icinga2-common-2.12.4-bp153.2.3.1 4>$  Ap`I(!M@eeeZ7N ]{ni`K<"JQ(uf+GـNkgC =') ɦEgwdǢHk%H:aSB0{ƸsKIхC 8<RѬ`iu] .stpSؤ(IC0>J]Klg=uǮj0M7%M@hP̝O!9c'#8>R“64wG r '=;kVi >pDv?vd $ B &>DLY.t. . ,. . R. .8. .,.8 l / (T7[8S9S:S=k>kCkFkGk.Hl.Imd.XmYm\m.]n.^q bscsdtQetVftYlt[utp.vu(zuuuuuuuvCicinga2-common2.12.4bp153.2.3.1Common Icinga 2 configurationThis subpackage provides common directories, and the UID and GUID definitions among Icinga 2 related packages.`Hobs-arm-2 SUSE Linux Enterprise 15openSUSEGPL-2.0-or-laterhttp://bugs.opensuse.orgSystem/Monitoringhttps://www.icinga.com/linuxaarch64getent group icinga >/dev/null || /usr/sbin/groupadd -r icinga getent group icingacmd >/dev/null || /usr/sbin/groupadd -r icingacmd getent passwd icinga >/dev/null || /usr/sbin/useradd -c "icinga" -s /sbin/nologin -r -d /var/spool/icinga2 -G icingacmd -g icinga icinga if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /run/icinga2/cmd fi!&1TzBx"(6{ R v KxmV k | WV\[XFA큤AA큤AA큤A큤A聤A큤A큤`I`H`I`I`I`I`I`I`I`I`I`I`I`I`H`I`I`I`I`I`I`I`I`I`I`I`H`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`H`Iecb15525fe1bb7d9895d24341d94e89b54c106dded11f7002425480750acdffdb5e0ee43473df46857b4a2f7d984ed01a668034fbc44683afd800c2ce64d199af412760efc06446abacfb5a4c0e61ccfdeac769460211f8b0839c723e334165aea40f1b8a89b252343b7490759dec1239835384c1971d4dded47fa24c5e23b2ea9623e5b05d270ba79ffe7e08dd9291b5958e89866a9453cb4da9f0803f51fc9e14cee7d72b35ae62cb78cfa902e70f4f202a4ef1e299d2f5582b4e1525103cd3c90116aca20ffc434951c5a81388c93549dce8cf2faffcacd247f237c35d9712ca3d218245051a6f0bd50a104018fe26ba51c6e12ce0257ceea4e2a1a29b0d1dec7e4d57a2a048f23d3f076325eb52aa8a923c054888a43b626b2f898ad96c56314b4d7d70b109722cf56a1af0933c33f12698340cc174e112adc96f3296ea13a9014a59bf7af24e2d13a0b25205baa45fbe3a1400bff1a3f3c4ec183b6073815b99098562479813f84f7566480fe225536b09adad0c0190b6592b46d70c70e65c8507b64b1f44d9066b6218c375ed7a6ce119c98a6eb2dd50bd1aa700d8c8f7a909f7c70fb25bdc3665aabf1d81bb3073706a8abbadda5b26540835b25ce64dcc000adcac1bcb041eb71663a4e7501a97573d26b82daf8a19c6af7ccac210af1af0b080b54395616774843a1abdcc404726bed7dd5115c5e3acd61e16a53ebd95386ffe05d00cd5b2d648b5b8b597c6ba438813e740f2681bb9e5cffe8ed0b3d58acbc70c705d450f4d2addf2dbabbfad207a6159996c59dcb81310f2e231e21d36dbb4af1f3a2f3ac19a3096153cbefa43f83add4627ce6b6479ce919debb9b4867aa7b77855a8d8fc51719e5a27debaf181d3f5b6af1edace4dca2c4afc211a6b46427a1b8733f859a288051b3af634d5a252cfdd0a75e23e3e7b75b1afb6bbf90cb61941e2eaf1cd86bec333c709b8b9ee579e8c728ee0638bfa0c267ce92ca0fab10505507b6263c3bd954d9e6ccf52f437e4cb7b3a7527d04c74b97eceddfe02a3665fe6d0a6d21d4f46c654bea6c5c5438770219df2695ed71aca564d79cbcafa6702b9cf8abc0af14d2742bc25ea01224049f95c9e18c7263155f6403bbc2f488f25e9cd3bc32b59e3377a41aa885895f38f984279baefc4a228f6d68fb32bb7f5839a13360d1b10b573b32ed72c3bc39ed3e06f1e11296f0152f8e74e1e6498553e7092b273a77e8e4ade82f180c10681f3ab87fe9eb6f43b584e0d75dd3ddfa26642ff0cbc3a65520d2c6074f2d318c791d6eef4f0525da2ecddebfaf644fb9448d6db3cddcdc06672dfca2a349f7d3ce350f0a0dcbcbb8b986feb2d9e3576b15d916072aae3304450d45e5b07f8c5c336a678fd1cf38db21acf5af126e1be1a03d2705a7bb1c7262a92ddb58aa9b3b433bc6351d39cc68198f200a6206c492744c7e0bfc9867fe14a7ca307f130901176bbef2f54fbb2fd3aa9106a26b5638e60591c67e700aeb16802d81af1a2c053988023cd197cf222acf3e0a08173f6614ec26a6386beebb8e9838964de4a826b50f03923a973dd7fee3906f3dbe66a5cf6b4beb9d470508fdd8cb914b9d48c443aea81f464b157c97c6358177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643rootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticingarootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrooticinga2-2.12.4-bp153.2.3.1.src.rpmgroup(icinga)group(icingacmd)icinga2-commonicinga2-common(aarch-64)user(icinga)!     /bin/sh/bin/sh/bin/shcoreutilscoreutilsmonitoring-plugins-commonpermissionsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadowshadow3.0.4-14.6.0-14.0-15.2-14.14.1 /usr/bin/chkstat -n --warn --system -e /run/icinga2/cmd 1>&2`_إ@_0@_@__9_i@_C_*@^W@^^F^[^[]f@]@]W]m]@1@\@\+@\u*@[@[u[[t[@[@[\Z[\Z[O+[@ZZZUZ@ZkZ@ZvZ_:Z1@Z/Z@Z@Z@Z Z @ZYéYY@YY@X@X!@XXXOWu@Wnr@W Wo@VJV͛@VV@VI@V&,U|@U|@UAU4@UK@UUU7@U:UTT[@T TT}T|X@Tmecsos ecsos ecsos Guillaume GARDET ecsos ecsos ecsos Callum Farmer ecsos ecsos ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgDominique Leuenberger ecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgliedke@rz.uni-mannheim.deecsos@opensuse.orgecsos@opensuse.orgecsos@opensuse.orgmarkus@lazyfrosch.deecsos@opensuse.orguhaider.msee15seecs@seecs.edu.pkecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comro@suse.dethardeck@suse.combwiedemann@suse.comthardeck@suse.comecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comjengelh@inai.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgadamradovits12@hotmail.comaj@ajaissle.dethardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comecsos@opensuse.orgecsos@opensuse.orgthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.comthardeck@suse.com- Update to 2.12.4 * Bugfixes - Fix a crash when notification objects are deleted using the API #8782 - Fix crashes that might occur during downtime scheduling if host or downtime objects are deleted using the API #8785 - Fix an issue where notifications may incorrectly be skipped after a downtime ends #8775 - Don't send reminder notification if the notification is still suppressed by a time period #8808 - Fix an issue where attempting to create a duplicate object using the API might result in the original object being deleted #8787 - IDO: prioritize program status updates #8809 - Improve exceptions handling, including a fix for an uncaught exception on Windows #8777 - Retry file rename operations on Windows to avoid intermittent locking issues #8771 * Enhancements - Support Boost 1.74 (Ubuntu 21.04, Fedora 34) #8792 - Drop icinga2-boost-8185-8184.patch, icinga2-boost-8185-8190.patch and icinga2-boost-8185-8191.patch because now in upstream.- Update to 2.12.3 * Security - Fix that revoked certificates due for renewal will automatically be renewed ignoring the CRL (Advisory / CVE-2020-29663 - fixes bsc#1180147 ) * Bugfixes - Improve config sync locking - resolves high load issues on Windows #8511 - Fix runtime config updates being ignored for objects without zone #8549 - Use proper buffer size for OpenSSL error messages #8542 * Enhancements - On checkable recovery: re-check children that have a problem [#8506]- Update to 2.12.2 * Bugfixes - Fix a connection leak with misconfigured agents #8483 - Properly sync changes of config objects in global zones done via the API #8474 #8470 - Prevent other clients from being disconnected when replaying the cluster log takes very long #8496 - Avoid duplicate connections between endpoints #8465 - Ignore incoming config object updates for unknown zones #8461 - Check timestamps before removing files in config sync #8495 * Enhancements - Include HTTP status codes in log #8467- Update _constraints to current requirements to avoid OOM seen in aarch64 Tumbleweed- Info that since version 2.12.0 following security issue is fixed: prepare-dirs script allows for symlink attack in the icinga user context. boo#1172171 (CVE-2020-14004)- Update to 2.12.1 * Bugfixes + Core - Fix crashes during config update #8348 #8345 - Fix crash while removing a downtime #8228 - Ensure the daemon doesn't get killed by logrotate #8170 - Fix hangup during shutdown #8211 - Fix a deadlock in Icinga DB #8168 - Clean up zombie processes during reload #8376 - Reduce check latency #8276 + IDO - Prevent unnecessary IDO updates #8327 #8320 - Commit IDO MySQL transactions earlier #8349 - Make sure to insert IDO program status #8330 - Improve IDO queue stats logging #8271 #8328 #8379 + Misc - Ensure API connections are closed properly #8293 - Prevent unnecessary notifications #8299 - Don't skip null values of command arguments #8174 - Fix Windows .exe version #8234 - Reset Icinga check warning after successful config update #8189- Update to 2.12.0 * Breaking changes - Deprecate Windows plugins in favor of our - PowerShell plugins #8071 - Deprecate Livestatus #8051 - Refuse acknowledging an already acknowledged checkable #7695 - Config lexer: complain on EOF in heredocs, i.e. {{{abc #7541 * Enhancements + Core - Implement new database backend: Icinga DB #7571 - Re-send notifications previously suppressed by their time periods #7816 + API - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534 - Improve error message for POST queries #7681 - /v1/actions/remove-comment: let users specify themselves #7646 - /v1/actions/remove-downtime: let users specify themselves #7645 - /v1/config/stages: Add 'activate' parameter #7535 + CLI - Add pki verify command for better TLS certificate troubleshooting #7843 - Add OpenSSL version to 'Build' section in --version #7833 - Improve experience with 'Node Setup for Agents/Satellite' #7835 + DSL - Add get_template() and get_templates() #7632 - MacroProcessor::ResolveArguments(): skip null argument values #7567 - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538 - Introduce ternary operator (x ? y : z) #7442 - LegacyTimePeriod: support specifying seconds #7439 - Add support for Lambda Closures (() use(x) => x and () use(x) => { return x }) #7417 + ITL - Add notemp parameter to oracle health #7748 - Add extended checks options to snmp-interface command template #7602 - Add file age check for Windows command definition #7540 + Docs - Development: Update debugging instructions #7867 - Add new API clients #7859 - Clarify CRITICAL vs. UNKNOWN #7665 - Explicitly explain how to disable freshness checks #7664 - Update installation for RHEL/CentOS 8 and SLES 15 #7640 - Add Powershell example to validate the certificate #7603 + Misc - Don't send event::Heartbeat to unauthenticated peers #7747 - OpenTsdbWriter: Add custom tag support #7357 * Bugfixes + Core - Fix JSON-RPC crashes #7532 #7737 - Fix zone definitions in zones #7546 - Fix deadlock during start on OpenBSD #7739 - Consider PENDING not a problem #7685 - Fix zombie processes after reload #7606 - Don't wait for checks to finish during reload #7894 + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7970 - Make the config update process mutually exclusive (Prevents file system race conditions) #7936 - Fix check_timeout not being forwarded to agent command endpoints #7861 - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811 - Fix open connections when agent waits for CA approval #7686 - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836 - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102 - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142 - Fix TLS context not being updated on signed certificate messages on agents #7654 + API - Close connections w/o successful TLS handshakes after 10s #7809 - Handle permission exceptions soon enough, returning 404 #7528 + SELinux - Fix safe-reload #7858 - Allow direct SMTP notifications #7749 + Windows - Terminate check processes with UNKNOWN state on timeout #7788 - Ensure that log replay files are properly renamed #7767 + Metrics - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765 - Always send 0 as value for thresholds #7696 + Scripts - Fix notification scripts to stay compatible with Dash #7706 - Fix bash line continuation in mail-host-notification.sh #7701 - Fix notification scripts string comparison #7647 - Service and host mail-notifications: Add line-breaks to very long output #6822 - Set correct UTF-8 email subject header (RFC1342) #6369 + Misc - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053 - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995 - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838 - CheckCommand ssl: Fix wrong parameter -N #7741 - Code quality fixes - Small documentation fixes - Fix boost build error for Tumbleweed. - Add patch icinga2-boost-8185-8184.patch - Add patch icinga2-boost-8185-8190.patch - add patch icinga2-boost-8185-8191.patch- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Update to 2.11.5 Version 2.11.5 fixes file system race conditions in the config update process occurring in large HA environments and improves the cluster connection liveness mechanisms. * Bugfixes + Make the config update process mutually exclusive (Prevents file system race conditions) #8093 + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094 + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103 + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097- Update to 2.11.4 Version 2.11.4 fixes a crash during a heartbeat timeout with clients not yet signed. It also resolves an issue with endpoints not reconnecting after a reload/deploy, which caused a lot of UNKNOWN states. * Bugfixes + Cluster - Fix segfault during heartbeat timeout with clients not yet signed #7997 - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043 + Setup - Fix exception on trusted cert not readable during node setup #8044 - prepare-dirs: Only set permissions during directory creation #8046 + DSL - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054- Update to 2.11.3 * Bugfixes - Cluster Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849- Set minimum require boost version to 1.66- Fix boo#1159869 Permission error when use the icinga cli wizard.- BuildRequire pkgconfig(libsystemd) instead of systemd-devel: Aloow OBS to shortcut through the -mini flavors.- Update to 2.11.2 This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites. * Bugfixes - Cluster Config Sync - Config sync checksum change detection may not work within high load HA clusters #7565- Update to 2.11.1 This release fixes a hidden long lasting bug unveiled with 2.11 and distributed setups. If you are affected by agents/satellites not accepting configuration anymore, or not reloading, please upgrade. * Bugfixes - Cluster Config Sync - Never accept authoritative config markers from other instances #7552 - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10. - Configuration - Error message for command_endpoint should hint that zone is not set #7514 - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521 * Documentation - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526 - Explain repository requirements for 2.11: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166 - command_endpoint objects require a zone: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone - Zones declared in zones.d are not loaded anymore: https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones- Update to 2.11.0 * Core - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines - Technical concept: #7041 - Requires package updates: Boost >1.66 (either from packages.icinga.com, EPEL or backports). SLES11 & Ubuntu 14 are EOL. - Require TLS 1.2 and harden default cipher list - Improved Reload Handling (umbrella process, now 3 processes at runtime) - Support running Icinga 2 in (Docker) containers natively in foreground - Quality: Use Modern JSON for C++ library instead of YAJL (dead project) - Quality: Improve handling of invalid UTF8 strings * API - Fix crashes on Linux, Unix and Windows from Nessus scans #7431 - Locks and stalled waits are fixed with the core rewrite in #7071 - schedule-downtime action supports all_services for host downtimes - Improve storage handling for runtime created objects in the _api package * Cluster - HA aware features & improvements for failover handling #2941 #7062 - Improve cluster config sync with staging #6716 - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198 * Checks & Notifications - Ensure that notifications during a restart are sent - Immediately notify about a problem after leaving a downtime and still NOT-OK - Improve reload handling and wait for features/metrics - Store notification command results and sync them in HA enabled zones #6722 * DSL/Configuration - Add getenv() function - Fix TimePeriod range support over midnight - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead * CLI - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests * ITL - Add new commands and missing attributes * Windows - Update bundled NSClient++ to 0.5.2.39 - Refine agent setup wizard & update requirements to .NET 4.6 * Documentation - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices - Features: Better structure on metrics, and supported features - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions. - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.- Update to 2.10.6 * Bugfixes - Fix el7 not loading ECDHE cipher suites #7247- update to 2.10.5 * Core - Fix crashes with logrotate signals #6737 (thanks Elias Ohm) * API - Fix crashes and problems with permission filters from recent Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11) - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877 * Cluster - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel) * IDO DB - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157 * Documentation - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body - Better layout for the features chapter, specifically metrics and events - Split object types into monitoring, runtime, features - Add technical concepts for cluster messages- update to 2.10.4 * Bugfixes: - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219) - Fixes for delayed and one-time notifications (#5561 #6757) - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235) - check_perfmon supports non-localized performance counter names (#5546 #6418) Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19- update to 2.10.3 * Bugfixes: - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119) - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799) - Server time in the future breaks check result processing (#6797 ref/NC/595861) - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721) - Improve activation & syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559) - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704) - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876) - Crashes with localtime_r errors (#6887) * Documentation updates: - Ephemeral port range blocking on Windows agents (ref/NC/597307) - Technical concepts for the check scheduler (#6775) - DB IDO cleanup (#6791) - Unified development docs (#6819) Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26- update to 2.10.2 * Bug - #6770 (PR): Fix deadlock in GraphiteWriter - #6769 (Cluster): Hanging TLS connections - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream() - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA) - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled - #6736 (Crash): Stability issues with Icinga 2.10.x - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions - #6712 (API): Downtime name not returned when error occurs - #6711 (API, Cluster): Slow API (TLS-Handshake) - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7 - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x) - #6635 (API): API TLS session connection closed after 2 requests - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers * Documentation - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs * Support - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment - #6771 (Tests, PR): Implement unit tests for Dictionary initializers - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)- update to 2.10.1 * Bug - #6696 (PR): Remove default environment, regression from e678fa1aa5 - #6694: v2.10.0 sets a default environment "production" in SNI - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2 reload handler - #6689: State file not updated on reload - #6685 (API, PR): Fix regression with API permission filters and namespaces in v2.10 - #6682 (API): API process-check-result fails in 2.10.0 - #6679 (Windows, PR): Initialize Configuration::InitRunDir for Windows and writing the PID file - #6624 (Check Execution): Master Reload Causes Passive Check State Change - #6592: Reloads seem to reset the check atempt count. Also notifications go missing shortly after a reload. * Documentation - #6701 (Documentation, PR): Add GitHub release tag to README - #6700 (Documentation, PR): Enhance the addon chapter in the docs - #6699 (Documentation, PR): Update to https://icinga.com/ - #6692 (Documentation, PR): Update release docs for Chocolatey - #6690 (Documentation, PR): Extend 09-object-types.md with argument array - #6674 (Documentation, PR): Add a note to the docs on >2 endpoints in a zone - #6673 (Documentation, PR): Update RELEASE docs - #6672 (Documentation, PR): Extend upgrade docs - #6671 (Documentation): Zone requirements changed in 2.10 - Undocumented Change * Support - #6681 (code-quality, PR): Fix spelling errors. - #6677 (Packages, Windows): icinga does not start after Update to 2.10- update to 2.10.0 * Notes - Support for namespaces, details in this blogpost - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie - More child options for scheduled downtimes - Performance improvements and fixes for the TLS connections inside cluster/REST API - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 & REST API) - New configuration path constants, e.g. ConfigDir - Fixed problem with dependencies rescheduling parent checks too fast - Fixed problem with logging in systemd and syslog - Improved vim syntax highlighting - Technical concepts docs update with config compiler and TLS network IO * Enhancement - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients - #6651 (Plugins, PR): Add 'used' feature to check_swap - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object - #6532 (Configuration, PR): Add child_options to ScheduledDowntime - #6531 (API, PR): Expose Zone#all_parents via API - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send - #6521 (Configuration, PR): Implement references - #6512 (Cluster, PR): Refactor environment for API connections - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling - #6509 (Configuration, PR): Implement support for namespaces - #6508 (Configuration, PR): Implement the Dictionary#clear script function - #6506 (PR): Improve path handling in cmake and daemon - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects - #6455 (Log, PR): Log something when the Filelogger has been started - #6379 (Configuration, PR): Throw config error when using global zones as parent - #6356 (Log, PR): Fix logging under systemd - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification - #4282 (API, Log): Icinga should log HTTP bodies for API requests * Bug - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint - #6575: LTO builds fail on Linux - #6566 (Cluster): Master disconnects during signing process - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries - #6519 (CLI, PR): Reset terminal on erroneous console exit - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart" - #6514 (API): API using "Connection: close" header results in infinite threads - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable - #6503 (Log, PR): Reduce the log level for missing env macros to debug - #6485 (Log): Icinga logs discarding messages still as warning and not as notice - #6475 (Compat, PR): lib->compat->statusdatawriter: fix notifications_enabled - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object->m_LockOwner too early - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout - #5815 (Plugins, Windows): swap-windows check delivers wrong result - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled - #5052 (Cluster, Windows): Replay log not working with Windows client - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks * ITL - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used - #6640 (ITL): Update ITL and Docs for memory-windows - show used - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand - #6561 (ITL, PR): [Feature] Ceph health CheckCommand - #6504 (ITL, PR): squashfs ignored - #6491 (ITL, PR): Feature/itl vmware health - #6481 (ITL): command-plugins.conf check_disk exclude squashfs * Documentation - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command - #6665 (Documentation, PR): Make the two modes of check_http more obvious. - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10 - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list - #6606 (Documentation, PR): Enhance contributing docs - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs - #6573 (Documentation, PR): Fix operator precedence table - #6528 (Documentation, PR): Document default of User#enable_notifications - #6502 (Documentation, PR): Update 17-language-reference.md - #6501 (Documentation, PR): Update 03-monitoring-basics.md - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert * Support - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10 - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server - #6642 (PR): Allow to override MaxConcurrentChecks constant - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO - #6618 (PR): Silence compiler warning for nice() - #6591 (PR): Fix static initializer priority for namespaces in LTO builds - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md - #6574 (PR): Move new downtime constants into the Icinga namespace - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients - #6567 (PR): ApiListener: Dump the state file port detail as number - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package - #6544 (code-quality, PR): Remove #include for deprecated header file - #6539 (PR): Build fix for CentOS 7 and non-unity builds - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string - #6510 (Tests, Windows, PR): Update windows build scripts - #6494 (Tests, PR): Test PackObject - #6489 (code-quality, PR): Implement object packer for consistent hashing - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled? - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority - #6456 (code-quality, PR): Keep notes for immediately log flushing - #6440 (code-quality, PR): Fix typo - #6410 (code-quality, PR): Remove unused code - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons- update to 2.9.2 * Enhancement - #6602 (API, Cluster, PR): Improve TLS handshake exception logging - #6568 (Configuration, PR): Ensure that config object types are committed in dependent load order - #6497 (Configuration, PR): Improve error logging for match/regex/cidr_match functions and unsupported dictionary usage * Bug - #6596 (Crash, PR): Fix crash on API queries with Fedora 28 hardening and GCC 8 - #6581 (Configuration, PR): Shuffle items before config validation - #6569 (DB IDO): Custom Vars not updated after upgrade - #6533 (Crash): Icinga2 crashes after using some api-commands on Fedora 28 - #6505 (Cluster, PR): Fix clusterzonecheck if not connected - #6498 (Configuration, PR): Fix regression with MatchAny false conditions on match/regex/cidr_match - #6496 (Configuration): error with match and type matchany * Documentation - #6590 (DB IDO, Documentation, PR): Update workaround for custom vars - #6572 (Documentation, PR): Add note about workaround for broken custom vars * Support - #6540 (Configuration): Evaluate a fixed config compiler commit order - #6486 (Configuration): Configuration validation w/ ScheduledDowntimes performance decreased in 2.9 - #6442 (Configuration): Error while evaluating "assign where match" expression: std::bad_cast - Add icinga2-graphite.patch to have all tags as descriped in upstream icingaweb2-module-graphite docs.- remove rpmlint warnings: - missing-dependency-to-logrotate - obsolete-not-provided icinga2-libs - permissions-missing-requires- Incorporating upstream changes * Handle licensing different between SUSE and RedHat * Remove obsolete libs package * Move service and config from common to main package * Ensure consistent handling of fillupdir Also see https://github.com/Icinga/rpm-icinga2/pull/5- update to 2.9.1 * Bug - #6457 (PR): Ensure that timer thread is initialized after Daemonize() - #6449: icinga r2.9.0-1 init.d script overrides PATH variable - #6445: Problem with daemonize (init scripts, -d) on Debian 8 / CentOS 6 / Ubuntu 14 / SLES 11 in 2.9 - #6444 (PR): SELinux: allow systemd notify - #6443: selinux and 2.9 * Support - #6470 (code-quality, PR): Fix spelling errors. - #6467 (Tests, PR): Start and stop the timer thread lazily - #6461 (Tests): Broken tests with fix from #6457 - #6451 (Packages, PR): Fix initscripts - #6450 (Packages): init script helpers - source: not found- Fixed the "No valid ELF RPATH or RUNPATH entry exists in the file" error. (boo#1102980)- update to 2.9.0 * Notes - Elasticsearch 6 Support - icinga health check supports minimum version parameter, ido thresholds for query rate, dummy check is executed in-memory, avoids plugin call - ApplicationVersion constant in the configuration - Setup wizards: global zone, disable conf.d inclusion, unified parameter handling - TTL support for check results, pretty formatting for REST API queries - TLS support for IDO PostgreSQL - Improvements for check scheduling, concurrent checks with command endpoints, downtime notification handling, scheduled downtimes and memory handling with many API requests * Enhancement - #6400 (Plugins, Windows, PR): Enhance debug logging for check_nscp_api - #6321 (Log, PR): Update log message for skipped certificate renewal - #6305 (PR): Introduce the 'Environment' variable - #6299 (Check Execution, Log, PR): Change log level for failed event command execution - #6285 (CLI, Log, PR): Add support for config validation log timestamps - #6270 (Configuration, PR): Add activation priority for config object types - #6236 (DB IDO, PR): Add TLS support for DB IDO PostgreSQL feature - #6219 (Elasticsearch, PR): Add support for Elasticsearch 6 - #6211 (DB IDO): IDO pgsql with TLS support - #6209 (CLI, PR): Unify zone name settings in node setup/wizard; add connection-less mode for node setup - #6208 (CLI): Add connection-less support for node setup CLI command - #6206 (Configuration, PR): Add ApplicationVersion built-in constant - #6205 (API, PR): API: Unify verbose error messages - #6194 (Elasticsearch, Graylog, PR): Elasticsearch/GELF: Add metric unit to performance data fields - #6170 (Configuration, Windows, PR): Add option to windows installer to add global zones - #6158 (API, Log): Review API debugging: verboseErrors and diagnostic information - #6136 (Check Execution, PR): Add counter for current concurrent checks to Icinga check - #6131 (Log, PR): Log which ticket was invalid on the master - #6109 (Plugins, PR): Add 'used' feature to check_memory - #6090 (Notifications, PR): Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification - #6078 (Check Execution, PR): Add more metrics and details to built-in 'random' check - #6039 (Configuration, PR): Improve location info for some error messages - #6033 (Compat): Deprecate StatusDataWriter - #6032 (Compat): Deprecate CompatLogger - #6010 (Cluster, PR): Move the endpoint list into a new line for the 'cluster' check - #5996 (PR): Add systemd watchdog and adjust reload behaviour - #5985 (DB IDO, PR): Add query thresholds for the 'ido' check: Rate and pending queries - #5979 (CLI, PR): Add quit, exit and help - #5973 (API, Check Execution, PR): Add 'ttl' support for check result freshness via REST API - #5959 (API, PR): API: Add 'pretty' parameter for beautified JSON response bodies - #5905 (Elasticsearch): Add support for Elasticsearch 6 - #5888 (DB IDO, PR): FindMySQL: Support mariadbclient implementation - #5877 (API): Add pretty format to REST API parameters (for debugging) - #5811 (CLI, PR): Update NodeName/ZoneName constants with 'api setup' - #5767 (CLI, PR): Implement ability to make global zones configurable during node wizard/setup - #5733 (Plugins, Windows, PR): Make --perf-syntax also change short message - #5729 (CLI, Cluster, PR): Correct node wizard output formatting - #5675 (InfluxDB, PR): Add pdv unit to influxdbwriter if not empty + doc - #5627 (InfluxDB, Metrics): InfluxDBWriter: Send metric unit (perfdata) - #5605 (CLI, Cluster, Configuration): Disable conf.d inclusion in node setup wizards - #5509 (Cluster, wishlist): Add metrics about communication between endpoints - #5444 (Cluster): Display endpoints in the second line of the ClusterCheckTask output - #5426 (CLI, Configuration, PR): Add the ability to disable the conf.d inclusion through the node wizard - #5418 (Plugins, Windows): Feature request: check_perfmon.exe - Change name of counter in output - #4966 (CLI, Cluster): Unify setting of master zones name - #4508 (CLI): node wizard/setup: allow to disable conf.d inclusion - #3455 (API, Log): startup.log in stage dir has no timestamps - #3245 (CLI, help wanted, wishlist): Add option to Windows installer to add global zone during setup - #2287 (help wanted, wishlist): Please support systemd startup notification * Bug - #6429 (PR): Make HttpServerConnection#m_DataHandlerMutex a boost::recursive_mutex - #6428 (API): Director kickstart wizard querying the API results in TLS stream disconnected infinite loop - #6411 (Plugins, Windows, PR): Windows: Conform to the Plugin API spec for performance label quoting - #6407 (Windows, PR): Fix wrong UOM in check_uptime windows plugin - #6405 (Windows, PR): TcpSocket#Bind(): reuse socket addresses on Windows, too - #6403 (API, PR): Conform to RFC for CRLF in HTTP requests - #6401 (Elasticsearch, InfluxDB, PR): Fix connection error handling in Elasticsearch and InfluxDB features - #6397 (Plugins, Windows, PR): TlsStream#IsEof(): fix false positive EOF indicator - #6394 (Crash, Elasticsearch): Icinga will throw an exception, if ElasticSearch is not reachable - #6393 (API, Elasticsearch, PR): Stream#ReadLine(): fix false positive buffer underflow indicator - #6387 (Configuration, Crash, Windows, PR): Remove ApiUser password_hash functionality - #6383 (API, CLI, PR): HttpRequest#ParseBody(): indicate success on complete body - #6378 (Windows): Analyze Windows reload behaviour - #6371 (API, Cluster, PR): ApiListener#NewClientHandlerInternal(): Explicitly close the TLS stream on any failure - #6368 (CLI, PR): Fix program option parsing - #6365 (CLI): Different behavior between icinga2 -V and icinga2 --version - #6355 (API): HTTP header size too low: Long URLs and session cookies cause bad requests - #6354 (Elasticsearch): ElasticsearchWriter not writing to ES - #6336 (Log, PR): Fix unnecessary blank in log message - #6324 (Crash, PR): Ensure that password hash generation from OpenSSL is atomic - #6319 (Windows): Windows service restart fails and config validate runs forever - #6297 (Cluster, PR): Execute event commands only on actively checked host/service objects in an HA zone - #6294 (API, Configuration, PR): Ensure that group memberships on API object creation are unique - #6292 (Notifications, PR): Fix problem with reminder notifications if the checkable is flapping - #6290 (OpenTSDB, PR): Fixed opentsdb metric name with colon chars - #6282 (Configuration): Issue when using excludes in TimePeriod Objects - #6279 (Crash): segfault with sha1_block_data_order_avx of libcrypto - #6255 (Configuration): On debian based systems /etc/default/icinga2 is not read/used - #6242 (Plugins, Windows): Sporadic check_nscp_api timeouts - #6239 (Plugins, Windows, PR): Fix Windows check_memory rounding - #6231 (Notifications): icinga2.8 - Notifications are sent even in downtime - #6218 (PR): attempt to fix issue #5277 - #6217 (Check Execution, PR): Fix check behavior on restart - #6204 (API, PR): API: Check if objects exists and return proper error message - #6195 (API, Crash, PR): Fix crash in remote api console - #6193 (Crash, Graylog, PR): GelfWriter: Fix crash on invalid performance data metrics - #6184 (API): debug console with API connection sometimes hangs since 2.8.2 - #6125 (Configuration, PR): Fix description of the NotificationComponent in notification.conf - #6077 (API, PR): Allow to pass raw performance data in 'process-check-result' API action - #6057 (Notifications): Icinga2 sends notifications without logging about it and despite having a downtime - #6020 (CLI, PR): Fix crash when running 'icinga2 console' without HOME environment variable - #6019: icinga2 console -r crashes when run without a HOME environment variable - #6016 (Notifications, PR): Check notification state filters for problems only, not for Custom, etc. - #5988 (Check Execution, Cluster, PR): Fix concurrent checks limit while using command_endpoint - #5964 (Metrics, OpenTSDB, PR): OpenTSDB writer - Fix function for escaping host tag chars. - #5963 (Metrics, OpenTSDB): OpenTSDB writer is escaping wrong chars for host names. - #5952 (Notifications): Custom notifications are filtered by object state - #5940 (PR): Remove deprecated Chocolatey functions - #5928 (PR): Fix build problem with MSVC - #5908 (Windows): Icinga2 fails to build on Windows - #5901 (PR): Do not replace colons in plugin output - #5885 (PR): Workaround for GCC bug 61321 - #5884: Icinga2 fails to build - #5872 (PR): Replace incorrect fclose() call with pclose() - #5863 (PR): Fix glob error handling - #5861 (PR): Fix incorrect memory access - #5860 (PR): Fix memory leaks in the unit tests - #5853 (Plugins, Windows, PR): Fix missing space in check_service output - #5840 (Elasticsearch, PR): Fix newline terminator for bulk requests in ElasticsearchWriter - #5796 (CLI, PR): Fix error reporting for 'icinga2 console -r' - #5795 (Elasticsearch): ElasticsearchWriter gives "Unexpected response code 400" with Elasticsearch 6.x - #5763 (API): "icinga2 api setup" should explicitly set the NodeName constant in constants.conf - #5753 (API, Cluster, Metrics, PR): Fix that RingBuffer does not get updated and add metrics about communication between endpoints - #5718 (API, PR): API: Fix http status codes - #5550 (API): Verify error codes and returned log messages in API actions - #5277 (Notifications): Flexible downtime is expired at end_time, not trigger_time+duration - #5095 (API): Wrong HTTP status code when API request fails - #5083 (Check Execution): Initial checks are not executed immediately - #4786 (API): API: Command process-check-result fails if it contains performance data - #4785 (Compat): Semicolons in plugin output are converted to colon - #4732 (API, Configuration): Duplicate groups allowed when creating host - #4436 (Check Execution): New objects not scheduled to check immediately - #4272 (Cluster, Configuration): Duplicating downtime from ScheduledDowntime object on each restart - #3431 (Cluster): Eventhandler trigger on all endpoints in high available zone * ITL - #6389 (ITL, PR): New ITL command nscp-local-tasksched - #6348 (ITL, PR): Fix for catalogued locally databases. Fixes #6338 - #6338 (ITL): db2_health not working with catalogued databases, as --hostname is always used - #6308 (ITL, PR): Update lsi-raid ITL command - #6263 (ITL, PR): ITL: Add default thresholds to windows check commands - #6139 (ITL, PR): itl/disk: Ignore overlay and netfs filesystems - #6045 (ITL, PR): Move the "passive" check command to command-icinga.conf - #6043 (ITL): ITL "plugins" has an implicit dependency on "itl" - #6034 (ITL, PR): ITL by_ssh add -E parameter - #5958 (ITL, PR): Add minimum version check to the built-in icinga command - #5954 (ITL, PR): ITL: Add mongodb --authdb parameter support - #5951 (ITL, PR): itl: Add command parameters for snmp-memory - #5921 (ITL, PR): Add icingacli-director check to ITL - #5920 (ITL): Add Check for Director Jobs to ITL - #5914 (ITL, PR): Fix for wrong attribute in ITL mongodb CheckCommand - #5906 (ITL, PR): Add check_openmanage command to ITL. - #5902 (ITL, PR): Add parameter --octetlength to snmp-storage command. - #5817 (ITL): mongodb_address vs mongodb_host - #5812 (ITL): Better way to check required parameters in notification scripts - #5805 (ITL, PR): Add support for LD_LIBRARY_PATH env variable in oracle_health ITL CheckCommand - #5792 (ITL, PR): ITL: Add check_rpc - #5787 (Check Execution, ITL): random check should provide performance data metrics - #5744 (Check Execution, ITL, PR): Implement DummyCheckTask and move dummy into embedded in-memory checks - #5717 (ITL, PR): add order tags to disk check - #5714 (ITL): disk check in icinga2/itl/command-plugins.conf lacks order tags - #5260 (ITL): CheckCommand mongodb does not expose authdb option * Documentation - #6436 (Documentation, PR): Update tested Elasticsearch version - #6435 (Documentation, PR): Add note on sysconfig shell variables for Systemd to the Upgrading docs - #6433 (Documentation, PR): Docs: Fix typos in 03-monitoring-basics.md - #6426 (Documentation, PR): Update 'Upgrading to 2.9' docs - #6413 (Documentation, PR): Fix table in Livestatus Filters - #6391 (Documentation, PR): Docs: Fix icinga.com link - #6390 (Documentation, Windows, PR): Docs: Update Windows wizard images - #6375 (Documentation, PR): some minor fixes in the flapping documentation - #6374 (Documentation, PR): Docs: Add an additional note for VMWare timeouts on Ubuntu 16.04 LTS - #6373 (Documentation, PR): Drop command template imports for versions < 2.6 in the docs - #6372 (Documentation, PR): Remove the import of 'legacy-timeperiod' in the docs - #6350 (Documentation, PR): clarify the permision system of the api in the docs - #6344 (Documentation, PR): README: Fix broken community link - #6330 (Documentation, PR): Fix $ipaddress6$ attribute name typo in the docs - #6317 (Documentation, PR): Add a note on Windows NSClient++ CPU checks to the docs - #6289 (Documentation, PR): Update release documentation with git tag signing key configuration - #6286 (Documentation): Update Windows wizard screenshots in the docs - #6283 (Documentation, PR): edit Icinga license info so that GitHub recognizes it - #6271 (Documentation, PR): Enhance advanced topics with (scheduled) downtimes - #6267 (Documentation, PR): Update docs to reflect required user* attributes for notification objects - #6265 (Documentation): Notifications user/user_groups required - #6264 (Documentation, PR): Enhance "Getting Started" chapter - #6262 (Documentation, PR): Enhance the environment variables chapter - #6254 (Documentation, PR): Enhance release documentation - #6253 (Documentation, PR): Doc: Add note for not fully supported Plugin collections - #6243 (Documentation, PR): Update PostgreSQL documentation - #6226 (Documentation, PR): Fix broken SELinux anchor in the documentation - #6224 (Documentation, PR): Update volatile docs - #6216 (Documentation): Volatile service explanation - #6180 (Documentation, PR): Doc: fixed wrong information about defaulting - #6128 (Documentation, PR): Adding documentation for configurable global zones during setup - #6067 (Documentation, Windows, PR): Improve Windows builds and testing - #6022 (Configuration, Documentation, PR): Update default config and documentation for the "library" keyword - #6018 (Documentation): Move init configuration from getting-started - #6000 (Documentation, PR): Add newline to COPYING to fix Github license detection - #5948 (Documentation, PR): doc: Improve INSTALL documentation - #4958 (Check Execution, Documentation): How to set the HOME environment variable * Support - #6439 (PR): Revert "Fix obsolete parameter in Systemd script" - #6423 (PR): Fix missing next check update causing the scheduler to execute checks too often - #6421 (Check Execution): High CPU load due to seemingly ignored check_interval - #6412 (Plugins, Windows, PR): Fix output formatting in windows plugins - #6402 (Cluster, code-quality, PR): Use SSL_pending() for remaining TLS stream data - #6384 (PR): Remove leftover for sysconfig file parsing - #6381 (Packages, PR): Fix sysconfig not being handled correctly by sysvinit - #6377 (code-quality, PR): Fix missing name for workqueue while creating runtime objects via API - #6364 (code-quality): lib/base/workqueue.cpp:212: assertion failed: !m_Name.IsEmpty() - #6361 (API, Cluster): Analyse socket IO handling with HTTP/JSON-RPC - #6359 (Configuration, PR): Fix ScheduledDowntimes replicating on restart - #6357 (API, PR): Increase header size to 8KB for HTTP requests - #6347 (Packages, PR): SELinux: Allow notification plugins to read local users - #6343 (Check Execution, Cluster, PR): Fix that checks with command_endpoint don't return any check results - #6337: Checks via command_endpoint are not executed (snapshot packages only) - #6328 (Installation, Packages, PR): Rework sysconfig file/startup environment - #6320 (PR): Ensure that icinga_min_version parameter is optional - #6309 (PR): Fix compiler warning in checkercomponent.ti - #6306 (code-quality, PR): Adjust message for CheckResultReader deprecation - #6301 (Documentation, code-quality, PR): Adjust deprecation removal for compat features - #6295 (Compat, PR): Deprecate compatlog feature - #6238 (Notifications, PR): Implement better way to check parameters in notification scripts - #6233 (Check Execution): Verify next check execution on daemon reload - #6229 (Packages, PR): Don't use shell variables in sysconfig - #6214 (Packages): Reload-internal with unresolved shell variable - #6201 (Windows, PR): Handle exceptions from X509Certificate2 - #6199 (API, PR): Return 500 when no api action is successful - #6198 (Compat, PR): Deprecate Statusdatawriter - #6187 (code-quality, PR): Remove Icinga Studio Screenshots - #6181 (Tests, PR): tests: Ensure IcingaApplication is initialized before adding config - #6174 (API, PR): Fix crash without CORS setting - #6173 (API, Crash): Using the API crashes Icinga2 in v2.8.1-537-g064fc80 - #6171 (code-quality, PR): Update copyright of the Windows Agent to 2018 - #6163 (PR): Fix reload handling by updating the PID file before process overtake - #6160 (code-quality, PR): Replace std::vector:push_back calls with initializer list - #6126 (PR): Require systemd headers - #6113 (Tests, PR): appveyor: Disable artifacts until we use them - #6107 (code-quality, PR): Allow MYSQL_LIB to be specified by ENV variable - #6105 (Tests): Snapshot builds fail on livestatus tests - #6098 (API, code-quality, PR): Clean up CORS implementation - #6085 (Cluster, Crash, PR): Fix crash with anonymous clients on certificate signing request and storing sent bytes - #6083 (Log, code-quality, PR): Fix wrong type logging in ConfigItem::Commit - #6082 (Installation, Packages): PID file removed after reload - #6063 (Compat, PR): Deprecate CheckResultReader - #6062 (code-quality, PR): Remove the obsolete 'make-agent-config.py' script - #6061 (code-quality, PR): Remove jenkins test scripts - #6060 (code-quality, PR): Remove Icinga development docker scripts - #6059 (code-quality, PR): Remove Icinga Studio - #6058 (code-quality, PR): Clean up the Icinga plugins a bit - #6055 (Check Execution, Windows, code-quality, PR): methods: Remove unused clrchecktask feature - #6054 (Check Execution, Windows, code-quality): Remove unused clrchecktask - #6051 (code-quality, PR): Set FOLDER cmake property for the icingaloader target - #6050 (code-quality, PR): Replace boost::algorithm::split calls with String::Split - #6044 (code-quality, PR): Implement support for frozen arrays and dictionaries - #6038 (PR): Fix missing include for boost::split - #6037 (PR): Fix build error on Windows - #6029 (code-quality, PR): Remove duplicate semicolons - #6028 (Packages): python notification not running when icinga ran as a service - #6026 (Check Execution, Windows, PR): Fix flapping support for Windows - #6025 (Windows): Implement Flapping on Windows - #6023: Icinga should check whether the libsystemd library is available - #6017 (PR): Remove build breaking include - #6015 (code-quality, PR): Fix whitespaces in CMakeLists files - #6009 (PR): Build fix for ancient versions of GCC - #6008 (PR): Fix compatibility with CMake < 3.1 - #6007 (PR): Fix missing include - #6005 (PR): Fix incorrect dependencies for mkunity targets - #5999 (PR): Build fix - #5998 (code-quality, PR): Build all remaining libraries as object libraries - #5997 (PR): Use gcc-ar and gcc-ranlib when building with -flto - #5994 (InfluxDB, PR): InfluxDBWriter: Fix macro in template - #5993 (code-quality, PR): Use CMake object libraries for our libs - #5992 (code-quality, PR): Remove unused includes - #5984 (DB IDO, PR): Fix missing static libraries for DB IDO - #5983 (code-quality, PR): Use initializer lists for arrays and dictionaries - #5980 (code-quality, PR): Explicitly pass 1 or 0 for notification filters in DB IDO - #5974 (PR): Fix non-unity builds with the icinga check - #5971 (code-quality, PR): Remove libdemo and libhello - #5970 (code-quality, PR): Allocate ConfigItemBuilder objects on the stack - #5969 (code-quality, PR): Remove the WorkQueue::m_StatsMutex instance variable - #5968 (code-quality, PR): Update the RingBuffer class to use a regular mutex instead of ObjectLock - #5967 (code-quality, PR): Avoid accessing attributes for validators where not necessary - #5965 (code-quality, PR): Avoid unnecessary casts in the JSON encoder - #5961 (PR): Fix macro warning from the icinga check - #5960: Macro warning from the icinga check - #5957 (code-quality, PR): Change a bunch more copyright headers for 2018 - #5955 (Configuration, code-quality, PR): Avoid mutex contention in the config parser - #5946 (code-quality, PR): Use clang-tidy to add some more C++11 features - #5945 (code-quality, PR): Fix incorrect indentation for code generated by mkclass - #5944 (code-quality, PR): Add the final keyword to classes - #5939 (PR): Build fix for Debian wheezy - #5937 (code-quality, PR): Remove inline methods and use explicit template instantiation to minimize the number of weak symbols - #5936 (code-quality, PR): Clean up source lists in the CMakeLists.txt files - #5935 (code-quality, PR): Implement support for precompiled headers - #5934 (code-quality, PR): Add more include/library paths for MySQL and PostgreSQL - #5933 (code-quality, PR): Change copyright headers for 2018 - #5932 (code-quality, PR): Fix copyright header in cli/troubleshootcommand.hpp - #5931 (code-quality, PR): Improve detection for linker flags - #5930 (code-quality, PR): Replace boost::function with std::function - #5929 (code-quality, PR): Get rid of boost::assign::list_of in mkclass - #5927 (code-quality, PR): Build libraries as static libraries - #5909 (code-quality, PR): WIP: Improve build times - #5903 (code-quality, PR): Cleanup CompatUtility class and features - #5897 (code-quality, PR): Remove unnecessary inline statements - #5894 (code-quality, PR): Remove string_iless - #5891 (code-quality, PR): Update .gitignore - #5889 (code-quality, PR): execvpe: Fixup indention for readability - #5887 (PR): Windows build fix - #5886 (code-quality): Remove unnecessary 'inline' keyword - #5882 (code-quality, PR): Avoid unnecessary allocations - #5871 (code-quality, PR): Unit tests for the LegacyTimePeriod class - #5868 (Configuration, code-quality, PR): Use std::unique_ptr for Expression objects - #5865 (code-quality, PR): Add missing initializer in Utility::NewUniqueID() - #5862 (code-quality, PR): Replace a few more NULLs with nullptr - #5858 (Tests, code-quality, PR): Travis: Add support for Coverity - #5857 (code-quality, PR): Fix compiler warnings - #5855 (PR): Fix build problems with Visual Studio 2017 - #5848 (code-quality, PR): Fix COPYING format - #5846 (code-quality, PR): Fix compiler warnings - #5831 (Check Execution, Configuration): No checks were launched on snapshot version 2.8.0.71 (RHEL6) - #5827 (code-quality, PR): Replace StatsFunction with Function - #5825 (code-quality, PR): Replace boost::assign::list_of with initializer lists - #5824 (code-quality, PR): Replace a few Boost features with equivalent C++11 features - #5821 (Packages, Windows): check_disk build error - #5819 (code-quality, PR): Avoid unnecessary allocations in the FunctionCallExpression class - #5816 (code-quality, PR): Re-implement WrapFunction() using C++11 features - #5809 (Documentation, Installation, PR): Raise required OpenSSL version to 1.0.1 - #5758 (Documentation, Packages): Completely remove the spec file from the icinga2 repository - #5743 (CLI, Configuration, Installation): node setup: Deprecate --master_host and use --parent_host instead - #5725 (code-quality, PR): Use real UUIDs for Utility::NewUniqueID - #5388 (Packages, PR): Handle mis-detection with clang on RHEL/CentOS 7 - #3246 (Installation): Add option to windows installer to disable inclusion of conf.d directory- allow build hostname to be overwritten by the variable _buildhost- update to version 2.8.4 * fix plugins crash when run from icinga2-2.8.3 * Fix InfluxDB backslash escaping * Fix Elasticsearch crash on invalid performance data * Sysconfig file settings are taken into account * Support multiple parameters for check_nscp_api * Documentation enhancements and fixes - remove obsolete patch icinga2-2.8.2-boost.patch- fix bsc#1089808 by back porting the upstream patch icinga2-2.8.2-boost.patch- fix _fillupdir usage- update to version 2.8.2 (fixes CVE-2017-16933 - bsc#1086676, CVE-2018-6532 - bsc#1086672, CVE-2018-6533 - bsc#1086673, CVE-2018-6534 - bsc#1086674, CVE-2018-6535 - bsc#1086675, CVE-2018-6536) * [#5715](https://github.com/icinga/icinga2/issues/5715) (API, PR): Hash API password and comparison * [#6153](https://github.com/icinga/icinga2/issues/6153) (API, PR): Improve error handling for empty packages in /v1/config/packages * [#6147](https://github.com/icinga/icinga2/issues/6147) (PR): Fix incorrect argument type for JsonRpc::SendMessage * [#6146](https://github.com/icinga/icinga2/issues/6146) (PR): Ensure that SetCorked\(\) works properly * [#6134](https://github.com/icinga/icinga2/issues/6134) (PR): Fix incorrect HTTP content length limits * [#6133](https://github.com/icinga/icinga2/issues/6133) (PR): Limit the number of HTTP/JSON-RPC requests we read in parallel * [#6132](https://github.com/icinga/icinga2/issues/6132) (PR): Fix HTTP parser crash/hang * [#6129](https://github.com/icinga/icinga2/issues/6129): api/packages not created by prepare-dir/daemon * [#5995](https://github.com/icinga/icinga2/issues/5995) (InfluxDB, PR): Fix InfluxDB requests * [#5991](https://github.com/icinga/icinga2/issues/5991): Partial privilege escalation via PID file manipulation * [#5987](https://github.com/icinga/icinga2/issues/5987) (Elasticsearch, InfluxDB, Metrics): InfluxDBWriter and ElasticsearchWriter stop writing to HTTP API * [#5943](https://github.com/icinga/icinga2/issues/5943) (PR): Fix incorrect ::Start call * [#5793](https://github.com/icinga/icinga2/issues/5793): CVE-2017-16933: root privilege escalation via prepare-dirs \(init script and systemd service file\) * [#5760](https://github.com/icinga/icinga2/issues/5760) (Crash, PR): Fix incorrect socket handling for the HTTP client * [#6148](https://github.com/icinga/icinga2/issues/6148) (PR): Fix ApiUser unit test * [#6135](https://github.com/icinga/icinga2/issues/6135) (API, Cluster, PR): Limit JSON RPC message size * [#6115](https://github.com/icinga/icinga2/issues/6115) (PR): Fix incorrect size of request limits * [#6114](https://github.com/icinga/icinga2/issues/6114) (PR): Fix typo in prepare-dirs * [#6104](https://github.com/icinga/icinga2/issues/6104) (PR): Fix nullptr dereferences * [#6103](https://github.com/icinga/icinga2/issues/6103) (PR): HTTP Security fixes * [#5982](https://github.com/icinga/icinga2/issues/5982) (Packages, PR): SELinux: Allows icinga2\_t to send sigkill to all domains it transitions to * [#5916](https://github.com/icinga/icinga2/issues/5916) (Packages): Unable to kill process group after check timeout if SElinux is enabled * [#5850](https://github.com/icinga/icinga2/issues/5850) (Installation, PR): init script security fixes * [#5764](https://github.com/icinga/icinga2/issues/5764) (InfluxDB, code-quality, PR): Improve InfluxdbWriter performance * [#5759](https://github.com/icinga/icinga2/issues/5759) (code-quality, PR): Make default getters and setters non-virtual - install limits.conf to systemd directory instead of etc- override ICINGA2_BUILD_HOST_NAME to make builds reproducible (boo#1084909)- incorporate spec changes from upstream- fix build error for 15.0, Tumbleweed and Factory- update to upstream version 2.8.1 * [#5856](https://github.com/Icinga/icinga2/issues/5856) (PR): Implement AppLocal deployment support for UCRT * [#5986](https://github.com/Icinga/icinga2/issues/5986) (DB IDO, PR): Fix wrong schema constraint for fresh 2.8.0 installations * [#5947](https://github.com/Icinga/icinga2/issues/5947) (DB IDO): Duplicate entry constraint violations in 2.8 * [#5907](https://github.com/Icinga/icinga2/issues/5907) (PR): Windows plugin check\_swap build fix * [#5808](https://github.com/Icinga/icinga2/issues/5808) (Crash, PR): Fix missing variable name which can lead to segfaults * [#5807](https://github.com/Icinga/icinga2/issues/5807) (Crash): icinga v2.8.0 crashes frequently with "segmentation fault" on Debian 8.9 * [#5804](https://github.com/Icinga/icinga2/issues/5804) (Log, PR): Silence UpdateRepository message errors * [#5776](https://github.com/Icinga/icinga2/issues/5776) (Cluster, Log): 2.8.0: warning/JsonRpcConnection: Call to non-existent function 'event::UpdateRepository' * [#5746](https://github.com/Icinga/icinga2/issues/5746) (Livestatus, PR): livestatus: custom variables return empty arrays instead of strings * [#5716](https://github.com/Icinga/icinga2/issues/5716) (Livestatus, PR): add bogus zero reply in livestatus when aggregate and non matching filter * [#5626](https://github.com/Icinga/icinga2/issues/5626) (Livestatus, help wanted): Empty result set with non-matching filters in Livestatus stats query * [#5785](https://github.com/Icinga/icinga2/issues/5785) (ITL, PR): ITL: Drop ssl\_sni default setting * [#5775](https://github.com/Icinga/icinga2/issues/5775) (ITL): Default usage of ssl\_sni in check\_tcp- add logrotate as BuildRequires for the setup to recognize the version and enable the su usage accordingly- fix libboost devel dependencies for Tumbleweed- add user and group provides- remove icinga2.service.limits.conf from package source and use the one from the tarball instead- update to upstream version 2.8.0 * Certificate path changed to /var/lib/icinga2/certs - check the upgrading docs! * DB IDO 2.8.0 schema upgrade * Cluster/Clients: Forward certificate signing requests over multiple levels * Cluster/Clients: Support on-demand signing next to ticket based certificate request signing * New flapping detection algorithm * Add ElasticsearchWriter feature with HTTP proxy support * Add CORS support for the REST API * Deprecate `flapping_threshold` config option * Remove client configuration mode "bottom up" * Remove classicui meta configuration package * Remove deprecated `enable_legacy_mode` in Graphite feature * Spec file was moved to https://github.com/icinga/icinga-packaging * ITL CheckCommand definition updates * Documentation updates- Documentation should not hard-require the program, as it is technically "usable" without it. - Rectify RPM groups, fix odd grammar in descriptions. - Remove redundant %clean section.- add icinga2.service.limits.conf on Tumbleweed too- update to upstream version 2.7.2 * Fixed invalid attribute names in the systemd unit file * Improve documentation and systemd config on TaskMax * Fixed incorrect unique constraint for IDO DB * Moved spec file to the icinga-packaging Git repository * Documentation updates- update to upstream version 2.7.1 * Fixes and upgrade documentation for notificatication scripts introduced in 2.7.0 * InfluxdbWriter attribute socket_timeout introduced in 2.7.0 was deprecated (will be removed in 2.8.0). Details in #5469 and #5460 * Livestatus bygroup table stats fixes for NagVis * DB IDO: Fixes for downtime/comment history queries not correctly updating the end time * check_nscp_api allows white spaces in arguments- adapt spec to latest upstream changes- fix SLES and Factory building issues- take upstream icinga2.spec as base again (fixes bnc#1055032) - fix wrong position of classicui sed statement - fix faulty systemd cleanup statement on suse systems- update to upstream version 2.7.0 Too many changes to write. See https://github.com/Icinga/icinga2/milestone/59?closed=1 or in changelog.- update to upstream version 2.6.3 * This is a bugfix release which addresses a number of bugs we've found since 2.6.2 was released. It also contains a number of improvements for the Icinga documentation.- Fix typo in %postun's use_systemd conditional- update to upstream version 2.6.2 * This is a bugfix release which addresses a crash that can occur when removing configuration files for objects which have been deleted via the API.- update to upstream version 2.6.1 * This release addresses a number of bugs we have identified in version 2.6.0. * The documentation changes * reflect our recent move to GitHub. - Increase libstdc++-devel requirement to 48- update to upstream version 2.6.0 * Client/Satellite setup * The "bottom up" client configuration mode has been deprecated. Check [#13255](https://dev.icinga.org/issues/13255) for additional details and migration. * Linux/Unix daemon * Ensure that Icinga 2 does not leak file descriptors to executed commands. * There are 2 processes started instead of previously just one process. * Cluster and API * Provide location information for objects and templates in the API * Improve log message for ignored config updates * Fix cluster resync problem with API created objects (hosts, downtimes, etc.) * Fix that API-created objects in a global zone are not synced to child endpoints * Notifications * Several bugfixes for downtime, custom and flapping notifications * New ITL CheckCommands: logstash, glusterfs, iostats * Package builds require a compiler which supports C++11 features (gcc-c++ >= 4.7, clang++) * DB IDO * Schema upgrade required (2.6.0.sql) * This update fixes timestamp columns required by Icinga Web 2 and might take a while. Please ensure to schedule a maintenance task for your database upgrade.- update to upstream version 2.5.4 * InfluxdbWriter feature * API * New endpoints: /v1/variables and /v1/templates (GET requests), /v1/action/generate-ticket (POST request) * State/type filters for notifications/users are now string values (PUT, POST, GET requests) * Configuration * TimePeriod excludes/includes attributes * DateTime object for formatting time strings * New prototype methods: Array#filter, Array#unique, Array#map, Array#reduce * icinga2.conf now includes plugins-contrib, manubulon, windows-plugins, nscp by default (ITL CheckCommand definitions) * Performance improvements (config compiler and validation) * CLI * 'icinga2 object list' formats state/type filters as string values * Compiled config files are now visible with "notice" debug level (hidden by default) * CA serial file now uses a hash value (HA cluster w/ 2 CA directories) * Cluster * There is a known issue with >2 endpoints inside a zone. Icinga 2 will now log a warning. * Support for accepted ciphers and minimum TLS version * Connection and error logging has been improved. * DB IDO * Schema upgrade required (2.5.0.sql) * Incremental config dump (performance boost) * `categories` attribute is now an array. Previous method is deprecated and to be removed. * DbCatLog is not enabled by default anymore. * SSL support for MySQL * New packages * vim-icinga2 for syntax highlighting * libicinga2 (Debian), icinga2-libs (RPM) for Icinga Studio packages- update to upstream version 2.4.10 * Bugfixes * Bug 11812 (Checker): Checker component doesn't execute any checks for command_endpoint - change from 2.4.9 * Bugfixes * Bug 11801 (Perfdata): Error: Function call 'rename' for file '/var/spool/icinga2/tmp/service-perfdata' failed with error code 2, 'No such file or directory' * Bug 11804 (Configuration): Segfault when trying to start 2.4.8 * Bug 11807 (Compat): Command Pipe thread 100% CPU Usage - changes from 2.4.8 * Changes * Bugfixes * Support for limiting the maximum number of concurrent checks (new configuration option) * HA-aware features now wait for connected cluster nodes in the same zone (e.g. DB IDO) * The 'icinga' check now alerts on failed reloads * Feature * Feature 8137 (Checker): Maximum concurrent service checks * Feature 9236 (Perfdata): PerfdataWriter: Better failure handling for file renames across file systems * Feature 9997 (libmethods): "icinga" check should have state WARNING when the last reload failed * Feature 10581 (ITL): Provide icingacli in the ITL * Feature 11556 (libbase): Add support for subjectAltName in SSL certificates * Feature 11651 (CLI): Implement SNI support for the CLI commands * Feature 11720 (ITL): 'disk' CheckCommand: Exclude 'cgroup' and 'tracefs' by default * Feature 11748 (Cluster): Remove unused cluster commands * Feature 11765 (Cluster): Only activate HARunOnce objects once there's a cluster connection * Feature 11768 (Documentation): Add the category to the generated changelog * Bugfixes * Bug 9989 (Configuration): Service apply without name possible * Bug 10426 (libicinga): Icinga crashes with a segfault on receiving a lot of check results for nonexisting hosts/services * Bug 10717 (Configuration): Comments and downtimes of deleted checkable objects are not deleted * Bug 11046 (Cluster): Icinga2 agent gets stuck after disconnect and won't relay messages * Bug 11112 (Compat): Empty author/text attribute for comment/downtimes external commands causing crash * Bug 11147 (libicinga): "day -X" time specifications are parsed incorrectly * Bug 11158 (libicinga): Crash with empty ScheduledDowntime 'ranges' attribute * Bug 11374 (API): Icinga2 API: deleting service with cascade=1 does not delete dependant notification * Bug 11390 (Compat): Command pipe overloaded: Can't send external Icinga command to the local command file * Bug 11396 (API): inconsistent API /v1/objects/* response for PUT requests * Bug 11589 (libicinga): notification sent out during flexible downtime * Bug 11645 (Documentation): Incorrect chapter headings for Object#to_string and Object#type * Bug 11646 (Configuration): Wrong log severity causes segfault * Bug 11686 (API): Icinga Crash with the workflow Create_Host-> Downtime for the Host -> Delete Downtime -> Remove Host * Bug 11711 (libicinga): Expired downtimes are not removed * Bug 11714 (libbase): Crash in UnameHelper * Bug 11742 (Documentation): Missing documentation for event commands w/ execution bridge * Bug 11757 (API): API: Missing error handling for invalid JSON request body * Bug 11767 (DB IDO): Ensure that program status updates are immediately updated in DB IDO * Bug 11779 (API): Incorrect variable names for joined fields in filters >>>>>>> ./icinga2.changes.r55- update to upstream version 2.4.7 * Bugfixes * Bug 11639: Crash in IdoMysqlConnection::ExecuteMultipleQueries - changes from 2.4.6 * Feature * Feature 11638: Update RELEASE.md * Bugfixes * Bug 11628: Docs: Zone attribute 'endpoints' is an array * Bug 11634: Icinga 2 fails to build on Ubuntu Xenial * Bug 11635: Failed assertion in IdoPgsqlConnection::FieldToEscapedString- update to upstream version 2.4.5 * New configuration attribute for hosts and services: check_timeout (overrides the CheckCommand's timeout when set) * ITL updates * Lots of bugfixes- update to upstream version 2.4.4 * Allow to enforce specific SSL versions using the http check command * Add "query" option to check_postgres command. * Lots and lots of various other bugfixes - gcc48-c++ is now required- update to upstream version 2.4.2 * ITL Additional arguments for check_disk Fix incorrect path for the check_hpasm plugin New command: check_iostat Fix incorrect variable names for the check_impi plugin * Cluster Improve cluster performance Fix connection handling problems (multiple connections for the same endpoint) * Performance improvements for the DB IDO modules * Lots and lots of various other bugfixes * Documentation updates- update to upstream version 2.4.1 * ITL * Add running_kernel_use_sudo option for the running_kernel check * Configuration * Add global constants: `PlatformName`. `PlatformVersion`, `PlatformKernel` and `PlatformKernelVersion` * CLI * Use NodeName and ZoneName constants for 'node setup' and 'node wizard'- update to upstream version 2.4.0 * API * RESTful API with basic auth or client certificates * Filters, types, permissions * configuration package management * query/create/modify/delete config objects at runtime * status queries for global stats * actions (e.g. acknowledge all service problems) * event streams * ITL and Plugin Check Command definitions * The 'running_kernel' check command was moved to the plugins-contrib section. You have to update your config to include 'plugins-contrib' * Configuration * The global constants Enable* and Vars have been removed. Use the IcingaApplication object attributes instead. * Features * New Graphite tree. Please check the documentation how enable the legacy schema. * IcingaStatusWriter feature has been deprecated and will be removed in future versions. * Modified attributes are not exposed as bit mask to external interfaces anymore (api related changes). External commands like CHANGE_*_MODATTR have been removed.- update to upstream version 2.3.11 * Function for performing CIDR matches: cidr_match() * New methods: String#reverse and Array#reverse * New ITL command definitions: nwc_health, hpasm, squid, pgsql * Additional arguments for ITL command definitions: by_ssh, dig, pop, spop, imap, simap * Documentation updates * Various bugfixes- add icinga2-rpmlintrc as source to spec file- update to upstream version 2.3.10 * Use the command_endpoint name as check_source value if defined * Various other bugfixes- update to upstream version 2.3.9 * Fix that the first SOFT state is recognized as second SOFT state * Implemented reload functionality for Windows * New ITL check commands * Documentation updates * Various other bugfixes- update to upstream version 2.3.8 * Bugfixes- update to upstream version 2.3.7 * Bugfixes * Feature 9610: Enhance troubleshooting ssl errors & cluster replay log- update to upstream version 2.3.6 * Require openssl1 on sles11sp3 from Security Module repository * Bug in SLES 11's OpenSSL version 0.9.8j preventing verification of generated certificates. * Re-create these certificates with 2.3.6 linking against openssl1 (cli command or CSR auto-signing). * ITL: Add ldap, ntp_peer, mongodb and elasticsearch CheckCommand definitions * Bugfixes- update to upstream version 2.3.5 * NSClient++ is now bundled with the Windows setup wizard and can optionally be installed * Windows Wizard: "include " is set by default * Windows Wizard: Add update mode * Plugins: Add check_perfmon plugin for Windows * ITL: Add CheckCommand objects for Windows plugins ("include ") * ITL: Add CheckCommand definitions for "mongodb", "iftraffic", "disk_smb" * ITL: Add arguments to CheckCommands "dns", "ftp", "tcp", "nscp"- update to upstream version 2.3.4 * Bugfixes * ITL: Check commands for various databases * Improve validation messages for time periods * Update max_check_attempts in generic-{host,service} templates * Update logrotate configuration- update to upstream version 2.3.3 * Feature 8685: Show state/type filter names in notice/debug log * Feature 8686: Update documentation for "apply for" rules * Feature 8693: New function: parse_performance_data * Feature 8740: Add "access objects at runtime" examples to advanced section * Feature 8761: Include more details in --version * Feature 8816: Add "random" CheckCommand for test and demo purposes * Feature 8827: Move release info in INSTALL.md into a separate file * Bug 8660: Update syntax highlighting for 2.3 features * Bug 8677: Re-order the object types in alphabetical order * Bug 8724: Missing config validator for command arguments 'set_if' * Bug 8734: startup.log broken when the DB schema needs an update * Bug 8736: Don't update custom vars for each status update * Bug 8748: Don't ignore extraneous arguments for functions * Bug 8749: Build warnings with CMake 3.1.3 * Bug 8750: Flex version check does not reject unsupported versions * Bug 8753: Fix a typo in the documentation of ICINGA2_WITH_MYSQL and ICINGA2_WITH_PGSQL * Bug 8755: Fix VIM syntax highlighting for comments * Bug 8757: Add missing keywords in the syntax highlighting files * Bug 8762: Plugin "check_http" is missing in Windows environments * Bug 8763: Typo in doc library-reference * Bug 8764: Revamp migration documentation * Bug 8765: Explain processing logic/order of apply rules with for loops * Bug 8766: Remove prompt to create a TicketSalt from the wizard * Bug 8767: Typo and invalid example in the runtime macro documentation * Bug 8769: Improve error message for invalid field access * Bug 8770: object Notification + apply Service fails with error "...refers to service which doesn't exist" * Bug 8771: Correct HA documentation * Bug 8829: Figure out why command validators are not triggered * Bug 8834: Return doesn't work inside loops * Bug 8844: Segmentation fault when executing "icinga2 pki new-cert" * Bug 8862: wrong 'dns_lookup' custom attribute default in command-plugins.conf * Bug 8866: Fix incorrect perfdata templates in the documentation * Bug 8869: Array in command arguments doesn't work * Bug 8721: Log message for cli commands breaks the init script- update to upstream version 2.3.1 * Feature 8659: Implement String#contains * Bug 8540: Kill signal sent only to check process, not whole process group * Bug 8657: Missing program name in 'icinga2 --version' * Bug 8658: Fix check_disk thresholds: make sure partitions are the last arguments * Bug 8672: Api heartbeat message response time problem * Bug 8673: Fix check_disk default thresholds and document the change of unit * Bug 8679: Config validation fail because of unexpected new-line * Bug 8680: Update documentation for DB IDO HA Run-Once * Bug 8683: Make sure that the /var/log/icinga2/crash directory exists * Bug 8684: Fix formatting for the GDB stacktrace * Bug 8687: Crash in Dependency::Stop * Bug 8691: Debian packages do not create /var/log/icinga2/crash- update to upstream version 2.3.0 * Feature 3446: Add troubleshooting collect cli command * Feature 6109: Don't spawn threads for network connections * Feature 6570: Disallow side-effect-free r-value expressions in expression lists * Feature 6697: Plugin Check Commands: add check_vmware_esx * Feature 6857: Run CheckCommands with C locale (workaround for comma vs dot and plugin api bug) * Feature 6858: Add some more PNP details * Feature 6868: Disable flapping detection by default * Feature 6923: IDO should fill program_end_time on a clean shutdown * Feature 7136: extended Manubulon SNMP Check Plugin Command * Feature 7209: ITL: Interfacetable * Feature 7256: Add OpenTSDB Writer * Feature 7292: ITL: Check_Mem.pl * Feature 7294: ITL: ESXi-Hardware * Feature 7326: Add parent soft states option to Dependency object configuration * Feature 7361: Livestatus: Add GroupBy tables: hostsbygroup, servicesbygroup, servicesbyhostgroup * Feature 7545: Please add labels in SNMP checks * Feature 7564: Access object runtime attributes in custom vars & command arguments * Feature 7610: Variable from for loop not usable in assign statement * Feature 7700: Evaluate apply/object rules when the parent objects are created * Feature 7702: Add an option that hides CLI commands * Feature 7704: ConfigCompiler::HandleInclude* should return an AST node * Feature 7706: ConfigCompiler::Compile* should return an AST node * Feature 7748: Redesign how stack frames work for scripts * [...]- update to upstream version 2.2.4 * Bug #6943: Configured recurring downtimes not applied on saturdays * Bug #7660: livestatus / nsca / etc submits are ignored during reload * Bug #7685: kUn-Bashify mail-{host,service}-notification.sh * Bug #8128: Icinga 2.2.2 build fails on SLES11SP3 because of changed boost dependency * Bug #8131: vfork() hangs on OS X * Bug #8162: Satellite doesn't use manually supplied 'local zone name' * Bug #8192: Feature statusdata shows wrong host notification options * Bug #8201: Update Icinga Web 2 uri to /icingaweb2 * Bug #8214: Fix YAJL detection on Debian squeeze * Bug #8222: inconsistent URL http(s)://www.icinga.org * Bug #8223: Typos in readme file for windows plugins * Bug #8245: check_ssmtp command does NOT support mail_from * Bug #8256: Restart fails after deleting a Host * Bug #8288: Crash in DbConnection::ProgramStatusHandler * Bug #8295: Restart of Icinga hangs * Bug #8299: Scheduling downtime for host and all services only schedules services * Bug #8311: Segfault in Checkable::AddNotification * Bug #8321: enable_event_handlers attribute is missing in status.dat * Bug #8368: Output in "node wizard" is confusing- update to upstream version 2.2.3 * Bug #8063: Volatile checks trigger invalid notifications on OK->OK state changes * Bug #8125: Incorrect ticket shouldn't cause "node wizard" to terminate * Bug #8126: Icinga 2.2.2 doesn't build on i586 SUSE distributions * Bug #8143: Windows plugin check_service.exe can't find service NTDS * Bug #8144: Arguments without values are not used on plugin exec * Bug #8147: check_interval must be greater than 0 error on update-config * Bug #8152: DB IDO query queue limit reached on reload * Bug #8171: Typo in example of StatusDataWriter * Bug #8178: Icinga 2.2.2 segfaults on FreeBSD * Bug #8181: icinga2 node update config shows hex instead of human readable names * Bug #8182: Segfault on update-config old empty config- removed Use-Icinga-1.x-Apache-conf.patch (fixed upstream) - update to upstream version 2.2.2 * Bug #7045: icinga2 init-script doesn't validate configuration on reload action * Bug #7064: Missing host downtimes/comments in Livestatus * Bug #7301: Docs: Better explaination of dependency state filters * Bug #7314: double macros in command arguments seems to lead to exception * Bug #7511: Feature `compatlog' should flush output buffer on every new line * Bug #7518: update-config fails to create hosts * Bug #7591: CPU usage at 100% when check_interval = 0 in host object definition * Bug #7618: Repository does not support services which have a slash in their name * Bug #7683: If a parent host goes down, the child host isn't marked as unrechable in the db ido * Bug #7707: "node wizard" shouldn't crash when SaveCert fails * Bug #7745: Cluster heartbeats need to be more aggressive * Bug #7769: The unit tests still crash sometimes * Bug #7863: execute checks locally if command_endpoint == local endpoint * Bug #7878: Segfault on issuing node update-config * Bug #7882: Improve error reporting when libmysqlclient or libpq are missing * Bug #7891: CLI `icinga2 node update-config` doesn't sync configs from remote clients as expected * Bug #7913: /usr/lib/icinga2 is not owned by a package * Bug #7914: SUSE packages %set_permissions post statement wasn't moved to common * Bug #7917: update_config not updating configuration * Bug #7920: Test Classic UI config file with Apache 2.4 * Bug #7929: Apache 2.2 fails with new apache conf * [...]- added Use-Icinga-1.x-Apache-conf.patch to fix apache configuration- removed icinga2-make-apache-conf-flexible.conf (fixed upstream) - imported upstream spec - update to upstream version 2.2.1 * Feature #6709: Support for arrays in macros * Feature #7463: Update spec file to use yajl-devel * Feature #7739: The classicui Apache conf doesn't support Apache 2.4 * Feature #7747: Increase default timeout for NRPE checks * Feature #7867: Document how arrays in macros work * Bug #7173: service icinga2 status gives wrong information when run as unprivileged user * Bug #7602: livestatus large amount of submitting unix socket command results in broken pipes * Bug #7613: icinga2 checkconfig should fail if group given for command files does not exist * Bug #7671: object and template with the same name generate duplicate object error * Bug #7708: Built-in commands shouldn't be run on the master instance in remote command execution mode * Bug #7725: Windows wizard uses incorrect CLI command * Bug #7726: Windows wizard is missing --zone argument * Bug #7730: Restart Icinga - Error Restoring program state from file '/var/lib/icinga2/icinga2.state' * Bug #7735: 2.2.0 has out-of-date icinga2 man page * Bug #7738: Systemd rpm scripts are run in wrong package * Bug #7740: /usr/sbin/icinga-prepare-dirs conflicts in the bin and common package * Bug #7741: Icinga 2.2 misses the build requirement libyajl-devel for SUSE distributions * Bug #7743: Icinga2 node add failed with unhandled exception * Bug #7754: Incorrect error message for localhost * [...]- imported upstream spec (`python-icinga2` package dropped) - added icinga2-make-apache-conf-flexible.conf to make the Apache conf work with Apache 2.4 - added new build requirement libyajl-devel - update to upstream version 2.2.0 * `python-icinga2` package dropped in favor of integrated cli commands #7245 * DB IDO schema update to version `1.12.0` * [GelfWriter](#gelfwriter): Logging check results, state changes, notifications to GELF (graylog2, logstash) #7619 * Agent/Client/Node framework #7249 * Windows plugins for the client/agent parts #7242 #7243 * `icinga2 feature {enable,disable}` replaces `icinga2-{enable,disable}-feature` script #7250 * `icinga2 object list` replaces `icinga2-list-objects` script #7251 * `icinga2 pki` replaces` icinga2-build-{ca,key}` scripts #7247 * `icinga2 repository` manages `/etc/icinga2/repository.d` which must be included in `icinga2.conf` #7255 * `icinga2 node` cli command provides node (master, satellite, agent) setup (wizard) and management functionality #7248 * `icinga2 daemon` for existing daemon arguments (`-c`, `-C`). Removed `-u` and `-g` parameters in favor of [init.conf](#init-conf). * bash auto-completion & terminal colors #7396 * Former `localhost` example host is now defined in [hosts.conf](#hosts-conf) #7594 * All example services moved into advanced apply rules in [services.conf](#services-conf) * Updated downtimes configuration example in [downtimes.conf](#downtimes-conf) #7472 * Updated notification apply example in [notifications.conf](#notifications-conf) #7594 * [...]/bin/sh/bin/sh/bin/shobs-arm-2 1626360009  !"#$%&'()*+,-.2.12.4-bp153.2.3.12.12.4-bp153.2.3.1 icinga2icinga2-commonAUTHORSCHANGELOG.mdNEWSREADME.mdsyntaxnanoicinga2.nanorcvimftdetecticinga2.vimsyntaxicinga2.vimincludecommand-icinga.confcommand-nscp-local.confcommand-plugins-manubulon.confcommand-plugins-windows.confcommand-plugins.confhangmanitlmanubulonnscppluginsplugins-contribplugins-contrib.dbig-data.confdatabases.confhardware.conficingacli.confipmi.conflogmanagement.confmetrics.confnetwork-components.confnetwork-services.confoperating-system.confraid-controller.confsmart-attributes.confstorage.confvirtualization.confvmware.confweb.confwindows-pluginsicinga2-commonCOPYING/etc/bash_completion.d//usr/share/doc/packages//usr/share/doc/packages/icinga2-common//usr/share/doc/packages/icinga2-common/syntax//usr/share/doc/packages/icinga2-common/syntax/nano//usr/share/doc/packages/icinga2-common/syntax/vim//usr/share/doc/packages/icinga2-common/syntax/vim/ftdetect//usr/share/doc/packages/icinga2-common/syntax/vim/syntax//usr/share/icinga2//usr/share/icinga2/include//usr/share/icinga2/include/plugins-contrib.d//usr/share/licenses//usr/share/licenses/icinga2-common/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:16710/openSUSE_Backports_SLE-15-SP3_Update/3a8e62b2221e19b6a8a6d409f6479f26-icinga2.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5aarch64-suse-linuxASCII textdirectoryUTF-8 Unicode textASCII text, with very long linesexported SGML document, ASCII textVGq24rj{logrotateutf-8817d0b3ca70cd51d967a95d7672b6c153653cdff94bdad0d404e333e17872a61?7zXZ !t/䏼] crv(vX0M}t ؆T(@ϛ1Z%zͯ9LD=rl6UaLsp &[*cbP*cQv:'C:1>B]tD0 b#IhC! ;KlI'!NW#CC[_Җ_»owڽjg) ^Or.)g*!4bE4ۧRg<bB ţ@F(,8 QwU.ƍۡjͰsWE[w`Uv^&A=Q@}Ff%u27Q 1V=ˉgUb9ҠK?7=Kw>2Sj?GX Ff҃e&2r-且kr Nb&oɏ9xCx,b&7i{#m3K=넝zN} /ero3~!W0tea2 ! AksE> 1( a>CiwmTٜ.3\)Y&GJ }˞M%C؁<"<I <[  Jp_D0ЅFW1)ⵄdbWI|@2%ukJ@Q6$)^((̣wdR8PuEaH|TRlw-A[8 ^woOK촴ۣ|+ G׻ch <d.D 9tZ|]AAr`pSK&kXwmsIӝ]filpG@2:HwI%TE&Pqi*aoxއ+vWP_TMYfKlKL>[S2sHV_Ǽ_[Ԥ@ +o=$&L ]wD*:u0y 2g˔p+uu14P߰&ZW0a)e ve+O\Sn(*~0~ciNn[,TSd Ww+Rm۫~K Q1`t>ܳ2Yo_khoVm<#Fbo9*3u]CVY%")YqMO7Ssݘҟc;"R-,pkys{/ Seb{8X '/w/ j#̞mzr蟾A|b.ksgߒ9I(+<[bJS, %C};:4t0{ٕk'cMR ܰ]ܢS{LVc+jś6C~8a~ >8Ŋ 3a"Zm]T*ryܒz)`Yu 9E~^ɽĀ=ì~ț 7|&îM@ *u/( O*xje EyBTB`{Li+.g 1u^ Hf0s6Vf 3Z;l r?X4Dɇo>51SݟV#@AJ@%ŌWd%Btzbٳ,]9F6ÉU[.Y?)z͈lZDqX2[ZJaņ.G(\iֶ1=֞Ѩ4䄻_  DĤu0=>^}H[@ED{='wXPԩYw>qhqʛ@A|K>S ɑ^;ɫz}mHì:ġ tV-sŠB|{3x%ɥZׄwѼQ}uظ#۹QܷYbH2( _giݟum$8Y*y"39ɷH0i~]Ä$CA1Uil,to FO,uXk48ˆ,FQY ssJ?H9BMLڢ U, 0=0)MQ:KvP]$.{l;%KSgnx_kSc[jZ$Oi@8JAg٭,-%jVY riնt}wib4d:M꦳C!륤onM Εѩ=y;GqX_+asoHk)bC_Tm}-Qo>(1o  GZQzm;@کS40ؿf$yQj;\QxKW} ̫q oDp%< 4shudM?Fc2-0 &[8J#n/+.7MmO7E EG̸ydE)le4(`-Nrl|C#+<_jُ܀O 2sc#Nɒ9*XŴINhS˄~T &%.P,-lM_%)6 LI{uH_ ":'@@|󅉌55/v#BQ\ H&IR7BwfQfQDPhuK%ܩg uokSlye9%Q>m5r;U. LgP[0آiT8LlP".Z)Ǎw,Iɡ{sU12$qGrvFshdw-Zj_/3#61`Gw'prA"BZla` 9 EX*g|L;,bnUsd7Tf+LgJ+M 7%f)8 O{7Qߙyzx5'hW6H8/Cpv!Jr]d|cy9d1H+1N}(jNN\0Z ´Jq7އO \իכJelwGީA+B%]FW 'pC|O7 %+ *^\& [0.<ۥQ83VF,(a- uS^EQ~PDCqr7R[a,u-+J稣4ZĞ܃' a+rX Uņ@)CT{БcgBo05`k/+ Y =T|B\9htJvCLTBOt$Y+vF ҸC)?gWSkt^8|j|`pq3Я+.$_ G)LN; ˢYB!`DM\!3`\58z I8niՉ`pMOkDi>s+"դ%#~RR"w4<$gq&b;tNBNHU*E׆,dzȍlK}S*dGBzm&+2Bf҄ y6A_(¯zK|kshr{=)wSk|O*GG)%F+ۗ=Do)9$C>kx5Wp*h"9E/IT-aKe򭳻vQ8hTmM#T19FV@X%lsE' EҎLok9* ?<@Í>r=?YUXwi&|, cRI5 o7b_9aD7Oi*20J-^Wa䍊<Ç/Ng_ο{'Cwxē,DG^ƅxQY2&PU? ZIc8xG"+X@jR[%-Bğu5YR(|)uTGD嘽شm Z(%P2,2. ,Q,6DF+}VO">wlX>L1:q-$v=AsB\X?kk+V:wEzN@&l!Mrâ86NFcַ5RC/(^NMY6@X tɘOXH#dSB;~4 ނȡ[B\uQU#y%~bQuzW7,}>ntQ3xD#ː!3x9rxc$G#뚼@ːg|UH`dd=ڷ_ R/Hp96zv_Cלʆβit4k^n#*pKj-Ԁ,mO'dg(} s憰QKE] iZErf6L}I1i8&f0{NE OփaѯG|%¼ꠂzo;*Y! ia@q;N`Y2FKj㞮,2h$uW 5othj[xWvy҅3pyA/X`N3# jZ.P}EOu8LT9*;pr{ӹupYQЙC(- Οҝy%jmĪfM;+gb&P]IH߼<ǎ9@a%H{}hsKVn-RWvHeRWnP vtlߵ&])ݨr>)is1»1`b)qtq9OP^qC?guWb:KgE+Zp= ^Ļ!^OZ N^0~u|n3p AMD'P6ə{- %WL3( GDY1R /#[dzp!pЁ /XꄒuӌMrhރ{ITAMT9^'D.UmtC3f?s^ᯃq}Dߞ`&3*tyReL)FPaЇvt"{~{J#}\p=eTR;\nظ]?_ר5To-*˿4qGo5l7+o^g移Qb_Fl>#*0Kw䭳^P[9Ž埥'1yΕG)Hj4y2 ϠHvRG6a{.nLXPMkޤ3,Bb6N.*0FfIuϔPaɳ彑88 E!; 6kLEs.έ,.3oDQdhp|-4bntBr~T$Df'XenNFDmL>~<(`V|U[1Xs[.%<t3jU-H~.l9~J;У6efka,:yM>͒.ۘ:Y{#Mga[O#[{!&?2D `Tђ6h+2Ih*2f7+-NZTz(1\o=&MCƯ&X`q8l{C].ԥ[ Ξ_|{g}sstZZR!% %xf'8P=f\#Km][Tr Xt<;p+THuLgӶbnD[ B<}8[nwRRudy֙(K(#Fٙk7u?Lٺ5{t-,C*g2i r0(=ћtx?ՒIuEuͿl{NTn };Ę;TErEξ/M/\+K0u 5`7-وT33 y,?LP'1f]hⳊ?jo%A]0j*cR.*TE=Fk&cV+.˦Ƣ09(?3l} U;5% !# '.,"m`uL3Y؇p\̋ eg2RXUE4;VbhDmh4 JA6""pK K8~8M٧dXJڐ<WI8XSq@Xz/$w"+zi+قP6XÈmŤׂg7VYaV3H?+WG Hypǐ ]FU ޤn,.Gxˏ'Sʭd s";lm>'(Bb)e5(^Y+"?WpAC&ƇBO)׺.YHpT"4}xST֛̟ /R[pvOܩ0 4J90m"Q XA\M̥6|ٞQ7fUv8 JfO*:{a>,6ǒc7LСqL\eeBZP><8:RDeLcr@1Py[WER겓 ċюհ#94^OϮ>Y p5P.3,3UW Sdy,F_`kyV!Q:; 3?Ւ)ƖbqaRx,Zu+`3)[Dޑ"8)޿i酫} :y{qAaԃr4!b5 0M&G;Ǝ&47 y RО1>oă"fomdT0-jnֶc=%=F,7w*Wۅ?i1dEbBwk3OJOǔhfk}.̀6P4(T'}S!u%Pt$PJfpl$]frR䳑SeA82 6 `W#gD5iP- w<|<➴=#)!UD ϨN xFgBZ*O#~+\4CmOEs]zڋCDsc]V&8~_LSAM'9dp * Xe^XXU ӫt*oӑ,M"E&ηs- V*IHd<eyS,OpC+PH0l8.}B L$n-)!F0Yv/oW; `e윴+2y8BtԄvRvO9i월eq m)5FNjh+hOVϩfE߱>?=%+.cKQO:=vȈ+ҁ0^n*u^?Smb7 ;vDYnf2=a/\ڹO ݝa P,}9S/bW.cec w f='(.V;ܔƘ]ѩI+sNu: T[ [lT@@ɯ{~:Tf-rH;wvS(=E gARx3dd)I3@0薒Ȝ^G(ʇ^XW] sR0S Fnor:ioCyGJ;|BXWbϫRI 廏xņ y3.Coa}$%6k!0وVR=713j&d uC7&_|m)/@_Su뛫i1? DIs.P44! ?b*s4Vq AwupZ(,ZsHl @bl dw һi(2; he ob0~5^=GYr9 -(6elJkV;)`}e 9I]I9}Jw$#o^ZvwB}}Tסl7v ם`@qe[2 @8J uS ʉi#xk;Th |)l0pp3:ńZXN fE[C;c)\x[&ΑvK1YD):[iŮ3֎$ٛg]'-ճvI!Hض.3l3*Xӈ`h[ q0p|8޽|lk8Aqyuaűw˾01ieSQ_˲nT6_skV7仺(o=<&Պ&Gtٲ~^rxHeF)eepQagY/b7U2n2ehb軑‰^m1m0ՖxR\][pSn4pؔ9.vppQ-tOw-P"+]LS4WfUƑdrQBΙ!qir0/6L/|AGzF=XWd-Cģ-}!|13" W3fRH㡵A$,7YEOU%12Gi_IG(:%Y3h~Rr$ߵQ1%^38e.W:dV cjk<}E=8$X`F¾j{ 8yW3r=P>7oN[;/ l? 'a;3lVP8?H_W^#,oNb=Lgt* P|OuH )]NV҅ ъo' ùF;PAiͯ2"xrD\FS Rm:B!envz^C'(Bf7 $3$ȊqF@AHu4Ñmj=9X @uU^PpRHUg, " רj|u ѕ͌8UdoԣP xQj)f;(Hl=wnV2ey /Z SPM@q$gaYLHDSχϣ%QSD.0 i`hN~ H _;zv~a@*?'51cJg+yUpCǜh1pK7 # ڀoR92 llfCͅm(S5_?բ|$c5#g4eѴ.Yޠ+x?!dx9p]N<ʢlNl#w#}l ùeyAv\zo&ר1/>~lvRrAD,ҊmYڣ#.4bQ@A}Q)@lhxT~lSݡ\$2Q9ʣTrjJj qa)ꋋ*)#O/ Q\<ԉ[NhG T@B qFOVEp)[<6ڰ\1r+#"̗ɢllF8鱽Pbn3UTT'q┛ `nǻdu7x05ormS ^ ̫cPE޼ '6$k[+J4iE ä&}o99S=Cog &:;t $vj/at)pX?^~h1g[ǡ}*~mQеIJ'O9jR)&(:>Kf N24,S|"JԼ 4!=rF= 4/ 05-gB;%PN\&E۝tj;2-K0jhϓ $|Iv+ }1C,4\9!<,֘Ҋ~/C6f+J{jM0Lex X :]ȁQ 'X|9%`GLCo N4a{ ѹM V]so)f?&8 ̾7v;YMZPEFWqQr`$7s1ں;5>D><5W\z>û`y'aw%_YN=#sK͸%_ؓM#.q'크oH+Hndm?GׅՀp8̊eȝ$M$EE~ JexqG$xdٴt873AeުzgZ%{ҐC.~)UsA)?v)Ǥ$-QPlÒZğANbi]L3Wjۗ$o:¾( z;Ȩb ;z21}N/X#ByWrdqj#TllCk7U#;1@=DAݟBpUGV90?ѦDh]$gǥ?9Yg 9T@ #tE-WC mvdD**% aJ$Ksm$χ p6K[ 7iciNJs6>rZW7lF[Fӵ8Cplܵ4!Yym*Gbsijޭ:7pJxjvH2r%]k3MS%UA`EaV6coYtwp} iuja$"%Gb-MtH Θ.]reRO[vVHF=,mNyʥQTBaLVu26vMLZiL闪NR ЍҪ5BnΖ]$ӟaRڌY_c`Քz]{{R~51H.jCZfO ␎,n8 ϤQ< Oԝ{3ǭWFEpBT9~PӳW$S h`iQ" F D $8gK '_S!V3U>T.ry>ČNmt'iToy+upb鄵S+'zT/]YÈ,x8q$[Mĉ7Z9a*tkޓ@9E%qjFm,K[ΰ&d⽣F^2ڬm(NעMFTw EU-dLHfFaw"8 -lQby&ؾM ~djpn@s#v"8tl&8JPG:!v&.ɺK0Ѽ5>T\k@o`u p+)ĩ>αN2vfTmd.*F+ w,؝J蜣Єr$+ʋ-H&QD]LAA2nbOm>2m]*;iT) ,e޺N@Qڔ,D+6#`G_[FŸ&DP 2]>+HM}YCB-e븰ܩwpg\fQ,F$'6(tJz!/ 0$ qt~pmrguI]0HK:/ر\NH:ZC\/$B  ~~$|ZOy!z P!xzeB՗ TƮ!f><$B;qxB4*V@/ s/ m/~/UY-/=8O2P44óhV1Lf2ER~PQ 0Isb!v _jqGxx=wtaB%,M7VFp{p3,*ۙd#tVV7RxKmU}vg=^fKaHk{"yc(ۜs@r&5&&2Ʋ# eW1 %G0{FWGk(q >Yߢh2xK C/ó5)4Kp7x.㝮Y}^ d##пn> BsFn{q4|8<; k9Js m KWR\Yvtg-@Ů/n+s(#9,"Uwv+ *66X,^B4k>dաd= %+s\:,EP@nԽt,FDqwB=/A4܃mW CK ,C4Qvz8)gXe+F|b54 Jَ>|,ۜ*a.m糡ޢӀLQZ12'#dc`kAE6\0 fx Ro=>ATrl-,4bocuAdsIcVR.i` My,&LfoCGtl UTh>PwzprƲ!?2$u33(Nd!:+ &TD3+1q}LmiL0DQc ޴ =BpΑŠ@Y^xp[ưd'stPz')%"󮵗1j#'7nP*(N 9Jq.и m6goner/^p6:Z* {Yp#+"Rӽ,_ (2b@l"&Z$w%ɤ9XWxd۟QkW ۧdk%ŲR 1!ڌ[KX4s&$}€Ka ;RP5ݭ\FRo{0rrvg0cCU{6##Q MLhk8{J/CQFMS)u똭Ç=G//+á]υ6]g@ʼAQVA9{D໑0U0@C\I y| *]8O[QTLb6fi%:8{mDߟ{|t:@D~r0ʣ{ArKc)`s-Q|f~ҍk(2iYh˙H?.RH ?HejfrZW͟ǭ4)IB"A*]*pq%x1aE^HSԖS یʣ;Ž-P.ɍs5XN@;/nF/$bҋ8HU-S`kmAaxݷӮL?A$wOFˢ[SUp-l-/.8 CG%񖎦3 2bբcA?rcS==Dy t*֨\iNCuN$ ;FxCq״$jGfPuQ_~ nί]aijV8C "3eDm21'L wh2(eqT\V,ic! bQ8P.nuQylwiG4zg( Qt8gxjn `W|&Uf=ў-{^M[nv9!Gz?!`們޷pf|Q99uE16V{H +JB#CyC7ʃvà7*mqO` xb Z\~& ,NJǡ~eu9ON#Mga:Q:Ui8% Hz `NjP@BPLHvSܐ/UJ0Z4 %9Xo׋LKXt^-N^ U a懹@^y"MJ!eEu -}@X<0o9ݗ:w!eHEcC,er\0%&9T qK 1Kk)Ƃk\vMg(o$P7vҍΎ./kbk*쟦R[IPtvGE=r4btA[6j3MkhbZ5:,azv4Jb#{AeLUoy|Z~ s T{I'꽩꧴qIZW@šCr«lBT.*cpnI: F [pȤ7'Sg;2=c|3vb_˲Yє=A 'לG]rzOSw\A}e!㯤}ߎ͎a4Ѣp7iZH\0uEK1.]&T` 4^V@RSt ;mT M{YK&Wʁ?#P&O-JTUr~=~>MSkJY ^(]JJ:HV p즗8IB )Ufh{} \o{Dn2>+Y'^Qx}]'mn 867ؽ":J,k!4)(Gppx"}R,ꉆP^ $*o?&89@>.!s|吪r(ØjWSD|:֦]sZ^ʷo@"KS^EL8TÛKPiOѺЊY/zߥY ƞ?[tT: YtE MbjΞI w+eR=U-]6f +7iW>nxjq~㤋 Ajڊr[6 C ׄq~ֳs S dIh>T_v8{ܟ@@K܉󓃓Zyxҁ\fyfNlMYSeb!|Z#A!\`!dU%*!&m(~*z޾D1MkTn9'~:IKNF>rg)$ux~Oނ`h,}~~tJ^Skvw%!J uOy,Ρ߾=cj> 0{6m;)̹VƉ`q"(*yS*˸㏆%'ExΫ2Zo\,n:ON2x.&E*ټGI.kʏjvQM%sgԘXWKf9<|h{6IeERP[CpZcKpyR EZϸ.JU>0G"umi3T$BA=ZMM.}IFc]*@K8Rik,&RSHu7w8#u kx*fDrȐėc+garR E;qf▨Z|T:+GFR'ʹwT3B4(6WY 0MaxGՋ4]a BGWY`*bux_UUI'x0t`I*`ȪE)j'Lߌ{YILl9??{#1Aܮ4l*j̾ I,xſ e:pm#mr,&0_RN$'_xeW{0C=lxdʸ,GNR(J';sĭ}(i# &Mx[w}|pW S26!]v˟*\<Z}T33G kMpV@Cf妶f oBj)ЭMIqOL CF>X#,* Fh"'0”^Uy@;|J \):;+Fog+*mt8 <{m0 hk8x@R~aPuѱQ)a؀s4_߸lqL4t81Dx2G΃A f-<-sğdazx[.RVuv],Ok`Cvx},K| "=̮G'c+k)R(UM76 1.wI,Z;' j>sNZ2w)P$(aa7jD n@!Y宮uG:633eC,34gf8Eh ,SGQ2:S%:} ;ShU6;ύ$ P$X˧`z#~a2tIVRԾb1Yv'yԩT!E0g(_ 4On$%hvQöyǘ oݷ;YRRI 4`ړvM+%DJIGXTUw1s\^0%P?żAzl#J9n[]b(.ZsAm%UX X)un#PC: a~C&<&y b|z"@d8Q6eJ"YM =8F.FM9[{#0 H b$4@InkG 6Q\QvaHG^#S !^2F.SǍX~^Yp`5!Y9q$ J*_ 7J;q.[Ho"Z\)ӫb,~Q8A5=JKCCm0v&Yn!vVIj\Gq؋D]2#-9,,~;9DhoĘ, bk8N4ʈpnR]2z70'j3.= ^"MAfkU"XdffhEaqDc_bcWM]Fтd3!HRʍc>䝻' yRﰤ3?9CQ) FT Tۿ`0<5FSr2J:wF`*8-iLar(p5^@w~~!I}FM Kjy1&J”nke9r,L{+v|hx겯ȣD#ꊖVm=_95/HP#?V6ݤΒe좄M35s! od|}vT&sy~n0M2xP3C#4:Gq݉R,heP%Yj\o.t$8v`6Bdg8S(2< ~?v)P!9q Jm.#R'B,lPԮ(!_"k)|ыTJ_~2%}i6f̦ RZ" Ǧj'5fME5~YeVR}RswҚmh!+<:Y{;|$"S(pg5 @^m_*E}W8h8dzdϔ"tgbwGr`HH5(d]"|-8,m;S:f]u8 c܊/Zr1qLH1D-:+Rhv}$'"Zj(FU3눓Bz(<Ҥn?g8e|7BfA#IawϏ&ʿQPYY <~j՞eg9{zM& 'Y~)iךEv\~#3iȴzclLՋ}1;9IZBԒ0os=z6- $'Lq%HGpm5`큊ʛڍXwi/BrqJJA[&/oͥ"+R9'A䵰&oL(qi8HꏧN3 R)\ZviG +Dܻ\9]n:51BthoO~qQ^B[הϑxd\_Gf vžm&*m1h.ZUӋ7)Ope X1-EK{ԑGEr5133-oi`Ys|AmMޑH> sZ<3wY@HOzE>;.|~d9=Gk+;;f4[.>&@A;JN!ᙿ }vM[q|RȂ =e·A.P0+4JS/+I` p0봗![8Y4JiL8*SҘ3qiE_K!y9,5!2'WVtL:#kV.}ϗ NKt/_q#9s gesN-DPVdVT2}{  h1$T@3zl@^նqY[H@+"V;m1'K0dZ׃^jJ<)~^?noqNjVb xt)ϘL$iíFt, WoQn GCB1O{ٷۚ[u[mI$b>ˏ g՗.S•VҶ3_{9{adڗ`bOM/^4bfx/SwIz (K6?nǩq2FѠk- Ob̥ST>k=&>% hj" 3M[;\ө欗*f(ڸ-FrI/;m Ubf`-:kD$B%;h~n.4n6rV69~.(LVrc~ Q_B1ht:pI\mcgP|"ũuE ݾՕSHr(p-w G1Y+}O۰@$䶥 eE#nޕ^knkv("#X>^EsTu5N.MsyL+;^X :c\a.S*ş,Ry"S:"ҫ@{>=8ޫ(/ &3Ԥd\4Y=?_.:؝o=S )7)v#leA/X +&pK(M*~bu9p\itkO@ UӢ7g෎tǿcQߚ,C)7 <۾Vt7ٚGQHcm-L(6LKR(%0X{LQ a@I_rL9h>/2|X_1WlH ͛7/‹,N&L>ͳaMWu[ 3qMO6}Ix͡ni۾G'?.Tm6w>w_0[זX&NXtIGF(R\s(,ooc QȊ= b|~Xnzr~6s(z.iJ>` Q)WE@[2YHhĆ@t y5kKs}zn:Qن~%F8ͫəx2#ZŎ-]h 2ϯo+Y93*@S~%hef\KzQMfxYiǸ{\hMRg UC+hDF83*~ue[=ւz{4#-I@-|ո4,bg f%CY?nEz䌏OM8!` s%i r>kܙo縭 z)WIWC08 q&?Yj 85]\#W݌f_߽mkBEE+z!0io^>FAӟ䦨02d3#G$Y ~\sGbeiTR{toaL*bo8\8 $w<% M*HwUqv=E#sY%4t\Ď}s~esqroGhGA,=Tsm T pi+>w:1ucDPjV]WIh76!_WE`W,.egW4Cދ|W85<!R|E٦V>$:pXSjHkj́ۍc;>w]ҧ -XjYehp y\4~ RgJ'`XAăQ!DSHa<-:=oBڵeHyOpC'gFBs!~]aV_1̙#2' s o 2 3EޒR ŊΘʼnPw˃wԸ70LLͱwTn/ʶ|mͳ v)oAp} srI_/ cE09ZGVgbt3].*іbC9N Tyծi/^}ǵjRQM"|*p 5) nO=%CBvq>j!Pܲ j'ǚN/"=roGtEڀIf0D PKl{ :@v7Q:ޯkAZmI((0E2JО̺FqbV!;HWN̓tODd3u$V_MȢM _{hL͘\R≒6[BēaNd ͞_ePBU${|=I7OUB Af1;ڜz32F &>М̖4G& *S!)㎎!1EizB } *Sy~ٕ$a(-_OksJWn ˑ8 :]qu/ȃ_"̊B̭ {Co᥀ÿLL֡_EJMG1ߒH}/n΄(ʴzڦuQ9el-=.dh~XZL=D9}[Ee6wiV?D=bf'둣qNZIJg]3@[Ergi; %X΅e!Z9l~=5&v Xkg-u5ky&sx\u-t[e*' 6.qe 4$7F@B9,g۟3_m ?[]'̓RM $Lcylin2i1CМ8?Uێi:4 PL*C Uk_6ȴCƛAZIӍ&fw`Lߨ3{X;Vd`\ar Cн8Лej_mnb(u HOT 7un^1 ɮkTE1tOK!T@X:ޤ+e .6z taF,6/Pkl'әj5$n ,m쭟W{<%t/A91srZ;ru9܋$T3K)@[n ЅfHṗ9 ~Dsr =k* ׹2Uo̮۷沿nEϰ\}:SOzuq"8LySokZdh-;=h#d1sYJMb?=paQ睷}fĠJsVYQ#;|F &8БJaN+XmE6e}̿,#b$8 ̚nnw!@dϩ?HPަ&XO~N[FY6`H"k6LXضNX=(FƲ}ɋ+ҵ/l55{_)4)}yqWGհ4) [H+(|JNMKah5o _s1xm⿖=%>b&S"VtQ%MFkޕ:igF Jb mv} 4 @N D_,,*|^0B)Zdt<57 z6MSZV2?7jF^Ǥ&!CNTNS7 IH-VP$ɟM^ <.OTཾuX(Jǎݖƥګ26&J-GJ$]V-MNeLo듨ۓ\$/q߰dӳ3 ''C[tϼp`PLwQ+ʒB۞xf BHY_S noqsSH]k`ȨxVN1S{ب&`.N]zdX)Kf>kUT@C|CD{A=άoeJj#aϓ)@(@j1ًg5V[)`&>"Y1V_HiT tsf澙mrR H /֎h1іXW;~>՘$P ҩêQ ]#*)傿R`<;$w~/c.arhDP ~*?Y.j^屔ԌԿ=Ӯy^%j߮%˒ĩe [ZTHE !ic$(G_fUfzI2<{UB ~+diwlzU/iwi| ,y1>t^QfQR,z=!P=z<2̑kDHh0xX |(K9 xM/4I0yEnݟ/%OumʧFe 1OGfn:'w _- q7 _qHhۤmf,sHїEp}B{\Z%Գ1;jԻC~7G,N`1  xdP8 ZTmuLu9I{&j0)Dh˩7tD2,ٷ:ۄAY,A'Zf/ƃ /uMSA|cgMb4LDϺ؍ywci I e~($q{|d [<%n2hk2 *kWw-$Ԯ#aW&DGsbps(\A/# 4HgDPp,{LN- ,jD ]Y^R%f&KGI,b#&rӎ 8T\Qk]hLP.ƃmJ7wy)08w.l;@C1* %.Vi|#Q;w#vW= 5#Z`=f3r} ;~S)wPJRbs3WVs=J֭(m;"SBNd:5U؆7Ln5W!*u.^?uƎ<"*!p#޳.YXQfLKy߈*v;|ř>Wl5IfyUAQY-P2*"y-Cj5\PMU{W=b {{R+< t ʖ~3a1?ZuTD%ɟ vz|%ry%c$l*(;=iqXT* @Ԧ+BK<MiЮ7\#P~?^?=-{\S:b5{7Qf,dB(rq&t/M}qz :0 -Lj`? 2 FfE&7~2/XBxr!e|G)ͼ.UB+7_x}rʜ e6&NUO!yimqVtf+kXs7XdI`$궴F؃ .#y8mB?`43ҍNNo*_=Cr ړPퟒ>Hm7I9ӫ~e,-^?!M5s|\<"M{]2c3HGu]8`0oK錠kr I "Qf@MpkbՆ$˾orŽlj^GĐG).kO :+,Q'4} /,K}j^LΧWxqy=Dۤ ́)ۄ Go pgD?63~YDp GVŇ?+X pRdcog̀XD )oM:tYf'sH' n|6"6fo "B)vO/KٌÆ֯6DarX5=Й''\xngpcIX)qjgI\h ^HuE@so06C3f>YۡhQϺi*4gAmv"$eָҹQĬT:; ?\{O50o=}+f1SAY131nzRD@ Z \+ Vuhxb(_HBo({o.f!EAqLҡ |c8~]ǖ.K$l^>ԘS]DVs@~0{m9ն"*\aڟ~T$>&VRN-!J'+?/GvzE(ˁpR+S+t-}D@oCIfܾK25B\Oڗ^oJG{Y] rkv(P3 h!wK٬O3r;)^5\Fh7ZfdMg~GO rU4DUZb uni ֠lgp~p9Z;Cgcddp \ <.k?ȋHvSjeW#( +lYjC~7jV ohߡ ӊ fsp5cغ$t=gp4(Hv@]JÀ.zm $7Z8Ԅ|$?"%ͫa=}0$}(sMtrDDe1SfOx~ug,"/?D 95G<mg[ùP lV(ǰzA->г/ mc۷hU"* >n 2v1!'|WouCЪE=Sku͗Ed#P|ɠ2#YEV<(\ISOVÈwX2spf@~)$T{;&b^ qg8u;!x9U Z qlbf5pT36J>a g TFq'v[~pQKm6MN W*uU3Do~i "IE$ěQе΍緢3oAvLs^ ;jׅ>&ƅ{bOWp[dXTRpP)a8:7 q46J4 [i,/\ K.RB!X@cHPi^<:!? FZ2jv.r߶[vHT4j^fQ%߃@:FRxȃ \ #jxgW U\sC݉]CƘKw~Ғ8((Dp˘|c|.kG?C7>N-<})űas8/"_jaM 6ol`}b9!WsF qC]5'+&BrޞWgMD}Hӈi=="_utཪN5F=@pB@zu4"0Xl GJ1B.ODlq'H$ D#Θ{O!%:HwDϴ? Λ$9yB%25RՏ=ki<^mb+hl{,2YAMlKT.Z@\m:JyCo4e˅^u>N)IcwsyP&MZ 'klJ.,J-k./cГYeW y o r Lv >?( 6|W5.;xg!D}jm,P@JsM+1d@H\rӳZ|KM!ήJNf}c,,l2F`IVx;[Gu]Ye-/5FjEmD|v7[@Om d=˥n"8JNUb:cy@"L4[ǑIqٕ3)`%/8e23 Jp:Ti;q;oP ^б!3N=[)IN T&/e帐T|g]:DK{xp V+ YwGurn YQ~$"LQ=-ff%Tabe*T>5T~5zGC/2R})K"PD,B3N*$@ 5"}t<|7:2 F`[QM0eLP-1XڟX]qvl Ȣs˲͟}zFEt]f#a~_ n 1hf0]l^fxpn&ʎ T ޜ'y7z {'D옹~*̕V@pp4v1D髫ܵqHMLV n &V2arwlHrytIO-ޯ+ Lc`Q[]#N`A+! -L飿9^CM%Ub5kAakՆvzKo7 Tӊ=ˤA"QYe/LDG\H{2 Qݙ39-t/Et|ֳ4$3RJ-r'*!{Q>\l4Vi7_xX$|30DqwIE^5L SZ WKj25&K)fe{JKl J FKMZqPL)ǻ؏RE/ nvx%nu hGBZ:><>#T#qH6T}&yo:$Z.ޫ0ׇ8alun.?KB\VQ:0+n1gtOC~{tR<+G>uC@7˅Mrd@~ة4-ȯ'+Ȉb*PIĶ*^}UqԸkв.灸"֍1"ILkMD*-a^)kg07~(:aA̯W6*#7٦Pχ.&}-*O8XpS8Vh,$?[|ݍdaQ#.6Y4ec>@ymQQl ɀ}/Qexbh"2,8UӴNٮ#h+ a(;ch͂SPu': iTFp{tީ@=~r罊!$WϏ" ,Ji4TwYy0R%Q*7~t;Gz }[k>Y=n@A@e KrKFZ?](}&TO78t6C .m2h]וž;0 ~OD'[/ ΅^M-x}h8?6?Ef@T&/ CK|/"yͳ;((rVn3`ưM+ap rrHm~7-eDcA 4+ވ[DGH?[uŤ0ӎ~ MtAI-* !T)Hd Tyg[l#նy|kXHJ|\1X3/7z0I!i+Nk.ǻ'.fBN%C)ՠn)"zkrpA e֑+[i~bڸfK92S\E?8̚i<*(bfBa vkUqR Y;x>]asAhsAk:Tm<4ˏ:Xq]SmϜ辫6?6qe L_' ˞08Lp4i[̍beKUOp;k.6gz>!2/޿׻glp,f] fXsX1H~NGU,83$g{x~dkb֬4p0@M8!?m%Mūk2 *j9m<7#hO<7\j FPѕ4 Zbz7P/魇9 g%iH,>U"CodUhȵ IҴ(H1?hdK2Jn)@$gh?ʋr8SPUa|I8M󟰋<CbÙ Q̗xKcBǵu#vMREPS}bSS%iDzLUZD;!w~2Z+cr̉ژ}1v燐᠍c'ITK:5,_(^^,GXێ9Mjdq_Oڌi)bƗ{b L{Vge;ԯ[h尖vz̰N-=r3GJR"PC T "cnu@(&&ş3ՂIkCC>^#\FF\ Je'Cv0B dY]ygs̐.ц 6EgpeB5oLɿLC\!ߪMxcR tUdq.YFqg/vzpOR\aZJ.:?C _}o !؍ s¬ 6{l'g3 )3?c 9'pfs[IL$-{7>2{ :씜TAek;;O#W&l$+s1ax&*J`91Ѱc*2?PRww2 B%n.YaXP(,}&*&0;!VUA&+b;$Ө.L7fΟl1bUhX;<(K:y0N$v/J ؏o]Y杞b[glK\5߷&!O&Ԧ7iޖ/%`?F*1D>Tk78{??u@{Up!;.7(/0@q&.;V58㖞y* : 8#|.=_3*n HB( F/ͳwpv=G5;t7ǣW\"lqCĢO#:3-!Bqx͒הl rKo7-(nW+vhSGcQҸ-?s҃^= Gsr,ue*+"}ۍj#'󟕫L&$h3h}|T4l(49{modA MDՆ$!XgndO^K'{Rxj"X#Cf'}SLY)hIJt-\J [\H{ҝݰ*Xxsm\(e7Uk1aސo! ] "MCs*TP,4Q) =ܟ+GH92ELY oU{*u1)<`ƒ3p5KYN[aߤ\K&=lvوFc̚]ZԦ?>$Q͇yқT/R 9׶/G%g ij).DzCU~<1 L&Wj't%=mV| |!w^0/>2^dΝ20%"j+-.i8vh] .:ά2!!:j "f6 3.Ax`^T#wgr~~'{/@o,V/e6DAlq90NX.+9vM'h[,T$j/Tp~ƙe%Up'SD&D%9\ڰ 9gMbCgP@" ,C-*(FF1! o-:),z/pZ?*fUjJ $0?ee{abaY︙nC:+`jw9+V3^Yxۖ x$m-pWRsO+`kAΒ\mEhUcmRJ?i;r-!9HNGszq&X^ 'DifStq; $ƹQpS/h9٭r:>.":At#t_o!XZh'GqlL~u; {@c|g8x Eΰ c4N'/bORb%cϴ55ݼV ˆT܅߅(ĩ>P$Lo.jD%"WlP\*W/LŔrަB!RSHW#H܆Ol9n00+7Lk0sL*x|{CEB5s(;цA걿z"+*Yo\ )eVA|z 3"=2S򤏮J0wAE!zPÙ0%Up[ W}"=Uw>Yr06T|T%'gW qC4<,tŸ7aJ <IB}}lQ?,cTV#\Aگau Q 6#e*+[L/+ncEmqMs0_gL0pTT/=(00]NJ'Ec$Oϰޞʹy`־K4,+?bo2`P.7./gK&bUs7úg.sfG8:V6)fh'9ֱ=A<)-dP1ELrxKr`~bѐAgd:˞O_.#*`3=Y}2ēL~IëSFazo6rY1n3 HiֵjI8G;uY9Hcԁ ]̘ҙ$4yMrw`5ȹ27mҟc0y^Nt!䁯*#@v}ϔ6/lK"h~ITy҆c"V^E i3[5R3Ȍ274exS<P͢#ȦTIXfEj x?4'ɿe}su/$}r9_V]یHQw0 7#ڞb{osSQmwQ1#?Fe+f7WFOXTTk3^ƶ辥vg2K7Yo}.?`;[wf|f&* (q(!c';W`*L xk1BG{:8&kn\3Gc}[-J8.<>o|\_h( lg=o*==0!y[_dt~]m?C6X} VLP6QE7a6\c #S(ԭ$"VE!AQǃTWڢɠ.#5ujs5Űti4Zjrbρ˗T M3O)M{jf/u-]aĦGS9ͪ<9r9AN 8ΏCiJ,ۯUK*+ۓvBa?Îʝ]49Qk,TIkb=Ynj#Վv,cf-p^.pdokrqrx0vܪtr1½Y"6uHOyGJ3{oB8({nWY"P7uAwF}޽GE͞c%[A댽iH@Sk5:c^ i7P#y02w_'_ɲw*Up*v]PXxޱL`~YbrHRM߭܁,1Hj8D%Ez) W%n&f=!^Ća>sd;dZ EAOXsM? xwe[޽P~ȋ*R!CS\|9m $McŠ12k Uđn!p!%Hϴnq‚RڤGȗ$Ch@#00-&>0!@jYZ7`-^ {L[K l͡(Ume:^ǕnG5>"ҿ|> u5V YjktjbX? 6?$x't%rY4ƨ ϵOubG%C'p LHY@XW5"a@I _ERWq :'xxF%]eFq+nv0gK"r϶M~\2uxG*(%fm-+'%>x:#X)3wxw~"shcs`/"/?K:5ћ9:D@S|JJNx1mP|$M2#:U;GV۷GϷ1(9]<Q&,d E')` jAt73\;>;6so_;Sٓ=aFZ:{#]  ǔS&XiZ{P[Po?umi}bGԟlF'ż_t9 m^kY7'7cDze.a`㠾 yǥQ 7 qީEjITP? =\J(1/ĕk\覛dz'CPUeu GBVg@L1j &!__# h͈xg 8dڵפmqImWMDդ$bzspbt: 7S/C`†o%-l+`]\O$RbۃS&&gw wCyM >>߿sC|(Êmk.?ųNYy jn' ^k!6 k0!g£ 7D7ݮH5{XYe OFa1)j0 {XDiϖj7xmuk!qݽXV/:&LQM_&;m֝d u0L>I{4ІMX6ĒvUkoF)ƌJ)HY9C$xp*IY|R2b/[xYg!pũ 8d> />қk̲o?VAQ$(tK!"7 j!Ύ7?vP緈nYrR4;9:6GǙ̢*+.6aVjF3ɬ߀mڢcꇼ,r;^{2; |cmȏOs$Wl%ft@юcB^#I"iR:/^@X2pW__CYs6:"ѝ¥ \5jKlnRֳOhR A,=ÂK[C[fo"Aw:nH((:aW[qPT޼U[YqO1 <˔A\/waĨ~=KSSJ6'Nv!b,qǁ8*+-SM/I_Tg  0MzGMoG$3 C#9C>iz\ ^75,wJ`WT6cKMeLi1ﶛjd'oBע0;>!7.pB~bNdz[ܩ 3DMBMn*dud1 PBc&G4wvǦ =gQg>9 RK73ׇ: `zFe_h*P&Z |.y׶sKNK& yXi yO/84ci`,>J#&2V5Ac <ttJ 㤰qYZ@ `T!;D{l+Rf킑R*أkrx[If3Ewokf,{G~_n՟#2sQUz8~_,%/14V~1։É] 1߃G@ ,z8YtԕFU lʴ)BQq̐ X?+~ 5Vq 䭒#(00S/Id)e;Ut#s|PP&<.Q& Y8DC"އ`-imXQNt?;ho;҆MM(Wϐᑍd?o0GsX%!<a*ؒL!Hp&B2>*lǷ''ќ6Sb)kCp `e.P񄍇{OytT`9;[kouE ~M h:έw¦r&- &HXJXF fz eCMeXD49Իd>\u n]5xi~K3!S L+ ;$3IBk*Z ,F,~.,[ޑR =ZAÓ %,㛁lHNZ>IQLEY犂d <.)a~ ΐT\OS c)v`qK$awIwwćpAd,!}&4DL".,rL"fyY #06j.v28m+~fU9֠VwX$yGn$e11/\R`k{x|Nk?[pTPjw~Öh|fͭct+~*^Ӳcq!\гH!ާF8C%S V|o G(eiμ[VJqF]ƿ/zZKh$l>ڡ+kt B9#/.GvՅϾ/CNZHSZuVb_HlסK0x 7dJdI%m1 PדUjw|ή.D)\B1\沮U/Sŭx!㣜<*Ȫ7bx*/u2\WS05]iÊ93Ҙ_ǖP_{M3K|/(8?6ƩP@$'.{N"떽?gD ɞx{D}&m%jxz&\4o\Т}cA/HgIK NUN-hɥU`Z)6sЕMIi!NF-+ YO[%"NQwr`+@\Uv\M Qb/پӞm tWQkM%ΆS4!['6ZZG5 r@aGhBDG\PF&NWLIi@XgV*MOTTmt q)C,GIYwE2(5#-;<碏/eQє ƶF)?&*mc'i7j- o~X[U{e SdbO<~BF1n2B]{F9iCV{eS ͕^Br@\6 Zale%X&th /qy;8Ms1m2&j~)IO\}@M Q2k{u\;{]eۚHQ@_W`>)۲MdYJAG`.w8H[oJ64 N4Q+J gzQɯNꍛGC:9s6cх6=oXX+敲 XTk zk9#N3D7L!Ϲ%0.sk\l҄3*g;OTTҩ.<`f [i|heqG߷dU/υN4U/dX$g, CG"蛃% ,yhuؐB jBY~\4%\|Ɯa ;~_kv/HOjM°ǿw5֝; *ȣ`MmIXGt oGse[r*\"X?Ƕ,X7"Wcu߹ch2ނJk&Y Ab˼BxՍ6 @R(t+\o z|ĆTW'kh|D!fڬ۞ecA0qͱ= #L,FPkW ϭ4,UСqպ L]_5>ȴ Xlz6@{0.ieKTj#?^qci場b!3㓭C-].jU^Z3t4eM@LsR1իN- ֑<ObZ U]jwo _t^:u"o*YdGU̵]vV%l|?>̖C'^+k82$$0+Sx\Vn0dJ cZǂ]4&Up m9je2D?mpzѽ73:S쎶[Mi@ÔLˍgm.ݻ?|׻n:;jJmYuUgt}SviGԁnv|՞FzBlvT/trdVޏV"z諠m֛[ LG.gD <v"/ yYټOT5ko݅ed`>1먳`{D &"Wi#6STu/$g$ˉQ<>k:R2ZMw""'P{VQRU7G*׉]DDo$2=m +.BlIfUfOV,C'`N*z˯?N(myYZ{Bu bdF9YpOa)iV.'_}T> j<{oK }՛@J7ZH&v׹g6(b&Bu⏈rH8"1pRZZE.@.j_mҀV~+|WBhٞp,9p|_GpϪB#|Yh[_!;0?t*A"ҧ{ OdGwl3E8X>:Mn;ĪtL<ܝmU5IL,ٲK:Y.f欫jMGl֫F&DTܑk Oo6 (Zԅ~b%xs}|&U i"OcֳV?NjM{͝hDž (ҕt֊Ga:bq*#?+Ie!chYRA.~OБJK]lZn(R7Xl<㌕3e6-ԯ.!Xi[(ibޣ-̪7AyFv8. P/1V4m')K:r0n͖ߑOPr/NA5$eHMacPbɅiZhƿp1ͅnQ VD)vgw`Rm qK E$Sf>Yb ?H".xVli9 _~O#6#5C ?WiY[YooUUIstO>aޓ/A9/ WxR4Fn _Nʻyұl^x=;&8M1ŏܙVĤA0aգxp//i[&GC{Oko10,ߛF0IߢJWWHCH rBghjz/V9J|iftkv6/ZZzm}8odF3Xk473Ytvz8(`1R'_:vZ8a3Ce1vCLBM v@eE9Qʪh34M9vPnkJR al̹ B`Pg $bUG]5,nr{y4Xs7̅_#_̝s|a\ )ӼLۡA(KZN_bSK޽jEQO'm~:DNg/4'QT#H_wD 2 -TM%v? PbdvlL F[$.y zv2)Fy?~4vy ]vn0s*nqovgGS+C~ 1k_ g\RP9l%DnJ" qxhV̕pX_5w(E|RN qPC#{[f|Svc%'3Үi;X =x"*^m $Ű+ %S5 ySsF̈́U(.B*/U׸NU;(I-%i:FԀybc1P,h:_8vek|w]s.+GǪ$%Sn$NsPDt?NfmIH?9\";]-3e"Uru UM dT!( "r H@_W]7Rn.[D'ƒOʷ!¸>N_-rNN't*ySIP=9OhP䈶9jzZ-FJOw "ӍLS2酢.PkEꐧ4 7-ZAqDդ>Kp_bp8HKʜ{[o=CˉֈTt l'K]H\!ȕC4hX5ьsܼj펯z(Z܊YAMW~r ;v$jT_̓a]]3X<,`<%W1'c7+ET|wZw@*4ZY*("VNbt۶SxaZ٦x^:c>(S؝/V\ N8vh͝ uYp=c :'U;4SPs%or%]C'sHDEM$FM_|bs})w6+v*ٹq3f5RG>{[4M=a%Nefj8.C<|T|,Wag$f3Lmפ $f_DAA`&Rş8 eG^v%e3RӌLu*jW]R7y߸%](]87o [ALO!ͧ2h[P38D3gN"D/Z~w 9 B>0TG-N#HIM8OSRغ*tj_3HO*9f WkD,#k"3aAQL_2wPLLA8/A:ߺ8,F;u/j U@j7՗,<*Z 0 Z0,x5 VKաSy-OWM \eWqTcFmbJ rP;*i8Ŋmϯxi<'2 =Aw2G)i?d{htE|0\l^nG/~x\IXgAmNx_=-|#OIN >h]Hh)@վ@Eهm-?˔+r^^EƝvpZ p <N.֟O;SYSpɧT-^[6ʗJTzjֺ94?ޟ(?άi.XWBx1@ŷ˱}۪N "lWIw&.fb6E߼$U֧@L9[>wu QuVo .WARO{&?|Qhߍctnc j۠Ox5\U;@&J$R6q-'Sk] !k@FWH*J␅ Gyr>:(,ICAԈ~gԓ<慷0}s 8*3bTQ+TZ :j ;xVhtoLvA^dWjH۷L*R+|;! 2zro*3Lr}ms0LS/T֖y/12vÃ@vVSg%nGoFRïW W13rev7M|FR [MϴiDE`)3\.&4D'p9KnMKOϮ]~e 翺Rǒ]&3ƐaIsePB Wti,lXUX5ssNU$O3?+; 41%3hp_."ΌS\DPߨ5abͽL]SeP~m 0Pb*!Fy]fqEw~ܭ_Ò^v-WtX+8|_nfqJ+۷£{ɐ0?p2&Λj :e}rZn$ƙuk ž i;6+u=[~LrZ@^99j,p `.IJb+n>5n[}?ZխTJdt!o@v֛ cK)g4Z65t_h=&f佺/@zS}I[MASo9QߟMJZ!#f+4!X3$*ʜJL۾r u.Iހv|pkܗ`F w vV`~VTXhet0?s| n_ڭ[ESݟ N {ik.E *e68VDM^1rP.ߵ>t5.#k !ۜƗ>,)n ivP|Hz) b}]zs@OSd#-}xr:yTuWp^\k:._LIoۏ[*=m3# iA=*xbdh 7ޮ"J`)y7*uk"c{ll=]VF-$쑄n k<"0<upPl|)fQ൅ҚD*€X;* 氲<0- kD_)%nistE:GZ[c`qnj -~e1/ڡZVՓrvD8dA1B/]}S(s-Q )Qf:"9|O  E\\󂟗CORl=ލ7KpR =L81Y#e UMQ6#"+6MndGO%cXu R [-t~)3>@JX(=|9j 6[J-;'TmV7RY `ցG;rFS]#_sL(/WaԞL9K?+Q݂Kbr (I z}=˝-V@@gbds'] X (w1C(^4K\bd̞tv٭>pp-SnYOטØnix>XSw؂ȳExAt~[=Ϻ52u{%\>}Y{Kvc@vO[}NuL5={3e"Z7n-cᘕtQL"ԛwPx@^/AV+pgoddȥu-{loRdE̾ ,f:'j׮ԤQj<2;bGxAz)>Z٨lF\3x(ւQf%8y4,jv::U.~\LV M]'&K-oPx6]@ҧC>Ͻ:^+G[9gEDJ>Kn37Q~|bƉd@Ze푔(i~{ Fhu I3{mw.4~="8 𑅸qTJE9%SI^)k*> +M_Ax%qp* 4~C=aR>6()8#O^_Y`{ |X>MQZy,(kO[56xkzж̣˴udgnsuJ*- Qtf :QS)[bhO _uP)^ 5ȇ*q$RP͢1xh8("#ݼ"UԍdB20e Hj%d(@JH[Yt38]SVIMyH}>F;9 3"^RT+n_ӎce}:F@gZb` )j"s8-f"0z!!7z0m{}W ^Y}g`m)\8 It"klo癨c@,P$o@8Oи^g'@kFwu#r~eM!j`L3ujJ`mP&uab[fH>H+>7O'  mK e9f朰 H몡v$&n4d,`qw붞ɿ*FmN &ܯP f6m[nm窗#iK d* WsYvELBʪe8N3YulRQ \FYc UrZ*`' }q(?ے fP_kE_\ɧ$+.@.O~r"|@Vϛ.v_m@RKژ,lϡ,bF!; B H9m+uf'r!>J@5ݷP0BÕZzYxuE~wAI0/,]QVwJ5Ir_Wc8.>e {$`:P.gԪ"% b@=x"br'iN_g"ui Q4S$e'gvEH9I6*cۇ1nkytpCɎ]!JM 3j}"AЅ`5׏&lcU'KvdQk VyOd7Ϙn,6(Hl߈аLV_@1U:v̓ ϟ fd7sKYcx S9ʲ{Te8Ki@e9:]4Y0:B #$h\EoLnOh0-[$F@;Z`\IXfCbC_b3(Mm#19XU0Γ=UKVkrqT.T7s,-<4py}^5bOY]OsN!+ge($q,#6u=&'~@ q;;HǓ$ge ?ňk2^0Rf[s\ ("IXwDIyleOnۥBISq;lľf ,*sh#iLe 5yT\dlvR't"߱K*|me b`8 0ih0ŀ~)Z yxZW;ӏa2I+GjnY9R|bzˬt! ɲ&M:`/DܞZ5v s4ʱB3 af{JDX@Ľ.߿ fT]``v=>/ IYQa( j:5-Ps؛p7 y'VKs;̈́73 |"N+I:6,'9|K/6*|j۾$R>vךEg$dv^]G<:y&D6@m=]F:\bȃ_l'u{RF/3 9b0RND!Ս0'_Q,t֣uEHl4smsfJ\=O 7Hӏ3u|ho`=qދ7彚~Q`ǚ  'g,'PKwcr3"fٓx"˲SXq;W>ؕe˺+ҵRcHxT$X)# 3&4ߙ.YDf l3œh%NvEA.XCHYG/yۭ\No4gG3F'UxɢS[.>aT/F-d"CnGc%uIQ4 $c5kD]4[#gk+\Yk&XܧX_sYj'kԲj e6It饰PpkJKPmHRtn P5RJvDhyHc:MMP=-Ĕ:ߙ7m'L?M@jaNwE*CrGܯHٓY0Xԑ$vWլ0m \HZam8N#wTn5uvB!1Y+Re/͌wdCc$ȉ/!Q<׻jIwW'-hy6UPe(|^/4ʲ8G|gV)Xi mD_'%hFJ)0_#"?)krnz`ߙuml bپ@f^|:O#Ld-4xėԣ ܎,U(L&S[j{t|ݩJ{33KʧmZ&2M0K^o/9t偓\zDZrHmr~7"e zt Hcno2Wa,E``!TM\ݙ mӉXC9p:4VyBj[Jnk6 5ƕi1c7~IguZXmgNVXbPo&A\C.3*uU^ϖ_Nsr=h޼&Vv}DѫBqsϫ~m[{.dWvxb?͘לu ۸8$ µmc0Ri"0Ӌˇw)iO>QZ^53iK*-,B ڋfa6W|R͜OiY(5#Nzjz-X5rG`S"UT9>}N )^#ugp|±uB/!ByI4x#'tOhW(c76E9{7kB8DeYU0f5?z׫x.?>@3 ߼ [o|'_Uk{/S! 8 !lxm|( 8wx vj&jjl/@cv{ }e#Zcm0X81HCbC_3qQzP>6BMBVQ8=\"]0O\>.\Jo,&YoZ˙ a 9dt\H$W~yL1$qSp5]/hRYⰚ'@'BV!E|2~|d{=FbD/JE-(붶HUx/3脖Cx*Eq+ZA:\ts\O݂Meci7OоFhyF;Y!Gl{ 9ZmGwcGMnJSY},?P zSL$.Wշ?:rgza:ӷ B}&#nBqPԄɯI4SsLv`iV FXtkMiS(ĜoLe>ڙJ8S¥+ip|NŜkdD"gtV"mvƟNL=VOԦ=iS20Ld=։zANa`>oH&.C/'s@jLt,(5}ItN&J}a<֭n6d&0iD&#U|ОfnYj3-C0gK)Y!%[I3V9"pZr(qb?s P|SK C"H^Ϻlj cƎ=0;2ꗏ*7ˢaCK6ީ6N~4<~:q n5s*#p櫃\uXa^3ė_z!Iq>0‹Q[m*_yERh+h6q2®y ;*Iz(W|f:9F-_fKʜ=.=ItRMu d$cߖ?W.e7-gTpLTP#Su_]bD`fas59Ļx]%=~.HSQS^˾>}!FPZ!7ʝ_ގWkM*T@gvF߃AHv[U&d?|= 5gOK(V 0( LԾ zpUޤ|>לq)X ᷍4wIZ1S_[չY7)d:M3*5.?Z(R~z9򍣈-uJK_6pՊϖ1O?nIն|c#998߃?7XLԍ#hhmcAW $jw'#6C"gld Ô6$p RZ~[Q$I-]άF@%$W֭Տ6w|) bzr\j*^NQL4%- C͖STZd~F~:fnCU\9!v-9cG7-9|K]$ӨUpgHmXKG; ŶB:#R*Ƅ ֗m[Sʈlÿd{9 mx*|lʑ| =3y+2S Cx,&PUce755*)48-df륪$J&-")DKzM- Jy1ו>4|G=Z(y~?Xf kZ3{ )SFBH| g֫SVRvb,m?UN;Bs"Ȥ0R˞4> :0eMɵPmԻuM/p,뻙YV`>Rhϊs{JD;_ Q*JOEȘ(S;k1MQ^Ɋ:Y"c,Qd_P2#ZZpbLw/=?kA_Á L]0NE(t7m_ ׭񳕤6C:\q8:t#Y)WC=V2jF:y!Oik='Kx0p: 4?xYNVM,6A1h~9MΣH^:I*a@yω5%P3m:VOҨ`2ݹzj)ŭ}e/St 2tbxaIr8N >Nw%~7^cczޡUNEUo`;5Zrs&VKx/F5tϮiՌ;zܭeTa_/ )Qŧ{)Z9%_~#1.I%ÖN?A{wÝ\i|4E(~+02>&!ˏmX\;#g17 v k6F噒'?lvG1f'IԮQl a[bG`p6`FobG0JO|_(+'z?[d sϼ:cC d ],ᡄdWd"cdMnROjhV֏m|:^q]&fweȄΘmit0^:cx<ΛiLG @8ǁ+Vyr mRdC)z@eh/8jm™JW!j@D|Džug t/dpj48h`?"2"(%r^O8O9}y`E4qXS4(`?V$yYJ[RѶ)]8 -F<<´Uh2=+rR<i`4z9` U?hY81'ʼ"A0|8~`]0Q1-/+kBoCqpk}k ޼a7 U߭Sf}^eښ+7D2]a©Jso [=>NS oVୢ%l3FJ~kN(r Xi`mZ` w|RUcR Ev5v vֆ# l0KorqS Cs RYiq8['zli?M;f BduajQ7U4h13CPAfs[}!Ң?lJum!G>c)knG2͗.Qsm*Tٻ&͍:ᄜ?©XPTC #̲5t )s7ӜUWՂk.`,-J&lg]Q/N47 yϼP:%KjYs9bj/#p/+ BVΫ"d]6:B}8&]ǫ-Fc 7:/[R=k%UPa*Gkq?6w ЍlxpOK,O{kфӬ*qH&)ɇRc1X"zX=ϴa/64PnؕM J(G29J5J4+=hP6v>^0 |Dp2{&a)J=e0,# 0[a{(r{=&ӄrq "m*&"<~$r[h$`8p_xYL=@Z=O.)|ç[MU$\L#a$mEA^ԧW1[}#['Iz37;z~7WuFp_bÔPIi.w.$zɧ`KYOO)f~SDT߅v6-:i NԤ߷t]/ɓ؈\Nw@r> =6ZXҶq5 FH%/-"/2q|5#C-J ʸҢ趘2 JyktdDliH Uv+JXL>p{TA#3Ƈ̩}qg=[[LMsM|IJhBR.ai烯pr:hޑ(\*Q"{r@"ȓpU SjtKؑԿ ,|S?7ws~%e;(gEyGZ y-'XF!G"mS "LZxJG*rp|vᛑlMwݠEDBB&9'j&ddz=l~i'@zc {R[!=u۷JA< ϕ44G<}BC)Z\@DCC0]'N3n]2hA0^ Đ&iORJǧLʎx濪Lz\#h?0 i aJ^1Yoe+٤j~u`휈 4)֝9icEDAմ:Ҭrp1@j( &,Ē` 뫤"F&/S՞OX?(vEl!1L(W(H^˕op5z5FkH} w(|hUFke͜E 5n1]ߩ Z5ͼd NTUxoC|ElF8щ\`Otb)O&lwܑL`1o 4-R-{T0A6t,`ĚC);Lc.S*!Ջ$F%ı(93cEc8u[}]!~v|hYp2~~"O =r-nd`4Oߩ#Y(hQV} w|$`y4duûwZCo\_t"g[֛ȴQFvHH"OO"*`_ZuNꦴ/X R;F ×CI)Id oL:Y|T :M(({\FH$Gn 5♑Ԃ77#=%qVqr"4w0[9qT #f;bs3xy뱲NorVp}^H# zw~: \K_Xb:F HNCbvck.J)c帖nԉ^ȮB"*>J$odx7 k -q/㤱XVl<Uz6cp(zjq/ Ț7KzTl> ٷW_}RXiipeX&߭0Lʆ…T#?0 Te*(qmߣ˒u0ZHFv5*a7 kg)Mi,2U jK2U g: H\pJ)׋–a$,ާ2mO&$zΩ 7'n-]] ,FÚR|!3fŶ fj9CAw<\ ۈ lH|ɐ)0) b&Z>N$١߽&k|(|+#O|2HXƉ 6RKLSzhʢ[1DXw ['27sb"v0h=1KhubH-Bze9$ԯ! gƿ׶M-oVz `asF%GTpcoҘکqR(fG ]Y^U;9|\ە(cterȥ)|o4Q< :#j kIӛ|h"0q󹴼zL"H__ԝkT]wi,/xoGj{;t &[1UnE>?zY,|Ɂύt <ZPMe }v6P4_݊ĉx:dA?K.Fqm.y"]-'090eii % wlb6r4w/;+rr1Nhϕx>u*W:ɗ x10ڦxͲ\#EO?}<̦&ąhWWyk }.J{kdo)ǞD:MAT͠%qϴ  Znwl`,q wpi[YVH /u2:L;hw[`3o`ޥ'#Fh櫣;gjn* 0"W($orov0{8)8$oڸ$L"/#룿5z6N$wx!SR!w/Bpy:|9#|{mu ml4dSsr]A[6J&9`ruBq>3݊TIn9^]w+9_y>F4l`gLmKkR `}nM)%j4yb}wn[ϝl5Gڤv@.En$,aEi)k^I ?7Gx5q]Bkp^:R7Kb=N"e^C;L4PctpsW}{]5}W7WAތso >Z^ S)Г/&^8x $XTJA)R G1QӟcB d ұ{GDŽA~ ~f!D)K FACg~EYb.f=( ),k/Ǡ7E-,&P؄W쟙 ]!@[a}Ktrvb|zxr>"vnG-b^٥+Ƙ<`w$ݥkd _ j'qgsG'kgl|v}) 3~F # l`r ?%`ō49y Bpy`=bI|)bX\*}A,atYC\XtEO1~0r*鮱Kw?tfMq*7k/E>ޢ-RJ 2AC}!~nDױmQ^Km1 w{I d"\$hd3rWMX2`)i, tI  /6KOH^yT8/61A%Dd;a vʵ*@LQ7D i2* p({OҸ@O1$ ۗ<@/H9 W}FV7pI27, 'W8˰(wi@njGyhUu AӃ\ľ36g te;!2Ws9w!o6V]~X_4s-Uv@ A ?;~&5[.Nx90tAb9Ǖ@{h@q(|uOѹc +{P3^κo\J <3fIad@B2u ~JUAS͈s/pVG$<š!̑NE0?-U9w6>(hFvTQ ZO\\}uHM֟u$g BQ .OhAJ}׊uyt3 fVn μiL6eUgþ XX lݗҽf>-O'K@u/FQ:ODb+_w"{֊G&\//;Şw`\H:d(q5r{K:X^``6e3X#-}Qy}\%0uϞgL"Ѭ x եEĤ4 x^Ll<t'#i;q:qPq[IYg2[t(S3QMј"8mg#F,(SJοaCl>_=vH'#Lk ).ȩ7nFVn !fI)o%Vrd &d"5mgHk{EbTڞ p7ˮ\*WX-։ ?lrs+0\m[R$Շ_B0ڐմr^"1צc'zo[tD0h:aToax<9$&S$#b>ޝU1=H81Qߐ ӡm>Յʁo]6@ 4kS^P?*Vf2C!EW˱DqDԝPfY,y0շ?n k̻ 3`Z\38#3f+kC6(r14!yV8,K/iO1`C"?bJ`mcu0 }swo>WxJ7`^:! /-}I4i%佒*]54v{ų`Ȱ'%JO-Ba8j4$*ۑN4ڊI&sZf}0qN_(>O=5s]JYU_bKݡl*>` UX5czS2oc;|^;0jIl?o闲Q9yQydAZig%[8Y\W|} &5Z=V/ U50S !|o.,hsa0]D6p}2f:hAŭkMDPM=^aVqOpY5w$2h]&*ǣ;&,do4lׇqNaɬ9EGӽ #s] <,K@^aq46`k]w/d[ЧY? `kۄ4 э0aqxVzR K9eJ@-EaZL |b|KQbm2;!$NP [Ǒf U!uop1ffX^t f@VF/8 : k[ L]p`{V%* Hҽ s pm3<ѐVH۱ Qol=) ga.acu _p.proDΒw rXW., Ws6 KϠr+ > 5X> PH3?M>~YDSFǕgƩ?1|e=L~eh6)ﾎ͚*mͶp=/Νe"0(O+ڒ4Ux^9į@E]h-hA:HH`JcBxE;(F T3+v6UnP$歐6KUaʛN,7vNDVYf唇K&c‘vaۖ֏Thhs&( Ts06;:`:w~پ40O=[)Dn9mVjsr7'TM]ݓ35]/vt{P*,bXz"FV^gĶxɌ& Fk0 IFђYDs| s" vxSi^ݷ! * 7ɯk8 ~} RHJ G Tr9ou재[|Ckruo ڰ1FLY<ao"R,ؒPH1cVBZ;z6X)Cٜ%ULx3l#Ԝ~ŀa$*_=3Q eFl{y9Y ]ZYgA$ [w.\#sl>&G`ql?OvJYG"Y~zϟeVC' ^k=2/3Hl'P8 5N(#j>O$Uy +ip Th }a@g;D ?jĒ#.ϱR/p=b qѴKp^q.BsF¢فǹjvMȲx[WUdYP(V'C?P"WeIhQH2x1`B{ym3ynœ6 |RF G!t(Z|xRk7%< cW’0Wٱ38osp@A4|D\TCE~lcBFn{7Kbug%LZ"hyABe8ԞǢ>k,V2?C7W| ֎wMuXu-Q1?b?j&b&ńwuʙеEذS3:3E0ks§(JMg gtmHSå~7W N^TTׇM[ oɓeheua%% 4Oǻ @yâ,8}hC1xsvi:c &ʼ !r<Ɔ#b[$R 2}ފ?~<tǤR?MVg3`uyޱZt#2դ=),z;J fBj'oIzihr@I5O$ 4UUP bNb.ɪ?ʭ$!pH9emY?!T{B5C;= "*TUJN#GiZ$[njEދcr1 & 94*I^PsKv1^־j{zٷ6>]7ugQ\uYїu]nM:MXi4=tyL M󠅄rc*JoЄV-ĐfB .03WN.Rlh|l[?|a`/K ~ hv7Ј9m#V??ci#fhWnl~ `"OXi`uz5L~ fX%&[?D0F|H]w[Qzfv J(( X(M#1xxЂ ȝ5)hpSZ͚g[N40yXa4B&Q?rC3txWM|&hVrqmR\NC'Ʉōc'JщKGR1C$v RvR#@g DdTּM24'uWb`zOUUAjVGUMéX5m+N$]R]ˏWOD ?u"LtPl&o r8Ҥ/EqZRKТz,gCf4;H^T]ޅsC \VH#2iGSrҔ͗Ƥt!ep;>ze;_1"$S*bݓ(m гғ).t6.ohr k{VmA{΀ӥwWLQCDuv@3.C+/:ɓu4 'G,V6a*M(T\UYHX]Aa[*I6z9:4Y/^ɻ?c Y\u[I߿WFR T#`pL숓R Xŵ.Yn^wK((:^֩U;M^D]Ecŕ_ ,ٞMAXCXοeV6 T붙%p#wesEʊ,0:E {]ysSnFc>31`zezv_R"=&`#Rk\ђю6,,-DJJ'-#%(Odd6mfuT-?740"EZ OtEק:%30,Z  hͬJfTs*|~l+J+$QQIl_^4q]%f\K`֋llpcL?5`)vu(v|s]Mqwhst1 P+}fw.Gp Nt,,HqߚZ*乾LqN+2O}ܱ7UՕ0Fn)sy=_BXFOUP +J$3 b4mi ?+Yt<*f^!b< 5`۵Ak Gm>&Ҽd]ޛex(mXΒIjQl$,/ߕsʷqǶoj)̑C]`Hw+aRc@& / ^ԭI\rޚT9IwƠ^bb6'rgT/SDH!/ŧ;2^ C^ AvЧ +YɌ659I/'jwL'bZōu}QEmR-+L,D%#!/+4x8a_~doiNeŝl{ 7m<n(q 69Է:|IɎOAeJ=z4:h}(4 Vo;Un3udq&.l,FMnm\5aOl˝#Xr5TD嵝eS0WA E:qӉA<UcV_}Pv&0'T=xEO#lKXk'=R(zab`ʀ..]`.z37u'0Wx3|DFTVC6P`KH@RTA x9(GڸJLv@[YCVGq+Ҁ-MfaYv {3H UV:170kmiY2K}k@Ag?r{Gb͕3i*F^`=}ؗrBh `uƜQ=keh?9l\P;a Y8ҥ8^owC{C9qNo]@ o'-a3 {]NhTQKuAIC+iKZ"=fCCwA eLa/tt :xM9;ĖŽwAr1WFazK;HMB ( mh"Lo:xx3&gWr@WSv2Mrv! gZq.ո0O]#g:J.e() h$ӪD2CN F"ˣo]7KzG}usoHiG{f/譈jA{ɻ&@nŴt,)u/e =ݎeW"1Wp%0+mW;0MEѫ}=m;:k`DGH'+=uI 5j_0' jFt0}APo%ˈ:s,@V%}Z`ðvqO'6%qycX+_sM9EzoĎqp{EQ7i+xs)t$g8tL\?2:_X#5;iZ:o.3α$늃l-npeB:e+yvJTG}Sva98\@rH]dU(s~"$l#>Gy:cnoƵwJU~ ĶC* swz ~\+KsmL("4a3$L{3s7?՗<{UB/ E7n)c#dl81mM =_b=l:V"B".hP.p>lbxRm,"U _Bv;t<cc5~^BJxB^~~X]~ِҤ[LUk_w0|ObIii| =jF+\uJhك- YEBt eeĤtD8ê1P/0^6S)ɵZZľd/lf5'!-]s\-Ϥ;͎Dl$BKZ) 'Oqe8Y$".Xi&C i- F`[9;/p iU /z ǦK*fǁoͅqڰl94oLԩVͶ:ݜ7\~/7Dž)T(.x ,z2\gƟ4q$V6'Jk*}DD%{Ћi ?)?|ܠBG-;*-GWΖv h 5vޚE ޘ u}k4gE,ݧHբCQ,U3hy sZuzu^!I< ⟂DuU)bAp*$[8YTb0]sHb8Ssh.)縶B)יaGC~z}zZHM5 2:c>F,Y"<z`xм>eNؔEu~6 \Z?D.i}KK~1'v\A?xKQ8OH6lbJ_ߦ O ~ށzG>o]nMYHFjME'~Z((B׮%;/]=߷U "XGhtqj(t&wb`Aqc5 I'7\  E-p+oyίeS`In- ZD'JkQnN0//aN:^ڟ%c^yF'W[͗o$F5鶕d̒w~"q^lSWXP9:V@,F=cK@&4øWW7 V3S Єyc*욡wL?90@tMѺ=>r?508G2 Hθ WpaxW؞58ߚ0atrO9oUEzlli26t!ccϏQ26Hİ0 XAs=&BjJzUD %4)0.s_3'9 7Ĉ&тx5xGA>u灯,Yu8&)o \@ލuwH|w\aXozys@<}ĜkBdЌqm7ҟ@mQw%],׊c o9Bܥ;K(}Y Q+Y&<Ve@dL.LJ4ꓗY1l\F$)Ju?gLTS.rTNjHsDXdsu2lbb,R뛁r c|"@M4?,TEx_% {5چ".N(ohƔ'M&2仗`đ[+>h`-T&j_|R:| `/ڹJuWnro4If^< >5T[}|Iݾ;QsuEZ8Y!DXZv)2\%w?1h)%+c: (V-v8%]q&id+kY}!/dw-z pf%{XZL<-OE!*%>p^r}-Oi.F%ߡDkmD& ?]nyuI&"j0'cK9p ʯ8ĊAi9-r L "y}& ~]¹^MI> Avr.qkG^nLZqކJڼ(I R<\sΟc+MSges^'Y(@0/@h |N;I--zFOmPo Î(Iƻ ( UYL.R;_~9u!ySD \<DhIY1je |¨/}z&4Ѣ~^`Wx_>d\c:EKFDs"eҙh8Yn"d{S!<7UF5hGֱ:_BХa;iE *sϩn[KsP3ڶ= yֆ+NNhgW7< So-I\/3 tp/gIbc>A3h-QcGA=:y8Yz?(}GmOo)TBٸz3L7 # jGЛɿ t'/mŁCK2y$C߆WϿ~=ل`W:=,4s(5ƅ$ڇL-85Y/m&S:|#(kJhڗL$2sR>ː @D>0|ߣ\VU"/aRsjFĭmnl˄[x5IM߾}ϲ s?Mꕪg[ ABɆ֓ha,;U"=k߰4X-} Fs>i=8OL9_F NRWvž鍟TIvF hA?BE?̀aUK^Щ.Z0^a[iN瞽hNyIy4#Μ39nXZ^fpR^R8@6wV\u1MlfzM ^ʟQA`c.Za؊NC99YQ&zf >-D+ꭜ1*/KR%7q7!FC,!wFn cl;J5 hFG{q L!݂@$K}Z-cs]ZM瘬H<;iby}bB(ȅbsɨ動!漊 M߷aTcOh ŮV{D N#eR|E(i@O'ǚr'b$$/.}Tu󯛪k?ݢS 1>'Z7yig`z[yB6DQxIXu Zyqbٽ}MosM$.*G?*lFZPHw|䗁|"k  ab:!:³xi] Cd(8PG pX(;`:<oE6y.ݺqvE#5COI+G3=Irs|L‚olCka,НUF/J3>\{4ao?t4qfMܔn+X#JגKDvͯl rj^;Q@"e'@)*,YKtw 2̈́S ,SE Yi*{}⩖֪u,^mSLL=,,1& V(x4~5p`Btjl r ʺ$vkNV$A/Z2kosxka=EzRP`~NL@'A2]ȴB`%(N+=|R\]L2n/zrMQк(|aKCao^);cp V$HV6 l[k/w-zM ͼ) ήh$1BRV|j^ -U)umi,sJSCٲBAMT*BƻediyD ŖtnM!R!ߨ 2űRUr,KϪ1 -$>)O-`w-3ʸ_b@mش`uwPn0NTyr D>xc?iz!\ʄN9taB|Y؄rW)shQ[u)~/KR_yQ9 JhD`6lƶY5fqQ>-ɸ_Q]İKEIXB&n^qd"e輻U068l5i^;-8Ei}r^T a [g U)4UF9 ü1$P5}ž8 侥^0qֵty?4A7ұHi W熍XlO4§1SlCƉ米#`uQA8ia;4m}cS >ꕏu`TKK4-UJX*i^a^Lu{P$UTF!<^fqE:ު/bm+5KX[/]&rcU36x|践CO l1Q1 ob-˯Oԓ/(*Om x9LPVe4TM $tHD`kvo@ `x]u^!pR,qtTRb?`4Xdx<ߌJkX m\؀Ξ;k$U34N ]"M֌i~.oqw#A?HΫM왘bZRRq^>)nO%z4` \+r ċ Qh=9  n4 N` $}۳ȟò+REz~دJH ;Ǝx dʋ1y9JN[dguki?ӫ40ŶKZ$py AzxNHW|OO_Kh\KCua{T-?Du ^T]/rZ,te~2'2[ᝎ[bG2c+Mk@;Y9FPCA @!)}0v5а݄Tɭ ])涡(?^JR /Q?ea, i?>1ƙ.S/ґgM[YZ]@Ϲ_aB!鱭]URтC-A{1 r=(qc`88!S?7#քIPOO塟3l/0D''E-3,M%Ć2fzg(^oEd@O/#&>oTa7㞺tHLv8ZQ(|kII<1~ۏJP(CP*hB,` ˋ] ]ls4; bG]F>Cx>-};B3 "p3[A>ڜsk[OSPCh38[_H4{@a׹pC1< zxY+E ?K\pS9t͘ 6Sf1 hN3c[Li r׆>68?dVo-g`p`ؿϠ2Gn-yk@0E_ \ |D3cQvbZ2TR-o^LQs7:v0EfR_7f SKJ^bڸHy1jD?6|p~wMm")xb^Isf0S% t`+ɉKBVZ4O}D?'jZRSEzV$\3 pޓ5(PA&Q~}`kӫXy,RoЍ9?R+G:o/>dhh2hsLϕ\IBbǘ&s@l!k| ,^NA3ٽh*nz[)Q?=m.W Q;RȘ >OM84ᦛ\? |H-G!p2jy&Ʊ\Zs]1•0B!7C(cK-ۨInw/b r샎s_4=M]q_v*Y o+,Pl7ŢNgz*Ew/d6!cgf>A9<,T=>2_{@%k`P-`6` 0/6\>TLCSD;7֓[xx=ۜ4_ުzwC=}+kCc2_+_L.??:%wuVFi~i8\xEʇvXb5_rҘ#(PBތuHkU&:jzJ58j _ {|iV^ezͽ|'m(lPZ&s/`6] .gIU$S.fׂc|&`)5HaBW]r)L)ܝ*O 3_= SC;D}  Aӥr -UlΈ+*,߶6ID';ǫ"Cnft9< u4Z>]%bhwsg4m94>.dzG򂆎_&qzs7o<n JnσV>=SS#jb!J90~llKYj'wf5J\ 9 h6Nϟp$nQ Aךsw3eZg̚8>*ܵhND 08GF]aUv.w`fUAwic,2.NvVVQJW`@GR?=W2H%Ӱ [$"U;D#([xl2~qavITD4.E0uH'C\YښHQ,&J*֤:"!fN*Bznc6[Uwgs69qPF gdyi|#B &D!3̄Xc܀iKDxv5?q6C˄ 9d2 +VA Ǭ6ɶ:gw?:^ e1Cy$J@"Re"m(2#r̖N >7HWv!a7^0RˮS5+`PU5Fߗ*>"!85%G1|5|h] Q MV`+gg(4_m@8k s?7e_A}@:9m/b`? 3 %+֗H 7qw2^쇿׺~Y2z#,>ذ__DA`/;Kb[Kyf\^.O0SBh8JOOUvyɘǮhjWS6+IEub +}<ځ4JIJPy%^~%c;1 4ע!3$h$%w5<aYۈ륑Z?hSzgyQ U:{/6_տC@HV7TIh!^[9W?Ukz_ؗ+,έ,^:uTv>M54*Qc[j*2O5J 8'}x&ZKKKrAR< TH_W R)RF>/2P?<՚6n hqf"r`8'jOYf}dBW8CMHطRZp &1f}LH|y.&I%ڣp֊gC` Qzss-L8WH .{rϢ}ވ&B^Px 6ӗS1K0g=xW j ΁^o?܈O?n ,*ׄ2 >^λxzV1K)򣓡hUӀVbs :W6Ewi]_C/|rw^8rS3:Z4z3fPZ d'T` t$ݸm==ܕ<>k )_evFPYUޙTNԯCYQі{BeeFt?!w)PNPG68~^10>S~A0b<=6D̳=Ty۶ =0>C{۰.Q*e=U:Q>$$&}b:1f] ~8@ɰU*TOm쀫x&'^|xs׊?V.hWjRUiQ+*4b)vL tշ>BHbԺ]bْa @9`P#Ctajd>eFc'")ԔhI,;y2OOIܠF'sńVt X` eVPF6y5s08F p[KS%ad%bZ!MBm|DWZ+ ~e0Ruy7-M ^ ybTtGQ=^lQ;=.CW Rn>4^"=X y"|D"3(/|YiZJowڢ>{7=xQE\syQh{q% ŊOGa0fԍkr0j[v?hݫ鈝K'i⫅a]h|!𕸡.rS=w O*Y'{T"nEWClBvu :w$ŵ種׉Kr 㣸Ǘ8y_*gy\Rӓ/T_-@:1*m9*#${6-9{>zҹh 9~zKn(aOQ *89W p UL`Wx[9Dw0FK/s% Op3 Wx*1P(2#w {uIXG(/"#T_c)|:ç6q;[%6$ܛ!iZVlFGɯl(iTVi]-="4v^_L` yDX(k㫯ԝ~&KG$kH̝܇[^JZ̼[^CBm =8xƔ8JwhO,W sTHη3 J}Obud٧jKA_&;AJjR'YHNXTMBٛ0j$g mKM/kϨ1D['b?2 a'ہ('W t)NEpA),6؛*1G: d#GL?i'xܠD $p ҸC>>K5D5+4ciٟ7ԑHS@m43-8jqSggdp{> A|z <8M8'=y\^baᤓF0E\w\|]?iDI{L|үDմ:MVm/5vc>ΕW^cإb_ #$P#K1$"8K%i>]lM9{}.nl7B<0j1_(,'Q )P/0kJ!^p{#2Ycւ Ǻ3UwmNĸ,mo,qc<\%[U?d rTTR^=S~:J+&fHXp7|\H׍zu}ݏþTٌ<|W)7͝Y|Y,taq~_OT(8Zjq\sS& so6>}.DaJF$UJ[H>^-EBl8\.>)Im2D:B2p3D]H4hʌ!H݆|辡[螇j*/h/>gD%Q{1zG99 !8"7RY"sLguk[N!y+*%pnɗ=XcT=,|$) f{)h n\uhSҢOLtd۽5m 9U26Hޏ|eTBFd;%:khc0 H~a!+ sc%,rrv>#Am=Աy 糎\ sj-lÓ\+D~7 :=2~^~3i%9nUoN *G7<7_9DE$%r X jp{#*Q>;|'L|lHsO_5 f5#}ʟ|,{N.cV4)ع\-`)،=ݾa(:ZDžh0[>Λ95ݻ}@Cz`lA(&9)H1Bк_tJv(4S"fZ#Qb7z>G4a ﭢ2GYʼ||* {8w?K"j4^ߚ<: Qzi:\y:]BYJi3# $Y!/iHWM"sGȡ:#HAI 0{ ]|^B~o4-V(z11,W<sZ=@_X &kbpZxtMTu#xXhm5?"1gP4K8:olVglqlL2.z>CPmEމgi`.%G~&AY`un=aTpqWj7߬<#nPeaS?|?b$PeRGYl}i#B_?nQ1wz!G[w]I_x(߭]:D2t|pϐ!(YT|EIܳǛkbkS;ZH.1)̧1׷-dft}ZֻBawߐ.Ɋgc{lʤLUcU:\ؼ91wkL_ӽ'w{Us.5ԅO}2~pSXf3]m X„^;3hF'Z^Ν k{PꢢMU/p磾a=KEB GgOg $a}QHc$-y9 Ndw(Kczj朮@" +ql2v MTplyf.uźɶײ}O |?ZxfMQ!؍Y^"ffTƗ%rmh^Xa[rC/`!RUaYƨ:;A F!EPr^#/I&FiC8K \kB{K)nǖdtShlfq)T5فoZ>E9$'{q͐- FJ[O;>@x<ӎmb=su~tmt2039LSSQ8Vi*>&?N9V425ʄp I4{r摎a#3k u8/7(H^̅]YDM^ՖAa@4hjd  <"#-PaEn4`+%PEqG:޶u*4ocO]L~:KϤZObAsYSKv1 #3LV?7-?,Ũ'EMz0< %@]בZs*.Q0`KF-g$(!rpm( DE߹Bǂ/ZLAc D*|_Ĵ߱a@%lha*?S vL!Ay !fD9)vPD1[\N+?a/&6xTM0ik@ʺܠwP7Kܵ%8 u32M Jl++EX#gz[G@(W |Y4ୗ$K|9ē.RPU\hCXgdB{oS|T,a '{TJ.3\#% Xlbx c´>Ģ7]WrϮ&lzѨ6TK.4Ly6Y 䤀R\OT'0uMw QSxad塷't-`%i:<,q~VLy6?kO=U<k:3|7XY;3H-:0M`xJGd"@QAMf8um qMcQz(%O> })RǪ-ҫÇa%Ra!k֥zLb!LDGlt*Z b'mN82)̘LjakBIτecr8+Tp;f=@ o1sm`UL!Lٞ,UFQz""Og^D} ?TRS͠KաC9BxPBdnD7|"1lÅp¦sX؛ooʰmttܸiQ9*s;?rkǿHa%8-dysl{'Zs 'h(` 35i>4ڲ|G`oQĤ:C) Ly,l؇3C06L|M:B:8 SE J ,} x-\6v0ALlL.33i۲4LN,Њ q ʙF.9S s\mawٺ+`&E)s9nkC*@K).Ypڑ&h86~gJZ l{cp,בĻW/Ei 6g!_dU|g%zJu0m[SUN;c9Li:iip1ӵ>9;qP}8؉^BXl6Bk#cw7k%Q_ҋ1dFnjC@89C29}RK^h-$fٞC%\Y{""7@qoeE10꼿8XH9)]m(8^h1CُQtkOp–ƙ#֒2;\ge*#L ,{4d2S vHRNJt8/Z(^ i.C:CfIL\f0Ҭ;'tM/.QT P N6H1qݙ Br/0mŹZٕZ0&K#UEލ 8ڙ<4Rkm 6y},~o.s~LEOwA;*~|9+^ S5^)/!K!bB5%ay_f|i?Hg7e̙`vϚ0StHř+u H '~ 7\?ȑA,+d!}wzzZ. &x$2n2yh1L7YB{#nMB31 ,M} ZP:ym%?.iҮרB=siaj: 7S<-Uq:%y@B|ZH3lg7d«Уv q+-Jw1bP L,ޞEUp.{L++X3ںZb?zgck@X~ԗ #L*r7pK*0*kZ؅O\) </O0Yd~x9WGwSrlmِ v9#8gmK(h=G~{d9?dg̍b%jFdx7gNS7bt9I cLו 4oTƓ"Ybߴ#M*};Du9 iX~3\?~_;'%/QI~5:TuOTCOmE ac20;¤NH8A6 Pĭz#.>t qZA,"{'lnRC"-S\)mºfvZmy -ΖɫP))M~z2wм@u4 |2hE:p?\f GE3Ջ86~TƔXǟE}/r#LOzZW7\._τQnr{c|bW]Z#gQGAu`4ݷZG{Fs88|)1R@;JAmN@rO*!&Ж>VR T# K= zw,@fDiUk%L CqahW=}AϺt;eV t2]h^dUdE01o#6E,OeRtruɎDI\Z5+Ôn"FY)ce5ifiiXd< lkǀOh<eѷxCFZǬtj*ExiBU ʸ[t%ײb l2< }9ӽΙ3b]0{w]<= 4ڜYRIQ~ a*阸BCuYRJllq LTIZ G ܳdp-ϖ}n#7, WnMc5N%Z`%|jm 9VK)%ROԞ*Q}[sq hxhiinY"Qtᙙ8Yڈ:kKj́Z=]e|Ng)k9:mk?E]D[ދdx'TD]gu5(7t/H aNHC9Ό^GNMX'dhvʹ:Y3g큹葝0A.,t*b{u"ʝN5Ol [U0: Lo9!,%[-r6v{]^%Y;8< u퉳9gӌ Gخc9R?ZX錵y-m ҅mm.>F5ɘ G 1KwF ߟa/1Yɮ~г{=tUR#SQDx&h/~]MO *FVݽKmZ]aZu\^L|˨hdf0Pyļ:hrr 1P8*zecfzM-X\?Q F0E zRK,; JǞjO2P.M#%\hy!'q̨|GQ~PIKr nӆBռ OkdlC k.R%yW௵?<ƣ{UqtmD,d˄gIP?`K‡%\6q`oSGk~5a}>:wslVBRjW.W| R5/./NŽ5$~/vW3XUs┬)H.mKkCԋeutlHnsqm)Ll`"H.H'ܫ]n^ R?H=;UaP78hU ѣ؛"7x_e8<4lvtQUr/ۚuoF3F x4$ܿWxTw! 1_ASyn, NAucEHs:~..hxWS'Cŧv~@nl{^PJ/{Π(^۸0Q~iƀ?<9]Lh 8^L$ MZc@T@jn05ǹ13EeÓ1 LHSC =1#]զ36JRI)tUS$GƎzU) }sgqtk_91}S!Sk=L{]oxJ!抠ݤŧJ(=Gו c nK^*"=Rjh!=)}><7w hǝYf&^Ȅǩe>^!)T׼2WE@VIֆ!'f.Ekݽպo)ỏ֩2ȫ]ԜMvʯT%x_8ӳz0)ﰤu [Ƽm&v|XP!4SmZe-d&4@1۴'PɝH]Ǵ="9`L Lh<ǀ7[ty({jw::7Qn(TWLey(ȭ#D; QYə ɹpڒ7:tS6wuꧪD8Xz"v'ЭO5!Q ~|J=uJw!X~`cIa! %ژڢ TaF! KF/sUa d*F Jl#z`R>KL#SHjh9̌G ^d74Q 9hMq/HOW7&s /({B`&A`2|@q?Kw[$7جsr8˶u@gjg WPT$ 6qtaׯh$;M9}~( }ʻb#n#R^vɀ&KW57fwyiڛDuXO?}Q=[Ha'r Mg焏[ZsPM6>܎FR7=+1sL d$lI's_wuH8'Ri⣭Kӊ6IǻIڥxP"Yj|A 1eXoΰʍ Qп#fZ_ EJaJ#~ 7d$kF &6P Z%C*f #Kx?g"Xևõ{^|W9&x3u8Po| ȃP1!,HVo;=K<8<1!= ߚZw>w .~mz'Xm+d钍*ցs{SO1ۍQykt#H)\laMg$'9=#pZ=A9'T/QҬ!'㏱*nexkBQfL WzA't=_,oZǦ[R9[V!Wq $qTLE i o7<}s5ENZEYlA/p,6PجzP'T+9,E`ElF0STvsl.{@x* TĦAs tr=n+\݄vW>A"9$)L^{BQ- 6"ݥ艀+'sl5IPmZҏ_g[-FhB6bÜ ?e{bALa:(tM0_? U\4pA6/rU]xL_v"88kN6vo͕pO>#UM* +񢱗t ;` C }FW`Sn`lqc!W5!z,H%*f) :Hm!Ncja,blVtj_[)&7ޜ!M7[$D(sf&+ |" o#̼DxJW<"Jne] _| o3 R2`e %?Rq"z@CVL'D2= pA-w۩UxA${5H!͖OR6)X^GB!KlgŻRq'wbl >?ZI:ÔsjT"] N ]nZû .vAqB (@Eþp{Ѵ9rVi@pU!N6HﳷOUԆ."X!|u@@U0E$$&윑 K[H ͰQ~ %doss9OnsD&z(t!l] 6 (.fƒbgĨ_$-RPt7UX 0ghtRR}9Lhjw~qp}ƸBud;GG\?IPzګFE?$*Ki}ʔlX$&WTiͭe'!ɃK1Ђz.'' @0]jfPx^WX}''oNH$HÂju9Ie=A:XV qڥa,'WYeW%ȋa6<=QkW ;' hzB`y %D=0Gz5rxl*]ΝY bҩ7i "-?U[Ȯ4'杰shG)#g,<{SC%kG?Psy9›à_ _FPFjtF/=S\X;+XZ(˚:HHr7 *8,OzAYVg\g)fT Z qp ?KiݹaTZD=&R4v C' BIϾ= oQlt*ȇ= AѧpEXFj9:)P}Js=V7ݮz4X^6AYh4JfQ7A7~_vgkYUQBj fOGE3GQ u7*wg|4}y◛GAoׂS_0pl 1,IQsA{3ڜ ؝=2֏~ СoC]␅SPSH -d[f"o]dXx( ⌵R(:Z)(!.E$Es]b(K i2>sj6^7X*b)7~W3kb9GK7dۅ-ٶ w@2zn G3W`6]GBO,3zՋnش'EQe(+@3=t@giD.j;8wK8@Y/ljFblBj ,;1h$);b̽9])pDvvxl,DLij˸N pʵ׶!YY&ψL>o*!!iВK{sd|4[?('- MQ'հ\ ̙Lt#&ek]]WL1X@_c=R:TnR)(L/%Pk|D v?LMa7 F^vVZWW_,Lfc2ȁF1"ǂr@õ)NhZ@;#$kHthS(fasqLœ? #zSj5\luLˠZX0UBD 7Лq7h'2Nl_yq^Ed^K:7gc$jK`NRBAZ/6 M'pA0ew@6hecQ,ˠN8gЛnžQg{zphzc`1!d*+pW~)}ԭv3+!NKs$b I #}+ꛂ{o/*C~yN]DUA:-W`@\H d%Ln4e: =[]6T9G9(+_#esdB~d-m^֭ZMWxÛJjCs|ck`_O}\̵!0hkwBn !sD1u@"Κ3TGomN pԸJ-%z/HA½S 52s +;*HƗ+<^ɅN_BHb1UG5 s1=żŹ]m6`Yպx1|b=RBEfso9zyVސU+y㾦<,@r{۲/)J[W=YtRџ)YJ_{o{5̎4#%-xdPt7UR!#EuF}qW3˴.2 AݼcXxQ®0we0ƹrSSQ ϶Q[M!LKUw<݆_-^yҼ&9ĈW M^u.Y߼BvQ,|yNU% RI܀&P,a:Nofɯ *%=vg{WNTEdI|NO&xe,ao8?g+u. kzaHJwZ7Pp70ᗽnobFR:K^'(EAT~ps0LpT@.u` N_K <]6<+H,]фK;j-sp6hr3cKN)d"ga_W{|T*ml/E5Lg7]PxIc 5 /mG!Rڢ"@l[吧pO:7vD N%"Kbn82pO0zH$4Ƭ2#`EKr."A¨FG kg(")X̂Gr:+3o]*)X:} ;u+'X`U,a"bq_𲛾I.EQkHҩ xHzmwA.dKZes"͞XSz:Gk뎍[Z{M*ٟ8pa. Z'^46m]tbBO~JR`D16Pst0R$]1JyL#VٗTPT _0YirQs-^ ҁ-?ί1i^4{xDKP$J;KS}7nӟZΧ3!/U (̡/ xKlwU}ˢ0h`NnUNJGO|AؠP̥б/v\+rhp}i;q/zmyU?![#O5dtN0jC v R÷?!ngϗȽ&a_;Z:D~$Mav<ݾ7n/3#LK. 4)̀g! 嶺T~]3g$n1U%#&D fϚ?3t$N5[ۣ;So_JU+}6IZA4v Y>;N߭b9{KI6[dCE}RHLi} wi[R n$Q\ז"/4?PP?C(E},rCs]Id K!%3K\3+OͦhWȊQl,%U 3VK)(loDxyO=L3^e!}w;I=rHCWm6QJ96!ʭ15L"ɟȢgo>;~4ⴍbon"Na%ɨ_5HSZBL5r7[0)OUcK(k٬MLBv^x/{_jPEb,ep:Xx[a|`5j^".Ѫa]W$vSP3xn\0Va~B`w< =<҄еQT50JHۃgCY5.FW~3-".$8=2VQ d(/z()m:'ahȣ3?K*tZGtly*߲ n+K憯/=Z]xyUAaw>DMHmle(@Bo@z4q(xbK7TXFAGckk>I,!%!q=5؈1䍱'7 ZֲqxZCʳL\v\@ H.ZQӣң_|w ӷ b=fwno8M1rmY'$X\lON]C\:M@C0u#>G@tV裸@w!:LRw_i`9B$zRf]3 ;I[8! ĪuԾ$]`mR14V/2S3247['[fS[ᎯA/[$>y'|T2^ʚ ^3{=<|mgIZT%^C( c0nZ6V$e8xT%r|@sҿL-d$ph!٪wDkaE 8,F`V%Ghh(Cq>f*[,RٗcR4)ːAPK:_ӌp'V-9qgvĵB9z6✒IF*N/j;Fl{9Fq)DԃXR8ԠAL!J\ IaebL謸LkVAzhfYVO,G1Ǧ6,EHY5Bdu |bmqAsttI?xnRe J)ox Vc+?H4a&J'>ъBy} 18?N9`wzxqd\@gI9>-I& 菙%J{혱ǶlB5ՇH)4(=-OOt\am\yS"Z BPL[g#Н8'&/^ONRMqv)Mj.]0NPQ!!wHUuթnz nh~'$ lޥ\͢h@7^xA!$qZ[@u WjN'U&ߥIpRK^MP}[3r [O?XbOѢtO>j(sbp͵m_i\ (wfERCֿB99#zv_SD  ?y5f0өs+=<4np53!au3}0"GhpxႳZ\r#Y ʂ:ܤ ݢ3+5de#T䴲X1n#첇]Fc>$>tȈQ0# O+9qF W``5c)+p;u 3MZZĎ^A2-+TЉ'YˆŖa•`]g+\tATu8g ϸ92}Ǻ 6QytkT$Xh>`\Dۼ fx2R%'VPcV[}̜uG(pvZ;Q71tF/d{IC7nhnmz5$@EEzƑU3CD[{G< 2lT3 Y=]oWf<KѬ*'1SuӺFC0~-v>6D 0>&ؤ-始MBZ'LR0mU>}%NK GM@t!z43JP' ~iVјE:&miib)C *h94+]X,!:5hL A'+wgBd㺰kt4)j0p [c?69tؤT:=չjzH_9, \]ףSxwZgEbV^#+ ldB ;r4ȬZGCd|}lFbڄRi9wQ>멼xCK4N16 sIz|26LvydҰ5(%ɇ )|z= L{ ,fv,e6"]% $;-3S lD} G '֎'M$dr^f>kPؼ{+oy܏}k.h2pH g'Z}'?|_c -83+0SLlbE.ybAեfDu Ew}{v^C˨/PinzrN9B2\|^54#J냙6r26+ꢃBM/Bq{5?>fG S߅a<8?QxUmݲ%YALb(mŌ@RmzZ1s: =֗؄U 5^nْ3= |IŵWup0 8Oxe>ŕ~<\3kU*_>yl?U &eK6y) (1n̷5`ނ{{)ۖrlj"~L7Ff"_}Pp1fe3\KαߊwaU6X1NT,(_ }OT'uӫk!)0)β„?ʼ:ܨ8HCSqĈ]ƀ~`jП?Fk}Jx 0`jYc<|H4Vv Hl>ſl@appRTlI=ip(2|ϳ{9}S@e}VNC+~PLC|f1o A gĶ"?B<qqܗ |p*hwkPjNE@ۼE&kz771e{F6%A 1Aմ <*3BX1P~v&?ZΧΚy`s.0H_ڹ7 Iɶ%,D彤mAKϩvzX!GU ެ?$TTjcQ!Mh} +43Wb2i`|3U@{ jWO`[xŹSP|p?oS'>-;%p*,rTa5&tO8kylEp {Xl]CC'!ܠt'쿟psh\\$4{D rLZmt$zM$Yjql??n"kcܟ"tdأjR*8H/'"Qp᥄D8#Gׯ9F, )Nܯ3y{>AA@CXo~!f(xpbˠYe8,7aN=y~}2YSf6cq8Wl=HBgR+k.젅ML`F>SIK'΀q\%DS3R/KX#=%D>^@gS+Sh7$.740o?SʍֶڈltOV,,| 51?ikw۾!g"҅'@8ߖѲtr( I;3r9Xa8"&w0 nUMp2DzY 4/3&7{=ޡ ?UU(* >B3tI'x"FƯ:Dr6̮93˟iJQjG.o|jgtXh3Uctfٲ ۱+3?܅[*.d[dy@6EC1Xe,7λ,.Nl{5ff29Nz*TM|*CZCcB%LɅ.xRAY=% ZQ4b/OP!Ն\YpyFk;A 6Ȏ" N4b+bߔ!-k/GS_<]n?v" }lP);?XWu9p$xb_ v7\_/b60D̘iz|Tt{|{A/j=?&34޺c+\X]?q#7CNSI噑m|LOLGL8{!ٳToP@eؔm0f!h>&]q M}K&dٞԙd]j:>BPE tl_~GՐM n$ ,l% \VcŪQһ?`N4B.!(9FQZGnʘ/3a$ۇ8+~gDe4ӪOwFuVNo) 6p[OWM>mte{<[dko yüռvvph.b9_= 깝ƞ]AeHq[o7U]&U l /2 5|%~ 1 J`A#07Fyk(zU4 J@C-ed'S޵ E>+hnC v]781r%_Tv;t}F|77$(:7hӷ+_aQq 44>3M/$` 3uSW2T\Eڳ=0FC7r<ĊpH8,jabֱRzh|jPzEV6 :jNpY8'&}OKhUK ug8'ˋd}ʪ}jlPɟ9&uDffśԘN#+Ggfs8R冇MO?ZR T3^ E\xOqѧSSJcMqn~߾۲klʧfFERN׻릦@TG_I[iI{A6mRHJyzڴv$8ukpe=o9@fwLZ{:\z}Z[+A6YP wzUoU[<9#f MJ?NgT:fe i(Rtl9`oKTSհH(bKIR̲f7ZImӕ7gGNv^pp}Y)8I`W)5r]Dŭ؜Nb-uIyl3#l_x=Fە뙭6苵R7 prz򛽼207Y>L㒑ͻyq&mZ[YO⪺qH6IcEku#- k5)be'jsj~/;eI[yˆĽ֝CW!8d0\&taBA!lLVm}e~Bx?/?k4N@iq!Oim?V${X) %fBZ exw&nz.m,Ҵ3 lۻ8Q6}5bZB3.}as]Jx.o7h,ם a>ySQ:CJ₞I\YCk1VEߝ$QӞ?YF-=ص37xCE4̡t M!*Z]։:TkFS\֭x֛8+*kG~j^T4KadP;(h = { Yr[.ۣ ܍Oݻ ģ%~Jy'maTZ\e?${J0\U Ȏ|HPSA+EYDFD) d.?\/8]g(d .3c;%[zn@]׶v:SB\n7f"S$d=r,oUF j2fDocYѴI+HmDNH 6+}zU?6YbQWIxEW hs4Uڙ0Qab oْT/xa)+64ջ'=ig5tփL@ OnNF]ѦbMSy[@쪯Z.Qf3D]kc(\xcCC*})zO)$; iѪM-adt;$WI$|cG \wKFwԸz *$-kz@ yNaBQTZ4DhvXKi\N?Kn$u ƌv:8]%Ndݟq_pX7S/А1?JM`F9(<9'xz6 ,kwu& (=WzUCM4j jVl;UZEc|_n:`AYs˚x+a7wq |;o!𷻲D Ƶ:(1gkKۤ,*vEN0"z絴B lᴻ( =U̪ jj 9Оս2q4;s7Al)3zٯ rc Tfp˱!fr^_ڬ''`ͫ|(UZ>Z/'ٔùǎ]ZO]y=R .I:tPY{G*;^ޘ㩬JK3G7Wӆ΃=z&A$lb7Ke̕eN J?S#RKm.mR5c2*чY?l592wEMP[aq.˵ ]=*U6(Ҧ,EFnQYK`1ڝbAb^t:]M3ck n&@u GnŔf$?gPcO(` jB"{we qZ)8 K,9+u_WC@f e-nW<^s-2ް" ~ .8АpHd8Q۰Z}Oc%0NvoZc1G!En7/صO7/YudB䎧YI>:evoOif81ALy瓅{,|K) 5zmF#c$xTYI9\`|rW ,\i⿩D؈'Kq1yX!RByV=I=e׷)ɪVj/D8aSΛG'H |kEUy0s* yŋg8qeQ2BkE!D~ې L>!oVEB5o` }! OxmOV5W8T9IJR5tq)ְ6#N(Yב[Ry@Fj˨E!"0WW-چ7Hyt[ЅsdDJgȟrn# oj1J_}~ F]{6_$žuF Z+Vg'_Fֿrad hm=U @"|S\\Mdh*3P!(@ =z'1qT1F%|`.2~KG߰oIggBK.sn'~C4׋y\؟ڄ)9`-`1p BGƊecG DTbďam@cFoCxDא2u#*C3Y +%nw؞|JBP xS -{wia(9ܑeCJEqxJ/Ԕ%Lx!wyShY|̧|] Xt'Q:`рX#+ =:*lMy@e9P mUl{V7ɀʗ1,N usԅv$@@Q53OB3zdm xhɝ,h YZ