK1Fp&a9wO zTOM=CNTS^8k&Q_vJFEH<$VTsJ@xyd=0J|)T&xN%Vv@X{6mz;rSNf|tE^u?{vbL4K{ zw@ArnGY0(^#GSR5(VL}SBVqQ&NQ6+;IjP|!=1EFK^#kI#1W?2n6-s_cl88CX*KtDp zL)z(Y4exRpcr*dyrnj`Sr$mCEC4TfFs)vpUdYxXUTAgvZvQz#}Zbx8Q;V9Hh@K0>d zmx;SToMQ*#{NPU1@@|5}$t^}BR6u%F8+BSkixJ{IBQh|a_n&S(f5Fb$x(x255eSnW z#;Kise?DBHQUV-fZJ)vf@F5HU05F-s$YIxj?-ZKbO9GumjjoiJ+;oZ64}+V!Z?4;B zQ(R}Hx4}<``ImgX1LM3fMygPNKpxlrLtnSqHm480sj570BTLqYT?c<(2@G@x#FVE9 zCQLcL@7;iL%0xt#Y?XFc=M>zZJ27~jr$R0e;IW)xp{MzFAx!&)9^8`vx@cBiRyMt!{ z5cb9yO{1AjxFKW)Q2SJ<1fJ%k$`OPdD6{k2Q~d-Q8A9|2zeX4{F#*3WN?q^n6z?9& zO5dQho#B@{Zx$^-CR8PT>+&%7E=~x9eC4^i5 zh+cl-GDJKH@cX~l(SXck4g(e}Twte6XFuOC|Kpm^i1UwgOsN|+$x43peBrZePo#F8 zGd8-7hMpi`oO#f_rTDhjnm~s+=zr4-usSw;+~v`yzc)9+Ld|;t_g(o7(pMhXnrH&8 zO}rAn8JQqqB1jKon*N8G%*m6oA5`US_%mPD{g;ppO`E8LAO*qC7@Pk){BM4jIg(NFZ0XH@};Nb%EV|-94u6`mc@wrL8)_>J66)JJn_zR-oE%f@g(rwp zraMo4K-L9Ilfm#?GEmoS7k2<@q+L6>9oo+Rjg{5BW1%xx;4mO2;r*Ss=OqLtb1;y0 z<{Jfq*|K_-o0rL^>VBd3mLE$GwUR_j!7j-S#jWGI-3&|n42Zk}1SZuAU_-wd&7c#D zVS}l;@C&mlt(y##oploKG}q&S)NLpgYv5U&!hMm(EfitTt}y8CmbbI|&V-*jXpMlk zI~CDvOnj5a3~@1>|C~^OSuB$kEZ1TFapk$XM(~Qx5{BrzRi*IWEb}QKK7f_cSiT>3 z8+sf#w~rS&MdMEe6{{=O;_|D{1a4t$(L;ow=JG&_HM$be7eCyk2nJ1d1^>YC_<0u zFOUuDdj0m@UOA0%%|2H!K^}assS2gAY&zpJ zW9HX!oHG6GwRLB^E24SK)M=m2=ktwz2mB4&gDIgdRovEN9kZ&&6=y|Eog%lP4n-&% zb^85o?#f-A_}e-(@%7Yma;sn~YiSC@_2Vo*&YB6!n@N&hx{-sgum(|f?E-y;OZ;|X zLEO85;b?KR18h4AYc;|djMo9|kRkRJzv_MP{p{1b8mU%M0)RlzqOg{)5P_4s|D2y5 z5rr9VhHAD`J6kHHfj}>`4!YL5o(?`&B-No6F}L0CtHdZc=n~_HmVdbZQ^7{9)-0Tl zDb;e66>s5K$bQsaw3vW@`U#YSB^{T+N6uUudh3Eq@Nh`JvKr8Jd2p5)VSa7>jvYIx za~nFbEHgj25DeDvx0#GwnL3&_gpF2!Z_7>SQl2@lgPala2z+rm96V^?1dBK0<(t96 zUCvI?z|x7)?X6m(!&q9;P1c|=^{>$?HAK4A>avRcMYo{jRRM<;U;?JV-ULTE$)Kj_nON+|XRr?#zz{yp*mFCyNYf}@ zx#o#VepH{FaP?n2{4uQepV3?1O;B~gPGa2!*YNox^sCumt->;U4t8WG&^~5euJ>BZv~k9)jw-T>p1_Mj>|8!`uk=kr zYlo9^-Jj1pbsa;WK1Q8xV)U3_%v$?}fwq0LaHd(-32Ms-{h?-w4ms`)m$_#g7F#$e zAgADiCK+6pJ5Srxkw(pmRg4xeqMJd_$ev(-7mB9P9=JQ?x3ZHJ?eC8B?Y)a~HWT-W zD~~SyK%Fi9ni#^5<@s^1fBDBMPDdfe1yJ6f_MEMea-vbgQ*b790_!>0JPcxXFaY17 zWK@$1&?!hJ!0MjLnWs`EEP+}%tk?GyoB2rpG#M0H16-VHD0zV@Ez`B{rauG_+L*J^piTtB=`#Z!j)Mgc!692MKH%e|Or} zt@wwwrm=&H#S@zVAOq?=3|Ed;p+uQKSi6`(@i6SiS8UIQ!>f`YqqjhHALVIA%9vF< z&HuxUl(&x{Ht-X|xxSZT(~w|M#Dg>YpEP$g>37sdC>jka>L)42hS~SP2w=l;pl{sf z7Z&UXfjuxfNnp-&^V`~SM%-?oi_|sI0gL<{e`bf~eZY^FYh5eCFZ}b;E^f0lo3L}c z!qu96k2USI+fgQqCGvpL>oQt!7qCvD1B*EGGR(1OYb7H$aK|oAVC#V?SAok(a#L#G zg0IWM02gR*#*E+s15}A`muH{IwdCi?Sl417PwOsZr@`+Le$PMUN!_`Pq**;!Oy z5TQ{9FqtFa&?R76F8^7{2pHJ#pXFeOU`7kbvd?_&`~g;FL%@z3uW6;g2pQ4J|^+}uK$t|0S4QjJthYoeM{R;D*I z$bB-rU0jM%EWz?E!=2>Tno|lZyEz<7vd|Ig+z;|G=mq#{`3x~o{__=d=O6(;c&A0? zcNjQ$8I=6L{?8VfK15<0djf10rKO&AJ{^tb@Hc7qjs1M!>lK#(!D?;z^ zYr{Z{_|Mnjj~NWB|G!_}r`(589lV7|KK#+&qBs=Op-LQD&L2;4=p_y$ai|i9DsdPj|LDMBkUWsY zp-LR81ne+K9w@z@aleki?-%9IC`&ko= yBo6bY14$gJ#Gy(Y2FX7iPWAZd~NVOZ<*9(*^AO9cFE{op) literal 0 HcmV?d00001