kubernetes1.28-kubelet-common-1.28.13-150400.9.10.1<>,fԉfbp9|=N=-' B8#[P]&XC+,. /!Kv:*g΅ =y~d>c}.{ELk3Gt&b*s4̠@ݢY v5HS%I ! fn8sWKbKy)G @5r55.!,kBuvnLe ("UQj' vm lY^z3eB-uź7J{+hݖk)+IP6c>I]?]d ( 6 P  +=TZ` 0x    Z tpH t " HLf(g8p9:-=V?>VG?VO@VWFV_GVtHVIWXWYW$\WX]W^XbZcZd[9e[>f[Al[Cu[Tv[w\x\y],z]0]@]D]J]Ckubernetes1.28-kubelet-common1.28.13150400.9.10.1Kubernetes kubelet daemonManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubelet daemonfbs390zl35SUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxs390x if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in kubelet.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=kubelet SUBPNAME=-kubernetes1.28 SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # Check if /etc/sysconfig/kubelet exists if [ -e "/etc/sysconfig/kubelet" ]; then # Extract the value from the fillup file UPDATED_KUBELET_VER=$(grep '^KUBELET_VER=' /usr/share/fillup-templates/sysconfig.kubelet-kubernetes1.28 | cut -d '=' -f2) # Update the value in the sysconfig file sed -i "s/^KUBELET_VER=.*/KUBELET_VER=$UPDATED_KUBELET_VER/" /etc/sysconfig/kubelet fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in kubelet.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi if [ $1 -eq 1 ]; then # Check if modprobe command is available [ ! -x /sbin/modprobe ] || { /sbin/modprobe br_netfilter && /sbin/modprobe overlay; } || true fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/kubelet.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable kubelet.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop kubelet.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in kubelet.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart kubelet.service ) || : fi fi$.D/ >,^AAA큤A큤A큤A큤AAf\f\f`ef\f\f\f\f`f f f f\f`f f[f\f\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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.28-1.28.13-150400.9.10.1.src.rpmkubernetes-kubelet-commonkubernetes1.28-kubelet-commonkubernetes1.28-kubelet-common(s390-64) @    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shcri-runtimekubernetes-kubelet1.28rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-kubelet-common4.14.3f?@f@f@f|fGFf! @f@f@e}@e7@eee`@e:Te e priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgpriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.com- Update to version 1.28.13: * Respect controllers on PVCs for retention policy * Updating kubelet on Windows to query uuid from registry * Update err message before ratcheting enabled. * Hot fix for panic on schema conversion. * update container ubuntu sha256 * update driver installer * mount-utils: treat syscall.ENODEV as corrupted mount * api: fix ValidatingAdmissionPolicyList json tag * apiserver: fix watch namespace * Fix that PodIP field is not set for terminal pod * Use omitempty for optional fields in Job Pod Failure Policy * bugfix: dont skip reconcile for unchanged policy if last sync failed- Follow up changes after go version bump to 1.22: - For ppc64le platform: disabled `export GOLDFLAGS='-linkmode=external'`. * to fix the build failure error: `-linkmode=external requires external (cgo) linking, but cgo is not enabled` - For linux/s390x platform: disabled building kubernetes binaries with `-buildmode=pie` * `-buildmode=pie` with "internal linking" is not yet supported on linux/s390x platform * ref: https://github.com/golang/go/blob/a63907808d14679c723e566cb83acc76fc8cafc2/src/internal/platform/supported.go#L223-L232 * ref: https://github.com/golang/go/issues/64875#issuecomment-1870734528- Update to version 1.28.12: * Add funcs in pkg/filesystem/util that can actually set file permissiosn on Windows and update container log dir perms to 660 on Windows * Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same. * Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm * fix issue with using feature HonorPVReclaimPolicy in csi-provisioner * defaultMaskedPaths must be kept in sync with moby/moby. * gitRepo volume: directory must be max 1 level deep * Bump images, dependencies and versions to go 1.22.5 and distroless iptables * Fix endpoints status out-of-sync when the pod state changes rapidly * Fix verify target to not update env var if already set * fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.22.5` * `BuildRequires: golang(API) = 1.22` * ref: https://github.com/kubernetes/kubernetes/blob/v1.28.12/build/dependencies.yaml#L115-L117- Update to version 1.28.11: * Bump images, dependencies and versions to go 1.21.11 and distroless iptables/setcap/debian-base * Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable * Revert "scheduler: preallocation for NodeToStatusMap" * add an integration test when nodeAffinity specifies a non-existent node. * base on allNodes when calculating nextStartNodeIndex * backport verify-govulncheck.sh to 1.28 * Don't sort under lock * Fix printPod panic with spurious container statuses * Cherry pick #124618 to 1.28 * Fix NFS related issues on GCP/Ubuntu * fix requests tracker concurrency * fix conflict race in statefulset rest update * fix stateful set pod recreation and event spam * fix pods tracking and internal error checking in statefulset tests * Updated & added visibility to apiserver x509 test certificates expiring this year- Update to version 1.28.10: * scheduler: preallocation for NodeToStatusMap * add e2e test when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod should be scheduled normally if suitable nodes exists * test to catch illegal nodeNames returned by PreFilterResult * add integration test for pod with pvc has node-affinity to non-existent/existent nodes * hotfix when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod scheduling flow will abort immediately. * Fix PersistentVolumeLabel admission plugin on Azure * cluster/gce: upgrade cos-97-lts -> cos-109-lts * storage e2e: update hostpath and mock images * add log verbosity to endpoint topology hint loop. * Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric * gce: fix test for non-existing instance in cloud * cloud-node-lifecycle controller: add fallback for empty providerID in shutdown- Update to version 1.28.9: * Add envFrom to serviceaccount admission plugin * update debian-base to bookworm-v1.0.2 * [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables / set-cap * [CVE-2023-45288] .*: bump x/net to v0.23.0, bsc#1229869 * Use the right feature gate when updating uncertain volumes * fix panic with SIGSEGV in kubeadm certs check-expiration * hack/tools: bump honnef.co/go/tools to v0.4.6 * Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage. * fix aggregator path filtering to include / * Filter aggregated apiservice gv * Use DBG=1 for conformance verification * build: use -trimpath in non-DBG mode - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.9` * ref: https://github.com/kubernetes/kubernetes/blob/v1.28.9/build/dependencies.yaml#L115-L117- update .spec file to set FORCE_HOST_GO env variable, to force k8s build scripts use the local GOTOOLCHAIN version from the build pipeline (i.e. GOTOOLCHAIN='local') * ref: https://github.com/kubernetes/kubernetes/blob/9791f0d1f39f3f1e0796add7833c1059325d5098/hack/lib/golang.sh#L507- Update to version 1.28.8: * remove --v arg from kubetest2-tester-ginkgo test args * ci: bump kind to latest for kms jobs * [go] Bump images, dependencies and versions to go 1.21.8 / distroless-iptables to v0.4.6 * [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0, bsc#1229867 * keep existing PDB conditions when updating status * Validate restartable init container state transition * Test that separation of streams work by using progress notifies * Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior * fix UT failure TestPrintIPAddressList * Fix race condition between external-resizer and kubelet * codegen: don't nuke files if only verifying * dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake. * e2e_node: replace `registry.k8s.io/stress:v1` with agnhost * promote agnhost to v2.47 * fixing issue with GetCPUUsageNanoCores on Windows * Fix cleanup of file subpaths * etcd: Update to version 3.5.12 * build etcd image v3.5.12 - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.8` * ref: https://github.com/kubernetes/kubernetes/blob/v1.28.8/build/dependencies.yaml#L115-L117- Update to version 1.28.7: * [go] Bump images, dependencies and versions to go 1.21.7 / setcap/debian-base to bookworm-v1.0.1 and distroless-iptables to v0.4.5 * Add processStartTime in metrics/slis * Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch" * kubeadm: better checks if the node is CP during "upgrade node" * If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it. * Drop PendingChanges methods from change trackers, move into UpdateResults * Squash some unnecessarily-chained methods in the change trackers - Update .spec file to bump go version build requirements: * `BuildRequires: golang(API) = 1.21`- Use %patch -P N instead of deprecated %patchN.- Update .spec file to remove go version build requirements: * above build requirement causing build failures with following error: - `go: download go1.20.13 for linux/amd64: toolchain not available` - ref: https://go.dev/doc/toolchain - Update to version 1.28.6: * Revert "Graduate Evented PLEG to Beta" * [go] Bump images, dependencies and versions to go 1.20.13 and distroless iptables to 0.2.9 * e2e framework: adapt unit test to Go 1.22 * use context for lazy evaluation. * Handle edge cases in seat demand stats * .*: bump golang.org/x/tools to v0.16.1 * fix: 119921 * Use a separate function for checking if device was reconstructed * Add tests for checking of uncertain device paths * Fix device uncertain errors on reboot * fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times * Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28 * etcd: Update to version 3.5.10 * kube-proxy: Fix etp:Local for externalIPs- Update to version 1.28.5: * enable SchedulerQueueingHints feature gate in TestIncomingPodsMetrics * fix: disable SchedulerQueueingHints feature flag by default * Fix panic if there are more terminating pods than active pods * [go] Bump images, dependencies and versions to go 1.20.12 * Move adding GroupVersion log until after an update is confirmed * pass GOTOOLCHAIN to build containers * handle GOTOOLCHAIN in kube::golang::verify_go_version * fix: requeue pods rejected by Extenders properly * Bump distroless-iptables to 0.2.8 based on Go 1.20.11 * fix: smb file share unavailable issue when it's deleted * Make StatefulSet restart pods with phase Succeeded * run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly * update filepath-securejoin dependency to 0.2.4 to fix security vulnerability * DRA: call plugins for claims even if exist in cache * Fix panic when process RunScorePlugins for cap out of range * e2e: bootstrap vsphere tests earlier * apf: request ejected from queue should use reason 'time-out' * apf: remove RequestWaitLimit from queueset config * apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function * apf: use context for queue wait * apiserver: add flow control metric current_inqueue_seats- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.11` - Update to version 1.28.4: * Use golang library instead of mklink * [go] Bump images, dependencies and versions to go 1.20.11 * Fixing attempt to deploy past allocatable memory limits test on Windows * bump golang.org/grpc to v1.56.3 * Add more test cases ensuring nextScheduleTimeDuration is never < 0 * Modify mostRecentScheduleTime to return more detailed information about missed schedules * removing the import of "k8s.io/utils/ptr" because it was introduced after 1.28 * Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate * Use Patch instead of SSA for Pod Disruption condition * KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local * Fix panic testing intree vSphere dynamic PV. * service controller: improve node lifecycle updates - update nodes if providerID has changed * implement Stringer for podActions * Retry operations if CSI Driver Isn't Found by Treating this Error as Transient- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.10` - Update to version 1.28.3: * Register UnauthenticatedHTTP2DOSMitigation into kube components (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Disable UnauthenticatedHTTP2DOSMitigation by default (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Prevent rapid reset http2 DOS on API server (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Fix concurrent write when filling PVC labels * Modify test PVC to detect concurrent map write bug * [go] Bump images, dependencies and versions to go 1.20.10 * Fix to honor PDB with an empty selector `{}` * .: bump golang.org/x/net to v0.17.0 * Mark a volume as uncertain-attached after detach error * Unit & integration tests for OpenAPIV2 AddUpdateAPIService * Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler * Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec * Fix 120758 - prevent cache Load on uninitialized spec * Add nil checks for hpa object target type values * Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat * [go] Bump images, versions and deps to use Go 1.20.9 * Only configure swap if available on node * Use local isCgroup2UnifiedMode consistently * cronjob controller: ensure already existing jobs are added to Active list of cronjobs * reintroduce resourcequota.NewMonitor * change rolling update logic to exclude sunsetting nodes * vsphere: adapt to govmomi bump * .: bump govmomi to v0.30.6 * Increase range of job_sync_duration_seconds * sync Service API status rest storage * kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1 * fix race on etcd client constructor for healthchecks * e2e pods: fix WaitForPodsResponding retry * kmsv2: reload metrics bug fix backport * scheduler: start scheduling attempt with clean UnschedulablePlugins- Update to version 1.28.2: * fix(queue_test): make sure the first bind failure via counter * [go] Bump images, versions and deps to use Go 1.20.8 * scheduler: unit test case for concurrent event with other pod * scheduler: fix tracking of concurrent events * sort stability list of metrics in the shell command * Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime * Add an e2e test for the pod sandbox changed scenario * fix: concurrent map writes in e2e test * Automated cherry pick of #119776: Fix a job quota related deadlock (#120319) * TopologyAwareHints: Take lock in HasPopulatedHints * Fallback to legacy discovery on a wider range of conditions in aggregator * Fix OpenAPI aggregation cleanup * apiextensions-apiserver: generate applyconfigurations * Revert to json-patch 4.12.0 * update build cross image to the correct release branch image * Mark Job onPodConditions as optional in pod failure policy * Incorporating feedback on 119341 * Release commit for Kubernetes v1.28.1 * Add wait for cache sync * check for overflow * Fix CEL cost handling of zero length replacement strings * Use env varaibles for passing path * Use environment varaibles for parameters in Powershell * e2e framework util subtle bug checking endpoints * Pass Pinned field to kubecontainer.Image * prep for go1.21: use -e in go list * kubeadm: fix nil pointer when etcd member is already removed * update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 * Make gomaxprocs install optional, limit to tests * Drop [Feature: tag to make sure this tests runs on pre-submits * Statefulset should wait for new replicas when removing .start.ordinal * e2e WaitForServiceEndpointsNum take into account the address family * fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap * Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip * Add test coverage of result size of string operations * Bump cel-go to v0.16.1- initial package for Kubernetes v1.28.0/bin/sh/bin/sh/bin/sh/bin/shs390zl35 1727179618 1.28.131.28.13-150400.9.10.11.28.13-150400.9.10.1 kubernetes1.28manifestskubernetes1.28kubeletkubelet.servicekubelet.service.dkubelet.confrckubeletkubernetes1.28-kubelet-commonCHANGELOG-1.28.mdCONTRIBUTING.mdREADME.mdsysconfig.kubelet-kubernetes1.28kubernetes1.28-kubelet-commonLICENSEkubelet.1.gzkubeletvolume-plugin/etc//etc/kubernetes1.28//run//usr/bin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.28-kubelet-common//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/kubernetes1.28-kubelet-common//usr/share/man/man1//var/lib//var/lib/kubelet/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35820/SUSE_SLE-15-SP4_Update/ff9263e04f1057f6f69d28a2c4666df0-kubernetes1.28.SUSE_SLE-15-SP4_Updatedrpmxz5s390x-suse-linuxdirectoryPOSIX shell script, ASCII text executableASCII textexported SGML document, UTF-8 Unicode text, with very long linesASCII text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)R%ʂZfQڊYutf-8d63c60f2c1ec68b6ed7d32406f9bb8e0b3a2e815a90fd9f2d7cdb4146fb71ce7?p7zXZ !t/9]"k%ܙ]{~+m^:ixk x2;n"qv$[Ӳ =1=I!l~rTߕ*9y d'2NWЎca%3g{_-7Mrb%2 !dIs8-İ^^e\ALl2T&ZnӠ wJPʰB~-\ fhoၛHE^M`!2N nB<8JCR\VyA;+[4ŦW&l\^E5N ļI6y Ŋ#vy=oJ66BexN}9PSʧIzúYzC0d}q|ܗ?"p'3y eZ>Pc!u5%B--93%'?2G9jW{]+ 2mK/t"N23V;°ڡK7aG{i"C *^S?NHz#"ѩ`%/X Ht'CwkmM&6xÞtIx2GL䭨QeO`u#: =!LNgXc־]l@L6MXA埊'8 :yeX0}a:rn+"c[l46szQ,Y&r ~DSSMRgnō*dsq \8VuNRʒ-'Tr(82ZA6vj!XGq(Y3oUr s&dh] %cR땀؋h>rWŹ'v}](PzaBtt_j8AdgT֊g0e@ {Fq1/zOTkM13؃X/kK( C]W0[ \T|73l`h$J;q"Aځ<;K,ւҼA(9;0BdDWbK2kI< d>@ǑQb:;hf+IAU,i:*ȶ2!M `:;@_C^p>!3Q=+o8Oj% YZ