From afb8731e6c3176dff15ea999024ac20a342664e0 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Tue, 2 Dec 2025 18:24:46 -0500 Subject: [PATCH] Release article: 4.77 (#36148) --- articles/fleet-4.77.0.md | 103 +++++++++++++++++++++ assets/images/fleet-4.77.0-1600x900@2x.png | Bin 0 -> 50941 bytes 2 files changed, 103 insertions(+) create mode 100644 articles/fleet-4.77.0.md create mode 100644 assets/images/fleet-4.77.0-1600x900@2x.png diff --git a/articles/fleet-4.77.0.md b/articles/fleet-4.77.0.md new file mode 100644 index 0000000000..cb4920e67c --- /dev/null +++ b/articles/fleet-4.77.0.md @@ -0,0 +1,103 @@ +# Fleet 4.77.0 | Deploy enterprise packages for iOS/iPadOS, edit IdP username, and more... + +
+ +
+ +Fleet 4.77.0 is now available. See the complete [changelog](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.77.0) or read on for highlights. For upgrade instructions, visit the [upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs. + +## Highlights + +- Deploy enterprise iOS/iPadOS packages +- Edit IdP username +- Enforce authentication during enrollment +- Connect end users on Windows and Linux to Wi-Fi/VPN +- Activity for deleted hosts +- More Fleet-maintained apps + + +### Deploy enterprise iOS/iPadOS packages + +You can now deploy enterprise (`.ipa`) packages to iPhones and iPads using Fleet’s [best practice GitOps](https://fleetdm.com/docs/configuration/yaml-files#software) and [API](https://fleetdm.com/docs/rest-api/rest-api#add-package). Perfect for distributing pre-release internal apps to testers or employees. + +### Edit IdP username + +You can now update a host’s identity provider (IdP) username directly from the Fleet UI (**Host details** page) or [API](https://fleetdm.com/docs/rest-api/rest-api#update-human-device-mapping). This makes it easier to maintain [human-to-host mapping](https://fleetdm.com/guides/foreign-vitals-map-idp-users-to-hosts), especially if you don't require end user authentication during new host setup. + +### Enforce authentication during enrollment + +You can now require end users to authenticate with your IdP before Fleet installs software or runs policies on company-owned Windows and Linux setup. This ensures only authenticated users get access to company resources. Learn more in the [Windows and Linux setup guide](https://fleetdm.com/guides/windows-linux-setup-experience#end-user-authentication). + +Also, you can require end users to authenticate when turning on and/or enrolling a Mac via profile-based device enrollment. [Learn more](https://fleetdm.com/guides/apple-mdm-setup#manual-enrollment). + +### Connect end users on Linux and Windows to Wi-Fi/VPN + +You can deploy certificates from any certificate authority (CA) that supports [Simple Certificate Enrollment Protocol (SCEP)](https://en.wikipedia.org/wiki/Simple_Certificate_Enrollment_Protocol) certificates to Windows hosts. This enables access to corporate Wi-Fi and VPN resources. [Learn how](https://fleetdm.com/guides/connect-end-user-to-wifi-with-certificate#custom-scep-simple-certificate-enrollment-protocol). Currently, certificates can only be deliverd to the host's device scope. User scope is coming soon. + +Also, you can now deliver certificates from any CA that supports [Enrollment over Secure Protocol (EST)](https://en.wikipedia.org/wiki/Enrollment_over_Secure_Transport) certificates to Linux hosts. This way, you can connect end users to Wi-Fi, VPN, or internal tools. [Learn how](https://fleetdm.com/guides/connect-end-user-to-wifi-with-certificate#custom-est-enrollment-over-secure-transport). + +### Activity for deleted hosts + +Deleted host events are now included in the activity feed. If a host is removed, you’ll still have a record for audits and historical tracking. + +### More Fleet-maintained apps + +Fleet added [Fleet-maintained apps](https://fleetdm.com/guides/fleet-maintained-apps) for macOS (Claude, ChatGPT, Outlook, Webex, Spotify) and Windows (Slack, Zoom, Firefox), plus many more apps. See all Fleet-maintained apps in the [software catalog](https://fleetdm.com/software-catalog). + +## Changes + +### Security Engineers +- Added integration for Okta conditional access, where Fleet acts as a factor and blocks end users from logging into third-party apps, via Okta, if they are failing specific policies. +- Added activity log entries for: host deletion and expiration, updating or deleting host IdP mappings. +- Resolved multiple false positive vulnerability matches for the VSCode golang extension. +- Resolved false positive CVE matches for [`Logi Bolt.app`](https://support.logi.com/hc/en-us/articles/4418089333655-Logi-Bolt-App). +- Detected vulnerabilities in JetBrains IDE plugins. + +### IT Admins +- Updated MDM enrollment flow for BYOD macOS hosts to enable end user authentication prior to downloading the MDM profile via the "My device" page. +- Added self-service install support for custom IPA apps on iOS and iPadOS. +- Added support for in-house (".ipa") apps to `fleetctl gitops`. +- Updated existing `POST /setup_experience/script` endpoint to allow updating the macOS setup experience script in-place, and modified GitOps to remove the `DELETE` call. +- Added support for Custom EST certificate authorities. +- Added ability to deploy certificates from Custom SCEP certificate authorities on Windows. +- Added status counts to batch script detail page tabs. +- Added `InstallAnywhere` as a self-extracting archive for PE metadata extraction. +- Added ingestion of `upgrade_code`s from Windows software, and provided to all relevant software endpoints. + +### Other improvements and bug fixes +- Improved performance of `/api/latest/fleet/software/versions` API endpoint. +- Updated host expiry logic to not delete macOS hosts that checkin via MDM protocol but not via `fleetd`. +- Optimized the cleanup Apple host profiles query to reduce probability of DB locking. +- Implemented UI logic to call existing manual update IdP API functionality. +- Implemented UI logic and new DELETE endpoint to manually remove host IdP mappings. +- Added experimental `FLEET_MDM_ENABLE_CUSTOM_OS_UPDATES_AND_FILEVAULT` configuration to allow deploying custom OS settings including Filevault payloads and macOS and Windows update settings. +- Added ability to change software display names in the UI. +- Fixed table styling for selecting table rows. +- Simplified setup experience configuration UI. +- Added better error messages when using build-in labels on GitOps and on the LabelSpecs endpoint. +- Hid software host count and version table when no hosts have the software installed. +- Adjusted UI section headers and layout of Settings > Integrations in Fleet Free. +- Added vulnerability seeding and performance testing tools. +- Moved end user authentication SSO settings under Integrations > SSO in global settings. +- Removed the premium check for host OS settings in host summary UI. +- Reduced Android device reconciler frequency to 1 hour. +- Reduced Android API usage by listing devices instead of getting and checking Android Enterprise disconnects hourly. +- Set the order of software installed during the setup experience to alphanumeric. +- Updated Go to 1.25.3. +- Fixed a layout issue on the script batch details page. +- Fixed installer for Cisco Secure Client not showing as installed in inventory/library due to using the wrong bundle identifier. This application should show up correctly now in the software inventory. +- Fixed errors when trying to run the `apple_mdm_iphone_ipad_refetcher` cron job. +- Fixed bug that prevented users from editing custom EST certificates URLs. +- Fixed incorrect UI placeholder element by replacing it with it's actual value. +- Fixed issue where vulnerabilities would occasionally show as missing. + +## Ready to upgrade? + +Visit our [Upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs to update to Fleet 4.77.0. + + + + + + + diff --git a/assets/images/fleet-4.77.0-1600x900@2x.png b/assets/images/fleet-4.77.0-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..80ea6a6754fa873904fb62b19c6c9a02ea04d6c5 GIT binary patch literal 50941 zcmeFabySqy_da|hsf3`2^q?pp2ntHaj8ZnBbSfbzCEd&@3QDU80tyH!NJ>kC2t!Co zcZcB6Jp=PQGcbOh@89ow|MOn!SxlVV``XuzbLR1d`Yl!ZL+pnj2%^7wMd>yK(V-xS znudl7e6oAjKoa~p_~?qB69loGCj3Ws_4cVn@FAJgZPm+AW;5q+@P@+j(#=Z{lpRKk zyGIE@wXd!!UD9+X`_q4k4C0}KK0LrT7qf1lxZf2Lh9y0ybXn3%!rzYvdH(y>;Q-Bl z-Xh*X2mbSxkstM+chHZ2UH8QCPfR3O{DZ{4B>q9-A0(iEWV#Q6e~yD>4gVnV4-)^J zBy0HRB=;rp4-)?%@y|(;F!0Yw?n~kyB>q9-UvYtifqzbt zB#HmeaZ{z`!mb%Mb-^pF!t&3E_iM^=shSf98Eg+w8ohxszFiAaVJiDNkap$t6~!c- z)_z!wNN3mV!;Fhx+=>fJbovIr8NCcI&dKNb)UM6+_9XrHzys_Zlo^P+u8(@(TUf7r zH4A=GA?mO=wbJx6>=nhKtK|z$&EqGyd_sls<409Y6KScJQ_g8NHpF@rCcM!#YzWq1xKT-b!7vet_0sS+l ze+2T6GXFV=|8N50pOg6KB>p*x|5ya{FUtHESO3c-{v~by;e>x_>c7PN|Ho2<3^@cP z@TnO0A1&c`ttt2OGBtO!zi2WHqrRUx^&#~yQE0y*3iN#`yaSi|@) zXHz*Yy;3ohId4Me`0k>c0$25hja>~4%yaUhb{to-k>kBpLq`pgU3a`Euzbo>(^0eW zR!qiTd-1qpltD$iIPFPC>y;;T7XHw|A7(PsQEJD6|#=i@ow zQjQaK*=5BpUVjD`-9*J@SoD~eR2PzUR2MAL0E~!Ff(Rj|Mf{di*jC4le1Y33^XO$5 zc`8~nJ*|%8kYz>g=DzHT)?z|2pSZ&Glrdvu{Mi~uV$sU)x>TA=RK5#AU5LGbAe25M z3cURE(q(PjDpFkgN655q+PXE*#yn@(np&_58}kxcM+YeYpr-WxSQ~oY0Lj`;&Bt4E zXUbJ|IHob<@%}*28)E8x?cPMbyhCHCeeL{Iroiiyy8625)51Dx=)98=OiSkn3_tx?J|p)}reP6}g4-qgjw)Js=>=nt&1`{^%%M2e&9ZX^ zxAxbB68sI8g!-7ujAWKz7?f}t6G-Pll%oevdS8_0GLLY{qm&Zu|0uRGXcnN!dQ%WP*-l*$r}6 zyV-{ddQHAWo31{7NF_oVWQRD2CfGQ)Y;B=Z=P{s`V$DlTz61HTXJ-?1r61h7soHxp zB(!FT9(mm5t6TM8hB&DXjLIQW>jP$uAGII)6GZ}BCkfb(4!L-^W?MK(<9N-6ffA3! z#`kUd44RK3{&qX}ZopESJxLX2bu~gsnI{B3xSpR9Yr6E2#-w4k+14yWAn{gU&1+2c zWXQo^=1?^ReIfVduVT`K+RtGM3}ig-h?bgPo8Q7`MF-6d@c+PejZ)oRb(&y?xUb1Kyo z;!)ldHEdrC(`$OKR!9;vO6&*U(u;_+wmngDJjzfa71c*hR_koc%e z5EPMM>#FuAXLsp3m8yiYYnc2n-H>y40q$OnP?#Kd>F-JEzxg&|iwK*7t@=m1J)`Dc z-mCmCdjXl7nLdiCCN#UnwP|?QK=Tl zKH$vt>Cyk5O{X?NYo3ne?C&U#`pZ;j_cZdyP9KtveA&IOB+(MeMHebEzQTm!?4MZK z+Kne^fir|48>!y_%Y`DLB4#}8?_wB2?LJ1^lK~}nMw(^+EdfTn*lW6e+OV*03h^Cr ze^{x!^2F<4vbu>C7DTAUL(TuS4cH$x%K+~#$$OAD`XDV2x;U=DY;c4`Ka6rfI?y)VRzaa%w`dkjKrAizxa z(>*fMQb`Is8E$6KrOVWN_6Ulz9ntcx?z8m=%5XDjm-?~)yUJFU>9gN>q;gJ%K5(8g zfY_vjO-916)*|lD-+o-3?d+wn-yHE`&k&@njmw_}osDe5UNLvp{tjNU8*#OD*BwVO z(;f$o%a3<%Hb4BY5fC(T0OhLN#fai;Dx%d^Rw0*nGBu8Z^M*~7DtqwK3LRJN%KwVa zC2jOtO)L-!!hrduVv>{Z;w?S$aMMZC=wso$#hX7>%*E|%daGo`wY{ZC+h|ZC+Cful zJDjc5X!y&{mu?M(I4NhVbQQ2Sx8~U)rrI)ynzMp`qCeL0K<;g1s-bDSLE_ z^o=$gqdi#?cU|PrkaOS9m6^A5)2#b53LGceoP;tiyLh2tm zerYWWFLDJJ%OpVHUKW)RD)Sbfy<*xH)A*MX{}3rrP?^zTTzWV#)u3c```g!zI~vDo z1ZxvjEH!(9LdSBabu5*~f?ce~Iz9y@H59X~E8&aroFoxw5xM6V0eIhBM`}}2g|@qE z`aVf2y;&8PF<`1I&3w2Ut@lINWLL>Vvnl7CQFq{})Rd$)F7gU&&CG1Z)CLK|9bp8m zUHKhY)19X+mUI@4rf0WY!E1wc|%@T!o&>9W*WezgxY4_!CV$cE?~#K;2bZ+(iCw^+Q1nt{b@on z-NDu-rr(c(|A3J+bBq`e-Tt;vBRd9S$`K{-j+^Sd^SpIGg<19RAB zqK_gMId5)&|nSNNK&$y7&x>oky2F>vzc!2@N|DlpdI9IJFG*=AhUTw+=wKS^P!*9e%6 zxWMUu%6d3}4s9*D|jx_~Y;O{O(U}qRWLB2LT&}%5dgZ|@lg>u}B za$tcJ_A%^SL8B#-g{I*)pw)#;y`#XONC-f15kdV+a4ZaKT*^D&pL;?~3IJ;pr&`{o zj~|)g_P&p_raz@fv)l&K;>1&!8Ay_|A!`JsHB-Qjno z_b8gWV_?fUSbo`Eh(@}NU8p%!*;*v5wjuW~>Y9l*cp76j9~fVncg8gs-c}6f4s12+ z{2d=m>jk&Kj8h0`UjlKKhoM<`@633T&*0Khbgt-%D7vL%Mi(UM$Hvuc!lquUp`BO! z@FmBt!v-xyLQN`0N@t2DPFj<23E_z~X-(sm)?ICi95e66pIZ|gu;bG&ndi7e?o6R` zJcLX~-(46>k6r-HWm}$(oGGSHh>6K_UKQLpQBUK!=22+R-52<+`PI)q>iVLiuAQ@xxA=%x?SmsATdmBP2tpqnWzvo71*xwPo<# z2RLu+>kRA|DT%1`BJKbhdCKbTZf!l9^exb9zyHY2URmtX0P_dc?Byj%j@_Z}B#Yow z-Mj0f5Pov?+Zwf7zDOJCt9Pt>Ukyc>V#e{qrR6T9sD?k1z=9BJ!^RaeuFB!d31mS^ z*B&_%ObmkDb#g~l9gb}fUW2Eyp2#)O$XmOeT_cC~rnzS%+_b9f%@b<1IGVAPpEb<< zpW#}K_ZRV*Mqzg`tehiucQ={D#uG%>0FBTW`r4i1%if1!cb=*E&|04yn(eZb}r-SUMEN(Y;OrH ze_369Z=)!7MiMRo=QnN%5-e0>&l%qrMhSd_KZU+s?%4aHQr{A-HhY7`fVx9>D8rIaxGux z3=^l`)r(tDjs0i{4py0pWDAjZJ0C5`9$&0s3SHn6q@tUls9~W?sQleh%cb$bjeO86 zD}Q}XEB~RJB<+l`wNH2C#EP*!an%Vi6bQl#!I2U+#kyT-ID8ehk)5*6d5!0Y@U)8;jz=!;MAKq?UmYQ?O1FAX>Qzi$`6X8(dYv?bgV*l`Mt0W8fR5 zLW^xzs1RZ_jz3@Uj%~s{)tqlEx1@Y1ut#_G6fV8!DX}&C5mb@t<0~cBcj3>E3#L6w z{N2U@@y?z~{z?g^IXhRm@Rcvf>^HK;NwIHXS6Uh|&(N-& z2Tq`GvFp+LmEzMisz!RSV|TI_o|)8?Tk61EN5=22PsVo_)*#byiah37?QZd@J4s$YRYhw7$l z#xPgKT>lWd2_IM(4nDbAtdzbZv7f{Rt1Zf@6x&K4fw8b z;O8!yWn7EdX5MwPA28(EgqiXZ8|D4+APoBA5r9xZ<%c^`5p*dy$1PV|9{bdM-}GJI zKmFO_hpaai%ofZxy7VupG;dz8ODE%EkmB1td&*;3(7kSBfEMD63oWpOg zN$tEgGjm2STB-JKW>05(C7oTj^*lM`zO}`=)Yek_b?Nni!29)u^9=jrB*-5`ftSys zM#F462*6Y7o!EFcj8)BK?{+;APUmY5eYDB>G7&!E={t*#6tAB)d8kvYK>DDu6T3ew!{g%K~a zEZz)b`xYwLEq8mrxi7rnP2~Ecx3iJG(c7tU-%A?_U$;e`QF-U{0Ks&&B1=}n&htdi zIX|vk5h;GYwX!KRTVGxGI0KD)L}z;R^bZGgNC>5gF%T*7Q74)+v-Yv?Fc&XZOb|c* zftSHkL@MKMNc z@P2Q{t7*s~jW5KGVm-?*(`vOuC|+H9k@^fiyAIU-qvxpU<_k-Tyvr>~m}9$j1z{D% zc6Nq7lgcrqYR1UTPVb4cU_lRoF$H(;I;m-DQ5lGh+&=9Uug3)-mz0ttkKcX&oXdb* z|K66*U>k$jpX|*v$sbAZGNH_PWYHqY8aNR|+(Zm#^c&HlG>xbXeRG#LG!DuZ)DEHN zLmK*bu5Pds}5oA=iNZSQIN z`$88cbQq8WhL8N*Ik|G7YYzZVVjJJIg|6fN459ApqGZqCklZ)aQcdgiWgr8?GOBQ+()2FJL&-wjnwTyLJCY$38^$8Kky zxZfZfypm{iH2@b@j>bgJ;IOc^G0ezL5e}tRv>4n@P7=&nGaC)*CQ0$p1d$vg zJ+``Q4$EFNXyeexSu!0C&8RY1S16IWE3k@dF;UVwi~BC#)+Q=J62<<$eoByqyY()` zdyR#>$0nw%+j*XJ4;ZWnD?6uf?0iq^FX$BpreoB5Y`(8N-3F+3dp98XR6d1wfe?a)rELD{=Y3O+gIiC*Be@t^?CLEzl+d^QV!kd5Wf zBZKQ@IPc24`X#&3DF^;C{(1MkO||YiSXCgi-_rA3W(X*-@2`E{Z9>a>cCHJ~rIoNl z;tQ%U0$;Qq$vSp%LY+c(H}@_2{z4;%pJLArwx?wL6RIlb_tx>mLo$|eq?odDgpuIh z^b=D~1f1;2wKn-PJIJAY$GT{w)wqxOyl$8L){Th48l(539>1=Vc0tFmw+pd}$`8jx zp;yAkIs3|i(Ni_n-kh|DioRKElXU4vbP!g>m;E^o-QN(Rlv9y4KE!YndRnFV47xJ? z(}@%uu*wmk+&QC^AO&*6{B<9-rL2 zA_ny=<485>%8?_4O(kRxRvb={mXOC^jxd_0v?P(w`ELZFLeL@e@z2ZD2)>&!q`32M zM-4PZD`#0*f6`B2Z8dpclK)y9u`lW~2MD}cE0{txwu0G@o@bR%z?(+&PF&^x+isJn zxX(xJtZZ(mF6|ac*!($I^+8&JE;2_Fbwgq6BS}J3@kFILC(*Ln3B-(=9b$dO=5nJo zY@<~2?)laA`R8J>at|((TKlzh01UPsxy-ZUwSZMs8V!zT=Ir}A&QDF}uXAk(`t=`Z zS6PmMvV+wNGX?cZl;WjeR{66kEMLjYH@JK_GXdV-dS&w1t>hCs-|qPt;3M>z+wU#qGx(R0A1 zrKHgQRloX6rNaps;uIt_piW z74F6%vHp}*!S{CMU3Y*E(o#5siLw@hNm*+yx-Q6O%#ej&c#0UhM_31`k$=oyBVLum zL7`W9{dQDb=*}q%H7vevrWq2$g~3TMgU)yCEp~e(U9`&g=>6bOF;?GN^hpqHk2I-7 zWb>1_38E7xTFj>$G9}tNUvyN$PSX7jQPDA8rzhn|&G?-csH!|*nxr+5q|kogh{Lbo zHqqiFIlNN)ft-pRGxuQ<#Gob~Lb{M=SW<{0EZ?_#d!rNRSM%qh)9&v@2t)^MR zuf8|C*14XSSI?m?KX7sqSu`U|fCh_<=UFpRCc0mbmerg44=wR z+zm}5e?$Lxqy=de2q9v$|LnrO+L=CWtt1(L9gzt!LJp$zteS~!mvyP)?DKmI590m* zE<8|~=x9IET`}jl(rLaq{xhw%rmn3z@u7eGQZ}o@`X>!>wr$oW69og{#6oQ621$j1 zeY-d`x2hHzLP)eUmF00jEyZ|d4h77wYtIm3IMLFT3!;BOYDIU$eqo)o%sul~*9B-w zqvT6%rTE1#8djY86!EYLhHrer>bqP-qE#qkPXzk@2nEN^Z*R|=IY)Gg!dTlRK#!aN z5bw!Z2e>Q@Lo6}fQWu~(aafWhEHYPX92^f$OH5oC?7V+ zL5O5>>RQpy@yosXAol1}wqFP(7>CWk>gCn);-rNYOn%n%G8{smKj&+}mSHh|g71w!absW~sbht4#amF9N^o~_@yyXCt%17PW4V=yJ zTx3t)@0z~5p1#H~ZP-KUN`OT?`8{pEW8nvdn;7Q)1JA-whyxXCgYE0ZO1sz?859SBC0nOttLvn3ni zhFAwh<(})muB{8gcN6ls?CB^WUSp(iAYTQV=>q&{^({GGDB-6g!lyGyt>X#zTsQm< ztq1P&!Z^-Th)aqG-&!qikIm;ajKBE%hyMAGD^Hy0a_-QqwQ9D^manbiB6SOQqdz~B z+s<{}X%E2V8%h@WKD2%?C7n<8^1&T7daBPuBezfWp1N~CtF*X`aqd1(-X9`*z{x7G z?}%Fk*4|d@q68vXnpnm>dqB?CDJrKhu;F8I{osOxci$(`KM~Q{8^_^+Wi6SZCt26y zHfk5ce!jSeluKS0g(8|#JJo)Ga4z$i{5mzfLDb4Cfzzr5Q+fA_?Q@^mFH1|AdJbLD z$z6SlcLgTM+d~8{OsFho5&dp}Fw>O993e|1CpR7i-AA|p3 z-zxSG=Pex<#r?T%z)r!0gA&raGLd|q+&dn)ZzahrF;*_QX!S1vm*!Qruj35}OQPNcv9MIDSU{2`u3E`%B?Iv2o9RK(efObJ5RD-w`{gaf%R7S-4Fm z+Xsr(Njz3Xdg>tBCKp|)PKYf!wD=s>alKOZ(v#cHvx!fe4E!p1K*!*U#Kq; zC^Ni_1IfKKmPI8__v%vEy<}s?YX0{e1n7+*lxb1WN6(q@`1!d^=L=OY`@a2trhnmz zoqzWOrI{pT*Iq0a5kzoX>e5NF{^%J=gG+>Bkuiv$SM9uceeq*)Js`L>RU7W6GW{`g zPjsD}ckJy^)ed8EAG-JYSH>fvMN93kV~xE9332EjpV2SRy9?HRN*`1rZ-J`OkIk#1 zxXpS|n_trT;Rm6JOAN_{UhU{n&*{bO?;Ke#K<@g*=Z06~+G>;ipb_mIJvDMO`91Sn zA_C$~=KWU-jEpw&Z;%Binfm5myNff`vRy@}Jr@}@9AV;@?_r1zM~ z_IGir?*1D-@{@e44$ebGad}UOri2hBItyE(>?5uV4>%wy73HW=VvVj(CgFcV1GtSX z)O~0=4Coy1%KPz9b*Bke9~w3)xa`%;=wT^TM}jxh%Dx`}-F#IQX74*U-zTJaE^H;W zQL%to?6X`{kw!s#4HSg&eu`E1BF|zGGri^ zKA(QVbGo&^gqOuz~}zII=O&&t(+lqYydZ z>!yCgO#~baOe7(h+(ZnRm<@*T6lug2-?bv@4g7ykpU^Qm8?6`V`r5mxbAy=JdRm0K zyBpZ6fWK!@bE3U>au;;j!~CmY%iuD0fR?EByI=Qvb3WtLte9zHIp{Y#`6h(&IANgG z5ZQNVmIkwmnK?JBwlhWg9KWJA3Qs&BCw4_u@e&LNTm_+E;M6oJ+5MfsK5tl@*fnv| zyVcv{=St6Tk&UuCJ+|fd^!q!+wX&YtS4zMcau`)-nh*!ASkLPWk&CMGH$Dj`dU|>l zb~i5^x7Q!T5l61nAm#_)G7TMJ`y$1ER;Z%;5mX3~&6)h>HO2-rub2MM3m&zU4d#c3 zxpEOFk#gLhgk0VJ8Q8-D1%|i9tJ@+z43q_^{e-GDdq2Jok;$XR$Pn8z^+dQ%=RofPi!3W1PgM~e`bbtufkDT zX+?;}A!tUmfZ5QwclsGTg+8N%CG=Jq+2u_?uX#+Sc%`lyak}%5NHX{e#QFoMg+D>0 z|E^f&U8|kN&M>3$%c;~)2rNr%jjAQYh2R?u3H#8raHPd~Z$m#CnO}?xg6ikBUe~dEsvlUhMN9 zeJ~xd_rqDW#O~Xbh)(LR<3sK@7wtgBJAjXi>gPV{clVLi3-M#zOoaQ4p1+f*hzQ41+E>N+jL7q?PlcqR{tGau1f0RPf z_pcVI6+dw)@_dKUy`e*$T`<@~9*V%ZARqIe9S!q-_96U4xa$KE#@)LqKoD2|7D^E% zq+zc4=o)SMeTXCrccpoJ_S>*7FpfBote9T39c`Ce@yMCaI4Q?u8Kn0)Q4@| z3(o_%=MSHlmLc>s&74{cHBLhcPuLj;z@VsMMN#PW>W*o^G;l?2bedjL70HD9EH~!!@is zi+qO$q}X4pDV)hHPZSEAsG8UMWG@vh_xq!OU#MB5!#Sd@5^EvgV23~ckiG8vlZ|{K zr-!$F&+azRYdCkck62x#$;z0in_Tm7(3#eFMi1&Jclra($CFJ`C=D9~ThN3$Cvio4 z)eIoYNg$0u|1Z=690Cd#A6$OtGWA9D!LO_Nj|aVvc=~!9qQCViP;;a-jW>jM0Qx(ru$!D~s$J#ZJY4U|{??GcD3ov7Gsg3wE!TVT zwY)wVnRlO~7Nnq{TDdl*@NQ1#*WKR@4z`gGH;m1m<6~lYXjTJNsa12|kGb zhy!(M`Shw)w_UxWo1uzu2RL=t1;$@1Gv~Go_#eivxJu^@?NkmnJ^S7s$)ZNr<-Hp{_pbpcYMtS`xG4hBCPmif02ezk!<7^~%%Efw6zFR$UduDdOtxt%+HMFs)ZKC0nzkrMD08;|c0s;5 z>#1%n*;&jWH^ErXmYHb~SA;l5WXCs4Jsep-Dk{pwxd(RQRXMk7P@ikj4#UI-cLzKO>0zJetByRlgo&BU)E^Nw(n0MC&$il1B*UBXDT$fsHU?4de!* zwzFR}SaizRsOnu-2SGmYga=dbncMRlzxLXo+Ql-WEvhRM+z;Zn#iH5o<`5*!{fpP- z>2jQ>?M-*z9zOU4LeNg4R$lclgt}_NG|%bxqerE_*6=7&V^}HbAFn0SWmwJytZ5Fd zML6CR-kqh-&*19Tq)O%9`E9gk>RK1%z*eu#c6+)0K=zkQ?81Bua;ss~eWh+XxQ%Y# zV>;`*_;H{MRtT|@Z+4d_pgmW59J#x?V4Y>btqoWAM>syh78tN}`S4oZ-A zY?X|EG<*v%N!lyFS!%Joq2h%PgMDz3`Ptxk>T;vsgl!CB{R|$$EoJNGr21|4hQ3A| z`gVO+*qpJ^(d%xze1U=nh@5C84jSkpIx%aQ33JkqQM%G+Zuo5aYQpwoN2@aI823Z*4YnhHti3NudU^+$_DlEnMc4a!O^Ut)>?cKsJ~}45g80hH79Ul#E)g8SnH}V zoegkAsAErF-(A6ZK^j7R$i|h=yQh@!_f>)Olq_$>st?Z2!9g`9WhZu17g!Cqe#br( zKBlDw)3;Z?t|*)TJ8#AF8ryCi;}xpV)Pc=cAu=AB{cCdMHF=|*w%PYVu3q3}DYr4( z=o4RIh;^@Cx6SX~R)CZ*`mVlZh0kL8Bh11U`fJfe3$eOb?`1XxNX$+ngO< z>lcWnOUGg7494-ClESt0D{AKH{$_0-nJX)&eQy+G= zddlV@Cq#GpbnH^Z8yWK%f1*odfLGkqKkcWLL8nRfkhsA7i5J9d+osR(0Sd|q1~6{ zjsBg7G22^CN!Z8sI_sO>ZoNBgHyV+;7*Ip~lImT?nIR`~7`|Be#zy5!Aqt{mG(1lnE$;DNgEPK(`fZ&_m4MRn+&4*jNS!zRaIuc??iW^WOV)|ZWbQEf{y`Isg(`Pz(^K(K{!BSvV4EE-b7 zj5ww)yf&h$5TekpP=M)UgD$ELIprRkh(Kf+vCui-(YOp*ttS4Fr!JD4H&xpTP_=DSk?RGIu8SEC~u@+{kVy0!<DS>_R;zXYl%NU`d*&37} z3Nr&?x|sktGcRFDO?@SYN4lX+sQq{qwLIj~a^n1D)F~r|G1gubaOhAfH^r7|i{BHT zztQZWdq7r8ZnDUun5iX6;}>48whZ7jhw~|NW>ib#v~;>}+UF;iqR=i&I(E-fH>VgW zpE`_?&gd;ZeQPVgzIH4=10-B1S7OmHZ{XK^ zj-)~1;e0(>8fZ1?p)IAf();QTx{T0J2ZuRf+N48Nve4S#LdNsdy0z8Qa}VmY9>@>g z$wr)bf4T=f&;s&8Y4b~Td0Z(X)GKrEp8W&pUkCsS`h zVer~T#dIV5&xCxI^f_#0VcJI z7WQ&Gh~nfiK;(UZDoeC7GDfaT8Xvu=ql*3pqR>eVS2*`a9?h1disz{*msvm9Jp2$V z)Br2?xI#;l_lA?gxV6x>KmP)hQro5p7PG_s^moes{YIWYl(@v+=50 zR(PxTz!wPn(AM3hOSgRc@N0~czHoOtxFd^Usr0C}r% zm(Ad9ufxO)7TlO4u9!L>S=w0fXSW3mJRk47nWb^853WzxGTTs(bA+vwe3-W7%%JDP z_jEZ%1L8srf2!=NN7P-U7h~0sNCGD%$lJQ-FO-dx+oJ>N36~7PF9U&uA>kyliNS&e zuWAP}6uD+b1_G;UZ9#jbH$$cYLW6uN=}^vAwdcc(3c)Q;5OEG|>@MGcIwMBI`tA&y ztaZ4dT%&B&qulU{1G}_jcR@vokcF82*E4|P{!D0$tgNGi_+;~@;8 zcDQFVYmdt0A7e&Gm8;M5G%F6Kja|tA_mBvlH>WY*c}Y37l;C z;118}!^oO*<)LWGu7!w&X2MjcDqw zcETME-t2+{^gJH(d}=ah1VWo>8_MFe<+qif$;i<#fUFQeKeP~Q3S}BBc;DO__OMml z^qro5M;}2230{aWSTA@XD2T1x-sYuoG*7x^Z@-1-SQ+oSGa3PkseMp`b^rYP?=Xln zn^OL8ZA?Zi$b}Ma5H#qmtmnfBJ*~da2}VY{i-$qLA!W*Tsk4k!Z z={p_seO93U1UkY}fmFYLX+X^DS+Z-NOReXRXSH}k_T^@*u~hnS?tJ}n)|t64-#$lf z4onab&x9x%C@P!wX~Klto4?J%`l53oDWA;=#Z;y_cy2M)oNp+3TRsB5ysaE zEFri1rKM(5!wmS^gy(y>i9J7nclcGOgr-4B6uRzI_R|OcQGDGX&unDz`ns>31eXf* z@eqazoJEek8N%e#QyFB<9lAE^r6$i^n1MMMW8D@k?J&qT&9&SO170dp0(w=w8q^$r z)FR4nSC!qj&dJLbK3#Y=bc&T(k4nz&T^C#Td*7jZl3pGC2(gLWgoTzX9{4=8>QBYgVn0kP+l764-9~XR;x?z^a20xqZB6?l7&B} zESEp3Qq7`gJ!Bo9t}?@zdN$s)Vl(^AB_|`d+Ew3bSY>MpHJs&LXRm!DdbDBfoq_O3 ztD9OAf`&TkakZN7Ca);gFPR7jBCKvo+V#}EmGXAB87dKy`X;9WwPpfV5=~7!vDj)MIk;hS>o%B6?3P`L^c?0LXp^}!%DEUA3M%H*>Jc~q*P8p zdXjgkCXRa0m0qvfhduA z_jt|N`q1|2bn2Q&3~cL^Ys_3%bX14`kH=GWmFOKKytv(5sreORISRB{(e1nSGZK!Vi0Mys}d76IgGH({A3iRWV?8Sn5naAH_Rw{ob z6y-d=J0Ed@+$xmLK;Cz2T0dugd7&JisD@5lnWk8XB>O>kk`Sf6AjTj^lEYY!a}NCe zE(+yISI@TgjOKaj-f8VAsHV{(Yg#Ew=FXCT{C=wb-eRmJD@DNldhsY>&J4SOdY5w) z%Xa;)3&9>?xbuJx0*T3TUZv{rO8MqORTU_=Ck(P_2R!}_^bGs~$Da#}2{d`RH)9Ka z5H10!pACW;uwB$)NDPC?^9h7;s@uC+*jh>bT2zf&5wGY!0!Kb@vH>B2MCrC8W^P;+ zc63}dBAcDG>xbplVAu5KG|P46EuS93z@MDNNDi z++Q5GIh4g6me?@5gFUzHY@1L4FU*o(zPCf*|5#eiyauzc%Q;*08?hU&9VIRf$gI4o z)^`fSxhf8qEe)GCT{n1G6{fP>5(jiTUYjdR%}G_i@Bn0~-IouSo*sTpwA{qKJ7ZI& zFS!ozEQDiVY@uW**U#AyRf`ZfjXWKpwt^qJQ^WN$E0L4AVhbnTcFPgv%cHoO;fVP? zEl!8z#OR;d7Ohji&AYV{C3-dz-al~0lEG?N{G4s*xlGT+uZnCQhIR)1clvV%&Dx;u z%^X_zF+xt&XTgv__?@-Dt5IO2ttX>`WzM*ls0GW2LJ5Ow>jVi!4(U)L?(zT;oj{F! zOZ!MZXdw=&5xO1^#v>_X_{pWa-#Zvr@37$0zhSsktt-(9mGpc8j#7`)Y}};*=2|o) z9nISt32Cvul@-tMa87R&wY^TQHK@0z?A>Rv;A4Ps5%lvXstE@3X~6<$zpp(2ioRM< z#7zYUW1td?qn8-G?{G@qnzM1gCB~>enSXn7J&MUAlC0M>_W=HGUX%hPX^EZNXs zT3Bsq*&*Cz(!UA;u~-$QsUXi2WRJN)yjR~kKkqralpsymZ1oAOZHXII)2E%JJ`7Cq zR&3{^`1`vyApXl4m1$uKr^{T7lvAAtkrhISn9m9mc=p@U+dGLyM&h1{>mV0oFaU`F zgi7uC>SORJpfBhY2MtTprfvl`y=T!J=QOOcLYKE?I;7^yswKYj^xzv?eBFwyTZ1b5 zeD}|IVMRLf2V_O-!E99q%ijjqUwMk|TGmS5#P@mJdzo2D*dst2(=id2&E!^lP@ z2}bWMO2rw>EvzcHUzj*y8$8`Zs~c)FZt*rl_3D>|=uWvij#8@~9GVx|xCVw-CJukO z=;12$_-xzJq*<{);NmS|8<=KBTc`9=XWxp7IPw`SySD=1cM)wHD{5KJSkQ*V<@wETbFPNIVHcWc=N02mNnR z!R-_(@ZpyvgeJ~kXnNDc*a!bCNyq<54CeQkf?wYUhTDR6cYBW#WRi(*y$f#DTqNEQ zRlkBY5Npmfq&XD}PaUv30Qrr63w0p7C~>uf8amcG^JRte{ZbP8N5l2$jS@BgM|Qh< zF630o+G|rmk6G(P!G%h_uuBq_7Y}_i-%RSfc?A3r;=R}RA0rrwX+R0uL`pc6cI`yC z&F&`r8S!@f&{Vvn92?zxPw**X9Z%OjR{9c63AOf^XHcEDO6P|H?SQ{| z^5JFm8trG7^%Aw{*kcXzUCjXSs#w(@MyKIa?bNL?OLg{=N@BX2M z%8{e*9@Dj3;|1KXs>P4S&d_h@<>otJRW8`f*m}e5oSXaF)QCKGlXxL7;`_IIyyHl( zh2Kk2W_+r8hT@*4XJuVIZ*VH`L8!-bQreG>P+eCISffBV9J81y3S?<|+rE(Cs*vvs zs!o1gtXEc^t%ofaB0nxAvE%KlLt-RjCa2Gdm-DM3<5|MpmW`?Y!borh?JY2m*{tY{ z5f7a0A}H-YmJ0X!4vO)Ihvr`ja}a{?Xrih8swZ5uwUe8Q_)d8# zXKg%Qra3IEeEKP=xw9U$O?jzv&T8 zxpw7?2J}$?1A9=Nc207@lIL-x>+9|ZFPnLRS@;lj^uS1b+YgwXtgM3Q><_E_72rEJ zT;FA_kwa9E!6b6*E|5S@qTE{fH3AE=!aaYUK*}5ZzxKZT9m@ave~_V!{*K;WM_Py_n6+-_kCU8>-ziw zAN@d+=AQdL&$B+x;~e{NeJ8HoCnFDm)IEE11g5p8eGK}|x z5WLfh1PWbz_P~G;15E2V`qJ{}Kh=e{wXe4wr9nC-B^TcQVD5%{^Hunv{g1vp}YTB{h;vtY)V!39p}5Q<+&A>YrDokb$4H<#+)c zDQavZZuzxdZ|jJ2*e&c!uICitiSX%3U!kt$i3;>26D*|r9zV)b z59%X#18NzpA$_FVwNj*_wNy13X)F%!f?Ue_lv20ff^~;2Mm#5wfbCmsABl0=DxP_^ zz&~?6W-0QNfBQ-HWpD56Zsc5+Z=le7=(&&x>Gg~3qd+FD1$l>yJ|Y6|4lbVug-wog zuQzE>9<-emJ-Q#Sy#2=-Qt!qXw94!xZw^Q#FZ6`g2fEIyT{+xbzUC^c2$|G7%r2Ew6FIGH%PBzgMKb|svps4c*)tx^k96RG*`{*>W!FCl%D9+yvlLNAu06(sulLNph(e`Sh>KYMOW{CMW4J zr2Tmc-mOorGEY6i!6c3*Ej34%&OH0c9{TG5lGuuJeQM^r=FMckm1Vr}C6HW5n>Gmv zgMuCu_AquQZj=sGDd)vWF}@IsK^hb~ZOSuH(x#_8-gXM}%JGTcI5lFuIkNz~_~%Cc zea06T9$BM&v+bXPgiDV$^a0d$c$DM-LA<3Rp3A#<)F+rH&h_N^{Fz`tx!Yzay7pv| zEOO2fkAGkP$r;pXe?Rg05+_B(ppMv2b1!bRBn#jue^M@Rr%un5 zm2xC$99J;mw$<-`#k>zzZ#9U=S-T0b<7{=%GyLaSbO4W3$fgTGbB1~Thmt#v0k#Nk zC}jr2KuI0xzIWAQRgD#qD411QqW)Gx;kd27t!m?e2zB!BU*Fi5`H()BUp{dGIR$Ep zmS2L~x!>8|mb%Bkub-P_4~-1slC_h=6y&_Gtp=GudRaAO+EB`rbGLNw? zkd2FCgn;{H9<4-BpTojv0Ti5mT2mMzchJqk6P4o*Iz^vlSA+UhTL675SxB(!q(Xz! z$bt-9RWORRO<5c}S1H z(CBw;OkC6Ka+h2E#&{i0KwO-gBJxjB)5f_PzkF6W{C}h z_8^4ZM!(+s0jZci>`x(4PwGKsc`C0CQ~kG64`vpzZphMT1X`e!Hx5{wlEmEv1B?uL zFLfDhoVl~sGewNigwX6eiTpO55O%v8<;tqX?<0*9%m4*0Rp97;&?`|WBNy8Qq-1U$ zj;yZZpZRdJMy5A)^Dz4@#|RO#*S^CmEp?~*CQ7bbKrAO?Ix|x|SI`hRJpqi%M8Q7V ziN-)Y0*T^@0jE4=!lMz1-@+@Fp6IG-#OQ?u%88^SmD@ffWVaLECE?t^wp))YlCWz5 zWMoD0nnmiHQ+on$@#4h;iv#=On436s0n`m6oq!Al=w^zUpVoB)bv5QqK!RZ*wAPj4 z+Hebiv@4|N{^E)>)}eWA5zQj_edTI+(y76w0^QU~s~@1Sss+M?e@Wi7wggzvLXk;; zCCK&Jmycg`8S3Lc2I`m^4|Y+Ow;iBYygl>*l#K+O(*e^x?{dx+VgSU7 zL&fMOno?np;anVFUbJ#bCGhYUUbyulSZwY<&GZv}csq6O3#P-dqTazn)WK)Yn$mS+ zp)V(#iMwsEOVO(Z!L<7%;s~iVq72&V&`4|G0dR<%3s}hCt9*z7wo>BwqeX-Lo)I4B zVt~Co1)u&D_bxF^vc`$gS$j5D{#&K_LOJ@z)1cMg@9S7*V>LgA$MYE8^^$Wkku=5d zfb(+c_}cf0J`U=z(ab|A=f~_Z_JTXiO*xk zE@k6iVN!0tkN`Qi6Ew>2i*>nlInjWcIU~{ln8cXds$&9eDbt#1I48It?gH}13xVa$nMNdFSpbEs~I@IQZ z8@l#kA`9q7)6;V2xn^LV7uU77Kr^Y&CFu}B`!X`+9;?=RU5Xtq61WZ$wbVnC`!DEyg-Y6fv%^)NzJI3)zcc7M$aQt$C*U=a$WK8@m%?wwt$!kwceY_Gr%3dUq*x2I^=T8 z>n7+LZO*t2f7UnNe~4Fy*I5))&h`z(Bfz6?S0KQ%x6*pAr+aR^n-uWe)fmmr++*N! zBxnK<)&07IX0(<73GM3XMcIc83*(B}E zZ&wffsI_}TMsjF|AUijl+$z^^tyn`n3d8z^p87EMaFfgAm}LMdCHK(n_JV2O>6|4% z!z*$788)ftVG26%@s^Vi>z2AE;31n=B{52YTFij$xg>7cDS}MkY zUE+C})A-=Km8`C|hcdIyj`y~v20@3nR+BS7Orm~yE(bq}V>S_Gsdt+!X?Zc%`xS5= zj5`^BUrBmBAN^_|IsItmpkpcAg9@xw5JQ@2JW%3v03j-yyg5Rd`E^$K1F{?2R$GWw zQLR|cseAjcTp3CH`v7rSSE&f%6K+5{ z^n)Et&|LPfgX1!O!|@f1_w@~Q70Ouy5pT}M4TwCgn0v!}q9n0k_mSo}y{c+=>err_ z-2rJ3WxZ1j8-*@&UaE47?k5t(!VZOg5@1HnuRCTQ#DZ|$mFS^^;{D8 z9j`j~(pdEEzgABjnicbh)%eVZhvpwNQHLOO+ctx4+J``o3=<@DP1K&Ui_OVc?nvEY zN~o{>!5~17dQ#AU!eCh5O&yGSYnL_D50O#T*|F`QH4V7-`ONBGMISN}_hX(q#4Jm?g2loFJ`f`C+yHZSH|q4d8I0sCkup_vd-X-29-LRjf5omu<6J{m{pBm zu=m>X*W)69I2v%9&e*;IqqwD*dg`v`0WF9Dq3lzhpaE+Gv5XI$b7ja`LBff2w?Z zCWkkfy5Py2=<;;SmNOM?e_*;CbrXaAxd&IPp9hU$oER=FP8|wDAWZQoS{9Xu$FaoK zK!VC05HtLB1hgB*N3di*3}GnaXp{U&&oFRDjqf(7)}(sS=e9q{%i#!GP|n3@bBATm z%`RREx6B8(P*%bekpR#bW4%@T zN~Wo?3YqOeaPKBp$){x%#(vWw#)%0CxtEka!bSMM5aBsCgapleFp4K64(?^E{QYkO z%NBphN~%$zi^;w*@1_MuM`Avk*p=Oiq-D?{!>f*zF;LFVMuSy)mHZz`>KtAcX98x^ ze}My4f_uhH^NuzzPA6gQQ0wE(?hQzP`3OU*66m~%IjNLxSx)@nK2}>$;VwHX7S41y z)Y@Zk)1yZl+2K+N5-0mD+o6wbEFO^{s_@?BM?p^(aIGP5(SsL`=R_6xaFy1(>TRZe zQ?pb<^-Pk-!Ru_fDEp2_*xR!dxCSs z#5lD1nymw?<3V4|e1})vRH2BFk?@X2zpjhI`RC>CFRWxzXM;SjW%rElBut_%)?cU?;YB4tTnskMYiTaPE3DeBl>Q zB9?HC=oT?9W3PnQV4-WP7;;8ADO*BWx+&TGx*5Xg1<|2&e4FT?Dku zR10lQsZa_i^mL?@L$5iXlUQ3;GEf^hEs4YX54OWw{pY{_(L2@iAcdCBGBSluL^lfD zoP$LgnFkd$l^vmFSp{q|`HwjHzs5#RT}d)$^B+}+8hkNt+O+<&>eF$`v~h|Sh$4^Z zQRGR#&$mzHwoias{JCjsy6YyOD*U))QJk?v=5W=)u5y-Iua=Mb%01xdoQT>4TRhT9 zDd`A|-?Hy=Q3uJr{KEJz$x{2N>^B-V-n!$3M#P0TQvY}(#n*iJ_jp$}XC!*CR*iZ$ z0ao80gKq+J+YsvcnIoqc+8gG3!n%WF5H{;E_5pZWR)8Wt+B=l zI{v0{)sa7E6I{+wcvkO#o>TU*IQabQ#y76Ffi@Dt-~bx{57X|-OEhETntjPcQYua~ z;c&g)(d*x|Hw5|1wZ3Aip!opR)FuljG?wg547@dkiV;wkQ;bT9jJ#Z#+F792`3~(r z=v~o3!pnCxQnyn`41GxMjSa4qMjV}10}iq6m}Ml>__r+l?rY^BI8OJeMu_r4%ZNeGA>XKCt5CgUy!oui)MBim(m#z%rxJ01qu{BO&T zAe+i-_E4Us++6yskLb9@%H&v4d}%#&DN@~~A3fvz^WJwZG{_|G_U}DKw5_d!(7hP? zk$(kL7GqPSvr``!MD>^y4G%!+%rSeV+ zdRLy>Rk$GHDdTm9oyLjz!m z!e}O}zMq%s&95S#L;)tEUmV!I7U1KA;q)uhH_z!I7l55U?TnYTo_BryB=aDn)1Y-` zUd5(LvO*jvgXdx6=sh^9v}08s*177cwbQwGYp}_omLz-WsCq@Y15SBEcZ828Z2k zhw7N53eYev`Xss@dd)3BwMMj2*fO6pGv9aqCvuk>xx^~f2^zIp^s5_%%vVpdrmHzg z07>n_I3D=^v-xZSi>sGP0&jtL@&{)#UFFrZ41BhrPjevwpk9UUW2Rbp?`_%^WO$rZ z*@=kovF3|gu8rfJ)3OG{mX~=avvlUaE*qn4k2W5lV;#VP!x8(;mS3zp)G5@!0YY&U zt`B-dTUzKoB3_J0*-JPp$j2cty#PG5%Mm(!)6l(ji`rz&&C23wnV_!h65!XG#%(>H zw!84)5~r?m_L774n&)V&X1CI-0SL}gT?_Vz^&efWAKnD>34WjJ{KRi%;ebi+{w1g( z9OqN@3!nj8!&7`JS&n`VcC85_XrB+>qR6J&!1EJIThrIqI-4Z@@=Ib}g*rMhgT$Gy zcYd5nAS%j)>RF(bf-O3@bV7tbJUNzNo*YI9AW3ZFEpo{RJt-oZQ^2|Yh!&B`Gkd|d zHuL1b6~&`a(kA$%EDpcgA6qfC^!~GfxZ5=JttymMH`E~85$9BP3@6P5FEL6m zh}q8-Q1lI@?IfAFZbLFH^6)xbRH_OU6$t3&A$qgk2Sl<19zBX%M6p)h=rz^@uSy>;CO*6uh&nZ zr;K6tfUPaw(YF4<2qN+^hKbi0P`X2+!vQBDs{k}SpD^F?gu}pO1k!202FTR+=xpbv zSp-2ti|!C~aOTSV$Fh~wd3M5p&o_;lah@yqObFQVNM{blE$s4u#Z#zwGz-w1fBt&3 zxS;CQ;QQiXPfL|A30!XYt*syhc$w_t52q%~2A0$-A4Ik_X~u+$oIVz7=H(4T$@eMd z$!8?V9t2MiM*n^a+-W^w>&{CfeEJuQl7q<|^TzG-guysMfZjcb z1i{uMZQ-^bHugMRzsQ}o2u|xL3>*lEvX21sy0G)1U`43m*Qwb7k-lqBmY#vETh0r8 z$?mN;K&o39H98=yN8uG4Ow$Gss-Pmdo_>Xh4eS-?@jC|l;`g`m>K z*hh>f4alJ3Vjonpx(60S>1?{Ri=6?0{C_7y!&0n_Q^LUD1|q=J-R3&#!>CW|dWgHbTMtC*tx0zKB? zjI7XXTv=j7=iE2_Ysw{Uj19mVn>Bf6pzgBs}{JV^uWRZUT5|9loH-(vzSAo+jU{en2x>0%Bd$;gO$TPPaRm74TY9smeeeFxD&0rDdh!=E`RyV=Hf#0P- zYju#8z<@)|7w`ljYwvu{a+(*JEbP`4oBhVu%1u?2yEMDvFzaYw9)b);0dhx?hxuNJ zXarp#eER|@@YITkoXVq`q7d@ulGYa&X-=Hq=oiA8v1O>o*sP3D@mt0YyBGq_gLW4; z=!wH28PIjP%x>#9b&%-p#-uH+DH75#=rniT`7tPrxLu0p)m~dkO#Pf3E4LdypvJA| z4&WVL;HAWNF`_ELe8IvhwB9H=cUzZW98u^?%?JG(nFS+&9Y}B7W95SxZNvyL!f_Re z1VcpP)I{^X+El4_P0=2(cwqJjv~tEEaQiW;)NQ3Lljn_%HaeR54QI7El8_r!gL~>p z`KFqSi=T(SEfXMGe%420*3s5g4N+KGBS@tWP=O>Q=*lp}<$9x&q#XLZOUqn@d=q{f zI4DAzi;lOMtp&f&wt5kxhB-kN*t*hUeRIraVdSHH6B|%W2^voUnuzzaRkcW&0c_|= z|Dj&|)0&r>)P4>5GEMm2+{|%6q^7B)SqM^it9=5bcgGn}zGM;B*AwO7MzVOeol^k( zmo8@ytA_6s0N|fi`e>fmY)U29306S1YF)e{c}6kB5nqug7d2#Ti$^HfGo}bV6Di!v zo~2m~A?~Nx<*Y(=x~3S=HKht>13MCWTb@f}{j1pcolAjBVb%9Q2~#*?r&=gBmAxqE zb$FLXX|Z?h>*B(N=fgUK)1QIad=>(A@F@s0-;V;P5& zs^jVwKzK_x%M8DP{_^}F*Hom(`zl#k)L1y+BSJ2$uhSdQbYKQC^uw}hNEz#;-nMdd z>4doz+8wuz5JWYD?GOfzo%$!o*0>o{%)lO`9^}@w6Ci7ZWySVzXMP@u!%E}Nj+B85 zWy#Scb@+Zqj9Fo3x4>xqo<`2%p*j(uk8t7gdA z`IRK(=DM+E#LaKMiCnCdBS~D9^R2676zpQ|z}kDucwZ%eRjSdI8LnPlE}G=(>_vPH z4P+{0B{Bpf9+H$xLV&A&)T#f(=9TE|lc$wyMpN16PR)^=<}b|kz~@0Z|5bm4;o`X| z5HLthe=l}bZLC5~#lfXq@E5wga?yD|zk$rFHJ`n^jz_Nfv>v(Yv?@F<*m}j)OHor4 zkZb!yPoe_B%xlZ4+mD`{$}~V|fZ3WH248`$s>juQxNg?64-62WjRn;-51Ipq{mItV zZhoAIczA#5O{VFk5=XFoN$*6b{^DrKwEvLvNRy4E{j3d%1Cl@4W5HT-gf_MYk@&-g zKgws+0hTX!JNN){;&#~_OAmZ@Q2t0+6tkVQS>#V>!Z7XS?qLR=_?%!qeY1vRteO#n#*rRZCr`6^nfS_jHP z7tx2Wxckj!*NxySC?MZt45&T>0?NwhOL;H_iwFcC^V^C3aK=M8P-~lnRDxA42w}=D zN;)ub*nGc@WNxNIGk*esm&k03}=muw}Wlrruj#!#Ji+{SbBP&(JLi(+=n-`NiU($g)$tcZ0*!8B#wV zVZTr72OOdF@TSki(Za|N>_>t`x5|dU0*GKgMHJ@TP*wM5S@$s;((B^)M6WQ~EnFqh zZb1*IMOGW^Qy|!llc0{suS_5KbMQ~~FfLTxeb3~-w0ZwmReJTXbE>;qnyk3UCV4_>&S&-Ds9zLOh)6Q%Fi7;n>eq{ypALmF$LI=! zK5(|5icQ}NS;7C$$+=*rvm9$hB?z-3U4VvER6$w}WMyGvXhh>dNI0 zSfB6@)b*5W7^Xt$$;-OHAljl9b8j18$K>**RT!M?1}j&)Z|=i+zN!u+wQk4p^X z3;6WwK1E$2?SmzW^A1Yi2kO(#bX~4{@8>XCe6O(Uf^&#ku2{EBmp;C5ZT&hvZ_QYe zk#ZJ#*eX3bR0O>Mf5eNoI}O{fK-Zg|L(yOJyxxwEe}7!P^J7R9|39&8SWNeV>30|m zASRi_T8>HR@AN;Y*V`V7{*p^9;O|eM@1J*z{=YBpG19VV`akWw^{;Gp#I&OlJC^g; z8g{${T@pJg@xQ5rEc71&6t*E)`hOO^vb`^l{_-(5ivBm+w;#J`eJ=Vx1t{*kbz2lW zV%kxO9m}EX0Bpxg&?T{>5<4of6D0rYz)p~)OJYYQc2r^~NdDD4e$#j=8F<*Bj&f^{{W@`LR~EX8?brx-+;~de*-o1a7j+p3z z*wH4sAYeNxv7-_@&h)P}>;w+FBz9C{MuzdJGn9V(H literal 0 HcmV?d00001