From 8525b3db01c3e30cf31269d7aa3b2c2b34bceaa7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 11:30:04 +0100 Subject: [PATCH 01/37] core: bump goauthentik.io/api/v3 from 3.2023104.3 to 3.2023104.4 (#7943) Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go) from 3.2023104.3 to 3.2023104.4. - [Release notes](https://github.com/goauthentik/client-go/releases) - [Commits](https://github.com/goauthentik/client-go/compare/v3.2023104.3...v3.2023104.4) --- updated-dependencies: - dependency-name: goauthentik.io/api/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 8823d467a..33bc7c364 100644 --- a/go.mod +++ b/go.mod @@ -27,7 +27,7 @@ require ( github.com/sirupsen/logrus v1.9.3 github.com/spf13/cobra v1.8.0 github.com/stretchr/testify v1.8.4 - goauthentik.io/api/v3 v3.2023104.3 + goauthentik.io/api/v3 v3.2023104.4 golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab golang.org/x/oauth2 v0.15.0 golang.org/x/sync v0.5.0 diff --git a/go.sum b/go.sum index a94e23a58..d26320a4a 100644 --- a/go.sum +++ b/go.sum @@ -309,8 +309,8 @@ go.opentelemetry.io/otel/trace v1.17.0 h1:/SWhSRHmDPOImIAetP1QAeMnZYiQXrTy4fMMYO go.opentelemetry.io/otel/trace v1.17.0/go.mod h1:I/4vKTgFclIsXRVucpH25X0mpFSczM7aHeaz0ZBLWjY= go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A= go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4= -goauthentik.io/api/v3 v3.2023104.3 h1:MzwdB21Q+G+wACEZiX0T1iVV4l7PjopjaVv6muqJE1M= -goauthentik.io/api/v3 v3.2023104.3/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= +goauthentik.io/api/v3 v3.2023104.4 h1:3jxzoawGCSlUMNsRltV1ETuGox7MM4xDZ+R+8zMNCh4= +goauthentik.io/api/v3 v3.2023104.4/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= From 82956d275a735700584bc331fa76c6360cbfd638 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 11:30:13 +0100 Subject: [PATCH 02/37] web: bump the storybook group in /web with 7 updates (#7945) Bumps the storybook group in /web with 7 updates: | Package | From | To | | --- | --- | --- | | [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials) | `7.6.5` | `7.6.6` | | [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `7.6.5` | `7.6.6` | | [@storybook/api](https://github.com/storybookjs/storybook/tree/HEAD/code/deprecated/manager-api-shim) | `7.6.5` | `7.6.6` | | [@storybook/manager-api](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/manager-api) | `7.6.5` | `7.6.6` | | [@storybook/web-components](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/web-components) | `7.6.5` | `7.6.6` | | [@storybook/web-components-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/web-components-vite) | `7.6.5` | `7.6.6` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli) | `7.6.5` | `7.6.6` | Updates `@storybook/addon-essentials` from 7.6.5 to 7.6.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/addons/essentials) Updates `@storybook/addon-links` from 7.6.5 to 7.6.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/addons/links) Updates `@storybook/api` from 7.6.5 to 7.6.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/v7.6.6/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/deprecated/manager-api-shim) Updates `@storybook/manager-api` from 7.6.5 to 7.6.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/lib/manager-api) Updates `@storybook/web-components` from 7.6.5 to 7.6.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/renderers/web-components) Updates `@storybook/web-components-vite` from 7.6.5 to 7.6.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/frameworks/web-components-vite) Updates `storybook` from 7.6.5 to 7.6.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.6.6/code/lib/cli) --- updated-dependencies: - dependency-name: "@storybook/addon-essentials" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/addon-links" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/api" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/manager-api" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/web-components" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/web-components-vite" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: storybook - dependency-name: storybook dependency-type: direct:development update-type: version-update:semver-patch dependency-group: storybook ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- web/package-lock.json | 586 +++++++++++++++++++++--------------------- web/package.json | 14 +- 2 files changed, 300 insertions(+), 300 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index 5e7f5a503..da13d73b3 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -61,13 +61,13 @@ "@rollup/plugin-replace": "^5.0.5", "@rollup/plugin-terser": "^0.4.4", "@rollup/plugin-typescript": "^11.1.5", - "@storybook/addon-essentials": "^7.6.5", - "@storybook/addon-links": "^7.6.5", - "@storybook/api": "^7.6.5", + "@storybook/addon-essentials": "^7.6.6", + "@storybook/addon-links": "^7.6.6", + "@storybook/api": "^7.6.6", "@storybook/blocks": "^7.6.4", - "@storybook/manager-api": "^7.6.5", - "@storybook/web-components": "^7.6.5", - "@storybook/web-components-vite": "^7.6.5", + "@storybook/manager-api": "^7.6.6", + "@storybook/web-components": "^7.6.6", + "@storybook/web-components-vite": "^7.6.6", "@trivago/prettier-plugin-sort-imports": "^4.3.0", "@types/chart.js": "^2.9.41", "@types/codemirror": "5.60.15", @@ -95,7 +95,7 @@ "rollup-plugin-cssimport": "^1.0.3", "rollup-plugin-modify": "^3.0.0", "rollup-plugin-postcss-lit": "^2.1.0", - "storybook": "^7.6.5", + "storybook": "^7.6.6", "storybook-addon-mock": "^4.3.0", "ts-lit-plugin": "^2.0.1", "tslib": "^2.6.2", @@ -4856,12 +4856,12 @@ "dev": true }, "node_modules/@storybook/addon-actions": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-actions/-/addon-actions-7.6.5.tgz", - "integrity": "sha512-lW/m9YcaNfBZk+TZLxyzHdd563mBWpsUIveOKYjcPdl/q0FblWWZrRsFHqwLK1ldZ4AZXs8J/47G8CBr6Ew2uQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-actions/-/addon-actions-7.6.6.tgz", + "integrity": "sha512-mLJip9Evb2Chj7ymKbpaybe5NgDy3Du7oSWeURPy/0qXJ2cBqHWnhZ8CTK2DasrstsUhQSJaZVXHhaENT+fn+g==", "dev": true, "dependencies": { - "@storybook/core-events": "7.6.5", + "@storybook/core-events": "7.6.6", "@storybook/global": "^5.0.0", "@types/uuid": "^9.0.1", "dequal": "^2.0.2", @@ -4874,9 +4874,9 @@ } }, "node_modules/@storybook/addon-backgrounds": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-backgrounds/-/addon-backgrounds-7.6.5.tgz", - "integrity": "sha512-wZZOL19vg4TTRtOTl71XKqPe5hQx3XUh9Fle0wOi91FiFrBdqusrppnyS89wPS8RQG5lXEOFEUvYcMmdCcdZfw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-backgrounds/-/addon-backgrounds-7.6.6.tgz", + "integrity": "sha512-w5dZ/0cOe55M2G/Lx9f+Ptk4txUPb+Ng+KqEvTaTNqHoh0Xw4QxEn/ciJwmh1u1g3aMZsOgOvwPwug7ykmLgsA==", "dev": true, "dependencies": { "@storybook/global": "^5.0.0", @@ -4889,12 +4889,12 @@ } }, "node_modules/@storybook/addon-controls": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-controls/-/addon-controls-7.6.5.tgz", - "integrity": "sha512-EdSZ2pYf74mOXZGGJ22lrDvdvL0YKc95iWv9FFEhUFOloMy/0OZPB2ybYmd2KVCy3SeIE4Zfeiw8pDXdCUniOQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-controls/-/addon-controls-7.6.6.tgz", + "integrity": "sha512-VAXXfPLi1M3RXhBf3uIBZ2hrD9UPDe7yvXHIlCzgj1HIJELODCFyUc+RtvN0mPc/nnlEfzhGfJtenZou5LYwIw==", "dev": true, "dependencies": { - "@storybook/blocks": "7.6.5", + "@storybook/blocks": "7.6.6", "lodash": "^4.17.21", "ts-dedent": "^2.0.0" }, @@ -4904,26 +4904,26 @@ } }, "node_modules/@storybook/addon-docs": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-docs/-/addon-docs-7.6.5.tgz", - "integrity": "sha512-D9tZyD41IujCHiPYdfS2bKtZRJPNwO4EydzyqODXppomluhFbY3uTEaf0H1UFnJLQxWNXZ7rr3aS0V3O6yu8pA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-docs/-/addon-docs-7.6.6.tgz", + "integrity": "sha512-l4gtoNTn1wHE11x44te1cDkqfm+/w+eNonHe56bwgSqETclS5z18wvM9bQZF32G6C9fpSefaJW3cxVvcuJL1fg==", "dev": true, "dependencies": { "@jest/transform": "^29.3.1", "@mdx-js/react": "^2.1.5", - "@storybook/blocks": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/components": "7.6.5", - "@storybook/csf-plugin": "7.6.5", - "@storybook/csf-tools": "7.6.5", + "@storybook/blocks": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/components": "7.6.6", + "@storybook/csf-plugin": "7.6.6", + "@storybook/csf-tools": "7.6.6", "@storybook/global": "^5.0.0", "@storybook/mdx2-csf": "^1.0.0", - "@storybook/node-logger": "7.6.5", - "@storybook/postinstall": "7.6.5", - "@storybook/preview-api": "7.6.5", - "@storybook/react-dom-shim": "7.6.5", - "@storybook/theming": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/node-logger": "7.6.6", + "@storybook/postinstall": "7.6.6", + "@storybook/preview-api": "7.6.6", + "@storybook/react-dom-shim": "7.6.6", + "@storybook/theming": "7.6.6", + "@storybook/types": "7.6.6", "fs-extra": "^11.1.0", "remark-external-links": "^8.0.0", "remark-slug": "^6.0.0", @@ -4939,17 +4939,17 @@ } }, "node_modules/@storybook/addon-docs/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -4979,24 +4979,24 @@ } }, "node_modules/@storybook/addon-essentials": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-essentials/-/addon-essentials-7.6.5.tgz", - "integrity": "sha512-VCLj1JAEpGoqF5iFJOo1CZFFck/tg4m/98DLdQuNuXvxT6jqaF0NI9UUQuJLIGteDCR7NKRbTFc1hV3/Ev+Ziw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-essentials/-/addon-essentials-7.6.6.tgz", + "integrity": "sha512-OQ8A6r06mg/HvyIk/j2Gt9DK5Qtqgtwq2Ydm5IgVW6gZsuRnv1FAeUG6okf8oXowAzpYoHdsDmCVwNOAGWGO7w==", "dev": true, "dependencies": { - "@storybook/addon-actions": "7.6.5", - "@storybook/addon-backgrounds": "7.6.5", - "@storybook/addon-controls": "7.6.5", - "@storybook/addon-docs": "7.6.5", - "@storybook/addon-highlight": "7.6.5", - "@storybook/addon-measure": "7.6.5", - "@storybook/addon-outline": "7.6.5", - "@storybook/addon-toolbars": "7.6.5", - "@storybook/addon-viewport": "7.6.5", - "@storybook/core-common": "7.6.5", - "@storybook/manager-api": "7.6.5", - "@storybook/node-logger": "7.6.5", - "@storybook/preview-api": "7.6.5", + "@storybook/addon-actions": "7.6.6", + "@storybook/addon-backgrounds": "7.6.6", + "@storybook/addon-controls": "7.6.6", + "@storybook/addon-docs": "7.6.6", + "@storybook/addon-highlight": "7.6.6", + "@storybook/addon-measure": "7.6.6", + "@storybook/addon-outline": "7.6.6", + "@storybook/addon-toolbars": "7.6.6", + "@storybook/addon-viewport": "7.6.6", + "@storybook/core-common": "7.6.6", + "@storybook/manager-api": "7.6.6", + "@storybook/node-logger": "7.6.6", + "@storybook/preview-api": "7.6.6", "ts-dedent": "^2.0.0" }, "funding": { @@ -5009,17 +5009,17 @@ } }, "node_modules/@storybook/addon-essentials/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -5035,9 +5035,9 @@ } }, "node_modules/@storybook/addon-highlight": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-highlight/-/addon-highlight-7.6.5.tgz", - "integrity": "sha512-CxzmIb30F9nLPQwT0lCPYhOAwGlGF4IkgkO8hYA7VfGCGUkJZEyyN/YkP/ZCUSdCIRChDBouR3KiFFd4mDFKzg==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-highlight/-/addon-highlight-7.6.6.tgz", + "integrity": "sha512-B85UaCts2uMpa0yHBSnupzy2WCdW4vfB+lfaBug9beyOyZQdel07BumblE0KwSJftYgdCNPUZ5MRlqEDzMLTWQ==", "dev": true, "dependencies": { "@storybook/global": "^5.0.0" @@ -5048,9 +5048,9 @@ } }, "node_modules/@storybook/addon-links": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-links/-/addon-links-7.6.5.tgz", - "integrity": "sha512-Lx4Ng+iXt0YpIrKGr+nOZlpN9ypOoEDoP/7bZ6m7GXuVAkDm3JrRCBp7e2ZKSKcTxPdjPuO9HVKkIjtqjINlpw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-links/-/addon-links-7.6.6.tgz", + "integrity": "sha512-NEcqOz6zZ1dJnCcVmYdaQTAMAGIb8NFAZGnr9DU0q+t4B1fTaWUgqLtBM5V6YqIrXGSC/oKLpjWUkS5UpswlHA==", "dev": true, "dependencies": { "@storybook/csf": "^0.1.2", @@ -5071,9 +5071,9 @@ } }, "node_modules/@storybook/addon-measure": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-measure/-/addon-measure-7.6.5.tgz", - "integrity": "sha512-tlUudVQSrA+bwI4dhO8J7nYHtYdylcBZ86ybnqMmdTthsnyc7jnaFVQwbb6bbQJpPxvEvoNds5bVGUFocuvymQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-measure/-/addon-measure-7.6.6.tgz", + "integrity": "sha512-b4hyCudlhsbYN1We8pfZHZJ0i0sfC8+GJvrqZQqdSqGicUmA00mggY1GE+gEoHziQ5/4auxFRS3HfUgaQWUNjg==", "dev": true, "dependencies": { "@storybook/global": "^5.0.0", @@ -5085,9 +5085,9 @@ } }, "node_modules/@storybook/addon-outline": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-outline/-/addon-outline-7.6.5.tgz", - "integrity": "sha512-P7X4+Z9L/l/RZW9UvvM+iuK2SUHD22KPc+dbYOifRXDovUqhfmcKVh1CUqTDMyZrg2ZAbropehMz1eI9BlQfxg==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-outline/-/addon-outline-7.6.6.tgz", + "integrity": "sha512-BMjpjzNEnN8LC7JK92WCXyWgmJwAaEQjRDinr7eD4cBt4Uas5kbciw1g8PtTnh0GbYUsImKao0nzakSVObAdzg==", "dev": true, "dependencies": { "@storybook/global": "^5.0.0", @@ -5099,9 +5099,9 @@ } }, "node_modules/@storybook/addon-toolbars": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-toolbars/-/addon-toolbars-7.6.5.tgz", - "integrity": "sha512-/zqWbVNE/SHc8I5Prnd2Q8U57RGEIYvHfeXjfkuLcE2Quc4Iss4x/9eU7SKu4jm+IOO2s0wlN6HcqI3XEf2XxA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-toolbars/-/addon-toolbars-7.6.6.tgz", + "integrity": "sha512-sQm5+FcoSMSGn1ioXHoukO6OhUlcNZil0/fonAY50uvp6Z4DyI0FTU7BKIm/NoMqAExQk3sZRfAC/nZZ9Epb0Q==", "dev": true, "funding": { "type": "opencollective", @@ -5109,9 +5109,9 @@ } }, "node_modules/@storybook/addon-viewport": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/addon-viewport/-/addon-viewport-7.6.5.tgz", - "integrity": "sha512-9ghKTaduIUvQ6oShmWLuwMeTjtMR4RgKeKHrTJ7THMqvE/ydDPCYeL7ugF65ocXZSEz/QmxdK7uL686ZMKsqNA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/addon-viewport/-/addon-viewport-7.6.6.tgz", + "integrity": "sha512-/ijbzDf1Iq30LvZW2NE8cO4TeHusw0N+jTDUK1+vhxGNMFo9DUIgRkAi6VpFEfS0aQ5d82523WSWzVso7b/Hmg==", "dev": true, "dependencies": { "memoizerific": "^1.11.3" @@ -5304,13 +5304,13 @@ "dev": true }, "node_modules/@storybook/api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/api/-/api-7.6.5.tgz", - "integrity": "sha512-o1RH47iIgG4ie4hjJP1HgsCiuTKlGW0egaAy6E6Np3bDmujy5udWEf8vnXbcaBerc5ZSrQs45kfSWugHy2a4FA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/api/-/api-7.6.6.tgz", + "integrity": "sha512-e3k45k7twP3z5ZJ+rCCaHI+jmYm5yoFo2eLjYmnYFUv2V3vvYPgqD2CiT0crne7uWmhpRxP49aU9DEvQaEZtdA==", "dev": true, "dependencies": { - "@storybook/client-logger": "7.6.5", - "@storybook/manager-api": "7.6.5" + "@storybook/client-logger": "7.6.6", + "@storybook/manager-api": "7.6.6" }, "funding": { "type": "opencollective", @@ -5318,22 +5318,22 @@ } }, "node_modules/@storybook/blocks": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/blocks/-/blocks-7.6.5.tgz", - "integrity": "sha512-/NjuYkPks5w9lKn47KLgVC5cBkwfc+ERAp0CY0Xe//BQJkP+bcI8lE8d9Qc9IXFbOTvYEULeQrFgCkesk5BmLg==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/blocks/-/blocks-7.6.6.tgz", + "integrity": "sha512-QLqkiSNrtGnh8RK9ipD63jVAUenkRu+72xR31DViZWRV9V8G2hzky5E/RoZWPEx+DfmBIUJ7Tcef6cCRcxEj9A==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/components": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/components": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", - "@storybook/docs-tools": "7.6.5", + "@storybook/docs-tools": "7.6.6", "@storybook/global": "^5.0.0", - "@storybook/manager-api": "7.6.5", - "@storybook/preview-api": "7.6.5", - "@storybook/theming": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/manager-api": "7.6.6", + "@storybook/preview-api": "7.6.6", + "@storybook/theming": "7.6.6", + "@storybook/types": "7.6.6", "@types/lodash": "^4.14.167", "color-convert": "^2.0.1", "dequal": "^2.0.2", @@ -5357,17 +5357,17 @@ } }, "node_modules/@storybook/blocks/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -5383,15 +5383,15 @@ } }, "node_modules/@storybook/builder-manager": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/builder-manager/-/builder-manager-7.6.5.tgz", - "integrity": "sha512-FQyI+tfzMam2XKXq7k921YVafIJs9Vqvos5qx8vyRnRffo55UU8tgunwjGn0PswtbMm6sThVqE0C0ZzVr7RG8A==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/builder-manager/-/builder-manager-7.6.6.tgz", + "integrity": "sha512-96vmtUqh016H2n80xhvBZU2w5flTOzY7S0nW9nfxbY4UY4b39WajgwJ5wpg8l0YmCwQTrxCwY9/VE2Pd6CCqPA==", "dev": true, "dependencies": { "@fal-works/esbuild-plugin-global-externals": "^2.1.2", - "@storybook/core-common": "7.6.5", - "@storybook/manager": "7.6.5", - "@storybook/node-logger": "7.6.5", + "@storybook/core-common": "7.6.6", + "@storybook/manager": "7.6.6", + "@storybook/node-logger": "7.6.6", "@types/ejs": "^3.1.1", "@types/find-cache-dir": "^3.2.1", "@yarnpkg/esbuild-plugin-pnp": "^3.0.0-rc.10", @@ -5425,19 +5425,19 @@ } }, "node_modules/@storybook/builder-vite": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/builder-vite/-/builder-vite-7.6.5.tgz", - "integrity": "sha512-VbAYTGr92lgCWTwO2Z7NgSW3f5/K4Vr0Qxa2IlTgMCymWdDbWdIQiREcmCP0vjAGM2ftq1+vxngohVgx/r7pUw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/builder-vite/-/builder-vite-7.6.6.tgz", + "integrity": "sha512-vDBHjsswnVScVgGHeIZ22R/LoRt5T1F62p5czusydBSxKGzma5Va4JHQJp4/IKXwiCZbXcua/Cs7VKtBLO+50A==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-common": "7.6.5", - "@storybook/csf-plugin": "7.6.5", - "@storybook/node-logger": "7.6.5", - "@storybook/preview": "7.6.5", - "@storybook/preview-api": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-common": "7.6.6", + "@storybook/csf-plugin": "7.6.6", + "@storybook/node-logger": "7.6.6", + "@storybook/preview": "7.6.6", + "@storybook/preview-api": "7.6.6", + "@storybook/types": "7.6.6", "@types/find-cache-dir": "^3.2.1", "browser-assert": "^1.2.1", "es-module-lexer": "^0.9.3", @@ -5470,17 +5470,17 @@ } }, "node_modules/@storybook/builder-vite/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -5526,13 +5526,13 @@ } }, "node_modules/@storybook/channels": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/channels/-/channels-7.6.5.tgz", - "integrity": "sha512-FIlNkyfQy9uHoJfAFL2/wO3ASGJELFvBzURBE2rcEF/TS7GcUiqWnBfiDxAbwSEjSOm2F0eEq3UXhaZEjpJHDw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/channels/-/channels-7.6.6.tgz", + "integrity": "sha512-vvo7fBe2WffPonNNOA7Xx7jcHAto8qJYlq+VMysfheXrsRRbhHl3WQOA18Vm8hV9txtqdqk0hwQiXOWvhYVpeQ==", "dev": true, "dependencies": { - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/global": "^5.0.0", "qs": "^6.10.0", "telejson": "^7.2.0", @@ -5544,23 +5544,23 @@ } }, "node_modules/@storybook/cli": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/cli/-/cli-7.6.5.tgz", - "integrity": "sha512-w+Y8dx5oCLQVESOVmpsQuFksr/ewARKrnSKl9kwnVMN4sMgjOgoZ3zmV66J7SKexvwyuwlOjf840pmEglGdPPg==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/cli/-/cli-7.6.6.tgz", + "integrity": "sha512-FLmWrbmGOqe1VYwqyIWxU2lJcYPssORmSbSVVPw6OqQIXx3NrNBrmZDLncMwbVCDQ8eU54J1zb+MyDmSqMbVFg==", "dev": true, "dependencies": { "@babel/core": "^7.23.2", "@babel/preset-env": "^7.23.2", "@babel/types": "^7.23.0", "@ndelangen/get-tarball": "^3.0.7", - "@storybook/codemod": "7.6.5", - "@storybook/core-common": "7.6.5", - "@storybook/core-events": "7.6.5", - "@storybook/core-server": "7.6.5", - "@storybook/csf-tools": "7.6.5", - "@storybook/node-logger": "7.6.5", - "@storybook/telemetry": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/codemod": "7.6.6", + "@storybook/core-common": "7.6.6", + "@storybook/core-events": "7.6.6", + "@storybook/core-server": "7.6.6", + "@storybook/csf-tools": "7.6.6", + "@storybook/node-logger": "7.6.6", + "@storybook/telemetry": "7.6.6", + "@storybook/types": "7.6.6", "@types/semver": "^7.3.4", "@yarnpkg/fslib": "2.10.3", "@yarnpkg/libzip": "2.3.0", @@ -5724,9 +5724,9 @@ "dev": true }, "node_modules/@storybook/client-logger": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/client-logger/-/client-logger-7.6.5.tgz", - "integrity": "sha512-S5aROWgssqg7tcs9lgW5wmCAz4SxMAtioiyVj5oFecmPCbQtFVIAREYzeoxE4GfJL+plrfRkum4BzziANn8EhQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/client-logger/-/client-logger-7.6.6.tgz", + "integrity": "sha512-WEvVyuQR5oNF8jcMmGA13zDjxP/l46kOBBvB6JSc8toUdtLZ/kZWSnU0ioNM8+ECpFqXHjBcF2K6uSJOEb6YEg==", "dev": true, "dependencies": { "@storybook/global": "^5.0.0" @@ -5737,18 +5737,18 @@ } }, "node_modules/@storybook/codemod": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/codemod/-/codemod-7.6.5.tgz", - "integrity": "sha512-K5C9ltBClZ0aSyujGt3RJFtRicrUZy8nzhHrcADUj27rrQD26jH/p+Y05jWKj9JcI8SyMg978GN5X/1aw2Y31A==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/codemod/-/codemod-7.6.6.tgz", + "integrity": "sha512-6QwW6T6ZgwwbTkEoZ7CAoX7lUUob7Sy7bRkMHhSjJe2++wEVFOYLvzHcLUJCupK59+WhmsJU9PpUMlXEKi40TQ==", "dev": true, "dependencies": { "@babel/core": "^7.23.2", "@babel/preset-env": "^7.23.2", "@babel/types": "^7.23.0", "@storybook/csf": "^0.1.2", - "@storybook/csf-tools": "7.6.5", - "@storybook/node-logger": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/csf-tools": "7.6.6", + "@storybook/node-logger": "7.6.6", + "@storybook/types": "7.6.6", "@types/cross-spawn": "^6.0.2", "cross-spawn": "^7.0.3", "globby": "^11.0.2", @@ -5778,18 +5778,18 @@ } }, "node_modules/@storybook/components": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/components/-/components-7.6.5.tgz", - "integrity": "sha512-w4ZucbBBZ+NKMWlJKVj2I/bMBBq7gzDp9lzc4+8QaQ3vUPXKqc1ilIPYo/7UR5oxwDVMZocmMSgl9L8lvf7+Mw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/components/-/components-7.6.6.tgz", + "integrity": "sha512-FSfcRxdmV4+LJHjMk0eodGVnZdb2qrKKmbtsn0O/434z586zPA287/wJJsm4JS/Xr1WS9oTvU6mYMDChkcxgeQ==", "dev": true, "dependencies": { "@radix-ui/react-select": "^1.2.2", "@radix-ui/react-toolbar": "^1.0.4", - "@storybook/client-logger": "7.6.5", + "@storybook/client-logger": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/theming": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/theming": "7.6.6", + "@storybook/types": "7.6.6", "memoizerific": "^1.11.3", "use-resize-observer": "^9.1.0", "util-deprecate": "^1.0.2" @@ -5804,13 +5804,13 @@ } }, "node_modules/@storybook/core-client": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/core-client/-/core-client-7.6.5.tgz", - "integrity": "sha512-6FtyJcz8MSl+JYwNJZ53FM6rkT27pFHWcJPdtw/9229Ec8as9RpkNeZ/NBZjRTeDkn9Ki0VOiVAefNie9tZ/8Q==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/core-client/-/core-client-7.6.6.tgz", + "integrity": "sha512-P100aNf+WpvzlfULZp1NPd60/nxsppLmft2DdIyAx1j4QPMZvUJyJB+hdBMzTFiPEhIUncIMoIVf2R3UXC5DfA==", "dev": true, "dependencies": { - "@storybook/client-logger": "7.6.5", - "@storybook/preview-api": "7.6.5" + "@storybook/client-logger": "7.6.6", + "@storybook/preview-api": "7.6.6" }, "funding": { "type": "opencollective", @@ -5818,17 +5818,17 @@ } }, "node_modules/@storybook/core-client/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -5844,14 +5844,14 @@ } }, "node_modules/@storybook/core-common": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/core-common/-/core-common-7.6.5.tgz", - "integrity": "sha512-z4EgzZSIVbID6Ib0jhh3jimKeaDWU8OOhoZYfn3galFmgQWowWOv1oMgipWiXfRLWw9DaLFQiCHIdLANH+VO2g==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/core-common/-/core-common-7.6.6.tgz", + "integrity": "sha512-DpbFSYw8LHuwpeU2ec5uWryxrSqslFJnWTfNA7AvpzCviWXkz4kq+YYrDee9XExF6OozNwILmG6m52SnraysBA==", "dev": true, "dependencies": { - "@storybook/core-events": "7.6.5", - "@storybook/node-logger": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/core-events": "7.6.6", + "@storybook/node-logger": "7.6.6", + "@storybook/types": "7.6.6", "@types/find-cache-dir": "^3.2.1", "@types/node": "^18.0.0", "@types/node-fetch": "^2.6.4", @@ -6000,9 +6000,9 @@ } }, "node_modules/@storybook/core-events": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/core-events/-/core-events-7.6.5.tgz", - "integrity": "sha512-zk2q/qicYXAzHA4oV3GDbIql+Kd4TOHUgDE8e4jPCOPp856z2ScqEKUAbiJizs6eEJOH4nW9Db1kuzgrBVEykQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/core-events/-/core-events-7.6.6.tgz", + "integrity": "sha512-7+q9HiZiLxaQcwpaSLQrLdjHNHBoOoUY9ZcZXI9iNFSopOgb/ItDnzzlpv08NC7CbKae1hVKJM/t5aSTl7tCMw==", "dev": true, "dependencies": { "ts-dedent": "^2.0.0" @@ -6013,26 +6013,26 @@ } }, "node_modules/@storybook/core-server": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/core-server/-/core-server-7.6.5.tgz", - "integrity": "sha512-BfKzK/ObTjUcPvE5/r1pogCifM/4nLRhOUYJl7XekwHkOQwn19e6H3/ku1W3jDoYXBu642Dc9X7l/ERjKTqxFg==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/core-server/-/core-server-7.6.6.tgz", + "integrity": "sha512-QFVahaExgGtq9swBXgQAMUiCqpCcyVXOiKTIy1j+1uAhPVqhpCxBkkFoXruih5hbIMZyohE4mLPCAr/ivicoDg==", "dev": true, "dependencies": { "@aw-web-design/x-default-browser": "1.4.126", "@discoveryjs/json-ext": "^0.5.3", - "@storybook/builder-manager": "7.6.5", - "@storybook/channels": "7.6.5", - "@storybook/core-common": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/builder-manager": "7.6.6", + "@storybook/channels": "7.6.6", + "@storybook/core-common": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", - "@storybook/csf-tools": "7.6.5", + "@storybook/csf-tools": "7.6.6", "@storybook/docs-mdx": "^0.1.0", "@storybook/global": "^5.0.0", - "@storybook/manager": "7.6.5", - "@storybook/node-logger": "7.6.5", - "@storybook/preview-api": "7.6.5", - "@storybook/telemetry": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/manager": "7.6.6", + "@storybook/node-logger": "7.6.6", + "@storybook/preview-api": "7.6.6", + "@storybook/telemetry": "7.6.6", + "@storybook/types": "7.6.6", "@types/detect-port": "^1.3.0", "@types/node": "^18.0.0", "@types/pretty-hrtime": "^1.0.0", @@ -6066,17 +6066,17 @@ } }, "node_modules/@storybook/core-server/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -6209,12 +6209,12 @@ } }, "node_modules/@storybook/csf-plugin": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/csf-plugin/-/csf-plugin-7.6.5.tgz", - "integrity": "sha512-iQ8Y/Qq1IUhHRddjDVicWJA2sM7OZA1FR97OvWUT2240WjCuQSCfy32JD8TQlYjqXgEolJeLPv3zW4qH5om4LQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/csf-plugin/-/csf-plugin-7.6.6.tgz", + "integrity": "sha512-SqdffT14+XNpf+7vA29Elur28VArXtFv4cXMlsCbswbRuY+a0A8vYNwVIfCUy9u4WHTcQX1/tUkDAMh80lrVRQ==", "dev": true, "dependencies": { - "@storybook/csf-tools": "7.6.5", + "@storybook/csf-tools": "7.6.6", "unplugin": "^1.3.1" }, "funding": { @@ -6223,9 +6223,9 @@ } }, "node_modules/@storybook/csf-tools": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/csf-tools/-/csf-tools-7.6.5.tgz", - "integrity": "sha512-1iaCh7nt+WE7Q5UwRhLLc5flMNoAV/vBr0tvDSCKiHaO+D3dZzlZOe/U+S6wegdyN2QNcvT2xs179CcrX6Qp6w==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/csf-tools/-/csf-tools-7.6.6.tgz", + "integrity": "sha512-VXOZCzfSVJL832u17pPhFu1x3PPaAN9d8VXNFX+t/2raga7tK3T7Qhe7lWfP7EZcrVvSCEEp0aMRz2EzzDGVtw==", "dev": true, "dependencies": { "@babel/generator": "^7.23.0", @@ -6233,7 +6233,7 @@ "@babel/traverse": "^7.23.2", "@babel/types": "^7.23.0", "@storybook/csf": "^0.1.2", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "fs-extra": "^11.1.0", "recast": "^0.23.1", "ts-dedent": "^2.0.0" @@ -6264,14 +6264,14 @@ "dev": true }, "node_modules/@storybook/docs-tools": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/docs-tools/-/docs-tools-7.6.5.tgz", - "integrity": "sha512-UyHkHu5Af6jMpYsR4lZ69D32GQGeA0pLAn7jaBbQndgAjBdK1ykZcifiUC7Wz1hG7+YpuYspEGuDEddOh+X8FQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/docs-tools/-/docs-tools-7.6.6.tgz", + "integrity": "sha512-nc5ZjN2s8SC2PtsZoFf9Wm6gD8TcSlkYbF/mjtyLCGN+Fi+k5B5iudqoa65H19hwiLlzBdcnpQ8C89AiK33J9Q==", "dev": true, "dependencies": { - "@storybook/core-common": "7.6.5", - "@storybook/preview-api": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/core-common": "7.6.6", + "@storybook/preview-api": "7.6.6", + "@storybook/types": "7.6.6", "@types/doctrine": "^0.0.3", "assert": "^2.1.0", "doctrine": "^3.0.0", @@ -6283,17 +6283,17 @@ } }, "node_modules/@storybook/docs-tools/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -6315,9 +6315,9 @@ "dev": true }, "node_modules/@storybook/manager": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/manager/-/manager-7.6.5.tgz", - "integrity": "sha512-y1KLH0O1PGPyMxGMvOhppzFSO7r4ibjTve5iqsI0JZwxUjNuBKRLYbrhXdAyC2iacvxYNrHgevae1k9XdD+FQw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/manager/-/manager-7.6.6.tgz", + "integrity": "sha512-Ga3LcSu/xxSyg+cLlO9AS8QjW+D667V+c9qQPmsFyU6qfFc6m6mVqcRLSmFVD5e7P/o0FL7STOf9jAKkDcW8xw==", "dev": true, "funding": { "type": "opencollective", @@ -6325,19 +6325,19 @@ } }, "node_modules/@storybook/manager-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/manager-api/-/manager-api-7.6.5.tgz", - "integrity": "sha512-tE3OShOcs6A3XtI3NJd6hYQOZLaP++Fn0dCtowBwYh/vS1EN/AyroVmL97tsxn1DZTyoRt0GidwbB6dvLMBOwA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/manager-api/-/manager-api-7.6.6.tgz", + "integrity": "sha512-euRAbSZAUzHDt6z1Pq/g45N/RNqta9RaQAym18zt/oLWiYOIrkLmdf7kCuFYsmuA5XQBytiJqwkAD7uF1aLe0g==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/router": "7.6.5", - "@storybook/theming": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/router": "7.6.6", + "@storybook/theming": "7.6.6", + "@storybook/types": "7.6.6", "dequal": "^2.0.2", "lodash": "^4.17.21", "memoizerific": "^1.11.3", @@ -6391,9 +6391,9 @@ "dev": true }, "node_modules/@storybook/node-logger": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/node-logger/-/node-logger-7.6.5.tgz", - "integrity": "sha512-xKw6IH1wLkIssekdBv3bd13xYKUF1t8EwqDR8BYcN8AVjZlqJMTifssqG4bYV+G/B7J3tz4ugJ5nmtWg6RQ0Qw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/node-logger/-/node-logger-7.6.6.tgz", + "integrity": "sha512-b2OF9GRNI01MlBlnDGS8S6/yOpBNl8eH/0ONafuMPzFEZs5PouHGsFflJvQwwcdVTknMjF5uVS2eSmnLZ8spvA==", "dev": true, "funding": { "type": "opencollective", @@ -6401,9 +6401,9 @@ } }, "node_modules/@storybook/postinstall": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/postinstall/-/postinstall-7.6.5.tgz", - "integrity": "sha512-12WxfpqGKsk7GQ3KWiZSbamsYK8vtRmhOTkavZ9IQkcJ/zuVfmqK80/Mds+njJMudUPzuREuSFGWACczo17EDA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/postinstall/-/postinstall-7.6.6.tgz", + "integrity": "sha512-jamn7QNTJPZiu22nu25LqfSTJohugFhCu4b48yqP+pdMdkQ3qVd3NdDYhBlgkH/Btar+kppiJP1gRtoiJF761w==", "dev": true, "funding": { "type": "opencollective", @@ -6411,9 +6411,9 @@ } }, "node_modules/@storybook/preview": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview/-/preview-7.6.5.tgz", - "integrity": "sha512-zmLa7C7yFGTYhgGZXoecdww9rx0Z5HpNi/GDBRWoNSK+FEdE8Jj2jF5NJ2ncldtYIyegz9ku29JFMKbhMj9K5Q==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview/-/preview-7.6.6.tgz", + "integrity": "sha512-Rl+Pom2bNwzc0MdlbFALmvxsbCkbIwlpTZlRZZTh5Ah8JViV9htQgP9e8uwo3NZA2BhjbDLkmnZeloWxQnI5Ig==", "dev": true, "funding": { "type": "opencollective", @@ -6507,9 +6507,9 @@ } }, "node_modules/@storybook/react-dom-shim": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/react-dom-shim/-/react-dom-shim-7.6.5.tgz", - "integrity": "sha512-Qp3N3zENdvx20ikHmz5yI03z+mAWF8bUAwUofqXarVtZUkBNtvfTfUwgAezOAF0eClClH+ktIziIKd976tLSPw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/react-dom-shim/-/react-dom-shim-7.6.6.tgz", + "integrity": "sha512-WWNlXtCVoBWXX/kLNulUeMgzmlAEHi2aBrdIv2jz0DScPf0YxeWAkWmgK7F0zMot9mdwYncr+pk1AILbTBJSyg==", "dev": true, "funding": { "type": "opencollective", @@ -6521,12 +6521,12 @@ } }, "node_modules/@storybook/router": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/router/-/router-7.6.5.tgz", - "integrity": "sha512-QiTC86gRuoepzzmS6HNJZTwfz/n27NcqtaVEIxJi1Yvsx2/kLa9NkRhylNkfTuZ1gEry9stAlKWanMsB2aKyjQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/router/-/router-7.6.6.tgz", + "integrity": "sha512-dkn81MtxrG7JMDbOHEcVZkTDVKsneg72CyqJ8ELZfC81iKQcDMQkV9mdmnMl45aKn6UrscudI4K23OxQmsevkw==", "dev": true, "dependencies": { - "@storybook/client-logger": "7.6.5", + "@storybook/client-logger": "7.6.6", "memoizerific": "^1.11.3", "qs": "^6.10.0" }, @@ -6536,14 +6536,14 @@ } }, "node_modules/@storybook/telemetry": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/telemetry/-/telemetry-7.6.5.tgz", - "integrity": "sha512-FiLRh9k9LoGphqgBqPYySWdGqplihiZyDwqdo+Qs19RcQ/eiKg0W7fdA09nStcdcsHmDl/1cMfRhz9KUiMtwOw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/telemetry/-/telemetry-7.6.6.tgz", + "integrity": "sha512-2WdDcrMrt1bPVgdMVO0tFmVxT6YIjiPRfKbH/7wwYMOGmV75m4mJ9Ha2gzZc/oXTSK1M4/fiK12IgW+S3ErcMg==", "dev": true, "dependencies": { - "@storybook/client-logger": "7.6.5", - "@storybook/core-common": "7.6.5", - "@storybook/csf-tools": "7.6.5", + "@storybook/client-logger": "7.6.6", + "@storybook/core-common": "7.6.6", + "@storybook/csf-tools": "7.6.6", "chalk": "^4.1.0", "detect-package-manager": "^2.0.1", "fetch-retry": "^5.0.2", @@ -6622,13 +6622,13 @@ } }, "node_modules/@storybook/theming": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/theming/-/theming-7.6.5.tgz", - "integrity": "sha512-RpcWT0YEgiobO41McVPDfQQHHFnjyr1sJnNTPJIvOUgSfURdgSj17mQVxtD5xcXcPWUdle5UhIOrCixHbL/NNw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/theming/-/theming-7.6.6.tgz", + "integrity": "sha512-hNZOOxaF55iAGUEM0dvAIP6LfGMgPKCJQIk/qyotFk+SKkg3PBqzph89XfFl9yCD3KiX5cryqarULgVuNawLJg==", "dev": true, "dependencies": { "@emotion/use-insertion-effect-with-fallbacks": "^1.0.0", - "@storybook/client-logger": "7.6.5", + "@storybook/client-logger": "7.6.6", "@storybook/global": "^5.0.0", "memoizerific": "^1.11.3" }, @@ -6642,12 +6642,12 @@ } }, "node_modules/@storybook/types": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/types/-/types-7.6.5.tgz", - "integrity": "sha512-Q757v+fYZZSaEpks/zDL5YgXRozxkgKakXFc+BoQHK5q5sVhJ+0jvpLJiAQAniIIaMIkqY/G24Kd6Uo6UdKBCg==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/types/-/types-7.6.6.tgz", + "integrity": "sha512-77vbQp3GX93OD8UzFkY4a0fAmkZrqLe61XVo6yABrwbVDY0EcAwaCF5gcXRhOHldlH7KYbLfEQkDkkKTBjX7ow==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", + "@storybook/channels": "7.6.6", "@types/babel__core": "^7.0.0", "@types/express": "^4.7.0", "file-system-cache": "2.3.0" @@ -6658,18 +6658,18 @@ } }, "node_modules/@storybook/web-components": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/web-components/-/web-components-7.6.5.tgz", - "integrity": "sha512-uBL1d/qSwvbmkV/JGBdLySdmyOnZKBK+hn7+lgfQfTPV7JjOmTzuifnnSrhKlI/wupdBM/LYjlax5kGYt3oBXQ==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/web-components/-/web-components-7.6.6.tgz", + "integrity": "sha512-oBfZBM1Vkzs/rZySk/HXCIRZ10FSYx6wgyMbiT5EmGm7Jz9y5qaqQhG/sPYKsYL0TlPRRKjf1iukHkxD6DWmpA==", "dev": true, "dependencies": { - "@storybook/client-logger": "7.6.5", - "@storybook/core-client": "7.6.5", - "@storybook/docs-tools": "7.6.5", + "@storybook/client-logger": "7.6.6", + "@storybook/core-client": "7.6.6", + "@storybook/docs-tools": "7.6.6", "@storybook/global": "^5.0.0", - "@storybook/manager-api": "7.6.5", - "@storybook/preview-api": "7.6.5", - "@storybook/types": "7.6.5", + "@storybook/manager-api": "7.6.6", + "@storybook/preview-api": "7.6.6", + "@storybook/types": "7.6.6", "tiny-invariant": "^1.3.1", "ts-dedent": "^2.0.0" }, @@ -6685,15 +6685,15 @@ } }, "node_modules/@storybook/web-components-vite": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/web-components-vite/-/web-components-vite-7.6.5.tgz", - "integrity": "sha512-j4lfrgPjlqAeoUdfXWMESUAxrOn+YUJekGh3saxsHxXIiYnzJBdkiJju4Hzqav4j8645bJzlZBw51e6wJJsuFw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/web-components-vite/-/web-components-vite-7.6.6.tgz", + "integrity": "sha512-AOxvnA7eIRnKqZ21QgUHJ/ENX1MMhJCKPiytvkX8U02gs+0HE+NnZPbhZLPh/Ruax7KfLPUGItv3BcfrIxV5lw==", "dev": true, "dependencies": { - "@storybook/builder-vite": "7.6.5", - "@storybook/core-server": "7.6.5", - "@storybook/node-logger": "7.6.5", - "@storybook/web-components": "7.6.5", + "@storybook/builder-vite": "7.6.6", + "@storybook/core-server": "7.6.6", + "@storybook/node-logger": "7.6.6", + "@storybook/web-components": "7.6.6", "magic-string": "^0.30.0" }, "engines": { @@ -6705,17 +6705,17 @@ } }, "node_modules/@storybook/web-components/node_modules/@storybook/preview-api": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.5.tgz", - "integrity": "sha512-9XzuDXXgNuA6dDZ3DXsUwEG6ElxeTbzLuYuzcjtS1FusSICZ2iYmxfS0GfSud9MjPPYOJYoSOvMdIHjorjgByA==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/@storybook/preview-api/-/preview-api-7.6.6.tgz", + "integrity": "sha512-Bt6xIAR5yZ/JWc90X4BbLOA97iL65glZ1SOBgFFv2mHrdZ1lcdKhAlQr2aeJAf1mLvBtalPjvKzi9EuVY3FZ4w==", "dev": true, "dependencies": { - "@storybook/channels": "7.6.5", - "@storybook/client-logger": "7.6.5", - "@storybook/core-events": "7.6.5", + "@storybook/channels": "7.6.6", + "@storybook/client-logger": "7.6.6", + "@storybook/core-events": "7.6.6", "@storybook/csf": "^0.1.2", "@storybook/global": "^5.0.0", - "@storybook/types": "7.6.5", + "@storybook/types": "7.6.6", "@types/qs": "^6.9.5", "dequal": "^2.0.2", "lodash": "^4.17.21", @@ -11436,9 +11436,9 @@ "dev": true }, "node_modules/flow-parser": { - "version": "0.224.0", - "resolved": "https://registry.npmjs.org/flow-parser/-/flow-parser-0.224.0.tgz", - "integrity": "sha512-S1P78o0VLB1FZvkoGSIpaRiiTUQ3xDhm9I4Z1qc3lglmkjehfR2sjM0vhwKS7UC1G12VT4Leb/GGV/KlactqjA==", + "version": "0.225.0", + "resolved": "https://registry.npmjs.org/flow-parser/-/flow-parser-0.225.0.tgz", + "integrity": "sha512-wTr10/1z9wBuaNf+RGdGwD5FOI6TsNcWrMDhE+JBc2vEKe1e4SZuO5zVZCBq9SrFqPyWy0wFO9+hTH4zuPDbMA==", "dev": true, "engines": { "node": ">=0.4.0" @@ -16952,12 +16952,12 @@ "dev": true }, "node_modules/storybook": { - "version": "7.6.5", - "resolved": "https://registry.npmjs.org/storybook/-/storybook-7.6.5.tgz", - "integrity": "sha512-uHPrL+g/0v6iIVtDA8J0uWd3jDZcdr51lCR/vPXTkrCY1uVaFjswzl8EMy5PR05I7jMpKUzkJWZtFbgbh9e1Bw==", + "version": "7.6.6", + "resolved": "https://registry.npmjs.org/storybook/-/storybook-7.6.6.tgz", + "integrity": "sha512-PmJxpjGdLvDOHaRzqLOvcJ3ALQPaNeW6D5Lv7rPPVbuO24wdDzd/75dPRP7gJKYcGE0NnDZ6cLQq3UlCfbkIBA==", "dev": true, "dependencies": { - "@storybook/cli": "7.6.5" + "@storybook/cli": "7.6.6" }, "bin": { "sb": "index.js", diff --git a/web/package.json b/web/package.json index 786580462..e753c5e3f 100644 --- a/web/package.json +++ b/web/package.json @@ -86,13 +86,13 @@ "@rollup/plugin-replace": "^5.0.5", "@rollup/plugin-terser": "^0.4.4", "@rollup/plugin-typescript": "^11.1.5", - "@storybook/addon-essentials": "^7.6.5", - "@storybook/addon-links": "^7.6.5", - "@storybook/api": "^7.6.5", + "@storybook/addon-essentials": "^7.6.6", + "@storybook/addon-links": "^7.6.6", + "@storybook/api": "^7.6.6", "@storybook/blocks": "^7.6.4", - "@storybook/manager-api": "^7.6.5", - "@storybook/web-components": "^7.6.5", - "@storybook/web-components-vite": "^7.6.5", + "@storybook/manager-api": "^7.6.6", + "@storybook/web-components": "^7.6.6", + "@storybook/web-components-vite": "^7.6.6", "@trivago/prettier-plugin-sort-imports": "^4.3.0", "@types/chart.js": "^2.9.41", "@types/codemirror": "5.60.15", @@ -120,7 +120,7 @@ "rollup-plugin-cssimport": "^1.0.3", "rollup-plugin-modify": "^3.0.0", "rollup-plugin-postcss-lit": "^2.1.0", - "storybook": "^7.6.5", + "storybook": "^7.6.6", "storybook-addon-mock": "^4.3.0", "ts-lit-plugin": "^2.0.1", "tslib": "^2.6.2", From 3afb1a2f2118c06a2e847a0e979ada3425a33864 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 11:30:20 +0100 Subject: [PATCH 03/37] web: bump the sentry group in /web with 2 updates (#7944) Bumps the sentry group in /web with 2 updates: [@sentry/browser](https://github.com/getsentry/sentry-javascript) and [@sentry/tracing](https://github.com/getsentry/sentry-javascript). Updates `@sentry/browser` from 7.88.0 to 7.89.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/7.88.0...7.89.0) Updates `@sentry/tracing` from 7.88.0 to 7.89.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/7.88.0...7.89.0) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: sentry - dependency-name: "@sentry/tracing" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: sentry ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- web/package-lock.json | 92 +++++++++++++++++++++---------------------- web/package.json | 4 +- 2 files changed, 48 insertions(+), 48 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index da13d73b3..aa192cfd1 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -24,8 +24,8 @@ "@open-wc/lit-helpers": "^0.6.0", "@patternfly/elements": "^2.4.0", "@patternfly/patternfly": "^4.224.2", - "@sentry/browser": "^7.88.0", - "@sentry/tracing": "^7.88.0", + "@sentry/browser": "^7.89.0", + "@sentry/tracing": "^7.89.0", "@webcomponents/webcomponentsjs": "^2.8.0", "base64-js": "^1.5.1", "chart.js": "^4.4.1", @@ -4752,98 +4752,98 @@ ] }, "node_modules/@sentry-internal/feedback": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-7.88.0.tgz", - "integrity": "sha512-lbK6jgO1I0M96nZQ99mcLSZ55ebwPAP6LhEWhkmc+eAfy97VpiY+qsbmgsmOzCEPqMmEUCEcI0rEZ7fiye2v2Q==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-7.89.0.tgz", + "integrity": "sha512-Uz1A/ex3X/cvHjS3C9qH8ENa1Le7Jesxl3Umuv3n1e/rvoPxo2VFNCgDrpsM1mcg2XwiPkmpyMAVxDMgB0A7JQ==", "dependencies": { - "@sentry/core": "7.88.0", - "@sentry/types": "7.88.0", - "@sentry/utils": "7.88.0" + "@sentry/core": "7.89.0", + "@sentry/types": "7.89.0", + "@sentry/utils": "7.89.0" }, "engines": { "node": ">=12" } }, "node_modules/@sentry-internal/tracing": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.88.0.tgz", - "integrity": "sha512-xXQdcYhsS+ourzJHjXNjZC9zakuc97udmpgaXRjEP7FjPYclIx+YXwgFBdHM2kzAwZLFOsEce5dr46GVXUDfZw==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.89.0.tgz", + "integrity": "sha512-cSwno2NYteBBqOvcm/ue9cJxGGl2uffG4laEyLR9y4we+bYxigfx/Ki2TFOtwXrv5o59eRAtN1lpzaAf43yfBw==", "dependencies": { - "@sentry/core": "7.88.0", - "@sentry/types": "7.88.0", - "@sentry/utils": "7.88.0" + "@sentry/core": "7.89.0", + "@sentry/types": "7.89.0", + "@sentry/utils": "7.89.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/browser": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.88.0.tgz", - "integrity": "sha512-il4x3PB99nuU/OJQw2RltgYYbo8vtnYoIgneOeEiw4m0ppK1nKkMkd3vDRipGL6E/0i7IUmQfYYy6U10J5Rx+g==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.89.0.tgz", + "integrity": "sha512-84hZOymrKyfjQnbD6d/PhlHCsQHjUGCqVU/K6e7g+JiB1DNZOsfZTkLj6Xj8OQzvwKHWzB9egmJN6IA7dUSJXQ==", "dependencies": { - "@sentry-internal/feedback": "7.88.0", - "@sentry-internal/tracing": "7.88.0", - "@sentry/core": "7.88.0", - "@sentry/replay": "7.88.0", - "@sentry/types": "7.88.0", - "@sentry/utils": "7.88.0" + "@sentry-internal/feedback": "7.89.0", + "@sentry-internal/tracing": "7.89.0", + "@sentry/core": "7.89.0", + "@sentry/replay": "7.89.0", + "@sentry/types": "7.89.0", + "@sentry/utils": "7.89.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/core": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.88.0.tgz", - "integrity": "sha512-Jzbb7dcwiCO7kI0a1w+32UzWxbEn2OcZWzp55QMEeAh6nZ/5CXhXwpuHi0tW7doPj+cJdmxMTMu9LqMVfdGkzQ==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.89.0.tgz", + "integrity": "sha512-aU3wfZ+tyFi4T06fOH3z5xnTyMzwvzyEohYOmnQnDrqNgvDzjWkyeUzWse9FaFiut8lBN9O+Pd2H0ucPBMPEhQ==", "dependencies": { - "@sentry/types": "7.88.0", - "@sentry/utils": "7.88.0" + "@sentry/types": "7.89.0", + "@sentry/utils": "7.89.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/replay": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.88.0.tgz", - "integrity": "sha512-em5dPKLPG7c/HGDbpIj3aHrWbA4iMwqjevqTzn+++KNO1YslkOosCaGsb1whU3AL1T9c3aIFIhZ4u3rNo+DxcA==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.89.0.tgz", + "integrity": "sha512-iD1E1SbW8Ca34Fn0slM9E0Kh0DjhkZGerPFKqbwjXR7QKCx+ljMRKaCQhb4bBKfVNYZORxpwY4PLJLQ+k6WHJg==", "dependencies": { - "@sentry-internal/tracing": "7.88.0", - "@sentry/core": "7.88.0", - "@sentry/types": "7.88.0", - "@sentry/utils": "7.88.0" + "@sentry-internal/tracing": "7.89.0", + "@sentry/core": "7.89.0", + "@sentry/types": "7.89.0", + "@sentry/utils": "7.89.0" }, "engines": { "node": ">=12" } }, "node_modules/@sentry/tracing": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.88.0.tgz", - "integrity": "sha512-Lj4hhLraalN4w3swXkP2do1hcaQVOuLvO6eJJbcwf10b+P4CcdlwAnqvxOOCNxA5VzG4/K2BqQ8LRU4S0Ulj9A==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.89.0.tgz", + "integrity": "sha512-POYZ1+YxG0G3JizoPmForqo3kPILYhmHIqypsSz7RT+OKsKVmGt/GuspydJM1xhbPYrFyMxzt6HMMss4JN1Uew==", "dependencies": { - "@sentry-internal/tracing": "7.88.0" + "@sentry-internal/tracing": "7.89.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/types": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.88.0.tgz", - "integrity": "sha512-FvwvmX1pWAZKicPj4EpKyho8Wm+C4+r5LiepbbBF8oKwSPJdD2QV1fo/LWxsrzNxWOllFIVIXF5Ed3nPYQWpTw==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.89.0.tgz", + "integrity": "sha512-5Rqt6vIP652p01ypUaEIrELjsHF0vUnzj/JFz+i7nXv6w77GPpNzeIlMYdnauBIgJhLUvYCTQaOPV9GhgZhc4g==", "engines": { "node": ">=8" } }, "node_modules/@sentry/utils": { - "version": "7.88.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.88.0.tgz", - "integrity": "sha512-ukminfRmdBXTzk49orwJf3Lu3hR60ZRHjE2a4IXwYhyDT6JJgJqgsq1hzGXx0AyFfyS4WhfZ6QUBy7fu3BScZQ==", + "version": "7.89.0", + "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.89.0.tgz", + "integrity": "sha512-t6qDQajdAjZ6LPraAWO00ZjvDbNH82DoVGV/2o4C5MBPCutJGTGyWIpI2tliYPZPPx+3C2m5L757zh1dCzrgUg==", "dependencies": { - "@sentry/types": "7.88.0" + "@sentry/types": "7.89.0" }, "engines": { "node": ">=8" diff --git a/web/package.json b/web/package.json index e753c5e3f..ffa7d0970 100644 --- a/web/package.json +++ b/web/package.json @@ -49,8 +49,8 @@ "@open-wc/lit-helpers": "^0.6.0", "@patternfly/elements": "^2.4.0", "@patternfly/patternfly": "^4.224.2", - "@sentry/browser": "^7.88.0", - "@sentry/tracing": "^7.88.0", + "@sentry/browser": "^7.89.0", + "@sentry/tracing": "^7.89.0", "@webcomponents/webcomponentsjs": "^2.8.0", "base64-js": "^1.5.1", "chart.js": "^4.4.1", From 90d88deb814b7d30bd48df4a2659c02877bee94a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 11:30:39 +0100 Subject: [PATCH 04/37] core: bump github.com/redis/go-redis/v9 from 9.3.0 to 9.3.1 (#7942) Bumps [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) from 9.3.0 to 9.3.1. - [Release notes](https://github.com/redis/go-redis/releases) - [Changelog](https://github.com/redis/go-redis/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/go-redis/compare/v9.3.0...v9.3.1) --- updated-dependencies: - dependency-name: github.com/redis/go-redis/v9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 33bc7c364..34dad030d 100644 --- a/go.mod +++ b/go.mod @@ -23,7 +23,7 @@ require ( github.com/nmcclain/asn1-ber v0.0.0-20170104154839-2661553a0484 github.com/pires/go-proxyproto v0.7.0 github.com/prometheus/client_golang v1.17.0 - github.com/redis/go-redis/v9 v9.3.0 + github.com/redis/go-redis/v9 v9.3.1 github.com/sirupsen/logrus v1.9.3 github.com/spf13/cobra v1.8.0 github.com/stretchr/testify v1.8.4 diff --git a/go.sum b/go.sum index d26320a4a..1b4aff0a5 100644 --- a/go.sum +++ b/go.sum @@ -256,8 +256,8 @@ github.com/prometheus/common v0.44.0 h1:+5BrQJwiBB9xsMygAB3TNvpQKOwlkc25LbISbrdO github.com/prometheus/common v0.44.0/go.mod h1:ofAIvZbQ1e/nugmZGz4/qCb9Ap1VoSTIO7x0VV9VvuY= github.com/prometheus/procfs v0.11.1 h1:xRC8Iq1yyca5ypa9n1EZnWZkt7dwcoRPQwX/5gwaUuI= github.com/prometheus/procfs v0.11.1/go.mod h1:eesXgaPo1q7lBpVMoMy0ZOFTth9hBn4W/y0/p/ScXhY= -github.com/redis/go-redis/v9 v9.3.0 h1:RiVDjmig62jIWp7Kk4XVLs0hzV6pI3PyTnnL0cnn0u0= -github.com/redis/go-redis/v9 v9.3.0/go.mod h1:hdY0cQFCN4fnSYT6TkisLufl/4W5UIXyv0b/CLO2V2M= +github.com/redis/go-redis/v9 v9.3.1 h1:KqdY8U+3X6z+iACvumCNxnoluToB+9Me+TvyFa21Mds= +github.com/redis/go-redis/v9 v9.3.1/go.mod h1:hdY0cQFCN4fnSYT6TkisLufl/4W5UIXyv0b/CLO2V2M= github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4= github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M= github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA= From 6628088e3b482d615e80d69dfd2613abca8da543 Mon Sep 17 00:00:00 2001 From: Jens L Date: Wed, 20 Dec 2023 12:38:31 +0100 Subject: [PATCH 05/37] website: fix hosted API browser (#7946) Signed-off-by: Jens Langhammer --- website/developer-docs/api/browser.mdx | 39 +++----------------- website/src/components/APIBrowser/index.tsx | 40 +++++++++++++++++++++ website/src/pages/api/index.jsx | 2 +- website/src/pages/api/v3.jsx | 2 +- website/src/pages/index.jsx | 2 +- website/src/pages/terraform-provider.jsx | 2 +- 6 files changed, 49 insertions(+), 38 deletions(-) create mode 100644 website/src/components/APIBrowser/index.tsx diff --git a/website/developer-docs/api/browser.mdx b/website/developer-docs/api/browser.mdx index 7aa35b209..4ea697cfe 100644 --- a/website/developer-docs/api/browser.mdx +++ b/website/developer-docs/api/browser.mdx @@ -1,38 +1,9 @@ +--- +hide_table_of_contents: true +--- + # API Browser -import useDocusaurusContext from "@docusaurus/useDocusaurusContext"; -import useBaseUrl from "@docusaurus/useBaseUrl"; -import BrowserOnly from "@docusaurus/core/lib/client/exports/BrowserOnly"; -import { useColorMode } from "@docusaurus/theme-common"; - -export function APIBrowser() { - const context = useDocusaurusContext(); - const { siteConfig = {} } = context; - const { colorMode, setColorMode } = useColorMode(); - let bg = "#1b1b1d"; - if (colorMode === "light") { - bg = "#fff"; - } - return ( - - {() => { - import("rapidoc"); - return ( - - ); - }} - - ); -} +import APIBrowser from "../../src/components/APIBrowser"; diff --git a/website/src/components/APIBrowser/index.tsx b/website/src/components/APIBrowser/index.tsx new file mode 100644 index 000000000..25c43b743 --- /dev/null +++ b/website/src/components/APIBrowser/index.tsx @@ -0,0 +1,40 @@ +import React from "react"; +import useDocusaurusContext from "@docusaurus/useDocusaurusContext"; +import useBaseUrl from "@docusaurus/useBaseUrl"; +import BrowserOnly from "@docusaurus/BrowserOnly"; +import { useColorMode } from "@docusaurus/theme-common"; + +export function APIBrowser() { + const context = useDocusaurusContext(); + const { siteConfig = {} } = context; + const { colorMode, setColorMode } = useColorMode(); + let bg = "#1b1b1d"; + if (colorMode === "light") { + bg = "#fff"; + } + return ( + + {() => { + require("rapidoc"); + return ( + + ); + }} + + ); +} + +export default APIBrowser; diff --git a/website/src/pages/api/index.jsx b/website/src/pages/api/index.jsx index 8e6647dc0..5ba633bdb 100644 --- a/website/src/pages/api/index.jsx +++ b/website/src/pages/api/index.jsx @@ -1,7 +1,7 @@ import React from "react"; import Layout from "@theme/Layout"; import Head from "@docusaurus/Head"; -import BrowserOnly from "@docusaurus/core/lib/client/exports/BrowserOnly"; +import BrowserOnly from "@docusaurus/BrowserOnly"; function APIPage() { return ( diff --git a/website/src/pages/api/v3.jsx b/website/src/pages/api/v3.jsx index 7cdd45289..8ea704650 100644 --- a/website/src/pages/api/v3.jsx +++ b/website/src/pages/api/v3.jsx @@ -1,7 +1,7 @@ import React from "react"; import Layout from "@theme/Layout"; import Head from "@docusaurus/Head"; -import BrowserOnly from "@docusaurus/core/lib/client/exports/BrowserOnly"; +import BrowserOnly from "@docusaurus/BrowserOnly"; function APIPage() { return ( diff --git a/website/src/pages/index.jsx b/website/src/pages/index.jsx index feea2b292..fcbf951fd 100644 --- a/website/src/pages/index.jsx +++ b/website/src/pages/index.jsx @@ -3,7 +3,7 @@ import clsx from "clsx"; import Layout from "@theme/Layout"; import Link from "@docusaurus/Link"; import Head from "@docusaurus/Head"; -import BrowserOnly from "@docusaurus/core/lib/client/exports/BrowserOnly"; +import BrowserOnly from "@docusaurus/BrowserOnly"; import useDocusaurusContext from "@docusaurus/useDocusaurusContext"; import useBaseUrl from "@docusaurus/useBaseUrl"; import styles from "./styles.module.css"; diff --git a/website/src/pages/terraform-provider.jsx b/website/src/pages/terraform-provider.jsx index 47bfa52f1..e930a8a56 100644 --- a/website/src/pages/terraform-provider.jsx +++ b/website/src/pages/terraform-provider.jsx @@ -1,7 +1,7 @@ import React from "react"; import Layout from "@theme/Layout"; import Head from "@docusaurus/Head"; -import BrowserOnly from "@docusaurus/core/lib/client/exports/BrowserOnly"; +import BrowserOnly from "@docusaurus/BrowserOnly"; function TerraformProviderPage() { return ( From 256187ebc684e97a0c0e7b7c9ff6740126f134ed Mon Sep 17 00:00:00 2001 From: Rukk385 <39340512+Rukk385@users.noreply.github.com> Date: Wed, 20 Dec 2023 15:33:58 +0100 Subject: [PATCH 06/37] website/docs: add expression example for geoip (#7739) * Update expression.mdx Added example for GeoIP Signed-off-by: Rukk385 <39340512+Rukk385@users.noreply.github.com> * Update website/docs/policies/expression.mdx Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Rukk385 <39340512+Rukk385@users.noreply.github.com> --------- Signed-off-by: Rukk385 <39340512+Rukk385@users.noreply.github.com> Co-authored-by: Marc 'risson' Schmitt --- website/docs/policies/expression.mdx | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/website/docs/policies/expression.mdx b/website/docs/policies/expression.mdx index 2200cc96f..aaf850608 100644 --- a/website/docs/policies/expression.mdx +++ b/website/docs/policies/expression.mdx @@ -54,6 +54,11 @@ import Objects from "../expressions/_objects.md"; - `request.context`: A dictionary with dynamic data. This depends on the origin of the execution. - `geoip`: GeoIP object, see [GeoIP](https://geoip2.readthedocs.io/en/latest/#geoip2.models.City) + + ```python + return context["geoip"].country.iso_code == "US" + ``` + - `ak_is_sso_flow`: Boolean which is true if request was initiated by authenticating through an external provider. - `ak_client_ip`: Client's IP Address or 255.255.255.255 if no IP Address could be extracted. Can be [compared](#comparing-ip-addresses), for example From 4ff3915d5959aba3b99ad6418ebaa60d825d8028 Mon Sep 17 00:00:00 2001 From: "transifex-integration[bot]" <43880903+transifex-integration[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 17:20:56 +0000 Subject: [PATCH 07/37] translate: Updates for file web/xliff/en.xlf in fr (#7951) Translate web/xliff/en.xlf in fr 100% translated source file: 'web/xliff/en.xlf' on 'fr'. Co-authored-by: transifex-integration[bot] <43880903+transifex-integration[bot]@users.noreply.github.com> --- web/xliff/fr.xlf | 67 ++++++++++++++++++++++++------------------------ 1 file changed, 34 insertions(+), 33 deletions(-) diff --git a/web/xliff/fr.xlf b/web/xliff/fr.xlf index b6451ddd5..6a1a04d0e 100644 --- a/web/xliff/fr.xlf +++ b/web/xliff/fr.xlf @@ -1,4 +1,4 @@ - + @@ -613,9 +613,9 @@ Il y a jour(s) - The URL "" was not found. - L'URL " - " n'a pas été trouvée. + The URL "" was not found. + L'URL " + " n'a pas été trouvée. @@ -1057,8 +1057,8 @@ Il y a jour(s) - To allow any redirect URI, set this value to ".*". Be aware of the possible security implications this can have. - Pour permettre n'importe quelle URI de redirection, définissez cette valeur sur ".*". Soyez conscient des possibles implications de sécurité que cela peut avoir. + To allow any redirect URI, set this value to ".*". Be aware of the possible security implications this can have. + Pour permettre n'importe quelle URI de redirection, définissez cette valeur sur ".*". Soyez conscient des possibles implications de sécurité que cela peut avoir. @@ -1630,7 +1630,7 @@ Il y a jour(s) Token to authenticate with. Currently only bearer authentication is supported. - Jeton d'authentification à utiliser. Actuellement, seule l'authentification "bearer authentication" est prise en charge. + Jeton d'authentification à utiliser. Actuellement, seule l'authentification "bearer authentication" est prise en charge. @@ -1798,8 +1798,8 @@ Il y a jour(s) - Either input a full URL, a relative path, or use 'fa://fa-test' to use the Font Awesome icon "fa-test". - Entrez une URL complète, un chemin relatif ou utilisez 'fa://fa-test' pour utiliser l'icône Font Awesome "fa-test". + Either input a full URL, a relative path, or use 'fa://fa-test' to use the Font Awesome icon "fa-test". + Entrez une URL complète, un chemin relatif ou utilisez 'fa://fa-test' pour utiliser l'icône Font Awesome "fa-test". @@ -2897,7 +2897,7 @@ doesn't pass when either or both of the selected options are equal or above the To use SSL instead, use 'ldaps://' and disable this option. - Pour utiliser SSL à la base, utilisez "ldaps://" et désactviez cette option. + Pour utiliser SSL à la base, utilisez "ldaps://" et désactviez cette option. @@ -2986,8 +2986,8 @@ doesn't pass when either or both of the selected options are equal or above the - Field which contains members of a group. Note that if using the "memberUid" field, the value is assumed to contain a relative distinguished name. e.g. 'memberUid=some-user' instead of 'memberUid=cn=some-user,ou=groups,...' - Champ qui contient les membres d'un groupe. Si vous utilisez le champ "memberUid", la valeur est censée contenir un nom distinctif relatif, par exemple 'memberUid=un-utilisateur' au lieu de 'memberUid=cn=un-utilisateur,ou=groups,...' + Field which contains members of a group. Note that if using the "memberUid" field, the value is assumed to contain a relative distinguished name. e.g. 'memberUid=some-user' instead of 'memberUid=cn=some-user,ou=groups,...' + Champ qui contient les membres d'un groupe. Si vous utilisez le champ "memberUid", la valeur est censée contenir un nom distinctif relatif, par exemple 'memberUid=un-utilisateur' au lieu de 'memberUid=cn=un-utilisateur,ou=groups,...' @@ -3282,7 +3282,7 @@ doesn't pass when either or both of the selected options are equal or above the Time offset when temporary users should be deleted. This only applies if your IDP uses the NameID Format 'transient', and the user doesn't log out manually. - Moment où les utilisateurs temporaires doivent être supprimés. Cela ne s'applique que si votre IDP utilise le format NameID "transient" et que l'utilisateur ne se déconnecte pas manuellement. + Moment où les utilisateurs temporaires doivent être supprimés. Cela ne s'applique que si votre IDP utilise le format NameID "transient" et que l'utilisateur ne se déconnecte pas manuellement. @@ -3450,7 +3450,7 @@ doesn't pass when either or both of the selected options are equal or above the Optionally set the 'FriendlyName' value of the Assertion attribute. - Indiquer la valeur "FriendlyName" de l'attribut d'assertion (optionnel) + Indiquer la valeur "FriendlyName" de l'attribut d'assertion (optionnel) @@ -3779,8 +3779,8 @@ doesn't pass when either or both of the selected options are equal or above the - When using an external logging solution for archiving, this can be set to "minutes=5". - En cas d'utilisation d'une solution de journalisation externe pour l'archivage, cette valeur peut être fixée à "minutes=5". + When using an external logging solution for archiving, this can be set to "minutes=5". + En cas d'utilisation d'une solution de journalisation externe pour l'archivage, cette valeur peut être fixée à "minutes=5". @@ -3789,8 +3789,8 @@ doesn't pass when either or both of the selected options are equal or above the - Format: "weeks=3;days=2;hours=3,seconds=2". - Format : "weeks=3;days=2;hours=3,seconds=2". + Format: "weeks=3;days=2;hours=3,seconds=2". + Format : "weeks=3;days=2;hours=3,seconds=2". @@ -3986,10 +3986,10 @@ doesn't pass when either or both of the selected options are equal or above the - Are you sure you want to update ""? + Are you sure you want to update ""? Êtes-vous sûr de vouloir mettre à jour - " - " ? + " + " ? @@ -5075,8 +5075,8 @@ doesn't pass when either or both of the selected options are equal or above the - A "roaming" authenticator, like a YubiKey - Un authentificateur "itinérant", comme une YubiKey + A "roaming" authenticator, like a YubiKey + Un authentificateur "itinérant", comme une YubiKey @@ -5401,7 +5401,7 @@ doesn't pass when either or both of the selected options are equal or above the Show arbitrary input fields to the user, for example during enrollment. Data is saved in the flow context under the 'prompt_data' variable. - Afficher des champs de saisie arbitraires à l'utilisateur, par exemple pendant l'inscription. Les données sont enregistrées dans le contexte du flux sous la variable "prompt_data". + Afficher des champs de saisie arbitraires à l'utilisateur, par exemple pendant l'inscription. Les données sont enregistrées dans le contexte du flux sous la variable "prompt_data". @@ -5410,10 +5410,10 @@ doesn't pass when either or both of the selected options are equal or above the - ("", of type ) + ("", of type ) - (" - ", de type + (" + ", de type ) @@ -5462,8 +5462,8 @@ doesn't pass when either or both of the selected options are equal or above the - If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here. - Si défini à une durée supérieure à 0, l'utilisateur aura la possibilité de choisir de "rester connecté", ce qui prolongera sa session jusqu'à la durée spécifiée ici. + If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here. + Si défini à une durée supérieure à 0, l'utilisateur aura la possibilité de choisir de "rester connecté", ce qui prolongera sa session jusqu'à la durée spécifiée ici. @@ -6247,7 +6247,7 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti Can be in the format of 'unix://' when connecting to a local docker daemon, using 'ssh://' to connect via SSH, or 'https://:2376' when connecting to a remote system. - Peut être au format "unix://" pour une connexion à un service docker local, "ssh://" pour une connexion via SSH, ou "https://:2376" pour une connexion à un système distant. + Peut être au format "unix://" pour une connexion à un service docker local, "ssh://" pour une connexion via SSH, ou "https://:2376" pour une connexion à un système distant. @@ -7554,7 +7554,7 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti Use this provider with nginx's auth_request or traefik's forwardAuth. Each application/domain needs its own provider. Additionally, on each domain, /outpost.goauthentik.io must be routed to the outpost (when using a managed outpost, this is done for you). - Utilisez ce fournisseur avec l'option "auth_request" de Nginx ou "forwardAuth" de Traefik. Chaque application/domaine a besoin de son propre fournisseur. De plus, sur chaque domaine, "/outpost.goauthentik.io" doit être routé vers le poste avancé (lorsque vous utilisez un poste avancé géré, cela est fait pour vous). + Utilisez ce fournisseur avec l'option "auth_request" de Nginx ou "forwardAuth" de Traefik. Chaque application/domaine a besoin de son propre fournisseur. De plus, sur chaque domaine, "/outpost.goauthentik.io" doit être routé vers le poste avancé (lorsque vous utilisez un poste avancé géré, cela est fait pour vous). Default relay state @@ -7968,7 +7968,7 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti Utilisateur créé et ajouté au groupe avec succès - This user will be added to the group "". + This user will be added to the group "". Cet utilisateur sera ajouté au groupe &quot;&quot;. @@ -8045,7 +8045,8 @@ Les liaisons avec les groupes/utilisateurs sont vérifiées par rapport à l'uti Require Outpost (flow can only be executed from an outpost). + Forcer l'utilisation d'un avant-poste (le flux ne pourrait être exécuter que depuis un outpost). - + \ No newline at end of file From 50860d7ffe44a29cabe7407c2bf94facd689b5ca Mon Sep 17 00:00:00 2001 From: Jens L Date: Wed, 20 Dec 2023 22:16:50 +0100 Subject: [PATCH 08/37] events: add ASN Database reader (#7793) * events: add ASN Database reader Signed-off-by: Jens Langhammer * add tests Signed-off-by: Jens Langhammer * fix test config generator Signed-off-by: Jens Langhammer * de-duplicate code Signed-off-by: Jens Langhammer * add enrich_context Signed-off-by: Jens Langhammer * rename to context processors? Signed-off-by: Jens Langhammer * fix cache Signed-off-by: Jens Langhammer * use config deprecation system, update docs Signed-off-by: Jens Langhammer * update more docs and tests Signed-off-by: Jens Langhammer * add test asn db Signed-off-by: Jens Langhammer * re-build schema with latest versions Signed-off-by: Jens Langhammer --------- Signed-off-by: Jens Langhammer --- Dockerfile | 2 +- authentik/api/v3/config.py | 8 +- authentik/core/api/authenticated_sessions.py | 13 ++- .../events/context_processors/__init__.py | 0 authentik/events/context_processors/asn.py | 79 ++++++++++++++ authentik/events/context_processors/base.py | 43 ++++++++ authentik/events/context_processors/geoip.py | 84 +++++++++++++++ authentik/events/context_processors/mmdb.py | 54 ++++++++++ authentik/events/geo.py | 100 ------------------ authentik/events/models.py | 14 +-- authentik/events/tests/test_enrich_asn.py | 24 +++++ .../{test_geoip.py => test_enrich_geoip.py} | 4 +- authentik/events/utils.py | 9 +- authentik/lib/config.py | 1 + authentik/lib/default.yml | 5 +- authentik/policies/reputation/api.py | 1 + .../migrations/0006_reputation_ip_asn_data.py | 17 +++ authentik/policies/reputation/models.py | 1 + authentik/policies/reputation/tasks.py | 6 +- authentik/policies/types.py | 12 +-- authentik/root/test_runner.py | 3 +- blueprints/schema.json | 5 + schema.yml | 24 ++++- scripts/generate_config.py | 7 +- tests/GeoLite2-ASN-Test.mmdb | Bin 0 -> 12653 bytes website/docs/core/geoip.mdx | 12 ++- website/docs/installation/configuration.mdx | 8 +- 27 files changed, 393 insertions(+), 143 deletions(-) create mode 100644 authentik/events/context_processors/__init__.py create mode 100644 authentik/events/context_processors/asn.py create mode 100644 authentik/events/context_processors/base.py create mode 100644 authentik/events/context_processors/geoip.py create mode 100644 authentik/events/context_processors/mmdb.py delete mode 100644 authentik/events/geo.py create mode 100644 authentik/events/tests/test_enrich_asn.py rename authentik/events/tests/{test_geoip.py => test_enrich_geoip.py} (83%) create mode 100644 authentik/policies/reputation/migrations/0006_reputation_ip_asn_data.py create mode 100644 tests/GeoLite2-ASN-Test.mmdb diff --git a/Dockerfile b/Dockerfile index 629d3258b..114be6253 100644 --- a/Dockerfile +++ b/Dockerfile @@ -71,7 +71,7 @@ RUN --mount=type=cache,sharing=locked,target=/go/pkg/mod \ # Stage 4: MaxMind GeoIP FROM --platform=${BUILDPLATFORM} ghcr.io/maxmind/geoipupdate:v6.0 as geoip -ENV GEOIPUPDATE_EDITION_IDS="GeoLite2-City" +ENV GEOIPUPDATE_EDITION_IDS="GeoLite2-City GeoLite2-ASN" ENV GEOIPUPDATE_VERBOSE="true" ENV GEOIPUPDATE_ACCOUNT_ID_FILE="/run/secrets/GEOIPUPDATE_ACCOUNT_ID" ENV GEOIPUPDATE_LICENSE_KEY_FILE="/run/secrets/GEOIPUPDATE_LICENSE_KEY" diff --git a/authentik/api/v3/config.py b/authentik/api/v3/config.py index 0defd1a5b..93b783629 100644 --- a/authentik/api/v3/config.py +++ b/authentik/api/v3/config.py @@ -19,7 +19,7 @@ from rest_framework.response import Response from rest_framework.views import APIView from authentik.core.api.utils import PassiveSerializer -from authentik.events.geo import GEOIP_READER +from authentik.events.context_processors.base import get_context_processors from authentik.lib.config import CONFIG capabilities = Signal() @@ -30,6 +30,7 @@ class Capabilities(models.TextChoices): CAN_SAVE_MEDIA = "can_save_media" CAN_GEO_IP = "can_geo_ip" + CAN_ASN = "can_asn" CAN_IMPERSONATE = "can_impersonate" CAN_DEBUG = "can_debug" IS_ENTERPRISE = "is_enterprise" @@ -68,8 +69,9 @@ class ConfigView(APIView): deb_test = settings.DEBUG or settings.TEST if Path(settings.MEDIA_ROOT).is_mount() or deb_test: caps.append(Capabilities.CAN_SAVE_MEDIA) - if GEOIP_READER.enabled: - caps.append(Capabilities.CAN_GEO_IP) + for processor in get_context_processors(): + if cap := processor.capability(): + caps.append(cap) if CONFIG.get_bool("impersonation"): caps.append(Capabilities.CAN_IMPERSONATE) if settings.DEBUG: # pragma: no cover diff --git a/authentik/core/api/authenticated_sessions.py b/authentik/core/api/authenticated_sessions.py index 03c1aeaf3..2d77937be 100644 --- a/authentik/core/api/authenticated_sessions.py +++ b/authentik/core/api/authenticated_sessions.py @@ -14,7 +14,8 @@ from ua_parser import user_agent_parser from authentik.api.authorization import OwnerSuperuserPermissions from authentik.core.api.used_by import UsedByMixin from authentik.core.models import AuthenticatedSession -from authentik.events.geo import GEOIP_READER, GeoIPDict +from authentik.events.context_processors.asn import ASN_CONTEXT_PROCESSOR, ASNDict +from authentik.events.context_processors.geoip import GEOIP_CONTEXT_PROCESSOR, GeoIPDict class UserAgentDeviceDict(TypedDict): @@ -59,6 +60,7 @@ class AuthenticatedSessionSerializer(ModelSerializer): current = SerializerMethodField() user_agent = SerializerMethodField() geo_ip = SerializerMethodField() + asn = SerializerMethodField() def get_current(self, instance: AuthenticatedSession) -> bool: """Check if session is currently active session""" @@ -70,8 +72,12 @@ class AuthenticatedSessionSerializer(ModelSerializer): return user_agent_parser.Parse(instance.last_user_agent) def get_geo_ip(self, instance: AuthenticatedSession) -> Optional[GeoIPDict]: # pragma: no cover - """Get parsed user agent""" - return GEOIP_READER.city_dict(instance.last_ip) + """Get GeoIP Data""" + return GEOIP_CONTEXT_PROCESSOR.city_dict(instance.last_ip) + + def get_asn(self, instance: AuthenticatedSession) -> Optional[ASNDict]: # pragma: no cover + """Get ASN Data""" + return ASN_CONTEXT_PROCESSOR.asn_dict(instance.last_ip) class Meta: model = AuthenticatedSession @@ -80,6 +86,7 @@ class AuthenticatedSessionSerializer(ModelSerializer): "current", "user_agent", "geo_ip", + "asn", "user", "last_ip", "last_user_agent", diff --git a/authentik/events/context_processors/__init__.py b/authentik/events/context_processors/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/authentik/events/context_processors/asn.py b/authentik/events/context_processors/asn.py new file mode 100644 index 000000000..afefbcbc6 --- /dev/null +++ b/authentik/events/context_processors/asn.py @@ -0,0 +1,79 @@ +"""ASN Enricher""" +from typing import TYPE_CHECKING, Optional, TypedDict + +from django.http import HttpRequest +from geoip2.errors import GeoIP2Error +from geoip2.models import ASN +from sentry_sdk import Hub + +from authentik.events.context_processors.mmdb import MMDBContextProcessor +from authentik.lib.config import CONFIG +from authentik.root.middleware import ClientIPMiddleware + +if TYPE_CHECKING: + from authentik.api.v3.config import Capabilities + from authentik.events.models import Event + + +class ASNDict(TypedDict): + """ASN Details""" + + asn: int + as_org: str | None + network: str | None + + +class ASNContextProcessor(MMDBContextProcessor): + """ASN Database reader wrapper""" + + def capability(self) -> Optional["Capabilities"]: + from authentik.api.v3.config import Capabilities + + return Capabilities.CAN_ASN + + def path(self) -> str | None: + return CONFIG.get("events.context_processors.asn") + + def enrich_event(self, event: "Event"): + asn = self.asn_dict(event.client_ip) + if not asn: + return + event.context["asn"] = asn + + def enrich_context(self, request: HttpRequest) -> dict: + return { + "asn": self.asn_dict(ClientIPMiddleware.get_client_ip(request)), + } + + def asn(self, ip_address: str) -> Optional[ASN]: + """Wrapper for Reader.asn""" + with Hub.current.start_span( + op="authentik.events.asn.asn", + description=ip_address, + ): + if not self.enabled: + return None + self.check_expired() + try: + return self.reader.asn(ip_address) + except (GeoIP2Error, ValueError): + return None + + def asn_to_dict(self, asn: ASN) -> ASNDict: + """Convert ASN to dict""" + asn_dict: ASNDict = { + "asn": asn.autonomous_system_number, + "as_org": asn.autonomous_system_organization, + "network": str(asn.network) if asn.network else None, + } + return asn_dict + + def asn_dict(self, ip_address: str) -> Optional[ASNDict]: + """Wrapper for self.asn that returns a dict""" + asn = self.asn(ip_address) + if not asn: + return None + return self.asn_to_dict(asn) + + +ASN_CONTEXT_PROCESSOR = ASNContextProcessor() diff --git a/authentik/events/context_processors/base.py b/authentik/events/context_processors/base.py new file mode 100644 index 000000000..96a46a65a --- /dev/null +++ b/authentik/events/context_processors/base.py @@ -0,0 +1,43 @@ +"""Base event enricher""" +from functools import cache +from typing import TYPE_CHECKING, Optional + +from django.http import HttpRequest + +if TYPE_CHECKING: + from authentik.api.v3.config import Capabilities + from authentik.events.models import Event + + +class EventContextProcessor: + """Base event enricher""" + + def capability(self) -> Optional["Capabilities"]: + """Return the capability this context processor provides""" + return None + + def configured(self) -> bool: + """Return true if this context processor is configured""" + return False + + def enrich_event(self, event: "Event"): + """Modify event""" + raise NotImplementedError + + def enrich_context(self, request: HttpRequest) -> dict: + """Modify context""" + raise NotImplementedError + + +@cache +def get_context_processors() -> list[EventContextProcessor]: + """Get a list of all configured context processors""" + from authentik.events.context_processors.asn import ASN_CONTEXT_PROCESSOR + from authentik.events.context_processors.geoip import GEOIP_CONTEXT_PROCESSOR + + processors_types = [ASN_CONTEXT_PROCESSOR, GEOIP_CONTEXT_PROCESSOR] + processors = [] + for _type in processors_types: + if _type.configured(): + processors.append(_type) + return processors diff --git a/authentik/events/context_processors/geoip.py b/authentik/events/context_processors/geoip.py new file mode 100644 index 000000000..ca00a4c54 --- /dev/null +++ b/authentik/events/context_processors/geoip.py @@ -0,0 +1,84 @@ +"""events GeoIP Reader""" +from typing import TYPE_CHECKING, Optional, TypedDict + +from django.http import HttpRequest +from geoip2.errors import GeoIP2Error +from geoip2.models import City +from sentry_sdk.hub import Hub + +from authentik.events.context_processors.mmdb import MMDBContextProcessor +from authentik.lib.config import CONFIG +from authentik.root.middleware import ClientIPMiddleware + +if TYPE_CHECKING: + from authentik.api.v3.config import Capabilities + from authentik.events.models import Event + + +class GeoIPDict(TypedDict): + """GeoIP Details""" + + continent: str + country: str + lat: float + long: float + city: str + + +class GeoIPContextProcessor(MMDBContextProcessor): + """Slim wrapper around GeoIP API""" + + def capability(self) -> Optional["Capabilities"]: + from authentik.api.v3.config import Capabilities + + return Capabilities.CAN_GEO_IP + + def path(self) -> str | None: + return CONFIG.get("events.context_processors.geoip") + + def enrich_event(self, event: "Event"): + city = self.city_dict(event.client_ip) + if not city: + return + event.context["geo"] = city + + def enrich_context(self, request: HttpRequest) -> dict: + # Different key `geoip` vs `geo` for legacy reasons + return {"geoip": self.city(ClientIPMiddleware.get_client_ip(request))} + + def city(self, ip_address: str) -> Optional[City]: + """Wrapper for Reader.city""" + with Hub.current.start_span( + op="authentik.events.geo.city", + description=ip_address, + ): + if not self.enabled: + return None + self.check_expired() + try: + return self.reader.city(ip_address) + except (GeoIP2Error, ValueError): + return None + + def city_to_dict(self, city: City) -> GeoIPDict: + """Convert City to dict""" + city_dict: GeoIPDict = { + "continent": city.continent.code, + "country": city.country.iso_code, + "lat": city.location.latitude, + "long": city.location.longitude, + "city": "", + } + if city.city.name: + city_dict["city"] = city.city.name + return city_dict + + def city_dict(self, ip_address: str) -> Optional[GeoIPDict]: + """Wrapper for self.city that returns a dict""" + city = self.city(ip_address) + if not city: + return None + return self.city_to_dict(city) + + +GEOIP_CONTEXT_PROCESSOR = GeoIPContextProcessor() diff --git a/authentik/events/context_processors/mmdb.py b/authentik/events/context_processors/mmdb.py new file mode 100644 index 000000000..09c17f91f --- /dev/null +++ b/authentik/events/context_processors/mmdb.py @@ -0,0 +1,54 @@ +"""Common logic for reading MMDB files""" +from pathlib import Path +from typing import Optional + +from geoip2.database import Reader +from structlog.stdlib import get_logger + +from authentik.events.context_processors.base import EventContextProcessor + + +class MMDBContextProcessor(EventContextProcessor): + """Common logic for reading MaxMind DB files, including re-loading if the file has changed""" + + def __init__(self): + self.reader: Optional[Reader] = None + self._last_mtime: float = 0.0 + self.logger = get_logger() + self.open() + + def path(self) -> str | None: + """Get the path to the MMDB file to load""" + raise NotImplementedError + + def open(self): + """Get GeoIP Reader, if configured, otherwise none""" + path = self.path() + if path == "" or not path: + return + try: + self.reader = Reader(path) + self._last_mtime = Path(path).stat().st_mtime + self.logger.info("Loaded MMDB database", last_write=self._last_mtime, file=path) + except OSError as exc: + self.logger.warning("Failed to load MMDB database", exc=exc) + + def check_expired(self): + """Check if the modification date of the MMDB database has + changed, and reload it if so""" + path = self.path() + if path == "" or not path: + return + try: + mtime = Path(path).stat().st_mtime + diff = self._last_mtime < mtime + if diff > 0: + self.logger.info("Found new MMDB Database, reopening", diff=diff, path=path) + self.open() + except OSError as exc: + self.logger.warning("Failed to check MMDB age", exc=exc) + + @property + def enabled(self) -> bool: + """Check if MMDB is enabled""" + return bool(self.reader) diff --git a/authentik/events/geo.py b/authentik/events/geo.py deleted file mode 100644 index 95a28539c..000000000 --- a/authentik/events/geo.py +++ /dev/null @@ -1,100 +0,0 @@ -"""events GeoIP Reader""" -from os import stat -from typing import Optional, TypedDict - -from geoip2.database import Reader -from geoip2.errors import GeoIP2Error -from geoip2.models import City -from sentry_sdk.hub import Hub -from structlog.stdlib import get_logger - -from authentik.lib.config import CONFIG - -LOGGER = get_logger() - - -class GeoIPDict(TypedDict): - """GeoIP Details""" - - continent: str - country: str - lat: float - long: float - city: str - - -class GeoIPReader: - """Slim wrapper around GeoIP API""" - - def __init__(self): - self.__reader: Optional[Reader] = None - self.__last_mtime: float = 0.0 - self.__open() - - def __open(self): - """Get GeoIP Reader, if configured, otherwise none""" - path = CONFIG.get("geoip") - if path == "" or not path: - return - try: - self.__reader = Reader(path) - self.__last_mtime = stat(path).st_mtime - LOGGER.info("Loaded GeoIP database", last_write=self.__last_mtime) - except OSError as exc: - LOGGER.warning("Failed to load GeoIP database", exc=exc) - - def __check_expired(self): - """Check if the modification date of the GeoIP database has - changed, and reload it if so""" - path = CONFIG.get("geoip") - try: - mtime = stat(path).st_mtime - diff = self.__last_mtime < mtime - if diff > 0: - LOGGER.info("Found new GeoIP Database, reopening", diff=diff) - self.__open() - except OSError as exc: - LOGGER.warning("Failed to check GeoIP age", exc=exc) - return - - @property - def enabled(self) -> bool: - """Check if GeoIP is enabled""" - return bool(self.__reader) - - def city(self, ip_address: str) -> Optional[City]: - """Wrapper for Reader.city""" - with Hub.current.start_span( - op="authentik.events.geo.city", - description=ip_address, - ): - if not self.enabled: - return None - self.__check_expired() - try: - return self.__reader.city(ip_address) - except (GeoIP2Error, ValueError): - return None - - def city_to_dict(self, city: City) -> GeoIPDict: - """Convert City to dict""" - city_dict: GeoIPDict = { - "continent": city.continent.code, - "country": city.country.iso_code, - "lat": city.location.latitude, - "long": city.location.longitude, - "city": "", - } - if city.city.name: - city_dict["city"] = city.city.name - return city_dict - - def city_dict(self, ip_address: str) -> Optional[GeoIPDict]: - """Wrapper for self.city that returns a dict""" - city = self.city(ip_address) - if not city: - return None - return self.city_to_dict(city) - - -GEOIP_READER = GeoIPReader() diff --git a/authentik/events/models.py b/authentik/events/models.py index 03e9a939c..965e38cc2 100644 --- a/authentik/events/models.py +++ b/authentik/events/models.py @@ -26,7 +26,7 @@ from authentik.core.middleware import ( SESSION_KEY_IMPERSONATE_USER, ) from authentik.core.models import ExpiringModel, Group, PropertyMapping, User -from authentik.events.geo import GEOIP_READER +from authentik.events.context_processors.base import get_context_processors from authentik.events.utils import ( cleanse_dict, get_user, @@ -246,21 +246,15 @@ class Event(SerializerModel, ExpiringModel): self.user["on_behalf_of"] = get_user(request.session[SESSION_KEY_IMPERSONATE_USER]) # User 255.255.255.255 as fallback if IP cannot be determined self.client_ip = ClientIPMiddleware.get_client_ip(request) - # Apply GeoIP Data, when enabled - self.with_geoip() + # Enrich event data + for processor in get_context_processors(): + processor.enrich_event(self) # If there's no app set, we get it from the requests too if not self.app: self.app = Event._get_app_from_request(request) self.save() return self - def with_geoip(self): # pragma: no cover - """Apply GeoIP Data, when enabled""" - city = GEOIP_READER.city_dict(self.client_ip) - if not city: - return - self.context["geo"] = city - def save(self, *args, **kwargs): if self._state.adding: LOGGER.info( diff --git a/authentik/events/tests/test_enrich_asn.py b/authentik/events/tests/test_enrich_asn.py new file mode 100644 index 000000000..2844c4591 --- /dev/null +++ b/authentik/events/tests/test_enrich_asn.py @@ -0,0 +1,24 @@ +"""Test ASN Wrapper""" +from django.test import TestCase + +from authentik.events.context_processors.asn import ASNContextProcessor + + +class TestASN(TestCase): + """Test ASN Wrapper""" + + def setUp(self) -> None: + self.reader = ASNContextProcessor() + + def test_simple(self): + """Test simple asn wrapper""" + # IPs from + # https://github.com/maxmind/MaxMind-DB/blob/main/source-data/GeoLite2-ASN-Test.json + self.assertEqual( + self.reader.asn_dict("1.0.0.1"), + { + "asn": 15169, + "as_org": "Google Inc.", + "network": "1.0.0.0/24", + }, + ) diff --git a/authentik/events/tests/test_geoip.py b/authentik/events/tests/test_enrich_geoip.py similarity index 83% rename from authentik/events/tests/test_geoip.py rename to authentik/events/tests/test_enrich_geoip.py index 3120dacae..5317901a4 100644 --- a/authentik/events/tests/test_geoip.py +++ b/authentik/events/tests/test_enrich_geoip.py @@ -1,14 +1,14 @@ """Test GeoIP Wrapper""" from django.test import TestCase -from authentik.events.geo import GeoIPReader +from authentik.events.context_processors.geoip import GeoIPContextProcessor class TestGeoIP(TestCase): """Test GeoIP Wrapper""" def setUp(self) -> None: - self.reader = GeoIPReader() + self.reader = GeoIPContextProcessor() def test_simple(self): """Test simple city wrapper""" diff --git a/authentik/events/utils.py b/authentik/events/utils.py index a7c3bdf3e..cf1b1b78b 100644 --- a/authentik/events/utils.py +++ b/authentik/events/utils.py @@ -17,12 +17,13 @@ from django.db.models.base import Model from django.http.request import HttpRequest from django.utils import timezone from django.views.debug import SafeExceptionReporterFilter -from geoip2.models import City +from geoip2.models import ASN, City from guardian.utils import get_anonymous_user from authentik.blueprints.v1.common import YAMLTag from authentik.core.models import User -from authentik.events.geo import GEOIP_READER +from authentik.events.context_processors.asn import ASN_CONTEXT_PROCESSOR +from authentik.events.context_processors.geoip import GEOIP_CONTEXT_PROCESSOR from authentik.policies.types import PolicyRequest # Special keys which are *not* cleaned, even when the default filter @@ -123,7 +124,9 @@ def sanitize_item(value: Any) -> Any: if isinstance(value, (HttpRequest, WSGIRequest)): return ... if isinstance(value, City): - return GEOIP_READER.city_to_dict(value) + return GEOIP_CONTEXT_PROCESSOR.city_to_dict(value) + if isinstance(value, ASN): + return ASN_CONTEXT_PROCESSOR.asn_to_dict(value) if isinstance(value, Path): return str(value) if isinstance(value, Exception): diff --git a/authentik/lib/config.py b/authentik/lib/config.py index dd5500f8e..3b977e8a2 100644 --- a/authentik/lib/config.py +++ b/authentik/lib/config.py @@ -35,6 +35,7 @@ REDIS_ENV_KEYS = [ ] DEPRECATIONS = { + "geoip": "events.context_processors.geoip", "redis.broker_url": "broker.url", "redis.broker_transport_options": "broker.transport_options", "redis.cache_timeout": "cache.timeout", diff --git a/authentik/lib/default.yml b/authentik/lib/default.yml index 7573888ae..afb775c44 100644 --- a/authentik/lib/default.yml +++ b/authentik/lib/default.yml @@ -108,7 +108,10 @@ cookie_domain: null disable_update_check: false disable_startup_analytics: false avatars: env://AUTHENTIK_AUTHENTIK__AVATARS?gravatar,initials -geoip: "/geoip/GeoLite2-City.mmdb" +events: + context_processors: + geoip: "/geoip/GeoLite2-City.mmdb" + asn: "/geoip/GeoLite2-ASN.mmdb" footer_links: [] diff --git a/authentik/policies/reputation/api.py b/authentik/policies/reputation/api.py index 9e9d95e13..885f6c162 100644 --- a/authentik/policies/reputation/api.py +++ b/authentik/policies/reputation/api.py @@ -47,6 +47,7 @@ class ReputationSerializer(ModelSerializer): "identifier", "ip", "ip_geo_data", + "ip_asn_data", "score", "updated", ] diff --git a/authentik/policies/reputation/migrations/0006_reputation_ip_asn_data.py b/authentik/policies/reputation/migrations/0006_reputation_ip_asn_data.py new file mode 100644 index 000000000..05557392e --- /dev/null +++ b/authentik/policies/reputation/migrations/0006_reputation_ip_asn_data.py @@ -0,0 +1,17 @@ +# Generated by Django 4.2.7 on 2023-12-05 22:20 + +from django.db import migrations, models + + +class Migration(migrations.Migration): + dependencies = [ + ("authentik_policies_reputation", "0005_reputation_expires_reputation_expiring"), + ] + + operations = [ + migrations.AddField( + model_name="reputation", + name="ip_asn_data", + field=models.JSONField(default=dict), + ), + ] diff --git a/authentik/policies/reputation/models.py b/authentik/policies/reputation/models.py index 7fccfa11a..ea8ac2bd6 100644 --- a/authentik/policies/reputation/models.py +++ b/authentik/policies/reputation/models.py @@ -76,6 +76,7 @@ class Reputation(ExpiringModel, SerializerModel): identifier = models.TextField() ip = models.GenericIPAddressField() ip_geo_data = models.JSONField(default=dict) + ip_asn_data = models.JSONField(default=dict) score = models.BigIntegerField(default=0) expires = models.DateTimeField(default=reputation_expiry) diff --git a/authentik/policies/reputation/tasks.py b/authentik/policies/reputation/tasks.py index 7fd7b775f..ac65d1748 100644 --- a/authentik/policies/reputation/tasks.py +++ b/authentik/policies/reputation/tasks.py @@ -2,7 +2,8 @@ from django.core.cache import cache from structlog.stdlib import get_logger -from authentik.events.geo import GEOIP_READER +from authentik.events.context_processors.asn import ASN_CONTEXT_PROCESSOR +from authentik.events.context_processors.geoip import GEOIP_CONTEXT_PROCESSOR from authentik.events.monitored_tasks import ( MonitoredTask, TaskResult, @@ -26,7 +27,8 @@ def save_reputation(self: MonitoredTask): ip=score["ip"], identifier=score["identifier"], ) - rep.ip_geo_data = GEOIP_READER.city_dict(score["ip"]) or {} + rep.ip_geo_data = GEOIP_CONTEXT_PROCESSOR.city_dict(score["ip"]) or {} + rep.ip_asn_data = ASN_CONTEXT_PROCESSOR.asn_dict(score["ip"]) or {} rep.score = score["score"] objects_to_update.append(rep) Reputation.objects.bulk_update(objects_to_update, ["score", "ip_geo_data"]) diff --git a/authentik/policies/types.py b/authentik/policies/types.py index 5e59dbbf0..c9e2e8d86 100644 --- a/authentik/policies/types.py +++ b/authentik/policies/types.py @@ -8,7 +8,7 @@ from django.db.models import Model from django.http import HttpRequest from structlog.stdlib import get_logger -from authentik.events.geo import GEOIP_READER +from authentik.events.context_processors.base import get_context_processors if TYPE_CHECKING: from authentik.core.models import User @@ -37,15 +37,9 @@ class PolicyRequest: def set_http_request(self, request: HttpRequest): # pragma: no cover """Load data from HTTP request, including geoip when enabled""" - from authentik.root.middleware import ClientIPMiddleware - self.http_request = request - if not GEOIP_READER.enabled: - return - client_ip = ClientIPMiddleware.get_client_ip(request) - if not client_ip: - return - self.context["geoip"] = GEOIP_READER.city(client_ip) + for processor in get_context_processors(): + self.context.update(processor.enrich_context(request)) @property def should_cache(self) -> bool: diff --git a/authentik/root/test_runner.py b/authentik/root/test_runner.py index b2bf7a3d7..bc3b3b968 100644 --- a/authentik/root/test_runner.py +++ b/authentik/root/test_runner.py @@ -32,7 +32,8 @@ class PytestTestRunner(DiscoverRunner): # pragma: no cover settings.TEST = True settings.CELERY["task_always_eager"] = True CONFIG.set("avatars", "none") - CONFIG.set("geoip", "tests/GeoLite2-City-Test.mmdb") + CONFIG.set("events.context_processors.geoip", "tests/GeoLite2-City-Test.mmdb") + CONFIG.set("events.context_processors.asn", "tests/GeoLite2-ASN-Test.mmdb") CONFIG.set("blueprints_dir", "./blueprints") CONFIG.set( "outposts.container_image_base", diff --git a/blueprints/schema.json b/blueprints/schema.json index bf66c94ed..eaaed0a8d 100644 --- a/blueprints/schema.json +++ b/blueprints/schema.json @@ -3756,6 +3756,11 @@ "additionalProperties": true, "title": "Ip geo data" }, + "ip_asn_data": { + "type": "object", + "additionalProperties": true, + "title": "Ip asn data" + }, "score": { "type": "integer", "minimum": -9223372036854775808, diff --git a/schema.yml b/schema.yml index da1a90a18..fee6b8d3d 100644 --- a/schema.yml +++ b/schema.yml @@ -28280,7 +28280,7 @@ components: readOnly: true geo_ip: type: object - description: Get parsed user agent + description: Get GeoIP Data properties: continent: type: string @@ -28302,6 +28302,24 @@ components: - long nullable: true readOnly: true + asn: + type: object + description: Get ASN Data + properties: + asn: + type: integer + as_org: + type: string + nullable: true + network: + type: string + nullable: true + required: + - as_org + - asn + - network + nullable: true + readOnly: true user: type: integer last_ip: @@ -28316,6 +28334,7 @@ components: type: string format: date-time required: + - asn - current - geo_ip - last_ip @@ -29283,6 +29302,7 @@ components: enum: - can_save_media - can_geo_ip + - can_asn - can_impersonate - can_debug - is_enterprise @@ -29290,6 +29310,7 @@ components: description: |- * `can_save_media` - Can Save Media * `can_geo_ip` - Can Geo Ip + * `can_asn` - Can Asn * `can_impersonate` - Can Impersonate * `can_debug` - Can Debug * `is_enterprise` - Is Enterprise @@ -39667,6 +39688,7 @@ components: ip: type: string ip_geo_data: {} + ip_asn_data: {} score: type: integer maximum: 9223372036854775807 diff --git a/scripts/generate_config.py b/scripts/generate_config.py index 187eb3ba5..965e3e15e 100644 --- a/scripts/generate_config.py +++ b/scripts/generate_config.py @@ -17,7 +17,12 @@ with open("local.env.yml", "w", encoding="utf-8") as _config: }, "blueprints_dir": "./blueprints", "cert_discovery_dir": "./certs", - "geoip": "tests/GeoLite2-City-Test.mmdb", + "events": { + "processors": { + "geoip": "tests/GeoLite2-City-Test.mmdb", + "asn": "tests/GeoLite2-ASN-Test.mmdb", + } + }, }, _config, default_flow_style=False, diff --git a/tests/GeoLite2-ASN-Test.mmdb b/tests/GeoLite2-ASN-Test.mmdb new file mode 100644 index 0000000000000000000000000000000000000000..3e5033144f505227ef872af685c3664a6d45d03b GIT binary patch literal 12653 zcmZvh2YeLO_Q%iMnGI`3fH>`d%J z>`LrLAXJC%PV7PKNmLS5L^V-E)DqK)I${P9v)JYsKRKCyt0&4OGPe&bcM*}d0WB8v|TB9WnNwlmm8?OhPalvj<{Y5cx3b> zK;^BJR)}CT1k=3(cwFR8;6A$CMcgd~I_*6o_nJv)Ne_QNln;wMke{wR$bg5WU^P8| zh07`tNb;D-Bfz7^Wzg`o=Q(H(#yuhOq=_5U!3<9$;8l@lfR{y{1zx1*b0W`&Xz8857%6CLw2i`Es!Vw(vO_8^l_HBd0tth=qyhpr`xDOb& ztH>IoEW|6lAs^v1ZY1)th=rwo0-(}A1-29U3>Yc$Il_Mu`GNso5?>jZC-$|-H&lL0 zd>7ij=RAKPekA@){Kuehw#d&&w28GCl+MF|Ui7liM#ia)u3(sj{Z5euQ zCDyo5+FGpfp)`Tv+Yl4Qn#57cLzfD%CS#ebGi!=iQ}Ys(*0y<1RI9Z;vNv+D9f%!? zoy6KX?`iEq<*s7w7Ai6M-4Q-rEcCy^_r%)Mz^uJetSTz2iJH(>YX;K+b!ITU5^IK7 z^`SIVtcJX#cc}?3`-#;IEEKCHoJ6Zwdxg?0&ND`|iG|wK;d79Efmm~ic?M>ldy6$c zl;E;YUeW>kB40bF`>_mvGjz~)s#sl2t?H;&?*$KWzDl#0ugh z#GNA6$(YjK%z&Ne$$>(w)5K!`(~=H91Ijb$$p=u>F4oylUM|)-z`15$wC8yYIN!j` z`T`SYT`1N?q4Hv}F5%-}nSaC<)_z%D8n}C~cI!%HxLK^LfE&cR8eqq>*#GpNT?gg$ zdiQiPoff-mvfn7yO-5O?+`zg8o~y*V6?j;z+o-%fA7|acxI4wVD^%Vs);;vRH&osy zMLO;M!~?{G#6t$Txv(i(tIf~_E5v#faes;R81S`Nj|0z%^#t%Vvp*>o+A+f6tYMb& zj9AYasptg*>v;s=4xwaR*c+{v#2UEIUZLl|!cku3V6TbwItTk9w7p5&TVlP2DTM7h03YK zv~@hUGm_a5o?Eqpp1YdW!p+3t?ZK{eLH|=1h}siaBB~NtAgT(e zqi40K8hX|e(+viFZ(s(SLC<l;#uKkZ%@c#YiTMV4F!Vo-g>dmiq5na`k0{>4YCkDnNtce$)+wqhlzav( z64g!5p3oK-wSOq}ib{l1ALEju0><@+wgW_^s6_wM6U-11){--nGfAOnS zt}rlZ`C$^LL!Cm~sR%zq)M=Fd8G4>B#k^6}nQ%Er)LC>n+n|KU*Nl0tsPo`*e(uAF zR-!)Dg$zLdQ$LHk82CukCBSo{2ALtIOs5h0nn zp16Uyk+_MtnYaZ*-zDl+O6-4%{ZHLN<(&q4^7uah#r~%yb+1vX`$XN(fCq>NiHGuW z>S21W5;af^kI?1O(B-jwh9^ShlcJsqrKd$b!?YM6nwxe*RNGiemp$|Doqkc~2dO{$~#s^(#;; z>NmQu|EWKq`G*eY+cZQ2~MBSvW#h?MLo_8_9rKu;G+ zjlxqIP$K$@wMz|Pu*)FrBsLC^y}j5&IoJk}Tm}pid&4m8Mq&@A%f_K{6MFLVyS=H{ zBSYILvC;oZkSI!QMr>|iCJ5UWVZa!%+5hYZ3SFwjuEAi_=~8P@(j)lMFHLs#Kf9jNOoIK-<_A=}iAwfAyMny%=(37fjlrG~`w=4<&qu|63`&0DvmY1x z2}n;d!;@0-n(-{%l-Qo5u>aZ5iIg^r{k#EQN$FCtU!==R80BS&@EMszuSn^Q#-?}4 zepPG^ZNF}m1D`wWH}UxQ5c@5T@;31f@h$3*`F zN?$QBqx{Ulei8duy8IT}ey8mZvHwfkpLrW5Y5#2`M+l2hgiXMREKY?qwvn7>$aLzbNTNC4n3B)$Uz&s~WDmNH>6Q#)* zdPi}lP?}0iBeo^BBT(gfE;|_LFZ8vv6R|U~3&C1)cB6!2uRV7+$gOBkQ>{)VQAJb} zHAF4rrW19TXOB2DDAf})p`0&H1EoetG44{6I5>DZZ41##>_yBnz*`^V(q;f>ab}A% zhswFcJYsKy!EaJp0MAY)+DDv)Mrp$L6{npp`wDU!Y`FFjmr%1C7*Kzr2ECWlAc#Vx=$QkME8nw4REtK*BTp!73Vr}t`DUf zbS`n&|D2no>}ig23zWBsbE}bZ)4d(ayTrMJE_c%Q8Kt|4dkl&mG#Ii0vAuyw^neVB z8OeEwco<{8BhD&Ht0BF_DLo?2qmZ5#=P`i&&v{&&C+PVk@sz<36s_K~XNYHs=L|}j z-Fbn^7Y&Bsf$M;mF*Luf z4}2re2UMrAl)fUqHW>J-+WD5s?+k{P zQTl=S5m4g%8)^R%=Rd$N;`~J0&jv#$Qu-CPKg1bG^gC_!wEdU(a~n=DLV%No-{>^l<|d zw>1OC6BCGSh>64`iIiiosS>H+D3ggP9PG_-uxS$6HZKkR*i=u1-+xB<_rC}~K}U9? zZD#_1|J&6p1)DFC-KfONb^m=h&&y_lWY8C6)9vYH>5Sjkp3L@j_^H*qRxY&uuQ5n< zd&&56FB1=v4Rt}#o$%fIWM{>PuC>~E%#F6R`H6HU<+-hyWo~1pYYp_H_J`H&a-&U^ zZR6V9n4el4@AT79uBvmRb7%NV5`HFA-s*MsdZ{kAI_T^7lFPK&cB2amo4j<|>+H#< z;gm+QbS9q3W_&kTpJ;@*ubZhU`E6#JHdsp^)eO^4Y#QpT7{0xVE;zs9JH&@rq zYMI^YR`JgY{E-vm(efjt)HEYFUA(c@hq|1)m|dLC`cvap6g}Y z7;@Ca{q8`!4;|-5XPDI_{ft&@_9NmW*tSkDjmdf)sFQU!F?=e^uflVy@#1|6Kjl{D z>(PywdeoySJsYbgs99?tF_S*CF>W>X!#A@op6f=ngq=)f))k|<)rIR{)E%EgN)_*LfL?^k8jn!s; z55RR)Q+56Nj=5UrV%@IE9g{tG4k}`KkaVlE>3Gslr*+x|FY4bbYV_|>@8~h-{e-ho z9V}gc$lPfgu?cb(SNn-XXW+JasZ0`2swdv>)>KvIQ_PL0P>^YT*7O04t#bhLPhjjB zZglK-I`xcWbm|dEJ*x^M$AWC8rvi^OU$?vAj4v#X1)XspM{qihNv9W2`)*g(o#l1K zgACI3_uwqKu?q7P4zS$l%*t2|e%y2_p@*L`2E{Tx<-?~krWGaQQ2Z%HQ1Q7=6On`5%`$l=(y`pEZq87t2U;a-DqP~%I`vHbWL+BtF&@lD;8W-m&JY1r4MOS z&=Ft1mhp%xaMzhCTA>gAYNy4G&Wp{SH66((xox-@n*B_VpTcaq^uri?uN!Tsu0{E@ zl($ySYSS?VM(72^=oCV>q9@? zi5qC|(XYbWiDi>@`nIiH?8Orv)}#-4u3X*OG4t?>UU#FlGh3VMO_h(FiN}Pvlz!mr zod|Q^tsZ+99`^ircX!}cRm?F>A+n*)hHEkI#ZVUL4E6f7Ce6{+H>;OQ#d&(iJqp*+ zZC-o{u9oTXrG8g#_1HpRmpOJXr^?OMZA}G><6VBrWE*z9zKrAD@eGE>?S%_3U%G{8 zHm&-8P6jEr8I8<$S$@uM$ZPYC(iw7x#+@6a5?xC$xZ9uT)LU1y2A)HjgC#C{OfrN2 z7{6oL!2LGv|B2L5H6?CzpBZsffLq_Xc!&JVq0seRF-bd(dk8}pH2X`;b(T#n!@L&- zdY7^G&K_N2xNcBn+PStI&Q2|^R_vr(l?pslv-yJ7&hXW)Zxz9HcyqkJA2*I(eRs<1 z?=d^6C7#u_>cnlG?lyWIx=2^Q(e6g))Hk=)&T6i0bDL&2w$)Fst*vpZTg)up*w2lQ zmoeJ2=wIke4K+3OuK88nGOM*^R%Kg#OS7@Qk2%<}pd6>ct<{fTZ(SeT*xC(l_43og z7QSwss~#!tAh{t9=w8&m{l65Af8 z_f0=0WWs9PIv+hRxyOu8JH4kji)a%e=XL`$*=N6uy!^ksHGS;O!a`_@GuB^f9z_JJ4KIz+0w=O&`zr)Q! z7`Tw~n>_X&q^q4<>tdtx%E8#{Hof!HTX0iVx;3?KZLGDj*<4}6cfzXC%epJ2vg;rx6Z+LP2)g^)s+#4938TXdASId03w`sRkNAcF&@Rb>~t z(W-iuG0BiduCa`-&p4djkr0dm1C0{ zy8Lu!D&DV`x~9rcE}WRN;___9^TnGZ-KTW4JARRewZoylb(*WkoaADDuD{gl>qpP* z&*H47(RTxM@d-2I{kbWvEU3q$@6LMNe%f-}#WRyZm*3tQWRscIk$*I#P_e15_H=x? IzjE~d04QnY!2kdN literal 0 HcmV?d00001 diff --git a/website/docs/core/geoip.mdx b/website/docs/core/geoip.mdx index b3cedbe47..ff73e7a39 100644 --- a/website/docs/core/geoip.mdx +++ b/website/docs/core/geoip.mdx @@ -27,7 +27,8 @@ import TabItem from "@theme/TabItem"; Add the following block to your `.env` file: ```shell -AUTHENTIK_GEOIP=/tmp/non-existent-file +AUTHENTIK_EVENTS__CONTEXT_PROCESSORS__GEOIP=/tmp/non-existent-file +AUTHENTIK_EVENTS__CONTEXT_PROCESSORS__ASN=/tmp/non-existent-file ``` Afterwards, run the upgrade commands from the latest release notes. @@ -38,7 +39,10 @@ Add the following block to your `values.yml` file: ```yaml authentik: - geoip: /tmp/non-existent-file + events: + context_processors: + geoip: "/tmp/non-existent-file" + asn: "/tmp/non-existent-file" ``` Afterwards, run the upgrade commands from the latest release notes. @@ -74,7 +78,7 @@ services: volumes: - "geoip:/usr/share/GeoIP" environment: - GEOIPUPDATE_EDITION_IDS: "GeoLite2-City" + GEOIPUPDATE_EDITION_IDS: "GeoLite2-City GeoLite2-ASN" GEOIPUPDATE_FREQUENCY: "8" GEOIPUPDATE_ACCOUNT_ID: "*your account ID*" GEOIPUPDATE_LICENSE_KEY: "*your license key*" @@ -94,7 +98,7 @@ geoip: enabled: true accountId: "*your account ID*" licenseKey: "*your license key*" - editionIds: "GeoLite2-City" + editionIds: "GeoLite2-City GeoLite2-ASN" image: maxmindinc/geoipupdate:v4.8 updateInterval: 8 ``` diff --git a/website/docs/installation/configuration.mdx b/website/docs/installation/configuration.mdx index 28d8e5f50..6201467f1 100644 --- a/website/docs/installation/configuration.mdx +++ b/website/docs/installation/configuration.mdx @@ -154,9 +154,13 @@ Defaults to `info`. Which domain the session cookie should be set to. By default, the cookie is set to the domain authentik is accessed under. -### `AUTHENTIK_GEOIP` +### `AUTHENTIK_EVENTS__CONTEXT_PROCESSORS__GEOIP` -Path to the GeoIP database. Defaults to `/geoip/GeoLite2-City.mmdb`. If the file is not found, authentik will skip GeoIP support. +Path to the GeoIP City database. Defaults to `/geoip/GeoLite2-City.mmdb`. If the file is not found, authentik will skip GeoIP support. + +### `AUTHENTIK_EVENTS__CONTEXT_PROCESSORS__ASN` + +Path to the GeoIP ASN database. Defaults to `/geoip/GeoLite2-ASN.mmdb`. If the file is not found, authentik will skip GeoIP support. ### `AUTHENTIK_DISABLE_UPDATE_CHECK` From f55bc04d0423ca3e4deea3562b24c2f1dcf2216a Mon Sep 17 00:00:00 2001 From: "authentik-automation[bot]" <135050075+authentik-automation[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 22:21:33 +0100 Subject: [PATCH 09/37] web: bump API Client version (#7953) Signed-off-by: GitHub Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com> --- web/package-lock.json | 8 ++++---- web/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index aa192cfd1..81a041ee8 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -17,7 +17,7 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.3", "@fortawesome/fontawesome-free": "^6.5.1", - "@goauthentik/api": "^2023.10.4-1702989148", + "@goauthentik/api": "^2023.10.4-1703107046", "@lit-labs/context": "^0.4.0", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", @@ -2914,9 +2914,9 @@ } }, "node_modules/@goauthentik/api": { - "version": "2023.10.4-1702989148", - "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.4-1702989148.tgz", - "integrity": "sha512-BiCZgS/sw9arpQjjXboqjUrAOhn/m5vKH4jg9gioSD5xFQLBBOvfwP0eLpmZTL60ohKZ16/XikowvRPx0K154A==" + "version": "2023.10.4-1703107046", + "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.4-1703107046.tgz", + "integrity": "sha512-XRu+VB5DRI65yPesv+8FbJHY3bY7rvJYAlSXk/doTelbmSEy66u+omh6QlAW25fwcKHQz1du40W/dUQTI8zF4w==" }, "node_modules/@hcaptcha/types": { "version": "1.0.3", diff --git a/web/package.json b/web/package.json index ffa7d0970..042fc3616 100644 --- a/web/package.json +++ b/web/package.json @@ -42,7 +42,7 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.3", "@fortawesome/fontawesome-free": "^6.5.1", - "@goauthentik/api": "^2023.10.4-1702989148", + "@goauthentik/api": "^2023.10.4-1703107046", "@lit-labs/context": "^0.4.0", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", From 38997a0fafcc300b67bc191ec2d52d9ac5837409 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 Dec 2023 11:19:40 +0100 Subject: [PATCH 10/37] core: bump goauthentik.io/api/v3 from 3.2023104.4 to 3.2023104.5 (#7958) Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go) from 3.2023104.4 to 3.2023104.5. - [Release notes](https://github.com/goauthentik/client-go/releases) - [Commits](https://github.com/goauthentik/client-go/compare/v3.2023104.4...v3.2023104.5) --- updated-dependencies: - dependency-name: goauthentik.io/api/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 34dad030d..ceae598ca 100644 --- a/go.mod +++ b/go.mod @@ -27,7 +27,7 @@ require ( github.com/sirupsen/logrus v1.9.3 github.com/spf13/cobra v1.8.0 github.com/stretchr/testify v1.8.4 - goauthentik.io/api/v3 v3.2023104.4 + goauthentik.io/api/v3 v3.2023104.5 golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab golang.org/x/oauth2 v0.15.0 golang.org/x/sync v0.5.0 diff --git a/go.sum b/go.sum index 1b4aff0a5..36d0b8c57 100644 --- a/go.sum +++ b/go.sum @@ -309,8 +309,8 @@ go.opentelemetry.io/otel/trace v1.17.0 h1:/SWhSRHmDPOImIAetP1QAeMnZYiQXrTy4fMMYO go.opentelemetry.io/otel/trace v1.17.0/go.mod h1:I/4vKTgFclIsXRVucpH25X0mpFSczM7aHeaz0ZBLWjY= go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A= go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4= -goauthentik.io/api/v3 v3.2023104.4 h1:3jxzoawGCSlUMNsRltV1ETuGox7MM4xDZ+R+8zMNCh4= -goauthentik.io/api/v3 v3.2023104.4/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= +goauthentik.io/api/v3 v3.2023104.5 h1:CWaQq44DxElyqMvZVjqMhWIr1vXzobf4eqFUas0lMgs= +goauthentik.io/api/v3 v3.2023104.5/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= From d5ed55d0742923a05ee6df6a021e0b3806b3b6e9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 Dec 2023 11:19:51 +0100 Subject: [PATCH 11/37] web: bump the wdio group in /tests/wdio with 4 updates (#7957) Bumps the wdio group in /tests/wdio with 4 updates: [@wdio/cli](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-cli), [@wdio/local-runner](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-local-runner), [@wdio/mocha-framework](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-mocha-framework) and [@wdio/spec-reporter](https://github.com/webdriverio/webdriverio/tree/HEAD/packages/wdio-spec-reporter). Updates `@wdio/cli` from 8.26.3 to 8.27.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v8.27.0/packages/wdio-cli) Updates `@wdio/local-runner` from 8.26.3 to 8.27.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v8.27.0/packages/wdio-local-runner) Updates `@wdio/mocha-framework` from 8.26.3 to 8.27.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v8.27.0/packages/wdio-mocha-framework) Updates `@wdio/spec-reporter` from 8.26.3 to 8.27.0 - [Release notes](https://github.com/webdriverio/webdriverio/releases) - [Changelog](https://github.com/webdriverio/webdriverio/blob/main/CHANGELOG.md) - [Commits](https://github.com/webdriverio/webdriverio/commits/v8.27.0/packages/wdio-spec-reporter) --- updated-dependencies: - dependency-name: "@wdio/cli" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: wdio - dependency-name: "@wdio/local-runner" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: wdio - dependency-name: "@wdio/mocha-framework" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: wdio - dependency-name: "@wdio/spec-reporter" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: wdio ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- tests/wdio/package-lock.json | 138 +++++++++++++++++------------------ tests/wdio/package.json | 8 +- 2 files changed, 73 insertions(+), 73 deletions(-) diff --git a/tests/wdio/package-lock.json b/tests/wdio/package-lock.json index 11905de2f..837632bb5 100644 --- a/tests/wdio/package-lock.json +++ b/tests/wdio/package-lock.json @@ -9,10 +9,10 @@ "@trivago/prettier-plugin-sort-imports": "^4.3.0", "@typescript-eslint/eslint-plugin": "^6.15.0", "@typescript-eslint/parser": "^6.15.0", - "@wdio/cli": "^8.26.3", - "@wdio/local-runner": "^8.26.3", - "@wdio/mocha-framework": "^8.26.3", - "@wdio/spec-reporter": "^8.26.3", + "@wdio/cli": "^8.27.0", + "@wdio/local-runner": "^8.27.0", + "@wdio/mocha-framework": "^8.27.0", + "@wdio/spec-reporter": "^8.27.0", "eslint": "^8.56.0", "eslint-config-google": "^0.14.0", "eslint-plugin-sonarjs": "^0.23.0", @@ -1141,18 +1141,18 @@ "dev": true }, "node_modules/@wdio/cli": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.26.3.tgz", - "integrity": "sha512-wrq145sNBw4DrsF5GEK8TBxqVWln7GZpNpM5QeDqCcZzVHIqDud4f7nADgZGbR8dJ96NVfC3rby6wbeRQUA+eg==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/cli/-/cli-8.27.0.tgz", + "integrity": "sha512-wdNYNvu52XxOqNHqDMGAtexBz+MM0RE2Z5U5ljyllbP3ed5vcvvK9vswURtI4cFGoqobVeoC7wif3VeD3aN+aQ==", "dev": true, "dependencies": { "@types/node": "^20.1.1", - "@wdio/config": "8.26.3", - "@wdio/globals": "8.26.3", + "@wdio/config": "8.27.0", + "@wdio/globals": "8.27.0", "@wdio/logger": "8.24.12", "@wdio/protocols": "8.24.12", - "@wdio/types": "8.26.3", - "@wdio/utils": "8.26.3", + "@wdio/types": "8.27.0", + "@wdio/utils": "8.27.0", "async-exit-hook": "^2.0.1", "chalk": "^5.2.0", "chokidar": "^3.5.3", @@ -1167,7 +1167,7 @@ "lodash.union": "^4.6.0", "read-pkg-up": "^10.0.0", "recursive-readdir": "^2.2.3", - "webdriverio": "8.26.3", + "webdriverio": "8.27.0", "yargs": "^17.7.2" }, "bin": { @@ -1190,14 +1190,14 @@ } }, "node_modules/@wdio/config": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/config/-/config-8.26.3.tgz", - "integrity": "sha512-NWh2JXRSyP4gY+jeC79u0L3hSXW/s3rOWez4M6qAglT91fZTXFbIl1GM8lnZlCq03ye2qFPqYrZ+4tGNQj7YxQ==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/config/-/config-8.27.0.tgz", + "integrity": "sha512-zYM5daeiBVVAbQj0ASymAt0RUsocLVIwKiUHNa8gg/1GsZnztGjetXExSp1gXlxtMVM5xWUSKjh6ceFK79gWDQ==", "dev": true, "dependencies": { "@wdio/logger": "8.24.12", - "@wdio/types": "8.26.3", - "@wdio/utils": "8.26.3", + "@wdio/types": "8.27.0", + "@wdio/utils": "8.27.0", "decamelize": "^6.0.0", "deepmerge-ts": "^5.0.0", "glob": "^10.2.2", @@ -1208,29 +1208,29 @@ } }, "node_modules/@wdio/globals": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.26.3.tgz", - "integrity": "sha512-RW3UsvnUb4DjxVOqIngXQMcDJlbH+QL/LeChznUF0FW+Mqg/mZWukBld5/dDwgQHk9F2TOzc8ctk5FM3s1AoWQ==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/globals/-/globals-8.27.0.tgz", + "integrity": "sha512-HUPOIsrmxfF0LhU68lVsNGQGZkW/bWOvcCd8WxeaggTAH9JyxasxxfwzeCceAuhAvwtlwoMXITOpjAXO2mj38Q==", "dev": true, "engines": { "node": "^16.13 || >=18" }, "optionalDependencies": { "expect-webdriverio": "^4.6.1", - "webdriverio": "8.26.3" + "webdriverio": "8.27.0" } }, "node_modules/@wdio/local-runner": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.26.3.tgz", - "integrity": "sha512-YWxTBp6tc8Dlz09rnRhV2GXV4b3w5G0WyYEf81D+kXDI3QxDvYn6QujByr6Q7fQ9yLwJU4ptnT2uL5IbAwVo2A==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/local-runner/-/local-runner-8.27.0.tgz", + "integrity": "sha512-nxS17mhoLkXP20eoPMkz7tbMFMOQejSw0hZfkEvuDCNhJokr8ugp6IjYXL9f7yV9IB9UDGHox8WGY4ArSrOeBA==", "dev": true, "dependencies": { "@types/node": "^20.1.0", "@wdio/logger": "8.24.12", "@wdio/repl": "8.24.12", - "@wdio/runner": "8.26.3", - "@wdio/types": "8.26.3", + "@wdio/runner": "8.27.0", + "@wdio/types": "8.27.0", "async-exit-hook": "^2.0.1", "split2": "^4.1.0", "stream-buffers": "^3.0.2" @@ -1267,16 +1267,16 @@ } }, "node_modules/@wdio/mocha-framework": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/mocha-framework/-/mocha-framework-8.26.3.tgz", - "integrity": "sha512-r9uHUcXhh6TKFqTBCacnbtQx0nZjFsnV9Pony8CY9qcNCn2q666ucQbrtMfZdjuevhn5N0E710+El4eAvK3jyw==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/mocha-framework/-/mocha-framework-8.27.0.tgz", + "integrity": "sha512-NaFUPv90ks1XlZy0qdUaJ5/ilBtiCCgTIxaPexshJiaVDT5cV+Igjag/O80HIcvqknOZpdKAR0I1ArQzhJrmcA==", "dev": true, "dependencies": { "@types/mocha": "^10.0.0", "@types/node": "^20.1.0", "@wdio/logger": "8.24.12", - "@wdio/types": "8.26.3", - "@wdio/utils": "8.26.3", + "@wdio/types": "8.27.0", + "@wdio/utils": "8.27.0", "mocha": "^10.0.0" }, "engines": { @@ -1302,14 +1302,14 @@ } }, "node_modules/@wdio/reporter": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/reporter/-/reporter-8.26.3.tgz", - "integrity": "sha512-F/sF1Hwxp1osM2wto4JydONQGxqkbOhwbLM0o4Y8eHPgK7/m+Kn9uygBDqPVpgQnpf0kUfhpICe9gaZzG4Jt+g==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/reporter/-/reporter-8.27.0.tgz", + "integrity": "sha512-kBwsrHbsblmXfHSWlaOKXjPRPeT29WSKTUoCmzuTcCkhvbjY4TrEB0p04cpaM7uNqdIZTxHng54gZVaG/nZPiw==", "dev": true, "dependencies": { "@types/node": "^20.1.0", "@wdio/logger": "8.24.12", - "@wdio/types": "8.26.3", + "@wdio/types": "8.27.0", "diff": "^5.0.0", "object-inspect": "^1.12.0" }, @@ -1318,35 +1318,35 @@ } }, "node_modules/@wdio/runner": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.26.3.tgz", - "integrity": "sha512-mbZGkBbXTRtj1hL5QUbNxpJvhE4rkXvYlUuea1uOVk3e2/+k2dZeGeKPgh1Q7Dt07118dfujCB7pQCYldE/dGg==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/runner/-/runner-8.27.0.tgz", + "integrity": "sha512-da332r2d1QXdRhMhsDxMObcqLZS0l/u14pHICNTvEHp+72gOttbjUDvdMHPQY6Ae5ul7AVVQ05qpmz9CX7TzOg==", "dev": true, "dependencies": { "@types/node": "^20.1.0", - "@wdio/config": "8.26.3", - "@wdio/globals": "8.26.3", + "@wdio/config": "8.27.0", + "@wdio/globals": "8.27.0", "@wdio/logger": "8.24.12", - "@wdio/types": "8.26.3", - "@wdio/utils": "8.26.3", + "@wdio/types": "8.27.0", + "@wdio/utils": "8.27.0", "deepmerge-ts": "^5.0.0", "expect-webdriverio": "^4.6.1", "gaze": "^1.1.2", - "webdriver": "8.26.3", - "webdriverio": "8.26.3" + "webdriver": "8.27.0", + "webdriverio": "8.27.0" }, "engines": { "node": "^16.13 || >=18" } }, "node_modules/@wdio/spec-reporter": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/spec-reporter/-/spec-reporter-8.26.3.tgz", - "integrity": "sha512-YfKlBOmxGyJk08BpDnsjPsp85XyhG7Cu2qoAVxtJ8kkJOZaGfUg9TBV9DXDqvdZcxCMnPfDfQIda6LzfkZf58Q==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/spec-reporter/-/spec-reporter-8.27.0.tgz", + "integrity": "sha512-EOXLBIr4oLzSDp/BQ86IqCulSF0jwEAj2EiMeY6dh9WXzBBtoR8WnoX/27xFoZ8GU2zetWC3EVnLJ0Ex8Up1mA==", "dev": true, "dependencies": { - "@wdio/reporter": "8.26.3", - "@wdio/types": "8.26.3", + "@wdio/reporter": "8.27.0", + "@wdio/types": "8.27.0", "chalk": "^5.1.2", "easy-table": "^1.2.0", "pretty-ms": "^7.0.0" @@ -1368,9 +1368,9 @@ } }, "node_modules/@wdio/types": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/types/-/types-8.26.3.tgz", - "integrity": "sha512-WOxvSV4sKJ5QCRNTJHeKCzgO2TZmcK1eDlJ+FObt9Pnt+4pCRy/881eVY/Aj2bozn2hhzq0AK/h6oPAUV/gjCg==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/types/-/types-8.27.0.tgz", + "integrity": "sha512-LbP9FKh8r0uW9/dKhTIUCC1Su8PsP9TmzGKXkWt6/IMacgJiB/zW3u1CgyaLw9lG0UiQORHGoeJX9zB2HZAh4w==", "dev": true, "dependencies": { "@types/node": "^20.1.0" @@ -1380,14 +1380,14 @@ } }, "node_modules/@wdio/utils": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/@wdio/utils/-/utils-8.26.3.tgz", - "integrity": "sha512-LA/iCKgJQemAAXoN6vHyKBtngdkFUWEnjB8Yd1Xm3gUQTvY4GVlvcqOxC2RF5Th7/L2LNxc6TWuErYv/mm5H+w==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/@wdio/utils/-/utils-8.27.0.tgz", + "integrity": "sha512-4BY+JBQssVn003P5lA289uDMie3LtGinHze5btkcW9timB6VaU+EeZS4eKTPC0pziizLhteVvXYxv3YTpeeRfA==", "dev": true, "dependencies": { "@puppeteer/browsers": "^1.6.0", "@wdio/logger": "8.24.12", - "@wdio/types": "8.26.3", + "@wdio/types": "8.27.0", "decamelize": "^6.0.0", "deepmerge-ts": "^5.1.0", "edgedriver": "^5.3.5", @@ -8495,18 +8495,18 @@ } }, "node_modules/webdriver": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/webdriver/-/webdriver-8.26.3.tgz", - "integrity": "sha512-vHbMj0BFXPMtKVmJsVIkFVbdOT8eXkjFeJ7LmJL8cMMe1S5Lt44DqRjSBBoGsqYoYgIBmKpqAQcDrHrv9m7smQ==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/webdriver/-/webdriver-8.27.0.tgz", + "integrity": "sha512-n1IA+rR3u84XxU9swiKUM06BkEC0GDimfZkBML57cny+utQOUbdM/mBpqCUnkWX/RBz/p2EfHdKNyOs3/REaog==", "dev": true, "dependencies": { "@types/node": "^20.1.0", "@types/ws": "^8.5.3", - "@wdio/config": "8.26.3", + "@wdio/config": "8.27.0", "@wdio/logger": "8.24.12", "@wdio/protocols": "8.24.12", - "@wdio/types": "8.26.3", - "@wdio/utils": "8.26.3", + "@wdio/types": "8.27.0", + "@wdio/utils": "8.27.0", "deepmerge-ts": "^5.1.0", "got": "^12.6.1", "ky": "^0.33.0", @@ -8517,18 +8517,18 @@ } }, "node_modules/webdriverio": { - "version": "8.26.3", - "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.26.3.tgz", - "integrity": "sha512-5Ka8MOQoK866EI3whiCvzD1IiKFBq9niWF3lh92uMt6ZjbUZZoe5esWIHhFsHFxT6dOOU8uXR/Gr6qsBJFZReA==", + "version": "8.27.0", + "resolved": "https://registry.npmjs.org/webdriverio/-/webdriverio-8.27.0.tgz", + "integrity": "sha512-Qh5VCiBjEmxnmXcL1QEFoDzFqTtaWKrXriuU5G0yHKCModGAt2G7IHTkAok3CpmkVJfZpEvY630aP1MvgDtFhw==", "dev": true, "dependencies": { "@types/node": "^20.1.0", - "@wdio/config": "8.26.3", + "@wdio/config": "8.27.0", "@wdio/logger": "8.24.12", "@wdio/protocols": "8.24.12", "@wdio/repl": "8.24.12", - "@wdio/types": "8.26.3", - "@wdio/utils": "8.26.3", + "@wdio/types": "8.27.0", + "@wdio/utils": "8.27.0", "archiver": "^6.0.0", "aria-query": "^5.0.0", "css-shorthand-properties": "^1.1.1", @@ -8545,7 +8545,7 @@ "resq": "^1.9.1", "rgb2hex": "0.2.5", "serialize-error": "^11.0.1", - "webdriver": "8.26.3" + "webdriver": "8.27.0" }, "engines": { "node": "^16.13 || >=18" diff --git a/tests/wdio/package.json b/tests/wdio/package.json index 78b0928fc..badccc3f1 100644 --- a/tests/wdio/package.json +++ b/tests/wdio/package.json @@ -6,10 +6,10 @@ "@trivago/prettier-plugin-sort-imports": "^4.3.0", "@typescript-eslint/eslint-plugin": "^6.15.0", "@typescript-eslint/parser": "^6.15.0", - "@wdio/cli": "^8.26.3", - "@wdio/local-runner": "^8.26.3", - "@wdio/mocha-framework": "^8.26.3", - "@wdio/spec-reporter": "^8.26.3", + "@wdio/cli": "^8.27.0", + "@wdio/local-runner": "^8.27.0", + "@wdio/mocha-framework": "^8.27.0", + "@wdio/spec-reporter": "^8.27.0", "eslint": "^8.56.0", "eslint-config-google": "^0.14.0", "eslint-plugin-sonarjs": "^0.23.0", From 96bdb0ddace0de0778d273964308013a86f6a2d1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 Dec 2023 11:20:06 +0100 Subject: [PATCH 12/37] web: bump the sentry group in /web with 2 updates (#7955) Bumps the sentry group in /web with 2 updates: [@sentry/browser](https://github.com/getsentry/sentry-javascript) and [@sentry/tracing](https://github.com/getsentry/sentry-javascript). Updates `@sentry/browser` from 7.89.0 to 7.90.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/7.89.0...7.90.0) Updates `@sentry/tracing` from 7.89.0 to 7.90.0 - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/7.89.0...7.90.0) --- updated-dependencies: - dependency-name: "@sentry/browser" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: sentry - dependency-name: "@sentry/tracing" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: sentry ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- web/package-lock.json | 92 +++++++++++++++++++++---------------------- web/package.json | 4 +- 2 files changed, 48 insertions(+), 48 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index 81a041ee8..5e48005e4 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -24,8 +24,8 @@ "@open-wc/lit-helpers": "^0.6.0", "@patternfly/elements": "^2.4.0", "@patternfly/patternfly": "^4.224.2", - "@sentry/browser": "^7.89.0", - "@sentry/tracing": "^7.89.0", + "@sentry/browser": "^7.90.0", + "@sentry/tracing": "^7.90.0", "@webcomponents/webcomponentsjs": "^2.8.0", "base64-js": "^1.5.1", "chart.js": "^4.4.1", @@ -4752,98 +4752,98 @@ ] }, "node_modules/@sentry-internal/feedback": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-7.89.0.tgz", - "integrity": "sha512-Uz1A/ex3X/cvHjS3C9qH8ENa1Le7Jesxl3Umuv3n1e/rvoPxo2VFNCgDrpsM1mcg2XwiPkmpyMAVxDMgB0A7JQ==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/feedback/-/feedback-7.90.0.tgz", + "integrity": "sha512-ZIdpwK9KmiE/UYGUgNE3N9A5MWm92rbC/0u04LxQfZh0tGqN2EchwivQpFCWuu5QsKMlsza7aO6YQXsKvwt1Ww==", "dependencies": { - "@sentry/core": "7.89.0", - "@sentry/types": "7.89.0", - "@sentry/utils": "7.89.0" + "@sentry/core": "7.90.0", + "@sentry/types": "7.90.0", + "@sentry/utils": "7.90.0" }, "engines": { "node": ">=12" } }, "node_modules/@sentry-internal/tracing": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.89.0.tgz", - "integrity": "sha512-cSwno2NYteBBqOvcm/ue9cJxGGl2uffG4laEyLR9y4we+bYxigfx/Ki2TFOtwXrv5o59eRAtN1lpzaAf43yfBw==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry-internal/tracing/-/tracing-7.90.0.tgz", + "integrity": "sha512-74jEtpdio9aRkiVBcrY1ZJXek0oFMqxDJK6BkJNCA+aUK1z96V9viehANRk3Nbxm01rWjmH1U4e1siuo9FhjuQ==", "dependencies": { - "@sentry/core": "7.89.0", - "@sentry/types": "7.89.0", - "@sentry/utils": "7.89.0" + "@sentry/core": "7.90.0", + "@sentry/types": "7.90.0", + "@sentry/utils": "7.90.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/browser": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.89.0.tgz", - "integrity": "sha512-84hZOymrKyfjQnbD6d/PhlHCsQHjUGCqVU/K6e7g+JiB1DNZOsfZTkLj6Xj8OQzvwKHWzB9egmJN6IA7dUSJXQ==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-7.90.0.tgz", + "integrity": "sha512-ik3Jwo+TYjoEesJlt3PlHDcPE9h//WwyUsVkV9ZsVx0MSXb8c1VC4uDMsyUqjA+gPImmw1l9KlWZtvaOooZEhg==", "dependencies": { - "@sentry-internal/feedback": "7.89.0", - "@sentry-internal/tracing": "7.89.0", - "@sentry/core": "7.89.0", - "@sentry/replay": "7.89.0", - "@sentry/types": "7.89.0", - "@sentry/utils": "7.89.0" + "@sentry-internal/feedback": "7.90.0", + "@sentry-internal/tracing": "7.90.0", + "@sentry/core": "7.90.0", + "@sentry/replay": "7.90.0", + "@sentry/types": "7.90.0", + "@sentry/utils": "7.90.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/core": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.89.0.tgz", - "integrity": "sha512-aU3wfZ+tyFi4T06fOH3z5xnTyMzwvzyEohYOmnQnDrqNgvDzjWkyeUzWse9FaFiut8lBN9O+Pd2H0ucPBMPEhQ==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry/core/-/core-7.90.0.tgz", + "integrity": "sha512-HolpdHjULCwehKPWHR6IPQM0NBjmORhlBU7FtCh/e8TtSkZ9ztPsuofNBomMS1+mdbL+yxOIc9KUYEl0zRfeAQ==", "dependencies": { - "@sentry/types": "7.89.0", - "@sentry/utils": "7.89.0" + "@sentry/types": "7.90.0", + "@sentry/utils": "7.90.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/replay": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.89.0.tgz", - "integrity": "sha512-iD1E1SbW8Ca34Fn0slM9E0Kh0DjhkZGerPFKqbwjXR7QKCx+ljMRKaCQhb4bBKfVNYZORxpwY4PLJLQ+k6WHJg==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-7.90.0.tgz", + "integrity": "sha512-fsABtzQ5JQI7G5CC4fg05lVI5DTbd1uwKi41xVKFRmCB5NVTHvK7bHgP8n6uSbnle+gp9rUxVPLLBIPjKfaTmw==", "dependencies": { - "@sentry-internal/tracing": "7.89.0", - "@sentry/core": "7.89.0", - "@sentry/types": "7.89.0", - "@sentry/utils": "7.89.0" + "@sentry-internal/tracing": "7.90.0", + "@sentry/core": "7.90.0", + "@sentry/types": "7.90.0", + "@sentry/utils": "7.90.0" }, "engines": { "node": ">=12" } }, "node_modules/@sentry/tracing": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.89.0.tgz", - "integrity": "sha512-POYZ1+YxG0G3JizoPmForqo3kPILYhmHIqypsSz7RT+OKsKVmGt/GuspydJM1xhbPYrFyMxzt6HMMss4JN1Uew==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry/tracing/-/tracing-7.90.0.tgz", + "integrity": "sha512-7NeLePk/MaL/VzAJ+uF/ic1dA+3nefeHwKdUtDDxbbz72T3uTfPCfXuiZeSara9ykop3kKWc4Ll5JTSi8LbA0Q==", "dependencies": { - "@sentry-internal/tracing": "7.89.0" + "@sentry-internal/tracing": "7.90.0" }, "engines": { "node": ">=8" } }, "node_modules/@sentry/types": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.89.0.tgz", - "integrity": "sha512-5Rqt6vIP652p01ypUaEIrELjsHF0vUnzj/JFz+i7nXv6w77GPpNzeIlMYdnauBIgJhLUvYCTQaOPV9GhgZhc4g==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry/types/-/types-7.90.0.tgz", + "integrity": "sha512-dA0Mtba5jYlcQ6xBsGILZuFq4NGrWLfr2ys036z2JE4H1+3PxOVERlD3Di7p+WKYM5gjFw10Hn3EgUV979E3dA==", "engines": { "node": ">=8" } }, "node_modules/@sentry/utils": { - "version": "7.89.0", - "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.89.0.tgz", - "integrity": "sha512-t6qDQajdAjZ6LPraAWO00ZjvDbNH82DoVGV/2o4C5MBPCutJGTGyWIpI2tliYPZPPx+3C2m5L757zh1dCzrgUg==", + "version": "7.90.0", + "resolved": "https://registry.npmjs.org/@sentry/utils/-/utils-7.90.0.tgz", + "integrity": "sha512-6BpqAzONm/HQbdlL4TY2W2vBSmaG/eVvwUaHoz0wB49EkWwpF6j/SO9Kb/XkiA/qp9GoJVXpnGBFQLPx7kv/Yw==", "dependencies": { - "@sentry/types": "7.89.0" + "@sentry/types": "7.90.0" }, "engines": { "node": ">=8" diff --git a/web/package.json b/web/package.json index 042fc3616..37de7a270 100644 --- a/web/package.json +++ b/web/package.json @@ -49,8 +49,8 @@ "@open-wc/lit-helpers": "^0.6.0", "@patternfly/elements": "^2.4.0", "@patternfly/patternfly": "^4.224.2", - "@sentry/browser": "^7.89.0", - "@sentry/tracing": "^7.89.0", + "@sentry/browser": "^7.90.0", + "@sentry/tracing": "^7.90.0", "@webcomponents/webcomponentsjs": "^2.8.0", "base64-js": "^1.5.1", "chart.js": "^4.4.1", From 218d61648b891b1f1e8be1ffe7e74787d4e57a52 Mon Sep 17 00:00:00 2001 From: Jens L Date: Thu, 21 Dec 2023 14:24:34 +0100 Subject: [PATCH 13/37] website/docs: prepare 2023.10.5 (#7947) Signed-off-by: Jens Langhammer --- website/docs/releases/2023/v2023.10.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/website/docs/releases/2023/v2023.10.md b/website/docs/releases/2023/v2023.10.md index a1f74470c..1034d0115 100644 --- a/website/docs/releases/2023/v2023.10.md +++ b/website/docs/releases/2023/v2023.10.md @@ -165,6 +165,22 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2023.10 - stages/email: use uuid for email confirmation token instead of username (cherry-pick #7581) (#7584) - web/admin: fix admins not able to delete MFA devices (#7660) +## Fixed in 2023.10.5 + +- blueprints: improve file change handler (cherry-pick #7813) (#7934) +- events: add better fallback for sanitize_item to ensure everything can be saved as JSON (cherry-pick #7694) (#7937) +- events: fix lint (#7700) +- events: include user agent in events (cherry-pick #7693) (#7938) +- providers/scim: change familyName default (cherry-pick #7904) (#7930) +- root: don't show warning when app has no URLs to import (cherry-pick #7765) (#7935) +- root: Fix cache related image build issues (cherry-pick #7831) (#7932) +- stages/email: improve error handling for incorrect template syntax (cherry-pick #7758) (#7936) +- tests: fix flaky tests (cherry-pick #7676) (#7939) +- web: dark/light theme fixes (#7872) +- web: fix overflow glitch on ak-page-header (cherry-pick #7883) (#7931) +- web/admin: always show oidc well-known URL fields when they're set (#7560) +- web/user: fix search not updating app (cherry-pick #7825) (#7933) + ## API Changes #### What's New From ec8f2d4bf98f35cc8dc03931c85878228df0f992 Mon Sep 17 00:00:00 2001 From: Jens L Date: Thu, 21 Dec 2023 14:32:05 +0100 Subject: [PATCH 14/37] stages/email: prevent authentik emails from being marked as spam (also add text template support) (#7949) * use <> style email address with name Signed-off-by: Jens Langhammer * add support for text templates Signed-off-by: Jens Langhammer * fix icon display in event log Signed-off-by: Jens Langhammer * add text email templates Signed-off-by: Jens Langhammer * update docs, update email screenshot Signed-off-by: Jens Langhammer * prevent prettier from breaking example template Signed-off-by: Jens Langhammer * Optimised images with calibre/image-actions * Apply suggestions from code review Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Jens L. * reword docs Signed-off-by: Jens Langhammer --------- Signed-off-by: Jens Langhammer Signed-off-by: Jens L. Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com> Co-authored-by: Marc 'risson' Schmitt --- authentik/events/models.py | 2 +- authentik/stages/email/stage.py | 2 +- .../templates/email/account_confirmation.txt | 8 ++++ .../templates/email/event_notification.html | 2 +- .../templates/email/event_notification.txt | 18 +++++++++ .../email/templates/email/password_reset.txt | 12 ++++++ .../stages/email/templates/email/setup.txt | 7 ++++ .../templatetags/authentik_stages_email.py | 6 +++ authentik/stages/email/tests/test_sending.py | 6 ++- authentik/stages/email/tests/test_stage.py | 4 +- authentik/stages/email/utils.py | 11 +++++- web/src/components/ak-event-info.ts | 4 +- .../docs/flow/stages/email/email_recovery.png | Bin 23911 -> 25528 bytes website/docs/flow/stages/email/index.mdx | 37 +++++++++++------- 14 files changed, 95 insertions(+), 24 deletions(-) create mode 100644 authentik/stages/email/templates/email/account_confirmation.txt create mode 100644 authentik/stages/email/templates/email/event_notification.txt create mode 100644 authentik/stages/email/templates/email/password_reset.txt create mode 100644 authentik/stages/email/templates/email/setup.txt diff --git a/authentik/events/models.py b/authentik/events/models.py index 965e38cc2..240ba11de 100644 --- a/authentik/events/models.py +++ b/authentik/events/models.py @@ -461,7 +461,7 @@ class NotificationTransport(SerializerModel): } mail = TemplateEmailMessage( subject=subject_prefix + context["title"], - to=[notification.user.email], + to=[f"{notification.user.name} <{notification.user.email}>"], language=notification.user.locale(), template_name="email/event_notification.html", template_context=context, diff --git a/authentik/stages/email/stage.py b/authentik/stages/email/stage.py index 0fa36bfbe..160a68e92 100644 --- a/authentik/stages/email/stage.py +++ b/authentik/stages/email/stage.py @@ -110,7 +110,7 @@ class EmailStageView(ChallengeStageView): try: message = TemplateEmailMessage( subject=_(current_stage.subject), - to=[email], + to=[f"{pending_user.name} <{email}>"], language=pending_user.locale(self.request), template_name=current_stage.template, template_context={ diff --git a/authentik/stages/email/templates/email/account_confirmation.txt b/authentik/stages/email/templates/email/account_confirmation.txt new file mode 100644 index 000000000..0a1fc70d1 --- /dev/null +++ b/authentik/stages/email/templates/email/account_confirmation.txt @@ -0,0 +1,8 @@ +{% load i18n %}{% translate "Welcome!" %} + +{% translate "We're excited to have you get started. First, you need to confirm your account. Just open the link below." %} + +{{ url }} + +-- +Powered by goauthentik.io. diff --git a/authentik/stages/email/templates/email/event_notification.html b/authentik/stages/email/templates/email/event_notification.html index e34563404..7ca78fc64 100644 --- a/authentik/stages/email/templates/email/event_notification.html +++ b/authentik/stages/email/templates/email/event_notification.html @@ -44,7 +44,7 @@ {% blocktranslate with name=source.from %} - This email was sent from the notification transport {{name}}. + This email was sent from the notification transport {{ name }}. {% endblocktranslate %} diff --git a/authentik/stages/email/templates/email/event_notification.txt b/authentik/stages/email/templates/email/event_notification.txt new file mode 100644 index 000000000..bd7d92896 --- /dev/null +++ b/authentik/stages/email/templates/email/event_notification.txt @@ -0,0 +1,18 @@ +{% load authentik_stages_email %}{% load i18n %}{% translate "Dear authentik user," %} + +{% translate "The following notification was created:" %} + + {{ body|indent }} + +{% if key_value %} +{% translate "Additional attributes:" %} +{% for key, value in key_value.items %} + {{ key }}: {{ value|indent }}{% endfor %} +{% endif %} + +{% if source %}{% blocktranslate with name=source.from %} +This email was sent from the notification transport {{ name }}. +{% endblocktranslate %}{% endif %} + +-- +Powered by goauthentik.io. diff --git a/authentik/stages/email/templates/email/password_reset.txt b/authentik/stages/email/templates/email/password_reset.txt new file mode 100644 index 000000000..0c13ad2f8 --- /dev/null +++ b/authentik/stages/email/templates/email/password_reset.txt @@ -0,0 +1,12 @@ +{% load i18n %}{% load humanize %}{% blocktrans with username=user.username %}Hi {{ username }},{% endblocktrans %} + +{% blocktrans %} +You recently requested to change your password for your authentik account. Use the link below to set a new password. +{% endblocktrans %} +{{ url }} +{% blocktrans with expires=expires|naturaltime %} +If you did not request a password change, please ignore this Email. The link above is valid for {{ expires }}. +{% endblocktrans %} + +-- +Powered by goauthentik.io. diff --git a/authentik/stages/email/templates/email/setup.txt b/authentik/stages/email/templates/email/setup.txt new file mode 100644 index 000000000..6d0eb0ce0 --- /dev/null +++ b/authentik/stages/email/templates/email/setup.txt @@ -0,0 +1,7 @@ +{% load i18n %}authentik Test-Email +{% blocktrans %} +This is a test email to inform you, that you've successfully configured authentik emails. +{% endblocktrans %} + +-- +Powered by goauthentik.io. diff --git a/authentik/stages/email/templatetags/authentik_stages_email.py b/authentik/stages/email/templatetags/authentik_stages_email.py index 7623c6c71..9b3dfb194 100644 --- a/authentik/stages/email/templatetags/authentik_stages_email.py +++ b/authentik/stages/email/templatetags/authentik_stages_email.py @@ -29,3 +29,9 @@ def inline_static_binary(path: str) -> str: b64content = b64encode(_file.read().encode()) return f"data:image/{result.suffix};base64,{b64content.decode('utf-8')}" return path + + +@register.filter(name="indent") +def indent_string(val, num_spaces=4): + """Intent text by a given amount of spaces""" + return val.replace("\n", "\n" + " " * num_spaces) diff --git a/authentik/stages/email/tests/test_sending.py b/authentik/stages/email/tests/test_sending.py index 424d474ce..5c67c8842 100644 --- a/authentik/stages/email/tests/test_sending.py +++ b/authentik/stages/email/tests/test_sending.py @@ -58,9 +58,11 @@ class TestEmailStageSending(FlowTestCase): events = Event.objects.filter(action=EventAction.EMAIL_SENT) self.assertEqual(len(events), 1) event = events.first() - self.assertEqual(event.context["message"], f"Email to {self.user.email} sent") + self.assertEqual( + event.context["message"], f"Email to {self.user.name} <{self.user.email}> sent" + ) self.assertEqual(event.context["subject"], "authentik") - self.assertEqual(event.context["to_email"], [self.user.email]) + self.assertEqual(event.context["to_email"], [f"{self.user.name} <{self.user.email}>"]) self.assertEqual(event.context["from_email"], "system@authentik.local") def test_pending_fake_user(self): diff --git a/authentik/stages/email/tests/test_stage.py b/authentik/stages/email/tests/test_stage.py index 853bc2a77..277549937 100644 --- a/authentik/stages/email/tests/test_stage.py +++ b/authentik/stages/email/tests/test_stage.py @@ -94,7 +94,7 @@ class TestEmailStage(FlowTestCase): self.assertEqual(response.status_code, 200) self.assertEqual(len(mail.outbox), 1) self.assertEqual(mail.outbox[0].subject, "authentik") - self.assertEqual(mail.outbox[0].to, [self.user.email]) + self.assertEqual(mail.outbox[0].to, [f"{self.user.name} <{self.user.email}>"]) @patch( "authentik.stages.email.models.EmailStage.backend_class", @@ -114,7 +114,7 @@ class TestEmailStage(FlowTestCase): self.assertEqual(response.status_code, 200) self.assertEqual(len(mail.outbox), 1) self.assertEqual(mail.outbox[0].subject, "authentik") - self.assertEqual(mail.outbox[0].to, ["foo@bar.baz"]) + self.assertEqual(mail.outbox[0].to, [f"{self.user.name} "]) @patch( "authentik.stages.email.models.EmailStage.backend_class", diff --git a/authentik/stages/email/utils.py b/authentik/stages/email/utils.py index a6edd4609..8f7f702ce 100644 --- a/authentik/stages/email/utils.py +++ b/authentik/stages/email/utils.py @@ -4,6 +4,7 @@ from functools import lru_cache from pathlib import Path from django.core.mail import EmailMultiAlternatives +from django.template.exceptions import TemplateDoesNotExist from django.template.loader import render_to_string from django.utils import translation @@ -24,9 +25,15 @@ class TemplateEmailMessage(EmailMultiAlternatives): """Wrapper around EmailMultiAlternatives with integrated template rendering""" def __init__(self, template_name=None, template_context=None, language="", **kwargs): + super().__init__(**kwargs) with translation.override(language): html_content = render_to_string(template_name, template_context) - super().__init__(**kwargs) - self.content_subtype = "html" + try: + text_content = render_to_string( + template_name.replace("html", "txt"), template_context + ) + self.body = text_content + except TemplateDoesNotExist: + pass self.mixed_subtype = "related" self.attach_alternative(html_content, "text/html") diff --git a/web/src/components/ak-event-info.ts b/web/src/components/ak-event-info.ts index 6901f31a8..e728958c2 100644 --- a/web/src/components/ak-event-info.ts +++ b/web/src/components/ak-event-info.ts @@ -285,10 +285,12 @@ export class EventInfo extends AKElement { } renderEmailSent() { + let body = this.event.context.body as string; + body = body.replace("cid:logo.png", "/static/dist/assets/icons/icon_left_brand.png"); return html`
${msg("Email info:")}
${this.getEmailInfo(this.event.context)}
- + `; } diff --git a/website/docs/flow/stages/email/email_recovery.png b/website/docs/flow/stages/email/email_recovery.png index 1dc5dbbc4684cf4dc6448808c5c74f67ca82bb12..0bc14bafd1b7718e9f268158b081854fbc69cd0e 100644 GIT binary patch literal 25528 zcmd432Q-}D*EXC)5)#p(mr)a4L=a=Ngh4_OBoPrLBuaEfZ%MS#1_{wd8#N?E^xlom z5WR)Lj2=cCZQjA}_b<=$|DN@(_xsknzFEs+j&tv`Puu6(*WTw2eypiVah2ujxpU_z z9zFo;oI7^`K>VR4yG$%ef0rLi{B_0tfxgqZbL7`ge$Mw#`W&7+$9e7{`2G{OvDF$( z8QWm|x&ooz+tYYbs@7`A+acB$E#oAI-Uu_7-5Fs&7>g5YJ#QU$#q5X1?YLKdZLdC^ zk83MHAKfhxUl3k3`X^VF6-y{-qZu zdj5;{|I);N5Oy+9r$g~iVW$%oLizVl{7Vx=P5!0y|EW(1rGFc?e`x>Dz9}Pbshe_U zhO_F7-EJ&(FvX2f;PlRB2YIV^-&vrW0F-R4jbte^j%OK$%Q(8Mrs$$;S#>-J-=n{X zSY9FObTW{rLh_$pmTFoGkt{*S{1jg6cK!9PggOyZg~K2T`_^?G4^L|~tKqnHZUk}Y z_(3iLL;0HFG6k9x7aP7@XRY9RM|q(Au6qBG+VW65;c4Hs5=Uha! zPw0OYbMP8y&6KcnQ6nK4Jh+ZG`1wPe5Zo_$xl2_!h&X7GuMf(^w6Z^N_*gEJ!5+Cu zz!dm1zpk&d#8*SK^G26~55~T<){M{@T3G>%&@tIMrdz>DJBzY*Bk&4wU37q|3~t-c zHTQrLrL{OIrGti>_ScKn#a!MwQegoeV29+Mmk{6)I_T0)nN0;bh?Sbvv&8kYF>Uh3 zvF=T3mF52?8%J}zIFcP&yAZQCSEh@`8bel)`F3>(+|SQwca^5ryCx&rDV3=%+C6NrhG)AuKm%EKNx!#RIIxTc!SFJf1ixuiJ~<5#l~*d z78+dY40i$3878&itpL5dN$8GWZnIMoKL}-sl)q<&FtN!GNDhvIP8OYaFpQc#OrC36 z?6{y)izww}!MBx$Lg{K*OScC-1_Jx=U;m;U#~&Mswb$0 zJfWu&UwYJ29?j5YrQsFL(nJf$dzQ7e`B|WQ|Hpo`fgvjot zHPaR$5s5Eo;90sH5;}p!dYSmIr2X|&wIhYTl}8<8`ns$d*>^1nS!CEaS3d&5QPmee zPN(4=ObNcPn{(}OD`gp1EWpIFUOP&7f`cHeK_ef~i5JXv>z0#yQjQGXO}M?bYStE2 zt$e49y&0q-07a2?dKTFZKQd+~wR zlreyLQ4jKGT!2;x^tE&i`O9l9Omp$XzBczzX{If*v6LA`UEVnuGLM<*tsD9lR`BlW zRCifN?E!>sH?KD9mR_VBv;)a+`X$~Wl=+@hE5Cs2J9ky*$otfL$?HuhaqpC3~drN*-?=ER?KB z<>=1br3Zj5j6CxPtv9M_LhziRez5Vy&6HJ*52!M1y|ylIHpkRE+u2wgetAfbBngo0GP08eHQOUK6{I;qOezj5-cYC?Dmi;wEQ4NytAvB9c z&+G2baD-^v_V;P~uuo8aga=YedFf%DW;ljp)Dhvw+bMJ`@%+ykZu^-ppA1~^1dTM` zQX0^wVnab73J32{`UO1ARSrspD#}kbTl#Tm<0Tv2snr6d34?-C(B&OTZZpC&vYLJ| z+ehJ2NV=H4RH>2Az6N2REQR%p7ZdK51}bqEm#>AiA)he^}4eeyx<6Q-< za4NpC(pc3(2rWP(P0^js(h8(LWNJC#^^j%cz?jrn+}kaenwL@&n~;Os*r-Y~&~n4S;-sp1gs+ zS5LrEdCoL8Zpio)sJ)5AzKSN*5E|fp3Z}XIg4Uf2qyi}R4uLHsTGJ@@`r>fDLZG^5 zng){$LY)ShX|lLEO-@i8T;#j4@#61Lsr8>tS?+1VAZn^Gc7g2y3%I8>it4ClMn7mZrt%m}ip!mFoB6$IakUbmYbiSJ^vAj=IO-0uZ(Ca=k^w{2 zfd-9+~w3& zXuhR|qxgn`{0_$)>qziOFs1!)7@!_2952MaaxB`sJwO-}k>rIfbCq7cO8U4@KY3qwQ9(I$ za4FN8xL?$&iVyIt_aV-~iMJ$a-HY&hn0kwO;#z(G93=WX1pH+0k-GQ(j1tS8&I#`D z=@l_ImbDi0%j@bHzc+OXP)SJj}3v-K_|kqq!3E(tD*{GZt@qWIud*QUN-=|V6Z#XVvV>(}lLe9jiB|b%uGuvu z$n8tg8dSisG$y-#xgqePAn4W9ib>_VBjF0jfuYD;o?!9rHygHT1Dn*M_{Q1F9YPNf zip^|w#!wiUzUdXE#~IT#g&^x*ew!Dw&=G-oA8!n5N3A}E+ztsw-BLJ;ZNPVgC3i7& z+#Xr{9Kx)|+AF8?NOBqm>m!}3Mkm;9n=S<)dv1aDx~tGa0i>Vd^gJ)Z+|GQxH@Cap zM2Toy;!$Rgb+nS$kn&=jS(O@@#4Z;|o7^t6t3rDQi);V76kD~f3(3&1YJJl6W{j&g zx7PeipHW`0tsR17p+}8~!Pz7fbL4iL3u?!g!a66|o~loYUwF3_yd8ROZ3SVfdod?& zw$^K!Q}GxA7VEA_Qr{-J-{guHKrP!WQ#}myCcGOE$`=-1tkBjI+Fz`uyHiTOng-U^j^7ftvYv5_Sf6?ZNO(WW`3QjeG(PpQ{0EhmeYvX4_es-FL4@$p{YkJ;5IPpN{{VuX@q-oRT9yTV7m zT!tl+7Ar87S>-u2_m_uD62AUCB457Cy6ivv;z(@MsjnavrRwIphk5+6*`=?^*O*)aULq~7rM;&;V2 zkd`Ui@Qm#35fPaK6J_Lo3`&d8$76)q0KgBi=7V-`>eoH;Ucbn-dpO zN!wyx$O0s%6+&ZOTWvtSo!tav)@ApG#O24JD|hxy+Yvom5&&--PlZM6S~=I12rUI zl0ApsG?nZ>mFP~%m^XYMB99L%TCNsvSy{YvvPHQ}moLr^jgLKcUu^$X?lB-n);Zvd zKDyFfwsNTv+Ki&3-e%rc(Q9RK$@p#MZD5y`T&6J}5Q zjNdxZ`d?_KzZkc(zMN2g|CuZLi$Xi4V~9l4e_^~%J@S8V;)E{yFTze3uTwJZe-?H& zSN}%-ozjv-$LB9j>t86r6VBrA(tXUN>$G}=?54$dD-1B~ObDi(ULEm0+}i+*D;)2k zxd3)I;_tkDhpeb5T@AlNJGJ%z9mXtPx`fv&Fq(8YMzVWO1l>C$8?6DFpvCB|irypV z@tslg>HGr@*NGh1(e5;%9=5tWe&tAdg0PV=);lLa8_^XzsN}<?bcA9Cm7$}di=@Ac&4`*Y?>PEeH<@$*eGJZVySxY`DmqnffL?s7$h3=+XyRt_)_QcgEMTBY`6$Hf57l$)@{TRNj%NgTY*h-P??<`;=d^ zQ~5$jCY6ZTfOWEpeVuN&HC0IU{*slSPp3P>t(QO(%w+`m(Qz#YO6 z_1>(y<>p*_Ksgf(%em^+3pP(zHGbkAR^YR3wKx+*_%!8nu!@lF7-tlI{$rHrfb!%= z@uoWZZ0es)Vj7tA^**azwE)0#g(FmIOI@_)o2g7U<2(-2P5Ks9xL$ie@h&;XigIMa ziO0SJ)1GL%1Xd>cyWi5z1HgF*F??5E#@A}VOtCZqUAb(FEr;c1za0Vc#ImV` z+t#Rt2l02n_8mxmDZSuRQzl0wBH3#;TUqV4BtK^4E~avzP^;g)$}#yNxB6n!LmV>@ ziP%*4oGxuufOt+p%NIJp(|P3K%@E2H^8|LWK;6HQ*-_yX7AjgR5zZ`b7O9j3avqCR zCOx{VvOjU80)iTC34uB^_?{xro1FzC2!v_f5hWAEDz^ zd9|vq1hU$$jA%NkjE*{oLfBkJ*2l&-nPt-J!19KB3&|%Ihm@kz@aG##q?m1$jYYbi z%M(;X^oF=umxX~mN64wH5ZEe_^5J7Y*og2QV|P)@)&Ny}Nt$d9ULOj9d8z2^2odfY zhuJ#y8V<@fiN(i-Sq{YGOmlFMl^g^*L@0l0#APl@6`y*x9*7JottRkmzZk7#&T`8A zfrknR5~e7f1)3jqI>(2|FnZVJT(yPS-o|FS!0=tI%GOeWSZuSq5LQ2!Yj)c%S9WSB{_se4K z9| z?HDM;Aa3$UWVFk4_r!~5=V8ka);v9~a)6q@L_~?Y`fd*nL#$=yqjkOe&bF0LLvT2& z)UBH1{Sla?rc1OFx^3FmR|l1CI^Pjf^@h21?p+P<8``t;w29aF-g>-wvZT`K!!*q9 zJ@N+=rN2`v1UV9fPuBx9jH&B4OVZ=TYN505)-+gB+#zmA%d4t;D->-N|z1v2CH5>akgi0}5MN*v6&7ywHQU=+zh4uM2lb4FHn9U*3ajxcJnbk|j?X*OgnJy%&tiZwAU$Jm zjhP3x>JB^Zn_MIvw2*KavmzW~>LP6`7Z(gwAQL_ZfJEnTqED5a5<>Y`VCQ1mCI?|J zJ3!q1V6|*uti)Iv`TUBXHA+a)*{uB}(aUKXAOZJ&Y{vbRpV^#W3+6;myxZ0HV!KSlr7fF#ozX`d8$$Nz7^} zVf?Ar-?;!Qh@V+Hyt562g6jU`7j3$puM2He2}hi-DK6YoKn$ z%FoULbcBMoS5|)=(TIhrCH0~LBS_FV%j~46wQ5{GqA_zeP*+pBWTaJo*w9sJoJ%>y z&;BRy2AdI-wzQ52I9l$qv2Y7A0vx)z;M7LItIb->{mr#NS+<6vUio2M0+0{yLPUL~ z1)`f_^0bG9)K~8e#g= zX1!)tz^7MoVV5&SfCDa%x%wfD|A>er#};`Dc(m;IL|&KVwi$F#HMHSJd)5!y*Wm)X zS#;y&U*5}N$|`Q7jcS*2^FlqNaQOyh`Iw?7+bbt$UmAAgb(&(g5azvFR9W3Q^A`DP zXG%TDluYaA9VS5FIRa23`KCS|P zJB~S_Xpk@|+!fjv$Z)B3LDa^O0quTe*4xf6^amKb&bhaB2p(|9Y>WEXxVsbbAxY0} zPC86rlaiV#ier8u#&&UTZzc3x+W^WAcQuM*=jMy+zr89_a_<4>-YOg6CW$V{*eoBc z#g*-#oi9a@+X?8>Y;>=fb5k6w>O;kq$_?PE=GBCcM2T{NJmy`QFLH1*K43-O@1oYf za-NAgd`9M?2~h)Imy-kNF=VBW^OpUKjfEB{?3r(b5NHP-F7DrE4^{$InEPylb4%`^rC@Xz{oD7;E}3EkoW z&HiI|DaFb8`We)Exoe{)y>KFcgPF+m?!=H!+T;yHTh^xw@rVA_i0lQ@3GPo&pXa)s z%YAK&5t{X3(=J_(1F5Jw`rZOuhd>iew3W@i4Z;fT#67-lpKo_l|UXM5?f_|`9h zgqr(&j|>~nk;-P<)xP+cWzLWHeC808NaQiF+!3c%2KmIW(>+}s)L*Sg`&|0tdy=e` zT&QM21#Tf>5jv^?0XGZPsUn2qO|xRLsVUdTEp^BdIIDugd_P$V6eB>1rf2>zY~fyl zn}?iw2<6$ist$!&3}pSxi1h`&o@$)cpbq+w&UeUeH+&RA305qwz?p>%pmA|xrXj2T zSZR4!q*J84AOspkxiwhd@cWgtFEG*w;kT;FwsF91_*BU(9sO4RQyLNWFDKZmy`*)2 z;7gtWRBwou$p1-qrF9%7UQV_rSVqltg?nK5NiROb?aXH=8Vs3WKv;{~0tMff>leBqKw zik7ud&&Y$4SnR!=p9;J5-a-f`M<~n)Z+Pj*8R7fnQMIZQ115DM_+un{M<5Q&k#5`j z388ehZ6UvJcOd+FJZHSpsqV?2r_kG3gV>DQb)!v+4$ z#D%EpEALllA`$Bjr>^Oi}c!;2(QT<&fYD^8lc?&M)K7Kg5m+*7SP!!((?#}aINROtEL2bpoO5)G4iFj!L0uEGlEHm z+J7$oS{Oe`)O!()G8%=SZ-Xl&O-5`aqz9eftzI?>6WUpx# zvZT{&#j2y^IbQEpmKl%!kUA+fIAlSjIqV;qUMEiU-x*#%V_v<^ ztK^C=OtLSZS=MA?HyCt)sNYk47&!8U5IY3T%{@#_7fgCq25|xaBBiy;P?D$af%V5) z3g;v#W(w-2EAd*d^#W(AAN8_FV{R}%WLk^Qv1Ls1mhdV43={o$!=!W@WwW$COEJr@dH&AlDP3NS1S#PavPZuGhyRz6A(RvkPP z8BfHvnSXo=IdP>!U^M8Dt2FGpcsdz1Lh_gRz+5~&#ZBFmp&E+HGP{Pc3`BHSw?TMTX~wSTtZ$(tIo z{=6t%4PrkjcApkGLjeI|$eF|%cU-63vyT8c2Ya8*Fe~$sH^QHLZa;wA)MMgiS%8$t zP`qL}ui5Ago4MD6ZFJ9eZWc((t4sx^f{64~s1-R`qN=;jvna;GKkUP8>kb~)XgI#3 ztZSTxN1|LI&P{M(;8oxw-sVOJv3RC~+c;q-v)er8kDd>9?8diP!^PgZ-vW^>io3J! zz8!=MTAO!Yhtble%zrL(penRr9e>DUl>@GI9v@nj|1Ccw1w4A+UTgA>kY;r7Aehn& zF&`IAzssa#V+s|~5PRgtuz3H~kfgK@qy5VrQ^!(jz_p|Kin%@TyG_ff_{cDcpWz2` z#v9L1*gwmr3}rDZZc0(J&@g)SuMcwE;%|OltY~_z6Wp?t^p@hwWXVsXx2{j^68X zz!uSn_p8+ENfy{s!dZt6OYU*}cp-+Y*zCv)HEp??FV;zEUDOZM9Qy7OyU*o15&-by9RUQV|2DQzH^(MW9Nd2KcXiIRO0gO z^hn@9=u=};dX1^B9O_^)>bLE&i-FIxKT3)q`db7pKKTO-%6a6lkGD1w7*z*o9#mS^g_&Gt*U*qq9@nXrY16@ zLY5@&WSi;NAu+mDHsr|qL}^OD zt1)Ecl!*afM_LouXGTUup;910d=3Q13xGYf-T6Io1clAO3$DR zHWr)rto=q(1^OabSpi`R#N=JTC^ZN03ixyyNFLGbtrETEJ8fyr_))0@#rKzfbrA8j zxG1e18b!*rPdA6);gF=s>m_p0?y5TQ=TO-5Psu*qTVLBK_~>C$L7wmU5j<0=`t)U# zU~OSVq;u=fO(+bCcq-Wq86R4fCqqT4zH+-ogp1Qw>zDGDxNmeczbg^@#rnEgj***_ zTU??LT=cTy+vc%8(dD0tiXQY+f^fR*)p=QWZ5y2!4dxr5oW}^q-`_uVeAfK15lE+b z#iT^1v7(?(zSKgUD#w4c)!=cN%{|hg=M~XXYF{Q{J?%)oQ(9GpT*G(`auI~c`9An%D}arnFj0YI1oV@}cAnag2DTN>4-h2gO2;j%cQs@W z19M2(oPUW0K(E>7zC}f47bIfukwvGU2Y;oG^dFVdgESMMocUb)2Xl{G*?1BnI4_>p zxLNq%g%3fV==lZY5XsbctEC(0X{-l_KP|hA%S%rgyIljKv7+1&6-{;BXo)S2t;}{3 z(*E)MK_ovb>hju^(h`KVUa4=V4;g=lwUe?cwAt&t!oI^ip6?_`K;##SdO%fV(&%&e zuC`zczE&EY!kJeH_qSukivd4=`+{arwDS9&eegaTR&cgzSdTlZHCg5koR{mhpq7tn zX3)S53ShJ#4Yi%KgIr;k$Jv7T$O|iH*yMsrxeA(YMmQlq{n==3t8lmo{n57UqfBbI z54_M5@fr3L{0K~YZ|nR$doZ04o9ONZm^fTr3Uy!Me7{nHfG8}e3APYv1dEmC9O+5C z+mova0qe4%%I-un;#=DI`u&{3c-gtx?>Vs^^u1B6)v1LR*p7QllG1P~rp{mZW{lFV zby*Wy(@QQBEWgzgo_fRaz7Kj!TID5qx9duioHE_@sAh9+Tbk8$*~N)=ckJhe9j}XO zln0+M8Q){EP$>B>G2NqC#4dsMWY>(r0y|=)aAe(>rn~N*S22v5qEk1TqFQ&zf>oo_ z#!JccFn~FeHbeGL^CBW+xjfgeYbt>6RityF;w;9IG=CB+gX?lKaAgFdjkpTuuxu*` z(5w`58PR9WTsgC4HUt$c9?Q;X5?n_Ol;qof8gW=B9FIDMwN(&`hRr z&`?U1(ngVCrfdw#4mczBl%@M0N`R4%3*=Nn=d{!B%tyw9?;zBf6q)IaC=ihF-r{s_Lum1t@9I`dZTS26O!$SeHcQnK%7*ZcZG3FTlZosw#4Ve{FSqv><``kTRL-$nS9Qt& zs;Jd6XAEo4+`E^igA=SxX?n>h_+!_6+wsatQi%wPU3S*B65YFC-^vDTV&$D1Cd|0n zt&iTOQ!zd%72P$i%EV0M6>fx*N+6N>{^3S4A1(l%ChL1yEBGsy=;60Xv6pc^ zvc`|TAG+Uo&F<$lKc1$O-0!7c|7X;zZFT75Oa{Iy>*o=T?nD(f;WRgz9~Ah|Jz;GV zW2gbK4tIJY_KR6k8O3$7>8!<34O^X$gq!)PcvC{~3eS-|Ul>Ri?!VIES_`J!@{4YfGv&V7cuw>kEca8hD6+?dHTm7TYrGQ5;E1)X^{ z(JVlY3()qm+>7VAZ1Y1OW|$b#Er|cFlqSVrzis1j%O$Qp*eMnx56v8wHVTtpayfd6 z3W*C7d4_mv6!<p6MQ>Z8<_YbEt7pT!F4@$J%`k=b*`kDk!KeSV4dlUR}YH`=Dc zhwAc+^q(D-Up&-(^hlKjSN*#GZcj{sSLa3jF6tM7mV3dUq9WL0CEssK>{MP}Q|S0S z?WiyxdhVGG>pOi{A@zkBPC4N(Z98$0Fx;jb1}4ydl08S9hQiKJNoKx|TFOfdVC_yuEP_;;`Pr za)zEx|5r2Th@8`f8DbEL{|hOVYGboH_?<~|bh(l65X)<`?%eqmQwH_?i1j zH=;=jecq9zFK@aJ>ELBpNsl1+HZ*xQsLJkM99L1iGy;@o;4o$J+6*{s(=$9;NiHvw z%i{|@60?y?iJ!R+B!Hk9D^oLU&c z#RW21jkL#7Tj~D(!=qI`^c*iSlryu+gmmf@DSMhF#(1|TzwR1kjI#`s_xuI!eoc39 z{JB}ElbDDM#L9?E@dLWE6WGr%P@xwL^9pg`W`86!72;Epg*Kz9IEU=^rp42elh6K8 z;=f>$Ci~q-AJXg)uU%4N)D|FD@Zo`at)hrxnB%LgUfc0~k!7Q|%m|Vwdi!p&$oJDH zX}>2q5~xB;!wAkH#@AQpi6M94xRzS?=gCj+;bF?Z6(N1H)L^$tO~~&N$Gxzo&_P%H zBQiFgNiQUbtAexMA!c|G8e>Pp&80S?>EYJ2@IA55x4IqII;9TTsyx0^xM%R~^TyUd zFWuYs%5z-#6rFl)tAp7je7zg?(bbDc11a*T!C;u|)keG7@A6+Pdk3y-u-|_7E4byD zjHfo#?2!Qv?s=vwPx(kjPaR3bJ4elUepx+e1u?zibTZ-cIHT6G@QIn%|yv zH9EO7pIC{rUOjwuQ8*x(7=e5O{V_csX9|Uox`kp`ddDUu-dPH;ji<|mev*&PDd_!(65S+kDwmcjaN~D^MFMWhs zr~;oL$P33rkEl9^88q05@R|6Fp3SdT7z4*)k`X+7#!>WK_n2b_J_g(-BkeK{6hL0z z+9=b6L??c?SVLF&+q|7HRcW)F{mnDxt$PU?+CP^RvPeifTYF^6szuyg zv4650BL<}%-s3|GfJ;BIZ9H6f^Tz%ab>oQlJAW+1If!J~pgv9w&dUsXy{Q1Z`HJ#7 z_@dpn3Qo>0BNs9h9W7;)W;n{+zwFhQk_fX4a4Q8w`tUZ!UL->f&Y;MX@Y%k6?uw>Z z&{O5~inK&5l>f0jh1a*X7bOr+QDU~(!%_@+97>OSJ)_fQE%A9_9HD7uSR|LBTL`tK zh`YSY6;)<5{AYjJbetHM<>aiZvRN)W>5e|+oMrE&if*A(yFz5LZ-A)D{o&~(rozMQ zT)qerGML+VSck%pEx3ix>~4c36XEM;DuT!70mZYE7)OxX~by?+`=(L@SA+~ z=%@4MqSitY0;D`IstOe=WR0*VF$6C~>xthK9cg8i1#my~1?%MU1}@(OxfPioI3U9X z^Tqd@=7jcIKdpi(-@{_OC~5jNAbrsdH(q2Xxp-{EYlCX?&%bUUY%z09r&C>?AOCAL z=7CjZWguS4*ybWygr9kbBr!5iT#+V>w1C~xAU+jk^*PQl+*fO~2(>Bp222u6O7Ci& zZu|f*&gCMA*@GRQL(xQYLA_LOvcL4+mMlT|<&aypN5oROf+YfqLU#_T(XZJ9IPWNm z-(LxJ>IJAsl+9`0352>B@XCVp1I3Al$y@tJ?nXRQ+!|m-{@9VgR|qP__hg|y-^E#qY!o_c#zQ*GxSzl48~&o50|mZQ@pWa*h+P5nOsbyJ_I4Fm8Vr zU%H8*7Im)U5PZ_#^;H{l=uT_)Mp1!!setx;QveRvDm$^vSAdJ+l7`;TuerLJp1;Ul zO54sXz^B@rV<3Hv9!v^@Zw+P^4NLw2oPQRRWjh|&_;~$oa!}-x$;r?Dzx;HG@%yHM8fm#68L<_fsQ zXAem)U)|X9A(tG=prH%PSTL&#)w*z}z`M1>^ z#_wYzQ<#Kd2KsRhFIW8oDOOT>nMNb2?nhGL1``euKWbvJ_0l*g#5ppG9fKc^N(W4M zcb6(N6_no1ek~SL8I!bONw&(xGO}|!HQV7gS4}?~OHj2Odrr%W12*cB06g8d7gCQi zl8*V`t|k8{{_!dma*nuK&%yx2%dTVc0Q>cE_0Xe6=2^&MpIbekNG8F!ag^4b(?roY zGF$#R3TEc-S7$!3A^);Ce~--@NKDE5xxNr1XznwGOJP{_SZs<}YzkPu8U?1~-MIK*Z>^w}3SdJ|#K?s~5zW0RWSpf(CPEyr3=WhW*QVbt45fNQh z>%KO+&2tDpr@r{upU(#my`!kQ(L9>@wrhFB1NO}MP)2IUllJUjm>x$OiU$i=huF=h2+Uu-!SnD*#f3xHRcN;i8bA=Mo zi5lBB+}yxD!cB*00M3jT@#@CP!2P;FEI0&x*x)Q4a)dRY*1kNo;M5e4d#0J@%L4+|Kz)O)oI;`2S6wYkm>ZbR?=oeO}qkoMVGg7g^{ zg-!=O2tH<>i6$JrT&75_qpGR;hCQe^hh35g-?~m@o%$y~_{rc)dWl2K5!7pwX35*8^f^mw#X|D&XA6$FZuznkMu`WHe?LU6K zpUHI|ZUVm!|0WOwgL5g4^ho0tXq$B<-fmT17Dn)_D6-Fc-`bSFjl#PqxoAtYfPH8* zh+$fAqX#?>D{@;9Q!|59r{_8slkY7Z| zG>Av}_^8H7Z0)btQ~b-TEKU%`e}8GkY3bQ}FaFz0EB@_m7^SzCrL2h~Hc*_@dICUC z+BzA%>id$!KTqs5>I5;IA`BwrI7Js{wTLU_6mOj1kbl-W#T^6xD(M7$oYldev~wzx z*vM&}Qy6n9^Q2DJsVnn$oqx*w_jXUTJE=oNH-9N`ihfS;&VOk4MCMj$06AmkP4(FQ zdLlkL=?b!Kv}(O3R(`jlPLrHbdh<>ihMNu10^S_ER>lV^8;L&+y|+tv zKCO|9RsxUKpgaeH!}LOW&$2G18+qYl#7ef)iKARN8A8eSoC}mdDaGDzp5iJ0-Js4V zF$AVxWS)&r@kvPbS%~jA>H#goArlViDsymhhFiit(ymi{GXAun)nf5}ViMU;^-x&a z7s4gRmm~Qrt`Y|gR6cQQ6-1uV1$jo4zWjReQ9$o>fP@Td+Zh@Y(vTrVR${ zU`->kGdsU*dr$Zt4Hsl~-m2o(NR+Q>n$5I!ve_i%$dH=$$SZKXc{HGK_yb6w)slbu zOPhAeCwuP@r7AwqDOz`O3t(jgf%cp}@YztHGFn^Fo{*h0MTW2EG;6O~4S!e1q$pID z;|p~)Y8S}F}gi^9=3P!t~bFZ3b z%fJz{`IR#VDmGdZ`1Z*anf4_dC_E^rIri9)J7{*s z-NqoRjssakrIti}@j{lw#Ag0}hxw;^j0c|>F4lKE%?t6Kjt3TcA1WldKa0}L-zDa} zF)VfqIrK9QKXsMuc)u>qj=vWWz&R)GvY>BHRe79fTbp@QsuJHKxp4QGm^EZ2zw%?6 z9x44tj}T+llVE6_KA|Z;|7+HRhk&@2*RQ*KbVMZ^M=3q`V@JAT$|~QoM#Qn&&IhNE zu-m-Z=ny&O2+G~8N!diY3C+hbQQlb7n-WIX0)M|ZE&*JL0jBU6OW(Qx_X1&4{RXb^ z!Jl|(`P6PKB(6Hj>`vf9wj4zGlHD9Z#0;BI8(@XP;Y|6g)LiFk*)$3#Jy$zl4dl*` zvNEnQ>*mBrIFD`ZNZL~&#iikn%Th^TC{(z)NNozox)~r5nPuAxa3=pK+S4T0u{(i@ zrn!({wJ?=mRqI&HIkm&#zEwDzP#!Bl>Z1zc=je!Br+x&q>qwd2m^{hf69TPO9wd)J z`4?;UKB+ZU*7lowo{=<&d?#b$?8vjvrvcr6wl?F$=~^foUNRml$9r78~ZX zq$ur)0%XeL!}*F=bw=AEr`rGuD=*X@eEZh-PeYx+MP*s9i8k5iWm7Jm4o$eM`z>JN z?Qed{0Miy$9q{eOum0Nlo3Gg1=d>3yV~uR}u0dgXt<_`CHp?bmR5uhbWB-fB{t(=&6iVd ztFNiWT##JwRzJ*d9t0dlA=wO`L_;IWjRbW|Tf|b_7e;4Y4~<=AOC4%rUpne@eR&|& z6RQ?!2ovMyC8S8V@ng>jbh^}QD~YICHE4HZL~ z*=wH17`6#gGSOo`!e~n5o%zG5gU=!By+=5A<%9<$ia(BE~WHKkfCx_KpA(Ps`1>HJ<+GT_$~e)xv<IpzmJo~N8#-Z1mQ)@QsB3$a_1Tm8{zs*GwmH%?Zz4hb7&e(K1HOQnsjXYe zwF)`fOEC{5ID8p4^i|T<`(dih%X6VWEZt$#5t0zH(@3_l7TK8@#*!sVw)dRw=Y5v>EiijVZ=!2>!K_@hVX5Z(vC_70AL~Wnq_H1i&%zGu1ZM?gUc~(?KQAua;>Om$b z`U*pLbXYx3a~ZNp(`67U@6YMx0#xO_k7=n*G}dPuH4$PsarSQb>YRa>DSWOplYp&X zLGFI1HkzBX&Yx9V^Z>2IZd6E-U59@d3m^C1h%-$6l4y{!f9(Uthhm+1!}vKTCw7>Z zggSgowK=Mc+@W{Kz1d$Ez%}s4{Z<`7y`_D?1iQ#weiTd0W*%~}k_!HozO0?1r6vwX zjHb;5hEgb$xQ ztkI^rc6`9BP++}~KTA4b1hfM}o#9gtdLN_yT#|JJ0rZXH5i#n<%eQN3+)3O=myPe& z-${-ot~!apsB`a~|G;OT#wOLJMJa;(cNWV!-e}y4`7}f3kypCyLXkCeL78bNnGUKf zjNw_?LNMs;Y~cIP2}35GXQQInz|2Q-!U!>{gYvGNC>{oHSvsYLsiSvQhmWMN!8Uqq z!njky^To$IZob<-PLksVw5@`$8!DihQIRsY`N$B{^8ShKfGF<8nO$-Q{%xZ>WaidB z9fOUq11sHOEAIw3S`ycJ=rzaAchArDR_Q&@VpT(FOrWv0@+vq6OiQ5Oc{WaHCt>fg z4)B+r%NvdxY z5B(62kH@PZPoGz`UQ06J7CgOG41uq_VLg+9JBe3iMCOBN#aS!iDo zf~`@xmEK)@5WhSn=+Ue=_)JDRqt4z*4db`Qb@qkG!=QnA>S12|qNsYc<6c@u+!T_# zMSwnSvb890tANn8#lDUWxutWFw7=1d65Md zgOE&DkW0Aw%~Zmu=x30jgrk_oy{|%DqgV$9lK3s~Uss;Tu0KAa6kF(o_1QXlOxLS2 z7RrqyD-Ql)_{6X(3kcNeJXt>1Mp7tWWjd^u=93Y*inR1cj!3EXQyv6ju=bdEOdkiS#!EaXMI;Z3jqq*ctt|hqx$LLvHS)#Cm1@C3y#M>Tu zd1twa5Hl0KcDn;XmPa#ExDylJ@z%7?-@AZLI$MIZjV2Pl`D~j!0H_>PO@68K*-;4j zIetSmmWb}P6Q)x<35XnN`U(GiVfL$skjGP5)cqB;dpVsdB!Xw&xQl$%YIE$#RMxN@ z@#f{{NHgaOPM&weZV?Oisd?Mvsu63?eLeh4BRP>&tCzoxt_Rm;Pfy*MvOBIbK z+@53U(PQ(~jIdJ+O@{<+m=C2fgHQwJJ8P)yeVL{G(3G!5IPfz_^AsPyVG*G68^oir#W(Y`X1f*1@9?+} z_Z-m!9S#bJV0k_Cmbw2NHe{A?u>o^9k9;JWYBjiYE+`CTocRS``RfD@k&Wd3?i43q zL%4@>R(7}QuCJ>&mnRMOJX*s?=GuN)Z_tj@By9bgOkw}0OUNfpD{c;0Y>pi`WD#f3 zrX4Q+*Ukq_k6IKd@ttnyXcG&P)WGbiSRPAPPB<(cWBp|$Du)3dIWe=Ms~h!xXX9P* z#n|%!DRR<{3F(pvOXnPtWDo0Bl!Xp&poFil@kbxMIF$VcK$O%oX9rd`#UA1e-3^l# zm@a%-0}1omx=9~Le8$J!LQR92Bh$hDYFWZH4Lrm$9@s<=8u%xw!%*L?OV;1d?l10Xx1R0x)AaLl{L5rnq1@5F+GqXJDYdU8 z;&zW0b-egB%>7*Y%omw#6J%85uiGmci*j{dIZ-vlBRB_SJ#es(94N5QiEfcfl80_?`C|sOijjCz$SvmWPds`R9ewHANiEABU?IdBam$y!Dd@7K~d~K3RNs@EBg7u{6|j# zfLqOWD>EJet!QRWc^(9YGx%V2-az9>ByLYO(hR3HUKV<>DWK`@HJi#&U%pQFkoS|F zaLs$reNSTa4lQVzHd)_R49fIper>Kffwx*9x~W?`=ozwY-DZlF{BgqLWe@G4=LoWu z3A=lnC~<2CFAMM$Kek)Ub=114sQl`Y8JjPl+as-jb^cR|X0C9wBkgMZL;GC&KL@Ei ziAA`28=aGQk5#>PuGF?A@3VKn=VVk;;$d@jvf6!A$@N2p<&0R2HC-cGNFX*WxtcK4 zr7B21+tkxGl@h>Y2RfIs2%&KgJsplEvA8`!qBGHbpS=L@QM=Tk#P~psi8-(X$`5ky z`)uU>1_Pd7it&XiXWy7g9og&ts-UL+y!xU7t!=Rot<{6x`#U4&fb5Pb+sksBJX{Ni ztG4{}5+9D;x;B>LWQWrlDnn(gJ6|e7XLhH*`q8|3@7pD5V%y4w_Elv3y6a#5p|@bf z;{iC~pHG_6bX}yN1ME|9hxmR?_u1fewrgqdZHOtsip0Il^kqDc^(^*%R&epWUUQoM z$8cNbD}C1zHpr8ntC2^bG#fd@!V`G;gfW4Leo#5mC2MrIaP0GQRaZ%Y5vw#k4FEue zN_td2;-g(5zu~;K2y{L_wJXc5KkW};p7{1HBr`6b#G_2EDSS`D3}n+c^Il(&L)#ndME6?xr5kL2v~+!bIpb{Z|bJ zv@u-+wk;DH!kRNIP0#v{Vci`@Y#iQPBwc9*)tGvvD#zb8HNQUq6)mufe`NhV`3!KR zQI+;t4ahLHUy7~dgYpsr?y_u*$Vp$*M}yg*nI&N;AB0ydw?DhNl*K9*Qij?3enwt} z2tU`G<2tW^@JqKVxsI)hP5n;tEFz=GYv%ieT3iTK1fTYC6HVI9lRs50MMN1vKt^&p zp)Q{^RR+Slksv#4kz90WbqnBm9Rb~6#nhpg_nKMbnB2E3{)cQk>(i5lhW-CO)Uq8k z*Sv(ykZ2-$t=$6ar{d-Yat!eGD$6w`CAg%+ z(uUe6Uw>8LOkznj5dm11NQ*>34&xqNj9@T6MAw$0)t;c+WjLC3gxfJ+A;9dt+$fKE z1D-&bsxSQkg$*p+4xQCD+=J;?7uv%lB{ah~q%BS-UFt?&nDCo3!(tudi_j>>f>L9E za)HeB<-tUIhqp=tr7XpKh9f7aU{o+EA(0&%{dg}9^)8K7Oa$9<9 z`r;lJt;Z%MDF1Q`ZB$X&jr=c$_;Q3tJ_?ib;~igsd-KS+v4Nmz_lj;`BI&-D;v&Aw z0{JM2Faw4%@lK1g!&^>Jidzoq{7rxSX94toepUWn0Oe?-|4R4#xp)7A0LrQ6{!Nwr zN8R&3d++}uy#5T#e?RlD;_N>Qum6$4{Kng%;${E|7?1R4TBbg_+Cob0$#pC-c5MUB zAl%-L#Wx&C+TK3`A2YtQZEnt0#J9ZFDQ;TJw1l19E2_O`Qw_-0iK>$)#6Fjdts9_u`d zIcX+cQMS2OwY?%Y`PILd?}sbL;n~pydlaynlNkvHr-60A$$biz<_f9U)AO5N`4xGr z&pS6twu^sv_WRhED}z`b3~~Q4B4}4^X!x!Ahs+yb4h`h=8~f<$mumZALuwb^QdhSq zv4;*C0P_=#&E*n&rds&?naLd2%?lh%ql2X7)v+`wojDiE44K?qQ4n7D{`?v~Q@JiR z39wObX?E>iHA@Z#JilFgcW-B+nN+tyYbi6W7u|##jaKN)kJ#+jyxzszunZcLb62;3 zTZ(1*OmPS_?2A`E`2~j{37bac*oy9){N%cII+56UcH8DGaCr3H0Dt;)lH`?V5pSB2 zI@^yfuNc$8!qMedGY8k5df3BOYZFxYNyy6@CWua2SZ%>|?T)0OKn3@yz!etpT6Yc0YJ#Z~L& z?vsqChWg9V3V(3tbYj8_vvnEUKU_a`ym(x^i{EopM{?VB%N;jA5L8)6fw_M)p)E~v zO-gV3;t=EaQ3hh1vCox7?Af!Y!$N1kDKw$Zwdgtu4)N*Io&3r91}@QQzlAA4xHt^? zd_Qo-u)49{Q&Kr#AQd^Bos)NH*+lHy8nBWu_ejIp7R&*}^ulxyGc`z<><3A zVKviV{9|U+0Ji?jEfvQg)h3etTS?enXLd(WRXJsKgYi^?+vLb_DO3Bmer7A|T1?LO zhV812iKeBg9Em;(7ciF5ntWAwfi~ztw#8oVdDRoRtLA%ezA{B5w33XcshFozI-QKjS;Q3J*q1tT@4Gx!C z-3GG_Bh3x13&Jk&(Qo_kLd5NlpWl^uBI?Tgs9eLA;L&dv&Cb7g%sK%3g&wcF1;|*? zG91kdIhT@?ZKFity8Z3RaZlbm<#R5*HrS*RJjg5bAd=hb5o*d?3j1r9-`6SB?z|15 z+!-@5>%uKwpc(U>D8;={LFgJ-i`|&Nyc-XE*01c16-ZI5{YCcXEwKZ&zj&ku1QrPH z{9O$6%g+xatLJCprMJ$^8%ACPIO7>nr^98dar>&)7>+TGrnFN>(uAN!t%>yGpIP@x|AhW`-Al8Jke3DCG_#6le=%VzykytvbMQVHtDsEPxGOJrTvGn7f8sRQ<~kzDX}!S`b(fR|W`+}l%Z!X2i*N;df2z5jK(90DQ_6CQ*h zxp!V23Ujp3e4v0?O8>ca>C;c(EtjKPDUcQ!EZ^>^UyNjBq#nE6bf6!tV~Vzid=PHO>nNk!5yVj$d}EmV zT&{t{jvZX4oI3)PubXgh=iAd25p_c9A2pwFjQWf7Sk<=+1zX8F5vEVt$4@*k*Sq|> z&0t-GoH5Demb6#J;mun@^2RF7P_9YiwsYN~oe zplRWO{e+wCc2U^xLNM&<7qZu}k6ze#9j})qCMHyWtU0(327Ho)J?Ruv_bcVtx zl+L>htR~_?(LnpH*?l0)eE}X7%CU_`YV`Sy#oSDB8Kvp%E*rK!$r!Zzf@b~bvEG)> z`F7*nF&BRe_I|>0``bscn!t#R!1t76ft1C%1+0Ev%)}J{=a$zH=n2gdWCRZd7MeL{ zB5*m1$0%GfMdE8f@4y`-cch&3!&*%KyV30BzlotH1Vc6;Cuv_kscfUG`EAAyyTYeU#mg9>i009p z^_g>G7r^n+0)*X+&n(fX8sLQ0g?25&PTub@DYP2c;^WOMrAjlJ#T7}8+0WcF`vXau zZz@ZV!D~Baf(MR28*kCzRH+lad5j}H&yCD%70{&e2ND{OBLxC&-3%a{C^d?V67^?Q z5P3%srvL8E4gc!eg}>hC@b47Cfx+6}U;gm3y8h?o5C2q0|5>E}KVAv(|M}bgysqL) c$HsQMsMC za0zqa!o?B7tH7DG76>))MPw(d?Ren=$xZy<#ldOsqYD@AUXYW1_R?(1_` z8T`X-)MXd^PO6aJ6y(4s(&wU|fi(V;QN{Ee|9#5?f1X@*`OmMvFH@bJ{`2e4O@0O$ zXQ%(%EdBQ{%JX;p?>GN{d*fkioS`=spC^+b$pH1`?7JA<>F<$&fq@-2-%A$v2TStY zyLXScfel040Gtd2PI3JE@IPGTA#ON(;LF)v|2q8AAB=zYzr4zZ0TKgl#wQFsfKT)v zhyUR!J{8~rAbXM!sfT|b0;!xm`;V*mO#iv@-&g-b=Kn*{b|((~Lz}n48OU843!$z1 z;qC_!-*NP!F(BNOIox-?md;>z-*(Mey?SY}+gcZBTuKjo+eJSA=^_YW2rol9i#E*R zhRhVN3&LD%jyBPd39*nAAu&DdT`McaerB#SwqMVyw7F2!9^-qm5A!C0dN0$Hy1z~rx^%ko-8~S^tOzcp#3>?vm+R~hgdu->$!Cf7pLHOQ@Z`I(^g{8ngf)*r$n61iz2j<63 zbu&dG#^dqa`xpsj8vQ-mkUy|HI@gWm%)2v@q0o%AkdIA>)%z$X_6t+(Fxt0 zp_G|+RDvE=m)oEZ7agO$^x|riUMVTMaGySC5s1z4L8sF4S$0qF>!9 zfHtaTD61sxz$H$7Nz%o;cUiymui4>E>0asgbcdbQAMtOvK*}YvWa_F^K5Mjs{+BnV zGmSDfr*JcNm}Y|ZQxI-Nea^ETj~bvl7S@kTalvED?aa+(*T-`I=ctNzjlflgJnG9!Jml zx&Ga^v*Q#zQy34gqiJh>4r6xLfjY#GEB~Vr13x_chcV$l8!}yo$HW^T8Hh$g>CjHdWx+|LfJWP7S1hPc*}@ToQ6NPh{Z}e||onoQ;WR zr!&th;9tjI`e}h_1$>s)+0=7xBWKgn+50rlrzrgKEf4$*#D>9F;@PZpRtx_=2AUW@ zi=FqKvzPt9PIt!t<^Nyl@)ThKV`=s!qOcBR;j;;Y*eMqFdp=x(dvHZ5k@tah!$@37^mE(Vl{ULBcGfyce63O*QW<(Z{#J5m zx%D&=b+pq*!kX&V#OwIOeSJWtdCU-6(er8cyHRsf!~RTJzu(D6vKcZS*ioq@$sR?%uXCJ84y< zy4?GQ3p13f9Nr{iIm|{|(Bxg0=iBI}$8Dy4^N^g`zg-}=NA|4C6(^*L8xmQ4YxGDE zakf0#x5!Pq(giDQiVM3}sV5(8NI;3!4d@u5=jW&mRw z#cBkT)Lfuct(S=B-umwritzS=%TABjaGlK^(ql#X&3;rVj4;91Ki-vE@H#kd2%~)a z$Us^Gp9av0=5tR#*et{9?Jf?wOnQ^KmLPir?UNy8QLYm~{_z^>y_KD3%cF(5 z1&hm5HIA(mlO5#DO&`g`ZWMbwT1^FGSGgE>k>M^YH<6pe`RdsgARFY11#64PE%tg(R zhp2R)RR-O*P+BTPAT)UXXMwn<2Ib+ikB#BT=V=k+-1-a_%UTJO;k!ReXFROh1q!Y9 zT=y<6#oDY7DNC^9#M)!heNJlD`70+PnPoJl+uSy{+8M)b+O~{bG;ju+)oKnS+PF+&FQmI91c zyGnNFmWH-_wi;{RAlsIGJ3X!PQHb}LF37ePVH`d^F9yOcP^boKkxo7il7MO65?o5W z>_vQ<+LA&+!rC&^;Mu+})cKp?gLD8>Dxv#v9&>o$ZWE`^O$Tt>sDV{4+o|icyZN|V z=Jk0TyQU%Z)!VAhHhXusRGYWQyQ75 zv?$@eg?Wm%$CQS)K$p_Ef7G!07uR1G34CQ3+=coCy919{*=H@0+U9BGqCYx3J;IfQ zc8=G}rZZoZKyOy=>-{3vT4D;~&5ZoUxOdU}^z&u15CpYNr^6%2`sIo+E~kg%jEOvZ zh0Ubm_g%yah{Wk1kBaU*3n10DH4)F+Gp@nD$lle5=rfnEtCuqmiEsH*%x&)^#_*46 zHN?^lvIJUY_a_<|&brB=d~ISYzi^2?Dqri(&g3zpOnMMMQjZkmVuir^}JytXD? zu<*tf)H}e`6#7b(o2vNQf+RfFbdssCSU$gEb4;XY*rPZSU1~s!LU%eXTYsmwW4L>* z=h3E@|8eet?%6sFI?-|YUh~g*)!zGwbT5U77H2>A68U)hf+Q>`z~MK#jznYLWvSiu zeMcb)T8(VFcziG)#zFf)&j`EN6aYPp@lB)f@)m|-7f)zKc|v2R9x0M8VA;gy-rs%6 zfqRX0Ao^D2RSypm@kx)q3ga_-VJvyt{OhNE&5fvAU~1u@9QYFJw$1}Vi)m)tnyh;> zA!&Stizm4BQq?`4#)Er(Jj|~`4Qg|ZTf~Me9)>#gB~tuVJxFN2`tDnG6ES7FTGS+{ zcz^LqM-XqeTW6AzhECNAE<|9-CQvIo(roep4EYWk4Gkb40Z$fD-wzXboyGgtfYE*T zXXuZydo`Al@W8hWd!l<1yk(D0Lp1KmVxMq0J4Dih>4J^2w)&+=xsU6hxWaiDIi%@T zc&h7UetCF*WEUbL(k&+uEW*LX+D;&XagR9Rsv57i)P0dCR`ZQ-y2C>j9d9^oZKj{= zp4}Y7h*}Q0S84GyLp#HKW@nyw?IPCprGQoJ)Fa+>Lz=9Q@!;4sd}EeB_coZPZh6&Z z*}iBgshsQg{+-7cT`Od>*B$O`WiAS*O~U zVf|FfEqanmPp1O=bGxTPY8RWd>u(vvbRBI4?Z$;it3|aP@w)R#Dzgte7_rEjd`szTFQK?5$wBHH_uHA%Az2#4 z%pH2Fd82!(DdxQoDX4Q)D?=+e8JXics1U@=B`Y{R_fE2q5Z+vyi;=Q65do3q_c6PZ zMQS%*fF*~XP|pU_=l)errZI{7N(3!2OI&=N1@d#ay2k~+HW5zUptyJ~#Dh7jmE*!U zzAH)OCr9KFoE+WHJei+$aAm)?FnryR6-JNnuxDg?5#0x=STvblWS;WvbK#Rj;#;Ym zGDRo9vM4$MC8>}=;4P>>V5zY@RQp`MW>q>M2x&}%(p=uzW@2DW?6SKf%w1MQI_`5? zy2AS_BEJ90Jq%rZ&77pW7IS{(zimx515O~Yd||Qs>zVK%NJlC}!07aP1(^~KU?qx2JV;i5XK<9}W0s z#nx9U()x$?rr1)t?AcE9<7$xlRkMoB7VaLXrrKzS+Fo!g&-rg!RA_jdmPyFUffTA^CPsh+^YSkc7{ zP&zrr>t!r2O{FV?qFc{^Ol*<-2o7|q8KmmPEzCTgzmQ{qctyNhE+;)9G1!6nFiF6H zb{qjbK0`uuIijep` zsXMl!r6Ja5|0?h})`k!03(eA=niL)zOtY((G;dA7YtlagLo3T}7)OOK2&u6={QHh3 zA+0dCW^G37ygcYDGO)iav>&wIy{q;QlWGts8cRDL2i1*+*+L~{GU!AF7@mG2kZ*ZB z^4XClfr9>0WVexc1`k6=jm6if@$5%QE{l}$nqH8dUV%c7?>6A&o#Zmk;>I$DK$V(?_h-b2q%1ZyFKpKjT{ zTsXFj`tjDs{=S&LYM!7ZoXv<^!&;(MVIt*eK`i&9n|*RMT$1T&zhX>S^j#n?m$BaV zCQ-ZZ7IMfBJ!~`!IX|r6*DUs_+ovQBjMfVlcjX@DIl`M=I`@KJKZ0PrB|83~Cr6$kWb35M{YLrJTXwp@~GDi2>YPE1$eZTtKL(zkfwNVHk{l&5u#=PL2(xm;$>&IVDW_R z3aZER3z$z5Zo2F=Xzr9BHEv(}IxA|R`6#PD@a3p3XjM6qSN>*#5BPz_nBFqYgpN77 zV(wy^z-xMyu|y?ez3nCF=<`VpEyfjI?ri3jd}gs!U*yumr*~TCeLI$wANm+A1SK~_ znJ|UrSEe9QW~xftdUwEHc@0Z~mPF#r-#bKxF0>Tu*C~E^J#ah5rXTEdo7%nTR+?VZ zGUEd+PCn;p3ruNRMA?y7JTfO$c-FyK4;acpKVq+ekq2Bky(3p9?-4;8DhqBa9pcb+ z$_4EK+=0;VG#R-V?p{FzDS~>)3@K@#-g!lEm8n~9IiF0X@qm65UD8fR4-vcnZRq7v ztA`bASHl$DP00h^bS%k?VTBDGBtsg5aD;;5gK074_Sx_HUao3s=qQ2XBD*mr^uBRw z!T5&Q?eEE?D=4&@j6;Xp_@SeB?Z%A);$ofbkk^rmmP|MX!P!CX5#O{(_eo!5ruq+; zL=tGjynOa?CHcidS3O(l<>2;39l=)K&+nykIWDvgBlfN6H7y&)I$X4iLuoCP_e|wk z+(lGGz(bY0MTG2lS*Ex@e)T};wZkJR6LKoj4R`bt0*)&m6n>`s5>^r5!1yX`(|yll zH_iH#OL%u<<#k$`f0LKpVCIPk{WWp|(y#SlgbSH^p@ib`Kl8B*pA}LaACwp~2t8X= zc6j@8d5z2P4toB|M==Lp*@^?Xhi{dYK=tqkE=min3iHFG_jry-OP@8^eyv&@1Tnw- z#ytA!L2wi#Ff7{{-EHa8#sq)+9r9@}BW6w-U<-A=p;Y7on-XUKtsv{qH zpmA?8Omv`jShqRz@J(wD`(i^)pPNdJR?aAE%VY0WJQi~v0NR$ve0q!CcFv?l+?jfU zm7E%A7d{@EXGL1v;0^V`>!a4j?$k^&Z5Ed+O|OVjCCPWovBpLbc!#fiH_)Q$jhT8< z%8*2UXt|bje1jbPBJpbb6YzLs$B{gBDoG{usxTX(;FVOkU1`yQ_(qA*X^$UZit_fb zKW0mQIA>oI*Wdm=oq#c9E!!>p88gnia9+M)f7K>_cd|Ni??rbvW{8rz=O zkaKefd-j#qye0*~=u+mpyHa4w45(XzKIiOql ztH#ToW=RgjI`!pc7PN52RCDq@@}WNk3G?iTi0+Frw~r5bRqKNUBvyuX(k$~aDQ_p! zRNKuY5ifP)JP?lDayCRZDQN}0M7L|Wax@T>AHVl!eAQsC`@a8E?_t8#)F}C(xeA^3 zdz0CNLrdWyBDzF#W3;b(SpJj=_TP1nDSu)|MxoB;+i|h;$l!w_I!QHh2;B$G=JCTHc<|w-v zTVp*HXQv&T{N7ySz*u?-NfJMtuek)FPzg?z(9hwT^?$n|k+92CY~Cd{K66`I`;&J4 zSjFT2T*ae26a1*p#sMl=(xo>CLwbNJ0 zu+2DG!8rA^qW_vZH#k2QDv+gyN^^zWt}IO4`1 z)zYT(B5srMGz9us0$75_tkdwBasIXd?JZ}{t`#@x-1BV|DjqRVUzVa4u-0m|vCvLz z#E0nca#(jrKcsXEJd3VE{^LHkrIp;~qPq2?;#8p%^a?FdHF$-!REy+zeWFZie`C7Y z9hF8~RCBoc8;~I4p(m+TNYZ!%2f6CiuN=)l(GBc%C|H$3OvUgbn9yz@#;s)*w2pynkhcp`$(SvlqZHTUf;vQnjnrjT?0ubaSg9a zQVYM4u0~htO110STJWPSB~M3wyr1=_Eh39IbkSZ$R6z>hudHzLlJLWIKn4>!t>0ZsqYN6lV zNjrmhy$&Vu5510ruM8`PYokyWV?f00b_vKF^x*}yy$RNIuP@d~);s!jE`>tq^4(|SSZAw~oC)00Zy$!MbfrR98O52Vn!Tl{f-dr2^Kb5vI}ZpOHV zyJlg|Za!47#U1DY=b|{(`+h^WpV%|yhJQcs2J31}GNd;DzFNoSCPbat#b2E0=%n^4705a>?twRcBA*S`}=Dpby+(z(eud4x| zRryagvSFO=PTG{(kJ}<_-n2hBW_Tcdg+_d}gZYGYbF-dejD$C?=}7Y?kH{l0*XHY^ z;WiPVX2`eNuCCdLk7UGnwQkD)E$rgut1tD;y39raMW$LTa2_ulwS~~AyVB+f9Bb@g z=YnT{TqY$97u&YG)n75D!&kr6M$13;lRSWtA-DO7b^xGC6}`~eM?jF@)dNVkpp~<` zqx!5H#f*C^6jdcoWrC#*bHp6JWpGdd2AXw86|yE!k6%uNO$;fEQzELR0_eL(i4a%O zZxn@ge(qv?7Nlk!Sc4BGS_6c0TE2wk=`0M zU777Oq*RXm{0tdCDxMm6v}C{ZzK^^cE--pp2A^BwX~3viE8iC_ylisZE9hC_PP=5G zls#}5x7*~YXLQerZADLDvaPoV!n`Jc9t)X4wFjSRFQn5z{DEAeos!!)uaofOpHeEtouPW(x601HuHR zL(iVnI=N?ky+*khCiAqYe(+OvRODX|Fo6`A)2-GOi?{7fp7fI0q!LVgeT52tac|lE zE%T(GY5v&W^9=KePxORc!Uqi}$2b`aDJ6-+<;(*ldeY`*UQFLX-KU!Jj z@p{8pn(2;oz$&1Q@Hk7dmB^QN=k482hTM*iR$~EI7l_-0LpP5JF~fVPbUVveYjTK zJ}`NUyO}uxjeyYm-Ckkt=xd|3q2|HG+aEhC0zqwcPF61iV@x8sC72;Hch1Q&w4cf} zapha-w!A$?f(UBBr!=Z>j?VE*Q-#PIell{3#^wn~1geAP^yFBA1zQI%X6RE}6piiG z^ydon#D}V!hGuPPOA7zx+#B+l!K35n7C$)8{VSQK%8gO5UmD;#Hn@Gx*!jU`v$b2# z{FLD4$8S27R&S_Vs->`6!lQp}gHm6Q zQX=l|Ypa|puM9`Z(5X64?p7KV-Nx&#LhIk9=8x`Tt&@jybL;nKJnb2@+bz-xD(v}o z5FNF>o1vXm?vup{g;kS-QM7+7wbDOHD=Rwz9}HQqA5tnbkSWj4Kzfxa&ckYgNZH>m zSqRAzWM2*?7B}*U&8msJ_PA8b#dx)T0R7~loVe3hM%Ma1-17`Ls$$S;$`A;f(CeTn z0;%@tdcylri^RUPB;7Q)OKr@iW+%2D-@Rh#CJAE@r`>&;UXkt9%JQ(mk`(P&#}A7E;ggWkPj zWxY$94-yCzY(viH92E0ZOwg6P@gau}7HPCoquQQ@r4*dX{j%|B_lMxG^Epra;Rg0t z(`Ct>1C%WN#{ z!@`?Yo1m>W4Qc=6eQIaG-=#3+y~$-R(tb#>1}tW)x2s1uWT4EDPDA|4UyVTRp|qN1p~;Cz zkF!d2>57%u_{%6gb0L@&TrxAbIaTn#~4UGBC;M@=+cgt!yct;1#4}O@B0&7suN;_?Dp(oGd)#+e-=M>MuX{+P(PFol4b&WgBch4`PC!-KlB%@L7#SnP}jMP(0&S zsKvG~Q_+V zW8b2rkS%?sxzH%N{ZuRmC^Bc@tUNH-=Y7_kcH?KX+Ku37*GpD5&DJoi zy36)&5lxa$n`3}dG}u$yn`>CmaJ!AMoDUdQ0S_Jag0SJS*;eO=L#y_-^Q;2E7GOr9 zz-r=rsq!Qm4my4UGWr84{A+o0wv0NX>+r;3^p{I}CRN5$|=MaUU*^#4R{{AcOn-+_O@`EXKZ?S>1#M{?_o`M_7od1=o|h^Lx> z6#gtK4W#kt2!1hxr+3cI<9U=nYrb&l6NBw!Q$~VmDA=OqI0E&F%HrV?*h* z=Ux68;Bua^!%;7ZlkhIl-Qu$54YF{p<)&Kfv{aLyc)Nc*EY(20Fa5wvz7?Btf zn9Ja?BcLIHXX8zEmyxvFRzmZBk7ozqC#-!u-h4J0Bx@zp;P{*>G_-k@_&8z3$8X1w zh8E@6#^}>N239^+0ICw`OZaN!L`bHS%=ZWRw2gsigbOf}X0F$X1Yx2~_1kF7Zw!@s zGtoreL7VFlwakR!frpNp)$fqsCc$2td;Px$ar6vy3>&9!)!dG8G#TBw(amY$J@iH9i|8xWskdQ#|it{sYiLYHg)UAm8z)^a+%kZY|^FP633 zihPMY8s#E=k|0RGt)swt&spT^={C$X0gIX%fXaJwzg-E*f;>9qBuEWbFr=k2%=~7a z=?;sG+gvMw!DDw&-eIRX^eFDlyg~ErM`$k5UM_Zz@@#b}f5k(-ki+$2QP}Ge1c+Y_d^J;zL^WX(O z#*lLO8p5}sE`;s)>YyU)hrSEUTMHS=Eb;o&pY@eJY@MptckN50o>B+F{nETdH}>ri zIEpvztQDu9;{@i3I|>_EV?eq8Xt!c^OrX^r+7tUG#uDELQ2$7i?Sa6=+1cCn+14yn z(@%KAe(_oMu}L5ivnNK`?ztg;o4jw7Sjq$4buE{J-S^uK6$FO{FV5zR*T;$6^ewnp zSMJ2S)RVlDo_kEG@Ge23vAsT9;8$JDWY)^PsVk3Ro@wmf%BybiQoP4u<7QQq_>0(w& zG#$K`;LA|rFI|~DWZp+UnR9vl z1r$>(DLoc5b%@z9prJJdnOb&>ZQWvm=Wl5VFb5*0} z-!0a9(=2=Xo(mljl|!W5m+UG6uIXo9TjA5=k~Jy^HGu3w`0?ZW9~Ch9tRJP~FEx{- z=`Gdyf_seCbf>FBB$ZfFyBn;X`z~3FsA4T&oREJ91`JkljP~k0ST78uq_Fy@z>JXB ze#BrbiHXF>23eA8#V<6YHy6br1Qj}-Ymuwc7F}eQrR4vQS*39{cj~t1fg?-6<3bg*4je3NRs zw>frKIp&)HEc**9TLN{gpZV3y2dQSPy?2G{;r+tYOxdbpD=efYBP-ED1Y4 zZkFejYd8S!*b1fYj_GZIjoEu^R(rQp-D*_%|Js5&{tg+uUJ+CFJE7x=LvL>uvLevh zKtodI-8R(+m8$2m4owj+q|%p;#L?bvBWoP4$Ma?`{sK zXdVU^)%#z8jO1?{dQM}Cm`avXPm3`i=3_CaStd3`rt4+Is^z9*`h^F4t=M0}xR`4; znwep+iAu@-Dx2m_`&U_`hP|);o>{Kv_j5QZy#6}f{7c~Vxhv30?x79FyCDCVv(J~Y z_}Tj3Jr6*J0jC15l>Y1dxnJ<-{Mr2f_Y8jK7W@}8`yWpJ@6PkLtMZ3{JvUOkGygwx zLjD`<>VM&$k>;NJL-@%YsFQ!`;y|nX>-hhoi{rD3M{Un$aG;+5b$nKdf84YG0=qr) z!~Tcqp7GBAhvRsbhyOvk|3ZB6jrg}a`p2XBr)zpvA>QxJSBLXw0jSo{n(U^}(UwfY z6ALwU5vtMe6s0>Jfa6f7_7q_jI|B)q*6_&oR2s`P+} zwRS%aab$}CBrmH30h^>VAJtF-(m26Uf4rw_TI^iE825dqcFh;MH)B;IE?d91T3}Sb zRmFCU+o;D~OB!QJn%JsGj7NL;T#rOg6LydjYC@xEuk?wBs5B)PbmOoG!1 zJ?Wgk^73R~;*`q!Xsi8ey2S#u4m+O5tey`;bT1F*4@v6AH8OfrS0Y@Jt6%i4Gvk%C z0_=-=AVm^W9}ZhYudTY^w3D&WVoWsN@ufUG6b8V|=I2xfDu;rZ7deW{-%yLX^xS+P zm+m#lQ@`ESeOlX3Mk~NM<+&-Ykm>~e{S!C47;iY*M|o%pUaoUqyWM!QT96IQ_|nU? z!u}fa;S6v;fC>}W1ElB&+_3dhze;Q4wh$sbb~%LWFb)UlB*C}@kep5cUpxpi^xA5D zeh&lW>&&}`0{b1valHaIRWIcSzuY)9PxBU8ukG#wl1}}D?+%;nJ@rUXA{n*&-m(;fRJX8#5A_Vq#*62;urj_@?^*FIFW{rud1pTuT;KcMtC0l;UR z+|76+^4u@7`VO6~vjA#JC>20j$c`C~<0Tsw*`aA1E6^;~*m(k!y}!m0CB!&p=&FB! z8B&(t-2G?p!KYyIt!B~~la#+Nt!*{Pi{I{bK7I8%^bZR>{&mLZ*AJd%yyVW^un^S` zsCu&iKh2>lqepXa7E0LxLMbtY#S>iJSUg~i%`JZjyV>lC$666B{F;XJpp%37gTv$f zX(|z?@iYCwHseb>00TJ z>4fiAj(kGwkC&9Zc<&6~<|R%fxjNJcu*^-&;bK!?bK-Wp&EM|3&UlM*``9yBY$9yy z_=|St1fnYSE8VYrD0p#X;7z7jh|bX%^lq&@#-qG@GGXKuSpmGHlQG5=**D$Cd8pr; zCBIIl0pb+}yOO$kP6K|kHK;V316SS9{;F?v0qTAUBaFJ`cY=VxLfhklC|J)!&?A0n6dOUTDL3#Gs$F-lU;sc$H;kaj0P)gIvd?ia zh&9H*b3fI!>1)9^I#S_-&u+hF9K*$%?i3Vjh`e@uI@b~v5Phw9z$h;UkF9^4!{eW6 zUfV%-;~4?c!te+AZolddR|_QT6a~UqHR4R$=_?`FQ0D?-sK_kS0^Pc>(a!N%_<}|{ za4ZkG;47(HSlzU}rN%ug?G8w!zSjk{B$Ub~%M&y$*{hJY2)DuIv0}rRC`Ex8Hah5V zq_TU~j^Z zhX_Sa+eW+5h{;`z|4AnH>z$igwsD6`r+|D!U&W{%b00H*emlLZwcG~|E&^Ujc5QAg z&-F&#i4istS&QVaRYe7b?cmChHy|8lsM@+mP}A+e)?mmJ4wDvSQlhDu+O&&R@st2{!XYm^jB1W{3a-)>uTP>(>WqsF_#dl4_TuQ{8s0Tr^ z0ZBF=NY%Vw-A}|C0oK)4O>Kp_I=zt|)oXMMM;fr92TLtbDaB{MkOD_oJ*$ zP3saRnU};h2D&)hrcW0b+ITP*EEEcack|d8@B!Y$3w9S2Gi#4P9}?qIAE`BWvW4E| zS955t=Pf+y`U?g zH=(Mog6;OeF1vb;FFsaQP#}yA3KMwRwY~YhN0ug0o0{Cj{Zqg`TR;cYpFoU zO(T<3r7O&l_vN%Q*J>v{zEu^*g}#O-Qang8EntzVPd8-xq7TC^B}ctoT8mx;Cv4k< z!cpyHqu5OS+L%4@J<7fCTVS6ZX!eZDP+&h5q%x~no*;)!+(I{(B7QS~&Ulc}zA=@& z@-o;yGcVOkO*?=kI}%y=0Q1druekpDjYn}@LAH}QI|ZP1KBudlzn*=ZtCiJk96Zc5 zjs(xCdomqm&l`7dg>2e8Go9*-9QDTGsoU^_p`UWhP1wifqbINAmM0)9w^+9CcuYoy zsd$GO86+4Gr`{5g3#C)IUD-c2iA>HopO3P&BxZmeRw7mn>5(#kWQ;?X`56s%DO1zJ4Ua%r`BXnswCcj_gmOc1A{| z`EZDUsR`XhV6==hlz&f6X`=rPACmI?>hi_dBsSWaLBuQQ-Cca8(g71Ch;7 zf!4QH292s#!sFa~NFP|#=f{@`GfMP^Auuc+JIEwX@lMreZI zI18O?H-76FTxvlrr!Y0Hv&Pum06S?K+Kh~2d#eh;K2=HmLk6vj+02@^4qs^)oc7`%SFeB!E?Ch=ZjEcQt zc}eB=1hpvXna*tbntM?s3`4!5kxm_z(>YM7_9#CtOvPT6*}fmxw{cWBz`2Q%xG0IT zI0V0V;K1xW!1xYOfnN?@e5n60d*NMV(wx8Fg~!AlYjVpwk;>qruSDYULhj+ULt=z4 zDxzpD{i3TEX9ryxqLPnt9^Vfbqo$d^-y^FSHD8|=b(5KN3P7EigRpG$u-?u~ojpdr zX{NdQ!BM>)9C1_MNw@D>Spb^|xSOeRpAkK?v|7l(qvUM5GfTU^X{uJ>N>b7Fej#G{ zPC}S!eR0NQ5ceW}H-Rbdl}PjQL{-O8*M|h1q8~a$=idLyQcJb$ejiZ`K=1aLa8=An zI`p=Tdbsdm-a&}1{I!En@R)PK?)b0Dq=0DmY-mp0x9>K&k!AqiY2M{DzL!U0&Y(sl zpPjrqE-^TAcOiSGQ4LaO0kC_5#=L{F+RyEEKZ_rTt@}TLM&O1-?uy^+*wFdium>c%%T{Pe?*>UIA+*6+QujNT z=EL`|&WsABuq-_O=u1x?)oHr4Sn97&1Pn^D`5K8I`7eEJ$-R580=zu`U?q%RH&jWJ zHp4uI+dv+E@{};%ik7`5-`VcDL!KZvF-^Lh;8F=^48<_T;TIE|#)+H~rOHt@TTm@H zAW)!JW;uVWS0-R+KPrLuj=mh*C!?B3%O!TIE8uqpegbeA%>cIx7w9kI|1Us1ZHCE} z#<>2W&Ti9B=#)qy?_l?*FL#o?*%dndK!#P;0j;!mfk|>FFpu|32hKX2kO}}0Swp|A z$*+|}+VGQQ*2V56g8#Za+cie=KoICK50pb5#-lm7zQk^FgxU&L>~U#%>)nf z0a21tn@Z}{zzOi+b~gF2e7M{~kiG?U1UKzrqui>$k8a4S57 zDJZ`sXV5+noiwlgwG48<^|*pd(hzd0qXjUzTH6p}Xc?~Q!wrv7BF*Xuj}2AzvwEgV z=x24Gf*_$f^tWm-9ih@8UCgO;{Sk@vUhfrR^zND0L@1FuQ~-d|T~k6z0d5X1usDhmfQmzA}qxBwfik+>P>K@TB!A%$EG47moz;sm9r^WGhGQe z;}a7%Qrwj-<+hbP)q_JX>>xr`RpF^5;?61GD8R|uwxe8^BJcYTc*X^EBP>w4(Ggim zW9o^Qlq))v2V(^9GH|MAFG|{K$@I{&T3;z3&yZOiq@dMeDPsFgTYi!L_GF66SSTlJ zhB7y`7d?}BLtIPt9+@t z@+0a*bA|+&mRJrtplJ~DlbUQlpDHN>I0hTm0`HL6MH`f48O-Sr=~hPzwRp^4bqGsb5&L1!$20Plf7Ni@Fq!fY@G%}_ zplUYg%pC^M_VrT=@$cPBKI$mPvFrooONq`-}uO;CRz@%bg zr95Q!IxhxBbMvQlTw;x{2ghH&NgyCE9q~k|3uw^GqRQI8_>Nczw7|Em#25W39Z_$0sW7!PJ1e@FIQp2gKph(?>hxZ)~R) z_-AB1@@=x$*{RgQgUc!d8J{)conyxOb3OEyLUTPP)`6k70KH`-p zBI(xuMjl?uYo+lGsf6w|7Sxv5mA8#}w&Z6jNxWUFvk;_!u9rC$+x-em%Vswocz@je z>5_8g%c#R|8GWtXsT&DR(SmQs>X&LG|IA&tr5Z%(|JtL8i-qU3-yEg5W;>c`lW^O4 z)EWs?_v}ML95Legq-H|E8+z9Yw0~)yrSq}{?90_eB={QkdQsrZXof3^rVE~gk8C24 zVu};jU_Uoiy_?maMfE!lu`(afX$m!Fks2|>bd@*W3bsU{!_c2x=Bv~K%G3IDwih7@Z&o?eJ(WTdaE{^%AFfYNJUH2N5(l%e!rYu8j@^T2p|Mu2W#L3# z`IcVuC8Pp>hT+XQLjrxTsM7(4g%}Qs5IfB}RY5XM%qPL%(Yo!5`~H<3qMe*nnG1S< zN5}6m?gL+wFSne)IK^kaEXjl6@}D4&&?D zL`Q#3R>oCxa?iT88`IUm-g$DnJyb0-)dIA&Fa6zbG^PFz&Fz2NV*h^&*8UM#&n3eD zRHjtO=?`a=0G;r6nhO6B(JT*kj(#S}MYD_?)A`7s6uiIOeUb&_nAdrA_&2ai2%ulj z;<%+4!sEFEbHrxjT9MtMMK0H%#m2cBhB|qresbl=1!1ecQ!L&1M@P%UCLd*Y;uolR zg3xHWKZC^D09%j_2O-YHC%j@&SiOPYJZg&`f2@a>X#kpxi*oI)_s~|HZj;Aa5yjqw zClCC`-+^SF9kG1=>j%7)~q5@e~Z>`cyeJbKs`G2-5Kvs=k3E6)=e4RSFUJ)meizo+Zs?s)!#o?N66R_4 z9@TqER=0r|T zQa#VptmSCE3{G4%?P5j!_>Eh^<|EkA380O28Eg*B*Wl^lc5Fsms{0pu{ATU1{o#O^ z6lRU05wz8--U$o#tp*y*+6frVugAkOMlhH2^p z`%KX~=wtj2&BhhFBS2-_YKS-RV7H~Pro}>UV@2e5dd2_Z5j*ud@+vlH=oDv+=c{=o(NtcMxB*TzEuUOh2*^#4=qSCZ-7r*r!q#!qTc^_%GcU+`j=g;VU z@C@kK zm+>YQ`TYY=n}a9n@X8w?8!_O)->8>`0HHSvh)rA+Tvt9JWmW|z+%oO(o3xQgQ&ehG zBW_)P^~Np7Aw@y(MTMc9wBv7laKh zc^0|rm!GWx|DAyDv6+*2r=boN=R6Yu<4b{61NNA!18D$zsIQZLjN2zGD6Ew)fZGDF zUJTk2-2foDMnHEDzEp=|@btB*vS3_HGX<1U&$)U7z!WLRRFgK1!^K%ryat0*oe%&{ zy#6km&ULD!L@Fi#jao{!{d5}o*`fI2kXem3X%mjtrux|}-Ii2zk?ZEnmbgf4eL(eK znuYf#Bk^>%CL;UP9mEturLb_Vkh${uUMOCYcOgw=K~N(oca+UzZG!fSZhIRS@{bY9 zFxX31FRd2LS2l@c8b@w#h;FtZO=lRq4>HEN0ghfLKePEHn&b%2sK>L)NgzPDng_rZ z#4~au{$>XJdGcLIhdsA(D=l55t!?f7z>U>{LLC7$VUv!C197kx&0}dV>YvL0tCw?+ zXL|qR_^E_C&AoDqvJ_DAoRw3y!xfCmMjR?)9nYBX~5rvo%5@F0e z>`-h}Klhdy`+c@L=XZX;U%%h)JUWlx`D@=j_IP|g-+e!i@8|Qryk1Y!D5=%qGkf1> zCX^O{Ldo$dS6jBiQFlZz6~`{t3D2tD9|63-nv0y*CkIwQ^MYy8Bu`xYPrQkuacJNn z-$Hx`{-{XmoSj*%ZGPi+4)a3EZGANpPdkAX-kSWv+m(K`V~NeMDM%RQtbI$} zb`x7o(SsrGJ43RYk3;bbC0z}OBPqQg7^->voKrfK5?;>;^)?~?blQz)V;m0pRs*ap z_B3oDLY(3d7{$IYvI{8F-Ka$W+A)E(>7KbE+)3t1eRrQj#+;qdH=?=$O<{iExOaK z7lHDwwRWp1W;F}2Pp`ZP1ai0jo;EN=_!lL{6{ z{}^@CwHaZd%FA22mQP`|usy$UG-r2zkk_?Sw@)soKdz;lT4$D`Kic+(oHox+oJ$6d zhdMk_=cw6!u*zu?m{33DAwpJL3J@a~oP0`>t+O=1bMvTfs2e-eV8_u!g0bIwWT*5S zQD<`7PGo6-sn~YO%zPg>gvzX!Y{ptxzQK;wjKC4H4<7o@Ub2(<*bp|Y6!_pg^Hdim zAo-Kir*Wk9<1d}k<13_ske?7AO83ZZLHY}FaLhb0#&+@!#@PDQPSZPQCefw=QU=wO z#nsN34e@_-Tv^DZ%_k#&Qkcz^izvF3fkd*&%1`PQhgJK!twxtnHg%Y%I=JVqNxb8f zh*p=H11A3%XGod}T3dsdw|OR+M>nqJo(Uy)+7?=nsO|*rgd1Cmk~mSk?biK^BUzX9 zgBC%UHsp1Bvd%?BFD1YI#JHo_5u9tNVo6IXHHpr8BgJ5q=$FUS8KQVQ#3bPsFp}>e zzpedvmHR0fyy)ANAMzI|MX4TFgipz#@DWObNK)34d~={ghKjCAM34#bTFwun#rzts zmj)!^sB%$f(UDi15$g^h3{E}@tnUVql~7Q|rR-)$LX_4l-`;_d1#)$>!xecc*7NNh zvS>fHl-v_Bq{8(0hDA$VateM9Qsk1iXYbY&5xsa`ONIg~M(M=e<(hAw#%`ldDZNXQ z5p9ri)F=aG3M=h0HpaO3mE~zY=uF@b*NcZ#$!18W9@L@ip9uHvY%a~67o8%a$|5hf z_W6*zW6apnr$vm%gA47V%@UNUIzz96yUL&IU!iul2j%bG0ffS3iD!#72%&x5g{KGD z!7Nh54U@dc(WNaNRBV)vV+*97w-DjO`T2_?uTf^xOdtJ~_?!R}g8G}3zwb@0l}59V ztyXGe9w|2JPy5^iXPUPTj@YTZwCq_9?T@{{3Uf`_+^~MO9=#~1v{4BUs=QGu(}~O< zFxEQwgFmV@2g7>9KIo!eDqXz0oJ1B`ZfXygx}(V7Hx%(fZ4?Nd$#sF~Hb#J>i#0Id zdlDQ15KFO5w?i~8n_^tx;P;OS4=K_YvS<-C8(wSnv8`4>7-{`&oraHS2V56(q=FvQ z`QOmzdt|A6Y*Y6=Rz}xrh&6nab=mXf^tuLA8|`@QWhQf6wPzQGr}*pzI>D#uwReU+$-~fDJ(lvl@klaS_sC?qrN&k`F5ez6A!^m|?d>Ey5oQ zq}Y%Zo6gn*il%K2CAQZ4wA~DU?Fh{l%Nw*Z(1wmXB=rAG*Bi5aCH~ReYMFh+;5Ad= zaFjyWBL>FR53zk8rid{pOJ^1b2pXo(sm?+WqQ*(~v zlr)`Pl8+h`!0p?^oe%PX`ef1W-*O^7GG7 zJVEQ?8xYa|J|YOIz5x*h1Uv!#PDr2=eEu_*^m|8i*Bt^4UdS>riB-%neh46jjky_Q zM~F#E2(p{IU7pPu3gzd=7Ymx-RA)s3Zzlm)8B{wOE3d02Fr4^46(AI&>ai+7ltO>v z$DDXBrb_VbFW;X$QcHQ;3LJdVumv_bVcXQ)+*ITC7iqf3*7O>_t1>y!d9Rem6Ic~r zDEU-s+V(-B`YF0Gg$cug(;Lq#{ z0zzB`=&Vt^D<*(}^oG6hiWb9Z8*TDY1XkgfS!WzxeKC}KKlO0vF2jWx#^fU&aw~}i zPu~v0F^E-kI+FY0(voG>fJ4A>oq-TeKb>No zT6!-S-n7gafsw%R2P0L{%(rK8#}+@22h$kmG0i}8QNzh!2z6jbN~)^7@c?)=-$vmg zXg8Xf0JI)v;IcS}-3pCg<0PBaUL4^Z*S3jDaAp^t+l6l}v2452j@@wrro^X^2M zq>VF{K8lIRc0nKk9=o?stOYH??=uFfEz}X$6s;M@4^k6!N{9+Y% zx8U$ zNf^IzdsXQ=;gS^H`_X7>VeD?fRX^I?rj@#|*W$Wr>A-jL2vioX@tbVZ>tWEE1@3GN zc_M0Cb)5ec0@^ITYyE9rs0igo<@pP*&^#_%mK=i zmz?YVH&qx(VQ328cPRei9} z%6RV15d-|XP_TeLOJVk&&re~5ui6!wzFOw)OL(J#_ei!=55&yQMI6cnG4~mPKIW~Z zUe2|4Sa0k*y`1b{&RDS-O<6W#BoubK<&Kt!<%L^|0$cKaHmI*87U3z&5*wT~3Q1%$ zZ|m}*>o3INnUdxTE}rg2D~y(AKY>giv<2OwT9|!apJ-xBYJ!CM{qc6$px*0tm@)Zl z0ImzbxgmGE5{LGgC82$%WRwX>U7z7a;BA>&BcjiDtqEz%wYpC*zIH;!Dc3ONx{h0x z&$L3Nhx^k5uOQB=KEoNNH4Lv^>j-E#rN}0aT%EE4*>r>MB$14EyAU_Jk;JOp zmwni}xvb$CjOy()-aG~RJ3dv}XkWJ6UX_|E#`!JxQ35Qdxx2#Zpj={+1hW6>xsSbL z9&KH?i}wSky}9d<)zeCQH4R98A|%^cjs=NzmKO7Hne$Rdg;fkxO}f~f!?x^n2{_BK zu_cVkwDd1opWUVGOB?pU81E6gGS_s1n;x1!?`eDkl!vvT^E_XpU7iE-{j4XW*xb#W zcCK9sv&AoZc%|sH`8B64gOj2z0vxS*?kaba0*ap~Em8-L$n?M!Y+|L1q{N%yXiguW zb`0E|Wj7(;Ty>c9Q04c$9;bSjHbo2f2y2MAuKJGH>(2A5pseIJ?NROKuwiE*0@U2R zSHympWP|EiEu2EQ5r5sJzk}`kJ*R@;p9#19U(W&I^nd15_-#ZbN5RNnkB~nz;$L}k z3Geu?K3z{)0${9kqWV{YYpgCmRH(%jmPdub8qjVEBO-x?M<_l0?Gpr9f&fd9ya~Nb if{<4Dy-wS8j{oc!neIPP`4W)Rf3UK!Gk;)qB>eAKeWMou diff --git a/website/docs/flow/stages/email/index.mdx b/website/docs/flow/stages/email/index.mdx index 1064d8f13..a7751e295 100644 --- a/website/docs/flow/stages/email/index.mdx +++ b/website/docs/flow/stages/email/index.mdx @@ -25,6 +25,10 @@ return True You can also use custom email templates, to use your own design or layout. +:::info +Starting with authentik 2024.1, it is possible to create `.txt` files with the same name as the `.html` template. If a matching `.txt` file exists, the email sent will be a multipart email with both the text and HTML template. +::: + import Tabs from "@theme/Tabs"; import TabItem from "@theme/TabItem"; @@ -81,13 +85,17 @@ Templates are rendered using Django's templating engine. The following variables - `user`: The pending user object. - `expires`: The timestamp when the token expires. + + ```html -{# This is how you can write comments which aren't rendered. #} {# Extend this -template from the base email template, which includes base layout and CSS. #} {% -extends "email/base.html" %} {# Load the internationalization module to -translate strings, and humanize to show date-time #} {% load i18n %} {% load -humanize %} {# The email/base.html template uses a single "content" block #} {% -block content %} +{# This is how you can write comments which aren't rendered. #} +{# Extend this template from the base email template, which includes base layout and CSS. #} +{% extends "email/base.html" %} +{# Load the internationalization module to translate strings, and humanize to show date-time #} +{% load i18n %} +{% load humanize %} +{# The email/base.html template uses a single "content" block #} +{% block content %} {% blocktrans with username=user.username %} Hi {{ username }}, {% @@ -99,9 +107,9 @@ block content %} @@ -130,8 +138,7 @@ block content %} href="{{ url }}" rel="noopener noreferrer" target="_blank" - >{% trans 'Reset - Password' %}{% trans 'Reset Password' %} @@ -145,9 +152,9 @@ block content %}
- {% blocktrans %} You recently requested to change your - password for you authentik account. Use the button below to - set a new password. {% endblocktrans %} + {% blocktrans %} + You recently requested to change your password for you authentik account. Use the button below to set a new password. + {% endblocktrans %}
- {% blocktrans with expires=expires|naturaltime %} If you did - not request a password change, please ignore this Email. The - link above is valid for {{ expires }}. {% endblocktrans %} + {% blocktrans with expires=expires|naturaltime %} + If you did not request a password change, please ignore this Email. The link above is valid for {{ expires }}. + {% endblocktrans %}
@@ -155,3 +162,5 @@ block content %} {% endblock %} ``` + + From 2521073dba2c7aa62b14a0859c1e717f3aee2d30 Mon Sep 17 00:00:00 2001 From: Jens L Date: Thu, 21 Dec 2023 14:43:40 +0100 Subject: [PATCH 15/37] providers/scim: use lock for sync (#7948) * providers/scim: use lock for sync Signed-off-by: Jens Langhammer * fix Signed-off-by: Jens Langhammer --------- Signed-off-by: Jens Langhammer --- authentik/providers/scim/api/providers.py | 22 ++++++-- authentik/providers/scim/models.py | 12 +++++ authentik/providers/scim/tasks.py | 4 ++ schema.yml | 17 +++++- .../admin-overview/charts/SyncStatusChart.ts | 19 +++---- .../providers/scim/SCIMProviderViewPage.ts | 53 ++++++++++++++----- web/xliff/de.xlf | 3 -- web/xliff/en.xlf | 4 -- web/xliff/es.xlf | 3 -- web/xliff/fr.xlf | 5 -- web/xliff/pl.xlf | 3 -- web/xliff/pseudo-LOCALE.xlf | 5 -- web/xliff/tr.xlf | 3 -- web/xliff/zh-Hans.xlf | 53 +++++++++---------- web/xliff/zh-Hant.xlf | 3 -- web/xliff/zh_TW.xlf | 5 -- 16 files changed, 123 insertions(+), 91 deletions(-) diff --git a/authentik/providers/scim/api/providers.py b/authentik/providers/scim/api/providers.py index 546e62e65..ddca8cfef 100644 --- a/authentik/providers/scim/api/providers.py +++ b/authentik/providers/scim/api/providers.py @@ -2,6 +2,7 @@ from django.utils.text import slugify from drf_spectacular.utils import OpenApiResponse, extend_schema from rest_framework.decorators import action +from rest_framework.fields import BooleanField from rest_framework.request import Request from rest_framework.response import Response from rest_framework.viewsets import ModelViewSet @@ -9,6 +10,7 @@ from rest_framework.viewsets import ModelViewSet from authentik.admin.api.tasks import TaskSerializer from authentik.core.api.providers import ProviderSerializer from authentik.core.api.used_by import UsedByMixin +from authentik.core.api.utils import PassiveSerializer from authentik.events.monitored_tasks import TaskInfo from authentik.providers.scim.models import SCIMProvider @@ -37,6 +39,13 @@ class SCIMProviderSerializer(ProviderSerializer): extra_kwargs = {} +class SCIMSyncStatusSerializer(PassiveSerializer): + """SCIM Provider sync status""" + + is_running = BooleanField(read_only=True) + tasks = TaskSerializer(many=True, read_only=True) + + class SCIMProviderViewSet(UsedByMixin, ModelViewSet): """SCIMProvider Viewset""" @@ -48,15 +57,18 @@ class SCIMProviderViewSet(UsedByMixin, ModelViewSet): @extend_schema( responses={ - 200: TaskSerializer(), + 200: SCIMSyncStatusSerializer(), 404: OpenApiResponse(description="Task not found"), } ) @action(methods=["GET"], detail=True, pagination_class=None, filter_backends=[]) def sync_status(self, request: Request, pk: int) -> Response: """Get provider's sync status""" - provider = self.get_object() + provider: SCIMProvider = self.get_object() task = TaskInfo.by_name(f"scim_sync:{slugify(provider.name)}") - if not task: - return Response(status=404) - return Response(TaskSerializer(task).data) + tasks = [task] if task else [] + status = { + "tasks": tasks, + "is_running": provider.sync_lock.locked(), + } + return Response(SCIMSyncStatusSerializer(status).data) diff --git a/authentik/providers/scim/models.py b/authentik/providers/scim/models.py index ac27288f3..b43a59375 100644 --- a/authentik/providers/scim/models.py +++ b/authentik/providers/scim/models.py @@ -1,11 +1,14 @@ """SCIM Provider models""" +from django.core.cache import cache from django.db import models from django.db.models import QuerySet from django.utils.translation import gettext_lazy as _ from guardian.shortcuts import get_anonymous_user +from redis.lock import Lock from rest_framework.serializers import Serializer from authentik.core.models import BackchannelProvider, Group, PropertyMapping, User, UserTypes +from authentik.providers.scim.clients import PAGE_TIMEOUT class SCIMProvider(BackchannelProvider): @@ -27,6 +30,15 @@ class SCIMProvider(BackchannelProvider): help_text=_("Property mappings used for group creation/updating."), ) + @property + def sync_lock(self) -> Lock: + """Redis lock for syncing SCIM to prevent multiple parallel syncs happening""" + return Lock( + cache.client.get_client(), + name=f"goauthentik.io/providers/scim/sync-{str(self.pk)}", + timeout=(60 * 60 * PAGE_TIMEOUT) * 3, + ) + def get_user_qs(self) -> QuerySet[User]: """Get queryset of all users with consistent ordering according to the provider's settings""" diff --git a/authentik/providers/scim/tasks.py b/authentik/providers/scim/tasks.py index c0c074ea4..7b16b293e 100644 --- a/authentik/providers/scim/tasks.py +++ b/authentik/providers/scim/tasks.py @@ -47,6 +47,10 @@ def scim_sync(self: MonitoredTask, provider_pk: int) -> None: ).first() if not provider: return + lock = provider.sync_lock + if lock.locked(): + LOGGER.debug("SCIM sync locked, skipping task", source=provider.name) + return self.set_uid(slugify(provider.name)) result = TaskResult(TaskResultStatus.SUCCESSFUL, []) result.messages.append(_("Starting full SCIM sync")) diff --git a/schema.yml b/schema.yml index fee6b8d3d..daded5c6d 100644 --- a/schema.yml +++ b/schema.yml @@ -17079,7 +17079,7 @@ paths: content: application/json: schema: - $ref: '#/components/schemas/Task' + $ref: '#/components/schemas/SCIMSyncStatus' description: '' '404': description: Task not found @@ -40645,6 +40645,21 @@ components: - name - token - url + SCIMSyncStatus: + type: object + description: SCIM Provider sync status + properties: + is_running: + type: boolean + readOnly: true + tasks: + type: array + items: + $ref: '#/components/schemas/Task' + readOnly: true + required: + - is_running + - tasks SMSDevice: type: object description: Serializer for sms authenticator devices diff --git a/web/src/admin/admin-overview/charts/SyncStatusChart.ts b/web/src/admin/admin-overview/charts/SyncStatusChart.ts index 28747d682..d9a3cce6c 100644 --- a/web/src/admin/admin-overview/charts/SyncStatusChart.ts +++ b/web/src/admin/admin-overview/charts/SyncStatusChart.ts @@ -93,15 +93,16 @@ export class LDAPSyncStatusChart extends AKChart { const health = await api.providersScimSyncStatusRetrieve({ id: element.pk, }); - - if (health.status !== TaskStatusEnum.Successful) { - sourceKey = "failed"; - } - const now = new Date().getTime(); - const maxDelta = 3600000; // 1 hour - if (!health || now - health.taskFinishTimestamp.getTime() > maxDelta) { - sourceKey = "unsynced"; - } + health.tasks.forEach((task) => { + if (task.status !== TaskStatusEnum.Successful) { + sourceKey = "failed"; + } + const now = new Date().getTime(); + const maxDelta = 3600000; // 1 hour + if (!health || now - task.taskFinishTimestamp.getTime() > maxDelta) { + sourceKey = "unsynced"; + } + }); } catch { sourceKey = "unsynced"; } diff --git a/web/src/admin/providers/scim/SCIMProviderViewPage.ts b/web/src/admin/providers/scim/SCIMProviderViewPage.ts index 3998c7c81..d745ed55e 100644 --- a/web/src/admin/providers/scim/SCIMProviderViewPage.ts +++ b/web/src/admin/providers/scim/SCIMProviderViewPage.ts @@ -10,7 +10,7 @@ import "@goauthentik/elements/Tabs"; import "@goauthentik/elements/buttons/ActionButton"; import "@goauthentik/elements/buttons/ModalButton"; -import { msg } from "@lit/localize"; +import { msg, str } from "@lit/localize"; import { CSSResult, TemplateResult, html } from "lit"; import { customElement, property, state } from "lit/decorators.js"; @@ -31,7 +31,8 @@ import { ProvidersApi, RbacPermissionsAssignedByUsersListModelEnum, SCIMProvider, - Task, + SCIMSyncStatus, + TaskStatusEnum, } from "@goauthentik/api"; @customElement("ak-provider-scim-view") @@ -54,7 +55,7 @@ export class SCIMProviderViewPage extends AKElement { provider?: SCIMProvider; @state() - syncState?: Task; + syncState?: SCIMSyncStatus; static get styles(): CSSResult[] { return [ @@ -128,6 +129,41 @@ export class SCIMProviderViewPage extends AKElement { `; } + renderSyncStatus(): TemplateResult { + if (!this.syncState) { + return html`${msg("No sync status.")}`; + } + if (this.syncState.isRunning) { + return html`${msg("Sync currently running.")}`; + } + if (this.syncState.tasks.length < 1) { + return html`${msg("Not synced yet.")}`; + } + return html` +
    + ${this.syncState.tasks.map((task) => { + let header = ""; + if (task.status === TaskStatusEnum.Warning) { + header = msg("Task finished with warnings"); + } else if (task.status === TaskStatusEnum.Error) { + header = msg("Task finished with errors"); + } else { + header = msg(str`Last sync: ${task.taskFinishTimestamp.toLocaleString()}`); + } + return html`
  • +

    ${task.taskName}

    +
      +
    • ${header}
      • + ${task.messages.map((m) => { + return html`
    • ${m}
      • `; + })} +
    +
    • `; + })} +
+ `; + } + renderTabOverview(): TemplateResult { if (!this.provider) { return html``; @@ -186,16 +222,7 @@ export class SCIMProviderViewPage extends AKElement {

${msg("Sync status")}

-
- ${this.syncState - ? html`
    - ${this.syncState.messages.map((m) => { - return html`
  • ${m}
    • `; - })} -
` - : html` ${msg("Sync not run yet.")} `} -
- +
${this.renderSyncStatus()}
Update SCIM Provider - - Sync not run yet. - Run sync again Synchronisation erneut ausführen diff --git a/web/xliff/en.xlf b/web/xliff/en.xlf index 6b64a65bc..29f454e9b 100644 --- a/web/xliff/en.xlf +++ b/web/xliff/en.xlf @@ -1779,10 +1779,6 @@ Update SCIM Provider Update SCIM Provider - - Sync not run yet. - Sync not run yet. - Run sync again Run sync again diff --git a/web/xliff/es.xlf b/web/xliff/es.xlf index 3b5585585..3d45d2983 100644 --- a/web/xliff/es.xlf +++ b/web/xliff/es.xlf @@ -1660,9 +1660,6 @@ Update SCIM Provider - - Sync not run yet. - Run sync again Vuelve a ejecutar la sincronización diff --git a/web/xliff/fr.xlf b/web/xliff/fr.xlf index 6a1a04d0e..63b478d2a 100644 --- a/web/xliff/fr.xlf +++ b/web/xliff/fr.xlf @@ -2216,11 +2216,6 @@ Il y a jour(s) Update SCIM Provider Mettre à jour le fournisseur SCIM - - - Sync not run yet. - La synchronisation n'a pas encore été lancée. - Run sync again diff --git a/web/xliff/pl.xlf b/web/xliff/pl.xlf index 3032efbe7..3dbed2422 100644 --- a/web/xliff/pl.xlf +++ b/web/xliff/pl.xlf @@ -1714,9 +1714,6 @@ Update SCIM Provider - - Sync not run yet. - Run sync again Uruchom ponownie synchronizację diff --git a/web/xliff/pseudo-LOCALE.xlf b/web/xliff/pseudo-LOCALE.xlf index 4ba11cc6a..ecd85ea7c 100644 --- a/web/xliff/pseudo-LOCALE.xlf +++ b/web/xliff/pseudo-LOCALE.xlf @@ -2196,11 +2196,6 @@ Update SCIM Provider Ũƥďàţē ŚĆĨM Ƥŕōvĩďēŕ - - - Sync not run yet. - Śŷńć ńōţ ŕũń ŷēţ. - Run sync again diff --git a/web/xliff/tr.xlf b/web/xliff/tr.xlf index 798c86b63..1b95f3f75 100644 --- a/web/xliff/tr.xlf +++ b/web/xliff/tr.xlf @@ -1659,9 +1659,6 @@ Update SCIM Provider - - Sync not run yet. - Run sync again Eşzamanlamayı tekrar çalıştır diff --git a/web/xliff/zh-Hans.xlf b/web/xliff/zh-Hans.xlf index e616d5e7b..5d5a436a7 100644 --- a/web/xliff/zh-Hans.xlf +++ b/web/xliff/zh-Hans.xlf @@ -1,4 +1,4 @@ - + @@ -613,9 +613,9 @@ - The URL "" was not found. - 未找到 URL " - "。 + The URL "" was not found. + 未找到 URL " + "。 @@ -1057,8 +1057,8 @@ - To allow any redirect URI, set this value to ".*". Be aware of the possible security implications this can have. - 要允许任何重定向 URI，请将此值设置为 ".*"。请注意这可能带来的安全影响。 + To allow any redirect URI, set this value to ".*". Be aware of the possible security implications this can have. + 要允许任何重定向 URI，请将此值设置为 ".*"。请注意这可能带来的安全影响。 @@ -1799,8 +1799,8 @@ - Either input a full URL, a relative path, or use 'fa://fa-test' to use the Font Awesome icon "fa-test". - 输入完整 URL、相对路径，或者使用 'fa://fa-test' 来使用 Font Awesome 图标 "fa-test"。 + Either input a full URL, a relative path, or use 'fa://fa-test' to use the Font Awesome icon "fa-test". + 输入完整 URL、相对路径，或者使用 'fa://fa-test' 来使用 Font Awesome 图标 "fa-test"。 @@ -2217,11 +2217,6 @@ Update SCIM Provider 更新 SCIM 提供程序 - - - Sync not run yet. - 尚未同步过。 - Run sync again @@ -2988,8 +2983,8 @@ doesn't pass when either or both of the selected options are equal or above the - Field which contains members of a group. Note that if using the "memberUid" field, the value is assumed to contain a relative distinguished name. e.g. 'memberUid=some-user' instead of 'memberUid=cn=some-user,ou=groups,...' - 包含组成员的字段。请注意，如果使用 "memberUid" 字段，则假定该值包含相对可分辨名称。例如，'memberUid=some-user' 而不是 'memberUid=cn=some-user,ou=groups,...' + Field which contains members of a group. Note that if using the "memberUid" field, the value is assumed to contain a relative distinguished name. e.g. 'memberUid=some-user' instead of 'memberUid=cn=some-user,ou=groups,...' + 包含组成员的字段。请注意，如果使用 "memberUid" 字段，则假定该值包含相对可分辨名称。例如，'memberUid=some-user' 而不是 'memberUid=cn=some-user,ou=groups,...' @@ -3781,8 +3776,8 @@ doesn't pass when either or both of the selected options are equal or above the - When using an external logging solution for archiving, this can be set to "minutes=5". - 使用外部日志记录解决方案进行存档时，可以将其设置为 "minutes=5"。 + When using an external logging solution for archiving, this can be set to "minutes=5". + 使用外部日志记录解决方案进行存档时，可以将其设置为 "minutes=5"。 @@ -3791,8 +3786,8 @@ doesn't pass when either or both of the selected options are equal or above the - Format: "weeks=3;days=2;hours=3,seconds=2". - 格式："weeks=3;days=2;hours=3,seconds=2"。 + Format: "weeks=3;days=2;hours=3,seconds=2". + 格式："weeks=3;days=2;hours=3,seconds=2"。 @@ -3988,10 +3983,10 @@ doesn't pass when either or both of the selected options are equal or above the - Are you sure you want to update ""? + Are you sure you want to update ""? 您确定要更新 - " - " 吗？ + " + " 吗？ @@ -5077,7 +5072,7 @@ doesn't pass when either or both of the selected options are equal or above the - A "roaming" authenticator, like a YubiKey + A "roaming" authenticator, like a YubiKey 像 YubiKey 这样的“漫游”身份验证器 @@ -5412,10 +5407,10 @@ doesn't pass when either or both of the selected options are equal or above the - ("", of type ) + ("", of type ) - （" - "，类型为 + （" + "，类型为 ） @@ -5464,7 +5459,7 @@ doesn't pass when either or both of the selected options are equal or above the - If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here. + If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here. 如果设置时长大于 0，用户可以选择“保持登录”选项，这将使用户的会话延长此处设置的时间。 @@ -7970,7 +7965,7 @@ Bindings to groups/users are checked against the user of the event. 成功创建用户并添加到组 - This user will be added to the group "". + This user will be added to the group "". 此用户将会被添加到组 &quot;&quot;。 @@ -8051,4 +8046,4 @@ Bindings to groups/users are checked against the user of the event. - \ No newline at end of file + diff --git a/web/xliff/zh-Hant.xlf b/web/xliff/zh-Hant.xlf index 63ba2b4ec..ff31e2854 100644 --- a/web/xliff/zh-Hant.xlf +++ b/web/xliff/zh-Hant.xlf @@ -1673,9 +1673,6 @@ Update SCIM Provider - - Sync not run yet. - Run sync again 再次运行同步 diff --git a/web/xliff/zh_TW.xlf b/web/xliff/zh_TW.xlf index 376197f66..66c5d3228 100644 --- a/web/xliff/zh_TW.xlf +++ b/web/xliff/zh_TW.xlf @@ -2198,11 +2198,6 @@ Update SCIM Provider 更新 SCIM 供應商 - - - Sync not run yet. - 尚未執行同步。 - Run sync again From e9f9692c18bded7c2aeb76a4003f298f31292c92 Mon Sep 17 00:00:00 2001 From: "authentik-automation[bot]" <135050075+authentik-automation[bot]@users.noreply.github.com> Date: Thu, 21 Dec 2023 15:07:13 +0100 Subject: [PATCH 16/37] web: bump API Client version (#7962) Signed-off-by: GitHub Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com> --- web/package-lock.json | 8 ++++---- web/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index 5e48005e4..613bbf08f 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -17,7 +17,7 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.3", "@fortawesome/fontawesome-free": "^6.5.1", - "@goauthentik/api": "^2023.10.4-1703107046", + "@goauthentik/api": "^2023.10.4-1703166239", "@lit-labs/context": "^0.4.0", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", @@ -2914,9 +2914,9 @@ } }, "node_modules/@goauthentik/api": { - "version": "2023.10.4-1703107046", - "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.4-1703107046.tgz", - "integrity": "sha512-XRu+VB5DRI65yPesv+8FbJHY3bY7rvJYAlSXk/doTelbmSEy66u+omh6QlAW25fwcKHQz1du40W/dUQTI8zF4w==" + "version": "2023.10.4-1703166239", + "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.4-1703166239.tgz", + "integrity": "sha512-iZRqh3T7VAO2n2Mw2dFnALecqqSYCADIdHsUmmUqctW2DXXJq2qWLQsYvFKsKD1fp0mfzTTcusR1pReyZUV+eA==" }, "node_modules/@hcaptcha/types": { "version": "1.0.3", diff --git a/web/package.json b/web/package.json index 37de7a270..d416616e5 100644 --- a/web/package.json +++ b/web/package.json @@ -42,7 +42,7 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.3", "@fortawesome/fontawesome-free": "^6.5.1", - "@goauthentik/api": "^2023.10.4-1703107046", + "@goauthentik/api": "^2023.10.4-1703166239", "@lit-labs/context": "^0.4.0", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", From 7778a8fab230d0a27566f6ea02b90480c304ab54 Mon Sep 17 00:00:00 2001 From: Jens Langhammer Date: Thu, 21 Dec 2023 14:18:36 +0100 Subject: [PATCH 17/37] release: 2023.10.5 --- .bumpversion.cfg | 2 +- authentik/__init__.py | 2 +- docker-compose.yml | 4 ++-- internal/constants/constants.go | 2 +- pyproject.toml | 2 +- schema.yml | 2 +- web/src/common/constants.ts | 2 +- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.bumpversion.cfg b/.bumpversion.cfg index f78e67f49..d679517c7 100644 --- a/.bumpversion.cfg +++ b/.bumpversion.cfg @@ -1,5 +1,5 @@ [bumpversion] -current_version = 2023.10.4 +current_version = 2023.10.5 tag = True commit = True parse = (?P\d+)\.(?P\d+)\.(?P\d+) diff --git a/authentik/__init__.py b/authentik/__init__.py index fc368ceeb..0c651c834 100644 --- a/authentik/__init__.py +++ b/authentik/__init__.py @@ -2,7 +2,7 @@ from os import environ from typing import Optional -__version__ = "2023.10.4" +__version__ = "2023.10.5" ENV_GIT_HASH_KEY = "GIT_BUILD_HASH" diff --git a/docker-compose.yml b/docker-compose.yml index 68e7530e7..a7491656d 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -32,7 +32,7 @@ services: volumes: - redis:/data server: - image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.4} + image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.5} restart: unless-stopped command: server environment: @@ -53,7 +53,7 @@ services: - postgresql - redis worker: - image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.4} + image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2023.10.5} restart: unless-stopped command: worker environment: diff --git a/internal/constants/constants.go b/internal/constants/constants.go index fb12db690..806dc131c 100644 --- a/internal/constants/constants.go +++ b/internal/constants/constants.go @@ -29,4 +29,4 @@ func UserAgent() string { return fmt.Sprintf("authentik@%s", FullVersion()) } -const VERSION = "2023.10.4" +const VERSION = "2023.10.5" diff --git a/pyproject.toml b/pyproject.toml index 519dfee67..7c1af2c59 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -113,7 +113,7 @@ filterwarnings = [ [tool.poetry] name = "authentik" -version = "2023.10.4" +version = "2023.10.5" description = "" authors = ["authentik Team "] diff --git a/schema.yml b/schema.yml index daded5c6d..72d68e5f8 100644 --- a/schema.yml +++ b/schema.yml @@ -1,7 +1,7 @@ openapi: 3.0.3 info: title: authentik - version: 2023.10.4 + version: 2023.10.5 description: Making authentication simple. contact: email: hello@goauthentik.io diff --git a/web/src/common/constants.ts b/web/src/common/constants.ts index 459fc91a5..7a95056ef 100644 --- a/web/src/common/constants.ts +++ b/web/src/common/constants.ts @@ -3,7 +3,7 @@ export const SUCCESS_CLASS = "pf-m-success"; export const ERROR_CLASS = "pf-m-danger"; export const PROGRESS_CLASS = "pf-m-in-progress"; export const CURRENT_CLASS = "pf-m-current"; -export const VERSION = "2023.10.4"; +export const VERSION = "2023.10.5"; export const TITLE_DEFAULT = "authentik"; export const ROUTE_SEPARATOR = ";"; From 2ccdfa433a0bfadea1bd4f8ec404e20b2789d792 Mon Sep 17 00:00:00 2001 From: "authentik-automation[bot]" <135050075+authentik-automation[bot]@users.noreply.github.com> Date: Thu, 21 Dec 2023 15:30:00 +0100 Subject: [PATCH 18/37] web: bump API Client version (#7964) --- web/package-lock.json | 8 ++++---- web/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index 613bbf08f..40d7f1777 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -17,7 +17,7 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.3", "@fortawesome/fontawesome-free": "^6.5.1", - "@goauthentik/api": "^2023.10.4-1703166239", + "@goauthentik/api": "^2023.10.5-1703167718", "@lit-labs/context": "^0.4.0", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", @@ -2914,9 +2914,9 @@ } }, "node_modules/@goauthentik/api": { - "version": "2023.10.4-1703166239", - "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.4-1703166239.tgz", - "integrity": "sha512-iZRqh3T7VAO2n2Mw2dFnALecqqSYCADIdHsUmmUqctW2DXXJq2qWLQsYvFKsKD1fp0mfzTTcusR1pReyZUV+eA==" + "version": "2023.10.5-1703167718", + "resolved": "https://registry.npmjs.org/@goauthentik/api/-/api-2023.10.5-1703167718.tgz", + "integrity": "sha512-waOv19FH/HA59TH8uqiCVbtDfl8Hhvks56RMcpd0/coPdJmnEBSWaPGMCEePZRkogaC5mG9GYCPbUwJoR2hp+A==" }, "node_modules/@hcaptcha/types": { "version": "1.0.3", diff --git a/web/package.json b/web/package.json index d416616e5..7e11928a2 100644 --- a/web/package.json +++ b/web/package.json @@ -42,7 +42,7 @@ "@codemirror/theme-one-dark": "^6.1.2", "@formatjs/intl-listformat": "^7.5.3", "@fortawesome/fontawesome-free": "^6.5.1", - "@goauthentik/api": "^2023.10.4-1703166239", + "@goauthentik/api": "^2023.10.5-1703167718", "@lit-labs/context": "^0.4.0", "@lit-labs/task": "^3.1.0", "@lit/localize": "^0.11.4", From 6ff965f697ef4a7512cc94320d0ca7f049d5a241 Mon Sep 17 00:00:00 2001 From: Tana M Berry Date: Thu, 21 Dec 2023 13:48:56 -0600 Subject: [PATCH 19/37] website/blog: Blog about our tech stack (#7954) * first draft * add image * Optimised images with calibre/image-actions * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Signed-off-by: Jens L. * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Signed-off-by: Jens L. * edit formatting for qoutes * merge conflicts * tweaks to autho links * new graphic * tweak graphic * Optimised images with calibre/image-actions * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * Update website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md Co-authored-by: Marc 'risson' Schmitt Signed-off-by: Tana M Berry * remove old graphic no transifex logo * change image name to bounce it * image * image again * Optimised images with calibre/image-actions --------- Signed-off-by: Tana M Berry Signed-off-by: Jens L. Co-authored-by: Tana Berry Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com> Co-authored-by: Rebecca Dodd <82806852+rebeccadee@users.noreply.github.com> Co-authored-by: Jens L Co-authored-by: Marc 'risson' Schmitt --- .../item.md | 164 ++++++++++++++++++ .../tech-stack1.png | Bin 0 -> 171110 bytes 2 files changed, 164 insertions(+) create mode 100644 website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md create mode 100644 website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/tech-stack1.png diff --git a/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md b/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md new file mode 100644 index 000000000..b1b7dab31 --- /dev/null +++ b/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md @@ -0,0 +1,164 @@ +--- +title: "Building the dream infrastructure stack for a security startup: preparing for human and technical scaling" +description: "What's in our stack: the tools we use to build authentik (and why we chose them)." +slug: 2023-12-21-five-lessons-from-choosing-infrastructure-tooling +authors: + - name: Marc Schmitt + title: Infrastructure Engineer at Authentik Security Inc + url: https://github.com/rissson + image_url: https://github.com/rissson.png + - name: Rebecca Dodd + title: Contributing Writer + url: https://github.com/rebeccadee + image_url: https://github.com/rebeccadee.png +tags: + - authentik + - startups + - infrastructure tooling + - tools + - technology stack + - Loki + - Argo CD + - Prometheus + - Thanos + - Transifex + - Lit + - Redis + - Grafana + - authentication + - Authentik Security +hide_table_of_contents: false +image: ./tech-stack1.png +--- + +> **_authentik is an open source Identity Provider that unifies your identity needs into a single platform, replacing Okta, Active Directory, and auth0. Authentik Security is a [public benefit company](https://github.com/OpenCoreVentures/ocv-public-benefit-company/blob/main/ocv-public-benefit-company-charter.md) building on top of the open source project._** + +--- + +With great power (to choose your own tools) comes great responsibility. Not inheriting a legacy toolchain is an infrastructure engineer’s dream, but it can be hard to know where to start. + +As the first infrastructure engineer hired to work on authentik, I saw the greenfield opportunities, but also the responsibility and long-term importance of choosing the best stack of tools and build processes. From my past roles, I already knew many of the considerations we would need to factor in. + +For example, we know that ease of maintenance is a primary consideration, as is the stability and probable longevity of the tool, how well the tools integrate, and of course the level of support we were likely to get for each tool. + +In this post we share some of what we’re using to build authentik, and the lessons behind those choices. +![technology stack for startups](./tech-stack1.png) + + + +## #1 Choices are often human, not technical + +If there isn’t much difference between two tools, the choice isn’t a technical decision. It’s going to come down to human factors like ease of use or the team’s familiarity with the tool. This is why we use [GitHub Actions](https://docs.github.com/en/actions) for our CI—[we’re already on GitHub](https://github.com/goauthentik) so it just makes sense. + +> Familiarity with a tool means that you and your team can move faster, leading to higher business efficiency and a happier team. + +### We use Argo CD for GitOps + +When I joined Authentik Security, we were using [Flux CD](https://fluxcd.io/). Jens, our founder and CTO, had set up a small Kubernetes cluster to run an authentik instance for us to log into different services (some monitoring tools), and he was deploying all of this using Flux CD. + +If you’re not familiar, Flux and [Argo CD](https://argo-cd.readthedocs.io/en/stable/) enable you to do GitOps: whatever you want to deploy, you push that to a Git repository and then synchronize whatever is in production from that Git repository. Everything is committed and tracked in the Git history (helping you to understand what has changed and why). + +You also don’t need to do anything manually on the production servers or clusters—it’s all done in Git. This helps with auditing, as history is tracked, and you can easily find who made a change. You don’t need to give access to your production servers and cluster to whoever is conducting the audit, since they can see how everything is configured in the Git repo. + +#### Flux and Argo CD essentially do the same thing + +Despite Flux and Argo CD both being good at what they do, I advocated for switching to Argo CD because I have always worked with it and that familiarity with the tool meant I’d be able to work with much greater efficiency and velocity. + +Since switching to Argo CD, we’ve automated deployment of new pull requests with the `deploy me` label. A developer can add that label to one of their open PRs, and the changes get deployed to a production-like environment so they can test those changes with a real domain and real certificates—it’s exactly the same as how a client would interact with those changes. It’s especially useful for mobile app development because instead of launching an authentik instance locally, you can test the mobile app against a production-like environment. This ability to access this “test deployment” is great for QA, tech writers, technical marketing teams, and anyone else who needs early access to a feature before it even gets merged. + +#### Setting us up to scale + +Argo CD also comes with a built-in UI, which Flux does not. This is useful because as we grow as a company, we will have more developers and we want to enable self-service and a culture of “you build it, you run it.” + +With the Argo CD UI, a developer can make changes in Git, view the changes in the UI, and validate if the application started correctly and if everything is running. There’s no need to build another tool or set up Grafana dashboards or some other solution for developers to check if the application is running correctly. + +“You build it, you run it” in this case isn’t about operations or infrastructure leaving developers to figure things out on their own. What we actually want is to empower devs to run things themselves so that: + +1. Everyone shares the burden of production. +2. Developers have a shorter feedback loop to see how their app behaves in production. + +This type of choice is about setting things up for scalability down the road, which leads me to our next lesson. + +## #2 Build with scale in mind + +Our founder, Jens, has written before about [building apps with scale in mind](https://goauthentik.io/blog/2023-06-13-building-apps-with-scale-in-mind) and [doing things the ‘right’ way first time](https://goauthentik.io/blog/2023/10/26/you-might-be-doing-containers-wrong/). + +As an infrastructure engineer especially, it can be so hard to deal with legacy tools and solutions (sometimes you just want to burn it all down and start over). It’s just so much easier to maintain things if you do it properly from the beginning. Part of why I wanted to join Authentik Security was because there wasn’t any legacy to deal with! + +Yes, premature optimization is the root of all evil, but that doesn’t mean you can’t think about scalability when designing something. Having a design that can scale up if we need it to, but that can also run with few resources (human or machine)—even if a few compromises are necessary to allow it to do so—is oftentimes better that having a design that wasn’t built with scale in mind. This can spare you having to redesign it later (and then on top of that, migrate the old one). + +### We use Transifex for translation + +Internationalization isn’t often high on the list for open source projects or developer tool companies, but we’ve been doing it with [Transifex](https://www.transifex.com/). + +If your users are developers they are probably used to working with tools in English. Whoever administers authentik for a company in France, for example, probably knows enough English to get by. But that company’s users may not need to speak English at all in their role because they’re on the legal or finance side. Those users still need to log in using authentik, so it’s great to be able to provide it in their language. + +We use [Lit](https://lit.dev/) for our frontend (Jens has written about [choosing Lit over React](https://goauthentik.io/blog/2023-05-04-i-gambled-against-react-and-lost)), which supports translation by default: + +- With Lit, we’re able to extract strings of text that we want to translate. +- Those strings are sent to Transifex, where we can crowdsource translations. +- We do this by marking strings as “source strings” with just three extra characters per string, which is not that much of an effort if you’re doing it from the outset vs implementing afterwards. + +Native speakers of a given language can help us polish our translations; this is a great way to enable people to contribute to the project (not everyone can or wants to contribute code, for example). + +## #3 Think about product-specific requirements + +As a security company, some of our choices are influenced by product- and industry-specific needs. + +As you’re building your own stack, you may need to think about the requirements of your own product space or industry. You might have customer expectations to meet or compliance requirements, for example. + +### We use Redis for reputation data + +Most of our storage is done in [PostgreSQL](https://www.postgresql.org/), but for some types of storage we use [Redis](https://redis.io/) for latency reasons, as it’s much faster to fetch data from. + +We have two use cases for Redis: + +#### Reputation data + +If someone tries to log in and fails, we temporarily store ‘bad reputation’ weights associated with their IP address in Redis. This enables authentik admins to manage logins more securely; if someone has a reputation of less than a certain threshold (because they tried bad login details a few too many times), the authentik admin can block them. + +That data is stored in Redis temporarily; we have a subsequent task that fetches it from Redis and stores it in the database. That way, if you want to keep updating the reputation data for a user (because they keep trying to log in with bad inputs), we’re just updating Redis and not PostgreSQL every time. Then when that data is moved from Redis to PostgreSQL, it’s compacted. + +#### Session data + +This use case is more common: with every request, we check that the user is still logged in or if they need to log in. Again, we store this data in Redis for latency reasons. + +# #4 Your choices will cost you, one way or another + +Of course, budget is going to play a role in the tools you choose. You have to balance your investments of money OR time spent on your tooling. + +### We use Loki for logging + +We talked about this in our recent [post about building a security stack with mostly free and open source software](https://goauthentik.io/blog/2023-11-22-how-we-saved-over-100k). As we wrote, [Loki](https://grafana.com/oss/loki/) is free, open source, and cheap to run. We could have gone with something like Elasticsearch (and the whole Elastic Stack) but it’s so expensive to run in terms of processing power and memory resources. Loki isn’t as easy to run, but we save on costs. + +> It comes back to the idea of “you either pay in time or money” for software, and for most of authentik’s tooling I’ve already paid in time for it. + +## #5 Optimize for stability and support + +Infrastructure people just want to be able to sleep at night and not get paged at all hours (for that we use [Alertmanager](https://prometheus.io/docs/alerting/latest/alertmanager/), just in case). I just wanted to set up things that work and are reliable—pragmatic reasons similar to [why we chose Python and Django](https://goauthentik.io/blog/2023-03-16-authentik-on-django-500-slower-to-run-but-200-faster-to-build). + +These next tools (all open source) were easy choices because I’ve already used them and know how to configure them properly and what pitfalls to watch out for. + +### We use Grafana and Prometheus for monitoring and metrics + +[Grafana](https://grafana.com/grafana/) is widely used and comes with a lot of existing resources, so we don’t have to build everything ourselves. We use it to display our logs and metrics in dashboards so we can view and correlate data from Loki and [Prometheus](https://grafana.com/oss/prometheus/) together. Prometheus scrapes metrics from our infrastructure tools, authentik instances, and other applications. + +#### We use Thanos to manage metrics data + +I used Thanos for a large-scale deployment in a previous role—storing something like 20TB of metrics per six months—so I knew it would work for us now and later as we scale. + +Prometheus stores metrics for ~1 day before [Thanos](https://thanos.io/) fetches them and pushes to S3 storage for longer-term retention. We do this because Prometheus doesn’t do well storing large amounts of data. We’re also running Prometheus in highly available fashion, which would mean storing the data twice, which would be expensive. + +Thanos compresses the metrics data and also does downsampling: + +- For 30 days we keep everything that’s scraped (every 30/60 seconds) +- Beyond that, for 90 days we keep only a metric point every five minutes +- For a year, we keep just one metric point per hour + +By retaining less data as time passes, queries are faster and storage is cheaper. Why keep metrics for such a long time? It gives us a view of the seasonality of traffic so we can do better capacity planning. + +## Final thoughts + +This isn’t a groundbreaking stack. We aren’t optimizing for the latest edge technology. (The only somewhat controversial choice we’ve made has been moving to an [IPv6 only](https://goauthentik.io/blog/2023-11-09-IPv6-addresses) network.) For the most part we’ve gone with options that are tried and tested, well known to the team, and play nicely with the other parts of our stack. + +As always, we would be interested in hearing your thoughts about the stack we use, and about the tools that you and your team have chosen and the reasons behind those choices. Send us an email to hello@goauthentik.io or chime in on [Discord](https://discord.com/channels/809154715984199690/809154716507963434). diff --git a/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/tech-stack1.png b/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/tech-stack1.png new file mode 100644 index 0000000000000000000000000000000000000000..73a51715b5407f8d7a16acba4d6495a21af0cc9e GIT binary patch literal 171110 zcmeFa2TW93*fzQW1r$FD5wZ1T?Iv&C`AOEK?J0O^g3fjks?hH&_O9GU8UCn zqzD4idsBLm-eKlnn;8U;- z3s)g%HyVQWwC^GZEg$Iw0>D4JZ7%89K@c4m{2z(pRn930Vuutj$Z0sYk9QT>c8JrW z`+}nm=%I_`cjxTsmt(oW@`Z($<^7IO(0KpymEAcV2R@QcRI55lIyUR1>>6D)#!)h{ z8+SAHRviWm{{8$z;2#425cr3{KLq|E@DG812>e6f9|Hdn_=mv%EdssgXHIrs3Y_~| zy=F^7c&K-830kVuS=rXXEF$+>i@QvEUxAuIM`mANaQOO_!_-5QI)O3I=4aGKJB+n) z>H`Q(oK7u1dGNTC?M<91T{)3;Sn$bRc(<C8Ley+VxlXWieH0;)4g(tyURdJB!eVa*l-G z6`&_H%O-U$a4819w%$p(Z$L}<9S4!xo?sq~pr>MBjCQ*l>j6R|GN$sB|G)>H5=+Iv zx$dK_Q<5?A!o=}a0?!ZwraUDUpzEICeWES(?w10@ZttfejEXvGBtG`xA{erp<*r#X z-KI{`ayQF#7%E@q*a%0x;8eu4;=+n6M<@vo^~wb14o3V*=VJ_hiq5hg3#HQ{Vk^{PmE6FiiR8 z&9axeg`A4@v{fH;BqoR`1cl^^3yIyPrvYN|^^gxLULp)f-mUbdCoc}<9J%pggBwJ6 z06pq5qaMiVa)5|?)H#1X1vTl*fidREg2ir|&F@vMB2wNRXQuK51}yGAK(y!;-{8IdolQ5ejuHSyGoRIQ?cfgx6;Ad^}ZijpN8W8vPZlX)P|CYLDbOlh~YI!yQpypIUZaf0X zJ`#jk=#UbP#(#SmApiBZwnwUfxfEYu38T?_fJ}RlfP>&YBKjc=FA9NUxdW{~Z3?0h zL&aEyt^2MCu>Uk~`B?%}ZLIp9KmsfD5tdNo6IUv2hUy1mV{YZd0S~v_Q+EIvM(ymq zOz$)aJ-sR(hcn0%feak_q)OH8PY)5=oi!PF851vqpw9hyRPdD^(X^QU2L(#MTcdg+;{S)?C;tZxaJZo7>6O3JF+>Jf$AcvF6bujLte>BfvhJE!0u~Z0?&8LXr#wkCPQ1JNxR) z6kt_01{hGaS__()Pg|3 zIXY{SS^K>Nq1^^Io^(ynni&6bP?XR(t|*q`C#rHoJP}4#H_fs>>750kt2M~sRSmNS zaKNv+SV9v!yEPtgs*lhf5>RU=v`y9IWSq5?=1SPYmg6Bs( zDu-TY5#9Qg{p@J#n;4*DcYcs3=a9(<)Pu*DDut}mmN7aOy4REx7l9LlJ z89-D;z#_taYzh|7ix1;=lrSx!wQYt0{h0Gjc(47xhf+FNI{fH`hf=Il_2-?PxlK*r zCX{MA8*&~@(wr=xG$kaax3|9{w5Od#xSS*szqg_`Ar7h@#riiLqRTZ6X9!fN(xg@F zDEt6<#`Eha@uGugiS01;5(Plr_ZGCkS1t91C^`gttOZPmH-0vR$DS~p9xDf{UUn7F zraJYIC}C}5dehSf8#La>z9Wuwj#CM$WjP6ht?U2{9Yka(Spo+&1As~-uKC@_x2^UJ z#Y{qb{HXhYA`5}x>mrg3hFW;Gt5Y#VhK05=Df|>ZurdZpYGZ_vQ%qwGB2HN_vL~9W z6FAhyiS3jTq6l%l4NWMJ4w^2vh)5x>XO5Khy@l0jT@iV;)!r&P(!9~Gpz|t4@*@!t zA&d4j`wjBy1tf{8sNdr;!-Gu$59DD8(=CH0CDVxysCCvRR2ISX6*}v$Nf4x2yU?P= zLwyKVe{dzU+4U|_7#@po_g`0F^K-DFS=_do+ui#%nxk3K9+&OZei4;==nzyWt^q3* zri+O?wbc$HiG?3Vy)k{cIEctqvItTJq@z=6v|o1;!*6#4_c7*;k^TDH`K8%MZD5$0 z+<@2`Oic@mypUm;Gv80NLeB`$n+(=_=bgS0qP+?lJQDp_xPbs)A!6bpJqZN?5J)!j zmIE-J*Ha+Qp6~SyL;>C3nI|0FX!L&m&WWJok{?MJc#aB7_>-NNOc?ND*i5Nc$dQ1? zNr-?pI*JMl2H%E=*;9@I4F>;~;r@SQFoL*2H`!+DtlWTy97*6r6a0_y|6icqU-_)s zG{>(wM1kW8ZvBkF~WLs`;1LmfIOZ+`fgD5msG@$1T+fKM(wB7~@7w zcXaGqWcuwU#V4R3D(vO_LV7dF2i`_<{lns6GGVgRH=Wj7zEchfshR7 z5LeU*=oG|Mxvucry={Pdlcipr6e35GBhP2|T>9;-AWCjSTBGZw&^O3}_n$KVEVG#~ z|37xK;FFLc>VJ-mvj4@&4T=8B1BqsC-UZmm!P^4y#Qzdg^#4nEQ2j4q`@cjW{r?h7 zKL1OQ|39hnPyGKeY5tA=c-JqX+0i>qHLBDh5|V#gfn4&hlu6~>|KF5MKUMMHEGgU@ z@K+Yba{QGT(HH+pyd?gAxi1;(wp{Dp1SSs8>uJdep9@qXghW+x+=p|lb>BsRq6;(L zho2Zjbs6D%TJVdDc$9;K=5mmSmpLdkz$_xM#SD8JEPURx-Cj5EbjY`y>58j)=EQbR za;>(__X{g-=+|R|eW+u}6#~hzaAqeT&)Q1%^6kF)jvQ~?3*1h%uqxaXVt6!ZCsZ`k*KEYJJa>p(_gUZ@spA$O+x~P8}($RIO zAGQtsv$!BHYVX&0mkK`WB6tS;!?rdy>r)9}b#J|Ta);Z3bs0PnlR0i<@?hkmWcR{6 z_4!m62gyf0eq+b}PzFmv?>P}W7U%`0RG{E?Pikc#iZzT^KPupGncc0a9 z+;kz zXi%&t{S{fM4TVh~*cQa2>g>kC*UF1LQ#Oo|`g1Ei(W6ENI8x7|q${kO|BEE@hfg7` z?GA!g-dL@%E)Pg_W^JCF+!`-)`87145ceWd#nK~er?$Wl8R%?FT40s*bL>U>xOL(?n zmhpb8cpTWLXi-_I_b*>#kZGGKz+K5-5wrSl>|6=6y2)Z0-k+pVNbf$+k(5b)L~7{9 zTy&}@&7g__-n7o27BO#P{`X_>*4L*sr@5xWzOm_vn@x2`QdDHlj^S_k6y1~|8pgWT z^VgZp6nn)xxf*pAxx5gU65%;_y4ifbHlm1IlG=2pOX;G^UqQd8u2AJ`-{qT$?QNxR zdge|K=YRz`kMxdQ&pJ%Rf8$g3$coyiipy=`!AuXS@?bBd{wtY%xLL3`1`$?>A?dOM zX5EM(_8d=H!zIm%^vGeFMDrQ82e`<;veo^FA2e}a`dSv79nOx)n4WnvmXikp#&Z#< zBJ8s@5A6WkG0~t4IPtJkt<-DZACNoz1SI%Zn&e{aV>o3Kxl%iHXR#&YK zmShX8Bfv)R>8B4qsV#@LbZ-P_fz-jAq0KdwtO&@$f~(Ith4SXdhE{3~RQsaFfnThz zVMzX)&}4-XGV9mJI|_kwjrL7WSA^iw!EPzH&Gn3>Hfyl$0;Z&G=|xsJf?Gdy+4SXFMH z=68IuY*2BrcCK`iUS2wTjs9Lzd)wDS{OgUhx4jnH@iDnU$CTp87`KP5QBRrGj^=*( zA_|jdxV_FO{5m1YZL5=Zy=BAFqoxJA%5ewZ4ESL)s$~ohZ0NtV;4}RCcbR9X-QH2S zqNbA*KN&r@zjg4MbkDlSUnz6PmHLjt43&a0uxXUA;(3|v-aLkw+O2D!ZfPuRY?Qw) zAmmfH5IwcO^{qtGAoW46KhnEGN@ON#KwjqZUHQd#{rg+teZ&6_NeatErMsA}Inc+V zsILNlRDQMPk3QG=tnqMO(Vn&O!Gawnxw_hC+ayqk&09AIE~r;sa*8wvlwd|%l_)xZ zAMCrgB=NR&FZ`Jydi*Dv0VLDiP_f*>+cX6jfh9f;;>6SCE)Z|EImCH{5 z9&~g}wCjshYXzmYa2zhla(!N40G-5^mK_f%KeGM32jX)KW2LF#J)cUSO zm8x6R?O;zco>X|}HgX3*ExA*=G0Sl$<D7a=D3Q?fMQr~xKMJzP?zLAdDh!UTdC4BDVO?u_zPsYui z9{PJ(7}PgP?G#D>2Ve4d`?1y5wCJ}CEt@F-yDPE7{^tb3M-i_B*E90WIbb{W(9S50 zZ9VhIsDo+#PDj54IGRGAkWypZLZt|xa&T6i>Y z+qB{2f-ZLEmB4OUzAZ!bqQN=R!?StsXG0RoJg{Od9zCF1PUeIjNvbin{)YI-9H!x! zqfK3t=0If~D7i$J% zt&oI(qc-dt4Bs~J*_$nMp4#8}XlBBb%-GXGzRI$yPj-cIJ9V&bBV)NCsDI*hJ(!{@ zF!#stXY3D=Jo&bb31|HsWBqr9dM7+#T;bz63fDN1t@vE;$Un{3_(opZsc9($X`MC; z4&=NIw(Lh?1NOVEFTLgLDjyY}dB?t9M)IU`8~rG-^G!h)JO~2YVBa7(`q)EC6JYDx zkHQd+qo|Pw@9=)M^kDTLqFm#vFv6Q^Y15#cYeTjSm+AzLIGj%%;K~8hufe_{R$R9I zPLf@VdfVJ+HPdP)RGfltx$}_W6Oc>1orN?8y>beo%goM!br zF9sjKO|IyfB7aB5Y6cLlSPm@3P}w)~6c#_8rFOnFRP6+PaY^28AWHk|wi9O4qdjgB zLT_2>;nS!PGOS(fW@718G@up$ImvAL21wZ6GtIfy)`b!(CdtguYXL5>_}hpcHL$&P zw{ZE6HAw>SYjX6^<==4ys;97UG&o^hz6MEZU*6obeQgYtT|g~9<1JhV`_B3&{^+9} zQ~{BY7XXTdqb&7OYxB5)coLc)+4Wnlu^{v<;yEDQZryFohIYpLo!$n{Dai2h+x+!} zl-1xtAgJ7Hfo-Y2hYCC8#K(heCgH!dkixxMO-3`(let|Oka8%17v$W?yU++qopC;B`nAAT6eA~(`WoiA zIP`m;(D;^#l3ME?i@!S$?OK@BBm2E?-XwSDH5N_K?R)D<{8VWjxg1hO?3zIpDEpqz?Ur0Oc zk^PQZ+@8EHxF~@`U*LF><)B29mkP^u1R=Mgyv;woQmq{k=*by6Geh0dA&W22_M~S3?Gyp`l{Epgwk*<1^J_@+(BSvCHQLGaG7U}3c8w)ju+PasN4J#{WP3n5v`KfqjCc7CCN=ea zKUc)2v%Mkb*TJC5+3@nbinwYgb?RdqkWZIbXDPPW?)&-4fCJ)M%Wd5zw^3KW(7m#g zL&@~`<@M$f!5NUeQ6yJLx4BW&C9-gkVf9bonhWvrTaF_a3Gc5n+oF})8XyutEezX7GvY<^*U)a< zPUxrM)=a>W3hM6|GAfWLR(+b|U+ZTFLctYV@vhK2HZ*@LU&Zv7<>iCRmaOGKmYdG2 zhoRV$ThmRza8LZ9QTFJX?)M^3dj`gjuiVqclb_N)fWEp7*-PL!nRT4qu&prrTZn+R z_E7EgzRsEAkR4IuCYQEMME?kP(4kM7tSv@KJ6U;5&GcrmL5Iiso4cn;cwcUXkI$v7 zTG<5-u!}Zc84_C`xfs3GQI$4HrsVmg11y$49 z(8X;`eN%o$*ibOSRoUpF877Mvqx~393+YHu`Y7Mq##Q+X;EJkF)^i8T)KJ@s7l)I% zp=;ZwR*ugA(257XYHduRNAbU;V_o(K@FdX?d@+4sgwh0FAhol^3wOFFPExEBh66?P5k?l$jsA)&D>$dDvW&)e}wY+GeP{{d%tLvEkA`<|0%oQh6|v7`3)qW1IzP?B#qlDsEnn3|kl zPlk%v0CW6+{9@fO4cc^@vG>CPF#kN-ygpVyyuL?s9o53c@*d2$gP?wHL!~fn&D_qG z?e6AMIIO zj*St?wtcvByuHVe9$>BHIUk)15qwqp!_lwy*OLIT|I!u|-OjYG?k=Z@b2& zP&}3nSHDkwnIwliOSZ%%Wt&+4zZc0LB2sxT<%YGXd(GEGXe;OX_9-q6qj_CqhU?J|v3^S9% z$s&+s^)}A!q9Yk;`&&KMidN>dHKxS)!_*nXi8w4pp9SwbjVfq?nKaYnU-`-8JwZjIgm{^q19*wFY0?|~#xLxm<=ndu&IDXlrCD6l@UL?Tk`vJDH_Zlr&v#M_f$ zXSZTW)&`Ugbe_mh!xUGp;2Sc&I^jNmf@oXj?gc4ynzoxdJ*lBuqno@L z?;*V=g;1Nc5fobK`HYGu>0RE^ISN`-k;Z%{sdV^oK6Qk;kkxGVZpBgpN}@fkh7w%< z!)$qQuz?w7kD%$U45m{m4omat^Y27ZMVOZxw@@|Zj{1BNpSFN$ATkCW1ciVxJUXSE#r3ip|_5@hj-J8iypZ&{cMkeC7-82Y;sQ^ zZR6c{?l0b2wsDqnIXMl!Ty{qbk*4`}wRY;eVi2!Qk0&b64gDdQtbYHqw!Hme-u#l@ z_CI7Az&`2L<)G2q`5&KKrUe#|(U(f&_JEDdEn79#L?a|ETpXWYxv+b>LEdFbzru%Lj$^A1Hhp|M(m{MgGTA-<}+~{t>8^ zxhK=pBXGOBLB_n2bTd|C!;0rq8JaJzj#WPjxr~$i3h44X50oyun1UvY+vjABNU?aifII?UNRr> zb^59O>M^3@PXbq?b&JBkGGyMLxGFH=Rc_MUr|zGN^ZAp+8hLrpLNoohqPoT9go^%02Vz~cP=8V8!gQ$!{ znI041Xm6W+4}I*uULjq;B3LiinjcY6jG~TCp#aBX+i1x9k{bY7y2|RVMMtC+XT?8! zkTRiLAlYr}{)ag4118j46$GRhtlD$L3c~9w4NQePRq4o0b;aDJPEJl%z!$%^0udb` zT(Kw9=25Y%xyXSIL8^@6>lV4fKlYS-tc&KBnU=x7pPDp}6X^5bUuN9rKW6K9ZN&|o z3~uEM=tYWA+P7U;p;Yp^NNCvdqc7=AfIktcNKn-_p17gaxgfrz6+)RN9$H)?R=$; z;SiRZnfEd|QdUtqXfHOVivpPxGp0{`jnJ`IRvqliUY>brv2jLEV2~vmu2}o#Ef6NS z_f#9C+@8?T%|#%FqySl#g#Jok?d^>-PeN<&o{XSTI+BFw|%S3BbfaJ&~&4tvu%i1i*VMO~d<$$WHWr1kk zCS6wY>N%ehd2pb{3obgP*)4|#W;hYwQfw_zIHhl!1z#Q8iDCt-3u%9XMSI!7Y@Y$1 zx_9b|Aiyt_3ESQl`TMc+u>0u2+T8-$VJuI&N?U;X{k#IqZ{{;tIIVnx5`ik) zy6ZK)d|<;2n|uVj86%>I!`;M}5|C`7H%9oj_kNfW;AJzOqFkasFr!OM08~>9g3DCI z_u4K!DiQVa3oJ1~F2IyV-7XTPIp2DR%Y(unKqov_iy#x`6S3gZpCp>nX4eC)dfO$~ zl%GLiVR`xvXI1xp!jru;qTwUnB^Lpsu<4-`k}wf|u#m{-AoOC7^iNpS^hE>j`UX5C zxWB|WXS9pZ2XP}|bdDH-JM-klWbhgi`5-A?+Kk@t|xHV5^3@+re;)kdG2_3@ftYm!P(!MbAF(#KBIkR-p zA4PnxOR=(}EwTiZPbA+SlY~j)h-!t2``-&Dp~qU#qdyFir5>6jVk*3IgA$s-V~`R3 zp~fGj2b3kgjESZ7VI^w=?!avXkqhgSBje3WwCd-H4hCHVOD(lCkucRp8SA}RjVd_G ziM|UdtJ4>WZ*$R2hNwr~{u*c=ch?$yF5!7I@Wt#{%CsCi*#rL{N6 zgqu>`Ped&K?ycx(>r@aJk$4Y3Y7ZW@+ROMg=;ksJlJnGY;K^P)t(h}K`2!fcNC#7| zQpb_R6+_DN{1Yxs1V5G~Ay10=i3L?76l4O$g-hXV+Y(p_boS7YpP)Vl%K)w=-39y9 z8$ZGaON{FsYyjryui#=)M+q5@{|CXWQAjJ2ARy>%pglJx zi6_6E*uJBal>09-cL`*Gm96kZ%NSQ4LxKbs1}?m7;ucas!V4iH&-If|7}!@C*f+it zEcD$%h-&T5-l+`hWB|qS_uvK&ZH^bc!)?NBQ3+A?f;TSu7la7HN71-QM0CJm5()T- zi<1dwuM?5u^*L`2I4lW@YM;ONs_T&R%IJ-HR-aRX`j&kZN8Mk-A_8FZ{2ElvqXmqQYu4 z!@E2;-w+p9;!y&i=<^%urNYdi4VquO{*Je7(fl-e2qr16v_%oyG&02@*@0>q%@4c=fIe*$VqV-g8E^_!9D!~NH@ zN{jC$1C02Ep@v|Y236M(qWrN3tv>F`)Ddq5enlfeCajXM5pBe`6t9@|X;D(-0nu*( zZ+zNvc~!cKASL=vqF6(SuU5TNuK<}ay8<~f+`?2y@_2^;QH>{;#fPaVUQ>GjdB1=Q zjzMOvmvj0~wB6Jsf*D-A%L0ybG&}&Hd~jv_>_`)_R@68r4mr?(;)tD&9C=nFDQ(hj z6P`#Ln$Z9-$&uYcLUHG%W^6%R@e?i1Z#s9W0?gF1;K`_OR9O3{+IX;$aZ`%O^O!Sd z3_#)JDX76YRtj^C*gWyD11os|WOrEx2DE9UZXsMPY7$Zy)cB$U_L5*dQpmiQ9#~Lf1j0!kPZk2yxt^XzY;qzBRD{|My5D?7-9EyXOjx`b61;|bD1;_Mq;!sZ~DvNp?=-80uOoq0%M4BnvY z_IJ~>KAz}I3|(+~cmxy%Sa3zM$!_V86-zak-?fRfu)$y()B;$7I&m)+iYtP?O%cUM zGwh0HKMyJdwBjk~)EW^`T-Caj6WXMW%Su^CAR_fFxUatXiB!n@7=vpihPD~fomLrKY-oF9q zLW~?#K}#ZJsWbisqJBK@N=zPf6c7i{pMX1CjUnSXqCsW9NS`1d^P!Gp$zwv3q~C(H zUev!Xmms2GbEmKOj1NgCHK@}XACO%CnCbp#zhk%O?QXTBM3UERd)UA2H2^L&K##8e z^;qZuangkLWP&|6Q1ClCD~G59!_df(rH=UKi{c%)^4<-B09Iop(ufTK%a`bg;$peQ z1z|yEPbLz2G)b%p+d>v%oQXQV=p; zE{LdhsU^Ze6zJbS{}A|x!2cBj;#tczGo2+SYKfAK%cCP4Loc-aBPHsB;+xkRP<5-7 zDFrR7zs&KCZf|=g9HiGCfgSga-&1_-^Eh4|e7Cm<>~_xEn2dz=g~oTYNw0=3`!^q7IVrdKNX~2L%m~!L zqrz#A0&li^uO#YLAE0iUNyzPlo>ZJ4Dp)yP_$_{PeY#ewa|N97ZZP8a=;Na+Xwl{y z74#@q7L+WM(CZrw)z*~q z_W*lj8{7du@v6O)=PXabkhad~ zS)H8_@0--d#j5yD@bQ^&d$k1&+kE4z!!z%iwK83YF5?;_w4IKxO=jRHMLTedtLEU7 zEP&nIv$bbk)~m^gf%l*7zwH))WWO?>al6$flo0RQ$L8Z9$F6vg(J>$8V%~U&TsQM( zrO;gR&|$023XJE#{MyR|>;76j7YY2xC|)^ls+=0-cV%hz6>2>ssjoHvV_2cshCW}9 zAp>=>5M;);7C3lVQ#0Qhx8ha6{ygRZRerIh-lD?I4zd(epImOy18yT)xVic6W^qBP z#$S28ld&6+faP63xIv3HleqiqLak7IysLlD%2Oc9n46~2c>1JzYr2?%*dt%oBO@>1 zqeI0&T6O=Mp5GR6cj0g9fHgZp#(C_%5IJX4flZ0Fv&auYa>U`3#DUP{q=Bwb>!I3w zS04N_YTep%Spn7a2&KlmwpzkwLiZrmW>$y(VfGRDz$uUutSn)IvKC~i1&Aw}^96Q4 zcO$4S#Sa}rm?!A^+vm+JTqxH!2s`xnhETV=P~k!|#d6i8dst7_Z0=gR6ADwf+<}j{ zoGHDuKJ1V3n8=KlK`hzH;M;TA_Lg#=*+t2bJteMeNKiqe47XOf=&>jSe`?642TB|} ztU&~w_PGY8t_9pgAd4&UD=7Xh;FC~X!S9n-j1}-njXOORexVOvK4E)3%faG6Nvg@s zoYSrvaVOww1)PffN@{r>)rBC=3h>%}EN7hF4y7G}qNvDHKP&O9-;a-9Ed7<~!N>lg zUgbwzitvkeRyUPd?i8KF3g&&ysRD&AD3LvsB^f0?MUvcCH&I#nvTJ<&sS!^y1nrcl z*Qr^%3+OzWMbu)3onTrwGCjInj>zCw1SnWNEPH+(DpNNqY%^yRd-UjyF8xFOoE*og z@(TqnO||exRX7!at8{|v*s{}-LPX!Rgv zovOHauYm!r*g_JrrJKI1U{H$yA8@s%44~4hEK-P83K|n+nXUQ&b{!PC3MR(Zt0;0N z#_H44*GeNMeXW*H&b1>_@>i!PkU#y3z{#hiUqfx;rX*%ssDjUuLyZ8XrTy2-h28<_ zI722+_#bv{DQEO#@K8y%xz;XMhV0W4_V*%$KiKww-8Jk(t<#I4^}GC;XvM3Ftg~4e zXPXUKGubBZ%$;73D9RD)5#0eFRB|eU2VjlCxAtp}y_zOSI!#sh+HGDHHzUF3XBB_4 zK74|He8$()b7VC92+^2%*7+-jJ@~3)NC>j9g;C>H9ANXb>{)R5Su^SL@$z?Z@Q&_% zm_uNU>3qfK9vgCY*r8Gf-qF+z@o6RW6@A9SfxjYr-kL+0y(HzA1d{|JC~QdYSaM#hgyxh|i8C5f2@ zISP|KvrzCD(Wk{19Y4CS=y+$=iJZMPW9K&rvc#2JQoE*@I^v zrzBB4SU8`6cgM{Mq{!GT&Ht!goY7@l>lTiG{HUY*xW2v}6T#GgUA$h)Q;^$>fRTaN z_4ZcluD_Zjq9dZH-q=qh?PC?+v28HyP1t)tBj8yvU%OTuM%pLps?{E=F)o7Z2xP$P z>SJ#n$TC#hfR`CI_{?#PD79%|5p4?-H3O^;|`=h}3thZC-UY)@jhcby8y+;fR zwj_Hi!+Cc-jk4e`8D+e(pXAV|gP&y4G;$?$2Ry;`O3DvVn>-eC#8|FeI zqrb{$Bg^FilYdp_CRD|Z1q>-QdJ3OUi&NPzCDe5+#>ARBYH_*af}`4Qb8?8L+}%Q; zcNP`3(}(8Vt|Jeryy%3Zz$e{gUHT1gIwZus=XfT$OND0q`lWo))bVDso6jKd6LqP& zyq51W0>><#>pM>hJ+Z?%-a3uJlO01ogvs0%#|NC4IMf|U3Wpj;p?Z(zn=>;Xv%H&y zcI}%PzM`=4^-Q#m-=s>zVeIQ%9e3>|y0M)Q&5*_9vHdbtE|1M28V9S^Q}eXidb^JR znu5=n7L?6@?B)LsJmRUUs!~$ia}G+0r1j8pJ=#wQR@w(GDbL1aaJ>B$sGB*iD)#z} z7h=3^&2m;wcVOvvZ|q0m#${Gr(BrWey1Y(ZFh=mf>JLfkfAp)x7cm}a{bkya{o^vg zfaZWDiJ)P-Jwg2EsT^#peorG;xHWgbiz?=hKf4lrbl2Cnp;{{`dh#*e4+5SW%}a$J z28U{S225Jdv3E$w zZeSty{X(zBtK@GQ<;J^TyK3pQ`)nP}19JQRl)AY!8>4RvACmB&#Cx1{MCNbO_V|DQ zeyaC;Qgn}e7fm<9+Mc@SW_N~sPJa$&;a=4xBuAvAkg4c*qs+#c@Qp>|VN274hhl}S zb8dQEr*$uk0QLeFMvk|xHwx(4a>0^3y^BMXHI_Tu?MXwE$e#O(@H-ejqn)N8UD-O(%^0_+@$4XGCToUH~@krQlO@Wr+{P z-qB17zV9jaB8AvL32Aued8=yH#l1}uia+|D>%jyf`Xhps>hgjaVGiV4i$Lw^8sFtp%d!xA(O1(Cnjz-i3FB|;Y)_0H_})7|7Pmv#bSnPMwC~-| zp@P?RG#5_Z?^NJcGMKrp=n{N8&l`D{>{YvMxOUSoMnvTp{QXAu6K9-VpV<`HUqnw0 z)Mi&VTnBp&z|MC_IAFLHFYWdrgxLWN9RG)m-1g8!c6`_&>`Jnpro~d=&JQ{ChYNi6 z7<}raOA2@u@T1>lH{k=Qq`Y^&(k!?vj_pCRJY(JeGT%$*6olTsRHc2 z=M;7b-@vlV-N0r@C@o!q*z5XJ;#@Uf#w8Y%U!D0bAH>1VBBN)kg!r_Ji&FiNt)Pdg zdegD&m`rDe!#WOc)MzzYpJQPVu_{`VN9wYd0%S+bR1w5CA;+!H(V$ZwGgF==r4?ZNupJH7@`5&*5{1h3=)n5VyaR^6e2N-%2Y* zk+X({49cuZH}pOnzh`ttb?Pj9YII4s#?rk~X@&9KrCI?e?@!T805tTDTXJ1=(s+s+ z*bU7pooa|s*{RzFV~GgK+2L%Ur{{S0(&H!`)E!cy;ny{4u?Qw72=Sk zhvD&Qdp$;4DH*-}HAMo+GP#d&$&R|qZY|09_k5^%y@LClhb{Yd5ZSjzK6^Aw4@$~XbL}>mxR8R z7?6`6sft(_@b~UaK3BcUZ?SZlnXiLg)j0q7sMz{7k(8BZ;#bmr9RQ`BRP48LrwmtW zvqy=!anpByDC79wr}}2EaVhCNXh|^Cw-qvPupy1S)W z4*>UNe;#;H_rlQl^zr2?CY>Es)?bZ%A@*MtW1T!VwD4a+vOGaEG~RJR?%HFw+_l-Z zAFa64Z(YX(Z9SJU7iyn5QI51lkn#2`a*u)O2`pfUbB*m0^rq3iB7FTmhPd}T3URUOtERE31)K*}t%phR_e+ND8RTNuRd5zQVZP;NKt-s3QP95jeSeSzdpI z3c!Ln&m%Ll>+>PZlkOoa&ESH(Gpk>pC7#;I-hD?5M>+Hy2stxj2XIArI{L_oN^iVz z4tKJCWq|FAkoi-j$_Zh{t4gF*31$~b$Vr(-LPWYVOfp+ed9pJfF z+@f@^(S0SdVqD11GN?nJ^DG^{=9ue;y4B*Oqa8&iTo44DpO{4sh-DkpHmVWk1a!z( zt0b+E!uYdg3b@fM5#Hm7eD3>C4e#ha6d1cYmYT6Ej_;mkruVl3!$=;8J(>5+$5O7l z%VM62KbIF4iGiHv6xly@sO{NpXAZ-ZX5#9H|AorplxXgt}cKH zkywjx-aJRZSBpC#;hZKe{>~WFL6UMu(<^$pIKwM5p`AEQ%dzum-uFH}?^(Q=mbODn z&-9u*OMkPNZ8C(;>buj&$QDq=<-zv^;f+{az0py;JNZOlq5$;e@Ci0%L~jmupmc3sYhp=bHS`6KQhqoV){)%nw&`o z7yo&Y<9cb>F5@QA)WL40_ygA+uSpG2K~G#%CoXAO&0P(^`uKQ_D>F_q@_bz(l})^w z>!1)d7t;UCu4dwG|2M5gQ6r{jV)aG2gND9f0&wNZm*W&MOCZ@;$I$<7b z)g#@ySZT(Ua$&YT(3j_Hnr*D7mz7wT#cBF0E@mG~wCkmK7*8Mf#)N%=Gqu^Qh6SSO zmGK={k}I-jMMH3F4!&OW!A`PwDB;oz_{Id`q60!>?Qtbmy){8_i?n zRh{;O7^9(BoA_duOtKkhps4%kX2uUo5iphtPnMz;2_QoBDkI!Dj<rfID{lnv8MUd};vn>rDX!jpt=??sEYsn(GfW^O+zLAXPMXfI-_2oX zYR)nIUF)C@9roifIJs-Mz!BGp!V3mJt(qAicIwt{-J_l_W~sJJG82SZ6ER#-GbMR& z0XEH8P=iJaZ)UJY2gmUiP_*PQ=G|vlbWS#bY`sNOPrMmDhxuWC+gkozf|UR4F6fK$ zXBDk*|8HE&>mQm&jc%_+&xltrH?u&uyzfsI(y@H--*Fl7*&{o3-0A4&l*V+GjOYs@ z7UA*7QPs?Gi>11yMGYe$C&)%l*_WOL)02`-30yuBQ{(^$V0acu3n*{pdwQ%?)3IeK z_tNFl`46;9=h>>O5E;)Ny#1tf?uEBuykILixBod!*QAOGmzN&p;ur`$z<1`OyqkOU zxu8&nzA993%tg{@7%i{F?(=UQ=Gow4&f*y>&9Y@lpt*6+ep}-fy`3ZGdQcBt3X%{) zyHcPGlN$$##q(R>zwGMQdy3@QAc3P|hxv9No5{+(RE1dAPJT&O*dLe5JtV*5!w$yX zZJhdP!8;ri>pm=nf3=DqiX??zD7;8zuI-NIMJwV0Lo=5K@I5y;j%wn%Gi>fxj2s_y zfzV-Z%*vGtid(Ag%?V~*V_voja*Oz6-Tdrz=%mI*0$qNVc!H2XO%|`E*fbHUugW(& zsSe!px*Q06344D=8p?rNx=Boi6%~p{`b|lb=l8+_kw6Q{LH?wsjEA=@~u2$)F(2BbASx`=D z(-j)K+;JJIJ*vcSL_|oe24kX(=hN2TSYN!Q-+;&kCm>A=rP7@7_4PjROmgseAZayL zb9P312)pmemEEeo`8_8&jtn?TW^)Pk&R?tJ`^3y6UIs zO?ikZhyL1fLadfLjz3}Y>3eazuQ6+&oxcK}YXx9OEy=u7-sHtQ2DCZ( z%u+$uA77IQOfMCDHSL@8lg;W)lA7wCQtWp;KQqmX3~+z1zKZvaj*&8 zXfJK6+*4=6t}9{`_pJF?mHcY1-Gz&zGV(2N3$usa*A?rs?c;})U-9Q$efKmu&GhYh zkDdJLip!5R9)Szj6msr->)|u=V{_<2=%r|fa)z%S*EvTT)Gi&ofOch#A7;Y8s;R-HIpmnTqsXK6>weN=4k1@W4g!{95p$o5S+J5>z zz0rLxY(Jl}rAW--?)uPvo=DADo@t;}E3f2YIvD2GoQcC zZ>t_j`Q||v(5B7Ln6Y+E8wxsOKgzM_7&|aIMu`;iJ*X*RJPW>`{N;$)K^2M6b~d-yHxr6hQ(D#($d9Ta39pDeCRDXJQ;xOkd==WeJk zs(((4txn0eEFI5ta-~YSYw@dx66vFqGxs7Z-KsgFPkSEAp_A(8aO1P}tVYeQ!Lm}0 zW=w6ZT^^q&O!|gWD<5Optr(Wa^6dG3#Rz>a4mD$HjeIJnh?L%IF#Fgj_1B>W`LPU5 z+anKj%8&fqf6>0=ek1~}V(;y* zEyyMZ#nFbR&}f65iKM4u@8Bxbr*ydd2Y+rt5$}Pk-_X04$J*!FO0!?z3kwbCw|!;+ zK4a649aP(+LOL5-bT#ftjg!gK$7F3Mq_{uT?DyE6n3o-@{v1Lwvm7iT3mw65vS$)#TWeH8fsJq7n%XR z5K&fNKmJ+}4P_yf{8ui85BkpV>@+$2Qku4=>8Fn%gVr;~4WC z^))(HZfUKVRbD>4(8yDEVQnS=OQ%Ymuw&3_CsPh$8E2@u#gIWYPbI30l@%K z=@gJqx{(g)M!F=FZfOB26{NdCkOt{)29X+4LOP@yq+@`2uTk%FpY#0QfBh)3_rCU8 z-&$+epyfWr;K(bFa>9m$5`U`fBE_v#sBuY}8}kg!?tF^u%=xiDS7V8}i9(8Ey-#Ju@Y!;ZKmiDdja_*8fTf zM9fCWgV6qSy=(4k;hjf5FlyYD&Z2Sx=v$hySXi6znu-Klh^*0`>g@8j z+K*c9Vc|2S%s&0(xt3RmU^2a-3Batjp_b!odhw#iO}N6)NC@Mv zl}wHjl45$5d?-B#X7MTCo~zaF5U20($6t*hSx3}KAf3e=?*1{%ksQY~XG`LEOed4u zHv08Ileo;_9GNJ5Seh>l0w}@zv+NK5l4Fis;WkpWKsUR-bQt*cvB|FTN3UJ#2C!W> za<+y)*STIviytJsZPbo|E;~dp8`_nHp5gC1L>lm}D&mC4(z9T1+nA!`XoFZyrJfZZ z4|pQHx^+{D**U}8wC6m&=pz@Vueq`j^T^ZuT$-q+$U^~%NR_;0wrzXaUFQA641-Hd z?}JYm9SXhBKD-sRL7TvBchM+);-N#l)->JmHTWp7G-5_(tl=^ucsL-USQ zH3tP0WPkmqS+%c3p7>6CIPDm!mYn2j{Urj7G$!uw5)0CZK z$G2WiwIYkhqPxv@SUB3_ka%=_zbr~8P@$z!L?@6CSAT|s%GKRxwsF7L^D;{XMPZ}m zE|(v7o=~UL9muo89X}1bA?rj3zrF^Y)NcJ(9(PUp2i7z?N>x%zXBS8aH|$IW4@%Z` zUgtGj9`~@hqzei?-a6D@&_iiU2w4+48fel0Z+R#9^&go1A3pb6=eg4=Z$7_v1I3pu zT5FbsG7V2_@*7M2ks&*aPxYyOIPtlBd`i*W1-@tx-ph0W_C=h;LM$ftI;0j%zg~q-O;Z>~6?rMGqu)`02MVN8H!?K{r zYp)PY=REuN8^f|w`*6paAbWl}t&h9BkrR1X6WZfizy9=PkG?V6LM9QMiV8iPVwLFD zU`Bl1Rx3STEfi7h^1(VisDr%Xh3bS92S35^=NGxWsHz$6+ehIhY08k>yM#t8%OSh5 zxA1kLZ!Nv7qq{d4xLoEtjt%L6NigcYpW3}C#Kpm1A>qvIC8GtYWNtCswuXhCU2NM9 z;-1u>S_1eo!=$Tu9RYNK|ND~2{<%0L(|Q28-PIA%a{^h&&VJmqW2m2Sv!i-Tgd`g3 z;Zujh2{Zu<{FudrQ@U>Sm@Wy36T5w;Jb#FPRHVkNsybSk$23xdf1n~K&y!?5&p{PL zKdYpShgnT*b6dy6T95Zxs@`EXZ!@(d8S%wru$61)=wZ}+^v={8bq;CAP}`41?FEwY z^f?6ce1I__Wz+IRu;j=T0_#D`i>CFj?5B27^U20aX`2&_4fAhAH7-e3E&~t*^|R#l zMV3nlh7dz1L0;8ef}AIF6fwt^-f)N7^_&2&>nkcKbAmAjgtG5n_v0@DzYQo7KySX^ zr=ZE6to|BS^>2Sntap929+xytFu7v)W8PW3tchc1^$Fv6oJH9zE!G)`rnyEG7>wpx zH-`Nyxv$V_EfpQ|k_5pk?#Y#vl*{sIPgV+@gLCO|^YygP-5kBUo+so(K%UB%Q+5o} zIA`V?N>FSF(dS5LQeM*(q34h3BsDl(9qrP7|9UlS zn-v$H%ptik)W2xb`AX&V>)oMvewCxX26H1f>lcKDB>@fVFq)L+SyUs-S|4ur%fK$kli>gyRwmRZ4zA*&MAy4+<) z2dgRhHBK8ecHL{t;s>M3RmIdcn`a*|ggiLP|9VhV^?AAAb9SLo%C{=JLh1-vtHtDZ zZ)hXJV^@k^hiGICCkUnue;>?w!fYwX60livu(wC+Ue)lO_%aR z@XKN`j}tSV0YW=M>2SLP8?|Gd&%cgUDX}ONoT^QeCe!Wjmp+egiT2`CX&P--Q~_J0 zJYl7%Ii>Y2Rn44}m-QP*nkuK)Ba3Z|BDbe!ZhfG(TqiqDoxkX75RdhSrc%cZ&ot*WX(vU;mgrVf4y>^dvY(!a?qIDV@5f{xuYhJgpK2KyZMxWv9&h_ zU)JVB2v34{myt@bj`-H$*!PQxV7_}u!SwxE=l{5ATbm>LtJ75{@EY<-1e7zD#x#vPzmCOGB46tieW2EN*$N z8r{_w?x&73a(B13$*$tAnR*RB07}#ol3$K(miGX3$*+WZG+MVC`;H!^vW8hBb}RMQ zh7Ex`H5=m1?TnaK*ijB|)>gYD$?@9BqN*)4I-9ppEwGq4xDVLC9Glmn-9bj#KBLo? z(}~m2;qdI2Ee^SFxjtv%Sl&+2K#pAQaLBYCdZY59_WjbI2MZ@CD=7F!f_Fq(#JGQa zTDJHdLn&#I9;}x?YJ}y1f5W_!c{r={Ro>8EnEpaIk@}`9GcF<2U_l%)hBwrBKoJB+ zifH{N)esB=nwr`t+7`QwCP4&jIzN{MZ$gAKpShLurp4vXi<*{M_LOBWix>=bUwx#D zlJz*vp>5m-AVnCL_**yn>x0k?pAP~{buEk@ z08EJSiLgadV0|dRWXA0)DXlI2fbD)nzA(PI|_C$jPbHP zFtrUd1lBkpw{74YRAT7VFD+-3h8rV{Oj$X140WRu#s*(j6wAkNg%gxG+|fQr{+P4D z7zhWwGRc@i)NeZtXQ*x$q2BS>{(%2rcKXvqqXYnytLg*Rxu+ZOBk1oV&C;M48&~RP z?{qf$@d94bO%6ZPbS#^&tDX7o0!meqE|aSdX`gau=Gxxc(%AF62mt>=$- zl~>%Y<|6^4=D7YhB@0iWxuUlPjUmeliM>f*CirlE&ner{$A-F2)Z0}wuph--D$Pgeb+Xa#5HJu z_I{%ztE2(>lWlq^9`Tjw>dD%&*-+)O5>Qh#?uTvo98T`GCC`Ir$MLYxn-OEcJaH<$ zf_jT<+%$H?Q&91}zGEcn5@UX^)zJ}T?wb+c1Ff{ z%l9+qo&xM7`Yy!qU_xX(QM$R4`36obUiR(B#Q2TxqN=HQIaJDN`-*%`Ux{3%3}!!& zR%W;&0|@>3W5nB$@wfk?$tRf zuK12*sQ*m>%e$37&P4+MGN@I$1{J{D=aeHlo0h|cSIz;*-joqTkth%`9Rjr5pk(l(xqmv}-3cem0X>(wM?U^mx$x=DqK`~o z?jsGaf+wca*06_#FQt)58(0!E*?R~C+ic~$^z4#?=_?lT$e81Q>HpxJmidVZ3kyR* zg)Q()PoTvWj+c_+v=#|plpj}WJPJ~~N@u<&3u&ygPU7wqWl6>R0ZO!J%&B<%K7;NQ zvwKn1k#s$JQKp*7$-||~n-4ycF~1NJ+#Je>n11e;;}{Xlanh5OrNneAOdxhwD7BSe zT8jxSiJIJxGRx+SIY{y96k>T6IgTMp$y`XGhMyu;&RVCuT{^iix7v7R|0Tq*^bM~; zq8T8cJK@AV!{gR1WP&NX#1GwHRlaU<{a6CggxWTMM(sU|`(Ie2KJcay`3iep87G@0 zi{VI?nf-%*l{q9Sc0eIS=UO#+C@NyXjskPsLiSS^6JLECa2rs6q_=!#<_(ikl9r!$ zuvb%uimRL*+~r)v*!n6m{8B+xY+%Ng+9g}UIW|7 zq-6whv0jyPhlt!BWeuP&4D7y<1rKe37Y&&*z{x|mVf+WMA^j@sNFUr_Pz3}{^z-jN zkOqmIm$+&Gy{TyZ5dvLh9Rx1ei%=)@lsRq=b7LH+0B{R1jXXJz;&2B$ZmUvS0-jzg zZx;$$xDwNs$qk%_FT*hs{Q<<8whL%ONnFCb`)12~j?@W)9?C7ygCee4N`exvl38AH zLoN;~Dq{Tfs^o8C#O6fz&gn;0Vi#;^F~1E`qc^&eM0mYjCt5zf_nGp=j;A=UVS|R& z>n|5nux3RA>6WtQYevO$`PIv5wSa+fe}M2rXP=sGSVysP8#Yr`c-+TAOxvyxmeh8_ zyA4oi=4r?*p?K*1jfy*iJf;YOX4cuoMsn7hj;n>B^qv@WsHN_PENs_7DWj2bW>xN==06~nJkegxpMmx67W8&VE(!=47I`S*tp4Jl6 z{UH#;@q58WzsYQ*NrA32$sBazS5AyRIpw2+r;b+Ri*#z!-har=H%pKYh(iD3TOMSV zT=)(zdYg0Cwc7R5RMd8KTi-5}DTXht`3Z-kI^98Z&(7UihXNUGsgzC{=7Roh{(_kV zx0vMYADX%22RX-_^jDWsUE)^V?iGRETNIR$AYMTb?tW^~qsYN*FS0uKxVG_m)g`B)K6~_=d`g@(TBD+Ph$VFwh!yA$(DLjZtq;6Qb%%b9PAfyJbL~K7@ zNc5~l0;HoosK;1d;qz3VHRVlX4(WC8t7ql4#;jeBkj7)AcIxL>`GmFWPRD*k ze{(`-)fMBMv`F|cl$(|d#b%sCzT1!mg~{FV2%XIxZ~41-H+&>E$*zAX&)ld_w-xx^ zHw=2~j}=q5C>KatOcu6gHlOGpXtc^ma8jSO(Gs`|m0V4FzEFHA4c?)rA7JxpB&S3e zc0sbr92l98u5Q7zjL5F)+wIz^MZST^F>8Q225-L_5 zAXP>gH0z|&>Ate_nmYWzeC~Y=zBQ0oB6&Z^Mj9qVJ^50la)-|r#YQ5Tv1EF{;Wknt zrXl$+iTH0#iWDX6Atk->A*v#PdQz=1}xb*wG4npcGo&Z@Yv1J+VqnDifWFv(Bn~Ab|nPR zY^s5LR1(`ow`m;SvS?Ppyj z!4Q?~x*l?ZJ00GW+VJuEG?d;RL&p?#-f5^*)SNdz-MRb}+lcBxf;>de0t-dKj*8S4 zrI62?D?<-inNhn$$7)^=ysyhxZYLP}$vrnz)t*g>Dr?rB{#s5<7j9m|E@wTOnHFgF zi=Bp3q!ck|CNY7L`=c-aXKsy%hjnp9F&>MG{MwtyckU%pb}{qO-}r8b`We#}I-|2C zeR)_pI}NTgcsJ)hklhXitC|ILfLoR_l`gJ95t3%=RuE{&(_lGqeSeU3-+3Fqm^5!4 z!)SokE$|Yve)U6D+X|5FMdA!ws5qoec-);$PPgs@DRZu>ML^QzH1;(>aiQ20(-;8L z{LOSe`u0bvlWE$I=py;_GU_=ve9cGq4HSz`Soc&SNzFQs)}?D9@q&{is6eE#(}lC% z3il&>#~%6MK3$EMWWImTcUvh*%I2X^636(Ar}+KP3uG=+Xrd)B+pioS^4a9?rb>U+`V8^#HJKp!m_NF;N3= zVRhkk@q2Jn5)yH&xjsC<4d*;d$Cn zvSHs{py5pod#LW>vgRUmO*1$*^c2H zZ-VeH&ex0D+&Ys|m5o9~Wk*Ro+u9yKym7Kdo?tFe9F1kDtf^;V4F^)N4L72WG zPLD^s>i$nW)OSDPF>vC#673Mt8wTvN2a9p0ouUINCNP4s;CR<9?p_ypz`Aa$Kscvx zXo+pDRV_C#LQ?UIm`of=VG5ja!z7ln&!uP>D{YOu;VcDJ8U9tmQXMQJ=L)LPBUF?f zvKigJQp>_}b$db# zoX|5!*I!K6xw7=vu`Z?JhH_mt4<}shaPly?EkQ)OW%eg+wiiPxrkzuWL3B@IUqCV9 zClMNi$hhV-9#p@0(U!4pe68Pk5erP5I12jo)f%kU$(PBh|!t6oOv_ zbP13=bRZ5IV~=A`jUMWHD)4StzB4-WS1L7lo`;H)y8UK_DoW;gZzPsa$XoNk3dI41A3)7+SXf(GBr8waCv(%To@8?qRSHKhB@> z+C%ayOKE$bf7AFTJtCpGm$Bd@&UZh!raA_sy?jnwS3y-@bTSOwt))Q5eacH)=FJ-$ z9u6Yw^$|<6K3P7zZ}b{34KAl~agh7yih@d>f1A8`^7+Rlh;WjBdjg$>y0UuGd;b~>v5ug@~gS^b~Uj9aJ=5K9z= zdNS$WrB6!aE>?$+UfI?)tV;$=Ns(-YmL^C`sXABM>$WD+(iP$WZGr8!;`LvLqnyx7`-fu!c3%EIQi{{w_F>r zK!#V`vZ|Wt-Jq@0lyNE##M#0CK{y-02+xE|4Arv=wP`q5eg0L=78#t1o_m_-z2*#t zcU%(1<0wF`wfK!8ubTZSeha}Z)!HrM5%@^Oi4QWIFe^`v=dWnkSj(sLt6|eZ!Cq-c zuN_EINFe-F>F=;XCi7pbyZzd}QK0vRo?n2)4wS6I#__n}`m76NCgm}WW*Kv-U6N?Q zWhb5zb%V;*`_LR;KiYz#j?4iC#Cv#tR0J)ODU_O;iXp8`5L;*HDUHR$t!%cQz2j&Lb&^wO$5+Z@Di-Q=6A{{fjo9v zo<82Sy*KI&_;$T)i!7I&yQ;}?T=G;p?kxkYIFMJ55gBY&eAY`obUr|hJPm|nh`FN+ zb?@U~@XytBTPBAZ$z+_#K}t9=G+C(Or`mymR)*;~GETaZjXpEEcGb(r4imjlB;G{e{mGC10u{ zZ_i{*H=K~PAN-Z;jipeFAN+(O#sb9B*A+-u2a4TQN9|G{F^t5t7d(V5Y7dd{&_1bc z2*)Hm@QL6!IvpMkE13p*&d!w5oIy)z?r0ZseBeu%QM9If3UPt_+EZ0JoHW0+4RA^Z zNFn@WS7ybp2O61;iZTFpgD%dQ*?X3}&Ys&MXdbmN6nM5gh0%ZIQ({&Kn*3n>j&l7< z!FJk>OqWAE^o=bkifzU{T=-N)U$OGWbf()Jb6Ry`p@O7qg=dPF?POd1x)Lb164BQB z0|QUkjFf5e08*NzrJmO&hrPa!ZVXUtx7UguRg|- zl~s-QdxzcL<}Tnv4-0iRkx(76s=-*&7W07>TAzGlp)X|cs-YW{!_AR?TA#L-y1U3O zkZYo&;B8aSE>E697h;}k!jC&xj90M#38O9f(#c^C^4-j*f35B0;zk3OmSPHGb51J0 zL3dnvEEZ})R&W~F{K*sO5p&^!FAZHHK%obV45+%w=bQDvome8{72`rjOi(qllFRQv z`r(BG_jaa~&g;0p5vI5#t?WLQ2RME4r+fjbk@6#Qm668$&EqB!f~XXAVkT(J8ijN!Z-_loQ)spG)!pR< zUFlY913T2^x3|lsyyacHqeJnQ*Cj`?9^#vD%n~p|OVMdDlP=E{ilxi4D5S4hYTaRq z1{F3M>W$WYG^IuzZ1v9y&6YSbx!uLiXqY)UUY0338*DK{&3N4)7MG3r)P_~1$)7>3 zg(=Mz+;2#(S++$Ei1a6L{#Yr+yWfFjmCSn|7&vKU&=hF>l+8PpEmNBy-qV|0}+wX~TQzS=0)d9Zhd6$OMh|`9>wmk@1yB zA@5J{Z+i77jQSGg&x9D|W0-UNtw2ggfd@+zo|2|sH>k9l?ih(5W#8R1{PF$Jx?^cK z_3%|YI$Qn1Ai^bmM17DC8%G(U7WMj_RSSlBWlS`aS@r^>`W>dksEEhj2JWMoGhb*U zOsXojO^+sGq~&_VCf3hnBxPAgRiYTg67WoLb=I~&g0ZQpYui!7$1Of!vNQ`zy5k9a z(Nj{k-+XrmNWOP0hiru_5^z>%?E#l$+9=B(NZuf5uHx0M{n0!drIzyIT|zEe&9anA z?Uo_cbh|lO(v`HtVQyDkN9j2^nfxw3ym_i=W-DtXS~IFP^7qvj2_o?S4fy|O7OS1i zaVr9PTXpO^ZiUezSrg9T5(Vi!6Kcnf49KcX+V&K*^YY;xftwX`Paphh7%aA1Nxfap z(^l6w@s>IcdlHrpF%vD~V0N&)5_++OT20b5O0N7e`}5pVcNQ+GrpN}#646#$LR3Im z&k>EXK%(DqR9~Q5MyQ_z>J2u@m0c}$Y0~iF6vswhSCcT$lyCSHfoZgEn;1qe0%`2c zA}cxew=E}mBestNIJ)FVW~TAd;bOdVO?p73$vwWJ2OP`9%4fhkE*s>nmfr5%+wZU4 zLLHaRdsOT_ErR6OnSJ84uopKV^1srFM|=h}{(?)4zg4*0ZNI6UT@)>9+D{B$fyFT7 zYCobly;y7+1LdOzdKr4m3;1}0twvk8pUn<*+v?)bXU7~U;Z3*MrRzvrX+((SF!G#p zXi?Dx<_2Xv6Q!KAzK5wZ%qQfO_C&>(O4#Mbbm=yvd{wB*@#l&jZTG^8c;B}`hWfd+ zyn-7%_vV7BtAp>JdDP#ss2fl2Os7CGVp|N3b8NqvM9muS9)5Vwt>m0Eb(tNwwYLiVsMY9~-i+&<2!;zMVc>SWc;23)wmSe8Uk*lzWg-v8Zu_F=#m zsQJein8NuJVgLc-#G{9}I{Nr5FzeXuc-`>{>C+Cs%`wQG>^Xvq+YMmemuO^(!jymB z3ptgDk)vP?IX4RUW1H_8QC8Z9+=#03Ollj#Q z1u#VnYDx`s<`^ua=*h?IwAjpOC^D6@3WZ)hdftcgJpR)WPrX3;qm6yzW7Fec!m z1rawhlAWq>fjIbvBe&lpKNPekyFy{?fmi|cE^tncu0bXfF5?8h25YnaWC1)ieUdB; zMc74wTyFj2TV|cZ$AT-^Ru5rKHFOxibxQb+I#4R=YGAuUbR;c_tH`%V{ga)NOyLZb zhZ>THSaIcw&^waBg|;f~G8-=O+b$sgtx^TWB4;8&?J&YR?{yGc)~LC4n>?$VN?U54 zy<^XxA%23j3&0glX2QriF?U%rE?B7M*xdFUho>&qu7KYCOchv_>H^d$YO}( zhbEi2F%R`?g=*&1*27yryIKyDGL1Xzo%Ko@=H5>Hu;Fgd-zixG^32+>fW$^Yf9`3) zaTZLtLJLtLYJ>2W!QfB4(k@C%25Fco*6c$KV zvz5Yh@q+x0dFaXg!#ln1Fumu=MOuG&E3D@A-G%F;ar}U5aYfllq{N-J$BN_zYZL$Q?Jsp3u0hS!$?MUV(;iqf26=wW#3k=!ug zUBu*-b20p@L;Vj2XHK~$qw`|En_cE!dvTHfpzqJ4f6!&3;Pv4j?LYKIZx1Ol)=lYQ z!R@o*P&7nbq0RB;3NSQHKvJq8V~J2)FmsMx1}pKh;f=JNG%l;(Q5 z;Ug#t(92e_;#IX89LBMU{lG?DdtYi!)oNK4+qr3l9kxAa^2+B3t$MYpi|CL@>OikT z{~&IYov^3eT$M%;qyW~?jAE}jR4NbAXR$wWbcGi=*t>l`;T($b$SeI-O&1xkgWzgb zo`0xUz~~E0Wzg9M;LJQNQq>;gLCdA({N*iBPA)6M`mU)n?cjGM7YbP?6YN{`)*6N7 z_eSHENrVwk{)n@Hs{L+}+VnizNf&qQ6~K_3Z@IMH`W?;d=mLu^OdY2B>!k?bQ|1(o zGco(Xs^Ii6;!Bm=^q zNDqx;34i|BeXX{q-{MippL+ODKKS;Z`5Q_()CvEdNMwGoBk}_de1)-L#}NFO$_B{T z^^ht}$#c*M2!L>VqBz%uOmTYNO{+eZd;t-7vBk#fi}lHvcl=!(9rG++s!9vIlrrkN0QzeDvJBqx-9+xTusa7)PWg)vN zaGA9H<`G&bdlwGmmbB5-_Z=y!@`wk(ODRTTwsUf@HA39A`AB?}U@0yF+>1m$~ zO?WH8$}Pt@2d-*z;KpLxEnHCBh~1Bt)?J_6V{#2K_|oK%b+)^X;k30RNSCc;5B|u? zx#&Esdxzn<0R=ic%fvAX#J77t&$##B;gZPo%jG-(1o)3S`(P;`5l@}}HIJl>;iH}sDoZSb z+Kb}7Tp)3+M3|j8m+sV<3k-3454z%`ZZ&Bo`v(I&_G+Mj6%3@AdiWse1Agmv?=G%? zzahLNBKQb@6O=2_W!={QcXqRDx1gYj-T#gBwIZD`_+0D*kX`U+@zrlGVfF=Dsh#_| z{7pZ`7IZdv>coTA0X|kKb%^zLeIR(K&qVd2qi)hrXAxm>J@LPE;Vd@wfai|AGBZkF zUd;nD=DcZ46R)+B((s~3%{N`C!Mk049r-I2mX;^9`r2f4Aqtmtc6z%MF{5nOFqAO< zk?-_e4QN6Dr-f6vf0G8Ovtm+7)30QwPyLwW51)GYgiBb9}rh9SyZBHJsDw61qz`hBJ=r{}IHI*EU zuk5)&+1iU>ZSh<~E)*a{m9=|Sb>N_FycdxV{=2u5koRvs18Oss^#H4i3J7jVM$0VB z#Qph2xjZNA?KNz=&{yJUoTE3*7S9vZ!)u3@FdjX?Y4P7%7x-p;FQ!_rWMH}Put{^e zQgX1O5h<1Iq&x|3e(0Wil9z2)7_puswKRZm3bTlCCAz)C zQ7bY}u9Jfd0$9yk`)w^fY4fC_f!rL_#tn)2GmMM{B$^!w%ndu)s=U|ekmvn7Ypd({50{peFo5dyA z5y6Y&*5o8LSH=osVAln5RYp{+t8&UeXrB($c^N#-Gz17dQ0AhSdFWXzt$N%9L*c(g zCLR}4_!Uj=LMKbLS?OykkpQOmuuPpMOe5^57B0!gm&AQqkQ5ttaK&Cf9YI@PltW_+ zd>?Z3q&8sm8h^-EYK6U0H8Ej^I?3iH=R2m;?qXFk5r>JJX1P&HOD@zt%~tX_*7t(o zy4Hi(5BDw&bS@8~KQ(9~61q1Zl55c+bl^YknwDDz-Ll-^byyyiQiI1>v*Hx%A&`;o zg|kyuNrxEeGzM0^TtITDn_WV94a{~ErcSEOg2QWlmVn`;vz)QDlW`m+cRap!{Qd7e zXtzXxyLTR?JFfhh2Mz`&4%8BSDRi|WwX z{=Bm^85mdsQyBBY75YiMDi!UtZ0?wbcJUthJxR8^^X|>JByCSBfdlK$KcA|*HfM*Z zACyEKq{Ob2u8><*ra6V!1e{3oGbIaq%t)W8wq37!WuDCtVjEI`MM~g`183FL{-Zhn zaagqtA($F8e@eZX%Vcf~rNEa(Ex{n8In+e?%VfSuj;&3cuLj_1w^I+PP{A_VWK{~z zxuP7}9-_!^ZB)J+ws|81cuaY2zc4ZP+ri|*w}UJdS(Oc_M)=l{ajDbEx7+U{%Ti$} zrJ#SecsKHTY(G4GnuEU=l(ynVC#N{aWq)1?j1vbMjicfQS>Oip=|?Ye@>i_wcp_(m zbZakFmU)BwN+ZG{V=4Sq!t>$%f1qh38?WV`EjK}qe*&9DjK28l6Ji9iB?jXJtt|S@ zW;(Fk%zFK|P?z^EXtX}qHmi6GGU19S3gpK`)t#(2-s$Um*W{p==^`7MFN#SytSCQc zIy;B@yG%x?>D|hS9M5@iL&ib5C2iT*sK}e>;y;Y1?BQRWrJjksQuWvr0>g*grY6`7 zm3!U4tShLcC&mOnGdv9&J{}OKn$~$`<#X@HTbfksJwU%mPA*4Ah}P){)@ zMZMMK@*cTP0V1%jZ2#0xRqYFFxW;K*9GC-d?;mgbug}Hc z>tZlW*xK;XPI^o0jc#Gl+)Y3vX;;UN+um&~ZWmx|RgbvHBCpROtc{aF*%GG75S@_C zNj3c4*uQZ_-a0g$$p@=gR;6DlJOXVYRtwiaJDiafjF?n*M!rV+^#k0{F@UqqPke%! zO1yS=tf0vm^gOU5mPX0gH21+HVVGk=GI&a-s~;s)dRb1NcJ;;=0KAzhc-c^YT#n!1 z?Me#<>j&H@?!8DK?Jhzh%QSQsz5kJDkD6*ZFRN*hkB_oquqJKy z_a70D57?$x##~Fr8>)4&g&d4Ow3LmCX(iAuJ7zQmJsPhw{cz>U3+tIiOP$t>9>bV% z?Q3t|@fru|h83DJu!IYF2l8jn6xOqF!nhpVaR=DLtRi+0Z*J0ZEtj@u3vwzV&Nw_3 z!YCtjO~W2Vb-R+|^-~A|O9-T9~TZEYfu)Kvij^|`lH<;~lG_@Q!Jra3x;6yDVz5m#+`ULotL<<%} zR)@wo)igxh=Zqf$Xl0e_RB&4_Tk_mR#0|x-nl>51r++oh{mU*9iT30*>P8Xu`snmdB5rc69 z^o1=#l&U-t21l}v)v>i+VleE8bASGAUb(Pk4;m7ju|4gEUiSS9&gvY$rCEY7HZonk zC=H3ZS-L6555#7sM?NkzLNDcRlEk(2-8S@yGNskIi5Y@+QX#oqO873J)as1o5Dc@92lQGjNXrINWE!Kd=UQi$LD6IzS}F`hF=bt zxfd&22drx&WPT<$Ey#~Id_;F9b^l3(%@In%I#yqlns9 z!{z8BP1KP-$aHN!nn~}6&gcVMOt`H4s8*z=w`620 zP$**r*6&C_Zm`J!i!Q)~5GHd2xwvFIUmASfv)Prk87`z-7hsI?V!77jmYk8CY6kRk zJ}vn@6-P(LEzBTlHE(FI^pRu6ch?^W`{|Ov;f)#!q|LOPo>%Y4RmnEx32GV;bSeeR zK9l;Y7MaH=x!(!589!T5M-I?cU1+LkmVceO;MzF?6Xh1N6uK0aCSD#V_lpM&HO4zC zg_k74n~@qb^2JyDy=m*ObTSm*`lpnGbn_y9kmo~>D{QX@ZE098| zn7!$X%c+@RM=jn^7x7W_vVb%cG&WzEFh6zdMjG0eed}~m&7CC=x@4@b$dG;aw$XD` zP7V^)m74y7i1M09UPQ~L5DkcBW7- zF&+z*g1O+;*A`AdpQ~Myth6uCu8u$1Apoq`>C@>&Y|v&=(iiJtXy3Q5$;^L;K-R&o zB;+PGnb<=LWRMR@oZax7+diT^z(v(=X08gz2muPg-wKDttqRK`&mz`Q#mK?x6Slv* zQW~4VonmQ+AhV|ltADXZ;m(yk$!#|iMXrHTG&TfcMner>Dbl6hEGMeg5ntR22ihvc8+0QZGOH*{S zKkN^3;|7HC>xRO@+Yz`^%}-j}bL)P#kA)(y?bS5P4P*-KRT7|@_tetQtIm(ljVeli z#gPOWuYA8y_Z(ZBHZDX?Pbodr{_EEIV*f`0w7p}qu1IXJ@Muow`Ctcjpbv`8uL~E& z4YOZU$N7Pr`29Np%d9#I4Q5+7nn8jj>~wdw>lZXj${)1aR2I));42N4u!xYN+(o(j z>O;>__D@>T6dFD+8&vL zrS@7=#@T7SG=#2}T{K_q76nzWJJKB!sP6=na_J}o@AN60RD`f5>^^c~V&#V`6;{CskfoG_%jjt7i??TYZ=$GPh02<#qX4 zo?jl2I?;tZpPS~>nlE7FtM=lO-QJn9w(>ElS5Ur=ww$?&)k}-+dRCLC{2g#5Qi=!l zCt^-phy8L1KXd4Oa@_NKj&;)ku5LVVrI?fts)=|K(p2&`T>QVcBL?01yJ3!U6IHv? znJ*J{0w{T%FOs83Q;xF9>n(eG>OERiCJemWs=(~Blcdd&am5{CTZ{RX^shbaBQ;|e zV{g&e00qKEqGDD(cNl9l^m6g^_;s}h{Yy;)#xJuSPWN(Y*gDt?q)7HJufgsD94V%f zNh&hNJuu9BX*qRKH|Sc?ls#qx0AX@t$93mJpjMyG*Mhv%PP!tVXCnw-q{1)gfg}8b zZJ^pM@V(2%>bUujW?+trD5js64Eo=H0v0G_0U?YvIOQBc_Iv%&UtO;~;P)0o8O#af zu=Z`y84M%jO2OGGt~V|U{z*MkH)n?;G!vj=ajj&B)YQH(EaQDDA9QLzZj)^yCzPTJ zJ&lXchBeT^EAa^BGs|%Yw&>Q zasjS%d>xql(L{*J?9DN>!0r6ck0*bnyd2uXa^dGWD^dQYHKH-rEj8`btVdV(ApWe+F!URcI_DPy+{amhOYZ{gm&)_&8#5ST7J0mo(Hp=8Dd**UJYHw67@Uz_x-v@( zz#)4ph&!z6wo1_wazB#Vf}5GL6nC+e4IY~c=?E%cly*5x?b}P_8vaE7JI>PL$=F@$G^s;S3g#EzobJBN;1GhHl^0O4 zr0HGJSl@9_o`hj-9%xOm4U;alZ)D=74+Wl7pKd&TG5J)O26$lo)n^*eC#hR|uaUl( z&qh?9;|_Y}P9;6aHIm#v=|62WVOQI7vJwaWqw@Sg#xea#k@7RWfU?rYL1qv7ibcXq z>%%uuKRkbX&Nm}P;H&>8SpQ&w2d!dK@s3s5pS0tleHd~JHYngDad(9@!F6AJ7w&Wn z4WEvc6bHSZ$O;8hqfgaJcGyx9LpOg&)VpaajPs4%qav;xVYA&j^|KbH7Zvdj2JvdP z35H2|ZpnZxL(}`Q-6t132><(t&m*s0vew;C?aHAJjRjZ06nI3IvZs*%oqO1MvT#Ej z?gYkVgNI+Lq#PE3=QDWy*a@!o2CVAyJT!AbvB^d+c1SSyS{{n}v?qjI=P^=w09d>NnB&u1}m37&!!i%Evq1@_n zD-?0ajoadwiNwUcP_JGi%;*A@nCpYYF)t4?_5!V~DRedioCm1vC7|pV-iv(1;*v=G{ z7FzDCJaP6}-K(_`h1>|tAz+K?e-ZpHKAh;WWmwA5{D8&bM4%0|8d&7!gn^xrZ0sSz^XFtBdO$%mPybwgij3{ zP__3irrXP7(#pSnv=+u0ICi@!XJ`*sO*t(BwUk=}tTrO{p)aoM;Jz4Q&VDGXVGt8% zP}HE3N}tyCXF9`ogP`osx;leD>+0zLZbu5OhiKY25=Bcm9$y^iV;TXap&*z)p*L7U za3#69Hx^_x89$tq)_0Oqr=bb(-I$zq@mUSeh6V>C(wliA!Yf+f*E=Fmr~i+vua1g> zi@qHY3_$7b28p3%Xrwy@1Z0qsMnI4TLAr+&5Tr$EX({O;1*A)9rKB6)9sR!V_j~WH z#b3=#T3C|+3b3GD}u_rI|lZ(LYw zjEU7!aBDW`4NBAAk8s!n)@`nI=P`xyGR6FdJ(cn${1F@Z8Uq4dN)YVwv`s|9HJHXd9 zAsKP}q?NtTxJCa`>6rkP<=}3mS!>};Qvo#1XW?I_t zOY}AvsD5Za0Iy^fB)z(08gg8qcTQ@DZEzeefckcjvEU8MT1RIIMmks)iNC^Ez(V}> z0&qWOApc0V>U}MC&1EYYxQ4(N;Z6`TN=k8Z&bT2MtYq@ly-r?qaOlyblL9k~7Y^~Q z!o^HMR#xTOZ@WlScdv>5cF$Xj6!+adBTOD$fI_mclXvMxA zB-&_EEQx`tMs9Ah(=G2et9?#gTxJ|<<7qFx-{M|hfcu?V=IDKtIjV-f%y>q5Qu8k6y8H3#-Mz`h`gN zO4gP&Zw?nqFtZ0lZ~OIc)H#k_@2503A9Yp!MAIH_NOJH$8wvlJt^hP$8^85?7vM4# zFpPMwGF| za%-|1Q?}&*0ZO60uVZ9)+7+Ka^nEhujE*Mu8DLF%;9wyU{6L}To|ST&WqM&Bjz7ZbqzwP3CZ5Msc0W=9`smYoMa2 zXgY0vmLaQLnS1vIUMqN{Z@ovdK9^1|AG&a@jFjUuY{2B zfBW59MuS2{pSP@#|C$RrtP(cDU2Cj2SNH1q!t4@3)9ZDlaqE1I=Xc8=&M65|4nC>x zMRkn3zv=mJvwH7p!B5Etr6G_oUWpp`&MpngV~mO?y4x;&CFFN%wfSimG6FrE&}J;z zTA>(H9hl{3&EMtwAD0;?5!rZkb;&SvXY5d8eaw(eZ!zd#Vtrxpl!@YlSa!4tC;H?% zq9@8f&s^}v)RJb@Y~EVjHyUHbDJpHW;yLRe$jtzR(|noFVA+rGCCUM^_fkZvODRKH z(UH&8PLH6^MoH(e+3!RWlKn(_#w-vK9-YX0Dn}nKd#eAut=zEc^Td6#MURY0c&(e~ zCP4?k!()|;{4)Qu-zzvSHLLJa^9V4E)J^GiTYZikJFM4muqu<^%}%Zp%Ifw^?{f_M zFb!S74h?=%3mYR+gKtMe#gC!oWQD%@@x%a~;2L6fqyBju{7iYTfZsbimlx;H4Iu%k z*cwgd@7Ufe?p*cCP%C!Vl zyEjXz#^z|`v&R|b7c0CE`MM2ysxm)4yOOiFdv>A(Z?0NvToMUUc1m{IJ|=AT`6>CE z0ZBd3?fJJl{g+KD$f^Qf6`>opN)=<9uJ-9O$)%xfbb^Br4@I2LlwQTZuggeGOQR^y zAo@VUGxOtZC1&~X%N1IIP#d+74wwKJ}kT&TvlG9!YN9XZc3ebs)%; zsef77t<=5R$vd$=o{`bR!4@I7`V)0wc=M@|7WVD!+{2MsHWnUhWsNZ#q9@)+{Ln70 z*f_H}{DQ;x_QV~PhkhyR%(B<7pJ{(Gs)Ik4RZ)NedzgbEHp5HhVgSw-~1bpvxN z)Ag6WH!p-?o5Ix?L$+cOInBAkxM%?Gda5=N?4Sj_w?;eHl5f-aJ;?DV#uPDvfIA4# zeh;AmNp5L@2*s$BJWQU^&OZ8h^B3^zw=HjNH`XE|rF6ez$*bqE&1o_}lg(Cvcq=qR ztS+R^u9}_R>-oe6%`JHDud+9@aJvO9n+Vjt3{{0}@M-|qNGFS)`p$sJK7lBft=&^m zAS0^6i`s}pqrMA@j1PJ^gquaiQu`+Q(K?p=m8(Q8FL(idl`k}ob=N?A$Y#1clsAsf z1W7x{z_=j30y4?>@dX9GdcNcJo(tv?^Ls66>b*uayk$j_TbNEiHjMmn*jt!_Z*&`X z3nZ5zm;(fLuaa!ISZ_VDusA0KHOP81eLz%o*T+`F2=TX`wLGEgvjlY$ql5kh0bbw|Nojd)b#|w)J$v`B5}w z_~A!#g!#SnZ?ybnMJu`tpdhKp&5%s+>gEv;wTN{o*zzqr7qgl=Z%-nedzIpm4+Z0q zjf3A<@i!)3V)w$;Df%Qj|A{d=wy)?Re-bmn4^W>}G1qawoLEA_fW7jLJi{>j!bCd< zNU~mv%c%efniaf_c*x9}-_8*5Mz5Esbv~gPnxFd`BCjQqvbBczX7Xb7S+FW(^f7$^ z+B+t>tS>BK`*rVwdicvk0>73U`Z_N|iQq$W{D5jTdUR6Xz6OlbZ zc4{)F%8VqOQ%%_@sdpUS?BE&*ru~ftZ~pepcZ-Dm^D)7GK`0X@&y(q$HxsS}&f*o0 zncVCFf=MOMAGqCphQFVDtI+}~aT8ZUqf$-I{-NO)Z^RNedy?8hgMytqOF{+Lr_21Z zvZi4g@4IVY=ox(BfbYT*k~jYEi-CC-#N$T~VPFn8bV&&$P%3@WLeD-T5c@o$kN4rj z!Ii;%5Ia>*?o(j$EEQsdG(+1**eahAu@LJ#_OO%omV*MeyT6S}`bhnBVf^gGHlYnY zDDT}+X@Fj&->0^TZEJjZ6k*BvE~<=@V+k$D=F%m~JCTgJXNISf!4{JtESbxrk%OilF6GIq)9#$s}Bms4`et0`$#wO~`#vR# z-s@lDhWw{Wl0W)tzNE)5vnm!;|EWuVj;AN}nrPlr?oVwBHw8*P_>r>4vAp5+t|FVD!b>5-`4HxIDel*n z0!=%3pqTu4i$*fzB5^sa9b5oKXD5pEcSS=i1y4R*zJ|i1*jwn{B)B|g(U%w5C)taH zr#G_ylI*R@Y-@gDrh=e(Ih9b+S}l3s4mM1k*$sdqUyVb}#JVDIBZDMDC-u!^g7^=r zV+#BS)@2j78iqJXhcglCmnlUEi1fYAap^yu&o0L@1+X_t1csznXD-n;fp{BT_^nUi z$OR^C9&Jt$>Z2RL6X##u(ER$6y8c6+LAye*#eN~DI9fHr>p z6K%$9vJiU($5-bJK6we3S5Xm(&Y5yc28w4?+MXJ!*87Rnc8dqbHv@#s?(U><-1pa# zua%VElixG$cC%zbl@blc*)DJ7n}%xD4bUs~^fa?R$(g8wtUmdqsI)^r;e0se&pf+I z4i51~EK9{FH+bdNkhKK))M;J$h2W`2s7~gtEvcPoy{zt4r7wT9fzX12Ek#S$|5v(c z{%Hh6(2AR(bp`a>dykajt-kq*GOwhr#%zN_smhLsA&V;5jooDl$S)|kDR`yzajYu| zGVWLvtP3%3QU?`h_p1bPSQKIT_jWd_;iJMjn$sTEm%De|IJJqFgymxnPm}PPgyCpv zw%_ui@Dob+pH3~wK1m^XG-N3=t^8$e;24&-q~|<`wtL&53vyU~f^TCCtt8W$JM z6_V2X*Q*3g7*jlN1+vcK-m@qu^yaf3LqYVAIMr<($NyS&GVV^Sbz)3*I6jY!Imm8W zcj&r=$#LghD^+eq&3MovC)Vn&X?<5+p;M75(W6Q_Z~hFJ1xzl@{NQZ71t!h@=GZ_G zQmClX#4;76aMff$POfku7^1iK#!_j}loCLz6PHm1`bmNhspCu`PaxQxw|h*DTJ_3I zs1b*<+K>$zO58UW`Q+)KV=SO*`naYP@%Z6gcur-^SBGGEe5_gj^VLr0+BJ}Q!~Lc* zTD$G`qBV)^<_QSP3@F>s$?mY9d)!2p@N#)wy$Z|4+$@=@99PSiG=3@Nqpg(ojU(Lc z631k>uV!BD(J0G=v+aOHo3ATwEO-qmc&RMGexJQSa4hRI3UoaA`7i2odHZ1^BX#Ha zN@(_UTN6wPqFnysfVnW<%f75oOG#|KpZ?%;49Au-{kYmoY|w>T>(1v2qJfr(20G^R z>KLVe{KdR+MvkXXy8>5Ex`@E>Kvpn$+|t?EK##v@X%oNN6`e}jYW?22gMnor12#HL zL-K)4^2z%~NR94=U(`pEkj>q%BxR!8b&R$cpFjGhg`vu?Sr10}QM@zAF3QrKNdak% zvacCp-16RaI23UbYj~TOGRN?*G&7(}P^^waE#;C>!w?QOw5!O(siRr`DXV z*W0=8ui1Dvy}lLhM!KYso{4LK7q7wYc|7k;A)@c%C=K^d--x$tkd*#>QRS}Yw_Ke5%yY6SM|{YtB+(coFA3O8-$I()V!Swtqdn=L;UFHwN|lqG zbx=K)9)CjvVXX6Nqi*mb7~~(qH8!RFm|KdTYwiVyM8^g36(yfAj0Q8TW1D_~!lo&8 z7Sp)Q>T_y#dF1Hgq8Pl72Z5MnNRE|sd!zKHKZuX6hpQF^0nz?4Iq!-g@;_Gs6V$lj zpSjsbaSWjM@Au&NB3e0?jX!W=)qBV>Gv5y!4uNXWhetfsz0m$RMh_3l*nOQDRf1p- zU{+qxXEPcXlM|J|->jK&blr58k&)?{;L$2Z%tqGyvh7?cE5PTr*dxuaoB`6RDm%#A z$t0d+U3-|*BFs#u8GXit`g3ltPhAUBI1)ybKE;5^d z)mv@SFVpq6>Y*s?_iO0tt&RBOWNov_!&HlzHxh28=0y3fFD#y2nK`4`kE(qz6#5~C z0SO>mdnc!MCGL$se+z;iN}~S#Ut&;E#q>{ydP53K_gYSpBx>^c9j4`}0<0WSc~=Q^ z6#6|C)bmPhZ#82)aSGn{cKRa|TG+a9^LBPzx=+iuxssaR>ne19ejbvkqU}9A{WY%+ zGHzQQq6^WfO{WWZ#UAW8Mdf#@7;?~l2l)^u8cr3dYGxSz1T9{zb!;OGn;(qVAyZBL zCClgFkDuVT0ly)j>(g6Bl2j7-f|zqJxv6GXXTEvB&DiE;@4#?;W*aFOXDCf@;@gSc z?%82Z8{9nqw1l5CzUfA-13!EK9qx-o@+NWR(|)G{hb3(Kbd&|8_8b{>(Plcd{}7}$ z1W02jb|(Vcw7Mzz-D^ZepMD^zOfZ5#h2Sr6MAN+VbvYi5Y_IbGm7lJTbmlt`)gJZt*Kw8oEUv;9%WsD^p z-3~=@%Lliztmd-{Mq-)M2kX?1<31EbmzsYQ_r?I9d1*8*TI00;zvbVV;QWD=t&c0# z;@jBI+Nf?z2(7rdohVT^r{$!HGrQoKy)jIQMKTiZ?sYBb;%i3bg18l8xd*ycW%4Da z!Y~WgYTO%HTz5fYTHy`>4Je-~fCD-aX*o=%E_Y+2I*<+t2nvVw89l+%H4n0DMP||I z$}Zk2>u{l0yj34D=Sqn?CKZ)Dxx$j6!{To)_^BNziq?#uWZgeaJqUMweiz+Y#irZQ z?9w(w=71oVamS%-so#j^dAP~LgTf|7m%FE`8|>RE37{8PzU~|*TeaTjPl@{>Go*-R znz&hE272{chfk7&KN)gn2E?tQ#*2c62{T@}peGCW+aYA?)(t@ABLJEMT&S{IDE`+y z=>y3657BdQ!3aD>5-51fAGRHipAil4|r^r5mk5 z-oDqqYtaA$D)B}6owQ12w91F3Xg67FytNx^MCkdl!r?6n+UTRDnQP(%qf5N7?6q5^ zGITWTzeJV$)1P7W!Ql%Q&##>tVy0ANB=Y@s-Lam17De= z=nRmmA#CBNtbiR{eEW|gp{V?C;^9S$8tKDieXDBR#KJx{$qj#`n@Fy{obt{-^kr9V z#y3qaqpO@$2`j=@oE@cwXN@ZE#=mYN#ouwgQ0{|s<&MW8;fcMD{1`ku`R^D>PM0aC zD&xPdSzwu%J;Wm}T+}X4u>FKpHNY`x#iQ{!T!Cx}-G(CJ+#tWpSXt>g!|_xFjE^9- zfjijWfyRGm!g5IjV-Ybs?88@it_1Qe;r7fq-~v}^vJ8It)%Tu%$8LuaL_fyOQAvLz7>?$xB` zjHuCT$G6hz$4pBgF{3nze-S`j9YO2gCM>`R!Y_cq6;O>c6G))apHkLCV3(#KyduBi zU?j>+`C++7iF^L(KWR8c<&vfJPrJ%|{I0&q2;}j03+y6@{LB?PLF?uOnX#QTXN``t zOD9DUez1!yeNjccgluJ#(jAHsJuGbHVn)19it@ZX(N}A6Snl@-0Nm{#)nj45wTJZo z5>;klqmb}PeHw#={!V|LNAkKvlD>Us_3aK;fCf{9hTvz@-!;OI-g$F6w|j+tUt#z0 zQGjw8Ixs0KwWsgcM^{=w$KotNge1Q#>-r)D+17nG4W|GUH3+2zRrxS1w_~%NJKdeBy%~03x)^Fh7rd1 zXTV#SnR#6Z-nE)MB4znuh_RSFo+E4Wqc6qvnZ!$Ko$0sAs-jlsv9JSa??vL(!wd)G z4XCffabbm5(nf0FQ{o@)vmERJcMGmVmdW=f!DC)8JywL^g962_)UFM7q`W&GJ>Hzm zxM{_bOMlAO;@tSo@BhWi2a@pc2%a1l%Pqfq91Xt>QL3~6`%U<6!OabvBYCaApj!Q> z)HghvUn)MwSvDB?P?rcC%=apz{f)nH2WZKsC@(yCq9WE+#iF%W@iI#hI~*b;?8k0_ zPUdimEeq*uJ5j*fxcdl)FM4y=TUx*$<^)yHjnJb~GmK&+hc&xHn+u@fAwu_ktC?6u zFeLM7Nt4=a`6q;5^GxMZ2RVoko_RwC%%YE6C1$z21BYBO#&1Xo7df6N8$!;lC~PE8 zYjSy`Xk4|kln%}_6Ny^okNWA~%-VqbY^#kl_+<~GG$HfiwA9>171Kg^i`;LwPlkzq z`w|Aa{kE#iv@JZ>5Q+Sq4;uy(j*#=7F~&>OR+o!EixapEWHCZ5oM8P?>G7G zn;Az+&1z3(sTWi3xTES?!SyQ(wW}a*5qYhbo0k6gwx1pVGDIo<^6K%p4o`-({5^4c z_5kvG67qZ{mJhDc;`6`p&TF~6SU&ohSL{tX>J{N;bJWfE7JjkkQQSmc7PncE{!k!k z{w%g>najuFusdIO2_S7#j;js5e#zRMhyB&*K_HD2*&zVrvUcuv4kNlwN0XJRG?iGtazT z1kszd|Lr~SEbSN7UHE~QR2lKTv|CCwHGRWGVRrY!EUk4C?SCpNPn+2vBWzuB?&|T1 zpJ~OkGBJhnirqSZ<#B1pJF4WyrV9nZ(uS66GL?`<58J4Q>NKa;rk1m85+2tbg=|ND z-6#;fV?Hf)fq0OnAg@hB3N)VF&$Nv7Aqk~RgDJkC2Z51iy*}Ue)1EsZ9`$nDp@`;1eu^K87dgqtGu6XKW+AgGJR8<7s@b~r(V)K&Ft%d z)zQ2<>C{si%({v*c%XJn(0sz?bUo-smGs5lXvbYe)97T_;+hpHlx1c(THoMbXIb_( zQPdL#uWsXw838m*)iFMDIR28n#Wl)0aZcHRt7U4n+A?i@DKEpuV2!2(ma1;QFn~wW z%7Q5<(!ht^LJJ@lN}*@)ON{?b*tj3@R|QbI176idVKE+=?xs^^`X?c~~(Fl{D13oGD^dhEC(jR_>Hp3p7x3wHP}^Blb(-$MRtj(St;k ztVl+o5W8>hC&?6zW2J!Z=tuoSXrUeI=ioA`Thn&ApYnr=w?N|leOax8TdN2v9kfxe z-p@7I;KCdbanijp{+ajwkvz^VT0+uR_gOiR&bH$^Q%moo;#4uPe&X z@aBtgN+3oCf5*e8jtlWnS}clw`q%u?kq-eQiYROGKHH-GF`D zWDQPqOKlUn>C)<@^*DUBk2nW?sIxbxj!I>{Q?$3*AI8g_a9kbzk)&(3Zb0S8_2Krs z`};_9mkaarp1SLk?ixSi8`8$PPsBBJJAPR73R9WiNTpH=tzqu8I42!i+M~>87vj^A z(#$bO-*=mGcAg&=;?bLm+;`YP*kYL5=jNVM#^?!xHzYGF62Sr0T|MsAR+iUU^T38L zobfmMb0cYy&eRi+$`v(3Tq?G>wWn&{l*~;TNS!@uaqBbrd{V)z!HC(;YTP|GaW$uL z(g2emF`^QkIblwx6485z<4v>TYoED}E3URD@A@QH@G~|+V=(lURps8`&T|^{KW^^Z z%(jgi|3uQ4ul2Jh1%C+5o5g~S15#gV@R8IvY(D!u(uyxAX%KNV{D6*VdH=fF7&zCz z+&}kiq4p;r6DP$1XEV4o;%G!#c?6BNWB@T0-L)xsr8V(tgEq|0IyaHiM!xiWr;BJs zystaJ0TokMoelZ~45_YEEDl2vg|21qFUyTm_dVv{3`sX%t`Kfpgqd=&XVYT-B)frR zyww#sdn*91VF|hqLMGK+T=iR;c&YiX!BP_9oD6{!u4jhW4&)o`#&m3cp4!7dlKXnS z-0^2heJ&@ngMC^e_ByE5`&T47q_&_|IY|5wA}aSu?H z;K!7)P-cxaRNyYgg5ry;Xc>A za2|1v5#44gcEccC#Rt{8fh3`GM86>#wh_hw)Txi%LhsW+6mEt`;I>r;9F0~P>N&~_-ujTPwI0qg{1Zs=*!A%xrTym=L);OLc zi8siO{l6!yF^n|cLVfL(tr@Do6rH0zOCJP@TaLa?id%P6jy93y^4EmrJc$Gwaoa5k zrzyJ!lD@Egs*UFtLGLOUa{AKNxO{fO8b}w2MQNn#*Qz4 z>!{gxysAiy8BToAt@A5ZOm0u%c{F(I!DA&q4fIlTGN6`MH8X{18i51$Uc7Rhs;==rgI zGh3)=4d>#VOw11N-WEsf*F233!k6Z>oz{v*3>g~Lwice@)dxpVr?f+n1EZDK#mLg~AX23TyjXfnVI z0bb$%%l9W6ISwe+5p$WE-Uo#UuNOQ$=xh9S54mDDVW|Wwh)hXx($h}qA@EVPBVe4@ zb@MgLn7p@xqj-@+Hjf*Gil+KKs~NJsvmEKF+yUFwyho}V+t+ImalPj-Mv%%@7q7C`vkR?ATRAO#2 z`ZfF+GiG_kjZcbSemhU_9#;DUUTtj5x2q~yOooPB)qh^&WUn)WZ*-%sH0J@cg7&n# z2J09X{NEDv9|_`tTfMg%%^voWM985HdP7P#_LYE11B2058-4>~QhRIf1gha@2bU8J zEbPPMWdZUMA}eLbZLI!aYl_AsGtcx*c?GEa!_wR#F1t_DU%T(*6}{xiLr?AE!`BAT zZZc#y*0fjaN!>g>7m~o?wIicIfyTCP#4Pu>yQ)uZv=bOP?kFk)9Yp77_Jxuur<$qR zT3+IF)~{XT)^LUQG>l1oRAnv5vYFHxtO;hk1&INb8d{b#l_ZPO1H!v>D4~DZ)Ow=>p&XT-!%MJ>_Ye4K`;NXYto-=OD9&Q2$=o zqu*_|{>&e5rql*u&Yu23|2rtp0m4=eaFO{N|I;8i)~_5bVH5mT17~DK!qpAVNU>YW zoxH1k9Nh}#aABgXCorf3Du-W%khUDSD6eBOz^cjBlB|S}mucmjyuREw;y2!3jLptd z?;Vwyb{8vajoa+eUccXJJG|Gy{HuWox~rmYmy*RsC`C!QA>6VTQNk;5a=M@)pS zy)q!0gw7uUdc)43ox?Y}&_icuc=ZvFPvE4sm7-ASU5jQZ7d2pB7}Y*%zBZrvq48+r zL8*CfLoK1ouS-O<1?e9AkGI)*u;m%F?Hoc!!E?>T_(ShMc$)WrVSwPo_^U1L)o_?zKKPzTZ<8Zn$LSV&=??3c$3QulTKcXmnFGN z@@9iVGamuomwb$b@)Xwh~TY#-*hk2!59 z7n~P)v{X{GfWgTur?a23Alwr>*)8oQPI8|4{HQ70%=lf~oZ!-J(2!zsjR&h-<-BgV z{Ma13?=7x_B%BbzgMM|-mLH1ua={=!?}l~hF{cPDajcbB@p$5Klql-z5>jmRcwXt- zYlw$2?{ZPCm8z5y+H5V#zAl%NYkXc4fX0(=v3$kYQRC2nVh$hd6C)fX-1eVAw*`Lo zoitf+B-<=7=9#hu*@y?XcO%z_VZam)UV&UHb&h%QBrWiPY`462aS?x`yh3lb?8~@G z_p>P1W$E;D1%%)!?rbHe?MT*XU|yV+$jNPhAlpz9hjagqU3059giZvb92I8&W4v=x z1_QE?$u6l?p`Vv|@kjCB(<6#Osc*!L8u4A^Ay@a|VtX8}EML_F=q-bi<%iwlI;+MHIBi@2DOp>&T`b-fuZMd`r18 z=&e}9GUjIN);Hm2j(1rfnNfB&NpD?ITvY8s4s@S8wbv%vQ}t8gA1cfVe;m!RPEomM zf7h^=G*8orpWl@HLu?cs$Llm)mM+<*O`P6=H&1GBGu*Atns$PRgZb%!Qw$-JvE*Xqvg`wX zJ9^sW{NquY-PCY<}l-M(g*R zwLYT)9;(NZ<}Q|bmj?vWyM3M8qR6QN|AqwK z<*QsY&ZX$k|Kct0Z}_3A+&XUSi5x^TE#uzXEHUjFJ1qdNr`y^^6B#9giE~sVx9|YsS{nYg2Y}-UjjkAg(7c8 z21$h!24!YNxUOkr`0nd1h1bV&%e;HhU-A}d2A?`t3_Cl167s#{ldo zNy5{2tl!46Vyrkv;MRtq-<2~nB=+7*(WjgY9cB%@TZZMop$`_D*a}<$%j&O=>bo7A zsg0^{%=bFvi6W4K%{i((4yF$`B7uLl(Z}xVfVTCunOJww;PLM&2jndY8Sa?7CkkwYFnbWE7nU?|#IBEr`#HEH2CLf;^# z#EncHef)UQx+G`hQC=`}=t(tSO=p=k(HAOn0sThBklNy~u!}K)Ho4+U4!if{6M}dN zVC05R(0*6QACqJJMCd-UUgOo!OV&#m%TW`r1M$w%_t(?o7&K)K62xm2s_Pz_^Wr3g zG(pz+OJXrQPsDMD&>&cG4ia)W=d{EiMpBP1XNT=q$f#{NSO*@_D#ys>>Ar9$}b66{Or`r$gK*5iSF!(X6-(H!%nBsaj=(9v*7-Zam z2G{ePG)cf0UR%!r0-^#4`E&{6(eC| zpRVpI)epLUqg%*)T19uBs`JH4B-vGSJ5?t(b{IeLKrnO-E#Ui4oq;9N7WcY}yjczP z!);e;olyi6j3nNr`4?kBHL%j>CH3kMpiiF6iz><08gX-M%&Xgb7o4J|3sNpgKW~0G z69h?_A-KkKPDA+&w_d?c$e&#WVkdHb=g))+zdI!s5W>Pp{>RDrQ2Lxy>YNmUWm0lOGkP?vhH<#t^Ozm9X@XIdsziue+ zL-kfYD^O+UPiR|kI__oYGfM69MHMLmeY)DL#CO84LRi+i&E+73v;NsE>@>)*n%W;e zRzWehEgj1e7{z+6iE_=^cBvqEVkL!yO%_n7`~1(=8as+2+qv%|1$jFG%LcN_APNB4 zz_|e%O`^aYyJj4dpgG-r0edtAt-_<3+^XX z+sy*}72tp0U1CElyCs`<@&2>;YJR=KEI@Zc^;PIn9fqxmc#q_{O;{$JX5+YC*$fck zh$3Xzt}AZhK5`>iP;QnfZ6-bkEzup|_*-@J1*c|cUxcz{&f4SUGU6dHCgyxgtVb#2hC zS@RlpoU~my(dyB2w<4I*MN(NSr;E8o!hW1R(KSrP%z*lz~V@7Gc zBY;!0Zob9>xs!Yy4c4?r3{^+k~THs;Vn7Xf|Fl7WZ6KL^9w!^dJOI#E(Imq)cTDGc>>~_nXNNtMbn3HXkr9H5u!&e|tw zc0VE2CnbK&$BTz>@equdEmTzhI$i5wh64EKEp*3h&2CH5D5{k_Qp+zpd z45cqpv{lWO;wL2y`<9=G(Z#s@^|0gNjZ_&3p`B;~LDc4Tup&_gj*X99%|Si$@r6~~ zi5FtN)fFODE-CuBPf_EG|DH0uc{$diK1Ot+T;78-=N8wa9WeP}bV=&(Y1i_g=EkU! z+W7=nU+9s9 z%3aygth6!sYmpOz1eXlPH4-QKnVG2X+~GCLO7Qm1a%W~Kidw7Toq&*-?!Q5m!J3h> zaJpdmX6Lx(wNF6f*p!4|ebwC$ue%V0{i-PNY}!cW8&Efs`2DU9lI+Dw-s2bVDee~i z5nvzqVAkbVuF9$2J1>9JDE;^#d5np$>wRXZ;d*#05NLjns3`%1aBR<*Ty@SoF`9BM ziZX`aE&0qQ1p=4xbjx3tF`fT_KNboMfIli6Bf#1g?c>f810U8NDq=lf>ljZCJ9&@> zej|E!Y3w!|<+oXFEPGBGW&d9MAhiTW=vhAH)pU|gky%T7Ul)_bFN_Qwvr4^ zLo6%866`TG20t$DQQiL<4E9M-d6wO~p2P?+W#2g)M0KXsn@`TSoNAsC-z!KM&W)`H z)L-4@vB)xK!J%~xq000P?qR#OFGCk~&wIUnc1#D$Fe%$J$YQSpiSANc8fwU`kv!e) zGp{mt9dJ3mPQQsu*uJa4JYg=eho{3x4#Z9nhTww!9p$zrYE|#oUrN_TUD=0|=;JfQ zBP2ZIT5&hVBO|ay+l}<4;sPNgI=QrV-dxt#=)Bm}glw>Bt?d(O7+>;ER&evpNII5h zTnV+=cGVr4n68(@929ZeBl8vjK7vozuFR!kd8WlPh2*OB^_dt!bU ztpYBFpCf@S`Z6;og_Op@gf!x6d6KkyC?{FRf@cl(#m%E_S`mzAL$=_ks`ZywPg{om zO+R>E#ez(=N;|A+-)y-ekeuTjdkWI`X1LiGCaavdFpAivRPQ3F%^+=?q*ZaW$vQ$0##pmW!R~ zdZXWC|Xrpewu~>CwwUlj9uVr$g7003m0?>1m9*}8+CNGzk zU6A6_f*o(IB_4>*vuik?q3S{3Du$qYe8R9i@xi)0X7@uc0&Eu=mG(p^URYvw0bBUi zMIxgglB_V|<^xEgbPE3vAd;e99t6z1q=n_rY><>1j^BxuKX_Mkq?2Pt!*5~uALcV~=mvlve|Ar=jsc4^-n7ecR@L01=k+7pzQcm3`&tm+gS+5LUtYt@&3 zy#RP46xXX1s6AAuKPr!_&(;5EXY8jNCxI9Mp@K>wWnt9XE20{q#KlMoO|YAA0zH+( z&5w(FG21;>x3zTwG;90;x_BDj(ttyFu?3eIs8fIS9=tEjAYBohKoEUm*tQ%2b)o!X z5DZQ3Vm@EnbDPqFt|O;$U&YEmbbford7G$2xh=mod4S$6dk({r;`|C=lg7znZh>W! zx9-w+EgLlZows=(U(h3~GOY}UrpBSC!9_uiUASuLiG?h|-{U#WU}tf8&nz zIup3t>&#ptcSne|PVLw*mT1`xAMs%n33u0>jR8sMt$9s(4?JW0%fX{i<+i(xcI z9-$m%9ZT#FbnrHtWA|=!u|-{3&QZJ8wbZ3dUN$36`+b1pVz*Ip(g(xQ9{|x?%>BeW+wShvG9T9-{gY zR6attzCIgT`EPDYdyjOw1te)m*lifKh~#NrUFZAtb~ zh_k!sV2l@E@sYqqQ-w|YPVWUKGg>NJMB98UzlLBa6$vG!;tsw5z9<|^2^Bt;ZrEyS zq~Z=T1=O9P;jr24bHy);H)pPc?!r0}cU_$x|B928IUPzc#;q@|U4Eow6D8^eE!v)K zt)dYz8F5*b24i&kJe2+C)#uN?Ry-Vm{}vrS)ZzSz8+S3x`KKde1R4)WVY0xU^B<(l zgM|Er7Yq*zvR~;-6^$7Z5kFZM?y1-*!`n#u*x_>;v9wc)?_n-<+cbduG9;fqz9lh{ zwsXDOmL z_12I1wDOOM+mY*RYi_UB@F12(3EdH4KYud<+AkQq{G7UDJ8N5{et>9t%{IDeY7|@l zdOc$Gj?c z`LKDrrI$ca+j;PJGBL2!`#wdqunAJ|?`)`BmUg<`krf0cq$wtjW|mT^4vsfDIEAL| zDc>Bt5a12E0Ub1fPlu&%LS0Re@kM;opM~G>k+Cib$~om~WCUH_l0rNC1Sd*vVNnn> zyf>@R>s9kP1~ys~V}Lu)2&PIijgWta1**mxIaD(5Pc*Dljy8Sn@t77snsX;Ms{>}Z zrUseujHz42MPaA5>}jocl~o^Uhr7qkYmt#z0U^H#SCsYp3iCe%VkQrf`P*8?cN)sL zq#yV(L^KSL36WbpzaRjf5+Xv+>7hq5h(Jh}Y%H@+n|WV(wEuxQs88%bcYIv2t#*Chjce6Ii%#!NJ~3(&V0{!&UxSW_x--L_|LUm>v`sW zu4`X=?`z-79MbAH`1w-@4#4WW~lO{{BoSZx%IXN7tNqm3ghPcAt(u+Dg>C#)_=57J9 zsA9L!af&zLNyvSNw(Q|Ip((i{U_c1)F{j7AOTPaLpEo!EZPipHp@?^_8Y zbs*SO+9S8J}XA!hx+5 zE6cu6$lQ0&K=V_E@Pqq#-OB6aB6QGDnP11vEZ-IJEzxC?zHNcuZu#!5G5amO9S-h9Kc6Iq_ z-IF1iUVL+2ZM-nT)RTW*kPi}!JHdboDTDhR6Z5~i=4|jLxQ^%u(mDPFRa3X?YJezM z{m1v3-hC$lHj31S$}F{KyjObJ2=};nw$S$?@&dxhr+I^b`0zN~&MqQucA zl#H&VD_}6dA8=O6-JQVVGFU68huKDa{2|nzVb8Io#ghc9o{!o_FJuhe{&h|hObgwZ z+ITshjoRosjy!aMc&KE50(SY+?4``Wntmfyp5jOUmoZTV_1F$3kdnMoPxj%W<_q#-unE1dotjopF1A= z{TYNOlt;^kG6E`^E^Yl}e7e31%hfQthSdTK`Drj(7fgkVlCt2js4aEK=>m7?nSY^* zuYcuNbwrf&2;_QO4cO5AVO|i)=|@@l4iDF~ zV}gq1%y$+4yKwA+P+?9iDTv9Y)R>Mt=%7=<<3<B0Z{*6`2n0Dwk%UjH`$YZDcK1(1I!IQx7=sPL5v*%wb5NxQj6fPB!Xz*M}%wTXLD z*DDrve2)qAVt`4wKk`<4r5`?Mq8~ujv=#iz8Og4UV^q8b*uCi*-=ZIA3dZ~40_aOe}!OQeI0uG z?ZzNCkH)1Ojd#u<-y&W2%Ylh2MNGcrmQTisOSPon&B2&u#i#4->VTo#;0r2q+E)z0 z*bSc5kt&JfO(eMHifG}Ou2DXyNq#;~DweZi%0>B!SHy!&36$pn5JCXy7V~<&C+3b6 zC9ip{1y-)Nls>^8G*j)HEQ+6Ov1mA(h4HWj&mG;ooZDlZ^!0VE+p^`;x@-dqTddPc z_V|N;vFB}*g!%tP<)KE52MVUf24I&0+b(iKg4y3Q#OfTuj*CsPKcrhRJgYBh$<$Wx zNYM2dH!8tHG8%x}Jh?ON6jCT*Wc|EO)3^!T6f3VhXqKp>*TcbP+gH>cQKGJ}e@?%5 zXw1)Z4cz)(q}Z5!CFvX=RCMsBPUb=7C%l0K*G--rSYmY3fY%`^*NV;|vB!NMAApZu zb$OCEz+kxR6t-Wg$B5d*o4gX3^sV768Zce0#O!DG)p+LL<6-2uux)Ys%Q&uos?oo1 zhTd_7X6Vyjy`j%;?j8|K${k0E9Nv|HQQWZlPG4$ULCj zq@5=5W_Dtl>&D22Y;)k}WkFST?XDmL(6-+R8ksx?C`?@G{WuQ4PXhFq^dZ%X)~-y? zvKD$GXg7T&3pVJpqG5f{hxF?hw*4)AAIghckKVio-4AxP`3yb-2Iy4?it<15!qqKD zZX|b1wAohreDsl^vR+Pd8mnU|B67-+ zHBXJBazf&%KsPHmm^)fB~vQHF8AgLM>bZTpy`_OP4ks+90 zp3sOCzxe_HQkYB=#?ulViIN-m6(t~jC*)NlG!@VyAwFe?vjFXH@%zgcV5_iVgBWHb z-JIcQ!U3olUyawOr-jpA$hy%aQ#K2yA%)fF1_6JJ5i+*yOzX_ybeV<@zL!F=WP5%G z5dL`NC^yjmwrh#0zJ8&CKR^FZ)`53|;MmXxicr6N>Vh$ZK)S530$k3^!c8keNhvV! zujYe>g>YvlBl747m(RfTZ|}l-Zb<%QDFH@=e}+>RY~{RFVgtKpTj5xOTH^Le zF%&DO?-*8i&GrOdEB`18Pgaqt#f(6~Sr_*7aM2n@2YVH{P7 zvVCuYu$v%EY<>bG#7nP<&{#{1c>xA9FMVvb=P0Q-(e3_532o=Zcfr z*{FO2A@OWV5gp7=(Fs7kY}CTiO$-+;0D*Y_B%6h-L9w4#WQ%^n7$V^xy+ z8*JtHAYu02g7VIQA9TUx;Py1EP)JDK0aCnduSL)Qhcgure!@8aI6JyUg7QxHJzy;} zPYoXsQRvToB1GYB!lDoGHjvEdlf|7~(|5?t>|gN%sB(Ko5PTUz^_Jnd)(LF0DG!@R-I9` zBcCDa4q~+c_jtVNe#G5yrl%UaJRzlsquW5}9W=I60(Lh%28YGg6hMm@9S{v2ka>M?+h1=eKw>`DP_Mk_^b>3csG|T>aw$4|>NohR**l z{Z3E%55py8K~Ci8v{-|Y4f!3l;BtC*=cf%40H=)+H&Qf^R8$_<10|Q zm>2gOY{y-4wUwVSjp%ptGnropE{NG(*C(2O!4&1?X?awUoxF6x9uS#|cMy#{-jfby zSHt_CP(#T5aFJ46*ym`a2WHBdvo3M;af>rN(F@oOoKP|~vgaInWdnkMt<#oG%>ttc z2v%aO0)>igHHap`h{jH40Lwhc5=k=$U`voJsu5ev4=&{~@YAf4bV6FlB(EMo1*-3y zax8w+R$EB2vbos~0k>$|J==``7Pk_vXdon0zLVee1=u)I(Iq$vxO&+yS?WL>pT~J{ z6Ms|Hd78L7@)kY`;f?=?8a0i81d0PuC;uuMSit9H%KqDGlKGY%q%475R{25Ko6U(g z4m{Kw{z+vz)LHzu^DvjGKi{nMsOrZbOpGDp(UV(M@Ka|C1(U1; zlg1@a3jMRoy5hx7#N8g{n9C%VT-~Cy^d>+ls_G$7MozRfJBv&Qx(Mg8FEPrDMO2a6 zfp2UT30lgPvHLY+@`41pvxxb}T-;o9i-lS0|GJkgPQo8$%{y7jG8Mkf!52}#dA0b2 zK@9D6QXJwgMC?4+@SK2jNBH$6J(SF?(fT1#`%fl6IB(LKn+BhE@Bz6w8(ra|$+f&L z0$^ExD*!Y^CZ(nRizB$hyg(5(Y$!562;8U^mJQ(AgSW8n7FF}asDD1 zBqz^w%AD- z%b8NiR%AQ8?K19JuIEs=M%wpQR7y5lj!+NeX#bKgM-SI9Si>Bc&cz>tSO=i75BSnf zLcUyXT5y^RLisnFA@)+O(g5X*B&()Me^Kf?i+q=wH=^`%gM26;C4(H;l#klh{e)wn znnodIwverUgCH7?Z8I@P@F*PWb@&DCCjI_w!YTLiB&h@SuN4sN0L*t>WWRzUS?5qOaIA=_(56-7IEdnQITUQ0gPaL^$t!|n6 zUfgHZIBvfm!l+o%CxOp~4>Y2|IB3Zyox4(0`sH%9H|vN5c{TqhR2TB^?jN?dD=`@b z%)DlrDh%4>7e_pbH}OnNToDzw#5V^VspL@iqHXv}cJ!ilzSQn=_8}wCeUeX9INnnC z9ZS*I62->Fevp=E>xUbB&jR7y{lBTze+x_@z_N*x))VN}0l^hCE7wx(j8)I&Ua*si zUc-S!mbYcw{f&sq;-%K{+je!1Aj^jW>n)%)T~mD9b{qo&bCEFZ1dgV5nVj9NjzOdYZny(2sx^Iy+iGYj`Z2yZ|DleWw_v3QQw z{2D1bt}CI^H%QGK7J;k^dbBQ%7VZi7e1K8!UqSypK*0ll!6g_}9wg-iDYj?!>KwdW zS65VE^jXKor7gUw+!u)4Hh5R3%)xS$*0x;H?KJG2J$kr3cBH16e_jGsH~TvU{|rKk zl75CE492ZXEQ`}IR5PABG5l)Kjii*9pphK2&$|=QxdO>+J->B7+E4 zGDs29?AR0)I5oGrjK|2FVyc}0;A=6Z)|#*K8=0x>G3F+tZI{-rOTA_kaI( z_XgUVD|SoDle*Q!b^Z|OLI2f>S;rpp16zG4$F~gO5$X zFEPu2(BY0_lFcp}ns=c4SGXV_71MV(Z(RFC28p2|8zk7m)StrQ#a?Q>e5na5>RUeH zkSpt!mp}Iu;8o|C^%M_-J!Ax?8M?6)2DTt|?u5Hk3j;MZ2t-_^&ax5?cpEaFRT;lJ zQEu*ed#wIV{j(~k$YXCRIZRGAGzTLO61D@iH%4l})yj}pyVeSYj;=xbH_{93-o2Ha z&UzPru_{%FWM@nqv1qqA4_rZrAI&MrpAxM5-^k6XfpXjKaF5XbGw#tg&UUhCu2X3K zV~e~G!n;SH_YBuG!4TPx+-7+<&RiwocOIgG$jxI3*yM>g@7~VyTsd|0hym0o;NBIv zvN#4jsO=m9p%JM;3*(Vyv4pafQc9(=tQ@lU^n}BU=PJut450Krs$dLJb1`pj8s<8k zTJv)33Biksoghc(Sc3SHD{;bny0j7}*==7GG}W zYt$w>E>i0%hACzx3V6cvUu=q2R0Kp>D3KI2tkdiRJ@dC3g z^(ooH{eSZGAZ*SEfayC|%QXOs9&ZkzqPkNrWscGVA9hsUt(_t%rf;4&p*=Vz z0WH5C?*oW;Kj6x~^9obL7(KaP*aJ#QrhUe~4Z+jB%TnZT6-_CJ!e7SXf22w$i3fB^ zI>OH49~(ZBkIMW<;c%N-rMnsthXdn|Nv^X+z zsLlEKWaqEy?LQW||3C3d`%Wen!%EqhaGIWQg;aheHb$}WojTn9Y}xBWL~h%%b=W~kQJSVu2`VDpCy}F$#oxxz~ zg74!K*OubO6WL!3u$otjyNE$hg@Z6$ujlD0C4gjQz-BB^d7` z#>?-|QzAdq1}D?GJQyaW99R>kCXFHGhJAXo#wd7>XU6iX3mT%ARIi`Jsjs9|V|mbO zad1-+$9Zym1FPhOmh0$x-IXft9$aOdWC+K#l(y``4m>aN#$aoLb~M%V4GELCtBHGG zeN-c#N>%m<3((gz*>ui5dQwrXR9;`B>8G+|ZzJaouW~%{%5%QWBV-%@W>B}VSU9?F z7xfDxTrOc&-~>KjwN6Pfio6_jo6}2EE?jD1_0{K1I0??6oc8n2Iz;lMN(4IUrGEYD z-JL65fLI9HqIl8If6ec5Jlbpy6QgGG9LX<#C^lN1vl|gpDEm+~tIb3G6i4xT@k-=G z`@~xRqhPZ&s2mOMiO8%qb5dz&e+{WZT#P=Ml_w<-e@qV(yFvBKU+K&jM1Z2S8IrB7z+ zya<;-W6~DaoF$Kv$y|~R(y8Vxkq2FGhD?rvpwjckZ!oK}ZsjT?%QFWPmv7}>4w^*l zOpPgkkwH5GqEXfZT7Bh$^KFO8@p=6u&M;r6uV*QJK9P}Q3NA3T_LE6uma@ePnPpmSdo{j%)|9fNBMTGyY-e5~0$B2hi0-|;$(qMcj;;{5#oTz4(8x9JbzssYE z{$0WWoVu6tK)myOC#rZFC3BOut@21y=VxTOzw0f2?^k5Vlr8UZZX!oWk7bCR;shCV`~7W1H*ZkD zji-cznih_5(fmY4D27#tK1Zg)UY=Q5j@=C3;_}h!HNB?(U|G%O*#QVl~M}8L(PnT|kESWtH_*OY$T6VYVAuJv(&(qiuBHo{MgMVnxAQm{* z13yZ}e71#!QcchLBFNlm47RuTy8uk$W3veFnT+ zfli!9)H_^PawWFj`ZaRVOjD%&kz7Zk%8co)0xU0y7)!xz_KJgrdqVO9&rmDqj z-dZ0haIM-i4rYuh8yhsu1CvZ1e~CAkPp4(A>m?I!J^b6=_wxoj8EVCB(RZ(=JnvQn z)l6nt6txd2)?f?F|Hw6l+R=26Es@mb(cW7qS03ll@=IQVXSQ&eJTcKU7aYpVhbm&* zWXXTLDFb`zEW%aKABSa*IahO8CQeltqako9&j6n47fa`6tBXCb-Xzf@ZYy zGFG)YGDi=#0tIJKpY4kmV`52b$x=~?QgKtMxmV-iMHb?FhXvnZ@XZI?lC)%mbG|_r z=bapy`i&uuC%c>hyNay|u`C~~I~q_eCDS9%BC2pVGrPmkGw1Kx<)xu79#`@e_ zlc}suVDig9{QkVOi>;&ozBIHrsu=KtARpF9Q_EQg zf?5fUF&V%3X?S0{jiy%J3T3-Z>-3Ondg4Qo%7gl-I1?Yn-9C$!Clp+xp^mnEzsW<$ z`*$t^1RCPDIYA@+w>G7uEKY6oe)@GjXGD_hw(+`si)Y0C{KddsW8O2yaYDaY%GcGu z&w8IPC2@gqA8ZB5@G;juSt#VrSZKR!SE6Ix4=~*GRvpdE-ia3iQ?I97&0XrlO$VV044q^=(Dy`wi+s_HecHd)Z9%6$7CI!@vXJ06^<^FU*y6F zMmabA`zyUA(ZZjK89qKC1MEUFsP_BP2Km0{CkfTji4`aq=KMZdS6awK1 zp7Xpi&nRYj=;3)zym3=dbbg$H`Q@G63HeBe(7v!7lba>PntQn-$4*WU&4JmmJi&c` zQnC>7{^JKl6GY_pq9a7hh;n-NcTN4}CTzAqR@ClpZA`1;nKtsXPiyUgACuRwV#;hb zV=?fgg)ksWToz5o!s6%h5W~Ht0S-|vd7WIH7)P5=Ms(-4A@*wJX3PfPI-cAytj zd?phLuiP8yT_Ey8N^TVQVTz6g=xRKZ<12MbAlNpioMfqGvOZ;C+eLnude%u#mAH~P zp35`1k-A{9b^0(I{Mm>q;oI?FOpfdyw}}7*0=%R7&Oe8Vo;`RRfr;IfwH)ou4>Dy+ z<>pUM(y?Q-;KVV-VX`a_!#GE*d-X0hlRk=vv1 z*~E(H?7-U-QK9LXy5nEyECX&Fohnvm8F}+&qt1rnD>mNJWq!$8c6Wmh+i3l5XYWEL z_3dY6%Vk%Yb5Z<^ia3_K=pBa}d%ko}$63M3v@njKzbuuro&n(;ah+2af8o$1)j>5s zT@5Mm_qv*iB9BS?$D{L`wu80m5k~W+oh)~jD+%!LV{)F6<`2Tb$vE%%!M=?fkif1J zYyf!xi1)w*h0o~l7xz+k@f*On0f zecLTwEIiC8(>}#|hS0d$_fasn$-;an0OS+O4xi1uh%}FgT%BKcpV19>$rX(z>~@Mb z?()=+2c1Kyue?k40XuSa=g;)d#|Z?VMU}E2a0QP(Zmf zN=`71W)<1vqvXShGYylAHlmB$K&O@d5zne;9*ZuLeY|dbLzL@!i+<1T(mfTedkOi} zy-Ca|C5YNzst3Fg8e;(_)EBvcoX}7Z|4-S#+9G624}#)qhI>(S-3T~ifTV%1!LPN* z(R961lJJCJw$BjJ$Z`w|$VP-Tx9dsLbQkDn)d%t(VM&Ailk92<=2X5r%avyN4UXb^cMt6L#$E+Gs zjwRj6He~n5#BY&xJB;05jV5u{H91)%0HE<&#hpQa9%F6AM1T2aW#rJXMS$wWU7v`R zvW3Eo_x0i(n`-3!-4Y|VUqOcK^Ktp@cJZglckRkVi^Tfl9Hj>B6`ss~#G+q**)_lJ zOx-5xJ94bO2=R3Br zaF2GsHV&dZ;)y@cvQg?e7_wtI)rN5#$u6GW~tMpO+_7c^Z~~t z8QrEBQGE`7HgoH(ewhYsc@c)w!R|<`rsT2i1ovoXVv&nZFW3F#U9Mq`Q_y_)*Ql)U zR!`G!;v7#Nj-8=wXw8B*HyS|Y64c#&R{Q(DPkPe7!H3>RY|PHc(wl{@-M_3~4n8;k z2!`Oop(YrbD&W=p%Fdf?5RSYyOj*oE{<-(6Ba%O%l2Ayz3 z1JOqg8oC$n%UvMbhH)g$@giB(%I5|>mDOKcPvJuhqymtlFGo}*+xdYlmStNb%ct$P-n_UhkF!aag@5~Q|JJuUrK024dTax0onS}*k++)%OuGc`no3WvWBjiX#47(Zz_$HTO~K-<(NEy0p%_9ps>cd z8ZfAg{Z6fvpYbN&7Qx!lEMj!N982C5j9N%MZNm>Rr#vwaip(QK==g_zehg5CIkn*7&_Ym31ohPJ1eK!K*!a5S|&IG_W9B=m1K`0yQ0e=Rp9<`BewLu4_* zbOpLXDK6yqNS^ycmN_Kqb<-}S{F+1Aj2LvoktP$P8}3Beld%aeLa2Mvf3Xzp+>@AN zPjD~baNHR%Q$3eJwgc>gkv*vOy(_YnFE+q$)&&wE6V2&}&xz2{LmL+MiO-<+m&zGC z!e&r&m6eKHTfWnnK6jo_Z&sJ}zeq=i>5WUEaP-VMA2Yx0MZ}j=%Y-HRSBZ}mt(P=4 zyjEq{sDVrp<;;y{R0aNb#3<9zx*_3FdFd7{UO~==`^rYx|{?)XB z^^j4;H$&dD^Z_G3D zwUx*S^xTI&HW>U`91IbS@}%qG?pE`C_I<$YojLpTdW8KWysTlkGTCSlKupT@dLNQ7 zjtIAVw{Dfva9$yLhbb)hwpGd4y2%(GzCZ%+;!nu}%)}_#gco){$xzCw;Z>AH z`$u77xmn^)zTF!pkGhEd2hY(bQ|lyeQ{*!7<3vN6%kgK$pX6soy2OktblPQ1I)0d> zk}GXR0Hl@39BdJm@ER)cSJk&jwH8Ie5a*M@4w>Woh&u1qh#5vQsXHHF`u?lLc9w}L z(^-D`=S`ess<{(C??&?jwnGtGU;tOt1saUjv39Dc+XCM>2a&d;6l~dfrP;Zs;TLhJ zIVBIV3B&rPNeu48^nzRtsKfan)!lPdCpz>>8=hD|pa^BHp z<`0P`@#kSt8VenoIQNmPJDMWmB&fXx06zWUZ0bIujxsLD%!6~IWa1Hb{lkDn@rqWuwKW8#cG?KN{ZR z5mNkme!%tM^`0LqshB$2C&W%U_0PI4D}%^P6-y*T|zJTgL((3BZMa5D_oY-%TVub%p)N7R>xU6DrA3|M4*w zjx?TOPlG(N)SG}z!tHz)eg;EZWVq2uW8IU`%;@kCaqZpmHf!sBdq_4?i{gE^m}9k~g< z$wi=u#3_kFx~Rm32hFxs)_%1)pWn4FtOmxXYQmry+6XNfkFJLlnf{D6BU&V#Zzb7T=1p8V*>v4&?@Bm=^XtM;`VAvS>+AJ!bnJ2TM_~{MVf@cvC z@xgYQtoI$M=tHp1p1k!#VTS~OoQ%X&v@Z>S;OB#W@-$~sBWe>okK)VVTICCcYMF64 zah2Zm{+N96K_4!CSEj_X98x(u_|F&GBQhHNj5!FckK#}z!mrz^fRbASi<)HPoglyiqm3zn%m_k?oUw9yA+4oKq_9K(j9IorX3u(G@I zY=%IzV1_AHv4e5H9P-S4MIldV8j42V+l{*2yw;||*qF}meH3n#5GNYt++&7Ws#h`)XA+J{)6TrU=r zBm`;#`rDrVbj{1DMASUO_#Sv7f_K(-%Rfhe2t@?f*|Inr^!jb{>pDVwPWIl)%oiIx zQfOsYzbjF{4L&eog(RD8Ay=vvzUMDgSupK#0%YkqcUwbjY|K}Q^KmD_j6?bUr)w!W z3-ngg`^0P8cNaN*lI-v(0Z@!y2Bj2tXh2ZRV1tRg;mG8K$@zuZ#*&RlO?A6n-j<}l z#^iC0^@J`hiJhSR%Jx6t%tF@|{Pyo?^x$vE+|zp*2Yo5xcHaKOb-WEr5RSt) zQyO8?>JV;%hOTG1MLi<`YI=#yoph{f`YQPq_HYBO74I(ZB57CG!W7N&w_?f49(eP~ zY#UPF+R@lkE<7ym!BR!N=|W9)lJ=f1ah?p?+R@5O{?ItyR7Z$Qne7~xF>&-z)lr~Z zADjCfD9G~gK5^CVsnmVeQyIMH%I!>JPYyE5>0^cjAXN<=^3leA0)Q#ATex>vhAWe5?1qWX)}rCRol~0Z)^7wZy5kbz~XCZVD!H3cO@==VZ(pA6kI?*d$sc*KH*@J$E;Q9&Ocb2aqX!?#V z=7d2fb~A(bO^ZTruB6?_I-P-LZ)FbObGXpDCM#W_h=b$)Rc+kj?$#mC8p(4`;1Xwr zOtzR)sDp?|7CRSkg5D>#8rMaW<#U)Y6zl@ z-~OaeST(DC$>Dt0W|lFL3dxN5>S&+@9?i5g@X2j_$a>IWM{_QY9}#h;1zOi%)r zj*)-x9#!tykkLI+6-TGeBdsU3}D}!e$pt%e6N9%JHx|Zj|9$A36aH@0n zAzv+XLX=v-z@;F+QmGdPecO8vC_WM;wm~xfcg|2KeBBM!EX+&(s}Psb`nGe^0SPWS zx-4-Qlwx8KxPTTM+i%NMK9_6{x5HQ$K?&~v4i8NOEK15!|Mc}tKMoXq#lx0w^Au$dbaJ&Kjtzn8=%e)R)67GLkg&f)d{&qy~Y- z{t2Bk2{L$jJe0pN{X5Lz&||1i07AUPFlSC7ll&0800(s>jh977o|QsIh3gs;PW^aBohhBKAl43O*KmJ^xoZUHv|kj zv}vd~!2#aKoKMNMUn*fO=Yz)NS z>}r+4s+Pi@64aJ^>s`~4zaIO*%DaBaR6`>sfSrzYT&Aifqg^R|<)x_&mM)#Mx%I<2 zvNPe8-G<-otIan#h)w|GPSgdZv(=Z}Bu{7dnN!e4NLLb0UIFM~znX|`SAx|eYE0?k z${AJeHP6#V+C5W&ch)-zQ&L9;+0pbj9eu8luC%;_8d~2!Lx7=a^6{~?CJj8k#3A3* zmH~%-J6p<5R`#cw1;@`|yU2B|RPuH2$~qy3q*6$>3H7@0xvoO?AaA8lTeQn?#^AH` z_QC55#gotj0F>ygFia8)*?tD=xHtG)gEQ8BP{V0BbUeDh!F}RyL4rWx3h?5hQ2tst zP+^8JtCo^O>D8DDGLz+~nCmV#H?NFr?rMaKx~2T34NMAv9R0QeA7rhPbf#q zSRReX)9-cun2r@Vlkx@mIe2S8KYmM;I0oqhU)pH23#Vduy}#LYz&?fKib~2~NqZGmasXcQ4tvx_P`Fsp}57P1D+=-B{`=PU0 zU6;UGZptxnPMmvY{|VIKt@5~f2CZu{Hn>ysGE@+RGl7P;3ae8w)d!$~Gb`mMUJM|mu3b_GxL z0BH*N(amb__I4ABkdS`~Hl`pzPyo26=af-_`^)t%sUV%yW@`YQ+GAoA3OiyNs_$?p z?Yi~RR z{(KqbxL@M0JP|2gzRtE2umrpqg8XXx)5YYvN>~ZJb8v3CJx=O2%R|N6&W2zm!W|QB)6cF{HyN^jmXyeVB^|VKF`p$W|bA+f^i{GG3!M}9eVNPJG?S9x& zl29^w_L3E^hlIC3dQXa$cq}u&Pqqh3K<1-St#4d$Vr8(%1peb3(oi8E)HJ2-Uu$6t z+0`sJAo*NzA$^HsQF{6WN_G?D@oUB1Zews~{9@Dps4^e^JvzS?&YN1?!V&(fUi1L` zEwplT%A>vO>|Pa=My}Qt`M%f|xkmVpd0_A#^8g-;R%dpbG6IJq_^R<;dDX8v+7D5k z1ijy3-+lCU+}@ZkuGg&l`CQePr?qaC1%Q6XO=wnzK5=(X|MtBulY{E8u!uD%T+}L}p*QNS<-|Z<>=m4zzR+{|# zl;p`aLbWo;`s3+=uW(z)rcPn48~B5QpXi7ST}buqAcHtFnpq6cDkjv=jA1ppPpwX7 z|=WWF_`n%U_l)YlXp{mD)t@l!IXAM5WZ?)&+k~ zcm_IN$N$B~F=C*Ue$-GJ*xkyaG!I^K`qMhE9?BgI$$sT}e}(%-ELkwLIkx-O+1cr6 z6KeoW9d5FU@idhDu4D#18XNRm3w;tl{AImdC_%78gt2UuA0_Q45m7UMex_nrO>bD*MBeh3g;XZm71eNX>DNV((aBPi zdlob`XREK{PTTYW)O2B2fkEq(i18O+MCb0_$W3FaR9>JbfNrf8Qp#PT1baEVZ9f=< zFOa<}cl2E7bdV3oblZ;Vr+x0Ax#;ygl3%C=5EV!{n&tRd`0F9t4zRDNx%fT@bwXVU zC8~7#85af!aT2z3CzU0Ba`Q^9(Ut3#E%~LG#Q*9elRaN|!WTe=SqqFbpRq{Wh(ai! zK*VGy&7kShD?WXXq7|UK0N-7@^lM#0=anKa4p#$jWbQAO0SCnt|SLCd|r+}{h(+j(m>4aVM%?DIS$C3>;{pU zvsp^}@<;9$fX&Y{t{#G3Du^{=Gdv?}xu9EYl5V9>B7CE|EsC*_-HrbxXXX=?i)wu~ z{PJG7qiR$DqozzF>Mf*5xV2kE)4*;p(^fBfSzE?|0@FJ?$1}XNf}9b}%BX(a%i5|B zh!RoCneE1+ds%TP(q;mxSe||F=d0+0=bF>>S;rG`3OMY1BI7P-+1G*4GT+k?+iTu%bdPjK}ELd zNeykI(EeidQ`e+btt^~l0fvMhmW{?EqXF11+20}SbvA0aUW<0Eio((e^l%zkr5PXQ zfK;Gwavn;35z_IZR|y+iI{Ngx-a$Oi8PJF?_5_Sah!j_U(lENwOT3wR)#5VfaL!KU zZM-XLk}z6W)KlCvZ5FaVJPA&L42TGwWIFSxaWF`-;7P`?u@5f#M~l z!OyhOqf@Qjg)Z>SQ|s|prnTGb?#c^rS8tv}kp4VpM7g~Ud=(g}o31Gbb~kCuEmSQ$ z8_hrYkx3bLY;rHpCMI95!kp>P@6d2C!cYAcm-imSRn&TE{yg#pky3n4mk5z$XAT+Z z^h1U&lgqgIG6=blR`I%Lx?J2_#@5c17fi`$z6@DvMu#`+UcBKmoofFhe>y+1iIzN# zb-q_17=-JrdPPPh*K;Ppy{afugyZN)ah)MQzqzBc*SJ{%c$+CW)c1G@ksDVOUpJZT zY<$p)O|JN1TRoJ12gvk|0g3*7=$|}XjHKPJ5%^a^TL-QP5JHJd?vZNX#%z9zS!V=mlMFYIA@r58VRP)d5u@bPM{WyL~)-_AnP?(Ok8j4^NbNlM^< zf4Qo`4Br@uKzhi`+0Lp*uif1&`7z?jYMEl|&Bcqlp_8??Qaty{g62`G(_7rrP}$Ohjml;W7P{l@d8!Df*r=P)V3wvZ@?>r~S5H z;;u|XXMsVf)uF{)Y6C1)(L|?vq>5^3AX&{<$V`~V!T^)Ysh?t{&-`WSYs@}hWf^GB z&Mttfe5I`TMb7~9ZQS%n3}$(wwBL{= z_v#o^rpK-Eo7Pw?QRb1v$W#}DbH0MEeDUdfg&Yo(YHgt4c$cA)dPd&9a(i;lp($uN zA-uvXM_vERD)me{%7-gYm=)`ROQ2WE{CmQ3j>M{fOx4X-(?;lO$Bf0G`cZmV@-D*oEg>`R}ah;F^JzSB0}25Mn*HRjOt!R^Q}?P(<(K7**-Gi%5?LXY_@eD93&O^y0rG5w4Y=PK zy}I*nNRkRLs|vtgGyIsLk}0ZVWd+5$>G}6NN5&2!zcShh`|`W;C1@{aOB0P4!PXhh z-@B`eu&3`k>WvbM@7ZqQ%#*i>qY!^=BcYZVa$~T9RRzUJZCG0z`<{S zOWL9xMtLOv3b>>0bGjR6*FFX^XRZCXiY7)XcR%t;{#1Q=QT}b{{R@Jg&zPS}F3XCN z7d^=uNEY+weSfVAQ!hL8(hr-GYZZBq`08YtT&nj{6-K zvU)j;GI@z{`{$O|B@3lz{L-)25R-37<7WH59KnA+E8yEXM=Y3_kwZ`fBcyE2R#UJzB> z1V}1oy~j9E-=(@0C>>cUznfOUvH+5h1x`tkqykL0E=vRduy94Tj!*0jD0Y0-^v<6< z==<*3(D7?gE|Ui?r|~2W>md7kb-40qU;i>GI7R^i)2+OI1{L+tJ03f@&ky7JTG^f> zT3wOztH?#1k6KEB!4#_+&>2W&g}BjA^-tY@Q+0F5!1JxhXPN{GwT#kg&HMPi+V_;s&`=~8ee=KS84mferu z1I3jkg~l&Y>~YHPAF?vuBsU8f{CE*KW})Nm=?lOyJE;<&vj_4B>H{Fj_)QhLbzE(8 zG3RR8wt`wRY}X!|%CYQxldF>NEjWI#h4vBk?dv}_u|Qs(eAJ{83MYvTFQ2D?CHqA@ z#o{boRlkk#WG(WB3kDr=LOE&_1R2_1?v$@En;Tj({(M*>n()d|a$6xY=lbz8Q? z+uR-}BsfGU;L%BZpB7A94-$!j^AuCYluiP4SU7eIk36Ld*N+K}Yg1$saw-g(43Z{Z z(%Uew%ZUPNpjr)O+mDwF_m4_LU4}I{gV9k+-(J1-i(>b;@oj0?isJdw|B{E(O3c8X z`iJU*Xm->S-94vLDxUgJt0ZT{nLq)qUi`kuNvdfl9EIsYB|;Plyz^@5sopFEjFU+Nk6t z$K|0D>#z+FDJFzACdT6|}z2HHkJ?gGBu>U}?&Ei9>1p98D5SbUxGief)(PUIX`t}^Ci_{oJzethzNhuy z7t(bg6>bIj0C6(#xCF3QH}619C>D9;civ>wQg)x9MY;W5&4Q{NU5lki=>06z7)bxyrBibmfqR zQjWBH6Tg42)Ux{=S1Yi$)<*=KW+VSjuR__608+^4#a|xz{+_T(%%6v^626MPR(5f| z|2>2avDboDka=E7w>?tIncF`R-c>8_o|0Fm`?O?s6W{*APdPQ6kWDntXXVq<8Y(pe z$D)93bZ81CLU%#9v2nYY_2+Spv=m)H0R&dOweNA_e9-N<5F&%UtzB+M{wu&KOLe&0 ziC+#Q6GEWK$;$74(Bj;%bU|ZIn7yt73v4hQiE4>#sne z@uX<~SQ+GlemkC}em$Q|Ld1)9B$|Cq%2bM#a&C65JDa~;*9^-jp_(z)+AUG3RKixj z9*i5M9$&I#FhzAi9tHL9p~*?UYiF~g5kpO;AW)y{j-hRRm^m$?qrU&`vLD{Xx~pVLw3n^p?+mR3 zDn0MP@e0Qitm|wcsnZ@891=JD-h2PU(!~W8gG^c~8R*hh^ERC>gOo*`Xy6aO!i2;* zB15x&njP9DL-;N0T`wLF@Y|%xcL84rmXIRI_e16_m zE_Dy3=qYwlqE{h2US>*swwbh7sET2=zQY7)4sZyzYyRZ(!P+1dehg{uk3qo{7R+4q zo=~s-Z#zVNEEz%tVB{=jDDs=DP7MvM%3k2pv>^O@O|MGIs}h;B;@JdgxtYU@@me~< zqIv!L`(zFT1?k{)A@!G`8lrjwM^O9><4EG5a~KN+xwOFWOwG>T-8{T*7flf4@&_p2 z>ieopjKRSB&`Fb<_W_H^e^v2;FgRA;8(|xz| z%ULC6mgoFM4{tSaaj0%VvQ@`Lh^LOMvL^Rd98=7-#7j%_COYvr(Db<5)u5h`Fg8pT zxMYqoM)RjVPoP0*JS;^s4;)(LZLnyE%s)RRD}C!F&J|hk-f&)BDkn$qZRe7PAlb%r z!HkryP!g&w#m^VrZ9szQS~Oa-PHM@et9p_R;}&Mo?STdMug*<^Y*?ljysSOvk%J3} z?9Z6)6o3Mz*N5#<>xz_`od~PysrbqTkmcX-QrJXAT=hOo(j%Qow+8;(X%*H- zqa8+2Q36uM4_~4{Tnl>jL%b6k!QnsPLyjT+QT7{+>zx$_va@X576BW$P})7`TAhPl z23(AWc9S_AL8JDM%khkkJJ;X!^hu@NWTNbE$-I=k!c~qTc96u@|5z%XGAjG>I5lT7E*I^ZcS2)PJ5ET)hgSuw%Vm_O{PB!XH9Uo>5 zwr}u3_&;3|mrnebOP+6pBQ8~Oy|NT_*c3L7X5_uxk4azgE*%D`Xks+W+~%0~a<&?{ zudhsJDPZ5(3V(ZE*4-z0(kjNLK=(mK?$Fgq{Rb*l-}J4MR=|2fA9$Oam<=(#v%dII z)-Ga%N&Dy3G zES)Go&{4G#%HGA-F2UE*`lL$z@OHHnX^UhIPG6SJ;}5t9%*pRNoNx1;_={0I$Ofjz zMl`M%AP#1EDAvU8v)hS~YxOGoYR#1DW|BQ>9DN@4rddgoaYq-G;Noo5E7ng^AE8$? z!Pq%;Sj4q1bgRPejK98Kb}$B*+X-E!qx$OQs1=Itl7)J$CpljFDg#KK(#z%2Om$pJ>j!ds`|J6R zoHTKWTK9a8;dMJw(*w^u8xdNfGZH{`qd`pWey=c~EvHPmCVzipB{<1W2M4(F(EG%V zpKF;9+I`+>%q+_Odz&OIXIQFuFoNwXM0Tp zux~e9@#p(*8|vC+0#O6XY&gDyR%Y(|KD>ChZuDmtuy+a)x)9&Z%azhcR|2 zy(rXSuCeB@qT?1^)vVeo@$X$L!hmGz_+C7T{@kVOLOfDME{ELlx5_gKj0LHIxLMOM zepEmG59MFebq%RVz^cqMoF;uMZUywbe#!07uOGKb&_IbGACKldjMYe01Av7i*)q6e zSfrVg`1B>E%=bP)j-FR(v>nEYhn6qW5ZcIh7O`^GFP9 zz~WZezS)|a(uf5@ubD+=FqF=@|{vp zGFs+a)^IPp#@6Ve{By8Smy?UfVy6gxS5X$A|ies{n}10wH^( zj@)XN^%tmD=vlKw#3?^Z6=4=;MkPBrla;#s24>SermSaR$7^#ZWyV4EX2jy>%+30Q z%q=WSudha%jcgpC;ung}K8kXkJ8^l=AJ-OD8R2TDmP^5JB?;HA@B|7GOJSjS4$C1MX4@>v z@acVP-$K3SuS)G;f&_5i>4A1)R3TH{A)zD{el+HCfv5Cf@r>M*2{kVJZ*PA&ZU+>rk}dl&^lQHj$YX=Fm+ka zt`eZ`&DnBznUI=p=P;sGU6-7-HxsSJAh8T6@lCQt3wryoZq3Q(2WnwPWsmA2DsDsp zxld2I0_G2p86eeBZ_4c}r}ih$oYs{2r@Coj08jK%$w#K%v)R40ZGs{Ms09d0ZyX^S zx)qtPqX{ z$Kf607+l$Q5(T{~RG{qdiOiaAG-!wIwy8{Jj^D^j-;&-{YwWS8K#khugd?R^d*8`-G^^IMZ_U!FfufSGkhf)y+DS7 zOu%JcZas&ptFLz@4=Cx}P6~5}RKER2p)k!g0h9y-wljV4mB;kflX%8xc)`qObfH9c zN}Ti^oc*fh1%UHo74mC;8F&R!bO2BAl%%HxqrW$u*#~}%d5vL_$A!vcePbRP_5Kvs zJy13fr1S{{WY%9e>XO7ZoWCXOMi^TXaGev2C2PqAbg?F0O{~cQwUUw}Kc>YiUu1l~ zuTezIc9D)*mp&ou1`@AKspm1N@`&njVt{}lOi@${kdm6k&-|hZaHTY0nKX~=j8-jl z?u44;VLlI-5ZT`x3Cq)3WhBVjwUed2*b~|S>M_DBRJzoW()XmfJyOj5C&eWqrm9|9 zEMnHn?GDwcG+18OLorehW88iIS@7_UbnoEg$7Q0Q3JY+5(aq@I6+M|mTLvd)xjn;T z1&55t&{l*XxW??KHWCq^J1&v3;3V7V?qXcvKpAuA`N7e9eNLjYHIGkN+90QY-uIxg z2{AhL&#BMvLB>v7SZ!z7l912P#ki&z+C8!sK?$F)ns7b;5VLXrp;}+eHY^QY?l`;YAgilb_ehzuVFRG;jg`Mu6#utAGhm&_n7 zD+nBlA!XYNX^b>tXc}!b4!0c!rfxe4s6TD~ovVfJC3g+FTqRc^)bbw{->wd5n?*;n zG4H?=dp5i7YpEt>nlh#ex~Ntiyst)gq|(wZH}Hzx&y=&1uS-=fS4Mt#{=zb}jzqdT z^Ht&fuhdd93lr>^kdN#WrG;w+MVCQKDss(#lYJvE<286Yc*0^A+Pr28LRAzl6fKE> z@g;&T#uHjV(sNjQ9EYzG7S1xW2HHtjMI6tNL`z3Yji%^D#8o(qK71ks^k2T2V%)gQ zwKVcVSc@&vRc~WWi5B;ri5Xx+a;R3HBBDyn$5N?#X+!bEnWW7#wyl>$1@m+%eJ?_< zo+vK02?c>NiN`!P1;Qy#Le|1<4h&8$y)ae~dW!!#E(oGFRov&GP+d?7Rff9wr!6ns z;hxR=Yl-L#h^vDD0sJ-hW%dqmnDw))uEmBz51=!y;niACV!6cE`jLW2M+oLi)v0C z#)~}i-i3`X*UCG)4nw;)DsEKx@zNPHJmK(W0$%Umb$Y0ynmr82_VJwGl;#Cl&^(28 zhavcEcHTFk$Azpblo~?Hri*4uu$yzl5DiawyGcT)pWD2T+xi3UHz|a^A8$J`8`toc zNXcyCTv~g}lRu+T%C;J6gpyo0J_}JDP;y4mhNNbJpt~x2|Ep5Hr}}{A4sXZkrH(2| zb z)2)|D2-()z9!v=bRP2YPl-~1vylG4+C%)4|AS$q^_ z5)9(VZVp02bUg|>Wbek>vl`U%M9Q<^EV0pgBIQo&k^$bW1(;>>CTk`>WGf+qv{#Np za7<2Q05gS-30m%Di(;>Cd&#JkRI&~&j0A@th9taP|J*+d(hV&nkI^siJF&Kx#vYx( zNZF&0PfW=(A|=tG&YS7bYIXCGG}L6qH(Nr;c=?DN(pppiywC%CQzMHRa=94P*8>aR zV0hSWveGy!qVt1atslD}cB+@3EH~v5$vxoBKq?nn2`X;pS|c28I_+?FuM*{!e_F#s zH!`?NG)|uTALG?3ijq5j$7e1`eBT8iEpQH&7>M?1fOU-i(2X|iM29=o8lq9e>)|g(=x*yWP{t#7cAHm zP)xQ!(1+V4G;&|cCLTia{=JeHv?Vho$(ueIVKhs83N3-9D??EB1E8dxdF|(k??bq~ zyA!DVSjsu{p@NT3U%!3mpZT8#G&6wSRTz9#gBVjC5o_>W;GGTBVq&q~x*XA4qF2khoeF0o=FqzuY!E=Qo_YYq^wVm=GzlHwULqeoB0ti zcliafpceblSvD8`7Kx@{N(?4AQ(HbX8UKjsl@}d&2j8`L@899~L;WiTw2&Y6u}(&J zTwa-^`|oH|Y7u-%ZrVp3?`oA5Jr|>qyuap0HJb^>Ld?(rVvr0({~CP$a*6sbow`Iy zL_?b_tY@@ePeVL}JY9$CF#&POp!0 zRjh|Qgap9Pda7w%(0=0|m^nz?f~oS0=j4}AoZInT0kU0(wYQG1GVvq+=lSUDv$7_H zdo{J}5=iXvG6`l{+U+Slgt{nINu`IMp9R}-^r^vBHy-|V;PQb0gGs-s>lFU}X?oD^ zF{cs7DtOHgASj{)3hKVK7 zHGelSwjb5+m4Ume*_mC!;7SLonONCXVoYF*1_FQU*9QUr&Stv{T(3(cSHe1LHjZtllSsz-%8gG(IS)KH3VCt@R@!+J1TNzc*ma?u7fy z`&tWy6tHLrK8&hof=_zU6gBQ)9KX=&{TSjX4P?w03 z+sJoL`lizsECVVR2IO zo6*_5+x%JU#vR)lA|RSp&Twjce%_RT4n71ivX{5swCDh-WsQW=c&hXHrwC- zL4i+y3tx*iQocoFckB9v(=&b^5S8KaKm6X+XjzUXAS5T49D@l&5qr(&cx>FRRCU&^ zO2@V|Yi934riD_%s`+7$0bPmcr3VeK zOvR)a2$}lCrB9afcUrUL!~?1cUQVc?qjxGcY+b#6K$5!Bm;&|YE~z57Qu2O(uGSqP zu_#q!`OS@TO7;r}WV#a%{hDR;2iV55`b~5v)Rz#{8K51#yX#F_seVT2q5`*@lsiq{ zP@)fF@j#(ITaH;*OI-WViw@3KD`>6t`N#1vNB%WGy7%q`p9w)f^*Y^AvLrF<&N_qpbLf@$`(>11FZ$qVYpHsLK>{J-IwymHDbUSN*Xyba7#`oE@$nVV z;D^7$!gP;(SPFde9pZQyd0DWN>T8rwGN1MrIPLRuU&R7UFWjW$RA7A3{*JEWM&Kj%^MRk` zq;B8C05@Hn!}~DiDlK{Ed@Idu^Bc<)!%;LIBzJK(Gt0NOG!bfBS;;9n%Efk-^;48N znGLb7@fy5qL8NZ@FvIDTzG{Wi;7o6(TK5dDvjs+jJ@f}fT{i{;INh&`9CF>5vZj^r zr<3qEL4p4;q2yo;HnV3zJEl$>A|9Cj7KNk6qq?-?VUsa+?hz~u{lB_1Gg9`RHfxCH z#>XJ!Io+*(PRVUMia95-aTz=a1q0DZKBv;{F!7ZVP!E%^fc&@mGM#BTcSMyN{}m#-{R!vO+{6+ z11I-AEC|J0JOtmf^mAfE}c?E$+M-CdH-WyM-YcyAk%BV5V5v?MzvjRF=D zMgF5R$S-I;-|uM1{@J|8nU<4Tp407<7#?HWWT*rbA~0DMXmU5q@A%1m=y_1N&CuMTh0h9 z+2$5>kSpnztHa9MsNWoY%bzZVK?)U{o9o;U3gfD%oL*R<=E`*xdj+>vV0?6+Prjt6 zDXL;!YI*#n;RI%F7tV<>B{Pkn4fk}oh02YiGo_PA4ZjID`IyOBIqn6UxPBOJVV;Jr zCm>oh3*V!hYe~z|3JDwW=`d@xc=^vyJS!^nlGmIRAELe%qwJ!SF(HN8OMSIx%H9M~ zvz?6V-#Ee>Lp7-ZBkF+3Eb>+bC_t_Z{z`=<1aj_GCsUMQkeL~%4^VTS7J?C(FN_<6 z@5RhsV1Vuh?Kb~DM3A4AKUx#X+2hmmr&DbHr97~^(Z9!H?ViQ)dZlhXeK~s)BTASX z3;O9=X}ah#JR&`Vil8*xRFgBjE#0VwD*KXX{cCL_W5cYODR2DZz>x@nIR@o@Bv)56 z8*U%m{d%pgP;0s7Nk&X5O3q-DK`JJ!6P41&wPnU4bj4)RCG|V&sS5x9|NpPq0f%ZA zVEAu95)bbw{I6N`|6l0;b33pazgEO2-Ds~|P@}_~b!)7Cu1o|@ z-ahgdNr}b@QhdDyaqfKDcIaYBQ#|kf_Qcq`XyxOF;jXCuwD|;sw=EuC zo*2=An2?_Ka+Ch-%TWk_1T&Io|qt=s4l9`r@hnvC*Yd8}gZ z9PgYj>QPYj*^}Yr=y_h=tBKW(no8SGFz|@}0&Ggxva-|Qn0I>4@Ps8L#XlofvNz$q zNx4r(G%h581tq(WvPM(}zUv$?@xVTLXuMI%i`ZNz#h*8`cZ+JTC<30)Tg*bRR;Q@C zwCw(&PLTlj)B^SNC@)#pWi?L!D&gx1K!4NvXY$LHL`7BB17$e^oPWNjwCfuYwU%~2 z^R3B>9-t4H{f7xcR?`cFU22qM%A3;Ys2j{ra%%niF>ey3J>4)bzm)+&*j03Av`>fc z$4s0x`HG$*Q5^cv-le9$9=}3>b-L05SBU};5u81pSAWXmfLs^FpTyZEe9iL8 zkSj+nmbBgNgL{2%PWR;wBfk3VJdCI_nPloCBXl9h54Llp+ma|hKZ zu3#Hag&WLhGxvpz1_spFOw0y0@AMDM+MS0suQVfPQ;x^G3Fde5w;U|#fh@5{pKfJB zkp2tYP%y^HpTNN2KfrhX^{*)nxP3g9Y}K-MAR)?8c5K{~yv)*lKManuI?3 zf^qMDTeGM7e|G*vg%o1Bf|mZ?ZZL$Qi)0~z-N}CZ$B>q|D*rcOvRVGQ?Tz0511c+$ zQ!Wnn4!y1$@6cc%I2;LI$5vF$GEX>zadHfDHnYM*r&5PLDD?5JpVRrHu<6}JjVE95 zX4VD+p6dE++6dGCylrWQ#xw+!bNff9@ai+OcB2f~uYV3tKMBC#o^mbT8~o*NfR)WA z81huJ9lzQBR>QYy!f1)({Flsvo!e7Kqsm|EHiP1Q-LU&ItWrqr1=H@QPSm9FiHHNF z6gAdW6BtE*n-pj*(3c78cH`mgNfkC*aUsVE#g*xqq*~p2s$v=8fh4ohr7#!yh3n_4 zl}t9dgN{c5lV2mwo)fnIXEO247acSDG)T7XxA(Xg$TkNMRK>P;bwZi&-|yH<9qkS{ zxg(A90NVxT+&CMYh4sJ~w_3H9YI|VLJv&+$_uUKk@5fJ2n8jv(waJQxwU?ISnt02T z3g9=Xo1N{7WV;Nt!K~FM7?4^+VD{?p_={a=c;H9FL#k;P!m~xce?4EcT6;~5>ncyc zPQ~%*rl|BVS)GimdxSs=PaePwLsL6FDmE2%i>AEIHp>H#W+5jlX)qFv0bmt^aE@i2 zq1Y+dL)PzDYQTOdYEGRZw4k0so-O!|a&Ehht3rd~9+B@kH66x2 zuSZ(A|9rm(@fTbRS=qh=!^;&q>Cbr9KR3ZrXUpqVI>BiG=cx?BX6q+1h1ORA6C`4P z!j1aY1DFFVeq911P5F!CT?g=!s{NNnt>$2vsHL63NMU*af8+0@`TF z2l!A97GO8MT1;>z-iJwZrAT}E60*XxjED)p+s^5D(@)O6D(2fUZox4E1fC<6M?LGi zWH|E_Q!})0ZQM4&k~(9fWqG_vpn*Hb7V}uaI^US=S=55c=?_dMSeB3Cj}OSySYzT} zxRz4>0OkgVW!k2HFgckfm>qhW(2>%_mj`FsM)JnRRu?+KL;Ehtz}gXCLNZQ-Y2Zm$ z??VcK-s30#x^eOolRYw_coSqrZ*PxSj(+W`iWB?^(@alSHlo4=t8_Ir6tVspk$pTP z0!h?Lt^t(#nK~OIx&#vn3_HRH(47HuW2D*(bXn_-3y|^3h~TZw91b0zXw&5R(tKUn zSH(&5iHTa-Z8Z;ql<5p@a7C5+i7EiW6ZoQZWM|VYH7O>&(Z*=Cd?D>?maRz}akk9v ztAkyFA)H|Mie5ZQIg;Ih61%k+5g(&|$>54YFi@8D@gV@!m+MIp!9Ipk!QoJEz$AcH z@egcryX;&qbP59E0?#@)sz6OZV2xf0l=Nng(z0}0cf{X({?EFqe@0dZHf_Q}C0@dz7PX$4U z;t-okOohuJ&ZMXK(bmML8nCt+xd0f+_Ovw}h=VaJK8)S*qqbY|^RBu;_O z^J)x~Wr69iMju&lEk?E`qX`yrMQxRn{%9lxVanlOe`7qb#l}dW_ZcmN?aJ&0u0-ks zw}UrEvqX_Ny}3!Jf~P3=AJ#U-zQ9QzsE5-8!zRmeY)LNPuBv6+i;y``s%$H~j1<4|jhnWv`Rv5gps8lvT;8;Z~F)wR)B5 z%D)Xwk7ez686kf0z-E3D5cOav{UlO zkmwLSrd#0TuTQz#@mZ8l_yi-nnETX^vp~ZhVbG%dKnE7{bcEg)N zndqhTIM#k;q-n|~N;i->MIuj)rI~+IKR9fUXW#mHdeLqw8o<&s(wH@Nwl@boaH_Qp zZ!@q)RB8Nk*m4QL53))>W}8)jqynR0D1)r%{300*ki$&MK1!*GiX*>N=NlJSP_53l zJR&BiR;@F86+|ZA+tp4dLGT3-CDb3HH26UKYg{dwp@q8ayUw1J@p5KO9HF}#y$Ca`)+(XtTsq#9_)Ts&ursNl#{?_ainowA zvC-axmk+NUOs;tBTaMJ3=L!DU&7H3hi`b>XTJ42wgA)$z=IY-&CxuVvb_9pOk3Dx} zI4p`6nuvTAf&y|c+@V!Q{j7o~mMU3noM6cfA9LHWLt!}5^(AXsHA$7%Ge_P%A%*Qq9UrY7P zNYZ6SekidiKRk|j9Fap1RX?L%73e`w?o@x>U7hm$@8?Lw2W(^oM_*#?rvYxLAYQr6 zM9a^%+0T4ws491bb<{&hJ0BhkqSLKYJw`i8zksU* zXi4fW9QMwmZ!>5VZ0_qAk4j)2Bm03)cvRRd1f0Po3p?E#IhAUYG|2=;0#S|1igq-*T8?JPxR@~)9a@hXk$*B}67QqWexSPRNryi#j>G?u3W=maf_3>N8n2 z@Yk6>uwG{G@1ibr6};1LipEBg9#&c|e!y)dxo!~ij6CT&=e)e&+V-gVpU?B6)Lkfr(`yYVC?Ety8xA4`^A=7V`Gl;g}J-u zs%#dLT((|!^kqohEPRXh3v|FsE7vy9AU`IygFqOw=qYjXz6dE984Me_%UzNz>joNy= zgKpz1CM>8**>9w8XYF+2?k;XxiYsd?RU5xp#4y=osD=76dnjyFq^Ip4@)W);rjhH( z8=9L~U|;BG?%+dt7mXr5jd^0Ute7Qvf3mDl2m_?NRE)!EFk~Z!LiA8VO6NhJlb}e} zImG_=EmibB0c8&+Ke3s)lxEF!4rm+F-2pH=Z-Eistfs82-WM12$nY}*eu3iZ)(!k2 zCpr3ySqX61MGB{1$O=heC>T)Qnb%Ly00>hYOw77gAXfd3{Q1iTdGnoG`LXmXVhTM~ zh@^|}hsdr)^HXQ;?a;D2*Oe5x^e;J$pgF*)Gj}JRS8q5JSRm`4zkpMrn7?2=^-DPc zwxq&jn5H^_qZBss>B?)z>pTbj*twGXd|gDo@;Y1M;V27k^6Ohgnh$1#k?jv?&a9RFep~u{8Q+&Uv(Qm{qn_Ph!6xeh8UcXD_xJzH zkSjF8!Hea%6j}&%#{WQ!IG#`B)NMS-vXQ23kZS3CMck$YNc$C zO4t?4kn}A*@{9X6^RuEhY6;CpRbSV%nc532I?W!~ zW?M%fywPxf0?T}tqGreK&7KBr*vq^oX(xP#K7M0FXD{oa1$m#pmN4U_L*Dw^ijLhT z>f-)Q#XA5(_clik;lP)4dTia)&BOLUo8gh+@?2fSwfcl>!|*=i>$|(8Gi-BSc0AWA) zWf=oFu`w`JJnmIWCaa|y=LRD~3hT>d%C8{~_Wg>M)7|+1n7Nk@$PW1QZZYbP)pIj< z6#Z%m-T0xD#fU!If%-oj1-OiWM9Yv@;<@CToloz~eAirEkR?e4II&W8!(*F_*`=-h z2&03i2#k#?-0Rme?aS8V9PliOVx6Z32`jgI;(*wm(>mgBdAUnE{j9ihj0l)Ysm@g7Oy9$glzGmBt*HfE@$&QE`HptrD3pn!v0`yJW}C zvVgcc6=@qWnn4rHldS1D9KYSN(DZzObE!TuA6Y($KB^h{0$0kv-N`^-fGl`?Uq-X& z=f*okoH*I%*LJ&K1ZXaN?qSw8L?X&#mZEXIwwGFmksV$s$aM31f5NO5u6)I+V&zEwl6s}qpjw~g z#s=rDs|5P2p5N7K3>Yj7zIb9TdR)V$^5bx#N9LiWjY?(;_^4Lnh<&^5upC%O#y^L|JEd?}+; zwP?zdPuId`jXWllFE$SvYa3jo7%G278IO@I1IV;hh)ePS92PUU&s}01LSj=xh+UP3 zScGlf(^&iJ5w|7k&E=?gFJX?CbxD*zoVa4an&D)5_odp%|6+qS2q1h0M$@<8dCx~2 zi=3TacvJ$H%w%_}RC!)0+XBxOAbaKEUUix?5|PH}i>|fU$bzLGsEH8=G#F(LJug0=C7{xtUPmjh#^8g&mcgSDNXLiyNZ( zRx7)qmLsb_P$HI%mh35quh~tvznZUYQxGM@H`N9K?gDcyW7&4JIeGNS}j5BLPU=LjdOt(U3U z8QPTmP%v0WX>ZxMLy6^b6BN4HJs(m~`y^kcwwS1BW6n$0%-bxIo5gtr#yNIa8slvc zlI|O#R7sSTiM$%Y>!cDmva#GX#s>9;yMu%VF>G;T z6*qy-s_#$VVrF-m@X)FR0_A_?yPkoxl?`cJ>LYTLj^ffb!PxYPls(My)i;1`N5^Zz zmIprN(;8dy?klFKe@7e9S}p%5NO*3CfShMeBY=tQ0EMAZ9ypBjOB4 z1-0tY6YDO(nqS5~ar7w(Qa)iEnc4*bh$pUzFsu~EVg}0zj){DSAF%jyV_7)?j>Xsm zsVEgXB@k0s>J9dn&zYVBqA(LMbTExvxjquE)R&`}Nu8Km!3I(caFhLCoepEebxGs3 zL}qoROOBV21@Nq77g3Xu3gO|A{SF`BCGSvPV{5#OFrqW9WU#(VHk0NPd%GKgdp^mf z#@5YtcBP0sFw^)!5U%`Jysng=uq_WdsRaNe*rZWble6$b^QFER>{!tc($jAk?t! z>+y5!4zoE$6G<0|ctV2ajO|Q)OGtP|cWkpaE^3XSH_syGBs__EF(|j5G16#Vbk4g;=UWd@0|18d!L6ti0J#yHP@VDjxqLHmblA4mQn`Qs*{hNM(aqG z`-N!sVvFnc{oL4V`z+e|?ohN|zMIe+SUTS_3`I?w5NX%Kf8>@_+3YoHX#2MD>N0rm ziPWL^rr9af9O%po92L{~99uTWwASynysaaCl-=)tt1Hz<6LTqUfT;kw{LdF5eclA~ z3$EXvo-sJkh5({{&RuI*uaZkk$;ewyo+s_aqN~+TU1vL=vG`*xg6t>U(C@XB-+4c| zAGxx+kve@`#@Cr0FZy(ko`R)wi}9TwPF~asrZ~L&iH^yJvK+S3@fTw>Rv|D4WT5%k zgT*Ez8zOaG#Llr^#z4Iu>qF+;S(K?I=ra{p&c8?o))M$QbUHZu(iXadfqPgR?;E%8 zeRp}S@OK8+Z6jb>d;4?@GrvUG+V)RIpMZgjX0fAMfx*FEEyM<%7eZ#aZYn}nkNm_{ z(d%cx6kz>J4*^hjK(mEgWvW!eYJaJQ9o~h|P>R0&eLZ=Cg6@L-U`7hxP;j{*Hi@UqJN?s7MEV zTWk9Lb$FnDGkRcdsm7#R&-(C>a#5-)rnJeq$K)WO}w=tJ}GDf{lP|#3KdEVeWP1ANdk6_4jvy@GYe9W90#@&KcLi*`lPtwK0fJZ_#IYZrk_p zXN+y~?PM)R@2ROS>tt=_v~VQZgL)c(CMfPnbJ6U~u^09e(fpzP9YAGI;$!|(TSV*# zV}F*gxks*&EaC=e5%o+T5`%XY;~S{0r%UzCxA%tMH23UhH*c+Z#v!(+MA8khMIn zr1W3;7eGcyxk42h+yr(CJ5s5ms@nV&70mS3@>0`wd6q1Kg%^n;G!KsMZ>iv793yu~ zU0sf@pK{d<3U6H*GF8V6vS3Uj!u!B&_(0F#Y*l&7*naKebrh4wwcem5b?Lpg?5TKH zx9KcM^;BQf{=*z1JBvXp7urMDuZ(czV&< z{V8i^vz0-vvxYHkYPU<|H*1NH_xddty)Ut~D2}1~vv)Ln?M`V|iVL2DnUc|CdL;a* zA6Y}WMpMv}Km~B*00cqokmP*^_7JZ%O;z*EY4?>V&uD8iZUI-`6xiT0Lzfe>s0>j~ zbN4b2ZXdo^w4PXG6I}8=$_^t;@vy!JyII*-vPF2lwg{>DITUExC)eg}3pCJv-_fY@ zG%U{h4S#%l5h;T|yFVZaec`mrMFk_KzaeC}0%eNm{yL6BX>Kb)r9Mwe+h)-de-0&P zI-nFXupS}~{5jUTJ$1KpgnCyjXg=&D8f})OXnvdJ-((m+WGaaz8tHG}DShm@ml=t3 zX4;KVTMjo(Xu-me^%e-eFQGuxoxt~&Bh`o-Icg!T?=jYEeq+-B_D`C-cH%pkkvf?R z9x}f7N@Vb$VBoJOALgpNULMia!zbljXqg#-&XqaZ|DiykY&^8w_Ieru%mS*P^MoqX zw1|mi>NLPfOL1&$?)D8df$fE_%5XW)fw;{tKHecgxv4~>>*8g#zMn10w7g!R-777D z$a-C0K~neap6f~H>a~G0s-Ed~7M@|Q!>JhSUdeR#yV9ToEw#J7pA9D=tcDKVv6Tjk zz1Q2_rIp^0OLWNH<8g@f$$}CQ(7Gu5k}0m!Mj)pJ4ThJ&NoS`nf=_A^u(&)AG{63; zZ3<8wl}PC+q}fQF+87%A^DRpmkUubbv+8tZKKnB!UTvPDI%j4eI>90J2LtW1?nVlt zhZJsijgW^!kE?^_KJ2I#9A{4YFX0}M)cwawo{)N_J;QA|(yxuA>+Nl` z$}#2LqFb_GspYIr9f1Hsn?fP#KNh3^ObUY_^~RJxty0pDEqml=O+&vYqsrXbKzWPo zM%S_SQ+Sr)0>nX{2#J>Gup+YY`o8v1|)y_k*!hcExl^<2zj z*<78qXNl&e$AZIsTEq3%N?gw4+G$#x$DO+Coyn`dG0{DgX_16EUR&$XPPqJdBkY-9 zd3bkx{}jC4YmT|6PKgxtb=l3ZsAT#`CDQ{qFE6VzhYQ0^R3DY!&>dg3d_Urg zx%{{kNYQ**8JF5VCJ2c@OEo+%CyTVrU~PkHjFyRM{N%xRZYCuf7cK_hOXE^IG}YR1 zmv?#X`=*NHj>ZzcVy!p55c{o}o|6dO^&*#TOF6yf z)poN`HQhP&vGV1re2$-+dd=BD@ZlZ}n=+p`jK(=wmw(MQ9q8sX%S3=iu{4h6r=qpv z@rw_*QPk-)G|0c4&idRU3PA8oHJd47aQfT@J0}tLojdE{JRqmTL<_^=``_!`7?O_Z zs|oaEJqr-EpSa$KU!V|Psaua%Ds_;7+tf?i#*Jpl?VvU0zD)1#*Kd1`BV^J0nGrr8 zx35VxEZ~yGLsMu+RAea9*#56PS%meW>%&TbAZ<`Yg;=Iuw$zxVH855H?V*9*}M2^`XE;?T8(udXNhck{-WW zY!IZ>UbhLgb{Ey<;(C!K8XKeW=cACEZ=xi3jhnaJl_#b2 z6gP`CcDk0@H|5ybY9H%;4(zk1?CX0)^CKc4haQwm^XEbmZFRA`zG~Nx)Kh(FZDN9C zw+)%B(DZEF>FxQ4bp|?9-W{7&AxuR{+}0lXxZlLwx7y?dlmr3BK8k<#J>T^Ei8@~*#->Le05v5eaYc^_8nS5L+*3w)8T2FnOs;U`;&^%(T63@aRT8jMyKj!+hf zn#{CA3Tk5c7kB@aq+lv6+DTcC00HG9da?y~5L(5oN)7iE+H~;?colicYQ@}I#u@0CeD)!k=#5gy6?A}@*w^u$F@`HX|hFKrAUz#rL1|_bioZ^)_u^S zGb#Yjo?L`ve;?&y+s|u;TJCfctt1hlrw=cZWeSA8uNh-s#*a+ z$mBX3V2yq^0(PS;f?J27^(8__pT~ywO?RYvjmAi~v4Jc!VjYL!&*~@pd!i8U^W7%b z;!kJO1byh?0ECSyjF9UCsE=dQOcBE1RHn7chK+q>FdwXX>|1jGsA7L;{pjU8;;1ShKsKUjTFMzJvGl?4(^u-e@bCJa z!3ds5I)+CS3LZzTctSky!rm2p3G@5@DvU${C;Ha+ia(gx#CBlG)8vSMvuUbn%7avH z2GV8<&LA-H(Z=uU!eDy2<_<9&?Zz(|J%x6;Uz)5IRyaP$-dvlrng2dhSV@`I7 zm5^37W-XK)tBEPa?iQ0NoXxb)y3;VTJjbw#ce-y}{OFkf1@5du`CX>qh=Q70z4-Ao z?X9;)4Bbk(D7NtSZG6amrq+D(w#zJb3M)s)YeQ{j{(v%^CF}#uZ=OvtC4zYQEE5l= zzF`bz9Uh+z@PnaW>g;tgJ!ii7)cTn4LcrG_!Dv{-Hwe=GnCgE9hWw;&B@hfRqAg?) znmL@Y5>ZUhCy9AWERLVEM|r2_;#4(>scMBI)ecm78sW}F)U4GT$E_aGz?ytTd81+LSb0cR*Ux?cU4@k_YRHwwdD_;XNz?11y>8| zJevKv5a75$h@l!sZLJH+lGp+t!_?@+=+at;xl;D_M1)C+)Zb{~2dk_T5V$>Hyg@*P zuIQ_0V_z1dS9@_(n;x-C)+8Bn{Lw5_NBR^yCsI_M9sS?1Z-Bob`Z5|%^x23LR>)= zZ?yyK%l*C z=Wy$%f|D|{y!Af3o9PT)BAN&{1zMq8$HVfbk|>P02*8n+Gs4BDqEf)8=Uzy#PohoC zjv7z!dA_R9FuWTQcpzxMCO{~=a6fqGE9{~dszl!8C4^HfH&iSN3ioZ6KXwO-!)lU1`w*QQoUTDu%t2N~9 ztUzdG!W(%s=vNlvSu3S|O5A9Kpr^#xh3$j|Gr)ak`J#~$o1)aI&c9K-_F7pm3q1Oz z_6#Q1Crhu^qO-icO$wn|G3u=PYr4XsP&oK!IP4)^#q+%0V3STJ1xH7sn+z^F!;nUC zLXZ|4`3D@oFd_Zvu)|b-BN&4(2~%iokyq&RA0 zx-PSr4P88Q)ok0wagB_dYlTm2+4G60UnFRFsWxHOWGbd|;IvR3mluKddT%u_zczAo zAw>3JH1XlQkztPgH;&_+<1s8!Rll{&a4M_V8lt zQ1q$`;jav4SD>_Zn;f^dm~k#O2|ul*hCI+6CSza|v;z|_1{-l@i0!^zT|6th#033b zF`4gI?+`_Pg)fCbR6wd2IvG{qPCQfQJDC?&%YgsPWr`ku%Pe`agUPK!@^cP-h@RKZ zNuXK)d6uc%(jP2{yabhRsl%6?)4eDOtBVPt;W`#ul8vvK-rJWlt7qn(^AdYoy=Bp)K z4D@n`^PgLPu@hY@-z4y57n=uy@wJ)W1XFr#4f&&klkzX{%GfsRL7MwX?~!D2l;ner zzu$bRmNP#|b7MFVGvC|8ING}(PNfi@^*JaUI2*n$=l?}jnKyD!W$uW6)Sk{Y7qZ6K z9<$)Qb)|E&K*(Ztm}x%T=whH96F&j2zSt zSh_M(u8JVb_fUTspu{7!e-iv;*}?YyEnH_bA|*!tl0~jN>rWUL*~1|)i1J6+IW31J zY{HLzz3RT}@RYkrJb0IrK^;xL{uT*+pkpeG7pr!zkMO7n8HON})gN$X;JEHkfS5q~ zppFLz@S-d_VG1j?u)?cw=%h2p5XSeIc1hCwf%QPRaiE$xQ{$4*@IIGl)_bof*OnV0 zPT?+IjrfoLZY@!?L#EVkh22|NkO>#4&QZ^Qs&@MKC%aF+d(-@D91)NrTm5f~RFyZg z=WuLQwQZjyP!cQNCUcul-8QikwAfd@)lC?r@)&}oqt7)y@|Dvl@ggKxxBJ(T&-bQs z7)#M0(-oeh(c67dncy*=4oa^3;WXAReO!nB+f%xl{R$uA5s`)6qJtz?S!5Gv50!CTL?~wE|2fN_0x=?DEih=;dx!NN> z88V``JJw954)7$7jJf9)LV4nG)k< z^HRxaRgpB;rDjJ*RWW!cB()I)0Ru*_?8DsW$cNsXm;apIEZw z`{;c$GwGlY(A46Ek7&$p4fm3J`A7W)jj1Z5+~$}dG=55~paj*~kEwMV=UVGObq{&J zVyuqkaM%vzTJsJM3?MzwaY*bAF-KW0gr5u14hJ{?`FZ4R2ELY0;iON|S{L4`F?VFB zM+DD^*&WY*wrxc$UHv3MA9?w0gTPVD=~sZiaj|L|xXgIY(R8JMZgQuJ*XGv2ZmRpC znDH!gG?IU7kSAkE%fT6I8voer@Sw_Z**&az!WHc`#Pz_?e%c>)pouEN@+gx3rs+=s zn2^Z($5GSInj(%l?_=0Rs~))CkM8o)tIs6{Ln91RaLFWfnrVjM|7=N-B!yci($6~} zNfQ}P7Xa_FZ6$Jv^rlUsHU^=C@^QPbl)Er9f5zFPf8oPn(<0f#P#ID&+f_&CG^$)# zIIYht)wyXo_f-XC*SbAZ;pa`pBth}2>%~FP|DwoSB*hN>96#zF(@zfPvUh}oC8RO_ z`r-)V<)ks49{}_n8(YoZ=ls@!6sg4BXm1H?1rOuTy!*57@gLId>tkPX_db7=x>#j! zqA7}lYxulXswD=^ufmsnhgpubMpw1R=PZau zZzT)rkbxs9n1B=#)0Q&RCY#izgE75tl4iK4T(!V1v-IU|s_;)>l$`R%bDG*2@i~Va zI%)^V%ioGfHk^jB6!HEn)tE|S{lw7r-7k)ZA>HC8OG*1;-EV94sKtEw|K#`T#MCqV55-abQ6AFn&76+?KFp^m4A8Q-EOJBHZ7R`jcC<2L z>Ate#C9pvvJnc85>$j9b9e?Jh(0M9(Q%l~es&(m-R?YSC;*R{nqM>iIz2vq{!V@dk ztwSM&4D7rJ=ZA0H$DfxQ|vH8@zp8BqrZ55 z5xtfdPzi9!IRP3qU}m9e43H0+_Sy9zSNzMGB*-2k5NCyIc!YTvU4gwl`tUV`ZeeH% zpThU;r}PEpph83tkziLu*z-eV(&kir=ZsA5(HHet{mKe3z&&{;vLL$3oKR1L^7K#D zPCl>IOhfk68L#(rIo(m6l``aH5#zqC#}%}}Z2TCm zag*gsr@=;FtB~Y7SeK{2&;WHHauyGb2ba^QxAptsCD;|TMs|~{A3Rb{@66nMp&`01=5gH1Yi)&@_!<=? zefOb)A~Mulne&#YhO`!jDd8a~PX5Nz2=)Jynttu)if$Ce*H%6Rtftz_#Y3J4XHv*B%Qu3ut&+q2`xdQrtl@XqB*EO z{pL?+HADy-q24vzxk;=%I?c>#D~W@I_)G#;tCcVQD!EuKPoZ}aomddm!IgR3-VYPf z+Q+RvlvOxHqftA4H&r_Hy@uuLSl&b?QGtnI-ejNEBP#hG-JlRhG#6HXklL7D`*kMA^-v7$MXBusVh3Uq zS>UE&z9mp!rG75q`2A=6o$w?*w_Ql;5{HS6I-9nw=PKyjB`1)EE%->b4c4K-e?>n| zIRSGQBQ|9C=(i)bak7ZvW=5;PI8k)R+^gh!{A0d8;~8vFif-N5t$SrmK>O5SWL_!- z20e4aD4yESwy9ep5wJykbvIDjZw=vE=Jj7bpR5}*eB`%EfN#ds~A;x#Ao?( z{t=65TfMa1j(y$@{Z69xVkIPiPV2 zlJ0Y!=UF{J#7PGW3CN0N**946`Pz(pu-XyFIFxOpdvRpxZ6`I>X%lngJ>t3EQ#QAi zXr^>Q?shmjabj-d<&F88%XjXRV|~tZzt?zx^eGDj(4>9ekC)!OKR&PQ^q3ZagCaWA z)VcliH~+=YDXCTO|Asn*{@cT3X0@Owe-8OY^arS(ZXvgNq!HTpG z)rccz$|y+76Yqu_H#&YQT-I7o-luVedgzEvVC_Pv#&wVt<6=tVtP_h{~|IM4QXR8lhrqrsBYGkjo<;WTv_*}C-sPNH?~ z$YF(#anji{V`XHi5|TFDFkSW=1TuMD?dWvWSowhy@%?TrJTeINf2(59->SG_Xbwv( z(xA))v>a2!A&JH?xdHa5qp>Z!wEkLfrQmgV;1tMDV(bTZ)CZU#ZS)QMikM0Z+oQLp zL#9kC;wZ<{!p)fBRK5URq|~3wqsd1-ku`7Fzrkc-g^75zX}Ul;U%mhzwb^m<8rpW0 z5&TG88V9684Ib;ooY>3sS_h|Q2678|AdYKS0vj)sWRls_S<`I2D2|&c&^Z zZ*0Qj7%meMxK5{eQawLBu)etLcT6!LDRGnyqqYL#1KX$VB~-V395tT~8CLq}j09rJ z@mu8w(IG#M2Yy^1`j_jukdxyHB~k*2z_I#?RrCoF!UU9H5Apks@}wyFGcNfd!;NT+ zh7SUbxeXUf`Jj%Clf=zl9*A<|tM}VCse(~ZQVXj&FrZU zon$hlX}x=|j<(TFnQ|E$wNgo^=Y#@B6^&My}r5<>o`-ocz_fO|_`aOPKxktk3f z>1}A-e&dVrUYZnnjVmpP`PG_sLIn1X1?Mj8UYwLYY7W9)6}77l(jQ~>46XjSCz@I5 z_oo|D4i6*DO^y3f?r}H$Zj$=@sXXd+@$MA1<|i`BP#)<+hFJ*5`3KBDA zxObm+Tsi|wfEqsL2n|=Y3Sid6=tt6=_jKM3-@=;s$0I zx*Lir3FeVP0j1t%bH>L{JWtV+97O9}*RM6*-(>sCcG#gAs@P%IelH+MvD6&w!7~X_ z8T>Zme*A%1!*a5$Qj%B154Z*v0An&~v>p;1Zx(J=CU>0}zWphYFd9~KGpr!l6s5ZV z{W;e#zIHcfN9KC?_x{#I^uE}_z4VcNMUx&gjbVNy@`iU=_cf*@2Mi{Jp@&WZ>7^4& zgYnc^IU%S5+sByArGXa2)F4+a=-0~&`j1kA`82Zi!-EV>F5FH(3kAz}^@$^h@W1U~ z%$?#RR9Z&{NqeA6mQTC8+k92ZvV8^{Xro=2Z!UPNj%pJlc{+ViMHM6Uuv4N) z;=^yCZ~x(}FqNLCZ#GThMVz8Z+pRGoJA+R2Poi$=W~MND3mjC%!x_(v5`ir$H3Z{{ zRA(a352`yQ>u+o*0tBy&-X{<9k1xH!Ya|p>8ti7x(=;Uw-};%#?ymsc`~(otM(pS9 zef#^Ns~*;dApKptpVoYjA^+|g_vu%Z1eK4GY1C>l@WJPe8^w7iK$hM_}UoLZW48pD1ACjN9zk<(~G+C zHf;-^MU!*Bqh)U)M{8L4D8uDSDQHP3gasKEvd#VZ6_8vRR?NwUqS!boX;}Lzaz|AN zN9S62^vngBVY;x#uwN*dT?hIbp~|ImvRZW~#VS;0k&T~YD61pLi&h$CVf52CKMTphie5v@KeW0ey47ao{dmkZBjxloI)eNvYf|__o^z|$ntomX z*r4QO5V%{eS4NK8w4*16B9q|shT@%Fq$7I*DgX<|aW7<=1 zs?)C?&Rc)Lx!vYZgkF+J)fPS1Skst5I7?Sc9A3{)9ZJEJ1uXa|(xFY#Q+f@j0#^mk z3O@zrBMbhKz;?mM`&8#imJ6p3;PDOp?njcy@N*q`cTJzjM4f@V%15;@~n z{x8Ai6t*J{7O@phJlL*KAJlmc*ZJC5`Jc=Y1`Z(v!ZYl>h0x7aQgsZaw?PH*<8PFc z?|RO29^yA*+dcSBh%h`(|6F@7Ue?84mPx(fiv%d`Cr%0h)VojOnP}C1xe;+zafYi9 zV`ubSNX69-`CZFI@+yOehE*ry_c7&dKkD&`+1ldj}(NU&}q_bqP zRkrc-*c)FfeIgnQgv}R;#Vzb?50)4XXr*jQSxR^^E!smvsG{Xbz7});e})# zrp8NNjb|Z~$A~|8Je;GE%*9Z;9~ak`;|gN3nO=39!bchOHefzsJ^(Ak)sNu}+2^E} zWxbp!WbD(icpGx^gJ&|yBH4GM(UcheyG|4mG)vS?%#|+%&qjEGLX=Ya@Qs4x)Iyeh zIo-W}Jjc>(aSpY5kP*E0JpE_MLGvkscb?0q`I!-&p_DK9Du2Gm&Twq1`5tPcfuzN6 z)o8E8Fj@p#M$@_p;Q#g*I)mx|Cm#?x;sE7}9Cz>)rZfs9&0h%0xo6Cn@|f!xu#~&A z;if?=t1cgvF4I>>FR_GIuL>TPXsaoGE9d&eFjB-(BqN(-Il6U>5d3b zf4k*GwI!E3_GYK#EKhU~E#ukAQg))-^6#-mFKi3Z`$(rDK21l`!uyF3De|+dAuY-#~3@r_IDj$)lF9^-prP; zK9$C*#4u(|VXtvj`gyAFba6_Zezdt$#&N_5X_`Xly?o81aW#eSVxikd#jyo@p(?lzbQ=MBv*E3(Vo?GyiyN(f zHUu-|?L_nwWY#jt>so5?2?OJO;irhIaI9Sq6%oz*E!z-m%0I33?*C+ zrPon+u3GXbuZSb*jafJPIck1$+jh*m)k*i4XtIXt~;> zZ$oa0!W-sR(Prq){0Qnkt6B;X5F-sp?l)%H@OJ8F&m08fOdZV3M?Yg0F(kgc>w!|o z`=E-U=j-r8H>x{^3cWAvFR7vLTm;*J|Ej`Rt86%_G`Q){>!AfNY)ci#1I>D#^m??H zyp-}5?!`rA%d4gtyTs4SR^y*~ut~YPk1(xNGLKzXP2X?(a>XI;2n^#!G1cUK2v{a` zEJ&g}1)Wmnox6+_@r|Wjuych%W=|2W>jC2*ZVWDj1O*qJdgI8muzI%5L{R$YUOVii zYHDPVp@iN3k|N}aHKF8X3P9V9z=85)#TI(ceAQoH=JB;S|GR_OIE`JNLiGq={2a7r zjaX#l%k$yID||Sc87~m|jw#}0g)$YQ1BKTed7^Spoq;XupYVIz{dQ!+Qvp9l+zCDw zu0L4p8Ne8cY>Nsm$#8bZ?!R!UuoJ4iPBP%k0Xt1y-Luu z0yLtXnj)9Ewllg}ubru_Ym$REW?K)i4$qs1U<^7nFdAz=DQpSmUazUe=`Pw-c{loa zC+wCjo2yv!K=jCxq&(-XXOct(QVd1SO)L>WNlbmZ785WE>K^gb<7r^tpT}*sW!^YF zI29UPzNkap=VwR*xZkyo)y{-mnKF%iKp`Xbn|8XXTNRrX#bbA1%z$ zZet1sxcfmwzx!3^#nWj4et;;E1AGZJkQD@Uqp2JIkB(M=tSz(ZF86hgV-AE5*RLLs zH)gf7jGSY3c}H{vqfd>`9{rEG!>28V`014nas^sFI2Yj!imtms5bFSVXmrz0Ao@6_qBGZ7;52p+s190Qx>~v)4iqAyb2c8sXj@35I{-Lbvxjpt&32AJZQ+4N zkE#;Qb;~KRMed~)n}TTC!c-rvaI+W#p57 zMK$=&VrM;=qF^ZX<uqEQf2JA_aQ-HniK6X4rHe$+(3r5j~<@IuyUWTsfxmhmEQ0jpJX+~nATY^M#L z3W6Uq^{O!jbpIx>1?Jx=9gZ&)DlCM5YHTerrhZG;|8-J_fYrAyQ{M0$I`C9drLeM* zKx0raG~DMmX$IKqlR3*+uVsMRa{5lL6zBzDYaWR4KzYiZ%MKCngQYh?JfJ-0P(wQI zu!HcW%vykA&s~c7h+8IQ*EpP_&BQwO_E=vJl$1797UhYKt0-*{xMB?ll5WlT=D+n= zVPx@&ub~Qrj|vB31-9~phj;=?FE~({2_Im;pv2Cg9&m?{v^Pk7bBHPis6=+GZBF#L4^)Yfh0=T0kXG=qx+#Rj3Bl7vL2CfL%lrRJV|f}vTAh% zY_Cc#q6(6b3{TrV9@P2EY~w`p40x%sAB-k*bIfO5%ZGq5#ZT)gI!i z^GM&3RSk#Uz>(*|1Ly4n5(WdPgz9F`r2kD!tS+Bz-Wx68dMoG;5J7|Qs>5pjr1b$v zp3r(RL+tlUO7l8TIsmWtk_0B4e?CGgYpi|fiU@oyOB9Wo-O4y!KGMa$AP%y+dnXr8 z_9o9xdYJ;C5t8>ssy$jt3JcST*UIgbO;Ka&)1}`TT);gMXd9+AW38}vtY738V%PDQyFn( zdi7gy(u>+g3Vd3=1^AW}wMV5C+TWC2Qy{IJKae8snJn*dtlTZhq;eXcS#r0ZyuSKH zv*X|I%4>FD;j@+;Z$eh>ZT%}P0;Yq{@X+p&0k1h&WsG5{(G8I3jQAH+>R+BBkqrs7 z4GDb~1~It^_FjgMS#7&01d8>pkbvmW+P7pfSN|nRgU%TlH3L%>)ptzVfka_#Ayq`y zm&SP3tJo=zft(F~0m7$a0I5?Eraf+R4ZroHQ)pYW%=1Ng#-FYzmnkye)fFtSlDH-oUtw201dQ$VyTm1;gMQPn z<+|O$TMjFg+$s>2Nwr+g<$#hVX!I}2gz0TJ^##Nr;-r}U{yxhd4&Rf=Ez21}s9T1c zyf@J86l0I}UsKiNc^=kN0$mD&^o12W{^=xKoKtkM5hVjzvcmQ{&+MF1U7XiRNx01cb#Z z?L6i+7(p9+KuyFjyWA%_0_jW4q{1HmQ)Pb%3*WyfL42fA*KMzm!d=pTrJmHaOP(G4 z3Kx|faGAjaFDm_|I>rVWHUr&;hkk%-*jVM8;`xR_tWj)7f-G`=u<6jpkptOH$Nz#u z03M|ws!qy!Mrm&x1&*XO+_R~tB-(yLQ=^#T<(EEWyhAIxDLKfBAi80|dKh#%+R41-&5)w}KBom}hK{s)BkB3`GgnF1*m}knXaNA`chBrlu+K>KL;hPz8`w>V)x_#TC_MKGE9P^?vP;ytOcot zMRFAEdr>I8dDKK?nEujL33GqLfk_SL)wb@%bH$jP6!=~m-sYyJhzzx!2taUvE_)!i z>6FuG6@mnt$+quR=gex^2B9vu-6weiIGKBTzxpHftR&4kE#ZF4ve#b|RdcAM;i1Ls zhrp_lu-gK5BV zGJo#~Xt8>f^0UM2s~5-I#@SJ$L%}>>S&~vr(PgXo6N%dobm_}dsTXYdYXP2FUqv#D zSpTA8iRFhvXC5XzI10qu`}Us z@{teQV`p4_hWZO3`>i3*=~dOtAQ5~IN7mM2V37}85}~Kdp$M?|LZv; z{*K;X2o_!Tuqn#kKppfAxN$_9j@6C^qGX&C!0h(r3Dy4HCwWG4WJGlMKTjNa7@s{G z;8r0=!E~xU7NAz3L*D;+NZkL{KYb>h-b^4lwEhD@2#zio4%)QCqtTVdMdxdZM%88~{_!bXH3y?mzAjHTnGG>=tqxKch zLeJh&Ugy@N^!e{w3SwiJQh?cM$KkuV+RMeWz?=sG-(NLz4of>&{DKXm93XJ|m=<|{tyxmF zHU%ay@*qI_FYGM@lifzNiJh8!Ewc?_qEkRu}M3%EKjJ`dNv&pMbZq z6k+~Gj2jSWUDp5Qc7r}YZ6r{~;K6tDBc)v`5rCNJ1wyy^N}uj*ny)H{t}#$gvdo?M z*C-X-iJz(kM!0JRF6w$o27xG=Tq=T)&~vKKfLN9^lD4y5=M>wa)~e#XM{S)#Ha~)& z_G?v55aq1NDCWrLbh}nGwnH6O)Y>_4bp2?5Kd)PB93e^si?L$&%T)OgzEerb07K!E z6zj$$M}qxp9uMeH#OJ1w4GGZ~c4|u_rP?W3GuAjUXGxTg8^y6-+=@yNpwKZk1tz%_ z`%6+_H7UyNAiwuSLok@H%1vc8j3VEO);wGf`F24=({D_AULGKQ*tWfUB_3H)j$7;B zV(H5mBi00O@&i@I&ybO04DdR-IU2>MfB>7HZ>RX<-&rT%;pNk&g8@|=(cl+{C@a$7 zOL04TlL4P)L2L&y?D4j*W(~>hJuNetOXF)kcS|eK-~$TdX_YV@{)z%r!wQyC&HXVQbSE)3{TuQYR!lzgEb?~ghF@3gOLSt% zLocdz_l$jfBWXRLVgNqhm;5L+4t$W|j>lX@FyP*H+TJi8XqwI~IEV#4AyJ%=zw3t$ zcv*33(4lpCyf~PtFhObtdv8XfVeErr{weky{#%NmMvo6_J0;cY8M)fHnF@Ymn`&(K zY-CFsER5#I1AxfgZ=n4pYqgw|F$G&Ll%gEQ?;@3FemJ-HB4Zsq#QirsF{h6wS?q3m zC{M-6i2UDLRG8$iG@FU8fch80QriG3Kc=yto<))S{s^^u{jr~FfD2mbgoG2*1h$yF z{AL7I!1ug~B%-W5qnr`*ZAI> z6WW4##1W@!*@y%)A?%E157)0c*Jqr+zsK4$z3LQh?cF2s#e?RC8>So)kr5N1FW`EL zxuOEXWi6)s`u=%>>@D7Z(Jzo*Pc6&h@@7ScCP@)+IaT~z;drmz z8>m-F_5-ZI3~`*X3p)$%gVPM1W4s}q^;xID|J5&1iUZH4(+l%NFI=G5J?FI;m{q@hi>?;eGt9(dER%7-@m^x-a8z3428YdTyxF% z%vyWZQ?bCKB0yQup$rJgc4h*Dd^x?DQ9sJLaim!rh<%?T17sSohol1te4L z()2Gfjq>D9xU3jSNQsY&+7WznzYDMY27#de6ebpspp+6(@90S#=6O}iIXnG7 z`DX7rOH}hk9LCQ?G`aH1&w6BdAIn>8hJ$|Gf-A}e$J)0)yshIdLW*sv??0d7esSD` z>NgXKzS6k!^_`wHPj`K}CjY3QmYU&RxXmlUpckr(^Cf74vggR8 z*>>2t8BtL2XUlTXZz4NlmOsh68N=_R6jMEYPG3n-$0y>hTG4}~&HZH$iDrqPZ@%F9 z4bMM+>)+a9ihaB1B`>zhW7GBVjceLw|LqL?PS0w z<;WB;2aDL=V5PqFt;r=HW(gWSzz*}5He}g0O~A%+vOJ9zL<&p@4p&YoW#;H*PAGccf+A_(z4mbow@6J@*}z%EeZ#eRlZ{zbJd+2a=&7+iQy&Sv^QLTUEou=qvP zM8#k`dE8AKv$xg1a-fwUP`A^{8mWe8dxi8~bTTTORldC4#g{)NfR~yVpAJxX#Fo^H ztH7otzY;lqt4mY0T@UhvxaqoJAoBy=e#e4AQuWix2!{xT(Z?2IPkbjp?%!g$&^&Rs z@6{UPY&gNkS%98kars*>b7#7;j^5Rq-J>;pXugMBsaSJOsy93YgMM8){_&edo=w^# zNAb3FHy_}f#q}hvXuMxQFoEnA`T7Led(?Y0QcvmFdpN^chFfnI;XRWoOhM7{ayql> zSl4FZW(Dzui%-3v6oq2W9NYyD24c4pcX|TU-n?O&g<(!6_^Lj^3v@%ue9n{-=#^>p zl>A)C9rFtpl|}N&Zkad5tK~c7&2UKBL^Rp+aKYsg2aVl~s0e{9|Dl*%O){uu-c|C8x zH(}9xb(UPb5}!`&#t%(v26XPWke>5^d4lAh8L$fmk-fhPh>#cGWh52Zx&CjaxNmNrbL+ zildV|0OJBod(w<;F17P5$Z0$cbUyWS*UImw(v$YpW*F`!v896qz7eYkxqLwSG4`4bC}`H3yZ!+s>dLkZ$Lr)~udrJ#*jK-dzdotr(|8@liAJg`L;* zh0w@Hvo~|u(rbgBd%jegh2Jm7(3mBmG|h2hnw1(?)*q0{x za(7ZklJcFDL{`ke)P}-kZIaYo+8JAx5-xY7IUsivNaEltXd z#Dk_>xjM38iHE|uzfy_wtVCNwFuNIGu=7-~gzH?-vh*8;sQ?=}0*~jUKd#Q4R0lxb z3N5$+Vi(s#?^5?k^*AtqL0(mPaYp~NDLoQaXQ;K<-v_>O>|B+oTa&nUk8<27yG9Y#rxFUN8K|KBE(VrSJ8Pm0Kwh{@1+XB)KChmhtStdkj#ZVcO zQs-ByH(h5b9GNb$heYLJkywG{F#r<5>qME z*SW{oGk?H=^(E!4>{OCl(xUg;Y^dw-{L`wLg{(I#Kd<|WIL4;i7H;5&9|m$g#7jDRMqe3XHP4++dfn8;M}A zd}trXH=U|Z5ExteYL;C@NscC0q>OuzU(V25+VEym>61IyMf@d%)Cvvlcli%l80w7Q zh;p{RpJ#FqSvy$wl0FZ?=%0&VVmz4BHbv6Y?t6I=7607bn(8dm^t-Arede2v471)B z;tiSc)n*?r#1gjCGRS|UOgDeEee+3J_6HQ-eg4@5(+4w2E=4ae?@4~Q_D|4D9Q+`R z&p&N;jFJ2x=6Qil6P5h;1CD(n)f_BnJ))f3kH#2R3}&qEi||Y3Ty}_8I*}uT z`%yOkRdg(-Mz@@>_9Zs~#%`M^! z3PW>ng6su0FDYquAuL&{ui5ur_iVFbU>mO+qR!TGciX_7Dq#on3L&<=4MuWvx^L zy<}$3U%x6c-WKMvQHY3k+AeRFEP6$|boEw7Ig}61E)h3g`5saB;`2IaG#nCyCUg~! z<`%?ik3#Dr^KXZKNY$IGWl6O&Z>nDB2gSBVVg?t_S9Htrlhses@kjR`Z$7m?09BD6 z9zk05GZMSQLvQ+L6?b|=6vU15`fEp5K4=3plBg_`-m0TijgB(;E|?EhFJzkz&trxF zEBu(}X={!KS4)`sOO{x{$k>?!0Wjx1Gw`d;pR1pNfk#$#-oezu)B3Dcr*rzuTQa8^ zd?9#@TC~&tu!m>l@{bSwtChRF_YdmQ;mwYdY1SiUzP?X5GUOC@RJ)35i}ati9maR; zKJNLfCgS*!3Z}&X>kB;F?|($(Upb=`(t9{;TuP(VOWRFU9ywVRP<(i=2ZW}9?FmQZ zf2T~y6pp_rv4WHIF+^2>P8FS$XKFkeBrQ@*KJba14Hg*?)|2h@P@>1Txep&rpekAT zL3X9?ee+^I#>U$1tV>#-c9m$B3=%$2gPI>cNA0E`h~u5IWd$wuLYSW^Pdbc~M<>iQ z5scgcS@cM=4LS=%s>no_TQB0w-Vnwa`T(k6ZN(>?{%H?-uw!iExY~B#6qwrVc25Ye7CzBtdPsf$ zdiVOpGlBd(RF!er=930G_?|Gk{b*6(Itg(DgFBGn^$4#_|5}gxZ~5fNw2Wm4L2}ku zne3wbYZ|)8Z^|pmaXhyZTg~|Abh+yW&EnNb8}zKBlp+G`9&&Q(hTn3EFAI6?1r^8Q zB08KGQzaCdpAcLtxM+?_-#)vHBQiKE2-jhDjPP6mcRp}U2da<1VZ%5JHU#EZOGR3$J8p9vD$r1fKA!l@hHOdl5^A|a zc=4?TjXYHkT_#>_q4#~hsgYpyuveNq*l7S8W?X>UO@AkCGYrsyf2!WB2LBH#q#@hR z5>g`h{j)I1!iyIe5syAPXBf(V3Q|0pk}3EpdEXeJQNYNNIpw~PJDp0qK%#CTyybLbqqrl1x$yXhS>Q91A?QGuPCcW;(9LBytjBULCKb$RoYChu9oG-0I0alXP7s0xC)|B3ex6i)2$%Odw%`fIG^nUgtU!AzI!mWTLNvpMIrUY--%|rqGfDVX@n8TtN*kq*KWy8|�^R zdjP+TuQ)-h=v}L>jPH3y5;(TZ(j!@(8)~{eQjs;AYIN9*5%wO6QP^7mImcoPn(H*o zc0|#->Z7)+Jbv6{Prv*8vp#WRlsBlWPRMb%DqR*1YvxOfANs;J_xzhWac%f#f8ISw z=Y{ok7S5=(6dNR}Rl3RTXO&t+)4i!Ovk1w1duvJ6LS@F{S`I`^(bccpb(C^kzS%g8 zrs&unEWcLA?L7RXi@#maMuZ(&wc*#5HON##eA9t`lD?V9w8wj7)!B9M9i8TrBuyQ4 znk8`+Swho>Ep5-{x}~e)r5hjW;}`V7Z3O+DZxU%PHj8YQND-sv3HRb{$!}R{rbpg? zxKukEzosEF^Pp9f3(Ui-RcTZ{TtO8#)kSKS+Ke1u@5?RgEN$3-Q>qXeJji9MgG`pJ zv{N2fa`Io1i4;IS#AQg@VE>545^UmXm%MZ)0GVpb{S{nRbXuXwq(rArSv$el^q%5D z7p0f9c#0QA!PY&tvGZ8&e*EhXFU8Knq%Q4`dPwZ}+zhJ3s_yHY`F3${KErhb8=EzQ zy7M402t}s+#guzin>_kr-m98O)P=0x8K);Bu`(LGh)zC1C{%eT7g4K4H`NiHj(c#_ z9zyo3rJlKNRNa2^dOwjfIZkkh*f#CL1?Wa4CM|c5c{e^BGl>*1UG{72#Y1RjXp5F@ zYK$3|Ds9AadhC2^+Z!gf+lk&C(w@Mpecz%pGY56er(j(6;NI{g8yAr7#~!sj9DT?5 zpquT#w#&Y`FchKwAywvjEk0-^PxWJR$k1e9#l@Yhe;`vj>8srlt~uJYD+*!ZE^In& zaz^?I`5TE7wk%5n@Jj@>{7B|-1A*c*_c5}(?iDodWD$e>Gg)8MO4X-d9ywzxzd#aw z=^NRtehNamhh-wSvsF)TKkE5c_B#9sC+o}cLi(!>ZjESD>v^Ohie&!sS$~r#0zcLk za92rX2Or3BaS|U)AMFv+Ps#T?-tubMZnlkzH8gCpO~FfLiF$#_9|}bC&hkoN`h0Ry)YqF0@A$y6K>b1fegxO3~`!;-qmI5m4rHg2}g?ibhJHBnkg$Xsh_% znn(F!5wNpIZ{_4MF!(VJzH*M|ACRdODz8MgZB(=AZMOWff8 z+XVW%(9b@+$o>B38evV8N~$u6g$vt7DIR-E`tuS;q+_vdmh}66+iony7_i6}3(t>G z<@bz(DuOXrp{f*^*$>8~tg^OFwNW5bC-m98hZ*@{q}VCEGikQjGVZagU7J}4xEjHu zHFNGC_m{1jwo`&6mBN>ispo%2^Saz6_^E|b^QgOOer^y-`WvL2amWKL2Z^xiA9x+E zu>`nr-yWmbXRd-_ZjJS8j;N5Ore+B;Yz&{4CRURi{(5Gu3x+M0p9oVMhEsC6?8(wH z+23`wQk}~T1nL8&m@Tc%V=lln^ps_w+qb%fPx9t|n`gk?ROmmza{e(a^Q6D+C{fh& z;~lJ)FLeD$AJFny%>9}`&_(GIRv^r)rC{cP=;pVAq_0vi!?iWg0r>&LCJx~X``rtm z@GU){dlC- zAcG9DqEUoCa&(vr8PJ_>pMrkY(5uY1D8={$fWgkk?ZzOb{0Iwl&tL`ufr*_AhIfH5 z_XCFb(LJ1vw7HyXc@LbOg-n=-Ka>gj%3`ip%I0t`QQ+0yYZ^&;G3pY`ivX?q5NOVp zIkjr)ua5$pVSm!G@4XKc9ApB~kyk5DZJajUJKC|Z?j)k*ODTSHi3Dj|Zn8e`R$rX6 z8B5qOW^T~r(Ut2tYtg1`_TW8z#cO)Cr@0#ZW1qk^DNj_`h0n;hllFnJt||M)?AzlA z%CnqP=A85|OH56unc#MfB7dd!z1+i@8y4&4#^xlo@o3EzaxG z#X$|r%%Df_FV%AIBE_f)K$l>oJ%QE_h0n+RaQ-~AA{j9sg2f&F{Ko1i>Gwr zK_hNc6~=Yvl?`hI!Z^;|YZ(J=0p5_>G)&^L4F>I9UK_wcLM;A`!^o1_GmjHdHAmtp~AtFdktf9&a8i(PnsN zHpr6o)c8NbJ;cWV9j`5e*C}bBN}>yC-z?YDRmIR>m%2i~k(iHvB?U5PJ@{@Y!KRoo z53eZn(Q%^7oE3;bS!$--wVeOCVmqGq^!RDP8s`M<&EwR%A#b*FUJnLEpG#*p!}oj* zU-RaI&fvPSHKy(57E_>ksv9pU^kxi^ORM_mfIMscc=JJ!1TvAQE!TvE4dr1dC$ zfGeDgoS?Alr7*|J^yve9~~H_kt%Zhlwl_ps`wwCI{u>MlNl?v!A|O2yyb zWW0rOFi&$3LG!+)@mmK=S|2^=@>&8Zn21eE+X)OwnMBs_)0p4_ju*r%RhHJN&+^E? z-IG3z9%&LV>n?C{)h``cI=TtFLEtW1J4@S{LSMLYSdYXj^g9k~S)HB+`-mjV#I7XN zzbJj&sH=IBmnOtVTLaKQs!Dh5E@?K4cv?|7^fWGo`ISwzA^RFkbJfWqLdNGbvELCEN_~`il)8sqQ zIrE`IvPtChY_xVeJr%%U)@cwxxgw?uL>M z%f`5#Z+I^g2!yo;?ttSNa=ayh4_(^;e=yFlzfzU4vl9H5a4ETB?x|a z;jFjPQAfxtYo+wP^4OmiepB4VoD4leKW1*Pet4C@RCqY#QKfnX#+g(r}_{w+3Q)E$ONF z&0idXxhX2Bu%!@Bb{;ccQX)=afj7FmynGH^846r%$l{%Hc7g-y{W3lqgD9!nvsOwf zyL}(`+_^34E45a)4>!!gIQrLtQ`@bzI%4qrA9bwv-k@m)unxvEt%gT!jN6BOnOt$@ zur1=#GbuTui;t4(YI&vLtr@O`Pu;)>iph=fHTHN>PMxU>*UWVIM1w7}sGFnQHa`S> zR%J7v-Z&GFDhkT3<4)k#gD!drCS*-!2{TA|T2WM77}-5S`(vCN3=*}lZxQ#BpNe-T z%G>Xs=QqY}rvsX+wdR0rm4T^Z8OCH2U*IEu$rKMr^WHZvCdVp!D6tprUmhVz^@VR= zCxvbGuC-Lu!|T^gOdNi?ZYjQ-$nlQDA!$MPE)(XoMd`L1lk6}B zK;tBA@)%hQX`j|REhfwvKrcrKOMr@Y%hmbCMP8bXpFe)wM!>65yC(3a4x5ArZb-hO z_1e6eFwSM_Th&*&RI~koy!&eNt`wKPn6Av(`=iS4x-4&0H@6MC>Xg!zFun8Vl|ham zN<9SF$=`kw0=TA6&z{zAIj*5SCAd^iuHeGuvYru(^h+4#eh;ADbitf3sLhBnmpMaR zkN@&B`4IZ>)URYEY_?))d~+ppQ`LGp)1-1v@QM)PTi5%R`c~dV(R-`%jqYz`=Jz~w z$gMdJ7HkWfZe-e%Fd5?NA1lx-nl% z`t?UKThTdGc2lIgK420%Y6;YO3ynMj<;e0IJ!TXMt!1uV&3~E2SeOE&`j?3@p}6PJ ztysc^Yl6SnTxo?B@C4Jk(s1kxo$e8F#$OyjXex%hKfC_W;<&L}ujt{k`{(rAYVK}Z z87Lde@Kss3DFAV!NHlKPY$|ke;*Y&$8hqHoCNqhs{8H}wPain*AMhOWv=8^ER36Wp zlR=1>HEb0A)(#mcv}n_ZZ9nevJyg^PyNoaowtSxReL@$f4{`r9e)xW6S1#ur%P)I7{rBu4CAdurC0xo&(H!thn%ju4~^N{ zuwBIJ4<`tWzgzZGj2R4u?Oq#m!GWb&2hED7z9}|h#(J*B2EGh5_p~PM^(Fhr_JhQZ zZh-Qb2c09mP?wQ;@~ycGjXHl;B}a!Of6VtU2B7umCLIZ>yZ6OYXhB%CcU}Pp>rC1~ z{9TRMYeJ}yoQ$}zDNShPWq3<2J9+i0xFRmub;LU=ITOtVY1TaP^kHc2Z>5I9Kd_^dQi9t_H(s9JIB`s7^kIgWYTZTJuZ<*z^4d`82E(UrMnJ*k z2|@X7r%|^z7p?&hKnS98)%tFs_oXktFKF7a@|C?^tl?Yo`V0n1wrIZPzbw;NBBZzRLA)KljtKHQNTIC}BZnqV~%ewcz+5Bp^=*wgU;qmmmp8-TTNF?~x@)7yI z0$2Xf(oNxwTuJi}k?&Lcj}~Wh3yt)dP1GC>#s5cc?g4IUodr^ahhd3PyYsjM-89~x z=65~(EC^U!Z?%8qxtm1vRoLM6y)4UgEbj{mIG6<>kzr+aSJiS+$d7rel1He z>ikY>3}{B3XXp-Q7^4ki(k0JgsJc$n92{o`_y@MR;?E9*&;G#Bc7D2CCtr>x=DX>?u z#0Y1?S!Z$<-=!h<5o^+m1t7=1(Ui-<#_rn8WSAib`diiDNLhoX&L7#=j~)rM^^2i~ zA5-e^O1^#=Ld{x{OVcEA>c1g3Nw|xi2Kr|^7UUw&fQZ}SVTR$894G*qv!cHm)J$@q zV%7e!pIgN;KgK8(#Mn8@?;A9&S?qO6 zm=1Te(e#>p*gE&GZFkrFosWQ;ezS2A!a;Z#d+`|OEwOKdtObxT2k`$-n1xLAJLLQ4 zEa|5Wpa!s=8pm+`r+vEwppVYP>4wF@8KD6lp}?+*Z=ZmVc64M-r(XkBHCo^O)?h4C zS7DMzDfJx(TV34E9D{dIYX3&Zsa=GQT(^(oG3KAbYs$8VIX^TDnBqMy?StWcy?B&L z-J7BMua(jp#lwDNeTCNl(-f{(^2}>H`2L$HjRV;1Q!PA9(Q)U>n(YTkM@;`s|RRlWGoduv&+yz}!tl*_2D+n(hk z61K}0k>1i5E+)SDJgNAjU;G7Tj@DP{TIB{2PKI7bFlexyv$jaF8P##O| zJ7%gZt=_Fhyv0ioJ%gYANc{3p);QrNLvH)#{jA%2;j{a5>%z1951-zWJqmS3>?22~ z*Ezwh{28Ss!q!el+=DeRSe)9(QO|Upn(IntIxRNQ0?zJw)pWaXpe$~QU&F%Xf>QED ze54Gq!>>+(FxRp*dwt`Iq-hcB1cN>r4bMZNWG~yh4`mech50lC*}1f6;$tPxd98gM z4IDj88bJ-@if7R6xJ^&fjn8)45GLA45+zlY@_9^omIRShncaQ}uL-NH5%5Ue>|aw( z>MR1EnMk=JRL~7Rk$8*=yCybR^JqVoSaayD@tMWYh8!Jj8d4D#dNKrF=Rq@EG67>AvSObS#Cf;*=7*=i?pw<-Y{u@%5(fxBTIda&4Fv*R>e|ADf8#q zZP9w?3NP|y{loglnxtMa|EM# ziyH=GRByESsicQ8v?2vkOv%?;nabpJavxMBB7-_JbgZhOfdA9R#$9X&eUPWdw(o4DL zyiDJH8F9nBcYUn`HJF14wKSI-SY?t*V=ssK+wOw?D9G*0w zN>iUM;bm7^VWsP`7~m;Uk0u;`Q2(27A3xDF)}QXz0O8cFj^S1@9DI+S#7XB>e3QAw zV)Eo-_H(36V;#c%e*A-KdOn50L5;x?r{)QtdC#on?E;;TmXiplAQK@^$+rRptmHEH zg60=%syTmp=ZWjN{wV*RhoUiR_}nDZl<7@EGQ4lSGn(K<_3k*##^~Gq;((FSZH6b! zS$6wY)83L>YDh$V<7Q`oqqCPJzxVVDR4P;0v)h}AR41H6$D5ELa)#>x+%4lMibDN-SD~G!>;WwZ?^?#dZ~lv?^Q5)c&(Ov@f`IQu-*%0XMhA^?y>$_ z>AH7nN{sSK4m(WB&-z&9oaNBsCGZvZl6fzGLzzl?-VmUim-_r!I?pJj#@{OTY>>{p zp*$Vmv`FcFFT0{_cr5nwYK_hDk>$?NECV5f;2A;Y#7!ag`U9}r<>kH3yg3|y^yjdj zric{x9i?tqAFnl%!!Ah|duNd>)kkJWjMe{QS5v1q2`%t$ouoRrTRa{YyVSdm(dRknXkak1+_tx#T z@P#_x8dHkEYFwd@XNkSaW>!%RNm#fwQ9<u9k>A1ghgJ+mNYaYsuW z)p<_H<#6{-_Khj>!0+B$I}mu zHm`EWAOa7Xsj_YkTd)(k)2RVbBJ$8*K9f|9s(!qn>1{e03n^3R`+l0Y$KSy2eZC|N zTwsHac7CVKABL2fDY>C{p~TO`o|FU8U_}pxv;yl8ANAHtmuH;(;cSWv)%)_L%Z=&v zm0=_2f#js3>fy8Azj7Zt)}J4@(jWYiHoCY;^%`0QQc_A7?5aSjfZk-Xnk)Aa{C z+#rrtp#LKTF|m*)(0ii3352m(Lf(#kU`@yT(9OAYLzU#2!%=lnB~I40!D`cE8;6~r zyNN~(nn@%i)<-gZKY`KshnBrO(X!m2wry}T=e)Fx_Ic-a0E5?c>w_NK zQEy02fCBGQAI-1zo(Luo8k1eO=2G%D!}jmRkO#NHp{YUd1>90(+)scMlfOIn8eU1i z>{-s@kvc8;W%{`Avfj>kMg3y89Z6BTsomIu%t{rfN4BlwPFv;X_&0Vhwd%dKWX=lf zeP~~Rby3~SLIK);^_>YRLyq92Z5$0?=2YHum-hIZK5UooTgR7P2oWHdC1|d3D4kaMNw5@u=GL<9U6NP?dfp0@EZ?Ye|rUq1*IPqe& zu$%p3R$CmtHi3gWL`S6Fx=SJW@}rlWF*1#EEAXu363O=Qd!fSY6=LKFYB+DKn@>yrwzFX-`IZJ(T#XFL1@!|8; ztC5LDlibd+czqr#&~^b!$v>7p{-Uc1^Lh3)=sHO%;JK?!eTnzHTeFcKiR-bb4UVYJ z>O#TRE%e5_x`7(2SL>|4!t*+>k-e*}wKtt!f4sB!ah#75LBb%pkTqSG_rrE$uZd)Y zT*9%g%IF6IXd%suI64`X}b#poOXzZehXk$ZP0`@)%Pg0Yw1b~M#=~x+XaUv-I`HjEqq^=fP)IEn7MwW zbA9Jzktl0T@##f0Nj!kVz^Tz?xRw%ugWyoY!N=>)Y`q#cQn`)_}&_KeGQNZO|{ZPQ998d1%6 zfxi$S2HrEKs09>|ShO!dKMDL|*X#LWuocM41G+4xAcPlQ>_=DC!_xaKbVcO4qYV6h z<$lUqF)!E?JwOT{|2!IA>@5(0Yp0I^BLlz{@Zt_ow9jR>#dXOapU%FFM~#V^rGQ0? zssBYR#JWrMX~oY}#iBCL4A#(Mn|~NUEhWX2_)#&7JSjmE5&J1^Y=+wtYSZ3a7YEJ+ zy`oBQh&QTV6qfqo)C=O$HG&zT(K{$PIsC77I3Y-x0Rq7d9R-1D>D-P;)2N_wda>QFLKlvU zN{6l5rB;uTwXvt-7Mypu&?kCg@nQ9FrQ{Jb0TJv5Bvg1$h?rYW<&64XfzXX(v|JL! zb{)$RjX%D*i5X_7RM9Hv6&Q-sY3e2u}$$%9ug zXSOIA#gu^7Z+x`M$n^twMpYt4<)K1*=H(j zDA^E@|J8J+>GaY=$oQR!Ikuula%h{L_!!2F+8noz{u-5n!>o21V4$!8*;n`rx}|-B zwP}d~>LOB{w)(58!3_m=D=@U@1FA$SVCzJB2|BBoL-1C_@YFg7nujS*R)+>pg0Nb& zZj$HSI71Qif=J!uV{r(#pGin{b6&Df2&N{3>s}R%Jt7@ zroTOeJUVOwrD;{#=%2ARvUrvlGbI_lC69K;g8K4=!QW^Xvbbot|GFXQ`e2RPGZC-l zOH$PLRx|5>U*qZhN`aVqdP)NN_`o#L8}wOsy#|&i*UGwt-1;rrxxT66K9LH*7mi*V zKq-V3!C6KGssg`a`-!(u06+)2ZyKei)B<%VP_iWe7hM22do9;^(~xbjhB5RJyB6e# zc&MhRz5W+^n*qIO@6cr)jHP&@dm2OUW=pz4}5;{XQrrgmNy;C(-Nai;BJFu4WHHQ2ZJC zv`+sW^00D|2{--GTsg6Lzuymp4ze#&cmDeUI}2jMD#*=%Q)0WhGXI$L((mP4@6+i5 zNpdUpcAW$vG!LZp0Pqm~J~GDXbV#aCH0RF?_(bWjWq+@FO8#ZEES-|sZ@GnQhDIhn zHx7Epa#4nvm6YD+7kQ+9KNgj~1V1%kX@UU+zpc%mpPz1~L($?a5}o_`PcB|RQJ=qL z+!>fk zs07{sV96N}W22e#?-S~`GEFb=PW`x3{o}vaY}E)&NIWsT%>N>$^`W}6@IN8msTf2R z0bS@vr{4_0s(`N34TGIP+R6*e_-}>&OFP>An?ZqEus0@f%BODwWXBVsw8q z1JDwh(xQ}H_uFOt2b+veavg2ZO2A_NkrF`7$x3O(f!g$n>d%(o#8{{Nb<4hj;AD2eI{$m=ESd{BORmLQJT}b4F zT|_tjQ=d$%PVt7+i4*$Gu@q|ocmD!35UE9*!$0Z?vPLSn5l&)II24E_8~BJr71nd-M1cYeEy1}=ePaWUVg>!3B5`;B~0S;OvV zjXw_1>k2y^fY1+sZ7VCyb!@HmPYBYSu2Sz5<~dy}wFb|7Y5s26-Z>ad#;_|vWb2-c z;psta*d4iP2Jv}PfvG=3Mj1mJqxo8Yy^0|1=_+9Od```zJUleP=19d-hhdb?%^#ds zk91y|vJt5wpbB>{GaVOcE~<9AAd~oxKtXqZm5Q>$FSL*tg9l=z^NM){B*v70DaNx5 zUmHlTA*U88eirCE`sh^E`7bv(%w;7JoQ=*(>}Fr3pzo%g>D$49{ojB8$ASOj!2faJ z{~sI(qL@)rT*^umv~ssm_q4My@sDcSo4IH83$8qzw+~l1JHCAW6kkzqZwbayJHa*C zlJ1LUX@2NY=NdB56iBZrRvTZs29tWV$gnp*V4zEtQd#`bOQ-KJH9ikfb>R!r^b~(a z$-3*x8zG~+Wk!eCX1C=FN6K5xCLW%#Q^0`nX4e#d_%ar|W-!{XZnPbnNym2jn2OMu zUhn>=X1nq-!?<+-U0us{8aB}EpY+vmT_$nJYOV2g3jbsMtq^dVGm5OcGMh!wNS6>` z&Qr&^N%DCQPWPcA5?C9fAvzd)nFo{(Oi=?(rHwsU*=vd8r;tn~X23C3$x!}om18tv zl{)ZO`MyELf+V@E?g-9YC#}=9TJ<~~vfi$<@6NNiy8%XSnu7dtz@BA#``Y)+D|&~& z!vA>phOHsB$!z#sDZ%I5HF%Xicqc&NYR~q#6PEw}R=?BF`wkx?#Tbq*4T5Y_M1_)v* zMyj{3hGz~PGe5G8{)-tn4ZHemFc#LJ-{HhEEK=X3S2lqup27z3it(SCqBb!lIbe>n zmJ#dJ4>R^-GV9iYpg6-tvLr}#`sn`qxB7F+f3}+7<4jpleP;80W2vZPw%7m&SmO^)_=)WtOq$6WBKnM%*kZ3+5=M(BNn{Mstv#lEF z1z@nFX6Oy4#H$n!IH-o6p3fQuTE0Gg#yLIsl*Pi2Uh&Q_`38!-qXCrwbP6COau)#B z?LA6G=S!#34<4aj&m2H!6tpT61|j}caTfdhV@Hh#Bol+sUd8^kEATs4hcJ85d7J;{ zU19ZrML{K$`iX~$`GNGwg;3x9#wtuMxJbOfV5hg{97S7XOZ`A+> z2ZXNRCouni9g+#+=v&$;>%eRNk{wmWY3OOD>56v=67sx%{iwl-vl#jZ3|L+gr{Uk# zQ>=>+o`IZ(@(ROfY2mQNSfFzOGX0O^fY?blqRJh&g>((Kt(2V(F6`K0Jrt*T5!Ew5io-To>CX)8E|MBsJH`mdu@hXD+IKH|% z0`TA{8yFO5Ybx(ca@VLx{vN#rH?a}j#b3c#x(KdJVsXOE`fux*^$L_4LC5YL8}@dC zuKvgRh&G0Um1TWBReH7%Z@9fO2l4w|135GY!BttwXyXS|c{`{~{q)#)Ki9Dnt2BU? z4L$OpY-Y<+D~_PA6Fz;u<9VgG+YIAU?EC*A<%3pPqq8;$J-tMiSOB<^R6b{wDA+u;cY?7o$y zw*4QJA|;=GC)i)fevI9=h8HEU!D+O*K!NzOAsq4aXHt<+56GvZRSYa~`_sx|YaU{_ z?hPYd#)zoA(L#>EcuQ(`eZ4~Fmw|xj>G;_sQrpT;6JegKL(b3GI}TJ=k0o|S!{~N8 z8*4Nc`)RVid3(amfReB#(Uo>xH?TLaNA}sAad-SN7X5m4VZniUPI>85(hQxCN%b--p%iihqoNwNibxI)Br94$@hutcW665?(jU%mL4XEi zPwbhBfqol%wtuvN?_Tp_nAG4&vH}a6kEqDNoouG@n>j{Sa9MP>bR?1NjbcZ&-ww%S?4B{RaYjc{pIiWJuGscrl~O% zC-kVg)0Gusc|ye1tlZBmT#4ZFYp8bWlW}dS48j01StdvLxHVIjvfwRDBd@Hiz7(%p zAByO4cV-<;_9FZpZl_sY2I9>KDH#EHgglvUvzzvetjI$W?hH1PgNq&!(h!y?TfUx9 z4_}3^Z&D>l^9E zy90_v>uy+v#lCV4zrmZ-o0C-^%vXK95Cc~`ml@`rWyBnsxg#8$#8Q(B3CsfWYvJU; z)nnaSU>>aj4o)S5l4!c-Qknrk9vdvIi~zPpl|3!7zstyT}4xP+qP3lpyN0? z0)Q9@ZfM!*Pv0a-gZBCke0s`nfnMNpL#OsZ<*p+Oc)Y&)tzF_dgLh^NNSCv;WtdMU z+)S!%Af|SW7vK=VE}fMzEQ%hczh^=imy%6cavd_mxRLzh4V{TL;CJ>LG$qdE3h&>R z!?9>T*!0?x!#m4jBie~V%I4D1&LdrBH<{oC_(vlf+|G><2k7S6nln$}r!@%As)AI( zKeB!kuS{v}t`M`6H2lI{E!sIeoz36SQB8hzDaBB}1Rr3)ZFLfh`@I#Nc5Lj?K zc*&z+&4h9?6~GiXWA&4~JjcChcOLbT{rX+t;!|ihr@H3Gt5S{6(y=-=beasw&muD( z!4!F6%;Z@v0`J%v?jo~70*`}OixX!TVy0?GmZOhqQ%_A%=GPVv$QmHvX6zwRK@;lk zxS>&7Ku*SyS-;!oV421fNHAp=O^Gkz&%Oef2_yH!$GQ8R+D}PNQP>as>|r43;X5p8DU+ z^;KNo?p<*Q225?N99`c6=pIrv6>)cC$4?SRIf2ij_9tc!#+lT;hEFJo7)N{oT>8~% z=0>?spIWrD(A0SjGJacZ%>if}jkYn&79T3ij6jr6o;yvczO%^JjIQyf_@KRwl6-FA+i`cR zGm!g$Wc8A`nvtktR7Y%TRUu8bm&{k@sf-3)TaMNjE0Y^x zahG{m1**J?AeI4fKXkLYZ@!I=E<*3ZZy?c&1G1@Lkwo59xYQLZ@Ph@W!_Kan$|-1R zc_mK=5ZFS(4Uqwan>uMCJj95hg*5KZ!cL+HhQal?QXGyK-miB0vT zUht#jdn)o^p}KP}vK&z^am@#V!0?*)>rl$DdmR6-y)O@kvTgq#N(+^z8q|}hBzr2U zkgbxf?8aDUBB_RC&n~59h!(pn*$TthWgW^=)+h#9%Ff7S9ox+Ou6qXczTba;f4=59 zI*!MEyYA~cuXFjFpYy!#`OeWPLALCsh)N3ut-aZ-m!n7irLLTJ z;o7}>_ve#{%6HflO`m~(x~*^LtGaIutz?d&!;QZzqo!_Cz^WBKoU%AyU-Fw9^_EC2 zVMk|rn}=0avhNE+vXl;{WjuNEM6Ef8^)gqr_JyTKu>7f6eQyo9FE@14=V<<{`x0PV zB+jo^WF_Qvuzvm6YFnYe8Qd=GkvVv;Rx8u5X7?+0bZn`ltjlR(G}{g_^bzng;|(ov z2QowwzvB$X++Ji-Y3mj3b6NY?PAIYLIAgj^uh~5>g)|?Gx5<2xX#5tx)Yyq0A=p!p zB)(YQxi~gNWj5A znnXkPkrtxVN=Z|&&8&N2Y@O2OVoWAVGDF~W#*eG2cB~TOmRjxJbpEvknll&J^oe$` zUgr6WO`e7B{mLvmbYKr$p6I_Uj6-`See|06;5`vAM3s{W^Z&u=;iE=);KY?s<%L`Id-wa?wEo zHy+DYGS6GJ9m$gPdf?k(ZF3bct|LQhlwD$F+ETnWu{n&z7L`lBffce7?~5)?o;8A3 z{vg+J$u8&YWy^Lw$hPzYDKWc}7-n^d=(#$`t{UQc*~>f$J?gy+=l3GvLAjI^VT|_l zZ5E`EGPTfNB}4;RhTcg)54em|x3isKI{~kRSH6=Sj^PfLIZs&NtW;6QwWEaUk=7;w zrsU}mF}~P*C8CH!eg;JbSa6~k`dMGznoLowrGp`zo-*Gz`1WSbMZWnrYC zHE!hB-twmLr!?zndY!N9$fvB~f@G73L9r#}9!>{TH8sbP?B$bgzts1Xet_NuG%|qh zbVYl|z4!|(S6FsHlM~H2IGikM`u@FZs|a_bi8)I{QuSVvbqtkyXKqYc^|@=utA_C9 zDrjYpQ%V+y!pxCpe};bZc6#4(cJmKUPm<{?k*c0poCJ@z!oKdM)s}**yVETL@Piji z!|}eM{}P=Dt4m8%y*WjrG6fs^dx!j4BU$&cquJ30+MyRht#U;=@=fvs{SAyeex7kM z8y;xyoqD?q%bJ*U=uLTCTp{Ztt`oqW?OsxVOn*!JU5ED>o7p1mVra89-LFm|yHoJU zMJ%bT%kwDW1C}-#q?kkzgJiA)(}yK#B<>g(tLw-tGT2KmKXv?E%?uKOvChm&p1vVv zB~AAJGR4*Oal@yWGHf^f$DQpRAs@co)HbD+iCLehNt=nN7#OQXXrLsqNrxJKj|N+b zmD|68rNSOTYcb4;vgE{PiP{ZeXm_1w14?T$mf)3V^7a(PS)J^CRU@AZ@2q6+ywoHG z!}&c0w(`jh@~K{OQ$jn^#x{i=nAhW_?(6V;-S1JOC>gvxpB+&#KpeVj^gZNakgtUd zZPi|eeb2fo-JKI4aR+2Q^XeT1Zb>A%z*FQ-QiGW$u{R>v|KY^F^KIn)Fy?Mmv+rv^ zLAhf;Yaj2Cpf&$mrp*xBrYTmZnDzJwa=K>sGly7NcmB|y`#$~CVADs?fjJ$7g!ZvD z#ChP|$EMJk;2%vpJIoHh>o z&5+4FUsGqWwMd=P4S^0=xuieWi9M^=Rxi^P)$GjUfyrA+uD*H4-;xi#z;GR*PH zE!V{7W7OTi-}JC|9{gM6%1h5eaX<7z!;*xXy-(yz5%DU#-}fiNd5F`CU$U&HrK5SL zEF!`PLbUydgH0Me=S6Aa)AJG^Tq@3V>*pq&Dso3%WZ40kirUDSDhc(gy*?)>L@SH% z174GHLHs*zaIC&5E3sT$b_IR79^3^ zt$aB>9l=R*_sQa`j+Gl`94;aCZ0ZjGl^oVB!%o00IoE{i4B^K;f&+qbjY3l_y))lg z7b0rn#jv(wDcNVe-KZ58DKO1Yc{|VNaF0Hw^kyoh zAb7X=`_4Y{Jd&kBOE-Mv5L-*?L>voK_?IdI8QN8R>1S%tFrMmJ7%_6QDa`6{(hs=x zYh-=;gy`3LJtXhpV!dsFDcNbQQ+lhkqVB73{DVlvH*LLGT4n)&9HdmjpDg#r$Q_pqJY^V3(80AVg|w6}Q6~8cS+{tN+Q(1b zX)gahDzoOQjv^{OT9(lo6Wq19G&Hp#$JOAfctqH|w3Pf$-y(qNAoqv!m7(Rx3q}cl z$IW9T%q2VI=TlX(w$|OA8r+Pi#JaX9M|sQLVGH^YT6uXL1Tz9O*NJqnm=40sUKL*A z^Yg)T;v@`+)=Y=-XkN10rSYdpP3q&Mf)Bm=4wuk;1Qf;5)iSDiMF=XwV>KBD>LNHFOMYa|yVz%%^jG7sr%b67@AMyaOD>Y#}=&Q&6*IDXcKZN~TJy!>_kJN+F0RLRobQXTr`o7V!(u+5&TKEu;0)5!TAS}uLOS|mb@x%X6svZt6&fw zXi@eQ|M4~|Ufkywa=(+L3Cn|19v}UM<8gdF3OK!Nl zwrtfrJH6t$MB!~PGo~(cs`d^VM}ad(JGyU8Wp6kHZiaLd7ia3xdxpdAu3W-nuzzon zz;3+hjl}nLKg+#dTN(%VHVoXmB8FZn^>t2Inhd8PZi0;LPn>=NjeCDylI=v>@1?Yg z>lPOgPznX9BDVUJ-cs-f&*FTeZ~=;iMRcH`6s3gg#D>jWk7Wd{Y+Ae4tB<`|Vo`wu z*EH}+rQl_wT#(NP*yMTLOevQn~9+m5i2e@pIv$%Rw+9Ap6TZH_sX7$Q5_yo-INi{Zn1v zaz`>&Okl5!Pc9GccL%hP1l$XJ@gk|=la z%zN@6W|Z$&8PaRkf&)Zx-Tte8hphWnr0&D)c3Bd}a&yh!KbME|zQsZcBjWes?b2-U zM=_^q>z|h8a}+aO>`iAaJ~4ZcIm(h_;yG8p=^FtQ_=498%8e58+p>m_5W{ipC56W* zCfx*^7);>WKr!bObd+ma-Hfqq-StG_mO(M2;4jIuH|nWvAa$A0^siPcj`TTzj3Sn%Xof;p3xW<_=o8?v7f^c12;8^k+>_`b3!X7 z|8@~RN?&F=N*y2dPYsO}{^TNV0E zp4xdf;!{7^rRxCAJ$3~%9%+1$bseSYkbGPGb#e2Wi+2ybdw0m(LRGRkwwX?Xi(Q}U zYHslSwNvjjy=BuzIALJkT!w;kh#juC%aSsd0h^;vhy$67nGL*>f!Zed{*8BAwGyhC zj-JXRnl8yom^IQ#L&64l4q>}DuIW?jpmV4cI4btI*VB6+4UJN%axahL9!laDKfB6G zPUU?=Y3kl}%2a;?t6ip!Po`byQzdv)@LAgG!hYB0-@UgSuJ>N>K$RPb85|Z4o^bXl?mVOIm|O3RxF-V;JQbdlqspMTyV#srsoCl>9&3k7IE(Fel+ zAE!ftOEUCWaKb9Z!pDl;B9dr z#02~H1ep*!Mtarp61nbIYp5gp)F79k4+DU$PEmFsYZb5|w#`9Yq<+Dq_oI9Z|FVdo zzs%@9U(d#YS4XmJs#CmE`|aJ}#HZ%DO9ZP!${;c@@;+WV@}`QIG*^4ic$Kxvvb@Ze zHVr;t1q(R8rq#q1p|~$EZI`?-iqi@>G;B)TrJ7hw@Yi%{*+Fs9kF(g!v zsO8Bf?;dwl`RLZuAmdaAh{K8rH%A-Kcqq*O1l+=x=oamHLGvqJru`kOGuZeJ!Ty)l zJ&$kkkG=H3N4i+T76LU2sMix~rUwrn|m^UgWqL|(rc^az2A4n5Ir>NXPQZt?D!*}ENv zQayLc8r&#Yx230ze3R6({95Y0AJi3ZsjZkF_~pQSLNjmIFz|ih7g@yXwT;8x>IwVR z$QyBjLF-TtP|8N9^zpx``iMA<>y{NK4h^pfW3nWQK(#9N#hK5#XkxU%AQ z)cBH2woMF4^V+kc%O#NS&ys|IKJ$}LraI=Q-fdG3(K69o@VJ(g7ztiq(Cp4gWos5e zVpabA71R6g&Gh2GqE17dujR$7ctYOa_!5}13OB_j9bbNKqzyP#NXem35TfQJrv6y0 zv~ShunLu~jZ$@O}=1lTEFZPx;gyzLJQ&W@Jf$lb$cNa2NSJ`$w#Pn^#IH{!qKJ4I=Nbq{pk44Iew zL=u{_|Mtp^Mb7DZ1S#;(U=lHMc1`bIft~NxZW=JmaF5CyjWvqf45oISZ8G=|on)Bf z{P}Fm&0ZiuB;B7kR_0|Nd*>UsK3BWHG-#eu-x{5$zO^YxrnWgJ%@)C1G#&>n^P^dk zZ@dtGotrZJhrVYrh9&>Dy?4go=poe{L_{|x8|Wj5oX{E>>y!u#5LJ2A{4_wCV(d}j zq3v*rgELq}2PC-6luPXx1J=B|F3olH$Tknto%RCAO|wfNRfz z8}Q=C6*TpEe~t6C)DAiY>jsGboyRd?o^n`lteisrSC^FPfX1w3i;xwHt(*BDFu8-Xs z$c!UUEXi>QG~%k{HLtrNUyOr=r`QzrI6V&_c$a)<->2fx!URgMrB+riMlryRGx5>o z1@c{Uk#Z^3HrXvRke>q}bp3P2_Gcoi=35o@Pvw9<0i97E5&++e-h&T4`J;-6${%%E zfW(MassfavWEydJ=xz}S%Zj|rmd)wA;4%yNSiA1WiZPi6ER&psl7ex3JNYvG9mL2y zZi?kI5FgJ@A!&e($-l^3JYE4Qs6CtQ2v4u#^w3}NGr9D%vs>;+$-vDHe;I}R1{W0; z@g!DcIB-B*PXX({OS{ep0j1ElfnJ}(| zeCRP(_QwtVU{aKTSc){L8p_kx2uU7nc~t-gaTAh9Ut;(@KXd|Mt-Rs+ z)cy5ov<-|Insx)Z+ptaA$1iVzXT-#f8J)QAkFCLlTEs)Pn6(a8YD*-{3@pa;RfVW4 z`t>6%o;$7Wrqjs;WxkD6Hr$FWNOaM)=d6oy@95j*m!gsHQFTN(~bR;^D_C1)C_$z1tOm{odvxvyPFQep4_p2+#V8b#n8jj2j zn`?Ywo+ZLGX<@${n)Ek^VW7XE!VQ8IBUAF9(&l8_$TF}1B#Y_IZ>93?>*X(i$_=mX zaud=&4guOMkuXr>^74sedc~ zyL8S+u7di<_d~e724kSUcO4_DT?%~#*N`PuowVk{AMU<&qY=XnxIg=^%smI?GvNBt zh1vIa1XOCExEIJ>Q_+bGUkOS~q=k0Rda+n;lochK_>V>y$acCbSY7M>&UJ+S!c5`T zX8Q0-EC!OwA5HmAO{za?d>5b6K+QA&YIdm3=HxS)_uuF(>2~6CKrYm{*yRgF5pUkT z%JgUeMh=Hr8kbBxuGX6ya_ptXJ`m0-p@Zy|sU;#x&^8C9r@4suDZl7dXw3jrH-oeX zv_1LfFBi6KoVeK>^*+2Q-UybLz7;&&zJJy0$J@1sM~?E>Pb~pHC;a%*7Ri3~G-M(e z0XgmMZv6$A^coI@SF#UH%fz?not9G=qZOuaZ8ujwuRpuP??R;AT-^K`u4aHgVA2w+ z-P%VJnfVwnENDi-_>7XMoM_ME%ABg0DSNgP?{GHyE-kRTJCdQGY}<9pGn?{|GbQ;B zjZOlQIXrNk^nq3b4T3PIge?O)4W8;Q>>^KLg4Vq+_UmOSp?QK5>x`R{fXKo10=G-!_}sPQ?tB&7noVWC6*ns6Vp$ir|E2Q zK#4J?&9HPsDPN2Gf|?;M#<#A1o?J{=F@Xl|GXxKS>c7b|fZL3le*=f~tbP=-07g)Q z=3ICK;M{oc-qqeQ-@>pJP+erpKIM7N#Hn9!s46FVMOJm1HmtB&Rp|p|%6*MDs8Hyn zsPbz7q=%RH6DnuzoIcFdU>)#4+h456)p=KX^wd_yd?a(#KjHaA`=@DG6vu zupz`dI+U(CMQqDeDto^U74$>-SJX1JZQ52XUWUgz~~^S zia>MX4|dMQ&#wVn&rF1mWCVSj12_TX-5u9eYFwP5nQn9P(^~HZXkXih$XgpOLF8oJ z#6KCx>gSnnl%(ynTgtE?l?1qnZqjBU!6PJims~y0mk%_ab|$g z%Ap0!OM)%21GdQU+6=Rhd}4J>&i#7Ax);9{bP36G(LTq*D`4+|Jy|ZuN zBor`dqfC+nF>L5kjxM7Rm#r0nIb*s{kC_&|5R{;V>^dFa>qrl4e_$01)NT_A1u}N3 zCPOub@jxNfz)VJZUCB9shmCF(HlFUf}a*h6B znTH*%{zUN=MpN_#0H~hN`eNq@Du0XM23wG;r?cZ1Y6fge2LWst?8bp|o3)Zj=BhQ7 z11ur}$>Tq;G<*Fj!51L9%}rm4MqJtDR+@Em zu=}RABio6;u?)NtI4-It%Z_ZC3KocrS(`S27P}X5NubOd<68b+C{_qBOzKH2#E!8 zGn^#P%|x|VqaH7%lLoM!Nl&ct?LPRBmYt%0EFFYwhRlz|3i}$)*w0QA33``whZK`hgVjGS^fC+s$=YmQ=e~_D-6W* zQw)1hx(l~cHow1DARExUqRLfyNQ}d3eVvIwEd$vj={6)3u4U-1o1@?>DOK0v!h3ce zcFceaB`B9a8{Rs3bIRG19iiLyR1dj2n^^X>`Q`JZLtoA5*p;KfN9x;t2ik3zHGB3|Y49X0FQg3oJV_l$XS9B`h)}@oJf&A9&e}`EsTTUszu2u*PfQ z!??`F$;H}WePJTLz0=HK`fiA-@Sh+n0N*YnW%O87H(1w>w zjDGDS{*!W^B8midB=yXrXf3NAUfP-)qY!FI?L_&kl!Kg5`X>hoK}l;?R3ae zptTec^k+dIcxC51P;Ubn&9ae5^-36t^PmSxre}0NjA`x4uQBp*6;K>1cJy zOH$B0-s{SIJN5Z-G3rjo#VTV23@#S%}V;#73#8F^+Z_WXU;^g!3w3r zdHY5r7g?mTA?O4A!|q%9O!$&uo+`8~rhCN!el*x;vaCgGssA{ ze|?N^LZrhM6i4f#A>bVfXyv;tphnj&`YE#)drZ>Zt6BH^b^Gab;y?p8UKFa4?h)OH zAwov0V>$bxHGa5dbV;*_KU#GYk-}{5Ci(Lr+%_ zas&&`jlQqPGJ7z$JwE7yN*Zk8clUj1x>r1P1WNLes#&9CRY0L#UgkJl$1ZQyQwiU~zZGJRklmQtem1*XTN`@3Cw#E2}M=Vm+v~1#>Y`0KHCSbTrykb>_ z!j8Y;(pF^nc4*WtOKRY4WXaHhqM=bhUe$*oLMwG>xv7u;Os_^VSvaoD{l%vj&iSMQ zZptfSJE=xC+LO)XoW;W3`1P2l%T$C&S^~_qV~uYHzLJD`-k%G;YC+(zF>qDEUS2O!&Zk?z#6V>#pBP=*0O7mySOW=^#{|d|qR`X?8CGLBRQx3-<~299Z{ikE{-{)G4xN zgcr3y+`(TFs2}gUqyr@JDRZ(7|6?Y4a7vud(0;dMR_O}e5Xv@GAwMl<%_1JG6_g}% z)@p)EcZ3|-DE8B>IwjVw=>4-F(b@Z_z3oXTxHYw5op)m_g7M^nKsdN;_h@uo(2?XS{<$x%SU}YOp%R3pU3K);#_WnSu|3_rWxfU{*~ZFhGAewx z#u(FQsJ=|l`h=l;KkH9YqrwP@KMG#-o5E`n6S#ftbweKKzcjewV2<;)i%Zg8M*%@) zO+m∈@37PH`iv|C9dXu^*bw++CQn+8EQ2mmVM{9Go~io;a0k3`r24!L7B zLZFm)Z`6Hc=*p@={|r%%yDPK^=gZ&_+0n^@9qyq9ep*kgZVbLRCKsTofsWBopYz{2 z5&Sz4nw*7r)W5&FzL3WkDb{#lN>A+S8yzmTup@jNOS$KKPGIecar9!Y58bAV*u>b} zaEK{_2)3Ynd4Ylz!A_F)8`8t#;IarR^Mock_scr*Zb{-lkO9b;`8B_+r>5Xa-N3`cys$67d!#c zZ_Hd|3u!k-9x6!*`xSgNA}_IMb-rVSR3^^`co>jR;rt4GcZy@JrYSYkA(Aw2hagLh zl-DiVDdxvxLHVQtAQ2|_wte{{{*F62Dbq4j)j?fl#niJ!7Dt%2(088sfsceQBo62u?uIOyI`#KKW?4W4bdT zrLYHaCPwBF7t@Y}2jw4fF>*SbZ!!NL5A=~qwXvqWZZgi;%q@sNN1JxBPRqq>7}`A( z322MUJq$cES=ev-!M!F=GN^w;>u2~drdL-_1TX}0KQ{mXFXq&Gb8=)b$CQJxy;On72_p{NV+ zf*Sqyh)P~*(0~Rh+A!twPr|+a|GOL!UnXo;5_#(le91z$6(8z&MvbL$WZdF4naRqy zU+kbU^xkLCDF!td0t0AcW94cSAf328W%w5UQD?PE{YF!5vR4wSzrnUCx>9GQ^ zrvFLgg_J7JPv$m*_XjjHR7)N9{w(NwO1WW|9|=PH0`uQ_>O3QaK4QE))3 zI09i|HgD1dYK#0-iq&@8Vf@wdIU;r}Pd}XPBcSSEA|79T=2}W*&UGn%mM~NC_yTC3 zvycq<4f4ky51%c&dO>Z@4Bi?z`}Aw$FXMTWqZ4()$hTWN&hoJ>%}n11MNgkOqT;@8 zp4jMh6y>3(%6NM#gfoIB=U&`I(kwhW&q6MHBwms<^JUm~)zTbAX`s&quy#5* z&@<;-XkUx<+0E>J6MYqj`FNv-dnD4N`;4&KH{*L0fD+%d-j-0)ZI!S3e|h zcff*!{l!0m1CJP#F4}Yn1K`<+$I+oEfzlrBj3;d`XTp;#?NxK{*}NbAad3eXfFP_E#qn13Zr+HA<%j#_=NbyDnSh+Nm@BLJmEQ5VjTJ%bfR0YIt>ux zR9-VJ_c#7c#YEUJp$x`6|e<`VM*+i+&||5AX+-Kru}nf47SLo+kF z!I-D4h|tCav`tqK?_u+Pw1odb_Ug^LuDOXu^b9A#BSR>fREWK!rk%rXOGkIPJ6Vv}~x3YS*v z8OhOkb$gbxj-JWRnu$q##)@nO$Ha<#nbe6stl^3o57`Oc^r2=h#D6m{bz5en+tV0X*-YZ+Wo1D_gQGXp`hPfsM_->>{zRYWQ+*>}JSnWE zX2?4~0nQlJv53AJ4H{td_XnBr~R!%2%a6?9YqIqpOfYt(=eGwv{pw!$ZtR$pgdtk%GG!e`#`nn6S>^Pk1GePr+-8y z9Xgzn#9xjFFRo?HL(!JF8r z-4Fo%xXfew1(fXf>;MioSPuilFvYn(PTR-U=uMbn%dHK9uQ`doDd4_0b_CiY!^Mx6i`-W>t|qyFbHvC0(0)wsoB!)Q zIBD3Ufd*ndLns>%dc;*(kD@v9Cjm}AlJx2=XmM@z{8t@WW@6u`n2y|};zoZ5=5+fS zqhbqHz^-fJeCPWZ6>O!_OYVXi;!B}6g=av_b~y;I3?+brKWrz?jQ=dy)b~}b7DP1v zCRt(xUu<%3k0~kdZtL>N{1V#m3Vn^H1#}?P=;q5J5?1*E)KjCs?%k9XzzPHb0f^cy zUJC^LJw*W-r?*?fY&-t37Nlsb6c=@HR_L;!KaLK_*rYPJl&Mlv-qDgAT~QWzAtsR%eN`s$2~ydMQB(~ z`x?>m{-MVTyVvyZRlzUXT#8ETnC}oHJn{rR{7ax)BH^8a%qkE0nn7)wi(od&A#N?=r`yho3_TPEEgn1I z+Z^IfPfR3TnI8dUyo{uWSF_DG*JwHUu?jt!e=xHJIN-!ra7=~S$ifisxM|6dkkOk@ zplk@*v4`2wkNezL$f{WIPJ-t}Ei?)j*;h-Q(B{&$hz{Bw%Zy?Sq0yBUQL?efp_)%$uITh*Q?YmsjK;-p{)@{TV5T%UtHTR z=2t`Ya%!C-}qp@z#m%-Lqtt+Pd8aXsJc-Q1J4=2Dj z0I-+c2H^OLV_GYy&F;{lu?lAAM#=qhvIXbYc@3BY9K|f4$-rd+iWi*Ifl@%FDA1_^ z6}!SZ0MIi7$LqnPh223yE^a9C`w~ktJ0J&|?%f5-2~MkdvEW)g*XYExzwcr+n+hB@ z|2oHk2E~M?wAMRBkQ-Sa(4qNX!k#xge!nT$lqHW=a1wNYVIKh1n`=N(n3>B^B$-I? zItR+kI~1P)}Ve zC_0~OQ4H;!s{)l{KY_!uDZHU~0F~%v@Ee=~1J6HQlc>v!F=`)N6_*v^$g-Zw_az1d z)5u>8dY5@X&(I9>RR(p8aP%At9rnZD7x7Cmf&~ij55ChQ{sZ3Vaq~F+D^Jr>4E=}q z_HNqAXd`ZU<^>C`xik9q$k`qIozw zW&=(h!)cu9yF^oDmQAZ6W&?%+`8Yco0RK5J2f=H$Y|v*Cop(0$8Q5-Y@iG@)hAjUa zU;Oof2AWIC_gc2zF#i1rqya}Z0_NxQ9fWuO_PZ#?bXJ6fKbH$Mk{Mg}`w&n!Gv^0> zD+5*89gr|PuW@j@J2-K)$c9U2&sY#1C$)=Ct2ne`cxI&O5OR9-C+XtdJL<54)|ero_Hvu}bzJ%> zgjHlmw@dhm_<(pU?86cz->8Vnl+MoOsj{Ss22bZNvt75FZc8B3t=9Xe0B@HtrUIPS zDhC=1DWi(ZQhdct8hx}5PN@7h@<`-BM7!j>cXa~P^{%>0g?|-&6W*&{6!jZ6g6XdU z>>xbTZB%xr%-2skJG3dNJ(`0j(D-z^<+NCJeAfgIyzWm6#ic@Ve(E^}zX!vbZq9Hi zAI7Y10q@9=n{iR3t$K(;OMqw2%>zT#TlQxUY`e-^Y*etPvwpw;=RaI7%SAlIev4Bz z!>Be;(aAVu^kFE}#<)&$?qSOYeV0&GI>B2d`@4`wj3?=Px5=fM0&mdTU($^%{NDYV zcj|U?-`&vd!hXsp*-;K zodO~s&{HOv8Xy5W#sCwb^cJ{ZyiBg|<3WBY;ogG5$h!9y6>&hG?#sVQeeIxXG2LP@ zny|##cK}v*AuBHduBuYo`Y@-t;9fz+xBzyVs`~kGUhJ(@NI=&U^WL4Cef(Z)OSln zUplJZLP-;Y)@@7k*gomPmMVO=rZwQOhNbR=hwiG)G;x4nRO5mtf`cq|@_+(IhICyf z8*7^}4oRn#2XMku!L<}uqcqYFyqxxJtiLpgTed^RHB459L@ zT&cU5YPJfHTBnz519ev#F#L5Ve!byBQt5Z#2LGWSnLNM>O@JijTT$V4I-xDpitqk_ z$v#FuCR7V{k1M`Rw)Ykmbb;Q-)CAq@clC(?>)<`L40J~YVE5OWUP0eKm^O4B=bvJ@ zjI}zS=?z4~gkpLx7%>*QdZ56WT6(JUfmJAj@(@!Y9X_1cDFo+`VK(^hqZ z@_w`7>IPr<^3;$Sl`EH*(M4**AS%q%`=Sc^<%P%2Cp^cGl6rsu3SFo6Wa5Wypq ziUY3!uMp1j5o@q3P#Pch(rA@7u&r*9dbw3ByxHtx!oiVUl#Q(h@w)x@FMKBWCLb8g zKn0FVJhU+6=m$S^f90k35^?M$O^q zR}iC^O;;SyIyZLxXgPEtE{F*D&$SC*AR;2~KjPxrmF&+mM0uvfWEdSljNfl0c_P;; zmX<2Dy-%dDlTZL5KtF(Ny-8oUEtyf$<^F@vX~?hJN#NUdz)$iZ$jJNYZ=ss=T9{*W zJwYvhj2r3)yCAT~1TWy|GvqZH7dCw9u(8uGk%Zr1$qu)>OGM0gV6S0zYQn+{oAV4dX(GRWXqYkG2?!y5_Jb+CH68-Qm&U( z7}tO=+Y9x=FfW0a>Bd0KjB6muKZ}NX=-1ZIc%cSoszFs-Sc&~M#x2huf~r{s1%TAv zxwW@#Eg22hz_$D8Z2GA<`nHlRS+FA-LQ2X7~9iTw>{tjSg| zdwB4Wr^5W3@NeF778u$ueHHKyQ}6={n|kF-_mcZ5(;|Kqa#D)?i)nA)LStJW_m==f zo!9N%LEng#+_hVxHMzmJbAX>u>Z{o^U+Ki=gE6pen^@rHRl8ZYH0~48m-V+g=WmKE ziRb3##_sJ@-$t(LKiqTBc*|o{`am7Ne2%1RSt!8n{n0y_~d T$#z2bp|RCfv@T^`K>PncQb Date: Thu, 21 Dec 2023 14:54:28 -0600 Subject: [PATCH 20/37] website/blog: fix logo (#7968) * wrong logo * added R link * Optimised images with calibre/image-actions --------- Co-authored-by: Tana Berry Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com> --- .../item.md | 4 ++-- .../tech-stack1.png | Bin 171110 -> 153359 bytes 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md b/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md index b1b7dab31..4f18882e4 100644 --- a/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md +++ b/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/item.md @@ -9,7 +9,7 @@ authors: image_url: https://github.com/rissson.png - name: Rebecca Dodd title: Contributing Writer - url: https://github.com/rebeccadee + url: https://www.thebasementoffice.co.uk image_url: https://github.com/rebeccadee.png tags: - authentik @@ -41,7 +41,7 @@ As the first infrastructure engineer hired to work on authentik, I saw the green For example, we know that ease of maintenance is a primary consideration, as is the stability and probable longevity of the tool, how well the tools integrate, and of course the level of support we were likely to get for each tool. -In this post we share some of what we’re using to build authentik, and the lessons behind those choices. +In this post we share some of what we are using to build authentik, and the lessons behind those choices. ![technology stack for startups](./tech-stack1.png) diff --git a/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/tech-stack1.png b/website/blog/2023-12-21-five-lessons-from-choosing-infrastructure-tooling/tech-stack1.png index 73a51715b5407f8d7a16acba4d6495a21af0cc9e..5010a16f0c63e4827fcceeaf848fd1fded9f62fc 100644 GIT binary patch delta 51878 zcmZ_03p|wR`#=6jVXdewIfX3Mq6m>3+qGMv)5;hLGaZ#flH}}BZP^@4NmO(|>o`*) z#~CG*Lpop_!XlJ$8VtjXng8|7jA}pM-~Tncug_~=A9FwVecjjfzTVgSx}F&*l8npy zA^fR`b}-uAS~AL}^aZ&dRDXMR1$phCS=B2wUr$7e;0yV3C2WckW3mNyiXCTbm@ChW{pJb2@uBCSvVToZqEIBoah;a4vD zi!c1OMB-m@D#QPe45^KF9N$KB>ZB=2Zal0>qhM`P(bgIC`q-C1?^Y`j>w?h&Rh5&@ ztjLFtj>lylUqw(l@bXfw@gh@8mg9Z2(??=vW=D`BI`6Y)urWr%I$p#2%)ITH`5%#c zTB4g&_a%g)vvJ*1`?lGQ=!D#z>j>>ZV>u@Sc-pDjp2mjxQK1A0l1otTTPkTx`OC@I z-L`#WZryT<=)o4e{t)w#+O{PZL9YBgHZZM*D}FYKQa?Wr*SJVp zHxt%4s3=!l8{~301a~AP{n%D?Y)0WPI0Op+(x~=>cuVQIo3h9nHC2T`;!AN{f7f7l zS6@$fn$1kROdN-k5PNJXC4(?2&r|GWX(bVE+mZ~!yxz!Iv=lYrs!4TIm&mNzS2x1E z_}j5_?PT6vZ#IelDOd4})5t*wB>aXLQ5QWGA(K^GZn~ZN30ql)%H^Uv_ny3)Tyh52 zl1@sOdeJMP9s9VJ;}?Z4#myRC=P&k!HrYiUoX1QZPWMpy;(nV$KG!Dh(BDPi_H8lO zxXS;lcn#bWmgU*$96}x{f^2#eR~Ew4QFTlRrZWA}0k!kOKgv8a|892BY%q~dK#+P} zS5$)))8^g#dC%0<}4!asJ$f*2Dg9NF!1W_|eCJ`(&*5qAl4wTPflJZ7Zo znh-ofnhy(@LbhFc`61U;TvL6M@agfjnv`iq>^t4S6q1H3n|19Pdkb3( zmV00^F)?2%_523^SjQ#S3BO=-oFz*N3mv{q9aNy$jGnJ!l)h+Ick!YaEs96>e&t@_s#04{Oi)kQE*#^8uCvPBfQk8QS1e}< z?DeDbqxf|e+}!TTde`)+YZqtGF?IEsxXqLmtBcY6p2z1qMWlWxKB0mjYY^+-f3<&n z?ZYC}@4b<{gKhE5_z6ezxj5m<8U;Fyg9$smD9d42K2yxIts#@!r3-{@T(dxcYdF%mU?PiJrRdrH48WH4fu~7^cs!-4_2X(c4A@(U%X)9hO;P z@kwj&l=-q3DbLIu7kmLt-_KFiR=S{hZJpF}1krNu|8VG$%+uO(cC0I#U>|sE&4S?` zD<4tI32K=PNg!}W-){K_L2!yFGlDd`Ci`RX=Ud|9!o8XzU)q~BeaY#q9dL&6sq zbJI>uSeklqbRS!@=_-64)>HqZT<@GZvFs5uyv*A3FE>utatWvy5Q9 zxkm{C@@2sM!=bma*Hxq!p5-iZJ$Xv&l}`7QMM&Cagf5d9x(_!x64-H3WWg`BiFWyU z;RQ=C8+AX0KQcfj)o^Vy^)u%33pOZTw9YU)0i8dT=G0Tp{+fY znPzXX^iuaj21-@Jg0UA-6xvLy)z;@F%};rr-M0eJidD<;Sn@EzIaha$;$6f0EbH(7{HFdh`)=4V}r#uK3?8kv)U?b+m&YOdQRtRBimm8pYLRz-!ue|!k)AaOeg#nZ2rs=DHOT);y+)&WrH1r#<3|| zRQSYl7b{%r+t;%8bVvtJ>tgo5b;g(Qd7{TYFMMGm_IIW4%m^)iQJV;lSnw)$zwSR9 zx&3e`WdHZiLp5;OR&rL3%$z}<&4VAX!)Xxvx3N-W9)0)ip{cieVAuNWHKiealE}U% z0m;n~`}@0+)nr5$&I7x^-1_Ly02~)?oW#EI^~N!a9)I@4a(E)!WI^OCA+ElKCbc7=@TzRzw`5NuJ8+&bl+^{S6_G^3w!>*C)U7`46Ral zb+VffB%=uZ{z|eOIv<&_6EWY~<+EhhcXll|S{lq17`<2W78p=?>P)ARt@JkPPbb$% z%~b>JAI%GYE&E*@UBBss;mSem_IHPE>KLoc{Ptz|%hxDuBU~~vJ4AI)zvS1{15dWq zr1-sBFvz!^e3HEN^rbfOA;o72@=Mb9R}41hN2S(qMreYjw)nfaIqkp<^nh}kA1 z`Sx{|cU-0+ZvFoiM^z*iP-WsIAh*z95cVz>ceG}D(dE;2aXL7o0h z`DpPXF{EN8z5@2R;1tb6Z>yF$nA2wk(SAvrn6)?fP0*SJJgh|@MZ^Y9la6jDx={QC zN6NCgec4=U;Tpj^WZ(Yf?JR=W418~SFy6^b$SS5GbZ|(0!BaD{ludm#qf?CKw#VJ! z?ql!O#6-fM${!n@4)K6 zW|=qnR)8mAabce#xU3s55=f6b%VT^T^2G_0uBb%ElXSh!24Vt_!gK$%%sH{(aoxC8To72Dfa1NGQ@6>|Z+1*cs&D=cm#Y6K5xi2_EG4VBr z!pDZR8}zS`8!6a`ebZ;{*i6(;HM9Z8p<7VUmt*Pt4cip5hCBQb{wBnPc0Evq*Q{nV z-S+p)`ZVtG2LF4C@!$-eZQBXsrVaVnIGjNtw_)gzD{dxrHSOmegd?WG zPZUBM*paX1)m@is@^=JbaJ;!i4s~F+U~#iW=C407pM?N~?;OW5@n$;Ds&QoXNAm{+ zt^js?3@Kd*q!}hpkH3P9;9gxoy5q`djm{<>DGhd6a$TdLW4uF+V@)N9!*c-J%c8os z%<-Qgh|TwYq|m#@H2JNtBf@I5x(fgMoPoM^vN?CIp)q1Sl{!rO4GxwUuF3u`&a&!c z$yO^MSl%z)K`=zC`p%Fpz&A@I*I6g4p!0J^{Orm12?RN@9A9A{p<*&{C|sif7gE*N z`bLFDNe+?SAU(vHjZd44r9!^7j)y=&u`GD+7-U>!C*~b(V*F-yJHAgg&cFNEQ(O~{ zY-(hfccJS1T}$71dnzMQ1dA-EcZHQ-0gR7dnHDrkS?}XJ_}`84E(HFOrqO(ya||kz z_%w&J|CTK{l;Hfe!Bfpe)BUn>)}OR)X`szV1b+$G@d?Wg8wdGOmR9D<2nZS5S4Rph z=e^h$!0sBk?3#DM+HRzVAVviHxZ@&pE|Z52H1hZmt1U<>HyR2^cg@pX*g?-oTYk4x zwv^K`>r#H>*?D-l;A%Ee#`33F8EQ`>S>xDdu08@jkJ@QR@%r4lMSi)q+%eJH;GVq2IXG}i`=&|emN&?q)R zReirj9U;xW%qI55nLB;{?2*T#;)2c7vWfBb4Z^E~dyXmn2oTIit)KA~Cn;mWM@kiwnWT3G>J9-6)Tv?*CW(>Suh!7-<)&mI|@$w}buySWD@8gFPMSPE=!mjrZ@!>5zv7jUcVA(bTrj(B+b zd!KtqI_@muQ5f*&h8YG;*Lg|DlPcUMYpp<`_v`;3)Qc>hPN>vYk!z20Rn`nej8L{; zyk9N$9XH{3o|H1f2L%u;n-`vG0SO+q-n)ZPOkgKx8&kkd65dx67|d&a%4h=xu0;w% zfm{W_wPX(W`g%9=Fb+zZ6~a!Yw3p)arfqh5qyRID|340JJwu(8uJ>X@IaFoL2)P|9 zJKVG51*2yR$5+dGi4Yxb{KjZ|Hiq2z%`5a!0Y5UpS0K#N);hD>+xFLa5DZL12Q$Xs zTy%-~(OK2G+^LpDcT3b!2kF*Hs-M0W?0VVn58DImS>?a!GZ z$lHv{#?>)DFnnE?7q{xQns<;~mP|(Ow5}GwUY0$SgOdWPb0cB?(2I!uuoKN0yqQY3 zsXg0+0M)W90dve**X3Ketq-@mM*ZU>JN)XT2M+J?~kb%I4`c(d4% z;Y?-$i4|F6JeM`0ty2E;lfSZw2MdcN*S%)dAz1R4JpnXL0J=gZ@64|C;rIp1qr=xu z_gonrKSl8FONg`F3JQYMsvUp&6)zr;y$0AVyivP1_=>NT3?%|5gG;r81l7AQ{SA$B zvpp%--_TV?p|s0!Lu|&G)lpU1M8;TK>iJ8AB}yHgbgf%y?F%mI4&^L|@H)Dpgb!%b z5}s?K=Kwn(?hb|D=qMl=?+lzw84)w7K1>T`9^ufhpk6-1vOK3gf^S*mDxL+}OV^uE z(a8-sq)YkveWRMSpQ6BLG@GSe&Mw*Y8fsvSJXiVqvWZzA4;p-eb?XXrNddb`jhAWL ztiDy{Lt|ccaU1LGlJ}oAKhcRJ2Lv`kK>Nvmbw0=iNVv^uKI^mLwkP7v95MnFJTrTX zv{5cwcXae*bZPIs`eq&cbGV~~Z=FlFHK1@)!@?V^(Bks!K`JiTf5sK?Mv_9Iwlf(|CoKBZTWv)b3l_<-1d@pg?qQ;lo%@L+M!7 z$NoIysmR3a-fh~_g|*{=AwBDBx=ut__HN3lO?=r)8Vmt8bQj{gA09CMD3$fQG5Yph zNmdgAi3d-CQryS`QH`du^-h5`OHuT}jQ17rNq87FNlUHoMb*%*Nmt-S>bn zwDj355tA4;&b8zJaAnBrx>u<+A9n4$^}skQl9mtjEuKS~Z3})zm>E-}EXtQekH>E8 zYsW8#eCM4XS;=@0nX^BByo{n(zSgO&z~0*D3dXitg|E9uJu7A(lehw zw0HQRJ7puhGWfLzGQ9G5TtFxBZ?7KRnXjd8he57 z$J4Ruh>ruwC5z6rp-?D=Eg1$8OX_MKo?j}Y)H<`1btsa0()T1{Xgbw;&Nfs_#sr=- zpIKKx(ibQCL2{dj>g;JvvJE?KD@H6(3Ev&}wW7dS+`lCY1$?105RYVYPS*PZQc_hm zA%vyanv{Dme%9P1cx-wT18q)ecV^pwbvwtya9To7eYfGjR+7Zv==oBLkU?k?$aQ%_R zMqyQrXJ9!8QF5DbxrWh-Kul~vzX?)Ngla-ybcJ28@=@iy&~!6CE$a94(4J?9LM0xS zfgM#L+{If+)abIQp={}GSaJO?pBU+nw6dBv73M#hP)`kLi@X#Fh~gwgwJVv%U4oe4 z{(D5#!+D7*0O?v%_-vaFK+GW&F`@|*tFMd5K}-hY7rq$vQ{l5VLq+s%@k&e)Sal>- zwcO-zTY*Het4I`$;@b9B;qp(V)3^dyJ%v+X*j$1fN7lizM8v3jVO1tbXS{@6sZ2~9 zyaIvY((c<*i8MdlGS(H}fQ}Dd%*N-GtU7eqfA2Y1(}vZKmlY>=raCISy3$;WEq@e8 z`wYS;aQFi<6{mz{(|c#-lFyR2;!g?$4Ny6ux(VD|Si0plqw$NW_p{GVQyy!mDGgPm z9;R}FLTI`L!hRTsnhlp9+b!SOdf>IC%){%biWq9aR0^wx#oMGSRxLy?6g#glsShKI zP@_QF`!ts*;>axTpxtg>LSDgWj-#8tAi70}wEoPVj| zzn#h4%T~};2tT$JIrv#<3NR_4Os{_|B@mRJYkb~;W`%8yK@a1*OuU*4BnDN2HdlhxwOK@5PnMnbM9MPG2FNkFH#IYWPK8XMucp!*Iv5bC-Kw=3OW_gWLpK zn-sH)o3cj+i%9-@wn9*cyup{qE>!)&{S@)!2aJHCx9l5w_w~M=i_NKC<5qa;2jKCC zdko|JXP7OgI0-{I@&j?=R>-Y^OnPzbv<$z*5+&aeBiaggdGbEKqD5*UC!WP5VScUK ztQ>vTzhOk9cks z2I$78&>~q-NwKV-HY8n1~mUm1Mdyd8%ktAZcugtH+N4DXuhY$XF z%E{;QISOz_Qs{2~6IMG~pG{X+LKW~D*$^S(XdvW0PE7_c@)tIkvs$8ivd6x7rhhC* z{$80l@p0(LNDmlwIPd)Y=jLneOR2p}o&vp6^4s`$Y?sRtB`4aokH`jBHrgIsmptB3 zuQRjJp9PYMLO3oIX~_|0%T)(Cs@ni#ter)K`EuU_tO!xvl@QEWSr{Qw3ngTyukuKn zi)eP;vJI{reUAI78lzRdvYwAc$pItuZ8aMY5ZH>hImHG~!cGc~ky9&5J}zWdSpBcn zu}yx8-#S=lc_Zd4eIC+7>ShbB`beC^NIkHLwrC2_7{fA5j~RTfb20Zq6#luZ=X)Ia zl2kcR6cZC0snkJDZI*qpiA;-M6$Iis+Y&A!4r@IoA#zU_Lb>fs7Ll>p4hvdT{RvFGhy@QgvAnu8|omG_y-ZE^N* zx=PKXEvI(|fbzuo)T*>m;d0e|JclP6al&V~{{^0cf1UxkvlycYk(QRp=5v^V(26W0 zMEi`uQ5Q6@IxNAxwW=|b+E*@4{4nA{s#!K1M0?R|ydgHfciRTacKz6whkc4tNp7`0%xX%w*g;1i=x6}q68>-aUSnLmE=D3 zE-7FszF{TTx2>bJU*~k!`Mc|14GBHs7Lb|G6hyTrY9l|4=Q3y{k|0>JWJ_h|kAer*<70!5bB4{W6 z`H*izUAF3n;D$ciyUj{rAcu+(HKi)-z7@pB+K*vm&gR?)lrnxpCIi~--0Dh1A>7cE z6p>S7s7ngl<;KD#2)C>$U19g%9JWoZ_h(C;$xx8?KqQP10oy(>wz-0T9({JA6zo4{ z*4p0~F8uoIr4@F|2Y9l3$1uHHGxu{wTD*czEDkb1&Sx%Rp-8H$7Q| z3(yb~aSW`&e}t;WPnr9YX5|`4KWjt^+dMFlTvJuXWfVLM`|MVB6mj^BY+z!?bTukUMoueO`M3s+)7jWxMxG-6e4*^+>bj!M7PWL#l#9hn-nU7XcR83Zl~XB@w*h?{e4=F z&6kO;^8tO^A6+K+fdez=vdt;CZXP${6pA?Jm-bz=O^`=%UdVLrBsb6yF@Vo?egk<{ zvh|z_AL<*Zqu5pgEtaA;UzL!dWkLH9;PBzP* z#~nka8Kl3)8z~m2kd{x}4+Lkn!M~{oL^oj{YuLK5#or)c@i3fVS6n{69(85+>@1U< zo~wS-PEpbC2PJ$yV4e?J5_?I8oa9qPdf|BcLCYxvmy$g`Pwg))ca#+)`fv(*dGg`1 zdMG!NO2O(x>=O?Oh%ZoT3H1Dgj_y09Kh0S%PpZei?p>Q6Ae)m{`G8TQ@&oYYk>)tp zNykiS&MZ2U?_Ba6$&pkiH$l4U(-kEj#<2Q-7S%ufl^gc^u~?Q()3~d?Xt|2M>ym6b zU9GP<7w%Xe{8TOZT_Vlw4b6ZWin3ZhTe1{%Hl9Xq&Pi1acz;dXEP_O5IcE#JzLmm6A1pta`y8fbI?loP7q6<8{dX&PJMvs$UM9KC$hyZ1ITL40}u?E?3yA=x>SGzhG1C@6R6u6XH-y=ZLtyQd8N>V)Pm&2b+9 z=Q+toSj}B3l*f7McUUtsfAz67 zdHx&bvHXHgssj699azCYi9qZxmbh7oBVUB3Q8qhUwGYG=rLqCW_DYg*?7>=+_v#BV zBcq0kuixB?*dAK!04n7D|J^r4R@%=_ZK}eI4b`X)^xt4QOa9)FpC`xt$Z5T~F|Jo% zL4??bEjnD2jeh^eR|2PBa(j$0`M zat+TOc*O^+$H@Y;l5ts52SM)hc4frw%LHE;D&?^b*I-}$8hz>K&Z5_ES|HlKiyc}J z&&U6dlk#Ci9~jNh+pIwl9SrkA%L8X#xHifW{M;nY^#wi3Q*EAQUPZ@7=}Q4k?lyo? z$LrvTdEOI^oL6(bmkIeh_(C>BKgN0_a-v0A?f!pnNr+fxoRT9Sp5(1jpnNPcR*VEs zH(orMTw}tS)fr?y^6v71O7y+H81Yzig_AjQa0rDc7rL?|%)`AQUBaolbUqy|V&?-M zrg_4o*tgjcpjTQC`zpORuz(f-oJ3n~!arX%9rVh0T^1cj)?&_mN~I^34fu4?%&O7R zI{C2q7u&|JP{$2ig1iIOGaX_poIsCw^X-|p(D(JwRcVTDk(w1qNmz>!@TFj4i1s={ zb)#o=5A*7ex|bNyu&ib!$velR!9zuEPHU%SM|yu;x|87|k7mTP_`55>`r5DpMlY^z z-Q$nXLm_j+vyu)k!GFd=n>`XBbE0-pMd@GAr!YvFuKt zNj6A!uad}-g+dY2ID~HX8n$}F|Mulj@iiEI6SD6!3TQ)^`6u4zv$CFQ%su6HjdZnx zrkqI9CrEX(5d=*_7CU<{FC&%lKDa??udMkZ?I1yk3pkGTe?>Q89rKA(nBttUQ}obV zzK+6Ih&Lrbp3{p7eOx+qe>+g4)z{^lHyl0dJEC>#n!{tcAt`DWBe|wnJcIsQ_aloD zx3Vc$-yQaU#8yPE4mb4u2IIQ~$t}%6mg+mjj|M1pM`oVeqY&i{q-Z+9mpQkc6yaP? zSCh%}m(77nlN5NTl=9lrTb=$vH4FsK>0GZZ$aP7`np+oXyCW^b-(@1~01$3iG4Rh1 zf?{IVNoivfB~YbR&K#xGef%AtYL`n9NGlB+nLZJKqN7?+ujqKP49ng?;PCmjhmzcE*10OLfw4@H zTlOE3oWGYl=8MAvs6!C1?);>)uyzzFJO<@!%)i6*n->ff9K%Ln#KZnQ6z+sC3$u@@ zv!J=ke9>xsahb@V)za0LQdgOB=Bi8F!5OE==(e;#zZ`hXFp|@zPChOTR!5ry5r@O9bK|qWF4AeJgZnt<;bXIJrrW71`rLVH>z7Dp z9WefUaH)4}>Jl-c9Rt%VDv}Km?H~@0CgS)Gyj|!u3r2@}4vLT_j)u8QO0aF>*c}K%jKmq-feE?jrOb)%vtYqCukeq~XXC9)3?l2e3H{?K5k$D1UTSeUGk>U1)d+wB<&cKL7 zz?WK3WvD9eF-Y~5$7-={C9p15$r+$X_8DG(68;61^?4}6Z^ql- zaGu2Y(KOX*g0MHAC*}3=X>n7bWl?47L2H{d!KCIGVjre0{$l1keHJ`zL*k*g1tQjN zeOkBFFo)5_eP&+0ObDb5_!L*dePwUSUN#IvcDK@hhX?MnjQAzhNA+WB~YJ zf+cdWUc&RfDEUbZp;)@27VG^je6U)8BED~tOKimYkV#O;e-gO$3)ftCuGgN^7)ug?rdK1)jQe5yNozMjbdzQb5S|^x9~HvU^iAAaALQnXuWT2~ zN6sRX0%e0(Rf`RCLXAA5%v`hW%hHPDu@`z1GTz0|pA<_@PdR~^OvIwpEBZNIH8fL| z_R}Np6W`$}q`+uuqfaX>%i|QpuZbx6QZ)1q5Zhy%gbrjw!Z+%O!bDkfspue9buRtu zPyTepi3zJVx6nH&sl` z>LvBm_rBHUcK1>TX5XB)H90V=~xc~tK6^; zdR?Pxup8_t8Mssf`XlX7_^R6AB7l}HyEi3Hmv5PR!&QR^y)L2!hWz zehQPk(%hF;3@Dv%Fhp#ZcD&grS+$?ks+0ZQ9v*TmY^irNxqHtNzA9;x)&~+cFn(<-p(*n1d7jcXQ+5-%} znl`PlIWrdS+3MAe%LHs$F(ME)1HPD$Wro;dGf;wPz$%;x$(`x%`L8gziXgR$;pWOl z?0qm#fimwzAhm7~&CIL1egmLgeaR+@?Me1#;g~ctXkyp}VCsqe2vmN{TcyDLdN;rAbZ7CW!yopT zi#4i7|9Kx|=n@K?R>(-mE zi&S1L*1pVP1Ua5KdhB)NnO}c8^Z23U1J@k;A6r+Rvzj7+2W{dVoJmfH*g;fQIy=WoyhZA7stTE^cjDs z;%njDG_1qT#d>#>nE3q9zOmmKk>Hy%v98Qt!-s&q2Fm8_X|&R@yyhm+T<<~1Hw+kH zOuQiQW_v>TR}v;l{yc3tU;1Eh3}9+BwsHRF+ufoI>jNcf`iS=Cd&BVKm35JtSnS!q zoQ!k-P1G$^;@*H%g@g3-l&rSNtGpwvxJ`{_K>{7D^l^s;Gru=gh2l6>MmVassO}iD z3cbr4uDi5Q5MuwUv6c|R9SKI(GB|w!@5V6qkMz9#%K&Ge7LA%Vx3nTpwP{!j)frLA zYk-8MqQCvOYCC4|fKQ%Sqgi$Hlh=w;vJhZqVnjV|ryl(JHR*Jms23F?TKY zl%hA&*Q?4@ZTjaDo9>9T)*d$Y3*2iCQ?dcSz-WxhdxN+XOz}u8FqS() z$AzE3F%b7EkoVy8MIOA#ha$+?8*~D^A?OY@V{t&1PTqy){=irApI#O(bH$2BvnR59Ilc`9GX_b}QOV`>YVZXY#u? z`~30~nD%tmsYa_3$(G&~=YOPf8NVNXQ%TCOoGfb3kJCY|PcE%+QbxVpk((6~IYZDN z`5&7&^A;gHVaM*jt;YbPg!8;Ek2>E z28H1w`?Xs8%~K+BK8)8H#ARE~2K4-;`vCKa+sbHxA(DN1u>+K?`TY8C;U4Wux&5XH zwrn{64u^<7TWchS=MEbuu!$%7C$BQ>i7Qeg>gQ>Cd7)K*Y^fySwujDGejZA^@h_5d zmx1pPB}Z;2;-o6tF&PAlWQ@$f?7*ivIb@qtAIw-Tx4e-xT4jl_*KFHP{NlO<4ffd^ zni3K1;aEVCEExBgp4!PtUK%{`IHS?rmGdT!Q@nAlG2-FRDM%M_T%t}sB~#IkHNO9M zas9dKs4yC}>8}iQ^dgeZSpBIuB2FPGM{jYIhh0jc^X-S!CP9S<-M)bMIyCg_~*Szlww75nWPWPa-=JDA!@cfUG409VzzQG zS`yGR<>}M!=FQG`$_hXnV1VhVh-2b*Vy8St@Bf1#03%4ahNtC$kSdvU0J^NgK|)x* z@nms?l${a!OUnM}LH5w5#Zf%d!y%wO7E`GVcGbAYNDn@n=Mt&b8ig_ndTYBmFH&iC zOMntr6JS2BWYZ%06q3Vllz(>|YB|@C|9VX1OQx>njaq=fWgBWB2Ne7x4F>{T)lvvc z_~2U_0S*uCxdP}v6GBIFEVI*ffM>5p6D$z=xJ1r%QL;YP85I!4>l(PuE`?N{c1*A7 z4y-L=uhGI1q#2V2^BGzdkK_OFb<733jd`Y3-H%L`KF;Kr zpm?ikR>ZNbj}$9aVPd?9-UPxOBN6!T!uE0JdU2_|I?P(tzVo(l|0mCah2?b3dqMJUYU;4M$jQEC$Gx+%lJXIST8<_4lv5xRJ4l+R;iPVsdJf@mFdz; zD@^pbL#;@Tl{$G3JoWpF$*etfdwQ0NVkmLKj7Ehhv7aBOS5a9`j7rn#LNiJI#U3Mp zuS{H)98|ez{^yHVnp}fkOOJDm+4>$&9_1zGaUNSJbok_^W(8-&ri3S&Wkuc zswOBahx-vR88m1A_o$RL^!a~|h&E5Zs3+tFF|wN(QG;p+v+Lc)>=Z1j$bvVjdgs?Zo?O!l;4e#HkjLs$gv>Kgn z&~2y86})5BOkTaMRM+Gu;qb_8vWVfEvNui&XTd6+K);|Pjs9O^%&G}4O5q8c7ik|s zT4Mf-1DVfVe1$nZ^9SYWs>_P{Tqm#1zSWagH(DexCW^Mv&4%N*G5+qnjrN5Ny1G{==b^E@ILEVDkLKJa@P7Cr5w+cLA5QD zW-!O!EJMY%J)WKAra}u&Db{=xyf94Q%UO{+1-ctXBl2V_3XKP~ zXmQIZlGE|ul>rrjK>^{zfF;kq+GuZ}$`j~7O4-x=I9Iv-4 zh2ubi@I+b$B+#6@AQ^qXW=ZoDJrC8qODFK@#M{Cvhu_GgX9Y97x6N+arg`%{PP5VK z6ctsSEeFM1zoF$bi9I=BT_bTE2oDiba?UV_#qw1-^B%DeOl47`p`k1=a zq8grV%(Xd(6jn=k7GOHTe;~l5k&3t1`;%^YRM%CY&9*>Zl~;16=CIZk~X z?Wy{4=k{N7fiu)CtA`ZsrsC$^;K6FXQWpyD$^=8!5MIL+DHsx(iDtkP(C>-F(kYHiXI}=>BoA+oFqWyU9Jo`aFyXB4rVjS;17QNuX@T(5%R`QVHi-@5Q zQusuEzss9p#di~vSA7y*OkP>SATOPz=ytX&dsDki$$g zGw{`klTE!^w;+?XjC&l{$i<)oO)J|@)Rd`cQAGPUVap zV|3oD+0-?fKd$w&usZjAhyo68t#D3_h{mv@$sx7Aek7@;zXvbLmnfJD=hLD5@Z%&* zV6FbIJ@;-atgLA|K8gK?jr}WOY3>F1`!S`wlpz`a>vglq6EIGCz8ONkje*ZnC*Kew zV%<~h^DdOIdXl|8-kFEOzl)Gp)*BdnScDUv1F3{#cGRqIQ0rC;$T2$k9)v_WZcwAl zpaBLs6RXdsZ^kO31eiWZ_`0RmGydkMUydnZW^12f>hd*%6CJ zjaJ(kW=EX^^+VpX#G$A_F(C#jF<=fRTpO>&H(v-%2P(`l|Br#MV8z%N?7+ z-2oj%$uOV$XB#yl=-JF{D5`F)uz9{j2;(YzJcC)Twm~)DGRal6RPYxy$NAL2=)s?S zmBOmfN5{8M1YOxW(I-;O zV8F%r7w+8Bj3GnLL_La)hAqB1h!JJdN?2*BaHSywr1Z_AP|5+imhqPVS#=+g_n4r-(6s9DoBw>5n;kGd_t*4+;N*t#2 zY|%UU*+ox-jXSc5dPjX_>rqTC`{*PW%f8@LdvbBhh=}8}8Uik+qGapBwg-{nJn`7G zN0Gwyk9nqRA(F6)60!JqE;0FS#Q_=>2FE-23gRI4M$Jhx1I4}T1~zltAwucqJQiQk zaIHPDxTQhF5!Xl3f+|%}h#JkPKjJXW3)K#uYRVA=)zfyC#~Xf%fNO)O1=(E=U!XJg zdJ?p$(~;D$BRQk1_MQnE&}*a^%&b5uwn?yCkTilg%_GYlw=6^%QzhKo&yR9Mlzcmk zL=BiO@CZ}I_`-X?@6#s=VT=vF8$K$Myh)$Dns>pEn^ZGdIlGjaJXhZr5jJlz&FDQy zK&w+n>@I`;0H~>e`uQ$y`639tAxk6*JlW54@qp$|Eci-#zRRM?Z?7eWEV~!9>f)7k z(tkkxTa=YB3Ay5a?TPHN9@+A9L%XLc@N+t;j=X*K8}8-@>6x;r7li9nk`P=?%QO zCe@bGdTepi=pRM$fA$-JxA!scmJD|F&L(zGxs}{tz;j^!(7uMyDSzJ2oe#Yk$Cp-E zn4T+pC<<=?S!c2Q!oOzM17%#pLGk^~_id3($3Q3O|6eb_m3%-YkbxqW2T5?z8AK^jo}f?Yz*9 z<})W*%=?5ow(41?ZPq)9oE4&E=W4>;)#nq;`CgoDTi(HryxtvJg?O$QIl!V1wU8R` z&O|F-K&|Z(BT+`%SKhm#N;_;5)HCtR9ajjD_yZuuayzwi@w&ngu+Tpg}DukrzoE42+$ki!*Vk^ zw)K^-jH-eDfg=*rO}&4g(5TaM1d%Noa}KMh#v=n~%SWQ=UfHWeo4xM_Ri`%F?cRYs z?Tj+&cNi;!`I!#*_J)-6(Nq-2ZLeChA@5@6Ox5Gw=R0C`x#iTytkfD_STPHwJ}Ff( z?rjvu+!Qk{`TaDCN$Ie@FRKH8($8q_E;5G1|CKX zU~mUZVc5TQRrj=Jy2U~D=99%m2yqD?yqlsk;>=HlKY0#_kf96Gj~_r;O-~{euA`sM zU%X7Py9m~jsurS2zY>~Yh!w*N2Fi(r zmyf7&+>on4QEu!Kq;6E0yDyxa$BNdYvH0hQZ%xJA|Fx17%bhoz)91uTL;p9t*^h&( zmdNS+y4%(ue8s7`6KElIeJ`myRR)sH1WYPHGQU?Npabv*V1b>pf28(aPzX=5`jcv6 zc}`)&eNkwNd>G{15$TE{3zXYFBmp%rpIKl=a6!FCRu^}sF2(F>SHd;KO?^jMthFPE za(nLRR9iBvt!^%j%-##*k2JN`6<4AYdrc1LpsIcCv_Po*OgYIG(*X>K(f-E$uO)H- z*Y{Tw4l11YIwzo5oMT9fyZ=1;{Mv9B;nT#7L%c~_kG2K0fp@QbxKOfybRE*8=2e1u z-m;u3K~lCNN0mlIGM>96II|uj8|-~KQ| zNqkRd5l{ijaqk9tQq6ktrPP+8Ci9t~fj{*ZX?r0pO$@xLIvH+!!8J#whCOJJw=LRJ z8^+==`j`JJ;66nZYB1;?VJfQz#?%Z_gJ0oL@+t`L{L95IOQKRb$~TK?_vt%I)xO!t zadUBIHP#=RDmbg)#lO9RC`)lEsz!nSA`d^LWr{&NzJr)6#it7x+b*0MeAhhd2^50E zy_$9dFj;_KkS2kOG&wNpZ-boUFS`M&bqucQN!(UY(0YSz;B+sSD?3&8x2!semAYG6 zS|_&r4Z4Yy++lF1Q+6|4rNIEZwI=Gzk+|T2Ki_9;7d+F*5-YU%WEs23wB@%f@ze^cAuCV1fv2zZ`ad_%qDJ?em>-6HW}bEbG3&CjXu=XIIMl#*6yG> zIR*>tk(i1WB|&lql|8|H5q57WLu1$Psy}1 zO7$r-3_H?tV+D&9SYlQ7*Ue^*vR|lMb6t!3-dLer=d0l8{04z9zrm*gqWWE6g1%tAf`a9(?t)AS%#ys$;)lR)xf)LK8Xzc{ z?F`zT?~2)`Tv$`<)}h@Vm<|nZNtkTG5+XWRNfMaW?u$CP88g8_)$^Uk0`ddAjXvFd z+x{{!E+v^ccmZqhNz#>dr@s%$l!#r=NT7N(Vb!*>KL6yBJBVAbj8Ln9RoeUt3Cw92 zC~@=sm;wgBOFdio90zST`g4~+XvxaLny~AuwaW3{zk{{1<*uy ztP=OWtAg^uNjzSWb_E|gjnxDh-(hsxN?{@8nH!)o5&UeaQb_JE+^~QFpLsA&Bd;QL zOT5;X?mfJER<@`*d45GTN{F90(OXJd2?pLc%Io8v-qr%WrflNwAeD*Y&dY?9K$QQpteFRv-eC&RTd2jSIfEL$SH<|m$G*TV2S3=>x#mXiTJEO@tY;YlT(Wmt^L3iz`-Orr6R9%E`ymd)z&s(c+oas6oU zBp??gB9w`x=C#;Y;m@;%=V$?X16VssQV@)W*hOM_+e!(tqDxiP!H9T;uu!kWuU`W^ z;7f4ysog7|vG3dOF5>oIM69#@zFbO$;c0_)PSo}O8<##WnTPYLMJ-Pzh&Gz>e@`t< zMve#b58unNPsc^u?x^m<&GarVgr64lnu70O&0`Pf#>x*@ncpp*l6^>;tjr4y9QYHv z1dUwUSGgE|67QdV-A5lc^4nbTdAedo`)4dqoNnq}aSe*njj@I8%AwGbE@P!Guhf4C zIAs%$VryXh0u;a70;o=7VuTMWfr742|K?Sx(du8l?fr+|JK95!ey}2A+V20y)|%Nxv^}eqA zK5Ew!pKaa&;vO<_WPMPmE_&_gK&0_00sKZ8DGH#>M^CD zI=ocOo9*9mY62~h@mg_dk%dV- zx`yeI83JRj32?t1Z`YYV#+PJjNg&6v+hVkKMW9u|x9K->j4gB^vL}V$3r+ycgf1+@ zM<{~MiIlC=F>_}E-Yo>X=$f-hN2e0tA`mj`6#d#O1M8tYQN?Z05LiXSB<#_N5a^0s zL#Ec#%?9+{&=3Cu^jt1db3gsK@(>`TaH%DL*ydzC&@m5l6r`9_&RIpyt9d`8 z5EDjb4g8Pa+{b9R2cTVv3}&>#qq80CLSm+{Si1fpO9?+`GQAZg9Q3Jjdi|`i2T^Jj ziF|x?mjlP2#8C_Qn{+}se8TJ$Cm(O>55`eN!wv-@-GU7AOTAhA!37uYrZ0{3bv-chr;G#JCF60?;!2#|3oz0i1@T;* zMumP;;M4ZP4)U_2DJbon5mqD8^ian4Jll85bBDDMI&PHdE} zo5ulg7RFffwVlr;P+I za5tH^VDgg8b5jlCK(kRdXf^`9Mo;LCOh~U0h>~>shiNJB4~3EeP8%2=V_;!C2pHXn z1KU?;wX1dvUUJ^G|4pr*gsc~{o@RV$m$h6d1&?-&dQ)%{^GsI;?nr(y{j64q&TB9R z2R;Yx^nsr8A=x!^E)LF!UNei&X?os9Z%{3PT1!^w-{pY5@cQ z?>;;G9rQCQMT7Pa<`RJi=_z7rBjWGqqk{O`fCu_UG5&|C+y7aScV+T(solW`)301l%I;jAPg+YnE-J9B=Se5)xQK4qzf3@ zb`0!(=$8S3BziW(E+Ocz$41c7wfFsV)=hr}LdK22BL1a$GH-<>06q8TZ%D4wyg;`| zh+&fSyQLhtPzgF0+KOq2*#=#Q`!$h8=ZW}pAhP@TZ*HasX5`M`(U@{!sM3p`ir?p6 z{Kt5f7bpYsbbZ2A7tC3I0~^*M>YMI5Z)P(A^JMvVW$SvC^&eByvjnYYj4(*AQZeQQ z93S|HLgoB_ET?$~GpqwCGanLG2VWRPKroD8I8wUEVd-gu(4~m@#bl?PE!pZ<{#Z!@U7#me-FdHi%LrT?g`c0=I-AgQR=L->QYb2hnW)*v7(KxxkVZg3 z)x*uWBLSb;*3W)EdKIYWDx$ZtUH&=ItMbHfsC5Z>M)9uW*rw%bLw5<0gey zu~Guwl~4!VTQWEu{76gw4XdT2vb3~^n1aPad6JX6zoZ#0nIhJ~+bnpg7tl9?h(^n_wnrZoP{L82 z6jZUq;zap8`01>To(1J&rC42(l|&s6?O!wIyfV>onrq!1){Z;s`QqBsh#`(AP5E8t zwq=LmH$q0n{1dZ2SJqnmoMr`g`#G$INTr07-z2wWd#)`#&$jZjbxyx^&4f8t2zm0^ zU7N}kiMzpZI+S$FNDo|nSRp3|zqjWauF^@B1$Axs?pH$ZcZw$(JkH3kmO*2ye#6z# z1svA*Ceu^D(^w(Z;O6>yZ$L--i+!rb$fUxMub7{OhVz3qm>Fc3q8+nyu1Fy(8Okw zj*~-76V}r%C$mLWMW{IK?Q*FpOhuu#nk~J(-oTle>a+Iyi@2f~^8{~O!bwlgrPo#+ zp1AsahleW^-&}CVH=c{Ly<-oJWPXmT3UV=};5tREhdh?kt?W;+dEx4feM`Yt0crm2 z9x}o8SBThtmr(UwDYLTo9m|2T24vGwsFdwhJEn?89~yR)lLhxIurT!!9I|2GxLs@c z0sPVwXwB(HMIUF%wX=%+%;y7pH6!(X>wmp6LIs>J^TR?j<3ju1nm;X|I0vyUw16bl8l z!MGbnq)+-{)|L3e+AOCNoTq@ji@4AE=ctgMlVF!iGiP$D&#cn%U*L^5^qc630}Xit zADRZvOsm`l4(a`A;67Xa@W$L9e|5Z^VhV3Z0^bmPB-pU(EYfel?xV@JEOGz!@{|vgm*%@5I7)|)2D9*DK9v+2S zsxqUjE!%_j0%xQ%1|*IP3YOP0_UIoZERx9-=8F^%NDyI+oW+7d`GXe){F$4cW%*jy z5zr+HZ%%wJX326gYv`q*?q5guFE2EHje+;!8&~!BDRs>vt-ZBJ2ax5Y%{42ozpMg` z8rfeJfxsyqr<_koa+<3c^ao^XBdHSmSMu7vOO?J4xPbl;UBN=H9$R`Wkg zGD0YgEAM8C5E0k9bW2$mTdr*KrSDUwAH2#Ce1r|6Wbiuv*zn(rCS>0~1dj!YG*e(A zzPF8!hwgLSGTeMW^%XIlj5&Ud1H?3_0+Fc zDV1UCdCGs~@_EVqhDZG_eVj=tCE6XgWJ|(7sD4m!g7?lbezCAZXVK=|CdjCxBbBs|Nd2D7GZ%(W6I~ zUoYv7-W4_iss(zKb)0MubYhgP_p}cqxrbnJNMi<1s&MdT3naofh|$ofQqT#-6^JffB`;ucf}syJCySs4A1E7U_{=| z@`gB)iSbZ=E2?28wAnL%$MpC9o`J5;o<${^>a{__Nmtw$5ieL7xug5ls;6{YKmBU0j3ym}^?Rm?3 z3}<^v%>QR5{IK>;v^7wS;r9#Ns%RBH^>Ix;4xp0wTtw{QcTIpucb}d+-z}=4=YqCL z_u@|Zm5-ep3qJc@L%4|qZAJySg?bvSGJqZ7~^|BQ?Xs~_QnM^!u zBxV~~{5xM@&OQ3pGD&yK22?;xa2sK&E1=EzOpUv@t2b`Bq!_AZ-+g(J-!5xbLB~QF ztj^I8SbbQA8}FuVXbd)Hx0;l=S4$9m{ZM4tcau6o*4r^j%Ii z>jQ4d0N-?9>S$MNC#~*yV&?H0!tC&una&vL@)>ayDr?cuG@CtX%O<0$DnxJ8YLA}m znor?;Z^E)ct#ZNL^=fD&e&ZAV-i{K#)Phx##{dhe%ClC&!K&kb1UaMXUNWRR$X%cE z;Ex{J+GUk~-wgYL13KfPC!d4&R3)!Sh0gQt0hWfYO!YnWj=&nx{y}0zVFUf9kII6O z*&Q%mdC5Oxw9?Qm6-GX^>comdbzuCPW89mB1|;s(`u!xatUu>g`l7}tK!bDMx$oVF ztF#l-UPo0AKKcZdwzm+4!uVrT_M7wyYRZ-wy#a^b%Lwcm93<4Fp()ri{-SY#!D@5uV)v^`!=`JO#Cfd!YW$eb zC#Wr48eOw^fdzWgUVrK$MdV>oNH+Uu#U|97tFe~4tKP5bn^#=BKNHUG!3;YS6O`FJG0?Oh15*7x-rOg?AD zsVoVU(WnYGQITD+58806u=~}M&SB?58v#+HjnK_g2Y^!(^RLZ`9Bi8y#5A4YlCCfU z;;uNfM^gHt)sbeenA^Z3r|*9K`21kvmlJC41@&l7DYX=(GcweygFdFEGbFYn5 zqt#s8@`_v17Q5{n?0Kvn-`IE4XMH&sQI3w|3jG7}uDJK{yMllhJTa5~W8@vCbs74{ zy`{IC1%Ck(FgD~quvSm^e+-o}oc}R#+F|&|k=jGYr-0&*Q0gbQpaQfr{pCuWue%%= zEq$IcDj^bJy5a7%9HxSp(v8hf$|v_LP{1Cqtb)G|hq1&PKfa+_iXBPcO1L^J@L^sbG1Pds8jA`LJ zB+_r63E76LT&=u#TG@QLJFbk3^^&+DN6g+kAJu6k>FuG+(iHX-#B8GVjsNTLl#hWm zkeACdV+rhiMEUy9ZcM;!)@ZU~s^73p`T^ms2P+|3K9RKO-l)QVeL_tQOmTqV!}Pwp zGJFNKgiG=Mos)Z5b@#)OjQZrdhU&0(Z&bF%m^(W=?hR^F2bby)cp3#AZKu_T!U6(h z_r{#8!duOp=6AS(%;4Y~o_1b(;GurQ%yPYv=^Kv0WCdj*;tkiL?~~jRy6Q9whsger z8vQNT2JCne1!N;?75zC=@^EAp^mdH^<%J1c?5^vy3-MFAl5;zwsQ zZp(3Tu}QK?>Z0y)DLGf>7s^Pdu6At24)=VkJRGvTGIl0nU-{wFb(#^CzsMW_hQMHe zD1s==a7Q^5SRy1S?6_4dM2sY_!omTDaShB*J;AE8eE2(e$`#{(D*WZ7U_YSj4Fx>b z_^c0Ki6DxBIuP^8*># zKhhJ}y8I(`=n)pR0bTXx(O~phwzw7_*OKzq`gvYx?}it$*$q7PH@yb}IEZw;n0j+#9Se;Ac|A5cS zBmL*g0Z>RiaDKej&mU+rL4h3?z`7d)8TJq6FIFl^pM*yL88IyLFAD_eE;cN+N>RrRi;&=p_Y1mYvY^`=1{;q;1?(Eamxso%`oU;lVkanA>k*^#eD} zZ?>A6BHLKAi3KaE_MY^@ycNF9qGZCd2k)~9$Qh2}Uff79jDRXnGZq!tN8S}<`LzvR z(h1|1jR4Y1@V549YT%w4>!_}rVuB6FZZ5%3gLhv50Pe>&RU5%AsS7`@F05S1y>li! zuQUu%!I0fc=t1J1fi;q#>}2Njrc>o_Hf~ZkD>?Op4<+}N63CGA;Uvfu#PTT~6^h?E z6xT7i-o$SkG;o*z7T{V|YX`(EHAf%LwTWEHD8K=C%-Z!Jl(qcbMi4QQn{Gx|s}%lO zZ^KJ$91(v_My-BQ^)SzMwyEX>LE{=|rsqb}$Dz-WEG+BRCktl;5H5hod)Wr~BFa`o zP26gy`5{Am&n~hA z3mxLF3NMuim;VQy#SFj8#}VI_UJtNthBv|J{$91Jg`%M##Qbr&_xFvw_B1Q`s^+WU zpp0&Y!Yf9l6E>u*RrJ|R`?z{n`S8H-21$Yr>_v2>Qv{lJa@7BJ``-EDqn20toshNO zM>(q7EoSNP&h?&kG~a~^6pyAw49&0A>KY~>ao>#6tl87Y_pKJz6%IkuKc?-Rjz?7P zW1ExLXFUgdTj(xH)8=a`$Ed_{JxWP)NaDO#!L$0)D#Z>NRuUOP$I^aSs9tBiE@rJQ z8@A)e2V%DJHJ@VrAxx1K^N_*7ri9bGV*EMgG*=0 zdRNYSIgLLcOR9Y!tX+n!Z~uN^e>os^1KvUqU=_WF+YvD*3+gGH$U2sti%=C1DE#zo zCfi3n{UXSl^-4F(lYA_7_=HnFm>bqk^aPvrH@<1FSax%An1R7ABQ}^7Fz^Mi=pw(= zq{kchfQH->Jc~q_j*y~~e9z)j@#otif0il3u*{-*ihF$3aS&$+cCS^N@ zNWc8HvSkUbv@ctov+Z44hJat;Mus-Zk|#MNmT!vcoGsi{$)kkc<~AvJXIB=hid1dN zIR?b#hZX1UguG|E=JF=j!B4ki`lEDFX7?vgNBYvz(%5mo3y0YEQlrnaK;d@sADP85Y5V4t}=Z=B6H)U{Q_?TEcqV zKpdpY#FCNS)ReY`I(WNWC#JrbuwG;t|DWq`&xPlIL=N;F>HgH|%by>)Kefz${tuK5H~9@CfWU z1Ea$Y>V^f9#U5XUd7^tPSQ_JNc1_y8qEew73%|~&K0P$q&8w^E5?QDn{j zHS@WZ*X854x4<_Bu_gekfMv&qsJ}O9zwz}5yPmS?!|zQlk->z;k~l6j#CBfw%-Jgn zOB|KAnT0ueWTFSA^Z?*jQ!lv|rJ>lOr(ezL zv&Qhf-lCFFDv{^;YQBa}n>nQ%qWLI;Z4@Kfd7TYC7V1NNfH3N(ylEGGshR->2FwX` z{(J#_MXSqM(*^IR*y*U!%0z7?Yf}cJDh7Ymd1zSSgA?`z{~imm5iNIuZ}0#Xt6}yF zYfdF|!=6usRhOId_e*OXy3tj~bGZs*ZKV31Ei2@pyQ|!i~zW+K(0BlKO!oIiiu^|gy%+Lxzm`qc-m4n}W%H|1!)?yor z`Y^gu}z(jE#q5&nD41i}8;(s78VTY`KQjgZx^!DR9 z<~(Ghm$uUUY+Fs~fphuRj+;e`t$*9t22~}yaiEbYz83~hRL4gIq#CSFe3J@w2(-

3uKONd)%{A$|vS1loEFJ#kE}J+z|YC^WADthWWy99z}Y4cEKq1e*nWNZoB*B z1_OkF_y&^iW%S6edP#-Y8JGRo6FFO+X8^N!XSC`~E#V!*XsMowM*)Dvj*DW|E`etm70^~m^l4?xXUdFkKO zr}^EB!uDH6yd^rXrIUX(Xs2t)B^^`1sx8pA7*%2V*t;zL^W1Y!(CI(IqaqV9Eq*8R zPPXHf`M>kUqj?E)!(U=;=VV^)p0SLItUOHP`#0oblQ&6(CN@WE{^(xOKPB9Seet~< z58O2@H7H{Am+GWdOh-%hV;yaL`E zVJb8RQ^IeG2CtUKi=XrJPm=ZAc1=C~w(?fd1{2ZynV9{3UdvZ1WwAOL{M?gfbCVZB z$>M7(*xkXdM(EmbOkgcR%0J_j#Q?NKMNi9cZFBD*0AU^0^q?C;_l3f(v@hzs5OJzs zsQnsZ|2(j>^n?m{bDiVibr(fcK`<*4i?p%@4D(zy(c#3U{Ksw0b{bebZ#f_ey-X`F z>YQ;*HK{*EL z_>ugk&djBo%3;?N(TkaQ)m2g%Z-0y(P$_AG{K8OoitFl=kTqv1!b!NUqhWy1dIng{P7SunADe}(1Dg$18V0D9ngV_q)@8%2a?-2(4x zf_P2Sw7BETjNc`kKRM@~&HDTaX3s^I4eLO4#}zNODd+2TAcL-8Bt zDp922oU%x_+=JQa`&s+_t}F8Q43SvjtQ>e@ZJt+My)It%5h)*56Mg+!An%`jl~>4F z+>$>cofP}Nzx1gj+(ZHX0cO?J(gQkLC^(I7@y8eSt5>3IrjuWq91)#xu=DO+yTQ;^ zlQq{>n=2Yeu?41+go`C%c%KQ2VDnJzZ+-O#O;{SgD{NL?Bt>&ey6Us;VbClen^yBE zssP>s{WV!@&_=tMpUXMXmYa;{69vKPHY)@iUuWg7Z&D8(xL*m#P8OHGAAD3L=3hB8 zvQTq0hO7fDe7u+ZH}f|9y*$wSQn1*+K_@bW*l|Wx%=phSX_c;X*f^61KP~=kF4Q41 zTR#8ssDDc=%tJ8P%W-EUq7lVA1JG4Cn^pQItuUHIle zvXSqm#I!sre&qGI1bIpH*AOn{<8}V2^hkeP%$pH#W~ahm`6nF#?{flJ;)wF?+MQ1^ z0j4Z4qC!GnI+R_oRFdTW+PYs;c8=mRPv&nlx2LXzzM7fKYl_Kd-4t`||E8p8EMX5E zMAQJ_cl2dE%8m^g3Q_&QLUHM^fuZ01r?j&%n)Ne@E~k>Xv!)bI^$&QvH2R3TIkGvH z&G3PO7R=h#z~H=UC5mtkQ0XiD(lr5Bc}B~ympo}O`qBn2W zeEhtsq*1PyW}K(vn8f1OPjPzzc1?) zQ=C&YJLE7XaKTcn!V3?ueFPSoJ^UYlP~Yi(7TsfR*5)x>)zVh}od10geZ;WD<=~Ky zqONncmvXR6K1U>!kA*+0ZP){V`>-GB8Le{uZ@`VoaJyFgDgWSgQs(tUAMw4tg?;(T zbYJ#Ki(fGL&ET)nW6Ji|M<9oYk-11w)vMuU-PtT;MF6_Mo2KDZ7s+%HwhE42`}Tqa zCL%K{XFts`Q_4Otfva)l;!A;9&nF;Jh2xMOZ`!E_;aUY+b}}&N=H|Ho9c?of&2#*P zeD_b10h^KFi-2UtQ`T%g3dl<8D)jrS0xxF!FNG0C!dF>z2jI1#iA5mleu?Z2kl+l&*dU!fGDE1DB2oQbxJD zzYla7^|Up7eyflvl_KYvo|cDCJfSDU(_(%FCNe<|0*PsyI6*v;mcTpKVz=fV#C??P zNX)VHxqI~GTD|{zf{5hk_C+_73iIwq{%_vF&0->2AxPCjNVQUAH2;1Ebl zj~_p-=u;YrZ~t(4(dw}3TW^cgm$v2WZ(kn{R5u@s-12DA*$suq#0mBqPJGa~<=mlD z@T{z;wSjgq=*}yL3w-Rj^Z_VV=~*M?7oev*NWxp#B+~^(jML4FTl;5%IVXxmHr9s4 z%zPgnxiq)E!R{yTI@xIkpkWv^cdN2&HQ=j!srK5=5Xd0; zJl)-}Np8`Rz?2>kuBe#F&FB3^G}sih|Kh5DZ)M2sd;3?sn}G9lDI&lBQ%wOyo%@j< zQ%;Uf&HW3|%6?OqIAH_eN9k_(#Ef=z;wiSQGVw$?9+|zlHtgYF><4^H2<*GPTn6<2 zs&W2Us&7vAyzbEV>UYon7=l5sQ^@U&uqv_vHqLo9L1-pu_Vf7d&ZessG>fA_J~Nl_ zI{{;UU64&~5TueIiay9@g+QQjULCU2lG$sl>YY?i;oks=CHMpU^HRNeqgjeDezawW zSY!L_XQ`(~M4)PJc5IGFiaU%HnCL04TT3hFjGo@@jc|41uQ8%adtX+*>&g)THL6Bp zk=Cf92gd#+$LAD9eRRLDn!Mj88j2Ux1Nh%;kurK^FI9eZ z?7lP@u%#(^XgVBSzqzE9|5?LIQw+)bc8yV0$VDb+mW3eaui)PLtAM}sx*p&)+SP6#S;!1 z>Wt71&v*OiH=6%Jr6%mvjGS6>(=}#_&-FsVoWcv&LGQQww>@ns?Voa45IVu0BLv5n ze-cp7&#;I!=-5ZTZ_q^r1NY1($|h-&a7xLp1EU_Qy(Dlq|5WBz!~6O zH5a`vCB#Qh_}?8qwRe1;Bfxi6l7>t8{tPh^4thO^T6ycSyk&4ps^@i4+nu#vLx)X! z<81w=Yo($xr9eVMS9W$>o@j`v{&Drr)q`>0#YVHSR=zknPT)nhm&Y+mxpXBxKH9pA zq{pKR9JYtw=kh=hV=HJ$_1uwIu>AB-f*$}*5f``$ZZ(s68ZOh~30fE9-%P~*fyno4 zfd7kLt5+O=INk^W&L$l?W2E#J%EdNtXWgt{Ec$!K1;x3YkHZ&!7q$5V1~d0%RF8MR z@`yS>n#x91Gv4$%Gk7>Gw`P=IZr~zF8jnm`J$-w#zM+s6gi&n*4_$-c-#rlCv6K4( z*D>jd-6!jlav)Qe-XxzL@I-Ik^_%q~GVKw|HYZVC!FRe8P&sn`JC33q+--ffca|2E z6#TUs1t!UQ$JDjO(u-Rg#)3J~huePx-W$Mc1}FOt@W#N{ukq-JabnNA3_PFCzvc8{ z!%n*Q1;3#x=Lm~fh0;OFR$K5)zrN+w48DY)2ccWepVtG97t|a}0ncn!()M{;Uxx7f z!wZ2~(LM*4)b634c#u2LKXpmXR*slx3_feCj<#rkF!pRC;Oa~oYn(mD zLt++^|-lG=lCT1p{+r9Jf+E7VA{*IXL3v1#s7pA z14sc0txkoN*v#6u<1R|IAvXKw^FEE0{53N>;iv-+9!;)cth=XI1_9hqYb4mL$2y7m z5!~z}&Lkk`+291O$O~0cPu0DhJMJp4OS!76sMdiU7m{g{8*70@X|@NO0rUPS8#e>x zv#MCGCoD}BtMu-zH)Rgz5PXO3FSZ$x-$YzYc{v$`#3&?A?J1Bi>z}7TO%1rI~6fAL;@01IM}jIVNrJlU-B8EG+$D{nzTgkz4=-Mj1z?Po-qm< zlCbJ8gLKl*J&z!}!6XVeo##oHb1Jj@WD<{o#w6@Z!f16A#6v*;v83amN4~^b{SF+5 zS}_4%g{2cLbwJLg0dg*S6IZxP1^-m}B<$T*ZIt}f@-+^@GEIu8dw9-AW4YaY6_YdI}fZTp{+0U73 ziwVfKl(;c%C<3lzNtcYzny9!7s-u6!86?cya&~`X!1k=Q6{7%N*&Ul4H9>;BfH|tr z6-5_y&Z{=e{nqwKKolx1u-f}5TCUfi0b-j-4*(>g)9LII5c$}4eM&KD5^0~D|Dzg! zJWl`q;T=(m_Mkdj5 z!s5He{L1TVi$zIv|MC`9w<0(iyH^(j)_=Q>#I5a#;u@Ya3TgwOIbt12f?V`LG1aEpB*#be}d!`c6T8EpIofn+#sqR zjL-IIcG!}r0ifMpE0)s9b!Z3N9l9z=Jm_eqFgtEJzcRb|FHubYbg>OTRz!dr8mSou zTS0>J@ru-c0>CA<$Eks5!HtFquw*S0s{dRbVNA3ge;~*ungBWuW@b6gyL3=DuXk(h zKzbJqE|hDsa1f_}dcai$`l4dX9~R1@tJ-oT$0-|Zk3m?7r72Ya%sHK&!!ZzL*{ZI` zz-Il18{;`nzlj^j1Va6%VTepw9=B7L7;JV*k z-Q&d|K%1s;t?w11^*pw%4Ik!WBx~>@0&1(CU$*V@4|cyKx~H65cc-L3px@e_Ttar+%+H0!piaR z-(heMI_W{p=p0ykOaM2a^%1v7pSWW)YnQ4LEeAMT2%5!^@4~|?FBX}44n%%R*yT=k ze=taG^xF~=aL=iaL1umQ^(rDu3u*uW2oX`SMD8l>9rOYUP!V>V18>zJ-gAZErUXyN z$W7u#@oWQbyv~xG3#8f~oVFpB<>{_+W@4R#I&M-59?ljjbnBK)==u&)X?@h)*C#;< z4!FZC{^0#z?fj0NNCUe5{8M=%tneYX7kbXHaHLLk7X!dMoQOKkNMlr9?3wau-K^Iz zla^3kv9l^iN#~oUp%|ZBQKNgJ8({*9Td_%X18P3utdG1tv>#RyPwtM}87aus0lf8pC#{(95t|NOqHbf$vIa@{C=%V_g@n2s2BSY82<0$f zc$IW>yL$c&7@n*4oHS^Fq5s~R_}O*T z1I$7c=hpMAeZ!0un`9Pk1T;`c!iq?DOLij?lU62cXNzk}{x{qjcX$HQc=-oTUTWSV ziYsexds060o!>Ot0JUM#%Ajb~ePAUD*61WQN%-OqbFQ{76oY2>#A6`IGem>{11=;_ z1i+D+b{f{+t(}!ww1cqtQlcth*#}=s137?U@n!3x@8DX1x;2bZ&`p4cn85uU3&_?x zD?u;Iq*Vks@RgozYi+~9Ln-G^J4K|SJV2A|q=x$C&SdT3-e7n?$GTlMOTdm6&4za5qh zyvRF&&_1@=4!Ff%WZSjv+=+O@GrRu4mWHvFmt>GcR_H+w6F!sRR6s=z4uE3=6it-NVC7s z6lcec^HeFW%td8D4m8TkP7y77#s=IpwV`t`zs|MVE)o5_b5?@qvt_TV(&&ZWZKe@W zxpm@^nQ9E?#=Bn&zs|dd1h_$Gy(g_=S#VTM*ast4Q{g^iVmz*K2voMs&Dfp1%kXaa zW>C2{Hv>rTNWj4h$nrlvFfxv*d3U`4$31DTBXR7xrkpyDWBl)-*!0dxA=2JT{_nQCeSP2_cb1}X0~|O7YjG&e@!+$&6px|;v?YI(Nddtw0s!k@O?d5=Xs2dwBKSYo{O})73LdB;b5>`sewyq!j z(cv2XZW9eA$K*U6Lmf0Pfqe@RM0dXX`UGB}_gSalpqH>awSfOv!>%D_*8rO6R%5+t z3B{v%l*=&pGti*|0<%^}_7|(>n%0^L`zU|KSPEem8*X08xQ73EtGvj#dWARAWNoE} z!NC!ySE4u*P1f!hPB}%)CKuBeu`_JLNljDK&Fgfp0#M?1abKvlnu|q4AG9bc~iOmq$;$s&E3NW3OL1QlZEF9~q&lQL$pjBz*EQ3GWDKSD4g?Ke{NJcA(67x0C}$UwSuV97YE~zQ1AJ z4UJz#Rs^lve@qJMotA%Q_6#tN{#3aK-1ImBQhL>NoMEv67u$(iE+U}XQ>pTPZXY=9 zf$eFO(n#$yf()jJj%tp-@6XT3V~g-6baqZ%NK_}9R`i0>!vt$IL4Y}>uOZ#pw;Lq3 z)e@@8Pg?@6#(*XxFAYsl+`gz=g_3+Woz`Ap?wY_NrIOnbBI(ew3QGM1*a!gYMhA8? zdD=OKX<8g3;X7`5D5u2w3Q$c*B)p`jk@_zAgWBaFSX*{hGJ1j~t#&N-ld2W#!z~DQJ z15w3CZYN+cz%~tYP<||8MlI$J#QhCeTd28D(eP#l^VuF3D4fc~4Pw;N=SQMk54qi- zHiD8of}=h?@BWy-2AcVSMtebE<5i+W!oBf1f5I#Cbja{0$wNbCP?#sdlha_S);-WwVD53V{Ig!~!x1Rsy62y# z35h;A87&8zUm{+BA}u=(#|(K;TQ#f6bOm6K*6u9Eoa{6VG>nG{$o|WAu0{Xgb59Jm zk=99g`G1Y@=nECQM)r`|*k3G5LZ3OKZ?D6Ihj91=qKP@G&~F@Q9h9)oWxY^GyFcXe}yiosBW+|*)kQM)R1qgt0eLzNs`)IQ~&NDg#NQ`4%AKSNu^c?aFCY13E z@j@rn^DA=!FbT z^&Y6qIp|o^oKua83Eviq5_FR-S*GSl=NxFuifbK)aA-WA360IZiUU*x?fz3UpQunX zefj0LCaO0>->gO|Zu9*TTiZxa+?ZL6JxkLH??~a&$$^?$si*9s=x)&60QwK}_3(+* zC)1grW1jgru)i}iLc71<{4iznfvhHJd#_mw)vOZLHwyFyZN#3SN5m+SM1us4txJ~m zQ^Wb%khE>swqn`08y^sjOJS0o`Ujs2z1UpKE4H)zLVAL@I73A(DgfBh zi24#TR+-C$THV$F@0*lN?J2xG1_=9xNTY}odSJKxoF#H z1?P2Jrn?tsXMa^Pji#(vo;<{{s zG51`>`6#p)fH=ysK1GWXjA|utQNS-OfDJ>r#QV{6x zPxcn}{9!$}ZopKH)QkRLFcRAlXnW_38IqHH2IL!X4dbx#`=*Q-X4{%g_TM8MR)WyM z#xBsUm=m;}bf*XZ))V^?Dz}O2Q{7O~kRTZ8ASNJ&K|>_Kj+pmyq2s%*K{Yia&zWc; zL8~jmp{cx8#Ir2v=4@Fx`lydmPXmw(8CkEcr9XyJvsphKx(&$n+)bm0{WJVcsooZ4 zI#7`;lh5O*Kg}8fZ8Q>hic9-%G^(&zBfbT)cxu|6s8c;6Uf*YWDz$&VrMV}0jT3hJ zp>PY6(I-|D{+QjWH*eH^YhC-O@E)b|Ty+1Hy&JZ^bFllydAHiGhFqQjg#mqMa8n?X zL!k1rIAPHlVx$kYsQQY%+i$WQY~>O&p@ZzPlxFIg99ezkpK^RM_mVShuf?XA@Hg7W2`F1eWztnUVcIl=sy-uhD#0;!%t zar?E5L~(PID%BI9@41m!rovOH6O0S8G92<(MRXFR^f|-@z>wT_J0&+g;DeLqQORIr z74L}Iu*H3f;(X}w-uqoI$*$Eb_#pNRh>i}RGyT2$)q#-S%>5TaMQ`z_o8vKjBJLSh zzU93q>1y*91*zDj?Jry`02|J zxy?j1$Pn+*a0(P!p<;zYM=SgraNVV{SgRv`rj%=y>Er%%LIa-p;*cjtMW(a)IEWf-{Sv0H7+Hli9Cn^MJzShtD>FITG1dKLc6_)H z>=!5ZzFNxE4d*zkQ2d*R?PiD-fSr-J|^cmNrF!9J$Ci+u9kXw`e^Ly zf*;#KT>Jeslu5hMt#FwqG4&YxA*idW<;&g%fGzkrSqEKJAaD1(Z0c?8^%Qyzye^B4fDJ>H%Js8jDJYE^CW2S4WZRjK$eO+ z?D(zCaMEhnjylQg+0|;wh8?7WAh}s6J>dFz{@JdSoX-yj1h`FAvhNrbL}nGuK%^tV zmR{1?E!KzVDw+Kp*#xPoYFvdjf+afn&P4g9Rn?|YTLDmG2DlKWlnh&YaRWYz5n#E} z12QU3C6L{jkO%4ytR{zj=WYxB zxcB5DR0i)cq9gknIBBb5HyI;T#h>5-@Mvvm1)SN7d7ct+b4;taF%dNNHyC$T!p=a8 zCH)?4snM*T@+;Y75^IhWes+yYn6BN~E?DoIM_{5&3`7c9(gn#!7HdJjOcp7k%9=V! zs+0hI>TCI8{?IJD+$-6RDQp$srsxlPaDEw|={*Z7xbS~>R=(L73pq0JVvac~t&a>l zL)}x^ry`rf9-5g!CiP)YosRe^&pC|XmBSK$scuvG_q_($to!-*AUo;$EQT*qE_;~8 ziuA*iB*+`+wh1;gJaR0eqpdd)xpEGXRq?~z^-2{PVulNbDXAG!k#F)Za!yekI|N*YDa^BeDFC^eAANOSJVyvau(bIQ|8RLAO(R32_86VXf@Z zbW_tuiEf_tF=2r@eE^C;pxnV-1zK8=3Oa(5z-oT=jS;?`um4D-C-ocP;6?l@O<8V! z!@!~pXA2Z>@Awi9lqn$O*WHK!_k_+l8 z4=g#Wefu@YdYiBbbSpQy46Tlc|1~%CH&7NKNx0_H7+W`!{!oG(Z(IQ+YA(wouA~yK z0amqwJP>*?E3)!9sm`h~p|#b7hXW|C#>K6mySS79EAQi)RdTJB_rSTg%AlbdA7y?E zBKXeb9dGMes= z9-h|EuiR@a=ju%0WVZ&={bVaV);y4Avk&YyMXM^oHoIGW1+>t3w+b0zALxOezpRd$ zxbFOiPfT~`{{=dM_ts_eI-%i`!K%4RI-%m6pP#kVYQ%2s#Z@aqCXj=D8!pDkN=^L& z=usCXWD3cu&_cQaDgrXOjcl@ja?B67^@`4iLOic4hVj zm&UIE{f&GWnta%~I-h7EP(sXA%9xz=9}%RzLoMp{LJrj2HIR9+W$sv-tQ44wRXqe+ zrh~-apb7wCv>Lz-TmX2-F7N=4;P?!zIpj_gh22EV5k7(f>;tFxC`W?^o2Fp7=_4;A zJ3!SOUC2*;#DMT7w`)jq{;Ec?7WQzLWLM6zrhmXLkSZD=oh)=ar1KN}Y^L|Pvt$Vs z@l^#x0wBU{y$=inbL`cD(jK*i6Q3stGP4ZPkQ3}3l)WzmgcOg1O?uoC0kv`Mq)n4n z=*3_4r3_pgUHma0T7^5w>sbT&~7Q}xFXuPC< z>Xr1=r4!uQB$G{8n!bi+$^DheF<82)AfWxA?e5UQDA`a~b4_$s{IP>K-DIoGsEeC5?bbpi(Tym3j3QlobY=IV z+a)_$id3RxUn9bhBqEoa8DuG2N%mzJvwY7xGt}??{$<|heV^x?=RD_}=W{-XciavV zwz3T6olCT7ztD@x+w!&09mhiTj4Wzp`SK6d4GzmyG)MB3Bsd?kI$?WiJZpQI*ss-aQNrlH$cdMb`tE($5>7*iz^plgosUIwA7AEAgYYc zRm&8HdgmN2LJi`!`rc50Swi!Pvc@TxJ-Z!W&|gVC*boz?AK>$GM<*0%Wz&mugQWu8 z+Z$7RCwB7Jd<}uD{ab&DEk(-Q2O|GIAIqVo#<>!I{^|n0h2d1kJA|W@&Xp{bZE7ck zzigV_dtig1tRJ?!Y;b+zKYpA7h;D9}Q~+%5UfN&i;h#S7<}G6yrf8*^1vf zmPLLz)dx_g`l_`%*oY%h2H^*Ey1DL3K6t+D6UEu``Wne?t8A0jbgQpHs_kw;2?lJ`7Rar&Vi6bm6vJ#e3%!cUH0=3-vOnqS;9>B3*1wkZwIYriYVLZ}M02yfH?m z>h`5!rf*(H5y~OGvN;jBj(e|VLtkqR#K`giSRnRbgTj3grA{9b;2tKHUd%%^KVW%; zA%#DVgKKYqJ|ng3AaIv#Q`cxo!A>1pm&~s==ST~y%t5>cSg<{2+O(GGZrftS_cTeH z#?`c|^73&Nl!$bf)zP2;fEx;1g3fyPNEzND(r&TY)~P(deuD%JR$^SG1WbReHFzhT zsgxPYs5eBKmv_C*Sqt~39w-ube-6foI+M68j7sU^Ls?q&(mnDaolDbZY4cOai_1Ji zy>)|4_8}nYS4cNR(E>z5fbQ)Xoj8*ssa8h^H1Njq*FY6Lx;jTjA+^=_uVlnh z7!Oynd!GDJrL!63WyGtO+9~@>pnLZ+gZ*KO6jx?0fa8jE;H{g>rDcG6w%EkA5BL)h z)H&fdCc%y96p1xVOmI zM83S7=zO9Afc5_DOj-7NGa2Uh^Xs_(gul<3bGgl6vjASfu$vwduW&+@u?ncLY zK+T#HluEBIg}epMpx5+fl*9{3G1+}x6ueCcLDwl#wjQw5E`MGI3_)hZa$2!qzEnU}uA}gk z-^m*wL3*wy^V8a~&69!h$+yasl5)_lI6sw=Z-ql6Vrs2{nkDU(nHG!OP1vO3XC5W#YIP4^3F zRU!Iq?oUsFcX;bQ3Cbr9+V6q=bPX?sXdsuFm9gr3f6A(sU~J)n&b;FL9^>7u0CrBp zoEqk~g1j*GW6Wdl5NyV08SWiELONDDR>O~Q+cguo^WT2m(FSchJRyk>$Xi1Kn5fUHCeu&~O zSZ)$C9kL7mGzs#o0>+cl2!|t}82~1~`E5i$mUhO0euqG==F+iJoBAF)nepcoaQ7##-C@aYCMuo(|pu;cSTg5g(I9%bnDR(;$EN{Kyzy{Xt8gW63Gr2^3B* zQwhbpvWYt^@PNrc`AuY!%8QRRl%iBs!}7zhqcrVWaCt4Poy|@%@;AP|mIywg$t9E< z0e}^o&(VW|5^Em6Ht68gKl%)b9XxIyLH#ye z@Z0!xMN*9u_)J7xMw1fCFoNVvF;TGODD6ki?++}dC-?2#j}+>6`ACGiOmLv?H^PDm zC_;O9zk!=z?=V`&ZO{NP@ec0!GmoR_Lu7}z9>7?1d zHC;(6Dv#D0?Vn9tCv8Xv=A`eT2(stL0s6t37ACz2gbMTWpBOHa&i-i?t;cwm^{k93 zvHP0C$Lsc5Jkqf+wHF-Ru-i=OvVP!G(+^=48%^|kA3ypf8ne;nu=MdzeVcPaEl$;N9J&jUULrWJtzcrXKj>@xFZTXqrwdGJ8mBF#7$$>tB56 zUv`^hIau-5gt}t{5p1vO$GO=UkpOKYf_T;9uCKmEnOevDjwxU4y7|bYHmkk1zqfH~ zly6)PlGzlY5V;6U_q()+1RH4a&~W@I+2r(kt9nIDSi@0Enlk3epyoUzA84?mD#_(C*DMr_u z(SAWnP`)i);?_+`Oixr<>$Cii3~!A{z|pdYw8iBr1hJUumy3lir7d;&di_-cu2BZH zp$%e2c098Fxm)DpW<}FO1adxVWzQCe#~)QX-mB+ImE4ak-d~EncO=PxbWt}6FfuNAyu<|A@t@$MXD>tsCUi2U_5)MK)-uPwV8vJrrO%D`E1Yd zj1GD2o6hbxK73&m0hK?%7hvJiKWwQL2^dB&BU5K!(Vuh&s{vy`>+E@6f;dRGRs`-r zVx_y?UXH3@Oc@BYD*WRQyGr^Nm*1~|=-T}brLQTV!V39o^VX!tk*WvC5d`Ekv8JhK z;KS*BAElNPY0@}<$o!R3B%b`+q%?*{-(7Q#(H7<8qQe~H=-QoKWNiL4W7MkD!`PDS zK|~(F+t*te*lXbt`aF*o-r!bPTC(SmCDIXDb3`!XvViPlN9N-8*Bafujo+|?_4(z` zqQ1m6UA+4EGy0jFm|f5xu&i=_Jm^Jt`H2EO-48zNizg?(?v5obET#Bg@8`vR93Qt( zuFfx;E7ZDo8b1CIZ}q@*&7X6xPAFV-!LTNeZi6$Ofj*S8tV7W5_~xXhkz z(wi}C{_}nxP`XBFt)O1i0I4`sk#A%ZXnAc8jG^^7hGIb4%M{OMYiecX15{sH`_!mj zlTmk&rIAl#pQ%yQDh*J4=NWY=oWS;|-@@JVIVnmqVt8K4mxMyNJB> z>PdsK(M3BKvIYTwV-d6~xT$!K@`oEE!KijGHs6a!p{<89_Oj!-{Q4X4F1zUUmTf)q z^ggvY%3QBZRqOlv-~8yo50w{UOL7kvD7I%(wsy|)-W>>#!C45`$C!w?AGM&i4j@7d z55tROZ_C1h5!Wb~o!vpX=ijcPM9I-()8LbW{A1HKJZ2q>$qT8*mY$mh8?>+Ai6mGq zY>>4q6ROIagp54n`c#s(-3@XY=}G%Axinn^8w8vSgAz^|ihqZ39U^3iLmS!Oq6p5Y znBLMb&6LC(Xe8Pf6%uY;;7R>d>*zx8w6V##CFl2j4LLV2*U#;7A95DY_)MncBX-oW zH*JX|Lm))vtrZ7VXUjl45;C%l6ju8n1Jf|;2a4ZZdssiPD}x<}PGXq@Jo0$Lb5l`E z7TGdv!P=pzGtzodwtxFUlVnDbe?!B*=jS{fda zUaB_twh)vjBNlM|Q>2#{;ED#=vC(cFCwh%?;Vp)ebkR$q8(0MIPILw%Vz^vCZ6X0l=MY8Y7J*@U#dtFr zuvJ_)mr?_-6sSg4Pn?aKt4PG6KTfB9D@n3OTkgDVqa+u3u}lW*fvU|T!j2vl*P92i zs4a(l<}BJ$=4~5k4BvORi7m+38(-8vzX_zLwpWenM}_vhL7GTlR**|h<4LXM;_#r^ zszHQJLS#1{iEB{4d$XVg>zixoJ|!{QWpq^wy4<5ZVoaDP1#^X-6#hc2x<4;!CmaBzGsRjj zp-RL@yIWW03%a_f>{!NtInVlIn_ns%ZO3muGpZ;{tUMA~IiQADeYKxH`zF;`Hf3qM zPWNr)Z9HtL6A2e0a49A1b|e?#2Wq5wUsqH2jpf5dx}ivDeK$gUQ`mXR^^jn&nf$j= zM31`v@#0{;r~+L?pSmRCsSTn;r@1+9UfwWu{WkFTSlSS~qKI%E`$T$fxH$wG#IXs- zK~PxdOhdK7pUzVDQ?N13Rp}J~bpcLlbXv$tlarP4IK8LdOgZ%3&Eg)zAKSdr6#x|T zhCl5c+TBIzWxu_w=k=_jGB@IiRK+t@k0xyg+J3&wwgr@~K2kY%Ma76uNRp4Jlgpe+WWp4oT|9fV1cnno|RFCHu-~H!3-Ny$b z2o!YZFxC`sx#*%tA6o=q5Z{${Hrcawz(7nl&gFN*Tf{t@AAI-mk2|{bAJPz+m>sN* zVyYVTap(DXdiiYd*iS!u3Py`{yw_|aH|*4^R5I-H+1EA|xYGP2lRx(&Xc(#`ssKT> zFR4lLX^j(wks5f3OibJkfvnbPOvyw1#es#Y6n+>M|WvfZH(e<@YrB%5P z(Cwr|cdYc&Fqmu$AC&i+6T@I4YtpZJ?`!*t9IYPMurgNM)C@_x0k89E%AvCQMc>B$ z$DA1c@eMf)#kVw4RVFO_p@Z$q-zrY5EU$rb?t9xRR6>h7kKVi**jbmqw7`#f^fuUv zcDR5>k_*cG?qJoM`MEDibM+bBdbONNH`foJ6Jt%Nhb#K+n?1~0_V*`nV&cYyzn^x} zt8BZYWARdnxO{#^RP8lpG^deSFA4p!_zqtg?!p-7jY9GZq7iYgay4-$KcTGg+M2p2 J^Nw2u{SOC7fI9#H delta 69794 zcmZ^~XH-+$_ca_qz(TQrBGs-mY0{gDiZoF=QUW3%LO`UKa8NFwAfWUjpwbBtYUl){ z3DR32^xiw61;~36@Lqra@w{W?e!!gUv-T=;%{BMFL0KoJicWgwlX1HNowvAu3q7ko zurbZiN@;zYX(y2rG${D$>siST_Jr8LR57D(u&Xbq6CQ!;arvl_m8ChCi>hh6lhg<1eJX}#4NrQultJheWVcaEW64|HGOFY3HB5F+HmAaii% z(zL@>h2U!n!BzzDLk>v|C*!wy8n$B%$I1AT2fr;GwH!6MIvzC@U*{8Zo2zf6D=RY% z|D;J@HZL(Aqb}rQ|7%)p+x?M83jZB*xkzxKYYMshN>~_gTs}F334nyqcq*u!p{`)} zc@jUru zX=?L^rmoG3e+VnhW5E^82@#s&)a)+^ea!V_1aoIt_~gz2{^Icv(u+|5XREes;Cd({ zshQvnHwG$SBfc>3cpImT!mn`q2^Qk4Jj+;m0W*a@udVc^Gztr-;)qpVsatWgF;GRa#mojo-Epfd_Ou5lj8&zY>i#$wGh2Sn*@px_TuD)~6Af7yQ z@PI&d`iqR?bZJ2Wk|#O+aj*QCHr_lKPygWC^T%0TIVzR`MXMh_40Xo#Ar_L%-#7by z@*|52C5OB;T0yA8^Iby_JWlo|HQ6a_Jdcm|zy+jiaBzcO^6q+lng;Ss(Se!GtNgoW z&%Ee-5aD51^|7P%)vk-Yx>xhvBz79Hmt^i6_YI6#=ZZFbU@RabcWBa%jrHFp(E`6| z-lg4VW*nDNpoFCQjPk{xL%lk%R=!k6Z%uriX7)V~uKDXmHn3Y%drlLq#Gc~YbnA7R zy2~p*AL=yeP8|hUp}Sjq*`W^EI5Scr)*V88(&1O?tJP#pUA}#7HM*1kKBu)C6cf9S zxS#djYV{>ppyYiANmBMRi)T8Yvz`58TzcN`X^Hs=ULy!(;azrl!j0^n@RZ)QRuRF&5# zjQ*_ON1i-ql|VF-@dq(*Ug;T53JobaQMMZ>gw!`B!D)5EV5 zGpxuY%c}a&R%8^AZz?IfOcTv%xrRYEsQ-OpK_jp2=zBmVx>2=rXXqQ(e1PuM-MdGN zgvMHtg%AzcQ;2Tbn$plkZrS^i{jpE4@|s>H1S0tBJpW`;T^QZ5KZfFZtdUeefP&RoZPf}a|=+$j#Q@UkK7R8ZWOrNvd{zmg{OaB{_<3$ z#sJa!R0zrw^yHru2Tj_{GgH+kgETgs=Lh}w=L=q=jswRx24CmWxFN*#Zh!_JeV0qA zj72_r=zlW{0x>l^6$!3!^cA=;_yIsn`JaDID`C!S`r|w-c~6?m^YVLPy#K~VQ?)!r z5>LvYeDTEFRL*u>|Gh0ej#*p$@XLjtf19Z0&}|c*2lSCsLGH5XRf0P_vH}1TJYV>X zZ=k~g(l5399O$!?Z5A3*lg(-WnVRNW;+_TiwMp|cg_JEN{qHBxLwhdMpxleY{&ol($64ew`hp?0%B0W6e2|vPzVN%$&ZIENZpojn*-C` z4CTp5PwV<$#10(=@uUHL=`z#Se>J&4;`CoxOx)Dxd&FNQ5ttjl{}t%xBMVSsqPErj zk1ucz&R*+Bz5xDqhC;Vy^L=wdE+q}bQ{;a_pN?c#X(5=NVuC)ma5K7!8jl_b;57nQ{8RIDh+&@px8o2NmRIQ5=J!Z}c=MUp zs8JR4*uU`uOjAHa#B0~myrW&|0%5bsicFn-u6=_4?`nMiT$-46LjMyiFop1XM0okD z>ShU|P7S-SqR>*$&3JbGI|x&jM~Mz%rmUsObBR&n(-#kGbkd;>upHW+(&2Z0Eag6_ zxjHkOQfpGrUaTsOO|cnWjsnydIjF0(tTu(i4wnJVUq7EcFYWNJHHl61?wP&%Oxv#8 zc;Q9nO)Q4J*!iw;BoFOBJFZG3|A4_G6`n8XFwp46xo{+iN&B~Mp_@ngAjy6r^U9Q@2zUm_^NUx!@d2?|1U?&kK z#ECGGZrzFTYc}oMD3Gl-T7PthK_q0S;xNEzI^8_>M=P6r>&lp7g+?c!f(?i2kM?auc?#3KKHwn3=?47;9_0SZCw(;eWl#&(D5J+ zr5pWKSZleIR?iU>WNAEdP;vCw>fOTkN!(Xplt%zg%zqFk%1NlSR!m2c7|3I=T4c0x zy1&A&jFE@7%LRVu_oMh%#^)RY7>q1L;zhsqs9$}jDj<}vnVxBM6L-ssQi;OR(C%=X zU?J`tHqgU5>v(5{e_LzflJ$Ydiqh_3;$e)eE%hh=2jSAn<)Gd$XqI!v2dg7HkIEiG zDxJjg@GR%AqCdV@7s6qYy{A>7KpW;;MCMUOVO2VN98FTO>5V5;4l@Q+3wD4OobI?=~{XuX5%v^`_LphMZ#*HIVAn_$xvo+DxX=tlwk3 zqk;glPvV;vsqJRi8L&1@?{K3jG7&HgUk;K^{GiXIv^HKtu`iOYJt zOyKK2#qf$ka3Q3_VH`jRQ0q>Up*jRr$)U)Atto(5T;kYGVPJ=&5FQ5R5S*9RZBYe# z5;ZpW?mF8pwv%8}U_fudebg~|jnq!`_qyoYZxXZW6R9-RWDdQ0r4YWD#;6Tt#9yKH z%S0fgzh&yji)<7i-a;ShW`LU#9yOQy0|{x5^(wQrfd6t+%@OIW4m4IZnG7yMj+ z*ubQ4U-6gTD45UI6{ZLF`?RvzkRS6IGfWTO%5ooO3TQsD#c7mo`0$hqtbH`>wEJXb`rxK!2Cq?R|4Eebi)u209m;x0zn3|@mMq(V+lsP( z_4%66b<#>2(riN`f8#yanl1am`p;}0Xww!zc{1u@Z-wJVk+S_Kdw{%@KiQ|L_J5jh znkx!!3RVex5tr6%$^pSoI0U;i9u;?DN56Bx0~Uf?+3w*xdO}r z^*$eT2kwgt+rjRHR`v#SKI37-N?TK$9%>DwtXKcH>vY@Ij+dRGEyivZq<{$@ z4ue?X3WTXDWr`UW8WArHJLNo{9PX1V)qZpFq9@n)e;YiAAYeXlz3j(~TrM8iEU@%{ zvUG-+;Mwmi=ck%YFCKuY>Pi8P&t>E>I73P);s6^A^2d1Mxbk0DdD*Wmt|SL#xgin? zo3YfkSdYAigmafW5)pcxhva7PWek8YS0L`MJgm3IyKXnWD<0k~0E3;Am4&+EQ{jj^ z@MHAmz7(-BXYuRzA8Z7R0S;ygF!o>fOzg16KL_EHG3e&j2Vps11`tQ6Y?NWQt!@fU zbRQ7&ci9~JCx0gqUh`ubss$V{Wf z-jj}MK|i&!!*_n~-#+ASq-ID4K-!)iq=Pj{q_K$<17IN*!=RFiF?k}&R;fkY?DSpX zjK2-e^bHwj%fJamj7@)9$Mt!{mIUFD2+wM8WDb381c#n|ZK)QP_Rn}2)MCcczyLPo zQ?cpzaKaBk&Aj$n-aFGs==@Ik<-Fc<3I?pQF4vdDqsEV$s^#sv5-bDIDUsvp78Ssx;U zy0Z`_)3YIvlKE5+$=E6-lEP&B#G)mK!E zrVX^Ncq}JZiQ+|4FjZ5>8_W__X}DoqA^*UnTbr$3RmYU{ALB^C2u``wq$cvVc=0!5 zkfu7828Hf;qrHpA5RrOGkpeJ9Irg1AoTR{v*60#(WWNwg;#XHmzg*+r5Jt{k?ypGC ze|R&VNl(-Ui$t)juL-{vPj=fxy^rlm07C-;BD(&tje}U=jY*Tq+WNPy6@k-^mp-Gp z*LMmREK|R z@oPUg)I>;(5mdD(^eRJr>B`~t96ow%$0uI&V?I#zR|xhd*ZO0HA*e*{Rx86V&P`uz zm#0hXBbN+JGzw)m5yaJZWC@t~U9>M@InwZ^-P?fM!+cwBr55< zFsPSr?`GI2=wGLJUo_Y(zxIKZ;alOj7(!tr`Flf)$Q!HUQ13}UzxI&zZ`37L7hLl# zF_T`kH|(&#>F3Wej;E@OE48|7RtPUJhw$)$@mdBv?H?u%`;&^A6AALeBSJ~yhw24Z zBs|e9UF4>mMH>-l?M9KRfDPBaU5Bh)bK7O_%c&cLkfeL@ zV8n{X?S}F(NQGV3moEL713J&e5=N^U**&-!iB179O7+`%ECMEzzP4K?HuBXJ$Qqba zRv@&8H=s%uxK<%L^R8%YIOPG_Zt26R7A6k!_@^u>96}4~lIz=}wg(o4_1@*oW4Q-g zHQx|skD49UO@6K1G^t4pv&H8}jJNm>f5Jx)WTwi>2DeBP1?XMUXn%}Ub(+8$ib%%C z+dEYeCCvsFZQQUdMT+MZMhI3^h7P+;D?F8-HJqwC-6ce4*LA6R&eBq_d~yCRb*1BC z3b5tW-kYg(qwqa(UNGj4H0C!g?&E{`E36v^u~-|jdR5@>(ufgSibg)2XrJzCx9yRk zb6K=0ui(GZB3UeRTMQ1kyN^Rz#`P|!2FBCErL5yCZkuHt^lr%$BhuKGo%BC2lb#QQ zcH7sQV2i>~Heq(X2x&QE3w~H_HwD7_5)T}nm%YzT3omf$*A@T`1SwJ0ho&*DYz^$m zaF2-X*!0)dJ^p&*S@J`E&q6RYI8mAN!0>Kes2IMcUr}PBfKY8*Jr}$}_GH0FlD?#aGn2^9ScA z7X=pkc-zGY0Y#%2|1m$Z=2e@N0Drp*jVO?;mp&4N4@BVNS!E9tl#Jzi;gT{)YRq2M zmM+m#V9|%O9CgqQS{9%Zpcw>b5(z>SGz_9%*z}Vp8b; z8Dzc?Cw@5#zjIZ66-$o8qSSUu_36qnP)w2D9sB6Yoo3tk4FX&nk2`!qp3yFFGPm5Rm|^{JuW&p1=CK zMk5RgPJ$ZED5Mmf$D;M=h1pZPS_50AI0s<>*k$6jc*+aIM?2bY1%uJ4hv=}Q-d{YX zE*@Pxmr%6W(!ILBEX_0>s~^Af4p|IQ&t+E*8MZ`e#7F zuYxkeHmTY(kc%`EeNOM&EXcEGe8KE_2(?m=QRbQZveM8KevtdQT;TG_s6 z=sCNHj4esM>z12J{U<4&T)mO`N$Fs*MGUW0P~5v&fQ-e}p0OR(b*gE#c9mL!&+R*B zJH%iDh|qt8&|;@!=f+)ao`m6CRh^jH&Ug`1z!KBZ!*}qOr8n46ntRGEf8%{c`|j_{ z#eKl0CMSrd_|4%17&vIc8h6K>sNuspC}%I}ZZ z#e+=Q66{+dK9yQlYo+?s1Hjja!uoR6@(Y;#y)Q*889rhltof8;pJ4-gwzy5k>V;IMb^1*o$TY)|UyQSvjd46<%fou}5=GA2v zf!m81hUu@)F{7DR!bMUI+=mjkn-_n-zzQwbe=X=QpCU$URvqQZCeZ`@H*1Clfe=F@ z_H7h-eSW-M1}-G9u)f=67GkjYxtrI>q90Qpzsyd{h+0HoiEp1m%a)ahcwU5b9{d#Lk0r28$H{)mmVa)!u7~biHmGxaKaTmtJP8n8~(gwEeB}R=T@%{(`ggr`RIRY8hv9|5FdVNf7`U{AQjGJ?sm z<_uM3K4uBJc~5^m!S~0OY``6N&3j4nqI}D;;?d_T79F^bHh5pDmE|vn=!gL`(ERnx zO<4YmVfP{rxS1~+oYt&%r%SaLw6fpQcqYN1=mUH;!lNIP)ojtf7v_Ve@wBiBuyVZ& z?8e&3Kcv4Oi%&Y!PT0t?o!ki-tJfZ2L6b`f6RyEA~|Un-rSjg-diL`pC2=;XdJ z$Z%i6$rjkJ?nc@Tul*#**frV-q#Za3SZ^oTuH*8?(FD8K?uCTG)#dWKS{KF&+`>S} zqdJwVai1=7%dAC{Bs0BA4HsBGB>*0Jfs!Z4_;z20lsGkaWviA@3DSzJ&T2vRLj1wu zItFgP^(s9((}+zR5)SU9w5M#`t;BBSHzabiYas$vt5Tp^Tg+I5oBw2D6JYaI__oI? zRA}s=G(NyQA|oh53(bhk>Su@%h3kY4?<~U(ZVkCFmcJTYZ8bR9Kma)-Ro$!emge<^ zy8~y;-Ufz&5!_;Upl}`s*nGOGfBX#7HZXC z<~mNr{ID36G^{6D)`g;6SfM%+0@&!%{K-h2cToZ&^5gfJsM3>fXDQ(@@_sMckfmR^ z740M#C3iPON2?H?be`4jB{0xeK5tD8=EH2r;QmbiD#viNR&TCm*5%~93V!fR0%o;0 z(&08XRF^Vd%V<+qy6k?s9|c3E0YD!}>y?TFXIk?iN9VC1H@0egW*}5}qUm&RyygDn zX*nn(iZLUS!bo=rY@f+jOCP}^Zo9D&9oYpUsmTJ|a(v$W6JP&Ghl{kee>`1@Y_f<9 z8!~fPKa4Qs>@-d-;5L_AG?_xrC=wAiZ|PzkRKg@Oy5pRUqc#@R1uJWW9=-;xZk(EGHoJL?6) zOK9}|+9s2zoq_%v*Lr#YtS0P?6E?DFGQpq?^tDE5Va-2G6A&u5nesJ8j zLHyj<0wAcL;zDHc$hq)3ugw0k79x?F#49_c9UalcJV_YiB(`&F_n*dh-KZ)<^S)$0rbkp*b#tVI=*J4Jhgd;vsm3k>pykij9P7}^ zR(J?Xo_rt`0+n=^86scp{9=%R`h7s}aS`&{#?Ekvy>PIYt7RVS&q9H0=ZB@t?<=$J zlsdz!!7CC%dsWM_ffqyK1C}?@+$~bp&h@nK`i>F%14xQnAsT0hCm_VLJ@C&0^KV!D zy^Kofypl2j-EQaF@s{t%hc~zQzjjwOt5PV*JNVmDXER#aP!PNR#MM%8QrBs!0*%|L z*vv`rLEqksX!ou{ii(t7-~cv!!5c=sr5q2&BWqVVpf;cK&|*L2d@8f>eOC|fX%Mw3 z02KB~hj8Fw>ss44Up6WR69~_|7hsfj=RufHTE|mO=Hp6w1zfO^`GBh4%xQ%Wp2oTX?(rz8YYZAZs*^;C4X(!GrxxUdH8jz`17`2TJ zSnMyXM+!{6dWT;|I?Nl21gOPnP@nEw2^-8blBBL&%O#B#yZg@;z7ze! zdcZt5zzkPqGw8USAQV(ukd3p{TF-T!Zstuc+njtpmf1hn?rZqr-Tu-iyMr9m1R!T5 z+AU*o{3wk;DG~zNA^8ZrQ$fYx1{!s>bi(Acl~e!EjyF2YEs7K`W|TocIQcwPRDTkfiB8*(vrJ3a%u3z+7|=6oJDSfb+N_uK}DHuQwR@q&|?@o11!}9 z+eGbl7tq(OnFEGG-39TO`+*z>I$uG0aebdXiS~`fxq*cU+IPf$4>C2BUIMJUBTC{;vlSDz~!fUa*^LR(?5|fQC-TYH*C3m5ogk1$wom*ZPx( z687QQF-VpolkR2fieG&5Y*s0zT}xj&J6nJk_EZV;CfQO@HVqdc$8})ma_uHXuwCFR zyOZPcHYs6W5lOGp?Rc#Y;~!+^0si$<6-;3N5G~id#)sZ^bO)A$lf}l1^prN?^TTdx zd#FhV*_$Mw(f(Irq$W)^G@fC}Wrp-=6vI>_Qo zZ=nY!@M@$^!SWfU`j&_CZPdQszTiyw9yYkvMzoyyCyk4~eZUeT{2B19% z`Sq;m{=_?g$yQFuxNYt`KD^$adpJF{)%-V}gHa|+jqaU+UGrDx5${Y7(gEFMI!SIP z(vV7`-VBCB?yYnp%&-=rD#I>-39ibn8``>D#$H%!3N5{AT{QJB61#0Lwc4w+ ziuGwW-FJ_;?Rx#Tbm8R|G1T^Ot09z$U38$Vx0N__ChGqymJ-E#BJ$R`nSjy*ji*DG z7C%PL%rXW83fM{_6O(iGjU`jI_qVbbMK?gt^$!yEsBHnT_eH$iMht7$*OWzZOS(hm zw)A8I3k?BTc9)sj?QVy>vBveAwHUOZM2px`PcW=bG1g@-(|b`*dvCs`Xw_H9a|GPlqSVW1-i~y~6FG!TKu*k8HEffwBI2 zb@6qUgJ^LVUEhNx*R93j`g1{L3=X2aAN*YdIU82g-SCC#^CmN@?4OD|Bb>I)vI{a< z#?cjh8o|iwhtp3!ajIIa*9a!m|dnh{Zh6yBi@|S3nRin2|FwXP1>Cj**eD z!z&u#i3A-|9j?Fp-!w(zsRA7QW+2R>wr9Jy>N|jk^CvNK;aEu<*vBf0 zl(3iQdVeKf*poVfzPW7?EU9r)2YniLHc8LGEZ_4b>*oJ8>iWywYW*$FWRk{1^Ea{b zbBFg^fz!i;A+PJDn>nE|=nh$Y0BwxP29hJtCQhh=csOYp@m2b=&z`echAz(0_*-UZ z3{d%88_hU8Cuv)cK@`PTCtVmkhlaTfwjK>Bq>EN-*HtD`8r+E_j9DAJZx-J1R1tg9 z?D0*v{xa-*@oy?;+M=m;hz?ze=|Zj;{+}_!edhyCT)Uv1sRAHhzEg*{o$jq&4KN%} zcbu_Qg_e$@Uwzaz#Oib)f#KW~k(xdm_TlCq)HvtRq@{SL_k+jt!WGJF2~$!K{BBk|PP)d1V7*>Qgfi2YK;Ym=7! z-{aNvigvN1;k+ER19IUmMkkb=)DfJ0v>g+E(8V>CWbmFbLwXft2ma*EUN4*XN`B=BV$E8A`Qc4eNg zA`Z%WM$}M9$WVXPtf3+~Z^__1{0Y|*X5G(5`6E7VaBP}ng*8#z2akN88WE|C_OdWU zYcUB_E?s|>SyL)$U#XBO5MKwW(@Zl2^A2pkxt1tuw4>HAqEK##%lc*KsdjwgmxpY7 z#gn_@IlyWr@AaL*{5OV{`a8&T3EGbeJr->fdTa~p9;O5Y;Fnx)4E1l^Q>Z|N%mLcl z1kRrNuNCsL9J@vFLc|;`o~^4rlBmHpmArSyDvc~VBXoNHa;Ik(_Dez3z{zkKJ}>=6 zn-+n-@+n&zm7+OcIv0c^9#iklt5OTFYLw(V$(8LtS_P-}gBg0;t)iP?cX~AWdd1R7 z+wx!zOFcg5yaaK`?ZMSG#$CPgz$@YsIZ#T8Qww-4M1_7adlMKD*YfEmFJ1XTddBk5Axe z4bbJY!r2j}CQc6XN+se|m_Ky<@EnUQ`!$+fa2Y&v!F}#7V{9VAnU(4mFeKhTY8}?I zu`Ow9fgYpVy%T823K9gqx#dLK`JsU5Wo2F(Y4G59J!=~yIrdQ=>bLmtAX;{7Vpk0D zLE9>BYjQX8&X%yO6Ol9!L0yb^bLjAbq8WsT8zYz8{Mdz+?z#P2;sNYymSc9f@f1vl z$aYwvCA$-V8LY08?8+Pi$DE%(Xty^c4tjq2WWCTkX!4l>c6F)^-O`+b`d=JmXnN1H z_@`Oy1&iVRYgx!k=lZuUpjvkNh(Q45fv)d*mCs4@5NW?UA}qFh7wp8Z1*6_45doZW z0mKOg)cfMycHtmh&i&glQjUHUg8myFHVT`4BHtwzgJk3&LFO4pR`@ zdD*@80cTK%_n;#Vupnb2T}$LRv;{Y^rt)lS5)gTin~<--38VZyZ`AIGK>Dcw{uf9d z(bOELt!5iB`xeD5>!-w5R{F|IUU)c)c^S5wof?Ct+C=BQra}@amVUd_3mSH3s5_#S z&71q;Z(Pn-!sPBxhtIWlKn==v%C_+QZ=trvPA~YGs4GG74o4#_4x4cyZ~+#of2f<3r4L9)u$FqziSSZgHSHG!=>l`Oll@Fib(K=N z;j~U$W3#97t^%bA?(=IE%2E-Bvk@oF=(<@YGhVNp5)OjLBr)Wc$ZP5OQx`Pmy1iuV z`}F1<<%F)$1?5)u^7E7WT|+$z^-eE8Y6-tm-1bj0?$#2X5$2XaMpBi{%7>R1~LW~1xyn_uN}Ja8~Psxe$d=Thp#qL z9hFr42;Y|l?yoa_U#1x)r~A4`hk8cKGmS*}ebwxI$kJo(ckI5ndg}D`XDttH^dxVI z=Z4n7XSo2EZOiWl#|L>_Qnv3#f#1d^j9fqh*7LF2r1i(g%NrBl#b(vK&6k4rw+wS1AC%~>{TkVEaB|Y)IngwAN?VbJ`;4iqgQH_7 zhh*LZMKZe^@iokUTRBnsfH3dt1j)Xp?^T#}7~S*d{mp6vI5X@48$OLKFNmknZns>n z27f`1oZu_}Zn={xln87Nn{W`n%PZ6=it#nsZk0aCLJ!Hw*xNtlo>T6m>U|VjX?bd{ zc#@BilFPNP_dde>p%VCiznoDJ?xyYPYd7tZa=VnRYqHlYb8r#8eUUN?=dySUxbF!4 zsD8P`{oYyA;rTl3KL9cJBBvKhtR)O~!k-LUeg6lc!T?M%PEX7?hq@xd1T7_UVyUnm z(RjqCQZ{|;>#+h1V1up+#tfj7vNK2K&VQbKzFEar#Gypep7PFHlQa<;U;zSW**z*&ekT2=+D^xWJGvU$K@1m z2EDFdRgS&Z{GUi0JPhY&@55Sne9Q~~gwmhDlxFlA>G9G6+7SP3%9ek{zsk1G3QF~U zlEZ=G_ziX6DVgL3*`1GSgBO4cSDqvpJy8_zgD+m5o#4}Q;Jmhj;5(i%*Q5SiP&`yg zO$ei3=dpC(;|XO~cQ>yy-G#NKwu$Ak2V&v+MG--|TZy=}P5T|a=Y=<7llPeUzfG$I zO$9#=b!}m?I%t~5nB(y4{Z4V+^FpCBj7m?QDe59_;V(~WaeGfne@|EfuIJmDoNspe zkYu6tF1P>2Df7CheWsQYj7rKK{N=F)p|ua`KfG@GS*(Za({V*vu-tHd(ph)R7Vq_r zL2~nJN(h-KC;y^MEkngf1*XGNtYD0n(zM62&M`2Y_pw^j?%SZ$Ij0txj|F$!?iX>j zO6D#6XlLu*goL<Nh_cmYE9kOU zqC+M3Nzv4O3bu;wVDfN%uLxXIF{29Wn=f0q<5`=hA-_k=`WtjAAD+0xq(sS*%C7dY zJ1EtKwKogsPWCIf&2-$chnH#kRaAE+zjLMHKZ(4)Q1{tYFYWi2f0(NdwVlO3Rk#Uc zzWtE6HXo#5h3mT40-ywK*d{*3!)G>CM%OLe`W5D<>plo3C#{DRMYyR^RED=GvDz@-Fog2KA>trogwI4|%E95jy(sR^GXLjiTx^)eZWTq1Q<+fKUyYZZezfC$aRw=WCN}#3@6c?S*LrtZhbf z1uUQ6#w-1PHn&R-F%yHJ?4a*@3NXK4ym4GTYp1hT%;&U7PW-bl75o6p~9_k}@2Ieuui;Ul$`{s>F4ICvAh4 z_ss{*E(ueNcNFToeFs{31x5E8a8u3`-Z~jx(L)B2JIMrs8i^xadVK6MC5@IB0Rx3| z8cAC~Dbcgqt@Y_kkoUCKh3Jl;E>I$xo_&P$^Jh@s|5eG?CADco-z*Tnk~3S$2RqKQ zY$bk)`(upeIMdhEwhI|T9kE&GdrtWH#&w~8i1&~MKRMvy&AO@X58N|)xKr>_w8Q-b z??Ne4*>#P8))1)mNtq?`?k_( zhfIL?ffiBrNkwx<~pe`RRBthRa-wPj#|GmgqrsAxOAZ-=i4R#D?B@jp35yC;HKj zL=l^2@cxrzOJgJT0gs5nT(dxs<$(XjJ?<8t(zcpq_^YYyr_rLk(R$HEi~oGNqlg#vHj=9h_!cJlVW-oG4XQ#5L=^bvTP*T6wj!m}@ue;#b<`M0*9mJ1v^nV&0KAmfQ@mTn?1pDQQcc zVrGGVUoNT1PZz<$SI8r*YANa-xja=KJ*Cj}F~B66kwej-l&kqz+q4o}q(3ZzxBo4* zGK&c&72M2>mE0!v)e41zV9LrHgqiwG@wE7qUI*8Pfd@+^gB)GWS=5L-Ta_O%G^$zt z+#W#R%?)#;_*OQ44u+0@Rg6@XRMZIw6NDekBYAzLSNa^?`aERj`z6Y^_iv28K9^+)h?iu)3+Gepd3V9SXSUU2 z1HWXa|NiOIT{*>~H9x_0$(l^vp07eLZdZKs43)SY`+Dbxx;}2)b9!_cD6<$|y^^)2 z-o$VnAHVN#_p=vp-tH1*AWNr#kjSgpWi1|=>&3ROwF#NJVRiRH&#R(2;d1KrE9%BK z_h;mXY@MhLoDkZx^$ETS*J zbU!_Cv41B=6I;^GqX1bb0x%A`u^ddPwOPXm?L=HuUDMezkbGe*0i1{uzVm=bi~3^p z{x2TQ>g??URsJEe%KzrLcO(Y(R&`&Z@MTzo5lxreoDFBC5dUlT05TBk1y!39Dl|Vk zzu{Jqj|HA|W{`W!NuYPy$9Hest8DAj&Gbj^S=J)S(@J80z{baI__zTaj>gLi+rtWQCd%yx5N1qg|8My=+(fY zx4l#en*QgiE$~_Hez)C?bL{VJ3dVP5W$J}g-E-d$aA?mE^ZNxfHY?3INl?!A>@CU~ z0{@ItL71i~>2mh)5~chS4tce?<;7z~RFjEQa zNfL}<9w|#7OBSVmr2m>y@*p2;OyUf6t2zOSw@S_7JKP61qjc` z2D~qh`-MMCu?9bEBoJn!)opPcIPKn5@XyvoE4E{a1NGt;IgN_1=*?jOuZ!PpCq_ zjEAOHkWGAV$#;Gt70Y#wZY*0-YH|E2FHRRyNhOMC?({+O##S_VUI>4aS{_*4D%H*r z-CKpG&%xJ)0OV@C^gpeJZGB|3Y|3x(Y<+wc-`dfyg`BwgO@OIsStGV8e)5d&!*O}n zl{!h7)#->UG!W&z2ieyHKf*OccUkh;3&{Ax54=O4?zp|A`G4f6Cwc?v`-%Cz20wgZ zQ#*-$?sD@fj~vA(T~c&39twbX+U;H6_?0%TA3YwIt*q|%%oYh&Wk3CZf7oyx;Eg{0 zB4+~0eqG+M@Yi19?T;xfPmIIj7)9CJ6K$lA1)28kT~jRYJ_(_LM9x97P1rHJskSFm z7(QlDb6yA7wzwAa*1o*sv1(=}577D9QZ>n{(T))ivQcE9raG=bu2(Jvgl$D3w3DCJ z4brj7LMp}LSI`Y)zUB4eI?X@Qnz?ifI`?`qo4@6A?VroI(keUMLRNMxXMdWvqC6#V zG-X)=E3bC{qq8TS(z$uK%u7zSn8K;2W-1ZS_%HUGEeN>=MeWlWr!hQCA~$N{H09O5 z5-+md9L$Z&wCSR%q$=U?0wzsTEJ3JMsu^PN{C7I;a%11H8HoJ(m@Fh{9b;1{mRdD; z`Jys;>LZSsDFZI1OT3*oy2$o|<(o|ip0n~3tAq5;uehJ_b*1kK)Tsk2-}?*Wj+1*w z8=^XPU2=loqkEbHlVh&a^PU78?CslI!Wz!^QK>(2>ns3%;NRB~CfY5rVth|lbU>!8 zVjBSkJLYLfomvoTS<3Q!KjAF@j7}!{jc~s+-JWj7h04!bgHHlC_n5mIWVeG=@AGCs zu@>R0!gqG$Wn=eWZv|Xfl=b-dWbjouWzBh)rHj1nU!nQ;ST_lLUm4|XBMh1Mcl@Vs ztjO454#)vkNsv6ERA0~rbSk=F-8O#Iet*o~ly;E=@kDq+h)JsArN>z`RfmX%&F4CX zC%iV@y5rmtiBDa_#O~fGt;l#D{S&`8D^kS}yz}&_sZ=R)c0Ve_V=H}BHZnYZ_N z`+#}x38dlN++6aHz2~_sv)11iN0dEow%VPJZinc(UDy$4{2bQf|HNb=M&lF!QN9O> z6wjos*f=3|zg5JJoGY}}Ben6p6KDPXJM2fH5!7Xm2btnh_wWSD?^&0{)yOL*T zzg(R2K$Pn4T*$E#5SqX7(fbe|Crm8JS>=i}_`&{TPSvbX?5El&9JJgq{pM>!!Bmdy zw!c>o#8aW;yLiw8GH-pl3ES-8oYywX*UX#E`GJwgCs#1{OHcdX1VBwmy&*~BxfEyD zkA9Pe3I5ksr>V9k%?EDuBL|KJO;)a6A@(2*N>4V&;zp&9#)Lw7d*Li-c~ehsV^W#~ z-fnD5X5x&xN|bP{U@V3OTg0i9@-{%TkIlB61Q7~#;!cW*EiS9}lX|})7L>GiI)QNd ztqffkZ0bZ-_SgECDL8p5G??@`4B4_}4v6x>tJeOZw>QJX#nvzqF>VhIgwAX>*hL$& zW!OFOwf^cAKj{W|N7}^hFP3ij#_PLn)BTiPeb7Itjc+@uj;n zJDs8vD+uJZ5u_&F7yG=4FSVn5TIDkd;P9--zA}2^z`af!d!W z5~gm55sf~!?7FXL-Nl}Jelp3Q1P}sUK8Z{VBkV4Ejtx)=VZgeu-(nu6A8X>U_n6*K z49`IPVSBl&X7m&9*E&lk{u(1}w!D{P_;yx`vs6?-SA#uCY^hAUB+ zA829aJ^Ntthh|JeOArlnW5(=R(*=+Z-H74a#(T33*WEZr4q+*342k7-ZM7NNc%{f` zNe1y@;4h;9Jd;4B!S^rZBio3Zs>?Vdnv&hY_Kb5GI-$G!MJgCR)Gc>~QCar%Cm45^ z9QmFg!=B&%V|L*nEM7P_Xif)W)FI^dG4Ij*!}uJ}wrV``7}s>Q9^miG45;-n61T1iF`Cs}%(r?bX!8jX zp4>6pD576|@U{adddCoP#ctuv1uQ)KE(-J=F1(h{Vst?)cHE&hn8B;nmpHA>hDiKU zby_>k8`XFTvT1!Y^LdNvX3U{%Ah;{!#CEGqAq&)$1n~n!|J=?j0DfKK6==~-o6OAD z;okR8y8P&)j#Jc|f{$j{wN8th`y)#4Ea)MgAFZfvzvd|H#2u?5^8_bTpFh)7;@SP* z{*L2B*%zj6dJv&c*dnOy)pPthxqVkU@qmtbtzvHea^GIH&!vY?IEn7+$&0rmgYciI z_?+Rc6bNj7`T3o79#YlTxyp9&yf6B^%JDDCYZ0L%d{Y7ICTU5<25kdhH>W@+$b@GG8ip{ z=Fwk6{D+%~o>gEErH0&)KTcy5WQ+T}6Q6!+@5KqHUc&!J*IS2G)phH`o0brekS-}{ zkWg9#q`MoX8|e@hp&%k5-5?UujdX}o5=wVSNq5&bH$Fb^d(QcO*R?PI0oiNKHRhOO z+%eYWs8BcI1@wH?tu?R^9R6<+opy)){dzo8*S0FZvX>o#4vyA>f{~ ze`8fayX%5cV>Ys1LJBLz_ch~jt6_n0)+kko`n3zf{^eG1Z@RfIWSEILbm+17N-RkE zONTUyxG-G{NA`#isoDZMOx_Dywq(@P)Bc@Wro%17KzseXTr1HtZ7lmJ*}c)ta>gjR ztF^LTMrV|j>9fFOFpzx^jrFRRRlNvdoXdynF445dNz|)P znH5<*r!A~4r2A-Z?q6a*FPTlCV?0IXPK>H~)0r76FS|kHSF$$wdd|0O)&y9pTVvj7 zg(54AS}0~i$*yGH5}K=p3$*t10iwsIj}!ZZ2WM!BYDvY^dfK>ibS)@DSH33m`m5ZA zjRCaUl=q;yV`C#^-pkGeX1wP3)lTR-`0w69zC>bzj7zdK-;6;sP2c z*3HjnNDBvjM=p^!A}GKJ){|JeCvw6gBy!_rM zD+>e)*2C(-CVgw)Y4Zc2?O7i&XFEjX2$R_|Ie2QwLxh>+@l5>a3`i_{TkwzvL$!8T z7BZ=#4qw$2BQQ95@^jw}oqaU#n@N{gBCi4bzl5k4O(^PB?-pn6W+cBS}7we?{Q!WUP81;fXK-5`vcU7T|dSk zF2s&_r-BMQVyBl*i;bMfGiF`I$TL101v&Uh??=2A4zP0$Uqq<3a$*;-H0YhmEXmQ^?ksjM*Ax=}vq>124~&4G!dVyNE|EQ;kSrQ1+q8G5(X~ z4%JBp-)+115)yprhc>6K4OkM~W`|ixFwW|`-q+!rt7t}zEOH2bdEYUecQ2^o zsioni^bNGfAPOsVXUoFNM;s^D2HnbsRtkn^xL9*q*SryV=~(aiOPRti2-~U4Pg&8t~|zh zioX~fqE8#M5U?_O_MpU*hcE@6V+|o8Mnleb&M&3nsHs0)&9GE3KxGphQaDM{7_#AY zihOMbrYL^j(Bf|;IlppvKgTr|wucBqg~{{6h`9q@ymE&*OLSs$PU_mOSUT2RVRz!^ zoQ8Wui}J(b*yqF%qM-vM_-{AtYBpr^N1v`1?&nCZ-%h)=JM%H#WA^(%E%XxKTJkd7 zrB_IkmH*p$+6$vvXBpj`v~*Be!+G@03&OZ_ZL~M3HdIz|wFgH>sTRDWOcoTJ!$VfF zvM4PByyp(ztA)x>zZ4OTtvnG4IV(ZAfqS2YYKVFLByI3~eM3%{XZ)e_XJFb6xbj=W zk;3MHLsCS9t)XL;K?)c?S<0-zl{BH_a0OZw#w+I zds-3L_CjndC!yo(38j}l0!Kmj7r^W`n7jgvSnlgj5hHF`H(P^hEN+6cbnRX0Uotd0 z5knQX*WOfbKPqs($eFT6f&Vs7iEdhcv{2_jfjp$U?F9!Y_pTrL)4S5o;$91QDLZf2 zl+aug3s3~SbjV4SpR=%`b_ zuIBvRMR^6oRUN7jVQ|3vdutf02cm-^%?+T$N_SI^sG-6}O!|*wkpjxpIia}6uhdIh zk8AVrbH^+yNFQhUFjXw?HqT{S9dp1qS3M^Z9=B2}CXCXHJyx!~HmjhArt>_Wst!!O z5GzM&!L}D+v+P?bFOVdWvOd-OXIpTc(+x#VKQt7;B`z?NW3o{huCiHaLY#4Ptc=J4 zr-+6fQp6|b)P;xlHz808f<_rBi{a&VTeeo>o}joh<*K@p{X~pi)V6HRgoI{Wifa?g zdfIA+uG@C`Gx59If&dH1?jc=RV>97s{E=sv@{sKF&B_~Pc>IfRNC*nIAVg|bUtDWF*Q_b zrdQmTP!v@6<6iI7OMDv*=S|(u0;!*G-xXv~w)QN@FP@#ZNLwSvES`_OIg-sww0)nj z$R!FmeyQyE{-Q*+mp=^0tX4`hapQbhA!OjSOi2?`GoG9 z96$JR9-+jkxEXvl3*UeHnP({;mI}RUcf_BmU_ytP$T)7ysGc8l#}(d90`Oix5-dki zYN~x7(!O_;Bh=vfcO&sUG;_OItZU=~OxU^|YQ8BXAaRG97|DL@C5&d(0`;g=oe|ZE z{^bQty!yB5XAayyLN6UQn$b!3MEp1ihlCzH`hmxr23kyX2MBAqFiQ{YGEq0PB%agI zRwGrpt26H{!3r}pzoL{oGDSrcPy1_swX4Bn3lK}ImHBQHP5Z3lFIPuaPAE2MEmy7( zoiOWr5uUZ`;M7(oSJ?o;dQ6Sr18Yo%c)aBf7EAm=@4HGegd75UTCvhfCVDk2P^6eS>R zs63xT!8RQ^6@Kb$3rKN=c~7Nx6MPdeVx%r@C?IFRc6Am#%kt=gY#YItiI_L?ABoBz z5H9A6wWCv*07B`t<}gzMWmI;+2TD9XtzKF^K_|3k;vI{%Bq>lLAhnb$#bO3zRI@2? zGF`Y?2zq70HyTk#sIt z!ePAqR9PkuTJ|Us4F7l5z(bziw?-O`mYU?*nh7}piNljtf#N`?z)kY#tC+oH*rGB1 zmvhB9PRso5{dct=YegZ~<>>-Sw_0oUvr$0rHS|9>F0EL;uwGpVqW{#Je7AQpr~0E% z7u!YkIIJ|}WA=+pvYu$3g~~0Y-;{z=uQ#BhkBw67s`|TfA3ulj!E)3EQKr6ZAL`zS zxwP+rv70_Y4@>@8Q389}XS@lL&k9Ij>jwD5*JVy?5RDS_;8j2*25NGP7)G9_DY`=( zax=`2i44ZVR!oE}W|u-`fp=mPD^3SwTahut15=8v_Cy*eeq2oRW;pPD9LE!wd!e>9 zIF+X|75cokvCxc(jK+5{4iP!zSQNq8JK)iZ_BIOa&P;U&*l zhLr-*Wz%`eh;SVD>*NgkFn_syi=A~Ui-{oBI`qM2ua{p+9rC#zBO-g zTaHIzFomNkBAZJ*wTrhhpnScK{>27eTtg21e&qmavm<@PZ)TWrpvRQf77wJ$vpMD( zr)Tp7@GhK(UeDNp&JgyGK2Duuq$4a@l^B*FfWS!)bX^r*(wdWK8R(iOy|hR)*~q?d z&I2-MhZQoOuA6t!MnxM6Ipomlal`9gc-hi(zv6A>kCYBj;gi};r%8Rk%V1UQ%?j%H zc8b8bgIC*V#kEyeU%~?KDUwBEeQe|yE$RQlJ0%UXy|}LwN=2LFC_Mt2%zFu`YM_4% z%w|ODmbj*DRy*!IBI8Isld9NAehcvxi|lT1k4(uG8~W-VtjWYpJ!)e}c-S!>eed^B z@7+KVM$S$DzUt?M^#D~I;CEYl^AgYcjGPfn-Sb;T4-9k6g{z7zw@g0HiP*v3WrvpS zM-KGh?e2IBGgCjaI!mYIA^o=iK=C{MVL27^MfUjm?E6Z*s~jRkT1ff8>5bDGjkjtm z>`^O{zmZdk=LSM^mNJM6@EEgUoY?0X-QRQ*)T(mL zFN_tuVqML$aj41fFgVAwj5E+qkBw#3umtFeY>D-#O}HEp-L7vMf~oC{b)7F`9M39b z+hMYmjam|zdXB;B`!3K z0SYKp{hx9w&9ucQ^k{PjSCpvh=CkX3a~CrT$q&u;ZTOpa?;UqCuljen3tDbk`~FId zHK(fZvFl6;Lue5)*>b#QC#nz97+{BbYdrw9XDU3U@%io^8da}IQ?J;oCooPo(e|Uz z0o&hhDuGh%a}+Sv+s!Kq>GOZ_)Yk_b9J+zYs@kjO%^+B~8z@!LjpcD}wX3!&Wrt}paN5bS!fe-YW?Yt@P;}`yNh87|3+yM`LXw1KQe8-9pW^wsJffh>uX4lm z3RgYKYvN==DbNGvPsFkAN_dlbbX~#%5_owX?C8%J-*-=zx*m-V7<#NCLSC1otY=w;{w^HPp$Aw zg{)Yv;b?_nq}}%1EHGDdB)&t(Ytcp2Bxk)Qj8y z(Pv#BIJ&b^F|6V*R#-9QS;qJ|X~6^X~ZK+c&)yIGn9{bvc?eC&5@zkGff z`3yknQ5qJJcxSda)T+$YzUNdSNHkZl~&KOf`Cwy6>`4~h^h{X#e zYslbE<=<39*+b}vY1sAxY~7Fg%rxGs9xOhKHjQqHQ$)`Vvgm!#YtfGg3d?VCT-?q-E!@luBRl1Fgo7C73XJe=n&~|l zM=tVeFOcK4sW8FjJ`TUpyie2SeWk_$XhQ-eHeb-?s6WQ&Qc~`&sg2utUxmPE3IS47 z{TLrfiAD!MgzwFB3^3iDtYu?NuZmRz4NeRTXx=KLyNC@jm0mE(n z42o~Cy_WNH#O?Sjjr*HmRf`n^_h4>DPBqDpr}9TQVHY^GkBa2(@Z|mq@XmZEo}SPB zr&gAky~=YH;3Pt#M?Fg%diz;`^BY00?%+d0$t`T@MkPL7#~mtY<{^9;xkG6C*BRU? zg=qR-;HMqGf-4r!HyVR6*)+8*&%=l~-aCFD(PyWS|82oIYq?y^(YR9UWtMd1sH;v0 zM|sXqHRRN4xxUX6KR>oT57$YvJiwDn>$y@%)SrBYt*Ij1; zj$607`88-Ta9yf)M3_`q(Ko(sk$2Jgr;eqvS&Afve3l>yCNNw^f}i1`k=Sa3l9QGB zKefM+d*_M%=-(7k|5R}e#F-jpy_JJ55JULU2cS-aM^ob04N^WJF`yFBjbrY%pc3-b z$-UxY-46M--0fE~vyjNg5P7ffmJ)dwyX_BtBZ?pRnI^8aK(T9`U0SQ6{Is#q+Gf0| z`ZNIIsJDHF_fQmOjFckC40sCs>j*J&+b8!|C&*yNARdgf;C(0j1HGiV#C&=NT6ncY zjbYG`XAg-#pbl=e^DE3sJo{@7-iJpU*C$Z0syrYcvgumI-#>G^a z=}{i0@H)Co+ox=F(f@}3m&-J^Jc!< zKeB(ifj1a(*r^bGy(|P#9;~Q#>$$Gkcf4GdaAuHl?1-2WI%O11_32ywg7*ddO=YCS zBR^Xy&)wzUc&Z5SMI&P62js5X!e1Qt^{box1Z(Np%%Is;TVoUl$VEF?yd`R5*8NeT z@+{WcKqJ{=Px8*6j7YnFn$|d>?rDTr3x#PAiR5jiWE3$mOvYD$V@v2yS^Zt@65XQJ zsNuTKWS2xW*-xC(Ij<#(v0rBzwe7q2yGk;;MH^Al&NcAo!uG~SPMh8!N`yEbN9o#| zk&<3wm%_qs_PiSw*Mn1u0>5*T2pm`B2NvNqagm3PS~LAc`bn8%b_7xT2@KbZP(kz? zkNiRucs&`Ngpk;X|0W@@f)eAbN7!emCTLlx+(TpjEq$&Fi&dx*`q`9@uHS(Cq%r`8 zcz*k|%UnN5+G+euhi9x{hFTf4Bn;Axp9u%w08meQIGe^M!GLTKYL&kJ(**@w-M!g+ z2(SuMX5xZibya4FSdQP>hYDC`P@6%RU7vMS{zCJ3%)&+GR(ns#)5aDyJnchs%T}O< z$si?Onw8gF54F)_hE?F@@bIt#us{r^lp%QetBNr8so2QXcSW_Z?nc>nEh<~va{5j_ zP&>)&7>F8hAdP!)l7FH~z zW$P2BtN0BpY4N<^p_fS@K@mNpGhXYosHy?33Zkii>HusKk zT&-^W{BvxcU4QMvRFMz6iA>Ph&{aMm%*6bd5iFRUl={6(%s9m}qW{#yAjWRaFYBYz zIRoYdRiKwD{W{0@Sie2csEq2vvI^I^^O)n?{m>31-H-{6Q_6AQ1$yF6s7t1Z0GY?2 zNm&lRd6%F>ak+%9R4a@vlMb3@_s-PXi|3DSNfWVsV1t)XWzN33Yc^CgPT8K{aBxR~ ze2KkuZ7?JypqswTSMh9m$fifHdP$}FJx3P;2pF|Moz0|Ptu3J+^K&8Jy{<1nl_YTP z)cTHCmdQcm>k)ciVQvT{dSaQ4$3F<@>wwW4EcVPRh*vb*A;*B2ewMTNm&f)qk;lUG zf({tpz3+upHVRUZXM8(1LF+v;$unzzNvW5snZECzi{JDR?IJOz{BF`i;iO~kXlQRC ze{wu2w*H}A7tK1y3G}rE)~4Po0LPuMMrQv|H*XrdpgRr*|Dw}StMyJNF$!Hd7Fn^Z z@~dI-2ad8oQkBaAAJ%NE=W4(~4v?gMT6tEcxgo&UB3`hh+mWl|efL ztnVh$0K~*trir)CNO%6;&?N0l4~CNF3xjXdsR&xkwDqA!<*#HL2VV_PMmCOoe-XzH z^w`*1_)IHyZ5hOX@_Bh8=j@}`bUzW;wcu;dovZ~2)0qW}pCD>k)E+A zTX=97$K$6E*R*uUK!Hye@{5vEuTn`rJl}dL(kU{O_ysLsdhJb0V0V`}^7Z+{!v0@# zJoJUZYG!PeE@|vF-eafC@RI(26cItUR*gzYH`Md}j24dt3nI1bjpuGi%SD zlk!H$R+e1K%d+_T1y|s?TYIwfCX&-Y#Mrt#ToRl;l@8+I6;ya~h?7;!iAdS+{F{pj zrx}B1FOVYw#f%w`&6AN4y>}bNS!Ik_a-@C~v}=l)9110Ic#v1r2w3haVcE%SNv?N4xU%#2W)qU` z@mqbKv>bmT@*A%GlV#t$P67U~PikUa17%~)ELIB0Su>-TCP)R3-*W9t;lTg8u3hq5 z;G+CnlSAqpHwQ#i1ow9%FcQm8dL|p*nq+4Mm_cv7r0M;QK6!4`?{Q5q;o_K?sn=JH zafxxpnC!o1;cfP1xrHqo(qxb47=nPnj^=bbKhShXYq*FpAgVbg4%zLcRLLoqlqtJ%iv&t1^n&ScPvPFm&ExR-+7gXm_M~_2jL2~&JE^wWqN7i`U z1^`9WTs>d{&7?T*TQ^K^a#@ISj*^>ov=Vai{{^@LtF21Q)YGx>J-U@hjE^gzpn@fo z9la}F9w@jqWep64P8q@KBmIB~*?OJ*VZZczBzXhcUBNpU!&GLP zWSYAR;~Xi`co;FwAx(d(e(-j3sw2syTWba9;k|z08vqCtaiGw>6#&6o zL(9h}--F%ebAX6yoTEkdJev}CtR>I*G@UsY0RGRI1PEm-`hj`s-1e3=C86$dLW&bQ zj)~b?OXYbc?8ccmJ#5EAeX#6Gc3I0kX$r%aOL){kpSm^5b0iqV-h0BaIQ=29`Sitg zW1cY&sy{CuPcj{P&!I787&KTBr)<g11t2@16eZn(z>wnPqxOovU>n2O+?kXJ@==`IhVZO~@cPMn%1XGeq!VJO-F$C2 ztmsd2Sown{j?5x`N6Qi=K8beuW8jGDTNq z9jtaPId-40rMuT?4ll7*GMui2Gt9SwQ%ercXSc_^6?41YCbunWOgSYP?%0H<7A2ip zrEibej9>^dBEs;AV9BDi<}K=4pugn2Sz-7BC;k@3IeQ3dKi)^bsvkhL7Os&W^l)Gg zR?#426D!qE!N@0OYe^l{LvBY_sGk^~n$L?BPCZ-5=Sz)OXg@hNlR3!A>$QCRhTdT* zCvLEY!$1MGob$wbKhuM`)+1tK#_czqWome%4CY3F0`^cR6Z$)i{nE3J>Jeka=A_5^mrj6u2l>G{_ZQdP_8RK7ck#v+L0@=4t7>K+0k3AJl zG|Cw-zQbEanIYk)ghDH-{(vK$R(hVnn7UKXM0|C_!{cUYPq!AaY%XvYpJdOZm$@kj zY+C?lh#ZX$PWCDJvOVKxcJEP*2YxIU?|iNFH-vH;`x&nnJBI6zw21OjFQATMnO3}M zk>~uyzq7GRZ3MeR5eKPYFnkhNG8g-+0)uvb60nl2LD#EdA9t7k&Ej%yfNk}@BF;PUJ>xji2*lphdC`lVQ%78`Y>xWj~eq!U`bzeM7vP*8lkZnQLy~lX9w` zpnd2xe^rm2Q1!x@56$3B?5A(}bh$bxN2wV6P|xd}i(g8>p-W#6N!XGor0|=MSC1#S0o{P+_eR496P{;r>tAWE(G8U$GsZPM9P2-$8(zC$ zMf#GJBE6XImA(P(t%P|_uemfXuNNe44{`YmxW?z&S012;mf5gfr~K|I>VL<)#K;F- zHnF7FcdQFv$I7W52=KxD4jn#sP6`|*d1Djh|4IN0jg{PR#)b1g$|UJ))j5s}G<{eG zRuo3N_1PYQIt~*ft~~l25wJiZvWfmCs$@Mm)Dpl?cnl1*9*>;miUn#pCV6Cxff4XYM~%}{SQKAI?s~DHNpp# zxHlDc9VD_pE?Cd8)QXVcUx-yCX*x%@ZMbZsB*62yh{ic;d1YBK>{pRE>PP9a@Yr}n z%|RJGsDCi;h3P)U{r3@KhWi#0>xH|Q9UOf46 z;)QOAu?!WK0E4mCm5MPgjoZf%QM{<_rth1df@4%5OW&Y0kywWu90LA;OrZ4$hIt+0x+LRF zJ9l+Ll#yy34Bi?$=H*|Yqdm<-L0pGq5N+(Nh$s-fL1&#oS6bGV!o<{|4wPvYZ{CMj znH=-8+sQ@6x*gYbidKb_Z_-NS)xp8z!q37c+draeL(2Doa&d|e?hKZ@T3r`vxe9BI zE|Uz)%+_CRVa#^0>}cBO0UTXBHkF4@IK`IiLX%T2`s}&mp^NRsU^|5T^JTDh+p@^% z^i<;biu}n)sGP7#>3GZRcBT%fPg0e|bGvmFnr>Q9ZUW1xru9Pe={3YqkdPfYUAl`j z*}Eb%-Z94WMaM5+@B)+h^2G0+K=yGeDo$y&HD_}xAKTkD{qDKTDR^$n=nswJ)MMSw zr(gO+Z~e?1-)(?SA1Gb4<{EXnF67wG)cX57vF6FhpQsH~wNx3n^js$OojMMes|&b( zB!OvD!N!7aj|X011vV@zgpOQJo79jgjF1mv)kQBfzOKGh90q-BP;c@T;eV_wcyiZY z6qvxn^fTV6SLck=&3dKIsfp9|nBLFm*U16IC=S|wypv&~8}B&BrRlGo21XtLz_ey` zZj>P$>`4|-YkxXbAlo!d&Ljm~Av$ZzVF2j!-3q1oto1_~UMVj)&lAQbFLz+fJO!Y8 zw8a61RY|tMuK}--lJ7$@`ZofhH`hB&#bf(aawsN0-snVivhxmX1rl{$K^CH2c4%># z{1(q2@uN&-0`jb<`p;qyy#V^|IJ*S)p3}q%bGy^QU;Mk3PCCqNMltfh`6)2$+Y_#K z4{od%n#)RJ7g&1{7AWqyf6}wMeOj!O_!Q*ApBE%tQ4*u1VFBdG9Iz_ zdol{g#Jc)A6rbbNZVR4OJ&x8%izE%)Z~C?|3Q?~ep0ly(MM}6O)rP+Jg>z~NQGMw-SdoPKLyKQEs9qRiF^4{Ung})4+-hg^@fQVds=+oMO6MZ)3i`H zhqi-7Dp1Cltef;&Oy15xaJ94AMFYWDRSwblUBHIL=U@jKmOZU~`#)D~jg+7~8#{195avz4c+bjmaI1pE2VR_jMX zx^uX4)w3RnE@Y*zl9w=}t**=D76F|I1`qtoP?7tSlHXN%OAz)}VsigJF#;0~0NRVT zald-7K=Aim*LNR=q{H-$l}!H6Df8C%&d+*Yv6MU_j?*IK2T4jtZ9(AKO53VQ;0dIk z3Dvq|NY|El!E9@nU;gwCFPz|7un(RY707MTTjXR%h9$^fUfB7r`dh+66V64jHhZyLB+%B0Jlqq4l#rT`Tq z8g%(z*z!<|hBCSjbW0Q*bNMw_(wvXf^@bluHy^4~Ah$=ocqt!)d;|*Wcw|0H-ES*> zG31^GJI9SLe?DQ!m3mWdfSnox0ZR6l46COC4Sz%@cTUpO7v|MB-!-sXBFh6GoQb-x z@9#6R#q4F-jqY@db$AUmsz-GwF4kH^i7KA$r8hmSH4)Z^oU!O*o8I^8DinEqw{xD& z(zU>nH5;C9?^JiRMr+mB&0KSh71#FHd^=C9kqdh}$!@PZ`a!h8 zL3v`+EpS^rns@X$DpmRc%SR-}w`QIWA2x5j9?iDr_zK1+{b6;G#qx=6kXELC;MhKs zzZf9$6%)?#y<2gl$UKLS4X|C~C01@;)CKA(Lla^m+SxB;nYtbh4C@!49Q=K(S@ zQyyvmMQZR4p7IxSjujokSmM&~=I9-Qf{|r6rwr8=NM2)a%QZT=J2z766u*GQ=vXFA8^L~IHIty1dON)aOqwsPA@RCgBW*w*}};> zc8w0SasTIrSq|5yqBJtI#kpG0flfU;fZjPzi;4*qb)ii~yk@~)r!P`#w&PR~ULg-4 zQ$RX|bdFNxVa#42NRl>LHxYIr+-q^UqJ_{|IF(w3&<@Gs1Xw*IW zQMyv){!j-07SM@b9p+kH#M@sNv5~IHGafH1OL@o7^*4JSet1L(JjFkOA)-tKKG+EU z0UH+!ydmT-1`mX|;KEuloe`iA^j>7>1Ep$zT?0shennXt`<=#5{fv+RV`pC;W$-}ts~-rZk_x492W{ZKv!K-~RjC>B7f+x|QdfIp}P zgG->jl+%gBu*CY7}~>Zj#154#yK zJmA=iu^Isu9kTxBYNt-oB)I-9;%;FYi6odA@D`D%(bhKGP7Y54)9+9bF*H{eVJK&^RE?fz*~fe^kH@>=|J<) z0j6l6Vb(3@QXpDLg*E*|>+_7qKu!4WxWlqc3!LPd`}bXULN_})MevXj{JJ`r%!+v0 z7_mA~+sxZEFd|5x_L{mBry>!3O#N!0Z8s zx4_7(n-55$|7Msq+<#IkR?M606Qr&$6yxccH$hs>@g9TELxCD82Wv8*C^_`M?i z>tmSl-X73YW+K=nl=#E`(Gtjg&wV|(fL0=b6vj?86a{TcyK9IW<3IJ3W=7v|9n_ns zW!9-YWlJKI(y0O=@^=^iH=05S;AQ}z#$fu%P#~`7!3WNL3La{vR9)**i1T|5%%qOJ zCIEjnMFJum#2^qf@e6N_20#;>i6DHXh;op#T6Diu#ohg(83Qz(S@*V2XJfAgEh`>WUPuz#W34Cq46Sv=^bDeFdQNzkE4BcF>H zOvm~_ofWW}iji~VCGBU_?T>OhZxb2DzyX9J1I0coRz1oVDjAgZ?-;SNXvb%n82K#FLuV`N5_c)GZvRqe7$@Kz11Y0z>1655f4;q zQ6)|XxK29emoWq?vPZMtd8CLY=B|-((ug+RlVaz5S#S9wz&2;1&c^qL-{8wBMcec=E+ElV#HC-uMRha2@s>iAg=ua7&7rnLJ|NAR@(V(UIzjQas zp9*jdrNwLXNjDqUTR;?1-#Uyu^EZC~pcs6A_PZphGPwF|&kcCwH?KdwDGaK8gL=lA zMlS2>PAY*GWpCguz2A;Tiw^Z*$rzU;PyGIxMy}G)1SVL(pLJc}f5p8m!;O>r@3;R; zwl87_aHU_F-ir4_zAxSEC0*-h45nO_c*>t>8_vZuMV*7Y9|egZGslms#QoiekvQz1 ztyy5w<6;9xyls=ChAUn|IyC4RZ97Z(+S3S+5TkP79Y5u}y%|L>&^@ z|3VNIPi6YCga`(KgkUo^TH9v7D#e4qh)losmpLLZ+W|07>$k2n1;sCiNpO00_t*5& zhlO~u+Rh}&jk`{3+x&eXEHk2vzfMKrib%2Rc0DZsu!0XJ`b|~i@n~lG6`2%Ui-P_Pb+4W55gQ#x#I8~rpzf5+dmE*%3x6 z^Hk^Cjd>?8i)4(mx3=uPt`>P;dl}vfHo7FZ4Jlmpg@)TIx9RPI~1j{ea(GH3kVcnOQh<{*BNy1|patSgKAw4VShY21?;c+sSOPQr*NMMrTzhxM z@Xdd*Ul|Ytv^QY&V4O?pXrv~nW5_gw^4pg^QJ-Etmcb%6O>b>^@Ytw3&$H6S3m9F@ z9?kEuBnh(VE)v|g(B&3dUNR?<#YaA7M)GKW5V>daeArVoq} zhRH7VRn?WzgEQnm=Q)65sf*$j6+y$`8!a+e?P-H4hLNz+}2(NX;vJjhGZO9 zh)uvv_>MjaTpM(5Sxtyk`&{HKGO#X6l;jKd`NKF=!u&Fv>VkVVlsZvq1lEEGeoP%r zGRKx1E9{x##_P)xYL|^qA5?(>U7x6rvF*TcA)rF&V%fDx;D*>z@t&f8pg$vwZ`)xRIDG#f=b!7F_b1>-!*g#YJ#dZLVe;sQkv-cPce4Uo0au7~@%B_& zw<;CZ60@-3JzeSPjI9%bg;Mq^5AJ8*_2fYJ z2(`P4vYZjTt5@SSn8w7f99D$Jr0I?bQ;Rd<;2rp)^CGiN5$nqYV0s~Id405Tz0}lc zmwjvD(^S?B`lDy2yz&CnV+}9FT%44!4La+^*?Kq4CmC|&uaXWva-ighwg~)QSI>9aG+HoR{;?!TT=!YLX1Wz$e90}n((sM+~xLP?w9p`76cau zfuVmg6$CW3!!uU7)CiUVDsbgHUr_{HutZeMkSDCqL-R^Dlrl2=E8b^jd!Zce)z7Po zP5Qb^xH4`=^`Y1jTw|MK+leuhkQ(>w`9Xf!@N?(l=Igh7JrPUo^k*Vwgz01zrS^YQ z1H2>p%bG&c!q4eM{?UX+2k0;-q^#5Egi)!s&iPwY?wiIP#TJn`EaIN}0T+18Cg6!H zpZNsI;FYz%T$abQ6~9kg_O5`gG7H4^Z!;52VV^09c+BdSqi{Z?u`gtBzJ(nscD{)GwlYFH-vkLFLCV=^pL7Lo-?`+g-fguKVxT z65cc`|EBWaRABeth z;fGyXVR=+Mu97qo88fYQG5e4Vv?>mG%>hMgh#Z}i+Mt__xI7PQ`Db&(d&9qHTBO$> zbziCeJa$}u>}8&iS}QU6*LECZSsggtgW%V?%q!>Ngi$ByHtUs0a37oon4oD_Ya4u+ zQSGxw%%IdH2Sk=H$jClacg?}9*^QNVnO`CpKw*q^)mPPu2S;mS%V zUkq2^i1&U3{ckM1dR2?p85ji0yXXMPo@%4o!LwQ}b?+6FH|$6NEN9u&OMgDl-9cHR z?ecbjd9sxKZ`5nXj#oG|Ao=}UJvzbrUFeLc5E;0&h3VvmqfCV9xRF|k<&i(hQeuo7J_amoN zI@VWyLrKK~>s%y=AQ=U*0ze%$7E)@~8w%FGgQyb)@w$2wtL;l(@GJ_dIo|J0+I7?+ zs@=M!*ne;Nzc;$H51{hkjsTD`twH6Q3s;%&=RyGp$k9)G?-$6&;Gbm20g3Ax)!!B8SY#=i8#a%v%60g1Z$;jdI6aaVKQ--<0FeAaM=>iii)Sajah?p2&8i!XN*i|c|19LXGUe?V7uuP2B+`8#`u=$+DN}th zS%=7f*Q}VQH@2hyR(8P;%v+!#cYdB{>{JAAjaF?aX@j9ooC{T(-j97(WPB;VE`GhR zM?*Frp(~}F^j%Usf0#A!x*o&Ry; zgU$c3V8F%1g{UR`!Dt9)NeKAX$dUlo08!=){{4hlNl$q~czy@6rd%?FtI1B9T_X)# z#!fMSF3-&Ek=4bmhZCF+g9d(m{{+r#S68N7$~}-^V-36|CgbS`D$`%qkUn*`*F!xl zGE9S00gw9rW=QyB*BfJXMEsYt%{qQ*$pbeZW9Z>CAo89)+ znDUShnWwLG@5R{B#B7b~OXz5eudcsbamQm;&+E+E6o;9{DjE_aAWlsz zUy%PfE*yebqz!!)Yf=6tpd6&CRWF?JsvJd%S^Pc^9TVNR=dwuZKM=E}$@L}L(Ke`` z`@D7enfm3qv`O+4s^Z>5r2@&b$d&Weeg2j6=PnY`S7GiY=cBVr`)uH~0(mu``EA{< zI3}B6umts)tKp?qbeH75Y?BSg$TWQ}AAaz)mwGNPSH{n+6~w}>O_mfdddGL~<809EW%|s{M6qxl z#fjI_62<&Vza3_(ohVj%V-5GqMW4^XIE@yP&yAWR8k%`uW*?64DW~^W!QUBm?_tFt zcnu^t_wNfqlg*~*@z`2ZDJHiz!oC&h>X6|Icqre$x;z&#hjv)(&q*7$2IoeTo8pO# ztk>g%rbg=wF^GB$qkrR$wYC|jpD+5%hqp7fHQQZyjvdu+=G8EiuN(`ux!3y=ZW&y* zIUbtfyxQ-xM0dr1`EB8YfQ6<_&EXc?{Ld|6k?&FP_b*`>Tm<&dAaovaz+emtR_Og6 zoUxlm50LrFi;Q)eD9eBAwf;Ixut96WHYoP&>2;03@!hu){mi=|(0qLExFjk{-uH6b zE{_;Fv`xd}a@cO(gv#7pMP!Ch-Wx6LUiW7ML9@Q^2l;z zf3I%`nk*^_V(Y)M@Yo;|#rzDNhV0ZT&5-q7I~05gRx;w>Ij*`#Xp}yoM%I=q;_FaT zZ=>h2@!ChE4gR_l45N#-f3DmwKrn}C$ooFHa?)wc8(kUjfW-XY$R58>cUpWB|yCi{}4T}RkG`>s^|dS>>R%Bi!!;oN2k z5;2OH=KbME9OJ-)(t@CtB>ovqZTu?x!`)z3TO`2&-hlCG49!>TG!=X&;7vz?MoA}I zFD-3OzD|WJyHC6w!VVy;ifDi|YL*K6&r{%UACB5IDhG}yzrgV;`pIUV0fD$8PCuuZ zBIDhpCRTft?+b^KI^-8lQ18OLO>wf_j@-hCiQe(+bLa<|NWEqBhXMlEU8!yK&4>nK zzDx6x{ygv}>A)4m@YXW%fZ_)hNqrN#PY2s(A+Exvmu3Dj9|?l zl1*Js2rL2*XEhI@OYxZSELK#c;-J^seOR`1Co^|XyLqf??Dr1*D#=fsJ z|NEIS)%W}R{jTf(>U!Vn&CGqD`<&1DoXQu6~}IQ0`@y zTx0V_4eLy&mpl#rQRH{Rdca~%k-VH5b1_uplipuWjX3)OwlHO$ZMPn-lP#JsL+{Ni z$7SW=uUDHdw$~A@;2SyQn4jf-a<~{%l;d)B=%-d=KGWdWakuTO8s*)`-wVg}9m;{W z+gIPeSrt0baolfGse;4ZbH3!g#{eW`u@T6_4ufLik-c#gS(vA83j*hznb~N|ouKh1JqFx9S**B|kg{Y!TxeiIoRThv z()YGZ*&hrk9ul&$1RV6mWN%+=LPDw(`=jV*ASyk$4JT84bYqVqE%pE|!;b$^OOjyM z8LYEJmgiE*U=!pi((FOZP;v8@&KYDDPB*Zv^%!j3uU97{)iY`b!AF!YhCadUxdMr^Loedm^9(W%Jger3Q(weT+3__N}HBPTGIKvutdB zu0DPjEjG-L&CLi|I{t}xl$qFO?ZZIy2&m0DZMCKAyk3_u9ivy*fSg$og=3j)WI?ng z@B{uuAab`AiymSJ=WdgkM7)O-HX5a@TRuJT-zaG=k4{ISt27$#G($h z^s7@vj>H-*T!nITFY{&GRW_rj*}~PQK_)!Wv&i64*kk` zR(FBH@H! z^O*ZA6wGZ7*FLuH1>FbRu1=*(>I_fq2-QWEG?|<|)uu#CyS4A@u}1Y;@eB+W1ewn7 zfIR+6wio1N%kgVo1>Yb#DJ`RO#Hq!&GO_(9ZV=<5UvOWib8dQk`|7Ke)y@tN$f!>p z%OHH2Ah7lAJp0}PB7VAzb!+1%GG}k3`&NJM60-VeH@oLWi>)741E5%e2ZC-Zt{*2% zE_9I534mj=?)tHmsTtMsr5IH7)0Q+Ru%yF)?@co9qQhNPkehgktYn+GAi|c zlvsFLe{Ha$Zt9yg#88xGYW)*0Gh4;yo@M2*)?B$f_?gG^ZuQ1O0$+v2CVVpBy|8cR zgne}Wnbz$F!TH3u4}_eSQpgf&=R>cquQ?8{zt@`K8jOx8Uo=a=#djU=;1$>YziiukqdW0N*{j%D-ve{urV)%@sJ9h1Fq^+!*M2Pg8(<+Sa`3S~^yKzRtfQ4q{l9=sQw9|0>pK znBOUKPpA7Vd|=>JrlitG@Ab40UQa*xU1UfBZg;V)D}g3mKN{&XxDdrHX~cEs@dYb4 zNJnq~2GUuhT6aEZkLMB1taTmjjnT9^;@VWw;H9G&26icY=4fs1SF5FsMuvVSNr&1h zqpwUS>V%-rarA+i@eF*xWkHY|*VVb<>bcH+v{kSbT+fdSi*ITvnEzu*@;s>~q$KJy zu#`M0W3zn#f-PK)zp)FshY8CDD0V?87>~1BSiDIJ+C%D?t_kqCK2S{<<46TSmiIt< zDR^H|gg(Q=IsC^W19vDL%|@c2(8Iqr*hMxY;d*f!92QWLX09{*oJW}oHbE;I9`M{Y zhFA+YKS-;~Ph?MC0FNC9HTLZssm`>=`{QJ;;99Qq4!eGw`}yh8`)N?E{3^yS5_B)F zkv9pm(2^LPBH1JWeB4EVI8J6bha2?LnRc2z(5qblPnLwSORC_Y+;YHrAcO@b;ranY z4x86Q~oa0FI;A;nKlR{c2N@icH&?4pAV zQn_+7d7)SkoQiGBwk7HJTSJN=As{@*MKdc4LgAk|cQj4FeUk%IH+k<7@{UEV>ZaO}qb3i|-w!4ri)?dK?QpOw~asBgGn zg6Duow#3)s-@YA93*rN$4@vZ3D{W{Hx4wMu5cn*U4s370ilDwZ&Zp1@`8vyvY&f-Y zGFS%M|H9`v#cLDLA8G|<;9Mse0z3`_;8Y1203WPr0&p_jbXS&i6@^Bnb6Q`ShWVAV zU0wem%t$OM?L)U*nIiE05e`Bz$;9g((a`L5AY34 z9V_qpZ>wj4)zCCjtvmp?4D=Ok^zU_mt|=5s;kY^+NERFb9%{vaT+v$=G~Zt4xV(rz zf;A*ZAFOdM~;dpgS$pzL5s{gF;r02Twt8ydt*2vY5V+MP8B{ zlWpgFd&mu14M~ME<%;ZO_IpmRVUkoF!0$i-e*fJc2H@G3a9w=`X#Aq?@*8i&#G{?W zDH|h6(6jPglNo7mw&4Pg7@E^Umo|8(FZ56CKR}(FU_}FgL%Fv&6x5Z+^z3M0n0!fX zz{`5Si#^!8PsKcEPF*{$G@nrms+>T_2WHHOJ;eqR@W98GUX$Y8{t{474%(uG$>I&E z*1oRgCnE!RhPT5Kmoh-a&$eLO@HL{H$3@u@_`T!5u3)@O>LV}&!E9s)KX5F&@kTU>Vf2@^WGz=h&?16~DARb$>$JM>fI+d%BgkHr`v#fWfB z+EP^r*+(Fq_s)AHfs}<1|M(wSXS*G~n&a9e?G=U_I@NK*f+nD+x}&dmh7veXh^lNh zwPJ+f9FOikZt5bSai|y)r4RA{x=|FAmQH)Gm zoA}P=V(@SP9&7Bl_IGK8$mNdg zMN-2E&t*Q6dt1s%#gP1&tR7gQKP7e3l)ndVJ}&<%=DIh@FJ$i9*#IC9CYozE|K}U5 zA0F6O1(zHUC~oNb?Bt_^r*`&lQa-5%;N)5ixeS92TL8{}Ac5$2!gh8v4aPP(fha3n zza)Ng_pP06L2i@mKTX0D#m+AC6KX%;g9!VAW3=2p=%K+sRV_>HZ{s=bc zFNNs^vLY^!_+`ffB$rx0{3nexVt8w;dp!mogis<5>y*8q1t+=ZKZDeTHccylQj*rH zzy8lnn=}JsV#yqQ?mw)7n(k>hiT*A7C{PG10vXXo8q=Y`w!kpTk-=Huq!k2|zLVI0 zj3>zfGZ4c={tz{&(UjGI-BCDW7!mKu{JY~0P^>uulRw=_sNE@G|K%wo@-(Cw-U^WC zZ=?Wo$Xlfr`|7aW)_6LNJg|%6VwZH|06-pXEBvHV>v&u7*8&`JB4gOD9rBY`Gb|sm zF(X0>@_Y&X|LfkQ^^;QRuZFq&ojE3Hi^5`LhtZ4tcUqaCDFWmgxgzcOEZIWH&AWi4 zOlnBPNXb$N^#0%v72A=7Ko)P*ZHITw*|i?6SXH#C6vh&cEDGe1j|uX-#f8VvUj4j(54(fpC~1)fbVE zHFY|{d+v@_t;HDm{a)uPkRW9w;QS2SgCzeY)=ux)^=*W_Qf?1E5Nygtzi zP+%gc0wl#2Nm4+j3UCD(GXg5m@4{J*k@36*= zF(vdbq)K1zCQ@<#;LH&Ug&kjAxe|HY5vj!;uPmOamH0#BLa(8gP#U)Q?%*^h;#$xY z`^IFqp&mS3TXQLDa;2Ya%qodm>Lm0$_G$ zI@jG;+VEpn)&O%O<(>YAgc_(ny0}K z@9xtL{+O9RFY9vru58zjv9GjC=hJYm1J)N)<(4QcY$_&*+myTnYYcwZ61R*f$p#&6fr&&0S(UV>lRN&K&A$%zA z>llw(W(p^%d3G0dG7F?6muHBQYBpGi$z)$=^-3sZeMnyILN`vb4!kPG3NATnHQ+S~ z1_72-@Z;IxKj5H&bs8bdloi1LQ#cPe?^cP|a&vmrBs|}K4<2IA_qT%rll!}yXi1gK zbYB$s?aq>)m<1l*_@S}VNe$5=La5;CU7wIR{v)|1<;?}F7ythe{v;hJ^_z15+v0kmX+fE${q{L`} znFO+T`81T^Cr=e7c}6=S6zZ9C3EgTwKyxGh33#;*%EIc#(c4a^C^-P$a(pqPnYi)!h#ZD&c-B3Xbi( z@cRS1DW?L<7lW@083_WvQE;>RV>a;G{e8y}*A9>nN_lycCSV?*6Txo~-hbi*&t*+8 zgwLrI?}2sx7#>!|hw?Dfa@lhVhI;OQ{HorOuNeLdDnxEPAL`Hc$reQz4_`i%f?^*D zF}zk(_>;~6*ndR?c33S8sd5M?NnS}N}47mIIwDrZnZM*;9pi+zLu5i8C`AwIu zLM!4uIxyu6wvy4&keKGEuSe&hg=5Y4CK89B3xsjwc?=UVy1E)h8Ue}z%mN=y?QKcU z0t>^R@IT}~V07}>FaKS7mT#ifw$|1@+2REZ^TI;(ICj^RlhO~O5_CdYk3Z+)q~5Z`b>UV&^hx`G_T)> zA+OHIgSn-$&8Vnko36jG-h<98zxtMYw#w5Wa3^V#!}hz?555yQ8(uGs`AY9wA86#J z>p^=qFz2r<_$!VND+9Dd8d?nJCmSjm-1Zl(IXtVg-gCug{mrf8kk$W^8_9WWYyRGM zY<}`sVFl-emiUb3@ywX_OQNCn-{Xsfe}HioDbv6nvhQZ6nsPCHwXe^fOz#(0Fv4dG z4Sq`bR#&H(@xI$9d^CDI{-9OmyP;r@`Cg}|Jgr;m^F+zDf#8#CZ4Fq>DX8m2=4Z$Q zX$Ek}6@Rj{{i31GgF0NNC0VVP-1s3Xux{FG? zAA2RgXK<>o%@O&+u=8+?8L4G{KG?7jkVjb86^_dRu2(9hXx`~ zUxasalR?hwLXFOW34F+5Wbc9EMPIefZ<7V*0U4#_fw}_Ey2!MZyhZN{uFI8r;A=u~ zHyE4)izkN%blDDy3$QW^KVzYXd9D4@5)+2=McpmmYI<)N0%9U0Tme3XIj4)~fLs0P zbY~{x-m&l$Y0Mxqaee4o5A--efOK)>;XRDg<)!c$BLUnE1(1PUo&U)SVT5Tzo4JSU zvP`4szqcNU9k6s-ofOHgR2xWConyj1lDgZqFOV z2aH#rsVuS2O2|=V#CmGISzno(3+0Z7@7(xQjCs!troX!Zf0HPjGpfJ)NVmkBCP41d zYY7;hR(C((YVGYk{mdN~vUs5?j~Td$O_tj4*|nnaVrW&=ie|Aa(zdcbFJ%Ob|H0k@ z@6v!K@=ga!CeOEh(X#EL2Zv2gL@t&tZm2oC#MNT{MKVm_o`ki*D&kKi1OW(bu>OSx z4)d*6bG$QBAiOcK8<@#tJeN6Zj=MS;=#84Ug9dSa|3#P&Eild&anN;<@ugvUgB15; zyoQI$mOGBe>w$N(Y^f#C)((vuD`z5k)C@`Wm0X*FP7-z#(dfq`?+*tg&+}M?Zw!^? zI5$r+y`-%Lr@TL>nByB3R=-lju(c&s(FA7T30Bq+46=?(Y4;{qV2J}778{OYkmtr8 zElHNhbxu$AVNHQ}G}zfB`y}r8mY6=K8FPU_d|me#$!T7m8hTQNlQvRH||N2zaZe8@cDAwmBH6cEtC!4U?04LdAI zfA(Zb?p7kW^2Tg&uz5KIAVOjIr&h0p$)kxc^_c?0;ZgJGqQ#9+%qM|K9Tfw%=tcZ( z@Xq58Z3dr`>SF=9NYwIIxg6y6B<_C#Oy`;yQc<5BI_|9?*LknVZS(}zRAQfd)y?+I z0LYwVhWwe#oc!|_V!@Z-!k00;(mAKgU`-&CX+rpi7CT~o3oOIYAB0A~FJ83R7Src% z%OnhUV7%>QQ_-gZ$j`#LMhD))lyGwS8|&U%V)q#M)43V8j=6_Q!`h;3=3-18avr(3 z%n~Cl&{LC4Z%Gw{-Uk6y0;E$Y>HKPWZnhIkk6I@hS?qtmYq(C{#<>;uU~00Wya98E zYgbiuVfQ+gqPW1})xLJSqVK#T*7VR{dDv-SGuHDto*f$mVtzS7536tByfhRZCD(ns zXwh{Ss`#;d{f?fy_L>g`!S7d{tV&{xK;Au+5e#J-oeRuZ6ZMZjkIjKmgU5X+9PU0t zlzy=`yD8R1dk&BZ3^0dksjd5I)JlCN5C+x9_8`ul*KO#Z&bR^Nd!5)P|9L$XoUs_l+YD=|D2 z$QoFGXj>bMUS~*!t&IausCj~C6FObrrn6PK?rH*7m^y8hXU3{W7Sc@IE#rlYLRiSw~AQ!i-G&>hd5|-xg~LUbI=SC3z@EbW>KI z=3&d$vgeBYp8e-7#oOj^w{lLhPU4)$mpPCH{}B3@_?;SHADo=z{+L15q!yratMXF^ zf64V(qB6OugCDpl#ThZRaOp|%lkd)iZ=NgZbJGUXO^sg*7kv{Lj#YI$Ks1Mk00jW4 z>rR5^k2LIh3RVC}GRXsVY|#JGfE7YMoy(KWa@Q+*FL~OUtts_9jQb0{Q2KuYi7S|0 zNNZ%teSfW(^22JtEw08I^MGRq^5r+oKTZO;iQZYpWIb=; zG~8$d!&U%R2634?%OpE<#65odRX8+I4bv=aA89Y1oMmr^`)<-V|i}p8%Lm`3)Q<6EOYd)KkED2_h2Qhh^2W$g>tv(O%*#4%% z`ef;nw1V@IQIl^~yFiNp6gD_6s89;%wtnsDCOH$wy}X7xlej$KC2*|K%+hRb!^dW8 z=ezjSFhUXT+iGfUPbL>slH(cFuFHG^x)`J>0Lp5KE7u~np)wUcihGt&n2)t8~Q}{=Ca$m1t))GG$BG`Vk zRib|`#P-|KRu8##Zgp%i+{RG}a8*oKCY-Z?p`^{QKXA-#=r}yApzXm)o>_{8;O^-# z2G)L*dQUf>rrZi|q2OY3YwXRp;7ga2^$q_iTh_!K`b;tq46kvF$LCl!4Gk`rj}OP< zDrf~Q>$5H9U6rJSlXn+;!OA$jj4r=l555Rbh82enYtVBUL0_Nyd*SGVqlQInxY{x62B_@r&vMe38K{0ZyR|~ zQ5WM?zeU5>$XI_U)pA_JFY-dx%C^vMI793CK+2OZMUidzG#B~%?DWvXN`DzWV`y2T z$HwxGLQdhEK{xbXxR$_(Jtg64&cl6`BprOQ$CeU*Mn6(*k5f3vQ+4%@j4{5qG&r>^ryOw%+ao?rXgi z&mjY$)O34PrCN60nk+y6m{&5&1XNz#jYYmS$@4I4_fv6lXcW1?OrKjC{R3RGG$cNm09<5au`b(q zV)7;ZW3pADgZ$f2ULQ~6IK%Lr?-mDp3=un@^gY;-a7DZ7Y8#?67eifDdk{2~QFM!J zsXN;Hi3OFqD)11=wr@nUSx>{P%EiL@&GSna%)f7VOqQaL3WkKg{nD7acl+7D%^`{Z zx~DN4oV1KT=Odj~M17po=H|`aiXU#RzK0&Cr8#{vWz%P}*Q|55{FQRh)%Zq}LVd=A za1XYD@Vku<9&U?__ex2w;-4J7WG|+QuWp-oRgNi_WkWx6W5~Mo#kajbNdGP$IzciAj^xY2^kU`P}kS5tb*9ZSo1dUp3SZKa}X3; z*`UfjIc5H1(uad4wNSTZi?QLH!Gr6iWp5%NG>nMHLE1@SMYkZQ&f;R*Gzw+LFkt6SAMZwor8ztw%UsFq|1`XT0; zJ?z||lG;W8(RhMouYFZgG{13n_Xb}&DN{tDW_nrrIXp4-YIImc)O zu2Ion(c7!m>Qaz`Uk<{UWj{;QNyDr+ccR9y)~nihwpiAsI2z5GTx#eXyi{xu$wlaJ z>`F%o_vAId8)brqX8qQrQ=TFUs+colIxdM`zu5f3p&G%gXfRFiXhXi^@iI9zBQ>k{ zg=HU>b&eiEw(A~jU=6;d{~Zq`O*`a}y4#m@K73?-q6Xbq8}8C(c}tMlqDygX<2C4J z89E!upLynT=FdBFmehQ__mqBk5ZQN*Xh1$<%SXb=Cee_WyWEOh2BfLzRS@0|&(vNC zwrpILTs7z7@z>Sa)|KTaW)~5dhSsjHs=3{8v7RVj75Mek8nUD~EWe)am}ZTamI3RG zTGQhfv7-5(Hz5W(lo$1}O6f4U8TO)&-zW3jVzrBOOSRjk*dE|!T_jABm6*mdxHWNc zeG7)P(<>#)PQv5;(~FeT=9_$;s_j1_83m5Lw?uh~d-$4C>P@#wh6DsHr&q1HoPJ+- zl|Gwl;=?M$iowgA%Ery2q?#+2H1%*8rq8C(Oo}brQMzzFsuLyDH;oifXX48J0a!*1 zsL@OPi?xhAC>2YjA&W&vdB56+$ERDdWKJ4#$-wCgRF#o*PI^+Ny!^q7l za(Y!w1{APMo9IJCEF*xedLtd`v}SJiGTNkyHuA@8$w@3T#-FBqnYH#GZK|XiPjTNxWAiJvq>4WQQA~$>%)LG(ti@RKbGDI5Y$NXoO|Iifn)RRB ze2bfj;l`(MZd=22a>0<}O?QJN)VRliEU%Yuy{j%=!u}#WPs@Q(DcS(X>uoe}XPDJn z)R4o(_CGWNGy;q@j5Y7XMq`+RM6Y637;0qYvwk4YH))&b`smHh2lKGS7GA?~*%W53 zih@K=kkqKf-{Gye6JmIsQ7;Z7O=$ zI_}JqqsiQQrKOHvxtODL4X8dReK>+QiP_$^TKXj|7vk9Q>T|?KEqpZKKj=pCnb+v0 z*~P)I?;dugZNj^My1C)?UUAj-#%A#y^^iQ)y}s2}bmvgUJs-@lOhp6+3OkOo!)~pw zZ>udyX;n&^Sv#M4LLEhYj1EPIx~m*^JOp7O=;$CnkdT{!eV{*D?#n<6pZ$oKfbcd?X2c| zf5P|+siajN*zGC^bwrXvBK^>>#*XZgyGMvsf)_;U7qm6eCfPa3^QM=Kg=Rgz%rLdo z!Q?{X7Cll5XZ*DKrz80N_Xo;)gi0P0f%^1?$m*eA4Unb+lHWh+)aSYJAY+~?>jXq9 z!WTY`M&9dt4452l%Mmo;k^Q1iMSbQvW6hOgcSTPs&u)$*=4}Lc5$EqOgPQq@h`x0*yl_DYF#YX z%+0hOa}?v|67=4l@hlzcEr<$8Bo3St54P~@&<|I+&v&yKTNcCwFB9B@&hu4ko7*v- z)uuWl>me*bu9>1R0B9#lwG&g4LU6cGUqf6NV~QQO-Zct8M-B+Gae6(5!wjw4EE&7) zyQ~vFM{>(DTT5q<30LDa(=#22D*h)-0*AMZwr&z7cbxJ9E>zOTt1AVy%g-Pd3DI`~ zS2&-TsBHP4Iksq6Yxq}FOHN`HuL5*`CeMO#lt9gcLXqUk*>v~C#mDg*D4<$6F(SGc zi_a?Yv6DQ#Pjt_B)FeJ-GRX?RuEqFL5+ayk#dSVsu`=QH=J9uwm-vYrs>cFsH5u#0 zR1XJWjJI@U%d6)%xq8rNnI|i;pdP^t5!QE;PR`y_^r3`FM&ikD&`~*YQ=N0VvqQ(S z(T#brUa)^j>7@ADa>;$tn+q`Tn|l%&7NZfIXPM^FEGaQ9VTp#kuGwLg{`sCoaZfrG zM0pj=vl;9BAN3C72`@&)B^R@=d-ACQ(1R#+e%y!*RdkaO>FCDF@fr3Rl-sttYL=Nc z_N>kt;vud#U)l0{JA#tLAJ6h`+1C6{=Lo(_fiqU@xAUlJN9_PV+1E#?j9?~QgM41( zYlWrU^T>W@Qmk1Y&*N{wlaed!Au)tGS~aKHka%A;NI@26W5ycPCDR68t|Glm*|cRg z8)xFLYY8(cML~xQN;~^!m$j)rD?zFeW2b1^QYYi6$o{`k9YBIu*^R-}7o(VMx8lgL z2QA^or;~m%n!M3&%9!N-)}*G*db&()Z$L_J`qvq?EkaVERs-&H-zTbBryX3UT!Q-j z)z0%8T5b=>c5tivaL$HLaDH`k2a0C&Op~uBtPKI5K%fRBx9AvBiFb;_l?mfjuPg%u zB9};YgMx;ttjoLG9O8|0Rn-SIQ!y=jWGX5Rfw+T_#rg5xkr?p{`~iX*QCO9%w)Nn) zs`b?=wqj~p_i^j^8LQT+o^jC~&N{1E+F-yyM_Dx0&X(R^ljw`PsMW1IAA4{AdtCp(x`WI%Gd1vSMk}uLHK9XQB0(QPomI`qxf&F;hFWB6^ag9!@4F} zj(kaF@r!0O^uN`9H!BYc2%mcaLZ<-sqChEE!&+r|?Vw+qn33Zck>6jK%7nwbTkU9u zIw$3{BqfD^fvQLgl+C*XE3F?c$tfF>#0_AZjGyzju-1FuehBq$Q(7*IaGuttlA+Z4 zEa>Go!S?N>QJ$Y4+HvOC@$-@R8T6_cisl7%z%3ILYwR=ZW+_+Ch@K;v$?$;?^?e?4zRiPLuYl~|u1`g*YCZtH*`F%?3|{#0GCz$# z``mhZ^?gGbO}LkW(dYj`P;EWvy<1tKR>YZAL&N9*j!UcMOakOYfivZPET~w(ErcIR zuj=}8cwPq#87W|rD!{i2GQo5Yv`I+g!dJG~tNoAWCuh`{Ee$WA>O*xRu!JEE9u#1* zWTKnL!!MT*bVf6%S*+_MH;|d3#)&VbdVW=n*8#3O#eUSUB9uGl4QLJ=IP6rfE{Rc- zmxhw6hJIZ$32%+Uekq$(y^(j$Gf?|G_u@8lqhR@X6|I*88&Moq2|l@B-Z{A~ke9Bu zS_)i)x%^{e|3*i$KhK#>r_!AJGu{aX@>N0R2G&Ak{RSYx%Thb__udA;W*odd9;GQBrlpa?&;eEc)zSw zGviG5r=2Oo3ZaA{6{MksyNiiH+50B{wSuyS`y4?Ex0j19OI-YUJc(S5?qAS!2~%%! z+cMUHOGDH!6?<$Ub%c+I)g?No83@RCS4tla!HxL*~zQSLHTV#iEX=nR}zx&%_qTpAJ6F~%bZI(q98u<*f`M9=$kRt zkaXJ=+wpj(E#vd`^U*T}IK6c-KK*7QeuVQbW*?_zf@8+aj_!nRj8p)EqKkVof5dlW ze0y6w^g`BCe$3h@M=}1Hg6~L0)kk*O@(GBBjqQo4^y~d{SdUdqj<1hT4>1p%6559?q_hKF_h?@DZv`|~RJC9|CePEWYEOiH8nnX2 z1XXw>mOzIw=Y165$^*9nb@RbN<(X9GrEOPW1G%u0<<+v4xOqOVlGNan7V%zjfrtkxkc@qrE0 z1G5E8o-?~mHY~k%&J&^R9@vM*BYU~;U2O5_bwO5*@3{=RPkA6XjLC{~y!nc&6;DCjv^8yDwZ_TYxWCZ8^O>)(S9@*r1rAm(appI+|Q@c7x6( z++@LkKD@^n8Jphdc6l>C1E+YG?A${(BdKl&#O|6FQBvx8Guza*FuRg`-+OtfhqpEj zPE6a7w`gVU8U-vEAw$L6q^uL3rpD=2FQFCoB%JzKmTDY(iTQVVhM;ve@1m<&W70Of z2FIbLKO-l_%L_@bXW>D{mC+M-3UQm8PG@y)h~}Eb;1!Jm&u)~%bs&cy*8Ak2!r5)x z!qi9Y(!ol)iYu;0Nr_S5^T(|&q_(zx4RlylJ+H`>;7GPR`)zpw@@fMsM%E3k1Uff> z&9V^ls#yl6N@T1Z@GA^;_~(UY{Y7-sxmY2ncKk|!i^X@XS)JBhK<~)>u27_ot+rvy zB|qXm)#%z6C0ykD7}gnug=Jxhgm*7Uh$o>w+s(Et$D-XRK+D7WG{@q2m1+KA8jV#} zko$B|&z?cgp4p24K6$bZ&8)T{x`(IH`b&@*7#wKLfHbc&Q8)+<0_ zjVPQ4W6AR3FhEm~Ev6n24UQSsTjZZBmIQZ$+8ZuDcbx6jsBS+$d|0gePtk#g9hx;L zJ|MTCPbbBN-Rkg-RnR?LK?qB`sJ1Y29fuw9U<5AWX{ z9ZC90hX=)qOBQ}}NcrH?oRe%Ayt!)OWbnt+#*4GBl7whp9q`9sHk)19vR&-k@q6=i zsbV0vk~X`YSSD0CG)%>q?$YfEH5?t3jiwL|GPu zh)6Lj>9q^-!FrVU&>fStX(MZ=H@cz`0 z_Dz~x257}$5lm_=yZxkMvhPw&F<{G!CNMu{ZxY|ZGaA2^Shl;o6S*mP1rVD;8P>9i zY8a)~G!|n=`=sVaewS0aW62el?Va++%7-3wJQ0;F{Oll0#hXN}9RZk#={XpQo15OI z%KFx82G(huDjkOIf~ui$x#yPzerJ3{np*>Atl`3|c|(z*JXU zGun>0C=~$r3l!*|SpKPfCokE%+O>_LjnnJvg-gbU%0NCUi2W%??tQ-~Q`&gRWL=I| zFSo_@)uGV&+Alfx4P%OOO7zu3NmZZvSXUWzH$C|kTM%~^r&odssE{=I%Wh!)>pMz$#AXB~Uj=33(&)48$xGtzb)z*;4aMgB&h$ zW^;Pw5rn?mi~fy|KBg~;waK9;{ zo5S@9Xq%w>hDnWnhvdthuksD!2DrM9nN9sW1>R*a_&Rc^ zUtoddd_DTE{1GszC2P-HH^N>qDv050FPbo6PIo^vZAR09k)ZWAa@@g1Hb8~`SO+2y8NaNLL+(CtK&zZG4Qd143{Hq<*<7M_2Nd+_KE zncIN291XvxQ$FMOL2YTowr@Mun=_}J2zpyGQn;?cp?;B(?!e_G{jyK;YbF?jlScYr zs6RV6?LY(NX7TDTZ9isgiPu6DWb6UETMulx|4iH2J!+i2X=WXacp@&W)AA3YL~?&e-Vl^_WUrAzN)@R?{z)Oaw%?kM{bh@A;@gL zt#0MBiR4xd0{I2o6oknvf1MZYc0rm!4n1Q{Bk(TEOx>Xk@rXVdx3$NU-0d{~d6(=u%nP=Q`0wdg{G>yY~ zK&o)C(Z!G{P`~jWeOrCMpyKdNa21j!SI|vF*KUAgq&6>lQ%r82FeLy!M9!?E6pxqm zs6>U}FBSyNSEn6tLRa^J3t4WGVWH(Iiq$OjGh?9b0G{i8eZ~OxE0Z?k^DFqehAcpC z+Hx~|@R}edxC6ioCd#efukL!wNt1hM$H7goY+*=Fo{6dRs6JGaFQwcO${q1yYGAND z^bN>8m|ite449LhOYzGjwF{{u+_E)2`6G!F`vB)@Kcc@cTkl{G+q&1zONnypz>l3! zL_PdX4O|x+CuM+E6&s8xPj=Zo0*fmHd8J+)Y&KkH$vxan<~V&#eVZ*1VihZ8DaWld zK03tm339Pf%7X|#%lsfLmLMld3{J`p{%6ML#9i*cr7-%#*C(C8q4(3FP}}>mAb64; zcC}3^q;D~S5sw6^t(A@E!-bFB$WtXqhu)zOb~^h-iJIW6UIiTa)_y> zW+QT$pKJw~!4cnY9Hm3aKa+ZeR^&DXs?{y9KXwT#`?nKJXy}sdc<7zlcNE_JDANU~ zuYkY-Pr1-k%^OEMu#YPBxvk=VIT*+{fHFcM=ACvC^jAdgm(E06)5)80yuCPmevy4 z0ROOP{3K$R3|{uf@-W?xmNdLM-kV=HwA^OWqN$I4IW!Q&;7of>dMR*csH6w2e}?Tp zRYcuMkmxbc3WcvVzjF0x*bLk$=sQJS3ck30;l+m`%`GCBcf3h#u2Yp#8FR=l%h&1^ zFBtZ2SzlZp$F{kq7=D`{cYv;6iM#V78v>>S3b>I4sqR;dbpQ6;oar_%{opfAnmgpW z1Hu2fC8N>wZ?IB_Cf^FLeir}H2Z^^{jk|^lB@OwzB|S62{P4sCx9#WlqUylrlHC4p zEGMKx{MRE`Zo}h@mk_v^#8XDy*(WcRqO=Z}S)dGO%BWCMm>3>OOGyay45Qf^m?nR^xpb9QJXi(N;N@v zIt9Z901qZ(Z5VRyvtWibqHvDf1@x1;fEHL%fn5bJcsWFqb0_w0a?(L@%L1BA?QvK4 zoNE21iTkzZ=%i*onO8{;#j``J8ofx>74wwcrOriSKCPQ_Of{!?_8C)7nh3BNKo>TniR(@*@4M{rn z&4B2?c{b=@OSvwzP_UBb_*&zdZn<179CSD^&{=QZ%jFf>kSfhQe{D5Ojq3+pO>>S{ z;0jGeahM@%WK=i$k^&flrZd$fR_5!(NI0reWgVx<)tt#@I8i`{I%{N_C6@A%v%+B# zUuy5MYMX90`s<@eLz`*{#|4RAbIWafJ-D*8kzbmsp}VLz`!dJtcM=4=Mng-4jy-B> zC3A{)i&+D(1mk)AwCjXINSIzW8f}aD+!lu&C@oIbL}ZH5I>+B}YFSs?PB=>Gs^D^W{I`epF#@qzw5nRg5u$>}3|h+n~or#@*@ZcjwOt(mXxn)8}XhN_qSaks*% z{PndnyU`+s{4*MW1~@vfRy#v>^=c$>0p{Rb|ElGspy(c~Sp{10;Yru=>9hM#Iee75 zo|oVg9N;kelA76dsJt0DSLNqkO&HxM*Mg>x;SQ!;UFFsW>2xX3wPdI19$nv)A0rud zZ+oAn6ROP-Eu(U=8Oh|P0`uLF>|`K|;E zVjAle&|sY1cV0b7B8NZ4Zu5q9D5gHfp$UM_8up zZyEtth=AfJ9tM-Cbk{7vB>VcOz;xpMKa3yX$;`Uz)jz`tP_-;NwPt?+$@&ito3Ylt zKS#>G;af0;fRYzLby?=u?tu};`{t>LQkzi2eDHbzWO4}yZta497;8G;fva+$*V)kG z`mh;}XE^DK6zv^nL6B1=gAHcvCq*#9bhUp1{UiFtF#A4~>wBUme1ipii^Z`MtH16G z1%L~KxdaVK29V64T#(cS7K};HDxL=&x}67CAS6=!{Wv>0Oz^+wyc@?ebP)Rr z;GUW=Dzpy@cN8Da_v&eVrovJfdONcT zg9EJ>1K9py^dAih@*t6}TC~?}JD^z9E}5qbT96Ox(Kq&=S^Ls@AL$KWM`@rmP`=ln zpBa60AKf0Ozak+9fR{LmaU&nb_63~8wGF+JUt=uR&weNm#lKj_xZe(3DFxGfvhrw1 z?UNEynNX9@dRxYz(!pB|`usgWKj4w@Sf{;%l#&qV+e!=D(jJG@+zSVsIJP(J=y%2+ zppEs{uFbGbKTG$>pM$YaYgS{^VdG~Mdpk(CvlWEpfSGt_^7SBf5<0G=fxfMaS|J;s zJvOyJMc!Yhx))3`?Wvm443r2zsGnLxjYj$mp??~_eFyHEgLsI?V_6nG#2%zsH|_z- z;M4}?A}p63XhI}I)BtV<_P#xGplY$0bd^jK92deiwzZd+F#=Ay z@<+Nkl&XNgR6)_$xz`aXyfL!|+K4!%we;&^!_6-X12|82MCe0k|3U&29z3>aEQn#+ z{`ZXeMZ~^ybf{gQIZnt)t6c{3#b4@Qz`4ok@bXF{jHFz^yQ4Gl-FFNY4Yfk!v zRV`YSy^jPS zng2l_5Z>Y19Aa>8-?6%IKx^26Sx&#apMt8J;vXi%6F)H|x(`=hJ6&*WjDL;lQZAg_ zV4*_~)yaD1twHMf4Ib6oHjHP3Jf|w#l-36>FxD*04YpNV5v-P^gs1D`TQoBeE0EN9 zV>B$t!@vysQ5%=n%OBhyv-|wd@w>RUs`lKsp3lGyeP+gR!(4sK9`dK}V*LFQ>pItWcT$kOaXsm~H|(TzNwwriwG_es%qyEBj}jX)E3 zM-HQsA=BpvGYn#uGlkS+=41TYgCL5@_fl17SIC97WPzm3rPG4aGu2c%U_w~2Z-(Cd z%I-y*yS`Ti7vK;pbKQ@Hi0<**V_^OUw^cdgvvOe4c5`Fj=@LhN_L5Zlg$!*uyWqE5 z;ouWZU!v<3z2m4<4*tFist94a9k9gbITTYWLaS!vBUmA>g9f*9W_(9Kgy&?zB*>A3 z>&ZiCErs(Ky?+8|z-m01pFqdtlatV3kgih zQY4;-(b#owJHTAKeB?yQ$T*mAHHB-2)u<5iQ~mzf2i5Z@bH-J=y!`mmz7Su;y!s0F z179x|?M9<3Vz}}so>Bo-$zb^S9$ZFkil~v4`Z3OSZ5>?L{?q2DUQ^(*Uiqn=4Q>$F z+&zj>vcp^hWXrC%Q$cQx7JT_NQ%sO$x*D^f{#1lk&{{nSl9<_bWlBnENwausbWM&d z%He;1ynk_|5Zq8&uzO`Bf0ifL#%6#M%C`J}WnFn7RO|a6q@wM1v(!yga*d_5T$N<$ z-bCug$Qqf6q#GrbWIaQ5)hJqQX(7_WFhi&bGb&4wY%!FjFiDdpgT^w;?>T2s_xqdr z%Q-W1&ilUSc|OnQ^LgGmK>ZjlGx_jec3jK;B+5ovi4Te4luI5X{3=q$EYgRrqmM!& z0*agm8t!y!{1`gTtVoJ%)mSu%U>|fMF93>$YJ_84rJd6roa0Ze3~Hy=3gzW@z@lxf zK^2~fsv5!qJZaw{0H5T{S_vsiKk-A`yyDkiE{^fT?1tHt|9pp@AXYaOH+tT4ZHemX zVFPP7@u8uPiE7OgOB8v5u>AQM2|UV5SLAx2c8O__gT8yY=tDr)e@1{#Hv78JYN^IN z%O#ST%`B@_+{xw%avGv0mw2f&4|ZGET;>8XD<(Aba>nLNcbp!`S^0{j2VhNHbBWxo z0XTF5!`R+J@I`&6b(&eFYc7?$$PF%FIkFIHcnQ8kyKV7geEZjPsZ6DrY*xafT9jP) zDIImvkWpJ0ix=5n8ffqN$=zS|)gAoi8{`y?OB~QL#1akJdR{X6F}p6L8*T9XERq~U zBU&%z#XptivaQLB2A`AYiw45{xI`r{Q8jum2pn3$9SnYWCFJ_vMFtE+lvwVHS(W|%d?os zjO#8Ez6g;**>l(m{7|(jzVTB-`-M~IEezhb}Be=jxc@U3*4NmOv5 zxaNY3j2z0RR+>#!{V(o9K+qlecr*pprFL|{9p_=>P{yluMr{r)p3A$r_hu)simn!L z8WIa=&DF_YwWW_E)FXa2tJuo+xt<+(IP>e70i5ThNy$dIRCy zEKJlaQd@8>!Z~hSXy3_a8>_U&J)$BQ*QiLkqtzS~XHVXB&J%XseeA+3Ac>-nC8LJv zpUWkscQ9_o?)uk$>u;^&^^FL;Xm~-}P2p`@W%>B!>a#}kHioaJ__1$E7|PGyx{grN zZssMRY!b@DUC1{v?OkYkL@B{U+fs<$m%R=QU8JYTs;_s5&h=ALwJN_Za zh6K%_&eozgCDf&r=G!So+g%;^8!mVR1v&el{gSz}h|S>pMQvgrk?NWrWEO-3Wmvj! zDl_6YsxMgYabV{)zSj7La4X=|c=T&Fg2KYY?Y1c}P??f68 zSz2ui(yiL!Wzb%h+*DmoA9?6>yC)zpuh4B%a%i}Xn#S0XR=tGAxLm%AB=cEVl$3BK ztU7*A*~wjrI8PwISQ)kqNYU7=HY|68PT1iDY)8^C?fOI>PfGF}z6~~*o8M|QspP|3 z)p#vAc`s*lYA9bzb4Ir8IIN|g6Ovt>=2X8k=V6k96wy;Tf^=l4!_w8MRLKz?QJ;Ix z7RQOD(__8V`vkLbQV{J>ixG|)&Ju9CW*N*q-2UeBal*M^#^wYM1$}F~+)MFYVJgTf zt<@+?CoNK@bLab*pgI1dYPpYPSd@>$xEd(6sN@1#Y9e+!hpJ(Elx_< zqzRigbp3^fKE;+`c4_l&+2~=Ks)UJ0!b(Qi{E-s99^VcSTx2KK&u-j~SKcf}SIIm* zi~w|zL{8f*YMHF1_A_wJA+=FdYo#Y=D}=D8Io;iRCEXqvTQ*o=;Lb zmU)7eQP}3V{<_h>%F?F^-)(Y687udw2txz;5sRKnDLL7U8#OLj(^Rx*8^r?wUJvqU z)((d+>YQ!3mA4FnG!IW6IDM)nga`6DIs#ZUlScUMX@E;0FW4RcT+UG0-TZKxO8IS7 zHp|XAKC`Mm)&L|kyBAX#|)2)4-RpOdTB4b<$-sUGQAm3$JHGnW7`5JC=XS^-}3ay#*7J?@aP}J5NlGl zQd(7^ZUDqX>rOw%QZ++xvne7lyd1&H53Ez2|Nn+`CfGr9oqJ&rRKCCUR41;=D)(?n zx;3)T=u7FXens$>o_Yy}v5rpcp^teij3xf}qw=?OPUx@uqt3h;X) z;`+{qcCrBAcE8ZMyv~wJHadg}1;9z8GAt+T#|pR-yx!rF*kT`)G5(l3R)CUYLniP* z)Zlb`q4$fC=;-b?yr%|4Nez*}Q^A)*`@3X_P5Jb2cY^$LVD_&#M*V&9WD#3>v7;%2 z2#e2*`V;JU?gnSSL2>#1%*C;jp{QRPW4R&lXYT8}lA?AeIn6encc{L3gSz}Ee;@+n z((oa+*}}IjEq}hQX2CY^v-f+mS#6%^W429OG~78as8e$RK>Q6n4F|Ad(%I1h1-1q{ z0N7Ku-VH-^h=G-h+M>k3HQw3jOZ`$liN^io0pS$e{bCIL0?T$78A#lh$n}AW4sH>2 zzU#MZh`;#og7)iH*`iM1!sL;4Mc?Ubeo%(XU9nNlOr2?|ljA@-&r+|PnNz5uB5AeW zLbXbJ{82pSf7!+*OZ0ox5)pz4IwzWkFH5*4vA&7cM;!d*F~b#?SoZ)bUrD8ue((id z8mPM6K-E>tbj~Krs>v^6g=g(JV4)Y$ev`_0jig`-bUOJvZ^AM9Y3%fS|fb+_xxW0~wTa{7*gwY8Sjp zpY%w%bi+Kvau9eC4ds2mM-?42_?Z9XU;-+k>KsAuQz{YAe?8Cb7R3~AX1F<_)9f{< zD#U3+UZzf3EJ0y_zy}XMKak@kT8W4ma!X*ph>)_FiPdA=i z6B7|SP|JT>_u5T7J9pQ|@L&g}L8ZrPA~1bp|D1z_wWGu!mS*RSmPZKGTcW$T=}r1% z`0bazCq8JZ&bkK1r3s|V7mX!?3qvBSb@N%GtD|uqzg(HF4-h^%I$fK$OE;1EGDX`* z(G8sise6gK!c^GG?%*C(x`PJDm~h}N=&e8HLy%ODjG;(&Y0PRw|F5T7)=mcE5@^Q= z>3-r8_YQ3BUc%#D?37!d0&9Iq`*xl88ASab8q)lA7x!_*Qum(&RJdwoJu=M1`riLf z6*|wi)cKn2SDn$r=M!Rl&dWN+RjjuwqbzR#1~4J|2%!i1amIZR#LWNAe&I0mfF%P- zn}FQBC=`#ZvB;@8&rbg_9mj>54yKBHas7$tRjAaF!3}7+bS-y_rJ1Z*9#EbFNv>3v zz~;Gl&lO7goI!k1nVpldM2*lkma}3#J%@ii?V_x6J#?Tk5GlE`8&{3&bW`OWSE_kd zJ`@`{O-(d2JIVNeDMwky1s2rM=9t35+_LY@dX^gseV%f=jtV*@qXQw##}VCnS-Q+! zihFMwt3ZxxF7o}OP&kfU?Yt;n)7aUl9VN;8$kQo9Y-Fgd#e?-{4OxzoUZ+QK3^mC) zO@xQDH2YKQ=iC~Nf?XM!YUPTLgkZpa|BMRMD>om>w_TvOPr?`0s#%(DlldCpL-LL} zkv&#hsD2mMybFB2PoS|ieWjfq`Le`Xy(d6vzuKI8E97AMr(&Kv%z5Vf>%9_LUjPUO zjt}!zA^_UU-X%dz8GJek$WO6a8OJrUu1P#s7&+b`TU4yFENgl zzR3TENAuaFJ#5#SqN{RDu_Ec^bu~vZC@J9o02()Vr5jbR&irLLw`CkysI(q=`sotw zNwEHdx)3TwvrR}B% za_U*NGj?YJn|)oT&WPanGJRSC#~<1!yf~$|kp8dpCO@d*d42NQIdQLECGl1ByWS1R z)Z*~xn3LK%#yHFL|B?~ExoWNIlB@S{371NS57)FVjxoVTm%jkL`M6+tPV?7~PCT86 zEiPr;0O(g<^@ARi2IBnw$I!{xW=*P$LQbw{6?bX>t6W+|6d%(_2M#}pd-WbTXX`_L z+wNSv$FIXI(^<|UP;wtG>d-z+?L|@Y{vA|gxC7I_&5O1MX<6%!#(5X6hZG*LM5#26 z1^qS+rATnnuU(&4~AH{>4j6U_H)w)T~0Y5hzY+1o;_K z1ZtkFML!CK^!1b!J6Q+ZZn5Dh!&f-mV*K{4TkN6pLaEewM`(XZ;^j;PNGrgO=oJGJ zp1`q%QbF8&Op6|$zRX~5pk6B=Uj({qI*TBHaMHz;Z8ERwW9xK)8hI($G*I9VJd~H~ zrXij=RFZM8495f$W{nAbocuYi)KRVFVfLtj<;j&A^Nm8%J95ni`xhW3)vR6AOAJ^9 zaZudJK?F3S-GNeE_}K(1!7_HaNg6I8enw@RAAE9IOn7nkd93X}X9BHfy2^$yepwHx z`uMTOML~!2y%`Htx&&&D)*b_hllb8;lAHLT^3DYov=Q&E*B&$vH|w$f4S^nkQSe)& z-bYN0gsQxK_7x2QT6DHQlF#mP0IU{2C;dX7IuKnehSWax%9%}AcqUk1nbyQoz{Bn@ z^J2L)++87*LbhAMr3?u}R#V?SyU6VArt;PQ~Ij4Y=|EgkI;z_wWnWo zeDkjF!~J+8j=`roNjL%qwx3vz%w^%SRU70|M*#3ZJNQl+ee2kq4T>alg7AaWqhh~^ zUt40!*iTLB@20mN=|5?sgKVh`9gIcO9%_e}fS&jSu*1sJDOmv-L>%f91X)8)vHR+C zlFD6q7T_aa|K_Ab)GR1Cxq#IRi)OpAH}EL@TA0D zdsmpR8&{v`H2vzT2u4Md9vLYYg$6dr{h?Hf;~3b=>LqSu)`{prgkU?domh5?=#25o zsULUMu+A0BE46;P7&a&HNgeJy3}(zWJIaQsf5R{P5lQASl@N9aetZD)U+q*n^r=M`4LVD_p1y zwLWBmca&0f=B=28RddtyRH^}V@HGG-;Z!Af(M!!5K19X~CLRy3lIl~DTt*Oy{-;VtY z>?Cqqe9Ttpn5L~;=U6k|Jzyl5apLWxZaJpJ=7*C-O6^+pTfG2) zt_!2f`C4b}S9BM)069ApMQrDXPh0Zq4oe69QINkG?63jP+>?c;nvjASQi=9KO#ymuzHIY$jD)%TVqE=L6-sBFPcWF1p8hx`j2!H}z>o zaity#+ZCwET_exOEwchdp8c;1qGs>7JLMulpG(3Vn+hN1B3#^oIbcD!Ax{UhO7cTw zL)=A}atdQinP$W@xkO_$p0*|_uS53H?Krf@AJJ8?d@6sw+}zB%AL%z&;3AQATp6hx zfPR#lJpFMj$ZdNyAb@2NOW&SN9UQh^q7Vd)!Cter}|(b6_r&SmYS$w(?C0hIGC=D=NK7cfi8G-ba;hC_%y0zd!0R zwFSNY<0NZ7m$*P>54m~k2W^U(BB^O5StlIQGd^7An#n6OVzwbYPxYyXNH=C6e@uS= z;em!!p2YJfdN1{p1w=35ED}ONm!w6&XbSV7Skham#47zQX?aptVw1uB`<0p^sY?&= zPT{0t4C^`dvE^U7WR4SVw-CStp8wXV_((BAHl)YZTxd$3r5f$>N2bSsURg@(XH})j zA1;ioh58zzjTjGzqqt7X3Mke(LF>Six6Xy{-ri9Adgyh>(KrP>dCM9_BH~}%4TJM7$n-yAqJzqoca0ccH9r@Jp5c>oPzL%&R=2{7i)v8~&9E;ephi}vLGHN$g#9aI&!hqF~UcODQpw2KL)UEIQE z_AqSOz~R34nO;8h?X8Se414`0hxz)}##KA=mscIlC4V#oE|PTfhhxM*YSlFFu-v+B zk$#K@CI%t!B7R7@iG(ayg~AC8a`4d^7e>)-w4op0*MY< zQ2e;ZTnFdj-k)8bl)j80j64>C@{ALX0v8?Wb;Akf$}9JFX3un7BZzHIMri=h ziHP7QotUiU6NnVfw4L^@#7z;}V=Di;>m~&7))IQMS~T|o1c1qSzQ6j<^rClTh${3p zE&sAu7QF)QI)up#{Ufy@&Qm?2YtKT=Jl${Wv~8e4q+_#L|(Jo2e<@@>1Dt-=;Jrh1;&j;8O8Qh{nHD`q$#a?S z2am8(tLGcnuC20h&LfMCH6eR`R0u1eGnZIRG(Aq=SCaS;;%Rf#a%NiM?~A| z^%7pY{gt}p<6ObibVK@X`qod&h9CC8;p{DxsA)^T_Z$lgLiXxaIT4hi3$o+$S}6F7 z76hM_24a(e+L;5j(Z~_uZ_C0>^pz1(e` zOV9?)Mg=bX_y)Z0bVI@3DY=IV))Pq&^G~4`LhOX9?p724O3@57T}uZZfn!r)m7|Yb z96^ae>r*96wje|>tl z3LyqgTyBZ9bjIF*>Q_fl-eLjPy*a7GV8t)pZLwhPPudjv^J&ykZb!80AcXIujnlcYBNo`B4iBmzK{KjorQae?u|4) zNe=M%!%vySk)zh1Vd{IO!2-A9L!b6k;bovw`dgT$=?!Qr!9IYqI`DC=Ks-T9f+njE zEW*SgXUW)v_K_nv(I<3)Tu#lwT=*mGV znSh*Ere8Je#G^-WsrHy>oN!~9Mm!-YyXt_>WaRIr)bgnH8t&WM(cM0<6XPnMwUBwd z-4_}i(ftG+P&G&=SbG4kNvJ@mu9Rz5{xt9+ssJ?$E7v16* UaObdg1p3X}Ep~0q`I8j+e?(sHRR910 From 48e5823ad6f8c068525469db20599921f75cf209 Mon Sep 17 00:00:00 2001 From: Jens L Date: Thu, 21 Dec 2023 22:27:46 +0100 Subject: [PATCH 21/37] lib: fix event creation when deprecated config is detected (#7969) * lib: fix event creation when deprecated config is detected Signed-off-by: Jens Langhammer * fix black parsing errors Signed-off-by: Jens Langhammer --------- Signed-off-by: Jens Langhammer --- authentik/events/apps.py | 22 +++++++++++++++++++++ authentik/lib/config.py | 42 +++++++++++++++++++++------------------- pyproject.toml | 4 ++-- 3 files changed, 46 insertions(+), 22 deletions(-) diff --git a/authentik/events/apps.py b/authentik/events/apps.py index 34368856d..3d939d568 100644 --- a/authentik/events/apps.py +++ b/authentik/events/apps.py @@ -2,6 +2,7 @@ from prometheus_client import Gauge from authentik.blueprints.apps import ManagedAppConfig +from authentik.lib.config import CONFIG, ENV_PREFIX GAUGE_TASKS = Gauge( "authentik_system_tasks", @@ -21,3 +22,24 @@ class AuthentikEventsConfig(ManagedAppConfig): def reconcile_load_events_signals(self): """Load events signals""" self.import_module("authentik.events.signals") + + def reconcile_check_deprecations(self): + """Check for config deprecations""" + from authentik.events.models import Event, EventAction + + for key_replace, msg in CONFIG.deprecations.items(): + key, replace = key_replace + key_env = f"{ENV_PREFIX}_{key.replace('.', '__')}".upper() + replace_env = f"{ENV_PREFIX}_{replace.replace('.', '__')}".upper() + if Event.objects.filter( + action=EventAction.CONFIGURATION_ERROR, context__deprecated_option=key + ).exists(): + continue + Event.new( + EventAction.CONFIGURATION_ERROR, + deprecated_option=key, + deprecated_env=key_env, + replacement_option=replace, + replacement_env=replace_env, + message=msg, + ).save() diff --git a/authentik/lib/config.py b/authentik/lib/config.py index 3b977e8a2..dabd3a64b 100644 --- a/authentik/lib/config.py +++ b/authentik/lib/config.py @@ -113,6 +113,8 @@ class ConfigLoader: A variable like AUTHENTIK_POSTGRESQL__HOST would translate to postgresql.host""" + deprecations: dict[tuple[str, str], str] = {} + def __init__(self, **kwargs): super().__init__() self.__config = {} @@ -139,9 +141,9 @@ class ConfigLoader: self.update_from_file(env_file) self.update_from_env() self.update(self.__config, kwargs) - self.check_deprecations() + self.deprecations = self.check_deprecations() - def check_deprecations(self): + def check_deprecations(self) -> dict[str, str]: """Warn if any deprecated configuration options are used""" def _pop_deprecated_key(current_obj, dot_parts, index): @@ -154,25 +156,23 @@ class ConfigLoader: current_obj.pop(dot_part) return value + deprecation_replacements = {} for deprecation, replacement in DEPRECATIONS.items(): - if self.get(deprecation, default=UNSET) is not UNSET: - message = ( - f"'{deprecation}' has been deprecated in favor of '{replacement}'! " - + "Please update your configuration." - ) - self.log( - "warning", - message, - ) - try: - from authentik.events.models import Event, EventAction + if self.get(deprecation, default=UNSET) is UNSET: + continue + message = ( + f"'{deprecation}' has been deprecated in favor of '{replacement}'! " + + "Please update your configuration." + ) + self.log( + "warning", + message, + ) + deprecation_replacements[(deprecation, replacement)] = message - Event.new(EventAction.CONFIGURATION_ERROR, message=message).save() - except ImportError: - continue - - deprecated_attr = _pop_deprecated_key(self.__config, deprecation.split("."), 0) - self.set(replacement, deprecated_attr.value) + deprecated_attr = _pop_deprecated_key(self.__config, deprecation.split("."), 0) + self.set(replacement, deprecated_attr) + return deprecation_replacements def log(self, level: str, message: str, **kwargs): """Custom Log method, we want to ensure ConfigLoader always logs JSON even when @@ -318,7 +318,9 @@ class ConfigLoader: def set(self, path: str, value: Any, sep="."): """Set value using same syntax as get()""" - set_path_in_dict(self.raw, path, Attr(value), sep=sep) + if not isinstance(value, Attr): + value = Attr(value) + set_path_in_dict(self.raw, path, value, sep=sep) CONFIG = ConfigLoader() diff --git a/pyproject.toml b/pyproject.toml index 7c1af2c59..aa5851881 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -17,12 +17,12 @@ pythonPlatform = "All" [tool.black] line-length = 100 -target-version = ['py311'] +target-version = ['py312'] exclude = 'node_modules' [tool.ruff] line-length = 100 -target-version = "py311" +target-version = "py312" exclude = ["**/migrations/**", "**/node_modules/**"] [tool.isort] From 06df705240c3e74c5691b7ca5b4aa299fc8d967c Mon Sep 17 00:00:00 2001 From: Jens L Date: Fri, 22 Dec 2023 00:10:47 +0100 Subject: [PATCH 22/37] sources/oauth: fix missing get_user_id for OIDC-like sources (Azure AD) (#7970) * lib: add debug requests session that shows all sent requests Signed-off-by: Jens Langhammer * sources/oauth: fix missing get_user_id for OIDC-like OAuth Sources Signed-off-by: Jens Langhammer --------- Signed-off-by: Jens Langhammer --- authentik/lib/utils/http.py | 24 +++++++++++++++++++++-- authentik/sources/oauth/types/azure_ad.py | 6 +++--- authentik/sources/oauth/types/oidc.py | 2 +- authentik/sources/oauth/types/okta.py | 7 ++----- authentik/sources/oauth/types/twitch.py | 7 ++----- 5 files changed, 30 insertions(+), 16 deletions(-) diff --git a/authentik/lib/utils/http.py b/authentik/lib/utils/http.py index 3d6638104..f8d33db98 100644 --- a/authentik/lib/utils/http.py +++ b/authentik/lib/utils/http.py @@ -1,5 +1,8 @@ """http helpers""" -from requests.sessions import Session +from uuid import uuid4 + +from django.conf import settings +from requests.sessions import PreparedRequest, Session from structlog.stdlib import get_logger from authentik import get_full_version @@ -12,8 +15,25 @@ def authentik_user_agent() -> str: return f"authentik@{get_full_version()}" +class DebugSession(Session): + """requests session which logs http requests and responses""" + + def send(self, req: PreparedRequest, *args, **kwargs): + request_id = str(uuid4()) + LOGGER.debug("HTTP request sent", uid=request_id, path=req.path_url, headers=req.headers) + resp = super().send(req, *args, **kwargs) + LOGGER.debug( + "HTTP response received", + uid=request_id, + status=resp.status_code, + body=resp.text, + headers=resp.headers, + ) + return resp + + def get_http_session() -> Session: """Get a requests session with common headers""" - session = Session() + session = DebugSession() if settings.DEBUG else Session() session.headers["User-Agent"] = authentik_user_agent() return session diff --git a/authentik/sources/oauth/types/azure_ad.py b/authentik/sources/oauth/types/azure_ad.py index 39c744843..a247cea5d 100644 --- a/authentik/sources/oauth/types/azure_ad.py +++ b/authentik/sources/oauth/types/azure_ad.py @@ -4,8 +4,8 @@ from typing import Any from structlog.stdlib import get_logger from authentik.sources.oauth.clients.oauth2 import UserprofileHeaderAuthClient +from authentik.sources.oauth.types.oidc import OpenIDConnectOAuth2Callback from authentik.sources.oauth.types.registry import SourceType, registry -from authentik.sources.oauth.views.callback import OAuthCallback from authentik.sources.oauth.views.redirect import OAuthRedirect LOGGER = get_logger() @@ -20,7 +20,7 @@ class AzureADOAuthRedirect(OAuthRedirect): } -class AzureADOAuthCallback(OAuthCallback): +class AzureADOAuthCallback(OpenIDConnectOAuth2Callback): """AzureAD OAuth2 Callback""" client_class = UserprofileHeaderAuthClient @@ -50,7 +50,7 @@ class AzureADType(SourceType): authorization_url = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize" access_token_url = "https://login.microsoftonline.com/common/oauth2/v2.0/token" # nosec - profile_url = "https://graph.microsoft.com/v1.0/me" + profile_url = "https://login.microsoftonline.com/common/openid/userinfo" oidc_well_known_url = ( "https://login.microsoftonline.com/common/.well-known/openid-configuration" ) diff --git a/authentik/sources/oauth/types/oidc.py b/authentik/sources/oauth/types/oidc.py index 7ebd24579..bd6853117 100644 --- a/authentik/sources/oauth/types/oidc.py +++ b/authentik/sources/oauth/types/oidc.py @@ -23,7 +23,7 @@ class OpenIDConnectOAuth2Callback(OAuthCallback): client_class = UserprofileHeaderAuthClient def get_user_id(self, info: dict[str, str]) -> str: - return info.get("sub", "") + return info.get("sub", None) def get_user_enroll_context( self, diff --git a/authentik/sources/oauth/types/okta.py b/authentik/sources/oauth/types/okta.py index 8a305bce7..2de02edde 100644 --- a/authentik/sources/oauth/types/okta.py +++ b/authentik/sources/oauth/types/okta.py @@ -3,8 +3,8 @@ from typing import Any from authentik.sources.oauth.clients.oauth2 import UserprofileHeaderAuthClient from authentik.sources.oauth.models import OAuthSource +from authentik.sources.oauth.types.oidc import OpenIDConnectOAuth2Callback from authentik.sources.oauth.types.registry import SourceType, registry -from authentik.sources.oauth.views.callback import OAuthCallback from authentik.sources.oauth.views.redirect import OAuthRedirect @@ -17,7 +17,7 @@ class OktaOAuthRedirect(OAuthRedirect): } -class OktaOAuth2Callback(OAuthCallback): +class OktaOAuth2Callback(OpenIDConnectOAuth2Callback): """Okta OAuth2 Callback""" # Okta has the same quirk as azure and throws an error if the access token @@ -25,9 +25,6 @@ class OktaOAuth2Callback(OAuthCallback): # see https://github.com/goauthentik/authentik/issues/1910 client_class = UserprofileHeaderAuthClient - def get_user_id(self, info: dict[str, str]) -> str: - return info.get("sub", "") - def get_user_enroll_context( self, info: dict[str, Any], diff --git a/authentik/sources/oauth/types/twitch.py b/authentik/sources/oauth/types/twitch.py index 5fa9fad74..62e7b94d4 100644 --- a/authentik/sources/oauth/types/twitch.py +++ b/authentik/sources/oauth/types/twitch.py @@ -3,8 +3,8 @@ from json import dumps from typing import Any, Optional from authentik.sources.oauth.clients.oauth2 import UserprofileHeaderAuthClient +from authentik.sources.oauth.types.oidc import OpenIDConnectOAuth2Callback from authentik.sources.oauth.types.registry import SourceType, registry -from authentik.sources.oauth.views.callback import OAuthCallback from authentik.sources.oauth.views.redirect import OAuthRedirect @@ -27,14 +27,11 @@ class TwitchOAuthRedirect(OAuthRedirect): } -class TwitchOAuth2Callback(OAuthCallback): +class TwitchOAuth2Callback(OpenIDConnectOAuth2Callback): """Twitch OAuth2 Callback""" client_class = TwitchClient - def get_user_id(self, info: dict[str, str]) -> str: - return info.get("sub", "") - def get_user_enroll_context( self, info: dict[str, Any], From 23c03d454e8ee72f0660ecd85503158d871347a6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 22 Dec 2023 11:10:26 +0100 Subject: [PATCH 23/37] core: bump goauthentik.io/api/v3 from 3.2023104.5 to 3.2023105.1 (#7971) Bumps [goauthentik.io/api/v3](https://github.com/goauthentik/client-go) from 3.2023104.5 to 3.2023105.1. - [Release notes](https://github.com/goauthentik/client-go/releases) - [Commits](https://github.com/goauthentik/client-go/compare/v3.2023104.5...v3.2023105.1) --- updated-dependencies: - dependency-name: goauthentik.io/api/v3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index ceae598ca..21567fa41 100644 --- a/go.mod +++ b/go.mod @@ -27,7 +27,7 @@ require ( github.com/sirupsen/logrus v1.9.3 github.com/spf13/cobra v1.8.0 github.com/stretchr/testify v1.8.4 - goauthentik.io/api/v3 v3.2023104.5 + goauthentik.io/api/v3 v3.2023105.1 golang.org/x/exp v0.0.0-20230210204819-062eb4c674ab golang.org/x/oauth2 v0.15.0 golang.org/x/sync v0.5.0 diff --git a/go.sum b/go.sum index 36d0b8c57..df53bf6a8 100644 --- a/go.sum +++ b/go.sum @@ -309,8 +309,8 @@ go.opentelemetry.io/otel/trace v1.17.0 h1:/SWhSRHmDPOImIAetP1QAeMnZYiQXrTy4fMMYO go.opentelemetry.io/otel/trace v1.17.0/go.mod h1:I/4vKTgFclIsXRVucpH25X0mpFSczM7aHeaz0ZBLWjY= go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A= go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4= -goauthentik.io/api/v3 v3.2023104.5 h1:CWaQq44DxElyqMvZVjqMhWIr1vXzobf4eqFUas0lMgs= -goauthentik.io/api/v3 v3.2023104.5/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= +goauthentik.io/api/v3 v3.2023105.1 h1:K0CVItsnEkBcyLRbDfvsoG4im0ytTmkOAESVTEtalKc= +goauthentik.io/api/v3 v3.2023105.1/go.mod h1:zz+mEZg8rY/7eEjkMGWJ2DnGqk+zqxuybGCGrR2O4Kw= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= From 9a261c52d123196910213c3152bfb57967b65370 Mon Sep 17 00:00:00 2001 From: Jens L Date: Sat, 23 Dec 2023 00:53:05 +0100 Subject: [PATCH 24/37] providers/oauth2: remember session_id from initial token (#7976) * providers/oauth2: remember session_id original token was created with for future access/refresh tokens Signed-off-by: Jens Langhammer * providers/proxy: use hashed session as `sid` Signed-off-by: Jens Langhammer --------- Signed-off-by: Jens Langhammer --- ...d_authorizationcode_session_id_and_more.py | 27 +++++++++++++++++++ authentik/providers/oauth2/models.py | 1 + authentik/providers/oauth2/views/authorize.py | 3 +++ authentik/providers/oauth2/views/token.py | 4 +++ authentik/providers/proxy/tasks.py | 5 +++- blueprints/system/providers-proxy.yaml | 2 +- internal/outpost/proxyv2/ws.go | 1 + 7 files changed, 41 insertions(+), 2 deletions(-) create mode 100644 authentik/providers/oauth2/migrations/0017_accesstoken_session_id_authorizationcode_session_id_and_more.py diff --git a/authentik/providers/oauth2/migrations/0017_accesstoken_session_id_authorizationcode_session_id_and_more.py b/authentik/providers/oauth2/migrations/0017_accesstoken_session_id_authorizationcode_session_id_and_more.py new file mode 100644 index 000000000..9a8e8d210 --- /dev/null +++ b/authentik/providers/oauth2/migrations/0017_accesstoken_session_id_authorizationcode_session_id_and_more.py @@ -0,0 +1,27 @@ +# Generated by Django 5.0 on 2023-12-22 23:20 + +from django.db import migrations, models + + +class Migration(migrations.Migration): + dependencies = [ + ("authentik_providers_oauth2", "0016_alter_refreshtoken_token"), + ] + + operations = [ + migrations.AddField( + model_name="accesstoken", + name="session_id", + field=models.CharField(blank=True, default=""), + ), + migrations.AddField( + model_name="authorizationcode", + name="session_id", + field=models.CharField(blank=True, default=""), + ), + migrations.AddField( + model_name="refreshtoken", + name="session_id", + field=models.CharField(blank=True, default=""), + ), + ] diff --git a/authentik/providers/oauth2/models.py b/authentik/providers/oauth2/models.py index e9a2f731a..2917f607f 100644 --- a/authentik/providers/oauth2/models.py +++ b/authentik/providers/oauth2/models.py @@ -296,6 +296,7 @@ class BaseGrantModel(models.Model): revoked = models.BooleanField(default=False) _scope = models.TextField(default="", verbose_name=_("Scopes")) auth_time = models.DateTimeField(verbose_name="Authentication time") + session_id = models.CharField(default="", blank=True) @property def scope(self) -> list[str]: diff --git a/authentik/providers/oauth2/views/authorize.py b/authentik/providers/oauth2/views/authorize.py index 8c31192bf..520f02d65 100644 --- a/authentik/providers/oauth2/views/authorize.py +++ b/authentik/providers/oauth2/views/authorize.py @@ -1,6 +1,7 @@ """authentik OAuth2 Authorization views""" from dataclasses import dataclass, field from datetime import timedelta +from hashlib import sha256 from json import dumps from re import error as RegexError from re import fullmatch @@ -282,6 +283,7 @@ class OAuthAuthorizationParams: expires=now + timedelta_from_string(self.provider.access_code_validity), scope=self.scope, nonce=self.nonce, + session_id=sha256(request.session.session_key.encode("ascii")).hexdigest(), ) if self.code_challenge and self.code_challenge_method: @@ -569,6 +571,7 @@ class OAuthFulfillmentStage(StageView): expires=access_token_expiry, provider=self.provider, auth_time=auth_event.created if auth_event else now, + session_id=sha256(self.request.session.session_key.encode("ascii")).hexdigest(), ) id_token = IDToken.new(self.provider, token, self.request) diff --git a/authentik/providers/oauth2/views/token.py b/authentik/providers/oauth2/views/token.py index 0c0d7f4a8..93578d6ce 100644 --- a/authentik/providers/oauth2/views/token.py +++ b/authentik/providers/oauth2/views/token.py @@ -487,6 +487,7 @@ class TokenView(View): # Keep same scopes as previous token scope=self.params.authorization_code.scope, auth_time=self.params.authorization_code.auth_time, + session_id=self.params.authorization_code.session_id, ) access_token.id_token = IDToken.new( self.provider, @@ -502,6 +503,7 @@ class TokenView(View): expires=refresh_token_expiry, provider=self.provider, auth_time=self.params.authorization_code.auth_time, + session_id=self.params.authorization_code.session_id, ) id_token = IDToken.new( self.provider, @@ -539,6 +541,7 @@ class TokenView(View): # Keep same scopes as previous token scope=self.params.refresh_token.scope, auth_time=self.params.refresh_token.auth_time, + session_id=self.params.refresh_token.session_id, ) access_token.id_token = IDToken.new( self.provider, @@ -554,6 +557,7 @@ class TokenView(View): expires=refresh_token_expiry, provider=self.provider, auth_time=self.params.refresh_token.auth_time, + session_id=self.params.refresh_token.session_id, ) id_token = IDToken.new( self.provider, diff --git a/authentik/providers/proxy/tasks.py b/authentik/providers/proxy/tasks.py index aec8e669a..1496ff6ec 100644 --- a/authentik/providers/proxy/tasks.py +++ b/authentik/providers/proxy/tasks.py @@ -1,4 +1,6 @@ """proxy provider tasks""" +from hashlib import sha256 + from asgiref.sync import async_to_sync from channels.layers import get_channel_layer from django.db import DatabaseError, InternalError, ProgrammingError @@ -23,6 +25,7 @@ def proxy_set_defaults(): def proxy_on_logout(session_id: str): """Update outpost instances connected to a single outpost""" layer = get_channel_layer() + hashed_session_id = sha256(session_id.encode("ascii")).hexdigest() for outpost in Outpost.objects.filter(type=OutpostType.PROXY): group = OUTPOST_GROUP % {"outpost_pk": str(outpost.pk)} async_to_sync(layer.group_send)( @@ -30,6 +33,6 @@ def proxy_on_logout(session_id: str): { "type": "event.provider.specific", "sub_type": "logout", - "session_id": session_id, + "session_id": hashed_session_id, }, ) diff --git a/blueprints/system/providers-proxy.yaml b/blueprints/system/providers-proxy.yaml index 0086645a8..152ed3f44 100644 --- a/blueprints/system/providers-proxy.yaml +++ b/blueprints/system/providers-proxy.yaml @@ -15,7 +15,7 @@ entries: # This mapping is used by the authentik proxy. It passes extra user attributes, # which are used for example for the HTTP-Basic Authentication mapping. return { - "sid": request.http_request.session.session_key, + "sid": token.session_id, "ak_proxy": { "user_attributes": request.user.group_attributes(request), "is_superuser": request.user.is_superuser, diff --git a/internal/outpost/proxyv2/ws.go b/internal/outpost/proxyv2/ws.go index b75ba50fd..4632a67cb 100644 --- a/internal/outpost/proxyv2/ws.go +++ b/internal/outpost/proxyv2/ws.go @@ -36,6 +36,7 @@ func (ps *ProxyServer) handleWSMessage(ctx context.Context, args map[string]inte switch msg.SubType { case WSProviderSubTypeLogout: for _, p := range ps.apps { + ps.log.WithField("provider", p.Host).Debug("Logging out") err := p.Logout(ctx, func(c application.Claims) bool { return c.Sid == msg.SessionID }) From 02869d81734d35664b221f52df3bb9c97d4f8f6d Mon Sep 17 00:00:00 2001 From: Jens L Date: Sat, 23 Dec 2023 01:20:23 +0100 Subject: [PATCH 25/37] stages/user_login: session binding (#7881) * start with user_login stage Signed-off-by: Jens Langhammer # Conflicts: # authentik/root/settings.py * fix and improve logout event Signed-off-by: Jens Langhammer * lint pass Signed-off-by: Jens Langhammer * update authenticated session when IP changes and binding doesn't break Signed-off-by: Jens Langhammer * update docs, always keep old and new IP in event Signed-off-by: Jens Langhammer * re-gen api schema Signed-off-by: Jens Langhammer --------- Signed-off-by: Jens Langhammer --- authentik/events/context_processors/asn.py | 6 +- authentik/events/context_processors/geoip.py | 6 +- authentik/events/context_processors/mmdb.py | 7 +- authentik/events/signals.py | 9 +- authentik/root/middleware.py | 4 +- authentik/root/settings.py | 2 +- authentik/stages/user_login/api.py | 2 + authentik/stages/user_login/middleware.py | 212 ++++++++++++++++++ ...6_userloginstage_geoip_binding_and_more.py | 40 ++++ authentik/stages/user_login/models.py | 30 +++ authentik/stages/user_login/stage.py | 38 +++- blueprints/schema.json | 24 +- schema.yml | 120 +++++++++- .../stages/user_login/UserLoginStageForm.ts | 70 +++++- website/docs/events/index.md | 5 + website/docs/flow/stages/user_login/index.md | 45 ++++ 16 files changed, 595 insertions(+), 25 deletions(-) create mode 100644 authentik/stages/user_login/middleware.py create mode 100644 authentik/stages/user_login/migrations/0006_userloginstage_geoip_binding_and_more.py diff --git a/authentik/events/context_processors/asn.py b/authentik/events/context_processors/asn.py index afefbcbc6..4478c7fb0 100644 --- a/authentik/events/context_processors/asn.py +++ b/authentik/events/context_processors/asn.py @@ -51,7 +51,7 @@ class ASNContextProcessor(MMDBContextProcessor): op="authentik.events.asn.asn", description=ip_address, ): - if not self.enabled: + if not self.configured(): return None self.check_expired() try: @@ -59,8 +59,10 @@ class ASNContextProcessor(MMDBContextProcessor): except (GeoIP2Error, ValueError): return None - def asn_to_dict(self, asn: ASN) -> ASNDict: + def asn_to_dict(self, asn: ASN | None) -> ASNDict: """Convert ASN to dict""" + if not asn: + return {} asn_dict: ASNDict = { "asn": asn.autonomous_system_number, "as_org": asn.autonomous_system_organization, diff --git a/authentik/events/context_processors/geoip.py b/authentik/events/context_processors/geoip.py index ca00a4c54..40ea0b012 100644 --- a/authentik/events/context_processors/geoip.py +++ b/authentik/events/context_processors/geoip.py @@ -52,7 +52,7 @@ class GeoIPContextProcessor(MMDBContextProcessor): op="authentik.events.geo.city", description=ip_address, ): - if not self.enabled: + if not self.configured(): return None self.check_expired() try: @@ -60,8 +60,10 @@ class GeoIPContextProcessor(MMDBContextProcessor): except (GeoIP2Error, ValueError): return None - def city_to_dict(self, city: City) -> GeoIPDict: + def city_to_dict(self, city: City | None) -> GeoIPDict: """Convert City to dict""" + if not city: + return {} city_dict: GeoIPDict = { "continent": city.continent.code, "country": city.country.iso_code, diff --git a/authentik/events/context_processors/mmdb.py b/authentik/events/context_processors/mmdb.py index 09c17f91f..45bd85411 100644 --- a/authentik/events/context_processors/mmdb.py +++ b/authentik/events/context_processors/mmdb.py @@ -31,7 +31,7 @@ class MMDBContextProcessor(EventContextProcessor): self._last_mtime = Path(path).stat().st_mtime self.logger.info("Loaded MMDB database", last_write=self._last_mtime, file=path) except OSError as exc: - self.logger.warning("Failed to load MMDB database", exc=exc) + self.logger.warning("Failed to load MMDB database", path=path, exc=exc) def check_expired(self): """Check if the modification date of the MMDB database has @@ -48,7 +48,6 @@ class MMDBContextProcessor(EventContextProcessor): except OSError as exc: self.logger.warning("Failed to check MMDB age", exc=exc) - @property - def enabled(self) -> bool: - """Check if MMDB is enabled""" + def configured(self) -> bool: + """Return true if this context processor is configured""" return bool(self.reader) diff --git a/authentik/events/signals.py b/authentik/events/signals.py index 0473ef013..d0b7ec06a 100644 --- a/authentik/events/signals.py +++ b/authentik/events/signals.py @@ -45,9 +45,14 @@ def get_login_event(request: HttpRequest) -> Optional[Event]: @receiver(user_logged_out) -def on_user_logged_out(sender, request: HttpRequest, user: User, **_): +def on_user_logged_out(sender, request: HttpRequest, user: User, **kwargs): """Log successfully logout""" - Event.new(EventAction.LOGOUT).from_http(request, user=user) + # Check if this even comes from the user_login stage's middleware, which will set an extra + # argument + event = Event.new(EventAction.LOGOUT) + if "event_extra" in kwargs: + event.context.update(kwargs["event_extra"]) + event.from_http(request, user=user) @receiver(user_write) diff --git a/authentik/root/middleware.py b/authentik/root/middleware.py index 5eca4a6e5..ba5465d4f 100644 --- a/authentik/root/middleware.py +++ b/authentik/root/middleware.py @@ -56,7 +56,7 @@ class SessionMiddleware(UpstreamSessionMiddleware): pass return session_key - def process_request(self, request): + def process_request(self, request: HttpRequest): raw_session = request.COOKIES.get(settings.SESSION_COOKIE_NAME) session_key = SessionMiddleware.decode_session_key(raw_session) request.session = self.SessionStore(session_key) @@ -297,7 +297,7 @@ class LoggingMiddleware: response = self.get_response(request) status_code = response.status_code kwargs = { - "request_id": request.request_id, + "request_id": getattr(request, "request_id", None), } kwargs.update(getattr(response, "ak_context", {})) self.log(request, status_code, int((default_timer() - start) * 1000), **kwargs) diff --git a/authentik/root/settings.py b/authentik/root/settings.py index 526cf27ce..87d4bde9f 100644 --- a/authentik/root/settings.py +++ b/authentik/root/settings.py @@ -218,7 +218,7 @@ MIDDLEWARE = [ "authentik.root.middleware.LoggingMiddleware", "django_prometheus.middleware.PrometheusBeforeMiddleware", "authentik.root.middleware.ClientIPMiddleware", - "authentik.root.middleware.SessionMiddleware", + "authentik.stages.user_login.middleware.BoundSessionMiddleware", "django.contrib.auth.middleware.AuthenticationMiddleware", "authentik.core.middleware.RequestIDMiddleware", "authentik.tenants.middleware.TenantMiddleware", diff --git a/authentik/stages/user_login/api.py b/authentik/stages/user_login/api.py index c0acc8d5c..dad5f777c 100644 --- a/authentik/stages/user_login/api.py +++ b/authentik/stages/user_login/api.py @@ -15,6 +15,8 @@ class UserLoginStageSerializer(StageSerializer): "session_duration", "terminate_other_sessions", "remember_me_offset", + "network_binding", + "geoip_binding", ] diff --git a/authentik/stages/user_login/middleware.py b/authentik/stages/user_login/middleware.py new file mode 100644 index 000000000..8fea4c408 --- /dev/null +++ b/authentik/stages/user_login/middleware.py @@ -0,0 +1,212 @@ +"""Sessions bound to ASN/Network and GeoIP/Continent/etc""" +from django.conf import settings +from django.contrib.auth.middleware import AuthenticationMiddleware +from django.contrib.auth.signals import user_logged_out +from django.http.request import HttpRequest +from django.shortcuts import redirect +from structlog.stdlib import get_logger + +from authentik.core.models import AuthenticatedSession +from authentik.events.context_processors.asn import ASN_CONTEXT_PROCESSOR +from authentik.events.context_processors.geoip import GEOIP_CONTEXT_PROCESSOR +from authentik.lib.sentry import SentryIgnoredException +from authentik.root.middleware import ClientIPMiddleware, SessionMiddleware +from authentik.stages.user_login.models import GeoIPBinding, NetworkBinding + +SESSION_KEY_LAST_IP = "authentik/stages/user_login/last_ip" +SESSION_KEY_BINDING_NET = "authentik/stages/user_login/binding/net" +SESSION_KEY_BINDING_GEO = "authentik/stages/user_login/binding/geo" +LOGGER = get_logger() + + +class SessionBindingBroken(SentryIgnoredException): + """Session binding was broken due to specified `reason`""" + + # pylint: disable=too-many-arguments + def __init__( + self, reason: str, old_value: str, new_value: str, old_ip: str, new_ip: str + ) -> None: + self.reason = reason + self.old_value = old_value + self.new_value = new_value + self.old_ip = old_ip + self.new_ip = new_ip + + def __repr__(self) -> str: + return ( + f"Session binding broken due to {self.reason}; " + f"old value: {self.old_value}, new value: {self.new_value}" + ) + + def to_event(self) -> dict: + """Convert to dict for usage with event""" + return { + "logout_reason": "Session binding broken", + "binding": { + "reason": self.reason, + "previous_value": self.old_value, + "new_value": self.new_value, + }, + "ip": { + "previous": self.old_ip, + "new": self.new_ip, + }, + } + + +def logout_extra(request: HttpRequest, exc: SessionBindingBroken): + """Similar to django's logout method, but able to carry more info to the signal""" + # Dispatch the signal before the user is logged out so the receivers have a + # chance to find out *who* logged out. + user = getattr(request, "user", None) + if not getattr(user, "is_authenticated", True): + user = None + user_logged_out.send( + sender=user.__class__, request=request, user=user, event_extra=exc.to_event() + ) + request.session.flush() + if hasattr(request, "user"): + from django.contrib.auth.models import AnonymousUser + + request.user = AnonymousUser() + + +class BoundSessionMiddleware(SessionMiddleware): + """Sessions bound to ASN/Network and GeoIP/Continent/etc""" + + def process_request(self, request: HttpRequest): + super().process_request(request) + try: + self.recheck_session(request) + except SessionBindingBroken as exc: + LOGGER.warning("Session binding broken", exc=exc) + # At this point, we need to logout the current user + # however since this middleware has to run before the `AuthenticationMiddleware` + # we don't have access to the user yet + # Logout will still work, however event logs won't display the user being logged out + AuthenticationMiddleware(lambda request: request).process_request(request) + logout_extra(request, exc) + request.session.clear() + return redirect(settings.LOGIN_URL) + return None + + def recheck_session(self, request: HttpRequest): + """Check if a session is still valid with a changed IP""" + last_ip = request.session.get(SESSION_KEY_LAST_IP) + new_ip = ClientIPMiddleware.get_client_ip(request) + # Check changed IP + if new_ip == last_ip: + return + configured_binding_net = request.session.get( + SESSION_KEY_BINDING_NET, NetworkBinding.NO_BINDING + ) + configured_binding_geo = request.session.get( + SESSION_KEY_BINDING_GEO, GeoIPBinding.NO_BINDING + ) + if configured_binding_net != NetworkBinding.NO_BINDING: + self.recheck_session_net(configured_binding_net, last_ip, new_ip) + if configured_binding_geo != GeoIPBinding.NO_BINDING: + self.recheck_session_geo(configured_binding_geo, last_ip, new_ip) + # If we got to this point without any error being raised, we need to + # update the last saved IP to the current one + request.session[SESSION_KEY_LAST_IP] = new_ip + AuthenticatedSession.objects.filter(session_key=request.session.session_key).update( + last_ip=new_ip, last_user_agent=request.META.get("HTTP_USER_AGENT", "") + ) + + def recheck_session_net(self, binding: NetworkBinding, last_ip: str, new_ip: str): + """Check network/ASN binding""" + last_asn = ASN_CONTEXT_PROCESSOR.asn(last_ip) + new_asn = ASN_CONTEXT_PROCESSOR.asn(new_ip) + if not last_asn or not new_asn: + raise SessionBindingBroken( + "network.missing", + ASN_CONTEXT_PROCESSOR.asn_to_dict(last_asn), + ASN_CONTEXT_PROCESSOR.asn_to_dict(new_asn), + last_ip, + new_ip, + ) + if binding in [ + NetworkBinding.BIND_ASN, + NetworkBinding.BIND_ASN_NETWORK, + NetworkBinding.BIND_ASN_NETWORK_IP, + ]: + # Check ASN which is required for all 3 modes + if last_asn.autonomous_system_number != new_asn.autonomous_system_number: + raise SessionBindingBroken( + "network.asn", + last_asn.autonomous_system_number, + new_asn.autonomous_system_number, + last_ip, + new_ip, + ) + if binding in [NetworkBinding.BIND_ASN_NETWORK, NetworkBinding.BIND_ASN_NETWORK_IP]: + # Check Network afterwards + if last_asn.network != new_asn.network: + raise SessionBindingBroken( + "network.asn_network", + last_asn.network, + new_asn.network, + last_ip, + new_ip, + ) + if binding in [NetworkBinding.BIND_ASN_NETWORK_IP]: + # Only require strict IP checking + if last_ip != new_ip: + raise SessionBindingBroken( + "network.ip", + last_ip, + new_ip, + last_ip, + new_ip, + ) + + def recheck_session_geo(self, binding: GeoIPBinding, last_ip: str, new_ip: str): + """Check GeoIP binding""" + last_geo = GEOIP_CONTEXT_PROCESSOR.city(last_ip) + new_geo = GEOIP_CONTEXT_PROCESSOR.city(new_ip) + if not last_geo or not new_geo: + raise SessionBindingBroken( + "geoip.missing", + GEOIP_CONTEXT_PROCESSOR.city_to_dict(last_geo), + GEOIP_CONTEXT_PROCESSOR.city_to_dict(new_geo), + last_ip, + new_ip, + ) + if binding in [ + GeoIPBinding.BIND_CONTINENT, + GeoIPBinding.BIND_CONTINENT_COUNTRY, + GeoIPBinding.BIND_CONTINENT_COUNTRY_CITY, + ]: + # Check Continent which is required for all 3 modes + if last_geo.continent != new_geo.continent: + raise SessionBindingBroken( + "geoip.continent", + last_geo.continent, + new_geo.continent, + last_ip, + new_ip, + ) + if binding in [ + GeoIPBinding.BIND_CONTINENT_COUNTRY, + GeoIPBinding.BIND_CONTINENT_COUNTRY_CITY, + ]: + # Check Country afterwards + if last_geo.country != new_geo.country: + raise SessionBindingBroken( + "geoip.country", + last_geo.country, + new_geo.country, + last_ip, + new_ip, + ) + if binding in [GeoIPBinding.BIND_CONTINENT_COUNTRY_CITY]: + # Check city afterwards + if last_geo.city != new_geo.city: + raise SessionBindingBroken( + "geoip.city", + last_geo.city, + new_geo.city, + last_ip, + new_ip, + ) diff --git a/authentik/stages/user_login/migrations/0006_userloginstage_geoip_binding_and_more.py b/authentik/stages/user_login/migrations/0006_userloginstage_geoip_binding_and_more.py new file mode 100644 index 000000000..155c42b81 --- /dev/null +++ b/authentik/stages/user_login/migrations/0006_userloginstage_geoip_binding_and_more.py @@ -0,0 +1,40 @@ +# Generated by Django 4.2.7 on 2023-12-14 10:46 + +from django.db import migrations, models + + +class Migration(migrations.Migration): + dependencies = [ + ("authentik_stages_user_login", "0005_userloginstage_remember_me_offset"), + ] + + operations = [ + migrations.AddField( + model_name="userloginstage", + name="geoip_binding", + field=models.TextField( + choices=[ + ("no_binding", "No Binding"), + ("bind_continent", "Bind Continent"), + ("bind_continent_country", "Bind Continent Country"), + ("bind_continent_country_city", "Bind Continent Country City"), + ], + default="no_binding", + help_text="Bind sessions created by this stage to the configured GeoIP location", + ), + ), + migrations.AddField( + model_name="userloginstage", + name="network_binding", + field=models.TextField( + choices=[ + ("no_binding", "No Binding"), + ("bind_asn", "Bind Asn"), + ("bind_asn_network", "Bind Asn Network"), + ("bind_asn_network_ip", "Bind Asn Network Ip"), + ], + default="no_binding", + help_text="Bind sessions created by this stage to the configured network", + ), + ), + ] diff --git a/authentik/stages/user_login/models.py b/authentik/stages/user_login/models.py index 01c85b4fa..27bb6f3bf 100644 --- a/authentik/stages/user_login/models.py +++ b/authentik/stages/user_login/models.py @@ -9,6 +9,26 @@ from authentik.flows.models import Stage from authentik.lib.utils.time import timedelta_string_validator +class NetworkBinding(models.TextChoices): + """Network session binding modes""" + + NO_BINDING = "no_binding" + BIND_ASN = "bind_asn" # Bind to ASN only + BIND_ASN_NETWORK = "bind_asn_network" # Bind to ASN and Network + BIND_ASN_NETWORK_IP = "bind_asn_network_ip" # Bind to ASN, Network and IP + + +class GeoIPBinding(models.TextChoices): + """Geo session binding modes""" + + NO_BINDING = "no_binding" + BIND_CONTINENT = "bind_continent" # Bind to continent only + BIND_CONTINENT_COUNTRY = "bind_continent_country" # Bind to continent and country + BIND_CONTINENT_COUNTRY_CITY = ( + "bind_continent_country_city" # Bind to continent, country and city + ) + + class UserLoginStage(Stage): """Attaches the currently pending user to the current session.""" @@ -21,6 +41,16 @@ class UserLoginStage(Stage): "(Format: hours=-1;minutes=-2;seconds=-3)" ), ) + network_binding = models.TextField( + choices=NetworkBinding.choices, + default=NetworkBinding.NO_BINDING, + help_text=_("Bind sessions created by this stage to the configured network"), + ) + geoip_binding = models.TextField( + choices=GeoIPBinding.choices, + default=GeoIPBinding.NO_BINDING, + help_text=_("Bind sessions created by this stage to the configured GeoIP location"), + ) terminate_other_sessions = models.BooleanField( default=False, help_text=_("Terminate all other sessions of the user logging in.") ) diff --git a/authentik/stages/user_login/stage.py b/authentik/stages/user_login/stage.py index 0475c1b84..f771f8faa 100644 --- a/authentik/stages/user_login/stage.py +++ b/authentik/stages/user_login/stage.py @@ -1,4 +1,6 @@ """Login stage logic""" +from datetime import timedelta + from django.contrib import messages from django.contrib.auth import login from django.http import HttpRequest, HttpResponse @@ -10,8 +12,14 @@ from authentik.flows.challenge import ChallengeResponse, ChallengeTypes, WithUse from authentik.flows.planner import PLAN_CONTEXT_PENDING_USER, PLAN_CONTEXT_SOURCE from authentik.flows.stage import ChallengeStageView from authentik.lib.utils.time import timedelta_from_string +from authentik.root.middleware import ClientIPMiddleware from authentik.stages.password import BACKEND_INBUILT from authentik.stages.password.stage import PLAN_CONTEXT_AUTHENTICATION_BACKEND +from authentik.stages.user_login.middleware import ( + SESSION_KEY_BINDING_GEO, + SESSION_KEY_BINDING_NET, + SESSION_KEY_LAST_IP, +) from authentik.stages.user_login.models import UserLoginStage @@ -51,6 +59,26 @@ class UserLoginStageView(ChallengeStageView): def challenge_valid(self, response: UserLoginChallengeResponse) -> HttpResponse: return self.do_login(self.request, response.validated_data["remember_me"]) + def set_session_duration(self, remember: bool) -> timedelta: + """Update the sessions' expiry""" + delta = timedelta_from_string(self.executor.current_stage.session_duration) + if remember: + offset = timedelta_from_string(self.executor.current_stage.remember_me_offset) + delta = delta + offset + if delta.total_seconds() == 0: + self.request.session.set_expiry(0) + else: + self.request.session.set_expiry(delta) + return delta + + def set_session_ip(self): + """Set the sessions' last IP and session bindings""" + stage: UserLoginStage = self.executor.current_stage + + self.request.session[SESSION_KEY_LAST_IP] = ClientIPMiddleware.get_client_ip(self.request) + self.request.session[SESSION_KEY_BINDING_NET] = stage.network_binding + self.request.session[SESSION_KEY_BINDING_GEO] = stage.geoip_binding + def do_login(self, request: HttpRequest, remember: bool = False) -> HttpResponse: """Attach the currently pending user to the current session""" if PLAN_CONTEXT_PENDING_USER not in self.executor.plan.context: @@ -64,14 +92,8 @@ class UserLoginStageView(ChallengeStageView): user: User = self.executor.plan.context[PLAN_CONTEXT_PENDING_USER] if not user.is_active: self.logger.warning("User is not active, login will not work.") - delta = timedelta_from_string(self.executor.current_stage.session_duration) - if remember: - offset = timedelta_from_string(self.executor.current_stage.remember_me_offset) - delta = delta + offset - if delta.total_seconds() == 0: - self.request.session.set_expiry(0) - else: - self.request.session.set_expiry(delta) + delta = self.set_session_duration(remember) + self.set_session_ip() login( self.request, user, diff --git a/blueprints/schema.json b/blueprints/schema.json index eaaed0a8d..523f6e10d 100644 --- a/blueprints/schema.json +++ b/blueprints/schema.json @@ -5306,13 +5306,13 @@ "type": "string", "enum": [ "apple", + "openidconnect", "azuread", "discord", "facebook", "github", "google", "mailcow", - "openidconnect", "okta", "patreon", "reddit", @@ -8173,6 +8173,28 @@ "minLength": 1, "title": "Remember me offset", "description": "Offset the session will be extended by when the user picks the remember me option. Default of 0 means that the remember me option will not be shown. (Format: hours=-1;minutes=-2;seconds=-3)" + }, + "network_binding": { + "type": "string", + "enum": [ + "no_binding", + "bind_asn", + "bind_asn_network", + "bind_asn_network_ip" + ], + "title": "Network binding", + "description": "Bind sessions created by this stage to the configured network" + }, + "geoip_binding": { + "type": "string", + "enum": [ + "no_binding", + "bind_continent", + "bind_continent_country", + "bind_continent_country_city" + ], + "title": "Geoip binding", + "description": "Bind sessions created by this stage to the configured GeoIP location" } }, "required": [] diff --git a/schema.yml b/schema.yml index 72d68e5f8..d63b0c135 100644 --- a/schema.yml +++ b/schema.yml @@ -26955,10 +26955,42 @@ paths: operationId: stages_user_login_list description: UserLoginStage Viewset parameters: + - in: query + name: geoip_binding + schema: + type: string + enum: + - bind_continent + - bind_continent_country + - bind_continent_country_city + - no_binding + description: |- + Bind sessions created by this stage to the configured GeoIP location + + * `no_binding` - No Binding + * `bind_continent` - Bind Continent + * `bind_continent_country` - Bind Continent Country + * `bind_continent_country_city` - Bind Continent Country City - in: query name: name schema: type: string + - in: query + name: network_binding + schema: + type: string + enum: + - bind_asn + - bind_asn_network + - bind_asn_network_ip + - no_binding + description: |- + Bind sessions created by this stage to the configured network + + * `no_binding` - No Binding + * `bind_asn` - Bind Asn + * `bind_asn_network` - Bind Asn Network + * `bind_asn_network_ip` - Bind Asn Network Ip - name: ordering required: false in: query @@ -31829,6 +31861,18 @@ components: type: string required: - detail + GeoipBindingEnum: + enum: + - no_binding + - bind_continent + - bind_continent_country + - bind_continent_country_city + type: string + description: |- + * `no_binding` - No Binding + * `bind_continent` - Bind Continent + * `bind_continent_country` - Bind Continent Country + * `bind_continent_country_city` - Bind Continent Country City Group: type: object description: Group Serializer @@ -33405,6 +33449,18 @@ components: * `urn:oasis:names:tc:SAML:2.0:nameid-format:X509SubjectName` - X509 * `urn:oasis:names:tc:SAML:2.0:nameid-format:WindowsDomainQualifiedName` - Windows * `urn:oasis:names:tc:SAML:2.0:nameid-format:transient` - Transient + NetworkBindingEnum: + enum: + - no_binding + - bind_asn + - bind_asn_network + - bind_asn_network_ip + type: string + description: |- + * `no_binding` - No Binding + * `bind_asn` - Bind Asn + * `bind_asn_network` - Bind Asn Network + * `bind_asn_network_ip` - Bind Asn Network Ip NotConfiguredActionEnum: enum: - skip @@ -38080,6 +38136,26 @@ components: description: 'Offset the session will be extended by when the user picks the remember me option. Default of 0 means that the remember me option will not be shown. (Format: hours=-1;minutes=-2;seconds=-3)' + network_binding: + allOf: + - $ref: '#/components/schemas/NetworkBindingEnum' + description: |- + Bind sessions created by this stage to the configured network + + * `no_binding` - No Binding + * `bind_asn` - Bind Asn + * `bind_asn_network` - Bind Asn Network + * `bind_asn_network_ip` - Bind Asn Network Ip + geoip_binding: + allOf: + - $ref: '#/components/schemas/GeoipBindingEnum' + description: |- + Bind sessions created by this stage to the configured GeoIP location + + * `no_binding` - No Binding + * `bind_continent` - Bind Continent + * `bind_continent_country` - Bind Continent Country + * `bind_continent_country_city` - Bind Continent Country City PatchedUserLogoutStageRequest: type: object description: UserLogoutStage Serializer @@ -39111,13 +39187,13 @@ components: ProviderTypeEnum: enum: - apple + - openidconnect - azuread - discord - facebook - github - google - mailcow - - openidconnect - okta - patreon - reddit @@ -39126,13 +39202,13 @@ components: type: string description: |- * `apple` - Apple + * `openidconnect` - OpenID Connect * `azuread` - Azure AD * `discord` - Discord * `facebook` - Facebook * `github` - GitHub * `google` - Google * `mailcow` - Mailcow - * `openidconnect` - OpenID Connect * `okta` - Okta * `patreon` - Patreon * `reddit` - Reddit @@ -42052,6 +42128,26 @@ components: description: 'Offset the session will be extended by when the user picks the remember me option. Default of 0 means that the remember me option will not be shown. (Format: hours=-1;minutes=-2;seconds=-3)' + network_binding: + allOf: + - $ref: '#/components/schemas/NetworkBindingEnum' + description: |- + Bind sessions created by this stage to the configured network + + * `no_binding` - No Binding + * `bind_asn` - Bind Asn + * `bind_asn_network` - Bind Asn Network + * `bind_asn_network_ip` - Bind Asn Network Ip + geoip_binding: + allOf: + - $ref: '#/components/schemas/GeoipBindingEnum' + description: |- + Bind sessions created by this stage to the configured GeoIP location + + * `no_binding` - No Binding + * `bind_continent` - Bind Continent + * `bind_continent_country` - Bind Continent Country + * `bind_continent_country_city` - Bind Continent Country City required: - component - meta_model_name @@ -42084,6 +42180,26 @@ components: description: 'Offset the session will be extended by when the user picks the remember me option. Default of 0 means that the remember me option will not be shown. (Format: hours=-1;minutes=-2;seconds=-3)' + network_binding: + allOf: + - $ref: '#/components/schemas/NetworkBindingEnum' + description: |- + Bind sessions created by this stage to the configured network + + * `no_binding` - No Binding + * `bind_asn` - Bind Asn + * `bind_asn_network` - Bind Asn Network + * `bind_asn_network_ip` - Bind Asn Network Ip + geoip_binding: + allOf: + - $ref: '#/components/schemas/GeoipBindingEnum' + description: |- + Bind sessions created by this stage to the configured GeoIP location + + * `no_binding` - No Binding + * `bind_continent` - Bind Continent + * `bind_continent_country` - Bind Continent Country + * `bind_continent_country_city` - Bind Continent Country City required: - name UserLogoutStage: diff --git a/web/src/admin/stages/user_login/UserLoginStageForm.ts b/web/src/admin/stages/user_login/UserLoginStageForm.ts index c386a9af2..e7c94c247 100644 --- a/web/src/admin/stages/user_login/UserLoginStageForm.ts +++ b/web/src/admin/stages/user_login/UserLoginStageForm.ts @@ -10,7 +10,7 @@ import { msg } from "@lit/localize"; import { TemplateResult, html } from "lit"; import { customElement } from "lit/decorators.js"; -import { StagesApi, UserLoginStage } from "@goauthentik/api"; +import { GeoipBindingEnum, NetworkBindingEnum, StagesApi, UserLoginStage } from "@goauthentik/api"; @customElement("ak-stage-user-login-form") export class UserLoginStageForm extends BaseStageForm { @@ -93,6 +93,74 @@ export class UserLoginStageForm extends BaseStageForm {

+ + + +

+ ${msg( + "Configure if sessions created by this stage should be bound to the Networks they were created in.", + )} +

+ + + + +

+ ${msg( + "Configure if sessions created by this stage should be bound to their GeoIP-based location", + )} +

+ - ("", of type ) + ("", of type ) - （" - "，类型为 + （" + "，类型为 ） @@ -5459,7 +5459,7 @@ doesn't pass when either or both of the selected options are equal or above the - If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here. + If set to a duration above 0, the user will have the option to choose to "stay signed in", which will extend their session by the time specified here. 如果设置时长大于 0，用户可以选择“保持登录”选项，这将使用户的会话延长此处设置的时间。 @@ -7965,7 +7965,7 @@ Bindings to groups/users are checked against the user of the event. 成功创建用户并添加到组 - This user will be added to the group "". + This user will be added to the group "". 此用户将会被添加到组 &quot;&quot;。 @@ -8046,4 +8046,4 @@ Bindings to groups/users are checked against the user of the event. - + \ No newline at end of file From ee6ac3c2d5f47ff0f40b21ebbc3a091a1cb552e1 Mon Sep 17 00:00:00 2001 From: "authentik-automation[bot]" <135050075+authentik-automation[bot]@users.noreply.github.com> Date: Tue, 26 Dec 2023 00:15:32 +0100 Subject: [PATCH 33/37] core: compile backend translations (#7991) Signed-off-by: GitHub Co-authored-by: BeryJu --- locale/ko/LC_MESSAGES/django.mo | Bin 0 -> 67115 bytes locale/zh-Hans/LC_MESSAGES/django.mo | Bin 56904 -> 59058 bytes 2 files changed, 0 insertions(+), 0 deletions(-) create mode 100644 locale/ko/LC_MESSAGES/django.mo diff --git a/locale/ko/LC_MESSAGES/django.mo b/locale/ko/LC_MESSAGES/django.mo new file mode 100644 index 0000000000000000000000000000000000000000..971aa815bdf9336dfaaa95dcd130d0e7e7520d58 GIT binary patch literal 67115 zcmce<37l2MnfHH8j7iWWYTV;;j0=#^jpB})h=76$GBhqRF?#8~4IR4scKUXMm<_dY zkR_smv?(Jl;hHKcY_Ck{osw@L*U!N1I~-0*MmjyaBvx@ zd^dt8f=_~~?{`4;PZc}?JaD2b?~S0!dlRU3%m$TD3#fc<29?iUp!(+tun~L)RK50q zlfeVdkD`ADF9Y@bH$e5r&q1~8PoSPZh|X3yhk=Se6;%1>fyaR}!0W*U;4$DAK-KrB z;N9T<7rN)yfv+R{2&i^_22?wL3Z4Z1$%l_)uvMQ4pvG|;_-gQKQ0a^Q{>|V&5nc_d z+~>h#!M}p91dn;Md;Vll<1zu94!#K-4K4%s2M0mr|0Jk#KMksV-v>2*zXTV8e+J(T zc3(t4?-xbC0{IsmaB&p1ftP}lz{kN8z~6$e0bfgJs~snSD(7_Y4Dcdw0@wq-0^9=f zNHhr2gy^^6>EMJZ&>+|Xo(kR%D*Y!xjo%kRj^&ximv|zz6~68Srpv>&I2_*p97W8cfj%BPe7Ib+RNQIoesjfQ4v(R z8$t2eW>Ed~3^)q>I(Pv115o|)Jg9Lw?+RDHc2NDe7!*IP0@c4C0F~d9;Hlu3L6!eo zQ1oyJ!sa4y4%i5;1(oj8AVU~cz_H+jnNGgF4QwL36fA(>1K$9if2C_jE4V-54}gb) zn?cp5_ll^94I<|9y}R*$t>Cejt0kr1yJL17Z`(2gFWDP!6G;V=2X3&0M&2* z4yxTh0bc|D9y|?v*=$$uvqAOO4WR0CH>m!7*oU71UrzXIKKvbjzXB?MHCp|D04Vx@ z6?i2029Fnmh_vWB@O|LDAS@OgF~`ZT>%dnK-U+JQPl6hs=fJmuRgg!bX;(!NLmRCJ z2f&|$?*Q*$(8U+O1IK``xyIGwT<`+ISAnA6yTMn1Pl1Pmp9T*CzXPhjf9m7+zt++1 zk)Y}`2Gsam=;Nn>>d&`;8m|SQ+P?^7$fNgyux9iXP;_!Q%rCln8z}y}8C3i314Vxy z0adThg0BX@1uEa4fU4iGK=uD$K&9LNI`{mcp!#hL_%85tunay1J`SEp=c!)b1l5l3 zgDUq|KKwG6^6i9=0r?j#=D&Nu=RmTE-f_K?=br)3B>XiHl8^T1p(DZB;Q2}i9t=M0 z@oDgA!k-66gU@>$1@kN21W^4y8Ps@P4T_H52dX_wLDl>HpxVC{RDXXE)N?yP_1ot_ z)#Hbt`sELx((iwx3m*c$mhcIn+JA<}X`uSydQkb4LFKa?Ja9kC0WTx`VVL+?@K2!1 ze|oMf{|n$8!v6+}A5U*~8(-vcF2N3}RUyAl*#+zMU{egQlkJg5kb zfo}o_!FPkZ!G>077~BJj4lbJK=zSXaI>ODM`t5z-vEVXL{qPWY61W{a3VaS!dw&J0 zJqOHp^57^?bT`K1IX?apP~(0z_y%wVcoFy%sQ&vOkFRQT^*9NHM4~r?DrW--DMdR# z^~)hJtDZX*RQVTxqVt)c>U$j+gY&>wfXhJ9!Cj!z_k*hEqoDHJ1uDO@bjSh^Hn96?@8dR z310}F0$u^`4|anu0~dix{~l1|eGm95@KI27xf9g$-vSQ=e*zu^{>tNDK&5|Wm%}4L zr9TB!IcI|E$MZa1d7?gv4o|1dZfdWwz~jI>zz={L=ds<6KCcIr|9e3_cL#`wi#`ad9{ZJ@oIC;4cz1y3 zfeXPC!9h^<`UdzK@Q0wD`z1IAJgCR@=UL#Xgs%V(2Fu`jun&~HIYoYVbnsFT5{~Wy zXM!)g)%EWjuz~P(;Pv1#AO25Ju{|9_4;nNWoYR4*Y68LxU5^&OT@&cEE7l4PXaC*~B5K@hn zgExXNU5Snhwt#N{9|P6y?}F-w-+^xgU%kr3PXyKfSA!>j3&08B3Q+v^F;LI{J9r}a zCs6(Sy7xOg6I8kx;QnAc_%_=4P7u zz{A0Bc>Fo2ar+yn{)r!O?HL1#FW(7X4&DiV9{d5Qe%QR;;Z9KbeHqmA&-?g2;IV}N z=J9nKTszMN7ZcwKivE5CYTORoh>s6^6F3I^zQ>n-z_ouIsQ9;m=YdN>@!iKgJ`bv1 zFB@=pG!DtIQG4M8z>%m6C{|3GSJa8+z33wQ&=RO7A4E_Zi z11@^Rl{?^Z2lyW1KMy_wUh=5B|B??mJOVt6_&0!ufj4^W1&<@V9MrtI)#E2XNIUv2 zsCK?{o5S~k8n;y*H-RrD{3LiHxXa@YK=u1yJ-+%er$3wkzK-}yK=tQb@B;8(zze~@ zgRcZHr12WxOFh0FY#`hVs=g0`7lEGy)t;9ilox_Wf^FdYL6!eU@KxX|2b~}9NbnTG zSA&;@_6ue$7iEG zUI?n4O<)YJ2CoGl2d@K1J%Q~E7D4sHPOt?20X!XS-Qo0}esCG#uYicG=;|k({Q4z$ z1>w`4a{c!nFed!Z9=C#O#}_<)A3UCL1$+}Y>S^asnGTA6H-MtgAAuUzcqckMcrjQ8 zhd|vg>~iI80uLelAyEDOEO-X^C2&0WcOM@AQAa<`9v6W}aDN4;`hC#HKjHCnp!)p> z9-jw~BK!+bbo3I4U3ffrBRCO+Rig($_1i_eogC=~MOQxoUkeU--0xXzOTvePYS(+f z8^K?L-v(!Y%=tgYeB8;$-Jsh2Jy3LX^e2!V;G03UcQtqn_-Ro6`yW31H}G7-M}N}w z=WH-0+~aXAsCGUDs(#OU{8u0UGf?%fg6{$U0A2_7{EL%&Ujt*p4WDv26Fih~$>Xiy zs|m05xEVZ<@Dm;c~n9tM6BYyy7{jsY+DqQfG1 z7UB1UqSsG@=YcQ(lDj_%JdyA_z{|mv;LE`8f=7Zs1P=iJ;PJ1Z=yv}vJ3Q25?6DD4 z`U}8=z{wtGfy(cCkG-J!ZI#EZKK@f4e*j*vAO2);Ch1Q5Dzpv04;25r^=l40z^fGx zia(zNH7JKxEdtLVydGQzejR)R_?GWFy|51yz5K=FArRTY zgii$z1kdp}8B{)3f*Q};JT3>-|963U?m_TKaEHe)`}m)F{JqBmU;>qUB&hV`z|+7f zpvvh5&j%j?MPEMy4+4J+9t~>ng~x!3KND2CNgl5RC2y_=)t?(YJ`Sq>p8?MYzYM+( ze8s=HaXJ|sMYzG^xgIBjYTrzcH-O5w%VQs?`t zKOXZVhi?Rx{sK_rF$L89B_8hr#}fV^_)750;0M9yz>VPIA3J}>QO~<^YyvfYCGa@# zX0QnMgW}7-f!BaX{>0^10pC5q75Psg{UqR8$QUB?194NZD$m2{<>jNw}Wc;l3%+1+vV{SU>EV91J!@${>tGMp!(-VkG$Bi&@QD9*^0Ez7 zx!Xat`{-Z0emW1liEsfdgWm_Ifir*O@>>VKlJFP7gTZfk{23@Z`-8{Be(U&mg2yKC zB<}Zk><5*8x5w{;qL)8d?H+Y!%o56Fy8Gm&K_TX9*v@ z-+rbSd8=) z$L~eNtp@3u=;K^(CHx6+txwy|Z~aMs+QM}k*G8^)a{UjN>T;hShT1s>%@P4k>@XQ6^54o?utz6Ui{T>V9V+5PH z8i`xx(`@$l1V12d0oT)9=MrAQ^&NhH6nq#wi2Qeh^SNsOrVxS1h%O?{G2nla<^-;n z5kAhR|2N_{a4q7}-=Bzo9Gpm+?|_;g^mhbd(e6s_H-kqL*5B)WJ}!jp_CM|<{uMrr zWX6H~e$L-JEc47V;$F@5e&W9F<3Hz7b2ls+y@l{n#gT{jMSs8aX};;v#WL3r{;H2# z4StYoA=eQk_zKsDx%vs8;vaYocqrjd`S1*|m+;59p5ga?lzBHe)89Xo@Q?Tn%SG?y z3V-+TV*=sd_=q==PJdtE8fCxm!+3lnh)9Z7ah>7g)_D~CmV7?x!++#=qt7cOxr-kY zeBj;O*WV{SP9W{i2tUvD5#nb0c%_-dy?en1@HTKF_g)Jw=F;D52>&a1Iw(1+zw7wj z>VDc9x#ojSJ{;f-@>}Zzqe=fYu0L>%;R=6;kY)*ileuOS|2A+3*E{(ARd54%vQLi~ zw7*Bdf9JY}(0_ojk9T*GG35CM0xtoxe?z4EFCTFLzbA7YLRh**#PuPd+uy&Q@N0Sg zX7FNA@>hR{aea^L8RFl-_0L?7a_Mg?*unKAzpvmrpXY8O{FH9;H`b>+-33kdSNMH3 z*FSNO>BasI<^Le1U zTS$8%zc1$cF2An=&jw%T^SBuN8*v}!dOg1@;HSCtcNut+|NU0NcW`~5Fe*@VEP3m% zk83<}cldNm34fmJ5W?qx;cp7*FC_3TAMpTqIM*-yb64^Ef4E*vx-a^;KM?*Rm;N3j z?q+ZkI2BwDz5|>_`fq@b`)AJMcQ?PK+pOgJ5WffgJ%Z*-`8MItbG?dZ4+gL1I*Q*X zaQ{}Wv0N`FPJdN!8<%vrQ%R%0-}!sL_c+%@C;wmR;}vlV&zuh)&$XEN^;{kNz8`!R z)Zcur*ZOBJApM(tId+r({=#)1_y3J+A-^y2H!cT%&h;N$@8RD6;W~|L49{Or+*t51 zt^t0Z4OYP)a&>YYL-;qOJ%#IVe(O*A+rM+Yl&g*S4}xcM@1y+Q#_!L9`kUpz{`ZeY zPY}A6`%iJ5$Mt|u+v@Ra+`on2H~D9``*s)>}fJbxf&ozngqoDqdqk{JmKHgXK1H_HycMmv@_%Cri&F_B&Cxe%R;je|? zvk9C9UIhM2=3X!1pZf5A;5@=}!LxihCBg^z-=E=kkxPF+Bh8oGPunl7pF4>=h^v!p zBH_1i?cq9tu>PikH-e{vXM(RM-;aRHx%Btn4x$qGclzH`_}#_zEy6=wYq(D4xog1# zi9ep}C;UDJ><9IC55JEj%`|>5;rA=J#@HSDnfR0V{Vw7j0SjRGdxGC*aP3c;Bf(E| zV-DAa{Qe4;{*L6jlj{{+hZFZl@CxuouDiH?!u2XH{e9Dc*)6B?`@_VaK;FLs|LoJ8 zOSntvM#XjhW|i98nit1&+d5m?I_JfsPZ`r$=qQdYkB+;GJ-ywX#TI^)d)s?-%l+bJ z-K^>tFlT;SIp$v>?kSdg;$laktv&83#ciFfrS6V+ajAD)+%vz>qhF&J7UObnb91p= zZtZPvUmQ1=I$PW3^>$N>LT}IfVrNg=0+&U(aUbe%MQL6%!T3hI8 zD|L=7C(q~Wt!GNTJ#nd(2j+GctY2>EY3pgHS4Mc|Ew1YArFrwHY4UWgxW<@NadV+F zo>y{}qDnL=E-fr}FKjC=Qm3>RdOMrv$A!)kce>+D2IJyVcT52xcY3S4P6gvab91S; zvnTDHZ0l5m?qW0DNZ)oB-`UHEP+Pj7Vu(NZdw zJ4g4#)MddqNTF*n9n+$GdtBMArFKdc*|xWJYLH!R=XRGCk@Z9s(cSI`EyYEceNJ_G_h@7XQ^AILBUf+x{dK1#>~nq%w_0A+6xQqWT@UcWlZs= zt~S_Ytfx;`tnq-O{6&RwTxI~`*6vb=^&k~#YxPta_dsyvu2OeTd_i-mrTC`6ju(u# zpzF(M6ay(<**n3FicT3r)q0^@)lv3Q&9;7~cJ|kbg@Qm|2+B$n- z)C*4^-58xsN6l;NDUXX6wY3zD9Xq<?pCP zZD9ct7X6pw-Y#0F{%bGlwg#izQ6Vr@i@LPC)Y}zLnVH7Gecjmz>evK>6wA@1 z_F{Jr|BD@4yW5JiTKpY2nEo%0i;D~C@3vO4OWaZtkCo>aAoBvG*^M}&Y-NDZPKQl( zYqiL>PO3#dE%DsNMo!aPW{EAJF^RXiE+59Jtp_R7R)%>Y`p%N$6YB)EQiSMbP&|E# zD3q$G+3n?0yr8qRs8f$kMdXvs^eK(;lwxaviHP>_`{!b6e-6|mcC9DBaluq z+25mSUt77Wy|6f*$qehV^K8#UWqRHQTkQ1zg6fk3T;?ifZV>@MqxY4g8d8>ONO`Kk zn5rk1z(kgGk|85s>~1T>9lgXr4@?TQH>D+dw~0C4xS?Jw{gFl+;URg8Et2Tnl%mKqqiop)C=5pd6v4{Zg$U1Mhe*@`Ka1tCdh6^M~Np*siBT~vE}Gu zG?IC+G;>*bzR0`+kjTB|-hwnFV{pX!_=OWJ zIqHX#@zVXT-BGTF^27yr%an)6dLd}gQ)3ILNJ!K4fPO*DzOLQ^w zWEaEG6Ho6%{&qGO>qIejNwQWbk}COms(4cy`^zU!iWkjqLxGcoq9eOXWJpI(7H``e z@AL(jqm{`gF3eMddK%-&PVTf9Tcsg)A@HP4_jSxBsFuO zWi&Itw3M0`(623pVn?adw9(P?dwROcdU}4T+#^lyO%o@aan9KzWYf)qB7w!IZyl~R zC`(dx3h^aOELO?34(bnsYkqV(aM}R6s!LjnOHQ|@45RjU_jdZsV z;w~u5-DytSSF270DmJ1w1*plCh&WMH9<}O2qYJqupsJH^L*k^wXBFjdoB<+Tlw&gro2K|0WDT)fMiM!mytU? z2lXczNb_)-N*jtNR;a38XfHR$vwG)ZN#^ow>-4$0Vr8|WiDDFysb+k19H*x)YHLTO z)HGR?7S$MEBd$w%U-oc##GB_{U80B*j6W~T11Q@*t5RoKN+}AhbwI9gX>FcY5GqVL zz3nZ?=gt;70KRGKbQ%Fx3#zEhIx#(z?)ttlo;`KW?6**)+yPGcDt331QwNfWS=9tI znqyl>TRUW!Jg9t34%)O<>Q+Wgb0*E6Lsm%GZm-B$?Gj^XZgE~)r^W)E5mD`*xZ#@V zbEe%e`O2Adre0g`afB{ySx_u?C8Owd8b-6HcoW*k@NPj!_CkbEBHiITm@#t3i0>sv z2|17IkkO(?xF#x#jLkdjbdxybabj%jiFY#0$MOA2sW zRVyhOu&yr1#3XdVG;uP(gn^*loM6Kysg}tB!J@%Wc*LeDe;?-y_LuAvm1s7p7j4-P zBE-{HeC6DCAby#)#b~ahnZ)TInPrqt1I$ukhJG>6T%{Sx9%0Jq6|Z;pbjzZ0Q)wAv z#Vm<-ezaT1dB%}Nn^?{y7cWSEATQ%As95sVWz+0tSQ{tmDiW0Lo9R2RaW2R_-ZW{( z74a-@@X6X?dSb#-+cAqJhRg;@pRj3Jx?PtPq3j^L$azH`!;~(H@1rR*p%=K;SFz;# z*DNs`Q(4+1Yns&1G;Px9(Uf8{Os+#c~h#JHH&H85nA!4g3L)rWwn~Le*#f~ zpMu$x&Tur7o%RIZ%prO=s=Bzkm0&{MH$5CQEH1bA&TEXO;@CqR zOrIrR+*J&hH2%cIXCSc;T0$z>6H3>t`4=5C=Ls;oGqV4EuVjAH7WrA@rtCU^<7Rgw z^Lt`EhsoVf;pTXBNqW#+sc@(1cnl3T#+)mfLPT&@wzW&Y>p;_l9Ox}MeBmGO%5--v z)5JO4QRt-C5g^#u9i_Qu0oq_OfBDj&FtceS3Aq*(x?4mH6d>O&QgDGOHl0Ytn@pzO z;C*0?@zk4|+k4Ax7{FGlS$B9JZ;*AR{1YujbGn7SJm5D)!NVqaG+ieCWL4vu;#^e$ zKSNqqP1!|J#Z|MXt2NGLk6T;)CRr|--sOouI4C4(Y{tQhWlEZ8O7>{IXG~D)31baO zrYA$;#FBaNR;~@D_`=UJ7qe%nU7xV)0(`n`w)!s@CpEI?&nwUFSgkQ4~zM9 z8WSJ!qGEA@{M{{u#pMepobTP=6Ou1t$+;uc4jV872Tl@{b>X5H8_i7DS)lTH&!R1ir5ua6@Q z(qvSi)DA^u*g12zytuPDcC+y*V+?N)Q;$VQL5Vdr$!vDh_f>@b$Q58&7~Q!Aofn-! zZx^bxrv_PoFd>}6QjdHiOo~uyW2VYxtLTBb!4so;p=Ge-5?x}t`~s9d>TVKgoEHwn zN%4{r(js0&sl(0Uq^L6q3k&I62@FcJY`orx0HY$L3A+9CRIRU{5(z!mghVS3S+Dvm zksD4awElAHo@#0ebugouxu=z|NXqlua0YSL`KXbg?LBRBK)Y3m@>mLQX9m#!EF!d* z3f_y*J+}=>Ll2^v7f~oIL6F12U`$%8&M+InQXot*Vr1JiAQ&j&Cc3M6en|>~Gn5?d z6KnpxmhMtl3yPT<_yS22rLVit(uT2M>xM`U2^9O!3kvU=s}sfeN_lmPO8V1BXY>$p zoTMrWF7C`8_gG>Bi4`1ycpK3PBFhjhG_Z=?1EQi#qVZl-XPC{XPPHN_`FK@2o$P;fH$iBm3C|FD9N%tZ#9 zFgB&t+>G)glg_9@ZI_Z18lHd9^o?wxnprYMs?QUVkGfcDc1uJV!J|3A*;`4S>slPy zQk-c*f65219FE1NMCDNS&VV8j7 z=9fB(pe?LsAE*~cCNf9e|K(_!(-WKOs)^I)%$e1|LIFKFiy^c<09epbCSGkZz0cy? zT9Abk<7tLYK(J7sx3rO+_zs=F1eK;FtqAw;G^u_Qekm5DPQZz&a0KE zc~k*~jT&hY6k4UyFa~+byU;ebSnTXt#5`hcP#yi^VM}V>Vf@nzImXWzwHdY{ckxle z_^cX87RXu*zNjcnIBw&L*O==?mLqIq^=W3B!3*ouK2!TucPBHXVoE2KQ0SQt(a&en zk;j0r@p|H0EH7xo^VFieF{h9YBtvRg|GT9DrVekX;p201wX`CW2i|;B^TN5`<37sn5O@nUHX zT6!Lqouf+2&E^jiSLB0Fbyz;p^iK49+}b7&u&LWRsH}E@&~BFQ%|xJDZ7nz0VkWAK zNF!ZMww{2K%&`z0S3JOApp3Sbk`*WV!WZRBVW2~<+(M($riM(;u~^zh)s!Pv9GRw) zgt9;4rlu=0>!~$2=>|W0*sS6v0%|Yo$0iAl2dm#kJ(-+6@q%R*HW|ug#+c%Fa@$L!gUUf^ zlq(}9ml?|X3zRKR7qjeZu_3+ah~JQyZO(!(WM;ccsZ98rDP!{VDYMJ*7#tuSg@$sm ztALO$wv0u(;eHIOXPVu;yf@+17*E0#g4ovDto#m^jhj52T@%z-W^Fu^-OQt^zh8_C zQwPNBHekWDoee%ODy%vsGm)$fW+H0LKFGGtXa*zEjCzpMf$Bw;Nh;5cQ8*(Nx>6QLm$wlkt9|$D!r-Jak6-9Gy_F|0W439W*-b%`NVz*036DN_q%=%DlN6fYb|Rd)FpYC>mZbqC&1=Su)zip|v_` z1^zMX6|E|S+-gPF%;G#a#wnA?WEd%_sZ&=P_MBdn5&wLC`B$WE5YVhb7>+O5N(dm6Ma_CYA?-9reby*zF9xy+!h2UWiAlU z?qzpr_O`{8^HFocHrWxP^U2FmPC{e@{?>$G3OeV4rO3x631=5ur7e5K#HY+fhNR=K zq!&eX-dc6Fm{1!{a=-9rg4QwRaA~C-miSNO>?&apDq6O1el%0JSP-F;8P3Ie2(mSm z*fwct-;-8qye`DAAcwnG)bMwii(y6dH2_Hbz&rw!(zocbmB2jAO}8 zTdRjHZKb;s(@lxmljyTjmAs=onMu(6<-@i4z@}&=avamv%q}(s$w`NH-8WscPNP(ntY&(0xP)xDSsPi%({8F&fLzGYq zUx*huw+N!n^c+UW4HFxj={M~&@Fx+p`Orp5JNm;aV^3kOj5BuLo}fah!R;8QBt*=3iicyUBZMfIwsw3#WvUz}ymt8#=;l)5Qdo$)wdh zp0*E!PAvK*7!(GhqqK<3Bf-`%vsRvsf2?F})P#%h@cyG&Ks9KvlG6MNQbhGOF16wC zj_c6Lq+`ktEZ)*U%D%J=TK)ePqP-%fJfTt5^bIMX&@j}Ek@ey z7HD^KwO3iJQjS<%M`yjz>|l3md(dyOo1AS+296^{1QNoQTqG0So+Zf`skn@ik4Sv! z!LE0i*H+k^jMComKK8`8OGFir2755rAu!j^^iIk_G_FymaQy$;hN8FMZ zRve7f*}6J;enE}`?`!c~#~AkZbm0LA7&i@Ho%c!V+=A)drTbT^xP<2x$YFpAOWL-~*tv|&A8+wvh z%~hIyAp&|^JLi&n6XO}|stsg5E?ti@viD0{%9XWu`ATitm9CCB&{A7xk!PI>&=!p8 zv}D{v=GL-Kv}mkjYfJ>8m71NLiG7f;q*u5H%WEFX~_suYpSh4hEq6EN_bjUhu#e0F{g}CmyKmX z&&MQe;1Yzr>N8}})uf3nlEQOIlW?fByW6E*JT0VMq>Z9d?~<;JW=T3Tnz!qyWS*yYISA`$9H>8@fr$tH7CK4Jxvve_2rTHFY;Z5BJckm$+Ev!umK zP3-y&`FQZ2Hy0PYZZ1TlYwfYxh)j|W=WR-N&iQ3-<#~V{I|5#;iN?m6vB@-k| z+X?J}J*fN8JoDv^xLId**zV_l;P;FC&oj4v6I1^V(U7f1&Q znBeea$BTBLNV7D_$L(Z3hwN;DSvNx&NP0iHtK4LvC*iBwxW(C29FOZR4vSFJ>=djs z=ZxS&j9Z986?R;tGF?)7Ak#3vTj!K9&Yd=vy?wTVl|C5c^zesFMmpCZvQ8&DY2m`Q zQg2y;%N<%{=a}>)SG>&xZX+xXyG(|1R7vAeRC-)VHT4HZOjk@YajI``yA(1+f?7t_ z7ON5B@O5%W(?OUYNN7jF+uX8^mpaKYj93dXh=kcCOnCiQj=~PwypOkTY?|0nb4X+% z=N$|iZj)^7o`2B$f9)~%n;SYbHN)|GF5qt^tYZm7h@0AO%YWiMKzs*?=bEm#(x{|q zMpMMKmz{oly-N{1?05R5KZ$Pg`D^NQ6D1ojx)Tqsm`fhHF38sDTq0_@vzNXB?33oPykPemW(SV1E$BUT0SP@D}4Tl>0gHSE>L@ z8qQSP!k>9R$jr=er{wZra0SO#O%F8@C&62KZ2;4svxoHJ0%hC93~H<5;ougv?~4Tod0(YJU79?nI-&5 zzR^x7Q!AaQ@}}E}$BcqNaAe z@4;{Th{srPyx)O5Hga-7%%r|HgTlRC!ub}o^zNzBq_P&zb7yv&Y>^|JDR2@$OR7d) zR8X69vznbncx8hICk5At4|7F{w(Z1*+^M#-q$Pcv$vAU$AOP;s{$TuIlZ-x$6GM(9 zfp%Q^qSkQM#4`2GMs%Q2X@=DnJFBfb)1Y^5xO1l3)u&cK&>m`PY9;LD7LvuWLlAM< zP;%3GTYX9kgj)$a8J&#_!(eJbLz`%zhqWLPfo(wa+ZBiHQ*7!r*J?w7wR&P=GW*( zcS*8&Z7nlx|AL(~6Wd!zau2tkJ&4Trk@K{9j$ZYzz>w5+zP~P81@9>E7LT$HGbYDS z+=I4$C>bR`f=ox1jO%9lwVw7;cRA&rdD>~GN!GI*pX9X&S!Py0FVNtmzSpGPo+7IP z!)jX{a7%JFyF;5=eSFfwnwIzOL(A1dQGeq<-auoXT>B=x$o5$daZ+8HK__K)km-O> zkWZ*lP8FfzSU~QSroGpQ4pnQKhHcE4qqn0lZF1U3uXC|f&N*RADU@Z3285%8CAa9} zRzlF?vS+1IJ1hN8z1;{6)81_`Y_Vjdg&ws5RW!F~G|V=k$@q%t50N_Uw)aK&ImdxXp#KN@*BtCO z?A)BYsZJaMj)YnZ8^hr9|Es??79ydxxnTdr6MJ9WN24fzck5rRr@NlUJyy2q84V(s>HA zWgSF7Zj+RRjO(A%$qkc4v`?Su9E zj+-2C0q9j5K|gfMX?i4=mU&4N4Jq|D2({LiO^fxu4S^>07sxXt8zDP}Pfm1=Mi3BE zV8rbqyg)nDtt&YcK_#>j;+BjWq@dJ3Y8CBP!fxEvb`&@lusph%z3niiQ~fM)HpVA% zG?+<~iAa-(Tk~m>7@sK11FBRw2x#SwaMM4Uamx;Svi?2)V8(SY?7{l?{Darn&f-ji zG7&zBBwklyK86>fu#YBvMUJB?EG(=@jijb)zvI@8kS&#PU+=xLRh^Kb8!atG`n$;G zq%>cF%-u5YH)+w<%-r)3D5pZuAuP9y=_8VL6&P>6-*{4}zGG#vop>SS#t)XuP(c-$ zu_&jR3Aryh^@uJz(6#tqzQtk6n+`BK=cSDm zjyUEj=48&+*p`WeeH~+?Jc|}H8dbV%>Q*M?ZP0mBwI)0xF3qIVI(LhX_!PRCA%agm z*ESi{?%cAiiaTc;Ip-gVt}fWSj*y3J)XglfnP%ME#r~^eft|)CEXyIaY(;log2y@W z<;Seh+rm7Jrvhce_H8MhJN^?=U|HJhs_JYoW5ZP449pEfpO^;P7+sB@AnX9jR@mL( zV0N8$Xq+>fN_E@=#mL^W6J4!WD9TF!5#-;2Vt1TAQ2(AuN^ar2C!4Yv*)~qL0?`;< zQ|OkzA-bkG8a23hQ?u*?2~o4oQG9G#gsZxxT5#a1yX^Ndgheki&)wTDaqIY3G{%>S z_syqm6r6pPB83*`X1m3)n)l%)avm{7jo8iM2G*XMgy`thM+==annTY}~n*~}aS$2e!qvtkjHTS+;u4Tx2O6VFRU zEiXy6xzM0t;`fJTJ4dInW$-c9(uJx^AEcE`c~;xmo3ExN%9uA%G%J%MpJ}r z7NHlG;xr5%Ix`j^n-Rsr-+8&lO7pIVkFxL{t z#(Iwy3}B)xxT3wYDz>6p%t@7cy41~daOfY#EmQ!HGB4I(V}QMrl7$c2)Lqo8Mrc3f zLk_S{IE0zB%nx$XY4h4kbJ+{zx=r=OXS{T8blR-M)(VB z!RRR|O5Harb4ozdjCGu49p2`aYKwG~sie*U@A@(sOKl8r2LTFlgK%ozO`Kgd1(fly zTc3Linr@+3xh%SiR<4&=t-ZXbhxvMVmF-l7a}b6GdXvsuPQBV*$X?Hz zb|78LyrHSmX)nn*8p$xMtsI7t8e>#HJa6tLS?aOlgk62>+FNEXk%&b=XY`WyY zo**4uc5gp)GAN_ix%~%jK+2n& zx!UBb9n5akP%C;&-uQp081@%^;`ciF_P`e7>hAwiuV5s*Z7jwn&M}5{E`OSll|5_} zFIKS0&AZW6iQMMBl<54kCNk;>T8WutCDF7NCtTd#g+Q>>0{?0DOqPH9VDe~ePGECR zX@9g*Q)zAIc5@_m+(>F3fHS3$u*K7MdTQt`hFz~vEM0D^rz}+CFkkF;ky%GW(WaKU zEE}V@_&tk33LsznYFK9b$|6llLFh2>6ct{srx!oKA(oMJ3|=jag+u}kC&R(7nzvUs zMpOius--}6kzNF4wuHoL#EOBYwZ-8SWaf@v{aIj#Whc4SVW?wnkr#foO8A%~N3vevy&0KyoAT2O# z;f!p`8Z#*;2PVt>m8v(^-418lI61#~Za1%Du6NIrym~3>-AHqsZl`$=wl2@)hJUK& zw$u#m5Yg<_FukP#C0CmfC&sfTO}>26rBmapr_OGge&x(j>{Xyc8)lSoWHwyfJFna@ zr!+AhHS5ZT*-V^zreO*lJu#ke+Jp%Wr=8a@;q3VIvnQT;&KvPFo;K=?6WaLL$s z&-TGRPwdtmq$|F7yVp0S^3d+FJlH>UU;og(%c{$ttgKj8S+O~J(R;R_5enb1Bc_zf zBNV>7x?u@{oz;goWaIkcYTx5~o_Ml4a7%Ul?#ib1@t!BQ5v3A0tgLR}{@Rt5fz8zi zcUP9LiHDZ1tS;X?w0vhKkBv)R#jcoAE~WNZ7${)c53R_a=k1vUEQe4RUT4f@2cMaNIbNr&sDRs zajSLBiuKivcMYxW-}Crj<<@>gP;DLKJx}zB1nO0FAg(U!kEqPdfmUKy8SWgRb9F@p_@iVvahm{hqm_( zEr%Q!+FQ5LETvnwEw0|SESDeT2W@Po_DayVvwHuUw0`OP^0P0?r@Q+1Jky_lXFj7! zsg*nX;>xz2)q(Ypd_1&v2Si_4-Cx}TQLbGs(tBiwk-~G`4tHB)@{Cm zm7Oaqkn#P4)qy4IjmlH^QSVCMgFNl(C*NZ2d-Y$ii+l~>4)xysgQDyVb<<6iZ9AaQ zv=`#)`o5}q-_;Yg$h=&C=z%^Ps`Udy_iwGCM>nc9`O_P>KWY6i&{w^EQ~kH=djhIj z67}1-o0DWh{kf_m@XuinQH4BlsQYArHpck+BfCP4=B%5MLj z{_5II8vEs&>BWJeTL$sAUl9%U_ff?21TMxjoUMLcRa>5VDGQvuWVU4 zbPFut2a>0gqN>lXsoZ0PoNs@cLIUBbC6(1%qw3m$p*1V%jq2_tlwV!S*qPi)5|48Z zg392Xw!=XU_ub&+4GpV4yWaS9ec#YpD$+MFblV0bHnYRy)yMnjZRE_8dv@MI_f`{e z9631=58bzx;fo})~N*Ma{!80t~6hF&t%4S-Hfz z(ngoo!u(5Ui*?L0=G!~+!s#PRL_d`$c2w6c6Z;RX>lZOecuS7f%5h$M=D!U<>*xVB zFl|P>XXjw$iJefQXg%y46y;_H&*dNdU|U^Gr&Ke|+%Qh9W1 z<(>f@+tVgQ8F;byU4~ zhh`htgMQ63@EetZF)k<(xNbGfnQ*43j(y|m#(gfx3G#g?XvBkZjS&M~-Mqv|d2PQm z1U2BcTatMda)RAb`gVh46pc_@+8>P&0qJiZTDev89on<|>OkND6NCOi%J?EImswO1KJ1PHNfj~laW7URx?})3L?-D~gQjs`ZH0(+9^nt;T=`4^Yl4`kWwc^^i_k@{z<=UP}#Yr^59m@aSsnVi$e4GP~Q&z zkM?>q{nWwGN@g^4S-NJ^4(9xHW=ZtksJc$G_0XM6E;}hFGsPe(H76nYA4ZrOuCEaLVMwej5sVsje z3Wi2P4Ui2)g@||3W1zBP*U;KjWN%m*X{vi>Tg;GFpV=H&Rt;7j-6r;^u7i07mAHcG z2Dyx``ILgwejvREptwhD8kKIazW&3(Fdz0Qg`frQuG8||OkBBjhuGxSdI{5ZS2nKn ztReM!<3lyAO>#8Zckdm>P&Q|06Q&BHlmlxOlQaTmsg0sZoNRh^qc`#D_k8u~tq3t> zbe#dn6fv+?Ei{WIZ6%p!k|edLz>a}dl;oqEs*f|U8TG7woas2IQVm15LO?55MNZ<^ ziOEdzM$}2d@jRNLZyyi$3}HUskG>c5G6^{+7i1Gc;BkElPe#SK>Z7Y^uS5-OR(bd_ zWZPpHe3A2k>@CI6Ejwh|!5jCAMUlx-ZIu52L~XRR$^Ny&QYS6em^cxu#$o2#Vw_V* zbCN*BZ%QGe#CkfFsCIx()`<+Y6$4&Uz;HfiKWPoC+KLSotpA)!9_CLoAmZxd7zTr= z!jX$lBTQZ+p6;RdQe%TI+J)wu4ieP!3=(vAWfg|S`p702s+sRi)BZL(R)2T{VqEQZ zNsTGi4^V?FQzT4eR>k1@dKp%pTIMC!OuShV_|j(SyL)$3?tMlRSrrqd?{U;jsrufj zlxR9xs&aIO(Rj~hDS`c)t-_|PtEMi0w@7YGk2*cDIWsy54SLBy(@c#Iotup8`b1?+ zdk{Nl!(EjXPg+lG??+sR;q{X})3$SnrFFNjPFN+W>qGbf@UJ0lwk#2iK#q zMuR4LsG8NrIrXwR+UF;fXVMybYC99gN-Rkxj~GEE_EJ&K>GZ_FxVYYDC@dRq0z)24 zS4pI4XndouMh20exDok0U(>Rcug^hW8rQ=m4dA zma#c8@Q0Z#UhiPiS~UnE(O~5~tnXn_8P-pk1I9}z(XuzEu*G~vJ7ja=xuHh&XvHWb z5&2H_N-T0K*(`Xm1+!?DtUZy`CF{u5R|;k_j#ko0$_XZdIS7N1jwWYPDLWa|ixaES z|MZg4To4Qzf<1%ltJ`fZa>lx!RPlu1!_9QXK4sy0lhM)`4a-7xznyu=b2^PSPnNY{ z1-A4p8Uv;}Zv!zGz~GrGB%b{&iv}-?20{M62UZ7;OayL5SQ)L~3LBDm%gV|D6dmU$G1(2NgEJXT z<(qcC>W;MAwlksj8h474BN;1e)>H=Wz%0$!Ir&d&Kqd5t=Fc#jLN&&nEMuo%a3GpdOf1ujSHw!~HH+n>y8()f_7^pO05 zsE2(fRzrbC4Nh@!Uc9_&Rxi$RXwrKjCptkBVa~F}oYM@PxI+9ySh;I;&J7nHwGL8q zl1##Irp>9EtH4NnpJDyy(RX(sya$I6H>!ZXhs?6BET-c^!<~Zn)9asyHgd_)3_r`}Xi;$R7Xhj9d zifA%R!y8gcl8jZkp?e>Kre*;C2vzt8mXbJ)m&BUw*8~6;H+CDK} z{$*cBG15Tqxi2FgqeM51s~=p-B245&cnBpsS(BC}%N2phyuN7CeQ+&`Ra(B$ycRIF zXt#h)pBN1yXa*1_VI?(Py%Yz>=cr z$61E2>v%dd%X;P3D0mFb?v?C9#A~W_N-%lZ8OZRV734SF&pIM>;B%-g+jhjUXKSR4 z6H+2?ZT$L2vJTW?Y_M*rHwl(ganp@!dW1b6w_>o^nuHWZXK^zhXLu+1z>9Y%n5&)% z+q)y{Wvh;6&!0ZZ;nrg{J>Wr>cr-gY#x*z2G2u2?QC_etUwQH7RA93&lc%g*UI;OH z4EI8N!#gpzndb0@53OZ;f@veJ0vV|sY#Q7|=KJuHZtoAJLnRl^&Xv`H4KyM(Pw7dT zX!?R*#ts8BY+8T^+1T*`Cj9;xm>uMbln$VD)Rw8hYMu?+Ip;TWqSAS<;5g zRFI`O^k1e|?OA&<3A_%UWbQpj*({uK$xuODnk$CZK9=5=uneoefj;~+qNP2|-_)W_ zO`zH*#wUw~#$dsmHcqizl8J2H?a4%zk%eMYD7CtY$s*Lk9`>GLKa<%lZ*CNdTk`ffX&Oz+(o~rf6RKqJnK?@%ahe3P(DF1Y3@tMj34N4S z-%L}t=qQ@Z?h>(yb1y}EF_h`t#&n2HB{BobYEf@%o#trm=*SE}j@Ih3?M#+> zb)N}SDS{qd{Dsp~Mi@qE5hFe0j-`6dA@@NaAGZeu<^DBhj@-GDT}_NI48UBqEb$*& zMDE)@A;0YRenNh>Q7CdVN%*$UaQiHC1~aF*BiOUw_DR|(<4X6c%eL;>wS>ll+qYJ? zXnT!$qc^P|hqLxB?PQY+D(g$G-uf)WJxuT?q9D5wGo@A|bz2047;W~-awDEmOTeZA zX$Z;mYhvgA56JhKvGBu4nJC#fpw4lN$Y|F?E76fm4U_?5x{muQP-VqdG<18!o~HqB zrfZDyU1ob5R2#Q#D##^^j)$x=ksBQ)+N*doP0^dBBg!x-)Dkz|yX3@;TQy1A9I-Ow zrv!$C<*=Nzit5INUXoaH7EsnA_PfOpKD0pF`!r1_ej!Peu%0B@=sS-ocF*HGDt*f; z>u(7T;>4m6w!Y0nD+Xme;e^Df zQKiBYULZx4E%4T};iE#;fz=R*(T|!lc(>pB=XVpU{zS?o$BxrZH~bJXeI1#Y=x0@F zWoDPD2|Nj{jr}4nMkja=oZ*9~kM$F2OoI>D7&~h~hQAg$C@`x5sAkehi;gu!49Cf$8go0kdwdc~uH()o#?wK^NSW$nU15?;hHNck-tS+Oeqa4ugfbC|zJ zWEDuHvVD!;%bQ3TDQB!givXtk&mGxF28B8BUN~-HH}NNV)Yv8e9 z8^lx0V#8{rj?eFp^GWensN*pObmW-TGqx1VE#eG~h^=sy729}PQ>8i_c`%HsU7<-% zHuyL(@5j85rI4GV_gZb+4LH22VOOxWmD0B5(w76r`whd{Tl!2A3JQx2k!w#nTzWFB zk6Tk~ZW;B&<74@&9TisxKW2>T8^UIa^h}cx;IIndY8e&>k!PGn^{X{N$F6bv>?2pc zha6|@B`(5yh*O67B67WB^nriz(cv>vkleYw8v6PYM=@9>sj#K!VeFb6vAwO;&(Dt0 zQ~5{!NSj&-gtNw|C3T9DPKy+hGLQ;_(yxb$d|#+~+J%zNZ&B(WPjs&T&D?9GY+9Q4 z#@CABVF}#UkK0$7XK@Q#2=0nTib@*bQq%;!j^iKJ2HePRUqN=%1iXHhOW@-)gJBNj zZZST=tHg3G1(^`msxWJ}SdKvwhK{u(2&t%yUDdct>y25Rhsxz;Gis0`;+&kv!kAZa zb_zn8VW7rT@7RscPV=8c z*i(IDaTcvYwZKWTosG%2z+0AHl1w+8iIBNL!#1i*D_b_RP?1{pa!yKnPiQbqxK z>R&6(h1TM%H8+nxsz&$N<}tsz={Kb39+Vh!52i$nAW62j*Rc*gZ6})!lA6`{nrbRx zJJ6g`{b6S zF#T=fZ5Mv8zMV2bw(f>3R90e?GRDY`Y*P@5v0p{4+`U;DXi1hOeC=S^>y!DmB~=;T zHW}h82E;gC`_d@pbl>D*lW%#&(kOy0LbcvJZTP`58>UCQ4~xkjLfKMD5a|ld>A9A>Cq|BUsnl3aBP<>4+8Q1i z`BwOFSgI#kRgw>irSbLW8PDapg@eS0fa$wh3WjrKyNy~Huy-0(ZHE~Up)8yE?+ zXK(}avxtHXQVSrA4W*fopxy@Dg`5tS}tQSEHY(V;U^YXlUP-uoGlps%do>?W!oJn zVMiX72hr}ef2n^n>qXV2D>6cDpAI-i3CUa6xV;K;3*Gx9nGRogkpmb?qR)(Z29eHE zzKlz?(o(l3&M$ySXP=R@qPnFpUVe!;HG_R$oXvcZ%&R@aV{-dxVh&Oc ztz_$lou|~q;XJ#h_sTfJX(As9M=Bm>r@9=D%q`oO$;h%P#;-qNVIe27XO-ij+a3$@ ztvdLuA7g*|NhUX$Ro6Wm2HAg_FVD-_ZpoyweA6lCabEmW}O$@ciqwD@Rv>r%h#1HPzIF zsUv?DhRHw)$=uXpJNUgCAFfw*^qgBXF_va}afdsrgFCC6IOCGILK9l{$(7w6+Zka) znJ)T->Zr#g-UimDUgCYPUfTIt-+`tSQ+dK-iknMns`?^Y&Y@n`$nwsyVJ%Nu6a=Is zw@C<2etDlnQU2p!YB%Jc&5waoge_^dM`r9d4p% z*&|3qO}W_(s*xv4UrQ)qz>G@VDF_J$>+Vpjc9WyhcnO?PVi+!0O|SW>Bnd<2Vb~M3 zFu$|HXQ^|4eYnWr+VpI5Kf{lTEXz)J{F^o)DZLEAtv?%Qp|!a!tiFGo+dCvrtgd|X z*!iK&MW(!ptOgzmYOQSn3Cyu&i=^Vv#;{S)^>B8+c#+L#-NSY8$W8WbtJ|8eyk4(c zko~*@VmOsJv0}a;CIPH9ohbHarLa**Md;+^U-EO8G&uFSw8`mh9>?qRD7}nMoj< z%;qf9l4^6y^_C@LU1*!M^k*|ENV$3FR?Kq~ z04RNlAI~=1`F%d*X5Iu5n>kZVmrCWM6Gf;RJ|9Vk;K%S8*6t0>Rzxk_%eW#9r1LRa zsqfr`YVvlKR05^SJ3=d`m4^)&HWwMkWxC5o%xf5lxSUnUe(KKaG<750F<2Jx!YeiG zP08Vj_To+6=^0h+6%r~f-C`yGSnU=Fd)^r{k>|J^WIvDMZZJ87y)d;A=44sLYKC!t znsB7}kT7kIe-aBqt^u~2*ZmBhCh`I1ub^6JrjxjF^LbqT`0fhp0tn!XdD9?=<{@Wu zHM;k7q~=ko^}mQ`jK@vGWQKL;RTGmgkng?Em_ArLYe#NhDSjF$fG*?-KNrX^q-6PH zL7vGER zBLCGraqY?_H9Oc}^f&j?+WL>~Wg@a4-SZ4IyG|UGWb3}HYTlvM$CUbO@95)E{+oLU zFMEHOl7xdoa!=`7e186wrcmdgF_et^BXtxuq71Tu_BI6GW(-S24L=h%Votxw&~67_hyw5j7pj$O9COnZo9bp z)FahR9L?RTrq+qiSmC)jEq1!PbP+GKoE2+&lHZCD_Ft%HoVPPujdi@0Y#^#Suv2(> z79J@orQ!V1J-JM?`<>nA_i9pmO80r&a-F?VgjE==0S^0}d0Zdq%LMoN+k0+EWY@TL z*}M$XSM^>vMeZz&9?3`eukm>we^Ns9cPBH0QQi$A=ZAY_=%fi%dD=%oh{U#|up{V^Wt^l-=M2Cv6noj8zt3&(t6#k5WON4fuczHa} zAf*tKLo1d@*bf_V4NchEnEbSte7LU$I$z|lj|Mu)rb;^}nbD`OCyUa0{X#;BkYu9C z`+b1wUsn}PPWdfJF5bA*%~9%6TcyqzNj3_+fyZ|EWIh)yWtFY-iKB?^M?-oMpj*q! zocT0)Fk+~6OlSHKk+7YU2$~}hwN#mjQSNZI>e>7_aEk{o>~odchg&&$@42~NT*j1v z-*cf<3Jl(j>h63Q(u~v zYXTqszW)(E%g8QcM2*RgkcOdm{%Zt|Kc+1~YqR)PQ6lCExQFhcvxY< zJG+_b=YPF4#DRH}%&tQA*A$TU!QL7j%pNr=XX(HlucC!A4nA9r+|VkKBI32<%t#<^Fy z^}~!0G`1Wq4ZEJXJ?I7Ay>I^cCH6H)Z(@cml~w{ortRUL8EX%Ho2KGc34Ds=GmxfS zJjIFrm8n)ZtPT!k3G ze@)eyH!q>{ICZpki75zDQ@?{EF!+ehcStL&d9wwRs@|b22c(+@tr*lby^5J-08?Yf zXy;x^dC|x(0FnNe8Wis7x~tq)j47|;d%t2j+TMb1pOp-|kHRbS5I^38vPGz*KQ&g^ z?lRoGGbOX!njs&0(y2?{ft({ zb6y{V1LuM>66gz5ET=+9I=;BqEe{{IM1f5;uiPgpy>&lQ9N(^pb8G4OPg(k>{UT&C zlO*088t+MOK)#_Y*#sR|gO=$1CYjKO*|;EunFUkSLS7JWFJk3{5Rxe4AM+aV2pRKu zc[NXh9>&(H2iEy*Ax14)U|@>zyn6~`>8-li8>W@?n$TYe>CE!b&JlSBSxVIveACqv#!mCZz0Tg1MGUCAxo&bb0%5hz{c?5Bf1>jZj{~^u7EecXUPz zl@#01zqbhYe#pE|ne+u?tv54_bT`AQ(qz36nk_9T?=O%8TIU0|{eMZ5l`iO4gG@@9 zYV7@PW+`jPL6DDAAn-zqVk^<&1RYDV1$mQ9Nrh0d7!$Mm&asQV_zt}yd9fS z7VAGE58t5t%xN|fC^^?j_PDC^K`BW#L+k;2aiMfqYpxfP3B`~1s-ts>XQrBrr!37n zdF&s~HyMp&ignJ)Bh7RO{tU|}A+0vBDQu4aGeA&>d-MH=8Q?B}FR*f>x%P$O_18Msb{2)z>kiTvt)rgOLLbQs-i+2k#nXdk5z98lpnLf9iqaEZlC$d5N?g> zYpVpgkMFpbmPoYPF+Fz%IX%RaSW50gsyKlC$k)-)xEX|V-+I0&=RdHT{O~tDk>=;R zka(Zc13MpjYyhnL^?cUGo`~^qb{kXOA~bi{~TmYjkwkmp*Apc zaPHL0DB5d9*{PHn3#Wqb)ZxEpIs7&tS?)Z4sWR!elDfT<7VTGT@TM=}Sp3k+N0^~K zjb(M+y9GAuGCS?%$24;|VxwLWmwWAx??nW-9Y6?qM@f?$vyCHj#D&|SABG?$ zh18jlJQuoxkCi?8OiqWOdt`{G{H3HUGP-wBxMe82X{!K~FHxW=K`&z+se+D5!qy^F zILsF>bq+5r2d2V8CRro;IGAABKF#h_Jg1`BHG@#FdE+ek%1Qej;ETyJuA{u1^Av@L~#xNQp9>iCc6y?=UY}`cW%pX|`TTtnj zab6aQZWC>ZVv_DiUz%WrCOPJ|=;r%9sgC0)BiK~Q3M(q66zf6t$R=Ld6sXVp)#aOX zUF46vI6YKMU;9K#S;kFa&y$GMA0Om3(Wxg*zB_x}ak9|hw%a=mIbB+)a2zpgXs4gO zaJN)x)~O;9iP>=VYwybk{%>JtbA&($Lt#qsY7189!44cfdvKgRSb`mG6TUA$1YKtK zOqLB0k`NN!8_!#>taE6KdiBRal?Jd+zm+sQs`{Cp*~0UU>x)>iy$3c7MK`&%kSw$8 zX`($cy*Qw*W?;QP(Nk2n%3!!^O5$)Xmzv<*_y%Wzx+#BC6>YL539A)TTW^k@rbMv(y0kBQ CtdQjZ literal 0 HcmV?d00001 diff --git a/locale/zh-Hans/LC_MESSAGES/django.mo b/locale/zh-Hans/LC_MESSAGES/django.mo index 7e17e6c2817f72d74f80547c1633401b7b363923..d9e5e2ac310add99efa2b89d2e41652c2ef6eb42 100644 GIT binary patch delta 14296 zcmZwN34Be*|NrrWB(}u9uNOh=JGIr85?Z^esx9J%5DB>nrMQ%6tVP69C8f4%32v>4 zs(#Tb)mB?etJ;#a3vFq?-&X7Uf4%RF|F7SEzvt1p&-u*EnKNf*&bdkIy{sY!KPck8 zQ7$0O;pkV`acW>}Imanq#Bs7hRq8m!S~<=*ERG9tGPc3n*1D}7=QZNtxExhk3s&Gr zd;@1-(YB5=4Ci4(`~)9$9ItbqOmzx6wR4;?O2$pH@IHRx@R>0>l z3|C=UJcc^&yp6A8An|SNj`wgjw(Fp=dL3s!nMxF7V}HDlOoG$*5oQ8MVM&~Z8t5Dh z#tk?QcigYIi(Tx=`1=a5stb>P81HOWqq3^La*LO;GG8b%uy5OUzI~juNXacIE z*{F_Iqh`p5%`p=-uy3&!26c9v7qB1d{7a}A$w%GTZ>aNwnQpHxRDp~t8lVQy5o=<9 z9F0@38lJ=2n2l>NpsN|^daO?T8tTr@pzbsq>)~%UuE~OHK&??r8SyCdUy96d3Uq?o zHkgfriC3X6d=qQnpI98Lbu%4=qL!vL_QglBA*Nse?nm{12zBAps2ltowS>33dCl&; zPr)1t61p?hg&gM&@}Cpb({W<35B9(VSR3zRX)Mot>rU#SF4PL!V0UbdiC7GGA*VR| zk$Z6NVk>Oz4QD5knSc%OCDaM0P;2-;s-q!~nSmywX5tSlfmM5(83@IviCbbCE=Ap; ztB)CAGi*uR88y?fs2TAtAfqW+k5%z?)RdpW;rKP`&N@Vx4tt}fe5j4bViDq4tclaG z7Oq4Ma4)L;QFP&HRJ$DH-n>o`7Op-85m*o7Fc8Qmpp#0%71fH)n?;da!(j-YPjJeI`E=+$n%NhTBv58`gHA-2Fs z)Y7a*7aqYxyozq@&oiol`A{?WCF;&^VQKsYTVmi4Gw}AP85@fl(3&BvzovMnEy%>8 z#2?!D3ab7))CF|gT7n?dQxJlcv9Yx$@^W)VqGom-@}xPHhM5=HNGwKt6xHvkVYJd3 zU8dj}{2n>SiFnd+SYGF4dp0BFf9F)8OS5ph4@L-CSHRfco@s!X$;0I zs2R_;v6yyAG8v70C29uJP*c7Qb>f?-se2bSkQ=C( z`4!bZV4R7|VtL})s2ONujX=%BXjDHQR6k3xq_+?kBGZq8eLT!3@Hf-|j*K@0IETZC zucIEzR#E0ck*EtLq4vU3)Z=yyd9^wvCYZ-~8q4t6oYhVg$CU#&wJcw2BGU|@+pl&E=l6fywL2bUUNzA`8 z9c)E!)Y=cn#<&c-<6+bk{?i%~V+K+W*(Odm)P*)9+sSzoH8W*-W_4Zz)Bw7mHv0h7 zfJaXDnm5}-3W`yXg4zqKQ73Fb4R8;t!(*rpFQVRX*{Hp6&sunjX;%hyetm3+9k2n8 z#iqCzOQO$9Mi)GZ8qrx)ho4|k{07Tl0jk5_u?+^tnt^pk4P+pypRw2kqp>EgLEYGX zEP=))($*6pPy;ML^>g3G!EvU% z7HUtl#Cg~k!}a{XM@CZ`5^p-Lhoy+SVtsr9126#taVDz$T-2JUVhHX*ZO)^p^FPIs zcngE^j`a^z`{L6i>tC6SPNc4_CYPl04##TQByn;YvHq~DPE7d@HSNY zeb@*Oqb~e4>Uy`a3fFi3B%=#fn(jCYuqH0SbktfmN-&#rH0lELP*b@CdD%JJPy;FC zF>lP;s5PI89dQQM!TqR#UBc3M1HC%&HkmLCPBc^64jT|Zfo0HxFXJNAo2yQeogu77 z+#NOb&!FybCh888QB%LxmTyJ%n}J%|%Sp_?F7O8h+O;7wOoNVCn|K`Rg7Z-W+<M#i)U;naTX?4$>*m5*$aZ*(q#`=dcq# zK)pIUK5Ld@4pt`Kj4kjG{)Rbt7QdQhUdcOWn}Pp=|De3qb7o0zqBe6S?;LaC8aSGQ zdRQJ8U4vj`Ti$9L)?m& zhHhj9_P~E*Z|t#@zAy#5VA*BnC#eDGWy3m4$&AAy%lXL{CtzdTi@NixsF}EjO|aAo zQ{D-+1jDg5PQli=4E5N(g*yLBtb@OyX1MxFW80O?zZ&+ZAOK_0!<|k?-BHeq=8sN2 zR+)~^pmzPga6N{t=6eC(#!zgthQZ(nOvDWAiJ_@x025I&umr2&*;MAg6Pa%)&|215 zYt|+dV~E>fX-vl`%)nqQpJwjRg{tp{<#3>NJnDUtgxzos#$y(?#HQ;^`_W!9eJPlR z>gc%jebj|MM@?Ctjdj}^NC-ybbkx*dMVx5d0{?-^&|K4PqS%dm= zNk^Tq$9ls05o(5RVGH~YHRaVen!jjtNA{`XMGYkIC1XV_OI#myeg`ar-H-uzok1q! zjK+#oOvcA?K5E1ltogW=IAD_*;7-(?AHyp6h4r2-4|&;?x3ET_1{P_Z?w9pnU<+1b zFB)t`b(mv)fSRhxn@tCy*0!k46^_mD1=N}!LbcCA&Ez@Mg|FNC?{OIMUCH&Gh%LMx zaWl5UrRipkv#=Yn>lHH-<4_&XL3O;u`Z8(&8K}+mC2An0m@bu9#Bl6|Z7{`}gBkt-`196jsNoubKh0v-ZTnln+GSEzVY3-gLWZ*Aev|>5bY0)2$0p zGm^HQ^)F9m2LWn&)`fPIDm-YHH_OQ&D%m6E#!spr-H()GjW)%WPH`jwOyo4g7-j8io<)VpX-@ zZGInUgqoSbUNS*s=AbUT(7F!Q(QCH;Fb*X?feo?jYv#A*j;N{ZWgUv@C(1el>k%(O z-N0V#j%TqadW-Hc9rnYT6eM5-uEIKa4K)Mzu`5=7-MpHg#Ky!2P&0BJbt7foFaxM; zZH&5+uGW62fjouu?{%h;X-mNx)NXwjb-`aS6wB^4U$5lqU5LxR&2Nx60QqUg`2_poy)SKZVcEaDiWYl51 zf0&nQ1lA%Rfk`+MRsREOJ2|J#wi{ucjHM}_gWA^1t!Y??cnfN~zHNOMwM{Rg2JXE@ zMi=9VUZ=UO z=!{`hM4&D(-MR>ah}WYoumv@c4^emgEtbH$)(6(&@0v|p!5W4dSQl%5EUlOE7&0ML z#GyK#gPQvFs3{70&sfdc(ApN&VGq=RhhP-CQJeA{R>VK8<@YAxeXZ^otg7~aH3Fzl+i zfk@O0EXQ(~YTfCV^*?3{E?B>^{%j4rW=^bvmFS>}wI^02e%cyuO}1`AUGRYQG-}GP zU`?#>IWxxfoz`Tu_D^AHoPkwvF?PjtoPl3r1P=Sc+|g##X4{UjcnRxax9eulMBy;v zX*NECTGC6X{{KY(FJqOyG$U<+6{zTmnzE-b2FGAKd=K^Fd4O8$qBo39Q3D@rjl@#K z)2;JS?|~O_IBvwv_~Q-Mzic61EMJ))6khq7-vX$(kGiwv-_R)@$I%#k(`?qs*pYY- zCSf){jw5fG@|~!Ge~mh?U$)t_yRj~D9@fGVIn2K@jdIK;i@@r{@mK?wq1Jpiw#JiK z6@SLs7@TW1ZBtbHAy^IL(S=Jf2wz9;(>bFLjxvSW7>wiV-fA-ZNl^`|df_+K-sPBkHDD(bET`xY;ehLW^wI^MK($`}4iK9T&Zh4lT) z5le80)R%OSxEb!kf8zu-ut!q{q9clO9nYhtS4TbS#u9fYjUjzaT1?WPF&B}h(B@Bn zOYeQQeKQU{`r5E!jc4+ZDobOoRmVDp5>L4ePqkuwQiyO0qJSt zWR=lJP0(@Mw)wl}u~mpKZaTwDaHpIVfQZ-?28q`=k{l{VbHeW7Cx^*T;jTho@;hjWvZ;iYhZtx%&LRIbBjxDY#0R~~1P zbd)Ck7+ayfPIZhVA8oS!uVTGwx7zq2ZRjt}1`TQdA?a6=H;j*mM_C%pCkQ1Cp?nm+ zNt#UlB5uY|+djbh8h%N7iu$k6Wy=ZuhyIbLzH|!XUymPXmuL5%6GYI9RF)Q1)dA^s zNU&#&CN570v#}@Y%Sea5toSx{GAVCNdV#cuq+>TuB^@IF1gSIUJxhF8l^l)y?b!dV zOzi(*<2&-hNrS2Uw=FM+14%{c;AQ-VbeZ})`0)7LW&%-Pt$#l{aBen*BS{xXuWj+f{r%`q*+g5ulFB}|!K0LYMn3CrClnBmAw6Z! zIbpTUyiQkp@gg{u(#Nm^jdIDiB){IC@F{j94I)jaZl~>GnXUiBx*ac&s&j4??1c+x zTZep4(pBge zQV975w9#?T*8O4~Z;Jo_=RjMog8H1(8EcVdQT{S%s-FLs$ed6Mj!C5Q_M|SH(9K@R zU&+TGq>a>HC(R(=+g3b|`J}H%bE*5C)RGj&`J*XogcV4ykZ+IQ;|)@r*1sABKhwBA zsUmqDEl6LIijZO`--d0eJ5K%$@@G-UAcOzYp6d9BMo@p4)RDBwwvD!aNc{rx&+06# z|3O=!SjREqpGbM6VWhp3twE2!)_laMosHep)gbR8Jwm=2RwV_HdJykH9W@!@I^tS( zr0JA-8xkavX-dU;(h>3>V=sIhA089P487n7VFY+1}-J(_|f3RQ-9Rv z!^ux0eMydwsvez&Y zA09sPZAbyMsf?$o7)I(!{sWSZ%A^-b#rpG6k-~rB6F82vnskd4LelYx!M|4;kl#mn zZ92b$_idX;h^INe=;ogls!=~|d_rX0gqXOAV-sT%W8IBBuE?mU_@ubR<|R^3HLu_s z-}0T}?J075sF^S|Ce9TTm*`H2j*N0Uy&~gWkseRX#5mV9cf!;dvhi^qS7N*?$>UD& zq}J}V&Ku`)KRYcxA<-4->Kz+D(|=CPRGNF@<02E?uK2`B?gZ1`)WvzGxuYI7Z|LE4 zcT`d$9s8>jlHy#RS)N4qR99l8XNt#Pm=yOvMiHG5Kh>4gLId$Pni1ok`S8@3xaj!* zD)jf4da%>xcJ9ao|6sX#RAkg7w`;09F(D?3eqvQMC_XkOYS!N?eNS}m64W9xDK^oS z;Es))HP(};`#vH##Xc zc9zTIX6}9aA4@3QGRi$oH|~m$ib_gI;G~(8Vq)ENA2-3Bz>>KhYc@49Cf3DlOpB#g zU+svrpo)DG;*+L1{!fn+F|>8N_O7s@sjf*CeIF0F7L>Z}$%cVZ?l_Ozcjn0|A*nx( zuTH92bYN2Aw0KXVuVmEsMN15ck99lx@c4e6TsWvjxO+wn>phe^iivWW$n!897C*%u z_aA{Tc>1(L^@f^d`oEpw{8vfp?1aZdZ0ExU4jbeO_gzY;Q>aOFj5~IM$Mu}wv2l@8 z-JZFwsY#wh*Lb(~$^`bJf}@@&+`2^ zuR>ryw~KX~=yuJFiH&u6v@l$aC&U#MAD0*t$6C5)xZ_v}K4Rjc;#n7VtM)r#bi6Bu z9jgb#J;C?$!Yake{r3arE5E!-@%ArfWM}Tk-*>WL{l2_?Tk}>e&RM-7FKv0j=5745 z64hlNJ)XCAcW%m&oRq}{$t!XGmfR}$XmY{E?Pd^p zS*baDH{>pVA@`LR98;0EcU@lEj=xs;2CkbO*pjPfA781*$d&Wr>ik1T@-}AXoJeCd z1(_T2_ig`=$1Z1nmhZhyxkakyrmV_Yn$8IY^B3f;J(RO|Rl)Q7vNI3gn*Y3SZ~CCZ z4Renk%uP@IYn7&P^U2)xhdC>6ZF)}D^EpS4`u^DZufU>tnTs5f@9wUtL8-&{wJDyz z?PdP$hYA5^r9j8yVm3{Ip`RCKbb!GdzT|UV3pLK!yFPc{p}##DIVY0~wq|A@ou9L6 zdG?8uOqA~K)cY|d!gKv=^S|cWEZTp~wPVgOW6Q}{T(D+`uhD180X=h8_~<+Tt<;?4 z9R+JQ=4WIu^JYh6`xpIA*7DrF+Y2@vW`Nnp(zCN(vU7jza9-xFyv)76E!Xx0{6AH^ BdhjX~jUf;uSo|)O**_qi*;B(7Y!AJK5`>sWY%=0*kzT|m1 zac~CDyF>Xz9@TnY&k~;38Iy1V9>;iWUeY-pQ^>dD3~W=%^K#)$Y=^<6J#Q#>#8!9# z3u2Kno>$%TeBNsma!@e`tKtR>!=ErcKEy-}=B`oL13TaljKQ;52=5?c_tKYj=jB1= z@feEruqHOakvIe6xxW`y&hs);Q3adfYZ#3wm=XOLfk#jSJ%^EaA3Nhe*bx)Td!8n3 z4`#yasO$cLaTr;_4Y&kqhU#E$?(e-xK{p(ay5T(3$k(ARv>SDyGpGyQMa@u}ik`=6 zc+seV)xtWMfKzZe>ioi$+>F#f-KPcW{6zHWM!l_J3~B(g@nu|v33v$SVr*r%1b$3Q zeh_2uH0nmT@KyX9Q)9C#u74ZU40gjtI1mfs?kdcG2!$I|=z@1q7kYvkNE91FQyqsx zu>_9B4>5BP(_PK2X(e`267?go7T(0%SfGaIrNjEDz0(?XpRO2>gKGFZuMCAXRD|O< zSQ~F3*YFC|^t{s84a?yIEP!93`aeQV^}nbAPU7x4@gGcs*|?aVJRiP+rEnfjLp@lm zj|J1niX(4~R|PeteNZzo4mA@CFdMGN?06Vk<9Dbhs!-Qmus-UBEiLba!Q_2VOF95^ z;k&2-`ZiF|37=vtevayR3;CZHT+j3JV?)e~{V){gqRv~0dXiO^Z^k_2dr`0Nch~_R zU?*%|-z~{TOqlf1%bUYXi??1A9#|6enS3oQ|5I6{siJfvNBiYDSJ> zU}_t>nJbRkYaAa)WGAxX@u@I(j z%tf&hcEOog1n;9BAbS%pu*qAZUca`eCGCxAxWDJ45P{P$H_pd=xE*=(yep^~%GA^? zMLmoq?~Q|T26n?BzFrzw57dm!K|T2b)LXC)wa0d%2L2QJwEHtQcO$Bgn%Z`j_s1~u z36@W{_GPGDz7@0J8S_Wv&Gmv_(ZYIOHDrH!doe-vE!IE$F5-8AC;TOh!%R zedM9NI($u1a2EE$Qm?t)zZmrd+ff6#j#cp=)F!ROMWQePqp>$e;@hYho^JK)TQbb_ zRP3WdBRYj?@FuGMK57c}qbmZUQJXCn@~~chWWRZXQF~(#YA*%9?q0Jv)C1N;ZMxQ| zf%V0-ILb#s7oLV1;e6|`5;Ku+#!+|#2Voty_-5RJ8c0$bH}C_Q6gB0SQA>0W zwHY(9zTubyHSm1M1N*$96g0&ZQ71M=O;rMFAcIj;HUl+7i!5J*8OgU{3?4JDp=RQD z)OAwx__|IkMg(ymU^P6Cn=qP>#U3Ap&nU3G-q<(Y?!JgQ$RA)%j7oG* zUIewfD_~Y^k9xwvs0Wyi>2N7(b8Rs9SpAo%rM`kiFnw3%zb1t$6f|X{&AF%ntVJfr z`y6$nJbY!CJ+BgKCg!8gTaOyRLDXhGhgz!Z7>oB%Yai9!t$k)x|ChTn{~BpYDs;i> zs0+44JxLO3?MIkXQ2pkiF7Od*6YjwRcoU0ZL=QKRikOPLE^0tcP}ggVVc5L~^RM0A zj|yGThw(TEHL$~|ft*KO=q47$pYdhP($hUzIn;Nfy4lEVg*v|z>OTEZduc4{LEiIO z!#dQ+cA;Lcqc{wIK%LMo$qld{>Ox~JpJT2>?TKypHlD<~*sPbE(YdJWu0=iAA3PhB4>1j9=;Lmj6FI>vgoUvb>c;I*H|&X;fnlf{&c<=L0N=rEecjTo#8~o6 zm`3mapA>Xra6k9S%!wMvC~SuBV>sTyO86VbVUhlBU`F^D`7YGdU%)7QfNAj=>OyG;y0t5Z>B-w;QS5_iUx>MJKkCbO z9W|gQsP9SaTdutt`ZU!E6tq^OQTaIQkb)892QU&(paysuHN}rmOY%3C#o$4nR~ai} zZ5)KLxE(c+OZXJ;;}`hjVCKI$g-t`;2%q6+=C7#D89CYwtORO?s$wI26`6f+G3o(*>BhJz?uf;y=!ywA*Ye*`H_pXZ zh5h4|#H_d+%i}K8QanKIg-~XcH_nSf&D==T+p`HZ!#hzkc@@*?{rASY8>B}nyg18C zqfV@idbVx8GMMjFh6(A zfpt+!(-}2`<0bd^7E@5itr&vma1c-UHMS>jI?esl%UaZhi%oaCx)Z)jJ`3N%Tr=F? z8|GkZ^6fYnqh`9-aXe}Ohfy$^~5hNa3^L$b;yscu$Vax z?~z}`()igzw-kS%*7%M0-4wr%y6!gAbq|>rPy@J&rS$%1UgU1n0M*bO>*8pP$Ajh{ zs69}4v3(biZEATN-&&g#o9RX^6h7KI`-G)Jw`2y;4W z3YTI=++ZHWw&WL3PgvpuXBD%d`8o#E{w8V@b~h)Z_SkC4{k_fBum`h~U&RLa1ao4I zW$rcWfV$x*)Ray&7o%ooBWlKupf=avs67;!;{NHSE$aMF&BN#`M8#PO+3;^Hh?&@N znvrU#JP^j?J?UbH}D~-nMgrBzflSMT#utYQOd>JGRD?}&Nc>c7X-wBN<%_z>%1tqsm8r~!Rt-a-xFUo+iCm&cj$ z7_RrfUZB85F%u`WL9KOP?2qqYcYKPxQC{ay+(7l0c-y|>kw1~Zbzn1#%$W((AZtgGq6@5vXTW@hv@ zx3?~BWB$`pF?PFqO=h9i^aIrHy@}~D=MHCaRC{&QZl8#H(tTJS?_oUV{nY(}(Z-yL zRjJ>J6Y(+5$5A`mxL-V?ce$zSVD?9S5yxW$F2RDh*4j^-H&8S9*bLt7^7P5C=E&$P zMN0*0iegW!jPIcq=@jZ4`2*&{ho~1f!yeZ@1sR;T2(`-|njw4Ld6_Ys`T}N2)aIy& zTC;Zgw=EUAP!WSYQ9~Vr8o)Gjsnu^X_nOBsJN+)9`aeYdPzc@U=DZZ@0Xw4BXcp>z zDX9Cb*=OI@t=4eR8jhM5un--8K;0l>zcUx=LZwkRsE8U!66%R3Vj7%jE;Lu7cI8I% zkdJ~!cG0|pn({v}3d0Y$3ui`6eQ6Ag+}vs&G*6+ z=z^bN9G=F&TACq;T%H;ALKm{U8R|(pnLSavaG*H`b)9$2#TY`q0X1`5oIY=-RUE)D z8je_g3N@gM=AWp6X8+7t5Y@jd>iw#Unz>%)NX$V#4fSDIjpK0>j=}iP^*}y;wV|Mn z7g1CG5VN9p*iBtF%tbl|o8c1FKz_m+_yqG|g)dxv2h>24FcwFk&R>N3cJD;p?-a&x zfA41sNUKIRWa)UK~}()k){^Cg-? zFhBVeER7qm7+ycg{A-FLPr1K<$73w{NYn@yqrPxEupXvkloj!HEQ0T%o_r^2Y7dy_ z%-iNuGxCh_k&w01WW@9VzrItTL&B!y1!6Fyj zb!uP|d3`L0n=l-2BLnn#_g%q@x#&h%$!vsa>G+1(6H}89!`3(sm*Ur$A&7^#bz2ZhZ6cecb4y$AJtM2#W zF{mj`G54eP&^6Sa3H{dn78-|{bsm<%*HJ&Or($kgf%&<=cZfnxyo=c}^qSj*v8bh} zg*;&3i04l|osQa$z@M33;=^T~{={lTae|NL{~qbc!|C_@(BOQ9snn|xMdYBdG+w6e z`Ei3nQ}Wj^9FvLK#8~Ul5I0-79rgL_25f`C-y+UZmzlcbm_qzU>?Jf)1GN5INZQ*4 zCQ^>3tev}v_<@L|?)kwU49rmO7wTdtm!y6hF@mT}@Hq(l{tbb@rx$yn|1#=+CMFYq zX#I6mp@VjLf8w1NIya%r&kOGmj>Aqwbs{xSlpdcSr>(#TFYq=g)pz45ar=eqX+tis zTwl_^eU@~?)>J${zNhfAO=Shj=_tQKpWGOam59c~6rvuni#|*6SK>z^J^c<+H=6SE z;{xTGL>}7SviiXD_af1MsxptB-L0W0?k1K#KN}xgTSu$o$A;I2x@T5j2&Yol&DupY zb$b81Slvu)X8rlUI(>n^!t(hKe6Q8#U7{Khtc2qLoi7o5rvm@}_6`0=9HnlyU5M0s zLOJAxJR?uJnf$8NeMg@?#BJgVb>9&^wf@JfLw-(JMR^t-{w1Ctdnq)e{tNuZ`esAE zFM%H-hcPeb>c38FZ|$YV4A{j^0kI>PN_>%JL z#K)AkT74v)b5YJ<7k-bnzlq&M1a+rrn`C_-Q#Z=W`mlu(k1TINc|38BJipfe5lJTE zL!uFt1@Ik0M@I5bh@S}^J00HV{mVhLcB?g z31a^BL*@d}mBw`##?zdjT$pkx;y&dtVhiQ7I@KgL5jxi6N@6MT!0JMADDjlY&W$SKAVPID zAp5^R%2|6bZQoKJNJP@?%SXYlMjF159P^2?l-uG)t9zUB9Lmx3i=#Y?@^(T$Ij;~p z(v$1>9$%uLjuMo25wBUB>K3Yt|D)4`Etsg zt^6;RCPq_Nh$upNC631(_zMolTlfs$e*XPWqC&@~xQzJCrGbCeszkZ1wQr(ao$^l0 zH(I|17)RYnOdzUS{blSz{Tr6&vGWQuL;q06{&&ZA$VTM`I)va)_&IgI6VqK6Zx3}{ zDHo(&$6WIFT`}-a8}E|0BC=R}ecJRF4c+93^%K|WQ;WE#rWO>gQ+X5n5U*0+hdQnj z^@w?vtF8xehxm`WX;xnbvvSjs)Mq1fG$n>mUoMdG5u!bvm18O2q@1FmRiM)fyU-Zx z@BqWCoZZ@#YPsGdrV|s$b6{nn6Oo3zD6x*Rj#%QFl|v{`rmTs{OJpSms7+JTnW$kM z|H4${r!XVlC3JKkCQ$bf6RmGvtVsSRG0f`fU@GqNA)caM$1tKVQINWO)-O&Y;Yhg8 zAH9ew#0VO@V>3d>uS6>9>I5?P$5(cNj@XhoOoY?4!TMye_DkgdBzGyA(bt2Tv{oA> zi6CMI#ZQQ=lz+sFgpO_G?eH%mHRb2WRtjmz=iu-c>N8Q!Vx5jqzDO*#{3HGH@hTPb z2^~*}o|LCxYGMen*xD!tj+e>*u)0=Ow-)CTjfphO-4C=U5cREJ0ZgtrJF`Dm>AgY8 zb>gG_kIP(2og7|mPIBYwi~KojR7&NaTCZe?|8%3?FZug5otw%Z)$(zw Date: Tue, 26 Dec 2023 14:01:38 +0100 Subject: [PATCH 34/37] website/docs: Updated url to flows-enrollment-2-stage.yaml (#7992) * Updated url to flows-enrollment-2-stage.yaml Signed-off-by: Dennis Denk * Update website/docs/user-group-role/user/invitations.md Signed-off-by: Jens L. --------- Signed-off-by: Dennis Denk Signed-off-by: Jens L. Co-authored-by: Jens L --- website/docs/user-group-role/user/invitations.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/website/docs/user-group-role/user/invitations.md b/website/docs/user-group-role/user/invitations.md index 7387543f5..e3e58f42e 100644 --- a/website/docs/user-group-role/user/invitations.md +++ b/website/docs/user-group-role/user/invitations.md @@ -18,7 +18,7 @@ The fastest way to create an invitation is to use our pre-defined `default-enrol To download the `default-enrollment-flow` file, run this command: ``` -wget https://raw.githubusercontent.com/goauthentik/authentik/main/website/developer-docs/blueprints/example/flows-enrollment-2-stage.yaml +wget https://goauthentik.io/blueprints/example/flows-enrollment-2-stage.yaml ``` Alternatively, use this [link](/blueprints/example/flows-enrollment-2-stage.yaml) to view and save the file. For more details, refer to the [documentation](https://goauthentik.io/docs/flow/examples/flows#enrollment-2-stage). From 9f1f3dca347aee944dcd7106e66e4eeddb5c6e79 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 26 Dec 2023 14:02:28 +0100 Subject: [PATCH 35/37] web: bump the eslint group in /web with 2 updates (#7994) Bumps the eslint group in /web with 2 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser). Updates `@typescript-eslint/eslint-plugin` from 6.15.0 to 6.16.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.16.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 6.15.0 to 6.16.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.16.0/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: eslint - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: eslint ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- web/package-lock.json | 113 ++++++++++++++++++++++++++---------------- web/package.json | 4 +- 2 files changed, 71 insertions(+), 46 deletions(-) diff --git a/web/package-lock.json b/web/package-lock.json index 7ff9ed106..8caa84294 100644 --- a/web/package-lock.json +++ b/web/package-lock.json @@ -72,8 +72,8 @@ "@types/chart.js": "^2.9.41", "@types/codemirror": "5.60.15", "@types/grecaptcha": "^3.0.7", - "@typescript-eslint/eslint-plugin": "^6.15.0", - "@typescript-eslint/parser": "^6.15.0", + "@typescript-eslint/eslint-plugin": "^6.16.0", + "@typescript-eslint/parser": "^6.16.0", "babel-plugin-macros": "^3.1.0", "babel-plugin-tsconfig-paths": "^1.0.3", "cross-env": "^7.0.3", @@ -7605,16 +7605,16 @@ "dev": true }, "node_modules/@typescript-eslint/eslint-plugin": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-6.15.0.tgz", - "integrity": "sha512-j5qoikQqPccq9QoBAupOP+CBu8BaJ8BLjaXSioDISeTZkVO3ig7oSIKh3H+rEpee7xCXtWwSB4KIL5l6hWZzpg==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-6.16.0.tgz", + "integrity": "sha512-O5f7Kv5o4dLWQtPX4ywPPa+v9G+1q1x8mz0Kr0pXUtKsevo+gIJHLkGc8RxaZWtP8RrhwhSNIWThnW42K9/0rQ==", "dev": true, "dependencies": { "@eslint-community/regexpp": "^4.5.1", - "@typescript-eslint/scope-manager": "6.15.0", - "@typescript-eslint/type-utils": "6.15.0", - "@typescript-eslint/utils": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0", + "@typescript-eslint/scope-manager": "6.16.0", + "@typescript-eslint/type-utils": "6.16.0", + "@typescript-eslint/utils": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0", "debug": "^4.3.4", "graphemer": "^1.4.0", "ignore": "^5.2.4", @@ -7673,15 +7673,15 @@ "dev": true }, "node_modules/@typescript-eslint/parser": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-6.15.0.tgz", - "integrity": "sha512-MkgKNnsjC6QwcMdlNAel24jjkEO/0hQaMDLqP4S9zq5HBAUJNQB6y+3DwLjX7b3l2b37eNAxMPLwb3/kh8VKdA==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-6.16.0.tgz", + "integrity": "sha512-H2GM3eUo12HpKZU9njig3DF5zJ58ja6ahj1GoHEHOgQvYxzoFJJEvC1MQ7T2l9Ha+69ZSOn7RTxOdpC/y3ikMw==", "dev": true, "dependencies": { - "@typescript-eslint/scope-manager": "6.15.0", - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/typescript-estree": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0", + "@typescript-eslint/scope-manager": "6.16.0", + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/typescript-estree": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0", "debug": "^4.3.4" }, "engines": { @@ -7701,13 +7701,13 @@ } }, "node_modules/@typescript-eslint/scope-manager": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-6.15.0.tgz", - "integrity": "sha512-+BdvxYBltqrmgCNu4Li+fGDIkW9n//NrruzG9X1vBzaNK+ExVXPoGB71kneaVw/Jp+4rH/vaMAGC6JfMbHstVg==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-6.16.0.tgz", + "integrity": "sha512-0N7Y9DSPdaBQ3sqSCwlrm9zJwkpOuc6HYm7LpzLAPqBL7dmzAUimr4M29dMkOP/tEwvOCC/Cxo//yOfJD3HUiw==", "dev": true, "dependencies": { - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0" + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0" }, "engines": { "node": "^16.0.0 || >=18.0.0" @@ -7718,13 +7718,13 @@ } }, "node_modules/@typescript-eslint/type-utils": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-6.15.0.tgz", - "integrity": "sha512-CnmHKTfX6450Bo49hPg2OkIm/D/TVYV7jO1MCfPYGwf6x3GO0VU8YMO5AYMn+u3X05lRRxA4fWCz87GFQV6yVQ==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-6.16.0.tgz", + "integrity": "sha512-ThmrEOcARmOnoyQfYkHw/DX2SEYBalVECmoldVuH6qagKROp/jMnfXpAU/pAIWub9c4YTxga+XwgAkoA0pxfmg==", "dev": true, "dependencies": { - "@typescript-eslint/typescript-estree": "6.15.0", - "@typescript-eslint/utils": "6.15.0", + "@typescript-eslint/typescript-estree": "6.16.0", + "@typescript-eslint/utils": "6.16.0", "debug": "^4.3.4", "ts-api-utils": "^1.0.1" }, @@ -7745,9 +7745,9 @@ } }, "node_modules/@typescript-eslint/types": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-6.15.0.tgz", - "integrity": "sha512-yXjbt//E4T/ee8Ia1b5mGlbNj9fB9lJP4jqLbZualwpP2BCQ5is6BcWwxpIsY4XKAhmdv3hrW92GdtJbatC6dQ==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-6.16.0.tgz", + "integrity": "sha512-hvDFpLEvTJoHutVl87+MG/c5C8I6LOgEx05zExTSJDEVU7hhR3jhV8M5zuggbdFCw98+HhZWPHZeKS97kS3JoQ==", "dev": true, "engines": { "node": "^16.0.0 || >=18.0.0" @@ -7758,16 +7758,17 @@ } }, "node_modules/@typescript-eslint/typescript-estree": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-6.15.0.tgz", - "integrity": "sha512-7mVZJN7Hd15OmGuWrp2T9UvqR2Ecg+1j/Bp1jXUEY2GZKV6FXlOIoqVDmLpBiEiq3katvj/2n2mR0SDwtloCew==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-6.16.0.tgz", + "integrity": "sha512-VTWZuixh/vr7nih6CfrdpmFNLEnoVBF1skfjdyGnNwXOH1SLeHItGdZDHhhAIzd3ACazyY2Fg76zuzOVTaknGA==", "dev": true, "dependencies": { - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0", + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0", "debug": "^4.3.4", "globby": "^11.1.0", "is-glob": "^4.0.3", + "minimatch": "9.0.3", "semver": "^7.5.4", "ts-api-utils": "^1.0.1" }, @@ -7784,6 +7785,15 @@ } } }, + "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", + "dev": true, + "dependencies": { + "balanced-match": "^1.0.0" + } + }, "node_modules/@typescript-eslint/typescript-estree/node_modules/lru-cache": { "version": "6.0.0", "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz", @@ -7796,6 +7806,21 @@ "node": ">=10" } }, + "node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch": { + "version": "9.0.3", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.3.tgz", + "integrity": "sha512-RHiac9mvaRw0x3AYRgDC1CxAP7HTcNrrECeA8YYJeWnpo+2Q5CegtZjaotWTWxDG3UeGA1coE05iH1mPjT/2mg==", + "dev": true, + "dependencies": { + "brace-expansion": "^2.0.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, "node_modules/@typescript-eslint/typescript-estree/node_modules/semver": { "version": "7.5.4", "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.4.tgz", @@ -7818,17 +7843,17 @@ "dev": true }, "node_modules/@typescript-eslint/utils": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-6.15.0.tgz", - "integrity": "sha512-eF82p0Wrrlt8fQSRL0bGXzK5nWPRV2dYQZdajcfzOD9+cQz9O7ugifrJxclB+xVOvWvagXfqS4Es7vpLP4augw==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-6.16.0.tgz", + "integrity": "sha512-T83QPKrBm6n//q9mv7oiSvy/Xq/7Hyw9SzSEhMHJwznEmQayfBM87+oAlkNAMEO7/MjIwKyOHgBJbxB0s7gx2A==", "dev": true, "dependencies": { "@eslint-community/eslint-utils": "^4.4.0", "@types/json-schema": "^7.0.12", "@types/semver": "^7.5.0", - "@typescript-eslint/scope-manager": "6.15.0", - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/typescript-estree": "6.15.0", + "@typescript-eslint/scope-manager": "6.16.0", + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/typescript-estree": "6.16.0", "semver": "^7.5.4" }, "engines": { @@ -7876,12 +7901,12 @@ "dev": true }, "node_modules/@typescript-eslint/visitor-keys": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-6.15.0.tgz", - "integrity": "sha512-1zvtdC1a9h5Tb5jU9x3ADNXO9yjP8rXlaoChu0DQX40vf5ACVpYIVIZhIMZ6d5sDXH7vq4dsZBT1fEGj8D2n2w==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-6.16.0.tgz", + "integrity": "sha512-QSFQLruk7fhs91a/Ep/LqRdbJCZ1Rq03rqBdKT5Ky17Sz8zRLUksqIe9DW0pKtg/Z35/ztbLQ6qpOCN6rOC11A==", "dev": true, "dependencies": { - "@typescript-eslint/types": "6.15.0", + "@typescript-eslint/types": "6.16.0", "eslint-visitor-keys": "^3.4.1" }, "engines": { diff --git a/web/package.json b/web/package.json index 351723f19..4d7002840 100644 --- a/web/package.json +++ b/web/package.json @@ -97,8 +97,8 @@ "@types/chart.js": "^2.9.41", "@types/codemirror": "5.60.15", "@types/grecaptcha": "^3.0.7", - "@typescript-eslint/eslint-plugin": "^6.15.0", - "@typescript-eslint/parser": "^6.15.0", + "@typescript-eslint/eslint-plugin": "^6.16.0", + "@typescript-eslint/parser": "^6.16.0", "babel-plugin-macros": "^3.1.0", "babel-plugin-tsconfig-paths": "^1.0.3", "cross-env": "^7.0.3", From 582016a58641a7b63ebbd6d4a10a91ffd020e157 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 26 Dec 2023 14:02:37 +0100 Subject: [PATCH 36/37] web: bump the eslint group in /tests/wdio with 2 updates (#7996) Bumps the eslint group in /tests/wdio with 2 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser). Updates `@typescript-eslint/eslint-plugin` from 6.15.0 to 6.16.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.16.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 6.15.0 to 6.16.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.16.0/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: eslint - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: eslint ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- tests/wdio/package-lock.json | 113 +++++++++++++++++++++-------------- tests/wdio/package.json | 4 +- 2 files changed, 71 insertions(+), 46 deletions(-) diff --git a/tests/wdio/package-lock.json b/tests/wdio/package-lock.json index 837632bb5..c9ce79620 100644 --- a/tests/wdio/package-lock.json +++ b/tests/wdio/package-lock.json @@ -7,8 +7,8 @@ "name": "@goauthentik/web-tests", "devDependencies": { "@trivago/prettier-plugin-sort-imports": "^4.3.0", - "@typescript-eslint/eslint-plugin": "^6.15.0", - "@typescript-eslint/parser": "^6.15.0", + "@typescript-eslint/eslint-plugin": "^6.16.0", + "@typescript-eslint/parser": "^6.16.0", "@wdio/cli": "^8.27.0", "@wdio/local-runner": "^8.27.0", "@wdio/mocha-framework": "^8.27.0", @@ -946,16 +946,16 @@ } }, "node_modules/@typescript-eslint/eslint-plugin": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-6.15.0.tgz", - "integrity": "sha512-j5qoikQqPccq9QoBAupOP+CBu8BaJ8BLjaXSioDISeTZkVO3ig7oSIKh3H+rEpee7xCXtWwSB4KIL5l6hWZzpg==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-6.16.0.tgz", + "integrity": "sha512-O5f7Kv5o4dLWQtPX4ywPPa+v9G+1q1x8mz0Kr0pXUtKsevo+gIJHLkGc8RxaZWtP8RrhwhSNIWThnW42K9/0rQ==", "dev": true, "dependencies": { "@eslint-community/regexpp": "^4.5.1", - "@typescript-eslint/scope-manager": "6.15.0", - "@typescript-eslint/type-utils": "6.15.0", - "@typescript-eslint/utils": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0", + "@typescript-eslint/scope-manager": "6.16.0", + "@typescript-eslint/type-utils": "6.16.0", + "@typescript-eslint/utils": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0", "debug": "^4.3.4", "graphemer": "^1.4.0", "ignore": "^5.2.4", @@ -981,15 +981,15 @@ } }, "node_modules/@typescript-eslint/parser": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-6.15.0.tgz", - "integrity": "sha512-MkgKNnsjC6QwcMdlNAel24jjkEO/0hQaMDLqP4S9zq5HBAUJNQB6y+3DwLjX7b3l2b37eNAxMPLwb3/kh8VKdA==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-6.16.0.tgz", + "integrity": "sha512-H2GM3eUo12HpKZU9njig3DF5zJ58ja6ahj1GoHEHOgQvYxzoFJJEvC1MQ7T2l9Ha+69ZSOn7RTxOdpC/y3ikMw==", "dev": true, "dependencies": { - "@typescript-eslint/scope-manager": "6.15.0", - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/typescript-estree": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0", + "@typescript-eslint/scope-manager": "6.16.0", + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/typescript-estree": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0", "debug": "^4.3.4" }, "engines": { @@ -1009,13 +1009,13 @@ } }, "node_modules/@typescript-eslint/scope-manager": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-6.15.0.tgz", - "integrity": "sha512-+BdvxYBltqrmgCNu4Li+fGDIkW9n//NrruzG9X1vBzaNK+ExVXPoGB71kneaVw/Jp+4rH/vaMAGC6JfMbHstVg==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-6.16.0.tgz", + "integrity": "sha512-0N7Y9DSPdaBQ3sqSCwlrm9zJwkpOuc6HYm7LpzLAPqBL7dmzAUimr4M29dMkOP/tEwvOCC/Cxo//yOfJD3HUiw==", "dev": true, "dependencies": { - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0" + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0" }, "engines": { "node": "^16.0.0 || >=18.0.0" @@ -1026,13 +1026,13 @@ } }, "node_modules/@typescript-eslint/type-utils": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-6.15.0.tgz", - "integrity": "sha512-CnmHKTfX6450Bo49hPg2OkIm/D/TVYV7jO1MCfPYGwf6x3GO0VU8YMO5AYMn+u3X05lRRxA4fWCz87GFQV6yVQ==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-6.16.0.tgz", + "integrity": "sha512-ThmrEOcARmOnoyQfYkHw/DX2SEYBalVECmoldVuH6qagKROp/jMnfXpAU/pAIWub9c4YTxga+XwgAkoA0pxfmg==", "dev": true, "dependencies": { - "@typescript-eslint/typescript-estree": "6.15.0", - "@typescript-eslint/utils": "6.15.0", + "@typescript-eslint/typescript-estree": "6.16.0", + "@typescript-eslint/utils": "6.16.0", "debug": "^4.3.4", "ts-api-utils": "^1.0.1" }, @@ -1053,9 +1053,9 @@ } }, "node_modules/@typescript-eslint/types": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-6.15.0.tgz", - "integrity": "sha512-yXjbt//E4T/ee8Ia1b5mGlbNj9fB9lJP4jqLbZualwpP2BCQ5is6BcWwxpIsY4XKAhmdv3hrW92GdtJbatC6dQ==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-6.16.0.tgz", + "integrity": "sha512-hvDFpLEvTJoHutVl87+MG/c5C8I6LOgEx05zExTSJDEVU7hhR3jhV8M5zuggbdFCw98+HhZWPHZeKS97kS3JoQ==", "dev": true, "engines": { "node": "^16.0.0 || >=18.0.0" @@ -1066,16 +1066,17 @@ } }, "node_modules/@typescript-eslint/typescript-estree": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-6.15.0.tgz", - "integrity": "sha512-7mVZJN7Hd15OmGuWrp2T9UvqR2Ecg+1j/Bp1jXUEY2GZKV6FXlOIoqVDmLpBiEiq3katvj/2n2mR0SDwtloCew==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-6.16.0.tgz", + "integrity": "sha512-VTWZuixh/vr7nih6CfrdpmFNLEnoVBF1skfjdyGnNwXOH1SLeHItGdZDHhhAIzd3ACazyY2Fg76zuzOVTaknGA==", "dev": true, "dependencies": { - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/visitor-keys": "6.15.0", + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/visitor-keys": "6.16.0", "debug": "^4.3.4", "globby": "^11.1.0", "is-glob": "^4.0.3", + "minimatch": "9.0.3", "semver": "^7.5.4", "ts-api-utils": "^1.0.1" }, @@ -1092,18 +1093,42 @@ } } }, + "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz", + "integrity": "sha512-XnAIvQ8eM+kC6aULx6wuQiwVsnzsi9d3WxzV3FpWTGA19F621kwdbsAcFKXgKUHZWsy+mY6iL1sHTxWEFCytDA==", + "dev": true, + "dependencies": { + "balanced-match": "^1.0.0" + } + }, + "node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch": { + "version": "9.0.3", + "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.3.tgz", + "integrity": "sha512-RHiac9mvaRw0x3AYRgDC1CxAP7HTcNrrECeA8YYJeWnpo+2Q5CegtZjaotWTWxDG3UeGA1coE05iH1mPjT/2mg==", + "dev": true, + "dependencies": { + "brace-expansion": "^2.0.1" + }, + "engines": { + "node": ">=16 || 14 >=14.17" + }, + "funding": { + "url": "https://github.com/sponsors/isaacs" + } + }, "node_modules/@typescript-eslint/utils": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-6.15.0.tgz", - "integrity": "sha512-eF82p0Wrrlt8fQSRL0bGXzK5nWPRV2dYQZdajcfzOD9+cQz9O7ugifrJxclB+xVOvWvagXfqS4Es7vpLP4augw==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-6.16.0.tgz", + "integrity": "sha512-T83QPKrBm6n//q9mv7oiSvy/Xq/7Hyw9SzSEhMHJwznEmQayfBM87+oAlkNAMEO7/MjIwKyOHgBJbxB0s7gx2A==", "dev": true, "dependencies": { "@eslint-community/eslint-utils": "^4.4.0", "@types/json-schema": "^7.0.12", "@types/semver": "^7.5.0", - "@typescript-eslint/scope-manager": "6.15.0", - "@typescript-eslint/types": "6.15.0", - "@typescript-eslint/typescript-estree": "6.15.0", + "@typescript-eslint/scope-manager": "6.16.0", + "@typescript-eslint/types": "6.16.0", + "@typescript-eslint/typescript-estree": "6.16.0", "semver": "^7.5.4" }, "engines": { @@ -1118,12 +1143,12 @@ } }, "node_modules/@typescript-eslint/visitor-keys": { - "version": "6.15.0", - "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-6.15.0.tgz", - "integrity": "sha512-1zvtdC1a9h5Tb5jU9x3ADNXO9yjP8rXlaoChu0DQX40vf5ACVpYIVIZhIMZ6d5sDXH7vq4dsZBT1fEGj8D2n2w==", + "version": "6.16.0", + "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-6.16.0.tgz", + "integrity": "sha512-QSFQLruk7fhs91a/Ep/LqRdbJCZ1Rq03rqBdKT5Ky17Sz8zRLUksqIe9DW0pKtg/Z35/ztbLQ6qpOCN6rOC11A==", "dev": true, "dependencies": { - "@typescript-eslint/types": "6.15.0", + "@typescript-eslint/types": "6.16.0", "eslint-visitor-keys": "^3.4.1" }, "engines": { diff --git a/tests/wdio/package.json b/tests/wdio/package.json index badccc3f1..eeb0c124e 100644 --- a/tests/wdio/package.json +++ b/tests/wdio/package.json @@ -4,8 +4,8 @@ "type": "module", "devDependencies": { "@trivago/prettier-plugin-sort-imports": "^4.3.0", - "@typescript-eslint/eslint-plugin": "^6.15.0", - "@typescript-eslint/parser": "^6.15.0", + "@typescript-eslint/eslint-plugin": "^6.16.0", + "@typescript-eslint/parser": "^6.16.0", "@wdio/cli": "^8.27.0", "@wdio/local-runner": "^8.27.0", "@wdio/mocha-framework": "^8.27.0", From afc968437daa74e1f55e59af623d56d0bde768a0 Mon Sep 17 00:00:00 2001 From: Brendon Allen Date: Tue, 26 Dec 2023 23:57:54 +1000 Subject: [PATCH 37/37] sources/ldap: fix Issue with changing passwords with eDirectory (#7997) * Issue with changing passwords with eDirectory #5851 Fixed authentik\sources\ldap\password.py to also catch the exception on LDAPNoSuchAttributeResult that is returned when Authentik tries to query LDAP with Microsoft to an eDirectory Server instead. * fix: Issue with changing passwords with eDirectory #5851 Fixed authentik\sources\ldap\password.py to also catch the exception on LDAPNoSuchAttributeResult that is returned when Authentik tries to query LDAP with Microsoft to an eDirectory Server instead. * Update authentik/sources/ldap/password.py Signed-off-by: Jens L. --------- Signed-off-by: Jens L. Co-authored-by: Brendon Allen Co-authored-by: Jens L --- authentik/sources/ldap/password.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/authentik/sources/ldap/password.py b/authentik/sources/ldap/password.py index d4e0dff4e..0593b2078 100644 --- a/authentik/sources/ldap/password.py +++ b/authentik/sources/ldap/password.py @@ -4,7 +4,11 @@ from re import split from typing import Optional from ldap3 import BASE -from ldap3.core.exceptions import LDAPAttributeError, LDAPUnwillingToPerformResult +from ldap3.core.exceptions import ( + LDAPAttributeError, + LDAPNoSuchAttributeResult, + LDAPUnwillingToPerformResult, +) from structlog.stdlib import get_logger from authentik.core.models import User @@ -97,7 +101,7 @@ class LDAPPasswordChanger: return try: self._connection.extend.microsoft.modify_password(user_dn, password) - except (LDAPAttributeError, LDAPUnwillingToPerformResult): + except (LDAPAttributeError, LDAPUnwillingToPerformResult, LDAPNoSuchAttributeResult): self._connection.extend.standard.modify_password(user_dn, new_password=password) def _ad_check_password_existing(self, password: str, user_dn: str) -> bool: