From b338a30b57467b37cf2fcb78bcb6edbd7b0514b5 Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Wed, 11 Mar 2026 21:41:42 -0700 Subject: [PATCH] Release article: Fleet 4.82.0 (#41086) --- articles/fleet-4.82.0.md | 160 ++++++++++++++++++ .../articles/fleet-4.82.0-1600x900@2x.png | Bin 0 -> 53409 bytes 2 files changed, 160 insertions(+) create mode 100644 articles/fleet-4.82.0.md create mode 100644 website/assets/images/articles/fleet-4.82.0-1600x900@2x.png diff --git a/articles/fleet-4.82.0.md b/articles/fleet-4.82.0.md new file mode 100644 index 0000000000..82c4bc6681 --- /dev/null +++ b/articles/fleet-4.82.0.md @@ -0,0 +1,160 @@ +# Fleet 4.82.0 | Fleets and reports, new technician role, and more... + +Fleet 4.82.0 is now available. See the complete [changelog](https://github.com/fleetdm/fleet/releases/tag/fleet-v4.82.0) or read on for highlights. For upgrade instructions, visit the [upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs. + +## Highlights + +- Fleets and reports rename +- New technician role for helpdesk teams +- Self-service scripts on macOS +- Fully-managed Android + +### Fleets and reports rename + +Fleet now uses "fleets" instead of "teams" and "reports" instead of "queries" across the UI, API, CLI, and GitOps (YAML). The new "fleets" terminology better reflects how hosts are grouped and managed in Fleet. "Reports" makes it clearer that these are used to collect host information. + +Existing workflows continue to work. All API endpoints, CLI commands, and YAML Keys with "teams" and "queries" are still supported for backward compatibility and automatically map to "fleets" and "reports" respectively. Reference documentation updates are coming soon. + +Deprecation warning are coming to fleetctl and Fleet server logs in the next release (4.83). If you want to turn them on early, see the [fleectl](https://fleetdm.com/guides/fleetctl#deprecation-warnings) and [server logs](http://fleetdm.com/docs/configuration/fleet-server-configuration#logging-enable-topics) instructions. + +GitHub issues: [#39314](https://github.com/fleetdm/fleet/issues/39314), [#39238](https://github.com/fleetdm/fleet/issues/39238) + +### New technician role + +Fleet now includes a Technician role designed for helpdesk and IT support teams. Technicians can run scripts, view results, and install or uninstall software. Check out the [permissions table](https://fleetdm.com/guides/role-based-access#user-permissions) for a full list of permissions. + +This enables least-privilege access for day-to-day support tasks while keeping sensitive configuration settings restricted. + +GitHub issue: [#35696](https://github.com/fleetdm/fleet/issues/35696) + +### Self-service scripts on macOS + +Fleet now supports self-service scripts through script-only packages on macOS. Upload a `.sh` script and make it available in self-service for end users on macOS hosts. [Learn how](). + +This makes it easier for IT admins to deliver quick fixes and utility scripts. + +GitHub issue: [#33951](https://github.com/fleetdm/fleet/issues/33951) + +### Fully-managed Android + +Fleet now supports managing company-owned Android hosts in fully-managed mode. This allows IT teams to apply stricter controls and use Android management features that aren’t available on BYOD Android hosts (work profiles). Learn how to [enroll Android hosts](https://fleetdm.com/guides/enroll-hosts). + +GitHub issue: [#36337](https://github.com/fleetdm/fleet/issues/36337) + +## Changes + +### IT Admins +- Added support for enrolling fully managed Android hosts without a work profile. +- Added capability to uninstall Android apps on the device (and removal from self-service in the managed Google Play store) when an app is removed from Fleet. +- Added ability to allow or disallow end-users to bypass conditional access on a per-policy basis. +- Added filtering by platform and add status to the Software > Add Fleet-maintained apps table. +- Updated Android status reports to re-verify profiles that previously failed. +- Added ability to roll back to previously added versions of Fleet-maintained apps. +- Added new Technician role designed for help desk and IT support teams. Technicians can run scripts, view results, and install or uninstall software. +- Added support for JIT provisioning of the Technician role via SSO SAML attributes. +- Added automatic retries for failed software operations. + +### Security Engineers +- Added ability to scan for kernel vulnerabilities on RHEL based hosts. +- Added AWS GovCloud RDS CA certificates to the RDS MySQL TLS bundle, enabling IAM authentication for Fleet deployments connecting to RDS in AWS GovCloud regions (us-gov-east-1, us-gov-west-1). +- Added CVE alias for python visual studio code extension. +- Added new activity for edited enroll secrets. +- Added deny list for checking external urls the Fleet server will attempt to contact that are user submitted. Refer to pkg/fleethttp/ssrf.go for full list. In development, the --dev flag skips this check so that testing locally is not impacted. Certificate authorities is the first place this is implemented. + +### Other improvements and bug fixes +- Renamed teams and queries to fleets and reports in the UI, API, CLI, and GitOps. +- Deprecated no-team.yml in GitOps in favor of unassigned.yml. +- Deprecated certain API field names to reflect the renaming of "teams" to "fleets" and "queries" to "reports". +- Updated Android MDM profiles to show up as pending on upload, the same as Apple MDM profiles. +- Improved the speed of a database query that runs every minute to avoid database locking. +- Added configurable body size limits for the `/api/osquery/log` and `/api/osquery/distributed/write` endpoints. +- Updated logic to trigger vulnerability webhook when on Fleet free tier. +- Updated storage of the auth token used in the UI. +- Dynamically alphabetized vitals on the host details page. +- Reworked how we handle server/worker delays to fix flaky tests. +- Disabled "Calendar" dropdown option in Policy > Manage automations for Unassigned. +- Added Go slog logging infrastructure and migrated a portion of the code from go-kit/log to slog. +- Added CTA to turn on Android MDM for Android software setup experience if MDM is not configured. +- Left-aligned "Critical" checkbox in Save policy form. +- Improved spacing on the Controls > OS Settings page. +- Updated to not allow editing Fleet-maintained app in the UI while GitOps mode is enabled. +- Updated to accept the previous device authentication token for up to one rotation cycle, so the My Device page URL remains valid after token refresh. +- Updated default macOS, iOS, and iPadOS update deadline time to 7PM (19:00) local time. +- Updated UI to enable adding/removing multiple Microsoft Entra tenant ids. +- Added additional logging for SCEP proxy requests and SCEP profile renewals. +- Added warning message on gitops label rename to clarify to users that renaming a label implies a delete operation. +- Added the ability to specify allowed Entra tenant IDs for enrollments. +- Updated the DEP syncer to properly reassign a profile when ABM unilaterally removes it. +- Increased the maximum script execution timeout from 1 hour (3600 seconds) to 5 hours (18000 seconds). +- Improved error handling on AWS DB failover. Fleet will now fail health check if the primary DB is read-only, or trigger graceful shutdown when write operations encounter read-only errors. +- Generated a server-side device token in the Okta conditional access flow when none exists or the current token is expired. +- Moved the copy button for text areas out of the text area itself and in line with its label. +- Removed unnecessary calls to `svc.ds.BulkSetPendingMDMHostProfiles` in `POST /api/latest/fleet/spec/fleets`. +- Internal refactoring: moved `/api/_version_/fleet/hosts/{id:[0-9]+}/activities` endpoint and `MarkActivitiesAsStreamed` to new server/activity bounded context. +- Added `logging.otel_logs_enabled` contributor config option to export server logs to OpenTelemetry. +- Added automatic tagging of prerelease/post-release versions on local build based on branch name. +- Added ability to enable/disable logs by topic. +- Improved detection of `DISPLAY` variable in X11 sessions. +- Updated the "Used by" column heading on the hosts page to "User email". +- Refactored query used for deleting host_mdm_apple_profiles in bulk to use Primary keys only. +- Added `team_id` to host details page param in URL to allow retaining team on refresh. +- Added help text on the software details page, below the installer status table, to explain the meanings of the counts. +- Added Country:US to new CA certs created by Fleet. +- Added error if GitOps/batch attempts to add setup experience software when manual agent install is enabled. +- Updated "Manage automations" button on the Queries and Policies pages to now always be visible, and disabled only when the current team has no queries of its own. +- Updated validation rules around the creation of labels to make sure only valid platforms are used. +- Improved host software inventory table's handling of long "Type" values. +- Updated expiration date of the auth token cookie to match the fleet session duration. +- Surfaced FMA version used and whether it's out of date in the UI. +- Updated nats-server dependency to resolve dependency vulnerabilities. +- Improved validation for host transfers. +- Fixed matching logic on App component for pages titles. +- Fixed adding Windows Fleet maintained apps failing when a software title with the same upgrade code already exists. +- Fixed an issue where GitOps would not respect the value set on `update_new_hosts` for macOS updates. +- Fixed an issue where duplicate kernels were reported in the OS versions API for RHEL-family distributions (RHEL, AlmaLinux, CentOS, Rocky, Fedora). +- Fixed issue where Windows Jetbrains products would not report the correct version number. +- Fixed a bug where custom software installer display names and icons were not used in the setup experience UI. +- Fixed a bug where the list activities API endpoint would fail with a database error when there were more than 65,535 activities and no pagination parameters were specified. The maximum `per_page` for activities endpoints is now 10,000. +- Fixed issue where MySQL IAM authentication could fail when a custom TLS CA/TLS config was set (for example GovCloud), by ensuring Fleet includes the configured TLS mode in IAM DSNs. +- Fixed styling issues for the UI when no enroll secret is present on a fleet. +- Fixed an issue where some UI users saw a blank gutter on the right side of parts of the UI. +- Fixed a bug where certain macOS app names could be ingested as empty strings due to incorrect ".app" suffix removal. +- Fixed install/uninstall tarballs package to skip recently updated status that is waiting for a change in software inventory +- Fixed a bug where software installers could create titles with the wrong platform. +- Fixed a bug where 2 vulnerability jobs can run in parallel if one is taking longer than 2 hours. +- Fixed issue with hosts incorrectly reporting policy failures after policy label targets changed. +- Fixed client-side errors being incorrectly reported as server errors in OTEL telemetry. +- Fixed issue where the status name was wrapping at smaller viewport widths on the mdm card on the Dashboard page. +- Fixed false negative CVE-2026-20841 on Windows Notepad. +- Fixed false positive CVE for Nextcloud Desktop. +- Fixed rare CPE error when software name sanitizes to empty (e.g. only special characters). +- Fixed Android enrollment to associate hosts with SCIM users, populating full name, groups, and department in host vitals. +- Fixed a hover style issue in the label filter close button. +- Fixed mismatches between disk encryption summary counts vs hosts displayed. +- Fixed truncation of certificate fields containing non-ASCII characters. +- Fixed an issue where policy automation settings in the Other Workflows modal reverted to stale values after saving when using a MySQL read replica. +- Fixed query results cleanup cron failing with "too many placeholders" error by filtering to only saved queries and batching the SQL IN clause. +- Fixed DB lock contention during vulnerability cron's software cleanup that caused failures under load. +- Fixed pagination on the host software page incorrectly disabling the "Next" button when a software title has multiple installer versions. +- Fixed a bug where macOS systems previous enrolled in fleet wouldn't always go through setup experience after a wipe +- Fixed stale software titles list after adding a VPP or fleet-maintained app by invalidating the query cache on success. +- Fixed issue where Windows Jetbrains products would not report the correct version number. +- Fixed false positive `PayloadTooLargeError` errors. +- Fixed software appearance edits not reflected until page refresh. +- Fixed issue where policy automation retries were potentially reading stale data from replica database. +- Fixed label edits not reflected until page refresh. +- Fixed report creation API returning zero timestamps for `created_at` and `updated_at` fields. +- Fixed issue where arbitrary order_key values could be used to extract data. +- Fixed stale software titles list after deleting a software installer. +- Fixed query results cleanup cron failing with "too many placeholders" error by filtering to only saved queries and batching the SQL IN clause. + +## Ready to upgrade? + +Visit our [Upgrade guide](https://fleetdm.com/docs/deploying/upgrading-fleet) in the Fleet docs to update to Fleet 4.81.0. + + + + + + + diff --git a/website/assets/images/articles/fleet-4.82.0-1600x900@2x.png b/website/assets/images/articles/fleet-4.82.0-1600x900@2x.png new file mode 100644 index 0000000000000000000000000000000000000000..9bdbd3a4d32cb6ae5d9cb92274e3c49d231944e7 GIT binary patch literal 53409 zcmeFZc|4Tg`v-hWp+Y2OAEhEf_MMT?YROjCvX_0|%}7yprN|yFvS!~&vP8CotYhC9 z`#NTxGsE=#{GNZG*YjWZ>($5HGv_|%+OPL@opXO)sHrGZ9b-BMK@ioA>(}l=5G4|V z$SEkuz&F?jdSc+uQTyxnognD+1^hpf8+XqyfiFp%?kZn}vRheZz|CO``8)CulpB5= z^Y93`r*>An=d598?(Fu^(F{_0WMT6#G53uL1huo=xF)aZPBPywPXe)1Lhl~oTFV$V zk!oMc@}gS6VQF%;5%`uJvpfo!6T#P-J%x9e+s_#4Jo`RjjI<;F0vTKV`sUYiiBnv5zP>=1CXbza}N zrkpA@$#Ri`_h$&4-K+uC%} zvNt|e)6kY^SI@6>(Pa15E4#xmbi;iar_l<?X@vyJ>A(2LtPz z6V^^-{bbwnfzR)TTY-aNUrY&#mZ124@UfDCtvAx3gXG!-!Jh5aeV+P z&srL*l5x9svF=>sl-x?FHqAGw!9tt)_x!#U%x4>OE6ZHG<_DMD1VkiH-#@jijQ*sf zj5f;vW<`S6$)J|iu=qlOv&EN838em~2=Q^AV%X>B626axaAAKCp@ixzq6>~-3w zG+D!A&(@h!N>^tZ(<$W1e9^((@coG(q%I8-eEbmUvOZ?{MnwC2=#+29h86qfB1`zX zYKRi!spSS89RwFJwQC9V9Sw_m2!>AbiyY+|ldj6B*yb$1gNdNmgwp%w!|_5HhvqQ5 z`o+m?u2<)rp$wJUwT_{i&t6WvY+<`#xwh7$UweC0D6eU%xT9gBNZ_i zOPni>8!z4nLs}oeJFQ<-S7EbV2+vN=i!z2sY(aJ>s!p|qvWDcPn;g#DY%Mog!`5(R zEPe(2LwMvx*+N;$#5R()kX8dV(QaMR&#{qSq7Bn~{_2W&FHEFzBR^Oku0;U{bUXVljl+u1MWl0od!y&- zoqrc)LVI0$=c-V;^&VYnu1|?%@W~w8LAF{qyD)CAiO2@yHNVGXe8fri2$N_6#@VFm zi?4Oj1GSWC%G3G|6xv*#O};1bNac=l@14-Fx*;mW8J90^wS!qA#6B=Gj}TfPol^f^ z|E@oUFQ|P2Z~JdUg-_J&@TRJtsoT`M#%{LxZHFq0;yqu0?cT%Nu(VcBVux8x72i^3 z50x9-C`^kpUVcwu)HK^_W0J*{q7qd1YN2)_^k_Ys$K_b5q%g@##?d~TCy2-B;cxN% zX5=ZdK(W`7Pu;6y12-B_(q6Zs)MEb!CbvIeOigr zBiDGe;YHEx0gPVbAdM9E30k4{{DA=yE;UiSB9d)fRp;}t%eTmsMHOAcWl)qu&OJq# zhjl#R(rgto6XbvEZTL39Y>Kvj*kk{Un0k4yaYpunU~XdkSkk>S--KN67W;krW*CqG zxt-_U*Y_60NEsDIkY5}x|5O-j-@}HjH15R6n4OE6%W7c`ri8KiJPa(+{OWI z5EmUjX0)H?$XR$~P|*qG5tLa}EzDS)&HhKHFw*8Jbtz=LUX z^l1NMh`_@qj=0i85hjn%d&?SB%G7kYtm|GU zO021Ne{4_m72C#(V>g4I1)I!SjeE%+3N(@W@Q{Q^Dp6tQB24tU@6q;NK8a-Mgtx^v zezbabB*H|(<;Up%rLz6>)a4R(@w{_kkDMpFjWyMDE~&R((y!{IOX z9YNg6u$=EPjjw5`$LeYccIL{g7?!qq(`9wx<*2Mv#!1Yc=Dx^C3E~(rnjWC`t zeoG(0QMUC{$yCIyuD3=?MB7`O$VSsOf*-V`cgitV7@$7yeeO}0O%!*w{In_?`S=Sq+2>4J2o^c6rA(oC*Xa#L(!v$uWzJ@{`k4_#9MsFhMfC;u1?3yO)(s- z$aRL`bE1lv+%k02@E3p(P41g0n!0s0VQOlBI1dG`1Rnl`@N`-F2%i6&bo2Jqh{ zb0iQzBcG_6Itx*}>^P4{^CiK2LR%Xb@!0sDhbv77UWP=G-2A~zkRfke@wrxmFWj@) z_i* zP*-pnztO2V7=WgKVQEw(-q9?}jY&+`Q+QIdn~JdNmd-BUEp8R~I-HAov}d9{*u$TR zAkJ@g5kLRkd*y2Zpgahd;J)@eN)@xhyS z@XCF!miZvl;BG6;s6W>mRj}Byc8@_jvrB$j$Nky$S5+d>%01t9vWhS7t+){FNX>jd z{mnWwHC@^#pI1^}v*$DsTH)EewnKX5XX5_`|b@b`<#! zmWCG+6s{?Yi?q82Eb(`Z9o4{}Ab8WF)0wq;JmLNsZRi*I+)I_B0Jv91XN5_|;Br@u zJ7SyvhQxV7NaR+eaTt?81*PkiukDn4+0;;{uj8&yQL@nN1qvO_pVF~V91U@?8vXqt zIJK$l^u{$@8IFZ00xd%9`Gq&U64&ASv~-@Gp1QsdV%J`;iAd_vHdbUm#=gD(o!1C^ z%}BE)kKdpt=zMxwY6mN6^={qtY}Vu^(T0DAKJOp?Ud`1Pj7j9z&F>W)NYDjC()Q?jFAT9afFN7N<7x z8OX|2VU}kvoBgbZ)qT66rNw&)Om(3rD|qoj@Ly@%^j$Er02IKDnFDR(N^Qdh^(v>E z08>02)A2BurD37nF)umh7lIiIm}PB{jF#tH5VRV*^(mR=(Q@BmM9t6>0MXqNbe+^F zz>*i5rh~994ht(e*9N7dG!J?+a@ znH1*$+&%4P(_G0dkdwhtwf3T_1Ozskw zzc$VoRDm>(DVGTwJW#6X* z4n?#8I4i-Ze{qk7?;2KcEcWN06%+@CwS`fx>d?gvPqTTOBdn;-D^RR-fUhACR{ zh1WOb|FybSf)8F;uw4vFswlYR8Y0(GCdU@kZqhZA6mr~4&TL`qFqgJGz*!#pCK0{U zW2rua%gb-`1y%(b+I~;p14TOhn5uR7}n#Jl4>9YxP&gSPxJLrhOVjPb_= zahYoOd`m>8GQyIc>(p;Hv=z(Imj`ZqZ*RYq#csU0YF7o_uUksJsf}w0uVY25cT}a;!U%~-98tq_Be4I1eJ^XR$Kt;`K@cUps=PcnG(K2>tlajv2nRmxv0La zScbkl3FWkP%I&~DzS4S_;EN$7UG}|=ttlJT`bs(MBaHX%tE}BoViEDxi@*Ui{FK4l z-O6etwIs;v;Q8Ub{kE9>z^Ql2xhu`aCa7y8-9?En+-LSHeekNbPJ7W~0Z%+xr}T6u6L&3DFSJ{0{S- zE6+MY>>MO}9!zv)YpEMp7=jssaP>nl^7~pz+uzWnC)=O%*58ggd~W*ti|5D2yCXl& zUTgHaBB@Is5|()5Eyop;Ixz{cm-b^YbR6Z&@%Z9wrx&rCw+%H~k%{kLzDT`l`?jNT zfb@rE$M|op7xF)2)CH20=}zfg|H@UdcX@z}-V+@#=#^8sF{M%X*i9^WamXqQHFQ@N zwSI&^clwQe0UoNdugxQT1OAhKYyZny-tzVGT(h}VqQz-OLj+qOZyr`AgC7h>KBmJ* z4`}+qttwZ&gD;^jPJ*D?-z}C|xJZ8~BLXYrEHgbAV=!J=xjWW{^;zyeW5_Ryl3H4> zQ3_?GP4!Z$7ib83?uP3SsGBP2MI)GZjrI)Y5s$3Ce>Jh)C9l#J8Z|(NG5F|z|FcOc zT_vRy7Dv<0`(|)wkhpZ2Kb}gpM|*lk!Klh5&ow&_Uf*52oNA6GbyYIBAcf<=ZrF=g z*e!z&p&Gf=fPUU!Oe{T+L(qNKvIuxeNf%EmP9!NyE+tE@;Jp7h+j&fxvUzxlm z7yXRW7`Iv-w5OT_a~vL1+nCy9{xfRSUBO7fDB&^bccpQelU&npgE;>*-ywG3b{9<5 zI7peQJ?6X47JE~!PgSgqqk|WEt7H@z#!2(TLIq?v{NME#uTSNojj+n|h!GuuctOe) zPg_!$1#R#3G2A2{KZ*oov2wZHfZhW_6^Afpew6-|?b~s7jZfDPKY~2WBGQS&*qczhIej>fQ${?}+QhZWX z_OzNSqTE>PfH`QeLHHzSpr|+f-f<9TRNI~~C@=7f=iJ#;gm?{AZt>O86yM?w)1^i;G>19bE-AQ zeQ%^ZRbw8tV_C8BE8pR#vK$>p{T&LfI5QN+mN?NM!L7I|DG{cr^>(<0^=aX4sVOve zgr~vPfa1JAj1ig3z1^N+kSG;PzP(d`5VjtDsxh>)Z(jdvei&Yiy1OkC{oVK|6&ztXR6rB1E`2VO?}>7qXy!TnV3@rDgX zeVOaX(n>`hVqS3;BEfg@qI}nD2VWmU z{5Ay=<%Lx_T2EYMXN*eI#S^!VdLfP-XV|V1BJF#Jwiu+xHWr0f$IJ0&myKS%10#qI zf|ddv4>^Jc(6nXS#=;8}wtr4ti_!WA^49Blug5+W*kG9A>q=}JD(p`sM=~oulsWrT zdR^XYa#_w#8e;6>tGN9)HBg@;u+{|3w~zvz^juHF8f`xx*QyifT(|#WubPpD5;i@xf?2q@EZ&7@iVBAX8g*zs6H|*^kZ> z7*WIid^yRks!+M0y>ho}VwVzETeC>A9D8IkQqwQ0h+oh~ZDy5Be;XnaLPm(-QQz?H z=$k*&H7&~M?tzW0?1*$lKliEDryHDJ4_u_SeC;xq(F+N>G%+e}aVW4KJP!9Egs)4| z{l%PRT^oU$uBNL$=Bl^U=W%;>smu$Akr#i&zSP)fIBtzCq6bgO$TSd>dOHI_y$gAJ zsdS_?Eh{@id&~1>)W^S??lyGJrN%Aj;S!J|8)IE_DUb7(75*w9Km{L^EX!?eacSEv zA9cnGWp-0FOm~%w`;*SbWOZ3vBule-VLqpw93jd{+>t<~o{QIRLro&W)Xw?v0?e*& zlOMPh7_HIMralYVSzIh_-8g8UOf~Rd>wZK4PI!^8GgU0^Z9!ICnZ`kd5ERlzi*G}Z# zQB~41oog7K%b~_E1+L*nLX@;w{Z;)&Zod7onccM?^}#@chY?@UGwUR^@6ZVBxpd>@ zshqIH#4*zSr=SDI`sYtU9)W|n4bO@q3q({`RaQ8e-Rdmb7q*VrI4;TZ3!5c(!tx^)Yk&_M>PLG2<^vWPg35Re zd(UAU#Q9$rGMa6M{lWd}9!}V(UbBV^*$k{{{wKLvvh9yAK(Gv<4Y@2xpGVY=ETBp+ zjBZv_S-xoym0{FM-Xk&-OUO2s!KgRF<7#B(xUBdFbJQ)pC$;YDZn<`w!6Yqt>%CK{ z$2=_(0lXqyaHoA~t9M5zFjiE#A?6oQXUsGT^zGgGZSgCxA-E+66`j0HK)fYJH%sb$ zsszWsj=UCtUh;8m{~BkU_=pcNfD0!PQl#TIs&&?WjVeTTCL`zkWy#F+{^>^mB?}V`pd+J9?sV_MEjG+}se@ey9p?VTx{QYP1uyF00tTw{@ z|8Hu7O;p#~B5Nh8-jBr49%2s^+bLoAeD=sOI$3sn*d<)GHT%<#0fbodF5!xUW>m*> z2ReTRCu_?$!1#%xu;;>S46bL|Tqj_nbQrDK4P7tN4{=8YK5=6b7#TpCyO$z}Wh}%J zL=fC*MroeHp~-Fl)>6B{IV4auig2D*d?<8NWX z?mgxHVod5`a({cr#7SRMvFpOA#Xpnw$sJ1#4>pmN=49AXUY9^HwcplD@*(acK-7u^ ztB~Slr~UMkfzHHJaw^FZJXwGUVfjN`KAC=>ow<$E5gjrdW4{?qQc^8RUYN)_DiX)Q zGYB63p}mEdoz63SA#Ec(*4CB;U}^IZ2C=imVaZyAsqQwCMTA+^SU$1FxubhiQ#s6z zUq4gyAOw#QJX$XhRSIS8XWx2q&v4#Dw1eZBJPk^mJh4|~?G2q@0W?QJbXQ1sAL50Y z)Q3Fpq{cBJ}^H(Qi%x#)Gobl{P~%^&8E;@3w}RaI=IpE;R_?no}5- zvlkzw5h+jB-{-Rld9BD#^G<+VYnh{U2$RscbaTAoOj=9Nr(aZnHDGqzPMxJmu1eVZ zd&t02mJs#|WY=DdjSV84Z)+;@Vgx>ZD#M*(20;7fGq@l|AaAo%VD$Y_65)^42puAw zE&C9m8<_tozZcxXet5|8k^5{!%JvxI{wWSQ`@gUTUQRH+4{y#!oG_9QRY?%IDB0xz z7V81nQBvlx;ON$?;HAJxVrGV#QdaF!fk8SyJJBkeP2rCR5|TeI3DtiGx(QV$t@bMZ zLDLBQa&#S_D?Ft6)YuLLgB4N)N-9%C;1+@V=~x4>wN{6}^T znCj`di~cNni9S_ZCG>M#UEM#wpNKz6N7fxxxNnJr1b>?5LSs`+M&nhJ)P()4LGc-- z4s1^nZO9O|8Ru+47RcH zK4FU!mC<@C?JKk7;9HqM%@%6xx&y4~JaPfu4b zd_nT&nKW6xL+7i&y?lMKQs1CL;njf@dDGdbPXGGfO!`gd<4h%cn{(#5>&hNIeZz_u zX|e{ve_1*EMP$WyOT^9UW85*>1|J@gG7bs}sxWU==6!hT#smzILBPX&ezz{%7zNND zrBcP*pukG4lkxYYpO<9GkSh7Md#TGnwx=J4lh%Z{G8D+%qb`_owZHP7!8pm$)7yJ7 zQ+zkGGkAlBL8a7{?OtVeYR_F-h}r#4oQn{A zJZwUZhIiH@f+DB%e|57zA0~$q9*=$el!CU93y0+_@?51`u-#zbD^zPdv1n-Eok%+0 zOZ`$|p6t(~0DUQmr6elY<_T$S7hYDDW1oMBL|J{_#HLf#drRsq~%~L%4kxOXPf`hZ|@rWhn9xbE&zw&FavRi(57Q_*RbkMSwg6B?sw~ z%Fas47ahgSe{v&>GN87zpgBhhlPj63X`=qzqjCJHX@-0@isb<=U$vEZE= zb!U6_lztW#irhp3DarW+{k@L#3mMqhKnLp-RcH(Qn{vH>JG7_V@cjk?lWp7_E+JXS zemy`=@Nk}8a~p@@mX<~>JL4LI!_KyV<2Mfh&}1QF$+RY+L24fN!PLrR@C@Fze_v$n zQ)Nl^qh(2Qox+E*)sv9rkgbIJO0yLhw7_Jjc0|v{Vz^FG)#*JwLqeNp9$VZqw(gfB zG8!YmF}fuuc`?ijB~X|8F?>Yhsqn?NkVsO!KHN9DT-*l>6V$5eHH>S+*9JXitgOI> z4DHy(?~Si6);~Wwb^0tFG<{eierVwiOksUvWWBD(h!wyrJ@4CY&FgEScD}_F8uwL0 ziE_XYOyXwq*ZLb46&Zi1H~JA?l@x*RDW6tUSs+4W9ZZ)!$gT@w&dztp_Wq9SZ>GvzK^q1$`1sv^Kghm8p5(+b3nY2Jh;G0I zJ?lPP<3iRID4$iwPTnm=i@A0p2j@AYAYGSaClq@C4qndE$TF*<|LiY)jP`4@5qi@;R%d{!`-nRJRWG?eMkbS?tDgYRou>7l| zzEOIKuUK?(->8}o%S*yRK)<(A*dK%+-Bu${Gq-=JC1AfN3Bg~T@^2TrOoy4Kkt^|X z`B}N?3~#8xx)8e<_vyR{8USCbKOX?J>Wgnz8vfw(Cz zGEn8M)iHj~yWP{{=jtC+m9dr@6?yB-RJ;a(R?Cz491TiYq?TLbTMXotN zgAG)cQEXfG5Oj&;*zegw?MPjo?|^HmX*Q3cDZ`yoe5Xj>$t;FD&N)v#a533nzf=!v zO(QJ!KusbUd#1-ni|$(VEE+`*;%BBfE;y%JQe1LxuiT_J3)QjHQ6~uD%QTaj=$zoc zm8xY3**;(LrnhRIMf<93`5Rjf7TP;MrlR=-@AZ?2 z^pd?IAyb%B(2;W8ruclCqOWA;Gl3>(_F%L-*fJT^Jtm&XqMPJ3Gd1eh!|I*j)cy$&gQMn-g*`p!M6mQV z5;&bU{st3n2C0PAsN~^&XQ7c3u@@BB3lIFs9(gcrA&9DmTmBzsCuyE9k+)ntyk9%m z5gKv;W?dLL5pYW^0RB{tfsYX?wR&)8KOXE027V^}ncNC(fI_aJh%YUS3I>0O! zq~85eg9kiLa~D2z0W;~5!OPAb&YKRvg)foU+K#vwv6i$Z9@{6_{9sNUT5R%bV3R$A zpau2Dd!YzKsVd}1H>#QkJ6iU^u$nOU^y7o!J&g}t?i?xTOJRPal~>AM%UhgtkG`Fo z5xW&USEVZ~K^P4eBh<(cRQBYdOW)_mEkecoM)xx>Sr$?*^KS3h9FTh*Uxk3vTNN&I zFp*3Zz4c9W`faBgKN5@`c>!LSyzK-VhwB_n$IYvE2ERvwbZs8~o@eLFDS1Ep6J;K} zoOip=MzLfcwwArv7q;3X9q-uyV@uYi;f;w5$udAJteeg(a-@p8V3r^Qcq%??0Do@M zb)9pg%FvKZ@HCi2C-7cWJ6#%f+OSxdFf3Uwgdj8Iu`=L-bzdc;?jUg4DL05MGiA;% ziCh_g2VPy5Y=bNOVfA=;sAC{2)-;aonv<*=F$MjN6uPzecE+4K!juQXoESG40n3{A zzR#VHLxJvL6<<@U=i@L>|E0d5Fnz0jhQDsu@fLly@A<* z#>Hri9qXSWO7D1*K$U8zJ^ON>?ewiJL=1iYO;Km8Yqy4pW5T#(Y|PxFrkOfPNq~*( zB$;k@-eQ{@$h-9Mo<>_0O}Gs9y@<$jX>GjOcchaNh|(fdTFxJAb~h@POE!6pU{c1K z@mEG;801#|Kgzb{#QZ@|_1NlmoH zdJIL7b)vA9j&Tfu)nmTYnHKEt(H7MVf7p0sr?MO^eb#+YlB26v1~Na@HV?Px}jtS>1Oxa5@ASURr^{u2C?jA&M0z`DO3%1F!MI zX!0u1q!V0P_mp-1xva=;x|5dZxA0wjHMGrdmTQ-_$M0Qp`GkcY2_hoLrE&`PM|ZC* z`r)eqzA}65WsjmWpj*D`{=mgZpdwpq^s9*1ZqV!8t(}Zi>&#EZ=||GCE4*#>h26CE zu1eV%X?TR~bjwM8`Pf}o<|op%Ky|j+c5m@(>5Pmul8him$po-r4JA7Yt}S<>su^%w zv&R*eQX{`Kyfb}p-pum6@vUVCGI^}?+OBbZTB5ktEea?~g*wA+7jjO2CYx&^ynB*Im8GXjKJMAn9iNe1^2PZMucBTfz0+8e zAFr9-tpIsP1D8~MlW}~mxNfEY&3?|*jKuqv8smxT4M)r>+U@&Z4z`~*Pb6E^14}_;yX4sc)FtaJ^lt&P(}n;Y_b_grC2y^^qU%*7*m%TwcTu z-BCZ?-MOrYoE>wrsQZ2Clk%sMmC!5Kvs0@La`PyjIQPeTf_QXKY{@fah6*nhBsU=# zNE(vKy+QY`m|scNdi*eA!poQSc=%p22)G66)Z+XAXm^A@_MbJg+GPmx*P|44ZV#1@ zV7bTN-0oTAdrvi?Jn?S!=MP4u*?-C$?wBRdTF6xj5u~2{SP6(99=Oxfr%CNV+d$^&$ z>j`_Q4GNrQLUuRGqbh2B#7bvZN?)^R%Ei1}-`Jxb?8Z8D3=G}#K^1dX;`u1AcGFmv zE|)iK=ruoZK>|*9j9&a`*sANPHdj}^x4NpdEiDAS97#`?n*t`G7)MY9r1=An zJf>;f76!Es%Nh3KbfXNisLsQ1qkmqIK$PJCJF}k1Tnx6gUwG2YjZ(802fJw|GdkJ9 z)hyy<_~4xKAtn8>!rX%8qv?-eJww$?wJ^p*KfbEJW;V)G=WKH+PP9ml7p=|{5}p6U zCS^28*H*Fe>+2LhJ&iUI7(*6>0w9Hs=+o#G+d{^_q z*1m{AI+I~_TkzqNyhEmq-QJWMtqx6KGEv^*WPpVAUXw>#IjZeW#+_~e{a~fyW|K%8 zc8?*aFXicdA_YTK3owt{)%fiPbH)^k8gFk~J4~I6QI_eK^aMX{WR!eZVZUfYo0~PW zyY~*f(FC0cO>1s5bvMraDR`wCdc&llZhljh@5$MGl-wmilqGeiGO(~2vsd+aD{@XZ zs;rWltj>E!;TJCn0wfg6(Jz-ia5z$MEpjBBQq~@xMP>SpTqP82ZmNL3aacNV9~h-R zs)sM;OjaI9|F7+EjV{ico3?q0L*}zlLP29M&qjpCC5EJT96D5RmrT}o>*rYRh*-aI zR}SLRJc)CbwPce`mr%9$s#Si2YLLgP){_(5s$ zHpoH3x4Qb}93S+4*%>h?w>QkJLhHSjkp&ySW(B_tHnpWNkq^_kjrf&$!khg!_wHPX zQ-93M4%M11IK`RFC|DWqRHA}@AaJ4ge!C$CmNTfn!63U=q1U&WB&L*`gL|5f$dwkm zQyl>+vm}&qztV4lF4pNoy@j|!2ntgHtDiPPxPVS+#_$6Lc{)f9G;Y?>~Aj>fBV#N583qARlz+1eB@%w4&BB(8MtL#-XROW_flNxDg z#;BEA5mNe#rvb#0#iEkvgjx}wX~pS2m32fiB2!m4t~4g7N}r5#^Y8)eh_ev-dd`b| z<-Aziww%;--}RkEzp3I25R&7SLWPzMjs`0(NPd+ahi-ZX&m%D{0pt&0AIh+nO55T! zto5=*9a2u|-f;MZz~$80uk_i(ks?PTA4Y7;-Dm7X?`d}&JBNQcY)OT{&u42?v6$`N zpoY2&-r{|~xPkK^3Y(zJRHSFrmXicd7)*0LKt6rEA!FBAT&s|<`J}6={0O)vPnd~T z!8x@fnzwkjBHdEkioz4THV;EtkvXNk#{{=`Q8b5vo~;eP-(|l#8GkdR^{R{&0Q7sS6}v08>(qf$}4LrpI@G z177pTuN-{~8LC&--04l8JIk|=j~w+&&0p=3sY@82!dQA_4i-s3)0A;Wy^O1fJi(8s zU0xf!Y4;EsRegMVSJ>G8lxYRX`F`0fg&;DW!lEajp<;8-Cq`?6;mm^A9X8z@-MCh* zXdTWa4Q;Las*K+0x-m53g1tMD{2nk*_=S z>}xyAz)qxF1bOo6;MP)X3}zG64&(tjA0b#lR$1j{JTG2J$_yErU;MP5$7;Hu?_l>6In2*>ou<`5PF^^zC#AyIK&&5O%b}E z2Xc(CCg}(`1fey7xcLncF73L&_kez*6+i7dyn3SMBe$!lsYw5gBH<&&p#ISIyEyU! zBwXi*{IDWve`}@JA>?fNhtoU#7uG--q`7}AM)VssdabP*MGJk^%K~sS?brfr!D-=% z2P^8(uMod=N)3^W8}A1lW$-6Q+C77LXiVq884jo`+U-da2vx>349La2hYcH}GI0Dp zN*dEX#fv@IWoiI1tB*iS+Bkc(oT8Q`&N7L+0BP!OGN)cNvbL8gseta**fot8Z$YF>ap!-ft)|J+A*)4!Ea zm6*Q9MvAEkI8%HS0WDDnccWkjHk`13Sm8MDnZV7A9&jx1E6It>?0QzoLi(tNGjgb2 z`FL{eoM4VZkYhVg)l!lM*&l-W;^_;F(A%tR(0$x0ls*C9GI_Q{4h1@o)mlA;1ArPv z=-?F8RaXsd`&-m1l2SmJ8WZ|QJS8iyoctYQBq!FUXC!1LyTJY^%;9;e;M|Pk+~>>L z2JO9fF3kOy=IFYIoR1r~vzSVsm8E`oy!^tFpx$yv$L zcxO{|lG^pQmj1@x5RUuI6e@X$eIj!15_6cO7CuVqMs6}ryT-XKgfz2ZssO!IVB;pM zI<3As9FV+!BCVi~jtNe-9*?AizMF*Wq-G7Llvc71imNLoNPkJhpV|;V$;{IZy_~WI z1?`iSX_@N$p3br)878Ayse49@0}S94-WzS1_ckCJa=i309_eQts;_F6D%^Jlz(xf?mBQ(m_j+`&X(TTQ~2|3n#g){)DGzTzE_i#D&`eX4#8>;8 zHBXOzBAfW_bk*WSrd@B}*4Lf-J6-owHAH5kv_FZ>O24rhUx89ERqbxoHIt_SnlFj* znSEc2-A=dgy-&IBmimY@i3y<9uvHZ{Bky?sEsu)XAJ8??-tmo9lyz`ne_|LFzb(4) z!8J0Pm7S8|y;tOkyEgBXvtO~tl%B|No$0AjIH@?X80adyZdYQV5zay~?H)O_GIiRwE zdT>^V-rF9qq^Q&Tomx&zFOUZMe6?I&we1gn<1<%2f4w|AnPXu2JBLGaeN}Sdo1Zas zt8MYVf8>mIH&N5+P~-gatI=2?i|-Ykvif4<_Tt-{A44Sy8AjXC`R6B38MV=TPay5_ zAiLVc;@o7i^x}pE{YbPowemTf;llPO@2c&J6VkYr8WN8zeYrxhNra`R!bpn$1XdAg zHSEpHw8eJGNSSqPXT?*0r#-f$baNDFhKqv`m?u;i9ByAJ(NGRM3QcQEJnsh~F8#sc zha@TnYK5a$DL?SO&s=dC!Gs&qf%8zV`{iv1|LCyz+luJ-=(C{) zf{?Xe*SlI8N)jnqd`AmTG=M4zoVY^f5m1Y+?fi3f0pIbMKcMcmxAX{slJ&r$y{jN$ zlA$ks;#II*cb{MWbV$4+{VDakCfhwlqtDE=>0IP1(LcBDIhS96y%n0T30L?`HCrr2 z@zO8q0&M$FTuqdAqj>~9IP!Of67y5=*#q4R{xGrD7@^D_{cN;!eNxQY$ktWVo}tkR zlNwc>dX6NFbqI4-7C6$x6&(p8MmyP<@=nr4e~Hx?aL%i&OD&cvS&z!>K_x2oiTu$y z`BJl8<)Ie|-DMt=b#)Q$#Z5Hdz#K+_J~Y*dlz!vTPKuLf>TAKJ+{s_h>bjej8fsQb zb4uU)$W?c(Na{&!wvD|R3f6ONX^~pU9A#*eTBxm&GP`n-^f^$Q*?uUkgTYo8huc4f zOA0{AaW+2P?0mmhS7;8g2lT(I%IZEE)eRysdDd&H!>bn)=m%$G#h#FNs<6S#A{Iy) z8%u!+FxWEgJaSv&pkCfBkc2uPZ%e~U=ksmuyKU#|7;b$|SqN}zf{e*%0l(nYPCU#D zKEWy^Dqe8nXam$fL7Ac8qwr|`%SUj6L4iVxB+IFRF8q|+gHJAw4AOf1WnC}*rhFTY zL>CsWkJ+ETvk)p0&Bt}D3HcK6Dm7LgH_FPPG5a|QD-U)ypnF@{|N$v`>o$|9S0 zMzF{x`8B}+nC@9p8ZovJ2or#^4hI1tJPG~hwA3bcv85jA9WT6b!hdgjxnMIae0503 zcX;{t*+2>N@FW%MIF>!9w6INv6?6me2Y8y``vT78P^t@2=d7>Isbs0>q67|FrjO%U{6-zx zXs=uef#YQSht-lc*|?G@5dcADSyx-S9hWb^Ew%l-=N7HPj) z&s?PRCjA+2d;yU)YM~<^pc{}kxe}|lvxMXNrsQwnB(hyOmEfwak5I9zeHg(_W)piB z^@@PT@)#KLIurEKR9({U#YT=WK-1<-$CEt_i$FUB-WzKVY~*m(EB{gDKHrX+JQ9=Q`Hr>Y*v4cqgJdxoZ9BrCeM<&G;x#a0E6#puVOYF*q9WFZpiAe;%mE=nDhgM zQ@ZSvwygAlvX8Pb;o~g6H38g-aN4Y(r7l(V=+LaHay37c+`qnAeq2iU7LMl-J9sMu zylIdu?Z}|Nt2}248Mj+;gZ1Sx zH#%LRm5sogKHl?K#;U~&ev3%sks+7@`T*6F;O0ir? zZsmj0tE$X>{G{Z;JB#7wKfc^a?dbu@aCR&CPW~fM7C}w>)m=ugh+zexDMx~|1+X@> z_tF5#oqR1)im3YZmT)VatLvV z0h1{^2eVv&(AM$>>O&;SZtoZ;%w_jR`A<0~-Q305A6B;Fhm;kL`dxl>g{A9G0rG#U z=}HRoO=_=YKFua209pV?+S9OP-|p&B7Lv9X2vKOb+Prlm1Vp4(EHRAS6K!QInI4;YguXl)pIKAipYbmNu%yT^pj21 zFqKyi6O^(`0UYFOcZ9S3n8Q}wfBqb*yQ!iw*tYR7D9B(@d zE#QyM!;8JVj+4|{VBdC<70viBf?hzks9b?AM++n4lScV%*GH!9m?z81u&0gfiUA}5 zQz0%h{m~uVS#~Y9)z@)LO0|)F6gc;(HN9Mw$KPJD_Ev&RA}@P_duE_UVrqJ|ELeJi zu!~bL_=h%ibZ1Nw9cI(wI1#gqe|3Z*4`5&tNGsQ)r?rT>&+U~p`#r%i6F|q~)v@JT zzpSQ@m7jch9Lg1LxCt+<#&wP6S?=vA&Ru5|{w4eC(SpeKZfo4yNZBs0Oj@W}iP`ga zk*6c9TH|Rk@@&OYIK>CFAmzXaoS(w(m8*m?rmBS4zG~s@MFPSUM6##0%69RG${;vr zn&+S7+uHg|KjZ_aghE!It#2xKCAc~6L5)DgQ2=Uyg>VSBaYBooKc|y_*mF~S3#-hA*L>uE>%xo!rU7(Grb9rI%pO(%iH-E z)bjVAw8b>W%WwW5dm`0$<>?T0=u>h>@v1@B#VnkZrU10El2M&euKGzDt?$)2Lz5)4*!K_M1J=pU$Y>x6kA^hM0Q!Er}}Ji_VjGuep4E>Kxk%AC2s_;Y`zqpVqb0dQ-pORG@L!R;guDh`tAlg*(P= zsKVj(3ZviO=u;SJA8l@ax*gW4U-IxvkSMutv!iiCDbZBHX}Nflz5#{w6}pI?Vgqo| zCj`afn%)MmX6iz|QQF6u?=|R8S^l`@GqCzp_*&21E}k=0zutfiSSJo;`G{MMPPfsC z3p%BN(fPpTw!0ic!n7uh0?D=)Le2M5Y)em}cxqmV8sMZ@J$*ugVvZlynHCg6Y9TXr z4S^Xk!GAr+rOgrtM3$RwJFGvxO$UU`pkbACtRr+k~V%hbEdkaEMi?XFS zH-k=8wL*cks5V3vg9D!S@Xj)r0sP$@uLOt!9%Z#8{Ni+kaj;^Yv|DM z-g+m=1;RoX$>+>`GZVa8Sy=Ct(T1C)asddfuL}Lc`R+ae73Quvt(q$aL z5pOilOEKV~YdRyvX1}6Pv(YJCsHi#@?D*e&W%tX+R&yZb$-B>!@7V4hAy)SB)!gZz z`=#!7L++0%J#F)pi3fWKq;}pv#hHN$44ej~)Y+iOZV9ux{%Jnh(n*X&IoTPkP{$^N zf-(N#dT@{32VJ^b960A3V>sE6CS_tr=NI}Yaa6nwpkO#Cui0kd4M(#Ly&@x@FRv)+ zsqN!hN}tpPkz~BE4DT84pT;Fo)V7;iDZzRmeC_bAjjka~bq) zMhl*d?BdEjj7_;rf~86=DTs)a4oTCp6wq?sSy`&`56=1d zP0w>JR7MV8p5OiBNwYszv{%#-7=q=MAo#sXsFT;`%Qd389=oS9w5TS`v~U4l3;+JN z$2bEklIt2_yDVei6PVXXihTgrW5er50 z4o!!HX=e?>y@86S9po+FwC&xQdgm!LBSz_hq-56d&I!8DFV^5ASxUy6u@Jx}^|()j zP3M?KK%q6{?oqV)XXe~0HiOaQeYxld&Y$MRf=+0b$m1F}+0$XcJ|EQ0Lfzp8!!RkW z*X}2hY4uxdrJNm~M~9f~qP(tfW)rt0-Np0b#=HTWc!i{(bwPq|u2O!u5n|fq-OrQ4 z^dnvL--FLSe_M>3NpmdfdU8EmIeE`eR=^y6pKga-RlG9xogk67+`NB&yE#}5xg&06 zQ6YMpml@fQgUZQ1&m6TmGP0YHczS{(IJWnPOemp?;dnhQ)1AP5z9+L)ZDM>VucRIW zJ=&-%)DG#_P)%1CBIbjCwd6yTj}-Oz0p8Ul{tnKxkxk$1LQgrJ6^%dzQaR{bNHo|v z)t_7)kbxSvCx4E9vrKrB3e8inmw)eLPjzh8Ugo?QQ_wYaMn{dEof|=F;NmewY;0h# zrzm&sJN?EBoQw0UWc1kDCdZ?D@KSxPlB^}df*v->_2irZl3f=T#`?2_Kqq7Zp>n}ruJyzug`@S+r z;W}E*mkWH16{(mSFHOKe0-8nfkKcJo@N zRXgOot~uP>mZbtANy&Cuo}-ohE1RTzJ^FxkVDQ9;-(dq22#>I!E$%YJH-v8c!-0x& zoPmV>wEhgI|b?O>O)%K*i@T1y6$t&WzRT%CD6Rw(-}U>66jMy3W^3f@Px4 z<_tYd!FpzC50F}b*;w_&B8;3Y{%Z{a+^UpN?ATR-}5E4=#?2_=ou=)q18MT z_A>WPg?+?BDLtZ(u{JdyTrsrI(YW3g^nzaCvYx;SVZycP-?<7Q%niIJYm9E)=ssnC z#__gQuz6TYPfV!vGNnR1SKkS4q#N}!=`GTMw%k}S%4VDteEg9xoYmb#elX`VM`}tK zN_jSKEkq{#8evbvA6irEPg)Z~kb;<;NAfQObhITc?7(3#j&qPfy06&%b6?Na%baJe zv}g={%F+Hy!My|62>*7sE83;Grnq=Mjhumlkz-|zM6laxUiH8%ruExGNtN22p@DStIGQhInxB0RSEjZCV z!#lA*Hpe(o#0|n*b`v@89zwp2H^fAJmhcjNthq+9hpE*!I`Lx5-jDAxH``YP{set| z23!Eyt_d3*yT&hm!H@m)5$BEE2XQ+Jz7+B>1yw2nKFc52Qrkv>RbNlV(xEMX@l5W5ApC+@EzQ95pISGBJN$}<8_C*=l5Hi%hyM94^X7p zIPpQX)?F28aPk2|8`+r1)@(aqA;2ac^wJJCaVGzt7D{p5A#x>LAV^WiS`M{&(4kcP z9|bTLf_H=L+0MkHT5*9W_zs^(=TmyhuO@|v*2b_FfSkN%hDC#et~S!%5eQBrxX#9} zqFCQx1_Ad_CItI*Z)?<7IjLiJ6y1eoWWA;VRGwzsP~d%H4JG~~DQ89&#ZhyrkB}?! z14+i|Y(Z?wwT94I@ZoPSZv1(2gR$WNeTeyw~+4zZNEG_j|+&1<`%0_sjvmNp!zlXm9Owp>n_Idwt#e&*Q`* zXzL$UZ9=@Qu5BBUYr}Ou3(iC$OO0)0EffeaukdOtgj$?CIl=v{SlJcJzTQoXfWy#d zL`Y2}a~1k^@w-PYfO`mW?(RugdM1?AK#Nc%Rgd1tmh4H18LG2P_8!(OJ~3yR7e(S( zb9VK!_5TpkO^k|2U+-L$^%I+S`x%Dx(hz*fz|(jE{ZP1b(alc?0IPF7aiVDnoN~Bw z-P$GDNm2|wF@oh|i?Vb*)bz7x%*NO6^*1!^ZA;+{N$^urqL8z!BvyW&^8S9cXc|s` zMzXQ_WxvLS2SemYEGemeao(i0cj-3)7LRNJQzvz+F617L)8g3tZDmCXi?X=lOB9NG z+g4u_E4HbLJv(1d{|;v2`??Z7!YoCbj~iCqDa8=WnH?w3BU@+1EGp|M9sghCsF$~r4*g!Er0V&fEVPF5@R1ehEjA2hl1rO6bXxdS^N_3^(-c+B^}ld^S=@|8?Yf2u)F?R%bn( z*d*Ef%*+a(ca&#Qk4vKP9YM^>j3L;;!!*<-|GNd=tK3nd9`^<}!m6p6k#fKcZ#qPV z*tAXDZVOT%&N1kv(a*hs`iOz@PUZ*hd@sWknT>HT8MHbh(X|Y2Ks_DSou|Uzg2(e( zJ0kDiV)5^Ch3-0Yk$Y|G%)$t5y8?L&TbuRh_l@eIwEWrj^9t!zuA{qY+t|b(!h~BK zb7{~IY^s^?hK!dpV{M?udYaH|EiVc^GL{>h`p_7>q4bcmN0F_~b3CKiP_jlIzt0-! zY^UV7^eEvvHJy2GHsPQ#`g@Vb3syekpxQ=;G^oC93u104jR$_ek%X|jo27%ML&cw# z1zeROUlMx{v$l`&inugQMc-E!ct%>FVRLq$w15A=4Hl!l5I#iA74pKoczdfqr=BdNPqYL>*&bQ4PM> z$DfQ}%Uef7dTv%|!QS;pXZ71SRGmCdT-w}uDhnkU8qkk~yxp-(Tx9vyZq?Vk^}O{# zD0?5KxEM5tEunE?%8E)(s!~ZqBv=(x)Je^QL^Co)UUaJOQe}0p%LJ=AOoMev1a7o z2$~pu=n+!k&vBr2va?4GP}96iEhF1?a)?_O9UgnnW$@IoNpj1@@l~9thposieI-Rr zMi`$L03R=9b^$pz0F(M|8N_2`-us!Y>5~6^ZkS=V*?1XWz8tVEs$8}}_wf+O$fGR!sp;5)hlvBMvid|cJYd%V^~iMuoPS96-JWkmsM z&@wmTe3LMJR+gUJi1V@e?nv=VHasY~<|rg8r@s9n@)t*(QYL}tdl{*-c0nDO9fnm1V-J@-#ObtnSs~{wf#M35ErPK5tSfLhflZq&~8g54_ILpqMx>8Jp^R ziCE37>r;Tp1LsVW%0ho}Q||Y6AYQ?2kV==v=y|YjI^nL8cj?*SN8fD z6;z1b2Ms^i`7Bc$%r7A8Gk2N(ctOmcuDk40s$M^MTU-kv40}{)S`ZdTSU&j7Y!XL! z+bD9@8gn`NiEX(kOg5s3LMZR4qnWO1cx5`Jc<2OE%`U>%W{v>bQ};X81P=Vn@!Zn2 z&y6!rqmPMn?AQ3N5R^w^;q=)f`etF&+VB<;Vty@0Uc%ltl_)*goXuKxXDx+%Pr#{i zS=>c_^2dKDe0TK#}QfxzN;4+>!Yzt8;|qA zbsnmlf%$-+`v|R7?7d3k*FuV)(PgqRu1Cq9a!-#*%OSJG%~B;uNfkre=+cCe!%d4x ztBY}0bD+vz8Z_1-?2K_-+VJ9@?bM$iqifH4CQkKuq49vKK|u7?d+}?lIvz>2Hm8T} zKxV1T7pI`SNc*&#mro%m=#VrDa6R~TiXQeN*3>K11fcdQi092oV2J)F*l=+N&oPT` zDc<#+JBT||qBJS0y`0TxZf=avd8#x1>wcCg=H5G$A$lETbc8AIAe=~~@t%>3TthEC zd;JmUxsv;3x>chlM&tgA^)Iy zOKl0$V|3aJmymEHzx|czio3wauE&oXM;xbz>sm(;aG8*=atUz0fb80=M4kiphk003 zLk6&5yV3?@Pwry9@X+R0My~B$AASq%Wu}gw(3?907|Ju3X_Axt z9Q~2tM~$m*IX zWTGuACmYux_e?=M7uMNQ@g{(@8zF2zQs32U4%4)$Hgd>%Ml}{9t+o1%V|+?|osepx zaXH5OrJ5hxl4cfD4GWDXx~*>^?i}n(1`qea?g+^dr>m>xO8@ikcZF;aC)L<$(>rBn z;Zs8Wssij66;%gRDH*n4l;1zYj~ja|%}h6vfUi3R`nHSsUxZ^tCts$#(vEAc*o^g3 z;bD^?u;~3dlrgl}?6@xSxI1B_>-*GWb@spmBBk;({5vV9r*0pooyS>X$ z`zqwy3$?~jb;jv6Vyw^_(@QZ>&9<8(z%Jy%vW?!W%p(_c@!vb!Ryl!p4l13etMFc; z(X6x{HMU<8EPYaKbXPT>R1VD)tUy;I5`hSuYCeGAo)r|J$k3;!g;CITZhDpv2H3Ps z`%E$BiJC;31=JBG+j+L6o}9q%P$Qh}$$c`=@!cE(;OFY`#b*`UCr{26O@7`Y63-_K zRl5)MVafJ{VAqVT6GA$GYct_JN)E<%CU>0g8VQn?E|z?VA_)F6*Q{P(zbM|Ok&H_O z3ZtwXHinz{6EooVvhbCG1!$5dg^SY)V$aq-NrVd48IbSw-ffPiHIy#)0^UG!Z2C#x zZiJ`=-^j3+XgAAmMVPEjf6zDc05i1Q3f)usLhmeM)puWfuzhZcCc{0`L&+G*dGo6) zc05Zvd`s7Ma|eU-*tr$ic6|$)Up(~tBy+SjfZE(yJGHYlXi(8qF zkvU3EA;?p0OKLq2%XxBdA^Gxa*!N-7uBLrC6!P7McQ z<_nj;DAtk#1+j1^(LwTuCQ7fraU3&W3Z1lvN|hS6DWV~sj0lGKeJn(zRdK(bgD=kt z_rjI^UH+dYlk3F}qnafZ3Z-|@+vjnn^{W+U@nrlSu2o^?0zy1;<~=Awf52UD(wqL~ zg>*B%?;!Ps`EJ+nx=ZybiuiywDEXVaS#p(tV^{k$>e_9u3!ZOxVudDS9Ha^4rfozl%{mpLaQ^7NVtGE&x+4` zg42T~vjYKoWZAdP0gA}en=Aj$y1CP>os*s5p6g%;=~Z<*LiN2^q}&E+Z9PJaiGDJq z1H2`qh&6fpiK#}kUmSP+)SN18RW!aAvSkMszZ|?c^b-OOJ8sSb3;+X3gauS`78v^%}-7Aq`Hiq_G*5b|mCBAgWVBLG7h z(M;^j(Xy0IS&nUrkh?$D;Cf%a!V>o)aH=)H@=d*dAAcpayw_b3LMVH&P=| zMZ}Wd*=*S+<2Mm5H3I)xhSxKM++Zq;c*OYQV}0C95DjLUVc*8v-l)QObV+mO_q0?1 zBNGv+hg*t{Wh}L>;08a=hi$6=;fwBImyyX&sM}L{xyVMdH6Qn3T zV4#78CQXh$8D=Ysp0NJ?rOhp$;(ps$uO+4S1HgESFvDH6r+1u6HQPsFI+@BWbn*yP zKWM)GrmFsJu0(%X;U5ngR;`OmtMR`vj|C<$?zj(fK7W{95}ED}GRxHpf|f7W`@x$y zgDN#_)Y}1=tT4$PpUKszfmZ^H>)fbUHOqbT*_+|93%%laOUu*HG&G6ES(?^f8(mM* z;Qq$-X5<=<)`w*!`#}uga9P(fUtp-s*98Q;-t=gl7NIH{CMKqzbl{s4O{V+K8!=+m z>fTJ^yt{-4j!j;O1uVD!U@i!xP$q(e(OSefj?r$dnC=lJk$o19I4yJ4H*L#^xW7Jb zoF?Z$7oGNC^UkL>RerzJAJsKeo@jnyLsF8=}YICa-BX31TD%;9$6YM=acxfZ~veM)Q=Fn#bL%0t~5 zZ`2ClAA~C7E6)6APf@Mzhky6Kr4zhyJ$sOO`D`JrC%DYK*N4jW_;GotSG7y^bk&DW z?<(1n^5K=)r43!%MVRWq7=uv~p?f~S<%iK9X>Li)5KwDzNY-kHMoO8?tIOO%V=EjJfKq-p;gACniaqL9i4HoMkYXZ2 zKUG_iGCj(+o01DS(RZ&1Qp6>A5#ALA8IyWBU3a%~1^I-U1B_r9$j1sTY_^NjVk5Q9 z*3Jdxu={ek)lWQP5e295<^DMO4JY%{bk3L&df~-sX_CAD#L>iJlGo~h+Qx#LkU(oo zDn?Cd%TPHa8A|9eD3nbH=qS0$1N5|No5=7h4EqCvT!*juygUex1ig9Pg;7Bfn8~jZH^ca0PAl3!%zmnu-GwVP;-#+gnRf zUM;`6rDE2&O*Yc!ix5f z4LvbsYLx3Q;9gICL!9dV`X&mUj@D7>X{bD9)K^s;NENcIz5 zI;U^>Z!jtM)o}(4Ld4Hk4wno$3%=}kX}YkJ>Lk~QH0u|n1y`(9! zNTzv(hA9xfL{aa<^jF0RQx~{HJjd}_OM!L%?b#R1>%1r@PM{+?cfX}qO&nRxFtW4EyF1!S)4Vt4 zN8>8UI4HkozVajgc2JeqUd0vD@GfP(PW_GBDv}V zvt7GaB`e)RI$EW}k$fN>GINxdS`l>a5a#Uv{uCCs)#kWgv!yl4bd>Q$lUe%@zBk&k zu_3=_G8fU47?F%qk#f>EAR53!R-xqOs9e+xYoCC_?S)#zSk#VcBK4VHlv;UY6N{pG zw{<-oJr_RS$}`q>sMYpa&kN^^Dr~|fWn(yCkOfq0qbS$`ETDj^fL~{Uoq)I-)W29x zia!@BJ*!%}$BnvpLQ2?4R6Gxsf|XSI!$C?D865)kEU-aXO`sZk^LJ#4Dj`t^F?0Yr z4N()wG|{|UnM^?n{t@+tf2PH0m5c-pGla!(2PuN!u&EpGT4J14WIOyPqZWah22g=$zEpTXMF(@ zUCN_f%zRT*Bls`ti7(ce2x}OUQX{{SWW!IAF1ui*GSqUNBN+V6Nfb>Gp=Wxrq5ey1 zJ9Ffw|LR-JPI+?2j(`rE{|j}Po%`@US=0x<^kIu23PfvHy}c)M7GM7Ij*VfajsOQTTP(h*E=a7P z$gH$l2NnEp!A zJ2pVk)&LnhHkGQDq9#k!bpNwu-_JAu0M^0x6je2FKs{4E8o_CeA4OoIqRVo-a*48L z)~8`?8E;{m8jBJ)+$^O4ZBpT;Sh^HYjHRmXE5WXD^#pd6791^ZWTtQYnL}GZ5i|N5 z5oOp3IO|NTCa`_v0;@{6{H&%4Benfwv2^ldtrUa(vx9{U1-1_#lz^PTqCkeBrXFzO zK?_crpRnrY8x=UURyVs{F1@qy>0cuJ$mJ|E*z zoX}@^*X$bU-s1`pwD|U~*nWqS=c_90l-Qs5X2=2wad1?Ii@556BEuf2<-&moWm1ni zYp^Ps6_Z)ysJrfWTMr1(P@Yv>Uyp$^n1I9{d*8Y^Pk zXKVm`2IQ8Sj&3QqJzV`8+x$bT$YK}n=b_VTwEeBWW(Jq{?(p&?&Q9vgo7Lpv_6SSQWv=t@uRipdy{xRI_>>_wsQ}G$)4srs#E$sa z6+scuZGc$lQ7A?HSMH6^;6H!gj6sFIR z#ST%Yp`AsbNi4&NFA<1%^dlWwNjq3X)xgVMaR%huOiE!wQV@%ngS36lG}?thz=e_+ zsV%?1Fm-&IEGC_o0ptF`F4W97xw_t9ej$=^YJO2l!ZJmBm|!Nl z7s7Z20L_5Bk>7Ra{l?e#xdEfHeiHCCPE14$@CQgytUS?>h0fQ^&)FmxMrj~sE#OPI{c19d}%AJM- ztMTbLh|o%Bs3cOpqkhENIu%%rI!FXohc#oeV8(vFJ1OMwKY!EL`gGbnIk4Aol7<-ytaJB;3|V-jz+JYfwJIDaikL)*FCrHQjad~jRwiz@QU>=MEFxSeYTli$SXY5|PdlNo8F zTiv_S1Fh&!Tp8;>e~z2uG%_?GRAONJWzwD)C87j23tD*`(H}r0CUA#KpgDQCVwV%J ze5s)8%!=2YOZjzii@q~T%vX#eRg+?(e!nyM6TCUG#AKc|fh3B(=l&kQJinhLkC)Qx zAO>K>fW7~TObA7WMM!kX3+Zcr6LYv1vp)QXYi{BXHa&ce{QE;gj{gc1uakN+b(}P~ zB%q2l$8`o7U&*6*KCM&iXkiv;jB635PET83;{F|K_G@%CZ{9fMNtc&PW}KV+CbDY? z>e5n}UFVxDJZn<;`Pu6{CKqTt`^ z{W%VUSk4cC3$1<3Ln+Y9-@d8dFh={uPze+5KC;3Bn%_0;wpSpUSQkZR@9o-T!lxQ?Af2EB=aq za-i^72*g78aPGqt%Zu2-T3D{>LO+aE*YK4zmCiS!Pj9)f16|8<3I&d*^w--u7A3Vh zyOr5Ue~eUaOEfU!sNsaflKumB`vRHhmAs>`Bl)gO)XibhRXsVK7x{FrCx1iS^M@%< z^qRY0M)i}r0!q#AZ?^rQZ|H}$+}wK9hPU#=FVytLrS*7BG0eXuAD?fb#LFjppOc<^ z*0qjIG6d}wV_UNNudLZbxtUq!XX7}}WeoE1s3Fs@dx#teB{48LIs;QhEbViUi9yyY zFuRHhhHeN6-6dYQ{aicl%P$2}+Gs*C*LpPPc3FDV zEHc8q*A9l&>J=R&dk2>WneX6X1$Fc^zVj$n96i5vG!5_X%M<_SW#9d1ci}7Wx&(#c zerI)4y)v*d+dsN$4H?iv{*UjdJv=M9d*PcJ!2#$?NEE2Y-A$#qhtM+8n?2 za5;{b>91KFo5ayd9Gk?kNgO-Vzcz3jIF450*d&fk0(BfDkBs0rNd7$y$0l)X630RE z$Oevsd;evXSPlI48wz#vhQhy@QhHDS2g)tc-T(jq literal 0 HcmV?d00001