libgit2-devel-0.28.4-150200.3.3.1<>,+c!| p9|%,[EAfVJ>6hsS^ʿ@ x7gN#9Ba$ng_I@CXhs9LA>ô?äd $ 2 3Sou||l| d| \| L| %| %|'|)|,\,|.p../m(/8/90:2:F(G<|H,|I|XY\|]|^\ bc<deflu|vwT|xD|y4zDTX^àClibgit2-devel0.28.4150200.3.3.1C git libraryThis package contains all necessary include files and libraries needed to compile and develop applications that use libgit2.c!| s390zl32 kSUSE Linux Enterprise 15SUSE LLC GPL-2.0 WITH GCC-exception-2.0https://www.suse.com/Development/Libraries/C and C++https://libgit2.github.com/linuxs390x$ i"!168 i@Q5d0Ԃi< *lJ 5Y)J S E Xa%% )^3j lvyp C F " #9''\ P U -D It PQP <4'i(u99p M Fa<&`\h43 **L B 'a Q5d A큤A큤AA큤A큤Ac!| ]]]]]]]]]]]]c!{]]]]]c!{]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]c!| ]]]]]]]]]]]]]]]]]]]]]]]]]]]c!| c!{c!| c!{c!{]]]]]]]]]]]]]]]]c!{]]]]]]]]]]]]]]]]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.so.28rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibgit2-0.28.4-150200.3.3.1.src.rpmlibgit2-devellibgit2-devel(s390-64)pkgconfig(libgit2)@ @@    /usr/bin/pkg-configlibgit2-28pkgconfig(openssl)pkgconfig(zlib)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.28.43.0.4-14.6.0-14.0-15.2-14.14.1c]@]@]6\eX@\d[0[@[{[qr[DZZZZ @Y@Xv@Xv@X@W0{Wo@VJV\:@V @UpU|@UnT}T?@alarrosa@suse.comandreas.stieger@gmx.deandreas.stieger@gmx.detchvatal@suse.commrueckert@suse.debjorn.lie@gmail.comastieger@suse.comastieger@suse.commpluskal@suse.comastieger@suse.comastieger@suse.commrueckert@suse.dekbabioch@suse.comdimstar@opensuse.orgmimi.vx@gmail.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comsreeves@suse.comastieger@suse.comdimstar@opensuse.orgastieger@suse.comastieger@suse.comdimstar@opensuse.orgastieger@suse.comdimstar@opensuse.orgdimstar@opensuse.orghrvoje.senjan@gmail.com- Add patches backported from the upstream v1.3 branch to fix CVE-2022-29187, CVE-2022-24765 (bsc#1201431, bsc#1198234): * 0001-buffer-git_buf_sanitize-should-return-a-value.patch * 0001-path-refactor-ownership-checks-into-current-user-and.patch * 0002-repo-ensure-that-repo-dir-is-owned-by-current-user.patch * 0003-fs_path-mock-ownership-checks.patch * 0004-repo-test-configuration-ownership-validation.patch * 0005-repo-refactor-global-config-loader-function.patch * 0006-repo-honor-safe.directory-during-ownership-checks.patch * 0007-repo-make-ownership-checks-optional.patch * 0010-revparse-Remove-error-prone-redundant-test.patch * 0014-repo-add-tests-for-bare-repo-permissions.patch * 0015-fs-remove-mock-naming-from-change-ownership-constant.patch * 0016-fs-refactor-file-ownership-checks.patch * 0017-fs-allow-ownership-match-if-user-is-in-admin-group.patch * 0018-repo-allow-admin-owned-configs-by-admin-users.patch * 0019-repo-validate-gitdir-and-gitlink-ownership.patch * 0020-repo-allow-users-running-with-sudo-to-access-their-r.patch- libgit2 0.28.4: * CVE-2019-1348: the fast-import stream command "feature export-marks=path" allows writing to arbitrary file paths. As libgit2 does not offer any interface for fast-import, it is not susceptible to this vulnerability. (boo#1158785) * CVE-2019-1349: by using NTFS 8.3 short names, backslashes or alternate filesystreams, it is possible to cause submodules to be written into pre-existing directories during a recursive clone using git. As libgit2 rejects cloning into non-empty directories by default, it is not susceptible to this vulnerability. (boo#1158787) * CVE-2019-1350: recursive clones may lead to arbitrary remote code executing due to improper quoting of command line arguments. As libgit2 uses libssh2, which does not require us to perform command line parsing, it is not susceptible to this vulnerability. (boo#1158788) * CVE-2019-1351: Windows provides the ability to substitute drive letters with arbitrary letters, including multi-byte Unicode letters. To fix any potential issues arising from interpreting such paths as relative paths, we have extended detection of DOS drive prefixes to accomodate for such cases. (boo#1158790) * CVE-2019-1352: by using NTFS-style alternative file streams for the ".git" directory, it is possible to overwrite parts of the repository. While this has been fixed in the past for Windows, the same vulnerability may also exist on other systems that write to NTFS filesystems. We now reject any paths starting with ".git:" on all systems. (boo#1158790) * CVE-2019-1353: by using NTFS-style 8.3 short names, it was possible to write to the ".git" directory and thus overwrite parts of the repository, leading to possible remote code execution. While this problem was already fixed in the past for Windows, other systems accessing NTFS filesystems are vulnerable to this issue too. We now enable NTFS protecions by default on all systems to fix this attack vector. (boo#1158791) * CVE-2019-1354: on Windows, backslashes are not a valid part of a filename but are instead interpreted as directory separators. As other platforms allowed to use such paths, it was possible to write such invalid entries into a Git repository and was thus an attack vector to write into the ".git" dierctory. We now reject any entries starting with ".git" on all systems. (boo#1158792) * CVE-2019-1387: it is possible to let a submodule's git directory point into a sibling's submodule directory, which may result in overwriting parts of the Git repository and thus lead to arbitrary command execution. As libgit2 doesn't provide any way to do submodule clones natively, it is not susceptible to this vulnerability. Users of libgit2 that have implemented recursive submodule clones manually are encouraged to review their implementation for this vulnerability. (boo#1158793)- libgit2 0.28.3: * A carefully constructed commit object with a very large number of parents may have lead to out-of-bounds writes or potential denial of service (boo#1158981)- Update to 0.28.2: * Fix include directory ordering when using bundled dependencies. * Fix infinite loop when searching for a non-existing repository with Windows-style paths including drive prefixes. * Fix symlinks to directories on Windows. * Fix paths with a trailing "/" not always being treated as directories when computing ignores. * Fix false negatives when computing ignores where ignore rules that are a prefix to a negative ignore rule exist. * Fix patches with CRLF line endings not being parsed correctly. * Fix segfault when parsing patches with file addition (deletion) where the added (deleted) file name contains a space. * Fix assertion failure when trying to write to a non-existent locked configuration file.- Update to version 0.28.1: - The deprecated functions (git_buf_free and the giterr_ family of functions) are now exported properly. In the v0.28 release, they were not given the correct external attributes and they did not have the correct linkage visibility in the v0.28 library.- Update to version 0.28.0: * Changes or improvements: - The library is now always built with cdecl calling conventions on Windows; the ability to build a stdcall library has been removed. - Reference log creation now honors core.logallrefupdates=always. - Fix some issues with the error-reporting in the OpenSSL backend. - HTTP proxy support is now builtin; libcurl is no longer used to support proxies and is removed as a dependency. - Certificate and credential callbacks can now return GIT_PASSTHROUGH to decline to act; libgit2 will behave as if there was no callback set in the first place. - The line-ending filtering logic - when checking out files - has been updated to match newer git (>= git 2.9) for proper interoperability. - Symbolic links are now supported on Windows when core.symlinks is set to true. - Submodules with names which attempt to perform path traversal now have their configuration ignored. Such names were blindly appended to the $GIT_DIR/modules and a malicious name could lead to an attacker writing to an arbitrary location. This matches git's handling of CVE-2018-11235. - Object validation is now performed during tree creation in the git_index_write_tree_to API. - Configuration variable may now be specified on the same line as a section header; previously this was erroneously a parser error. - When an HTTP server supports both NTLM and Negotiate authentication mechanisms, we would previously fail to authenticate with any mechanism. - The GIT_OPT_SET_PACK_MAX_OBJECTS option can now set the maximum number of objects allowed in a packfile being downloaded; this can help limit the maximum memory used when fetching from an untrusted remote. - Line numbers in diffs loaded from patch files were not being populated; they are now included in the results. - The repository's index is reloaded from disk at the beginning of git_merge operations to ensure that it is up-to-date. - Mailmap handling APIs have been introduced, and the new commit APIs git_commit_committer_with_mailmap and git_commit_author_with_mailmap will use the mailmap to resolve the committer and author information. In addition, blame will use the mailmap given when the GIT_BLAME_USE_MAILMAP option. - Ignore handling for files in ignored folders would be ignored. - Worktrees can now be backed by bare repositories. - Trailing spaces are supported in .gitignore files, these spaces were previously (and erroneously) treated as part of the pattern. - The library can now be built with mbedTLS support for HTTPS. - The diff status character 'T' will now be presented by the git_diff_status_char API for diff entries that change type. - Revision walks previously would sometimes include commits that should have been ignored; this is corrected. - Revision walks are now more efficient when the output is unsorted; we now avoid walking all the way to the beginning of history unnecessarily. - Error-handling around index extension loading has been fixed. We were previously always misreporting a truncated index. * API additions: - The index may now be iterated atomically using git_index_iterator. - Remote objects can now be created with extended options using the git_remote_create_with_opts API. - Diff objects can now be applied as changes to the working directory, index or both, emulating the git apply command. Additionally, git_apply_to_tree can apply those changes to a tree object as a fully in-memory operation. - You can now swap out memory allocators via the GIT_OPT_SET_ALLOCATOR option with git_libgit2_opts(). - You can now ensure that functions do not discard unwritten changes to the index via the GIT_OPT_ENABLE_UNSAVED_INDEX_SAFETY option to git_libgit2_opts(). This will cause functions that implicitly re-read the index (eg, git_checkout) to fail if you have staged changes to the index but you have not written the index to disk. (Unless the checkout has the FORCE flag specified.) - At present, this defaults to off, but we intend to enable this more broadly in the future, as a warning or error. We encourage you to examine your code to ensure that you are not relying on the current behavior that implicitly removes staged changes. - Reference specifications can be parsed from an arbitrary string with the git_refspec_parse API. - You can now get the name and path of worktrees using the git_worktree_name and git_worktree_path APIs, respectively. - The ref field has been added to git_worktree_add_options to enable the creation of a worktree from a pre-existing branch. - It's now possible to analyze merge relationships between any two references, not just against HEAD, using git_merge_analysis_for_ref. * API removals: - The git_buf_free API is deprecated; it has been renamed to git_buf_dispose for consistency. The git_buf_free API will be retained for backward compatibility for the foreseeable future. - The git_otype enumeration and its members are deprecated and have been renamed for consistency. The GIT_OBJ_ enumeration values are now prefixed with GIT_OBJECT_. The old enumerations and macros will be retained for backward compatibility for the foreseeable future. - Several index-related APIs have been renamed for consistency. The GIT_IDXENTRY_ enumeration values and macros have been renamed to be prefixed with GIT_INDEX_ENTRY_. The GIT_INDEXCAP enumeration values are now prefixed with GIT_INDEX_CAPABILITY_. The old enumerations and macros will be retained for backward compatibility for the foreseeable future. - The error functions and enumeration values have been renamed for consistency. The giterr_ functions and values prefix have been renamed to be prefixed with git_error_; similarly, the GITERR_ constants have been renamed to be prefixed with GIT_ERROR_. The old enumerations and macros will be retained for backward compatibility for the foreseeable future. * Breaking API changes: - The default checkout strategy changed from DRY_RUN to SAFE. - Adding a symlink as .gitmodules into the index from the workdir or checking out such files is not allowed as this can make a Git implementation write outside of the repository and bypass the fsck checks for CVE-2018-11235. - Bump sover to 28 following upstreams changes.- libgit2 0.27.7: * Various improvements for handling repositories * Various API correctness fixes - includes changess from 0.27.6: * Various security fixes for parsing integers from buffers, and buffer handling bsc#1114729- libgit2 0.27.5: * CVE-2018-17456: Submodule URLs and paths with a leading "-" are now ignored to avoid injecting options into library consumers that perform recursive clones (bsc#1110949) * Avoid a buffer overflow when running repack * Avoid stack overflow from unbounded recursion in configuration file parser * Avoid heap-buffer overflow when parsing "ok" packets * Fix heap-buffer overflows in smart protocol parsing code * Fix potential integer overflows on platforms with 16 bit ints * Fix potential NULL pointer dereference when parsing configuration files- Use pkgconfig style of dependencies, refresh dependencies - Use more of cmake macros- libgit2 0.27.4: * fix out-of-bounds reads when processing smart-protocol "ng" packets (bsc#1104641)- libgit2 0.27.3: * CVE-2018-10887 (bsc#1100613), CVE-2018-10888 (bsc#1100612): Specially crafted delta object in packfiles could trigger an integer overflow, bypassing input validation and causing the object database to contain copies of system memory. This may allow denial of service or, potentially, an information leak - includes changes from 0.27.2: * various API and correctnes fixes * Fixes related to handling of .gitmodules - includes changes from 0.27.1: * CVE-2018-11235: insufficient validation of submodule names from .gitmodules allowed writes to arbitrary paths (bsc#1095219) * disallow .gitmodules files as symlinks.- update to 0.27.0: - Changes or improvements - Improved p_unlink in posix_w32.c to try and make a file writable before sleeping in the retry loop to prevent unnecessary calls to sleep. - The CMake build infrastructure has been improved to speed up building time. - A new CMake option "-DUSE_HTTPS=" makes it possible to explicitly choose an HTTP backend. - A new CMake option "-DSHA1_BACKEND=" makes it possible to explicitly choose an SHA1 backend. The collision-detecting backend is now the default. - A new CMake option "-DUSE_BUNDLED_ZLIB" makes it possible to explicitly use the bundled zlib library. - A new CMake option "-DENABLE_REPRODUCIBLE_BUILDS" makes it possible to generate a reproducible static archive. This requires support from your toolchain. - The minimum required CMake version has been bumped to 2.8.11. - Writing to a configuration file now preserves the case of the key given by the caller for the case-insensitive portions of the key (existing sections are used even if they don't match). - We now support conditional includes in configuration files. - Fix for handling re-reading of configuration files with includes. - Fix for reading patches which contain exact renames only. - Fix for reading patches with whitespace in the compared files' paths. - We will now fill FETCH_HEAD from all passed refspecs instead of overwriting with the last one. - There is a new diff option, GIT_DIFF_INDENT_HEURISTIC which activates a heuristic which takes into account whitespace and indentation in order to produce better diffs when dealing with ambiguous diff hunks. - Fix for pattern-based ignore rules where files ignored by a rule cannot be un-ignored by another rule. - Sockets opened by libgit2 are now being closed on exec(3) if the platform supports it. - Fix for peeling annotated tags from packed-refs files. - Fix reading huge loose objects from the object database. - Fix files not being treated as modified when only the file mode has changed. - We now explicitly reject adding submodules to the index via git_index_add_frombuffer. - Fix handling of GIT_DIFF_FIND_RENAMES_FROM_REWRITES raising SIGABRT when one file has been deleted and another file has been rewritten. - Fix for WinHTTP not properly handling NTLM and Negotiate challenges. - When using SSH-based transports, we now repeatedly ask for the passphrase to decrypt the private key in case a wrong passphrase is being provided. - When generating conflict markers, they will now use the same line endings as the rest of the file. - API additions - The git_merge_file_options structure now contains a new setting, marker_size. This allows users to set the size of markers that delineate the sides of merged files in the output conflict file. By default this is 7 (GIT_MERGE_CONFLICT_MARKER_SIZE), which produces output markers like <<<<<<< and >>>>>>>. - git_remote_create_detached() creates a remote that is not associated to any repository (and does not apply configuration like 'insteadof' rules). This is mostly useful for e.g. emulating git ls-remote behavior. - git_diff_patchid() lets you generate patch IDs for diffs. - git_status_options now has an additional field baseline to allow creating status lists against different trees. - New family of functions to allow creating notes for a specific notes commit instead of for a notes reference. - New family of functions to allow parsing message trailers. This API is still experimental and may change in future releases. - Breaking API changes - Signatures now distinguish between +0000 and -0000 UTC offsets. - The certificate check callback in the WinHTTP transport will now receive the message_cb_payload instead of the cred_acquire_payload. - We are now reading symlinked directories under .git/refs. - We now refuse creating branches named "HEAD". - We now refuse reading and writing all-zero object IDs into the object database. - We now read the effective user's configuration file instead of the real user's configuration in case libgit2 runs as part of a setuid binary. - The git_odb_open_rstream function and its readstream callback in the git_odb_backend interface have changed their signatures to allow providing the object's size and type to the caller.- Update to 0.26.3: * Fix cloning of the libgit2 project with git clone --recursive by removing an invalid submodule from our testing data. * Fix endianness of the port in p_getaddrinfo(). * Fix handling of negative gitignore rules with wildcards. * Fix handling of case-insensitive negative gitignore rules. * Fix resolving references to a tag if the reference is stored with its fully resolved OID in the packed-refs file. * Fix checkout not treating worktree files as modified when only their mode has changed. * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES. * Fixes memory handling issues when reading crafted repository index files. The issues allow for possible denial of service due to allocation of large memory and out-of-bound reads. (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256) * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are vulnerable to security issues in the prior version.- Modernize spec-file by calling spec-cleaner- remove unneeded dependency (python is used only for testsuite, which isn't used during build)- libgit2 0.26.0: * Support for opening, creating and modifying worktrees. * Can now detect SHA1 collisions resulting from the SHAttered attack CVE-2005-4900 * Fix for missing implementation of `git_merge_driver_source` getters * Fix for installed pkg-config file being broken when the prefix contains spaces * Can now detect when the hashsum of on-disk objects does not match their expected hashsum. * Support open-ended ranges (e.g. "master..", "...master") in revision range parsing code. * Correctly compute ignores with leading "/" in subdirectories. * Optionally call `fsync` on loose objects, packfiles and their indexes, loose references and packed reference files. * Builds against OpenSSL v1.1 and against LibreSSL. * Improvements for reading index v4 files. * API additions and incompatible API changes- libgit2 0.25.1 - New features and functionality: * repository discovery features * Support for reading and writing git index v4 files * Improve the performance of the revwalk * reference db concurrency improvements * Nanosecond resolution is now activated by default * restrict the set of ciphers used with OpenSSL by default. * user-registered merge drivers * built-in support for the union merge driver * callers can now specify proxy settings * New API for creating signed commits * New API for creating blobs from streams * New flags for opening repositories * New functions for various git operations - Removed API: * git_blob_create_fromchunks() has been removed in favour of git_blob_create_fromstream() - Changed API: * git_packbuilder_object_count and git_packbuilder_written now return a size_t instead of a uint32_t for more thorough compatibility with the rest of the library. * git_packbuiler_progress now provides explicitly sized uint32_t values instead of unsigned int. * git_diff_file now includes an id_abbrev field that reflects the number of nibbles set in the id field. * git_odb_backend now has a freshen function pointer * git_remote_connect() now accepts proxy options.- libgit2 0.24.6, including the following security fixes: * bsc#1019036: edge cases in the Git Smart Protocol can lead to attempting to parse outside of the buffer CVE-2016-10128,CVE-2016-10129 * bsc#1019037: MITM possible due to lack of parameter for certificate parameter CVE-2016-10130,CVE-2017-5338,CVE-2017-5339 - includes changes from 0.24.5: * add support for OpenSSL 1.1.0 for BIO filter- libgit2 0.24.3, fixing the following vulnerabilities: * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing object files (bsc#1003810) * various bug fixes from the 0.24.2 release- Add to the SDK. Fate#319349 - Update license to GPL-2.0 WITH GCC-exception-2.0- libgit2 0.24.1: + various compatible backported bug fixes- Update to version 0.24.0: + Custom filters can now be registered with wildcard attributes, for example filter=*. Consumers should examine the attributes parameter of the check function for details. + Symlinks are now followed when locking a file, which can be necessary when multiple worktrees share a base repository. + You can now set your own user-agent to be sent for HTTP requests by using the GIT_OPT_SET_USER_AGENT with git_libgit2_opts(). + You can set custom HTTP header fields to be sent along with requests by passing them in the fetch and push options. + Tree objects are now assumed to be sorted. If a tree is not correctly formed, it will give bad results. This is the git approach and cuts a significant amount of time when reading the trees. + Filter registration is now protected against concurrent registration. + Filenames which are not valid on Windows in an index no longer cause to fail to parse it on that OS. + Rebases can now be performed purely in-memory, without touching the repository's workdir. + When adding objects to the index, or when creating new tree or commit objects, the inputs are validated to ensure that the dependent objects exist and are of the correct type. This object validation can be disabled with the GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option. + The WinHTTP transport's handling of bad credentials now behaves like the others, asking for credentials again. + Various API changes (additions AND removals). - Rename libgit2-23 subpackage to libgit2-24, following upstraems soname bump (also in baselibs.conf).- libgit2 0.23.4: * various bug fixes and improvements - drop upstreamed libgit2-fix-.pc-file.patch- libgit2 0.23.3, containing critical fixes: * blame: guard xdiff calls for large files * diff: don't feed large files to xdiff * merge_file: treat large files as binary * xdiff: convert size variables to size_t * GITERR_CHECK_ALLOC_ADDn: multi-arg adders- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.- libgit2 0.23.2: * documentation fixes * diff: don't error out on an invalid regex * http: propagate the credentials callback's error code * Fix bug in git_smart__push: push_transfer_progress cb is never called * remote: don't confuse tag auto-follow rules with refspec matching * curl: use the most secure auth method for the proxy * Forcing libssh2 lib location * fix duplicate basenames to support older VS - includes changes from 0.23.1: * Stage an unregistered submodule in _add_bypath() * filebuf: remove lockfile upon rename errors * Increase required version of cmake to 2.8 * Handle ssh:// and git:// urls containing a '~' character. * documentation updates * submodule URL handling fixes * index: allow add_bypath to update submodules * blob: fail to create a blob from a dir with EDIRECTORY * submodule: lookup the submodule by path if available * submdule: reproduce double-reporting of a submodule in foreach - note cmake requirement and use cmake makros - build with system libcurl - build with system http-parser- Update to version 0.23.0: + Changes or improvements: - Patience and minimal diff drivers can now be used for merges. - Merges can now ignore whitespace changes. - Updated binary identification in CRLF filtering to avoid false positives in UTF-8 files. - Rename and copy detection is enabled for small files. - Checkout can now handle an initial checkout of a repository, making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of clone. - The signature parameter in the ref-modifying functions has been removed. Use git_repository_set_ident() and git_repository_ident() to override the signature to be used. - The local transport now auto-scales the number of threads to use when creating the packfile instead of sticking to one. - Reference renaming now uses the right id for the old value. - The annotated version of branch creation, HEAD detaching and reset allow for specifying the expression from the user to be put into the reflog. - git_rebase_commit now returns GIT_EUNMERGED when you attempt to commit with unstaged changes. - On Mac OS X, we now use SecureTransport to provide the cryptographic support for HTTPS connections insead of OpenSSL. - Checkout can now accept an index for the baseline computations via the baseline_index member. - The configuration for fetching is no longer stored inside the git_remote struct but has been moved to a git_fetch_options. The remote functions now take these options or the callbacks instead of setting them beforehand. - git_submodule instances are no longer cached or shared across lookup. Each submodule represents the configuration at the time of loading. - The index now uses diffs for add_all() and update_all() which gives it a speed boost and closer semantics to git. - The ssh transport now reports the stderr output from the server as the error message, which allows you to get the "repository not found" messages. - git_index_conflict_add() will remove staged entries that exist for conflicted paths. - The flags for a git_diff_file will now have the GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side of the diff. This is useful for understanding whether a side of the diff exists in the presence of a conflict. - The constructor for a write-stream into the odb now takes git_off_t instead of size_t for the size of the blob, which allows putting large files into the odb on 32-bit systems. - The remote's push and pull URLs now honor the url.$URL.insteadOf configuration. This allows modifying URL prefixes to a custom value via gitconfig. - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer, and git_diff_buffers now accept a new binary callback of type git_diff_binary_cb that includes the binary diff information. - The race condition mitigations described in racy-git.txt have been implemented. - If libcurl is installed, we will use it to connect to HTTP(S) servers. + Various API changes (incl. breaking changes). - Rename libgit2-22 subpackage to libgit2-23, following upstreams soname bump (also in baselibs.conf).- Update to version 0.22.1: + The following (critical) fixes have been backported to this maintenance release: - checkout: introduce git_checkout_perfdata. - git_path_join_unrooted: return base len. - checkout: don't recreate previous directory. - checkout tests: nasty symlinks. - checkout: drop newline in error message. - checkout: remove files before writing new ones. - checkout tests: emulate p_realpath poorly on Win32. - checkout tests: cleanup realpath impl on Win32. - Changes from version 0.22.0: + git_signature_new() now requires a non-empty email address. + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X. + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of TLSv1 in OpenSSL. + The fetch behavior of remotes with autotag set to GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git 1.9.0 and later. In this mode, libgit2 now fetches all tags in addition to whatever else needs to be fetched. + git_checkout() now handles case-changing renames correctly on case-insensitive filesystems; for example renaming "readme" to "README". + The search for libssh2 is now done via pkg-config instead of a custom search of a few directories. + Add support for core.protectHFS and core.protectNTFS. Add more validation for filenames which we write such as references. + The local transport now generates textual progress output like git-upload-pack does ("counting objects"). + git_checkout_index() can now check out an in-memory index that is not necessarily the repository's index, so you may check out an index that was produced by git_merge and friends while retaining the cached information. + Remove the default timeout for receiving / sending data over HTTP using the WinHTTP transport layer. + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix systems. + Provide built-in objects for the empty blob (e69de29) and empty tree (4b825dc) objects. + The index' tree cache is now filled upon read-tree and write-tree and the cache is written to disk. + LF -> CRLF filter refuses to handle mixed-EOL files. + LF -> CRLF filter now runs when * text = auto (with Git for Windows 1.9.4). + File unlocks are atomic again via rename. Read-only files on Windows are made read-write if necessary. + Share open packfiles across repositories to share descriptors and mmaps. + Use a map for the treebuilder, making insertion O(1). + The build system now accepts an option EMBED_SSH_PATH which when set tells it to include a copy of libssh2 at the given location. This is enabled for MSVC. + Add support for refspecs with the asterisk in the middle of a pattern. + Fetching now performs opportunistic updates. To achieve this, we introduce a difference between active and passive refspecs, which make git_remote_download() and git_remote_fetch() to take a list of resfpecs to be the active list, similarly to how git fetch accepts a list on the command-line. + The THREADSAFE option to build libgit2 with threading support has been flipped to be on by default. + The remote object has learnt to prune remote-tracking branches. If the remote is configured to do so, this will happen via git_remote_fetch(). You can also call git_remote_prune() after connecting or fetching to perform the prune. - Rename libgit2-21 subpackage to libgit2-22, following upstreams soname bump (also in baselibs.conf).- Add baselibs.confs390zl32 1663138829  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|0.28.4-150200.3.3.10.28.4-150200.3.3.10.28.4 git2git2.hannotated_commit.happly.hattr.hblame.hblob.hbranch.hbuffer.hcheckout.hcherrypick.hclone.hcommit.hcommon.hconfig.hcred_helpers.hdeprecated.hdescribe.hdiff.herrors.hfilter.hglobal.hgraph.hignore.hindex.hindexer.hinttypes.hmailmap.hmerge.hmessage.hnet.hnotes.hobject.hodb.hodb_backend.hoid.hoidarray.hpack.hpatch.hpathspec.hproxy.hrebase.hrefdb.hreflog.hrefs.hrefspec.hremote.hrepository.hreset.hrevert.hrevparse.hrevwalk.hsignature.hstash.hstatus.hstdint.hstrarray.hsubmodule.hsysalloc.hcommit.hconfig.hdiff.hfilter.hhashsig.hindex.hmempack.hmerge.hodb_backend.hopenssl.hpath.hrefdb_backend.hreflog.hrefs.hrepository.hstream.htime.htransport.htag.htrace.htransaction.htransport.htree.htypes.hversion.hworktree.hlibgit2.solibgit2.pclibgit2-develexamplesCMakeLists.txtCOPYINGREADME.mdadd.cblame.ccat-file.ccheckout.ccommon.ccommon.hdescribe.cdiff.cfor-each-ref.cgeneral.cinit.clog.cls-files.cmerge.cnetworkMakefileclone.ccommon.ccommon.hfetch.cgit2.cindex-pack.cls-remote.cremote.crev-list.crev-parse.cshowindex.cstatus.ctag.ctesttest-rev-list.sh/usr/include//usr/include/git2//usr/include/git2/sys//usr/lib64//usr/lib64/pkgconfig//usr/share/doc/packages//usr/share/doc/packages/libgit2-devel//usr/share/doc/packages/libgit2-devel/examples//usr/share/doc/packages/libgit2-devel/examples/network//usr/share/doc/packages/libgit2-devel/examples/test/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:25921/SUSE_SLE-15-SP2_Update/03ab1dcc5d9f003aeaff77a85e9772cf-libgit2.SUSE_SLE-15-SP2_Updatedrpmxz5s390x-suse-linuxdirectoryC source, ASCII textpkgconfig fileASCII textmakefile script, ASCII textBourne-Again shell script, ASCII text executablePRRRJx4iݬfꥋMutf-8a93823f8b900036aebd6142eb99db1528cc572f94c7b2b2fb002fba54a6a0904? 7zXZ !t/ofc]"k%r=dٶ{ߒ8W^ytd]ccnI$9Kd&yv_sҁǽ$xnي֖*'7@a>]L?dk'lL>?Л&k X]i6Ird՚kA3M;[M] ջF8㍻kP3:C=1@*d,{pZڇŮ/^)cxB߈|< skQLC&&_P`lv%/ &>H8'nKjvF ^CZխ;Vµ ף*;B%}? v-i3ޢ'ٌ̓; j e.9ӻ^ +~tԸO$?Gg_1U@W/C $›I9!p?R?K7 ږh@r<0c'GO;x$f+F5x!h(z.F94q+Ν$G0^uVi_(t\| lrw5=9G6YɣcocX>ɀD>(fyp&B]؀Ž>i]ڱ vO[Xj-)EG wm @O~>D]Lm7a !DI6OEJWKp>{ˬnQ)*w?o8F8u`P}=kdUdTCL(x7gHrHTw$8--}rsyâ9j6C j2_ N)rF(&W$W(Zlb?3); HT*OWUkݕ%Vk{^kk{:b!rPVʕ->٩XpkhW5z·7bBdTxk pE3h˫HKhFƢ2z bB+vƧZ#p 3G6_IY(|-XLOi|ܸ&kdNi`@`.CLd(nJzME0{WgfkszN:Y:nT-^Ȅ&D[d[ xC 0-p4\/vn&V`IV<$6&#WL>Oe7~Y"gxxEL|DqH4~藄ᑡށ/!Iy@u]BX]*]gu}wʛ,l9 g̏ESwD]ߧ=Ǡ Nd=wW#C5W޽b#%9?:9 ngۻ#Tӆq9dm]CE4Cl,Cj)1^tG,xhtHNTmO`p Dz{mC (;w?rУu l,-Zjc[ gwջdr {*eсVQl|^'.oּZ0D>t PN~L ,u;5%Q -)!zϦēO121 KnX"g/xگ7~C;/ F')?عY $n4tXV;klt Qx\mf!Ǥ`S,n(cO>#=0ff>mrv^alJ0#4S tES[#{FφP4%i|7)[*wj+%P~N9F4z։< {drP~<$xqgE8HH31`ܭ|8ԃ6ONk; CVlEP|APh ɿ{kQ]gGu؃M 7$]~|ˉOOP;ln /{F{yAm5孯'@!! Dž*se >NmL6eWWy%GmULا3 6KLy I (y2+ѫ $x]ArO 7hD>in84ϵ"Llf9[&H',ʓsG-۬{\.>x-l"=K+M1kLsnĢ/6zӾ*Nj8kL\2dSwdy&L"`f2/Hf<;͆`F P^ [{"tp"rIM$6>DZW1mFIdukU,"|c?GU5JCnYYjgneu7Өzq騿(Pߝx%ssք* ֥Qk:2WCP z;`e{¾pT9Ţ!A7b \ޔT; ]Z%.\p%yƠ&'%R 9.cC3CqasjAI/A af }^[]W TdbR_DLpKã9@bgkЊLGt)jaj|k?/ Jw!rUL|PK,;+yNav ^?c# xµi6(_48K̼.R':HvY#;hi0G|NxB*j*y;X.f2I_:Q@^\9u)Bb:!N VPdK}.4S+S2O\.G.^E@֡@nJEimG 4V RPnV=0BW2aQ%Su?'S0X_q 7d"ܽawȒ@<CpZcF!P:u`ҶΫM+U&D%h\@<+6#ȐF,}Ӯ"_65z{^TFn6[[?n1L_m*lSn^$fX4װl3~%Go,V'ޝ5$9(doF[ -ѴwIPOch;&t` X~jW럻ܐÞwP'3*Uѹ6-pWQw6M7]VOJ0rDˉE>iZ9R1߀nI5\V//mr/Gc#(!w`{Qfƙ#Whc2X[ qxMϬc:#QtpYh?D Jx8<4\r!Pn$$:-x+46lYǚujd/ 3ql2FA yb90nR21bAit?^;1W yZYF,L$` @8t6~{ <<>uhϳoe`~=iMS¢Y-si,OJO|GީWo;͒Pzqu$cCrg7w9 3ydn6z/.FoHq3lMW_sB.Kbr\[br| gtq x6%[ qӱ,nPMP`CDս=wÌf;M<q\Q;ǠV;7#>rԮ  2r,2HqE S oz1֒$,89ؘ>={v(Jp_N5P Hs{j ̯ifx80|u~BMlSd:wtF\E+xKr_je |ڏ33sL'<kхWP*)cow#׮ 23'~>Ukn7lw8vF4Ư$:NH^;իd9)gn:ۏP¯g(p=,ؕJVǓJv .ٔt1e )EiCx12z3c~_}#~ la0N?i$iT )Wo7"I1d(e/Kuw_'7E*p:x3b3}$D,/ec&7ըa*!D$cc۔b&;Da^Ws&SumY!}A4 g$H@ncPjL][Hc)q v"UĜٺSpϡ []kؖP%p.XЉ)3(1\q:Fkec9prpɧNweN}N@q9 V`މ>j04ޯCF-<!gj}.vE% *ݘrWoT+9!o/\Mn>l1Y5,ܴ Yz/d,$zp>Qgܵ$ d;[?,r]eW SbE}wڳ^_|.|@H'vݑۚ~7Ϩ*|&!)W;cM'5OFɛGCol#on^3c:kقw/E)(7U3qe«K31n?2kݡΨ;%ЙMFw.glgTpU"' oM-ʚ&ۑxXY m[䮁.G}>Ѣ=o{u.I]q18D quHme2=g`(K5G -vsEYࣃw"*,*@sd;v\$!hGe(&.ה&Pa>BWLA8OW)H0쾓+'™VcnAoD?{L,k5/5_c7W5#,(Uzu 9Lx[Z~!wYma;=ꓜM+LhL =D^킚>sH)IUq q!tV;_qOK2k:1ÌULm7@8¾걙EiUpDTPIeCaxa 7!o~=i߷>kLA74xg:ɚSɽ {_ ]̇GD+`N9u髰Ҩf̂K0-ώ(Iٴ0=TgD*gShrn?e4y8kB kܠ F4lؗG7z#*ɭXUC 8b=FhNX" V$fDЖ"3C=)kx}_T aA83i)WclTq+piy7nx($˗0AſxwRcZJ1x**HmaNpaݝ>x]?=+ɹmѦ2ʰz")(U 'T1(nZado蹢R`b /e8j)i"3?v6JN$,w(va:Tp)BёT^6K#!u8݅{ōHbb_?-0B% ԥӋ%`\︌Aq@44XlabJRJ%e ȓRPظe"G97+[vT:l;5:=hl/瀉e'9*dT^/B|/{ϋ&OCHU]Qn> v#?j X*0rciW7"}KgWY׵0҂|2)SQY5%@2dԐT%[ (g$1$)zLE=c;d]&O5:P)Gn~EI{ y^H@RݥT!wg77iOzu,>dC^7[?&)4//׋P{~ts>dOŖlM6S ]Xe'5G>|$A8+Kɓ kHk٪0xs.Vl0i37kjv#pQ@ ';2VzSa:µ߶d>f$ɸ1od`(i:p  [ nVIcCPA7E=p 2 6x*7nb[G !|_/b:KkFe8զ3{+kΑj05"\л\kQ*lW?" ;Phla"A̐mdid <I`1f?:=8HH 'mp~ r(7叇d]s-Qm4Km˚pnK_h٢"H?a\Wcd ܋:Xdw5+SR{Jpו~ѻ$<ԳIY)wf myG5hZp&P|/'{:;A"8!yhFWa-S(x֊4y(rdǟsBit P~+L[C\u4L L0rE&k(:y0:W?`@D@!*j_ m I 1ğՠEu!8U:cǓX.@@jDС5c'GѦx\Fκ|6[Fuߦ3EM?4⊣xoT3͕UZm BF2t5T ~ X@,,B&w_Sc7&CWIi%rXo1lH痲6^09O%TȊ P8-K_Y͈q D-vL+H~h}88R$|Ƀlڛ*Tn+2g1XY±Y1RaL7rAsIN{UGTϻa}ײkJfqI }l5,JXG 8]`zKW.4%_φXT[a$'0Sڹl֢fEÎ\u0d^IJF2K aa4pJ[Q2F?º&.;>2#7Dv2$LÓХQpgXܞފ(gl} 03rpCHm}ްLW# DT4_Ҝ0UUAv+j,+\l*Ke{!{C{ 抾ssB# !k*]Gҁ~U4 ׇcU&wbmz_XB^T rF$us`:!oi+X|} q*T\UӽzSTBV#DT=Lzˑ2z F:#0l4{2NjTYdj'pP{)PiK|]fXڔs^YCLz:eU^ ƅm'Mf 䨒, ` GepH,%6笅bd N DaK;a>"wH@g<d4bITٌ KߵK֑! x\ed]:RM8>*U \.5*Um h*/b):HM݋Dtޓ jQ GtHNJHo槄H0T݉cD_GSF 22fWjr\rZxBA$S#!BYg1sr8J)n;Xe=!ڟ<*ű%++&T+p7ѡÙei^ܬQNGKe ')%qHID2;jDn4kX $3ӝDB%Ȝ ^+pQ50à .93*||gDO >HpNF[UYh.TD h1CT)06&\?e} ~=b,EeXZ"0UP)D^j\ҷZ#ۋd66M{G7P82VAcV;άC5v Bjf%͢Ӷ 'fSVC`Yr=cWgvbRJڃ[L"Xl8-\cU;[`Zk`N#}G\>ֺ؃a;0揂JA~2Wܤ|v]/4mkq'7U K9_TTMB" ËW╽^Q7us>.?5H}!lcʙ<+N,Xn/vp>}; yҳ4R;|`;:<]1$9#Jx06Հ ;1_s)&ʋA姧6E`XG I Ur fa/FL`BmYMeK\(=(4Tq"w6Q`,1Çqc^Z<,WoVz׼SA`Ļ!נYR߄8 MS R^ߟ43[A,7ͧ- hopXSvLD|bPQ\]tn(oK!~F&~D';MIJxˀ+ {gf@z_Λz)jנrk{`2& Pd9@ϗXx#w RM\`k΃汑ŧ8bI!uy\ԣצp(Pu)>> 0U2<}}_BKp"38x%%UW_j9\v\bD~<=b Yy3څ'kN%Q]3-߯_`vL :A2A$6ַIv"&sb#(:G+mS?ۄ6/~p1F"mߜZFm|3IؒSVUi]/ ǟ*M@}v^e7rmHe=9r- Nh-V=ߡęu֤qK.=JضeuL_ p55FaY F!*{rYaWnk'~}>h3Vw6[?q㾧*vLOa~Vj BɰO՞:T³t+ju$1zKqzK,OptC #NjotB_=ssOFqj~Yz#.Ui irB,!G=:d\JgwHuI2*Ԩڗ'tLcm.h=~Ҋ,zRhͥ4*NZ06{&`Au-P7IuzٕPǍԲ{\(.jv9ڞv$H`%R7|1^)Axt±JչY \_Bc$+מL~!Vbzu_o۰ =yNeן(غ/Z 4˺T8Aquw508^  A|]lAcԳ^.3Y+0йZ,k[ofzs#uݓAN/?D pxsk7u9F E+&l2mbhTCSZi 3\+P־dV*bHIʆF*0+V`I$ :nӀ7ؗh+fqn8km)q"ǢX%_7 &5n0zAvAyCfAhg _[:\)Kf/v `O9]Sa%>MLJ.@ *ߖnvFJ-T~R23^xާ ]sj<_ٚe/=;$\~RVG+7 l9uM% ? ԍjtQ"Viu:0B#m[5[W̶kB@n1ަbt^9ec^y̌Htm؂f[z@[;|Af>QWlӛ !Q¡S)R9],"#,o r5(b߁uM+Hُ>C&A_R90?QmMF.2kr'ͻn*=bKgF {Ԉ{0 l^k~#V>_(H*K/ٿLh9}ABA0vIC|Ss?v m]wH?a;OSqTn+4Mg,-⊨CL i`s6?22q]~f2aڕT[݇uڟT [GR1$4==g2 A촆giOO {# \,i UO./٦3~]!]nU]NÃ>&2)B6qpAݝIq-Ї(2 "FR8Ը* C0qѓGd`g{̛LsJN43+M3p@.\1+ Wa%4Lx$~BEj(0VE |(\_zmQ!}).'A\ORFhMwAЙI.u$k39y ( e cM"ʔ):6*{bqdJIӎ;`b+B`iC?vj ۪: qV\$#ssU3Qܫ he?&,˨ K׺a߼ p||Rt;s[Az**梆:jx31TH`>.1f;ұ9$KEWS_B,ݶHsCPT_%_"J.y1 = ?]?v.{i'/0/xxg0M%S2k0||1Vl fFos+T'Lg?jdW#yt 7qD!ۣ?U::S~h MTU&[S .ACߊf흆&ej:'gr-Kih/h)C2L[$}Ȋʣ"0̈́=J, 6AUN+§Ei_=q/H gzj2B|"xo!KQ!08 'R aJsN`*M-9eڃ;+E7"ܗ7[Lz}>4rhd@խ1՝3` Kg"AZuPMxG:kDۍsGxv|v)ۖ$~K }FeӾrBrδ|ᨌ҈Vffu>{v_ۜ8Lk쎓syq_?&ՋM]r[?ܴw )F)4p{vP)[DˢV+mwTt"Da%&CM=Yn~M@˼IS ԍD^qDJ֑~;Y󃄂uzjIGRgnM >j?Љݳk3 ۙk*{:GkhEu'.gj ֬jGvLrG'Ad^Fư\%ƃGxsU,'{T`RzpEAZ*C)Ȋe MˣKQ w@)P0XJFmآo lkl6P}){/_%=y xh꼣r[pboB?M2gUҀGquG Pp4HZl " K-HBzS#21HAϷ #yf-6 D}i1AlSG|lAI#XwCѣ2&4 DŽert@Fe/Цن_ʓ,I;68tsd g&h51ρ=TEi+";k%yȲVU9̖F %':17|ۑ"r_׊=Mw La(I'{̛ÈTюis 5`V1J5#t&}3Na}|O=34e 4ț&|A`~<[Q oWѪ'e%M:Qи*\Br5P" '5KXzS!'ČOthp.G%`ip0K_i0@&Sf@m{TK$^ D`<~5|1r3 3)%'1Ypdn{-ӧ F@&1D;oJ gYޒf2kYh+` Xtk2Ck7A[uj mOV$No5˃D|hz#MnI1*Xb Sm];QC|krvHsqe全̯]@pFYvzjsҀjbYCH`e&X .XۃN%%Oaz`hVQr^{$A!].^x lVVӏwYw^lmf>C]Yߵoe.a xEL}$MM>ls1dܠ~YqPj~4M:H~)*:KZ_YGIJ<"e3Qt=l)_jM* ^GZ l}1߭%V"^᫫.ľwTgm H Y:eʹGKW ^ޮL@r%єhwĤgO#Rb J7کLq]FJ-3ws Iro>VN!1ql?`p3>?"b=Y}*Rn3Qφ&x6Nh <8PBI_HڰzNvOb2lu3 /XFM*_LѶ,{MIuB8_YZD-3hsWPt/Y?IdTmy>99ᙇF={I|aAthZXIk^^KrX,,*NBCY.4nݙ=RLDgU_lO`9qQ8cY_S =6an`inS,t4q E/֬^/Cbf';_QP ,Z@B.3Gj5wc!>bLElܹD(B+%qVL? ;J`Iisaxwi1z@Uklh!g}J|V&eX؉5J,S;5>-lo"wm~Yp7+Y9?nC9'JGBHJS˹nw~i. N&`jAnh88{Έbu$Ps`AR~ A'(^ -TJeƜNܳ<ѱ&l)"5@#>m"4D)u"{VK/ַBQ(G ޿CÒKocd 7X6vl}?3 _1HV%M b ~bREyfGf63#qCk x4'ټ+ ,cGC$;cॸU"4󒦴=1q p-iU)0i{l9Y&~[-fX0@7pm~;Yإ ]P:}*U_4na/9@f!xn,N2[/\U[D!J2U\zJ Dp Y"M4 #zb5FsrKb?k"9 F0׸b3Տd2N6^+ | [/n=,ҝ c_DR`<049sƶ0_,&zԩ#A`i!~ջBՒÐm7NUMcPaK/3#a 2~ph^GTt¢i}]rFB٭#pStM)/IUT|eg.c@41;ӟ Йq yv9 y!nׅݰmKSp -FkoOȻN'ԇt7N87gx=Y} NNZM㨱`9Nyx ,ݦB:0*LWg'8 2!Z'ܯI#b " DM :wWAXxסxn|Eʴ[%rA¥h]\ Ƚ_WDyY17pvM?+~=Uv(ofm!.:8"o '=%|5gEӬӘ+nܞZz=r/8 {+oZ ND/X5{^Bc{D>yd~JM C* ŜaXA6 vń=3~"sĺJ($EƖllqSk@r?4EdI8[4=o.Kt"D*C(C3 00Jp&]HL_b)cj%l&F ,*ݍu Ys@ɷI*rlYqjUꆯD}g ;?0K,pmlDzg9n kXrpη͟IRO3.Q@;l#{3O4 r Ho]qRA[jV`2,$Ԩb6 ]cK:Bf -MƂ=LNs5Ӥy[@|5&3E y2%rUĵ4ɭŻW J/ԝ7rm4W9F2Q}Y$/fT$ˢGvG[+{塅SL# W2'9fSߧ;_ 2A' LR a2B8C5ǟv(j+<$ʐ@tW+YED}\`m W`ڕ1mFRT{O8^ xRw<d2Q`Vxm8;\c[)bu&a3=ӌ_lL|oiVģD:c,3jB4'{GuRu.((Y開dA'p'u/`r?bxh#Ԥ6f?Ɋ$=@Wt l L t) $8Isf@zҗ3L&Bqv7x?USZvGxyNG@ n'ԽRs]Es;Z^Q1> эE2vt S_RYfikЏ83ĭ1x-n`@Tږj/KאNcvv"D658 p\غ^ R-$h h56ܚoO+YmEAZZEn4PϬM= w~djf)j~}v VP'Q^/!j }zJ~Z/JNrٽY;ajw{TtRXz/TӲ&E0]n'y楏{>bּ 3K>ܟ]mWSmQBŽK`=A}6:|Ťz)Wx W*]ZE/vJMmjLq 'Uҗ L1"-E7g:WGv,+[@]94?iD4(PBѕ4#_3[^~joEEFz gT8hvb}r%ҁoU*(S廔gx3хu\Y#戃Vcoz#蚎hBi`|ϖ^rub/LrnP\2"u;Y-uѓ.gQ~1}KIE E%$Ix4@G\o̅Υ.tG dHQS翂3O-eC˰p+V0~!02EbolӷՂⒼU9@dc%Z[O-auHͅjiB!fZC<ٺ=EʢtmXo)0rF3\FMT;n4:JY0o{ı2ܨ8Ȥ46~1zGaPDTʣa0 "L haMt==h3Rm;TW;32nkg &.ytu?i y!ec\#l@\W/{h+e15uް:PEYb"=6oNUnM5d:dF#n./*n5UXz \%mFuv4m.s.dUfd@g e_$$5NqP.+2T)m[ջ|R9#pĵ I+H[k/|]gUBxybﷆʄC@'2 5"@n-=k+h04A]C}+{F>؄/Tҫt:hBe=8oׅt'jE$E} '՛Dܮ,ح >(ecbA|ҒL=fAm͞HC^N*RK-*m#<_.SN:Wsm5OVKg+Y ~#+Y@8ՉhFњc q:mQ m"7y9aY0VrH){r 40I@z'N$ߌvږ>fooYj%& ' K4ufՏK,!!o?'*&*cRj*Qp>[Z v庁{SϚ4[ٍ"~U!(t)c}IZ {&|tQx2B:IަIR-E\N-/ DmgEF )3 {.hS.cXmR{w)H >(/Uz^)c*Fo4EGXR+>ԋu9],kfL W,x)*7r?F6&4ẕVl,VJPaQiO'5.m]:(^mf3K6\)U'g͐UC 28~H\gxٻRυ r7]Sn?Г `N9dZ )mRn;Դ݁c;R.Jp;OV,UU܅[₺G':(_3}sq-ƌ 1 [# GqC8\TwoEb*Z//&Ԍw93,n;ov])0aroJćĞnאu,k&rĴ2^L#ؕ:D+$Jn/ؑ-?% bo[!lFaܸiNnH:\[6s"r)c29lBа 5Y#rV oucU<|ٗ=v+a{'s}~\9wjFÉ+c>ጋvQTyt4fҟljٮ]"dum 9]9c cB%SEF2LI񣡥<<< q6!K?=l? ;;/sFO}Z[R|N߰ -^ 0E5#M. ׮/hlH0Xҧ)Gs&f>y-B Γ.-0LW eNX SF/^.u/ ` 0eB!7̗1#TSg:.o!4$_a8(Xӂ|eK㫑|B>,1_M_Pdͭ +,fR WQGd--_WGaXlR"+Q2|lU_ S@9sb)}{:P9];8n$y-#-6:,R>AP3fixF|vj4A&܅ HV+;+_%ôϊcatCZ!c`6d^ Q%FGl<ؑH׮T޸>а|wG *GDg^\/5!04VYm\Liua_4LR)m";򑑃Hܕֶ YZ