From 6fd28bf8f7cb00dc509037fe8920f6d2313725bf Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 13 Jan 2026 21:39:54 +0100
Subject: [PATCH 01/75] netwatch-dns: check the certificate is available for
 fetch

That trust is not needed for DNS functionality (that was checked before),
but for our hacky check with fetch.
---
 netwatch-dns.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 4172d28e..2edbdf8c 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -104,7 +104,8 @@
 
   :foreach DohServer in=$DohServers do={
     :if ([ :len ($DohServer->"doh-cert") ] > 0) do={
-      :if ([ $CertificateAvailable ($DohServer->"doh-cert") "dns" ] = false) do={
+      :if ([ $CertificateAvailable ($DohServer->"doh-cert") "fetch" ] = false || \
+           [ $CertificateAvailable ($DohServer->"doh-cert") "dns" ] = false) do={
         $LogPrint warning $ScriptName ("Downloading certificate failed, trying without.");
       }
     }

From cc56680206ac46c9b0a0838b5e83631c78461b9f Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 13 Jan 2026 23:01:23 +0100
Subject: [PATCH 02/75] log-forward: try to mitigate a race condition

The old code looped over all new messages, then updated the variable
to the newest message - at that time! Messages in between were lost.
---
 log-forward.rsc | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/log-forward.rsc b/log-forward.rsc
index 26a23761..ed2226f0 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -62,7 +62,11 @@
   :set LogForwardInclude [ $EitherOr $LogForwardInclude [] ];
   :set LogForwardIncludeMessage [ $EitherOr $LogForwardIncludeMessage [] ];
 
+  :local LogAll [ /log/find ];
+  :local MaxId ($LogAll->([ :len $LogAll ] - 1));
+  :local MaxNum [ $HexToNum $MaxId ];
   :local LogForwardFilterLogForwardingCached [ $EitherOr [ $LogForwardFilterLogForwarding ] ("\$^") ];
+
   :foreach Message in=[ /log/find where (!(message="") and \
       !(message~$LogForwardFilterLogForwardingCached) and \
       !(topics~$LogForwardFilter) and !(message~$LogForwardFilterMessage)) or \
@@ -70,7 +74,8 @@
     :set MessageVal [ /log/get $Message ];
     :local Bullet "information";
 
-    :if ($Last < [ $HexToNum ($MessageVal->".id") ]) do={
+    :local Current [ $HexToNum ($MessageVal->".id") ];
+    :if ($Last < $Current && $Current <= $MaxNum) do={
       :local DupCount ($MessageDups->($MessageVal->"message"));
       :if ($MessageVal->"topics" ~ "(warning)") do={
         :set Warning true;
@@ -106,8 +111,7 @@
     :set LogForwardRateLimit [ $MAX 0 ($LogForwardRateLimit - 1) ];
   }
 
-  :local LogAll [ /log/find ];
-  :set LogForwardLast ($LogAll->([ :len $LogAll ] - 1) );
+  :set LogForwardLast $MaxId;
 } do={
   :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
 }

From df8d0370c5f516902a4fdb00a659e2a7d8da79d1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 10 Oct 2025 09:11:27 +0200
Subject: [PATCH 03/75] doc/mod/ssh-keys-import: reverse old and new

---
 doc/mod/ssh-keys-import.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index 02cd804e..434caa51 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -38,7 +38,7 @@ import that key:
     $SSHKeysImport "ssh-rsa AAAAB3Nza...QYZk8= user" admin;
 
 The third part of the key (`user` in this example) is inherited as
-`key-owner` in RouterOS (or `info` starting with RouterOS 7.21beta2). Also
+`info` in RouterOS (or `key-owner` with RouterOS 7.20.x and before). Also
 the `MD5` fingerprint is recorded, this helps to audit and verify the
 available keys.
 

From 302fc0bb82f7a10403a7d029cd06598e20bd2942 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 16:00:08 +0100
Subject: [PATCH 04/75] fw-addr-lists: lists.blocklist.de requires 'GTS Root
 R4'

---
 certs/Makefile    | 2 +-
 global-config.rsc | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index 3ccad6e2..35a50c81 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -13,7 +13,7 @@ DOMAINS_DUAL = \
 	dns.google/GTS-Root-R4 \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
 	git.eworm.de/ISRG-Root-X2 \
-	lists.blocklist.de/Certum-Trusted-Network-CA \
+	lists.blocklist.de/GTS-Root-R4 \
 	matrix.org/GTS-Root-R4 \
 	raw.githubusercontent.com/USERTrust-RSA-Certification-Authority \
 	rsc.eworm.de/ISRG-Root-X2 \
diff --git a/global-config.rsc b/global-config.rsc
index 25254123..19787a8d 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -119,7 +119,7 @@
     { url="https://www.dshield.org/block.txt"; cidr="/24";
       cert="ISRG Root X1" };
     { url="https://lists.blocklist.de/lists/strongips.txt";
-      cert="Certum Trusted Network CA" };
+      cert="GTS Root R4" };
 #    { url="https://www.spamhaus.org/drop/drop_v4.json";
 #      cert="GTS Root R4" };
 #    { url="https://www.spamhaus.org/drop/drop_v6.json";

From 156b0e4aaf02b6ad5edf734945253e48d90f2c58 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 16:03:38 +0100
Subject: [PATCH 05/75] fw-addr-lists: www.dshield.org requires 'GTS Root R4'

---
 certs/Makefile    | 2 +-
 global-config.rsc | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index 35a50c81..da681d09 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -27,7 +27,7 @@ DOMAINS_IPV4 = \
 	ipv4.tunnelbroker.net/Starfield-Root-Certificate-Authority-G2 \
 	mkcert.org/ISRG-Root-X1 \
 	ntfy.sh/ISRG-Root-X1 \
-	www.dshield.org/ISRG-Root-X1 \
+	www.dshield.org/GTS-Root-R4 \
 	www.spamhaus.org/GTS-Root-R4
 DOMAINS_IPV6 = \
 	[2606\:4700\:4700\:\:1111]/DigiCert-Global-Root-G2 \
diff --git a/global-config.rsc b/global-config.rsc
index 19787a8d..9c35d13f 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -117,7 +117,7 @@
 #     # higher level (decrease the numerical value) for more addresses, and vice versa
       cert="USERTrust RSA Certification Authority" };
     { url="https://www.dshield.org/block.txt"; cidr="/24";
-      cert="ISRG Root X1" };
+      cert="GTS Root R4" };
     { url="https://lists.blocklist.de/lists/strongips.txt";
       cert="GTS Root R4" };
 #    { url="https://www.spamhaus.org/drop/drop_v4.json";

From b72a79824e947871bae437e6ad8095b5cc01b045 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 23:04:07 +0100
Subject: [PATCH 06/75] certs: add 'SSL.com Root Certification Authority
 ECC'...

... to use with Cloudflare DNS.

curl -d '["SSL.com Root Certification Authority ECC"]' https://mkcert.org/generate/ | grep -v '^$' > certs/SSL-com-Root-Certification-Authority-ECC.pem
---
 certs/Makefile                                |  6 ++---
 ...L-com-Root-Certification-Authority-ECC.pem | 23 +++++++++++++++++++
 2 files changed, 26 insertions(+), 3 deletions(-)
 create mode 100644 certs/SSL-com-Root-Certification-Authority-ECC.pem

diff --git a/certs/Makefile b/certs/Makefile
index da681d09..4114b3ff 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -9,7 +9,7 @@ CURL = curl \
 DOMAINS_DUAL = \
 	api.macvendors.com/GTS-Root-R4 \
 	api.telegram.org/Go-Daddy-Root-Certificate-Authority-G2 \
-	cloudflare-dns.com/DigiCert-Global-Root-G2 \
+	cloudflare-dns.com/SSL-com-Root-Certification-Authority-ECC \
 	dns.google/GTS-Root-R4 \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
 	git.eworm.de/ISRG-Root-X2 \
@@ -19,7 +19,7 @@ DOMAINS_DUAL = \
 	rsc.eworm.de/ISRG-Root-X2 \
 	upgrade.mikrotik.com/ISRG-Root-X1
 DOMAINS_IPV4 = \
-	1.1.1.1/DigiCert-Global-Root-G2 \
+	1.1.1.1/SSL-com-Root-Certification-Authority-ECC \
 	8.8.8.8/GTS-Root-R1 \
 	9.9.9.9/DigiCert-Global-Root-G3 \
 	api.mullvad.net/ISRG-Root-X1 \
@@ -30,7 +30,7 @@ DOMAINS_IPV4 = \
 	www.dshield.org/GTS-Root-R4 \
 	www.spamhaus.org/GTS-Root-R4
 DOMAINS_IPV6 = \
-	[2606\:4700\:4700\:\:1111]/DigiCert-Global-Root-G2 \
+	[2606\:4700\:4700\:\:1111]/SSL-com-Root-Certification-Authority-ECC \
 	[2001\:4860\:4860\:\:8888]/GTS-Root-R1 \
 	[2620\:fe\:\:9]/DigiCert-Global-Root-G3 \
 	ipv6.showipv6.de/ISRG-Root-X1
diff --git a/certs/SSL-com-Root-Certification-Authority-ECC.pem b/certs/SSL-com-Root-Certification-Authority-ECC.pem
new file mode 100644
index 00000000..f1166839
--- /dev/null
+++ b/certs/SSL-com-Root-Certification-Authority-ECC.pem
@@ -0,0 +1,23 @@
+# Issuer: CN=SSL.com Root Certification Authority ECC O=SSL Corporation
+# Subject: CN=SSL.com Root Certification Authority ECC O=SSL Corporation
+# Label: "SSL.com Root Certification Authority ECC"
+# Serial: 8495723813297216424
+# MD5 Fingerprint: 2e:da:e4:39:7f:9c:8f:37:d1:70:9f:26:17:51:3a:8e
+# SHA1 Fingerprint: c3:19:7c:39:24:e6:54:af:1b:c4:ab:20:95:7a:e2:c3:0e:13:02:6a
+# SHA256 Fingerprint: 34:17:bb:06:cc:60:07:da:1b:96:1c:92:0b:8a:b4:ce:3f:ad:82:0e:4a:a3:0b:9a:cb:c4:a7:4e:bd:ce:bc:65
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

From ad455c8f1d011ba0bbfcfc25f5b5f7f722b2da51 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 23:10:33 +0100
Subject: [PATCH 07/75] doc/netwatch-dns: cloudflare uses a new CA for
 certificates

---
 doc/netwatch-dns.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 23190b12..c81ca8c9 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -62,7 +62,7 @@ manually!
 Importing a certificate automatically is possible. You may want to find the
 [certificate name from browser](../CERTIFICATES.md).
 
-    /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G2" host=1.1.1.1;
+    /tool/netwatch/add comment="doh, doh-cert=SSL.com Root Certification Authority ECC" host=1.1.1.1;
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G3" host=9.9.9.9;
     /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8;
 

From d673f0956c23f0ab30c19b28cf0090a0ddb6df27 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 00:00:58 +0100
Subject: [PATCH 08/75] global-functions: $CertificateAvailable: get missing
 certificate...

... not the issued and available one.
---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5c70a463..5d2a5044 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -150,9 +150,9 @@
   :local CertVal [ /certificate/get [ find where common-name=$CommonName ] ];
   :while (($CertVal->"akid") != "" && ($CertVal->"akid") != ($CertVal->"skid")) do={
     :if ([ :len [ /certificate/find where skid=($CertVal->"akid") ] ] = 0) do={
-      $LogPrint info $0 ("Certificate chain for '" . $CommonName . \
-        "' is incomplete, missing '" . ([ $ParseKeyValueStore ($CertVal->"issuer") ]->"CN") . "'.");
-      :if ([ $CertificateDownload $CommonName ] = false) do={
+      :local IssuerCN ([ $ParseKeyValueStore ($CertVal->"issuer") ]->"CN");
+      $LogPrint info $0 ("Certificate chain for '" . $CommonName . "' is incomplete, missing '" . $IssuerCN . "'.");
+      :if ([ $CertificateDownload $IssuerCN ] = false) do={
         :return false;
       }
     }

From 0fee5cea3c6b14e0d612fb0ea28fa49967ce7e1a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 13:35:05 +0100
Subject: [PATCH 09/75] check-certificates: move the warning below check for
 key

---
 check-certificates.rsc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 1dd61299..88f144a2 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -197,16 +197,16 @@
           fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>$CertRenewTime ];
         :local CertNewVal [ /certificate/get $CertNew ];
 
-        :if ([ $CertificateAvailable ([ $ParseKeyValueStore ($CertNewVal->"issuer") ]->"CN") "fetch" ] = false) do={
-          $LogPrint warning $ScriptName ("The certificate chain is not available!");
-        }
-
         :if (($CertVal->"private-key") = true && ($CertVal->"private-key") != ($CertNewVal->"private-key")) do={
           /certificate/remove $CertNew;
           $LogPrint warning $ScriptName ("Old certificate '" . ($CertVal->"name") . "' has a private key, new certificate does not. Aborting renew.");
           :error false;
         }
 
+        :if ([ $CertificateAvailable ([ $ParseKeyValueStore ($CertNewVal->"issuer") ]->"CN") "fetch" ] = false) do={
+          $LogPrint warning $ScriptName ("The certificate chain is not available!");
+        }
+
         /ip/service/set certificate=($CertNewVal->"name") [ find where certificate=($CertVal->"name") ];
 
         /ip/ipsec/identity/set certificate=($CertNewVal->"name") [ find where certificate=($CertVal->"name") ];

From 330a616406a2cf255236472f3b3ac8cc6d0ac02c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 13:39:25 +0100
Subject: [PATCH 10/75] check-certificates: abort renew if "new" certificate is
 older...

... and drop the condition on $CertRenewTime.
---
 check-certificates.rsc | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 88f144a2..9aa11c10 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -194,9 +194,15 @@
 
         :local CertNew [ /certificate/find where name~("^" . [ $EscapeForRegEx [ $UrlEncode $FetchName ] ] . "\\.(p12|pem)_[0-9]+\$") \
           (common-name=($CertVal->"common-name") or subject-alt-name~("(^|\\W)(DNS|IP):" . [ $EscapeForRegEx $LastName ] . "(\\W|\$)")) \
-          fingerprint!=[ :tostr ($CertVal->"fingerprint") ] expires-after>$CertRenewTime ];
+          fingerprint!=[ :tostr ($CertVal->"fingerprint") ] ];
         :local CertNewVal [ /certificate/get $CertNew ];
 
+        :if (($CertVal->"expires-after") > ($CertNewVal->"expires-after")) do={
+          /certificate/remove $CertNew;
+          $LogPrint warning $ScriptName ("Old certificate is newer than the new one. Aborting renew.");
+          :error false;
+        }
+
         :if (($CertVal->"private-key") = true && ($CertVal->"private-key") != ($CertNewVal->"private-key")) do={
           /certificate/remove $CertNew;
           $LogPrint warning $ScriptName ("Old certificate '" . ($CertVal->"name") . "' has a private key, new certificate does not. Aborting renew.");

From 0fffb5198eafe53a02c48a701ec7309244be5242 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 13:51:37 +0100
Subject: [PATCH 11/75] netwatch-dns: support multiple certificates

Some services use certificates issued by differnt CA certificates,
depending on geolocation. One example is dns.google, which may require
either of 'GTS Root R1' or 'GTS Root R4'.

    /tool/netwatch/add comment="doh, dns, name=google-dns-ipv4, doh-cert=GTS Root R1:GTS Root R4" host=8.8.8.8 type=simple;
---
 netwatch-dns.rsc | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 2edbdf8c..06a15f95 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -17,6 +17,7 @@
   :local ScriptName [ :jobname ];
 
   :global CertificateAvailable;
+  :global CharacterReplace;
   :global EitherOr;
   :global IsDNSResolving;
   :global LogPrint;
@@ -103,10 +104,12 @@
   }
 
   :foreach DohServer in=$DohServers do={
-    :if ([ :len ($DohServer->"doh-cert") ] > 0) do={
-      :if ([ $CertificateAvailable ($DohServer->"doh-cert") "fetch" ] = false || \
-           [ $CertificateAvailable ($DohServer->"doh-cert") "dns" ] = false) do={
-        $LogPrint warning $ScriptName ("Downloading certificate failed, trying without.");
+    :foreach DohCert in=[ :toarray [ $CharacterReplace ($DohServer->"doh-cert") ":" "," ] ] do={
+      :if ([ :len $DohCert ] > 0) do={
+        :if ([ $CertificateAvailable $DohCert "fetch" ] = false || \
+             [ $CertificateAvailable $DohCert "dns" ] = false) do={
+          $LogPrint warning $ScriptName ("Downloading certificate '" . $DohCert . "' failed, trying without.");
+        }
       }
     }
 

From c0c1c5521eda80539bf26c99d212ab4fe8ba80af Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 14:01:57 +0100
Subject: [PATCH 12/75] doc/netwatch-dns: include examples for dns.quad9.net &
 dns.google

---
 doc/netwatch-dns.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index c81ca8c9..41eb7592 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -55,6 +55,10 @@ resolves to the same address.
 
     /ip/dns/static/add name="cloudflare-dns.com" address=1.1.1.1;
     /tool/netwatch/add comment="doh" host=1.1.1.1;
+    /ip dns static add name=dns.quad9.net address=9.9.9.9;
+    /tool/netwatch/add comment="doh" host=9.9.9.9;
+    /ip/dns/static/add name=dns.google address=8.8.8.8;
+    /tool/netwatch/add comment="doh" host=8.8.8.8;
 
 Be aware that you have to keep the ip address in sync with real world
 manually!

From ad310e6573c554dca3df3e1fa7dea264d6555bb6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 14:05:22 +0100
Subject: [PATCH 13/75] doc/netwatch-dns: always use the same order for
 examples

---
 doc/netwatch-dns.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 41eb7592..286fe474 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -37,11 +37,11 @@ The DNS and DoH servers to be checked have to be added to netwatch with
 specific comment:
 
     /tool/netwatch/add comment="doh" host=1.1.1.1;
-    /tool/netwatch/add comment="dns" host=8.8.8.8;
     /tool/netwatch/add comment="doh, dns" host=9.9.9.9;
+    /tool/netwatch/add comment="dns" host=8.8.8.8;
 
 This will configure *cloudflare-dns* for DoH (`https://1.1.1.1/dnsquery`), and
-*google-dns* and *quad-nine* for regular DNS (`8.8.8.8,9.9.9.9`) if up.
+*quad-nine* and *google-dns* for regular DNS (`9.9.9.9,8.8.8.8`) if up.
 If *cloudflare-dns* is down the script will fall back to *quad-nine* for DoH.
 
 Giving a specific query url for DoH is possible:

From 92759fcca51c20da39b2c44a90f84637d3d34748 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 14:07:44 +0100
Subject: [PATCH 14/75] doc/netwatch-dns: give hint on multiple certificates

---
 doc/netwatch-dns.md | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 286fe474..73829974 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -64,11 +64,13 @@ Be aware that you have to keep the ip address in sync with real world
 manually!
 
 Importing a certificate automatically is possible. You may want to find the
-[certificate name from browser](../CERTIFICATES.md).
+[certificate name from browser](../CERTIFICATES.md). Sometimes a service
+randomly switches the CA used to issue the certificate, or it just depends
+geolocation - give several certificate delimited with colon (`:`) then.
 
     /tool/netwatch/add comment="doh, doh-cert=SSL.com Root Certification Authority ECC" host=1.1.1.1;
     /tool/netwatch/add comment="doh, doh-cert=DigiCert Global Root G3" host=9.9.9.9;
-    /tool/netwatch/add comment="doh, doh-cert=GTS Root R1" host=8.8.8.8;
+    /tool/netwatch/add comment="doh, doh-cert=GTS Root R1:GTS Root R4" host=8.8.8.8;
 
 > ⚠️ **Warning**: Combining these techniques can cause some confusion and
 > troubles! Chances are that a service uses different certificates based

From b52936e94686b183122d04a5668b54cd3fc4f480 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 15:52:01 +0100
Subject: [PATCH 15/75] doc/netwatch-dns: mention ip address...

... which can be used for serveral services that have it in SAN.
---
 doc/netwatch-dns.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 73829974..75933645 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -74,7 +74,7 @@ geolocation - give several certificate delimited with colon (`:`) then.
 
 > ⚠️ **Warning**: Combining these techniques can cause some confusion and
 > troubles! Chances are that a service uses different certificates based
-> on indicated server name.
+> on indicated server name (or ip address).
 
 Sometimes using just one specific (possibly internal) DNS server may be
 desired, with fallback in case it fails. This is possible as well:

From 6468c24d6199276676a9ec70dc1fa81fde7eb5c8 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 17 Jan 2026 16:55:22 +0100
Subject: [PATCH 16/75] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index c7e05b21..a1b9a22e 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -56,6 +56,7 @@ Add yourself to the list,
 * Peter Ponzel
 * Reiner Vehrenkamp
 * Richard Österreicher
+* Ruben Navarro Huedo
 * Simon Hitzemann
 * Sunny Chu (@sunnychuchu)
 * Ulrich Wessendorf

From aebe7bd054aea238b8b2e73eb01fb44f10f9404a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 14:51:22 +0100
Subject: [PATCH 17/75] certs: add Let's Encrypt 'Root YE' for future use

https://letsencrypt.org/2025/11/24/gen-y-hierarchy
https://letsencrypt.org/certificates/#root-cas
---
 certs/Root-YE.pem | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 certs/Root-YE.pem

diff --git a/certs/Root-YE.pem b/certs/Root-YE.pem
new file mode 100644
index 00000000..855cece5
--- /dev/null
+++ b/certs/Root-YE.pem
@@ -0,0 +1,19 @@
+# Issuer: C=US, O=ISRG, CN=Root YE
+# Subject: C=US, O=ISRG, CN=Root YE
+# Label: "Root YE"
+# Serial: A4026BA2EF6C7C20D4047E5E65A69380
+# MD5 Fingerprint: 93:61:B1:AC:E4:DC:A4:8B:C6:FF:A4:A2:2B:D4:64:64
+# SHA1 Fingerprint: A9:57:15:57:A7:7D:B7:8F:FA:C2:E9:7B:57:B8:98:56:90:39:C3:40
+# SHA256 Fingerprint: E1:4F:FC:AD:5B:00:25:73:10:06:CA:A4:3A:12:1A:22:D8:E9:70:0F:4F:B9:CF:85:2F:02:A7:08:AA:5D:56:66
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

From 244eceafee495d68648412d2c3c583668c802242 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Fri, 16 Jan 2026 12:51:43 +0100
Subject: [PATCH 18/75] certs: add Let's Encrypt 'Root YR' for future use

https://letsencrypt.org/2025/11/24/gen-y-hierarchy
https://letsencrypt.org/certificates/#root-cas
---
 certs/Root-YR.pem | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)
 create mode 100644 certs/Root-YR.pem

diff --git a/certs/Root-YR.pem b/certs/Root-YR.pem
new file mode 100644
index 00000000..b4625f4e
--- /dev/null
+++ b/certs/Root-YR.pem
@@ -0,0 +1,37 @@
+# Issuer: C=US, O=ISRG, CN=Root YR
+# Subject: C=US, O=ISRG, CN=Root YR
+# Label: "Root YR"
+# Serial: EC46349360CF4B0FF8A982D93AA9CA3D
+# MD5 Fingerprint: B7:C3:9E:B2:5C:FA:D6:0D:0B:F8:7F:A6:D8:A0:95:F7
+# SHA1 Fingerprint: C5:F1:11:DA:84:F7:DE:F8:E6:F3:F9:9F:8F:5F:36:FF:85:BA:B1:B1
+# SHA256 Fingerprint: E5:7B:7E:6F:15:0C:41:91:02:E8:D5:C0:55:72:9F:F9:67:B9:D1:A8:29:BF:00:CE:C8:9C:A6:04:EB:F4:A8:6F
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

From 68a4ac942e6f2521426359c717f101733c916d60 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 15:57:29 +0100
Subject: [PATCH 19/75] certs: update *.eworm.de for new Let's Encrypt 'Root
 YE'

---
 certs/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/certs/Makefile b/certs/Makefile
index 4114b3ff..2f6155b3 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -12,11 +12,11 @@ DOMAINS_DUAL = \
 	cloudflare-dns.com/SSL-com-Root-Certification-Authority-ECC \
 	dns.google/GTS-Root-R4 \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
-	git.eworm.de/ISRG-Root-X2 \
+	git.eworm.de/Root-YE \
 	lists.blocklist.de/GTS-Root-R4 \
 	matrix.org/GTS-Root-R4 \
 	raw.githubusercontent.com/USERTrust-RSA-Certification-Authority \
-	rsc.eworm.de/ISRG-Root-X2 \
+	rsc.eworm.de/Root-YE \
 	upgrade.mikrotik.com/ISRG-Root-X1
 DOMAINS_IPV4 = \
 	1.1.1.1/SSL-com-Root-Certification-Authority-ECC \

From 9919b9fe7653bbcde0afb3e6b51b0e4ed89e4045 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 15:40:21 +0100
Subject: [PATCH 20/75] global-functions: $ScriptInstallUpdate: get new Let's
 Encrypt CA 'Root YE'

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5d2a5044..fc60ff63 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1265,7 +1265,7 @@
   :global SymbolForNotification;
   :global ValidateSyntax;
 
-  :if ([ $CertificateAvailable "ISRG Root X2" "fetch" ] = false) do={
+  :if ([ $CertificateAvailable "Root YE" "fetch" ] = false) do={
     $LogPrint warning $0 ("Downloading certificate failed, trying without.");
   }
 

From 6e8e841906411ac0b0d8910354688e2603dcd7c1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 15:44:54 +0100
Subject: [PATCH 21/75] README: update for new Let's Encrypt CA 'Root YE'

---
 README.d/01-download-certs.avif | Bin 2761 -> 2671 bytes
 README.d/03-check-certs.avif    | Bin 5079 -> 4970 bytes
 README.md                       |  12 ++++++------
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/README.d/01-download-certs.avif b/README.d/01-download-certs.avif
index f2afeb545aa1e191f3e9382963bcdc172c40603e..e4d8755c85172346e4e3660279c66b6ad43df4aa 100644
GIT binary patch
delta 2337
zcmV++3EuX}74H;~cmZ6Ic}oF?k;O?8WNl<&bP@mx1~?`1cvcBA&k~a$0cU^D{&0_W
z{V!CWUXNHh-u^}J?CgQ%DYk$d;V1gdpvMgw(&sRr6=KY;D3V;?#;6CKT$;8lMP$TG
z<MbPY75A-!Qc$h1X8%T76?H)mcD5KBX8;4TatZqMTo*4b<#-___RZW_O9b9tn>7KS
zNZatTxu$Xq|D6I4EB%b$WS@UlJvZ!h9)JHrI)rSPrmHyimH_gmk^41jWmYLG{332f
z|G7WY^1Nth#)&-3toHUAhq$H9_JXHWwnXq|gF)J#o49pG=Ve=tN&tCxl#S&z`j-No
z$_dBc=<Nu@I+ESb+bZcwMF9GCZ*BCU2Y2p`d?79>O9`|5tG9e4@sxjL@(p|3CcQ^P
zEc!|nr>Zb*EoHqW&DEJ*(9wwtv6r2;t|QHdGctE|7;!{B21pQH5y0EHM=67t*GGU-
z+^I=`i5fv$D3y<E193R$h;VXKcC25uPe+nmXx{1%7Mw|f3#@I0@o7?YYI9X_?OCIL
z+zYTkAp7|vFqf5WjDdd&ifUHhqjTNZs{jeYh*=*sJ`t(ZVa9#J!-9_I`qlv2Gd?RT
z(I;UjQ??|1^*|ck((S~J>^lC%VIRhX2_cO&lWd@{r?kBO;9{&W$As>u*`fjdXhf7B
zkYv6UFvMN^BPLN0&a^^_Eh^E@`(qfV9k}h7DKxQj0suSnd5(XBA2xmsG%vxz>SNVU
zZW;n_elA|0!#4IZ*Z$Q-s&Tp+fB0cC*6q;)C)Ox@##u17`V)W9OZO1+*jz-KLsv7u
zk~|@8&?Q?AyC@bJ$S#H_T*uh#Q#zrp*cY$|F4vgDt>~&1SIAI)e=0@_k_mQUDgVum
z4EIj@_N<myTpNESV)0Asoh@rqvYM*Omfd@e&L&#5QK?7lmEsSCP2Cqnmx{WY((-fD
zy8x$STVoPk*VpL2Y^j+|_#wo<g1$6w&z;ZKq7~tzc{=4Nm~DPj=$CX@rZ*I|TBGXI
zmr1SGhEG}-keTZfrI^2W&39W$q;VdeIh+IWTdyY_jQ@Z2S07d&-gC=uK=z00ZDReI
zC*)6N@355IH0gtsQv`AK3*xo%sI`E=Fk3`~44N=eoh22W!9r~NQL90<gGdS5o10y;
z&d#({f{XOApOBNtPzD|$sYXg3&}Vpo1bRPs_LxGh56kp`OzUJI_6P>MV;OfD=e|>E
zY1UFN`x}3I_6tNHg=oIrInZ({MXs}VSiqLvKU`!%lKxvPVZQ>C1NYfwQ68QV|5`FX
zqX^={l<8nwO4EtmEJrC^ZxuEkfMU@?yc9p7*v<hDQ9-XL+hyx1>d8AMG^gr>W0>;$
zZT5;e!`o`&(~`0UF)ifU|Bbgm4<RzdlMY+dwxNFzosxwakVHC*Xo}U<)UeULdlMk@
z3SWTmmG+jb6bBo@1}2KuSlle|31HCCP;J0E8y2=|C~f?G_k2{swc-?KB}R`0I*HoU
z#Hb4DQj?M${S9S<IO-}+#Jo_0%u+^q8^KCc$0%K}G|Z~X<MouP7<XdrNaxpIF&${E
zq5^-r;ZZTb8LPUX2t0dnDPBCc{>(BCW3;40eI3|Bsk%u`OEFHa`V{!bw!W5Mhk;Zc
zcK-pVb$^0#a@t-}CUj<hAzbvoT+Q3F1n-R}J9MA|2U3TudYh677OQE5?B}~c@vn-l
zM&wMM#H>UZNcgmJ)C#et(E}FJ?7a@D1mk~a7TKe~#nC;CT%eYmp_p|>0HdnerY0?v
z4#~s>Kej9oFzSU6yj&yHjy;_Llmj}WhZ0H?+V0cjG_T~&gg%cRy9X&FBCS_l#=QXF
zuJmcWM-NH4a)AUgRa5wy9s155wXB_j(;maNrL_E=%cvG;+BW4ye)#xy<qehD_+)>0
zY^ELo^7Xl*U|ZdFnB=^aYhL`$*$K&(SxOO{*fvsaA*&@rC4+basmbADD)lXlGM!_C
zU8bDc!U=UjPqhMej!%nbCZ=Cq1-rz)iO)pA1DBFsj*FZ`uF|yy8*zTtBU@0e>Pq#(
z6Ma#px9d)LkG~Ij7qNSfo84Abdv1S-bkx<uLm-C@acQHpG{KJWLc}WG_dmB}Bwu6T
zc1n1eFqC&~#a-3d$V>!VpIv>2g?RIgr)u%Cq4EE=0BM~v*u2rB<|#g1juEW<)1C^s
zx&BI2v&5w|R5-T~kDmHp2_y8S90dlU!u$e9;+Y^&;um7kr_BMOpIhkUIc$HOg5YC*
z?n;G-qrnPkIJs|=V}`Nbk6zbaY1lHaOSzXX`j-SGHaktKVg;5t*(sA~=xf_$;$;?P
znrNB0pi0ISFyxSGO3R28$cWu34B|K60;u{F_#06=j+d|fs#1vG1pI*<?AlJED(jTg
zx;=Ytcjw6^gLg1Esf(glIZA)=?E9;ynM=+!QXst3h$jgGIE+ll1mWWBhAiF2@R;?l
zyzlNSD;nKdM{};U`_g<Ah2C!ffGKz-;j`xBYSd=n?(1YK?4PH%X@1j=<+hj!6l=a$
z-OJ$uYV5o?7R{GjP#4NAmKzjgDi}MbhhT${yCCqA5Dbgdaj3oO$IE|B5+f)My{9pr
zDzFup9rAm&iUc}yCtrI@z%Je<C$O9x_8))zv@WsPC=Z(7@x%NK06LhGtwP``97jJb
zPv?dZ%0kKsZ3@AHkDf)&Kw|NkiK5~4Hd`v=?k*4jOQ#*H=(wZ})Bytt8UE$@Qp4QV
zys<6V^c+DuKB<ZGO8bB8>ssR~T#e&N-!w!xzH)-SeLMHz4!fd3dk}ink~L|E9aMR#
zQn3?ScH|5Yl>{-h_ZmEnZETI1pC9B9FcZJ0Aoq*J4-5ZpM0d`A{Z!*)ZDYW(Y`6ms
ziQ`3MpjE`Q&L%64Apj{mi;wz$wZZP@P4Aq?lD1lKuG2-0AV_&Juuv|9I&Wc+E|u+t
z=-C8BcDJ(OXr(Sn{AKYQ=EiCZcy<w}_}z5pVJWcoZLJ)$>|gX(6C~`xZ{>OEju-mB
zs(N$RuBgh6vz#eBsd|Jbi)@GGW5}GEj-+5;5hVIW8?kEE{O7<`hof?a$4tixS#^8y
Hl?|HG#Q=}6

delta 2428
zcmV-?34`|U6v-8kcmcMNc}oG7k;O?8zHMY-bP@mx1~?`1c~%KBsS}eR0cU^E0nmr7
z@<HwDgZbovzcAk{qFI~y;`db*E`ZqRNjTh5HEI6`gB$P(k%77+muSSuMIY-x$4JNY
z;kAiD8?11X;~wu~iWMXkJ&L|!iQg0<I3Yc6&zc5*b3f{ngl|x5jQi?D?+_B4x)FwP
z22GJEvA)g>r`IVh8&Tq&!^nRx6B%tdfqI3mm`C5@S`}cnuMAeUlo~=a*oyh%lV?gG
zT^__+G4*?EBK^raAGSLIhDu|KRWILJ9f-+svs1*AJpj)rFi+5QWcW1Y;k|l=)H{Ef
z4Ar}I#2!L=K)StX{u)mU2~&mF<qrhY94b2>gLQb4@4K2MW7<%DqLhDKx$IIA{up|@
z2y`4}0fLU?CRy)#=#B0bb_?cH2Rh&nw*e))om-o#6wCY=a|jaW;Q~todCOd2X|i!`
zd9JtFlz~`sCVIOegKB8|UZ&$I+@$<a^~3zz*NC^Q_(Ek(pbe!l3G*q0HS{b5NNUn#
zHfb#I2xhha-8T&+$J&3GlY71Znj;@5j$nh@S_<m>-6M6~#0-VndSm4sBz_OgJ|mui
z5OcV`X8P+Ce}ht{#$NcI0Vv$)p+CBdm?00wmyY#R@p!vMsQM96yEUNY{O^v+QG+p^
znR30gLD6KmA}`_7Zjkp%gL?`Wuv<I7coLbg?Iwb5PF~q4I+uTJCDGF{Xy>dux#)qJ
zoXoR_1+<KILU&Qc_t}rwKUegd;!tYXT&Ao`I`n#29(WpP2uQiwD@)NP*5Zwh^uKDn
zlDn9}HIL=|sQ66N1A<Sf?^BvxQx1|<8w1u46U?r@<syEFI4vVz$B}V$(mis>oB+1U
zVNGe70E<nR1p0sC_+dfY%tzHtnVSLRS%ph{l%_4sj@@-Fb^en`Ot$Dgyyl{SJK3I`
zM@TaSuyJU&pI4O3y{EF>3i)V&iKZ?vtg91Y5>;=L{j-!Xim|t5rdizp(bk-thn}Gz
zR>f2OE3=Ljs%*;T-dsm^^Yt)8=k<ibkPq}gc|>Zed|H1qpyq>zS=bwDY~A=93wiD6
zwCbya^8FwaI@t(4f&s4B#>Ckl*5Mbg4EE>!uL1?!Mqlt(5wEccUf-tzPvR`{p5+>m
zQ^(X)SAxf^tCf93Q?e=})51UNMo07Sf1>w(pxKKQ35G&AcQ(`*OHT?T&5ztF_dG4z
zxCE~C$H{-ZU3fK(|H#CP|9QNlh65YCAdYYqnFcS42Sl0;8gi|2-!~t=BTPkV^F_YR
z^njrdosxwakVHC*Xo}U<)UeULdl>spW08yOJ*ReWIGGz*PVERb^i(#wl=CexQunql
z9U8E@0f}+@HT8&7sd_X<>XADTicL)E92yd(E0up>4W&;gX7d%=bT1Aa{+h=iPa}9K
zN|@yfwg#Dj*Z#)v*ho~<!d2#4bCvk`=|903@<D%dmYpNQ=HCDt(^^VlBbY^@{XdQr
z&N9B%m#BB$bk<LD$!L!c;JAxAegXBmj(}!8i}~nFEx;#ggoR{^*gk4VR}$nX_JoNz
zXJ3DKl7D3=o_IGQH-!#6BVMb1<p&vtXyog@O~&M^-q#>4tzY0HrV1tMK5_STyp=qH
zk4e)vfu#uDH=Wdb2mJVb4(l=AuI~%SNETO7?~N+Z$SZ|Tn51eGZJDIYcZk6Qh~qg&
zJF2e8e=4p?NWqaC=8QNcrnU$Srfpr0(+_`{AFq`CSphI2rLqlCOc-e5Nwa7NI>}Ya
zxX&^I-nSqBitgiJ1(h)e&<Kcup&3!CkqDWVP;|#7mv^v_sF@TQ4?%&Mp#+(B-efiF
zyvIewirT_-=^ba(sGY6<tz`-5%AzmDl3A$=J|0ZbV8ky1`-dpnZ9m3tB_7ZV$r^tI
zGCDJq4hhVdX(`Ygu?fmu<d53SjUQb*K>gGjEJ_zgVLNhj;Y02Ckjun1vsSZPJtjjd
z#WJyfJR1~BQqd>Wv#}Zs6CZ=GzfwFYt9uIQuTd#1e%loq={Z%^wl|gRf>Pg#(x}xF
z*>k)!+7bcl3Ke=(Q41+s>d>2vYx#d#^{?Av*=eJqcuNlJv4ApbODCPJjdE1?PwwdP
z6nU>U849aGW3HVN_B#FO#fdEzd1}WRk+3w&M}rEgt?H(1-SNR?Ergl7sD0%6aC~$c
zKVIe0LPvZVGeI)+@bT>_rZcRGw%*9bcMT8=45Er8?h~2wl{W0BoP(iUjy`|)OmpeS
z6;s<t!qjpsr5(KDHY8VV3G{X7zC8b&G}-nvDKD5&l9K}QYAz3(9n*|)ik$@N92d@i
zh0R}jjemu`B8A)oHN#Y$r(<PRz=MGtv1Es`U~>`EiT4P14+Q%eCRB5S-X6Wi>h3@(
z7>lL`!mwFlr^JMQjIw<vxG{fUrN-NCxwMUvyhK0XC5^Dp9Cz=BK44BDpXq<RdZ*@d
z0Rr!8v<sPJK3`;u#8tbhij7*lIlY`-ypfaU<EFEIwR5x~<==i-WxBsygb&2zSoUdW
z>RizLr)q>NG=7C0=qs3xLMd4ixy=L@*J?hBi<kZO9(RY3K<MeF{~3SfBD*Z2Q}9!#
zq#R%^GI1m_mf(I=;G{~w^@ApacA5{EzCgQ1vYviEY&7NrJ<wf*y>z*I^X&|wTR9l|
zLMVGE?Xn)TTyi^HloS>DhZmZ(Pvbp~)l$^q<NZ49@!DC%PhF~9M@;CmYMsM2sQ^sf
z&N*ob8P$>se9?2fR^)#PEXVu3T1!Dzu&5hfY-^tc-HwZizexWK7$7l{)z6SNESF`c
zOGYKjR)Pv|&UL>0gVSo#HEAWYT)@ht=l6WX?WhHiZz1>cSk8{|7g-IMN}G0AHL0fm
zud-ix2C0eZy&eDY6&Z%IFP^=MoC)$sJsDa;X9@x5I0ou(nstAW%%MFODNj&$FKts#
zA!Wmz?S1smR3^$&)WQ2^W|YtMma=EBF-Srgrw$iLf<gGL_hS$FS!W*hmFltiri@iq
zSPM?V?_QF_Ge#N~85|3d_V4EVtAgfT^pVZ{cuV7~`4=$+FW?rb?uy02c%v6ZBk0po
zB2g60*zE<GCjnH%Xc>Yt#5EPB{Iz}mL%GP)L~*c8x?aL-1KW=!Yqq_cC-y*PXXn&|
ucuvI?j37oEznR;r9y>3nWinXZYz&9a=4h<D(hYIbzIQFMg48;%-K<I5yt9V@

diff --git a/README.d/03-check-certs.avif b/README.d/03-check-certs.avif
index 1f03ad2c01bc115ffec79e9fd3b60259cfcb4e13..6610ac477ac73888b019290462db67c7a76b1fd6 100644
GIT binary patch
delta 4706
zcmV-o5}obWC+a4UcmY?Dd6g1hZDe6|5&#MYI3@CWRtYl7B$FTk6gS0PoEnAH8j%o|
z+dk*g6Eb<;ihCvRA34YJTc>ei1xjs@9Y7<vMi(B-7#ZMLvw$yKBv*hOnv-q;Ab%Ys
zoze8Mpz7Jm<#ypcTc9hAvMyM(8QVGuldW`ym1EUx3bPiE-0ruJ8PnnMToNTDa4c%+
zt=it6Dq$QL1)E4yb8?3Sdg^m?p+EWCRL`(-95V5ZNFyc0BosV>iWU|x77w!_Xed-s
ze<PiGxU3h#TB4(ZZ_8A7w0ImA$$z~0y{5`9TSaXrYsNF7Myhpnz(E&``^(Np{FGJm
z3(@bWzVU-P@b8p^Xyn12xUT|*(l(nCL>g~^7SL{|Ak&*Asgam`tMfTsb&ZW!q)RnD
z81OROE%rlYl{a0Izf{AQt0_#w_=qGs6%-S4yPZr|H}LxQyS7hNPzj9|1b+_XrlYQn
zhzx(?1lwTn#awy8c=&JaRZ8~;Zo!x|Mvo7KF3i5TDyf`O?<I;zc0oI?%A%Y+AQiH-
zaNdmi`f;qXhdf!RKYihvI92ZKN-2SkYs)jQpqMLOt<vZ<dq<<7&If@t<9Q+wMW0^T
zz2;eRs|VxTrx7S2Rz%9}mVa$0`vcr*_L3Z45`lHyrWb^0or@5oTG|MM*h~hq#(I{B
zy@2FNnSG>+TIE+MYjylzdQ)LM<6k)l7*8g1G9~Q#wDQQF_yRqo_HU?_uReuHeZYy)
z{G}2yBxp+?Uo%}}m2BkVd4xqG^|>C3XZfdBDG?R#fka?AqW2cqFMmU~i28#~?)QBG
zX66aC_SMAC!|2a_gbE)R<-qgwf8j|a^?ED?r6jxa<K_ewvmiFAdn1<d#G`&WUj@u;
zumn+mzXt%lmuPeQF7*FioudR$537<|2dZN@wc_040%XLie1(nURL%e8T{A{ol`-V`
z*NoOtsJEnstYEua(tnM(2v&y05Mer|Q4GHX73iA-TH@YE51OHY{9^Gt_(sQEzT8in
z5c$-30$~>x!pZU`ZX#tNNAVk{DhkjV-Y^TQSO>WqS|=;WcDZg~86G7WtV|+}Ex1*;
zTkP?Wo$jCfCMITP5W^d7A)CqPZt6w*;`>>p?6~tIHl928%YV2m@)~y4Zf*CeD*#BQ
zj<AP^0>yoS^w9Eb=P>f3e<^;U;^9Mwu`piu5TQK(ze`m)Cr97#7>ht&@OfBF%)Ulk
zQfQ)2(HWdRh%oMa)Cved4?6(8Vz?01pC)1{<76(Hb0-c^M{ap~S~dY@O1TQoO_@w%
zz^L9gyXW3gsDE4{i60&g*<Uw#cNnHL^?dH)!yh0jf!n!S{c$a>2!Lp=Aolu0*5+6&
zjWyQpYT5X^2<oL8M_{Q6mr|kW4s7M#hr6$%m|&eh*B5<<=`e5ULvZ%`z0L(tom0Lm
z+W4$+ZF1K+MteEtm4?JeWmfLM6|-;QA&rP614~2-0DrkZv)^F8n><MS0ew)|IZN^`
zdG~-{c_45421r0@zk$gLIsq-<QF(=}OkGqvJIYn}OmN35u0gTaX04nI@0I-_=+!$z
zyry<H4lD?}6VgyEs=Z_US$G+c*2{%n3?@XueuxyDNwtj$sS^V-Px)B0hi<ld;t8VT
zs10rYcYl17jkpVK4Xki{+Dk+V#fHji33DqT8L)18Sox~C>rD-VY5-dQ4LLd$eC)id
zQP@m!RbGIL!XADj!8Ot|Nhgpso&4R|&wjj3zW9RXL6E?ed^$1BdU>agzr*CJZRa{>
zH;`qzG>7L45veOn^U!^q&}pBF%{0PAw%e9wRDWg_F@cmep=VIOvHD)D$oL-vTA`cd
zjtXeX74)v#h;=uBC@ugby`dUAX_gsbc)nmlz9U^QrAwB62MhwEBH-6vLzMp|y(`3g
zGJZP6X)eP;o%#m}_5$VrH~>)({@SglwbnQrWzC_cK2|wb=E#YcFw82*GI1Z8e+RTF
z3x7bNjVtm5SQVQjUJ}G;<8GsvZpAniM7i4ueci*t64Lc5ueMxD7>0#Mf>%{yD|`ch
zJDyM<UamMRH*ZEOH5+D^kNJ)F$@($EXW164ZqoaM{f@G6nb;ZahfH*7Z?)FNewFic
z7y05Z%rmf7T=TbO9;~>gXgs0i>@#~L{eL@hq`ZJ+_R9f}2oYeqr!~4m3fa`fI=&}*
z{-Vf{LgXG{z$kFhLA(~gTCQ9!Bm4pT1nI12a5`PP*l3_F`~eI(fZOG52MlEDD6|kp
z)y~6Ir)*I16^9^qOT3>Ki#KLG01bmgHO7^ql~fF8O>Wxv=iv;QBR)=|P};49ihuCM
zLA7O<Ad#>lyZ|iMoF}=Z52R$#bZyLybAr;7<4@;ez96{74o_A3_FJeP6`DsY`Gum`
z``fSST5SeKLBzdNdy#eCerf4KhSufkG^9Q(y@&y^%aJ|n7+9UK`$q=c`#Op}4cJPF
z>}vAUD8e;I$Q~S7hM#ih(Y9Uyj(?@P?;H1;PCNS`3v7*0)Dq$5DijybT0qm|GSiI%
zJ0bFZw{p^LJ-F;W6c?G}sxkVC!`m(}z-_C(;m)QK<0euVo=59#d~Sj<yIKK}^Mej=
zI8_#53tw9H*PbZO$AX!LSvn}k#lqA`N8R;M(@c%ExIeWhQ(hTPPC4H8`G3f94mWew
z<04`ttQ`MRv|WC(JMTksI_1SzbEdLU2hb#CD7S-bEa3=Y2FQpnBT3NZI(wF!qbUlZ
z*}xEQ+%wf}auXs0Qw;ypg-GbK^tzFg%nkZ>31-|4tAGWxXH55aKuEbRy^k5JIW@95
zez)hG6&7DZ+DyW7r}1z0xqpNS<DZj=3!a7xW9AA>h;FbV67|jR7U!~8+p^rk>n?X5
zkFT5<mi0~;6|JcTsf3&HR|cYxvQ@vx0iGHGw;B@V)oa!K4-NIU5lBw79ULOC*|4n~
z!y4HOF=U6&1a>~;NRPfv-`S2$Mn`6ySbs+MoO+l}X9<<DdM;mAF@H^%fg+-L##@&K
zV#q;^m)B+ba?2Kp>ljxDR-wm;8LNVP@(!;hR5{2hu8wQP%>Ab)cT_LP7UO7bRWaqY
zJ!i>KXj;f=u{+3h4q=KW4n9+VZJCnRCqdP+l|{XvQ2H;GpRxdaQ(E0M#OPDi*?B!=
zMpe;Y0XBS{iya<?qkm2g28dfq*9P13S>do^jFnhF9Y||Tiv+;j4^bCfp)m%N=9RxA
zR9HzARSkcCZuNsdt*VlCgz})ch8uoPT1D-+z#O^m0=z`3t#3nZ%8`7%KoSacr(QKD
zj5~XsBY2i-dr4G<<e$N%9Q(|^6a=#UPUbPS&5^?+wIO9hTz@h9VBo3ZJHrnl4xmG#
z?nD<g78WkL?_pI0vYy_R#h00S4mg~nyF*FU0pb69?Yz^4We%r_?xkD3ay?uBIu-8{
zue?ZD9r)K4eSPpV<l1KluAM%ks?k#B<raW-_xDFKS{>UD0DU{jC!c3)W_J|9KwkL_
z7e&dlq4)w^I)76I#ZTa-SPC#=o3i(+Ag-f-=6$iYaYh;&%Po{!xCQW_px&VHs&TRZ
z;KiVQQtXCU6Wy1KRj!?&P`G*K1IHfDEWo*Kg}SEw@eVYa>0k77xQ{SvT-R-Q#=se}
zq;IV`8Y7C>5_M?ZaMJw#r{wsUt@0Qwvp=o*O1GOOWPeNv0c+O0SeJB-nW}lok-Nt;
z4x^6M+HZyWsb&jNGnv~fu#!*qo`tc=kb3I@*S=(3ep8bIG>;S}w2;Ks17xw+$~=G&
zDEeNML6O><!*1N&L5<U}#;uq>oV<&2lsc19A|slpTGS@2avnKIpot79+vSc{7C+V^
zh>_U|D1YC&k`<om_s2>7IN_jnkzDD9b!|KNvte^2j8I*ptF=^7I*-F2MIQSzO;%!9
z)7+y&8ZaVw<UE|dNe+Vcms6|(j^lpk%(iEwhh?+ZHZ9sOg>9|g`OSp&G8I)0raY3-
zMsX@B$>wYL>f?WxYP{l4lC!Mb{Z?m_!+UT7mVdaXFQ`7Dwnv4GtUi)*PJkgGosLE*
z6cuTwCOCviNtT0@vM?fW8>W6Wm~Z`PXZmkzgf`(vi*^ipc-RmzDLBEk0`lnKl6LxZ
z5#L(bqcN~A`r;NbN_G<$?2&ujK@nE8f>5JX+L~)=BV~>jYJNf_{iYAwWNT$`YZ1P(
z1Ao1L?x23XMq<_9)Jv;!m)T-PjK(FbCGQ3lm9>?m>)Of3S{2<jd;g>0nA=MxNYo$`
zZ;0Pl_-;K}N~o8lfOarQF{7OKAyv5yW_k|HUdyJAWcrRRY$z~G<-+=*W`Oc7RppI*
z5KF@s3K!-$Ri1c2rAaq@4NQYbn`ZLP0e{6q2h2N%sKPQD529*wq&C`C4{<(<ka3Qr
zPy#*^jn75iy_&1><Lozuy%)!fwKqR%RNZ+YnT2tS86)a8YOR3A$u)0>Ad=yxW>Qp$
zHprd~dkfmeHQCbU4}Vo}R*~Q}C;{YF{T~^Ya*v=A{$bj{8<>BZpzYUFf8xBt9DnK5
zFS34R1j}u~OD;xv!BO{q!aXAXMV<aNGB8zA#@1cE0*T^8x2gC?vN`}v&s6P0+{!bz
z{}wdlGQB2OEK>Ris=*I>gf~2JDkNshbZ#^;2-@EdzNHJsSpwSh`k(qEWV;y*YTe8v
z5uJqodYq`EFd;bMktN0vz&3zt{C}%oaY<)Z3dJ%Ox_JTg$_cZ~({eVKs@F~O6B*%9
zoz=v_jz~-f1wf-VkNKfk58PCorzCs^H*J4!6ZulB>{Q~5dqvYr@MdA3Q92vqnr60M
zGgjD9MkgFv>SstsN~p-r>De>7J3u~Sub4=-hAMcggQnIAf`?TPoXuk#6@MnpA5SFw
zXT6fg1xRQ-?Elw=H-7+cZt~s(3K|``2%P(P8(RW++W&Lw)JB=Rfl27Om>Zgq-`*q8
zgGZOs_oq6{4!Tx9^6wv0nCQkya#lP=NGEVLiy%a#IrbhJF$4GH#HCzPntANj9j*X$
zSwZNxFn<ZODHlG7=XGE?Vt>X9(Ir&WoB|XPdX6H$SjZHdZHe@4h2@MaEJ_|J2AS8U
z{4P0{Nii6mJ*YaF1Zl2m6`DVX#HwL33rZjn8+uZ!8&IbHD1ZAf<$7Pram!Esz{&0?
z>X)udXoZ=ubs!&r#2XuhG>LZGk-0ZXcwx6{Aux=dGDFK3U=ljM5r4Tlu@A{u&y6y$
z6JrQUU*}3D_v(E!1OtY+)f~7!mSVHmFUUmIoKXQ{+3WDvgyq~n9dDA>#9Am>dR;$I
zvhHM~kW{S^utMBP1(f6lXOs3<nyUiOuNlr9bHibFCMOU%cK_d^kzr$Pg<!%*V6+iA
zg%^+q?<}^;o4Juce1BlMslzIQ+GTY^c{)~Hm9Nw-?Ay?t0YOYK1#-gJ?xZILB0LVk
zruQ>4&QU&rpPNJLz*V%=FO#>gwBw4-1Z40HCx83!oT%|L^&~O8vw&BnNP6jPe|ur%
zvZCNaL8_5F5Ob8;KNPpYGYBw%Uv!wODEc}KQSJW?D;m+2bAQE83BgvJh2^83Kw+YP
zJ+XFK1A=z&xp?gBuRJhb^oP(Z#g<=9!6gqq=o%D|cvkD13Xv>A!DQ~QH#=*p?B#Dr
z1uj#`1ZM$g1bbhWC8S=jD_Geh1I-IxT5{H|@P`;fzFdi;Jg@0iphwKk5PnS_5eXkg
zQwM!ED!;zuIe)}89W7^<VH@bvUM4(ws^g$(|1Xj8CX&^q5w7op_6@YUI3tbA?A<qS
zvp=qRI`ARJHsna%hh9{dqEFpUT|mk7lT&Wcu@t_TuykGIw9|_wG$N+W!?RYU*(NaY
zG1&8*$3X%isUonFCIxMqG|%WCZ+KcNtMpM${h7+A$bao5@x&Lj-<g%nSG5eiTlJf0
z5sj!vV3;dg+${dfA;n>XImsojlUa=Ozihxk8C8G9C8jRs9opl9K2hARnYd94GD2+w
zO)oWZr#sTI?%`1`9OtLCt?>JO6)Jl5@l@3&wWfK2aqzl3dQ?Wi_g3b;$xUX;u4L+V
zrQ39qr+*EO(xq6@W)<Bjn$Y>~r60?nt()XupGs8+ka2SM{eur*Q5JkidjztT*1!tb
zP*A{cMxW;l#>0u_0)x4|H3B}L{9#jUJo?XF`S4eH)-2>w%o(-P_9Sqe?P6|TU%ZDL
kN2F=~G3tu%dQLx}tMi$_4Jk+EZmm#wB4tRE&jVyOV4{os6#xJL

delta 4815
zcmV;=5-{!RCf6sBcmc$bd6g2(ZDe6|5&#MYI3@CWRtYk<C6gcl6gtMscSs7cU=(?}
zj}1$o06ig|6kEv1a4A*A=?An<fslv(0ZGWicn7=@iO7T4h}s4_vsAJ#k5s*NlWPGW
ze>yrBZtbArEC)UUwN5eFA1p&AI9!r3M<Tz0hD2Vn#|adiNt7hB65JY(GGE+!ypiU8
zYPKvPV6=UG8Oek7t_%+OjqfDR!5HW*p45cC7$ztg4uF0|=C_2Wu4%CeRaC?6UO2s~
zNaHFdukPxkZK%X>{p4{QJXFbaq6t>De<{jC>B;r0TG{2{`u4{zI@~{jQo}o&_u*^-
zfW=PBboc|d%Q4Luue8LPjU1W7Iw#in%gy+(X=8NcC9_kptG${d6Ol#mNo>z~r$$1E
zcO|bAda2>)-U1z;d2`h&YGSp-#6jx)f|l|EF3rY0d-5dn_<eg_+b6211jdU3e+P0?
zQP)Pq20!rvZLoM^t~}tpdODy=qQ{_uOW?zKjrz(-hvd}03VbJLq9+?L!ma;yqH!5X
zZM&$2t<|XW(>7J-(D3NTG^|wkYM$&S4)DAlZEN^0*eB$y1qZX)vrzUi(?2_~6Azd4
zhMjkGJnD73FY1kcaIEVu=TBPie=DQ&smC?<;er)2_<Oe14dRYiU>I91Z3IE=CIeaH
zJxfGhz;YzazS2c4a;ucJy8bV{DX^Y#ubhMoCzCmu683#sd1Oy~0UpwOH`GekpF*TQ
z;6&*DQi&N7G$oI(nXa+QwsLVi!XlA++>b>w{L`zHh>G{XqA(oMdy8xrf1%sNeL<%8
zd%l3Pa|GJ^YT{?%^k=@p1rLmJ;CcE#@T8J@y%qw}l3n@n^8yQ5kQ-G!k;{1EQNJ9o
zg61|@0w}-VgMePkv^o8kdVjA@(Sj%k)yXXb)iIn}@osT}GGbM}LdNl`X8-c8nWHVr
znDTt<#%n0lU*g8cSHiFne@5H{D??(4Fr8B<hF^jV+)1sR;`bwm%}~JpF?gN)BV(>#
zZYRx%eCj-bFpG;}Wcd>}5i*dY_>I$*251at7zNcV1Kf?R6P4sUT(>X`j}n)bCJ{!K
z+$!6x_ISun_fP&46EiaiVU4zs&E)g9bt3)oeXP><TzQe3PaXT^f7}*%4LfSLHv80-
zfFx5#SVO~sV!puoXn8hsn0Zk@l)q5%aG}H4m@j*XP@aF^rK+5hqwn|(MW8QuJgg>W
zUcqkD6gK<GjLsiK7<WEu1q2`moq%4kTnK8<lQ9(WvKLJ`lZPlHw>-Tq8vwH<T!m*Q
z%%(BmRBs#I^Y1BCe=ZS3kB<jzubaHPj8htVzISn9kB}8W?cA+?xR%!hKr~kndwn76
zb1W7{n(KEpZ2Vn>byAHZuvCRhpyjMg^|UVRpykKAoYF<X5lUP((bA3?Sv3yKWl8AX
z*tL8|3T6;!uv2qC%<%j}kwH$LsQOrAAX0zP?NbcGB*xL~f5r&k-P*Mw+0XeD6&39%
z`rGk2)K5|+?T>7AZExC0{9N9_)QX7xh~);-$P<<mE1@=U<R}J>)!}ZIUHH(!$89sj
zS>b;kG;_RLRSZnKd$+@bRN6C@<Cl~Exv5#v2JTeXwL|NjKNdx=b=<**+xS>0>6(}M
z7Z_CotPSCwe<AVzKdDWO_qqZ4Vooiti&ex&xzOP!AIGP;@K4L?_ToyL<is*NHce+Y
zK+t(ZT%Po?5W&x?*vZDqRbc#n1$nCb3{i915uZl)jdr;EgNs|%Bsrt-JZ`4l$mfsY
zSRLCW1hcUSXS;L!{O}w!QX<#cx0IoV*5P)ifiHvGf78U3zTT*iSLC>nji!8P2z5Qe
z_1>Kr#m!s^H(ky@rghW>`BQ8gVw7m@rdVZ#;`xCJ_>FYJl`dKM954!ui-TQx4paP=
z^sf={$@uFPq`M6Ycjz1^*bA5d-~mKG`)anH*I3|fmo|o&`B>#&n<6G$!!WBL$;5tX
z{2tJxe=P!rG_S}JU{-9Ar?E!ma|TIy6nS+5#TE0w<ZvaaLex3GTdLqpphE^$#_0K%
z1VbNoKdV}@X;j8N30g;*7!0U#*5BUvY=Taq^C<7qzJZ~w`NC(}7OZa4`<4ipe+UuT
zL^0J9#mXs@mJxAdDu0cjXS4#xoAx*^=boynf9883YI|`~o-$_UqJOtezmk-2giN6y
z9&4LDqyYZiTVTS{Z+bSWNWpGSPe!#qO!)D&T8pH$)vU74Y3NRTj%4rVZZ|~;OPj_H
z*}{`E0F*};EaAhcuuzf07;_E~4e|0HSmS1S0rJJy@;s8F=NHmgrwo)f%$9r@qS&Dj
zf8Ew?y0lvcf4G)3NMBsosqhWl_yZw^H-!;oY2v6VgjpnC5_@bbfU!04Op4=v#kDpj
zEdD1f^~=NyFBvNYK?$_|nY+IqcC_8m(}Ssw7qv{2au{buz@YXzS}AtVKX({61a^h@
z8_QsEbKyvf?r_-ROIo*H`pjxD-$h^Bf695@OsQGViN0lc0=4)PySv(33dtiou5F_#
z*uL3yb~;rTTzSJ9NXN3%E05BW5f+aYG@i7GO2<Trouut}L&PD5HJ-q8I$2Kihy9qD
z&4s{lO{VR{R-D&}`Py5v<F}YZv;u&z8c&gh5Xx!EkpA@tB%vr;P*JW>g{v)3f1A(b
zk;AaCyt=HE`+;U)uO13q%|m<S=;KUi059nD5?ODCkVzqy#wGiB0lUriVA*jAwr%nW
zh!kxVXWG^s^k+$|=<6Is@X?ravJc)&Yr-)NNtmYVx5^e>?7crMROdqIeb(d<22YCq
ze`AkGW+HG*9^l2DU|JswCcFhEe+*OyIO+5sbZ*m_c^p52V$Tdd@I(q@*QkmA{M+z@
zL`8aWeGI7=0^UuL$L<cf=q|hE6jo4#sk|3}6VV5yseye8!d1w7F{aoes%O-8*YVot
z>cUJ&_}8BCOfB?=a8-^^GWCiX7nK_RD+`Tqf!*m}4m$ZK*;7ZO>8b}se;n_Afb0xj
z>j?{%7#iN&?pL94A~ne&<L2HPf?8TS;@^rtb~SD6RWI)rC2LMDwuWY1>L)Aqbn820
zq*`^tquOM*T+zY(qy*r@gSP~RoQi3t(y29Nn(>a~O%p6el3oS{l#HT711l@FP<0)W
z5`!@QAepjsF72IoZ$7u(f1!TmT@H(8$AS@>#Zm%gT@pD~#i}gWIbU1;^bUC3A48dD
zd(I8aB`wQ}Khi+iZvH1Ln-*tQVe?W2UPljA5P%?&I3@a)DqHh^hJ=}pw~W-$DJwf`
z^rjbe;)ZSX!FGXdv~kTwhiV{o`&onD^jAMH9dRo{{XU!dCZ+E`f2?GlED5#rEsiC%
z1D9VnXAX_~m0II1mqyVQg!OK1k|OVYODtASM47s#huEK5)nq|CsJ_K`GD_c{)ZAKg
zw(EAb_^u)gJ-KQvzTcB&)~Moe2Eb6D3t!0+$+aP!Z-fEWw4E4oGTXOS<X!LasdtWo
zwK?I7`&`(mLn2!he_e>3OnNYNvasI+b>?=WpdNzQgwl3`Q~^68=}hv@JO+=4xMnW;
z)4UUe7X{5IAu7U~Zi?Ix9BeOfn<UU4*BTj)W#j}a=-eWe(Ht$5Iuqn`yRsGpahFHY
z887%S6^#;<g#&#wX#jyZs>`7dwiAve#9QbR?0F$R;(}d2e^R2zo~I06qr8V_dEpr>
zDC8DAgLl;M5Y8?E!(v*|fuxCB?#gsXtGHZ$S;^bakcV>jM!l8a_LlB`fNscrrF~}C
zzye~)9QHGs)?VjagHw207%q|4&n49dF7W1{vkXIRs}T~hr#mtqo-IfQ=%|)n!{jg1
zkxl124Mq{<e}B6b&d7CSebhV6qm;l&ut#{;c*HLPZBAsD2fo&Xy}hSb-$XLJXiByU
z=-?e#wfnNe0E0<OiqpOV?*oYRI}G8IUeO`B#t;EBOoVEdrt<r2Z+e1zW^y6Ip|+Jc
z_Q^F1zSP5+pb_D=mB@GnfRl(Ch0yvad@$%BUw;s1e~~1e0Odod|49hmn+<VXA^4W6
z>tW>O88={3<viR_^_amh=Wj<08G~oP-jvt>{2HtQQFjq?6<u=v5CSrKpCk4bd%B~(
zaRSeFwm_&`cBo|={+;tO!3#yx<|Rc(&H-q57m#VI{=aq-$ZY9nI1EhFh*-QHRm$ZL
z4cC%4e?H!EjYh3&!xK*Oqhl{WN37DcXYza_?FxN*3S0V_0mzBlCPAf~m^bJ%I(Sn2
z8=bRd%SUQ3*iTRsZiAQ9l3;Q%j@+L=2dT)Yn{QWaZ-vWI%;-<d&ljk{%Iw_NeT(ux
zn5RP$S|2CWQ}f*Uk-WHZMy>y)W2-;MY!i`re^0)t6NQ6Yowq@dY{Qe)_m=p$v`SUR
ze$mVcDbV4Ld@pSS;3N4Tw8``XzO0O8fHG_m<NT;!+Hl=L<r?h_UPMD>sr7Wh#)y=G
zsNaMBMA3sS@hDfZwlPDdoA;P=WDYCIWq6Qtknq~?)(CkWrJ2Qnk&X`N;$S!;@On!0
ze_(ZfX`QN-ds1_db;%u0aqD4ur4pMM-PA^t!)e|G#>7+waBTxRw9QD+#7u_?8>B(q
z_6F!kRt-O)qJnT*69SC?pdE^aTj_#hdW1>wB2?D3(Q1-^{0~e2`jTc65i|V-uPYke
z5+R->=PU_8?+Ns13)~$@(eOUTNKea4fB$n4;G6>_xDaxUBM`h8HrHq<>eLfPy<XyV
zXNuTbAoeP2dSU?o_-rMeR>FY_*WuMwNDim{$Ab~emNObdb5(vw(E%=B7cLPcSHLRC
z1{q2z9``wbHK{+3{s6z}6xBE`DcKfoY(Khe-T(EeGBbmzz6w#ho)omhFZsHGe^Ag`
zTNC<mk*Jp-dOZqz7EP;|0w~2dMS;mCn!JNiC6{#&2}oD>3|k+rS%o()?>PnC;?1yC
zB;)JHyNZIW^dnp=8wV+bOV2R2ynpZf4S|zhgPmAEj;@Yyz$VI)8kI4|{_-}Gl@>d|
zbjTM4mhn7p%QTt*PcIq@6lct&f3;hakDy||Hv^$*tB6vQ=WSSU*&6Q(-68JrD-~L?
z%CDKTuf+cp3tNXrl*P&CMXD0d>TPf6Njey>08Dc?BRX;pXA8}Q**p9zUZjDxmzRe|
zyKGGkpSf<0doMUO`Y3hjI4*RQgwDxkDzL$z<eS2_mwCZ@#>e^#9oxi4f4nxY8^zi;
zl&Ae5HsQBd7x0XtSnJ_Bp5xnheP_9w=!yZz$wHcwZMy2un4_PdT;Bl!OX9PPQAWyh
z<%XRtd1@4Hk`9ztv}mYHHk<xoKreUMT4)O^5wEYBGbGJxRBMi{FC_PuwT<l|=kcr2
zJk^<neaq|2JBcry&)#=Ye;%S<G;|n=j}LGO?<0xvS{nig_Z1?^x2=0?*2U7l(hDlP
zeBB9`SATHEGWRtUt*{)7Ju{gFE<<3wgwP}d?sVX8VE(vCv#vIeHDtPKHBmfMh>OzD
zq@aCQZP^9}2o%Y+B#8O{tm0et>YRD=w%ska;em>zo7}wyi0zdWf6E>aU=fGyHh`q!
z#n<$29340VX@LB4KC(MU9&NI{dQOp(3(CG|Ou=>t++dGU70usRBqW1Tk+4%0DH(qT
zWML)56)kN{@ieO)#Y~{)m=3}FC@w~2kf>qfQGopad}#7~*XXwDj6_-I`8v^p)yHeY
zXr`H+Z-CiDS=rzIf7hfTOgEH}ZyLX0@hEHgl0_TGt+B`QP1?*ul_$XKeWgsZ$Vz*A
zLW0tMn)*YwNLaEs=oG2u0)yj+(N{CnWMb}+8qR|3jKV8hH=|N?jD^*v3bDJt|197t
zPcRzfE2vv;%+k~B=q0YtDvU+B>Rpx+>4Nhib^~zxSq7hHe|CA$b30b|5QhpJk$*|}
zfHe;au&a~9zW`HgJ#RQ4ACPOG5D%6X!7{sIu*u#a-%9&64a4UbgBm1`ppn!;QQCLp
z92PYhD?Ez8ihtv<QH){nkTa05FzOk{L^vbQs%=<W_(R<>G0>@YR$XF@#OW1bevq~C
zejJw|SZQehf31G;(Ff7Kc*QoPOqg7Ck8hMP`eG?%!OTSiC8keUyltCmZSK*kX@4sD
zz~=VHhhfQT(+us#Ge~f$NpUAXyp_DeV-Iy7Y2Ch*N;3I3s)|m>3gtodhXh?gy@nVD
zd;n|!_NXbvq!ga<Um!FXQuLZFDZkzF5whyqTizRZZQ*U!&I}D*1XJ9b4(T^)MB{Wz
z42#lDQ3bLo;!sgeqQDXA$W5h{#N@qoUylX}zOmB$M{WjEqdr<b*VS)GbkbMuPP#NG
pmz0USaTXV_ad(I~s(FF<?6%J`T(e(d7=-MF*JO|T+2!xfe1Hh{Wj_D_

diff --git a/README.md b/README.md
index f9149217..6f7c03c8 100644
--- a/README.md
+++ b/README.md
@@ -112,7 +112,7 @@ If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding
 certificate chain.
 
-    /tool/fetch "https://rsc.eworm.de/main/certs/ISRG-Root-X2.pem" dst-path="isrg-root-x2.pem";
+    /tool/fetch "https://rsc.eworm.de/main/certs/Root-YE.pem" dst-path="root-ye.pem";
 
 ![screenshot: download certs](README.d/01-download-certs.avif)
 
@@ -120,11 +120,11 @@ Note that the commands above do *not* verify server certificate, so if you
 want to be safe download with your workstations's browser and transfer the
 file to your MikroTik device.
 
-* [ISRG Root X2 ↗️](https://letsencrypt.org/certs/isrg-root-x2.pem)
+* Let's Encrypt [Root YE ↗️](https://letsencrypt.org/certs/gen-y/root-ye.pem)
 
 Then we import the certificate.
 
-    /certificate/import file-name="isrg-root-x2.pem" passphrase="";
+    /certificate/import file-name="root-ye.pem" passphrase="";
 
 Do not worry that the command is not shown - that happens because it contains
 a sensitive property, the passphrase.
@@ -132,11 +132,11 @@ a sensitive property, the passphrase.
 ![screenshot: import certs](README.d/02-import-certs.avif)
 
 For basic verification we rename the certificate and print it by
-fingerprint. Make sure exactly this one certificate ("*ISRG-Root-X2*")
+fingerprint. Make sure exactly this one certificate ("*Root-YE*")
 is shown.
 
-    /certificate/set name="ISRG-Root-X2" [ find where common-name="ISRG Root X2" ];
-    /certificate/print proplist=name,fingerprint where fingerprint="69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
+    /certificate/set name="Root-YE" [ find where common-name="Root YE" ];
+    /certificate/print proplist=name,fingerprint where fingerprint="e14ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666";
 
 ![screenshot: check certs](README.d/03-check-certs.avif)
 

From ced6bf2c1100363bde01ed3e9430aa6c4c5f7fa5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 15:54:57 +0100
Subject: [PATCH 22/75] INITIAL-COMMANDS: update for new Let's Encrypt CA 'Root
 YE'

---
 INITIAL-COMMANDS.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index eb06ad29..c823826b 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -18,9 +18,9 @@ Run the complete base installation:
 
     {
       :local BaseUrl "https://rsc.eworm.de/main/";
-      :local CertCommonName "ISRG Root X2";
-      :local CertFileName "ISRG-Root-X2.pem";
-      :local CertFingerprint "69729b8e15a86efc177a57afb7171dfc64add28c2fca8cf1507e34453ccb1470";
+      :local CertCommonName "Root YE";
+      :local CertFileName "Root-YE.pem";
+      :local CertFingerprint "e14ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666";
 
       :local CertSettings [ /certificate/settings/get ];
       :if (!((($CertSettings->"builtin-trust-anchors") = "trusted" || \

From 7716bb9d6c1830c010f5d14e58191ef2e459a624 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 15 Jan 2026 16:05:33 +0100
Subject: [PATCH 23/75] fw-addr-lists: rsc.eworm.de requires 'Root YE'

---
 global-config.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-config.rsc b/global-config.rsc
index 9c35d13f..e55d9830 100644
--- a/global-config.rsc
+++ b/global-config.rsc
@@ -108,11 +108,11 @@
 :global FwAddrLists {
 #  "allow"={
 #    { url="https://rsc.eworm.de/main/fw-addr-lists.d/allow";
-#      cert="ISRG Root X2"; timeout=1w };
+#      cert="Root YE"; timeout=1w };
 #  };
   "block"={
 #    { url="https://rsc.eworm.de/main/fw-addr-lists.d/block";
-#      cert="ISRG Root X2" };
+#      cert="Root YE" };
     { url="https://raw.githubusercontent.com/stamparm/ipsum/refs/heads/master/levels/4.txt";
 #     # higher level (decrease the numerical value) for more addresses, and vice versa
       cert="USERTrust RSA Certification Authority" };
@@ -127,7 +127,7 @@
   };
 #  "mikrotik"={
 #    { url="https://rsc.eworm.de/main/fw-addr-lists.d/mikrotik";
-#      cert="ISRG Root X2"; timeout=1w };
+#      cert="Root YE"; timeout=1w };
 #  };
 };
 :global FwAddrListTimeOut 1d;

From e6542ba8ccaf939d06162e622575db321f6e81cf Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 19 Jan 2026 14:54:32 +0100
Subject: [PATCH 24/75] accesslist-duplicates: drop unused variable $ExitOK

---
 accesslist-duplicates.capsman.rsc  | 3 +--
 accesslist-duplicates.local.rsc    | 3 +--
 accesslist-duplicates.template.rsc | 3 +--
 accesslist-duplicates.wifi.rsc     | 3 +--
 4 files changed, 4 insertions(+), 8 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index c7784f3b..d9017472 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -10,7 +10,6 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:local ExitOK false;
 :onerror Err {
   :global GlobalConfigReady; :global GlobalFunctionsReady;
   :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
@@ -33,5 +32,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
+  :global ExitError; $ExitError false [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 0eee485b..614b4da6 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -10,7 +10,6 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:local ExitOK false;
 :onerror Err {
   :global GlobalConfigReady; :global GlobalFunctionsReady;
   :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
@@ -33,5 +32,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
+  :global ExitError; $ExitError false [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index e780a475..dad9fc63 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -11,7 +11,6 @@
 # !! This is just a template to generate the real script!
 # !! Pattern '%TEMPL%' is replaced, paths are filtered.
 
-:local ExitOK false;
 :onerror Err {
   :global GlobalConfigReady; :global GlobalFunctionsReady;
   :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
@@ -42,5 +41,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
+  :global ExitError; $ExitError false [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index c0a8b4f9..c935420f 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -10,7 +10,6 @@
 #
 # !! Do not edit this file, it is generated from template!
 
-:local ExitOK false;
 :onerror Err {
   :global GlobalConfigReady; :global GlobalFunctionsReady;
   :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
@@ -33,5 +32,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
+  :global ExitError; $ExitError false [ :jobname ] $Err;
 }

From f1333087d2d27899e9cccc693cb8b75ecb115068 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 19 Jan 2026 14:55:19 +0100
Subject: [PATCH 25/75] mode-button: drop unused variable $ExitOK

---
 mode-button.rsc | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index 81bdc05a..b5c89c7a 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -9,7 +9,6 @@
 # act on multiple mode and reset button presses
 # https://rsc.eworm.de/doc/mode-button.md
 
-:local ExitOK false;
 :onerror Err {
   :global GlobalConfigReady; :global GlobalFunctionsReady;
   :retry { :if ($GlobalConfigReady != true || $GlobalFunctionsReady != true) \
@@ -92,5 +91,5 @@
     /system/scheduler/set $Scheduler start-time=[ /system/clock/get time ];
   }
 } do={
-  :global ExitError; $ExitError $ExitOK [ :jobname ] $Err;
+  :global ExitError; $ExitError false [ :jobname ] $Err;
 }

From 72660f21a5887fe34ef2214ed7f6ca98709b53ac Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 19 Jan 2026 16:37:20 +0100
Subject: [PATCH 26/75] check-certificates: print warning on $CertRenewUrl just
 once

---
 check-certificates.rsc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 9aa11c10..4e1170d5 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -25,6 +25,7 @@
   :global EscapeForRegEx;
   :global IfThenElse;
   :global LogPrint;
+  :global LogPrintOnce;
   :global ParseKeyValueStore;
   :global ScriptLock;
   :global SendNotification2;
@@ -164,7 +165,7 @@
 
     :do {
       :if ([ :len $CertRenewUrl ] = 0) do={
-        $LogPrint info $ScriptName ("No CertRenewUrl given.");
+        $LogPrintOnce info $ScriptName ("No CertRenewUrl given.");
         :error false;
       }
       $LogPrint info $ScriptName ("Attempting to renew certificate '" . ($CertVal->"name") . "'.");

From 28b1297a431079ae8eac352a99c529fdc90fa1a6 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 09:51:05 +0100
Subject: [PATCH 27/75] global-functions: $ScriptInstallUpdate: trigger reload
 on changed snippet

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index fc60ff63..5f84c286 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1397,7 +1397,7 @@
           source=[ $IfThenElse ($ScriptUpdatesCRLF = true) $SourceCRLF $SourceNew ] $Script;
       :if ($ScriptVal->"name" = "global-config" || \
            $ScriptVal->"name" = "global-functions" || \
-           $ScriptVal->"name" ~ ("^mod/.")) do={
+           $ScriptVal->"name" ~ ("^(global-functions\\.d|mod)/.")) do={
         :set ReloadGlobal true;
       }
     } on-error={ }

From b7a5402be62bb59eb9d0400f21f30462508cca0c Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 09:53:24 +0100
Subject: [PATCH 28/75] introduce 'global-functions.d/deprecated' for
 deprecated functions

---
 global-functions.d/deprecated.rsc | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 global-functions.d/deprecated.rsc

diff --git a/global-functions.d/deprecated.rsc b/global-functions.d/deprecated.rsc
new file mode 100644
index 00000000..fe492098
--- /dev/null
+++ b/global-functions.d/deprecated.rsc
@@ -0,0 +1,9 @@
+#!rsc by RouterOS
+# RouterOS script: global-functions.d/deprecated
+# Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
+# https://rsc.eworm.de/COPYING.md
+#
+# requires RouterOS, version=7.17
+#
+# deprecated global functions
+# https://rsc.eworm.de/

From f0b1ca80309123fe972164f6825b3c295dda86be Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 19:12:16 +0100
Subject: [PATCH 29/75] README: reword the section on device-mode

Now that we require RouterOS 7.17 *all* devices come with the
updated device-mode.
---
 README.md | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 6f7c03c8..1dc62438 100644
--- a/README.md
+++ b/README.md
@@ -57,11 +57,12 @@ temporarily.
 
 #### Prerequisite configuration
 
-Starting with RouterOS 7.17 the
+The
 [device-mode ↗️](https://help.mikrotik.com/docs/spaces/ROS/pages/93749258/Device-mode)
-has been extended to give more fine-grained control over what features are
-available. You need to enable `scheduler` and `fetch` at least, specific
-scripts may require additional features.
+is a mechanism to lock down a device for security reasons, it gives
+fine-grained control over what features are available. You need to enable
+`scheduler` and `fetch` at least, specific scripts may require additional
+features.
 
 ### Hardware
 

From 2d53e81292e31e2e6759c4dfd22895381b9d58f4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 21 Jan 2026 06:52:03 +0100
Subject: [PATCH 30/75] global-functions: $NetMask6: drop unused variable

---
 global-functions.rsc | 1 -
 1 file changed, 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5f84c286..7601d9d2 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1024,7 +1024,6 @@
 
 # return an IPv6 netmask for CIDR
 :set NetMask6 do={
-  :local FuncName $0;
   :local CIDR [ :tostr $1 ];
 
   :global IfThenElse;

From 160a885e0285bee379ab6857a1d0adbb960efb52 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 16:19:54 +0100
Subject: [PATCH 31/75] global-functions: make the scheduler fix a block

---
 global-functions.rsc | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 7601d9d2..2747d600 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1920,12 +1920,14 @@
 }
 
 # add (and fix) global scripts scheduler
-:local OnEvent "/system/script { run global-config; run global-functions; }";
-:if ([ :len [ /system/scheduler/find where name="global-scripts" ] ] = 0) do={
-  /system/scheduler/add name="global-scripts" start-time=startup;
-}
-:if ([ /system/scheduler/get "global-scripts" on-event ] != $OnEvent) do={
-  /system/scheduler/set "global-scripts" on-event=$OnEvent;
+/system/scheduler {
+  :local OnEvent "/system/script { run global-config; run global-functions; }";
+  :if ([ :len [ find where name="global-scripts" ] ] = 0) do={
+    add name="global-scripts" start-time=startup;
+  }
+  :if ([ get "global-scripts" on-event ] != $OnEvent) do={
+    set "global-scripts" on-event=$OnEvent;
+  }
 }
 
 # Log success

From 426da3e99ccb6dd95068880a6c5ab95af6af4c6a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 15:34:05 +0100
Subject: [PATCH 32/75] global-functions: simplify the scheduler fix

---
 global-functions.rsc | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 2747d600..ae1d6b31 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1925,9 +1925,7 @@
   :if ([ :len [ find where name="global-scripts" ] ] = 0) do={
     add name="global-scripts" start-time=startup;
   }
-  :if ([ get "global-scripts" on-event ] != $OnEvent) do={
-    set "global-scripts" on-event=$OnEvent;
-  }
+  set on-event=$OnEvent [ find where name="global-scripts" on-event!=$OnEvent ];
 }
 
 # Log success

From e27aca06645b3082a30b3a0b4129f175b288eeb9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 16:18:07 +0100
Subject: [PATCH 33/75] global-functions: enable scheduler if disabled

---
 global-functions.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index ae1d6b31..b81cda3e 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1926,6 +1926,7 @@
     add name="global-scripts" start-time=startup;
   }
   set on-event=$OnEvent [ find where name="global-scripts" on-event!=$OnEvent ];
+  enable [ find where name="global-scripts" disabled ];
 }
 
 # Log success

From 0f9476df281d54cfac14f10a43ed20ce92027651 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:31:51 +0100
Subject: [PATCH 34/75] global-functions: introduce $ExitOnError

This is just like $ExitError, but first parameter is dropped. Soon
we will not need that, now that we can exit a script with :exit.
---
 global-functions.rsc | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index b81cda3e..4301d171 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -36,6 +36,7 @@
 :global EitherOr;
 :global EscapeForRegEx;
 :global ExitError;
+:global ExitOnError;
 :global FetchHuge;
 :global FetchUserAgentStr;
 :global FileExists;
@@ -489,6 +490,19 @@
   }
 }
 
+# simple macro to print error message on unintentional error
+:set ExitOnError do={
+  :local Name   [ :tostr $1 ];
+  :local Error  [ :tostr $2 ];
+
+  :global IfThenElse;
+  :global LogPrint;
+
+  $LogPrint error $Name ([ $IfThenElse ([ :pick $Name 0 1 ] = "\$") \
+      "Function" "Script" ] . " '" . $Name . "' exited with error" . \
+      [ $IfThenElse (!($Error ~ "^(|true|false)\$")) (": " . $Error) "." ]);
+}
+
 # fetch huge data to file, read in chunks
 :set FetchHuge do={
   :local ScriptName [ :tostr $1 ];

From f642b2f40d49ce1050417416547e1020d70b0568 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:35:12 +0100
Subject: [PATCH 35/75] global-functions: make $ExitError a wrapper for
 $ExitOnError

---
 global-functions.rsc | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 4301d171..b9dc633e 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -474,19 +474,16 @@
   :return $Return;
 }
 
-# simple macro to print error message on unintentional error
+# wrapper for $ExitOnError with additional parameter
 :set ExitError do={
   :local ExitOK [ :tostr $1 ];
   :local Name   [ :tostr $2 ];
   :local Error  [ :tostr $3 ];
 
-  :global IfThenElse;
-  :global LogPrint;
+  :global ExitOnError;
 
   :if ($ExitOK = "false") do={
-    $LogPrint error $Name ([ $IfThenElse ([ :pick $Name 0 1 ] = "\$") \
-        "Function" "Script" ] . " '" . $Name . "' exited with error" . \
-        [ $IfThenElse (!($Error ~ "^(|true|false)\$")) (": " . $Error) "." ]);
+    $ExitOnError $Name $Error;
   }
 }
 

From 14b8768b41d779d8be7a247551f34ad50c669071 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:39:38 +0100
Subject: [PATCH 36/75] global-functions: $ScriptInstallUpdate: use
 $ExitOnError

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index b9dc633e..4b86aae7 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1527,7 +1527,7 @@
     :set GlobalConfigMigration;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # lock script against multiple invocation

From ce2ae4fdf755236d0ac608f2f8355974f7f19124 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:40:13 +0100
Subject: [PATCH 37/75] global-functions: $SendNotification: use $ExitOnError

---
 global-functions.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 4b86aae7..5a388e48 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1673,7 +1673,7 @@
 
   $SendNotification2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via NotificationFunctions - expects one array argument

From 20307692168d0251b84f6e44db665fc75e1ee05d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:40:42 +0100
Subject: [PATCH 38/75] accesslist-duplicates: use $ExitOnError

---
 accesslist-duplicates.capsman.rsc  | 2 +-
 accesslist-duplicates.local.rsc    | 2 +-
 accesslist-duplicates.template.rsc | 2 +-
 accesslist-duplicates.wifi.rsc     | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index d9017472..56c34731 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -32,5 +32,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError false [ :jobname ] $Err;
+  :global ExitOnError; $ExitOnError [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 614b4da6..37eb7168 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -32,5 +32,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError false [ :jobname ] $Err;
+  :global ExitOnError; $ExitOnError [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index dad9fc63..cf869c05 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -41,5 +41,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError false [ :jobname ] $Err;
+  :global ExitOnError; $ExitOnError [ :jobname ] $Err;
 }
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index c935420f..88c39e59 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -32,5 +32,5 @@
     :set ($Seen->$Mac) 1;
   }
 } do={
-  :global ExitError; $ExitError false [ :jobname ] $Err;
+  :global ExitOnError; $ExitOnError [ :jobname ] $Err;
 }

From fe09981801ececbfde1ec7c8de4c9266840c2101 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:41:26 +0100
Subject: [PATCH 39/75] mod/bridge-port-to: use $ExitOnError

---
 mod/bridge-port-to.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index b14926bb..c4d0e0a9 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -66,5 +66,5 @@
     /interface/ethernet/enable $InterfaceReEnable;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }

From f570b901a8abf49d22b12462a953c3319f3adf96 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:41:38 +0100
Subject: [PATCH 40/75] mod/bridge-port-vlan: use $ExitOnError

---
 mod/bridge-port-vlan.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 3d9567a9..15e7afa5 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -75,5 +75,5 @@
     /interface/ethernet/enable $InterfaceReEnable;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }

From 57d820f45403612a69c256da689af008da7c0119 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:41:55 +0100
Subject: [PATCH 41/75] mod/inspectvar: use $ExitOnError

---
 mod/inspectvar.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index d8c0bc79..cc745b1a 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -17,7 +17,7 @@
 
   :put [ :tocrlf [ $InspectVarReturn $1 ] ];
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # inspect variable and return formatted string

From 0393a783c9958670f657a32405752abfec840d02 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:42:20 +0100
Subject: [PATCH 42/75] mod/ipcalc: use $ExitOnError

---
 mod/ipcalc.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index a485468e..2a6fd1b5 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -28,7 +28,7 @@
     [ $FormatLine "HostMax" ($Values->"hostmax") ] . "\n" . \
     [ $FormatLine "Broadcast" ($Values->"broadcast") ]) ];
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # calculate and return netmask, network, min host, max host and broadcast

From b48523cc3d290674b064ca527dbe9acdb97c8d55 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:42:31 +0100
Subject: [PATCH 43/75] mod/notification-email: use $ExitOnError

---
 mod/notification-email.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 1ca76f62..832174e0 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -146,7 +146,7 @@
   /system/scheduler/set interval=(($SchedVal->"run-count") . "m") \
       comment="Waiting for retry..." $Scheduler;
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # generate filter for log-forward
@@ -274,7 +274,7 @@
 
   $SendEMail2 ({ origin=$0; subject=$1; message=$2; link=$3 });
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via e-mail - expects one array argument

From a7217fa0cd9ed39e2fe0ee0a31f7067b5d69ce6e Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:42:42 +0100
Subject: [PATCH 44/75] mod/notification-gotify: use $ExitOnError

---
 mod/notification-gotify.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-gotify.rsc b/mod/notification-gotify.rsc
index 677d993c..e919cf42 100644
--- a/mod/notification-gotify.rsc
+++ b/mod/notification-gotify.rsc
@@ -54,7 +54,7 @@
     :set GotifyQueue;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via Gotify - expects one array argument
@@ -126,7 +126,7 @@
 
   $SendGotify2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via Gotify - expects one array argument

From 8492e3d7a17f075d5d8be5fac7d5ac8c4f8470c1 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 11:19:20 +0100
Subject: [PATCH 45/75] global-functions: introduce $CommitBrief

---
 global-functions.rsc | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/global-functions.rsc b/global-functions.rsc
index 5a388e48..17d2b25c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -30,6 +30,7 @@
 :global CharacterReplace;
 :global CleanFilePath;
 :global CleanName;
+:global CommitBrief;
 :global DeviceInfo;
 :global Dos2Unix;
 :global DownloadPackage;
@@ -320,6 +321,18 @@
   :return $Return;
 }
 
+# return a brief commit description
+:set CommitBrief do={
+  :global CommitId;
+  :global CommitInfo;
+
+  :if ($CommitId = "unknown") do={
+    :return "unknown";
+  }
+
+  :return ($CommitInfo . "/" . [ :pick $CommitId 0 8 ]);
+}
+
 # get readable device info
 :set DeviceInfo do={
   :global CommitId;

From e21495054b8de12fe2a8405f620e067729ffa65a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:42:52 +0100
Subject: [PATCH 46/75] mod/notification-matrix: use $ExitOnError

---
 mod/notification-matrix.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index b78b1132..0dacf836 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -59,7 +59,7 @@
     :set MatrixQueue;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via Matrix - expects one array argument
@@ -172,7 +172,7 @@
 
   $SendMatrix2 ({ origin=$0; subject=$1; message=$2; link=$3 });
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via Matrix - expects one array argument

From 06fd89c55cf7a554dd795f1ac9a8f9ad0c29e13d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 11:20:58 +0100
Subject: [PATCH 47/75] global-functions: $DeviceInfo: use $CommitBrief

---
 global-functions.rsc | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 17d2b25c..3634c74a 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -335,11 +335,10 @@
 
 # get readable device info
 :set DeviceInfo do={
-  :global CommitId;
-  :global CommitInfo;
   :global ExpectedConfigVersion;
   :global Identity;
 
+  :global CommitBrief;
   :global IfThenElse;
   :global FormatLine;
 
@@ -380,8 +379,7 @@
         $RouterBoard->"current-firmware" != $RouterBoard->"upgrade-firmware") \
       ([ $FormatLine "    Firmware" ($RouterBoard->"current-firmware") ] . "\n") ] . \
     "RouterOS-Scripts:\n" . \
-    [ $IfThenElse ($CommitId != "unknown") \
-      ([ $FormatLine "    Commit" ($CommitInfo . "/" . [ :pick $CommitId 0 8 ]) ] . "\n") ] . \
+    [ $FormatLine "    Commit" [ $CommitBrief ] ] . "\n" . \
     [ $FormatLine "    Version" $ExpectedConfigVersion ]);
 }
 

From fe987304eab5686de0b0b59da4f0be24c47d899d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:43:00 +0100
Subject: [PATCH 48/75] mod/notification-ntfy: use $ExitOnError

---
 mod/notification-ntfy.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index ac1792d4..cc48e748 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -53,7 +53,7 @@
     :set NtfyQueue;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via ntfy - expects one array argument
@@ -148,7 +148,7 @@
 
   $SendNtfy2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via ntfy - expects one array argument

From 582b0f411eaae63aeb0b4ee7cbf0a21817890461 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 11:23:17 +0100
Subject: [PATCH 49/75] global-functions: $FetchUserAgentStr: user $CommitBrief

---
 global-functions.rsc | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 3634c74a..14605d39 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -572,16 +572,13 @@
 :set FetchUserAgentStr do={
   :local Caller [ :tostr $1 ];
 
-  :global CommitId;
-  :global CommitInfo;
-
+  :global CommitBrief;
   :global IfThenElse;
 
   :local Resource [ /system/resource/get ];
 
   :return ("User-Agent: Mikrotik/" . $Resource->"version" . " " . $Resource->"architecture-name" . \
-    " " . $Caller . "/Fetch (https://rsc.eworm.de/" . [ $IfThenElse ($CommitId != "unknown") \
-    ("; " . $CommitInfo . "/" . [ :pick $CommitId 0 8 ]) ] . ")");
+    " " . $Caller . "/Fetch (https://rsc.eworm.de/; " . [ $CommitBrief ] . ")");
 }
 
 # check for existence of file, optionally with type

From dd4421099f56802af5330628a77059949e1108ab Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:43:10 +0100
Subject: [PATCH 50/75] mod/notification-telegram: use $ExitOnError

---
 mod/notification-telegram.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index 9e9ae57e..f75d2fc4 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -62,7 +62,7 @@
     :set TelegramQueue;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # get the chat id
@@ -101,7 +101,7 @@
     $LogPrint info $0 ("The thread id is: " . ($Message->"message_thread_id"));
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } } 
 
 # send notification via telegram - expects one array argument
@@ -237,7 +237,7 @@
 
   $SendTelegram2 ({ origin=$0; subject=$1; message=$2; link=$3; silent=$4 });
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # send notification via telegram - expects one array argument

From 44990958eabfb880e80665848ed2118b6b7a377d Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 11:27:06 +0100
Subject: [PATCH 51/75] global-functions: $ScriptInstallUpdate: use
 $CommitBrief

---
 global-functions.rsc | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 14605d39..be6e4039 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1259,7 +1259,6 @@
   :local NewComment [ :tostr   $2 ];
 
   :global CommitId;
-  :global CommitInfo;
   :global ExpectedConfigVersion;
   :global GlobalConfigReady;
   :global GlobalFunctionsReady;
@@ -1271,6 +1270,7 @@
   :global ScriptUpdatesUrlSuffix;
 
   :global CertificateAvailable;
+  :global CommitBrief;
   :global EitherOr;
   :global FetchUserAgentStr;
   :global Grep;
@@ -1435,8 +1435,8 @@
     }
   }
 
-  :if ($CommitId != "unknown" && $CommitIdBefore != $CommitId) do={
-    $LogPrint info $0 ("Updated to commit: " . $CommitInfo . "/" . [ :pick $CommitId 0 8 ]);
+  :if ($CommitIdBefore != $CommitId) do={
+    $LogPrint info $0 ("Updated to commit: " . [ $CommitBrief ]);
   }
 
   :if ($ExpectedConfigVersionBefore > $ExpectedConfigVersion) do={

From 496bca336c7e9f65f7172160a7fa963bbcad3560 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:43:29 +0100
Subject: [PATCH 52/75] mod/scriptrunonce: use $ExitOnError

---
 mod/scriptrunonce.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 598c7602..39067d95 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -52,5 +52,5 @@
     :return true;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }

From bde26dc1a55967e496e204d2c10001ca02b62872 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 11:35:57 +0100
Subject: [PATCH 53/75] global-functions: give commit info when laoding

---
 global-functions.rsc | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index be6e4039..710b755c 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1950,8 +1950,9 @@
 
 # Log success
 :local Resource [ /system/resource/get ];
-$LogPrintOnce info $ScriptName ("Loaded on " . $Resource->"board-name" . \
-  " with RouterOS " . $Resource->"version" . ".");
+$LogPrintOnce info $ScriptName ("Loaded " . \
+    [ $IfThenElse ($CommitId != "unknown") ([ $CommitBrief ] . " ") ] . \
+    "on " . $Resource->"board-name" . " with RouterOS " . $Resource->"version" . ".");
 
 # signal we are ready
 :set GlobalFunctionsReady true;

From 7e4463473d4ffedbd3728c451b79d222087b4250 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:43:40 +0100
Subject: [PATCH 54/75] mod/ssh-keys-import: use $ExitOnError

---
 mod/ssh-keys-import.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 16a02859..1bb283d4 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -68,7 +68,7 @@
     :return false;
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }
 
 # import keys from a file
@@ -110,5 +110,5 @@
     }
   }
 } do={
-  :global ExitError; $ExitError false $0 $Err;
+  :global ExitOnError; $ExitOnError $0 $Err;
 } }

From 2a5ece122fd429cb8013d5eff4bb90a703bddb19 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 11:41:18 +0100
Subject: [PATCH 55/75] global-functions: $ScriptInstallUpdate: drop output on
 commit...

... now that we have it on loading global functions.
---
 global-functions.rsc | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/global-functions.rsc b/global-functions.rsc
index 710b755c..1d5f55c3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -1270,7 +1270,6 @@
   :global ScriptUpdatesUrlSuffix;
 
   :global CertificateAvailable;
-  :global CommitBrief;
   :global EitherOr;
   :global FetchUserAgentStr;
   :global Grep;
@@ -1435,10 +1434,6 @@
     }
   }
 
-  :if ($CommitIdBefore != $CommitId) do={
-    $LogPrint info $0 ("Updated to commit: " . [ $CommitBrief ]);
-  }
-
   :if ($ExpectedConfigVersionBefore > $ExpectedConfigVersion) do={
     $LogPrint warning $0 ("The configuration version decreased from " . \
       $ExpectedConfigVersionBefore . " to " . $ExpectedConfigVersion . \

From 20c904eea2703a4ae7c188e5799bfbc2a439dcc4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 10:44:03 +0100
Subject: [PATCH 56/75] mode-button: use $ExitOnError

---
 mode-button.rsc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mode-button.rsc b/mode-button.rsc
index b5c89c7a..6dc1e43e 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -82,7 +82,7 @@
         $LogPrint info $FuncName ("No action defined for " . $Count . " mode-button presses.");
       }
     } do={
-      :global ExitError; $ExitError false $0 $Err;
+      :global ExitOnError; $ExitOnError $0 $Err;
     } }
     /system/scheduler/add name="_ModeButtonScheduler" \
         on-event=":global ModeButtonScheduler; \$ModeButtonScheduler;" interval=3s;
@@ -91,5 +91,5 @@
     /system/scheduler/set $Scheduler start-time=[ /system/clock/get time ];
   }
 } do={
-  :global ExitError; $ExitError false [ :jobname ] $Err;
+  :global ExitOnError; $ExitOnError [ :jobname ] $Err;
 }

From 334ff7162a47b79f6633bdd782a26ff99410416a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 20 Jan 2026 15:52:41 +0100
Subject: [PATCH 57/75] README: update screenshots

---
 README.d/05-run-scripts.avif    | Bin 2388 -> 2572 bytes
 README.d/09-update-scripts.avif | Bin 2641 -> 2865 bytes
 2 files changed, 0 insertions(+), 0 deletions(-)

diff --git a/README.d/05-run-scripts.avif b/README.d/05-run-scripts.avif
index 12d812c0cfd1c9fcc1ce63d5c8ff1d0ce8fedbbe..f8ccf5bd6cb30b24c11371845a8822851c87bb20 100644
GIT binary patch
delta 2317
zcmV+o3G(*T5{wj(cmes5d6W|g0c~VqbP@mx1~?_MdaM#M>=Bb70Th46%Xdf$v0xN=
zx{nP@p8!1}o)lZi$Z#oD#pwsMPJxhz{sBqI!*~b05sAoy*ofK&JF`@)GLFldBv`So
zQI$7%G89AEf}$~w2G#{;gByWVE~P;dg)_Yn>Df^GNu>#RoHpH9Xnh@0G<jyF5HAzT
zz#giDgKv}qe1X;1%=3Tf(|$(=8mP)u3*ygtuObU~Az2<=00&*)O5TNtyl$salu!8b
z(M(O$^mz6mXj2N0;Bk?Iw)m#_sK4C2H--*obILUjr8C(*ry9t9<d74nqaYOO&ZHfG
zb@rd&b`P5vJbEH%b=|Qrw}-|zo$6`;a9GC%x^7Y`o>JiMv37s;TObD`l84cB-_BM(
zq(wglIq3a<`-<zR=l|9jr{)&bF*%^{5k{Totg9GWO9zJ;S?Qhe{y$n?h8y@Vjt_Z=
z9SJ1&kTD5bPzx>??CX1>^2uBIoSRKirG{;Ghs{Q|W<JeV(({j>&gWFRAA1^Jf|j#N
zF&x~O-07w23`T#HHAoC43xMzUL#;LtuoxFEo<6(B^aY1hu3^bkEU+bV&pQ9SLM#9X
ze!j@fMm1S7^TZM7GQMk1K<jJrP1UjCALMT!nHnb-sGT}*BL3J~a4f@n;H501-$ldt
zs=5LgPj?Iz(Y7g+0#>$w2AkJYAcU`h!i7BB;Z606Un_sUX>5XxFUIy3Xg_xLv40-}
z&vV|=c|{r;9kF{OrD9sUZD?;%N>S2(39#-5oA4XFk>Tbs>DGTlrA>PKP*<<ugTpC=
z;CS8_DTi3=3ptFD8Q{&Y->%y&z<SAuKcTqwm<DFE{k3PdEr30(>OyD6tTFtInUM}q
zzqIn0^@M-U_3rs1?=KeYn>ca33*LvkW>`+|WVLMI7WdS-4#ratHwdn=GN&_qvO;nW
zo=6QzaxfPe&Ac8uYd7TOen46_2*!R)3j;7T<Xw2}6jPE*UJ$3j)hA~&qlP~dF~B*R
z^;P69SLfnJ8MysWkG?6<*(G1qesETsdrRF)Yy*GPTD-qn-wcvtU!@}Ra`~YhmL}3Q
zs8H@6{(J6CP5~jM4}OMPI3AKG8^S|L5MDqq_gM$Yshno3kP7`j{6XLt(#NL>e3FDm
zosc0>d8)VXb2<@#>`d0F9-wL^Lg5rh`0#eh`Mb-w#WC1d@dRhtuQ5WBkq05Q8Q825
zlevH9OM;!o@9c<NveVvGJ+~o34YqW30;*|)EoE0{o;AM~0?7{bY~#fK5gt*y*N%*j
z@Y+8)EEy<AH8y077}wTsRhiBWI_gpX)c9R1w8erwOY6#uRUL{2(neRy>>D|DrKc_n
zBTLA0y|=KsC{sUfNgieUhs!>)S{7!DmPmhEI?{VRaNlR2x*)2wxzle@PO0Va>XnxG
zPkM?KXtOPHU)7Gh2kI_`z%)0-b=v<vS2%mt=kXDvpxnk*rerW!(v~Y=<hLE76;bGF
zUQmR7-l&jQ<hYTIrhI4!bv?rM-kt$c+$j)Wfe^VmfR_xK%zxJ8h|$|ju*(a@^8$Yv
zZ0>YxQK?qkh|2hnE0pjIv-RDssf0|lOhshKs$xO_QimQX#70FfyZfOe3jf26b&e{!
ztEwq+%pFLLBNDMi@hP|$6{G0?I$=uNtf7r7@&s5Fo43)G$zo9M+LIeKqbsMnjfUHO
z0Pi|Rxwv5T7Ju)}78x}g2wpK}z{!8;^%2r$^)RvLG4adiNMV3aZnhZ!MtQ&!A!Hin
z&N#Xt6bOQVtqdz|K+${IoniF!?|4z3CO24lFM)ChvWzs$xP)r@D-hsKnvVoKVRx(+
zS`38{q@DheweexgfBc?;x*?wTg2M<nP7n?8@*h~{?v|s&y+&J{1-)8{wS0fSnWtBM
z+Llm01tbcY<dR?42(L!7t6l+?pq!YGuxz9x3{SQ|D^~92YirdS4PAiDo3#P7k85hq
z?{nebKgdTV`+(q2#A9O*VEPQ2S?#aX{Rop&cSlYRrZ`^JGENc4W?{1y9IY$>rNquN
zI27cu4H(r28$z-bN*}8Ia0Y)<Zq@q`ts=HLwxWOSehp<C@V4uAR_;HUEP;8Jb)&`@
zs8l3$0#`v+5Lf}y_blx)v9nBa-M5Vl)nPWD9#-L;<cjs4n-WE=*0I@2{tPd)h`XR6
zK&oq1cfQJm79oy_$c6z#EIo?=Jv<9NbFnT&=a`%sU{AR7U?6En69<2)H6w;5jj^PR
zl7dObR#SaJ-&~gYjnQ?W!jcgh{k`Kp`evlWLnO$BwrK7)qK)*Y!7=6#6OW<`#m9Q;
z-&kk8fxoCarhjZ65pqjF_BRplsBOzSMj79h51xeOL=a7W(|h4aCJeeTvLE}=oJDBU
z5%!+WnIYplbGcWnA2)w6#!(FT;Yk7+5haPK2sO<rFQDN_Up0o^nM^~nTYAqEMP@?c
z{J^cA7k2oKE@Z7k4L&N^fokc}^~Tj9Pd5~N#l^i>^ht9(TzDs-cyhHXC3-0tIv3J9
za+JqDDD@|zOZw#%55K?9TqusRUfEzs%c=3dT$*~Ns`=ZP9g2UjsQc0~S2S|j`T`F@
zi(CTu7jt{0bQB&>P(x@Ti2nm<Js<!_?JRZW?V))NJDFrnNX5T{8Q2s?LWrfpf=Fr~
zzV<Y=ECR=f$s##W6cN6_D;BILa-_7Vhq@SMyf}T?p_&3L?fhD}`t9fkCR{%p8zaRv
zfAH)lrQmcE>Rx~16RU!J#`zFY-+r=Pc+Bz377+)w(y1G5=o}U&A>1^py&+|qK-S&W
z90irzeVK{R&<|ya$y_6f{b`)_RW<W^hG4^Vz$s8F=LBVCqF_9PBUhINf<5Eo<!f9=
zGBd&^OOSU3)-}1to9+tIP@d|0H0w2D{{R4csJhNKE7@rw1^#3`v5abBBpE=+v5I*Z
zD!yDYm{4JA-RClrRNlp4AC$22r**ew^hgvPqyM|2Rjcya|8-mz|6tOKIlbR?z}qW=
n1ULrQVR4lEc<S0!W?%YDKFm?-W=s4&K^{Pf`2Al-BPx%0Dw$(o

delta 2113
zcmV-H2)_4>6x0%scmY9?d6W|fNo{0dbP@mx1~?_MdaM#Mv=EaZ0TejJU7Q+))Ebcx
zmfJq((i1Xy-imuA?;knG@>{2IVg*WVkR3oHxJDNq%NQBpShIjHR8(phIxKjTZvhv7
ze>!~%R;!vM{vE;0{%Z6DeCPh0<<<Zg$cf#Li_p~&H&#D&NviK%@@v+?b+r3#$bbZb
zytj?Q^P>UQ+M9yU2JZ67Qb?7<8}~LSgu4ejm&s{XWzPGG*KhFTy<g?1J!SrDLid(7
z`D!Gbm&XMWE0{q&x*KK=NBAXPYyVPzG_0X|VgavqDD92b)_b;h^4)g*AZ+zwE;gac
zC3fFpSTM@aq(y}RtyS3dJ{GmYurJ!qN`?Dx<DXg2E_F6ohvbuW4siNAf@HM3k-L{X
zqR`T6H5)+BiY{ieDuFY;Kga7!(8GRC$YPf8=IF~Z@&+L*N&#iV9i3@!)@Dn8u11m=
zZW&uP$%K@&*38G*smE-;Ivg)ZGpU}KzxyWUCQ%Sgl{qJ#dumC0Va6^1rN)VgV{%DI
z+d^*;Y%1d%+)v+Mp!eNHGe`K+^W^_%RjgvlnOO$kBg@lKY%q1U9b_YK0U+w?_<6Nh
zHSl5-Cq*zpi6vw{x~JX(6!d6+fDwGL%do8<v-cHG6*xx#*LI6Opp_ePm9JpD>1<GP
zZC@x~0LdV%Z4!smG?e;*VUta(+4m8yy{*rzXMypsIWN0B@Nev*2nuV&BqLPa<x7$V
zCLN>N%>_9%jU*usKCCB%>_Pl{j)-DA9l&zSttn(Ey2-R20qwAw25TCBv6|GH3_sq<
zKaNl9W+1~~Tq;t1U3@c^;!UUE&EJ0Rw+F8RWNn_e9mqGzQGoL@_Z|M^v|EGgPTDYd
zp%t8ILN_W^(d`YhWq#tpn?F<4MJ(lg71c2d644X-glC{=!IVGP4RG@HUCFuX_?Za=
zrD<I!T`EV2fGX`lt9VX-PDyzu5`GzUOR^{}CDakmzS<D>N|p2&SG+SZ`N8~P5+*8R
zs<Bm`WJZ7O|5!Tlruc7>@qOlXM$+r?04`N<U6f5m;@6O?zZnY`kOe)Fk`1)Gu;Mq}
z^vA4r>7!4~+Pmb!v#<wdnqv?~@My_*St8lJAj2?Vu?vi0A0*^|YXNLh%*XhS4=gj(
z3z}iT?j7-+?S-NhV9vAEAl(KRdrL1jPMi6^j+r*$8(J1*&>W|67o98KOdc7-rZ8$*
z-v1$Z|2=_yK;pmKWnsOiXR>qB)EN6zdB6Xwz>Novg@xjunYlyVGm6PP)Q3n~63>!E
zj$-ux!raoSdd0JUSLL`1_0L<dr)jDaj)T&sQvqKer>2*O%_tTS2MAc|mN9nG^1r?Z
z$n@C3MlncoT#WiRymL=0!{muAY)l9KKgLaqRt_@va&Px%oa4tBaFTq}^Us>MD3=t8
zhGYsQk#Eo2O!P3xzw>f_Sossm5}QX@sT*z=N!-;WYzAb1I>sFxiHWdQKtBhvHpFjg
z7b8b)GQ%t{7t9D=><nv_R5rvK+33^>lp&OKZZDw#Uz;d+d+I}Ok?}nOuP|{h5|4%>
zcqsKwO9(CX);O*YL1b$et*Lwk+p+^@g&|<~oHk+&P=`rva)vao$Pr*xZu2LCQ$(ks
z>j#ByD*=Xo$lOWHjh*ct2TS2TI&RKid+b2DA%n1ka-pg)ZQJu^W#TK<e_d7E-;UqW
zbg-BhZQn=&3HMy2owE_GM1;#1E)N^r55P}WM{~X2%?QqlwP+0h>Bj9DJTu=7d74G#
zd9%jENI-1Ea4lY<OqqxXfbUCyq4ltd=E{sQD=8R%VBMJT05%N}*BVxeRZuaVHM?uy
z?W_on3fUAL$<2-v*wC2{Baw82ln@30r06KyD2J@ehoiQ+y?%BC6Ym)f_ZBw9i*NKU
zny|{b6tj1+3?V(Djg<<oA$JayK&DMh?fl;4U3Z_FdQhRYxxaT<xewly;`IKkkD<NZ
z^(hs9?-tzqI*L6F*u*;ArT*I+3*4HL$h8c-k2^8RTJGh!t4wDZOmd9fOBM6YR6Z)V
zaUz7gU{PujpkoeEZkd|Tw+~MOVTZRJhoXY>JatAtQCNFryZ38>ZsL~hi0y=i$A4@l
zNbj%b=A-ot=0I{MZ(y(vJbniDIRky}|9>fe&AnMn?_h{0b97kD$DMh!1|h|kFz+v9
z*XaRJlYsyu^#V&Mu^vP7NKBNTRfdGLdIp;TC!gsMaKS9%G-?A+7YoKkN7vL>VTzwx
zXi7c}lE|WLOBlpYy-IWdmAoY_TxCjO%wS49e_BNcda5Ui6Cw(l{~XjFQl_<0_Cg$g
z6obzCebZmbbuWgh#!0@wrp^x*86d6>(j-1_S}2GwH?99{h0mbfXPJ!2Xa{0A>OsXF
zSh-0ocyx$*ptjCX0s!~S%C)AWK^?4#Hq!F<sxjGg7hc;JwMgP!u1HkU87>~w6(YB;
zmfJGbEM=sU;sHNAVJ7~t)$D%RBv`k9VgoOor=?n!W(@ykdHwmvcOzwWyiSaGQU13Z
zgKs&lkAGO3CH<4o&)sFMz#>BVBK>`p^Op!2>r8NDVqfD+W_zai0S7Y;YC2ikILoc`
zlm;Eq?41$2SFMS<KnXbtX5fEY8<X~4qsKuaMJEew_x1qwU2xhuMmu{Kfat7X%!1Hk
zaub#%x)~*cuI8O5O6JjA(^$L2+;MyN#Mt8S6h=P(_jF2wWE_Yjgb$SVr`6meb_*))
rne-vw8@+>byj?e1J*E;0T_qISr&$PYTkFY522fdty(5&e=+WmO2xb8j

diff --git a/README.d/09-update-scripts.avif b/README.d/09-update-scripts.avif
index e713ac2c48e8902e88b1309c660128a9d47032f5..39ff98e846fe8fd313aebf26bb950fd54280e2be 100644
GIT binary patch
delta 2255
zcmV;=2r&226tNbNcLE9?k$IF83MOr2VRRAz3I;eOvVN=*GLaOsAOU#+fBYI2WyO#y
zdjcr<&~fRbz9DYP-DMO=r$HbcVquLMaK{4$aMeqwr<bohI6|_O8n?PSfpch1g#Tx~
zy*bEVC5lS!toG8*x4q0R@0Cvsh<Lgad2X;KY|5aynJ?SbpFY3?WTX9Ek#DUmmS+{-
zSt_U6<%dV4ChcU|J&Y{Be^wJZa;Qrn?l5>)T8cyd2Dv~nAT2+lS)1~V$jyiHNEOYL
zg(jGE&d!_X8H(;D0yXQMM12_B18#<DHXDTQH>p%UBkU<2+vS1U$+69dd@##5Ih%Et
zZBHHoG{wXI;pryp@>R?%yPUv1<oMUC?Kd=xWz$1hj3WGs)um*of5e;28Jyb|ZM9oY
z6p}L^NYh4g%KG{^#r)N>ul+0(>CO*WT9K4`l>38qX7N2rj#>ex#?Jd=M8GL<@=CqJ
zFM+|sm#SmYh2l=8=Q*^+JS)Gch9s`!ae*$T+Pgi)dflyCvulfo86g>QIhoke$uebQ
zR~pjEYxtNBJPadVf8Kz7@~R=gM4@)SQgxiGZ<W1kx<sdKmZoe0UaRH$Y*LLNZZKq+
znM32~osu*KmNCTBNvv9|3xBByzYN|~ST{=K<2&8XFUeHm`~gHt|Ar#CiOc<{HF}ky
zFsb8$t>kflhG_u4!eVGSf9v5OrsR2P7oArKZA-Sw`pYY1f6=$>E2r>IyO?d+>-%&e
zt%6uX_Y%+hxa?DDo;bZlioJ5Khv1+egIof6c#J4~rpk}WN81WqkACsH?UKcArbza=
zGT9TKR3ERv08z-IYBan5RAfK`IO=aNTAh^DoUNy?NpsQH8slRi9d4Gc7@xOn@M|8(
zm60)U8gL#~fBxN#rUPX*ZbalWw?>cZd@!wEm>L&F$G|W$l}>Geqq$2>=a8h)F(cLh
z1r663{K9+DP2#gt)r2yj3mofwI9-|mH{RJTNBlA9d^|&!IeuXLv{t)%mzR48#e+(*
z88au*#lzq*6v3ge-2GNuaKujJR77TW%$a|n2rFT!e>Lip;aPV6hodxchY2UmKR)Rp
z=1|a{(n&!@Tz_?&Q!NvqObD2MVMJ%LPMd*&<75w>cYmWk%znn9V6D<Le179wQUCLl
z50yTJXwlnDu*(a@^8yA01Gq;2olWy2Hl4ZV@W8CFFg!QO6{?Tc2PKZTkM^4jC(A;X
zcon&me}T+WGYUm!y2ZUtLNIPLvU?QtZ$xy$1s$#v9dC5l5lmFutf7r7@&s5FlCh|2
zcT72O8^t~6ARpnxO)w_x$AAH_Xok4bv{I^pjOnf0Uhfy7W}<>DY(2Mna(bkWndGfn
z@glp9q}z`TMi^%jrfx!jCzh8K*IBJl>sC1If2xF4X2Pg>IIMuHW5vmC88Hdsu9-+f
zODJG3F^+hpH@O#G=jNW2C~a+p6-+KKOYtCp2>cvhnL_YZ=hQ19`;eoVCv2u<;K()q
z4@2AflE}3TypKCE$y)7eY1Y#2zGEJbB^mlFhz2Y0>&gH>--$CSSaR);Oeh&lYa(?Q
zf3ikje+e;wYV26CF@;M&d|sUs6q0zj=A0@Se7WFf04|03*y~8BYhEeV#RB(n-Kk@_
z;3wwTP(8Kw;-H=%y^B|1ic;LOBo|YCe6`q)OH87t7KKRrM`WT71AHC5)(&{I`7-fE
zSjw=CFK)^|NGQlGQ&F-1?(B;mXD{Jie~fA_B`l6>$R4%PG^Z*%zZbZrykx#8Sk=c1
zV~$tz2#30?s<e^`Z+m@bbJm|Uh``8*4EY9Q6QHSE9+afE8l{6mzjR#nejC9#M`TmZ
z8Wm`=#vJ6Vhxyti>Ie(#U*s{Wqv%pP-GCc!>dXY&Hp+|p&|n`bf|~a0>m=gJe-6#M
z7B~Iw&E{qqyr55jpZ9(^ltv4k<vQYsH)@t$DDCc~MV=wo_i}?1PPSzO-Ni&x`x`f@
z$3#JZm9+Tg*~T+bNK-BGJWEc2jxv6;H4ZLjNL5U5FVbcZS9w5`a;HzGXYC}fd|CkL
zPmz>28Y)63b_7GB!c$NZR8Y{4e;*%Izp3}oB7k+hq<RME%oE)s7RVBmj7vh-`$aOd
z0OlVPI~LH=TXOv><(<0aS<%mEWGo5dJ22PlC*7kJ9Dv3JtXzXd$Nu_vHOr8$+cos8
zKSBYA8J#Z_a7bIUwQx%>ZAV)FI`l(#NW)0cx~VynH6ieP%6F^s>HJ^wf0JMhJO`{-
zIv_&PXFXw6nH?XsyyROp+M@Nf$c{48^6p<e0{i+4VNtY}^b;Y)DD4iGgEz&Ye@>t6
z$$cj3rLD41bzKhtLo2)K3|F4vaYaws6+B}p#b4Apz5j6$kvw>vWciJ;ZjnFupZ-rC
zSF!T{+`OI{t9%s;b73EIe@{agXFKUYsmaS58aOmmbdgTicnR+nmN;9Tw{ST|RV6^v
z%)ebv=IO@!?q}Gm%8ysydZZiW5_NnAcgB&@<94~M{T;Y8T*Ktubk{fY_W<^~=S0Au
zf&dvGH8E+;K@xEKnH?HfPGA={jiELezy9b5<6v=xAfUqAhxlS)f6jn7?bQe;j<hlr
ztRpne`DlHz${*+n?jSQOudE85C~hWrwQ&O<$$?cuc4%NpzS;!I0`4lc?1jdfSO<h|
z803V&!{(@nK87B|YNZZ6q<M6{Zagw;nZoZe03K==mE1W!%=8M&m>^$OM>tOSUw~0Y
zk8wXEFCTFnFlK1He@4RSSClNl?%>?s5*2Le)}w|$in=%04*>y+5*%H`JC`fCBQi-#
z`^l=h2!dS7c~x46%tW}p1<}|N^JUz+hOJP5M9!}x_xSh+xIYH(1J6(vh{c}DL+)W$
z`UQ|&c2j=L&_+qgOb10g_TNZ;x2r<<fRc$n$GT~a`NDd`DYbOiuWf5e2m@{Vvyy#I
d+U!s4SeDOOl95Xv){?wR`2Q$MOyjt0wIDP_R`LJ<

delta 2029
zcmV<J2NL+P7SR-tcLE7Mk$IF82}W&XVRRAz3I;eOvVN=*GO-e~AOU#+f7oPxlv+vZ
zh7GQ@1yB`}^b@^c!|BRS7-q{yMMiq>6s{r5FJ|_aPdn@|0C=uq-`2xS?zj(wL`lUX
z!C4`EmMJT`v)fBL-s;6tnx16J4y$+SntI+8%B~BfaJ<#lp5w{JCE}d23swZJOcl~r
z$ieIi_J(Fr3DPUB=8C+bf3J@cF4t~`t%i@KYq)Akhv}|_yO?Q2o{J2%@WopIez`U%
zu?_qklur@79ZOC*&SzZeBk0E18+0>Ku-qqOm8pPp<bjqQ38|o8669PY88{Q|&bQS#
zLS6isrE7CCphgxXEdDDA^n4QSppEJFX<mI7jq@NZQvc*uttri9e+lCFf*~_TFlicZ
z4uh-E8~-bkYitM`r3Hvyf)RcWnn3u&2$j#W+-FoJ0itW*9Q?j9c<HoK!`e2GxvGD5
z_*t<G-2z6h>iwDkVg;sK-+!%*z4!gY*Wt!RwEM#)Z%v;J%Us}$ym^VwW*&g8ttN^U
zP@La(<>Tlhz5skfe*&B&CSN9tQ5{Xj{tRy>m&T_32F8?rk1RZPUHzRRl#e0HAVCFW
zBbQ|z2x$iC69-Kp!vT%r1yC_Xdx>+~Hi=eaUP6fNXTEVZc|={s2(A{DitDYrf?!!o
zFO`5O%fjUCzB2c$xclIy8>#l=Y6JFKJ0H#olED&ox185*e?aXBNMmcS-x+0DCDr#0
zP34`|7D)HT(-zX7Gv*Z8<27+Q!IhrSBDwjCiJqJ@B`_dEoRy}~J~yva6i-$1J;Ozp
zLRCzBBN4D%f?-l!KgJ`&%fz@EVCNtuL;(G~pHO7~Mjdl<egp*51v1_`%Sp1HsRD$g
zSPy($;}voBf3!6?GR&RZZ;&D#V&;K`2oae4S^dJqh^5p`n`Jga8m~L&Y&J_uIWYhz
ze4L#?^UwI5Hl8BR3QKqHn7vVj!s*i7GwRDeF}EziOHcV(2lL9A{fEt%G`~WweIu!0
zdYL&Q{1VMMUA!T&7)?XX*?OK*?@8+b4IM3mag&a<fAv<5*X7Yt)Yt2XtKj3gC!aj3
z?RrJo!f&a_eiz|YM|RdiYU6U6zBIJ68deo9%)sInsbaPdWHu2(n~SU4E8Fm%`m^@6
zeQaqXyNpyHo>rXKyufXN-q>%4kGcv7Qs^3m4;`w%2~UH_2J^F}`R*_Sp|F}2C&&2N
z;Y6Tyf9Jbd?b9*(tQJUqoO~>qJjiOMqw*?*25$9%;w~g=Q~bADIdW4*WyHMQGt?b1
ztDt?;Cpaccku0=JoJV`83wuHMuhOV4U>?9pR8j~IbL>%3eK=1V2=~n*P&nn>b3m-&
zTfLsBe#CsFmP&|BppuZsDzbE08-$u)H<%>`e?O*?v1;36?1i@W#0f&{0dzO*1q`@D
zs2LrOSWr%v*uQ@#BeW58$uq5b<LvCi5mFCj5Qon<&=H}TB)v;(q`RZ)S$!3<qoc)!
zjKea|qiOpg;}z2uSrz0;GxwMc5EFr62aj!XaiJ}Q*3FGp`7W{#Vx0h+dy**t@Y!}K
zfACg8K04#SDaQ_S82C^~`9>uOE?tY$3q@G7o2#ihDpkwl+AlRqJQ?hV@dupTm~>|O
zGw%YX?*890jl$~Osuq0TQGB-CXZtVCzZh^Mcy(iEa814o|Is-Z;*1Wfpi&NkxYJz{
z;YrhX_afs)p2s!&m+CAdBT)4VH>>xhe~Jz;4#$dt(bs)7V@mS_2_G;1?#Q!SUjv8n
zD`ikkktzj055Qh~zT1{@0C3E)D=>sALpRz@^=w9fPFcMFp3RqU<+?>G22u+37jV`!
zd8;LMt$F2-!>6B2ibD-h(TVx{+o*&xJoZ2r#LGmykro>9Ops6{c17oUYaW+ae;e4=
z>;~pGFJbl?wS3~y9P(~B`6L#fK751!chS&fmXYiWG&|L$(9F7uOdDqsACl4G{&&*^
zPbrr419Mg@Ge0Vs2qEQ$y~fvB(Ek-Yui5<MK*va)+El^MkNeT=4|KdDuE~nnE=F6i
znZtf(A%m*;7&M_FoA%f?g$Qcuf0ChNhtJ5d-xiMA;?!0s@gH+A3-G|rKqX%i)kDY+
z2MmeRyAvT%UM%6(dl$*!36zH1hMiIBsJ9?9i9v-h;v+vYWgr9-saf*RqTm5C%RJI9
z)n($W`_#QQn0^s!`hyQ#15wr<dvw^mC!tP@Jkh#GBLx#bNL33(c7{?Oe}oPy))zWe
zk51cHdqb*lN+t)H?RjT^z$TCjSP)vpFL_t=&k)?RP9O+Vwv%4`P_%XzzbR<U2SV^!
zVf?Yd>idox0WN|gA3VR)vFK;3B&CW2sSFc=L6^LNx6dMN2uk!|KFft(pH<z)9b?QV
z>3>yoH^4ASrLK{b@ssoWe+TY`o_iJn+L9=IRr-8u)IgbU5~*jxN?}JD+zg~(M`?2)
zdOA0r;J9cFU>4zQkPfkCXHQa>EsMe$Fv<Z9m$ljG(fpuPQhfW_ZS|Qp+r<f0jiamY
zZPT!pAA?^O3B<g&NgU;r6VQ!<c3eCLD#YXlN$96@tSOyYHs1N@N1V5^LLgCh7j8%B
zEyk%bXxwqKvqK+HQnnvPpv^@nn%qG5#`=j7XZm2)PcHm4_R_DF{P>_83Nq5@N<8-&
Lj_m#T@-JaXthn8D


From 609a2967734b36dcfb0e01de4ac784bf45e5d8eb Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 22 Jan 2026 07:03:03 +0100
Subject: [PATCH 58/75] README: update the wording for certificate from CA
 website

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 1dc62438..1a7ab9ac 100644
--- a/README.md
+++ b/README.md
@@ -117,11 +117,11 @@ certificate chain.
 
 ![screenshot: download certs](README.d/01-download-certs.avif)
 
-Note that the commands above do *not* verify server certificate, so if you
-want to be safe download with your workstations's browser and transfer the
-file to your MikroTik device.
+Note that the command above does *not* verify server certificate, so if you
+want to be safe download with your workstations's browser from CA's website
+and transfer the file to your MikroTik device.
 
-* Let's Encrypt [Root YE ↗️](https://letsencrypt.org/certs/gen-y/root-ye.pem)
+* Let's Encrypt / ISRG [Root YE ↗️](https://letsencrypt.org/certs/gen-y/root-ye.pem)
 
 Then we import the certificate.
 

From 2dc434b332c8250214879545023c773dfd1d857a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 22 Jan 2026 07:04:46 +0100
Subject: [PATCH 59/75] README: make the certificate download from CA website
 an info box

---
 README.md | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 1a7ab9ac..483dac06 100644
--- a/README.md
+++ b/README.md
@@ -117,11 +117,10 @@ certificate chain.
 
 ![screenshot: download certs](README.d/01-download-certs.avif)
 
-Note that the command above does *not* verify server certificate, so if you
-want to be safe download with your workstations's browser from CA's website
-and transfer the file to your MikroTik device.
-
-* Let's Encrypt / ISRG [Root YE ↗️](https://letsencrypt.org/certs/gen-y/root-ye.pem)
+> ℹ️ **Info**: Note that the command above does *not* verify server
+> certificate, so if you want to be safe download with your workstations's
+> browser from CA's website and transfer the file to your MikroTik device:
+> *Let's Encrypt* / *ISRG* [Root YE ↗️](https://letsencrypt.org/certs/gen-y/root-ye.pem)
 
 Then we import the certificate.
 

From b74e40dde1ef3c994430feda782128f110e6f555 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 22 Jan 2026 14:26:21 +0100
Subject: [PATCH 60/75] check-certificates: better error handling and reporting
 for downloads

---
 check-certificates.rsc | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 4e1170d5..c75e3435 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -55,9 +55,17 @@
           "' (file '" . $CertFileName . "')...");
 
       :do {
-        /tool/fetch check-certificate=yes-without-crl http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
-            ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;
-        $WaitForFile $CertFileName;
+        :onerror Err {
+          /tool/fetch check-certificate=yes-without-crl \
+              http-header-field=({ [ $FetchUserAgentStr $ScriptName ] }) \
+              ($CertRenewUrl . $CertFileName) dst-path=$CertFileName as-value;
+        } do={
+          :if ($Err != "Fetch failed with status 404") do={
+            $LogPrint warning $0 ("Failed fetching certificate: " . $Err);
+          }
+          :error false;
+        }
+        $WaitForFile $CertFileName;  
 
         :local DecryptionFailed true;
         :foreach I,PassPhrase in=$CertRenewPass do={

From 4ec1da1c91c06df948a897f6b57e5415ed4e62e4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 27 Jan 2026 12:24:30 +0100
Subject: [PATCH 61/75] certs: add combined file for GTS Root R1 & GTS Root
 R4...

... to make the checks happy.

This is a follow-up on:

* netwatch-dns: support multiple certificates
  0fffb5198eafe53a02c48a701ec7309244be5242

* doc/netwatch-dns: give hint on multiple certificates
  92759fcca51c20da39b2c44a90f84637d3d34748
---
 certs/GTS-Root-RX.pem | 58 +++++++++++++++++++++++++++++++++++++++++++
 certs/Makefile        |  6 ++---
 2 files changed, 61 insertions(+), 3 deletions(-)
 create mode 100644 certs/GTS-Root-RX.pem

diff --git a/certs/GTS-Root-RX.pem b/certs/GTS-Root-RX.pem
new file mode 100644
index 00000000..d8774d99
--- /dev/null
+++ b/certs/GTS-Root-RX.pem
@@ -0,0 +1,58 @@
+# Issuer: CN=GTS Root R1 O=Google Trust Services LLC
+# Subject: CN=GTS Root R1 O=Google Trust Services LLC
+# Label: "GTS Root R1"
+# Serial: 159662320309726417404178440727
+# MD5 Fingerprint: 05:fe:d0:bf:71:a8:a3:76:63:da:01:e0:d8:52:dc:40
+# SHA1 Fingerprint: e5:8c:1c:c4:91:3b:38:63:4b:e9:10:6e:e3:ad:8e:6b:9d:d9:81:4a
+# SHA256 Fingerprint: d9:47:43:2a:bd:e7:b7:fa:90:fc:2e:6b:59:10:1b:12:80:e0:e1:c7:e4:e4:0f:a3:c6:88:7f:ff:57:a7:f4:cf
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+# Issuer: CN=GTS Root R4 O=Google Trust Services LLC
+# Subject: CN=GTS Root R4 O=Google Trust Services LLC
+# Label: "GTS Root R4"
+# Serial: 159662532700760215368942768210
+# MD5 Fingerprint: 43:96:83:77:19:4d:76:b3:9d:65:52:e4:1d:22:a5:e8
+# SHA1 Fingerprint: 77:d3:03:67:b5:e0:0c:15:f6:0c:38:61:df:7c:e1:3b:92:46:4d:47
+# SHA256 Fingerprint: 34:9d:fa:40:58:c5:e2:63:12:3b:39:8a:e7:95:57:3c:4e:13:13:c8:3f:e6:8f:93:55:6c:d5:e8:03:1b:3c:7d
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/certs/Makefile b/certs/Makefile
index 2f6155b3..98b8d157 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -10,7 +10,7 @@ DOMAINS_DUAL = \
 	api.macvendors.com/GTS-Root-R4 \
 	api.telegram.org/Go-Daddy-Root-Certificate-Authority-G2 \
 	cloudflare-dns.com/SSL-com-Root-Certification-Authority-ECC \
-	dns.google/GTS-Root-R4 \
+	dns.google/GTS-Root-RX \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
 	git.eworm.de/Root-YE \
 	lists.blocklist.de/GTS-Root-R4 \
@@ -20,7 +20,7 @@ DOMAINS_DUAL = \
 	upgrade.mikrotik.com/ISRG-Root-X1
 DOMAINS_IPV4 = \
 	1.1.1.1/SSL-com-Root-Certification-Authority-ECC \
-	8.8.8.8/GTS-Root-R1 \
+	8.8.8.8/GTS-Root-RX \
 	9.9.9.9/DigiCert-Global-Root-G3 \
 	api.mullvad.net/ISRG-Root-X1 \
 	ipv4.showipv6.de/ISRG-Root-X1 \
@@ -31,7 +31,7 @@ DOMAINS_IPV4 = \
 	www.spamhaus.org/GTS-Root-R4
 DOMAINS_IPV6 = \
 	[2606\:4700\:4700\:\:1111]/SSL-com-Root-Certification-Authority-ECC \
-	[2001\:4860\:4860\:\:8888]/GTS-Root-R1 \
+	[2001\:4860\:4860\:\:8888]/GTS-Root-RX \
 	[2620\:fe\:\:9]/DigiCert-Global-Root-G3 \
 	ipv6.showipv6.de/ISRG-Root-X1
 

From 70d743bcda9fb4e0191f60f7400d40edf92e4533 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 27 Jan 2026 12:37:19 +0100
Subject: [PATCH 62/75] certs: check gitlab.com ...

... as it is mentioned in global-config.
---
 certs/Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/certs/Makefile b/certs/Makefile
index 98b8d157..b0f029ab 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -13,6 +13,7 @@ DOMAINS_DUAL = \
 	dns.google/GTS-Root-RX \
 	dns.quad9.net/DigiCert-Global-Root-G3 \
 	git.eworm.de/Root-YE \
+	gitlab.com/USERTrust-RSA-Certification-Authority \
 	lists.blocklist.de/GTS-Root-R4 \
 	matrix.org/GTS-Root-R4 \
 	raw.githubusercontent.com/USERTrust-RSA-Certification-Authority \

From a2298c2c7650cdb1fe0bca9a88c7212f8d8b29e9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 27 Jan 2026 12:40:09 +0100
Subject: [PATCH 63/75] certs: drop 'DigiCert Global Root G2'...

... as it is no longer used by Cloudflare.
---
 certs/DigiCert-Global-Root-G2.pem | 29 -----------------------------
 1 file changed, 29 deletions(-)
 delete mode 100644 certs/DigiCert-Global-Root-G2.pem

diff --git a/certs/DigiCert-Global-Root-G2.pem b/certs/DigiCert-Global-Root-G2.pem
deleted file mode 100644
index 8af6c7aa..00000000
--- a/certs/DigiCert-Global-Root-G2.pem
+++ /dev/null
@@ -1,29 +0,0 @@
-# Issuer: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com
-# Subject: CN=DigiCert Global Root G2 O=DigiCert Inc OU=www.digicert.com
-# Label: "DigiCert Global Root G2"
-# Serial: 4293743540046975378534879503202253541
-# MD5 Fingerprint: e4:a6:8a:c8:54:ac:52:42:46:0a:fd:72:48:1b:2a:44
-# SHA1 Fingerprint: df:3c:24:f9:bf:d6:66:76:1b:26:80:73:fe:06:d1:cc:8d:4f:82:a4
-# SHA256 Fingerprint: cb:3c:cb:b7:60:31:e5:e0:13:8f:8d:d3:9a:23:f9:de:47:ff:c3:5e:43:c1:14:4c:ea:27:d4:6a:5a:b1:cb:5f
------BEGIN CERTIFICATE-----
-MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
-MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
-d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
-MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT
-MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
-b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG
-9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI
-2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx
-1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ
-q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz
-tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ
-vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP
-BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV
-5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY
-1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4
-NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG
-Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91
-8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe
-pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl
-MrY=
------END CERTIFICATE-----

From 8b3346ec7e9438c5bde0637c5a68884095fe4a40 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Tue, 27 Jan 2026 12:42:08 +0100
Subject: [PATCH 64/75] certs: drop 'Certum Trusted Network CA'...

... as it is no longer used.
---
 certs/Certum-Trusted-Network-CA.pem | 29 -----------------------------
 1 file changed, 29 deletions(-)
 delete mode 100644 certs/Certum-Trusted-Network-CA.pem

diff --git a/certs/Certum-Trusted-Network-CA.pem b/certs/Certum-Trusted-Network-CA.pem
deleted file mode 100644
index a48e7063..00000000
--- a/certs/Certum-Trusted-Network-CA.pem
+++ /dev/null
@@ -1,29 +0,0 @@
-# Issuer: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority
-# Subject: CN=Certum Trusted Network CA O=Unizeto Technologies S.A. OU=Certum Certification Authority
-# Label: "Certum Trusted Network CA"
-# Serial: 279744
-# MD5 Fingerprint: d5:e9:81:40:c5:18:69:fc:46:2c:89:75:62:0f:aa:78
-# SHA1 Fingerprint: 07:e0:32:e0:20:b7:2c:3f:19:2f:06:28:a2:59:3a:19:a7:0f:06:9e
-# SHA256 Fingerprint: 5c:58:46:8d:55:f5:8e:49:7e:74:39:82:d2:b5:00:10:b6:d1:65:37:4a:cf:83:a7:d4:a3:2d:b7:68:c4:40:8e
------BEGIN CERTIFICATE-----
-MIIDuzCCAqOgAwIBAgIDBETAMA0GCSqGSIb3DQEBBQUAMH4xCzAJBgNVBAYTAlBM
-MSIwIAYDVQQKExlVbml6ZXRvIFRlY2hub2xvZ2llcyBTLkEuMScwJQYDVQQLEx5D
-ZXJ0dW0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIjAgBgNVBAMTGUNlcnR1bSBU
-cnVzdGVkIE5ldHdvcmsgQ0EwHhcNMDgxMDIyMTIwNzM3WhcNMjkxMjMxMTIwNzM3
-WjB+MQswCQYDVQQGEwJQTDEiMCAGA1UEChMZVW5pemV0byBUZWNobm9sb2dpZXMg
-Uy5BLjEnMCUGA1UECxMeQ2VydHVtIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSIw
-IAYDVQQDExlDZXJ0dW0gVHJ1c3RlZCBOZXR3b3JrIENBMIIBIjANBgkqhkiG9w0B
-AQEFAAOCAQ8AMIIBCgKCAQEA4/t9o3K6wvDJFIf1awFO4W5AB7ptJ11/91sts1rH
-UV+rpDKmYYe2bg+G0jACl/jXaVehGDldamR5xgFZrDwxSjh80gTSSyjoIF87B6LM
-TXPb865Px1bVWqeWifrzq2jUI4ZZJ88JJ7ysbnKDHDBy3+Ci6dLhdHUZvSqeexVU
-BBvXQzmtVSjF4hq79MDkrjhJM8x2hZ85RdKknvISjFH4fOQtf/WsX+sWn7Et0brM
-kUJ3TCXJkDhv2/DM+44el1k+1WBO5gUo7Ul5E0u6SNsv+XLTOcr+H9g0cvW0QM8x
-AcPs3hEtF10fuFDRXhmnad4HMyjKUJX5p1TLVIZQRan5SQIDAQABo0IwQDAPBgNV
-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBQIds3LB/8k9sXN7buQvOKEN0Z19zAOBgNV
-HQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggEBAKaorSLOAT2mo/9i0Eidi15y
-sHhE49wcrwn9I0j6vSrEuVUEtRCjjSfeC4Jj0O7eDDd5QVsisrCaQVymcODU0HfL
-I9MA4GxWL+FpDQ3Zqr8hgVDZBqWo/5U30Kr+4rP1mS1FhIrlQgnXdAIv94nYmem8
-J9RHjboNRhx3zxSkHLmkMcScKHQDNP8zGSal6Q10tz6XxnboJ5ajZt3hrvJBW8qY
-VoNzcOSGGtIxQbovvi0TWnZvTuhOgQ4/WwMioBK+ZlgRSssDxLQqKi2WF+A5VLxI
-03YnnZotBqbJ7DnSq9ufmgsnAjUpsUCV5/nonFWIGUbWtzT1fs45mtk48VH3Tyw=
------END CERTIFICATE-----

From a7be27aea92e556f04c98fc65d3cfbce867dab92 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 12 Jan 2026 09:22:46 +0100
Subject: [PATCH 65/75] check-certificates: drop the compatibility
 workaround...

... and make it depend in RouterOS 7.19 and its builtin certificates.
---
 check-certificates.rsc    | 7 ++-----
 doc/check-certificates.md | 2 +-
 2 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index c75e3435..e10c82ae 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch
 #
 # check for certificate validity
@@ -126,10 +126,7 @@
       :local Return "";
       :for I from=0 to=5 do={
         :set Return ($Return . [ $ParseKeyValueStore ($CertVal->"issuer") ]->"CN");
-        :local CertSettings [ /certificate/settings/get ];
-        :if (([ :len ($CertSettings->"builtin-trust-anchors") ] > 0 || \
-              [ :len ($CertSettings->"builtin-trust-store") ] > 0) && \
-             [[ :parse (":return [ :len [ /certificate/builtin/find where skid=\"" . ($CertVal->"akid") . "\" ] ]") ]] > 0) do={
+        :if ([ :len [ /certificate/builtin/find where skid=($CertVal->"akid") ] ] > 0) do={
           :return $Return;
         }
         :do {
diff --git a/doc/check-certificates.md b/doc/check-certificates.md
index 456d4b1f..1e69af46 100644
--- a/doc/check-certificates.md
+++ b/doc/check-certificates.md
@@ -4,7 +4,7 @@ Renew certificates and notify on expiration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 

From baa8d6c974c64d07e671174eabd8c6b9c019084a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 7 Jun 2025 22:38:55 +0200
Subject: [PATCH 66/75] INITIAL-COMMANDS: drop the compatibility workaround...

... and make it depend in RouterOS 7.19 and its builtin certificates.
---
 INITIAL-COMMANDS.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/INITIAL-COMMANDS.md b/INITIAL-COMMANDS.md
index c823826b..e033b576 100644
--- a/INITIAL-COMMANDS.md
+++ b/INITIAL-COMMANDS.md
@@ -4,7 +4,7 @@ Initial commands
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
@@ -26,7 +26,7 @@ Run the complete base installation:
       :if (!((($CertSettings->"builtin-trust-anchors") = "trusted" || \
               ($CertSettings->"builtin-trust-store") ~ "fetch" || \
               ($CertSettings->"builtin-trust-store") = "all") && \
-             [[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CertCommonName . "\" ] ]") ]] > 0)) do={
+             [ :len [ /certificate/builtin/find where common-name=$CertCommonName ] ] > 0)) do={
         :put "Importing certificate...";
         /tool/fetch ($BaseUrl . "certs/" . $CertFileName) dst-path=$CertFileName as-value;
         :delay 1s;

From e359b3a176804624b223b0486922419b32f87b22 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Sat, 7 Jun 2025 22:41:29 +0200
Subject: [PATCH 67/75] global-functions: $CertificateAvailable: drop the
 compatibility workaround...

... and make it depend in RouterOS 7.19 and its builtin certificates.
---
 README.md            | 4 ++--
 global-functions.rsc | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 483dac06..a774aa03 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@ RouterOS Scripts
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
@@ -50,7 +50,7 @@ temporarily.
 
 > 💡️ **Hint**: If in doubt have a look at the badge at the top of each
 > page showing the minimum version required:
-> ![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)
+> ![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)
 
 > ℹ️ **Info**: The `main` branch is now RouterOS v7 only. If you are still
 > running RouterOS v6 switch to `routeros-v6` branch!
diff --git a/global-functions.rsc b/global-functions.rsc
index 1d5f55c3..45bb24d3 100644
--- a/global-functions.rsc
+++ b/global-functions.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch, scheduler
 #
 # global functions
@@ -133,7 +133,7 @@
   :if ((($CertSettings->"builtin-trust-anchors") = "trusted" || \
         ($CertSettings->"builtin-trust-store") ~ $UseFor || \
         ($CertSettings->"builtin-trust-store") = "all") && \
-       [[ :parse (":return [ :len [ /certificate/builtin/find where common-name=\"" . $CommonName . "\" ] ]") ]] > 0) do={
+       [ :len [ /certificate/builtin/find where common-name=$CommonName ] ] > 0) do={
     :return true;
   }
 

From ae30574e86b2f0153cdd167b0138e1685f363ab2 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 21 Jan 2026 06:46:39 +0100
Subject: [PATCH 68/75] README: reword the hint on builtin trust store

---
 README.md | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index a774aa03..1f0aa54b 100644
--- a/README.md
+++ b/README.md
@@ -100,14 +100,15 @@ including demonstration recorded live at [MUM Europe
 The update script does server certificate verification, so first step is to
 download the certificates.
 
-> 💡️ **Hint**: RouterOS 7.19 comes with a builtin certificate store. You
+> 💡️ **Hint**: RouterOS comes with a builtin certificate store. You
 > can skip the steps regarding certificate download and import and jump
 > to [installation of scripts](#installation-of-scripts) if you set the
-> trust for these builtin trust anchors:  
-> `/certificate/settings/set builtin-trust-anchors=trusted;`  
-> With RouterOS 7.21 the functionality was changed. Set this at minimum,
-> but make sure not to drop other targets:  
+> certificates to be trusted by the `fetch` command at least. But make
+> sure not to drop other targets:  
 > `/certificate/settings/set builtin-trust-store=fetch;`
+> With RouterOS 7.20.x and before the functionality was different. Set
+> the trust for the builtin trust anchors:  
+> `/certificate/settings/set builtin-trust-anchors=trusted;`  
 
 If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding

From 3f8de22d2afcf7a361e7fa94f5d11dc3475a9cc5 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 21 Jan 2026 09:24:36 +0100
Subject: [PATCH 69/75] README: make the trust store a separate section

---
 README.md | 30 ++++++++++++++++++++----------
 1 file changed, 20 insertions(+), 10 deletions(-)

diff --git a/README.md b/README.md
index 1f0aa54b..1e68f62d 100644
--- a/README.md
+++ b/README.md
@@ -97,19 +97,29 @@ including demonstration recorded live at [MUM Europe
 
 ### The long way in detail
 
-The update script does server certificate verification, so first step is to
-download the certificates.
+The update script does server certificate verification, so first step is
+to establish trust.
 
-> 💡️ **Hint**: RouterOS comes with a builtin certificate store. You
-> can skip the steps regarding certificate download and import and jump
-> to [installation of scripts](#installation-of-scripts) if you set the
-> certificates to be trusted by the `fetch` command at least. But make
-> sure not to drop other targets:  
-> `/certificate/settings/set builtin-trust-store=fetch;`
-> With RouterOS 7.20.x and before the functionality was different. Set
-> the trust for the builtin trust anchors:  
+#### Builtin trust store
+
+RouterOS comes with a builtin trust store with several CA certificates.
+If you intend **not** to trust this store jump to
+[download and import certificate](#download-and-import-certificate) now.
+
+Select the `fetch` command to trust these builtin certificates at
+least, but make sure not to drop other targets:
+
+    /certificate/settings/set builtin-trust-store=fetch;
+
+> 💡️ **Hint**: With RouterOS 7.20.x and before the functionality was
+> different. Set the trust for the builtin trust anchors:  
 > `/certificate/settings/set builtin-trust-anchors=trusted;`  
 
+You can skip the steps regarding *download and import certificate* and
+jump to [installation of scripts](#installation-of-scripts) now.
+
+#### Download and import certificate
+
 If you intend to download the scripts from a
 different location (for example from github.com) install the corresponding
 certificate chain.

From b62594279d6d423454618b29070210af03ab04a9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Wed, 21 Jan 2026 09:36:02 +0100
Subject: [PATCH 70/75] README: add a screenshot for builtin trust store

---
 README.d/00-builtin-trust-store.avif | Bin 0 -> 2196 bytes
 README.md                            |   2 ++
 2 files changed, 2 insertions(+)
 create mode 100644 README.d/00-builtin-trust-store.avif

diff --git a/README.d/00-builtin-trust-store.avif b/README.d/00-builtin-trust-store.avif
new file mode 100644
index 0000000000000000000000000000000000000000..0693ee43ae2d83843eb7c3d20a47ca4adcf356f0
GIT binary patch
literal 2196
zcmXv|2{;sL7oL%2#87rZ$i7@=6bf0A$nIh+S4?9tGD~){X5X@uZHUrjnXzS8)`aM~
z$*wSV*~W6yXl(!JfA0C7@4WAM-}9Vv004lPyI(L49)NNO(BllzD0c`N1$Q^ogXqzv
z4K&gZe&*3b+|$k5=l>J{z@ZR+|MCBj1BdcM|1N;^EQ<2RBF-uU002mTXBhzG1^`&1
z=v)?s!u($P+YzD{NQSd!dJjB61#%1Pjs3mL3x)H+(RC9P4uPd356TyZJZl61&dJh~
zA^l&#p@LAq6%YtSM|OAs<W`i}nF8QOV7+}X2=5^JWH5j^k}mP1aA^3MM-Td8j6jBH
zM*3BWXg9bY7vMazhE#1(1sC)Ohk+Xa9w%Tq>0efVo;8<UOgZ5Fw^vCAyF4E;5>lg=
z&Y3pZmv!VA6@0&Os*Ucmg8l8|0oc3GWKu~yGLOBO0JD3D*s<|vFqh+<UY>e<%dALU
zLgG+Gvlkw<+Wgg&N2b1NCEA-=L?*x4NzQJM*Ga^Pl>n$0Zr{bHZlpuWwxImfEO$|d
zwkvw)<!_s8N+eby;T1+d01}(pv_o^&K&A~o>uS#YUQp`S4qIMGasP$bNm;|A2%&#$
znJLFHt1y&8e142!?Czv-s>>kbP+#i)EKf@qpAJ~Rf1*m2teUifvw0ah>FLeB>q{o*
zgvCi6=`<YpLdOq6Ler^5#m;!wC@YtPqEKSO2)0F+S-J)5(i2flaJ#6KY|Oqa<N8wL
zzMNWWilJJC{Au;z@#q0sfCdE`^HBNLJZ@rg7QCVZPFuwqTQ#T$<)~yZ3n14x1==f(
z$ZGrGhGz`Cj9w&WVz)4yM)8M(-QpS_sxG+3l#FTSK_7BUO1U>!d?jX4*k__uJX1w4
zgPiliJZ@&O$IJ>zj8q<1uch)sb>wOX+nyJ#K~C+dWK$8&9Or+KVcC*ao#c&+S^@(a
ze4DKdgPqT%)F!)iOH0MfW<>VCe!T)_jNpbAxrJOIX(I*9+|~3m22w_!F(&1&!S{L#
zaub9$6uW4&gAQZl^^t+~)$OZrcpR#-t}S@BCZ)>AwQSY-F7E<h7P==t>%zt5p*k@l
zYcb|?pkbipSvUs~I8is6Qp#@Z>5jKXZ>&WsZ>p~a!Se;7kd*cwv`mpUMTDb;2fy|#
zs0S#tgW7nSohkV?pYa5uN1j(NH}=I+FBd;r{F3KbU4Gf&E$GSZr8kEnKOYo^vkj$<
z*Pa&H>Nsg_X<d8%?1U4NJUj4L3-MTVyPkWHyLbJO%*vf1LfUtldF)VLKT{aTpJqns
zjg}pCO!v}$TAMty)6Z5naR6&m&2(`uD9!9_-OGeQHx;+LAR8NKt>fokFDzf|vsx{a
zaOpW+(kuf4&qy9-nu3b<N}mYLux>j<mu!1PMxY9)#K`ubO}WV=LobtDDG^;Y5`+$9
zIkuks7Ohi9%UTDc{%T-bA~dqs7ccY9nZ6K_O)v&Zow|(v@(+HcWu*H0lFVM8kZ-40
zC@v9e_#CU>t6M#;!0=A*6Z;1tL#N|Xxo!E{$2_F2CGu=TlEAF{&}5dD3n6;>c6NFe
zO9RN8cH{LvSUhy()_UTKFb9miqA7_wugrYC9Fp+Z*WssQKc8Zj7ORtOd+g3$7OyYp
zq;Xt%Dl^>RP=Jeh>)X<)_fjjed^-O2^_3)z#%q~k(m;7r8|8}d91`><OXqkQa<T5A
z%mSsS4t#>Uge|{NW+Cn8xm9A1j9vH@b<SJFUplPN$r2o>eEu^m(NAfniN8cEfnd?a
zVI}pRc2YS{vZJ`PXb9APta<W2!=dU;l;Lzj&?CM&6@_J+3KT1T%0MP0L}L!|z_-l?
z@;Y2MnV~if7ZJ<-jdH%jy`LwWt3}yMR7Mir;X|w&MBBpcS1R68u5wLs+OZKrtt%(C
zRsZEr8bb&=q>S(aPo8S-vMf!pj&ixr;K~3~6OL3NBqW&Td?Buu@a4gllS7TCni(&A
zBWxY0yV({!(4p}(K95wRuag+d>_s1_ryVv{t}m)gG=RB<_@>?uf1|8-&rup3x7im7
ztnrL%9<H}0My0G(e!EAp&^5r>;qBx<+U&GvI><9!qV03kYl&9hb>#{^?3ase31E&z
zrYQ(^iq9(bne~~Os#HmOmc&)ANZHwF+M{Zp#DmF}wlyStW!HE}2~}dF^=M=`7F^jN
zR~W7*D0p*70keF~IHP-hq4SR>!X3+ZUa#`~t(D{tH7(`9+ZHiU`)6I;t{9t1`|1Uf
zlxKklO&HEL2wz<l(U?dNed!l21fGwo`zh-`^QHK2#hVyd+@IfFf%qjw9-l_)G%Qjw
zJ=?`HC4pj<>B>{EX?|ztBa7y_<L8G1VXj+}!|WJge*PWpjTsAX3vBBwu@p1B;8vS#
z`e9mx6>>F(qKNaGi?jq~yfRPW+(}_9_?6C|LV7nppyz7&ZzN1bK;6Kj;@&Q1h%sWW
z?jy^<lyF;4A>-rr=!klsPn~T0n6c!k?ty);VdLXcH9|VR6%BqD(ToplHT^X#!-JH3
zy;TmKcV9OjdEfDBCh0Xq$uTdt8Xs!uY`7go`FW~4B_>YztU%OvFbQW1u*$U{R%Zg4
z&^s<-!0~tsum|3L+PLp}diyvik2R|9ZB{`tYZhVxHddILMb=>uQA8@8C^zk8nj{$<
zrB&pvtpC9^Q?2Dc^Jq&|8Ux(*DIKH6<&f|nwiao*Z(^POh&ID&oiv9=<#=N)nGLrp
z-Ir#5M2kC;COW4Q*KR0E78~)>NT!WH=0*`V;yS%AfAopnlFkw4>}yx|WK4wRQcS;F
zCI#?P^Bynuk0iMFzFiFYbTr(w$h*=5$8nI~qk`2RIY)k4ma|PuP9AcITHjChZTKIX
CW#z&E

literal 0
HcmV?d00001

diff --git a/README.md b/README.md
index 1e68f62d..b8f5b736 100644
--- a/README.md
+++ b/README.md
@@ -111,6 +111,8 @@ least, but make sure not to drop other targets:
 
     /certificate/settings/set builtin-trust-store=fetch;
 
+![screenshot: builtin trust store](README.d/00-builtin-trust-store.avif)
+
 > 💡️ **Hint**: With RouterOS 7.20.x and before the functionality was
 > different. Set the trust for the builtin trust anchors:  
 > `/certificate/settings/set builtin-trust-anchors=trusted;`  

From 70ddc152de4e88e048a7aa0dc95bb5200efd90d3 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 19 Jan 2026 23:25:12 +0100
Subject: [PATCH 71/75] bump required RouterOS version for all scripts

---
 BRANCHES.md                            | 2 +-
 CERTIFICATES.md                        | 2 +-
 CONTRIBUTIONS.md                       | 2 +-
 DEBUG.md                               | 2 +-
 accesslist-duplicates.capsman.rsc      | 2 +-
 accesslist-duplicates.local.rsc        | 2 +-
 accesslist-duplicates.template.rsc     | 2 +-
 accesslist-duplicates.wifi.rsc         | 2 +-
 backup-cloud.rsc                       | 2 +-
 backup-email.rsc                       | 2 +-
 backup-partition.rsc                   | 2 +-
 backup-upload.rsc                      | 2 +-
 capsman-download-packages.capsman.rsc  | 2 +-
 capsman-download-packages.template.rsc | 2 +-
 capsman-download-packages.wifi.rsc     | 2 +-
 capsman-rolling-upgrade.capsman.rsc    | 2 +-
 capsman-rolling-upgrade.template.rsc   | 2 +-
 capsman-rolling-upgrade.wifi.rsc       | 2 +-
 certificate-renew-issued.rsc           | 2 +-
 check-health.d/state.rsc               | 2 +-
 check-health.d/temperature.rsc         | 2 +-
 check-health.d/voltage.rsc             | 2 +-
 check-health.rsc                       | 2 +-
 check-lte-firmware-upgrade.rsc         | 2 +-
 check-perpetual-license.rsc            | 2 +-
 check-routeros-update.rsc              | 2 +-
 collect-wireless-mac.capsman.rsc       | 2 +-
 collect-wireless-mac.local.rsc         | 2 +-
 collect-wireless-mac.template.rsc      | 2 +-
 collect-wireless-mac.wifi.rsc          | 2 +-
 contrib/badges.md                      | 2 +-
 contrib/telegram.md                    | 2 +-
 daily-psk.capsman.rsc                  | 2 +-
 daily-psk.local.rsc                    | 2 +-
 daily-psk.template.rsc                 | 2 +-
 daily-psk.wifi.rsc                     | 2 +-
 dhcp-lease-comment.capsman.rsc         | 2 +-
 dhcp-lease-comment.local.rsc           | 2 +-
 dhcp-lease-comment.template.rsc        | 2 +-
 dhcp-lease-comment.wifi.rsc            | 2 +-
 dhcp-to-dns.rsc                        | 2 +-
 doc/accesslist-duplicates.md           | 2 +-
 doc/backup-cloud.md                    | 2 +-
 doc/backup-email.md                    | 2 +-
 doc/backup-partition.md                | 2 +-
 doc/backup-upload.md                   | 2 +-
 doc/capsman-download-packages.md       | 2 +-
 doc/capsman-rolling-upgrade.md         | 2 +-
 doc/certificate-renew-issued.md        | 2 +-
 doc/check-health.md                    | 2 +-
 doc/check-lte-firmware-upgrade.md      | 2 +-
 doc/check-perpetual-license.md         | 2 +-
 doc/check-routeros-update.md           | 2 +-
 doc/collect-wireless-mac.md            | 2 +-
 doc/daily-psk.md                       | 2 +-
 doc/dhcp-lease-comment.md              | 2 +-
 doc/dhcp-to-dns.md                     | 2 +-
 doc/firmware-upgrade-reboot.md         | 2 +-
 doc/fw-addr-lists.md                   | 2 +-
 doc/global-wait.md                     | 2 +-
 doc/gps-track.md                       | 2 +-
 doc/hotspot-to-wpa.md                  | 2 +-
 doc/ip-addr-bridge.md                  | 2 +-
 doc/ipsec-to-dns.md                    | 2 +-
 doc/ipv6-update.md                     | 2 +-
 doc/lease-script.md                    | 2 +-
 doc/leds-mode.md                       | 2 +-
 doc/log-forward.md                     | 2 +-
 doc/mod/bridge-port-to.md              | 2 +-
 doc/mod/bridge-port-vlan.md            | 2 +-
 doc/mod/inspectvar.md                  | 2 +-
 doc/mod/ipcalc.md                      | 2 +-
 doc/mod/notification-email.md          | 2 +-
 doc/mod/notification-gotify.md         | 2 +-
 doc/mod/notification-matrix.md         | 2 +-
 doc/mod/notification-ntfy.md           | 2 +-
 doc/mod/notification-telegram.md       | 2 +-
 doc/mod/scriptrunonce.md               | 2 +-
 doc/mod/ssh-keys-import.md             | 2 +-
 doc/mode-button.md                     | 2 +-
 doc/netwatch-dns.md                    | 2 +-
 doc/netwatch-notify.md                 | 2 +-
 doc/ospf-to-leds.md                    | 2 +-
 doc/packages-update.md                 | 2 +-
 doc/ppp-on-up.md                       | 2 +-
 doc/sms-action.md                      | 2 +-
 doc/sms-forward.md                     | 2 +-
 doc/super-mario-theme.md               | 2 +-
 doc/telegram-chat.md                   | 2 +-
 doc/unattended-lte-firmware-upgrade.md | 2 +-
 doc/update-gre-address.md              | 2 +-
 doc/update-tunnelbroker.md             | 2 +-
 firmware-upgrade-reboot.rsc            | 2 +-
 fw-addr-lists.rsc                      | 2 +-
 global-wait.rsc                        | 2 +-
 gps-track.rsc                          | 2 +-
 hotspot-to-wpa-cleanup.capsman.rsc     | 2 +-
 hotspot-to-wpa-cleanup.template.rsc    | 2 +-
 hotspot-to-wpa-cleanup.wifi.rsc        | 2 +-
 hotspot-to-wpa.capsman.rsc             | 2 +-
 hotspot-to-wpa.template.rsc            | 2 +-
 hotspot-to-wpa.wifi.rsc                | 2 +-
 ipsec-to-dns.rsc                       | 2 +-
 ipv6-update.rsc                        | 2 +-
 lease-script.rsc                       | 2 +-
 log-forward.rsc                        | 2 +-
 mod/bridge-port-to.rsc                 | 2 +-
 mod/bridge-port-vlan.rsc               | 2 +-
 mod/inspectvar.rsc                     | 2 +-
 mod/ipcalc.rsc                         | 2 +-
 mod/notification-email.rsc             | 2 +-
 mod/notification-gotify.rsc            | 2 +-
 mod/notification-matrix.rsc            | 2 +-
 mod/notification-ntfy.rsc              | 2 +-
 mod/notification-telegram.rsc          | 2 +-
 mod/scriptrunonce.rsc                  | 2 +-
 mod/ssh-keys-import.rsc                | 2 +-
 mode-button.rsc                        | 2 +-
 netwatch-dns.rsc                       | 2 +-
 netwatch-notify.rsc                    | 2 +-
 ospf-to-leds.rsc                       | 2 +-
 packages-update.rsc                    | 2 +-
 ppp-on-up.rsc                          | 2 +-
 sms-action.rsc                         | 2 +-
 sms-forward.rsc                        | 2 +-
 telegram-chat.rsc                      | 2 +-
 unattended-lte-firmware-upgrade.rsc    | 2 +-
 update-gre-address.rsc                 | 2 +-
 update-tunnelbroker.rsc                | 2 +-
 129 files changed, 129 insertions(+), 129 deletions(-)

diff --git a/BRANCHES.md b/BRANCHES.md
index df7eb0d5..b671e4c0 100644
--- a/BRANCHES.md
+++ b/BRANCHES.md
@@ -4,7 +4,7 @@ Installing from branches
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/CERTIFICATES.md b/CERTIFICATES.md
index 3eae6c5c..8ebd861e 100644
--- a/CERTIFICATES.md
+++ b/CERTIFICATES.md
@@ -4,7 +4,7 @@ Certificate name from browser
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index a1b9a22e..a9840ab4 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -4,7 +4,7 @@ Past Contributions
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/DEBUG.md b/DEBUG.md
index 69c1eaa3..38f82a11 100644
--- a/DEBUG.md
+++ b/DEBUG.md
@@ -4,7 +4,7 @@ Debug output and logs
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/accesslist-duplicates.capsman.rsc b/accesslist-duplicates.capsman.rsc
index 56c34731..cb194326 100644
--- a/accesslist-duplicates.capsman.rsc
+++ b/accesslist-duplicates.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.local.rsc b/accesslist-duplicates.local.rsc
index 37eb7168..4d545707 100644
--- a/accesslist-duplicates.local.rsc
+++ b/accesslist-duplicates.local.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.template.rsc b/accesslist-duplicates.template.rsc
index cf869c05..1e54fcd2 100644
--- a/accesslist-duplicates.template.rsc
+++ b/accesslist-duplicates.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/accesslist-duplicates.wifi.rsc b/accesslist-duplicates.wifi.rsc
index 88c39e59..9a8892b8 100644
--- a/accesslist-duplicates.wifi.rsc
+++ b/accesslist-duplicates.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # print duplicate antries in wireless access list
 # https://rsc.eworm.de/doc/accesslist-duplicates.md
diff --git a/backup-cloud.rsc b/backup-cloud.rsc
index e5f25d34..b4925f33 100644
--- a/backup-cloud.rsc
+++ b/backup-cloud.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=40
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # upload backup to MikroTik cloud
 # https://rsc.eworm.de/doc/backup-cloud.md
diff --git a/backup-email.rsc b/backup-email.rsc
index c12942a2..fcafff45 100644
--- a/backup-email.rsc
+++ b/backup-email.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=20
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # create and email backup and config file
 # https://rsc.eworm.de/doc/backup-email.md
diff --git a/backup-partition.rsc b/backup-partition.rsc
index a9f11a59..78f4cce1 100644
--- a/backup-partition.rsc
+++ b/backup-partition.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=70
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, scheduler
 #
 # save configuration to fallback partition
diff --git a/backup-upload.rsc b/backup-upload.rsc
index cae67bfa..bded570c 100644
--- a/backup-upload.rsc
+++ b/backup-upload.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: backup-script, order=50
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch
 #
 # create and upload backup and config file
diff --git a/capsman-download-packages.capsman.rsc b/capsman-download-packages.capsman.rsc
index 838f41b9..8cedf01b 100644
--- a/capsman-download-packages.capsman.rsc
+++ b/capsman-download-packages.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.template.rsc b/capsman-download-packages.template.rsc
index 1d31eb5a..ffb622ba 100644
--- a/capsman-download-packages.template.rsc
+++ b/capsman-download-packages.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
diff --git a/capsman-download-packages.wifi.rsc b/capsman-download-packages.wifi.rsc
index 242bb0c8..1aefee63 100644
--- a/capsman-download-packages.wifi.rsc
+++ b/capsman-download-packages.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # download and cleanup packages for CAP installation from CAPsMAN
 # https://rsc.eworm.de/doc/capsman-download-packages.md
diff --git a/capsman-rolling-upgrade.capsman.rsc b/capsman-rolling-upgrade.capsman.rsc
index bb1b17b1..caa768d8 100644
--- a/capsman-rolling-upgrade.capsman.rsc
+++ b/capsman-rolling-upgrade.capsman.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade.capsman
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # upgrade CAPs one after another
 # https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.template.rsc b/capsman-rolling-upgrade.template.rsc
index 919765a0..d38cdda9 100644
--- a/capsman-rolling-upgrade.template.rsc
+++ b/capsman-rolling-upgrade.template.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade%TEMPL%
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # upgrade CAPs one after another
 # https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
diff --git a/capsman-rolling-upgrade.wifi.rsc b/capsman-rolling-upgrade.wifi.rsc
index b0c9d034..330ec04d 100644
--- a/capsman-rolling-upgrade.wifi.rsc
+++ b/capsman-rolling-upgrade.wifi.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: capsman-rolling-upgrade.wifi
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # upgrade CAPs one after another
 # https://rsc.eworm.de/doc/capsman-rolling-upgrade.md
diff --git a/certificate-renew-issued.rsc b/certificate-renew-issued.rsc
index fc8bff32..e78669f4 100644
--- a/certificate-renew-issued.rsc
+++ b/certificate-renew-issued.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # renew locally issued certificates
 # https://rsc.eworm.de/doc/certificate-renew-issued.md
diff --git a/check-health.d/state.rsc b/check-health.d/state.rsc
index bbba31e0..0728b45e 100644
--- a/check-health.d/state.rsc
+++ b/check-health.d/state.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # check for RouterOS health state - state plugin
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-health.d/temperature.rsc b/check-health.d/temperature.rsc
index 64fc6bf3..fdce5dcb 100644
--- a/check-health.d/temperature.rsc
+++ b/check-health.d/temperature.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # check for RouterOS health state - temperature plugin
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-health.d/voltage.rsc b/check-health.d/voltage.rsc
index 1121c23c..67febc2b 100644
--- a/check-health.d/voltage.rsc
+++ b/check-health.d/voltage.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # check for RouterOS health state - voltage plugin
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-health.rsc b/check-health.rsc
index eea31701..51438966 100644
--- a/check-health.rsc
+++ b/check-health.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # check for RouterOS health state
 # https://rsc.eworm.de/doc/check-health.md
diff --git a/check-lte-firmware-upgrade.rsc b/check-lte-firmware-upgrade.rsc
index da268e4c..2087075e 100644
--- a/check-lte-firmware-upgrade.rsc
+++ b/check-lte-firmware-upgrade.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # check for LTE firmware upgrade, send notification
 # https://rsc.eworm.de/doc/check-lte-firmware-upgrade.md
diff --git a/check-perpetual-license.rsc b/check-perpetual-license.rsc
index 4326a2f5..21d63cad 100644
--- a/check-perpetual-license.rsc
+++ b/check-perpetual-license.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2025-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # check perpetual license on CHR
 # https://rsc.eworm.de/doc/check-perpetual-license.md
diff --git a/check-routeros-update.rsc b/check-routeros-update.rsc
index 98edb366..bf3acd98 100644
--- a/check-routeros-update.rsc
+++ b/check-routeros-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch, scheduler
 #
 # check for RouterOS update, send notification and/or install
diff --git a/collect-wireless-mac.capsman.rsc b/collect-wireless-mac.capsman.rsc
index 0ef08b0d..8bb33d87 100644
--- a/collect-wireless-mac.capsman.rsc
+++ b/collect-wireless-mac.capsman.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.local.rsc b/collect-wireless-mac.local.rsc
index 263ef164..9d41d420 100644
--- a/collect-wireless-mac.local.rsc
+++ b/collect-wireless-mac.local.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.template.rsc b/collect-wireless-mac.template.rsc
index 37933250..837726e3 100644
--- a/collect-wireless-mac.template.rsc
+++ b/collect-wireless-mac.template.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/collect-wireless-mac.wifi.rsc b/collect-wireless-mac.wifi.rsc
index 342351b1..d07ff357 100644
--- a/collect-wireless-mac.wifi.rsc
+++ b/collect-wireless-mac.wifi.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=40
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # collect wireless mac adresses in access list
 # https://rsc.eworm.de/doc/collect-wireless-mac.md
diff --git a/contrib/badges.md b/contrib/badges.md
index a23090b5..af4071c4 100644
--- a/contrib/badges.md
+++ b/contrib/badges.md
@@ -1,6 +1,6 @@
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
diff --git a/contrib/telegram.md b/contrib/telegram.md
index ead4ab10..36f7bc4e 100644
--- a/contrib/telegram.md
+++ b/contrib/telegram.md
@@ -4,7 +4,7 @@ Telegram
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/daily-psk.capsman.rsc b/daily-psk.capsman.rsc
index 284d4a11..2cee46ed 100644
--- a/daily-psk.capsman.rsc
+++ b/daily-psk.capsman.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update daily PSK (pre shared key)
 # https://rsc.eworm.de/doc/daily-psk.md
diff --git a/daily-psk.local.rsc b/daily-psk.local.rsc
index 7a07898c..fbf6dafe 100644
--- a/daily-psk.local.rsc
+++ b/daily-psk.local.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update daily PSK (pre shared key)
 # https://rsc.eworm.de/doc/daily-psk.md
diff --git a/daily-psk.template.rsc b/daily-psk.template.rsc
index 5105b63b..81244b86 100644
--- a/daily-psk.template.rsc
+++ b/daily-psk.template.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update daily PSK (pre shared key)
 # https://rsc.eworm.de/doc/daily-psk.md
diff --git a/daily-psk.wifi.rsc b/daily-psk.wifi.rsc
index a2df10e4..636e9f43 100644
--- a/daily-psk.wifi.rsc
+++ b/daily-psk.wifi.rsc
@@ -4,7 +4,7 @@
 #                         Michael Gisbers <michael@gisbers.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update daily PSK (pre shared key)
 # https://rsc.eworm.de/doc/daily-psk.md
diff --git a/dhcp-lease-comment.capsman.rsc b/dhcp-lease-comment.capsman.rsc
index 5427a889..7fd00a09 100644
--- a/dhcp-lease-comment.capsman.rsc
+++ b/dhcp-lease-comment.capsman.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.local.rsc b/dhcp-lease-comment.local.rsc
index e25305e3..7ed6823a 100644
--- a/dhcp-lease-comment.local.rsc
+++ b/dhcp-lease-comment.local.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.template.rsc b/dhcp-lease-comment.template.rsc
index 3fcf6e01..c901de40 100644
--- a/dhcp-lease-comment.template.rsc
+++ b/dhcp-lease-comment.template.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/dhcp-lease-comment.wifi.rsc b/dhcp-lease-comment.wifi.rsc
index 6b752bab..d481def8 100644
--- a/dhcp-lease-comment.wifi.rsc
+++ b/dhcp-lease-comment.wifi.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=60
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update dhcp-server lease comment with infos from access-list
 # https://rsc.eworm.de/doc/dhcp-lease-comment.md
diff --git a/dhcp-to-dns.rsc b/dhcp-to-dns.rsc
index 8c6ee30b..94c7492e 100644
--- a/dhcp-to-dns.rsc
+++ b/dhcp-to-dns.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=20
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # check DHCP leases and add/remove/update DNS entries
 # https://rsc.eworm.de/doc/dhcp-to-dns.md
diff --git a/doc/accesslist-duplicates.md b/doc/accesslist-duplicates.md
index 1b77140f..9eca50d3 100644
--- a/doc/accesslist-duplicates.md
+++ b/doc/accesslist-duplicates.md
@@ -4,7 +4,7 @@ Find and remove access list duplicates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-cloud.md b/doc/backup-cloud.md
index 7d58c769..dcbd0f75 100644
--- a/doc/backup-cloud.md
+++ b/doc/backup-cloud.md
@@ -4,7 +4,7 @@ Upload backup to Mikrotik cloud
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-email.md b/doc/backup-email.md
index 91b49c94..cf334697 100644
--- a/doc/backup-email.md
+++ b/doc/backup-email.md
@@ -4,7 +4,7 @@ Send backup via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-partition.md b/doc/backup-partition.md
index f046bf12..6588cbe3 100644
--- a/doc/backup-partition.md
+++ b/doc/backup-partition.md
@@ -4,7 +4,7 @@ Save configuration to fallback partition
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/backup-upload.md b/doc/backup-upload.md
index 179a2d7f..221cb721 100644
--- a/doc/backup-upload.md
+++ b/doc/backup-upload.md
@@ -4,7 +4,7 @@ Upload backup to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-download-packages.md b/doc/capsman-download-packages.md
index 2d0065bb..c00b7235 100644
--- a/doc/capsman-download-packages.md
+++ b/doc/capsman-download-packages.md
@@ -4,7 +4,7 @@ Download packages for CAP upgrade from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/capsman-rolling-upgrade.md b/doc/capsman-rolling-upgrade.md
index 17169996..85f86289 100644
--- a/doc/capsman-rolling-upgrade.md
+++ b/doc/capsman-rolling-upgrade.md
@@ -4,7 +4,7 @@ Run rolling CAP upgrades from CAPsMAN
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/certificate-renew-issued.md b/doc/certificate-renew-issued.md
index f47f9149..2ed56ec5 100644
--- a/doc/certificate-renew-issued.md
+++ b/doc/certificate-renew-issued.md
@@ -4,7 +4,7 @@ Renew locally issued certificates
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-health.md b/doc/check-health.md
index f389ff24..d67a3dde 100644
--- a/doc/check-health.md
+++ b/doc/check-health.md
@@ -4,7 +4,7 @@ Notify about health state
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-lte-firmware-upgrade.md b/doc/check-lte-firmware-upgrade.md
index 029dabcd..37ca4896 100644
--- a/doc/check-lte-firmware-upgrade.md
+++ b/doc/check-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Notify on LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-perpetual-license.md b/doc/check-perpetual-license.md
index a2d41e79..de91eeb5 100644
--- a/doc/check-perpetual-license.md
+++ b/doc/check-perpetual-license.md
@@ -4,7 +4,7 @@ Check perpetual license on CHR
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/check-routeros-update.md b/doc/check-routeros-update.md
index 52373a16..18ad444a 100644
--- a/doc/check-routeros-update.md
+++ b/doc/check-routeros-update.md
@@ -4,7 +4,7 @@ Notify on RouterOS update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/collect-wireless-mac.md b/doc/collect-wireless-mac.md
index ab4f07ad..9fef2adb 100644
--- a/doc/collect-wireless-mac.md
+++ b/doc/collect-wireless-mac.md
@@ -4,7 +4,7 @@ Collect MAC addresses in wireless access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/daily-psk.md b/doc/daily-psk.md
index 02fd0e39..7ddb4d98 100644
--- a/doc/daily-psk.md
+++ b/doc/daily-psk.md
@@ -4,7 +4,7 @@ Use wireless network with daily psk
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/dhcp-lease-comment.md b/doc/dhcp-lease-comment.md
index b51952f4..2bda80be 100644
--- a/doc/dhcp-lease-comment.md
+++ b/doc/dhcp-lease-comment.md
@@ -4,7 +4,7 @@ Comment DHCP leases with info from access list
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/dhcp-to-dns.md b/doc/dhcp-to-dns.md
index af5b8c6d..3636dfa3 100644
--- a/doc/dhcp-to-dns.md
+++ b/doc/dhcp-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for DHCP leases
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/firmware-upgrade-reboot.md b/doc/firmware-upgrade-reboot.md
index 3cb80875..19fd94cb 100644
--- a/doc/firmware-upgrade-reboot.md
+++ b/doc/firmware-upgrade-reboot.md
@@ -4,7 +4,7 @@ Automatically upgrade firmware and reboot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/fw-addr-lists.md b/doc/fw-addr-lists.md
index 5ad02f13..5b29af7c 100644
--- a/doc/fw-addr-lists.md
+++ b/doc/fw-addr-lists.md
@@ -4,7 +4,7 @@ Download, import and update firewall address-lists
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/global-wait.md b/doc/global-wait.md
index 84d05941..49f53c6a 100644
--- a/doc/global-wait.md
+++ b/doc/global-wait.md
@@ -4,7 +4,7 @@ Wait for global functions and modules
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/gps-track.md b/doc/gps-track.md
index 3b501f77..dc80b9f7 100644
--- a/doc/gps-track.md
+++ b/doc/gps-track.md
@@ -4,7 +4,7 @@ Send GPS position to server
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/hotspot-to-wpa.md b/doc/hotspot-to-wpa.md
index dacee672..22d1dd13 100644
--- a/doc/hotspot-to-wpa.md
+++ b/doc/hotspot-to-wpa.md
@@ -4,7 +4,7 @@ Use WPA network with hotspot credentials
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ip-addr-bridge.md b/doc/ip-addr-bridge.md
index 079c5f02..1868bc70 100644
--- a/doc/ip-addr-bridge.md
+++ b/doc/ip-addr-bridge.md
@@ -4,7 +4,7 @@ Manage IP addresses with bridge status
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipsec-to-dns.md b/doc/ipsec-to-dns.md
index ad666790..cf4abeeb 100644
--- a/doc/ipsec-to-dns.md
+++ b/doc/ipsec-to-dns.md
@@ -4,7 +4,7 @@ Create DNS records for IPSec peers
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ipv6-update.md b/doc/ipv6-update.md
index 01922d24..792f97e9 100644
--- a/doc/ipv6-update.md
+++ b/doc/ipv6-update.md
@@ -4,7 +4,7 @@ Update configuration on IPv6 prefix change
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/lease-script.md b/doc/lease-script.md
index eab7c76b..6bcf7e13 100644
--- a/doc/lease-script.md
+++ b/doc/lease-script.md
@@ -4,7 +4,7 @@ Run other scripts on DHCP lease
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/leds-mode.md b/doc/leds-mode.md
index 5e2ffc13..84098d53 100644
--- a/doc/leds-mode.md
+++ b/doc/leds-mode.md
@@ -4,7 +4,7 @@ Manage LEDs dark mode
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/log-forward.md b/doc/log-forward.md
index 25991fba..7bee120f 100644
--- a/doc/log-forward.md
+++ b/doc/log-forward.md
@@ -4,7 +4,7 @@ Forward log messages via notification
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-to.md b/doc/mod/bridge-port-to.md
index 18127560..e0e75b20 100644
--- a/doc/mod/bridge-port-to.md
+++ b/doc/mod/bridge-port-to.md
@@ -4,7 +4,7 @@ Manage ports in bridge
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/bridge-port-vlan.md b/doc/mod/bridge-port-vlan.md
index b6065cb0..a8593fb2 100644
--- a/doc/mod/bridge-port-vlan.md
+++ b/doc/mod/bridge-port-vlan.md
@@ -4,7 +4,7 @@ Manage VLANs on bridge ports
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/inspectvar.md b/doc/mod/inspectvar.md
index fcbc3afa..28032651 100644
--- a/doc/mod/inspectvar.md
+++ b/doc/mod/inspectvar.md
@@ -4,7 +4,7 @@ Inspect variables
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/ipcalc.md b/doc/mod/ipcalc.md
index 94d11fe7..c393ec3a 100644
--- a/doc/mod/ipcalc.md
+++ b/doc/mod/ipcalc.md
@@ -4,7 +4,7 @@ IP address calculation
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-email.md b/doc/mod/notification-email.md
index 126e9284..c45e917c 100644
--- a/doc/mod/notification-email.md
+++ b/doc/mod/notification-email.md
@@ -4,7 +4,7 @@ Send notifications via e-mail
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-gotify.md b/doc/mod/notification-gotify.md
index 097a81c9..7482ba72 100644
--- a/doc/mod/notification-gotify.md
+++ b/doc/mod/notification-gotify.md
@@ -4,7 +4,7 @@ Send notifications via Gotify
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-matrix.md b/doc/mod/notification-matrix.md
index 4f92d8b7..60001416 100644
--- a/doc/mod/notification-matrix.md
+++ b/doc/mod/notification-matrix.md
@@ -4,7 +4,7 @@ Send notifications via Matrix
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-ntfy.md b/doc/mod/notification-ntfy.md
index 5555c534..b3534017 100644
--- a/doc/mod/notification-ntfy.md
+++ b/doc/mod/notification-ntfy.md
@@ -4,7 +4,7 @@ Send notifications via Ntfy
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/notification-telegram.md b/doc/mod/notification-telegram.md
index 22ab0d71..1d2cec8c 100644
--- a/doc/mod/notification-telegram.md
+++ b/doc/mod/notification-telegram.md
@@ -4,7 +4,7 @@ Send notifications via Telegram
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/scriptrunonce.md b/doc/mod/scriptrunonce.md
index 66b181fa..e960d767 100644
--- a/doc/mod/scriptrunonce.md
+++ b/doc/mod/scriptrunonce.md
@@ -4,7 +4,7 @@ Download script and run it once
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mod/ssh-keys-import.md b/doc/mod/ssh-keys-import.md
index 434caa51..c2d3c951 100644
--- a/doc/mod/ssh-keys-import.md
+++ b/doc/mod/ssh-keys-import.md
@@ -4,7 +4,7 @@ Import ssh keys for public key authentication
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/mode-button.md b/doc/mode-button.md
index 367b7fa0..46a66b0c 100644
--- a/doc/mode-button.md
+++ b/doc/mode-button.md
@@ -4,7 +4,7 @@ Mode button with multiple presses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/netwatch-dns.md b/doc/netwatch-dns.md
index 75933645..c80b819b 100644
--- a/doc/netwatch-dns.md
+++ b/doc/netwatch-dns.md
@@ -4,7 +4,7 @@ Manage DNS and DoH servers from netwatch
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/netwatch-notify.md b/doc/netwatch-notify.md
index b2eae8da..70d6fe03 100644
--- a/doc/netwatch-notify.md
+++ b/doc/netwatch-notify.md
@@ -4,7 +4,7 @@ Notify on host up and down
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ospf-to-leds.md b/doc/ospf-to-leds.md
index 1bb503b4..aa660071 100644
--- a/doc/ospf-to-leds.md
+++ b/doc/ospf-to-leds.md
@@ -4,7 +4,7 @@ Visualize OSPF state via LEDs
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/packages-update.md b/doc/packages-update.md
index e3942e0b..73354490 100644
--- a/doc/packages-update.md
+++ b/doc/packages-update.md
@@ -4,7 +4,7 @@ Manage system update
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/ppp-on-up.md b/doc/ppp-on-up.md
index 3459ea12..e92601a2 100644
--- a/doc/ppp-on-up.md
+++ b/doc/ppp-on-up.md
@@ -4,7 +4,7 @@ Run scripts on ppp connection
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-action.md b/doc/sms-action.md
index 5a0e07df..af44ae46 100644
--- a/doc/sms-action.md
+++ b/doc/sms-action.md
@@ -4,7 +4,7 @@ Act on received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/sms-forward.md b/doc/sms-forward.md
index c5a50489..5f038926 100644
--- a/doc/sms-forward.md
+++ b/doc/sms-forward.md
@@ -4,7 +4,7 @@ Forward received SMS
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/super-mario-theme.md b/doc/super-mario-theme.md
index a3f6277d..badb1c56 100644
--- a/doc/super-mario-theme.md
+++ b/doc/super-mario-theme.md
@@ -4,7 +4,7 @@ Play Super Mario theme
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/telegram-chat.md b/doc/telegram-chat.md
index c6f565ad..51cd3d6a 100644
--- a/doc/telegram-chat.md
+++ b/doc/telegram-chat.md
@@ -4,7 +4,7 @@ Chat with your router and send commands via Telegram bot
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/unattended-lte-firmware-upgrade.md b/doc/unattended-lte-firmware-upgrade.md
index 1df34c0e..3e4e2d4b 100644
--- a/doc/unattended-lte-firmware-upgrade.md
+++ b/doc/unattended-lte-firmware-upgrade.md
@@ -4,7 +4,7 @@ Install LTE firmware upgrade
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-gre-address.md b/doc/update-gre-address.md
index dd047c23..64c61f21 100644
--- a/doc/update-gre-address.md
+++ b/doc/update-gre-address.md
@@ -4,7 +4,7 @@ Update GRE configuration with dynamic addresses
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/doc/update-tunnelbroker.md b/doc/update-tunnelbroker.md
index 7c2ca35b..342b1a1b 100644
--- a/doc/update-tunnelbroker.md
+++ b/doc/update-tunnelbroker.md
@@ -4,7 +4,7 @@ Update tunnelbroker configuration
 [![GitHub stars](https://img.shields.io/github/stars/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=red)](https://github.com/eworm-de/routeros-scripts/stargazers)
 [![GitHub forks](https://img.shields.io/github/forks/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=green)](https://github.com/eworm-de/routeros-scripts/network)
 [![GitHub watchers](https://img.shields.io/github/watchers/eworm-de/routeros-scripts?logo=GitHub&style=flat&color=blue)](https://github.com/eworm-de/routeros-scripts/watchers)
-[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.17-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
+[![required RouterOS version](https://img.shields.io/badge/RouterOS-7.19-yellow?style=flat)](https://mikrotik.com/download/changelogs/)
 [![Telegram group @routeros_scripts](https://img.shields.io/badge/Telegram-%40routeros__scripts-%2326A5E4?logo=telegram&style=flat)](https://t.me/routeros_scripts)
 [![donate with PayPal](https://img.shields.io/badge/Like_it%3F-Donate!-orange?logo=githubsponsors&logoColor=orange&style=flat)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
 
diff --git a/firmware-upgrade-reboot.rsc b/firmware-upgrade-reboot.rsc
index 93a264fc..7c64909d 100644
--- a/firmware-upgrade-reboot.rsc
+++ b/firmware-upgrade-reboot.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # install firmware upgrade, and reboot
 # https://rsc.eworm.de/doc/firmware-upgrade-reboot.md
diff --git a/fw-addr-lists.rsc b/fw-addr-lists.rsc
index a9b3daf4..ac15c652 100644
--- a/fw-addr-lists.rsc
+++ b/fw-addr-lists.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # download, import and update firewall address-lists
 # https://rsc.eworm.de/doc/fw-addr-lists.md
diff --git a/global-wait.rsc b/global-wait.rsc
index 5b5f5e12..a3b9fad9 100644
--- a/global-wait.rsc
+++ b/global-wait.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # wait for global-functions to finish
 # https://rsc.eworm.de/doc/global-wait.md
diff --git a/gps-track.rsc b/gps-track.rsc
index dae7d521..ce55c049 100644
--- a/gps-track.rsc
+++ b/gps-track.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch
 #
 # track gps data by sending json data to http server
diff --git a/hotspot-to-wpa-cleanup.capsman.rsc b/hotspot-to-wpa-cleanup.capsman.rsc
index 99ff0029..35275313 100644
--- a/hotspot-to-wpa-cleanup.capsman.rsc
+++ b/hotspot-to-wpa-cleanup.capsman.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa-cleanup.template.rsc b/hotspot-to-wpa-cleanup.template.rsc
index 113c1bb2..398f194f 100644
--- a/hotspot-to-wpa-cleanup.template.rsc
+++ b/hotspot-to-wpa-cleanup.template.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa-cleanup.wifi.rsc b/hotspot-to-wpa-cleanup.wifi.rsc
index 1a7ef364..17b9e545 100644
--- a/hotspot-to-wpa-cleanup.wifi.rsc
+++ b/hotspot-to-wpa-cleanup.wifi.rsc
@@ -4,7 +4,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: lease-script, order=80
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, hotspot
 #
 # manage and clean up private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa.capsman.rsc b/hotspot-to-wpa.capsman.rsc
index 0751f8e5..60945a1a 100644
--- a/hotspot-to-wpa.capsman.rsc
+++ b/hotspot-to-wpa.capsman.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa.template.rsc b/hotspot-to-wpa.template.rsc
index ba044a09..7c56cc10 100644
--- a/hotspot-to-wpa.template.rsc
+++ b/hotspot-to-wpa.template.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
diff --git a/hotspot-to-wpa.wifi.rsc b/hotspot-to-wpa.wifi.rsc
index 569d7827..68ed4c2e 100644
--- a/hotspot-to-wpa.wifi.rsc
+++ b/hotspot-to-wpa.wifi.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, hotspot
 #
 # add private WPA passphrase after hotspot login
diff --git a/ipsec-to-dns.rsc b/ipsec-to-dns.rsc
index 02391fe8..a08405fb 100644
--- a/ipsec-to-dns.rsc
+++ b/ipsec-to-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, ipsec
 #
 # and add/remove/update DNS entries from IPSec mode-config
diff --git a/ipv6-update.rsc b/ipv6-update.rsc
index a4da6516..c87410cc 100644
--- a/ipv6-update.rsc
+++ b/ipv6-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update firewall and dns settings on IPv6 prefix change
 # https://rsc.eworm.de/doc/ipv6-update.md
diff --git a/lease-script.rsc b/lease-script.rsc
index 1b7935b8..991e6fac 100644
--- a/lease-script.rsc
+++ b/lease-script.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # run scripts on DHCP lease
 # https://rsc.eworm.de/doc/lease-script.md
diff --git a/log-forward.rsc b/log-forward.rsc
index ed2226f0..4d3ac813 100644
--- a/log-forward.rsc
+++ b/log-forward.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # forward log messages via notification
 # https://rsc.eworm.de/doc/log-forward.md
diff --git a/mod/bridge-port-to.rsc b/mod/bridge-port-to.rsc
index c4d0e0a9..d6516ef9 100644
--- a/mod/bridge-port-to.rsc
+++ b/mod/bridge-port-to.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # reset bridge ports to default bridge
 # https://rsc.eworm.de/doc/mod/bridge-port-to.md
diff --git a/mod/bridge-port-vlan.rsc b/mod/bridge-port-vlan.rsc
index 15e7afa5..2f9b40b9 100644
--- a/mod/bridge-port-vlan.rsc
+++ b/mod/bridge-port-vlan.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # manage VLANs on bridge ports
 # https://rsc.eworm.de/doc/mod/bridge-port-vlan.md
diff --git a/mod/inspectvar.rsc b/mod/inspectvar.rsc
index cc745b1a..f4b59fbd 100644
--- a/mod/inspectvar.rsc
+++ b/mod/inspectvar.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # inspect variables
 # https://rsc.eworm.de/doc/mod/inspectvar.md
diff --git a/mod/ipcalc.rsc b/mod/ipcalc.rsc
index 2a6fd1b5..8db9dade 100644
--- a/mod/ipcalc.rsc
+++ b/mod/ipcalc.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # ip address calculation
 # https://rsc.eworm.de/doc/mod/ipcalc.md
diff --git a/mod/notification-email.rsc b/mod/notification-email.rsc
index 832174e0..b14e1868 100644
--- a/mod/notification-email.rsc
+++ b/mod/notification-email.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, email, scheduler
 #
 # send notifications via e-mail
diff --git a/mod/notification-gotify.rsc b/mod/notification-gotify.rsc
index e919cf42..56face59 100644
--- a/mod/notification-gotify.rsc
+++ b/mod/notification-gotify.rsc
@@ -4,7 +4,7 @@
 #                         Leonardo David Monteiro <leo@cub3.xyz>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch, scheduler
 #
 # send notifications via Gotify (gotify.net)
diff --git a/mod/notification-matrix.rsc b/mod/notification-matrix.rsc
index 0dacf836..c737fa34 100644
--- a/mod/notification-matrix.rsc
+++ b/mod/notification-matrix.rsc
@@ -4,7 +4,7 @@
 #                         Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch, scheduler
 #
 # send notifications via Matrix
diff --git a/mod/notification-ntfy.rsc b/mod/notification-ntfy.rsc
index cc48e748..6637517f 100644
--- a/mod/notification-ntfy.rsc
+++ b/mod/notification-ntfy.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch, scheduler
 #
 # send notifications via Ntfy (ntfy.sh)
diff --git a/mod/notification-telegram.rsc b/mod/notification-telegram.rsc
index f75d2fc4..ce9dc3f1 100644
--- a/mod/notification-telegram.rsc
+++ b/mod/notification-telegram.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch, scheduler
 #
 # send notifications via Telegram
diff --git a/mod/scriptrunonce.rsc b/mod/scriptrunonce.rsc
index 39067d95..714f2773 100644
--- a/mod/scriptrunonce.rsc
+++ b/mod/scriptrunonce.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # download script and run it once
 # https://rsc.eworm.de/doc/mod/scriptrunonce.md
diff --git a/mod/ssh-keys-import.rsc b/mod/ssh-keys-import.rsc
index 1bb283d4..d1cc4fa3 100644
--- a/mod/ssh-keys-import.rsc
+++ b/mod/ssh-keys-import.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # import ssh keys for public key authentication
 # https://rsc.eworm.de/doc/mod/ssh-keys-import.md
diff --git a/mode-button.rsc b/mode-button.rsc
index 6dc1e43e..343878d5 100644
--- a/mode-button.rsc
+++ b/mode-button.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, scheduler
 #
 # act on multiple mode and reset button presses
diff --git a/netwatch-dns.rsc b/netwatch-dns.rsc
index 06a15f95..9531d4ad 100644
--- a/netwatch-dns.rsc
+++ b/netwatch-dns.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2022-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch
 #
 # monitor and manage dns/doh with netwatch
diff --git a/netwatch-notify.rsc b/netwatch-notify.rsc
index 46a10ee0..d9ab5446 100644
--- a/netwatch-notify.rsc
+++ b/netwatch-notify.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # monitor netwatch and send notifications
 # https://rsc.eworm.de/doc/netwatch-notify.md
diff --git a/ospf-to-leds.rsc b/ospf-to-leds.rsc
index 73a70c8b..784fcdd8 100644
--- a/ospf-to-leds.rsc
+++ b/ospf-to-leds.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2020-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # visualize ospf instance state via leds
 # https://rsc.eworm.de/doc/ospf-to-leds.md
diff --git a/packages-update.rsc b/packages-update.rsc
index 960e07ca..304a3683 100644
--- a/packages-update.rsc
+++ b/packages-update.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2019-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, scheduler
 #
 # download packages and reboot for installation
diff --git a/ppp-on-up.rsc b/ppp-on-up.rsc
index 231d3d2d..79b83861 100644
--- a/ppp-on-up.rsc
+++ b/ppp-on-up.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # run scripts on ppp up
 # https://rsc.eworm.de/doc/ppp-on-up.md
diff --git a/sms-action.rsc b/sms-action.rsc
index 9750e967..12d4cc20 100644
--- a/sms-action.rsc
+++ b/sms-action.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # run action on received SMS
 # https://rsc.eworm.de/doc/sms-action.md
diff --git a/sms-forward.rsc b/sms-forward.rsc
index d4570ea1..9f3d2558 100644
--- a/sms-forward.rsc
+++ b/sms-forward.rsc
@@ -4,7 +4,7 @@
 #                         Anatoly Bubenkov <bubenkoff@gmail.com>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # forward SMS to e-mail
 # https://rsc.eworm.de/doc/sms-forward.md
diff --git a/telegram-chat.rsc b/telegram-chat.rsc
index 53ab6c66..c0fa5c16 100644
--- a/telegram-chat.rsc
+++ b/telegram-chat.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2023-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch
 #
 # use Telegram to chat with your Router and send commands
diff --git a/unattended-lte-firmware-upgrade.rsc b/unattended-lte-firmware-upgrade.rsc
index 16d6f47d..c2471a81 100644
--- a/unattended-lte-firmware-upgrade.rsc
+++ b/unattended-lte-firmware-upgrade.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2018-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, scheduler
 #
 # schedule unattended lte firmware upgrade
diff --git a/update-gre-address.rsc b/update-gre-address.rsc
index 15cfc143..b8f0134f 100644
--- a/update-gre-address.rsc
+++ b/update-gre-address.rsc
@@ -3,7 +3,7 @@
 # Copyright (c) 2013-2026 Christian Hesse <mail@eworm.de>
 # https://rsc.eworm.de/COPYING.md
 #
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 #
 # update gre interface remote address with dynamic address from
 # ipsec remote peer
diff --git a/update-tunnelbroker.rsc b/update-tunnelbroker.rsc
index f9eaf247..215dafa0 100644
--- a/update-tunnelbroker.rsc
+++ b/update-tunnelbroker.rsc
@@ -5,7 +5,7 @@
 # https://rsc.eworm.de/COPYING.md
 #
 # provides: ppp-on-up
-# requires RouterOS, version=7.17
+# requires RouterOS, version=7.19
 # requires device-mode, fetch
 #
 # update local address of tunnelbroker interface

From d0f50142f5774b73a2dc0808e0753ead033f2bf4 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 5 Feb 2026 08:18:00 +0100
Subject: [PATCH 72/75] check-certificates: show days valid in details

---
 check-certificates.rsc | 1 +
 1 file changed, 1 insertion(+)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index e10c82ae..470f99cb 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -152,6 +152,7 @@
       [ $FormatLine "Fingerprint" ($CertVal->"fingerprint") ] . "\n" . \
       [ $IfThenElse ([ :len ($CertVal->"ca") ] > 0) [ $FormatLine "Issuer" ($CertVal->"ca") ] [ $FormatLine "Issuer chain" [ $FormatCertChain $Cert ] ] ] . "\n" . \
       "Validity:\n" . \
+      [ $FormatLine "    days" ($CertVal->"days-valid") ] . "\n" . \
       [ $FormatLine "    from" ($CertVal->"invalid-before") ] . "\n" . \
       [ $FormatLine "    to" ($CertVal->"invalid-after") ] . "\n" . \
       [ $FormatLine "Expires in" [ $IfThenElse (($CertVal->"expired") = true) "expired" [ $FormatExpire ($CertVal->"expires-after") ] ] ]);

From 68ed97205cc2e0457cd9bfe08823052c65fe901a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 5 Feb 2026 08:19:50 +0100
Subject: [PATCH 73/75] check-certificates: update wording, indent output

---
 check-certificates.rsc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 470f99cb..0122122a 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -155,7 +155,7 @@
       [ $FormatLine "    days" ($CertVal->"days-valid") ] . "\n" . \
       [ $FormatLine "    from" ($CertVal->"invalid-before") ] . "\n" . \
       [ $FormatLine "    to" ($CertVal->"invalid-after") ] . "\n" . \
-      [ $FormatLine "Expires in" [ $IfThenElse (($CertVal->"expired") = true) "expired" [ $FormatExpire ($CertVal->"expires-after") ] ] ]);
+      [ $FormatLine "    time left" [ $IfThenElse (($CertVal->"expired") = true) "expired" [ $FormatExpire ($CertVal->"expires-after") ] ] ]);
   }
 
   :if ([ $ScriptLock $ScriptName ] = false) do={

From d8632ad3704037565eac95a56c84d4b3439fbab9 Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Thu, 19 Feb 2026 08:57:01 +0100
Subject: [PATCH 74/75] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index a9840ab4..95e6307f 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -38,6 +38,7 @@ Add yourself to the list,
 * Alex Maier
 * Andrea Ruffini Perico
 * Andrew Cox
+* Benjamin Newman
 * Christoph Boss (@Kampfwurst)
 * Daniel Ziegenberg (@ziegenberg)
 * Devin Dean (@dd2594gh)

From a3c815c2ca64ee8fd4e7ce3f53f59b353a1f957a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 23 Feb 2026 08:56:29 +0100
Subject: [PATCH 75/75] update list of contributors

---
 CONTRIBUTIONS.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CONTRIBUTIONS.md b/CONTRIBUTIONS.md
index 95e6307f..1bce0fa1 100644
--- a/CONTRIBUTIONS.md
+++ b/CONTRIBUTIONS.md
@@ -39,6 +39,7 @@ Add yourself to the list,
 * Andrea Ruffini Perico
 * Andrew Cox
 * Benjamin Newman
+* Christian Werner
 * Christoph Boss (@Kampfwurst)
 * Daniel Ziegenberg (@ziegenberg)
 * Devin Dean (@dd2594gh)