icinga2-ido-pgsql-2.12.1-lp152.3.3.3 4>$  Ap_K/=„9fǢI.Qֵ,y|p%F"L>^ƫpY% Դ3'x$o ώ2Q*3HiJ=bDMW&rcqFe >>dbQZSrL"Yr]q,JN%%hA.DҔ7R S MA:&?4Cͦɵ) \鿄suzb{2ފ?/jZ&Xgx,`5r270cacebf17e2ce591a27cc1442f98c08bc72e4eb1318b27abd6c069e31f114f0909fce876c002dadef0888ff71f5fdc3faa83f6`_K/=„i UuRÖ6[P>`E6(;@b4D2<6ÕԾ6U6<5V}J<VO$ h ʖVy. *Bo,KLFIhS(0uMbCfВ瓑(_Z =x9_ı;CvqLGwU^$28է1]$s* mzBo斶fNJ+Bԏ6 G..P>pBc?bd ' T  4:A+ B p  # T %      ( 8 O9 LO:gO>[A@[IF[QG[dH[I\X\4Y\D\\]\^] b_c_d`Te`Yf`\l`^u`pv`waxb$ybzbbbbbCicinga2-ido-pgsql2.12.1lp152.3.3.3IDO PostgreSQL database backend for Icinga 2Icinga 2 IDO PostgreSQL database backend. Compatible with Icinga 1.x IDOUtils schema >= 1.12_Jlamb54/openSUSE Leap 15.2openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxx86_64if [ ${1:-0} -eq 1 ] && [ -e /etc/icinga2/features-enabled/ido-pgsql.conf ] then # initial installation, enable ido-pgsql feature ln -sf ../features-available/ido-pgsql.conf /etc/icinga2/features-enabled/ido-pgsql.conf fi exit 0if [ "$1" = "0" ]; then # deinstallation of the package - remove feature rm -f /etc/icinga2/features-enabled/ido-pgsql.conf fi exit 0(&T[x*(#GFA큤AA큤A큤A큤_J_J_J_J_____J_J__J__________J_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_shim.so.2.12.1icingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticinga2-2.12.1-lp152.3.3.3.src.rpmconfig(icinga2-ido-pgsql)icinga2-ido-pgsqlicinga2-ido-pgsql(x86-64)libpgsql_shim.so.2.12.1()(64bit)@@@@    /bin/sh/bin/shconfig(icinga2-ido-pgsql)icinga2-binlibpq.so.5()(64bit)libstdc++.so.6()(64bit)libstdc++.so.6(CXXABI_1.3)(64bit)libstdc++.so.6(GLIBCXX_3.4)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)2.12.1-lp152.3.3.32.12.1-lp152.3.3.33.0.4-14.6.0-14.0-15.2-14.14.1__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/shlamb54 1603619583 2.12.1-lp152.3.3.32.12.1-lp152.3.3.32.12.1-lp152.3.3.3 ido-pgsql.conflibpgsql_shim.solibpgsql_shim.so.2.12.1icinga2-ido-pgsqlAUTHORSCHANGELOG.mdNEWSREADME.mdicinga2-ido-pgsqlschemapgsql.sqlupgrade2.0.2.sql2.1.0.sql2.2.0.sql2.3.0.sql2.4.0.sql2.5.0.sql2.6.0.sql2.8.0.sql2.8.1.sqlicinga2-ido-pgsqlCOPYING/etc/icinga2/features-available//usr/lib64/icinga2//usr/share/doc/packages//usr/share/doc/packages/icinga2-ido-pgsql//usr/share//usr/share/icinga2-ido-pgsql//usr/share/icinga2-ido-pgsql/schema//usr/share/icinga2-ido-pgsql/schema/upgrade//usr/share/licenses//usr/share/licenses/icinga2-ido-pgsql/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:14643/openSUSE_Leap_15.2_Update/7bfee0f0c77c3059d144b645a81fb051-icinga2.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxASCII textELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9c006dc9686e80561cad20a5c08dc3ec1d360900, strippeddirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII textPRRRR-'gpnrj Ė&8s.Uho-`,?=09ðk8,؋}N'dD(ë)yi0XM#$6Kƒtϵ2)竁2Mc) (^PZЌ/rOG¯ySTnwX͚_e,8-;t>xu,W8'7=wA]lmB.eo{Za>5ͧx ;TdAI-̌A۷]*J2}Fzjhk8t,f,5;e BtLɻ'Yų\mž];E~ap=.:Q,<>@?鹍НwEMl65W/^틗RTbqw  f4Td (v] 2gyGG [@/5 ƠZKןU+V^baks4u?9w@4h^p\ OzeIHRN٪;N%܏Y[]9>`hIt_yyܶ9 xT5'8Ku?:S0O-O{#cQSͺazWBGPgy M̌*S!`)^MqM6" &xJ]k)ְߘ@Y@f@ ׉ fjslk*ówǪ0{!E3a.e[V&۟G 4GO]ꏭ\`G,}/Lʇ}Kt @!ѥ*!uѾuL0&u2"_0 tf\ yǕTF>K/Æ'y#P ;XITf +v|Zr;FhQ- |mܐ)-P ts4hvū]]=ɡxZb4vGN2 twf ("V\/g$MBk'spyV޺˾:']S/w "n,^-{Yh*=uV a+d4QYmI{齽R#f8c!IB]H$ϒRW=F~x=! PnmP}Q@<vO3w 4tjjpsbN(VL?Dyqt[~pCu{۬3E_Iߡ6?V7%̕#x4DGsrYF$9&F?EG蔜KMF'H֢Ri4a#<8+e<0UL~8y;»Q |٪ƴ1PA{!U)F<. to5}`&DŌ>^c8Fr(s _KMFAwA6zTl \f̈́:mז,-!%~B7*8F2efՆ) .89UHT),#^GTu|V` fB\Xo})9 !jV]3xYK\)vE UUb8kYA%&6^^蒩#/'<V\µbBMX$g~熵 1HJV@֞~$)GJ~o22 h i!mq2y7-ՠ0>PpH>tfK7.M W[\ ?@ U>=b䛶$B }K1@0ѹkWbc+aWr⫧zx9IgaC03Fd ǸXX~ d?Gr as"{4vʰPdƘ Uָ8q\p8ʪ>b0͏Hh+ }BX ٝ FQv7%'E<[=Mwū?!G > 8U&\SPӏ(t:!T?H|ɃnIMx ;-,`}MF^_ៈ$ۡ"4os8bF\VskphiZmZńį1{zځB"/^mU-@A%_,\)\z`^o7TǓ[r% ZxN/f n3ӿKW^*sǯ`xx40Ц)!yCw 2d|ǓZi*݀6^d؊vŒE/Z^=y6J55짐TMD5#ΟI.C/TA{>3\6AP3'P L"0Fkb \9 Dg\\$!0#q⬍M0a(zR1QH*q[pL W UkC9kDIVJLAGo≵ޡy4S,&G.׊3Z,OsheiM]iqg6eV6"a}36-v+܉D^7| фt]Y'}6щ8[抋QM\tC!d^͙$$M0N(,LP?S^0CpW{?dM 2{N̡5*]&?=Wjk󎈰.WV3A`-poX<[HVQp ;rjJx.}mAle#;޲ate7 بW#T"ڗ:co} ;UJr.pҨ3A|!H+V VFv @u7 &[8n_2`ϸ:Aӧh ='w?4x|EB'Rݩ;2&. *)Z(M &Sٜ>Ix-}4OȼEJ#nk;> aMc&bH沖#cEp(5Fb;!Yrv0Ɨ?ww:9m'ױ6 D2ӟ/b.~)$=G6tk,ƙ[q}w~ cPjmB#UP7z@nw>0Op5K[3uݜ!;eA W(\=>ؙ%/=wGo>,xW{7+#d6eMݶQcv )DEI¬=?>%[3A3=Nm᧟uֽfb}=_~|ءj|úl̞=( +S T RL-v)4-Rmh+L<_grAx:ޮWV ɝ{Y})ƣ3|$Rl3atݮ !鍖γKՕ$aۜi!1g&A5D}>#oKVYkh|=hAXܤ[)[u$ZJMɸu.4zy ϥb)$+gq(O jPՎge5YI|x6Qd6+̄E+z2_/!V8"<lEW*97p_HHXs qJ+8"_%Miga1W] }̓$[ymNBL);G긺dDG}Uz>XOӔH)ȫވwm"{;1,ũwg$mx*ht+m9sgNaې MuA/FPz 1' ˥,XD¯_Fkے8ۨe&_LH&2i7XPoX=0 Bh*P檪ɍ#4d56q`]4Op~d*j@BKދ+N"m$BPZxnN}[$(q2mMQ_oQd7Cޡv,+v4ԐYsae=u/ڕ@ UW%k`ow6A" E<.-:3lVt?'{2e}`FnE^^ʣcir ]րOh&Zg ?H]`LF'YQ0#qT~x=0d^EM_1 &/q>;=UD'wM[!{YXs֟Hḱ֚`o[VաJƙ1d[cuwݘ/~UmaovHWpuEC> `$(Q~W1!Ȍ}JU="H=vKܦ""4Icsy^x! r?c5. (n^_uٙ uG(G\F]qi)M"kt=4=3 4:B yy| Q: 'Ng7a^X9p2rU?P/6l7dVBf`%r9 A?m:ƝdU! If:,1  O_f6b-[V[L~_eH+9gkĴ5.>rà7sUS5*"wMFAu\|}\NR6)È7е6^YWTr _?J; U$ dOygMǭx7j0#D m 哵):]hX>&9D-GNKi3C"\w3hnqX7}#ߙ]a-!Hc#ӽQ\>mry]]vtYd r389tBD^ã!G0wёvgdpvR{ad+CTK|/>[ʊv$|F>/5=}sBYSv.b֩a'O颠nsD`L82 RЬKN0[Ь.S˜LR:L9@\y<i?WI;']u+óƞISסpc1i:{6%}G_*Ͳne̙/R\bvV& oRIVfj%`/ 1} xsؐݛ^7;59^o;'o//eHb@P2 f[&yWmF 27>iȡ4ij,";£\^3TNkWT,Lt?:'y,x$_n-smQʍmcNMg Ŭ5iPLUZEVhC5;L"Ly5 2${Y*fHcUl+jR]M!PH\whH#S`1D "P4atj-y7?v]WWoȴTHoj%|1<Ƙ/J Pd!K]T;f*q#@ x6td&ǒ3DFԖd沌UgAQN(B)УEvB5]i'3+c=OucۙP-VHM'kH]Î1r6AeU֬՘EaR`e([^/_|AFOWDl #~ڛD$4rOʓ \H4aY @7''MfCHZ5rgҽz| ~ c@?I6ddQPWQTXϽw,Nq;'X\pKx e~|yp_F֡z Ȣػ'@d]ij bkI#R밑wMPvxqi1\?'v9jN3nƗ A܁kѧ&R+=q<5W"mg1Lb/nd!C v/Xt9 Ki{ۏ ^PK]0]I(*֮) ]8RME[!3y3 +aڂƃ [7Z?WYfB3!B`Y,#":H+-~6 ADbr}K۾=zhqڮ~|dAG!F 3EEO9aonNnLo! ]c&FmиiS 0]sJRx^$Gx⣕ d(6=fޤf=IcspDg82 WtȲ#_p~Mpi`*QMǍ/[~44,!BWpn,*2ki!WS-A'/a.do%Kx?+A' -6׫< hx \<[)@e[@kS:ک[C@5/oH>SҺ&\j)an3KsmZnRiQ9k0n*nE'+k[" ИlUm!Z9WD*f@%XfVӌ|`w 5-yd*`pJgt]G&>[v?]!%z%,WP_;Q51y@WP2~^JcُUbct _u{)nLI1X3:N?2,*r]=1w^!RKyXA|Q(aуf^^ŭ*fgN@t}nZs5EeZ2ZG!`ؖk7{]K+n"3uن&#VgM ]vfvG}tp 2DYh;ON m]>z[=+ aQA#0X#/zG3{kA,:Uj7Ab  4* s.,?5dNsEC]^zT-0 uA:iM06Yr`&A52tr Rʞ-)LcITàHkLɢR6n.җe1~%]؇YD Q$4f[)Xq:EocȧL)@E`s&HR p?pJ v4vN(Օ42(;)) VW$P_c\Xt8v753Q5b\X98IW!d*"ų^XDl1suXJqԂ>endō/7'rWQgbՔu}.PނL}OZcȣ N̹4'jFCشV)r.6[8~=J5j+`/_XOV",6a8QՀxoz:TPJe[Â4kU U2'P}YZ .P˄yHTPkM6hSwAiud}r#Cz]=FZ6g_ˌ5n7˽ĴE %ǐlό(*&av~XWČKR^K.lOF 7 @6e{u/vfBa!jCnIVΡ*p4Nu.ItkG *.MNqf#9$"L{*G8wFa8  qXKNn쮇HO`؄0C1Wsm+_^RL4B0K,\͉/^f.Xe$6?`Q ;;&L2͹7E_~u{s7xJkGk'25b c'b1LeF1LJEGf5ndtSYZ/wcf-deQk '{_eHOdhdUB/}.M8#h?Eö:|&`:uws?~ab{dqOmUR'z_{tX), M^B>QEW8.u[f#1h*ɹhZS#P 5O_LK&[zsm\K~Ql1 !rn?=XpU5BMZw]3b^P,AwłO} _r-U9֠ u<J 3s"P'BY7lP7rfkT!4ZpH;s \ NKGt]o=o* hPIg:.sk͑֐ya &s9\佷!)RaХjsͩNC0[S"K43?$|"BNfd"qק18k%6_Pץ)5f9U謠l9G:#<ߡs*ȵxvX;{~lÙ`HJi͚4|Ϩ-FOvɿxxf Tk4P|6 fpaQ($xdnZ(]MMU`+SIt s!ʊ)>P!C@̨N)I!/ oMA &z8zDLzE/3}d_Ef,Պh54ꈍ,Bm9??pw *hl6m=i'ͳ|s|2k0 J`\;epT,OuY R #1hLoYr_eOJB2H74>s R USO`JDt/~N rc*pZ3org j˂o$yr3?cٔtnwGX7?- Yu(0ArUԁ6o#Za;3_o6 TopkqW(lR403{}lJu)Ls瓧=F"ԑ2c,,_ yq/Tg@u[&.ii< }ȡu)aJÚ9/c66syH٩O* W]>d>48 qM+hv 3NmZaCKM=J"}J kd]hG~92K)>==&{JbT(  ;:NO>RvyahDy vV8OtX M$"{ܱoKI+bĝ!u% o*o6[lGhV7ī%$Z'F<Gyc ,OiP"i d@|֎ \D|AOQ_eG, "9ťϠ*ӟBGpǁ|D&P:"]4Asdw cG!֪5\:i(rc?|% /fIC`҇]|ZJ #p0TZI>t?VZ "QbzZ'!vW$H n 6 Lv`Z84u'+v1hh1=5/1 zTAve >SdUT%];l+ۗpOBEF]'5*3lʓٔOBm/)&iO/nXffx(G"LkVXaʡ}l9@0r#9K/??ȝ=Urnd vj4W cO:Y^܉ ^UMEd.`6#c :Z'LwYoэ~ot$4'#=y^A1>AmvS/c5& q7X9^)壁Wa  1:s po0ņg9 ë,sEB9({O`8xN2j?Z&r^< w:XJl>3rH0Cj;{ 2Lǥ-ΰI8v6m%u kX0'ETKR_+ܙ/^_s+g/uK;ũ]p^Q` F:A&X6\BZy; g뢌1+e<`jh@gU3SJUw^5\iZ+u,UQլ%p!+э݈bB8)ѴW>'w#% g!)X̥TL@8z:RYd_VJ%R>%& E`b_G2z2݄&+2r`Q09VeSW ~~@JޛkP{zxx}[#EvТuSmDG2z!JqȬ?@De{ۓ͔PyCSHtzN0ы4F% k"G1&Mcv)IVd@~¢Yw3sTY|YCB3;By6nOck # VB_e$"wej#}dU'y΍Xs6l-eN?Ȩ$үN#t CGj]%C}ܫCg"m"B} >s:e!dyΌ;7(2_ż/U* >w2Cn4̬l7&9j-+rn \F?;=y9}>`w[8AC/[5ldGց!Y:aVn3 *u`m=Q 5W3heT3 45L.#D)E70K-Q\fz{sXUJ;8wH^u٦0 a zP𗨗U5#)crnwvK}՝_AysV f2=|3$$Eq(aty%xq^EG.LF+?}iuz]{ 5BC1Ǽ,LIFZ,irY tZĉW9@W&-v-Ah~kݲ+ Gb6'\"yH.'d}"Q0z@8^p̣vv\C%hERqK~.`̾Q槡YEQq@3#"N|+G 64 :;廋B`w7rIX~F4t֔G0| $Ju6=?AUl@<8 3Fz(}B`8u%@x.eVYY C+ |9dn=*;d{5FS8"MQݳ%n{B3λZ8,?t<0%TzeO/wѤ ziNxuiR֜L'{? Qٕ-ٯ^o\?[uaxMâ{ue,q #[iÍR!{7$2 3،1ruI2N& N8kX(|igq̷//{{Ѥu Wƍ_(f@5ˁB {ׂD!<J Nlu-7MmW]d;rz7#gE1Ժ7n{#"cOpPN̔\uNdWRFc5l<;vt|'a͑?UVp-<&HLN1ȞҫDql3|ϤɌfXy{s]6|b$B(C9r:%{ jF= xݬp;OK%}9iYHU4U]: 5-h=G'0&oJ7j |}ؿ_D|@[hJ0[Hx>(> 3_n>ӾX:43w>Ʀrz}:8C60qG>%|HGraS+K҇m#~2QC][sro Ksk!Bk翕NnԶfJb0BVRnm97kov@/sd^cZ2ye)4HGVYY~:RLy +Se.IqDR{-T} ?gK8 (01 ƺq/,FblJn'z;kozuݢ ohǑ$/ʽbiAK4qڌpR o$ߺr9sߴI3)w&s&.%!M3c&gC7H5̕ye^rEB@EKPJ?#%niREJ`̅m$ SA6`H_+̐ h R+?^~x` ya2[r|LC 440O|UNQ(GG)t4w57 w3yQv+m1W]M+/h_Ou{^@E{rwV| Y.%ބGrQ.|$qk_x8ӥ#SfyA#"[g x8㸚RF o=簕n-CJ1N8VOYqn~W}Mȯ~# p!M59eAorV^q$EmVyؚFn]3y-C56阺M˵'+uMvDk} .@bX.5ӧ Ĩl+.ur6ڽM;P\Sժݓa0V + lƥv ˇ$SC1f[~3(1pOG̍45!B0*jۉғ2i"ϱNۉڢOfⷄ 5E1AԡRxeDZ"Z|d1R/p nef09@ NB/ݶLr+'t U\q:Iv7^\qT29!]1]8/g1?-qδMBl/*zNZ+C]M[!5ej #1Ϩ?K3ڸT}qb\xDMBP%;k54=\J|P;۽hd|UL`!ņC~KX&u&>in**\} c7T?FgL||Ÿ(>GYj[DSs AO9޴}{XlDm-3Chcz'm[Uӭ=T{'m YbA( @X6mp\1ߥCȦ;Z,hÓP * Q`f Ms`^ϰjQ,:mpQGǧ[jO5.F `t7^Gv֪{5:wFz΂Us!`TTGS WC~b7M]~#)2"Lw-f*#)cU&<@+%e"X;m.Mid\% *VJ% _͏-#1{z> ,[=ܶ9l r(C+޿,Y <9e;ywYh$ y.wiW][|Er 2|$Jbnǟ`]SK% C ȼ;aU(tnbVwQ|= vDbɯ1OgNC|U8HĬtTFtP8Ew]^*+Qk.t'"3.98=M*6fA_RKs A6t?`c6`j e.=sѼeU/_ݪZuU+m"gBd"F^eH9r@pk<:po+jZw٠6= f: G^-S[k'_ڗ,$%B!h"G0&{QIQC o+}myI݂sFz9TAQxxagY8osL:9hBm҈f&ECZR&'Ѐ % qJ,g;O`yd10N .4Yog蒟(UūȈץ DAL3i1 5ڊ@|d  >PVl OK*3d'C䣍F敲*Yw-,QyOЬF^G1@F:ѹwV޴DF._w}h_uBE42 t$uh;{0Mag^]N\[|b%5ah`yXxB&ٽeVW'#[mUaS,cV1la'ًVrmyKX]l7VfP}L6RHB44Yc(jTM:3g,~Dnk{F%5.Fޜ{;yL+R=g!^ˇ=,$]t}pBX+e[1Js)i*Ct7#;ߜ`Wou^O0[|<-HC 3tzvPl5XS g࣌6e!Dįdi{ko+h!״Q!aFM]H XMw+MYdU\>5Gr(y!\j z|FSKA6YĪD:sAz}rQ'2KCͭ/p`/uছL|Y.Ju,M)F [VSY9xlgj8'J6$ҳLpXWa fE3]x R³7.s-VCD/~M9zĸV{ԣr!vcYN_ T <#fn>Y֡ lfvQ_>(yNOs}{3 ]I d? -tF165)Mx1Nl <3RGa(s Y|/abFMiVy(WWӡm@{%Uplbe4[-~H$Gݜ \|So@LolC% B S)s(m[;@s>hڤ>ڠs;)6f mGU?-+ ')t5gpdf#~ ')gRG*c!\~?5>Q Wr j*S* Fʨ";'*% rzOs ؔ1z> fgU4hKxD *K+s"㾨q>(_ޓ~ ~.*&Ww.4mf.dV~$Ps-J`VͫCk8XⒸ'0)댦Wll7MhUkVr_ag>Ȁ؟w=QKdr,UEl!婧zXiϵ|9Y1ıQ6BFN}N"ljpxj{(^o D_ٿm#%̝yݧfF/..gE[bUoX$!~^lFyK%Q`EH,<‰M fFԢHx'=`"(ӳWR_MAϮ@&.y-2*e9/$dWbci Vf&LM 4dP$[dvMo7,{2Άdk7ӡi~#QVp84߁Df,b 6bvuVP{3m 8 PmX^33 uڊU.1ԇU=TCEesPJ:* ¯#QnǠ*hu*F&VQAK.VN~+3yJ QRC"*n^N0( _[YȦ<)\9("R3(|뛴_ |6 2Կ*!rT9E֤{n@V5C`_ 4HfYVEUbׅۉOW @-H]65;Qr9K~7c=WFN:6 v/׈xW1_;.ԧ=0\eU> m|Q0/-r;"g|؟ v7] \s/](G%. ϊ1ߦ<8u2ot<% I:L .5d=`Q(J} }bfuﵓI|fSﱣ?8H{,W`;ŢԩE%”X6a8Nb WBL]V "w"U3Ϳ27Q@;殠eit>9&V|ᭅg|QH*r,h0/H|ȣqZLS bVo6n?Y Sf~:I,mtg8މF_2UVK @Atsz vjnHVq b[lOLpbJ7[Ԭ#Kd*lH^aVo8OǠ[CwQ5i8s^SKZ=P"wu =n7ǡ*yM։8GCc8c,%% sߟ"z&/ݞ$VH"7&D>k\L9ӈ Y$4[؜d/z{SPje%cx'_wס_! _D$glON%2ȱ(&s>WomYy&eWIyd׉?q }Su., "l"x}FԾv<6fD;{ ӨN}ײ='FX*=^`(m LxERPƭsK'$O4>ԗ"u`#Bq2Uzz" SYWr §ۅv~R2%ˡΫ5iȻtDӏ$ȭ!"Ȝ3I- c{4pln~_B H"A w=%(P &. C'0/[`yo$ac\I '_z)]ĸ↥ɑv)^-&BWBd7YLyf{"yTl4j/m m(h 4pEg±O>TlN:]#}FKs8B Cԛ`^m'#,9Jrr41tp}*ޢ2SDt06v$beB)QL__QLb 18DSCn:ݭtowՀ5G֡?O9S(#'h0AÌXoL44)R އ|]CFuM;pg*rI%E~Z(f"$y-DuXaO\Sya|Ԗ~+$IG:DrY`]'z?NcT.:'=K#u[bVb.m\=" re0A Wʗ޲GQ;t>1 ŝ^lNmD 5fxgXf>q0Gfi]N*4{OTqav(>ʼ(8{}(MGG:|Pcoknhq3_d}X+{^[MFm'"OP^1*9vsǫ9"kj$Tn6:ȀԞJdCJ+~;|ȣt|9B\$acA֖/VMSZȕ!O+slgWqZ|NvMX,r[:^@S>(Ƽh:,frǟ0 [8j0ej@L3͖uPW^|h.AG.>0u1(+HHx9*IqT~߾r]rFmY7FbGo\.ۇ# 28/gsͳur&(ģ"k;+A:U>J8P|UK. n_z5M?l:4ӼK e3дp8E3ixcpfo귧Z_estn0Z9%7~:n&:XYIkd;Ȇ:LIA/(0",?ÆТ:H-zߞP7iGu}Eɡܑ麴_H+gO3C5\DBӨ8P̑>WcyiJjiΓ\]tqHW-It'2wmpkT/x8Q[klR6!Yr gtJFt ֿ ݵ-!Tk/s W:oMrxߌ"vuq{}4>sj10l$?[wCnPx6FkJDTW="#AbGa'W{n8[P#á㇅\ LqXkE#ȫla{:r^itWRkw @ow9$ E_"WRDpSq6k 5|;wD%~*F6DbԲ~F$8Nk(y,$J6H^Kφ(쒲S+XB '^>MYßQ!kq^C=!G]LL?]gqM8<. - 2Rp?>}`% (Vs񭆺 16+8zfW΃v52%zAW |\[ևcgM,G'Wp9m&1T*i8q|JӺҺM}*[.CBR*)f;qԩf(OX+Pbrfe=+5}x~ђa4vna1/`Fj#ܧ0(6OaL~S @&E)Kk aHE>,dFiIz|6I@j!L{=W1 Ng g7 i_D|, 6hlpFs pJRtg^/`#d12l*ǘ%7ל\]O:wcV [V *CP6`#5nEiWtj,gU};=ֶï,R1Nwj~sWj բl=p-Te^44{^&7a!*Uَ(JRPen we9_{3iAY7C.A[BvyPS-9,y뗽73O/Nh_*[R,vr9h̗l9'v qfdJþu!k 2x<5ߝ}#"W^IeU9lU/DTzKʡ[:D\ _ bʡlctXbpx8 p?Pw4bn T} 1IU?R7BQ5сȤ :FLu0v.`NҊi8!e= 狶h[#"نqxnZVaN_W}4ًvUR%Bs';=);leJb3mkKH 6s9 Fb#z6t46 ?Peɡn%R8cPƄ7dl#=_DzgoytM@zNk8|F3¥Js}σ24~#'* 3F̓eIʾE4hXF[Tg9˫OE#1 ư#e7=HZh7v₟w- x5&1yg˥TY`/!(XBM?2P3e3hIU=V%d0,gFÖyn Qlx\p 9!dyAr=`7=, Y1 Hq⨺>Bُl sd'RWW^7ǯ޷_L\]HZo1|16S&TYd*nh3BMlTT<Zf)?hS^>` DݛŚU'y=E*%J"p^Ƌ6~}v5R")6oFiZH=OZnhx]0G۟{my&`ZK3fũ-Do(8/19d ΀ oyx#t`Ϋq;y];݋jcaQsrt iS}3ofnYx9MGopw](#e~+Ae/SsXE#ӄ*_j[e0zaI\N>[M_I5k,:hT5 r6vyc}yHZya[R߻P;x۴ U`*3 .6u"X0|"/Yi'G&Mb5;:$s-;U+|}"*sAmYD[0Hs}[ۿ B;&-{_Ic?qbV8 5sS^[INbtL˹Ry-/\O*zPwV`%ϋaH2u\v'A.ɫ9ԝ}f:zc74ŨwRD>!,vhf̡Ғ1e>mo [td@U1Ƽ\ӕE?rDwPq ;ڔpJAe1D䓂sg.ws)tv!I y|)Kլ)e`cV$[ѧjUJm T 61N^7nh-w$&UMQNzJ-o5ވ.NptP6zfn`$GœbƽR}YcaU~9%u6OAV>YyծmqGJ=y`:E8nA֎ǁ!!KE=@aNC S34f;6gwgzt9>l{J(xA)j~:sZѬ 6p t B^L!<SMz`R Gȶm}\c%B )E52uڄ>d,f;i+0১;ְ3vZ +~-9Q|e[˞%`ng;a.xhހ\+*3U~f75aaEAr׃ׯ'*Ii^\1#"h59ֳZ!>~*>a\ mnuć1Z1'"Up-$}VGT[떐jI9F9-6" qbLZDe2? o[}ƒ2phXw'o"u\5qHFx!D9u@)xQb}bqh[3A4c$;SK6L"EfF}:2#ПVDO3>%Hc Znf zέG|7LHT0kҥr8!BʎµvU0 ~\m1MK8+jO -EeA%[6) SM#$X̀^nV;AKSH8Ζ$B]2Rd\W[&+ZP?W$ u)k{J~i<1/wT&h48@|6F%,ܽ%ԔAPx]AWf1Ыhc]WƩ:z`rջHߖwZBxEj2?0~Gy=͞x9lF7}UĻz9=*g`-\42԰b<}aa{=A ;hjX#hPd*{DŽGJS;oċ1_Š t lM^WͱТ7Ĩۉcg ".+bcjtu$,Q7Q3-D]ẎFc\)Àб'66r=͍[b uщ ;Uboh(V;ا+E!g+ .ik~0ZI R_.*Ud#YOI{-Wvq@Q/k.g/&$؎]b`@ԛHٕ.51d@=@xcr?6d*҇@٩ʘe(㶎{$wPV樕cPrU̪.fb )=?ηF鑹s髾bS8&YN -~fiB_k F健aEhɌJ=Ghp,.kIqSeÚ͉` uLJR^>z9w߳>XlL?s9>%f.0DM[uL>|b9@-^.7q5ȉqzy怫qˍifh[{kH]zy ]"*: WZRwD˕^S>W#jڌ /.xu#$9(z>EF!Y#V=]_ea<_kOruTɡFbb<b>[c;!nNpxD}\]j2L3p`ww_O[Ӷ`4^--o'Ͽ*\3c3JB.?E0kռuBow^?aQwypJmG[wl]OX:#4#l_^D-xw ;c V(U-zܼ-HS*baٞ,3HGvvR4!X8Qv_ _RBw>k=pmQ ]2rc+ք>h12UN*{OFUG0}.'w }7-@efF`7x=T{Yp|eGf|H& SN=qqX#s0w5,c Iݜ5Bb#tmgwzL_,fe׃wm]VUUcS(ki9+A$C[慸 )>mŦf"]Q&{ q*~_9.|/# >wB?"Ē,YW(~RnE]Ւ; V'- ;Nҩ>,< o|IAڨq@GOR)DW+;8G"\{OJKxkB!R¢#"H}PoBX KQڅr<׵zm%V.>5 0"3e.Q }p8$FDl%8 EHZq(˪k F:~ 1m[Pz2`k/IaVVNv}&6dt:U1+a>Sq 5Կ -ށ̵JmByH#.PePT4.MvLϝR![A7Cݾ8K~ᚠ &4bᬐAJ.BZo/Oa!hvɉ;.,̾ Np3x9R:"ұ2C.iM;y+rIsNc̊;leq”qn`嶲G5`_&uX5]"o1'1N)R)ޞID=Bg_.Ts1*+\hH)*{ t/2K7JVO[Eً٥K^"z"yoIE0h|WY5&T|1A&L_vi0%b66gK{6-A6s_tu K/{u J1yFӪCg,?/AWK˹$E̮$vRXUObl X)]L# []x[KWpn[)Rf ZNE ?9idDC4mD 4!x`!~ jXN'Z>};w0m1j\Ȅ=b,69Wj0.cA@֚ Z`GAȺi ݇?% ~fnyD5[0E#: Ԧb{xN }$.aH5#ܸzMӤO{Zuz00c1DYTIA).40vPej:c.X~-}|O(74U P8/ެܘ]4S5၂hӤd~v!Qx""e(eyaX<^J4p=w{>TԀm@Pdia?>cud_I g2wEoxsu<ڙ:o@kMATI~`1z[gz3u`0"r$ew߰)VF-?68/.L ms)"=lEH:ֺ [%. e?]H#uעhPzՍWLkb-{u,K{ۉѝ MAyj3[ش(;cG`]FCƮ\O/ 8nA{քWiHh9)\Peꗿ2J/hIP#4VxtRk:cpaL1kG5Izk1IG*k{%ԍaA2f8M'%ԎďaQSKM3elGZ-J*"1 b U.$nNI gш/n< ఻E5Is?(_b_gIxSDt4bz 7ۨNmwGh-k[ZY~uۓ߻پL i cVPzs/-@ľ -/6YHWt;K? Th y]٥:N,r=&!C3Uy.MP0(~e 9w~>vi>YȽ͉ +>ma7E3=Ԁ8ViF-tD tO;bRC ^ F =T5T K"0ZPF2 7wϪȴ1H;5dLg,0 m 멮k-} 2愔0WVXgTL;Km$~uT i|EΩV5@y`f#ro*9'BX, ֔)>RaaUhn67haeH5"q6 rU}$;Mlg`)u 1[V jwf`̶H-Lj'BqfF8Xw@W 6VbMVU͹G,tnוIO}^J5&\@ ?Ÿk_`s {\S4$L6*jk늉Jtޔ5U}j3V ꝙ53Wl}'j, !g!Wnd3",d2z_{uRt%SZ>+/-R; ҾXD{E6m,7\iF6'It$  T*5kܟU8œ{0ub'L4="dMmL@szgYDGuC۸ʯ_"> ܁T;ZpZT̙I{(D>ЭҒ0m6DM?)דs&f&sJ)F^M@Wf1:r+@OฺvC tt+e*Zc=ի؎5GP Zc* [{tQ4A

fYׁ- FA?JMe5i8L*'IFq4PE>jB9(RfXz5ΙP :x/膽פ {-03Y!=_nDv:J)]-K֎yvUB6副:I9ybaEcD-Յ8GK&dd8@ u9sХR$^x4z^ }P*GuEC0gWY\b|᷂3ǫ[ ;n35k1Ci8wM0?\yR95+&缈'@w=Q& 9uqJk,Wg@%p3^r|qO/dt`i'fe'lJwG3L{RU#[;-||BX)9V-޿_Ma {O0us̫?|ȟ >sr?%?#aˁ:\>0LO!\*Ͻ"7m۪ߏȿ0׃q* I(.EE"*<=?";);$V_57xp#T^;$1F,1t>p-ĸЖ>r\!cUKH9A_v˸l,.+RaHvn8RAkHgQp"Y:S<8`Go,1pΗ0:jJii pd+扞T֪ҙZ ,ʘw}$UXB- l|Cl-t~mۏA,>X}_=4yjZ[-7X^_ok!9r?O@{dwqLFppqڦCDZLir&br=E]s5K{ sO5uA7t۸(~H'G/T"ab1;֟TKMo0EZe'U![KY>:xY'|Nъe; mMȞ:R!>LXyǓ BC )#N':c=Rབྷ&(t ci\h^WTn/CNmsU61D~;eFP#wb\(?)A5!!-R$~rXǤymت){KLR;0di}ud^(>A LZɪ@{IWVi5xJtyP,iꐣI hN;WYRjkLUbB>ěCؽuTSr䘴'4q@, +?4ןl{_lNFB i;`,,uU\{~RX [Z1^'e¯V*wlGs:ϣ Ӓ}l7&%f=#(?Z[>lc9/r٨B~Y:?EKW 6bW<_$y{h. ӰK1/4R^@ M<&Y:-B lSpy~ўl"cA2| +hrC,: dBy\0~e([:֭9GcE@5* ƶ#ѠbTP ka^؍{J_(P'E=w6t4c'G)cueo!i+PDV%&vHuq]?r7?p* Dʛ-wDځURT ls Nd-v f3mM"gbѿ 9QEmnㅤˊ|DXN > "6q/#wkSҶul+f6tP5ī^{ދ ~J\xn<';k+(,޸@򷠣:D3c?\zUpB-vMRofIJ5e"ƴPx隧Eڄ:ܡV<$߸Uj08Z݇1<' [-DjB~5UƼ]w@,(g;6ie ގ7ɩ> P%~^V'=C=1 )n<31yOۤfPwaczPW5ŚtpZ8&=zX ͫa̠.w1ی#xLAƊT3HZwYF%~ܓ1HϠB%F1F3G5 81,J#Aj:Y)ROq`p!y&pJ8[% 2œd'Q`_ ^w&+8}@ca9_HwW1 ge}8̹I D=!DXw4)!VQNwIp pF:X _ XZG!!j_ {U,'TvK07CRGH\@Շ5pb dlrYezJs7:x@U7fs_"MUYNj^-)yP.F$`qI̎&A~6v,E%[ΰJ0J}iPEFZux^@Q8d]n n%Y۪n=7Hd}$Lu;U]dZ*?Ň{ȡuXo<[ P>JʙfQ8Zby--sCRK'h_<&+XUZ?t~E\k⬌UjO]ZJ4|@(Pt`7V.gS}RcS@¬˓3=JkP;3PٱEe?/C ֑|{ڄ?iYzx>w9;+GJ?ٚ](ىlϬO&D'z[ e#V%㙒b`:?˭BJAN_Z3z%iKzT`ʼЊ BKEG&Í9?1 Is=mbE+Rک}Ulܵyl`c{~+/-qtyP'Lݨ()Z 0C#v&{ι#^ש=f,^wՌS-B0崰Mz Yel4R[dAh`͗Z$SWm8ooEWw$[ERbK|]@Ty$C|Ʉz©DSљi~fZ>+mTE4U1t# d8Qy~`0 ]%~^ڴM)N_J.Z0cv:b}c㥂3 D8Db:}w2&]=!V㫐k A.CbF*c|5t*oOC@;(94Ot `0/'g\X;ni`ljqQLv_|"}S?VrZdڳ]B'4_!>s!dr8 ꤶ}GĬK,yrBв/)ǎ׎jr'ͬ8-soHG>>ݗQ &fvV?+* Ru| f(*gskDL߲ׄ#e<.޴'q 4V{Vd ^c_!Q ;쵂Pq- s ֦3MYl{yUDi?8@';-kof@Y72r SP9+Eh+DMضP$B?%.0̘5/C85SVmKpy"UNҵb-ep;nE8v"N|]vWMwN/\`*$dl؟; O(<BuQ Z轲2wQ⃎ce| 6ur^%%se֐&gpuI}H@1Gd '!Ǣ1CCfO3.tѿq4RA%uNS*u:ғx@mǦ*Qڠ%8vQ-FTfnpQX$@ p!|,X_h|ugbu@W"o jόQ%.pl.u4hjeh .):pD-ˆ1tީJgMP8 Ya?!16OO෤-O80#qrcv!zs٨oնHno=4k '0F3suOPRR gi~J%E=7t<ڂ!iԷa|QN&D ڷ7퉃t_~,QEBz$eLy$Xbrccgz;[@Ɵe(C4DWam# T-  @P J\QPtwX]N&`0HH穓Ȳ*hkB_n[&KάVߪKn}oHL=<,vm.,,W3ް`A/$'+=x05y gD)xzcXfN΋-Kg|Q.xN<>_*bhh] H+$ix@}$p#0IyjXT;dCe^j1FEZ+WLW{Z1=n}dӞSc;UDQș?jb)d= Y3PGhF1^x?q[1%w(?Qr &b#t'ea^&.ia|z=|XKp;s>m?|# #^!a9P"'9 QWhyfnWpVY9sd>(kz-TjpJٛ[rA.n*zR]+Oc ihA~8f~h%~PټՍpd޺<1d$aDŽDA؂FSv%Ȝ5 2WN;C6(ߴR/靪_n2[)<'ʠi`Q P5ii,c` ȄW L_dAfiш3)z%y.ƪ\`_B:C6|3>lfI}j/Ϣ0n@uoVfE`e9*@[3?LoZ-R~Cu8 68z3FqBX\cڪe {φ3 !bв(5SDa~%J5.$ޟOoaC=qr^loZWuxzw ﰁ@P օEyAh!5EM@̎h}$b3_`]lq s "z;R/8IˎHC=B;40k.f5_I捖U)8|2Dn Ⳳ*_ V(U!m^i*B$Afݝw9j%EHy%5`E@d ŋ> +[8a-dq {|h=Նe1RA4 KJg!ϊbQCaFΪ 9hF#tʝ Dջ5:0,qFCP}LQSh8^͝ikge;a/IDK/BwgDOk9ED1蟎 o%rx0_oOEo=PyVŢ,[ElsNBZH㨧m%obWh?ag>TRquX|ՔNQαլJSh]badV?%̌揀,vvc p eN\jb}Q>6pQ]-q~(,C!V u) oZzRP~<ֆ[pE^IPoxהHuDBʷg ~1h{C+:eD=e`C7!%%oze27>Ψ9`1#Wp|π7y>E}`*#?YqGB%=:!J2-v.#U7 &.e~MV얷(,x 1vs}0k DjQGv1Cc2'|"6"!#w \e4% L8R/!T3-h bf.P`B‹Sy\6_?t؀*+{ g!('=)}5,_;+ݶZiT2IҴjܛV)cRMq$u؍2DbVb[ eC~ `# 3I}biU~GҷmTXF8U bf.1F\AJK~ko`ɮY.7S'KՏ] 8d,6 Tt*wq0znaD}Mo/ <{" ;k\8eϷn>,55~%:fFڈ4c 2@RW"wV3= ,7Ɲ|*w`p7-$P%Nl%YFHʤ)O=tƭNzq ~K "$#s;p:n#n#&] 哊ħ6Io+L>Yw01s1t}hÔ6IE1qy6D8b^ :V|2NbP|c5 d)qCc芥X/+2v vm~(3,IO/?&?(mv@Z36l&#D*G'ˈn7GUN'IV(AtUWOvyXT4ӥi>\:{E C,7np+%%%٪)z{Zr9: >ԃBLKP}#Ҧ̍;vu knTW95LVnI|f@~"@N8c}}|V^A(c*~Dq$kތMSBrZCOǐ# >'RY=_LQuj#= Cq $N\'g8r$dw2%v˶^Л/ 1@:7Ngem>93o;#ftr,!)hE3!ꆠi.YFJW$xVFdҪܸqsV7,vx=8T="x3Y,%p]N8o㎐;ﻙM<v!Pi;F7'7\]e XGwdͼ_p\\l9@1I&|lmvHZtqk `I"\4֕֨#{##Z|u,~,1\bh#;#l\HArYJ1LOZڟ< 6J.YR 9#LyBF̂VX'" Hcx+6l%Nh`=vCvq6}3AhR HmO*k&nd] #pb\ ̜i1 ˧\. j X_ (PrZ/G:t0fk/v+Jύ<[[Jc/thf'^+),OKzipEǘWoO㵁U֫S;;]+;hV?m+g0ҌnH*__OA?u>FJ_z/ $91&s+wɣ{l8,DB::ckǩtS޵dW\@VDtAc_y3?؏9_1Ʉ1wZ}rTgbr1-^[|>xٔ%~d._1ʆf^-կ]+^BzMwݛN45c ]{%(J b7AF">B(i'rK); G['/ leU&28b-b;-sj`᯼ ϻ,HeZB@N8<-ưL+R>S9_᳂`H'XDToLw:Dw/`v HGƷ@#0 LTUkyR_Ѷì/pKv9(6ɅYoݤt^|wJ>F7GXZ ar7{U2Ji:Xc͔oVы'fgW存d'EmHKd"r} b^bԛBZHUe- 8273n v7^@%X`V=yT6Z̙zyN~?h%ꄱe4s[g~ 3̰3DB^=/fV7.`\_QB/#zкGd$)ب 0q}>sr"zQ;m6xLC$2nRPjayCBZNFi qpEsnC7Cânڭ%bSI3Gsޑ9M0~hl%&ސDarf1KU}tgp{M{N7: B :`b[:͒zW3SϱPPo O3b[7zqXes"L!wݲ)6u-U\)#+'kPP.Z4lrU hRrGu#`UPؕB8֏B}&6Z!B)T;_i\(c(.!ߊr/z;J;e1tC|U ]jmGV_Y{8hެ]̧( wE'"TQ A ' <9 u}`=huGZj.qp9tʔCws{ i1\?7QUHC/S5) ۠WWPКuUnU+. }2hFCDXAlo02pYR'&R%0%ftg+G9E1*D}5 !aȳ}m"FK]WPm<36 (:dd KϢ&dEj.cUNgTsE${1 Web<;#:Rh@U@: 5̮_$Vm AcWK Ұ\uЎ,X%NKA $~S ؂F8IW4س<[wҵ\<[e.*Hܘəgi~6^}iȫrЪ99珞6k rnT-) 㞘 4Hj0sZU;ש`,jTSV!nf]9DfKvPupC:l: CP^DXji Ѕ/Vw䈺s iN=򝌥u |;.33C52f]NAF1>K߻O쐌펈:53g/Ғ|mװGY"dJf69+U*⇻z`oSuZeh:$6UPV=r*OPkbr:..]~޳#ռ1mMmQ jm]'V_3u]/U I0|VX>YOhO/xɰ\Xԯ,#WF@,#|DTc/ȏpt^ -^!岤uM2؝MGuLА*X>b;YA E4G0ȇgrL{jknh`N6c31&e*e/y%ynU c #p > V%vIeveZO5\ `15 c{G&٧JNQ=d)'jӗ0r*֦7Ηa,TeBwjdXj j-zh,Ա~A]̩/XzzEi̙kO^9'S-ʪoVl?|;"-oSBɑ 7}eC-W+}vrq5Z;Q9E .MriS2B.⍎JB!]:O t2YV♉5xQ$}t8ߌU|=vJDذLo?E$l72Jɱa7u\ @~KPbOj 1> ^#O -cZ@R`6Ap=b2 fO-2H4i/hūsUHQ#HtOC'^խg.[}w&{Wcy9P>(,6m!+Zc{L&9l@It>{:KiL@O9<0%[%] v"߬}Xx:FkՃ||*P֋a_H=ÿ!KܘR,Y+GN+:C0V9)4ԨAɛX8.c1tj=61ڭ:ɶ> "enϚ>(<骲 t5_]ô-bG]:m{%~Vަ5Cs=/U@ʒrSc稖, ix1~q# 3Aƨ /ѢtǤ{K'3 T26nDt0#tAP)vXǡQsfM@XCJX~`>;*0: QU.3h"ym!"3ڔQgDQPz"IM*:&|EޢfdkUZBkV5<[>5k*[KM1\NOOSxq1QP=$H'4r6ժ<*Xb9 6jH%^[^rrF nYGj]u$,i{MEZK]^'ǿ:ŲcovmVɠje"ɢ&[# RKlA z~k ~].`|o<2#_ՆէF]Xq<旸=txX}:viqqs?l{t9ر3s5Z•jg{\k}/Mžj WK8yή^aR`(d8+qSǸ<\SܝIzgqCц7GbnSwTKf:P%0ˋ7MJ/LDc@$-n@=syal=gjөZ߷x(&29 KDGHGQI}cApwfZ9nk-A /XO^(ExP=T|ڊ+p'ᚶWbb6-V s -rr]jy.uY`_B6ͱж3?33ݰhѼ3lb+qu D ?=S&u7`fHjU .5|HQGƖqC +m$MϳqHn5UuUn)4Myŭkǖd 8uRY"vx;%ɉ0zצkLU*ZL.nE,g:.B:ͿgDdpCa~uX}7r8q?=u3.eoǸ^xIWnSDIQ ,"6fAxDv[P8,6j40=,0Zz:xĺJ2Fvx}^a$2:OTu}3EvK_R+oDS32uj '+̈́/'!򼒘:;oMwP@ D<7%]0WK`k)TaF_@Roi!3-pWbmBu!,` !]]0"n<8bXՖ1I'>sf6yfɞ#|{|; (f.b|P:Ȱt=K$Fdr>xU~Ö[(ۅA_N~6&P=kф p%mw&s784B1й XI7j;7%5tɢO :kA9XN}wXʿJh%nkblc(2K\ݓ.3RelN3j~ꚪF(&0ĞW<^w~BNRYqVo!G[wstVMĵBu՜pP |k8eSޕ MWUx9N+zl}Z@e #\7mj ENSy5y*{{-+"Ehv)ǣE3"UT@ғxtԸHQ~4 >BB &gq{)b{]ʘ—:&N`#v͌J_&2ɏLǘf4hX O2RH?B!oR$ׅDx-# yB33#{b~9h؛:~Б#69=d* m'- zKe4҆h[~CvO2AW!tRv9%%} yʮNAҞV~2!a-evYlVh948I&i:V+ D+C*Bi?4N56R"'LAU,gw8YsQ{o4/.4(^ɹL G8?^jkxWA_y% \dwV]2Lԥۃ6^CщG5IpyVҮaF l,nt 珍{S?Buh`3DZL"jbm6d賕+׭؆6K` EBk$唃t?qH갂X&Dp~)_mÌ0Kٖ.UC$CB~蝻Z?T<e grGmj^ eq/SpX^+nʾo򾵀+HP>ďPӲkkH YXŐ5sٻP0kWUHXּXt Gp4;=+olNX{ 72c镃.+TI'- D3pPm."hBTU }|K8tfRtEyb_4Cr=΋ Ĺu'tA/QP 37K0q\BǩǚSGi߲їcRS,M盧Ta&7M0o @pkBU>_k(;?`˵k-!C#׺`]*휑N!1HOVbNum5+-#]ՆұBGRr\N Xn0q TNY>ZG*MQY+wNKc{4U?2oty rBby=o6IfM k k%;XP\S%ϛx=C~;G|st۲_dksp6-&,\b?ܾ 3'k[9i3Zs|xmFeZd5UV} щX*ƺ^{ƸB+>K"`UCB_yY`-֒{yǵ)!!rSѾN"l /.tE?ms@MSA[;jziJggo}y5Y!Y]tF-P NbJ|slVk5Ҷ >wjG:Xi)GN`Uo}4&@;[%oF&KfP0JrSPu6VX'%_ 8w.v_U4 ڑēZ)>l0QrDW{3X;LEbZ;2s♅TC;!ž Aʂ'o'wA_%|0$m74pI jg7G#Hp[$PuzBQ7w%(H\HQ+#bc(P>2PVC}}AIJ'$&nx< Ӆԁ80Vn?pjaC&$kސ2\, 5URݾr0Ϝ9Soܟ(!c8FM1$!> F$^hy2';|pb\=wq<xOm QAq[Dr07`Vk[7Mˋ  ̏ǖR`V;cpXW_>XRd M;pu9 ]xJIMza'1,ǹ2.[ny|34[KzCo$ çxuK-_4Fؚ :5 +p!ՇhGdaU9h\Tdy1u=2xfm9MjkBxm\c},QÍY&H9S5"8_?`;Tq؃kG`s/{ ,NԶFlW;Ȯwi Gy]:$43Uua隩M-8cCkGhyvybgr^Ouf><<WI>3 yyAOTyPMuc& v4[ l^mZ=,=^ 6j$%fŁ4 ]$qKB>p[E-)$>5E SiEėgE\T3 &=[%:0o5+ɌdPnͨHp<,Fk#dIaV7I|~B yog}@v Az 6"<_Puϧb#F(k8 sZGu((ݟ_  @9v>$2ʃ{kV$1>.ۯY~9_?v!}( OHUcoMybӭ~9ݏ37dyĜtv,Ŋ.E7PeyЙ 9O;zsI%t';+[,ܶO o7?D 2yTu>O AZoC@] %ﱒ̒tWF̿L}D"axrrdwHPR=d\*,>;xPQPSQ, dr/J$X^,^B$ND=#ɟx@(qkTSZyL% e/rI"#)g+ɸzAf.UBhQdTW(risVMDZ8J%O@nm1}>_@,g'rL+O\޿\@woonIAr ZWiF8\&\aL'xq܇]>eb*Hb+4"?Ar(oeEo :{[&Y XdС eʟVwp_z،2+?yCFI93e$.,؀tnkv K,ϛ|j4Lڟ6iZq,܀Ფ@+a/X"X'Qt=/8vM0&䰽䟃ShKNXNaȴ#KL%*϶p@Xk_5TuXf6vܠoi<&r7=*m0^2w|bF0Xu71A9Ok RQ0[QhoAHP|9iܕ~ۥillAg[a M@ rmeT :0Y<$BR85K DLa;E  ǚ/{P=f VT R%D$1:|g,Qu22]u"53{! V |ͰմQ5A~y{Z_֝j㓛z蓄\E?t"-Lt@?EUi &.uNf+ u޴$,ݹOOPgz zrP٥.~Kp4l7'/\n8~ R|lVF (Styt+hhhFTvt#XEX+?p&3$ܤw)GZ[ 䵁2 hIkPI2G"tCŲ n6>s;wYW(&ek,^c{xtQ^!z[2@T>DDT楨8}*͋R+~&߶%ޱ'o?|z&fݎi6"O߂me/Ibn5d(]gsvˑfѕwp-}g @c{hPY37[ I^*@ O<%C>AGoC,oa3LбtyqÐ(uq]:޻ s[O'ֽbT1\%A)6Fa3Zw5m*IazӾԼ47nˋ"]WmU# F]ֲTWފR2*(UҬi^<Qw*bt[qeZ-3vKѸ&Ix'HC3ݬZt ;"*DiTL NpH3*SvdIf9x1GG6Iz<7tHMϽJ~?cޕ B;]n'xАިhVM]p9_,ܭf]xВml,fF8x̚fW(\GGXxLϽ-f_UP,J{d|^ݭ Ϩ+&an9?Ι"RM#@KMBuN D_c;dv֎ʅl6:!UyY},^2 Gۤ!N>7{a4Iy^r:(MEVk?G ;Bd{]T agڛCvm h[ZѨMԡ {Cdѝ[S@C'Ltg:w}Nq# ;]GRX+n [S=>q謌Conia[t"Dq_O1/AR@|/)X'𔶣J'AhݖNVaTQِ~m أEk-(*ieEiΊ#0k`dް[_[EI^Zf]]#aqZ&PPMhA*K|=;~`_:!W])rKG<uyeER.kmSzvx9a9PCODWUЭlI xh Jד: '0vG8G92b#RW,,qY{A)F]kRg.Ve"Y@{-'5Vvx;mtJ~>,M醏z8|DfrФO˒QuѺODT}Zk7,^ 9 g Fe7IQ wDLڢjKZpaE"%?VΡ., Ysnڐ=s9` ϫGyJRШ &lK9Z165%wCi@lh,d@Od o3=mεT <"JţdoSߓӛWfvv-~N{|"a"l!c3\yG0*hU׌i3q"9tf3+ }3 ń+;=zO?Ti̎! 妒~KkE\'9;;: ϸ' DKW幇 o&\!c>C^vq?yK!;2n@r#|{=Ylt+z]+' 7+ `O>@hYJN"oʇ}%9!7hTTu͠?&ɑ|t` ENrnfYڏ:n s@ G2VoĊ jN9=鵂"1k4%VNn},K-g!14V`~vEpTMFw ,48̑_'keʒKQgo1 - y\PuįhD/E誠kڷL X(t;ۛ85U[b?LJ] *Ra wETìpQ[iČ6U$fzD9Edgx0"(J cm0FŊTmj/$K!8r܌i JHַ^|וZRR|-d"sW#TNPG>D6 (qO0󹀲:PA8čŶ.@9+8QU մ֑M͇i5 {dSHrPLmKBhA{Ie8Jn4[I l_Ѝe-ooW^FNjJ露&y$_玞[M߱^qJxh@>6ĀL̎h%}9ce5-Hg$-GyDÍB*4v|Gz+~qcT>CQL~CjK%$n#$˰Ev=75Su0ݺSNu1}Mw|Fdܝ{Zϩw(Y?NHe'/sϗ5'J:׻#%f+~]kXRl#Up&?UfAHG x1B R @u.w>,Qwx%mK`SIiNj8n 5,FJM5#>f2K1:{NB]yP9|5LŽYzcST1 f>L*7M-7N(,AH1D`'֏V2%l 1|{A5c;7XlP3S哣? 6K_CX$_D^ JAUwL?80qIn!D/cABJSZRtikJ MwiL vK;*o Sj`pW.<иoْ'f9S$ CO!(29jvT[RIξxO% *d~#M"倦+fN DĭpmI)1DxzYxfOYͅFo!FQ[,l]~؋i Uw&AdD:3 Qy3:zk)RU yZ0sۘdt0xO( ͸*UV@.@Β+Q(Ha+R!gӧ0]&N!bR$}c%&.]l #8ے0"Үw>H)s'" OAsT g~" "MF޼*`sOQ<;%T0XjȜ˻_݌s\;D ?J4w䄲Lu5? S0}΍9E|.q7$f(_cm ,xZ?&>`Wkh Ti>&N}I렃gog\getӒ5~its}7h`2S:P6Wc{J]9x:sbЗV)Zp컴y/U Ăsr:obi.p-AD[]jGy !Bbr ڧtqV̪|`l%CUﳭ{ ;Zp3FzG\נrʮ&N%u^CURB ׶-<)X*"=h E<JҼ?Z"`€YgӝH14{6|9dxim3F u}H~mw P\%}N06X= $d6sJϷM3Q5'ZH]lnT@eaէo5ܫ,ǥyBh\- ]0% 2pX'քslE{`w2oS 58ĉVA-P p3b盏 ` i/p1sKkvן~{Dn&_RzQ Q!1?2BՈ zqSpj?Ӆ)"uc췁T,&bжv1la鴢M)DQY)FBꔴұ ڑ*gy*Qѧsdc-جvV$[\rE7밋`6;\jr#` H+,p} |0jɤWWEBdpᑷ2M)ӹֹZ^"4nzVeTj󋵏3㴌Wd\5jQ۹I8a$< RFEZW!J$q*"+d.-WcOSD01!٩U葎Οo@Ī _yI5 Ld_ǘSN#B&2:{ͤ7RnG>^ hZlHv,m [-eIn;88'RY PƩ%[¡M"KZ)B' A&3ܘH~d /NGA`nMoX1_ZEmb4p-YAf>(VlJYl3帒]KӠ7I }-N#a=\ g&E _> > b*?nInO,ԙm%1]R8|Ӧ4,:uFKv`|ےegXR l-ͥcZdw[P44O 9R#./ Rk})pO{sr *9F$Μ r (GkfF1`mrQ0Ȝu15kؠmX?-͟GA:U~Robti~&㓀^l=L"Gk!.rB3yR5 geE;'I=j >OcPQ ĺ#c~DAH2azgŕ5D g2MToPw_B4NU ) = Rxa#WylO@[/ȇ望]%2h;]a~Y,P8㼩(+OdlZwݨ&55(#₱׏i1CpiCCy,E=i ,j q #\g6GD wm]ޜ'\|wN댖r㎺z4U5Qӛ-ZϡEs]=6hr͞LHj; *f4f!rrwRDHף[DŽ`Z~^Rk@[LZLED+*x7v 6_ǰdA@nK4Z?4.Dgc70cn']<U+vPHe*ۇY_F1CFGNK"1w_wInD8^I{u۶I <#$Z&ތ+Hۼ_0hbw+n)*tq-% 8CAu]/5[7ye¨EXZN#yd1i&&W0:x@>mZ99R#尥Ž 'GWy_TfWȖ#_ԗg̺ 3Ubp =E`}.$Q` a"*I#_i=Yb K %%7OaVs?&+{V[K`Q=^Vh 2]MW!ߜ}02#N4s5>ER99_qYI1Vz촔$~ !F_J>m$$$4J3$F<Ifv@P7Qc\7Ԅid[9(6n+p૘\ vi{nHD»mQkzL$U5Uu9'_Ø8obd5Zwr~v _V\@OV=6)('[h?wrN"=ϴ'9nK%6ݨ΃^EͨX^cXvvj%0}3LЪԫ1 ZXUBn>`|rZ52'a>"5jL_=&ןPǽP mT+&pJs@d#}Tj Wl %\e69w~1+T˗64ub!GfXg(9 ePC_Xj=Kǃ3 IRWX9G![H(A"sM? v?/fǂzSu) xguaY? )Oo6wQCAvv`ieUj SV$;[-jqODp4hQ[E( m[l;$w|Șbx׻N7a0C?!c!+ /[df$/*+۪AT$]q'@ 8~ƥPQR`'^OHfS9I@9 .:[@3{HX*ݘc%Z[rw6#TlOh,h!{f: 0+gcfD؈o@!ؿVgRqZU{~ jJbu2ɉoU S,#CĽqEq ~ *",N?nqx 1r!r|`_^#/h$ 0 @2v,,L"@N;2 3sF膴EA%5vFVpCsO5X+A:% KCtLMRk|s>yP. x70~ ^a7X+]9?#"{*YEG`QH^$>S=@L%ռw m:l)f[u9)ytXs/(ġ&fg*cĽ}>jң)HrU#s! 9׌&yR%V1-MWOهXگ dI%JeKJ/c=#)$&,d׼FAV.򢣑' Õŋ̂E N<龙oA *u{hIS@ՙ_?Fs. Zu5y:Cp^H]4@ʻknfBObwjz*z7AgQ\ >$-i3;6?5@1!]yƵ|F cN"IFoar:hzY&{c~,Bk9KuzT%; tPlj,m&mBc'@C` >d%tW ky  t\OQ%A1 `tHuNd3puǫ6{1x2oC6{["VzNeH&\OarŜ@SĴ œ ΪM} _KO T6mJ;l!&TA i8Uq?(# _FkF=)k'D5`YpUضė ,b Я8T s#ߡk1iza=ki[+hcS{w`eshFt6OhD 0swY=(Ϫ"!iq>1QN+g)0 5ޚW:Pô^a(V׻ZRk:WQ6tg3鿓zwR/7Wv=gBTȍFk+jˡu,`we4#T `ِ:1Mձ).];d"G÷ȾC? &*|1?;|TɎo+Tŷ 8g ugQpʎm6"E¶)W4"ViEB 78V÷a:2 tf,`jU`@S;0z<K-yiu8pA8p0|DHɀH8ߡ21iIέjeus@6UM OH)^D" b`i rO`pl0f,!t(N^u-/ (H1 C]}BcCP1ְg P@h[ȡ[V8Zr)B+r2LbI߰/ڙR#rYBEF^Diwǝpڬrc:PH7rkQPͩ\e(1ox=["WE= lu9;׫bkD$7"-1i:ү:lki E6e>125nG%KiE¤ip;LEis舾'k_S:VOtgGV˽PHjהA* |df]RuW?\`_R<*uȗqI?#ڃ^z :yrŹ!+nMa?Hoygt*AgZ?~ '7)w.N}p0p,DZ@N9* 0U䘚j~+ui/H7k%(Z'(ui/]5fl}oٵda'0Wt DӒb_7$C;B.KӃEVn© P[2q)C$g?w*%KW B0EWF F\~eUky y~.Re|+<$ݨ(JJxZ@[gA'2J$bJ@ EIu ] :uF.F^\(o~%;`8L9Q6i9乊Qgv[0QucA4zo":2`a2!Iioa0P~*@rwcRT }E7ݦ#*sEf6PH6=*z_cSײl@gE'ق-璸u/tk*0F !3B{枸at"1˓ӱefv T$>;"l XZq%iQU7nk5E(4\NP.7HύGdnE4R)xF! }=\;{Y 2җ=3l>S Ϟ y7T6Axawg`X-E}t)OW0sa _x4s7}{`[, jP- }[ \ޫ׀X-xr @9O<{E?.{u0ap\f0hjZ3im[y}fnm"A*rbZE"0b/Fqr?܀ +D؉q:m͙Rx9=C.G nw};ɦfzݿE^6=X,:*.\т]g19sWFiӾ2 =B4N4 3wPyX4䊥5eY+~+.4GG~XGIrUe0d%-;9' ޘ)e5 q{[yW\X, f-28ၼ5+S'(#^,e| ߦGp6 DZ }O$65i쬬}gٮ6AA3v |GKmD|?%O2%,A`FCّ<*X[{§ٵ !3R(\y?&J:p2JK X"3VwhF32Lxx?Rw%1/ X2֕!YV G^P[PhAn=}&#L'a~! Єk،H/n$܁oOzO? 2>h7&KWy+C,#浞{>4Rܚ x"EWTZ#,(*qkd׾ 1 Z3{$wیɘU'o$KK~=9FCOjqoP1'dO=J?x~r/~@≴1:7ĺSAej>O9jOx%,ugz%Z2S9c<lzwٽt û3>[/#3hE ;0Ih&;c'06?s>Բn>kQkո Şl݄o ,4iW ѩ'}Ont鯨r ޟ`Be |'??qG2&z.<+ﻅ:$ʗZJyl ý X = JykU=1}^F2Zv eMIǑm^)] ji+RO @8%V;E:ֻj~az6̰/E)(Hd;ȿ|jiޘZ~E0]Z 亅/G!~3g88Ir|hF!9\iԎ=7оHQ@LXNf.dlus)v@-GEi⬨Gaız[ί(6S el!IYe>[ӐW4]jPo蚼(F錨S;65E?;Fj-rl ^|u٣Md :Tj: IMhQW1$m lbjT~J>B$B&TItZ-"H)54fTz~P z`@5&D SpC[YG1ňFJ<KADIz-g,wzFwFoz @ 따/(sW5dW)U{@QԻh^yJش p\Uj\5Uƒ%!,&wÖ-hG-%*`wwÒ asq%H2P>C8E`sIΑbl1J.y@S:p{aoF\* R8۬>S>5T{R;W,C%ۛcTtyq9J')Pz`XC< @G94A OL7n%)L w%fk M6 soփkJ|Jb u9.= Z9qSVTm|Jܟ0B3Co O+[$ʉ*:'~IkUjCN63KK`!4/|{-XLm0=3IȘW2cTNea%jX۞"ABuʢ@#Z|Tτ-+v?x^`lpq$I ^ˬH&9)=)Fj`%Q _qum(mb͘ VE(L4*2m1ؽ<>"Fnc˲!4gFHimJ s4|:P_Gp \ QKV]4hyѷY+J)'?$=0j(G6ۻHLHyk\/YNbo 6!/5n >NBpQq\ rU[qf9A]a*(P箅\cs4JLIggbSj5|&<&ne٫ ?ya$>=Jv}]Q׿[}i_ZF y1*}8( W}r; V1;X_pr1"6XL@-ć3jyj6)L}XcŘşKsɚRy1h-D ~Z16]y'˞t5xܹcSZ8ov`pݢ oO{^&7'R mW֩Ȝ\bs2R2)Z%/,!a[n]ocGsf6Gl˘BNM_wCʜނewƭN:pCkhI<ndJ]Z·y B֓ Oj6Iҡ>y~m.ٷyZ&bueP.lNJrr+p~zĦ+W7՗笆غLmKjMϢ9L_eLYF?b2p%Vb%߲#tj%$t{b$Ɨ2!6n;,Q\?2ll*D[C.v@-^ub$]^/?^<&.z?1MWrnOX|~>=A@K(- |w V&qm+IKN2wLFg)(% Y\5r {|j΢yM 2SuxPRYlrDH(d={2`/sea6}C( sm5,R/M7TZE-)Q?M@4T^V;Nw>m *ӯ R~׮DrX 1ZOpKDG"y)Ĺ|A7`ȿsފZ܌Zc[1x(k |+c?BVI] ^j[V{qBC}C1O (5a$³ s(ČO kTAhhk(8]ǜЯTϿ8&W=Cb.4oZa|pl:"b5'7ʴ=J-:9W,s:nGO1864,<KW̬wjtϝ'>&[1G%)}hu/Dß?AJ kXzӍoZv:;FkgyޯC3)ۄ<InJŝ[ױW`淅ª >TiY@/D{N)4TO*$FM !W,0bZ]o5`<y~5\z=k3d;QdQl!Jv?G m|e Gѝ&R~Pyh[rGnؼĚ'h,Ays˫&eG=C`9H<Kpd@G- ]Dx#^yMBzC2 |lYDmgHX:Õ8թX?)Ő@$7]y2|.Z hOK3V/-oz2nj w+NLzۉn\~zl!r58@ުݼV&??Q@Y$F.m_TkR6'׷!xsUduJ|1P"%I"p KT !AIFͰ! 0U qy^ʛ hg25o`e!%1H{۩-@6`=xNanʥP[s3VgzBg U#^n8/O#sWfƾ\9x7Gu`BO&:3A/o'4&Bfy6O9 ]]^+-_ˢ@cLH8§݈E"7&at݅e뾗+fg}bjjO"TK@VA@ }|jhޮ_a.*VӔOΩy=.Dw Ȟnw6W{*/Q4z eS˯|g54=vb:tUYXg6KpkN^ҷvHb%E%|-d,`G*]=fTtr6 ]q^˱Gg󫌗,OO_⬹&y+X$C8hT qHP^B/jMx=Eh9l;v\gC\-0Lb; m{>Q6 n#b"x#碮4U'::90#E>l!2*jƆbSH ǘ%jXqy8CB[ӐMo~ItE#_"aFVɻH7xkt_!@>+ {)OCEِKF)>mczVʝ\^J1~M=ez%C @[{Ez,! / X*HgJOdǏ׻ܾ)tE=}o]7-o`rf*bE).JγQYQHhcu}VB rwtee՗p$CϨu1&ҕ2jcS)P;ۨ^(  0q 񴕹q'*|r1_!FI>2,@1q0YOKr(7PA} ٳl Q^Cd|V8z_JwF:rFʒvu"S/h]p"[H,HLy2':y8ikj%7{oRF*h*Pk+YS=S52f:9l҅$$';RGe6M4?wŃe0/ `,-vK 8JwcPF<0Y )E3O 5}?"I8Nր8f;M]iK~NVkVɣ$yҜBupn[iodcO *Sg4C m>`seN `EbaAHAޏx6Ei*o- KwnE^tg(xfa[%#hIkA2 \ *Jm+[DL+Npx2wYΚ<*O l\,+cګGrT9nlZ_XH6 1 %ԓUA 8`VKb1=hh=R' `oD¢ϴa'V}Eg$qRJ ~|h#~pvUqz J_SpV[\kKDoS2 zȹfD3"al)Z L9JCWO8O~cx?rX^5L7(D|=i4.d'>SRdb->le}Dp"K51f!O-Mg~v?z/Ei|LsD;dg벎x+|t#%|o\d!HPw|A FQQoi-#[XaF(W\N%vG W߯SXPRk"_M9$[D)|B-k@:3{_t}n&sI _1yLȷ7N>+`2J@1+%PrѦ+Xed>Lƛ>J^HeR#.7@6,&2CwA0$- ]q ĔdܳAJr4*;א 3c&(MӞz_F#q~YL ='lD?@F]]*dn?NQzT˹oe{!YkGhCJSOV'+bOn3)GTYĘp-J*!j)S жFf|ij6H%/s>S7{Ȑx*" 3d1&m٤Qri='XU!L'Pd3 H.u$Hu] ՓI6Tw= ۾T,rz@ؘF^RPiՍ>P:ԘsָM1˟lUpY A-_B1oz*e9*iD'[1l F1E/k69uqSi Tw~& L[8Q9d6?͌Eg-E-mDY% A;),lC#NjInjhgoԆ@ 7 t>_ Y&jx;gCGZ/`PJ!e24Y|(y)yuP pOZަb%4;/J[iЏ§/<:Գ$,9ex_4ݘ^'kcHGdf$ZeĞ#8fRf29jS-Xn EME!]tϧ)ZQQ L" \,"We6bf:8.bC ~?3G~$LƢv&@~θYs ,ߤf̗Q fݐ;++kG.J|h=?l\^Ővz';Ǝ8$?*|5'd,nNY^qlA:$u|BUk?YRp+:B<ZGTrCY;(Ox ع¸1~t`+1ȮʏL16e^LjobwᏂ ї; D"_RCϼ[ȀiCbI &nD@@Lkȝ :kHt+},f4&0;˸?`fF('+WE9۶ td?RR%)4gKX9Zmn rjYWZ%_ )?oV:_Kr~ʌ/ctƻF^A`Dm+9R["2mol^ 5iɞ#}3o0hJ7=J*FXa2 Lk;wZYsnP7E߁U\>F[<]էBks w@yz/T ^Vݺ+z^O#cJHmFGj6sOQn ffY Sf60kX9Ax}?]Z./**^-v׍`cAZ@4*Cَe~U|8,RB:fL[DH(|Ho=4&G@Z*>xEkЦX{׀zq :Z(z=p},d2*tCɧ.霧KR%4M-Pvs<yKp-Z9$;:1~=Sѳη^pyPoaץf.0+ITWX}ydT3tErK<0 g [] SLV}kW7'(* NߟU$}Xmn)1}MLinC\ U~ҊR7!aVZ*}CEd%$ks;=јoLfŮx<؜ȾE798K`U@!vy=Oh3k s{"8ugS+RE4)B7h(n]pN!eV1=$\/)$R`AG5(s3abo8 4_TcP?z]({: 8޼Zp&gU㧥>["V El&P]˃HfgRx/ &(1kL>i jeb]M#hk1x~{Mt.գ,Ǵ lƆ^-NRzqa+I*iPdQcPy:+$=)UD| mk{X[ǧ$aJ~Ppqhh]o5ٹV^?Xz&9U2/hZF rJ["GrjjF~LψcBS"sR?JkßtwB10f7<;pTfEtuv{GZЈ ~y7aˌ\<#.?r7(eN&\qH{ d(~kӄcyˋ`3\/m׋v6*P،?5ham?jmj$稝a'c+yPKŊ_Whek3Lr oEqƄOW-&xYO,Rͮۚq&IIIA1)YJP7+l]vtM3ǃ%Ϳ[Cn [ޣAxw`㕏EJ䀹 a?t[^]YJ^VGAs?ŻEͷVEhO$R׆lAFNjZwjo9Wd9KǾ%Ezl-{ES҇ŸMP> #^kroV?XM 3_/Nj0Gi q׮mGlվ#:d BO^ Zw65TkUUz 5j 5T -F WeFY1Ⱦ-huL?[ϝX`PF R R,Gj[CiL(@rJуw iA E*Mcq>ٞu6}o*j&GX|7X6 *róOPd3Ny( COԹU2l!}&KIsQDi76V(_4SykHjʂ77DT]!~x8 ê F]s~;wf׾XE^zXu)u bn5clLbb u$y"W&sCP"ͮ2^,Qx 4iF'Xe {k),o=,=kЗ;:yC9(X~دJE4v;-^6Ih g-UvB'?%Fd=Yk 1R,H#eOMD2s$hf?ؼv1BABEU;hc9: 5*yFdZr _mވM'ԙ)is$F#QzVbNr@A"o6GghJkM^_24M35DӚ9蔔c\%^ .BJ~d,&Z#ȣ@LzkL:ǒ^+ml+\5T*ρ{MZ&)nEx`cf E9 ~*TP%DRaxTj]Ñ\i^7 "{=tpTś ,hŔִ~~7(_ k<}a,,0#QJp*^Y抭Et+^sT. \Br5/8W~Q>a{_bؑ*6E7l4x*K;Ƹ9ڳU"9cne^[< O%nq&w90'bF֦.Q,T{S Ngj;z"ŏ|)Qʋҏ$ba]9_sjaT#7eb?J6ns1VT'YH^ᓿI%wRPB]𼺸Z &awi~h3HRץ-rzKrgCXV즕~-Omn9 OFC3My& =`Jr#1˜7]x&5^ ]LNz}~ݶ n2|7 ,8L.1{n6KEbT7( X.%R~xK.XI.i*iyn"^܄WXK}5Zdp[T( $ŭ͗ղ-&2RAg3d~3c -e!4#!z!\Ch^u}d9*Mr~,M n1JC/F08t{*Typ 27˨q4:*G~S%5#cu|5 7z+Govi ^+|it+ O"Iz:e[}{u*PTF n~6PCڴ+kAm CV- 'NsZAS%OK/MG8ꗆWdճ7cŪ)U h0fDV^|UO:evRQd\e"A5a&$U^FU?*KE L\^1bml'^Gk:guy8Ί› DcNf 6)е640d1Ѯ'1 } @UoG>Ov=uI5Qny]D)VQ[LxxiŚl"`YTG~z-XxoIP/Lk8pɾRQ>dݓ soNHg7xh ũ2Ͱa%(pZFb%!;#CSwbO!WʔpF(1|+g3k$|6{|hd x/ֶNqKoqϸ M.@[k2op8uey w'$'1 ̵|9v}nW\̤!ݬ S" Yh*}%~0$37N+z rR\&qOFl/q85ЂmIc?/-R/AD|yȂz9 8@iLt~ /o?~ NBNCZَdQUU4!HV& ?[~$vhIl#veU,?gQ>X-*njwJHO|d۞U+-Jڎ7VqP IpT0֙D*po$CLTH˹cXSkJ~\s!hcV7OGbtkh1W˰cÏ&Ó; c}›HY҉6x[żdmS`I8h*ixF$eghvROuxW08uQJW KvόíXK&7ΑMvo U}WGXYiC&uodɪH"ݭēStk?=~c f΢h{'s0JZ6P\.΀ op.)9QZO`>kx=d΍k87eT1;UhūXX/$QTȯ9hIhc7 $GnWU)ઈLM՗\1Ұrα%&)Zg+0R(բfZ%dJe1,:m?k \KWC(BEnp~K/9rxaC)gmnmܐWMs]+$#l AͮH*cqqpޯHY-ۜX%Pxgp#EqL*B+`+D;B@̦s = 7&3 ;kT31IXscv6cJϬO!jZ=9xiԠ?R/i/K)uVeq/O|w@r(弹j9nYmPs8YEycr.qR$Rjqp1ܖbulN]*nwxbouGHO@oNf]Nl\B -y)*)t]f=+yN ЖD K<L/<Q}|&o7rq";^@CR=  ;D.K=rgeBēGZP]+X(uݝO:eߖG}zx0J\PkܓX&2YI 9qi/ykjD|XIa& e{ `+~Qts_Ak2LNgfh@8=" m=)g:d3V+g*)UN&xv. l'LOrЁb+(GE17a}Xmu~!0\Łl0u&05zr%;SE9yꙌiԹ w~7>ﱿXB2CåJ;r>O 2*/ٙ`Jk$뽻ǥ p^t|Y^vY#kĜs"]"`&%u)" DfWjR-^d휩5'sw6\XuDkweU^b2OeSjHyp3;͎⋓PyP΀nJJ1(nGcA,5^G=`2 Vx0Ę(-oZ2\w>--38bmZ`,P5b0@5eO(-`Dq/e1, 0Y/es]sg~ xZ7ts) n|2y/8Ja$; drZUmq{WEGa>Q7,قx12N˂eGUIa¶W1 :|fkb} @rk-ʛEAK~&y6*qB;`o=X &*'GGq r] Dgt"1׃C-s%8ڥХ?SMtV'#=?5)4n*G1 }L򘧕) %d~%OpWW-J  TUj |in \ Q[4j/ Q`??vv5p0~6q SiKrZ8||Ժٰ8ә۴fHzU*$myמɨ;\[I1.ɶ`*@YMyn&v erskwAcʹO7 KMpZ^0h{vLHp.\, V0}L;jOlV>mZQ5}#Pݯif I|LQ9":7Clpjn:T"#VtÌ_x経xuV:&sP "VoL85uDᔑ/06*Yv#>,V#i`޳Õ/Q\yqjTXKB;Kn0),個ePƵ4uXٟZEHUѵD^}3^kk޷37x0>/;Dy (#9m 8elQ.JxK$W:~5PqJ H2nM2,P'-Yfĉ=Q/kfx]8w m ҃9â|o>%b!@c,7uW4J:}); & Yї΂9#2-p, "/SU :E]cܻtN ²PPtNzSm;TH˔YjEb+y?@Z%el/Ny@bgf4.+`}ٍZN} v'u@9&Uf囡RL?*>'%-%PLnH&OW);E s1)֪DK>aUE9g j S2L?Q,6ASĮ.K|k ÏiQo}!OkbkTƒUۺ>1ʐdǺ.1ZR" ؜-c(̄eZbS%Q~)*$P"22.;DSzۦzA~@J|, AX PƂ0j1$j zJVPlIL7(a3r30ynSٛ pן : ̷rn,5:=HYZyY\r"Z](b]blw}bQJDCgMH^i#Z[yWUv7*jC+_RasaZ2XߚbҲx#LLg2tPIrI -OX;=뜑ڰ1 ᳇HrڭZ^܀AC0b 6"0#0 ZlA06eXʈ]B(V偽>> 7I5Eg kSڌ\qgz;&Gu/C\3~x`—<+޹ȥ1lc ڷ]sY4bg hzu~J%29 LsuqqGjׁEu@gT:3G{@ s+ eo2Cهpzr}RqTRLkdQnMCLa%D(w:)oWP;3RV| ҋdsQB beȜR#@9i'N=ZܚgOVvp ),cŊS~{u- =d*ÀA@ D-Њ.rZ̯,G Dʻ5LOXTW@1A&9 ?}txX{B%Z>ʩu}/m9\=w,(XkaP(t@b_Dh0Mzr)_$J|k4>tTO!&Л m  YZ