flatpak-1.10.5-lp152.3.9.1<>,dao6/=„O`$ ϛA~]^xYSpF{Ks D$TSe{~~߾f˵䄿R <+0FQ-?s9n{m{mdQDНoks HfJq1$ 6hٶKvk2PhpYkrؚƼc)QR 6g0UBBf9ϋ:*}7]^@QUVvNeàk>Ihh?hXd   I (: Sc~ < [oto Ro 0o o ,o -To/o1;o3f3o5H5|H6H<H(=b8=lx9?Lx:Kox=BZ>Bb?Bj@BrBBzFBGBoHDToIFoXFYFZF[F\Go]Ho^Q/bVcWadWeWfXlXuXovYw`oxboydLzghh hhTCflatpak1.10.5lp152.3.9.1OSTree based application bundles managementflatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information.ao6armbuild01T openSUSE Leap 15.2openSUSELGPL-2.1-or-laterhttp://bugs.opensuse.orgSystem/Packageshttps://flatpak.github.io/linuxarmv7hl if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in flatpak-system-helper.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in flatpak-system-helper.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi # Remove any empty repo directory, which is seen as invalid by flatpak. After that, create a skeleton repository using "flatpak remotes". if [ -e "/var/lib/flatpak/repo" ] && [ -z "$(ls -A /var/lib/flatpak/repo)" ]; then rm -r /var/lib/flatpak/repo fi /usr/bin/flatpak remotes 1> /dev/null test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable flatpak-system-helper.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop flatpak-system-helper.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in flatpak-system-helper.service ; do sysv_service="${service%.*}" rm "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart flatpak-system-helper.service ) || : fi fi? B c 'X(XDI22 KywNglm<F;g.y+:0[  /0pv I8( (g~ d *%A{q 2 A IǀAA큤큤A큤AA큤A큤AA큤AAA큤@ao ao aoao'ao'ao'ao'ao'ao'ao'aoaoaoaoaoaoaoao aoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoao*Z0iaoaoaoaoaoaoaoao ao ao ao ao ao ao ao ao ao ao aoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoaoao*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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootflatpak-1.10.5-lp152.3.9.1.src.rpmconfig(flatpak)flatpakflatpak(armv7hl-32)xdg-app @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@     /bin/sh/bin/sh/bin/sh/bin/sh/bin/shbubblewrapconfig(flatpak)ld-linux-armhf.so.3ld-linux-armhf.so.3(GLIBC_2.4)libXau.so.6libappstream-glib.so.8libarchive.so.13libc.so.6libc.so.6(GLIBC_2.11)libc.so.6(GLIBC_2.14)libc.so.6(GLIBC_2.15)libc.so.6(GLIBC_2.16)libc.so.6(GLIBC_2.4)libc.so.6(GLIBC_2.6)libc.so.6(GLIBC_2.7)libc.so.6(GLIBC_2.9)libdconf.so.1libflatpak0libfuse.so.2libfuse.so.2(FUSE_2.5)libfuse.so.2(FUSE_2.6)libgcc_s.so.1libgcc_s.so.1(GCC_3.5)libgdk_pixbuf-2.0.so.0libgio-2.0.so.0libglib-2.0.so.0libgobject-2.0.so.0libgpgme.so.11libgpgme.so.11(GPGME_1.0)libgpgme.so.11(GPGME_1.1)libjson-glib-1.0.so.0libostree-1.so.1libostree-1.so.1(LIBOSTREE_2016.14)libostree-1.so.1(LIBOSTREE_2016.3)libostree-1.so.1(LIBOSTREE_2016.4)libostree-1.so.1(LIBOSTREE_2016.5)libostree-1.so.1(LIBOSTREE_2016.6)libostree-1.so.1(LIBOSTREE_2016.7)libostree-1.so.1(LIBOSTREE_2016.8)libostree-1.so.1(LIBOSTREE_2017.10)libostree-1.so.1(LIBOSTREE_2017.12)libostree-1.so.1(LIBOSTREE_2017.15)libostree-1.so.1(LIBOSTREE_2017.2)libostree-1.so.1(LIBOSTREE_2017.6)libostree-1.so.1(LIBOSTREE_2018.6)libostree-1.so.1(LIBOSTREE_2018.9)libostree-1.so.1(LIBOSTREE_2020.8)libpolkit-agent-1.so.0libpolkit-gobject-1.so.0libpthread.so.0libpthread.so.0(GLIBC_2.4)libseccomp.so.2libsoup-2.4.so.1libsystemd.so.0libsystemd.so.0(LIBSYSTEMD_209)libxml2.so.2libxml2.so.2(LIBXML2_2.4.30)libxml2.so.2(LIBXML2_2.6.0)libzstd.so.1ostreerpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)user(flatpak)xdg-dbus-proxyxdg-desktop-portal0.4.11.10.5-lp152.3.9.11.10.52020.83.0.4-14.6.0-14.0-15.2-10.1.00.104.14.1ad'@`H`@` a@``__k_إ@_@_A_=@_X@_c^^@^x^^^I.^E:@^2@^,-^@^ ^@]]@]*]]#0@]]@]:\t@\\@\ֹ@\O\@\d\N\I\I[@[[@[[;@[[qr[U@[4[#@ZnZ1@ZZ$ZxG@ZAntonio Larrosa Antonio Larrosa Andreas Stieger Bjørn Lie Bjørn Lie Bjørn Lie Frederic Crozat Martin Liška Dominique Leuenberger Bjørn Lie Dominique Leuenberger Antonio Larrosa Callum Farmer Bjørn Lie Yifan Jiang Yifan Jiang Antonio Larrosa Antonio Larrosa Bjørn Lie Antonio Larrosa Antonio Larrosa Dominique Leuenberger Antonio Larrosa Dominique Leuenberger Dominique Leuenberger Bjørn Lie Frederic Crozat Dominique Leuenberger Bjørn Lie Dominique Leuenberger Antonio Larrosa Antonio Larrosa Bjørn Lie Bjørn Lie Dominique Leuenberger Bjørn Lie Martin Liška Andrei Dziahel alarrosa@suse.combjorn.lie@gmail.comalarrosa@suse.comalarrosa@suse.commatthias.gerstner@suse.comalarrosa@suse.comalarrosa@suse.comalarrosa@suse.comalarrosa@suse.comopensuse-packaging@opensuse.orgopensuse-packaging@opensuse.orgmatthias.gerstner@suse.comluc14n0@linuxmail.orgluc14n0@linuxmail.orgduyizhaozj321@yahoo.comfcrozat@suse.comdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgalarrosa@suse.comzaitor@opensuse.orgaplazas@suse.comaplazas@suse.comfezhang@suse.comzaitor@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgjengelh@inai.dedimstar@opensuse.orgdimstar@opensuse.orgaplazas@suse.comzaitor@opensuse.orgzaitor@opensuse.orgadrien.plazas@suse.comzaitor@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgdimstar@opensuse.orgzaitor@opensuse.orgadrien.plazas@suse.comkamikazow@opensuse.orgkamikazow@opensuse.orgzaitor@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgdmacvicar@suse.dedimstar@opensuse.orgzaitor@opensuse.orgfcrozat@suse.comtchvatal@suse.comdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgfcrozat@suse.comfcrozat@suse.comfcrozat@suse.comzaitor@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgopensuse-packaging@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.org- Update to version 1.10.5: * The security fix in the 1.12.1 release failed when used with some older versions of libseccomp (that don't know about the new syscalls). - Update to version 1.10.4: * This release fixes a security vulnerability in the portal support. Some recently added syscalls were not blocked by the seccomp rules which allowed the application to create sub-sandboxes which can confuse the sandboxing verification mechanisms of the portal. This has been fixed by extending the seccomp rules. For details, see: https://github.com/flatpak/flatpak/security/advisories/GHSA-67h7-w3jq-vh4q (boo#1191507, CVE-2021-41133) * OCI now use the pax tar format which handles large files better than gnutar * Fix the parental control checks for root - Update to version 1.10.3: * This is a maintenance update with various bug fixes backported from 1.11.x. * Don't inherit an unusual $XDG_RUNTIME_DIR setting into the sandbox, fixing a regression introduced when CVE-2021-21261 was fixed in 1.8.5 and 1.10.0 * Fix various memory and file descriptor leaks, in particular with flatpak-spawn --env=... * Fix fd confusion in flatpak-spawn --env=... --forward-fd=..., resolving a regression introduced in 1.8.5 and 1.10.0 * Fix deploys of local remotes in system-helper, possibly involving newer GLib versions * Fix test failures on non-x86_64 systems * create-usb: Skip copying extra-data flatpaks * Improve test coverage on Debian derivatives by ensuring /sbin is in tests' PATH- Update to version 1.10.2: + This is a security update which fixes a potential attack where a flatpak application could use custom formated .desktop files to gain access to files on the host system. + Fix memory leaks + Some test fixes + Documentation updates + G_BEGIN/END_DECLS added to library headders for c++ use + Fix for X11 cookies on OpenSUSE + Spawn portal better handles non-utf8 filenames- Flatpak only requires glib 2.44, not 2.60 - Update ostree version required to 2020.8- Update to version 1.10.1: + Fix flatpak build on systems with setuid bwrap + Fix some compiler warnings + Fix crash on updating apps with no deploy data + Updated translations. - Remove deprecated texinfo packaging macros. - Switch to upstream release tarball.- Update to version 1.10.0: + The major new feature in this series compared to 1.8 is the support for the new repo format which should make updates faster and download less data. + The systemd generator snippets now call flatpak - -print-updated-env in place of a bunch of shell for better login performance. + The .profile snippets now disable GVfs when calling flatpak to avoid spawning a gvfs daemon when logging in via ssh. + Build fixes for GCC 11. + Flatpak now finds the pulseaudio sockets better in uncommon configurations. + Sandboxes with network access it now also has access to the systemd-resolved socket to do dns lookups. + Flatpak supports unsetting env vars in the sandbox using - -unset-env, and --env=FOO= now sets FOO to the empty string instead of unsetting it. + Similarly the spawn portal has an option to unset an env var. + The spawn portal now has an option to share the pid namespace with the sub-sandbox.- Update to version 1.8.5 (CVE-2021-21261): + This is a security update that fixes a sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of the "flatpak run" command when spawning a sub-sandbox (boo#1180996)- Update to version 1.8.4: + Fix support for ppc64.- Move flatpak-bisect and flatpak-coredumpctl to devel subpackage, allow to remove python3 dependency on main package.- Enable LTO (boo#1133124) as gobject-introspection works fine with LTO.- Update to version 1.8.3: + Fixed progress reporting for OCI and extra-data. + The in-memory summary cache is more efficient. + Fixed authentication getting stuck in a loop in some cases. + Fixed authentication error reporting. + We now extract OCI info for runtimes as well as apps. + Fixed crash if anonymous authentication fails and -y is specified. + flatpak info now only looks at the specified installation if one is specified. + Better error reporting for server HTTP errors during download. + Uninstall now removes applications before the runtime it depends on. + Fixed test-suite to pass with the latest OSTree version. + Fixed dbus environment variables in flatpak enter. + Avoid updating metadata from the remote when uninstalling. + Fixed error message handling in various places. + FlatpakTransaction now verifies all passed in refs to avoid. + potential issues with invalid names. + Updated translations.- Update to version 1.8.2: + Added validation of collection id settings for remotes. + Fix seccomp filters on s390. + Robustness fixes to the spawn portal. + Fix support for masking update in the system installation. + Better support for distros with uncommon models of merged /usr. + Cache responses from localed/AccountService. + Fix hangs in cases where xdg-dbus-proxy fails to start. + Fix double-free in cups socket detection. + OCI authenticator now doesn't ask for auth in case of http errors.- Fix invalid usage of %{_libexecdir} to reference systemd directories.- Update to version 1.8.1: * Avoid calling authenticator in update if ref didn't change * Don't fail transaction if ref is already installed (after transaction start) * Fix flatpak run handling of userns in the --device=all case * Fix handling of extensions from different remotes * Fix flatpak run --no-session-bus * Updated translations - Update to version 1.8.0: * FlatpakTransaction has a new signal "install-authenticator" which clients can handle to install authenticators needed for the transaction. This is done in the CLI commands. * We now always expose the host timezone data, allowing us the expose the host /etc/localtime in a way that works better, fixing several apps that had timezone issues. * Fix flatpak enter which didn't work in some cases. * We now ship a systemd unit (not installed by default) to automatically detect plugged in usb sticks with sideload repos. * By default we no longer install the gdm env.d file, as the systemd generators work better. * create-usb now exports partial commits by default * Fix handling of docker media types in oci remotes * Fix subjects in remote-info --log output - Remove source file used to generate a flatpak user on the system since it's now included by upstream: * system-user-flatpak.conf- Fixes for %_libexecdir changing to /usr/libexec- Update to version 1.6.4: + This release backports some of the OCI authenticator fixes from the 1.7 series, and should now be able to host flatpak images on e.g. docker hub. + Other changes: - Fix a use-after free in libflatpak. - Don't list p2p downgrades in list of available updates.- Create a skeleton flatpak repo using "flatpak remotes" instead of a manually created directory (bsc#1172316, bsc#1169619, bsc#1170416).- When SLE uses GNOME desktop environment, GNOME Software is automatically started to provide key update features. During the startup, it setups flatpak repository so that related features can function properly. In a system environment of no flatpak repository has ever been setup before, this triggers "org.freedesktop.Flatpak.modify-repo" polkit action. Therefore in systems which use a restrictive security policy (eg. SLES) for the aforementioned policy action, a polkit authentication dialog will pop up without any user interaction for the first time login. This is not user friendly. This submission creates /var/lib/flatpak/repo at package installation to avoid such a confusing authentication pop-up, at nearly 0 cost of security compromise (bsc#1169619, bsc#1170416).- Require bubblewrap 0.4.1- Update to version 1.6.3: + The main change in this version is a fix for a regression in the progress calculation for applications using extra-data. Additionally the bundled version of bubblewrap is updated to 0.4.1 which fixes a security issue in some cases. See GHSA-j2qp-rvxj-43vj for details. + Don't break if users primary gid is not in the nsswitch database + Fix crash in flatpak repair if no remotes are configured + Some updates to the oci authenticator + Retry downloads of extra data + Updated translations.- Drop obsolete _servicedata file.- Update to version 1.6.2: + Due to a combination of some behaviour in flatpak and recent versions of ostree we at some point lost the use of deltas for the initial install case, instead always falling back to a full ostree operation which is a lot less efficient for pulls with many small files like a runtime. This caused some very slow installs from e.g. flathub, so it's recommended to update to this version to get better install performance. + We now correctly handle TMPDIR env var overrides when bwrap is setuid + Disallow running "flatpak run" under sudo (as it doesn't work and causes issues) + Fix build with older versions of glib + Minor documentation updates + Updated translations.- Update to version 1.6.1: + This is a (mild) security update. Flatpak 1.6.0 added the ability for an application to request it to be updated, as long as the new version doesn't require new permissions. Unfortunately in some special cases, if an app had access to the home directory, but not the rest of the filesystem it would still allow a self-update where the new version could access some files outside the home directory. + New permission --device=shm giving access to host /dev/shm, as needed for jack. + Generated correct download size in build-commit-from + sub-sandbox now allows the child to share the gpu of the caller has full device access + Fix crash with disabled remotes + Fix builds with older versions of glib + Updated translations.- No longer recommend -lang: supplements are in use- Update dependencies required by flatpak 1.6.0 . - Require xdg-dbus-proxy instead of building the (outdated) builtin version.- Change %_prefix/lib to %_libexecdir: Makefile installs the file explicitly into libexecdir. Let's be ready in case this path is going to change.- Co-own /usr/lib/systemd/user-environment-generators. We don't want to forcibly pull in systemd into the buildroot just to own this directory.- Update to version 1.6.0: + This is the first stable release in the 1.6 series, main changes since 1.4 is the support for protected content and improvements in the self-sandboxing support. + There is one change in the support for OCI remotes, we now only support the use of labels, not annotations, as labels work with more registries. This means pre-existing OCI flatpak registries (like fedora) may need some changes. + New permissions --socket=cups for direct cups access. + Fix some leaks. + Fix reporting of progress with latest version of ostree. + New no-interaction flag for authenticators. + Support for auto-installing authenticators from a flatpak remote. + Warn less about unset XDG_DATA_DIRS. + Don't poll for updates in the portal when on a metered connection. - Modernize spec with current macros.- Package empty /etc/flatpak/remotes.d.- Add pkgconfig(libsystemd) BuildRequires (boo#1157126). - Drop systemd_requires: strictly speaking, we do not require systemd.- Update to version 1.4.3: + Fix crash in revokefs. + Handle 'versions' extension key (in addition to 'version') when checking for local extensions, which was causing us to uninstall some actually used extensions with uninstall - -unused. + The 'required-flatpak' metadata key now supports listing multiple versions to support backported features. + Fix crash with older versions of polkit. + Fix installation of bundles. + Fix crash on deploy error. + Support building bundles of apps installed from a remote. + OCI: Fix handling of locally cached icons. + Fix crash when listing unconfigured remotes. + Ignore differences in trailing slashes for repo uris.- Add system-user-flatpak.conf: generate a flatpak user for the system helper (boo#1137537).- Update to version 1.4.2: * Support extra_data in extensions. * Handle double slashes ("//") in XDG_DATA_DIRS. * Fix detection of local related refs. - jsc#SLE-7171- Add a _dbusconfigdir variable in the spec file so we install the flatpak-system-helper config file in a location actually read by dbus, which didn't support having config files in /usr/share until 1.9.18 (first introduced in SLE15). - Remove the systemd environment generator if building with systemd < 233 which doesn't support environment generators. - Rename the libflapak-doc.xml file which has a typo in the name upstream. - BuildRequire libgpgme-devel, not libqgpgme-devel which is not really needed.- Update to version 1.4.1: + There was an accidental ABI break in libflatpak in 1.4.0 compared to the 1.2.x ABI which caused crashes in apps like gnome-software. + This has been fixed in this release so it is now ABI compatible with 1.2.x, but NOT compatible with 1.4.0. It is recommended that all distributions that shipped 1.4.0 update to 1.4.1 and rebuild all dependencies of libflatpak. + Make ABI compatible with 1.2.x. + Fix some potential crashes. + Fix some corner case where it was impossible to remove a remote. + Restore support for file: uris in the RuntimeRepo key in flatpakref files. + Updated translations.- Update to version 1.4.0: + This is the new stable series, ending the 1.3.x series. The major changes since the 1.2.x is the improved I/O use for system-installed applications, and the new format for pre-configured remotes.- Replace systemd-gtk BuildRequires with pkgconfig(systemd): make the build cheaper by not having to wait for the 'real' systemd package to have built, but allow to use systemd-mini. The change in the stack causing this was polkit dropping its hard dep on systemd.- Add systemd-gtk BuildRequires: Needed now after changes elsewhere in the stack.- Disable LTO (boo#1133124).- Update to verson 1.2.4 (CVE-2019-10063): + It has been discovered that the previous fix for CVE-2017-5226, which uses seccomp to prevent sandboxed apps from using the (dangerous) TIOCSTI ioctl was only incomplete on 64bit arches. This is now fixed (boo#1130637, gh#flatpak/flatpak#2782). + seccomp: Only compare the low 32bit of the TIOCSTI ioctl args. + Support multiple nvidia cards on the machine + Fix support for systems where XDG_RUNTIME_DIR is /var/run which is a symlink like gentoo. + Fix potential crash when updating apps. + flatpak list --arch now works correctly again. + Updated translations.- Update to version 1.2.3: + Don't expose /proc in apply_extra script sandbox. The CVE-2019-5736 runc vulnerability is about using /proc/self/exe to modify the host side binary from the sandbox. This mostly does not affect flatpak since the flatpak sandbox is not run with root permissions. However, there is one case (running the apply_extra script for system installs) where this happens, so this release contains a fix for that. - Update to version 1.2.2: + Reverted green checkbox as they caused table alignment issues + Fix a division by zero if the terminal reports a zero terminal width (which happens in the flathub build environment). - Update to version 1.2.1: + Ensure flatpak builds with older versions of glib and appstream-glib. + build-commit-from: Fix the new --extra-id option. + build-export: Allow disabling the sandboxing of the icon validator and do so during the tests. + profile: Don't break if debug logging is enabled. + Better handling of the appdata release attribute. + Don't install polkit agent when not needed, avoiding some unnecessary log lines in some cases. + Fix the output of the sandboxed icon validator not being visible. + builld-init: Allow specifying a full ref for the sdk, which is used to select the branch name when checking sdk extensions. + Make the ok checks in the output green- Update to version 1.2.0: + Ensure DeployCollectionID works in flatpakrepo files in all cases. + Don't error out with empty installations in uninstall. + Add helper that validates icon files during export. + Don't allow root to modify the (non-root) per-user flatpak installation, as this risks causing problems later. + Remove some incorrect warnings from flatpak repair. + Allow multiple name segments after prefix when exporting files. + Allow specification of ellipsization in --colums options. + Handle dates as well as timestamps in appdata + Fixed a bug where flatpak remote-delete removed too many refs. + Now we use raw terminal mode during a transaction to a avoid problems with input during the operation causing problems with escape sequences. + Generate a fontconfig directory remapping snippet as will be needed for newer versions of fontconfig. + Support --extra-collection-id in build-commit-from to bind the commit to multiple collection ids. This is work in progress in ostree. - Add pkgconfig(dconf) BuildRequires: New dependency.- Update to version 1.0.6: + This release fixes an issue that lets system-wide installed applications create setuid root files inside their app dir (somewhere in /var/lib/flatpak/app). Setuid support is disabled inside flatpaks, so such files are only a risk if the user runs them manually outside flatpak. Installing a flatpak system-wide needs root access, so this isn't a privilege elevation for non-root users. + The permissions of the files created by the apply_extra script is canonicalized and the script itself is run without any capabilities. + Better matching of existing remotes when the local and remote configuration differs wrt collection ids. + New flatpakrepo DeployCollectionID replaces CollectionID, doing the same thing. It is recommended to use this instead because older versions of flatpak has bugs in the support of collection ids, and this key will only be respected in versions where it works. + The X11 socket is now mounted read-only.- Mark flatpak.sh as %config and move the systemhelper dbus config file under /usr - Remove the flatpak-rpmlintrc file that is no longer needed.- Make polkit_rules_usability.patch effective by adding a 60- prefix to the rules file. This will cause it to be executed before the polkit-default-privs are executed (bsc#984817).- Update to version 1.0.5: + Make the /etc -> /usr/etc bind-mounts read-only. + Make various app-specific configuration files read-only. + flatpak is more picky about remote names to avoid problems with storing weird names in the ostree config. + A segfault in libflatpak handling of bundles was fixed. + Updated translations + Fixed a regression in flatpak run that caused problems running user-installed apps when the system installation was broken. + Implicity grant MPRIS2 permissions - Changes from version 1.0.4: + Flatpak 0.99.1 removed the inheritance of permissions from the runtime due to concerns with dynamic app permissions. Due to popular requests, this version re-introduces such inheritance, but does it instead at build time. This solved the issues with dynamic permissions while still allowing runtimes to have default permissions. Apps can disable this by passing - -no-inherit-permissions to build-finish. + The sandbox now always includes a /etc/timezone file, following the (old) debian standard for this. This is needed, because the more modern way of exposing the timezone name by having /etc/localtime be a symlink into /usr/share/zoneinfo doesn't work when exposing the host timezone. + All apps now have automatic permissions to own their own app id as a subname of org.mpris.MediaPlayer2. + We now properly re-load remote state in FlatpakTransaction if the metadata was updated for the remote. + The signature of the FlatpakTransaction::operation-done signal was wrong in the header and has now been corrected to the signature that is actually emitted. + A crash was fixed when reading invalid .flatpakref files. + A crash during updates when a local ref was unexpectedly missing was fixed. + An error case on uninstalling was incorrectly returning success even thought there was an error. + flatpak_installation_modify_remote did not correctly save the nodeps state. + flatpak_installation_load_app_overrides() was improperly returning freed memory. + The tarball now ships with an icon (flatpak.png).- Add rpmlintrc to ignore files being installed under /etc not marked as %config (since they're not).- Don't run "flatpak remote-list --system" on %post anymore since it's not needed nowadays. Also let /var/lib/flatpak be created on demand since writing to /var should be avoided for transactional updates (boo#1111385, fate#325524).- Update to version 1.0.3: + run: You can now use --system to run an app that otherwise would run the user version. + New permission --allow=canbus that filters out access to AF_CAN sockets. + lib: New install flags FLATPAK_INSTALL_FLAGS_NO_TRIGGERS and new function flatpak_installation_run_triggers() + lib: Better error reporting, including some new error values that replace the generic FAILED. + uninstall --unused: Improve handling of which .Locale extensions are used + run: Make flatpak run on systems where $XDG_RUNTIME_DIR contains a symlink beneath /var (commonly /var/run -> /run). + Don't export any desktop/dbus/mimetype files in subdirectories. + build-init: We now record the base ref (if used) in the metadata. Nothing uses this atm, but it can be used by tools. + We now respect the upstream ostree.deploy-collection-id instead of the flatpak-specific xa.collection-id metadata key to decide whether to switch to collection ids for a remote. This is useful, because if you use the new one, only new clients (that support it better) will use it. + create-usb: Fix assertion failure in some error cases + create-usb: Always create archive-z2 repos + create-usb: Don't create unnecessary summary in repo + permissions: Avoid errors if there is no permissions table + repo: Fix flatpak repo sometimes using the wrong ostree-metadata ref. + Avoid fsync when updating $installation/.changed. + Add the missing appstream2 ref to the xa.cache metadata + The test-suite got some modifications to make it easier to maintain. + Documentation updates + Translation updates - Changges from version 1.0.2: + The dbus proxy is now available in a separate git module, xdg-dbus-portal, which is imported into flatpak as a submodule. It is possible to build flatpak against the system xdg-dbus-portal instead, but this is not currently very useful as no other applications yet depend on xdg-dbus-portal. + Build regressions with older versions of glib have been fixed. + Flatpak ps now also tracks the pid the main process inside the sandbox. + Added flatpak override --reset to reset overrides for an app. + Added flatpak override --show to show overrides for an app. + flatpak install now automatically pick user or system based on the remote name given (unless the remote exists in both). + flatpak uninstall --unused now does not remove SDKs if some installed app refers to them. + Fixed bug where flatpak uninstall --unused prompted for uninstall twice. + Set IO class on the system helper to "idle", which should cause background updates to affect the system less. + Fixed regression in flatpak uninstall --no-related. + Better handling of empty collection ids in flatpak bundles. + Cleaned up some error messages. + Various documentation fixes and cleanups. + Updated translations. - Changes from version 1.0.1: + This fixes various build and test failures that were detected when packaging 1.0, as well as translations and doc udpates. It also has some minor features, including a new subcommand "flatpak ps" to list the running flatpak instances for your user. + Print application tags in the prompt when installing/updating. + Make sure we don't accidentally leak the host /proc into the sandbox. + Translation updates. + Added a "flatpak ps" command that lists running flatpak instances. + Improve error reporting when exporting documents. + Improve detection of dynamic p2p remotes. + Build fixes for older versions of glib. + Fix threading issue in the OCI support that was causing the installed tests to sometimes fail. + Fix OCI AppStream support on 32bit architectures. + Fix utf8 issue in the dbus API description. + Some install fixes to make installed tests work + Make the tests work with python3 (as well as python2) + Improve introspection annotations in libflatpak + Improve libflatpak API docs- Update to version 1.0.0: + Flatpak 1.0 marks a significant improvement in performance and reliability, and includes a big collection of bug fixes. 1.0 also includes a collection of new features.- Update to version 0.99.3: + Fixed case where system install would sometimes fail due to the system-helper idle exiting. + Support installing flatpakref files in FlatpakTransaction, including a new signal add-new-remote for when remotes might be added. + Added some new FlatpakError codes. + We now support .flatpakrepo files with no gpg signatures. + Fix crash in system-helper when updating appstream. + New command create-usb which can be used to prepare an repo for offline updates. + Fix some non-handled cases of the CLI not working when /var/lib/flatpak doesn't exist. + Fix crash when running with a gid that is not in /etc/groups. + Add new permission-* commands to interact with the permissions store from the portals. + Include appdata in OCI bundle.- polkit_rules_usability.patch: Improve usability by allowing members of the group 'wheel' to bypass polkit authentication checks when locally logged in (bnc#984817). This adds a few polkit actions to the rules that are not covered by upstream, because they are set to 'yes' for active users by default. On SUSE we require 'auth_admin' for regular users, however.- Update to version 0.99.2: + Updated translations. - Changes from version 0.99.1: + This is the first pre-release before flatpak 1.0. This is considered feature-complete and no features or major changes before 1.0 are expected, only bugfixes. + Flatpak install/update/uninstall now lists all the operations that it will do and asks for confirmation before starting. + In the above confirmation the permissions (new permissions for updates) are shown for all applications. + P2P updates are more efficient. + system-wide installation uses less fsync calls so installation should be faster. + New ssh agent permissions allows granting an app ssh access.- Update to version 0.11.8.3: + Fix a 25 second timeout on startup if using p11-kit < 0.23.10. + Minor change in dbus proxy default filter, now broadcasts are not accepted from portals. - Changes from version 0.11.8.2: + Fix crash when building some apps. + Allow multiple appstream components per app. + Fix handling of gl drivers in uninstall --unused. + Don't prompt if nothing changed in uninstall --unused. + Updated translations. - Changes from version 0.11.8.1: + Fixed regression running apps with --own=* permissions. - Changes from version 0.11.8: + Flatpak uninstall now accepts --all to remove everything and - -unused to remove unused runtimes. + New command "flatpak repair" allows checking and repairing a flatpak installation. + New permission --allow=bluetooth allows use of AF_BLUETOOTH sockets. + If p11-kit-server is installed on the host, this is now used to forward the host certificate trust store to the sandboxed app. + Flatpak uninstall now does not allow you to remove a runtime if some installed app requires it. + Now tab-completion for zsh is offered. + New installations of flatpak now defaults to bare-user-only repos, which means that it works with filesystems that don't support xattrs. + New flatpak info options: --show-location, --show-runtime, - -show-sdk. + New flatpak remote-info options: --show-runtime, --show-sdk + p2p operations now work when offline. + Work around hanging on app startup on blocking autofs mounts. + Various optimizations make installation and updates faster. + Multiple extension versions matches when auto-downloading extensions are respected now. + Commands like "flatpak info/list/remotes/seach" now work properly if /var/lib/flatpak doesn't exist. - Add subpackage flatpak-zsh-completion to follow upstream zsh tab-completion addition.- Update to version 0.11.7: * Fix regression in installing .flatpak bundles - Changes in version 0.11.6: * Further work on the export filename regression, now also fixes the same issue as in 0.11.5 but in flatpak build-finish. * Fix segfault when installing from .flatpakref in gnome-software * Build yacc parser from source. * Don't tab-complete Sources/Locale/Debug extension by default. * Fix tests on debian. - Changes in version 0.11.5: * Fix a regression which caused installation of epiphany and other apps that export multiple .service files to fail. * Fix appstream updates in p2p mode. * Don't distribute generated gdbus code with tarball. * Add documentation for the flatpak portal - Changes in version 0.11.4: * flatpak remove is now an alias for flatpak uninstall. * flatpak uninstall now picks system or user automatically if not specified * New appstream branch format which is more efficient to distribute, the old is still generated for backwards compat. * Appstream data now contains compatible arches (for applications that doesn't exist for the primary arch). For example, an i386-only app is now listed in the x86-64 appstream. * The flatpak version is included in the user agent when downloading. * The Flatpak-Ref http header is set to the currently installing ref when downloading. * New argument --timestamp in build-commit-from. * When updating many apps we now only prune the local repo when all updates are done, making multi-app updates faster. * flatpak build now always allows multiarch use. * flatpak build now mounts app extensions during build. * flatpak build-init now supports --extension to add extension points earlier than build-finish. Also build-finish now supports --remove-extension. * New flatpak portal allows applications to sandbox themselves and restart a newer version of themselves. * New flatpak run options: --no-a11y-bus, --no-documents-portal. * Initial support for end-of-life:ing applications. * New option X-Flatpak-RunOptions in exported desktop/files allow you to specify no-a11y-bus and no-documents-portal. * Support for tagged extension points, which is useful if you want to use the same extension id (but maybe different versions) multiple times in an app. * We now export .service files for names that the app is allowed to own on the session bus. * libflatpak got new methods for listing remotes by type. * libflatpak now has support in FlatpakRemoteRef for getting remote metadata such as end-of-life, download size, metadata etc. * There was some internal restructuring on how installs/updates are done which should improve performance and maintainability. - Changes in version 0.11.3: * Fix "open with" and flatpak run --file-forwarding crash * Fix build with glibc 2.27 - Changes in version 0.11.2: * Remove fuse dependency, since we don't ship document portal anymore * Fix various issues with /home being a symlink to /var/home (atomic) * Allow downgrades when using collection ids * Search on all supported architectures - Changes in version 0.11.1: * Remove document portal and permission store * Add --socket=fallback-x11 permission * Fix dbus proxy vulnerability in authentication phase * Allow personality syscall in devel mode * commit-from: Migrate static deltas with commit * Add "network" storage type for installations * Add flatpak info --show-permissions * Add flatpak info --file-access * search: Update appstream (if stale) before searching * Make libflatpak work when /var/lib/flatpak is empty * build-bundle: Add --from-commit option * Allow appstream ids that don't end in .desktop * Make permission handling ignore unknown permissions for forwards compatibility * Removed incorrect error message in update --appdata when there was no updates * Fix handling of abort in the duplicate remote prompt * Fix division by zero in progress calculation * Fix flatpak remote-info --show-metadata * Fixed crash when installing some flatpak bundle files * Fix installation of telegram * remote-ls -u only considers app from the origin remote * Fix assertion error in extra-data progress reporting * Report nicer errors when trying to downgrade as non-root * pulseaudio: Try to find pulseaudio socket better * Fixed some warnings reported by coverity * Cleaned up code by splitting up some large source files- Do not build document portal anymore, rely on xdg-desktop-portal/-gtk instead. Add corresponding dependency. - Build with --with-system-bubblewrap and Add corresponding build and runtime dependency. - Remove --with-dwarf-header configure flag, it no longer exists.- Modernize spec-file by calling spec-cleaner- Update to version 0.10.4: * allow personality syscall in devel mode * configure: Fix copy_file_range detection * Add --disable-document-portal configure option * lib: Make gnome-software work with an empty /var/lib/flatpak * dir: Emit an error on non-root downgrade attempts * common/dir: Skip progress reporting while setting up extra-data * doc: Fix docs for --update-appstream * flatpak remote-ls -u: only consider apps from the current remote * extract_appstream: allow component IDs not to end in .desktop * common/dir: Fix a memory leak- Update to version 0.10.3: + Fix vulnerability in dbus proxy. + Fix incorrect error message in update --appstream. + Ignore unknown permission requests. + remote-info: Fix --show-metadata behavior. + common: Fix division by zero when calculate progress. + common/dir: Add a missing OstreeAsyncProgress default key. + lib/installation: Fix install/update_full() subpaths annotation. + app: Fix "multiple installations" prompt. + common/dir: Use an actual function for autoptr support without P2P. + Update Polish translation.- Update to version 0.10.2.1: + Fixed crash when installing some flatpak bundle files + Fix installation of telegram + Fixed some warnings reported by coverity + Some leaks fixed + Fixed typo in error message- Update to version 0.10.2: + flatpak update now updates from both system and user installations by default. + flatpak update is less noisy when updating appstream info. + All the remote-* commands now by default automatically decide to use --user or --system based on the given remote name. + flatpak remote-ls with no remote lists the content of all remotes. + Fixed regression that made xdg-user-dirs and theme selection for kde apps break. + flatpak override with no argument now overrides globally, i.e. for all apps. + flatpak override now supports --nofilesystem properly. For example flatpak override --nofilesystem=~/.ssh hides the ssh dir for all apps, even those who have homedir access. + flatpak install now takes a --reinstall argument which uninstalls a previously installed version if necessary. This is very useful when you want to install a new version from a different source. + flatpak install now allows you to pass an absolute pathname as remote name, which will create a temporary remote and install from that. The remote will be removed when the app is uninstalled. This is very useful during development and testing. + Flatpak now creates CLI wrappers for all installed apps, so if you add /var/lib/flatpak/exports/bin or ~/.local/share/flatpak/exports/bin to your PATH you can easily start flatpak apps by their application id.- Update to version 0.10.1: + New command "flatpak remote-info" shows information about applications in a remote. In particular the --log operation shows the history and can be used in combination with flatpak update --commit=XYZ to roll back to a previous version. + New command "flatpak search" which allows you to search the appstream data from the commandline. + flatpak update now updates appstream data for all configured remotes, which is important for search to work. + Allow automatic installation of gtk themes matching the active theme. + Handle the case when /etc/resolv.conf is a symlink. + /usr an /etc are now expose in /run/host in the app if the app has full filesystem access. + flatpak remote-add now works as a user when /var/lib/flatpak is empty, allowing flatpak to work on stateless systems. + Add support for flatpak build --log-session/system-bus, similar to what flatpak run already does. + flatpak build --readonly runs with the target directory (normally /app) mounted read-only. + Fall back to LD_LIBRARY_PATH if a runtime doesn't have /usr/bin/ldconfig. + Updated the support for OCI remotes. This is work in progress and still disabled by default though. + Updated translations. - Add pkgconfig(appstream-glib) BuildRequires: New dependency.- Update to version 0.10.0: + Added the flatpak config option which can set the language settings. + Fix issue where sometimes ld.so.conf were not generated. + /dev/mali0 is added to --device=dri. + Work around ostree static delta issues in some cases. - Changes from version 0.9.99: + Requires ostree 2017.12 for important pull stability fix. + New libflatpak API: flatpak_dir_cleanup_undeployed_refs, flatpak_installation_prune_local_repo, flatpak_installation_remove_local_ref_sync, flatpak_installation_cleanup_local_refs_sync. + build: FLATPAK_ID and FLATPAK_ARCH are now set in the environment when building. + update: Don't fail the entire update if some remote fails to update its metadata. + run: /.flatpak-info now lists exact commits and extensions in use. + run: We now use a per-app ld.so.cache file whenn running. This should speed things up, and allows ldconfig to report the correct results. + The verbose mode was changed into two levels, use -vv to show the more detailed info, which currently only contains the full bubblewrap argument lists. + run: Some common problematic host environment variables are now unset in the sandbox (PYTHONPATH, PERLLIB, PERL5LIB and XCURSOR_PATH). + run: Fixed failure when a higher prio extensions depended on a lower prio one. + run: The extension ld path order is now: app extensions, app, runtime extension, runtime. This was previously incorrect in that the app could override app extensions. + Extensions are now not downloaded if a matching unmaintained extension is already installed. + Preemptive changes to handle new bubblewrap change which doesn't user /newroot. + document portal: Disable debug spew that was accidentally enabled. + build-finish: New --extension-priority option. + run: Fix regression in --persist in 0.9.98. + run: Use sealed memfds (instead of just temporary files) when passing data to bubblewrap. + Updated translations. - Changes from version 0.9.98.2: + Fix permission denied when using the system-helper. - Changes from version 0.9.98.1: + run: Fix homedir access if the app has --filesystem=host access. + build-update: Fix appstream update in case one arch didn't change. + Updated translations. - Changes from version 0.9.98: + libflatpak now correctly finds metadata for subset installations (like locale data). + flatpak build now supports --appdir which exposes the per-app directory in the user homedir. This is useful when testing builds. + The host fontconfig caches are exposed to the sandbox, next to the fonts in /run/host. This will (pending fontconfig work) allow sharing host fontconfig caches, allowing much faster initial startup for flatpak apps. + flatpak install now supports --no-pull. + Added new extension property "locale-subset", which makes the extension point act like a locale extension (i.e. only install the subset configured by the locale). + flatpak remote-add --oci is disabled for now, as this is not up to date with the latest OCI work, and we don't want to break existing deployments if this has to change when this lands. + Parallel installation/updates are now safe because we take a filesystem lock whenever we prune the local ostree repo. + Flatpak run now works when important paths like $HOME, etc, are symlinks. + The ostree min-free-space property is is set to zero by default for the flatpak repos. This was causing a lot of problems for people, but the feature is still there if you manually enable it. + Updated translations. + Require ostree 2017.12.- Drop the SLE12 / Leap42 conditional definition for _userunitdir.- Update to version 0.9.12: + Fixed a regression in extra-data installation. + Don't expose the a11y bus in flatpak build.- Update to version 0.9.11: + You can now show all outstanding updates with: flatpak remote-ls --updates. + The dbus filter "org.name.*" now means all subnames of org.name, not just the first level. This matches how dbus arg0namespace works, and how the comming dbus container support will work. + Fixed segfault on update. + Better commandline tab completion. + Flatpak now exposes host icons readonly as /run/host/share/icons to the sandbox. + Updated translations.- Update to version 0.9.10: + Fix regression in dbus proxy that causes some apps to not work in 0.9.9. - Changes from version 0.9.9: + flatpak-builder was split out into its own module: https://github.com/flatpak/flatpak-builder + When downloading to a temporary directory for later install to the system repo we now write to /var/tmp instead of $HOME. This is more likely to be the same filesystem as /var/lib/flatpak, and thus will not run into issues with e.g. filesystem full. + We now get the default language list from AccountService if possible. + A regression that made --devel crash was fixed. + New feature for flatpakrefs, SuggestRemoteName=remotename will cause flatpak to ask if you want to create a generic (not app specific) remote for the repo url. + flatpak build now does not die with the parent by default, you have to pass --die-with-parent. This was done because die-with-parent uses PR_SET_PDEATHSIG which does not work well if the parent is threaded, like e.g. gnome-software is. + We now always re-set the personality in the sandboxed process in order to avoid inheriting weird settings. + We now share a single dbus proxy instance for all proxies for a sandbox. dbus-proxy now properly disallows old-style eavesdropping. + We now support accessibility by starting a customized dbus proxy for the a11y bus. - Drop flatpak-builder sub-package, it is now it's own project.- Update summaries.- Drop flatpak-rpmlintrc: no longer needed.- Update to version 0.9.8: + Core: - Experimental support for peer2peer installation, enable with - -enable-p2p. - Add default language setting to flatpak config. Defaults to all locales for system installs and the users locale for per-user installs. - build-update-repo: Now always keeps the two latest deltas around to avoid race conditions with outstanding downloads at the time or running the update. - Support loading extra data from local lookaside cache. + Flatpak-builder: - Set terminal title to the currently building module - Added ability to specify http url for sources mirror with - -extra-sources-url. - --install-deps-from=REMOTE installs the dependencies needed for the manifest. - New option --delete-build-dirs to always delete build directories, even on a failed build. - New property "add-extension" makes it nicer to create extension points.- Update to version 0.9.7: + app/repo: Factor out common GVariant operation. + build: - Include config.h using CPPFLAGS. - Check for system extensions before any other C compiling. - Only run each instance of gdbus-codegen once. - Re-run gdbus-codegen if the Makefile changes. + builder: - Allow building modules with no sources if buildsystem=simple. - Use build-args during cleanup. - Rearrange args to do_export() to make mandatory ones obvious. - When bundling git sources, reuse cache. + common: - Use bulk OstreeAsyncProgress API for setting keys. - Split out self and repo arguments for a static function. + common/dir: - Factor out common code for getting repo metadata. - Factor out common code to get and load the summary file. - Factor out body of update_remote_configuration_for_summary(). + dbus-proxy: - Make miscellaneous globals static. - Don't clear dbus_address twice. + docs: Remove --version from flatpak-build docs. + flatpak_dir_read_latest: Return NULL, not FALSE on error. + tests: - Add TEST_SKIP_CLEANUP env var for skipping test cleanup. - Add base-64 GPG keys to libtest declarations. + .gitignore: Ignore all generated man pages. + One more try at not distributing gdbus-codegen-generated sources. + Update Ukrainian translation. + Fix example. + Add nullable annotations for progress callbacks. + Update pofiles. - Changes from version 0.9.6: + builder: - Allow .pyc files without .py. - Add inherit-extensions features. - Better handling of default-branch. - Add ExtensionOf group to created extensions (Debug/Locale). + builder: Inherit parent version for inherited extension. + build-export: Canonicalize file permissions. + builder-options: Fix setting CPPFLAGS. + ci: - mv .redhat-ci.yml → .papr.yml. - Rework to be based on FAH + priv container. - Build ostree from git master. + dir: - Fix a minor memory leak. - Ensure we return on pull error to avoid error-overwrites. - Ensure ~/.local/share/flatpak is 0700. + doc: Remove duplicate list entry from flatpak-remote.xml. + export: Record flatpak version in default commit version. + info: Make --show-metadata machine parseable. + install: Manually save summary[.sig] in cache repo. + ls-remote: Drop unused variable. + run: Fix use-after-free in case you were exporting the same path twice. + testlibrary: Call g_assert_no_error first. + tests: - Add tests for no world writable dirs & no setuid files. - Increase timeouts waiting for file notification. + utils: Fix minor formatting issue in gtk-doc comment. + xdp-fuse: Add parentheses to clarify precedence in a conditional. + xdp-main: Fix a typo in a comparison. + Don't distribute gdbus-codegen-generated source in tarballs. + Update Czech translation. + Use new libostree APIs to reject world-writable/suid content. + Default to bare-user-only repo. + Unless forced via FLATPAK_OSTREE_REPO_MODE user bare-user for cache repo. + Force the cache repo to use the bare-user mode. + Re-create the cache repo if it is not bare-user. + Manually copy summary for update and appdata too. + Update pofiles.- Add flatpak-rpmlintrc as source while we wait for boo#1012961 to be resolved. Once this happens, feel free to nuke all traces of this change.- Update to version 0.9.5: + Fix installation of test-keyring2 + Don't error out when updating metadata for disabled remotes + export: Store the app id in the X-Flatpak key + run: Handle file paths when forwarding uris + Automatically use a separate builddir with Meson + documents: paths in the apps dir ar always accessible + builder: Don't warn for unknown properties starting with x- + document portal: Fix race condition when unmounting old version + document store: Document as-needed functionality of AddFull + extra-data: Print exit status if apply_extra_data script fails + run: Add debug sprew for all bwrap arguments + build-update-repo: Remove unwanted deltas before updating summary + list: Don't list .Locale and .Debug by default (override with - a) + remote-ls: Don't show Locale/Debug and secondary arches by default. + list/remote-ls: Also ignore .Sources by default + Handle app ids with dashes when ignoring locale/debug. + dbus-portal: Fix return value type of filtered NameHasOwner + builder: Add --export-only feature + run: Allow regular files for --filesystem=xdg-config/path + run: Allow --filesystem=xdg-*/subdir:ro + build-commit-from: Don't copy old xa.ref in metadata - Changes from version 0.9.4: + Improve display of partial extension sizes + flatpak-run.c: valid locations, not types + Ensure commits are available when checking for extra-data + libglnx: Bump to latest master, use new file copy API + Document some environment variables (#754) + Revise the flatpak repo command slightly + repo command: use FlatpakTablePrinter + table printer: Introduce a cell struct + table printer: Support column alignment + repo: Improve formatting of size columns + table printer: Support column titles + table printer: Only show titles on ttys + repo: Set column titles + table printer: move to its own source files + Add an API to get the summary of a remote + Make flatpak remote-ls show more details + scripts: Fix flatpak-bisect log + Add the possibility of installing/updating without static deltas + Add a helper for formatted output + Use the new output helper + Add table printer api for number columns + table printer: Use localeconv for decimal point + repo: Use the new number column support + remote-ls: Improve the output + list: Improve output formatting + remotes: Improve output formatting + Improve info output + Fix compiler warnings + Don't use escape sequences unless on a tty + info: Preserve the previous output format + Update the man page a bit + info: Use flatpak_fancy_output + Add macros for common ANSI tty escape codes + info/list: Move subpath list to info + Fix man page typo + Don't crash if there's more titles than columns + Unset TMPDIR in the sandbox + Generate fd-passing arguments for document portal + Include the generated document portal code in common + Implement file forwarding for flatpak_run_app + Enable file forwarding in flatpak run + Document the --file-forwarding option + Handle %f when exporting desktop files + Handle %u as well for file forwarding + Enable file forwarding for %u as well + Handle document portal absence + Don't get the doc mount path twice + run: Handle forwarding uris better + run: Use flatpak_has_path_prefix instead of hand rolling + run: Properly handle canonicalization in file exports + run: Clean up the exports handling code + run: Only forward as document if the target app can't see the file + builder: Fix ldflags support + build: Fix fallout from the TMPDIR unset + remote-ls: Fix up the column titles + run: Handle the case where /tmp on the host is a symlink + Update to bubblewrap 0.1.8 for die-with-parent + build: Kill sandbox when flatpak build dies + Expose host /etc/hosts and /etc/host.conf + install: Make already-installed a warning, not an error + Move caches to ~/.cache + tests: Fix race condition in tmp webserver + Use clearer terminology in docs about extensions + info: Print some more information + Fix tests by setting XDG_CACHE_HOME + install: Handle no-static-delta in --user installs too + common: Remove unused flatpak_dir_install_or_update + remote-modify: Never update explicitly set values + common: Add flatpak_dir_update_remote_configuration_for_summary + common: Store the summary signature in the cache too + common: Drop verbose log of using cached summary + remote-modify: Don't modify if no arguments are specified + remote-modify: Implement --update-metadata as a system-helper method + transaction: Always update metadata for remotes on update/install + update: Split update into check_for_update and update + Optimize flatpak_variant_bsearch_str + Use flatpak_variant_bsearch_str to lookup in summary cache + Optimize flatpak_summary_match_subrefs + remote-add/modify: Break out gpg loading code to helper + update_remote_configuration_for_summary: Never use system-helper + Add support for adding new gpg keys via signed summary + install: Fix automatic metadata update + Support build-update-repo --redirect-url= + Add a missing return + Drop an unused variable + repo: Print out redirect url too + Make it possible to unset values in update-repo + Update docs for build-update-repo + Document is-set keys in repo config + Add a marker to rewritten desktop files + tests: Make it possible to create multiple test repos + tests: Allow overriding GPG args + tests: Add a second gpg keyring + tests: Add new test-repo.sh with initial GPG tests + tests: Add tests for --redirect-url and new GPG key + tests: run test-repo.sh with system repo too + repo: Print out gpg key hash too + Don't use gdbus-codegen autoptr generation + common: Break out the flatpak progress calculator to a helper method. + Improve error wording + Remove unused variables + Remove an unused autoptr definition + Add workaround to flatpak_repo_collect_sizes for uncommited objects + export: Add install/download size and metadata to commit + build-update-repo: Use the size/metadata info in the commit object + builder: Use mkdtemp for initial git/bzr checkout + builder: Allow specifying the git commit if the branch is a tag + fix clang warning + update-metadata: silently ignore for non-signed system-helper case + remote-add: Use the new system-helper for initial metadata update + remote-ls: Don't rely on active symlink value, use deploy data + deploy: Uncouple active link from checksum + deploy: Append the subdirs to the checkout dir + update: flatpak update --subpath= means all subpaths + update: If resused ostree repo fails, blow it away and create new + update: Fix update for partial commits with system-helper + deploy: Verify that xa.metadata in the commit matches the deployed file + install: Limit the exported file to a whitelist + Disable exported search providers by default + exports: Fix up exporting of dbus service files + Rewrite exported mimetype files + Document flatpakrepo format extensions + Document flatpakref format extensions + dir: Report progress more frequently + Require latest flatpak (2017.5) + builder: Take "buildsystem" into consideration for cache freshness + builder: Add a install-rule to allow customized install + run: Fix race condition in app identification + Improve progress report calculation + Use the nicer progress reporting for the CLI too + Require ostree 2017.6 for the new progress APIs + progress: Use the new atomic progress API + progress: Simplify the progress calculations + progress: Tweak metadata part of download + progress: Don't report ??? in the bar while estimating + Remove unused variable + Bump libglnx, port to new tmpfile API + Update to latest libglnx with tmpfile error fix + Update to a libglnx that has GLnxTmpfiles fixed + builder: Better debug output from the rofiles-fuse code + builder: More GLnxTmpfile fixes + OCI: Properly initialize all used progress fields + builder: Fix segfault if appstream-compose fails + complete: Don't read outside string + Add version property to all dbus interfaces + document-portal: Add AddFull() operation + document-portal: Bump version to 2 due to new AddFull method + builder: Make c/cxx/ldflags not override env + builder: Update doc for latest cflags vs env var change + builder: Add CPPFLAGS similar to the existing flags + Update to latest libglnx and use the new GLnxTmpFile API + Remove unused variable + Add some hints when icons are not found + Correct mountpoint handling + Small documentation improvements + common: Expose FlatpakExports + common: Add flatpak_find_current_ref helper + run: Use new flatpak_find_current_ref helper. + common: Add flatpak_context_load_for_app helper + document-portal: Lock just once in AddFull for many paths + document-portal: Add XDP_ADD_FLAGS_AS_NEEDED_BY_APP to AddFull + lib: Add flatpak_installation_update_appstream_full_sync with progress + Remove unused variables + lib: Fix update checking + builder: Add support for screenshot mirroring + Use the CLI progress for update --appstream too + export: Always set a xa.ref commit metadata + progress: Update at 300msec on the CLI + deploy: Ensure xa.ref, if set, is correct + Dist test-keyring2 dir - Changes from version 0.9.3: + builder-manifest: Rename localized icon fields as well + build-update-repo: g_warning doesn't need newlines in the message + docs: Add flatpak make-current to the list of commands + doc: Align build commands with --help + docs: Add a / to all mentions of installations.d + doc: Add a manpage for the repo config format + docs: Add a man page for installation files + Fix --help output for --installation + doc: Include all man pages in html + appstream: Don't strip .desktop extension if thats the actual id + flatpak-builder: bundle module sources as runtime + Bundle sources: add support for bzr + Bundle sources: add support to bundle patches as well + Bundle sources: add flag --bundle-sources to control the bundling + Bundle sources: the path is always sources + Bundle sources: allow use case to mix local and online sources + Bundle sources: rename option to --extra-sources=DIR + Bundle sources: use git clone --shared for local sources checkout + Bundle sources: bundle the manifest + Bundle source: use C-style comments + Bundle sources: initialize app_dir_path later + Bundle sources, git_get_mirror_dir: able to pass NULL for is_local + Bundle sources, bzr: set error when repo can not be found + Bundle sources: bundling has to happen before the extracting + Improve html generation + Add some structure to the generated html + Fix a typo in a comment + run: Handle non-default WAYLAND_DISPLAY + Drop useless options from flatpak info + Avoid confusing behavior of flatpak info + Add more useful options to flatpak info + Add a --show-extensions option to flatpak info + Fix the testsuite + flatpak info: Show more information for extensions + flatpak info: Properly handle unmaintained extensions + Fix a compiler warning + builder-module: add "bootstrap.sh" to autogen_names + Add a repo command + Document flatpak repo command + Quiet compiler warnings + Don't fail the build if rofiles-fuse is not available + Make it a warning + docs: Fix a typo + Document build-extension + More metadata docs + build: Ensure we add the default dbus permissions + builder: handle module-relative paths for json includes + builder: Load source files from the directory of the module + build: Always set personality to linux32 when cross-building + builder: Print warnings for unknown properties + Report full version in http user agent + builder: Ignore --extra-data in flatpak-builder --run + docs: Mention that rename-icon should not have an extension + build-update-repo: Add internal function to create a single delta + build-update-repo: Spawn subprocesses when generating deltas + builder: Use module-relative paths for archive sources too + builder: Take build-commands into consideration for rebuild + docs: Typo fix: "flatpack-builder" -> "flatpak-builder" + builder: Use flatpak_mkdir_p instead of query + mkdir + common: Add flatpak_build_file[_va] helper + builder: Add builder_context_find_in_sources_dirs + builder: Use context_find_in_sources_dirs to simplify code + Extend flatpak-builder test + builder: Make git patch apply verbose by default + Don't bundle inline (data:) URIs + builder: Drop the storing of local files to data: uris + fixup! common: Add flatpak_build_file[_va] helper + builder: Convert bundle sources to cached stage + builder: Change how we handle pre-existing git sources + builder: Update bzr bundling + export: Always make directories accessible + builder: Strip trailing whitespace in git submodule urls + builder: Add progress reporing while downloading + builder: Fix up unused variable warnings from clang - Changes from version 0.9.2: + Fix typo + Revert "Fix typo" + builder: Remove all SDK extension from the platform + Re-fix typo + builder: Handle absolute paths in command + builder: Add --default-branch=BRANCH + build-export: Export all files with canonical permissions + document more metadata keys + Fix pofiles typo + Bump libglnx, use new glnx_throw(), fix callers + Import ostree's compiler warnings, fix up callers + Fix build if libdwarf dir missing + Correctly find system unmaintained extensions + Stop using ostree trivial-httpd + Drop -Werror for aggregate-returns + Add forgotten file + Removed a commented string + builder: Add a hint about --force-clean + test-webserver.sh: Remove accidental debug spew + tests: Don't leak SimpleHTTPServers + Add new API to the docs + OCI: Verify that loaded OCI blobs have the correct checksum + builder: Don't pass --require-version along to build + Add flatpak_oci_registry_get_uri + FlatpakDir: Break out helper flatpak_dir_lookup_ref_from_summary + oci: Break out get_digest_subpath helper function + OCI: fstat in local_open_file helper + OCI: Add flatpak_oci_registry_mirror_blob + OCI: Add flatpak_archive_read_open_fd_with_checksum + OCI: flatpak_pull_from_oci - verify manifest ref + OCI: Verify layer checksum while applying + OCI: Support OCI with system-helper by mirroring OCI repo + update: Don't check for update short-circuit if we're not pulling + OCI: Add flatpak_oci_sign_data + OCI: Add support for strict and mandatory json properties + OCI: Add json format for atomic-based signatures + OCI: Support signing build-bundld --oci output + OCI: Verify signatures + OCI: Fix signature checks on updates + OCI: Use gpg signatures in tests-oci.sh + utils: Prepare for libostree 2017.4 defining autocleanups + Split the manifest file docs off + CI: Add gpgme-devel to CI build environment + Fix ostree autoptr checks for git master + Fix unused variable errors reported by clang + builder: make appstream-compose failure fatal + dbus-proxy: Make Buffer refcounted + dbus-proxy: Fix use-after free in header parsing + dbus: proxy fix leak in get_arg0_string + dbus-proxy: Fix leak of get_arg0_string return value + dbus-proxy: Fix leak in setup phase + system-helper: Fix check for downgrade + update: Only allow downgrades if a commit is explicitly specified + Handle uris better when detecting .flatpak[repo,ref] suffix + Use ostree's BARE_USER_ONLY flag (#674) + Build with large file support + Use correct format string for guint64 on 32-bit + builder: Add disable-fsckobjects to git sources + builder: Add commit property to git source + builder: Support sdk-extensions also for apps + Updated translations. - Add libqgpgme-devel BuildRequires: New dependency.- Update to version 0.9.1: + The flatpak-builder build cache now uses the rofiles-fuse ostree feature. + The cflags and cxxflags module properties now work by appending, rather that replacing, when there are multiple values specified. + Do not invalidate build cache when the installed version of the SDK changed by default. Use --rebuild-on-sdk-change to force rebuild otherwise. + The build cache is now per-arch. + New buildsystem "cmake-ninja" which works like "cmake", but builds using ninja. + New buildsystem "simple" which just runs a set of shell commands specified in the "build-commands" property. + flatpak-builder now has build-runtime and build-extension properties that makes it easier to build runtimes and extensions. + FLATPAK_DEST is set in the build environment to the installation destination. + flatpak-builder now supports --from-git=URL which pulls the json manifest and related files directly from a git repo. + modules have a new no-make-install property which skips the make install step. + Modules and sources have only-arches and skip-arches properties, which lets you enable/disable them based on the build architecture. + build-options has a new property ldflags, which is similar to cflags and cxxflags. + flatpak build (and thus flatpak-builder --run) now supports dbus proxies when needed. + All git repos are cloned with fsckObjects=true, which means we verify that the repos are valid. + New flatpak-builder argument --build-shell=MODULE extracts and prepares the sources for a specified module and then starts a build sandbox inside it. + build-export: Now supports --timestamp=ISO-8601-TIMESTAMP, which allows you to create reproducible commits. + The OCI support has been updated to the latest version of the OCI image specification format. + There is a new flatpak-bisect script that can be used to bisect flatpak applications, looking for regressions. + flatpak list got a revamp. It now shows more information, and shows both apps and runtimes by default. + flatpak remote-list was renamed flatpak remotes in order to minimize confusion with flatpak remote-ls. The old name is deprecated but still works.- Update to version 0.8.7: + This is a minor security update, matching the behaviour on master where we avoid ever creating setuid files or world-writable directories. However, the fix is more localized and does not require a new ostree. + After pulling from a remote, always verify that the staged new files and directories have safe permissions. + Ensure ~/.local/share/flatpak is not readable to other users, to avoid anyone ever seeing possibly world-writeable directories therein. + Fix double-setting a error in case of errors when pulling. + Fix timeout in testcase.- Update to version 0.8.6: + TMPDIR is now unset in the sandbox, if set on the host. Each sandbox has a personal /tmp that is used. + Flatpak run now works if /tmp is a symlink on the host. + /etc/hosts and /etc/hosts.conf from the host are now exposed in the sandbox in addition to /etc/resolv.conf. + flatpak now stores the app id in the X-Flatpak key when exporting a desktop file. + Exports are now whitelisted, and the only thing you can export are: desktop files, icons, dbus services. This is somewhat different from the 0.9.x series, where als mime definitions, and gnome-shell search providers are allowed. + Fixed minor race condition in portal application identification. + Support WAYLAND_DISPLAY environment var. + dbus-portal: Fix handling of NameHasOwner. + run: Allow regular files for --filesystem=xdg-config/path. + run: Allow --filesystem=xdg-config/subdir:ro (previously it needed to be writable). + Support for updating to new gpg keys and url when using flatpak remote-modify --update-metadata. This is a manual operation in 0.8.x but is automatic in the 0.9.x series.- Update to version 0.8.5: + Fixed a use-after-free and some leaks in the dbus-proxy. This is not currently believed to be exploitable, but the proxy is a security boundary, so we still recommend to update. + Regular updates now never allow updates to an older version than what is currently installed (unless you explicitly specify an old commit id). This closes a hole where a MITM attacker can force clients to downgrade to an earlier (gpg-signed) version of the application. + The automatic detection of --from in flatpak install now detects flatpakref extensions even in URIs that end in a query string such as https://git.gnome.org/browse/gnome-apps-nightly/plain/gedit.flatpakref?h=stable + The detection of "unmaintained" system extensions was broken, and in some cases these extensions were not found. This now always works. + Flatpak now builds with latest OSTree. This required some fixing for multiple definitions of the g_auto* macros as OSTree now exports those. + We no longer rely on ostree trivial-httpd for the tests, because this is optional in later versions of ostree. Instead we use the python SimpleHTTPServer. + The minimum glib version has been corrected to 2.44. + The minumum automake version has been increased to 1.13.4 because some older version didn't work.- Update to version 0.8.4: + Fix no-systemd-user warning (it doesn't affect sandboxing anymore). + run: propagate wildcard xauth entries to app bundle. + Don't remove origin remotes if some other ref uses it. + Fix repeated download of locates on update. + update: Don't update related refs from different remote. + Initialize g_autofree string to NULL, not to crash when early returning. + document portal: Disable spice_read as it seems broken. + Return the container from flatpak_get_system_installations(). + Don't include newlines in error messages. + utils: Fix list_unmtainained_refs. + Avoid possible null dereference. + utils: Fix flatpak_bundle_load typo. + list: Don't check error twice. + list-remotes: Handle remotes with no url specified. + run: Handle error when enumerating /etc. + zero-mtime: Handle error when enumerating directory. + Fix error check when loading configuration. + Support runtime-less extra-data. + flatpak_list_extensions: Break out code into helper. + extensions: Support multiple versions. + Append flatpak data dirs if XDG_DATA_DIRS is already set (gh#flatpak/flatpak#611). + appstream: Don't add runtime to flatpak bundle tag for runtimes. + Split extra-data setup and fetch. + Improve progress calculation. + profile: Don't add flatpak to XDG_DATA_DIRS if its already there. + Updated translations. - Drop flatpak-propagate-xauth-wildcard.patch: fixed upstream.- Update to version 0.8.3: + In addition to the regular list of bugfixes this stable release include backports of the updated OpenGL support from master. This, in combination with the work in the runtime allows flatpak to work out of the box with out-of-tree OpenGL drivers, including the nvidia driver. + Additionally, due to some complicated issues wrt ptrace and user namespaces this version disables the use of user namespaces if bubblewrap is setuid, as it cause problems for the way flatpak portals identifies applications. + Better handling of errors for extra-data. + Handle extra-data properly for runtimes (as well as apps). + Respect required version for runtimes (as well as apps). + flatpak list: Don't break if some local ref is not deployed. + builder: - Look for appstream data in /app/share/metadata also. - Fix buildsystem=cmake builds. + Add progress reporting to extra-data download. + Fix uid/gid for directories in document portal. + Updated translations.- Add flatpak-propagate-xauth-wildcard.patch which ensures applications have the right to communicate with the X server. (gh#flatpak/flatpak#569).- Update to version 0.8.2: + This is a bugfix and security update: - Some of the bind-mounts that flatpak sets up were not read-only as they should have. This includes: extensions, system fonts, resolv.conf, localtime and machine-id. Many of these are typically only writable by root, but some, like the user-specific fonts and user-installed extensions could be modified from the sandbox. + Other fixes: - There are new configure options for where to install dbus configuration. - Broken symlinks in the root directory no longer break flatpak run. - flatpak run with HOME in /var now works. - dri access now also handles mali devices. - install handles --arch when installing flatpakrefs. - system-helper activation fixed on systemd-less setups. - dbus-proxy now works without /run. - During installation, failing to update a dependency is now not fatal. - /etc is now fully writable when building runtimes. - --filesystem=xdg-config/foo now sets up the bind-mount from the host dir even when not using :create.- Update to version 0.8.1: + This is a bugfix and security update (CVE-2017-5226): - Flatpak now uses seccomp to disallow the TIOCSTI ioctl in the sandbox, which works around the possibility to inject text on the controlling tty (CVE-2017-5226). - This was previously fixed in bubblewrap in 0.1.6, but that change has now been reverted as it introduced other problems for flatpak. + Update bundled bubblewrap to 0.1.7. + Fix writing new file with O_EXCL in the document portal. + Allow appstream data that doesn't have .desktop in the component id, such as data for runtimes. + Drop json-glib dependency from 1.2 to 1.0. + Builder: Fail if unable to read included file. + OCI: Ensure exported layers are readable by everyone. + Fix extra-data download in gnome-software. + Fix update-mime-database trigger when installing via the system helper. + Updating an app by installing a newer bundle now works again. + Make /var/tmp not be on a tmpfs (it is now in ~/.var/app/$appid/cache/tmp). + Updated documentation. + Updated translations.- Update to version 0.8.0: + This is the first release in a new series of stable releases called 0.8.x. New features will be added to 0.9.x, and only bugfixes will be backported to 0.8.x. The featureset of this release is a good base to target if you're creating flatpaks that should be widely usable. + This release technically requires only OSTree 2016.14, and it build fine with this, but we recommend using OSTree 2016.15, because of the change in how it verifies the checksums of commits in delta files. + Flatpakrepo files now support a RuntimeRepo= key which points to a flatpakrepo file. This means the user don't have to manually configure a remote for the runtime, just reply to the prompt to automatically do this when installing the app. + We now support dependencies when installing bundles. This includes required runtimes, related refs, and the equivalent of RuntimeRepo. + The support for OCI in flatpak has been updated to the latest OCI spec version, and support has been added to directly install flatpak applications from an OCI image. + In flatpak install, the --from and --bundle options are now optional if the argument has the correct suffix (.flatpakref and .flatpak). + Flatpak install now supports -y to let you avoid interactive prompts. + build-finish: - We now export mime type files with the right name. - New --require-version option let you specify a particular version of flatpak, and older version of flatpak will not install or update to the new version. + build-sign: Allow signing all apps by omitting the id. + Fix regression in the document portal when adding named files. + build-import-bundle now signs the commit if you specify a gpg key. + Flatpak now reads configuration from /etc/flatpak/installations.d which lets you support multiple system-level installation paths. These can be accessed with new --installation=... arguments to most of the commands. + flatpak-builder: - Support --jobs=N to limit parallel builds. - Patch source got new options property that lets you pass arguments to patch. - New generic "buildsystem: type" option that replace the (now deprecated) "cmake: true" option. This supports "autotools", "cmake" and "meson".- Update to version 0.6.14: + Update bundled bubblewrap to 0.1.4 which has some nice bugfixes. + Requires OSTree 2016.14, which allows us to drop some old workarounds. + When installing an application system-wide, don't consider dependencies that are installed for the user only. + Flatpak install --from now tries to re-use existing remotes to avoid creating unnecessary origin remotes. + Using --filesystem=$dir when $dir is a symlink-to-directory now works. + Using --filesystem=$file to expose unix sockets to the app is now allowed. + By default all the directories in ~/.var/app (except the app), as well as ~/.local/share/flatpak are hidden in the sandbox. + New option --filesystem=$dir:create which will create the destination if it did not previously exist. + --filesystem= now supports for xdg-[config|cache|data]. This allows you access to the host versions of these xdg dirs. Additionally if you use these with a subdirectory, like: - -filesystem=xdg-config/subdir then that subdirectory on the host will be shared with the per-app instance of the xdg-dir. + Builder now correctly handles app-ids that have dashes in them. Previously this generated invalid ids for the debuginfo and locale extensions. + The experimental OCI file format support was changed from creating an OCI container to creating an OCI image. + Fix regression where "flatpak update --appstream remotename" broke.- Require flatpak by flatpak-devel: xdg-desktop-portal expects to find org.freedesktop.portal.Documents.xml, which is part of flatpak. It's fair to assume everything to be present when pulling in the -devel package.- Update to version 0.6.13: + The command line arguments for install/update/uninstall changed. + Application runtime depencenies are checked/downloaded. + remote-add and install --from now supports uris. + flatpak run can now launch a runtime directly. + Updated bubblewrap to 0.1.3 (CVE-2016-8659). + Support for defining the default branch per remote. + remote-add/modify: --update-metadata pulls current title and default branch from remote summary file. + Applications can now list a set of URIs that will be downloaded with the application. + flatpak-builder: Support --finish-only and - -allow-missing-runtimes. + flatpak-builder: Support app layering. + dbus proxy: The filtering has been tightened up. + build-finish: Now exports icons for themes other than hicolor too. + There is support in the app metadata for generic policies. + Support for extensions directories.- Update to version 0.6.12: + Partial revert in application id rules. Application ids can now only have dashes in the last element. This allows apps to export files such as org.my.App-extra.desktop which was used by the libreoffice builds. + By default the kernel keyring is not accessable, as it is not containable. + Some robustness fixes for build-commit-from. + Better error messages. + flatpak update --appstream now updates for all remotes. + Made flatpak enter work, and you can now use any pid in the sandbox. However, it requires root permissions. + Support for --device=kvm for /dev/kvm access. + Support for --allow=multiarch to support non-primary arch support. For example running i686 code in an x86_64 app. + Add new default-branch setting for the remote configuration. - Changes from version 0.6.11: + Dashes are now allowed in application ids. However, to still work with symbolic icon names, they may not end with "-symbolic". + HostCommand now handles ptys correctly. + Various documentation updates. + New FLATPAK_CHECK_VERSION macro in libflatpak. + HostCommand now returns the real PID rather than a fake one. + Fix regression in flatpak update --appstream. + Fix regression installing bundles without origin urls. + New flatpak-builder option --show-deps lists all the files the manifest depends on.- Update to version 0.6.10: + Dropped requirement for systemd --user. The way we detect if an process we're talking to is sandboxed, and what application id it has doesn't use cgroups anymore, which means that the dependency on systemd in the user session is now optional. This also means the --no-desktop argument is not needed any more. (It is still accepted but does nothing.) + Initial support has been added for .flatpakref files. These are simple key value files similar to .flatpakrepo files, however they specify an application to install in addition to the repo information. For example, gedit can be installed by downloading https://sdk.gnome.org/gedit.flatpakref and running: flatpak install --from gedit.flatpakref There is also library support for this so it can be added to graphical installers (such as gnome-software). + Requires OSTree 2016.10. The change in how OSTree handles mtimes in checkouts that was introduced in 2016.7 has been reverted, and the required changes in Flatpak has been made. This means that flatpak now depends on OSTree 2016.10. + Requires Bubblewrap 0.1.2 for builds using the system bubblewrap. Builds using the included copy need no changes. + The $XDG_RUNTIME_DIR/flatpak-info file has added information about the running application, and is now also securely available for a running application from the host as "/proc/$fd/root/.flatpak-info". This is what is used to identify remote apps instead of the cgroup info. + A new run permission --allow=devel has been added. An application with this permission is allowed to use ptrace and perf. This was previously only available during "flatpak build" and "flatpak run -d". This is useful if you're packaging e.g. an IDE. + When an application is updated or removed a /app/.updated or /app/.removed file is created for running instances. This can be used by applications to trigger e.g. a restart for the new version. + A new dbus request "HostCommand" has been added to org.freedesktop.Flatpak. This lets you run any command on the host, and is therefore clearly not sandboxed, so access to this should be limited. However, it is very useful if you're using flatpak mainly as a distribution mechanism, for a non-sandboxed application. + flatpak-builder now supports running from inside a flatpak, by auto-detecting this and using the HostCommand service to run recursive flatpaks. + Consecutive calls to flatpak build-update-repo has been speed up. + The document portal now allows sandboxed applications to create references to files in /app and /usr (in the app/runtime). + The update process now doesn't stop at the first failure.- Update to version 0.6.9: + Dropped dependency on libgsystem. + Allow passing partial refs whenever a CLI command takes an app or runtime name. + New command build-commit-from creates a new commit based on the contents of another commit (optionally from another local repo). + The sandbox now contains $XDG_RUNTIME_DIR/app/$APPID from the host (and the directory is created if needed). + update: Better output, and faster for the no updates case. + build-export: Don't make most validation errors fail, instead just print a warning. + builder: - Support local path references for git sources. - Better handling of recursive git submodules. - Fixed issues with the .pyc mtime rewriting. - Handle symbolic icons for rename-icon. - Add --stop-at=$module to do partial builds. - Add --sandbox flag to disable the build from escaping from the sandbox via build-args. + Updated translations. - Drop pkgconfig(libgsystem) BuildRequires following upstream.- Update to version 0.6.8: + Requires OSTree 2016.7, allowing to enable use of static delta for system downloads again. + Support --no-desktop which allows you to run a flatpak app outside a desktop, with some loss of functionallity (for example, there will be no systemd --user scope created for the app).. + More documentation. + Memory leak fixes. + Initial support for rpms as flatpak-builder archive sources. + Start work on translating the CLI. + Install systemd config snippet to set the right XDG_DATA_DIRS path. + Support --arch in flatpak list. + Support access() in the document portal. + Validate exported desktop files.- Change /usr/bin/tar Requires to /bin/tar: this has never been moved to /usr/bin.- Update to version 0.6.7: + Expand the flatpak run --devel docs. + Add an option for journal sockets. + Document new socket option. + Fix builddir option type in flatpak-builder documentation. + document portal: don't reply to GetMountPoint() until ready. + Downgrade failure to get document portal from warning to message. + tests: don't treat helper scripts as though they were tests. + Run tests with a private XDG_RUNTIME_DIR. + Add BWRAP and --with-system-bubblewrap configure arguments. + test-basic: do not fail in non-English locales. + Update to latest libglnx with lock release fix. + fix warning. + Fix leak in flatpak-installed-ref. + utils: Add flatpak_spawnv() helper. + builder: Add "use-git" option for patch source type. + Make journal always available in the sandbox. + builder: Report errors to stderr, not stdout. + tests: Add test for "use-git" patch application. + tests/test-builder.sh: Re-silence flatpak-builder. + tests: Test install/updates with static deltas. + extensions: Minor cleanup. + Add tests for extensions. + extensions: Always create a tmpfs for subdirectory extensions. + common: Remove unused functions. + utils: Add flatpak_get_current_locale_subpaths(). + utils: Add flatpak_summary_match_subrefs. + builder: Strip "." from locale names too. + FlatpakDir: Add flatpak_dir_find_remote/local_related. + Add flatpak_dir_install_or_update. + Install/update/uninstall related refs. + builder: Set the new extension properties. + Bump version number since last release. + Document the metadata format. + lib: Support listing related refs. + Add some code I used to test the new related refs code. + doc/flatpak-metadata: Add some extra clarifications. + Update NEWS. + Require ostree 2016.6. + builder: Clear mtime to 1, not 0, to match what new ostree does. + Remove unused variables.- Update to version 0.6.6: + lib: Add flatpak_get_supported_arches. + Add flatpak --supported-arches. + common: Make some internal functions static. + update: Always look at all existing apps when updating. + Disable static deltas for system-helper updates. + Make finding refs handle multi-arch. + make-current: Use find_installed_ref(). + remote-ls: Better multiarch support. - Changes from 0.6.5: + Documentation improvements + builder: Check that the specified command exists after build is done. + builder: Fix up mtime in headers for python precompiled files. + builder: Allow submodules and including modules from other json files. + system-helper builds are optional (--disable-system-helper). + system-helper: Support installing from local remotes and bundles. + Improved support for --subpath installs, including libflatpak support. + Improved command line completion. - Create /var/lib/flatpak directory, own it and ensure system wide repo exists when installing / updating flatpak package. - Add pkgconfig(libarchive) >= 2.8.0 and gtk-doc to BuildRequires. - Replace libelf-devel for pkgconfig(libelf) BuildRequires. - Bump ostree minimal requirements to 2016.5.- Version update to 0.6.4: + Rename to flatpack + New homepage and download url + Various fixes- Update to version 0.5.2: + The way locale extensions work has changed. Now we build a single extension for all locales, but we allow you to specify a subset of it during installation and update time using the - -subpath commandline flag. The main reason for this is that the many extensions didn't scale, both in technical terms (large ostree summary file size), but also in terms of the UI listing hundreds of uninteresting things. + We no longer use sizes in the commit objects to get installed and download size, instead we store some extra metadata in the summary file. This allows us to get much faster access to these, as with recent ostree versions we can cache the summary file. + New command xdg-app build-sign that lets you sign a commit at any time. + New argument xdg-app build --force-clean that removes pre-existing build dirs. + xdg-app run now uses the "current" version as the default if you specify no branch or arch. It used to default to the "master" branch. This will default to the last installed version, but can be changed with xdg-app make-current. + Added config-opts to the build-options in xdg-app-builder. This allows you to extend the configure flags in an arch dependent way. + Documentation updates.- Update to version 0.5.1: + xdg-app-builder: Don't export if --build-only specified. + Prefer non-subdir extensions over subdir ones.. + builder: Build single every-locale extension. + Extract icons for all appstream components. + Document xdg-app-build-bundle. + Align contents of xdg-app.1 with xdg-app --help. + Don't check that the name is a branch. + Add xdg-app info to docs. + builder: Use the right field for the platform cache checksum. + builder: Checksum metadata-platform contents for cache too. + builder: Actually respect the defined branch. + Fix indentation. + Support endianness markers in bundle files. + seccomp: Always try to do the socket filtering, but don't fail if not supported. + seccomp: Allow running the target arch. + doc: Minor reshuffling. + XdgAppInstallation: Fix a doc typo. + version information: Add documentaiton. + XdgAppError: Add documentation. + XdgAppInstallation: Add documentation. + XdgAppRef: Add documentation. + XdgAppInstalledRef: Add documentation. + XdgAppRemoteRef: Add documentation. + XdgAppRemote: Add documentation. + docs: Pick up the version number automatically. + docs: No need for a deprecated index. + docs: Exclude more private headers. + docs: Fix a typo. + docs: Hide class structs. + doc: Add xdg_app_installation_install_bundle. + More class hiding. + docs: Document XdgProgressCallback. + helper: Use 64bit capset/capget versions. + Release 0.5.1.- Update to version 0.5.0: + Change xdg_app_bundle_ref_get_appdata to xdg_app_bundle_ref_get_appstream. + Update test-lib.c with the appstream api change. + lib: Fix a tiny leak. + lib: Add xdg_app_bundle_ref_get_origin(). + Search for dwarf.h in configure. + Post release version bump. + Force /bin/sh as a shell. + Ensure that the .ref file is always replaced. + Get the new glnx_fd_close. + Reimplement fuse backend. + Now newlines needed in g_debug calls. + Don't enumerate noenumerate remotes. + document portal: Avoid some deadlock. + fuse: Store basename in dir so we don't have to keep looking it up. + Flesh out document portal tests. + xdg-app-buildeR: Remove unnecessary spew. + No need for newlines in g_debug messages. + Never use gvfs in the session helper. + Avoid warning about refing null GVariant. + Add change notification for the permissions store. + Don't unnecessarily grow the buffer when loading files. + Enabling gpg means require both signed commits and summaries. + Update summary after generating deltas. + Bump version to 0.5.0. + Update NEWS. + Add major_version to binary age.- Update to version 0.4.13: + Fix xml printing of nodes with no children. + Set xdg-app as the log domain. + docs: Add docs for shell sources. + Add a file header to bundles. + builder: Add builder_get_debuginfo_file_references. + builder: Build runtimes in /run/build-runtime. + builder: Add sources referenced from debuginfo into Debug runtime. + Make /run/build and /run/build-runtime symlinks to the right place. + build-bundle: Add metadata file as metadata element. + Fix typos in header. + common: Break out bundle loader to helper utility. + Remove unused variable. + lib: Add XdgAppBundleRef. + bundles: Verify that the header metadata matches the deployed one at install. + common: Move part of bundle install to helper functions. + Remove origin repos on uninstall. + Add test scripts that create trivial a runtime and app. + Add make-test-bundles.sh. + bundles: Don't lock during pull. + lib: Add xdg_app_installation_install_bundle. + Fix some compiler warning (unused vars). + Allow specifying subdir of xdg dir, like: - -filesytem=xdg-download/subdir. + Support --filesystem=xdg-run/foo. + common: Break out xml appstream rewriting to helper functions. + Add appdata to test apps. + common: Add xdg_app_read_stream helper. + common: Add and use xdg_app_appstream_xml_root_to_data. + build-bundle: Extract appdata and icons into metadata. + lib: Add XdgAppBundleRef api to get appdata and icons. + build-update-repo: Add --generate-static-deltas option. + lib: Add xdg_app_bundle_ref_get_installed_size(). + Update version to 0.4.13. - Add libdwarf-devel BuildRequires: new dependency.- Update to version 0.4.12: + Update exports on uninstall too. + Pass location of exports to triggers as arg1. + Add option to disable sandbox triggers. + Update exports on uninstall via library too. + builder: Put all builds in a .xdg-app-builder/build subdir. + helper: If stdout is a tty, mount tty as /dev/console. + When rewriting Exec lines, don't use full bindir. + Revert "When rewriting Exec lines, don't use full bindir". + Allow overriding XDG_APP_BINDIR using make vars. + Work around race when doing first initial appstream checkout. + info: Fix support for system installed runtimes (typo). + Make system repo bare-user too, to avoid any chance of creating setuid bits. + helper: drop caps in launcher. + builder: Report errors if eu_strip fails. + lib: Return GBytes from xdg_app_installed_ref_load_metadata(). + lib: Add xdg_app_installation_get_path. + builder: Always create unversioned symlinks while building modules. + builder: Add build_context_get_build_dir(). + builder: Move CFLAGS/CXXFLAGS handling into BuilderOptions. + builder: Add support for --run to start a command in the build dir. + builder: Support local archives with path property. + build-init: Support --tag=FOO. + builder: Support tags. + deploy: Add metadata tags to exported desktop files. + appstream: Add runtime, sdk and tags to appstream xml. + Add xdg_app_installation_get_remote_by_name. + Remove all appstream checkouts and mirrored refs when deleting remote. + common: Add XDG_APP_CP_FLAGS_MOVE support. + Add docs for appstream-compose option. + builder: Support separating out locale data. + Move migrate_locales to builder-utils.c. + Migrate locales after importing parent runtime. + Add support for separated locales when creating platforms. + Always create /etc/passwd,group,resolve.conf,machine-id when deploying. + Fix use after free. + helper: Put monitor path in /run/host instead of /run/user/$uid. + When deploying, always make /etc/resolve.conf a symlink into the monitor dir. + Release 0.4.12.- Update to version 0.4.11: + install: Fix assertion on runtime install + Release 0.4.11- Update to version 0.4.10: + Fix some g_propagate_error typos + builder: Avoid reusing set GError + Make sure we export files during install + Updated for release- Update to version 0.4.9: + install: Only set current for apps, not for runtimes + builder: Add shell source + helper: Make ~/.local/share/xdg-app writable again (if you have homedir access) + builder: Use non-parallel-make option instead of looking at .NONPARALLEL + Add xdg-app info command + builder: Store exact sdk commit id in the build cache and manifest + lib: Fix crash during uninstall + install-app: Actually look for apps, not runtimes + common: Always resolve active symlink when looking up deploy dir + Add app-path to the xdg-app-info in the sandbox + app-utils: typo + Don't export app-info files + builder: Use predictable names for build dirs + Make arches canonical + Bump version to 0.4.9- Update to version 0.4.8: + update-repo: Escape text when writing xml + docs: Fix gtk-doc documentation + helper: Make user namespace support vs setuid a runtime, not build-time option + Require some way to set cgroup for apps (currently systemd - -user) + Avoid gtk-doc warnings: multiple ID for constraint linkend + Complete documentation for XdgAppInstallation + Document the structs in libxdg-app + Fix some misc. gtk-doc warnings + lib: Add some missing docs + lib: Fix up doc details + Make xauth use optional + Finish the optional xauth work + Fix include order to build with older libsoup versions + helper: Update the error messages to not refer to - -disable-userns + utils: Fix nul termination of xdg_app_spawn output + builder: Skip checking out disabled submodules + builder: Style fixes + Build top-level directory before building documentation + Hide non-public symbols from libglnx and libxdgapp-common + Rename xdg-app-session.service to the recommended name + Add systemd user units corresponding to the D-Bus session services + .gitignore: ignore tests and their results + test-doc-portal: split out global setup/teardown into functions + test-doc-portal: skip all tests if no FUSE + Consistently call g_assert_no_error before other assertions + Move XDG_APP_SYSTEMDIR to /var/lib/xdg-app or similar + Support a proxy on the system bus similar to the one on the session bus + Disable gtkdoc-check by default for now + Distribute .service.in files in tarballs + Remove unset variable from EXTRA_DIST + Update tests' dependencies for commit 2f38ec65 + Release 0.4.8- Update to version 0.4.7: + libglnx: Update to get glib 2.44 build fix + lib: Change how listing installed refs work + lib: Return GPtrArray from xdg_app_remote_list_refs_sync + lib: Always use "branch" not "version" in API + apps: Use "branch", not "version" when talking about app branches + lib: get_current => get_is_current + lib: Move fetch_metadata_sync from RemoteRef to Remote + lib: Move app launching to XdgAppInstallation + lib: Move all sync operations from XdgAppRemote to XdgAppInstallation + lib: Make list_remotes return a GPtrArray + lib: Add xdg_app_ref_format_ref + lib: Add xdg_app_installation_list_installed_refs_for_update + common: Add xdg_app_strcmp0_ptr and use it in all g_ptr_array_sort calls + ls-remote: Support showing remote commit ids + list-*: Show active commit ids + app: Limit commit id output to 12 chars + app: Use space, not tab to delimit columns + app: Support --no-pull and --no-deploy in the install and update commands + common: Add xdg_app_dir_read_latest helper + lib: Expose latest_commit on installed app and let you use it + lib: Always initialize the repo on Installation creation + lib: Add cancellable to Installation constructors + apps: Make it more obvious that system repo is default + list-remotes: Default to list only system remotes + install-bundle: Make the repo title shorter + lib/app: Add support for repo priorities + builder: Add --disable-updates + XdgAppDir: Touch .changes file each time something changes + lib: Add xdg_app_installation_create_monitor + XdgAppDir: Remove leftover spew + build-finish: Add --no-exports + build-export: Add --runtime commit support + build-export: Look in the right keyfile group when exporting runtimes + add-remote: Fix typo in prio handling + add-remote: Fix typo in no-enumerate handling + build-export: FLAGS_GENERATE_SIZES when commiting + builder: Print all files removed by cleanup + builder: Use libelf to detect elf files + builder: Add support for separating out debuginfo + builder: Break out helpers for path matching + builder: Pass down keep-build-dirs via BuildContext + builder: Pass down global cleanups via BuildContext + builder: Match debuginfo files against regular cleanup patterns + builder: Clean up how the commit filters work + common: Move path_match_prefix to common + export: Support --exclude + builder: Create metadata.debuginfo if debug info exists + export: Allow custom source for "files" and "metadata" + run: Fix support for app extensions + builder: Add support for exporting with --repo=foo + export: Add docs for the new command line arguments + build-finish: Don't leave empty directories in the exports dir + helper: Print nicer error messages when user namespaces don't work. + run: Be more flexible with --runtime option, and add - -runtime-version + helper: Add missing arguments to usage output + helper: Allow specifying initial cwd + build: Add --bind-mount and --build-dir arguments + builder: Run builds in /run/build/$modulename + helper: Align help output + builder: Add option to enable ccache use in build + builder: Pass --body, --subject and --gpg-sign to build-export + builder: Don't break if ccache not enabled. + builder: Add some more spew when exporting + builder: Fix handling of builddir + install: Fix printing of NULL in already-installed error message + builder: Fix up cleanup matching + builder: Add support for rename-appdata-file option + build-finish: Export appdata files + builder: Change the way the cache is indexed + xdg-app: Deprecate install/update/uninstall-app/runtime + xdg-app: Update the command names and make nicer usage output + docs: Update for the new command names + Merge list-apps and list-runtimes into single list command + remote-ls: Regularize --runtime and --app user + completion: Update to the new cli commands + builder: Also apply cleanup to changes in usr + XdgAppDir: Add helper to fetch the size info for a commit + lib: xdg_app_installation_fetch_remote_size_sync + builder: Add some spew when downloading files + Better handling of the title in the summary + common: Add XdgAppTempDir which cleans up temporary directories + build-repo-update: Update appdata branch using appdata-builder + xdg_app_installation_list_remote_refs_sync: Don't crash on weird refs + build-update-repo: Add --appdata update option + XdgAppDir: Document some args to xdg_app_dir_fetch_sizes + lib: Add xdg_app_installation_update_appdata_sync + builder: Don't delete the APPDIR directory + docs: Add missing full stops in xdg-app-builder manpage + cache: Remove target directory before checking out cache + build-export: Add --include option + builder: Correctly handling non-existing app dir when applying cache + builder: Allow building runtime sdks (based on existing sdk) + Builder: Support commiting a platform + builder: Fix random crash due to uninitialized memory + cache: Don't fail to create cache if parent dir is not created + The plural of appdata is appstream + Add support to gpg sign summaries and appstream + builder: Handle modules with invalid refname characters in the cache + override: Fix error if override file doesn't already exist + build-update-repo: Add --prune and --prune-depth options + override: Fix warning + Remove unused variables + Fix possible read of uninitialized variable + builder: Fix error with va_start use + builder: Remove leftover debug spew + lib: Add getter for installed size on InstalledRef + lib: Add xdg_app_remote_get_appstream_dir + build-finish: Fix exports + lib: update_appstream - work around main context issue + update-appstream: Don't fail badly if remote has not appstream branch + lib: Allow passing NULL for remote name in update_appstream + appstream: Don't try to remove old appstream if it doesn't exist + Revert "lib: Allow passing NULL for remote name in update_appstream" + builder: Put debuginfo in the right place for runtimes + common: Add xdg_app_list_extensions util + run: Use the new xdg_app_list_extensions helper + build-init: Add --sdk-extension + builder: Support sdk-extensions + builder: Add platform-extensions + appstream: Add timestamp which is updated each time the appstream is pulled + lib: Add xdg_app_ref_parse + build-finish: Export app-info, not appdata + build-update-repo: Update the appstream using a GMarkup parser on the app-info files + utils: Extract the xml helpers + build: When using a writable /usr, don't use runtime extensions + xdg-app-utils: Add autocleanup for GZlib* + common: Add xdg_app_cp_a + build-init: Don't copy uid/gid when initializing a writable sdk + common: fix handling of no_chown in xdg_app_cp_a + build-init: Also use the new cp_a for sdk extensions + build-export: Never export files you can't read + builder: Add some spew before build-init + builder: Add spew when commiting to cache + XdgAppDir: Make sure we always constole end status lines that we start + dir: Properly finish OstreeAsyncProgress objects + lib: Properly finishe OstreeAsyncProgress objects + update: Make both branch and name optional + Move the GZlib* autoptr backport to libglnx + builder: support using appstream-compose to create appstream files + Always build libxmlapp + update-appstream: Fix crash in case there are no 128x128 icons + Update NEWS for release + Bump version to 0.4.7 - Add libelf-devel BuildRequires: new dependency. - Split out new packages: libxdg-app0, typelib-1_0-XdgApp-1_0 and a -devel package.- Update to version 0.4.6: + utils: Add xdg_app_supports_bundles + add build-bundle command + Add install-bundle command + Add completion for bundle ops + Drop dump-runtime command for now + Always make it possible to talk to the built in portals + Add xdg-app.pc file with variable for interfaces_dir + lib: Export xdg_app_context_set_session_bus_policy + deploy: Explicitly pull from the origin + Add autoptr cleanup backport for SoupUri + Handle PWD env var correctly when spawning apps/builds + build: Set fs access before applying args so you can override it + Add xdg-app-builder + builder: Add --build-only argument + xdg-app-builder: Update docs + Correct license, we're LGPL 2+, not 3+ + Remove unused helper function + xdg-app run: Fix support for --filesystem=~/dir + Support defining read-only filesystem access + portals: Only give blanket access to session-*.scope systemd cgroup + Create xdg-app-info file in user runtime dir with effective state + Add standard errors needed for portal + Rename lib/ to common/ in preparation for public xdg-app library + builder: Add support for cmake and forced builddir + builder: Add more headers around the spew for each new module + builder: builddir != srcdir was broken becasue we never created the buildir + builder: Fix typo in cmake support + Remove leftover semicolon + builder: Add submodule support for git sources + builder: Add post-install script support + builder: Add docs for post-install + Add script source type + builder: Support building from a subdirectory of the sources + Remove stray semicolons + xdg-app-utils: Correct SoupUri -> SoupURI typo. + builder: Build with "make", not "make all" + Update libglnx for new backports + Fix some warnings + builder: Fix build with g_autoptr backports + builder: Consider the build_option when checksumming + builder: Add support for copy-icon option + builder: Error out if rename_error is set but not found + builder: Don't use ":" in uri-as-filename + Docs: Fix some tiny typos + document portal: Add AddNamed method for host-side use + builder: Merge spawn helpers to single base helper + ls-remote: Remove unnecessary code + Initial version of libxdg-app + build: Fix include path for builddir != srcdir + build: Switch to olddir after autoreconf + builder: Be a bit more verbose when pulling VCS + builder: Prune old branches when updating mirror + Add introspection check + XdgAppDir: Add some helpers for handling remotes + list/ls-remotes: Use the new remote helpers + lib: Use the new remote helpers + Add introspection support to libxdg-app + Add xdg_app_dir_fetch_remote_title and remote old custom summary fetcher + Annotate transfer rules for ambiguous return values + Add no-enumerate flag to remote and set if for bundle origin remotes + lib: Make getters for XdgAppRemote return copies of strings for options + helper: Allow exec on the tmpfs. + lib: Add XdgAppRemoteRef subclass + Generate the API reference for libxdg-app + Add XdgAppRemoteRef do docs + XdgAppDeploy: Fix wrong types in finalizer + common: Move typedef to separate header to avoid circular deps + Remove unused variable + Move most of builtins-run to xdg_app_run_app helper + common: Clean up xdg_app_run_app() + helper: Mount dconf run dir writable, as dconf needs this. + xdg_app_run_app: Handle error == NULL + lib: Add xdg_app_installed_ref_launch() + lib: Add remote_name to XdgAppRemoteRef + lib: Rename xdg_app_remote_list_refs to xdg_app_remote_list_refs_sync + lib: Add some more debug spew to test-lib + lib: xdg_app_remote_fetch_ref_sync + lib: Always load installed ref metadata each time + lib: Add XdgAppDir to RemoteRef private + lib: Fix declaration of xdg_app_installed_ref_load_metadata + lib: Add xdg_app_remote_ref_fetch_metadata_sync helper + lib: Minor indentation cleanups + lib: Add xdg_app_installation_load_app_overrides() + common: Make it explicit that XdgAppError are portal errors + builder: Allow git uris to be relative to the base directory + common: Make XdgAppDir soup session initilization threadsafe + builder: Make the builder manifest objects serializable to json + builder: Break out download_uri helper function in SourceFile + builder: Allow optionally specifying remote file sources + builder: Use SoupRequest to simplify download helpers + builder: Support data: uri for files + builder: Support specifying revision in bzr sources + builder: Support specifying commit ids as git branches + Builder: Add a resolved version of the manifest to the built app + builder: Add --keep-build-dirs option + builder: Remove accidental leftover spew + builder: After fetching the mirrored git repo, set back the right origin + completion: Fix completion of apps/runtimes in a remote + completion: Fix completion for xdg-app run + builder: Fix build with old glib + lib: Fix build with older glib + builder: Fix typo in patch applying + lib: Better fix for old glib + app: Fix warning if building with --disable-userns + lib: Fix compiler warning in test app + common: Fix compiler warning when built with --disable-userns + XdgAppDir: Add set_origin helper function + Bump libglnx to latest version + lib: Add xdg_app_installation_install + app: Clean up leftover removes after updates too + lib: Add xdg_app_installation_update + Fix unused variable warnings + helper: Properly unescape strings + lib: Add xdg_app_dir_undeploy_all and xdg_app_dir_remove_ref helpers + common: Add xdg_app_compose_ref helper + Use xdg_app_compose_ref helper + lib: Add xdg_app_installation_uninstall + common: Add and use xdg_app_dir_deploy_update() + lib: Add custom GError codes + lib: Use the new installed/not-installed custom GErrors + Add lock file for each xdg-app dir. + builder: Allow specifying custom prefix + build-init: Allow writable sdk + builder: Support writable-sdk option + builder: Don't fsync on cache checkouts + builder: Store the cache in BARE_USER mode + lib: Fix return value type warnings + Bump version to 0.4.6 + Add missing EXTRA_DIST to pass distcheck + builder: Add cleanup-command property + Add --enable-libxdgapp configure flag and disable lib by default + Update NEWS for 0.4.6 - Add gobject-introspection-devel and pkgconfig(json-glib-1.0) BuildRequires: new dependencies.- Update to version 0.4.5: + build-export: Add support for signing build + docs: Fix whitespace issues + helper: Correctly zero terminate symlink targets + helper: Also copy extra symlinks from / + Always regenerate summary after export-build + document-portal: Fix warning + uninstall: Don't fail if there is no origin + utils: Add xdg_app_decompose_ref() + Always remove all leftover app/runtime traces on uninstall + Correct capitalization on dbus interface filename + Install dbus introspection files + Move dbus invocation peer app detection to lib/ + build-export: add human readable format to "Content Bytes Written" + helper: give xdg-app process access to /dev/ptmx + helper: match whitespace to other options + helper: unblock SIGCHILD before execvp() of child + Create custom /etc/passwd and /etc/group with minimal content + Update to 0.4.5- Update to version 0.4.4: + build: Fix srcdir != builddir from git + build-export: Strip out uid/gid and xattrs + fuse: Disable entry cache to work around race condition + helper: Handle existing mounts with escaped characters + Propagate Xauthority details to the sandbox if X11 is enabled - Add pkgconfig(xau) to BuildRequires.- Update to version 0.4.3: + Accept -d as --show-details in all commands that support it + Fix regression is dbus proxy + utils: Add xdg_app_fail + Add --nofilesystem commandline arg + Make usage_error return FALSE + Add xdg-app dump-runtime command + cleanup: Remove trivial use of goto out + cleanup: Remove unused variables + cleanup: Simplify code using xdg_app_fail + Make sure we build against older ostree (without gpg import)- Update to version 0.4.2: + run: When creating /etc symlinks, don't make symlinks to symlinks + xdg-app build: Support extensions + run: Fix handling of which filesystems you can access + remove some unused code + run: Add /var/config and /var/data to sandbox + add-remote: Allow specifying local pathname instead of uri + Make seccomp optional + Update to libglnx for new autocleanup backports + Add xdg-app enter command + Move table printer to xdg-app-utils.c + list-remotes: Add support for listing both user and system remotes + list-apps/runtimes: User table printer + bash_completion: Properly list apps when completing "run"- Own %{_datadir}/dbus-1 and subfolder for openSUSE Tumbleweed.- Update to version 0.4.1: + run: Allow perf and ptrace in debug and build mode. + Mount nvidia device nodes in sandbox if dri allowed + tests: Use check_PROGRAMS as the primary + fuse: Supply mode when creating files + Support version= in extension metadata + Update NEWS and version to 0.4.1- Update to version 0.4.0: + Import xdg-document-portal from github repo + Add GetMountPoint method for document portal + Automatically start and mount document portal in sandbox + document-portal: *always* use the by-app location + Don't list empty names in opendir + Change dbus name of session helper to org.freedesktop.XdgApp + Rename dbus file to org.freedesktop.XdgApp + Move gvdb to lib/ + gvdb: Add gvdb_table_get_content + Initial version of XdgAppDb + Initial tests of the db + Add XdgAppError + Initial version of permission store + Make document portal use the new permission store + Switch document portal to use strings for document ids + Document portal: Store paths, not uris + Drop the xdp specific errors and use the xdg-app ones + Remove ununsed variables reported by clang + dbus-proxy: Fix flags arg passed to g_socket_receive_message + dbus-proxy: Fix incorrect check of name policy + dbus-proxy: Avoid clang warning + Fix type of return + Fix error check of policy parsing + Fix const marking of string arrays. + utils: Add AUTOLOCK macro + autogen: Fix git submodules + Update libglnx, use its copy of backports + Use g_auto(GStrv) instead of glnx_strfreev + helper: Add perf and ptrace to seccomp blacklist + Markup AUTOLOCK with unused to avoid warnings + fuse: Make filesystem multithreaded + Add xdg_app_mkstempat + Store and verify parent dir dev/ino and pass O_PATH fds + Add xdg-app export-file to export files with the document portal + Add debug output for release + fuse: Always open files with O_NOFOLLOW + document-portals: Support unique documents + document-portal: Use xdg_app_is_valid_name() to validate app names + export-files: Allow specifying app permissions + document-portal: Actually respect WRITE permissions + Add check-valgrind target + db: Fix leak + export-file: Fix leak + Add minimal document portal tests + fuse: Unmount previous fuse instance if ENOTCONN + fuse: Add daemonizing switch + test-doc-portal: Launch the portal manually + fuse: Properly invalidate inodes and entries + fuse: Raise entry cache times now that we invalidate + fuse: Add some more debug spew + document-portal: Allow dbus owner replacing + document portal: Move locking explicitly into portal handlers + export-file: Print the full document pathname + document portal: Correctly handle recursive documents + fuse: Drop DOC_DIR_INO_CLASS + test-doc-portal: Fix unique boolean arg + fuse: Add some more debug spew + test-doc-portal: Work around GTestDbus env unsetting + test-doc-portal: Add recursive file export test + XdgAppContext: Properly handle masking things from parent context + run: Correctly report errors talking to document portal + document portal: Fix crashes when dbus activated + run: Never propagate DISPLAY if X socket not requested + run: Read per-app override metadata file + build-finish: Don't export hidden or backup files + XdgAppContext: Always initialize bitfields + run: Support system overrides as well as per-user + create dirs with 755, not 777 + Add new override builtin to override app permissions + lib: Handle libsoup now having built-in autocleanup support + add modify-remote command + list-remotes: Add more details to remotes list + Fix unused label warning + Add XdgAppChainInputStream based on ostree version + add/modify-remote: Support importing trusted gpg keys + list-remotes: Separate columns with tab + docs: Update remote related docs + list-remotes: Use --show-details instead of --details + Rename repo-contents to ls-remote + Update docs for new/changes interface + bash completion: Update to match the lastest options + bump version to 0.4.0 + Updated NEWS for release + document portal: Add support for transient documents + Fix distcheck issues - Drop 0001-Finish-switch-to-glibc-s-xattr.patch: fixed upstream. - Add pkgconfig(fuse) BuildRequires: new dependency.- Update to version 0.3.6: + helper: Fix typo in the socket-family blacklist. + run: Make users fonts appear in /run/host/user-fonts. + helper: Disable socket filters on x86. + Write user-dirs.dirs under app's XDG_CONFIG_HOME. + helper: Mount extra dirs/files only after all other mounts are up. + helper: Add all possible architectures to seccomp filter. + Restructure directories and build. + Add NEWS file. + If home is accessible, make user-dirs.dir visible in custom config dir. + Bump version to 0.3.6.- Update to version 0.3.5: + update: Don't remove existing deployment if there was no updates + Bump version to 0.3.2 + helper: Keep any existing old mount flags when remounting + helper: Remove noremount hack now that we keep old mount flags + helper: No need for a tmpfs on /dev these days + configure: Add checks for docbook xsl/dtd + Bump version to 0.3.3 + Avoid unnecessary escapes in desktop file exports + Bump version to 0.3.4 + xdg-app.sh: /usr/local/share is also in the default XDG_DATA_DIRS + Add xdg-app.env file for gdm + profile: Don't override pre-existing XDG_DATA_DIRS env vars + Bump version to 0.3.5- Update to version 0.3.1: + helper: Clean up launched command line + Bump version to 0.3.1- Update to version 0.3+git.20150602.d781e27: + Add a README + Make symlinks lib64 -> usr/lib64, etc if those exist in the runtime + Fix debug message format string + dbus proxy in progress + Parse dbus headers + Add some minimal policy on send/receive + Flesh out filtering + DBusProxy: Add non-filtering mode + Add wildcard policies + Better handling of fd passing + dbus-proxy: Add some test policy + Break out dbus proxy implementation to separate file + Make xdg-dbus-proxy talk command line args and install it + Only print headers when logging + Allow runtime and apps to override environment variables + Don't clear the [Vars] group in build-finish command and improve error reporting + Ignore errors in add_env_overrides() + Actually unset the env variable when the value is empty + Report error when --var option is missing '=' + Close any unexpectedly inherited fds in helper monitor and init. + xdg-dbus-proxy: Add support for syncing via fd + Fix path generation when recursively exporting a directory + xdg-app-helper: Add -S fd support + xdg-app run: use a dbus proxy if needed + Clean up filtering and allow all messages from bus to client + xdg-app-proxy: Only allow replies from the bus that we requested + xdg-app-proxy: Only allow pending replies from client + xdg-app-proxy: Large rewrite of docs comment + xdg-app-proxy: Don't filter unicast signals + proxy: Don't forward method returns and errors with no reply_serial + proxy: Ensure that we SEE from peers we've gotten messages from + proxy: unlink socket on exit + proxy: Free some members on finalize + proxy: Send initial AddMatch and GetNameOwner to handle policy + proxy: Remove unneeded code for old name tracking + Update docs wrt new ownership tracking code. + proxy: Fully support policies for wildcarded names + proxy: Update docs + Some typo fixes + Add missing space + proxy: Fix double-free of socket control messages + XdgAppDir: Add XdgAppDeploy helper object + Add xdg_app_find_deploy_for_ref + builtins-run: Use XdgAppDeploy + Move setting of env vars from helper to launcher + build: Use an strv for envp instead of a GPtrArray + Add xdg_app_run_apply_env_vars() helper + build: Apply runtime env vars + builtin-run: Switch over to same env helpers + More special casing of LD_LIBRARY_PATH + Support filtering of session bus + metadata: Rename [Vars] to [Environment Vars] + build-init: Don't fail if /var/run already exists + xdg-app build: Bind mount host resolv.conf during builds + Only warn if removing old commits fail + Bump version to 0.2 + Fix a typo + Fix build with old glib + helper: Bind mount /sys subset + Add a simple profile.d snippet for XDG_DATA_DIRS + proxy: Minor cleanup for first byte case + proxy: Properly detect authentication end + proxy: Always read all incomming socket messages on each mainloop callback + proxy: Always send all possible queued messages in main callback + build: Fix srcdir != builddir from git + Bump version to 0.2.1 + Change /self to /app + Add new XdgAppContext helper object + Convert all builtins to the new metadata/arg formats using XdgAppContext + Make extra_dirs and lock_dirs dynammic + helper: Add support for read/write extra dirs + Add support for persistent homedirectory dirs + helper: If old CWD is not mapped, use $HOME + helper: Add support for moving files into sandbox + Context: Finish support for filesystems + run: Remove hardcoded GI_TYPELIB_PATH + helper: Remove backwars compat /self symlink + Update docs for new run command line options + helper: Fix errors caused by create_file() return value change + build: Always allow host fs access + build: Remove duplicated helper arguments + Bump version to 0.3.0 + run: Fix typo that broke env var support + helper: Only call get[ug]id() once at the start + helper: Drop setuid and use user namespaces + helper: Minor cleanup of uid/gid handling + helper: Optionally add back setuid support + Add xdg_app_dir_get_origin() helper + Use xdg_app_dir_get_origin helper + Show source repo when listing apps and runtimes + Show version when listing apps and runtimes + Make /var/cache persistent (in app-data cache dir) + helper: Fix thinko due to create_file() return type change + helper: Make all helper functions static + Use seccomp to limit allowed syscalls + helper: Make ~/.local/share/xdg-app read-only in sandbox + helper: Don't fail if ~/.local/share/xdg-app does not exist + run: If session helper not available, bind-mount /etc/resolv.conf - Add pkgconfig(libseccomp) BuildRequires: new dependency.- Add ostree Requires: xdg-app can't start without its presence.- Update to version 0.1+git.20150407.fc8db2b: + Add COPYING to reflect license headers + Pass name into build-init and store in metadata + build-finish: Only export files with app-id prefix + Switch to using glibc xattrs. + Remove dead code in xdg-app-builtins-build-finish.c. + Remove dead code xdg-app-builtins-build-init.c. + Remove dead code xdg-app-dir.c. + xdg-app-builtins-list.c: Cleanup comma separator code - Add 0001-Finish-switch-to-glibc-s-xattr.patch: complete port of libgnx to xattr.- Update to version 0.0.1~20150323: + Mount system fonts in /run/host/fonts + deploy: Split the file rewriting and prefix checkout out from the exporting + Move update_exports out of deploy/undeploy + Remove old code handling per-app data + Add xdg_app_dir_list_refs[_for_name] helpers + builtins-list: Use the new helper to list refs + uninstal: Fix the cleanup of empty dirs + Track which branch of an app is current + Add make-app-current + Make sure we initialize variables that auto-cleanup + xdg-app-dir: Move exports to update_exports + Import libglnx + Convert to g_autoptr + Use cleanup macros from libglnx + Switch to GLnxDirFd + Use glnx_set_error_from_errno + Use g_steal_pointer + Check for libattr header + fixup g_steal_pointer use + Fix dist + Require ostree 2015.3 + helper: Manually apply bind flags recursively + Bump version to 0.1 + Fix build on older glib + Add copyright headers- Update to version 0.0.1~20150305: + Fix warning in add-remote if no summary. + Look for libcap pkg-config file for cflags to ensure we have the headers. + Revert "Look for libcap pkg-config file for cflags to ensure we have the headers". + Check for sys/capability.h via AC_CHECK_HEADER instead. + Run each app in a custom systemd user scope (if available). + xdg-app-helper: Flesh out usage output. + xdg-app-helper: Sort the command line parsing. + Mount /run/media if mount-host-fs. + Add metadata option to limit DRI access.- Initial package./bin/sh/bin/sh/bin/sh/bin/shxdg-apparmbuild01 1634718006  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnocsdadeenesglhrhuidplptrorusksvtrukzh1.10.5-lp152.3.9.11.10.5-lp152.3.9.11.10.5-lp152.3.9.11.10.51.10.5     !"#$%&'()*********************************************+++++,-.flatpakremotes.dflatpak.shflatpakflatpak-oci-authenticatorflatpak-portalflatpak-session-helperflatpak-system-helperflatpak-validate-iconrevokefs-fuse60-flatpak-system-onlyflatpak-system-helper.serviceuser-environment-generators60-flatpakflatpak-oci-authenticator.serviceflatpak-portal.serviceflatpak-session-helper.servicercflatpak-system-helperflatpakdbus-1interfacesorg.freedesktop.Flatpak.Authenticator.xmlorg.freedesktop.Flatpak.xmlorg.freedesktop.portal.Flatpak.xmlservicesorg.flatpak.Authenticator.Oci.serviceorg.freedesktop.Flatpak.serviceorg.freedesktop.portal.Flatpak.serviceorg.freedesktop.Flatpak.SystemHelper.serviceorg.freedesktop.Flatpak.SystemHelper.conffishvendor_completions.dflatpak.fishflatpaktriggersdesktop-database.triggergtk-icon-cache.triggermime-database.triggerflatpakCOPYINGflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak.moflatpak-build-bundle.1.gzflatpak-build-commit-from.1.gzflatpak-build-export.1.gzflatpak-build-finish.1.gzflatpak-build-import-bundle.1.gzflatpak-build-init.1.gzflatpak-build-sign.1.gzflatpak-build-update-repo.1.gzflatpak-build.1.gzflatpak-config.1.gzflatpak-create-usb.1.gzflatpak-document-export.1.gzflatpak-document-info.1.gzflatpak-document-unexport.1.gzflatpak-documents.1.gzflatpak-enter.1.gzflatpak-history.1.gzflatpak-info.1.gzflatpak-install.1.gzflatpak-kill.1.gzflatpak-list.1.gzflatpak-make-current.1.gzflatpak-mask.1.gzflatpak-override.1.gzflatpak-permission-remove.1.gzflatpak-permission-reset.1.gzflatpak-permission-set.1.gzflatpak-permission-show.1.gzflatpak-permissions.1.gzflatpak-pin.1.gzflatpak-ps.1.gzflatpak-remote-add.1.gzflatpak-remote-delete.1.gzflatpak-remote-info.1.gzflatpak-remote-ls.1.gzflatpak-remote-modify.1.gzflatpak-remotes.1.gzflatpak-repair.1.gzflatpak-repo.1.gzflatpak-run.1.gzflatpak-search.1.gzflatpak-spawn.1.gzflatpak-uninstall.1.gzflatpak-update.1.gzflatpak.1.gzflatpak-flatpakref.5.gzflatpak-flatpakrepo.5.gzflatpak-installation.5.gzflatpak-metadata.5.gzflatpak-remote.5.gzorg.freedesktop.Flatpak.policy60-org.freedesktop.Flatpak.rulesflatpak/etc//etc/flatpak//etc/profile.d//usr/bin//usr/lib//usr/lib/systemd/system-environment-generators//usr/lib/systemd/system//usr/lib/systemd//usr/lib/systemd/user-environment-generators//usr/lib/systemd/user//usr/sbin//usr/share/bash-completion/completions//usr/share//usr/share/dbus-1//usr/share/dbus-1/interfaces//usr/share/dbus-1/services//usr/share/dbus-1/system-services//usr/share/dbus-1/system.d//usr/share/fish//usr/share/fish/vendor_completions.d//usr/share/flatpak//usr/share/flatpak/triggers//usr/share/licenses//usr/share/licenses/flatpak//usr/share/locale/cs/LC_MESSAGES//usr/share/locale/da/LC_MESSAGES//usr/share/locale/de/LC_MESSAGES//usr/share/locale/en_GB/LC_MESSAGES//usr/share/locale/es/LC_MESSAGES//usr/share/locale/gl/LC_MESSAGES//usr/share/locale/hr/LC_MESSAGES//usr/share/locale/hu/LC_MESSAGES//usr/share/locale/id/LC_MESSAGES//usr/share/locale/pl/LC_MESSAGES//usr/share/locale/pt_BR/LC_MESSAGES//usr/share/locale/ro/LC_MESSAGES//usr/share/locale/ru/LC_MESSAGES//usr/share/locale/sk/LC_MESSAGES//usr/share/locale/sv/LC_MESSAGES//usr/share/locale/tr/LC_MESSAGES//usr/share/locale/uk/LC_MESSAGES//usr/share/locale/zh_TW/LC_MESSAGES//usr/share/man/man1//usr/share/man/man5//usr/share/polkit-1/actions//usr/share/polkit-1/rules.d//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:17070/openSUSE_Leap_15.2_Update_ports/b70d24000311a4441539ab8ff39c8f97-flatpak.openSUSE_Leap_15.2_Updatedrpmxz5armv7hl-suse-linux                 directoryASCII textELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, BuildID[sha1]=251f1bbdf68f0cdf8812ef9a6265e58227f31a32, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, BuildID[sha1]=63cd6d1a4a632dc9623c69cf70ec5b364e5b5dbc, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, BuildID[sha1]=1a95a6b7ce4a6760f8625e552e0206338b8ebfaa, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, BuildID[sha1]=af2380ac5fd7be591292dd4f78905d60171fa0b9, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, BuildID[sha1]=f02c105cf2d6c40816422d9d9ea569aa8706a1ce, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, BuildID[sha1]=10dc1465da4e4271469185143f50243c00dc5161, for GNU/Linux 3.2.0, strippedELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-armhf.so.3, BuildID[sha1]=be7f1f5a65faf974d0e6b6e47cc54f22e18c936b, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executableexported SGML document, ASCII textXML 1.0 document, ASCII texttroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)XML 1.0 document, UTF-8 Unicode text3a3../ RR>R=R7R"R!R;RR+R3R)R2R-R%R*R/R,R0R'R&R.R(R1RR RRRRRR R R?RR R#R8R$R4R5R9R:R RRR RRRRRR*R)R2R3R,R(R+R'R%R1R/R&R0R R?RR R#R8R$R9R:R RR*R)R2R3R,R(R+R'R%R1R/R&R0RR RRRRRR R?RR R#R8R$R9R:R RRR RRRRRR*R)R2R3R,R(R+R'R%R1R/R&R0R R?RR R#R8R$R5R9R:R RQjCµ2h) ju0̀֯YLyOe嘀Z#v `z; )_X'3#%x9Y WlWQ1%&D'fuŚ c=u0(D  % խ/+|׈+WWrpT.-cU(ݑ< وũ$6,7 'A?]+#?.y7M-_3]B ߶'CLjDuӑ t``sj$Nn_*DT5}XLlXҲ^1ElyegG?`NTp HK(y[ؘ*x+4?C} c~YƲH@ƺa)\\=ܯ`˛!!5&WWtQ%:MG63~BJ#(21i.RC|5 m DD4~~|65=tmZMXΨ ~g&x.x_wπt9ȭ$9w ".8Q0 ⼦~\hU;ID[Zj*eA9f3*hoKaL|JG}}E u5oս}?\vaSAŸ5y8"1C;X<C l0g1>V(+"DkpG*7J ?$Sq\a|h.gxAMM- x h}ġr*ؽy`K3 ʝ]EXG5THFX(W+f*FQkvFE(851hDTrgC+р2kkMG1epi<+$ii+WC"+>E1l33F.>BpJf4k;U5_Q82 ! iGe3KMp~mT󸉊춛BßwIƁLxϝN"ˉCclmozrI͔5\"|K0GomST0FEru{j$J ;aL[a8e|/:B1ӃpBa݌)f 6qU#v5ȷ2 ,ӍM\,|F2rߘt/Yf^JFF`ϡ-ك6Cj} BGPd8anW֭?|DL(ɫĝO)VxmO]hfr(1cAo XPrhZ?wX؋Y :ܙ& =ZNN`xLg`8mwb$ie1,R`4 Y1 _ƽ9P-% t}׿\mJe;.UkTO_;(yAN2h9E= _(t ד^IxቲҘ^}m:o.E<0)Y(ЃEw(ΛCECK4?` Dh toѶKj p͑x5k~rw7}s, !DƋ2$l 8yѿ(Ly>\[v^K R k32d\,t$/^{nǮMyINGc@sDEa%FvRߘuFU /&Q" =+&iH c,J,~Zdo`, 22"w-#n(lWR=N-xla&Ujgesv6p1\(D1+}yuNNH%,TW`0mGQH(cXQ)PB6xhp&M#R;^Y;U6_0ե"g_~ Kʓa7kD(:RJ~tD|[{}:Ξc+^&f!.xm {:$sv|CE8zzX梼+crN,a:J HTbrKuG;B(zQnz,7'}^lTJB왤IMv;Rߥ=KAg)RF+i0IV7|s&{TGnP:@U Eee,}ۿ &l%yQiT'd!u_ZU< \d,xrubb^q)Jg:s??%\EڈvArhø[4\ۅ,)CɝBXhMJSꊢ5V}@jUϖ8u-+*@ksucH$;zX@=f[~Aк۱8'bk̥po_w<#RI;\Y"hak<㺻.mG完Oi8w+K%9qQT)F`9!6Q>:ʼ1&Dm(\1GŁ*D0CqHE?? Q LGK5.10a:cGhGPI&=CVKKf~gI"uHdNʶЌ=J +!2JЦ9n>"4H|_c~\:-ƟQWCWWiUziE%ɢ-E[C]SQjj[rG3m]\hQҏ#Nru0cG+qDHe-;;VFŏsL˟.hBר, TR/X_/xJUZLyeS(@ ȹY/v\/`X=-هVj2hjsTeTa}8^e>1]Y R6kLvQ5BC@?@PtT6ﺷ8Ko5&<$Kcô[AX|` Dg]tr( dSDb~T4q3so i M}S!܂&lKB^d'qbb1?b&+T O-c~|CO:뢞 7[>bPx@t5pqTTrSn^V#Kvk(R ~m;K>K7U5!2Pք=trR/ $b R=ˆw ob`vӧpnaAp9K+*XI]'.G ^''4!A 0~&qJnVr4\jkosdn}lhޛR!"Z[(4vX My?ԍ4lj8ٌ5*Fqj~p]Pluʧ-tHvXL/IE܊`z ^p3>Df!_Ҍbe%t!3eNR}:y8Ћ7mq}Tp^ cN~vPmi7g1mV wʱ<8]>U~~f7O:K`6rgbaM;cwe ~INv@$l;+VpT G[Α!ȜF'](MA{m<@.G WRl,w-;P%~5 oR$,0KPҾ6Y/0>6{_ B/[iU2YLپLVpf{SXt%qqAZ">AFrP%[`ǒ6*_'$ _W*2R'S;,gfH%(4l/NzOӆmȻՖDS,ўK`kF/pirJbV㘚\aU2Hڑ}݃IfrsBv@o=.?9csՂj'#j3ݞM}J5 b_eG s0H27_*`^߼L4yBk]S>Vi#i9GlB/fY)`鏧?  u/˘M #~)/,0 ǽt4`]eGZcj˴]-FLE:C +F$SBR:X ؓtxMlҹ߼IBޜ07snHJ?\wNr3hl/_yX'xV(VgYq4x!ҦJM& !Ι$pS")RWk>)`99h+m-HQq]_@-P{vMlV]¶qR IIl Rsn"eS#w)fҕ xʀErsbR?''`=ÄQ`v=gtI5 y@;QC!5r^1PSzwcdlXa wލ[%:gTZr#}JW~?sB؅:G)MoW>}? ,B~:oN}iӄga7/g|9԰Xfafb:εU3ԠҢ-t;)D?;7F0=t Ÿ-ͧ?>z&+=l"\'-'z6#noQ}U}J+*04gC`Tns `_S]wlѣsy`KĖ]Ԗ;%jnX’dΣi5i򟌋MMEuyd*MI+z:!ގ5qp8cIݔrb\!!Mt9C)&Wñ)~oeylhf\}1 }f#t Qא`)JEiK`tW4m]f-FP$~Hp 67?@`I?u4pKs1^$u}I[|$fHbuBCyef wq]4"rڹeՠ_6@!^a8H1E n7&r^OМ7[Iw)U^5Aq|fo9*}?ӎaZ?9/$ΗAPSnpXw!V#t ؄)`rh9+Bf<<_Hena"\wU`2O4: E}FqR9/]YΠzh$Ɋ8JsJr vʧ뷠Wj; $,yewd%1Axڻ' b-¾cLw2ER:!M?y?;BN5fLJ*qe4Ι5n;Hj;1Wv)߻n_>Iq&+&`Czկ2Ӗ.J`kxyYjgls{k`f5U W# 8{"+TeF`_`>WXQ^ Hi!( ZD~^t Lӷ K'ڍ/}83mW<Ve*rkOT!'w"wx;l+%]/;VVQe%禎,H:f5yOD_fP]]M];-G|'08ЍCYRV+̿юX^JA\6rEZm /Eɀ\lDО  }mnCrO3"F^mAVTi0]JkJ78{D0*0k.}_mN!u -X>muD0ơarВL&C / ޯ{TD0{_i>?^fF10BBkǃ ?Eﺚcy"Q" ''{ җ_2&S;7ʒNRJZf- O5n|E3u݃Qa/hU"RnyyNdV I6QlSBklCZ~n5TƝտh]rxŹF8Qé] ;¾8͙ z1^a'Ӫtkg򹄂rߔ]b_Amx>$T$($ 0Nl{;򬺔\I 853WyUugnZ9l8eq [kf3{@A8Qct}:PySw}¡|l4"%Ɍ33y"*QDK@[3|c%g-?܋Sadpx̐8jNg?-2pzZrU cp,3S&ec#?>~;;BoRc'CgA4;lWJ# J 4ѽSo6$,swOAQM I<Od4_ߧnpob{MoQo9xA'Ȁ.ܪ{'C#ea"CFm> V" ԫ@{vHy.+F7Y@莤,_sPOD324a'$Xط}d Oʬ%'kL#K쉌H[4"Ke'[x%ݨmj{9U8t>EaVV.+̆&!W;{š^f86|n.$ס6)BcxS SYcvLz<>8.G8 D7]!4FHŻUgy3P\L4Ŧ\b9ckh ./ q($l\Xc/~ 1FOWЗМ =73Qk[09Oz6h(>:}k+q#F5l\6|$_P%HZd @Bz/$ȹ0R;67brrhD;OloNl=Oy+;jeZ*:^)o:QHgh-uvF~ŝ`rYd֩ YMg6%J|F4n'ߴ {$qt"vFڥ@v F|ҋQ]/SEaxCVy I3Gh;"9>6bxg}K;Z\TLp%3j A3Kgs"m܉ŭlMn{H% ɘ-J b2Dz6ud?EQ (40?n_u)l7IwoA7oYQJi?۝O#3P G LMKLԴ&Fژj&m/0yܸ`H̅)IǺWgncyzSo°DM+_74K{܁"ΦdrZڗah3-3Byne2eǘ[[\w>B;/X\_#0b;S+V4WqCs7Nнa#[7BLKLTSA{cb@f,7ru6#4~On,"\Aj G!c叒\ M7Sɾ*bǒboZr,۠ h ^kҭ"$z̆'.M+zd'd&)ZIi2mUSn崋1gJҍJɅwwUu+GfP{JFJa Q(?PsZN7H֢H8߳|c<7pǢ}`?~}Ei ͩb XzZ)ƅ #|k&VA0=<+IJ6 F9dÛF =ZLr{J6"q|~]Yfs 3ǽY*l:t2$v$YFĿ4{&N_8#6_zkgXg<)Q~ zBh&xw&CVVGb>"(D=pUܵue|Q> ykӔz XPHBa9EG~r~ڢ>Rx$*%{LM3H,8MkM{dGܪ":n?Ao׍@ɜBPV SCicn?lFFJ%Om)7 w5 ?EkR:ԁL qgqM.F|X,߄i ,[M"tz d9>7f 淛(/OB6Eᖢaqrs<9u7ӨT ,1DʾU8<7&+0R+e-pMzkIVv2nrI&ˁĈ~3Q}I?FۦENi>ޝ w#}~THFhik1@(XHH-N΃ЫpF^:h0gzs<>*ὁCBDϮX?^;{]I`0}|-;沰tBC=z_\@zj|.;\EO0cOԘiV,J?d+%کb1̂pPz5_ 'n$@5Yklfw:Oڱ>\QmAN*ծLE](g!V٬b"Iwḋ0YUxaGi֫(͒ye x:ܶjx;a"t*y'{)ѭ#|ц) \ `TPՙF zȄB4D}K ge JC{7Q64 Awp4ў }_t}ZO}a;Do1Y͉pú\W c)b`dmԽgqH^QXUZVPHW/qE3vI埚.9o n WCZoPm_$?M}ڤ+Po~A~j ֓Ls&l:&-,&zJ4dn'8FGv*,!{n:Jv{:2ھEo 7|tb:We{wa+ CJ {fؾ0܆F vA/ܟV(ݡWB  ݷ#rl۵o)4@]#)|,8;>c:9=}׳W(?_J1A5BjX a^NV)bĄS`=?QI@7' /+Կl)Ce4Υ9 /UnntmӀE(+Ҹ#hr4TVA<~Pa3ޭW-g:{p RjPM!{EK\&ZrK()io;-+>\#, R:tA8Ţ2IW]!`?IsEtucYqgm+HcR|XCw]{Qo)Bm4l(j%ō^2ycJ~d2`Ҟc,`)$MXt?DΥ}Viurb) j T{J>YK@\R-/Pa+v"H7z#<* YBcR$T$E; J}wkz܅tX!X2Fp0dH$w\QzBMc5rN-ʦhpK=@ dJ$E@aG4[tӾF@#nQ{aԪSerڧ+Îߴ[?hm+*] [6D=?͉pɻP>3B .xc*u=)L<[Cs ',$wf0>͒zq:i O* Z6ixHI{|~jg$1ui|}3hS7Y3qM0+w#-/%VuR!I %{ŇT9|L{Ю6xI,G'r,w)؊9ucl f"iofq+ ZE&~AǴ4\0_kv&@gJCH]MXWN ~.)7 eKG|TRUGp5Gt^c3l 8*Dۿ:Hf6i)1(*";3:mrtQxҰ(^0LLeS "&ޅusk&jҡ yǠq?pdUk/s]qVo9iPh47FIa># o-^PŦPrkT#Y2fD~5B3Ի=XMݱ1nKcE?i,:Z(ؑx ;-g~pixGkYK- oA)^pqamw7 YbAf JB r:[OtMh#h&JPjg*^c?00D\~q 1NI+_T&L뱅Àrylcp#}Lvi`e 5HqiC#F# dz, њg G{9 S1/*>_Bb@MmZ*\ Kr [R*!$sZ>6;+5ڵ, f6vq-lZ$|)o ^##:xp:>5 LPf )zX'`zh=õLv#8H- Ep{Ai=(>9UȹTmо7$̏{[7ޟ;g93<ҲOK@ԈT)fDJ-ŇpLH/+XdP'_}[d)) xh2`ɗ.NO2Y0.-$ehdAԛԢSR Ec?}z$ zaPdXL-d\/O+_E~ӫ͠;UB5@(6O iΩx-H-ׯ*F^~q4ϳU 51w &XXځ25긪e4 kSC%7 'R<8ht0!L**&+PyǍUٱ;kYL#٬w^>Ǽ^6R uھq7?m=ZeVLUI3VQ?j*ӂFSQq+dI!_v')^T׿.}e9څ%*q͖u_kZCΈqw؏FRϿ9k.; [[Ŵ T3MA` eM.Z 5>:#_*m&_l$LuidCWum(u 6kG?1_ezވ`q<|-2@D2 n=-C, 8J]T^JvH |4MX #`Fok]&8ءZ9CmhNL HNJ},q ~X{`'ُUq┏{zՋ^iY t?8vQX P\IAݧp0#߸9<Ƚ P8,L*9%ip'a,JZ }=W=<[!?܍n|,;"gB k>8XGرfgX6V=ni#+`U<׮Ekw0TC(,=d?9}D"5=> Xɀ$a;xȝ}y.ws&EMcSM[?Sڎt=Y, 4-?J[*(n 6em U@E'Ii1DPv&-;mZ`=hp?|zCٍS B{7)[qsBf,qYC$9Wh]%7…Ctbt` #i;›dK:Rsϕ '꣚Z 9p \xۿ,WLwѲ#تyWv &JrLd|Lh~[G@7FSs b?M k+rbb\&Stz͸qgЕADt1s~*X%yyۍɟh^yv;:} Z-1Qh6{b/ҟVBBS:ŀG=g@s5Df#gC8 di*&ũxC}㬖wF"RPoTӏJCJN.OJDDw.ΗBRe zM4sO @@/Ko*'H bݤ @d8ew)0iX6X{Ku؜GO&~n: {jevɭ674a-ȋh΂S(=(_*lsU>۪Cbx6ɳJ_S@qqk$ծ!2?zj7-2l FX%5pEoll EtPlKܖֻzx/T0duOT\0!⴦X}{+o\H: gdIRO,"bQU#Z,u}22ǜ]^J:n,e1AW*4d\z>3LeFXGY) #tw* وj/[2Z3=;g+jGĝ-3ԔTtH1\kL&o0(o7QԆIWz/vSRT< gr7 ±GWΡ@ݖ?y3mq`Sƣ D=RMy*l=dQ-s;MS*LTtMcb({K[Ή)v\g6_3֦ݏѹ<ؒs ^liPo!X`F0L9 A\"C>K !LJ8(_߄89!_/U| BHHTy㼽ˇzș0>tB_p,qnX1֐t2$iU}*{˽ōh}P @TW0 cstJwt~7t{^í<n--=&arVMH>wVu;1 Zr!Z)hX;gU O3@i!Wl (Gii X[pB_ULHyb}眭jkIv&kn?!%e,7KXU˲WCn-Q~d-,8큋@׶jP9F 9\3KM'WtG upVVqO`?Lg,o֎XWb>#Jmnrϱ66-UJY+i3B⏍ҟq<pPp+[y(`Lbh zҤrNcU\qmKn/"(}V5AWq ((ԙ83Cs"VHF iruȖkKfH0!1k[9b.udINEV (mYiϾyrtJRQK ǫY&CL-/ӶgN-9T,BɎ"~睏CæN d%`qIޜr )TsL5oƍ *桍fWN0;eQ{lhbm4Ny)KZvs}ǀv¡TxF\-IoOKѻhs uE9a&>6fZvgO^ǠQߜwGK糗ul/oad͖^yكK4ݥ-kz5rN *ޯXQx[B0=ue!օ5oleE.M9:l\14LiL9$@<\`)BS 3IzAT{qNkivj&Fpռzҫf5TsyfUFћH=p6JDV>sh s1&'Z3YG\L$-|np1(QZ ؼ|+,J(kGrNZ rK;փc@=`R,I Akɕ냁-Umϒ>-DnfGgHC$3sO(#36i@cS?)oVxv'Znc Q؋Yc3RՎUyjcoN)MwyZNھƒXgQqTmPK7Ja$B?!Q@|F}w|?>O0B撧z/LDII*L%z T#P>H7<.MX~Dh߅?H@]%:vnKKl/w?7 Z;kK_ rw:@:J"Qpj-R*v%rWHc_LbN0Yp?CtG9H׻sWPYqI.bL ʆ uif5Ս^2i/VJ,X.ҭGFb3Bpf'uF SFamt6bʡLz|Orjlr<"$vb{' u3ie? t[ic7?%JbbdX:z;Ed0=D[.UsaDE\tׇn^z;GS k[:kZa l#wh;ӅE [䢩nww@y#SJf=f>䃨2Bz-)Dd1!-vryPkQAws% );\J`ӷ+KZқ:u"`DGwl].M齔/3&8 ZL|9[G*sOI@T4U[/kH\zuHKz2/4zBJ'qe4C9vjƝvB uΚkX1nq.?ލ3xY`/- ze43N5Xq Ä"\.V+[{> Q~5&uK5D ه7-Ob9.hk&-nU %ijf ]MEqZu/"&SkΆA5LAu$^` "G -?3/z=,'Etw68D~zG/%wt::QoSRGnXTt+\6 e5綞*9%9q@l,3q,S 1|廻KAq3qiR-6G!7t,\Pxl<ھu;o0(]. {WNT:߾-3Cd󭌐n[b8LgdDPDV! .Y!a'x%d'OE*ZU@.Ss JP3YI)nYLg|[If橺' k*ZdqEU[?ۈL4?Q5\ePiQkFiHr]Ɣ͒ UI<` -LRGtH-1n- noEҪ3fEc4>}1s @st7+08jћ+fLO[!›YA>T3+_(gIj{iB'o׏(.-}[k-ZyM5,sXCE#O: 9@ kk:.*w%x/Ǟc(~M*iǐ,jg*/::tWn2Ն5YjlVQcT~pDdN/E ܭye~ruo+ؑa*ٚsM ;%TEN+% QuU')qsPJ_1n룍i%Ǎ8hHA@ПMh4qjxZE81D7`KX3Rߑj [{9:mt޾*{agss۸#`$&ύ'յ!YTN7ryx,@IZ, YDu&g:nghܪȑT"u%ל9 LG9_*xԕLHoxM>BϾh0gWcBZÃ1KwS91tV4>dllsZDEL>|ޮH8 VƼK>86يU%mD;Uym7ݏ9qa}WhSXn SRܚpnYbV 7f<eX^ z.,л^VTtVo Y,(,B5W S(8V kt}^o& *@TZƒ^'*ĺWAwJ^ 30z\"BK޿jISg V'`I޻AYh:'k(MBӼXwFT$ <},2RB;&Iߦ.sXD/)tpQ$v2*cٹk'@[}ԆPgXg|:V$@kNAl1h0} 'i M1aO7ZS WJan&Wv?H!w";lkw& :=N:4y`\#nINu,<`N.Šop8M[aT H3,U%IzRM :3DjnIRYgI@6wܑhУ >W%@ӆݿ-jZAOdb,7uEW"nhc K1}3%I@aE7j` (v%j&vj>DA؊7!Ra S`@YALP\/ 8sFu.m_ M2RNb▯pBO zFTB1gYA֦B uky}!gUm5Ěʍ W`Wq4ghE>ü"6oPLO d;]qkFXb@ >RX8]yz9]pNAx!` bq|GTǧ0v % Ĝ@@.;1NjF|\F ױ(r9n>d=&eg$Jg'"WT"BI7o\*g^ dv`\dWj،zWU/o 6;zM}Q¸̶5Qη6 0T_1•Å4 l-;c2 8֭t#{u5y ?Zqj=)Ab("7VW$S$y?y]BMerV/;i[#^ή\AƻL36;G ;,?%o ,$l!1Y$!Ddd2mfk~X 1KwI;\kKoDSp6"lq pnHÔ{AF4>mNN ASG>f}*uOH~4<"XxXhKk;3lgA=7IrRjיҵp$f>fc5m0_> 2oI-2"@PRp ?f ZJ^:T<*}< ꏼ5X.VΤ1DTg! `5~A( Ļcyf@XHdiV0O{J,l@g(I &¢a+}<:LV᳣qRP//OG(n֔6WթD (D9\pȌ2#g &G|/dj'q¬=d]ㄲшQ ١nnOB{Vt<|~Tʡ'=I:g}v{VQ{|v nmԬ"V"QN!G(&F<~F*w8T߁ď_ .B2NGpn6>]~*lȤYrg#r- 2cBC~;p>9p+f[;Bg~HJh2k1Px_z*z Z}Ыd쌲K2jL  M:yV9zzQ;39: $ifKؠqZJsi=VX** sV 9 .YhP'r+KrWžO-6u#I&>SSյ>ᡡ3v']@U1J5Xm#9=9WWE/R-?}Q ^JI٬)%[Lg. O uQѽq5x3TSqoE-5Ǭ-L)LCw’5vj!&WMe`kR,ǗgiMvY?L+I~Zr 8NoL}a!XKyvu~>:lztv^gTo/ټź=P.7,'C%5L 2,b}]У6Eq9zxړ%%]сԠ‰jul:Ki4-O V rz:+DCݰl9:681,Pl׭4o%he| wThl00C$w5[ yf; :";<ZB;NLN0 zmc_qe0\8#ݱ(}y$rmQJw[fԋ|9"|K O0뮷*k %֍sPtJ'~ՓQ"/LG577g@^&]Jズ!jBXʺII zeԯ.RX/t q+V܇򪬻vHh.dIn*@]gߵ5C~7 b\^*Yj XL ,O'٩E`Er_Nk?(,WE ]2욕Yj!;\(Ku8ѐpdh&'B+(4 #\*z}ByR\#~w<Y,sNN~ FεFP2%7J"P~n`Zw_G6.reVRgZ;ϻdD6ceV=LhFu~sv3bC&c'Gv}"uGb@7+<(V *m-;=ں51`M;y8HTǠG&۩46Av}q#d<.z998F1iIwg6iF"o W"kgh s-v xL ,ָB8Tw ?lc?)J,NH]qC}u×+," bJD6TxgVrfOvzCB'x=QUؤs FjܰFpêX5D m( .E5ڸVɻl;BlX-{xَ#?K8B!fK_m5P\2Z}C?Z?dWAu T`r<!x$G>pU'>icUJw6pl^xwep4~.5pSp);ƈ&~Ϫ=w3ULb tihk(JCl-/(\KF! ИN:O}vD'| kNdҼ,#]gYmXb WauSx\}Y[4[%T ;MA\ds Uà/:J rQ ѥ*>pj~ҸXX|G&ŒC )ᴁyJ;G!R{V+.olOC :H0[g IKi蝳vfE&w@ 75־XB&Ƃ.VʄP0M*euhRpsd~qM@HǑjx=h 8p.r6<^ v{dߧim9-b#(hlJ*Dͨ@I+O6/LIR=^XtRIR5!Ppce Ft! UEQj~'@jGG+̊h7PG}!Z*7z\Pi0Yg+Hla1CVkIMM U+ꦌ%|ʣm3$K:_}g*£!2WWnlo 4rc|0>=O 3Dq2Qk:>z0}ߧ.~NJ]GJ|~l@cX!W3f]36It&A<[oso). ;7+-R/~]3U1^,a,;pb# Y.'#^^ΎChFjv7fb-W݈*pZWtH6؂s;CTrvó?84XpƳT [y+'3Fe Z9__++^Ne5)5X FWc|{'ڼFVprl_${m4vFejSs#ъiZf]-#"}f k0_((pEf^.k9wR[$ބ!YvO{9qQSz!@<:% Ix>>3Wm ;z8 ڏK,mA8iЖ/S+*VهB}!:4| XZ3Fd0پO!Zo0u5֘`@&DdzL&UipmW؛+\i7_7_ipfز/+^rSsY s[EZ栗'$/Nd9L\LK%#&X[,tSԇ;49iW)0 *amU殦 L?/~&:U$.niTN&K=BIelh6DE oXbU󯼿&3߭H/7$xo Do?{)4ɨ>z(\ƕ݋}x^2Pg|VY Xx&/R&\vkC@:(>o\K*070qGݨ^A eLJˉ0,oUyi5;u)ޘ[VAq{0+Ra,`N}zOGt6R jPxM>uyKhm`"Cr9DѨej 7_07J! Ʈz圀im动<ʏIt;fDߺ폏K<ܰ}@39OTpCOajS"Ų09ߖ^k:W"a/JYzACAjEHvncMc)} Oujc|@lA,0C@*fEڬ|$! ů5c/\Vx&T*d>yR]7r| 3uyׂ镆N!BUzP 7G¡W̻; !TxV-tQA}2Ix}7}~F/x:煺|l;C8Uhebd|t;yV,Hž ;.)| WacIA-CN;%9s4% (WXB>E{ I[yvMF>˼<{vvu? #VӺ}PA#SISgŘ; _~&2Qt(>AB⎟iq> _ន9?hs?Zk*Möb.pi)=í'`?]#`;C4r|_va?,cH.IWvD["(FL{È.I*=ҏS}n ͋DʂjY7Y,d=}7){-]9G D>33=-;Jem+X~,Dz'ħ6el?a]չ^dk?髡/8k#1"f~wq)@ ]uAoϼHU*(DGh;76 =V}Qp˵yFz?ldU>tZ}=N +5am(R(\-p0SJ!%~u#_4flഓo  2feB*\ɈSEI{8AZey5Z㰱(U,NIk2XXSW@1MbMɾ\2gÖb'q{(52y}'ȋ#]TѐY7١]XZic*x0|.6wBkFʹ"T-9U81i}EѾ-#GYE*mS&Rcg=J~ؔ֯j$Z!Yo#^~N6OԔ=Mh"}nejYO3^Lc>{3-赍 Qxjd;Av>xsQepccj|\W\c [/z&H\,ړ֎WV#7uZ֭80+ϻmly8!gZ攐E' OF%(C'@d>_5Wf2R1[ ;hgzqr60A2T:6aF:|.EY"Τ4_p1~cŭ#SQB3qaI…P9Tк3U8ᥨQ>k? nKu3_j.<(*UxtNLC`L0}פP~Br  Z}n̨  uyqQKlC';TErW.ޣC+ tMH[a/OwX]A? pZ=/I&Qh(]aը^#s_(BQ{)`fe(D e[r }إbS%,ӫxm|cNrnE^ی1NyA[:o'Vb,h[}Eߧ<=݇-3QXq0{ f=BoiY&=NG孂 eN$8/8Vr,-q`Pl@{x\ػۗW.v ȇ 7pWĄh9 ](;< iks;eKʿ`@ W"BG$ksזl"ڿ[Ei2*]j,*"d;K>,kNVbDDۑ-v4Y(~aZ6crts[&QEFRT&IBΧXc["p<k",뾵E6l!ɮ3gA`t&=Kiwk*O* 1T y U@l풏-\*D53aJD"G~st0 .^?$gw:,=OW .>Da<1ڃ饾>F[kUqf@~P :&hLM͒Xqʺ< p0} R IAde/ve. ٚT[9R^q=ͮBMaAyLy x!Zq` &=%$0eAzݏQj לeE_kJ rۖG)3?{Bw] ZX٬pAԋo:[ba׎Tw0ɥ3AǽK9vK:2ޔ֏>NˍȊ Jd&(\FNY[S-b:C5>0V}8jAF48޲qo!(])>,8] $yY2c]$Cʳ>8P& G6jD %8ֻ{*6xQdң wy۳DS T ȰRRJ =m63B$F;~kh0VoB8>S7_'r0%.^yG&\x+,1Ci#K}QMW5LxJZݲe]E|Xq/>'ˮ&6>cü37G0ј𜦓"tIc|3x.\}֒D 5^K|s y+9{/ru 3t@o#R:fP$0(K!jdoI@40/[}2S:$Y NMp9]) ]9LqcR)݀K8y_Cz W+!:Z]`NX,-mEuBifAY9]\^q `v >Uz_=u^/@L|jتup\XXp{$Hu yTBKD/bHqн_ rzݜ"{27?;n^j .ۆ8d5`ӧR_=IPT{ On@l+.܏\zlٛ4ZI`N)L+%%&nmћ–oF'zb5hixDNFu L X ,[ ZuNr->cinζkDǘzݠͧ8*_]hgI+PeLHt3_Wm|/Оv6OXXElYcl};|B] )?bBP;* @`$ [ |yfťJtb[X=S[q[&JiSXShN씼qB%-bLF*2c_U%:g0NP\\ϒqYR[Oh4ˁ@6'$ "D=Ub%xT:aDt,W׳JuTl{#d.KuL6$d"[3TCFi@h~P.)Xq-?L2̣N$<aV,DفwBwRE "'"-RσB:7lgG"-IY&lhNS؂/ zUR+{/Mo_ 1`sGwH$KHH8b<}]Z`=$3X$׃zb%܂/Qڦl,MMs$w MѕTfu'$>d*b6ֽƆ/'P,G'x% P/rXfa{SY^ U;!V,2v& 㦵&y{\%΋Ҁp {w֍?+qOӟ Q_}8i40}I* !㯼*5$*ƈeB]dʆ )6o:ғ-K>GZ.?F%|Dvgw@gO4ͷ8T-_gHkr' f23!⵵"=?!V꼼B7T˪rƾR@Ĺ0:$ۨ0/cPuԕ=ofm$~"=,Hӽm7,/,>- e&o we_Τh g$HOHu'Q <+a63pT i.e"<j&5G:a-iƞ_&VaBg#kRz;`*Koyl̼Pow}sǤQ[>JCܨe192`(G3R¿lEB#؟zC %c2f&:۝X:Jwdv*eJs40M%)^ BB(Us6z/ȠJ&8CgeV0Tu[)\Ǭ0D]~),.\խ0]%7:q%ٶOLu|O= =մ dMiU{9f%+a> ġYVo_xa05|CQVX L!Q+nu(+T%{`'N"XľzM]+ {`OjGb'dCy&CTxln7#% B?\)VOkUimPvJY[?gS4iXn}4/kGA 75t %(G'WLmxݮDa[7 0}Z[~Z`XE3X̲7GI.r_Jnz?TIgk-&jq8 fcrTGP?@Zޯ?Fu9]M Lo;SwъƟ%%`+(e 2C!WG%(u<2+( fa6'B^kb)6 K33`,GcFitOz_89h6+Mз"oi!ZM ]bFyJ̃ X7g5&f & *[d2&w j%d!]b_"'I =GE5*~b :6ϽF`4m|lNEӳ;*[ qd#Ny~ZcV߱Rz31,d6jH߫/WIAl'uymnh+* [Lw rߋkT?\ o5--1JhRֲL,_e-XP~D؊нjq }jK"~»/ A,3gsTF|z ͗ت7njזyB=^%xըEΩNK[`6s~HPwLGÐTaJyoւ-'Z ZV,5olRǶ܀RpGɥ8e,ôSOD*.vzzhi!L3Ͼw: ,ۋZM dGK4P6)S%O#N` <p|UB& 0/Qh(2k:IWpj}J>!|d0<[<|?5[P0? R@ˏ&>%i5Yth3Q$e~T1hA:sNke˶ܗ%]ܒSy!uv ,~P rʷҎO+`6)ݾ3y|45C1 r:|7U3aòZOLH,mD7:R11&!nig8fuitjݙ$HT|?tpLۙ,܋kEc( Qc[H;bQ"NR"lULv;E:0#|g\,(nmKq[z]nCc1 K~}f{(-/&OZG,8Ft]~,nRIA$@ k_4-I"wN6X'l^Rz`9{֯ȭY N1dg氡QIn}c.Fh#ɰnމQA9 ڃ|Hj ~fSN TX Ŷ3*דeq]y^@EQN $-+¥v50>B_'!<]Fꝯw{WJ7XQ%:V04hjs|5lV}YbFx% RǃBjФe`*0'7 ?);^2\OAY+`l,xs@ 74 ]Yg#yt"` ϜJdwlѓhm7w]Vu{('Iyp r*Ҏ$Wh[*)2.ZG CNQL-''-4TV'>{ˍ>@ ^.-"./ep\ zqb6!Ú+d3NAKwIh0B=fs.Ko4kM**U~ڵLl>y'gߤ?fz[0䉞P؂'؞K [)Nq-z,?hX(Xd5L9\.tLwpֶQlhEhV*4@Y^7=`$Qa@ҭp:+ 1K+| ! zmx?0͊7 sh!@Ũ})˞9I^׵ߴe{Y٘* $K4iZ98شtW+s-Z?SG̾%:Plx0 Eowl2xY$uޜ _p :Iסpk<><PZL#rdMMC]](,|ewPe<|r-#mQѺ5b| MSo7^wO A3y2WiLӎ\7|g~3g[q ۶,TgH2,Qo;sCDMr,pl]y0jy C ڮP]Vb+%htjGlpZ4\GMk-'Z m. o?N*٫w+Gg浇s%ď>/2R2F̐JEzaR®G{Kޭe;U#*UU]9g8Εgf#JOb]bEN?8!kī$\+*y(~>o<oDdk /zs]q% [K+Wv)xev&gF+G 3$(.n/Ho Hf<pE '|>mEʅƣjѴYڪ7bu2d//k1YON$yiLo+ķxBVGop p@w, @:xK!6"n6L٣(֧xJpF!J'lz3MKR$i>\5qE!z[NRYF(CgXB͵aFG L-_ZC0b- (` =3j)тUz*zAcOO+oy\w7QɸEA f >҉fl}PO*B\҇,!Bk);0c+4>< L`>h4M}3X60 > ^*ge{Uȁr@HJtviDI& ;F mqMô= sap;Mñ1 t ܥGܧFMVCY/o\gs}- _n X4ĵ2]@ k"gKoj<<, dX:?GaSS{T[&kjQZb{5ZTAQfװpܞzk^ZCبGeakm~1(g=fBUSA3c$_ r]"(dP55XZb:"BTZ4U\O$H<oEt4_0 I4 S}XBg鄁VT_ivy|Ye CݦX`79%4xM65nH'"/F%mgL'ɂg?m~Wia~-T{ RʽO>`q~e z]m'm峘?>XpP /YrV"={K|㙙5rD}eX.,7ԠSv5}i֖bxHoWGAk,zx;)*-u4sxMVu PfWM 0j5>Ɗ=aKw)O_OZ.)[+ؙ+쾬_5i*Iw<]=Uݼ[i؁cBN>|f*q('Y4lc[k# JzFؓ#MFbcf|Wo8tTsSf}u :l˫uSN?RM"Dq oQ{=Dq#d䟵^ 9d~.$LƐ  h*Y됙7Q9q5tx?>ꤼQHTxѧu7P/:އHx08~$8sD}F6È|Zr3>ނ\hD|zՀeek)¤F*Fcwh6)5ܨ65vI^#0EKζ i{%efinE <1 1O˪W2[sTHǬ<\rf\*˩,YwÐpʕNLq*snl=x1dr憜w#)Jn  o⬷ 1Bw-*$#-s&q7jU.E Y(nXem>8?:&# h6Mʿ+~OSVTNDhUr>0HjuoPDO`;WPv톥 \<{D?{[(7$|wJ90gNY:H>& \=[h -_3 S?{=:zYțr9*ܓ{QَB6"V-t "E-eU-1*>+o~8TeSVx05B -PP%1iQ'3:Eo2C[LshF,)9&DPo)bX g7j.߈0 ] U{(44x-uHK9pZR5R*,s`z-HjL-\xB$4Q4fNVNWe:s Im˫&1?FSUZY#ZBaB`"G'@^ rdAtw:q/OJ@sL ?(LM ly't|RF$vWGԁ\21w~M'ʪAzAr\F'pjH8q*opoxHjc@ (XSCy黸$fo\'Sf? 2Myp~N)bbղ"X(k9$A79.z=[mĐco!`\ǩU@~R{ 0![$D_w+闰  n6}"|l3( an86ZC*/^}Z&3;`Ox1:IByV͊5ޘפN8 Xz>Il\?^7K0rU 1\fK$#Z &#,s aYKj3D'/@QYx=wmdE_(Z RetbId7ޒ !nS /1P%jO#I^nr&]~#;S~xr!/SQ%0]K ._ ,Ðl>UɕƎmFeݻiN-4%YtBClH"xDD Vp"~H>B { WS|IkDTǰ洍 rnDitd`@,BYoK'+c'Iƅ%b8~f_\"Rv2ɓ7̔ ~`BIm5|,i]V*"CcW^8*sQέe5ǫXOi ]5*r+B_,n |=']]IS'}WCT9*ru! yT7EGxTXOVOrQ9 Gr_ i1lQcrơ=O8+7Wa nxcW=,n{9r"loو~,j 钗=J·`f)ǰl>Il[ے0W[+&GGpMyF'~|G0OľRG Iw!Aanm|K'gۨτr#]l ;WG4No$JpG],L5X۽rh$;.oQ9fì@հ mÇR|fTp% 8ŰE޾==4M܇-rhYJvmL 1S0 J=NatOy9fa/%yC*J_"XD1:#xN[O"l:pjn  6\? v5`D4i@B!ɄohL +B?c߅ޫw,[jX&*WW >]#,zo_[ڗ 9w m'!<_{d0X7JQFmקtHXFf" кPCYia^%rWZ$h y0¤b޺44u܎ q^[^ĂK*%}dĜkƙmtڿsZ@U93J[Ԋ~׿?HcM. Tdq!n< wѡi[q_d Dڰ0ÇN lO0 ;ti: B8(3c!t PU Jrmo[2P(}jSVwńNtA6c\4#TV73F6!|FQ/[zxtK@{^}Vr2$Lj]ʂꪾRSNSCz4KR}{+ +$vMtgWm=|HtZ Ғz +G2Fe_2&Ch./L9<#˙il K>ϝf Η֖%Snx'uBǮ ɩKsL#X V'#fJ|뢞+lB7z$piIζs vܱ„P=ݬg O#XsS 1:l;?N5%^(LXfͩ|#D KE(|Vf7N)+pHv?^1z_my#ź6_8+η mJfm$tf2Ѵ1A>̍s(uȋ@~'SUCDG-U25 3فp|؜pD&PoԷ|'dv)|$f ",HCMfH4q 3N7@\xǞPEJE\.`ZnfOrP{%l`*ϥQ;B@1tSC{cRaN,1AǦQfJ(j`8 iȘ{n (5`+/<߂"?'g WlWօ56 4I򬼭Ƚ>G݊JJYa^3+Z>]4zȨ*5/{CMJAWO)*n ʣ 8~y7Fv.h|čdȼ٭>II*c?צPj^_̷A+ؚ7, {!i7<)&Q^ӛ{<6B 3MpsvtXptzu4/qĆo׫T/tҟj@]~ePh[YzT)G8./@qZSɋ!E-YuWK%2I`LDO6d3'uf:܊o VN}TYXoGh"'k$nېx-nxi~iʽM&W+.N·G+-PG7Jm?\3GXoNO,v)ǸЮODy+Fdυ]x5)S⚆޲CTg'I?y!X0wn24UoB ^{;t帻e˖gq*YOɵɵ&# ]Lh8R/X#AD 䣳&$x_&[8k^3_^QnؠW TG1UG!>cF' V(T`-c(#"J]?wiAyEO`$vy'p4- LöBGJ +)?5-Fe+wsJ6+P!~: rq_.t@\!K֍,᣿jx4"`egh&`s;*:K:CːQ٘C7FVzyq=t\9.WѿHat[%s- RLaMxdMnnN!ϱ~I)2= FjD <FqU\ъUl _IjZ%#:N\<y|\=ERz !g髠F3d t1c9m?ACS>+#'!cV\osNzA=xf9N qfFiڌ'rj.$vQq R lۢZ0R6KzM)dzS 'v5y+;޶+7&sK1T}^o*Y^.̰R|mRrP3OEx\`6 P;(2Sa(vB)F&ƨr' ZN#9Ub&h孽Sg{MGr3y5hlOؔ#2v\VS#x1%q_h4zЩ> &7҅Ҷ2Yfs {U}vm%cqđΦu{vAB䒜!HiXaqsTj$w/+ZHTԞ\[nDyr'MzX0$X 9A&&c%jfszOv]ݳ*3j{S#-aa7pRB!~pƲyvw,ET^e@˚5%V4( @j kt,9C]5w;!}WvyTo[reu"Vݢ~FѲXb) ;lɉ&dT|1L$fdSyߪ^1SgT mWCuZP?,PjN=9nl"ib5ڍr أ`Yz׭0rc <2ʓirnA3[Éݜ^r)N?\=f'~oLjk$*SH5R SCHO Ez݀!rx<| "!;.).JmVWif#&^ 9@~5p[+l;,2QmO; 6 nAq%v^ N/\Lv)d$QtXJ XD5XE31K/.nSn/[C(/`2J? 2M+J:&h x,r5Wrq9Uyymn(VNDh&i!"vq7$i9dZ-nj}@;HgY;v`TԻWi: Qg-HTuCدoXz,)Q3E鴚]85. j%҂˯*5cmL}*ѶvO PL|5mqm+f$lA ƠhK{Ld-croqGN#)_q~Q=~v[aCAw] ɢJ ׆_n9zTN[Flm#9d#T ݱ;.b UFBUvAYLRba` &jꩠ+kGSWNӜmW q ވ@w|whYUo dO *O)[-GpYy;`9p\Wd{( b`E/a4,j. thg;(f4r9O&SMqfo)4Ev%5izuAӽDE,/'&_T'X6 1Tp_zF-\'o#XOXέW࣌'~ [.j+ǭaOҦ޻D1o'DO 7?ɔKQO zW >#iy x|~׶rsH"PTȐ!ꔘGZSc$3*$r>Kloq5p\gRlAS#Peݖ}JoL3fnΜ7|$H70U ȗAgWE-hK:qC[Gu 2Zp>}ä"K CoAxdO*6bK.>y҆Y^str Z n'``[.f_I!_+OQ-B`<;K3-mfEVqosvSg(4aĞ~F43H;%\.nGCb^'w0̋E8=%o[sa %]3|rIAH'U\oY=/2])4_BT[(ڌ)QH1t,_PQsԜQ&fޚ/AhL\9ghyɀm;ls :O`A´ԂnKҙiF"?0  \?;$:lXkrSM.4?\{w. Wo/A-K3Ga^.o^;ݏfa{X'A>&UdUv My%E"ug@8%qM tIsQ>V=4(n~_fˌ&==OL #X^$5\@uU Q9?*Y[Yj}Xi:n/,[:ʆ滸Q#K9Y>D^1˔™3ƳXoHȢ@/TgM,' 7_~G[܃8oJȫqo}(l+٪Nxm AkN9r2G&ȽW_1#?,R@ d} xG*՞s,)c5ro5c1t9M5ޫ}:f~犞%@\O0z9vUGSؓ@tO\#^ C"ۥUo' -rzR Q:+olh5]dS0\DD4f3MQ36OWyH—lB,zJ{U[w AvG;DHT3bM9rkOJ]"47AǦ;7V = }&"t֥ <:^ܺ+a ]jLuƖ-tWVtT /w?X?-=5EF<-N}{8^u aVTwy#zů򢗆Ƭ&C7_`W]#u Sی=,>#p6I\R lH^(VQ++/JQrMA'+?$3גƿ¼o߶]P`t'Y38`+W]B0&s?ǿ_88#_J1aRk/^3Ej¬Mz:Fˡ~l*ŠG< KTM9a%{H5rl}EKP Jѧ("L;;I5}Bp$[L*s#<=o5k"DAڲh?Z *% ZkM޼3^S~-n諷&%͕U\) ӉNٌjKXbхXt[.RJ[CxjAsAqaG[̯hÁ >p\~%렬@HTǚVw|RbJT$<\bM[dLc8e!oaƵ(@e{):dM S-JsZfw!|sa>HG?þX{hcI4A`X˻gP+:^Gqy CLEˍn3'X%?hLOw D.wH2ya!np-6 (cbku4Z+|ig)53 -({` Ȯ@!y=+-6_%KEc6WGYHFo q?|N80f zdtC5}Vk8͌NFYKZ+Ls[ndIgZ% r~#B`$dF>wMyp0|g|ب3]08!o`40%R V Zy^3e.1. 'g1 b@f(zY De@|ܴ>65]ס69Q D Mߠ }6Ao+0qB1O=FYUW˭wJ||x2uCjn݊ %Ãon,θ&;Oi l4a7**dv~1Y{im5:3}ADoegO8)jzUC{Yxk2>vCd>#q ga< cy[d4ӱt~D>0s:xU":2^?oSF1C fGIo 3Acb+j*{G*ss|}2pyscot'ca'fqcNOo]TY۞>qc2p&/&L \INTб b;s (܍A=D_aqCGgnkX;hdq%x:Cy='^(B*^c@B8 }QP$ @>,vC`seBT='GNt=TaH~!- W۵ӌ@V>;$0C@:z B/医@ظG[:i0Wm.vAK ֪u_aׇuqMݯ;>oD׆L 8?/ vb,RњӝR7T"S)Wٓm-lwh׀wlevE6Cg,|v=?=CT A@Os'>bx2L\j]ͯ7}C=S-CbV4UeӴ]mӽW]fOkrs-\"kOW"v*yFE،hQV@uȔD eD(edUNJb‘iWE< n~yu Aug<S>+@QfRJW Vfkm(\>J鲊<^ "7]OM:ޘQ(Su)_ĝ#f@xy;+0D-G!%SbV3 Ǣfx z>;1RN(h0z}ۨxD Huؐ l5 UV__P;75*\9͔`!5\OZAY XX" lIT֛TY6YROWq۫aSavvn 9#EhbŌQYHr!ihڷ'L Oz҂ ŞiɚMuj)̞GǰfpVV_/E4DRI4E,y8g{ښ$))o6v>8_z]m&(?&P@0TH1 =0 F3ɩ5y$sW7q'!0=o""(xGu]v3xYK:7ﰶ)+z} w>M8<Jʼ*%&QaRq4F.GL9͢{RˇFUZbK pDT˗-nhkXb 0X)baP6q L3nvcO@enT%Gmc"*_r@ѣFE.P8 g]'g82)O.3kO}UT`V0tY;WJeֵ:969ƠRO_GMCK@ "QZw:3,Nj^f$ sT,b;}{sGG6,iQd:Ӑqj dy^Q|v '5Qܠ΋lJ]>cJҶ"Uv0dlū&l`~Q1Ƨ/_D*k˪9`hK]P{6WGZx7h>z(ٰ( ]- ָg:xAkyZ-m&Lx[s^Ǜ>gUT:‰ fɔc:cž; pSЬLR\NJϕ{ϺclXŃD€ŋ.b/A!T*}j.t3uHO],D'dD[YB x ћ;:5QΦpa4rꁺZVv\G_,/,H`ΚMѩbj6ArA!'2 ^vŜu"nmžOWlt}o:oJF/^O&NHdXLd&/K<ѫ>qǺ\g7Q˺i'.~a\Cf{^ ]BhBؔt°ؕDVrRL_og)~g, ʆ)JHыY 1D ;P0 4BG]_>nM$:9T8F)* V6E Ɛ\h*,)q:,qyYt8jݏ+{<8JB̠<j'=UeL=c0v9x DF9|=S&+ZcYS{u97{VBjLX l8SZq1{ ϝN}C^k^`tp؂(&Hr1K&>f?soJ' \5_է\3:jJqbSB;][sfD!np\|i,PEŌؠT@7gN|H[qaS !!OViXE|<ws؁dL?2x%⮒t9)g$Y%R)\@voJc  UϬAQU4/3=s'_zh P)($Xۃf+,0N־ቈr dE<(A]$8<G8d{EP[%%R EeR$sf%8tL12?VjЋkdDϵΐ՗؝JT', @[THt7ӦdF !< he.b4/>ggheu}~jk+4Kzh:>ۿNEb6q_f=b`Ϋ91ym]Њ:R(758Hn\,V!߿ݨb,i6FX4٪Y%Y1RJ9p"ĉbe%" A`> -ru_%[XH.RAdEbȨɿ2<__oZ0m=$%l &$(PP衄qwdՋGka5L-V-"ht@HO"C>F3 *wzJuZ~dϝfv|ɧ: CUh0MS,N'PBw+!*]%\s e8_N~o06aT9\n7|~ KElEQTUA5QDmj66JJT8oy{hΕG&C&G@y./wC^p^`Qf!h$P+@6|j 751+9i(B*3 4o7ַ*Ʒ-ѪYlj*Ƣ9B1/p7w,]+oM]q A,KF|]"& ;h#!|&gc8 )1J#iǷLߚڭKIW{Pz<tz Hј¤^+ Z:YyrtCgI< :^h}0ahqc! S\"YStxTp/mwWR޵ MQ='5 _0zTZhHAx8sWf w{[7`O6A4S@ '<B 4 xxAGJ̨Y}4 ?3#`::eC_v_X83Tˡܶwj + d4+@#P<+Y91:0dTN]!wToT)l,S+ 1{*%"6pDD #2ʽO"'BX*e?c`V;8yq:C0xJ't4?^baaR R {?"8<,0oؾ}Tf1MTڞ<)Dbxcfyu(. )IRFm)Bd n_c{ݺrn5?4`cO"ġ#31Ji‚mL%%^l O0r孛Θ>7L ~牥6ŵ3 Dv7CM}]3gַw!zLt.ٛ245U׌cȠ,8\HNO/ m̙Mִ Lw] ?/ąu!wp@CJL䢀vD?WX QO-fH?4Hb%WFِ"[1M ځ9$seM= \%p͜!;a𛙨N:e|O/ `7>]8ie#FK+[9Is;ʅE[ oBY}ҀęoBG"SO#Mɂ } M/ ͷN<_&xS=S$$,[{}m[Eh2",fo8&ALd~s=k[(DNʒ[jߙu@UQ ?HE"RL,YSCpfEpJ7l,[*li.kY%I(Dmbl-=?dRJL4͒H @T(EVJcj,[EZjjqhUMl󗄝u:X̑DYɛ&Lkz0Z.,I;vHX!Ӱ{gʑ3Õ})aڻoS:m뿏p=l fIJp$8@^S8*`e5!YW\gZvOordDJ!-Y-LR |e5?<5}6+sS%19Nr=6/iJY.( Ϩ6#W+y>80y+v^yȳ>+`_=eF_Ȥ^\^ܹ%k"R4=ֽnDBIT㑇F;)J {mm@zi7ҙ"P'8c C^1o'S_]#8okS WT8E?:xﻼ*sD@nT~,Lm?>N>*QOo =/…E'w(.!9MOm|u)g@'9ov'`y]k>TOj gs~|v=,.5ÝF |Dpgi8rʿO=&9``:%6eb {9̇ jY`qsͫa`=l(/זKTyxG. =U454#H4ءnd+`ui QTUR2SbT-lQEk Mͅ#Q\rv>M(Uh:KÊ IZGl7[w->x=kgQ$ ^]~'8}?j>OR'uw}~ U_9~=aW@zt_K>,/|W+?~òB:Q0Ey2vb c6`C(PRMƜx QOДN/.()" *2Z 7|2 P\]" L)&,6d A88~|Zwci{rYsv".;x6* ?p0AQs$T&u8i8id,d%f\c Z+ti_]"CZ9tBl`7B,[Ek4|,ʋ;!kOmc ^'9iLSZkdnD0'| AA/3J11F0;1S"]mJd{N 9I^"j~loZ 7!DJeföAOZ`e)k33=~7+#=T"ۖy;(ž"Q ?E+Qa(Qx:&P8@乱rs&uDrLn2Is AxXTBr㕿5#֠ڔt(THd BM$;d)7s]5Y02%wNDa)!,OQRLJi/ ^uD6AVXye\cXT2ZyS3 ;[/P&5) KNI}WSopr0JK-'^kb4DA^ˆY6R 5usbba{o~}d//#c x =[-cpuH8c,N{v9Lsdꢌ-Ԯl"Ű%z?Eaqr?O 쐇bY!搄 GMΧOr#?z|jm?|x6=׉砓&}!{NBJaﷇzL>Ds`ȾVD7ٔ*GzM'|v\G; ~=Q?>'ِ{>A8SzZ1LY!{ԯ\]ޟֆSC?GT rU~NjzO_85kFПT•4C'}#;h Hw̻͋6?Kk ~z~pSVY8QOD kC`Hm;v_ҵ'ؾѷ7|.ˁ0x "t((w@\Q> *oT:9E%>l?*<9@O]"ؐP>*yzY_* P}Sur"/T;t́NNP8^c\" })IBv@((^ɼ{HS\!Bb r3"fD9D֗+u;JնewW8\>PEE*ډtt轷jZ.h/'m7]Z< ?:99B=v|l/'_*BwE {t?"yq?<$?rxz/҇y,>{܀u^D_'/ vT<,nca %j]d7HdKP$&|h:e"MrT G0B[`pW}y{.{˥OߢC{g_hcjCI$zp p`2ȘYE+gق&;f7Ww}OƦ7\noJ)j_gr񑇃ڂK9`85bBC-2z'|hX2xI3 KLe'ȼ21/p{7zs$_[ܚ6xghC }475WWtTcO?M)M\vaލiؒ4b+?o9tպ3\U<Pz uuC; _f^t 4Ӷl*'ϝ|D CU}@ r?Z@S0_SB{$p|8vvBwxA.H '{c*C?2ENևG(!a(d5ASB.O!pD$ܑC 0 G@"_+*rmAǓû2땊O#B<E2M=Wl,),hvK(X$qfD%fH-O`&pHlĿĒn;o+x#҉P-4MRCHBF\4N!8.ؔ:rT ,Agu9d7GZa&vf\\=vI2 (>>jEGl#01I83HĿ-U).-7p-(DjA+>z N:W@@W~q晵B|Gt8~-O "^g @Ͳ:0b ϴOzIE}JP`@{*6=t~p|Wmp΀aOP 3BMϰyPv %<4d>t(|9ose;XJmȧ; /͂HC${臶mZ'? 7\^R/>+d$-ena"ݖbKg9Zdˣ EX+Oe4ŗ>K%-/('ҁeTQF'ږGCDTC6hbX~/prU6])>oҥ/ѥ/ 4bl-5`(eCiu9%.f41TL3riͩgEYs-c7F /hϩ+r-_QF8}O3v=F gY1.EZI>v.,\4#<󙶚I55(GC{7ĕj!Hw C.Oa2wϖwGe V~5ǁ;X΄2Pt.` E"~Wק|oKw.LPݟG_I;Gy?zW=|֮ :S| ׁ L.שDMJa$V)Jة'_a`9,9 O'RT'=\#" jDCY>yw?_b4뇥~?^~bS"yU]< SBq<|JbQ:C`M uWg_(| _+|9OY'a'rv#'e3&`7Rs*O- `~u@~u)ms=#,sXF +g𮈈mB =z"oޒ~Wv2+Z{/)a0T)Χ)*nu>< I+ JҤ`^g 3H#`ɑY! +<+7_wsu~y1r-LWA8lsRu"kd`L,i~k&O5o^\dC5/{M9.׳޺'Eu;')+{d-'~ rU{P='wI\z x<|M*P|n @SˆuP>C)zPxP P|o! *!HjOO{X2ro@"`y0@ ]W7\[ƎgJ6Yzg]\ X2>[MNgoN"dD (%a"`x(.OtPhbc&gJ+7}XcKcvN6偒uHe0Xb(Վ4i4St*DE*N'uY+eZҥ+nꀦano^ә6cgn!٢AƯ>]Ts0o n˖q=FoC C_{m 8|VSCI22 v꓆ E=>ڨ{{{3;㏥Ԟ}{%i`/49·;:|}dx9<ʠv)QP'G18A~V qМdkӫϳAMp AxMH'ރr@}_vm(~ ?~E}SA@ߘ h" K2/'i9?;\cE?cBe!=MoZ4\jdLAp3%y4T!v|z4tj4 <__O280,˒2n7)1 `򦬦۳ϝ5˥~;ڶ#^5Uax1bg96TpmfݭTll 5mbN9#noۿfpkzٽ`+ 7R Va&x!ؑf8|c6}4B"n5k[F.?w\ןU2-y88- 1,)%l-讽w)ԦDt;2f*#! 44Z@r=U lYCdCiFV#'a=j8?n/.(Z*ayUjtJ^#%5߭Pw%nfUU]94ܹL'&tIh< $o4i+!soS7Jq," Ng 5).ݞ/y>ʮ1~=>\ܗ^3o&/1eޭals:RyCvV?#UaH5XKY;B7C2=)Nge|Bs+dOԩ^B@^;DH~}>D#CeO ߽/+I_{?_A9x !9HCI 3xH=:"~bDd@ȋ/H@[Gx3#bpD;!&!XȣEfV .li\=Y ^isѥ9R-m`XJ 4 HCǴƾj٭طӿ J9FWTD:?a9Z:&CYխIsFq*Uc_bR=Nߵ+1Bx?},IjD5Qr`#~[C/[gP ']0AO(g D?Q 1\s'/!:g<,_[E:LD>G|| aMW19"RO/!`|  !~8o+ ³gtߙ~'9Cp{}΁J|_kz}G(_qc3|v?uqŶkx##G < }/ڀ.kI?e4SV+ylp+ހ/[@ïCK '_/r;3Ii9r8 vP-{Tw;D/8C}NS=ol<%oct|2f8 292 a@0g𿿏w.d#3Lu "AFWj0pC#bųb\bQ?jlIS~]Z3#wy dXs}{:l3ŊfvVJX2;J 9ljL֟1 >q@}GQׇn;R&fkR0߾혫O ۗKy 9 wi$ H]̉ (b>?;c2ee?;& 6) y jC[C9x?S"~90Z#rpF~r;ߐx#" >$ghX~k?WYwP(|܂㣟1O!!=e? ޗʏ;t)TҝOEuy n<,|OAn{O'jӃ`|"Ӹvce =?r7\1SždY_+5ms;;;Hpa(FO1<~?;"}KTw'ʲ_y7Jwn٥d8El߸70Sͅ=B0 6-̗^{N~ yɨ +L&^b[WiH͡I T!oﵡ= t>mzÛ/j<ˌ[}nI)?(q ?Bfqddcu|ċ5;&Q&р?<ȐÃm±(?p@J@@u=ٯ??4g@w`u- [=ϼ/}?ieSVֿLdďBrz0O{4{T"x>7{U>6ӄ(u> :L^nUCYRn_jw?۾`)_#`0)vl@!y )LW?{ `_*ټwğ%Ož3f /qiX%4 h5æ)56Z#Ks3~Vذ6C֘D4G 4eQ4Oa!DpzyuJ|V6ldD.8dE02OC@1`i+4xS>@U94~:x'GJϷAs\ mhC3RG؍g0DEoFpK4Qr c&W6sh*L >GB%P197g;(}H`p;j(W!!yg?o%d7=A$`y'X['ȟMka%kds-&:P̱}=/wOa=>N̨NHjcσ;,yvC1kf)ꆁlï =j!O\g:ɿ $pƓү(% nz4Lp;r{ 3"-L 񐩽 3cxCֲFJhEh 0>)Bxdݺ_$!|ԏAI t_r9ڟ z#N/ɹO +c|C|?Sdr抟{'3O0w: {eAa?n"E510ӷX2`6aKx_77~.\kt|@ ~9ǀ*[K!CY zke s1?4BGϸ $ZI*8,k&P~ȋ?g_ms9Mùkn?}ieBvhMg*D4Hh{ruWCc@[lr 6E2:SZ5`῅7|l^)] 4z,t&d!=r'uc>ӝ0CO 4/>ׁӿ"AXUk j/3 dφd^Vpb>٘0Z#""dEs6x.4;`!cH)2uJrdwhNzP*syLؔ^B?8f+ }(tgp)$S>@~> )|^vK]Ё< -2l~mh^ow Gr^ ~k:;@26&X@c<{{ (X-f]@y~3_>_)ߟ)NWή7?_}o=KO/C^BǗuDY쟇ZlM(jk*Mfγ`O,n |x.^qRE8Q)! [,~š}H|,.,h$L@S¦liCю|j_c|D/l߶'EN$w Nοx~qhUuEEr̢[v({|et _+`n?3ՙ o̾x P=q/Xm?8Q4Sٜg_pFl4HȜ"mNy `;0>(4 s,>y{_ o/&`n$/WZ[xm߾%WB+n`vv-`@0D*8Gy'o QKr4iL늦Wt P+Ň\"" $Zֿx/}ah"tOz5|v~K#"#/ZLJfDo!*8r, ;4/J|߈Urv17$m/ɹ.QGI;~%"wjQzJ@e~}YNK/\߻4N>t=A~p%KC#3܉h?c;Yg|H"?g W,;ݬ OEE!Vx] zhTD:d<Ԭ8pafbO”0Ic|C8:_K- Oލ't+/:^w O}*Vb{ ~Zc1yhTa0gms+{M#s aXg${I>Ѕ{>ZO=Wo?=`~U3AfKdD (8iOunzZF ۃ]?{@xJShu4YFj>>sB):8-h=boHkLwoy*;psv~k ?/DObUPIG9U4_vtA\3CdU#ubw;^A\E]{8Aò:Vk9^Fϭƭ*!#rl~b"XJJ0YG7K%/)N_,}_ /]@$Pّj[C2ct>K< R@?'xBv?`CT>l>'a$BҔ.s1@{5Fy?vc6U7z<}O}p=H7_'j4 OE%w+rS'hTEOtg/g~[s|wR γiدD%ɞz".ȴ`h;>ݐcXDu fU,p,0U7Ckv\wK_[7 u1/p]ٞ/Ņ3Q\\dv L+n C̨Si;"\l߼`~t*n?ْ MAF#ΣK>Ȃq.5cj.ZOfϏ(w]R"#ED\A5[99n,a|a$zO.&@d lԨ ᜲGS+ϊKa7~k× WO 5{C=ŻǬݤ+8h+bK#F P ?'q/ߗ@̐4{X@Ɛצ> z#@٬Qafڙ @O4~d?blLu,1R5"ڂPg}@(?^O=EZF8biΓb8Bcm<s)s"P@u. iHVŶM#&F2 DfE" Ir["ܸ2"9??\O:sFӱjY5W [cDWl8e,ֵ/.~|0;Vq)^Zh˅F)Ev^i>J7VbC1~(~_Jڼ]f}_ ~FE[)&pW+˶+`~FJy>8\\s;c:0>n)JWf <>=<6WWdn[? Z1sIc& /c7=58a |nAp9[-S#R$jr mO`|9W<9[{o ?J|Wu%r)G9.'jϹ>|Y_F+V]f4#|Pm0󗁨=y2O`Cj=6a*f#-B1݋33' m-qgkIN*#WK ^hޞ`#󝂉Ug/g@M/ z82Z(X4i*6[fQ{w'V,{~FJcyB\O;2-<Ŷ'CڽυղjWayfg;/3+4sUd[96_m@txr7*ˆݩ> l'Xmr^UO7zj gmg~M߱aweֲ`vD?fNK4b*sk42h OX :{]J~\MyN^V+CPb\4#FUxwMyW]xNݢ!J]^"! |sjל+0O{^j5gY)eˮ(QU<`c𹝺qTP$o;K-$i E$1mDH\z/Oo痏9鏈J }Ko~2Ν9alT-ڀf[KR>SxʳP09y_KBPT2xũBjzs鐃=?$ƯT7H^jqfwǼ}<ǡC;;Vߓ?Ḱ˟>k!6sӑ>e; ÛA`,ԡ0bt?d򩮩gOehs;~$S=쨻s)s\P0ʳ{fa X6NA6 8[xEs60$` wy7j}OIHFw"xi_K+mC+DZ Q †G Pp> [U[V[>cbuOɩlX+p!u+/ Z? zMHPan#GOU"qh![RG =WR]]͕PvdCv] B`A8 8HLe0ZWAE<3JL4oGGC=O-?4LGEfX\'0 D"&zA牞k cIzyDCA?*sɍYTmϳjVՕx$b?*Qm*p˦YYm‚1`0!UHfKh.׾B,ة@}i(@|El}1|V·{~\qHA߯E./ǦJp.D=K+N(7 pǕt[lq f6WSXs0 ]23&NUU8e#J>`C2i|ِњ%ZiJΩ*k@l yd2qݖ͙Z:K~C8P:}sħ_ԟ/u-~t}nHFy2AO׳GCg{Īu <}I㟞[2ӸRσ,a75gC.,0c*cd0Pl[O4'Ѷ(_9y[J༖yѧbu\Q[ kuAs!V蕜^2n[umی Fp>=osR)0ìE7,5ZmF|zpy,-,0MXǹoɠӳ5YjSkIʵύ”縃E||'#-}5X6Z\-Mٟɑqs=sl<{/wK5G) YO̍ %5UBflt<3ĒYݓ/?~d~F$|4dD19`@ RNbd$y#:m*?c {l߱O{;}OjAȋq/uM> 7hL" \5PifX~RVnVM'ۨ;e#h#n(<+7^4?T"p8ˆD4:;%V꭛WWa|iO} <8/G5R1RiM]C|q/r&e!˼#f+4IS9wHٟ[nypa  2x=+d? X [2 #k(g4f< nF7km\!ÐS=Uy`gy Ā@?'a<#cj^#x{7ޮ&SՀum?:qSS*r{$LZMJEe9Q8QSA&G~Ϛk/n2% itVfEY3U'Z ϔ3.ty "e*۫%/|QK54$XN5dbMaFA`9@^pQM%>d s>~gɴq2I Ѷ;baZ;|ɷ $Cp^Q\18$Vk泄.~C 0D0[dخ8M Ñ"$4`Z/bq'FiQ3fT1S"}cliê:Aq*5MYǤYJ\5)%導ȈL =EY daoG`INǼYrsBfzS~ly+.x]^_b8+'ڡ4ŖIs8LZ%;&vMۓk"۠Cn1mj^3Gq/uԙۭl̨ܳc̅2BZwl;] dڱ g%2Snts6 @ETO0 N#.KD|ip mʵJ?7:kW .fc_ Vt`9[e!W=SV&&8 P&kw Av[Q%GpZc\{:; DRK;",ɉmS<窈jEMM8 oxus#xS{4E|zyCT+ Z+tfD\V:f)~m8V܏8E(g:|W soi:[|=u=w.}yu/Fx{x[;2e ݊'޽m-鰔ˁdؚjaz#R2v]ozta|Ww>U?n|+K\4Yfc8>1OdB<ܒܫqLnuo.6)k<ĭzk__gN^ OzKŸe!kGwdnKodᣏef=i0NP B`Gif1BˣvLG6'CNb;5ێ_[~fu\˫><ٵ>aq'gϤu6cK|udeʟʾ6}k^Jϱ@k )Svs<`N*2<OUn3QLçK'.# h8UxX먖^w̯,11]Fǝ {X~UtU}8ӌ[d:s~f$0⩞=v/O{>HjA/x{=wG£د&˙Q-X@ MwlZƍ5.4!;[f8ebɓ>`k;5UY̟;JnM?KG2:NHF 1.hrY|+\~J,R3*7ѐԲ]  Pgi@`\)Yц cDnfժp0[cl c8v&"81! //Zp&9Ԇ ۲f*Cf67$s(R91F  /g{6Ҽw=Y*Z /oއO/4x֔/Ѣ$PQ)s,/K L- XmE _"n4BM$c0Ȩ~C(g,e 3i2o̯ϕ~G#Sf ndy,}+VJ{{V_-G`RPtc ") GOu>TcC䧫>[3lbž!?Ͻ=U;=}9k=A"j2ڤ/׆HIY={N̖ Reu̠iɴ ]% (%r1G*p[SlAx*~COO<'` I ^;qtkO?+}wHm8=|>nTOݞ / J<"?+eNj?>'[~)ٽ|}ơ=s?C@Ts|/oec #0{"_ [ɢ ;W`5#pcaf4Y#X CR<"%새@ gΓuն1R_55JASjNϴ}K*-M.N%kdr?Qt[*__[ +U:{'Cû3F 5sxGqVOӈ11FyWcTFL:Hl!ddDmTsQ5i hjۀXęۺ9 5v( dDHfD@b$$B!`{)HuB  d2`XIf3<Q{g8 ,pt5hBdꈂ1.*d*K ӺyN7ar/_24K>fxA'eޟ`L-y޲n& # |ۗ\1qz6 ^AꮨJ~R.%(T]S;2RcvcM-~go+) Xܚ_H!T?ڀ`iˡ37-`vڟ=͓]j{DBAD*( FTagA}*U6-MF(SޱSqFGydsc00^okƾ >7u1LqQwr۳; PyOEwߜɜldH1KYYZy;XT',12S^0_ /:*hT05A=} |r$R3WNdivU^0wT Mf R0fbxha=s[^b|!jX?'-׻=>kŴvaeG6p: y g@iQuh~>wPm6OT6]F &E@=NwA9 Vz GӮxMw~f?n(P,vG0$,`V6!ZGd 1yk_R {y"1O cXr06TsW$"OKzXXe 殫  { '29|43l t/7Q_0]?IN|(M_1 a]g6X&?pN送'nyQx[ `]e(tR__!Ps줸p&FoxMJ=fO5\[,G9_!b؟_=G=_FxϷm{Z!$~Zs? *H~$zJr?>>?/Z0C*fQ~3N SCTh ,q~'2o\"%5(dR&}\"W}}`>Δc3¡1wi{j{샮2t˸մNd;}/]ÜfO!y,ȿ0-0ώ]-W[S"Q7Y5Jʓ{c 9jS ܃n-F3%`?۴L>EZouh\Mb:`@\.^@XB/#5!2"/'YH(s@N>"#D!6 OH#'[/@D`ўֻ{dO+@2 >C @zA".0Ɔ@wko=cY<.N\~')(f (tjF;s#a=Hxp>,;Kc!sjU1=2z`/G&dr2hP5 KL@8nOˬ[v");gtyS_.*<*mPjK%0]GLm%")΢IF LB%QP&M^ȵkBl0﷕j|E^tt23v)D| <3Vl>rkl!o=o/xY]m=/wgkܭ2>|B0}SE4q1r{oz,v{[[bN)8(:}8,4z + ņ 췷wsi׫u]+"l2c%wnuBʙu8`57І|6(FF8~-fwbP#ͼ ]ϼm~6m+rvWd3cMDb$d"v)"# vbz=&O[ai Y–0!>sV8eeYP{_*݆1UfD?cؙ}Sx Jn Rؠ(2j ]f濾/# &f'JJTcQ&t_1Oc=csuGɖ}%l,`Uk~NKǙYo7` *!8IG9ቶxK(9\(#LIh[+IK~ypbu>_rm.f̥ ÖMAL5mS}ȨxrҲT+*/sQNFi2X?XO{kT΃Qmu 㫗hzɭ\Te\dEwHzy_DW)C旾S`q l0PEY[R忖 dٓov֦o9-xAaD!`9Nt@6Z|VcEQ+QpfZQ|^|K{~۱Ӈc8S<`GrtY]%O2qFki$=tQetm[4`dt@sAߪf@pL۔d-c*%ꚅ<6;a S}~=o!<ĉ?v>`}π=zIb f@ Oh vG mgX!dsB3*^bSbGd:EhmFR[/Ј!z"7`+(5k.ŔL1sOLІZ|N ~ NMT=5  J)[ЖB_TǤtOg7| GY6YHDappl3x:Dzk?G/e{b y woSN=V_{ v;͇7^!ˮ ct>Sp4n9 ˷8qlϖD62OǼ{%N_I}`uDED_I:ZBkwwz $ncҴżSL{7>z\$z(]f{Np5n7+Y 2dcA_}Oަ`hZ'("TllXaڑLNėf}GEMvC &Uq,a]_Iaj=YQ!U?;@)Lu.8 x||jO/j2/ Ƿ/^`j'㴖{.CeY q:|3ؼulاe7yzAl6#34597M eLzVX6V?p߰>1HD !.1Ȳ$՞/T?w#I+ᣔ@(P XkD@` L,.EcY0fq ~EF$TNtC"D*UsNBa`s>K/=P 'wN, 0m2< e1 -&̊p}\0ۜ  0'3%Я $ǧ\E|'|e#ݐRo e_wAܖ'z8+ # cN|Nu?YK\{ej ͍L_9X,:_ Iڂr#<举/(6NB:{al:Lrۜ ,v1Iɏj_h>҄\2XId2ӂfɆ6(ClI/4O;Wy^$ td!(|hQaN:u~8Kϒp?IZwmgXkw=@ `iwiѓP+rv9}N*ΐV|Es:*DP:?w~ӂ".Iɘ"}߱L>/ ig 0'=b3 ȍH$6dqA|c\(DC>#xo]:{'-9j<4 }fH#`x} l\dRd8@H0)q^w F1nF% d(lwYwOŮbf:*|qDa%|kퟷ{ܻo 3,|tmyo(QY:ckf -Mb,]D2Zƚx, w;-_v~̽|TkW4ndhʩEI6QAyq~L>^[SJw!hJ K|՛h4NfX+e \D,M)Pܔۅ݃u^ۀ܀׉ !ʷ$ZT4I7$ ) mMU0hHXaQuDM-5Z8ke@.Fna54oJQ MR2۶Jœ z5Cf iI2c6 Z B^28"2xiQMd[1LѢ00)19r\Ma`c'APhqB\. ȡ MҴ.:!δKv"&%m chC^X __eC.Z*K3b65";woo27&c<%w9OO{32 0#j|G'#+Ӫ}2?吚d%.2fEcXFPXx/԰x r. =<K32_.) *UgfwB` bg|̺Mh}1][WqF  M;'s-1g|(+E0pADd te6+Vo1oS٩TI=Ϻ:NjlY_.q=0ߍV qgS!)lWPO;&|Tő)q^0@!//OMo>Ldd!| HDb q3&/I^I 0Pl؄řT6mÛ3{ٞbh00d OȎ6!_KvD.o n8Ʊeqxߵ2<]̪AzJx0մg z+S>K\o3 ѣ:\IzɭADb %/ި}^VSHՊ?bA'aQm7a~7~-qr/F5c;P?CkkGbWZ'\6s*r2#JT&:`䚌w>Z$1 z #Xi7nbad= %+~5A~j3Ҙ;L "ߓOʬHKeLG\./wk}b%=axzKW̞ǎ(!=|*R3ՆrV"^.)W&dFh[7C2R4^PJRgV%2}LQ"sal Q- '?(+Zm=7^dαu}?!1!?kI!⸄@@2r%x>n]gVua⎀$!O}:X] XزCײfIfL ^YE02F {MwyWg:ʊx-robt`Bf;'XF\#W_DBayWMoY16\iŪI-jʖ}'Ci(e2Y,d.g>=!|EΧ`[mn SrcAwH/;}tNX@gf,db;=F}سfLP;'f`'QorkĻa/29*$ն= (N'5Q SA(>SKBa!m'#wWLأnprh"́n{? 5YB|޻!QC+#&hT_32`^Eb~/=(#΋\$/a 1x˜4TYx5 aFs85k}QC ~' +Mpw E1em2jB"xȂhF]¶B,ws<_}|Nnc*s{Ved^:2}x>y]>ĖHAhp*fAw!!cۤAfL|` Ϋ>t|h?Eu(^N>^SHW?J9n+Pbuy<}o{ڿYU =t d&EW8ݶ"*l״ahƺhXB`a@ܕn)+hb-fG/ܲWaŜsXy+׭YDS @93/^3 ,"kEhYx5jt{Ui9oD_ cώdDD,v6AUsO5Tp}3w.irkw {P> ;{?7 jy.v 0nn6xq8%jfgϙ1 h14'=Oɟ[TNOZŶZI׀{gિ<]BƓ=x腑t%ZNO8BC˜T}{$"ךȳw?SGC_^Ta 6~M]~76^b |M Lmd]o{|ćoQ9yXsP5l#X2x IKerh$߾Gt&.zcw B[ɻ-k uDL%啴i`t[swG 6N$ [FC+f18/߮?K6n6NX|xSIfwѸ ڄmaXRg9J *"LPYW4O mi4'ȻP~X辇gP1=mCfɽU0ެY>r`!Fux{+d|,Bj$|@yQ fc`ҫ-wV`mڶE~zV(<wݻQ6} }aڿ%Uϗ(==Qs!Fd_Q4!<8h <~>rŅZk}& 5naa6zq!铲֥.?^OTfzox{_ ߯/]' fD=٪ }s  :'Ͼ0ȏH ylu8S[o75?X=ف2"*"|!2NhLw}l27׳o+a&(l49#j7jGo=$+ט8{GGbyZ'Oa~A#?*SEH-BS'lUTwTQ'Tib-wtR#\ )AòM, c j)a84C5nbeRUi 4 ,TElTDC ol2DL7,U+ǫNgA_-\KƢ Rw/'lBELQ}k>R KO!ఆά[ nݘiE0s20z7Y^_ߧaǝq;s|)%~].($B-`.keE07JZ!x*[ &0.~Sܾ=s tawСD jߜyGﻅu Sy xjƕ.*V2\8pί9ŽAL{c-)O)GM~/]ƺd12!e>AAIxy{zWX ^Gĥ241G08Op\u_|w)C~e!ć3_&> {_R@vyNwfUiqg}:?^˫ΦX,/2h;ߤb+򚎒GFS_|g;CC#cHu?QkWi5E?{G<1hGo:HUSh%:x6q?`o9i/K< <C>zgP$ a)0K !;; 4t`R-#:gfd/ !3t/]*@[q]6o;r?HﴣL aX+uU. #[/U{PשJxLxӯtWsjzJk(EP3r^=Ȫ̊X=D֦%X: e䟌ɠ`MV{L+8 |gipo?z?Z}kV<_\Z2j$S >-TLڇ߷JJrL @` atPLnՂ̮εEd6NÃGVUhtܟ}c }M{%Qs*3rf¶?M]YFnwva>rlar]#[Ly@~sgImΦ4Z{7afF*x~ƒ{oj??{?o` Ύ|M-Z3~^b-r?9hqwQnӵ/>ǃџrh+ ?W`Qө#ه5[tf o9/ B⪻NOۗTƖsrWݕ ^<>!$_?o\GOf&ΊaAF 4K5f˱ymJ$hgmͣVICC?Ev>ۧC=Ek 9O(S";f350/SڴY8eϵrLbC~Kh+7~Qfs\>6D\4tڅU9!0fK%|>;r7#!FU SB! dE i /Tl Ο_7` w }2x24C֝:V MAcx=&|~b3O%0I>Bi L* /^ 3ƼE6m68 uɛ&QMD4(?X&@#>ۑY m99N*A;6x\ꆍڠv4#2;Uն9H~OQp螓x7.9°/T/%fe40M_9>ԣ )@1\0Kly m +:`^8Sn%)fe8jvB"y⎥ 5҈fl~ߙ[#mϻET2E4C~1#!EVbx\E˛QP.sp$yvɗR{%W8r-bRM軃<[X`3cdԆwC]=kr|yА/M|[d皾7qS@c\3v7y V.vW<Wvy9:{xNkޟeg{ulmRDºO4Þ}A>?%;Ǿnlaס\&y Nj(? m:9(黴SC\? niYi 41<1xl0qCjbNzh@ )]ϛػ鷷6T#O#%D% Se1x$)dO:E ar z{_y{7v n&K`k t8) 5N_G_JyBs 80lp31ic{`zb|ǒ? yRl#?ǔ]MWu G<4M бLS* wP}ׂrL[J ZɎY+oͬ12(#I~n6ƣJ |/iyXrD5D 3ԡ!`oԄE"ȇ?O٠|^z:*bLh@ o%>T@("_Bֵ4V9>qҧYojX]Fn$YYs [L(v`<h\E~Y ~%m|Ц),@z +&䆺:߸7ٗn{#7A'si듧y6d7 =)"`cZ (gfǘwX4C//yGz ł9w]Ez.a59ݦu.%\>.I=MZ|L[-CrܘGQ2Ǩ: Q?0Yr2+WR(͹&9"4M 6(G0tPpm{?=o9!(dJ\t者\OxI_)J [PD^#2`[i45cF(VɚUr<#ND YX PBS1d+ .hr=7Rlc~ 2Y+eCN\wuuf`tX8)kE@DsZ*=yX~}ɍn]Sh dE7Nڜ3?k} 0w~)u{qpxϒПRen=SH7yKm^d(_rY3z„HfT/ QM6d Dj17eKom{W~K4g>#Sh"ƨ@cg6>965$V$}Q^F}Y7.@VMk0;fߦfAY _}M6>+qXdt=D|\ ûH7I3#FBOn4[>Op(f9l:vD8sk .~o]}^Ft - _@fB01ŐЈ;8i߻~ЗWs\PPl_G䨫*"mwپ$SǞ{k#uS꤄H Kwv\D"];Fq7o`k2geATe+J"tP^azoPR@NUT5 QRjދ~A*o%kEL$ *<e0Hgч a)PX!7F\/O嵙*OU U9tKȣjbXT`lhzt~K@RJ ckI y%8lx 3>"arC3bj!g HjX<[ҽ&opb\ )%;jLU̷;6MUPAVݢ!VJy̶cU GʒnzVRK>|c*u`}JѣJx8Ee-'9}sVEր1HN`j&B+uQN%} 1%SO.V:XKR9= ˯F_V;}b) imZk< &=w?,rLJR(oPt qD슨d+ݦ%GGH15Vo>.0CūI݇u[/͆'J^T–j2. c={M͗0-G6z~ >}9*^{D0 *EHf3K6  LtO=⩈ LQ]QRE-T=ƽL5OQ:yh?n)Uɏ T2&"1`ɷ{ޘр^E&hzVǫr .mի+ mY'J ?}] [QZ[`wJSldz8kpɼ^6+h\=ٝ4-Ik˵C3@%DRJb)p"Y1@P'9AMsd:&`hJ5|Ar+ Zͯ'2+R1cXr1g0{~km+zyF2)=.;pC^qC}Nw'CA&l`4fXvpSMAUMG#FgwpxMǘFh4mULeޗyzhn8,46YsD笃ZRk7&  YU@7!E tg>Y^/pm")\ػ6HU3{q,E"|tIGvh"QapFFE `O-1Pns[d|\t-=V,Ӑ-Ym5{b:ryׅsWǡde(e%{X5/1HcǣN۾{qcLxY<츌*!=KxU 9P@)hSr)iDҫĽ(P3z1B _Á~ߏFpCºvpͶƁ>H2Ps0KThQ x1 fht~'SXjw﬩G8TP3m`5K]0aw$ٿY+}#{r4&@bHQ!r1ڨH m|޽ѽ^?Oqp5gL'U.(h~`ZtdB6W[UAa-* [U$ҝi]-`c~yx(4 1A#Wͧ0Sغx[Ѳm"}3rAdJGrFŦtOHzaa>JѦ!|<ϝdQ CS^i9+ЩUK틄[  6xFځ(?YZrZd|oDҊ=亰n# aFBd]% 3U[W) "8/&`z=)Ŗ@-ZU=eGrU"Ǫfgn7q'̻ fv=!o,P&sp@b~ vO?IHL"J)A<dhR2_~u9-mӢWUFNd=`Umbd9_bT@o>~zrp~D=&@\fZ_}|? u4ܠvؠxV__hD9υr;[c[鵱Va-|c#ٶ{L#"|CU,{d"qf xyvJiRo^W8C1e|jv zPTRv!5E6{4&;se)~EzZ'̽1=Ζˍݨst'Rl ycuZa+@<.ƌR;7}x? 3r `f ~[/ș~"{eqhdnp^9!sJ44y;v~oLTcq"Wseh7e@B*j˹f0·NŘV&W^ͤo蚑`&>B }5ht[R0,ֶۇrѐ"W8})c 1i La5,8惦viX#f *pΩmWA!,2YY01)g-9x0*L/k(Z.㻇pn&>flU^ոmgfaV_ceE+cSqKn|]|0J $ AbDoֵRp =㨖JHP^Z7Ɖ:>. !W~e{A 18<̮-wUm4BL oz5~_Z0˨fc6A vdw| a i93?uɀz6/T6ۄyfK m"T(Ri12PÇZz9u6Zs+ļ@ `·L"AunI쭡E`s>y4uuSInݎeCm4οq͈>5 +ͭڎuLSY&Nc%q/M֖7 C8`'fЇ)5{: 7;$5#:>ήIQ^ )*$Y69a/eҤjr^", o6&,[]0fy{$+{Ia5#Nmb4F9Xf/aHlj %9M\#!0-o5#esY)j! .$lTe| V6m36ɻZ(m RQcd ZBmȘR74t (Yf™0&-hiI`I8%7NmT_$?,ώ$b4ױ[qeZ*'~ɇfC2d\~Ң( zH>[o{>³2ktہS<( [l2NFj0ݷ7V AO:#zcij Fw?'mV3?&뫧okkt4l؟ GZu=eyiqֺ\vK 0f\T_M'X{"t펾ƣz N_}h8'<5g7G8*Lem䲭`Kv3طx|yt513<XFZH-fϜg%)k<-.Aia"o6nC~5$+ٯ),vqpAzqPaX|c% IZ^2 ,VF-]Wz WTÃ0!ڙ :Ħ._5H= 0u;s["6֗_}>f^Az&➱gP/Y!x6ǹ kУ=#QQ3d20`&tnds$|e!ㅟKlzޱ{ Òچl"Zܥ>TM>Bhxtf5|H*Zw=OYV*` S ʎj a-q[()Ά1mk *cP'" *t3k~%Tl ; h@ g_H9v"dLb0SMQMMcv1R1~6 rl]ytpFyΎ[rv@ w}jXõP7%eTv7qq 3::]F{ 09D 7kB+CO֭]lVj` z/뛊Ki l9*ăCqT0W?6< |\*(ߤӇ,&Op4OB"c[3|:B#0f ̋e]n'>ABUVmcɻ96󜔰P3[מÃЛ!=}HgVTCz~"LxԪ{زKi.o>'3r7+ʂj 7~;i˭z\RmǫT"L"k4=MlŚL;.'t[ag O]?xЫ?R|ĀA)P?~_yeldZ^7v.`J^-e3.dQaq v$u^U%UX4gG&#G[hᏏ]ںm^+m}kݦ O#{÷>ʂH8"+6 oWœ+HR.P4JBC]r8S$2]%^Qt __C4ɥס`N %̆&$HWT#$hhƐi %/#5Hkl:I?we`HrxTO}/H#r3 gw<% ! `2Lu%/F H~h04@gƊb-ϓ(L`L$L<%)琯'%1o_+fc&!22K͎Ʌn/>3x'+DZsDJ^ϛ; :J~2jF1V[X6AJ:G!GH) a12Gj#:d`p #pŪlbLR U^:,\܌Ұjm0̨(VsUCDݦho+)EҪCYkKXodX {hW4ơՈZE(+PK(\id\?6"[7d&C mMGAyQVY+"5npO9bxMXuvJwGp? Ec.o\ ZB1/AQyy)xLq J2=7}?qTp~Fq_<"$#FJa#Vު[Y>&%jJ80M\| Sdiѓ6xDF4ˇ@%;1[EW|B}E5zpTE)%ZW6 ]pج4P~?9K Y98f>3r3ϝsQѱ{\ч KVsV7/ȁbbz&Qumf h6ma?C騁IA eݦ״s~ ~mYccd 5!7Ƿ]#uMUy8>$U˄+ b}:B2RI<;NC}_ۃ}DX}vcqHaV5Ц-[fmLQm\D͝j'6h"5C۴rt9upPU9GfY&o!я#ڬ?-rB[.ʧi&-j!j;3PZ/M Xi`p|ه%K#M+ߝ[y抶kUZh٫o&Vic '.v%h}}K`m^VbYo22!*^w3%/9]t%s˳wa)|IGټC($$V Q0kZT%jmGF7vs7~6wK'U"*9=dI53{hs(91a\d{j$ZWDE-C)aE(͍OÃf{H>7=X^Sni!>R׿WaZ<#?Uz]i.v9~+D\5~HEQAwbJR$ ,Hуb 1H"̌hUQPHDf[,W !Fe~GJVztcw }/gNzJlv~ӹ[rp,?"sx"ܯO~ҌG0ԋ1 )" +L"A'y<<}3! k1Ä )q1zs){809&Lŷ}8oOuLq.n"( M%H(`H3I RBABc 1 ,`߇^9>j8Cv\+_ N8 `xh%MÕ҆!D=!S UoF(sLFcqڣ 0TPH3R/¥v"Ѿh|2PZfhGOt"v; [kW_Ň/2JMu XŠU.b6ᰧ|z瞗_n{7UNڧp]3 x?b|ZPѭMsoA,XHk@jY .%m8XP޺[o'9zVjC{G20q:i&k%3xy6W5cDH5oL#^l뭇d̸.@wtfen㱛K`GN+j:5{ nj>عcFcG=DϫNl[Z##"r*U7ә;9)/*ױ}oz ,nޖr_'dyS_O)ZkvM~sc놪^c @_ kgߧ=g/vKM;ߛ=Vb~ҭXoݼ?YXlw[+z)&񷽟En݊?C%Qh*L;ЗsT1.pOgk&EM}Lkd4 B:< `tB[k,oW.^ k 1i?mkFJlm0I\(MD z#g3v2;^%o1_ /ɤ/a@o87e#^={|sTzK3Nj٠s6,vD2~XA26P Y 1(6FA IH&RL$I`UEEQeki'V[B`6QH# ;'%vڿʬprO~ŮߗeO(g{Ob#B KHd{;>WJ+-#MNDBy#ab˹";c'U`20I3$f$)!DB  dЏݩ#HHI13 uN&J#s~\hozPWrã_uf/.K^`d})(2tNO&snrŬG؈o6}VPQ Q,5Zr}*S$ $<_dP7L_cSi αLy C"XIhs~00U65%H6qص90aN $aS}3+ uH;@X*!/թY?Vpj`slZR+pNf&>~edDo&4W`Wꂢ-a;j\(oS4(P Ԃ̹LLg2۰]* ?*f"XMB{5s 9nC)MȚ|Е)s(n=*MoȆu,KnIi,YXgHѩ5Nn"':ߘP|fۂ۸s'qWt1޿u?6>{cޗHJ5sr`51 ˏi7D^ \]KLP@rfw!]ϸRs{jRJDD5e4yBL>bSE$W)z{2vxU[-`F Ug 8wi) L~9b,w%rV.e|Z??#nX PV"1[0T1\\={-|hd-& Lrne]0^<XM|.3uCʪ-#zJ+<)xo @bO1 ¡j^4;nH_,fT;G˶s 5'7d6iQ8#||,wj^Eݞp:q1^9+L1 [^G1̹\\8~cF& ܉vf8H&.`c'i?`QLT7ԍ/=L1Qj%|=vx~ZvS7P I㞦[f)q=j>*M?q;I078dѾ3MVbxk|U~~yh>xb`~$dMYbI궙۞I76~0 E4RMRxH076ܓURtǩs!$ ]c?ŪnlvLmYwZܟ.es+fmvyѽiCj\9 ;&sz3Stųt3 3*WNřl:"C{-Srʺ$J g///ʛ t޿;凇o`nd{2_ \u=u4xuhfkFD7P" 0w>GXLm|79/qy=.ݢ".h'tיe L`?s_r~[y^$? ńhPU")rf.l:Of~ doo4O`E*afEm_@B4K+^7M];U|JI{xC^'`/}bfu6Sz} )4T/:{/dXUPNiDvk\*lT{Dc(qVd(GAlKEySzIBAf;$.bN&\p ;\Kv^(o~SQ-Odʎ>Yh Dpt)a񙋷s+`cSYwu6:TTa$RxUmm\㵼 !e 4@Cl+Q[H ㌸NI)9G#W. KnM;j?!e%?aLY}j*mIbcVhEnNxz"!6JGMɃOig]q%@`+5cavp {\t`x f+npTt7:,xzjvn:ƼiȌǂR,`4{!C&R?euӁnw"f\Ta3b$mξnk̰#`K ]>_eFnSfaqURk-q9E;.ZD1LD |0\e$'{?8⸺CZ,m<\W?U'͝CLJo Ϛwwиr>}?qKk}F|^N:oW, n;p$oL>^euPnc,lc@2/I5:q6y!}Gۿ5LHESx+M)\d>AT aa{=)p/|o{3$DR0yȳC.EU/Y<,Ob9*%JhrTa{vDqݧN.Mĩv[>8ʧ-j׋u;V]! a1fj15+ڌo0V#N v]j%D nXJf74x yoOCSF ]ӯ㏤^Hf nRd>Dv)ɷ..njMoZ#H~ʨrtزK{u4_6pLR"͢ tlT6tmP CzZߺܦ{:FDH-;P ldp^iJMs<%\Ʊp+]W[h H͈̓dXVm 6)"u/AkXثc@x(ѭ=5DAR\*^'U̥ &<1L65?s}!ⱻ/OϽuK;㙅^(h~嘎 s'Qy& w%ڒc/yV.iFиĊ1k5KLDKCy4|qdEUdÚXE|_SѸ-X3ݔBۺƗ2EM돸| Evg/1l-|'=֓P8U+Q'BzJnsH-)疟B~y[ezO{kҽ먧-zzX4(6; [M?`K% u:l0|feu5#vRn{U4A7>BEwF] 4qqq٪{^wpGS UPkKrG߭Uӽ{koC?3AE'q\\SO/ULM6ݻonq8o Pf 2wg?QIv3s_qe[6@1(j.2Cu V=~m>%\K}JýŸ'=/F>TÓBcիcf5Y7+l7ٙ/G n~g[KZ"JH6d&1Fi2QJ"&D(فK(4d-MOeZ#[e\Z0a(}lQz&&y!{!ְ)"P[mh=b4p5FۙBŝt3hΥF)G @h@N3گ}2Vq,\AE֎8YR Xڬ ѿqw˷xzClx}c+7+ !Kn6*|އΝ(D`؝ԫ~ZHp\x]ve Q-{B{^oHzrқv~׸-7z /{xs(;x.`_H .bj0!Ҍ#>h~x M#h`ꅫ6Vkc=|ԯ$ZK4/N7VOVbtUFoK b,IL 2I$)(!J4Z 0F`xk 8'niMDǩdb[P-*nИ39U3OWU?V,f/1zbZm CP:eg$`l*c՝=0® 5 `>].Of0U7Μ'>y[>%)Cg/yꈆ|6/gAdL\̥o>iЋB+oNT$ }ڋƞŠ΄i;uNV/cDpiQpq`.J;#7rCY?F6˷`nbo;eB8!,c2JcAB5[Q &Zҩ,Uשu2K|qXkJ 6hY u_hE݄0F2{]$EdC0JP8q٤p< 1$/`iĩD/;?OmyrوqqA!ш?PɌ'" /yWS994R3RNU7g "D6.*w2Q>lh86>E%E~ͪjPwީsW[U4JvkFa`G{ja7v z}$G[co/oJ2\r:XW6>S.S`u~Q9adkoo&77b_g_CcL.htF? Po 4kjYw *ҌY.q}y~+T 闵N"5v(v~ŷq 0|RD1c\ އAF kP b@ d"fY^:0F+J{XўyS<-uŠy`6B'|7OVPlf% -WM-D-4DmϪwg_HB79u>"s9!G/{-;M۳wh[rZx39 9r1f3c Q1!m_Ǵ- _ax,ED&|S(d)Ae%>~oaJrFe!f)Пݺef`hJ)_ZX ,""dcI ynsj&1{f$QsAb?y%MSa@a/CUg1'l8Y LX0XՏK,-~}[+-٣jN-wKG"À,NلDcn  J5{t8/Qm#UPY=Fil|^Clq a~ki+ k {m}jO6W_jHk:x×}~f`je`B)'+=0p{mU syVC4+ s3TGjis _<\w9X9rq/iLM}˯b\Я&.0o].UCo60pa-X Z2v7 p-a}(΂QExQ.ƭja4/CÁTki^aS衼"zH W妫9g.f۬u*wm%E|\S8i `Tٰ, d$3M|-L`}@}2b灆Ah| m>yzڤNV^^&`Yd 4b@6'f3pX.V-LL OvsdDZnoGY\3v4?Ϸ]Lџ@N&[EX$FZOS__L2cMqn(Q_RwU%w+FD/NXh~OqE$'nܺa'|P<cq1qZ6NmtC}|=ňReoE!䥘bd:w̵ͣYmF9Q{ vѓB0s)Vv˯E+ӡ,nf0i0 nb(~W%@ ّ2{5ȣ,YJ1m.C[]?H]鸸AW ۿfe2N$n\R}1\箖̒U)M_鴯ou1ⸯlM%iPSR ](lRJ'~gM>w<չsz{Km( _Y:}K}eZ+cЪܸ~S;on)1Z.@†Aph"PL{| .?6\av~*`=72;y5I%*FcȘy6ν 0}0#-4tYf%$XPGxEt}ǓGlsl&.a_K_1Gr}k}_WfGl@h.Zl+a3P)GT6U{\IޮƇɶNls#7|鉥;ޠ4)R&@9dxgxIdWWB ElN8ʋg}MPwoDn7Fk2Ɍ &mSO2B0ж0fx{HސR# Nϭwϝ=|EcMEISɦT+,!%Vpiph6|`TAZOi2(ds55N r7p.e zfh|⩩Yr82!M |yF' #׆-+@Kڧ,wʮ5'vcLnN݁MO0((sҵ3_^Ș,AU/םscqoJw< n%SyWǑӅ+O/̍< {Xvsv۔࢙GYe_<J0[:/ 뿧1ԮJ,1N0waG=f[OVli`w`RPsČٙL21+g7[O䁲/YmWp̽ڇAS.[oP= Hop;^h1nivMQ}dˎd]\Kcew/P?)Z.\O}2isTwW7=YG^q")3,;+P8&^J>MCi48IMT~4Ar...?C$8<]цc+j,3#G2gi'W~G(j?@|'> wɜ%ݿsu:p4޺h?eXp*nz1{Ws?nlOHs_k;w-P~CFftA4Ȧƚh 8[;Z"LK[oํƲZL'ǹqlX RsoGM>2|P*ZĢSS31FT޲Dm cqA,b\ 0b2y.U[dޥ Sv7ܮO'rѹ)&Sztjt i  ^mn;$V&/tOSN\8ܝSVax}W{*/0h uWߟ4FA0/Y_kE^Y[ :oKLj|oC]ᄸ *ktf 9O3O< "_Xθhayܤ3lGʛ((pm:K?c{}>/?'67t0zh_rqɷf/w ^F)1%wչEX<k5 !z*XFK{/ї`Lg7h8N.Sߔ?*St ffҎt <" %NA14|] R)426Oۆ)+zH%: ofd!n;eVr)̷ٺd]x y7WzȢ@\4q(>7POe6 oq_p>&k=FNgYqWsAsX2Yl~uZa:lJ!t ) U1%<я{#X\]7Ws|/1klv@`(Y؅-_SY}Uߕ8:&c8az 2Ps9gլݭ ytgŠ-NQ̓&SI{_6}n5]{ W%,1bُU8s9c> s{鿌P4~֜??[Ame[cce 4uW6.f$LQ[DOE<oRtھQ;s-{z>Nk9^ a=w SKfЙA~ xu.ŐZG4W.&`hiPY#z?pZA\7 m(g<Ifl8b|%s S֖0G(V?nq=5CYkLV^כ^<|%aDBb5]aqph9X+As8!dW{wӴR'n/_`Se'vW%LTz ;{g$t+ bo( dO|+%?Μݿڻ|Lzjm>  V f1zr]+K~J낖.^gbs6V~!mx˳ @ssM,>a7N!aǟd}kVN.,qø]}L3X> 3{}1_n",Xx|}V:̟^Tѱ#)&6}1<k"ҼXz^f_[Jw]]o){7p}=Xj3b`P~꾪O.p,,Â;3ZLb4,AP>9W/{W>wf ;]>39ن︐=$emLI,iy?o˩/vfޠ-wHi{ RK}sO#'E=ỉxN};9H=i&{<>SU3"|oxq}sʽἎoC-?q'JAǤEJӠcsMށJWΠ]\}Fc/ZU᭜::-GC )|Z5Ϥ˗0?m\Ac#8~nṅ+ mL^‚BJ4\l8Ϊ%RD ??$HEy3˻|w7 kdx벏qlw]VNV(ٛv' ?>75eMF|Q X!DP(тr.6)Êx*DV<>lM*v"*JVctM=:p` gd9Q18@{FZ .4=?]9+DS*|")zY)w&Fw ]wmB%]jQL{74 O!tz1Ĕ$DáPIBr"PTfNDE\NJ0pzs,2RH=K~)?}X2n$gV҂r]ǰn^\3UR333ScIGT8<MJM}uT ,¾aт_xxB6’rT׊ (OTm(K Xj!c){x:b`0nΗu:x9-TKCV Ц8윭Ύ!9z>f[kW;CbU fM؝$G!^s5$WJcTwUJXҺJ>%lefOTLʫ{Ŵ06Qri:`(R29!)> w+6=#5{ ?ѯnWx{HNOĿ[{no^OϼHG.%r@Зmm?ݸe9W78ܤYQt9>dm{D;$%Xk0c3bE4Ll6t/:Bm&G͌-{)nw tkCQPhl|bLX 6W1՘@`jsM-kUzxN3LZJt}O0wvC4a@+vzQiv868x& RZ#'\]CH))OO}%KA7P85,HXdؖLIȣG.ŵ GjrM!:mok{A+`aFŵh$QLL0:'߳e&,(27+mlTmE}/t7кFׂdJ@&K%7F6kEQLHלV~AtqU$k5ӱ:Tqo)v"2O*h0s/I2t{N9l^;mf1広BCw\~w]:.1&;qѬ0BZ7V7. $Y;I Rƃyf . ) BI:'QM:::8laZ[lcg*h.<,`5"|9%[Qih2  g\u;هwe ͐v粢<F(<&u"Eo~6k!θsЧ_A٣񻏧-]|Q;xN3cWi'8msdξ7ؾDA)6tzfF8 ~i1|Pm2! DYx=B@~հALꔼF8V 6 f%ilz/𤨜'"9HÃrzsHC=?0T OD#6v{_6lxpv2~[VIB =m^p}sG$o\\^8MÞW&g ^ M'4e~Ng9.?;y ⢰|p~1 ;݆ `!l^mhykHov8czcR&A ΅JsR̙0nXBCaf$U[J/me~x4(UӥSEk>X>c!ж.Rcr:&ζs~ab36uЙx@*#:+qj,?O˹r^qLJS"*F]Ej mp '֬ G"O`տ8^æCb(̓ cʌ c=0j8QcgVF̴>an6afQ9ïqgf@XX;W)sVaešM7 L5oY1Y/?}g޷p"raBa&\, 8U#B<֤ιF[ Ua/؂@CQD*VM%08*1=Ak[KZ4)?o D9(V䵶KEf`'3`| ϣh8 Q3Aa,}TD%lJ  l (P moWppgDBb1h+i,i ^81t3aN3mq#q!kn dCUpEMk㚻43\TtHofK x8/i 28lcu Lbb Pp7 m 0j|@cV=(`Aǂ8#ShP i_5Uo:1fa= IP`0>cjjF{: F S gV gVE.qG ELِ-P& 5F(h2Q@8?(=("HP cx+l6':6SMu6^ 6Fodͯ ر^| Wa`Atw{3f F-.m:XY'K3X 5IO25\|.NRH(F]!`g~Y6Yfţ* \8(@x*0n*TօPqELWjf@`׮.mzeMK:N/[6AC"8 `2ZuXgC!l`1H!>DlCe bkVϡ߷vlF OȐ ?R]|#!Oc u25:F]AjRGk C){~ JO?M~*lDٷbxQ ;@jtz]/yyER`(`T]$g9gQ_X٫la^XaG6 Cr  nx=w/Z2(kb9 @( UlL5jƮDAF1a]%B-EMx)ӂ*2g4 X2:p=`)7Q^_6{Ud&ktɔwe&7̥f)sAm1M—L{< )"(@6hzg*g{=W?\e"h{o|$LN6ы#7%h^jUq4b=k?Vt`T4{۠n$1c0.^_3P**T3 w;\X%*RgR%}X"QӗxZTn'nd Ҧv ݯBn߅11Z }'cMl8l%8[BR¿X`౭P!(goҒ?HR"_S o*_H.[%]'~k2X`LNjPal{f)N 7z#IS`[wԩ9,}{CF'c@8X?@5܆{AH yrE@Ž2QSfųYⲖ?:,ƶXi.K!C 1uH2ʦ < li4H٧bG.ÐŪ]H֘6,'XB pdE=b /ZЖtms]Y rIӞ̳yu40,Aj42Nk \cv,'1oݵlpLX. drůng"iʷsq͏N3>3?{ɛy)X 1a v=Q `4¼[prHJ@5-݋kyle&/s{V)TavwP!]L o~jFo7p2cWWha/ϡO˰wGx'ۧA]͝V';kG u )7N?l%ľsCgKwONsj)MgW/̛۲nYJ.uz9͊B'ur뿎i75=;pZnjo6cHC2Dg &BE ܟ7dЖ:Oxu'kOJ(0O-3GFy0sfkh0pu(I67_/qh]{pxOr|Kܳ}[wT:nlא -ꈖ {1p#Å(E_véz3Gwɛ")pf3XG,{̼F}1t1[*Eߧj=4 @z~Ub+d(>n z\W'r> 7$&0"yvmӬlmU>e|%k{-kF#?4?K ݷPFX?ײzzއ#{Poa,~ ظ_SGp_&fkqa',X #g)#[/ )nWD=޷yKʿa+w"Dj|^\̧UCwQsi;xX~_^C80$pa<Z b`r<@_B/'feb_fz[}ߝq6d>]bQ '-e c eEòd퇕 E4`# XTؤ JI7 tU*QްAJP~π#6 mꢡiYubK:~ 3%X(LyY߼'l>|u\:VBupdD m}% 8sZ|FxJJs32e?c{Ju23:҇~J;Kmټg欴9F;Eܥْb2d4œ&.+7 ˩Gʽrn50xH};sSR4IM:g[؂1We8-7F7`J6Y[ ^˰ڲN+)- eW@Rc+.4H@mxnZkIj xbm$7Af.HHj!rB#*ROZ_-<8cun5!rOPkA a]^NjΤgǰgUćs<*m͆`uʠhwU 7pօfhDK1'`cxP\Īr q9,ȭ #+Bq`nrqD9T'-OT8'c^ 8M5:1OކcDJ=tt4|d.3 RK0sZ盳bǾi}H}:&NEvIX~Iu[^%bI 6B(`\s-p.㮑D2ƶr\z 6-IW Cjd& ǃvyos3Bպ[?lDgI]u1D>q]C/HЋ@%twԨ2l$ 7zDZ)ZŸ~;v7 8 ;QRto*A]`K0X\DB6+q-y5I^t@fq?İ^nx_O_8 u0FύD-g`_8g쵘gM0ytXcx Fg3 m@jBzy]., vno,۰eо,gHbB~ajpN<<X*}H"mϩQxz/ْt! +-uܛL[ܕB3#D{~]k A{ `#"]޻<c>V ;S̀1TT,m?t%p [qV72 Mf'v w Ãy#7%o|Cpj\cV`^e7*iÚ:rضa|Hj3\M2`4h=aoTr* 3o j]G5__1 \k* ~=;up; sjRUY30Ac-I )2LB0xa \5zJ ^SºS~mc⫣#㥒x^6>w~fb-Y;V?ʖbj[-K5MֻC\=e MEA 4يQʋ;WsK//:hA >u`oR`EȝFx?5^mQKyuT?Su_1祳9}g]y8 |^תt'_3+@ENeTIFkHlp*.R>U\ͥa\W! ¿B4=D˖9g/O >sƽh?-v6k@.m}Da-Ls;R2F#osRYpsđ~fRƪTIQVc.~ߋ+c|5~bw]O9ٚv6+en~?w8~V2_lEOxۯpz/'τuy3EO)g,OWY `t?0鿙a4C f$_~z0'3hXCH8v[e}n řag „C]kJ>D ݏ-/`SUsko܇mM@ݣZV'_De\3e3]qxăd2& ݌!`yZsJBG $]d{}g`C=\ !2 S0ЛPS:/hd2Dr¨eN!rG A`qez9g(1N_\̋%-2?o[`:.Gi6{'m?n'9``pd'%0(h]Md |V6Ա[%(Lua7qZd%ߙ| ҳ[O\o\Dǯ^qPg~nrwʽ= [=B?AtE9eISҗϴفם3K׻p>eTcz!j3LPPPq 0ŠC~̽Ac#ɆF&&1 '` 1~s1^{`3 yrB)|v1lE=gj}>2ffn#yВ*ۮgm308X,Sl.|+,w?_`]9,3γ}hsa\Eom t{ĖR/׸o!oU~ *N@{F>Uȭ vNjFVҞP,X4U'fÛ%s2aެ18t؈Ao:i3@ݿ+ݲ vQ z:m PPb_Ry!?~}5U,!?XUp/SCwut,zG|n{./c/3/W("|>o-`r󏏧g};Sh?{-ayTL9Lc iF1rS<đ+79TfH糍u$Cvm :xx[qU7_SuEZ<)zp]=&ѢٹVԢi>O}^sr ݬ38pt931lO!Aq0/8KhQ@',s1D[hca\j̜6HҋҹXm,gܢF>vre;8;KͷS|.rdFPO0Nar^'<(mZdz2ln8> SZfAL!${?MBLX{\1|$Afas$VX'M( {J0 O6_R:#ՓE?Xޑ ;8t=y:\"<l9~rOP^&O4T_z8ampT}#~~d9zkn홻izCk%c1u?ȪpEN7moœS3O^""%F0oFC05,|x( }/7,ܐOT@]ՃshKMp[KR$jFa&CQh*|/xFZ4cb?Ϋ?:(u;y#>L[#n>1LS+n痢w9Gn\W.iga}/ݟO?2|yr(͑RagLz$Bb+ӧ芴\h"A~osIӤS@|?T5kX#9ןι5%zOGYW3? daY;9kz#c|롹YCF8Ju,jb;&L V~G wo/80Gx5XffvE!d4)t~.v|WjBZ .J;S%L%)C{Xo6ɼ8"C+51_TI 0Wf|Z皷sqZuFRx 6J2*ay3%}XsR5FX MsO߉14 20$uwA) UP2U9.4.@v|(|i.ӌ^ElQJjj]b (m!hJcͅv޼5g)yݦHϙ4p3f RE8Nda|foP1P՛_;z?|o>8^ex7M6&ܠb /s@bD"ixK Ui:%+ f{k~ ]3 $!I!ulQ*m~ 9D5Zxta(i,G:mOH:j5T"\-#XIsb3OwU|Smdz_2 !4jc pVJ4<|hr3b'/_Oy뺗nkn عF\9 D=kz+uN3" $)$ q.'~я r(Q#i'X%VJ8!|M2jqAa޷">3x-ju~WIϱ{`-SU_-6XE\ճVS4,vJrfHTgupF8N*!IGW#'E }Dn?ѷ;Hf6cœ!b͹@PǓ;x2hs8 3&QvmK]:ٱORc|RE1`tl9B۽wZءp/Qa 4! "T+Ⱥ2s[G؟)q[вvlwrKĘKf2 z1D.q&s_fE3&hX]Bit`t9]|s,n~LUp BsbɿTݐ0TBOnc<,hw*x oqXKDJ81l+N4=t<:@C5]lo6VmFbx0PLs-}xUwxJ]p9ԩM_̑F 显޺ZÚwWsu2#F`q^-qv_;DiOt;|2N% kbO9A'{VC[$qj+fZT>:#鐐W2㯃h0woKt`(XbDF^o V0]4Spl}O03M;Ii,#y }|6e^CB퇣'^ge]LSGi+T}>wɡ74UaNfL:`=ALjK{x.90m2+ G'z-ʒPPVJ3a%O+Է"q{ }$p~t~&16.ëNl;V؊OνYtadfktulήZTl.yvs8Zʍ]L.iݛۨ.,'@*om|wU¾n⼉4_^9Noe6W+^֯۞υ$jUĮݵ]AUT[uRTyl.KM`e~UQ#DT] p'lyFd>|e&;]3#>mӷ 1rZ|ߐA^pζ>Ϗ/z\{틧1~7{#(sguam?+ KfK&8y|eG]YoF]?`j Яm O{yƪ#m6reoݍTʣ_†F_3v;YteT~!M3>ɝ1ݰӱc!Ojmc36JMLeTlyF/>SBWv7|Vv8<rk-`=&#CGNUQ.(쿒8pO {hw'}sLDLs34kVD5[^Xlmp[4_ZyoF5r7㬢.Dacy;f[a3~7.Y푛%b5|pA&,i{l7&7=׆3XmSřl1yގbg#Z1\J3ѽQ=mo/>eWgGKwb&3xwxK %&wh" \5,̗$ȿMJYk.NG?7;7j%!^ӠU>&%7 KP#2szOE5}Ih B;\J!\;W"Lje=D3T:qRېr+t?! #_$43w -[??|sW/6 qw#f:_au &͵" _Y7UUK eTW ~)ɻFZOшVAǓG7DXs+*0Vw~m;{VDDu)5&˧oB=fzN-6KMk-"~OG Gc8&[1OdryYs[u5ڌHmqWZe첐"pM>\M(1BhisH>O>GWj,)0 J'=L ^,-L.UQQHl].݂زToס4o:x0xؙO0B`wݦ6Ĝl`]Oƹ9Lb3^'m_PU5<|ޖ륨C4xvUĽg[ppVQ@;~ )6b{oЎŏ~7w_b>}烮G<}?M.sWU3u]54;.lύny¹o޺ /[ M-f.<1T`Ӛw9OuL]E8=tå0ixE{Peٸi3Z-u3YHx<|;;<6sCtG/cR^kG5ﹽ;,XYrִЖhF)@>rƨm,gn]~t~+Ƞ~`k[ؓ<52ǺKr-VsYn]TٝTc1_=Ӽ{Lˢډeel81τu!z2)YY!3[-ֵ&9h0<ќʋm#U#v=fUįi?˭<ʅO}燪C!=WT}&6ʖ0N0n2Z2- 1ҕq=)n?NVKl1(L D9a(0!+ ۃVo ~7-΢| 1[nYy0:~7'# 7wOx{U%q~loŏg J{L4T<{[{5A7IO4zyJߵeǜ +_%x_Eh2 <8 /~wF&?d7J ^ZH9KӨ]^tzd}lci7}++*]RRt(^(Qc\ɏb0mA aR($mwy;Ꚏ~1wP>֚9h2lmƄdF8Y9}.ɸ48`%-fc~Ԁ~iMLA!` |`纍]w>mbڔOܑW^ns3;5_|AmڀHB7vO;2>N˭U9M(23^!rtb$&lgz/Y_3ou0[_ߵLqh᱕eU.3XɛYOՎm`1Ʈ7LnYscu܃I%eLni^6a~{h+o\u.d'N {xGotW3@\XJX}-ݧB "9q޷ZuH 9Lf3mIe[t#C3cs<YiC +⬌!řl6%%F< sMpU;~)P;Ŝo&*w51glx,mm'n!IrϹj]pn9cJ,B6Ss8Di0@eHTPy=z2蘴??[$5F R2,F4Յ(R-fڞ(\uB1k/l0TV/8k|`[} ^3b3@r=]8V׊] C8{yR0mrFSUaޱ!?l]rP~s f[#(pfncse侢ͧei ;M8b4D7QI 4-FYNUEPcm :ijkZμc,cP: i8IHϾPMӱ3J mvX&2@>vzל׻M+f$9_XdM sDid!R9΀/ mrC.dhl__NI!<Kֿ{w,C"^ F!^\SM=SwO6DbVb+8t:{W ewNDr_;!(BX^ R`4%K 0uhI\F%;\%s^s'l4B8q lRݎɫ}hڒ8b|ћMMh[ٍT0B?&P;n|5O7/nK ɸc.zkL_b6's;;fx~b]U>܆'SkZlwy,*]lCvxZ) %`6Suș{#=lƩmb=cfbfą8!| Sq-Yxx%|.s䷛ss9U]@[Dǁã7ڴmӵsWCwVr f7 NtN0Mv$ `'&Qd*κ<~ - #N\dl x(6wUYfT0:ąVm)Q_Aڮ,^JN9w,Bgᤙk=.LSjqtte_Tڔb'3Mzݖ[w)nliw/&J^$31%Gs=M/qrr+u)8֯[p}/ߊOdDsMDL幡 1L{mULK2'7Mr4}3<O8GrE\^ۋ6»\E$abTO">9V.f! E|CXse9?78Y2<'@Jf PgWi\#SVjY0I{:Aj,TiX4M\g#W\v?] lc9i9rz/^-TgMn'e h&s4} SInhy'2,FZoKoq۱T2JGMzs{<,K>иbL9o[:bCϛg >~ A4@/*NwJoP~#$ևiIeեc6ܱ=`9Ң ZYJ~yaǒP͵OO@exοibn//َ ;qmW nyTpuj>o) Z /C<]h UXoƶ;yϑ辤~1- qN־z.g"hG}m9,y{X6%)V~8̄\;>E*Oe[>? SX <ʏ˫. oU4\ь _[Z@APyWY 0_qo9l߳3Pq?vax.]%6W'`-_ctQAXǓ3eJI Э 02d~S$P$*`޾Ĝi֫ʇ1NI5 7mUk '6Q5;xZi/Ycrg˹e* On znqң-S_mqX$+o"mO5pF̌'?c\$1EBckG#[?s>R;_ygbXBk.W6I߃G;XJYxԛtRotK`p%5}= vBZky9jE4q%(‘K+Gp6u LfXqs,J(̱{85W]e8C\!rrjd{nˉ+dƘs8tӢ? y5S×-l,7{Q$#7[?RdM?66*!S_yϴt;-w7|-/cjCZ[BBːFDz)s)rh]17.GjarU2טZOo:mr|죝~;MVޱJX_ bժtJ(h[jP$v}xGWۍwò,dVhf {{$_l:J6Onپj'gfDot "6o.iltlAt0f[B9/$kN>m &n)$s=T+.I aI}"wކ9]*Jeg+mo)W&5 =<$he,v\q#>VoptlOf4~uL,y롷jl:s[F9RpQTOsK&%B2nJr#1L<UtpB1?/XDa5bJ8i|Md3\z8ο /by ɡ/쬅Uﭶ{Fu 3d]x_Z>lFb n%bk_e:BM|G:apљcp;hOcH Gj}эCCj_E/2R{ꚻD7k]1^rjiP0a-ckIʱ :n@mLŴ|Q(BZڮyÉ8t#ϡ1g;sZ,2CCic۵{4˭crmHuq:w!LANk:mY-[Y+mxXiM"3~2_s^^>/_s bi"K5Y:nvbI< 8fK:4BRSG  .=qJ0G9>h `y%?em&`*uwZ?%diA,kl96)*L좭ptKmŴ1<.>e "LÅ&R7\CsXAGfwVy"'j؍n\icr_*/lr=k)yZo86O^8[n[hjlY<@f,TRW?-p< DB}ujhpsmBs4s/mݓזٷ$ !KD}M);E6F+>25'aQi'H*'^te15хv\_k̈/d5`@2JĘ)Bs@Mt]"n9c}.'y_N$+. Y)2P^.7¸]ݩ墜oX럚/bb~uRtJ7ô (~f2,c<&Q~Nq|6 m c-TDe?hޒQelgBfp-P-1@|;+D"F}o&o:.*iGMw^9xJIWZN -u@C=_!#e;zH+i>Q 3]xse<%z3+ ]@dQ7 !ກztːnZ)A׏_GO_o:?L`ǽ\_/9{t)g"f7Zm4 =7`e^LvsxZ>b ݂_42@$E 3`ۖ)1 EE<;'+.lsc dcoa?;{]v 8qWȓ|e2';XVobi7՟x(|{ kMc GzS& UHWS^`HdۮvD;fe|1bhiH1&cm; hPm6~| #U^AĸPL.`, K3H䫤"㶎l?tOKW5?ۡiGEy!H) kEyBt獖GmvDO~_m#0!8Tjj"=+?k_g狌ϋƔO dĻz24Y7IFMJʩx,z7C~۷׷W nre_Vg)< Z]HBbHbL(jFj&{RHbpn7t(8xȅJCWjf@ S 0; t;18s)֡62!5@BHtܭ>Uȗ&I4H8qIsV`6l\H,dqT i j4ۄpJ^lj[viA**|(U; \Bn6=A%6cBUЄ6[ز 6J!B6bܷn*WrQI5ȝ@*%7KqZ 4 hI h#%x\ _EՅDHKa0:q`zF@R=Ep@{tmsg(&̈I~=pks\]ǺEx|>ҲWmG`m01D/gS¯9j0ߠQsG rQ3gtW(-X]劗+bt\?kQס+Bvz( 6-U6Y=jKq2 oPsw\cn{x a1Zv%}֦>>h\0|&_yN]/o?ͯc7w;8lSS&V}>o.CLTwEHiˑ+ #|<!y7 ;Oxϻ+cPq'%(~c9^3[ǹ_c}H/;n=n)hGo2brrO~hr˻&Rco~_+z^7+N::!tc:> A/;d-7>r`-{Aékr$6) enl}]ws%ASqۡ"y5ZO~ub"Ǡ讣qΉmhdÔ$'cANN=F:xo/]lW׵2mSԪ&8Ѐh }0@t%$e_s]m^`SRu/f# ̆Suv n륓Al7 DjK_16:?}eO!cmkR^7Fx $:Z}R6`Ǫϧˍ᫟o^p;#mGMx_}/|w^wG3[i0RqUxsݳO ]÷f'[^0N~&?|W'To$<\Icӷ f E\{vwz sكcI} ;j4#IEeiW1:R6ljwzĄ12%`R0;dpTӓȑN}Ր%w ,simzx@nۋ9?GpeADrMrCapݟeoo|[RÌV x A0-3.^]麗.nr I9X53i/UË,e{]bdmTLר?hI'=~Լe|zY:| bl0`i7-=Tb?o夓} d?.ysyobHWEb)ӥmd*ˇ+Sc4a~;ߺa!I/cnj7R#0Lb S{]#N`kw9yUa=],q CJcvˉ}w!>Y3/FP\ӎУNJrsAcmTr\qratlطW_ o]ǸyWI5X9A`kg7םqˠъҘI<9gVSEv~;=o~|J[VG"#(4Vᾤ_긲%cCiG~@>}=o9"Yߚ+q[<҇xҹ,aQI%YSm!Θ.2,r/6|qhݮ6#@d=W<~7){??ryUpTI =sz~ ~)Yj3͚ Owl& ՝<|8|kd0aTǜV̼Dy5Y# [CJ )4g =avgњxPp?r}-w& 9@zA2Ǵ91j yMY=Sʎ=ٝ+lzp1{ƴR >&PжhЃ5iYO ~.2n}1OfSjVɩ6fНc_PqS}K,.>La3o0#gDi5Zd2Oʞ JL.&HhϞI扡Mo;KE.]9W=oқ/ Rul vӊ?D/9ltk_/ʝ>#{_蠿yos7$VjGR1,VgbwVlY%Yz 6bF.lVl0bŜqp*vKL7M,OF=$g.0WMvĀ:yh{l,V4[! g3)@Ds+IMSd;8r YO1vu`~uҥ:ܒQ.FS$4HFB&cZk ($ Pȟe5uY AKS{8= ?LX!Ll[2[xZl83c-e^Ite=8ɮneRY8 ԯZ7g0˙^Z_;dit˅@zĈ~خ(E !\AME0YX`ԙ&'_Yle!ږhTd0-$쮨2bstq^͑~ Qnbŧ9DJ25mJo KK&Hš]D d4:1J94D3IO 4bRUpA渦(/Gh"6ͼcj빠8_Ɲ]`,bQAS9/x,.3L6&@Ƿ/XxNj:5;ӽ5L9P<{`l SE26tItC4b -g1ܥH5/Gziuᷖ7^vl 8M&Q `l$#8(@ףZIk5"i4:"^s8~_wGK$6-W,jA'͹GZѠȞFJ}ۻ{E!URgIj vlG+ˌyf|5Lpĉ36=Ǔ 77B4 Irr F_4`&aK_ AB4AL"Q'UDq߲ 5YyX8gQ,=ʪo7d[YYewRSKze*Y"s2f*3<^lg"o*%&5ն/8-[h`(1 P(Rx6B 5f5Qo8 +X%C \sV#fτG(!q'_uW;kQ-N1@R:ԣY}p`)ˇ#ǧa"\> ]1A߫j&*c<e4 L&ؖ0"6w;\9ofv\ɛ:[{Irh{{اT."q4,ī F"X_X4O0Эz5X91w_X=TTf:7 e܎O{Q;50](VJ3+,A䑺\>~|JqKE#Uy˼u (֣d7%vc܊HD܆[m h-)JdحČ&6M`/dۆ|{w]^AzpB #mêؒO7w޻S||>$1ȓAQ,-9nqQ++,i-VK2[6HsW{gŶ[|7{}7dHƥԥm4[?cfLN;UU1Ĉ+nL $rg%_[cgmR8 gDt\A nE:kf˕L P+ 0Swkco%Ӕ()1hjQs6-iܠP5ݝxnw}ߡSr"cugW@TҲb@ehg 0QǙ;bF[n8qӎ ]n )@7SLDbr)#H0(ƒG#ތz/Ym;a/Q |0&?dAe[: 3STZOE*[>,`NV|qaqkp5}{|P{W7>}mv;\1ơbKo}u/xN LgF3axSQ3ܹC&4yzB C1a g1},hޟ3ftx!}sSeQq5k6f.R6l?^-ն4[. kH`ɇpߛ1fgdE5| v\_Frv^6^WAa-)agͫ1Э_C%Yɼuޟ'3c/Kqi:q>}FX[1z8GH]ӻ|'22v38tڵTVOBi=QΚxݞ|s 5=;1 0;\تЊ/SW]7  =Dj}o־η8ݘh2OsQɛ/0}[_ >?1`&&b[T7x4uGT_g eDۧv?J?g7OXxvh<_[Kxq=EgqXfԴKv|Ωvk:,ɤ=-ļP^= o{>v#-YiLa#Q#z ߒ6Yh]rn,.[# ?ֈ)*"f5ˏ3?l!G>,h$;@H !z\0/aF3~Ŏ=liB+0zCZE?bu  r~?ϼ_/d׃HX62L8$ TG,(cNy9$x ]a բ"GLN-qc3<1M܄GEk dl#3hgT' $C%nBg][^^^0S\V<|1pj7*i+ 41]p ##L=6{>O{e=4ϖ/47)SRLvQLV27kźO$M":des0+P.غHl:?F |9iaD!.rZWtl+_G8=Y m).=?ݒ ;_η2SDUet H};N 4XA}ysǫg-Lavchωqhvdk*),: ٌ9f9NΉ"TͤHGB (uC=6ыg*(q޶1&C\vZ%BSygj }yxز/uJz5a+е˛_r,qkh\ *n.m- U gziIa!ʀ}N|O)v[q1':iߵ31]oN>AOB*ir\xж) ^2+I@r.$Q['^aLM)Bz +77iLĄZ֯,wE#;}xǫ``DTK۟o9"_mY[ݣs!G:VMlyMP>5q%Nґ+wEtҵ_Y2_gg|5c,̺hm9l_VB߰\76Z/=6±Yu1;m7{;7}Ϛ֟9mX>3n@߬6PudKbWsHf˜WӇK <ւ$ͷXÏ'Y@!bkJOjd%g8R5V30DHcɢ,HjbܮIصb&"թW}96!/]T1Lmc,,kwI9fUN6_πU3 l.g6 ZX(mLcnhB!3L:9reb1Dq~E|}sW{OSzpomg-qړXf4-{Y fC;V?پxB9^M$Zp3Er\e:w˵zu=4꾌?l%WNӇ^àEEC*h CIHnIH#>yJSfҋtKIo3q1ܘ.eS)\bPmnػthJ:\hKͺr:!Q'Vz'혈WrK+m) fO As/\ЁNS?1 ́B,$.%`i6-O_?FdzOuP飸ٜGIFv p@gf\c ֘ 9Amv=)2-9ED'kujC9Ƣb"k5XOcΡIx;%=~֊UMݪfpjĮI58D™Q.,'꿙(uB;~ {9[;YC9~ƙ=diwn>w'{p:wo3M9-k.%J>?v{!HTC&_^7#mƎKW'yݻ(?\콤.'!=DvkޮL'x~YjmOiNd‡ڵ#;XGe~cLy}Qw[_˼UcBIO_1޳w`ʖ3A7WPqf[nT)L“BHª=܄^\'1" F($ަϏ &qGۊgGXQ`0 Dǿ!iHx/'|\CW}/ aduwR'Y1p{\Vs\+,HJW8e3M-u~Ug]o=R$ckq5"K9x .Qr; 3_R)M)ĭ]Ћ\kc {d|:aAϔw`8/mLVju#=q< 裦%[f~V>U=+d1.ubq̙ jν;M Hy,{>q|O-9picw ni`@G< w0H0Cڢ-N!h44b kF\a ]C+de/jvl8/ zHtm ;DfqӸy5ZE4]´dno}p@{Msq `Kͷ|Z/ So6+YH6(?Yho"x_?9:z.kW=m [F_cRc\e \` aʿoj^&B999N3Cch8^ J"D@/x9?ڲg*+rZaaN(-Ct\/〪|w^3T`G#i^kCy!s:NY:z+xG{0^e<өt1evy^%W=[m'>,qArAEP@Z: 6aHYt/9ek>_pҴЛ^r7jBp 467I(bUc(̠c0b^8gM?/L6y'l܎ U/+ ,'X %HghT煴;`]Q޺oߑηҁ <Cs^߯d{o^_3ϞgEJ]gn ڐN K C`j- 9=UV|nA\R9 c" 3!d "ę> kB1`0LXpY$j0463YUEEASA+Zi(d&C9z)U|uIgnjjAxac9kEX1~)lj43x\M!%үn2fk0ɺD}v~v½Ɨvok_U5Y`7GU5xn|Z:~PW/sEEOC(Xp=rR=FN*>K?||[),. C A 4D#$Ẍ\&I_'fx61UYε1Z*+'V=N&fRr+r5W4*_XK*n G Tb[=a ¶%_B4u87)ApA\6( j(( 0'H:7L̴ze!}7ئkE72r@G,eGL&Ph 2C`vyUIFt[T3<'Tm@+X !-h3Cj â0AS *Q C*ԇm%sTTW,:t>1t!Kix-4Rj{[;33fX3]C^e-qwҬc nΟYsGKg ؒTUR<*N`3s?ч;% Z[-M;ĭdl0UF'J}DHC+g f)=an!V8p#:2.$d@Y P;%E.ݔb,e۶Y3c20(AĔqC¡B_{A7` >M4I/;VAG/~?=g͑c3f fg k7_u/^ƒ]:,N6 ~,.;;7@:,#t¿;pǦ^vQٌSρC/n|N=zˬbPL"j$8c%^w~ų2czD9E7a繲?;rxEA|2`gߥ08aQf`!LX١LG4 iڀ݀ԂDQG@_TBcAn;gZ˷L_ڪJ^}<\+40H~L~ icGN!8CӆMAAfZ:[oR(G=d8$PYCx:M^[USk.Ν0F!Ri46ڈܯ+lnEwvށ^}F\͈h34ymym]lYr"ۦkrvZYb Edam"rA'_.LA 2Or^l sr|\F-{0" :h'U]~>Ny(e<_VB݃;U}.y}䓩MtԘBEV .%Iv@ 2_\\6wuJV;,%+%p*g߁񃻌-R9;ʉ R)5 UlvORg6n1v;\=Oة#\L4`$IQv~A7_D:x }/27ΛctT4Ta{t&ETkȊbv[չBy8+O,{]o,f~؀TS'yI\4VT_jyTzgnsٞmP߁qLMePL;d睃FO>:G\FOZ7Iƺ2;{l3ȱL&-Z&kQz,'/'7}Ui4Lw7 9p&^ǃc'}A+'|.J-EQк/P~\#~s%O_r˿*>^suh߯į%co  GI෿\Ϋ > 鶾.TcM>tP eS?[ڴoPCjt!HN|Qw y8vU;kQ ~"b?[;"{n秘3>7:^MiX[7Qö G ZZne:2B~:o _ v`Q=ē\g%3͔gɎLW28e65ѲcCʘ<+κUwm8]L~=:4qV*N>\e>{\iJG*x1\7ЮOQ8tm֫M֕uE=<4tۦo߮X2B_"ԑb020b1Iae[0 $lJ** eO!>ꡲNkt^?^u*g)=lugʍXkA-HI) v9{[ڷx?i5a'z_m;~sj&?-~YA Cyw_9Jm;n+.p20U-SHam8Ȇ2haY԰t&?J .>%.Oc|PM2T阬:0dj;3% m00|f箙 b6i02C6Fr{<2k>$FE9N4aQLL|{+A -¬X@h[C%Y $feɔ){\ri60Yk99PzF ( PUFvzDlZ1A»[CH!)yO4]G1!Dk*컔ݰ= jTcX}Xg*)SP;T A޸^r,4HBwru!"V1ZʖkyW%ϼ2fym<_"iU= ߝ杽N[ŵF8_HI3l?~<[%9*(Tܭqk.I2;Ǔ hY!FD3+̬O׬0ɄpjC^n(@=0ogx&DF0cιȈ2eu1Sn+di<_RM[ҞYEuPURӼɳglCOBaYDQP LXE09[LHEhi~c%q3KQd\UBe8@=英`|jR~Z=Nb\klUMd}w::~ׁ:]nf5fßG~g^{(:hi m1Lg-A|Sw+Qw]WѶՄ&DgXQzP` Xxt;0¡  倧=kɋ98th%-8lijϹM#PԢLjRH@I 2.b˥ahy(KIɚhͥd_m5A9w?s/}t@q)aNODZ=*?9Y=^Rͣ-y9%.qG Ct[cX6:0L E*@.o<3!m}.3J y;ke8Mn1N 3bH{}>fB\Iތ?o_6XD,-R48d$`!R Wŗ6v?)SӺF V,m ٗWaFL`?Y<6uqc.*| 9Sp%?ǡV!z) 3wR˙h_xd}o84/2s#l u/~c%Y8]Ngpcv05x__sS7exޜ+oauv~쿧t<Ԁ"ST0_d-@e”o &ENݲ~cDȉ49^HϠlݏ<#'':sh:;xϝ:csH?܌~dŵS*$] ̔2V1пep@ gW*al/w nhe+غn5b4wbJ6̞Rs-iXze# fTaޫJu =A;VeVDddV0U,& E;::n4-@m,#MchwhVkxcVH]dRrUJpFD|KcnVZ1F1;e StE  㵁 ?o6píj hHSb=玙tE@ ti7}en)` [ XPrʦFX]L)!_C @ V :><M{`nPO|tGDW Y b[.mb b"&64k`A-mIb-4-*4 rnTʨx@~(/ü%rt|ZZ_ϛF"("f )"hz4M_7=)OdD`q0!nЅn3TaLĤ%)Tmz[ʄT.@ֺH4HCr(\ $BVi)~dmG%B&E_o--n^[4`Wb5&o{$B82.;L FmBȏҒm-:!, QdvCTЀfj i(R@՜ޞO,%wx̑J'/5D6`U`, L Ѭ_ӷLDѴurl:,x&u~ٙsƃJJ{z(KL%|gLp{LQL ư߮0T3w|?EeƓ~'F35~$qөFWfBI] Y(.~a=u~H~^ܚf)<*x҈P` (dcOoC=Gއcgaλ~/锄KAKJ)bkTxVJ/[0B7#! M\FA.7EҊpyM>e-ka(X4+2{=w{a. 2)Y'!LXd F6|/f,U ʡf= fPkvm.2)!N ^A, (!|ADJ"Q(e&̙FM"Gg`hD hWF&54XpKۈ.0\N$KM`Eq3Wz(@ՠِg q–c6]CvYy#@]Umk n8g,,z ahlj4 YʜZ6un s HKiJ 0ZU\H<(TjR.P\=^mr1 ,U[ZRFhւ-E[`Ж1*Za`,Y'AΪ:u@ϓ̞&ڞM̓JLf 1YəQ%344D)ļO^Da6_mOĈE*hFL$4f%ef6A%Mr&*e2 LEY}6Y O. |])X"6R67ϵȔ&Q}U|r}^ ߛy<04|I*"o`\a,vmIUb}X@&>呃$ku}w$C7}w([H9dkʹ^|UcgҐt(-3t=uC5,OL^ qUZ9WUV@6lϳo"ˋ]<Ѕeum8[6h Ԅ ((y `mFRб6Kp4K6)lL[Y%|ÑSvntT0<3\g9LX(2eάʱ&dºni]{PrV7sJ6(,s4ur1f͔u{I`ϰt\.LءN$ddŇCVz%MPe=({zwC}av52&0ټݚ}[bZft גժF$7 6^5f{#n rto3>8%qds'ެ6{@,,Y*vKXzŹY RWH8/՟]7h7tϐmmK6 U3U_)ȕB76q!> XHɟ䄳woKwGmφ;dPv|a|"KEh+,j`Q LccDbȠQEScO^+f7'8 )Hij)E /hz '%2[%!-cSir,F,lJZhS AM 3JSEv r-')~}"U.̫iNr1*"P_ jFZKReak" [w3ucpT“B}i f}߼"1n߁>'}KU|?I>`{ M%ь>S]-x{ (F0ief @2 +Io 2!qSv{x5 ey]=u([9eWv ¢ѝ7.3Ć*!qzfu9+5!UTi^}gE ,Xċ =[z jnvx\'ZCh )=vfCG5} /MBso.{2 Urr&?[̓DQ[d4R͊km`۟nlH DR:SM}k,J,ǯpQQ(ʛט"Z5)A2U-C4qhZ4mcEŨZŭlX6KѬPa'C~ѥV4L FE H():n4 )=קo|(Y(&l2m!IoJ2I4zJb)_Dߥ뱴X6{HmRKb*Z0=c!vϐ* ٢ E- @^V7?7qCDbыrD~̢F yhқtX<<7S/n^eNe妖N7\ `zbCkUta>WK,0@Lbe] NӦ0h]#۳\o!UYoxh&X/U1>r!4N// esK-1VE5 lVʰሴO)W;68K^h͡ mKwwvx*vh @>ݓmeϛNytk-ǐ8nfŃh^\{aWpc(>XK̩"F U`65E 5d4X-1Qj#X)oߗ,3((aLf}\7SmvcQJ>H3 bm0? o!(H~\` ]"T Ēs=CN'go5Ib:WcVɽJ!H@/AKBxTҗ#l~6%>C=m~Sjm'G#35]`N x|7TyدUgjL M9}R#TӐUw(fn^)? wuӘn{X6̖*e4j{OaO:l~Jx M-%vquLS ruNC ;/B)Q7V"Q>hyqjFoIԌ.L;J dt8=GS0ID͠]D2cx'okrw[W88yrUϲu>V&yqMͤHwRӛ%__mcl} OWi{ .r RFKUhytpNt[ NC!JT|]PWX8NV<+9 KEؼrՈj`Q_ gn}R|١)Ur}3;&#QXSjYIbB@hD9` ?Nipҧfc k*<.HZ$ ̀OQZ%jw9GP,#rZ/&o@6\1_[M24PôfPME d h7>-j&g4aqCoH.v U |eJȸvL q-Y 7 0򂘥Xr{ j! H1b(@X]c|L*לKCx[$uN9rP_K9HsVhUY^CrA=ˤJ\̺]f]'/3~jjJ'g]1U1"3T#  5FGޅr8& 54w!&n(PO}A1㞠M L08)Y+&9VA&Y(A'Eey,2Fm5Q?d"C =%2eM='Ȕu>?"ȪJUC1g9 fjf=Q/Yzw=Fֱ K ,yh7S:'.F!83Jt$ٶK)g7 f cC_+A3.uFնR)yL(>5<:BDh)C}XPN!8n*3յ;,/~D>NO,6;N3){"`?i9|-\*NC,Q%8ʖ_,"KLik _:_ K$,ư`@ˊҟܩXWRt@+7yW\41GBc[],j4 %[LCq9lE@3yEm2FHYfg-Z}Ҟ$q7r{Hr!T)TjN&HRW$\Wu@>\7]fȭEϞ:H%ggs,Z[UFMX%Gc3Z&Rr 3*2YSx!s]'la.fٌ{ .ň >s̯\|UgTt9xx&0Unuwv+{sve{(cI hH 6"dp˺|ܜxR [p!҃'e|6L^ +ח&xO}`!hK60sR/CUMYwOu}U~jib`{U!1 I# *dȷ!: g^2aW)BqN$ ^(JY1gŀr6eZ;Q --|DA * =h ?WlE &'w*,L@ euH m] Fݍk;>3cu3K|_9;T]b6>d_IF$OcUg#b0~`e& r{oBrfrHiOx+x>$ܤæOyz } \wa8jNXwZx&ݜ,?$wjc2ΰcPo$,g]>=$ mFRyTR[njў1W莇KwCuWwMerFd;PŠ;|afKQe(L+Ѷ!}Ep(lvDUK2=b(_H t } {`N/;DHgy8'=A+sk}OH.,q:xl↕u+b_XBhϣ5 6i&Z36U+z8TWu(74Sa凱 Üu)y~au*=<߿G 4xs`f߻y->@I-N1A1F)3UM ǝ:' qӌt%Pc lK' QE- iݨj)A䈤S r,2@#gIctz?t$.a[P Z$%y~R8VCf!Sx`СT<[J>g? ~Q61oUi .eҾ!7ja޹<{L oϰ[D!p"ߧilicHR4/ /K h"X;2S/uvC)jM{ yi?0xDR u!pzΡ1EO+&U< "go1N]3ܿoPjNT9lW*#2#]Uq6E5}{͟z)C58-=JV7/ZϞb=岗&nAPT :;ϳopA4]Z8V*G'@$1\TLsh(tdy0?T8A/+NtI bgQ;${+?w t,hؚөw9=WŨ HPun! pS%l= *R3i0_dO ۊDkk(-bK{6-ddHDlĄ +bJ|#-moӝƻH+]V^wM5.r0n]^0-4TE \ZMUz!I$ ]oJL9w~c,6)QwN<&e~خ "{ in<./XO'bq<\_4-˹|GX'Ő-}sC`xG-艐(x`M/'PeK AoVFXH=L6h]7"]}jܕe~SJ1 FbT]Z,3`Nց VOD!C4Aِކ㴹̼xJ2Ћ~ E*8tYkf:ze7D^_mRQ*){0O_+Pqde ͳ^&/ݒ`y' eӘV`SÒ`&:MBr7Z.m¨@!( GOy UIca}\H>_o[+'7ӏ82CA:lu;I2P}0ǜDq|c%)z NvgPNh@`;ݗQP!44c\2.:"+8觤VS\+߭։\V^_ڪ_:TMMp:jEKVlp(;40YS6shE(斏Ny5zvD~>Q0D̼G |v: +OѲ?t Mf ?yY&[`;Xxn7nr]/ZW [xO@v2cLԜ3<7=z|ֹp lYR)ļՊM&h0~̆\CA8SBeˢR\t? 4[f= _ >Jf`-/ פakhv_}rXG/I+Qګz fKUZ8۬yfT`wۅm2>0?_]@TL)>;$d{-:yHc]uL 7}^ݛ{ W>#>DŽ[5o/6-fI?úUVB HC}xYԃIIiʁt[[5( kږ@_Zu h!{t9QKCM>NJ %hTv'd$|=p2>s#xUb#V.񩒵7U$ 9zdzq& җJ3Js)ՃnŻ{=1iA/3زu{y4+z5Ӏ'sPsF){Z -A 7g:ǼI@Wҕ^YwG:z;VtƫRqG/v>Ut/=RZRWwr9G^xFdT5Py)9D^d;Za-ǚR/>.4rYT|h6=q/7O3_D>L򕲱Hrx`~{:K @5I\y:9X/3s|>q?#;[kt( e dmڋuXw HenRw7@R+)O#; ]ePnxҗSߤºC*dU(\#{m%/u-G}ZGI/摩8#"\|ea\-cJ_̇3fܐ*YUa*۝T㗛{YK$WE$z;ԡw#YQ?JSfеgwBػwՓx1{M{%>W)d*=^6a.G#M N\qQ_ L]% ѤA4qۖ䍏n )ƧeN#r#pK Da؞Ǖ( T = CXzWZzjeDSiQFp86@pF%8{/c 'AIfskeD(-  l҅Y%c1Ynߧk7hh W/u7g)uͧ/2 EZ 5T=G:+ƆkM 6 w3q䢓}Ű+~|_ͯF4`# @vRKfcnǠ(hF@Zg7e?HY칆lrH46JwiE{kvBOFՒmyH ɣ-I)љ$ '|F3_kT\"+]n+ 'hkIe!'a!ΊMya*rʇޫ삝hG瑎r۾ljŭOI_uߞRQyy jVԏk|-G_7sx6(S^L.3cip7-L(҂mtcI㏅fXAP"BA&٥+LkPhbG|X9', ~RE1PU.&r80"PPPp,Dv.i~XG҉BѡQՕR/P}kNz5 ?ܔ{Ho-'Ni;49(q.])k&cE6W{+5 #`*؋[OZMߪ: L0r$W'V}le؅$^2dAwȦkk~P*J轗8;f8~# oZɤn<WNl>g ZG܁LȐpbA9z_%ۭ _Tck0<#h3I_D1֮x_Sp`K>wݚ7"@8 1cB˱">opV¶(>¤Gj` =((wѴds[m$PVJŵ2UsQEgJN3U!d[z~0t;a>4vlf"0Ozye?z.X\ИC0D>ݰ.# M@!{I,W;u` e7m'Z BVߐ[pUgAq>;ɭ r*:m+gS4e\_2O1/[.!/3>:~CF !%:bhua+.ζY@+iO)AU$2cb83v$(VM;4ĭ1j|,![mcT +8NvIǔ\Gǚ#9Som tpO1J|iRz07:cFt>yT-U7Cڇ9~e EZ'pCDIB#Õ V2!ϩm m8sǵx?q( gJ7/(Yg=` ;Ĭ 2[-y7]w32vD{LcGH|M*x"=r·NQ*p2?g245f\Dc)Ȧ?}9DZC(ܻsnbV穳fJDMyHW)k<vˑ.fmMgj$Ng#=bKFws)h+-Uo"[b6zB,Ix@ap6] ]'qZ!BfjRl>gkO

KpӅ+rx(TFUvC|JɃp5R&:j`:25 5KRg?6 AD_~\wr[3V9#4J.Q~H]ʾ1hmސ{?$X}b\~J0 NM ;U+%2U4NX52R!fʒts+١5^Wz²Q$S1Qs9`gd5HʦSCBS\(#Tx\ƻn.[hP/~0c ˮ' uŐxR^J/dX%k(]qǓid/_r]}z\I,ϥ<P2t p<Yq$ڳqa2Fā6$,?Ĵ>k?fyn bFћc,oHۘ)ƒ#u)/3,2Ի^;zT`3t06AP(wқI_l Əey\ ecoIM 5(8 #4$LkҾ2kʎfk[!. ¤;q9=_Ki! =1 yJDž'K/nr@38ۺ$+t}%fNW~m[%L ϻ@Nf3DWZ!ѠNrM\vg;\36ӅO^9dl|&T93aJb#xv34ik{㵛q#^RkJnKO6Yulabƙcؽ" i.؝w[ ܄ ji4ys@1e*!PO v?.qې^ wMjd[sX2s)Bw#-`&ɂ qz;$͞9I=}Mt5hU<)r ]P+ _v}(jI[OZӆʔO҇#aG 5wqWYZ=08Z)Ph8wq,[ͰV30un2)3gÄmir sə0C~I'66]u:{iZ?=f6:'DAJsn񀭓h B7d?&n.7Pȍv /0F(a2̄>Uμ#n& xFetغ}MgI\]tѿ; ! 9[/TuʪkC-)s׸IO|QuPOBȒKO_>Y)_ p1wp+z3,E 5b>|tJq}w$+lr]z+'?u-J(Mzaܢ(esL̀> D{>Pbgr698ϧ+]^Ƶ"@i %M(fUf.56RiXcڂ HbĿbzW*"1 <8P=\,tyMT7TCm3+R^w k0E)Lu]k$\g޹f|d6r_֠NaNH j}Ko 82]o|W%i YސD4Of:}^w}ѷ-؍WH2F~s~0tF؊BRnEv8F[%ֽ!md,.IJOcn=_(bQJ9 v\:KJv KiJ@6+v |0? 9v[,$ߐ1~ϨιZK^ʊn7MN/䔺6/n1).m-Aͪ|܈j6猫Hᔅ#ƽDZ?ڳ[|@XwdL'LrVpCvPDzfqyK$|9/6awDj[pH1,m kGP?\rQ[3Xa8٦&po-6p#cq33{Y{s:pQ"=yu =øD. #U2gTLfz{Rv-dĎS8eЉ?<GzEw 'ssD P+s 5@_Mb{_xT=rs57 :Cږs|{j(#t81T <@<.?^C_å` 3bpZM 4{{VfJ. t$NGP NvEmnZ٦}vCڍzHDLqE6_ޫ t|m'\/ָ, '.kR ^. )ͷHrG9h8 GyT᷃K, /9smz@yw1hmC+Dn^ZCWG6|gwϳJOHFݍ S+go?HH<)\%B 6 ybEbEWu*Eq^[A4*:c}zF<3rشQ1D:bt+;AR?E!yO:} fF%׉%E5bb.DL?]mtGvAtaWYTki\V*@_ kho"s*"n*oY_{[K oXS9qP k( Hb3e|znL:}.oƌoeEu6&/_Cslc*S5(g"hPk(0Z$kMuZ ajC6YM(>HC[02)8j `8a ifgS;=fENA߉0GBV%4`tsӹ.A5|gɣuhB [q =scW$_>~Wt`=Ӣ_0܃ oͩWtpk 2Mu:-^n+/F[4E @ 7i*u%augafYsLx2] WkףK!/:?l~s!hO .(nm -pjs E8A*d! k*>wV% }h0| 4Bf'O/M^úvRʴ:|/LVHs2 G[\!wctKw^;:=kr5X\S.b@A924:"pm[rw!ּ<")mCD_-D1S c9ab{vۖZ B:# 5:/1Vv$mPrjA5{<8VPfda!7h٥`q Ņ؆\yۯF#`}1: R y_#| c$hE鋰Նߚ;ygot!F2:d \]!RMv\TҞ =,@eIgaB,H۵><Nm"Ӎe\GիhX)UMPH3J.kw(1 (}IjI&J qfdh4 < Vd%l gMO!_ SL.eoYɯc| Lf*n6ؙNOO[lUWBHUrI^zD +XLJ:T4#Cu[H}N t 3iv@o jII= /o ;ȎM$UBo7\b#rQa\W"I8Vb3~5LS9}s% }R|F$$ees)G0&^QͿQY2k&~<};M#v4xӈ$jN"fmB1+ 9ࡼУ \vul轼z/`}g>}!.2Y*e7Њ=i[4@`ڟ>Ձ/43"f^KP^__ 1\Lu:5Ra@Z©pΠ svɔxZ+DhBXη[`=r49Q- V3#L!޵~T9yr>'w A JF* B˺j,YsD=KߘadS('m}? I/<LFIMBtFD࿇97ŕ P bˌ{M=>ڠW[tD9;Th2 ?Ih߁{&kgFolPފj=l oL}sĢȍdߵQ$Hwyf 52$~b|%j +ħ d{{$Aig.[O-4 V#hgm /mFdz9RÈa ^W\9*bɂ:Dצ&c&5k[LAQjo+rXfv>ud ja|)|Iu q|kZD:A kYl9:7%]%L#1 4ù6Z:4J|? 4OwP7D-SlT}Hdg^z-Wu"3'D˕/p,K y/3PPWh~th4VN=;3N:WYd57[|2 +  꼀1/k qdpQO9>YzMcf"O鷃A'Y;|y*?GYT^d?:;aF(Vؿ(%.j~YI|Tj4w`]v"We`4sEֿ,)9> m9@B"Ø*mlf;ynk#iW";Cv~(:hr8H{Om j&MfVI1eL Ioq `0‡T]+߶=<\k zMp44$pm0! nP.47ê.4-}"˔~!vbIԙNyg"ޙeki>3!a[1dn\8\N)p^r~T|`IH8߀r?3.ܔR?!!&ޞWY F5߅Ip"l)dB j dhdmbwzYpimtڥIccnv@ Yy. C.@::W=v f$ep7Fir{.)w=}&Z7' 8T-k-Ưm^[T$E=e2b5pI\_֗EԷ -vYQ.&r;202> cZ0uoM>60KT :hGfÓ^:=`{Le4geԳsjΡ~IatCo Gc+w")lЩaŅ}hڔߚZ7MNӡ %axQ܃5_ W-0kM\=]'ko$K>;oPK!|-?= {R,*qaqP3ޞg?yel;wyDN6͞RxqJ9(Oy0V$(TwP !W*CX eDW'vfH:TUA*W1L}r)y2 \Sʚ6\kՍu"vg(b?I8 Qw:12`*:i,l)id Us nғ;`v:5Gk7{6L:R2ѹGhOsbVj mr\H.򐻋3aL=Nc&Y|"^Lvέi#ÂJ>٠8A .5F05\1D}fzi2f#pBVH?썩O{eΨ2:̶2w (o|gڼ/Q~]gg]Nhy~fܞ-Cdǹ9Td!QZDU@BVeŘJأ$Qwaա@9Ϥ`sΜpٶgE5*>81̠ot1EZesn Iʥqlg*#vm4Wk.@o 5A < {)-[ ]Fs3_w~0W \@uetxi/Đ:,?XGt,-PZ>D#=<_$8d9i<(!E:..Sz2do>P1{г@0?D 'KǔV|Sܗ\6L9W%72{NW0Ig`t2FL @ثLvz+;jˋ\YC"{^y$oι,q7 ,C~6J/g`PR-P*<4Ж^6 p^_Hا'Ax츀C(1/4Nц9jgc9,aPra9 o E1mdYZ$ꬃR ^,/cw\:]q[ѓV^Ͱ'JflɓVIyM=i[ 5泱to2M<:eUʵ$7E$3Ra+]i8CZMGUZmc!fðKD+;ՙ@3I*Ü+H7DzʒuCoxLP|Bw005f6GLҶM >k19HNIPDEhxR`l4Vꁤœ3\F0(5 ڪmĵ.BXJ쌰 ћ΍4ܾ5%sѥi k4WAdִnp8ndB.cūKl똠 YsqxEPNW; G(R”*'Ε7.Z7-6ZC^e:5%;"n}(|t r’yR Zя>"1*lJ`f;GIDziUMrŨ,ZR r59`klݐWHJ>clOI(&hbFCUk<ɪi`Ϥ~ޞGފ ~m1Uֽs''W5km~;Tm$;0xaMΡoI,#ddzz3Ib2]&s|9gcAWfDO;m="e0E_\Ⱥfl3?1mM8[ Ѓ{S48%M6׷RupXػUfq[tr5rJ{Uټ3J $HY=/Πd+3,/qZXM{؋~WMTJ;E ED@\@7*v{ %ƌRKݚ>'/ܤJ=.6N+%iG ao ;a(""8nG5@gJlcZYk{!ED޵| I|Qx/u^)6No@oAo.'RsJӚ(ps*hqϞ}gNa*'ע"#/OOE!+\UQ6qRy ˿DsE4 H+<v:B1i5wzR`c>+AJ0r/-Q2"gSۙY| w)&]t-m讈?Fgxj 1ut}"Z}zź3[m Z;4j xpީ ]}tRF+JٸqqOYYF9B <',gpdƱ Jg)9,[?~O=^?.Z0BW%l@و:AħXݓ4*S#jH[fj:|:]i 7vNܷ4SDJa+'S.wҪoz bb7OSwY~NLg%@\|ȿfE^{nO=#L@Mdm%?181YzrqDTkAw*;_L= ?OI| _'<='gd@w)`zaۺv[x RWm7I "9..) a3ӴgS8d{r\$ Jl B |d vl68bBS7 (Oߡ.L%^-2id\x-k:om14i~#92&>)d`lfFq/Cu1ğodНw _|Ch_gK?Swr#ū_w<wF{_W " Kd2YU,Qsշi1)j#<`hL?R5.2:2^4ŤL<ϺZz+&D@:`U$/E'}&tcJVva|:f@8*0ҽOd<%~,@87-曛zGs#֤][!Oc\(|ȷDp9K gOsYyņV l춸|Qlƺstf M%bS~]\㖣`|$/b'K,Kƃn;'LISYT;FBc: XFڦ?+mUZ e/7XD/0 x㱖\v>9LO:m/n?,=:<-ޖz"*4TQGQv휢G-,hpL~rDAf G"ĀDnZ[۴BV؏)qҝJ,FJ&m)*l&+B=ʄTMM!6T#`yyu lC^dzݥiɸrqGG-wO:ESA,] 3kSi|K?䏼I6  BBYM8wh)A[B+_6,0+9(Bq 0:jz;bp[Bi#/Z:ZVi˼(uu4xb೯K-lX~Fzq.l&>i$LwYNecsu+U=`eP>8a-/۞(̩/mn\g7Oy#cN2al6a!;oDJW,jA?UZRʴfeJ}T9~6lSPHMfaJv ))2g[tM {na|YRbNYz?3[YdYNeM:&AНe8_ςHVnL6у+[MNMrd܀415~ =JMHMquƞ[f%,d׿YV#TZ j"'qxCCkI-A 7 ag'5X:#]sWK0{ \[ͱr4v(9 x%.8(55yNX59, NDz6 O~8Ž% 6U{ﰎ^یn\^8m| U\od\йueHݷ޽~f/1;̠eRiJBT:UKq<[Pj.{ga(}ԙg:! lYn>n`MZh^R&x=Oը}>խ0ft;OZ.1c>q_WKGδ\ZC''Y+G~&I 5 d^ϋ1J~lfpBsXs] rkSI _h:e>pYyt6>D4'6%Q"8fM_^gSH EXKTG(&L z#_4<U¥ͨI^ ֒nӰkN99%{BNo9ݢB"҈[r@"W䣳YKih1p"\%g{a D޾GsɅ",0q /¨nw%K#  q_LPșiL{)]XZXoMf&>F)gKH0Pm>.ߋ}V9mTk}l5yU>W3Fk!V72 x0,[^TAd'a^i_AM!b(ZXŀn O~- 998Yi!%l<#BmRBnJ]&{+ٜdka0;zY1x?th#nT8蹅?L:NM;ȡ nM9G;?qb}cQ#1X*qt@ka߶Px#FnSYte$x}3Q VӋ%s^Ah?T! o?dӲnmŎ ahcqMYi+rnBU:j\.y6W{jykr0) Xw*L* ͂ utzJ.{[W{6Ϻ}^Fg&k2>vȨ9- -Q֪32sn쀥RwJ^5x,85~Y&J]T}oe<_߄/բ0 s)J!8gBҨI&<ſ> t-Gc;[22)>c ܸ,xAWTRfETV\e#2dx?.\h=R@C9A>\;+3`?2w>1U p]Y@- -f\&$-S/AP|ƴ=u%0$g(|BGMۃ#IJ_6N38f4ƙAyA^;ѵtjGjb4w2bZi*gF)mo YճbNYu_e𩑩`d6U^|G&&) J WtU!ybx**IT`fN*cE+D-WR#L\kr3EJ0 eXhre1 z=9@d-S}˘-17}X|g9lաMăQj2A1 Fby[jn1I)R,oP ~UK}E5׉F3tUN{樵[P8$F|WNЖ (QL5^>Ųn :D[d>BBT}6&Sf7| B  :+/ hvS])8j!G~۟i6F` o'(H2D1xUYIX{yԠ吣gcuj 5BsH?"{J6pmhB L lZDK]A FPr=C͛xs#gì;zCͦ^IEt<{Qɟ KNU$jb*T|qBՒt s?"9:8OPG 1S 8iɡ3UJ)]!4d}'-h; j7B^b(i`X~tRbxyMN0iu) XYFI ^ӭCՕ.¡uP[h!Uam` UuאX?n>GƸHi.8_B ѴZe'yuɹ KcD0{JƒןEpSu#HCm= i&g0f{蜼|2+f45r;x |wpFNZ Lv0 w֨Vه Z}"JBxrAYaV_;PɠԞY>^ '?۱"ک\Yl3a߲aT>۾ؑ]UG kVة+<"d8!t/L[㬷aϳ]ph?Uëy?Cߣ<,G:THiJ VINPucd4e˯I5SИoS fbkCFFi̼r R68aKHZk#ZMIrL֜fӗ}X/b_;,C3Co9jքgד-p,A2 크Sx uz$l}|cCv 6v$|I<~X-TΫ RLIȯ,wl+SDAiIW3zӐ9> n9BvFAE!0wU&js♄IAjqF,: 'msҚ Ԧ3-u^kTJ&Q[{pL ,ʏUX6Rn\P- &rQo[0A4 }H{^Ifv+$I&>U*g[J?IW'IBx [a:w_VtFXtIC226/Xؠ9;G` +6CjnY+WӼ iXdzQkvy`aL9ø՝@J䗖&Lt!nhT~ ӽPxZaEQ}!wZճJOVPVf!Ir$;iר}K59 8PSْ FSɗXBoaХ /$u3dvj݌H6*3{߰p; ݩVuP@? #ڹ5хgW̷NoސDEq̈́7I? śM !ev.Bk~#W@/7=4v*vRrx/͏st0|<|͢ӄ;3.|VL F]PZw묱-$(eM/@T!9:߀W1@\d^gQ~B%ue%lk z'NI6RxXْ,aփ >I (Akp=ͫKR9!dTZw >`A3wjtF\łόBctgP˯41|~Wd]ݰ: a}e.U4yCZʗՍ dWZ=Rm\`.@p<*$ %Fm mڰ~C6ɢ6-:$PՆDXeYE#l~=rľRYOMW E[Ut5U[0:ݠVnXBdac`us`j~wlG%1&iSpUkĭKsi~YJc-"ܣyH:^]m4LNiX1£ ׮ޔ݈KAysU87`E.B$o3~G%^dB$ҝE캽OpzapA\ D/:ًg,ü2VH@逮5(gTXj i[!fe7Uho2̤GsfV>u0 ECU*bCg\z61& w: `Ta0GsriH+e6,w&' :]dQ{a?~Si@5ayE Ѕ Ǒtn=X3hR%yϏ=xsk<Q݆QA%蜨T}K9F}kcS!+|_B0ٝ*Xvњ 1o99\GPMRsFf.38zE1D,9,o8Xgcr!pxhrI4dQlq>c=sŭ_Es@dQW ?^ tC:M})<0"f37ϼW3ۊohﺎ+S7gQWبч~Ѹ(HVIl# w,I.vC"YF;ϐ9aLG霠ҟS;Tgc6G܀ wA-H[oTȢ'EG^`NGAd?C۶3&`0|wHmBeNL\b$KGp0*hQ SE:96p|pO 4ee6qF绑y{FV2dQ3)FαA#P-NRb KQ ^U|/ayw\Ȃ,=Kj8 ~!hӬ΂@!UkT~ƺ{ؾ|hT0gbh۴ 8T>RYW4{۵$RtA 5{ "]l$BnٶWf|} 3E9jkr[,ޡk*͛c!B"I!+^.[\uECjͮ@LWJhM>?-Mh$0T=)q .u;efiؽ$ #L~wC$[h).4F~"3~޷6˗ǮY{FHvBprMY:ݮB `cW,%/aLBnޑM f.ĉɾvcmlPlL΍otxp> SNАGy嚩E˱Rmunv z 0zC9VRN=2ḩi[1^&IFN- b,oM8IBem :"gWꕰ"^q=+8 PeΛ q'ɲ9'Ԁy~R{R="$>T>rm;̋XUU 6dHBʤBa:nI Lԃ^ u}tZp iɎ=@ˑnC@Vl6r 8xd=\>-+T]7*kVbzdiOvNmCn uϙWav!OlDnIVQTY>'aN ];qkUPP"( ȩyowRʴDgNr 5zKWE exj[CI`b4QNK 3fPAEU|D@Ƭ.rH@n/'xb6mynsgRM_E06k:NlS\f:͏<-czp XʞO8h/7{?~XI詵FVʭzeVƬ(XҖva&R@>i,݆GtԎD/7K3D_Ak4<;Ut1BBӪş:-+J2poL6. [*aI˴©kmF5)F}|~G,OYDhRs1`ޔg7.:.0̠a@;9aq2B0CR*WY&ts7ASp6` J3mm!wH;ks/2HgV=d|ߞZg..%Go.V_T@s aT cڰw+3u/*bz~AW^M}+a+I,Zߛvnq@IA @_C1mЁ`wB)RƇu u8/|C5W-v~q`t-N6Ê҇G( iwCfYsTTv¤ֆJ$5q[4ՄݶiA Ϊy8y5&Wœ}2?] -gUaDi(8' /nd]OA%=_%*r0/<@@@Pp:D=@m%]X#Q/]uYq=;#Hw F }zZ-5Ϩ(Nr D;+߱m8~L 9&*qC~퉶m0r&%gU@[§ayHz~bv9fNBܡ])zE{B5?tyz>)ml){l8h1u=\uBOdלbGFc-j!{dtm$SLɬ8Ed\RGY͟lG؉&o3BɚbQnRI)P1zi]Q[O^m]4=ʯ `7[>[5-wTو5b@]G QFچ'ya/*ZR`Fp*X8kC-PebqS#iEAugaӌ313fݛDuHAdb&,7tK0x1n.T hqh_L?j1Xۈ-)1LP dz1cr:L b3cơ9j=ڛf !5YkofS*_VIY ܴޝ}MaywksΡit} :{w$Y&Q1ZW;V'rAb*2n r8LJPOTY7v?"B֭=c7z)o3*.FRZ\ w{u\!oQ}LγVT+9 l-z ]+" R +6Zg\ NTˆZ"4_=~N*jTioo "zi'/+}|:69^PLur6b8-{9A N O 9]`y<Na1w |-+mgYN7}q 7ghC= us JCQUVW$Z JvC$GT#2ۿEC+U$SA8%>)0oM7$"Wʂ}VQ4 {5L8ՒPVqAҸwc-j!ZF2ap4K.x+.$n~"$5 \R1 *` qqR8]Ae.hBv-ġ4*(VKpQ-]-ezo!Ci%UjcDGn9*,]1Pء仙/I|^wy; &H ꎸ9 @Z L;>w|q#ʴ*"AsF^_&q"݂`,}| MWxZuM&@{E3yb\3 M=u ~Hw (ѐb4l=.`%m:&&';+o9\SkaͯRcQ(m5J$7CF)5':+4A, !k,#%J !7[{@ z4EE\&#;^Yn?]V6fof b}d  6r8d;נc2Vfwry2"0%`ooʵ)fܛ(uA@^ry |s7E +Am4p}晌TtsD\*;J I.FM"$TucH(zȞ?jJ "2+1WT$)qKgF =*) Tи#,hn:ۮN ӶFm3?Ksls@/d5'z9{zO'ś,qL=lh)l(Q,sdu ,-g fqlDguOI]``!'- ,v,C6M⫺2^XSё =_iʇe  tD홅9mJQg㞶S'J[/ev \rkQ=*W2zhndtw<ţ̂&ʅE( 5dn3p:]vQ漽/&uvE`FqtK+ I[;6-ޜg&J0io] کk_Qva;]h+ ӯ[@T1'%yLQg|@oxV-ܕK$P 7^w' 4M<(x7K(#+OP8]l\fQ yTa݉m  Ao]۩P hVtq9d ^tυx飸 v&Z]{wj`%4oG?*ۭ uR1RǸk2?5d? o ?\ @)[SZӋG+ـshQo)!S:y:6L8[}4(`?nDNrؤ?9/VsmK"ǣo$XWW 6X5.۪=I]V\򞁄}W1F JUSبJ>6#/43BDktL5(sTFT%OO) ͇[,RnԎ}㰭FI3 Yw`GqG'րyP6ZS @B:^;ތy T KyqI(^%(d}(ˬE[\H3"׻wJqiKPقer8|"kO@ѣ?Tqvzzs_NP!]FvZةY\*OC "(}nJbgg뫰B&ݳ@ա,Q$v=yO ,:nqݬ71f&P lK[o?^}̰U{gy1VO\U. X4c]^i7K+TW EI" K,s<6Å:}W$^߶>da8&qI<⮱{&!ͩwZJ Kn_NNduuhIoƆe\*>r 19MSxV,21P=r{I{Gf [i ë&ojz]s 77,t~i[A{Cw Y\zM59"#&֩6ȌឍhϜ_C}$['(c07\ 5F*6+$u|*nyvQs*,Im577.%BNwN+cyHtfИBrҞcPmܜ#iX)307٫2J@nT^@\!|͋qn:å3jQ gs%+yP,IQ6.{ǚsDa_I5"㩦"V^YYi(6^Af7/uٙІn O{voj<wxE~B^XzՈ|d)Ȯ| ܐy)86D 1]>WB]F}ctH ,֍NoVRb.=B݌j7U6:A'3Ez֔g?4wY$\6_Q2[ϗ#qxcEg9YW8\/); IpaR"p]Qr BիS=z_rre9Zh8/~RGHX@Ɔg'BeePmg\5h Yh jF߼b= eItjTfz]t7/Y_9$Zуnv@K,G:v|JUQ $֣HL}d 7K71m eRDwY9iA/̈́P'4~Lyqbwގrr%;'7j= k/u';BڱB(M!ac =ɹ8XX [ wφܰo; 9NJC ή_tLVXTnf>0VnWXr0dFô"BK;M xIzHg;5[Nw+E]>:7~rUN߽<)Grr?CVE=ZdOEQ-E$z:5PD0i-_\ʙ,ɟD/ l錌"O݇x7&ɈB'42Q"Dyx`u+&vBǩ_#検^ $QI*~ּ,mUʀAmWE>CUưjÒ 1!zn.0R1>Dځg|IX#*W}g} yRi#tE:$;G7e ݮD M&iC U|JR~Hh~a&kd݀C_ɛY'N#wn߃%}t$lȡ籹[ml7RnJ"JQS}(kSezzMZ)7y.J,1Džf5(gNj;ڗg\UR tk_.PWUVuF҄ZIGUF\9y>R.%GFS4Ӣ_$k^KJ.:"6 һq.~3aJ]oD_j*EcGF*~ڒ.;2;U97Ɠ3z\q!1!ZF33cj3ߏEJY4W: C5.dFM#ngm:EGv4dOwsR9/)4Q;)z\<cX*VW "B^%Sh9f9q;?г~Ho%zwifV7Qh?3=f)*TMoj}X(cq=# hׂ6pl |vhGDr,f[so4o;G@kkr a ͹w17(עca oZZ}-D>dzs):6p׈.O:Rta7}$f`&TLzo 4RS|2)gj^XYtRۄG9\x>[GKV2Aۺkmg KgLRq_֬;} MGyop"_x3fe^j@Z/ľ}ܢRg}P ٕH{Ȃ,eo'K( W0G"k)dp}Z*dh_FϞ!rӳtOZe %* syD.NڊƅRjjZBzsJq,"&F*s6V!J?Gȫ? gO( O IsJ$skGH>ؔòd w[VNCC}hP bg,X/׳p!5Cv30g@agc_HtAc&kBdlxS=V/24pSydKv_UqFDz>/_/n†C'_DevWӺnE3 HKt*U)GB()Wn-PTnM/|YPc8}@]tp9O}Yu߉[ XU|:ۓDxA׊//^XXGȳYe-i<]y|E=?1]@7vMj ՜h,F^;fyIe|;@ǸV+/ BJ^.O7߱VKgw#)`f-vGm$:Agi#ʔ@i=3R"9Wmwv[1 ж6Swz2+cQT'KXIc̓gLGz*!*b-.} !B8%tbf[{J1Az\Ɗ*sQbq ћx?+ [wD~B'wnkCg9`4k@#,KpB(!CAV{!¢/5ɐF\n*n;١aOm_ pگv*#T5߾mkmĭْe}DBl"> Rz :[JۧZz2!6z+Y.s+"]jږP6+.f2?z"Qz*ajy2-Q ~Qi1Gg\u$͵/׬S-M+7igK2PMoӖ3)ȓae#_sT9E^χgƧVe>9*udkjqPH?避,Xccq3܁{` HK*zW j7.SX; M|aZ{trq'٫ĉC[df$y~{[*k*4$+hPQpGBoA=cr]/5[.KGQjY^n?K )iDq܂1 iXeϋwtwӉ)??+~\sW,rmcSL6GZJOX#x p2U?./ca{k%"_՝*CaO|ٻs"Ғ`MTq~.:ŤAnx4g/n岚aY ۍ4.Ҡ{;9\*ztGWdg)<1_uzMd@7=kTcb>هoplLYR8vpK !7pk Fe/BTMW2$>XtTcM gV}MYr-3;?\ 5?puEN% 8ͱ")ȞgYA5bAL^-qk/*JvpBv"jnDI rA&'?c&Ee@*Z4J%f8 y?V|],`Єsr74)^&Y8ۤ+bGgZF=#wzB&`9YrD%%oKU:+$p6_c*sѤ.*J-P^f0?HHn0 :d9GK2e00+ڔ"Y-Dd)f_|#k~FFN.d-zS[5w!(;`n*FӨ\ d{ߌ4`GEZj`ӳ.^ ]\5*؀i]O;Tt|Z$*_wt5Ȅ^e@Jl\=q%XVqCZᚐNdrJ'}W8"$kErz80aS? BBpJv[@ܪ tZR[5Ȫp×YyZl*QiӒN7 =1xؾĬk c KNb ZPL*77mY@- SJbB`[|9WW"/Hֿ~ek:x1m*1J[AIlKUF^24fB76'j+OBzV/0ӵ0@[5ܕ6J46eIA$7PوpEݣ4 v±2XQXh()ۈ&CԀm_w%Z~79#P=hGK] m$K*m0"Ϯ{I+P_DSzV?@$CG9mm\;U$ #HJMw|X(a{ }@y?e(9D=!&wdtٮ@ii u \I!a8QH5ADBz KILJJ0JKؔwXKSa7oTHڵO$ <_:"ѡ'8#˄Ef)$q<udR{{[B;~Q"aդ&៼jBn+'c+Ɩ>E'J\[8 41XDSߎ$?@(t-?x@2o]v})WGTQKu>Qay¬N9Dbǜk.dPүǃ*57 %vr8Q;k MzY0 ԏa%N B;3}hyN"Mru60sOf CYI)kq a 1 uB=#v"Piz '?z8?4mERo |Y4>L3pVqFζj'[-ٓS ad"TI m:8gyjFpRh|]k`ykugu溌GD2,:&3e$ցt'-kjA P?T Lw҇Sq.~H|vD&Ƀ MV^bRݍxD}鶼,V~oc-fĉ#fXu1 \גi eUv̏Cs͢y|})0^Syh` کi9gC__ܱĘ 8u|yGtډS`h'^-^9 C((7t/Dd{o7zp6"1EfRaR2a>"p~t P2~z*8h/Q#M ϙ[z9gT@kGiYgPOYԠ,; R %hl̉ȯQ%aBcsneoL6f.k( 4M(gMU}߬3ׄ<j ߠ7&!E57TKϳC2r`ZNzǂ~Xgp'CD?L84 :DJX2P3]ɯlg6)kڈDžRdž)=y^Rs=8' 8kt5tsoJݐGt؏Ya%8}1 .Ѿ$t'Y3@#(0ԙɪxB#&pGڪly`bMd ^ (!Qla&CDnW~\zgll^\@7T .Vc21E]<Ğ8wap%rSmm~8 yrFl29WG~9E[( O9 L*<|tAfp;h_:Ƚ|WE6r=\rƐJDL8Kp .G:"(0`YTv0X4>$>qHiRZE }27).}Ffά%Vb9T8&eZ$ڎo%!\<7938調CtAr$T"s+25I_ĭ[vVZzaPwPd6!1 (X_DN0Ѯulm] G>\Y'֝{gX*d-fyɜYu[|!F$(k O˧MtK;Nffb X2ڿxn@셳.As^Dt_"YaYck*V ޑPinQ̠ũn\ {jfꊠ=Z56t2|<'0\<q̥c$!ZƐCxlFzpez]Ϲ:(95b0%u?pL_/zx`}%>I}[p?QID*jG#~ifm=Dܗ 1 v?qUI@}s8/e8TXdg. p Jq_25&6 T,6鵣%E?<vT "0@gEU(;('K yM@TQ,Q%FߏgTDߤVZd!_.B~yWwզӊ8_ᨗÆjH4Ēbz;Je)KkWz.A;Y6yCllѯ\ᝉL0r@ /xւF -T-3uW8l1dςcꭆ?@Y:GrMw?s{(9yvMnO -@BZL [#88Pj&x13;=Up5 ?5~,ȷK茼baH$L6zR%$tR!-k6ڠ+ОQ s3O``j#b>.]~~9jdZoeHӤ3&bxŽN~X(R$S7G!m)zKMS ?WʗgA7Ts]PJ Ѐ~ܴc8N|1P콿FeJ(\\hXR.@ i_YJ+0 _a-3N/)t)EĆ."usڟQnw#9A!ET`.)2\w3nD"Hu9Ҽ`P^as~ro$x3Cqv^re s'.dk7zz,XYloꯗh> QVoz^ AQsqZ#; Rk\>MTE:9uobņox:?QBǎ‚MC`}fʒ\~xs+M^Qmb|e0΁PKuߺ7A{+M};A/ԅBKFHn+b ;{[^vmG|wj&p/I~…BYdD$}q2|ʼkf Z#9 &E0a#wk`ĺDW<'+\\Z#{ElmYؑj^3>Ӗ.v}j鱗bY$_Gu, +TULY ZɄMEugɣǂ{YGdٯC+L_O%aGPHmfNS*j: q5 b_*I->nLE$&E}S`a i'9p?w&;Žvй#՘6dZ7]Dl{zx IAK$Q8#uhVD}\]՝0Qm_%d  0/@30:W֣c0vҾ$\HH iaf\dʤBҟeupmvŀLAeZ~s2^cO{J]^RPmˑ"90mGT%V46q25;y%vѤ-GHª($ā5 GD;K͐cwСl] A#bO#u)EI&M_? j}vCj{dBiJk{xmeb5 ~,[D7a˰z %IU\őf@u$љ04 H\W o!vKn{"$~xJ tP5o oNKuxǒe  m.]x! Ox_'MGU)^HB[b]&| D[Q{ncsWk!dOZ$4 մH@s(Qj'35>̪P"mwßa|:}+ D3!Gk8!VB=V,m-A¾Q]]-gAp/?F 5m{͈T"}v@ڞ^c=6{^NTion!s>tK6<\(BBvd~ aHUXE@U87M*1բ c.Kt9ĒsKJESlD\-~Y -N3d*^yƶf6zN)c؍gٖdH8ko"ۭeTFj^^ LLhX;^(ډgÒptn%>(MM@\^w4]9[koCtvW f#' eҵ'w&v:#%c  s R˃]'fI,Dkw Ut,So/\Cb6G9HYYi˕^ƭ=S%$@MshBί7 d6ԍH ,|俬NfIxuOe6++B\xEw_V1r<@I(D#)x6ΖnƢf)BJ6)ڻ QZ dD˦?BFVf[ȬvfaA~4nOíl1֎&7Gv$ 1V 4d>*[2/&X# 486X3͢ S 20ELoD''nRYj0߲g,?8[QCtq]rYJKL~17;fyiQ]c^vC4M1Ÿ _ѹܚ *cagw~ꫝV͜nk̑7i5'zZ^9nQ_ u= xr%{Vkq"lEuǰ" z[bTEe4)y8Hftwߎ`OFӀisƐ7%A ߬KP>WWS`('&w0K Sn_Z qNCK;Nܔ Ђ@]?Z\MAEm@F= H4LL|{f:WѨ 0(eo6F0w quTBj^t]Rۀ}_w?fw֠W[w7^Is~aޝg5C݇!)ǝee/+]QVmr"N^8rFoJ? -J( 7K34VCWy ;z@'$Z8!BRhw"D#R'NOGplE JÌ9+AmTO^oZ{>knxNsxl}H@}8nd9'@D-DêoPL~^l+]V$$F[Va]aoƀŹWLڪ:f 8/ZUV#܇FX՗7T%HѪz$ (5k9fۛgӤπ(Aܖ 3a*l="$"sjk y A4(.%X}F7s6C+~į۫)A'*},E1TN5K#iUS=rxҝ]Bz 1t qz:S{CzW,q;62y;%5F/w 6rgYaKW(?#V@2 \kGkFTeoX-pa͋.$Ox<ۉ| "Fn0WSm{8~_["\S:4SѱJqA FF$ z;b &7|g%f{&y;S1hqPպ݅08!q˵]4?Y𳫦[ 0dL *)F"{Uyd7<|ϑwZ:#2Aֲ? ~B+m-{92kA}A0L]CKBl^M<*,Gx zH YPҭ䝬֧5電3؁ ]_+[VY87ܐDE4}B{:.*OYO;_![p"=(h,_A,~{7?a {(5 YrZ:59z#Vg#k8VA.Y><@BUT,5_ axM3wk͵gDa @2L ##*A{ B gG3o3u1]WWa( P }1}/]Кxˏ 75쥽AمВB [|Qr\oϫqql4}El_G;U9Z\W,T7\W2U6o{/;uPXHub70Uk5|9<5Y]r~nPbkMH[3Dgm30JNdƯFX3;b5*Z+&ʐs[{)aN$0+Z7;GS#{au4)؜n4qL|ӭ::VTz*PIBD. ̸͞(XZi R6y,ԴG.OAl5Y4>%m0Tuٹ5G#Lu^*T⪸0t!‰{CL]bh;b7gz~s8EwxFsBMQRޛ(fmjc! WзGѧ֖}Y4ʚs^ fsoLOg&o0/Ω\(s|+#odPx) MFn0.(໹;HppuP}t:M@j]Iűi#JiԲӿ/.ye3ڳo1hճ],$r[ĜFUDZEs@P?؀9ɉՀ׉7 -)m*QBy-]5,8K t /gɕ3eAZLmieG'^%oHLD'v6JiPm}fh#& 9!i}\ @"@ۚt :(ײ#fLV)4@[G[\=`+elS2%gq= %Uu&٘Q0D^|$Y xDMf>b6ؗjk}Ȯ4+qM NVjdBd`M7k^3zRZ<Č b3fDkr(Y+tNbc7;N[6unFl!P($ڞI|.?^\* TRP_@ ћ M ~+KƝ1<¸8JJ,xu'IJ'Lg["tm!pvm'|Ҹz~sJ1'G8 =-A`эD/AP1 ١ftr^בp tikW 0|Jf1oXJ|# ;׳1<9w\Hxj`p4D[Eˬ$OeчcFz.IyF_}bЛ?~^ C)!GM'5'Ut2_ lLCV'Q4-z7":Y4iWv.4cꁚՎ/bk&L5J٩F%KJGshҒeo] )?G#/RTl^gUT; GijÒ0G!(fXḷ{cЫyҼ=## %ĂǎJ'( bZJޜI/CZXˢUn[QuMnqPrIZB^B qۖ`:">];a-B䣥Sx T|8C@#f:G1( =2;m0Gk0!-cp&HG R;Pch;=$&Gn4:.>^sW,%[S< .LtHs}~;~0o!Q豄E%ܕ^ҏ^DfX[%/fiIMN6ĿF. KIE/JZH?V`hRI&rŤ\6Y=Xl9ms}RVHuĄ@(F7tqF+̣&@YЙ@rn+ }'>202+{\X@woЫĆΟRC>z?PXH.Qcg :r,Yq vNdV%J:rpJc)vyXI{3&]wUc{4uS͡JGS CVǓsu X9벀;Z!+n@?GP>Ar@Vo _#?oD(>]<}EHH;h4wj~/H}PUz)E1'CBׯ&7_mϾ`2[.v" oŀ*/ky$Tһc6>%A>Z OWj0:7p9K䜕zVp/]z9ZzpRc֞0 i˽|vcwewM-%9#):9Y5Ǔ[HLT㡵ק! 3ځe[9FYs}t^ :LH)zs5֝gUqY.aZz"( ]T=^A|:J d =Qh +3xiP4+XV%3fyTD(_QKgxtD t뛒r)cW@|W=1|FܜWfd>R57I UeQ6- !w|@^C#j; {"vUA! XxDa,LNP]WD['-8D &j<< ^_B/1d'1DS<"Akݔ:6YWmCN|YH)S\\Y-hQag }(̌xw玓77-sl@5 tFRX(_3.ؔ@U7ήVT1x) ެϷIo} +.9#ٌĦrsejݐѼȡy(J}Xcی fb-Nŝ·<,\S1J4/r2A6ݠvڪB+9Q0{O~]R{mOS/YzIXv;vK憭(.}ߚEk%Ϣe;Ӣ a6WSNHX8kCn: d.rC̰^XB7$Io˟w'8aƟu]Eֲ݋'t pi3(jqМx|~@:B7 *)*#'meMD@s)x>Xd,u5 U!l6/rE ~%of%9:e N / [3Qv&.QYJ5b'hyGqc;ыTmn~a-̝=Zt}0/6ǦA%/~;Te@7EQZl$¸Z}Jˢ!}| @NpP_ֳ*06Y6m _Ԋ{!BβXM:cg; >>j;=Wk_x .H m;RM0h_:pZ-hL3iTQd-~Éܰw*03jed%߼F<}Ζ:MR_ֳP]b f7lWTc;v0e*b/Rnyh SUF\4c]Ym$ KeYp}|dGQ$H M,t꽄)b$PtXc!dpQp5xWPJޮԩ,U5f^x0tbu?]OanTrqBW]cg]m=/scLܡF̑IkBėW4Yv3ڄ>"5JV䷈0#T$+Ys8zޭsvvAcoK ҝEL;_̾p4n,vЩltG@EhjN^-(J#rm/VEdIQ p/O | ^gF߀n݀"PX2KIxϥb䛒XMdIMqU=Ip2&RsF^5LR 3`CǟLXXn3|(3Lw }A6 FN4&ooAФ􅀖7Uݖy*{]Mvٷċ]rg?5&bٷt)3AźxTRo=5RMZ!RڷmJŢnԉH2 /isP=!zqC=eqU*U#*)~ђ,;€;'ޓש,2RSU2SͱQwVB~sz\( ?( 733Ӂ/ h'׹RP1Dtw5-xnK--'}־̤}ӓѝ^#i"Ģ pT[IjԱDCNOR>TIl4lwp*u0ي b7yDgs0 3r_ǂh(;kʮ6@!WsqhW\nӝ^5e?iλXTLGMip]w 2ZG^ϲVPiHabNW繞a܍j3e+:0Vs&ZCU'QGNC2)S 䕀8 .}heD&c)}bnٌ"I^}x^v&䣢 G[͟[0ܼfX,dόC١l ø?h >Aڻ~6ɛ<x-\jOR[nLW{F5zsaCy&}n6XJ9r,8zΝY./ߐLB.6&X-`PlJ 8KGyyc!op 4vtC^LYqnBhuKx}z3\z;ȟk&"04+mf~63դSx=)wQC{qR|ٙ8$Pp#ds-lŻgFgŏb}\zyeD{~IvJ!}4Ǟ~BNp 4C^)jd,'|WLkRwlKg78"#فh6"DZlO ]E^*1h}!,RΗ͓sPJ7),#7j~7¡ a&JX zhY a}J,wPߦ F= .p/6 ɵv7d@("oF7Ć-xkLӇ2]YB)!zO4uF?E8>c{!/2_8TOcHR]+#ffUPN6]¸Fo$ 5L0?aY4KlU5obHX[-ECe 4{ M.1Ā.&gcuo|!I<$e@޶.+"xjB6sq1DBõ˕ FT*W֓c?>_ ɦ)k0 <<grqha;P>AJ⅑~JV0t9E7r#KdV? Y{{(7BeGdm &p_9-|[r<ϼOt%pў95.BE?[KoOZiz,cf5?R~&(~2`ٟ10r'33441es@j>.hM_P:\rAb-D><>L{[ArHў(Pm:.1?o̾8 |K.igPL8ᳶT&rP,"2L{l8X_M Q&]CWfv!_q- W< {yU1GlfcȐg咪00a۪LvD%yri/zXØ@T($ UV;>듢&)`)֕yAĤ iELp'9\6߭P0wmwӛ?bn`sRZ*ƲucˢTu@d|@yzLZGpA-'s1d0Y0X.L5dɉ!omzXkь= R d1)+d#ϨŲQ-fٲ-&ϭB۱X{L [z0LjghQ@-5Kr1"e6/*Nz,@HP饰-@_o|Aż>0Cl+6po^##t="|Uj*WϢ%q1Ww[}!ZnjDmHFK:.uۜ׎ftg iЗ"澀_E痏nPYލn#;sw ۙ[qЭ(\\ .dRNaťj :Ӄmx̱e$P&/$X9_Ug܌ԯ ){M~I&ZIvS/Z?hѳ[He/ a C3n1T~zÈN_~n}rWj@ZxӮ,I]P iֿܑr4lPcstw_PGVw()&PZ7MRt|8qI6dY3cf.]C1A&cGk%*mhׂeU.%1ՂWjb)!֋]{&M9:D3Twd͇$ (49bu8}.tZɻG3Gޛ.oE|@^*Q%>Ӓ&>*_Ckɨv8+o~PHI ~;5v6L@3- ,ڕٕFN 㕺k+uu{3y|/k{aT9 gb*R0/ +<=3ד!Y\Z6 uƖ\ *[6kB:;|\X88LV +Zu c~)M×Ƙ΅a~ˎ%7e' AE@î^:}#J@nML^卬hc2sU4~ /(C_F:_}}`'TB?; .2B .]{ouJoDd+/ (J Vz1Ư&+1njop'1d*z74mlBMX|nk&L* R/eE.JO~b kpS"/]"İT*7Dȝlpk><<{J߄?rO?UpzwF,+Z캞c j8N8)K4^^z2x.xyKy^M~T 9(x##Wb9'sČByAZ{H! g[hF]esD?{Au[FAd,_õl}g9L,1*Q]`&y?kw+o Ѝ'd$ iee̊HȺ_kX!([ LW/<>p8Y |r\aM@2EGON&; 7쯵yifgc/abqZ]I?XL>}jO*Lq6R)HLv\9#u^U\/e >$ZTkD0Hm5"K`2hmvo~HQ/kN2J/ob<iJ"ڃ`Q%0n.)|3u&53:= f 8%+̰NH@[:}%AhS%!h8bVOά1)\sWX)R Ǫ[dj_4u=A|n?{ߤC~J=oaijR~"y{ ?7WlW+1.-WðNqݢ)8.j5b''3j+ hvhǯS*MhW.9d(h]_N*bhAzqlZ7.%)Eqߦ$qDY!MarCıܴnJ@L|9Q`E)Y OfV zm-UGoÅ='-昣Iς,Ju*p|!g;Y!b О=pLmHhQq H|7-Fnty\SI9Y0t#R<t~Y!' /݀zc1pSJ)_%½i舍qL y =8< EHcZm" ƻ|hZ 5CQ/lB_Ȝ5/dZL}J ?4𖶖"y(@C4,}HUQe%1^6D1)# gKdY4>a貱#VVTS RU Mr)I̓Z2$WpA1,j*s(lh'.ǀi“Bo@~YrQS((a@QvȒ-oh^r`n$̐w|] C<ց/N%_u-q~/isINyeI1sPtwwXBdP##*$p{DDQ}7 LE9h;o:ܴ+ű3klrg LD?k-dž9 (~9^;M?tTzfV2NʧsрTؿrtHW|gࢅ LU= ) oȶn܄j#CX mXjɤ򎄥\QIϤ Pk*VfLqDGsU|o#4rSw֐(SSc[!VK~S`%E\qؽ ;~BAI!'Qfnn+&JBeFcJJ)[/t<57 p-:'xx!R`,M@NȐ]?>^+](EήwPd$7$do$=JlC߫)*܇QCvvlFPut谫MegcM-phUAlƾ"8X>ˠdvе5Hg+~],ƣmc ޑEbڜan&/$!;lyL2dRxOf.YDmK2"ez oy.kTX ĥS=[_;[Hߙ/t5Zx^M'%|N_1ub1Ga3(:EIβ70$LfﲿȽcJ+C},³t(7I 2!~uSU{5UkHJvL*stTAA6Q}c IL)8SOŮLa#8 F_RĻ)[d/Xm,Gό8625ܶkw=NS7_(hRN..vHFIym&G+u]Z`(*4ISpf%RFUvT :Hx]Wg$Nbj"4Q/F.,ǍJXX'_5qc6"~5@p6BR9Q࢛E8#"N&v5mp}ɾ&Su*W=*/o0 =EuEX|p| M/T]@rΉٙͱމ7DMh䌆ş11R\t%xѐ}k& ɢ&秼+>w:o>nŸhUdAVw=` ซ gfGhI -뺦lj,ت|}j-!We3e@#<pStkH,- Zb7My9h3=Z5*?}k+b%y [1Hc!^5<5J~޺ ]fg1"]b^\]J8SڬrsX0 w)S% `&'`=0ç`E[Y47A 7 D{Z2{_.t5 hYXrdJX4Z׸dwĎ=Knp K xC_al?ʄfg+{}v^'5@Zi-]c;mL1)ɭxxъC2.WURUij íڸ)XX%qL-\)W)gSrplzn2N #`eQ`i*|TMK9d@Łne)WɮlϭZԂc9W)b/cNǼ$:{lP9fؕV)#a 2[,tN':eZ=`3dO' YuաIfNzzH@#.a#[kFD?F2XʼnWpxmq\AΕ:}Нo?lFeBᕓjaD/}CG'?Gp{m-%%f \je%`=W^ڌ_DShAfQ!~+s ?`D֨fܪM-IDh%jc88@Y4ÆM. T%%fRfBpK#pc&M*G{* 8ŕaI6c>2ENWk+34\N'g%/.07  6K`=C=OU|)Zm:t4Nj6݆^ Oʯ!Ӓq่4{j>UwaO41mbT# ;f4nA^SrCA} zbXZX8!GϏs1SXEvɍsN ;_Ӿ#ZRpCi A;1cQCSv/='qۯBgx38-IΠeʃ6L|Mmfk "2{`urU L)cSvf+zU"LGŅ%m6zg{ $- Xsт"1DP@T;?g"z$Y1ϙHCFN'?Yao`cJEDHE&mБqNza豱d9 Mzs%R/4~ Y(MZanppF"qc#R.Mi/Xf7hkN"TwV?I>ʒ-7mN$f'}y2A[۟C4KU驡Vt{jsWV(6v\TBYdj-jQ ,9G|OsDԶme{_|Ěwbed|TH4jNG*  fU\j: b6qeT'z'CB+߭@4*+W,vȖ1 ѫB&Ɯ%a0!ӅUgAcjF&ujt>Qu&3\3h/ ;JʄpYS}uSOt@vɐR3`#5 mH{D6;S q:>NMľSzo5+XEAV-tk]΂p ɹS/77T_GdiM r8}>lG .z'^(6ofQVl?D]_G5ΏYhІXTd: kP45B2|lggu80mG1te!# AӞ ~U9l!`ѵny= kUWN4b,(i51f1ZE٠uЊ/ɚ~0Fc.jkzж{J=>ۑL]l0en+OnkcEΕw ]Ke-3}\ۂ;kj߼chƻ#^A|Zk>H1{=L0r=nn(G+,r#r֢#f)ڹ |SQ+FE&U| T|H2&7ZDh 0V . zw3iGAفPxynw> ֬ -= .پoKx<~3ys^m-cX^|EMoOܭ(\΅8as;LbGyDSQ-DPRWO&ipQ=L%$? 鴂{TA@kr:S'jʥ,,|i٭tFkL,~2wG [ dW6T`) o6>$ŦH=FW4=QL6udT:mQ|Q_fNZidND+C;sb&/5 h׫C^J2s,&&5{F+w;twu$>%c*vƇ*|UՁ)LF7ՂhAsBZ0Tǥ/xkr~\?9 fgrx%8'?T :kyw+,uٛCNG[G^k:kY7x.x,)G/X=tֈ5V2/2-ƫҗEPLV_(zX3Y-9֜gٓ /%ߟMxpik(ݐ Wچ kֵ '/ [ψ&] b= gO> yF%^eIܻN4sp.WoA/ձ 7Im0䈅y wTWϚ0(gPY@kxq{|,쨸;zYUa`=-={Nٱ_8 zf/'vAP,A'&KǶ퓂e1S1Ѯ IgH &ŚAw-Q/ r0 < s]7O<g>[8%x洞 g ~9{,0kݡe}ad?c.Xd[B|՟8 :!omB5.,BWȞ5:?/HgŢ Fٻ֕ _ $oi* ;2nχ\N^1t ƸgkUЗ;=? Vo_G:11(޹{NcS﾿#, TFv$. -';36?Ʊi΄xӞ9k PԋULeeB0.ݕH!:0r^oWO`,Jհ8hSmۚ.Er>ktY ղN9㪾pȓj>.PB,\&:8NjdAx&r!$wQ}(xeׅ+L[A,9z`Mj#VU{@)*}ܗMu{쀱t1u=5Mϔat w䨳;=CoP$b`L4IYd!\玡﫝,c4Wun%F P7!£5p^H@e GRooL'w C"Q;+t*66NRIp9,G@ӳ8a DyRY_5pR b@0kRTi{޸}tktB 91D6=CEZק~c 2>{74|#[^,],6EGd\;4諒#<*妷oHu-„U^F8-qQ-xPr/+(g)Dw69vW2@êyjlcpޮw9]٭~[x#tKlqn涖XfWLުZ:T)28;d8 {e6J+GTYo9V$/yc,=~JM坆ȼK"hFAkpu3ut3۹ 7TALBbdFt rp;q69uofYkK|6!lޫD~_MQ8ϧ 2Ak8y?Z qc5L_"(wu2BS@ݵ_& \t]"5!։XZ觮0;tߌ|sO%èKR&C> JaS?Y.LxL#ۊ1:G<@ 5\䤷N︃jf{[Yxw6dCAd:OϠ#?0T{~ċ8Ds &a&c @K2k Ga'Ǩ2`ydfIՑ'.S@M5#7שQk,yI_ݑʩz]t)]L;d -e-mQ2}f`9|8\To2z'+;Y-C$/k3y;yi7aЋG (Wn,0tVOW}>m k0 ۮsb?=rH0jN?2N΄g7*nQс*__TC,f\Cce)2aZvxPgʁ'Os T~N߫ɶ֎ v,ٳwγw\tIƴYϜmS 5:4RGrJJ m%U87Ak^M{{%@S*1/s'RgN);l!3;ou4 & 7Q>XGwXXpe =養^֠m)R Z؈26E0͊} wd ]@FyjG3wvez~kv^@]Bn=ΐzmnpk!qlb"AVTʪsJyrpE=J# oQ7wjIxB{)i3-,sW#D\o>+`'=)޽ލtذlq8d C aXQz6pP,%WH?V8!țhxmA+"?3 .*#&ms&IrXzn^`= dݻXBy$L]EeSz"а;V]B*Hb Ё \㾿(E"[ٗ#nQ1Og\97~#P@%lnC#nE ˶^0y-,k~t,?avRwDXtɫpnjxaAAIq1'fH*.vuw7I!'霌Vډ.N: aW8PqP_-SQXdȆTӪ@&# p#|5ҵtiLy.:Y~+52ݲqH6:UGSH39䔺E?,ږ):ן1 x𤋮|m|#QZ_X\"8-OEЍEPC|sԎ#Ce^5샽鴚X!H{]lKYné`:J[5V!ǸSePuNYn޸aP]gqx} yݸHs@ޒ6bV.2T\?@j?~G3;760kp⃇ݰn_LcK6_NЍI.p類dCN㉙+ހt4p|Vk;|$WZӀGsKۉ3Xi0 Hjm7 48,8(_]?)j>-Mt`JT- Lߑ#% ㏟5+ `Ôޟ3'8Vu$|H>At Teð 'M 2MtGǵhH]yt- ƼcM,QGxoM̓؟0rH6fv yճ5yҩ(I7(c_by2ELJ~z3{! M^ ς'ńOo+ ^v3QZD}z ,yɶkd.3 NEǖxT[~sZ a ^ 7 `Boiĕhn16:\H I0R㧧z7?FIyFN ʨKED?lE#!'9OFr2UsSU4h묙`L/W"l!ōA Q.Ksw!s9}&%s^*l,=fJw0 JxPY|>#"|;D'g<@8;ulj%^0,K -s@361s)E4b'uj JqT%\2x\K>,  2CA_V]}mE~. ]J;V!y&0>;m2{3pz+;RJ*W'v-i0H@R]C7 c5EЃpk տr s $҇ؿft6n ,İcഷ8)3(: -ob͏bW #`-9ǗC -,T-ܺgtw Eɜ)H?Tۃ#$/Y HvK`!P=MG0 tmF0ÄѠX%ߎl,oneFMȾܮM6h 2r$siU5S1 I0vrkF+Bupn^,lV) ?om dA[{bd;w`Y/ХB)b lNAʮ~+(7ިTdŬ*451]9BfwQǞk*ny2Z( atI2PssO{zQ-7}%,8yIΪ20/46j+ziZ!e?a[_H%W+>jgKa*6ʋ|o717fT{TqRi3/,EyHC-7>'"N\SG_KJJP$ÝAVj^Rv*Ob%s5=,+,4vl(EPU{ nºo>`SE\Ƹ@ǝ!"^FsH%^H0էO 4 Ơ3`fJ]@ڦ,6~ t/ڙ Gis`{*ʋ\fn[`J_@WQ`6B66}<#Fit-R͵x.L C_d̻?`KɄN({Ţj@ ۾_mO?9@?nr^=(8~0|wa|e+݁4հp%DhݛIwi:?-0\wS4SE񹑹B Z4fF |k;- `16q`Bx >R/t4l'J$[WjY`Jz`/m1rS\I"_%CЪ]%O5$\aSs)OF&1)fFlAuKtw&`fykdLӭ-XD^?Z :HOoѫ/8ZD[DI@Iѳſ]ro zM#I![ H\ dbZw` p/gUfٹXs?*ҵ_*y7giҮ]KL xR3D2Yȩ;}h[O pLLEQ2M{Һv3\%JI-o~cW̏T bqytOSxD!;UC7[;&WͲ ?oHX9QS]C9`Dt6]( /6/6Xt 8G.1P"ZHGcw[AODÐdms91u4Nj]6q2nj QftǸLM@"Zx=r̍kTp_?Fb\p,Au>mVq@1gyzuHlGW!g` 9|I,uRm9X'do*ͺfVTS#E0{,3[ >^ӲA5X8e3Z9QF=EbW)Z$0(pqu;VeH:#Ώls-bvvd@F3: B'~'yc!C!*> asetȤ9ZlҫraAaL'|QXo8:gۀgdx%7Yr'o&=3 IgA8FJg{`q:yut̤1!8m{6mx a}}zQ0dwP8,u' `6R)q'1uvprJpjV{ n1M$7:V Yﺍ%~4&Zv*~vT} =s. O ),&4 H[ėBIݿ zR/rthC0Gȟ[_ č >^Td +[&#:8*5L$IX'qzۿ`qq){׫/[Ek`!raSB05E];ɒY~J|>-IiOp:&4k +#\DyV'=ΒbTj= 3w#s&tr*"#Ƴ8Թ"c*L6Uj-U-LPl!ƎU# >E7 W }4TT[H:aFjPOV>‹Mcox~sz$*#dQ2Nr#waq.^ΘE//Q܉TKS,B u.>MQmT؇ubV9l[iVT1AiG|`|0NZ5}:`i͠Ǥ&u ORＴv`AXE2H!2^5El1VVݘ*<x-a1XPMe^<Đmm&YvT6=`J(6 Te$ 'Yv fO}PI}1=fmT|EN$<o]-CT7M%6~ZώeagD"[u.oFxڋ_#ga7wE$% T BR`YZD>`aH"Aiz*K9b{7[xoABRfB=(C}")!T~rgʁk(!;ftm\]u0gD\gr)>O=)=M|uS]ftKRߔHjq6 vQۂ)2NMԊ҅mh. V_53^睹KZ#.KklGK!q5k+8}vȻE*gс z@El}}>m-ӊgCݭocm G J|^#uvyG}e;C. u[&i@Ob\8 u{Algi3uJȬ6 mfk~;nCU,uç/c|bs5~G(OKuI1.rΉpUr= 4 e!ClRW~P_/} -,- ՏV3)3sR!t :%AʅkW곸8Fs!of%cp9HӤ Zu,(EWىD=nKIy9<-psISu!Hn5rfr+>*jNQ(/DyNbSQp$U>KLTo쇇d׍NJN}AW9 (Ӑ Wv<mѕTf#sjdS08gcy#~=sD.૤Qv@u>.V}ȩ`( @_~h}`S:a_dp utrKCZ|F0w(-H!5c%"6hh6 +E@> doDw9zCʦW`j CZ>^ zދW<KՍI*UGV7;&^-5Z =9@3󐏩-/@[ ,d!0XKQj.406l OCc9kfK˫_q2?tQ"\FO"ߨ6h W r(ޓ~0&U<+ѳ_֯VMYŞ^jäߓN ׎5[mYk4g >1ffQlixXAq #&ZԽM D4Ğg4vW90t 4$|kN~;ZF.C{Qc^3iȭDK^1JѴ`wKCA-0dh]ozec!V骐Xᾁ#p攉 - --/n!x6 De/ fK1 ZނPF»',^[kÙ/D%4 >Rk!uZ?Sȳ5ɜ Jeobd"9'8xLƟ i,#rÕh@k C+h[ӛ}d1yݎb:_0/^1&ε|]rK_% &Af:Hqף:b:Z|jae~X+nzs-zoa3g乶`lJ]mYk%*RXFo :`Y~kTb")`{^ 0W︶-48۔ILlmMzm2opݥG)9eM]war]]#oC}xv@48L_DQ}U -feFo!fz >b3oU:iUYCOS'. [Y]e49Hq7;3tar ylSv:R#֠3/B @Kԕ|a;8mߗ_t ͣ(Y.P4Js8בjafvq+[3嗡chŭ6-1*5#KjFՓ4,݋XU\HD1%uD%Lqw_`^7¨)1P9V0@߱߻FA6q{ꁅxcpzn!`Qfjc[̫%|7^/BXL7(77ހ8S7dh_ls_>m 5eː gCP SoQH(н a*ȓL<;A SC/0:ɼ @.,E>MPR֧s/귑moVF@Z[{7C{{6Ĭ]mʊӇl1Jڑ_VCBHYfV]j bf|vErf~AS CG@+=^X/-ĖAHp RBB}^G:HIj-Y҉t xjYl ѹk5yӏת#&I]T}O7I8$dQgS4"E2Nu!?HxSTu^~؏Li'@p%Xܫ/xQY5&ީhXS۱dXA*K-p&H>Tb:`iO2b>BT(6H:Epw2k<$S$"vDT )qVq.ۓlW9_mX %N$!8_hxK&pc_u)D+h䘛JL^ SEnp\O>p*WYi1Ǽ^<7u6K\0#7\72šqmR<d\C)xVi51 )LV QiQ*/u(Sϱ9Ÿz|AX1Fؾb74i쬊ШZ==%Oz/YunMͨk;Xڷ/1@dGQHu4tݥeD4|dޱx%#Uh-DXrTN℁oXL,;6be>yƯ}iD7f-: OJ)ǯod|BafwetE,əQ ϖ4\Do^(TX3˞zn~Gy]Щ7Lys\1C{e`;y~F7#b\8i y'@sۅru^ܫv8&7=3*''|SQϐ+d&?/ua qc?%S3(lSɗ ZLn)<ݤ q|EkHfࠎ;d׆5V{Ҫ%'oߕ!SOX +ߡ `i !SYxR! UHB%НGEHJ|E4>/-3!D *qC6&p6)ŚXm+Xa7v_SiE*pxa½{h@Ff42mA nSfjr!w~eB]IB/er&$_lR<l*auɴSad"#A2Vz;3"-1IU*#"OҧUfCFŃFy3" (Q7SׂR["r I$K}5/MNzҪ`P5O%`hPбL5 <:epN7eanrIo/<ESFq:o-U\ }BM¸f 𠪥Ajb9 WF?{kܞ[ ,&=. N 3>BZ HF G<͌yą YZ