From df188add91ffca1893455a7f28a45d6e8ad105d8 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Fri, 19 Dec 2025 17:03:16 -0600 Subject: [PATCH] Release article: 4.78.0 (#37294) --- articles/fleet-4.78.0.md | 102 ++++++++++++++++++ .../articles/fleet-4.78.0-1600x900@2x.png | Bin 0 -> 52572 bytes 2 files changed, 102 insertions(+) create mode 100644 articles/fleet-4.78.0.md create mode 100644 website/assets/images/articles/fleet-4.78.0-1600x900@2x.png diff --git a/articles/fleet-4.78.0.md b/articles/fleet-4.78.0.md new file mode 100644 index 0000000000..b80734fd8d --- /dev/null +++ b/articles/fleet-4.78.0.md @@ -0,0 +1,102 @@ +# Fleet 4.78.0 | iOS and Android self-service, cross-platform certificate deployment, and more... + +Fleet 4.78.0 is now available. See the complete [changelog](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.78.0) or read on for highlights. For upgrade instructions, visit the [upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs. + +## Highlights + +- Self-service software on iOS and Android +- Install work apps on corporate iOS and Android during enrollment +- Cross-platform certificate deployment +- Okta conditional access + +### Self-service software on iOS and Android + +You can now offer self-service app access on both iOS/iPadOS and Android. Deploy a web-based self-service portal to iPhones ([learn how](https://fleetdm.com/guides/software-self-service#deploy-self-service-on-ios-and-ipados)) and surface approved Play Store apps in managed Google Play. + +This means you can now offer self-service software on macOS, Windows, Linux, iOS/iPadOS, and Android hosts. Learn more about [self-service software](https://fleetdm.com/guides/software-self-service). + +### Install work apps on corporate iOS and Android during enrollment + +You can now install managed work apps like Slack, Gmail, Zoom, and GlobalProtect during enrollment on personally-owned iOS/iPadOS and Android hosts. Apps are installed as managed, giving you control over corporate data while respecting user privacy. Learn more about installing software during [new host setup](https://fleetdm.com/guides/setup-experience). + +### Cross-platform certificate deployment + +You can now install certificates from any [SCEP](https://en.wikipedia.org/wiki/Simple_Certificate_Enrollment_Protocol) certificate authority to the user scope on Windows hosts. This helps you connect your end users to Wi-Fi, VPN, and other tools. + + +This means you can now install certificates on macOS, Windows, Linux, iOS/iPadOS, and Android hosts. See all certificate authorities supported by Fleet in [the guide](https://fleetdm.com/guides/connect-end-user-to-wifi-with-certificate). + +### Okta conditional access + +Fleet now supports [Okta for conditional access](https://fleetdm.com/guides/okta-conditional-access-integration). This allows IT and Security teams to block third-party app logins when a host is failing one or more policies. + +## Changes + +### IT Admins +- Added support for Android setup experience software installation. +- Added support for Android self-service apps to `fleetctl gitops`. +- Added support for Android `systemUpdate` profiles. +- Added ability to create/view/delete Google Play Store software for Android in UI. +- Added `$FLEET_VAR_HOST_PLATFORM` for Apple platforms (`macos`, `ios`, `ipados`). +- Added support for installation of setup-experience VPP apps on manually-enrolled iOS/iPadOS devices. +- Added ability to deploy user-scoped SCEP profiles for Windows hosts. +- Added a configuration option to require Windows users turn on MDM manually via work or school account, rather than have enrollment happen automatically. +- Added UI to allow Windows hosts to manually enroll into Fleet MDM. +- Added support for `$FLEET_VAR_HOST_HARDWARE_SERIAL` and `$FLEET_VAR_HOST_PLATFORM` in Windows profiles. + +### Security Engineers +- Added ability to filter the activites on the dashboard page. +- Updated to regenerate FileVault profile when Apple MDM is turned on if the device's team has disk encryption enabled. +- Added Okta conditional access configuration to the Fleet UI under Settings -> Integrations -> Conditional access. +- Added endpoint for hosts to update certificate status. +- Added detail column to `host_certificate_template` table and added `certificate_templates` property with GitOps support. +- Updated `fleetd/certificates/` and `fleetd/certificates//status` to authenticate using the orbit_node_key provided in the `Authentication` header. +- Updated MDM-enrolled Android devices to receive certificate templates in `managedConfigurations`. + +### Other improvements and bug fixes +- Improved performance by making the `host_count` property optional in the `GET /labels` API endpoints. +- Improved performance by avoiding unneeded extra queries when fetching team information. +- Improved request validation by returning an informative error when trying to filter `software_titles` with `platform` without a `team_id`. +- Allowed users to save Fleet queries even if their SQL is deemed invalid by the Fleet UI. +- Added a new error UI for file uploaders, and applied it in the Okta Conditional Access modal. +- Returned pre-install query output in Install Details modal. +- Translated `idp` to `mdm_idp_accounts` on API responses. +- Updated `last_restarted_at` property for hosts to be more reliable. +- Added Mosyle to the list of well-known MDM platforms. +- Changed where `mdm_enrolled` activity is created so it occures after the inital Token Update command to allowa the webhook to fire after the host can recieve additonal commands from Fleet MDM. +- Improved MDM command result endpoint response for pending Windows commands. +- Switched configurations referencing Redis 5 to Redis 6. Fleet is no longer verified to work with Redis 5 or below. +- Redacted API tokens in `fleetctl config set` to prevent accidental logging. +- Updated error message when attempting to run software install script on host with scripts disabled to refer to `--enable-scripts` flag (instead of `--scripts-enabled`). +- Updated queries APIs that drive the OS Settings UI to include the status of host cert templates. +- Updated the layout and styling of file uploader buttons across the UI. +- Updated built-in SVG icons to avoid rendering issues when certain combinations of icons are on the same page. +- Added consistant spacing to UI elements on the MDM page. +- Updated Go to 1.25.5. +- Fixed an issue where using bitwise operators in a query incorrectly marked the query as invalid. +- Fixed issue where MDM profile retry limits were interfering with Smallstep SCEP proxy renewal attempts, particularly in cases of expired SCEP challenges. +- Fixed incorrect status code on failure to interpolate certificate template variables. +- Fixed Android configuration profiles downloading as unusable .xml files with content `[object Object]`. Android profiles now download correctly as .json files with properly formatted JSON content, matching what was originally uploaded. +- Fixed the tab order of elements in the login form. +- Fixed UI bug where the option to resend MDM profiles for macOS hosts was incorrectly presented to non-admin and non-maintainer users. +- Fixed an issue that prevented GitOps from saving multiple queries with the same label. +- Fixed an issue where "Exclude Any" label scoping did work properly for iOS, iPadOS and Android hosts. +- Fixed bug that prevented filtering by platform when listing hosts with failed profiles. +- Fixed software action buttons to disable immediately on click to prevent multiple clicks. +- Fixed an issue where newly-enrolled Windows or Linux hosts were not automatically linked with existing SCIM user account data. +- Fixed UI bug in OS settings modal that caused status tooltip to flicker when refetching host details. +- Fixed a race condition when resending Apple Profiles that would not truly resend the latest profile. +- Fixed a missing redirect to the Fleet website. +- Fixed the connect message on the controls end user auth page so that it is consistant with the other set up experience subsections. +- Fixed a bug where "installed" software sometimes showed up as "uninstalled" when certain other pieces of data were not also present. + +## Ready to upgrade? + +Visit our [Upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs to update to Fleet 4.78.0. + + + + + + + diff --git a/website/assets/images/articles/fleet-4.78.0-1600x900@2x.png b/website/assets/images/articles/fleet-4.78.0-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..d143b591abd7d2653eb865de3e5a44ff55f04c9d GIT binary patch literal 52572 zcmeFZWmHse)INNWGDrbw21NxyKtNiUQ3Omvx{>Zqi5WyesX+x%kPuW51f-=!xvwP8RQDoU8oWsaa8dvtt+8z-OuGn<4@J0P2@m3%G~pxe?@y;V|NH8E;^co` zVIP1K|9Pe1M*QausQK6RNF4vfM1aLVNE}PzA0+-k0{BO!#~}FUI0)A84-)?%@y|&f zW8j~YB+$Y?Nc@AuKPO4BhJQ}-SQ7sr@edOJoFoAQ|D5EpB>q9-A0+-27YG>m=OhV| z`2QR?{j^-gn4;2GeUO!wOJlxoNGBy~&!3{QKS62`4P^ef7pg#8{(UIp&ZRqYDOw$a zkXV79-UXY?>t8)fib}NxhJP5miY&=3;QZXBN&D^s<*$$vEZwA;u!i1GI=|YP?tC{5 zds!*uyf(Ah+Jbyda{6w?s%zWid3L`De(WTjV(#b7?lZ@G;glr$Uk4E`Cuj(}1ph`% zk#PR!6=*yK`|s;(I>dipFLDD!|9QWo^uG=@B0m5m|M~Xc#Q#M74_vVSSOoCTocuw*uzybCpOg6KB>rO&z`rQ-UtIk!llYgk{f86&rK$fC^Zy@95mLkekaStW zaFDK)+oQH3(8t8g#qqk)D1_W1Yvv=`(YN)N8Y;!P>CnopEz~@mp|fvzRLUAT)9q#l zNeFux*d_G)Mt8|+F1p~6y;ub;#p^R}w~bOn$ezsP%O=Q3?th_vP*>$ASUnb23&wY5RS%ZKZpvh3Bnb`G@=aGnd-H51rV4O|{?>AR>B?7BN1$MR{v+U0ZUV_It8eCWsPzr;^wo}4n9w{@%Qncc1V+&oKO8GB*t&+bp-uo0-& zuVf_GmA5b!J}6sguf78VA+<>3#|zD7`83pDC+Bpo$NcuK$latDGQCitfe`4x-IE(5 z1$>7Rue$__@0=vu%YNV!y5ef8mg1^;1_&eklO%wPX<_p>WDish$G$=xz6Uv{5gQSEAg z@6O?qtb1WYd6Ge^BW&ib2j&?m@Zng(SZTaC@kScb`hk0=4T$O~Xm$+aJIH=n!eq@6 z;z(UV-yY5$mYZ%$lDpehYPyA~;>lR~9BMk|SxLk0TKZQ^Hh3}F$RDnA4_2IOm7CUk zwP$V{Gjh$<0HUE)1HsM)$Yka%W$71l%6i^(?5;WkEfX>H-pk=B%^FEy+A9|-jJ)B;QYFNy5m_tMJ^InS6YTNqWNV`JvLi$-a{TGG$iT>3?`3I196n{I? zBEXMV!pjO%AFbDayKsV;ZG>K<`$KG&`k~Mw4&MfYb;;>FBi^3o6G$Bpjx&|?|0C85 zxRU7aD-%d)rZLz)JF)z8fx{!wQB?h_rdmke%8*#EF7emcS3Y9(bLc=-d7Kp{P z;Psh)Rd2EtU_&NA7zB+UL>=5Xhjd-h?H&eDEhXwVY5j)^?5{2)X-irwJyh&}7#>kO zLJ4Pd|L$2moGD7E10!G$EtaM_8)D@E$zg=p=HG0^4T)i1VPZlg5E%nT+GB$Xpe)NXV{U}vh{~LQPn6wlV z(od42?B;6EXt=;x18x)rf`^~cN{&L6tfT(DkrCXI&jr-UZW7ajz&lnd{E7u8HWJwL?yOyc*amw!r z>33}-bz0+9azlZkKoxDiR4iJe($9VX3hEqh6 zy@&ErE@u5cnWC7y2U2E~V#KYl@bGahAMyrA+59y5-+UXkkB3d+exnoS&$yY7?-uu~ zevr&fO>CsRy7ElP_3m@(Ff>Cz8IU_ZLI3<@NnpyT2)z8__yuPp*asfh@4dC+7=Y+7 z5S?@c%~qb|bx%!O>Qm1r?u$FeYXf-baGcR`jw^fF+Muiplt;+7!piH+Wok3mEGj$3 zUtIRk`Fpz1B#)O`ZDp9_sfeZGmjsK)n=@-Iq;1^R%G0hC+iu+?tN^lZ{=B07UWQv8-)@*rx ze{_H4P$*BGG5ZE*8|EHM{@GbAv41yud&%5H{kB1_0 z;S*O}@rg)Nn~T1(2IVqUo$lMZcL)+|sy=Gl7jw;_;qv6YkmsSMi?&lfvL}K~r9VF= zA}p1lunUocek6@Fm2_{M_}{DSI5&Is2d6~tg$Qf689jhm zg5PK?@@^f>V&zdlb&i{l>~VA0%OgXOur;iB9(wg{E9#D!o8~X@BZ~ohXI}#&g8mF6 z=(qy878eR4{~7^KBPS3Z+PyRgw$|b^n(_+7GOi|uF;Fh#RGGXt*BL%W#omJN^?8Ji z-m8rRg#y!~ec6I>LmX)`ZStNWlB;B|MZrwev9`ZTT2#|lg0PLI+ju)@P49v- zml=$HMSty6l}(Uvvr65Rjq)V=l=BF1xwxq*Kz-Z+A$&xLuH*BGr$<&kkTTx3h!H3n z*l5ND2w+H>%X=acbe&_%{%F(Lzdq>w(e@=htJ1C9PM;oG5DCqG*#ho;y;I)1PheoY ziQ&wJ(uDg0r$^idS~ln2EzU9>&&b1ww>dHS!<>@Urm^o}glMW`DsSf5({xx>-RL$F zyb(;23V-6h_66+!*XiaSt#i9kUW+ss42}Gvs%kC8aI)h*6C;oa@e6NjSi!}{+TI>C zoj4g1L~^f@6)!{nxS|Vf2H$xXvb3?<2FXk_P#q%c;)BBko>2KpZ|^ZlLWk)~ID8Le zU2SIMe$<~(rNPJ8?N9pY>LMgBq$jjQ(1?B!0*0o4!_uf%I7724H6b$FPUcI=YAVF2 zTDiH`Sl-X~cfJs1jW*RB?i2h5CyZ}?88`kT?b59vFg-v@@h+Zdisoai0fCv80tQ%J zAnThDecH|KQB@qie@+ie=y>lTPPv~{z8QZrc+^HS5yLR4k4>F5fvLx>*5j2KUYo!?zltX_)U`;Eoj9YcMg$HJ| zufELVT`Ly@1NZWn%m}G>*qlw1&e-O^l(>YaL|%Cs=Sj)YkaWG$t%D!mchyuGYI*CD z6)e^JL4{7_&1zZ7PlUPKPIP|`O=&7Qw{sg?f@LF!Km*S`zj46(;W1X1mdeEjtkL#e1ozugz1GyBs1Jqzj{KF4eopMkRVm{ z5d07s+Kp+CNFLQdD&d%-lqLZKS!l)K`odN7mO4o7ue%x={3pPnF7;)Gu3QTJD~)^p z%SM*q3ScIz!47f74oG3W^0_8(Q+%CsA0X~)VDSEy_lR)#7$6G`aK+Gqwdkd z?bu5A$%0qITMm?#k*w`#&8xQGPF?`R-E*Gy&E>p8*%@3FTQ4hqfW$_#-o%BhU6YCH z$`1J8yd67--dZ3Gm?nke50!g?)o~_Z7C7Gv3+X|EC@9c`hWLy`c~gFRAzN|yvI4X~ z6318;_R#TC@gkE*JFt~VmJS_gPy__P*zutL%{zfa8J2Oa4Cb8|mH>gZcc@s=sf!(( zfv^niK6@3DGAM*Gh)nOG%#PEB<4ML6EohAUJo5_lz27c?p`B*pT&9pr|)<@ zdH2x1TbRs-7vD+AP8Pnl2zgrpWL;CcxB*``PZEo40VudiyzM@~`2v?h_&-Lar z8UG+M@$LO4SRlCS_rYv1n0vA~Cot0$j3yN>Qx#lz#dYNtvRI@KU=l$|4?Xbxai;iTjT_=Hx@GL-gJmkT1QpEC9u_a%l^5}g(GO2%oniO zY>0nn;S1T2y}-i}mZu=c1RjR)m}&O?N7snYdY58hU3-xXLuulu>mI%5F+P6MdYj^sAp~8P_Rij{y>eYS6k~np zi+YoZnjj<*KYj2!0LGp%`Fh#fj;H(x@j324hCV8bIStW&RLt2}7iYzc{32Kco8r-3 zAKAzYTR*nRJqrXn3159+I{IoP#$o>Hjla zhvD%ezMPcBtRX8{<1m<10vk`^T>~&iS>%t+`Y}JVEhH;Tdo&*a<2dT5TU8H7#bX%) zsT~Oh$C(&`Yn0Rr)}}mMLoJad;g|%oZ>k91YnfmNaY&rVajS9 za%ImM*ADmWAKiwsvDobx+55G6xQf#dK^Q7j_(dRCKyP5{k6O&6JL&}RAdi-C?k}sW z9BmZALPMZuSn<)&yh?xF&-BsVh_q|#1SP2l;#HB9{67P+AI%wZFwp0C_U~ZwM{41n z`?C5CSrz>ESL!O1$IXkkQJw`yG6NTxB!#050AR@Vv2q-8%iAOHNxA}#-2s*JeTO@J zroO%xaIL@xVS{HwK)nXyzgU_{N~jzpJvkoe+TL0(h%h)S0ATAzu;h9gqu#$(gCRs= zUN!F`&Yn;9SbC9W+Ds=m;8(q%lmXu z+v&Om?E(Btn+A)eMVAwIpB(L|=i=FD;RZev+X2Jt z1EG$+6{Dhi+ZA;Y5QfPo3ianYTZ_G3{2Z@8M8{ zY<9k&cnPaDL)Cw26~tLS?&)BEAOH#}`prjV40d~W{r6;c9}AR99<#YWJH7s^y3{5h zlIu%Y=JT7fUJE~xL_I3^%$B^zwQ^?P7gSUEF105dZjvGQVl*7dZz&{Rvvp*eT1z2L zhoK12c4NdzFzKvt+AE^)(Hoe9?|QO9sNJ%|?p51*SG2V4B>s)#_{ju2n5(S!jvzQ9e z0Rj?|&YVJk!+n0!%Gy4J)upiW=L(rA#>B73)f*w{+I-+!57ra)9Z_i8^%+5okO#II zs@U1hax=l_xz0Y?tA>^-#qK!s!3|JfVY%(FX zl@K3~GWzG+2dgH#)tW&lfDnyABSzB4nhTA#3787`D+K%+w9In=`#Css+b z6kQe3Z<)xUMh4kjq_Cfwe1#&p(PXppt!uJ@iyA2pFDCFpk`m75dA{*JgD#8=6>ul) z1uq-Wp7?reFU4W^AhDa{IgIBi1;QjK+E1Ctx$!fo4RWBFNizy31-oCVxfa)BM7C&8KkH!B-G)}d1SMIthlUbc2RE# z!R-w{z%S#I5!y@fGrnV^adW*uymm3o9kNU5=P+qLuFJbzR8T1e_}mmiX%6e{`5cp1;FC$2M%w2)6qkdMe;G~(_Q@rt4I1&5Hod?1I4^`8Bou+ZsfDiGKKt&Su<<;Awjc0LQcs%}1FP?p1hZR1a%Wq(Zz zu|sS7Zch`S&UOPYMpKZ5CW6@qGUvj1`n_-ptb#20TiE}+Glw;*e37nw7~T9|5mF`K zc&tNckOVejT3=bt?6@>UCtu*RX_1gRIY%KWMxNx>j zCRRyXrk2%gTj?zlVuMVo_FwKlw1V+bQrICM#u>ffZTRa`#yap&VP9XkJdPyxE>3IZ zkv0qgT{hK-ZF_S&Y5wm6N@Ya`E9{X30Yon?F1(Psg{luguhg1|Ax=uN{YkKoy8vPX zmVuYUiT`mmQbz(W)9i?pqg~o7GRbOPi4i9yU&E1k#3)&Q)6A^l3*NbS_b0~_0Ga3U z5W1}@Ma5YwSt?Fmw7TF=}}Rq3M12GBstXEv}Ch2mIqsFk8FL~s%c>r! z2`=FO*L3t`;+X+vnvE4e?EE<#I-}}QZkb3ZUc+qhN&x5^zO+tLBObhWvHQOrC#lXP z$$+p{e80W*AdI<7nc}!bQUM;Eg{;#4>eupxdeeOC9-g#%{;<8A$sBY@!Js+fA1fI= zK9--cvcz?$m0|T+-S;}H0(2m{pO+{()sWJcj~gO->2MkzaPTFnrj!?Xa*Ie#7@R$5 ztzwrv|JTo-5j=Tc)gma5TPJNlFaTS#pC=K{--SCppl|zhr79p?%Eku9SN3RwEHWXX zn!s#UGIUyC{G!OVqex02L0|K3J;lV1h!v&)xdaG*dI`ZT8$_pYoYeHYz6&J)XT`uX$kNzEU~k)`BLo3!kyR{1c900`FZ zL{sGo?EY?H3D+;-2PZ&`Fn9|jUP{0#mHLDF7SPami*r@jrfHsF*Z|ib+ygJ3NRzxp_Ae9&YwlToBxivR)F7iq_ z-Mt=+YF{fqXNvMWhLp<>2`62E)lvLRlS}l;jh~4>av1`-;jSO`s1V`y_)J||H8P?T zjDrY+b|~R#<}q8J^v82A<}Rn|O9?f7>wV@t#N7E%_&=Tvu;Rw+{#soagn>I@7c+N` z*^AjI;Ait69eA&3zzd49slRexzKnww{XJ0T>#rn(<$L_rx}6JvJD0+wuhz93_^KNO z=_|kwUlUe=P@=&Z&gofj-+dA3EPWy+F6U!ZAySfc>Jn_P#*sqU!DOcGiWTcL!W>E3 zN786Q+%61Ie;5Q+Dt0poV~6slTj2DDi}f_X97PC=2?f1a$DhIgc0$*Dyqi$bhM-%< z*D+8QIt^87c-ZRK6?jN^g7eMKw>X(GOv9*sCim_rAXenscbVgL9^3b6TM+yOKW{U{ z!b;AA5nVLRoy`47xE_59QksjfrKGN-^)=HpfH4{q9#IS5p)6gZFY7{D&X+ z2^Nk>=E2dny-HBe$bzc|~sSHpxQXTGgF>#sgzlHMCAeHa8&co=)uQP$UTsek=Z zlzfnE-62X440V7GeljwT8b0Dd)2{gWTXqSldnuKrSDm9YJ zwo=TC&Dm>tol7mkyWTaaNjC@iySvKo%@;P$mcda-apLTen1&Vc(PlWsBew1O)lhDD z8J8jC54-%^$I-s!<_-eZ&sEjhUI-~Ze2I$`P1>8|Qsxw}jYCYXy@_Oi`a`NDC>V7F zBK1r+XBce*=lA{mwEaF!1E}tzUz|98{~(3_q3l4eD|r zTU>(A#~pX+9o6*J_h0MT>D0(}qsou6jA42Fx}tZno$n-;Hx;{MVPHJM7m{Y#^haX6 zY`1U?De{YT_Y1PIn^(9+vh(^5M-e&?6Tw?|cE-E1YwQRdaN@^4jk8l{_uOVZ#@GT@?J_sT4@wI(Vn} z`OPv5w9#{J-;}70wL2(`NLXN`Lj8W*FK5W$f9fZy36{V7p`#k z4#*i_oE|BzbbR=A_YprJwwDlD&(F8=6|E~nzwy<(yui3&Nhg&Y6*CL(G!i(Y%RSmR z%6`C?&We5Ftp8-a43A_UDZJI^=RP)_G1{te=D6qGDp|kwy=ktd)7v9{_CCd7RXnRsGkq{TN*8+*o@mfBH2vD ze=6}!jWh;e?e=~+uH~frSdXgQFZ|x8>StydH&;g4jImwqZFFRhwOz1NvQ6lGN6zHI zCDxNUiFipQ>EjK$sR5?IQA*}fpAk2bCK_nQ^C@}+t7tlr2K6^uZpfCrzRh_D=kRiU zx>9HbG3lQlM^ZcqlUiS5l9>*}gKtM8A2ARq2j)=GdVjp1Moi#?9A186R>k8!2u?9=b zHx$C9uU_*2N9_5oDHB;WZrhxklHlpfer_pz1fSAxm+x1DYCn3m9N|7n-NMT0LD zi5oNr64zHplyz?&se=ixj;t*lfk)lvAIeewDR+Y$A>8coRC;A46a~>XRq-R~)}wGS zmI>q}>&xJ;J`FE5`MmRic4I{|^1fgKBYq&5C0@?pO`N-A&<>Sl;y!vtyMU|dCx~8r|S#;G%$JT{b)~Zr}Qy-yT| zg74sX0sxGe9CZAZKlqHtPzrknP#`{_UkXa}aq;x+=u^@fjPFRJY|cZLkAk_QJQ(a0 ztK#?^+`=m9FjqUO>`WyauH=!g8T2*xE;pEGIGE`%ELMfDeV4mWL>?u#xG8YxGBnx;xvuzziu@6Ez>u@05xy}Xhqqw> z_)|YJjuEVlEkKg8HGqM>_FnC0Jc{I+MSp*)R&jyymw3EKA8|3|@%C*NJd^t#!SWV} z7elivZg^#18ZFa#L-jE4h$xM%j#qO2u&PQVA7e;N3?5ilxVz$}|LOGS$TXack6OX{ z^eV@{>h5s`_l_Hb;KwDktXW2E!vediE2%?TPS>8n@M|{4D&P}Q7$Y4fNduIWU{bH=N>{dZU7szM$Y9ht})6~)|NnpU-+EG@t9h)n51}Nz@^A6YBk|Uw`k&a9V(bQP_i&ZnVA@{B+ZZr2Q zJv8X!(cLWJWa9-4>}6%L?QwlRcOD0h=%n^VTAL`3Dp$iS z=~z(IhzXegbTv%>cvmvGV>>)YO+CMKXWx;f#-m|FJQd6blOsn2p+lWUT(Q6Gk~s$ zdHm)^o3y9LGRjU6Jih1zkJl>2%Ca;}Rz-cl_`zhoCq}XJkMgQIwTb~4ze+fcEJZx? z7%5NPVB602vvX3;d?^~}lRn6L>+SGXV3li^&rjfp(4*qPb7~;TMR;pHZxkzrS>I-~ ztwLJ-;y}F#cop^W)r*G(*&-)5=A9uSd38HAIl8xiBqtZ`@HJL5v>8GKmd#=99 zzC_-)SiQIl{r=?~S@C4nio?5x-lr4{^!8T6{sVlwYK1fU9*xD%ZEe05Jl7W%6kxyc zsIb6{>Ef=2I15Mu_d$-lTIqfFNVN<{qFY~M%?6L3(f6H47qK24ACU^e6uIIw8^PD^ zZ~(Ab^B0`KiKQA;UyMA~i`T)Z{rgQK}WeL^P>+m3Q|~i)ydNRF?oYWWSnl{2F?=IU0G4gh1uNMUWc>Z7+}Zz z>3cg|I#F4%lkvlB49ke!I{>`rQz)I(fpkK50WWKfB{pS>vni`^99>j#dtQO z))N&!Bgy;`&(+bI=rc2l;&WRaPYUPVLJ$0PG3A#G=!BaRMTj|>v(gXRZ-5-#Yk^k; zpdpN#?A}C#fu2njQVZOLyp|(zV?8wSnkayHu@RWtkUfp#I^bBJ@z>( zpEGlox8v8Bz<9$1EUK3LSlvDi+;lYDoQyXKSg>Wwe#&fQ}|SK9V|P7UmeK)vk1 z#a(m3gXPhWdC&G5_R<7oZsX4;9B|i1x!Yd6OgZFc0`hgE$zv8>R8T>SjP+phsaVup z&>$9hV^#8xfkr%w?rP8uQoqa5cR5`*k3#iKm9LGVBi`GYeNTTAz>A2w8PTIBR+l1Z z&+O}K;n-l>*9P!p_)^=>_}R^L*4O2~d}GoUtei$FH{d!aQy0wVxT+z{zQ);4SR0}yBf`x`_x&j-mR_WT zs2U{CUd4GE4;}E#w5bR_C0hdeqe10WVbg=V1@4VB4Pc>PzQ>A)Xy6Jl1nR%@QhPU! zKWC$_l70s$(G+8!&e`ZUszBSiURDm>?^2>Y3A!eU+bN)GlYTaFVA2M2eY6f|mlsVJ z9kBIKApc&^Ak@XU|NB9JL9vtn)-Yj(G1d_-vmJEq~9Ms#+JT=e3`&vLk0 zqeaw{GbexE(Lo>9X&-c?OKh&J)}4Z5m$kd$MneY~?%=`C>g(`3`y7(H+|9PDF=sf+ zN_RNGIQ!=sKJ|I75xu5pAVZQ1vNRFE7MorKzglsyp?$C|NG6xzk|Jj~+TYZfRhiMW z3}LouSiDVq+f>}J^2ZKFO|<{SquN5wB-g_7ioA0N4Ma0+W)&;r8U@nB#2p{(9+Yf1 zy8i;r10cVN3l(@iO-qYw@E)pigW*`F>hunhts-jz*tzpH7-sPRdL?~kaMZfpy<$na zXGEFVCdpgFm%8a(Bns6_^7CWU_*C((05Zh^^wsMOHBmnGCmSz@3bh zQ{l3iJE6q9-WUITwMqSvqqsu2Yf#gb5G6G zEi#e^udo`SOg_iDD@cJe1&)!!azN$=fU-AuMr3OCbO_-u^^`CAQ!yL9*K3Pq0brZy ze>AW8^v?f+@JEd!DFU{(*f=z%RkdlMWqpM+NtYR8+P(8${8&r*Kml;H&UF&oWCrYjJ9Ei&Gr&y5ulga0x)vxzJ!R zT1b^`^D&OSxNQ@O}t$iRJwE-DDXX$EhVb7>Ba*tD(_ zCjdDV7z*5u#vM%u?!1#(+`4yN?i*OiYt}u(0XfVQR@Yz%txSFh-ie1!t9n3}Gc<{* zI?C86dJl+H9x^XTZ)UC5*(=MQ1&7wa9|5>^Ln|;Q-?a)60D$s@8@UH<36y#zJl+;- zE{q1xw^CYg=gm0!RF&)u@GS;M}*i-*VU`i0+Uj!?1Y4uxWFuV$$uc3Qytq5 zr`1q>e(hF&_bqY87^s_TZ7l&6Kk;5U_~3I4DDQ=%gIa|@vy zRU?o+;=#P>dipJt;w&zU z^jkQ7onxZpTrB`;yq6T%Q7tG0kCWrUSj4<&hK3kl)X<1*g@ENLw0z@k7ntr>wa26q zr+uM-cdr~^(n~9d-Ae5OOVU;qox21{5a3~i4gOq4YJ&EBFmbLJutq*`+Um0%QR5iw zy^Q}0;zf;9>gZaAY3j`=gO$&@tEs$xbpZVPN|D|(DBy*Zw_OcAhHx&v;2?FYxi$d3 z(Aswb__K(quo?QOrgziXcbjjTYGP=#=rUC=Sc#~`9h8<1-Jgw@mYypc$-B=1=%B2C zo?P+6oLhUu2y_YPU~X}OG1ola%GuYm9pA#&>^@lmLI)6P@Q>;?PD4D>_-Z#-;mQcZ z(&&ziV>cBr=Ye$eDiK>UBpo;%l9Fm^@clT6b8K)J`Nn-;hdF{Iq@q^?N} zp1-)t%UUK4+7DIm3p^Q91YPfSusR`*PG-USffKkLAD||5gU7bBq-Fpo2Rxa@o^-Z# zk>7ptHbb|=fO8faAa6N-j~}K$^ZEH5zY`vglM9eep_yz9MUBFy<(j6DO-P<$TbxVy#6o> ztuA3cs$49N*cjM3Py(-#Pz@wwP$t9o^>Ezz0Poof2TOb`ujS)HO`v00Ox=v9sA$Tb zP9uu)ths}^4xDCLA}(Q&MMGuh`%Q+{cm5_(IvN9ClJpF=eo{Y&0uolt7t25(6^LB{ z4JsE8Bc7yX(3QCr<4R`!a{Iw9B36;)wIV*f%&MB;jVz|>p31_*aH-;$CJwQ*WYB&C zXQw~$WNfp*lJeimmhoyj_A>!aJi>S01^l821UV)u;5a9j&|q$m*`}{vkQd$lK`pOi z4zmGIor1R8Z(wfk?}Gc)@4D~n-~y$jSUQ=c54tEwpG-b4ki^hio-dj;kF5s>;~_q- zkvMT=!%&J+1vQ?v*(F!%qf6hL4_+hh&FDz$(wpdgo6hGWk$M_MT+&##JUCGj3~tsc zQ!i1U5mYi194Ev97Y&1_pDi=9L46J?>MUnMY!|v+$YEkP*410yjSOvTLz)jp2D+(WANg^iV7t(|t7Lwhv8ct2o!n>9Tr(ZZ_x%C}tcg&PSzQxib) zUeSEe~a zvU0y(f{Mol(*j>_mEHtz0(zMn`z#|gS)B}SUKu)=;&Prmz$BHw{U9oyC9&T^jKM5a zVm+*hIVB%dPEER|EV*=48W2TNu(eL*0FA7qmT2A$@-e&A{m0WCad_6~knZ*q4@ zh8lF@VS{A5PsnaPE8ofL>JfP|8G=mcSO0Edw123Ju-(YlzP@Mq$rmzQTEQAf+-&PO zFPAY9G_pwy+Q*9{`;a#2erIe|AHe|uIx<~oJdKSN)vLhbG5xi(L3GcUl=SYXPNRO| zP6dA6(Z=2uy%nrt?#+n$Or3ptU@_#4B^5I!$)`K;WT?`z%v^_}i14>a#isAKR!|NU zPs6&O%=)*boO5E*AJjM95hM;yl*E_{%~o^cEWPu{(#4&-|Gc~L#MiFBobOMiJ{K^D zw<6HXRr!QicU{w!;eb!f161F5Kgy+nS$bzSWm0Rdq;aE8B1MT_=~D2V_KC11M2^!hsoyi#QX4Df+s#)EHxBdD)0zF(Tin z!YNaGsuP~p6;g7kljgT)D$719C6-=(Q$5zd2iw&Z_QK>nPkym6(875qdMcs$T!d1v zy^H;G*of`mqO@t%LMaX-ck0N%p~-zG{2(u|EK5i-8lWWpvAb0p=-cMzCCjQ@W2r;H z{gipzf>#JlfZE)xagCck)0_vN*6E&ZG!SiTHm=pXlQW+HQ_0Nrv0h7?kD2zR{<|Kw zw`7&#_JWU-S1}ea??~Vhp#OjK3*=?U;Rvtb^V4~?mgdEDu7+uuTMOy zmDoGz#&prBt7O#9yWM-iWB)zA#83bHC_J=`Sf&NMW9+aEP85KfNH}SSR5o}75v4-q zF?wL;Oum`HLtaZ=xc~8+3!>uv`2(f>UyAK^Oc<*k!^X|Zsc*_+=))&89~sUE=$8H( za~`hFu%V=HCA+y%Of8FjU>$gx`9~~tIqFM7DH!!k#ER}xqAXj-TEiDnwu)JOuP^WJ zg}BPHT8^NH-xfAU#epTceDw@Z7TLs?ecLts7p-SH0F& zz66rrzsI7>qBO?KYS>n`i1lk&j3?KJ{$EEdz1kD7drOm|J)5 z{lgVlp1VIuw~B%Ru%a$)AQQ|?Vf|BMMLWnHmbNwMvh#M>NYLy>VxmkN?2qKe-f&Xt z5jER4Om~Z9i?il;UP``EwmK+aY^2PS9q!%~cKV)%t+0xw=*RgsweyjnvV?zBbUlTp z6(K+paf`+4M|IY=%u5e_1tsSm$@o%J7|dars}i=tv=$TQq*Z?Ys&z z*s;DGscL(H>4xrkz3VKEWA%5$;bnRl-}`YVVN;8OYJsh<^JM$iBp3Zl&2QsxW9xiB zSP5!x26@bP^7}pUPB5PW!2b;dm!vqygeQV0T7lQzC@O>RU`7`$H!}bo;0`1+XZf&7 z<}Hi!XF=_@8mRgYja{)NWKs+*O&yJeeV$^zBZrg9FNLi<$_2rIQs}pEgHx9vOYoB{ z*@to+rRcqWBOKLmABDo6^Ly0wQ=OA3an@LH9-w3xmyYGvGjM~LzHVi)me6bCiK=f& zVI6%pTi-6*nPaSJ7})xZ9#=1ms_GH35cgG*4s`01DN7%hZ9f-Dk+nwd9Z?1a_Y#k{ zE4QHc$Eoeo%N^|7))cN>gCwUO zNbTQ2f@opSbZMKa!^SN&g~!`V|Jc?F4}5Ito3uyS2Ey%O~+>dBwRFdV} z3)C+f#K;?i*9qs?@L@R(291h{$gAUE9=;r>oJ&Ls0715o+Q%sq^QO zZToiiOlX*Jm}~0*>gkTn7j#O`GR>Ph(TXdrB{7A!xu@F))9fFoEf(|4K;ZYPXY=#G zo6~jM;b7TS-+D%O{xVzuIJ zHOr0s^ND#|A2sYDw^lt`3*q@C?8)!PYQTvUQZrExC;L>kXc`!02lfs}cFa(EmxT56 z4)!gBe3gQrv8TSfy|MeYAq!sJa|^-YM1`q8XnmIMi$c*4x5KGD5T@WVK)2US(MUlML3&R^QZ? zA^FNFz46^?&rL68`tHO~CW^oZ>YsY*mVb7gr2vO>!28Z|vuhJ6rc}uErnP#kq_YB> zkPR68{=5^5yM~HL7P&3Gk^A^UAekI!8x9Yzva59OQ0vZ$)GIsgeNZAB$CXtc1LnVf zoC2fTk9rSE9*PxC4S>!+KMpSr2|C5_aO~uon$69Z>5>!6iT1a^GD2UM+At>%0IWu3 z(k&Veu!Mb}@Ymm6|0qY+FYv0mC0|QS&Mg;hI+*n_7<71ob=V;9sUOuWvZ)P3?=7Cv z#rs2i^IulN+otHAdX_93UDpODT*lvprT;zhHmr-6@dS8Xowq0sfbp^QiwGg=zF6%7 zNher_-4o>A5Fg@2e(>xXHqGZ!@^UmmWy&6@nZH99m}Hf z4v!nQZM!Spj3bq>6s;sb+a#X2tSLQp#aS%g!9LgcOmjyJe&~t6(2wxkTd(7O`YLbg zTQOyD`|L>R4Xa8!>^m^-r%V)ov<&(BzW1fY0H4A@3pEv*C1mJAcgulHDSCP?|Npi3 z)^Ab0(Yx><63P&M6qL{bQ3)j!q+v!7FcBq1%AivaB!^N^5D^5G22ttm7Ewy+80i+I zrD0$=Ya^a>zJI{`Uhnl@%n!^^v-f`XdRE-)zSr2%e!(SD6J(oH`i_4ETgr*vUP5Cv zYLBT+X2Y+c_XE(Vn9M{i+86_1lK5KoTKP#9=-6vSNC|;=JvuMW%zq@&exJ9!+-y9n zjM0g1Y)jEw7W&Obu%hP6%)urfYA$4jUe7T^khe!#x<>w5mw;z~nqb~*3fDQPCY*F%_j!w>mffb*>(`PrBNN?Q+fr3Jp38)$=7l+M#IY%4`CGv{1qMs zV)3DO*8|PBE1~rKUS2uktD6Nkd_(l{wD8%KxwwlseAj#tNb`{xRB3s-?r?)p(~enYtRyOhNlwauZ5d0(whHMb@zpO-JD_^dn?qsreCx z@%;H0SZftIx*z$;w>?*QwTOy3l%DflN9x`)ms-$xXiKj?)**cDKfls9dho};G}e+$iskoL30gwVbALkOrCG0TptZqyoiEe$ z?~(sAZgpM@*$>z%}(wt};>^vVvBC^QL z`o3;_p?3I8igeyB@3+Sa$FJso3RJLU)sCAymZb2y{`B=H{9PY!(p;0k4*^|&?HWX{ zE|UkJVj-+ZjQ5w%j&}tfa~uv??VQ!~b#q>PS8IdM!#^^my#fwWZS~N< z(9GBih}|U%il$rfN?0C58|!ZKTl{@bv`;$Poc@R}lW#|z$42ak{)!#F#(n*=lrWR6 z8htsgl`6=D?}LZW{BYqNx7V4@y+Nr$$@x+$&b^R1ozI(Q(G3S4GZLyY$J_eA2!zzJ z4^E&Y)q|hx{shj~tXb1vV3*;tPi1#64iBj)}gP})&UxM)B{Z+uFu%GxuS=K=b^Jnl^Q6w>K}Fz zKsukwV-4|kzI~+3bo73U9+FK@6Y;lqC237a=i%2-t9*|KG_oW%R;rbi(^fiGYfB&g z__UK!IIC|YJUwoB%+>r_xLD%vCPkgRpJzh2cLi4k_ZTRKBBm1N)jq89+aWHPb&5epnp}K*tdklswf2Ri0?kAi# zHq%_6OX|{>iBy5ssB7=~NRei#!F{C0o=35KkSYiKO_o3W+5j2?9MW(CNVzZ(A9F%H+Ln;`I_f9DZX3jo=X{^3GNL{d(7L= z+d{8HcQ0LREF02@?jvc=#%fLC^};zLj=Wk09F-`pjq&c><)D+8t&t2*_SE21ZbC|F zdN8d>>q{}-q)#_bU(5f`6cCCo6Qr*X+3z(*78(FJd&roQI4duy0sB;7@1xgIQKnDw z-2-haQx;e$X?{VF8;_8}YDDxD_=$D%`Lb9;OBn5mR5N*bY$IV2b1Q2reJXWxRK1D_ zNc&gd05)L#NlE%ton?Jj^*sPzaPik8=VKE*X=T+=Awm9BY$fIf#)rxVwmRLOPf9R+tr@tS z)-Sa6CpmNC%TrJGLs6et;27H)4k!S=)W#B!{s(j?2pHwPK({>xDE(LfC8|9(bZFqb zseFyXa|&#+~W`vOo+qLQmo@hEC^^p9h-wk{F)k7{xBx2$nZ1<3+Ae|9qr=yBnKj$Js4n z`6K4r>JSAVlY!u9wq6S*7!OWkTeFTrQM5TPn`8pr{iY!TaU%=9oHCy;plqoUf9#-| zwOfB!!Qzl3S#QkPv*$PM*TglSveO)rrz_Qa+|k1k{o3L`dGp|Lk*h2b@v1q?0VQSX zIvLhK2Yt<@0dc5uSp3MB2`w@+ti~~ue)e0NjgcY`Z>4^_-*rIo8x)lZuGj^ydY`Sy z^o93jm?|W-4jgq7zV$VxUiry)xMGQIp%c3q&C-Dh9_f?uw3qJFQ6n6WKN-E z3GXC6Zd9bAZIlu}HoUksXoGdeJ+G?|80qTY=4a z<6s?Kq#oIZW#C!)l6Xp=ipL-ULD&(lVx;<0WwjZuSl%Le%KSP@z{K~6JraNC)?4jE z$JmooR<7*fX{iQBN2mOdaK**7=(kAHT!bJ^#B4vQa0flt09dy$=&|)T*@iHaGma zYC8OeOhK2q8_PnWKEI@!o%fKY`cmDgSM7~hp%L3K+Wwq7Le91=t3xG+l~~-M-jyOw ze1}v4XSAI?f$IsWoIqMuj0lYm30vbI5c&}#FubGHj~0CiWL!m;q^D!`-NFi6T|~co zEHjR|*w>7WSd;81Oka;1s#$E+5biv2zeyR%vi7A`DDD|cs-E|t?|;vLBXfIT>a(yr z7|P$c1P;2(;BccKZ%uJbf7VcxyV81F$wbbC3sDkFoq)7H%5#lC9+8J!KQ{D-7np5BTYH`G9%>h0g^Klev)nuuGb=Ok&0(9H6IT*CjY?K zMRSJRrD+RdxnDxzi*UR21b|)lu&<Ag(HazR#@owk>PlWjs{7 zL!n!%?MF=NbI4MP^zRB!0{nBpZ++H}w{|%|923v z2)5aEUd#B{8+N<;c#fiQwtW|t?ix8#b8QO;VL1oYO!TF7Y^Srvfgc)TBEnM)go>o6 z*jsdIjff^;b>jPJR^FPs8zsw0E%rfU{BECkeeCN#0PhKSMjJydUHCdLuh#_o&TdtR zS?Tt)t3CJijD*j+_xYdeX|4f4+*I)Z+Gu>O<{>BvQy@E`jeb3iaXfTch*pZZfIG~h z*qhE>_@I_)zM<^Fv1>CfwwHy-UMbQr?dJ_LIY@y6@3FkyxPVBefzeF&WgF31j+~{6 zd^miMP<#cRsWBt3EeINlo@YVp9Hus(e(sl*XgJ;!0?JwTQ2L5qK-}wTUNQ zUBCR7OewGo$%u6WxC1`9vA3au&Q3&KYwp6{5^@&k7V-Ubll$W{K6K&BNxaY_>JyEM z@p{fe9KqlO4o>wmE7F_?fA+UHfE}pYPTA4Q_gzChsr|zXI^h)E$HYk2v$J0W)NG75 zll2nSS>_wVxt;tX5W*s48utW&qy+qLa_Xj1M(g!*UV4+NA;M zSrjbOcgFaS#AiJ80$K?!dB@v*RL=ES3Qnb%dDhSD z{{=&onVq`f5^FQ)339d+)nui*4yM?oh8owPyNPH=VW++?0{p4xJ)25Y;x#x?L1TK< zPac~Y4jl1K_`Mw9qalCWWZWb&1hB<9aa$QFJ_!S0=82R<5lVA%?~-55uUpF2gF9ls zUPLZ9}nFZ@B!dkX>&wPZyWy_n|Ol0A?#!^c1FftzmsL1gdNkqfc&ED^yx7}#*8*BIEdnLChzNp<+y!`mf^+}>+$DTRM z=+NcNcbzdGPwLI)>C{J-BmG-mZfBxmor14`utUQSdZm{kjihtF_kK0|lk>>q1qva(G9ta1y3zOMaf#K+XWPKuf-_*`LOC zo=zp3?s8$eTS!p?@(v-L=8LEib?By>{whMsoqu`|RU7@%y2sBB?=gvF6O4L1_;%=} zq@rbvlut+F(GAHumxeTL>zk@-(tCr(p3A*9duQhO-8bay_CSyK<=RXLyL?UwI5C=q z8699@>m_l&grI?@OsNKl4zq&ssWZ(Df?t%OyPltzYh`3xRZ;NgPZce88r_EkjLNZK zj;6NDh_%2<8H*w{2c&tY5|Btz5G?aF{$kDYc-$ zvp(|NDS0K{>YPh&A)owBqFScYW_3Rn<#ZKxxoi3~Ss2^P#`0nvx%t!}uTeEivdc@8 z$GyNy{1F~#U8Ve1_FoPl|L%IW~n$^%MmSI`uvoF__%tWrI-s**-~}K)67WEmc13kACtz^NW9{6&sr-?&0IYlo$fN19=OmDsY8>mb~9>Bs(;yVMFMI>ch_F0 z2KnovH_m9f-T)$SAS*eDCCuu!VudA*> zN9rwlH(??Da_9(mJrs1SMvB<$(xQ#iNL?bPx;8dar03ezRM8Ns2mq@WQNO~=pPaMu ztkK-2{WmU|?m0(CSL3ZCU5uD%b4k!ZHI;5BoiOt%n0&HV5Uq`IpIKzL4;+nIFFcGd zWJ2*=ap%yxTJ|X`BHPlKEb+Uo?J`%HKK3YXCibZYUn)hYZF?|`=lW0=&*B6XO}*9e&=9k&gyM&;Zst9GVmUz^ubdk;wR@VJ@pqOd5OznPUs>B? zf9^mOTNf`j_*OS=2plhe-i6zQ-ZZh!$Tps+q&&AagYR-8&cbFlDXIB2HO**E z>=;hS?OPi&;;i;B9TR1|b&0uzr@M>Zs5g7x34%+r3Dwpts&hTCB0!t4jl*lNyjl*3 z9SPgd4<{VCqnQlu2%#C%ShpOXeM8>lN3ywXLA?$W$eL44C#|RZ>|i#~@#N_2b9-rv z_*6qCEZF7CUn*$PbsJSG1Zq8^`_T7Hb&()`OXj?ly{gWps|xF-m0HPGx#lzCW|jus z*a?J&b=BwWRP^M--hrYA%A9f(%w08iR}INo?bbFz6*0x4s^?b6q-;Aie0l}5Y=#eh zq~%2$_1a#yd}oKZsMmC*OIY%S%(Gi3$C4fDOsGE|ecH6$byjyK)% zP9iOLI2W0Y7xkU6?L4_)N=yuwHE_KCEBAKZLL}dTHN5iTrtp9Bn=;`}MI5NtW8wjp zJ>k7bMVL!A%I52RJi&=rU6$s2`g2hIvC2Sa`+ofjpb6gZwaV`(>+27Dz*d@{ ze8TiTfH6-pZA?XRXKSx$`z42)uO#TaR*bk^%s*)sX>oiFv<8|B9{1@@T^Aa|oM-1- z^cp$&8ap>k;t?)S{J$LRO=X7Tqv4|)3r4!x%UxZKZoj`Rm?|=kHm*(2Zp18(iTO;8 zL3mlMB9v>6+qV11Cgsd#tReM+ftMOH8zOwkjr+mj2~5PkEXcXd6h#Zo=Qf8y0~~j! zZN;!1JNfgpPoqYE@$neytj)MU^Q+vpaFKK(d$ZEfn3AK^p=_L|!m;NzGOgxfQI$f0hpsQ8w`)!UgdBBWc90!*SsTg7;v2Kr*e|nDS%BE>;^s z>F|9rA`3%WM`C%&qPNAxxgbP5Y`K=FLu#c1_DP#V3e-b5_b!U>O`pk+r+9QPaO zinkCRuSV|yS2r655vr1fgnph)glY>yU2ZS7OXZtsR6|flg;+f*G+3)cHZr0?tOoaU zvH1Z_4e-2FLtlNa_}QJYpvkBIikSE!m3?iU=tj~Ur5Y8=d5tx@xuTLhYWFVM86mj! za`(TT-xLZ69@}X9%~b_3tnjMCtwm%K2cc+CDa{cZ0Ubx!}4qIaSV)*!=lormk&i{D%dfg}1Z-h0knv;)L1%?X<_8^3X; zCT;?mQ)fobKKo`&CcugPfnK3ez*Ok!vQdBA@Uo1O<0Nr?c6QV09-q{FgByNmV3rN^^uoZNLtRQ7=?S9v7?^k1-J}bnT&6x}7#7i~G?O?Ab5^Pb0{7dfb zFayMqNDy*RmZV&13C=Hznpa=I;UoRY{Tpmao$2VANDWGit-z>E(sXjgFd`q-v+A2D zVZ*s%M;Y*Ha_r1bKTbiK?!nu#M>ZZdV!0DHM}4T2#he&N1GAJNe(tB1aWZ4arlFZs z!BVJZ;UCaLb*JiJlzxi3WE;;(|B1N2lD1M&v(lp7-yP*5rcPRa>xrRC47Em#SMo)d z5I1t^;{|N0XPj*-7H;%o*oqJ=1ewWL$4!1j+`9X+_z7t!l4)3TE(ujmxE)dLw`AXB z7}45-0fq9-Jy|XWXVyCED{5*=L!8fa%B6zdVqwU;T$fEv{i)mI6kb~P)J&kiwy9H%u<@?yFFYSYBR- zQAuuJ?)?o+heYMkPUQvQUzkl6&3xqBbDr;2MLgtEXv8#|P~a{>sBoo^QTh%I`dgkt zYCY!@ldjm-!9?;xo579M-`Lbd+VEB<=2eDu<5aYY>(a#cxCz*JKBbq{OvpTJG(ic{ zbzekXFzZ}XV0E358*>hUwlo@&D);wC{tEvYUz2BQ@V~<-Gl3YtL?lO7l{tweiGtD> zwz6+&wAOEdw7J`gcB4AeZ(Uq0!8ss!npP{|Pq>>q!6zgKL@&q&r#Pge8}CQcr~ayP z5folxG2@`t(A9RTEg5G5I)1U)7yd`_Fxc#V!-xqPDl!Y;284VR`0ss|9*b^;bnMyB zN0q-I!RN&$Oh}On9L2AjR#d8Ta4qPcFM+D`Tv9Gq+iIt_VK zIpJ44_j2x#p6=VR$U9{o9WY10{Aa|M+D*V0FE^*=xGUSue5S({_X^G00_v)Kac7T> zj_ODgpg0?J0v*&Tu9tCpvm=Pmoi#EnO(zc+uJ*7jm6NltUeo7qC%n={QlO z_Xk&SDDZE+(ZpExCs)9Jsdtd)C0e;>m9VwKo!xU4k(%S;M{^TKP14g%$zq2fjBzkU zs+avbgQ`2p8gDrz4So#edj$pQ02uv#L^762A?`vS8ARxh#Fmu(H_Z%{Oyhv`(U1PW zBD2Vlg~$i$LT-gN>Ie_8QDE1g#Lml5M%jJOWFNdW# z!yxw&E+JOrU3dVh$y9VPO28O^yhGd5upq9hp=n$9seu;605t+4HHw_8GhF^k#J6Ty zP-D<1WU>9wng3Hr2CZsnnQ00;z)=rH?p(W_4NkhkDE=rACVdRqYvvoeq+r6w}NixR%p}>4ze9*+H?1V z-BmGJ>L-DxHkwOVDOcheMU!T{Z;v7LxIHL3d2cNAkOWWpMuwxOhGe1_iDB zr^k^y!O~!Kk=hM?LqvyK=xgHuP@CNXK zJ+PRtj7u;ztrEF#Sy#={aH{m;)U_vpuV=qAw;UviiG8;sosPCp)%C_c!J&?%u{t#d z0BINL71wPOo>3_FCpcqTaA~hNU{LB0dNIwuxAZ!B^BcYOZfZ22E`%7Y4o5j|C3b)| z&>u<3&xAE26{W!ru0Hpsw36u7+Fnn~R)TgtqV5*|QLmhrNzc{sv-K#^+B`~?QwH=DF^+4EYES_rVHV`S-~ zvDUNw)HQ-1dgPWiFHVjcb$xvMgC?O!i+aTKsVqCHq|(=xe|xSh@3txpG?pkE&5kAs zsvv^AE~e{Vm=Nq@ty^L-CHy%8{w1vGdS~{^YShg6z>rdtmeqYopY`FlT4=PRaEv>* z6&)*+6BVHR7_e~!o=)?-TgR~_6U*Fpl6>E?3K8h&fIgBZ@mFF3T$Zn%g`yc1BRNgG zmw)ayEChV)$M!wNkuQDnG2a_oyaYl>L{)uet1qaFfYt+vLKh1^IIND0@9irpl>ced zOovn`TxWj-+=b=7CD+>OF%WAZ2xv!FjNvh9ad_9How_pSGGLmqo#-b`uJbR~I&a04 zzCRB}R-PBNtnxT3T0+1}RF?gb-y}Fo*sFRpPe7xl(Kw!(i!(p~cwGCxYm}qoBg{nL zGh;g~Z(8v%kW5Oo8>6?TM5ZNlzT$b`pgn%NJ@S+H_8{Z6LY8SL!f&YRuaqI_Z_60v z&ExaNYGd+SZpCf#AMKw$#z@V;xNhl+T*Se&&K!v^#dp$b{~Vc_)Xqv3dTUM332L3K8j9t9I?F{ z$6xB8tBlv+FW}xD1i&Y#m^tbk#X#MAVwRzN!t-et4s|7^Z#~o4djP8shv9YeSGoLJ$!|uiH3;@G z!$Plo92iVM+uiZ9O|p(}iR*JI6-zb={YxasE6kNk^(Tmz89qqC*Vh*dM~&XuUJ|Vx z97KCS$KtrxR}{sYiU35B(5StvmWqMN3QOXIvdZ6d2q^LWS|NNOVmDP)8P)2?Y~98)J}z#SDW8^9=u5Pwq{_My#uw_4qlq z3>dv6&)hz{_r`s1<8Dqb4A?~i%v@1bnTaniwKG7-Hi9-2M4n1f7R{pY#*A2#uZd}Q zqFqi{vPy01$#VK2q6`VODkV~Elh9G0olTHglwgbQh%HN=+fcKjh_%Z(_~`9Az7AE> zpQdSo&DETVyRqrhS1=W1OOcq6I4gdEp{RcQUI1Es=K|C%>5O{^7z~;?$uWQjZTk_q zRuqyDD#Pj}w4z!fZ5;C4=3H@p6&2qn(_xfKt}6pFDhcG!UynXsX_wJsE_3QuoZ-2^ z%Tmk!Y;&241y}SP=nrM>`{%C#osi|=I=r2j!_LjvuMbthy@@-IRT~8_8!j&*qIUYP2IoIy*B%mJe2D&EoHX{k`8B3s~EDZ-z8i z-*r0Urzg$HYuRf8L}d;D&Y>nr{rS$hxw8x8)m7pc84gHgE{ucEA7B9KC7cR3H7$Fa z3F@w%ct%t`yEkDgrf-pBvBJ8&k{!DlkH1b~Rm;#01BGc^n`{cJ=le~H&Z6IwJt;EZ zdwZqjjl*JUHTo%{fUSd(UZftDQ6?Rtz&g{nyBd`uLPt6xQC3F9Lx-K)9`6z5h{j?2(@!B7QEJBQ2m;oI2u98wi=yat)m z^0v;c8VF$D{wSjHu3vBFz6n6P!5RG>egQA89H+{S*Zn)&rS#|tD%0dc)V0yJ%boGn ziz-UOF%8c;`|({FgTJ*tn?fO}{^=nXIVQW`^oKa~47B!*KXa{Q?`0|TEMkjF>)q#u zWEQB;89OO%a9i0lJCBbs2CSM7eG8Msx2|tNHyG_y_dIuSQETpg2Q!Pz__K9<5|u2> z1D&G1ZSdK2E)yO5Y8?-h?4M$G>zHN6L$$?~8brK(h(Y?co&V*YgF}*U^ERalFt1NY zrq85Do4Yx~XH>NxwV?HB(<1;^?KzK?YvlAXC^}OzsGh2sHT;avWoIkRVFF8W_a%KU1 zOa^xx+l(Ge|GwZjC0S6mR(N$Jc%A|6U@`5BF^6Dmy>IMQr<;e}Az1um4tJcbRrpV%H>gO=8ze z{Ih{wXS%Zz|Nk)ws8gV5xc)bp-?_SH2XQ;Ewx5RfBJk0_hr8I{N@?eNcBS2a{ks&q z%d~3}yE|vc26nx~&O)GeO=8z1c7x=<-LM-ZcUEH8Bz8?=H%R`of!!dvvl6=|v1<~j z-5|MR1piM4$-c6qG{|Al^Z8L#FX#X7w!pjpiGTe1pZJIP|G+==|0n*j`>#8<&V6^8 zc2;87Bz8?=*Guf!0BYBn?ySVFN$i@$Zjk(E1G_ggXBLO*bS2ZR$@1A g+F6PJPnyIY|6$D&5jWv;UEpz9Ug=_*tiI>}0vCR!RR910 literal 0 HcmV?d00001